
Security News
Feross on TBPN: Socket's Series C and the State of Software Supply Chain Security
Feross Aboukhadijeh joins TBPN to discuss Socket's $60M Series C, 500%+ ARR growth, AI's impact on open source, and the rise in supply chain attacks.
@samooth/open-codex
Advanced tools
Lightweight coding agent that runs in your terminal
npm i -g @samooth/open-codex
Important Note: This is a fork of the original OpenAI Codex CLI with expanded model support and changed installation instructions. The main differences in this fork are:
- Support for multiple AI providers (OpenAI, Gemini, OpenRouter, Ollama, xAI, DeepSeek, Hugging Face)
- Uses the Chat Completion API instead of the Responses API which allows us to support any openai compatible provider and model.
- All other functionality remains similar to the original project
- You can install this fork globally with
npm i -g @samooth/open-codex
Codex CLI is an experimental project under active development. It is not yet stable, may contain bugs, incomplete features, or undergo breaking changes. We're building it in the open with the community and welcome:
Help us improve by filing issues or submitting PRs (see the section below for how to contribute)!
Install globally:
npm install -g @samooth/open-codex
Next, set your API key as an environment variable (shown here with OpenAI, but other providers are supported):
export OPENAI_API_KEY="your-api-key-here"
Note: This command sets the key only for your current terminal session. To make it permanent, add the
exportline to your shell's configuration file (e.g.,~/.zshrc).Tip: You can also place your API key into a
.envfile at the root of your project:OPENAI_API_KEY=your-api-key-hereThe CLI will automatically load variables from
.env(viadotenv/config).
Run interactively:
open-codex
Or, run with a prompt as input (and optionally in Full Auto mode):
open-codex "explain this codebase to me"
open-codex --approval-mode full-auto "create the fanciest todo-list app"
That's it – Codex will scaffold a file, run it inside a sandbox, install any missing dependencies, and show you the live result. Approve the changes and they'll be committed to your working directory.
Codex CLI is built for developers who already live in the terminal and want ChatGPT‑level reasoning plus the power to actually run code, manipulate files, and iterate – all under version control. In short, it's chat‑driven development that understands and executes your repo.
<plan> blocks in the UI thinking state 📋/config ⚙️And it's fully open-source so you can see and contribute to how it develops!
Codex lets you decide how much autonomy the agent receives and auto-approval policy via the
--approval-mode flag (or the interactive onboarding prompt):
| Mode | What the agent may do without asking | Still requires approval |
|---|---|---|
| Suggest (default) | • Read any file in the repo | • All file writes/patches • All shell/Bash commands |
| Auto Edit | • Read and apply‑patch writes to files | • All shell/Bash commands |
| Full Auto | • Read/write files • Execute shell commands | – |
In Full Auto every command is run network‑disabled and confined to the current working directory (plus temporary files) for defense‑in‑depth. Codex will also show a warning/confirmation if you start in auto‑edit or full‑auto while the directory is not tracked by Git, so you always have a safety net.
If you're unsure about what the agent might do, you can use the --dry-run flag. In this mode, Codex will simulate all operations (file writes, shell commands, etc.) and show you exactly what it would have done without actually touching your filesystem or executing any code.
open-codex --dry-run "Refactor all components to TypeScript"
The hardening mechanism Codex uses depends on your OS:
macOS 12+ – commands are wrapped with Apple Seatbelt (sandbox-exec).
$PWD, $TMPDIR, ~/.codex, etc.).curl somewhere it will fail.Linux – there is no sandboxing by default.
We recommend using Docker for sandboxing, where Codex launches itself inside a minimal
container image and mounts your repo read/write at the same path. A
custom iptables/ipset firewall script denies all egress except the
OpenAI API. This gives you deterministic, reproducible runs without needing
root on the host. You can use the run_in_container.sh script to set up the sandbox.
| Requirement | Details |
|---|---|
| Operating systems | macOS 12+, Ubuntu 20.04+/Debian 10+, or Windows 11 via WSL2 |
| Node.js | 22 or newer (LTS recommended) |
| Git (optional, recommended) | 2.23+ for built‑in PR helpers |
| Lynx (optional) | Required for web searching and Snyk auditing |
| RAM | 4‑GB minimum (8‑GB recommended) |
Never run
sudo npm install -g; fix npm permissions instead.
| Command | Purpose | Example |
|---|---|---|
open-codex | Interactive REPL | codex |
open-codex "…" | Initial prompt for interactive REPL | codex "fix lint errors" |
open-codex "…" | Auto-enabled quiet mode if non-TTY | codex "explain utils.ts" |
open-codex completion <bash|zsh|fish> | Print shell completion script | codex completion bash |
Inside the chat, use slash commands like /help, /model, /approval, /config, /history, and /clear.
Key keyboard shortcuts:
Ctrl+E: Open the current prompt in your system's $EDITOR (e.g., Vim, Nano) for easier multi-line editing.Ctrl+J: Insert a newline in the chat input.@: Trigger file path autocomplete.Key flags:
--provider / -p: AI provider to use.--model / -m: Model to use for completions.--approval-mode / -a: Override the approval policy.--dry-run: Preview changes without applying them.--quiet / -q: Non-interactive mode.Codex merges Markdown instructions in this order:
~/.codex/instructions.md – personal global guidancecodex.md at repo root – shared project notescodex.md in cwd – sub‑package specifics.codex/memory.md – persistent project-specific facts learned by the agent.Disable with --no-project-doc or CODEX_DISABLE_PROJECT_DOC=1.
Run Codex head‑less in pipelines. Codex will automatically detect if it's running in a non-TTY environment and enable quiet mode if a prompt is provided.
Prompts can be passed as command-line arguments or piped via stdin:
echo "explain this project" | open-codex
Example GitHub Action step:
- name: Update changelog via Codex
run: |
npm install -g @samooth/open-codex
export OPENAI_API_KEY="${{ secrets.OPENAI_KEY }}"
open-codex -a auto-edit "update CHANGELOG for next release"
You can also explicitly enable it with the --quiet flag or by setting CODEX_QUIET_MODE=1.
Setting the environment variable DEBUG=true prints full API request and response details:
DEBUG=true open-codex
You can integrate OpenCodex into your favorite text editor for a seamless workflow.
You can hit Ctrl+E at any time while typing in the chat to open your current prompt in your system's default editor (defined by the $EDITOR environment variable, like Vim, Nano, or VS Code). This is ideal for writing long instructions or pasting large blocks of code.
Below are a few bite‑size examples you can copy‑paste. Replace the text in quotes with your own task. See the prompting guide for more tips and usage patterns.
| ✨ | What you type | What happens |
|---|---|---|
| 1 | codex "Refactor the Dashboard component to React Hooks" | Codex rewrites the class component, runs npm test, and shows the diff. |
| 2 | codex "Generate SQL migrations for adding a users table" | Infers your ORM, creates migration files, and runs them in a sandboxed DB. |
| 3 | codex "Write unit tests for utils/date.ts" | Generates tests, executes them, and iterates until they pass. |
| 4 | codex "Bulk‑rename *.jpeg → *.jpg with git mv" | Safely renames files and updates imports/usages. |
| 5 | codex "Explain what this regex does: ^(?=.*[A-Z]).{8,}$" | Outputs a step‑by‑step human explanation. |
| 6 | codex "Carefully review this repo, and propose 3 high impact well-scoped PRs" | Suggests impactful PRs in the current codebase. |
| 7 | codex "Look for vulnerabilities and create a security review report" | Finds and explains security bugs. |
npm install -g @samooth/open-codex
# or
yarn global add @samooth/open-codex
# Clone the repository and navigate to the CLI package
git clone https://github.com/ymichael/open-codex.git
cd open-codex/codex-cli
# Install dependencies and build
npm install
npm run build
# Get the usage and the options
node ./dist/cli.js --help
# Run the locally‑built CLI directly
node ./dist/cli.js
# Or link the command globally for convenience
npm link
Codex looks for config files in ~/.codex/ (either YAML or JSON format). The configuration is validated using Zod to ensure correctness.
// ~/.codex/config.json
{
"model": "o4-mini", // Default model
"provider": "openai", // Default provider
"approvalMode": "suggest", // or auto-edit, full-auto
"fullAutoErrorMode": "ask-user", // or ignore-and-continue
"memory": {
"enabled": true
}
}
You can also define custom instructions:
# ~/.codex/instructions.md
- Always respond with emojis
- Only use git commands if I explicitly mention you should
This fork of Codex supports multiple AI providers:
To use a different provider, set the provider key in your config file:
{
"provider": "gemini"
}
OR use the --provider flag. eg. codex --provider gemini
When using Ollama, ensure your server is running (ollama serve) and you have pulled the desired model (ollama pull llama3).
http://localhost:11434/v1. You can override this by setting the OLLAMA_BASE_URL environment variable or by adding it to your config.json:{
"provider": "ollama",
"providers": {
"ollama": {
"baseURL": "http://192.168.1.100:11434/v1"
}
}
}
--model flag or in your config:open-codex --provider ollama --model mistral "Explain this project"
Codex can index your codebase to provide better context during chat. This allows the agent to "find" relevant code snippets even if they aren't explicitly pinned or open.
/index: Run this command inside the chat to start indexing your current directory..codex/.text-embedding-3-smalltext-embedding-004nomic-embed-textYou can override the embedding model in your config.json:
{
"embeddingModel": "text-embedding-004"
}
Inside the interactive chat, you can use several slash commands to manage your session:
| Command | Description |
|---|---|
/help | Show the help overlay with all available commands and shortcuts. |
/model | Open the model picker to switch the current AI model. |
/index | Index the current codebase for semantic search. |
/pin <path> | Pin a file to the context window (it will always be included in the prompt). |
/unpin <path> | Unpin a file from the context window. |
/approval | Change the current approval mode (Suggest, Auto Edit, Full Auto). |
/config | Toggle settings like Dry Run and Debug mode. |
/history | View and select from your prompt history. |
/memory | View and manage the agent's persistent project memory. |
/theme | Change the UI theme (Default, Nord, One Dark, Synthwave, Gruvbox, Cyberpunk). |
/clear | Clear the chat history (start a fresh session). |
File pinning allows you to ensure that specific files are always included in the agent's context window, regardless of the conversation length. This is useful for keeping core documentation, API definitions, or complex logic always "top of mind" for the agent.
/pin src/main.ts/unpin src/main.tsPinned files are persisted in your ~/.codex/config.json and will be loaded in every session.
For many providers, you can use the /models command within the interactive chat to see a list of available models and switch between them. For the Hugging Face provider, this dynamically fetches the latest tool-use compatible models directly from the Hugging Face Hub.
Here's a list of all the providers and their default models:
| Provider | Environment Variable Required | Default Agentic Model | Default Full Context Model |
|---|---|---|---|
| openai | OPENAI_API_KEY | o4-mini | o3 |
| gemini | GEMINI_API_KEY | gemini-2.5-flash | gemini-2.5-flash |
| openrouter | OPENROUTER_API_KEY | openai/o4-mini | openai/o3 |
| ollama | Not required | User must specify | User must specify |
| xai | XAI_API_KEY | grok-3-mini-beta | grok-3-beta |
| deepseek | DS_API_KEY | deepseek-chat | deepseek-reasoner |
| hf | HF_API_KEY | moonshotai/Kimi-K2.5 | moonshotai/Kimi-K2.5 |
export GEMINI_API_KEY="your-gemini-api-key-here"
This is a fork of the original OpenAI Codex CLI project with expanded support for multiple AI providers beyond just OpenAI. The installation package is also different (open-codex instead of @openai/codex), but the core functionality remains similar.
Codex always runs in a sandbox first. If a proposed command or file change looks suspicious you can simply answer n when prompted and nothing happens to your working tree. For extra safety, use the --dry-run flag.
Not directly. It requires Windows Subsystem for Linux (WSL2) – Codex has been tested on macOS and Linux with Node ≥ 22.
The default is o4-mini, but pass --model gpt-4o or set model: gpt-4o in your config file to override.
You can also use models from other providers like Gemini, DeepSeek, and Hugging Face. See the Configuration section for more details.
Note: Codex CLI does not currently support OpenAI organizations with Zero Data Retention (ZDR) enabled.
If your OpenAI organization has Zero Data Retention enabled, you may encounter errors such as:
OpenAI rejected the request. Error details: Status: 400, Code: unsupported_parameter, Type: invalid_request_error, Message: 400 Previous response cannot be used for this organization due to Zero Data Retention.
Why?
store:true to enable internal reasoning steps.store:true, so requests will fail.What can I do?
This project is under active development and the code will likely change pretty significantly. We'll update this message once that's complete!
More broadly we welcome contributions – whether you are opening your very first pull request or you're a seasoned maintainer. At the same time we care about reliability and long‑term maintainability, so the bar for merging code is intentionally high. The guidelines below spell out what "high‑quality" means in practice and should make the whole process transparent and friendly.
Create a topic branch from main – e.g. feat/interactive-prompt.
Keep your changes focused. Multiple unrelated fixes should be opened as separate PRs.
Use npm run test:watch during development for super‑fast feedback.
We use Vitest for unit tests, ESLint + Prettier for style, and TypeScript for type‑checking.
Before pushing, run the full test/type/lint suite:
npm test && npm run lint && npm run typecheck
# Watch mode (tests rerun on change)
npm run test:watch
# Type‑check without emitting files
npm run typecheck
# Automatically fix lint + prettier issues
npm run lint:fix
npm run format:fix
codex --help), or relevant example projects.npm test && npm run lint && npm run typecheck). CI failures that could have been caught locally slow down the process.main and that you have resolved merge conflicts.If you run into problems setting up the project, would like feedback on an idea, or just want to say hi – please open a Discussion or jump into the relevant issue. We are happy to help.
Together we can make Codex CLI an incredible tool. Happy hacking! :rocket:
codexTo publish a new version of the CLI, run the release scripts defined in codex-cli/package.json:
codex-cli directorygit checkout -b bump-versionCLI_VERSION to current datetime: npm run release:versiongit add codex-cli/src/utils/session.ts codex-cli/package.json
git commit -s -m "chore(release): codex-cli v$(node -p \"require('./codex-cli/package.json').version\")"
npm run releasegit push origin HEADHave you discovered a vulnerability or have concerns about model output? Please e‑mail security@openai.com and we will respond promptly.
This repository is licensed under the Apache-2.0 License.
Original project: OpenAI Codex CLI
FAQs
Lightweight coding agent that runs in your terminal
The npm package @samooth/open-codex receives a total of 243 weekly downloads. As such, @samooth/open-codex popularity was classified as not popular.
We found that @samooth/open-codex demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Feross Aboukhadijeh joins TBPN to discuss Socket's $60M Series C, 500%+ ARR growth, AI's impact on open source, and the rise in supply chain attacks.

Security News
OSV withdrew 157 OSV malware reports after automated false positives incorrectly flagged trusted npm and PyPI packages, sending bad records into tools that rely on OSV data.

Research
/Security News
TrapDoor crypto stealer hits 36 malicious packages across npm, PyPI, and Crates.io, targeting crypto, DeFi, AI, and security developers.