codexcli

Overview ¶

Package codexcli registers a CLI-tool-backed provider that drives OpenAI's Codex CLI (`codex`) binary as the review engine. The user-facing name is `codex-cli` (selectable with `--cli codex` or `--provider codex-cli`); the underlying transport is a subprocess of the host CLI rather than an HTTPS API call, so no API key is required when `codex` is already authenticated locally (ChatGPT sign-in or OPENAI_API_KEY in the host CLI's own environment).

Layout naming: the `-cli` directory suffix is purely a developer signal that this is the CLI-backed sibling of the existing internal/provider/openai/ package (which talks to api.openai.com).

Codex is more agentic than Claude Code's `-p` or Gemini CLI's `-p` one-shot modes, so we drive its non-interactive `exec` subcommand and pin a read-only sandbox: a review must never let the agent modify the working tree or run write commands. Like the other CLI providers this is a PlainTextEmitter — the host CLI's output streams through verbatim, with no JSON-findings contract, so `remote pr` and `--json` do not apply.