codexlisted

# Codex CLI Reference for driving `codex exec` correctly from an agent session. For a full review gate with a fix-or-rebut loop, use the `codex-gate` skill instead. ## Invocation rules - Do not pass `-m`. `~/.codex/config.toml` sets the default model; override it only when the user names a model. Pair reviews with `-c model_reasoning_effort="xhigh"` (options: `none`, `minimal`, `low`, `medium`, `high`, `xhigh`). - Always redirect stdin from `/dev/null`. `codex exec` appends stdin to the prompt, so without the redirect it blocks on an open terminal and looks like a slow reasoning pass until killed. The tell is empty stdout with `Reading additional input from stdin...` on stderr. - Append `2>/dev/null` to hide thinking tokens (stderr). Show stderr only when debugging. - Sandbox: `--sandbox read-only` for reviews, `workspace-write` for edits, `danger-full-access` only for work that needs the network. `--full-auto` applies to write runs only. Ask before `--full-auto`, `danger-full-access`, or `--skip-git-repo-check` unless the user already granted it. - `-C <dir>` runs from another directory; `--skip-git-repo-check` is needed outside a repository. - Pass `-o <file>` when the final message must survive scrollback. ## Reviews `codex exec review` accepts a scope flag (`--base <branch>`, `--commit <sha>`, `--uncommitted`) or a custom prompt, never both; combining them fails arg parsing with `the argument '--base <BRANCH>' cannot be used with '[PROMPT]'` (co