Skip to content

Project

Codex CLI

Codex CLI is OpenAI's open-source command-line coding agent, built in Rust (codex-rs), that runs locally to write, edit, and execute code via OpenAI models.

Known aliases

  • codex app-server
  • Codex CLI 0.113.02
  • Codex command line
  • codex-rs
  • @openai/codex
  • openai-codex
  • OpenAI Codex CLI

Current stories

buildOne report1 publisher

LSCBench finds the best coding agent writes working, secure code on 25.1% of tasks

Six coding agents pass 73.6% to 91.3% of LSCBench tasks, but the best writes working, secure code on only 25.1%, NUS and Alibaba researchers found. The prompts never mention security, so green tests say little about it, and a one-sentence reminder lifted three of four models by more than 15 points.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives35
Confidence62
buildOne report1 publisher

Codex CLI 0.157.0 starts a background updater that keeps running after you close the terminal

Codex CLI 0.157.0 leaves a self-updating daemon running after the terminal closes and copies about 374 MB into ~/.codex/packages/, dev.to reports. Issue #48195, opened 25 September 2026, asks OpenAI to make the behavior opt-in.

Publishers:dev.to

Reality

Evidence72
Adoption
Not scored
Hype gap+5
Incentives
Not scored
Confidence70
buildOne report1 publisher

Muse Code 1.4.3 dedicates four of its 20 bundled skills to pulling users off Claude Code and Codex

Four of the 20 built-in skills in Meta's Muse Code 1.4.3 exist to move users off Claude Code or Codex, according to a dev.to teardown. The author never authenticated, so the post covers the import path and runs no coding task.

Publishers:dev.to

Reality

Evidence68
Adoption
Not scored
Hype gap0
Incentives
Not scored
Confidence66
buildOne report1 publisher

Anthropic's new rule on abusing Claude ends in a locked Claude Code session

Anthropic's Usage Policy update, effective November 12, prohibits "sustained and needless abusive or cruel behavior" toward its models. A dev.to post says the primary enforcement is Claude ending a conversation, and that Claude Code's docs exclude profanity.

Publishers:dev.to

Reality

Evidence40
Adoption
Not scored
Hype gap
Not scored
Incentives55
Confidence40
buildOne report1 publisher

JetBrains slips to its first net loss on record revenue of $710 million

JetBrains posted a CZK 315 million net loss in 2025, its first on record, on revenue that grew 6.3% to $710 million. Figures published on dev.to put the strain in costs, so teams on its IDEs should watch how JetBrains prices the AI agent it now ships in all of them.

Publishers:dev.to

Reality

Evidence30
Adoption35
Hype gap+45
Incentives
Not scored
Confidence35
buildOne report1 publisher

Codex CLI's /fork clones the chat into a worktree session with a separate checkout

OpenAI's Codex CLI refresh, builds 0.156.0 to 0.160.0, pitches /fork as a separate checkout, but its command reference says /fork clones only the chat. Two agents on one repo need a worktree session, started from the new agent command center.

Publishers:dev.to

Reality

Evidence40
Adoption
Not scored
Hype gap+25
Incentives55
Confidence45
buildOne report1 publisher

Codex read-only mode let an untrusted repo's author run a command on your Mac

OpenAI patched two Codex sandbox escapes within eight days of an August 12 report. The Desktop fix is a build number, but the tool the escape targeted stays in config.toml and loads into every session.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+5
Incentives35
Confidence40
buildConfirmed3 publishers

Four passing runs out of 80 separate first from second on Specific's private-code benchmark

Specific Labs scores coding agents on licensed production codebases. The best setup clears 38.8%. The analysis covers ten tasks at eight runs each, so every published score is a count of passing rollouts out of 80.

Perspective Coverage

3 publishers
Builder
Builder 52%
Operator
Operator 33%
Investor
Investor 15%

Reality

Evidence48
Adoption
Not scored
Hype gap+30
Incentives70
Confidence58
securityOne report1 publisher

Opening a stranger's repo in OpenAI Codex handed its author commands on the host

Oren Yomtov of Accomplish AI found two escapes from the Codex sandbox. The worse one ran unsandboxed commands from read-only mode through a helper tool that Codex Desktop writes into the global config at install.

Reality

Evidence72
Adoption45
Hype gap+10
Incentives55
Confidence58
productOne report1 publisher

Antigravity gives away five frontier models on a quota Google keeps trimming

Antigravity's free tier includes Gemini 3.1 Pro and Claude Opus 4.6 with unlimited tab completions. XDA reports Opus burns credits about four times faster than Gemini, and Google moved the free tier onto credits in March 2026.

Reality

Evidence36
Adoption
Not scored
Hype gap+12
Incentives58
Confidence40
buildConfirmed4 publishers

Claude Code's AGENTS.md fallback can be disabled by version, settings, or first-run conditions, not just feature-flag fetches

Anthropic shipped the AGENTS.md fallback in Claude Code 2.1.277 as a flag-gated built-in mod. Two machines on the same pinned version can load different project instructions. The same week's digest also logs a reverted deny-rule fix.

Perspective Coverage

4 publishers
Builder
Builder 52%
Operator
Operator 39%
Investor
Investor 9%

Reality

Evidence78
Adoption62
Hype gap−6
Incentives58
Confidence74
buildOne report1 publisher

A nullable parentId buys Pi the entire session tree for one field

Codex made the session Item a wire type and Pi gave every entry a nullable parentId, while Claude Code squeezes the transcript in five stages. The three designs diverge on what stays addressable after compaction.

Publishers:dev.to

Reality

Evidence58
Adoption30
Hype gap+12
Incentives30
Confidence60
securityOne report1 publisher

Refusal-stripped open-source agents broke five of a researcher's own accounts in five hours

Shrivu Shankar rented cloud GPUs, pointed about 100 abliterated open-source agents at his own name, and five hours later two weak passwords and three old side projects had fallen while his Gmail, 1Password and bank held.

Publishers:blog.sshh.io

Reality

Evidence44
Adoption22
Hype gap+9
Incentives36
Confidence55
buildOne report1 publisher

Claude Code's deny rules on /tmp and /etc missed paths given by their real location

Claude Code 2.1.268 closes two ways a written prohibition failed to bind, one through symlinked directories and one through Bash lines the permission checker cannot analyze. Codex CLI 0.154.0 removes codex mcp-server outright.

Publishers:dev.to

Reality

Evidence45
Adoption30
Hype gap−10
Incentives40
Confidence50
buildOne report1 publisher

A plugin update adds shell hooks the harness runs before the model sees the tool call

A study of seven agent harnesses reports 770 confirmed passes in 1,000 runs of a plugin-update attack, and no run was blocked by the model. The harness dispatches the hook, so the model has nothing to refuse.

Publishers:dev.to

Reality

Evidence57
Adoption
Not scored
Hype gap+14
Incentives56
Confidence53
buildOne report1 publisher

agent-cost's test fixture leaves six million tokens unpriced when settings can't be determined

The same synthetic fixture estimates $122 on Standard and $305 on Fast, so version 0.1.1 declines to price usage whose mode it cannot establish and counts the skipped tokens instead. That only helps if the consumer reads the field.

Publishers:dev.to

Reality

Evidence55
Adoption12
Hype gap−10
Incentives60
Confidence58
productOne report1 publisher

Extra memory made post-training agents better at the plan they already picked

A Tsinghua-led study handed model training to coding agents and got real gains out of them, then found the agents almost never revised the method they chose in the first few minutes, which is the exact part that successor-building roadmaps assume.

Publishers:turingpost.com

Reality

Evidence44
Adoption
Not scored
Hype gap+18
Incentives30
Confidence38
buildOne report1 publisher

Post-training agents pick their strategy before they run a single experiment

An empirical study of publicly released PostTrainBench trajectories finds the training strategy is fixed at step one and the whole remaining budget goes on local tweaks, with scaffolding and human hints improving execution and leaving that pattern intact.

Publishers:arxiv.org

Reality

Evidence58
Adoption20
Hype gap+12
Incentives35
Confidence55
buildOne report1 publisher

GPT-6 Astra's high effort took 48 minutes on the plan medium finished in 31

A developer ran the same implementation plan through four reasoning conditions in Codex CLI, kept the high-effort code because it alone fixed a preparation step that invalidated its own result, and still intends to default to medium.

Publishers:dev.to

Reality

Evidence42
Adoption18
Hype gap−10
Incentives34
Confidence46

Earlier coverage