codex-sdk

A TypeScript software library for running OpenAI Codex, a locally run coding assistant, from a program. It organizes interactions as conversations that can be continued, saved, resumed, or branched.

In plain words
What is it for?
Use it to build tools that ask Codex to understand, fix, or create code, continue a previous conversation, resume saved work, or create a separate conversation branch.
Why use it?
It lets developers automate coding-assistant tasks instead of using the assistant only through a user interface. It also supports receiving a complete answer or streamed progress events.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/amanape/sauna/codex-sdk
Any agent
npx skills add amanape/sauna --skill codex-sdk
Clone the repo
git clone --depth 1 https://github.com/amanape/sauna

Made for: Claude Code, Codex.

Per session 125 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,843 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00125 $0.01843
Opus 5 $0.00063 $0.00922
Sonnet 5 $0.00025 $0.00369
Haiku 4.5 $0.00013 $0.00184

Measured 2d ago against content hash 4e46419c0f5a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

codex-sdk scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 5 executable files (examples/code-review.ts, examples/multi-agent.ts, examples/streaming-output.ts, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/codex-sdk/SKILL.md · 278 lines

How it starts

The opening of the file, as written. The whole thing — 278 lines — stays where its author put it; the contents beside it link to each section on GitHub.

OpenAI Codex SDK

OpenAI Codex is a locally-run agentic coding assistant that enables building, fixing, and understanding code through AI assistance. The TypeScript SDK provides programmatic access to Codex's capabilities through a thread-based conversation model.

Quick Start

Install the SDK:

bun add @openai/codex-sdk

Basic usage:

import { Codex } from "@openai/codex-sdk";

const codex = new Codex();
const thread = codex.startThread();

// Execute single turn
const result = await thread.run("Diagnose and fix the CI failures");
console.log(result);

// Continue conversation
const nextTurn = await thread.run("Implement the fix");

Core Concepts

Thread-Based Architecture

Codex uses threads to manage conversations with the agent:

  • startThread() - Begin new conversation
  • run() - Execute single turn, get complete response
  • runStreamed() - Stream responses with intermediate events
  • resumeThread() - Resume saved conversation
  • forkThread() - Branch conversation

Thread Persistence

Threads persist to ~/.codex/sessions for recovery:

// Save thread ID
const threadId = thread.id;

// Later, resume conversation
const resumedThread = codex.resumeThread(threadId);
const result = await resumedThread.run("Continue the task");

Model Selection

Configure model in thread options:

const thread = codex.startThread({
  model: "gpt-5.3-codex", // Latest, most capable — recommended default
  // Or: "gpt-5.3-codex-spark" — text-only, 1000+ tokens/s (ChatGPT Pro only, no vision)
  // Or: "gpt-5.1-codex-max" — long-horizon agentic tasks
  // Or: "gpt-5.2-codex" — previous generation
});

Key Features

Structured Output

Use JSON Schema for reliable structured responses:

const schema = {
  type: "object",
  properties: {
    findings: {
      type: "array",
      items: {
        type: "object",
        properties: {
          file: { type: "string" },
          line: { type: "number" },
          severity: { enum: ["error", "warning", "info"] },
          message: { type: "string" },
        },
      },
    },
    verdict: { enum: ["pass", "needs_changes"] },
  },
};

const result = await thread.run("Review this code", {
  outputSchema: schema,
});

Read the full file on GitHub · 278 lines

Files

What ships with it

8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 278 lines · 125 tokens per session scan A 4e46419c0f5a

Subscribe to this mod's changes

codex-sdk is a skill published in the GitHub repository amanape/sauna (2 stars, last pushed 3mo ago), licensed MIT. It adds 125 tokens to every session and 1,843 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

client-setup

Create a vanilla tRPC client with createTRPCClient (), configure link chain with httpBatchLink/httpLink, dynamic headers for auth, transformer on links (not client constructor). Infer types with inferRouterInputs and inferRouterOutputs. AbortController signal support. TRPCClientError typing.

trpc/trpc · 63 tokens

custom-features

Author a TanStack Table v9 feature plugin across every FeatureMap and API installation surface: state, options, column definitions, table, column, row, cell, header, row-model functions/caches, defaults, prototypes, and table/row/column instance data lifecycles. Load for initTableInstanceData, resetTableInstanceData…

TanStack/table · 93 tokens

effect-and-errors

Composing Effect programs, domain errors, HttpError, repository error types, or error propagation at HTTP boundaries.

latitude-dev/latitude-llm · 26 tokens

migrate-better-result-3

Migrate a TypeScript codebase from better-result 2.x to 3.0. Use when upgrading better-result across the TaggedError syntax, removed Result serialization helpers, recovery inference, matching, or retry APIs.

dmmulroy/better-result · 52 tokens

fast-typescript-check

Keep www-sacred's TypeScript fast to type-check and fast to run. Use when touching the ASCII/canvas animation components (the only real per-frame code here), tightening type-check wall-clock, or auditing a change for runtime or compiler regressions. Scoped to this repo — a React 19 / Next.js 16 component library plus…

internet-development/www-sacred · 84 tokens

typescript-magician

Designs complex generic types, refactors any types to strict alternatives, creates type guards and utility types, and resolves TypeScript compiler errors. Use when the user asks about TypeScript (TS) types, generics, type inference, type guards, removing any types, strict typing, type errors, infer, extends…

mcollina/skills · 108 tokens