1
2
3
4
5

# 全局安装
npm install -g @openai/codex

# 或者直接用二进制包（GitHub Release 下载）
# 配置文件位于 ~/.codex/config.toml

1
2
3
4
5
6
7
8

# ~/.codex/config.toml
model = "codex-1"
approval_mode = "suggest"    # suggest | auto-edit | full-auto
model_verbosity = "high"

[mcp_servers.linter]
command = "eslint-mcp-server"
args = ["--config", ".eslintrc.json"]

1

codex --approval-mode suggest "review this PR for security vulnerabilities"

1
2
3
4
5

- const token = req.headers.authorization;
+ const token = req.headers.authorization?.replace('Bearer ', '');
+ if (!token) {
+   return res.status(401).json({ error: 'Missing token' });
+ }

1

codex --approval-mode full-auto "fix all TypeScript strict mode errors in src/"

1
2
3
4
5
6
7
8

# 切到 PR 的分支
git checkout feature/dark-mode

# 让 Codex 审查本次 PR 相对于 main 分支的改动
codex --approval-mode suggest \
  "review the diff between main and HEAD, \
   focus on: 1) backward compatibility \
   2) edge cases 3) performance regressions"

1
2
3
4
5
6
7
8

# VS Code
# 在扩展商店搜索 "OpenAI Codex" 安装

# Cursor
# 内置集成，Settings → AI → Enable Codex

# Windsurf
# 同样在扩展市场搜索安装

1
2
3
4
5
6
7
8
9

┌─ user_service.py ────────────────────────────────┐
│ 12 │ def get_user(user_id):                     │
│ 13 │-    user = db.query(User).get(user_id)     │ ← 红色删除
│ 13 │+    user = db.session.get(User, user_id)   │ ← 绿色新增
│ 14 │     if not user:                            │
│ 15 │-        raise NotFound()                   │
│ 15 │+        raise NotFound(f"User {user_id}") │
│    │         [Accept] [Reject] [Edit]           │
└──────────────────────────────────────────────────┘

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

import openai

client = openai.OpenAI()

# 获取 PR 的 diff
diff_content = get_pr_diff("feature/dark-mode")

response = client.responses.create(
    model="codex-1",
    input=[
        {
            "role": "system",
            "content": "You are a senior code reviewer. "
                       "Focus on security, performance, and backward compatibility. "
                       "Output findings in structured JSON."
        },
        {
            "role": "user",
            "content": f"Review this diff:\n\n{diff_content}"
        }
    ],
    tools=[
        {"type": "file_search"},   # 让 AI 可以检索项目文件
    ]
)

# 解析审查结果
review = parse_review_response(response.output)

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

# .github/workflows/codex-review.yml
name: Codex AI Code Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Get PR diff
        id: diff
        run: |
          git diff origin/main...HEAD > /tmp/pr.diff

      - name: Codex Review
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
        run: |
          python3 scripts/codex_review.py \
            --diff /tmp/pr.diff \
            --output review.json

      - name: Post Review Comment
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const review = JSON.parse(
              fs.readFileSync('review.json', 'utf8')
            );
            for (const finding of review.findings) {
              await github.rest.pulls.createReviewComment({
                owner: context.repo.owner,
                repo: context.repo.repo,
                pull_number: context.issue.number,
                body: finding.comment,
                path: finding.file,
                line: finding.line,
              });
            }

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# ~/.codex/config.toml
[mcp_servers.security_scanner]
command = "semgrep-mcp"
args = ["--config", "auto"]

[mcp_servers.dependency_check]
command = "dep-audit-mcp"
args = ["--severity", "high"]

[mcp_servers.test_coverage]
command = "coverage-mcp"
args = ["--min-coverage", "80"]

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

开发者提交 PR
     ↓
在 Codex 面板指派审查任务
     ↓
云端 Agent 启动沙箱环境
     ↓
AI 自动：
  ├── clone 仓库
  ├── 安装依赖
  ├── 运行测试套件
  ├── 分析 diff 变更
  ├── 检查向后兼容性
  └── 生成审查报告
     ↓
PR 页面出现 AI 审查评论
（包含摘要 + 逐文件评论 + 修复建议 PR）

1
2
3

# 提交前的快速审查
codex --approval-mode suggest \
  "review staged changes, check for bugs and style issues"