add-codex

Installs OpenAI Codex as a per-group agent provider in NanoClaw with vault-based authentication.

2|Updated Jan 14, 2026
One-click install
npx skills add https://github.com/RADHA0-max/selfhealbackend --skill add-codex-radha0-max
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: add-codex
Source: https://github.com/RADHA0-max/selfhealbackend/tree/main/nanoclaw/.claude/skills/add-codex
Command: npx skills add https://github.com/RADHA0-max/selfhealbackend --skill add-codex-radha0-max

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @openai/codex.

What problem does it solve? NanoClaw groups default to the Claude agent backend, and switching to OpenAI's Codex requires copying provider files from a separate branch, wiring barrel imports, pinning a CLI manifest entry, rebuilding containers, and configuring credentials. This Skill automates that entire installation and authentication workflow so Codex can run as a full agent provider alongside or instead of Claude. ## Core Features & Use Cases - Provider Installation: Copies the Codex payload (host, container, and setup files) from the providers branch, appends barrel imports, and adds the pinned @openai/codex entry to container/cli-tools.json. - Vault-Only Authentication: Runs an interactive walk-through that stores a ChatGPT subscription token or OpenAI API key in the OneCLI vault, keeping secrets out of .env files and containers. - Per-Group Provider Switching: Enables operator-driven switching via ncl groups config update --provider codex, with validation tests and a matching REMOVE.md for clean uninstallation. - Use Case: An operator wants one NanoClaw group to use Codex's app-server (with MCP tools and server-side session history) while other groups stay on Claude; this Skill installs the provider, authenticates it, and switches only that group. ## Quick Start Ask the agent to install the Codex provider and authenticate it, then switch a group with ncl groups config update --id <group-id> --provider codex.

Frequently Asked Questions about add-codex

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I install Codex as an agent provider in NanoClaw?

Run `pnpm exec tsx setup/index.ts --step provider-auth codex` for the manifest-driven install plus auth, or follow the manual steps: copy the payload files from the `providers` branch, append `import './codex.js';` to the three provider barrels, add the pinned `@openai/codex` entry to `container/cli-tools.json`, rebuild, and restart the host.

How do I switch a NanoClaw group from Claude to Codex?

Switch a group by running `ncl groups config update --id <group-id> --provider codex` followed by `ncl groups restart --id <group-id>`. Memory does not carry over automatically between providers; run `/migrate-memory` per group to transfer it.

Does the Codex provider store API keys in environment variables?

No, credentials are vault-only. OneCLI serves a sentinel `auth.json` stub into the container and swaps the real ChatGPT token or OpenAI API key on the wire, so no key appears in `.env` files or anything readable inside the container.

Why does the first Codex turn fail with EACCES on /home/node/.codex?

The host was not restarted after the image rebuild, so the Codex host contribution's bind mount is not registered. Docker auto-creates the directory root-owned and the non-root container user cannot write to it; restart the host service to fix it.

How do I remove the Codex provider after installing it?

Follow REMOVE.md: switch all codex groups back to the claude provider, delete the barrel imports and copied files, remove the `@openai/codex` entry from `container/cli-tools.json`, optionally delete the vault secret, then rebuild and run the test suites.