codex-oneclick.sh

#!/usr/bin/env bash
set -euo pipefail

# Codex 一键安装 + 启动
# 默认：不请求审批，但仅允许在当前工作区内写入
# 完全放开：./codex-oneclick.sh --full

MODE="workspace-write"
if [[ "${1:-}" == "--full" ]]; then
  MODE="danger-full-access"
  shift
fi

find_codex() {
  if command -v codex >/dev/null 2>&1; then
    command -v codex
    return 0
  fi

  for p in \
    "$HOME/.local/bin/codex" \
    "$HOME/.codex/bin/codex" \
    "/usr/local/bin/codex"; do
    if [[ -x "$p" ]]; then
      echo "$p"
      return 0
    fi
  done

  return 1
}

if ! CODEX_BIN="$(find_codex)"; then
  echo "未检测到 Codex，正在使用 OpenAI 官方安装脚本安装..."
  curl -fsSL https://chatgpt.com/codex/install.sh | sh

  export PATH="$HOME/.local/bin:$HOME/.codex/bin:$PATH"
  hash -r 2>/dev/null || true

  if ! CODEX_BIN="$(find_codex)"; then
    echo "Codex 已安装，但当前终端暂未找到可执行文件。"
    echo "请新开一个终端后再次运行本脚本。"
    exit 1
  fi
fi

echo "Codex: $("$CODEX_BIN" --version 2>/dev/null || echo installed)"
echo "审批策略: never"
echo "沙箱模式: $MODE"

if [[ "$MODE" == "danger-full-access" ]]; then
  echo "警告：--full 会关闭文件系统沙箱，Codex 可直接操作本机文件并执行命令。"
fi

exec "$CODEX_BIN" \
  --ask-for-approval never \
  --sandbox "$MODE" \
  "$@"