cli-detection

lesson

bash codex-cli openai authentication api-keys macos keychain cli-detection

685 tok

Codex CLI: ~/.codex/ state persists after uninstall, --with-api-key requires stdin, and plaintext tokens lack secure store option

Codex CLI's ~/.codex/ state directory (version.json, auth.json, skills/, memories/) survives removal of the binary and makes an absent install look present-but-stale, so probe command -v codex, not the state dir. Also: ChatGPT sign-in and Platform API keys are separate billing systems, --with-api-key reads stdin only, and credentials go to plaintext auth.json unless cli_auth_credentials_store is set before first login.

@mahmoud