@carjms/codexswitch 0.6.2 → 0.6.4

package/README.ko.md

@@ -219,6 +219,7 @@ cxs list                # 계정별 5h/week 사용량 % 확인
 | `cxs model [모델명]` | `run`/`exec`에 자동 적용할 기본 모델 설정 (`default`로 초기화) |
 | `cxs threshold [5h%] [주간%]` | 사용량이 이 퍼센트에 도달하면 다음 계정으로 전환 (기본 95, 값 하나면 둘 다) |
 | `cxs reasoning <show\|concise\|hide>` | 실행 중 모델 추론("생각") 출력량 조절 — `hide`는 완전 숨김, `concise`는 한 줄 요약 |
+| `cxs sandbox <read-only\|write\|write+net\|full>` | exec/chat의 파일 접근 권한 — `write`는 작업 폴더 수정, `write+net`은 ssh/curl 등 네트워크까지 허용, `full`은 샌드박스 해제 |
 | `cxs patterns [add/remove]` | 한도 감지에 쓸 커스텀 정규식 패턴 추가/삭제 |
 | `cxs export <파일>` | 전체 계정·설정 백업 (⚠️ 토큰 포함 — 비밀번호처럼 취급) |
 | `cxs restore <파일>` | 백업 파일에서 계정 복원 (다른 PC 이전용) |

package/README.md

@@ -221,6 +221,7 @@ cxs list                # per-account 5h/week usage columns
 | `cxs model [name]` | Set the default model injected into `run`/`exec` (`default` to reset) |
 | `cxs threshold [5h%] [wk%]` | Rotate to the next account when usage reaches these percents (default 95; one value sets both) |
 | `cxs reasoning <show\|concise\|hide>` | How much model reasoning ("thinking") to print during runs — `hide` for clean output, `concise` for one-line summaries |
+| `cxs sandbox <read-only\|write\|write+net\|full>` | File access for exec/chat — `write` edits files in cwd, `write+net` also allows ssh/curl/network, `full` disables the sandbox |
 | `cxs patterns [add/remove]` | Custom regex patterns treated as rate-limit errors |
 | `cxs export <file>` | Back up all accounts + settings (⚠️ contains tokens — treat like a password) |
 | `cxs restore <file>` | Restore accounts from a backup (for moving machines) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carjms/codexswitch",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Multi-account manager for OpenAI Codex CLI with quota-based rotation (inspired by KarpelesLab/teamclaude)",
   "license": "MIT",
   "repository": {

package/src/cli.js

@@ -53,6 +53,9 @@ Settings
   model [name|default]    show/set the default model injected into run/exec
   reasoning [mode]        how much model reasoning to print during runs:
                           show (codex default) | concise | hide
+  sandbox [mode]          file access for exec/chat: read-only (codex default)
+                          | write (edit files in cwd) | write+net (also allow
+                          ssh/curl/network) | full (no sandbox)
   threshold [5h%] [wk%]   rotate early when recorded usage reaches these percents
                           of the 5-hour / weekly window (default 95, one value = both)
   cooldown [minutes]      show/set rate-limit cooldown (default 60)
@@ -644,7 +647,7 @@ function cmdNames() {
 
 const COMMANDS =
   'login import add-key list usage watch probe log chat server use current next run exec order model remove rename ' +
-  'enable disable priority clear-limit cooldown threshold reasoning patterns export restore sync completion help';
+  'enable disable priority clear-limit cooldown threshold reasoning sandbox patterns export restore sync completion help';
 
 function cmdCompletion(args) {
   const shell = args[0];
@@ -684,10 +687,60 @@ function injectExecFlags(rest, meta) {
   if (!args.includes('--skip-git-repo-check')) args.unshift('--skip-git-repo-check');
   const hasModel = args.some((a) => a === '-m' || a === '--model' || a.startsWith('--model='));
   if (meta.model && !hasModel) args.unshift('-m', meta.model);
+  const hasSandbox = args.some(
+    (a) =>
+      a === '--sandbox' ||
+      a.startsWith('--sandbox=') ||
+      a === '--full-auto' ||
+      a === '--dangerously-bypass-approvals-and-sandbox'
+  );
+  if (meta.sandbox && !hasSandbox) {
+    if (meta.sandbox === 'workspace-write+net') {
+      // workspace-write plus outbound network (ssh, curl, npm install...)
+      args.unshift('--sandbox', 'workspace-write', '-c', 'sandbox_workspace_write.network_access=true');
+    } else {
+      args.unshift('--sandbox', meta.sandbox);
+    }
+  }
   args.unshift(...reasoningFlags(meta, args));
   return args;
 }
 
+const SANDBOX_MODES = {
+  'read-only': 'read-only',
+  write: 'workspace-write',
+  'workspace-write': 'workspace-write',
+  'write+net': 'workspace-write+net',
+  net: 'workspace-write+net',
+  full: 'danger-full-access',
+  'danger-full-access': 'danger-full-access',
+};
+
+// codex exec defaults to a read-only sandbox; this setting lets it write.
+function cmdSandbox(args) {
+  const meta = store.loadMeta();
+  if (args[0] == null) {
+    out(`sandbox: ${meta.sandbox || 'read-only (codex exec default)'} ${ui.dim('(read-only | write | full)')}`);
+    return;
+  }
+  if (args[0] === 'read-only' || args[0] === 'default') {
+    delete meta.sandbox;
+    store.saveMeta(meta);
+    out(ui.ok('sandbox back to codex default (read-only in exec)'));
+    return;
+  }
+  const mode = SANDBOX_MODES[args[0]];
+  if (!mode) throw new Error('usage: codexswitch sandbox <read-only|write|write+net|full>');
+  meta.sandbox = mode;
+  store.saveMeta(meta);
+  const messages = {
+    'workspace-write': ui.ok('sandbox set to workspace-write — codex can edit files in the working directory'),
+    'workspace-write+net': ui.ok('sandbox set to workspace-write + network — codex can also use ssh/curl/npm'),
+    'danger-full-access': ui.warn('sandbox set to danger-full-access — codex can touch anything, use with care'),
+  };
+  out(messages[mode]);
+}
+
 // -c overrides implementing "cxs reasoning hide|concise|show".
 function reasoningFlags(meta, existing = []) {
   if (!meta.reasoning || meta.reasoning === 'show') return [];
@@ -929,12 +982,14 @@ async function cmdChat() {
       try {
         if (cmd === 'quit' || cmd === 'exit' || cmd === 'q') break;
         else if (cmd === 'help')
-          out(ui.dim('/usage /list /use <name> /next /model [m] /new (fresh session) /quit'));
+          out(ui.dim('/usage /list /use <name> /next /model [m] /sandbox [mode] /reasoning [mode] /new (fresh session) /quit'));
         else if (cmd === 'usage') cmdUsage([]);
         else if (cmd === 'list') cmdList();
         else if (cmd === 'use') cmdUse(rest);
         else if (cmd === 'next') cmdNext();
         else if (cmd === 'model') cmdModel(rest);
+        else if (cmd === 'sandbox') cmdSandbox(rest);
+        else if (cmd === 'reasoning') cmdReasoning(rest);
         else if (cmd === 'new') {
           inSession = false;
           out(ui.ok('starting a fresh session on the next prompt'));
@@ -1029,6 +1084,8 @@ async function main(argv) {
       return cmdModel(args), 0;
     case 'reasoning':
       return cmdReasoning(args), 0;
+    case 'sandbox':
+      return cmdSandbox(args), 0;
     case 'add-key':
     case 'apikey':
       return cmdAddKey(args), 0;