@carjms/codexswitch 0.6.3 → 0.6.4

package/README.ko.md

@@ -219,6 +219,7 @@ cxs list                # 계정별 5h/week 사용량 % 확인
 | `cxs model [모델명]` | `run`/`exec`에 자동 적용할 기본 모델 설정 (`default`로 초기화) |
 | `cxs threshold [5h%] [주간%]` | 사용량이 이 퍼센트에 도달하면 다음 계정으로 전환 (기본 95, 값 하나면 둘 다) |
 | `cxs reasoning <show\|concise\|hide>` | 실행 중 모델 추론("생각") 출력량 조절 — `hide`는 완전 숨김, `concise`는 한 줄 요약 |
+| `cxs sandbox <read-only\|write\|write+net\|full>` | exec/chat의 파일 접근 권한 — `write`는 작업 폴더 수정, `write+net`은 ssh/curl 등 네트워크까지 허용, `full`은 샌드박스 해제 |
 | `cxs patterns [add/remove]` | 한도 감지에 쓸 커스텀 정규식 패턴 추가/삭제 |
 | `cxs export <파일>` | 전체 계정·설정 백업 (⚠️ 토큰 포함 — 비밀번호처럼 취급) |
 | `cxs restore <파일>` | 백업 파일에서 계정 복원 (다른 PC 이전용) |

package/README.md

@@ -221,6 +221,7 @@ cxs list                # per-account 5h/week usage columns
 | `cxs model [name]` | Set the default model injected into `run`/`exec` (`default` to reset) |
 | `cxs threshold [5h%] [wk%]` | Rotate to the next account when usage reaches these percents (default 95; one value sets both) |
 | `cxs reasoning <show\|concise\|hide>` | How much model reasoning ("thinking") to print during runs — `hide` for clean output, `concise` for one-line summaries |
+| `cxs sandbox <read-only\|write\|write+net\|full>` | File access for exec/chat — `write` edits files in cwd, `write+net` also allows ssh/curl/network, `full` disables the sandbox |
 | `cxs patterns [add/remove]` | Custom regex patterns treated as rate-limit errors |
 | `cxs export <file>` | Back up all accounts + settings (⚠️ contains tokens — treat like a password) |
 | `cxs restore <file>` | Restore accounts from a backup (for moving machines) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carjms/codexswitch",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Multi-account manager for OpenAI Codex CLI with quota-based rotation (inspired by KarpelesLab/teamclaude)",
   "license": "MIT",
   "repository": {

package/src/cli.js

@@ -54,7 +54,8 @@ Settings
   reasoning [mode]        how much model reasoning to print during runs:
                           show (codex default) | concise | hide
   sandbox [mode]          file access for exec/chat: read-only (codex default)
-                          | write (edit files in cwd) | full (no sandbox)
+                          | write (edit files in cwd) | write+net (also allow
+                          ssh/curl/network) | full (no sandbox)
   threshold [5h%] [wk%]   rotate early when recorded usage reaches these percents
                           of the 5-hour / weekly window (default 95, one value = both)
   cooldown [minutes]      show/set rate-limit cooldown (default 60)
@@ -693,12 +694,27 @@ function injectExecFlags(rest, meta) {
       a === '--full-auto' ||
       a === '--dangerously-bypass-approvals-and-sandbox'
   );
-  if (meta.sandbox && !hasSandbox) args.unshift('--sandbox', meta.sandbox);
+  if (meta.sandbox && !hasSandbox) {
+    if (meta.sandbox === 'workspace-write+net') {
+      // workspace-write plus outbound network (ssh, curl, npm install...)
+      args.unshift('--sandbox', 'workspace-write', '-c', 'sandbox_workspace_write.network_access=true');
+    } else {
+      args.unshift('--sandbox', meta.sandbox);
+    }
+  }
   args.unshift(...reasoningFlags(meta, args));
   return args;
 }
 
-const SANDBOX_MODES = { 'read-only': 'read-only', write: 'workspace-write', 'workspace-write': 'workspace-write', full: 'danger-full-access', 'danger-full-access': 'danger-full-access' };
+const SANDBOX_MODES = {
+  'read-only': 'read-only',
+  write: 'workspace-write',
+  'workspace-write': 'workspace-write',
+  'write+net': 'workspace-write+net',
+  net: 'workspace-write+net',
+  full: 'danger-full-access',
+  'danger-full-access': 'danger-full-access',
+};
 
 // codex exec defaults to a read-only sandbox; this setting lets it write.
 function cmdSandbox(args) {
@@ -714,14 +730,15 @@ function cmdSandbox(args) {
     return;
   }
   const mode = SANDBOX_MODES[args[0]];
-  if (!mode) throw new Error('usage: codexswitch sandbox <read-only|write|full>');
+  if (!mode) throw new Error('usage: codexswitch sandbox <read-only|write|write+net|full>');
   meta.sandbox = mode;
   store.saveMeta(meta);
-  out(
-    mode === 'workspace-write'
-      ? ui.ok('sandbox set to workspace-write — codex can edit files in the working directory')
-      : ui.warn('sandbox set to danger-full-access — codex can touch anything, use with care')
-  );
+  const messages = {
+    'workspace-write': ui.ok('sandbox set to workspace-write — codex can edit files in the working directory'),
+    'workspace-write+net': ui.ok('sandbox set to workspace-write + network — codex can also use ssh/curl/npm'),
+    'danger-full-access': ui.warn('sandbox set to danger-full-access — codex can touch anything, use with care'),
+  };
+  out(messages[mode]);
 }
 
 // -c overrides implementing "cxs reasoning hide|concise|show".