@lesscap/baton-cli 0.5.0 → 0.5.1

package/dist/baton.mjs

@@ -6411,6 +6411,26 @@ var additionalDirs = () => {
   const dirs = raw.split(":").map((s) => s.trim()).filter((s) => s !== "" && isAbsolute(s) && existsSync3(s));
   return dirs.length > 0 ? dirs : void 0;
 };
+var truthy = (value) => {
+  if (value === void 0) return void 0;
+  const normalized = value.trim().toLowerCase();
+  if (["1", "true", "yes", "on"].includes(normalized)) return true;
+  if (["0", "false", "no", "off"].includes(normalized)) return false;
+  return void 0;
+};
+var codexNetworkAccess = () => truthy(process.env.BATON_CODEX_NETWORK_ACCESS);
+var codexSandboxMode = (planMode) => {
+  if (planMode) return "read-only";
+  const raw = process.env.BATON_CODEX_SANDBOX_MODE;
+  if (raw === "read-only" || raw === "workspace-write" || raw === "danger-full-access") return raw;
+  return "workspace-write";
+};
+var codexApprovalPolicy = () => {
+  const raw = process.env.BATON_CODEX_APPROVAL_POLICY;
+  if (raw === "never" || raw === "on-request" || raw === "on-failure" || raw === "untrusted")
+    return raw;
+  return "never";
+};
 
 // src/session/runner/transcript.ts
 import { readdirSync, readFileSync as readFileSync4, statSync } from "node:fs";
@@ -6651,13 +6671,20 @@ async function* startCodexEvents(config, input, worker2, opts) {
   const codex = new Codex(env ? { env } : void 0);
   const resuming = !config.agentSessionId.startsWith("pending:");
   const addDirs = additionalDirs();
+  const sandboxMode = codexSandboxMode(opts.planMode ?? false);
+  const approvalPolicy = codexApprovalPolicy();
+  const networkAccessEnabled = codexNetworkAccess();
+  opts.log(
+    `[codex] sandbox=${sandboxMode} approval=${approvalPolicy}${networkAccessEnabled === void 0 ? "" : ` network=${networkAccessEnabled}`}`
+  );
   const threadOptions = {
     workingDirectory: config.worktreePath,
     skipGitRepoCheck: true,
-    sandboxMode: opts.planMode ? "read-only" : "workspace-write",
-    approvalPolicy: "never",
+    sandboxMode,
+    approvalPolicy,
     ...opts.model ? { model: opts.model } : {},
-    ...addDirs ? { additionalDirectories: addDirs } : {}
+    ...addDirs ? { additionalDirectories: addDirs } : {},
+    ...networkAccessEnabled === void 0 ? {} : { networkAccessEnabled }
   };
   const thread = resuming ? codex.resumeThread(config.agentSessionId, threadOptions) : codex.startThread(threadOptions);
   const runInput = opts.planMode ? withPlanPrefix(input) : input;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lesscap/baton-cli",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public"