cdx-manager 0.24.6 → 0.24.7

package/README.md

@@ -4,7 +4,7 @@
 
 <br clear="left"/>
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.24.6-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.24.7-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
 
 **The right AI coding account, when you need it.** CDX Manager keeps your Codex and Claude accounts in separate profiles, shows which ones have quota, and helps you pick the next usable session from your terminal.
 

package/VERSION

@@ -1 +1 @@
-0.24.6
+0.24.7

package/changelogs/CHANGELOGS_0_24_7.md

@@ -0,0 +1,15 @@
+# CDX Manager 0.24.7
+
+Release date: 2026-10-29
+
+This patch fixes command execution in isolated Codex workspace runs. (#65)
+
+## Workspace runs
+
+- Drop Codex's nested sandbox when `--isolate-workspace` is enabled, avoiding the user namespace mapping failure that prevented commands from running. The outer workspace sandbox remains the isolation boundary. (#65)
+- Remove Codex's sandbox mode and network overrides inside the isolated workspace and pass `--dangerously-bypass-approvals-and-sandbox`; the outer sandbox controls network access and keeps review runs read-only through its workspace mount. (#65)
+
+## Maintenance
+
+- Record tray companion checksums for v0.24.6. (`87aba5d2cffdfb1a96e386abcdabe54df9ee4808`)
+- Record release archive checksums for v0.24.6. (`6b92094143ea28bf0cc096aef88d1015565aba18`)

package/checksums/release-archives.json

@@ -639,6 +639,17 @@
         "x86_64-pc-windows-msvc": "74124b2e40a58a58b55724ef453c4b543a83eefab9a5f92685b239c5d97e7f67",
         "x86_64-unknown-linux-musl": "089e552a4dfae4080a2e76cedb6fe72fc8013a9cd08cf3c8b333f916198da57c"
       }
+    },
+    "v0.24.6": {
+      "github_tarball_sha256": "4b61861ae26fc7904e751571b65d0783c16dcf35d3b485379434469e27511fb4",
+      "github_zip_sha256": "6c5cfa2139eb53a20a8eca8624437a06b18392b0df7774d9c7c64a74b8066f59",
+      "tray_assets": {
+        "aarch64-apple-darwin": "7200f658e3413b2614a7ffa5d03e1dac173fc1a653dc659d92f2bef40f2bf5d4",
+        "aarch64-unknown-linux-musl": "b892a9a3bf009e5069dc798ab910b20e77ac9d03b9b575a80cb19af1dc13533a",
+        "x86_64-apple-darwin": "d1e1b619feab8eae1e2a25e17942d8d690fc1e6184f294599a15858a1f0c146e",
+        "x86_64-pc-windows-msvc": "0d125d8e0f7d9880a2ed9e0a794964f3d69ef3353b90a1d594b17f9392a0a0af",
+        "x86_64-unknown-linux-musl": "d6c369ace10a6d373366cd12e4e6cd7f2fd278fbce2fd9a13c5bf51047847441"
+      }
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.24.6",
+  "version": "0.24.7",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.24.6"
+version = "0.24.7"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"

package/src/provider_runtime.py

@@ -1212,7 +1212,10 @@ def _run_headless_provider_command(session, cwd=None, env_override=None, initial
     )
     launch = session.get("launch") or {}
     if launch.get("network_access"):
-        if session.get("provider") == PROVIDER_CODEX:
+        if session.get("provider") == PROVIDER_CODEX and launch.get("isolate_workspace"):
+            # The outer sandbox owns the network; Codex's own sandbox is dropped below.
+            pass
+        elif session.get("provider") == PROVIDER_CODEX:
             # Keep the workspace sandbox; append overrides before the prompt separator.
             index = spec["args"].index("--") if "--" in spec["args"] else len(spec["args"])
             spec["args"][index:index] = ["-c", 'sandbox_workspace_write.network_access=true', '-c', 'sandbox_workspace_write.writable_roots=["/cache", "/home/agent"]']
@@ -1226,6 +1229,17 @@ def _run_headless_provider_command(session, cwd=None, env_override=None, initial
             # The outer OS sandbox is the permission boundary for unattended Bash.
             index = spec["args"].index("--") if "--" in spec["args"] else len(spec["args"])
             spec["args"][index:index] = ["--permission-mode", "bypassPermissions"]
+        elif session.get("provider") == PROVIDER_CODEX:
+            # Codex's bubblewrap sandbox cannot nest inside ours (no uid map), so the
+            # outer box is the boundary: drop `-s <mode>` and bypass the inner one.
+            # A review run stays read-only through the outer mount.
+            args = spec["args"]
+            while "-s" in args:
+                index = args.index("-s")
+                del args[index:index + 2]
+            if "--dangerously-bypass-approvals-and-sandbox" not in args:
+                index = args.index("--") if "--" in args else len(args)
+                args[index:index] = ["--dangerously-bypass-approvals-and-sandbox"]
         try:
             argv, child_env = sandbox_command(
                 [spec["command"], *spec["args"]], Path(cwd),