feat: redesign sandbox config

codex-rs/exec/src/cli.rs

@@ -1,7 +1,6 @@
 use clap::Parser;
 use clap::ValueEnum;
 use codex_common::CliConfigOverrides;
-use codex_common::SandboxPermissionOption;
 use std::path::PathBuf;
 
 #[derive(Parser, Debug)]
@@ -23,9 +22,6 @@ pub struct Cli {
     #[arg(long = "full-auto", default_value_t = false)]
     pub full_auto: bool,
 
-    #[clap(flatten)]
-    pub sandbox: SandboxPermissionOption,
-
     /// Tell the agent to use the specified directory as its working root.
     #[clap(long = "cd", short = 'C', value_name = "DIR")]
     pub cwd: Option<PathBuf>,

codex-rs/exec/src/lib.rs

@@ -31,7 +31,6 @@ pub async fn run_main(cli: Cli, codex_linux_sandbox_exe: Option<PathBuf>) -> any
         model,
         config_profile,
         full_auto,
-        sandbox,
         cwd,
         skip_git_repo_check,
         color,
@@ -85,9 +84,9 @@ pub async fn run_main(cli: Cli, codex_linux_sandbox_exe: Option<PathBuf>) -> any
     };
 
     let sandbox_policy = if full_auto {
-        Some(SandboxPolicy::new_full_auto_policy())
+        Some(SandboxPolicy::new_workspace_write_policy())
     } else {
-        sandbox.permissions.clone().map(Into::into)
+        None
     };
 
     // Load configuration and determine approval policy