Packages

codex_sdk

0.2.2
0.18.1 0.18.0 0.17.0 0.16.1 0.16.0 0.14.0 0.13.0 0.12.0 0.11.0 0.10.1 0.10.0 0.9.0 0.8.0 0.7.2 0.7.1 0.7.0 0.6.0 0.5.0 0.4.5 0.4.4 0.4.3 0.4.2 0.4.1 0.4.0 0.3.0 0.2.5 0.2.4 0.2.3 0.2.2 0.2.1 0.2.0 0.1.0

Idiomatic Elixir SDK for OpenAI's Codex agent. Provides a complete, production-ready interface with streaming support, comprehensive event handling, and robust testing utilities.

HexDocs

Current section

Files

Jump to
Readme
32 Versions
6 Dependencies
Dependants
Files
Activity
codex_sdk docs 20251129 sandbox sandbox_and_security.prompt.md
Raw

docs/20251129/sandbox/sandbox_and_security.prompt.md 

# Prompt: Update sandbox and security behavior (TDD)



Required reading:

- docs/20251129/sandbox/sandbox_and_security.md

- docs/design/sandbox-approvals.md

- lib/codex/approvals.ex, lib/codex/telemetry.ex, lib/codex/tools/registry.ex (sandbox-aware flows)

- test/codex/approvals_test.exs, test/codex/tools_test.exs



Context to carry:

- Windows sandbox treats `<workspace_root>/.git` as read-only; world-writable scans are refined.

- Approval bypass for policy-approved commands; warning strings adjusted.

- PowerShell `apply_patch` parsing fix; sandbox assessment regression addressed.



Instructions (TDD):

1) Read the docs to capture expected platform-specific behaviors and strings.

2) Add failing tests for Windows read-only `.git` detection, deduped world-writable warnings, and approval bypass logic.

3) Adjust sandbox/approval handling and message normalization to satisfy tests; keep non-Windows paths unchanged.

4) Verify any PowerShell/apply_patch parsing in registry/tooling stays compatible.

5) Run targeted tests then `mix test`; avoid CI-only workflows.