chore: Enable danger-full-access sandbox mode for Codex sessions (#277)

kdy1 · web-flow · commit 40dd4f8dc359 · 2026-03-17T19:56:11.000-07:00
## Summary
- update `.codex/config.toml` to set `sandbox_mode` to
`danger-full-access` for more permissive tooling during runs

## Testing
- Not run (not requested)
diff --git a/.codex/config.toml b/.codex/config.toml
@@ -1,3 +1,4 @@
+sandbox_mode = "danger-full-access"
 [mcp_servers.derun]
 command = "sh"
 args = ["-c", "set -eu; repo_root=\"$(git rev-parse --show-toplevel)\"; export DERUN_STATE_ROOT=\"$repo_root/.derun-state\"; export GOMODCACHE=\"$repo_root/.gomodcache\"; export GOCACHE=\"$repo_root/.gocache\"; export GOPATH=\"$repo_root/.gopath\"; exec go -C \"$repo_root\" run ./cmds/derun mcp"]

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+sandbox_mode = "danger-full-access"`
`1`	`2`	`[mcp_servers.derun]`
`2`	`3`	`command = "sh"`
`3`	`4`	`args = ["-c", "set -eu; repo_root=\"$(git rev-parse --show-toplevel)\"; export DERUN_STATE_ROOT=\"$repo_root/.derun-state\"; export GOMODCACHE=\"$repo_root/.gomodcache\"; export GOCACHE=\"$repo_root/.gocache\"; export GOPATH=\"$repo_root/.gopath\"; exec go -C \"$repo_root\" run ./cmds/derun mcp"]`