fix(agent): correct CLI arguments for codex and claude

- Codex: use --full-auto instead of -a never (not available in exec mode)
- Claude: add --add-dir for project directory access in -p mode

Tested: commands construct correctly, execute properly (auth errors are
expected when CLIs not configured with API keys)

Relates to #536

Author: phodal

mpp-core/src/commonMain/kotlin/cc/unitmesh/agent/external/ExternalCliCodingAgent.kt

@@ -151,28 +151,38 @@ class ExternalCliCodingAgent(
             ExternalCliKind.CLAUDE -> when (mode) {
                 ExternalCliMode.NON_INTERACTIVE -> buildString {
                     append(kind.binary)
-                    append(" -p --output-format text ")
+                    // -p: print mode (non-interactive), --output-format text: plain text output
+                    // --add-dir: allow tool access to project directory
+                    // --permission-mode default: use default permissions (no interactive prompts in -p mode)
+                    append(" -p --output-format text --add-dir ")
+                    append(ShellUtils.escapeShellArg(projectPath))
+                    append(' ')
                     if (args.isNotBlank()) append(args).append(' ')
                     append(promptArg)
                 }
                 ExternalCliMode.INTERACTIVE -> buildString {
-                    append(kind.binary).append(' ')
+                    append(kind.binary)
+                    append(" --add-dir ")
+                    append(ShellUtils.escapeShellArg(projectPath))
+                    append(' ')
                     if (args.isNotBlank()) append(args).append(' ')
                     append(promptArg)
                 }
             }
             ExternalCliKind.CODEX -> when (mode) {
                 ExternalCliMode.NON_INTERACTIVE -> buildString {
                     append(kind.binary)
-                    append(" exec --color auto -a never -s workspace-write -C ")
+                    // codex exec: --full-auto = auto approval + workspace-write sandbox
+                    append(" exec --full-auto --color auto -C ")
                     append(ShellUtils.escapeShellArg(projectPath))
                     append(' ')
                     if (args.isNotBlank()) append(args).append(' ')
                     append(promptArg)
                 }
                 ExternalCliMode.INTERACTIVE -> buildString {
                     append(kind.binary)
-                    append(" -C ")
+                    // Interactive mode: use main codex command with full-auto for sandboxed execution
+                    append(" --full-auto -C ")
                     append(ShellUtils.escapeShellArg(projectPath))
                     append(" --no-alt-screen ")
                     if (args.isNotBlank()) append(args).append(' ')