Update Codex adapter invocation

[duncankmckinnon]

Summary

• replace the deprecated codex exec --full-auto invocation with --dangerously-bypass-approvals-and-sandbox
• allow dispatched Codex task and merger agents to stage and commit inside isolated Git worktrees without interactive approval
• parse the current Codex JSONL item.completed / agent_message event shape
• retain support for the legacy assistant-message event shape
• document the unrestricted local-access security tradeoff

Why

Workbench directives require implementor and fixer agents to commit their changes, while merger agents must stage conflict resolutions. Codex's workspace-write sandbox protects .git and resolved worktree Git metadata as read-only, so sandboxed agents cannot reliably complete those steps. The adapter therefore uses Codex's explicit unattended full-access mode.

Impact

Workbench can invoke current Codex CLI versions, reliably extract their final response, and let dispatched agents complete Git operations required by the existing pipeline. Because approvals and sandboxing are bypassed, this adapter should only be used for trusted repositories in appropriately isolated environments.

Validation

• black --check workbench/adapters.py tests/test_adapters.py
• isort --check-only workbench/adapters.py tests/test_adapters.py
• full test suite: 1,185 passed

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!