fix: add support for codex 0.20.0

Author: 35C4n0r

registry/coder-labs/modules/codex/README.md

@@ -73,10 +73,8 @@ module "codex" {
 }
 ```
 
-> **Security Notice**: This module uses the `--dangerously-bypass-approvals-and-sandbox` flag when running Codex CLI. This flag
-> bypasses standard permission checks and allows Codex CLI broader access to your system than normally permitted. While
-> this enables more functionality, it also means Codex CLI can potentially execute commands with the same privileges as
-> the user running it. Use this module _only_ in trusted environments and be aware of the security implications.
+> **Security Notice**: This module marks the workspace/folder as trusted that allows Codex to work in this workspace without asking for approval.
+> Use this module _only_ in trusted environments and be aware of the security implications.
 
 ## How it Works
 

registry/coder-labs/modules/codex/scripts/install.sh

@@ -104,8 +104,13 @@ description = "Report ALL tasks and statuses (in progress, done, failed) you are
 type = "stdio"
 EOF
 )
-
+    TRUSTED_FOLDER=$(cat <<EOF
+projects = { "${ARG_CODEX_START_DIRECTORY}" = { trust_level = "trusted" } }
+EOF
+    )
     echo "
+${TRUSTED_FOLDER}
+
 ${ARG_EXTRA_CODEX_CONFIG}
 
 ${BASE_EXTENSIONS}

registry/coder-labs/modules/codex/scripts/start.sh

@@ -25,7 +25,7 @@ printf "start_directory: %s\n" "$ARG_CODEX_START_DIRECTORY"
 printf "task_prompt: %s\n" "$ARG_CODEX_TASK_PROMPT"
 echo "--------------------------------"
 set +o nounset
-CODEX_ARGS=("--skip-git-repo-check")
+CODEX_ARGS=()
 
 if command_exists codex; then
     printf "Codex is installed\n"
@@ -58,8 +58,8 @@ fi
 
 if [ -n "$ARG_CODEX_TASK_PROMPT" ]; then
     printf "Running the task prompt %s\n" "$ARG_CODEX_TASK_PROMPT"
-    PROMPT="Every step of the way, report tasks to Coder with proper descriptions and statuses. Your task at hand: $ARG_CODEX_TASK_PROMPT"
-    CODEX_ARGS+=("--dangerously-bypass-approvals-and-sandbox" "$PROMPT")
+    PROMPT="Complete the task at hand and at every step of the way, report tasks to Coder with proper summary and statuses. Your task at hand: $ARG_CODEX_TASK_PROMPT"
+    CODEX_ARGS+=("$PROMPT")
 else
     printf "No task prompt given.\n"
 fi
@@ -73,4 +73,4 @@ fi
 # use low width to fit in the tasks UI sidebar
 # we adjust the height to 930 due to a bug in codex, see: https://github.com/openai/codex/issues/1608
 printf "Starting codex with %s\n" "${CODEX_ARGS[@]}"
-agentapi server --term-width 63 --term-height 930 -- codex "${CODEX_ARGS[@]}"
+agentapi server --term-width 67 --term-height 1190 -- codex "${CODEX_ARGS[@]}"