fix: apply codex sandbox before resume

Author: Joshua Chittick

packages/agents/codex/client.ts

@@ -120,12 +120,7 @@ export function buildCodexCommandArgs(params: {
   model?: string;
   planMode?: boolean;
 }): string[] {
-  const args = [
-    "exec",
-    "resume",
-    "--json",
-    "--skip-git-repo-check",
-  ];
+  const args = ["exec", "--json", "--skip-git-repo-check"];
   if (params.planMode) {
     args.push("--sandbox", "read-only");
   } else {
@@ -134,7 +129,7 @@ export function buildCodexCommandArgs(params: {
   if (params.model) {
     args.push("--model", params.model);
   }
-  args.push(params.sessionId, params.prompt);
+  args.push("resume", params.sessionId, params.prompt);
   return args;
 }
 

packages/agents/test/cli-command.test.ts

@@ -82,7 +82,7 @@ describe("agent cli command formatting", () => {
     });
     const command = buildCodexCommand(args);
 
-    expect(command).toContain("codex exec resume");
+    expect(command).toContain("codex exec --json --skip-git-repo-check");
     expect(command).toContain("--json");
     expect(command).toContain("--full-auto");
     expect(command).toContain("--model gpt-5-codex");
@@ -99,7 +99,7 @@ describe("agent cli command formatting", () => {
     });
     const command = buildCodexCommand(args);
 
-    expect(command).toContain("codex exec resume");
+    expect(command).toContain("codex exec --json --skip-git-repo-check");
     expect(command).toContain("--json");
     expect(command).toContain("--sandbox read-only");
     expect(command).not.toContain("--full-auto");