Add workspace write

Author: charlie-openai

examples/codex/Autofix-github-actions.ipynb

@@ -55,7 +55,6 @@
    "metadata": {},
    "source": [
     "```yaml\n",
-    "\n",
     "name: Codex Auto-Fix on Failure\n",
     "\n",
     "on:\n",
@@ -86,7 +85,6 @@
     "            echo \"OPENAI_API_KEY secret is not set. Skipping auto-fix.\" >&2\n",
     "            exit 1\n",
     "          fi\n",
-    "\n",
     "      - name: Checkout Failing Ref\n",
     "        uses: actions/checkout@v4\n",
     "        with:\n",
@@ -102,13 +100,13 @@
     "      - name: Install dependencies\n",
     "        run: |\n",
     "          if [ -f package-lock.json ]; then npm ci; else npm i; fi\n",
-    "\n",
     "      - name: Run Codex\n",
     "        uses: openai/codex-action@main\n",
     "        id: codex\n",
     "        with:\n",
     "          openai_api_key: ${{ secrets.OPENAI_API_KEY }}\n",
-    "          prompt: \"\"You are working in a Node.js monorepo with Jest tests and GitHub Actions. Read the repository, run the test suite, identify the minimal change needed to make all tests pass, implement only that change, and stop. Do not refactor unrelated code or files. Keep changes small and surgical.\"\n",
+    "          prompt: \"You are working in a Node.js monorepo with Jest tests and GitHub Actions. Read the repository, run the test suite, identify the minimal change needed to make all tests pass, implement only that change, and stop. Do not refactor unrelated code or files. Keep changes small and surgical.\"\n",
+    "          codex_args: '[\"--config\",\"sandbox_mode=\\\"workspace-write\\\"\"]'\n",
     "\n",
     "      - name: Verify tests\n",
     "        run: npm test --silent\n",
@@ -118,15 +116,13 @@
     "        uses: peter-evans/create-pull-request@v6\n",
     "        with:\n",
     "          commit-message: \"fix(ci): auto-fix failing tests via Codex\"\n",
-    "          branch: codex/auto-fix-${{ github.event.workflow_run.id }}\n",
+    "          branch: codex/auto-fix-${{ github.event.workflow_run.run_id }}\n",
     "          base: ${{ env.FAILED_HEAD_BRANCH }}\n",
     "          title: \"Auto-fix failing CI via Codex\"\n",
     "          body: |\n",
     "            Codex automatically generated this PR in response to a CI failure on workflow `${{ env.FAILED_WORKFLOW_NAME }}`.\n",
-    "\n",
     "            Failed run: ${{ env.FAILED_RUN_URL }}\n",
     "            Head branch: `${{ env.FAILED_HEAD_BRANCH }}`\n",
-    "\n",
     "            This PR contains minimal changes intended solely to make the CI pass.\n",
     "```\n"
    ]