Codex sandox issue

[dbalabka]

Thanks for an amazing project. I'm testing multiple such tools with Codex, and your looks very promising. I especially like the code-unit-indexing approach.

However, I've noticed that Codex Sandox mode allows editing files only in the workspace. Also, the new auto-review mode does not work as well. I see the following error:

colgrep is blocked by its index lock path being outside the writable sandbox, so I’m falling back to a read-only shell search for this exploration. I still
  need the actual code path, so I’m pulling that directly now.

The problem is related to the location where Colgrep stores the index. It is outside the workspace:

Index:   /home/dmitrybalabka/.local/share/colgrep/indices/...

You should recommend installing during colgrep --install-codex the following rule to allow writing outside the workspace:
~/.codex/rules/colgrep.rules

prefix_rule(pattern=["colgrep"], decision="allow")

While it is not safe, the workaround is to select Full Access under the /approvals.

[raphaelsty]

Hi @dbalabka, thank you for the issue 🙏😊