Codex CLI 快捷键

The reference warns that you should set --full-auto for unattended local work, but avoid combining it with --dangerously-bypass-approvals-and-sandbox unless you are inside a dedicated sandbox VM.

When you need Codex to write to more directories, the reference recommends using --add-dir instead of forcing --sandbox danger-full-access.

For CI, the reference recommends pairing --json with --output-last-message so you get machine-readable progress plus a final natural-language summary.