feat: mount ~/.codex into local sandboxes for Codex CLI auth

Author: noeljackson

cmd/cw/lima_backend.go

@@ -177,6 +177,13 @@ func limaCreateCommandArgs(instance *cwconfig.LocalInstance) []string {
 			strconv.Quote(claudeDir),
 		)
 	}
+	codexDir := filepath.Join(homeDir, ".codex")
+	if _, err := localOsStat(codexDir); err == nil {
+		mounts += fmt.Sprintf(
+			`,{"location":%s,"mountPoint":"/home/{{.User}}.guest/.codex","writable":true}`,
+			strconv.Quote(codexDir),
+		)
+	}
 
 	mountSet := ".mounts=[" + mounts + "]"
 
@@ -294,6 +301,7 @@ func createLocalLimaInstance(instance *cwconfig.LocalInstance) error {
 	dockerArgs = append(dockerArgs,
 		"-v", filepath.Join(vmHome, ".config", "gh")+":/home/codewire/.config/gh:ro",
 		"-v", "/mnt/host-ssh:/home/codewire/.ssh:ro",
+		"-v", filepath.Join(vmHome, ".codex")+":/home/codewire/.codex",
 	)
 	dockerArgs = append(dockerArgs,
 		"--workdir", "/workspace",

cmd/cw/local_cmd.go

@@ -743,6 +743,13 @@ func createLocalIncusInstance(instance *cwconfig.LocalInstance) error {
 				return err
 			}
 		}
+		codexDir := filepath.Join(homeDir, ".codex")
+		if _, statErr := localOsStat(codexDir); statErr == nil {
+			if err := runIncus("config", "device", "add", instance.RuntimeName, "codex-config", "disk",
+				"source="+codexDir, "path=/home/codewire/.codex"); err != nil {
+				return err
+			}
+		}
 	}
 	if err := runIncus("start", instance.RuntimeName); err != nil {
 		return err
@@ -780,6 +787,10 @@ func createLocalDockerInstance(instance *cwconfig.LocalInstance) error {
 		if _, err := localOsStat(sshDir); err == nil {
 			args = append(args, "--volume", sshDir+":/home/codewire/.ssh:ro")
 		}
+		codexDir := filepath.Join(homeDir, ".codex")
+		if _, err := localOsStat(codexDir); err == nil {
+			args = append(args, "--volume", codexDir+":/home/codewire/.codex")
+		}
 	}
 	if instance.CPU > 0 {
 		args = append(args, "--cpus", formatDockerCPUs(instance.CPU))