fix: Add -s workspace-write parameter to all codex commands throughout codebase

- Updated all codex command examples to include -s workspace-write parameter
- Fixed commands in agent files, workflow files, and command documentation
- Ensures all codex commands follow proper sandbox security requirements
- Maintains consistency across all documentation and command examples

Files updated:
- CLAUDE.md: Core development guidelines
- RELEASE_NOTES_v1.3.0.md: Release documentation
- .claude/agents/action-planning-agent.md: Agent command templates
- .claude/commands/codex/*.md: All codex command documentation
- .claude/commands/workflow/*.md: Workflow execution templates

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

.claude/agents/action-planning-agent.md

@@ -55,7 +55,7 @@ You are a pure execution agent specialized in creating actionable implementation
   - **Method Selection**: Use method specified in each step (gemini/codex/manual/auto-detected)
 - **CLI Commands**:
   - **Gemini**: `bash(~/.claude/scripts/gemini-wrapper -p "$(cat template_path) [expanded_action]")`
-  - **Codex**: `bash(codex --full-auto exec "$(cat template_path) [expanded_action]")`
+  - **Codex**: `bash(codex -s workspace-write --full-auto exec "$(cat template_path) [expanded_action]")`
 - **Follow Guidelines**: @~/.claude/workflows/intelligent-tools-strategy.md and @~/.claude/workflows/tools-implementation-guide.md
 
 ### Pre-Execution Analysis

.claude/commands/codex/chat.md

@@ -145,7 +145,7 @@ When `--save-session` flag is used:
 #### Full Auto Mode
 ```bash
 /codex:chat "create a complete user dashboard with charts" --full-auto
-# Executes: codex --full-auto "@{CLAUDE.md,**/*CLAUDE.md,**/*user*,**/*dashboard*} create a complete user dashboard with charts"
+# Executes: codex -s workspace-write --full-auto "@{CLAUDE.md,**/*CLAUDE.md,**/*user*,**/*dashboard*} create a complete user dashboard with charts"
 ```
 
 ### ⚠️ **Error Prevention**

.claude/commands/codex/execute.md

@@ -53,7 +53,7 @@ model: sonnet
 ```bash
 /codex:execute "create complete todo application with React and TypeScript"
 ```
-**Process**: Uses `codex --full-auto` for autonomous implementation
+**Process**: Uses `codex -s workspace-write --full-auto` for autonomous implementation
 
 ## Context Inference Logic
 
@@ -129,7 +129,7 @@ Execute implementation following task acceptance criteria."
 
 ### Full Auto Template
 ```bash
-codex --full-auto "@{**/*} @{CLAUDE.md,**/*CLAUDE.md}
+codex -s workspace-write --full-auto "@{**/*} @{CLAUDE.md,**/*CLAUDE.md}
 
 Development Task: [user_description]
 

.claude/commands/codex/mode/auto.md

@@ -19,7 +19,7 @@ Leverages Codex's `--full-auto` mode for autonomous development with intelligent
 
 **Process**: Analyze Input → Select Templates → Gather Context → Execute Autonomous Development
 
-⚠️ **Critical Feature**: Uses `codex --full-auto` for maximum autonomous capability with mandatory `@` pattern requirements.
+⚠️ **Critical Feature**: Uses `codex -s workspace-write --full-auto` for maximum autonomous capability with mandatory `@` pattern requirements.
 
 ## Usage
 
@@ -137,7 +137,7 @@ END FUNCTION
 ### Step 3: Execute with Full Auto Mode
 ```bash
 # Autonomous development execution with comprehensive context
-codex --full-auto "@{**/*} @{CLAUDE.md,**/*CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/[selected_template])
+codex -s workspace-write --full-auto "@{**/*} @{CLAUDE.md,**/*CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/[selected_template])
 
 Development Task: [user_input]
 

.claude/commands/codex/mode/plan.md

@@ -15,7 +15,7 @@ model: sonnet
 
 ## Overview
 Comprehensive development planning and implementation strategy using expert planning templates with Codex CLI.
--   **Directory Analysis Rule**: When user intends to analyze specific directory (cd XXX), use: `codex --cd XXX --full-auto exec "prompt"` or `cd XXX && codex --full-auto exec "@{**/*} prompt"`
+-   **Directory Analysis Rule**: When user intends to analyze specific directory (cd XXX), use: `codex -s workspace-write --cd XXX --full-auto exec "prompt"` or `cd XXX && codex -s workspace-write --full-auto exec "@{**/*} prompt"`
 -   **Default Mode**: `--full-auto exec` autonomous development mode (RECOMMENDED for all tasks).
 
 
@@ -27,20 +27,20 @@ Comprehensive development planning and implementation strategy using expert plan
 ```bash
 /codex:mode:plan "design authentication system with implementation"
 ```
-**Executes**: `codex --full-auto exec "@{**/*} @{CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/planning/task-breakdown.txt) design authentication system with implementation"`
+**Executes**: `codex -s workspace-write --full-auto exec "@{**/*} @{CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/planning/task-breakdown.txt) design authentication system with implementation"`
 
 ### Architecture Planning with Context
 ```bash
 /codex:mode:plan "microservices migration strategy"
 ```
-**Executes**: `codex  --full-auto exec "@{src/**/*,*.config.*,CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/planning/migration.txt) microservices migration strategy"`
+**Executes**: `codex -s workspace-write --full-auto exec "@{src/**/*,*.config.*,CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/planning/migration.txt) microservices migration strategy"`
 
 ### Feature Implementation Planning
 ```bash
 /codex:mode:plan "real-time notifications with WebSocket integration"
 ```
 
-**Executes**: `codex --full-auto exec "@{**/*} @{CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/development/feature.txt) Additional Planning Context:$(cat ~/.claude/workflows/cli-templates/prompts/planning/task-breakdown.txt) real-time notifications with WebSocket integration"`
+**Executes**: `codex -s workspace-write --full-auto exec "@{**/*} @{CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/development/feature.txt) Additional Planning Context:$(cat ~/.claude/workflows/cli-templates/prompts/planning/task-breakdown.txt) real-time notifications with WebSocket integration"`
 
 ## Codex-Specific Planning Patterns
 

.claude/commands/workflow/execute.md

@@ -113,7 +113,7 @@ Task(subagent_type="code-developer",
      Output: pattern_analysis
 
      Step 3 (implement): Implement JWT based on analysis
-     Command: codex --full-auto exec 'Implement JWT using analysis: [pattern_analysis] and context: [dependency_context]'
+     Command: codex -s workspace-write --full-auto exec 'Implement JWT using analysis: [pattern_analysis] and context: [dependency_context]'
 
      Session Context:
      - Workflow Directory: .workflow/WFS-user-auth/

.claude/commands/workflow/plan.md

@@ -163,16 +163,16 @@ cd [module] && ~/.claude/scripts/gemini-wrapper -p "Find 3+ similar [feature_typ
 #### Codex Analysis Templates
 ```bash
 # Architectural analysis
-codex --full-auto exec "analyze [scope] architecture and identify optimization opportunities"
+codex -s workspace-write --full-auto exec "analyze [scope] architecture and identify optimization opportunities"
 
 # Pattern-based development
-codex --full-auto exec "analyze existing patterns for [feature] implementation with concrete examples"
+codex -s workspace-write --full-auto exec "analyze existing patterns for [feature] implementation with concrete examples"
 
 # Project understanding
-codex --full-auto exec "analyze project structure, conventions, and development requirements"
+codex -s workspace-write --full-auto exec "analyze project structure, conventions, and development requirements"
 
 # Modernization analysis
-codex --full-auto exec "identify modernization opportunities and refactoring priorities"
+codex -s workspace-write --full-auto exec "identify modernization opportunities and refactoring priorities"
 ```
 
 ### Context Accumulation & Inheritance