feat: add per-group workDir for agent working directory override

Agents can now run in a specified project directory instead of the group
folder. The group's CLAUDE.md is still loaded via additionalDirectories.

container/codex-runner/src/index.ts

@@ -36,6 +36,8 @@ interface ContainerOutput {
 // Paths configurable via env vars (defaults to container paths for backwards compat)
 const GROUP_DIR = process.env.NANOCLAW_GROUP_DIR || '/workspace/group';
 const IPC_DIR = process.env.NANOCLAW_IPC_DIR || '/workspace/ipc';
+// Optional: override cwd (agent works in this directory instead of GROUP_DIR)
+const WORK_DIR = process.env.NANOCLAW_WORK_DIR || '';
 const IPC_INPUT_DIR = path.join(IPC_DIR, 'input');
 const IPC_INPUT_CLOSE_SENTINEL = path.join(IPC_INPUT_DIR, '_close');
 const IPC_POLL_MS = 500;
@@ -125,6 +127,7 @@ function waitForIpcMessage(): Promise<string | null> {
 async function runCodexExec(prompt: string, resume: boolean): Promise<{ result: string; error?: string }> {
   return new Promise((resolve) => {
     const args: string[] = [];
+    const effectiveCwd = WORK_DIR || GROUP_DIR;
 
     if (resume) {
       // Resume the most recent session with a new prompt
@@ -143,7 +146,7 @@ async function runCodexExec(prompt: string, resume: boolean): Promise<{ result:
       args.push(
         'exec',
         '--dangerously-bypass-approvals-and-sandbox',
-        '-C', GROUP_DIR,
+        '-C', effectiveCwd,
         '--skip-git-repo-check',
         '--color', 'never',
         prompt,
@@ -154,7 +157,7 @@ async function runCodexExec(prompt: string, resume: boolean): Promise<{ result:
 
     const codex: ChildProcess = spawn('codex', args, {
       stdio: ['pipe', 'pipe', 'pipe'],
-      cwd: GROUP_DIR,
+      cwd: effectiveCwd,
       env: { ...process.env },
     });