Codex Desktop appears to ignore `sandbox_workspace_write.writable_roots`

What version of Codex is running?

260202.0859 (517)

What subscription do you have?

Business

Which model were you using?

N/A

What platform is your computer?

Darwin 25.2.0 arm64 arm

What terminal emulator and version are you using (if applicable)?

N/A

What issue are you seeing?

<img width="1561" height="1158" alt="Image" src="https://github.com/user-attachments/assets/5dd4bf9e-d95e-4cf2-b248-3b5178248c6a" />

Writable roots within the Desktop app appear to be the "default" for codex, rather than those set by the config. This breaks quite a few tools, requiring they run via escalation.

What steps can reproduce the bug?

1. Add some folder to sandbox_workspace_write.writable_roots in the config such as /Users/$USER/.bun
2. Open Codex Desktop and ask it to write a test file there

What is the expected behavior?

The writable roots within Codex Desktop match Codex CLI (and the config)

Additional information

_No response_