Allow additional folders into a project's Windows Sandbox

Resolved 💬 4 comments Opened Mar 7, 2026 by bLightZP Closed Apr 18, 2026

💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What variant of Codex are you using?

App (Windows)

What feature would you like to see?

Right now the sandbox prevents access to any folder outside the project's which is great, but there's no way to add additional folders on the PC into the sandbox which causes codex to get confused try and fail multiple times running various tools, etc.

For example, if I develop something with flutter, the flutter executable is outside my project page and fails to run properly unless I give explicit permission to run it with elevated permissions.

Additional information

_No response_

View original on GitHub ↗

4 Comments

github-actions[bot] contributor · 5 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

#11956
#13394

Powered by Codex Action

etraut-openai contributor · 5 months ago

There is a way to do this, but it's not obvious.

You can create a project-level .codex/config.toml file and add the following to it:

[sandbox_workspace_write]
writable_roots = ["C:/path/1/to/add", "C:/path/2/to/add"]

For more details, refer to this documentation.

Let's leave this feature request open because I think it would be good to make this editable in the app settings UI.

bLightZP · 5 months ago

@etraut-openai I created a ".codex" sub folder within my project's root folder and then created a "config.toml" file within that sub folder with the text you've listed. I tried that using both forward and backward slashes, but it appears the file is not being picked up.
I tried asking codex itself about it and it wrote:

I even tried adding it to the global config.toml file and codex is still unable to write data in the flutter folder without asking for permission, here's the content of the file (I tried a path with ending "/" and without. Using a "\\" slash caused the sandbox not to work at all ("\\\\" did not break the sandbox, but didn't work either):

model = "gpt-5.4"
model_reasoning_effort = "medium"
personality = "pragmatic"

[windows]
sandbox = "elevated"

[sandbox_workspace_write]
writable_roots = ["c:/Git/flutter/"]

etraut-openai contributor · 4 months ago

This feature request hasn't received any upvotes in over a month, so I'm going to close it.