bwrap: Can't mount devpts on /newroot/dev/pts: Permission denied

What version of the IDE extension are you using?

v26.707.71524

What subscription do you have?

Prlus

Which IDE are you using?

code-server

What platform is your computer?

Linux 6.12.11-200.fc41.x86_64 x86_64 x86_64

What issue are you seeing?

Halfway through a session, while the codex VSCode extension can modify workspace files before, it refuse to edit after some internal changes, and in output logs:

threadId=019f5fe1-771c-7ba1-b48a-10fdfdfa31f6 turnId=019f60c6-8857-7662-a2fc-72301c2c3507
2026-07-14 21:17:43.655 [warning] [IpcClient] Received broadcast but no handler is configured method=thread-stream-state-changed
2026-07-14 21:18:22.123 [error] [CodexMcpConnection] cli: message="codex_core::tools::router: error=apply_patch verification failed: Failed to read /.....ts: fs sandbox helper failed with status exit status: 1: bwrap: Can't mount devpts on /newroot/dev/pts: Permission denied"
2026-07-14 21:18:22.148 [warning] [IpcClient] Received broadcast but no handler is configured method=thread-stream-state-changed
2026-07-14 21:18:23.097 [warning] [IpcClient] Received broadcast but no handler is configured method=thread-stream-state-changed
2026-07-14 21:18:27.413 [info] Reasoning summary item completed itemId=rs_06b096a76556d433016a56371ee9748197a54c82bdf0d1dd4c summary=[] summaryPartCount=0 

What steps can reproduce the bug?

1. Open codex extension
2. Ask GPT to edit some file
3. GPT unable to edit:

I reread the file and prepared the replacement, but the workspace’s apply_patch helper is currently failing before it can read the file:
bwrap: Can't mount devpts on /newroot/dev/pts: Permission denied
No changes were applied.

Unsure how to make codex go from working (can edit file) to not working (cannot edit file).

What is the expected behavior?

GPT should be able to edit file

Additional information

_No response_