Codex is again asking for permission for every single file read command

[Rawalanche]

What version of the IDE extension are you using?

0.4.79

What subscription do you have?

Plus

Which IDE are you using?

VS Code

What platform is your computer?

Windows 25H2

What issue are you seeing?

The bug where Codex would ask for permission for every single file read/grep command is back. Codex will ask several dozen of permissions to simply read files.

This bug used to exist quite a while ago but was eventually solved. It has now returned in v0.4.79

What steps can reproduce the bug?

1. Prompt the Codex to inspect wider codebase (such as "Can you look around the project and find all usages of foo".
2. Select the "Yea and don't ask again" on every "Do you want to run this command" prompt.
3. Codex will still ask again.

What is the expected behavior?

The codex will browse the code base and return the information it gathered without need to confirm several dozens of "Do you want to run this command" prompts. Only write access prompts should require confirmation, not read ones.

Additional information

In this particular case, I had to confirm about ~40-50 GetContent commands:

No response

[github-actions]

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

• VS Code's horrible confirmation work-flow #11580
• Keeps asking for permission to run commands #11298
• Codex repeatedly prompts for xcodebuild approval due to inconsistent shell wrapping (/bin/zsh -lc vs direct execution) #12095

Powered by Codex Action

[etraut-openai]

This is likely because the Windows sandbox is not enabled or failed to install at startup.

Does the problem go away if you downgrade to a previous version of the extension? I'm trying to determine if this is a regression in the Codex extension or is caused by some other change on your system.

[Rawalanche]

This is likely because the Windows sandbox is not enabled or failed to install at startup.

Does the problem go away if you downgrade to a previous version of the extension? I'm trying to determine if this is a regression in the Codex extension or is caused by some other change on your system.

It seems solved by enabling "Run Codex in Windows Subsystem for Linux" setting.

However I am pretty sure earlier equivalent of this setting must have been enabled before somehow (I think the option to do it used to exist directly in the cogwheel settings menu before) because codex hasn't bothered me with approve prompts for past ~2 months.

Possibly something in 0.4.79 caused the WSL sandbox setting to reset to default.

I could try to downgrade to test it again, but I am a bit reluctant to do it now that the extension once again magically works well. This extension is very fragile and buggy, so any state/setup that has relatively no problems is rare and I'd like to enjoy it while it lasts.

[god-boat]

also seeing this issue. super annoying every get content command needs approval. feels like a regression since last week this was not the case, get content did not require approval. Issue persists across app reloads and system restarts V 0.5.79, vs code

[EricGT]

This is likely because the Windows sandbox is not enabled or failed to install at startup.

Would you consider this a valid way to check?

Using Windows Task Manager search for codex

For each Codex session there should be a codex-windows-sandbox. So if three instances of VSCode are running and using Codex there should be three codex-windows-sandbox, e.g.

---

Or to see the command line using Windows Task Manager details tab

[Rawalanche]

It happened to me again when I opened different VSCode project:

WSL is enabled in VSCode Codex settings, but no, there's no codex-windows-sandbox.exe running.

Of course "Yes and don't ask again...." doesn't do anything