A sandbox mode that restricts file access but allows free network access (with or without cached web searches)

[jrd-1]

What variant of Codex are you using?

CLI

What feature would you like to see?

Running on Windows (haven't tried macos), unless the sandbox mode is "danger-full-access", network access seems to always be restricted. While this behaviour is great for many things, writing network components is incredibly challenging in this environment because connectivity often simply doesn't work (and you aren't asked for escalation in many cases). A sandbox mode with full network access while retaining the workspace file access restrictions would be a godsend. The option to use cached web searches would be beneficial in this case.

reported against codex cli 0.106.0.

Additional information

No response

[etraut-openai]

Please refer to this documentation.

[jrd-1]

I followed the documentation, spent a few hours with it actually; it doesn't seem to be effective in resolving the network access restrictions. If you can provide me with a sample config.toml file that frees the network restrictions, I would appreciate it.

With the values:

[sandbox_workspace_write]
network_access = true

in my config.toml, network access is still restricted. Nothing seems to clear it unless the sandbox mode is "danger-full-access".

[mikemike396]

Same issue here on osx. Trying to setup an automation to connect to a db. Works in the terminal but fails to connect in codex app.

[mikemike396]

With the latest build I was able to change the sandbox settings to workspace write and check the "allow network access". After restarting codex my automations can access the network!

[etraut-openai]

This feature request hasn't received enough upvotes, so I'm closing it.