Allow gradle to run in sandbox

[esafak]

What version of Codex is running?

codex-cli 0.46.0

What subscription do you have?

Plus

Which model were you using?

gpt-5-codex

What platform is your computer?

Darwin 24.6.0 arm64 arm

What issue are you seeing?

codex does not want to use gradle due to its sandbox.

What steps can reproduce the bug?

Ask codex to use gradle

What is the expected behavior?

No response

Additional information

No response

[github-actions]

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

• 403 from jitpack maven repo #5178

Powered by Codex Action

[IRus]

I've added this into ~/.codex/config.toml to solve this issue:

sandbox_mode = "workspace-write"

[sandbox_workspace_write]
network_access = true
writable_roots = ["/Users/user/.gradle"]

Seems it's working for me

[wcarmon]

You are my hero @IRus 🙏

on Linux, with gradle installed via sdkman, this worked: (small modification in writable_roots)

sandbox_mode = "workspace-write"

[sandbox_workspace_write]
network_access = true
writable_roots = [
  "/tmp/gradle-user-home",
  "/home/<my-user-name>/.gradle"
]

[Glavo]

One solution is to require Codex to specify GRADLE_USER_HOME when executing Gradle in AGENTS.md:

## Gradle

- When invoking Gradle in this repository, always set `GRADLE_USER_HOME` to the workspace-local `.gradle-user-home` directory.
- Prefer commands such as `./gradlew -g .gradle-user-home ...` or the equivalent environment-variable-based configuration.