mirror of
https://github.com/deepseek-ai/awesome-deepseek-agent.git
synced 2026-11-05 01:07:37 +00:00
[PR #440] docs(codex): document sandbox_mode requirement for file writes #436
Labels
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
deepseek-ai/awesome-deepseek-agent#436
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/deepseek-ai/awesome-deepseek-agent/pull/440
Author: @fhgffy
Created: 10/4/2026
Status: 🔄 Open
Base:
main← Head:docs/codex-sandbox-mode📝 Commits (2)
4cd371adocs(codex): document sandbox_mode requirement for file writesc24a8c1docs(codex): clarify effective sandbox mode and top-level settings📊 Changes
2 files changed (+42 additions, -0 deletions)
View changed files
📝
docs/codex.md(+21 -0)📝
docs/codex.zh-CN.md(+21 -0)📄 Description
Add matching English and Chinese instructions for allowing Codex to write project files in a read-only session. Put
sandbox_mode = "workspace-write"at the TOML top level, before any table sections; restart the session and check/status, or choose the mode at CLI launch.The guide also explains that launch options and workspace trust affect the effective mode, so an unset key does not always imply read-only access. Protected paths and managed policies may still restrict writes, and regenerating the config removes manually added settings. The permission guidance is based on the official Codex sandbox documentation.
Validation: parsed the sandbox snippets with Python's TOML parser, checked both translations and their links, and checked UTF-8 encoding and whitespace. No live Codex permission test was run.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.