chore: remove writable_roots from sandbox_workspace_write configurati…

…on in install.sh
coder · DevelopmentCats · Aug 21, 2025 · Aug 20, 2025 · Aug 20, 2025 · Aug 20, 2025
commit 706b398548b2f9f085fb655374a24b5a94cacbea
diff --git a/registry/coder-labs/modules/codex/README.md b/registry/coder-labs/modules/codex/README.md
@@ -96,16 +96,8 @@ preferred_auth_method = "apikey"
 
 [sandbox_workspace_write]
 network_access = true
-writable_roots = ["$/path/to/your/folder$", "$HOME/.codex"]
 ```
 
-The default configuration allows writing to only two specific directories:
-
-- Your specified `folder` (working directory)
-- `$HOME/.codex` (for configuration files like AGENTS.md)
-
-This provides secure sandbox boundaries while preventing access to other sensitive directories.
-
 ### **Custom Configuration (Optional)**
 
 For custom Codex configuration, use `base_config_toml` and/or `additional_mcp_servers`:

diff --git a/registry/coder-labs/modules/codex/scripts/install.sh b/registry/coder-labs/modules/codex/scripts/install.sh
@@ -93,7 +93,6 @@ preferred_auth_method = "apikey"
 
 [sandbox_workspace_write]
 network_access = true
-writable_roots = ["${ARG_CODEX_START_DIRECTORY}", "$HOME/.codex"]
 
 EOF
 }
-Original file line number
+Diff line change
@@ Expand Up / @@ -93,7 +93,6 @@ preferred_auth_method = "apikey" @@
     [sandbox_workspace_write]
     network_access = true
-    writable_roots = ["${ARG_CODEX_START_DIRECTORY}", "$HOME/.codex"]
     EOF
     }
@@ Expand Down @@