From 06782eded78ff6e76d5139c2704988da99d2df42 Mon Sep 17 00:00:00 2001 From: rhan-oai Date: Wed, 22 Jul 2026 19:08:28 +0000 Subject: [PATCH] Fix network access rendering in sandbox prompts (#34811) ## What changed Use the supported `{{ network_access }}` placeholder syntax in the built-in `danger-full-access`, `read-only`, and `workspace-write` sandbox templates so permission instructions render the active network access state. GitOrigin-RevId: 9f8d851016bd7fbedcfc4a9479236b46aca470e8 --- .../templates/permissions/sandbox_mode/danger_full_access.md | 2 +- .../prompts/templates/permissions/sandbox_mode/read_only.md | 2 +- .../templates/permissions/sandbox_mode/workspace_write.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md b/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md index d9b6f26853..65d282ee65 100644 --- a/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md +++ b/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md @@ -1 +1 @@ -Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is {{network_access}}. +Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is {{ network_access }}. diff --git a/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md b/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md index a221124ea8..a43320ae56 100644 --- a/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md +++ b/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md @@ -1 +1 @@ -Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `read-only`: The sandbox only permits reading files. Network access is {{network_access}}. +Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `read-only`: The sandbox only permits reading files. Network access is {{ network_access }}. diff --git a/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md b/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md index 0732a998e8..5d75aaffbe 100644 --- a/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md +++ b/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md @@ -1 +1 @@ -Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `workspace-write`: The sandbox permits reading files, and editing files in `cwd` and `writable_roots`. Editing files in other directories requires approval. Network access is {{network_access}}. +Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `workspace-write`: The sandbox permits reading files, and editing files in `cwd` and `writable_roots`. Editing files in other directories requires approval. Network access is {{ network_access }}.