Windows: write_stdin blocked by granular approval policy, preventing Sites edits #51688

What version of the Codex App are you using (From “About Codex” dialog)?

26.1002.7124.0

What subscription do you have?

Plus

What platform is your computer?

No response

What issue are you seeing?

Codex cannot complete edits to an existing Sites website because write_stdin is rejected, even after network and filesystem permissions are granted.

Exact error:
write_stdin rejected: approval required by policy, but AskForApproval::Granular.sandbox_approval is false

The same error occurs when sending harmless text to a fresh Node process, without credentials or filesystem changes.

Sites owner access and database reads work. Fresh DNS, HTTPS, and Git connectivity tests reach the source server successfully.

This has happened across multiple chats and persists after restarts and updates.

What steps can reproduce the bug?

Feedback ID: 01a11674-2607-7382-b2fc-3deff290c041

What is the expected behavior?

Sending ordinary text to a process started by the agent should work within granted permissions. If additional approval is required, Codex should provide an available approval path rather than reject the operation through a disabled approval category.

Additional information

A separate sandbox setup fault was found:

windows.sandbox = "elevated"

Sandbox refresh fails while validating read/execute permissions on the bundled cua_node node_repl.exe:

The process cannot access the file because it is being used by another process. (os error 32)

setup_error.json:
{"code":"helper_unknown_error","message":"setup refresh had errors"}

This occurred twice on 7 October 2026 around 14:00 London time. Its connection to the write_stdin rejection is unconfirmed.

No website data, sandbox settings, or global Git configuration were changed during diagnosis.