Desktop Ask for approval blocks Sites source sync; /feedback unavailable #52971

Environment

• macOS desktop app, bundle com.openai.codex
• App version 26.1007.21159, build 20052
• Bundled codex-cli 0.162.0-alpha.17.2
• Local workspace execution

Problem
The owner explicitly authorized publishing an existing Sites project. The UI shows Ask for approval selected, but the source workflow cannot receive its credential JSON via hidden stdin. The tool returns:
write_stdin rejected: approval required by policy, but AskForApproval::Granular.sandbox_approval is false

Neither typing / nor /feedback exposes a feedback form; /feedback remains plain text.

Reproduction

1. Select Ask for approval in the desktop permissions picker.
2. Start the official Sites site-workflow helper in a local checkout, using a PTY.
3. When the helper reports Ready for Site workflow JSON on stdin (input is hidden), provide the repo-scoped credential object using write_stdin.
4. The request is rejected by the effective granular approval policy without a user approval prompt.

Read-only checks
User config has no approval_policy, sandbox_mode, permissions profiles, or feedback-disable entry. No project override or standard system requirements.toml/managed_config.toml was found. MDM enrollment and Codex managed preference keys were absent.

Recorded failures on 2026-10-10 (UTC)
19:08:42.754Z approval error above
19:09:08.072Z approval error above
19:09:18.923Z approval error above
19:12:00.541Z approval error above
19:13:01.275Z Could not resolve host: git.chatgpt-team.site
19:13:20.941Z approval error above

Expected
An authorized sandbox exception should present an approval prompt, or the app should identify which policy enforces automatic rejection. The documented feedback flow should be available, or a supported alternative should be provided.

Questions
Which layer supplies sandbox_approval=false in this build? How can an owner request a narrow supported exception without disabling the sandbox? Where is the feedback form in this build?

Privacy
This report intentionally omits account email, project ID, customer information, credentials, raw logs and personal filesystem paths. Workspace/account tier has not been confirmed. No full-access workaround has been applied.