Repository navigation
Windows: “Ask for approval” selected, but write_stdin blocked by sandbox_approval=false #53134
Description
What version of the Codex App are you using (From “About Codex” dialog)?
26.1007.21434 (build 13901)
What subscription do you have?
pro
What platform is your computer?
Microsoft Windows NT 10.0.22631.0 x64
What issue are you seeing?
“Ask for approval” is selected in the desktop app on Windows, but updating an existing Sites project repeatedly fails with:
write_stdin rejected: approval required by policy, but AskForApproval::Granular.sandbox_approval is false
Network and project Git-directory permissions were granted. However, write_stdin remains blocked without showing an approval prompt.
Expected behavior: Show the required approval prompt so I can approve the operation.
Actual behavior: The operation is rejected automatically despite “Ask for approval” being selected.
No site changes have been applied or published.
What steps can reproduce the bug?
- Open the desktop app on Windows.
- Select “Ask for approval” in the permissions menu.
- Ask Codex to edit and publish an existing Sites project.
- Grant the requested network and project Git-directory permissions.
- Codex starts the Sites source helper using exec_command with tty enabled.
- The helper displays: “Ready for Site workflow JSON on stdin (input is hidden).”
- Codex attempts to provide the required input using write_stdin.
- The operation is rejected without showing an approval prompt:
write_stdin rejected: approval required by policy, but AskForApproval::Granular.sandbox_approval is false
This occurred repeatedly in the same chat.
App version: 26.1007.21434 (build 13901)
OS: Microsoft Windows NT 10.0.22631.0 x64
What is the expected behavior?
When “Ask for approval” is selected, the app should display an approval prompt for operations requiring approval, rather than automatically rejecting them because sandbox_approval is false. After approval, the Sites workflow should be able to continue.
Additional information
No response
Activity
github-actions commentedon Oct 11, 2026
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
karentmol-collab commentedon Oct 14, 2026
I also reproduced this on Windows while publishing a private connector through Sites.
“Ask for permission” is selected. I fully restarted the application and granted network access and write access to the project’s Git directory. The publishing helper starts, but supplying its input fails with:
write_stdin rejected: approval required by policy, but AskForApproval::Granular.sandbox_approval is false
No approval prompt appears. A basic stdin test succeeds, but the Sites publishing step is rejected. The connector remains unpublished.
Please advise how to resolve this or provide a supported publication path. No credentials or private project data are included.