{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreifwlcrpe4gnbq3pqavq4bb3q4yecixs4t2knekvydi6cblawj4ehe",
    "uri": "at://did:plc:lk3jfj3zq4k4wxnk474axylu/app.bsky.feed.post/3mmvssydqubp2"
  },
  "path": "/t/codex-desktop-full-access-enabled-but-new-chats-still-launch-with-network-disabled/1381940#post_1",
  "publishedAt": "2026-05-28T10:09:34.000Z",
  "site": "https://community.openai.com",
  "textContent": "I’m seeing a Codex Desktop permission mismatch where the UI and config show network/full access enabled, but new chats still launch with network disabled.\n\nEnvironment:\n\n  * Codex Desktop: `0.133.0`\n  * macOS app\n  * Date observed: May 28, 2026 PT\n\n\n\nWhat I did:\n\n  1. Enabled **Full access** in Codex Desktop Settings.\n  2. Restarted Codex Desktop multiple times.\n  3. Created a new chat after the toggle and restart.\n  4. Checked the effective runtime environment.\n\n\n\nExpected:\n\n  * New chats should launch with network access enabled.\n  * `CODEX_SANDBOX_NETWORK_DISABLED` should be absent.\n\n\n\nActual:\n\n  * New chats still show:\n`CODEX_SANDBOX_NETWORK_DISABLED=1`\n  * `~/.codex/config.toml` contains:\n`sandbox_mode = \"workspace-write\"`\n`network_access = true`\n  * But Codex’s persisted per-thread state still records the new thread with:\n`sandboxPolicy.networkAccess:false`\n  * The active thread DB also records:\n`{\"type\":\"workspace-write\",\"network_access\":false,...}`\n\n\n\nImpact:\n\n  * Some allowlisted commands like `curl -sS --max-time ...` or `git -C ...` can still reach GitHub, which makes diagnostics confusing.\n  * But normal sandboxed shell work sees network disabled.\n  * Project automation that correctly checks `CODEX_SANDBOX_NETWORK_DISABLED` refuses to run network-dependent finish/push steps.\n\n\n\nThis looks like Codex Desktop is not translating the Full access UI/config setting into the per-thread sandbox policy used when launching new chats.\n\nIs there another setting or state file that controls `heartbeat-thread-permissions-by-id[*].sandboxPolicy.networkAccess`, or is this a Codex Desktop bug?",
  "title": "Codex Desktop Full access enabled, but new chats still launch with network disabled"
}