From 4b89385fe1ad233dc2f3ab2b16121f025a10577c Mon Sep 17 00:00:00 2001
From: river0525 <0525sotaro@gmail.com>
Date: Mon, 2 Nov 2026 21:50:14 +0900
Subject: [PATCH] =?UTF-8?q?fix:config.toml=E3=81=AE=E5=95=8F=E9=A1=8C?=
 =?UTF-8?q?=E3=81=A7Codex=E3=81=8C=E8=B5=B7=E5=8B=95=E4=B8=8D=E5=8F=AF?=
 =?UTF-8?q?=E3=81=AB=E3=81=AA=E3=81=A3=E3=81=A6=E3=81=84=E3=81=9F=E3=81=AE?=
 =?UTF-8?q?=E3=82=92=E4=BF=AE=E6=AD=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .codex/config.toml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/.codex/config.toml b/.codex/config.toml
index 1825cb45d..b5a2f73cb 100644
--- a/.codex/config.toml
+++ b/.codex/config.toml
@@ -7,10 +7,7 @@ extends = ":workspace"
 
 [permissions.project-edit.filesystem]
 glob_scan_max_depth = 8
-# openai/codex#43929: masking two or more files aborts the sandbox at startup, while directory
-# denies are unaffected. Credentials are therefore denied by directory, keeping the single
-# file slot for `.env`.
-"~/.codex" = "deny"
+"~/.codex/auth.json" = "deny"
 "~/.claude" = "deny"
 "~/.ssh/**" = "deny"