From f76e13fc18ee7a23bf98fb52be389e42f016de0e Mon Sep 17 00:00:00 2001
From: Julian lechner <j.lechner@sobit.at>
Date: Thu, 1 Oct 2026 10:22:07 +0200
Subject: [PATCH] feat(codex): allow network access in workspace sandbox

Enable sandbox_workspace_write.network_access so MCPorter calls such as
Context7 run without an approval round trip.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 adapters/codex/config/config.toml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/adapters/codex/config/config.toml b/adapters/codex/config/config.toml
index f404e89..9c8df34 100644
--- a/adapters/codex/config/config.toml
+++ b/adapters/codex/config/config.toml
@@ -2,6 +2,9 @@ approval_policy = "on-request"
 approvals_reviewer = "auto_review"
 sandbox_mode = "workspace-write"
 
+[sandbox_workspace_write]
+network_access = true
+
 [windows]
 sandbox = "unelevated"