[metadata]
name = "codex"
description = "Safe compatibility roots for the Codex CLI."
[filesystem]
allow_write = ["$AGENT"]
allow_read = ["$AGENT"]
[environment]
pass_through = [
"OPENAI_API_KEY",
"OPENAI_BASE_URL",
"CODEX_*",
]
[display_only_deny]
paths = [
"$AGENT/auth.json",
"$AGENT/app_server.sock",
"$AGENT/*.sock",
]