chore: remove writable_roots from sandbox_workspace_write configuration in install.sh

Author: DevelopmentCats

registry/coder-labs/modules/codex/README.md

@@ -96,16 +96,8 @@ preferred_auth_method = "apikey"
 
 [sandbox_workspace_write]
 network_access = true
-writable_roots = ["$/path/to/your/folder$", "$HOME/.codex"]
 ```
 
-The default configuration allows writing to only two specific directories:
-
-- Your specified `folder` (working directory)
-- `$HOME/.codex` (for configuration files like AGENTS.md)
-
-This provides secure sandbox boundaries while preventing access to other sensitive directories.
-
 ### **Custom Configuration (Optional)**
 
 For custom Codex configuration, use `base_config_toml` and/or `additional_mcp_servers`:

registry/coder-labs/modules/codex/scripts/install.sh

@@ -93,7 +93,6 @@ preferred_auth_method = "apikey"
 
 [sandbox_workspace_write]
 network_access = true
-writable_roots = ["${ARG_CODEX_START_DIRECTORY}", "$HOME/.codex"]
 
 EOF
 }