app/windows.md +14 −11
4working across projects, running parallel agent threads, and reviewing results.4working across projects, running parallel agent threads, and reviewing results.
5It runs natively on Windows using PowerShell and the5It runs natively on Windows using PowerShell and the
6[Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox), or you can configure it to6[Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox), or you can configure it to
77run in [Windows Subsystem for Linux (WSL)](#windows-subsystem-for-linux-wsl).run in [Windows Subsystem for Linux 2 (WSL2)](#windows-subsystem-for-linux-wsl).
8 8
99
10 10
30 30
31## Native sandbox31## Native sandbox
32 32
3333The Codex app on Windows supports a native [Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox) when the agent runs in PowerShell, and uses Linux sandboxing when you run the agent in [Windows Subsystem for Linux (WSL)](#windows-subsystem-for-linux-wsl). To apply sandbox protections in either mode, set sandbox permissions to **Default permissions** in the Composer before sending messages to Codex.The Codex app on Windows supports a native [Windows sandbox](https://developers.openai.com/codex/windows#windows-sandbox) when the agent runs in PowerShell, and uses Linux sandboxing when you run the agent in [Windows Subsystem for Linux 2 (WSL2)](#windows-subsystem-for-linux-wsl). To apply sandbox protections in either mode, set sandbox permissions to **Default permissions** in the Composer before sending messages to Codex.
34 34
35Running Codex in full access mode means Codex is not limited to your project35Running Codex in full access mode means Codex is not limited to your project
36 directory and might perform unintentional destructive actions that can lead to36 directory and might perform unintentional destructive actions that can lead to
71 71
72By default, the Codex app uses the Windows-native agent. That means the agent72By default, the Codex app uses the Windows-native agent. That means the agent
73runs commands in PowerShell. The app can still work with projects that live in73runs commands in PowerShell. The app can still work with projects that live in
7474Windows Subsystem for Linux (WSL) by using the `wsl` CLI when needed.Windows Subsystem for Linux 2 (WSL2) by using the `wsl` CLI when needed.
75 75
76If you want to add a project from the WSL filesystem, click **Add new project**76If you want to add a project from the WSL filesystem, click **Add new project**
77or press <kbd>Ctrl</kbd>+<kbd>O</kbd>, then type `\\wsl$\` into the File77or press <kbd>Ctrl</kbd>+<kbd>O</kbd>, then type `\\wsl$\` into the File
83`/mnt/<drive>/...`. This setup is more reliable than opening projects83`/mnt/<drive>/...`. This setup is more reliable than opening projects
84directly from the WSL filesystem.84directly from the WSL filesystem.
85 85
8686If you want the agent itself to run in WSL, open **[Settings](codex://settings)**,If you want the agent itself to run in WSL2, open **[Settings](codex://settings)**,
87switch the agent from Windows native to WSL, and **restart the app**. The87switch the agent from Windows native to WSL, and **restart the app**. The
88change doesn't take effect until you restart. Your projects should remain in88change doesn't take effect until you restart. Your projects should remain in
89place after restart.89place after restart.
90 90
91WSL1 was supported through Codex `0.114`. Starting in Codex `0.115`, the Linux
92sandbox moved to `bubblewrap`, so WSL1 is no longer supported.
93
9194
92 95
93You configure the integrated terminal independently from the agent. See96You configure the integrated terminal independently from the agent. See
181`%USERPROFILE%\.codex`.184`%USERPROFILE%\.codex`.
182 185
183If you also run the Codex CLI inside WSL, the CLI uses the Linux home186If you also run the Codex CLI inside WSL, the CLI uses the Linux home
184187directory by default, so it does not automatically share configuration, cacheddirectory by default, so it doesn't automatically share configuration, cached
185auth, or session history with the Windows app.188auth, or session history with the Windows app.
186 189
187To share them, use one of these approaches:190To share them, use one of these approaches:
203 206
204### Git isn't detected for projects opened from `\\wsl$`207### Git isn't detected for projects opened from `\\wsl$`
205 208
206209For now, if you want to use the Windows-native agent with a project that isFor now, if you want to use the Windows-native agent with a project also
207210also accessible from WSL, the most reliable workaround is to store the projectaccessible from WSL, the most reliable workaround is to store the project
208on the native Windows drive and access it in WSL through `/mnt/<drive>/...`.211on the native Windows drive and access it in WSL through `/mnt/<drive>/...`.
209 212
210213### Cmder is not listed in the open dialog### `Cmder` isn't listed in the open dialog
211 214
212215If Cmder is installed but doesn’t show in Codex’s open dialog, add it to theIf `Cmder` is installed but doesn't show in Codex's open dialog, add it to the
213216Windows Start Menu: right-click Cmder and choose **Add to Start**, then restartWindows Start Menu: right-click `Cmder` and choose **Add to Start**, then
214217Codex or reboot.restart Codex or reboot.