openai/codex · error
missing sandboxed command separator --
Error message
missing sandboxed command separator --
What it means
Error "missing sandboxed command separator --" thrown in openai/codex.
Source
Thrown at codex-rs/windows-sandbox-rs/src/wrapper.rs:315
Ok(WindowsSandboxWrapperRequest {
codex_home,
command_cwd,
workspace_roots,
env_map: env_map.ok_or_else(|| anyhow!("missing required {ENV_JSON_FLAG}"))?,
permission_profile: permission_profile
.ok_or_else(|| anyhow!("missing required {PERMISSION_PROFILE_FLAG}"))?,
windows_sandbox_level: windows_sandbox_level
.ok_or_else(|| anyhow!("missing required {SANDBOX_LEVEL_FLAG}"))?,
windows_sandbox_private_desktop,
proxy_enforced,
network_proxy_restricting_sid,
proxy_settings_mode,
read_roots_override,
read_roots_include_platform_defaults,
write_roots_override,
deny_read_paths_override,
deny_write_paths_override,
command: command.ok_or_else(|| anyhow!("missing sandboxed command separator --"))?,
})
}
fn next_flag_value(args: &mut impl Iterator<Item = String>, flag: &str) -> Result<String> {
args.next()
.ok_or_else(|| anyhow!("missing value for {flag}"))
}
fn absolute_path_arg(value: String, flag: &str) -> Result<AbsolutePathBuf> {
let path = PathBuf::from(value);
AbsolutePathBuf::from_absolute_path(path.as_path())
.with_context(|| format!("{flag} must be absolute: {}", path.display()))
}
fn json_flag_value<T: serde::de::DeserializeOwned>(value: String, flag: &str) -> Result<T> {
serde_json::from_str(&value).with_context(|| format!("failed to parse {flag}"))
}
View on GitHub (pinned to 339751715c)
Solutions
- Insert the -- separator before the sandboxed command in the wrapper arguments.
When it happens
Trigger: Thrown at codex-rs/windows-sandbox-rs/src/wrapper.rs:315 when the library encounters an invalid state.
Common situations: See trigger scenarios.
AI-assisted analysis of openai/codex@339751715c (2026-08-25).
Data as JSON: /api/errors/a89ff69e8f1a653f.
Report an issue: GitHub.