apply_patch and view_image fail with false "os error 206" (filename too long) under restricted permission profile on Windows

[okki-LC369]

codex-cli 0.142.5 (Windows, elevated sandbox)。カスタムプロファイル(:workspaceを拡張し:root=deny)下で、apply_patch・view_imageが偽の「ファイル名が長すぎる」エラーで失敗する件を報告。

• 実パス長は60〜70文字程度(Windowsの260文字上限には遠い)
• 同じファイルへのPowerShell経由アクセス(Copy-Item/Set-Content等)は同一セッションで正常成功
• パスは付与された書込み/読取り可能な範囲内(承認プロンプトなし・該当denyルールなし)
• 長いパス/短いASCIIパスどちらでも再現＝パス長自体が原因ではない
• 以前の:root=read設定では正常動作していた→:root=denyへ切替後から一貫して再現
• 影響：apply_patchはシェル経由で代替可能。view_imageには代替手段がなく、この構成下ではモデルが画像を目視できない

[github-actions]

English translation:

codex-cli 0.142.5 (Windows, elevated sandbox). Reporting an issue where apply_patch and view_image fail with a false "filename too long" error under a custom profile (extending :workspace and setting :root=deny).

• The actual path length is only about 60-70 characters (nowhere near Windows' 260-character limit)
• Access to the same file via PowerShell (Copy-Item/Set-Content, etc.) succeeds normally in the same session
• The path is within the granted writable/readable range (no approval prompt and no applicable deny rule)
• Reproduces with both long paths and short ASCII paths, so the path length itself is not the cause
• It previously worked normally with the :root=read setting -> consistently reproduces after switching to :root=deny
• Impact: apply_patch can be worked around via the shell. There is no workaround for view_image, so under this configuration the model cannot visually inspect images

[github-actions]

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

• view_image fails to read local images on Windows with apply deny-read ACLs #31248
• Windows sandbox: apply_patch can add files but cannot update/delete existing files due to apply deny-read ACLs #31229

Powered by Codex Action