How to enable non-interactive network access *only* without anything else?

[motgenror]

I need for the network access to work without any approvals from the user, but for the sandbox to still restrict filesystem changes to the current directory. However, /approvals in the "Agent (full access)" mode allows network only in conjunction with also allowing writes outside of the workspace directory.

So ... how could I separate the two?

I already tried this in ~/.codex/config.toml:

sandbox_mode = "workspace-write"
approval_policy = "never"
[sandbox_workspace_write]
network_access = true

But this still requires me to manually approve operations for network access which is not what I need - I need for network access to work without interactive approvals. Help?