---
title: "自定义权限档必须能读工作区"
filename: "~/.codex/config.toml"
canonical: /templates/permission-profile-workspace-read/
---

# 自定义权限档必须能读工作区

读不到 AGENTS.md 会让会话起不来，还可能误报 sessions corrupt。从 :workspace 扩展，不要只给别处写。

```
default_permissions = "code-write"

[permissions.code-write]
extends = ":workspace"

[permissions.code-write.filesystem.":workspace_roots"]
"." = "write"

# 只要会话、不要项目指令时才用：
# project_doc_max_bytes = 0

```