diff --git a/packages/agents/src/runtime/agent-os.ts b/packages/agents/src/runtime/agent-os.ts
index c182e5e..1937fd0 100644
--- a/packages/agents/src/runtime/agent-os.ts
+++ b/packages/agents/src/runtime/agent-os.ts
@@ -23,6 +23,7 @@ const workspace = agentOS<undefined, { token: string }>({
       throw new Error("Unauthorized workspace connection");
     }
   },
+  permissions: codexConfig.permissions,
   software: codexConfig.software,
 });