diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index f4932857cd..4d89989627 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -5219,11 +5219,13 @@ name = "codex-windows-sandbox-service"
 version = "0.0.0"
 dependencies = [
  "anyhow",
+ "base64 0.22.1",
  "codex-cloud-config",
  "codex-config",
  "codex-core",
  "codex-windows-sandbox",
  "pretty_assertions",
+ "serde_json",
  "tokio",
  "toml 0.9.11+spec-1.1.0",
  "windows 0.58.0",
diff --git a/codex-rs/windows-sandbox-service/Cargo.toml b/codex-rs/windows-sandbox-service/Cargo.toml
index 0ba371bed7..590c5ae906 100644
--- a/codex-rs/windows-sandbox-service/Cargo.toml
+++ b/codex-rs/windows-sandbox-service/Cargo.toml
@@ -16,12 +16,18 @@ path = "src/main.rs"
 [lints]
 workspace = true
 
+# Temporary until #8415 adds the cleanup implementation that uses these dependencies.
+[package.metadata.cargo-shear]
+ignored = ["base64", "serde_json"]
+
 [dependencies]
 anyhow = { workspace = true }
+base64 = { workspace = true }
 codex-cloud-config = { workspace = true }
 codex-config = { workspace = true }
 codex-core = { workspace = true }
 codex-windows-sandbox = { workspace = true }
+serde_json = { workspace = true }
 tokio = { workspace = true, features = ["macros", "rt", "sync", "time"] }
 toml = { workspace = true }