Working with symlinked folders causes prompts for approve every command

Resolved 💬 1 comment Opened Sep 4, 2025 by rhukster Closed Nov 23, 2025

What version of Codex is running?

codex-cli 0.29.0

Which model were you using?

gpt-5 medium

What platform is your computer?

MacOS 15.6.1

What steps can reproduce the bug?

Leave Approvals on Auto. Open an existing project with a symlinked folder. In codex create a prompt that requires working with files in that symlinked folder. You will be prompted to approve every command, no matter if you pick Yes or Always.

What is the expected behavior?

Symlinked files should be treated as local files, or at least ask if they should be or not. If not, read commands should not be prompted for, write commands, should be prompted, but if "Always" selected, then it remembers this for the next command. The assumption is that all 'sed' commands should be remembered for example, not the exact command. I am getting prompted for every minor variation of the same command, and nothing is remembered.

What do you see instead?

Constant prompting. Also if the command is long, the approval is not pushed below and not even visible, i have to blindly hit enter to select "yes".

Additional information

I commonly work in projects that have symlinked folders to various cloned repos. Codex recognizes these are symlinked files, but seems to treat them differently to regular files, and I have to approve every command. Even if i select "always", it doesn't remember and prompts for a minor variation of the prior command. It makes a simple task take an age.

The only option I have is to wait until the task is complete, and then change to "Full Access", which is far from ideal.

View original on GitHub ↗

This issue has 1 comment on GitHub. Read the full discussion on GitHub ↗