YOLO mode still prompts for local commands due to temporary IPC sockets

Resolved 💬 2 comments Opened Jul 15, 2026 by simfor99 Closed Jul 15, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

Summary

When I run Codex CLI in YOLO mode, I still get interactive approval prompts for local-only commands. The prompts interrupt the terminal session even though the commands do not require network access or elevated host access.

Example

Codex first reports Permissions updated to Full Access, then asks me to approve:

npm run pipeline:docs:refresh

The reason given is that the local TypeScript tool uses a temporary local IPC socket. After approving and allowlisting that exact command prefix, Codex runs it successfully, but it prompts again for the next local command:

npm run pipeline:docs:check

with the same temporary-local-IPC-socket rationale.

Expected behavior

If the CLI was started with --dangerously-bypass-approvals-and-sandbox (or an equivalently configured YOLO mode), no interactive command approvals should appear. A temporary local IPC socket should not re-enable the approval flow.

If the current behavior is intentional, the UI should clearly distinguish “Full Access” from the stricter bypass-all-approvals mode and explain why the configured mode was not applied.

Environment

  • Codex CLI: 0.144.4
  • OS: Linux/WSL environment
  • Command examples: repository-local npm run pipeline:docs:refresh and npm run pipeline:docs:check

Impact

This breaks unattended/YOLO workflows: the CLI pauses for each new command prefix despite the session being expected to run without confirmations.

View original on GitHub ↗

2 Comments

github-actions[bot] contributor · 1 month ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #33114
  • #32239

Powered by Codex Action

simfor99 · 1 month ago

Duplicate of #33114.

The reported temporary-local-IPC approval prompts are the same active-turn permission-upgrade failure: the TUI confirms “Permissions updated to Full Access”, but later tool calls in that already-running turn still use the former approval policy. #33114 has the more complete reproduction and implementation analysis.