Whenever Codex performs any task or uses any tool, it always asks me. And I always allow it, but it has asked me no less than 30 times.
Resolved 💬 7 comments Opened Sep 9, 2025 by 211277729 Closed Nov 28, 2025
💡 Likely answer: A maintainer (etraut-openai, contributor)
responded on this thread — see the highlighted reply below.
What version of Codex is running?
0.30.0
Which model were you using?
GPT-5
What platform is your computer?
Windows11 25H2
What steps can reproduce the bug?
<img width="1719" height="515" alt="Image" src="https://github.com/user-attachments/assets/73bb1edd-5185-4701-a736-5813eca227ec" />
Every time, I was always allowed to make a modification. I was asked if I confirmed 30 times or more. Every time I obtained the code, I was also constantly asked. It's impossible to use it!
What is the expected behavior?
If always allowed, it will operate normally; or, like Claude Code did, it can be switched to the automatic operation mode.
What do you see instead?
_No response_
Additional information
_No response_
7 Comments
approval_policy = "never"
codex --dangerously-bypass-approvals-and-sandboxWarning: This is a fully automated command. Proceed with caution as it carries high risk.
Yes this is really slowing me down as well.
I don't want to allow everything (--dangerously-bypass-approvals-and-sandbox) - that's too dangerous, also approval policy "never" doesn't really works, it just cause codex to try different commands (that will also fail because of the sandbox).
Need some kind of an allow list, like i want to allow [git , npm run test, gh pr]. needs to be a command and args since i don't want to allow all npm commands for example.
When a command fails now because of sandbox, codex does ask me if I to "allow always" for this session, but the problem is that the commands are always dynamic - different parameters, multiple commands piped, so next time codex will just use a slightly different command, and will ask again.
Overall I am getting better results with gpt5-high, but my development progress slowed down considerably since I need to manually approve every other command.
It's so annoying that I have now moved to coder, which is a fork for codex minus this annoying as hell issue. I actually might just work on fixing this bug myself if I get the time and this is somehow still open.
you recommand coder, good Thanks
For the past two weeks, we've been testing and refining a new Windows-native sandbox implementation for the Codex CLI and IDE extension. Today, we released new versions of the CLI (0.59.0) and extension (0.4.44, or pre-release 0.5.44) that incorporate the latest bug fixes for this feature. The new Windows sandbox is still considered "experimental", but we think it's ready for broader use, and we welcome you to give it a try. For more details, refer to this documentation. With the new sandbox enabled, you should see far fewer approval requests.
Closing in favor of #4212