I have to approve every single operation in VS Code extension

What version of Codex is running?

0.4.15

Which model were you using?

gpt-5-codex medium

What platform is your computer?

_No response_

What steps can reproduce the bug?

When installed Codex 0.4.15 VS Code plugin it requires me to accept every single PowerShell command that he executes. My settings are Local/Agent/gpt-5-codex medium. I can't (and don't want to) switch to full access, but from my understanding Codex should be able to run commands on my current repo without asking me to approve every single of it. Is this intended or is it a bug?

What is the expected behavior?

_No response_

What do you see instead?

_No response_

Additional information

_No response_