Always have to approve file edits

What version of Codex is running?

0.46.0

Which model were you using?

gpt-5-codex

What platform is your computer?

Darwin 24.6.0 arm64 arm

What steps can reproduce the bug?

Install the codex cli extension for Cursor. See the codex settings file (~/.codex/config.toml) to:

model = "gpt-5-codex"
model_reasoning_effort = "medium"

[tools]
web_search = true

[projects."/Users/MY_USER_NAME"]
trust_level = "trusted"

[optional] see trust_level = "trusted" for specific cursor projects.

Running codex in the extension. All file edits require the user to press the Allow this session button, which gets very annoying.

What is the expected behavior?

codex should edit files without baby siting.

What do you see instead?

Approval is always required

Additional information

_No response_