https://blog.margrop.net/en/tag/permissions/ Recent content in Permissions on Margrop Blog Hugo en-US Tue, 12 May 2026 18:50:00 +0800 https://blog.margrop.net/en/post/codex-130-approval-flags/ Tue, 12 May 2026 18:50:00 +0800 https://blog.margrop.net/en/post/codex-130-approval-flags/ <blockquote> <p><strong>The short version</strong></p> <p>If you upgraded to Codex 0.130.0 and noticed that the old <code>/approvals</code> habit no longer works, the practical fix is not to downgrade. Move the permission policy to launch time. Use <code>--ask-for-approval</code> to control when Codex asks, <code>--sandbox</code> to control what commands can touch, and reserve <code>--dangerously-bypass-approvals-and-sandbox</code> for environments that are already isolated outside Codex. The long flag can also be written directly as <code>--yolo</code>, which is easier to remember, easier to type, and more consistent with command habits from tools such as Gemini.</p> <p>In other words, stop treating approval mode as an in-session toggle. Treat it as part of the way you start the agent.</p> </blockquote> <p>This article only discusses public Codex CLI flags and generic workflows. It does not include real hostnames, internal addresses, usernames, tokens, private paths, or project names. Commands use placeholders such as <code>&lt;PROJECT&gt;</code> and <code>&lt;TASK&gt;</code>.</p>