# OpenAI Codex CLI project configuration
# https://developers.openai.com/codex/config-reference/
#
# approval_policy options:
#   untrusted   = require approval for all state-changing commands
#   on-request  = agent decides when to ask (recommended for interactive dev)
#   never       = no prompts (for CI / fully automated runs)
approval_policy = "on-request"

# Restrict file access to project workspace only (prevents access outside project root)
sandbox_mode = "workspace-write"
