Better approval mode / permission control?

[nekopanlab]

The default approval mode (auto) felt unusable at all, somehow it kept asking commands I already approved before, likely due to parameters being slightly different? and it often failed something requires some sort of network and sometimes failed without attempt to ask for permission, example including npm install, running iOS simulator (xcrun simctl list devices failed due to not able to establish connection to simulator service).

While full access works, it felt too risky, as another post suggested, the amount of time codex runs rm -rf felt scary, and I had a small incident yesterday where it deleted a folder where it shouldn't, luckily not hard to recover.

[thomast8]

This is especially bad when it switches to using python to edit files as each new edit will trigger the approval.