Running npm scripts by agent needs approval in Zed but not in Codex CLI

[shybyte]

When I start the codex agent in Zed (Auto mode), it requires manual approval for running npm scripts (run via bun or npm).
I need to re-approve them for every new thread.
When I do the same in the Codex CLI within the same folder, it works without approval.
This makes working with the agent in Zed a bit cumbersome.

Is there a reason for this different behavior?

[benbrandt]

Hmm I'm not sure... it's possible we aren't loading the correct config? Did you allow this previously and maybe it is saved in a config somewhere?

[shybyte]

I have verified that Codex uses the same config in Zed and in Codex CLI by adding a notify script in ~/.codex/config.toml:

notify = ["bash", "-lc", "/home/shybyte/.codex/notify.sh"]

[projects."/home/shybyte/workspace/dinoid"]
trust_level = "trusted"

The notify command is executed in Zed only when starting a new thread or closing the editor, but this is enough to prove that the same config is used.

Running npm scripts (without manual approval) works in the CLI also without the trusted project setting, when in Auto Mode.
Interestingly it needs in CLI even in "Read Only" mode only sometimes manual approval, which seems to be non-deterministic.

I'm not sure what the expected correct behavior actually is.

I would prefer if Codex in Zed would run npm scripts in auto mode always without manual approval.
If I have to manual approve a command I would prefer when Zed would remember this decision for the next thread.