codex - 💡(How to fix) Fix Permissions system doesn't support compound commands [1 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openai/codex#17670Fetched 2026-04-14 05:41:27
View on GitHub
Comments
1
Participants
2
Timeline
6
Reactions
0
Timeline (top)
labeled ×4commented ×1unlabeled ×1
RAW_BUFFERClick to expand / collapse

What version of Codex CLI is running?

codex-cli 0.120.0

What subscription do you have?

The most expensive one

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.17.0-14-generic x86_64 unknown

What terminal emulator and version are you using (if applicable)?

No response

What issue are you seeing?

The permission system doesn't support compound commands and it's not possible to prompt gpt-5.4 to not use them. Just add compound command support in codex or automate permission rejections back to model that instruct it to not use compound commands.

I've auto-approved simple commands such as git. Despite clear prompting in AGENTS.md to not run compound commands such as "git pull && git status", gpt-5.4 keeps running them. Even though git * is approved, the compound combination is not approved by the harness.

There's numerous simple fixes for this. If in a compound command all individual commands are approved, you could approve them. Or you could make it possible to auto-reject compound commands and to instruct the model to run them as separate, individual commands.

Right now the permissions system is unusable with the model. Please, just copy claude code's permission system verbatim.

What steps can reproduce the bug?

Uploaded thread: 019d8572-8c0e-7613-bac0-475dfb8f997d

What is the expected behavior?

Permissions system actually works for the model.

Additional information

No response

extent analysis

TL;DR

The permission system in Codex CLI needs to be updated to support compound commands or automate permission rejections to instruct the model to not use them.

Guidance

  • Review the AGENTS.md file to ensure that the prompting to not run compound commands is correctly implemented and consider adding additional guidance on handling compound commands.
  • Investigate the possibility of approving compound commands if all individual commands are approved, as a potential simple fix.
  • Consider implementing a feature to auto-reject compound commands and instruct the model to run them as separate, individual commands.
  • Look into the permission system used by Claude code as a potential reference for updating the Codex CLI permission system.

Example

No code snippet is provided as the issue does not contain sufficient technical details to create a specific example.

Notes

The issue lacks specific technical details about the permission system and the model's behavior, making it difficult to provide a more detailed solution. The guidance provided is based on the information given and may need to be adapted to the specific implementation of the Codex CLI and the gpt-5.4 model.

Recommendation

Apply workaround: Implement a feature to auto-reject compound commands and instruct the model to run them as separate, individual commands, as this seems to be a potential simple fix to make the permission system usable with the model.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING