@@ -318,9 +318,10 @@ conversation bindings, or any non-Codex harness.
318318 default destructive-action policy for migrated plugin app elicitations.
319319 Use ` true ` to accept safe Codex approval schemas without prompting, ` false `
320320 to decline them, ` "auto" ` to route Codex-required approvals through OpenClaw
321- plugin approvals, or ` "always" ` to ask for every plugin write/destructive
322- action without durable approval. The ` "always" ` mode clears durable Codex
323- per-tool approval overrides for the affected app before starting the thread.
321+ plugin approvals, or ` "ask" ` to prompt for every plugin write/destructive
322+ action without durable approval. The ` "ask" ` mode clears durable Codex
323+ per-tool approval overrides for the affected app and selects the human
324+ approvals reviewer for that app before the Codex thread starts.
324325 Default: ` true ` .
325326- ` plugins.entries.codex.config.codexPlugins.plugins.<key>.enabled ` : enables a
326327 migrated plugin entry when global ` codexPlugins.enabled ` is also true.
@@ -332,7 +333,11 @@ conversation bindings, or any non-Codex harness.
332333- ` plugins.entries.codex.config.codexPlugins.plugins.<key>.allow_destructive_actions ` :
333334 per-plugin destructive-action override. When omitted, the global
334335 ` allow_destructive_actions ` value is used. The per-plugin value accepts the
335- same ` true ` , ` false ` , ` "auto" ` , or ` "always" ` policies.
336+ same ` true ` , ` false ` , ` "auto" ` , or ` "ask" ` policies.
337+
338+ Each admitted plugin app that uses ` "ask" ` routes that app's approval requests
339+ to the human reviewer. Other apps and non-app thread approvals keep their
340+ configured reviewer, so mixed plugin policies do not inherit ` "ask" ` behavior.
336341
337342` codexPlugins.enabled ` is the global enablement directive. Explicit plugin
338343entries written by migration are the durable install and repair eligibility set.
0 commit comments