codex/docs/config.md

Configuration

For basic configuration instructions, see this documentation.

For advanced configuration instructions, see this documentation.

For a full configuration reference, see this documentation.

Lifecycle hooks

Admins can set top-level allow_managed_hooks_only = true in requirements.toml to ignore user, project, and session hook configs while still allowing managed hooks from requirements and managed config layers. This setting is only supported in requirements.toml; putting it in config.toml does not enable managed-hooks-only mode.

Dependency Check

The experimental dependency_check tool resolves and checks complete npm dependency graphs before lifecycle scripts run. Enable it with features.dependency_check = true. See Dependency Check for the sandbox policy and approval flow.