"Never ask" silently blocks Messages approval prompts under Full Access

Correction: I initially misdiagnosed this as a per-task permission problem.

Codex treats sandbox access and approval prompting as separate settings. My configuration was:

sandbox_mode = "danger-full-access"
approval_policy = "never"

I read never as “approve everything.” It actually prevents approval prompts from appearing. Messages therefore failed with Read access was not approved.

Changing only approval_policy to on-request, while keeping sandbox_mode = "danger-full-access", fixes interactive Messages approval.

The remaining product issue is clarity and unattended behavior:

• The UI should explicitly say that “Never” means “do not ask; approval-gated actions fail.”
• Scheduled heartbeats run non-interactively, so a new Messages conversation still cannot obtain its first read approval. Previously approved conversations continue to work.

Environment: macOS, Codex CLI 0.151.0-alpha.7.2, Messages plugin 1.0.1000919.

Start by tracing how the CLI presents approval_policy choices and how scheduled heartbeats request access for new Messages conversations. Done means the UI clearly explains that “Never” suppresses prompts and approval-gated actions fail, while unattended behavior for a new conversation is defined or fixed.