config-reference.md Codex Docs, 2026-04-25 06:37 UTC → 2026-04-29 00:50 UTC

2964| `allowed_approvals_reviewers` | `array<string>` | Allowed values for `approvals_reviewer`, such as `user` and `auto_review`. |2964| `allowed_approvals_reviewers` | `array<string>` | Allowed values for `approvals_reviewer`, such as `user` and `auto_review`. |

2965| `allowed_sandbox_modes` | `array<string>` | Allowed values for `sandbox_mode`. |2965| `allowed_sandbox_modes` | `array<string>` | Allowed values for `sandbox_mode`. |

2966| `allowed_web_search_modes` | `array<string>` | Allowed values for `web_search` (`disabled`, `cached`, `live`). `disabled` is always allowed; an empty list effectively allows only `disabled`. |2966| `allowed_web_search_modes` | `array<string>` | Allowed values for `web_search` (`disabled`, `cached`, `live`). `disabled` is always allowed; an empty list effectively allows only `disabled`. |

2967| `feature_requirements` | `table` | Alias for `features` in `requirements.toml`. Use it to pin feature values by canonical feature key. |

2968| `feature_requirements.browser_use` | `boolean` | Set to `false` in `requirements.toml` to disable Browser Use and Browser Agent availability. You can also set `features.browser_use`. |

2969| `feature_requirements.computer_use` | `boolean` | Set to `false` in `requirements.toml` to disable Computer Use availability and related install or enablement flows. You can also set `features.computer_use`. |

2970| `feature_requirements.in_app_browser` | `boolean` | Set to `false` in `requirements.toml` to disable the in-app browser pane. You can also set `features.in_app_browser`. |

2971| `features` | `table` | Pinned feature values keyed by the canonical names from `config.toml`'s `[features]` table. |2967| `features` | `table` | Pinned feature values keyed by the canonical names from `config.toml`'s `[features]` table. |

2972| `features.<name>` | `boolean` | Require a specific canonical feature key to stay enabled or disabled. |2968| `features.<name>` | `boolean` | Require a specific canonical feature key to stay enabled or disabled. |

2969| `features.browser_use` | `boolean` | Set to `false` in `requirements.toml` to disable Browser Use and Browser Agent availability. |

2970| `features.computer_use` | `boolean` | Set to `false` in `requirements.toml` to disable Computer Use availability and related install or enablement flows. |

2971| `features.in_app_browser` | `boolean` | Set to `false` in `requirements.toml` to disable the in-app browser pane. |

2973| `guardian_policy_config` | `string` | Managed Markdown policy instructions for automatic review. This takes precedence over local `[auto_review].policy`. Blank values are ignored. |2972| `guardian_policy_config` | `string` | Managed Markdown policy instructions for automatic review. This takes precedence over local `[auto_review].policy`. Blank values are ignored. |

2974| `hooks` | `table` | Admin-enforced managed lifecycle hooks. Requires a managed hook directory and uses the same event schema as inline `[hooks]` in `config.toml`. |2973| `hooks` | `table` | Admin-enforced managed lifecycle hooks. Requires a managed hook directory and uses the same event schema as inline `[hooks]` in `config.toml`. |

2975| `hooks.<Event>` | `array<table>` | Matcher groups for a hook event such as `PreToolUse`, `PostToolUse`, `PermissionRequest`, `SessionStart`, `UserPromptSubmit`, or `Stop`. |2974| `hooks.<Event>` | `array<table>` | Matcher groups for a hook event such as `PreToolUse`, `PostToolUse`, `PermissionRequest`, `SessionStart`, `UserPromptSubmit`, or `Stop`. |

3042 3041 

3043Key3042Key

3044 3043 

3045`feature_requirements`3044`features`

3046 3045 

3047Type / Values3046Type / Values

3048 3047 

3050 3049 

3051Details3050Details

3052 3051 

3053Alias for `features` in `requirements.toml`. Use it to pin feature values by canonical feature key.3052Pinned feature values keyed by the canonical names from `config.toml`'s `[features]` table.

3054 3053 

3055Key3054Key

3056 3055 

3057`feature_requirements.browser_use`3056`features.<name>`

3058 3057 

3059Type / Values3058Type / Values

3060 3059 

3062 3061 

3063Details3062Details

3064 3063 

3065Set to `false` in `requirements.toml` to disable Browser Use and Browser Agent availability. You can also set `features.browser_use`.3064Require a specific canonical feature key to stay enabled or disabled.

3066 3065 

3067Key3066Key

3068 3067 

3069`feature_requirements.computer_use`3068`features.browser_use`

3070 3069 

3071Type / Values3070Type / Values

3072 3071 

3074 3073 

3075Details3074Details

3076 3075 

3077Set to `false` in `requirements.toml` to disable Computer Use availability and related install or enablement flows. You can also set `features.computer_use`.3076Set to `false` in `requirements.toml` to disable Browser Use and Browser Agent availability.

3078 3077 

3079Key3078Key

3080 3079 

3081`feature_requirements.in_app_browser`3080`features.computer_use`

3082 3081 

3083Type / Values3082Type / Values

3084 3083 

3086 3085 

3087Details3086Details

3088 3087 

3089Set to `false` in `requirements.toml` to disable the in-app browser pane. You can also set `features.in_app_browser`.3088Set to `false` in `requirements.toml` to disable Computer Use availability and related install or enablement flows.

3090 

3091Key

3092 

3093`features`

3094 

3095Type / Values

3096 

3097`table`

3098 

3099Details

3100 

3101Pinned feature values keyed by the canonical names from `config.toml`'s `[features]` table.

3102 3089 

3103Key3090Key

3104 3091 

3105`features.<name>`3092`features.in_app_browser`

3106 3093 

3107Type / Values3094Type / Values

3108 3095 

3110 3097 

3111Details3098Details

3112 3099 

3113Require a specific canonical feature key to stay enabled or disabled.3100Set to `false` in `requirements.toml` to disable the in-app browser pane.

3114 3101 

3115Key3102Key

3116 3103