bug: Codex Default Permissions inherits auto-review setting

[HMWCS]

What is broken

When approvals_reviewer = "auto_review" is configured in ~/.codex/config.toml, Paseo Default Permissions inherits it and behaves like Auto-review.

Paseo defines these as separate modes:

• Default Permissions: the user reviews approval requests
• Auto-review: Codex reviews eligible requests automatically

However, Default sets approvalPolicy: "on-request" and sandbox: "workspace-write" without explicitly setting approvalsReviewer: "user".

Expected behavior

Default Permissions should always use the user as the approval reviewer, regardless of the global Codex configuration.

Actual behavior

Default Permissions inherits approvals_reviewer = "auto_review", making it effectively identical to Auto-review.

Environment

• Paseo: 0.2.5
• Codex CLI: 0.144.4
• macOS 26.5.2
• Related design: Codex Auto-review permission mode: full implementation #960

[paseo-bot]

Keeping this open as a current permission-mode bug. Paseo 0.2.5 exposes Default Permissions and Auto-review as separate modes, but the Default preset does not set an approval reviewer, so Codex can inherit the global auto_review setting instead of routing approvals to the user.

The report includes the affected Paseo and Codex versions, host platform, configuration trigger, expected behavior, and observed behavior. This is P1 because it changes who reviews approval requests in a core provider workflow.