feat(codex): support execpolicy approvals and MCP tool calls

src/agent/acp/AcpSdkBackend.ts

@@ -104,7 +104,7 @@ export interface AcpPermissionHandler {
     toolCallId: string,
     toolName: string,
     input: unknown
-  ): Promise<{ decision: 'approved' | 'approved_for_session' | 'denied' | 'abort' }>;
+  ): Promise<{ decision: 'approved' | 'approved_for_session' | 'approved_execpolicy_amendment' | 'denied' | 'abort' }>;
 }
 
 /**
@@ -526,7 +526,10 @@ export class AcpSdkBackend implements AgentBackend {
               // ACP uses optionId from the request options
               let optionId = 'cancel'; // Default to cancel/deny
 
-              if (result.decision === 'approved' || result.decision === 'approved_for_session') {
+              const isApproved = result.decision === 'approved'
+                || result.decision === 'approved_for_session'
+                || result.decision === 'approved_execpolicy_amendment';
+              if (isApproved) {
                 // Find the appropriate optionId from the request options
                 // Look for 'proceed_once' or 'proceed_always' in options
                 const proceedOnceOption = options.find((opt: any) => 

src/api/types.ts

@@ -333,7 +333,7 @@ export type AgentState = {
       status: 'canceled' | 'denied' | 'approved',
       reason?: string,
       mode?: PermissionMode,
-      decision?: 'approved' | 'approved_for_session' | 'denied' | 'abort',
+      decision?: 'approved' | 'approved_for_session' | 'approved_execpolicy_amendment' | 'denied' | 'abort',
       allowTools?: string[]
     }
   }