fix(codex): auto-approve in full-auto so a stale-policy turn can't hang

A codex turn bakes its approvalPolicy at turn/start, so a turn begun before a
switch to full-auto (or the startup mode-sync race) could still emit a
requestApproval. Unanswered — because the UI shows full-auto and the user isn't
expecting a prompt — it blocked the turn forever: the command never completed
(its card spun "running"), and the turn never ended ("generating").

Now, when the session is full-auto, the adapter auto-approves bridged approval
requests (decision: accept), honoring the user's "no prompts" choice and
unsticking the turn. Other modes still surface the approval card.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: gaoyu06

src/lib/backends/codex.test.ts

@@ -67,6 +67,37 @@ describe('codex adapter: rewind', () => {
 	});
 });
 
+describe('codex adapter: full-auto approvals', () => {
+	it('auto-approves a bridged approval request so the turn cannot block', () => {
+		const { lines } = makeIo();
+		const adapter = createCodexAdapter();
+		handshake(adapter, lines);
+		adapter.encodeOp({ op: 'set_approval_mode', mode: 'full-auto' });
+		lines.length = 0;
+		const events = adapter.translate({
+			id: 42,
+			method: 'item/commandExecution/requestApproval',
+			params: { itemId: 'i1', command: 'rm -rf x', reason: 'destructive' }
+		});
+		// No approval card surfaces; an accept response goes straight back.
+		expect(events).toEqual([]);
+		expect(parse(lines[0])).toMatchObject({ id: 42, result: { decision: 'accept' } });
+	});
+
+	it('still surfaces an approval card in non-full-auto modes', () => {
+		const { lines } = makeIo();
+		const adapter = createCodexAdapter();
+		handshake(adapter, lines);
+		adapter.encodeOp({ op: 'set_approval_mode', mode: 'auto-edit' });
+		const events = adapter.translate({
+			id: 43,
+			method: 'item/commandExecution/requestApproval',
+			params: { itemId: 'i1', command: 'ls' }
+		});
+		expect(events[0]).toMatchObject({ type: 'approval_request', name: 'bash' });
+	});
+});
+
 describe('codex adapter: handshake', () => {
 	it('onStart sends only the initialize request', () => {
 		const { lines, io } = makeIo();

src/lib/backends/codex.ts

@@ -628,6 +628,19 @@ export function createCodexAdapter(): EngineAdapter {
 	}
 
 	function onServerRequest(id: RequestId, method: string, params: unknown): NormalizedEvent[] {
+		// full-auto means "no prompts". A turn bakes its approvalPolicy at turn/start,
+		// so one started before a switch to full-auto (or the startup mode-sync race)
+		// can still emit a requestApproval — which, unanswered, blocks the turn (the
+		// command never completes, its card spins, the turn never ends). Auto-approve
+		// here to honor the user's full-auto choice and unstick it.
+		if (
+			mode === 'full-auto' &&
+			(method === 'item/commandExecution/requestApproval' ||
+				method === 'item/fileChange/requestApproval')
+		) {
+			send(frame({ id, result: { decision: 'accept' } }));
+			return [];
+		}
 		if (method === 'item/commandExecution/requestApproval') {
 			const p = params as CommandExecutionRequestApprovalParams;
 			const callId = `approval-${++approvalSeq}`;