Dylan Hurd a57b398351 Require approval for input to escalated terminals (#40978) ...

## What changed

- Add the `write_stdin_approval` feature flag, disabled by default, to require a fresh approval before sending non-empty input to an escalated unified-exec terminal.
- Route these reviews through hooks, Guardian, app-server, and the TUI as `writeStdin` approvals while keeping the parent command item unchanged.
- Preserve the terminal environment, launch directory, and escalation state across turns, and revalidate the process identity after approval before writing input.

## Testing

- Cover approval routing, policy decisions, process reuse, terminal identity preservation, app-server events, analytics, and TUI rendering.

GitOrigin-RevId: 4ba29eaae6208e934737ba078c96e589c7c2164d

2026-08-26 21:39:05 +00:00

..

accepted_lines.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

analytics_capture.rs

[codex-analytics] Analytics Capture to File in Debug Builds (#27093)

2026-06-15 16:32:38 -07:00

analytics_client_tests.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

client_tests.rs

Add root turn IDs to turn and tool analytics (#40486)

2026-08-24 22:30:59 +00:00

client.rs

Track multi-agent v2 spawn calls in analytics (#39722)

2026-08-20 14:33:55 +00:00

events.rs

Track image generation request IDs in analytics (#40714)

2026-08-25 21:38:10 +00:00

facts.rs

Add root turn IDs to turn and tool analytics (#40486)

2026-08-24 22:30:59 +00:00

lib.rs

Add root turn IDs to turn and tool analytics (#40486)

2026-08-24 22:30:59 +00:00

reducer.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00