Michael Bolin 93efcfd50d feat: record whether a skill script is approved for the session (#12756) ...

## Why

`unix_escalation.rs` checks a session-scoped approval cache before
prompting again for an execve-intercepted skill script. Without also
recording `ReviewDecision::ApprovedForSession`, that cache never gets
populated, so the same skill script can still trigger repeated approval
prompts within one session.

## What Changed

- Add `execve_session_approvals` to `SessionServices` so the session can
track approved skill script paths.
- Record the script path when a skill-script prompt returns
`ReviewDecision::ApprovedForSession`, but only for the skill-script path
rather than broader prefix-rule approvals.
- Reuse the cached approval on later execve callbacks by treating an
already-approved skill script as `Decision::Allow`.

---
[//]: # (BEGIN SAPLING FOOTER)
Stack created with [Sapling](https://sapling-scm.com). Best reviewed
with [ReviewStack](https://reviewstack.dev/openai/codex/pull/12756).
* #12758
* __->__ #12756

2026-02-25 10:17:22 +00:00

..

mod.rs

Add new thread items and rewire event parsing to use them (#5418)

2025-10-22 10:14:50 -07:00

service.rs

feat: record whether a skill script is approved for the session (#12756)

2026-02-25 10:17:22 +00:00

session.rs

Send warmup request (#11258)

2026-02-24 08:15:47 -08:00

turn.rs

Add skill approval event/response (#12633)

2026-02-23 22:28:58 -08:00