fix(agent): honor Codex full access permissions

[richardsolomou]

Problem

Codex still prompts for commands after Full access is selected, especially when the current turn started in Auto. The selection can also revert when revisiting a task.

Closes #3459

Changes

Full access canonicalizes Codex policy aliases and bypasses only real approval requests, never structured questions. Persisted settings survive reconstruction but reset across adapter changes, with conflict-aware rollback for concurrent updates.

How did you test this?

Added coverage for policy updates, question prompts, persistence, adapter changes, and task revisits. Ran 307 focused tests, all 2,277 core tests, affected package typechecks, Biome, and the commit-hook typecheck.

Automatic notifications

• Publish to changelog?
• Alert Sales and Marketing teams?

---

Created with PostHog Code

[trunk-io]

😎 Merged directly without going through the merge queue, as the queue was empty and the PR was up to date with the target branch - details.

[github-actions]

React Doctor found no issues in the changed files. 🎉

_{Reviewed by React Doctor for commit 1ef5eaa.}

[greptile-apps]

Security Review

The live permission path can auto-approve callbacks from an uncanonicalized bypassPermissions value without confirming that Codex's native full-access policy was applied.

_{Reviews (1): Last reviewed commit: "fix(agent): honor Codex full access perm..." | Re-trigger Greptile}