feat: policy-gated tool approval (v1.1)#2

Open

sterling-prog wants to merge 9 commits into

mainfrom

build/v1.1-tool-approval

Commits on Mar 22, 2026

chore: open PR for P120 codex-proxy build
Sterling
committed
Fix emitDelta return guard and onTokenUsageUpdated slot leak

Sterling
and
claude
committed
fix: M1-11 — delta turnId not used to resolve buffer (app-server.ts)

Sterling
and
claude
committed

Commits on Mar 23, 2026

Fix TINFOIL rejections: env-var injection guard + localhost CORS (PROJECT-SPEC.md)
Sterling
committed
fix(auth-check): also check tokens.access_token in auth.json
Sterling
committed
fix: deploy fixes — ESM/CJS ecosystem config, response field names, flat threadId

Sterling
and
claude
committed
docs: fix PM2 command in CLAUDE.md — use .cjs extension

Sterling
and
claude
committed
Route codex-auth-check alerts to #status-updates channel

Sterling
and
claude
committed

Commits on Mar 25, 2026

feat: policy-gated tool approval (v1.1-tool-approval.spec.md)

Sterling
and
claude
committed