[Feature}: Provider-Agnostic Auto-Guardian --approve-for-me mode

[robertmsale]

Codex has an --approve-for-me mode, where codex-auto-review uses a written policy to decide if a command should be executed or not.

Since Codex is the only provider with this functionality, while the rest use hooks, sandbox, and classifiers, it'd be pretty cool if "auto" permission mode or a separate universal "approve for me" mode existed where T3 could replicate the functionality.

I'm currently building a T3 client that does this. It connects and authenticates over the local unix socket, watches for approval requests, and uses codex exec --output-schema with an approve/deny flag in the schema, Luna Low, overwritten base_instructions, stuff like that. And it only watches T3 agents who's permissions are set to "Auto" and are not codex threads.

Could be a cool thing to have. I think the auto review works great. And hey, maybe some day the other harnesses implement it, but if they don't, the tools will be baked right in! Also having it be provider agnostic lets you pick the model. In this case Luna Low is extremely cheap and is what I'm gonna use to implement this for myself