[codex] Add browser approval flow for resumed executions

[RhysSullivan]

Summary

• Route model-facing MCP resume through signed-in browser approval by default, with allow_model_resume=true preserving the old model-side resume path.
• Add local and cloud /resume/:executionId approval pages, including cloud MCP session Durable Object lookup via mcp_session_id with owner validation.
• Show structured pending request details and schema-aware approval fields instead of CLI-oriented raw pause text.
• Keep managed MCP elicitation flows inline and hide resume when clients support elicitation.

Validation

• bun run --cwd packages/react typecheck
• bun run --cwd packages/core/execution typecheck
• bun run --cwd packages/hosts/mcp typecheck
• bun run --cwd packages/hosts/mcp test
• bun run --cwd apps/cloud typecheck
• bun run --cwd apps/cloud vite build
• bun run --cwd apps/local build
• git diff --check

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	a1028ed	May 17 2026, 08:00 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	a1028ed	Commit Preview URL Branch Preview URL	May 17 2026, 08:00 PM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@842

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@842

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@842

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@842

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@842

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@842

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@842

@executor-js/plugin-google-discovery

npm i https://pkg.pr.new/@executor-js/plugin-google-discovery@842

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@842

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@842

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@842

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@842

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@842

executor

npm i https://pkg.pr.new/executor@842

commit: a1028ed