Scope command approvals by execution environment

[jif-oai]

Why

Command approval cache keys included the command and working directory, but not the execution environment. An approval for /workspace locally could therefore be reused for the same command and path on an executor.

What changed

• Include the selected environment ID in shell and unified-exec approval cache keys.
• Carry that ID through the normal command approval request so clients can show which environment is being approved.
• Expose the environment through app-server as a required nullable environmentId and show it in the inline TUI approval prompt.
• Keep older recorded approval events compatible when the environment is absent.

For example, echo ok in local /workspace and echo ok in executor /workspace now produce different approval keys and separate prompts.

Scope

This PR does not change network approvals, Guardian review actions, MCP elicitation, full-screen TUI rendering, or environment-ID validation. Remote shell_command execution itself remains in #28722; this PR only makes its approval key environment-aware.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 73f26f349a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[jif-oai]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Delightful!

Reviewed commit: 975833f5a8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".