Summary

• Treat approval_mode = "approve" as skip-review across all permission modes.
• Remove the mode-specific split in the MCP auto-approval gate so approved tools bypass review consistently.
• Expand regression coverage in the shared MCP helper and the core tool-call flow.

Testing

• just fmt
• cargo test -p codex-mcp
• cargo test -p codex-core approve_mode_skips_arc_and_guardian_in_every_permission_mode
• git diff --check
• Full cargo test -p codex-core was also attempted, but the suite hit an unrelated pre-existing stack overflow in an existing multi-agent test