Lightweight containerized prosody tooling + moved auth scripts + xmpp reconnect/auth stabilization

core/management/commands/codex_worker.py

@@ -196,6 +196,26 @@ class Command(BaseCommand):
             result=result_payload,
         )
         event.save(update_fields=["status", "error", "payload", "updated_at"])
+
+        mode = str(provider_payload.get("mode") or "").strip().lower()
+        approval_key = str(provider_payload.get("approval_key") or "").strip()
+        if mode == "approval_response" and approval_key:
+            req = (
+                CodexPermissionRequest.objects.select_related("external_sync_event", "codex_run")
+                .filter(user=event.user, approval_key=approval_key)
+                .first()
+            )
+            if req and req.external_sync_event_id:
+                if result.ok:
+                    ExternalSyncEvent.objects.filter(id=req.external_sync_event_id).update(
+                        status="ok",
+                        error="",
+                    )
+                elif str(event.error or "").strip() == "approval_denied":
+                    ExternalSyncEvent.objects.filter(id=req.external_sync_event_id).update(
+                        status="failed",
+                        error="approval_denied",
+                    )
         if codex_run is not None:
             codex_run.status = "ok" if result.ok else "failed"
             codex_run.error = str(result.error or "")