Merge remote-tracking branch 'origin/codex-fix-on-v0.1.13' into approval-destrand

# Conflicts:
#	animus-plugin-runtime/Cargo.toml
#	animus-plugin-runtime/src/lib.rs
#	animus-provider-protocol/Cargo.toml

Author: Shooksie

animus-plugin-runtime/src/lib.rs

@@ -522,6 +522,12 @@ async fn handle_agent_run<P: ProviderBackend>(
                 metadata.push(json!({ "artifact_id": artifact_id, "metadata": m }));
             }
             SessionEvent::Metadata { metadata: m } => metadata.push(m),
+            // Native interaction channel (agent/respond) is handled by the
+            // session-provider runtime, not this provider runtime; the approval
+            // gate uses the transport-level hook (claude --permission-prompt-tool
+            // / prompt preamble), so these events are inert here.
+            SessionEvent::InteractionRequested { .. }
+            | SessionEvent::InteractionResolved { .. } => {}
             SessionEvent::Error {
                 message,
                 recoverable,
@@ -600,9 +606,6 @@ fn build_session_request(info: &ProviderInfo, params: AgentRunParams) -> Session
     if let Some(profile) = params.claude_profile {
         extras.insert("claude_profile".to_string(), Value::String(profile));
     }
-    if let Some(mcp) = params.mcp_servers {
-        extras.insert("mcp_servers".to_string(), mcp);
-    }
     if let Some(tools) = params.tools {
         extras.insert("tools".to_string(), tools);
     }
@@ -625,6 +628,7 @@ fn build_session_request(info: &ProviderInfo, params: AgentRunParams) -> Session
         cwd: params.cwd,
         project_root: params.project_root,
         mcp_endpoint: None,
+        mcp_servers: params.mcp_servers,
         permission_mode: params.permission_mode,
         timeout_secs: params.timeout_secs,
         env_vars: params.env.into_iter().collect(),