No Prompt for Rules where Decision = "Prompt"

[altnp]

Issue

When a user sets "prompt" behavior for a command, for instance to diss allow git operations that modify history, T3 chat does not recognize this and instead fails the command.

Expected Behavior

T3 chat should prompt for permission similar to Codex CLI

Reproduce

Add the following to ~/.codex/rules/default.rules

prefix_rule(pattern=["git", "status"], decision="prompt")

Ask codex to run git status in a repo, it will fail (and sometimes falls back to a wrapped zsh script).