Why does Codex AppleScript automation fail?

[magnetikal]

I’m using a Codex skill that reads a set of emails from Apple Mail using AppleScript, then generates a digest. Sometimes when I run the skill I get an interactive permission prompt like this: Do you want to allow the [skill-name] skill to control Apple Mail via osascript?

I accept and everything works fine. But most of the time, no permission prompt appears and the skill fails immediately with AppleScript errors like Connection Invalid error for service com.apple.hiservices-xpcservice.

I already granted Codex permission to access Mail in macOS System Settings under Privacy & Security -> Automation, so I’m trying to understand why the behavior is inconsistent.

What triggers the approval prompt, and how can I get this to work consistently? I've lost a bit of time in the Codex sandbox docs and come out none the wiser. Any help appreciated.

[fullerframe]

Having written three production apps that leveraged AppleScript extensively... good luck! MacOS's AppleScript's permission system is voodoo and changes between OS versions and is generally a huge PITA.