Codex Desktop: connector write tool remains read-only despite Full Access permissions

Codex Desktop 26.825.6671.0 / codex-cli 0.151.0-alpha.7.2
Windows x64, build 26200

The IOL Invertironline connector rejects its write operation even though:

• The task runs with danger-full-access.
• The connector-specific permission is “Allow all actions”.
• validate_order succeeds and returns a valid validation ID.
• The operation was explicitly confirmed by the user.

Calling place_order immediately afterward fails with:

This session is read-only. Tool 'place_order' is not allowed.
error_code: INVALID_ARGUMENT

The tool event reports readOnlyHint: false. No order is created. The same behavior occurs in multiple newly created tasks.

Expected behavior: after explicit confirmation and successful validation, the write operation should execute or request the appropriate approval. The connector session should not remain read-only when Full Access is effective.

No account information, instrument, quantity, validation token, or session transcript is included.

Start by reproducing the issue on Windows x64 with Codex Desktop 26.825.6671.0 and codex-cli 0.151.0-alpha.7.2, then trace connector permission handling around the read-only session and readOnlyHint. Done means place_order executes or requests the appropriate approval after validation and explicit confirmation with Full Access enabled.