Sync Codex CLI upstream changes (6638558 -> 06f82c1)

[github-actions]

Detected upstream updates in openai/codex affecting CLI surface tracking.

• Submodule path: submodules/openai-codex
• Watched branch: main
• Current pinned commit: 6638558b8807328e852b54580b010be7034699b7
• Latest upstream commit: 06f82c123c6ed295f0ef19b5cbf49cf78bbc092e
• Compare: openai/codex@6638558...06f82c1
• Latest commit: openai/codex@06f82c1

Changed files (CLI-relevant)

• codex-rs/Cargo.lock
• codex-rs/Cargo.toml
• codex-rs/app-server-client/BUILD.bazel
• codex-rs/app-server-client/Cargo.toml
• codex-rs/app-server-client/README.md
• codex-rs/app-server-client/src/lib.rs
• codex-rs/app-server-protocol/schema/json/ClientRequest.json
• codex-rs/app-server-protocol/schema/json/CommandExecutionRequestApprovalParams.json
• codex-rs/app-server-protocol/schema/json/EventMsg.json
• codex-rs/app-server-protocol/schema/json/McpServerElicitationRequestParams.json
• codex-rs/app-server-protocol/schema/json/McpServerElicitationRequestResponse.json
• codex-rs/app-server-protocol/schema/json/PermissionsRequestApprovalParams.json
• codex-rs/app-server-protocol/schema/json/PermissionsRequestApprovalResponse.json
• codex-rs/app-server-protocol/schema/json/ServerNotification.json
• codex-rs/app-server-protocol/schema/json/ServerRequest.json
• codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json
• codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecOutputDeltaNotification.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecResizeParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecResizeResponse.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecResponse.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecTerminateParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecTerminateResponse.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecWriteParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecWriteResponse.json
• codex-rs/app-server-protocol/schema/json/v2/ConfigBatchWriteParams.json
• codex-rs/app-server-protocol/schema/json/v2/ConfigReadResponse.json
• codex-rs/app-server-protocol/schema/json/v2/PluginListParams.json
• codex-rs/app-server-protocol/schema/json/v2/PluginListResponse.json
• codex-rs/app-server-protocol/schema/json/v2/RawResponseItemCompletedNotification.json
• codex-rs/app-server-protocol/schema/json/v2/ThreadResumeParams.json
• codex-rs/app-server-protocol/schema/json/v2/WindowsSandboxSetupStartParams.json
• codex-rs/app-server-protocol/schema/typescript/ClientRequest.ts
• codex-rs/app-server-protocol/schema/typescript/ElicitationRequest.ts
• codex-rs/app-server-protocol/schema/typescript/ElicitationRequestEvent.ts
• codex-rs/app-server-protocol/schema/typescript/EventMsg.ts
• codex-rs/app-server-protocol/schema/typescript/ExecApprovalRequestEvent.ts
• codex-rs/app-server-protocol/schema/typescript/ExecApprovalRequestSkillMetadata.ts
• codex-rs/app-server-protocol/schema/typescript/ImageGenerationEndEvent.ts
• codex-rs/app-server-protocol/schema/typescript/ImageGenerationItem.ts
• codex-rs/app-server-protocol/schema/typescript/RequestPermissionsEvent.ts
• codex-rs/app-server-protocol/schema/typescript/ServerNotification.ts
• codex-rs/app-server-protocol/schema/typescript/ServerRequest.ts
• codex-rs/app-server-protocol/schema/typescript/WebSearchContextSize.ts
• codex-rs/app-server-protocol/schema/typescript/WebSearchLocation.ts
• codex-rs/app-server-protocol/schema/typescript/WebSearchToolConfig.ts
• codex-rs/app-server-protocol/schema/typescript/index.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecOutputDeltaNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecOutputStream.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResizeParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResizeResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminalSize.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminateParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminateResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecWriteResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecutionRequestApprovalParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecutionRequestApprovalSkillMetadata.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigBatchWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/GrantedMacOsPermissions.ts
• codex-rs/app-server-protocol/schema/typescript/v2/GrantedPermissionProfile.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationArrayType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationBooleanSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationBooleanType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationConstOption.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationLegacyTitledEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationMultiSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationNumberSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationNumberType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationObjectType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationPrimitiveSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationSingleSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationStringFormat.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationStringSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationStringType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationTitledEnumItems.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationTitledMultiSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationTitledSingleSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationUntitledEnumItems.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationUntitledMultiSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationUntitledSingleSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerElicitationRequestParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerElicitationRequestResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PermissionsRequestApprovalParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PermissionsRequestApprovalResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginInterface.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginMarketplaceEntry.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginSource.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginSummary.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ProfileV2.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ToolsV2.ts
• codex-rs/app-server-protocol/schema/typescript/v2/TurnStartParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/WindowsSandboxSetupStartParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/index.ts
• codex-rs/app-server-protocol/src/export.rs
• codex-rs/app-server-protocol/src/protocol/common.rs
• codex-rs/app-server-protocol/src/protocol/mappers.rs
• codex-rs/app-server-protocol/src/protocol/v1.rs
• codex-rs/app-server-protocol/src/protocol/v2.rs
• codex-rs/app-server-test-client/src/lib.rs
• codex-rs/app-server/Cargo.toml
• codex-rs/app-server/README.md
• codex-rs/app-server/src/app_server_tracing.rs
• codex-rs/app-server/src/bespoke_event_handling.rs
• codex-rs/app-server/src/bin/test_notify_capture.rs
• codex-rs/app-server/src/codex_message_processor.rs
• codex-rs/app-server/src/command_exec.rs
• codex-rs/app-server/src/config_api.rs
• codex-rs/app-server/src/in_process.rs
• codex-rs/app-server/src/lib.rs
• codex-rs/app-server/src/message_processor.rs
• codex-rs/app-server/src/outgoing_message.rs
• codex-rs/app-server/src/transport.rs
• codex-rs/app-server/tests/common/lib.rs
• codex-rs/app-server/tests/common/mcp_process.rs
• codex-rs/app-server/tests/common/responses.rs
• codex-rs/app-server/tests/suite/v2/command_exec.rs
• codex-rs/app-server/tests/suite/v2/config_rpc.rs
• codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs
• codex-rs/app-server/tests/suite/v2/initialize.rs
• codex-rs/app-server/tests/suite/v2/mcp_server_elicitation.rs
• codex-rs/app-server/tests/suite/v2/mod.rs
• codex-rs/app-server/tests/suite/v2/plugin_install.rs
• codex-rs/app-server/tests/suite/v2/plugin_list.rs
• codex-rs/app-server/tests/suite/v2/request_permissions.rs
• codex-rs/app-server/tests/suite/v2/thread_list.rs
• codex-rs/app-server/tests/suite/v2/thread_metadata_update.rs
• codex-rs/app-server/tests/suite/v2/thread_name_websocket.rs
• codex-rs/app-server/tests/suite/v2/thread_resume.rs
• codex-rs/app-server/tests/suite/v2/thread_unsubscribe.rs
• codex-rs/app-server/tests/suite/v2/turn_start_zsh_fork.rs
• codex-rs/app-server/tests/suite/v2/windows_sandbox_setup.rs
• codex-rs/cli/Cargo.toml
• codex-rs/cli/src/login.rs
• codex-rs/cli/src/main.rs
• codex-rs/cli/tests/debug_clear_memories.rs
• codex-rs/config/src/config_requirements.rs
• codex-rs/core/BUILD.bazel
• codex-rs/core/config.schema.json
• codex-rs/core/src/agent/control.rs
• codex-rs/core/src/apply_patch.rs
• codex-rs/core/src/client.rs
• codex-rs/core/src/client_common.rs
• codex-rs/core/src/codex.rs
• codex-rs/core/src/codex_delegate.rs
• codex-rs/core/src/codex_tests.rs
• codex-rs/core/src/codex_tests_guardian.rs
• codex-rs/core/src/compact.rs
• codex-rs/core/src/compact_remote.rs
• codex-rs/core/src/config/config_tests.rs
• codex-rs/core/src/config/managed_features.rs
• codex-rs/core/src/config/mod.rs
• codex-rs/core/src/config/network_proxy_spec.rs
• codex-rs/core/src/config/permissions.rs
• codex-rs/core/src/config/profile.rs
• codex-rs/core/src/context_manager/updates.rs
• codex-rs/core/src/event_mapping.rs
• codex-rs/core/src/exec.rs
• codex-rs/core/src/exec_policy.rs
• codex-rs/core/src/features.rs
• codex-rs/core/src/features/legacy.rs
• codex-rs/core/src/git_info.rs
• codex-rs/core/src/guardian.rs
• codex-rs/core/src/guardian_prompt.md
• codex-rs/core/src/guardian_tests.rs
• codex-rs/core/src/landlock.rs
• codex-rs/core/src/lib.rs
• codex-rs/core/src/mcp_connection_manager.rs
• codex-rs/core/src/mcp_tool_call.rs
• codex-rs/core/src/memories/mod.rs
• codex-rs/core/src/memories/phase1.rs
• codex-rs/core/src/memories/phase2.rs
• codex-rs/core/src/memories/start.rs
• codex-rs/core/src/memories/tests.rs
• codex-rs/core/src/memories/usage.rs
• codex-rs/core/src/memory_trace.rs
• codex-rs/core/src/mention_syntax.rs
• codex-rs/core/src/mentions.rs
• codex-rs/core/src/network_proxy_loader.rs
• codex-rs/core/src/path_utils.rs
• codex-rs/core/src/plugins/curated_repo.rs
• codex-rs/core/src/plugins/injection.rs
• codex-rs/core/src/plugins/manager.rs
• codex-rs/core/src/plugins/manifest.rs
• codex-rs/core/src/plugins/marketplace.rs
• codex-rs/core/src/plugins/mod.rs
• codex-rs/core/src/plugins/store.rs
• codex-rs/core/src/project_doc.rs
• codex-rs/core/src/realtime_conversation.rs
• codex-rs/core/src/rollout/list.rs
• codex-rs/core/src/rollout/metadata.rs
• codex-rs/core/src/rollout/policy.rs
• codex-rs/core/src/rollout/recorder.rs
• codex-rs/core/src/rollout/tests.rs

Detected CLI flag surface changes

• (no CLI flag surface change detected from CLI sources)

Detected model catalog changes

• (no model catalog change detected from models.json)

Detected feature flag changes

• added guardian_approval
• added request_permissions_tool
• added tool_call_mcp_elicitation

Commits

• 06f82c123 feat(tui) render request_permissions calls (#14004) (2026-03-08)
• 05332b0e9 fix(bazel) add missing app-server-client BUILD.bazel (#14027) (2026-03-08)
• e6b93841c Add request permissions tool (#13092) (2026-03-08)
• 4ad3b59de tui: clarify pending steer follow-ups (#13841) (2026-03-08)
• f41b1638c fix(core) patch otel test (#14014) (2026-03-08)
• 340f9c9ec app-server: include experimental skill metadata in exec approval requests (#13929) (2026-03-08)
• da3689f0e Add in-process app server and wire up exec to use it (#14005) (2026-03-08)
• a684a3609 [app-server] Support hot-reload user config when batch writing config. (#13839) (2026-03-08)
• 1f150eda8 Stabilize shell serialization tests (#13877) (2026-03-08)
• 7ba1fccfc fix(ci): restore guardian coverage and bazel unit tests (#13912) (2026-03-08)
• a30edb6c1 Fix inverted Windows PTY TerminateProcess handling (#13989) (2026-03-08)
• dcc4d7b63 linux-sandbox: honor split filesystem policies in bwrap (#13453) (2026-03-07)
• dc19e7896 Stabilize abort task follow-up handling (#13874) (2026-03-07)
• 3b5fe5ca3 protocol: keep root carveouts sandboxed (#13452) (2026-03-07)
• 46b8d127c sandboxing: preserve denied paths when widening permissions (#13451) (2026-03-07)
• 07a30da3f linux-sandbox: plumb split sandbox policies through helper (#13449) (2026-03-07)
• a4a9536fd [elicitations] Support always allow option for mcp tool calls. (#13807) (2026-03-07)
• 590cfa617 chore: use @plugin instead of $plugin for plaintext mentions (#13921) (2026-03-07)
• bf5c2f48a seatbelt: honor split filesystem sandbox policies (#13448) (2026-03-07)
• e8d7ede83 Fix TUI context window display before first TokenCount (#13896) (2026-03-07)
• 92f754162 fix(ci) fix guardian ci (#13911) (2026-03-07)
• 1c888709b fix(core) rm guardian snapshot test (#13910) (2026-03-07)
• b9a2e4000 tmp: drop artifact skills (#13851) (2026-03-07)
• e84ee33cc Add guardian approval MVP (#13692) (2026-03-07)
• cf143bf71 feat: simplify DB further (#13771) (2026-03-07)
• 5ceff6588 safety: honor filesystem policy carveouts in apply_patch (#13445) (2026-03-07)
• 8df4d9b3b Add Fast mode status-line indicator (#13670) (2026-03-07)
• 4b4f61d37 app-server: require absolute cwd for windowsSandbox/setupStart (#13833) (2026-03-06)
• b0ce16c47 fix(core): respect reject policy by approval source for skill scripts (#13816) (2026-03-06)
• b52c18e41 protocol: derive effective file access from filesystem policies (#13440) (2026-03-06)
• 22ac6b9aa sandboxing: plumb split sandbox policies through runtime (#13439) (2026-03-06)
• 25fa97416 fix: support managed network allowlist controls (#12752) (2026-03-06)
• 5deaf9409 fix: avoid invoking git before project trust is established (#13804) (2026-03-06)
• 90469d0a2 feat(app-server-protocol): address naming conflicts in json schema exporter (#13819) (2026-03-06)
• e9bd8b20a app-server: Add streaming and tty/pty capabilities to command/exec (#13640) (2026-03-06)
• 61098c7f5 Allow full web search tool config (#13675) (2026-03-06)
• 8b8128497 fix(core): skip exec approval for permissionless skill scripts (#13791) (2026-03-06)
• 024373430 feat: Add curated plugin marketplace + Metadata Cleanup. (#13712) (2026-03-06)
• 289ed549c chore(otel): rename OtelManager to SessionTelemetry (#13808) (2026-03-06)
• 3794363ca fix: include libcap-dev dependency when creating a devcontainer for building Codex (#13814) (2026-03-06)
• a11c59f63 Add realtime startup context override (#13796) (2026-03-06)
• f82678b2a config: add initial support for the new permission profile config language in config.toml (#13434) (2026-03-06)
• 8ba718a61 docs: remove auth login logging plan (#13810) (2026-03-06)
• d6c818619 Clarify js_repl binding reuse guidance (#13803) (2026-03-06)
• 5b04cc657 utils/pty: add streaming spawn and terminal sizing primitives (#13695) (2026-03-06)
• 4e68fb96e feat: add auth login diagnostics (#13797) (2026-03-06)
• dd4a5216c chore(otel): reorganize codex-otel crate (#13800) (2026-03-06)
• 8ede18011 Codex/winget auto update (#12943) (2026-03-06)
• 9a4787c24 fix: reject global wildcard network proxy domains (#13789) (2026-03-06)
• 7a5aff497 fix bazel build (#13787) (2026-03-06)
• 488875f24 fix: move unit tests in codex-rs/core/src/codex.rs into their own file (#13783) (2026-03-06)
• 39869f744 fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file (#13780) (2026-03-06)
• ad98504d7 Reduce SQLite log retention to 10 days (#13781) (2026-03-06)
• 8a54d3caa feat: structured plugin parsing (#13711) (2026-03-06)
• 0e41a5c4a chore: improve DB flushing (#13620) (2026-03-06)
• 4e6c6193a Move sqlite logs to a dedicated database (#13772) (2026-03-06)
• 51fcdc760 app-server: Emit thread/name/updated event globally (#13674) (2026-03-06)
• 3449e00bc feat(otel, core): record turn TTFT and TTFM metrics in codex-core (#13630) (2026-03-06)
• 6c98a59db fix(app-server): fix turn_start_shell_zsh_fork_executes_command_v2 flake (#13770) (2026-03-06)
• cb1a182bb Clarify sandbox permission override helper semantics (#13703) (2026-03-06)
• c8f4b5bc1 feat: limit number of rows per log (#13763) (2026-03-06)
• f891f516a feat: drop discrepency metrics (#13753) (2026-03-06)
• fa16c2690 feat: drop sqlite db feature flag (#13750) (2026-03-06)
• b3765a07e [rmcp-client] Recover from streamable HTTP 404 sessions (#13514) (2026-03-06)
• 5d4303510 fix: windows normalization (#13742) (2026-03-06)
• b5f475ed1 Add timestamps to feedback log lines (#13688) (2026-03-06)
• 8ad768eb7 feat: prune old memories in DB (#13734) (2026-03-06)
• b6d43ec8e feat: status line with real data (#13619) (2026-03-06)
• 98dca99db [elicitations] Switch to use MCP style elicitation payload for mcp tool approvals. (#13621) (2026-03-06)
• ee1a20258 Enabling CWD Saving for Image-Gen (#13607) (2026-03-06)

Action required

• Validate latest codex --help and codex exec --help output
• Sync C# SDK constants/options/models with upstream CLI changes
• Add or update tests for new flags/models/features
• Update docs (README + docs/Features + docs/Architecture if needed)

Opened automatically by scheduled workflow 'Codex CLI Upstream Watch'.

[github-actions]

Could not auto-assign @copilot. Please assign manually.