Sync Codex CLI upstream changes (6638558 -> 4b4f61d)

[github-actions]

Detected upstream updates in openai/codex affecting CLI surface tracking.

• Submodule path: submodules/openai-codex
• Watched branch: main
• Current pinned commit: 6638558b8807328e852b54580b010be7034699b7
• Latest upstream commit: 4b4f61d37965b7a37ef1462f7dc5aa927618c9ae
• Compare: openai/codex@6638558...4b4f61d
• Latest commit: openai/codex@4b4f61d

Changed files (CLI-relevant)

• codex-rs/Cargo.lock
• codex-rs/app-server-protocol/schema/json/ClientRequest.json
• codex-rs/app-server-protocol/schema/json/EventMsg.json
• codex-rs/app-server-protocol/schema/json/McpServerElicitationRequestParams.json
• codex-rs/app-server-protocol/schema/json/McpServerElicitationRequestResponse.json
• codex-rs/app-server-protocol/schema/json/ServerNotification.json
• codex-rs/app-server-protocol/schema/json/ServerRequest.json
• codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json
• codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecOutputDeltaNotification.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecResizeParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecResizeResponse.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecResponse.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecTerminateParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecTerminateResponse.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecWriteParams.json
• codex-rs/app-server-protocol/schema/json/v2/CommandExecWriteResponse.json
• codex-rs/app-server-protocol/schema/json/v2/ConfigReadResponse.json
• codex-rs/app-server-protocol/schema/json/v2/PluginListParams.json
• codex-rs/app-server-protocol/schema/json/v2/PluginListResponse.json
• codex-rs/app-server-protocol/schema/json/v2/RawResponseItemCompletedNotification.json
• codex-rs/app-server-protocol/schema/json/v2/ThreadResumeParams.json
• codex-rs/app-server-protocol/schema/json/v2/WindowsSandboxSetupStartParams.json
• codex-rs/app-server-protocol/schema/typescript/ClientRequest.ts
• codex-rs/app-server-protocol/schema/typescript/ElicitationRequest.ts
• codex-rs/app-server-protocol/schema/typescript/ElicitationRequestEvent.ts
• codex-rs/app-server-protocol/schema/typescript/ImageGenerationEndEvent.ts
• codex-rs/app-server-protocol/schema/typescript/ImageGenerationItem.ts
• codex-rs/app-server-protocol/schema/typescript/ServerNotification.ts
• codex-rs/app-server-protocol/schema/typescript/WebSearchContextSize.ts
• codex-rs/app-server-protocol/schema/typescript/WebSearchLocation.ts
• codex-rs/app-server-protocol/schema/typescript/WebSearchToolConfig.ts
• codex-rs/app-server-protocol/schema/typescript/index.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecOutputDeltaNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecOutputStream.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResizeParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResizeResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminalSize.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminateParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminateResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecWriteResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationArrayType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationBooleanSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationBooleanType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationConstOption.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationLegacyTitledEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationMultiSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationNumberSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationNumberType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationObjectType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationPrimitiveSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationSingleSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationStringFormat.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationStringSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationStringType.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationTitledEnumItems.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationTitledMultiSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationTitledSingleSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationUntitledEnumItems.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationUntitledMultiSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpElicitationUntitledSingleSelectEnumSchema.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerElicitationRequestParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerElicitationRequestResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginInterface.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginMarketplaceEntry.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginSource.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginSummary.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ProfileV2.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ToolsV2.ts
• codex-rs/app-server-protocol/schema/typescript/v2/WindowsSandboxSetupStartParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/index.ts
• codex-rs/app-server-protocol/src/export.rs
• codex-rs/app-server-protocol/src/protocol/common.rs
• codex-rs/app-server-protocol/src/protocol/mappers.rs
• codex-rs/app-server-protocol/src/protocol/v2.rs
• codex-rs/app-server-test-client/src/lib.rs
• codex-rs/app-server/Cargo.toml
• codex-rs/app-server/README.md
• codex-rs/app-server/src/bespoke_event_handling.rs
• codex-rs/app-server/src/codex_message_processor.rs
• codex-rs/app-server/src/command_exec.rs
• codex-rs/app-server/src/config_api.rs
• codex-rs/app-server/src/lib.rs
• codex-rs/app-server/src/message_processor.rs
• codex-rs/app-server/src/outgoing_message.rs
• codex-rs/app-server/tests/common/mcp_process.rs
• codex-rs/app-server/tests/suite/v2/command_exec.rs
• codex-rs/app-server/tests/suite/v2/config_rpc.rs
• codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs
• codex-rs/app-server/tests/suite/v2/mcp_server_elicitation.rs
• codex-rs/app-server/tests/suite/v2/mod.rs
• codex-rs/app-server/tests/suite/v2/plugin_install.rs
• codex-rs/app-server/tests/suite/v2/plugin_list.rs
• codex-rs/app-server/tests/suite/v2/thread_name_websocket.rs
• codex-rs/app-server/tests/suite/v2/turn_start_zsh_fork.rs
• codex-rs/app-server/tests/suite/v2/windows_sandbox_setup.rs
• codex-rs/cli/Cargo.toml
• codex-rs/cli/src/login.rs
• codex-rs/config/src/config_requirements.rs
• codex-rs/core/config.schema.json
• codex-rs/core/src/client.rs
• codex-rs/core/src/client_common.rs
• codex-rs/core/src/codex.rs
• codex-rs/core/src/codex_tests.rs
• codex-rs/core/src/compact.rs
• codex-rs/core/src/compact_remote.rs
• codex-rs/core/src/config/config_tests.rs
• codex-rs/core/src/config/managed_features.rs
• codex-rs/core/src/config/mod.rs
• codex-rs/core/src/config/network_proxy_spec.rs
• codex-rs/core/src/config/permissions.rs
• codex-rs/core/src/config/profile.rs
• codex-rs/core/src/event_mapping.rs
• codex-rs/core/src/exec.rs
• codex-rs/core/src/exec_policy.rs
• codex-rs/core/src/features.rs
• codex-rs/core/src/features/legacy.rs
• codex-rs/core/src/git_info.rs
• codex-rs/core/src/landlock.rs
• codex-rs/core/src/lib.rs
• codex-rs/core/src/mcp_connection_manager.rs
• codex-rs/core/src/mcp_tool_call.rs
• codex-rs/core/src/memories/mod.rs
• codex-rs/core/src/memories/phase1.rs
• codex-rs/core/src/memories/phase2.rs
• codex-rs/core/src/memories/start.rs
• codex-rs/core/src/memories/usage.rs
• codex-rs/core/src/memory_trace.rs
• codex-rs/core/src/mentions.rs
• codex-rs/core/src/network_proxy_loader.rs
• codex-rs/core/src/path_utils.rs
• codex-rs/core/src/plugins/curated_repo.rs
• codex-rs/core/src/plugins/injection.rs
• codex-rs/core/src/plugins/manager.rs
• codex-rs/core/src/plugins/manifest.rs
• codex-rs/core/src/plugins/marketplace.rs
• codex-rs/core/src/plugins/mod.rs
• codex-rs/core/src/plugins/store.rs
• codex-rs/core/src/project_doc.rs
• codex-rs/core/src/realtime_conversation.rs
• codex-rs/core/src/rollout/list.rs
• codex-rs/core/src/rollout/metadata.rs
• codex-rs/core/src/rollout/recorder.rs
• codex-rs/core/src/sandboxing/mod.rs
• codex-rs/core/src/seatbelt.rs
• codex-rs/core/src/shell_snapshot.rs
• codex-rs/core/src/skills/injection.rs
• codex-rs/core/src/skills/invocation_utils.rs
• codex-rs/core/src/spawn.rs
• codex-rs/core/src/state/service.rs
• codex-rs/core/src/state/turn.rs
• codex-rs/core/src/state_db.rs
• codex-rs/core/src/stream_events_utils.rs
• codex-rs/core/src/tasks/compact.rs
• codex-rs/core/src/tasks/mod.rs
• codex-rs/core/src/tasks/regular.rs
• codex-rs/core/src/tasks/review.rs
• codex-rs/core/src/tasks/undo.rs
• codex-rs/core/src/tasks/user_shell.rs
• codex-rs/core/src/tools/handlers/agent_jobs.rs
• codex-rs/core/src/tools/handlers/multi_agents.rs
• codex-rs/core/src/tools/handlers/shell.rs
• codex-rs/core/src/tools/handlers/unified_exec.rs
• codex-rs/core/src/tools/js_repl/mod.rs
• codex-rs/core/src/tools/orchestrator.rs
• codex-rs/core/src/tools/registry.rs
• codex-rs/core/src/tools/runtimes/shell/unix_escalation.rs
• codex-rs/core/src/tools/runtimes/shell/unix_escalation_tests.rs
• codex-rs/core/src/tools/sandboxing.rs
• codex-rs/core/src/tools/spec.rs
• codex-rs/core/src/turn_timing.rs
• codex-rs/core/src/unified_exec/mod.rs
• codex-rs/core/src/unified_exec/process.rs
• codex-rs/core/src/unified_exec/process_manager.rs
• codex-rs/core/tests/responses_headers.rs
• codex-rs/core/tests/suite/approvals.rs
• codex-rs/core/tests/suite/client.rs
• codex-rs/core/tests/suite/client_websockets.rs
• codex-rs/core/tests/suite/exec.rs
• codex-rs/core/tests/suite/items.rs
• codex-rs/core/tests/suite/plugins.rs
• codex-rs/core/tests/suite/realtime_conversation.rs
• codex-rs/core/tests/suite/skill_approval.rs
• codex-rs/core/tests/suite/user_shell_cmd.rs
• codex-rs/core/tests/suite/web_search.rs
• codex-rs/exec/src/event_processor_with_human_output.rs
• codex-rs/exec/src/lib.rs
• codex-rs/feedback/src/lib.rs
• codex-rs/linux-sandbox/tests/suite/landlock.rs
• codex-rs/login/Cargo.toml
• codex-rs/login/src/server.rs
• codex-rs/network-proxy/README.md
• codex-rs/network-proxy/src/config.rs

Detected CLI flag surface changes

• (no CLI flag surface change detected from CLI sources)

Detected model catalog changes

• (no model catalog change detected from models.json)

Detected feature flag changes

• added tool_call_mcp_elicitation

Commits

• 4b4f61d37 app-server: require absolute cwd for windowsSandbox/setupStart (#13833) (2026-03-06)
• b0ce16c47 fix(core): respect reject policy by approval source for skill scripts (#13816) (2026-03-06)
• b52c18e41 protocol: derive effective file access from filesystem policies (#13440) (2026-03-06)
• 22ac6b9aa sandboxing: plumb split sandbox policies through runtime (#13439) (2026-03-06)
• 25fa97416 fix: support managed network allowlist controls (#12752) (2026-03-06)
• 5deaf9409 fix: avoid invoking git before project trust is established (#13804) (2026-03-06)
• 90469d0a2 feat(app-server-protocol): address naming conflicts in json schema exporter (#13819) (2026-03-06)
• e9bd8b20a app-server: Add streaming and tty/pty capabilities to command/exec (#13640) (2026-03-06)
• 61098c7f5 Allow full web search tool config (#13675) (2026-03-06)
• 8b8128497 fix(core): skip exec approval for permissionless skill scripts (#13791) (2026-03-06)
• 024373430 feat: Add curated plugin marketplace + Metadata Cleanup. (#13712) (2026-03-06)
• 289ed549c chore(otel): rename OtelManager to SessionTelemetry (#13808) (2026-03-06)
• 3794363ca fix: include libcap-dev dependency when creating a devcontainer for building Codex (#13814) (2026-03-06)
• a11c59f63 Add realtime startup context override (#13796) (2026-03-06)
• f82678b2a config: add initial support for the new permission profile config language in config.toml (#13434) (2026-03-06)
• 8ba718a61 docs: remove auth login logging plan (#13810) (2026-03-06)
• d6c818619 Clarify js_repl binding reuse guidance (#13803) (2026-03-06)
• 5b04cc657 utils/pty: add streaming spawn and terminal sizing primitives (#13695) (2026-03-06)
• 4e68fb96e feat: add auth login diagnostics (#13797) (2026-03-06)
• dd4a5216c chore(otel): reorganize codex-otel crate (#13800) (2026-03-06)
• 8ede18011 Codex/winget auto update (#12943) (2026-03-06)
• 9a4787c24 fix: reject global wildcard network proxy domains (#13789) (2026-03-06)
• 7a5aff497 fix bazel build (#13787) (2026-03-06)
• 488875f24 fix: move unit tests in codex-rs/core/src/codex.rs into their own file (#13783) (2026-03-06)
• 39869f744 fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file (#13780) (2026-03-06)
• ad98504d7 Reduce SQLite log retention to 10 days (#13781) (2026-03-06)
• 8a54d3caa feat: structured plugin parsing (#13711) (2026-03-06)
• 0e41a5c4a chore: improve DB flushing (#13620) (2026-03-06)
• 4e6c6193a Move sqlite logs to a dedicated database (#13772) (2026-03-06)
• 51fcdc760 app-server: Emit thread/name/updated event globally (#13674) (2026-03-06)
• 3449e00bc feat(otel, core): record turn TTFT and TTFM metrics in codex-core (#13630) (2026-03-06)
• 6c98a59db fix(app-server): fix turn_start_shell_zsh_fork_executes_command_v2 flake (#13770) (2026-03-06)
• cb1a182bb Clarify sandbox permission override helper semantics (#13703) (2026-03-06)
• c8f4b5bc1 feat: limit number of rows per log (#13763) (2026-03-06)
• f891f516a feat: drop discrepency metrics (#13753) (2026-03-06)
• fa16c2690 feat: drop sqlite db feature flag (#13750) (2026-03-06)
• b3765a07e [rmcp-client] Recover from streamable HTTP 404 sessions (#13514) (2026-03-06)
• 5d4303510 fix: windows normalization (#13742) (2026-03-06)
• b5f475ed1 Add timestamps to feedback log lines (#13688) (2026-03-06)
• 8ad768eb7 feat: prune old memories in DB (#13734) (2026-03-06)
• b6d43ec8e feat: status line with real data (#13619) (2026-03-06)
• 98dca99db [elicitations] Switch to use MCP style elicitation payload for mcp tool approvals. (#13621) (2026-03-06)
• ee1a20258 Enabling CWD Saving for Image-Gen (#13607) (2026-03-06)

Action required

• Validate latest codex --help and codex exec --help output
• Sync C# SDK constants/options/models with upstream CLI changes
• Add or update tests for new flags/models/features
• Update docs (README + docs/Features + docs/Architecture if needed)

Opened automatically by scheduled workflow 'Codex CLI Upstream Watch'.

[github-actions]

Could not auto-assign @copilot. Please assign manually.