Sync Codex CLI upstream changes (8f705b0 -> dbfe855)

[github-actions]

Detected upstream updates in openai/codex affecting CLI surface tracking.

• Submodule path: submodules/openai-codex
• Watched branch: main
• Current pinned commit: 8f705b070270965eda3347733dd0af8a94c22cf4
• Latest upstream commit: dbfe855f4fd0f5dcdf079882652a8efe622b0595
• Compare: openai/codex@8f705b0...dbfe855
• Latest commit: openai/codex@dbfe855

Changed files (CLI-relevant)

• codex-rs/Cargo.lock
• codex-rs/analytics/Cargo.toml
• codex-rs/analytics/src/analytics_client_tests.rs
• codex-rs/analytics/src/client.rs
• codex-rs/analytics/src/events.rs
• codex-rs/analytics/src/facts.rs
• codex-rs/analytics/src/lib.rs
• codex-rs/analytics/src/reducer.rs
• codex-rs/app-server-client/Cargo.toml
• codex-rs/app-server-client/src/lib.rs
• codex-rs/app-server-client/src/remote.rs
• codex-rs/app-server-protocol/schema/json/ApplyPatchApprovalResponse.json
• codex-rs/app-server-protocol/schema/json/ClientRequest.json
• codex-rs/app-server-protocol/schema/json/ExecCommandApprovalResponse.json
• codex-rs/app-server-protocol/schema/json/ServerNotification.json
• codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json
• codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json
• codex-rs/app-server-protocol/schema/json/v2/ItemGuardianApprovalReviewCompletedNotification.json
• codex-rs/app-server-protocol/schema/json/v2/ItemGuardianApprovalReviewStartedNotification.json
• codex-rs/app-server-protocol/schema/json/v2/McpServerToolCallParams.json
• codex-rs/app-server-protocol/schema/json/v2/McpServerToolCallResponse.json
• codex-rs/app-server-protocol/schema/json/v2/ThreadStartParams.json
• codex-rs/app-server-protocol/schema/typescript/ApplyPatchApprovalParams.ts
• codex-rs/app-server-protocol/schema/typescript/ClientRequest.ts
• codex-rs/app-server-protocol/schema/typescript/ExecCommandApprovalParams.ts
• codex-rs/app-server-protocol/schema/typescript/InitializeCapabilities.ts
• codex-rs/app-server-protocol/schema/typescript/InitializeResponse.ts
• codex-rs/app-server-protocol/schema/typescript/ParsedCommand.ts
• codex-rs/app-server-protocol/schema/typescript/ResourceContent.ts
• codex-rs/app-server-protocol/schema/typescript/ResponseItem.ts
• codex-rs/app-server-protocol/schema/typescript/ReviewDecision.ts
• codex-rs/app-server-protocol/schema/typescript/v2/AppInfo.ts
• codex-rs/app-server-protocol/schema/typescript/v2/AppsListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/AppsListResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/AutoReviewDecisionSource.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ChatgptAuthTokensRefreshParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecOutputDeltaNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResizeParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminalSize.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecTerminateParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/CommandExecutionRequestApprovalParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigBatchWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigLayerSource.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigReadParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigRequirementsReadResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigValueWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigWarningNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ConfigWriteResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/DeprecationNoticeNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExperimentalFeature.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExperimentalFeatureEnablementSetParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExperimentalFeatureEnablementSetResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExperimentalFeatureListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExperimentalFeatureListResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExternalAgentConfigDetectParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ExternalAgentConfigMigrationItem.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FileChangeRequestApprovalParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsChangedNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsCopyParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsCreateDirectoryParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsGetMetadataParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsGetMetadataResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsReadDirectoryEntry.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsReadDirectoryParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsReadDirectoryResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsReadFileParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsReadFileResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsRemoveParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsUnwatchParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsWatchParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsWatchResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/FsWriteFileParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/GetAccountParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/GetAccountRateLimitsResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/GuardianApprovalReviewStatus.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ItemGuardianApprovalReviewCompletedNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ItemGuardianApprovalReviewStartedNotification.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ListMcpServerStatusParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ListMcpServerStatusResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/LoginAccountParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/LoginAccountResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerElicitationRequestParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerElicitationRequestResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerToolCallParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/McpServerToolCallResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ModelListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ModelListResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/NetworkRequirements.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginInstallParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginInterface.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/PluginUninstallParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ReviewStartParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ReviewStartResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ReviewTarget.ts
• codex-rs/app-server-protocol/schema/typescript/v2/SkillMetadata.ts
• codex-rs/app-server-protocol/schema/typescript/v2/SkillsConfigWriteParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/SkillsListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/TextElement.ts
• codex-rs/app-server-protocol/schema/typescript/v2/TextPosition.ts
• codex-rs/app-server-protocol/schema/typescript/v2/Thread.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadForkResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadItem.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadListResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadLoadedListParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadLoadedListResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadMetadataGitInfoUpdateParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadMetadataUpdateParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadReadParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadRealtimeStartTransport.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadResumeResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadRollbackParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadRollbackResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadShellCommandParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadStartParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadStartResponse.ts
• codex-rs/app-server-protocol/schema/typescript/v2/ThreadStartSource.ts
• codex-rs/app-server-protocol/schema/typescript/v2/Turn.ts
• codex-rs/app-server-protocol/schema/typescript/v2/TurnSteerParams.ts
• codex-rs/app-server-protocol/schema/typescript/v2/UserInput.ts
• codex-rs/app-server-protocol/schema/typescript/v2/index.ts
• codex-rs/app-server-protocol/src/export.rs
• codex-rs/app-server-protocol/src/protocol/common.rs
• codex-rs/app-server-protocol/src/protocol/item_builders.rs
• codex-rs/app-server-protocol/src/protocol/thread_history.rs
• codex-rs/app-server-protocol/src/protocol/v2.rs
• codex-rs/app-server-protocol/src/schema_fixtures.rs
• codex-rs/app-server/README.md
• codex-rs/app-server/src/bespoke_event_handling.rs
• codex-rs/app-server/src/codex_message_processor.rs
• codex-rs/app-server/src/in_process.rs
• codex-rs/app-server/src/lib.rs
• codex-rs/app-server/src/message_processor.rs
• codex-rs/app-server/src/message_processor/tracing_tests.rs
• codex-rs/app-server/src/thread_state.rs
• codex-rs/app-server/src/transport/remote_control/tests.rs
• codex-rs/app-server/src/transport/remote_control/websocket.rs
• codex-rs/app-server/tests/common/mcp_process.rs
• codex-rs/app-server/tests/suite/v2/client_metadata.rs
• codex-rs/app-server/tests/suite/v2/config_rpc.rs
• codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs
• codex-rs/app-server/tests/suite/v2/mcp_server_status.rs
• codex-rs/app-server/tests/suite/v2/mcp_tool.rs
• codex-rs/app-server/tests/suite/v2/mod.rs
• codex-rs/app-server/tests/suite/v2/realtime_conversation.rs
• codex-rs/app-server/tests/suite/v2/skills_list.rs
• codex-rs/app-server/tests/suite/v2/thread_name_websocket.rs
• codex-rs/app-server/tests/suite/v2/turn_start.rs
• codex-rs/app-server/tests/suite/v2/turn_steer.rs
• codex-rs/cli/src/debug_sandbox.rs
• codex-rs/cli/src/main.rs
• codex-rs/cli/src/marketplace_cmd.rs
• codex-rs/cli/src/marketplace_cmd/metadata.rs
• codex-rs/cli/src/marketplace_cmd/ops.rs
• codex-rs/cli/tests/marketplace_add.rs
• codex-rs/cloud-requirements/src/lib.rs
• codex-rs/code-mode/src/description.rs
• codex-rs/code-mode/src/lib.rs
• codex-rs/codex-api/Cargo.toml
• codex-rs/codex-api/src/common.rs
• codex-rs/codex-api/src/endpoint/realtime_websocket/methods.rs
• codex-rs/codex-api/src/endpoint/realtime_websocket/methods_v2.rs
• codex-rs/codex-api/src/endpoint/realtime_websocket/protocol_v2.rs
• codex-rs/codex-api/src/files.rs
• codex-rs/codex-api/src/lib.rs
• codex-rs/codex-api/tests/realtime_websocket_e2e.rs
• codex-rs/codex-mcp/src/lib.rs
• codex-rs/codex-mcp/src/mcp/mod.rs
• codex-rs/codex-mcp/src/mcp_connection_manager.rs
• codex-rs/codex-mcp/src/mcp_connection_manager_tests.rs
• codex-rs/codex-mcp/src/mcp_tool_names.rs
• codex-rs/config/src/config_toml.rs
• codex-rs/config/src/lib.rs
• codex-rs/config/src/marketplace_edit.rs
• codex-rs/config/src/types.rs
• codex-rs/core/README.md
• codex-rs/core/config.schema.json
• codex-rs/core/src/agent/control.rs
• codex-rs/core/src/agent/control_tests.rs
• codex-rs/core/src/codex.rs
• codex-rs/core/src/codex_delegate.rs
• codex-rs/core/src/codex_delegate_tests.rs
• codex-rs/core/src/codex_tests.rs
• codex-rs/core/src/codex_tests_guardian.rs
• codex-rs/core/src/codex_thread.rs
• codex-rs/core/src/compact.rs
• codex-rs/core/src/compact_remote.rs
• codex-rs/core/src/config/service.rs
• codex-rs/core/src/connectors_tests.rs
• codex-rs/core/src/context_manager/history.rs
• codex-rs/core/src/exec.rs
• codex-rs/core/src/exec_tests.rs
• codex-rs/core/src/guardian/approval_request.rs
• codex-rs/core/src/guardian/mod.rs
• codex-rs/core/src/guardian/prompt.rs
• codex-rs/core/src/guardian/review.rs

Detected CLI flag surface changes

• (no CLI flag surface change detected from CLI sources)

Detected model catalog changes

• (no model catalog change detected from models.json)

Detected feature flag changes

• (no feature flag surface change detected from config schema)

Commits

• dbfe855f4 feat(devcontainer): add separate secure customer profile (#10431) (2026-04-10)
• e9e7ef3d3 Fix thread/list cwd filtering for Windows verbatim paths (#17414) (2026-04-10)
• a9796e39c Stabilize marketplace add local source test (#17424) (2026-04-10)
• b7139a7e8 [mcp] Support MCP Apps part 3 - Add mcp tool call support. (#17364) (2026-04-10)
• f8bb08861 update cloud requirements parse failure msg (#17396) (2026-04-10)
• 8a474a656 fix: unblock private DNS in macOS sandbox (#17370) (2026-04-10)
• 66e13efd9 TUI: enforce core boundary (#17399) (2026-04-10)
• 37aac89a6 representing guardian review timeouts in protocol types (#17381) (2026-04-10)
• 824ec94ea Fix Windows exec-server output test flake (#17409) (2026-04-10)
• f9a8d1870 Add marketplace command (#17087) (2026-04-10)
• 58933237c feat(analytics): add guardian review event schema (#17055) (2026-04-10)
• b11478149 fix(permissions): fix symlinked writable roots in sandbox permissions (#15981) (2026-04-10)
• 0a99943a9 app-server: add pipelined config rpc regression test (#17371) (2026-04-10)
• 930e5adb7 Revert "Option to Notify Workspace Owner When Usage Limit is Reached" (#17391) (2026-04-10)
• a3be74143 fix(guardian, app-server): introduce guardian review ids (#17298) (2026-04-10)
• 7999b0f60 Support clear SessionStart source (#17073) (2026-04-10)
• 87b9275ff [codex] Improve hook status rendering (#17266) (2026-04-10)
• 147cb8411 add parent-id to guardian context (#17194) (2026-04-10)
• aac1e74cd Add thread title to configurable TUI status line (#17187) (2026-04-10)
• 5779be314 [codex-analytics] add compaction analytics event (#17155) (2026-04-10)
• 029fc63d1 Strengthen realtime backend delegation prompt (#17363) (2026-04-10)
• 87328976f fix: main (#17352) (2026-04-10)
• 2e81eac00 Queue Realtime V2 response.create while active (#17306) (2026-04-10)
• 88165e179 feat(guardian): send only transcript deltas on guardian followups (#17269) (2026-04-10)
• d39a72286 feat: description multi-agent v2 (#17338) (2026-04-10)
• 8d5889929 fix: MCP leaks in app-server (#17223) (2026-04-10)
• 8035cb03f feat: make rollout recorder reliable against errors (#17214) (2026-04-10)
• 085ffb445 feat: move exec-server ownership (#16344) (2026-04-10)
• 7bbe3b601 Add output_schema to code mode render (#17210) (2026-04-10)
• 1de008541 Stream Realtime V2 background agent progress (#17264) (2026-04-10)
• 4e910bf15 adding parent_thread_id in guardian (#17249) (2026-04-09)
• 26a28afc6 Extract realtime input task handlers (#17280) (2026-04-09)
• 60236e8c9 Rename Realtime V2 tool to background_agent (#17278) (2026-04-09)
• 9f2a58515 Option to Notify Workspace Owner When Usage Limit is Reached (#16969) (2026-04-09)
• 36712d854 Install rustls provider for remote websocket client (#17288) (2026-04-09)
• f6cc2bb0c Emit live hook prompts before raw-event filtering (#17189) (2026-04-09)
• 04fc208b6 preserve search results order in tool_search_output (#17263) (2026-04-09)
• b976e701a fix: support split carveouts in windows elevated sandbox (#14568) (2026-04-09)
• 32224878b Stop Realtime V2 response.done delegation (#17267) (2026-04-09)
• a44645129 remove windows gate that disables hooks (#17268) (2026-04-09)
• ecca34209 Omit empty app-server instruction overrides (#17258) (2026-04-09)
• ff1ab61e4 app-server: Fix clippy by removing extra mut (#17262) (2026-04-09)
• ef330eff6 feat(tui): Ctrl+O copy hotkey and harden copy-as-markdown behavior (#16966) (2026-04-09)
• d7f99b0fa [mcp] Expand tool search to custom MCPs. (#16944) (2026-04-09)
• 545f3daba app-server: Use shared receivers for app-server message processors (#17256) (2026-04-09)
• a92a5085b Forward app-server turn clientMetadata to Responses (#16009) (2026-04-09)
• 244b15c95 feat: add Codex Apps sediment file remapping (#15197) (2026-04-09)
• 25a0f6784 [codex] Show ctrl + t hint on truncated exec output in TUI (#17076) (2026-04-09)
• 7ab825e04 refactor(proxy): clarify sandbox block messages (#17168) (2026-04-09)
• 76de99ff2 [codex] add memory extensions (#16276) (2026-04-09)
• 12f0e0b0e chore: merge name and title (#17116) (2026-04-09)
• c0b5d8d24 Skip local shell snapshots for remote unified exec (#17217) (2026-04-09)
• 598d6ff05 Render statusline context as a meter (#17170) (2026-04-09)
• 9f6f2c84c feat: advanced announcements per OS and plans (#17226) (2026-04-09)
• 6c5471feb feat: /resume per ID/name (#17222) (2026-04-09)

Action required

• Validate latest codex --help and codex exec --help output
• Validate latest codex features list output
• Sync C# SDK constants/options/models with upstream CLI changes
• Add or update tests for new flags/models/features
• Update docs (README + docs/Features + docs/Architecture if needed)

Opened automatically by scheduled workflow 'Codex CLI Upstream Watch'.