@meistrari/agent-core 0.2.0-experimental.4 → 0.2.0-experimental.6

package/README.md

@@ -122,6 +122,13 @@ stale managed instruction file.
 `resolveInferenceModel`, `pluginsEnabled`, and `browserAuth` (a per-run Browser Use
 credential socket for ChatGPT authentication; off by default).
 
+API-key and Bedrock logins stay in the app-server's memory (`cli_auth_credentials_store="ephemeral"`),
+so no `auth.json` under `CODEX_HOME` holds the key for the agent's tools to read. An API-key login
+may name `baseUrl`, the root of another OpenAI Responses API (a gateway, or a loopback proxy that
+holds the real credential and gets a placeholder): Codex then reaches it as a model provider of its
+own, named by `modelProvider` (`api-key-endpoint` by default, never a built-in id), with the key as
+its bearer. `codex-api-key-endpoint.cli.spec.ts` pins that contract against the real CLI.
+
 `AgentRun.notify` and `AgentRun.compactContext` are optional on the interface; the Claude and
 Codex runs implement both. `sendPrompt` accepts `submissionOrder`, defaulting to `in-order`.
 
@@ -131,13 +138,14 @@ The attachment preparation error constructor is public at
 Core owns provider, mapper, attachment, tool-runner, and lifecycle regression tests,
 including suites transferred from Remy. Remy owns its strict event projection, model admission,
 product instructions/tools, and supervisor integration tests. CI type-checks and tests core
-with Remy's Bun 1.3.10 / Claude SDK 0.3.280 and agent-api's Claude SDK 0.3.257 pins.
+with Remy's Bun 1.3.10 / Claude SDK 0.3.284 and agent-api's Claude SDK 0.3.257 pins.
 
 `bun run test` runs the portable suites. `bun run test:cli` runs the `*.cli.spec.ts` suites
-against the real bundled Claude Code CLI and a fake Messages API. CI runs them on Linux; the
+against the real bundled Claude Code CLI and a fake Messages API, and the Codex endpoint spec
+against the pinned Codex CLI (through `bunx`, or `CODEX_EXECUTABLE`) and a fake Responses API. CI runs them on Linux; the
 process lifecycle spec reads `/proc`, so it fails on macOS. Claude Code rejects its
 bypass-permissions mode as root, so run them as a regular user.
 
 Regenerate the experimental Codex wire types with `bun run generate:codex-protocol`.
-The generator pins Codex 0.156.1 and verifies any `CODEX_EXECUTABLE` override before
+The generator pins Codex 0.159.0 and verifies any `CODEX_EXECUTABLE` override before
 using it. Commit generated files with generator changes; CI checks reproducibility.

package/docs/consumer-capability-matrix.md

@@ -231,8 +231,8 @@ command correlation, usage accounting, credential sources, and transport entrypo
 provider-specific model admission stays in its compatibility adapter. Experimental Codex
 `step_model_switching` is explicitly enabled by Remy; core's default remains disabled.
 
-The Codex protocol generator now pins 0.156.1. Remy's image/model catalog keeps that product's
-0.156.1 pin; agent-api keeps its own runtime pin. Current and historical live-image evidence is
+The Codex protocol generator now pins 0.159.0. Remy's image/model catalog moves to that
+0.159.0 pin with it; agent-api keeps its own runtime pin. Current and historical live-image evidence is
 separated by artifact below; a passing infrastructure smoke does not prove application parity.
 
 | New requirement | Owner | Regression coverage | Validation |
@@ -240,7 +240,7 @@ separated by artifact below; a passing infrastructure smoke does not prove appli
 | Model and effort changes carried by accepted prompts, including same-turn steering and next-turn fallback | core; model admission in Remy | Claude/Codex run regression suites, Remy compatibility tests | unit, cli, consumer; host and official Remy application settings smokes pass |
 | Claude compaction returns on acceptance, reports one correlated outcome, and defers steers while compacting | core | `claude-run.regression.test.ts`, `claude-compaction.cli.spec.ts` | CLI and official Remy application compaction/steer-order checks pass |
 | Provider setting controls precede input; failed changes retain accepted settings | core | run regressions and `claude-settings-change.cli.spec.ts` | new CLI checks passed |
-| Opt-in Codex active-turn switching and pinned protocol | core configuration, product chooses runtime | command mapper/provider regressions, generated 0.156.1 protocol | generation CI and host and official Remy Codex application settings smokes pass |
+| Opt-in Codex active-turn switching and pinned protocol | core configuration, product chooses runtime | command mapper/provider regressions, generated 0.159.0 protocol | generation CI and host and official Remy Codex application settings smokes pass |
 
 ## Provider execution
 

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@meistrari/agent-core",
     "type": "module",
-    "version": "0.2.0-experimental.4",
+    "version": "0.2.0-experimental.6",
     "packageManager": "bun@1.3.12",
     "description": "Shared contracts and runtime modules for Tela coding-agent sandboxes: agent protocol, supervisor wire protocol, resident supervisor, worker runtime client, and Claude/Codex harness adapters.",
     "license": "UNLICENSED",
@@ -103,7 +103,7 @@
     },
     "devDependencies": {
         "@antfu/eslint-config": "4.16.2",
-        "@anthropic-ai/claude-agent-sdk": "0.3.280",
+        "@anthropic-ai/claude-agent-sdk": "0.3.284",
         "@anthropic-ai/sdk": "0.93.0",
         "@modelcontextprotocol/sdk": "1.29.0",
         "@types/bun": "1.3.12",

package/scripts/generate-codex-protocol.ts

@@ -37,8 +37,8 @@ interface ResponseEntry {
 }
 
 const root = resolve(dirname(fileURLToPath(import.meta.url)), '..')
-const codexCliVersion = '0.156.1'
-const upstreamRef = '3d2ee51ca2d5db578f328aa75e20aa22c0197c9a'
+const codexCliVersion = '0.159.0'
+const upstreamRef = '687a119f0fcaace47e1f1abcc77cec6c813fd6da'
 const upstreamSchemaRoot = generateCodexSchemas()
 const upstreamJsonDir = join(upstreamSchemaRoot, 'json')
 const upstreamTypescriptDir = join(upstreamSchemaRoot, 'typescript')
@@ -640,6 +640,9 @@ function parseSupportedParamsType(rawTypeName: string): {
 
 function resolveResponseTypeName(method: string, paramsType: string | undefined, generatedSchemaNames: Set<string>): string {
     const overrides: { [method: string]: string } = {
+        'account/gatewayOAuth/cancel': 'GatewayOAuthCancelResponse',
+        'account/gatewayOAuth/login': 'GatewayOAuthLoginResponse',
+        'account/gatewayOAuth/read': 'GatewayOAuthReadResponse',
         'account/logout': 'LogoutAccountResponse',
         'account/rateLimits/read': 'GetAccountRateLimitsResponse',
         'account/usage/read': 'GetAccountTokenUsageResponse',

package/src/agents/claude/claude-event-mapper.ts

@@ -168,6 +168,8 @@ export interface ClaudeEventMapperState {
     heldTurnEnd?: Extract<AgentEventDraft, { type: 'turn.ended' }>
     currentTurnId?: string
     currentCommandId?: string
+    /** An input the run never pushed (a scheduled task) started while no turn was open; the next turn is the provider's own. */
+    providerInitiatedInput?: true
     currentMessageId?: string
     currentCompactionId?: string
 }
@@ -859,7 +861,10 @@ function ensureTurnStarted(drafts: AgentEventDraft[], state: ClaudeEventMapperSt
         state.currentTurnId = createRuntimeTurnId()
         state.currentMessageId = undefined
         state.contentBlockTypeByIndex.clear()
-        drafts.push({ type: 'turn.started', turnId: state.currentTurnId, actor: mainActor, payload: removeUndefined({ commandId: state.currentCommandId }) })
+        // A submitted input that also started wins: the turn then answers a command.
+        const providerInitiated = state.providerInitiatedInput && !state.currentCommandId ? true : undefined
+        state.providerInitiatedInput = undefined
+        drafts.push({ type: 'turn.started', turnId: state.currentTurnId, actor: mainActor, payload: removeUndefined({ commandId: state.currentCommandId, providerInitiated }) })
     }
     ensureSessionRunning(drafts, state)
     return state.currentTurnId
@@ -877,6 +882,7 @@ function endTurn(drafts: AgentEventDraft[], state: ClaudeEventMapperState): void
     state.interrupt = { status: 'none' }
     state.currentTurnId = undefined
     state.currentCommandId = undefined
+    state.providerInitiatedInput = undefined
 }
 
 /** Emits a superseded turn's held end as final: its steer will not continue it. */

package/src/agents/claude/claude-run.ts

@@ -224,6 +224,8 @@ export class ClaudeRun implements AgentRun {
     private modelChangeInFlight = false
     // Provider command identity by derived client message id, until its completed/negative receipt.
     private readonly commandByClientMessageId = new Map<string, string>()
+    // Every input this run pushed, until its lifecycle settles; any other started input is the CLI's own.
+    private readonly ownedInputIds = new Set<string>()
     // Prompts whose accepted user message has not been emitted into a turn yet.
     private readonly pendingMessages = new Map<string, { messageId: string, mode: 'next' | 'steer', turnId?: string, started: boolean }>()
 
@@ -988,11 +990,24 @@ export class ClaudeRun implements AgentRun {
             })
         }
         this.observeSessionContextLifecycle(parsed.data)
+        this.observeProviderInitiatedInput(parsed.data)
         const steerDrafts = this.observeSteerLifecycle(parsed.data)
         this.settleInputLifecycle(parsed.data)
         return steerDrafts
     }
 
+    // The CLI runs inputs of its own, such as a scheduled task firing. One that starts while no turn
+    // is open opens a turn no command asked for; an owned input's receipt never marks it.
+    private observeProviderInitiatedInput(frame: CommandLifecycleFrame): void {
+        if (this.ownedInputIds.has(frame.command_uuid)) {
+            if (frame.state !== 'queued' && frame.state !== 'started')
+                this.ownedInputIds.delete(frame.command_uuid)
+            return
+        }
+        if (frame.state === 'started' && !this.eventMapperState.turnStarted)
+            this.eventMapperState.providerInitiatedInput = true
+    }
+
     // A steer's receipts before system/init belong to the session's first input, which supersedes
     // nothing; afterwards they drive the mapper's supersession of the running ask.
     private observeSteerLifecycle(frame: CommandLifecycleFrame): AgentEventDraft[] {
@@ -1162,6 +1177,9 @@ export class ClaudeRun implements AgentRun {
     // The owned input queue rejects synchronously before enqueue when the stream is closed, so a
     // rejected push is proven non-delivery and safe to retry against a fresh run.
     private async pushOwnedStream(message: SDKUserMessage): Promise<void> {
+        // Recorded before the push: the CLI's receipt can outrun the push resolution.
+        if (message.uuid)
+            this.ownedInputIds.add(message.uuid)
         try {
             await this.input.push(message)
             this.recordStartup?.('first_input_queued')

package/src/agents/codex/codex-auth.ts

@@ -44,9 +44,23 @@ export interface CodexBedrockAuthProvider {
     getCredentials: (input?: CodexAuthTokenRequest) => Promise<CodexBedrockCredentials>
 }
 
+/**
+ * An API key login, kept in the app-server's memory only. Without `baseUrl` it reaches the API of the model
+ * provider `modelProvider` names (OpenAI's by default). With `baseUrl`, the root of another OpenAI Responses
+ * API (`https://gateway.example/v1`, or a loopback proxy that holds the real credential), Codex reaches it as
+ * a model provider of its own, named by `modelProvider` (`api-key-endpoint` by default) and given the key as
+ * its bearer.
+ */
+export interface CodexApiKeyAuthentication {
+    kind: 'api-key'
+    provider: CodexApiKeyAuthProvider
+    modelProvider?: string
+    baseUrl?: string
+}
+
 export type CodexAuthentication
     = | { kind: 'chatgpt', provider: CodexAuthProvider }
-        | { kind: 'api-key', provider: CodexApiKeyAuthProvider, modelProvider?: string }
+        | CodexApiKeyAuthentication
         | { kind: 'amazon-bedrock', region: string, provider: CodexBedrockAuthProvider }
 /** Expiry scheduling hint only; this neither authenticates nor verifies a JWT signature. */
 export function codexAuthTokensExpireSoon(tokens: CodexAuthTokens): boolean {

package/src/agents/codex/codex-provider.ts

@@ -5,7 +5,7 @@ import type { AgentRun } from '../agent-run'
 import type { AgentTool } from '../agent-tool'
 import type { InstructionComposer } from '../instructions'
 import type { SessionContextComposer } from '../session-context'
-import type { CodexAuthentication, CodexAuthProvider, CodexAuthTokens, CodexBedrockCredentials } from './codex-auth'
+import type { CodexApiKeyAuthentication, CodexAuthentication, CodexAuthProvider, CodexAuthTokens, CodexBedrockCredentials } from './codex-auth'
 import type { CodexEventMapperState, CodexNotification } from './codex-event-mapper'
 import type { CodexJsonRpcMessage, CodexServerRequest } from './codex-json-rpc-client'
 import type { ClientRequestResponsesByMethod } from './codex-protocol'
@@ -13,7 +13,7 @@ import { realpath } from 'node:fs/promises'
 import { resolve } from 'node:path'
 import { codexModelIdSchema } from '../../protocol'
 import { serializeAgentError } from '../agent-error-serializer'
-import { AgentProviderMetadataError, AgentProviderProtocolError, AgentProviderRuntimeError } from '../agent-runtime-error'
+import { AgentProviderMetadataError, AgentProviderProtocolError, AgentProviderRuntimeError, AgentRuntimeValidationError } from '../agent-runtime-error'
 import { sessionConfiguredEvent } from '../agent-session-events'
 import { selectAgentTools, toolByName } from '../agent-tool'
 import { emptyInstructionComposer } from '../instructions'
@@ -33,6 +33,15 @@ import { CodexRunAuth, CodexRunAuthClosedError } from './codex-run-auth'
 import { catalogRepositorySkillRoots, workspaceSkillRoots } from './codex-skill-roots'
 import { runCodexDynamicTool, toCodexDynamicTools } from './codex-tool-mapper'
 
+/** The model provider an API key endpoint gets when `modelProvider` names none. */
+const API_KEY_ENDPOINT_PROVIDER = 'api-key-endpoint'
+/** Codex's own provider ids: an endpoint defined under one of these would not be the one Codex uses. */
+const BUILT_IN_MODEL_PROVIDERS = new Set(['openai', 'amazon-bedrock', 'ollama', 'lmstudio', 'oss'])
+/** A bare TOML key, so the id is safe inside the dotted `-c model_providers.<id>.…` overrides. */
+const MODEL_PROVIDER_ID = /^[\w-]+$/
+/** Where plain http keeps the key on the machine. */
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '[::1]'])
+
 export interface CodexStartupStageFact {
     event: 'sandbox.startup-stage'
     stage: 'codex-initialize' | 'auth-acquisition-login' | 'thread-start' | 'thread-resume'
@@ -103,6 +112,8 @@ export class CodexProvider implements AgentProvider<'codex'> {
     private readonly executable: string
     private readonly environment: Record<string, string | undefined>
     private readonly auth: CodexAuthentication
+    /** The validated endpoint of an API key login that names one. */
+    private readonly apiKeyEndpoint: string | undefined
     private readonly onStartupStage: ((fact: CodexStartupStageFact) => void) | undefined
     private readonly instructions: InstructionComposer
     private readonly sessionContext: SessionContextComposer | undefined
@@ -115,6 +126,7 @@ export class CodexProvider implements AgentProvider<'codex'> {
 
     private constructor(config: CodexProviderConfig) {
         this.auth = normalizeCodexAuthentication(config.auth)
+        this.apiKeyEndpoint = this.auth.kind === 'api-key' ? apiKeyEndpoint(this.auth) : undefined
         this.tools = config.tools ?? []
         this.executable = config.executable ?? 'codex'
         this.environment = config.environment ?? {}
@@ -422,7 +434,11 @@ export class CodexProvider implements AgentProvider<'codex'> {
     }
 
     private modelProvider(): string | undefined {
-        return this.auth.kind === 'amazon-bedrock' ? 'amazon-bedrock' : this.auth.kind === 'api-key' ? this.auth.modelProvider : undefined
+        if (this.auth.kind === 'amazon-bedrock')
+            return 'amazon-bedrock'
+        if (this.auth.kind === 'api-key')
+            return this.auth.modelProvider ?? (this.apiKeyEndpoint === undefined ? undefined : API_KEY_ENDPOINT_PROVIDER)
+        return undefined
     }
 
     private async openConnection(input: {
@@ -450,6 +466,7 @@ export class CodexProvider implements AgentProvider<'codex'> {
                     ...(this.auth.kind === 'amazon-bedrock'
                         ? ['cli_auth_credentials_store="ephemeral"', 'model_provider="amazon-bedrock"', `model_providers.amazon-bedrock.aws.region=${JSON.stringify(this.auth.region)}`, 'model_providers.amazon-bedrock.aws.wire_api="responses"']
                         : []),
+                    ...(this.auth.kind === 'api-key' ? apiKeyConfigOverrides(this.auth.modelProvider, this.apiKeyEndpoint) : []),
                     ...(this.pluginsEnabled === undefined ? [] : [`features.plugins=${this.pluginsEnabled}`]),
                 ],
                 onMessage: (message) => {
@@ -895,6 +912,62 @@ function normalizeCodexAuthentication(auth: CodexAuthProvider | CodexAuthenticat
     return 'kind' in auth ? auth : { kind: 'chatgpt', provider: auth }
 }
 
+/**
+ * The endpoint as Codex is given it, or none: an http(s) URL with no credentials, query or fragment (not even
+ * an empty `?` or `#`), plain http only on loopback, where the key never crosses the network. Without a
+ * trailing slash, so Codex appends `/responses` to the path it names.
+ */
+function apiKeyEndpoint(auth: CodexApiKeyAuthentication): string | undefined {
+    const invalid = (message: string) => new AgentRuntimeValidationError({
+        code: 'agents.codex-api-key-endpoint-invalid',
+        message,
+        publicMessage: 'The Codex API key endpoint is misconfigured.',
+        details: { modelProvider: auth.modelProvider },
+    })
+    // Without an endpoint the provider id only selects a provider configured elsewhere, as it always has.
+    if (auth.baseUrl === undefined)
+        return undefined
+    if (auth.modelProvider !== undefined && !MODEL_PROVIDER_ID.test(auth.modelProvider))
+        throw invalid('Codex model provider ids are letters, digits, underscores and hyphens.')
+    let url: URL
+    try {
+        url = new URL(auth.baseUrl)
+    }
+    catch {
+        throw invalid('The Codex API key endpoint is not a URL.')
+    }
+    if (url.protocol !== 'https:' && url.protocol !== 'http:')
+        throw invalid('The Codex API key endpoint must be an http or https URL.')
+    if (url.protocol === 'http:' && !LOOPBACK_HOSTS.has(url.hostname))
+        throw invalid('The Codex API key endpoint sends the key as its bearer: plain http is accepted on loopback only.')
+    if (url.username || url.password || /[?#]/u.test(auth.baseUrl))
+        throw invalid('The Codex API key endpoint carries no credentials, query or fragment; the key travels as the bearer.')
+    if (BUILT_IN_MODEL_PROVIDERS.has(auth.modelProvider ?? API_KEY_ENDPOINT_PROVIDER))
+        throw invalid('An API key endpoint needs a model provider id of its own, not one of Codex\'s built-in providers.')
+    return `${url.origin}${url.pathname.replace(/\/+$/u, '')}`
+}
+
+/**
+ * An API key login is always kept in memory, never written to `auth.json` under CODEX_HOME, where the agent's
+ * own tools could read it. With an endpoint, Codex reaches it through a Responses provider of its own that
+ * authenticates with that login.
+ */
+function apiKeyConfigOverrides(modelProvider: string | undefined, endpoint: string | undefined): string[] {
+    const ephemeral = ['cli_auth_credentials_store="ephemeral"']
+    if (endpoint === undefined)
+        return ephemeral
+    const id = modelProvider ?? API_KEY_ENDPOINT_PROVIDER
+    const provider = `model_providers.${id}`
+    return [
+        ...ephemeral,
+        `model_provider=${JSON.stringify(id)}`,
+        `${provider}.name=${JSON.stringify(id)}`,
+        `${provider}.base_url=${JSON.stringify(endpoint)}`,
+        `${provider}.wire_api="responses"`,
+        `${provider}.requires_openai_auth=true`,
+    ]
+}
+
 async function requireSelectedRepositoryInstructionSource(input: {
     instructionBridgePath: string
     instructionSources?: readonly string[]

package/src/agents/codex/generated/meta.gen.ts

@@ -1,6 +1,6 @@
 /* eslint-disable style/indent, style/member-delimiter-style, style/quotes, style/semi, style/quote-props */
 // This file is generated by scripts/generate-codex-protocol.ts. Do not edit manually.
-// Upstream Codex protocol ref: 3d2ee51ca2d5db578f328aa75e20aa22c0197c9a
+// Upstream Codex protocol ref: 687a119f0fcaace47e1f1abcc77cec6c813fd6da
 
 import type * as CodexSchema from "./schema.gen.js";
 
@@ -112,6 +112,9 @@ export const CLIENT_REQUEST_METHODS = {
   "thread/realtime/listVoices": "thread/realtime/listVoices",
   "review/start": "review/start",
   "model/list": "model/list",
+  "account/gatewayOAuth/read": "account/gatewayOAuth/read",
+  "account/gatewayOAuth/login": "account/gatewayOAuth/login",
+  "account/gatewayOAuth/cancel": "account/gatewayOAuth/cancel",
   "modelProvider/capabilities/read": "modelProvider/capabilities/read",
   "experimentalFeature/list": "experimentalFeature/list",
   "permissionProfile/list": "permissionProfile/list",
@@ -241,6 +244,7 @@ export const SERVER_NOTIFICATION_METHODS = {
   "mcpServer/startupStatus/updated": "mcpServer/startupStatus/updated",
   "mcpServer/event/stream/notification": "mcpServer/event/stream/notification",
   "account/updated": "account/updated",
+  "account/gatewayOAuth/changed": "account/gatewayOAuth/changed",
   "account/rateLimits/updated": "account/rateLimits/updated",
   "app/list/updated": "app/list/updated",
   "remoteControl/status/changed": "remoteControl/status/changed",
@@ -392,6 +396,9 @@ export interface ClientRequestParamsByMethod {
   readonly "thread/realtime/listVoices": CodexSchema.V2ThreadRealtimeListVoicesParams;
   readonly "review/start": CodexSchema.V2ReviewStartParams;
   readonly "model/list": CodexSchema.V2ModelListParams;
+  readonly "account/gatewayOAuth/read": undefined;
+  readonly "account/gatewayOAuth/login": undefined;
+  readonly "account/gatewayOAuth/cancel": undefined;
   readonly "modelProvider/capabilities/read": CodexSchema.V2ModelProviderCapabilitiesReadParams;
   readonly "experimentalFeature/list": CodexSchema.V2ExperimentalFeatureListParams;
   readonly "permissionProfile/list": CodexSchema.V2PermissionProfileListParams;
@@ -562,6 +569,9 @@ export interface ClientRequestResponsesByMethod {
   readonly "thread/realtime/listVoices": CodexSchema.V2ThreadRealtimeListVoicesResponse;
   readonly "review/start": CodexSchema.V2ReviewStartResponse;
   readonly "model/list": CodexSchema.V2ModelListResponse;
+  readonly "account/gatewayOAuth/read": CodexSchema.V2GatewayOAuthReadResponse;
+  readonly "account/gatewayOAuth/login": CodexSchema.V2GatewayOAuthLoginResponse;
+  readonly "account/gatewayOAuth/cancel": CodexSchema.V2GatewayOAuthCancelResponse;
   readonly "modelProvider/capabilities/read": CodexSchema.V2ModelProviderCapabilitiesReadResponse;
   readonly "experimentalFeature/list": CodexSchema.V2ExperimentalFeatureListResponse;
   readonly "permissionProfile/list": CodexSchema.V2PermissionProfileListResponse;
@@ -705,6 +715,7 @@ export interface ServerNotificationParamsByMethod {
   readonly "mcpServer/startupStatus/updated": CodexSchema.V2McpServerStatusUpdatedNotification;
   readonly "mcpServer/event/stream/notification": CodexSchema.V2McpServerEventStreamNotification;
   readonly "account/updated": CodexSchema.V2AccountUpdatedNotification;
+  readonly "account/gatewayOAuth/changed": CodexSchema.V2GatewayOAuthChangedNotification;
   readonly "account/rateLimits/updated": CodexSchema.V2AccountRateLimitsUpdatedNotification;
   readonly "app/list/updated": CodexSchema.V2AppListUpdatedNotification;
   readonly "remoteControl/status/changed": CodexSchema.V2RemoteControlStatusChangedNotification;

package/src/agents/codex/generated/namespaces.gen.ts

@@ -1,6 +1,6 @@
 /* eslint-disable style/indent, style/quotes, style/semi, style/quote-props */
 // This file is generated by scripts/generate-codex-protocol.ts. Do not edit manually.
-// Upstream Codex protocol ref: 3d2ee51ca2d5db578f328aa75e20aa22c0197c9a
+// Upstream Codex protocol ref: 687a119f0fcaace47e1f1abcc77cec6c813fd6da
 
 export const v1 = {
   "InitializeParams": "V1InitializeParams",
@@ -93,6 +93,10 @@ export const v2 = {
   "FsWatchResponse": "V2FsWatchResponse",
   "FsWriteFileParams": "V2FsWriteFileParams",
   "FsWriteFileResponse": "V2FsWriteFileResponse",
+  "GatewayOAuthCancelResponse": "V2GatewayOAuthCancelResponse",
+  "GatewayOAuthChangedNotification": "V2GatewayOAuthChangedNotification",
+  "GatewayOAuthLoginResponse": "V2GatewayOAuthLoginResponse",
+  "GatewayOAuthReadResponse": "V2GatewayOAuthReadResponse",
   "GetAccountParams": "V2GetAccountParams",
   "GetAccountRateLimitsResponse": "V2GetAccountRateLimitsResponse",
   "GetAccountResponse": "V2GetAccountResponse",

package/src/agents/codex/generated/schema.gen.ts

@@ -1,6 +1,6 @@
 /* eslint-disable style/indent, style/member-delimiter-style, style/quotes, style/semi, style/operator-linebreak, style/indent-binary-ops */
 // This file is generated by scripts/generate-codex-protocol.ts. Do not edit manually.
-// Upstream Codex protocol ref: 3d2ee51ca2d5db578f328aa75e20aa22c0197c9a
+// Upstream Codex protocol ref: 687a119f0fcaace47e1f1abcc77cec6c813fd6da
 
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
@@ -479,6 +479,21 @@ export type ClientRequest__ThreadGoalStatus =
  * via the `definition` "ClientRequest__ThreadHistoryMode".
  */
 export type ClientRequest__ThreadHistoryMode = "legacy" | "paginated";
+/**
+ * An exclusive item position within the requested visible turn.
+ *
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "ClientRequest__ThreadItemsListAnchor".
+ */
+export type ClientRequest__ThreadItemsListAnchor = ItemThreadItemsListAnchor;
+export type ItemThreadItemsListAnchorType = "item";
+/**
+ * Starting position for an item-history page.
+ *
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "ClientRequest__ThreadItemsListCursor".
+ */
+export type ClientRequest__ThreadItemsListCursor = string | ClientRequest__ThreadItemsListAnchor;
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "ClientRequest__ThreadListCwdFilter".
@@ -673,6 +688,9 @@ export type ClientRequest =
   | ThreadRealtimeListVoicesRequest
   | ReviewStartRequest
   | ModelListRequest
+  | AccountGatewayOAuthReadRequest
+  | AccountGatewayOAuthLoginRequest
+  | AccountGatewayOAuthCancelRequest
   | ModelProviderCapabilitiesReadRequest
   | ExperimentalFeatureListRequest
   | PermissionProfileListRequest
@@ -837,6 +855,9 @@ export type ThreadTimelineListRequestMethod = "thread/timeline/list";
 export type ThreadRealtimeListVoicesRequestMethod = "thread/realtime/listVoices";
 export type ReviewStartRequestMethod = "review/start";
 export type ModelListRequestMethod = "model/list";
+export type AccountGatewayOAuthReadRequestMethod = "account/gatewayOAuth/read";
+export type AccountGatewayOAuthLoginRequestMethod = "account/gatewayOAuth/login";
+export type AccountGatewayOAuthCancelRequestMethod = "account/gatewayOAuth/cancel";
 export type ModelProviderCapabilitiesReadRequestMethod = "modelProvider/capabilities/read";
 export type ExperimentalFeatureListRequestMethod = "experimentalFeature/list";
 export type PermissionProfileListRequestMethod = "permissionProfile/list";
@@ -1289,6 +1310,7 @@ export type ServerNotification__PlanType =
   | "plus"
   | "pro"
   | "prolite"
+  | "promax"
   | "team"
   | "self_serve_business_prolite"
   | "self_serve_business_usage_based"
@@ -1404,9 +1426,11 @@ export type ServerNotification__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -1556,6 +1580,11 @@ export type EncryptedContentFunctionCallOutputContentItemType1 = "encrypted_cont
  * via the `definition` "ServerNotification__FuzzyFileSearchMatchType".
  */
 export type ServerNotification__FuzzyFileSearchMatchType = "file" | "directory";
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "ServerNotification__GatewayOAuthStatus".
+ */
+export type ServerNotification__GatewayOAuthStatus = "notReady" | "started" | "succeeded" | "failed";
 /**
  * [UNSTABLE] Risk level assigned by approval auto-review.
  *
@@ -2029,6 +2058,7 @@ export type ServerNotification =
   | McpServerStartupStatusUpdatedNotification
   | McpServerEventStreamNotificationNotification
   | AccountUpdatedNotification
+  | AccountGatewayOAuthChangedNotification
   | AccountRateLimitsUpdatedNotification
   | AppListUpdatedNotification
   | RemoteControlStatusChangedNotification
@@ -2111,6 +2141,7 @@ export type McpServerOauthLoginCompletedNotificationMethod = "mcpServer/oauthLog
 export type McpServerStartupStatusUpdatedNotificationMethod = "mcpServer/startupStatus/updated";
 export type McpServerEventStreamNotificationNotificationMethod = "mcpServer/event/stream/notification";
 export type AccountUpdatedNotificationMethod = "account/updated";
+export type AccountGatewayOAuthChangedNotificationMethod = "account/gatewayOAuth/changed";
 export type AccountRateLimitsUpdatedNotificationMethod = "account/rateLimits/updated";
 export type AppListUpdatedNotificationMethod = "app/list/updated";
 export type RemoteControlStatusChangedNotificationMethod = "remoteControl/status/changed";
@@ -2407,6 +2438,7 @@ export type V2AccountRateLimitsUpdatedNotification__PlanType =
   | "plus"
   | "pro"
   | "prolite"
+  | "promax"
   | "team"
   | "self_serve_business_prolite"
   | "self_serve_business_usage_based"
@@ -2454,6 +2486,7 @@ export type V2AccountUpdatedNotification__PlanType =
   | "plus"
   | "pro"
   | "prolite"
+  | "promax"
   | "team"
   | "self_serve_business_prolite"
   | "self_serve_business_usage_based"
@@ -2811,9 +2844,11 @@ export type V2ErrorNotification__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -3038,6 +3073,16 @@ export type V2FsWatchResponse__AbsolutePathBuf = string;
  * via the `definition` "V2FsWriteFileParams__AbsolutePathBuf".
  */
 export type V2FsWriteFileParams__AbsolutePathBuf = string;
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2GatewayOAuthChangedNotification__GatewayOAuthStatus".
+ */
+export type V2GatewayOAuthChangedNotification__GatewayOAuthStatus = "notReady" | "started" | "succeeded" | "failed";
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2GatewayOAuthReadResponse__GatewayOAuthStatus".
+ */
+export type V2GatewayOAuthReadResponse__GatewayOAuthStatus = "notReady" | "started" | "succeeded" | "failed";
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "V2GetAccountRateLimitsResponse__PlanType".
@@ -3048,6 +3093,7 @@ export type V2GetAccountRateLimitsResponse__PlanType =
   | "plus"
   | "pro"
   | "prolite"
+  | "promax"
   | "team"
   | "self_serve_business_prolite"
   | "self_serve_business_usage_based"
@@ -3097,6 +3143,7 @@ export type V2GetAccountResponse__PlanType =
   | "plus"
   | "pro"
   | "prolite"
+  | "promax"
   | "team"
   | "self_serve_business_prolite"
   | "self_serve_business_usage_based"
@@ -4951,9 +4998,11 @@ export type V2ReviewStartResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -5340,9 +5389,11 @@ export type V2ThreadForkResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -5683,6 +5734,21 @@ export type V2ThreadGoalUpdatedNotification__ThreadGoalStatus =
  * via the `definition` "V2ThreadItemsListParams__SortDirection".
  */
 export type V2ThreadItemsListParams__SortDirection = "asc" | "desc";
+/**
+ * An exclusive item position within the requested visible turn.
+ *
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2ThreadItemsListParams__ThreadItemsListAnchor".
+ */
+export type V2ThreadItemsListParams__ThreadItemsListAnchor = ItemThreadItemsListAnchor1;
+export type ItemThreadItemsListAnchorType1 = "item";
+/**
+ * Starting position for an item-history page.
+ *
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2ThreadItemsListParams__ThreadItemsListCursor".
+ */
+export type V2ThreadItemsListParams__ThreadItemsListCursor = string | V2ThreadItemsListParams__ThreadItemsListAnchor;
 /**
  * A path that is guaranteed to be absolute and normalized (though it is not guaranteed to be canonicalized or exist on the filesystem).
  *
@@ -5978,9 +6044,11 @@ export type V2ThreadListResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -6305,9 +6373,11 @@ export type V2ThreadMetadataUpdateResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -6696,9 +6766,11 @@ export type V2ThreadQueueStartResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -7025,9 +7097,11 @@ export type V2ThreadReadResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -7706,9 +7780,11 @@ export type V2ThreadResumeResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -8060,9 +8136,11 @@ export type V2ThreadRevertResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -8407,9 +8485,11 @@ export type V2ThreadSearchResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -8881,9 +8961,11 @@ export type V2ThreadStartedNotification__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -9297,9 +9379,11 @@ export type V2ThreadStartResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -9654,9 +9738,11 @@ export type V2ThreadTimelineListResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -9988,9 +10074,11 @@ export type V2ThreadTurnsListResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -10269,9 +10357,11 @@ export type V2ThreadUnarchiveResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -10592,9 +10682,11 @@ export type V2TurnCompletedNotification__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -10899,9 +10991,11 @@ export type V2TurnStartedNotification__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -11311,9 +11405,11 @@ export type V2TurnStartResponse__CodexErrorInfo =
       | "sessionBudgetExceeded"
       | "usageLimitExceeded"
       | "rateLimitExceeded"
+      | "flexUnavailable"
       | "serverOverloaded"
       | "cyberPolicy"
       | "misalignmentPolicyViolation"
+      | "tooManyDenials"
       | "internalServerError"
       | "unauthorized"
       | "badRequest"
@@ -12235,6 +12331,7 @@ export interface NamespaceDynamicToolSpec {
  * via the `definition` "ClientRequest__EnvironmentAddParams".
  */
 export interface ClientRequest__EnvironmentAddParams {
+  authBearerToken?: string | null;
   connectTimeoutMs?: number | null;
   environmentId: string;
   execServerUrl: string;
@@ -12711,6 +12808,10 @@ export interface ClientRequest__InitializeCapabilities {
    * Opt into receiving experimental API methods and fields.
    */
   experimentalApi?: boolean;
+  /**
+   * Use explicit gateway OAuth login instead of automatic browser authorization. Applies to this app-server's gateway runtime; later connections cannot undo it.
+   */
+  explicitGatewayOauth?: boolean;
   extensions?: {
     [k: string]: unknown;
   } | null;
@@ -12759,6 +12860,7 @@ export interface ClientRequest__ListMcpServerStatusParams {
    */
   detail?: ClientRequest__McpServerStatusDetail | null;
   limit?: number | null;
+  serverName?: string | null;
   threadId?: string | null;
   [k: string]: unknown;
 }
@@ -12859,10 +12961,23 @@ export interface ClientRequest__McpResourceReadParams {
   connectorId?: string | null;
   originCallId?: string | null;
   server: string;
+  /**
+   * Explicit hosted app/account. Omit to retain legacy resource discovery.
+   */
+  target?: ClientRequest__McpResourceReadTarget | null;
   threadId?: string | null;
   uri: string;
   [k: string]: unknown;
 }
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "ClientRequest__McpResourceReadTarget".
+ */
+export interface ClientRequest__McpResourceReadTarget {
+  connectorId: string;
+  linkId: string | null;
+  [k: string]: unknown;
+}
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "ClientRequest__McpServerEventStreamStartParams".
@@ -13869,12 +13984,20 @@ export interface ClientRequest__ThreadInjectItemsParams {
   threadId: string;
   [k: string]: unknown;
 }
+export interface ItemThreadItemsListAnchor {
+  itemId: string;
+  type: ItemThreadItemsListAnchorType;
+  [k: string]: unknown;
+}
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "ClientRequest__ThreadItemsListParams".
  */
 export interface ClientRequest__ThreadItemsListParams {
-  cursor?: string | null;
+  /**
+   * Opaque continuation cursor or an exclusive item anchor in the requested visible turn. An item anchor requires a non-empty `turnId`; ascending (the default) returns items after it, and descending returns items before it. Continue with the returned string cursor.
+   */
+  cursor?: ClientRequest__ThreadItemsListCursor | null;
   limit?: number | null;
   /**
    * Optional item pagination direction; defaults to ascending.
@@ -14149,6 +14272,10 @@ export interface ClientRequest__ThreadRealtimeListVoicesParams {
  * via the `definition` "ClientRequest__ThreadRealtimeStartParams".
  */
 export interface ClientRequest__ThreadRealtimeStartParams {
+  /**
+   * Relays public reasoning summaries as quiet context for realtime V3 delegations. Defaults to false.
+   */
+  backendReasoningStatus?: boolean;
   clientManagedHandoffs?: boolean | null;
   codexResponseHandoffChannelPrefixes?: {
     [k: string]: string[];
@@ -15446,6 +15573,24 @@ export interface ModelListRequest {
   params: ClientRequest__ModelListParams;
   [k: string]: unknown;
 }
+export interface AccountGatewayOAuthReadRequest {
+  id: ClientRequest__RequestId;
+  method: AccountGatewayOAuthReadRequestMethod;
+  params?: null;
+  [k: string]: unknown;
+}
+export interface AccountGatewayOAuthLoginRequest {
+  id: ClientRequest__RequestId;
+  method: AccountGatewayOAuthLoginRequestMethod;
+  params?: null;
+  [k: string]: unknown;
+}
+export interface AccountGatewayOAuthCancelRequest {
+  id: ClientRequest__RequestId;
+  method: AccountGatewayOAuthCancelRequestMethod;
+  params?: null;
+  [k: string]: unknown;
+}
 export interface ModelProviderCapabilitiesReadRequest {
   id: ClientRequest__RequestId;
   method: ModelProviderCapabilitiesReadRequestMethod;
@@ -17540,6 +17685,17 @@ export interface ServerNotification__FuzzyFileSearchSessionUpdatedNotification {
   sessionId: string;
   [k: string]: unknown;
 }
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "ServerNotification__GatewayOAuthChangedNotification".
+ */
+export interface ServerNotification__GatewayOAuthChangedNotification {
+  authUrl?: string | null;
+  error?: string | null;
+  providerId: string;
+  status: ServerNotification__GatewayOAuthStatus;
+  [k: string]: unknown;
+}
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "ServerNotification__GitInfo".
@@ -18612,7 +18768,7 @@ export interface ServerNotification__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: ServerNotification__TurnError | null;
   /**
@@ -19353,6 +19509,11 @@ export interface AccountUpdatedNotification {
   params: ServerNotification__AccountUpdatedNotification;
   [k: string]: unknown;
 }
+export interface AccountGatewayOAuthChangedNotification {
+  method: AccountGatewayOAuthChangedNotificationMethod;
+  params: ServerNotification__GatewayOAuthChangedNotification;
+  [k: string]: unknown;
+}
 export interface AccountRateLimitsUpdatedNotification {
   method: AccountRateLimitsUpdatedNotificationMethod;
   params: ServerNotification__AccountRateLimitsUpdatedNotification;
@@ -20226,6 +20387,10 @@ export interface V1InitializeParams__InitializeCapabilities {
    * Opt into receiving experimental API methods and fields.
    */
   experimentalApi?: boolean;
+  /**
+   * Use explicit gateway OAuth login instead of automatic browser authorization. Applies to this app-server's gateway runtime; later connections cannot undo it.
+   */
+  explicitGatewayOauth?: boolean;
   extensions?: {
     [k: string]: unknown;
   } | null;
@@ -21931,6 +22096,7 @@ export interface V2DeprecationNoticeNotification {
  * via the `definition` "V2EnvironmentAddParams".
  */
 export interface V2EnvironmentAddParams {
+  authBearerToken?: string | null;
   connectTimeoutMs?: number | null;
   environmentId: string;
   execServerUrl: string;
@@ -22965,6 +23131,51 @@ export interface V2FsWriteFileParams {
 export interface V2FsWriteFileResponse {
   [k: string]: unknown;
 }
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2GatewayOAuthCancelResponse".
+ */
+export interface V2GatewayOAuthCancelResponse {
+  [k: string]: unknown;
+}
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2GatewayOAuthChangedNotification".
+ */
+export interface V2GatewayOAuthChangedNotification {
+  authUrl?: string | null;
+  error?: string | null;
+  providerId: string;
+  status: V2GatewayOAuthChangedNotification__GatewayOAuthStatus;
+  [k: string]: unknown;
+}
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2GatewayOAuthLoginResponse".
+ */
+export interface V2GatewayOAuthLoginResponse {
+  [k: string]: unknown;
+}
+/**
+ * Current effective gateway policy and credential readiness; never contains credentials.
+ *
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2GatewayOAuthReadResponse".
+ */
+export interface V2GatewayOAuthReadResponse {
+  error?: string | null;
+  providerId: string;
+  providerName: string;
+  /**
+   * Whether the selected provider uses gateway OAuth, even when already signed in.
+   */
+  required: boolean;
+  /**
+   * Null when the effective provider does not use gateway OAuth.
+   */
+  status?: V2GatewayOAuthReadResponse__GatewayOAuthStatus | null;
+  [k: string]: unknown;
+}
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "V2GetAccountParams".
@@ -24655,6 +24866,7 @@ export interface V2ListMcpServerStatusParams {
    */
   detail?: V2ListMcpServerStatusParams__McpServerStatusDetail | null;
   limit?: number | null;
+  serverName?: string | null;
   threadId?: string | null;
   [k: string]: unknown;
 }
@@ -24679,6 +24891,7 @@ export interface V2ListMcpServerStatusResponse__McpServerInfo {
  */
 export interface V2ListMcpServerStatusResponse__McpServerStatus {
   authStatus: V2ListMcpServerStatusResponse__McpAuthStatus;
+  httpOrigin?: string | null;
   name: string;
   pluginId?: string | null;
   resourceTemplates: V2ListMcpServerStatusResponse__ResourceTemplate[];
@@ -24916,6 +25129,15 @@ export interface V2MarketplaceUpgradeResponse {
   upgradedRoots: V2MarketplaceUpgradeResponse__AbsolutePathBuf[];
   [k: string]: unknown;
 }
+/**
+ * This interface was referenced by `CodexSchema`'s JSON-Schema
+ * via the `definition` "V2McpResourceReadParams__McpResourceReadTarget".
+ */
+export interface V2McpResourceReadParams__McpResourceReadTarget {
+  connectorId: string;
+  linkId: string | null;
+  [k: string]: unknown;
+}
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "V2McpResourceReadParams".
@@ -24924,6 +25146,10 @@ export interface V2McpResourceReadParams {
   connectorId?: string | null;
   originCallId?: string | null;
   server: string;
+  /**
+   * Explicit hosted app/account. Omit to retain legacy resource discovery.
+   */
+  target?: V2McpResourceReadParams__McpResourceReadTarget | null;
   threadId?: string | null;
   uri: string;
   [k: string]: unknown;
@@ -28137,7 +28363,7 @@ export interface V2ReviewStartResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ReviewStartResponse__TurnError | null;
   /**
@@ -29281,7 +29507,7 @@ export interface V2ThreadForkResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadForkResponse__TurnError | null;
   /**
@@ -29791,12 +30017,20 @@ export interface V2ThreadInjectItemsParams {
 export interface V2ThreadInjectItemsResponse {
   [k: string]: unknown;
 }
+export interface ItemThreadItemsListAnchor1 {
+  itemId: string;
+  type: ItemThreadItemsListAnchorType1;
+  [k: string]: unknown;
+}
 /**
  * This interface was referenced by `CodexSchema`'s JSON-Schema
  * via the `definition` "V2ThreadItemsListParams".
  */
 export interface V2ThreadItemsListParams {
-  cursor?: string | null;
+  /**
+   * Opaque continuation cursor or an exclusive item anchor in the requested visible turn. An item anchor requires a non-empty `turnId`; ascending (the default) returns items after it, and descending returns items before it. Continue with the returned string cursor.
+   */
+  cursor?: V2ThreadItemsListParams__ThreadItemsListCursor | null;
   limit?: number | null;
   /**
    * Optional item pagination direction; defaults to ascending.
@@ -30283,7 +30517,9 @@ export interface ContextCompactionThreadItem5 {
  * via the `definition` "V2ThreadItemsListResponse__ThreadItemEntry".
  */
 export interface V2ThreadItemsListResponse__ThreadItemEntry {
+  completedAtMs?: number | null;
   item: V2ThreadItemsListResponse__ThreadItem;
+  startedAtMs?: number | null;
   /**
    * Turn containing this item.
    */
@@ -30797,7 +31033,7 @@ export interface V2ThreadListResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadListResponse__TurnError | null;
   /**
@@ -31636,7 +31872,7 @@ export interface V2ThreadMetadataUpdateResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadMetadataUpdateResponse__TurnError | null;
   /**
@@ -32815,7 +33051,7 @@ export interface V2ThreadQueueStartResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadQueueStartResponse__TurnError | null;
   /**
@@ -33491,7 +33727,7 @@ export interface V2ThreadReadResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadReadResponse__TurnError | null;
   /**
@@ -34132,6 +34368,10 @@ export interface ExistingCallThreadRealtimeStartTransport1 {
  * via the `definition` "V2ThreadRealtimeStartParams".
  */
 export interface V2ThreadRealtimeStartParams {
+  /**
+   * Relays public reasoning summaries as quiet context for realtime V3 delegations. Defaults to false.
+   */
+  backendReasoningStatus?: boolean;
   clientManagedHandoffs?: boolean | null;
   codexResponseHandoffChannelPrefixes?: {
     [k: string]: string[];
@@ -35097,7 +35337,7 @@ export interface V2ThreadResumeResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadResumeResponse__TurnError | null;
   /**
@@ -35951,7 +36191,7 @@ export interface V2ThreadRevertResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadRevertResponse__TurnError | null;
   /**
@@ -36820,7 +37060,7 @@ export interface V2ThreadSearchResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadSearchResponse__TurnError | null;
   /**
@@ -38103,7 +38343,7 @@ export interface V2ThreadStartedNotification__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadStartedNotification__TurnError | null;
   /**
@@ -39058,7 +39298,7 @@ export interface V2ThreadStartResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadStartResponse__TurnError | null;
   /**
@@ -40664,7 +40904,7 @@ export interface V2ThreadTurnsListResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadTurnsListResponse__TurnError | null;
   /**
@@ -41186,7 +41426,7 @@ export interface V2ThreadUnarchiveResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2ThreadUnarchiveResponse__TurnError | null;
   /**
@@ -42058,7 +42298,7 @@ export interface V2TurnCompletedNotification__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2TurnCompletedNotification__TurnError | null;
   /**
@@ -42733,7 +42973,7 @@ export interface V2TurnStartedNotification__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2TurnStartedNotification__TurnError | null;
   /**
@@ -43564,7 +43804,7 @@ export interface V2TurnStartResponse__Turn {
   completedAt?: number | null;
   durationMs?: number | null;
   /**
-   * Only populated when the Turn's status is failed.
+   * Error associated with a failed or interrupted turn.
    */
   error?: V2TurnStartResponse__TurnError | null;
   /**

package/src/protocol/agent-catalog.ts

@@ -19,7 +19,7 @@ export const selectableCodexModelIds = codexModelIds
 /** Verified available to the configured Claude subscription through `supportedModels()`. */
 export const selectableClaudeModelIds = [
     'claude-opus-5-5',
-    'claude-sonnet-5',
+    'claude-sonnet-5-5',
     'claude-fable-5-1',
 ] as const
 

package/src/protocol/agent-event.ts

@@ -170,7 +170,9 @@ export const sessionEndedAgentEventSchema = agentSessionEventBaseSchema.extend({
 
 export const turnStartedAgentEventSchema = agentTurnEventBaseSchema.extend({
     type: z.literal('turn.started'),
-    payload: z.object({ commandId: z.string().min(1).optional() }),
+    // `providerInitiated`: the provider started the turn from an input no command submitted (a
+    // scheduled task firing), so the turn carries no command and answers none.
+    payload: z.object({ commandId: z.string().min(1).optional(), providerInitiated: z.literal(true).optional() }),
 })
 
 // Provider-confirmed input consumption; distinct from acceptance receipts.

package/src/protocol/agent-model.ts

@@ -9,6 +9,7 @@ import z from 'zod'
  */
 export const codexModelIds = [
     'gpt-6-astra',
+    'gpt-6.1-sol',
     'gpt-5.6-sol',
     'gpt-5.6-terra',
     'gpt-5.6-luna',
@@ -25,6 +26,7 @@ export const codexModelIds = [
  */
 export const claudeModelIds = [
     'claude-opus-5-5',
+    'claude-sonnet-5-5',
     'claude-sonnet-5',
     'claude-fable-5-1',
     'claude-opus-5',

package/src/protocol/agent-presentation.ts

@@ -8,7 +8,7 @@ import type { KnownCodexModelId } from './agent-model'
  * `Record` types below fail to compile until every identifier is covered.
  *
  * Labels, descriptions, and image support follow the non-hidden `model/list`
- * catalog observed through Codex 0.153.4. Context windows use its model metadata's
+ * catalog observed through Codex 0.159.0. Context windows use its model metadata's
  * default `context_window`, not the opt-in `max_context_window`.
  * Refresh alongside the model registry; the live catalog can change without a CLI
  * upgrade. Relative cost weights are product-owned, not provider-reported prices.
@@ -39,6 +39,13 @@ export const codexModelPresentation: Record<KnownCodexModelId, AgentModelPresent
         maxInputTokens: CODEX_CONTEXT_WINDOW,
         isMultiModal: true,
     },
+    'gpt-6.1-sol': {
+        label: 'GPT 6.1 Sol',
+        description: 'Latest workhorse model for coding and everyday work.',
+        relativeCost: 4,
+        maxInputTokens: CODEX_CONTEXT_WINDOW,
+        isMultiModal: true,
+    },
     'gpt-5.6-sol': {
         label: 'GPT 5.6 Sol',
         description: 'Reliable agentic workhorse for everyday tasks.',
@@ -93,7 +100,7 @@ export const codexModelPresentation: Record<KnownCodexModelId, AgentModelPresent
 /*
  * Claude presentation covers the selectable ids only (`agent-catalog.ts`); historical wire
  * ids render through the unknown-model fallback. Labels, context windows, output limits,
- * and image support follow the model catalog baked into Claude Code 2.1.280, the CLI the
+ * and image support follow the model catalog baked into Claude Code 2.1.284, the CLI the
  * sandbox image pins. Relative cost follows that catalog's pricing tiers on the same
  * product-owned 1–5 scale as Codex.
  */
@@ -108,12 +115,12 @@ export const claudeModelPresentation: Record<SelectableClaudeModelId, AgentModel
         maxOutputTokens: 128_000,
         isMultiModal: true,
     },
-    'claude-sonnet-5': {
-        label: 'Sonnet 5',
+    'claude-sonnet-5-5': {
+        label: 'Sonnet 5.5',
         description: 'Efficient for routine coding tasks.',
         relativeCost: 2,
         maxInputTokens: CLAUDE_CONTEXT_WINDOW,
-        maxOutputTokens: 64_000,
+        maxOutputTokens: 128_000,
         isMultiModal: true,
     },
     'claude-fable-5-1': {

package/src/provenance.gen.ts

@@ -1,6 +1,6 @@
 // Generated by scripts/write-provenance.ts. Do not edit by hand.
 export const generatedProvenance = {
-    version: "0.2.0-experimental.4",
-    sha: "432a69b2d7243b7d5c6651229bf2f005e94afad7",
-    buildTime: "2026-09-29T14:26:10.056Z",
+    version: "0.2.0-experimental.6",
+    sha: "1b8f8c0c8cc698990c1b0ed9e03c417216bc0316",
+    buildTime: "2026-10-02T20:59:57.760Z",
 } as const