ai-sdk-provider-codex-cli 1.2.1 → 1.3.0

package/README.md

@@ -54,7 +54,7 @@ npm i ai ai-sdk-provider-codex-cli
 npm i ai@^5.0.0 ai-sdk-provider-codex-cli@ai-sdk-v5
 ```
 
-> **⚠️ Codex CLI Version**: Requires the current stable Codex CLI **0.130.x** for full support of both provider modes (`codexExec` and `codexAppServer`). This package pins its optional `@openai/codex` dependency to `^0.130.0`, the latest non-alpha release validated for this maintenance update. If you supply your own Codex CLI (global install or custom `codexPath`), check it with `codex --version` and upgrade if needed.
+> **⚠️ Codex CLI Version**: Requires the current stable Codex CLI **0.144.x** for full support of both provider modes (`codexExec` and `codexAppServer`). This package pins its optional `@openai/codex` dependency to `^0.144.0`, the latest non-alpha release line validated for this maintenance update. If you supply your own Codex CLI (global install or custom `codexPath`), check it with `codex --version` and upgrade if needed.
 >
 > ```bash
 > npm i -g @openai/codex@latest
@@ -90,7 +90,7 @@ import { createCodexAppServer } from 'ai-sdk-provider-codex-cli';
 
 const provider = createCodexAppServer({
   defaultSettings: {
-    minCodexVersion: '0.130.0',
+    minCodexVersion: '0.144.0',
     autoApprove: false,
     personality: 'pragmatic',
   },
@@ -363,7 +363,7 @@ See [docs/ai-sdk-v5/configuration.md](docs/ai-sdk-v5/configuration.md) for the f
 - `minCodexVersion`: minimum supported app-server version (semver)
 - `includeRawChunks`: emit raw JSON-RPC notifications as `raw` stream parts by default
 - `serverRequests`: typed handlers for server-initiated JSON-RPC requests
-- `autoApprove`: default approval response when no custom handler is provided
+- `autoApprove`: default approval response when no custom handler is provided (covers command execution, file changes, skills, and MCP tool call approvals via `mcpServer/elicitation/request` on Codex >= 0.139)
 - `persistExtendedHistory`: request extended thread history persistence
 - `threadMode`: `stateless` (default) or `persistent` automatic thread reuse
 - `resume`: shorthand to resume an existing thread id

package/dist/index.cjs

@@ -203,6 +203,9 @@ var serverRequestsSchema = zod.z.object({
   onSkillApproval: zod.z.any().refine((val) => val === void 0 || typeof val === "function", {
     message: "onSkillApproval must be a function"
   }).optional(),
+  onMcpElicitation: zod.z.any().refine((val) => val === void 0 || typeof val === "function", {
+    message: "onMcpElicitation must be a function"
+  }).optional(),
   onToolRequestUserInput: zod.z.any().refine((val) => val === void 0 || typeof val === "function", {
     message: "onToolRequestUserInput must be a function"
   }).optional(),
@@ -4385,6 +4388,17 @@ var skillRequestApprovalParamsSchema = zod.z.object({
   itemId: zod.z.string(),
   skillName: zod.z.string()
 }).passthrough();
+var mcpServerElicitationRequestParamsSchema = zod.z.object({
+  threadId: zod.z.string(),
+  turnId: zod.z.string().nullable().optional(),
+  serverName: zod.z.string(),
+  mode: zod.z.string().optional(),
+  message: zod.z.string().optional(),
+  requestedSchema: zod.z.unknown().optional(),
+  url: zod.z.string().optional(),
+  elicitationId: zod.z.string().optional(),
+  _meta: zod.z.record(zod.z.string(), zod.z.unknown()).nullable().optional()
+}).passthrough();
 var dynamicToolCallParamsSchema = zod.z.object({
   threadId: zod.z.string(),
   turnId: zod.z.string(),
@@ -4400,6 +4414,7 @@ var serverRequestParamSchemas = {
   "item/commandExecution/requestApproval": commandExecutionRequestApprovalParamsSchema,
   "item/fileChange/requestApproval": fileChangeRequestApprovalParamsSchema,
   "item/tool/requestUserInput": toolRequestUserInputParamsSchema,
+  "mcpServer/elicitation/request": mcpServerElicitationRequestParamsSchema,
   "skill/requestApproval": skillRequestApprovalParamsSchema,
   "item/tool/call": dynamicToolCallParamsSchema,
   "account/chatgptAuthTokens/refresh": chatgptAuthTokensRefreshParamsSchema
@@ -4423,6 +4438,11 @@ var serverRequestSchema = zod.z.discriminatedUnion("method", [
     method: zod.z.literal("item/tool/requestUserInput"),
     params: toolRequestUserInputParamsSchema
   }).passthrough(),
+  zod.z.object({
+    id: jsonRpcIdSchema,
+    method: zod.z.literal("mcpServer/elicitation/request"),
+    params: mcpServerElicitationRequestParamsSchema
+  }).passthrough(),
   zod.z.object({
     id: jsonRpcIdSchema,
     method: zod.z.literal("skill/requestApproval"),
@@ -4647,7 +4667,7 @@ var AppServerRpcClient = class extends events.EventEmitter {
     if (this.serverCapabilities?.modelList === false) {
       throw new UnsupportedFeatureError({
         feature: "model/list",
-        minCodexVersion: this.settings.minCodexVersion ?? "0.130.0",
+        minCodexVersion: this.settings.minCodexVersion ?? "0.144.0",
         serverVersion: this.serverVersion
       });
     }
@@ -4660,7 +4680,7 @@ var AppServerRpcClient = class extends events.EventEmitter {
       if (error instanceof JsonRpcRequestError && error.code === -32601) {
         throw new UnsupportedFeatureError({
           feature: "model/list",
-          minCodexVersion: this.settings.minCodexVersion ?? "0.130.0",
+          minCodexVersion: this.settings.minCodexVersion ?? "0.144.0",
           serverVersion: this.serverVersion
         });
       }
@@ -4817,7 +4837,7 @@ var AppServerRpcClient = class extends events.EventEmitter {
       const message = String(error?.message ?? error);
       if (message.includes("ENOENT") || message.includes("unknown subcommand")) {
         throw new Error(
-          "codex app-server requires codex CLI >= 0.130.0. Run 'codex --version' to check."
+          "codex app-server requires codex CLI >= 0.144.0. Run 'codex --version' to check."
         );
       }
       throw createAPICallError({
@@ -4839,7 +4859,7 @@ var AppServerRpcClient = class extends events.EventEmitter {
       return;
     }
     this.serverVersion = detected;
-    const minVersion = this.settings.minCodexVersion ?? "0.130.0";
+    const minVersion = this.settings.minCodexVersion ?? "0.144.0";
     const compared = compareSemver(detected, minVersion);
     if (compared === void 0) {
       this.logger.warn(
@@ -5108,6 +5128,30 @@ var AppServerRpcClient = class extends events.EventEmitter {
         await sendResult({ decision: autoApprove ? "approve" : "decline" });
         return;
       }
+      case "mcpServer/elicitation/request": {
+        const handled = await runHandler(
+          () => handlers.onMcpElicitation?.(normalized)
+        );
+        if (handled !== void 0) {
+          await sendResult(handled);
+          return;
+        }
+        const fallback = await runHandler(
+          () => handlers.onUnhandled?.(normalized)
+        );
+        if (fallback !== void 0) {
+          await sendResult(fallback);
+          return;
+        }
+        const meta = normalized.params._meta;
+        const isToolCallApproval = meta?.codex_approval_kind === "mcp_tool_call";
+        if (isToolCallApproval && autoApprove) {
+          await sendResult({ action: "accept", content: {} });
+        } else {
+          await sendResult({ action: "decline", content: null });
+        }
+        return;
+      }
       case "item/tool/requestUserInput": {
         const handled = await runHandler(
           () => handlers.onToolRequestUserInput?.(

package/dist/index.d.cts

@@ -407,6 +407,29 @@ interface ToolRequestUserInputParams {
 interface ToolRequestUserInputResponse {
     answers: Record<string, unknown>;
 }
+type McpServerElicitationAction = 'accept' | 'decline' | 'cancel';
+interface McpServerElicitationRequestParams {
+    threadId: string;
+    /** Nullable: the elicitation may arrive outside of an active turn. */
+    turnId?: string | null;
+    serverName: string;
+    /** 'form' requests carry message/requestedSchema; 'url' requests carry url/elicitationId. */
+    mode?: string;
+    message?: string;
+    requestedSchema?: unknown;
+    url?: string;
+    elicitationId?: string;
+    /**
+     * For MCP tool approval elicitations, Codex sets
+     * `codex_approval_kind: 'mcp_tool_call'` and may include `persist` hints.
+     */
+    _meta?: Record<string, unknown> | null;
+}
+interface McpServerElicitationRequestResponse {
+    action: McpServerElicitationAction;
+    /** Structured user input for accepted elicitations; null for decline/cancel. */
+    content?: Record<string, unknown> | null;
+}
 interface DynamicToolCallParams {
     threadId: string;
     turnId: string;
@@ -547,6 +570,11 @@ interface AppServerSkillApprovalRequest {
     method: 'skill/requestApproval';
     params: SkillRequestApprovalParams;
 }
+interface AppServerMcpElicitationRequest {
+    id: JsonRpcId;
+    method: 'mcpServer/elicitation/request';
+    params: McpServerElicitationRequestParams;
+}
 interface AppServerToolRequestUserInputRequest {
     id: JsonRpcId;
     method: 'item/tool/requestUserInput';
@@ -580,6 +608,13 @@ interface CodexAppServerRequestHandlers {
     onCommandExecutionApproval?: (request: AppServerCommandExecutionApprovalRequest) => Promise<CommandExecutionRequestApprovalResponse | undefined>;
     onFileChangeApproval?: (request: AppServerFileChangeApprovalRequest) => Promise<FileChangeRequestApprovalResponse | undefined>;
     onSkillApproval?: (request: AppServerSkillApprovalRequest) => Promise<SkillRequestApprovalResponse | undefined>;
+    /**
+     * Handles `mcpServer/elicitation/request` (Codex >= 0.139), which includes
+     * MCP tool call approvals (`params._meta.codex_approval_kind === 'mcp_tool_call'`).
+     * Built-in default: accept tool call approvals when `autoApprove` is true,
+     * decline all other elicitations.
+     */
+    onMcpElicitation?: (request: AppServerMcpElicitationRequest) => Promise<McpServerElicitationRequestResponse | undefined>;
     onToolRequestUserInput?: (request: AppServerToolRequestUserInputRequest) => Promise<ToolRequestUserInputResponse | undefined>;
     onDynamicToolCall?: (request: AppServerDynamicToolCallRequest) => Promise<DynamicToolCallResponse | undefined>;
     onAuthRefresh?: (request: AppServerAuthRefreshRequest) => Promise<ChatgptAuthTokensRefreshResponse | undefined>;
@@ -687,7 +722,7 @@ interface CodexAppServerProvider extends ProviderV3 {
  * @example
  * ```ts
  * const provider = createCodexAppServer({
- *   defaultSettings: { minCodexVersion: '0.130.0' },
+ *   defaultSettings: { minCodexVersion: '0.144.0' },
  * });
  *
  * try {

package/dist/index.d.ts

@@ -407,6 +407,29 @@ interface ToolRequestUserInputParams {
 interface ToolRequestUserInputResponse {
     answers: Record<string, unknown>;
 }
+type McpServerElicitationAction = 'accept' | 'decline' | 'cancel';
+interface McpServerElicitationRequestParams {
+    threadId: string;
+    /** Nullable: the elicitation may arrive outside of an active turn. */
+    turnId?: string | null;
+    serverName: string;
+    /** 'form' requests carry message/requestedSchema; 'url' requests carry url/elicitationId. */
+    mode?: string;
+    message?: string;
+    requestedSchema?: unknown;
+    url?: string;
+    elicitationId?: string;
+    /**
+     * For MCP tool approval elicitations, Codex sets
+     * `codex_approval_kind: 'mcp_tool_call'` and may include `persist` hints.
+     */
+    _meta?: Record<string, unknown> | null;
+}
+interface McpServerElicitationRequestResponse {
+    action: McpServerElicitationAction;
+    /** Structured user input for accepted elicitations; null for decline/cancel. */
+    content?: Record<string, unknown> | null;
+}
 interface DynamicToolCallParams {
     threadId: string;
     turnId: string;
@@ -547,6 +570,11 @@ interface AppServerSkillApprovalRequest {
     method: 'skill/requestApproval';
     params: SkillRequestApprovalParams;
 }
+interface AppServerMcpElicitationRequest {
+    id: JsonRpcId;
+    method: 'mcpServer/elicitation/request';
+    params: McpServerElicitationRequestParams;
+}
 interface AppServerToolRequestUserInputRequest {
     id: JsonRpcId;
     method: 'item/tool/requestUserInput';
@@ -580,6 +608,13 @@ interface CodexAppServerRequestHandlers {
     onCommandExecutionApproval?: (request: AppServerCommandExecutionApprovalRequest) => Promise<CommandExecutionRequestApprovalResponse | undefined>;
     onFileChangeApproval?: (request: AppServerFileChangeApprovalRequest) => Promise<FileChangeRequestApprovalResponse | undefined>;
     onSkillApproval?: (request: AppServerSkillApprovalRequest) => Promise<SkillRequestApprovalResponse | undefined>;
+    /**
+     * Handles `mcpServer/elicitation/request` (Codex >= 0.139), which includes
+     * MCP tool call approvals (`params._meta.codex_approval_kind === 'mcp_tool_call'`).
+     * Built-in default: accept tool call approvals when `autoApprove` is true,
+     * decline all other elicitations.
+     */
+    onMcpElicitation?: (request: AppServerMcpElicitationRequest) => Promise<McpServerElicitationRequestResponse | undefined>;
     onToolRequestUserInput?: (request: AppServerToolRequestUserInputRequest) => Promise<ToolRequestUserInputResponse | undefined>;
     onDynamicToolCall?: (request: AppServerDynamicToolCallRequest) => Promise<DynamicToolCallResponse | undefined>;
     onAuthRefresh?: (request: AppServerAuthRefreshRequest) => Promise<ChatgptAuthTokensRefreshResponse | undefined>;
@@ -687,7 +722,7 @@ interface CodexAppServerProvider extends ProviderV3 {
  * @example
  * ```ts
  * const provider = createCodexAppServer({
- *   defaultSettings: { minCodexVersion: '0.130.0' },
+ *   defaultSettings: { minCodexVersion: '0.144.0' },
  * });
  *
  * try {

package/dist/index.js

@@ -195,6 +195,9 @@ var serverRequestsSchema = z.object({
   onSkillApproval: z.any().refine((val) => val === void 0 || typeof val === "function", {
     message: "onSkillApproval must be a function"
   }).optional(),
+  onMcpElicitation: z.any().refine((val) => val === void 0 || typeof val === "function", {
+    message: "onMcpElicitation must be a function"
+  }).optional(),
   onToolRequestUserInput: z.any().refine((val) => val === void 0 || typeof val === "function", {
     message: "onToolRequestUserInput must be a function"
   }).optional(),
@@ -4377,6 +4380,17 @@ var skillRequestApprovalParamsSchema = z.object({
   itemId: z.string(),
   skillName: z.string()
 }).passthrough();
+var mcpServerElicitationRequestParamsSchema = z.object({
+  threadId: z.string(),
+  turnId: z.string().nullable().optional(),
+  serverName: z.string(),
+  mode: z.string().optional(),
+  message: z.string().optional(),
+  requestedSchema: z.unknown().optional(),
+  url: z.string().optional(),
+  elicitationId: z.string().optional(),
+  _meta: z.record(z.string(), z.unknown()).nullable().optional()
+}).passthrough();
 var dynamicToolCallParamsSchema = z.object({
   threadId: z.string(),
   turnId: z.string(),
@@ -4392,6 +4406,7 @@ var serverRequestParamSchemas = {
   "item/commandExecution/requestApproval": commandExecutionRequestApprovalParamsSchema,
   "item/fileChange/requestApproval": fileChangeRequestApprovalParamsSchema,
   "item/tool/requestUserInput": toolRequestUserInputParamsSchema,
+  "mcpServer/elicitation/request": mcpServerElicitationRequestParamsSchema,
   "skill/requestApproval": skillRequestApprovalParamsSchema,
   "item/tool/call": dynamicToolCallParamsSchema,
   "account/chatgptAuthTokens/refresh": chatgptAuthTokensRefreshParamsSchema
@@ -4415,6 +4430,11 @@ var serverRequestSchema = z.discriminatedUnion("method", [
     method: z.literal("item/tool/requestUserInput"),
     params: toolRequestUserInputParamsSchema
   }).passthrough(),
+  z.object({
+    id: jsonRpcIdSchema,
+    method: z.literal("mcpServer/elicitation/request"),
+    params: mcpServerElicitationRequestParamsSchema
+  }).passthrough(),
   z.object({
     id: jsonRpcIdSchema,
     method: z.literal("skill/requestApproval"),
@@ -4639,7 +4659,7 @@ var AppServerRpcClient = class extends EventEmitter {
     if (this.serverCapabilities?.modelList === false) {
       throw new UnsupportedFeatureError({
         feature: "model/list",
-        minCodexVersion: this.settings.minCodexVersion ?? "0.130.0",
+        minCodexVersion: this.settings.minCodexVersion ?? "0.144.0",
         serverVersion: this.serverVersion
       });
     }
@@ -4652,7 +4672,7 @@ var AppServerRpcClient = class extends EventEmitter {
       if (error instanceof JsonRpcRequestError && error.code === -32601) {
         throw new UnsupportedFeatureError({
           feature: "model/list",
-          minCodexVersion: this.settings.minCodexVersion ?? "0.130.0",
+          minCodexVersion: this.settings.minCodexVersion ?? "0.144.0",
           serverVersion: this.serverVersion
         });
       }
@@ -4809,7 +4829,7 @@ var AppServerRpcClient = class extends EventEmitter {
       const message = String(error?.message ?? error);
       if (message.includes("ENOENT") || message.includes("unknown subcommand")) {
         throw new Error(
-          "codex app-server requires codex CLI >= 0.130.0. Run 'codex --version' to check."
+          "codex app-server requires codex CLI >= 0.144.0. Run 'codex --version' to check."
         );
       }
       throw createAPICallError({
@@ -4831,7 +4851,7 @@ var AppServerRpcClient = class extends EventEmitter {
       return;
     }
     this.serverVersion = detected;
-    const minVersion = this.settings.minCodexVersion ?? "0.130.0";
+    const minVersion = this.settings.minCodexVersion ?? "0.144.0";
     const compared = compareSemver(detected, minVersion);
     if (compared === void 0) {
       this.logger.warn(
@@ -5100,6 +5120,30 @@ var AppServerRpcClient = class extends EventEmitter {
         await sendResult({ decision: autoApprove ? "approve" : "decline" });
         return;
       }
+      case "mcpServer/elicitation/request": {
+        const handled = await runHandler(
+          () => handlers.onMcpElicitation?.(normalized)
+        );
+        if (handled !== void 0) {
+          await sendResult(handled);
+          return;
+        }
+        const fallback = await runHandler(
+          () => handlers.onUnhandled?.(normalized)
+        );
+        if (fallback !== void 0) {
+          await sendResult(fallback);
+          return;
+        }
+        const meta = normalized.params._meta;
+        const isToolCallApproval = meta?.codex_approval_kind === "mcp_tool_call";
+        if (isToolCallApproval && autoApprove) {
+          await sendResult({ action: "accept", content: {} });
+        } else {
+          await sendResult({ action: "decline", content: null });
+        }
+        return;
+      }
       case "item/tool/requestUserInput": {
         const handled = await runHandler(
           () => handlers.onToolRequestUserInput?.(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-sdk-provider-codex-cli",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "AI SDK v6 provider for OpenAI Codex CLI (use ChatGPT Plus/Pro subscription)",
   "keywords": [
     "ai-sdk",
@@ -67,7 +67,7 @@
     "jsonc-parser": "^3.3.1"
   },
   "optionalDependencies": {
-    "@openai/codex": "^0.130.0"
+    "@openai/codex": "^0.144.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.14.0",