agentHost: update bundled Codex SDK to 0.153.0

[vs-code-engineering]

Updates bundled @openai/codex from 0.149.1 to 0.153.0.

• App-server protocol regenerated and checked for reproducibility.
• Tests and product-build results are tracked in checks and validation comments.
• Authenticated Codex Agent Host launch remains a manual check.

Workflow run

[Copilot]

🔵 Needs a closer look

The native SDK upgrade still requires the documented authenticated launch check and cross-platform validation.

Pull request overview

Updates the bundled Codex SDK from 0.149.1 to 0.153.0 and keeps build pins and generated protocol provenance synchronized.

Changes:

• Updates Codex dependency and lockfile entries.
• Updates build-time Codex packaging/version pins.
• Regenerates 827 app-server protocol bindings.

File summaries

File	Description
package.json, package-lock.json	Pin Codex 0.153.0.
build/agent-sdk/agents/codex/package*.json	Update bundled SDK package inputs.
build/codex/codex-version.txt	Synchronize binary version.
src/vs/platform/agentHost/node/codex/protocol/generated/**/*.ts	Regenerate protocol bindings and provenance.

Review details

• Files reviewed: 4/832 changed files
• Comments generated: 0
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[vs-code-engineering]

Commit pushed: 9805e0f

Generated by codex-vscode-bump-fix · ⊞ 23.3K

[vs-code-engineering]

Added writeStdin guardian serialization and display, preserving terminal input verbatim, and updated Codex test data for the new required nullable fields. Version pins remain 0.153.0; lockfiles, generated protocol, and replay fixtures are unchanged.

Original failure · Repair run

Local check	Actual result
npm run codex:check-protocol	Passed
npm run compile	Failed: native compiler terminated (tsgo exited with code unknown)
node test/unit/node/index.js --runGlob "vs/platform/agentHost/test/node/codex/**/*.test.js"	466 passing, 0 failing
(cd build && npm run test)	301 passing, 0 failing
npm run hygiene	Passed
npm run transpile-client	Passed
npm run typecheck-client and standalone native type-checks	Terminated with exit 137, including the reduced-resource retry
./scripts/test.sh --grep "[Cc]odex"	Not run: Electron unavailable
npm run test-agent-host-e2e -- --jobs 2	Not run: Electron unavailable

Both new guardian regressions failed before the adapter fix and passed afterward. The Xvfb availability command was denied; no tool or firewall policy was changed. This is a source-only repair: ordinary PR CI and product-build checks remain required. Authenticated Codex launch remains manual; the PR stays draft.

Generated by codex-vscode-bump-fix · ⊞ 23.3K · ◷

[Giuseppe Cianci (Giuspepe)]

Superseded by #335525, a draft opened under Giuspepe for normal team-member review. It retains the exact same branch and head commit, 9805e0f253c0cf75e885e3cfbc3d8c904c71fd04; no code or commit signatures changed. This PR remains available as the record of the updater/repair runs and their validation evidence. The source branch was retained.