chore(upstream): accept Codex 0.157.1

[Juliusolsson05]

Fixes #234 (accepting 0.157.1 with its known gaps filed; see below). Package side: Juliusolsson05/codex-headless#58 (its own accepted version was 0.149.1).

Plan and evidence: docs/plans/2026-09-26-accept-codex-0157.md (first commit).

Change

support/upstream-versions.json: Codex accepted goes from 0.130.0 to 0.157.1 (checkedAt 2026-09-26). That is the only change; no code changes. The package pointer is not moved here.

Review evidence (details in the plan)

• Release notes, 0.149.1 → 0.157.1: nothing that breaks what Agent Code reads. The composer hint row is unchanged in the 0.157.1 recording, and none of the 1,850 local rollout files is compressed.
• Rollout corpus, counted (a 2026-09-26 snapshot; the corpus grows while agents run):
  • The only new top-level type is token_usage_record (agent-transcript-parser#38).
  • 0.157 records the prompt as a role-user response_item plus item_completed instead of event_msg:user_message. Ownership and the session list read the former.
• Screen: raw 0.157.0 and 0.157.1 recordings pin the composer classifier (codex-headless#54, fix(dispatch): bulk attach and mode-aware reader focus #57).
• Runtime: daily 0.157.1 use in Agent Code since 2026-09-25.
• The 0.130.0 → 0.149 step was already accepted by codex-headless on 2026-08-24; the app entry had not followed it.

Known gaps found in review

Each is filed. All but #1289 are confirmed inherited from the already-accepted 0.149.1, so accepting 0.157.1 does not make them worse:

Update 2026-09-27: #1362, #1363 and #1289 are now CLOSED (#1363 by #1407). Round-2 review b's two surviving prompt-extraction mutations are both killed on origin/main, so no new issue is needed. The plan's wrong fixture parenthetical (round-2 a/b) is corrected in 581d83cc: the pinned d42cc1da already contains tall-draft-ctrlc.json.

• codex-headless#59: listCodexSessions summaries show the injected AGENTS/environment block. Agent Code's picker reads Codex's own index and is unaffected.
• codex-headless#62: the semantic tool lifecycle ignores item_completed (CommandExecution/McpToolCall), the only tool form since 0.149.
• agent-code#1362: read_agent_transcript drops custom_tool_call exec commands.
• agent-code#1363: the no-index conversation fallback reads only event_msg:user_message.
• agent-code#1289 (existing): 0.157 compacted payloads have no type, so no compaction boundary renders.
• codex-headless#60: the recorded rollout-ownership tests run past 5 s under load.
• agent-transcript-parser#38: token_usage_record is uncatalogued.

Unverified, stated as residual

0.157.0 #47178 made the fullscreen transcript the default. The composer classifier is pinned in that mode: the 0.157.1 recording uses the alternate screen. Trust and approval overlays have no 0.157 recording.

Known caveat (B6 decision: merge without waiting)

Two 0.157.1 breaks found by the acceptance review are still present at the app's pinned codex-headless until the pointer moves:

• the trust dialog (codex-headless#65, fixed by codex-headless#67);
• the prompt-input profile (codex-headless#63, fixed by codex-headless#69).

accepted feeds only the upstream-watch workflow, and this PR changes no runtime behaviour. Follow-up: bump the codex-headless pointer, and resync the lockfile, once #67 and #69 merge.

🤖 Generated with Claude Code

[Juliusolsson05]

Blocked — do not merge. The acceptance review did its job: it found three real 0.157.x breaks, all binary-verified and none inherited from 0.149.1:

• codex-headless#63: the prompt-input profile refuses every Codex after 0.149.1 (unsupported-cli at 0.157.1), so fresh-rollout ownership through prompt evidence is dead;
• codex-headless#64: the write-stdin approval overlay (0.151+) is never detected, so approval automation hangs;
• codex-headless#65: 0.156 reworded the trust dialog to "Trust this folder?", so every trust detector misses it on the fallback path.

The accepted version stays at 0.149.1 until those land. This PR is converted to draft and will be rebased onto the fixes. The earlier known-gaps list still stands.

[Juliusolsson05]

Parked (W1, 2026-09-27), not abandoned. This bump waits on the two 0.157.1 blockers the review found:

• codex-headless#65, trust dialog: fixed in codex-headless#67. All three verifications are in, and one reviewer re-verification is running.
• codex-headless#63, prompt-input profile: fixed in codex-headless#69, awaiting its three reviews.

codex-headless#64 (write-stdin approval) is no longer a blocker: the overlay is behind the off-by-default write_stdin_approval flag in 0.157.1 (evidence on #64).

Once #67 and #69 merge, this PR takes their pointers, re-runs the acceptance gate and leaves draft. New 0.157 findings from that work are tracked separately: #66 (background server) and #68 (a ? dropped from single-line prompts).

[Juliusolsson05]

Disposition (W1, final): supersedes the "Blocked" and "Parked" comments above

• Round 1 (a, b, c): the known gaps were filed as bug(transcripts): read_agent_transcript drops Codex custom_tool_call exec commands (94% of 0.157 tool calls) #1362, bug(conversations): Codex no-index fallback loses 0.157 prompts (reads only event_msg:user_message) #1363 and Codex compaction never renders; the compacted branch is dead and unsafe to simply enable #1289, plus codex-headless fix(dispatch): make reader and spotlight target visible row #59, feat(dispatch): move status color into index block #60 and debug-bundle: include proxy-events.jsonl tail in saved bundles #62. All three app issues are now closed (bug(conversations): Codex no-index fallback loses 0.157 prompts (reads only event_msg:user_message) #1363 by fix(conversations): Codex 0.157 prompts survive the no-index fallback #1407).
• Round 2 (a, b): FIX-BEFORE-MERGE, on plan text only.
  • The fixture parenthetical is corrected in 581d83cc: the pinned d42cc1da already contains tall-draft-ctrlc.json.
  • b's two surviving prompt-extraction mutations are both killed on origin/main (verified 2026-09-27).
• Review cap: reached. Manager-verified by B6 (manager-verify-a/b, MERGE-READY). The member gate passes at 581d83cc with CI green.
• Decision (B6, owner proxy): merge now; do not wait for codex-headless fix(dictation): force the built-in Mac microphone #67 and feat(dispatch): attach-all in grid mode + project terminal setting #69.
  • accepted only feeds the upstream-watch workflow. It changes no runtime behaviour.
  • Known caveat, stated so the record is honest: the two 0.157.1 breaks the acceptance review found remain at the app's pinned codex-headless until the pointer moves. They are the trust dialog (codex-headless#65, fixed by codex-headless#67) and the prompt-input profile (codex-headless#63, fixed by codex-headless#69). Users already run 0.157.1, so this PR doesn't make them worse.
  • Follow-up: bump the app's codex-headless pointer (and resync the lockfile) once fix(dictation): force the built-in Mac microphone #67 and feat(dispatch): attach-all in grid mode + project terminal setting #69 merge.