feat: expose codex mcp guardian governance

tests/codex-app-server-protocol-snapshot-script.test.mjs

@@ -92,6 +92,14 @@ if (args[0] === "app-server" && args[1] === "generate-json-schema") {
       { properties: { method: { const: "windowsSandbox/setupCompleted" } } },
       { properties: { method: { const: "fuzzyFileSearch/sessionUpdated" } } },
       { properties: { method: { const: "fuzzyFileSearch/sessionCompleted" } } },
+      { properties: { method: { const: "mcpServer/oauth/login" } } },
+      { properties: { method: { const: "mcpServer/oauthLogin/completed" } } },
+      { properties: { method: { const: "mcpServer/resource/read" } } },
+      { properties: { method: { const: "mcpServer/tool/call" } } },
+      { properties: { method: { const: "mcpServer/elicitation/request" } } },
+      { properties: { method: { const: "item/tool/requestUserInput" } } },
+      { properties: { method: { const: "item/permissions/requestApproval" } } },
+      { properties: { method: { const: "thread/approveGuardianDeniedAction" } } },
       { properties: { method: { const: "skills/extraRoots/set" } } },
       { properties: { method: { const: "hooks/list" } } },
       { properties: { method: { const: "turn/interrupt" } } },
@@ -175,6 +183,13 @@ process.exit(2);
     assert.equal(manifest.supports.windowsSandboxReadiness, true);
     assert.equal(manifest.supports.windowsSandboxSetupStart, true);
     assert.equal(manifest.supports.fuzzyFileSearchEvents, true);
+    assert.equal(manifest.supports.mcpOAuthLogin, true);
+    assert.equal(manifest.supports.mcpResourceRead, true);
+    assert.equal(manifest.supports.mcpToolCall, true);
+    assert.equal(manifest.supports.mcpElicitation, true);
+    assert.equal(manifest.supports.toolRequestUserInput, true);
+    assert.equal(manifest.supports.permissionRequestApproval, true);
+    assert.equal(manifest.supports.guardianDeniedActionApproval, true);
     assert.deepEqual(manifest.methods, [
       "account/chatgptAuthTokens/refresh",
       "account/login/cancel",
@@ -206,9 +221,16 @@ process.exit(2);
       "fuzzyFileSearch/sessionCompleted",
       "fuzzyFileSearch/sessionUpdated",
       "hooks/list",
+      "item/permissions/requestApproval",
+      "item/tool/requestUserInput",
       "marketplace/add",
       "marketplace/remove",
       "marketplace/upgrade",
+      "mcpServer/elicitation/request",
+      "mcpServer/oauth/login",
+      "mcpServer/oauthLogin/completed",
+      "mcpServer/resource/read",
+      "mcpServer/tool/call",
       "plugin/install",
       "plugin/read",
       "plugin/share/checkout",
@@ -221,6 +243,7 @@ process.exit(2);
       "review/start",
       "skills/config/write",
       "skills/extraRoots/set",
+      "thread/approveGuardianDeniedAction",
       "thread/archive",
       "thread/compact/start",
       "thread/fork",