[reonokiy]

Summary

Upgrade from Codex 0.160.0 to the latest stable release rust-v0.161.0.

• Annotated tag object: 7e21416b38834816c224ea0dfd135c3de94b2f15; resolved commit: 979011409de0a60b52f179721948e65531d26144 (GitHub reports the tag unsigned).
• Update all 14 direct Codex pins, vendored manifest pins, Cargo.lock, runtime version reporting and current-version documentation. Lockfile includes 66 Codex Git packages. Upstream transitive changes include rmcp 3.3.0, derive_more 2.1.1 and file-id 0.2.3.
• Refresh the release baseline and verify SHA-256 digests for the official CLI, Code Mode host and bubblewrap; verify codex-cli 0.161.0.
• Synchronize vendored upstream source and tests, including routing-field serialization order and WebSocket handshake Retry-After handling. Reapply the existing six-file gateway transport extension and regenerate its patch (only upstream line offsets changed). Patch SHA-256: fba4ea91d8239fafa726a78eb97c12b65b1ba792a1d7bb34f290ff3c9524666b.
• Preserve historical 0.155.1 route inventories/source anchors and the provenance of copied 0.160.0 lite instructions. This is not a new route-inventory audit.
• Created from origin/main in a separate worktree. PR chore: upgrade Codex to 0.160.1 #6 was reviewed as reference and remains untouched; no force push.

Validation

Command	Result
python3 scripts/fetch-codex-baseline.py	PASS: commit, all three asset checksums and CLI version
uv sync --locked --group live	PASS
cargo fmt --all -- --check	PASS
cargo check --workspace --locked	PASS
cargo clippy --workspace --locked --all-targets -- -D warnings	PASS
cargo test --workspace --locked	PASS: 279 passed, 0 failed, 12 intentionally ignored
cargo test --locked --test source_audit -- --ignored	PASS: 1 passed; 66 Codex Git packages, 981 shared registry packages, 40 unchanged upstream source files and 5 upstream integration-test files verified
cargo test --locked --test gateway actual_ -- --ignored	FAIL: 3 passed, 2 failed
git diff --check	PASS

Blocking / not yet validated

Draft: do not merge until official CLI compatibility failures are investigated and the complete fixture suite passes. Both failures hit the existing 60-second CLI timeout: Elapsed(()):

• actual_codex_cli_can_use_gateway_http_and_websocket (tests/gateway.rs:1384)
• tool_cases::actual_codex_cli_images_and_standalone_web_search_through_gateway (tests/cases/tools.rs:302)

The root cause is not established; do not treat these as confirmed environment-only failures. No assertions were weakened and no test timeouts were increased. The device connection was intermittently unavailable during validation, but the actual suite completed and its failures above are recorded accurately. A proposed serial rerun could not start due to device connection failures.

Real subscription E2E, mutation/ablation audits and container smoke were not run. No subscription credentials were read or injected. Rust 1.95.0 is unchanged; Cargo still reports the pre-existing unused crossterm patch warning.