chore(deps): update Codex for per-turn Cyber selection

[mldangelo-oai]

Summary

Update the bundled Codex CLI and TypeScript SDK to the public 0.162.0-alpha.1 release so a follow-up change can use per-turn Cyber selection. The upstream support is public in openai/codex#49939.

Changes

• Pin the CLI, MCP worker SDK, and evaluation SDK to the same version.
• Refresh their lockfiles, including platform-specific CLI packages.

Testing

• SDK build, type checks, formatting, and portable plugin source checks passed.
• All 48 MCP tests and the deterministic evaluation tests passed.
• Local mock-API QA verified the published CLI/SDK selection and API-key feature-gate behavior with synthetic credentials.
• Two independent native code reviews and a fresh verification pass found no actionable issues.
• Full SDK suites passed with both fixed seed 12345 and randomized seed 947964476: 3,383 passed, 51 platform skips, zero failures in each run.

Risk and rollout

This intentionally selects a public prerelease because the current stable release lacks the required per-turn API. Merge this dependency update before the stacked feature PR #1185 for #1024.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-02T01:27:25.414480Z	4cdded6	Draft marked ready
🔒 Security Review	✅ Completed 2026-10-02T01:28:02.349224Z	4cdded6	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[alandelong-oai]

Reviewed all six dependency manifest/lockfile changes at 4cdded690ac1 with three independent passes and root verification. The SDK and bundled CLI pins consistently resolve to 0.162.0-alpha.1; no actionable introduced finding remains.

Frozen SDK/MCP dependency installs, frozen eval lockfile validation, SDK type/build checks, plugin build, portable source checks and 481 SDK compatibility tests passed. The installed CLI reports codex-cli 0.162.0-alpha.1, and latest CI passed. Local execution was on macOS arm64; no live model request was made.