Adapter for Codex CLI using codex app-server persistent mode.
Translates between ACP JSON-RPC and Codex's app-server JSON-RPC protocol. The adapter keeps Codex app-server as the subprocess boundary and owns the pure protocol mapping needed to present a stable ACP surface.
Session-provided workspace paths and MCP servers are treated as untrusted.
:workspace_roots defaults to the adapter working directory. Deployments
may provide :authorize_workspace and :authorize_mcp_server callbacks;
:trust_authorized_workspaces must also be set to opt into Codex's trusted
project setting. :trusted_mcp_servers accepts exact server maps; :all is
an explicit unsafe compatibility escape hatch. Names alone never authorize
caller-controlled connection details.