[RefImpl] Codex adapter: tool calls through PreToolUse #170

Target runtime or language

Codex CLI, as a PreToolUse hook adapter under adapters/codex/

What this proves

That a Codex tool call can go to a Guardian as a signed steps/toolCallRequest, and that the Guardian's allow, deny, and supported parameter overrides come back as Codex's own hook decisions. This is the tool-call part of #89. Tool results, lifecycle events, hosted tools, and ASK/DEFER approval flows are still open under #89.

Do you intend to implement this yourself

No, I am proposing it for someone else

Filed by a maintainer so PR #162 has a narrow issue to close. @Lrd0036 wrote the work. This is a sub-issue of #89, which stays open for the rest of the Codex coverage.

Current Priority Scope

Feeds the runnable Guardian reference implementation