[1/6] Pin Python SDK runtime dependency

[aibrahim-oai]

Stack

• [1/6] [1/6] Pin Python SDK runtime dependency #21891 Pin Python SDK runtime dependency
• [2/6] [2/6] Generate Python SDK types from pinned runtime #21893 Generate Python SDK types from pinned runtime
• [3/6] [3/6] Run Python SDK tests in CI #21895 Run Python SDK tests in CI
• [4/6] [4/6] Define Python SDK public API surface #21896 Define Python SDK public API surface
• [5/6] [5/6] Rename Python SDK package to openai-codex #21905 Rename Python SDK package to openai-codex
• [6/6] [6/6] Default Python SDK approval policy to never #21910 Default Python SDK approval policy to never

This PR is the first change in the stack, on top of #21812.

Why

The Python SDK should declare the exact runtime package it expects instead of inferring a runtime version from the SDK package version. That makes the runtime relationship visible to packaging tools and reviewers.

What changed

• Declare openai-codex-cli-bin==0.131.0a4 in sdk/python/pyproject.toml.
• Update uv.lock for the published runtime wheels.
• Resolve the runtime pin from the declared dependency in _runtime_setup.py.
• Update targeted docs and tests that describe the runtime pin source of truth.

Verification

• CI is running on this PR stack.
• Local structural checks before submitting: git diff --check and workflow YAML parse.

[aibrahim-oai]

This change is part of the following stack:

• Publish Python runtime wheels on release #21812
  • [1/6] Pin Python SDK runtime dependency #21891 ◀

_{Change managed by git-spice.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 41a3b1da7e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Publish Linux runtime wheels pip can install

Pinning this dependency makes every SDK install resolve openai-codex-cli-bin, but the new lockfile only has Linux wheels tagged musllinux_1_1_*. Standard glibc Linux interpreters advertise manylinux/linux tags, not musllinux, so pip/uv install openai-codex-app-server-sdk will fail on the common Linux target until manylinux/linux-compatible runtime wheels are published or the dependency is conditional.

Useful? React with 👍 / 👎.