diff --git a/codex-rs/app-server-protocol/schema/json/ClientRequest.json b/codex-rs/app-server-protocol/schema/json/ClientRequest.json
index ecf49030aa..351671b971 100644
--- a/codex-rs/app-server-protocol/schema/json/ClientRequest.json
+++ b/codex-rs/app-server-protocol/schema/json/ClientRequest.json
@@ -1628,6 +1628,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "status": {
               "$ref": "#/definitions/LocalShellStatus"
             },
@@ -1662,6 +1672,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -1768,6 +1788,16 @@
             "input": {
               "type": "string"
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -1986,6 +2016,22 @@
     },
     "ResponseItemMetadata": {
       "properties": {
+        "is_tool_call_escalated": {
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "review_decision": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ReviewDecisionMetadata"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "user_message_type": {
           "anyOf": [
             {
@@ -2100,6 +2146,18 @@
         }
       ]
     },
+    "ReviewDecisionMetadata": {
+      "enum": [
+        "approved",
+        "denied",
+        "abort",
+        "approved_for_session",
+        "approved_with_amendment",
+        "approved_with_network_policy_allow",
+        "denied_with_network_policy_deny"
+      ],
+      "type": "string"
+    },
     "ReviewDelivery": {
       "enum": [
         "inline",
diff --git a/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json b/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json
index fe74db691c..cfa709f9c6 100644
--- a/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json
+++ b/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json
@@ -10257,6 +10257,16 @@
                 ],
                 "writeOnly": true
               },
+              "metadata": {
+                "anyOf": [
+                  {
+                    "$ref": "#/definitions/v2/ResponseItemMetadata"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
               "status": {
                 "$ref": "#/definitions/v2/LocalShellStatus"
               },
@@ -10291,6 +10301,16 @@
                 ],
                 "writeOnly": true
               },
+              "metadata": {
+                "anyOf": [
+                  {
+                    "$ref": "#/definitions/v2/ResponseItemMetadata"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
               "name": {
                 "type": "string"
               },
@@ -10397,6 +10417,16 @@
               "input": {
                 "type": "string"
               },
+              "metadata": {
+                "anyOf": [
+                  {
+                    "$ref": "#/definitions/v2/ResponseItemMetadata"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
               "name": {
                 "type": "string"
               },
@@ -10615,6 +10645,22 @@
       },
       "ResponseItemMetadata": {
         "properties": {
+          "is_tool_call_escalated": {
+            "type": [
+              "boolean",
+              "null"
+            ]
+          },
+          "review_decision": {
+            "anyOf": [
+              {
+                "$ref": "#/definitions/v2/ReviewDecisionMetadata"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
           "user_message_type": {
             "anyOf": [
               {
@@ -10729,6 +10775,18 @@
           }
         ]
       },
+      "ReviewDecisionMetadata": {
+        "enum": [
+          "approved",
+          "denied",
+          "abort",
+          "approved_for_session",
+          "approved_with_amendment",
+          "approved_with_network_policy_allow",
+          "denied_with_network_policy_deny"
+        ],
+        "type": "string"
+      },
       "ReviewDelivery": {
         "enum": [
           "inline",
diff --git a/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json b/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json
index 14fcd44ee2..5771b59834 100644
--- a/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json
+++ b/codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json
@@ -7002,6 +7002,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "status": {
               "$ref": "#/definitions/LocalShellStatus"
             },
@@ -7036,6 +7046,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -7142,6 +7162,16 @@
             "input": {
               "type": "string"
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -7360,6 +7390,22 @@
     },
     "ResponseItemMetadata": {
       "properties": {
+        "is_tool_call_escalated": {
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "review_decision": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ReviewDecisionMetadata"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "user_message_type": {
           "anyOf": [
             {
@@ -7474,6 +7520,18 @@
         }
       ]
     },
+    "ReviewDecisionMetadata": {
+      "enum": [
+        "approved",
+        "denied",
+        "abort",
+        "approved_for_session",
+        "approved_with_amendment",
+        "approved_with_network_policy_allow",
+        "denied_with_network_policy_deny"
+      ],
+      "type": "string"
+    },
     "ReviewDelivery": {
       "enum": [
         "inline",
diff --git a/codex-rs/app-server-protocol/schema/json/v2/RawResponseItemCompletedNotification.json b/codex-rs/app-server-protocol/schema/json/v2/RawResponseItemCompletedNotification.json
index e469d38621..b128ea792c 100644
--- a/codex-rs/app-server-protocol/schema/json/v2/RawResponseItemCompletedNotification.json
+++ b/codex-rs/app-server-protocol/schema/json/v2/RawResponseItemCompletedNotification.json
@@ -469,6 +469,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "status": {
               "$ref": "#/definitions/LocalShellStatus"
             },
@@ -503,6 +513,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -609,6 +629,16 @@
             "input": {
               "type": "string"
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -827,6 +857,22 @@
     },
     "ResponseItemMetadata": {
       "properties": {
+        "is_tool_call_escalated": {
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "review_decision": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ReviewDecisionMetadata"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "user_message_type": {
           "anyOf": [
             {
@@ -941,6 +987,18 @@
         }
       ]
     },
+    "ReviewDecisionMetadata": {
+      "enum": [
+        "approved",
+        "denied",
+        "abort",
+        "approved_for_session",
+        "approved_with_amendment",
+        "approved_with_network_policy_allow",
+        "denied_with_network_policy_deny"
+      ],
+      "type": "string"
+    },
     "UserMessageType": {
       "enum": [
         "prompt",
diff --git a/codex-rs/app-server-protocol/schema/json/v2/ThreadResumeParams.json b/codex-rs/app-server-protocol/schema/json/v2/ThreadResumeParams.json
index 9130061317..538ae98e8f 100644
--- a/codex-rs/app-server-protocol/schema/json/v2/ThreadResumeParams.json
+++ b/codex-rs/app-server-protocol/schema/json/v2/ThreadResumeParams.json
@@ -535,6 +535,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "status": {
               "$ref": "#/definitions/LocalShellStatus"
             },
@@ -569,6 +579,16 @@
               ],
               "writeOnly": true
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -675,6 +695,16 @@
             "input": {
               "type": "string"
             },
+            "metadata": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ResponseItemMetadata"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
             "name": {
               "type": "string"
             },
@@ -893,6 +923,22 @@
     },
     "ResponseItemMetadata": {
       "properties": {
+        "is_tool_call_escalated": {
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "review_decision": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/ReviewDecisionMetadata"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "user_message_type": {
           "anyOf": [
             {
@@ -1007,6 +1053,18 @@
         }
       ]
     },
+    "ReviewDecisionMetadata": {
+      "enum": [
+        "approved",
+        "denied",
+        "abort",
+        "approved_for_session",
+        "approved_with_amendment",
+        "approved_with_network_policy_allow",
+        "denied_with_network_policy_deny"
+      ],
+      "type": "string"
+    },
     "SandboxMode": {
       "enum": [
         "read-only",
diff --git a/codex-rs/app-server-protocol/schema/typescript/ResponseItem.ts b/codex-rs/app-server-protocol/schema/typescript/ResponseItem.ts
index 5ab15a069b..916d7e98c4 100644
--- a/codex-rs/app-server-protocol/schema/typescript/ResponseItem.ts
+++ b/codex-rs/app-server-protocol/schema/typescript/ResponseItem.ts
@@ -16,4 +16,4 @@ export type ResponseItem = { "type": "message", role: string, content: Array<Con
 /**
  * Set when using the Responses API.
  */
-call_id: string | null, status: LocalShellStatus, action: LocalShellAction, } | { "type": "function_call", name: string, namespace?: string, arguments: string, call_id: string, } | { "type": "tool_search_call", call_id: string | null, status?: string, execution: string, arguments: unknown, } | { "type": "function_call_output", call_id: string, output: FunctionCallOutputPayload, } | { "type": "custom_tool_call", status?: string, call_id: string, name: string, input: string, } | { "type": "custom_tool_call_output", call_id: string, output: FunctionCallOutputPayload, } | { "type": "tool_search_output", call_id: string | null, status: string, execution: string, tools: unknown[], } | { "type": "web_search_call", status?: string, action?: WebSearchAction, } | { "type": "image_generation_call", id: string, status: string, revised_prompt?: string, result: string, } | { "type": "ghost_snapshot", ghost_commit: GhostCommit, } | { "type": "compaction", encrypted_content: string, } | { "type": "other" };
+call_id: string | null, status: LocalShellStatus, action: LocalShellAction, metadata?: ResponseItemMetadata, } | { "type": "function_call", name: string, namespace?: string, arguments: string, call_id: string, metadata?: ResponseItemMetadata, } | { "type": "tool_search_call", call_id: string | null, status?: string, execution: string, arguments: unknown, } | { "type": "function_call_output", call_id: string, output: FunctionCallOutputPayload, } | { "type": "custom_tool_call", status?: string, call_id: string, name: string, input: string, metadata?: ResponseItemMetadata, } | { "type": "custom_tool_call_output", call_id: string, output: FunctionCallOutputPayload, } | { "type": "tool_search_output", call_id: string | null, status: string, execution: string, tools: unknown[], } | { "type": "web_search_call", status?: string, action?: WebSearchAction, } | { "type": "image_generation_call", id: string, status: string, revised_prompt?: string, result: string, } | { "type": "ghost_snapshot", ghost_commit: GhostCommit, } | { "type": "compaction", encrypted_content: string, } | { "type": "other" };
diff --git a/codex-rs/app-server-protocol/schema/typescript/ResponseItemMetadata.ts b/codex-rs/app-server-protocol/schema/typescript/ResponseItemMetadata.ts
index e7ce27e9af..7e90e272f7 100644
--- a/codex-rs/app-server-protocol/schema/typescript/ResponseItemMetadata.ts
+++ b/codex-rs/app-server-protocol/schema/typescript/ResponseItemMetadata.ts
@@ -1,6 +1,7 @@
 // GENERATED CODE! DO NOT MODIFY BY HAND!
 
 // This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+import type { ReviewDecisionMetadata } from "./ReviewDecisionMetadata";
 import type { UserMessageType } from "./UserMessageType";
 
-export type ResponseItemMetadata = { user_message_type?: UserMessageType, };
+export type ResponseItemMetadata = { user_message_type?: UserMessageType, is_tool_call_escalated?: boolean, review_decision?: ReviewDecisionMetadata, };
diff --git a/codex-rs/app-server-protocol/schema/typescript/ReviewDecisionMetadata.ts b/codex-rs/app-server-protocol/schema/typescript/ReviewDecisionMetadata.ts
new file mode 100644
index 0000000000..7a5493e140
--- /dev/null
+++ b/codex-rs/app-server-protocol/schema/typescript/ReviewDecisionMetadata.ts
@@ -0,0 +1,5 @@
+// GENERATED CODE! DO NOT MODIFY BY HAND!
+
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+
+export type ReviewDecisionMetadata = "approved" | "denied" | "abort" | "approved_for_session" | "approved_with_amendment" | "approved_with_network_policy_allow" | "denied_with_network_policy_deny";
diff --git a/codex-rs/app-server-protocol/schema/typescript/index.ts b/codex-rs/app-server-protocol/schema/typescript/index.ts
index 40849df066..39c91346f3 100644
--- a/codex-rs/app-server-protocol/schema/typescript/index.ts
+++ b/codex-rs/app-server-protocol/schema/typescript/index.ts
@@ -60,6 +60,7 @@ export type { ResourceTemplate } from "./ResourceTemplate";
 export type { ResponseItem } from "./ResponseItem";
 export type { ResponseItemMetadata } from "./ResponseItemMetadata";
 export type { ReviewDecision } from "./ReviewDecision";
+export type { ReviewDecisionMetadata } from "./ReviewDecisionMetadata";
 export type { ServerNotification } from "./ServerNotification";
 export type { ServerRequest } from "./ServerRequest";
 export type { ServiceTier } from "./ServiceTier";