Add codex-core public API listing (#20243)

Summary:
- Add a checked-in codex-core public API listing generated by
cargo-public-api.
- Add scripts/regen-public-api.sh with an embedded crate list,
auto-install for cargo-public-api 0.51.0, pinned nightly, and --check
mode.
- Add Rust CI jobs on the codex Linux x64 runner pool to verify the
listing stays up to date.

Testing:
- bash -n scripts/regen-public-api.sh
- just regen-public-api --check
- yq '.' .github/workflows/rust-ci.yml
.github/workflows/rust-ci-full.yml
- git diff --check

codex-rs/core-api/BUILD.bazel

@@ -0,0 +1,6 @@
+load("//:defs.bzl", "codex_rust_crate")
+
+codex_rust_crate(
+    name = "core-api",
+    crate_name = "codex_core_api",
+)

codex-rs/core-api/Cargo.toml

@@ -0,0 +1,26 @@
+[package]
+edition.workspace = true
+license.workspace = true
+name = "codex-core-api"
+version.workspace = true
+
+[lib]
+doctest = false
+name = "codex_core_api"
+path = "src/lib.rs"
+
+[lints]
+workspace = true
+
+[dependencies]
+codex-arg0 = { workspace = true }
+codex-analytics = { workspace = true }
+codex-config = { workspace = true }
+codex-core = { workspace = true }
+codex-exec-server = { workspace = true }
+codex-features = { workspace = true }
+codex-login = { workspace = true }
+codex-model-provider-info = { workspace = true }
+codex-models-manager = { workspace = true }
+codex-protocol = { workspace = true }
+codex-utils-absolute-path = { workspace = true }

codex-rs/core-api/src/lib.rs

@@ -0,0 +1,72 @@
+//! Public facade for thread management APIs built on `codex-core`.
+
+#![deny(private_bounds, private_interfaces, unreachable_pub)]
+
+pub use codex_analytics::AnalyticsEventsClient;
+pub use codex_arg0::Arg0DispatchPaths;
+pub use codex_arg0::arg0_dispatch_or_else;
+pub use codex_config::ConfigLayerStack;
+pub use codex_config::config_toml::ProjectConfig;
+pub use codex_config::config_toml::RealtimeAudioConfig;
+pub use codex_config::config_toml::RealtimeConfig;
+pub use codex_config::types::AuthCredentialsStoreMode;
+pub use codex_config::types::History;
+pub use codex_config::types::MemoriesConfig;
+pub use codex_config::types::ModelAvailabilityNuxConfig;
+pub use codex_config::types::Notice;
+pub use codex_config::types::OAuthCredentialsStoreMode;
+pub use codex_config::types::OtelConfig;
+pub use codex_config::types::ToolSuggestConfig;
+pub use codex_config::types::TuiKeymap;
+pub use codex_config::types::TuiNotificationSettings;
+pub use codex_config::types::UriBasedFileOpener;
+pub use codex_core::CodexThread;
+pub use codex_core::ForkSnapshot;
+pub use codex_core::McpManager;
+pub use codex_core::NewThread;
+pub use codex_core::StartThreadOptions;
+pub use codex_core::ThreadManager;
+pub use codex_core::ThreadShutdownReport;
+pub use codex_core::config::Config;
+pub use codex_core::config::Constrained;
+pub use codex_core::config::GhostSnapshotConfig;
+pub use codex_core::config::MultiAgentV2Config;
+pub use codex_core::config::Permissions;
+pub use codex_core::config::TerminalResizeReflowConfig;
+pub use codex_core::config::ThreadStoreConfig;
+pub use codex_core::config::find_codex_home;
+pub use codex_core::plugins::PluginsManager;
+pub use codex_core::skills::SkillsManager;
+pub use codex_core::thread_store_from_config;
+pub use codex_exec_server::EnvironmentManager;
+pub use codex_exec_server::EnvironmentManagerArgs;
+pub use codex_exec_server::ExecServerRuntimePaths;
+pub use codex_features::Feature;
+pub use codex_login::AuthManager;
+pub use codex_login::default_client::set_default_originator;
+pub use codex_model_provider_info::OPENAI_PROVIDER_ID;
+pub use codex_model_provider_info::built_in_model_providers;
+pub use codex_models_manager::collaboration_mode_presets::CollaborationModesConfig;
+pub use codex_models_manager::manager::RefreshStrategy;
+pub use codex_models_manager::manager::SharedModelsManager;
+pub use codex_protocol::ThreadId;
+pub use codex_protocol::config_types::AltScreenMode;
+pub use codex_protocol::config_types::ApprovalsReviewer;
+pub use codex_protocol::config_types::CollaborationModeMask;
+pub use codex_protocol::config_types::ShellEnvironmentPolicy;
+pub use codex_protocol::config_types::WebSearchMode;
+pub use codex_protocol::dynamic_tools::DynamicToolSpec;
+pub use codex_protocol::error::Result as CodexResult;
+pub use codex_protocol::models::PermissionProfile;
+pub use codex_protocol::openai_models::ModelPreset;
+pub use codex_protocol::protocol::AskForApproval;
+pub use codex_protocol::protocol::EventMsg;
+pub use codex_protocol::protocol::InitialHistory;
+pub use codex_protocol::protocol::McpServerRefreshConfig;
+pub use codex_protocol::protocol::Op;
+pub use codex_protocol::protocol::SessionConfiguredEvent;
+pub use codex_protocol::protocol::SessionSource;
+pub use codex_protocol::protocol::TurnEnvironmentSelection;
+pub use codex_protocol::protocol::W3cTraceContext;
+pub use codex_protocol::user_input::UserInput;
+pub use codex_utils_absolute_path::AbsolutePathBuf;