## 新功能
- 实时语音会话现在默认使用 v2 WebRTC 路径，支持可配置的传输方式、语音选择、原生 TUI 媒体支持，以及针对新流程的应用服务器覆盖 (#16960, #17057, #17058, #17093, #17097, #17145, #17165, #17176, #17183, #17188)。
- MCP 应用和自定义 MCP 服务器获得了更丰富的支持，包括资源读取、工具调用元数据、自定义服务器工具搜索、服务器驱动的提示、文件参数上传，以及更可靠的插件缓存刷新 (#16082, #16465, #16944, #17043, #15197, #16191, #16947)。
- 远程/应用服务器工作流现在支持出口 WebSocket 传输、远程 `--cd` 转发、运行时远程控制启用、感知沙盒的文件系统 API，以及实验性的 `codex exec-server` 子命令 (#15951, #16700, #16973, #16751, #17059, #17142, #17162)。
- TUI 现在可以使用 `Ctrl+O` 复制最新代理响应，包括在 SSH 和跨平台环境下改进的剪贴板行为 (#16966)。
- `/resume` 现在可以从 TUI 直接通过 ID 或名称跳转到会话 (#17222)。
- TUI 通知更具可配置性，包括支持 Warp OSC 9 以及一个可选模式，即使终端处于聚焦状态也显示通知 (#17174, #17175)。
## 错误修复
- TUI 启动更快：通过异步获取速率限制，且 `/status` 现在会刷新过时的限制，而不是显示冻结或误导性的配额信息 (#16201, #17039)。
- 恢复流程更稳定：选择器不再闪烁错误的空状态，使用更新的线程名称，稳定时间戳标签，在零令牌退出时保留恢复提示，以及在恢复当前线程时避免崩溃 (#16591, #16601, #16822, #16987, #17086)。
- 编辑器和聊天行为更流畅，包括修复粘贴导致的底部面板完成 tear-down、CJK 单词导航、过时的 `/copy` 输出、百分号解码的本地文件链接，以及更清晰的截断执行输出提示 (#16202, #16829, #16648, #16810, #17076)。
- 快速模式在应用服务器支持的 TUI 会话中，执行 `/fast off` 后不再卡住 (#16833)。
- MCP 状态和启动更安静、更快：带连字符的服务器名称正确列出工具，`/mcp` 避免缓慢的完整库存探测，禁用的服务器跳过身份验证探测，且 `codex mcp-server` 遵循居住要求头 (#16674, #16831, #17098, #16952)。
- 沙盒、网络和平台边缘情况得到加强，包括更清晰的只读 `apply_patch` 错误、沙盒更改后刷新的网络代理策略、抑制无关的 bubblewrap 警告、macOS HTTP 客户端沙盒恐慌修复，以及 Windows 防火墙地址处理 (#16885, #17040, #16667, #16670, #17053)。
## 文档
- README 现在使用当前的 ChatGPT Business 计划名称 (#16348)。
- `argument_comment_lint` 的开发者指南已更新，优先推荐启动 CI 而不是因缓慢的本地 lint 运行而阻塞 (#16375)。
- 已删除过时的 `codex-cli` README 内容，以避免过时的设置指导 (#17096)。
- `codex exec --help` 现在显示更清晰的用法和批准模式措辞 (#16881, #16888)。
## 杂项
- 通过为 MCP、工具、配置、模型管理、身份验证、反馈、协议及相关所有权边界提取主要 crate，`codex-core` 得以精简 (#15919, #16379, #16508, #16523, #16962)。
- Rust CI 和工作空间防护措施得到简化，通过阻止新 crate 特性并取消常规的 `--all-features` 运行 (#16455, #16473)。
- 核心编译时间减少，通过从热工具/任务抽象中移除昂贵的 async-trait 扩展 (#16630, #16631)。
- Bazel 诊断和依赖连接得到改进，包括紧凑的执行日志、仓库缓存持久化、远程下载器支持以及多个平台特定的构建修复 (#16577, #16926, #16928, #16634, #16744)。
## 更新日志
完整更新日志：https://github.com/openai/codex/compare/rust-v0.118.0...rust-v0.119.0
- #16308 修复：一次性结束回合 @jif-oai
- #16238 修复：ma2 @jif-oai
- #16317 杂项：清理 wait v2 @jif-oai
- #16318 细节：更新中止行 @jif-oai
- #15771 功能：fork 模式 v2 @jif-oai
- #16322 修复：更新 fork 边界计算 @jif-oai
- #16325 功能：将 v2 spawn_agent 限制为消息 @jif-oai
- #16324 杂项：从 send_message 中移除中断 @jif-oai
- #16345 修复：修复 cargo 捕获但 bazel 未捕获的 clippy 问题 @bolinfest
- #16184 将 TUI `/feedback` 提交路由到应用服务器 @etraut-openai
- #16330 功能：更好地记录数据库维护 @jif-oai
- #15690 [codex-analytics] 线程事件 @rhan-oai
- #16363 修复 PR 保姆审查评论监控 @etraut-openai
- #16356 重构外部身份验证以使用单个 trait @etraut-openai
- #16366 修复 Windows 外部 bearer 刷新测试 @bolinfest
- #16353 CI：验证 codex-rs Cargo 清单继承工作空间设置 @bolinfest
- #16361 重构 chatwidget 测试为专题模块 @etraut-openai
- #16201 修复活动 TUI 会话中过时的 /status 速率限制 @etraut-openai
- #16351 CI：同步 Bazel clippy 规范并修复未覆盖的违规 @bolinfest
- #16378 修复：在 #16351 后抑制状态卡 expect_used 警告 @bolinfest
- #16406 在 v2 spawn_agent 中使用消息字符串 @jif-oai
- #16409 在 v2 send_message 中使用消息字符串 @jif-oai
- #16419 在 v2 assign_task 中使用消息字符串 @jif-oai
- #16424 功能：任务不能分配给根代理 @jif-oai
- #16425 细节：更新 wait v2 描述 @jif-oai
- #16426 杂项：中断作为状态 @jif-oai
- #16427 细节：拒绝 v2 字段 @jif-oai
- #16433 杂项：移除日志数据库 @jif-oai
- #16434 功能：自动清理状态数据库 @jif-oai
- #16422 修复：移除 execute_exec_request 中的 sandbox_policy @dylan-hurd-oai
- #16375 文档：更新 AGENTS.md 中的 argument_comment_lint 说明 @bolinfest
- #16449 修复：移除未使用的导入 @bolinfest
- #15772 使模糊文件搜索不区分大小写 @meyers-oai
- #16455 CI：阻止新的工作空间 crate 特性 @bolinfest
- #16456 cloud-tasks：将模拟客户端从 cloud-tasks-client 中分离 @bolinfest
- #16457 tui：移除调试/仅测试的 crate 特性 @bolinfest
- #16467 tui：移除 voice-input crate 特性 @bolinfest
- #16379 将工具配置提取到 codex-tools 中 @bolinfest
- #16469 otel：移除最后一个工作空间 crate 特性 @bolinfest
- #16471 将工具规范辅助提取到 codex-tools 中 @bolinfest
- #16473 CI：停止使用 --all-features 运行 rust CI @bolinfest
- #16477 将工具发现辅助提取到 codex-tools 中 @bolinfest
- #16480 login：将 provider auth refresh_interval_ms=0 视为无自动刷新 @bolinfest
- #16448 修复：使 GuardianAssessmentEvent.action 强类型 @owenlin0
- #16481 将 update_plan 工具规范提取到 codex-tools 中 @bolinfest
- #15919 将 MCP 提取到 codex-mcp crate 中 @aibrahim-oai
- #16482 移除 client_common 工具重新导出 @bolinfest
- #16495 修复：移除未使用的导入 @bolinfest
- #16493 将内置工具规范构造函数提取到 codex-tools 中 @bolinfest
- #16273 修复回归："在 TUI 中不可用" 错误消息 @etraut-openai
- #16497 将工具搜索输出辅助提取到 codex-tools 中 @bolinfest
- #16498 修复：用 cfg(unix) 保护 guardian_command_source_tool_name @bolinfest
- #16499 将工具建议 wire 辅助提取到 codex-tools 中 @bolinfest
- #16284 修复 TUI 应用服务器权限配置文件转换 @etraut-openai
- #16202 修复粘贴驱动的底部面板完成 tear-down @etraut-openai
- #16504 核心：直接使用 codex-tools 配置类型 @bolinfest
- #16503 将 request_user_input 规范化提取到 codex-tools 中 @bolinfest
- #16510 核心：直接使用 codex-mcp API @bolinfest
- #16509 将 code-mode 嵌套工具集合提取到 codex-tools 中 @bolinfest
- #16512 核心：从 lib.rs 中移除跨 crate 重新导出 @bolinfest
- #16516 修复：添加 #16512 中遗漏的 Cargo.lock 更新 @bolinfest
- #16513 将工具注册表规划提取到 codex-tools 中 @bolinfest
- #16521 将工具注册表计划测试移至 codex-tools 中 @bolinfest
- #16523 [codex] 将配置类型移至 codex-config @bolinfest
- #16524 修复：将一些测试工具移出 codex-rs/core/src/tools/spec.rs @bolinfest
- #16529 [codex] 移除 codex-core 配置类型填充 @bolinfest
- #16559 杂项：memories 迷你模型 @jif-oai
- #16561 修复：竞争待处理 @jif-oai
- #16564 细节：lint @jif-oai
- #16566 修复：回合结束时的竞争 @jif-oai
- #16567 杂项：进一步重构状态机 @jif-oai
- #16569 细节：状态机描述 @jif-oai
- #16571 杂项：将 assign_task 重命名为 followup_task @jif-oai
- #16577 CI：为 bazel.yml 上传紧凑的 Bazel 执行日志 @bolinfest
- #16581 杂项：将 codex-exec 单元测试移至同级文件 @bolinfest
- #16590 修复 rules_rs/crate_git_repository.bzl 中的非确定性 @tyler-french
- #16604 测试：在 Windows 上解除外部 bearer 身份验证令牌测试的 flakiness @bolinfest
- #16606 修复：为测试断言添加更多细节 @bolinfest
- #16608 修复：增加超时以应对缓慢的 PowerShell 启动 @bolinfest
- #16591 修复恢复选择器初始加载状态 @etraut-openai
- #16613 修复：为另一个启动超时增加 PowerShell 支持 @bolinfest
- #16601 修复恢复选择器过时的线程名称 @etraut-openai
- #16616 修复了一些现有标签并添加了一些新标签 @etraut-openai
- #16588 修复 TUI 审查跟进期间过时的回合转向 @etraut-openai
- #16617 修复：为 pwsh/powershell 添加在 GitHub Actions Windows 运行器上有效的 shell 回退路径 @bolinfest
- #16596 修复 /status 中的 fork 源显示（在应用服务器中暴露 forked_from_id） @etraut-openai
- #16578 修复：处理 zellij 重绘和编辑器渲染 @fcoury-oai
- #16630 核心：通过原生异步 ToolHandler 将 codex-core 编译时间减少 63% @bolinfest
- #16631 核心：通过原生异步 SessionTask 将 codex-core 编译时间减少 48% @bolinfest
- #16492 在线程启动时自动信任 cwd @aibrahim-oai
- #16633 修复：解决 Windows 上未使用变量的问题 @bolinfest
- #16635 应用服务器：使 thread/shellCommand 测试感知 shell @bolinfest
- #16629 测试：在 Windows 上为 ProviderAuthScript 使用 cmd.exe @bolinfest
- #16634 构建：修复 Bazel lzma-sys 连接 @starr-openai
- #16658 修复已弃用的 login --api-key 解析 @etraut-openai
- #16508 从核心中提取模型管理器及相关所有权 @aibrahim-oai
- #16662 修复：更改测试以帮助其在 Windows 上的 Bazel 下通过 @bolinfest
- #16665 修复：在 Windows Unicode shell 测试中使用 COMSPEC @bolinfest
- #16668 修复：在 Windows Unicode shell 测试中使用 cmd.exe @bolinfest
- #16626 移除临时的所有权重新导出 @aibrahim-oai
- #16648 修复仅评论回合后过时的 /copy 输出 @etraut-openai
- #16674 修复带连字符服务器名称的 MCP 工具列表 @etraut-openai
- #16667 在绕过沙盒时抑制 bwrap 警告 @etraut-openai
- #16670 修复 Codex HTTP 客户端中的 macOS 沙盒恐慌 @etraut-openai
- #16699 修复 macOS malloc 诊断泄漏到 TUI 编辑器 @etraut-openai
- #16700 为应用服务器会话添加远程 --cd 转发 @etraut-openai
- #16707 修复：保留平台特定的核心 shell 环境变量 @bolinfest
- #16715 修复：解决偷偷引入的 clippy 违规 @bolinfest
- #16722 修复仅 Windows 的 clippy lint 违规 @bolinfest
- #16710 修复：按显示名称首先对技能提及排序 @fcoury-oai
- #16709 清理 fork 子历史 @aibrahim-oai
- #16711 修复 Windows Bazel 应用服务器信任测试 @bolinfest
- #16720 移除 OPENAI_BASE_URL 配置回退 @etraut-openai
- #16528 Codex/windows bazel rust 测试覆盖率无 rs @bolinfest
- #16450 bazel：在 clippy 工作流中 lint rust_test 目标 @bolinfest
- #16735 [codex] 允许禁用提示指令块 @tibo-openai
- #16745 [codex] 允许禁用环境上下文注入 @tibo-openai
- #16725 在推理/评论项目后抢占邮箱邮件 @aibrahim-oai
- #16755 对 npm publish 使用 Node 24 @aibrahim-oai
- #16753 [codex] 添加响应代理 JSON 转储 @tibo-openai
- #16746 为 MultiAgentV2 子项添加 spawn 上下文 @aibrahim-oai
- #16757 回退 "bazel：在 clippy 工作流中 lint rust_test 目标 (#16450)" @bolinfest
- #16737 测试：在 Windows 身份验证 fixture 中避免 PowerShell 启动 @bolinfest
- #16740 CI：对齐 Bazel 仓库缓存和 Windows clippy 目标处理 @bolinfest
- #16758 [codex] 添加上下文窗口谱系头 @tibo-openai
- #16763 添加 CODEX_SKIP_VENDORED_BWRAP @andmis
- #15915 [codex-analytics] 子代理分析 @rhan-oai
- #16823 修复与元数据远程 URL 相关的 flaky 测试 @etraut-openai
- #16825 修复 Windows 上权限升级测试的 flakiness @etraut-openai
- #16881 修复误导性的 codex exec 帮助用法 @etraut-openai
- #16888 澄清 `codex exec` 批准帮助 @etraut-openai
- #16876 [codex] 添加响应代理子代理头测试 @tibo-openai
- #16829 修复 TUI 编辑器中的 CJK 单词导航 @etraut-openai
- #16833 修复 TUI 快速模式切换回归 @etraut-openai
- #16795 [回归] 修复 exec 中的短暂回合回填 @etraut-openai
- #16822 修复恢复选择器时间戳标签和稳定性 @etraut-openai
- #16813 用技能名称注释技能文档读取 @etraut-openai
- #16810 (tui)：解码百分号转义的裸本地文件链接 @etraut-openai
- #16877 [codex-backend] 使线程元数据更新容忍待处理回填 @joeytrasatti-openai
- #16701 功能：支持 allowed_approval_reviewers @owenlin0
- #16925 修复：修复 simdutf @owenlin0
- #16926 bazel：始终保存 bazel 仓库缓存 @euroelessar
- #16928 bazel：启用 `--experimental_remote_downloader` @euroelessar
- #16462 修复：修复 guardian 事件的顺序 @owenlin0
- #16924 修复：如果数据库较新，不要使迁移程序硬失败 @owenlin0
- #16744 构建：为 devbox codex run 恢复 lzma-sys Bazel 连接 @starr-openai
- #16764 应用服务器：集中 AuthManager 初始化 @euroelessar
- #16939 修复 clippy 警告 @mzeng-openai
- #16923 回退 "[codex-backend] 使线程元数据更新容忍待处理回填" @joeytrasatti-openai
- #15951 应用服务器：添加出口 WebSocket 传输 @euroelessar
- #16945 [codex] 在 Seatbelt 中允许 PyTorch libomp shm @viyatb-oai
- #16947 功能：从后端端点回退精选插件下载。 @xl-openai
- #16191 功能：从插件列表刷新非精选缓存。 @xl-openai
- #16952 在 mcp-server 中尊重居住要求 @etraut-openai
- #16827 tui：通过应用服务器路由设备代码身份验证 @etraut-openai
- #16638 [codex-analytics] 添加协议原生回合时间戳 @rhan-oai
- #16831 加速 /mcp 库存列表 @etraut-openai
- #16349 当 exec server 为 none 时禁用环境绑定工具 @starr-openai
- #16957 将 image_detail_original 提升为实验性 @fjord-oai
- #16962 将配置类型重构为单独的 crate @pakrym-oai
- #16153 为 code mode 添加 setTimeout 支持 @pakrym-oai
- #16961 应用服务器：统一配置更改处理 @euroelessar
- #16890 在启动应用服务器前验证 exec 输入 @etraut-openai
- #16082 [mcp] 支持 MCP 应用第一部分。 @mzeng-openai
- #15893 修复：当 bwrap 无法创建用户命名空间时警告 @viyatb-oai
- #16946 [codex] 添加 danger-full-access 仅拒绝列表网络模式 @viyatb-oai
- #16972 应用服务器：修复 mcp_resource 中测试的编译 @euroelessar
- #15826 使 AGENTS.md 发现感知文件系统 @pakrym-oai
- #16964 尊重空线程指令 @aibrahim-oai
- #16988 将开发消息折叠为一个 @won-openai
- #16724 [codex] ez - 重命名 env=>request 在 codex-rs/core/src/unified_exec/process_manager.rs 中 @starr-openai
- #16999 功能：空角色 ok @jif-oai
- #17002 杂项：调试标志以隐藏某些参数 @jif-oai
- #17005 功能：从 v2 中移除代理 ID @jif-oai
- #17008 杂项：send_message 和 followup_task 不返回任何内容 @jif-oai
- #17007 杂项：调试标志下隐藏昵称 @jif-oai
- #16442 功能：/feedback 级联 @jif-oai
- #16978 [codex] 减少模块可见性 @pakrym-oai
- #17009 杂项：保留 request_user_input 工具以在多代理上持久化缓存 @jif-oai
- #16739 稳定 flaky 多代理跟进中断测试 @etraut-openai
- #16885 修复只读 apply_patch 拒绝消息 @etraut-openai
- #16882 修复嵌套 exec 线程 ID 恢复 @etraut-openai
- #16976 保留空开发指令 @aibrahim-oai
- #16987 修复零令牌退出时缺失的恢复提示 @etraut-openai
- #16912 功能：生成 installation_id 并在 Responses API 的 client_metadata 中传递 @owenlin0
- #16956 修复：预算超支时不丢弃转录 @owenlin0
- #16981 [codex] 使 AbsolutePathBuf 连接不可失败 @pakrym-oai
- #16348 更新 README @romainhuet
- #16977 [codex] 使统一 exec 测试感知远程 @pakrym-oai
- #16465 [mcp] 支持 MCP 应用第二部分 - 将元数据添加到 MCP 工具调用结果。 @mzeng-openai
- #17026 应用服务器：将 watch_id 移至 fs/watch 的请求中 @euroelessar
- #16980 添加 full-ci 分支触发器 @pakrym-oai
- #16973 应用服务器：允许在运行时启用远程控制 @euroelessar
- #17032 [codex] 修复统一 exec 测试构建 @pakrym-oai
- #17031 修复：恢复 command line 在统一 exec 输出中 @dylan-hurd-oai
- #17027 [codex] 通过执行文件系统迁移 apply_patch @pakrym-oai
- #17044 [app-server-protocol] 为 app-server-protocol 引入通用 ServerResponse @rhan-oai
- #17047 修复：恢复 null 指令更改 @dylan-hurd-oai
- #16960 为实时启动添加 WebRTC 传输 @aibrahim-oai
- #17053 修复远程地址格式以与 Windows 防火墙规则配合使用。 @iceweasel-oai
- #17048 [codex] 通过执行文件系统应用补丁 @pakrym-oai
- #16949 使用模型元数据进行快速模式状态 @pash-openai
- #17039 修复：减少启动和新会话延迟 @fcoury-oai
- #17052 为 JsonSchema 添加回归测试 @vivi
- #17059 添加远程 exec 启动脚本 @pakrym-oai
- #17064 添加项目本地 codex bug 分类技能 @etraut-openai
- #17040 修复：沙盒模式更改时刷新网络代理设置 @viyatb-oai
- #16698 移除过期的 4 月 2 日工具提示副本 @etraut-openai
- #17096 移除过时的 codex-cli README @etraut-openai
- #16875 在 JsonSchema 中支持 anyOf 和 enum @vivi
- #16880 渲染函数属性描述 @vivi
- #16879 渲染工具的命名空间描述 @vivi
- #16582 功能：TUI 中单个应用服务器引导 @jif-oai
- #17117 codex 调试 1（guardian 批准） @jif-oai
- #17119 codex 调试 3（guardian 批准） @jif-oai
- #17121 codex 调试 5（guardian 批准） @jif-oai
- #17123 codex 调试 7（guardian 批准） @jif-oai
- #17125 codex 调试 9（guardian 批准） @jif-oai
- #17127 codex 调试 11（guardian 批准） @jif-oai
- #17129 codex 调试 13（guardian 批准） @jif-oai
- #17131 codex 调试 15（guardian 批准） @jif-oai
- #17118 codex 调试 2（guardian 批准） @jif-oai
- #17120 codex 调试 4（guardian 批准） @jif-oai
- #17122 codex 调试 6（guardian 批准） @jif-oai
- #17124 codex 调试 8（guardian 批准） @jif-oai
- #17126 codex 调试 10（guardian 批准） @jif-oai
- #17128 codex 调试 12（guardian 批准） @jif-oai
- #17130 codex 调试 14（guardian 批准） @jif-oai
- #17071 配置 multi_agent_v2 spawn agent 提示 @pakrym-oai
- #17091 在 /status 中显示全局 AGENTS.md @etraut-openai
- #17086 修复恢复当前线程时 TUI 崩溃 @etraut-openai
- #17098 跳过禁用服务器的 MCP 身份验证探测 @etraut-openai
- #17097 添加实时传输配置 @aibrahim-oai
- #17043 [mcp] 支持服务器驱动的提示 @mzeng-openai
- #17058 将 WebRTC 媒体传输添加到实时 TUI @aibrahim-oai
- #17063 为 exec cwd 管道使用 AbsolutePathBuf @pakrym-oai
- #17138 修复：修复 /debug-config 渲染和 guardian… @owenlin0
- #17046 发布就绪，仅对 siwc 用户启用 @won-openai
- #16751 为文件系统 API 添加沙盒支持 @starr-openai
- #17142 [codex] 在 TUI 启动中支持远程 exec cwd @pakrym-oai
- #17149 修复缺失字段 @canvrno-oai
- #17154 修复工具注册表测试中的 ToolsConfigParams 初始化程序 @won-openai
- #17145 将实时 WebRTC 原生媒体连接到 Bazel @aibrahim-oai
- #17057 将 WebRTC 实时启动附加到侧带 WebSocket @aibrahim-oai
- #17162 添加顶级 exec-server 子命令 @starr-openai
- #17061 更新 guardian 输出模式 @maja-openai
- #17164 在完全访问模式下自动批准 MCP 服务器提示 @leoshimo-oai
- #17093 添加 WebRTC 实时应用服务器端到端测试 @aibrahim-oai
- #17174 支持 Warp 用于 OSC 9 通知 @etraut-openai
- #16646 修复过时的线程名称恢复查找 @etraut-openai
- #17165 将默认实时提示移至核心 @aibrahim-oai
- #17176 添加实时语音选择 @aibrahim-oai
- #17175 添加 TUI 通知条件配置 @etraut-openai
- #17183 默认实时启动到 v2 模型 @aibrahim-oai
- #17186 跳过源代码构建的更新提示 @etraut-openai
- #17188 使 webrtc 成为默认体验 @aibrahim-oai
- #17163 [codex] 在压缩后采样模型之前延迟转向 @jgershen-oai
- #17222 功能：按 ID/名称恢复 @jif-oai
- #17226 功能：按操作系统和计划的高级公告 @jif-oai
- #17170 将状态行上下文渲染为仪表 @etraut-openai
- #17217 跳过远程统一执行的本地 shell 快照 @jif-oai
- #17116 杂项：合并名称和标题 @jif-oai
- #16276 [codex] 添加内存扩展 @kliu128
- #17168 重构：澄清沙盒阻止消息 @viyatb-oai
- #17076 [codex] 在 TUI 中显示截断的 exec 输出时显示 ctrl + t 提示 @mom-oai
- #15197 添加 Codex 应用沉积文件重新映射 @caseychow-oai
- #16009 将应用服务器回合 clientMetadata 转发到 Responses @neil-oai
- #17256 应用服务器：为应用服务器消息处理器使用共享接收器 @euroelessar
- #16944 [mcp] 将工具搜索扩展到自定义 MCP。 @mzeng-openai
- #16966 功能：Ctrl+O 复制热键并强化复制为 Markdown 行为 @fcoury-oai
- #17262 应用服务器：通过移除额外的 `mut` 修复 clippy @euroelessar
- #17258 省略空的应用服务器指令覆盖 @aibrahim-oai
## New Features
- Realtime voice sessions now default to the v2 WebRTC path, with configurable transport, voice selection, native TUI media support, and app-server coverage for the new flow (#16960, #17057, #17058, #17093, #17097, #17145, #17165, #17176, #17183, #17188).
- MCP Apps and custom MCP servers gained richer support, including resource reads, tool-call metadata, custom-server tool search, server-driven elicitations, file-parameter uploads, and more reliable plugin cache refreshes (#16082, #16465, #16944, #17043, #15197, #16191, #16947).
- Remote/app-server workflows now support egress websocket transport, remote `--cd` forwarding, runtime remote-control enablement, sandbox-aware filesystem APIs, and an experimental `codex exec-server` subcommand (#15951, #16700, #16973, #16751, #17059, #17142, #17162).
- The TUI can copy the latest agent response with `Ctrl+O`, including better clipboard behavior over SSH and across platforms (#16966).
- `/resume` can now jump directly to a session by ID or name from the TUI (#17222).
- TUI notifications are more configurable, including Warp OSC 9 support and an opt-in mode for notifications even while the terminal is focused (#17174, #17175).
## Bug Fixes
- The TUI starts faster by fetching rate limits asynchronously, and `/status` now refreshes stale limits instead of showing frozen or misleading quota information (#16201, #17039).
- Resume flows are more stable: the picker no longer flashes false empty states, uses fresher thread names, stabilizes timestamp labels, preserves resume hints on zero-token exits, and avoids crashing when resuming the current thread (#16591, #16601, #16822, #16987, #17086).
- Composer and chat behavior are smoother, including fixed paste teardown, CJK word navigation, stale `/copy` output, percent-decoded local file links, and clearer truncated exec-output hints (#16202, #16829, #16648, #16810, #17076).
- Fast Mode no longer stays stuck on after `/fast off` in app-server-backed TUI sessions (#16833).
- MCP status and startup are less noisy and faster: hyphenated server names list tools correctly, `/mcp` avoids slow full inventory probes, disabled servers skip auth probing, and residency headers are honored by `codex mcp-server` (#16674, #16831, #17098, #16952).
- Sandbox, network, and platform edge cases were tightened, including clearer read-only `apply_patch` errors, refreshed network proxy policy after sandbox changes, suppressed irrelevant bubblewrap warnings, a macOS HTTP-client sandbox panic fix, and Windows firewall address handling (#16885, #17040, #16667, #16670, #17053).
## Documentation
- The README now uses the current ChatGPT Business plan name (#16348).
- Developer guidance for `argument_comment_lint` was updated to favor getting CI started instead of blocking on slow local lint runs (#16375).
- Obsolete `codex-cli` README content was removed to avoid stale setup guidance (#17096).
- `codex exec --help` now shows clearer usage and approval-mode wording (#16881, #16888).
## Chores
- `codex-core` was slimmed down through major crate extractions for MCP, tools, config, model management, auth, feedback, protocol, and related ownership boundaries (#15919, #16379, #16508, #16523, #16962).
- Rust CI and workspace guardrails were simplified by blocking new crate features and dropping routine `--all-features` runs (#16455, #16473).
- Core compile times were reduced by removing expensive async-trait expansion from hot tool/task abstractions (#16630, #16631).
- Bazel diagnostics and dependency wiring improved with compact execution logs, repository-cache persistence, remote downloader support, and several platform-specific build fixes (#16577, #16926, #16928, #16634, #16744).
## Changelog
Full Changelog: https://github.com/openai/codex/compare/rust-v0.118.0...rust-v0.119.0
- #16308 fix: one shot end of turn @jif-oai
- #16238 fix: ma2 @jif-oai
- #16317 chore: clean wait v2 @jif-oai
- #16318 nit: update aborted line @jif-oai
- #15771 feat: fork pattern v2 @jif-oai
- #16322 fix: update fork boundaries computation @jif-oai
- #16325 feat: restrict spawn_agent v2 to messages @jif-oai
- #16324 chore: drop interrupt from send_message @jif-oai
- #16345 fix: fix clippy issue caught by cargo but not bazel @bolinfest
- #16184 Route TUI `/feedback` submission through the app server @etraut-openai
- #16330 feat: log db better maintenance @jif-oai
- #15690 [codex-analytics] thread events @rhan-oai
- #16363 Fix PR babysitter review comment monitoring @etraut-openai
- #16356 Refactor external auth to use a single trait @etraut-openai
- #16366 Fix Windows external bearer refresh test @bolinfest
- #16353 ci: verify codex-rs Cargo manifests inherit workspace settings @bolinfest
- #16361 Refactor chatwidget tests into topical modules @etraut-openai
- #16201 Fix stale /status rate limits in active TUI sessions @etraut-openai
- #16351 ci: sync Bazel clippy lints and fix uncovered violations @bolinfest
- #16378 fix: suppress status card expect_used warnings after #16351 @bolinfest
- #16406 Use message string in v2 spawn_agent @jif-oai
- #16409 Use message string in v2 send_message @jif-oai
- #16419 Use message string in v2 assign_task @jif-oai
- #16424 feat: tasks can't be assigned to root agent @jif-oai
- #16425 nit: update wait v2 desc @jif-oai
- #16426 chore: interrupted as state @jif-oai
- #16427 nit: deny field v2 @jif-oai
- #16433 chore: drop log DB @jif-oai
- #16434 feat: auto vaccum state DB @jif-oai
- #16422 fix(core) rm execute_exec_request sandbox_policy @dylan-hurd-oai
- #16375 docs: update argument_comment_lint instructions in AGENTS.md @bolinfest
- #16449 fix: remove unused import @bolinfest
- #15772 Make fuzzy file search case insensitive @meyers-oai
- #16455 ci: block new workspace crate features @bolinfest
- #16456 cloud-tasks: split the mock client out of cloud-tasks-client @bolinfest
- #16457 tui: remove debug/test-only crate features @bolinfest
- #16467 tui: remove the voice-input crate feature @bolinfest
- #16379 Extract tool config into codex-tools @bolinfest
- #16469 otel: remove the last workspace crate feature @bolinfest
- #16471 Extract tool spec helpers into codex-tools @bolinfest
- #16473 ci: stop running rust CI with --all-features @bolinfest
- #16477 Extract tool discovery helpers into codex-tools @bolinfest
- #16480 login: treat provider auth refresh_interval_ms=0 as no auto-refresh @bolinfest
- #16448 fix(guardian): make GuardianAssessmentEvent.action strongly typed @owenlin0
- #16481 Extract update_plan tool spec into codex-tools @bolinfest
- #15919 Extract MCP into codex-mcp crate @aibrahim-oai
- #16482 Remove client_common tool re-exports @bolinfest
- #16495 fix: remove unused import @bolinfest
- #16493 Extract built-in tool spec constructors into codex-tools @bolinfest
- #16273 Fix regression: "not available in TUI" error message @etraut-openai
- #16497 Extract tool-search output helpers into codex-tools @bolinfest
- #16498 fix: guard guardian_command_source_tool_name with cfg(unix) @bolinfest
- #16499 Extract tool-suggest wire helpers into codex-tools @bolinfest
- #16284 Fix TUI app-server permission profile conversions @etraut-openai
- #16202 Fix paste-driven bottom pane completion teardown @etraut-openai
- #16504 core: use codex-tools config types directly @bolinfest
- #16503 Extract request_user_input normalization into codex-tools @bolinfest
- #16510 core: use codex-mcp APIs directly @bolinfest
- #16509 Extract code-mode nested tool collection into codex-tools @bolinfest
- #16512 core: remove cross-crate re-exports from lib.rs @bolinfest
- #16516 fix: add update to Cargo.lock that was missed in #16512 @bolinfest
- #16513 Extract tool registry planning into codex-tools @bolinfest
- #16521 Move tool registry plan tests into codex-tools @bolinfest
- #16523 [codex] Move config types into codex-config @bolinfest
- #16524 fix: move some test utilities out of codex-rs/core/src/tools/spec.rs @bolinfest
- #16529 [codex] Remove codex-core config type shim @bolinfest
- #16559 chore: memories mini model @jif-oai
- #16561 fix: race pending @jif-oai
- #16564 nit: lint @jif-oai
- #16566 fix: races in end of turn @jif-oai
- #16567 chore: rework state machine further @jif-oai
- #16569 nit: state machine desc @jif-oai
- #16571 chore: rename assign_task for followup_task @jif-oai
- #16577 ci: upload compact Bazel execution logs for bazel.yml @bolinfest
- #16581 chore: move codex-exec unit tests into sibling files @bolinfest
- #16590 Fix non-determinism in rules_rs/crate_git_repository.bzl @tyler-french
- #16604 test: deflake external bearer auth token tests on Windows @bolinfest
- #16606 fix: add more detail to test assertion @bolinfest
- #16608 fix: increase timeout to account for slow PowerShell startup @bolinfest
- #16591 Fix resume picker initial loading state @etraut-openai
- #16613 fix: increase another startup timeout for PowerShell @bolinfest
- #16601 Fix resume picker stale thread names @etraut-openai
- #16616 Fixed some existing labels and added a few new ones @etraut-openai
- #16588 Fix stale turn steering during TUI review follow-ups @etraut-openai
- #16617 fix: add shell fallback paths for pwsh/powershell that work on GitHub Actions Windows runners @bolinfest
- #16596 Fix fork source display in /status (expose forked_from_id in app server) @etraut-openai
- #16578 fix(tui): handle zellij redraw and composer rendering @fcoury-oai
- #16630 core: cut codex-core compile time 63% with native async ToolHandler @bolinfest
- #16631 core: cut codex-core compile time 48% with native async SessionTask @bolinfest
- #16492 Auto-trust cwd on thread start @aibrahim-oai
- #16633 fix: address unused variable on windows @bolinfest
- #16635 app-server: make thread/shellCommand tests shell-aware @bolinfest
- #16629 test: use cmd.exe for ProviderAuthScript on Windows @bolinfest
- #16634 build: fix Bazel lzma-sys wiring @starr-openai
- #16658 Fix deprecated login --api-key parsing @etraut-openai
- #16508 extract models manager and related ownership from core @aibrahim-oai
- #16662 fix: changes to test that should help them pass on Windows under Bazel @bolinfest
- #16665 fix: use COMSPEC in Windows unicode shell test @bolinfest
- #16668 fix: use cmd.exe in Windows unicode shell test @bolinfest
- #16626 remove temporary ownership re-exports @aibrahim-oai
- #16648 Fix stale /copy output after commentary-only turns @etraut-openai
- #16674 Fix MCP tool listing for hyphenated server names @etraut-openai
- #16667 Suppress bwrap warning when sandboxing is bypassed @etraut-openai
- #16670 Fix macOS sandbox panic in Codex HTTP client @etraut-openai
- #16699 Fix macOS malloc diagnostics leaking into TUI composer @etraut-openai
- #16700 Add remote --cd forwarding for app-server sessions @etraut-openai
- #16707 fix: preserve platform-specific core shell env vars @bolinfest
- #16715 fix: address clippy violations that sneaked in @bolinfest
- #16722 fix windows-only clippy lint violation @bolinfest
- #16710 fix(tui): sort skill mentions by display name first @fcoury-oai
- #16709 Sanitize forked child history @aibrahim-oai
- #16711 Fix Windows Bazel app-server trust tests @bolinfest
- #16720 Remove OPENAI_BASE_URL config fallback @etraut-openai
- #16528 Codex/windows bazel rust test coverage no rs @bolinfest
- #16450 bazel: lint rust_test targets in clippy workflow @bolinfest
- #16735 [codex] allow disabling prompt instruction blocks @tibo-openai
- #16745 [codex] allow disabling environment context injection @tibo-openai
- #16725 Preempt mailbox mail after reasoning/commentary items @aibrahim-oai
- #16755 Use Node 24 for npm publish @aibrahim-oai
- #16753 [codex] add responses proxy JSON dumps @tibo-openai
- #16746 Add spawn context for MultiAgentV2 children @aibrahim-oai
- #16757 Back out "bazel: lint rust_test targets in clippy workflow (#16450)" @bolinfest
- #16737 test: avoid PowerShell startup in Windows auth fixture @bolinfest
- #16740 ci: align Bazel repo cache and Windows clippy target handling @bolinfest
- #16758 [codex] add context-window lineage headers @tibo-openai
- #16763 Add CODEX_SKIP_VENDORED_BWRAP @andmis
- #15915 [codex-analytics] subagent analytics @rhan-oai
- #16823 Fix flaky test relating to metadata remote URL @etraut-openai
- #16825 Fix flaky permissions escalation test on Windows @etraut-openai
- #16881 Fix misleading codex exec help usage @etraut-openai
- #16888 Clarify `codex exec` approval help @etraut-openai
- #16876 [codex] add response proxy subagent header test @tibo-openai
- #16829 Fix CJK word navigation in the TUI composer @etraut-openai
- #16833 Fix TUI fast mode toggle regression @etraut-openai
- #16795 [regression] Fix ephemeral turn backfill in exec @etraut-openai
- #16822 Fix resume picker timestamp labels and stability @etraut-openai
- #16813 Annotate skill doc reads with skill names @etraut-openai
- #16810 (tui): Decode percent-escaped bare local file links @etraut-openai
- #16877 [codex-backend] Make thread metadata updates tolerate pending backfill @joeytrasatti-openai
- #16701 feat(requirements): support allowed_approval_reviewers @owenlin0
- #16925 fix(bazel): fix simdutf @owenlin0
- #16926 bazel: Always save bazel repository cache @euroelessar
- #16928 bazel: Enable `--experimental_remote_downloader` @euroelessar
- #16462 fix(guardian): fix ordering of guardian events @owenlin0
- #16924 fix(sqlite): don't hard fail migrator if DB is newer @owenlin0
- #16744 build: restore lzma-sys Bazel wiring for devbox codex run @starr-openai
- #16764 app-server: centralize AuthManager initialization @euroelessar
- #16939 Fix clippy warning @mzeng-openai
- #16923 Revert "[codex-backend] Make thread metadata updates tolerate pending backfill" @joeytrasatti-openai
- #15951 app-server: Add egress websocket transport @euroelessar
- #16945 [codex] Allow PyTorch libomp shm in Seatbelt @viyatb-oai
- #16947 feat: fallback curated plugin download from backend endpint. @xl-openai
- #16191 feat: refresh non-curated cache from plugin list. @xl-openai
- #16952 Respect residency requirements in mcp-server @etraut-openai
- #16827 tui: route device-code auth through app server @etraut-openai
- #16638 [codex-analytics] add protocol-native turn timestamps @rhan-oai
- #16831 Speed up /mcp inventory listing @etraut-openai
- #16349 Disable env-bound tools when exec server is none @starr-openai
- #16957 Promote image_detail_original to experimental @fjord-oai
- #16962 Refactor config types into a separate crate @pakrym-oai
- #16153 Add setTimeout support to code mode @pakrym-oai
- #16961 app-server: Unify config changes handling a bit @euroelessar
- #16890 Validate exec input before starting app-server @etraut-openai
- #16082 [mcp] Support MCP Apps part 1. @mzeng-openai
- #15893 fix: warn when bwrap cannot create user namespaces @viyatb-oai
- #16946 [codex] Add danger-full-access denylist-only network mode @viyatb-oai
- #16972 app-server: Fix compilation of a test in mcp_resource @euroelessar
- #15826 Make AGENTS.md discovery FS-aware @pakrym-oai
- #16964 Honor null thread instructions @aibrahim-oai
- #16988 collapse dev message into one @won-openai
- #16724 [codex] ez - rename env=>request in codex-rs/core/src/unified_exec/process_manager.rs @starr-openai
- #16999 feat: empty role ok @jif-oai
- #17002 chore: debug flag to hide some parameters @jif-oai
- #17005 feat: drop agent ID from v2 @jif-oai
- #17008 chore: send_message and followup_task do not return anything @jif-oai
- #17007 chore: hide nickname for debug flag @jif-oai
- #16442 feat: /feedback cascade @jif-oai
- #16978 [codex] reduce module visibility @pakrym-oai
- #17009 chore: keep request_user_input tool to persist cache on multi-agents @jif-oai
- #16739 Stabilize flaky multi-agent followup interrupt test @etraut-openai
- #16885 Fix read-only apply_patch rejection message @etraut-openai
- #16882 Fix nested exec thread ID restore @etraut-openai
- #16976 Preserve null developer instructions @aibrahim-oai
- #16987 Fix missing resume hint on zero-token exits @etraut-openai
- #16912 feat(analytics): generate an installation_id and pass it in responsesapi client_metadata @owenlin0
- #16956 fix(guardian): don't throw away transcript when over budget @owenlin0
- #16981 [codex] Make AbsolutePathBuf joins infallible @pakrym-oai
- #16348 Update README @romainhuet
- #16977 [codex] Make unified exec tests remote aware @pakrym-oai
- #16465 [mcp] Support MCP Apps part 2 - Add meta to mcp tool call result. @mzeng-openai
- #17026 app-server: Move watch_id to request of fs/watch @euroelessar
- #16980 Add full-ci branch trigger @pakrym-oai
- #16973 app-server: Allow enabling remote control in runtime @euroelessar
- #17032 [codex] Fix unified exec test build @pakrym-oai
- #17031 fix(core) revert Command line in unified exec output @dylan-hurd-oai
- #17027 [codex] Migrate apply_patch to executor filesystem @pakrym-oai
- #17044 [app-server-protocol] introduce generic ServerResponse for app-server-protocol @rhan-oai
- #17047 fix(app-server) revert null instructions changes @dylan-hurd-oai
- #16960 Add WebRTC transport to realtime start @aibrahim-oai
- #17053 Fix remote address format to work with Windows Firewall rules. @iceweasel-oai
- #17048 [codex] Apply patches through executor filesystem @pakrym-oai
- #16949 Use model metadata for Fast Mode status @pash-openai
- #17039 fix(tui): reduce startup and new-session latency @fcoury-oai
- #17052 Add regression tests for JsonSchema @vivi
- #17059 Add remote exec start script @pakrym-oai
- #17064 Add project-local codex bug triage skill @etraut-openai
- #17040 fix: refresh network proxy settings when sandbox mode changes @viyatb-oai
- #16698 Remove expired April 2nd tooltip copy @etraut-openai
- #17096 Remove obsolete codex-cli README @etraut-openai
- #16875 Support anyOf and enum in JsonSchema @vivi
- #16880 Render function attribute descriptions @vivi
- #16879 Render namespace description for tools @vivi
- #16582 feat: single app-server bootstrap in TUI @jif-oai
- #17117 codex debug 1 (guardian approved) @jif-oai
- #17119 codex debug 3 (guardian approved) @jif-oai
- #17121 codex debug 5 (guardian approved) @jif-oai
- #17123 codex debug 7 (guardian approved) @jif-oai
- #17125 codex debug 9 (guardian approved) @jif-oai
- #17127 codex debug 11 (guardian approved) @jif-oai
- #17129 codex debug 13 (guardian approved) @jif-oai
- #17131 codex debug 15 (guardian approved) @jif-oai
- #17118 codex debug 2 (guardian approved) @jif-oai
- #17120 codex debug 4 (guardian approved) @jif-oai
- #17122 codex debug 6 (guardian approved) @jif-oai
- #17124 codex debug 8 (guardian approved) @jif-oai
- #17126 codex debug 10 (guardian approved) @jif-oai
- #17128 codex debug 12 (guardian approved) @jif-oai
- #17130 codex debug 14 (guardian approved) @jif-oai
- #17071 Configure multi_agent_v2 spawn agent hints @pakrym-oai
- #17091 Show global AGENTS.md in /status @etraut-openai
- #17086 Fix TUI crash when resuming the current thread @etraut-openai
- #17098 Skip MCP auth probing for disabled servers @etraut-openai
- #17097 Add realtime transport config @aibrahim-oai
- #17043 [mcp] Support server-driven elicitations @mzeng-openai
- #17058 Add WebRTC media transport to realtime TUI @aibrahim-oai
- #17063 Use AbsolutePathBuf for exec cwd plumbing @pakrym-oai
- #17138 fix(debug-config, guardian): fix /debug-config rendering and guardian… @owenlin0
- #17046 release ready, enabling only for siwc users @won-openai
- #16751 Add sandbox support to filesystem APIs @starr-openai
- #17142 [codex] Support remote exec cwd in TUI startup @pakrym-oai
- #17149 Fix missing fields @canvrno-oai
- #17154 Fix ToolsConfigParams initializer in tool registry test @won-openai
- #17145 Wire realtime WebRTC native media into Bazel @aibrahim-oai
- #17057 Attach WebRTC realtime starts to sideband websocket @aibrahim-oai
- #17162 Add top-level exec-server subcommand @starr-openai
- #17061 Update guardian output schema @maja-openai
- #17164 Auto-approve MCP server elicitations in Full Access mode @leoshimo-oai
- #17093 Add WebRTC realtime app-server e2e tests @aibrahim-oai
- #17174 Support Warp for OSC 9 notifications @etraut-openai
- #16646 Fix stale thread-name resume lookups @etraut-openai
- #17165 Move default realtime prompt into core @aibrahim-oai
- #17176 Add realtime voice selection @aibrahim-oai
- #17175 Add TUI notification condition config @etraut-openai
- #17183 Default realtime startup to v2 model @aibrahim-oai
- #17186 Skip update prompts for source builds @etraut-openai
- #17188 make webrtc the default experience @aibrahim-oai
- #17163 [codex] Defer steering until after sampling the model post-compaction @jgershen-oai
- #17222 feat: /resume per ID/name @jif-oai
- #17226 feat: advanced announcements per OS and plans @jif-oai
- #17170 Render statusline context as a meter @etraut-openai
- #17217 Skip local shell snapshots for remote unified exec @jif-oai
- #17116 chore: merge name and title @jif-oai
- #16276 [codex] add memory extensions @kliu128
- #17168 refactor(proxy): clarify sandbox block messages @viyatb-oai
- #17076 [codex] Show ctrl + t hint on truncated exec output in TUI @mom-oai
- #15197 Add Codex Apps sediment file remapping @caseychow-oai
- #16009 Forward app-server turn clientMetadata to Responses @neil-oai
- #17256 app-server: Use shared receivers for app-server message processors @euroelessar
- #16944 [mcp] Expand tool search to custom MCPs. @mzeng-openai
- #16966 feat(tui): Ctrl+O copy hotkey and harden copy-as-markdown behavior @fcoury-oai
- #17262 app-server: Fix clippy by removing extra `mut` @euroelessar
- #17258 Omit empty app-server instruction overrides @aibrahim-oai