## 新功能
- 插件详情现在显示绑定的钩子，插件共享会暴露链接元数据及可发现性控制。(#21447, #21495, #21637)
- 新增 `codex remote-control`，作为启动无头、可远程控制的应用服务器的更简单入口点。(#21424)
- 应用服务器客户端可以对大型线程进行分页，支持未加载、摘要或完整轮次项的视图。(#21566)
- Bedrock 认证现在可以使用来自 `aws login` 配置文件的 AWS 控制台登录凭证。(#21623)
- `view_image` 可以通过所选环境解析文件，适用于多环境会话。(#21143)
## 错误修复
- 实时应用服务器线程现在能即时响应配置更改，无需重启。(#21187)
- 轮次差异在 apply-patch 操作中保持准确，包括部分失败但仍修改了文件的情况。(#21180, #21518)
- 通过 `ThreadStore`，线程摘要、重命名、恢复和派生路径运行得更好，包括没有本地部署路径的线程。(#21264, #21265, #21266)
- 远程压缩现在会为 v2 流发出 `response.processed`，并避免在 API 密钥压缩请求中发送 `service_tier`。(#21642, #21676)
- Windows 沙箱设置现在授予沙箱用户访问桌面运行时二进制缓存的权限。(#21564)
- 从 `codex exec` 启动横幅中移除了过时的"研究预览"措辞。(#21683)
## 文档
- 修复了问题模板，使得 CLI 报告保留预期的指导信息、标签正确应用，并且功能请求链接到正确的贡献文档。(#21685, #21686, #21688)
- 更新了安装和工具文档，统一使用 `cargo install --locked`。(#21592)
## 杂项
- 添加了更快的 Cargo 性能分析构建配置，并禁用了空的文档测试目标，以加速 Rust 开发循环。(#21574, #21584)
- 通过使用完全限定的 GitHub Action 标签、添加 Dependabot 冷却期以及升级 `cargo-shear`，加强了依赖项和 CI 的规范性。(#21436, #21547, #21599)
- 通过移除未使用的设备密钥 API、额外的技能根目录、远程线程存储实现以及基于字符串键的 MCP 工具映射，简化了内部接口。(#21487, #21485, #21596, #21454)
- 添加了可配置的 OpenTelemetry 跟踪元数据和更丰富的审查/反馈分析，以便更好地进行调试和分类。(#21556, #18747, #21434, #21498)
## 变更日志
完整变更日志：https://github.com/openai/codex/compare/rust-v0.129.0...rust-v0.130.0
- #21494 [codex] 修复 PluginListParams 测试初始化器 @xli-oai
- #21447 在插件详情中显示插件钩子 @abhinav-oai
- #21356 特性：将内置 MCP 作为一等运行时服务器 @jif-oai
- #21180 使轮次差异跟踪支持操作 @jif-oai
- #21498 [codex] 将账户 ID 添加到反馈上传中 @pakrym-oai
- #21487 device-key：清理未使用的 crate @euroelessar
- #21518 修复：在部分 apply_patch 失败后保留精确的轮次差异 @jif-oai
- #18747 [codex-analytics] 添加工具审查事件模式 @rhan-oai
- #21495 特性：在 shareContext 中暴露插件共享元数据 @xl-openai
- #21454 [codex] 移除基于字符串键的 MCP 工具映射 @pakrym-oai
- #21424 添加顶层 remote-control 命令 @owenlin0
- #21187 app-server：从最新配置快照刷新实时线程 @jif-oai
- #21461 [codex] 将工具规范移至处理器上 @pakrym-oai
- #21547 升级 `cargo-shear` 至 1.11.2 @charliemarsh-oai
- #21264 将线程名称编辑移至 ThreadStore @wiltzius-openai
- #21266 [codex] 修复无路径线程摘要 @wiltzius-openai
- #21265 通过线程存储路由 ThreadManager 部署路径读取 @wiltzius-openai
- #21564 授予沙箱用户访问桌面运行时二进制文件的权限 @iceweasel-oai
- #21582 为 Cargo 配置选项使用描述性名称 @zanie-oai
- #21574 添加用于基准测试的 Cargo 构建配置 @zanie-oai
- #21436 [codex] 在 GitHub Actions 中完全限定哈希标签 @ww-oai
- #21592 确保所有 cargo-install 的提及都包含 --locked @gankra-oai
- #21584 禁用空的 Cargo 测试目标 @charliemarsh-oai
- #21566 特性（app-server, threadstore）：线程分页 API 和 ThreadStore 契约 @owenlin0
- #21556 codex-otel：添加可配置的跟踪元数据 @bbrown-oai
- #21599 [codex] 应用 Dependabot 7 天冷却期 @ww-oai
- #21602 在 cargo build 和 lint 调用中使用 `--locked` @zanie-oai
- #20664 添加 stdio exec-server 客户端传输 @starr-openai
- #21596 [codex] 移除远程线程存储实现 @wiltzius-openai
- #20665 使环境提供者拥有默认选择权 @starr-openai
- #21143 通过所选环境路由 view_image @starr-openai
- #20666 添加 CODEX_HOME 环境 TOML 提供者 @starr-openai
- #21642 在远程压缩 v2 后发送 response.processed @pakrym-oai
- #21646 回退"在 cargo build 和 lint 调用中使用 `--locked`" @pakrym-oai
- #21434 [codex-analytics] 连接协议原生的审查计时 @rhan-oai
- #21485 移除技能列表额外的根目录 @xli-oai
- #21623 特性：为 Bedrock 认证启用 AWS 登录凭证 @celia-oai
- #21637 特性：更新插件共享设置以支持可发现性 @xl-openai
- #21685 修复重复的 CLI 问题模板描述 @etraut-openai
- #21686 修复问题模板标签 @etraut-openai
- #21688 修复功能请求的贡献链接 @etraut-openai
- #21683 移除 exec 研究预览横幅措辞 @etraut-openai
- #21676 在 API 认证下的远程 /responses/compact 请求中省略 service_tier @aibrahim-oai
## New Features
- Plugin details now show bundled hooks, and plugin sharing exposes link metadata plus discoverability controls. (#21447, #21495, #21637)
- Added `codex remote-control` as a simpler entrypoint for starting a headless, remotely controllable app-server. (#21424)
- App-server clients can page large threads with unloaded, summary, or full turn item views. (#21566)
- Bedrock auth can now use AWS console-login credentials from `aws login` profiles. (#21623)
- `view_image` can resolve files through the selected environment for multi-environment sessions. (#21143)
## Bug Fixes
- Live app-server threads now pick up config changes without requiring a restart. (#21187)
- Turn diffs stay accurate across apply-patch operations, including partial failures that still mutated files. (#21180, #21518)
- Thread summaries, renames, resume, and fork paths work better through `ThreadStore`, including threads without local rollout paths. (#21264, #21265, #21266)
- Remote compaction now emits `response.processed` for v2 streams and avoids sending `service_tier` on API-key compact requests. (#21642, #21676)
- Windows sandbox setup now grants sandbox users access to the desktop runtime binary cache. (#21564)
- Removed stale “research preview” wording from the `codex exec` startup banner. (#21683)
## Documentation
- Fixed issue templates so CLI reports keep the intended guidance, labels apply correctly, and feature requests link to the right contributing docs. (#21685, #21686, #21688)
- Updated install and tooling docs to consistently use `cargo install --locked`. (#21592)
## Chores
- Added a faster Cargo profiling build profile and disabled empty doctest targets to speed up Rust development loops. (#21574, #21584)
- Hardened dependency and CI hygiene with fully qualified GitHub Action pins, a Dependabot cooldown, and a `cargo-shear` upgrade. (#21436, #21547, #21599)
- Simplified internal surfaces by removing unused device-key APIs, extra skills roots, the remote thread-store implementation, and string-keyed MCP tool maps. (#21487, #21485, #21596, #21454)
- Added configurable OpenTelemetry trace metadata and richer review/feedback analytics for better debugging and triage. (#21556, #18747, #21434, #21498)
## Changelog
Full Changelog: https://github.com/openai/codex/compare/rust-v0.129.0...rust-v0.130.0
- #21494 [codex] fix PluginListParams test initializer @xli-oai
- #21447 Show plugin hooks in plugin details @abhinav-oai
- #21356 feat: make built-in MCPs first-class runtime servers @jif-oai
- #21180 Make turn diff tracking operation backed @jif-oai
- #21498 [codex] add account id to feedback uploads @pakrym-oai
- #21487 device-key: clean up unused crate @euroelessar
- #21518 fix: preserve exact turn diffs after partial apply_patch failures @jif-oai
- #18747 [codex-analytics] add tool review event schema @rhan-oai
- #21495 feat: Expose plugin share metadata in shareContext @xl-openai
- #21454 [codex] Remove string-keyed MCP tool maps @pakrym-oai
- #21424 add top-level remote-control command @owenlin0
- #21187 app-server: refresh live threads from latest config snapshot @jif-oai
- #21461 [codex] Move tool specs onto handlers @pakrym-oai
- #21547 Upgrade `cargo-shear` to 1.11.2 @charliemarsh-oai
- #21264 Move thread name edits to ThreadStore @wiltzius-openai
- #21266 [codex] Fix pathless thread summaries @wiltzius-openai
- #21265 Route ThreadManager rollout path reads through thread store @wiltzius-openai
- #21564 Grant sandbox users access to desktop runtime bin @iceweasel-oai
- #21582 Use descriptive names for Cargo profile options @zanie-oai
- #21574 Add a Cargo build profile for benchmarking @zanie-oai
- #21436 [codex] Fully qualify hash-pins in GitHub Actions @ww-oai
- #21592 Ensure all mentions of cargo-install are --locked @gankra-oai
- #21584 Disable empty Cargo test targets @charliemarsh-oai
- #21566 feat(app-server, threadstore): Thread pagination APIs and ThreadStore contract @owenlin0
- #21556 codex-otel: add configurable trace metadata @bbrown-oai
- #21599 [codex] Apply a Dependabot cooldown of 7 days @ww-oai
- #21602 Use `--locked` in cargo build and lint invocations @zanie-oai
- #20664 Add stdio exec-server client transport @starr-openai
- #21596 [codex] Remove remote thread store implementation @wiltzius-openai
- #20665 Make environment providers own default selection @starr-openai
- #21143 Route view_image through selected environments @starr-openai
- #20666 Add CODEX_HOME environments TOML provider @starr-openai
- #21642 Send response.processed after remote compaction v2 @pakrym-oai
- #21646 Revert "Use `--locked` in cargo build and lint invocations" @pakrym-oai
- #21434 [codex-analytics] plumb protocol-native review timing @rhan-oai
- #21485 Remove skills list extra roots @xli-oai
- #21623 feat: enable AWS login credentials for Bedrock auth @celia-oai
- #21637 feat: Update plugin share settings with discoverability @xl-openai
- #21685 Fix duplicate CLI issue template description @etraut-openai
- #21686 Fix issue template labels @etraut-openai
- #21688 Fix feature request Contributing link @etraut-openai
- #21683 Remove exec research preview banner wording @etraut-openai
- #21676 Omit service_tier from remote /responses/compact requests under API auth @aibrahim-oai