## 新功能
- TUI 现在提供更丰富的会话控制和显示：数据驱动的服务层级命令、混合令牌使用量、权限/审批模式、有效的工作区根目录以及响应式 Markdown 表格。(#21745, #21906, #21991, #21669, #21677, #22052, #22612)
- `@` 提及现在可以在一个选择器中搜索文件、目录、插件和技能，并依托应用服务器插件元数据。(#19068, #22375)
- 插件工作流新增了市场 CLI 命令、版本感知共享、共享检出、更清晰的共享工作区存储桶以及默认启用的插件钩子。(#21396, #22397, #22425, #22435, #22549)
- 远程工作流现在支持由守护进程管理的 `codex remote-control`、运行时启用/禁用 API、状态读取以及基于注册表/配置的远程环境。(#20718, #22218, #22562, #22578, #22877, #20667, #21323)
- Python SDK 已迁移至 `openai-codex` / `openai_codex`，并带有固定的运行时生成类型、并发回合路由、审批模式以及集成覆盖。(#21778, #21891, #21893, #21896, #21905, #21910, #22014)
- 新增 `codex doctor` 命令，用于提供运行时、认证、终端、网络、配置和本地状态方面的支持就绪诊断。(#22336)
## 错误修复
- 修复了若干 TUI 交互和渲染问题，包括 URL 换行、浅色模式下的选择对比度、tmux 中的 Shift+Enter、`/review` MCP 启动状态、`/side` 的 Esc 处理以及网络审批历史文本。(#21760, #21950, #21943, #21624, #22710, #22229)
- 强化了 Windows 沙箱在拒绝读取规则、限定写入根目录、无效防火墙策略以及 PowerShell 边缘情况下的行为。(#18202, #21479, #22353, #21400, #22643)
- 在权限提升期间保留了受管理的读取限制，并清理了工作区根目录权限配置文件的解析。(#15977, #22624, #22683)
- 通过保留 SQLite 数据、在状态无法打开时安全失败、添加恢复路径以及软化可选元数据同步失败，使应用服务器和本地状态启动更安全。(#21831, #21847, #22580, #22734, #22899)
- 通过一致地使用根工作树钩子、在辅助命令中忽略仓库钩子/fsmonitor 配置、绑定本地 MCP OAuth 回调以及撤销被取代的登录令牌，提高了 Git 和认证的可靠性。(#21969, #22843, #22652, #20237, #21747)
- 通过更长的执行服务器传输超时、更安静的 `taskkill` 清理以及非队列化插件读取，减少了远程和 Windows 环境下的清理摩擦。(#21825, #21759, #22058, #22703)
## 文档
- 澄清：通用的 Codex 产品文档不应添加到此仓库，而应用服务器 API 文档仍属于范围之内。(#21772)
- 更新了针对简化本地插件交接链接的插件创建者指南。(#22240)
- 记录了远程环境和桌面拥有的配置命名空间的新应用服务器/API 契约。(#21323, #22584)
## 杂项
- 跨 Rust CI、精确 PR 头检出、Windows Bazel 分片、未签名的 macOS 工件以及已签名的 macOS 推广，改进了 CI 和发布可靠性。(#21604, #21628, #21835, #22408, #22559, #22649, #22737, #22788, #22900)
- 将大型 TUI ChatWidget、历史和编写器代码拆分到专注的模块中，未引入预期的行为变化。(#21866, #22269, #22407, #22433, #22518, #22537, #22704, #22581, #22656)
- 继续提取扩展和工具内部结构，包括共享工具契约以及守护者和内存扩展管道。(#21736, #21737, #21738, #22138, #22147, #22216, #22258, #22344, #22476, #22480, #22485, #22498)
- 移除了过时的工具路径、功能标志、配置门和遗留钩子，因为默认值已经稳定。(#21651, #21805, #22173, #22246, #22565, #22711, #22717, #22724, #22730)
## 变更日志
完整变更日志: https://github.com/openai/codex/compare/rust-v0.130.0...rust-v0.131.0
- #21550 [codex] 使 shutdown pending-touch 测试具有确定性 @jif-oai
- #21697 允许在配置 TOML 中使用字符串形式服务层级 @aibrahim-oai
- #21687 [codex] 默认启用 apply_patch freeform 模式 @aibrahim-oai
- #19896 更新 models.json @github-actions
- #21669 在状态行中显示混合令牌计数 @etraut-openai
- #21677 在 TUI 状态行中显示权限和审批模式 @etraut-openai
- #21757 api: 发送带连字符的会话和线程头 @jif-oai
- #21763 nit: 注释 @jif-oai
- #21749 codex-otel: 一致地验证 provider span 属性 @bbrown-oai
- #21767 chore: 线程 TUI 相关 @jif-oai
- #21443 [沙箱] 从 Seatbelt 网络策略中移除 Darwin 用户缓存写入 @evawong-oai
- #21604 修复因缺少 `bwrap` 导致的 `rust-ci-full` 失败 @zanie-oai
- #21628 在 `rust-ci-full` 中使用 `CARGO_NET_GIT_FETCH_WITH_CLI` 实现更可靠的 git 获取 @zanie-oai
- #21745 [codex] 泛化服务层级斜杠命令 @aibrahim-oai
- #21772 在 AGENTS.md 中澄清文档文件夹指南 @etraut-openai
- #21622 [codex] 处理更多 GHA 卫生问题 @ww-oai
- #21662 feat: 在远程注册中使用安装 ID @ddr-oai
- #20667 从 CODEX_HOME 加载已配置的环境 @starr-openai
- #21776 更新 models.json @github-actions
- #21787 在 Python 运行时暂存中支持资源二进制文件 @aibrahim-oai
- #21784 在发布时发布 Python 运行时轮子 @aibrahim-oai
- #21601 发出已接受行指纹分析数据 @alexsong-oai
- #21465 移除 ToolName 显示助手 @pakrym-oai
- #20619 [codex] 从应用请求桌面证明 @jiamingz42
- #21810 还原 "在发布时发布 Python 运行时轮子" @aibrahim-oai
- #21651 [codex] 删除函数式 apply_patch @pakrym-oai
- #21805 [codex] 移除遗留工具使用后钩子 @pakrym-oai
- #21616 为 `cargo shear` 启用 `--deny-warnings` @charliemarsh-oai
- #21497 使用缓存的连接器目录来获取可发现工具列表 @mzeng-openai
- #21835 ci: 在工作流中检出 PR 头部提交 @bolinfest
- #21794 使环境提供者快照无路径依赖 @starr-openai
- #21831 app-server: 支持守护进程安全的重启处理 @euroelessar
- #20293 支持 OpenAI 库工具 @lt-oai
- #21323 [codex] 支持执行器注册表远程环境 @miz-openai
- #21825 增加执行服务器环境传输超时时间 @starr-openai
- #20718 [daemon] 添加应用服务器守护进程生命周期管理 @euroelessar
- #21840 feat: 添加 Bedrock Mantle 客户端代理头 @celia-oai
- #21847 sqlite: 不再进行破坏性版本提升 @owenlin0
- #21652 重新应用 "将技能监视器移至应用服务器" @pakrym-oai
- #21290 将文件监视器移出核心 @pakrym-oai
- #21867 feat: 添加角色感知的插件共享上下文 API @xl-openai
- #21875 [codex] 紧凑的网络上下文渲染 @sayan-oai
- #21778 通过 ID 路由 Python SDK 回合通知 @aibrahim-oai
- #21906 [codex] 将 TUI 服务层级命令改为小写 @aibrahim-oai
- #21819 测试: 覆盖沙箱链接写入行为 @bolinfest
- #21760 fix(tui): 保留 URL 旁边的换行散文 @fcoury-oai
- #21950 fix(tui): 改善浅色模式下的选择对比度 @fcoury-oai
- #21755 改善 TUI 中的钩子信任流程 @abhinav-oai
- #21870 避免 TUI 因代理元数据水合而阻塞 @etraut-openai
- #21866 将 ChatWidget 状态拆分为专注模块 @etraut-openai
- #21991 将 'priority' 服务层级持久化为配置中的 fast @aibrahim-oai
- #21943 fix(tui): 保留 tmux csi-u 窗格中的 Shift+Enter @fcoury-oai
- #21759 fix(tui): 在 Windows 上抑制 MCP 拆卸时的 taskkill 输出 @fcoury-oai
- #22039 按用户去重问题摘要交互 @etraut-openai
- #22052 feat(tui): 在 TUI 中渲染响应式 Markdown 表格 @fcoury-oai
- #20825 读取已安装 Git 插件的缓存元数据 @xli-oai
- #21736 extension: 添加初始类型化扩展 API @jif-oai
- #21737 extension: 将扩展注册表连接到会话 @jif-oai
- #21738 extension: 将 Git 归属迁移到扩展中 @jif-oai
- #22138 refactor: 将可执行工具契约提取到 codex-tool-api @jif-oai
- #22140 feat: 移除 `CodexExtension` @jif-oai
- #22143 [codex] 默认将未知贡献工具视为可修改 @jif-oai
- #22147 feat: 将扩展工具束连接到核心 @jif-oai
- #22163 feat: 移动扩展工具 @jif-oai
- #22113 添加 x-codex-ws-stream-request-start-ms @andmis
- #21860 在历史中持久化 /goal 命令 @etraut-openai
- #22141 [codex] 强化溢出自压缩恢复 @aibrahim-oai
- #22170 还原 "[codex] 强化溢出自压缩恢复" @aibrahim-oai
- #22106 修复侧边对话配置继承 @etraut-openai
- #22045 基于反馈改进目标延续 @etraut-openai
- #21981 为目标优先线程使用目标预览元数据 @etraut-openai
- #21843 app-server: 移除 TCP WebSocket 监听器 @euroelessar
- #22173 chore: 移除内置 MCP @jif-oai
- #21954 修复目标更新并在 TUI 中添加 `/goal edit` 命令 @etraut-openai
- #22110 使自动审核拒绝短路使用滚动审核窗口 @won-openai
- #21431 [codex-analytics] 向回合事件添加工具计数 @rhan-oai
- #22154 添加进程范围的 SQLite 遥测 @jif-oai
- #19068 统一的 TUI 提及功能 @canvrno-oai
- #20305 fix(exec-policy) 更少使用 is_known_safe_command @dylan-hurd-oai
- #22058 fix(exec-server): 抑制 Windows taskkill 输出 @fcoury-oai
- #22178 fix(app-server): 为远程客户端线程历史编辑 @owenlin0
- #15977 fix(permissions): 在升级期间保留受管理的拒绝读取 @viyatb-oai
- #21061 feat(connectors): 支持受管理应用工具审批要求 @viyatb-oai
- #22188 [elicitation] 当启用 auth_elicitation 时，宣传新的 url elicitation 能力 @mzeng-openai
- #22192 config: 在 TUI 键位配置中接受 `minus` @fcoury-oai
- #21853 daemon: 在验证二进制文件推出后刷新更新程序 @euroelessar
- #21747 [login] 在重新登录时撤销被取代的认证令牌 @cooper-oai
- #20147 feat: 添加网络代理功能标志 @viyatb-oai
- #21891 [1/8] 固定 Python SDK 运行时依赖 @aibrahim-oai
- #21893 [2/8] 从固定运行时生成 Python SDK 类型 @aibrahim-oai
- #21895 [3/8] 在 CI 中运行 Python SDK 测试 @aibrahim-oai
- #21896 [4/8] 定义 Python SDK 公共 API 表面 @aibrahim-oai
- #21905 [5/8] 将 Python SDK 包重命名为 openai-codex @aibrahim-oai
- #21910 [6/8] 添加高级 Python SDK 审批模式 @aibrahim-oai
- #22014 [7/8] 添加 Python SDK 应用服务器集成框架 @aibrahim-oai
- #22021 [8/8] 添加 Python SDK Ruff 格式化 @aibrahim-oai
- #18748 [codex-analytics] 发出终端审核事件 @rhan-oai
- #22159 添加 Windows 钩子命令覆盖 @abhinav-oai
- #22218 更新 codex remote-control 以启动守护进程 @owenlin0
- #22180 停止上传已接受行指纹 @alexsong-oai
- #21617 支持多环境 apply_patch 选择 @starr-openai
- #22198 添加生产启动和 TTFT 遥测 @mzeng-openai
- #21963 [exec-server] 通过 HTTP 升级提供 WebSocket 监听器 @euroelessar
- #21946 fix(tui): 处理隐藏的应用 git 指令 @fcoury-oai
- #21595 简化 MCP 工具处理程序管道 @pakrym-oai
- #22221 feat(skills): 默认将插件创建者设为个人共享流程 @efrazer-oai
- #21861 将沙箱上下文应用于本地 view_image 读取 @starr-openai
- #20527 支持 PreToolUse updatedInput 重写 @abhinav-oai
- #22243 [codex] 在压缩期间过滤旧警告消息 @pakrym-oai
- #22254 [codex] 让处理程序拥有并行工具支持 @pakrym-oai
- #18202 feat(sandbox): 添加 Windows 拒绝读取对等支持 @viyatb-oai
- #22265 feat: 标准化远程插件摘要标识 @xl-openai
- #22216 feat: 将守护者作为扩展（贡献者部分） @jif-oai
- #22311 [rollout-trace] 为推理调用添加 x-codex-inference-call-id 头 @cassirer-openai
- #21206 feat(tui): 添加环境终端宠物 @fcoury-oai
- #22323 fix: uv lock @jif-oai
- #22207 [codex] 收紧统一执行沙箱设置 @bookholt-oai
- #22382 tools: 移除 is_mutating 调度门控 @pakrym-oai
- #22383 chore(config) include_collaboration_mode_instructions @dylan-hurd-oai
- #22377 code-mode: 在运行时携带嵌套工具类型 @pakrym-oai
- #22392 test(tui): 放宽配置宠物加载超时 @fcoury-oai
- #22343 feat(exec-server): 使用 protobuf 中继帧 @apanasenko-oai
- #20509 [codex] 移除工作区所有者使用提示门 @richardopenai
- #22256 重构命名空间工具规范注册 @pakrym-oai
- #22280 code-mode: 添加感知待处理的代码模式执行 @cconger
- #22266 core: 盒装多代理处理程序未来 @bolinfest
- #22398 [codex] 为 tool_search 添加搜索词覆盖 @pakrym-oai
- #22236 统一存储之上的线程元数据更新 @wiltzius-openai
- #22269 将 chatwidget 状态重构为模块 @etraut-openai
- #22381 [codex] 移除工具搜索桶限制覆盖 @sayan-oai
- #22386 将 Feature::RemoteControl 标记为已移除 @owenlin0
- #22240 docs(skills): 简化插件创建者深层链接形态 @efrazer-oai
- #22397 feat: 暴露插件版本并门控插件共享 @xl-openai
- #22404 恢复带有认证守卫的应用服务器 WebSocket 监听器 @etraut-openai
- #22258 feat: 通过提供者路由守护者审核模型选择 @celia-oai
- #22268 hooks: 使用新会话 ID 而不是线程 ID 用于钩子，将父级会话 ID 应用于子代理的钩子 @eternal-openai
- #20319 添加 allow_managed_hooks_only 钩子要求 @eternal-openai
- #22413 移除 CODEX_RS_SSE_FIXTURE 测试钩子 @pakrym-oai
- #22406 tools: 从规范推断代码模式命名空间描述 @pakrym-oai
- #22261 在处理程序中封装工具搜索条目 @pakrym-oai
- #22425 feat: 按可发现性拆分共享工作区插件 @xl-openai
- #22414 在 `codex --remote` 中添加对 UDS 的支持 @etraut-openai
- #22407 将 chatwidget 输入流重构为模块 @etraut-openai
- #22439 移除不可用的 MCP 占位工具回填 @sayan-oai
- #21969 在链接的工作树中使用根仓库钩子 @abhinav-oai
- #21768 添加 --dangerously-bypass-hook-trust CLI 标志 @abhinav-oai
- #22435 feat: 添加插件共享检出 @xl-openai
- #22355 chore: 将 view_image 沙箱测试保留在临时目录中 @jif-oai
- #22344 extension-api: 添加审批审核贡献者流程 @jif-oai
- #22359 feat: 提取共享工具执行器接口 @jif-oai
- #22369 将扩展工具重构到共享 ToolExecutor 上 @jif-oai
- #22338 [app-server] 门控登录颁发者覆盖常量 @cassirer-openai
- #22437 [codex] 将 plugin/list 从配置序列化队列中隔离 @xli-oai
- #22476 feat: 添加线程生命周期贡献者钩子 @jif-oai
- #22479 nit: codeowners @jif-oai
- #22480 feat: 添加回合生命周期贡献者 @jif-oai
- #22482 fix: 在隐式关闭时发出线程停止生命周期 @jif-oai
- #22485 feat: 添加令牌使用贡献者钩子 @jif-oai
- #22443 将 macOS 签名密钥的作用域限定为发布环境 @shijie-oai
- #22490 feat: 将扩展作用域 ID 移动到 ExtensionData @jif-oai
- #22491 使上下文贡献者异步 @jif-oai
- #22214 feat(tui): 移除 Zellij TUI 变通方法 @fcoury-oai
- #22139 为派生代理添加服务层级覆盖 @aibrahim-oai
- #22488 feat: 添加配置更改扩展贡献者 @jif-oai
- #22498 feat: memories ext @jif-oai
- #22503 fix: main @jif-oai
- #22347 feat(tui): 标准化选择器导航键 @fcoury-oai
- #22500 refactor: 拆分 memories 扩展 crate 模块 @jif-oai
- #22433 将 chatwidget 协议流重构为模块（阶段 3） @etraut-openai
- #22505 fix: 阻止 fmt 更新 Python SDK 锁定文件 @jif-oai
- #22326 [rollout-trace] 为 MCP 调用添加追踪 ID @cassirer-openai
- #20559 config: 添加严格配置解析 @bolinfest
- #22489 引入工具暴露以实现延迟注册 @jif-oai
- #22193 fix: 移除下划线 id 头 @jif-oai
- #22246 [codex] 移除未使用的遗留 shell 工具 @pakrym-oai
- #22520 revert: 将 Feature::RemoteControl 标记为已移除 @owenlin0
- #22513 还原 "将 macOS 签名密钥的作用域限定为发布环境" @shijie-oai
- #22514 feat: 将多代理 v2 作为仅模型工具公开 @jif-oai
- #22366 将 Codex 产品 SKU 传递给 ChatGPT 后端 @ericning-o
- #22519 弃用 TurnContext cwd 和 resolve_path @pakrym-oai
- #22518 将 chatwidget 设置面重构为模块（阶段 4） @etraut-openai
- #21479 [codex] 限定 Windows 沙箱写入根能力 SID @adrianbravo-oai
- #22353 windows-sandbox: 当防火墙策略无效时，使提升设置失败 @iceweasel-oai
- #22527 [codex] 为插件服务推出重用 Apps MCP 路径覆盖 @adaley-openai
- #22412 chore(config) 移除 Feature::CodexGitCommit @dylan-hurd-oai
- #22501 chore(config) 移除 tools.view_image @dylan-hurd-oai
- #22533 fix: 阻止 codex-backend 窃取 originator @owenlin0
- #22408 跨作业分片 Bazel Windows 测试 @starr-openai
- #22542 为文件系统帮助程序使用选定的环境 cwd @pakrym-oai
- #20237 为本地 MCP OAuth 重定向添加回调 ID @stevenlee-oai
- #22549 默认启用插件钩子 @abhinav-oai
- #22375 使用 plugin/list 获取提及的插件列表 @canvrno-oai
- #21235 [codex] 修复对外部借用切片的 TUI 换行 @canvrno-oai
- #22336 feat(cli): 添加 codex doctor 诊断 @fcoury-oai
- #22543 清理指令 @sayan-oai
- #21400 在提升的 Windows 沙箱中避免 PowerShell 配置文件 @iceweasel-oai
- #22528 使 multi_agent_v2 wait_agent 超时可配置 @andmis
- #22529 溢出过大的 PreToolUse additionalContext @abhinav-oai
- #22556 feat: 在 ext 中命名空间 @jif-oai
- #22535 移除已恢复的 `/collab` 斜杠命令 @etraut-openai
- #22537 将 chatwidget 编排重构为模块（阶段 5） @etraut-openai
- #22564 [codex] 规范化共享工作区插件 ID @xl-openai
- #22559 添加未签名的 macOS 发布工件 @shijie-oai
- #22574 弃用 issue labeler @maxb-openai
- #22555 移除 connector_openai 前缀过滤 @ericning-o
- #22580 fix: 如果状态数据库无法打开，阻止应用服务器启动 @ddr-oai
- #22565 chore(config) 移除 experimental_use_freeform_apply_patch @dylan-hurd-oai
- #22562 改善 remote-control 守护进程用户体验 @owenlin0
- #22578 在运行时启用/禁用远程控制，而非通过功能 @owenlin0
- #22573 简化 TUI 启动测试覆盖 @etraut-openai
- #22594 放宽远程插件同步门控 @xli-oai
- #22587 延迟启动 NUX 印象直到启动成功 @etraut-openai
- #22560 feat: 使 ToolExecutor 成为异步 trait @jif-oai
- #22494 将回合项目贡献者连接到流输出 @jif-oai
- #17141 feat: 添加分层 --profile-v2 配置文件 @jif-oai
- #22643 [codex] 将 PowerShell 停止解析形式视为不受支持 @bookholt-oai
- #22646 修复中止路径回合扩展数据管道 @jif-oai
- #22624 permissions: 规范化 workspace_roots 和 danger-full-access 名称 @bolinfest
- #22649 Chore: 更好的已发布未签名工件 @shijie-oai
- #22581 tui: 拆分编写器附件和弹出状态 @etraut-openai
- #21396 [codex] 添加插件市场 CLI 命令 @caseychow-oai
- #22576 tests: 避免环境临时沙箱根目录 @starr-openai
- #22652 [codex] 在 Git 元数据读取中忽略 fsmonitor 配置 @bookholt-oai
- #22229 fix(tui): 按目标渲染网络审批历史 @fcoury-oai
- #22547 对于 SIWC 用户，优先使用从后端获取的模型列表 @jeevnayak
- #22666 [codex] 修复插件 CLI 活动用户层编译 @caseychow-oai
- #22575 支持显式 MCP OAuth 客户端 ID @mzeng-openai
- #22512 test: 隔离执行审核策略配置测试 @bolinfest
- #22572 修复远程环境测试夹具 @starr-openai
- #22563 tests: 为实时 CLI 隔离 codex 主目录 @starr-openai
- #18161 [codex] 支持多个强制 ChatGPT 工作区 @rreichel3-oai
- #22702 使 rust-release-prepare 使用环境密钥 @sayan-oai
- #22703 取消队列插件列表和读取请求 @xli-oai
- #22687 修复 Windows 沙箱 clippy 克隆 @starr-openai
- #22711 chore(features) 移除 Feature::ApplyPatchFreeform @dylan-hurd-oai
- #22717 chore(config) 移除 windows_wsl_setup_acknowledged @dylan-hurd-oai
- #22695 修剪 TUI 遗留核心助手使用 @etraut-openai
- #21624 修复 /review 模式 MCP 启动渲染问题 @canvrno-oai
- #22684 移除 SSE 夹具加载器 @pakrym-oai
- #22730 [codex] 分组已移除的功能标志 @dylan-hurd-oai
- #22724 [codex] 移除实验性指令文件配置 @dylan-hurd-oai
- #22237 向 MCP 回合元数据添加 `user_input_requested_during_turn` @mchen-oai
- #22737 ci: 支持已签名的 macOS 发布推广 @bolinfest
- #22303 稳定紧凑回滚后续测试 @dylan-hurd-oai
- #22683 permissions: 使用约束解析配置文件身份 @bolinfest
- #22734 tui: 恢复本地状态数据库启动失败 @etraut-openai
- #22584 [codex] 添加不透明桌面配置命名空间 @guinness-oai
- #22710 阻止 Esc 关闭或回退 `/side` @etraut-openai
- #22704 TUI: 将历史记录单元格拆分为专注模块 @etraut-openai
- #22611 app-server: 使用权限 ID 和运行时工作区根目录 @bolinfest
- #22612 tui/exec: 在摘要中显示有效工作区根目录 @bolinfest
- #22788 修复已签名 macOS 发布推广后续作业 @shijie-oai
- #22647 当使用 profile-v2 时拒绝旧版 [profiles] @jif-oai
- #22809 [codex] 对远程压缩 v2 使用 compaction_trigger 项 @jif-oai
- #22636 简化工具执行器和注册表管道 @jif-oai
- #22820 移除僵尸工具规范模块 @jif-oai
- #22828 为远程压缩 v2 运行紧凑钩子 @jif-oai
- #22841 将内存提示注入移动到应用服务器扩展 @jif-oai
- #22789 guardian: 为审核沙箱使用权限配置文件 @bolinfest
- #22656 tui: 拆分剩余编写器草稿和页脚状态 @etraut-openai
- #22843 在 git 帮助程序中忽略配置的钩子 @bookholt-oai
- #22790 context: 移除旧版权限指令帮助程序 @bolinfest
- #22791 telemetry: 从权限配置文件标记沙箱 @bolinfest
- #22872 从 Codex 配置转发 apps MCP 产品 SKU @kumquatexpress
- #22582 工作流更新 @viyatb-oai
- #22792 app-server: 停止返回线程权限配置文件 @bolinfest
- #22795 core: 直接构造测试权限配置文件 @bolinfest
- #22900 为已签名 macOS 推广禁用 DMG 暂存 @shijie-oai
- #22877 feat(app-server): 更新远程控制 API 以获得更好的用户体验 @owenlin0
- #22899 [codex] 软化 SQLite 元数据同步失败 @wiltzius-openai
## New Features
- The TUI now offers richer session controls and display: data-driven service-tier commands, blended token usage, permissions/approval mode, effective workspace roots, and responsive Markdown tables. (#21745, #21906, #21991, #21669, #21677, #22052, #22612)
- `@` mentions now search files, directories, plugins, and skills in one picker, backed by app-server plugin metadata. (#19068, #22375)
- Plugin workflows gained marketplace CLI commands, version-aware sharing, share checkout, clearer shared-workspace buckets, and default-enabled plugin hooks. (#21396, #22397, #22425, #22435, #22549)
- Remote workflows now support daemon-managed `codex remote-control`, runtime enable/disable APIs, status reads, and registry-backed/configured remote environments. (#20718, #22218, #22562, #22578, #22877, #20667, #21323)
- The Python SDK moved to `openai-codex` / `openai_codex`, with pinned runtime-generated types, concurrent turn routing, approval modes, and integration coverage. (#21778, #21891, #21893, #21896, #21905, #21910, #22014)
- Added `codex doctor` for support-ready diagnostics across runtime, auth, terminal, network, config, and local state. (#22336)
## Bug Fixes
- Fixed several TUI interaction and rendering issues, including URL wrapping, light-mode selection contrast, Shift+Enter in tmux, `/review` MCP startup status, `/side` Esc handling, and network approval history text. (#21760, #21950, #21943, #21624, #22710, #22229)
- Hardened Windows sandbox behavior around deny-read rules, scoped write roots, ineffective firewall policy, and PowerShell edge cases. (#18202, #21479, #22353, #21400, #22643)
- Preserved managed read restrictions during permission escalation and cleaned up workspace-root permission profile resolution. (#15977, #22624, #22683)
- Made app-server and local state startup safer by preserving SQLite data, failing closed when state cannot open, adding recovery paths, and softening optional metadata sync failures. (#21831, #21847, #22580, #22734, #22899)
- Improved Git and auth reliability by using root worktree hooks consistently, ignoring repo hook/fsmonitor config in helper commands, binding local MCP OAuth callbacks, and revoking superseded login tokens. (#21969, #22843, #22652, #20237, #21747)
- Reduced remote and Windows cleanup friction with longer exec-server transport timeouts, quieter `taskkill` cleanup, and non-queued plugin reads. (#21825, #21759, #22058, #22703)
## Documentation
- Clarified that general Codex product docs should not be added to this repo, while app-server API docs remain in scope. (#21772)
- Updated plugin-creator guidance for the simplified local plugin handoff links. (#22240)
- Documented new app-server/API contracts for remote environments and the desktop-owned config namespace. (#21323, #22584)
## Chores
- Improved CI and release reliability across Rust CI, exact PR-head checkout, Windows Bazel sharding, unsigned macOS artifacts, and signed macOS promotion. (#21604, #21628, #21835, #22408, #22559, #22649, #22737, #22788, #22900)
- Split large TUI ChatWidget, history, and composer code into focused modules without intended behavior changes. (#21866, #22269, #22407, #22433, #22518, #22537, #22704, #22581, #22656)
- Continued extracting extension and tool internals, including shared tool contracts plus guardian and memory extension plumbing. (#21736, #21737, #21738, #22138, #22147, #22216, #22258, #22344, #22476, #22480, #22485, #22498)
- Removed obsolete tool paths, feature flags, config gates, and legacy hooks as defaults stabilized. (#21651, #21805, #22173, #22246, #22565, #22711, #22717, #22724, #22730)
## Changelog
Full Changelog: https://github.com/openai/codex/compare/rust-v0.130.0...rust-v0.131.0
- #21550 [codex] make shutdown pending-touch test deterministic @jif-oai
- #21697 Allow string service tiers in config TOML @aibrahim-oai
- #21687 [codex] Enable apply_patch freeform by default @aibrahim-oai
- #19896 Update models.json @github-actions
- #21669 Display blended token count in status line @etraut-openai
- #21677 Show permissions and approval mode in the TUI status line @etraut-openai
- #21757 api: send hyphenated session and thread headers @jif-oai
- #21763 nit: comment @jif-oai
- #21749 codex-otel: validate provider span attributes consistently @bbrown-oai
- #21767 chore: thread tui @jif-oai
- #21443 [sandboxing] Remove Darwin user cache write from Seatbelt network policy @evawong-oai
- #21604 Fix `rust-ci-full` failures due to missing `bwrap` @zanie-oai
- #21628 Use `CARGO_NET_GIT_FETCH_WITH_CLI` in `rust-ci-full` for more reliable git fetches @zanie-oai
- #21745 [codex] Generalize service tier slash commands @aibrahim-oai
- #21772 Clarify docs folder guidance in AGENTS.md @etraut-openai
- #21622 [codex] Address some more GHA hygiene issues @ww-oai
- #21662 feat: Use installation ID in remote enrollments @ddr-oai
- #20667 Load configured environments from CODEX_HOME @starr-openai
- #21776 Update models.json @github-actions
- #21787 Support resource binaries in Python runtime staging @aibrahim-oai
- #21784 Publish Python runtime wheels on release @aibrahim-oai
- #21601 Emit accepted line fingerprint analytics @alexsong-oai
- #21465 Remove ToolName display helper @pakrym-oai
- #20619 [codex] request desktop attestation from app @jiamingz42
- #21810 Revert "Publish Python runtime wheels on release" @aibrahim-oai
- #21651 [codex] Delete function-style apply_patch @pakrym-oai
- #21805 [codex] Remove legacy after tool use hooks @pakrym-oai
- #21616 Enable `--deny-warnings` for `cargo shear` @charliemarsh-oai
- #21497 Using cached connector directory for discoverable tools list @mzeng-openai
- #21835 ci: check out PR head commits in workflows @bolinfest
- #21794 Make environment provider snapshots path-free @starr-openai
- #21831 app-server: support daemon-safe restart handling @euroelessar
- #20293 Support openai library tool @lt-oai
- #21323 [codex] support executor registry remote environments @miz-openai
- #21825 Increase exec-server environment transport timeouts @starr-openai
- #20718 [daemon] Add app-server daemon lifecycle management @euroelessar
- #21840 feat: add Bedrock Mantle client agent header @celia-oai
- #21847 sqlite: no more destructive version bumps @owenlin0
- #21652 Reapply "Move skills watcher to app-server" @pakrym-oai
- #21290 Move file watcher out of core @pakrym-oai
- #21867 feat: Add role-aware plugin share context APIs @xl-openai
- #21875 [codex] compact network context rendering @sayan-oai
- #21778 Route Python SDK turn notifications by ID @aibrahim-oai
- #21906 [codex] Lowercase TUI service tier commands @aibrahim-oai
- #21819 tests: cover sandbox link write behavior @bolinfest
- #21760 fix(tui): preserve wrapped prose beside URLs @fcoury-oai
- #21950 fix(tui): improve light-mode selection contrast @fcoury-oai
- #21755 Improve hooks trust flow in TUI @abhinav-oai
- #21870 Avoid blocking TUI on agent metadata hydration @etraut-openai
- #21866 Split ChatWidget state into focused modules @etraut-openai
- #21991 Persist 'priority' service tier as fast in config @aibrahim-oai
- #21943 fix(tui): preserve Shift+Enter in tmux csi-u panes @fcoury-oai
- #21759 fix(tui): suppress taskkill output for MCP teardown on Windows @fcoury-oai
- #22039 Deduplicate issue digest interactions by user @etraut-openai
- #22052 feat(tui): render responsive Markdown tables in TUI @fcoury-oai
- #20825 Read cached metadata for installed Git plugins @xli-oai
- #21736 extension: add initial typed extension API @jif-oai
- #21737 extension: wire extension registries into sessions @jif-oai
- #21738 extension: move git attribution into an extension @jif-oai
- #22138 refactor: extract executable tool contracts into codex-tool-api @jif-oai
- #22140 feat: drop `CodexExtension` @jif-oai
- #22143 [codex] default unknown contributed tools to mutating @jif-oai
- #22147 feat: wire extension tool bundles into core @jif-oai
- #22163 feat: move extensions tool @jif-oai
- #22113 Add x-codex-ws-stream-request-start-ms @andmis
- #21860 Persist /goal commands in history @etraut-openai
- #22141 [codex] Harden overflow auto-compaction recovery @aibrahim-oai
- #22170 Revert "[codex] Harden overflow auto-compaction recovery" @aibrahim-oai
- #22106 Fix side conversation config inheritance @etraut-openai
- #22045 Improve goal continuation based on feedback @etraut-openai
- #21981 Use goal preview metadata for goal-first threads @etraut-openai
- #21843 app-server: remove TCP websocket listener @euroelessar
- #22173 chore: drop built-in MCPs @jif-oai
- #21954 Fix goal update and add `/goal edit` command in TUI @etraut-openai
- #22110 Make auto-review denial short-circuit use a rolling review window @won-openai
- #21431 [codex-analytics] add turn tool counts to turn events @rhan-oai
- #22154 Add process-scoped SQLite telemetry @jif-oai
- #19068 Unified mentions in TUI @canvrno-oai
- #20305 fix(exec-policy) use is_known_safe_command less @dylan-hurd-oai
- #22058 fix(exec-server): suppress Windows taskkill output @fcoury-oai
- #22178 fix(app-server): thread history redaction for remote clients @owenlin0
- #15977 fix(permissions): preserve managed deny-read during escalation @viyatb-oai
- #21061 feat(connectors): support managed app tool approval requirements @viyatb-oai
- #22188 [elicitation] Advertise new url elicitation capability when auth_elicitation is enabled. @mzeng-openai
- #22192 config: accept `minus` in TUI keymap config @fcoury-oai
- #21853 daemon: refresh updater after validated binary rollout @euroelessar
- #21747 [login] revoke superseded auth tokens on relogin @cooper-oai
- #20147 feat: add network proxy feature flag @viyatb-oai
- #21891 [1/8] Pin Python SDK runtime dependency @aibrahim-oai
- #21893 [2/8] Generate Python SDK types from pinned runtime @aibrahim-oai
- #21895 [3/8] Run Python SDK tests in CI @aibrahim-oai
- #21896 [4/8] Define Python SDK public API surface @aibrahim-oai
- #21905 [5/8] Rename Python SDK package to openai-codex @aibrahim-oai
- #21910 [6/8] Add high-level Python SDK approval mode @aibrahim-oai
- #22014 [7/8] Add Python SDK app-server integration harness @aibrahim-oai
- #22021 [8/8] Add Python SDK Ruff formatting @aibrahim-oai
- #18748 [codex-analytics] emit terminal review events @rhan-oai
- #22159 Add Windows hook command overrides @abhinav-oai
- #22218 Update codex remote-control to start the daemon @owenlin0
- #22180 Stop uploading accepted line fingerprints @alexsong-oai
- #21617 Support multi-environment apply_patch selection @starr-openai
- #22198 Add production startup and TTFT telemetry @mzeng-openai
- #21963 [exec-server] serve websocket listener via HTTP upgrade @euroelessar
- #21946 fix(tui): handle hidden app git directives @fcoury-oai
- #21595 Simplify MCP tool handler plumbing @pakrym-oai
- #22221 feat(skills): default plugin creator to personal share flow @efrazer-oai
- #21861 Apply sandbox context to local view_image reads @starr-openai
- #20527 Support PreToolUse updatedInput rewrites @abhinav-oai
- #22243 [codex] Filter legacy warning messages during compaction @pakrym-oai
- #22254 [codex] Make handlers own parallel tool support @pakrym-oai
- #18202 feat(sandbox): add Windows deny-read parity @viyatb-oai
- #22265 feat: Normalize remote plugin summary identities. @xl-openai
- #22216 feat: guardian as an extension (contributors part) @jif-oai
- #22311 [rollout-trace] Add x-codex-inference-call-id header to inference calls. @cassirer-openai
- #21206 feat(tui): add ambient terminal pets @fcoury-oai
- #22323 fix: uv lock @jif-oai
- #22207 [codex] Tighten unified exec sandbox setup @bookholt-oai
- #22382 tools: remove is_mutating dispatch gating @pakrym-oai
- #22383 chore(config) include_collaboration_mode_instructions @dylan-hurd-oai
- #22377 code-mode: carry nested tool kind through runtime @pakrym-oai
- #22392 test(tui): relax configured pet load timeout @fcoury-oai
- #22343 feat(exec-server): use protobuf relay frames @apanasenko-oai
- #20509 [codex] Remove workspace owner usage nudge gate @richardopenai
- #22256 Refactor namespaced tool spec registration @pakrym-oai
- #22280 code-mode: Add pending-aware code mode execution @cconger
- #22266 core: box multi-agent handler futures @bolinfest
- #22398 [codex] Add search term coverage for tool_search @pakrym-oai
- #22236 Unify thread metadata updates above store @wiltzius-openai
- #22269 Refactor chatwidget state into modules @etraut-openai
- #22381 [codex] Remove tool search bucket limit override @sayan-oai
- #22386 mark Feature::RemoteControl as removed @owenlin0
- #22240 docs(skills): simplify plugin creator deeplink shape @efrazer-oai
- #22397 feat: Expose plugin versions and gate plugin sharing @xl-openai
- #22404 Restore app-server websocket listener with auth guard @etraut-openai
- #22258 feat: route guardian review model selection through providers @celia-oai
- #22268 hooks: use new session IDs instead of thread IDs for hooks, apply parent's session ID to subagents' hooks @eternal-openai
- #20319 Add allow_managed_hooks_only hook requirement @eternal-openai
- #22413 Remove CODEX_RS_SSE_FIXTURE test hook @pakrym-oai
- #22406 tools: infer code-mode namespace descriptions from specs @pakrym-oai
- #22261 Encapsulate tool search entries in handlers @pakrym-oai
- #22425 feat: Split shared workspace plugins by discoverability @xl-openai
- #22414 Add support for UDS in `codex --remote` @etraut-openai
- #22407 Refactor chatwidget input flow into modules @etraut-openai
- #22439 Remove unavailable MCP placeholder tool backfill @sayan-oai
- #21969 Use root repo hooks in linked worktrees @abhinav-oai
- #21768 add --dangerously-bypass-hook-trust CLI flag @abhinav-oai
- #22435 feat: Add plugin share checkout @xl-openai
- #22355 chore: Keep view_image sandbox test in temp dir @jif-oai
- #22344 extension-api: add approval review contributor flow @jif-oai
- #22359 feat: extract shared tool executor interface @jif-oai
- #22369 Refactor extension tools onto shared ToolExecutor @jif-oai
- #22338 [app-server] Gate login issuer override constant @cassirer-openai
- #22437 [codex] isolate plugin/list from config serialization queue @xli-oai
- #22476 feat: add thread lifecycle contributor hooks @jif-oai
- #22479 nit: codeowners @jif-oai
- #22480 feat: add turn lifecycle contributors @jif-oai
- #22482 fix: emit thread stop lifecycle on implicit shutdown @jif-oai
- #22485 feat: add token usage contributor hook @jif-oai
- #22443 Scope macOS signing secrets to release environment @shijie-oai
- #22490 feat: move extension scope ids into ExtensionData @jif-oai
- #22491 Make context contributors async @jif-oai
- #22214 feat(tui): remove Zellij TUI workarounds @fcoury-oai
- #22139 Add service tier overrides to spawned agents @aibrahim-oai
- #22488 feat: add config-change extension contributor @jif-oai
- #22498 feat: memories ext @jif-oai
- #22503 fix: main @jif-oai
- #22347 feat(tui): standardize picker navigation keys @fcoury-oai
- #22500 refactor: split memories extension crate modules @jif-oai
- #22433 Refactor chatwidget protocol flows into modules (phase 3) @etraut-openai
- #22505 fix: prevent fmt from updating Python SDK lockfile @jif-oai
- #22326 [rollout-trace] Add a trace ID to MCP calls. @cassirer-openai
- #20559 config: add strict config parsing @bolinfest
- #22489 Introduce tool exposure for deferred registration @jif-oai
- #22193 fix: drop underscored id headers @jif-oai
- #22246 [codex] Remove unused legacy shell tools @pakrym-oai
- #22520 revert: mark Feature::RemoteControl as removed @owenlin0
- #22513 Revert "Scope macOS signing secrets to release environment" @shijie-oai
- #22514 feat: expose multi-agent v2 as model-only tools @jif-oai
- #22366 Pass Codex product SKU to ChatGPT backend @ericning-o
- #22519 Deprecate TurnContext cwd and resolve_path @pakrym-oai
- #22518 Refactor chatwidget settings surfaces into modules (phase 4) @etraut-openai
- #21479 [codex] Scope Windows sandbox write-root capability SIDs @adrianbravo-oai
- #22353 windows-sandbox: fail elevated setup when firewall policy is ineffective @iceweasel-oai
- #22527 [codex] Reuse Apps MCP path override for plugin-service rollout @adaley-openai
- #22412 chore(config) rm Feature::CodexGitCommit @dylan-hurd-oai
- #22501 chore(config) rm tools.view_image @dylan-hurd-oai
- #22533 fix: prevent codex-backend from stealing originator @owenlin0
- #22408 Shard Bazel Windows tests across jobs @starr-openai
- #22542 Use selected environment cwd for filesystem helpers @pakrym-oai
- #20237 Add callback ids to local MCP OAuth redirects @stevenlee-oai
- #22549 Enable plugin hooks by default @abhinav-oai
- #22375 Use plugin/list to get list of plugins for mentions @canvrno-oai
- #21235 [codex] Fix TUI wrapping for external borrowed slices @canvrno-oai
- #22336 feat(cli): add codex doctor diagnostics @fcoury-oai
- #22543 clean up instructions @sayan-oai
- #21400 Avoid PowerShell profiles in elevated Windows sandbox @iceweasel-oai
- #22528 Make multi_agent_v2 wait_agent timeouts configurable @andmis
- #22529 Spill oversized PreToolUse additionalContext @abhinav-oai
- #22556 feat: namespace in ext @jif-oai
- #22535 Remove resurrected `/collab` slash command @etraut-openai
- #22537 Refactor chatwidget orchestration into modules (phase 5) @etraut-openai
- #22564 [codex] Canonicalize shared workspace plugin IDs @xl-openai
- #22559 Add unsigned macOS release artifacts @shijie-oai
- #22574 Deprecate issue labeler @maxb-openai
- #22555 Remove connector_openai prefix filtering @ericning-o
- #22580 fix: Block appserver startup if state db can't be opened @ddr-oai
- #22565 chore(config) rm experimental_use_freeform_apply_patch @dylan-hurd-oai
- #22562 Improve remote-control daemon UX @owenlin0
- #22578 enable/disable remote control at runtime, not via features @owenlin0
- #22573 Simplify TUI startup test coverage @etraut-openai
- #22594 Relax remote plugin sync gate @xli-oai
- #22587 Defer startup NUX impressions until startup succeeds @etraut-openai
- #22560 feat: make ToolExecutor an async trait @jif-oai
- #22494 Wire turn item contributors into stream output @jif-oai
- #17141 feat: add layered --profile-v2 config files @jif-oai
- #22643 [codex] treat PowerShell stop-parsing forms as unsupported @bookholt-oai
- #22646 Fix abort-path turn extension data plumbing @jif-oai
- #22624 permissions: canonicalize workspace_roots and danger-full-access names @bolinfest
- #22649 Chore: better published unsigned artifacts @shijie-oai
- #22581 tui: split composer attachment and popup state @etraut-openai
- #21396 [codex] add plugin marketplace CLI commands @caseychow-oai
- #22576 tests: avoid ambient temp sandbox roots @starr-openai
- #22652 [codex] Ignore fsmonitor config in Git metadata reads @bookholt-oai
- #22229 fix(tui): render network approval history by target @fcoury-oai
- #22547 Prefer the model list fetched from the backend for SIWC users @jeevnayak
- #22666 [codex] fix plugin CLI active user layer compile @caseychow-oai
- #22575 Support explicit MCP OAuth client IDs @mzeng-openai
- #22512 test: isolate exec review policy config test @bolinfest
- #22572 Fix remote environment test fixtures @starr-openai
- #22563 tests: isolate codex home for live cli @starr-openai
- #18161 [codex] Support multiple forced ChatGPT workspaces @rreichel3-oai
- #22702 make rust-release-prepare use env secret @sayan-oai
- #22703 Unqueue plugin list and read requests @xli-oai
- #22687 Fix Windows sandbox clippy clones @starr-openai
- #22711 chore(features) rm Feature::ApplyPatchFreeform @dylan-hurd-oai
- #22717 chore(config) rm windows_wsl_setup_acknowledged @dylan-hurd-oai
- #22695 Trim TUI legacy core helper usage @etraut-openai
- #21624 Fix /review mode MCP startup render issue @canvrno-oai
- #22684 Remove SSE fixture loaders @pakrym-oai
- #22730 [codex] Group removed feature flags @dylan-hurd-oai
- #22724 [codex] Remove experimental instructions file config @dylan-hurd-oai
- #22237 Add `user_input_requested_during_turn` to MCP turn metadata @mchen-oai
- #22737 ci: support signed macOS release promotion @bolinfest
- #22303 Stabilize compact rollback follow-up test @dylan-hurd-oai
- #22683 permissions: resolve profile identity with constraints @bolinfest
- #22734 tui: recover local state db startup failures @etraut-openai
- #22584 [codex] Add opaque desktop config namespace @guinness-oai
- #22710 Prevent Esc from dismissing or rewinding `/side` @etraut-openai
- #22704 TUI: split history cells into focused modules @etraut-openai
- #22611 app-server: use permission ids and runtime workspace roots @bolinfest
- #22612 tui/exec: show effective workspace roots in summaries @bolinfest
- #22788 Fix signed macOS release promotion follow-up jobs @shijie-oai
- #22647 Reject legacy [profiles] when using profile-v2 @jif-oai
- #22809 [codex] Use compaction_trigger item for remote compaction v2 @jif-oai
- #22636 Simplify tool executor and registry plumbing @jif-oai
- #22820 Remove zombie tools spec module @jif-oai
- #22828 Run compact hooks for remote compaction v2 @jif-oai
- #22841 Move memory prompt injection to app-server extension @jif-oai
- #22789 guardian: use permission profile for review sandbox @bolinfest
- #22656 tui: split remaining composer draft and footer state @etraut-openai
- #22843 Ignore configured hooks in git helpers @bookholt-oai
- #22790 context: remove legacy permissions instructions helper @bolinfest
- #22791 telemetry: tag sandboxes from permission profiles @bolinfest
- #22872 Forward apps MCP product SKU from Codex config @kumquatexpress
- #22582 Workflow updates @viyatb-oai
- #22792 app-server: stop returning thread permission profiles @bolinfest
- #22795 core: construct test permission profiles directly @bolinfest
- #22900 Disable DMG staging for signed macOS promotion @shijie-oai
- #22877 feat(app-server): update remote control APIs for better UX @owenlin0
- #22899 [codex] Soften SQLite metadata sync failures @wiltzius-openai