## 新功能
- TUI 的 Markdown 现在通过 OSC 8 元数据保持网页链接可点击，拥挤的表格会切换为可读的键/值记录，且不丢失链接目标。（#24472, #24636, #24825）
- 现在可以通过 TUI 的 `/archive` 或 CLI 的 `codex archive` / `codex unarchive` 将会话归档；归档会话在恢复前将禁止恢复/分支操作，直到还原为止。（#25027, #25021）
- 应用服务器集成可以恢复线程的初始回合页面，查看更丰富的 MCP 服务器状态，并通过 `codex app-server --stdio` 启动 stdio 模式。（#23534, #24698, #24940）
- 远程执行设置现在支持为已批准的 OpenAI 主机进行 `CODEX_API_KEY` 注册，而远程控制 WebSocket 使用短期服务器令牌而非 ChatGPT 访问令牌。（#24666, #24141）
- Windows 管理员获得了一个 alpha 版本的 `codex sandbox setup --elevated` 配置路径，并增加了对允许的 Windows 沙盒实现的依赖项支持。（#24831, #23766）
- 一个功能开关控制的独立图像生成扩展可以通过原生 Codex 图像工件完成流水线运行。（#24723, #24972）
## 错误修复
- ChatGPT 认证在五分钟过期窗口前刷新令牌，并在重复使用刷新令牌时显示需要重新登录的路径，而不是陷入通用的云错误。（#23546, #24830）
- 命令安全性增强防止 `/diff` 运行仓库提供的 Git 辅助工具/钩子，避免在非 Windows 主机上执行 PowerShell 解析器，并拒绝浏览器来源的执行服务器 WebSocket 握手。（#24954, #24946, #24947）
- 沙盒命令在中断或 Windows 网络尝试被拒绝后更可靠地清理，并且 `deny` 读取规则在安全命令和绕过审批路径中保持强制执行。（#22729, #19880, #23943）
- 恢复的 TUI 会话从会话记录中预先填充提示历史，多行钩子输出渲染为单独行，Vim 普通模式编辑行为正确。（#24298, #24965, #25022）
- 应用服务器文件系统监视器正确去抖后续批次，独立网络搜索调用现在显示并恢复已完成的搜索活动。（#24716, #24693）
- Bedrock 认证现在回退到 `AWS_REGION` / `AWS_DEFAULT_REGION`，并且不再宣传或发送不支持的 Bedrock GPT 服务层级。（#25171, #25318）
## 文档
- Python SDK 测试版文档和包元数据现在展示标准的 `pip install openai-codex` 路径，刷新了快速入门、API 参考、常见问题解答和示例。（#24836, #24866, #24868, #24870）
- Python SDK 示例和文档现在使用公共名称 `CodexConfig` 来配置 `Codex` / `AsyncCodex`。（#24800）
- 更新的 OpenAI Docs 技能包含了当前的 Codex 手动路由和缓存的说明书获取辅助工具。（#24914）
- 内置工具模式文档现在澄清了 shell、Code Mode、MCP、图像、目标、计划、多智能体及相关工具的默认值、可选字段、边界和枚举。（#24794）
- 应用服务器和执行服务器文档现在涵盖了 API 密钥远程注册、`--stdio`、运行时额外技能根目录以及远程控制服务器令牌行为。（#24666, #24940, #24977, #24141）
## 杂项
- Python SDK 版本现在可以通过 `python-v*` 标签独立于运行时版本进行暂存和发布，同时保留经过审查的运行时依赖锁定。（#24828, #24872）
- 更新了 MCP 依赖至 `rmcp` 1.7.0 并刷新了兼容性代码。（#24763）
- 刷新了 Amazon Bedrock 目录元数据，包括 GPT-5.5，移除了不支持的 OSS 条目，以及仅默认层级的 GPT 模型行为。（#24701, #24960, #25318）
- 移除了过时的应用服务器调试客户端组件，并在删除后清理了工作区。（#25063, #25064, #25065, #25066, #25067, #25068, #25069, #25070, #25075）
- 通过将 Bazel Windows 任务迁移到 Codex 运行器、移除 libubsan 工作区以及还原导致 musl 构建器故障的启动基准测试，精简了 CI/构建维护。（#24952, #24782, #24937）
## 更新日志
完整更新日志：https://github.com/openai/codex/compare/rust-v0.135.0...rust-v0.136.0
- #22729 fix(linux-sandbox): preserve shell cleanup on interruption @viyatb-oai
- #24472 feat(tui): add OSC 8 web links to rich content @fcoury-oai
- #24636 feat(tui): render cramped markdown tables as key-value records [2 of 2] @fcoury-oai
- #24666 Allow API-key auth for remote exec-server registration @sdcoffey
- #24763 Update rmcp to 1.7.0 @anp-oai
- #24825 [codex] Fix hyperlink-aware key-value table rendering @sayan-oai
- #24800 [codex] Rename Python SDK AppServerConfig to CodexConfig @aibrahim-oai
- #24819 [codex] Remove redundant SQLite dynamic tool storage @sayan-oai
- #24828 [codex] Add independent beta release for the Python SDK @aibrahim-oai
- #24836 [codex] Prepare Python SDK beta documentation and package metadata @aibrahim-oai
- #24830 Treat refresh_token_reused 400s as relogin-required @alexsong-oai
- #24866 [codex] Simplify Python SDK install guidance @aibrahim-oai
- #24868 [codex] Remove Python SDK language classifiers @aibrahim-oai
- #24870 [codex] Remove Python SDK beta warning note @aibrahim-oai
- #24872 [codex] Stage Python SDK beta versions from release tags @aibrahim-oai
- #24758 Move memories root setup out of core config @jif-oai
- #24891 Stabilize Guardian client cache key handling @jif-oai
- #24892 Export Guardian prompt cache key helper @jif-oai
- #24893 Add Guardian review prompt cache key @jif-oai
- #24894 Assert Guardian prompt cache key reuse @jif-oai
- #24895 Thread Guardian cache key through session @jif-oai
- #24803 Use stable Guardian prompt cache keys @jif-oai
- #24902 [codex] Fix Guardian argument comment lint @jif-oai
- #24898 Fix memories namespace for Responses API tools @jif-oai
- #24897 Add Guardian review metrics @jif-oai
- #23546 [codex-cli] Refresh near-expiry ChatGPT access tokens before requests @cooper-oai
- #24915 Add thread start contributor facts @jif-oai
- #24916 Add turn error lifecycle contributor @jif-oai
- #24865 [codex] Store pending response items directly @pakrym-oai
- #24914 [codex] Update OpenAI Docs skill @vb-openai
- #24651 Add app-server startup benchmark crate @anp-oai
- #24925 Gate goal tools by thread eligibility @jif-oai
- #24782 Remove libubsan CI workaround @anp-oai
- #24813 extension-api: add TurnItemEmitter to tool calls @sayan-oai
- #23534 feat(app-server): include turns page on thread resume @btraut-openai
- #24698 Expose MCP server info as part of server status @gpeal
- #24903 Reap stale multi-agent slots @jif-oai
- #24936 Fix extension turn item emitter test event ordering @bolinfest
- #24700 [codex] Support ui visibility meta for tools @gpeal
- #24701 chore: add GPT-5.5 to the Amazon Bedrock catalog @celia-oai
- #23363 TUI: Unified mentions tweaks + polish mentions rendering @canvrno-oai
- #24937 Revert "Add app-server startup benchmark crate" @anp-oai
- #24928 Wire task completion into thread-idle lifecycle @jif-oai
- #24723 Add feature-gated standalone image generation extension @won-openai
- #24952 Move Bazel Windows jobs onto codex-runners @anp-oai
- #24940 Add `codex app-server --stdio` alias @anp-oai
- #24954 fix(tui): prevent repository-configured code execution in /diff @fcoury-oai
- #24949 [codex] Handle PowerShell UTF-8 setup failures @iceweasel-oai
- #24960 [codex] Remove Bedrock OSS models from catalog @celia-oai
- #23768 runtime: prepend zsh fork bin dir to PATH @bolinfest
- #19880 fix: cancel Windows sandbox on network denial @viyatb-oai
- #24947 fix(exec-server): reject websocket requests with Origin headers @viyatb-oai
- #24653 [codex] Add user input client ids @alexi-openai
- #23924 Surface filesystem permission profiles in prompt context @bolinfest
- #24108 windows-sandbox: pass workspace roots to runner @bolinfest
- #24974 windows-sandbox: fix capture cancellation test roots @bolinfest
- #24962 Tighten hook output event schemas @abhinav-oai
- #24141 feat(app-server): migrate remote control to server tokens @apanasenko-oai
- #24970 fix(config): use deny for Unix socket permissions @viyatb-oai
- #24946 [codex] Avoid PowerShell safety parsing off Windows @adrian-openai
- #24977 Add runtime extra skill roots API @xl-openai
- #24298 Seed prompt history from resumed messages @etraut-openai
- #23943 fix: preserve deny-read sandboxing for safe commands @bolinfest
- #24716 Fix fs/watch debounce batching @etraut-openai
- #24918 Use internal model context fragments for goal steering @jif-oai
- #24924 Use inject_if_running for active goal steering @jif-oai
- #25063 Drop the stale debug-client manifest @jif-oai
- #25064 Remove the generated debug-client README @jif-oai
- #25065 Delete debug-client app-server process plumbing @jif-oai
- #25066 Retire debug-client interactive command parsing @jif-oai
- #25067 Remove the debug-client CLI entrypoint @jif-oai
- #25068 Delete debug-client JSONL output helper @jif-oai
- #25069 Remove debug-client server event reader @jif-oai
- #25070 Drop debug-client prompt state tracking @jif-oai
- #25075 fix: main @jif-oai
- #24794 [codex] Improve built-in tool schema docs @jif-oai
- #25095 Handle goal usage limits from turn errors @jif-oai
- #25106 Remove stale rollout TODO tests @jif-oai
- #24965 Render multiline hook output in TUI @abhinav-oai
- #25031 [codex] Add model tool mode selector @aibrahim-oai
- #24693 Show activity for standalone web search calls @sayan-oai
- #25110 Move config document helpers into their own module @jif-oai
- #25013 feat: Add focused diagnostics for MCP HTTP send failures @xl-openai
- #24964 [codex] Wait for MCP readiness in core integration tests @anp-oai
- #24972 Route extension image generation through the native image completion pipeline @won-openai
- #24831 Add Windows sandbox provisioning setup command @iceweasel-oai
- #25017 Align TUI permissions labels with app @etraut-openai
- #25027 Add `/archive` slash command @etraut-openai
- #25035 Use session wording in `/rename` confirmation @etraut-openai
- #24161 Add subagent lineage metadata for responsesapi @owenlin0
- #25116 [exec-server] Kill dropped filesystem helpers @erichoracek
- #24180 code-mode: introduce durable session interface @cconger
- #23165 thread-store: store permission profiles @bolinfest
- #25131 [codex] Require model for standalone web search @sayan-oai
- #25134 ci: use issue triage environment for issue workflows @etraut-openai
- #25118 exec-server: preserve fs helper CoreFoundation env @starr-openai
- #25022 [codex] Fix Vim normal mode editing @jinghanx88
- #25161 Recommend Bazel VSCode extension. @anp-oai
- #24996 Filter plugin install suggestions by installed apps @nm-openai
- #23766 Constrain Windows sandbox requirements @abhinav-oai
- #25172 [codex] Update remote connector suggestions @ericning-o
- #25171 fix: Bedrock API key region fallback @celia-oai
- #24541 feat(config) experimental_request_user_input toggle @dylan-hurd-oai
- #25021 Add thread archive CLI commands @etraut-openai
- #25267 Rename multi-agent v2 assignment tool @jif-oai
- #25318 fix: Limit Bedrock GPT models to default service tier @owenlin0
- #25381 [codex] Avoid forced directory refresh during plugin install auth checks @xl-openai
## New Features
- TUI markdown now keeps web links clickable with OSC 8 metadata, and cramped tables switch to readable key/value records without losing link targets. (#24472, #24636, #24825)
- Sessions can now be archived from the TUI with `/archive` or from the CLI with `codex archive` / `codex unarchive`; archived sessions are protected from resume/fork until restored. (#25027, #25021)
- App-server integrations can resume a thread with its initial turns page, see richer MCP server status, and launch stdio mode with `codex app-server --stdio`. (#23534, #24698, #24940)
- Remote execution setup now supports `CODEX_API_KEY` registration for approved OpenAI hosts, while remote-control websockets use short-lived server tokens instead of ChatGPT access tokens. (#24666, #24141)
- Windows admins get an alpha `codex sandbox setup --elevated` provisioning path, plus requirements support for allowed Windows sandbox implementations. (#24831, #23766)
- A feature-gated standalone image generation extension can run through the native Codex image artifact completion pipeline. (#24723, #24972)
## Bug Fixes
- ChatGPT auth refreshes tokens before the five-minute expiry window and shows a relogin-required path for reused refresh tokens instead of collapsing into a generic cloud error. (#23546, #24830)
- Command-safety hardening prevents `/diff` from running repository-provided Git helpers/hooks, avoids PowerShell parser execution on non-Windows hosts, and rejects browser-origin exec-server websocket handshakes. (#24954, #24946, #24947)
- Sandboxed commands clean up more reliably after interruptions or denied Windows network attempts, and `deny` read rules stay enforced for safe-command and approval-bypass paths. (#22729, #19880, #23943)
- Resumed TUI sessions seed prompt history from the session transcript, multiline hook output renders as separate rows, and Vim normal-mode editing behaves correctly. (#24298, #24965, #25022)
- App-server filesystem watchers debounce later batches correctly, and standalone web search calls now show and restore completed search activity. (#24716, #24693)
- Bedrock auth now falls back to `AWS_REGION` / `AWS_DEFAULT_REGION`, and unsupported Bedrock GPT service tiers are no longer advertised or sent. (#25171, #25318)
## Documentation
- Python SDK beta docs and package metadata now present the standard `pip install openai-codex` path, refreshed quickstarts, API reference, FAQ, and examples. (#24836, #24866, #24868, #24870)
- Python SDK examples and docs now use the public `CodexConfig` name for configuring `Codex` / `AsyncCodex`. (#24800)
- The bundled OpenAI Docs skill was updated with current Codex manual routing and a cached manual fetch helper. (#24914)
- Built-in tool schema descriptions now clarify defaults, optional fields, bounds, and enums across shell, Code Mode, MCP, image, goal, plan, multi-agent, and related tools. (#24794)
- App-server and exec-server docs now cover API-key remote registration, `--stdio`, runtime extra skill roots, and remote-control server-token behavior. (#24666, #24940, #24977, #24141)
## Chores
- Python SDK releases can now be staged and published independently from runtime releases using `python-v*` tags while preserving the reviewed runtime dependency pin. (#24828, #24872)
- Updated MCP dependencies to `rmcp` 1.7.0 and refreshed compatibility code. (#24763)
- Refreshed Amazon Bedrock catalog metadata, including GPT-5.5, removal of unsupported OSS entries, and default-tier-only GPT model behavior. (#24701, #24960, #25318)
- Removed the stale app-server debug-client pieces and cleaned up the workspace after deletion. (#25063, #25064, #25065, #25066, #25067, #25068, #25069, #25070, #25075)
- Trimmed CI/build maintenance by moving Bazel Windows jobs to Codex runners, removing the libubsan workaround, and reverting the startup benchmark that broke musl builders. (#24952, #24782, #24937)
## Changelog
Full Changelog: https://github.com/openai/codex/compare/rust-v0.135.0...rust-v0.136.0
- #22729 fix(linux-sandbox): preserve shell cleanup on interruption @viyatb-oai
- #24472 feat(tui): add OSC 8 web links to rich content @fcoury-oai
- #24636 feat(tui): render cramped markdown tables as key-value records [2 of 2] @fcoury-oai
- #24666 Allow API-key auth for remote exec-server registration @sdcoffey
- #24763 Update rmcp to 1.7.0 @anp-oai
- #24825 [codex] Fix hyperlink-aware key-value table rendering @sayan-oai
- #24800 [codex] Rename Python SDK AppServerConfig to CodexConfig @aibrahim-oai
- #24819 [codex] Remove redundant SQLite dynamic tool storage @sayan-oai
- #24828 [codex] Add independent beta release for the Python SDK @aibrahim-oai
- #24836 [codex] Prepare Python SDK beta documentation and package metadata @aibrahim-oai
- #24830 Treat refresh_token_reused 400s as relogin-required @alexsong-oai
- #24866 [codex] Simplify Python SDK install guidance @aibrahim-oai
- #24868 [codex] Remove Python SDK language classifiers @aibrahim-oai
- #24870 [codex] Remove Python SDK beta warning note @aibrahim-oai
- #24872 [codex] Stage Python SDK beta versions from release tags @aibrahim-oai
- #24758 Move memories root setup out of core config @jif-oai
- #24891 Stabilize Guardian client cache key handling @jif-oai
- #24892 Export Guardian prompt cache key helper @jif-oai
- #24893 Add Guardian review prompt cache key @jif-oai
- #24894 Assert Guardian prompt cache key reuse @jif-oai
- #24895 Thread Guardian cache key through session @jif-oai
- #24803 Use stable Guardian prompt cache keys @jif-oai
- #24902 [codex] Fix Guardian argument comment lint @jif-oai
- #24898 Fix memories namespace for Responses API tools @jif-oai
- #24897 Add Guardian review metrics @jif-oai
- #23546 [codex-cli] Refresh near-expiry ChatGPT access tokens before requests @cooper-oai
- #24915 Add thread start contributor facts @jif-oai
- #24916 Add turn error lifecycle contributor @jif-oai
- #24865 [codex] Store pending response items directly @pakrym-oai
- #24914 [codex] Update OpenAI Docs skill @vb-openai
- #24651 Add app-server startup benchmark crate @anp-oai
- #24925 Gate goal tools by thread eligibility @jif-oai
- #24782 Remove libubsan CI workaround @anp-oai
- #24813 extension-api: add TurnItemEmitter to tool calls @sayan-oai
- #23534 feat(app-server): include turns page on thread resume @btraut-openai
- #24698 Expose MCP server info as part of server status @gpeal
- #24903 Reap stale multi-agent slots @jif-oai
- #24936 Fix extension turn item emitter test event ordering @bolinfest
- #24700 [codex] Support ui visibility meta for tools @gpeal
- #24701 chore: add GPT-5.5 to the Amazon Bedrock catalog @celia-oai
- #23363 TUI: Unified mentions tweaks + polish mentions rendering @canvrno-oai
- #24937 Revert "Add app-server startup benchmark crate" @anp-oai
- #24928 Wire task completion into thread-idle lifecycle @jif-oai
- #24723 Add feature-gated standalone image generation extension @won-openai
- #24952 Move Bazel Windows jobs onto codex-runners @anp-oai
- #24940 Add `codex app-server --stdio` alias @anp-oai
- #24954 fix(tui): prevent repository-configured code execution in /diff @fcoury-oai
- #24949 [codex] Handle PowerShell UTF-8 setup failures @iceweasel-oai
- #24960 [codex] Remove Bedrock OSS models from catalog @celia-oai
- #23768 runtime: prepend zsh fork bin dir to PATH @bolinfest
- #19880 fix: cancel Windows sandbox on network denial @viyatb-oai
- #24947 fix(exec-server): reject websocket requests with Origin headers @viyatb-oai
- #24653 [codex] Add user input client ids @alexi-openai
- #23924 Surface filesystem permission profiles in prompt context @bolinfest
- #24108 windows-sandbox: pass workspace roots to runner @bolinfest
- #24974 windows-sandbox: fix capture cancellation test roots @bolinfest
- #24962 Tighten hook output event schemas @abhinav-oai
- #24141 feat(app-server): migrate remote control to server tokens @apanasenko-oai
- #24970 fix(config): use deny for Unix socket permissions @viyatb-oai
- #24946 [codex] Avoid PowerShell safety parsing off Windows @adrian-openai
- #24977 Add runtime extra skill roots API @xl-openai
- #24298 Seed prompt history from resumed messages @etraut-openai
- #23943 fix: preserve deny-read sandboxing for safe commands @bolinfest
- #24716 Fix fs/watch debounce batching @etraut-openai
- #24918 Use internal model context fragments for goal steering @jif-oai
- #24924 Use inject_if_running for active goal steering @jif-oai
- #25063 Drop the stale debug-client manifest @jif-oai
- #25064 Remove the generated debug-client README @jif-oai
- #25065 Delete debug-client app-server process plumbing @jif-oai
- #25066 Retire debug-client interactive command parsing @jif-oai
- #25067 Remove the debug-client CLI entrypoint @jif-oai
- #25068 Delete debug-client JSONL output helper @jif-oai
- #25069 Remove debug-client server event reader @jif-oai
- #25070 Drop debug-client prompt state tracking @jif-oai
- #25075 fix: main @jif-oai
- #24794 [codex] Improve built-in tool schema docs @jif-oai
- #25095 Handle goal usage limits from turn errors @jif-oai
- #25106 Remove stale rollout TODO tests @jif-oai
- #24965 Render multiline hook output in TUI @abhinav-oai
- #25031 [codex] Add model tool mode selector @aibrahim-oai
- #24693 Show activity for standalone web search calls @sayan-oai
- #25110 Move config document helpers into their own module @jif-oai
- #25013 feat: Add focused diagnostics for MCP HTTP send failures @xl-openai
- #24964 [codex] Wait for MCP readiness in core integration tests @anp-oai
- #24972 Route extension image generation through the native image completion pipeline @won-openai
- #24831 Add Windows sandbox provisioning setup command @iceweasel-oai
- #25017 Align TUI permissions labels with app @etraut-openai
- #25027 Add `/archive` slash command @etraut-openai
- #25035 Use session wording in `/rename` confirmation @etraut-openai
- #24161 Add subagent lineage metadata for responsesapi @owenlin0
- #25116 [exec-server] Kill dropped filesystem helpers @erichoracek
- #24180 code-mode: introduce durable session interface @cconger
- #23165 thread-store: store permission profiles @bolinfest
- #25131 [codex] Require model for standalone web search @sayan-oai
- #25134 ci: use issue triage environment for issue workflows @etraut-openai
- #25118 exec-server: preserve fs helper CoreFoundation env @starr-openai
- #25022 [codex] Fix Vim normal mode editing @jinghanx88
- #25161 Recommend Bazel VSCode extension. @anp-oai
- #24996 Filter plugin install suggestions by installed apps @nm-openai
- #23766 Constrain Windows sandbox requirements @abhinav-oai
- #25172 [codex] Update remote connector suggestions @ericning-o
- #25171 fix: Bedrock API key region fallback @celia-oai
- #24541 feat(config) experimental_request_user_input toggle @dylan-hurd-oai
- #25021 Add thread archive CLI commands @etraut-openai
- #25267 Rename multi-agent v2 assignment tool @jif-oai
- #25318 fix: Limit Bedrock GPT models to default service tier @owenlin0
- #25381 [codex] Avoid forced directory refresh during plugin install auth checks @xl-openai