0.137.0-cometix

New Features

• TUI controls now support F13-F24 keybindings, paste in searchable menus, and a compact reasoning-only status/title item (openai#25329, openai#25400, openai#25504).
• Enterprise/admin flows now show monthly credit limits and can apply cloud-managed config bundles, including EDU workspaces (openai#24812, openai#24617, openai#24619, openai#24620, openai#24622, openai#25963).
• Remote-control clients can start pairing and list or revoke controller grants through app-server v2 RPCs (openai#25675, openai#25785).
• Plugin workflows gained machine-readable codex plugin list --json output and cached remote catalog suggestions (openai#25330, openai#25457).
• Hosted web and image tools are available in more code-mode flows, with standalone web searches able to run in parallel (openai#25176, openai#25702, openai#25890, openai#25923).
• Multi-agent v2 keeps runtime choice with each thread and exposes cleaner follow-up and metadata defaults for spawned agents (openai#25266, openai#25636, openai#25720, openai#25721, openai#25722, openai#25841, openai#26114).

Bug Fixes

• Cancelling a submitted prompt before visible output now restores the draft, attachments, and collaboration mode for editing (openai#25316).
• Slash-command filtering and footer shortcut hints now reset or render according to the current UI state (openai#25492, openai#25625).
• Platform reliability improved for macOS app launches and Windows SQLite startup, thread resume, and sandbox setup refreshes (openai#25485, openai#25490, openai#25509, openai#25949).
• Plugin loading preserves app manifest order, deduplicates local/remote curated installs, and treats malformed skills fields as warnings (openai#25491, openai#25681, openai#25717, openai#25782).
• Permission requests and approvals now carry environment identity, and managed MITM proxying exports readable CA bundles to child commands (openai#25850, openai#25858, openai#25862, openai#22668).
• Local session history is safer for compressed rollouts, renamed titles, pathless side-chat reloads, and stack-heavy startup/config rebuilds (openai#25087, openai#25624, openai#25661, openai#25814, openai#25844, openai#25847).

Documentation

• Added app-server docs and generated schema updates for monthly credit limits, remote-control RPCs, and environment-scoped permission approvals (openai#24812, openai#25675, openai#25785, openai#25862).
• Moved repo review rules and contributor conventions into AGENTS.md, including Rust test-module layout and Python 3 compatibility guidance (openai#25682, openai#25690, openai#25738).

Chores

• Root formatting and Justfile workflows are more complete and Windows-aware (openai#24983, openai#25165, openai#25683).
• Rust CI and release workflows use the git CLI for Cargo fetches to avoid intermittent libgit2/submodule failures (openai#25644, openai#25775).
• Python SDK releases now publish runtime wheels from the SDK workflow and pin to a glibc-compatible runtime package (openai#25906, openai#25907).
• Bazel CI’s BuildBuddy wrapper was reintroduced with Windows-safe process handling and validation (openai#25915).
• Shared prompts, context fragments, and skills plumbing moved into dedicated crates/extension paths to reduce codex-core coupling (openai#25151, openai#25953, openai#25959, openai#26106, openai#26122, openai#26167).

Changelog

Full Changelog: openai/codex@rust-v0.136.0...rust-v0.137.0

• openai#25329 feat(tui): allow function keys through f24 in keymaps @fcoury-oai
• openai#24617 Add config bundle transport types @joeflorencio-openai
• openai#25435 Add build_unsigned_archive release mode @shijie-oai
• openai#24619 Compose requirements layers @joeflorencio-openai
• openai#24620 Add cloud-managed config layer support @joeflorencio-openai
• openai#25462 Revert "Add build_unsigned_archive release mode" @shijie-oai
• openai#25113 store and expose parent_thread_id on Threads @owenlin0
• openai#25266 Set multi-agent v2 dogfood defaults @jif-oai
• openai#25060 Add goal extension idle continuation @jif-oai
• openai#25576 Use templates for goal steering prompts @jif-oai
• openai#25577 Remove Plan-mode gate from idle turn injection @jif-oai
• openai#25096 Add goal extension GoalApi @jif-oai
• openai#25087 Read compressed rollouts and materialize before append @jif-oai
• openai#25628 [codex] fix compressed rollout fixture SessionMeta initialization @fcoury-oai
• openai#25316 feat(tui): restore output-free cancelled prompts @fcoury-oai
• openai#23763 Preserve auto-review approval policy in codex exec @won-openai
• openai#25400 Allow paste in searchable selection menus @charliemarsh-oai
• openai#25485 Use deep links for macOS codex app paths @etraut-openai
• openai#25492 Reset slash popup selection when filter changes @etraut-openai
• openai#25504 Add reasoning-only status surface item @etraut-openai
• openai#25624 Preserve renamed thread titles during reconciliation @jif-oai
• openai#25089 Compress cold local rollouts @jif-oai
• openai#25490 Disable SQLite intrinsics for Windows x64 releases @etraut-openai
• openai#25603 [codex] Inherit raw events for spawned child listeners @vivi
• openai#25644 [codex] Use git CLI for release Cargo fetches @shijie-oai
• openai#25655 nit: drop todo @jif-oai
• openai#25654 Parallelize cold rollout compression @jif-oai
• openai#25121 exec-server: add environment path refs @starr-openai
• openai#25636 [codex] Rename multi-agent v2 assign_task to followup_task @jif-oai
• openai#25491 Preserve plugin app manifest order @charlesgong-openai
• openai#24983 [codex] Make justfile recipes Windows-aware @iceweasel-oai
• openai#25151 [codex] Consolidate shared prompts in codex-prompts @anp-oai
• openai#25659 Throttle repeated rollout compression runs @jif-oai
• openai#25165 Check root Python script formatting in CI @anp-oai
• openai#23767 [codex-rs] auto-review model override @won-openai
• openai#25149 exec-server: canonicalize bound filesystem paths @starr-openai
• openai#25669 fix: deflake zsh-fork approval test @jif-oai
• openai#24979 feat: gate unified exec zsh fork composition @bolinfest
• openai#24980 refactor: hide shell override for zsh fork unified exec @bolinfest
• openai#25679 Add rollout compression counters @jif-oai
• openai#25682 [codex] document out-of-line test module convention @anp-oai
• openai#25680 Add rollout compression histograms @jif-oai
• openai#25689 [codex] Generalize deferred nested tool guidance @sayan-oai
• openai#25690 Add Python version compatibility guidance @anp-oai
• openai#25681 fix: Deduplicate installed local and remote curated plugins @xl-openai
• openai#25701 fix: rename McpServer to TestAppServer @bolinfest
• openai#25702 [codex] enable parallel standalone web search calls @sayan-oai
• openai#25705 Fix stale TestAppServer rename in plugin_list test @bolinfest
• openai#25684 Move tool search metadata onto ToolExecutor @jif-oai
• openai#25625 fix(tui): clarify footer shortcut overlay hints @fcoury-oai
• openai#25649 [codex] Publish release symbol artifacts @nornagon-openai
• openai#25661 Reject directory rollout paths for pathless side chats @bolinfest
• openai#22668 Wire managed MITM CA trust into child env @winston-openai
• openai#25712 app-server: remove experimental persist_extended_history bool flag @owenlin0
• openai#24621 Move cloud requirements crate to cloud config @joeflorencio-openai
• openai#25717 Handle invalid plugin skills manifest field @xli-oai
• openai#25675 feat(remote-control): add pairing start @apanasenko-oai
• openai#25683 [codex] Add comprehensive root formatting check @anp-oai
• openai#25738 Move code review rules into AGENTS @pakrym-oai
• openai#24812 feat: show enterprise monthly credit limits in status @efrazer-oai
• openai#25330 [codex] Add plugin list JSON output @xl-openai
• openai#25457 [codex] Cache remote plugin catalog for suggestions @xl-openai
• openai#25783 [codex] Move plugin discoverable logic into core-plugins @xl-openai
• openai#25782 [codex] Validate plugin skill base names @xl-openai
• openai#25814 feat: reuse compressed rollout search snippets @jif-oai
• openai#25720 Add multi-agent runtime metadata types @jif-oai
• openai#25721 Persist multi-agent runtime metadata @jif-oai
• openai#25722 Resolve per-thread multi-agent runtime @jif-oai
• openai#25841 session: keep startup prewarm aligned with resolved multi-agent runtime @jif-oai
• openai#25840 fix: main oops @jif-oai
• openai#25723 Test remote multi-agent runtime selector override @jif-oai
• openai#25724 Test runtime selector before first turn @jif-oai
• openai#25844 Reduce stack pressure in session startup and config rebuilds @jif-oai
• openai#25857 flake: Keep plugin test homes alive @jif-oai
• openai#25847 Run Codex async main on a sized stack @jif-oai
• openai#25775 [codex] Use git CLI for Cargo fetches across Rust workflows @anp-oai
• openai#25167 [app-server][core] Add connector-level Guardian reviewer overrides @zamoshchin-openai
• openai#25868 Skip startup prewarm when websockets are disabled @jif-oai
• openai#25156 Route Bazel CI through shared BuildBuddy remote config wrapper @anp-oai
• openai#25739 core: derive built-in permission profiles from raw policies @bolinfest
• openai#25909 [codex] Revert shared BuildBuddy Bazel wrapper @anp-oai
• openai#25850 Key request-permission grants by environment @jif-oai
• openai#25707 [codex-analytics] Track CodexErr details in turn analytics @rhan-oai
• openai#25858 Add environmentId to request_permissions @jif-oai
• openai#25176 Route standalone image generation through host finalization md @won-openai
• openai#25916 Fix Windows release PDB staging @shijie-oai
• openai#25862 Propagate permission approval environment id @jif-oai
• openai#25907 [codex] Pin Python SDK to glibc-compatible runtime @aibrahim-oai
• openai#24859 Use environment secrets for Azure signing @shijie-oai
• openai#25509 Fix Windows running thread resume path normalization @etraut-openai
• openai#25135 Populate workspace kind on Codex turn events @knittel-openai
• openai#24622 Switch runtime to cloud config bundle @joeflorencio-openai
• openai#25938 fix: update image generation test helper rename @joeflorencio-openai
• openai#25911 core: stop passing legacy SandboxPolicy to guardian reviews @bolinfest
• openai#25668 Split cloud config bundle service modules @joeflorencio-openai
• openai#25890 [codex] Keep hosted tools visible in code-only mode @aibrahim-oai
• openai#25867 Add remote request permissions integration coverage @jif-oai
• openai#25943 config: remove dead profile sandbox fallback @bolinfest
• openai#25948 Revert "Use environment secrets for Azure signing" @shijie-oai
• openai#25923 Expose standalone image generation in code mode @won-openai
• openai#25906 [codex] Publish Python runtime wheels with Python SDK releases @aibrahim-oai
• openai#25953 feat: add skills extension scaffold @jif-oai
• openai#25915 [codex] Fix Windows BuildBuddy Bazel wrapper execution @anp-oai
• openai#25926 config: express implicit sandbox defaults as permission profiles @bolinfest
• openai#25959 feat: add extension turn-input contributors @jif-oai
• openai#25963 Allow EDU accounts to fetch cloud config bundles @joeflorencio-openai
• openai#25785 feat(app-server): add remote control client management RPCs @apanasenko-oai
• openai#25988 revert: publish release symbol artifacts @shijie-oai
• openai#26114 feat: default hide_spawn_agent_metadata to true @jif-oai
• openai#26122 chore: extract context fragments into dedicated crate @jif-oai
• openai#26144 Reject MAv2 close_agent self-targets @jif-oai
• openai#26106 skills: resolve per-turn catalogs from turn input context @jif-oai
• openai#26155 fix: serialize goal progress accounting @jif-oai
• openai#26156 chore: mechanical rename @jif-oai
• openai#26167 Implement v1 skills extension prompt injection @jif-oai
• openai#26176 fix: main @jif-oai
• openai#25949 [codex] Restore setup helper UAC manifest @iceweasel-oai