chore(baseline): refresh Codex CLI runtime baseline to 0.139.0

Stable rust-v0.139.0: code-mode standalone web search, oneOf/allOf MCP
schema preservation, doctor editor/pager environment details, and
marketplace list --json source with cached catalog responses; no new
TOML config keys and no breaking changes. Pins move across the
baseline, runtime env, README, test fixtures, and the surface adoption
matrix (stable boundary now excludes 0.140.0-alpha.*).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: rldyourmnd

README.md

@@ -69,13 +69,13 @@ scripts/install_system_codex.sh --apply
 scripts/doctor_system_codex.sh
 ```
 
-The Codex CLI runtime baseline is `0.138.0`. On machines that need a runtime
+The Codex CLI runtime baseline is `0.139.0`. On machines that need a runtime
 install or update, use the official non-interactive installer or the explicit
 npm stable pin before running the repository config installer:
 
 ```bash
 curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_NON_INTERACTIVE=1 sh
-npm install -g @openai/codex@0.138.0
+npm install -g @openai/codex@0.139.0
 codex --version
 codex doctor
 codex plugin list --json

config/mcp-runtime-versions.env

@@ -5,7 +5,7 @@ DART_FLUTTER_MCP_RUNTIME=external-local-dart-sdk
 NODE_MAJOR_VERSION=24
 BUN_VERSION=1.3.14
 DART_SDK_VERSION=3.12.0
-CODEX_CLI_VERSION=0.138.0
+CODEX_CLI_VERSION=0.139.0
 GITHUB_MCP_SERVER_VERSION=1.2.0
 MCP_PYTHON_SDK_VERSION=1.27.2
 SERENA_AGENT_VERSION=1.5.3

references/codex-baseline.json

@@ -1,12 +1,12 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "schema_version": 1,
-  "verified_on": "2026-06-08",
+  "verified_on": "2026-06-10",
   "baseline": {
     "codex_cli": {
-      "version": "0.138.0",
+      "version": "0.139.0",
       "npm_package": "@openai/codex",
-      "ref": "https://github.com/openai/codex/releases/tag/rust-v0.138.0"
+      "ref": "https://github.com/openai/codex/releases/tag/rust-v0.139.0"
     },
     "runtime_contract": {
       "hooks": "command-only",

references/codex-surface-adoption.md

@@ -1,24 +1,27 @@
 # Codex Surface Adoption
 
-Verified: 2026-06-09
+Verified: 2026-06-10
 
 Source of truth:
 - Runtime baseline: `references/codex-baseline.json`
 - Runtime package pin: package metadata for `@openai/codex`
-- Official changelog and config docs: `https://github.com/openai/codex/releases/tag/rust-v0.138.0` and `https://developers.openai.com/codex/changelog`
+- Official changelog and config docs: `https://github.com/openai/codex/releases/tag/rust-v0.139.0` and `https://developers.openai.com/codex/changelog`
 
 ## Decisions
 
 | Surface | Introduced | Decision | Implementation | Validator |
 | --- | --- | --- | --- | --- |
-| Codex CLI runtime baseline | 0.138.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.138.0`; local installed runtime must report `codex-cli 0.138.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| Codex CLI runtime baseline | 0.139.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.139.0`; local installed runtime must report `codex-cli 0.139.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
 | `[tui].status_line` owner status line | 0.119.0 | Adopted | `scripts/install_system_codex.sh` manages `status_line = ["model-with-reasoning", "context-remaining", "five-hour-limit", "weekly-limit", "git-branch", "current-dir"]` and `status_line_use_colors = true` in `config.toml` and both `rldyour-yolo`/`rldyour-safe` profile configs so every session footer shows model, context remainder, and five-hour/weekly rate-limit remainder. Only these two keys are managed; other user `[tui]` keys are preserved. | `tests/unit/test_install_system_codex_tui_status_line.py` |
 | `/app` desktop handoff and Windows workspace launch | 0.138.0 | Operational | Treat as runtime capability. Repository config does not hard-code Desktop handoff state, but installed-runtime smoke may rely on the `codex` binary being at the 0.138.0 baseline before diagnosing app/server integration behavior. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
 | Local image file paths exposed to the model | 0.138.0 | Capability-dependent | Local image attachment and generated-image path exposure is runtime behavior. Do not add repository claims about availability unless installed-runtime checks prove the active account/session supports the capability. | n/a |
 | Plugin command JSON and richer plugin metadata | 0.138.0 | Operational | 0.138.0 documents richer plugin JSON surfaces. The adapter already treats JSON plugin inventory as installed-runtime evidence and keeps static validators from inventing runtime plugin state. | root `scripts/ry_repair_sync.py --plan --apply-system --json` |
 | App-server token-usage and v2 personal access token support | 0.138.0 | Capability-dependent | Authentication tokens and account usage data remain external runtime state. Do not store PATs, OAuth tokens, or account usage in repository config, logs, memories, or fixtures. | `scripts/validate_instruction_docs.py` |
 | Model-defined reasoning effort ordering | 0.138.0 | Operational | Keep managed subagent TOML defaults static unless the owner changes model policy. Runtime-provided effort ordering is accepted as CLI behavior, not a repository schema migration. | `scripts/validate_agent_tools.py` |
-| Stable release boundary vs. prereleases | 0.138.0 | Adopted | Stable `0.138.0` is the release-grade baseline. `0.139.0-alpha.*` and later alpha tags remain excluded unless the owner explicitly enables prerelease runtime policy. | `scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| Stable release boundary vs. prereleases | 0.139.0 | Adopted | Stable `0.139.0` is the release-grade baseline. `0.140.0-alpha.*` and later alpha tags remain excluded unless the owner explicitly enables prerelease runtime policy. | `scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| Code-mode standalone web search and richer MCP schemas | 0.139.0 | Operational | 0.139.0 lets code mode call standalone web search (including nested JS tool calls) and preserves `oneOf`/`allOf` plus more shallow structure in compacted tool schemas. Runtime behavior only: keep MCP definitions in `.mcp.json` unchanged and treat improved schema fidelity as compatibility, not a config migration. | `scripts/smoke_mcp_capabilities.py` |
+| `codex doctor` editor/pager environment details | 0.139.0 | Operational | `codex doctor` now reports editor and pager environment details locally while redacting raw values in JSON output; keep using the doctor in installed-runtime diagnostics without storing raw environment values. | `scripts/doctor_system_codex.sh --quick` |
+| Marketplace `list --json` source field and cached catalog responses | 0.139.0 | Operational | `codex plugin marketplace list --json` now includes each marketplace source and plugin lists may return from the cached remote catalog before background refresh; installed-runtime checks must treat cached-vs-fresh catalog responses as equivalent evidence. | root `scripts/ry_repair_sync.py --plan --json` |
 | `codex doctor` diagnostics | 0.135.0 | Operational | Owner doctor flow remains `scripts/doctor_system_codex.sh`; `/ry-repair --apply-system` also plans direct `codex doctor` when installed runtime is available. | `scripts/doctor_system_codex.sh --quick --strict-runtime`; root `scripts/ry_repair_sync.py --plan --apply-system --json` |
 | Remote `/status` server-version details | 0.135.0 | Not applicable | Remote TUI status output is user-facing runtime behavior and does not change repository config. | n/a |
 | `/permissions` named/custom profile display | 0.135.0 | Operational | Use `/permissions` and `codex doctor` to inspect resolved permission profiles. Do not migrate the owner profile from the legacy `sandbox_mode` dialect without an explicit policy change. | `scripts/validate_instruction_docs.py` |

tests/unit/test_check_mcp_runtime_versions.py

@@ -18,7 +18,7 @@ def test_parse_env_file_handles_comments_quotes_and_blanks(tmp_path: Path) -> No
     env_file.write_text(
         """
 # comment
-CODEX_CLI_VERSION=0.138.0
+CODEX_CLI_VERSION=0.139.0
 SERENA_AGENT_VERSION='1.5.1'
 EMPTY_LINE_IGNORED
 SHADCN_VERSION="3.5.0"
@@ -27,7 +27,7 @@ def test_parse_env_file_handles_comments_quotes_and_blanks(tmp_path: Path) -> No
         encoding="utf-8",
     )
     assert mod.parse_env_file(env_file) == {
-        "CODEX_CLI_VERSION": "0.138.0",
+        "CODEX_CLI_VERSION": "0.139.0",
         "SERENA_AGENT_VERSION": "1.5.1",
         "SHADCN_VERSION": "3.5.0",
         "GITHUB_MCP_SERVER_VERSION": "1.1.0",