chore(runtime): update Codex baseline to 0.137.0

rldyourmnd · rldyourmnd · commit ddd088c3315e · 2026-06-04T18:16:01.000+07:00
diff --git a/.github/workflows/README.md b/.github/workflows/README.md
@@ -11,7 +11,7 @@ runner labels and keep third-party actions pinned to full commit SHAs.
 | --- | --- |
 | `validate.yml` | Fast validation and optional runtime/release/MCP scopes on Ubuntu standard runners. |
 | `cross-platform.yml` | Lightweight metadata/path smoke on standard Ubuntu, Windows, and macOS public runners. |
-| `security-static.yml` | Action pin validation, actionlint, text security scan, ShellCheck, Pyright, Semgrep. |
+| `security-static.yml` | Action pin validation, actionlint, text security scan, ShellCheck, and Pyright. |
 | `secret-scan.yml` | Gitleaks history scan for accidental secrets. |
 | `codeql.yml` | CodeQL code scanning for the adapter source surface. |
 | `dependency-review.yml` | Pull-request dependency diff review. |
diff --git a/.github/workflows/security-static.yml b/.github/workflows/security-static.yml
@@ -56,14 +56,3 @@ jobs:
           . config/mcp-runtime-versions.env
           PYRIGHT_PYTHON_FORCE_VERSION=latest \
             uv run --with "pyright==1.1.409" --with "mcp==${MCP_PYTHON_SDK_VERSION}" --with pyyaml python -m pyright --project pyrightconfig.json
-
-      - name: Semgrep CLI
-        run: |
-          # shellcheck source=config/mcp-runtime-versions.env
-          . config/mcp-runtime-versions.env
-          uvx "semgrep==${SEMGREP_CLI_VERSION}" \
-            --config auto \
-            --exclude-rule bash.lang.security.ifs-tampering.ifs-tampering \
-            --error \
-            --timeout 60 \
-            .
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,12 @@ The format follows Keep a Changelog, and marketplace/plugin versions follow Sema
 ## [Unreleased]
 
 
+## [1.1.24] - 2026-06-04
+
+### Changed
+
+- Sync upstream runtime baselines and remove active Semgrep usage.
+
 ## [1.1.23] - 2026-06-02
 
 ### Changed
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -50,7 +50,7 @@ All pull requests run the following workflows automatically:
 
 - `validate`: Ubuntu-hosted fast/runtime/release/MCP scopes, MCP runtime pin freshness (advisory only on pull requests), and MCP safe-call smoke.
 - `cross-platform`: lightweight metadata/path smoke on standard Ubuntu, Windows, and macOS public runners.
-- `security-static`: action pins, actionlint, text security scan, ShellCheck, Pyright, Semgrep CLI. Also runs on a weekly schedule.
+- `security-static`: action pins, actionlint, text security scan, ShellCheck, and Pyright. Also runs on a weekly schedule.
 - `codeql`: GitHub CodeQL analysis for Python and GitHub Actions with `security-and-quality` queries. Also runs on a weekly schedule.
 - `dependency-review`: blocks merges that introduce dependencies with high-severity vulnerabilities or licenses outside the AGPL-3.0-or-later compatible allow-list.
 - `labeler`: applies area labels based on changed paths.
diff --git a/README.md b/README.md
@@ -69,6 +69,22 @@ scripts/install_system_codex.sh --apply
 scripts/doctor_system_codex.sh
 ```
 
+The Codex CLI runtime baseline is `0.137.0`. On machines that need a runtime
+install or update, use the official non-interactive installer or the explicit
+npm stable pin before running the repository config installer:
+
+```bash
+curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_NON_INTERACTIVE=1 sh
+npm install -g @openai/codex@0.137.0
+codex --version
+codex doctor
+codex plugin list --json
+```
+
+`scripts/ry_repair_sync.py --plan --apply-system --latest-from-github --json`
+plans these installed-runtime diagnostics and reports `NOT PROVEN` when `codex`
+is not available locally.
+
 The default install posture is owner-standard full-auto:
 `~/.codex/config.toml` receives the active owner defaults, and
 `~/.codex/rldyour-yolo.config.toml` is the explicit `--profile rldyour-yolo`
@@ -194,7 +210,7 @@ GitHub Actions run automatically on this public repository:
 
 - `validate.yml`: on every push to `main` and every pull request targeting `main`, runs Ubuntu-hosted fast validation, optional runtime/release/MCP scopes, MCP runtime pin freshness, and MCP safe-call smoke. `workflow_dispatch` is available for narrower scopes.
 - `cross-platform.yml`: runs lightweight metadata/path smoke on standard Ubuntu, Windows, and macOS public runners.
-- `security-static.yml`: on push to `main`, pull requests, and weekly schedule, runs action pin validation, actionlint, repository text security scan, ShellCheck, Pyright, and Semgrep CLI without paid GitHub Code Security.
+- `security-static.yml`: on push to `main`, pull requests, and weekly schedule, runs action pin validation, actionlint, repository text security scan, ShellCheck, and Pyright without paid GitHub Code Security.
 - `codeql.yml`: on push to `main`, pull requests, and weekly schedule, runs GitHub CodeQL analysis with `security-and-quality` queries for Python and GitHub Actions.
 - `dependency-check.yml`: on daily schedule and on push to MCP runtime pin sources, checks pinned MCP runtime versions through `scripts/check_mcp_runtime_versions.py --fail-on-outdated`. Surfaces stale pins as a maintainer-visible signal without blocking pull requests.
 - `release.yml`: on push of a SemVer tag matching `X.Y.Z[-pre]`, validates `VERSION` and `CHANGELOG.md`, builds a deterministic bundle, generates a release manifest and SPDX 2.3 SBOM, exports the GitHub dependency-graph SBOM when available, attaches artifact attestations, and publishes the GitHub Release. `workflow_dispatch` remains available as a fallback.
diff --git a/SECURITY.md b/SECURITY.md
@@ -12,7 +12,7 @@ historical patch in the line.
 
 | Version | Supported |
 | --- | --- |
-| Current exact tag `1.1.23` | Yes |
+| Current exact tag `1.1.24` | Yes |
 | Older `1.1.*` tags | No; upgrade to current exact tag |
 | Older minor / major lines | No |
 
@@ -58,8 +58,7 @@ These targets are best-effort and not contractual.
   Scanning Push Protection and related live repository settings are required
   public-adapter controls and are verified from the private root control plane
   when an owner token is available.
-- No-paid static security gates use ShellCheck, Pyright, Semgrep CLI, action pin validation, repository text security scanning, and custom repository validators.
-- Semgrep excludes only the `bash.lang.security.ifs-tampering.ifs-tampering` rule because the repository intentionally uses `IFS=$'\n\t'` as part of its strict shell prologue and validates shell scripts separately with ShellCheck.
+- No-paid static security gates use ShellCheck, Pyright, action pin validation, repository text security scanning, CodeQL, Gitleaks, dependency review, and custom repository validators.
 - Release bundles use deterministic archives, release manifests, generated SPDX 2.3 SBOMs, GitHub artifact attestations, and (when available) GitHub dependency-graph SBOM export.
 - `scripts/scan_text_security.py` scans tracked text and agent-only paths for credential patterns and hidden Unicode controls without printing matched values.
 - The full git history was scanned with `gitleaks` (8.30.1) before the public release; 190 commits, 0 leaks found.
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.1.23
+1.1.24
diff --git a/config/mcp-runtime-versions.env b/config/mcp-runtime-versions.env
@@ -5,7 +5,7 @@ DART_FLUTTER_MCP_RUNTIME=external-local-dart-sdk
 NODE_MAJOR_VERSION=24
 BUN_VERSION=1.3.14
 DART_SDK_VERSION=3.12.0
-CODEX_CLI_VERSION=0.136.0
+CODEX_CLI_VERSION=0.137.0
 GITHUB_MCP_SERVER_VERSION=1.1.2
 MCP_PYTHON_SDK_VERSION=1.27.2
 SERENA_AGENT_VERSION=1.5.3
@@ -14,6 +14,3 @@ PLAYWRIGHT_MCP_VERSION=0.0.75
 CHROME_DEVTOOLS_MCP_VERSION=1.1.1
 CONTEXT7_MCP_VERSION=3.1.0
 SHADCN_VERSION=4.10.0
-
-# CI-only security scanner pin. This is not an MCP runtime dependency.
-SEMGREP_CLI_VERSION=1.164.0
diff --git a/docs/adr/0002-testing-and-ci-quality-gates.md b/docs/adr/0002-testing-and-ci-quality-gates.md
@@ -21,8 +21,8 @@ The repository had a strong smoke/static validation gate but no conventional uni
 - Split manual CI into fast, runtime, release, MCP, and full scopes with Ubuntu
   as the heavy runtime runner, and add lightweight standard public Ubuntu,
   Windows, and macOS smoke for path/archive/metadata portability.
-- Keep the no-paid static security workflow manual-only, using ShellCheck, Pyright, Semgrep CLI, action SHA-pin validation, and text security scanning.
-- Exclude Semgrep's global `IFS` tampering rule from the no-paid gate because the repository intentionally uses `IFS=$'\n\t'` as part of its strict shell prologue and relies on ShellCheck plus project validators for shell safety.
+- Keep the no-paid static security workflow manual-only, using ShellCheck, Pyright, action SHA-pin validation, and text security scanning.
+- Keep shell safety covered through ShellCheck plus project validators; the repository intentionally uses `IFS=$'\n\t'` as part of its strict shell prologue.
 - Keep the upstream repository public and standard-runner-only so normal push,
   PR, scheduled, CodeQL, Scorecard, and dependency-review workflows stay in the
   free public-repository GitHub Actions policy.
diff --git a/plugins/rldyour-browser/.codex-plugin/plugin.json b/plugins/rldyour-browser/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-browser",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Браузерная проверка и debug для Playwright/DevTools. EN: Browser validation and debugging workflows.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-design/.codex-plugin/plugin.json b/plugins/rldyour-design/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-design",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Дизайн/Figma/UI workflow с tokens, i18n, FSD и browser proof. EN: Design implementation workflows.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-explore/.codex-plugin/plugin.json b/plugins/rldyour-explore/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-explore",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Исследование docs, upstream и web evidence. EN: Technical and web research skills.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-flow/.codex-plugin/plugin.json b/plugins/rldyour-flow/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-flow",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Автономный SDLC Codex: ry-init/start/review/repair/deploy, hooks и sync. EN: SDLC workflow.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-flow/skills/ry-repair/SKILL.md b/plugins/rldyour-flow/skills/ry-repair/SKILL.md
@@ -19,7 +19,7 @@ For rldyour AI CLI configuration repositories, `/ry-repair` also owns determinis
 4. Inspect GitHub issues, pull requests, and recent history through the GitHub connector, GitHub MCP, or `gh` when available. Verify every issue against current code before treating it as a fact.
 5. Inspect MCP/LSP/tooling config, hook lifecycles, CI gates, release manifests, dependency baselines, and docs source-of-truth declarations.
 6. When the root control plane is present, run `python3 scripts/ry_repair_sync.py --plan --target "$PWD"` and use `--check` before claiming sync. Use `--apply --install-system` only for owner-approved system convergence.
-7. Treat retired Semgrep server removal as system-wide: source repo surfaces, installed `$CODEX_HOME/config.toml`, Claude marketplace cache, OpenCode project config, and generated tool references must all be clean. Keep Semgrep CLI/CI scanning unless the owner explicitly removes all Semgrep usage.
+7. Treat zero-active Semgrep policy as system-wide: source repo surfaces, installed `$CODEX_HOME/config.toml`, Claude marketplace cache, OpenCode project config, generated tool references, CI workflows, runtime pins, docs, and release gates must all be clean. Keep only negative validators/tests and historical changelog entries.
 8. Detect semantic entropy: duplicated docs, stale pins, conflicting instructions, dead config, unclear source-of-truth, missing ADR/CONTEXT/FUTURE facts, broken validators, and adapter parity drift.
 9. Produce a repair plan that separates technical repairs from owner-decision items.
 10. Ask the owner in Russian before changing any business, functional, security-posture, deployment-target, data-model, or ADR decision. Use concise options with a recommended choice, reason, and impact.
diff --git a/plugins/rldyour-lsps/.codex-plugin/plugin.json b/plugins/rldyour-lsps/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-lsps",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Маршрутизация LSP, health checks и Serena integration. EN: Language server workflow.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-mcps/.codex-plugin/plugin.json b/plugins/rldyour-mcps/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-mcps",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Управляемые MCP-серверы Codex без hidden transports. EN: Controlled MCP runtime set.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-rules/.codex-plugin/plugin.json b/plugins/rldyour-rules/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-rules",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Инженерные правила качества, architecture, deps, gates и ADR. EN: Quality-first engineering rules.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-security/.codex-plugin/plugin.json b/plugins/rldyour-security/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-security",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Безопасная реализация и defensive review. EN: OWASP and security review skills.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-serena-mcp/.codex-plugin/plugin.json b/plugins/rldyour-serena-mcp/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-serena-mcp",
-  "version": "1.1.23",
+  "version": "1.1.24",
   "description": "Код через Serena, memories, plans и research sync. EN: Serena MCP workflow skills.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "rldyour-codex"
-version = "1.1.23"
+version = "1.1.24"
 description = "rldyour AI CLI configuration for Codex: plugin marketplace, system install, MCP servers, hooks, managed agents, runtime validation, and Serena memory."
 readme = "README.md"
 requires-python = ">=3.13,<3.14"
diff --git a/references/codex-baseline.json b/references/codex-baseline.json
@@ -1,12 +1,12 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "schema_version": 1,
-  "verified_on": "2026-06-02",
+  "verified_on": "2026-06-04",
   "baseline": {
     "codex_cli": {
-      "version": "0.136.0",
+      "version": "0.137.0",
       "npm_package": "@openai/codex",
-      "ref": "https://github.com/openai/codex/releases/tag/rust-v0.136.0"
+      "ref": "https://github.com/openai/codex/releases/tag/rust-v0.137.0"
     },
     "runtime_contract": {
       "hooks": "command-only",
diff --git a/references/codex-surface-adoption.md b/references/codex-surface-adoption.md
@@ -1,24 +1,24 @@
 # Codex Surface Adoption
 
-Verified: 2026-06-02
+Verified: 2026-06-04
 
 Source of truth:
 - Runtime baseline: `references/codex-baseline.json`
 - Runtime package pin: package metadata for `@openai/codex`
-- Official changelog and config docs: `https://github.com/openai/codex/releases/tag/rust-v0.136.0` and `https://developers.openai.com/codex/`
+- Official changelog and config docs: `https://github.com/openai/codex/releases/tag/rust-v0.137.0` and `https://developers.openai.com/codex/`
 
 ## Decisions
 
 | Surface | Introduced | Decision | Implementation | Validator |
 | --- | --- | --- | --- | --- |
-| Codex CLI runtime baseline | 0.136.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.136.0`; local installed runtime must report `codex-cli 0.136.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
-| Clickable TUI web links and readable cramped markdown tables | 0.136.0 | Adopt implicitly | This is runtime rendering behavior. No repository config migration is required; keep docs and reviewer output link-heavy but bounded. | n/a |
-| Session archive and unarchive commands | 0.136.0 | Operational | Treat `codex archive` / `codex unarchive` and `/archive` as user-facing session lifecycle tools. Do not add repository automation that archives sessions without explicit owner action. | n/a |
-| App-server stdio and richer MCP server status | 0.136.0 | Future | Keep current MCP materialization through `[mcp_servers.*]`. Adopt app-server stdio only after a repo-owned bridge needs it and validators cover the transport boundary. | `scripts/validate_contract.py` |
-| Remote execution API-key registration and short-lived remote-control tokens | 0.136.0 | Future | No remote-exec host registration is committed in this adapter. Treat remote credentials as external runtime state and never store them in repo config or memories. | `scripts/validate_instruction_docs.py` |
-| Command-safety hardening for `/diff`, PowerShell parsing, websocket origins, sandbox cleanup, and deny-read rules | 0.136.0 | Adopt implicitly | Preserve owner YOLO semantics while relying on the newer runtime's hardening for command paths. Do not weaken repo permission validators or reintroduce active `default_permissions` with `sandbox_mode`. | `scripts/validate_contract.py`; `scripts/validate_execpolicy_rules.sh` |
-| Bedrock region fallback and GPT service-tier filtering | 0.136.0 | Not applicable | Provider behavior is runtime-local. No adapter config migration is required for the owner-local default. | n/a |
-| `codex doctor` richer diagnostics | 0.135.0 | Operational | Owner doctor flow remains `scripts/doctor_system_codex.sh`; no config migration is required. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
+| Codex CLI runtime baseline | 0.137.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.137.0`; local installed runtime must report `codex-cli 0.137.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| Official standalone installer with non-interactive mode | 0.137.0 | Operational | `/ry-repair --apply-system` plans the official `CODEX_NON_INTERACTIVE=1` installer path and keeps the npm stable pin as an explicit fallback. Repository system install still writes managed config/profile files; it does not store credentials. | root `scripts/ry_repair_sync.py --plan --apply-system --json` |
+| `codex plugin list --json` inventory | 0.137.0 | Operational | Installed-runtime diagnostics may use JSON plugin inventory when `codex` is available. Static validators must report `NOT PROVEN` rather than inventing installed plugin state. | root `scripts/ry_repair_sync.py --plan --apply-system --json` |
+| Hosted web/image tools in more code-mode flows | 0.137.0 | Capability-dependent | Treat hosted tools as account/runtime capability. Do not add unconditional repository config claims unless installed-runtime checks prove availability. | n/a |
+| Remote-control v2 RPC grants | 0.137.0 | Future | No remote-control host registration or grant policy is committed in this adapter. Treat remote credentials as external runtime state and never store them in repo config or memories. | `scripts/validate_instruction_docs.py` |
+| MultiAgentV2 runtime choice and follow-up metadata | 0.137.0 | Capability-dependent | Managed subagent role files remain static TOML installed by this adapter. Runtime thread metadata is observed only through installed Codex diagnostics. | `scripts/validate_agent_tools.py` |
+| Stable release boundary vs. alpha prereleases | 0.137.0 | Adopted | `0.138.0-alpha.1` is intentionally not a release-grade baseline unless the owner explicitly enables prerelease runtime policy. | `scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| `codex doctor` diagnostics | 0.135.0 | Operational | Owner doctor flow remains `scripts/doctor_system_codex.sh`; `/ry-repair --apply-system` also plans direct `codex doctor` when installed runtime is available. | `scripts/doctor_system_codex.sh --quick --strict-runtime`; root `scripts/ry_repair_sync.py --plan --apply-system --json` |
 | Remote `/status` server-version details | 0.135.0 | Not applicable | Remote TUI status output is user-facing runtime behavior and does not change repository config. | n/a |
 | `/permissions` named/custom profile display | 0.135.0 | Operational | Use `/permissions` and `codex doctor` to inspect resolved permission profiles. Do not migrate the owner profile from the legacy `sandbox_mode` dialect without an explicit policy change. | `scripts/validate_instruction_docs.py` |
 | Packaged patched zsh helper discovery | 0.135.0 | Operational | Treat as installed-runtime diagnostic behavior only; no config migration is required. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
diff --git a/scripts/check_mcp_runtime_versions.py b/scripts/check_mcp_runtime_versions.py
diff --git a/scripts/classify_ci_noise.py b/scripts/classify_ci_noise.py
diff --git a/tests/unit/test_check_mcp_runtime_versions.py b/tests/unit/test_check_mcp_runtime_versions.py
diff --git a/uv.lock b/uv.lock

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-browser",`
`3`		`- "version": "1.1.23",`
	`3`	`+ "version": "1.1.24",`
`4`	`4`	`"description": "Браузерная проверка и debug для Playwright/DevTools. EN: Browser validation and debugging workflows.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`