chore(release): codex 1.1.22

rldyourmnd · rldyourmnd · commit fc75c854c400 · 2026-06-02T22:59:26.000+07:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,12 @@ The format follows Keep a Changelog, and marketplace/plugin versions follow Sema
 ## [Unreleased]
 
 
+## [1.1.22] - 2026-06-02
+
+### Changed
+
+- Refresh Codex CLI runtime baseline to 0.136.0 with current upstream release evidence.
+
 ## [1.1.21] - 2026-06-02
 
 ### Fixed
diff --git a/SECURITY.md b/SECURITY.md
@@ -12,7 +12,7 @@ historical patch in the line.
 
 | Version | Supported |
 | --- | --- |
-| Current exact tag `1.1.21` | Yes |
+| Current exact tag `1.1.22` | Yes |
 | Older `1.1.*` tags | No; upgrade to current exact tag |
 | Older minor / major lines | No |
 
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.1.21
+1.1.22
diff --git a/config/mcp-runtime-versions.env b/config/mcp-runtime-versions.env
@@ -5,7 +5,7 @@ DART_FLUTTER_MCP_RUNTIME=external-local-dart-sdk
 NODE_MAJOR_VERSION=24
 BUN_VERSION=1.3.14
 DART_SDK_VERSION=3.12.0
-CODEX_CLI_VERSION=0.135.0
+CODEX_CLI_VERSION=0.136.0
 GITHUB_MCP_SERVER_VERSION=1.1.2
 MCP_PYTHON_SDK_VERSION=1.27.2
 SERENA_AGENT_VERSION=1.5.3
diff --git a/plugins/rldyour-browser/.codex-plugin/plugin.json b/plugins/rldyour-browser/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-browser",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Браузерная проверка и debug для Playwright/DevTools. EN: Browser validation and debugging workflows.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-design/.codex-plugin/plugin.json b/plugins/rldyour-design/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-design",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Дизайн/Figma/UI workflow с tokens, i18n, FSD и browser proof. EN: Design implementation workflows.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-explore/.codex-plugin/plugin.json b/plugins/rldyour-explore/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-explore",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Исследование docs, upstream и web evidence. EN: Technical and web research skills.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-flow/.codex-plugin/plugin.json b/plugins/rldyour-flow/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-flow",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Автономный SDLC Codex: ry-init/start/review/repair/deploy, hooks и sync. EN: SDLC workflow.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-lsps/.codex-plugin/plugin.json b/plugins/rldyour-lsps/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-lsps",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Маршрутизация LSP, health checks и Serena integration. EN: Language server workflow.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-mcps/.codex-plugin/plugin.json b/plugins/rldyour-mcps/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-mcps",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Управляемые MCP-серверы Codex без hidden transports. EN: Controlled MCP runtime set.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-rules/.codex-plugin/plugin.json b/plugins/rldyour-rules/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-rules",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Инженерные правила качества, architecture, deps, gates и ADR. EN: Quality-first engineering rules.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-security/.codex-plugin/plugin.json b/plugins/rldyour-security/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-security",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Безопасная реализация и defensive review. EN: OWASP and security review skills.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/plugins/rldyour-serena-mcp/.codex-plugin/plugin.json b/plugins/rldyour-serena-mcp/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "rldyour-serena-mcp",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "Код через Serena, memories, plans и research sync. EN: Serena MCP workflow skills.",
   "author": {
     "name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "rldyour-codex"
-version = "1.1.21"
+version = "1.1.22"
 description = "rldyour AI CLI configuration for Codex: plugin marketplace, system install, MCP servers, hooks, managed agents, runtime validation, and Serena memory."
 readme = "README.md"
 requires-python = ">=3.13,<3.14"
diff --git a/references/codex-baseline.json b/references/codex-baseline.json
@@ -1,12 +1,12 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "schema_version": 1,
-  "verified_on": "2026-05-29",
+  "verified_on": "2026-06-02",
   "baseline": {
     "codex_cli": {
-      "version": "0.135.0",
+      "version": "0.136.0",
       "npm_package": "@openai/codex",
-      "ref": "https://github.com/openai/codex/releases/tag/rust-v0.135.0"
+      "ref": "https://github.com/openai/codex/releases/tag/rust-v0.136.0"
     },
     "runtime_contract": {
       "hooks": "command-only",
diff --git a/references/codex-surface-adoption.md b/references/codex-surface-adoption.md
@@ -1,21 +1,27 @@
 # Codex Surface Adoption
 
-Verified: 2026-05-29
+Verified: 2026-06-02
 
 Source of truth:
 - Runtime baseline: `references/codex-baseline.json`
 - Runtime package pin: package metadata for `@openai/codex`
-- Official changelog and config docs: `https://github.com/openai/codex/releases/tag/rust-v0.135.0` and `https://developers.openai.com/codex/`
+- Official changelog and config docs: `https://github.com/openai/codex/releases/tag/rust-v0.136.0` and `https://developers.openai.com/codex/`
 
 ## Decisions
 
 | Surface | Introduced | Decision | Implementation | Validator |
 | --- | --- | --- | --- | --- |
-| Codex CLI runtime baseline | 0.135.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.135.0`; local installed runtime must report `codex-cli 0.135.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| Codex CLI runtime baseline | 0.136.0 | Adopted | Root contract and adapter runtime pins require `@openai/codex` / `codex-cli` `0.136.0`; local installed runtime must report `codex-cli 0.136.0`. | `python3 scripts/check_mcp_runtime_versions.py --fail-on-outdated` |
+| Clickable TUI web links and readable cramped markdown tables | 0.136.0 | Adopt implicitly | This is runtime rendering behavior. No repository config migration is required; keep docs and reviewer output link-heavy but bounded. | n/a |
+| Session archive and unarchive commands | 0.136.0 | Operational | Treat `codex archive` / `codex unarchive` and `/archive` as user-facing session lifecycle tools. Do not add repository automation that archives sessions without explicit owner action. | n/a |
+| App-server stdio and richer MCP server status | 0.136.0 | Future | Keep current MCP materialization through `[mcp_servers.*]`. Adopt app-server stdio only after a repo-owned bridge needs it and validators cover the transport boundary. | `scripts/validate_contract.py` |
+| Remote execution API-key registration and short-lived remote-control tokens | 0.136.0 | Future | No remote-exec host registration is committed in this adapter. Treat remote credentials as external runtime state and never store them in repo config or memories. | `scripts/validate_instruction_docs.py` |
+| Command-safety hardening for `/diff`, PowerShell parsing, websocket origins, sandbox cleanup, and deny-read rules | 0.136.0 | Adopt implicitly | Preserve owner YOLO semantics while relying on the newer runtime's hardening for command paths. Do not weaken repo permission validators or reintroduce active `default_permissions` with `sandbox_mode`. | `scripts/validate_contract.py`; `scripts/validate_execpolicy_rules.sh` |
+| Bedrock region fallback and GPT service-tier filtering | 0.136.0 | Not applicable | Provider behavior is runtime-local. No adapter config migration is required for the owner-local default. | n/a |
 | `codex doctor` richer diagnostics | 0.135.0 | Operational | Owner doctor flow remains `scripts/doctor_system_codex.sh`; no config migration is required. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
 | Remote `/status` server-version details | 0.135.0 | Not applicable | Remote TUI status output is user-facing runtime behavior and does not change repository config. | n/a |
 | `/permissions` named/custom profile display | 0.135.0 | Operational | Use `/permissions` and `codex doctor` to inspect resolved permission profiles. Do not migrate the owner profile from the legacy `sandbox_mode` dialect without an explicit policy change. | `scripts/validate_instruction_docs.py` |
-| Packaged patched zsh helper discovery | 0.135.0 | Operational | Treat as installed-runtime diagnostic behavior only; no repository config migration is required. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
+| Packaged patched zsh helper discovery | 0.135.0 | Operational | Treat as installed-runtime diagnostic behavior only; no config migration is required. | `scripts/doctor_system_codex.sh --quick --strict-runtime` |
 | Vim mode text-object and binding refinements | 0.135.0 | Not applicable | User-facing editor behavior; no config, plugin, hook, or MCP migration is required. | n/a |
 | `--profile` as primary selector | 0.134.0 | Adopted | Owner launcher and docs use `codex --profile rldyour-yolo`; installer writes `$CODEX_HOME/rldyour-yolo.config.toml` and `$CODEX_HOME/rldyour-safe.config.toml`. | `scripts/validate_contract.py` |
 | Legacy `[profiles.*]` and `profile = "..."` rejected | 0.134.0 | Adopted | Installer, doctor, contracts, and instruction docs forbid legacy profile selectors. | `scripts/validate_instruction_docs.py` |
diff --git a/tests/unit/test_check_mcp_runtime_versions.py b/tests/unit/test_check_mcp_runtime_versions.py
@@ -18,7 +18,7 @@ def test_parse_env_file_handles_comments_quotes_and_blanks(tmp_path: Path) -> No
     env_file.write_text(
         """
 # comment
-CODEX_CLI_VERSION=0.135.0
+CODEX_CLI_VERSION=0.136.0
 SERENA_AGENT_VERSION='1.5.1'
 EMPTY_LINE_IGNORED
 SHADCN_VERSION="3.5.0"
@@ -27,7 +27,7 @@ def test_parse_env_file_handles_comments_quotes_and_blanks(tmp_path: Path) -> No
         encoding="utf-8",
     )
     assert mod.parse_env_file(env_file) == {
-        "CODEX_CLI_VERSION": "0.135.0",
+        "CODEX_CLI_VERSION": "0.136.0",
         "SERENA_AGENT_VERSION": "1.5.1",
         "SHADCN_VERSION": "3.5.0",
         "GITHUB_MCP_SERVER_VERSION": "1.1.0",
diff --git a/uv.lock b/uv.lock

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-browser",`
`3`		`- "version": "1.1.21",`
	`3`	`+ "version": "1.1.22",`
`4`	`4`	`"description": "Браузерная проверка и debug для Playwright/DevTools. EN: Browser validation and debugging workflows.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-design",`
`3`		`- "version": "1.1.21",`
	`3`	`+ "version": "1.1.22",`
`4`	`4`	`"description": "Дизайн/Figma/UI workflow с tokens, i18n, FSD и browser proof. EN: Design implementation workflows.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-explore",`
`3`		`- "version": "1.1.21",`
	`3`	`+ "version": "1.1.22",`
`4`	`4`	`"description": "Исследование docs, upstream и web evidence. EN: Technical and web research skills.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-flow",`
`3`		`- "version": "1.1.21",`
	`3`	`+ "version": "1.1.22",`
`4`	`4`	`"description": "Автономный SDLC Codex: ry-init/start/review/repair/deploy, hooks и sync. EN: SDLC workflow.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-lsps",`
`3`		`- "version": "1.1.21",`
	`3`	`+ "version": "1.1.22",`
`4`	`4`	`"description": "Маршрутизация LSP, health checks и Serena integration. EN: Language server workflow.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "rldyour-mcps",`
`3`		`- "version": "1.1.21",`
	`3`	`+ "version": "1.1.22",`
`4`	`4`	`"description": "Управляемые MCP-серверы Codex без hidden transports. EN: Controlled MCP runtime set.",`
`5`	`5`	`"author": {`
`6`	`6`	`"name": "Danil Silantyev (github:rldyourmnd), CEO NDDev",`