Ecosystem Update - 2026-06-07
Highlights
- No safe automatic harness Quick Win landed today; every actionable delta needs either a CLI upgrade, a new script, or a policy decision
- Official Codex latest stable is
0.137.0and latest pre-release is0.138.0-alpha.6; localcodexis still0.133.0, and the app-bundled CLI is0.135.0-alpha.1 - Today's strongest new work is not more hooks, but adapters around existing primitives: plugin inventory JSON, environment-scoped permission approvals, and native session archive/history behavior
Quick Wins (implemented today)
-
None -No candidate passed the alignment and existing-script safety gates
New Tools, Skills & Patterns
-
Plugin inventory JSON adapter mcphttps://github.com/openai/codex/releases/tag/rust-v0.137.0 -
codex plugin list --jsonis now official. After the CLI is upgraded, teach runtime-doctor or ecosystem-update to use it for deterministic plugin inventory instead of parsing config-only state -
Environment-scoped PermissionRequest review hookhttps://github.com/openai/codex/releases/tag/rust-v0.137.0 - Permission requests and approvals now carry environment identity. Evaluate whether
pre_tool_guard.pyor a conservative-profile PermissionRequest bridge should consume this before any approval automation is wired -
Native session archive/history parity check Codex-mdhttps://github.com/shanraisshan/codex-cli-best-practice - The community best-practice repo now highlights sessions: archive/resume/fork and local history search. Compare native
0.137.0behavior with the existingcodex-session-searchhelper before replacing anything -
Cloud-managed config bundle intake Codex-mdhttps://github.com/openai/codex/releases/tag/rust-v0.137.0 - Stable
0.137.0adds cloud-managed config bundle behavior and stronger requirements layering. This should be a review task only; current local policy intentionally keeps user config direct and prompt telemetry off -
Subagent runtime metadata smoke agent-patternhttps://github.com/openai/codex/releases/tag/rust-v0.137.0 - Multi-agent v2 now keeps runtime choice with each thread and exposes cleaner follow-up/metadata defaults. Once local CLI is current, smoke existing
planner,explorer,reviewer,validator, andworkerTOMLs against that metadata behavior
Research Worth Reading
-
No new arXiv results matched the June 6-7 submitted-date window for
agent,coding, orsoftware; the newest broadLLM agent codingfeed entries remained June 4 UTC. -
Code2LoRA: Hypernetwork-Generated Adapters for Code Language Models under Software Evolution- Recent but not last-24h; relevant to repo-specific adaptation and evolving-codebase memory, not a harness Quick Win
-
Goedel-Architect: Streamlining Formal Theorem Proving with Blueprint Generation and Refinement- Recent but not last-24h; useful as a verifier/dependency-graph pattern for formal domains, not general Codex runtime work
Considered, Not Adopting
Items reviewed and explicitly declined this cycle, with the reason. Curation discipline matters more than coverage.
-
Auto-upgrade Codex CLI to stable
0.137.0or pre-release0.138.0-alpha.6- CLI upgrades remain explicit upgrade/smoke tasks, not ecosystem-update auto-mutations. -
Auto-wire
PostCompact,PermissionRequest,SubagentStart, orSubagentStoptoday - official support exists, but no existing target script was proven for those events; the Quick Win rules forbid hook wiring that requires new scripts. -
Enable plugin hooks globally - current trust boundary remains unresolved; config correctly keeps
plugin_hooks = false. - Enable native Codex memories globally - conflicts with the current omni-mem-first runtime policy and prompt-telemetry posture.
-
Wholesale install
awesome-claude-code-toolkit,pro-workflow,agento-patronum,harness-evolver,nexus-agents, or similar community bundles - useful source material, but external plugins/skills/hooks require strict audit and Codex-owned adaptation. - Add global auto-format PostToolUse edit hooks - still too broad for the global harness and can mutate unrelated user work; this belongs at project scope with dedicated scripts.
-
Edit
~/.codex/AGENTS.md,~/AGENTS.md, or modularize policy docs as a Quick Win - constitutional policy docs are explicitly out of Quick Win scope. -
Add managed
requirements.tomlenforcement locally - managed config is enterprise/admin machinery; no current local requirement proves existing user-level config is insufficient.