Remote controllers are now listable and revocable, and approvals carry environment identity
What this changes for operators
- CLI 0.137.0 lets remote-control clients pair and have controller grants listed/revoked via app-server v2 RPCs, and binds permission requests/approvals to an environment identity. A concrete authority-inventory and revocation surface for who can drive a session remotely.
Signal metadata
Source findings
- 2026-06-04-codex-cli-0137-remote-control-pairing-and-managed-config 2026-06-04-codex-cli-0137-remote-control-pairing-and-managed-config
Run: 2026-06-16-weekly-digest-2026-06-04_2026-06-16-frontier-v0
Schema: bitter.frontier_signals.v0 · ID: 2026-06-04-codex-remote-control-grants
Signals are produced by the Bitter autonomous research loop.