Codex Updates & Release Notes

New Features

• Added keyboard-driven transcript selection with word, line, and page motions, integrated search, and configurable shortcuts. (#57221, #57222, #57223, #57224)
• Rendered Markdown consistently in async questions, choices, answers, and transcript replies. (#57259, #57292)
• Added GPT-6.1 Terra to the bundled, Vertex AI, and Amazon Bedrock model catalogs. (#57293)
• Added codex queue --resume to resume unloaded threads after queueing a message. (#57232)
• Added clearer safety-block explanations and selectable safer follow-up prompts in the TUI. (#57363, #57365)
• Added codex doctor --network-only for focused configuration, connectivity, and WebSocket diagnostics. (#57606)

Bug Fixes

• Preserved acknowledged approval and permission settings when resuming or forking threads. (#57227)
• Preserved local image attachments when restoring killed composer text. (#57502)
• Fixed standalone release cleanup on macOS when installations are in use or paths contain non-ASCII characters. (#57503)
• Restored spawned descendant threads when unarchiving their parent. (#57635)
• Fixed app-server thread startup and shutdown races and released completed runtimes promptly. (#57787, #57788)
• Improved TUI reconnection recovery, including offline /quit and /exit handling. (#57820)
• Preserved reasoning-token accounting across resume and fork to avoid premature compaction. (#57839)

Chores

• Switched Bazel to source-built V8 with target-matched Rust bindings and native Windows MSVC archive support. (#57164, #57269, #57644, #57832)
• Shipped the standalone executor in canonical CLI and app-server release packages. (#57837)
• Standardized development and release builds on Node.js 24.22.1 and Rust 1.95.0. (#57168, #57373)

Changelog

Full Changelog: rust-v0.165.0...rust-v0.166.0

• #56468 Preserve SystemRoot for Windows filesystem sandbox helpers @jif-oai
• #56477 Move Guardian approval reason caps into context composition @ioanbudea-OAI
• #56483 Allow installed plugin metadata to skip display enrichment @bkotsopoulos
• #56493 Move Guardian tool description preparation into context composition @ioanbudea-OAI
• #56494 Add channel upserts to message boards @felixxia-oai
• #56495 Add paginated channel subscription queries to the local message board @felixxia-oai
• #56505 Defer synchronous Guardian tool-call truncation to preparation @ioanbudea-OAI
• #56514 Preserve tracing context throughout tool dispatch @bkotsopoulos
• #56515 Add trace instrumentation for turn startup and response streaming @bkotsopoulos
• #56516 Respect server approval policy defaults during TUI startup @etraut-openai
• #56524 Add turn, tool, and skill attribution to traces @bkotsopoulos
• #56525 Remove the 1 MiB response limit for explicit model catalogs @eternal-openai
• #56530 Record skill and plugin catalog sizes on publication @TAFOYA-OAI
• #56533 Defer sync Guardian tool-output truncation to transcript preparation @ioanbudea-OAI
• #56535 Extract the head-tail buffer into a utility crate @seanh-oai
• #56543 Track resume picker pagination and selection metadata per backend @bc-openai
• #56552 Initialize SQLite databases with DELETE journaling on NFS @dkovalenko-oai
• #56553 Include environment hooks in thread hook listings @andrewgu-oai
• #56554 Enable masked AWS credentials for local proxy signing @viyatb-oai
• #56555 Apply sync Guardian message limits during transcript preparation @ioanbudea-OAI
• #56556 Use conversations for all Guardian v2 async classification @felixxia-oai
• #56557 Exercise retained sampling in Guardian transport tests @felixxia-oai
• #56559 Remove Guardian snapshot-specific context helpers @felixxia-oai
• #56560 Allow configuring GCP project and location in provider settings @alexsong-oai
• #57164 Move the V8 Bazel build graph into Codex @seanh-oai
• #57165 Enforce V8 artifact profiles at Bazel target boundaries @seanh-oai
• #57166 Surface automatic marketplace update failures as startup warnings @dkovalenko-oai
• #57167 Track CUA tool call starts and deduplicate lifecycle events @trpcic-openai
• #57168 Centralize Node.js version selection on 24.22.1 @anp-oai
• #57169 Clarify config loader APIs and share interactive login setup @smurching-oai
• #57170 Update prebuilt argument-comment-lint to rust-v0.164.0 @tamird
• #57171 Integrate runtime authentication into model requests @cooper-oai
• #57172 Expose lifecycle timestamps on app-server thread items @charliemarsh-oai
• #57174 Add scoped request-body secret substitution to MITM hooks @viyatb-oai
• #57175 Integrate config-server policies with startup and authentication @smurching-oai
• #57176 Defer Guardian Node REPL output truncation until prompt preparation @ioanbudea-OAI
• #57178 Route FedRAMP API keys to government endpoints by default @lsingh-oai
• #57179 Consolidate async header authentication in apply_auth_headers @cooper-oai
• #57180 Add constraint-aware standalone network proxy configuration @viyatb-oai
• #57181 Add optional names to untrusted additional context @akira-oai
• #57185 Centralize unified exec output rendering @anp-oai
• #57186 Fail closed on unreadable glob search root metadata errors @viyatb-oai
• #57187 Allow advisory rollout budgets with optional limit enforcement @nvogt-oai
• #57188 Add a credential file override for GCP provider authentication @alexsong-oai
• #57191 Read unified exec output directly from stdout and stderr @anp-oai
• #57192 Gate capability discovery V2 on executor version @TAFOYA-OAI
• #57193 Preserve failed write_stdin calls in rollout trace replay @cassirer-openai
• #57194 Classify rollout tool calls by their runtime handler @cassirer-openai
• #57196 Isolate MCP inputs and timeouts for callers sharing a connection @charliemarsh-oai
• #57197 Clarify skill toggle summaries in the TUI @fcoury-oai
• #57198 Report the local command working directory in PreToolUse hooks @eternal-openai
• #57199 Truncate rollout JSON summaries at UTF-8 character boundaries @cassirer-openai
• #57201 Capture direct-tool critical paths behind a feature flag @taohong339
• #57202 Preserve the tool dispatch span across runtime futures @trpcic-openai
• #57203 Preserve command cwd in permission and post-tool hooks @eternal-openai
• #57204 Register the untrusted_as_tool_output feature flag @akira-oai
• #57206 Ignore the crypto-bigint timing advisory in dependency checks @etraut-openai
• #57207 Attribute approval waits to tool critical-path timing @taohong339
• #57208 Propagate installer download failures in standalone Unix updates @etraut-openai
• #57209 Report turn critical-path timing in analytics @taohong339
• #57210 Add opt-in protocol discovery for local stdio MCP servers @charliemarsh-oai
• #57211 Share eligible local stdio MCP connections across chats @charliemarsh-oai
• #57212 Enable zstd compression for code-mode gRPC responses @cayoub-oai
• #57215 Coordinate resume picker sources independently @bc-openai
• #57218 Support negotiated WebSocket compression in the remote app-server client @thorvald-oai
• #57220 Log app-server WebSocket compression statistics @thorvald-oai
• #57221 Expand keyboard navigation and selection in the transcript @fcoury-oai
• #57222 Integrate Find with transcript selection mode @fcoury-oai
• #57223 Wire keyboard selection into transcript overlays @fcoury-oai
• #57224 Fix transcript selection input routing and preserve composer drafts @fcoury-oai
• #57225 Add managed enforcement of DELETE journaling on NFS @dkovalenko-oai
• #57226 Allow NFS database migration with shared file permissions @dkovalenko-oai
• #57227 Preserve acknowledged permissions when resuming and forking threads @charliemarsh-oai
• #57228 Give remote control pairing a 35-second deadline @etraut-openai
• #57229 Simplify code-mode cell completion delivery @cconger
• #57232 Add optional thread resumption to codex queue @etraut-openai
• #57233 Stop dotenv loading on persistent I/O errors @etraut-openai
• #57234 Prevent credential collisions in registry auth test fixtures @jif-oai
• #57235 Tag exec_command telemetry with the configured shell snapshot mode @jif-oai
• #57238 Exercise V2 spawning in subagent context inheritance tests @tamird
• #57239 Make the MCP HTTP probe timeout test deterministic @jif-oai
• #57240 Bound memory baseline files and recover incomplete snapshots @dhruvgupta-oai
• #57241 Honor configured message limits for encrypted guardian transcripts @ioanbudea-OAI
• #57242 Reduce the default thread unload delay to one minute @jif-oai
• #57243 Pause Tokio time in startup draft handoff tests @goodman-oai
• #57244 Wait for process completion in the unified exec reuse test @goodman-oai
• #57245 Stabilize the rejected queue message test @goodman-oai
• #57247 Release the rollout maintenance lock when its guard is dropped @goodman-oai
• #57248 Make login token-refresh tests wait for auth publication @goodman-oai
• #57249 Allow disabling plugin discovery prefetch at app-server startup @zamoshchin-openai
• #57251 Show native dollar thread usage for ENT26 plans @jif-oai
• #57253 Allow slow daemon startup while detecting early process exits @etraut-openai
• #57255 Record reviewed exceptions for zstd security advisories @charliemarsh-oai
• #57256 Keep parent history out of attached thread views @btraut-openai
• #57257 Avoid unnecessary connector directory work for tool suggestions @charliemarsh-oai
• #57258 Reduce remote plugin catalog cache probing overhead @charliemarsh-oai
• #57259 Render Markdown in TUI async question choices @imac-oai
• #57260 Centralize permission request preparation and approval actions @swastik-oai
• #57261 Separate apply_patch request preparation from execution @swastik-oai
• #57262 Add incremental skill catalogs behind skill_catalog_deltas @adaley-openai
• #57263 Support model-catalog wording for permission path warnings @goodman-oai
• #57265 Show effective processing tiers in TUI status surfaces @etraut-openai
• #57267 Keep cloud conversation settings server-owned in t...

New Features

• Added a built-in Google Cloud Vertex AI provider, configured with model_provider = "gcp". (#56265)
• Added GPT-6.1 Terra to the model catalogs. (#57337)
• Added a repository filter to the session picker and directory grouping to the agent command center, making it easier to navigate sessions across linked worktrees. (#56308)
• Added experimental attached thread forks to the app-server API. (#56351)
• Enabled reasoning effort changes during a conversation by default for supported models. (#56163)
• Enabled memory v2 by default for fresh profiles and added support for importing external-agent memories into it. (#56211, #56414)

Bug Fixes

• Fixed fresh TUI sessions to honor the server’s default approval reviewer when no explicit override is provided. (#56090)
• Kept TUI preferences editable and immediately applicable when execution settings are invalid. (#56091)
• Cancelled remote MCP tool requests when their local response futures are dropped. (#56132)
• Prevented queued agent messages from restarting work after an interrupt or a switch to Plan mode. (#56330)
• Stopped retrying when a provider reports that a model was not found, preserving its error message. (#56445)
• Closed a marketplace URL validation gap that could allow Git to connect to a different host than the one checked against allowed patterns. (#56263)

Changelog

Full Changelog: rust-v0.164.0...rust-v0.165.0

• #56081 Cache decrypted Codex auth and managed secrets @celia-oai
• #56090 Honor server approval reviewer defaults on fresh TUI startup @etraut-openai
• #56091 Keep TUI preferences editable when execution settings are invalid @etraut-openai
• #56097 Prepare TUI startup to accept multiple backend sessions @bc-openai
• #56124 Forward Guardian reviewer events to parent raw-event subscribers @jif-oai
• #56127 Avoid blocking EMA auth status checks on account refresh @jif-oai
• #56132 Cancel MCP tool requests when response futures are dropped @rhan-oai
• #56133 Defer agent mail after empty final answers @eknight-oai
• #56139 Fix the MCP auth status test's IdP OAuth configuration @jif-oai
• #56153 Preserve safe enterprise MCP authentication error details @jif-oai
• #56154 Add managed network review domains before allow rules @olliem-oai
• #56163 Enable reasoning effort overrides by default @felixxia-oai
• #56182 Add AWS SigV4 signing to network proxy MITM hooks @viyatb-oai
• #56210 Stabilize the marketplace staging cleanup test @felixxia-oai
• #56211 Default fresh memory profiles to v2 @jif-oai
• #56214 Remove the u64 cast from WSL DrvFS detection @felixxia-oai
• #56220 Use cargo_bin in the Windows sandbox manifest test @anp-oai
• #56222 Consolidate Bazel CI setup into prepare-bazel-ci @anp-oai
• #56224 Reuse current model context across paginated resume config loading @charliemarsh-oai
• #56233 Make Opus encoder test timestamps follow sample time @goodman-oai
• #56234 Emit prompt telemetry only after hooks accept input @abhinav-oai
• #56236 Make the code mode yield/resume test yield explicitly between phases @goodman-oai
• #56246 Bump Bazelisk to 1.30.0 in the Bazel CI setup action @anp-oai
• #56247 Consolidate Rust unit tests under dedicated test modules @dkovalenko-oai
• #56248 Bump uv to 0.13.5 in CI and release workflows @anp-oai
• #56250 Avoid redundant settings checkpoints when resuming threads @owenlin0
• #56261 Isolate V8 source dependencies and their C++ runtime settings @seanh-oai
• #56263 Reject backslashes in HTTP(S) marketplace URL userinfo @willwang-openai
• #56265 Add a built-in Google Cloud Vertex AI provider @celia-oai
• #56266 Preserve MCP disable reasons across runtime overlays @mzeng-openai
• #56272 Upgrade Python SDK model generation to datamodel-code-generator 0.64.0 @anp-oai
• #56274 Wait for cloud config refresh cancellation in loader lifetime tests @goodman-oai
• #56277 Support bounded request bodies in AWS SigV4 signing @viyatb-oai
• #56278 Add negotiated network policy metadata support for MCP calls @viyatb-oai
• #56280 Group consecutive transcript prompts into one background block @bc-openai
• #56284 Scope model catalogs and caches by thread originator @kennyyi-oai
• #56286 Bump @modelcontextprotocol/sdk to 1.32.0 @anp-oai
• #56288 Pin Linux artifact signing to Cosign v3.1.4 @anp-oai
• #56290 Lock Python release build tools with uv @anp-oai
• #56292 Fix MCP cancellation tests to use the metadata callback @anp-oai
• #56293 Use fixed-token auth fixtures in Vertex tests @anp-oai
• #56295 Decouple managed configuration loading from ChatGPT authentication @smurching-oai
• #56297 Mark built-in dummy credentials and strengthen collision checks @viyatb-oai
• #56301 Add TLS forwarding tests for MITM SigV4 requests @viyatb-oai
• #56302 Add hook configuration to environment attachments @andrewgu-oai
• #56304 Add support for environment-scoped managed hooks @andrewgu-oai
• #56308 Separate directory and repository scopes in the TUI @bc-openai
• #56309 Support model-specific writable-root permission wording @goodman-oai
• #56312 Track accepted conversation history in rollout traces @cassirer-openai
• #56313 Apply model catalog overrides to history, notes, and context tools @rhan-oai
• #56314 Add managed configuration loaders for custom config servers @smurching-oai
• #56330 Make agent-message wakes respect interrupts and Plan mode @alishobeiri-oai
• #56342 Match rollout trace image content across request snapshots @cassirer-openai
• #56343 Run environment hooks on their owning executors @andrewgu-oai
• #56351 Add experimental attached thread forks @btraut-openai
• #56364 Allow callers to set the thread source for sampling @keyz
• #56371 Make the Guardian review timeout configurable @vivi
• #56414 Support memory v2 in external-agent memory imports @jif-oai
• #56439 Update ctutils from 0.4.2 to 0.4.5 @felixxia-oai
• #56445 Treat model-not-found provider errors as terminal failures @charliemarsh-oai
• #56453 Make the Realtime V2 background-agent steering test deterministic @felixxia-oai
• #56454 Make sandbox mount cleanup tests tolerate file descriptor reuse @felixxia-oai
• #56459 Add Guardian V3 feature configuration @felixxia-oai
• #56460 Add Guardian v3 local board helpers @felixxia-oai
• #56461 Add silent append support to message boards @felixxia-oai
• #56462 Prevent memory imports from racing with consolidation @jif-oai
• #56465 Add experimental thread memory summary reads @jif-oai
• #57337 [0.165.0-alpha.1.2] Backport GPT-6.1 Terra to the model catalogs @shijie-oai

New Features
• Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381)
• Set model, reasoning effort, speed, and permission profiles directly with inline /model and /permissions arguments. (#54378, #54383)
• Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)
• Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
• Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
• The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)
Bug Fixes
• Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)
• Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)
• Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)
• CLI configuration overrides are preserved when -c or --config appears at multiple subcommand levels. (#56022)
• Queued prompts now wait for pending permission selections to resolve before continuing. (#55682)
• Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)
Chores
• Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)
• Updated the embedded JavaScript runtime with safety checks for optimized Array.sort operations. (#54519)
Changelog
Full Changelog: rust-v0.163.0...rust-v0.164.0
• #53725 Render Markdown web links as labels in Rex @bc-openai
• #53728 Preserve the remote cwd filter in the in-app resume picker @fcoury-oai
• #53732 Reuse compiled search patterns across compressed rollouts @ethernetdan-openai
• #53733 Default Guardian v2 async classification to conversation mode @felixxia-oai
• #53736 Acquire and cache opt-in executor capability inventories via V2 @TAFOYA-OAI
• #53745 Remove modelSlug from the latest-model resolver output @kkahadze-oai
• #53747 Prefer remote Visualize installs over the bundled plugin @philipp-oai
• #53751 Apply feature overrides when restarting the app-server daemon @jif-oai
• #53753 Extend copy-on-select to composer text @fcoury-oai
• #53754 Support Command/Super shortcuts in the TUI keymap @fcoury-oai
• #53763 Enrich V2 capability discovery with resolved plugin and skill metadata @TAFOYA-OAI
• #53780 Remove redundant Codex manual cache directory check @kkahadze-oai
• #53781 Remove the product-gating TODO from SkillPolicy @kkahadze-oai
• #53784 Forward client voice session IDs in realtime requests @chrisdong-oai
• #53790 Fix cancellation of macOS user-verification prompts @bz-openai
• #53794 Retain rollout migration locks across worker cancellation @jif-oai
• #53795 Use the bundled model catalog in the MCP startup invalidation test @OLI-OAI
• #53797 Refresh Guardian reviews when review context changes @jif-oai
• #53800 Wire background compaction into the turn lifecycle @rka-oai
• #53804 Keep the Agent command center visible during archive and delete @etraut-openai
• #53805 Add safe diagnostics to workspace routing configuration errors @etraut-openai
• #53811 Support daemon installation from Windows WinGet packages @etraut-openai
• #53816 Reject Guardian review threads during interactive CLI resume @dylan-hurd-oai
• #53827 Prune unused app-server daemon releases safely @etraut-openai
• #53831 Track content provenance through prompt assembly and compaction @tz-openai
• #53845 Fix daemon updater socket binding and bootstrap readiness on Unix @etraut-openai
• #53853 Reuse staged file digests when preparing daemon installs @charliemarsh-oai
• #53859 Record bucketed terminal sizes in TUI telemetry @imac-oai
• #53872 Refresh model instructions in incremental-tool context windows @rhan-oai
• #53879 Preserve running turn recovery across thread settings updates @bc-openai
• #53895 Resume unloaded subagent threads when selected in the TUI @etraut-openai
• #53897 Isolate daemon package tests to reduce disk contention @etraut-openai
• #53908 Keep the agent dashboard browsable during task removal @etraut-openai
• #53932 Preserve conversation history when compaction fails @jif-oai
• #53940 Bound rollout input for memory extraction @jif-oai
• #53947 Stop rollout reads when the calling task is cancelled @jif-oai
• #53963 Test memory extraction budgets with excluded items and ciphertext @jif-oai
• #53969 Avoid reconnect races in the daemon restart test @jif-oai
• #53987 Skip service backoff for stale Guardian authorization retries @jif-oai
• #53990 Keep host MCP and plugin configuration local with remote environments @jif-oai
• #53991 Report the reason for ChatGPT token refresh requests @tejsudha-openai
• #53996 Bump rustls to 0.23.46 @jif-oai
• #53997 Filter rollout filenames before checking compressed siblings @bbrown-oai
• #54003 Include compressed rollouts in doctor storage statistics @jif-oai
• #54008 Fix session lookup and resume after rollout compression @jif-oai
• #54027 Preserve Windows startup variables and MXC child environment defaults @iceweasel-oai
• #54032 Bound concurrent Git diffs for untracked files @yuzhu-oai
• #54033 Extend memory extension resource retention to 14 days @josh-oai
• #54039 Return async Guardian approvals before review cleanup finishes @jif-oai
• #54044 Keep fork lineage ahead of paginated transcript history @fcoury-oai
• #54046 Track approval cancellation sources and Guardian context changes @vkg-oai
• #54047 Restore elapsed time for replayed in-progress turns @etraut-openai
• #54048 Defer folder trust checks until starting a task from agents overview @etraut-openai
• #54050 Scope TUI skill refreshes and workspace commands to explicit directories @etraut-openai
• #54053 Add Responses API client metadata patches for turn start and steer @marksteinbrick-oai
• #54056 Coalesce overlapping native TLS root certificate loads @jif-oai
• #54057 Distinguish unsupported evidence in Decisions comparison metrics @swastik-oai
• #54058 Forward turn metadata to image generation and edit requests @duc-openai
• #54059 Support store-owned preparation when resuming threads @owenlin0
• #54060 Limit unarchive scans to the requested thread's archived rollouts @bz-openai
• #54069 Fix Windows environment handling for remote MCP servers @iceweasel-oai
• #54070 Expose gateway authentication as a reusable OAuth session API @smurching-oai
• #54076 Avoid false URL-launch detections in literal PowerShell commands @jif-oai
• #54078 Update gix to 0.89.0 and gix-url to 0.40.0 @jif-oai
• #54079 Retire rejected MCP OAuth refresh tokens @mzeng-openai
• #54080 Extract TUI user-turn submission into a dedicated module @bc-openai
• #54081 Centralize vertical navigation in TUI list views @bc-openai
• #54082 Stabilize the Guardian network review timeout test @felixxia-oai
• #54087 Upgrade Bazel's rules_python to 2.4.2 @dkovalenko-oai
• #54094 Preserve specific MCP failure codes in metrics and spans @TAFOYA-OAI
• #54096 Add Bazel targets for on-demand schemas and Python SDK generation @dkovalenko-oai
• #54097 Show Daybreak notices after the session header @charliemarsh-oai
• #54098 Keep environment tools stable across readiness changes @aibrahim-oai
• #54099 Wait for readiness in the SIGTERM cancellation test @felixxia-oai
• #54113 Embed generated app-server schema bundles in Bazel builds @dkovalenko-oai
• #54114 Report terminal completion states and blocking reasons @cconger
• #54119 Allow stdin review under active grants with sandbox prompts disabled @tepman-oai
• #54133 Record per-tool incremental update and description size metrics @akira-oai
• #54135 Allow large file writes over direct exec-server WebSockets @ostepanian
• #54151 Generate keymap descriptors and binding accessors from one catalog @bc-openai
• #54169 Reload the model catalog after account changes @smurching-oai
• #54170 Preserve ChatGPT authentication for Gov MCP servers @lsingh-oai
• #54175 Retire worktree and voice feature flags @bc-openai
• #54216 Show image previews in the fullscreen transcript @etraut-openai
• #54217 Apply syntax theme colors to Markdown prose in the TUI @etraut-openai
• #54250 Add regression tests for case-variant metadata protection @jif-oai
• #54257 Preserve recent speech when trimming realtime transcripts @jif-oai
• #54263 Require fresh Guardian approval for escalated tool retries @jif-oai
• #54264 Track Guardian transcript admission across failed reviews @jif-oai
• #54265 Add regression coverage for Guardian sandbox retry approvals @jif-oai
• #54273 Protect metadata writes through macOS case aliases @jif-oai
• #54278 Share Guardian image deduplication and checkpoint restoration @felixxia-oai
• #54281 Attribute compaction summaries to the assistant in Guardian transcripts @jif-oai
• #54309 Enable credential masking for remote exec-server commands @viyatb-oai
• #54315 Keep TUI Markdown colors readable against their backgrounds @fcoury-oai
• #54316 Centralize context fragment kind constants @ioanbudea-OAI
• #54346 Add scoped executor credential auth for remote exec-server @viyatb-oai
• #54351 Use the turn index for turn-scoped item pagination @bz-openai
• #54363 Filter uninspectable network roots from implicit MXC read grants @iceweasel-oai
• #54365 Prevent duplicate assistant messages around interleaved commands @fcoury-oai
• #54369 Retry SQLite operations on transient writer conflicts

New Features

• Open /config to search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429)
• Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)
• Configure a leader key in /keymap. The default is Ctrl+X, shortcut hints stay open until you choose or cancel, and voice mute moves to F9. (#52273)
• Restart a managed background server from /daemon. Codex warns about work the restart could interrupt, then reconnects automatically. (#53173)
• Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups. (#52245)
• Daybreak is enabled by default for eligible accounts. codex exec can also select it with an OpenAI API key when the server offers access. (#53701, #53717)

Bug Fixes

• Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)
• The network proxy now checks permission before a DNS lookup, rejects duplicate Host headers, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506)
• Return to an existing side conversation with /side after switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436)
• On Windows, Ctrl+V and Shift+Insert paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453)
• Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)
• codex exec no longer prints the same file diff again after an unrelated command. (#53444)

Documentation

• Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations. (#51768)
• Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering. (#52610)

Chores

• Codex now uses its standard shell executor and no longer bundles a patched zsh. Configurations using the retired shell flags receive a migration notice. (#52160, #52213)
• Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs. (#52178)

Changelog

Full Changelog: rust-v0.162.0...rust-v0.163.0

• #51539 Add completion-aware realtime attachment and session-scoped detach @zahan-oai
• #51547 Add a Windows MXC sandbox opt-out @iceweasel-oai
• #51556 Complete dynamic tool lifecycles on cancellation @mikelam-oai
• #51575 Expose package assembly helpers and support gzip DotSlash artifacts @bolinfest
• #51595 Add thread ID exclusions to thread/list @btraut-openai
• #51602 Distinguish thread listing failures from exhausted history @btraut-openai
• #51611 Signal abandonment of unanswered MCP elicitations @nicksteele-oai
• #51627 Stabilize Guardian snapshot prefixes by separating assistant context @jif-oai
• #51642 Fix retained context handling for typed section content @jif-oai
• #51650 Require hostname authorization before proxy DNS lookups @jif-oai
• #51651 Persist Guardian review failures for reports across restarts @jif-oai
• #51652 Record telemetry for AGENTS.md changes made by apply_patch @jif-oai
• #51678 Move Windows sandbox tests into a dedicated integration binary @jif-oai
• #51683 Roll back stale Guardian reviews before reusing reviewer history @olliem-oai
• #51689 Wait for helper completion in HTTP header cancellation tests @jif-oai
• #51690 Add a feature flag for Code Mode tool description ordering @swastik-oai
• #51704 Honor tool-description-first ordering in Code Mode @swastik-oai
• #51710 Fix a discovery race in the external auth refresh test @jgershen-oai
• #51734 Load persisted sender context for Guardian reviews @jif-oai
• #51755 Reuse MCP handler metadata for cache comparisons @owenlin0
• #51761 Reduce tool metadata cloning in the code-mode runtime @akira-oai
• #51768 Expand OpenAI Docs migration guidance to the GPT-6 model family @kkahadze-oai
• #51775 Prevent recursive Tokio tracing in telemetry and SQLite logs @zbarsky-openai
• #51786 Preserve sandbox overrides across execution requests @iceweasel-oai
• #51794 Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock @celia-oai
• #51800 Remove duplicate field initializers in extension registry tests @anp-oai
• #51808 Preserve diagnostic reasons for MCP user verification failures @berkdeniz-oai
• #51812 Enable instant interrupts by default @pakrym-oai
• #51819 Migrate the MXC sandbox to the 1.0.0 SDK @iceweasel-oai
• #51822 Avoid sharing violations when repairing Windows runtime ACLs @johnl-oai
• #51823 Share MCP binding tool metadata with prepared calls @owenlin0
• #51828 Add policy-based file contents integrity checks @iceweasel-oai
• #51831 Add MXC sandbox integrity dependency and policy preparation @iceweasel-oai
• #51835 Enable code mode interruption by default @won-openai
• #51840 Add a bubblewrap backend for sandbox integrity checks @iceweasel-oai
• #51841 Add a macOS Seatbelt backend for sandbox integrity @iceweasel-oai
• #51842 Add a sandbox integrity runner with outcome and timing metrics @iceweasel-oai
• #51843 Run sandbox integrity checks before commands and filesystem operations @iceweasel-oai
• #51847 Preserve Cargo package names in Bazel Rust builds @dkovalenko-oai
• #51848 Align Bazel release builds with Cargo and fix platform compatibility @dkovalenko-oai
• #51849 Fix package smoke tests for Cargo and Bazel debug symbols @dkovalenko-oai
• #51850 Add Bazel release staging archives @dkovalenko-oai
• #51855 Add Bazel support to the Codex package build action @dkovalenko-oai
• #51856 Build Bazel release artifacts alongside Cargo artifacts @dkovalenko-oai
• #51857 Add an app-server prompt prefix compatibility test @jif-oai
• #51865 Use readable plugin mentions without suppressing same-name skills @canvrno-oai
• #51866 Preserve line breaks and links in multiline async questions @pash-openai
• #51868 Record tool registration metrics for each sampling request @akira-oai
• #51872 Keep global app-server config independent of the launch directory @etraut-openai
• #51884 Add experimental prediction forks that inherit parent context @liame-oai
• #51890 Add the missing mxc-sdk UTF-8 resource patch for Bazel @iceweasel-oai
• #51892 Preserve tool call completeness when recorded arguments are truncated @ningyi-oai
• #51893 Record metrics for incremental tool updates @akira-oai
• #51895 Report specific reasons for WebSocket continuation failures @pakrym-oai
• #51896 Preserve native errors in Windows sandbox ACL diagnostics @alishobeiri-oai
• #51897 Use a dedicated matcher for network domain policies @rafael-oai
• #51908 Honor the user input setting for asynchronous questions @mandal-OAI
• #51930 Support model-specific function description prefixes @tz-openai
• #51963 Attribute compaction analytics to the correct voice session @reia-oai
• #51974 Log Windows sandbox availability and backend selection @iceweasel-oai
• #52034 Preserve agent state when unloading idle multi-agent v2 children @jif-oai
• #52040 Add regression coverage for cancelled agent reloads @jif-oai
• #52048 Cover instant interruption in steered-input persistence tests @jif-oai
• #52061 Run Guardian conversation classifiers concurrently and preserve action order @felixxia-oai
• #52062 Add scenario coverage for worker context across idle eviction @jif-oai
• #52065 Require assessment text in the Guardian parser @ioanbudea-OAI
• #52081 Fix idle cleanup for disconnected multi-agent v2 children @jif-oai
• #52119 Expose originating tool call metadata in command environments @leo-oai
• #52160 Remove the patched zsh shell execution backend @jif-oai
• #52164 Make environment context date and timezone configurable @surajs-oai
• #52176 Show AWS GovCloud guidance at startup and remember acknowledgment @jackz100
• #52177 Set a User-Agent for package archive downloads @bolinfest
• #52178 Strip symbols from source-built release package binaries @bolinfest
• #52182 Expose a verified sandbox launcher to local MCP servers @bolinfest
• #52183 Add optional descriptions to agent message board channels @jif-oai
• #52184 Preserve side conversations across thread navigation @etraut-openai
• #52193 Enforce managed MXC requirements on Windows @iceweasel-oai
• #52195 Track source attribution for individual context parts @tz-openai
• #52200 Allow plugin toggles while searching and preserve filters on refresh @fcoury-oai
• #52203 Expose Codex lifecycle status in iTerm2 sessions @fcoury-oai
• #52213 Stop bundling patched zsh in Codex packages @jif-oai
• #52215 Enforce application network policy in standalone MCP commands @lsingh-oai
• #52220 Add configurable default plugin activation policy @stevenlee-oai
• #52223 Enforce application network policy for daemon updates @jackz100
• #52225 Fix config rebuild call in the Windows MXC preference test @virajrai-oai
• #52226 Include foreground activity in iTerm2 session status @fcoury-oai
• #52228 Honor API-key feature gates in TUI Daybreak selection @julee-oai
• #52234 Support request IDs in exec-server WebSocket handshakes @mattj-openai
• #52235 Recover gRPC code-mode sessions after missing-session errors @surajs-oai
• #52241 Preserve subagent capabilities independently of forked history @anp-oai
• #52245 Enable parallel execution for read-only tools @zamoshchin-openai
• #52250 Add opt-in Guardian trust for orchestrator connector identities @ankushg
• #52256 Normalize formatting in docs, web assets, and sample scripts @anp-oai
• #52268 Preserve large arguments in executed tool call metadata @ningyi-oai
• #52270 Enable text selection

Composer predictions adds autocomplete-style suggestions for your next message in the Codex desktop app. After Codex responds, it uses the current conversation to suggest a follow-up prompt in the message box. Press Tab to accept the suggestion as an editable draft, or type your own message. Accepting a prediction doesn’t send it for you.

The feature is available in beta to users aged 18 and older with personal ChatGPT Pro plans in supported regions, in local and SSH threads with GPT-6 Astra and GPT-6.1 Sol.

Learn more about composer predictions.

New Features

• Add tools for creating and listing managed Git worktrees from trusted local projects when the worktrees feature is enabled. (#50148)
• Pin tasks in the agent Command Center with p and keep them in a shared Pinned group when supported by the server. (#51500)
• Navigate and copy transcript blocks with /copy, use Ctrl+Insert to copy selections, and tune mouse-wheel scrolling with tui.mouse_scroll_speed. (#50434, #50215, #50209)
• Make URLs clickable in approval headers, questions, MCP prompts, warnings, banners, and verification prompts, including when links wrap across lines. (#51439, #51449, #51450, #51451, #51452, #51458)
• Configure live web access and remote compaction capabilities for custom Responses-compatible model providers. (#50459)
• Add JavaScript helpers for streaming promise results as they settle, plus opt-in ranked tool search in Code Mode. (#51126, #51209)

Bug Fixes

• Respect server model and reasoning-summary defaults for new TUI threads while retaining explicit launch overrides. (#50013, #50811, #50913)
• Preserve existing CRLF line endings in apply_patch updates without requiring an opt-in. (#51203)
• Fix Linux sandbox startup with multiple denied files, reject writable sandbox-construction executables, and keep ripgrep configuration from weakening deny-glob masks. (#50059, #51211, #51407, #51527)
• Restore ordinary drive-letter file access on Windows 10 and match Windows sandbox temp permissions to the child process environment. (#51511, #51512)
• Honor server Retry-After advice for retryable Responses and WebSocket failures. (#50418, #51440)
• Fix archive checksum verification when installing through Windows PowerShell with PowerShell 7 module paths present. (#51257)

Chores

• Publish a signed PowerShell installer with Windows releases. (#51158)
• Keep older stable releases and prereleases from replacing newer stable download targets or installer aliases. (#51186, #51425)

Changelog

Full Changelog: rust-v0.161.0...rust-v0.162.0

• #50013 Honor server model defaults when starting fresh TUI threads @etraut-openai
• #50018 Use descriptor-safe helpers for executable test fixtures @jif-oai
• #50019 Protect the guardian decisions API key from environment forwarding @swastik-oai
• #50026 Preserve user restrictions in Guardian handoff context @jif-oai
• #50035 Follow MCP tool pagination in legacy protocol mode @jif-oai
• #50039 Keep transcript Find results readable after closing the query @fcoury-oai
• #50045 Keep transcript Find expansion scoped to the current match @fcoury-oai
• #50046 Stabilize Windows voice build cache keys across tool reinstalls @anp-oai
• #50050 Keep plugin and skill snapshots scoped to each step @sayan-oai
• #50052 Preserve question context in recovered TUI answer drafts @imac-oai
• #50054 Check token estimate filtering directly on the tracing subscriber @tamird
• #50058 Upgrade Windows bindings to windows-sys 0.61.2 @tamird
• #50059 Fix Linux sandbox startup with multiple denied files @yuzhu-oai
• #50066 Add a bounded Decisions transport for Guardian comparison classification @swastik-oai
• #50082 Enable dynamic tool inheritance for fresh V2 subagents @ke-oai
• #50083 Add paginated reverse lookup for thread attachments @joeytrasatti-openai
• #50087 Preserve queued agent mail across session eviction @jif-oai
• #50093 Prevent shared instruction providers from delegating to themselves @bryanashley
• #50094 Add attachment owner lookup to the app-server @joeytrasatti-openai
• #50099 Add opt-in Decisions comparison for Guardian V2 @swastik-oai
• #50105 Consolidate chat composer footer logic in footer_state @imac-oai
• #50109 Keep fullscreen prompts bounded and scrollable @imac-oai
• #50112 Centralize TUI loading glyphs and frame scheduling @imac-oai
• #50113 Add a native gRPC client for cloud thread resume and attach @bc-openai
• #50128 Expose the model selected for a running turn's next step @sayan-oai
• #50129 Preserve Windows environment variables for remote MCP servers @aidanv-oai
• #50131 Add opt-in JSON diagnostics for TCP tunnels @richardopenai
• #50140 Use the server permission catalog for TUI permission shortcuts @etraut-openai
• #50148 Add managed worktree tools to the TUI @bc-openai
• #50162 Bound in-flight file opens in exec-server @anp-oai
• #50166 Upgrade age to 0.12.1 and remove the obsolete advisory exception @michaelm-openai
• #50177 Enable writable file streaming in exec-server @anp-oai
• #50183 Add dots to issue labeler guidance @etraut-openai
• #50189 Replace the Figma OAuth exception with Mercado Pago @mzeng-openai
• #50199 Restore the account email in /status after account updates @etraut-openai
• #50200 Report the configured TUI mode in codex doctor @etraut-openai
• #50207 Release stable Markdown tables into scrollback during streaming @etraut-openai
• #50209 Make transcript mouse scroll speed configurable @etraut-openai
• #50215 Support Ctrl+Insert for copying TUI selections @etraut-openai
• #50216 Use the shared text editor for command-center task renaming @bc-openai
• #50219 Bound tmux option probes to one second @etraut-openai
• #50273 Record Guardian V2 Decisions agreement and latency metrics @swastik-oai
• #50339 Add end-to-end coverage for MCP sandbox state enforcement @bolinfest
• #50345 Keep the subagent picker consistent with thread archive state @etraut-openai
• #50348 Back off automatic remote control reconnects with jitter @cooper-oai
• #50354 Skip unrelated subtrees during config alias normalization @btraut-openai
• #50359 Render ANSI styles in TUI hook system messages @etraut-openai
• #50360 Remove initial messages from session configuration events @owenlin0
• #50375 Use printable ASCII terminal titles under GNU Screen @imac-oai
• #50380 Fix thread unloading after disconnect during MCP startup @yuzhu-oai
• #50384 Allow opting into 16 KiB ARM64 code pages for macOS signing @chess-oai
• #50389 Honor configured keybindings before transcript navigation @etraut-openai
• #50396 Honor pager bindings for transcript page keys @bc-openai
• #50402 Consolidate command execution output into aggregated_output @owenlin0
• #50416 Clarify Git worktree choices for new and forked conversations @bc-openai
• #50418 Honor Retry-After headers in failed Responses events @anp-oai
• #50427 Cap persisted command output in paginated history at 64 KiB @owenlin0
• #50431 Preserve terminal hyperlinks in agents overview previews @bc-openai
• #50433 Allow API-key accounts to use Daybreak in the TUI @etraut-openai
• #50434 Add keyboard copy selection to the owned transcript @bc-openai
• #50435 Persist additional tool definitions in rollout history @pakrym-oai
• #50437 Add a CLI command to uninstall the legacy Windows sandbox @chess-oai
• #50441 Support ordered response items in world-state context updates @pakrym-oai
• #50442 Preserve native USD amounts in thread usage responses @asohrabi-oai
• #50443 Stabilize paused-time code-mode service tests @seanh-oai
• #50445 Assert that only direct tool calls emit timing events @seanh-oai
• #50446 Bundle rollout attachments into a gzip tar archive @dkovalenko-oai
• #50447 Remove the provider capability gate for tool namespaces @pakrym-oai
• #50454 Measure rollout persistence size reductions @owenlin0
• #50458 Truncate oversized MCP results in paginated thread history @owenlin0
• #50459 Add capability overrides for custom model providers @celia-oai
• #50462 Populate thread previews from delegated task inputs @bc-openai
• #50464 Add the incremental_tools feature flag @pakrym-oai
• #50465 Retry registry authentication outages and jitter executor reconnects @apanasenko-oai
• #50467 Copy transcript selections as literal text while preserving rich HTML @fcoury-oai
• #50470 Account for JSON overhead when truncating MCP tool results @owenlin0
• #50472 Enable Ultrafast service tiers for Amazon Bedrock Astra models @celia-oai
• #50477 Use the app-server default output cap for TUI workspace commands @etraut-openai
• #50480 Skip managed config loading for registered Windows sandbox refreshes @zm-oai
• #50499 Include installer stderr in daemon update failures @etraut-openai
• #50503 Use Enter to accept transcript Find results and Escape to cancel @fcoury-oai
• #50504 Center TUI confirmations over their retained backdrop @bc-openai
• #50505 Keep Command Center selection adjacent after task removal @bc-openai
• #50507 Record Windows sandbox service stop diagnostics @zm-oai
• #50510 Require GovCloud guidance acknowledgment after Bedrock setup @jackz100
• #50516 Add scenario coverage for remote /compact context preservation @pakrym-oai
• #50525 Reject unknown TUI keys in strict config validation @etraut-openai
• #50531 Persist realtime transcript tails before closure without inference @guinness-oai
• #50536 Keep shared MCP types stable in Code Mode exec descriptions @aibrahim-oai
• #50540 Send incremental tool catalog updates in Responses Lite @pakrym-oai
• #50546 Keep MCP resource helpers available in code mode @aibrahim-oai
• #50555 Skip daemon auto-start for Windows-mounted WSL homes @etraut-openai
• #50558 Avoid reading the current directory when resolving absolute paths @etraut-openai
• #50559 Distinguish daemon release identity from executable contents @etraut-openai
• #50562 Keep Code Mode tool discovery guidance stable across catalog changes @aibrahim-oai
• #50564 Allow transcript selection and copying while bottom modals are open @etraut-openai
• #50687 Keep third-party tools deferred in strict Code Mode Only @aibrahim-oai
• #50695 Preserve local Markdown link labels in the TUI @bc-openai
• #50700 Let the transport create the Windows remote-control socket directory @etraut-openai
• #50720 Decode Windows Terminal's mapped Shift+Enter sequence @bc-openai
• #50727 Show model and reasoning effort near the top of task details @etraut-openai
• #50741 Keep environment-backed tools exposed across readiness changes @won-openai
• #50756 Show unavai...

New Features

• GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
• Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
• Sign in to MCP servers from an active terminal session with /mcp login <name>. (#49290)
• Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
• Daybreak is opt-in through --enable cli_daybreak or features.cli_daybreak=true; daybreak=true alone is insufficient. By default, controls and indicators are hidden, /daybreak is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)
• Select a Cyber access program per turn with codex exec --cyber-access-program or the TypeScript SDK’s cyberAccessProgram option. The explicit exec override remains available with cli_daybreak disabled and leaves the saved choice unchanged. (#49939, #51207)

Bug Fixes

• Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
• Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
• Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
• Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
• Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
• Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)

Documentation

• Authentication guidance now accounts for keyring storage instead of implying credentials always reside in auth.json. (#49361)

Chores

• Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)

Changelog

Full Changelog: rust-v0.160.0...rust-v0.161.0

• #49246 Use executable fixture copying in the bundled bwrap test @felixxia-oai
• #49257 Allow Guardian cached approvals with incomplete root context @felixxia-oai
• #49260 Restrict enterprise MCP auth and fail closed on config refresh @nicksteele-oai
• #49261 Preserve Windows sandbox runner launch errors @zm-oai
• #49262 Trace turn phases and correlate accepted input with turns @jif-oai
• #49266 Remove the remote agent message board client README @jif-oai
• #49267 Support remote agent message boards in multi-agent sessions @jif-oai
• #49269 Preserve thread overrides and cloud policy validity during config reloads @nicksteele-oai
• #49275 Isolate realtime conversation tests from Responses prewarm connections @felixxia-oai
• #49276 Enable enterprise MCP sign-in and account-scoped grant cleanup @nicksteele-oai
• #49277 Avoid a turn teardown race in the Guardian agent message test @felixxia-oai
• #49280 Restrict capability roots to captured turn environments @miz-openai
• #49286 Model exec-server session attachment state as an enum @jif-oai
• #49290 Add /mcp login to the TUI @nicksteele-oai
• #49294 Record Guardian context mode in review and classification telemetry @felixxia-oai
• #49295 Simplify configuration fingerprint canonicalization @jif-oai
• #49297 Scan the session index backwards for batch thread name lookups @jif-oai
• #49300 Compact the inline hidden tag buffer once per chunk @jif-oai
• #49305 Batch metadata reads when resolving thread names @jif-oai
• #49308 Run piped legacy Windows sandbox processes without a console @etraut-openai
• #49312 Notify parent agents when Guardian stops a subagent @jif-oai
• #49316 Bump taiki-e/install-action to v2.87.21 in CI setup @jgershen-oai
• #49318 Add GPT-6.1 Sol as the default catalog model @andrewgu-oai
• #49325 Retry Windows sandbox runner logon once on error 1056 @zm-oai
• #49330 Keep remote control reconnect backoff capped during sustained failures @yansenzhou-oai
• #49332 Clean up canceled exec-server RPC requests immediately @jif-oai
• #49339 Add GPT-6.1 Sol to Bedrock catalogs and make it the default @celia-oai
• #49345 Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock @celia-oai
• #49353 Allow approved filesystem escalation while preserving denied reads @viyatb-oai
• #49357 Continue Markdown blockquotes when pasting multiline text @bc-openai
• #49360 Carry shell invocation metadata and report executor PATH directories @anp-oai
• #49361 Clarify credential storage wording across authentication UI and docs @celia-oai
• #49369 Update Bedrock GPT-6 Sol catalog tests to expect multi-agent V2 @celia-oai
• #49379 Compile hook matchers during discovery @jif-oai
• #49384 Track credential storage outcomes and redact sensitive errors @celia-oai
• #49388 Fix Windows path inference for opaque URIs with slash prefixes @dkovalenko-oai
• #49389 Serialize tests that share Windows sandbox accounts @jgershen-oai
• #49392 Add attributed MCP OAuth credential storage telemetry @celia-oai
• #49395 Remove randomized greetings from TUI session headers @etraut-openai
• #49401 Preserve live tool-call metadata across request windows @ningyi-oai
• #49403 Add an experimental flag for bundled tools in login shells @anp-oai
• #49406 Support explicit cyber access programs with OpenAI API keys @julee-oai
• #49407 Recover exec-server sessions after environment info timeouts @vivi
• #49408 Compare tool call metadata in the recorder refresh test @euroelessar
• #49411 Bind the app-server time provider to a local variable @euroelessar
• #49414 Filter graceful shutdown guard and trigger traces from SQLite logs @dkovalenko-oai
• #49415 Truncate input text in protocol debug output @dkovalenko-oai
• #49416 Omit payloads from multiline ANSI warnings @dkovalenko-oai
• #49424 Infer Windows UNC paths with forward and mixed slashes @dkovalenko-oai
• #49425 Prune diagnostic logs periodically by age and database size @dkovalenko-oai
• #49426 Enable analytics by default for daemon-launched app servers @bc-openai
• #49432 Preserve bootstrap discovery across authentication changes @cooper-oai
• #49437 Add local audio device selection to TUI voice settings @bc-openai
• #49441 Honor server retry advice across Responses retries and fallback @anp-oai
• #49444 Use memrchr to find newlines in reverse JSONL scans @btraut-openai
• #49467 Restore executor tool paths after login shell startup @anp-oai
• #49472 Use server-authoritative permissions in the TUI @etraut-openai
• #49473 Use the rmcp SDK for enterprise-managed token exchanges @nicksteele-oai
• #49475 Complete turn abort callbacks before emitting terminal events @euroelessar
• #49478 Discover and validate MCP authorization servers before ID-JAG exchange @nicksteele-oai
• #49480 Add experimental thread prediction protocol types @keyz
• #49489 Add regression coverage for account switches between analytics batches @anp-oai
• #49517 Add a fork shortcut to the TUI command center @etraut-openai
• #49560 Add an opt-in model catalog to multi-agent context @jif-oai
• #49564 Copy selected file paths as plain text in the TUI @fcoury-oai
• #49584 Skip host skill discovery for Guardian reviews @jif-oai
• #49595 Make the strict network approval test independent of request order @jif-oai
• #49598 Persist explicit user goal edits in model history @felixxia-oai
• #49599 Return authoritative replay history when resuming a thread @felixxia-oai
• #49600 Reuse unchanged history snapshots when resuming threads @felixxia-oai
• #49624 Use server authentication for explicit remote session commands @cooper-oai
• #49642 Allow managed requirements to disable the Windows MXC sandbox @iceweasel-oai
• #49675 Serialize Responses routing fields before large inputs @jbeckwith-oai
• #49678 Escape command drafts when recovering question answers @imac-oai
• #49683 Add a managed feature gate for in-app voice @vishnu-oai
• #49686 Deliver remote message board notifications to active turns @jif-oai
• #49689 Export skill invocation events through OpenTelemetry @jif-oai
• #49690 Preserve PowerShell relative paths in the elevated Windows sandbox @johnl-oai
• #49692 Keep compressed rollout snippet searches on one blocking worker @npancha-openai
• #49693 Move thread history projection into one blocking task @charliemarsh-oai
• #49694 Batch rollout listing scans on cancellable blocking workers @charliemarsh-oai
• #49696 Make exec-server file reads cancellable between chunks @charliemarsh-oai
• #49701 Detect SQLite corruption during startup and preserve recovery backups @dkovalenko-oai
• #49702 Rename exec-server file handle management identifiers @anp-oai
• #49704 Prevent npm alpha dist-tags from moving backward @imac-oai
• #49706 Upgrade the argument comment lint toolchain and Dylint @tamird
• #49708 Move session index I/O off async runtime threads @charliemarsh-oai
• #49710 Classify SQLite corruption using typed error codes @dkovalenko-oai
• #49712 Avoid full-string scans in token-budget truncation @jif-oai
• #49713 Remove repository-local Codex guidance, skills, and environment config @anp-oai
• #49714 Decouple API-key cyber access programs from model discovery @julee-oai
• #49715 Add account security setup reminders to the TUI @dennyku
• #49778 Define exec-server protocol types for streamed file writes @anp-oai
• #49781 Include the environment's MXC backend in MCP sandbox metadata @zm-oai
• #49782 Clean up process groups for failed shell snapshot captures @jif-oai

New Features

• Browse older tasks in the agent command center with a keyboard-accessible “Show more” action. (#49106)
• Select transcript text and paste with middle-click in fullscreen mode on supported local Linux X11 terminals. (#49112)
• Start sessions outside a project with workspace defaults when policy permits, and restore saved permissions when resuming. (#49160)
• Added opt-in Guardian review capabilities to retrieve earlier user instructions and include context from agent handoffs. (#49036, #49057)

Bug Fixes

• Unsent queued messages now resume after reconnection once uncertain submissions are resolved, avoiding duplicate sends. (#49105)
• The terminal UI now preserves server provider, reasoning-summary, and verbosity settings and shows the correct sessions in resume and fork history. (#49144, #49161, #49171)
• Fixed Windows sandbox PowerShell fallbacks and long-path permission repairs, and suppressed unwanted console windows from background helpers. (#49019, #49058, #49098, #49164, #49386)
• Subagents now retain environments that are still starting and receive their configuration or preparation failure. (#49075)
• Prevented SQLite stalls during connection setup and logging, and surfaced initialization errors instead of masking them as timeouts. (#49032, #49102)
• Explicit provider model catalogs no longer include unsupported bundled models or reuse stale entries after refresh failures. (#49135)

Documentation

• Clarified how provider credentials use the configured storage backend and how env_key identifies the API-key environment variable. (#49118)

Chores

• Reduced repeated plugin-loading work by caching parsed manifests and reusing HTTP connections for remote plugin requests. (#49099, #49100)
• Added background reclamation of unused log database space to reduce disk usage. (#49069)

Changelog

Full Changelog: rust-v0.159.0...rust-v0.160.0