New Features

• Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386)
• Expanded /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444)
• Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695)
• Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385)
• Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383)
• Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346) Bug Fixes
• Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211)
• Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359)
• Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, #32781, #32825, #33184, #33297)
• Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, #32857, #33926, #34423)
• Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, #31876, #31899)
• Strengthened safety and approval handling with better forced-rm detection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, #33464, #34400) Documentation
• Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, #33121) Chores
• Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173)
• Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, #33369, #33423, #34431)
• Updated the packaged ripgrep binary to 15.2.0. (#34384) Changelog Full Changelog: rust-v0.144.0...rust-v0.145.0
• #31667 fix: parse compact release metadata in installer @efrazer-oai
• #31362 core: route realtime and memories through HTTP client factory @bolinfest
• #31566 perf(skills): reuse walk inventory for host loading @jif-oai
• #31576 Bound exec-server process event reordering @jif-oai
• #31756 test(skills): assert symlinked metadata loading @jif-oai
• #31581 Resolve selected capability roots without starting executors @jif-oai
• #31789 Stop persisting RMCP service traces @jif-oai
• #31792 Summarize streamed response item logs @jif-oai
• #31791 Filter routine Hyper logs from SQLite @jif-oai
• #31790 Reduce MCP tool-list trace volume @jif-oai
• #31804 Stabilize the memories feature flag @jif-oai
• #31803 fix(mcp): default Apps product SKU to codex @alecbarber-oai
• #31745 code-mode: retain shared MCP types for deferred tools @sayan-oai
• #31672 Import enabled plugins from known marketplaces @charlesgong-openai
• #31652 fix(tui): hide empty reasoning summaries @fcoury-oai
• #31767 Remove the network proxy config wrapper @jif-oai
• #31481 fix: forward originator to Codex Apps MCP @raquel-openai
• #31363 codex-api: route file uploads through HTTP client factory @bolinfest
• #31813 tui: update safety buffering copy @etraut-openai
• #31830 fix(sandboxing): initialize network proxy config inline @fcoury-oai
• #31431 build: ratchet direct reqwest dependencies @bolinfest
• #31876 code-mode: fix installation on darwin @cconger
• #31842 Update bundled OpenAI Docs skill for GPT-5.6 @kkahadze-oai
• #31637 login: route raw auth flows through HTTP client @bolinfest
• #31686 [codex-apps] Filter optional file fields by tool schema @tsarlandie-oai
• #31899 code-mode: fall back to using in process v8 if we fail to resolve external process @cconger
• #31805 Bound remote MCP stdio lines @jif-oai
• #30293 Resolve and pin MCP OAuth credential stores @stevenlee-oai
• #31892 exec-server: materialize filesystem workspace roots @pakrym-oai
• #31327 feat: add managed Bedrock login API @celia-oai
• #31295 bench: add codex help e2e macrobenchmark @anp-oai
• #31428 bench: add e2e benchmark entrypoints @anp-oai
• #31937 exec-server: expose process helper to outer sandbox @pakrym-oai
• #32093 Remove the legacy exec policy engine @copyberry
• #32106 Reduce startup latency for ancestor discovery @copyberry
• #32112 Bound streamed exec-server HTTP response bodies @copyberry
• #32122 Test the shared exec-server HTTP response byte budget @copyberry
• #32123 Bound exec-server stdio JSON-RPC messages @copyberry
• #32126 Test bounded concurrency in ancestor discovery @copyberry
• #32134 Test stdio JSON-RPC size limits with LF and CRLF @copyberry
• #32135 Propagate tracing subscribers to exec start tasks @copyberry
• #32150 Keep unified exec output collection bounded @copyberry
• #32193 Validate memory consolidation artifacts before succeeding @copyberry
• #32197 Rebind memory consolidation workspace roots @copyberry
• #32200 Add a skill invocation extension contributor @copyberry
• #32206 Always send reasoning parameters in Responses requests @copyberry
• #32213 Generate unique IDs for review rollout messages @copyberry
• #32214 Propagate workspace roots to exec-server sandboxes @copyberry
• #32229 Serialize MCP OAuth credential refreshes @copyberry
• #32231 Support pending remote environment registration @copyberry
• #32232 Let permission hooks resolve strict auto-review requests @copyberry
• #32234 Add dedicated storage for paginated thread history @copyberry
• #32246 Extract reverse JSONL scanning from session indexing @copyberry
• #32256 Improve Responses WebSocket timing telemetry @copyberry
• #32261 Preserve local path conventions in automatic approvals @copyberry
• #32263 Include start times in terminal turn events @copyberry
• #32272 Expose scheduled tasks in plugin details @copyberry
• #32274 Remove the personality migration @copyberry
• #32276 Repair unterminated rollout files before appending @copyberry
• #32277 Honor personality = "none" in model instructions @copyberry
• #32280 Include terminal errors in turn completion events @copyberry
• #32286 Clarify waiting behavior in safety buffering prompts @copyberry
• #32288 Make GPT-5.6 Sol the default Bedrock model @copyberry
• #32289 Persist paginated items in the local thread store @copyberry
• #32290 Respect model support for reasoning summaries @copyberry
• #32301 Trust hooks from materialized workspace plugins @copyberry
• #32302 Prefer the Codex home socket for Unix IDE context @copyberry
• #32305 Improve file blob upload diagnostics @copyberry
• #32312 Require prefixes for outbound response item IDs @copyberry
• #32316 Stop falling back to older model availability announcements @copyberry
• #32326 Use canonical links in the moved config notice @copyberry
• #32332 Add ordinals to paginated rollout records @copyberry
• #32441 Preserve parent sandbox enforcement for memory consolidation @copyberry
• #32460 Emit thread-idle lifecycle after guardian interrupts @copyberry
• #32461 Expand tabs when rendering TUI diffs @copyberry
• #32485 Use available width for skill names in the toggle view @copyberry
• #32628 Improve composer completion target resolution @copyberry
• #32698 Extract connector runtime snapshot management @copyberry
• #32744 Log missing personality messages at trace level @copyberry
• #32746 Make advanced reasoning selection explicit in the TUI @copyberry
• #32747 Align Guardian reviews with session configuration @copyberry
• #32749 Expose model overrides for multi-agent v2 spawns @copyberry
• #32751 Restrict spawned-agent models to the active backend @copyberry
• #32761 Add shadow metrics for lexical skill selection @copyberry
• #32768 Align shadow skill selection with observable sources @copyberry
• #32780 Enable skill search shadow selection by default @copyberry
• #32781 Apply MCP startup timeouts during client creation @copyberry
• #32801 Refactor OAuth store lock contention tests @copyberry
• #32822 Make explicit multi-agent mode override proactive delegation @copyberry
• #32825 Avoid blocking thread startup on MCP OAuth discovery @copyberry
• #32835 Forward turn metadata in standalone web search @copyberry
• #32837 Restore V2 agent identities on root thread resume @copyberry
• #32838 Reap exited PID-managed app-server children @copyberry
• #32844 Expand millisecond duration histogram boundaries @copyberry
• #32849 Hide Windows filesystem helper console windows @copyberry
• #32857 Require the elevated Windows sandbox for network proxies @copyberry
• #32858 Persist slash-command popup dismissal @copyberry
• #32864 Coalesce concurrent Windows sandbox setup requests @copyberry
• #32866 Allow responses after image generation @copyberry
• #32867 Include connector IDs in MCP tool call analytics @copyberry
• #32875 Use model catalog policies for Guardian auto review @copyberry
• #32881 Broaden remote compaction model fallback @copyberry
• #32884 Prepare external agent migration for source adapters @copyberry
• #32887 Tag shell tool telemetry by command category @copyberry
• #32891 Attach connector caches to diagnostic uploads @copyberry
• #32894 Serialize plugin install requests @copyberry