OpenAI Codex CLI Files

New Features

• Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, [#33907], [#34085], [#34229], [#34386])
• Expanded /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, [#33411], [#33426], [#33444])
• Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, [#33170], [#33175], [#32288], [#33695])
• Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, [#33856], [#33932], [#34080], [#34385])
• Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, [#33631], [#33657], [#33841], [#34383])
• Added secure, clickable inline visualization links in the terminal UI. (#33925, [#34217], [#34346])

Bug Fixes

• Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, [#33207], [#33211])
• Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, [#34049], [#34216], [#34223], [#34359])
• Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, [#32781], [#32825], [#33184], [#33297])
• Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, [#32857], [#33926], [#34423])
• Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, [#31876], [#31899])
• Strengthened safety and approval handling with better forced-rm detection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, [#33464], [#34400])

Documentation

• Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, [#33121])

Chores

• Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173)
• Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, [#33369], [#33423], [#34431])
• Updated the packaged ripgrep binary to 15.2.0. (#34384)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.0...rust-v0.145.0

• [#31667] fix: parse compact release metadata in installer @efrazer-oai
• [#31362] core: route realtime and memories through HTTP client factory @bolinfest
• [#31566] perf(skills): reuse walk inventory for host loading @jif-oai
• [#31576] Bound exec-server process event reordering @jif-oai
• [#31756] test(skills): assert symlinked metadata loading @jif-oai
• [#31581] Resolve selected capability roots without starting executors @jif-oai
• [#31789] Stop persisting RMCP service traces @jif-oai
• [#31792] Summarize streamed response item logs @jif-oai
• [#31791] Filter routine Hyper logs from SQLite @jif-oai
• [#31790] Reduce MCP tool-list trace volume @jif-oai
• [#31804] Stabilize the memories feature flag @jif-oai
• [#31803] fix(mcp): default Apps product SKU to codex @alecbarber-oai
• [#31745] code-mode: retain shared MCP types for deferred tools @sayan-oai
• [#31672] Import enabled plugins from known marketplaces @charlesgong-openai
• [#31652] fix(tui): hide empty reasoning summaries @fcoury-oai
• [#31767] Remove the network proxy config wrapper @jif-oai
• [#31481] fix: forward originator to Codex Apps MCP @raquel-openai
• [#31363] codex-api: route file uploads through HTTP client factory @bolinfest
• [#31813] tui: update safety buffering copy @etraut-openai
• [#31830] fix(sandboxing): initialize network proxy config inline @fcoury-oai
• [#31431] build: ratchet direct reqwest dependencies @bolinfest
• [#31876] code-mode: fix installation on darwin @cconger
• [#31842] Update bundled OpenAI Docs skill for GPT-5.6 @kkahadze-oai
• [#31637] login: route raw auth flows through HTTP client @bolinfest
• [#31686] [codex-apps] Filter optional file fields by tool schema @tsarlandie-oai
• [#31899] code-mode: fall back to using in process v8 if we fail to resolve external process @cconger
• [#31805] Bound remote MCP stdio lines @jif-oai
• [#30293] Resolve and pin MCP OAuth credential stores @stevenlee-oai
• [#31892] exec-server: materialize filesystem workspace roots @pakrym-oai
• [#31327] feat: add managed Bedrock login API @celia-oai
• [#31295] bench: add codex help e2e macrobenchmark @anp-oai
• [#31428] bench: add e2e benchmark entrypoints @anp-oai
• [#31937] exec-server: expose process helper to outer sandbox @pakrym-oai
• [#32093] Remove the legacy exec policy engine @copyberry
• [#32106] Reduce startup latency for ancestor discovery @copyberry
• [#32112] Bound streamed exec-server HTTP response bodies @copyberry
• [#32122] Test the shared exec-server HTTP response byte budget @copyberry
• [#32123] Bound exec-server stdio JSON-RPC messages @copyberry
• [#32126] Test bounded concurrency in ancestor discovery @copyberry
• [#32134] Test stdio JSON-RPC size limits with LF and CRLF @copyberry
• [#32135] Propagate tracing subscribers to exec start tasks @copyberry
• [#32150] Keep unified exec output collection bounded @copyberry
• [#32193] Validate memory consolidation artifacts before succeeding @copyberry
• [#32197] Rebind memory consolidation workspace roots @copyberry
• [#32200] Add a skill invocation extension contributor @copyberry
• [#32206] Always send reasoning parameters in Responses requests @copyberry
• [#32213] Generate unique IDs for review rollout messages @copyberry
• [#32214] Propagate workspace roots to exec-server sandboxes @copyberry
• [#32229] Serialize MCP OAuth credential refreshes @copyberry
• [#32231] Support pending remote environment registration @copyberry
• [#32232] Let permission hooks resolve strict auto-review requests @copyberry
• [#32234] Add dedicated storage for paginated thread history @copyberry
• [#32246] Extract reverse JSONL scanning from session indexing @copyberry
• [#32256] Improve Responses WebSocket timing telemetry @copyberry
• [#32261] Preserve local path conventions in automatic approvals @copyberry
• [#32263] Include start times in terminal turn events @copyberry
• [#32272] Expose scheduled tasks in plugin details @copyberry
• [#32274] Remove the personality migration @copyberry
• [#32276] Repair unterminated rollout files before appending @copyberry
• [#32277] Honor personality = "none" in model instructions @copyberry
• [#32280] Include terminal errors in turn completion events @copyberry
• [#32286] Clarify waiting behavior in safety buffering prompts @copyberry
• [#32288] Make GPT-5.6 Sol the default Bedrock model @copyberry
• [#32289] Persist paginated items in the local thread store @copyberry
• [#32290] Respect model support for reasoning summaries @copyberry
• [#32301] Trust hooks from materialized workspace plugins @copyberry
• [#32302] Prefer the Codex home socket for Unix IDE context @copyberry
• [#32305] Improve file blob upload diagnostics @copyberry
• [#32312] Require prefixes for outbound response item IDs @copyberry
• [#32316] Stop falling back to older model availability announcements @copyberry
• [#32326] Use canonical links in the moved config notice @copyberry
• [#32332] Add ordinals to paginated rollout records @copyberry
• [#32441] Preserve parent sandbox enforcement for memory consolidation @copyberry
• [#32460] Emit thread-idle lifecycle after guardian interrupts @copyberry
• [#32461] Expand tabs when rendering TUI diffs @copyberry
• [#32485] Use available width for skill names in the toggle view @copyberry
• [#32628] Improve composer completion target resolution @copyberry
• [#32698] Extract connector runtime snapshot management @copyberry
• [#32744] Log missing personality messages at trace level @copyberry
• [#32746] Make advanced reasoning selection explicit in the TUI @copyberry
• [#32747] Align Guardian reviews with session configuration @copyberry
• [#32749] Expose model overrides for multi-agent v2 spawns @copyberry
• [#32751] Restrict spawned-agent models to the active backend @copyberry
• [#32761] Add shadow metrics for lexical skill selection @copyberry
• [#32768] Align shadow skill selection with observable sources @copyberry
• [#32780] Enable skill search shadow selection by default @copyberry
• [#32781] Apply MCP startup timeouts during client creation @copyberry
• [#32801] Refactor OAuth store lock contention tests @copyberry
• [#32822] Make explicit multi-agent mode override proactive delegation @copyberry
• [#32825] Avoid blocking thread startup on MCP OAuth discovery @copyberry
• [#32835] Forward turn metadata in standalone web search @copyberry
• [#32837] Restore V2 agent identities on root thread resume @copyberry
• [#32838] Reap exited PID-managed app-server children @copyberry
• [#32844] Expand millisecond duration histogram boundaries @copyberry
• [#32849] Hide Windows filesystem helper console windows @copyberry
• [#32857] Require the elevated Windows sandbox for network proxies @copyberry
• [#32858] Persist slash-command popup dismissal @copyberry
• [#32864] Coalesce concurrent Windows sandbox setup requests @copyberry
• [#32866] Allow responses after image generation @copyberry
• [#32867] Include connector IDs in MCP tool call analytics @copyberry
• [#32875] Use model catalog policies for Guardian auto review @copyberry
• [#32881] Broaden remote compaction model fallback @copyberry
• [#32884] Prepare external agent migration for source adapters @copyberry
• [#32887] Tag shell tool telemetry by command category @copyberry
• [#32891] Attach connector caches to diagnostic uploads @copyberry
• [#32894] Serialize plugin install requests @copyberry
• [#32896] Load model context from a bounded rollout suffix @copyberry
• [#32897] Route blocked network requests to their owning calls @copyberry
• [#32898] Expose structured standalone web search results @copyberry
• [#32899] Add exec-server environment status checks @copyberry
• [#32900] Derive collaboration settings from turn context @copyberry
• [#32903] Include session IDs in tool item analytics events @copyberry
• [#32905] Timestamp app-server notifications at emission @copyberry
• [#32911] Allow injecting the models manager into ThreadManager @copyberry
• [#32920] Expose environment status through app-server @copyberry
• [#32923] Materialize paginated thread history in SQLite @copyberry
• [#32928] Resume thread history projection from its SQLite checkpoint @copyberry
• [#32945] Restrict Guardian reviewer tools @copyberry
• [#32949] Tighten recommended plugin install suggestions @copyberry
• [#32952] Scope runtime workspace roots to execution environments @copyberry
• [#32985] Expose exact per-response usage in raw app-server events @copyberry
• [#32989] Always confirm before enabling full access @copyberry
• [#33013] Bound exec-server JSON-RPC decoding complexity @copyberry
• [#33026] Include raw response completions in TypeScript envelopes @copyberry
• [#33030] Remove task messages from list_agents output @copyberry
• [#33031] Preserve JSON number precision in exec-server RPC messages @copyberry
• [#33035] Use session IDs for prompt cache keys @copyberry
• [#33040] Send plugin analytics with API key authentication @copyberry
• [#33076] Add an agent extension runner @copyberry
• [#33093] Preserve streamed output during capped history replay @copyberry
• [#33105] Fix TUI status visibility around streamed output @copyberry
• [#33107] Preserve special filesystem subpaths as wire strings @copyberry
• [#33109] Reject forks of paginated threads @copyberry
• [#33113] Allow injecting the Codex Apps tools cache @copyberry
• [#33121] Refine GPT-5.6 prompting and migration guidance @copyberry
• [#33147] Support model catalog permission messages @copyberry
• [#33149] Build MCP tool runtimes before router planning @copyberry
• [#33150] Clarify exec yield timing on Windows @copyberry
• [#33152] Support paginated thread history in app-server list APIs @copyberry
• [#33155] Trace startup prewarm tasks @copyberry
• [#33156] Run detached reviews as review-agent turns @copyberry
• [#33159] Move sleep items to the extension-owned lifecycle path @copyberry
• [#33166] Defer Noise environment connections until registration @copyberry
• [#33167] Document the Windows exec yield time range @copyberry
• [#33170] Support Amazon Bedrock login in the app server @copyberry
• [#33173] Migrate GPT-5.4 uses to GPT-5.6 variants @copyberry
• [#33175] Handle Amazon Bedrock credentials during logout @copyberry
• [#33177] Support model catalog templates for Guardian policy prompts @copyberry
• [#33180] Serialize concurrent MCP stdin writes @copyberry
• [#33182] Preserve plugin install failure subtypes during imports @copyberry
• [#33184] Reuse MCP tool catalogs across sessions @copyberry
• [#33185] Keep approval test targets in the temporary home @copyberry
• [#33187] Honor workspace spend controls in rate-limit handling @copyberry
• [#33198] Keep interrupted prompts in conversation history @copyberry
• [#33200] Separate exec permission paths from core models @copyberry
• [#33201] Branch conversations when editing earlier TUI prompts @copyberry
• [#33203] Preserve in-flight state when restoring thread input @copyberry
• [#33207] Retry safety-buffered turns on a forked thread @copyberry
• [#33209] Separate session state from session I/O @copyberry
• [#33211] Preserve thread context when retrying or editing turns @copyberry
• [#33213] Prepare Python SDK 0.144.4 stable release @copyberry
• [#33223] Instrument environment and plugin resolution paths @copyberry
• [#33232] Disambiguate skill mentions from shell parameters @copyberry
• [#33237] Fix skill completion around bound mentions with suffixes @copyberry
• [#33239] Render TUI composer tabs as single-column spaces @copyberry
• [#33243] Add auto-compaction fallback token-budget settings @copyberry
• [#33251] Report selected environment connection transitions @copyberry
• [#33255] Add a fallback phase before automatic context rollover @copyberry
• [#33261] Add Frameless Bidi support for realtime conversations @copyberry
• [#33297] Allow MCP servers to opt out of tool catalog caching @copyberry
• [#33308] Expand MCP tool catalog cache regression coverage @copyberry
• [#33364] Enable paginated thread history in app-server @copyberry
• [#33367] Respect final-answer boundaries for queued agent mail @copyberry
• [#33369] Scan skill roots concurrently @copyberry
• [#33373] Render TUI prompts before submitting user turns @copyberry
• [#33411] Migrate plugin commands into skills on install @copyberry
• [#33412] Refactor world-state rendering tests into snapshots @copyberry
• [#33414] Expose connector candidates from imported sessions @copyberry
• [#33421] Fetch workspace connectors concurrently @copyberry
• [#33423] Load executor plugin declarations concurrently @copyberry
• [#33424] Attribute OpenAI docs MCP requests to Codex @copyberry
• [#33425] Refresh host skill catalogs through world state @copyberry
• [#33426] Add Cursor support to setup import @copyberry
• [#33427] Propagate deferred environment capability roots to MCP @copyberry
• [#33430] Avoid creating metadata paths in the Windows sandbox @copyberry
• [#33432] Preserve paginated history for spawned subagents @copyberry
• [#33435] Warn on conflicting capability root locations @copyberry
• [#33441] Shut down Codex threads after approval scenarios @copyberry
• [#33444] Add external agent memory migration @copyberry
• [#33445] Select the elevated Windows sandbox for network proxies @copyberry
• [#33446] Remove the unused network proxy loader @copyberry
• [#33454] Track prompt cache write token usage @copyberry
• [#33456] Move external agent migration into its crate @copyberry
• [#33457] Use final answers in turn history summaries @copyberry
• [#33459] Allow more time for image generation in code mode @copyberry
• [#33464] Strengthen forced rm command detection @copyberry
• [#33467] Remove template IDs from MCP tool call metadata @copyberry
• [#33500] Add cache-write tokens to the raw response schema @copyberry
• [#33509] Preserve encrypted content in MCP tool outputs @copyberry
• [#33550] Unify multi-agent settings under agents @copyberry
• [#33572] Expose spawn agent types only when roles are configured @copyberry
• [#33605] Add fielded BM25 to shadow skill selection @copyberry
• [#33613] Add character n-gram skill selection @copyberry
• [#33614] Add multi-query lexical skill selection @copyberry
• [#33631] Honor configured model defaults for spawned agents @copyberry
• [#33632] Remove generated-default filesystem path variants @copyberry
• [#33633] Clarify when to wait for starting environments @copyberry
• [#33636] Clarify when to wait for starting environments @copyberry
• [#33639] Remove the unused realtime WebRTC crate @copyberry
• [#33640] Avoid duplicate cached app list update notifications @copyberry
• [#33645] Run write_stdin concurrently across terminal sessions @copyberry
• [#33651] Add an app-server API for reading app metadata @copyberry
• [#33656] Validate reasoning effort after applying spawn roles @copyberry
• [#33657] Restore agent roles when reloading v2 sub-agents @copyberry
• [#33658] Keep active-turn environments stable across settings updates @copyberry
• [#33659] Require data URLs for code-mode image output @copyberry
• [#33665] Refresh step world state for all sessions @copyberry
• [#33677] Forward thread originators from standalone extensions @copyberry
• [#33680] Reword the apply_patch tool description @copyberry
• [#33683] Preserve scope and provenance for imported agent memory @copyberry
• [#33684] Extract TUI approval request payloads into structs @copyberry
• [#33687] Avoid unnecessary writes during migration repair @copyberry
• [#33695] Support custom transports for Amazon Bedrock @copyberry
• [#33841] Make parent-owned sub-agent threads read-only in the TUI @copyberry
• [#33842] Give the zsh fork decline test more execution time @copyberry
• [#33843] Add an API for reading installed app runtime state @copyberry
• [#33845] Confirm usage-limit resets before redemption @copyberry
• [#33848] Fix the managed Bedrock logout test assertion @copyberry
• [#33851] Record web search result payload sizes @copyberry
• [#33852] Add batched executor capability discovery @copyberry
• [#33855] Tag realtime transcript tail flush delegations @copyberry
• [#33856] Stream realtime V3 Codex handoff output @copyberry
• [#33858] Isolate core tests from shell and rollout persistence @copyberry
• [#33861] Test workspace write isolation across exec servers @copyberry
• [#33862] Suppress empty multi-agent mode messages @copyberry
• [#33863] Report detailed session import error types @copyberry
• [#33864] Keep feature tests focused on behavior @copyberry
• [#33866] Remove the redundant tool dispatch wrapper @copyberry
• [#33867] Add grace period to code-mode yield timeouts @copyberry
• [#33868] Remove stale ignored core tests @copyberry
• [#33870] Remove the redundant borrowed line wrapping helper @copyberry
• [#33872] Remove unused TUI collaboration mode indicators @copyberry
• [#33876] Track collaboration mode instructions in world state @copyberry
• [#33883] Report CLI as the external agent config import source @copyberry
• [#33889] Centralize thread MCP connections in McpRuntime @copyberry
• [#33892] Limit rollout metadata reads to headers @copyberry
• [#33893] Track realtime conversation state in world state @copyberry
• [#33895] Add SessionEnd hooks for thread teardown @copyberry
• [#33896] Expose plugin installation interstitial requirements @copyberry
• [#33901] Support ChatGPT-branded Desktop app builds @copyberry
• [#33902] Add bounded batch lookups for message history @copyberry
• [#33903] Route realtime V3 handoffs by response channel @copyberry
• [#33905] Batch persistent history reads during reverse search @copyberry
• [#33906] Launch managed network proxies on remote executors @copyberry
• [#33907] Add occurrence search for paginated threads @copyberry
• [#33908] Allow publishing plugins through share updates @copyberry
• [#33921] Preserve sub-agent liveness in the agent picker @copyberry
• [#33922] Allow selecting path-backed agents in the TUI picker @copyberry
• [#33923] Add audio variants to user input protocols @copyberry
• [#33925] Render inline visualization links in the TUI @copyberry
• [#33926] Fix quoted hook commands on Windows @copyberry
• [#33929] Handle audio inputs and Bazel unit test arguments @copyberry
• [#33930] Track inherited paginated rollout prefixes @copyberry
• [#33932] Forward audio inputs to the Responses API @copyberry
• [#33938] Centralize SQLite connection configuration @copyberry
• [#33944] Track permission instructions in world state @copyberry
• [#33950] Let users remember the working directory for resumed sessions @copyberry
• [#33961] Refresh bundled model metadata @copyberry
• [#33963] Add context to sampling retry logs @copyberry
• [#33982] Gate audio history by model input modalities @copyberry
• [#34038] Handle compressed rollouts in doctor thread inventory @copyberry
• [#34045] Render streamed Markdown incrementally @copyberry
• [#34047] Avoid resending the model for reasoning shortcuts @copyberry
• [#34049] Avoid redundant TUI redraws while streaming @copyberry
• [#34067] Seed realtime V3 sessions with initial text items @copyberry
• [#34080] Add audio output support to dynamic tools and code mode @copyberry
• [#34085] Support legacy views for paginated thread history @copyberry
• [#34194] Avoid cloning thread data when rendering transcripts @copyberry
• [#34197] Use the Markdown collector as the streaming source of truth @copyberry
• [#34198] Start side conversations without replaying inherited turns @copyberry
• [#34199] Avoid liveness races when starting side conversations @copyberry
• [#34204] Avoid cloning buffered TUI history lines @copyberry
• [#34206] Avoid retaining decoded MCP images in history cells @copyberry
• [#34216] Speed up TUI Markdown layout @copyberry
• [#34217] Keep incremental rendering with visualization context @copyberry
• [#34218] Track TUI command completion separately from output @copyberry
• [#34222] Avoid buffering replay-irrelevant thread notifications @copyberry
• [#34223] Cache finalized Markdown history rendering @copyberry
• [#34224] Avoid cloning file changes in TUI diff rendering @copyberry
• [#34226] Backfill completion items only for the active exec turn @copyberry
• [#34229] Persist names for paginated threads @copyberry
• [#34232] Remeasure dynamic cells in the transcript overlay @copyberry
• [#34234] Avoid redundant TUI subagent metadata requests @copyberry
• [#34271] Migrate legacy exec policy allow rules @copyberry
• [#34293] Preserve zsh tied PATH exports in shell snapshots @copyberry
• [#34344] Reject unsupported history modes when loading rollouts @copyberry
• [#34345] Remove unused Rust helpers @copyberry
• [#34346] Track inline visualization directives during streaming @copyberry
• [#34347] Avoid cloning deferred TUI lifecycle payloads @copyberry
• [#34348] Cache TUI flex heights across frame passes @copyberry
• [#34355] Parallelize TUI bootstrap requests @copyberry
• [#34357] Render streamed command output through preview iterators @copyberry
• [#34359] Keep streamed command output bounded in the TUI @copyberry
• [#34361] Avoid cloning thread history for token usage replay @copyberry
• [#34365] Animate Max and Ultra reasoning effort changes @copyberry
• [#34366] Avoid cloning hyperlink text during TUI rendering @copyberry
• [#34368] Use app-server skill metadata directly in the TUI @copyberry
• [#34371] Clear stale Guardian reviews when turns end @copyberry
• [#34375] Extend second-based latency histogram buckets @copyberry
• [#34378] Avoid rendering generated images twice @copyberry
• [#34380] Stop retrying turns with invalid tool images @copyberry
• [#34381] Avoid cloning Responses WebSocket payloads @copyberry
• [#34382] Keep paginated thread Git metadata in SQLite @copyberry
• [#34383] Mark multi-agent v2 as stable @copyberry
• [#34384] Update packaged ripgrep to 15.2.0 @copyberry
• [#34385] Preserve audio across history and tool outputs @copyberry
• [#34386] Enable memories for paginated threads @copyberry
• [#34387] Refresh bundled model metadata @copyberry
• [#34389] Route Codex Apps MCP through plugin service @copyberry
• [#34390] Use copy-on-write storage for history snapshots @copyberry
• [#34392] Ignore inherited ACEs when refreshing Windows write roots @copyberry
• [#34393] Add configurable hook context spill limits @copyberry
• [#34396] Run compact session-start hooks before turn continuation @copyberry
• [#34400] Propagate approval rejection reasons @copyberry
• [#34403] Update tests for history and hook API changes @copyberry
• [#34407] Resolve paginated rollout lineages @copyberry
• [#34408] Support threadless MCP connections without event channels @copyberry
• [#34409] Limit the Linux /proc preflight filesystem view @copyberry
• [#34411] Require absolute paths for test SQLite configuration @copyberry
• [#34413] Remove CSV-backed agent jobs @copyberry
• [#34416] Show completed hook warnings in TUI headers @copyberry
• [#34417] Enrich app/read connector metadata @copyberry
• [#34423] Support Windows sandboxing in the exec server @copyberry
• [#34429] Move shared skill models into codex-skills @copyberry
• [#34431] Optimize remote compaction history handling @copyberry
• [#34434] Support catalog messages for non-request approval policies @copyberry
• [#34435] Resolve outbound proxy routes explicitly @copyberry
• [#34436] Honor managed permission profiles in network proxy resolution @copyberry
• [#34438] Increase the patch approval test timeout @copyberry
• [#34441] Add buffered code-mode exec yields @copyberry