OpenAI Codex CLI Files

New Features

• Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, [#34840], [#35011])
• Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, [#35254], [#34931], [#34979])
• Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, [#35251])
• Connect app-server to remote Code Mode hosts over WebSocket. (#35078, [#35098])
• Enable standalone web search for compatible custom model providers. (#34846)
• Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, [#35198])

Bug Fixes

• Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, [#34509], [#34655], [#34678], [#35023], [#35056], [#35239])
• Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, [#34957], [#35028], [#35144], [#35146], [#35151])
• Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, [#34777], [#35524], [#34989], [#34664])
• Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, [#35021], [#34775], [#34778], [#35365], [#35375])
• Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, [#34624], [#35036])
• Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, [#34738], [#34997])

Documentation

• Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669)
• Clarify Windows drive-letter canonicalization for PathUri values. (#34667)

Chores

• Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, [#34508], [#34729], [#34910])
• Sign and notarize bundled macOS helper executables before packaging. (#35264)
• Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, [#34766], [#34825])
• Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, [#35537])

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.145.0...rust-v0.146.0

• [#34447] Add a route-aware HTTP client pool @copyberry
• [#34449] Make external session detection limits configurable @copyberry
• [#34451] Attribute external agent imports by provider @copyberry
• [#34463] Support alpha hotfix release versions @copyberry
• [#34469] Preserve thread settings for goal-first and forked threads @copyberry
• [#34476] Separate HTTP execution from request logging @copyberry
• [#34478] Honor CARGO_HTTP_CAINFO in managed proxy environments @copyberry
• [#34479] Re-resolve system proxy routes across redirects @copyberry
• [#34481] Add route-aware redirect test coverage @copyberry
• [#34483] Expand route-aware proxy redirect coverage @copyberry
• [#34490] Route backend requests through the HTTP client factory @copyberry
• [#34491] Route cloud environment discovery through the HTTP client pool @copyberry
• [#34495] Honor system proxy settings in the daemon updater @copyberry
• [#34497] Preserve custom arg0 for sandboxed exec-server processes @copyberry
• [#34505] Mirror Rust release artifacts to Cloudflare R2 @copyberry
• [#34506] Respect system proxies during plugin startup sync @copyberry
• [#34508] Publish release metadata to R2 channels @copyberry
• [#34509] Honor system proxy settings for remote plugins @copyberry
• [#34514] Add an optional releases.openai.com installer source @copyberry
• [#34516] Allow numer in codespell checks @copyberry
• [#34517] Pass empty inherited FDs in the Wine PTY test @copyberry
• [#34522] Split MCP connection manager into focused modules @copyberry
• [#34525] Add step-scoped data to extension contributors @copyberry
• [#34533] Centralize compacted rollout item construction @copyberry
• [#34540] Detach Git metadata commands from stdin @copyberry
• [#34544] Size Noise handshake buffers to their messages @copyberry
• [#34547] Add reciprocal rank fusion skill selection @copyberry
• [#34550] Test thread-scoped MCP refresh behavior @copyberry
• [#34551] Simplify TUI restoration for the external editor @copyberry
• [#34552] Remove unused RtOptions setters @copyberry
• [#34553] Remove the unused TUI shutdown app command @copyberry
• [#34558] Remove obsolete ignored tests @copyberry
• [#34559] Add backend client support for Codex user settings @copyberry
• [#34561] Extract MCP binding clients from the connection manager @copyberry
• [#34562] Record rollout boundaries for materialized turns @copyberry
• [#34563] Page through inherited thread history @copyberry
• [#34566] Protect fork history references during rollout cleanup @copyberry
• [#34570] Highlight CUDA files as C++ in the TUI @copyberry
• [#34573] Accept forceRefetch in plugin list requests @copyberry
• [#34578] Gate the TUI suspend restore helper on Unix @copyberry
• [#34581] Add routing-card lexical skill selection @copyberry
• [#34588] Bind MCP calls to captured catalog revisions @copyberry
• [#34590] Add keyed shell environment policy filters @copyberry
• [#34597] Enforce exact values from managed config requirements @copyberry
• [#34598] Skip missing paths in filesystem sandbox entries @copyberry
• [#34601] Sanitize skill names in injection metrics @copyberry
• [#34603] Allow explicitly permitted loopback proxy targets @copyberry
• [#34605] Allow naming sessions with /new and /clear @copyberry
• [#34611] Add compatibility policies for skill catalog rendering @copyberry
• [#34612] Detach non-interactive subprocesses from stdin @copyberry
• [#34613] Route Windows sandbox proxy traffic by restricting SID @copyberry
• [#34615] Initialize missing-path behavior in exec-server sandbox test @copyberry
• [#34620] Add exec-server network policy callback types @copyberry
• [#34621] Load paginated model context across rollout lineages @copyberry
• [#34622] Increase the auto-review model override test timeout @copyberry
• [#34624] Terminate Windows process trees with job objects @copyberry
• [#34625] Fix Windows TUI navigation key handling @copyberry
• [#34626] Scale skill metadata budgets with model context windows @copyberry
• [#34629] Harden Windows elevated sandbox startup @copyberry
• [#34630] Add a policy-aware HTTP client builder @copyberry
• [#34631] Migrate agent identity to the shared HTTP client @copyberry
• [#34636] Keep the TUI open when starting a turn fails @copyberry
• [#34637] Attribute review findings to repository rules @copyberry
• [#34640] Update Windows process-tree tests for inherited FDs @copyberry
• [#34641] Harden managed proxy setup for sandboxed executions @copyberry
• [#34643] Migrate login HTTP construction to HttpClient @copyberry
• [#34644] Verify Git plugin SHA checkouts @copyberry
• [#34645] Always assign response item IDs @copyberry
• [#34649] Propagate resolved proxy policy through auth routing @copyberry
• [#34650] Require auth managers to receive routing configuration @copyberry
• [#34651] Migrate core test support to the shared HTTP client @copyberry
• [#34654] Render turn diffs for foreign environment paths @copyberry
• [#34655] Honor configured proxy routes for auth refreshes @copyberry
• [#34664] Preserve approvals reviewer when forking threads @copyberry
• [#34667] Document PathUri drive letter canonicalization @copyberry
• [#34669] Expand codex-http-client usage guidance @copyberry
• [#34678] Route LM Studio requests through the shared HTTP client @copyberry
• [#34681] Add session headers to realtime conversation starts @copyberry
• [#34687] Configure Codex Auto Review model metadata @copyberry
• [#34708] Rename the MCP connection manager to McpConnectionSet @copyberry
• [#34713] Order unified exec lifecycle events reliably @copyberry
• [#34728] Skip Git enrichment for prewarm and Guardian turns @copyberry
• [#34729] Publish stable installer aliases to R2 @copyberry
• [#34732] Preserve skill catalog entries under metadata pressure @copyberry
• [#34733] Make MCP resource clients follow the latest runtime @copyberry
• [#34734] Remove step-scoped data from extension contributors @copyberry
• [#34738] Drop skill descriptions before omitting catalog entries @copyberry
• [#34744] Update skills budget tests for extension API changes @copyberry
• [#34746] Match core skill ordering in extension catalogs @copyberry
• [#34747] Register the MCP 2026-07-28 feature flag @copyberry
• [#34761] Reduce app-server JSON serialization overhead @copyberry
• [#34763] Retry websocket requests when the previous response is missing @copyberry
• [#34766] Reduce typed app-server request serialization overhead @copyberry
• [#34769] Add the git attribution extension @copyberry
• [#34770] Enable exec-server network policy callbacks @copyberry
• [#34771] Size unified mention popups to visible results @copyberry
• [#34772] Normalize whitespace-only lines in agent messages @copyberry
• [#34775] Clamp session headers to narrow terminal widths @copyberry
• [#34777] Include the final agent message in turn completion summaries @copyberry
• [#34778] Coalesce wrapped OSC 8 hyperlinks in the TUI terminal @copyberry
• [#34779] Use the live parent history mode when forking agents @copyberry
• [#34781] Upgrade Bazel Rust and LLVM dependencies @copyberry
• [#34784] Reject dynamic environments named local @copyberry
• [#34785] Report skill catalog truncation during rendering @copyberry
• [#34786] Simplify app-server integration test setup @copyberry
• [#34789] Avoid unnecessary post-sampling token estimates @copyberry
• [#34795] Remove obsolete step store from git attribution tests @copyberry
• [#34796] Skip syntax highlighting for lines over 4 KiB @copyberry
• [#34797] Suppress omission notices in core-compatible skill catalogs @copyberry
• [#34806] Use path URIs in shell approval keys @copyberry
• [#34808] Centralize SQLite connection configuration @copyberry
• [#34811] Fix network access rendering in sandbox prompts @copyberry
• [#34814] Consolidate thread startup around StartThreadOptions @copyberry
• [#34816] Support configurable realtime BEM channel prefixes @copyberry
• [#34819] Enable git attribution across Codex entry points @copyberry
• [#34823] Run code-mode tests in non-Windows Bazel CI @copyberry
• [#34824] Normalize Guardian review cwd reuse keys @copyberry
• [#34825] Reduce cloning when building Responses requests @copyberry
• [#34827] Remove Windows Bazel lint toolchain overrides @copyberry
• [#34831] Flush analytics before in-process app server shutdown @copyberry
• [#34835] Track compaction time in turn profiles @copyberry
• [#34839] Preserve user input when MCP startup is interrupted @copyberry
• [#34840] Add persisted thread pinning to the app server @copyberry
• [#34844] Remove first-party type from app metadata @copyberry
• [#34845] Track multi-agent mode in world state @copyberry
• [#34846] Allow custom providers to opt into standalone web search @copyberry
• [#34847] Use Guardian model limits for review sessions @copyberry
• [#34849] Cache remote plugin catalogs by scope @copyberry
• [#34850] Disable image generation for Free-plan accounts @copyberry
• [#34851] Use batch metadata for plugin app summaries @copyberry
• [#34852] Wake sleeping threads for queued agent mail @copyberry
• [#34877] Wait for local plugin cache refreshes in plugin/list @copyberry
• [#34883] Set a default user agent for MCP HTTP requests @copyberry
• [#34887] Allow disabling the multi-agent wait tool @copyberry
• [#34910] Prefer releases.openai.com in standalone installers @copyberry
• [#34930] Centralize thread MCP state in McpRuntime @copyberry
• [#34931] Use the API plugin marketplace for Amazon Bedrock @copyberry
• [#34940] Keep session defaults static during config batch writes @copyberry
• [#34952] Reuse MCP connections across runtime refreshes @copyberry
• [#34957] Replace closed MCP connections during reconciliation @copyberry
• [#34959] Handle @ in local marketplace paths @copyberry
• [#34962] Move MCP connection helpers into the test module @copyberry
• [#34969] Keep the sleep tool outside code mode @copyberry
• [#34978] Honor disabled redirects in route-aware HTTP clients @copyberry
• [#34979] Infer the bundled Claude Code plugin marketplace @copyberry
• [#34981] Record externally completed agent config imports @copyberry
• [#34986] Enforce single-writer ownership for paginated threads @copyberry
• [#34989] Preserve timestamps when importing external agent sessions @copyberry
• [#34991] Allow omitting MCP tool prefixes per server @copyberry
• [#34994] Honor the configured SQLite home across state consumers @copyberry
• [#34995] Initialize execution environments with the final HTTP policy @copyberry
• [#34996] Separate Codex error details from retry metadata @copyberry
• [#34997] Warn when skill catalogs exceed their context budget @copyberry
• [#35000] Make TUI turn interrupts nonblocking @copyberry
• [#35011] Keep side conversations open when switching threads @copyberry
• [#35012] Expose remote skill icon URLs through app server @copyberry
• [#35013] Support incremental replay of updated thread items @copyberry
• [#35015] Align installed app duration metrics with the legacy baseline @copyberry
• [#35016] Add trusted plugin script attribution @copyberry
• [#35020] Attribute command executions to trusted plugin scripts @copyberry
• [#35021] Adapt keyboard event reporting to the terminal @copyberry
• [#35023] Route exec-server HTTP through configured proxy policy @copyberry
• [#35028] Preserve refreshed Apps tools across MCP runtime updates @copyberry
• [#35029] Preserve plugin attribution across command approvals @copyberry
• [#35031] Enforce writer ownership for thread archive and deletion @copyberry
• [#35033] Expose Browser Use requirements through the app server @copyberry
• [#35034] Route environment registry requests through the shared HTTP client @copyberry
• [#35036] Preserve Windows sandbox proxy settings in guardian sessions @copyberry
• [#35048] Track app/read request duration @copyberry
• [#35049] Register the Guardian V2 feature flag @copyberry
• [#35054] Allow disabling the update_plan tool @copyberry
• [#35056] Route exec-server WebSockets through configured proxies @copyberry
• [#35059] Decouple exec-server HTTP from reqwest types @copyberry
• [#35063] Track deferred tool namespaces in world state @copyberry
• [#35065] Avoid duplicating deferred sources in tool search @copyberry
• [#35067] Fix Bazel test configuration for platform-specific data @copyberry
• [#35078] Add WebSocket transport to the code-mode host @copyberry
• [#35098] Support remote code-mode hosts in app-server @copyberry
• [#35105] Support Agent Plugins manifests @copyberry
• [#35106] Allow hosts to customize wait_for_environment descriptions @copyberry
• [#35144] Prewarm MCP runtime updates in the background @copyberry
• [#35146] Refresh MCP runtimes when session auth changes @copyberry
• [#35151] Reconnect MCP servers on explicit refresh @copyberry
• [#35164] Encapsulate MCP refresh coordination @copyberry
• [#35168] Route extension warnings to app-server threads @copyberry
• [#35172] Compact host skill paths under metadata pressure @copyberry
• [#35175] Wait for reloaded worker completion in the resume test @copyberry
• [#35184] Expose executor skills through skill tools @copyberry
• [#35194] Preserve output from hooks that exit before reading stdin @copyberry
• [#35196] Make the Apps recovery exposure test deterministic @copyberry
• [#35198] Enable resource reads for explicit executor skills @copyberry
• [#35204] Refresh MCP runtimes across thread startup @copyberry
• [#35205] Use current MCP authority for elicitation reviews @copyberry
• [#35213] Refresh managed MCP requirements for active threads @copyberry
• [#35216] Refresh MCP config independently across threads @copyberry
• [#35220] Support paginated thread forks @copyberry
• [#35221] Avoid persisting non-local threads for hook transcripts @copyberry
• [#35238] Support the ent26 enterprise plan @copyberry
• [#35239] Route MCP auth discovery through runtime HTTP clients @copyberry
• [#35251] Support ephemeral forks of paginated threads @copyberry
• [#35254] Expose workspace plugin publish capability @copyberry
• [#35261] Propagate remote plugin IDs to skill metadata @copyberry
• [#35262] Track remote plugin IDs in skill invocation analytics @copyberry
• [#35264] Sign bundled macOS helper binaries @copyberry
• [#35266] Allow disabling the in-process code-mode host fallback @copyberry
• [#35267] Harden network approval cancellation and concurrency @copyberry
• [#35271] Include code-mode tool names in Responses Lite metadata @copyberry
• [#35275] Trace remote exec-server connection setup @copyberry
• [#35280] Skip plugin MCP filtering when no allowlists are configured @copyberry
• [#35359] Handle exec-server network policy requests in the client @copyberry
• [#35363] Include item start times in completion events @copyberry
• [#35364] Bound Code Mode metadata compatibility headers @copyberry
• [#35365] Keep unified mention results fresh @copyberry
• [#35375] Make the keymap action menu responsive @copyberry
• [#35408] Ignore generated system skills in the skills watcher @copyberry
• [#35414] Raise the MCP server recursion limit @copyberry
• [#35523] Shut down the in-process outbound router explicitly @copyberry
• [#35524] Preserve terminal turn errors in replayed history @copyberry
• [#35525] Skip inactive TUI threads without pending user interaction @copyberry
• [#35530] Track model and personality in world state @copyberry
• [#35537] Add managed policy for in-app updates @copyberry