codex

New Features

• Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386)
• Expanded /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444)
• Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695)
• Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385)
• Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383)
• Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346)

Bug Fixes

• Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211)
• Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359)
• Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, #32781, #32825, #33184, #33297)
• Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, #32857, #33926, #34423)
• Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, #31876, #31899)
• Strengthened safety and approval handling with better forced-rm detection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, #33464, #34400)

Documentation

• Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, #33121)

Chores

• Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173)
• Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, #33369, #33423, #34431)
• Updated the packaged ripgrep binary to 15.2.0. (#34384)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.0...rust-v0.145.0

• #31667 fix: parse compact release metadata in installer @efrazer-oai
• #31362 core: route realtime and memories through HTTP client factory @bolinfest
• #31566 perf(skills): reuse walk inventory for host loading @jif-oai
• #31576 Bound exec-server process event reordering @jif-oai
• #31756 test(skills): assert symlinked metadata loading @jif-oai
• #31581 Resolve selected capability roots without starting executors @jif-oai
• #31789 Stop persisting RMCP service traces @jif-oai
• #31792 Summarize streamed response item logs @jif-oai
• #31791 Filter routine Hyper logs from SQLite @jif-oai
• #31790 Reduce MCP tool-list trace volume @jif-oai
• #31804 Stabilize the memories feature flag @jif-oai
• #31803 fix(mcp): default Apps product SKU to codex @alecbarber-oai
• #31745 code-mode: retain shared MCP types for deferred tools @sayan-oai
• #31672 Import enabled plugins from known marketplaces @charlesgong-openai
• #31652 fix(tui): hide empty reasoning summaries @fcoury-oai
• #31767 Remove the network proxy config wrapper @jif-oai
• #31481 fix: forward originator to Codex Apps MCP @raquel-openai
• #31363 codex-api: route file uploads through HTTP client factory @bolinfest
• #31813 tui: update safety buffering copy @etraut-openai
• #31830 fix(sandboxing): initialize network proxy config inline @fcoury-oai
• #31431 build: ratchet direct reqwest dependencies @bolinfest
• #31876 code-mode: fix installation on darwin @cconger
• #31842 Update bundled OpenAI Docs skill for GPT-5.6 @kkahadze-oai
• #31637 login: route raw auth flows through HTTP client @bolinfest
• #31686 [codex-apps] Filter optional file fields by tool schema @tsarlandie-oai
• #31899 code-mode: fall back to using in process v8 if we fail to resolve external process @cconger
• #31805 Bound remote MCP stdio lines @jif-oai
• #30293 Resolve and pin MCP OAuth credential stores @stevenlee-oai
• #31892 exec-server: materialize filesystem workspace roots @pakrym-oai
• #31327 feat: add managed Bedrock login API @celia-oai
• #31295 bench: add codex help e2e macrobenchmark @anp-oai
• #31428 bench: add e2e benchmark entrypoints @anp-oai
• #31937 exec-server: expose process helper to outer sandbox @pakrym-oai
• #32093 Remove the legacy exec policy engine @copyberry
• #32106 Reduce startup latency for ancestor discovery @copyberry
• #32112 Bound streamed exec-server HTTP response bodies @copyberry
• #32122 Test the shared exec-server HTTP response byte budget @copyberry
• #32123 Bound exec-server stdio JSON-RPC messages @copyberry
• #32126 Test bounded concurrency in ancestor discovery @copyberry
• #32134 Test stdio JSON-RPC size limits with LF and CRLF @copyberry
• #32135 Propagate tracing subscribers to exec start tasks @copyberry
• #32150 Keep unified exec output collection bounded @copyberry
• #32193 Validate memory consolidation artifacts before succeeding @copyberry
• #32197 Rebind memory consolidation workspace roots @copyberry
• #32200 Add a skill invocation extension contributor @copyberry
• #32206 Always send reasoning parameters in Responses requests @copyberry
• #32213 Generate unique IDs for review rollout messages @copyberry
• #32214 Propagate workspace roots to exec-server sandboxes @copyberry
• #32229 Serialize MCP OAuth credential refreshes @copyberry
• #32231 Support pending remote environment registration @copyberry
• #32232 Let permission hooks resolve strict auto-review requests @copyberry
• #32234 Add dedicated storage for paginated thread history @copyberry
• #32246 Extract reverse JSONL scanning from session indexing @copyberry
• #32256 Improve Responses WebSocket timing telemetry @copyberry
• #32261 Preserve local path conventions in automatic approvals @copyberry
• #32263 Include start times in terminal turn events @copyberry
• #32272 Expose scheduled tasks in plugin details @copyberry
• #32274 Remove the personality migration @copyberry
• #32276 Repair unterminated rollout files before appending @copyberry
• #32277 Honor personality = "none" in model instructions @copyberry
• #32280 Include terminal errors in turn completion events @copyberry
• #32286 Clarify waiting behavior in safety buffering prompts @copyberry
• #32288 Make GPT-5.6 Sol the default Bedrock model @copyberry
• #32289 Persist paginated items in the local thread store @copyberry
• #32290 Respect model support for reasoning summaries @copyberry
• #32301 Trust hooks from materialized workspace plugins @copyberry
• #32302 Prefer the Codex home socket for Unix IDE context @copyberry
• #32305 Improve file blob upload diagnostics @copyberry
• #32312 Require prefixes for outbound response item IDs @copyberry
• #32316 Stop falling back to older model availability announcements @copyberry
• #32326 Use canonical links in the moved config notice @copyberry
• #32332 Add ordinals to paginated rollout records @copyberry
• #32441 Preserve parent sandbox enforcement for memory consolidation @copyberry
• #32460 Emit thread-idle lifecycle after guardian interrupts @copyberry
• #32461 Expand tabs when rendering TUI diffs @copyberry
• #32485 Use available width for skill names in the toggle view @copyberry
• #32628 Improve composer completion target resolution @copyberry
• #32698 Extract connector runtime snapshot management @copyberry
• #32744 Log missing personality messages at trace level @copyberry
• #32746 Make advanced reasoning selection explicit in the TUI @copyberry
• #32747 Align Guardian reviews with session configuration @copyberry
• #32749 Expose model overrides for multi-agent v2 spawns @copyberry
• #32751 Restrict spawned-agent models to the active backend @copyberry
• #32761 Add shadow metrics for lexical skill selection @copyberry
• #32768 Align shadow skill selection with observable sources @copyberry
• #32780 Enable skill search shadow selection by default @copyberry
• #32781 Apply MCP startup timeouts during client creation @copyberry
• #32801 Refactor OAuth store lock contention tests @copyberry
• #32822 Make explicit multi-agent mode override proactive delegation @copyberry
• #32825 Avoid blocking thread startup on MCP OAuth discovery @copyberry
• #32835 Forward turn metadata in standalone web search @copyberry
• #32837 Restore V2 agent identities on root thread resume @copyberry
• #32838 Reap exited PID-managed app-server children @copyberry
• #32844 Expand millisecond duration histogram boundaries @copyberry
• #32849 Hide Windows filesystem helper console windows @copyberry
• #32857 Require the elevated Windows sandbox for network proxies @copyberry
• #32858 Persist slash-command popup dismissal @copyberry
• #32864 Coalesce concurrent Windows sandbox setup requests @copyberry
• #32866 Allow responses after image generation @copyberry
• #32867 Include connector IDs in MCP tool call analytics @copyberry
• #32875 Use model catalog policies for Guardian auto review @copyberry
• #32881 Broaden remote compaction model fallback @copyberry
• #32884 Prepare external agent migration for source adapters @copyberry
• #32887 Tag shell tool telemetry by command category @copyberry
• #32891 Attach connector caches to diagnostic uploads @copyberry
• #32894 Serialize plugin install requests @copyberry
• #32896 Load model context from a bounded rollout suffix @copyberry
• #32897 Route blocked network requests to their owning calls @copyberry
• #32898 Expose structured standalone web search results @copyberry
• #32899 Add exec-server environment status checks @copyberry
• #32900 Derive collaboration settings from turn context @copyberry
• #32903 Include session IDs in tool item analytics events @copyberry
• #32905 Timestamp app-server notifications at emission @copyberry
• #32911 Allow injecting the models manager into ThreadManager @copyberry
• #32920 Expose environment status through app-server @copyberry
• #32923 Materialize paginated thread history in SQLite @copyberry
• #32928 Resume thread history projection from its SQLite checkpoint @copyberry
• #32945 Restrict Guardian reviewer tools @copyberry
• #32949 Tighten recommended plugin install suggestions @copyberry
• #32952 Scope runtime workspace roots to execution environments @copyberry
• #32985 Expose exact per-response usage in raw app-server events @copyberry
• #32989 Always confirm before enabling full access @copyberry
• #33013 Bound exec-server JSON-RPC decoding complexity @copyberry
• #33026 Include raw response completions in TypeScript envelopes @copyberry
• #33030 Remove task messages from list_agents output @copyberry
• #33031 Preserve JSON number precision in exec-server RPC messages @copyberry
• #33035 Use session IDs for prompt cache keys @copyberry
• #33040 Send plugin analytics with API key authentication @copyberry
• #33076 Add an agent extension runner @copyberry
• #33093 Preserve streamed output during capped history replay @copyberry
• #33105 Fix TUI status visibility around streamed output @copyberry
• #33107 Preserve special filesystem subpaths as wire strings @copyberry
• #33109 Reject forks of paginated threads @copyberry
• #33113 Allow injecting the Codex Apps tools cache @copyberry
• #33121 Refine GPT-5.6 prompting and migration guidance @copyberry
• #33147 Support model catalog permission messages @copyberry
• #33149 Build MCP tool runtimes before router planning @copyberry
• #33150 Clarify exec yield timing on Windows @copyberry
• #33152 Support paginated thread history in app-server list APIs @copyberry
• #33155 Trace startup prewarm tasks @copyberry
• #33156 Run detached reviews as review-agent turns @copyberry
• #33159 Move sleep items to the extension-owned lifecycle path @copyberry
• #33166 Defer Noise environment connections until registration @copyberry
• #33167 Document the Windows exec yield time range @copyberry
• #33170 Support Amazon Bedrock login in the app server @copyberry
• #33173 Migrate GPT-5.4 uses to GPT-5.6 variants @copyberry
• #33175 Handle Amazon Bedrock credentials during logout @copyberry
• #33177 Support model catalog templates for Guardian policy prompts @copyberry
• #33180 Serialize concurrent MCP stdin writes @copyberry
• #33182 Preserve plugin install failure subtypes during imports @copyberry
• #33184 Reuse MCP tool catalogs across sessions @copyberry
• #33185 Keep approval test targets in the temporary home @copyberry
• #33187 Honor workspace spend controls in rate-limit handling @copyberry
• #33198 Keep interrupted prompts in conversation history @copyberry
• #33200 Separate exec permission paths from core models @copyberry
• #33201 Branch conversations when editing earlier TUI prompts @copyberry
• #33203 Preserve in-flight state when restoring thread input @copyberry
• #33207 Retry safety-buffered turns on a forked thread @copyberry
• #33209 Separate session state from session I/O @copyberry
• #33211 Preserve thread context when retrying or editing turns @copyberry
• #33213 Prepare Python SDK 0.144.4 stable release @copyberry
• #33223 Instrument environment and plugin resolution paths @copyberry
• #33232 Disambiguate skill mentions from shell parameters @copyberry
• #33237 Fix skill completion around bound mentions with suffixes @copyberry
• #33239 Render TUI composer tabs as single-column spaces @copyberry
• #33243 Add auto-compaction fallback token-budget settings @copyberry
• #33251 Report selected environment connection transitions @copyberry
• #33255 Add a fallback phase before automatic context rollover @copyberry
• #33261 Add Frameless Bidi support for realtime conversations @copyberry
• #33297 Allow MCP servers to opt out of tool catalog caching @copyberry
• #33308 Expand MCP tool catalog cache regression coverage @copyberry
• #33364 Enable paginated thread history in app-server @copyberry
• #33367 Respect final-answer boundaries for queued agent mail @copyberry
• #33369 Scan skill roots concurrently @copyberry
• #33373 Render TUI prompts before submitting user turns @copyberry
• #33411 Migrate plugin commands into skills on install @copyberry
• #33412 Refactor world-state rendering tests into snapshots @copyberry
• #33414 Expose connector candidates from imported sessions @copyberry
• #33421 Fetch workspace connectors concurrently @copyberry
• #33423 Load executor plugin declarations concurrently @copyberry
• #33424 Attribute OpenAI docs MCP requests to Codex @copyberry
• #33425 Refresh host skill catalogs through world state @copyberry
• #33426 Add Cursor support to setup import @copyberry
• #33427 Propagate deferred environment capability roots to MCP @copyberry
• #33430 Avoid creating metadata paths in the Windows sandbox @copyberry
• #33432 Preserve paginated history for spawned subagents @copyberry
• #33435 Warn on conflicting capability root locations @copyberry
• #33441 Shut down Codex threads after approval scenarios @copyberry
• #33444 Add external agent memory migration @copyberry
• #33445 Select the elevated Windows sandbox for network proxies @copyberry
• #33446 Remove the unused network proxy loader @copyberry
• #33454 Track prompt cache write token usage @copyberry
• #33456 Move external agent migration into its crate @copyberry
• #33457 Use final answers in turn history summaries @copyberry
• #33459 Allow more time for image generation in code mode @copyberry
• #33464 Strengthen forced rm command detection @copyberry
• #33467 Remove template IDs from MCP tool call metadata @copyberry
• #33500 Add cache-write tokens to the raw response schema @copyberry
• #33509 Preserve encrypted content in MCP tool outputs @copyberry
• #33550 Unify multi-agent settings under agents @copyberry
• #33572 Expose spawn agent types only when roles are configured @copyberry
• #33605 Add fielded BM25 to shadow skill selection @copyberry
• #33613 Add character n-gram skill selection @copyberry
• #33614 Add multi-query lexical skill selection @copyberry
• #33631 Honor configured model defaults for spawned agents @copyberry
• #33632 Remove generated-default filesystem path variants @copyberry
• #33633 Clarify when to wait for starting environments @copyberry
• #33636 Clarify when to wait for starting environments @copyberry
• #33639 Remove the unused realtime WebRTC crate @copyberry
• #33640 Avoid duplicate cached app list update notifications @copyberry
• #33645 Run write_stdin concurrently across terminal sessions @copyberry
• #33651 Add an app-server API for reading app metadata @copyberry
• #33656 Validate reasoning effort after applying spawn roles @copyberry
• #33657 Restore agent roles when reloading v2 sub-agents @copyberry
• #33658 Keep active-turn environments stable across settings updates @copyberry
• #33659 Require data URLs for code-mode image output @copyberry
• #33665 Refresh step world state for all sessions @copyberry
• #33677 Forward thread originators from standalone extensions @copyberry
• #33680 Reword the apply_patch tool description @copyberry
• #33683 Preserve scope and provenance for imported agent memory @copyberry
• #33684 Extract TUI approval request payloads into structs @copyberry
• #33687 Avoid unnecessary writes during migration repair @copyberry
• #33695 Support custom transports for Amazon Bedrock @copyberry
• #33841 Make parent-owned sub-agent threads read-only in the TUI @copyberry
• #33842 Give the zsh fork decline test more execution time @copyberry
• #33843 Add an API for reading installed app runtime state @copyberry
• #33845 Confirm usage-limit resets before redemption @copyberry
• #33848 Fix the managed Bedrock logout test assertion @copyberry
• #33851 Record web search result payload sizes @copyberry
• #33852 Add batched executor capability discovery @copyberry
• #33855 Tag realtime transcript tail flush delegations @copyberry
• #33856 Stream realtime V3 Codex handoff output @copyberry
• #33858 Isolate core tests from shell and rollout persistence @copyberry
• #33861 Test workspace write isolation across exec servers @copyberry
• #33862 Suppress empty multi-agent mode messages @copyberry
• #33863 Report detailed session import error types @copyberry
• #33864 Keep feature tests focused on behavior @copyberry
• #33866 Remove the redundant tool dispatch wrapper @copyberry
• #33867 Add grace period to code-mode yield timeouts @copyberry
• #33868 Remove stale ignored core tests @copyberry
• #33870 Remove the redundant borrowed line wrapping helper @copyberry
• #33872 Remove unused TUI collaboration mode indicators @copyberry
• #33876 Track collaboration mode instructions in world state @copyberry
• #33883 Report CLI as the external agent config import source @copyberry
• #33889 Centralize thread MCP connections in McpRuntime @copyberry
• #33892 Limit rollout metadata reads to headers @copyberry
• #33893 Track realtime conversation state in world state @copyberry
• #33895 Add SessionEnd hooks for thread teardown @copyberry
• #33896 Expose plugin installation interstitial requirements @copyberry
• #33901 Support ChatGPT-branded Desktop app builds @copyberry
• #33902 Add bounded batch lookups for message history @copyberry
• #33903 Route realtime V3 handoffs by response channel @copyberry
• #33905 Batch persistent history reads during reverse search @copyberry
• #33906 Launch managed network proxies on remote executors @copyberry
• #33907 Add occurrence search for paginated threads @copyberry
• #33908 Allow publishing plugins through share updates @copyberry
• #33921 Preserve sub-agent liveness in the agent picker @copyberry
• #33922 Allow selecting path-backed agents in the TUI picker @copyberry
• #33923 Add audio variants to user input protocols @copyberry
• #33925 Render inline visualization links in the TUI @copyberry
• #33926 Fix quoted hook commands on Windows @copyberry
• #33929 Handle audio inputs and Bazel unit test arguments @copyberry
• #33930 Track inherited paginated rollout prefixes @copyberry
• #33932 Forward audio inputs to the Responses API @copyberry
• #33938 Centralize SQLite connection configuration @copyberry
• #33944 Track permission instructions in world state @copyberry
• #33950 Let users remember the working directory for resumed sessions @copyberry
• #33961 Refresh bundled model metadata @copyberry
• #33963 Add context to sampling retry logs @copyberry
• #33982 Gate audio history by model input modalities @copyberry
• #34038 Handle compressed rollouts in doctor thread inventory @copyberry
• #34045 Render streamed Markdown incrementally @copyberry
• #34047 Avoid resending the model for reasoning shortcuts @copyberry
• #34049 Avoid redundant TUI redraws while streaming @copyberry
• #34067 Seed realtime V3 sessions with initial text items @copyberry
• #34080 Add audio output support to dynamic tools and code mode @copyberry
• #34085 Support legacy views for paginated thread history @copyberry
• #34194 Avoid cloning thread data when rendering transcripts @copyberry
• #34197 Use the Markdown collector as the streaming source of truth @copyberry
• #34198 Start side conversations without replaying inherited turns @copyberry
• #34199 Avoid liveness races when starting side conversations @copyberry
• #34204 Avoid cloning buffered TUI history lines @copyberry
• #34206 Avoid retaining decoded MCP images in history cells @copyberry
• #34216 Speed up TUI Markdown layout @copyberry
• #34217 Keep incremental rendering with visualization context @copyberry
• #34218 Track TUI command completion separately from output @copyberry
• #34222 Avoid buffering replay-irrelevant thread notifications @copyberry
• #34223 Cache finalized Markdown history rendering @copyberry
• #34224 Avoid cloning file changes in TUI diff rendering @copyberry
• #34226 Backfill completion items only for the active exec turn @copyberry
• #34229 Persist names for paginated threads @copyberry
• #34232 Remeasure dynamic cells in the transcript overlay @copyberry
• #34234 Avoid redundant TUI subagent metadata requests @copyberry
• #34271 Migrate legacy exec policy allow rules @copyberry
• #34293 Preserve zsh tied PATH exports in shell snapshots @copyberry
• #34344 Reject unsupported history modes when loading rollouts @copyberry
• #34345 Remove unused Rust helpers @copyberry
• #34346 Track inline visualization directives during streaming @copyberry
• #34347 Avoid cloning deferred TUI lifecycle payloads @copyberry
• #34348 Cache TUI flex heights across frame passes @copyberry
• #34355 Parallelize TUI bootstrap requests @copyberry
• #34357 Render streamed command output through preview iterators @copyberry
• #34359 Keep streamed command output bounded in the TUI @copyberry
• #34361 Avoid cloning thread history for token usage replay @copyberry
• #34365 Animate Max and Ultra reasoning effort changes @copyberry
• #34366 Avoid cloning hyperlink text during TUI rendering @copyberry
• #34368 Use app-server skill metadata directly in the TUI @copyberry
• #34371 Clear stale Guardian reviews when turns end @copyberry
• #34375 Extend second-based latency histogram buckets @copyberry
• #34378 Avoid rendering generated images twice @copyberry
• #34380 Stop retrying turns with invalid tool images @copyberry
• #34381 Avoid cloning Responses WebSocket payloads @copyberry
• #34382 Keep paginated thread Git metadata in SQLite @copyberry
• #34383 Mark multi-agent v2 as stable @copyberry
• #34384 Update packaged ripgrep to 15.2.0 @copyberry
• #34385 Preserve audio across history and tool outputs @copyberry
• #34386 Enable memories for paginated threads @copyberry
• #34387 Refresh bundled model metadata @copyberry
• #34389 Route Codex Apps MCP through plugin service @copyberry
• #34390 Use copy-on-write storage for history snapshots @copyberry
• #34392 Ignore inherited ACEs when refreshing Windows write roots @copyberry
• #34393 Add configurable hook context spill limits @copyberry
• #34396 Run compact session-start hooks before turn continuation @copyberry
• #34400 Propagate approval rejection reasons @copyberry
• #34403 Update tests for history and hook API changes @copyberry
• #34407 Resolve paginated rollout lineages @copyberry
• #34408 Support threadless MCP connections without event channels @copyberry
• #34409 Limit the Linux /proc preflight filesystem view @copyberry
• #34411 Require absolute paths for test SQLite configuration @copyberry
• #34413 Remove CSV-backed agent jobs @copyberry
• #34416 Show completed hook warnings in TUI headers @copyberry
• #34417 Enrich app/read connector metadata @copyberry
• #34423 Support Windows sandboxing in the exec server @copyberry
• #34429 Move shared skill models into codex-skills @copyberry
• #34431 Optimize remote compaction history handling @copyberry
• #34434 Support catalog messages for non-request approval policies @copyberry
• #34435 Resolve outbound proxy routes explicitly @copyberry
• #34436 Honor managed permission profiles in network proxy resolution @copyberry
• #34438 Increase the patch approval test timeout @copyberry
• #34441 Add buffered code-mode exec yields @copyberry