codex rust-v0.146.0 release notes

New Features

Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011)
Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979)
Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251)
Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098)
Enable standalone web search for compatible custom model providers. (#34846)
Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198)

Bug Fixes

Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239)
Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151)
Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664)
Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, #35021, #34775, #34778, #35365, #35375)
Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, #34624, #35036)
Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, #34738, #34997)

Documentation

Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669)
Clarify Windows drive-letter canonicalization for PathUri values. (#34667)

Chores

Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, #34508, #34729, #34910)
Sign and notarize bundled macOS helper executables before packaging. (#35264)
Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, #34766, #34825)
Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, #35537)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.145.0...rust-v0.146.0

#34447 Add a route-aware HTTP client pool @copyberry
#34449 Make external session detection limits configurable @copyberry
#34451 Attribute external agent imports by provider @copyberry
#34463 Support alpha hotfix release versions @copyberry
#34469 Preserve thread settings for goal-first and forked threads @copyberry
#34476 Separate HTTP execution from request logging @copyberry
#34478 Honor CARGO_HTTP_CAINFO in managed proxy environments @copyberry
#34479 Re-resolve system proxy routes across redirects @copyberry
#34481 Add route-aware redirect test coverage @copyberry
#34483 Expand route-aware proxy redirect coverage @copyberry
#34490 Route backend requests through the HTTP client factory @copyberry
#34491 Route cloud environment discovery through the HTTP client pool @copyberry
#34495 Honor system proxy settings in the daemon updater @copyberry
#34497 Preserve custom arg0 for sandboxed exec-server processes @copyberry
#34505 Mirror Rust release artifacts to Cloudflare R2 @copyberry
#34506 Respect system proxies during plugin startup sync @copyberry
#34508 Publish release metadata to R2 channels @copyberry
#34509 Honor system proxy settings for remote plugins @copyberry
#34514 Add an optional releases.openai.com installer source @copyberry
#34516 Allow numer in codespell checks @copyberry
#34517 Pass empty inherited FDs in the Wine PTY test @copyberry
#34522 Split MCP connection manager into focused modules @copyberry
#34525 Add step-scoped data to extension contributors @copyberry
#34533 Centralize compacted rollout item construction @copyberry
#34540 Detach Git metadata commands from stdin @copyberry
#34544 Size Noise handshake buffers to their messages @copyberry
#34547 Add reciprocal rank fusion skill selection @copyberry
#34550 Test thread-scoped MCP refresh behavior @copyberry
#34551 Simplify TUI restoration for the external editor @copyberry
#34552 Remove unused RtOptions setters @copyberry
#34553 Remove the unused TUI shutdown app command @copyberry
#34558 Remove obsolete ignored tests @copyberry
#34559 Add backend client support for Codex user settings @copyberry
#34561 Extract MCP binding clients from the connection manager @copyberry
#34562 Record rollout boundaries for materialized turns @copyberry
#34563 Page through inherited thread history @copyberry
#34566 Protect fork history references during rollout cleanup @copyberry
#34570 Highlight CUDA files as C++ in the TUI @copyberry
#34573 Accept forceRefetch in plugin list requests @copyberry
#34578 Gate the TUI suspend restore helper on Unix @copyberry
#34581 Add routing-card lexical skill selection @copyberry
#34588 Bind MCP calls to captured catalog revisions @copyberry
#34590 Add keyed shell environment policy filters @copyberry
#34597 Enforce exact values from managed config requirements @copyberry
#34598 Skip missing paths in filesystem sandbox entries @copyberry
#34601 Sanitize skill names in injection metrics @copyberry
#34603 Allow explicitly permitted loopback proxy targets @copyberry
#34605 Allow naming sessions with /new and /clear @copyberry
#34611 Add compatibility policies for skill catalog rendering @copyberry
#34612 Detach non-interactive subprocesses from stdin @copyberry
#34613 Route Windows sandbox proxy traffic by restricting SID @copyberry
#34615 Initialize missing-path behavior in exec-server sandbox test @copyberry
#34620 Add exec-server network policy callback types @copyberry
#34621 Load paginated model context across rollout lineages @copyberry
#34622 Increase the auto-review model override test timeout @copyberry
#34624 Terminate Windows process trees with job objects @copyberry
#34625 Fix Windows TUI navigation key handling @copyberry
#34626 Scale skill metadata budgets with model context windows @copyberry
#34629 Harden Windows elevated sandbox startup @copyberry
#34630 Add a policy-aware HTTP client builder @copyberry
#34631 Migrate agent identity to the shared HTTP client @copyberry
#34636 Keep the TUI open when starting a turn fails @copyberry
#34637 Attribute review findings to repository rules @copyberry
#34640 Update Windows process-tree tests for inherited FDs @copyberry
#34641 Harden managed proxy setup for sandboxed executions @copyberry
#34643 Migrate login HTTP construction to HttpClient @copyberry
#34644 Verify Git plugin SHA checkouts @copyberry
#34645 Always assign response item IDs @copyberry
#34649 Propagate resolved proxy policy through auth routing @copyberry
#34650 Require auth managers to receive routing configuration @copyberry
#34651 Migrate core test support to the shared HTTP client @copyberry
#34654 Render turn diffs for foreign environment paths @copyberry
#34655 Honor configured proxy routes for auth refreshes @copyberry
#34664 Preserve approvals reviewer when forking threads @copyberry
#34667 Document PathUri drive letter canonicalization @copyberry
#34669 Expand codex-http-client usage guidance @copyberry
#34678 Route LM Studio requests through the shared HTTP client @copyberry
#34681 Add session headers to realtime conversation starts @copyberry
#34687 Configure Codex Auto Review model metadata @copyberry
#34708 Rename the MCP connection manager to McpConnectionSet @copyberry
#34713 Order unified exec lifecycle events reliably @copyberry
#34728 Skip Git enrichment for prewarm and Guardian turns @copyberry
#34729 Publish stable installer aliases to R2 @copyberry
#34732 Preserve skill catalog entries under metadata pressure @copyberry
#34733 Make MCP resource clients follow the latest runtime @copyberry
#34734 Remove step-scoped data from extension contributors @copyberry
#34738 Drop skill descriptions before omitting catalog entries @copyberry
#34744 Update skills budget tests for extension API changes @copyberry
#34746 Match core skill ordering in extension catalogs @copyberry
#34747 Register the MCP 2026-07-28 feature flag @copyberry
#34761 Reduce app-server JSON serialization overhead @copyberry
#34763 Retry websocket requests when the previous response is missing @copyberry
#34766 Reduce typed app-server request serialization overhead @copyberry
#34769 Add the git attribution extension @copyberry
#34770 Enable exec-server network policy callbacks @copyberry
#34771 Size unified mention popups to visible results @copyberry
#34772 Normalize whitespace-only lines in agent messages @copyberry
#34775 Clamp session headers to narrow terminal widths @copyberry
#34777 Include the final agent message in turn completion summaries @copyberry
#34778 Coalesce wrapped OSC 8 hyperlinks in the TUI terminal @copyberry
#34779 Use the live parent history mode when forking agents @copyberry
#34781 Upgrade Bazel Rust and LLVM dependencies @copyberry
#34784 Reject dynamic environments named local @copyberry
#34785 Report skill catalog truncation during rendering @copyberry
#34786 Simplify app-server integration test setup @copyberry
#34789 Avoid unnecessary post-sampling token estimates @copyberry
#34795 Remove obsolete step store from git attribution tests @copyberry
#34796 Skip syntax highlighting for lines over 4 KiB @copyberry
#34797 Suppress omission notices in core-compatible skill catalogs @copyberry
#34806 Use path URIs in shell approval keys @copyberry
#34808 Centralize SQLite connection configuration @copyberry
#34811 Fix network access rendering in sandbox prompts @copyberry
#34814 Consolidate thread startup around StartThreadOptions @copyberry
#34816 Support configurable realtime BEM channel prefixes @copyberry
#34819 Enable git attribution across Codex entry points @copyberry
#34823 Run code-mode tests in non-Windows Bazel CI @copyberry
#34824 Normalize Guardian review cwd reuse keys @copyberry
#34825 Reduce cloning when building Responses requests @copyberry
#34827 Remove Windows Bazel lint toolchain overrides @copyberry
#34831 Flush analytics before in-process app server shutdown @copyberry
#34835 Track compaction time in turn profiles @copyberry
#34839 Preserve user input when MCP startup is interrupted @copyberry
#34840 Add persisted thread pinning to the app server @copyberry
#34844 Remove first-party type from app metadata @copyberry
#34845 Track multi-agent mode in world state @copyberry
#34846 Allow custom providers to opt into standalone web search @copyberry
#34847 Use Guardian model limits for review sessions @copyberry
#34849 Cache remote plugin catalogs by scope @copyberry
#34850 Disable image generation for Free-plan accounts @copyberry
#34851 Use batch metadata for plugin app summaries @copyberry
#34852 Wake sleeping threads for queued agent mail @copyberry
#34877 Wait for local plugin cache refreshes in plugin/list @copyberry
#34883 Set a default user agent for MCP HTTP requests @copyberry
#34887 Allow disabling the multi-agent wait tool @copyberry
#34910 Prefer releases.openai.com in standalone installers @copyberry
#34930 Centralize thread MCP state in McpRuntime @copyberry
#34931 Use the API plugin marketplace for Amazon Bedrock @copyberry
#34940 Keep session defaults static during config batch writes @copyberry
#34952 Reuse MCP connections across runtime refreshes @copyberry
#34957 Replace closed MCP connections during reconciliation @copyberry
#34959 Handle @ in local marketplace paths @copyberry
#34962 Move MCP connection helpers into the test module @copyberry
#34969 Keep the sleep tool outside code mode @copyberry
#34978 Honor disabled redirects in route-aware HTTP clients @copyberry
#34979 Infer the bundled Claude Code plugin marketplace @copyberry
#34981 Record externally completed agent config imports @copyberry
#34986 Enforce single-writer ownership for paginated threads @copyberry
#34989 Preserve timestamps when importing external agent sessions @copyberry
#34991 Allow omitting MCP tool prefixes per server @copyberry
#34994 Honor the configured SQLite home across state consumers @copyberry
#34995 Initialize execution environments with the final HTTP policy @copyberry
#34996 Separate Codex error details from retry metadata @copyberry
#34997 Warn when skill catalogs exceed their context budget @copyberry
#35000 Make TUI turn interrupts nonblocking @copyberry
#35011 Keep side conversations open when switching threads @copyberry
#35012 Expose remote skill icon URLs through app server @copyberry
#35013 Support incremental replay of updated thread items @copyberry
#35015 Align installed app duration metrics with the legacy baseline @copyberry
#35016 Add trusted plugin script attribution @copyberry
#35020 Attribute command executions to trusted plugin scripts @copyberry
#35021 Adapt keyboard event reporting to the terminal @copyberry
#35023 Route exec-server HTTP through configured proxy policy @copyberry
#35028 Preserve refreshed Apps tools across MCP runtime updates @copyberry
#35029 Preserve plugin attribution across command approvals @copyberry
#35031 Enforce writer ownership for thread archive and deletion @copyberry
#35033 Expose Browser Use requirements through the app server @copyberry
#35034 Route environment registry requests through the shared HTTP client @copyberry
#35036 Preserve Windows sandbox proxy settings in guardian sessions @copyberry
#35048 Track app/read request duration @copyberry
#35049 Register the Guardian V2 feature flag @copyberry
#35054 Allow disabling the update_plan tool @copyberry
#35056 Route exec-server WebSockets through configured proxies @copyberry
#35059 Decouple exec-server HTTP from reqwest types @copyberry
#35063 Track deferred tool namespaces in world state @copyberry
#35065 Avoid duplicating deferred sources in tool search @copyberry
#35067 Fix Bazel test configuration for platform-specific data @copyberry
#35078 Add WebSocket transport to the code-mode host @copyberry
#35098 Support remote code-mode hosts in app-server @copyberry
#35105 Support Agent Plugins manifests @copyberry
#35106 Allow hosts to customize wait_for_environment descriptions @copyberry
#35144 Prewarm MCP runtime updates in the background @copyberry
#35146 Refresh MCP runtimes when session auth changes @copyberry
#35151 Reconnect MCP servers on explicit refresh @copyberry
#35164 Encapsulate MCP refresh coordination @copyberry
#35168 Route extension warnings to app-server threads @copyberry
#35172 Compact host skill paths under metadata pressure @copyberry
#35175 Wait for reloaded worker completion in the resume test @copyberry
#35184 Expose executor skills through skill tools @copyberry
#35194 Preserve output from hooks that exit before reading stdin @copyberry
#35196 Make the Apps recovery exposure test deterministic @copyberry
#35198 Enable resource reads for explicit executor skills @copyberry
#35204 Refresh MCP runtimes across thread startup @copyberry
#35205 Use current MCP authority for elicitation reviews @copyberry
#35213 Refresh managed MCP requirements for active threads @copyberry
#35216 Refresh MCP config independently across threads @copyberry
#35220 Support paginated thread forks @copyberry
#35221 Avoid persisting non-local threads for hook transcripts @copyberry
#35238 Support the ent26 enterprise plan @copyberry
#35239 Route MCP auth discovery through runtime HTTP clients @copyberry
#35251 Support ephemeral forks of paginated threads @copyberry
#35254 Expose workspace plugin publish capability @copyberry
#35261 Propagate remote plugin IDs to skill metadata @copyberry
#35262 Track remote plugin IDs in skill invocation analytics @copyberry
#35264 Sign bundled macOS helper binaries @copyberry
#35266 Allow disabling the in-process code-mode host fallback @copyberry
#35267 Harden network approval cancellation and concurrency @copyberry
#35271 Include code-mode tool names in Responses Lite metadata @copyberry
#35275 Trace remote exec-server connection setup @copyberry
#35280 Skip plugin MCP filtering when no allowlists are configured @copyberry
#35359 Handle exec-server network policy requests in the client @copyberry
#35363 Include item start times in completion events @copyberry
#35364 Bound Code Mode metadata compatibility headers @copyberry
#35365 Keep unified mention results fresh @copyberry
#35375 Make the keymap action menu responsive @copyberry
#35408 Ignore generated system skills in the skills watcher @copyberry
#35414 Raise the MCP server recursion limit @copyberry
#35523 Shut down the in-process outbound router explicitly @copyberry
#35524 Preserve terminal turn errors in replayed history @copyberry
#35525 Skip inactive TUI threads without pending user interaction @copyberry
#35530 Track model and personality in world state @copyberry
#35537 Add managed policy for in-app updates @copyberry