codex rust-v0.148.0

rust-v0.148.0

0.148.0

Added 6
  • Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file
  • Fork sessions with codex exec fork, and archive or restore sessions from the TUI resume picker
  • Draft prompts while the TUI initializes, with resume and fork progress shown during startup
  • View estimated thread credits or cost in /status, status lines, and terminal titles for eligible workspaces
  • Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support
  • Hooks can now run commands asynchronously and invoke MCP tools
Changed 1
  • The bundled skill-creator guide is more focused, and validation now rejects unfinished TODO placeholders
Fixed 6
  • Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream
  • Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews
  • Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex
  • TUI startup no longer lets buffered terminal input activate prompts accidentally, and onboarding appears when authentication is missing
  • Composer and transcript rendering now handle CRLF pastes, wrapped whitespace, and long URLs correctly
  • Sandbox restrictions now fail closed for denied or unreadable paths across Linux and Windows

From codex

New Features
  • Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file. (#37358)
  • Fork sessions with codex exec fork, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371)
  • Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
  • View estimated thread credits or cost in /status, status lines, and terminal titles for eligible workspaces. (#38281, #38282)
  • Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
  • Hooks can now run commands asynchronously and invoke MCP tools. (#37533, #38705)
Bug Fixes
  • Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream. (#37260, #38785)
  • Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews. (#37198, #37368, #38605)
  • Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex. (#37337, #37485, #38418)
  • TUI startup no longer lets buffered terminal input activate prompts accidentally, and onboarding appears when authentication is missing. (#38641, #38643, #38644)
  • Composer and transcript rendering now handle CRLF pastes, wrapped whitespace, and long URLs correctly. (#37709, #38380, #38704)
  • Sandbox restrictions now fail closed for denied or unreadable paths across Linux and Windows. (#37875, #38026, #38416, #38660)
Documentation
  • The bundled skill-creator guide is more focused, and validation now rejects unfinished TODO placeholders. (#38384)
Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.147.0...rust-v0.148.0

  • #37190 Interrupt cyber model turns after one Guardian denial @copyberry
  • #37191 Preserve legacy semantics during rollout migration @copyberry
  • #37198 Prefer persisted cwd when reading local threads @copyberry
  • #37199 Track thread archive analytics @copyberry
  • #37204 Add durable user-message queue dispatch @copyberry
  • #37206 Add a unified image budget @copyberry
  • #37210 Fetch remote installed plugins across all scopes @copyberry
  • #37211 Harden network proxy MITM authorization @copyberry
  • #37248 Cover remote MCP discovery timeout cleanup @copyberry
  • #37252 Allow agent roles on full-history forks @copyberry
  • #37260 Fix first-turn model switching and rollback @copyberry
  • #37261 Start cached MCP servers lazily for subagents @copyberry
  • #37267 Support plugin roots in the host skill loader @copyberry
  • #37273 Reuse MCP handlers across sampling steps @copyberry
  • #37279 Avoid cloning immutable metadata on tool search cache hits @copyberry
  • #37335 Fully repaint inline viewports after history overlap @copyberry
  • #37336 Use step environments for extension turn input @copyberry
  • #37337 Recover MCP servers after OAuth reauthentication @copyberry
  • #37338 Honor the configured ChatGPT origin in connector install URLs @copyberry
  • #37339 Reload app-server telemetry after account changes @copyberry
  • #37340 Consolidate deferred environment provisioning APIs @copyberry
  • #37341 Support content references for inline visualizations @copyberry
  • #37342 Preserve foreign cwd URIs for turn-input contributors @copyberry
  • #37343 Stage Bazel app-server test binaries in TEST_TMPDIR @copyberry
  • #37344 Fix subagent MCP startup status settling @copyberry
  • #37345 Send model routing hints to the Codex backend @copyberry
  • #37347 Track context windows per agent @copyberry
  • #37348 Add rollout migration tooling and background migration @copyberry
  • #37349 Mount a minimal /dev in full-filesystem Bubblewrap sandboxes @copyberry
  • #37350 Allow ThreadManager to customize thread ID generation @copyberry
  • #37352 Configure the default code-mode exec yield timeout @copyberry
  • #37354 Retry busy app-server test executable spawns @copyberry
  • #37356 Support agent identity endpoint overrides @copyberry
  • #37357 Clamp short wait_agent timeouts to the configured minimum @copyberry
  • #37358 Add Markdown conversation export to the TUI @copyberry
  • #37360 Use consistent TUI input placeholders @copyberry
  • #37363 Recognize MCP tool hook configurations @copyberry
  • #37366 Harden local MCP server process tree cleanup @copyberry
  • #37367 Add session forking to codex exec @copyberry
  • #37368 Restore approval policy when resuming threads @copyberry
  • #37369 Add session archiving to the resume picker @copyberry
  • #37371 Restore archived sessions from the resume picker @copyberry
  • #37389 Add tool namespace metadata configuration @copyberry
  • #37400 Rename the tool registry metadata setting @copyberry
  • #37406 Add a loader for executor-local config layers @copyberry
  • #37408 Add executor-local config reads to the exec server @copyberry
  • #37424 Cap project instructions across environments @copyberry
  • #37433 Expose multi-agent versions in model/list @copyberry
  • #37434 Add process diagnostics snapshots @copyberry
  • #37439 Add shared skill root loading interfaces @copyberry
  • #37440 Load plugin skill roots through the host skills service @copyberry
  • #37444 Unify plugin skill loading with the host skill service @copyberry
  • #37446 Preserve base instruction provenance across sessions @copyberry
  • #37447 Respect plugin skill availability in tool suggestions @copyberry
  • #37452 Unify plugin skill loading through the shared loader @copyberry
  • #37457 Remove the legacy core skill loader @copyberry
  • #37461 Remove the unused remote skills client @copyberry
  • #37466 Move skill config rule resolution into codex-config @copyberry
  • #37470 Expose app-server diagnostics through the experimental API @copyberry
  • #37477 Include call IDs in MCP requests and clarify metadata config @copyberry
  • #37478 Shard state unit tests under Bazel @copyberry
  • #37479 Report temporary directories in exec-server environment info @copyberry
  • #37480 Delegate remote process sandboxing to the executor @copyberry
  • #37483 Interrupt active code-mode cells with their turn @copyberry
  • #37485 Keep response streams alive through connection failures @copyberry
  • #37486 Expose runtime activity in server diagnostics @copyberry
  • #37488 Generalize skill locator aliases across providers @copyberry
  • #37489 Alias resource-backed skill locators under context pressure @copyberry
  • #37492 Include tool namespace inventory in turn metadata @copyberry
  • #37494 Add MCP event discovery and subscriptions @copyberry
  • #37497 Limit payload traces in diagnostic logs @copyberry
  • #37498 Preserve child waiters during process termination @copyberry
  • #37500 Remove the legacy code-mode tool metadata inventory @copyberry
  • #37503 Move host skill prompt injection into the skills extension @copyberry
  • #37504 Disable Nagle's algorithm for code-mode WebSockets @copyberry
  • #37505 Remove the codex-core-skills crate @copyberry
  • #37507 Include sandbox mode in response metadata @copyberry
  • #37510 Define the code-mode host gRPC protocol @copyberry
  • #37511 Enforce automatic review for managed models @copyberry
  • #37513 Reuse parent compactions in Guardian review sessions @copyberry
  • #37516 Ignore reusable command approvals for cyber models @copyberry
  • #37519 Expose auto-review ignore rules in config requirements @copyberry
  • #37527 Terminate timed-out hook process trees @copyberry
  • #37528 Keep external agent detection from blocking config requests @copyberry
  • #37530 Implement the gRPC code-mode host service @copyberry
  • #37533 Support asynchronous command hooks @copyberry
  • #37538 Expose execution mode in hook listings @copyberry
  • #37607 Prevent launch context from reaching child processes @copyberry
  • #37610 Add workload identity token exchange support @copyberry
  • #37618 Use step environments for Guardian approval reviews @copyberry
  • #37622 Include buffered turns when editing prompts @copyberry
  • #37641 Use the step context for command approval prefix rules @copyberry
  • #37644 Generalize hook handler execution @copyberry
  • #37645 Improve plugin install failure analytics @copyberry
  • #37654 Advertise environment config read support @copyberry
  • #37709 Keep wrapped composer whitespace with following text @copyberry
  • #37723 Report I/O subtypes for session config import failures @copyberry
  • #37745 Add gRPC TCP transport to the code-mode host @copyberry
  • #37747 Bound Cursor project path resolution @copyberry
  • #37757 Add a line-ending preservation mode to apply_patch @copyberry
  • #37758 Add a feature flag to preserve apply_patch line endings @copyberry
  • #37773 Forward install attempt IDs for remote plugins @copyberry
  • #37788 Use native transparency in the imagegen skill @copyberry
  • #37806 Initialize the install attempt ID in the plugin analytics test @copyberry
  • #37807 Share model-visible tool specs across prompts @copyberry
  • #37808 Simplify package-based skill reads @copyberry
  • #37810 Support packaged defaults in config layering @copyberry
  • #37812 Keep multi-workspace skill listings consistent @copyberry
  • #37828 Track running unified exec processes at turn completion @copyberry
  • #37832 Remove obsolete plugin skill discovery helpers @copyberry
  • #37833 Encapsulate watchable skill root selection @copyberry
  • #37836 Run plugin and skill tests on Windows @copyberry
  • #37838 Tighten the skills extension API surface @copyberry
  • #37842 Speed up MCP OAuth credential reads @copyberry
  • #37843 Use the shared environment scrubber in git-utils @copyberry
  • #37847 Preserve environments when reloading V2 agents @copyberry
  • #37848 Expose the session ID to shell commands @copyberry
  • #37850 Expose plugin ownership in MCP server status @copyberry
  • #37851 Route intercepted exec approvals through shared review @copyberry
  • #37860 Speed up MCP OAuth credential reads @copyberry
  • #37862 Rename environment config for turn scope @copyberry
  • #37864 Support MCP form input in full-access user threads @copyberry
  • #37866 Add MCP OAuth credential contention regression tests @copyberry
  • #37867 Reject duplicate resolved paths in apply_patch @copyberry
  • #37871 Extract persisted history types into a dedicated crate @copyberry
  • #37874 Keep runtime summary metrics out of Statsig exports @copyberry
  • #37875 Honor the configured Windows sandbox level for managed networking @copyberry
  • #37878 Add configurable goal token budget limits @copyberry
  • #37882 Read safety buffering from response metadata @copyberry
  • #37886 Extend bundled package discovery and expose its version @copyberry
  • #37889 Ignore Unix socket proxy settings on Windows @copyberry
  • #37891 Use thread configuration for app/read @copyberry
  • #37892 Validate images before returning view_image output @copyberry
  • #37895 Add configurable Responses API request metadata @copyberry
  • #37896 Add hermetic Windows SDK and MSVC runtime repositories @copyberry
  • #37898 Add appearance metadata to thread sections @copyberry
  • #37901 Make submission operations move-only @copyberry
  • #37902 Defer view_image processing to history insertion @copyberry
  • #37906 Make gRPC code-mode notifications fire-and-forget @copyberry
  • #37908 Apply refreshed cloud config bundles to later sessions @copyberry
  • #37922 Extract reusable code-mode host test support @copyberry
  • #37926 Distinguish turn-start thread persistence @copyberry
  • #37929 Add shared runtime build information @copyberry
  • #37939 Validate images before returning view_image output @copyberry
  • #37970 Cache tool catalogs for streamable HTTP MCP servers @copyberry
  • #37979 Honor per-directory bundled skill settings in skills/list @copyberry
  • #37984 Stop re-exporting skill APIs from codex-core @copyberry
  • #38011 Remove config lockfile support @copyberry
  • #38020 Retry transient exec-server startup failures @copyberry
  • #38024 Expose image generation usage-limit failures @copyberry
  • #38026 Fail closed on unsafe Linux unreadable globs @copyberry
  • #38032 Hide approved Guardian assessments from TUI history @copyberry
  • #38033 Use session metadata to validate thread history paths @copyberry
  • #38034 Filter live rollout items in place @copyberry
  • #38035 Propagate MCP elicitation event delivery failures @copyberry
  • #38036 Limit TUI streaming traces in SQLite logs @copyberry
  • #38040 Propagate custom CA settings to local MCP servers @copyberry
  • #38041 Add gRPC-backed code-mode sessions @copyberry
  • #38043 Sandbox remote apply_patch operations @copyberry
  • #38044 Compact code mode tool calls in TUI history @copyberry
  • #38045 Store model history in response item envelopes @copyberry
  • #38046 Include auto-review state in turn metadata @copyberry
  • #38047 Add turn-aware response item injection @copyberry
  • #38049 Harden network proxy credential brokerage @copyberry
  • #38051 Run required CI against pull request merge commits @copyberry
  • #38052 Add per-login MCP OAuth client registration selection @copyberry
  • #38054 Add configuration-backed external authentication @copyberry
  • #38056 Configure PSP routing through the feature system @copyberry
  • #38057 Track artifact operations from trusted plugin markers @copyberry
  • #38058 Preserve harness metadata across conversation history @copyberry
  • #38060 Disable storage for Azure Responses requests @copyberry
  • #38061 Preserve proxy settings for Windows sandbox debug sessions @copyberry
  • #38064 Grant Windows sandbox access to the Codex app root @copyberry
  • #38066 Track resource-backed skill invocations @copyberry
  • #38067 Scope environment readiness config to thread attachments @copyberry
  • #38072 Forward gRPC code-mode callbacks to session delegates @copyberry
  • #38074 Track implicit executor skill invocations @copyberry
  • #38075 Respect rendered width when adding TUI history @copyberry
  • #38078 Reduce cloning in world-state patch handling @copyberry
  • #38080 Allow nested Git repositories in the Windows sandbox @copyberry
  • #38081 Use ReviewDecision for MCP tool approvals @copyberry
  • #38083 Remove standard form input from app-server docs @copyberry
  • #38084 Allow empty input to start a turn @copyberry
  • #38086 Support execution-host context when resolving cloud config @copyberry
  • #38087 Route gRPC code-mode sessions through the shared HTTP client @copyberry
  • #38089 Add CIMD support to MCP OAuth registration @copyberry
  • #38092 Simplify queued user message admission @copyberry
  • #38094 Test Guardian context for code mode commands @copyberry
  • #38101 Attach hosted app context to file uploads @copyberry
  • #38103 Avoid cloning MCP invocations in TUI history @copyberry
  • #38108 Route MCP tool calls through shared approval handling @copyberry
  • #38127 Distinguish rollout IDs from thread IDs @copyberry
  • #38165 Resolve subagent analytics connections lazily @copyberry
  • #38167 Read executor skill packages directly @copyberry
  • #38170 Notify running turn watchers only on count changes @copyberry
  • #38172 Update lru and webbrowser dependencies @copyberry
  • #38179 Embed defaults in the packaged config layer @copyberry
  • #38183 Add conservative restriction helpers for tool policies @copyberry
  • #38184 Run search tool integration tests on Windows @copyberry
  • #38186 Stop overriding environments in the skills user-turn test @copyberry
  • #38188 Integrate workload identity with Codex authentication @copyberry
  • #38189 Run plugin app-server tests in automatic environments @copyberry
  • #38197 Add an LRU baseline to skill shadow selection @copyberry
  • #38204 Fuse recent and lexical skills in shadow selection @copyberry
  • #38205 Enforce non-interactive approval policy for Codex delegates @copyberry
  • #38214 Avoid allocations when sanitizing TUI user text @copyberry
  • #38217 Start required cached MCP servers lazily for subagents @copyberry
  • #38227 Add a flag to retain client developer messages @copyberry
  • #38228 Detect implicit skill invocations from PowerShell reads @copyberry
  • #38232 Track root turns across delegated Codex requests @copyberry
  • #38238 Add manifest-defined metrics for trusted plugin scripts @copyberry
  • #38239 Add bounded plugin measurement analytics @copyberry
  • #38241 Include Node REPL policy in turn metadata @copyberry
  • #38242 Cache stable active-cell layout measurements @copyberry
  • #38243 Track client-authored developer messages in rollout history @copyberry
  • #38244 Resolve paginated thread history by rollout ID @copyberry
  • #38245 Add dynamic HTTP header helpers for MCP servers @copyberry
  • #38251 Read model ETags from WebSocket metadata events @copyberry
  • #38252 Collect metrics from plugin shell commands @copyberry
  • #38253 Collect plugin metrics from unified exec commands @copyberry
  • #38256 Report the latest rejection from multiple network reviews @copyberry
  • #38257 Reconnect gRPC code-mode sessions after host restarts @copyberry
  • #38258 Unify external authentication provider handling @copyberry
  • #38261 Resolve skill package aliases in skills.read @copyberry
  • #38265 Use bounded fallback ports for Windows managed proxies @copyberry
  • #38268 Expose executor skill roots from skills.read @copyberry
  • #38270 Add per-thread usage queries to the backend client @copyberry
  • #38272 Stamp conversation history items with creation times @copyberry
  • #38274 Represent persisted world state as JSON objects @copyberry
  • #38275 Unify turn input submission and routing @copyberry
  • #38276 Track plugin metrics for background unified exec commands @copyberry
  • #38278 Add app-server coverage for plugin measurement analytics @copyberry
  • #38280 Use protobuf's built-in Bazel proto rule @copyberry
  • #38281 Show estimated thread usage in /status @copyberry
  • #38282 Add thread usage to TUI status surfaces @copyberry
  • #38283 Collect plugin metrics from remote executors @copyberry
  • #38285 Move codex-execpolicy to protocol dev dependencies @copyberry
  • #38288 Support gRPC code-mode hosts in app server @copyberry
  • #38291 Remove unused apply_patch prompt fallback @copyberry
  • #38292 Add durable reverts for paginated threads @copyberry
  • #38299 Route network access through the shared approval pipeline @copyberry
  • #38303 Add interrupted turn recovery @copyberry
  • #38306 Protect inline visualization viewers from sandbox writes @copyberry
  • #38321 Make gRPC code-mode yield tests deterministic @copyberry
  • #38336 Add Guardian V2 extension scaffold @copyberry
  • #38356 Support sandboxed file streaming in exec-server @copyberry
  • #38358 Optimize orphan output normalization @copyberry
  • #38361 Test hook rejection for explicitly started queue items @copyberry
  • #38362 Stabilize exec-server byte-budget tests @copyberry
  • #38363 Persist security risk scores in rollout history @copyberry
  • #38368 Add the Guardian V2 Luna sampler @copyberry
  • #38377 Constrain Guardian reviews to parent filesystem permissions @copyberry
  • #38380 Preserve user message styling when wrapping long URLs @copyberry
  • #38381 Prevent unread events from blocking in-process requests @copyberry
  • #38383 Return Luna samples when streamed JSON completes @copyberry
  • #38384 Refine skill creation guidance and validation @copyberry
  • #38390 Use effective permissions when trusting app-server projects @copyberry
  • #38394 Reject sessions with unloadable required managed hooks @copyberry
  • #38396 Reap orphaned processes in Linux sandboxes @copyberry
  • #38397 Include Node REPL results in Guardian reviews @copyberry
  • #38399 Preserve floating-point values when decoding rollout lines @copyberry
  • #38400 Refresh tracing interest in the token estimate test @copyberry
  • #38403 Expose conversation history to tool lifecycle extensions @copyberry
  • #38406 Pool Guardian sampling WebSocket connections @copyberry
  • #38409 Classify tool calls in the Guardian V2 extension @copyberry
  • #38413 Allow metadata updates without materializing threads @copyberry
  • #38414 Add bounded transcript rendering for Guardian v2 @copyberry
  • #38415 Recognize PowerShell Get-Content file reads @copyberry
  • #38416 Honor filesystem permissions for app file uploads @copyberry
  • #38418 Clarify MCP OAuth reauthentication errors @copyberry
  • #38419 Apply Codex attribution to app-created commits @copyberry
  • #38420 Recover capability discovery after executor disconnects @copyberry
  • #38423 Centralize thread environment selection state @copyberry
  • #38424 Fail closed when workload identity initialization fails @copyberry
  • #38426 Protect workload identity auth in app-server account RPCs @copyberry
  • #38427 Add Guardian guidance for Node REPL tool calls @copyberry
  • #38429 Route curated plugin catalogs by authentication mode @copyberry
  • #38432 Gate Node REPL Guardian guidance on model metadata @copyberry
  • #38436 Add rustls fallback for local MCP HTTP requests @copyberry
  • #38439 Preserve approval policies for auto-reviewed models @copyberry
  • #38440 Add app-server support for reverting paginated threads @copyberry
  • #38441 Give Guardian V2 full tool action context @copyberry
  • #38443 Tag current time reminders in model context @copyberry
  • #38445 Retain client developer messages across context compaction @copyberry
  • #38446 Refresh current-time reminders for full-history subagents @copyberry
  • #38447 Add running-task exit choices to local daemon sessions @copyberry
  • #38448 Support per-server MCP OAuth callback ports @copyberry
  • #38449 Expose model upgrade retirement times @copyberry
  • #38450 Embed the Windows sandbox setup manifest in Bazel builds @copyberry
  • #38452 Add structured telemetry for response retries @copyberry
  • #38454 Include node_repl images in Guardian review evidence @copyberry
  • #38456 Add experimental thread queue APIs to app server @copyberry
  • #38460 Add an AbsolutePathBuf conversion for FileSystemPath @copyberry
  • #38461 Centralize turn environment selection state @copyberry
  • #38463 Preserve thread subscriptions across revert reloads @copyberry
  • #38467 Parse model annotations from skill frontmatter @copyberry
  • #38470 Add an Amazon Bedrock Runtime provider @copyberry
  • #38473 Stop generating accepted-line fingerprints @copyberry
  • #38475 Add bounded skill model delegation instructions @copyberry
  • #38483 Include agent names in turn metadata @copyberry
  • #38484 Search selected plugin apps before falling back @copyberry
  • #38492 Enforce strict auto-review for MCP tool calls @copyberry
  • #38493 Reuse pending MCP startups during reconciliation @copyberry
  • #38494 Verify bundled bwrap in Bazel builds @copyberry
  • #38499 Enable parallel tool calls for all model prompts @copyberry
  • #38521 Carry environment config in turn selections @copyberry
  • #38527 Configure Guardian sampling for responses lite @copyberry
  • #38540 Record Guardian V2 risk scores on threads @copyberry
  • #38553 Initialize Guardian V2 samplers per thread @copyberry
  • #38555 Preserve Guardian transcript boundaries in sampling input @copyberry
  • #38558 Improve Guardian transcript context selection @copyberry
  • #38561 Restrict filesystem helper sandbox access @copyberry
  • #38564 Reuse compatible parent compactions in Guardian V2 @copyberry
  • #38567 Store security risk scores as a snapshot @copyberry
  • #38568 Run tool start callbacks after pre-tool hooks @copyberry
  • #38569 Require automatic review for high-risk Guardian v2 actions @copyberry
  • #38579 Report thread storage changes after rollout migration @copyberry
  • #38580 Keep the latest Guardian risk score during concurrent sampling @copyberry
  • #38581 Honor cloud-managed requirements in feature listings @copyberry
  • #38586 Bound Guardian V2 tool actions before risk classification @copyberry
  • #38592 Let extensions resolve approval reviews before Guardian @copyberry
  • #38596 Prioritize new Guardian classifications under load @copyberry
  • #38597 Install Guardian V2 in the app server @copyberry
  • #38601 Make unbounded connection retries configurable @copyberry
  • #38602 Isolate Guardian reviewer sessions from parent extensions @copyberry
  • #38604 Avoid paginated resume requests for verified legacy rollouts @copyberry
  • #38605 Fix resume transcript preview line selection @copyberry
  • #38606 Allow larger gRPC code mode tool descriptions @copyberry
  • #38608 Fix the missing resume picker history mode import @copyberry
  • #38610 Support workload identity in remote exec-server auth @copyberry
  • #38612 Skip stale Guardian risk score persistence @copyberry
  • #38615 Remove the gRPC code-mode enabled tool limit @copyberry
  • #38616 Route escalated approval retries through Guardian @copyberry
  • #38617 Prioritize global models in the Bedrock Runtime catalog @copyberry
  • #38618 Apply Guardian policies to v2 risk classification @copyberry
  • #38619 Source multi-agent instructions from the model catalog @copyberry
  • #38621 Preserve large gRPC code-mode tool errors @copyberry
  • #38623 Preserve MCP namespace descriptions in the tool catalog cache @copyberry
  • #38624 Open notes when accepting the request input Other option @copyberry
  • #38625 Enable unified exec by default on Windows @copyberry
  • #38628 Make Guardian v2 risk classification configurable @copyberry
  • #38630 Remove the gRPC code-mode open session limit @copyberry
  • #38634 Add MCP protocol discovery metrics @copyberry
  • #38635 Remove repository-local Codex skills @copyberry
  • #38639 Render the initial TUI session header before input @copyberry
  • #38641 Harden TUI startup input handling @copyberry
  • #38642 Keep the composer editable during TUI startup @copyberry
  • #38643 Delay the startup composer until first-login onboarding @copyberry
  • #38644 Show onboarding when Codex home lacks authentication state @copyberry
  • #38645 Deliver gRPC code-mode notifications without truncation @copyberry
  • #38646 Read Apple notarization issuer ID from Key Vault @copyberry
  • #38647 Add an override to skip project configuration @copyberry
  • #38649 Reuse the TUI startup account response during bootstrap @copyberry
  • #38650 Canonicalize default namespaces in gRPC subscription filters @copyberry
  • #38651 Move permission profile snapshots into the protocol @copyberry
  • #38657 Skip terminal hyperlink layout when no links are present @copyberry
  • #38660 Enforce managed deny-read rules in the Windows sandbox @copyberry
  • #38662 Delete Thai combining marks one at a time in the composer @copyberry
  • #38664 Resolve local JSON Schema refs in Code Mode types @copyberry
  • #38670 Forward executor network policy decisions for auditing @copyberry
  • #38673 Honor per-environment permission profiles @copyberry
  • #38675 Exclude shortcut-modified input from TUI paste bursts @copyberry
  • #38678 Preserve environment configuration ownership @copyberry
  • #38681 Preserve HTTP fallback for delegated sessions @copyberry
  • #38682 Surface misalignment policy violations as typed errors @copyberry
  • #38684 Support pending environment attachment configuration @copyberry
  • #38690 Propagate request trace context through exec-server relays @copyberry
  • #38701 Route permission requests through shared Guardian approvals @copyberry
  • #38703 Refresh hook runtimes after plugin changes @copyberry
  • #38704 Normalize CRLF line endings in pasted text @copyberry
  • #38705 Add MCP tool handler support to the hooks engine @copyberry
  • #38743 Scope TUI app directory state to the active context @copyberry
  • #38746 Remove the TUI test dependency on codex-cli @copyberry
  • #38767 Forward workload identity context during token exchange @copyberry
  • #38774 Use paginated history for persistent exec threads @copyberry
  • #38785 Keep active-turn model settings stable across updates @copyberry
  • #38788 Show resume and fork status during TUI startup @copyberry
  • #38795 Add storage diagnostics to codex doctor @copyberry
  • #38800 Route executor policy audits through log-only telemetry @copyberry
  • #38806 Add a health endpoint to the code-mode gRPC listener @copyberry
View original

Upgraded? How did it go?

Discussion