what changed.

## New Features

- Browse older tasks in the agent command center with a keyboard-accessible “Show more” action. (#49106)
- Select transcript text and paste with middle-click in fullscreen mode on supported local Linux X11 terminals. (#49112)
- Start sessions outside a project with workspace defaults when policy permits, and restore saved permissions when resuming. (#49160)
- Added opt-in Guardian review capabilities to retrieve earlier user instructions and include context from agent handoffs. (#49036, #49057)

## Bug Fixes

- Unsent queued messages now resume after reconnection once uncertain submissions are resolved, avoiding duplicate sends. (#49105)
- The terminal UI now preserves server provider, reasoning-summary, and verbosity settings and shows the correct sessions in resume and fork history. (#49144, #49161, #49171)
- Fixed Windows sandbox PowerShell fallbacks and long-path permission repairs, and suppressed unwanted console windows from background helpers. (#49019, #49058, #49098, #49164, #49386)
- Subagents now retain environments that are still starting and receive their configuration or preparation failure. (#49075)
- Prevented SQLite stalls during connection setup and logging, and surfaced initialization errors instead of masking them as timeouts. (#49032, #49102)
- Explicit provider model catalogs no longer include unsupported bundled models or reuse stale entries after refresh failures. (#49135)

## Documentation

- Clarified how provider credentials use the configured storage backend and how `env_key` identifies the API-key environment variable. (#49118)

## Chores

- Reduced repeated plugin-loading work by caching parsed manifests and reusing HTTP connections for remote plugin requests. (#49099, #49100)
- Added background reclamation of unused log database space to reduce disk usage. (#49069)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.0...rust-v0.160.0

- #48983 Avoid full metadata rewrites for thread timestamp updates @jif-oai
- #49000 Isolate the memory startup metadata test from Git enrichment @jif-oai
- #49019 Use a compatible PowerShell fallback for the Windows MXC sandbox @iceweasel-oai
- #49028 Use the numeric ioctl value in the macOS sandbox policy @aionescu-oai
- #49031 Clarify ChatGPT sign-in success copy @bc-openai
- #49032 Avoid SQLite stalls from connection setup and stderr span logging @jif-oai
- #49036 Add opt-in conversation history retrieval to Guardian reviews @felixxia-oai
- #49037 Show the Plan mode cycling hint in the fullscreen status line @fcoury-oai
- #49038 Preserve encrypted agent messages in Guardian reviews @felixxia-oai
- #49041 Copy selections within inline code as plain text @fcoury-oai
- #49043 Update Pro plan display names in the TUI @etraut-openai
- #49057 Add handoff-aware root context for Guardian reviews @jif-oai
- #49058 Fix Windows sandbox ACL repair for long runtime paths @darius-oai
- #49060 Update Guardian messaging snapshots for native agent messages @dkovalenko-oai
- #49065 Update Guardian handoff snapshot for separate agent messages @cassirer-openai
- #49067 Keep configuration values out of Windows sandbox policy events @zm-oai
- #49069 Reclaim unused SQLite log database pages in the background @dkovalenko-oai
- #49073 Surface realtime voice catalog failures in the TUI @etraut-openai
- #49074 Propagate Cargo package versions to Bazel Rust targets @tamird
- #49075 Preserve pending environments when spawning subagents @sayan-oai
- #49076 Avoid collecting unused Git metadata in skill analytics @tamird
- #49079 Update and centralize TUI subscription labels @etraut-openai
- #49082 Skip remote Git discovery for Guardian diff paths @jif-oai
- #49084 Track app-server running turns incrementally @tamird
- #49089 Render follow-up directive labels in the TUI and copied responses @etraut-openai
- #49093 Simplify startup promotions to platform-specific desktop app tips @etraut-openai
- #49096 Update `h2` from 0.4.16 to 0.4.19 in Cargo and Bazel lockfiles @cassirer-openai
- #49097 Notify lifecycle extensions of compaction usage limits @xli-oai
- #49098 Resolve Windows sandbox PowerShell fallbacks on the exec server @zm-oai
- #49099 Cache parsed plugin manifests across plugin workflows @dkovalenko-oai
- #49100 Reuse the HTTP connection pool for remote plugin requests @dkovalenko-oai
- #49102 Preserve SQLite vacuum modes and surface pool initialization errors @bc-openai
- #49103 Balance Windows Bazel test shards using duration estimates @jgershen-oai
- #49105 Resume unsent TUI input after reconnecting @etraut-openai
- #49106 Add history pagination to the agent command center @bc-openai
- #49112 Add X11 primary selection and middle-click paste support @fcoury-oai
- #49114 Point remote compaction tests at the mock ChatGPT server @OLI-OAI
- #49117 Attribute analytics requests to each thread's product SKU @papayo-oai
- #49118 Correct provider authentication storage documentation @celia-oai
- #49119 Add recovery guidance to content-filter retries @won-openai
- #49127 Deduplicate cloud and executor skill listings before budgeting @TAFOYA-OAI
- #49130 Move content-filter guidance into the shared Responses retry handler @won-openai
- #49135 Treat explicit provider model catalogs as authoritative @andrewgu-oai
- #49136 Remove the plus separator after Option symbols in TUI key hints @bc-openai
- #49138 Expose original error details to turn lifecycle contributors @bryanashley
- #49144 Preserve server reasoning summary and verbosity settings in the TUI @etraut-openai
- #49145 Hide reasoning summary settings in `/status` for server connections @etraut-openai
- #49147 Simplify cloud task base URL normalization @akira-oai
- #49153 Omit blockquote markers when copying quoted selections in the TUI @bc-openai
- #49160 Support projectless TUI sessions with workspace defaults @etraut-openai
- #49161 Honor app-server provider defaults in the TUI @etraut-openai
- #49164 Suppress Windows console windows for background subprocesses @etraut-openai
- #49171 Fix model provider lookup for TUI history @etraut-openai
- #49386 [0.160] Backport remaining Windows console fix to frozen alpha.6 @andrewgu-oai
- #49763 [0.160] Backport maintenance-line catalog and security reminder updates @andrewgu-oai

## New Features

- Eligible local sessions signed in with ChatGPT can now show optional reminders to complete account security setup. (#49744)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.2...rust-v0.159.3

- #49744 [0.159] Backport account security setup reminders for 0.159.3 @andrewgu-oai

## Bug Fixes

- Suppressed console windows flashing on Windows when Codex launches background processes and sandboxed commands. (#49385)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.1...rust-v0.159.2

- #49385 [0.159] Backport Windows console suppression for 0.159.2 @andrewgu-oai

## New Features
- Added GPT-6.1 Sol as the default model in the bundled catalog and Amazon Bedrock Mantle and Runtime catalogs. (#49323, #49342)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.0...rust-v0.159.1

- #49323 [0.159] Prepare 0.159.1 release backports @andrewgu-oai
- #49342 [0.159] Backport GPT-6.1 Sol Bedrock catalogs @celia-oai

## New Features

- Opt-in `instant_interrupt` lets new input steer Codex during model responses or long-running code-mode calls. (#48135, #48141)
- New sessions get a compact welcome screen and consistent headers, with occasional tips during and after turns. (#48513, #48562, #48352)
- The warnings viewer dismisses reviewed warnings when closed; press `k` to keep one for later. (#48205, #48206)
- You can scroll the transcript while deciding whether to implement a plan. (#48805)
- Native Mermaid rendering supports more flowchart edges, labels, and node groups. (#48814, #48895)
- App-server clients can paginate thread history from a specific item. (#48151)

## Bug Fixes

- Windows launches avoid stray console windows for MCP servers, code-mode hosts, and piped commands; restrictive launchers can fall back to embedded mode. (#48138, #48238, #48483, #48491)
- Copying transcript selections preserves Markdown tables, formatting, and significant whitespace. More terminals now copy automatically on selection. (#48548, #48549, #48469)
- Blank sessions retain drafts when switching tasks, and threads can be archived and listed before their first turn. (#48628, #48828, #48199)
- Local ChatGPT sign-in opens the browser reliably; onboarding also provides a shortcut to copy the login link. (#48502, #48544)
- Approved commands retain explicit filesystem denials, and `.aws` directories are protected by default under writable roots. (#48155, #48176)
- Fixed macOS TLS access in network-enabled sandboxes and remote environments that require proxy access. (#48565, #48198)

## Chores

- Removed automatic follow-up prompt suggestions and the `tui.prompt_suggestions` setting. (#48621)
- Removed the bundled `plugin-creator` skill. (#48604)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.158.0...rust-v0.159.0

- #48135 Add opt-in code-mode yielding on new user input @pakrym-oai
- #48138 Suppress console windows when spawning the code-mode host on Windows @zm-oai
- #48141 Preempt model responses when new user input arrives @pakrym-oai
- #48143 Preserve executor MCP credential boundaries across reconnects @rreichel3-oai
- #48151 Add item anchors to `thread/items/list` pagination @btraut-openai
- #48155 Preserve filesystem denials when preparing approved commands @viyatb-oai
- #48157 Allow Windows daemon launches with residual job membership @etraut-openai
- #48158 Fix Guardian retained context spacing and empty assistant handling @olliem-oai
- #48168 Generate unique exec-server process IDs for every request @sdcoffey
- #48174 Preserve usage limit windows in turn and compaction analytics @rhan-oai
- #48176 Protect `.aws` directories under sandbox writable roots @jackz100
- #48187 Fix zsh alias quoting in sourced shell snapshots @jif-oai
- #48190 Bound agent message board SSE frames before parsing @jif-oai
- #48197 Optimize `blake3` in Bazel fastbuilds @jif-oai
- #48198 Honor execution environment proxy requirements @seanh-oai
- #48199 Keep archived threads with empty previews visible in listings @acrognale-oai
- #48200 Extract Responses header conversion into a shared module @anp-oai
- #48205 Dismiss viewed TUI warnings when closing the viewer @fcoury-oai
- #48206 Add a keep-and-next action to the warnings viewer @fcoury-oai
- #48207 Preserve queued output for observers during code-mode termination @pakrym-oai
- #48211 Keep Codex visible during external editor handoff @etraut-openai
- #48213 Isolate executable fixture copies in CLI tests on Linux @jif-oai
- #48222 Preserve late result metadata for truncated code-mode calls @ningyi-oai
- #48224 Preserve model and access program pairs during compaction @jamy-OAI
- #48229 Extract Responses failure parsing into a dedicated module @anp-oai
- #48238 Suppress console windows for local Windows MCP servers @malsamiri-oai
- #48272 Prevent Windows daemon launches from retaining launcher stdio @zm-oai
- #48318 Keep TUI reconnect attempts running until the shared deadline @etraut-openai
- #48344 Preserve tool metadata for OpenAI provider endpoint overrides @peilin-openai
- #48350 Display reconnect commands on a separate line @etraut-openai
- #48352 Show turn tips while working and after completion in the TUI @fcoury-oai
- #48353 Stabilize skill catalogs across executor availability changes @vkg-oai
- #48469 Default to copying transcript selections in more terminals @fcoury-oai
- #48483 Prevent console windows for piped Windows child processes @fcoury-oai
- #48489 Fix Mermaid shape, relationship, and state description parsing @etraut-openai
- #48491 Fall back to embedded mode under restrictive Windows launchers @fcoury-oai
- #48502 Fix ChatGPT browser sign-in for local app servers @etraut-openai
- #48508 Preserve WebSocket continuations when steering a turn @pakrym-oai
- #48513 Refresh the TUI welcome screen for new sessions @fcoury-oai
- #48531 Add context to Windows sandbox runtime registration errors @zm-oai
- #48544 Make onboarding login links easier to copy @etraut-openai
- #48547 Fade blossom replays back to the idle state @fcoury-oai
- #48548 Preserve table cell source metadata through TUI rendering @fcoury-oai
- #48549 Preserve Markdown tables and whitespace when copying TUI responses @fcoury-oai
- #48551 Fix TUI math rendering for zero and big wedge expressions @etraut-openai
- #48560 Keep working tips stable during transcript interaction @fcoury-oai
- #48562 Use a consistent borderless session header in the TUI @fcoury-oai
- #48565 Allow macOS TLS trust evaluation in network-enabled Seatbelt profiles @winston-openai
- #48568 Allow exec-server to proxy permitted private IPs upstream @open-matt
- #48574 Preserve deferred tool namespace names before descriptions @adaley-openai
- #48575 Allow provisioned executors more time to come online @richardopenai
- #48604 Remove the bundled `plugin-creator` skill @martinauyeung-oai
- #48611 Centralize persistent mode enablement checks @alishobeiri-oai
- #48621 Remove follow-up prompt suggestions from the TUI @etraut-openai
- #48623 Preserve empty Markdown list markers in the TUI @etraut-openai
- #48626 Stop showing previous-session summaries when switching TUI sessions @etraut-openai
- #48628 Preserve blank TUI sessions when switching tasks @etraut-openai
- #48643 Set the provisioned macOS CLI bundle name to ChatGPT @riley-oai
- #48646 Fix the session-start helper call in the command center test @etraut-openai
- #48686 Remove WebSocket headers and tool payloads from info logs @chess-oai
- #48724 Prevent Linux ETXTBSY races in MCP stdio tests @jif-oai
- #48725 Retain confirmed Code Mode messages for Guardian reviews @ankushg
- #48727 Centralize executable fixture creation to avoid Linux ETXTBSY races @jif-oai
- #48754 Render `/status` without borders and wrap long values @fcoury-oai
- #48757 Match TUI status shimmer timing to desktop headers @fcoury-oai
- #48761 Show hidden output line counts in compact terminal activity @fcoury-oai
- #48764 Preserve MCP app resource URIs without defaulting display mode @victor-openai
- #48772 Fix Unix socket connections through long symlink paths @etraut-openai
- #48775 Match pinned transcript headers to the original prompt style @etraut-openai
- #48776 Remove the `current` badge from TUI task rows @etraut-openai
- #48779 Preserve independent Guardian history across parent compaction @felixxia-oai
- #48783 Add single-server MCP status discovery with thread connection reuse @victor-openai
- #48796 Add opt-in structured errors for Guardian circuit-breaker interruptions @won-openai
- #48799 Fix SGR mouse reporting for Windows terminal capture @etraut-openai
- #48800 Use the terminal palette for ordered Markdown list markers @etraut-openai
- #48805 Allow transcript wheel scrolling while a modal is open @fcoury-oai
- #48807 Show short turn durations in TUI completion footers @fcoury-oai
- #48812 Add history-aware prewarming for idle threads @vkg-oai
- #48814 Preserve punctuation and semicolons in Mermaid labels @etraut-openai
- #48819 Use explicit histogram buckets for tool and skill context metrics @mzeng-openai
- #48824 Keep voice RTP timestamps aligned to 20 ms packets @bc-openai
- #48827 Show a hand pointer over transcript links in Ghostty and Kitty @bc-openai
- #48828 Allow archiving threads before their first turn @bc-openai
- #48829 Wait briefly for the Windows sandbox provisioning service to start @zm-oai
- #48830 Show a short, neutral TUI interruption notice @fcoury-oai
- #48895 Expand native Mermaid flowchart syntax support @etraut-openai
- #48973 Isolate realtime auth fallback test from startup prewarm @jif-oai
- #48982 Prevent message-board notifications from reopening final answers @eknight-oai

## New Features

- Configure copy-on-select and right-click paste in the fullscreen TUI. Copied transcript selections now preserve Markdown formatting. (#47639, #47896, #48118)
- Connect to MCP servers that require pre-registered OAuth client secrets, including through `codex mcp add --oauth-client-secret`. (#47891)
- Secure direct exec-server WebSocket connections with bearer tokens, including connections configured through app-server. (#47601, #47648)
- Image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images. (#47484, #47956)
- Terminal input approval is enabled by default for commands running with elevated permissions; runtime-only grants no longer cause unnecessary reviews. (#47799, #48073)

## Bug Fixes

- Fixed Windows sandbox failures involving ordinary Windows 10 paths, rejected stored credentials, and large permission policies. (#47672, #47695, #47919)
- Fixed Linux sandbox startup with nested writable roots and preserved Git metadata protections across writable roots on Linux and macOS. (#47623, #47974)
- macOS patch operations now recognize system path aliases covered by existing permissions, avoiding unnecessary approval prompts. (#47879)
- Approval reviews now retry when new user input arrives, so a status question does not automatically abort a pending action. (#47819)
- Mermaid flowcharts now render quoted labels and ampersands; unsupported diagrams explain why they fall back to source. (#47572, #47678)
- Command completion events now include early output and report process-launch failures to clients. (#47529, #47665)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.157.0...rust-v0.158.0

- #47441 Use secondary text styling for the transcript footer shortcut hint @etraut-openai
- #47447 Extract WebSocket authentication into `codex-websocket-auth` @euroelessar
- #47458 Parallelize instruction refresh and tool preparation @hlevy-openai
- #47484 Add explicit background control to image generation @alicec-oai
- #47520 Route session agent operations through `AgentControl` @jif-oai
- #47529 Emit command lifecycle events for unified exec launch failures @steipete-oai
- #47536 Route agent lookups and V2 context through `AgentControl` @jif-oai
- #47539 Test interrupted one-shot command launch failure persistence @jif-oai
- #47540 Add an option to disable multi-agent v2 direct messaging @jif-oai
- #47565 Classify rollout read failures by reason and progress @jif-oai
- #47568 Record sandbox backends in command execution analytics @iceweasel-oai
- #47571 Wait for idle before injecting remote compaction test history @felixxia-oai
- #47572 Explain Mermaid rendering fallbacks in the TUI @etraut-openai
- #47582 Retain assistant context for Guardian authorization reviews @felixxia-oai
- #47584 Preserve streamed assistant message order in retained context @felixxia-oai
- #47585 Preserve delivered assistant messages in Guardian retained context @felixxia-oai
- #47589 Keep unfinished link destinations out of rich streaming previews @etraut-openai
- #47590 Serialize numeric custom reasoning effort as JSON numbers @dylan-hurd-oai
- #47591 Stream daemon executable hashing off the async runtime @etraut-openai
- #47596 Refresh realtime context for each model request @reia-oai
- #47597 Guard prerelease channel and canary updates against older versions @imac-oai
- #47601 Add opt-in WebSocket authentication to exec-server @euroelessar
- #47603 Add a reap-only drop policy for child processes @charliemarsh-oai
- #47604 Extend child commands with session and descriptor controls @charliemarsh-oai
- #47605 Route pipe processes through the shared child launcher @charliemarsh-oai
- #47610 Use native POSIX spawning for command hooks @charliemarsh-oai
- #47611 Use the shared process launcher for Unix shell snapshots @charliemarsh-oai
- #47612 Launch Linux pipe processes through a fresh setup helper @freeqaz-openai
- #47613 Expand Linux spawn-helper lifecycle test coverage @charliemarsh-oai
- #47617 Route Linux PTY launches through the process setup helper @charliemarsh-oai
- #47618 Prefer Shift-arrow hints for queued messages and questions @imac-oai
- #47619 Add bounded buffering for global operation metrics @celia-oai
- #47620 Add portable project trust lookup APIs @seanh-oai
- #47623 Fix read-only metadata mount ordering for nested writable roots @jif-oai
- #47624 Recognize `user_message` tools in Guardian authorization context @ankushg
- #47625 Allow history and notes without experimental context capability @pmccrary-oai
- #47629 Route V2 child loading through `AgentControl` @jif-oai
- #47630 Bind Guardian reviews to the action's target environment @jif-oai
- #47633 Route message board agent resolution through the selected controller @jif-oai
- #47635 Overlap startup WebSocket preconnect with tool discovery @bromano-oai
- #47638 Classify retryable exec-server preparation errors by type @mtsui-oai
- #47639 Add configurable copy-on-select for transcript selections @fcoury-oai
- #47641 Honor Retry-After and preserve server retry deadlines @anp-oai
- #47642 Add model-specific prefixes to indirect tool descriptions @rhan-oai
- #47647 Apply Guardian computer-use review to the Browser connector @johnl-oai
- #47648 Support bearer tokens for app-server executor connections @euroelessar
- #47649 Add opt-in OTLP logging for final agent responses @xli-oai
- #47653 Attach inherited rollout history to diagnostic reports @dkovalenko-oai
- #47654 Make Linux descriptor cleanup fork-safe @yuzhu-oai
- #47655 Bump the exec-server stable compatibility test to Codex 0.156.1 @imac-oai
- #47657 Restrict the default Bedrock GovCloud model catalog @jackz100
- #47662 Expose tool dispatch and timing observations to extensions @euroelessar
- #47663 Preserve managed network policy in route-aware transports @jackz100
- #47665 Preserve early unified exec output in completion events @sdcoffey
- #47670 Support model-specific descriptions for agent message board tools @eknight-oai
- #47672 Fix no-reparse directory opens on Windows 10 @zm-oai
- #47673 Clarify registered Windows sandbox setup errors @zm-oai
- #47677 Support model catalog overrides for MCP resource tool specs @rhan-oai
- #47678 Support quoted labels and ampersands in Mermaid flowcharts @etraut-openai
- #47679 Add extension hooks for model requests and response streams @euroelessar
- #47680 Add exec-server RPC timing and process startup tracing @anp-oai
- #47683 Add executor capability discovery V2 infrastructure @TAFOYA-OAI
- #47686 Make thread-owned Guardian context always enabled @felixxia-oai
- #47688 Remove legacy Guardian authorization evidence paths @felixxia-oai
- #47689 Make Guardian thread context capture unconditional @felixxia-oai
- #47690 Remove obsolete Guardian context capture mode branches @felixxia-oai
- #47691 Materialize rollout persistence for pending inter-agent messages @dermanyang-oai
- #47693 Configure curl retries for DotSlash installation in CI @anp-oai
- #47695 Repair rejected Windows sandbox credentials during provisioning @zm-oai
- #47696 Avoid the shutdown timeout in the lagged-event test @jgershen-oai
- #47698 Allow WebSocket test server shutdown while waiting for requests @jgershen-oai
- #47701 Allow idle threads to prewarm and repair WebSocket connections @vkg-oai
- #47703 Preserve account network policy for ChatGPT backend requests @jackz100
- #47704 Fix spawn flag typing and isolate project configuration tests @seanh-oai
- #47709 Route resume prewarm through the cached WebSocket session @vkg-oai
- #47712 Update unified exec output buffers atomically @sdcoffey
- #47713 Reduce dependency coupling in shared configuration crates @aibrahim-oai
- #47714 Preserve tool result metadata more selectively under size limits @ningyi-oai
- #47717 Avoid recursive TUI event dispatch for model picker selections @etraut-openai
- #47741 Attribute tool telemetry to the invoking turn's product SKU @rennie-openai
- #47742 Honor network policy in history notes and image generation extensions @jackz100
- #47745 Skip startup prewarm preparation when the WebSocket is ready @vkg-oai
- #47748 Align Cargo and Bazel Rust debug information defaults @aibrahim-oai
- #47751 Reduce generic code duplication in RPC and Markdown rendering @aibrahim-oai
- #47755 Centralize typed app-server response decoding @aibrahim-oai
- #47757 Refactor tool telemetry product SKU matching to use an allowlist @rennie-openai
- #47758 Preserve more tool metadata within outgoing message budgets @ningyi-oai
- #47773 Honor catalog schemas for asynchronous user input @rhan-oai
- #47797 Support close-on-exec attachments without changing PTY semantics @jif-oai
- #47799 Enable terminal input approval by default @jif-oai
- #47808 Allow hosts to provide agent controllers through ThreadManager @jif-oai
- #47811 Preserve explicit user goal updates in Guardian authorization @felixxia-oai
- #47813 Fix sleep interruption test event handling and fixture lifetime @felixxia-oai
- #47814 Fix a lost wakeup in the unified exec termination test @felixxia-oai
- #47817 Stabilize thread resume and memory dual-write tests @jif-oai
- #47819 Retry Guardian reviews when authorization changes @teddywyly-oai
- #47820 Add integration coverage for host agent controllers @jif-oai
- #47824 Allow four concurrent threads in the multi-agent resume test @felixxia-oai
- #47828 Wait for login completion in recommended plugin tests @felixxia-oai
- #47830 Bind Guardian async scores to target environment permissions @jif-oai
- #47832 Stabilize Rosetta test timing and retry delay telemetry @jif-oai
- #47847 Keep the TUI responsive during clipboard copies @fcoury-oai
- #47851 Preserve human overrides across repeated heartbeat instructions @felixxia-oai
- #47852 Avoid blocking async proxy resolution on the system proxy cache @jif-oai
- #47856 Initialize media estimates outside the global cache lock @jif-oai
- #47858 Validate loaded plugins outside the cache lock @jif-oai
- #47861 Avoid nested read locking when rendering browser sign-in @jif-oai
- #47867 Render remote permission paths using executor context @iceweasel-oai
- #47870 Add opt-in OTLP logging for Guardian assessments @jif-oai
- #47871 Fix PID reservation test race and update guardian heartbeat snapshot @jif-oai
- #47873 Measure deferred tool namespace fragments before and after truncation @mzeng-openai
- #47879 Fix macOS system-alias matching in patch permission checks @felixxia-oai
- #47881 Use Tokio's clock for TUI paste timing @charliemarsh-oai
- #47886 Preserve diagnostic logs when SQLite logging fails @dkovalenko-oai
- #47887 Warn users when SQLite diagnostic log writes fail @dkovalenko-oai
- #47889 Include TUI client logs in diagnostic uploads @etraut-openai
- #47891 Support client secrets for pre-registered MCP OAuth clients @willwang-openai
- #47894 Clean up temporary Codex homes after TUI tests @fcoury-oai
- #47896 Preserve Markdown formatting when copying transcript selections @fcoury-oai
- #47898 Preserve local-binding inheritance in environment network policies @seanh-oai
- #47899 Add diagnostic reasons to MCP attribution errors @peilin-openai
- #47900 Default local threads to paginated history @owenlin0
- #47901 Add bounded credential-storage telemetry helpers @celia-oai
- #47902 Avoid repeated table clones during config merging @imac-oai
- #47903 Move config key alias normalization ahead of merging @imac-oai
- #47904 Support nested canonical paths in config key aliases @imac-oai
- #47908 Alias `tui.whimsy` to `tui.effects.starfield` @imac-oai
- #47912 Fix attestation routing during thread startup @charliemarsh-oai
- #47913 Add an opt-in flag to defer mailbox preemption @jif-oai
- #47915 Reuse verified V8 checksum manifests from the artifact cache @aibrahim-oai
- #47918 Parameterize the turn-start origin

these notes continue in the original release.

## Chores

- Release highlights could not be determined: the supplied PR index is empty, and the GitHub tag comparison returned 404.

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.157.0...rust-v0.157.1

## New Features

- Added GPT-6 Sol and Luna, including Amazon Bedrock support and migration prompts for older models. (#47332, #47347)
- Enabled fullscreen transcripts by default and added Shift-click to extend text selections. (#47178, #47414)
- Enabled automatic background-server startup for eligible interactive sessions, with recovery choices when server settings are incompatible. (#47179, #47318)
- Added an `f` shortcut to fork conversations open in another app, preserving drafts and queued prompts. (#47185)
- Made `/import` available in remote sessions and local background-server sessions. (#47317)
- Improved terminal rendering with Unicode bullets, checkboxes, aligned equations, and optimization notation. (#47191, #47322)

## Bug Fixes

- Preserved active voice conversations when switching threads. (#47381)
- Recovered unsent question answers into the composer when turns end, without disrupting active history searches. (#47422, #47423)
- Respected tmux mouse settings and restored native scrollback for Terminal.app over SSH in automatic screen mode. (#47399, #47417)
- Fixed configured proxy routing for realtime connections and standalone web search, including search redirects. (#47101, #47142, #47204)
- Added retries for transient file-upload failures and increased the upload timeout to five minutes. (#47122, #47393)
- Enforced network restrictions across redirects and ongoing HTTP and WebSocket traffic, including cancellation when policy changes revoke access. (#47389, #47407)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.156.0...rust-v0.157.0

- #47063 Add a partial index for agent message board root posts @jif-oai
- #47064 Stop redundant message-board reads when limits reach one @jif-oai
- #47065 Deduplicate deprecation notices in the TUI transcript @etraut-openai
- #47068 Highlight selected newlines in the transcript view @etraut-openai
- #47073 Wait for thread idle in Guardian context budget tests @jif-oai
- #47074 Refresh host-supplied cloud skills at turn startup @TAFOYA-OAI
- #47075 Include attributed previews in agent message board notifications @jif-oai
- #47077 Serialize environment updates and cancel removed pending attachments @sayan-oai
- #47079 Mask daemon socket paths exposed through ancestor bind mounts @nicksteele-oai
- #47081 Track cumulative MCP attribution across requests and thread history @peilin-openai
- #47082 Show the voice toggle in the TUI shortcut overlay @etraut-openai
- #47083 Extract per-thread enrichment into a dedicated async helper @aibrahim-oai
- #47084 Avoid building a host SQLite driver for SQLx macros @aibrahim-oai
- #47085 Update model catalog descriptions and GPT-5.6-Sol priority @andrewgu-oai
- #47086 Format analytics credit usage with consistent decimal precision @fcoury-oai
- #47088 Disable unused default dependency features @aibrahim-oai
- #47089 Centralize JSON-RPC response serialization through payloads @aibrahim-oai
- #47094 Restrict Unix local MCP servers to stdio descriptors @yuzhu-oai
- #47095 Remove the `rust-release-prepare` workflow @andrewgu-oai
- #47096 Keep TUI hints immediately above the composer @fcoury-oai
- #47100 Preserve assistant answers in bounded TUI task responses @etraut-openai
- #47101 Honor configured proxies for realtime WebSocket connections @celia-oai
- #47106 Preserve originating turn metadata for yielded skill calls @eddie-openai
- #47108 Preserve required Windows runtime variables for filesystem helpers @iceweasel-oai
- #47112 Lowercase the retry hint for conversations open in another app @fcoury-oai
- #47113 Persist thread creator identity in rollouts and SQLite @nornagon-openai
- #47114 Preserve and expose thread item lifecycle timestamps @chiam-oai
- #47116 Honor the configured product SKU in remote plugin requests @jessedu-oai
- #47118 Support model-catalog overrides for Code Mode tool messages @rhan-oai
- #47121 Pass thread IDs to attachment uploads @kchainani-oai
- #47122 Increase OpenAI file blob upload timeout from 60 seconds to 5 minutes @wilkes-oai
- #47125 Add extra policy configuration for Guardian reviews @won-openai
- #47129 Preserve foreign working directories in extension tool environments @anp-oai
- #47130 Remove the `ultrafast` service tier from `gpt-5.6-sol` @andrewgu-oai
- #47132 Support caller-provided MITM CAs in the network proxy @viyatb-oai
- #47137 Prevent horizontal transcript selection from triggering autoscroll @imac-oai
- #47142 Honor system proxy settings for standalone web search @celia-oai
- #47143 Extract exec-server CLI startup into a dedicated module @anp-oai
- #47149 Update code mode catalog snapshot hashes @andrewgu-oai
- #47155 Ignore stale thread-close notifications after resuming a thread @etraut-openai
- #47158 Harden gateway OAuth credential persistence and error redaction @alexsong-oai
- #47159 Expose HTTP origins in MCP server status @frantic-openai
- #47162 Apply workspace routing to Guardian v2 classifier requests @acrognale-oai
- #47170 Add explicit gateway login control and authentication status @alexsong-oai
- #47174 Preserve empty cell metadata under pending tool-call pressure @ningyi-oai
- #47178 Enable the fullscreen transcript by default @etraut-openai
- #47179 Enable automatic daemon startup by default @etraut-openai
- #47185 Allow forking conversations locked by another app in the TUI @fcoury-oai
- #47191 Render aligned equations and optimization notation in TUI math @etraut-openai
- #47199 Separate thread preparation from execution persistence @dermanyang-oai
- #47204 Resolve proxy routes for standalone web search redirects @celia-oai
- #47207 Add explicit gateway OAuth sign-in to app-server @alexsong-oai
- #47212 Preserve MCP request trace context across transport workers @bromano-oai
- #47235 Route multi-agent spawning through `SpawnRequest` @jif-oai
- #47236 Suppress agent message board notifications to the post author @jif-oai
- #47240 Prevent V2 agent eviction from racing with queued messages @jif-oai
- #47244 Centralize agent resume handling in `LocalAgentControl` @jif-oai
- #47248 Add explicit app and account targets to MCP resource reads @victor-openai
- #47249 Drop descendant channel posts from retained remote compaction v2 history @jif-oai
- #47252 Return agent snapshots from `close_agent` @jif-oai
- #47257 Preserve explicit message-board unsubscribes when posting @jif-oai
- #47258 Test spawn settings reporting after child removal @jif-oai
- #47259 Subscribe authors to message-board channels created by posting @jif-oai
- #47263 Expose hosted plugin extensions in app-server summaries @victor-openai
- #47267 Stream agent snapshots from local status subscriptions @jif-oai
- #47271 Implement `AgentControl` for `LocalAgentControl` @jif-oai
- #47272 Allow Guardian sync review across compaction hash differences @felixxia-oai
- #47275 Enable Guardian thread context by default @felixxia-oai
- #47281 Add regression coverage for message board unsubscribe persistence @jif-oai
- #47287 Update the Guardian extra-policy snapshot for retained instructions @felixxia-oai
- #47292 Consolidate agent operations in the `AgentControl` implementation @jif-oai
- #47301 Separate local agent runtime state from controller handles @jif-oai
- #47302 Use compact display metadata for Guardian review threads @charliemarsh-oai
- #47303 Clean up legacy Guardian thread metadata in SQLite @charliemarsh-oai
- #47317 Enable `/import` in remote and local daemon sessions @etraut-openai
- #47318 Offer explicit recovery for incompatible background servers @etraut-openai
- #47319 Match agent status symbols to the selected row style @etraut-openai
- #47320 Fix Escape navigation in read-only agent sessions @etraut-openai
- #47321 Honor the system clock preference across more TUI timestamps @etraut-openai
- #47322 Render TUI Markdown lists with Unicode bullets and checkboxes @etraut-openai
- #47323 Persist resume metadata in compaction checkpoints @owenlin0
- #47325 Keep report reason tags within Sentry limits @ningyi-oai
- #47326 Restrict MCP OAuth authorization endpoints to HTTP(S) @viyatb-oai
- #47327 Preserve image generation request IDs on failure @chrisdong-oai
- #47329 Standardize TUI menu description wording and punctuation @etraut-openai
- #47330 Identify failed SQLite databases in `codex doctor` output @dkovalenko-oai
- #47331 Avoid redundant spacing above the transcript composer @fcoury-oai
- #47332 Add GPT-6 Sol and Luna to the model catalog @andrewgu-oai
- #47338 Move the activity inspection hint into keyboard shortcut help @fcoury-oai
- #47340 Add conditional turn interruption that preserves pending input @pmccrary-oai
- #47342 Skip stored title lookups for ephemeral forks @keyz
- #47347 Add GPT-6 Sol and Luna to Amazon Bedrock catalogs @celia-oai
- #47348 Overlap subagent spawn persistence and clean up cancelled children @owenlin0
- #47349 Move plugin recommendations into developer context @adaley-openai
- #47350 Reuse cloud skill catalogs across turns until invalidated @hlevy-openai
- #47353 Preserve `invalid_prompt` as a distinct error classification @rennie-openai
- #47355 Reserve spacing after recaps at the transcript tail @fcoury-oai
- #47358 Color paths and URLs in `codex doctor` by check status @dkovalenko-oai
- #47360 Preserve user prompt URL destinations across terminal widths @fcoury-oai
- #47361 Restrict Windows sandbox default object access to the logon session @viyatb-oai
- #47362 Bound inbound exec-server requests across client transports @viyatb-oai
- #47365 Resume model context from the latest compaction boundary @owenlin0
- #47369 Overlap agent metadata reads when resuming a V2 root @vkg-oai
- #47375 Add an opt-in preference for the local MXC sandbox @iceweasel-oai
- #47377 Add opt-in reasoning status for realtime V3 delegations @guinness-oai
- #47380 Route TUI voice controls through the app @etraut-openai
- #47381 Keep voice conversations running across TUI thread navigation @etraut-openai
- #47382 Show a voice badge in the agents overview @etraut-openai
- #47384 Restore composer hints after clearing selection at the transcript bottom @fcoury-oai
- #47389 Enforce network policy throughout HTTP and WebSocket requests @acrognale-oai
- #47393 Retry transient OpenAI file blob upload failures @mtsui-oai
- #47397 Refresh bundled model metadata and instructions @andrewgu-oai
- #47399 Respect tmux mouse settings in fullscreen and overlays @fcoury-oai
- #47407 Enforce application network policy across app-server requests @acrognale-oai
- #47408 Enforce application network policy for AWS auth and telemetry @acrognale-oai
- #47410 Honor network policy in remote control and recover remote execution @acrognale-oai
- #47411 Apply shared network policy throughout embedded Codex startup @acrognale-oai
- #47413 Cache decrypted gateway OAuth secrets per backend @charliemarsh-oai
- #47414 Support Shift-click to extend transcript selections @etraut-openai
- #47417 Use native scrollback for Terminal.app over SSH in auto mode @fcoury-oai
- #47422 Recover unsent question drafts when TUI turns end @imac-oai
- #47423 Preserve history search during background draft recovery @imac-oai
- #47424 Clear pending async question notifications when turns end @imac-oai
- #47428 Apply inherited environment settings at turn boundaries @sayan-oai
- #47435 Allow environment selection updates during an active turn @sayan-oai
- #47437 Stabilize retry timing and WebSocket tests @anp-oai

## New Features

- Choose GPT-6 Sol or GPT-6 Luna from the model picker. The rate-limit switch prompt now recommends GPT-6 Luna. (#47405)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.156.0...rust-v0.156.1

- #47405 [hotfix 0.156.0] Add GPT-6 Sol and Luna to the model catalog (#47332) @imac-oai

## New Features

- Choose an optional fullscreen UI with `/tui` for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #46883, #46895)
- Voice conversations are enabled by default, with an F8 toggle, a `/voice settings` picker, and bundled audio runtimes for Linux and Windows. (#44921, #46071, #44622, #44714, #44922)
- Explore account usage, token totals, and plugin and skill activity through the `/usage` analytics dashboard. (#45764, #45769)
- Filter tasks by status and create worktree sessions from the agent command center; worktree support is now enabled by default. (#46839, #45276, #44870)
- Customize the terminal with six new themes and view supported Mermaid diagrams and display equations directly in responses. (#46504, #46054, #45612)
- Update the local background server through `/daemon`, or bypass it with `--no-daemon`. (#45854, #46088)

## Bug Fixes

- Preserve streamed answers and plans when turns fail, are interrupted, or receive subagent completion events. (#45549, #46867)
- Fix clipboard forwarding in tmux and SSH sessions and preserve tab indentation when terminals send pasted text as individual keystrokes. (#45457, #45454)
- Restore Plan mode when resuming sessions and preserve thread identity and settings when editing earlier prompts. (#45519, #45845)
- Recover login through system proxies and refresh MCP credentials when OAuth discovery returns a 503 error. (#46562, #44636)
- Prevent speech from being dropped during playback pauses or bursts of incoming audio. (#46880)
- Close sandbox isolation gaps involving inbound Windows connections, privileged Linux/macOS sockets, and writes through read-only macOS file handles. (#44639, #45984, #46500)

## Documentation

- Clarify that deprecated `friendly` and `pragmatic` personality settings no longer select response styles. (#45809)
- Explain how `?` matches a single character in network proxy allow and deny patterns. (#46027)

## Chores

- Update bundled TLS dependencies, including OpenSSL 3.6.4 for Linux musl builds. (#45149, #45489)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.155.0...rust-v0.156.0

- #44606 Preserve whole diagnostic attachments and report incomplete uploads @chess-oai
- #44611 Preserve root turn attribution in turn-start events @owenlin0
- #44613 Enable user verification for local Codex Desktop sessions @riley-oai
- #44615 Treat non-interactive dumb terminals as warnings in `codex doctor` @etraut-openai
- #44616 Simplify enterprise OAuth login helpers and expand callback tests @nicksteele-oai
- #44617 Invalidate cached Guardian approvals for unscored permission widening @jif-oai
- #44619 Allow discarded code mode tool responses to be garbage collected @jif-oai
- #44620 Support temporary and minimal filesystem grants in MXC @iceweasel-oai
- #44622 Add `/voice settings` to choose a voice for future conversations @bc-openai
- #44626 Add bounded environment transport for MXC launch requests @iceweasel-oai
- #44628 Expose session analytics state in Responses turn metadata @marksteinbrick-oai
- #44629 Add manual callback input to MCP OAuth login @willwang-openai
- #44631 Focus the task list when reopening the agent command center @etraut-openai
- #44636 Recover OAuth metadata discovery from 503 responses via OIDC @malsamiri-oai
- #44639 Block non-loopback inbound traffic for the Windows offline sandbox @viyatb-oai
- #44646 Honor thread analytics opt-outs when using shared clients @priyanshusingh-de
- #44650 Enforce managed model provider selection and definitions @alexsong-oai
- #44651 Keep command center errors visible and preserve drafts @etraut-openai
- #44654 Preserve missing environment variable diagnostics in Codex Doctor @etraut-openai
- #44655 Honor thread-level plugin exclusions across runtime capabilities @mzeng-openai
- #44656 Attribute turn metrics to the models used during the turn @eternal-openai
- #44658 Keep Windows sandbox private desktops alive across helper exits @chess-oai
- #44659 Preserve turn triggers across delegated agent work @joeytrasatti-openai
- #44661 Trace tool call receipt, result readiness, and code-mode dispatch @anp-oai
- #44666 Honor system reduced-motion preferences in the TUI @imac-oai
- #44669 Resolve filesystem denials with explicit path context @seanh-oai
- #44670 Restrict login setup redirects to known platform origins @hintz-openai
- #44671 Keep voice sessions alive through mute and audio backlog @bc-openai
- #44675 Refresh global instructions at model-request boundaries @vkg-oai
- #44676 Resolve permission profiles with explicit execution-host path context @seanh-oai
- #44691 Warn about ignored configuration settings @andrewgu-oai
- #44693 Preserve selected profile settings over managed new-thread defaults @alexr-oai
- #44694 Include the Windows sandbox service in release artifacts @johnl-oai
- #44701 Add a provider for thread-scoped instructions @vkg-oai
- #44711 Return to the command center after session cancellation or deletion @etraut-openai
- #44714 Bundle Linux voice runtimes and improve audio reliability @bc-openai
- #44732 Clarify folder trust prompts and add restricted widget support @etraut-openai
- #44742 Preserve editor yanks across new sessions and thread switches @bc-openai
- #44744 Make archive confirmation number shortcuts act immediately @etraut-openai
- #44746 Check folder trust after resolving the startup destination @etraut-openai
- #44747 Update `quinn-proto` and allow the pinned H3 Git source @richardopenai
- #44749 Preserve voice caption order when replaying TUI history @bc-openai
- #44752 Render Markdown in agent overview task details @etraut-openai
- #44755 Check folder consent before creating or resuming TUI tasks @etraut-openai
- #44814 Test approved command execution with managed unified exec disabled @jif-oai
- #44826 Expose advertised MCP server capabilities in status responses @gpeal
- #44832 Add trusted enterprise MCP auth configuration @nicksteele-oai
- #44857 Add consistent theme-based thread colors across the TUI @etraut-openai
- #44862 Preserve parent cache affinity for ephemeral forks @jif-oai
- #44865 Scope code mode callback delegates to individual executions @abhinav-oai
- #44866 Preserve originating context for yielded code-mode tool calls @abhinav-oai
- #44867 Preserve originating budgets for code mode notifications @abhinav-oai
- #44870 Enable worktrees by default and clarify local daemon errors @bc-openai
- #44872 Add managed network policy support to the Windows MXC sandbox @iceweasel-oai
- #44877 Return public key metadata from user verification enrollment @riley-oai
- #44879 Fade Astra composer stars and stabilize cursor redraws @imac-oai
- #44883 Reject token-budget history notes for unsupported starting models @jif-oai
- #44893 Expose available access programs in model discovery @faizan-oai
- #44903 Wire up the native Windows MXC helper entry point @iceweasel-oai
- #44905 Expose disabled plugin settings in the app-server API @mzeng-openai
- #44915 Remove the deprecated `thread/rollback` API @owenlin0
- #44921 Enable TUI voice conversations by default @bc-openai
- #44922 Bundle native voice runtimes in Windows releases @bc-openai
- #44924 Refresh the speaker format when restarting voice output @bc-openai
- #44925 Accept voice response audio before captions on quiet turns @bc-openai
- #44928 Preserve voice meter history through quiet samples @bc-openai
- #44930 Embed friendly instructions in bundled GPT-5.4 and GPT-5.5 @rhan-oai
- #44931 Stop setting `YARN_NO_PROXY` in the managed proxy environment @viyatb-oai
- #44932 Unify context snapshots and group requests into windows @pakrym-oai
- #44933 Remove Windows world-writable scans and warnings from the TUI @etraut-openai
- #44934 Add scenario snapshots for remote compaction and Code Mode tools @pakrym-oai
- #44935 Remove personality selection from the TUI @rhan-oai
- #44938 Add connector auth failure detection without an install URL @priyanshusingh-de
- #44939 Respect execution hosts in Windows sandbox setup @etraut-openai
- #44942 Clarify the Windows Visual C++ runtime notice for voice packages @bc-openai
- #44944 Enforce managed provider requirements on existing app-server threads @alexsong-oai
- #44945 Route TUI Windows sandbox setup through the app server @etraut-openai
- #44946 Retire Friendly and Pragmatic personality selection @rhan-oai
- #44948 Add context snapshots for async questions and plugin refresh @pakrym-oai
- #44952 Keep voice captions visible across speaker updates and history handoff @bc-openai
- #44957 Add model grouping to the agent command center @etraut-openai
- #44969 Open tasks managed elsewhere as read-only history in the command center @etraut-openai
- #44970 Show task tokens and usage estimates in the agent command center @etraut-openai
- #44976 Make context snapshot text rendering consistent @pakrym-oai
- #45035 Run DotSlash publishing directly on Ubuntu runners @charliemarsh-oai
- #45039 Use gzip compression level 6 for Codex package archives @charliemarsh-oai
- #45051 Consolidate Rust release artifact downloads @charliemarsh-oai
- #45089 Delay automatic recaps and compact their TUI layout @fcoury-oai
- #45090 Preserve conversation context and separate next actions in recaps @fcoury-oai
- #45094 Estimate history tokens from content instead of serialized envelopes @won-openai
- #45108 Cancel pending thread title generation after manual renames @fcoury-oai
- #45112 Use blueberry in the realtime background-agent test fixture @anp-oai
- #45116 Prevent multiline report notes from submitting early @etraut-openai
- #45124 Add a feature flag for asynchronous user messages @alishobeiri-oai
- #45135 Preview streaming prose before a newline arrives in the TUI @etraut-openai
- #45137 Remove Astra sparkle animation from the TUI composer @fcoury-oai
- #45149 Use OpenSSL 3.6.4 for musl builds @zm-oai
- #45169 Extract Windows sandbox setup and installation storage into the library @zm-oai
- #45176 Wire the Windows MXC sandbox into command execution @iceweasel-oai
- #45178 Split Windows sandbox cleanup into preparation and completion phases @zm-oai
- #45180 Extract shared network configuration and environment policy helpers @seanh-oai
- #45182 Validate Windows sandbox token groups before copying SIDs @zm-oai
- #45185 Bind direct tool-call metadata to invocation outputs @ningyi-oai
- #45224 Register Windows desktop uninstall ownership before sandbox setup @chess-oai
- #45248 Use captured step settings for request metadata and tool hooks @abhinav-oai
- #45255 Open new sessions directly from the command center @etraut-openai
- #45262 Route pastes into the active history search query @charliemarsh-oai
- #45271 Preserve terminal scrollback when growing the TUI viewport @fcoury-oai
- #45276 Add worktree session creation to the agents overview @etraut-openai
- #45312 Extract Windows sandbox configuration preparation into a helper @seanh-oai
- #45345 Publish opt-in provisioned macOS packages with Rust releases @riley-oai
- #45399 Cancel code mode timer tasks when cleared or the cell finishes @jif-oai
- #45409 Add session and originating window IDs to MCP request metadata @jif-oai
- #45413 Invalidate Guardian review sessions after parent history resets @jif-oai
- #45417 Extract guardian transcript selection into `guardian-context` @felixxia-oai
- #45418 Extract Guardian conversation bookkeeping into the reviewer crate @felixxia-oai
- #45420 Extract Guardian sampler execution into a dedicated module @felixxia-oai
- #45428 Avoid cloning MCP server status snapshot data @charliemarsh-oai
- #45439 Share tool output schemas and defer MCP envelope construction @charliemarsh-oai
- #45440 Share Apps tool catalogs without retaining unused snapshots @charliemarsh-oai
- #45441 Preserve Guardian parent response IDs across sampling requests @jif-oai
- #45445 Attribute command and plugin analytics to the invoking model @jwang-openai
- #45454 Preserve tabs in non-bracketed paste bu

these notes continue in the original release.