## 新功能
- 用量限制重置积分现在会显示其类型和过期时间，并允许您选择要兑换的积分。(#30488)
- 新增了一种 `writes` 应用审批模式，该模式允许声明为只读的操作，同时在写入操作时提示审批。(#30482)
- MCP 工具现在可以无需实验性选择加入即可交互式请求身份验证。(#28772)
- 应用服务器主机可以在运行时提供 Codex 身份验证，并将成功的登录重定向到托管页面。(#28745, #31274)
- 现在可以检测到全局 pnpm 安装，以便诊断和更新使用正确的包管理器。(#31503)
- 选择 Ultra 推理时，如果高多智能体并发可能导致用量快速增加，系统会发出警告。(#31621)
## 错误修复
- 恢复的 ChatGPT 线程在压缩引用了已退役模型时，会通过使用当前所选模型重试来恢复。(#30319)
- 修复了 Intel macOS 发行版二进制文件中的代码模式崩溃问题。(#30953)
- Windows 沙盒会话现在可以删除可写根目录中的文件，并访问托管的主运行时。(#31138, #31574)
- 粘贴的终端控制序列不再损坏 TUI 渲染或恢复的对话历史记录。(#31494)
- 长时间运行的应用会话现在会为托管的 `codex_apps` 连接器刷新过期的身份验证。(#31486)
- Responses WebSocket 继续使用低延迟传输，同时遵守系统代理和自定义证书颁发机构。(#31441, #31622)
## 文档
- 设备码登录警告现在解释了如何识别和阻止网络钓鱼尝试。(#31648)
## 杂项
- 通过每个根目录解析一次命名空间，减少了远程执行器上的插件技能加载时间。(#31348)
- 使 `/review` 分支选择器在大型仓库中更快、更可靠。(#31464)
- 改进了自动审查行为，提供了更清晰的指令和更集中的工具集。(#31480)
- 使 Amazon Bedrock 模型名称能够清晰标识其 GPT-5.6 系列和变体。(#31636)
## 变更日志
完整变更日志：https://github.com/openai/codex/compare/rust-v0.143.0...rust-v0.144.0
- #30292 序列化共享的 MCP OAuth 凭据存储 @stevenlee-oai
- #30488 [codex-cli] 在兑换选择器中显示重置详情 @jayp-oai
- #31297 特性(核心)：发出规范命令执行项 @owenlin0
- #31298 特性(核心)：发出规范动态工具调用项 @owenlin0
- #31369 测试(技能)：覆盖插件命名空间加载 @anp-oai
- #30953 修复(发布)：添加缺失的 Intel V8 签名授权 @malsamiri-oai
- #31355 重构：使 ExternalAuth 返回 CodexAuth @lt-oai
- #31352 CI：增加 Windows Bazel 本地测试任务 @anp-oai
- #30482 [codex-rs] 添加写入应用审批模式 @zamoshchin-openai
- #31439 处理 Codex 中的生物策略错误 @fc-oai
- #31319 [codex] 添加连接器运行时延迟指标 @mzeng-openai
- #31312 使用模型目录审批消息 @dylan-hurd-oai
- #31422 测试：泛化 exec-server 夹具 @anp-oai
- #28772 [codex] 默认启用身份验证提示 @mzeng-openai
- #28745 [登录] 支持托管成功重定向 @rafael-jac
- #31316 杂项：提取远程压缩请求尝试 @celia-oai
- #31299 特性(核心)：发出规范子智能体活动项 @owenlin0
- #31285 [1/5] [codex] 同步托管层包架构 @hefuc-oai
- #31300 特性(核心)：发出规范协作工具调用项 @owenlin0
- #31301 特性(核心)：发出规范协作等待项 @owenlin0
- #30319 修复：使用所选模型重试被拒绝的前模型压缩 @celia-oai
- #30879 处理 Windows 命令安全性中的混合大小写 URL @charliemarsh-oai
- #31191 处理完成分隔符和弹出窗口关闭 @charliemarsh-oai
- #31425 测试：添加 TestAppServer 构建器 @anp-oai
- #31342 http-client：暴露 WebSocket 代理先决条件 @bolinfest
- #31348 性能(技能)：每根目录解析插件命名空间 @anp-oai
- #31289 使用规范索引网络访问字段 @winston-openai
- #31464 通过 `for-each-ref` 加速审查分支选择器 @charliemarsh-oai
- #31332 CI：参数化 Cargo 目标路径 @anp-oai
- #31421 重构：统一外部身份验证解析 @pakrym-oai
- #31451 测试：将 TestAppServer 调用者迁移到构建器 @anp-oai
- #31274 [codex] 添加外部提供的 Codex 身份验证 @lt-oai
- #31501 跟踪钩子命令执行 @wiltzius-openai
- #31356 CI：在 Windows 2025 上运行 V8 源码构建 @anp-oai
- #31283 核心：支持扩展拥有的轮次项 @owenlin0
- #31570 fs：支持在遍历时修剪隐藏目录 @jif-oai
- #31465 对齐空分支列表消息与搜索 @charliemarsh-oai
- #31586 稳定加密 MAv2 生成请求测试 @jif-oai
- #31585 稳定针对动态技能目录的远程压缩奇偶性 @jif-oai
- #31518 记录插件安装失败子类型 @charlesgong-openai
- #31587 稳定共享发布预算测试 @jif-oai
- #31503 检测由 pnpm 管理的 Codex 安装 @charliemarsh-oai
- #31525 核心：将独立网页搜索迁移到扩展拥有的轮次项 @owenlin0
- #31473 特性(核心)：发出规范审查模式项 @owenlin0
- #31452 测试：移除 TestAppServer 构造函数 @anp-oai
- #31612 在错误信息中四舍五入 MCP 超时持续时间 @jif-oai
- #31138 修复(windows-sandbox)：允许在可写根目录中删除 @fcoury-oai
- #31500 代码模式：默认切换到托管模式 @cconger
- #31494 tui：在用户消息中清理终端控制字符 @etraut-openai
- #31524 杂项(协议)：对生成的项 ID 使用 UUIDv7 @owenlin0
- #31496 当 Apple Git 不可用时回退到 HTTP @fc-oai
- #31578 绑定 exec-server 待处理 RPC @jif-oai
- #29875 [codex] 清理导入会话的备用标题 @stefanstokic-oai
- #31621 tui：在 Ultra 且高多智能体并发时发出警告 @shijie-oai
- #31622 websocket-client：添加感知代理的连接器 @bolinfest
- #31574 [codex] 授权 Windows 沙盒访问主运行时 @abhinav-oai
- #31292 在单个采样请求内复用 MCP 工具快照 @sayan-oai
- #31630 特性(核心)：发出规范钩子提示项 @owenlin0
- #31636 特性：更改 Amazon Bedrock GPT-5.6 显示名称 @celia-oai
- #31629 核心：停止直接发出旧版命令事件 @owenlin0
- #31441 核心：通过系统代理保留 Responses WebSocket @bolinfest
- #31357 CI：通过 Dev Drives 路由构建 IO @anp-oai
- #31461 杂项：移除闲置的 cargo 审计工作流 @anp-oai
- #31614 测试：将 app-server v2 启动迁移到自动环境 @anp-oai
- #31497 [codex] 增加工具架构压缩阈值 @fbauer33
- #31650 代码模式：使所有审批触发提示暂停 @cconger
- #31648 澄清设备码网络钓鱼警告 @etraut-openai
- #31663 测试(app-server)：使用原生发布夹具路径 @fcoury-oai
- #31330 [codex-apps] 从文件负载中省略内部字段 @jacobzhou-oai
- #31480 更新自动审查提示 @olliem-oai
- #21818 更新 models.json @github-actions
- #31427 测试：添加延迟的 exec-server 传输 @anp-oai
- #30278 [codex] 恢复线程时保留审阅者 @viyatb-oai
- #31675 扩展智能体核心所有权 @pakrym-oai
- #31486 [连接器] 刷新 codex_apps /ps/mcp 身份验证 @stevenlee-oai
- #31361 model-provider：通过 HTTP 客户端工厂路由模型发现 @bolinfest
- #30188 特性(发布)：为分页线程发布持久化 TurnItems @owenlin0
- #31596 默认使用图像生成扩展 @won-openai
- #31684 更新 models.json @github-actions
## New Features
- Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488)
- Added a `writes` app-approval mode that allows declared read-only actions while prompting for writes. (#30482)
- MCP tools can now request authentication interactively without an experimental opt-in. (#28772)
- App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274)
- Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503)
- Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621)
## Bug Fixes
- Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319)
- Fixed Code Mode crashes in Intel macOS release binaries. (#30953)
- Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574)
- Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494)
- Long-running app sessions now refresh expired authentication for the hosted `codex_apps` connector. (#31486)
- Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622)
## Documentation
- Device-code login warnings now explain how to recognize and stop phishing attempts. (#31648)
## Chores
- Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#31348)
- Made the `/review` branch picker faster and more reliable in large repositories. (#31464)
- Improved automatic review behavior with clearer instructions and a focused tool set. (#31480)
- Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#31636)
## Changelog
Full Changelog: https://github.com/openai/codex/compare/rust-v0.143.0...rust-v0.144.0
- #30292 Serialize shared MCP OAuth credential stores @stevenlee-oai
- #30488 [codex-cli] Show reset details in redemption picker @jayp-oai
- #31297 feat(core): emit canonical command execution items @owenlin0
- #31298 feat(core): emit canonical dynamic tool call items @owenlin0
- #31369 test(skills): cover plugin namespace loading @anp-oai
- #30953 fix(release): add missing Intel V8 signing entitlement @malsamiri-oai
- #31355 refactor: make ExternalAuth return CodexAuth @lt-oai
- #31352 ci: increase Windows Bazel local test jobs @anp-oai
- #30482 [codex-rs] Add writes app approval mode @zamoshchin-openai
- #31439 Handle bio policy errors in Codex @fc-oai
- #31319 [codex] add connector runtime latency metrics @mzeng-openai
- #31312 Use model catalog approval messages @dylan-hurd-oai
- #31422 test: generalize exec-server fixture @anp-oai
- #28772 [codex] Enable auth elicitation by default @mzeng-openai
- #28745 [login] support hosted success redirects @rafael-jac
- #31316 chore: extract remote compaction request attempts @celia-oai
- #31299 feat(core): emit canonical sub-agent activity items @owenlin0
- #31285 [1/5] [codex] sync managed-layer bundle schema @hefuc-oai
- #31300 feat(core): emit canonical collab tool call items @owenlin0
- #31301 feat(core): emit canonical collab wait items @owenlin0
- #30319 fix: retry rejected previous-model compaction with selected model @celia-oai
- #30879 Handle mixed-case URLs in Windows command safety @charliemarsh-oai
- #31191 Handle completion separators and popup dismissal @charliemarsh-oai
- #31425 test: add TestAppServer builder @anp-oai
- #31342 http-client: expose WebSocket proxy prerequisites @bolinfest
- #31348 perf(skills): resolve plugin namespaces per root @anp-oai
- #31289 Use canonical indexed web access field @winston-openai
- #31464 Speed up review branch picker via `for-each-ref` @charliemarsh-oai
- #31332 ci: parameterize Cargo target paths @anp-oai
- #31421 refactor: unify external auth resolution @pakrym-oai
- #31451 test: migrate TestAppServer callers to builder @anp-oai
- #31274 [codex] Add externally provided Codex auth @lt-oai
- #31501 trace hook command execution @wiltzius-openai
- #31356 ci: run V8 source builds on Windows 2025 @anp-oai
- #31283 core: support extension-owned turn items @owenlin0
- #31570 fs: support pruning hidden directories during walks @jif-oai
- #31465 Align empty branch list message with search @charliemarsh-oai
- #31586 Stabilize encrypted MAv2 spawn request test @jif-oai
- #31585 Stabilize remote compaction parity against dynamic skill catalogs @jif-oai
- #31518 Log plugin install failure subtypes @charlesgong-openai
- #31587 Stabilize shared rollout budget test @jif-oai
- #31503 Detect Codex installs managed by pnpm @charliemarsh-oai
- #31525 core: migrate standalone web search to extension-owned turn items @owenlin0
- #31473 feat(core): emit canonical review mode items @owenlin0
- #31452 test: remove TestAppServer constructors @anp-oai
- #31612 Round MCP timeout durations in error messages @jif-oai
- #31138 fix(windows-sandbox): allow deletion in writable roots @fcoury-oai
- #31500 code-mode: move to hosted mode by default @cconger
- #31494 tui: sanitize terminal controls in user messages @etraut-openai
- #31524 chore(protocol): use UUIDv7 for generated item IDs @owenlin0
- #31496 Fall back to HTTP when Apple Git is unavailable @fc-oai
- #31578 Bound exec-server pending RPCs @jif-oai
- #29875 [codex] Sanitize imported session fallback titles @stefanstokic-oai
- #31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai
- #31622 websocket-client: add proxy-aware connector @bolinfest
- #31574 [codex] Grant Windows sandbox access to primary runtime @abhinav-oai
- #31292 Reuse MCP tool snapshot within a sampling request @sayan-oai
- #31630 feat(core): emit canonical hook prompt items @owenlin0
- #31636 feat: change amazon Bedrock GPT-5.6 display names @celia-oai
- #31629 core: stop emitting legacy command events directly @owenlin0
- #31441 core: preserve Responses WebSockets with system proxy @bolinfest
- #31357 ci: route build IO through Dev Drives @anp-oai
- #31461 chore: remove inert cargo audit workflow @anp-oai
- #31614 test: migrate app-server v2 starts to auto env @anp-oai
- #31497 [codex] increase tool schema compaction threshold @fbauer33
- #31650 code-mode: make all approvals trigger elicitation pause @cconger
- #31648 Clarify device-code phishing warning @etraut-openai
- #31663 test(app-server): use native rollout fixture paths @fcoury-oai
- #31330 [codex-apps] Omit internal fields from file payloads @jacobzhou-oai
- #31480 Update auto review prompting @olliem-oai
- #21818 Update models.json @github-actions
- #31427 test: add delayed exec-server transport @anp-oai
- #30278 [codex] Preserve reviewer when resuming threads @viyatb-oai
- #31675 Expand agent core ownership @pakrym-oai
- #31486 [connectors] Refresh codex_apps /ps/mcp auth @stevenlee-oai
- #31361 model-provider: route model discovery through HTTP client factory @bolinfest
- #30188 feat(rollout): persist TurnItems for paginated thread rollouts @owenlin0
- #31596 Use the image generation extension by default @won-openai
- #31684 Update models.json @github-actions