Codex rust-v0.146.0

## New Features - Name new sessions with `/new` or `/clear`, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) - Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979) - Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251) - Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098) - Enable standalone web search for compatible custom model providers. (#34846) - Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198) ## Bug Fixes - Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239) - Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151) - Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664) - Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, #35021, #34775, #34778, #35365, #35375) - Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, #34624, #35036) - Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, #34738, #34997) ## Documentation - Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669) - Clarify Windows drive-letter canonicalization for `PathUri` values. (#34667) ## Chores - Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, #34508, #34729, #34910) - Sign and notarize bundled macOS helper executables before packaging. (#35264) - Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, #34766, #34825) - Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, #35537) ## Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.145.0...rust-v0.146.0 - #34447 Add a route-aware HTTP client pool @copyberry - #34449 Make external session detection limits configurable @copyberry - #34451 Attribute external agent imports by provider @copyberry - #34463 Support alpha hotfix release versions @copyberry - #34469 Preserve thread settings for goal-first and forked threads @copyberry - #34476 Separate HTTP execution from request logging @copyberry - #34478 Honor `CARGO_HTTP_CAINFO` in managed proxy environments @copyberry - #34479 Re-resolve system proxy routes across redirects @copyberry - #34481 Add route-aware redirect test coverage @copyberry - #34483 Expand route-aware proxy redirect coverage @copyberry - #34490 Route backend requests through the HTTP client factory @copyberry - #34491 Route cloud environment discovery through the HTTP client pool @copyberry - #34495 Honor system proxy settings in the daemon updater @copyberry - #34497 Preserve custom arg0 for sandboxed exec-server processes @copyberry - #34505 Mirror Rust release artifacts to Cloudflare R2 @copyberry - #34506 Respect system proxies during plugin startup sync @copyberry - #34508 Publish release metadata to R2 channels @copyberry - #34509 Honor system proxy settings for remote plugins @copyberry - #34514 Add an optional releases.openai.com installer source @copyberry - #34516 Allow `numer` in codespell checks @copyberry - #34517 Pass empty inherited FDs in the Wine PTY test @copyberry - #34522 Split MCP connection manager into focused modules @copyberry - #34525 Add step-scoped data to extension contributors @copyberry - #34533 Centralize compacted rollout item construction @copyberry - #34540 Detach Git metadata commands from stdin @copyberry - #34544 Size Noise handshake buffers to their messages @copyberry - #34547 Add reciprocal rank fusion skill selection @copyberry - #34550 Test thread-scoped MCP refresh behavior @copyberry - #34551 Simplify TUI restoration for the external editor @copyberry - #34552 Remove unused RtOptions setters @copyberry - #34553 Remove the unused TUI shutdown app command @copyberry - #34558 Remove obsolete ignored tests @copyberry - #34559 Add backend client support for Codex user settings @copyberry - #34561 Extract MCP binding clients from the connection manager @copyberry - #34562 Record rollout boundaries for materialized turns @copyberry - #34563 Page through inherited thread history @copyberry - #34566 Protect fork history references during rollout cleanup @copyberry - #34570 Highlight CUDA files as C++ in the TUI @copyberry - #34573 Accept `forceRefetch` in plugin list requests @copyberry - #34578 Gate the TUI suspend restore helper on Unix @copyberry - #34581 Add routing-card lexical skill selection @copyberry - #34588 Bind MCP calls to captured catalog revisions @copyberry - #34590 Add keyed shell environment policy filters @copyberry - #34597 Enforce exact values from managed config requirements @copyberry - #34598 Skip missing paths in filesystem sandbox entries @copyberry - #34601 Sanitize skill names in injection metrics @copyberry - #34603 Allow explicitly permitted loopback proxy targets @copyberry - #34605 Allow naming sessions with `/new` and `/clear` @copyberry - #34611 Add compatibility policies for skill catalog rendering @copyberry - #34612 Detach non-interactive subprocesses from stdin @copyberry - #34613 Route Windows sandbox proxy traffic by restricting SID @copyberry - #34615 Initialize missing-path behavior in exec-server sandbox test @copyberry - #34620 Add exec-server network policy callback types @copyberry - #34621 Load paginated model context across rollout lineages @copyberry - #34622 Increase the auto-review model override test timeout @copyberry - #34624 Terminate Windows process trees with job objects @copyberry - #34625 Fix Windows TUI navigation key handling @copyberry - #34626 Scale skill metadata budgets with model context windows @copyberry - #34629 Harden Windows elevated sandbox startup @copyberry - #34630 Add a policy-aware HTTP client builder @copyberry - #34631 Migrate agent identity to the shared HTTP client @copyberry - #34636 Keep the TUI open when starting a turn fails @copyberry - #34637 Attribute review findings to repository rules @copyberry - #34640 Update Windows process-tree tests for inherited FDs @copyberry - #34641 Harden managed proxy setup for sandboxed executions @copyberry - #34643 Migrate login HTTP construction to `HttpClient` @copyberry - #34644 Verify Git plugin SHA checkouts @copyberry - #34645 Always assign response item IDs @copyberry - #34649 Propagate resolved proxy policy through auth routing @copyberry - #34650 Require auth managers to receive routing configuration @copyberry - #34651 Migrate core test support to the shared HTTP client @copyberry - #34654 Render turn diffs for foreign environment paths @copyberry - #34655 Honor configured proxy routes for auth refreshes @copyberry - #34664 Preserve approvals reviewer when forking threads @copyberry - #34667 Document `PathUri` drive letter canonicalization @copyberry - #34669 Expand codex-http-client usage guidance @copyberry - #34678 Route LM Studio requests through the shared HTTP client @copyberry - #34681 Add session headers to realtime conversation starts @copyberry - #34687 Configure Codex Auto Review model metadata @copyberry - #34708 Rename the MCP connection manager to `McpConnectionSet` @copyberry - #34713 Order unified exec lifecycle events reliably @copyberry - #34728 Skip Git enrichment for prewarm and Guardian turns @copyberry - #34729 Publish stable installer aliases to R2 @copyberry - #34732 Preserve skill catalog entries under metadata pressure @copyberry - #34733 Make MCP resource clients follow the latest runtime @copyberry - #34734 Remove step-scoped data from extension contributors @copyberry - #34738 Drop skill descriptions before omitting catalog entries @copyberry - #34744 Update skills budget tests for extension API changes @copyberry - #34746 Match core skill ordering in extension catalogs @copyberry - #34747 Register the MCP 2026-07-28 feature flag @copyberry - #34761 Reduce app-server JSON serialization overhead @copyberry - #34763 Retry websocket requests when the previous response is missing @copyberry - #34766 Reduce typed app-server request serialization overhead @copyberry - #34769 Add the git attribution extension @copyberry - #34770 Enable exec-server network policy callbacks @copyberry - #34771 Size unified mention popups to visible results @copyberry - #34772 Normalize whitespace-only lines in agent messages @copyberry - #34775 Clamp session headers to narrow terminal widths @copyberry - #34777 Include the final agent message in turn completion summaries @copyberry - #34778 Coalesce wrapped OSC 8 hyperlinks in the TUI terminal @copyberry - #34779 Use the live parent history mode when forking agents @copyberry - #34781 Upgrade Bazel Rust and LLVM dependencies @copyberry - #34784 Reject dynamic environments named `local` @copyberry - #34785 Report skill catalog truncation during rendering @copyberry - #34786 Simplify app-server integration test setup @copyberry - #34789 Avoid unnecessary post-sampling token estimates @copyberry - #34795 Remove obsolete step store from git attribution tests @copyberry - #34796 Skip syntax highlighting for lines over 4 KiB @copyberry - #34797 Suppress omission notices in core-compatible skill catalogs @copyberry - #34806 Use path URIs in shell approval keys @copyberry - #34808 Centralize SQLite connection configuration @copyberry - #34811 Fix network access rendering in sandbox prompts @copyberry - #34814 Consolidate thread startup around `StartThreadOptions` @copyberry - #34816 Support configurable realtime BEM channel prefixes @copyberry - #34819 Enable git attribution across Codex entry points @copyberry - #34823 Run code-mode tests in non-Windows Bazel CI @copyberry - #34824 Normalize Guardian review cwd reuse keys @copyberry - #34825 Reduce cloning when building Responses requests @copyberry - #34827 Remove Windows Bazel lint toolchain overrides @copyberry - #34831 Flush analytics before in-process app server shutdown @copyberry - #34835 Track compaction time in turn profiles @copyberry - #34839 Preserve user input when MCP startup is interrupted @copyberry - #34840 Add persisted thread pinning to the app server @copyberry - #34844 Remove first-party type from app metadata @copyberry - #34845 Track multi-agent mode in world state @copyberry - #34846 Allow custom providers to opt into standalone web search @copyberry - #34847 Use Guardian model limits for review sessions @copyberry - #34849 Cache remote plugin catalogs by scope @copyberry - #34850 Disable image generation for Free-plan accounts @copyberry - #34851 Use batch metadata for plugin app summaries @copyberry - #34852 Wake sleeping threads for queued agent mail @copyberry - #34877 Wait for local plugin cache refreshes in `plugin/list` @copyberry - #34883 Set a default user agent for MCP HTTP requests @copyberry - #34887 Allow disabling the multi-agent wait tool @copyberry - #34910 Prefer releases.openai.com in standalone installers @copyberry - #34930 Centralize thread MCP state in `McpRuntime` @copyberry - #34931 Use the API plugin marketplace for Amazon Bedrock @copyberry - #34940 Keep session defaults static during config batch writes @copyberry - #34952 Reuse MCP connections across runtime refreshes @copyberry - #34957 Replace closed MCP connections during reconciliation @copyberry - #34959 Handle @ in local marketplace paths @copyberry - #34962 Move MCP connection helpers into the test module @copyberry - #34969 Keep the sleep tool outside code mode @copyberry - #34978 Honor disabled redirects in route-aware HTTP clients @copyberry - #34979 Infer the bundled Claude Code plugin marketplace @copyberry - #34981 Record externally completed agent config imports @copyberry - #34986 Enforce single-writer ownership for paginated threads @copyberry - #34989 Preserve timestamps when importing external agent sessions @copyberry - #34991 Allow omitting MCP tool prefixes per server @copyberry - #34994 Honor the configured SQLite home across state consumers @copyberry - #34995 Initialize execution environments with the final HTTP policy @copyberry - #34996 Separate Codex error details from retry metadata @copyberry - #34997 Warn when skill catalogs exceed their context budget @copyberry - #35000 Make TUI turn interrupts nonblocking @copyberry - #35011 Keep side conversations open when switching threads @copyberry - #35012 Expose remote skill icon URLs through app server @copyberry - #35013 Support incremental replay of updated thread items @copyberry - #35015 Align installed app duration metrics with the legacy baseline @copyberry - #35016 Add trusted plugin script attribution @copyberry - #35020 Attribute command executions to trusted plugin scripts @copyberry - #35021 Adapt keyboard event reporting to the terminal @copyberry - #35023 Route exec-server HTTP through configured proxy policy @copyberry - #35028 Preserve refreshed Apps tools across MCP runtime updates @copyberry - #35029 Preserve plugin attribution across command approvals @copyberry - #35031 Enforce writer ownership for thread archive and deletion @copyberry - #35033 Expose Browser Use requirements through the app server @copyberry - #35034 Route environment registry requests through the shared HTTP client @copyberry - #35036 Preserve Windows sandbox proxy settings in guardian sessions @copyberry - #35048 Track app/read request duration @copyberry - #35049 Register the Guardian V2 feature flag @copyberry - #35054 Allow disabling the update_plan tool @copyberry - #35056 Route exec-server WebSockets through configured proxies @copyberry - #35059 Decouple exec-server HTTP from reqwest types @copyberry - #35063 Track deferred tool namespaces in world state @copyberry - #35065 Avoid duplicating deferred sources in tool search @copyberry - #35067 Fix Bazel test configuration for platform-specific data @copyberry - #35078 Add WebSocket transport to the code-mode host @copyberry - #35098 Support remote code-mode hosts in app-server @copyberry - #35105 Support Agent Plugins manifests @copyberry - #35106 Allow hosts to customize `wait_for_environment` descriptions @copyberry - #35144 Prewarm MCP runtime updates in the background @copyberry - #35146 Refresh MCP runtimes when session auth changes @copyberry - #35151 Reconnect MCP servers on explicit refresh @copyberry - #35164 Encapsulate MCP refresh coordination @copyberry - #35168 Route extension warnings to app-server threads @copyberry - #35172 Compact host skill paths under metadata pressure @copyberry - #35175 Wait for reloaded worker completion in the resume test @copyberry - #35184 Expose executor skills through skill tools @copyberry - #35194 Preserve output from hooks that exit before reading stdin @copyberry - #35196 Make the Apps recovery exposure test deterministic @copyberry - #35198 Enable resource reads for explicit executor skills @copyberry - #35204 Refresh MCP runtimes across thread startup @copyberry - #35205 Use current MCP authority for elicitation reviews @copyberry - #35213 Refresh managed MCP requirements for active threads @copyberry - #35216 Refresh MCP config independently across threads @copyberry - #35220 Support paginated thread forks @copyberry - #35221 Avoid persisting non-local threads for hook transcripts @copyberry - #35238 Support the ent26 enterprise plan @copyberry - #35239 Route MCP auth discovery through runtime HTTP clients @copyberry - #35251 Support ephemeral forks of paginated threads @copyberry - #35254 Expose workspace plugin publish capability @copyberry - #35261 Propagate remote plugin IDs to skill metadata @copyberry - #35262 Track remote plugin IDs in skill invocation analytics @copyberry - #35264 Sign bundled macOS helper binaries @copyberry - #35266 Allow disabling the in-process code-mode host fallback @copyberry - #35267 Harden network approval cancellation and concurrency @copyberry - #35271 Include code-mode tool names in Responses Lite metadata @copyberry - #35275 Trace remote exec-server connection setup @copyberry - #35280 Skip plugin MCP filtering when no allowlists are configured @copyberry - #35359 Handle exec-server network policy requests in the client @copyberry - #35363 Include item start times in completion events @copyberry - #35364 Bound Code Mode metadata compatibility headers @copyberry - #35365 Keep unified mention results fresh @copyberry - #35375 Make the keymap action menu responsive @copyberry - #35408 Ignore generated system skills in the skills watcher @copyberry - #35414 Raise the MCP server recursion limit @copyberry - #35523 Shut down the in-process outbound router explicitly @copyberry - #35524 Preserve terminal turn errors in replayed history @copyberry - #35525 Skip inactive TUI threads without pending user interaction @copyberry - #35530 Track model and personality in world state @copyberry - #35537 Add managed policy for in-app updates @copyberry