• #26179 nit: small prompt update for MAv2 • #26175 feat: guard git enrichment • #26047 Fix multiline paste in /goal edit • #25700 core: stop threading SandboxPolicy through exec • #25925 [codex] Copy user Bazel settings into Codex worktrees • #25887 Preserve remote plugin default prompts • #25944 Expose local image paths to models • #25469 [profile-switcher][rust] -- [1/2] Add app-server account session protocol • #26075 Fix forked thread name inheritance • #25960 Restore Windows coverage for code-mode image generation exposure • #26254 feat: catalog multi-agent v2 config • #26251 Rewrite oversized tool outputs during remote compaction • #26074 Use Windows setup marker as completion signal • #26002 log plugin MCP server names • #25623 fix(tui): add reasoning effort fallback shortcuts • #25638 feat(tui): add /app desktop handoff • #26189 cli: add package path from install context • #25946 [codex-analytics] report compaction request token counts • #26367 chore: calm down • #26147 Gate automatic idle turns in Plan mode • #26172 Bridge host-loaded skills into the skills extension • #26265 Optimize unbounded byte scans with memchr • #26396 Reduce SQLite contention from OpenTelemetry SDK debug logs • #26272 Load plugin hooks without other plugin capabilities • #26313 Simplify Codex CLI README • #25947 Add saved image path hint to standalone image generation • #26291 Bound external agent session detection work • #26417 Expose configured marketplace source in plugin list JSON • #26436 app-server: support -c config overrides • #26435 external-agent-migration: avoid mixed MCP transport configs • #26248 [codex-analytics] emit forked thread id on initialization • #26320 core: allow excluding tool namespaces from code mode • #26205 Route AGENTS.md loading through environment filesystems • #26444 [codex] Support model-defined reasoning efforts • #26446 [codex] Use model-advertised reasoning effort order • #26465 [codex] Preserve logical paths during AGENTS.md discovery • #26453 fix(app-server): expose remote MCP servers in plugin read • #26317 [codex] Expose unavailable app templates in plugin detail • #26471 Improve Windows sandbox setup refresh diagnostics • #26431 Pull plugin service less frequently • #25955 [codex] Emit sandbox outcome telemetry event • #26487 [codex] Add use_responses_lite 'override' logic • #26482 fix(rmcp): refresh expired OAuth tokens before startup • #26256 [codex] Keep Bazel startup options stable across commands • #26499 core: derive exec policy filesystem policy from profile • #26215 feat(remote-control): allow pairing while disabled • #26480 [codex] Add environment shell info • #26210 Encrypt multi-agent v2 message payloads • #26566 nit: doc • #25710 [codex] Forward turn moderation metadata through app-server • #26599 [codex] Keep v1 spawn metadata visible • #26610 refactor: split agent control modules • #25344 feat(app-server): expose account token usage [1 of 2] • #26553 [codex] Fix long proxy socket paths • #26537 Surface TUI config write error causes • #26500 Open Windows app workspaces via deep link • #26551 Fix `/goal` usage text for control commands • #26554 Render code comment directives in TUI replay • #26623 feat: reload v2 agents on delivery • #26532 Require absolute cwd in thread settings • #26625 [codex] Allow socketpair in proxy-routed Linux sandbox • #26538 [codex] Add /usr/bin/bash shell fallback • #26449 feat(remote-control): add pairing status transport • #26433 Make turn diff tracker multi-env aware • #26636 fix(tui): avoid doubled blank rows while streaming • #26450 feat(app-server): add remote control pairing status RPC • #26547 [1 of 2] Align goal extension with core behavior • #26181 fix(tui): Windows composer background • #26457 fix(tui): restore cancelled prompt cursor at end • #26307 [codex] Respect Windows sandbox backend in exec policy • #26484 [codex] Add turn profiling analytics • #26552 Make runtime workspace roots absolute in app-server API • #26462 Use state DB first for `re...

• feat(tui): allow function keys through f24 in keymaps • Add config bundle transport types • Compose requirements layers • Add cloud-managed config layer support • Set multi-agent v2 dogfood defaults • Add goal extension idle continuation • Use templates for goal steering prompts • Remove Plan-mode gate from idle turn injection • Add goal extension GoalApi • Read compressed rollouts and materialize before append • feat(tui): restore output-free cancelled prompts • Preserve auto-review approval policy in codex exec • Allow paste in searchable selection menus • Use deep links for macOS codex app paths • Reset slash popup selection when filter changes • Add reasoning-only status surface item • Preserve renamed thread titles during reconciliation • Compress cold local rollouts • Disable SQLite intrinsics for Windows x64 releases • Inherit raw events for spawned child listeners • Use git CLI for release Cargo fetches • Parallelize cold rollout compression • exec-server: add environment path refs • Rename multi-agent v2 assign_task to followup_task • Preserve plugin app manifest order • Make justfile recipes Windows-aware • Consolidate shared prompts in codex-prompts • Throttle repeated rollout compression runs • Check root Python script formatting in CI • auto-review model override • exec-server: canonicalize bound filesystem paths • deflake zsh-fork approval test • gate unified exec zsh fork composition • hide shell override for zsh fork unified exec • Add rollout compression counters • document out-of-line test module convention • Add rollout compression histograms • Generalize deferred nested tool guidance • Add Python version compatibility guidance • Deduplicate installed local and remote curated plugins • enable parallel standalone web search calls • clarify footer shortcut overlay hints • Publish release symbol artifacts • Reject directory rollout paths for pathless side chats • Wire managed MITM CA trust into child env • Handle invalid plugin skills manifest field • feat(remote-control): add pairing start • Add comprehensive root formatting check • Move code review rules into AGENTS • feat: show enterprise monthly credit limits in status • Add plugin list JSON output • Cache remote plugin catalog for suggestions • Move plugin discoverable logic into core-plugins • Validate plugin skill base names • reuse compressed rollout search snippets • Add multi-agent runtime metadata types • Persist multi-agent runtime metadata • Resolve per-thread multi-agent runtime • session: keep startup prewarm aligned with resolved multi-agent runtime • Test remote multi-agent runtime selector override • Test runtime selector before first turn • Reduce stack pressure in session startup and config rebuilds • Run Codex async main on a sized stack • Use git CLI for Cargo fetches across Rust workflows • Add connector-level Guardian reviewer overrides • Skip startup prewarm when websockets are disabled • Route Bazel CI through shared BuildBuddy remote config wrapper • derive built-in permission profiles from raw policies • Revert shared BuildBuddy Bazel wrapper • Key request-permission grants by environment • Track CodexErr details in turn analytics • Add environmentId to request_permissions • Route standalone image generation through host finalization md • Fix Windows release PDB staging • Propagate permission approval environment id • Pin Python SDK to glibc-compatible runtime • Fix Windows running thread resume path normalization • Populate workspace kind on Codex turn events • Switch runtime to cloud config bundle • stop passing legacy SandboxPolicy to guardian reviews • Split cloud config bundle service modules • Keep hosted tools visible in code-only mode • Add remote request permissions integration coverage • remove dead profile sandbox fallback • Expose standalone image generation in code mode • Publish Python runtime wheels with Python SDK releases • add skills extension scaffold • Fix Windows BuildBuddy Bazel wrapper execution • express ...

Full changelog: • fix(linux-sandbox): preserve shell cleanup on interruption • feat(tui): add OSC 8 web links to rich content • feat(tui): render cramped markdown tables as key-value records • Allow API-key auth for remote exec-server registration • Update rmcp to 1.7.0 • Fix hyperlink-aware key-value table rendering • Rename Python SDK AppServerConfig to CodexConfig • Remove redundant SQLite dynamic tool storage • Add independent beta release for the Python SDK • Prepare Python SDK beta documentation and package metadata • Treat refresh_token_reused 400s as relogin-required • Simplify Python SDK install guidance • Remove Python SDK language classifiers • Remove Python SDK beta warning note • Stage Python SDK beta versions from release tags • Move memories root setup out of core config • Stabilize Guardian client cache key handling • Export Guardian prompt cache key helper • Add Guardian review prompt cache key • Assert Guardian prompt cache key reuse • Thread Guardian cache key through session • Use stable Guardian prompt cache keys • Fix Guardian argument comment lint • Fix memories namespace for Responses API tools • Add Guardian review metrics • Refresh near-expiry ChatGPT access tokens before requests • Add thread start contributor facts • Add turn error lifecycle contributor • Store pending response items directly • Update OpenAI Docs skill • Add app-server startup benchmark crate • Gate goal tools by thread eligibility • Remove libubsan CI workaround • add TurnItemEmitter to tool calls • feat(app-server): include turns page on thread resume • Expose MCP server info as part of server status • Reap stale multi-agent slots • Fix extension turn item emitter test event ordering • Support ui visibility meta for tools • add GPT-5.5 to the Amazon Bedrock catalog • TUI: Unified mentions tweaks polish mentions rendering • Revert "Add app-server startup benchmark crate" • Wire task completion into thread-idle lifecycle • Add feature-gated standalone image generation extension • Move Bazel Windows jobs onto codex-runners • Add `codex app-server --stdio` alias • fix(tui): prevent repository-configured code execution in /diff • Handle PowerShell UTF-8 setup failures • Remove Bedrock OSS models from catalog • prepend zsh fork bin dir to PATH • fix: cancel Windows sandbox on network denial • fix(exec-server): reject websocket requests with Origin headers • Add user input client ids • Surface filesystem permission profiles in prompt context • pass workspace roots to runner • fix capture cancellation test roots • Tighten hook output event schemas • feat(app-server): migrate remote control to server tokens • fix(config): use deny for Unix socket permissions • Avoid PowerShell safety parsing off Windows • Add runtime extra skill roots API • Seed prompt history from resumed messages • fix: preserve deny-read sandboxing for safe commands • Fix fs/watch debounce batching • Use internal model context fragments for goal steering • Use inject_if_running for active goal steering • Drop the stale debug-client manifest • Remove the generated debug-client README • Delete debug-client app-server process plumbing • Retire debug-client interactive command parsing • Remove the debug-client CLI entrypoint • Delete debug-client JSONL output helper • Remove debug-client server event reader • Drop debug-client prompt state tracking • fix: main • Improve built-in tool schema docs • Handle goal usage limits from turn errors • Remove stale rollout TODO tests • Render multiline hook output in TUI • Add model tool mode selector • Show activity for standalone web search calls • Move config document helpers into their own module • Add focused diagnostics for MCP HTTP send failures • Wait for MCP readiness in core integration tests • Route extension image generation through the native image completion pipeline • Add Windows sandbox provisioning setup command • Align TUI permissions labels with app • Add `/archive` slash command • Use session wording in `/renam...

Full changelog: • fix(remote-control): cap reconnect backoff • package: include zsh fork in Codex package • Default function tools into tool hooks • package: add x64 macOS codex-zsh artifact • code-mode: merge stored values by key • fix: plugin bundle archive handling for upload and install • feat(doctor): add environment diagnostics • Report app-server version in codex doctor • tui: label compact rate-limit percentages • Show remote connection details in /status • Respect hook trust bypass during TUI startup • TUI config cleanup: oss_provider • TUI config cleanup: trusted projects • TUI config cleanup: MCP inventory • Add doctor thread inventory audit • fix(tui): improve markdown table column allocation • fix(tui): improve multiline markdown list readability • fix(tui): prevent macos stderr from corrupting composer • fix(process-hardening): preserve macos malloc diagnostics • Log rollout writer OS errors • chore: stop consuming legacy config profiles • centralize Responses retry policy • goal shift • chore: drop orphaned codex memories MCP crate • chore: move memory prompt builder into extension • Add ad-hoc memory note tool • Wire metrics client into memories extension • fix: drop flake • Add memory tool call metrics to memories extension • Wire app-server extension event sink • Use thread config for TUI MCP inventory • Make active turn task singular • Move MCP tool naming mode into manager • tui: include exec sessions in resume list • feat: gate dedicated memories tools in config • feat: add manual and remote_v2 tags to compaction metric • test: clean up apply_patch allow-session artifact • Remove reserved namespaces dedup • Move slash input logic out of chat composer • Add goal extension telemetry parity • fix(tui): avoid modifyOtherKeys for unknown tmux formats • fix: restore goal accounting after thread resume • Move memory state to a dedicated SQLite DB • standalone websearch extension • fix(tui): keep raw output above composer in zellij • tui: keep inaccessible apps out of mentions • Add experimental turn additional context • fix(remote-control): surface websocket task stalls • Respect resume cwd overrides for idle cached threads • Add forked_from_thread_id turn metadata • make direct only allowed caller for standalone websearch • Clarify view_image tool description • TUI config cleanup: plugin mentions • Avoid repeated marketplace upgrades for alternate layouts • windows-sandbox: remove SandboxPolicy runner plumbing • remove plain image wrapper spans • Attach Windows sandbox log to feedback reports • Restore legacy image detail values • add grouped session id to runtime events • Remove obsolete goal continuation turn marker • fix: dont compact standalone websearch schema • fix(core): instrument stalled tool-listing handoff • Uprev Rust toolchain pins to 1.95.0 • fix: add noninteractive install script mode • Allow runtime enablement for remote plugins • fix(auto-review) skip legacy notify for auto review threads • Revert "Add Bedrock Mantle GovCloud region" • feat: handle goal usage limits in goal extension • Fix guardian review test user input • feat: add thread idle lifecycle hook • Drop startup context when truncating forked rollouts • TUI config cleanup: plugin marketplace • fix(tui): complete vim word-end and line-end behavior • Bump SQLx to pick up newer bundled SQLite • fix: run standalone updates noninteractively • make vercel webhook url an env secret • fix: Preserve draft text when completing argument-taking slash commands • Remove stale composer narrative doc references • add compaction metadata to turn headers • Add friendly Python SDK sandbox presets • feat(tui): add vim text object bindings • feat(tui): make turn interruption keybind configurable • feat(tui): render markdown tables in app style Full release notes: github.com/openai/codex/rele…