Codex 0.164.0

[Changelog] #55388 Mark `transcript_v2` as removed @etraut-openai

[Changelog] #54175 Retire worktree and voice feature flags @bc-openai

[Changelog] #54445 Remove obsolete protected-path monitoring from the Linux sandbox @viyatb-oai

[New Features] Save reusable prompts and slash commands in ten numbered `/presets` slots, with a keyboard menu for quick access. (#54380, #54381)

[New Features] Set model, reasoning effort, speed, and permission profiles directly with inline `/model` and `/permissions` arguments. (#54378, #54383)

[New Features] Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)

[New Features] Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)

[New Features] Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)

[New Features] The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)

[Changelog] #53784 Forward client voice session IDs in realtime requests @chrisdong-oai

[Changelog] #53797 Refresh Guardian reviews when review context changes @jif-oai

[Changelog] #53800 Wire background compaction into the turn lifecycle @rka-oai

[Changelog] #53811 Support daemon installation from Windows WinGet packages @etraut-openai

[Changelog] #53831 Track content provenance through prompt assembly and compaction @tz-openai

[Changelog] #53872 Refresh model instructions in incremental-tool context windows @rhan-oai

[Changelog] #53895 Resume unloaded subagent threads when selected in the TUI @etraut-openai

[Changelog] #53990 Keep host MCP and plugin configuration local with remote environments @jif-oai

[Changelog] #54070 Expose gateway authentication as a reusable OAuth session API @smurching-oai

[Changelog] #54114 Report terminal completion states and blocking reasons @cconger

[Changelog] #54119 Allow stdin review under active grants with sandbox prompts disabled @tepman-oai

[Changelog] #54135 Allow large file writes over direct exec-server WebSockets @ostepanian

[Changelog] #54263 Require fresh Guardian approval for escalated tool retries @jif-oai

[Changelog] #54309 Enable credential masking for remote exec-server commands @viyatb-oai

[Changelog] #54346 Add scoped executor credential auth for remote exec-server @viyatb-oai

[Changelog] #54378 Support inline model, reasoning, and speed selection in `/model` @fcoury-oai

[Changelog] #54380 Add `/presets` for reusable prompts and slash commands @fcoury-oai

[Changelog] #54383 Support inline permission profile selection with `/permissions` @fcoury-oai

[Changelog] #54385 Allow saving current permission settings as presets @fcoury-oai

[Changelog] #54619 Bind plugin hook approval to plugin contents @jif-oai

[Changelog] #54654 Allow dynamic tool calls to execute in parallel @sdcoffey

[Changelog] #54656 Honor MCP tool-list changes within a turn @jif-oai

[Changelog] #54674 Add an opt-in tool for copying files between environments @anp-oai

[Changelog] #54776 Support typed content in contextual prompt fragments @pakrym-oai

[Changelog] #54930 Add negotiated zstd compression to app-server WebSockets @thorvald-oai

[Changelog] #54961 Allow agent messages to wake idle root sessions behind a feature flag @alishobeiri-oai

[Changelog] #55144 Add observation-only model request lifecycle hooks @vivi

[Changelog] #55263 Start dormant MCP servers for hook calls @charliemarsh-oai

[Changelog] #55320 Enable GitHub Actions OIDC authentication in the Responses API proxy @ee-oai

[Changelog] #55327 Add configured thread environment inheritance for subagents @jif-oai

[Changelog] #55334 Enable enterprise-managed authorization for MCP connections @jif-oai

[Changelog] #55375 Add configured thread environment inheritance for subagents @jif-oai

[Changelog] #55378 Migrate the Windows MXC sandbox to `mxc-sdk` @johnl-oai

[Changelog] #55381 Manage TUI backend sessions independently @bc-openai

[Changelog] #55387 Add support for Academic Researchers plans @etraut-openai

[Changelog] #55397 Record OAuth provenance and login identity for account tokens @jif-oai

[Changelog] #55398 Add wire types for runtime agent registration @cooper-oai

[Changelog] #55402 Add ephemeral runtime registration and signed assertions @cooper-oai

[Changelog] #55411 Render async question prompts as Markdown in the TUI @bc-openai

[Changelog] #55413 Share runtime authentication across requests and credential refreshes @cooper-oai

[Changelog] #55442 Check daemon feature overrides and prompt for mismatch recovery @etraut-openai

[Changelog] #55456 Support Windows registry overrides for `requirements.toml` @johnl-oai

[Changelog] #55548 Preserve parent history by default in full agent forks @jif-oai

[Changelog] #55587 Allow callers to control prompt cache keys independently of session IDs @rm-openai

[Changelog] #55644 Make pending injections interrupt agent waits and sleep @jif-oai

[Changelog] #55657 Add lifecycle hooks for inter-agent messages @euroelessar

[Changelog] #55680 Recheck account login ownership for enterprise MCP @jif-oai

[Changelog] #55940 Add local diagnostic ZIP exports to the app server @viktor-oai

[Changelog] #56001 Support confidential OAuth clients for enterprise-managed MCP auth @jif-oai

[Changelog] #56033 Enable the Bedrock setup wizard by default @alexsong-oai

[Changelog] #56036 Add request-scoped OAuth credentials and session lifecycle APIs @smurching-oai

[Changelog] #56037 Add a channel-backed cloud app-server client @bc-openai

[Changelog] #56055 Require managed configuration from the configured server @smurching-oai

[Changelog] #53725 Render Markdown web links as labels in Rex @bc-openai

[Changelog] #53733 Default Guardian v2 async classification to conversation mode @felixxia-oai

[Changelog] #53736 Acquire and cache opt-in executor capability inventories via V2 @TAFOYA-OAI

[Changelog] #53747 Prefer remote Visualize installs over the bundled plugin @philipp-oai

[Changelog] #53753 Extend copy-on-select to composer text @fcoury-oai

[Changelog] #53754 Support Command/Super shortcuts in the TUI keymap @fcoury-oai

[Changelog] #53763 Enrich V2 capability discovery with resolved plugin and skill metadata @TAFOYA-OAI

[Changelog] #53805 Add safe diagnostics to workspace routing configuration errors @etraut-openai

[Changelog] #53853 Reuse staged file digests when preparing daemon installs @charliemarsh-oai

[Changelog] #53859 Record bucketed terminal sizes in TUI telemetry @imac-oai

[Changelog] #53940 Bound rollout input for memory extraction @jif-oai

[Changelog] #54003 Include compressed rollouts in doctor storage statistics @jif-oai

[Changelog] #54032 Bound concurrent Git diffs for untracked files @yuzhu-oai

[Changelog] #54033 Extend memory extension resource retention to 14 days @josh-oai

[Changelog] #54039 Return async Guardian approvals before review cleanup finishes @jif-oai

[Changelog] #54044 Keep fork lineage ahead of paginated transcript history @fcoury-oai

[Changelog] #54048 Defer folder trust checks until starting a task from agents overview @etraut-openai

[Changelog] #54050 Scope TUI skill refreshes and workspace commands to explicit directories @etraut-openai

[Changelog] #54053 Add Responses API client metadata patches for turn start and steer @marksteinbrick-oai

[Changelog] #54057 Distinguish unsupported evidence in Decisions comparison metrics @swastik-oai

[Changelog] #54058 Forward turn metadata to image generation and edit requests @duc-openai

[Changelog] #54059 Support store-owned preparation when resuming threads @owenlin0

[Changelog] #54060 Limit unarchive scans to the requested thread's archived rollouts @bz-openai

[Changelog] #54096 Add Bazel targets for on-demand schemas and Python SDK generation @dkovalenko-oai

[Changelog] #54097 Show Daybreak notices after the session header @charliemarsh-oai

[Changelog] #54113 Embed generated app-server schema bundles in Bazel builds @dkovalenko-oai

[Changelog] #54133 Record per-tool incremental update and description size metrics @akira-oai

[Changelog] #54169 Reload the model catalog after account changes @smurching-oai

[Changelog] #54216 Show image previews in the fullscreen transcript @etraut-openai

[Changelog] #54217 Apply syntax theme colors to Markdown prose in the TUI @etraut-openai

[Changelog] #54351 Use the turn index for turn-scoped item pagination @bz-openai

[Changelog] #54379 Add configuration support for TUI input presets @fcoury-oai

[Changelog] #54381 Add a keyboard shortcut menu for presets @fcoury-oai

[Changelog] #54387 Add session-only arguments to `/title` and `/statusline` @fcoury-oai

[Changelog] #54388 Add quick dial presets for terminal title and status line layouts @fcoury-oai

[Changelog] #54398 Store generated image items as attachment references @kchainani-oai

[Changelog] #54401 Run managed daemon processes at background priority on macOS @bc-openai

[Changelog] #54414 Allow root turn suspension with live descendants @miz-openai

[Changelog] #54419 Support line breaks in Mermaid flowchart node labels @etraut-openai

[Changelog] #54420 Record local image inputs on completed image-generation items @mjkaufer-openai

[Changelog] #54421 Treat explicit connections to the verified default daemon as local @etraut-openai

[Changelog] #54424 Add remote plugin metadata to plugin configuration @mzeng-openai

[Changelog] #54432 Support remote credential masking with Zsh shell snapshots @viyatb-oai

[Changelog] #54434 Add rotating stdin credentials for remote exec-server @viyatb-oai

[Changelog] #54475 Use a synchronous mutex for remote metadata request tracking @anp-oai

[Changelog] #54505 Add streaming file replacement to filesystem abstractions @anp-oai

[Changelog] #54589 Preserve evidence message structure in Guardian Decisions requests @swastik-oai

[Changelog] #54590 Capture sender context for `codex_app.create_thread` deliveries @felixxia-oai

[Changelog] #54639 Stream rollout records during thread history materialization @chess-oai

[Changelog] #54653 Prefer resource-specific scopes during MCP OAuth discovery @zamoshchin-openai

[Changelog] #54737 Enable BuildBuddy for voice release builds @anp-oai

[Changelog] #54741 Gate the file-copy extension behind `multi_env_copy_file` @anp-oai

[Changelog] #54742 Render slash command prefixes as composer prompt markers @bc-openai

[Changelog] #54949 Gate app-server WebSocket compression behind a feature flag @thorvald-oai

[Changelog] #55227 Allow plus signs in metric tags @swastik-oai

[Changelog] #55237 Add Guardian review routing and cached score metrics @ioanbudea-OAI

[Changelog] #55244 Batch thread history materialization into SQLite @jif-oai

[Changelog] #55297 Add GitHub Actions OIDC token acquisition to the responses API proxy @ee-oai

[Changelog] #55298 Add renewable federated auth primitives to the Responses API proxy @ee-oai

[Changelog] #55300 Add one-shot app-server startup configuration discovery @acrognale-oai

[Changelog] #55301 Reconcile V2 executor plugins with cloud catalogs @TAFOYA-OAI

[Changelog] #55303 Route skill reads by alias source @TAFOYA-OAI

[Changelog] #55322 Integrate discovery V2 with step-scoped skill catalogs @TAFOYA-OAI

[Changelog] #55330 Expose skill installations and stabilize package aliases @TAFOYA-OAI

[Changelog] #55331 Use step environment snapshots for subagent inheritance @jif-oai

[Changelog] #55339 Add experimental `thread/sample` requests to the app server @liame-oai

[Changelog] #55347 Add Guardian retry metrics and preserve turn attribution @ioanbudea-OAI

[Changelog] #55351 Reduce path storage in the file-search index @charliemarsh-oai

[Changelog] #55365 Import only the continuation of backgrounded Claude sessions @jgrodman-arch

[Changelog] #55366 Support catalog templates for approved command prefixes @dylan-hurd-oai

[Changelog] #55368 Enable incremental tools by default for Responses Lite @akira-oai

[Changelog] #55394 Use thread connections for enterprise MCP status listings @jif-oai

[Changelog] #55396 Prefetch sibling rollout paths when reading history pages @bz-openai

[Changelog] #55401 Defer environment disconnect notifications until recovery fails @richardopenai

[Changelog] #55407 Clarify API key login and status messages @fcoury-oai

[Changelog] #55441 Add cancellation for experimental thread samples @liame-oai

[Changelog] #55463 Add optional MCP disablement for prediction forks and samples @liame-oai

[Changelog] #55498 Add correlated diagnostics for Noise relay handshakes @virajrai-oai

[Changelog] #55545 Improve diagnostics for compressed rollout read failures @jif-oai

[Changelog] #55546 Add scoped leases for persisted account OAuth grants @jif-oai

[Changelog] #55591 Measure Guardian approval blocking time per turn @ioanbudea-OAI

[Changelog] #55596 Rank `$` mentions by recent selection frequency @bc-openai

[Changelog] #55627 Reserve a sibling rollout candidate slot for the first ancestor @bz-openai

[Changelog] #55631 Add frozen cloud skill snapshots to the app server @fc-oai

[Changelog] #55633 Treat code-mode collaboration messages as plaintext @hlevy-openai

[Changelog] #55635 Enable Decisions comparisons for Guardian V2 conversation mode @swastik-oai

[Changelog] #55636 Add runtime assertion authentication modes and an auth provider @cooper-oai

[Changelog] #55652 Search compressed rollouts concurrently @ethernetdan-openai

[Changelog] #55653 Track code-mode cell lifecycle and result buffering time @euroelessar

[Changelog] #55667 Enable app routing for remote curated Agent Plugins @tsarlandie-oai

[Changelog] #55685 Add account credential support to EMA token exchange helpers @jif-oai

[Changelog] #55698 Reuse Codex account grants for enterprise MCP authentication @jif-oai

[Changelog] #55701 Enable MCP OAuth refresh coordination by default @mzeng-openai

[Changelog] #55719 Allow unified exec to fall back when credential masking is unavailable @viyatb-oai

[Changelog] #55724 Share prepared MCP tool definitions across sessions @charliemarsh-oai

[Changelog] #55804 Add a critical-path utility for exclusive duration attribution @taohong339

[Changelog] #55965 Add managed Desktop workspace storage requirements @acrognale-oai

[Changelog] #55971 Add storage namespaces for local message boards @felixxia-oai

[Changelog] #55973 Allow consumers to select message-board tools @felixxia-oai

[Changelog] #55975 Add an experimental command to migrate NFS databases to DELETE mode @dkovalenko-oai

[Changelog] #55994 Add a Windows proxy authentication tunnel helper @efrazer-oai

[Changelog] #56008 Add a critical-path timing recorder for direct tool calls @taohong339

[Changelog] #56020 Allow thread sampling after failed or interrupted turns @liame-oai

[Changelog] #56023 Group Bedrock API key entry with other AWS sign-in methods @alexsong-oai

[Changelog] #56024 Limit decoded HTTP/3 response headers in the TCP tunnel @richardopenai

[Changelog] #56031 Support client Responses API metadata in `thread/sample` @liame-oai

[Changelog] #56044 Enable executor cleanup hooks with V2 capability discovery @TAFOYA-OAI

[Changelog] #56049 Support configured credential providers in remote execution @viyatb-oai

[Changelog] #55358 Add a shared cleanup lock guard for local log directories @dkovalenko-oai

[Bug Fixes] Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)

[Bug Fixes] Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)

[Bug Fixes] Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)

[Bug Fixes] Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)

[Bug Fixes] Queued prompts now wait for pending permission selections to resolve before continuing. (#55682)

[Changelog] #53790 Fix cancellation of macOS user-verification prompts @bz-openai

[Changelog] #53845 Fix daemon updater socket binding and bootstrap readiness on Unix @etraut-openai

[Changelog] #53879 Preserve running turn recovery across thread settings updates @bc-openai

[Changelog] #53932 Preserve conversation history when compaction fails @jif-oai

[Changelog] #54008 Fix session lookup and resume after rollout compression @jif-oai

[Changelog] #54069 Fix Windows environment handling for remote MCP servers @iceweasel-oai

[Changelog] #54170 Preserve ChatGPT authentication for Gov MCP servers @lsingh-oai

[Changelog] #55384 Reject replaceable symlinks in pre-sandbox executable lookup @keeley-openai

[Changelog] #55395 Roll back interrupted Guardian reviews to preserve evidence @jif-oai

[Changelog] #55409 Retry TUI startup after a server shutdown refusal @fcoury-oai

[Changelog] #55581 Avoid panics after background compaction fails before a checkpoint @jif-oai

[Changelog] #55593 Reject unpackaged Windows sandbox provisioning clients @chess-oai

[Changelog] #55607 Propagate authentication header failures before sending requests @cooper-oai

[Changelog] #55645 Fix in-process app-server shutdown with full queues @jif-oai

[Changelog] #55646 Guard auth persistence and reloads against concurrent login changes @jif-oai

[Changelog] #55682 Fix TUI permission selection and session state handling @etraut-openai

[Changelog] #55696 Preserve enterprise MCP authorization across runtime refreshes @jif-oai

[Changelog] #55859 Fix enterprise MCP credential selection and reauthentication @jif-oai

[Changelog] #55923 Preserve thread model settings across resume and revert @etraut-openai

[Changelog] #55957 Refresh cloud plugin and skill catalogs after mid-turn auth changes @TAFOYA-OAI

[Changelog] #55958 Preserve provider model catalogs when refreshes fail @abhinav-oai

[Changelog] #55987 Refresh remote exec-server credentials after unauthorized responses @apanasenko-oai

[Changelog] #55991 Avoid double-counting retained reasoning in token usage @dkovalenko-oai

[Changelog] #56000 Retry proxy CONNECT challenges with Windows authentication @efrazer-oai

[Changelog] #56003 Scope MITM credential substitution to trusted origins and placeholders @viyatb-oai

[Bug Fixes] CLI configuration overrides are preserved when `-c` or `--config` appears at multiple subcommand levels. (#56022)

[Changelog] #53728 Preserve the remote cwd filter in the in-app resume picker @fcoury-oai

[Changelog] #53751 Apply feature overrides when restarting the app-server daemon @jif-oai

[Changelog] #53794 Retain rollout migration locks across worker cancellation @jif-oai

[Changelog] #53804 Keep the Agent command center visible during archive and delete @etraut-openai

[Changelog] #53816 Reject Guardian review threads during interactive CLI resume @dylan-hurd-oai

[Changelog] #53908 Keep the agent dashboard browsable during task removal @etraut-openai

[Changelog] #53947 Stop rollout reads when the calling task is cancelled @jif-oai

[Changelog] #53969 Avoid reconnect races in the daemon restart test @jif-oai

[Changelog] #53987 Skip service backoff for stale Guardian authorization retries @jif-oai

[Changelog] #54027 Preserve Windows startup variables and MXC child environment defaults @iceweasel-oai

[Changelog] #54047 Restore elapsed time for replayed in-progress turns @etraut-openai

[Changelog] #54076 Avoid false URL-launch detections in literal PowerShell commands @jif-oai

[Changelog] #54079 Retire rejected MCP OAuth refresh tokens @mzeng-openai

[Changelog] #54094 Preserve specific MCP failure codes in metrics and spans @TAFOYA-OAI

[Changelog] #54098 Keep environment tools stable across readiness changes @aibrahim-oai

[Changelog] #54257 Preserve recent speech when trimming realtime transcripts @jif-oai

[Changelog] #54273 Protect metadata writes through macOS case aliases @jif-oai

[Changelog] #54315 Keep TUI Markdown colors readable against their backgrounds @fcoury-oai

[Changelog] #54363 Filter uninspectable network roots from implicit MXC read grants @iceweasel-oai

[Changelog] #54365 Prevent duplicate assistant messages around interleaved commands @fcoury-oai

[Changelog] #54369 Retry SQLite operations on transient writer contention @willwang-openai

[Changelog] #54389 Preserve existing SQLite journal modes on startup @dkovalenko-oai

[Changelog] #54637 Preserve disconnect reasons in Noise handshake errors @virajrai-oai

[Changelog] #54664 Distinguish retryable thread-store errors from unknown write outcomes @wiltzius-openai

[Changelog] #54679 Distinguish MCP approval cancellation reasons @vkg-oai

[Changelog] #54681 Keep TUI session selections bound to their backend @bc-openai

[Changelog] #54686 Preserve MCP tool-list metadata in server status @victor-openai

[Changelog] #54708 Honor home deletion preferences during Windows uninstall @chess-oai

[Changelog] #54724 Preserve prereleased events when creating GitHub prereleases @ioanbudea-OAI

[Changelog] #54739 Close arg0 lock files before removing temporary directories @dkovalenko-oai

[Changelog] #54763 Stop applying macOS background priority to managed daemons @bc-openai

[Changelog] #54766 Defer unknown TUI config fields to the shared strict-config policy @etraut-openai

[Changelog] #54946 Preserve model catalog caches across header credential rotation @hlevy-openai

[Changelog] #55252 Preserve rollout access metadata across compression and restoration @jif-oai

[Changelog] #55262 Stop memory dual-write when v2 is selected @jif-oai

[Changelog] #55270 Honor per-thread unload delays in app-server @jif-oai

[Changelog] #55278 Fall back when macOS rejects high stdio descriptors @chrishayduk-oai

[Changelog] #55287 Track MCP enterprise auth cancellation across config reloads @jif-oai

[Changelog] #55288 Recheck EMA request authority at HTTP boundaries @jif-oai

[Changelog] #55293 Keep only the latest adjacent reasoning effort update in requests @felixxia-oai

[Changelog] #55299 Refresh rejected proxy credentials and back off failed renewals @ee-oai

[Changelog] #55302 Stop the closest remote SHA search at zero distance @jif-oai

[Changelog] #55304 Reject TUI events from a different backend @bc-openai

[Changelog] #55372 Fix recall of command-line initial prompts in the TUI @joesavona

[Changelog] #55379 Handle response body failures in OpenAI docs downloads @kkahadze-oai

[Changelog] #55380 Preserve thread metadata before rollout files are materialized @jif-oai

[Changelog] #55968 Back off failed cloud skill and plugin catalog refreshes @TAFOYA-OAI

[Changelog] #56011 Keep rollout trace terminal sessions distinct when process IDs are reused @cassirer-openai

[Changelog] #56018 Avoid nested CLI startup in the MCP OAuth persistence test @goodman-oai

[Changelog] #56021 Keep slash command prefixes in editable composer text @bc-openai

[Changelog] #56022 Preserve config overrides across CLI subcommand boundaries @jmickey-oai

[Changelog] #56032 Fix entrypoint lookup in package debug-symbol smoke tests @dkovalenko-oai

[Chores] Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)

[Chores] Updated the embedded JavaScript runtime with safety checks for optimized `Array.sort` operations. (#54519)

[Changelog] #53732 Reuse compiled search patterns across compressed rollouts @ethernetdan-openai

[Changelog] #53745 Remove `modelSlug` from the latest-model resolver output @kkahadze-oai

[Changelog] #54519 Upgrade V8 to 152.2.0 and backport Array.sort safety guards @seanh-oai

[Changelog] #54754 Reduce memory overhead in tool JSON schemas @charliemarsh-oai

[Changelog] #54761 Upgrade `zip` to 9.0.0 and update plugin archive extraction @anp-oai

[Changelog] #55265 Avoid cloning the full catalog for model metadata lookups @charliemarsh-oai

[Changelog] #55691 Refine enterprise MCP auth errors and request authority checks @jif-oai

[Changelog] #53780 Remove redundant Codex manual cache directory check @kkahadze-oai

[Changelog] #53781 Remove the product-gating TODO from `SkillPolicy` @kkahadze-oai

[Changelog] #53795 Use the bundled model catalog in the MCP startup invalidation test @OLI-OAI

[Changelog] #53827 Prune unused app-server daemon releases safely @etraut-openai

[Changelog] #53897 Isolate daemon package tests to reduce disk contention @etraut-openai

[Changelog] #53963 Test memory extraction budgets with excluded items and ciphertext @jif-oai

[Changelog] #53991 Report the reason for ChatGPT token refresh requests @tejsudha-openai

[Changelog] #53996 Bump `rustls` to `0.23.46` @jif-oai

[Changelog] #53997 Filter rollout filenames before checking compressed siblings @bbrown-oai

[Changelog] #54046 Track approval cancellation sources and Guardian context changes @vkg-oai

[Changelog] #54056 Coalesce overlapping native TLS root certificate loads @jif-oai

[Changelog] #54078 Update `gix` to 0.89.0 and `gix-url` to 0.40.0 @jif-oai

[Changelog] #54080 Extract TUI user-turn submission into a dedicated module @bc-openai

[Changelog] #54081 Centralize vertical navigation in TUI list views @bc-openai

[Changelog] #54082 Stabilize the Guardian network review timeout test @felixxia-oai

[Changelog] #54087 Upgrade Bazel's `rules_python` to 2.4.2 @dkovalenko-oai

[Changelog] #54099 Wait for readiness in the SIGTERM cancellation test @felixxia-oai

[Changelog] #54151 Generate keymap descriptors and binding accessors from one catalog @bc-openai

[Changelog] #54250 Add regression tests for case-variant metadata protection @jif-oai

[Changelog] #54264 Track Guardian transcript admission across failed reviews @jif-oai

[Changelog] #54265 Add regression coverage for Guardian sandbox retry approvals @jif-oai

[Changelog] #54278 Share Guardian image deduplication and checkpoint restoration @felixxia-oai

[Changelog] #54281 Attribute compaction summaries to the assistant in Guardian transcripts @jif-oai

[Changelog] #54316 Centralize context fragment kind constants @ioanbudea-OAI

[Changelog] #54417 Skip SQLite page reclamation on Linux NFS mounts @dkovalenko-oai

[Changelog] #54433 Use neutral labels for nonzero exits in compact TUI output @bc-openai

[Changelog] #54623 Resolve stable releases dynamically for exec-server compatibility tests @felixxia-oai

[Changelog] #54641 Retry npm release publishing and match macOS verification runners @jif-oai

[Changelog] #54647 Make remote-control conflict retry tests deterministic @jif-oai

[Changelog] #54672 Use shared Bazel CI preparation for lint and V8 jobs @anp-oai

[Changelog] #54710 Move V8's ICU Bazel rules into the workspace @seanh-oai

[Changelog] #54716 Keep prereleases in draft until release assets finish uploading @ioanbudea-OAI

[Changelog] #54945 Share additional tool declarations across response item clones @charliemarsh-oai

[Changelog] #55149 Prune unused standalone releases after successful installation @etraut-openai

[Changelog] #55226 Bucket admitted Guardian request metrics by input size @ioanbudea-OAI

[Changelog] #55234 Record Guardian sampling retries, attempts, and delivery outcomes @ioanbudea-OAI

[Changelog] #55255 Unload idle ephemeral composer prediction threads without delay @jif-oai

[Changelog] #55261 Share dynamic tool specifications across turn snapshots @charliemarsh-oai

[Changelog] #55274 Stabilize daemon reconnect and Rosetta package startup tests @jif-oai

[Changelog] #55283 Avoid cloning events in the app-server thread listener @charliemarsh-oai

[Changelog] #55296 Encapsulate Responses API proxy authentication @ee-oai

[Changelog] #55324 Remove thread title generation spinners from the TUI @cconger

[Changelog] #55342 Consolidate cached and fetched Codex manual handling @kkahadze-oai

[Changelog] #55355 Remove the long-thread accuracy warning after compaction @asohrabi-oai

[Changelog] #55357 Prepare skill catalogs before building step tools @TAFOYA-OAI

[Changelog] #55391 Deduplicate native agent messages in Guardian review context @jif-oai

[Changelog] #55406 Trace harness-side Noise handshake failures @alishobeiri-oai

[Changelog] #55410 Track credential sources separately from auth owners @cooper-oai

[Changelog] #55524 Make the startup migration contention test deterministic @jif-oai

[Changelog] #55533 Separate Guardian conversation preparation from execution @swastik-oai

[Changelog] #55547 Ignore the basic-toml advisory in dependency audits @jif-oai

[Changelog] #55597 Extract shared TUI user prompt helpers from IDE context @bc-openai

[Changelog] #55616 Update `rustls-webpki` and `webpki-roots` lockfile versions @jif-oai

[Changelog] #55620 Move Linux sandbox unit tests into separate files @bolinfest

[Changelog] #55623 Refactor Guardian v2 Decisions snapshot comparison @swastik-oai

[Changelog] #55666 Omit reasoning and compaction from Decisions snapshot comparisons @swastik-oai

[Changelog] #55677 Upgrade the Rust toolchain to 1.99.1 @dkovalenko-oai

[Changelog] #55689 Clean up failed and abandoned marketplace staging directories @dkovalenko-oai

[Changelog] #55690 Reclaim aged legacy marketplace staging directories @dkovalenko-oai

[Changelog] #55692 Tag tool registration metrics with effective incremental tools mode @akira-oai

[Changelog] #55693 Use hermetic dsymutil for macOS Bazel builds @dkovalenko-oai

[Changelog] #55705 Centralize cloud skill cache state under the catalog lock @TAFOYA-OAI

[Changelog] #55710 Resolve MCP backend identity from runtime events in rollout traces @cassirer-openai

[Changelog] #55723 Avoid redundant clones when sending app-server notifications @charliemarsh-oai

[Changelog] #55725 Preserve code cell response metadata in rollout traces @cassirer-openai

[Changelog] #55733 Box session metadata and compaction payloads in `RolloutItem` @charliemarsh-oai

[Changelog] #55846 Measure Guardian review latency once with a monotonic clock @ioanbudea-OAI

[Changelog] #55847 Bound retained turn analytics and clean up closed threads @jif-oai

[Changelog] #55848 Pause relay test time while inspecting handshake diagnostics @jif-oai

[Changelog] #55856 Bound managed app-server and updater stderr logging @jif-oai

[Changelog] #55883 Expand enterprise MCP authorization lifecycle test coverage @jif-oai

[Changelog] #55913 Skip conversation scoring superseded by newer scores and history @jif-oai

[Changelog] #55946 Bound remote installed-plugin inventory pagination @mzeng-openai

[Changelog] #55954 Separate retained instruction collection from budget policy @ioanbudea-OAI

[Changelog] #55969 Drain WebSocket responses on mailbox preemption @jif-oai

[Changelog] #55970 Extract shared message-board code into `codex-message-board` @felixxia-oai

[Changelog] #55978 Route SQLite logs to an explicitly configured `log_dir` @dkovalenko-oai

[Changelog] #55993 Preserve per-execution trace context in code-mode stdio callbacks @bschoepke-openai

[Changelog] #56006 Assert shell tool overlap directly in the parallelism test @goodman-oai

[Changelog] #56007 Pause Tokio time in the reused Guardian session test @goodman-oai