发布日期: 2026-09-17
版本号: rust-v0.155.0

新功能：新增实验性 /voice 语音对话，支持实时字幕与麦克风控制，需通过 /experimental 开启；TUI 状态栏现可实时显示推理摘要，成功回合后显示完成时间；智能体总览支持任务隐藏、归档与删除，并展示 worktree 归属信息及清洁托管 worktree 的确认删除；支持在本地 TUI 会话中用 Touch ID 验证 MCP 请求（限支持机型）；守护进程更新计划可配置，并新增 codex app-server daemon update 命令，守护进程重启后可恢复已保存线程与进行中的目标；Amazon Bedrock 支持通过配置命令获取 AWS 凭证，具备缓存、过期刷新与认证恢复能力。 问题修复：回合开始前压缩失败时已接受的提示词也会被保存；修复 tmux 尺寸变化遗漏、转录视口恢复及切换线程后历史陈旧的问题；MCP 服务器现在能准确报告 OAuth 凭证过期并在令牌刷新失败时给出重连指引；自动审批审查更可靠地保留完整操作与授权证据、可重试瞬时故障，并区分审查失败与不安全操作；切换账号会使远程控制会话、缓存的 WebSocket 状态和旧身份的模型目录失效；阻止了受限 WSL 沙箱中的 Windows 进程逃逸，并加固了代理 shell 快照的凭据保护。 杂项：Python SDK 与运行时的发布对齐稳定版 CLI，使用相同版本并在发布 SDK 前校验运行时资源。完整变更记录见 r0.154.0 至 r0.155.0 的对比。

更新内容 （中文）

新功能

  • 新增实验性 /voice 语音对话，支持实时字幕与麦克风控制（在受支持的构建中启用，通过 /experimental 开启）。(#43581, #43651, #44331)
  • TUI 现在会在状态栏显示实时推理摘要，并在成功完成回合后显示完成时间戳。(#43558, #43921)
  • 新增任务隐藏、归档和删除功能（位于 agent 总览），以及 worktree 归属详情和对干净受管 worktree 的确认删除。(#43942, #44424, #44433)
  • 在受支持的 Mac 上，本地 TUI 会话中的 MCP 请求新增 Touch ID 验证。(#43624, #43712, #43715)
  • 新增可配置的守护进程更新计划以及 codex app-server daemon update；已保存的线程和活跃目标可在守护进程重启后恢复。(#43542, #43562, #44314)
  • Amazon Bedrock 现在可通过已配置的命令获取 AWS 凭证，支持缓存、基于过期时间的刷新和认证恢复。(#44028)

缺陷修复

  • 即使回合开始前压缩失败，已接受的提示词现在也会被保存。(#44487)
  • 修复了 tmux 尺寸变化遗漏、转录视口恢复以及切换线程后出现过期历史记录的问题。(#43603, #43889, #43994)
  • MCP 服务器现在能准确报告过期的 OAuth 凭证，并在令牌刷新失败时提供重连指引。(#43947, #44359)
  • 自动审批审查现在能更可靠地保留完整操作和授权证据，会重试瞬时故障，并区分审查失败与不安全操作发现。(#44482, #44569, #44570)
  • 切换账户现在会使远程控制会话、缓存的 WebSocket 状态以及属于先前身份的模型目录失效。(#43906, #44341, #44489)
  • 阻止了从受限 WSL 沙箱中逃逸出 Windows 进程，并加固了代理 shell 快照以防凭证泄露。(#44286, #43909, #44040)

杂项

  • 将 Python SDK 与运行时的发布与稳定版 CLI 发布对齐，使用匹配的版本号，并在发布 SDK 前验证运行时资源。(#44067)

变更日志

完整变更日志：https://github.com/openai/codex/compare/rust-v0.154.0…rust-v0.155.0

  • #43521 在守护进程更新期间保留独立发布版本固定 @copyberry
  • #43524 限制 MCP 用户验证并添加工作区范围的身份 @copyberry
  • #43527 在 Guardian 分数滞后中扣除审批自身的 code-mode 包装器 @copyberry
  • #43529 确保受管守护进程启动时运行独立更新器 @copyberry
  • #43533 修复 Bazel musl 构建的 jemalloc 工具与编译器标志 @copyberry
  • #43534 保留 Guardian 上下文章节并共享计划操作渲染 @copyberry
  • #43538 将 Guardian 权限上下文移入共享章节注册表 @copyberry
  • #43540 在回合截断处分叉时保留多 agent 版本 @copyberry
  • #43542 使 app-server 守护进程自动更新可配置 @copyberry
  • #43545 在不加载完整模型上下文的情况下保留分叉运行时版本 @copyberry
  • #43547 添加用户验证提供方抽象与 RPC 适配器 @copyberry
  • #43552 在 PID 文件中记录已启动的 app-server 可执行文件标识 @copyberry
  • #43558 在 TUI 成功回合后显示完成时间戳 @copyberry
  • #43562 添加显式的 app-server 守护进程更新命令 @copyberry
  • #43568 将 app-server 用户验证 RPC 接入原生提供方 @copyberry
  • #43570 通过线程管理器管理同步 Guardian 审查器 @copyberry
  • #43572 使受管 app-server 的关闭宽限期可配置 @copyberry
  • #43576 在 TUI 中对相邻的计算机操作进行分组 @copyberry
  • #43581 为 TUI 添加实时 WebRTC 语音对话 @copyberry
  • #43584 移除 TUI 中过期的转录字段赋值 @copyberry
  • #43595 将有界的 Guardian 审查证据集中到 guardian-context @copyberry
  • #43597 将可信工具元数据移入共享 Guardian 上下文 @copyberry
  • #43599 将可信技能证据移入 Guardian 上下文注册表 @copyberry
  • #43601 将 Guardian 图像选择移入共享上下文章节 @copyberry
  • #43602 将 Guardian REPL 证据渲染移入共享上下文注册表 @copyberry
  • #43603 在 TUI 中恢复遗漏的 tmux 尺寸变化通知 @copyberry
  • #43604 从内置模型目录中排除基础指令 @copyberry
  • #43619 添加稳定的 TUI/app-server 版本比较辅助函数 @copyberry
  • #43621 为线程遥测添加 worktree 分类 @copyberry
  • #43622 当连接的 Codex 服务比 CLI 更旧时发出警告 @copyberry
  • #43624 添加基于安全飞地（Secure Enclave）签名的 macOS 用户验证 @copyberry
  • #43645 扩展 TUI 实时语音对话的回归测试覆盖 @copyberry
  • #43651 添加语音静音快捷键与录音活动指示器 @copyberry
  • #43656 用翻页牌（split-flap）动画呈现实时语音字幕 @copyberry
  • #43676 在语音字幕中设置口述提示样式并链接工作区文件 @copyberry
  • #3683 将语音控件移入专用的编写器条带 @copyberry
  • #43690 使 TUI 中的语音静音快捷键可配置 @copyberry
  • #43695 稳定重绘过程中的实时语音电平采样 @copyberry
  • #43698 使 TUI 中的旧版 app-server 提示可配置 @copyberry
  • #43699 语音字幕滚动时保留翻页牌动画状态 @copyberry
  • #43702 添加 TUI 用户验证提示组件 @copyberry
  • #43704 在语音音频接收端禁用时钟同步 @copyberry
  • #43708 为用户验证添加 TUI 请求簿记 @copyberry
  • #43712 在 TUI 中启用 MCP 用户验证 @copyberry
  • #43715 在受支持设备上为内置 TUI 启用用户验证 @copyberry
  • #43790 将 app-server 存储指标限制在会话目录内 @copyberry
  • #43795 在配置覆盖生效期间固定请求的推理力度 @copyberry
  • #43796 在压缩过程中保留推理力度并在成功时重置 @copyberry
  • #43797 添加带隔离存储的可配置记忆版本 @copyberry
  • #43798 批量清除非用户历史以保留 Guardian 转录增量 @copyberry
  • #43799 在 memory v2 抽取中优先处理人类证据 @copyberry
  • #43800 为 memory v2 添加仅摘要抽取 @copyberry
  • #43805 集中 Guardian 上下文组合 @copyberry
  • #43806 在上下文配置文件中集中 Guardian 转录策略 @copyberry
  • #43808 将 v2 抽取分块移入记忆写入器 @copyberry
  • #43813 添加专用的 memory v2 整合与读取提示 @copyberry
  • #43827 添加记忆双写与 v2 就绪状态上报 @copyberry
  • #43842 在 guardian 分叉测试中等待父进程空闲后再回滚 @copyberry
  • #43844 添加分阶段的企业 OIDC 登录与协同登出 @copyberry
  • #43846 在 /copy 选择器中包含已完成的评论 @copyberry
  • #43848 在线程恢复期间保留运行时工作区根目录 @copyberry
  • #43853 为 MXC 执行请求添加规范化权限转换 @copyberry
  • #43870 在客户端拆卸时关闭 stderr 读取器 @copyberry
  • #43873 在 code mode 中于 JSON 序列化前处理 undefined 值 @copyberry
  • #43876 将 Unix 钩子命令从控制终端分离 @copyberry
  • #43884 在拆卸时关闭活跃的网络代理连接 @copyberry
  • #43889 修复转录查看器恢复与半页滚动 @copyberry
  • #43894 在 code-mode 工具分发追踪中保留线程标识 @copyberry
  • #43895 在 ChatGPT HTTP 客户端中保留 __oailb 路由 cookie @copyberry
  • #43897 将提供方与认证身份随模型目录缓存一并持久化 @copyberry
  • #43900 将 Apps 工具刷新传播到已有线程 @copyberry
  • #43903 将 Windows 拒绝读取的 glob 扫描规划提取到协议中 @copyberry
  • #43906 将模型目录缓存限定到当前提供方与认证身份 @copyberry
  • #43907 在过滤与回放过程中保留完整的 shell 快照导出 @copyberry
  • #43909 在启用凭证代理时保护 shell 快照 @copyberry
  • #43912 让 Guardian 审查器使用基于摘要的压缩 @copyberry
  • #43913 为项目指令与文件系统沙箱操作添加追踪 @copyberry
  • #43915 移除仓库的 devcontainer 配置 @copyberry
  • #43918 在 CodexThread 上暴露排队事件计数 @copyberry
  • #43921 在 TUI 状态栏显示流式推理摘要 @copyberry
  • #43925 为原生用户验证 RPC 添加取消功能 @copyberry
  • #43927 在状态数据库中将线程制品重命名为附件 @copyberry
  • #43930 避免为无关的代理端口变更进行 Windows 沙箱设置 @copyberry
  • #43934 在 TUI 中跟踪语音会话生命周期指标 @copyberry
  • #43936 稳定 subagent 与统一 exec 测试夹具 @copyberry
  • #43937 为 TUI 启动指标打上终端与复用器类别标签 @copyberry
  • #43939 添加执行器上下文文件系统权限辅助函数 @copyberry
  • #43942 显示 worktree 归属详情并添加确认删除 @copyberry
  • #43943 将新回合提交置于宿主关闭准入控制之下 @copyberry
  • #43947 当过期 OAuth 令牌无法刷新时暴露 MCP 重连信号 @copyberry
  • #43948 在 doctor 中显示已配置的 app-server 更新器设置 @copyberry
  • #43949 为状态运行时添加事务性线程附件变更 @copyberry
  • #43950 让 app-server 线程 RPC 保持活跃直到委派工作完成 @copyberry
  • #43953 在图像生成分析中保留每张图像的生成 ID @copyberry
  • #43954 缓存受保护的 shell 快照并加固捕获清理 @copyberry
  • #43956 将 TUI 线程能力测试栈增至 12 MiB @copyberry
  • #43959 在优雅关闭期间拦截新的 app-server 工作 @copyberry
  • #43961 在协议错误消息中使用弯引号 @copyberry
  • #43966 在历史测试中将 resume future 放入堆中分配 @copyberry
  • #43983 在 macOS 发布版中打包已签名的语音资源 @copyberry
  • #43994 切换线程时清除过期的转录历史 @copyberry
  • #44002 封装已执行工具调用的元数据记录 @copyberry
  • #44025 构建 macOS 语音发布版前刷新工作区 lockfile @copyberry
  • #44027 为 agent 总览后台任务支持图像附件 @copyberry
  • #44028 为 Amazon Bedrock 添加 AWS 凭证导出命令 @copyberry
  • #44032 从仓库 app-server schema 生成 Python SDK 类型 @copyberry
  • #44038 在代理与 shell 快照中处理已复制的凭证 @copyberry
  • #44040 加固 shell 快照与回放中的凭证处理 @copyberry
  • #44043 在线程分叉 API 中统一使用 StartThreadOptions @copyberry
  • #44049 提取凭证代理环境与注册表辅助函数 @copyberry
  • #44053 针对已构建的 CLI 与已安装运行时测试 Python SDK @copyberry
  • #44055 将 Python SDK 发布设为依赖运行时可用并校验 PyPI 文件 @copyberry
  • #44056 为网络代理添加可配置的凭证提供方 @copyberry
  • #44060 将 Guardian 的操作审查上限提升至 200,000 字节 @copyberry
  • #44061 在发布运行时之前构建 Python SDK 制品 @copyberry
  • #44062 修复语音运行时发布构建与打包 @copyberry
  • #44066 将已配置的凭证代理扩展到内嵌别名 @copyberry
  • #44067 在稳定版 CLI 发布后发布 Python 包 @copyberry
  • #44068 在环境过滤过程中保留凭证代理目标 @copyberry
  • #44070 拒绝 data URL 中的空音频负载 @copyberry
  • #44072 在各 shell 快照中支持已配置的凭证提供方 @copyberry
  • #44077 重构凭证代理隧道协议检测 @copyberry
  • #44080 打包前将暂存的 macOS 语音运行时设为可写 @copyberry
  • #44084 暴露 Python SDK 的历史选择与逐回合选项 @copyberry
  • #44086 为 Python SDK 添加不可信外部消息 @copyberry
  • #44089 在明文 HTTP 隧道中支持凭证代理 @copyberry
  • #44101 在 macOS 发布打包中处理空的语音参数 @copyberry
  • #44121 缓存服务器保持休眠期间复用 MCP 绑定 @copyberry
  • #44138 让 rollout 压缩与活跃线程写入器协同 @copyberry
  • #44164 添加 Guardian 上下文成本与请求令牌遥测 @copyberry
  • #44166 为 Guardian 上下文添加聚合预算执行 @copyberry
  • #44175 将压缩后的 rollout 作为 JSONL 附加到诊断报告 @copyberry
  • #44176 降低会话切换期间的 TUI 栈使用量 @copyberry
  • #44181 为 Guardian 上下文指标使用显式直方图分桶 @copyberry
  • #44183 会话启动被取消时释放持久化写入器 @copyberry
  • #44198 编写器闪光特效期间保留语音指示器样式 @copyberry
  • #44200 构建模型上下文时使用捕获的步骤设置 @copyberry
  • #44202 为扩展上下文使用捕获的步骤模型设置 @copyberry
  • #44207 统计包含排队在内的 exec-server 请求总时长 @copyberry
  • #44226 压缩后的 rollout 无法搜索时继续 rollout 搜索 @copyberry
  • #44227 将 Guardian 审查策略提取为独立 crate @copyberry
  • #44238 修复 MCP elicitation 取消并在重连时重置状态 @copyberry
  • #44241 跨配置层处理凭证提供方来源重映射 @copyberry
  • #44242 工具规划与执行使用捕获的步骤设置 @copyberry
  • #44243 记录对话历史时使用发起的模型 @copyberry
  • #44248 在恢复与分叉期间保留工具输出截断预算 @copyberry
  • #44249 为接收方模型规范化图像 detail 参数 @copyberry
  • #44250 移除已下线的模型条目并保留迁移提示 @copyberry
  • #44252 将同步 Guardian 编排移入 reviewer 扩展 @copyberry
  • #44255 对受支持的提供方始终使用流式远程压缩 @copyberry
  • #44259 移除 Windows 的 /sandbox-add-read-dir 斜杠命令 @copyberry
  • #44273 移除未使用的旧版远程压缩实现 @copyberry
  • #44276 避免回合恢复期间重复的推理力度更新 @copyberry
  • #44277 将环境启动失败原因反馈给模型 @copyberry
  • #44281 对 Guardian 审查强制执行完整的请求预算 @copyberry
  • #44283 受管守护进程关闭前持久化已加载的线程 @copyberry
  • #44284 为 Windows system config 命名空间添加遥测 @copyberry
  • #44285 在重放与提前回滚期间保留预热的推理力度 @copyberry
  • #44286 阻止受限文件系统沙箱的 WSL interop 逃逸 @copyberry
  • #44288 防止命令钩子在被阻塞的 stdin 上挂起 @copyberry
  • #44289 扩展 MXC 卷授权并解析拒绝 glob @copyberry
  • #44290 允许通过 update_goal 实现用户请求的目标暂停 @copyberry
  • #44293 对异步 Guardian 分类器强制执行完整的输入预算 @copyberry
  • #44297 将钩子管道 I/O 超时测试与 shell 启动文件隔离 @copyberry
  • #44298 为 guardian 与记忆请求设置回合触发器 @copyberry
  • #44299 受管守护进程关闭时记录线程恢复候选 @copyberry
  • #44307 添加可选启用的预置 macOS CLI 候选发布版 @copyberry
  • #44311 远程控制遵循共享的 Retry-After 截止时间 @copyberry
  • #44314 受管守护进程重启时恢复已保存的线程 @copyberry
  • #44318 为托管的 Codex Apps 提供独立的 MCP 协议选择加入 @copyberry
  • #44320 连续三次空的自动续跑回合后阻止目标 @copyberry
  • #44325 在上传响应中返回提示词哈希 @copyberry
  • #44327 防止 Windows 沙箱中的文件系统根目录读取拒绝 @copyberry
  • #44328 接受新提示词时清除待处理的 TUI 问题 @copyberry
  • #44330 为状态运行时添加分页的线程附件列表 @copyberry
  • #44331 在实验性功能中暴露语音对话 @copyberry
  • #44332 在线程设置中持久化已禁用的插件 ID @copyberry
  • #44336 为已执行的工具调用添加有界的工具结果元数据支持 @copyberry
  • #44337 在共享服务器上归档后返回 agent 命令中心 @copyberry
  • #44341 将远程控制会话绑定到其认证所有者 @copyberry
  • #44344 在 agent 总览中用 Right 键打开任务 @copyberry
  • #44346 在 MCP 工具续传中支持原生验证 @copyberry
  • #44349 在会话启动钩子中区分分叉的会话 @copyberry
  • #44350 添加带协同删除的线程附件操作 @copyberry
  • #44352 从 Guardian 审查分析中移除携带路径的字段 @copyberry
  • #44354 提取 TUI 中共享的页脚提示换行逻辑 @copyberry
  • #44359 在 MCP 状态快照中报告 OAuth 认证失败 @copyberry
  • #44360 按 Escape 将焦点返回 agent 总览编写器 @copyberry
  • #44377 更新分叉线程钩子测试以使用 StartThreadOptions @copyberry
  • #44392 为 OpenAI API 密钥添加可选启用的模型发现 @copyberry
  • #44400 让 Python SDK 回合订阅在其挂载点启动 @copyberry
  • #44424 为 agent 总览添加隐藏快捷键 @copyberry
  • #44433 为 agent 总览添加归档与删除操作 @copyberry
  • #44472 加固 Code Mode 工具调用完整性追踪 @copyberry
  • #44482 改进 Guardian 重试与审查失败上报 @copyberry
  • #44487 回合前压缩失败时保留传入的提示词 @copyberry
  • #44489 认证归属变更时重置缓存的 WebSocket 状态 @copyberry
  • #44492 区分 HTTP 配额错误与速率限制 @copyberry
  • #44493 将 MCP 描述限制与 Guardian 操作 JSON 分开处理 @copyberry
  • #44521 将会话隔离与 subagent 归因解耦 @copyberry
  • #44523 限制 app-server stdio 关闭时间并优雅处理 Unix SIGTERM @copyberry
  • #44536 将 Guardian reviewer 设置与执行移入 reviewer crate @copyberry
  • #44544 将 Guardian 上报与拒绝记账移入扩展 @copyberry
  • #44548 为 Codex Apps 添加按 MIME 过滤的资源列表 @copyberry
  • #44564 为已存储的线程附件添加 app-server API @copyberry
  • #44569 在 Guardian 审批审查中保留完整操作 @copyberry
  • #44570 在请求预算之前保留 Guardian 授权证据 @copyberry
  • #44571 允许扩展按 HTTP 服务器选择 MCP 协议模式 @copyberry
  • #44574 Guardian 审查使用捕获的操作设置 @copyberry
  • #44575 将网络审批审查关联到其发起的执行 @copyberry
  • #44580 在 MXC 中支持符号化 :root 文件系统策略 @copyberry
  • #44586 从技能调用分析事件中移除 repo_url @copyberry

更新内容 （原始）

New Features

  • Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, #44331)
  • The TUI now shows live reasoning summaries in the status row and completion timestamps after successful turns. (#43558, #43921)
  • Added task hiding, archiving, and deletion in the agents overview, plus worktree ownership details and confirmed deletion of clean managed worktrees. (#43942, #44424, #44433)
  • Added Touch ID verification for MCP requests in local TUI sessions on supported Macs. (#43624, #43712, #43715)
  • Added configurable daemon update schedules and codex app-server daemon update; saved threads and active goals can recover after daemon restarts. (#43542, #43562, #44314)
  • Amazon Bedrock can now obtain AWS credentials from configured commands, with caching, expiration-based refresh, and authentication recovery. (#44028)

Bug Fixes

  • Accepted prompts are now saved even when compaction fails before a turn starts. (#44487)
  • Fixed missed tmux resizes, transcript viewport restoration, and stale history appearing after switching threads. (#43603, #43889, #43994)
  • MCP servers now report expired OAuth credentials accurately and provide reconnect guidance when token refresh fails. (#43947, #44359)
  • Automatic approval reviews now preserve complete actions and authorization evidence more reliably, retry transient failures, and distinguish review failures from unsafe-action findings. (#44482, #44569, #44570)
  • Switching accounts now invalidates remote-control sessions, cached WebSocket state, and model catalogs belonging to the previous identity. (#43906, #44341, #44489)
  • Blocked Windows-process escapes from restricted WSL sandboxes and hardened brokered shell snapshots against credential exposure. (#44286, #43909, #44040)

Chores

  • Aligned Python SDK and runtime publishing with stable CLI releases, using matching versions and verifying runtime assets before SDK publication. (#44067)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.154.0...rust-v0.155.0

  • #43521 Preserve standalone release pins during daemon updates @copyberry
  • #43524 Restrict MCP user verification and add workspace-scoped identity @copyberry
  • #43527 Discount an approval’s own code-mode wrapper from Guardian score lag @copyberry
  • #43529 Ensure the standalone updater runs on managed daemon starts @copyberry
  • #43533 Fix jemalloc tools and compiler flags for Bazel musl builds @copyberry
  • #43534 Preserve Guardian context sections and share planned-action rendering @copyberry
  • #43538 Move Guardian permission context into the shared section registry @copyberry
  • #43540 Preserve the multi-agent version when forking at a turn cutoff @copyberry
  • #43542 Make app-server daemon automatic updates configurable @copyberry
  • #43545 Preserve fork runtime versions without loading full model context @copyberry
  • #43547 Add user-verification provider abstractions and RPC adapters @copyberry
  • #43552 Record the launched app-server executable identity in PID files @copyberry
  • #43558 Show completion timestamps after successful TUI turns @copyberry
  • #43562 Add an explicit app-server daemon update command @copyberry
  • #43568 Wire app-server user verification RPCs to the native provider @copyberry
  • #43570 Manage synchronous Guardian reviewers through the thread manager @copyberry
  • #43572 Make the managed app-server shutdown grace period configurable @copyberry
  • #43576 Group adjacent computer actions in the TUI @copyberry
  • #43581 Add live WebRTC voice conversations to the TUI @copyberry
  • #43584 Remove a stale transcript field assignment from the TUI @copyberry
  • #43595 Centralize bounded Guardian review evidence in guardian-context @copyberry
  • #43597 Move trusted tool metadata into shared Guardian context @copyberry
  • #43599 Move trusted skill evidence into the Guardian context registry @copyberry
  • #43601 Move Guardian image selection into shared context sections @copyberry
  • #43602 Move Guardian REPL evidence rendering into the shared context registry @copyberry
  • #43603 Recover missed tmux resize notifications in the TUI @copyberry
  • #43604 Exclude base instructions from the bundled model catalog @copyberry
  • #43619 Add a stable TUI/app-server version comparison helper @copyberry
  • #43621 Add worktree classification to thread telemetry @copyberry
  • #43622 Warn when the connected Codex service is older than the CLI @copyberry
  • #43624 Add macOS user verification with Secure Enclave signing @copyberry
  • #43645 Expand TUI regression coverage for realtime voice conversations @copyberry
  • #43651 Add voice mute shortcut and recording activity indicators @copyberry
  • #43656 Animate live voice transcripts with split-flap tiles @copyberry
  • #43676 Style spoken prompts and link workspace files in voice transcripts @copyberry
  • #43683 Move voice controls into a dedicated composer strip @copyberry
  • #43690 Make the voice mute shortcut configurable in the TUI @copyberry
  • #43695 Stabilize realtime voice meter sampling across redraws @copyberry
  • #43698 Make older app-server notices configurable in the TUI @copyberry
  • #43699 Preserve split-flap animation state when voice transcripts scroll @copyberry
  • #43702 Add a TUI user verification prompt component @copyberry
  • #43704 Disable clock synchronization in the voice audio sink @copyberry
  • #43708 Add TUI request bookkeeping for user verification @copyberry
  • #43712 Enable MCP user verification in the TUI @copyberry
  • #43715 Enable user verification for the bundled TUI on supported devices @copyberry
  • #43790 Limit app-server storage metrics to session directories @copyberry
  • #43795 Pin request reasoning effort while configuration overrides are active @copyberry
  • #43796 Preserve reasoning effort through compaction and reset it on success @copyberry
  • #43797 Add configurable memory versions with isolated storage @copyberry
  • #43798 Batch non-user history eviction to preserve Guardian transcript deltas @copyberry
  • #43799 Prioritize human evidence in memory v2 extraction @copyberry
  • #43800 Add summary-only extraction for memory v2 @copyberry
  • #43805 Centralize Guardian context composition @copyberry
  • #43806 Centralize Guardian transcript policy in context profiles @copyberry
  • #43808 Move v2 extraction chunking into the memory writer @copyberry
  • #43813 Add dedicated memory v2 consolidation and read prompts @copyberry
  • #43827 Add memory dual writing and v2 readiness reporting @copyberry
  • #43842 Wait for parent idle before rollback in guardian fork tests @copyberry
  • #43844 Add staged enterprise OIDC login and coordinated logout @copyberry
  • #43846 Include completed commentary in the /copy picker @copyberry
  • #43848 Preserve runtime workspace roots across thread resume @copyberry
  • #43853 Add canonical permission translation for MXC execution requests @copyberry
  • #43870 Close MCP stderr readers on client teardown @copyberry
  • #43873 Handle undefined values before JSON serialization in code mode @copyberry
  • #43876 Detach Unix hook commands from the controlling terminal @copyberry
  • #43884 Close active network proxy connections on teardown @copyberry
  • #43889 Fix transcript viewer restoration and half-page scrolling @copyberry
  • #43894 Preserve thread identity in code-mode tool dispatch traces @copyberry
  • #43895 Preserve __oailb routing cookies in ChatGPT HTTP clients @copyberry
  • #43897 Persist provider and auth identity with model catalog caches @copyberry
  • #43900 Propagate Apps tool refreshes to existing threads @copyberry
  • #43903 Extract Windows deny-read glob scan planning into protocol @copyberry
  • #43906 Scope model catalog caches to the current provider and auth identity @copyberry
  • #43907 Preserve complete shell snapshot exports through filtering and replay @copyberry
  • #43909 Protect shell snapshots when credential brokerage is enabled @copyberry
  • #43912 Keep Guardian reviewers on summary-based compaction @copyberry
  • #43913 Add tracing for project instructions and filesystem sandbox operations @copyberry
  • #43915 Remove the repository devcontainer configurations @copyberry
  • #43918 Expose the queued event count on CodexThread @copyberry
  • #43921 Show streaming reasoning summaries in the TUI status row @copyberry
  • #43925 Add cancellation for native user-verification RPCs @copyberry
  • #43927 Rename thread artifacts to attachments in the state database @copyberry
  • #43930 Avoid Windows sandbox setup for irrelevant proxy port changes @copyberry
  • #43934 Track voice session lifecycle metrics in the TUI @copyberry
  • #43936 Stabilize subagent and unified exec test fixtures @copyberry
  • #43937 Tag TUI startup metrics with terminal and multiplexer categories @copyberry
  • #43939 Add executor-context filesystem permission helpers @copyberry
  • #43942 Show worktree owner details and add confirmed deletion @copyberry
  • #43943 Gate new turn submissions on host shutdown admission @copyberry
  • #43947 Surface MCP reconnect signals when expired OAuth tokens cannot refresh @copyberry
  • #43948 Show configured app-server updater settings in doctor @copyberry
  • #43949 Add transactional thread attachment mutations to the state runtime @copyberry
  • #43950 Keep app-server thread RPCs active until delegated work completes @copyberry
  • #43953 Preserve per-image generation IDs in image generation analytics @copyberry
  • #43954 Cache protected shell snapshots and harden capture cleanup @copyberry
  • #43956 Increase the TUI thread capability test stack to 12 MiB @copyberry
  • #43959 Gate new app-server work during graceful shutdown @copyberry
  • #43961 Use curly apostrophes in protocol error messages @copyberry
  • #43966 Heap-allocate the resume future in the legacy history test @copyberry
  • #43983 Bundle signed voice resources in macOS releases @copyberry
  • #43994 Clear stale transcript history when switching threads @copyberry
  • #44002 Encapsulate executed tool call metadata recording @copyberry
  • #44025 Refresh workspace lockfile before building macOS voice releases @copyberry
  • #44027 Support image attachments in agents overview background tasks @copyberry
  • #44028 Add AWS credential export commands for Amazon Bedrock @copyberry
  • #44032 Generate Python SDK types from repository app-server schemas @copyberry
  • #44038 Handle copied credentials in the broker and shell snapshots @copyberry
  • #44040 Harden credential handling in shell snapshots and replay @copyberry
  • #44043 Use StartThreadOptions across thread fork APIs @copyberry
  • #44049 Extract credential broker environment and registry helpers @copyberry
  • #44053 Test Python SDK against the built CLI and installed runtime @copyberry
  • #44055 Gate Python SDK publishing on runtime availability and verify PyPI files @copyberry
  • #44056 Add configurable credential providers to the network proxy @copyberry
  • #44060 Raise Guardian’s action review limit to 200,000 bytes @copyberry
  • #44061 Build Python SDK artifacts before publishing the runtime @copyberry
  • #44062 Fix voice runtime release builds and packaging @copyberry
  • #44066 Extend configured credential brokerage to embedded aliases @copyberry
  • #44067 Publish Python packages after stable CLI releases @copyberry
  • #44068 Preserve credential broker destinations across environment filtering @copyberry
  • #44070 Reject empty audio payloads in data URLs @copyberry
  • #44072 Support configured credential providers across shell snapshots @copyberry
  • #44077 Refactor credential-broker tunnel protocol detection @copyberry
  • #44080 Make staged macOS voice runtimes writable before packaging @copyberry
  • #44084 Expose Python SDK history selection and per-turn options @copyberry
  • #44086 Add untrusted external messages to the Python SDK @copyberry
  • #44089 Support credential brokering in plaintext HTTP tunnels @copyberry
  • #44101 Handle empty voice arguments in macOS release packaging @copyberry
  • #44121 Reuse MCP bindings while cached servers remain dormant @copyberry
  • #44138 Coordinate rollout compression with active thread writers @copyberry
  • #44164 Add Guardian context cost and request token telemetry @copyberry
  • #44166 Add aggregate budget enforcement for Guardian context @copyberry
  • #44175 Attach compressed rollouts to diagnostic reports as JSONL @copyberry
  • #44176 Reduce TUI stack usage during session transitions @copyberry
  • #44181 Use explicit histogram buckets for Guardian context metrics @copyberry
  • #44183 Release persistent writers when session startup is cancelled @copyberry
  • #44198 Preserve voice indicator styles during composer sparkle effects @copyberry
  • #44200 Use captured step settings when building model context @copyberry
  • #44202 Use captured step model settings for extension context @copyberry
  • #44207 Measure total exec-server request duration including queueing @copyberry
  • #44226 Continue rollout searches when a compressed rollout cannot be searched @copyberry
  • #44227 Extract Guardian review policy into a dedicated crate @copyberry
  • #44238 Fix MCP elicitation cancellation and reset state on reconnect @copyberry
  • #44241 Handle credential provider source remapping across config layers @copyberry
  • #44242 Use captured step settings for tool planning and execution @copyberry
  • #44243 Use the originating model when recording conversation history @copyberry
  • #44248 Preserve tool output truncation budgets across resume and fork @copyberry
  • #44249 Normalize image detail for the receiving model @copyberry
  • #44250 Remove retired model entries while preserving migration prompts @copyberry
  • #44252 Move synchronous Guardian orchestration into the reviewer extension @copyberry
  • #44255 Always use streamed remote compaction for supported providers @copyberry
  • #44259 Remove the Windows /sandbox-add-read-dir slash command @copyberry
  • #44273 Remove the unused legacy remote compaction implementation @copyberry
  • #44276 Avoid duplicate reasoning effort updates during turn recovery @copyberry
  • #44277 Surface environment startup failure reasons to the model @copyberry
  • #44281 Enforce complete request budgets for Guardian reviews @copyberry
  • #44283 Persist loaded threads before managed daemon shutdown @copyberry
  • #44284 Add telemetry for the Windows system config namespace @copyberry
  • #44285 Preserve prewarmed reasoning effort across replay and early rollback @copyberry
  • #44286 Block WSL interop escapes from restricted filesystem sandboxes @copyberry
  • #44288 Prevent command hooks from hanging on blocked stdin @copyberry
  • #44289 Expand MXC volume grants and resolve deny globs @copyberry
  • #44290 Allow user-requested goal pauses through update_goal @copyberry
  • #44293 Enforce the async Guardian classifier’s complete input budget @copyberry
  • #44297 Isolate the hook pipe I/O timeout test from shell startup files @copyberry
  • #44298 Set turn triggers for guardian and memory requests @copyberry
  • #44299 Record thread recovery candidates on managed daemon shutdown @copyberry
  • #44307 Add opt-in provisioned macOS CLI release candidates @copyberry
  • #44311 Honor shared Retry-After deadlines for remote control @copyberry
  • #44314 Restore saved threads when the managed daemon restarts @copyberry
  • #44318 Give hosted Codex Apps an independent MCP protocol opt-in @copyberry
  • #44320 Block goals after three empty automatic continuation turns @copyberry
  • #44325 Return the prompt hash in upload responses @copyberry
  • #44327 Prevent filesystem-root read denies in the Windows sandbox @copyberry
  • #44328 Clear pending TUI questions when accepting a new prompt @copyberry
  • #44330 Add paginated thread attachment listing to the state runtime @copyberry
  • #44331 Expose voice conversations in experimental features @copyberry
  • #44332 Persist disabled plugin IDs in thread settings @copyberry
  • #44336 Add bounded tool-result metadata support to executed tool calls @copyberry
  • #44337 Return to the agent command center after archiving on shared servers @copyberry
  • #44341 Bind remote-control sessions to their authentication owner @copyberry
  • #44344 Open tasks with Right from the agents overview @copyberry
  • #44346 Support native verification in MCP tool continuations @copyberry
  • #44349 Distinguish forked sessions in session-start hooks @copyberry
  • #44350 Add thread attachment operations with coordinated deletion @copyberry
  • #44352 Remove path-bearing fields from Guardian review analytics @copyberry
  • #44354 Extract shared footer hint wrapping in the TUI @copyberry
  • #44359 Report OAuth authentication failures in MCP status snapshots @copyberry
  • #44360 Return focus to the agents overview composer on Escape @copyberry
  • #44377 Update the forked-thread hook test to use StartThreadOptions @copyberry
  • #44392 Add opt-in model discovery for OpenAI API keys @copyberry
  • #44400 Start Python SDK turn subscriptions at their attachment point @copyberry
  • #44424 Add a hide shortcut to the agents overview @copyberry
  • #44433 Add archive and delete actions to the agents overview @copyberry
  • #44472 Harden Code Mode tool-call completeness tracking @copyberry
  • #44482 Improve Guardian retries and review failure reporting @copyberry
  • #44487 Preserve incoming prompts when pre-turn compaction fails @copyberry
  • #44489 Reset cached WebSocket state when auth ownership changes @copyberry
  • #44492 Distinguish HTTP quota errors from rate limits @copyberry
  • #44493 Bound MCP descriptions separately from Guardian action JSON @copyberry
  • #44521 Decouple session isolation from subagent attribution @copyberry
  • #44523 Bound app-server stdio shutdown and handle Unix SIGTERM gracefully @copyberry
  • #44536 Move Guardian reviewer settings and execution into the reviewer crate @copyberry
  • #44544 Move Guardian reporting and denial accounting into the extension @copyberry
  • #44548 Add MIME-filtered resource listing for Codex Apps @copyberry
  • #44564 Add app-server APIs for stored thread attachments @copyberry
  • #44569 Preserve complete actions in Guardian approval reviews @copyberry
  • #44570 Preserve Guardian authorization evidence until request budgeting @copyberry
  • #44571 Allow extensions to select MCP protocol mode per HTTP server @copyberry
  • #44574 Use captured action settings for Guardian reviews @copyberry
  • #44575 Tie network approval reviews to their originating execution @copyberry
  • #44580 Support symbolic :root filesystem policies in MXC @copyberry
  • #44586 Remove repo_url from skill invocation analytics events @copyberry

下载链接