发布日期: 2026-09-28
版本号: rust-v0.158.0

Codex rust-v0.158.0 版本更新总结：新功能方面，全屏 TUI 支持配置选中即复制和右键粘贴，复制的转录内容保留 Markdown 格式；支持连接需要预注册 OAuth 客户端密钥的 MCP 服务器，并提供 codex mcp add –oauth-client-secret 命令；exec-server 的 WebSocket 直连增加 bearer token 安全认证，app-server 配置的连接也适用；图片生成和编辑支持显式请求透明背景，编辑时可引用对话中的文件图片；高权限命令默认启用终端输入审批，仅运行时授权不再触发不必要的审查。问题修复方面，解决了 Windows 沙箱在普通 Windows 10 路径、被拒凭据和大型权限策略下的失败问题；修复了 Linux 沙箱嵌套可写根目录的启动问题，并在 Linux 和 macOS 上跨可写根目录保留 Git 元数据保护；macOS 补丁操作能识别已有权限覆盖的系统路径别名，避免多余审批；审批审查在收到新用户输入时会重试，状态类提问不再自动中止待处理操作；Mermaid 流程图支持渲染带引号的标签和 & 符号，不支持的图表类型会说明回退到源码的原因；命令完成事件现在包含早期输出，并向客户端报告进程启动失败。此外还包含两百余项内部改进，涉及会话代理控制、Guardian 授权审查、进程启动与沙箱、WebSocket 连接管理、MCP 集成、配置合并优化、诊断日志、多代理消息板、性能与遥测等方面的重构、稳定性修复和测试增强。

更新内容 （中文）

新功能

  • 在全屏 TUI 中配置选中即复制和右键粘贴。复制的文字记录选区现在会保留 Markdown 格式。（#47639、#47896、#48118）
  • 连接需要预注册 OAuth 客户端密钥的 MCP 服务器，包括通过 codex mcp add --oauth-client-secret 进行的连接。（#47891）
  • 使用承载令牌（bearer token）保护直连 exec-server 的 WebSocket 连接，包括通过 app-server 配置的连接。（#47601、#47648）
  • 图像生成与编辑可以显式请求透明背景，编辑现在也接受基于文件的会话内图片。（#47484、#47956）
  • 对以提升权限运行的命令默认启用终端输入审批；仅运行时授权不再触发不必要的审查。（#47799、#48073）

问题修复

  • 修复了 Windows 沙箱涉及普通 Windows 10 路径、被拒绝的已存储凭据以及大型权限策略时的失败问题。（#47672、#47695、#47919）
  • 修复了嵌套可写根目录下的 Linux 沙箱启动问题，并在 Linux 和 macOS 上跨可写根目录保留了 Git 元数据保护。（#47623、#47974）
  • macOS 补丁操作现在能识别现有权限已覆盖的系统路径别名，避免不必要的批准提示。（#47879）
  • 审批审查现在会在收到新的用户输入时重试，因此状态提问不会自动中止待处理的操作。（#47819）
  • Mermaid 流程图现在能正确渲染带引号的标签和 & 符号；不支持的图表会说明回退到源码的原因。（#47572、#47678）
  • 命令完成事件现在包含早期输出，并会向客户端报告进程启动失败。（#47529、#47665）

更新日志

完整更新日志：https://github.com/openai/codex/compare/rust-v0.157.0…rust-v0.158.0

  • #47441 文字记录页脚快捷键提示使用次要文本样式 @etraut-openai
  • #47447 将 WebSocket 认证抽取到 codex-websocket-auth @euroelessar
  • #47458 并行化指令刷新与工具准备 @hlevy-openai
  • #47484 为图像生成添加显式背景控制 @alicec-oai
  • #47520 通过 AgentControl 路由会话代理操作 @jif-oai
  • #47529 为统一 exec 启动失败发出命令生命周期事件 @steipete-oai
  • #47536 通过 AgentControl 路由代理查找和 V2 上下文 @jif-oai
  • #47539 测试中断的一次性命令启动失败持久化 @jif-oai
  • #47540 添加禁用多代理 v2 直接消息的选项 @jif-oai
  • #47565 按原因和进度分类 rollout 读取失败 @jif-oai
  • #47568 在命令执行分析中记录沙箱后端 @iceweasel-oai
  • #47571 在注入远程压缩测试历史前等待空闲 @felixxia-oai
  • #47572 在 TUI 中解释 Mermaid 渲染回退原因 @etraut-openai
  • #47582 为 Guardian 授权审查保留助手上下文 @felixxia-oai
  • #47584 在保留上下文中保持流式助手消息顺序 @felixxia-oai
  • #47585 在 Guardian 保留上下文中保存已投递的助手消息 @felixxia-oai
  • #47589 将未完成的链接目标排除在富文本流式预览之外 @etraut-openai
  • #47590 将数值型自定义推理力度序列化为 JSON 数字 @dylan-hurd-oai
  • #47591 将守护进程可执行文件哈希计算移出异步运行时 @etraut-openai
  • #47596 为每次模型请求刷新实时上下文 @reia-oai
  • #47597 防止预发布频道和金丝雀更新降级到更旧版本 @imac-oai
  • #47601 为 exec-server 添加选择加入的 WebSocket 认证 @euroelessar
  • #47603 为子进程添加仅回收（reap-only）的丢弃策略 @charliemarsh-oai
  • #47604 为子命令扩展会话和描述符控制 @charliemarsh-oai
  • #7605 将管道进程路由到共享子进程启动器 @charliemarsh-oai
  • #47610 命令钩子使用原生 POSIX 派生 @charliemarsh-oai
  • #47611 Unix shell 快照使用共享进程启动器 @charliemarsh-oai
  • #47612 通过全新的设置辅助程序启动 Linux 管道进程 @freeqaz-openai
  • #47613 扩展 Linux spawn-helper 生命周期测试覆盖 @charliemarsh-oai
  • #47617 Linux PTY 启动改由进程设置辅助程序处理 @charliemarsh-oai
  • #47618 排队消息和问题优先使用 Shift+方向键提示 @imac-oai
  • #47619 为全局操作指标添加有界缓冲 @celia-oai
  • #47620 添加可移植的项目信任查找 API @seanh-oai
  • #47623 修复嵌套可写根目录下只读元数据挂载的顺序问题 @jif-oai
  • #47624 在 Guardian 授权上下文中识别 user_message 工具 @ankushg
  • #47625 在没有实验性上下文能力时允许历史记录和笔记 @pmccrary-oai
  • #47629 通过 AgentControl 路由 V2 子代加载 @jif-oai
  • #47630 将 Guardian 审查绑定到操作的目标环境 @jif-oai
  • #47633 通过所选控制器路由留言板代理解析 @jif-oai
  • #47635 启动时将 WebSocket 预连接与工具发现重叠进行 @bromano-oai
  • #47638 按类型分类可重试的 exec-server 准备错误 @mtsui-oai
  • #47639 为文字记录选区添加可配置的选中即复制 @fcoury-oai
  • #47641 遵循 Retry-After 并保留服务器重试截止时间 @anp-oai
  • #47642 为间接工具描述添加模型专属前缀 @rhan-oai
  • #47647 将 Guardian 计算机使用审查应用于浏览器连接器 @johnl-oai
  • #47648 为 app-server 执行器连接支持承载令牌 @euroelessar
  • #47649 为最终代理响应添加选择加入的 OTLP 日志 @xli-oai
  • #47653 将继承的 rollout 历史附加到诊断报告 @dkovalenko-oai
  • #47654 使 Linux 描述符清理支持 fork 安全 @yuzhu-oai
  • #47655 将 exec-server 稳定兼容性测试提升到 Codex 0.156.1 @imac-oai
  • #47657 限制默认的 Bedrock GovCloud 模型目录 @jackz100
  • #47662 向扩展暴露工具分发和时序观测 @euroelessar
  • #47663 在路由感知传输中保留托管网络策略 @jackz100
  • #47665 在完成事件中保留早期统一 exec 输出 @sdcoffey
  • #47670 支持代理留言板工具的模型专属描述 @eknight-oai
  • #47672 修复 Windows 10 上的无重解析目录打开问题 @zm-oai
  • #47673 澄清已注册 Windows 沙箱的设置错误 @zm-oai
  • #47677 支持 MCP 资源工具规范的模型目录覆盖 @rhan-oai
  • #47678 支持 Mermaid 流程图中的带引号标签和 & 符号 @etraut-openai
  • #47679 为模型请求和响应流添加扩展钩子 @euroelessar
  • #47680 添加 exec-server RPC 计时和进程启动跟踪 @anp-oai
  • #47683 添加执行器能力发现 V2 基础设施 @TAFOYA-OAI
  • #47686 使线程所属的 Guardian 上下文始终启用 @felixxia-oai
  • #47688 移除遗留的 Guardian 授权证据路径 @felixxia-oai
  • #47689 使 Guardian 线程上下文捕获变为无条件执行 @felixxia-oai
  • #47690 移除过时的 Guardian 上下文捕获模式分支 @felixxia-oai
  • #47691 为待处理的代理间消息实现 rollout 持久化 @dermanyang-oai
  • #47693 在 CI 中为 DotSlash 安装配置 curl 重试 @anp-oai
  • #47695 在配置期间修复被拒绝的 Windows 沙箱凭据 @zm-oai
  • #47696 在滞后事件测试中避免使用关停超时 @jgershen-oai
  • #47698 允许 WebSocket 测试服务器在等待请求时关闭 @jgershen-oai
  • #47701 允许空闲线程预热并修复 WebSocket 连接 @vkg-oai
  • #47703 为 ChatGPT 后端请求保留账户网络策略 @jackz100
  • #47704 修复 spawn 标志类型并隔离项目配置测试 @seanh-oai
  • #47709 恢复预热通过缓存的 WebSocket 会话进行 @vkg-oai
  • #47712 原子化更新统一 exec 输出缓冲区 @sdcoffey
  • #47713 降低共享配置 crate 中的依赖耦合 @aibrahim-oai
  • #47714 在大小限制下更有选择地保留工具结果元数据 @ningyi-oai
  • #47717 避免模型选择器选项触发递归 TUI 事件分发 @etraut-openai
  • #47741 将工具遥测归属于调用回合的产品 SKU @rennie-openai
  • #47742 在历史笔记和图像生成扩展中遵循网络策略 @jackz100
  • #47745 WebSocket 就绪时跳过启动预热准备 @vkg-oai
  • #47748 统一 Cargo 和 Bazel 的 Rust 调试信息默认值 @aibrahim-oai
  • #47751 减少 RPC 和 Markdown 渲染中的泛型代码重复 @aibrahim-oai
  • #47757 重构工具遥测产品 SKU 匹配以使用允许列表 @rennie-openai
  • #47758 在发出消息预算内保留更多工具元数据 @ningyi-oai
  • #47773 异步用户输入遵循目录 schema @rhan-oai
  • #47797 支持 close-on-exec 附件而不改变 PTY 语义 @jif-oai
  • #47799 默认启用终端输入审批 @jif-oai
  • #47808 允许宿主通过 ThreadManager 提供代理控制器 @jif-oai
  • #47811 在 Guardian 授权中保留显式的用户目标更新 @felixxia-oai
  • #47813 修复睡眠中断测试的事件处理和 fixture 生命周期 @felixxia-oai
  • #47814 修复统一 exec 终止测试中的一次唤醒丢失 @felixxia-oai
  • #47817 稳定线程恢复和记忆双写测试 @jif-oai
  • #47819 授权变更时重试 Guardian 审查 @teddywyly-oai
  • #47820 为宿主代理控制器添加集成测试覆盖 @jif-oai
  • #47824 多代理恢复测试中允许四个并发线程 @felixxia-oai
  • #47828 推荐插件测试中等待登录完成 @felixxia-oai
  • #47830 将 Guardian 异步评分绑定到目标环境权限 @jif-oai
  • #47832 稳定 Rosetta 测试计时和重试延迟遥测 @jif-oai
  • #47847 剪贴板复制期间保持 TUI 响应 @fcoury-oai
  • #47851 跨重复心跳指令保留人工覆盖 @felixxia-oai
  • #47852 避免异步代理解析阻塞在系统代理缓存上 @jif-oai
  • #47856 在全局缓存锁外初始化媒体估算 @jif-oai
  • #47858 在缓存锁外验证已加载的插件 @jif-oai
  • #47861 渲染浏览器登录时避免嵌套读锁 @jif-oai
  • #47867 使用执行器上下文渲染远程权限路径 @iceweasel-oai
  • #47870 为 Guardian 评估添加选择加入的 OTLP 日志 @jif-oai
  • #47871 修复 PID 预留测试竞态并更新 guardian 心跳快照 @jif-oai
  • #47873 在截断前后测量延迟的工具命名空间片段 @mzeng-openai
  • #47879 修复补丁权限检查中的 macOS 系统别名匹配 @felixxia-oai
  • #47881 TUI 粘贴计时使用 Tokio 时钟 @charliemarsh-oai
  • #47886 SQLite 日志失败时保留诊断日志 @dkovalenko-oai
  • #47887 SQLite 诊断日志写入失败时警告用户 @dkovalenko-oai
  • #47889 诊断上传中包含 TUI 客户端日志 @etraut-openai
  • #47891 支持预注册 MCP OAuth 客户端的客户端密钥 @willwang-openai
  • #47894 TUI 测试后清理临时 Codex 主目录 @fcoury-oai
  • #47896 复制文字记录选区时保留 Markdown 格式 @fcoury-oai
  • #47898 在环境网络策略中保留本地绑定继承 @seanh-oai
  • #47899 为 MCP 归因错误添加诊断原因 @peilin-openai
  • #47900 本地线程默认使用分页历史记录 @owenlin0
  • #47901 添加有界的凭据存储遥测辅助工具 @celia-oai
  • #47902 避免配置合并期间重复克隆表 @imac-oai
  • #47903 将配置键别名规范化提前到合并之前 @imac-oai
  • #47904 配置键别名支持嵌套规范路径 @imac-oai
  • #47908 将 tui.whimsy 别名到 tui.effects.starfield @imac-oai
  • #47912 修复线程启动期间的证明路由 @charliemarsh-oai
  • #47913 添加延迟邮箱抢占的选择加入标志 @jif-oai
  • #47915 从构件缓存复用已验证的 V8 校验和清单 @aibrahim-oai
  • #47918 参数化回合发起方头部测试 @aibrahim-oai
  • #47919 通过环境变量传输大型 Windows 沙箱启动负载 @malsamiri-oai
  • #47920 允许在全局 Seatbelt 基名禁止规则下移动目录 @chess-oai
  • #47922 允许完全访问的 Windows 设置通过已注册 Core 进行配置 @zm-oai
  • #47924 使项目信任查找路径显式化并延迟根目录解析 @seanh-oai
  • #47926 文件 blob 上传在 HTTP 502 和 504 时重试 @mtsui-oai
  • #47927 本地登录重定向使用 127.0.0.1 @willwang-openai
  • #47932 从内置目录中移除 GPT-5.4 并保留迁移提示 @andrewgu-oai
  • #47934 将未变更模型的压缩捷径应用到所有会话来源 @hlevy-openai
  • #47935 允许缓存目录满足 MCP 启动就绪条件 @hlevy-openai
  • #47936 使 MCP 和 Code Mode 的输入 schema 预算可配置 @vivi
  • #47937 为线程设置更新添加直接回复 @sayan-oai
  • #47939 将所选插件身份与 MCP 贡献分离 @sayan-oai
  • #47943 移除未使用的 Windows 全局可写审计代码 @iceweasel-oai
  • #47945 按发起方参数化线程初始化分析测试 @eddie-openai
  • #47946 为临时会话添加内存代理留言板 @jif-oai
  • #47947 将根授权上下文扩展到 16 条消息 @felixxia-oai
  • #47951 在 macOS 和 GNU Linux 上为 Bazel 使用预构建 V8 归档 @aibrahim-oai
  • #47952 清理过期的内存留言板注册表条目 @jif-oai
  • #47954 将全屏启动提示移入文字记录 @etraut-openai
  • #47956 图像编辑请求支持文件引用 @kchainani-oai
  • #47957 将工具调用观测限制在发出的 Responses 消息预算内 @ningyi-oai
  • #47962 为 Cargo 和符合条件的 Bazel rustc 作业请求透明大页 @aibrahim-oai
  • #47964 为 Amazon Bedrock Runtime 保留 client-agent 头 @celia-oai
  • #47967 将 Flex 容量不足失败作为独立的终态错误呈现 @sdcoffey
  • #47968 遮蔽守护进程套接字时处理 Btrfs 设备不匹配 @etraut-openai
  • #47970 暴露运行中回合的当前环境选择 @sayan-oai
  • #47971 添加 Pro Max 套餐支持并更新 Pro 显示名称 @etraut-openai
  • #47974 跨可写根目录保留 Git 目录保护 @aionescu-oai
  • #47975 防止过时的语音回答在语音恢复期间重新出现 @etraut-openai
  • #47981 直接根据公布的工具身份准备 MCP 调用 @hlevy-openai
  • #47984 添加多代理生成延迟和失败指标 @owenlin0
  • #47988 在等效绑定间复用 MCP 处理器 @hlevy-openai
  • #47989 为 exec-server 添加仅启动时的 PID 命名空间继承 @open-matt
  • #48004 在线程管理器示例中遵循已配置的认证 @celia-oai
  • #48015 在显示应用链接前验证工具建议的安装 URL @aionescu-oai
  • #48017 测试 code mode 下同一单元格的权限授予与严格审查 @anp-oai
  • #48035 从发现和摘要中移除插件扩展元数据 @victor-openai
  • #48060 在 Guardian 审查间去重保留指令 @felixxia-oai
  • #48069 处理 Guardian 网络审批测试中的提前命令让出 @jif-oai
  • #48072 无接收者时跳过留言板通知预览 @jif-oai
  • #48073 仅运行时权限授予避免 stdin 审批 @jif-oai
  • #48077 为代理留言板请求类型添加 Serde 支持 @jif-oai
  • #48078 通过匿名文件重放 exec-server shell 快照 @jif-oai
  • #48098 为 Guardian 审查保留近期授权上下文 @felixxia-oai
  • #48099 遗留快照中遵循 shell 环境策略 @jif-oai
  • #48100 为远程代理留言板添加 HTTP 客户端 @jif-oai
  • #48101 在 /ps 中显示多行命令预览 @etraut-openai
  • #48109 对 Guardian 文字记录去重保留指令 @felixxia-oai
  • #48110 在异步 Guardian 上下文中去重保留指令 @felixxia-oai
  • #48115 本地压缩期间保留用户文本片段 @felixxia-oai
  • #48116 允许推理捷径触达 Max @etraut-openai
  • #48118 为全屏 TUI 添加可配置的右键粘贴 @fcoury-oai
  • #48119 防止 guardian 授权测试中的 worker 完成竞态 @felixxia-oai
  • #48121 命令中心会话交接期间保持启动草稿可见 @etraut-openai
  • #48123 为 code-mode 观测添加提前让出 @pakrym-oai
  • #48130 在云配置加载器生命周期测试中使用请求通知 @felixxia-oai
  • #48132 允许从只读会话按 Left 键打开命令中心 @etraut-openai

更新内容 （原始）

New Features

  • Configure copy-on-select and right-click paste in the fullscreen TUI. Copied transcript selections now preserve Markdown formatting. (#47639, #47896, #48118)
  • Connect to MCP servers that require pre-registered OAuth client secrets, including through codex mcp add --oauth-client-secret. (#47891)
  • Secure direct exec-server WebSocket connections with bearer tokens, including connections configured through app-server. (#47601, #47648)
  • Image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images. (#47484, #47956)
  • Terminal input approval is enabled by default for commands running with elevated permissions; runtime-only grants no longer cause unnecessary reviews. (#47799, #48073)

Bug Fixes

  • Fixed Windows sandbox failures involving ordinary Windows 10 paths, rejected stored credentials, and large permission policies. (#47672, #47695, #47919)
  • Fixed Linux sandbox startup with nested writable roots and preserved Git metadata protections across writable roots on Linux and macOS. (#47623, #47974)
  • macOS patch operations now recognize system path aliases covered by existing permissions, avoiding unnecessary approval prompts. (#47879)
  • Approval reviews now retry when new user input arrives, so a status question does not automatically abort a pending action. (#47819)
  • Mermaid flowcharts now render quoted labels and ampersands; unsupported diagrams explain why they fall back to source. (#47572, #47678)
  • Command completion events now include early output and report process-launch failures to clients. (#47529, #47665)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.157.0...rust-v0.158.0

  • #47441 Use secondary text styling for the transcript footer shortcut hint @etraut-openai
  • #47447 Extract WebSocket authentication into codex-websocket-auth @euroelessar
  • #47458 Parallelize instruction refresh and tool preparation @hlevy-openai
  • #47484 Add explicit background control to image generation @alicec-oai
  • #47520 Route session agent operations through AgentControl @jif-oai
  • #47529 Emit command lifecycle events for unified exec launch failures @steipete-oai
  • #47536 Route agent lookups and V2 context through AgentControl @jif-oai
  • #47539 Test interrupted one-shot command launch failure persistence @jif-oai
  • #47540 Add an option to disable multi-agent v2 direct messaging @jif-oai
  • #47565 Classify rollout read failures by reason and progress @jif-oai
  • #47568 Record sandbox backends in command execution analytics @iceweasel-oai
  • #47571 Wait for idle before injecting remote compaction test history @felixxia-oai
  • #47572 Explain Mermaid rendering fallbacks in the TUI @etraut-openai
  • #47582 Retain assistant context for Guardian authorization reviews @felixxia-oai
  • #47584 Preserve streamed assistant message order in retained context @felixxia-oai
  • #47585 Preserve delivered assistant messages in Guardian retained context @felixxia-oai
  • #47589 Keep unfinished link destinations out of rich streaming previews @etraut-openai
  • #47590 Serialize numeric custom reasoning effort as JSON numbers @dylan-hurd-oai
  • #47591 Stream daemon executable hashing off the async runtime @etraut-openai
  • #47596 Refresh realtime context for each model request @reia-oai
  • #47597 Guard prerelease channel and canary updates against older versions @imac-oai
  • #47601 Add opt-in WebSocket authentication to exec-server @euroelessar
  • #47603 Add a reap-only drop policy for child processes @charliemarsh-oai
  • #47604 Extend child commands with session and descriptor controls @charliemarsh-oai
  • #47605 Route pipe processes through the shared child launcher @charliemarsh-oai
  • #47610 Use native POSIX spawning for command hooks @charliemarsh-oai
  • #47611 Use the shared process launcher for Unix shell snapshots @charliemarsh-oai
  • #47612 Launch Linux pipe processes through a fresh setup helper @freeqaz-openai
  • #47613 Expand Linux spawn-helper lifecycle test coverage @charliemarsh-oai
  • #47617 Route Linux PTY launches through the process setup helper @charliemarsh-oai
  • #47618 Prefer Shift-arrow hints for queued messages and questions @imac-oai
  • #47619 Add bounded buffering for global operation metrics @celia-oai
  • #47620 Add portable project trust lookup APIs @seanh-oai
  • #47623 Fix read-only metadata mount ordering for nested writable roots @jif-oai
  • #47624 Recognize user_message tools in Guardian authorization context @ankushg
  • #47625 Allow history and notes without experimental context capability @pmccrary-oai
  • #47629 Route V2 child loading through AgentControl @jif-oai
  • #47630 Bind Guardian reviews to the action’s target environment @jif-oai
  • #47633 Route message board agent resolution through the selected controller @jif-oai
  • #47635 Overlap startup WebSocket preconnect with tool discovery @bromano-oai
  • #47638 Classify retryable exec-server preparation errors by type @mtsui-oai
  • #47639 Add configurable copy-on-select for transcript selections @fcoury-oai
  • #47641 Honor Retry-After and preserve server retry deadlines @anp-oai
  • #47642 Add model-specific prefixes to indirect tool descriptions @rhan-oai
  • #47647 Apply Guardian computer-use review to the Browser connector @johnl-oai
  • #47648 Support bearer tokens for app-server executor connections @euroelessar
  • #47649 Add opt-in OTLP logging for final agent responses @xli-oai
  • #47653 Attach inherited rollout history to diagnostic reports @dkovalenko-oai
  • #47654 Make Linux descriptor cleanup fork-safe @yuzhu-oai
  • #47655 Bump the exec-server stable compatibility test to Codex 0.156.1 @imac-oai
  • #47657 Restrict the default Bedrock GovCloud model catalog @jackz100
  • #47662 Expose tool dispatch and timing observations to extensions @euroelessar
  • #47663 Preserve managed network policy in route-aware transports @jackz100
  • #47665 Preserve early unified exec output in completion events @sdcoffey
  • #47670 Support model-specific descriptions for agent message board tools @eknight-oai
  • #47672 Fix no-reparse directory opens on Windows 10 @zm-oai
  • #47673 Clarify registered Windows sandbox setup errors @zm-oai
  • #47677 Support model catalog overrides for MCP resource tool specs @rhan-oai
  • #47678 Support quoted labels and ampersands in Mermaid flowcharts @etraut-openai
  • #47679 Add extension hooks for model requests and response streams @euroelessar
  • #47680 Add exec-server RPC timing and process startup tracing @anp-oai
  • #47683 Add executor capability discovery V2 infrastructure @TAFOYA-OAI
  • #47686 Make thread-owned Guardian context always enabled @felixxia-oai
  • #47688 Remove legacy Guardian authorization evidence paths @felixxia-oai
  • #47689 Make Guardian thread context capture unconditional @felixxia-oai
  • #47690 Remove obsolete Guardian context capture mode branches @felixxia-oai
  • #47691 Materialize rollout persistence for pending inter-agent messages @dermanyang-oai
  • #47693 Configure curl retries for DotSlash installation in CI @anp-oai
  • #47695 Repair rejected Windows sandbox credentials during provisioning @zm-oai
  • #47696 Avoid the shutdown timeout in the lagged-event test @jgershen-oai
  • #47698 Allow WebSocket test server shutdown while waiting for requests @jgershen-oai
  • #47701 Allow idle threads to prewarm and repair WebSocket connections @vkg-oai
  • #47703 Preserve account network policy for ChatGPT backend requests @jackz100
  • #47704 Fix spawn flag typing and isolate project configuration tests @seanh-oai
  • #47709 Route resume prewarm through the cached WebSocket session @vkg-oai
  • #47712 Update unified exec output buffers atomically @sdcoffey
  • #47713 Reduce dependency coupling in shared configuration crates @aibrahim-oai
  • #47714 Preserve tool result metadata more selectively under size limits @ningyi-oai
  • #47717 Avoid recursive TUI event dispatch for model picker selections @etraut-openai
  • #47741 Attribute tool telemetry to the invoking turn’s product SKU @rennie-openai
  • #47742 Honor network policy in history notes and image generation extensions @jackz100
  • #47745 Skip startup prewarm preparation when the WebSocket is ready @vkg-oai
  • #47748 Align Cargo and Bazel Rust debug information defaults @aibrahim-oai
  • #47751 Reduce generic code duplication in RPC and Markdown rendering @aibrahim-oai
  • #47755 Centralize typed app-server response decoding @aibrahim-oai
  • #47757 Refactor tool telemetry product SKU matching to use an allowlist @rennie-openai
  • #47758 Preserve more tool metadata within outgoing message budgets @ningyi-oai
  • #47773 Honor catalog schemas for asynchronous user input @rhan-oai
  • #47797 Support close-on-exec attachments without changing PTY semantics @jif-oai
  • #47799 Enable terminal input approval by default @jif-oai
  • #47808 Allow hosts to provide agent controllers through ThreadManager @jif-oai
  • #47811 Preserve explicit user goal updates in Guardian authorization @felixxia-oai
  • #47813 Fix sleep interruption test event handling and fixture lifetime @felixxia-oai
  • #47814 Fix a lost wakeup in the unified exec termination test @felixxia-oai
  • #47817 Stabilize thread resume and memory dual-write tests @jif-oai
  • #47819 Retry Guardian reviews when authorization changes @teddywyly-oai
  • #47820 Add integration coverage for host agent controllers @jif-oai
  • #47824 Allow four concurrent threads in the multi-agent resume test @felixxia-oai
  • #47828 Wait for login completion in recommended plugin tests @felixxia-oai
  • #47830 Bind Guardian async scores to target environment permissions @jif-oai
  • #47832 Stabilize Rosetta test timing and retry delay telemetry @jif-oai
  • #47847 Keep the TUI responsive during clipboard copies @fcoury-oai
  • #47851 Preserve human overrides across repeated heartbeat instructions @felixxia-oai
  • #47852 Avoid blocking async proxy resolution on the system proxy cache @jif-oai
  • #47856 Initialize media estimates outside the global cache lock @jif-oai
  • #47858 Validate loaded plugins outside the cache lock @jif-oai
  • #47861 Avoid nested read locking when rendering browser sign-in @jif-oai
  • #47867 Render remote permission paths using executor context @iceweasel-oai
  • #47870 Add opt-in OTLP logging for Guardian assessments @jif-oai
  • #47871 Fix PID reservation test race and update guardian heartbeat snapshot @jif-oai
  • #47873 Measure deferred tool namespace fragments before and after truncation @mzeng-openai
  • #47879 Fix macOS system-alias matching in patch permission checks @felixxia-oai
  • #47881 Use Tokio’s clock for TUI paste timing @charliemarsh-oai
  • #47886 Preserve diagnostic logs when SQLite logging fails @dkovalenko-oai
  • #47887 Warn users when SQLite diagnostic log writes fail @dkovalenko-oai
  • #47889 Include TUI client logs in diagnostic uploads @etraut-openai
  • #47891 Support client secrets for pre-registered MCP OAuth clients @willwang-openai
  • #47894 Clean up temporary Codex homes after TUI tests @fcoury-oai
  • #47896 Preserve Markdown formatting when copying transcript selections @fcoury-oai
  • #47898 Preserve local-binding inheritance in environment network policies @seanh-oai
  • #47899 Add diagnostic reasons to MCP attribution errors @peilin-openai
  • #47900 Default local threads to paginated history @owenlin0
  • #47901 Add bounded credential-storage telemetry helpers @celia-oai
  • #47902 Avoid repeated table clones during config merging @imac-oai
  • #47903 Move config key alias normalization ahead of merging @imac-oai
  • #47904 Support nested canonical paths in config key aliases @imac-oai
  • #47908 Alias tui.whimsy to tui.effects.starfield @imac-oai
  • #47912 Fix attestation routing during thread startup @charliemarsh-oai
  • #47913 Add an opt-in flag to defer mailbox preemption @jif-oai
  • #47915 Reuse verified V8 checksum manifests from the artifact cache @aibrahim-oai
  • #47918 Parameterize the turn-start originator header test @aibrahim-oai
  • #47919 Transport large Windows sandbox launch payloads through the environment @malsamiri-oai
  • #47920 Allow directory moves under global Seatbelt basename denies @chess-oai
  • #47922 Allow full-access Windows setup to provision through registered Core @zm-oai
  • #47924 Make project trust lookup paths explicit and defer root resolution @seanh-oai
  • #47926 Retry file blob uploads on HTTP 502 and 504 @mtsui-oai
  • #47927 Use 127.0.0.1 for local login redirects @willwang-openai
  • #47932 Remove GPT-5.4 from bundled catalogs and preserve migration prompts @andrewgu-oai
  • #47934 Apply the unchanged-model compaction shortcut to all session sources @hlevy-openai
  • #47935 Allow cached catalogs to satisfy MCP startup readiness @hlevy-openai
  • #47936 Make MCP and Code Mode input schema budgets configurable @vivi
  • #47937 Add direct replies for thread settings updates @sayan-oai
  • #47939 Separate selected plugin identities from MCP contributions @sayan-oai
  • #47943 Remove unused Windows world-writable audit code @iceweasel-oai
  • #47945 Parameterize the thread initialization analytics test by originator @eddie-openai
  • #47946 Add an in-memory agent message board for ephemeral sessions @jif-oai
  • #47947 Expand root authorization context to 16 messages @felixxia-oai
  • #47951 Use prebuilt V8 archives for Bazel on macOS and GNU Linux @aibrahim-oai
  • #47952 Prune expired in-memory message board registry entries @jif-oai
  • #47954 Move fullscreen startup tips into the transcript @etraut-openai
  • #47956 Support file references in image edit requests @kchainani-oai
  • #47957 Bound tool-call observations to the outgoing Responses message budget @ningyi-oai
  • #47962 Request transparent huge pages for Cargo and eligible Bazel rustc jobs @aibrahim-oai
  • #47964 Preserve the client-agent header for Amazon Bedrock Runtime @celia-oai
  • #47967 Surface Flex capacity failures as a distinct terminal error @sdcoffey
  • #47968 Handle Btrfs device mismatches when masking daemon sockets @etraut-openai
  • #47970 Expose current environment selections for a running turn @sayan-oai
  • #47971 Add Pro Max plan support and update Pro display names @etraut-openai
  • #47974 Preserve Git directory protections across writable roots @aionescu-oai
  • #47975 Prevent stale voice answers from reappearing during speech recovery @etraut-openai
  • #47981 Prepare MCP calls directly from advertised tool identities @hlevy-openai
  • #47984 Add multi-agent spawn latency and failure metrics @owenlin0
  • #47988 Reuse MCP handlers across equivalent bindings @hlevy-openai
  • #47989 Add startup-only PID namespace inheritance to exec-server @open-matt
  • #48004 Respect configured authentication in the thread manager sample @celia-oai
  • #48015 Validate tool suggestion install URLs before showing the app link @aionescu-oai
  • #48017 Test same-cell permission grants and strict review in code mode @anp-oai
  • #48035 Remove plugin extension metadata from discovery and summaries @victor-openai
  • #48060 Deduplicate retained instructions across Guardian reviews @felixxia-oai
  • #48069 Handle early command yields in the Guardian network approval test @jif-oai
  • #48072 Skip message-board notification previews when there are no recipients @jif-oai
  • #48073 Avoid stdin approval for runtime-only permission grants @jif-oai
  • #48077 Add Serde support to agent message board request types @jif-oai
  • #48078 Replay exec-server shell snapshots through unnamed files @jif-oai
  • #48098 Preserve recent authorization context for Guardian reviews @felixxia-oai
  • #48099 Honor shell environment policy in legacy snapshots @jif-oai
  • #48100 Add an HTTP client for remote agent message boards @jif-oai
  • #48101 Show multiline command previews in /ps @etraut-openai
  • #48109 Deduplicate retained instructions against Guardian transcripts @felixxia-oai
  • #48110 Deduplicate retained instructions in async Guardian context @felixxia-oai
  • #48115 Preserve user text parts during local compaction @felixxia-oai
  • #48116 Allow reasoning shortcuts to reach Max @etraut-openai
  • #48118 Add configurable right-click paste to the fullscreen TUI @fcoury-oai
  • #48119 Prevent worker completion races in the guardian authorization test @felixxia-oai
  • #48121 Keep startup drafts visible during command center session handoff @etraut-openai
  • #48123 Add early yielding for code-mode observations @pakrym-oai
  • #48130 Use request notifications in the cloud config loader lifetime test @felixxia-oai
  • #48132 Allow Left to open the command center from read-only conversations @etraut-openai

下载链接