0.144.0

New Features

• Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488)
• Added a writes app-approval mode that allows declared read-only actions while prompting for writes. (#30482)
• MCP tools can now request authentication interactively without an experimental opt-in. (#28772)
• App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274)
• Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503)
• Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621)

Bug Fixes

• Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319)
• Fixed Code Mode crashes in Intel macOS release binaries. (#30953)
• Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574)
• Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494)
• Long-running app sessions now refresh expired authentication for the hosted codex_apps connector. (#31486)
• Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622)

Documentation

• Device-code login warnings now explain how to recognize and stop phishing attempts. (#31648)

Chores

• Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#31348)
• Made the /review branch picker faster and more reliable in large repositories. (#31464)
• Improved automatic review behavior with clearer instructions and a focused tool set. (#31480)
• Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#31636)

Changelog

Full Changelog: rust-v0.143.0...rust-v0.144.0

• #30292 Serialize shared MCP OAuth credential stores @stevenlee-oai
• #30488 [codex-cli] Show reset details in redemption picker @jayp-oai
• #31297 feat(core): emit canonical command execution items @owenlin0
• #31298 feat(core): emit canonical dynamic tool call items @owenlin0
• #31369 test(skills): cover plugin namespace loading @anp-oai
• #30953 fix(release): add missing Intel V8 signing entitlement @malsamiri-oai
• #31355 refactor: make ExternalAuth return CodexAuth @lt-oai
• #31352 ci: increase Windows Bazel local test jobs @anp-oai
• #30482 [codex-rs] Add writes app approval mode @zamoshchin-openai
• #31439 Handle bio policy errors in Codex @fc-oai
• #31319 [codex] add connector runtime latency metrics @mzeng-openai
• #31312 Use model catalog approval messages @dylan-hurd-oai
• #31422 test: generalize exec-server fixture @anp-oai
• #28772 [codex] Enable auth elicitation by default @mzeng-openai
• #28745 [login] support hosted success redirects @rafael-jac
• #31316 chore: extract remote compaction request attempts @celia-oai
• #31299 feat(core): emit canonical sub-agent activity items @owenlin0
• #31285 [1/5] [codex] sync managed-layer bundle schema @hefuc-oai
• #31300 feat(core): emit canonical collab tool call items @owenlin0
• #31301 feat(core): emit canonical collab wait items @owenlin0
• #30319 fix: retry rejected previous-model compaction with selected model @celia-oai
• #30879 Handle mixed-case URLs in Windows command safety @charliemarsh-oai
• #31191 Handle completion separators and popup dismissal @charliemarsh-oai
• #31425 test: add TestAppServer builder @anp-oai
• #31342 http-client: expose WebSocket proxy prerequisites @bolinfest
• #31348 perf(skills): resolve plugin namespaces per root @anp-oai
• #31289 Use canonical indexed web access field @winston-openai
• #31464 Speed up review branch picker via for-each-ref @charliemarsh-oai
• #31332 ci: parameterize Cargo target paths @anp-oai
• #31421 refactor: unify external auth resolution @pakrym-oai
• #31451 test: migrate TestAppServer callers to builder @anp-oai
• #31274 [codex] Add externally provided Codex auth @lt-oai
• #31501 trace hook command execution @wiltzius-openai
• #31356 ci: run V8 source builds on Windows 2025 @anp-oai
• #31283 core: support extension-owned turn items @owenlin0
• #31570 fs: support pruning hidden directories during walks @jif-oai
• #31465 Align empty branch list message with search @charliemarsh-oai
• #31586 Stabilize encrypted MAv2 spawn request test @jif-oai
• #31585 Stabilize remote compaction parity against dynamic skill catalogs @jif-oai
• #31518 Log plugin install failure subtypes @charlesgong-openai
• #31587 Stabilize shared rollout budget test @jif-oai
• #31503 Detect Codex installs managed by pnpm @charliemarsh-oai
• #31525 core: migrate standalone web search to extension-owned turn items @owenlin0
• #31473 feat(core): emit canonical review mode items @owenlin0
• #31452 test: remove TestAppServer constructors @anp-oai
• #31612 Round MCP timeout durations in error messages @jif-oai
• #31138 fix(windows-sandbox): allow deletion in writable roots @fcoury-oai
• #31500 code-mode: move to hosted mode by default @cconger
• #31494 tui: sanitize terminal controls in user messages @etraut-openai
• #31524 chore(protocol): use UUIDv7 for generated item IDs @owenlin0
• #31496 Fall back to HTTP when Apple Git is unavailable @fc-oai
• #31578 Bound exec-server pending RPCs @jif-oai
• #29875 [codex] Sanitize imported session fallback titles @stefanstokic-oai
• #31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai
• #31622 websocket-client: add proxy-aware connector @bolinfest
• #31574 [codex] Grant Windows sandbox access to primary runtime @abhinav-oai
• #31292 Reuse MCP tool snapshot within a sampling request @sayan-oai
• #31630 feat(core): emit canonical hook prompt items @owenlin0
• #31636 feat: change amazon Bedrock GPT-5.6 display names @celia-oai
• #31629 core: stop emitting legacy command events directly @owenlin0
• #31441 core: preserve Responses WebSockets with system proxy @bolinfest
• #31357 ci: route build IO through Dev Drives @anp-oai
• #31461 chore: remove inert cargo audit workflow @anp-oai
• #31614 test: migrate app-server v2 starts to auto env @anp-oai
• #31497 [codex] increase tool schema compaction threshold @fbauer33
• #31650 code-mode: make all approvals trigger elicitation pause @cconger
• #31648 Clarify device-code phishing warning @etraut-openai
• #31663 test(app-server): use native rollout fixture paths @fcoury-oai
• #31330 [codex-apps] Omit internal fields from file payloads @jacobzhou-oai
• #31480 Update auto review prompting @olliem-oai
• #21818 Update models.json @github-actions
• #31427 test: add delayed exec-server transport @anp-oai
• #30278 [codex] Preserve reviewer when resuming threads @viyatb-oai
• #31675 Expand agent core ownership @pakrym-oai
• #31486 [connectors] Refresh codex_apps /ps/mcp auth @stevenlee-oai
• #31361 model-provider: route model discovery through HTTP client factory @bolinfest
• #30188 feat(rollout): persist TurnItems for paginated thread rollouts @owenlin0
• #31596 Use the image generation extension by default @won-openai
• #31684 Update models.json @github-actions