New Features
- Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (openai#36544, openai#36409, openai#36919, openai#36796)
- Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (openai#35722, openai#36007, openai#36380, openai#36948, openai#36950)
- Enable automatically reviewed approvals with the new
--approve-for-meCLI flag. (openai#36373) - Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (openai#36361, openai#36356, openai#35623)
- Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (openai#35724, openai#35725, openai#35590, openai#35742)
- Enable cached web search and remote conversation compaction for Amazon Bedrock. (openai#36938, openai#36981)
Bug Fixes
- Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (openai#36893, openai#36908)
- Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (openai#35649, openai#35957, openai#36834)
- Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (openai#35960, openai#35962, openai#37166)
- Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (openai#35655, openai#35851, openai#37129)
- Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (openai#36960, openai#37132)
- Harden plugin isolation and deny network access when policy updates fail. (openai#37027, openai#36967, openai#36037)
Documentation
- Improve the bundled OpenAI documentation skill with targeted official-source lookup and clearer guidance for Codex, model selection, and API workflows. (openai#36014)
Chores
- Upgrade the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0. (openai#36001, openai#35959, openai#35831)
- Secure macOS release notarization using Azure Key Vault instead of exporting private signing keys. (openai#37154)
- Remove the deprecated
codex exec --full-autoflag; use--sandbox workspace-writeinstead. (openai#36054) - Stop publishing redundant Linux bundle archives; use the standard
codex-package-<target>release archives. (openai#36342)
Changelog
Full Changelog: openai/codex@rust-v0.146.0...rust-v0.147.0