New Features
- Name new sessions with
/newor/clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) - Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979)
- Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251)
- Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098)
- Enable standalone web search for compatible custom model providers. (#34846)
- Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198)
Bug Fixes
- Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239)
- Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151)
- Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664)
- Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, #35021, #34775, #34778, #35365, #35375)
- Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, #34624, #35036)
- Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, #34738, #34997)
Documentation
- Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669)
- Clarify Windows drive-letter canonicalization for
PathUrivalues. (#34667)
Chores
- Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, #34508, #34729, #34910)
- Sign and notarize bundled macOS helper executables before packaging. (#35264)
- Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, #34766, #34825)
- Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, #35537)
Changelog
Full Changelog: rust-v0.145.0...rust-v0.146.0
- #34447 Add a route-aware HTTP client pool @copyberry
- #34449 Make external session detection limits configurable @copyberry
- #34451 Attribute external agent imports by provider @copyberry
- #34463 Support alpha hotfix release versions @copyberry
- #34469 Preserve thread settings for goal-first and forked threads @copyberry
- #34476 Separate HTTP execution from request logging @copyberry
- #34478 Honor
CARGO_HTTP_CAINFOin managed proxy environments @copyberry - #34479 Re-resolve system proxy routes across redirects @copyberry
- #34481 Add route-aware redirect test coverage @copyberry
- #34483 Expand route-aware proxy redirect coverage @copyberry
- #34490 Route backend requests through the HTTP client factory @copyberry
- #34491 Route cloud environment discovery through the HTTP client pool @copyberry
- #34495 Honor system proxy settings in the daemon updater @copyberry
- #34497 Preserve custom arg0 for sandboxed exec-server processes @copyberry
- #34505 Mirror Rust release artifacts to Cloudflare R2 @copyberry
- #34506 Respect system proxies during plugin startup sync @copyberry
- #34508 Publish release metadata to R2 channels @copyberry
- #34509 Honor system proxy settings for remote plugins @copyberry
- #34514 Add an optional releases.openai.com installer source @copyberry
- #34516 Allow
numerin codespell checks @copyberry - #34517 Pass empty inherited FDs in the Wine PTY test @copyberry
- #34522 Split MCP connection manager into focused modules @copyberry
- #34525 Add step-scoped data to extension contributors @copyberry
- #34533 Centralize compacted rollout item construction @copyberry
- #34540 Detach Git metadata commands from stdin @copyberry
- #34544 Size Noise handshake buffers to their messages @copyberry
- #34547 Add reciprocal rank fusion skill selection @copyberry
- #34550 Test thread-scoped MCP refresh behavior @copyberry
- #34551 Simplify TUI restoration for the external editor @copyberry
- #34552 Remove unused RtOptions setters @copyberry
- #34553 Remove the unused TUI shutdown app command @copyberry
- #34558 Remove obsolete ignored tests @copyberry
- #34559 Add backend client support for Codex user settings @copyberry
- #34561 Extract MCP binding clients from the connection manager @copyberry
- #34562 Record rollout boundaries for materialized turns @copyberry
- #34563 Page through inherited thread history @copyberry
- #34566 Protect fork history references during rollout cleanup @copyberry
- #34570 Highlight CUDA files as C++ in the TUI @copyberry
- #34573 Accept
forceRefetchin plugin list requests @copyberry - #34578 Gate the TUI suspend restore helper on Unix @copyberry
- #34581 Add routing-card lexical skill selection @copyberry
- #34588 Bind MCP calls to captured catalog revisions @copyberry
- #34590 Add keyed shell environment policy filters @copyberry
- #34597 Enforce exact values from managed config requirements @copyberry
- #34598 Skip missing paths in filesystem sandbox entries @copyberry
- #34601 Sanitize skill names in injection metrics @copyberry
- #34603 Allow explicitly permitted loopback proxy targets @copyberry
- #34605 Allow naming sessions with
/newand/clear@copyberry - #34611 Add compatibility policies for skill catalog rendering @copyberry
- #34612 Detach non-interactive subprocesses from stdin @copyberry
- #34613 Route Windows sandbox proxy traffic by restricting SID @copyberry
- #34615 Initialize missing-path behavior in exec-server sandbox test @copyberry
- #34620 Add exec-server network policy callback types @copyberry
- #34621 Load paginated model context across rollout lineages @copyberry
- #34622 Increase the auto-review model override test timeout @copyberry
- #34624 Terminate Windows process trees with job objects @copyberry
- #34625 Fix Windows TUI navigation key handling @copyberry
- #34626 Scale skill metadata budgets with model context windows @copyberry
- #34629 Harden Windows elevated sandbox startup @copyberry
- #34630 Add a policy-aware HTTP client builder @copyberry
- #34631 Migrate agent identity to the shared HTTP client @copyberry
- #34636 Keep the TUI open when starting a turn fails @copyberry
- #34637 Attribute review findings to repository rules @copyberry
- #34640 Update Windows process-tree tests for inherited FDs @copyberry
- #34641 Harden managed proxy setup for sandboxed executions @copyberry
- #34643 Migrate login HTTP construction to
HttpClient@copyberry - #34644 Verify Git plugin SHA checkouts @copyberry
- #34645 Always assign response item IDs @copyberry
- #34649 Propagate resolved proxy policy through auth routing @copyberry
- #34650 Require auth managers to receive routing configuration @copyberry
- #34651 Migrate core test support to the shared HTTP client @copyberry
- #34654 Render turn diffs for foreign environment paths @copyberry
- #34655 Honor configured proxy routes for auth refreshes @copyberry
- #34664 Preserve approvals reviewer when forking threads @copyberry
- #34667 Document
PathUridrive letter canonicalization @copyberry - #34669 Expand codex-http-client usage guidance @copyberry
- #34678 Route LM Studio requests through the shared HTTP client @copyberry
- #34681 Add session headers to realtime conversation starts @copyberry
- #34687 Configure Codex Auto Review model metadata @copyberry
- #34708 Rename the MCP connection manager to
McpConnectionSet@copyberry - #34713 Order unified exec lifecycle events reliably @copyberry
- #34728 Skip Git enrichment for prewarm and Guardian turns @copyberry
- #34729 Publish stable installer aliases to R2 @copyberry
- #34732 Preserve skill catalog entries under metadata pressure @copyberry
- #34733 Make MCP resource clients follow the latest runtime @copyberry
- #34734 Remove step-scoped data from extension contributors @copyberry
- #34738 Drop skill descriptions before omitting catalog entries @copyberry
- #34744 Update skills budget tests for extension API changes @copyberry
- #34746 Match core skill ordering in extension catalogs @copyberry
- #34747 Register the MCP 2026-07-28 feature flag @copyberry
- #34761 Reduce app-server JSON serialization overhead @copyberry
- #34763 Retry websocket requests when the previous response is missing @copyberry
- #34766 Reduce typed app-server request serialization overhead @copyberry
- #34769 Add the git attribution extension @copyberry
- #34770 Enable exec-server network policy callbacks @copyberry
- #34771 Size unified mention popups to visible results @copyberry
- #34772 Normalize whitespace-only lines in agent messages @copyberry
- #34775 Clamp session headers to narrow terminal widths @copyberry
- #34777 Include the final agent message in turn completion summaries @copyberry
- #34778 Coalesce wrapped OSC 8 hyperlinks in the TUI terminal @copyberry
- #34779 Use the live parent history mode when forking agents @copyberry
- #34781 Upgrade Bazel Rust and LLVM dependencies @copyberry
- #34784 Reject dynamic environments named
local@copyberry - #34785 Report skill catalog truncation during rendering @copyberry
- #34786 Simplify app-server integration test setup @copyberry
- #34789 Avoid unnecessary post-sampling token estimates @copyberry
- #34795 Remove obsolete step store from git attribution tests @copyberry
- #34796 Skip syntax highlighting for lines over 4 KiB @copyberry
- #34797 Suppress omission notices in core-compatible skill catalogs @copyberry
- #34806 Use path URIs in shell approval keys @copyberry
- #34808 Centralize SQLite connection configuration @copyberry
- #34811 Fix network access rendering in sandbox prompts @copyberry
- #34814 Consolidate thread startup around
StartThreadOptions@copyberry - #34816 Support configurable realtime BEM channel prefixes @copyberry
- #34819 Enable git attribution across Codex entry points @copyberry
- #34823 Run code-mode tests in non-Windows Bazel CI @copyberry
- #34824 Normalize Guardian review cwd reuse keys @copyberry
- #34825 Reduce cloning when building Responses requests @copyberry
- #34827 Remove Windows Bazel lint toolchain overrides @copyberry
- #34831 Flush analytics before in-process app server shutdown @copyberry
- #34835 Track compaction time in turn profiles @copyberry
- #34839 Preserve user input when MCP startup is interrupted @copyberry
- #34840 Add persisted thread pinning to the app server @copyberry
- #34844 Remove first-party type from app metadata @copyberry
- #34845 Track multi-agent mode in world state @copyberry
- #34846 Allow custom providers to opt into standalone web search @copyberry
- #34847 Use Guardian model limits for review sessions @copyberry
- #34849 Cache remote plugin catalogs by scope @copyberry
- #34850 Disable image generation for Free-plan accounts @copyberry
- #34851 Use batch metadata for plugin app summaries @copyberry
- #34852 Wake sleeping threads for queued agent mail @copyberry
- #34877 Wait for local plugin cache refreshes in
plugin/list@copyberry - #34883 Set a default user agent for MCP HTTP requests @copyberry
- #34887 Allow disabling the multi-agent wait tool @copyberry
- #34910 Prefer releases.openai.com in standalone installers @copyberry
- #34930 Centralize thread MCP state in
McpRuntime@copyberry - #34931 Use the API plugin marketplace for Amazon Bedrock @copyberry
- #34940 Keep session defaults static during config batch writes @copyberry
- #34952 Reuse MCP connections across runtime refreshes @copyberry
- #34957 Replace closed MCP connections during reconciliation @copyberry
- #34959 Handle @ in local marketplace paths @copyberry
- #34962 Move MCP connection helpers into the test module @copyberry
- #34969 Keep the sleep tool outside code mode @copyberry
- #34978 Honor disabled redirects in route-aware HTTP clients @copyberry
- #34979 Infer the bundled Claude Code plugin marketplace @copyberry
- #34981 Record externally completed agent config imports @copyberry
- #34986 Enforce single-writer ownership for paginated threads @copyberry
- #34989 Preserve timestamps when importing external agent sessions @copyberry
- #34991 Allow omitting MCP tool prefixes per server @copyberry
- #34994 Honor the configured SQLite home across state consumers @copyberry
- #34995 Initialize execution environments with the final HTTP policy @copyberry
- #34996 Separate Codex error details from retry metadata @copyberry
- #34997 Warn when skill catalogs exceed their context budget @copyberry
- #35000 Make TUI turn interrupts nonblocking @copyberry
- #35011 Keep side conversations open when switching threads @copyberry
- #35012 Expose remote skill icon URLs through app server @copyberry
- #35013 Support incremental replay of updated thread items @copyberry
- #35015 Align installed app duration metrics with the legacy baseline @copyberry
- #35016 Add trusted plugin script attribution @copyberry
- #35020 Attribute command executions to trusted plugin scripts @copyberry
- #35021 Adapt keyboard event reporting to the terminal @copyberry
- #35023 Route exec-server HTTP through configured proxy policy @copyberry
- #35028 Preserve refreshed Apps tools across MCP runtime updates @copyberry
- #35029 Preserve plugin attribution across command approvals @copyberry
- #35031 Enforce writer ownership for thread archive and deletion @copyberry
- #35033 Expose Browser Use requirements through the app server @copyberry
- #35034 Route environment registry requests through the shared HTTP client @copyberry
- #35036 Preserve Windows sandbox proxy settings in guardian sessions @copyberry
- #35048 Track app/read request duration @copyberry
- #35049 Register the Guardian V2 feature flag @copyberry
- #35054 Allow disabling the update_plan tool @copyberry
- #35056 Route exec-server WebSockets through configured proxies @copyberry
- #35059 Decouple exec-server HTTP from reqwest types @copyberry
- #35063 Track deferred tool namespaces in world state @copyberry
- #35065 Avoid duplicating deferred sources in tool search @copyberry
- #35067 Fix Bazel test configuration for platform-specific data @copyberry
- #35078 Add WebSocket transport to the code-mode host @copyberry
- #35098 Support remote code-mode hosts in app-server @copyberry
- #35105 Support Agent Plugins manifests @copyberry
- #35106 Allow hosts to customize
wait_for_environmentdescriptions @copyberry - #35144 Prewarm MCP runtime updates in the background @copyberry
- #35146 Refresh MCP runtimes when session auth changes @copyberry
- #35151 Reconnect MCP servers on explicit refresh @copyberry
- #35164 Encapsulate MCP refresh coordination @copyberry
- #35168 Route extension warnings to app-server threads @copyberry
- #35172 Compact host skill paths under metadata pressure @copyberry
- #35175 Wait for reloaded worker completion in the resume test @copyberry
- #35184 Expose executor skills through skill tools @copyberry
- #35194 Preserve output from hooks that exit before reading stdin @copyberry
- #35196 Make the Apps recovery exposure test deterministic @copyberry
- #35198 Enable resource reads for explicit executor skills @copyberry
- #35204 Refresh MCP runtimes across thread startup @copyberry
- #35205 Use current MCP authority for elicitation reviews @copyberry
- #35213 Refresh managed MCP requirements for active threads @copyberry
- #35216 Refresh MCP config independently across threads @copyberry
- #35220 Support paginated thread forks @copyberry
- #35221 Avoid persisting non-local threads for hook transcripts @copyberry
- #35238 Support the ent26 enterprise plan @copyberry
- #35239 Route MCP auth discovery through runtime HTTP clients @copyberry
- #35251 Support ephemeral forks of paginated threads @copyberry
- #35254 Expose workspace plugin publish capability @copyberry
- #35261 Propagate remote plugin IDs to skill metadata @copyberry
- #35262 Track remote plugin IDs in skill invocation analytics @copyberry
- #35264 Sign bundled macOS helper binaries @copyberry
- #35266 Allow disabling the in-process code-mode host fallback @copyberry
- #35267 Harden network approval cancellation and concurrency @copyberry
- #35271 Include code-mode tool names in Responses Lite metadata @copyberry
- #35275 Trace remote exec-server connection setup @copyberry
- #35280 Skip plugin MCP filtering when no allowlists are configured @copyberry
- #35359 Handle exec-server network policy requests in the client @copyberry
- #35363 Include item start times in completion events @copyberry
- #35364 Bound Code Mode metadata compatibility headers @copyberry
- #35365 Keep unified mention results fresh @copyberry
- #35375 Make the keymap action menu responsive @copyberry
- #35408 Ignore generated system skills in the skills watcher @copyberry
- #35414 Raise the MCP server recursion limit @copyberry
- #35523 Shut down the in-process outbound router explicitly @copyberry
- #35524 Preserve terminal turn errors in replayed history @copyberry
- #35525 Skip inactive TUI threads without pending user interaction @copyberry
- #35530 Track model and personality in world state @copyberry
- #35537 Add managed policy for in-app updates @copyberry