New Features

• Remote plugins are now enabled by default, with richer catalog rows, npm marketplace sources, and visible remote/local versions. (#30297, #26705, #29375, #30981)
• Codex can route authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations. (#26708, #26709, #31335)
• Added codex remote-control pair for generating manual pairing codes from a running daemon. (#29913)
• Added Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models, with first-class support for max reasoning effort. (#30285, #30467)
• MCP tools now use tool search by default, and ChatGPT-hosted MCP servers can explicitly use session authentication. (#29486, #29733)
• App-server clients can inspect environments, list descendant threads, and fork history through a specific turn. (#30291, #29591, #30277) Bug Fixes
• Fixed Windows ConPTY input handling for line endings and backspace, plus sandbox credential retry edge cases. (#29734, #29624, #29637)
• Fixed stale TUI safety prompts and cancelled reviews that could leave MCP startup appearing busy. (#30490, #31189)
• Improved recovery when exec servers are temporarily offline and prevented remote-control token refresh retry storms. (#30098, #30201)
• Preserved trailing realtime transcript text and terminal rollout events during shutdown. (#29918, #30144)
• Improved incremental WebSocket request success by ignoring response metadata during comparisons. (#30770)
• Reduced installer failures from GitHub API rate limits by reusing release metadata. (#31056) Documentation
• Documented UUID7 thread and turn IDs, plus recommended remote-executor integration-test workflows. (#27714, #29790) Chores
• Updated OpenSSL, Hono, fast-uri, quick-xml, and crossbeam-epoch to address security advisories. (#29487, #29650, #30941, #31308) Changelog Full Changelog: rust-v0.142.0...rust-v0.143.0
• #26708 PAC 3 - Add Windows system proxy resolver @canvrno-oai
• #28769 Register full CDP requirements feature @syuan-oai
• #29485 [codex] fetch featured IDs for remote plugins @ericning-o
• #29487 Upgrade bundled OpenSSL to 3.6.3 @jif-oai
• #29489 [codex] Update esbuild to 0.28.1 @pakrym-oai
• #29488 [plugins] Add dark-mode logo metadata @drewschuster-openai
• #29249 [codex] migrate environment context to model world state @pakrym-oai
• #29494 core: wrap token budget window context @bolinfest
• #29417 [codex] replace remote images with model-visible error text @rka-oai
• #28360 feat(core): store turn_id on ResponseItem metadata @owenlin0
• #29486 [codex] Use tool search for MCP tools by default @sayan-oai
• #29501 path-uri: clarify host-native path conversion @anp-oai
• #29504 fix: world state response item test @celia-oai
• #26704 TUI Plugin Sharing 4 - cover remote plugin catalog flows @canvrno-oai
• #29419 [codex] reject remote images at app-server ingress @rka-oai
• #28992 chore: improve expired Bedrock credential errors @celia-oai
• #29467 Make formatter output quiet on success @anp-oai
• #26709 PAC 4 - Add macOS system proxy resolver @canvrno-oai
• #29490 chore: warn when Code Mode lacks model metadata @celia-oai
• #29493 mcp: accept foreign absolute cwd for remote stdio @anp-oai
• #29473 Propagate safety buffering treatment metadata @fc-oai
• #24092 [codex] Reject unlowered PowerShell AST regions @bookholt-oai
• #29155 [codex] Expose service tier and reasoning effort in OTEL @daniel-oai
• #29068 [codex] stylistic changes @rka-oai
• #29518 Remove redundant Codex Apps manager flag @aibrahim-oai
• #27946 [codex] Use input items for Responses Lite tools @rka-oai
• #29528 Centralize Codex Apps client handling @aibrahim-oai
• #29577 Handle additional tools in image URL validation @aibrahim-oai
• #29575 Remove redundant Codex Apps cache guard @aibrahim-oai
• #29583 Group Codex Apps client setup @aibrahim-oai
• #29358 Allow codex sandbox to consume MCP sandbox state @jif-oai
• #29599 Stop persisting bridged log events @jif-oai
• #29615 Fix Codex Apps auth elicitation hang @jif-oai
• #29067 Namespace multi-agent v2 tools under collaboration @jif-oai
• #29614 path-uri: add lexical containment @jif-oai
• #28426 Share resumed rollout history @charliemarsh-oai
• #29634 Update rmcp to 1.8.0 @jif-oai
• #29650 Update vulnerable Hono and fast-uri dependencies @jif-oai
• #29498 [codex] Instrument rollout persistence bytes @wiltzius-openai
• #29659 [core] debounce current-time reminders by elapsed time @rka-oai
• #29608 Shut down superseded MCP managers on refresh @jif-oai
• #29527 core: use turn-owned world state for inline compaction @sayan-oai
• #29672 [codex] Handle additional tools in rollout persistence metrics @rka-oai
• #29669 Handle additional tools in rollout persistence metrics @winston-openai
• #29680 Revert "Handle additional tools in rollout persistence metrics" @rasmusrygaard
• #27714 app-server: document thread and turn IDs are UUID7 @owenlin0
• #29456 Prepare managed network sandbox context @jif-oai
• #28418 chore(core) rm AskForApproval::OnFailure @dylan-hurd-oai
• #29675 core: add extra metadata field to Thread struct @kumquatexpress
• #29013 Keep managed MITM CA private keys in proxy memory @winston-openai
• #29495 Separate local and remote plugin analytics IDs @jameswt-oai
• #29671 [codex] Preserve proxy state for filesystem sandbox helpers @iceweasel-oai
• #29513 [codex] allow image generation with provider auth @richardopenai
• #29526 core: resolve view_image paths in selected environment @anp-oai
• #29696 [codex] Fix stale approval policy in MCP test @sayan-oai
• #29704 [codex] Fix stale approval policy in MCP test @kumquatexpress
• #29547 core: use current step environments for tools @sayan-oai
• #28976 Add MCP tool call error metrics @stevenlee-oai
• #27045 feat(guardian): include connected account email in app reviews @viyatb-oai
• #29620 Decouple plugin manifest path resolution @jif-oai
• #29666 [codex] Report the exec-server working directory @rasmusrygaard
• #29705 feat(app-server): thread/turns/items/list -> thread/items/list @owenlin0
• #29716 code-mode: Rename codex_code_mode::CodeModeService @cconger
• #29712 test: branch on target OS instead of runner flavor @anp-oai
• #29728 core tests: rename automatic environment builder @anp-oai
• #29158 path-uri: remove legacy path deserialization @anp-oai
• #29519 core: persist initial context window metadata @bolinfest
• #28918 Make selected plugin roots URI-native @jif-oai
• #29515 [codex] define code mode host handshake protocol @cconger
• #29715 [codex] surface rollout budget exhaustion @rka-oai
• #29732 code-mode: Remove Session::is_alive() @cconger
• #29626 Load executor skills without host path conversion @jif-oai
• #29714 protocol: separate app and exec RPC ownership @anp-oai
• #29664 refactor: extract context window token status @bolinfest
• #29665 fix: scope context remaining to body window @bolinfest
• #29744 [codex] rename rollout budget error to session budget error @rka-oai
• #29739 Update new_context_window instructions @andmis
• #29743 core: reset context for token budget compaction @bolinfest
• #29477 Support thread-level originator overrides @alexsong-oai
• #29745 core: add wait_for_environment for starting environments @sayan-oai
• #28630 [codex] trace MCP startup latency @rphilizaire-openai
• #29750 chore: assign amsg_ IDs to agent messages @bolinfest
• #29746 test: add app-server auto environment helper @anp-oai
• #29711 Let image generation extension hosts control output persistence @won-openai
• #29762 [codex] Reuse compacted history replacement for new context windows @pakrym-oai
• #29768 [codex] Update bundled skill installer guidance @sayan-oai
• #29690 [plugins] Add marketplace source requirements @xl-openai
• #29765 [codex] Ignore local curated plugins when remote catalog is active @xl-openai
• #29767 [codex] Assign response item IDs in forked history @pakrym-oai
• #29721 auth: move domain mode below app wire types @anp-oai
• #29753 [plugins] Enforce marketplace source admission requirements @xl-openai
• #29722 config: own layer provenance types @anp-oai
• #29723 connectors: own app metadata types @anp-oai
• #29788 test: run app-server integration tests under Wine @anp-oai
• #29789 test: use automatic environments in app-server integration tests @anp-oai
• #29790 docs: document remote executor integration testing @anp-oai
• #29815 [codex] Remove auto-compaction opt-out @rhan-oai
• #29628 Keep executor plugin MCP paths URI-native @jif-oai
• #29731 [codex] Emit implicit skill usage for support reads @alexsong-oai
• #29829 Persist agent messages as response items @jif-oai
• #29841 Add a bounded filesystem walk RPC @jif-oai
• #29842 Use fs/walk for environment skill discovery @jif-oai
• #29567 [codex] show external import result counts @charlesgong-openai
• #29831 Cache plugin namespace during executor skill discovery @jif-oai
• #29720 ci: fail jobs that dirty the worktree @anp-oai
• #29887 Fix environment skill discovery after merge @jif-oai
• #29734 [codex] fix Windows ConPTY input handling @iceweasel-oai
• #28593 [codex] suppress low usage remaining warnings when credits are available @brooks-oai
• #29624 Preserve Windows sandbox identity during credential retry @jif-oai
• #27466 [codex] Trace exec-server JSON-RPC requests @richardopenai
• #29844 Follow directory symlinks in filesystem walks @jif-oai
• #29637 Skip credential refresh for WindowsApps launch failures @jif-oai
• #29591 feat(app-server): list descendant threads by ancestor @btraut-openai
• #28034 feat(network-proxy): experimental local credential broker @winston-openai
• #29736 [codex] Inject agent graph store into ThreadManager @wiltzius-openai
• #29889 [apps] Thread structured icon assets through app list @drewschuster-openai
• #29724 mcp: keep elicitation requests below app wire types @anp-oai
• #29684 [plugins] Track plugin install requests by ID @adaley-openai
• #29870 Pipeline bounded AGENTS.md and Git root probes @jif-oai
• #29893 [codex] dedupe remote control account header @shuo-openai