New Features

• Added a built-in Google Cloud Vertex AI provider, configured with model_provider = "gcp". (#56265)
• Added GPT-6.1 Terra to the model catalogs. (#57337)
• Added a repository filter to the session picker and directory grouping to the agent command center, making it easier to navigate sessions across linked worktrees. (#56308)
• Added experimental attached thread forks to the app-server API. (#56351)
• Enabled reasoning effort changes during a conversation by default for supported models. (#56163)
• Enabled memory v2 by default for fresh profiles and added support for importing external-agent memories into it. (#56211, #56414)

Bug Fixes

• Fixed fresh TUI sessions to honor the server’s default approval reviewer when no explicit override is provided. (#56090)
• Kept TUI preferences editable and immediately applicable when execution settings are invalid. (#56091)
• Cancelled remote MCP tool requests when their local response futures are dropped. (#56132)
• Prevented queued agent messages from restarting work after an interrupt or a switch to Plan mode. (#56330)
• Stopped retrying when a provider reports that a model was not found, preserving its error message. (#56445)
• Closed a marketplace URL validation gap that could allow Git to connect to a different host than the one checked against allowed patterns. (#56263)

Changelog

Full Changelog: rust-v0.164.0...rust-v0.165.0

• #56081 Cache decrypted Codex auth and managed secrets @celia-oai
• #56090 Honor server approval reviewer defaults on fresh TUI startup @etraut-openai
• #56091 Keep TUI preferences editable when execution settings are invalid @etraut-openai
• #56097 Prepare TUI startup to accept multiple backend sessions @bc-openai
• #56124 Forward Guardian reviewer events to parent raw-event subscribers @jif-oai
• #56127 Avoid blocking EMA auth status checks on account refresh @jif-oai
• #56132 Cancel MCP tool requests when response futures are dropped @rhan-oai
• #56133 Defer agent mail after empty final answers @eknight-oai
• #56139 Fix the MCP auth status test's IdP OAuth configuration @jif-oai
• #56153 Preserve safe enterprise MCP authentication error details @jif-oai
• #56154 Add managed network review domains before allow rules @olliem-oai
• #56163 Enable reasoning effort overrides by default @felixxia-oai
• #56182 Add AWS SigV4 signing to network proxy MITM hooks @viyatb-oai
• #56210 Stabilize the marketplace staging cleanup test @felixxia-oai
• #56211 Default fresh memory profiles to v2 @jif-oai
• #56214 Remove the u64 cast from WSL DrvFS detection @felixxia-oai
• #56220 Use cargo_bin in the Windows sandbox manifest test @felixxia-oai
• #56222 Consolidate Bazel CI setup into prepare-bazel-ci @anp-oai
• #56224 Reuse current model context across paginated resume config loading @charliemarsh-oai
• #56233 Make Opus encoder test timestamps follow sample time @goodman-oai
• #56234 Emit prompt telemetry only after hooks accept input @abhinav-oai
• #56236 Make the code mode yield/resume test yield explicitly between phases @goodman-oai
• #56246 Bump Bazelisk to 1.30.0 in the Bazel CI setup action @anp-oai
• #56247 Consolidate Rust unit tests under dedicated test modules @dkovalenko-oai
• #56248 Bump uv to 0.13.5 in CI and release workflows @anp-oai
• #56250 Avoid redundant settings checkpoints when resuming threads @owenlin0
• #56261 Isolate V8 source dependencies and their C++ runtime settings @seanh-oai
• #56263 Reject backslashes in HTTP(S) marketplace URL userinfo @willwang-openai
• #56265 Add a built-in Google Cloud Vertex AI provider @celia-oai
• #56266 Preserve MCP disable reasons across runtime overlays @mzeng-openai
• #56272 Upgrade Python SDK model generation to datamodel-code-generator 0.64.0 @anp-oai
• #56274 Wait for cloud config refresh cancellation in loader lifetime tests @goodman-oai
• #56277 Support bounded request bodies in AWS SigV4 signing @viyatb-oai
• #56278 Add negotiated network policy metadata support for MCP calls @viyatb-oai
• #56280 Group consecutive transcript prompts into one background block @bc-openai
• #56284 Scope model catalogs and caches by thread originator @kennyyi-oai
• #56286 Bump @modelcontextprotocol/sdk to 1.32.0 @anp-oai
• #56288 Pin Linux artifact signing to Cosign v3.1.4 @anp-oai
• #56290 Lock Python release build tools with uv @anp-oai
• #56292 Fix MCP cancellation tests to use the metadata callback @anp-oai
• #56293 Use fixed-token auth fixtures in Vertex tests @anp-oai
• #56295 Decouple managed configuration loading from ChatGPT authentication @smurching-oai
• #56297 Mark built-in dummy credentials and strengthen collision checks @viyatb-oai
• #56301 Add TLS forwarding tests for MITM SigV4 requests @viyatb-oai
• #56302 Add hook configuration to environment attachments @andrewgu-oai
• #56304 Add support for environment-scoped managed hooks @andrewgu-oai
• #56308 Separate directory and repository scopes in the TUI @bc-openai
• #56309 Support model-specific writable-root permission wording @goodman-oai
• #56312 Track accepted conversation history in rollout traces @cassirer-openai
• #56313 Apply model catalog overrides to history, notes, and context tools @rhan-oai
• #56314 Add managed configuration loaders for custom config servers @smurching-oai
• #56330 Make agent-message wakes respect interrupts and Plan mode @alishobeiri-oai
• #56342 Match rollout trace image content across request snapshots @cassirer-openai
• #56343 Run environment hooks on their owning executors @andrewgu-oai
• #56351 Add experimental attached thread forks @btraut-openai
• #56364 Allow callers to set the thread source for sampling @keyz
• #56371 Make the Guardian review timeout configurable @vivi
• #56414 Support memory v2 in external-agent memory imports @jif-oai
• #56439 Update ctutils from 0.4.2 to 0.4.5 @felixxia-oai
• #56445 Treat model-not-found provider errors as terminal failures @charliemarsh-oai
• #56453 Make the Realtime V2 background-agent steering test deterministic @felixxia-oai
• #56454 Make sandbox mount cleanup tests tolerate file descriptor reuse @felixxia-oai
• #56459 Add Guardian V3 feature configuration @felixxia-oai
• #56460 Add Guardian v3 local board helpers @felixxia-oai
• #56461 Add silent append support to message boards @felixxia-oai
• #56462 Prevent memory imports from racing with consolidation @jif-oai
• #56465 Add experimental thread memory summary reads @jif-oai
• #57337 [0.165.0-alpha.1.2] Backport GPT-6.1 Terra to the model catalogs @shijie-oai

Release 0.166.0-alpha.4

Release 0.166.0-alpha.3

Release 0.166.0-alpha.2

Release 0.166.0-alpha.1

Release 0.165.0-alpha.1.2

Release 0.165.0-alpha.3

Release 0.165.0-alpha.1.1

New Features

• Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381)
• Set model, reasoning effort, speed, and permission profiles directly with inline /model and /permissions arguments. (#54378, #54383)
• Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)
• Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
• Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
• The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)

Bug Fixes

• Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)
• Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)
• Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)
• CLI configuration overrides are preserved when -c or --config appears at multiple subcommand levels. (#56022)
• Queued prompts now wait for pending permission selections to resolve before continuing. (#55682)
• Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)

Chores

• Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)
• Updated the embedded JavaScript runtime with safety checks for optimized Array.sort operations. (#54519)

Changelog

Full Changelog: rust-v0.163.0...rust-v0.164.0

• #53725 Render Markdown web links as labels in Rex @bc-openai
• #53728 Preserve the remote cwd filter in the in-app resume picker @fcoury-oai
• #53732 Reuse compiled search patterns across compressed rollouts @ethernetdan-openai
• #53733 Default Guardian v2 async classification to conversation mode @felixxia-oai
• #53736 Acquire and cache opt-in executor capability inventories via V2 @TAFOYA-OAI
• #53745 Remove modelSlug from the latest-model resolver output @kkahadze-oai
• #53747 Prefer remote Visualize installs over the bundled plugin @philipp-oai
• #53751 Apply feature overrides when restarting the app-server daemon @jif-oai
• #53753 Extend copy-on-select to composer text @fcoury-oai
• #53754 Support Command/Super shortcuts in the TUI keymap @fcoury-oai
• #53763 Enrich V2 capability discovery with resolved plugin and skill metadata @TAFOYA-OAI
• #53780 Remove redundant Codex manual cache directory check @kkahadze-oai
• #53781 Remove the product-gating TODO from SkillPolicy @kkahadze-oai
• #53784 Forward client voice session IDs in realtime requests @chrisdong-oai
• #53790 Fix cancellation of macOS user-verification prompts @bz-openai
• #53794 Retain rollout migration locks across worker cancellation @jif-oai
• #53795 Use the bundled model catalog in the MCP startup invalidation test @OLI-OAI
• #53797 Refresh Guardian reviews when review context changes @jif-oai
• #53800 Wire background compaction into the turn lifecycle @rka-oai
• #53804 Keep the Agent command center visible during archive and delete @etraut-openai
• #53805 Add safe diagnostics to workspace routing configuration errors @etraut-openai
• #53811 Support daemon installation from Windows WinGet packages @etraut-openai
• #53816 Reject Guardian review threads during interactive CLI resume @dylan-hurd-oai
• #53827 Prune unused app-server daemon releases safely @etraut-openai
• #53831 Track content provenance through prompt assembly and compaction @tz-openai
• #53845 Fix daemon updater socket binding and bootstrap readiness on Unix @etraut-openai
• #53853 Reuse staged file digests when preparing daemon installs @charliemarsh-oai
• #53859 Record bucketed terminal sizes in TUI telemetry @imac-oai
• #53872 Refresh model instructions in incremental-tool context windows @rhan-oai
• #53879 Preserve running turn recovery across thread settings updates @bc-openai
• #53895 Resume unloaded subagent threads when selected in the TUI @etraut-openai
• #53897 Isolate daemon package tests to reduce disk contention @etraut-openai
• #53908 Keep the agent dashboard browsable during task removal @etraut-openai
• #53932 Preserve conversation history when compaction fails @jif-oai
• #53940 Bound rollout input for memory extraction @jif-oai
• #53947 Stop rollout reads when the calling task is cancelled @jif-oai
• #53963 Test memory extraction budgets with excluded items and ciphertext @jif-oai
• #53969 Avoid reconnect races in the daemon restart test @jif-oai
• #53987 Skip service backoff for stale Guardian authorization retries @jif-oai
• #53990 Keep host MCP and plugin configuration local with remote environments @jif-oai
• #53991 Report the reason for ChatGPT token refresh requests @tejsudha-openai
• #53996 Bump rustls to 0.23.46 @jif-oai
• #53997 Filter rollout filenames before checking compressed siblings @bbrown-oai
• #54003 Include compressed rollouts in doctor storage statistics @jif-oai
• #54008 Fix session lookup and resume after rollout compression @jif-oai
• #54027 Preserve Windows startup variables and MXC child environment defaults @iceweasel-oai
• #54032 Bound concurrent Git diffs for untracked files @yuzhu-oai
• #54033 Extend memory extension resource retention to 14 days @josh-oai
• #54039 Return async Guardian approvals before review cleanup finishes @jif-oai
• #54044 Keep fork lineage ahead of paginated transcript history @fcoury-oai
• #54046 Track approval cancellation sources and Guardian context changes @vkg-oai
• #54047 Restore elapsed time for replayed in-progress turns @etraut-openai
• #54048 Defer folder trust checks until starting a task from agents overview @etraut-openai
• #54050 Scope TUI skill refreshes and workspace commands to explicit directories @etraut-openai
• #54053 Add Responses API client metadata patches for turn start and steer @marksteinbrick-oai
• #54056 Coalesce overlapping native TLS root certificate loads @jif-oai
• #54057 Distinguish unsupported evidence in Decisions comparison metrics @swastik-oai
• #54058 Forward turn metadata to image generation and edit requests @duc-openai
• #54059 Support store-owned preparation when resuming threads @owenlin0
• #54060 Limit unarchive scans to the requested thread's archived rollouts @bz-openai
• #54069 Fix Windows environment handling for remote MCP servers @iceweasel-oai
• #54070 Expose gateway authentication as a reusable OAuth session API @smurching-oai
• #54076 Avoid false URL-launch detections in literal PowerShell commands @jif-oai
• #54078 Update gix to 0.89.0 and gix-url to 0.40.0 @jif-oai
• #54079 Retire rejected MCP OAuth refresh tokens @mzeng-openai
• #54080 Extract TUI user-turn submission into a dedicated module @bc-openai
• #54081 Centralize vertical navigation in TUI list views @bc-openai
• #54082 Stabilize the Guardian network review timeout test @felixxia-oai
• #54087 Upgrade Bazel's rules_python to 2.4.2 @dkovalenko-oai
• #54094 Preserve specific MCP failure codes in metrics and spans @TAFOYA-OAI
• #54096 Add Bazel targets for on-demand schemas and Python SDK generation @dkovalenko-oai
• #54097 Show Daybreak notices after the session header @charliemarsh-oai
• #54098 Keep environment tools stable across readiness changes @aibrahim-oai
• #54099 Wait for readiness in the SIGTERM cancellation test @felixxia-oai
• #54113 Embed generated app-server schema bundles in Bazel builds @dkovalenko-oai
• #54114 Report terminal completion states and blocking reasons @cconger
• #54119 Allow stdin review under active grants with sandbox prompts disabled @tepman-oai
• #54133 Record per-tool incremental update and description size metrics @akira-oai
• #54135 Allow large file writes over direct exec-server WebSockets @ostepanian
• #54151 Generate keymap descriptors and binding accessors from one catalog @bc-openai
• #54169 Reload the model catalog after account changes @smurching-oai
• #54170 Preserve ChatGPT authentication for Gov MCP servers @lsingh-oai
• #54175 Retire worktree and voice feature flags @bc-openai
• #54216 Show image previews in the fullscreen transcript @etraut-openai
• #54217 Apply syntax theme colors to Markdown prose in the TUI @etraut-openai
• #54250 Add regression tests for case-variant metadata protection @jif-oai
• #54257 Preserve recent speech when trimming realtime transcripts @jif-oai
• #54263 Require fresh Guardian approval for escalated tool retries @jif-oai
• #54264 Track Guardian transcript admission across failed reviews @jif-oai
• #54265 Add regression coverage for Guardian sandbox retry approvals @jif-oai
• #54273 Protect metadata writes through macOS case aliases @jif-oai
• #54278 Share Guardian image deduplication and checkpoint restoration @felixxia-oai
• #54281 Attribute compaction summaries to the assistant in Guardian transcripts @jif-oai
• #54309 Enable credential masking for remote exec-server commands @viyatb-oai
• #54315 Keep TUI Markdown colors readable against their backgrounds @fcoury-oai
• #54316 Centralize context fragment kind constants @ioanbudea-OAI
• #54346 Add scoped executor credential auth for remote exec-server @viyatb-oai
• #54351 Use the turn index for turn-scoped item pagination @bz-openai
• #54363 Filter uninspectable network roots from implicit MXC read grants @iceweasel-oai
• #54365 Prevent duplicate assistant messages around interleaved commands @fcoury-oai
• #54369 Retry SQLite operations on transient writer co...

Release 0.165.0-alpha.1