OpenAI Codex CLI rust-v0.147.0

New Features

• Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)

• Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)

• Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373)

• Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)

• Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)

• Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)

Bug Fixes

• Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)

• Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)

• Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (#35960, #35962, #37166)

• Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (#35655, #35851, #37129)

• Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (#36960, #37132)

• Harden plugin isolation and deny network access when policy updates fail. (#37027, #36967, #36037)

Documentation

• Improve the bundled OpenAI documentation skill with targeted official-source lookup and clearer guidance for Codex, model selection, and API workflows. (#36014)

Chores

• Upgrade the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0. (#36001, #35959, #35831)

• Secure macOS release notarization using Azure Key Vault instead of exporting private signing keys. (#37154)

• Remove the deprecated codex exec --full-auto flag; use --sandbox workspace-write instead. (#36054)

• Stop publishing redundant Linux bundle archives; use the standard codex-package-<target> release archives. (#36342)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.146.0...rust-v0.147.0

• #35590 Expose cached MCP tools before server startup @copyberry

• #35594 Recommend longer waits in the v2 wait_agent schema @copyberry

• #35595 Allow alpha hotfix versions in R2 releases @copyberry

• #35597 Add metrics for extension-rendered skill catalogs @copyberry

• #35607 Record metrics for empty skill catalogs @copyberry

• #35608 Support model-owned token budget defaults @copyberry

• #35621 Skip restored token usage replay for exec resumes @copyberry

• #35623 Parse Claude and Cursor session records separately @copyberry

• #35642 Make OpenTelemetry provider shutdown idempotent @copyberry

• #35644 Preserve thread metadata when rollout files are missing @copyberry

• #35649 Preserve TUI input when terminal focus returns @copyberry

• #35652 Enable network policy callbacks for remote exec @copyberry

• #35653 Test developer instruction inheritance for multi-agent workers @copyberry

• #35655 Terminate Windows non-TTY processes on interrupt @copyberry

• #35656 Preserve multi-agent settings across config representations @copyberry

• #35661 Place host skills before permission instructions @copyberry

• #35663 Evaluate character matching over skill routing metadata @copyberry

• #35665 Fix the async watcher test harness on Windows @copyberry

• #35668 Expose the network proxy spec constructor @copyberry

• #35670 Raise the Windows exec yield floor to 10 seconds @copyberry

• #35671 Route curated plugins by authentication mode @copyberry

• #35675 Prepare MCP and plugin recommendations concurrently @copyberry

• #35678 Preserve paginated thread metadata across resumes @copyberry

• #35685 Load cloud-managed profiles for codex sandbox @copyberry

• #35688 Point crossterm patch to the OpenAI OSS fork @copyberry

• #35689 Preserve item timestamps in thread history projections @copyberry

• #35691 Include empty-preview threads in relationship listings @copyberry

• #35693 Refresh the subagent picker in the background @copyberry

• #35695 Honor the configured SQLite home in the logs client @copyberry

• #35708 Add configurable developer instructions for v2 subagents @copyberry

• #35715 Support streaming bodies in route-aware HTTP requests @copyberry

• #35717 Reuse route-aware clients for OpenAI file uploads @copyberry

• #35720 Upgrade rmcp to 3.0.0-beta.3 @copyberry

• #35721 Honor disabled code mode fallback without a process host @copyberry

• #35722 Add persisted sections for organizing threads @copyberry

• #35724 Add MCP 2026-07-28 discovery support @copyberry

• #35725 Complete MCP 2026 client support @copyberry

• #35738 Add bounded metadata for executed tool calls @copyberry

• #35742 Avoid blocking turns on optional MCP startup @copyberry

• #35744 Keep agent registry identities consistent @copyberry

• #35766 Emit host skill budget warnings from world state @copyberry

• #35769 Share the skills budget across host and executor catalogs @copyberry

• #35772 Throttle models cache TTL renewals @copyberry

• #35773 Scale skill metadata budgets with context windows @copyberry

• #35777 Resolve MCP tool catalogs concurrently @copyberry

• #35779 Load thread titles concurrently during session startup @copyberry

• #35785 Support self-serve Business ProLite accounts @copyberry

• #35787 Gate paginated thread history on the state database @copyberry

• #35794 Wait for MCP readiness in the curated sync test @copyberry

• #35802 Tag reports with the selected turn's model and effort @copyberry

• #35806 Route MCP OAuth through configured HTTP clients @copyberry

• #35814 Use configured HTTP clients for all MCP OAuth requests @copyberry

• #35818 Advance latest-alpha-cli after release publishing completes @copyberry