New Features

• Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. (#41941, #42140)
• The plugin CLI can list, install, and remove plugins from remote marketplaces. (#42150)
• Set tui.auto_recap = false to disable automatic recaps while keeping manual /recap available. (#42101)
• TUI history shows complete patches, input sent to background terminals, and individual completed commands. (#41893, #42107)
• Plus and Team users receive an earlier warning when less than half of their allowance remains in an approximately five-hour usage window. (#42142)

Bug Fixes

• TUI sessions reconnect after an external app-server connection drops, preserving drafts and transcripts while keeping uncertain or queued submissions paused for review. (#41911, #41916, #41918)
• Full Access skips Guardian reviews for confirmation-only actions. User approval mode skips background Guardian scoring and prewarming, while sensitive-action checks and requests for user input retain their existing handling. (#42147, #42256)
• Guardian review history survives compaction, restarts, and user-created forks while respecting rollback boundaries and isolating subagent history. (#41879, #42065)
• Remembered MCP tool approvals are scoped to the selected app account, and relative MCP executable paths start more reliably on macOS. (#42133, #42117)
• Rollout compression includes shared histories, codex exec resume handles compressed rollouts when selecting by working directory, and thread forks work with symlinked session roots. (#42039, #42135)

Configuration and API Updates

• App-server thread metadata includes nullable model and reasoningEffort fields. Structured asynchronous questions are supported through request_user_input_async when enabled by the model catalog. (#42151, #42178)
• tui.disable_paste_burst replaces the top-level setting, which remains supported as a fallback. (#41976)
• Adds the disabled-by-default features.context_management.experimental_mode configuration. When enabled for eligible ChatGPT Plus, Pro, or Pro Lite sessions using the Codex backend, it activates token-budget context, history notes, and the new_context tool. API-key sessions, custom providers, and temporary structured threads remain excluded. (#42385)

Changelog

Full Changelog

• #41870 Use shared transcript collection for Guardian reviews
• #41879 Preserve Guardian review evidence across compaction
• #41884 Add pinned native voice source preparation
• #41890 Add native voice dependency build recipe
• #41892 Retain the MCP client for event streams
• #41893 Show successful TUI commands individually
• #41894 Fix Windows native voice dependency builds
• #41897 Add the voice helper lifecycle foundation
• #41899 Keep MCP event subscriptions alive after task unloading
• #41901 Load bounded context after empty wake turns
• #41902 Add installed voice host lifecycle support
• #41906 Add a manager for MCP event streams
• #41908 Avoid scanning archived rollouts when archiving threads
• #41909 Make permission transforms aware of executor path context
• #41911 Preserve TUI drafts after app-server disconnects
• #41912 Persist response token usage in rollout history
• #41913 Preserve TUI status timing when the status row is hidden
• #41915 Move the config schema generator into a dedicated crate
• #41916 Reconnect TUI app-server sessions automatically
• #41917 Open the agents overview from an empty composer
• #41918 Restore agent navigation after TUI reconnects
• #41923 Allow per-call sideband endpoints for existing realtime calls
• #41924 Record realtime conversation history in Core
• #41925 Test repository-wide Rust formatter discovery
• #41928 Use executor path context for permission preapproval
• #41929 Open the agents overview directly in the reconnect test
• #41933 Report configured sandbox policy consistently
• #41934 Omit undersized WAV output from Code Mode
• #41936 Attach failed Guardian reviews to diagnostic reports
• #41937 Limit background terminal input previews
• #41938 Clarify resume guidance in exit summaries
• #41940 Preserve transcript layout caches during backtrack selection
• #41941 Add Vim undo to the TUI composer
• #41944 Emit turn cost telemetry for ChatGPT sessions
• #41946 Expand extension permission regression coverage
• #41949 Add plugin reconciliation app-server API
• #41950 Improve tracing for nested tool calls and exec processes
• #41953 Enforce marketplace source policy for curated plugins
• #41974 Track TUI starts by app server mode
• #41976 Move disable_paste_burst under [tui]
• #41980 Preserve raw response usage metadata
• #42003 Report turn trigger and source in turn analytics
• #42031 Share Guardian user-message retention logic
• #42033 Improve Guardian report diagnostics
• #42039 Include shared histories in rollout compression
• #42043 Tag Codex home size metrics with compression state
• #42047 Add per-account approval settings for apps
• #42054 Honor explicit account selectors for Apps tool calls
• #42056 Honor app link settings for MCP tool approvals
• #42065 Preserve Guardian history across thread reconstruction
• #42066 Remove selected core test cases
• #42068 Detect standalone installs from the macOS CLI bundle
• #42069 Remove redundant test coverage
• #42071 Detect Vite+-managed Codex installs
• #42076 Unify Guardian context section collection
• #42082 Attribute nested REPL reviews to their tool calls
• #42085 Centralize Guardian context composition
• #42086 Attribute Guardian reviews to OpenAI app tools
• #42094 Record Windows MXC availability
• #42096 Make diagnostic report uploads resilient to slow networks
• #42100 Prefer remote Sites over the bundled plugin
• #42101 Add a TUI setting to disable automatic recaps
• #42102 Extract OTEL trace WebSocket into a reusable crate
• #42104 Show recent sessions in the agent command center
• #42107 Show full patches and terminal input in TUI history
• #42109 Format Python scripts across the repository
• #42110 Treat bundled cleanup hooks as built-ins
• #42113 Apply remote platform semantics to exec safety checks
• #42114 Centralize remote plugin mutations in PluginsManager
• #42117 Fix relative MCP server spawning on macOS
• #42118 Refine hook activity rendering in the TUI
• #42121 Allow updating the approval reviewer for active turns
• #42123 Preserve descriptive labels on local file links
• #42126 Ignore non-JSON files in plugin catalog test helpers
• #42128 Prepare MCP connections for coordinated OAuth refresh
• #42132 Bound Git root discovery for metadata enrichment
• #42133 Scope session MCP approvals to app account links
• #42134 Include app link metadata in MCP approval elicitations
• #42135 Support thread forks from symlinked session roots
• #42137 Prewarm shell snapshots for eligible turns
• #42140 Add redo support to Vim composer history
• #42142 Add early rate-limit warnings for Plus and Team plans
• #42144 Add Guardian V2 analytics events
• #42146 Resolve permission requests in the executor context
• #42147 Skip Guardian reviews in Full Access
• #42149 Upgrade Git marketplaces from merged configuration
• #42150 Support remote marketplaces in the plugin CLI
• #42151 Expose model settings in app-server thread metadata
• #42161 Split tool JSON Schema code into focused modules
• #42164 Record result sources in app tool analytics
• #42173 Support header injections in network requirements
• #42174 Add a cacheable Bazel app-server schema bundle
• #42178 Add structured asynchronous user input requests
• #42256 Skip Guardian scoring in User approval mode
• #42385 Add experimental context management activation

Release 0.153.0-alpha.5.1

Release 0.153.0-alpha.6

Release 0.153.0-alpha.5

Bug Fixes

• Guardian approval review now honors Node REPL policies provided through model metadata.

Full Changelog: rust-v0.152.0...rust-v0.152.1

Release 0.153.0-alpha.4

Release 0.153.0-alpha.2

Release 0.153.0-alpha.1

New Features

• Vim mode supports / and ? searches within drafts, highlighted matches, and repeat navigation with n and N. (#41586)
• Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
• The terminal UI and codex exec show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)
• MCP server names can contain :, @, /, and ., supporting package-style names throughout CLI commands and authentication. (#41700)
• Individual MCP tools support an output_token_limit setting, with consistent truncation across session resumes. (#41421)
• App-server clients can configure thread/shellCommand timeouts, including deadlines longer than one hour. (#41384)

Bug Fixes

• Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)

• Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)

• Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)

• Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)

• MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)

• Opening the model picker refreshes available models without losing the highlighted choice. (#41467)

• Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals. (#41227, #41436, #41673)

• Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials. (#41403)

Chores

• The planning tool is disabled by default; enable it with tools.update_plan.enabled = true. (#41744)
• Plugin recommendations begin loading during startup, reducing delays before the first turn. (#41375)

Changelog

Full Changelog: rust-v0.151.0...rust-v0.152.0

• #41210 Enable clock tools from model metadata @copyberry
• #41215 Roll over Guardian context before follow-up reviews @copyberry
• #41218 Share linked tool mention parsing in the TUI @copyberry
• #41219 Retry confirmed remote registration conflicts @copyberry
• #41221 Honor turn token budgets in Guardian review rollover @copyberry
• #41223 Add recency sorting to project/list @copyberry
• #41226 Move Guardian review session tests to a separate file @copyberry
• #41227 Use compatible PowerShell for elevated Windows sandbox commands @copyberry
• #41230 Apply app routing policy to unauthenticated plugin reads @copyberry
• #41231 Instrument the loaded plugin cache @copyberry
• #41232 Expose the PowerShell version in environment context @copyberry
• #41235 Sanitize history notes backend errors @copyberry
• #41239 Surface model provider authentication recovery progress @copyberry
• #41243 Add configurable gating for the sleep tool @copyberry
• #41250 Include thread source in realtime connection metadata @copyberry
• #41260 Let the history backend enforce tool output budgets @copyberry
• #41285 Drive keymap conflict checks from the action registry @copyberry
• #41292 Forward history note images to the model @copyberry
• #41308 Make subagents follow the root service tier @copyberry
• #41309 Honor required reviews when reusing Guardian scores @copyberry
• #41313 Decouple HTTP retry backoff from overload integration testing @copyberry
• #41322 Isolate required-model Guardian approval coverage @copyberry
• #41328 Review terminal input against retained permissions @copyberry
• #41331 Classify clock tools as built-in control tools @copyberry
• #41336 Preserve cached MCP tools during binding capture @copyberry
• #41344 Use refreshed MCP tool caches during binding capture @copyberry
• #41349 Assign stable IDs to generated Responses input items @copyberry
• #41354 Reject NUL bytes in reviewed terminal input @copyberry
• #41357 Support compression for shared rollout lineages @copyberry
• #41360 Measure Codex home usage at app-server startup @copyberry
• #41364 Test resuming compressed shared rollouts @copyberry
• #41365 Restrict async user messages to questions @copyberry
• #41368 Match Windows shell guidance to the executor platform @copyberry
• #41375 Preload plugin recommendations during session startup @copyberry
• #41380 Clarify proactive multi-agent delegation guidance @copyberry
• #41384 Support configurable timeouts for thread shell commands @copyberry
• #41385 Give Guardian classifications distinct turn identities @copyberry
• #41392 Add shared Guardian context primitives @copyberry
• #41393 Preserve one-shot exec when unified exec is disabled @copyberry
• #41396 Refresh runtimes for remote plugin state changes @copyberry
• #41400 Refresh MCP HTTP helper headers after authorization failures @copyberry
• #41403 Restrict cloud task credentials to trusted origins @copyberry
• #41413 Optimize history item lookups @copyberry
• #41416 Add app-server notification media filtering @copyberry
• #41421 Support per-tool MCP output limits @copyberry
• #41422 Add shared Guardian transcript collection @copyberry
• #41424 Preserve context baselines across nested agent forks @copyberry
• #41427 Filter media from function call output notifications @copyberry
• #41429 Retain the last selected step context for each turn @copyberry
• #41432 Run executor hooks for interrupted turns @copyberry
• #41435 Allow bundled browser cleanup hooks on subagent stop @copyberry
• #41436 Respond to terminal queries from TTY subprocesses @copyberry
• #41447 Support openai/elicitation form requests @copyberry
• #41448 Clarify question handling in Default collaboration mode @copyberry
• #41449 Rename the read-only Seatbelt platform defaults policy @copyberry
• #41452 Report code mode host request durations @copyberry
• #41454 Block goals after repeated execution host failures @copyberry
• #41456 Support app targets in executor plugin hooks @copyberry
• #41457 Source proactive multi-agent instructions from the model catalog @copyberry
• #41461 Source async user message descriptions from the model catalog @copyberry
• #41464 Preserve permissions when updating session metadata @copyberry
• #41467 Refresh the TUI model picker from the app server @copyberry
• #41476 Use rules_rs platforms for release binaries @copyberry
• #41477 Organize bundled Rust resources under asset directories @copyberry
• #41562 Preserve turn lineage across goal continuations @copyberry
• #41567 Restore thread cwd from owned settings snapshots @copyberry
• #41569 Harden diagnostic report uploads @copyberry
• #41570 Fix proactive multi-agent instruction grammar @copyberry
• #41586 Add Vim search motions to the composer @copyberry
• #41613 Move Vim history tests into the history search module @copyberry
• #41630 Update tests for default-enabled update_plan @copyberry
• #41660 Preserve Guardian authorization across history compaction @copyberry
• #41666 Approve the first Node REPL execution without a Guardian wait @copyberry
• #41673 Repair cursor-style rendering on older JediTerm terminals @copyberry
• #41683 Set working directories for environment MCP tests @copyberry
• #41700 Support package-style MCP server names @copyberry
• #41742 Show actionable rate-limit banners in the TUI @copyberry
• #41743 Mark history ingestion requests in turn metadata @copyberry
• #41744 Make the update_plan tool opt-in @copyberry
• #41803 Allow models to enable token budgeting by default @copyberry
• #41840 Use the async stack budget for approval reviews @copyberry
• #41846 Preserve Guardian review evidence across compaction @copyberry
• #41852 Preserve Guardian user answers across compaction @copyberry
• #41853 Box the session startup future at its API boundary @copyberry
• #41857 Preserve Guardian user answers from current history @copyberry
• #41858 Preserve user text when Guardian history drops oversized images @copyberry
• #41861 Keep history extension tools out of Guardian reviews @copyberry
• #41921 Start fresh Vim drafts in Insert mode
• #41931 Increase Guardian message transcript limits

Release 0.152.0-alpha.7.2