Codex CLI 0.147.0：支持 MCP 2026-07-28 协议、Agent 插件与对话分区

New Features

• Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
• Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
• Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373)
• Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
• Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)
• Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)

Bug Fixes

• Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)
• Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)
• Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (#35960, #35962, #37166)
• Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (#35655, #35851, #37129)
• Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (#36960, #37132)
• Harden plugin isolation and deny network access when policy updates fail. (#37027, #36967, #36037)

Documentation

• Improve the bundled OpenAI documentation skill with targeted official-source lookup and clearer guidance for Codex, model selection, and API workflows. (#36014)

Chores

• Upgrade the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0. (#36001, #35959, #35831)
• Secure macOS release notarization using Azure Key Vault instead of exporting private signing keys. (#37154)
• Remove the deprecated codex exec --full-auto flag; use --sandbox workspace-write instead. (#36054)
• Stop publishing redundant Linux bundle archives; use the standard codex-package-<target> release archives. (#36342)

Changelog

Full Changelog: rust-v0.146.0...rust-v0.147.0

• #35590 Expose cached MCP tools before server startup @copyberry
• #35594 Recommend longer waits in the v2 wait_agent schema @copyberry
• #35595 Allow alpha hotfix versions in R2 releases @copyberry
• #35597 Add metrics for extension-rendered skill catalogs @copyberry
• #35607 Record metrics for empty skill catalogs @copyberry
• #35608 Support model-owned token budget defaults @copyberry
• #35621 Skip restored token usage replay for exec resumes @copyberry
• #35623 Parse Claude and Cursor session records separately @copyberry
• #35642 Make OpenTelemetry provider shutdown idempotent @copyberry
• #35644 Preserve thread metadata when rollout files are missing @copyberry
• #35649 Preserve TUI input when terminal focus returns @copyberry
• #35652 Enable network policy callbacks for remote exec @copyberry
• #35653 Test developer instruction inheritance for multi-agent workers @copyberry
• #35655 Terminate Windows non-TTY processes on interrupt @copyberry
• #35656 Preserve multi-agent settings across config representations @copyberry
• #35661 Place host skills before permission instructions @copyberry
• #35663 Evaluate character matching over skill routing metadata @copyberry
• #35665 Fix the async watcher test harness on Windows @copyberry
• #35668 Expose the network proxy spec constructor @copyberry
• #35670 Raise the Windows exec yield floor to 10 seconds @copyberry
• #35671 Route curated plugins by authentication mode @copyberry
• #35675 Prepare MCP and plugin recommendations concurrently @copyberry
• #35678 Preserve paginated thread metadata across resumes @copyberry
• #35685 Load cloud-managed profiles for codex sandbox @copyberry
• #35688 Point crossterm patch to the OpenAI OSS fork @copyberry
• #35689 Preserve item timestamps in thread history projections @copyberry
• #35691 Include empty-preview threads in relationship listings @copyberry
• #35693 Refresh the subagent picker in the background @copyberry
• #35695 Honor the configured SQLite home in the logs client @copyberry
• #35708 Add configurable developer instructions for v2 subagents @copyberry
• #35715 Support streaming bodies in route-aware HTTP requests @copyberry
• #35717 Reuse route-aware clients for OpenAI file uploads @copyberry
• #35720 Upgrade rmcp to 3.0.0-beta.3 @copyberry
• #35721 Honor disabled code mode fallback without a process host @copyberry
• #35722 Add persisted sections for organizing threads @copyberry
• #35724 Add MCP 2026-07-28 discovery support @copyberry
• #35725 Complete MCP 2026 client support @copyberry
• #35738 Add bounded metadata for executed tool calls @copyberry
• #35742 Avoid blocking turns on optional MCP startup @copyberry
• #35744 Keep agent registry identities consistent @copyberry
• #35766 Emit host skill budget warnings from world state @copyberry
• #35769 Share the skills budget across host and executor catalogs @copyberry
• #35772 Throttle models cache TTL renewals @copyberry
• #35773 Scale skill metadata budgets with context windows @copyberry
• #35777 Resolve MCP tool catalogs concurrently @copyberry
• #35779 Load thread titles concurrently during session startup @copyberry
• #35785 Support self-serve Business ProLite accounts @copyberry
• #35787 Gate paginated thread history on the state database @copyberry
• #35794 Wait for MCP readiness in the curated sync test @copyberry
• #35802 Tag reports with the selected turn's model and effort @copyberry
• #35806 Route MCP OAuth through configured HTTP clients @copyberry
• #35814 Use configured HTTP clients for all MCP OAuth requests @copyberry
• #35818 Advance latest-alpha-cli after release publishing completes @copyberry
• #35821 Use the shared HTTP client for TUI network checks @copyberry
• #35825 Use the shared HTTP client for announcement tips @copyberry
• #35828 Enforce centralized SQLite connection creation @copyberry
• #35830 Route WebRTC sideband joins to the Realtime API @copyberry
• #35831 Update rusty_v8 to 150.4.0 @copyberry
• #35835 Track parent turns for nested Codex requests @copyberry
• #35836 Clean up cancelled MCP elicitation requests @copyberry
• #35837 Expose plugin eligibility metadata in app-server summaries @copyberry
• #35839 Decouple recommended plugins from tool suggestions @copyberry
• #35840 Handle legacy MCP discovery prevalidation errors @copyberry
• #35843 Tie remote exec servers to their parent stdin @copyberry
• #35845 Support plaintext collaboration tool messages @copyberry
• #35850 Preserve foreign paths in background terminal listings @copyberry
• #35851 Normalize Windows namespace paths in path URIs @copyberry
• #35854 Box app-server event payloads @copyberry
• #35856 Resolve imported connectors by MCP server name @copyberry
• #35857 Add Bazel unit test targets for Rust binaries @copyberry
• #35859 Expose plugin installation timestamps in app-server summaries @copyberry
• #35870 Include session titles in external agent import history @copyberry
• #35874 Mark the primary environment in model context @copyberry
• #35875 Allow environment readiness updates in place @copyberry
• #35878 Use step environments for MCP file uploads @copyberry
• #35886 Show blocked goals as stalled in the TUI @copyberry
• #35887 Clean up side conversations in the background @copyberry
• #35895 Inherit ready step environments when spawning agents @copyberry
• #35937 Let unrelated tools run while MCP servers start @copyberry
• #35941 Bound MCP namespace descriptions @copyberry
• #35942 Update tests for current tool call and app-server event types @copyberry
• #35944 Report direct input capability for listed subagents @copyberry