## New Features

- Added `codex app <path>` on macOS to launch Codex Desktop from the CLI, with automatic DMG download if it is missing. (openai#10418)
- Added personal skill loading from `~/.agents/skills` (with `~/.codex/skills` compatibility), plus app-server APIs/events to list and download public remote skills. (openai#10437, openai#10448)
- `/plan` now accepts inline prompt arguments and pasted images, and slash-command editing/highlighting in the TUI is more polished. (openai#10269)
- Shell-related tools can now run in parallel, improving multi-command execution throughput. (openai#10505)
- Shell executions now receive `CODEX_THREAD_ID`, so scripts and skills can detect the active thread/session. (openai#10096)
- Added vendored Bubblewrap + FFI wiring in the Linux sandbox as groundwork for upcoming runtime integration. (openai#10413)

## Bug Fixes
- Hardened Git command safety so destructive or write-capable invocations no longer bypass approval checks. (openai#10258)
- Improved resume/thread browsing reliability by correctly showing saved thread names and fixing thread listing behavior. (openai#10340, openai#10383)
- Fixed first-run trust-mode handling so sandbox mode is reported consistently, and made `$PWD/.agents` read-only like `$PWD/.codex`. (openai#10415, openai#10524)
- Fixed `codex exec` hanging after interrupt in websocket/streaming flows; interrupted turns now shut down cleanly. (openai#10519)
- Fixed review-mode approval event wiring so `requestApproval` IDs align with the corresponding command execution items. (openai#10416)
- Improved 401 error diagnostics by including server message/body details plus `cf-ray` and `requestId`. (openai#10508)

## Documentation
- Expanded TUI chat composer docs to cover slash-command arguments and attachment handling in plan/review flows. (openai#10269)
- Refreshed issue templates and labeler prompts to better separate CLI/app bug reporting and feature requests. (openai#10411, openai#10453, openai#10548, openai#10552)

## Chores
- Completed migration off the deprecated `mcp-types` crate to `rmcp`-based protocol types/adapters, then removed the legacy crate. (openai#10356, openai#10349, openai#10357)
- Updated the `bytes` dependency for a security advisory and cleaned up resolved advisory configuration. (openai#10525)

## Changelog

Full Changelog: openai/codex@rust-v0.94.0...rust-v0.95.0

- openai#10340 Session picker shows thread_name if set @pap-openai
- openai#10381 chore: collab experimental @jif-oai
- openai#10231 feat: experimental flags @jif-oai
- openai#10382 nit: shell snapshot retention to 3 days @jif-oai
- openai#10383 fix: thread listing @jif-oai
- openai#10386 fix: Rfc3339 casting @jif-oai
- openai#10356 feat: add MCP protocol types and rmcp adapters @bolinfest
- openai#10269 Nicer highlighting of slash commands, /plan accepts prompt args and pasted images @charley-oai
- openai#10274 Add credits tooltip @pakrym-oai
- openai#10394 chore: ignore synthetic messages @jif-oai
- openai#10398 feat: drop sqlx logging @jif-oai
- openai#10281 Select experimental features with space @pakrym-oai
- openai#10402 feat: add `--experimental` to `generate-ts` @jif-oai
- openai#10258 fix: unsafe auto-approval of git commands @viyatb-oai
- openai#10411 Updated labeler workflow prompt to include "app" label @etraut-openai
- openai#10399 emit a separate metric when the user cancels UAT during elevated setup @iceweasel-oai
- openai#10377 chore(tui) /personalities tip @dylan-hurd-oai
- openai#10252 [feat] persist thread_dynamic_tools in db @celia-oai
- openai#10437 feat: Read personal skills from .agents/skills @gverma-openai
- openai#10145 make codex better at git @pash-openai
- openai#10418 Add `codex app` macOS launcher @aibrahim-oai
- openai#10447 Fix plan implementation prompt reappearing after /agent thread switch @charley-oai
- openai#10064 TUI: Render request_user_input results in history and simplify interrupt handling @charley-oai
- openai#10349 feat: replace custom mcp-types crate with equivalents from rmcp @bolinfest
- openai#10415 Fixed sandbox mode inconsistency if untrusted is selected @etraut-openai
- openai#10452 Hide short worked-for label in final separator @aibrahim-oai
- openai#10357 chore: remove deprecated mcp-types crate @bolinfest
- openai#10454 app tool tip @aibrahim-oai
- openai#10455 chore: add phase to message responseitem @sayan-oai
- openai#10414 Require models refresh on cli version mismatch @aibrahim-oai
- openai#10271 [Codex][CLI] Gate image inputs by model modalities @ccy-oai
- openai#10374 Trim compaction input @pakrym-oai
- openai#10453 Updated bug and feature templates @etraut-openai
- openai#10465 Restore status after preamble @pakrym-oai
- openai#10406 fix: clarify deprecation message for features.web_search @sayan-oai
- openai#10474 Ignore remote_compact_trims_function_call_history_to_fit_context_window on windows @pakrym-oai
- openai#10413 feat(linux-sandbox): vendor bubblewrap and wire it with FFI @viyatb-oai
- openai#10142 feat(secrets): add codex-secrets crate @viyatb-oai
- openai#10157 chore: nuke chat/completions API @jif-oai
- openai#10498 feat: drop wire_api from clients @jif-oai
- openai#10501 feat: clean codex-api part 1 @jif-oai
- openai#10508 Add more detail to 401 error @gt-oai
- openai#10521 Avoid redundant transactional check before inserting dynamic tools @jif-oai
- openai#10525 chore: update bytes crate in response to security advisory @bolinfest
- openai#10408 fix WebSearchAction type clash between v1 and v2 @sayan-oai
- openai#10404 Cleanup collaboration mode variants @charley-oai
- openai#10505 Enable parallel shell tools @jif-oai
- openai#10532 feat: `find_thread_path_by_id_str_in_subdir` from DB @jif-oai
- openai#10524 fix: make $PWD/.agents read-only like $PWD/.codex @bolinfest
- openai#10096 Inject CODEX_THREAD_ID into the terminal environment @maxj-oai
- openai#10536 Revert "Load untrusted rules" @viyatb-oai
- openai#10412 fix(app-server): fix TS annotations for optional fields on requests @owenlin0
- openai#10416 fix(app-server): fix approval events in review mode @owenlin0
- openai#10545 Improve Default mode prompt (less confusion with Plan mode) @charley-oai
- openai#10289 [apps] Gateway MCP should be blocking. @mzeng-openai
- openai#10189 implement per-workspace capability SIDs for workspace specific ACLs @iceweasel-oai
- openai#10548 Updated bug templates and added a new one for app @etraut-openai
- openai#10531 [codex] Default values from requirements if unset @gt-oai
- openai#10552 Fixed icon for CLI bug template @etraut-openai
- openai#10039 chore(arg0): advisory-lock janitor for codex tmp paths @viyatb-oai
- openai#10448 feat: add APIs to list and download public remote skills @xl-openai
- openai#10519 Handle exec shutdown on Interrupt (fixes immortal `codex exec` with websockets) @rasmusrygaard
- openai#10556 Feat: add upgrade to app server modelList @shijie-oai
- openai#10461 feat(tui): pace catch-up stream chunking with hysteresis @joshka-oai
- openai#10367 chore: add `codex debug app-server` tooling @celia-oai

Author: pakrym-oai

codex-rs/Cargo.toml

@@ -55,7 +55,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.0.0"
+version = "0.95.0"
 # Track the edition for all workspace crates in one place. Individual
 # crates can still override this value, but keeping it here means new
 # crates created with `cargo new -w ...` automatically inherit the 2024