Plugins follow sign-in mode as subagent controls expand

The most visible platform change is authentication-aware plugin routing. Codex now selects the curated ChatGPT, remote, or API marketplace from the active sign-in mode and refreshes existing thread MCP runtimes when an account switch changes the effective catalog.

Multi-agent v2 gains a configurable developer-instruction override for roleless subagents. The setting can inherit, replace, or deliberately clear parent instructions, while role-specific instructions still win and the effective behavior survives forks, compaction, and cold resume.

Remote execution builds on the previous release's network-decision plumbing by enabling controller callbacks when Guardian review is active. Requests are bounded by configured timeouts, checked against live policy, attributed to the trusted execution scope, and cancelled when that scope ends.

Thread history becomes harder to corrupt through partial local state. Missing rollout files no longer erase their database metadata or consume listing slots, and paginated history no longer overwrites original titles, previews, or first-message data during reads and resumes.

Windows non-TTY commands can now be interrupted through write_stdin. In the terminal UI, focus regain preserves queued input, and the subagent picker opens immediately from cached state before refreshing descendants in the background.

Turn preparation also overlaps MCP startup with endpoint plugin recommendations instead of waiting for them serially. The rust-v0.146.0-alpha.13 to rust-v0.146.0-alpha.14 comparison contains 23 commits and 113 changed files.

Evidence