MCP startup stops blocking unrelated work

The headline change is less waiting around MCP startup. Unrelated tools can run while optional servers initialize, and terminal input queued during that startup is retained instead of being held behind the same readiness boundary.

Discovery is more defensive as well. Namespace descriptions and catalog pagination now have explicit limits for pages, items, cursor size, and elapsed time, while authentication can report an unknown state rather than collapsing uncertainty into a yes-or-no answer.

Conversation organization continues to mature: manual section ordering is persisted, and forked chats can be named from the terminal. MCP file uploads now use paths native to the active environment, cloud-managed server definitions can reach the CLI, and stdio app-server processes exit with their client connection.

Network policy gets a fail-closed correction. If Codex cannot apply a requested network allow amendment, the sandbox retains denied access instead of risking a broader permission state.

A separate 0.146 hotfix line also landed. Alpha 9.1 adds managed control over in-app updates, and alpha 9.2 makes the R2 publisher accept the second numeric suffix used by alpha hotfix versions.

Release context: the rust-v0.147.0-alpha.1 to rust-v0.147.0-alpha.2 comparison contains 33 commits and lists 287 changed files. The two 0.146 hotfix comparisons contain two commits each, including their release commits, and are presented separately because they do not form the next step of the 0.147 line.

Evidence