Codex plugin changes.

Approve MCP connections before they access memory #

Review each MCP client's requested permissions and approve or deny access before it can read or write memory.

Use SMFS from sandboxed agents with TypeScript and Python SDKs #

SMFS bash SDKs give TypeScript and Python agents a virtual memory-backed filesystem when they cannot mount a real folder.

Fixes

  • Fixed an issue where the Codex plugin recalled only user memories and skipped project-scoped ones.
  • Fixed an issue where the Codex plugin never saved short sessions or turns after the last prompt.