v0.15.0

Key Changes

Better model refusal handling

In this version, model refusals are now surfaced explicitly as ModelRefusalError instead of being treated as empty text output or, for structured outputs, causing the run loop to retry until MaxTurnsExceeded.

This affects code that previously expected a refusal-only model response to complete with final_output == "". To handle refusals without raising, provide a model_refusal run error handler:

result = Runner.run_sync(
    agent,
    input,
    error_handlers={"model_refusal": lambda data: data.error.refusal},
)

For structured-output agents, the handler can return a value matching the agent's output schema, and the SDK will validate it like other run error handler final outputs.

What's Changed

• fix: #3055 surface model refusals during run resolution by @seratch in #3057

Documentation & Other Changes

• docs: add missing space after period in MCPServerStdio docstring by @GopalGB in #3053
• chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 by @dependabot[bot] in #3059
• chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 by @dependabot[bot] in #3062
• chore(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 by @dependabot[bot] in #3061
• chore(deps): bump openai/codex-action from 1.6 to 1.8 by @dependabot[bot] in #3060
• Release 0.15.0 by @github-actions[bot] in #3063

New Contributors

• @GopalGB made their first contribution in #3053

Full Changelog: v0.14.8...v0.15.0

v0.14.8

What's Changed

• fix: #3046 preserve MCP re-export import errors by @seratch in #3048
• fix: #3043 delimit sandbox prompt instruction sections by @seratch in #3047

Documentation & Other Changes

• docs: fix typo in comment for WS event handler by @ateamofantsintheirprime in #3050
• Release 0.14.8 by @github-actions[bot] in #3049

New Contributors

• @ateamofantsintheirprime made their first contribution in #3050

Full Changelog: v0.14.7...v0.14.8

v0.14.7

What's Changed

• feat: #2886 add convenience properties (tool_name, call_id) to tool items by @jawwad-ali in #3027
• fix: raise Phase 2 memory consolidation turn limit by @andi-oai in #3038
• fix: add GPT-5.5 aliases to sandbox compaction by @alfozan in #3039
• fix: tighten tar and zip member validation by @matthewflint in #3028
• fix: reject symlinked LocalFile sources by @matthewflint in #2972
• fix: remove unset fields from calls to Responses API by @s0rc3r3r01 in #3026

Documentation & Other Changes

• Release 0.14.7 by @github-actions[bot] in #3031

New Contributors

• @jawwad-ali made their first contribution in #3027
• @s0rc3r3r01 made their first contribution in #3026
• @andi-oai made their first contribution in #3038

Full Changelog: v0.14.6...v0.14.7

v0.14.6

What's Changed

• fix: update examples and defaults to GPT-5.5 by @alfozan in #3016
• chore: relax websockets upper bound from <16 to <17 by @mathisobadia in #3013

Documentation & Other Changes

• chore: harden uv dependency resolution by @mcgrew-oai in #3014
• docs: update translated document pages by @github-actions[bot] in #3021
• docs: add MongoDB session documentation by @alexbevi in #3015
• docs: update translated document pages by @github-actions[bot] in #3023
• Release 0.14.6 by @github-actions[bot] in #3022

New Contributors

• @mcgrew-oai made their first contribution in #3014
• @mathisobadia made their first contribution in #3013

Full Changelog: v0.14.5...v0.14.6

v0.14.5

What's Changed

• feat: #3001 add Modal sandbox idle timeout option by @seratch in #3005
• fix: #3004 serve HITL resume tool outputs by @seratch in #3006
• fix: backfill streamed terminal output by @ankitphogat in #3000

Documentation & Other Changes

• docs: clarify lazy skill source host paths by @alfozan in #2998
• docs: update translated document pages by @github-actions[bot] in #2999
• Release 0.14.5 by @github-actions[bot] in #3007

New Contributors

• @ankitphogat made their first contribution in #3000

Full Changelog: v0.14.4...v0.14.5

v0.14.4

What's Changed

• feat: add BoxMount support by @alfozan in #2988
• fix: ignore relative snapshot base overrides by @matthewflint in #2976
• refactor: share sandbox ephemeral mount lifecycle by @seratch in #2986
• refactor: share sandbox tar exclude arg generation by @seratch in #2987
• refactor: extract sandbox session helper operations by @seratch in #2985

Documentation & Other Changes

• docs: remove duplicate word in voice interruptions section by @abhicris in #2981
• docs: update translated document pages by @github-actions[bot] in #2982
• docs: update translated document pages by @github-actions[bot] in #2996
• test: add sandbox compatibility guards by @seratch in #2984
• Release 0.14.4 by @github-actions[bot] in #2989

New Contributors

• @abhicris made their first contribution in #2981

Full Changelog: v0.14.3...v0.14.4

v0.14.3

What's Changed

• fix: #2962 normalize sandbox paths and add Windows CI by @seratch in #2963
• fix: #2938 make sandboxes importable on Windows by @seratch in #2948
• fix: prepare Daytona workspace root before start by @seratch in #2956
• fix: windows errors with #2956 by @seratch in #2979
• fix: #2951 warn for tool name character replacement by @seratch in #2953
• fix: tighten LocalSnapshot restorable checks by @matthewflint in #2975
• fix: bound manifest description truncation by @matthewflint in #2974
• fix: move module docstring to top of handoff_filters.py so it is assigned to __doc__ by @kuishou68 in #2950

Documentation & Other Changes

• docs: add Datadog as an external tracer in the tracing docs by @jarbaugh5 in #2965
• docs: update translated document pages by @github-actions[bot] in #2978
• Release 0.14.3 by @github-actions[bot] in #2980

New Contributors

• @kuishou68 made their first contribution in #2950
• @jarbaugh5 made their first contribution in #2965
• @matthewflint made their first contribution in #2975

Full Changelog: v0.14.2...v0.14.3

v0.14.2

What's Changed

• feat: support sandbox extra path grants by @qiyaoq-oai in #2920
• feat: #2228 persist tool origin metadata in run items by @seratch in #2654
• feat(extensions): add MongoDB session backend by @alexbevi in #2902
• fix: loosen sandbox compaction model parsing by @sdcoffey in #2930
• fix: remove_all_tools missing hosted tool types by @javierdejesusda in #2885
• fix: tolerate None text in ResponseOutputText content items by @beveradb in #2883
• fix: #1876 LiteLLM extra_body forwarding by @yu2001-s in #2900
• fix: trust filesystem permissions for Vercel roots by @scotttrinh in #2910
• fix: #604 handle None choices in ChatCompletion response by @Spectual in #2850
• fix: normalize compacted Responses user inputs before session reuse by @seratch in #2925
• fix: #2929 surface run-loop exceptions after stream_events() completes by @nileshpatil6 in #2931

Documentation & Other Changes

• docs: clarify OpenAI provider configuration guidance by @seratch in #2901
• docs: update translated document pages by @github-actions[bot] in #2903
• docs: sync sandbox translations and set doc translation default model to gpt-5.4 by @seratch in #2904
• docs: update translated document pages by @github-actions[bot] in #2935
• chore: bump temporalio Dep in Temporal example by @JasonSteving99 in #2918
• Release 0.14.2 by @github-actions[bot] in #2899

New Contributors

• @javierdejesusda made their first contribution in #2885
• @beveradb made their first contribution in #2883
• @yu2001-s made their first contribution in #2900
• @JasonSteving99 made their first contribution in #2918
• @scotttrinh made their first contribution in #2910
• @Spectual made their first contribution in #2850
• @alexbevi made their first contribution in #2902
• @qiyaoq-oai made their first contribution in #2920
• @nileshpatil6 made their first contribution in #2931

Full Changelog: v0.14.1...v0.14.2

v0.14.1

What's Changed

• fix: sanitize OpenAI tracing export payloads by @alfozan in #2896
• fix: #2873 preserve computer driver compatibility for modifier keys by @seratch in #2877
• fix #2151 shield server-managed handoffs from unsupported history rewrites by @seratch in #2747
• fix: stop streamed tool execution after known input guardrail tripwire by @seratch in #2688

Documentation & Other Changes

• docs: update translated document pages by @github-actions[bot] in #2891
• docs: align translated sandbox nav and refresh generated refs by @seratch in #2892
• docs: clarify ToolContext availability in function-tool lifecycle hooks by @HuxleyHu98 in #2687
• docs: update translated document pages by @github-actions[bot] in #2893
• ci: add sandbox auto-label mapping by @seratch in #2894
• Release 0.14.1 by @github-actions[bot] in #2895

New Contributors

• @HuxleyHu98 made their first contribution in #2687
• @alfozan made their first contribution in #2896

Full Changelog: v0.14.0...v0.14.1

v0.14.0

What's Changed

Sandbox Agents

This release adds Sandbox Agents, a beta SDK surface for running agents with a persistent, isolated workspace. Sandbox agents keep the normal Agent and Runner flow, but add workspace manifests, sandbox-native capabilities, sandbox clients, snapshots, and resume support so agents can work over real files, run commands, edit repositories, generate artifacts, and continue work across runs.

Key pieces:

• SandboxAgent: an Agent with sandbox defaults such as default_manifest, sandbox instructions, capabilities, and run_as.
• Manifest: a fresh-workspace contract for files, directories, local files, local directories, Git repos, environment, users, groups, and mounts.
• SandboxRunConfig: per-run sandbox wiring for client creation, live session injection, serialized session resume, manifest overrides, snapshots, and materialization concurrency limits.
• Built-in capabilities for shell access, filesystem editing and image inspection, skills, memory, and compaction.
• Workspace snapshots and serialized sandbox session state for reconnecting to existing work or seeding a fresh sandbox from saved contents.

Sandbox clients and hosted providers

Sandbox agents now support local, containerized, and hosted execution backends:

• UnixLocalSandboxClient for fast local development.
• DockerSandboxClient for container isolation and image parity.
• Hosted sandbox clients for Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel through optional extras.

The release also adds provider-specific examples and mount strategies for common storage backends, including S3, Cloudflare R2, Google Cloud Storage, Azure Blob Storage, and S3 Files where supported by the selected backend.

Sandbox memory

Adds a sandbox memory capability that lets future sandbox-agent runs learn from prior runs. Memory stores extracted lessons in the sandbox workspace, injects a concise summary into later runs, and uses progressive disclosure so agents can search deeper rollout summaries only when useful.

Memory supports:

• Read-only or generate-only modes.
• Live updates when the agent discovers stale memory.
• Multi-turn grouping through conversation_id, SDK Session, RunConfig.group_id, or generated run IDs.
• Separate memory layouts for isolating memory across agents or workflows.
• S3-backed examples for persisted memory across runs.

Workspace mounts, snapshots, and resume

This release adds a full workspace entry and mount model for sandbox sessions:

• Local files and directories.
• Synthetic files and directories.
• Git repository entries.
• Remote storage mounts for S3, R2, GCS, Azure Blob Storage, and S3 Files.
• Provider-specific mount strategies across Docker, Modal, Cloudflare, Blaxel, Daytona, E2B, and Runloop.
• Portable snapshots with path normalization, symlink preservation, mount-safe snapshotting, and remote snapshot support.
• Resume paths through runner-managed RunState, explicit SandboxSessionState, or saved snapshots.

Examples and tutorials

Adds a large examples/sandbox/ suite covering:

• Local Unix and Docker sandbox runners.
• Docker mount smoke tests for S3, GCS, Azure Blob Storage, and S3 Files.
• Sandbox coding tasks with skills.
• Sandbox agents as tools and handoff patterns.
• Memory examples, including multi-agent/multi-turn memory and S3-backed memory.
• Tax-prep and healthcare-support workflows.
• Dataroom QA and metric extraction tutorials.
• Repository code review tutorial.
• Vision website clone tutorial.
• Provider examples for Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, Temporal, and Vercel.

Runtime, tracing, and model plumbing

The release includes the runtime plumbing needed to make sandbox agents work naturally inside the existing SDK:

• Runner-managed sandbox preparation, capability binding, session lifecycle, state serialization, and resume behavior.
• Sandbox-aware RunState serialization.
• Unified sandbox tracing with SDK spans.
• Token usage on tracing spans.
• Runner-managed prompt cache key defaults.
• OpenAI agent registration and harness ID configuration.
• Safer redaction of sensitive MCP tool outputs when sensitive tracing is disabled.
• Additional OpenAI client/model utilities and Chat Completions coverage.

Documentation & Other Changes

• docs: add Asqav to external tracing processors list.
• docs: update translated document pages.