OpenAI Codex CLI

No entries match these filters. Clear filters

1. rust-v0.159.1 Sep 29, 2026 · release notes

   OpenAI Codex CLI rust-v0.159.1 defaults to GPT-6.1 Sol and adds Amazon Bedrock Mantle/Runtime model catalogs.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.159.1 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.159.1

   • Defaults the bundled catalog to GPT-6.1 Sol instead of previous models

   1 detail in Everything

2. rust-v0.159.0 Sep 29, 2026 · release notes

   Codex CLI v0.159 adds instant_interrupt opt-in, transcript scrolling, Mermaid expansion, and thread history pagination.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.159.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.159.0

   • Adds the instant_interrupt opt-in flag to let new user input steer model responses or long-running code-mode calls
   • Native Mermaid rendering now supports more flowchart edges, labels, and node groups
   • App-server clients can paginate thread history from a specific item via the thread/items/list endpoint with item anchors

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The tui.prompt_suggestions setting has been removed; automatic follow-up prompt suggestions are no longer generated
   • !The bundled plugin-creator skill is removed and can no longer be loaded
3. rust-v0.158.0 Sep 28, 2026 · release notes

   OpenAI Codex CLI rust-v0.158.0 adds MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. client secret support, secure WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. connections, and image transparency

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.158.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.158.0

   • Support bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. for secure direct exec-server WebSocket connections via app-server.
   • Enable transparent background requests in image generation and accept file-backed conversation images for edits.

   2 details in Everything

4. rust-v0.157.0 Sep 25, 2026 · release notes

   OpenAI Codex CLI adds GPT-6 Sol/Luna support, automatic daemon startup, and Shift-click transcript selection.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.157.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.157.0

   • f key shortcut to fork conversations open in another app, preserving drafts and queued prompts
   • Amazon Bedrock support for gpt-6-sol and gpt-6-luna models with migration prompts
   • Automatic background-server startup for eligible interactive sessions with recovery choices

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !ultrafast service tier removed from gpt-5.6-sol
5. rust-v0.156.0 Sep 22, 2026 · release notes

   OpenAI Codex CLI rust-v0.156.0 adds /tui fullscreen mode, voice conversations, /usage analytics, and worktree support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.156.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.156.0

   └──▷ TRY IT
   Launch the new fullscreen terminal interface for enhanced interaction capabilities.
   copy

   $ codex /tui

   Check your current account usage, token consumption, and plugin activity directly from the CLI.
   copy

   $ codex /usage

   • Adds the /tui command to launch an optional fullscreen terminal UI with transcript search, mouse selection, and right-click copying.
   • Enables voice conversations by default with an F8 toggle key, a /voice settings picker for selecting voices, and bundled audio runtimes for Linux and Windows.
   • Adds the /usage analytics dashboard to explore account usage, token totals, plugin activity, and skill activity.
   • Enables worktree session creation from the agent command center by default.
   • Adds --no-daemon flag to bypass the local background server, which can also be managed via /daemon.

   5 details in Everything

6. rust-v0.155.0 Sep 17, 2026 · release notes

   OpenAI Codex CLI v0.155.0 adds voice conversations, Touch ID for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., daemon update config, and Amazon Bedrock credential commands.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.155.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.155.0

   • Added experimental /voice conversations with live transcripts in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency.
   • TUI status row now displays live reasoning summaries and completion timestamps
   • Added task hiding, archiving, and deletion capabilities in the agents overview
   • Added Touch ID verification for MCP requests in local TUI sessions on supported Macs
   • Added configurable daemon update schedules via config and codex app-server daemon update command

   +1 more show less

   • Amazon Bedrock integration now obtains AWS credentials from configured commands

   6 details in Everything

7. python-v0.154.0 Sep 10, 2026 · release notes

   OpenAI Codex CLI v0.154.0 adds max/ultra reasoning-effort values and ExternalMessage support with typed history APIs.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch python-v0.154.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout python-v0.154.0

   • Adds max and ultra values for the reasoning_effort parameter to enable stronger model reasoning traces
   • Introduces ExternalMessage type that can start or join active turns via synchronous/asynchronous run() and turn() calls
   • Adds include_turns parameter on resume/fork operations and source metadata field for turn history selection

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !HookMetadata handler access now requires .root wrapper (e.g. hook.root.command instead of hook.command)
   • !Previously unknown notifications now have typed payloads requiring named field reads instead of generic .params
8. rust-v0.154.0 Sep 9, 2026 · release notes

   OpenAI Codex CLI rust-v0.154.0 adds --worktree, inline answers, Vim R mode, and GPT-6-Astra support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.154.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.154.0

   └──▷ TRY IT
   Create an isolated workspace for a new feature branch and resume later.
   copy

   $ codex exec --worktree ./my-feature-session

   Copy specific session metadata to the clipboard while editing in Vim.
   vim copy

   :R
   /copy status

   • Adds experimental worktree support with --worktree or /worktree flags to create isolated checkouts for new or forked sessions.
   • Adds ability to answer questions inline while Codex continues working using suggested choices or custom text without losing the main draft.
   • Adds Windows sessions sharing a background Codex server with daemon lifecycle commands and managed updates.
   • Adds R replace mode with undo and dot-repeat to Vim editing, plus more reliable Escape handling in legacy terminals.
   • Updates /copy command to copy status output or individual session fields, while preserving formatting in rich-text apps.

   +1 more show less

   • Makes GPT-6-Astra available in the model picker and Amazon Bedrock catalogs.

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The codex mcp-server entry point is no longer available.
9. rust-v0.153.3 Sep 4, 2026 · release notes

   Adds GPT-6-Astra model support in Amazon Bedrock via Mantle and Runtime global/US routes.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch rust-v0.153.3 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.153.3

   └──▷ HOW TO FIND IT
   Select GPT-6-Astra from the Amazon Bedrock catalog in the UI to use it for Mantle or Runtime tasks on global/US routes.
   📍In the Codex CLI interface, open the model picker, navigate to Amazon Bedrock catalogs, and select GPT-6-Astra.
10. rust-v0.153.1 Sep 3, 2026 · release notes

    OpenAI Codex CLI rust-v0.153.1 adds GPT-6-Astra model support via API without changing defaults.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.153.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.153.1

11. rust-v0.153.0 Sep 3, 2026 · release notes

    OpenAI Codex CLI rust-v0.153.0 adds plugin management, Vim undo/redo, tui.disable_paste_burst config, experimental context management feature flag, and structured async inp

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.153.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.153.0

    • The plugin CLI can now list, install, and remove plugins from remote marketplaces
    • Vim mode supports undo with u and redo with Ctrl+R, preserving drafts, pasted content, and attachments
    • New TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. config key tui.disable_paste_burst replaces the top-level disable_paste_burst setting
    • Plus and Team users receive an early warning when less than half of their allowance remains in a five-hour window
    • App-server thread metadata includes nullable model and reasoningEffort fields

    +2 more show less

    • Structured asynchronous questions are supported via request_user_input_async when enabled by the model catalog
    • Adds the disabled-by-default features.context_management.experimental_mode configuration key

    7 details in Everything

12. rust-v0.152.0 Sep 1, 2026 · release notes

    Codex CLI v0.152.0 adds Vim search motions, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. output_token_limit, per-thread timeout config, and actionable rate-limit banners.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.152.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.152.0

    └──▷ USE IT
    Configure individual MCP tools with output limits to prevent excessive context usage during long sessions.
    yaml copy

    output_token_limit: 1000

    Set timeouts for shell commands in active threads to ensure long-running tasks do not hang indefinitely.
    yaml copy

    thread/shellCommand: 3600

    • Adds / and ? Vim search motions to drafts, with highlighted matches and repeat navigation via n and N
    • Allows MCP server names containing :, @, /, and ., enabling package-style naming in CLI commands and authentication
    • Supports an output_token_limit setting on individual MCP tools for consistent truncation across session resumes
    • Configures thread/shellCommand timeouts on app-server clients, including deadlines longer than one hour
    • Displays actionable rate-limit banners offering usage checks, credit management, limit resets, and plan management

    +1 more show less

    • Shows credential-refresh progress (including Amazon Bedrock reauthentication) in the terminal UI and codex exec

    6 details in Everything

13. rust-v0.151.0 Aug 29, 2026 · release notes

    OpenAI Codex CLI rust-v0.151.0 adds configurable MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. grace period and extension hooks for MCP tool results.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.151.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.151.0

    • Adds --mcp-grace-period (and config key) to control the startup discovery window for optional MCP servers
    • Enables extensions to inspect or replace MCP tool results before they reach the model via a new hook interface

    2 details in Everything

14. rust-v0.150.0 Aug 26, 2026 · release notes

    OpenAI Codex CLI rust-v0.150.0 adds task management with @mentions, /copy picker, new Interrupt hooks, and more.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.150.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0

    • @ mentions in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. allow referencing other Codex tasks, enabling agents to read, create, or message those tasks directly from the terminal
    • The /copy command now includes a picker that lets you select full responses, individual code blocks, or blockquotes for copying
    • Unnamed terminal tasks automatically receive descriptive titles, and /rename suggests an editable title based on the conversation history
    • New Interrupt hooks let you configure commands or MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. handlers to run when an active top-level turn is interrupted

    4 details in Everything

15. rust-v0.149.0 Aug 20, 2026 · release notes

    OpenAI Codex CLI v0.149 adds codex agents dashboard, /cd, codex queue, SDK effort flags, and enhanced diagnostics.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.149.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0

    • /cd, /pwd, and /cwd commands manage the working directory in TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. sessions
    • codex queue sends messages to existing local or remote sessions
    • Expanded Vim editing support includes character replacement and change motions like cw, c$, and cc
    • codex doctor now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity
    • SDK users can pass exact CLI config overrides and select max or ultra reasoning effort

    5 details in Everything

16. rust-v0.148.0 Aug 18, 2026 · release notes

    Codex CLI gains Markdown conversation export, session forking/archiving, Bedrock support, and async hooks in v0.148.0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0

    └──▷ TRY IT
    Export the current TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. conversation to a Markdown file for sharing or archiving after a long coding session.
    copy

    $ /export

    Fork an existing session to explore an alternative approach without losing the original conversation state.
    copy

    $ codex exec fork

    Check estimated cost or thread credits consumed so far for the current workspace session.
    copy

    $ /status

    • Adds /export TUI command to export complete conversations to Markdown, sending output to the clipboard or a new file.
    • Adds codex exec fork subcommand to fork sessions, plus archive and restore actions in the TUI resume picker.
    • Adds Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support.
    • Hooks can now run commands asynchronously and invoke MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools.
    • Adds /status command display and status-line/terminal-title indicators for estimated thread credits or cost in eligible workspaces.

    +1 more show less

    • Draft prompts can now be composed while the TUI initializes, with resume and fork progress shown during startup.

    6 details in Everything

17. rust-v0.148.0-alpha.21 Prerelease Aug 17, 2026 · issue 049

    Codex CLI gains endpoint-protection detection in codex doctor, improved network diagnostics, and sandbox-isolated editor buffers.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.21 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.21

    └──▷ USE IT
    Pass a permission-map config key with a literal path (not representable via structured dotted-key config) when starting a Codex session from the TypeScript SDK.
    typescript copy

    const session = new Codex({
      configOverrides: [
        '--config', 'sandbox.writable_roots./home/user/project=true'
      ]
    });

    • Improves codex doctor network diagnostics with proxy-environment details, macOS system-proxy configuration reporting (automatic/PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration., manual, direct, unavailable), and detection of proxy authentication challenges (HTTP 407).
    • Adds CodexOptions.configOverrides to the TypeScript SDK for passing ordered --config key=value arguments to the Codex CLI unchanged, applied after structured config values.
    • Adds working-directory commands to the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
    • Honors per-environment shell variable policies and enforces environment-specific command policies.
    • Adds experimental app-server project APIs.

    +4 more show less

    • Adds a configurable skill catalog token budget.
    • Includes images in Guardian v2 transcripts and sources Guardian v2 defaults from the model catalog.
    • Compacts successful command activity in the TUI for a cleaner history view.
    • Enables editing queued messages with Vim history-up in the TUI composer.

    9 details in Everything

18. rust-v0.148.0-alpha.20 Prerelease Aug 16, 2026 · issue 047

    Codex CLI alpha adds disk space diagnostics to codex doctor, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool hook handlers, and Guardian-routed permission requests.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.20 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.20

    • Adds storage diagnostics to codex doctor, checking free disk space for both CODEX_HOME and the current worktree, with a warning threshold at 5 GiB and a failure threshold at 1 GiB.
    • Adds Windows Dev Drive check to codex doctor on Windows targets.
    • Supports pending environment attachment configuration so threads start without blocking while ensuring turns do not use an attachment prematurely; adds a Failed configuration state and environment_failed callback for per-thread failure and recovery.
    • Propagates W3C traceparent and tracestate trace context through exec-server relay frames, including fragmented encrypted Noise requests.
    • Scopes TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. app directory state to the active context.

    +4 more show less

    • Uses paginated history for persistent exec threads.
    • Shows resume and fork status during TUI startup.
    • Adds a health endpoint to the code-mode gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. listener.
    • Forwards workload identityworkload identityAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials. context during token exchangetoken exchangeAn OAuth 2.0 protocol extension (RFC 8693) that lets a service trade one token for another with different scopes, audience, or type, enabling delegation and impersonation across service boundaries without re-authenticating the user..

    9 details in Everything

19. rust-v0.148.0-alpha.18 Prerelease Aug 14, 2026 · issue 046

    Codex CLI alpha.18 makes Guardian v2 risk classification configurable and enables unified exec by default on Windows.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.18 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.18

    • Adds rich configuration for features.guardianv2 — now accepts a boolean toggle or an object specifying classifier instructions, review threshold, reasoning effort, action and instruction token limits, transcript source inclusion, per-entry and total token budgets, and the number of recent non-user entries.
    • Enables the unified_exec feature by default on all platforms including Windows, exposing exec_command and write_stdin on Windows instead of shell_command.
    • Adds an override to skip project configuration at startup.
    • Removes the gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. code-mode open session limit, allowing the host to register more than MAX_IN_FLIGHT_REQUESTS open sessions simultaneously.
    • Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. protocol discovery metrics — records a counter and duration for MCP client protocol discovery, tagged with legacy or auto mode and classified as modern, legacy, or failure outcomes.

    5 details in Everything

20. rust-v0.148.0-alpha.16 Prerelease Aug 14, 2026 · issue 046

    Codex CLI alpha.16 adds Guardian V2 risk scoring, parallel tool calls, strict MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. auto-review, and smarter plugin app discovery.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.16 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.16

    • Introduces Guardian V2 risk scoring: records risk scores on threads, initializes per-thread samplers, preserves transcript boundaries, and stores scores as snapshots — high-risk actions now require automatic review.
    • Enforces strict auto-review for MCP tool calls even when the approval policy, tool annotations, or a remembered session decision would otherwise skip review.
    • Adds agent_name to Responses API turn metadata, falling back to /root when no canonical agent path is set, with the field reserved from client metadata overrides.
    • Reuses active, uncancelled pending MCP connections during reconciliation when identity, catalog limit, and protocol mode still match, avoiding redundant startups.
    • Instructs the model to use tool_search to discover relevant tools within a selected plugin's apps before falling back to unrelated or built-in tools.

    5 details in Everything

21. rust-v0.148.0-alpha.15 Prerelease Aug 14, 2026 · issue 045

    Codex CLI adds an Amazon Bedrock Runtime provider and skill-level model annotation support in this alpha release.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.15 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.15

    • Adds the built-in amazon-bedrock-runtime provider for regional bedrock-runtime OpenAI-compatible endpoints, with SigV4SigV4AWS's request-signing protocol that authenticates HTTP calls by hashing the request body, headers, and credentials into a signature; cyber tools use it to talk to AWS APIs without embedding long-lived secrets. auth, per-provider AWS profile, region, and transport overrides, global and US cross-region GPT-5.6 model variants, and web search disabled (unsupported on Bedrock).
    • Adds an optional model field to skill frontmatter metadata (e.g., model: luna), allowing skills to declare a preferred model; unrecognized values are ignored without blocking the rest of the skill from loading.
    • Adds SkillModelDelegationInstruction so skills that request Luna while running on Sol or Terra are routed to Luna when it is available in the current provider namespace, with bounded and validated model identifiers and instruction size limits.

    3 details in Everything

22. rust-v0.148.0-alpha.14 Prerelease Aug 14, 2026 · issue 045

    Codex CLI alpha.14 adds per-server MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. callback ports, running-task exit choices, and experimental thread queue APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.14 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.14

    └──▷ USE IT
    Configure a per-server OAuth callback port so that an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server uses port 9005 instead of the global default during codex mcp login.
    yaml copy

    oauth:
      callback_port: 9005

    • Adds oauth.callback_port to MCP server configuration so each server can use its own OAuth callback port instead of the global mcp_oauth_callback_port; also accepts oauth.callbackPort from plugin MCP declarations and skill dependency metadata.
    • Adds running-task exit choices to local daemon sessions: pressing Ctrl-C while a task is running now shows a menu to cancel the task and stay in Codex, exit Codex while leaving the task running, or stop the task and exit Codex.
    • Adds experimental thread queue APIs to the app server.
    • Preserves client-authored developer messages across context compactioncontext compactionCondensing an AI conversation or working history to free space in the model's context window. A summary preserves useful information, but details can be lost. when retain_client_developer_messages is enabled.
    • Provides Guardian V2 with full tool action context — the original ToolPayload including tool name and arguments plus a bounded conversation transcript — for richer risk classification.

    +4 more show less

    • Wraps injected current-time reminders in <current_time_reminder> tags in model context.
    • Refreshes current-time reminders for full-history subagents by excluding parent reminders and injecting a single fresh reminder in the child request.
    • Adds structured telemetry for response retries.
    • Includes node_repl images in Guardian review evidence.

    9 details in Everything

23. rust-v0.148.0-alpha.12 Prerelease Aug 13, 2026 · issue 044

    Codex CLI alpha.12 routes network access through the approval pipeline, adds interrupted turn recovery, and hardens inline visualization sandbox isolation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.12 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.12

    • Adds RecoverTurnRequest and CodexThread::recover_turn_if_idle to resume an interrupted regular turn with its existing turn ID and updated thread settings, including Plan-mode recovery without injecting an empty user message.
    • Routes blocked network requests through the shared approval pipeline so permission hooks, automatic review, and user review all use the common approval flow — including for background terminals started by an earlier turn.
    • Materializes inline visualization viewer documents in a dedicated cache under CODEX_HOME, keyed by source and artifact thread IDs, instead of alongside visualization artifacts, preventing sandboxed sessions from modifying viewer documents before they open in a browser.
    • Creates visualization links only when the active filesystem policy cannot write to the viewer cache, disabling links for full-disk-write sessions and applying policy consistently when loading transcript history.
    • Records the final applied network decision in tool telemetry without exposing the destination or assigning an approval source.

    +1 more show less

    • Rejects turn recovery while another turn is active without applying settings or queuing input.

    6 details in Everything

24. rust-v0.148.0-alpha.11 Prerelease Aug 13, 2026 · issue 046

    Codex CLI alpha.11 adds thread usage display in /status, dynamic HTTP headers for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, and workload identityworkload identityAn identity assigned to software, such as a service or container, rather than a person. It lets the workload authenticate and receive permissions without sharing a user's credentials. integration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.11

    • Adds thread-credits and estimated-thread-cost as configurable terminal title items for monitoring per-thread quota consumption.
    • Shows estimated thread usage in the /status command and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. status surfaces.
    • Adds dynamic HTTP header helpers for MCP servers, enabling per-request header customization.
    • Integrates workload identity with Codex authentication for enterprise environments.
    • Supports gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. code-mode hosts in the app server alongside existing WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output.-based hosts.

    +7 more show less

    • Reads model ETagsETagsHTTP response headers that identify a specific version of a resource, letting clients skip re-downloading unchanged content; cyber tools use them to detect when monitored assets have been silently modified. from WebSocket metadata events for more efficient model version tracking.
    • Adds per-thread usage queries to the backend client.
    • Stamps conversation history items with creation times.
    • Enforces non-interactive approval policy for Codex delegate sessions.
    • Adds durable reverts for paginated threads.
    • Detects implicit skill invocations from PowerShell reads.
    • Adds manifest-defined metrics and bounded measurement analytics for trusted plugin scripts and shell commands.

    12 details in Everything

25. rust-v0.147.0-alpha.6.6 Prerelease Aug 10, 2026 · issue 042

    Codex CLI alpha.6.6 adds Amazon Bedrock web search support, Agent Plugin runtime boundaries, and expanded MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. namespace description limits.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.6.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.6

    • Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary when the new limit is exceeded.
    • Enables hosted web search for Amazon Bedrock, resolving unsupported live and indexed modes to cached search and disabling the tool when cached search is prohibited by managed requirements.
    • Gives externalAgentConfig/detect its own global serialization queue so configuration reads, writes, and external agent imports remain responsive while detection runs.
    • Bounds Cursor project path resolution to 128 probes using common filename separators instead of recursively walking the directory tree, rejecting ambiguous matches and unsafe encoded components.
    • Skips symbolic links and other non-regular entries when installing a plugin into the store instead of rejecting the installation.

    5 details in Everything

26. rust-v0.148.0-alpha.6 Prerelease Aug 10, 2026 · issue 042

    Codex CLI adds dual-WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. code-mode transport, paginated TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. history, cached web search for Amazon Bedrock, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. conformance regression gates.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.6

    └──▷ TRY IT
    Enable process-scoped PSP routing for first-party ChatGPT requests when starting the app server.
    copy

    $ codex app-server --psp

    • Adds --psp flag to app-server to enable process-scoped PSP routing for first-party ChatGPT requests.
    • Adds a dual-WebSocket transport for code mode, enabling a new host-transport path for code-mode sessions.
    • Enables cached web search for Amazon Bedrock sessions.
    • Enables remote compaction for Amazon Bedrock.
    • Adds paginated transcript history loading in the TUI, unlocking browsing of long session histories.

    +20 more show less

    • Adds durable per-thread user submission queues for more reliable turn handling.
    • Adds tool registry collision policy configuration to control how name conflicts are resolved.
    • Supports deferred loading for freeform tools and deferred custom tools in tool search.
    • Supports custom tools in namespaces.
    • Supports includeTurns reads for paginated threads.
    • Supports leaf models in multi-agent v2.
    • Adds opt-in concurrent exec-server request dispatch.
    • Supports configured ChatGPT cookies in HTTP clients.
    • Prompts before trusting local project directories, and automatically trusts undecided local projects after confirmation.
    • Rejects implicitly discovered bare Git repositories to reduce unintended repo scope.
    • Redacts secrets (including bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else.) from app-server command execution items.
    • Adds host skill root loading and moves skill policy resolution into the codex-skills crate.
    • Links Codex attribution in pull request bodies.
    • Allows disabling the built-in image viewer.
    • Makes token budget context identity configurable.
    • Negotiates MCP extensions per app-server session.
    • Preserves complete MCP namespace descriptions.
    • Handles late MCP startup results after lag timeout.
    • Times out stalled code-mode host requests.
    • Identifies agents by name in token budget context.

    25 details in Everything

27. rust-v0.148.0-alpha.5 Prerelease Aug 8, 2026 · issue 039

    Codex CLI adds migrate-rollouts subcommand, Markdown conversation export, session forking in codex exec, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. event subscriptions, and a Guardian circuit-breaker for cyber models.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.5

    └──▷ TRY IT
    Inspect or migrate legacy local sessions to the new paginated thread history format before upgrading workflows that rely on thread resume.
    copy

    $ codex migrate-rollouts

    • Adds migrate-rollouts subcommand to inspect or migrate legacy local sessions to paginated thread history.
    • Adds Markdown conversation export to the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
    • Adds session forking to codex exec.
    • Adds MCP event discovery and subscriptions.
    • Adds session archiving and restore to the resume picker.

    +8 more show less

    • Adds a Guardian circuit-breaker policy for cyber-specialty models, interrupting their turns after the first Guardian denial.
    • Adds a unified image budget across agents.
    • Exposes multi-agent versions in model/list.
    • Exposes app-server diagnostics through the experimental API.
    • Adds process diagnostics snapshots.
    • Includes call IDs in MCP requests.
    • Configures the default code-mode exec yield timeout.
    • Keeps response streams alive through connection failures.

    13 details in Everything

28. rust-v0.148.0-alpha.2 Prerelease Aug 7, 2026 · issue 039

    Codex CLI gains session forking, Markdown conversation export, session archiving, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool hook configs, and agent identity endpoint overrides.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.2

    └──▷ TRY IT
    Branch off a previous session to explore an alternative approach without losing the original thread.
    copy

    $ codex exec fork session-123 "try a different refactor approach"

    Fork a session and attach a screenshot as context for the follow-up prompt.
    copy

    $ codex exec fork session-123 --image screenshot.png "fix the layout issue shown in the image"

    • Adds fork subcommand to codex exec to branch a previous session into a new one, accepting a SESSION_ID, optional --image/-i file attachments, and an optional PROMPT (or - to read from stdin).
    • Adds /export command in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. to export the full conversation history as structured Markdown, with clipboard and file destinations, default filename prompting, and explicit path argument support.
    • Honors CODEX_AGENT_IDENTITY_AUTHAPI_BASE_URL and CODEX_AGENT_IDENTITY_JWKS_BASE_URL environment variables to override agent identity registration and verification endpoints.
    • Adds session archiving to the resume picker in the TUI, allowing sessions to be archived and restored.
    • Recognizes mcp_tool hook handler configurations (with server, tool, JSON input, and optional timeout and status message) and returns them from configRequirements/read.

    +1 more show less

    • Clamps wait_agent timeout requests below min_wait_timeout_ms to the configured minimum instead of rejecting them, and reports the adjustment in the tool output.

    6 details in Everything

29. rust-v0.148.0-alpha.1 Prerelease Aug 7, 2026 · issue 038

    Adds migrate-rollouts subcommand to inspect and migrate legacy local sessions to paginated thread history.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.148.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.1

    └──▷ TRY IT
    Dry-run inspection of all local sessions eligible for migration before committing any changes.
    copy

    $ codex migrate-rollouts --verbose --json

    Migrate a specific thread to paginated history with a throughput cap to avoid saturating disk I/O.
    copy

    $ codex migrate-rollouts --apply --thread <THREAD_ID> --max-mib-per-second 50

    • Adds migrate-rollouts subcommand with --apply, --thread, --max-mib-per-second, --json, and --verbose flags to inspect or migrate legacy local sessions to paginated thread history.
    • Adds a Guardian circuit-breaker policy that interrupts cyber model turns after the first Guardian denial, while retaining existing denial thresholds for all other models.
    • Supports fetching remote installed plugins across all scopes.
    • Recovers MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers automatically after OAuth reauthentication.
    • Starts cached MCP servers lazily for subagents, reducing startup overhead.

    +4 more show less

    • Supports content references for inline visualizations.
    • Mounts a minimal /dev in full-filesystem Bubblewrap sandboxes.
    • Tracks context windowscontext windowsThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. per agent.
    • Sends model routing hints to the Codex backend.

    9 details in Everything

30. rust-v0.147.0 Aug 7, 2026 · issue 038

    Codex CLI v0.147.0 adds --approve-for-me, portable Agent Plugins, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. 2026-07-28 protocol support, and Bedrock cached web search.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0

    └──▷ TRY IT
    Run a coding task in CI without manual approval prompts, letting the agent proceed automatically.
    copy

    $ codex exec --approve-for-me 'add unit tests for the auth module'

    • Adds --approve-for-me CLI flag to codex exec to enable automatically reviewed approvals without manual confirmation prompts.
    • Supports the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup.
    • Installs portable Agent Plugins and searches across local, personal, workspace, and remote plugin catalogs.
    • Enables cached web search and remote conversation compaction for Amazon Bedrock.
    • Organizes conversations into persistent, manually ordered sections and supports incremental browsing of long transcripts.

    +1 more show less

    • Imports Cursor-managed skills and synchronizes changes to imported Claude and Cursor conversations without creating duplicates.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The deprecated --full-auto flag for codex exec has been removed; use --sandbox workspace-write instead.
    • !Redundant Linux bundle archives are no longer published; use the standard codex-package-<target> release archives instead.
31. rust-v0.147.0-alpha.13 Prerelease Aug 6, 2026 · issue 037

    Adds thread/section/move API, section_position sorting to thread/list, and a hidden --psp flag for PSP routing in the app-server.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.13 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.13

    • Adds hidden --psp flag to the app-server to enable process-only PSP routing for first-party ChatGPT requests.
    • Loads cloud-managed servers in MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. CLI commands.
    • Exposes MCP read-only hints in tool call items.
    • Distinguishes unknown MCP authentication status.
    • Supports Enterprise automation account plans.

    +8 more show less

    • Enables skills in the MCP server.
    • Restricts hosted MCP credentials to local environments and isolates MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. credentials by environment.
    • Restricts shell_command to a single local environment.
    • Allows naming forked chats from the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
    • Denies network access when an allow amendment fails.
    • Records attempted tool calls in response metadata.
    • Records normalized sandbox violation events.
    • Detects connectors used in external agent sessions.

    13 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Legacy Linux bundle archives are no longer published.
32. rust-v0.147.0-alpha.12 Prerelease Aug 5, 2026 · issue 037

    Codex CLI adds image resize notices, local auth policy enforcement, and symlinked skill path preservation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.12 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.12

    • Adds the disabled-by-default image_resize_notice feature: when enabled, appends a developer message after resized images in user messages or tool outputs, reporting each image's original and prepared dimensions.
    • Enforces managed authentication requirements locally via a requirements.toml allowlist for login methods and ChatGPT workspaces, combining managed and existing workspace restrictions by intersection and failing closed when no usable login method remains.
    • Preserves discovery paths for symlinked skills in the skill catalog, allowing either the discovery path or canonical path for structured selections and linked skill mentions.
    • Makes Windows path URI comparisons ASCII-case-insensitive for drive and UNC paths while preserving case-sensitive POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems. behavior, including starts_with and relative_path_from operations.

    4 details in Everything

33. rust-v0.147.0-alpha.6.5 Prerelease Aug 5, 2026 · issue 037

    Codex CLI alpha.6.5 adds Amazon Bedrock cached web search, stricter Agent Plugin runtime boundaries, and expanded MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. namespace description limits.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.6.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.5

    • Skips symbolic links and other non-file, non-directory entries when installing plugins into the store instead of rejecting the installation.

    1 detail in Everything

34. rust-v0.147.0-alpha.11 Prerelease Aug 5, 2026 · issue 037

    Codex CLI alpha.11 adds per-session code-mode execution limits and switches API-key Guardian reviews to gpt-5.6-luna.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.11

    • Adds create_session_with_limits and session-scoped cell execution limits via CodeModeSessionCellExecutionLimits, clamping execute and wait yield times to max_yield_time_ms without terminating the running cell.
    • Switches Guardian approval reviews authenticated with an API key to use gpt-5.6-luna, while retaining codex-auto-review for ChatGPT authentication; falls back to the bundled Guardian policy when the selected model has no catalog-provided review policy.
    • Caches McpBinding per published MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. runtime once the tool catalog revision is stable, reusing it across sampling steps and rebuilding only after a runtime publish or catalog change.
    • Bounds interactive TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. telemetry shutdown to a 500 ms budget via OtelProvider::shutdown_with_timeout, preventing a stalled OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. exporter from blocking indefinitely on exit.

    4 details in Everything

35. rust-v0.147.0-alpha.10 Prerelease Aug 5, 2026 · issue 037

    Codex CLI alpha.10 adds concurrent exec-server dispatch, safer TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. defaults for cyber models, and expanded MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. namespace description limits.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.10

    └──▷ TRY IT
    Run the exec-server with concurrent request processing enabled to handle multiple client requests in parallel.
    copy

    $ codex exec-server --concurrent-requests 4 --listen ws://127.0.0.1:9000

    • Adds --concurrent-requests flag (alias concurrent-requests, default 1) to the exec-server subcommand to enable opt-in concurrent request dispatch across connections.
    • Adds --psp flag (global, hidden) to the main CLI and app-server for process-scoped PSP routing of first-party ChatGPT requests.
    • Adds safer TUI defaults for cyber models.
    • Enables cached web search support for Amazon Bedrock.
    • Enables remote compaction for Amazon Bedrock.

    +6 more show less

    • Adds tool registry collision policy configuration with strict tool name collision errors enforced.
    • Prompts before trusting local project directories; rejects implicitly discovered bare Git repositories.
    • Adds durable per-thread user submission queues.
    • Paginates transcript history in the TUI for large threads.
    • Allows disabling the built-in image viewer.
    • Redacts secrets (including bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else.) from app-server command execution items in display output.

    11 details in Everything

36. rust-v0.147.0-alpha.6.4 Prerelease Aug 4, 2026 · issue 036

    Codex CLI now enables cached web search for Amazon Bedrock, falling back from unsupported live/indexed modes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.6.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.4

    • Enables hosted text web search for Amazon Bedrock, automatically resolving unsupported live and indexed web-access modes to cached search (or disabling the tool when cached search is prohibited by managed requirements).
    • Normalizes built-in and configured Bedrock model catalogs to text-only web search payloads, removing the unsupported search_content_types field that Bedrock rejects.

    2 details in Everything

37. rust-v0.147.0-alpha.6.3 Prerelease Aug 4, 2026 · issue 036

    MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. namespace tool-spec description limit raised from 1,000 bytes to 512 KiB, preserving complete server instructions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.6.3 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.3

38. rust-v0.147.0-alpha.3 Prerelease Jul 31, 2026 · issue 031

    Codex CLI alpha.3 adds parallel MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool execution, cloud-managed MCP server loading, forked chat naming, and subagent direct-input reporting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.3 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.3

    • Allows unrelated tools to run concurrently while MCP servers are still starting up, eliminating gate-blocking delays.
    • Loads cloud-managed MCP servers in MCP CLI commands (codex mcp list, codex mcp get).
    • Enables naming forked chats directly from the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
    • Exposes MCP read-only hints in tool call items.
    • Denies network access when an allow amendment fails, tightening sandbox network policy.

    +2 more show less

    • Supports Enterprise automation account plans.
    • Distinguishes unknown MCP authentication status for clearer diagnostics.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The --full-auto flag is removed from codex exec; legacy handling has been dropped.
39. rust-v0.147.0-alpha.2 Prerelease Jul 30, 2026 · issue 030

    Codex CLI adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. 2026 protocol support, cloud-managed sandbox profiles, persisted thread sections, and model-owned token budget defaults.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.2

    • Adds MCP 2026-07-28 discovery support and completes MCP 2026 client support, enabling use of the latest Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. spec.
    • Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing startup latency for tool-heavy workflows.
    • Routes MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. requests through configured HTTP clients, enabling proxy-aware MCP authentication.
    • Loads cloud-managed profiles for codex sandbox, allowing centrally managed sandbox configurations.
    • Adds persisted sections for organizing threads in session history.

    +11 more show less

    • Supports model-owned token budget defaults, letting model catalog entries supply default token-budget settings when none are explicitly configured.
    • Adds configurable developer instructions for v2 subagents.
    • Enables network policy callbacks for remote exec environments.
    • Routes WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate. sideband joins to the Realtime API.
    • Supports self-serve Business ProLite accounts.
    • Supports streaming bodies in route-aware HTTP requests.
    • Supports plaintext collaboration tool messages.
    • Loads thread titles concurrently during session startup, improving startup responsiveness.
    • Tags turn reports with the selected turn's model and effort level.
    • Terminates Windows non-TTY processes on interrupt for cleaner process lifecycle management.
    • Normalizes Windows namespace paths in path URIs.

    16 details in Everything

40. rust-v0.147.0-alpha.2 Prerelease Jul 30, 2026 · issue 005

    Codex CLI adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. 2026 protocol support, cloud-managed sandbox profiles, persisted thread sections, and model-owned token budget defaults.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.2

    • Adds MCP 2026-07-28 discovery support and completes MCP 2026 client support, enabling use of the latest Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. spec.
    • Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing startup latency for tool-heavy workflows.
    • Routes MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. requests through configured HTTP clients, enabling proxy-aware MCP authentication.
    • Loads cloud-managed profiles for codex sandbox, allowing centrally managed sandbox configurations.
    • Adds persisted sections for organizing threads in session history.

    +11 more show less

    • Supports model-owned token budget defaults, letting model catalog entries supply default token-budget settings when none are explicitly configured.
    • Adds configurable developer instructions for v2 subagents.
    • Enables network policy callbacks for remote exec environments.
    • Routes WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate. sideband joins to the Realtime API.
    • Supports self-serve Business ProLite accounts.
    • Supports streaming bodies in route-aware HTTP requests.
    • Supports plaintext collaboration tool messages.
    • Loads thread titles concurrently during session startup, improving startup responsiveness.
    • Tags turn reports with the selected turn's model and effort level.
    • Terminates Windows non-TTY processes on interrupt for cleaner process lifecycle management.
    • Normalizes Windows namespace paths in path URIs.

    16 details in Everything

41. rust-v0.147.0-alpha.1 Prerelease Jul 29, 2026 · issue 029

    Codex CLI exec servers gain stdin-close exit control, plugin eligibility metadata, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. legacy-server fallback improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.1

    └──▷ TRY IT
    Keep a remote exec server's lifetime tied to the spawning process — useful in CI or orchestration where you want the server to exit cleanly when the parent dies rather than becoming an orphan.
    copy

    $ codex exec-server --remote --exit-on-stdin-close

    • Adds --exit-on-stdin-close flag (and CODEX_EXEC_SERVER_EXIT_ON_STDIN_CLOSE env var) to remote exec servers, enabling graceful shutdown with telemetry flush when the parent process closes stdin.
    • Exposes plugin eligibility metadata (disabledReason, eligiblePlanTypes) in app-server plugin summaries, surfacing plan-gating and admin-disabled status.
    • Adds parent_turn_id tracking across nested Codex agent spawns, delegated sessions, and follow-up tasks for improved request provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build..

    3 details in Everything

42. rust-v0.147.0-alpha.1 Prerelease Jul 29, 2026 · issue 005

    Codex CLI exec servers gain stdin-close exit control, plugin eligibility metadata, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. legacy-server fallback improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.147.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.1

    └──▷ TRY IT
    Keep a remote exec server's lifetime tied to the spawning process — useful in CI or orchestration where you want the server to exit cleanly when the parent dies rather than becoming an orphan.
    copy

    $ codex exec-server --remote --exit-on-stdin-close

    • Adds --exit-on-stdin-close flag (and CODEX_EXEC_SERVER_EXIT_ON_STDIN_CLOSE env var) to remote exec servers, enabling graceful shutdown with telemetry flush when the parent process closes stdin.
    • Exposes plugin eligibility metadata (disabledReason, eligiblePlanTypes) in app-server plugin summaries, surfacing plan-gating and admin-disabled status.
    • Adds parent_turn_id tracking across nested Codex agent spawns, delegated sessions, and follow-up tasks for improved request provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build..

    3 details in Everything

43. rust-v0.146.0 Jul 29, 2026 · issue 029

    Codex CLI v0.146.0 adds named/pinned sessions, thread forking, Agent Plugins, WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Code Mode, and standalone web search for custom providers.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0

    • Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them.
    • Fork threads with paginated history, including temporary forks that do not appear in thread listings.
    • Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code.
    • Connect the app-server to remote Code Mode hosts over WebSocket.
    • Enable standalone web search for compatible custom model providers.

    +1 more show less

    • Discover executor-provided skills and securely read their associated resources, including explicitly selected skills.

    6 details in Everything

44. rust-v0.146.0 Jul 29, 2026 · issue 005

    Codex CLI v0.146.0 adds named/pinned sessions, thread forking, Agent Plugins, WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Code Mode, and standalone web search for custom providers.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0

    • Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them.
    • Fork threads with paginated history, including temporary forks that do not appear in thread listings.
    • Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code.
    • Connect the app-server to remote Code Mode hosts over WebSocket.
    • Enable standalone web search for compatible custom model providers.

    +1 more show less

    • Discover executor-provided skills and securely read their associated resources, including explicitly selected skills.

    6 details in Everything

45. rust-v0.146.0-alpha.14 Prerelease Jul 28, 2026 · issue 028

    Codex CLI alpha.14 adds cloud-managed profiles for codex sandbox, network policy callbacks for remote exec, and configurable developer instructions for v2 subagents.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.14 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.14

    • Loads cloud-managed profiles for codex sandbox, enabling permission profiles and managed requirements to be sourced from cloud config bundles.
    • Adds configurable developer instructions for v2 subagents, allowing per-subagent instruction customization in multi-agent workflows.
    • Routes curated plugins by authentication mode, so plugin recommendations are matched to the active auth context.
    • Prepares MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. and plugin recommendations concurrently, reducing latency when loading tool suggestions.
    • Terminates Windows non-TTY processes on interrupt, routing Ctrl-C through the termination callback for pipe-backed processes.

    5 details in Everything

46. rust-v0.146.0-alpha.14 Prerelease Jul 28, 2026 · issue 005

    Codex CLI alpha.14 adds cloud-managed profiles for codex sandbox, network policy callbacks for remote exec, and configurable developer instructions for v2 subagents.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.14 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.14

    • Loads cloud-managed profiles for codex sandbox, enabling permission profiles and managed requirements to be sourced from cloud config bundles.
    • Adds configurable developer instructions for v2 subagents, allowing per-subagent instruction customization in multi-agent workflows.
    • Routes curated plugins by authentication mode, so plugin recommendations are matched to the active auth context.
    • Prepares MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. and plugin recommendations concurrently, reducing latency when loading tool suggestions.
    • Terminates Windows non-TTY processes on interrupt, routing Ctrl-C through the termination callback for pipe-backed processes.

    5 details in Everything

47. rust-v0.146.0-alpha.13 Prerelease Jul 27, 2026 · issue 027

    Codex CLI alpha.13 adds cached MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool exposure before server startup and model-owned token budget defaults.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.13 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.13

    • Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing latency at session start.
    • Supports model-owned token budget defaults from the model catalog, applied automatically when no explicit token-budget configuration is set.

    2 details in Everything

48. rust-v0.146.0-alpha.13 Prerelease Jul 27, 2026 · issue 005

    Codex CLI alpha.13 adds cached MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool exposure before server startup and model-owned token budget defaults.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.13 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.13

    • Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing latency at session start.
    • Supports model-owned token budget defaults from the model catalog, applied automatically when no explicit token-budget configuration is set.

    2 details in Everything

49. rust-v0.146.0-alpha.10 Prerelease Jul 25, 2026 · issue 025

    Adds configurable code-mode host fallback control and code-mode tool names in Responses Lite metadata.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.10

    └──▷ USE IT
    Prevent silent fallback to embedded V8 so failures in the standalone code-mode host surface as tool output rather than being swallowed.
    toml copy

    # In your Codex config file:
    [features.code_mode_host]
    disable_in_process_fallback = true

    • Adds disable_in_process_fallback option to features.code_mode_host config table, letting operators prevent silent fallback to embedded V8 when the standalone code-mode host fails to start.
    • Adds code_mode_tool_names field to Responses Lite turn metadata, exposing normalized code-mode identifier-to-ToolName mappings for each turn.
    • Scopes pending network approvals to a turn and execution, coalesces duplicate requests within one execution, and assigns unique per-execution identifiers to user approval requests and permission hooks.

    3 details in Everything

50. rust-v0.146.0-alpha.10 Prerelease Jul 25, 2026 · issue 005

    Adds configurable code-mode host fallback control and code-mode tool names in Responses Lite metadata.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.10

    └──▷ USE IT
    Prevent silent fallback to embedded V8 so failures in the standalone code-mode host surface as tool output rather than being swallowed.
    toml copy

    # In your Codex config file:
    [features.code_mode_host]
    disable_in_process_fallback = true

    • Adds disable_in_process_fallback option to features.code_mode_host config table, letting operators prevent silent fallback to embedded V8 when the standalone code-mode host fails to start.
    • Adds code_mode_tool_names field to Responses Lite turn metadata, exposing normalized code-mode identifier-to-ToolName mappings for each turn.
    • Scopes pending network approvals to a turn and execution, coalesces duplicate requests within one execution, and assigns unique per-execution identifiers to user approval requests and permission hooks.

    3 details in Everything

51. rust-v0.146.0-alpha.8 Prerelease Jul 24, 2026 · issue 025

    Codex CLI adds ent26 enterprise plan support, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. proxy-aware auth discovery, ephemeral thread forks, and workspace plugin publish capability.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.8 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.8

    • Supports the ent26 enterprise plan tier, including authentication, rate-limit payloads, cloud-config eligibility, and usage-limit guidance.
    • Routes MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. discovery and authentication status through each server's configured runtime HTTP client, enabling reliable auth for MCP servers behind proxies.
    • Supports ephemeral forks of paginated threads via thread/fork with excludeTurns: true, preserving selected history and fork preview without creating a persistent rollout.
    • Exposes canPublishToWorkspace capability metadata in plugin share contexts and plugin/share/save responses so clients can offer workspace-directory publishing.

    4 details in Everything

52. rust-v0.146.0-alpha.8 Prerelease Jul 24, 2026 · issue 005

    Codex CLI adds ent26 enterprise plan support, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. proxy-aware auth discovery, ephemeral thread forks, and workspace plugin publish capability.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.8 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.8

    • Supports the ent26 enterprise plan tier, including authentication, rate-limit payloads, cloud-config eligibility, and usage-limit guidance.
    • Routes MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. discovery and authentication status through each server's configured runtime HTTP client, enabling reliable auth for MCP servers behind proxies.
    • Supports ephemeral forks of paginated threads via thread/fork with excludeTurns: true, preserving selected history and fork preview without creating a persistent rollout.
    • Exposes canPublishToWorkspace capability metadata in plugin share contexts and plugin/share/save responses so clients can offer workspace-directory publishing.

    4 details in Everything

53. rust-v0.146.0-alpha.7 Prerelease Jul 24, 2026 · issue 025

    Codex CLI adds Agent Plugins manifest support, background MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. prewarming, and paginated thread forks.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.7

    • Adds support for Agent Plugins 1.0 manifests: recognizes root plugin.json files and maps their metadata, skills/, and mcp.json into Codex plugin manifests.
    • Applies Codex-specific apps, hooks, and interface settings from the inline com.openai extension in Agent Plugins manifests, with .codex-plugin/plugin.json as a fallback overlay.
    • Adds background prewarming of MCP runtime updates so model steps are less likely to stall waiting for MCP rebuilds after config or auth changes.
    • Refreshes MCP runtimes automatically when session authentication changes (auth mode, account details, or token).
    • Reconnects all configured MCP servers when an explicit refresh is triggered, rather than reusing existing connections.

    +4 more show less

    • Exposes executor skills through skill tools and enables resource reads for explicit executor skills.
    • Supports paginated thread forks.
    • Preserves output from hooks that exit before reading stdin (fast-exiting hooks no longer lose stdout).
    • Allows hosts to customize the model-visible wait_for_environment tool and environment_id descriptions via WaitForEnvironmentToolConfig.

    9 details in Everything

54. rust-v0.146.0-alpha.7 Prerelease Jul 24, 2026 · issue 005

    Codex CLI adds Agent Plugins manifest support, background MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. prewarming, and paginated thread forks.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.7

    • Adds support for Agent Plugins 1.0 manifests: recognizes root plugin.json files and maps their metadata, skills/, and mcp.json into Codex plugin manifests.
    • Applies Codex-specific apps, hooks, and interface settings from the inline com.openai extension in Agent Plugins manifests, with .codex-plugin/plugin.json as a fallback overlay.
    • Adds background prewarming of MCP runtime updates so model steps are less likely to stall waiting for MCP rebuilds after config or auth changes.
    • Refreshes MCP runtimes automatically when session authentication changes (auth mode, account details, or token).
    • Reconnects all configured MCP servers when an explicit refresh is triggered, rather than reusing existing connections.

    +4 more show less

    • Exposes executor skills through skill tools and enables resource reads for explicit executor skills.
    • Supports paginated thread forks.
    • Preserves output from hooks that exit before reading stdin (fast-exiting hooks no longer lose stdout).
    • Allows hosts to customize the model-visible wait_for_environment tool and environment_id descriptions via WaitForEnvironmentToolConfig.

    9 details in Everything

55. rust-v0.146.0-alpha.6 Prerelease Jul 24, 2026 · issue 024

    Codex CLI alpha.6 adds remote code-mode host support, nonblocking TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. interrupts, and skill-catalog context warnings.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.6

    └──▷ TRY IT
    Connect the app-server to a remote code-mode host over a secure WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. instead of the default in-process host.
    copy

    $ codex-app-server --code-mode-host wss://example.com/code-mode --listen ws://127.0.0.1:9000

    • Adds --code-mode-host flag to the app-server to connect to a remote code-mode host over WebSocket (wss://).
    • Supports WebSocket transport for the code-mode host in the app-server, enabling remote code-mode sessions.
    • Exposes remote skill icon URLs through the app server.
    • Exposes Browser Use requirements through the app server.
    • Routes exec-server HTTP and WebSocket traffic through the configured proxy policy.

    +7 more show less

    • Adds trusted plugin script attribution, tracking which plugin scripts originated command executions.
    • Registers the Guardian V2 feature flag.
    • Allows disabling the update_plan tool via configuration.
    • Preserves refreshed Apps tools across MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. runtime updates.
    • Keeps side conversations open when switching threads.
    • Supports incremental replay of updated thread items.
    • Enforces writer ownership for thread archive and deletion operations.

    12 details in Everything

56. rust-v0.146.0-alpha.6 Prerelease Jul 24, 2026 · issue 005

    Codex CLI alpha.6 adds remote code-mode host support, nonblocking TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. interrupts, and skill-catalog context warnings.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.6

    └──▷ TRY IT
    Connect the app-server to a remote code-mode host over a secure WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. instead of the default in-process host.
    copy

    $ codex-app-server --code-mode-host wss://example.com/code-mode --listen ws://127.0.0.1:9000

    • Adds --code-mode-host flag to the app-server to connect to a remote code-mode host over WebSocket (wss://).
    • Supports WebSocket transport for the code-mode host in the app-server, enabling remote code-mode sessions.
    • Exposes remote skill icon URLs through the app server.
    • Exposes Browser Use requirements through the app server.
    • Routes exec-server HTTP and WebSocket traffic through the configured proxy policy.

    +7 more show less

    • Adds trusted plugin script attribution, tracking which plugin scripts originated command executions.
    • Registers the Guardian V2 feature flag.
    • Allows disabling the update_plan tool via configuration.
    • Preserves refreshed Apps tools across MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. runtime updates.
    • Keeps side conversations open when switching threads.
    • Supports incremental replay of updated thread items.
    • Enforces writer ownership for thread archive and deletion operations.

    12 details in Everything

57. rust-v0.146.0-alpha.3.1 Prerelease Jul 23, 2026 · issue 024

    Custom model providers can now opt into standalone web search via a new supports_standalone_web_search setting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.3.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.3.1

    • Adds supports_standalone_web_search model-provider setting that lets custom Responses API providers opt into the standalone web.run web search tool.
    • Routes standalone web search requests through the custom provider's own endpoint and authentication when the setting is enabled.

    2 details in Everything

58. rust-v0.146.0-alpha.3.1 Prerelease Jul 23, 2026 · issue 005

    Custom model providers can now opt into standalone web search via a new supports_standalone_web_search setting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.3.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.3.1

    • Adds supports_standalone_web_search model-provider setting that lets custom Responses API providers opt into the standalone web.run web search tool.
    • Routes standalone web search requests through the custom provider's own endpoint and authentication when the setting is enabled.

    2 details in Everything

59. rust-v0.146.0-alpha.5 Prerelease Jul 23, 2026 · issue 024

    Codex CLI alpha.5 adds thread pinning, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool prefix omission, custom provider web search, and MCP connection reuse.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.5

    • Adds isPinned field to thread responses with pin/unpin support via thread/metadata/update and an isPinned filter on thread/list, enabling persistent thread pinning with cursor-based pagination.
    • Allows omitting MCP tool name prefixes on a per-server basis, reducing verbosity when working with trusted MCP servers.
    • Allows custom providers to opt into standalone web search, extending web-search capability beyond first-party models.
    • Reuses MCP connections across runtime refreshes and replaces closed connections during reconciliation, reducing reconnection overhead.
    • Allows disabling the multi-agent wait tool, giving operators control over multi-agent coordination primitives.

    +4 more show less

    • Infers the bundled Claude Code plugin marketplace, enabling automatic plugin discovery for Claude Code users.
    • Uses the API plugin marketplace for Amazon Bedrock, broadening plugin availability for Bedrock-backed deployments.
    • Sets a default User-Agent header for MCP HTTP requests, improving server-side auditability of MCP traffic.
    • Caches remote plugin catalogs by scope, reducing repeated fetches when working with scoped plugin registries.

    9 details in Everything

60. rust-v0.146.0-alpha.5 Prerelease Jul 23, 2026 · issue 005

    Codex CLI alpha.5 adds thread pinning, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool prefix omission, custom provider web search, and MCP connection reuse.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.5

    • Adds isPinned field to thread responses with pin/unpin support via thread/metadata/update and an isPinned filter on thread/list, enabling persistent thread pinning with cursor-based pagination.
    • Allows omitting MCP tool name prefixes on a per-server basis, reducing verbosity when working with trusted MCP servers.
    • Allows custom providers to opt into standalone web search, extending web-search capability beyond first-party models.
    • Reuses MCP connections across runtime refreshes and replaces closed connections during reconciliation, reducing reconnection overhead.
    • Allows disabling the multi-agent wait tool, giving operators control over multi-agent coordination primitives.

    +4 more show less

    • Infers the bundled Claude Code plugin marketplace, enabling automatic plugin discovery for Claude Code users.
    • Uses the API plugin marketplace for Amazon Bedrock, broadening plugin availability for Bedrock-backed deployments.
    • Sets a default User-Agent header for MCP HTTP requests, improving server-side auditability of MCP traffic.
    • Caches remote plugin catalogs by scope, reducing repeated fetches when working with scoped plugin registries.

    9 details in Everything

61. rust-v0.146.0-alpha.2 Prerelease Jul 22, 2026 · issue 022

    Codex CLI adds Codex Auto Review model metadata, session headers for realtime conversations, and routes LM Studio traffic through the shared HTTP client.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.2

    • Configures Codex Auto Review with an action-risk review prompt template, default generic security policy, approval rules, and permission messages for danger_full_access, workspace_write, and read_only modes.
    • Includes session-id and thread-id headers when starting realtime conversations over WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. or WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate..
    • Routes LM Studio server requests through the shared route-aware HTTP client pool, adding connection-timeout support scoped to connection establishment.

    3 details in Everything

62. rust-v0.146.0-alpha.1 Prerelease Jul 22, 2026 · issue 022
    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.146.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.1

    • Adds app/read app-server API endpoint for fetching metadata for up to 100 app IDs with optional tool summaries, deduplication, and caching.
    • Adds audio input support forwarded to the Responses API, gated by model input modalities.
    • Adds API for reading installed app runtime state.
63. rust-v0.145.0-alpha.30 Prerelease Jul 22, 2026 · issue 022

    Codex CLI alpha.30 adds Esc-key session interruption and parallel stdin writes across unified-exec sessions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.30 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.30

    • Runs write_stdin in parallel across unified-exec sessions for faster multi-session I/O.
    • Updates bundled model catalog with GPT-5.6 context windowscontext windowsThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. set to 272,000 tokens and new personality instruction variables.

    2 details in Everything

64. rust-v0.145.0 Jul 21, 2026 · issue 022

    Codex CLI v0.145.0 adds paginated thread history, Amazon Bedrock support, audio inputs, multi-agent V2 GA, and /import for Cursor/Claude settings.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0

    • Adds experimental paginated thread history with resume, search, persisted thread names, sub-agent support, and memories.
    • Expands /import to migrate settings, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, plugins, sessions, commands, and project-scoped memories from Cursor and Claude Code.
    • Adds experimental Amazon Bedrock login with custom endpoint and authentication support; sets GPT-5.6 Sol as the default Bedrock model.
    • Supports audio inputs and tool outputs (common local audio formats) and introduces streaming realtime V3 conversations.
    • Adds secure, clickable inline visualization links in the terminal UI.

    5 details in Everything

65. rust-v0.145.0-alpha.29 Prerelease Jul 21, 2026 · issue 021

    Adds route-aware HTTP client pooling and system proxy support across daemon, plugins, and remote backends.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.29 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.29

    • Adds a route-aware HTTP client pool (RouteAwareClientPool) that selects the correct outbound proxy route per request URL, reusing clients by resolved route with a bounded cache of 16 routes.
    • Honors system proxy settings in the daemon updater, remote plugins, and cloud environment discovery.
    • Supports CARGO_HTTP_CAINFO as a custom CA source in managed proxy/MITM environments.
    • Makes external session detection limits configurable via maxSessionAgeDays and maxSessions in the external-agent config detection request.
    • Adds optional providerId to externalAgentConfig/import for analytics attribution of external agent imports by provider.

    +3 more show less

    • Preserves thread settings (including approvals_reviewer) across restarts for goal-first and forked threads.
    • Adds an optional releases.openai.com installer source for fetching Codex release artifacts.
    • Mirrors Rust release artifacts and metadata to Cloudflare R2 for additional distribution resilience.

    8 details in Everything

66. rust-v0.145.0-alpha.28 Prerelease Jul 21, 2026 · issue 021

    Codex CLI gains concurrent terminal stdin, audio input/output, Amazon Bedrock custom transports, and incremental Markdown streaming.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.28 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.28

    • Enables parallel write_stdin tool calls across independent terminal sessions, serializing per-session I/O for safety.
    • Supports custom transports for Amazon Bedrock provider connections.
    • Adds audio output support to dynamic tools and code mode.
    • Adds occurrence search for paginated thread history.
    • Adds batched executor capability discovery.

    +13 more show less

    • Makes parent-owned sub-agent threads read-only in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
    • Renders inline visualization links in the TUI.
    • Launches managed network proxies on remote executors.
    • Adds SessionEnd hooks for thread teardown.
    • Exposes plugin installation interstitial requirements.
    • Allows publishing plugins through share updates.
    • Supports ChatGPT-branded Desktop app builds.
    • Adds bounded batch lookups and batched reads for message and paginated thread history.
    • Lets users remember the working directory for resumed sessions.
    • Confirms usage-limit resets before redemption.
    • Records web search result payload sizes.
    • Streams realtime V3 Codex handoff output.
    • Tracks realtime conversation state and collaboration mode instructions in world state.

    18 details in Everything

67. rust-v0.145.0-alpha.27 Prerelease Jul 21, 2026 · issue 021

    Codex CLI adds Esc key to interrupt running sessions and updates bundled model metadata including GPT-5.6 context windowscontext windowsThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it..

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.27 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.27

    • Enables pressing Esc to interrupt a running agent session mid-task, with Esc now documented as an interrupt key in the status indicator.
    • Updates bundled GPT-5.6 model variants with 272,000-token context windows and refreshed model instructions.
    • Adds personality instruction variables for GPT-5.6 model variants and includes a GPT-5.5 availability notice in the bundled catalog.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The auto_review and permissions message fields and the legacy supports_reasoning_summary_parameter flag are removed from the bundled model catalog.
68. rust-v0.145.0-alpha.24 Prerelease Jul 18, 2026 · issue 020

    Codex CLI gains audio input support, inline visualization links in TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., and remembered working directory for resumed sessions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.24 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.24

    • Adds audio input variants (remote and local) to user input protocols, enabling audio to be forwarded to the Responses API.
    • Renders inline visualization links in the TUI — ::codex-inline-vis{file="..."} directives in assistant Markdown become browser-openable links to generated artifacts.
    • Enables users to remember the working directory when resuming sessions (tui_resume_cwd).
    • Allows path-backed agents to be selected from the TUI agent picker.
    • Renders streamed Markdown incrementally in the TUI for smoother streaming output.

    +2 more show less

    • Gates audio history by model input modalities so unsupported models don't receive audio items.
    • Refreshes bundled model metadata.

    7 details in Everything

69. rust-v0.145.0-alpha.22 Prerelease Jul 17, 2026 · issue 019

    Codex CLI alpha.22 stabilizes the memories feature, adds managed Bedrock login, and imports plugins from known marketplaces.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.22 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.22

    • Stabilizes the memories feature flag, making it generally available in the CLI.
    • Adds a managed Bedrock login API for authenticating with AWS Bedrock as a provider.
    • Imports enabled plugins automatically from known marketplaces.
    • Makes GPT-5.6 Sol the default model for Bedrock sessions.
    • Adds dedicated storage for paginated thread history, enabling larger conversation histories.

    +7 more show less

    • Exposes scheduled tasks in plugin details.
    • Supports personality = "none" in model instructions to suppress default personality prompts.
    • Supports pending remote environment registration.
    • Adds a skill invocation extension contributor for extensible skill execution.
    • Updates bundled OpenAI Docs skill with GPT-5.6 content.
    • Reduces startup latency via optimized ancestor discovery.
    • Performance improvement: reuses walk inventory for host skill loading, reducing round trips on high-latency connections.

    12 details in Everything

70. docs update Jul 17, 2026 · issue 018

    Codex CLI gains persistent chat sessions with save, resume, and cloud-offload capabilities.

    • Supports returning to a saved chat from the current repository or searching across local past chats.
    • Enables browsing active and completed chats, submitting work to a configured environment, and applying results to the local repo from the terminal.
    • Allows launching a cloud chat and returning to the terminal later, decoupling long-running sessions from the local shell.

    3 details in Everything

71. rust-v0.145.0-alpha.20 Prerelease Jul 17, 2026 · issue 018

    Amazon Bedrock provider now supports custom transports: override base_url, auth, and HTTP headers alongside AWS profile and region.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.20 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.20

    • Enables custom base_url, auth, and http_headers overrides on the built-in amazon-bedrock provider for custom transport scenarios.
    • Supports command-based bearer authentication and configured endpoints for Bedrock without requiring AWS request signing.
    • Replaces the Bedrock account credentialSource enum with the usesCodexManagedCredentials boolean for consistent reporting of managed and externally authenticated configurations.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Bedrock account credentialSource enum is replaced by the usesCodexManagedCredentials boolean; any configuration or code referencing credentialSource will break.
72. rust-v0.145.0-alpha.19 Prerelease Jul 16, 2026 · issue 018

    Codex CLI alpha.19 adds concurrent terminal session writes and an app-server metadata API

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.19 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.19

    • Enables parallel write_stdin tool calls across independent terminal sessions, with per-session serialization to keep output buffers consistent.
    • Adds experimental app/read API for fetching metadata for up to 100 app IDs, with optional tool summaries, deduplication, caching, and partial-miss reporting.
    • Validates reasoning effort against model metadata after agent roles override model settings, catching unsupported combinations at spawn time.
    • Stabilizes the active-turn environment so in-progress turns are unaffected by settings updates during deferred execution.
    • Requires data: scheme URLs for code-mode image output, rejecting remote HTTP URLs and other malformed image sources.

    5 details in Everything

73. rust-v0.145.0-alpha.18 Prerelease Jul 16, 2026 · issue 018

    Codex CLI alpha.18 unifies multi-agent config under agents, adds encrypted MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. content support, and improves skill-selection with BM25BM25The classic keyword-ranking formula behind traditional search engines. Hybrid search combines it with embedding similarity so exact terms and meaning both count., n-gram, and multi-query methods.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.18 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.18

    • Adds agents.enabled config key and unifies multi-agent settings (concurrent thread limit, subagent model, reasoning effort) under a single [agents] section, with resolved values visible in TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. debug-config output.
    • Adds agents.max_concurrent_threads_per_session (with agents.max_threads as an alias) to control the spawned-thread limit across both multi-agent backends.
    • Adds agent_default_subagent_model and agent_default_subagent_reasoning_effort config fields so spawned agents honor configured model defaults.
    • Exposes the agent_type override in the spawn_agent schema only when agent roles are configured, avoiding an inapplicable argument in the model-visible tool.
    • Preserves encrypted MCP tool output: text content marked with _meta["codex/encryptedContent"] = true is now converted to encrypted_content function-call output items.

    +4 more show less

    • Adds cacheWriteInputTokens to the rawResponse/completed usage breakdown schema.
    • Adds fielded BM25 skill selection that ranks skills across name, short-description, and description fields with name-weighted and IDF scoring.
    • Adds character n-gram skill selection covering related word forms, typos, and CJK text without word boundaries.
    • Adds multi-query lexical skill selection that splits compound queries into sentence- and connector-delimited views and merges ranked candidates across views.

    9 details in Everything

74. rust-v0.145.0-alpha.16 Prerelease Jul 16, 2026 · issue 017

    Codex CLI alpha.16 adds prompt cache write token tracking and stronger forced rm command detection.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.16 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.16

    • Tracks prompt cache write token usage (cache_write_input_tokens) and reports it in analytics, metrics, traces, and rollout data alongside existing cache-read usage.
    • Strengthens forced rm command detection to catch forced removals inside control flow, substitutions, pipelines, traps, nested shells, and sudo/env wrappers — including combined, separate, and long-form force options even when they follow operands.
    • Extends image generation timeout in code mode to 120 seconds for both the initial call and subsequent waits.
    • Improves turn history summaries to use only final_answer-phase agent messages, excluding commentary items.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The template_id field is removed from MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool call items, lifecycle events, and McpToolCallAppContext app-server responses — any client or integration reading template_id (or templateId) from these payloads will no longer find it.
75. rust-v0.145.0-alpha.15 Prerelease Jul 16, 2026 · issue 017

    Codex CLI alpha.15 adds external agent memory migration, paginated subagent history, and smarter MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. capability-root propagation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.15 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.15

    • Adds external agent memory migration: discovers project memory Markdown files, preserves project scope, copies selected projects into the Codex memory extension workspace, and enqueues memory consolidation after workspace changes.
    • Propagates deferred environment capability roots to MCP, making executor plugins available as soon as their environment is ready and refreshing the MCP runtime when the selected root set changes.
    • Preserves paginated history for spawned or forked subagents, inheriting the parent's model context as a rollout prefix and resuming from stored model context instead of legacy rollout history.
    • Warns when conflicting capability root locations are registered under the same ID, retaining the first location and logging the conflict instead of silently dropping it.
    • Selects the elevated Windows sandbox automatically when network proxies are in use.

    5 details in Everything

76. rust-v0.145.0-alpha.14 Prerelease Jul 15, 2026 · issue 017

    Codex CLI adds Frameless Bidi realtime voice, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. cache opt-out, Cursor import support, and paginated thread history.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.14 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.14

    • Adds realtime conversation protocol v3 with Frameless Bidi support, translating audio, transcripts, handoffs, session context, and lifecycle events over WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. and WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate..
    • Allows MCP servers to opt out of tool catalog caching via the experimental codex/tool-catalog-cache capability (cacheable: false), preventing stale snapshots from being served.
    • Adds Cursor IDE support to the setup import flow, joining existing editor integrations.
    • Migrates plugin commands into skills automatically on install, converting legacy plugin command definitions to the Codex skill format.
    • Scans skill roots concurrently (up to eight at a time) for faster startup on repos with many skills.

    +1 more show less

    • Exposes connector candidates from imported sessions, enabling downstream workspace connector discovery.

    6 details in Everything

77. rust-v0.145.0-alpha.13 Prerelease Jul 15, 2026 · issue 016

    Codex CLI gains conversation branching on prompt edits, interrupted-prompt history retention, and auto-compaction fallback token-budget settings.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.13 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.13

    • Branches conversations when editing an earlier TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. prompt, forking at that point rather than overwriting the active thread, preserving the original conversation.
    • Keeps interrupted prompts (via Esc or Ctrl-C) in the conversation transcript and opens a blank composer for the next instruction.
    • Adds auto-compaction fallback token-budget settings to handle context approaching the limit before automatic rollover.
    • Adds a fallback phase before automatic context rollover, giving users a buffer before history compaction kicks in.
    • Retries safety-buffered turns on a forked thread instead of rolling back the active thread, preserving source conversation state.

    +1 more show less

    • Reports selected environment connection transitions, surfacing environment/plugin state changes in the TUI.

    6 details in Everything

78. rust-v0.145.0-alpha.10 Prerelease Jul 14, 2026 · issue 015

    Codex CLI alpha adds managed Bedrock login, stabilized memories, MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. credential pinning, and Windows sandbox level support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.10

    • Adds managed Bedrock login API for authenticating with AWS Bedrock-hosted models.
    • Stabilizes the memories feature flag, making conversation memory generally available.
    • Supports MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. OAuth credential store resolution and pinning, with serialized credential refreshes.
    • Adds Windows sandbox level configuration propagated through command execution.
    • Imports enabled plugins from known marketplaces automatically.

    +5 more show less

    • Exposes scheduled tasks in plugin details view.
    • Adds dedicated storage for paginated thread history.
    • Makes GPT-5.6 Sol the default model for Bedrock.
    • Supports pending remote environment registration.
    • Routes realtime calls and memory summarization through the HTTP client factory, enabling proxy support for those requests.

    10 details in Everything

79. rust-v0.145.0-alpha.9 Prerelease Jul 14, 2026 · issue 015

    Codex CLI adds environment status inspection API and SQLite-backed paginated thread history for faster local reads.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.9 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.9

    • New experimental environment/status request lets you inspect a configured environment's state (ready, pending, disconnected, or unknown) without starting or reconnecting it.
    • Adds cursor-based local reads for turn summaries and thread or per-turn items backed by SQLite, enabling paginated thread history with archived-thread and history-mode validation.
    • Probes ready remote environments over their existing exec-server connection to report live status.

    3 details in Everything

80. rust-v0.145.0-alpha.7 Prerelease Jul 13, 2026 · issue 015

    Codex CLI alpha.7 makes GPT-5.6 Sol the default Bedrock model and adds explicit advanced-reasoning selection in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.145.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.145.0-alpha.7

    • Sets GPT-5.6 Sol as the default Amazon Bedrock model, prioritizing Sol, Terra, and Luna variants ahead of GPT-5.5 and GPT-5.4.
    • Adds explicit advanced reasoning selection in the TUI, making reasoning-level choices visible rather than implicit.
    • Automatically omits unsupported reasoning.summary parameter for models that lack the capability, including spawned agents using a different model.
    • Persists paginated thread items in the local thread store, enabling canonical ItemCompleted events to survive across sessions.
    • Trusts hooks from newly installed or updated remote workspace plugins automatically after a successful refresh.

    +3 more show less

    • Prefers the Codex home socket (CODEX_HOME/ipc/ipc.sock) for Unix IDE context connections, with fallback to legacy temp-directory paths.
    • Exposes model overrides for multi-agent v2 spawned agents, restricted to the active backend.
    • Adds structured diagnostic metadata to file blob upload failures, including upload host, elapsed time, error category, and client request ID.

    8 details in Everything

81. rust-v0.144.0 Jul 9, 2026 · issue 011

    Codex CLI v0.144.0 adds a writes approval mode, default MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. auth elicitation, Ultra concurrency warnings, and richer usage-limit credit details.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.144.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.144.0

    └──▷ TRY IT
    Run Codex in writes-approval mode to let it read files freely while pausing for confirmation only before any write action — useful for exploratory refactoring sessions where you want speed on reads but control on writes.
    copy

    $ codex --approval-mode writes

    • Adds writes app-approval mode that permits declared read-only actions automatically while prompting only for write operations.
    • Enables MCP tool interactive authentication by default — no experimental opt-in required.
    • Adds runtime Codex authentication support for app-server hosts, with redirect to a hosted page on successful login.
    • Usage-limit reset credits now display their type and expiration date and let users choose which credit to redeem.
    • Warns when selecting Ultra reasoning model with high multi-agent concurrency that usage could increase rapidly.

    5 details in Everything

82. rust-v0.144.0-alpha.4 Prerelease Jul 9, 2026 · issue 010

    Codex CLI adds pnpm install detection, writes-app approval mode, and serialized MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. credential stores.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.144.0-alpha.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.144.0-alpha.4

    └──▷ TRY IT
    Verify that a pnpm-managed Codex install is correctly detected and consistently configured.
    copy

    $ codex doctor

    • Adds a writes app approval mode for the Rust CLI, giving practitioners finer-grained control over which file-write operations require explicit approval.
    • Emits canonical TurnItem::CommandExecution lifecycle events from shell tool and /shell command paths, aligning app-server v2 command tracking.
    • Emits canonical TurnItem::DynamicToolCall lifecycle events from dynamic tool handlers, replacing legacy request/response events.
    • Emits canonical sub-agent activity, collab tool call, collab wait, review mode, and hook prompt turn items for richer agent observability.
    • Enables auth elicitation by default, prompting for credentials automatically when needed instead of requiring manual setup.

    +2 more show less

    • Adds a proxy-aware WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. connector so Responses API WebSocket connections are preserved through system HTTP proxies.
    • Supports pruning hidden directories during file-system walks, reducing noise in large repo scans.

    7 details in Everything

83. rust-v0.144.0-alpha.2 Prerelease Jul 8, 2026 · issue 009

    Adds Ultra concurrency warning, proxy-aware WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. connector, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool snapshot reuse, and Windows sandbox runtime access.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.144.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.144.0-alpha.2

    • Adds a TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. warning when Ultra reasoning is selected with high multi-agent concurrency (≥8 threads), displaying configured thread and subagent limits so users understand cost implications.
    • Adds a proxy-aware WebSocket connector that respects outbound proxy policy and custom-CA trust, matching the same effective HTTP proxy configuration used for REST calls.
    • Reuses a single MCP tool snapshot within each sampling request, reducing latency and ensuring consistent tool state between Apps World State and tool-router construction.
    • Grants Windows sandbox sessions read/execute access to the managed primary runtime cache (%USERPROFILE%\.cache\codex-runtimes), enabling bundled Python, Node, and native tools in elevated sandbox contexts.

    4 details in Everything

84. rust-v0.144.0-alpha.1 Prerelease Jul 8, 2026 · issue 009

    Codex CLI v0.144.0-alpha.1 adds pnpm install detection, faster branch picker, and hook execution tracing.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.144.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.144.0-alpha.1

    └──▷ TRY IT
    Verify that a pnpm-managed Codex install is recognized correctly in your environment.
    copy

    $ codex doctor

    • Detects Codex installs managed by pnpm, surfacing pnpm status in codex doctor output alongside npm and bun.
    • Speeds up the /review branch picker by switching branch enumeration to git for-each-ref scoped to refs/heads, preventing timeouts in large repos.
    • Adds trace spans around configured hook command execution, making slow installed hooks visible directly in traces.
    • Supports externally provided Codex auth snapshots with explicit runtime capabilities, installable via the existing ExternalAuth provider path.
    • Switches code-mode to hosted mode by default.

    5 details in Everything

85. rust-v0.143.0 Jul 8, 2026 · issue 009

    Codex CLI v0.143.0 adds remote plugins by default, system proxy support, daemon pairing codes, new Bedrock models, and richer app-server APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0

    └──▷ TRY IT
    Generate a manual pairing code from a running Codex daemon to connect a remote-control client without automatic discovery.
    copy

    $ codex remote-control pair

    • Enables remote plugins by default, with richer catalog rows, npm marketplace sources, and visible remote/local version info.
    • Supports routing authentication and Responses API traffic through macOS and Windows system proxies, including PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration. and WPAD configurations.
    • Adds codex remote-control pair subcommand for generating manual pairing codes from a running daemon.
    • Adds Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models with first-class support for max reasoning effort.
    • Enables MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool search by default; ChatGPT-hosted MCP servers can now explicitly use session authentication.

    +1 more show less

    • Expands app-server client API to inspect environments, list descendant threads by ancestor, and fork history through a specific turn.

    6 details in Everything

86. rust-v0.143.0-alpha.39 Prerelease Jul 7, 2026 · issue 009

    Adds writes approval mode, serialized MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. credential stores, canonical turn item emission, and improved Windows URL safety detection.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.39 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.39

    └──▷ TRY IT
    Set the new writes approval mode on an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool so the agent auto-approves read operations but prompts only for writes.
    copy

    $ codex mcp get

    • Adds writes approval mode for MCP app tool approval, giving practitioners a middle ground between auto and prompt that gates only write operations
    • Emits canonical TurnItem lifecycle events for command execution, dynamic tool calls, sub-agent activity, collab tool calls, and collab wait items, enabling more structured agent event streams
    • Enables auth elicitation by default, so authentication prompts are surfaced automatically without manual configuration
    • Supports hosted success redirects in the login flow
    • Shows reset credit details (title, expiry, idempotency key) in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. redemption picker so users can choose exactly which credit to consume

    +2 more show less

    • Extends Windows dangerous-command detection to handle mixed-case URLs (e.g., HTTP:// or hTtPs://) in PowerShell commands
    • Adds connector runtime latency metrics for observability into MCP connector performance

    7 details in Everything

87. rust-v0.143.0-alpha.36 Prerelease Jul 5, 2026 · issue 005

    Codex CLI now exposes remote plugin marketplace versions in plugin listings.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.36 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.36

    • Adds PluginSummary.version field to surface version numbers advertised by remote plugin marketplaces.
    • Preserves backend release version in plugin/installed responses alongside localVersion for the locally installed package.
    • Supports object-valued buffering signals in streamed response events, enabling the buffering UI and using the faster-model field from the payload with fallback to existing response metadata.

    3 details in Everything

88. rust-v0.143.0-alpha.35 Prerelease Jul 3, 2026 · issue 003

    Adds configurable multi-agent mode hint text so deployment-specific delegation policies stay stable across reasoning-effort changes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.35 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.35

    └──▷ USE IT
    Lock a deployment to a specific multi-agent delegation policy so it doesn't flip between explicit-only and proactive when reasoning effort is adjusted.
    yaml copy

    # In your Codex config file
    features:
      multi_agent_v2:
        multi_agent_mode_hint_text: "Always delegate sub-tasks proactively to sub-agents."

    • New features.multi_agent_v2.multi_agent_mode_hint_text config setting lets operators supply a fixed delegation policy string that overrides the built-in explicit-only/proactive multi-agent behaviors regardless of reasoning effort.

    1 detail in Everything

89. rust-v0.143.0-alpha.33 Prerelease Jul 2, 2026 · issue 002
    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.33 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.33

    • Surfaces rollout/session budget exhaustion to the user instead of silently aborting.
    • Enables image generation when using provider-based authentication.
    • Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool call error metrics for tracking MCP tool failures.
    • Traces MCP startup latency in OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. for diagnosing slow MCP server initialization.
    • Instruments rollout persistence bytes for observability into context-window compaction.
90. rust-v0.143.0-alpha.32 Prerelease Jul 1, 2026 · issue 002
    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.32 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.32

    • Enables image generation when using provider-based authentication (not just API-key flows).
    • Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool call error metrics for observability into MCP tool failures.
    • Traces MCP startup latency via OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. for diagnosing slow MCP server initialization.
91. rust-v0.143.0-alpha.31 Prerelease Jun 29, 2026 · issue 002

    Remote plugins enabled by default and max reasoning effort promoted to first-class in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. picker.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.31 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.31

    • Enables remote plugins by default — no configuration required; set features.remote_plugin to false to opt out.
    • Promotes max to a first-class reasoning effort level, rendering it as a productized Max label in the TUI reasoning picker (relevant for AWS Bedrock GPT-5.6 catalog users).
    • Uses model metadata (include_skills_usage_instructions) to drive skills usage instructions, enabling per-model skill rendering control starting with gpt-5.5.

    3 details in Everything

92. rust-v0.143.0-alpha.29 Prerelease Jun 28, 2026 · issue 001

    Codex CLI now enforces enterprise marketplace source policy at runtime, blocking inactive or disallowed plugins.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.29 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.29

    • Enforces enterprise source admission policy at runtime: blocked or policy-disallowed marketplace plugins are projected as inactive and excluded from plugin list, read, discovery, and CLI marketplace source/snapshot reporting.
    • Continues refreshing and upgrading independent marketplaces and plugins when one entry fails, surfacing per-entry errors instead of aborting the entire refresh.
    • Includes policy-projected plugin state in cache and refresh keys, so policy requirement changes automatically invalidate stale cached results.

    3 details in Everything

93. rust-v0.143.0-alpha.28 Prerelease Jun 27, 2026 · issue 001

    Adds experimental environment/info app-server RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. to discover shell and working directory for named execution environments.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.28 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.28

    └──▷ USE IT
    Query a named execution environment's shell and working directory via the app-server RPC before scheduling work against it.
    json copy

    {
      "id": 42,
      "jsonrpc": "2.0",
      "method": "environment/info",
      "params": { "name": "<environment-name>" }
    }

    • New experimental environment/info JSON-RPC endpoint lets app-server clients query a named environment's native shell metadata and default working directory (returned as a file: URI) before assigning it to a thread or turn.
    • Probes are bounded to a 30-second timeout, preventing a non-responsive exec-server from blocking the environment serialization queue indefinitely.

    2 details in Everything

94. rust-v0.143.0-alpha.27 Prerelease Jun 27, 2026 · issue 001

    Codex CLI adds service tier and reasoning effort to OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. telemetry and surfaces rollout budget exhaustion to users.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.27 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.27

    • Adds service_tier and model_reasoning_effort fields to OTEL codex.sse_event response.completed telemetry records, enabling measurement of Fast mode usage and reasoning effort.
    • Surfaces rollout/session budget exhaustion to the user when the context budget is exceeded.
    • Enables MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool call error metrics collection.
    • Allows codex sandbox to consume MCP sandbox state, enabling richer sandboxed MCP workflows.
    • Supports image generation with provider auth.

    +7 more show less

    • New thread/items/list API endpoint replaces thread/turns/items/list for flatter item listing.
    • Adds marketplace source admission requirements and enforcement for plugins.
    • Traces MCP startup latency via OTEL instrumentation.
    • Adds extra metadata field to Thread struct for richer thread-level context.
    • Supports thread-level originator overrides.
    • Ignores local curated plugins when remote catalog is active, preventing conflicts.
    • Namespaces multi-agent v2 collaboration tools under a collaboration namespace.

    12 details in Everything

95. rust-v0.143.0-alpha.26 Prerelease Jun 26, 2026 · issue 001

    Codex CLI now surfaces service tier and reasoning effort in OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. telemetry and exposes sandbox state in debug sandbox commands.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.26 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.26

    • Adds service_tier and model_reasoning_effort fields to the existing codex.sse_event response.completed OTEL record, enabling Fast-mode usage and reasoning effort measurement from OTEL logs.
    • Exposes sandbox_state parameter in seatbelt and landlock debug sandbox subcommands, allowing the sandbox to consume MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. sandbox state.
    • Introduces ExecServerTelemetry for exec-server metrics collection via OTEL, surfacing rollout budget exhaustion and MCP startup latency.
    • Removes auto-compaction opt-out, making context-window compaction mandatory for all sessions.
    • Adds marketplace source admission requirements enforcement for plugins, restricting plugin catalog entries to approved sources.

    +2 more show less

    • Ignores local curated plugins when a remote plugin catalog is active, ensuring catalog consistency.
    • Namespaces multi-agent v2 collaboration tools under a collaboration prefix.

    7 details in Everything

96. rust-v0.143.0-alpha.25 Prerelease Jun 25, 2026 · issue 001

    Codex CLI adds singular --permission-profile flag, provider-aware model fallback, current-time reminder config, and exec-server lifecycle metrics.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.25 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.25

    └──▷ TRY IT
    Apply a named sandbox permissions profile using the new canonical singular flag name.
    copy

    $ codex sandbox --permission-profile strict

    • Renames sandbox flag to --permission-profile (singular) as the canonical form across all sandbox backends (seatbelt, landlock, Windows), with --permissions-profile kept as a hidden backward-compatible alias.
    • Adds provider-aware model fallback on thread start: when enabled, unavailable helper-thread models (e.g. OpenAI model IDs against Bedrock) are automatically resolved to the active provider's default instead of surfacing 404 errors.
    • Adds configurable current-time reminder delivery mode and interval, including support for a zero interval to trigger a reminder at every eligible inference boundary.
    • Persists selected capability roots across model steps, resolving environment availability per step rather than at thread level.
    • Records exec-server lifecycle metrics (connection, request, and process lifecycle) via OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. for remote environment observability.

    +2 more show less

    • Caches Codex app MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools in memory for faster repeated tool lookups.
    • Publishes standalone zsh artifacts as part of the release.

    7 details in Everything

97. rust-v0.143.0-alpha.22 Prerelease Jun 25, 2026 · issue 001

    Adds HTTP MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server support with OAuth, server-attributed error telemetry, and raised token-budget message limits.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.22 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.22

    • Supports HTTP MCP servers via selected executor plugins, enabling remote MCP tool usetool useA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions. beyond local stdio servers.
    • Supports OAuth authentication for HTTP MCP servers from selected executor plugins.
    • Adds MCP server name attribution to call, duration, and error metrics, and retains sanitized error codes from all MCP servers.
    • Raises token-budget reminder and guidance message byte limit from 1,000 to 2,000 bytes, allowing richer model-facing instructions.
    • Extends maximum agent sleep duration to 12 hours via the cancellable sleep operation routed through the time provider.

    5 details in Everything

98. rust-v0.142.2 Jun 25, 2026 · issue 001

    Codex CLI v0.142.2 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool search by default, macOS system proxy support, and dark-mode plugin logos.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.142.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.142.2

    └──▷ USE IT
    Route Codex traffic through your corporate proxy on macOS by honoring system-level PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration./WPAD configuration.
    yaml copy

    # In your Codex config file, enable system proxy resolution:
    respect_system_proxy: true

    • Enables MCP tool search by default when the model/provider supports it, improving tool discovery without breaking older integrations.
    • Supports macOS system proxy, PAC, and WPAD settings via the respect_system_proxy option for authenticated network routing.
    • Adds dark-mode logo support for plugins through both local manifests and remote catalogs.

    3 details in Everything

99. rust-v0.143.0-alpha.21 Prerelease Jun 25, 2026 · issue 001

    Codex CLI gains Ultra reasoning effort, ChatGPT session auth for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, remote plugin catalog polish, and world-state persistence.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch rust-v0.143.0-alpha.21 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.143.0-alpha.21

    └──▷ TRY IT
    Allow a ChatGPT-hosted MCP server (other than the built-in Codex Apps endpoint) to reuse your active ChatGPT session credentials.
    copy

    $ codex mcp add --transport http https://chatgpt.com/your-mcp-endpoint
    # Then set use_chatgpt_auth: true in ~/.codex/config.json under that server's entry

    • Adds Ultra reasoning effort option for more powerful model inference.
    • Enables ChatGPT-hosted MCP servers to authenticate using the current ChatGPT session via new use_chatgpt_auth HTTP MCP server config field (honoured only when the server URL shares the same origin as chatgpt_base_url).
    • Shows accurate auth status in codex mcp list by loading current login state before reporting per-server auth.
    • Introduces world-state snapshot serialization and persistence across rollouts, enabling resume, fork, and rollback to restore prior context.
    • Adds TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. support for the buffer experience.

    +1 more show less

    • Enhances remote plugin catalog UI: admin-disabled plugins show as blocked/view-only, admin-installed plugins count and sort as installed, plugin search now matches descriptions and keywords, and empty Shared with me sections are hidden.

    6 details in Everything

100. rust-v0.142.1 Jun 25, 2026 · release notes

     OpenAI Codex CLI adds opt-in Windows system proxy support including PACPACA Proxy Auto-Configuration file, a JavaScript snippet a browser or OS fetches to decide which proxy server to route each request through, letting cyber tools intercept or redirect traffic without per-app configuration., WPAD, static proxies, and bypass rules.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.142.1 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.142.1

101. rust-v0.142.0 Jun 22, 2026 · release notes

     Codex CLI gains indexed web search, rollout token budgets, multi-agent delegation controls, plugin sections, and scheduled time reminders.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.142.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.142.0

     • Adds /usage command support for viewing and redeeming earned usage-limit reset credits, with confirmation, retry, and refreshed availability states.
     • Organizes /plugins remote plugins into OpenAI Curated, Workspace, and Shared with me sections; eligible turns can now recommend and install relevant plugins.
     • Introduces configurable rollout token budgets that track usage across agent threads, surface remaining-budget reminders, and abort turns when the budget is exhausted.
     • Enables app-server clients to configure multi-agent delegation as disabled, explicit-request-only, or proactive at both the thread and turn level.
     • Adds an indexed web-search mode that allows live searches while restricting direct page access to server-approved URLs.

     +1 more show less

     • Supports scheduled UTC time reminders and direct current-time queries, including through client-provided app-server clocks.

     6 details in Everything

102. rust-v0.141.0 Jun 18, 2026 · release notes

     Codex CLI gains Noise-encrypted remote execution, per-thread MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, auto-resolving TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. prompts, and richer app-server APIs.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.141.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.141.0

     • Adds authenticated, end-to-end encrypted Noise relay channels for remote executors.
     • Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries.
     • Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery adds a created-by-me marketplace and auth-specific curated catalogs.
     • App-server clients can list immediate child threads, correlate external-agent import results, and read or redeem rate-limit reset credits.
     • Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context.

     5 details in Everything

103. rust-v0.140.0 Jun 15, 2026 · release notes

     Codex CLI v0.140.0 adds usage dashboards, session deletion, Claude Code import, @-mentions menu, and managed Bedrock auth.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.140.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.140.0

     └──▷ TRY IT
     Permanently remove a stale session and all its subagents to keep your session list clean.
     copy

     $ codex delete

     • Adds /usage command with daily, weekly, and cumulative account token activity views.
     • Adds codex delete, /delete, and app-server thread/delete for permanent session deletion with confirmation safeguards and subagent cleanup.
     • Adds /import for selectively importing setup, project configuration, and recent chats from Claude Code.
     • Typing @ now opens a unified mentions menu for files, plugins, and skills by default.
     • Adds managed Amazon Bedrock API-key authentication with encrypted local storage for CLI and MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. credentials.

     +1 more show less

     • Preserves oversized text, large pasted blocks, and image attachments in /goal, including in remote app-server sessions.

     6 details in Everything

104. rust-v0.139.0 Jun 9, 2026 · release notes

     Codex CLI adds standalone web search in code mode, richer MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. schema support, and improved plugin marketplace JSON output.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.139.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.139.0

     └──▷ TRY IT
     List all plugin marketplace sources in JSON to script or audit which catalogs are configured.
     copy

     $ codex plugin marketplace list --json

     • Enables standalone web search in code mode, including from nested JavaScript tool calls, returning plaintext results.
     • Tool and connector input schemas now preserve oneOf and allOf, and large schemas retain more shallow structure when compacted for better MCP tool compatibility.
     • codex doctor now includes editor and pager environment details in the local report, with raw values redacted in JSON output.
     • codex plugin marketplace list --json now includes each marketplace source per entry.
     • Plugin lists can now return from the cached remote catalog before refreshing in the background, improving responsiveness.

     +2 more show less

     • Adds -P as a sandbox permissions profile alias flag.
     • Shows effective sandbox modes in /debug-config.

     7 details in Everything

105. rust-v0.138.0 Jun 8, 2026 · release notes

     Codex CLI gains Desktop handoff, richer plugin JSON output, image path exposure, PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. v2 auth, and flexible reasoning effort selection.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.138.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.138.0

     └──▷ TRY IT
     Hand off an active CLI session to Codex Desktop on macOS or Windows without losing context.
     copy

     $ /app

     Get structured JSON output from plugin marketplace commands for scripting or CI pipelines.
     copy

     $ codex plugin list --json

     • Adds /app command to hand off the current CLI thread into Codex Desktop on macOS and native Windows, with Windows workspace launches opening directly into Desktop.
     • Exposes saved file paths for local image attachments and standalone image generations to the model, enabling more reliable follow-up edits and file references.
     • Adds fallback keyboard shortcuts in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. for reasoning effort selection on terminals missing Alt bindings, and supports model-defined effort levels in model-advertised order.
     • App-server integrations can now read account token usage via the API.
     • Adds support for v2 personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. in CLI and app-server authentication flows.

     +1 more show less

     • Adds --json output to plugin add/remove and marketplace commands; plugin list JSON now includes marketplace source; plugin detail data exposes default prompts, remote MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, and unavailable app templates.

     6 details in Everything

106. rust-v0.137.0 Jun 4, 2026 · release notes

     Codex CLI gains F13-F24 keybindings, codex plugin list --json, remote-control pairing RPCs, and multi-agent v2 per-thread runtimes.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.137.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.137.0

     └──▷ TRY IT
     Get a machine-readable list of all installed plugins for scripting or audit pipelines.
     copy

     $ codex plugin list --json

     • Adds F13-F24 function key support in TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. keymaps for extended keyboard bindings.
     • Enables paste in searchable selection menus within the TUI.
     • Adds a compact reasoning-only status/title item to the TUI status surface.
     • Adds codex plugin list --json for machine-readable plugin inventory output.
     • Caches remote plugin catalog suggestions for faster plugin discovery.

     +9 more show less

     • Adds remote-control pairing start and client management RPCs (list/revoke controller grants) via app-server v2.
     • Shows enterprise monthly credit limits in the status display for admin/enterprise flows.
     • Supports applying cloud-managed config bundles, including EDU workspace accounts.
     • Enables parallel standalone web search calls in code-mode flows.
     • Exposes standalone image generation and hosted web/image tools in code-only mode.
     • Multi-agent v2 keeps runtime choice per-thread and exposes cleaner follow-up and metadata defaults for spawned agents.
     • Adds skills extension scaffold with per-turn catalog resolution and v1 prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools..
     • Keys request-permission grants by environment identity for scoped approvals.
     • Exports readable CA bundles to child commands when managed MITM proxying is active.

     14 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The persist_extended_history bool flag is removed from app-server (the experimental flag no longer exists).
     • !The multi-agent v2 assign_task field is renamed to followup_task.
     • !hide_spawn_agent_metadata now defaults to true, changing the default metadata visibility for spawned agents.
107. rust-v0.136.0 Jun 1, 2026 · release notes

     Codex CLI v0.136.0 adds session archiving, OSC 8 clickable links, stdio app-server mode, Windows sandbox provisioning, and a standalone image generation extension.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.136.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.136.0

     └──▷ TRY IT
     Archive a completed session from the CLI to prevent it from being resumed or forked accidentally.
     copy

     $ codex archive <session-id>

     Restore an archived session so it can be resumed or forked again.
     copy

     $ codex unarchive <session-id>

     Start the app-server in stdio mode for direct process-level integration without a network socket.
     copy

     $ codex app-server --stdio

     • Adds /archive slash command in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. and codex archive / codex unarchive CLI commands to protect sessions from accidental resume or fork until restored.
     • TUI markdown now renders clickable web links via OSC 8 metadata, and cramped tables automatically reformat as readable key/value records while preserving link targets.
     • Launches app-server in stdio mode with codex app-server --stdio for easier process-level integrations.
     • Supports CODEX_API_KEY registration for approved OpenAI hosts in remote execution setup; remote-control websockets now use short-lived server tokens instead of ChatGPT access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
     • Adds alpha codex sandbox setup --elevated provisioning path for Windows admins, plus constrained requirements support for allowed Windows sandbox implementations.

     +4 more show less

     • Adds a feature-gated standalone image generation extension that runs through the native Codex image artifact completion pipeline.
     • Exposes richer MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server status information in app-server integrations.
     • Adds focused diagnostics for MCP HTTP send failures.
     • Adds experimental_request_user_input toggle in config.

     9 details in Everything

108. rust-v0.135.0 May 28, 2026 · release notes

     Codex CLI gains richer doctor diagnostics, Vim text-object editing, named permission profiles, and non-interactive install support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.135.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.135.0

     └──▷ TRY IT
     Capture full environment, Git, terminal, and thread inventory diagnostics to share with support.
     copy

     $ codex doctor

     Run a silent, unattended Codex install in a CI pipeline or provisioning script.
     copy

     $ CODEX_NON_INTERACTIVE=1 bash install.sh

     Inspect which remote server you're connected to and its version without leaving the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     copy

     $ /status

     • Adds richer environment, Git, terminal, app-server, and thread inventory diagnostics to codex doctor for support cases.
     • New /status command shows remote connection details and server version when connected over a remote transport.
     • Vim mode gains text-object editing, improved word/line-end behavior, and a configurable turn-interruption keybind.
     • Adds named permission profile picker to /permissions, which now displays configured custom profiles.
     • Packaged Codex builds can discover and use the bundled patched zsh helper on supported macOS and Linux targets.

     +1 more show less

     • Supports non-interactive installation mode via install.sh/install.ps1 when CODEX_NON_INTERACTIVE=1 is set.

     6 details in Everything

109. rust-v0.134.0 May 26, 2026 · release notes

     Codex CLI gains conversation history search, concurrent read-only MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, OAuth for MCP servers, and richer extension/hook context.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.134.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.134.0

     └──▷ TRY IT
     Select a named permission profile when starting a session, now consistently honored across CLI, TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., and sandbox.
     copy

     $ codex --profile my-restricted-profile sandbox <target>

     Add an MCP server with OAuth enabled for a streamable HTTP endpoint.
     copy

     $ codex mcp add --oauth https://example.com/mcp

     • Adds search across local conversation history with case-insensitive content matching and result previews.
     • Makes --profile the primary profile selector across CLI, TUI permissions, and sandbox flows; legacy profile configs now rejected with migration guidance.
     • Supports per-server environment targeting and OAuth options for streamable HTTP MCP servers via codex mcp add.
     • Enables concurrent execution of read-only MCP tools that advertise readOnlyHint.
     • Preserves local $ref/$defs structures and compacts oversized schemas for more reliable connector tool schemas.

     +1 more show less

     • Exposes conversation history to extension tools and adds subagent identity to hook inputs for richer extension and hook context.

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Legacy profile v1 config selectors are now rejected; --profile is the required flag and legacy profile configs must be migrated.
110. rust-v0.133.0 May 21, 2026 · release notes

     Codex CLI gains always-on goal tracking, improved remote-control UX, richer extension lifecycle hooks, and smarter plugin discovery.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.133.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.133.0

     • Enables Goals by default with dedicated storage and cross-turn progress tracking.
     • Permission profiles gain a list API, inheritance resolution, managed requirements.toml support, runtime refresh, and deeper Windows sandbox integration.
     • Plugin list output is now tabulated and marketplace-aware, showing installed versions, visible marketplace roots, and remote collection support.
     • Extensions can now observe SubagentStart/SubagentStop lifecycle hooks, tool execution events, turn-start metadata, and async approval/turn processing.
     • Adds a /btw alias for the side slash command.

     +5 more show less

     • Adds turn_id and truncation_policy fields to extension tool calls.
     • Adds a standalone web-search API client.
     • Adds MITM hook config model and wires MITM hooks into runtime enforcement with named permissions config.
     • Adds thread/settings/update app-server API for syncing TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. thread settings.
     • Exposes a --version flag on codex-app-server.

     10 details in Everything

111. rust-v0.132.0 May 20, 2026 · release notes

     Codex CLI gains --output-schema for resumed execs, faster TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. startup, and auth-backed remote executor registration.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.132.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.132.0

     └──▷ TRY IT
     Resume a long-running automation and enforce a structured JSON schema on its output without losing session context.
     copy

     $ codex exec resume <session-id> --output-schema '{"type":"object","properties":{"result":{"type":"string"}}}'

     • Adds --output-schema flag to codex exec resume, enabling resumed automations to enforce structured JSON output while preserving session context.
     • Enables remote executor registration via standard Codex auth, eliminating the need for a separate registry credential flow.
     • Optimizes TUI startup by batching terminal capability probes, reducing time to first interactive frame.
     • Supports preserving requested image fidelity — including original-resolution local images — across user inputs and image-producing tools in app-server turns.

     4 details in Everything

112. rust-v0.131.0 May 18, 2026 · release notes

     Codex CLI v0.131.0 adds codex doctor, unified @ mention picker, remote daemon control, marketplace plugin commands, and a richer TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.131.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.131.0

     └──▷ TRY IT
     Run environment-wide diagnostics before filing a support ticket or debugging auth/network issues.
     copy

     $ codex doctor

     • Adds codex doctor command for support-ready diagnostics covering runtime, auth, terminal, network, config, and local state.
     • Unified @ mention picker now searches files, directories, plugins, and skills in a single interface backed by app-server plugin metadata.
     • Remote workflows gain codex remote-control daemon management, runtime enable/disable APIs, status reads, and registry-backed remote environments.
     • Plugin system adds marketplace CLI commands, version-aware sharing, share checkout, shared-workspace buckets, and default-enabled plugin hooks.
     • TUI gains data-driven service-tier slash commands, blended token usage display, permissions/approval mode visibility, effective workspace roots, and responsive Markdown tables.

     +8 more show less

     • Python SDK renamed to openai-codex / openai_codex, with pinned runtime-generated types, concurrent turn routing by ID, and approval modes.
     • Adds Windows deny-read sandbox parity matching existing macOS/Linux sandbox behavior.
     • Adds Windows hook command overrides for customizing hook behavior per-platform.
     • Supports PreToolUse updatedInput rewrites, allowing hooks to modify tool inputs before execution.
     • Supports multi-environment apply_patch selection for applying patches across multiple configured environments.
     • TUI keymap config now accepts minus as a key binding value.
     • Adds ambient terminal pets to the TUI.
     • Exec-server now uses protobuf relay frames for transport.

     13 details in Everything

113. rust-v0.130.0 May 8, 2026 · release notes

     Codex CLI gains codex remote-control, AWS Bedrock console-login auth, thread pagination, and plugin sharing controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.130.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.130.0

     └──▷ TRY IT
     Start a headless Codex app-server that can be driven remotely — useful for CI pipelines or remote automation.
     copy

     $ codex remote-control

     • Adds codex remote-control as a top-level command for starting a headless, remotely controllable app-server.
     • Bedrock auth now supports AWS console-login credentials from aws login profiles, enabling SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.-based access.
     • App-server clients can page large threads with unloaded, summary, or full turn item views via new thread pagination APIs.
     • Plugin details now display bundled hooks, and plugin sharing exposes link metadata plus discoverability controls.

     4 details in Everything

114. rust-v0.129.0 May 7, 2026 · release notes

     Codex CLI v0.129.0 adds Vim composer mode, /hooks browser, /ide context injection, workspace-aware /diff, and a /keymap debug inspector.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.129.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.129.0

     └──▷ TRY IT
     Switch the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. composer into Vim normal mode for keyboard-driven editing during a session.
     copy

     $ /vim

     Inspect all registered lifecycle hooks and toggle them on or off without leaving the TUI.
     copy

     $ /hooks

     Diagnose unexpected key binding behaviour by viewing raw terminal key events as you press them.
     copy

     $ /keymap debug

     • Adds modal Vim editing in the TUI composer via /vim command, configurable default mode, and Vim-specific keymap contexts.
     • Adds /hooks browser for browsing and toggling lifecycle hooks, with support for pre/post-compaction hooks and PreToolUse context.
     • Adds /ide context injection so TUI workflows can pull in IDE-side context directly.
     • Adds workspace-aware /diff command for comparing workspace state within TUI sessions.
     • Adds /keymap debug inspector to inspect and diagnose terminal key events.

     +10 more show less

     • Adds PR summary and branch-change summaries to the status line, with theme-aware colors.
     • Adds redesigned resume/fork picker with raw scrollback mode for easier workflow resumption and copying.
     • Adds plugin marketplace upgrade flow (/plugins upgrade) and marketplace removal support.
     • Adds workspace plugin sharing, share access controls, source filtering, local share path tracking, and admin-disabled status handling for plugins.
     • Adds remote plugin bundle sync and refresh on auth changes.
     • Experimental goals now stay paused across thread resumes unless the user opts back in, with clearer validation and multi-day duration display.
     • Enforces animations = false setting for screen readers in the TUI.
     • Retires /approvals and renames /autoreview to /approve.
     • Adds Codex Apps auth and eligible MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. elicitations surfaced through TUI/Guardian flows.
     • Linux releases now bundle and verify a standalone bwrap fallback for npm and DotSlash installs.

     15 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The /autoreview command is renamed to /approve; any scripts or muscle memory invoking /autoreview will no longer work.
115. rust-v0.128.0 Apr 30, 2026 · release notes

     Codex CLI gains persisted /goal workflows, codex update, configurable keymaps, plugin marketplace, and richer MultiAgentV2 controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.128.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.128.0

     └──▷ TRY IT
     Keep the CLI up to date without manually downloading a new binary.
     copy

     $ codex update

     Check or update the active status line without interrupting an in-progress agent turn.
     copy

     $ codex /statusline "Running recon phase…"

     • Adds persisted /goal workflows with app-server APIs, model tools, runtime continuation, and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. controls for create, pause, resume, and clear.
     • Adds codex update command for in-place CLI self-update.
     • Adds configurable TUI keymaps, plan-mode nudges, and action-required terminal titles.
     • Enables /statusline and /title slash commands during active turns.
     • Expands permission profiles with built-in defaults, sandbox CLI profile selection, cwd controls, and active-profile metadata for clients.

     +3 more show less

     • Adds plugin marketplace installation, remote bundle caching, remote uninstall, plugin-bundled hooks, hook enablement state, and external-agent config import.
     • Adds external agent session import, including background imports and imported-session title handling.
     • Makes MultiAgentV2 configuration more explicit with thread caps, wait-time controls, root/subagent context hints, and v2-specific depth handling.

     8 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !--full-auto is deprecated; users must migrate to explicit permission profiles and trust flows.
     • !GNU Linux binaries are no longer published as release artifacts.
116. rust-v0.125.0 Apr 24, 2026 · release notes

     Codex CLI v0.125.0 adds Unix socket transport, remote plugin installs, reasoning-token reporting, and sticky environments for app-server workflows.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.125.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.125.0

     └──▷ TRY IT
     Capture reasoning-token usage programmatically when running a non-interactive task in CI or scripted pipelines.
     copy

     $ codex exec --json 'Audit this codebase for hardcoded credentials' | jq '.usage.reasoning_tokens'

     • Adds Unix socket transport for app-server integrations alongside existing transports.
     • Adds excludeTurns parameter to thread/resume and thread/fork endpoints for pagination-friendly session management.
     • Adds remote thread config/store plumbing and a remote thread config endpoint to app-server.
     • Adds sticky environment API and thread state to app-server integrations.
     • Enables remote plugin install writes and marketplace upgrade via a new app-server marketplace upgrade RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets..

     +5 more show less

     • Permission profiles now round-trip across TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. sessions, user turns, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. sandbox state, shell escalation, and app-server APIs.
     • Model providers now own model discovery; AWS/Bedrock account state is exposed to app clients via account/read.
     • codex exec --json now surfaces reasoning-token usage in its JSON output.
     • Rollout tracing now records tool, code-mode, session, and multi-agent relationships, with a debug trace reduction command for inspection.
     • App-server persists device key bindings in SQLite.

     10 details in Everything

117. rust-v0.124.0 Apr 23, 2026 · release notes

     Codex CLI v0.124.0 adds Amazon Bedrock support, stable hooks, quick TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. reasoning controls, and remote plugin marketplace access.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.124.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.124.0

     └──▷ TRY IT
     Temporarily lower reasoning mid-session in the TUI when you want faster, cheaper responses without changing your config.
     copy

     $ # Inside the Codex TUI, press Alt+, to lower reasoning or Alt+. to raise it

     Configure a stable hook in config.toml to observe every apply_patch edit and run a linter automatically.
     toml copy

     [hooks]
     [[hooks.post_tool_use]]
     tool = "apply_patch"
     command = "ruff check --fix ."

     • Adds Alt+, / Alt+. keyboard shortcuts in the TUI to lower or raise reasoning level on the fly; model upgrades now reset reasoning to the new model's default.
     • Adds first-class Amazon Bedrock support for OpenAI-compatible providers, including AWS SigV4SigV4AWS's request-signing protocol that authenticates HTTP calls by hashing the request body, headers, and credentials into a signature; cyber tools use it to talk to AWS APIs without embedding long-lived secrets. signing and AWS credential-based authentication.
     • Hooks are now stable: configurable inline in config.toml and requirements.toml, and can observe MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, apply_patch edits, and long-running Bash sessions.
     • App-server sessions can now manage multiple environments and select an environment and working directory per turn, enabling precise multi-workspace and remote targeting.
     • Remote plugin marketplaces can now be listed and read directly, with larger result pages and more reliable detail lookups.

     +1 more show less

     • Eligible ChatGPT plans now default to the Fast service tier unless explicitly opted out.

     6 details in Everything

118. rust-v0.123.0 Apr 23, 2026 · release notes

     Codex CLI gains native Amazon Bedrock support, verbose MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. diagnostics, and flexible .mcp.json plugin loading.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.123.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.123.0

     └──▷ TRY IT
     Inspect full MCP server state — resources, templates, and diagnostics — during a session to debug a misbehaving MCP tool.
     copy

     $ /mcp verbose

     • Adds built-in amazon-bedrock model provider with configurable AWS profile support.
     • Adds /mcp verbose subcommand for full MCP server diagnostics, resources, and resource templates without slowing down plain /mcp.
     • Supports both mcpServers and top-level server maps in .mcp.json for plugin MCP loading.
     • Improves realtime handoffs so background agents receive transcript deltas and can explicitly stay silent.
     • Adds remote_sandbox_config requirements for host-specific remote environment configuration.

     +1 more show less

     • Refreshes bundled model metadata, including gpt-5.4 as the current default.

     6 details in Everything

119. rust-v0.122.0 Apr 20, 2026 · release notes

     Codex CLI v0.122.0 adds side conversations, Plan Mode context control, plugin tabbed browsing, and deny-read glob sandbox policies.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.122.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.122.0

     └──▷ TRY IT
     Ask a quick question without leaving the current task — open a side conversation mid-session.
     copy

     $ /side What does this function return when input is nil?

     Check current context usage and default reasoning effort before continuing a plan.
     copy

     $ /status

     • New /side command in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. opens a side conversation for quick questions without interrupting the main session.
     • Queued input now accepts slash commands and ! shell prompts while work is already running.
     • Plan Mode can start implementation in a fresh context, with context-usage displayed before deciding whether to carry the planning thread forward.
     • Plugin workflows gain tabbed browsing, inline enable/disable toggles, marketplace removal, and support for remote, cross-repo, or local marketplace sources.
     • Filesystem permissions support new deny-read glob policies, managed deny-read requirements, and platform sandbox enforcement.

     +12 more show less

     • codex exec runs can now be isolated to ignore user config or rules.
     • Tool discovery (ToolSearch) and image generation are now enabled by default.
     • Image handling adds higher-detail support and original-detail metadata for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. and js_repl image outputs.
     • Image resizing updated to fit within 2048-square bounds.
     • New codex app command correctly opens or installs the Desktop app on Windows and Intel Macs.
     • Standalone installs are now more self-contained.
     • New thread/turns/list API and sorting/backwards-cursor support added to thread/list.
     • Default reasoning effort is now shown in /status.
     • Adds MCP server environment config support.
     • Adds piped stdin support in the exec process API.
     • Remote compaction now supported for Azure responses providers.
     • Adds server-level approval defaults for custom MCP servers.

     17 details in Everything

120. rust-v0.121.0 Apr 15, 2026 · release notes

     Codex CLI gains plugin marketplace install, Ctrl+R history search, memory controls, expanded MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. support, and secure devcontainer/bubblewrap sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls..

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.121.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.121.0

     └──▷ TRY IT
     Install a plugin marketplace from a GitHub repo so Codex can discover and use plugins from that source.
     copy

     $ codex marketplace add https://github.com/<org>/<marketplace-repo>

     Install a marketplace from a local directory during offline development or internal distribution.
     copy

     $ codex marketplace add /path/to/local/marketplace

     Search your TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. prompt history interactively to re-run a previous command without retyping it.
     copy

     $ # Inside the Codex TUI composer, press Ctrl+R and type keywords to reverse-search prompt history.

     • Adds codex marketplace add command to install plugin marketplaces from GitHub, git URLs, local directories, and direct marketplace.json URLs.
     • Adds Ctrl+R reverse search in the TUI composer for prompt history, plus local recall for accepted slash commands.
     • Adds TUI and app-server controls for memory mode, memory reset/deletion, and memory-extension cleanup, including a dedicated endpoint to delete memories.
     • Expands MCP/plugin support with MCP Apps tool calls, namespaced MCP tool registration, supports_parallel_tool_calls opt-in flag, and sandbox-state metadata sent through MCP tool metadata.
     • Adds realtime and app-server APIs for output modality, transcript completion events, and raw turn item injection.

     +7 more show less

     • Adds symlink-aware filesystem metadata flag to fs API.
     • Adds a secure devcontainer profile with bubblewrap sandboxing support.
     • Adds Unix socket allowlists for the macOS sandbox.
     • Adds context percentage indicator to the TUI status line.
     • Adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. capability token-hash support in the app-server.
     • Exposes instruction sources (AGENTS.md) via the app server.
     • Adds a CLI update announcement notification.

     12 details in Everything

121. rust-v0.120.0 Apr 11, 2026 · release notes

     Codex CLI v0.120.0 adds Realtime V2 background agent streaming, improved hook TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. outputSchema support, and richer SessionStart context.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.120.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.120.0

     • Streams Realtime V2 background agent progress live while work is still running, and queues follow-up responses until the active response completes.
     • Improves TUI hook activity display: live running hooks shown separately, completed hook output retained only when useful.
     • Adds thread title as a variable available in custom TUI status line configurations.
     • Includes MCP outputSchema details in Code-mode tool declarations so structured tool results carry precise typing.
     • Enables SessionStart hooks to distinguish sessions created by /clear from fresh startup or resume sessions.

     5 details in Everything

122. rust-v0.119.0 Apr 10, 2026 · release notes

     Codex CLI v0.119.0 adds voice v2 WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate., codex exec-server, Ctrl+O copy, /resume by ID, and richer MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.119.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.119.0

     • Realtime voice sessions now default to the v2 WebRTC path with configurable transport, voice selection, and native TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. media support.
     • New experimental codex exec-server subcommand for remote/app-server workflows.
     • Remote app-server sessions now support egress WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. transport and remote --cd forwarding.
     • Press Ctrl+O in the TUI to copy the latest agent response to the clipboard, with improved SSH and cross-platform clipboard behavior.
     • /resume can now jump directly to a session by ID or name from the TUI session picker.

     +5 more show less

     • TUI notifications are more configurable, adding Warp OSC 9 support and an opt-in mode for notifications even while the terminal is focused.
     • MCP Apps and custom MCP servers gain support for resource reads, tool-call metadata, custom-server tool search, server-driven elicitations, and file-parameter uploads.
     • Runtime remote-control enablement and sandbox-aware filesystem APIs added for app-server workflows.
     • Enables disabling prompt instruction blocks and environment context injection via config.
     • Fuzzy file search is now case-insensitive in the TUI.

     10 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The OPENAI_BASE_URL config fallback has been removed.
123. rust-v0.118.0 Mar 31, 2026 · release notes

     Codex CLI gains Windows proxy-only egress enforcement, piped stdin for codex exec, dynamic bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. for custom model providers, and device-code ChatGPT login.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.118.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.118.0

     └──▷ TRY IT
     Pipe a file's contents into Codex while supplying a distinct prompt — useful for scripted code review or transformation tasks in CI.
     copy

     $ cat main.rs | codex exec "Refactor this to use idiomatic error handling"

     • Enforces proxy-only networking on Windows sandboxes with OS-level egress rules, replacing environment-variable-only controls.
     • Adds ChatGPT device-code sign-in flow for app-server clients when browser-callback login is unavailable.
     • Supports prompt-plus-stdin piping in codex exec, letting you pipe input while passing a separate prompt on the command line.
     • Enables custom model providers to fetch and refresh short-lived bearer tokens dynamically instead of relying on static config or environment credentials.

     4 details in Everything

124. rust-v0.117.0 Mar 26, 2026 · release notes

     Codex CLI gains first-class plugin management, path-based multi-agent addressing, and richer app-server capabilities in v0.117.0.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.117.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.117.0

     └──▷ TRY IT
     Browse, install, or remove plugins from within an active Codex session.
     copy

     $ /plugins

     Label a terminal session with a custom title so parallel Codex sessions are easy to tell apart.
     copy

     $ /title

     • Adds first-class plugin workflow: Codex syncs product-scoped plugins at startup, lets you browse them via /plugins, and install or remove them with auth/setup handling built in.
     • Introduces path-based sub-agent addressing (e.g. /root/agent_a) with structured inter-agent messaging and agent listing for multi-agent v2 workflows.
     • Adds /title terminal-title picker to both the classic TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. and the app-server TUI, making parallel sessions easier to distinguish.
     • App-server clients can now send ! shell commands, watch filesystem changes, and connect to remote WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. servers with bearer-token authentication.
     • Enables prompt history recall in the app-server TUI, persisting across sessions.

     +1 more show less

     • view_image now returns image URLs for code mode, generated images are reopenable from the TUI, and image-generation history survives session resume.

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The legacy artifact tool has been removed, and the old read_file and grep_files handlers have been retired — any workflow relying on these tool surfaces will break on upgrade.
     • !The app-server-backed TUI is now enabled by default, and plugin/app rollout flags have been flipped on in normal builds — setups that depended on the previous defaults may behave differently.
125. rust-v0.116.0 Mar 19, 2026 · release notes

     Codex CLI gains ChatGPT device-code sign-in, a userpromptsubmit hook, smarter plugin management, and richer realtime sessions.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.116.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.116.0

     └──▷ TRY IT
     Intercept every user prompt before it runs — useful for adding mandatory prefixes or blocking disallowed patterns in shared environments.
     copy

     $ # In your Codex hooks config, register the new hook:
     # hooks:
     #   userpromptsubmit:
     #     - <path-to-your-hook-script>

     • Adds device-code ChatGPT sign-in during onboarding and token refresh support in the app-server TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     • New userpromptsubmit hook lets users block or augment prompts before execution and before they enter history.
     • Plugin setup now prompts to install missing plugins/connectors, honors a configured suggestion allowlist, and syncs install/uninstall state remotely.
     • Realtime sessions start with recent thread context and are less likely to self-interrupt during audio playback.

     4 details in Everything

126. rust-v0.115.0 Mar 16, 2026 · release notes

     Codex CLI gains full-resolution image inspection, realtime transcription, filesystem RPCs, Smart Approvals guardian routing, and a new Python app-server SDK.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.115.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.115.0

     └──▷ USE IT
     Override the OpenAI base URL (e.g., to point at a self-hosted or proxy endpoint) without changing the built-in provider.
     toml copy

     openai_base_url = "https://my-proxy.internal/v1"

     • Adds full-resolution image inspection: models can now opt into detail: "original" via view_image and codex.emitImage(..., detail: "original") for precision visual tasks.
     • Exposes codex.cwd and codex.homeDir inside js_repl, and persists codex.tool(...) / codex.emitImage(...) references across cells.
     • Adds a dedicated transcription mode for realtime WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. sessions, plus v2 handoff support via the codex tool, with a unified [realtime] session config block.
     • New v2 app-server filesystem RPCs cover file reads, writes, copies, directory operations, and path watching.
     • New Python SDK for integrating with the v2 app-server filesystem API.

     +4 more show less

     • Smart Approvals can now route review requests through a guardian subagent in core, app-server, and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., reusing the same guardian session across follow-up approvals.
     • App integrations now use the Responses API tool-search flow, can suggest missing tools (tool_suggest), and fall back gracefully when the active model lacks search support.
     • Adds openai_base_url config override for the built-in provider.
     • The multi-agent wait tool is now consistently named wait_agent, aligning with spawn_agent and send_input.

     9 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The multi-agent wait tool is renamed to wait_agent; any configuration or prompts referencing the old name will break.
127. rust-v0.114.0 Mar 11, 2026 · release notes

     Codex CLI gains experimental code mode, a hooks engine with SessionStart/Stop events, health endpoints, and skill-disabling config.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.114.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.114.0

     └──▷ TRY IT
     Check whether a running WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. app-server is healthy from a load balancer or monitoring script.
     copy

     $ curl -sf http://localhost:<port>/healthz && echo 'healthy'

     • Adds experimental code mode for more isolated coding workflows.
     • Adds experimental hooks engine with SessionStart and Stop hook events.
     • Adds GET /readyz and GET /healthz health-check endpoints to WebSocket app-server deployments.
     • Adds a config switch to disable bundled system skills entirely.
     • Handoffs now carry realtime transcript context for improved continuity across turns.

     +1 more show less

     • Improves the $ mention picker with category labels (Skills, Apps, Plugins) and plugins surfaced first.

     6 details in Everything

128. rust-v0.113.0 Mar 10, 2026 · release notes

     Codex CLI gains runtime permission requests, a plugin marketplace, full web search config, and split sandbox policies.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.113.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.113.0

     • Adds built-in request_permissions tool so a running turn can request additional permissions at runtime, with new TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. rendering for those approval prompts.
     • Introduces a curated plugin marketplace with plugin/list metadata discovery, install-time auth checks, and a plugin/uninstall endpoint.
     • Upgrades app-server command execution with streaming stdin/stdout/stderr and TTY/PTY support; wires exec to the new in-process app-server path.
     • Expands web search tool configuration beyond on/off to support full options such as filters and location.
     • Adds a new permission-profile config language and splits filesystem/network sandbox policies for more precise per-policy control.

     +1 more show less

     • Image generation now saves output files into the current working directory automatically.

     6 details in Everything

129. rust-v0.112.0 Mar 8, 2026 · release notes

     Codex CLI gains @plugin mentions in chat, a refreshed model picker, and safer per-turn sandbox privilege merging.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.112.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.112.0

     • Adds @plugin mentions so users can reference plugins directly in chat and auto-include their associated MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./app/skill context.
     • Updates the model-selection surface so the latest model catalog changes are surfaced in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. picker flow.
     • Merges executable permission profiles into per-turn sandbox policy for zsh-fork skill execution, enabling safer additive privilege handling for tool runs.

     3 details in Everything

130. rust-v0.111.0 Mar 5, 2026 · release notes

     Codex CLI rust-v0.111.0 enables Fast mode by default, adds local ESM imports in js_repl, and exposes MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. elicitation as structured flows.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.111.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.111.0

     └──▷ TRY IT
     Import a local workspace utility script inside a js_repl session to reuse shared helpers without copying code.
     copy

     $ const utils = await import('./scripts/utils.mjs');
     utils.analyzeResults(data);

     • Enables Fast mode by default for all sessions; TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. session header now displays whether the session is running in Fast or Standard mode.
     • Adds dynamic import of local .js and .mjs files in js_repl, allowing workspace scripts to be reused directly from the REPL.
     • Codex now reports enabled plugins (MCPs, apps, skills) to the model at session start, improving discovery of installed integrations.
     • App-server v2 exposes MCP elicitation as a structured request/response flow instead of raw events, simplifying client integrations.
     • Expands image workflow support for clients with client-side handling of image-generation events and model metadata for image-capable web search.

     5 details in Everything

131. rust-v0.110.0 Mar 5, 2026 · release notes

     Codex CLI gains a plugin system, multi-agent TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. upgrades, a /fast toggle, workspace-scoped memories, and a Windows installer.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.110.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.110.0

     └──▷ TRY IT
     Switch to fast mode mid-session to reduce latency when iterating quickly on a task.
     copy

     $ /fast

     Spin up a multi-agent workflow in the TUI and approve sub-agent actions interactively.
     copy

     $ /agent

     • Adds a plugin system that loads skills, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. entries, and app connectors from config or a local marketplace, with an install endpoint for enabling plugins from the app server.
     • Expands TUI multi-agent flow with approval prompts, /agent-based enablement, ordinal nicknames, role-labeled handoff context, and clearer prompts.
     • Adds a persisted /fast toggle in the TUI plus app-server support for fast and flex service tiers.
     • Improves memories with workspace-scoped writes, renamed memory settings, and guardrails against saving stale or polluted facts.
     • Adds a direct Windows installer script to published release artifacts.

     5 details in Everything

132. rust-v0.107.0 Mar 2, 2026 · release notes

     Codex CLI gains thread forking for sub-agents, configurable memories, multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. custom tools, and richer voice device controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.107.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.107.0

     └──▷ TRY IT
     Hard-wipe all saved memory state when you want a clean slate — useful after major project switches or corrupted memory accumulation.
     copy

     $ codex debug clear-memories

     • Adds thread forking into sub-agents, letting you branch work from the current conversation without losing context.
     • Enables microphone and speaker device selection for realtime voice sessions, with persistent device preferences and improved transcription-aligned audio format.
     • Supports multimodal output (including images and structured content) from custom tools, beyond plain text.
     • Introduces configurable memories and a new codex debug clear-memories command to fully reset saved memory state.
     • Exposes richer model availability and plan-upgrade metadata in the app server, surfacing plan-gated models with tooltips in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..

     +1 more show less

     • Adds an ephemeral field to the Thread object in the app-server API.

     6 details in Everything

133. rust-v0.106.0 Feb 26, 2026 · release notes

     Codex CLI gains a direct install script, js_repl promotion, user-input in Default mode, and smarter memory management.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.106.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.106.0

     • Adds a direct install script for macOS and Linux, published as a GitHub release asset alongside the codex and rg binaries.
     • Promotes js_repl to /experimental with startup compatibility checks, user-visible warnings for incompatible Node versions, and a lowered minimum Node requirement of 22.22.0.
     • Enables request_user_input in Default collaboration mode, not only in Plan mode.
     • Makes the 5.3-codex model visible in the CLI model list for API users.
     • Introduces diff-based memory forgetting and usage-aware memory selection for improved long-session memory behavior.

     +3 more show less

     • Expands the app-server v2 thread API with experimental thread-scoped realtime endpoints/notifications and a thread/unsubscribe flow to unload live threads without archiving them.
     • Adds structured OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. audit logging for embedded codex-network-proxy policy decisions and blocks.
     • Reduces sub-agent startup overhead by skipping expensive history metadata scans during subagent spawns.

     8 details in Everything

134. rust-v0.105.0 Feb 25, 2026 · release notes

     Codex CLI v0.105.0 adds syntax-highlighted diffs, voice dictation, multi-agent fan-out from CSV, new TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. commands, and granular approval controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.105.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.105.0

     └──▷ USE IT
     Enable voice dictation so you can hold spacebar to record and transcribe prompts instead of typing.
     toml copy

     # In your Codex config file (e.g. ~/.codex/config.toml)
     [features]
     voice_transcription = true

     • Adds syntax highlighting for fenced code blocks and diffs in the TUI, plus a /theme picker with live preview and theme-aware diff colors for light and dark terminals.
     • Enables voice dictation in the TUI: hold spacebar to record and transcribe a prompt directly (enable with features.voice_transcription = true in config).
     • New spawn_agents_on_csv capability fans out multi-agent work from a CSV file with built-in progress and ETA tracking.
     • Sub-agents now support nicknames, a cleaner picker UI, and visible child-thread approval prompts for easier multi-agent tracking.
     • New /copy TUI command copies the latest complete assistant reply to the clipboard.

     +15 more show less

     • New /clear command and Ctrl-L shortcut clear the screen without losing thread context; /clear can also start a fresh chat.
     • Codex can now request extra sandbox permissions for a command mid-session, and specific approval prompt types can be auto-rejected without disabling approvals entirely.
     • App-server thread/list now supports searching threads by title.
     • Thread status is now exposed in thread/read and thread/list responses and in notifications.
     • App-server thread/resume returns the latest turn inline, reducing data loss on reconnects.
     • Adds configurable MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. callback URL for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server login.
     • Adds allow_login_shell config option.
     • Implements proxy-only egress for the Linux sandbox via a TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it.-UDS-TCP bridge.
     • Node module resolution paths can now be specified for js_repl.
     • Adds configurable agent spawn depth.
     • Adds configurable write_stdin timeout.
     • Adds network proxy config wiring via permissions.network proxy config.
     • Adds JSON tracing logs for the app-server.
     • Adds ability to attach extra files to feedback submissions.
     • Profile-level model_catalog_json override is now supported.

     20 details in Everything

135. rust-v0.104.0 Feb 18, 2026 · release notes

     Codex CLI gains WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. proxy support, thread archive notifications, and distinct command approval IDs.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.104.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.104.0

     └──▷ TRY IT
     Route Codex CLI WebSocket traffic through a corporate proxy without modifying code or config files.
     copy

     $ WS_PROXY=ws://proxy.corp.example.com:3128 codex

     • Supports WS_PROXY/WSS_PROXY environment variables (and lowercase variants) for proxying WebSocket connections through the network proxy.
     • App-server v2 now emits notifications when threads are archived or unarchived, so clients can react to state changes without polling.
     • Core and protocol layers now carry distinct approval IDs per command approval, enabling multiple approvals within a single shell command execution flow.

     3 details in Everything

136. rust-v0.103.0 Feb 17, 2026 · release notes

     Codex CLI gains richer app metadata in listings and a configurable prepare-commit-msg hook for co-author attribution.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.103.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.103.0

     • App listing responses now include app_metadata, branding, and labels, enabling richer app cards without extra requests.
     • Commit co-author attribution now uses a Codex-managed prepare-commit-msg hook, with command_attribution config support to set a default label, a custom label, or disable attribution entirely.

     2 details in Everything

137. rust-v0.102.0 Feb 17, 2026 · release notes

     Codex CLI gains unified permissions flow, structured network approvals, multi-agent roles, and model reroute notifications.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.102.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.102.0

     • Adds a unified permissions flow with clearer permissions history in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. and a new slash command to grant sandbox read access to blocked directories.
     • Introduces structured network approval handling with richer host/protocol context shown directly in approval prompts.
     • Adds customizable multi-agent roles configurable via the main config file.
     • Adds a model/rerouted notification so clients can detect and render model reroute events explicitly.

     4 details in Everything

138. rust-v0.100.0 Feb 12, 2026 · release notes

     Codex CLI gains a JS REPL runtime, memory slash commands, configurable sandbox read access, and multi-rate-limit support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.100.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.100.0

     └──▷ TRY IT
     Drop a persisted memory entry by name during a session to keep the agent's memory clean.
     copy

     $ /m_drop

     Update a persisted memory entry interactively from the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. without leaving the session.
     copy

     $ /m_update

     • Adds experimental js_repl runtime that persists JavaScript state across tool calls, with optional runtime path overrides.
     • Adds /m_update and /m_drop TUI slash commands for in-session memory management.
     • Introduces ReadOnlyAccess policy shape for configurable sandbox read access on Linux and Windows.
     • Supports multiple simultaneous rate limits across the protocol, backend client, and TUI status surfaces.
     • Reintroduces app-server WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. transport with split inbound/outbound architecture and connection-aware thread resume subscriptions.

     +2 more show less

     • Enables Apps SDK apps in ChatGPT connector handling.
     • Promotes Linux bubblewrap sandbox and Windows Sandbox to Experimental capability level.

     7 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The disable_websockets config key is renamed to websockets_disabled.
     • !CODEX_BWRAP_ENABLE_FFI environment variable is removed; vendored bubblewrap is now always compiled on Linux.
139. rust-v0.99.0 Feb 11, 2026 · release notes

     Codex CLI v0.99.0 adds concurrent shell execution, new TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. controls, app-server steering APIs, and GIF/WebP image support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.99.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.99.0

     └──▷ TRY IT
     Customize which metadata fields appear in the TUI status line without leaving the interface.
     copy

     $ /statusline

     Restrict agents to specific web search modes and enforce network constraints for enterprise deployments.
     ini copy

     # requirements.toml
     [requirements]
     allowed_web_search_modes = ["safe"]
     
     [network]
     # network constraints defined here

     • Enables concurrent shell command execution alongside active agent turns without interruption.
     • Adds /statusline command for interactively configuring which metadata appears in the TUI footer.
     • Adds sortable resume picker with toggle between creation time and last-updated time, with an in-picker mode indicator.
     • New app-server APIs for steering active turns (turn/steer), listing experimental features, resuming agents (resume_agent), and opting out of specific notifications.
     • Enterprise requirements.toml now supports restricting allowed web search modes (allowed_web_search_modes) and defining network constraints.

     +2 more show less

     • Image attachments now accept GIF and WebP formats in addition to previously supported types.
     • Adds shell environment and rc file snapshotting to bootstrap shell commands.

     7 details in Everything

140. rust-v0.98.0 Feb 5, 2026 · release notes

     Codex CLI v0.98.0 ships GPT-5.3-Codex support and promotes Steer mode to stable-on-by-default.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.98.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.98.0

     • Adds GPT-5.3-Codex as a supported model.
     • Steer mode is now stable and enabled by default: Enter sends immediately during running tasks while Tab explicitly queues follow-up input.

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Steer mode is now enabled by default, changing keyboard behavior: Enter sends immediately during running tasks instead of queuing input, and Tab is now the explicit queue key — any workflow that relied on the previous Enter-to-queue behavior will behave differently without reconfiguration.
141. rust-v0.97.0 Feb 5, 2026 · release notes

     Codex CLI v0.97.0 adds session-scoped tool auto-approval, live skill reloading, /debug-config, and configurable log_dir.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.97.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.97.0

     └──▷ TRY IT
     Inspect the exact merged configuration Codex is running with — useful when debugging unexpected behavior from config files, env vars, or MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. settings.
     copy

     $ /debug-config

     • Adds session-scoped Allow and remember approval for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./App tools, so repeated calls to the same tool are auto-approved without re-prompting during a session.
     • Adds live skill update detection so changes to skill files are picked up without restarting the CLI.
     • Supports mixed text and image content in dynamic tool outputs for app-server integrations.
     • New /debug-config slash command in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. lets you inspect the effective configuration at runtime.
     • Introduces initial memory plumbing (API client and local persistence) to support thread memory summaries.

     +1 more show less

     • Adds configurable log_dir to redirect logs, overridable via -c flag.

     6 details in Everything

142. rust-v0.96.0 Feb 4, 2026 · release notes

     Codex CLI v0.96.0 adds thread compaction API, WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. rate-limit signaling, and unified exec on all non-Windows platforms.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.96.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.96.0

     • Adds thread/compact as an async trigger RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. in the v2 app-server API, letting clients start compaction immediately and track completion separately.
     • Adds a codex.rate_limits WebSocket event for rate-limit signaling, with WebSocket parity for ETagETagAn HTTP response header that carries an opaque version token for a resource, letting clients skip re-downloading unchanged content by sending the token back in a conditional request. and reasoning metadata handling.
     • Enables unified_exec on all non-Windows platforms.
     • Constrained requirement values now include source provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build., enabling source-aware config debugging in UI flows such as /debug-config.

     4 details in Everything

143. rust-v0.95.0 Feb 4, 2026 · release notes

     Codex CLI adds macOS app launcher, personal skills, parallel shell tools, and CODEX_THREAD_ID injection.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.95.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.95.0

     └──▷ TRY IT
     Invoke /plan with an inline prompt in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. instead of typing it separately after the command.
     copy

     $ /plan refactor the authentication module to use JWT tokens

     Use CODEX_THREAD_ID in a skill or script to branch logic based on which Codex session is active.
     copy

     $ echo "Running in Codex thread: $CODEX_THREAD_ID"

     • Adds codex app <path> command on macOS to launch Codex Desktop from the CLI, auto-downloading the DMG if not present.
     • Supports personal skill loading from ~/.agents/skills (with ~/.codex/skills compatibility) and new app-server APIs/events to list and download public remote skills.
     • /plan now accepts inline prompt arguments and pasted images directly in the TUI, with improved slash-command editing and highlighting.
     • Shell-related tools can now execute in parallel, improving multi-command throughput.
     • Injects CODEX_THREAD_ID into the shell environment so scripts and skills can detect the active thread/session.

     +1 more show less

     • Adds vendored Bubblewrap with FFI wiring in the Linux sandbox as groundwork for upcoming runtime integration.

     6 details in Everything

144. rust-v0.94.0 Feb 2, 2026 · release notes

     Codex CLI v0.94.0 enables plan mode by default, stabilizes personality config, and adds skills loading from .agents/skills.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.94.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.94.0

     └──▷ USE IT
     Set your preferred personality in the Codex config file to control agent tone across all sessions.
     toml copy

     # In your codex config (e.g., ~/.codex/config.toml)
     personality = "friendly"

     • Plan mode is now enabled by default with updated interaction guidance in the plan prompt.
     • Personality configuration is now stable: default is friendly, configured via the personality config key, with automatic forward migration of existing settings.
     • Supports loading skills from .agents/skills, with explicit relative-path lookup instructions and nested-folder markers supported.
     • Console output now includes runtime metrics for easier diagnostics.

     4 details in Everything

145. rust-v0.93.0 Jan 31, 2026 · release notes

     Codex CLI gains SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, streaming Plan mode TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., SQLite log DB, connector browsing, and smart approvals by default.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.93.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.93.0

     └──▷ USE IT
     Configure TUI notification delivery method in your Codex config.
     yaml copy

     tui:
       notifications_method: "system"

     • Adds an optional SOCKS5 proxy listener with policy enforcement and config gating.
     • Plan mode now streams proposed plans into a dedicated TUI view, with a feature-gated /plan slash command for quick mode switching.
     • New /apps slash command lets users browse connectors in the TUI, plus $ insertion for app prompts.
     • App-server supports external auth mode, accepting ChatGPT auth tokens from a host app and requesting refreshes when needed.
     • Smart approvals are now enabled by default, with explicit approval prompts for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool calls.

     +5 more show less

     • Introduces a SQLite-backed log database with thread-ID filtering, 90-day log retention, and heuristic coloring via an improved logs client.
     • Adds features enable/features disable subcommands for toggling feature flags.
     • Adds tui.notifications_method config option.
     • Adds output display to the /ps command.
     • Live web search is now enabled for the DangerFullAccess sandbox policy.

     10 details in Everything

146. rust-v0.92.0 Jan 27, 2026 · release notes

     Codex CLI v0.92.0 adds dynamic tool injection, thread unarchive RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets., MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. scopes config, multi-agent explorer role, and cached web_search by default.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.92.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.92.0

     • Enables dynamic tool injection at API v2 thread startup, routing tool calls and responses end-to-end through the server and core tool pipeline.
     • Adds thread/unarchive RPC to restore archived rollouts back into active sessions.
     • Supports defining OAuth scopes for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers directly in config.toml, eliminating the need to pass --scopes on every login.
     • Expands multi-agent collaboration with an explorer role, improved collab event mapping, and max-depth guardrails to cap agent recursion.
     • Adds thread list filtering in the app server to simplify browsing large thread sets.

     +1 more show less

     • Makes cached web_search the default client-side behavior.

     6 details in Everything

147. rust-v0.90.0 Jan 25, 2026 · release notes

     Codex CLI gains a network sandbox proxy, connectors/MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. support, and a beta collaboration mode with ephemeral threads.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.90.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.90.0

     • Adds a network sandbox proxy with policy enforcement to control outbound network access.
     • Introduces connectors support (phase 1) via an app server and MCP integration, with new config surface.
     • Ships collaboration mode as beta in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., featuring a clearer plan → execute handoff and simplified Coding vs Plan mode selection.
     • Supports ephemeral threads and improved provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. metadata for spawned collaboration threads.
     • Adds proxy configuration support for WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. connections.

     +1 more show less

     • Enforces stricter limits on the number of concurrent multi-agents.

     6 details in Everything

148. rust-v0.89.0 Jan 22, 2026 · release notes

     Codex CLI gains /permissions command, per-skill toggle UI, smarter slash-command matching, and expanded app-server APIs.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.89.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.89.0

     └──▷ TRY IT
     Quickly review and adjust sandbox permissions mid-session without typing the full /approvals command.
     copy

     $ /permissions

     Enable or disable a specific skill interactively during a session to control which capabilities Codex may invoke.
     copy

     $ /skill

     • Adds /permissions command as a shorter alias for the approval workflow (original /approvals kept for compatibility).
     • Adds /skill UI to enable or disable individual skills from within the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     • Improves slash-command selection by prioritizing exact and prefix matches over fuzzy matches.
     • App server supports new thread/read API and filtering of archived threads in thread/list.
     • App server clients support layered config.toml resolution; config/read can compute the effective config from a given working directory.

     +1 more show less

     • Release artifacts now include a stable URL for the published config schema.

     6 details in Everything

149. rust-v0.88.0 Jan 21, 2026 · release notes

     Codex CLI gains device-code auth, collaboration modes, /fork sessions, codex cloud list, and WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. proxy support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.88.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.88.0

     └──▷ TRY IT
     List available Codex cloud resources directly from the terminal.
     copy

     $ codex cloud list

     Use the renamed model instructions file key in your config to supply a custom system prompt.
     ini copy

     model_instructions_file = "/path/to/instructions.md"

     • Adds device-code auth as a standalone fallback for headless environments where browser-based login is unavailable.
     • Introduces collaboration modes (with presets and per-turn overrides) for multi-agent coordination.
     • New codex cloud list subcommand to list cloud resources from the CLI.
     • New /fork slash command to fork the current session instead of opening the session picker.
     • Shows forked-from session ID in /status output.

     +14 more show less

     • Supports enabling/disabling individual skills via config or API.
     • Adds model_personality config option to customize model behavior.
     • Renames experimental_instructions_file to model_instructions_file in config.
     • Adds /experimental menu in TUI2 for accessing experimental features.
     • Supports proxy configuration for WebSocket connections.
     • Auto-enables WebSocket transport when conditions are met.
     • New max_threads config option to cap concurrent thread count.
     • Returns threads sorted by created_at or updated_at via the app-server API.
     • Adds a request-user-input tool and overlay for interactive prompts during task execution.
     • Introduces forward navigation in backtrack preview within the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     • Closes all threads when /new is invoked.
     • Detaches non-TTY child processes for cleaner headless operation.
     • Displays raw shell command on user shell interactions.
     • Preserves slash command order in search results.

     19 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The experimental_instructions_file config key is renamed to model_instructions_file; existing configs using the old key will need to be updated.
150. rust-v0.87.0 Jan 16, 2026 · release notes

     Codex CLI v0.87.0 adds multi-ID collaboration waits, user-snapshot shell execution, and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. approval surfacing for spawned threads.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.87.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.87.0

     • Enables collaboration wait calls to block on multiple IDs in a single request, simplifying multi-thread coordination.
     • Runs user shell commands under the user snapshot so aliases and shell config are honored.
     • Surfaces approval requests from spawned/unsubscribed threads directly in the TUI.
     • Adds user message metadata (text elements and byte ranges) round-tripping through protocol, app-server, and core so UI annotations survive history rebuilds.

     4 details in Everything

151. rust-v0.86.0 Jan 16, 2026 · release notes

     Codex CLI adds SKILL.toml metadata support and explicit web search disable control.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.86.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.86.0

     └──▷ TRY IT
     Define skill metadata for your project so it appears correctly in the Codex TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. and app server.
     copy

     $ # Place SKILL.toml at your project root:
     cat SKILL.toml
     # name = "My Skill"
     # description = "Does X and Y"
     # icon = "🔍"
     # brand_color = "#FF6600"
     # default_prompt = "Start by summarizing the repo."

     • Adds SKILL.toml support for defining skill metadata (names, descriptions, icons, brand color, default prompt) surfaced in the app server and TUI.
     • Enables clients to explicitly disable web search and signal eligibility via a header to align with server-side rollout controls.

     2 details in Everything

152. rust-v0.85.0 Jan 15, 2026 · release notes

     Codex CLI v0.85.0 adds real-time agent collaboration events, agent role presets, and interrupt-capable send_input.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.85.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.85.0

     • App-server v2 now emits collaboration tool calls as item events in the turn stream, enabling clients to render agent coordination in real time.
     • New spawn_agent parameter accepts an agent role preset for richer agent control in collaboration tools.
     • New send_input interrupt capability lets callers optionally interrupt a running agent before delivering a message.
     • /models metadata now includes migration_markdown so clients can display richer upgrade guidance when suggesting model migrations.

     4 details in Everything

153. rust-v0.84.0 Jan 15, 2026 · release notes

     Codex CLI Rust v0.84.0 adds metadata on text elements for richer client rendering and schema evolution.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.84.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.84.0

154. rust-v0.81.0 Jan 14, 2026 · release notes

     Codex CLI gains gpt-5.2-codex default, headless device-code login, Linux read-only mounts, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. threadId support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.81.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.81.0

     └──▷ TRY IT
     Keep TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. output in the main scroll buffer (not alternate screen) so Zellij scrollback works correctly.
     copy

     $ codex --no-alt-screen "refactor the auth module"

     • Switches default API model to gpt-5.2-codex.
     • Adds threadId to codex mcp-server responses, enabling chained use with the codex-reply tool.
     • Enables automatic device-code login flow when a headless (no-browser) environment is detected.
     • Supports read-only bind mounts in the Linux sandbox to prevent writes to sensitive paths.
     • Renders partial (in-flight) tool calls in the TUI transcript overlay.

     +2 more show less

     • Adds tui.alternate_screen config key and --no-alt-screen CLI flag to control alternate-screen behaviour (e.g., for Zellij scrollback).
     • Publishes a generated JSON Schema for config.toml in docs/ to enable config validation.

     7 details in Everything

155. rust-v0.80.0 Jan 9, 2026 · release notes

     Codex CLI gains session forking, sandbox elevation, skill invocations via v2 API, requirements exposure, and metrics observability.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.80.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.80.0

     └──▷ TRY IT
     Elevate sandbox permissions interactively when your agent needs capabilities beyond the default sandbox mode.
     copy

     $ /elevate-sandbox

     • Adds conversation/thread fork endpoints so clients can branch a session into a new thread.
     • Introduces the /elevate-sandbox command with onboarding prompts for upgrade/degraded sandbox mode.
     • Exposes requirement/list endpoint so clients can read requirements.toml and adapt agent-mode UX.
     • Supports explicit skill invocations through the v2 API UserInput::Skill.
     • Introduces metrics capabilities with additional counters for observability.

     5 details in Everything

156. rust-v0.79.0 Jan 7, 2026 · release notes

     Codex CLI gains multi-conversation agent control, thread rollback, cached web search, and an analytics config toggle.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.79.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.79.0

     └──▷ USE IT
     Opt out of analytics collection by adding the analytics section to your Codex config file.
     ini copy

     [analytics]
     enabled = false

     • Adds multi-conversation agent control so a session can programmatically spawn or message other conversations.
     • Adds thread/rollback app-server API so IDE clients can undo the last N turns without rewriting history.
     • Adds web_search_cached flag to return cached-only Web Search results as a safer alternative to live requests.
     • Allows global exec flags (model, json, sandbox toggles, etc.) to be passed after codex exec resume.
     • Shows time/version-targeted announcement tips in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., driven by a TOML file in the repo.

     +1 more show less

     • Adds [analytics] enabled=... config section to control analytics collection behavior.

     6 details in Everything

157. rust-v0.78.0 Jan 6, 2026 · release notes

     Codex CLI gains external-editor prompt editing, project-aware config layering, MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. support, and richer exec policy justifications.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.78.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.78.0

     └──▷ TRY IT
     Edit a long or complex prompt in your preferred editor mid-session instead of typing it inline in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     copy

     $ # While in the Codex TUI, press Ctrl+G to open the current prompt in $VISUAL or $EDITOR, edit, save, and quit — edits are synced back automatically.

     • Adds Ctrl+G to open the current prompt in your configured external editor ($VISUAL/$EDITOR) and sync edits back into the TUI.
     • Supports project-aware config layering: loads repo-local .codex/config.toml, honors configurable project_root_markers, and merges with system config like /etc/codex/config.toml.
     • Supports enterprise-managed configuration requirements on macOS via an MDM-provided TOML payload.
     • Exec policy rules can now include human-readable justifications via a justification arg to prefix_rule() in *.rules files, with policy loading following the unified config-layer stack.
     • Improves tui2 transcript navigation with multi-click selection, a copy shortcut/affordance, and a draggable auto-hiding scrollbar.

     +1 more show less

     • Starts Windows PowerShell sessions in UTF-8 mode to reduce encoding-related prompt/output issues.

     6 details in Everything

158. rust-v0.77.0 Dec 21, 2025 · release notes

     Codex CLI v0.77.0 adds sandbox mode constraints, normalized TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. scrolling with config knobs, and flag-free MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. login.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.77.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.77.0

     └──▷ USE IT
     Lock a repo to only allow network-disabled sandbox modes, preventing contributors from accidentally running Codex with broader access.
     toml copy

     # In your project's requirements.toml
     allowed_sandbox_modes = ["workspace-write"]

     • Adds allowed_sandbox_modes field to requirements.toml to restrict which sandbox modes a project permits.
     • Adds tui.scroll_* config settings and normalizes mouse wheel and trackpad scrolling behavior across terminals in TUI2.
     • MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. OAuth login for streamable HTTP servers no longer requires the rmcp_client feature flag — works out of the box.
     • Improves fuzzy file search display consistency by centralizing file-name derivation in codex-file-search.
     • Updates bundled model metadata (models.json) with latest available models.

     5 details in Everything

159. rust-v0.76.0 Dec 19, 2025 · release notes

     Codex CLI gains /ps command, ExternalSandbox policy, model list UI, admin-scoped skills, and system-wide UNIX config support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.76.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.76.0

     └──▷ TRY IT
     Inspect processes currently running inside a Codex session — useful when debugging long-running agent tasks.
     copy

     $ /ps

     • Adds /ps command to list running processes from within the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     • Introduces ExternalSandbox policy for delegating sandbox enforcement to an external process.
     • Supports system-wide /etc/codex/requirements.toml on UNIX for admin-managed dependency configuration.
     • Adds a model list UI for browsing and selecting available models interactively.
     • Enables skills by default (previously opt-in), with support for admin-scoped skills.

     +4 more show less

     • Supports shortDescription field for skills entries, surfaced in the skills popup.
     • Adds macOS DMG build target for easier distribution and installation.
     • Improves terminal detection metadata to enable per-terminal scroll tuning.
     • Updates bundled system skills included with the CLI.

     9 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The exclude setting now defaults to true in the app server, changing behavior for existing app-server deployments that relied on the previous default.
160. rust-v0.74.0 Dec 18, 2025 · release notes

     Codex CLI gains gpt-5.2-codex model, a new /experimental slash command, model picker UI, and configurable ghost-snapshot warnings.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.74.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.74.0

     └──▷ TRY IT
     Access experimental features mid-session without restarting the CLI.
     copy

     $ /experimental

     • New /experimental slash command for accessing experimental features from within the CLI.
     • New model picker UI for selecting models interactively.
     • Adds config option to disable ghost snapshot warnings.
     • Supports SYSTEM-level skills, expanding the skills system beyond user-defined entries.
     • Adds public skills discovery with improved repo skill discovery and error UX.

     +4 more show less

     • TypeScript SDK gains xhigh reasoning effort support.
     • Model list loading is now non-blocking, improving startup responsiveness.
     • Constrains allowed values for approval_policy config field.
     • Sandboxes the .codex sub-folder as read-only when it resides inside a writable root.

     9 details in Everything

161. rust-v0.73.0 Dec 15, 2025 · release notes

     Codex CLI v0.73.0 adds OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. tracing, ghost snapshot v2, ghost commit config support, and a reimplemented SkillsManager.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.73.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.73.0

     • Adds ghost snapshot v2 for improved session capture.
     • Supports ghost commits via config for session replay workflows.
     • Reimplements skills loading via SkillsManager and skills/list for consistent discovery.
     • Adds OpenTelemetry tracing support for observability into Codex operations.

     4 details in Everything

162. rust-v0.72.0 Dec 13, 2025 · release notes

     Codex CLI v0.72.0 adds remote compaction for API-key sessions, expanded sandbox safety, and 1Password support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.72.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.72.0

     • Enables remote compacting (context compactioncontext compactionCondensing an AI conversation or working history to free space in the model's context window. A summary preserves useful information, but details can be lost. via API) for API-key-based sessions, not just OAuth users.
     • Adds 1Password integration support.
     • Introduces Elevated Sandbox levels 3 and 4, tightening sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. for shell command execution.
     • Expands the safe-command allowlist, reducing unnecessary sandbox prompts for common operations.
     • Adds reliable utilities for locating pwsh.exe and powershell.exe on Windows, and uses PowerShell to parse PowerShell syntax.

     +2 more show less

     • Signs two additional Windows executables for improved trust on Windows hosts.
     • New config API with a cleaner config loading flow.

     7 details in Everything

163. rust-v0.71.0 Dec 11, 2025 · release notes

     Codex CLI rust-v0.71.0 adds gpt-5.2 support, shell snapshots, long-snapshot warnings, and an elevated Sandbox 2.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.71.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.71.0

     • Adds gpt-5.2 as a selectable model, OpenAI's latest frontier model with improvements across knowledge, reasoning, and coding.
     • Shows the default model in the model picker so practitioners can see at a glance what will be used.
     • Adds shell snapshots for shell commands, capturing environment state for reproducibility.
     • Adds warnings when snapshots grow too long, surfacing potential performance or context issues early.
     • Introduces Elevated Sandbox 2, an upgraded sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. environment.

     5 details in Everything

164. rust-v0.69.0 Dec 10, 2025 · release notes

     Codex CLI gains Skills injection, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. in-session login, vim TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. navigation, shell snapshotting, and an experimental tui2 frontend.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.69.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.69.0

     • Adds Skills support: explicitly selecting a skill now injects its SKILL.md content into the turn; skills load once per session and warn on unreadable files.
     • Adds MCP in-session login so users can authenticate to Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers without leaving the CLI session.
     • Adds vim-style navigation keys (hjkl/arrow equivalents) for both option selection menus and the transcript pager.
     • Adds shell snapshotting in the exec/sandbox layer for safer and more reliable command execution.
     • Introduces an experimental tui2 frontend, available behind a feature flag.

     +6 more show less

     • Elevates Linux sandbox allowances to permit sendmsg/recvmsg syscalls, unblocking more networked workloads.
     • Adds support for using a remote branch when performing reviews if the local branch trails, enabling review of unsynced work.
     • Rate-limit warnings now display as percentage of quota remaining for clearer visibility.
     • Config writes now preserve comments and key order; model field is optional to match real-world config files.
     • TUI log files now strip ANSI escape codes for cleaner plaintext logs.
     • Adds codex-max prompt and tools support for experimental models.

     11 details in Everything

165. rust-v0.66.0 Dec 9, 2025 · release notes

     Codex CLI gains execpolicy TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. whitelisting, --branch for cloud exec, sigstore signing, and cloud status/diff/apply flows.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.66.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.66.0

     • Adds TUI ability to whitelist command prefixes after an approval, so repeated similar commands skip future prompts.
     • Sandbox denials now propose an execpolicy amendment in the TUI that you can accept inline.
     • Shell MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server now runs execpolicy, so MCP tools follow the same approval rules as direct commands.
     • Execpolicy fallback checks now inspect each pipeline segment, catching unsafe tails like | rm -rf that were previously missed.
     • Adds --branch flag to codex cloud exec for targeting a specific branch on remote runs.

     +4 more show less

     • Adds status, diff, and apply subflows to the cloud exec path so you can inspect and apply cloud-run changes locally.
     • Linux release artifacts are now signed via sigstore for supply-chain verification.
     • Adds is-mutating detection for the shell command handler to better classify dangerous shell operations.
     • Skills are also loaded from the repository root in addition to existing search paths.

     9 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !experimental_use_rmcp_client is removed from the config (the flag no longer exists).
166. rust-v0.65.0 Dec 4, 2025 · release notes

     Codex CLI adds /resume and /skills commands, history trimming, pycache exclusion, and Ctrl-P/N TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. navigation in v0.65.0

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.65.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.65.0

     └──▷ TRY IT
     Resume a previous Codex session interactively without restarting from scratch.
     copy

     $ /resume

     Browse and activate skills defined in your skills.md during a session.
     copy

     $ /skills

     Cap local history file size to prevent unbounded growth across long-running projects.
     yaml copy

     # In your Codex config file:
     history:
       max_bytes: 10485760

     • Adds /resume slash command for snappier session resumption from the TUI.
     • Adds /skills slash command (also via $) for listing and selecting skills defined in skills.md.
     • Promotes Codex Max as the new default model.
     • Trims history.jsonl automatically when history.max_bytes is set, capping local history size.
     • Ignores common junk directories — including __pycache__ — by default to reduce context noise.

     +10 more show less

     • Adds Ctrl-P / Ctrl-N keyboard shortcuts for arrow navigation inside the TUI textarea.
     • Renders tips and tooltips via Markdown with a bold Tip label for richer in-app guidance.
     • Adds model warning when apply_patch is used with an incompatible model.
     • Supports listing MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers from the app-server API.
     • Adds --version flag for the @openai/codex-shell-tool-mcp package.
     • Adds one-off commands support to app-server v2.
     • Introduces alias compaction for more efficient context management.
     • Adds experimental support for skills.md skill definitions.
     • Displays tokens used when the context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. size is unknown.
     • Restores clipboard image paste support on native Windows in the TUI.

     15 details in Everything

167. rust-v0.64.0 Dec 2, 2025 · release notes

     Codex CLI v0.64.0 adds detached review mode, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. elicitations, per-run custom env injection, compaction events, and ImageView inline rendering.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.64.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.64.0

     └──▷ TRY IT
     Install the shell-tool MCP server from npm and log in so Codex can authenticate on your behalf.
     copy

     $ npx @openai/codex-shell-tool-mcp login

     • Adds experimental exp model selection for tool experimentation.
     • Adds unified exec basic pruning strategy to limit session bloat.
     • Adds per-run custom environment injection for unified exec processes.
     • Adds policy-approved command bypass so approved commands skip sandbox checks.
     • Adds detached review mode with explicit enter/exit events and review thread IDs.

     +18 more show less

     • Adds MCP elicitations support for interactive model-initiated prompts.
     • Adds shell-tool MCP login support and explicit server capability declaration.
     • Publishes @openai/codex-shell-tool-mcp to npm for public installation.
     • Adds compaction events emitted on threads and turns for observability.
     • Adds token-usage and plan-update notifications on thread/turn events.
     • Adds item/fileChange/outputDelta output deltas on file-change items.
     • Adds ImageView item type that renders images inline in the app-server.
     • Exposes process IDs on command items for event handling.
     • Adds thread and turn IDs propagated on every item and error notification.
     • Exposes git info, current working directory, CLI version, and source metadata on threads.
     • Adds send-followup-v2 to the app-server test client.
     • Adds config management utilities to the app-server.
     • Enables history lookup on Windows and WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host..
     • Enables enterprises to skip upgrade checks and messages.
     • Windows sandbox flags risky browser or URL launches as dangerous before execution.
     • Consolidates world-writable-directory scanning for improved safety defaults.
     • Upgrades rmcp client to 0.10.0, enabling custom client notifications.
     • Adds cargo-audit and cargo-deny for supply-chain security in CI.

     23 details in Everything

168. rust-v0.63.0 Nov 21, 2025 · release notes

     Codex CLI adds a Declined status for command execution approvals in the app server.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.63.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.63.0

169. rust-v0.59.0 Nov 19, 2025 · release notes

     Codex CLI gains GPT-5.1-Codex-Max, native Windows Agent mode, compaction support, and expanded 10K tool output tokens.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.59.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.59.0

     └──▷ USE IT
     Cap tool output size to avoid runaway token usage when working with verbose commands in long sessions.
     toml copy

     # In ~/.codex/config.toml
     tool_output_token_limit = 10000

     Enable Windows Agent mode with the experimental sandbox when running Codex on a native Windows machine.
     📍# When prompted during onboarding, or select auto mode — Codex will prompt to enable the Windows sandbox automatically.
     • Adds GPT-5.1-Codex-Max model for higher reliability and long-running, project-scale agentic coding workflows.
     • Introduces native Windows Agent mode with an experimental sandbox that limits filesystem and network access, allowing Codex to read/write files and run commands with fewer approvals.
     • Adds first-class Native Compaction support to improve performance across extended coding sessions, enabled by default.
     • Expands tool output token limits to 10,000 tokens, configurable via tool_output_token_limit in config.toml.
     • Adds LM Studio OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. model support.

     +9 more show less

     • Adds mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. configuration support for OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. via the [otel] config section.
     • Enables parallel tool calls for faster multi-step agent execution.
     • Adds git branch tooling so the model can query and work with branches programmatically.
     • Adds --add-dir flag to exec and the TypeScript SDK for specifying additional working directories.
     • Credits are now visible via the /status command.
     • Codex Resume now displays branches and filters sessions by current working directory.
     • Adds placeholder icons for images that cannot be decoded to prevent API errors.
     • Adds non-blocking MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server startup so the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. is responsive while MCP tools initialize.
     • TUI notifications are now enabled by default.

     14 details in Everything

170. rust-v0.58.0 Nov 13, 2025 · release notes

     Codex CLI gains GPT-5.1 support, a new shell_command tool, seatbelt log-denials debugger, and app-server JSON schema generation.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.58.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.58.0

     └──▷ TRY IT
     Diagnose why the seatbelt sandbox is blocking a command by capturing denial events in real time.
     copy

     $ codex debug seatbelt --log-denials

     • Adds support for the gpt-5.1 model family, including model picker integration and NUX onboarding.
     • New shell_command tool for executing shell commands from within the agent.
     • New codex debug seatbelt --log-denials command for diagnosing sandbox permission denials.
     • App-server gains a new command to generate JSON schema for protocol definitions.
     • App-server adds item started/completed events for turn items, enabling finer-grained lifecycle tracking.

     +11 more show less

     • App-server thread/resume endpoint now supports history, path, and overrides parameters.
     • Adds workdir field to unified_exec for controlling working directory of executed commands.
     • Adds opt-out for rate-limit model nudge, giving users control over model-switch suggestions.
     • Unified exec gains escalation handling for more robust sandboxed execution.
     • Enables ghost_commit feature by default, committing only after mutating tools complete.
     • TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. now displays keyboard shortcuts inline for approval options.
     • Windows .exe artifacts are now uploaded for CLI releases, enabling direct Windows binary downloads.
     • Auth-aware status output now uses authentication information from AuthManager.
     • Rate-limit status bar is now surfaced in the UI.
     • Warns when a model switch occurs on session resume.
     • Proxy context is preserved across compaction events.

     16 details in Everything

171. rust-v0.57.0 Nov 9, 2025 · release notes

     Codex CLI gains Ctrl-N/P slash-command navigation, unified exec safe-command auto-approval, and new app-server endpoints.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.57.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.57.0

     └──▷ HOW TO FIND IT
     Navigate slash-command suggestions or history without leaving the keyboard while typing a prompt.
     📍# Inside the Codex TUI, type '/' to open the slash-command list, then press Ctrl-N / Ctrl-P to move up and down through suggestions.
     • Adds Ctrl-N / Ctrl-P keyboard navigation for slash command lists, file pickers, and history in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     • Unified exec mode now allows safe commands to run without requiring user approval.
     • Skips retries automatically when the API returns an insufficient_quota error, avoiding unnecessary wait loops.
     • Removes the shell tool when unified exec is enabled, streamlining the tool surface.
     • Promotes shell config tool to model family config level.

     +6 more show less

     • App-server implements the account/read endpoint.
     • App-server exposes additional fields on the Thread object.
     • Adds network_access and web_search options to the TypeScript SDK.
     • WSLWSLWindows Subsystem for Linux, a Microsoft-built compatibility layer that lets a Linux environment run directly on Windows without a virtual machine, giving cyber tools access to Linux binaries, filesystems, and syscalls on a Windows host.: normalizes Windows paths during updates.
     • Replaces raw Cloudflare 403 HTML responses with a friendly error message.
     • Kills shell tool process groups on timeout, improving cleanup for long-running commands.

     11 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The shell tool is removed from the available tool set when unified exec is enabled (--unified-exec).
172. rust-v0.56.0 Nov 7, 2025 · release notes

     Codex CLI gains GPT-5-Codex-Mini, model nudges, single-reasoning-effort model support, and new v2 server APIs.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.56.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.56.0

     • Introduces GPT-5-Codex-Mini, a compact and cost-efficient variant of GPT-5-Codex.
     • Adds model nudge suggestions for queries to guide model selection.
     • Supports models with a single reasoning effort level.
     • Windows Sandbox now warns when an Everyone-writable directory is detected.
     • Sandbox widened to allow certificate operations when network is enabled.

     +4 more show less

     • App-server exports v2 Thread, Turn, and account login (start/completed/cancel) APIs.
     • Session metadata is now included in listConversations responses.
     • Allows Codex to be run from PID 1.
     • Loads custom prompts from symlinked Markdown files.

     9 details in Everything

173. rust-v0.54.0 Nov 4, 2025 · release notes

     Codex CLI v0.54.0 adds Azure OpenAI proxy support, an improved compactor, and elapsed-time display after aborts.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.54.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.54.0

     • Adds options to responses-api-proxy to support Azure OpenAI endpoints.
     • Introduces compactor v2 (feat: compactor 2) for improved conversation compaction, with a warning displayed on compact.
     • Shows elapsed time in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. after aborting a request.
     • Follows symlinks during file search.
     • Parses Azure OpenAI rate-limit messages for clearer error reporting.

     +5 more show less

     • Logs sandbox commands to $CODEX_HOME instead of the current working directory.
     • Includes reasoning tokensreasoning tokensIntermediate reasoning a model writes out before its final answer. Reasoning models generate it automatically and it is often billed as extra output tokens. in the context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. calculation.
     • Adds sandbox command assessment changes based on experiment feedback.
     • Refines TUI text-area word separator handling.
     • Ensures the trust prompt is not skipped on Windows when sandbox is enabled.

     10 details in Everything

174. rust-v0.53.0 Oct 31, 2025 · release notes

     Codex CLI gains a Windows Sandbox alpha, /exit command alias, and absolute-time rate-limit errors.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.53.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.53.0

     └──▷ TRY IT
     Exit an interactive Codex session using the new alias instead of /quit.
     copy

     $ /exit

     • Adds Windows Sandbox alpha support for isolated execution on Windows.
     • Adds /exit as a slash-command alias for /quit.
     • Rate-limit errors now report an absolute timestamp instead of a relative delay.
     • Removes last-turn reasoning filtering, exposing full reasoning output.

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The include_view_image_tool config key has been removed; any config referencing it will need to be updated.
175. rust-v0.52.0 Oct 30, 2025 · release notes

     Codex CLI v0.52.0 adds shell passthrough with !<cmd>, TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. undo, configurable compaction prompt, keyring auth, and MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. scopes.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.52.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.52.0

     └──▷ TRY IT
     Run a quick shell command mid-session without leaving the Codex prompt — useful for checking git status or running a build before your next instruction.
     copy

     $ !git status

     • Adds !<cmd> syntax to execute shell commands directly from the Codex prompt.
     • New TUI undo operation lets users roll back the last applied change.
     • Queued messages are now visible in the TUI during active response streaming.
     • Compaction prompt is now configurable by the user.
     • New auth storage abstraction with OS keyring support and configurable backend.

     +15 more show less

     • Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. OAuth scope specification support via mcp add.
     • MCP tool call results that include images are now rendered to the model.
     • Environment variable values are redacted in /mcp and mcp get output.
     • New GetConversationSummary RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. enables fetching and resuming conversation summaries by ID.
     • Item streaming events added to the app-server protocol.
     • Sandbox policy violations now surface a model summary and risk assessment.
     • Adds sandbox_mode support in user profiles.
     • MIME type verification added for attached images.
     • Windows TUI now displays auto-mode setup guidance.
     • Conversations annotated with model_provider field to enable filtering.
     • Ability to purchase credits for additional usage surfaced in the CLI.
     • MCP startup errors for timeouts and GitHub auth now provide clearer messaging.
     • Local tokenizer used for accurate truncation of unified exec tool outputs.
     • Stale or missing rate-limit data now produces explicit messaging in the TUI.
     • Returns an error when an unknown feature flag is passed to enabled/disabled feature config.

     20 details in Everything

176. rust-v0.50.0 Oct 25, 2025 · release notes

     Codex CLI v0.50.0 adds sandbox policy risk assessments, stale rate-limit messaging, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. env-var redaction.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.50.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.50.0

     • Adds model summary and risk assessment output for commands that violate sandbox policy.
     • Adds messaging when rate limits are stale or no rate limits are cached.
     • Introduces codex/event/raw_item events in the app-server event stream.
     • Improves /feedback command diagnostics for better issue reporting.

     4 details in Everything

177. rust-v0.48.0 Oct 23, 2025 · release notes

     Codex CLI gains --add-dir, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool filtering, OAuth scopes, enterprise login controls, and auto-compaction at 90% context.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.48.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.48.0

     └──▷ TRY IT
     Give the agent write access to a second directory (e.g. a shared library) alongside your current project.
     copy

     $ codex --add-dir ../shared-lib 'Refactor the auth module to use the shared validation helpers'

     Restrict an MCP server to only the tools your workflow needs, reducing attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
     toml copy

     # In your Codex config (e.g. ~/.codex/config.toml):
     [mcp_servers.my_server]
     enabled_tools = ["read_file", "search_code"]

     Lock a team deployment to a specific login method and ChatGPT workspace via managed config.
     toml copy

     # In managed config:
     forced_login_method = "chatgpt"
     forced_chatgpt_workspace_id = "ws-abc123"

     • Adds --add-dir flag to specify additional writable working directories beyond the default.
     • MCP stdio servers now use the official Rust MCP SDK (rmcp) as their client backend.
     • MCP stdio servers can specify a cwd to set their working directory.
     • MCP servers support enabled_tools and disabled_tools config options to selectively allow or block individual tools.
     • Streamable HTTP MCPStreamable HTTP MCPA transport variant of the Model Context Protocol (MCP) that carries tool-call messages over HTTP with optional streaming, letting cyber tools expose AI-callable functions without maintaining a persistent connection. servers can specify OAuth scopes during codex mcp login.

     +10 more show less

     • Adds forced_login_method and forced_chatgpt_workspace_id configuration options for enterprise managed-config control.
     • Adds experimental codex stdio-to-uds subcommand.
     • Adds experimental_bearer_token option to model provider definitions for custom auth.
     • Auto-compacts conversation context when it reaches ~90% of the model's limit.
     • Plan tool is now enabled by default in exec mode.
     • Local tokenizer used for accurate context truncation in unified exec.
     • Text cleared with Ctrl+C is preserved in input history and recoverable with the up arrow.
     • MCP tool names are now prefixed with mcp__ for clearer namespacing.
     • Dedicated error message for GitHub MCP servers missing a personal access tokenpersonal access tokenA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
     • When MCP auth expires, the user is prompted to log in again interactively.

     15 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !MCP tool names are now prefixed with mcp__ — any automation or configuration referencing MCP tool names by their previous unprefixed names will break.
178. rust-v0.47.0 Oct 17, 2025 · release notes

     Codex CLI gains agent overrides, OAuth MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. login, full-access warnings, macOS code signing, and auto-update banners.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.47.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.47.0

     └──▷ TRY IT
     Suppress the interactive approval prompt when running codex exec in an automated pipeline — use with caution in trusted environments only.
     copy

     $ codex exec --dangerous-auto-approval 'run the test suite and output results'

     Run a task on Codex cloud instead of locally, useful when local sandbox resources are insufficient.
     copy

     $ codex cloud exec 'refactor the auth module to use JWT'

     • Adds indentation mode for read_file to control how file content is presented.
     • Adds an agent override file to customize agent behavior without changing global config.
     • Prompts MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. login automatically when adding a streamable HTTP server that supports OAuth.
     • Adds a confirmation prompt (warning) when enabling full-access approval mode.
     • Adds an auto-update banner with approval flow, including detection of Bun installs.

     +10 more show less

     • Adds a warning about rate limits when using high-effort mode.
     • Adds dangerous auto-approval option for codex exec.
     • Adds codex cloud exec subcommand for cloud-based execution.
     • Includes parsed command data in ExecApprovalRequestEvent for richer approval metadata.
     • Adds a path field to the ParsedCommand::Read variant.
     • Passes Codex thread ID in notifier metadata for better traceability.
     • Adds a header display for task kind in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     • Adds macOS code signing and notarization to release binaries.
     • Shows a message when a stream is correctly resumed.
     • Exposes sandbox denied errors in logs for easier diagnosis.

     15 details in Everything

179. rust-v0.46.0 Oct 9, 2025 · release notes

     Codex CLI gains streamable HTTP MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, new list_dir/grep_files tools, and alias creation in v0.46.0

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.46.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.46.0

     └──▷ USE IT
     Enable the new MCP client stack and disable a specific server without removing it from config.
     toml copy

     # In ~/.config/codex/config.toml
     experimental_use_rmcp_client = true
     
     [[mcp_servers]]
     name = "my-server"
     url = "https://my-mcp-server.example.com"
     enabled = false

     • Adds list_dir built-in tool, giving the agent a native directory-listing capability.
     • Adds grep_files built-in tool for pattern-based file searching during agent sessions.
     • Supports streamable HTTP MCP servers via codex mcp add, alongside optional bearer tokenbearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. or OAuth login.
     • Adds enabled config field per MCP server entry so individual servers can be toggled without removing them.
     • Adds ability to explicitly specify a credentials store for MCP server authentication.

     +7 more show less

     • Adds auth status reporting for MCP servers.
     • Enables new MCP stack via experimental_use_rmcp_client = true in config.toml.
     • Adds UP/ENTER keybinding support in the CLI input.
     • Switches TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. code highlighting to tree-sitter for bash syntax.
     • Adds animated breathing spinner on true-color terminals.
     • Adds dynamic width for line numbers in diff views.
     • Truncates context on compact to manage long sessions.

     12 details in Everything

180. rust-v0.45.0 Oct 6, 2025 · release notes

     Codex CLI gains OAuth MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. auth, parallel tool calls, and gpt-5 default for Windows in v0.45.0

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.45.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.45.0

     └──▷ TRY IT
     Securely log in to Codex CLI using an API key from your environment without exposing it on the command line.
     copy

     $ printenv OPENAI_API_KEY | codex login --with-api-key

     • Adds experimental OAuth authentication support for MCP servers.
     • Removes the requirement to set experimental_use_rmcp_client for streamable HTTP MCP servers that don't need OAuth.
     • Adds initial parallel tool call support.
     • Defaults to gpt-5 for Windows users who have not configured a model.
     • Outputs only the final message to stdout for codex exec, enabling cleaner scripting pipelines.

     +1 more show less

     • Adds a pulsing dot loading state indicator in the UI.

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The codex login --api-key flag is replaced by --with-api-key, which reads the key from stdin; existing scripts passing the key directly via --api-key will break.
181. rust-v0.44.0 Oct 3, 2025 · release notes

     Codex CLI v0.44.0 adds cloud task management, streamable HTTP MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers, custom prompt arguments, and a refreshed TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.44.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.44.0

     └──▷ TRY IT
     Manage cloud tasks from the CLI — useful for kicking off or inspecting long-running agent jobs in the cloud.
     copy

     $ codex cloud

     • New TUI refresh: updated chat composer, bottom pane, two-stage model picker, and upgrade nudge.
     • Custom prompts now support named and positional (numeric) arguments via the /prompts: prefix.
     • Adds support for streamable HTTP MCP servers.
     • New codex cloud subcommand (very experimental) for managing cloud tasks.
     • Experimental reduction of repetitive approval prompts for read-only (safe) commands on Windows via PowerShell command safety classification.

     +12 more show less

     • Displays context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. usage ratio while tasks are running.
     • Shows Viewed Image indicator when the model processes an image.
     • Adds /review command to main command palette.
     • Fuzzy file search is now exposed via the MCP server.
     • OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. events support added.
     • Web search item wired up in the response stream.
     • Falls back to configured instruction files when AGENTS.md is not available.
     • Adds Updated at time in the session resume picker.
     • Supports CODEX_API_KEY environment variable for codex exec.
     • Separates codex mcp into distinct codex mcp-server and codex app-server subcommands.
     • TypeScript SDK scaffold introduced with support for model, sandbox mode, working directory, and skipGitRepoCheck options.
     • Writes PID in addition to port to the server info file.

     17 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The codex mcp command is split into codex mcp-server and codex app-server; any scripts or configs invoking codex mcp will break.
     • !The legacy codex exec --json format is removed; callers relying on the old JSON output format will break.
182. rust-v0.42.0 Sep 26, 2025 · release notes

     Codex CLI gains an experimental Rust SDK MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. client, a responses-API proxy, secure mode, and safer command execution checks.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.42.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.42.0

     └──▷ TRY IT
     Lock down process observability on a shared or production host before running Codex.
     copy

     $ CODEX_SECURE_MODE=1 codex <prompt>

     Inspect the current session status with the revamped, detail-rich output.
     copy

     $ /status

     • Adds experimental Rust SDK–based MCP client for model context protocol integration.
     • New responses-api-proxy component to simplify and secure response handling and proxying.
     • New CODEX_SECURE_MODE=1 environment variable to restrict process observability in sensitive environments.
     • Adds explicit codex exec events, including item.started, with improved output display on success.
     • Adds dangerous command detection checks in core and a Windows-specific safe-command check before execution.

     +5 more show less

     • Revamped /status command with clearer presentation and details.
     • Pageless session list for browsing sessions without pagination interruptions.
     • Approvals UI moved to ListSelectionView for a more consistent selection experience.
     • Improved MCP tool call styling in the terminal UI.
     • Hides status indicator during answer streaming to reduce visual noise.

     10 details in Everything

183. rust-v0.41.0 Sep 24, 2025 · release notes

     Codex CLI gains rate-limit visibility, exec output schemas, and an include-plan-tool flag in v0.41.0.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.41.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.41.0

     └──▷ TRY IT
     Enforce a structured JSON output shape when running a non-interactive exec task, useful for piping Codex output into downstream tooling.
     copy

     $ codex exec --output-schema '{"type":"object","properties":{"result":{"type":"string"}}}' 'Summarize the findings in ./report.txt'

     Run an exec task and include the plan tool output so you can inspect the model's reasoning steps alongside the result.
     copy

     $ codex exec --include-plan-tool 'Refactor the auth module in ./src/auth.rs to use async/await'

     • Shows rate-limit reset time and current usage when a rate limit is hit, so practitioners know exactly when to retry.
     • Adds --output-schema parameter to exec mode for specifying a structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. schema.
     • Adds --include-plan-tool flag to exec mode to include and display the plan tool.
     • Vendors Ripgrep (rg) directly into the npm release, eliminating @vscode/ripgrep postinstall failures.

     4 details in Everything

184. rust-v0.40.0 Sep 23, 2025 · release notes

     Codex CLI gains /review commands, usage limits in /status, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. timeouts, and defaults to gpt-5-codex with auto-compaction.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.40.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.40.0

     └──▷ USE IT
     Prevent slow MCP servers from hanging a session by setting a per-server timeout in your config.
     ini copy

     [mcp_servers.my_server]
     tool_timeout_sec = 120

     • Switches default model to gpt-5-codex.
     • Adds automatic context compactioncontext compactionCondensing an AI conversation or working history to free space in the model's context window. A summary preserves useful information, but details can be lost. for gpt-5-codex when the session hits 220k tokens.
     • Adds usage limits display to the /status command.
     • Adds /review command with options to review a specific commit, diff against a base branch, or apply custom review instructions.
     • Adds configurable MCP tool call timeout: defaults to 60s, overridable per-server via tool_timeout_sec in config.toml.

     5 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The /limits command has been removed; usage limit information has moved to /status.
185. rust-v0.39.0 Sep 18, 2025 · release notes

     OpenAI Codex CLI v0.39.0 introduces the new /review command for in-session code review.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.39.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.39.0

     └──▷ TRY IT
     Trigger an inline code review of your current session's changes without leaving the Codex TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     copy

     $ /review

     • Adds /review command for initiating code review directly within a Codex CLI session.
     • Adds hint for codex resume on TUI exit to help users continue interrupted sessions.
     • Turn notifications now include the agent's reply text for richer context.

     3 details in Everything

186. rust-v0.37.0 Sep 17, 2025 · release notes

     OpenAI Codex CLI rust-v0.37.0 adds approval/turn-end notifications, persistent search, and review mode core updates.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.37.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.37.0

     • Adds desktop notifications on approvals and turn end.
     • Persists search items across sessions.
     • Introduces review mode core updates.
     • Restyled thinking outputs for improved readability.
     • Adds a dev message upon review exit.

     5 details in Everything

187. rust-v0.36.0 Sep 15, 2025 · release notes

     Codex CLI v0.36.0 adds GPT-5-Codex, session resumption, JSON-RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. expansions, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. interface, and experimental context compactioncontext compactionCondensing an AI conversation or working history to free space in the model's context window. A summary preserves useful information, but details can be lost..

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.36.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.36.0

     └──▷ TRY IT
     Migrate from env-var auth to the new explicit login so your API key persists across sessions.
     copy

     $ codex login --api-key "sk-...your-key..."

     • Adds GPT-5-Codex model support: faster on easy tasks, harder on complex tasks, with improved code quality and better AGENTS.md steerability.
     • New codex resume command lets practitioners pick up old conversations where they left off.
     • New codex login --api-key command stores API credentials in CODEX_HOME/auth.json for explicit, persistent authentication.
     • Adds initial MCP (Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) interface and documentation for integrating external tool servers.
     • Expands JSON-RPC server with SetDefaultModel (passing None clears the default), UserInfo, and reasoning_effort field in NewConversationResponse.

     +6 more show less

     • Introduces experimental automatic context compaction to handle long sessions without manual intervention.
     • New TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. onboarding flow with animations, consistent session headers on resume, and reasoning-level display in the header.
     • Expands default sandbox permissions to cover a broader set of operations out of the box.
     • Command output is now included when a timeout is sent to the model, giving it context on what ran before the cutoff.
     • Adds Review Mode core capability for reviewing changes before applying them.
     • Workspace roots are now injected into the environment context automatically.

     11 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !OPENAI_API_KEY is no longer read from the environment; run codex login --api-key "your-api-key-here" once to store the key in CODEX_HOME/auth.json, or run codex login to use ChatGPT auth.
188. rust-v0.33.0 Sep 10, 2025 · release notes

     Codex CLI 0.33.0 adds a custom Markdown renderer, image support in messages, and keyboard word-deletion.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.33.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.33.0

     • New custom Markdown renderer replaces tui_markdown for improved in-terminal rendering.
     • Supports images in UserMessageEvent, enabling image attachments in chat messages.
     • Adds alt+delete keybinding to delete the word to the right of the cursor (delete_forward_word).
     • Sets a user-agent suffix when Codex is used as an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.
     • Introduces rollout items for staged feature delivery.

     5 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems. unification and snapshot sessions feature (introduced in #3179) has been reverted; any workflows depending on that behavior will no longer work.
189. rust-v0.32.0 Sep 10, 2025 · release notes

     Codex 0.32.0 adds Alt+Delete word deletion, ArchiveConversation API, rollout groundwork, and broader apply_patch OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. model compatibility.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.32.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.32.0

     • Adds Alt+Delete keybinding in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. to delete the next word to the right of the cursor.
     • Adds ArchiveConversation request type to the client protocol for conversation management.
     • Includes rollout_path in NewConversationResponse as initial groundwork for rollout support.
     • Expands apply_patch compatibility to OSS models from gpt-oss providers using alternative naming conventions (e.g. openai/gpt-oss-*).
     • Sets a user-agent suffix when Codex acts as an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.

     +1 more show less

     • Re-exports InitialHistory from conversation_manager and generates additional TypeScript types, including returning conversation ID with ConversationSummary.

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The config.responses_originator_header_internal_override config key is replaced by the CODEX_INTERNAL_ORIGINATOR_OVERRIDE_ENV_VAR environment variable; any existing config using the old key will no longer work.
190. rust-v0.31.0 Sep 8, 2025 · release notes

     Codex CLI 0.31.0 adds per-MCP-serverMCP-serverA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. startup timeouts, command preview highlighting, and richer session/status info.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.31.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.31.0

     └──▷ USE IT
     Set a longer startup timeout for a slow-starting MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server (e.g., on Windows) to prevent premature connection failures.
     toml copy

     # In your codex config (e.g., ~/.codex/config.toml)
     [mcp_servers.my_server]
     command = "my-mcp-server"
     startup_timeout_ms = 15000

     • Adds startup_timeout_ms config option per MCP server declaration, fixing slow-start issues especially on Windows.
     • Shows minutes and hours in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. thinking timer for long-running sessions.
     • Displays CLI version in /status output.
     • Respects model family configuration overrides from the TOML config file.
     • Moves token usage and context information to the session level in the TUI.

     +4 more show less

     • Clears non-empty prompts with Ctrl+C.
     • Highlights the Proposed Command preview in the TUI.
     • Adds a getUserAgent MCP method.
     • Cancels pending OAuth login to free up the localhost port when login is abandoned.

     9 details in Everything

191. rust-v0.30.0 Sep 5, 2025 · release notes

     Codex CLI 0.30.0 adds session resume/continue flags, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. session history, bash syntax highlighting, and Windows Full Access auto-approval.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.30.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.30.0

     └──▷ TRY IT
     Return to a previous Codex session interactively — useful for long-running tasks you stepped away from.
     copy

     $ codex --resume

     Instantly re-enter the most recent session without navigating a picker, ideal for quick follow-up prompts.
     copy

     $ codex --continue

     • Adds --resume session picker and --continue quick-resume flags to the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. for returning to previous sessions.
     • Adds MCP session resume and history listing support, replaying event messages from response items on resume.
     • Adds bash syntax highlighting in the TUI command display.
     • Enables auto-approval of patches on Windows in Full Access (DangerFullAccess) mode, eliminating approval prompts on non-sandboxed platforms.
     • Improves @ file search to include specific hidden directories such as .github and .gitlab.

     +6 more show less

     • Introduces a rollout policy mechanism for controlled feature exposure.
     • Adds a shared HTTP client for more consistent network handling.
     • Uses macOS-native key glyphs (⌥⇧⌃) for keyboard hints on Mac.
     • Pager now auto-scrolls (pins scroll to bottom) in the TUI.
     • Introduces MCP sandbox call support.
     • Prompts Codex to read AGENTS.md files for project-level agent instructions.

     11 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Project .env files are no longer loaded automatically — environment variables previously sourced from a project .env on startup must now be set in the shell or passed explicitly.
192. rust-v0.29.0 Sep 3, 2025 · release notes

     Codex CLI 0.29.0 adds Android/Termux support, Windows ARM64ARM64A 64-bit CPU architecture from ARM Holdings, used in mobile chips, Apple Silicon, and cloud servers; cyber tools target it to run natively on those platforms instead of relying on emulation. distribution, and switches to the latest search tool.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.29.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.29.0

     • Adds Android/Termux support by gating the arboard dependency on unsupported targets.
     • Includes Windows ARM64 executable in the npm package.
     • Switches to the latest search tool for @ search queries.
     • Supports cd foo && ... syntax in exec and apply_patch commands.
     • Shows a loading state in the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. when @ search results are pending.

     +2 more show less

     • Adds stable, cross-platform file locking using std::fs APIs.
     • Adds a rollout listing API and returns file heads via the extracted rollout module.

     7 details in Everything

193. rust-v0.26.0 Aug 29, 2025 · release notes

     Codex CLI gains custom slash-prompt libraries, agentic image viewing, and an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. GetConfig endpoint.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.26.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.26.0

     └──▷ TRY IT
     Create a reusable slash command so you can invoke a custom prompt mid-session without retyping it.
     copy

     $ mkdir -p ~/.codex/prompts
     echo 'Summarize the security implications of the following code:' > ~/.codex/prompts/secreview.md
     # Then inside a Codex session, type: /secreview

     • Adds custom /prompts support: drop prompt files into ~/.codex/prompts to create reusable slash commands.
     • New View Image tool lets Codex agentically load and interpret local image files during a task.
     • New MCP GetConfig endpoint exposes the fully resolved Codex configuration for inspection by MCP clients.

     3 details in Everything

194. rust-v0.25.0 Aug 27, 2025 · release notes

     Codex CLI gains remove_conversation API, mouse wheel scrolling, Alt+Ctrl+H word deletion, and context windowcontext windowThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. on task_started events.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.25.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.25.0

     └──▷ TRY IT
     Return queued messages to the composer when you change your mind mid-input — press ESC instead of losing them.
     copy

     $ # While messages are queued, press ESC to move them back to the composer for editing.

     • Adds remove_conversation API to ConversationManager for manual cleanup in long-lived servers.
     • Enables mouse wheel alternate scrolling in transcript and diff views.
     • Adds Alt+Ctrl+H shortcut to delete the previous word (parity with Alt+Backspace).
     • Includes context window information on task_started events; model may now vary per turn.
     • ESC with queued messages returns them to the composer instead of discarding them.

     +1 more show less

     • Caches transcript line wraps to keep long transcripts responsive.

     6 details in Everything

195. rust-v0.24.0 Aug 26, 2025 · release notes

     Codex CLI gains web search, transcript mode, image paste, queued messages, and long-running shell command support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.24.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.24.0

     └──▷ TRY IT
     Review the full session transcript with scrolling after a long agentic run to audit every command and output.
     copy

     $ # Inside a running codex TUI session, press Ctrl+T to open transcript mode and scroll through the history.

     Tune GPT-5 response verbosity to reduce noise in automated pipelines.
     yaml copy

     # In your codex config file:
     model_verbosity = "low"

     • Adds web search capability via the explicit --search option.
     • New transcript mode (Ctrl+T) with live-updating scrollable view of the full session.
     • Supports copy/paste and drag-and-drop of image files directly into the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. (macOS Terminal + iTerm).
     • Introduces queued messages, letting input be staged while the model is still responding.
     • Adds edit/resume conversation from any previous message in history (esc-esc).

     +7 more show less

     • Adds long-running shell command support via new exec_command and write_stdin tools.
     • New model_verbosity config option for tuning GPT-5 output verbosity via the Responses API.
     • Now reads all AGENTS.md files up the directory tree to the git root for richer project context.
     • Diff output now displayed in a pager with hunk headers for easier review.
     • Simplifies command approval UI in the TUI.
     • Hides chain-of-thoughtchain-of-thoughtIntermediate reasoning a model writes out before its final answer. Reasoning models generate it automatically and it is often billed as extra output tokens. (CoTCoTIntermediate reasoning a model writes out before its final answer. Reasoning models generate it automatically and it is often billed as extra output tokens.) output by default; surfaces headers in the status indicator instead.
     • Improves MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool cache hit rate by sorting tools deterministically.

     12 details in Everything

196. rust-v0.23.0 Aug 20, 2025 · release notes

     Codex CLI gains /mcp, /approvals, and /model slash commands plus runtime reasoning effort control and ChatGPT auth auto-refresh.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.23.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.23.0

     └──▷ TRY IT
     Switch model and tune reasoning effort mid-session without restarting — useful when a task shifts from quick edits to deep reasoning.
     copy

     $ /model

     Lock down or loosen what Codex is allowed to do automatically during a sensitive refactor.
     copy

     $ /approvals

     List or interact with connected MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers directly from the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
     copy

     $ /mcp

     • Adds /mcp slash command in the TUI to inspect and interact with MCP servers.
     • Adds /approvals slash command to control approval/permission settings at runtime.
     • Adds /model slash command to change the active model and reasoning effort without restarting.
     • Adds minimal reasoning effort level for GPT-5 models.
     • Shows login options when not signed in with ChatGPT, improving auth discovery.

     +7 more show less

     • Auto-refreshes ChatGPT auth tokens to maintain uninterrupted sessions.
     • Shows a progress indicator for the /diff command.
     • Adds a /diff command for diffing session changes.
     • Releases zip-archived binaries for easier distribution.
     • Adds DotSlash entry for Windows x86_64, enabling Windows distribution support.
     • Adds Ctrl+H as an additional backspace keyboard shortcut in the TUI.
     • Supports Ghostty terminal Ctrl-b/Ctrl-f word-navigation fallback in the TUI.

     12 details in Everything

197. rust-v0.22.0 Aug 15, 2025 · release notes

     Codex CLI gains markdown streaming, improved diff UI, Ctrl-Z TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. suspend, and a Rust-native login server.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.22.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.22.0

     └──▷ TRY IT
     Suspend the Codex TUI mid-session to drop to the shell, then resume with fg.
     copy

     $ # While Codex TUI is running, press:
     ctrl-z
     # To resume:
     fg

     • Supports markdown streaming in the TUI output.
     • Improved diff display readability when using a light terminal background.
     • Adds ctrl-z keybinding to suspend the TUI.
     • Login server rewritten in Rust, replacing the Python implementation.

     4 details in Everything

198. rust-v0.21.0 Aug 12, 2025 · release notes

     Codex CLI v0.21.0 adds diff previews for apply_patch, output truncation notices, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. JSON schema sanitization.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.21.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.21.0

     • Shows a diff preview when apply_patch is about to modify files, letting you inspect changes before they land.
     • Includes an output truncation message in tool call results so the model knows when it received incomplete command output.
     • Adds JSON schema sanitization for MCP tools to ensure compatibility with internal JsonSchema enums.
     • Sends a prompt cache key to improve token efficiency through better caching.
     • Splits multiline commands in the UI for improved readability.

     +2 more show less

     • Parses and formats exec commands more clearly in the UI.
     • Shows a feedback message after the /compact command completes.

     7 details in Everything

199. rust-v0.15.0 Aug 7, 2025 · release notes

     Codex CLI v0.15.0: gpt-5 default, new approval mode, and trust-based onboarding flow

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.15.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.15.0

     └──▷ TRY IT
     Let the model self-select when to ask for approval, avoiding constant interruptions without going fully autonomous.
     copy

     $ codex --ask-for-approval on-request 'refactor the auth module to use JWT'

     Run Codex in a trusted Git repo with the recommended onboarding defaults: workspace-scoped writes and model-driven approval prompts.
     copy

     $ codex --sandbox workspace-write --ask-for-approval on-request 'add unit tests for src/api.rs'

     • Sets gpt-5 as the default model for all sessions.
     • Adds --ask-for-approval on-request mode, letting the model decide when to prompt for user approval — a middle ground between on-failure and never.
     • Introduces a new onboarding flow that auto-configures --sandbox workspace-write and --ask-for-approval on-request when a folder is marked as trusted, optimized for Git repo workflows.

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The default model is changed to gpt-5; any workflow that relied on the previous default model will now use gpt-5 instead.
200. rust-v0.11.0 Aug 2, 2025 · release notes

     Codex CLI gets native terminal scrolling, /compact command, experimental planning tool, and version-update notifications.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.11.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.11.0

     └──▷ TRY IT
     Compact a long conversation mid-session to reduce context lengthcontext lengthThe maximum amount of text, counted in tokens, a model can take in and produce in one request. Everything the model knows about the task has to fit inside it. and stay within token limits.
     copy

     $ /compact

     • New terminal UX appends output to the end of the terminal instead of running fullscreen, enabling native scrollback and copy/paste.
     • Adds the /compact command for compacting conversation context.
     • Introduces an experimental planning tool.
     • CLI now checks for newer versions and notifies you when an update is available.

     4 details in Everything

201. rust-v0.10.0 Jul 24, 2025 · release notes

     Codex CLI v0.10.0 expands trusted commands by default and adds Git state capture to session logs.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.10.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.10.0

     • Expands the set of commands trusted by default, reducing approval prompts for common operations.
     • Records Git state (branch, commit, etc.) in the .jsonl.jsonlA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. session log for better auditability of AI-driven changes.

     2 details in Everything

202. rust-v0.8.0 Jul 19, 2025 · release notes

     Codex CLI v0.8.0 adds response streaming in TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. and codex exec, plus a --json flag for JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. output.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.8.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.8.0

     └──▷ TRY IT
     Capture structured, machine-readable output from a Codex exec run for piping into downstream tooling or logging.
     copy

     $ codex exec --json 'summarize the security findings in REPORT.md'

     • Streams model responses in real time in the TUI and when using codex exec.
     • Adds --json flag to codex exec to print output as JSONL to stdout.
     • Reorganizes ~/.codex/sessions into YYYY/MM/DD subfolders for easier navigation and better filesystem performance.
     • ctrl-d now only exits the TUI when the composer is empty, preventing accidental exits mid-session.

     4 details in Everything

203. rust-v0.6.0 Jul 12, 2025 · release notes

     OpenAI Codex CLI v0.6.0 adds paste summarization and an experimental codex apply command for Codex Web.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.6.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.6.0

     └──▷ TRY IT
     Interact with Codex Web from the terminal without leaving your workflow.
     copy

     $ codex apply

     • New codex apply command (experimental) lets you interact with Codex Web directly from the CLI.
     • Adds paste summarization for large pastes, automatically condensing oversized clipboard input.

     2 details in Everything

204. rust-v0.5.0 Jul 10, 2025 · release notes

     Codex CLI rust-v0.5.0 adds reasoning-summary config control and Android platform support via npm.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.5.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.5.0

     └──▷ USE IT
     Enable reasoning summaries for a model that supports them by setting the new config flag.
     yaml copy

     # In your Codex config file:
     model_supports_reasoning_summaries: true

     • New model_supports_reasoning_summaries config option to control reasoning summary behavior per model.
     • Running Codex installed via npm on Android (process.platform === "android") now routes to the Rust CLI.

     2 details in Everything

205. rust-v0.4.0 Jul 9, 2025 · release notes

     Codex CLI v0.4.0 adds shell completion generation, per-profile reasoning controls, and custom base URL support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.4.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.4.0

     └──▷ TRY IT
     Generate shell completions for your shell (e.g. to install via Homebrew or manually source them).
     copy

     $ codex completion bash

     • Supports OPENAI_BASE_URL environment variable for the built-in openai model provider, enabling use of compatible API endpoints.
     • Adds model_reasoning_effort and model_reasoning_summary fields to profile definitions for fine-grained reasoning control.
     • New completion subcommand enables shell tab-completion generation for package managers like Homebrew.

     3 details in Everything

206. rust-v0.3.0 Jul 8, 2025 · release notes

     Codex CLI gains a --sandbox flag and custom HTTP header support for model provider requests.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch rust-v0.3.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.3.0

     └──▷ TRY IT
     Run Codex with an explicit sandbox policy to control what the agent is allowed to do on your machine.
     copy

     $ codex --sandbox <sandbox-policy> "refactor the auth module"

     • Adds --sandbox flag to control sandbox behavior from the command line.
     • Enables configuration of custom HTTP headers when making requests to model providers.

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The config.toml sandbox-related options have breaking changes — existing sandbox configuration will need to be updated after upgrading.