OpenAI Codex CLI — The Cyber Toolchain

OpenAI Codex CLI rust-v0.148.0-alpha.21 (Prerelease)

Mon, 17 Aug 2026 19:27:11 GMT

Codex CLI gains endpoint-protection detection in `codex doctor`, improved network diagnostics, and sandbox-isolated editor buffers. • Improves `codex doctor` network diagnostics with proxy-environment details, macOS system-proxy configuration reporting (automatic/PAC, manual, direct, unavailable), and detection of proxy authentication challenges (HTTP 407). • Adds `CodexOptions.configOverrides` to the TypeScript SDK for passing ordered `--config key=value` arguments to the Codex CLI unchanged, applied after structured `config` values. • Adds working-directory commands to the TUI. • Honors per-environment shell variable policies and enforces environment-specific command policies. • Adds experimental app-server project APIs. • Adds a configurable skill catalog token budget. • Includes images in Guardian v2 transcripts and sources Guardian v2 defaults from the model catalog. • Compacts successful command activity in the TUI for a cleaner history view. • Enables editing queued messages with Vim history-up in the TUI composer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.20 (Prerelease)

Sun, 16 Aug 2026 00:21:59 GMT

Codex CLI alpha adds disk space diagnostics to `codex doctor`, MCP tool hook handlers, and Guardian-routed permission requests. • Adds storage diagnostics to `codex doctor`, checking free disk space for both `CODEX_HOME` and the current worktree, with a warning threshold at 5 GiB and a failure threshold at 1 GiB. • Adds Windows Dev Drive check to `codex doctor` on Windows targets. • Supports pending environment attachment configuration so threads start without blocking while ensuring turns do not use an attachment prematurely; adds a `Failed` configuration state and `environment_failed` callback for per-thread failure and recovery. • Propagates W3C `traceparent` and `tracestate` trace context through exec-server relay frames, including fragmented encrypted Noise requests. • Scopes TUI app directory state to the active context. • Uses paginated history for persistent exec threads. • Shows resume and fork status during TUI startup. • Adds a health endpoint to the code-mode gRPC listener. • Forwards workload identity context during token exchange. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.18 (Prerelease)

Fri, 14 Aug 2026 21:58:41 GMT

Codex CLI alpha.18 makes Guardian v2 risk classification configurable and enables unified exec by default on Windows. • Adds rich configuration for `features.guardianv2` — now accepts a boolean toggle or an object specifying classifier instructions, review threshold, reasoning effort, action and instruction token limits, transcript source inclusion, per-entry and total token budgets, and the number of recent non-user entries. • Enables the `unified_exec` feature by default on all platforms including Windows, exposing `exec_command` and `write_stdin` on Windows instead of `shell_command`. • Adds an override to skip project configuration at startup. • Removes the gRPC code-mode open session limit, allowing the host to register more than `MAX_IN_FLIGHT_REQUESTS` open sessions simultaneously. • Adds MCP protocol discovery metrics — records a counter and duration for MCP client protocol discovery, tagged with `legacy` or `auto` mode and classified as `modern`, `legacy`, or `failure` outcomes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.16 (Prerelease)

Fri, 14 Aug 2026 17:18:40 GMT

Codex CLI alpha.16 adds Guardian V2 risk scoring, parallel tool calls, strict MCP auto-review, and smarter plugin app discovery. • Introduces Guardian V2 risk scoring: records risk scores on threads, initializes per-thread samplers, preserves transcript boundaries, and stores scores as snapshots — high-risk actions now require automatic review. • Enforces strict auto-review for MCP tool calls even when the approval policy, tool annotations, or a remembered session decision would otherwise skip review. • Adds `agent_name` to Responses API turn metadata, falling back to `/root` when no canonical agent path is set, with the field reserved from client metadata overrides. • Reuses active, uncancelled pending MCP connections during reconciliation when identity, catalog limit, and protocol mode still match, avoiding redundant startups. • Instructs the model to use `tool_search` to discover relevant tools within a selected plugin's apps before falling back to unrelated or built-in tools. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.15 (Prerelease)

Fri, 14 Aug 2026 03:00:20 GMT

Codex CLI adds an Amazon Bedrock Runtime provider and skill-level model annotation support in this alpha release. • Adds the built-in `amazon-bedrock-runtime` provider for regional `bedrock-runtime` OpenAI-compatible endpoints, with SigV4 auth, per-provider AWS profile, region, and transport overrides, global and US cross-region GPT-5.6 model variants, and web search disabled (unsupported on Bedrock). • Adds an optional `model` field to skill frontmatter metadata (e.g., `model: luna`), allowing skills to declare a preferred model; unrecognized values are ignored without blocking the rest of the skill from loading. • Adds `SkillModelDelegationInstruction` so skills that request Luna while running on Sol or Terra are routed to Luna when it is available in the current provider namespace, with bounded and validated model identifiers and instruction size limits. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.14 (Prerelease)

Fri, 14 Aug 2026 01:37:45 GMT

Codex CLI alpha.14 adds per-server MCP OAuth callback ports, running-task exit choices, and experimental thread queue APIs. • Adds `oauth.callback_port` to MCP server configuration so each server can use its own OAuth callback port instead of the global `mcp_oauth_callback_port`; also accepts `oauth.callbackPort` from plugin MCP declarations and skill dependency metadata. • Adds running-task exit choices to local daemon sessions: pressing Ctrl-C while a task is running now shows a menu to cancel the task and stay in Codex, exit Codex while leaving the task running, or stop the task and exit Codex. • Adds experimental thread queue APIs to the app server. • Preserves client-authored developer messages across context compaction when `retain_client_developer_messages` is enabled. • Provides Guardian V2 with full tool action context — the original `ToolPayload` including tool name and arguments plus a bounded conversation transcript — for richer risk classification. • Wraps injected current-time reminders in `` tags in model context. • Refreshes current-time reminders for full-history subagents by excluding parent reminders and injecting a single fresh reminder in the child request. • Adds structured telemetry for response retries. • Includes `node_repl` images in Guardian review evidence. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.12 (Prerelease)

Thu, 13 Aug 2026 06:43:33 GMT

Codex CLI alpha.12 routes network access through the approval pipeline, adds interrupted turn recovery, and hardens inline visualization sandbox isolation. • Adds `RecoverTurnRequest` and `CodexThread::recover_turn_if_idle` to resume an interrupted regular turn with its existing turn ID and updated thread settings, including Plan-mode recovery without injecting an empty user message. • Routes blocked network requests through the shared approval pipeline so permission hooks, automatic review, and user review all use the common approval flow — including for background terminals started by an earlier turn. • Materializes inline visualization viewer documents in a dedicated cache under `CODEX_HOME`, keyed by source and artifact thread IDs, instead of alongside visualization artifacts, preventing sandboxed sessions from modifying viewer documents before they open in a browser. • Creates visualization links only when the active filesystem policy cannot write to the viewer cache, disabling links for full-disk-write sessions and applying policy consistently when loading transcript history. • Records the final applied network decision in tool telemetry without exposing the destination or assigning an approval source. • Rejects turn recovery while another turn is active without applying settings or queuing input. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.11 (Prerelease)

Thu, 13 Aug 2026 04:11:00 GMT

Codex CLI alpha.11 adds thread usage display in `/status`, dynamic HTTP headers for MCP servers, and workload identity integration. • Adds `thread-credits` and `estimated-thread-cost` as configurable terminal title items for monitoring per-thread quota consumption. • Shows estimated thread usage in the `/status` command and TUI status surfaces. • Adds dynamic HTTP header helpers for MCP servers, enabling per-request header customization. • Integrates workload identity with Codex authentication for enterprise environments. • Supports gRPC code-mode hosts in the app server alongside existing WebSocket-based hosts. • Reads model ETags from WebSocket metadata events for more efficient model version tracking. • Adds per-thread usage queries to the backend client. • Stamps conversation history items with creation times. • Enforces non-interactive approval policy for Codex delegate sessions. • Adds durable reverts for paginated threads. • Detects implicit skill invocations from PowerShell reads. • Adds manifest-defined metrics and bounded measurement analytics for trusted plugin scripts and shell commands. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.6.6 (Prerelease)

Mon, 10 Aug 2026 21:52:42 GMT

Codex CLI alpha.6.6 adds Amazon Bedrock web search support, Agent Plugin runtime boundaries, and expanded MCP namespace description limits. • Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary when the new limit is exceeded. • Enables hosted web search for Amazon Bedrock, resolving unsupported live and indexed modes to cached search and disabling the tool when cached search is prohibited by managed requirements. • Gives `externalAgentConfig/detect` its own global serialization queue so configuration reads, writes, and external agent imports remain responsive while detection runs. • Bounds Cursor project path resolution to 128 probes using common filename separators instead of recursively walking the directory tree, rejecting ambiguous matches and unsafe encoded components. • Skips symbolic links and other non-regular entries when installing a plugin into the store instead of rejecting the installation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.6 (Prerelease)

Mon, 10 Aug 2026 10:17:08 GMT

Codex CLI adds dual-WebSocket code-mode transport, paginated TUI history, cached web search for Amazon Bedrock, and MCP conformance regression gates. • Adds `--psp` flag to `app-server` to enable process-scoped PSP routing for first-party ChatGPT requests. • Adds a dual-WebSocket transport for code mode, enabling a new host-transport path for code-mode sessions. • Enables cached web search for Amazon Bedrock sessions. • Enables remote compaction for Amazon Bedrock. • Adds paginated transcript history loading in the TUI, unlocking browsing of long session histories. • Adds durable per-thread user submission queues for more reliable turn handling. • Adds tool registry collision policy configuration to control how name conflicts are resolved. • Supports deferred loading for freeform tools and deferred custom tools in tool search. • Supports custom tools in namespaces. • Supports `includeTurns` reads for paginated threads. • Supports leaf models in multi-agent v2. • Adds opt-in concurrent exec-server request dispatch. • Supports configured ChatGPT cookies in HTTP clients. • Prompts before trusting local project directories, and automatically trusts undecided local projects after confirmation. • Rejects implicitly discovered bare Git repositories to reduce unintended repo scope. • Redacts secrets (including bearer tokens) from app-server command execution items. • Adds host skill root loading and moves skill policy resolution into the `codex-skills` crate. • Links Codex attribution in pull request bodies. • Allows disabling the built-in image viewer. • Makes token budget context identity configurable. • Negotiates MCP extensions per app-server session. • Preserves complete MCP namespace descriptions. • Handles late MCP startup results after lag timeout. • Times out stalled code-mode host requests. • Identifies agents by name in token budget context. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.5 (Prerelease)

Sat, 08 Aug 2026 02:26:13 GMT

Codex CLI adds `migrate-rollouts` subcommand, Markdown conversation export, session forking in `codex exec`, MCP event subscriptions, and a Guardian circuit-breaker for cyber models. • Adds `migrate-rollouts` subcommand to inspect or migrate legacy local sessions to paginated thread history. • Adds Markdown conversation export to the TUI. • Adds session forking to `codex exec`. • Adds MCP event discovery and subscriptions. • Adds session archiving and restore to the resume picker. • Adds a Guardian circuit-breaker policy for `cyber`-specialty models, interrupting their turns after the first Guardian denial. • Adds a unified image budget across agents. • Exposes multi-agent versions in `model/list`. • Exposes app-server diagnostics through the experimental API. • Adds process diagnostics snapshots. • Includes call IDs in MCP requests. • Configures the default code-mode exec yield timeout. • Keeps response streams alive through connection failures. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.2 (Prerelease)

Fri, 07 Aug 2026 09:23:15 GMT

Codex CLI gains session forking, Markdown conversation export, session archiving, MCP tool hook configs, and agent identity endpoint overrides. • Adds `fork` subcommand to `codex exec` to branch a previous session into a new one, accepting a `SESSION_ID`, optional `--image`/`-i` file attachments, and an optional `PROMPT` (or `-` to read from stdin). • Adds `/export` command in the TUI to export the full conversation history as structured Markdown, with clipboard and file destinations, default filename prompting, and explicit path argument support. • Honors `CODEX_AGENT_IDENTITY_AUTHAPI_BASE_URL` and `CODEX_AGENT_IDENTITY_JWKS_BASE_URL` environment variables to override agent identity registration and verification endpoints. • Adds session archiving to the resume picker in the TUI, allowing sessions to be archived and restored. • Recognizes `mcp_tool` hook handler configurations (with server, tool, JSON input, and optional timeout and status message) and returns them from `configRequirements/read`. • Clamps `wait_agent` timeout requests below `min_wait_timeout_ms` to the configured minimum instead of rejecting them, and reports the adjustment in the tool output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.148.0-alpha.1 (Prerelease)

Fri, 07 Aug 2026 03:20:28 GMT

Adds `migrate-rollouts` subcommand to inspect and migrate legacy local sessions to paginated thread history. • Adds `migrate-rollouts` subcommand with `--apply`, `--thread`, `--max-mib-per-second`, `--json`, and `--verbose` flags to inspect or migrate legacy local sessions to paginated thread history. • Adds a Guardian circuit-breaker policy that interrupts cyber model turns after the first Guardian denial, while retaining existing denial thresholds for all other models. • Supports fetching remote installed plugins across all scopes. • Recovers MCP servers automatically after OAuth reauthentication. • Starts cached MCP servers lazily for subagents, reducing startup overhead. • Supports content references for inline visualizations. • Mounts a minimal `/dev` in full-filesystem Bubblewrap sandboxes. • Tracks context windows per agent. • Sends model routing hints to the Codex backend. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0

Fri, 07 Aug 2026 01:41:49 GMT

Codex CLI v0.147.0 adds `--approve-for-me`, portable Agent Plugins, MCP 2026-07-28 protocol support, and Bedrock cached web search. • Adds `--approve-for-me` CLI flag to `codex exec` to enable automatically reviewed approvals without manual confirmation prompts. • Supports the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. • Installs portable Agent Plugins and searches across local, personal, workspace, and remote plugin catalogs. • Enables cached web search and remote conversation compaction for Amazon Bedrock. • Organizes conversations into persistent, manually ordered sections and supports incremental browsing of long transcripts. • Imports Cursor-managed skills and synchronizes changes to imported Claude and Cursor conversations without creating duplicates. Breaking changes: • The deprecated `--full-auto` flag for `codex exec` has been removed; use `--sandbox workspace-write` instead. • Redundant Linux bundle archives are no longer published; use the standard `codex-package-` release archives instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.13 (Prerelease)

Thu, 06 Aug 2026 01:12:59 GMT

Adds `thread/section/move` API, `section_position` sorting to `thread/list`, and a hidden `--psp` flag for PSP routing in the app-server. • Adds hidden `--psp` flag to the app-server to enable process-only PSP routing for first-party ChatGPT requests. • Loads cloud-managed servers in MCP CLI commands. • Exposes MCP read-only hints in tool call items. • Distinguishes unknown MCP authentication status. • Supports Enterprise automation account plans. • Enables skills in the MCP server. • Restricts hosted MCP credentials to local environments and isolates MCP OAuth credentials by environment. • Restricts `shell_command` to a single local environment. • Allows naming forked chats from the TUI. • Denies network access when an allow amendment fails. • Records attempted tool calls in response metadata. • Records normalized sandbox violation events. • Detects connectors used in external agent sessions. Breaking changes: • Legacy Linux bundle archives are no longer published. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.12 (Prerelease)

Wed, 05 Aug 2026 20:38:23 GMT

Codex CLI adds image resize notices, local auth policy enforcement, and symlinked skill path preservation. • Adds the disabled-by-default `image_resize_notice` feature: when enabled, appends a developer message after resized images in user messages or tool outputs, reporting each image's original and prepared dimensions. • Enforces managed authentication requirements locally via a `requirements.toml` allowlist for login methods and ChatGPT workspaces, combining managed and existing workspace restrictions by intersection and failing closed when no usable login method remains. • Preserves discovery paths for symlinked skills in the skill catalog, allowing either the discovery path or canonical path for structured selections and linked skill mentions. • Makes Windows path URI comparisons ASCII-case-insensitive for drive and UNC paths while preserving case-sensitive POSIX behavior, including `starts_with` and `relative_path_from` operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.6.5 (Prerelease)

Wed, 05 Aug 2026 19:45:48 GMT

Codex CLI alpha.6.5 adds Amazon Bedrock cached web search, stricter Agent Plugin runtime boundaries, and expanded MCP namespace description limits. • Skips symbolic links and other non-file, non-directory entries when installing plugins into the store instead of rejecting the installation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.11 (Prerelease)

Wed, 05 Aug 2026 17:03:09 GMT

Codex CLI alpha.11 adds per-session code-mode execution limits and switches API-key Guardian reviews to gpt-5.6-luna. • Adds `create_session_with_limits` and session-scoped cell execution limits via `CodeModeSessionCellExecutionLimits`, clamping execute and wait yield times to `max_yield_time_ms` without terminating the running cell. • Switches Guardian approval reviews authenticated with an API key to use `gpt-5.6-luna`, while retaining `codex-auto-review` for ChatGPT authentication; falls back to the bundled Guardian policy when the selected model has no catalog-provided review policy. • Caches `McpBinding` per published MCP runtime once the tool catalog revision is stable, reusing it across sampling steps and rebuilding only after a runtime publish or catalog change. • Bounds interactive TUI telemetry shutdown to a 500 ms budget via `OtelProvider::shutdown_with_timeout`, preventing a stalled OTLP exporter from blocking indefinitely on exit. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.10 (Prerelease)

Wed, 05 Aug 2026 10:53:31 GMT

Codex CLI alpha.10 adds concurrent exec-server dispatch, safer TUI defaults for cyber models, and expanded MCP namespace description limits. • Adds `--concurrent-requests` flag (alias `concurrent-requests`, default `1`) to the exec-server subcommand to enable opt-in concurrent request dispatch across connections. • Adds `--psp` flag (global, hidden) to the main CLI and app-server for process-scoped PSP routing of first-party ChatGPT requests. • Adds safer TUI defaults for cyber models. • Enables cached web search support for Amazon Bedrock. • Enables remote compaction for Amazon Bedrock. • Adds tool registry collision policy configuration with strict tool name collision errors enforced. • Prompts before trusting local project directories; rejects implicitly discovered bare Git repositories. • Adds durable per-thread user submission queues. • Paginates transcript history in the TUI for large threads. • Allows disabling the built-in image viewer. • Redacts secrets (including bearer tokens) from app-server command execution items in display output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.6.4 (Prerelease)

Tue, 04 Aug 2026 21:02:39 GMT

Codex CLI now enables cached web search for Amazon Bedrock, falling back from unsupported live/indexed modes. • Enables hosted text web search for Amazon Bedrock, automatically resolving unsupported live and indexed web-access modes to cached search (or disabling the tool when cached search is prohibited by managed requirements). • Normalizes built-in and configured Bedrock model catalogs to text-only web search payloads, removing the unsupported `search_content_types` field that Bedrock rejects. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.6.3 (Prerelease)

Tue, 04 Aug 2026 19:36:48 GMT

MCP namespace tool-spec description limit raised from 1,000 bytes to 512 KiB, preserving complete server instructions. • Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary when the new limit is exceeded — preventing tools from being hidden due to truncated server instructions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.3 (Prerelease)

Fri, 31 Jul 2026 15:36:34 GMT

Codex CLI alpha.3 adds parallel MCP tool execution, cloud-managed MCP server loading, forked chat naming, and subagent direct-input reporting. • Allows unrelated tools to run concurrently while MCP servers are still starting up, eliminating gate-blocking delays. • Loads cloud-managed MCP servers in MCP CLI commands (`codex mcp list`, `codex mcp get`). • Enables naming forked chats directly from the TUI. • Exposes MCP read-only hints in tool call items. • Denies network access when an allow amendment fails, tightening sandbox network policy. • Supports Enterprise automation account plans. • Distinguishes unknown MCP authentication status for clearer diagnostics. Breaking changes: • The `--full-auto` flag is removed from `codex exec`; legacy handling has been dropped. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.2 (Prerelease)

Thu, 30 Jul 2026 01:04:28 GMT

Codex CLI adds MCP 2026 protocol support, cloud-managed sandbox profiles, persisted thread sections, and model-owned token budget defaults. • Adds MCP 2026-07-28 discovery support and completes MCP 2026 client support, enabling use of the latest Model Context Protocol spec. • Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing startup latency for tool-heavy workflows. • Routes MCP OAuth requests through configured HTTP clients, enabling proxy-aware MCP authentication. • Loads cloud-managed profiles for `codex sandbox`, allowing centrally managed sandbox configurations. • Adds persisted sections for organizing threads in session history. • Supports model-owned token budget defaults, letting model catalog entries supply default token-budget settings when none are explicitly configured. • Adds configurable developer instructions for v2 subagents. • Enables network policy callbacks for remote exec environments. • Routes WebRTC sideband joins to the Realtime API. • Supports self-serve Business ProLite accounts. • Supports streaming bodies in route-aware HTTP requests. • Supports plaintext collaboration tool messages. • Loads thread titles concurrently during session startup, improving startup responsiveness. • Tags turn reports with the selected turn's model and effort level. • Terminates Windows non-TTY processes on interrupt for cleaner process lifecycle management. • Normalizes Windows namespace paths in path URIs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.2 (Prerelease)

Thu, 30 Jul 2026 01:04:28 GMT

OpenAI Codex CLI rust-v0.147.0-alpha.1 (Prerelease)

Wed, 29 Jul 2026 09:13:56 GMT

Codex CLI exec servers gain stdin-close exit control, plugin eligibility metadata, and MCP legacy-server fallback improvements. • Adds `--exit-on-stdin-close` flag (and `CODEX_EXEC_SERVER_EXIT_ON_STDIN_CLOSE` env var) to remote exec servers, enabling graceful shutdown with telemetry flush when the parent process closes stdin. • Exposes plugin eligibility metadata (`disabledReason`, `eligiblePlanTypes`) in app-server plugin summaries, surfacing plan-gating and admin-disabled status. • Adds `parent_turn_id` tracking across nested Codex agent spawns, delegated sessions, and follow-up tasks for improved request provenance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.147.0-alpha.1 (Prerelease)

Wed, 29 Jul 2026 09:13:56 GMT

OpenAI Codex CLI rust-v0.146.0

Wed, 29 Jul 2026 01:42:51 GMT

Codex CLI v0.146.0 adds named/pinned sessions, thread forking, Agent Plugins, WebSocket Code Mode, and standalone web search for custom providers. • Name new sessions with `/new` or `/clear`, pin important threads, and switch between side conversations without closing them. • Fork threads with paginated history, including temporary forks that do not appear in thread listings. • Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. • Connect the app-server to remote Code Mode hosts over WebSocket. • Enable standalone web search for compatible custom model providers. • Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0

Wed, 29 Jul 2026 01:42:51 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.14 (Prerelease)

Tue, 28 Jul 2026 04:28:19 GMT

Codex CLI alpha.14 adds cloud-managed profiles for `codex sandbox`, network policy callbacks for remote exec, and configurable developer instructions for v2 subagents. • Loads cloud-managed profiles for `codex sandbox`, enabling permission profiles and managed requirements to be sourced from cloud config bundles. • Adds configurable developer instructions for v2 subagents, allowing per-subagent instruction customization in multi-agent workflows. • Routes curated plugins by authentication mode, so plugin recommendations are matched to the active auth context. • Prepares MCP and plugin recommendations concurrently, reducing latency when loading tool suggestions. • Terminates Windows non-TTY processes on interrupt, routing Ctrl-C through the termination callback for pipe-backed processes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.14 (Prerelease)

Tue, 28 Jul 2026 04:28:19 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.13 (Prerelease)

Mon, 27 Jul 2026 16:03:21 GMT

Codex CLI alpha.13 adds cached MCP tool exposure before server startup and model-owned token budget defaults. • Exposes cached MCP tools to inference before the MCP server finishes initializing, reducing latency at session start. • Supports model-owned token budget defaults from the model catalog, applied automatically when no explicit token-budget configuration is set. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.13 (Prerelease)

Mon, 27 Jul 2026 16:03:21 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.10 (Prerelease)

Sat, 25 Jul 2026 02:18:34 GMT

Adds configurable code-mode host fallback control and code-mode tool names in Responses Lite metadata. • Adds `disable_in_process_fallback` option to `features.code_mode_host` config table, letting operators prevent silent fallback to embedded V8 when the standalone code-mode host fails to start. • Adds `code_mode_tool_names` field to Responses Lite turn metadata, exposing normalized code-mode identifier-to-ToolName mappings for each turn. • Scopes pending network approvals to a turn and execution, coalesces duplicate requests within one execution, and assigns unique per-execution identifiers to user approval requests and permission hooks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.10 (Prerelease)

Sat, 25 Jul 2026 02:18:34 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.8 (Prerelease)

Fri, 24 Jul 2026 23:23:37 GMT

Codex CLI adds ent26 enterprise plan support, MCP proxy-aware auth discovery, ephemeral thread forks, and workspace plugin publish capability. • Supports the `ent26` enterprise plan tier, including authentication, rate-limit payloads, cloud-config eligibility, and usage-limit guidance. • Routes MCP OAuth discovery and authentication status through each server's configured runtime HTTP client, enabling reliable auth for MCP servers behind proxies. • Supports ephemeral forks of paginated threads via `thread/fork` with `excludeTurns: true`, preserving selected history and fork preview without creating a persistent rollout. • Exposes `canPublishToWorkspace` capability metadata in plugin share contexts and `plugin/share/save` responses so clients can offer workspace-directory publishing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.8 (Prerelease)

Fri, 24 Jul 2026 23:23:37 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.7 (Prerelease)

Fri, 24 Jul 2026 18:24:41 GMT

Codex CLI adds Agent Plugins manifest support, background MCP prewarming, and paginated thread forks. • Adds support for Agent Plugins 1.0 manifests: recognizes root `plugin.json` files and maps their metadata, `skills/`, and `mcp.json` into Codex plugin manifests. • Applies Codex-specific apps, hooks, and interface settings from the inline `com.openai` extension in Agent Plugins manifests, with `.codex-plugin/plugin.json` as a fallback overlay. • Adds background prewarming of MCP runtime updates so model steps are less likely to stall waiting for MCP rebuilds after config or auth changes. • Refreshes MCP runtimes automatically when session authentication changes (auth mode, account details, or token). • Reconnects all configured MCP servers when an explicit refresh is triggered, rather than reusing existing connections. • Exposes executor skills through skill tools and enables resource reads for explicit executor skills. • Supports paginated thread forks. • Preserves output from hooks that exit before reading stdin (fast-exiting hooks no longer lose stdout). • Allows hosts to customize the model-visible `wait_for_environment` tool and `environment_id` descriptions via `WaitForEnvironmentToolConfig`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.7 (Prerelease)

Fri, 24 Jul 2026 18:24:41 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.6 (Prerelease)

Fri, 24 Jul 2026 05:31:18 GMT

Codex CLI alpha.6 adds remote code-mode host support, nonblocking TUI interrupts, and skill-catalog context warnings. • Adds `--code-mode-host` flag to the app-server to connect to a remote code-mode host over WebSocket (`wss://`). • Supports WebSocket transport for the code-mode host in the app-server, enabling remote code-mode sessions. • Exposes remote skill icon URLs through the app server. • Exposes Browser Use requirements through the app server. • Routes exec-server HTTP and WebSocket traffic through the configured proxy policy. • Adds trusted plugin script attribution, tracking which plugin scripts originated command executions. • Registers the Guardian V2 feature flag. • Allows disabling the `update_plan` tool via configuration. • Preserves refreshed Apps tools across MCP runtime updates. • Keeps side conversations open when switching threads. • Supports incremental replay of updated thread items. • Enforces writer ownership for thread archive and deletion operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.6 (Prerelease)

Fri, 24 Jul 2026 05:31:18 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.3.1 (Prerelease)

Thu, 23 Jul 2026 23:26:55 GMT

Custom model providers can now opt into standalone web search via a new `supports_standalone_web_search` setting. • Adds `supports_standalone_web_search` model-provider setting that lets custom Responses API providers opt into the standalone `web.run` web search tool. • Routes standalone web search requests through the custom provider's own endpoint and authentication when the setting is enabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.3.1 (Prerelease)

Thu, 23 Jul 2026 23:26:55 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.5 (Prerelease)

Thu, 23 Jul 2026 20:02:57 GMT

Codex CLI alpha.5 adds thread pinning, MCP tool prefix omission, custom provider web search, and MCP connection reuse. • Adds `isPinned` field to thread responses with pin/unpin support via `thread/metadata/update` and an `isPinned` filter on `thread/list`, enabling persistent thread pinning with cursor-based pagination. • Allows omitting MCP tool name prefixes on a per-server basis, reducing verbosity when working with trusted MCP servers. • Allows custom providers to opt into standalone web search, extending web-search capability beyond first-party models. • Reuses MCP connections across runtime refreshes and replaces closed connections during reconciliation, reducing reconnection overhead. • Allows disabling the multi-agent wait tool, giving operators control over multi-agent coordination primitives. • Infers the bundled Claude Code plugin marketplace, enabling automatic plugin discovery for Claude Code users. • Uses the API plugin marketplace for Amazon Bedrock, broadening plugin availability for Bedrock-backed deployments. • Sets a default User-Agent header for MCP HTTP requests, improving server-side auditability of MCP traffic. • Caches remote plugin catalogs by scope, reducing repeated fetches when working with scoped plugin registries. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.5 (Prerelease)

Thu, 23 Jul 2026 20:02:57 GMT

OpenAI Codex CLI rust-v0.146.0-alpha.2 (Prerelease)

Wed, 22 Jul 2026 07:22:20 GMT

Codex CLI adds Codex Auto Review model metadata, session headers for realtime conversations, and routes LM Studio traffic through the shared HTTP client. • Configures Codex Auto Review with an action-risk review prompt template, default generic security policy, approval rules, and permission messages for `danger_full_access`, `workspace_write`, and `read_only` modes. • Includes `session-id` and `thread-id` headers when starting realtime conversations over WebSocket or WebRTC. • Routes LM Studio server requests through the shared route-aware HTTP client pool, adding connection-timeout support scoped to connection establishment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.146.0-alpha.1 (Prerelease)

Wed, 22 Jul 2026 05:01:23 GMT

• Adds `app/read` app-server API endpoint for fetching metadata for up to 100 app IDs with optional tool summaries, deduplication, and caching. • Adds audio input support forwarded to the Responses API, gated by model input modalities. • Adds API for reading installed app runtime state. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.145.0-alpha.30 (Prerelease)

Wed, 22 Jul 2026 01:18:32 GMT

Codex CLI alpha.30 adds Esc-key session interruption and parallel stdin writes across unified-exec sessions. • Runs write_stdin in parallel across unified-exec sessions for faster multi-session I/O. • Updates bundled model catalog with GPT-5.6 context windows set to 272,000 tokens and new personality instruction variables. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.145.0

Tue, 21 Jul 2026 18:21:04 GMT

Codex CLI v0.145.0 adds paginated thread history, Amazon Bedrock support, audio inputs, multi-agent V2 GA, and `/import` for Cursor/Claude settings. • Adds experimental paginated thread history with resume, search, persisted thread names, sub-agent support, and memories. • Expands `/import` to migrate settings, MCP servers, plugins, sessions, commands, and project-scoped memories from Cursor and Claude Code. • Adds experimental Amazon Bedrock login with custom endpoint and authentication support; sets GPT-5.6 Sol as the default Bedrock model. • Supports audio inputs and tool outputs (common local audio formats) and introduces streaming realtime V3 conversations. • Adds secure, clickable inline visualization links in the terminal UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.145.0-alpha.29 (Prerelease)

Tue, 21 Jul 2026 11:49:09 GMT

Adds route-aware HTTP client pooling and system proxy support across daemon, plugins, and remote backends. • Adds a route-aware HTTP client pool (`RouteAwareClientPool`) that selects the correct outbound proxy route per request URL, reusing clients by resolved route with a bounded cache of 16 routes. • Honors system proxy settings in the daemon updater, remote plugins, and cloud environment discovery. • Supports `CARGO_HTTP_CAINFO` as a custom CA source in managed proxy/MITM environments. • Makes external session detection limits configurable via `maxSessionAgeDays` and `maxSessions` in the external-agent config detection request. • Adds optional `providerId` to `externalAgentConfig/import` for analytics attribution of external agent imports by provider. • Preserves thread settings (including `approvals_reviewer`) across restarts for goal-first and forked threads. • Adds an optional `releases.openai.com` installer source for fetching Codex release artifacts. • Mirrors Rust release artifacts and metadata to Cloudflare R2 for additional distribution resilience. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli

OpenAI Codex CLI rust-v0.145.0-alpha.28 (Prerelease)

Tue, 21 Jul 2026 03:01:52 GMT

Codex CLI gains concurrent terminal stdin, audio input/output, Amazon Bedrock custom transports, and incremental Markdown streaming. • Enables parallel `write_stdin` tool calls across independent terminal sessions, serializing per-session I/O for safety. • Supports custom transports for Amazon Bedrock provider connections. • Adds audio output support to dynamic tools and code mode. • Adds occurrence search for paginated thread history. • Adds batched executor capability discovery. • Makes parent-owned sub-agent threads read-only in the TUI. • Renders inline visualization links in the TUI. • Launches managed network proxies on remote executors. • Adds SessionEnd hooks for thread teardown. • Exposes plugin installation interstitial requirements. • Allows publishing plugins through share updates. • Supports ChatGPT-branded Desktop app builds. • Adds bounded batch lookups and batched reads for message and paginated thread history. • Lets users remember the working directory for resumed sessions. • Confirms usage-limit resets before redemption. • Records web search result payload sizes. • Streams realtime V3 Codex handoff output. • Tracks realtime conversation state and collaboration mode instructions in world state. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openai-codex-cli