$ npm install -g @openai/codex@0.167.1
ChatGPT & Codex changelog
Latest updates to ChatGPT and Codex
November 2026
-
Codex CLI 0.167.1
-
Codex CLI 0.167.0
$ npm install -g @openai/codex@0.167.0View details
New Features
- Open the agent command center with
codex agents --no-daemon. The command center and session picker now mark unread results (#58238, #58239, #58263, #58264). - Switch between connected backends from the terminal session picker and keep your drafts when switching (#58280, #58457).
- Preview local image attachments while composing on supported terminals, and open viewed local images from clickable transcript paths (#58261, #58446).
- Find API key and cloud provider options under “Sign in another way.” Enable
gcp_setup_wizardto set up Google Cloud Vertex AI with Application Default Credentials or a credential file (#57857, #58427). - Opt into macOS or Windows system proxy settings from
/experimental(#58157). - Expand patch details directly in the transcript while an approval prompt is open (#58281).
Bug Fixes
- Saved chats stay visible after you switch model providers. If a chat can’t resume, you can read its transcript and prepare an editable prompt to continue in a new chat (#58202).
Ctrl+Lclears the terminal display while keeping earlier messages available throughCtrl+T(#58266).- Deleting text that exposes a leading
!keeps an ordinary draft in chat mode (#58412). - Network approval prompts close when their requests end. Concurrent requests to the same endpoint prompt one at a time (#58350, #58351).
- Long realtime V3 conversations save completed speech to chat history as the transcript grows (#58221).
- Automatic context compaction now accounts for retained output from failed responses and responses with missing token usage data (#58404).
Documentation
- The app-server README covers managed network constraints under
[permissions.network]andprompt-usercommand rules that require fresh human approval (#58045, #58182). - The
openai-docsskill recommends the documented replacement when migrating away from a deprecated model (#58134).
Chores
- DotSlash manifests now reference the Cargo packages shipped with the release (#58717, #58757).
- Linux musl builds use fewer allocator arenas to reduce idle memory after conversations unload (#58399).
Changelog
Full Changelog: rust-v0.166.0...rust-v0.167.0
- #57848 Add bounded Code Mode output collection and rendering @seanh-oai
- #57850 Wire bounded output collection into the code mode runtime @seanh-oai
- #57855 Load TUI plugin mentions from installed plugins @zamoshchin-openai
- #57857 Add Google Cloud Vertex AI setup to TUI onboarding @alexsong-oai
- #57859 Extend the provider OAuth sign-in timeout to ten minutes @smurching-oai
- #57861 Skip resource template discovery for hosted Apps @khong-oai
- #57862 Keep resume picker pagination moving across backends @bc-openai
- #57864 Allow upstream interruption when canceling Responses Lite turns @liame-oai
- #57866 Retry transient environment startup failures on the next turn @pansul47-oai
- #57870 Enable server-side output truncation for Code Mode sessions @seanh-oai
- #57876 Reuse the cached runtime keymap for default configuration @bc-openai
- #57883 Preserve status-line hyperlinks through footer layout and animations @joesavona
- #57970 Add an experimental UI tree renderer for the status line @joesavona
- #57974 Apply session plugin overrides during MCP config refresh @TAFOYA-OAI
- #57978 Add per-chat leases for shared MCP connections @charliemarsh-oai
- #57985 Skip read-only volume-root expansion in the MXC sandbox @iceweasel-oai
- #58013 Fix argument comment lint tests after rust-clippy branch rename @seanh-oai
- #58025 Add trace-safe diagnostics for Noise relay request progress @apanasenko-oai
- #58028 Add direct Guardian review of recorded exec calls @swastik-oai
- #58034 Add an option to disable successful SSE delta logs @jif-oai
- #58040 Preserve native tool-call evidence through Guardian review @ioanbudea-OAI
- #58045 Add managed command checkpoints requiring fresh human approval @jif-oai
- #58057 Initialize
native_callin agent host test fixtures @jif-oai - #58071 Share the Guardian context delivery token limit @ioanbudea-OAI
- #58075 Use serving assessments for adaptive Guardian review @jif-oai
- #58083 Use a dedicated binary for Bazel schema generation @jif-oai
- #58091 Update default models for memory extraction and consolidation @jif-oai
- #58110 Ignore RUSTSEC-2026-0418 for the Windows-only libz-sys dependency @swastik-oai
- #58119 Add experimental Guardian review for injected thread commands @swastik-oai
- #58121 Centralize provider request preparation auth checks @sgarg-oai
- #58122 Add an incremental exec tools feature flag @akira-oai
- #58123 Add validated elastic section budget configuration for Guardian @ioanbudea-OAI
- #58125 Support negotiated server-side truncation in Code Mode clients @seanh-oai
- #58127 Honor the tooltip preference for TUI startup help @imac-oai
- #58129 Persist subagent relationships before creating child storage @radai-oai
- #58130 Support pasted search text in the skills toggle view @xma-oai
- #58134 Prefer documented replacements for deprecation-driven model migrations @kkahadze-oai
- #58140 Route standalone web search through the thread's workspace context @sgarg-oai
- #58144 Record additional context counts, sizes, and truncation metrics @akira-oai
- #58147 Return standalone web search failures to the model @sgarg-oai
- #58157 Expose system proxy support as an experimental setting @abhinav-oai
- #58159 Add a feature flag for code-mode host output truncation @seanh-oai
- #58161 Include tool names and annotation hints in MCP approval metadata @brisebois-oai
- #58165 Keep remote plugin bundle URLs out of diagnostics @mzeng-openai
- #58166 Make rollout recording failures and completion explicit @cassirer-openai
- #58168 Create missing parent directories for MXC deny paths on Windows @iceweasel-oai
- #58171 Stabilize cancellation and tracing tests @aakash-oai
- #58172 Validate trace completion records and payload UTF-8 during replay @cassirer-openai
- #58182 Support managed network requirements under
permissions.network@viyatb-oai - #58189 Use turn-scoped permissions for standalone web search @sayan-oai
- #58190 Allow providers to opt into Cyber access programs @jamy-OAI
- #58195 Preserve remote read compatibility with older executors @dkovalenko-oai
- #58196 Require Bazel release artifacts and publish DotSlash manifests @dkovalenko-oai
- #58198 Centralize TOML config deserialization @dkovalenko-oai
- #58202 Keep chats accessible across model provider changes @abhinav-oai
- #58219 Add file-backed storage for gateway OAuth credentials @alexsong-oai
- #58221 Preserve realtime V3 transcripts in conversation history @guinness-oai
- #58237 Preserve unrelated side conversations when archiving or deleting threads @etraut-openai
- #58238 Enable the agent command center for embedded sessions @etraut-openai
- #58239 Enable the agent command center in embedded mode @etraut-openai
- #58240 Enable TUI task tools for embedded app-server sessions @etraut-openai
- #58241 Update
miofrom 1.2.0 to 1.2.4 @euroelessar - #58251 Reload remote executor credentials safely across token rotation @tgrue-openai
- #58260 Reuse
LocalImageAttachmentthroughout the TUI composer @etraut-openai - #58261 Add local image thumbnails to the TUI composer @etraut-openai
- #58263 Show unread results in the TUI command center @etraut-openai
- #58264 Show unread sessions and acknowledge viewed transcripts in the picker @etraut-openai
- #58266 Preserve transcript history when clearing the terminal with Ctrl+L @xma-oai
- #58270 Recognize Rex terminals and enable Kitty graphics for pets @etraut-openai
- #58280 Reuse connected backends in the in-app resume picker @bc-openai
- #58281 Allow inline patch review during approval prompts @etraut-openai
- #58324 Treat auth reload failures as transient during token refresh @jif-oai
- #58341 Add an MCP adapter for message-board tools @jif-oai
- #58343 Preserve fallback token refreshes when the keyring is unreadable @jif-oai
- #58350 Resolve network approval prompts when their requests end @charliemarsh-oai
- #58351 Serialize manual network approval prompts per endpoint @charliemarsh-oai
- #58352 Allow Apps catalog discovery before the initial tool inventory completes @bkotsopoulos
- #58355 Fix remote executor authentication timeout recovery @jif-oai
- #58357 Extract pre-tool-use hook handling into a helper @swastik-oai
- #58361 Preserve model metadata origin through runtime resolution @ioanbudea-OAI
- #58368 Apply PreToolUse hooks before direct Guardian review policy checks @swastik-oai
- #58378 Scope agent MCP metadata to a host-selected plugin registration @rhan-oai
- #58380 Broadcast thread section changes to connected clients @charliemarsh-oai
- #58381 Fix unsettled refresh detection after workspace switching @jif-oai
- #58385 Test V8 inline typed array storage limits @fcoury-oai
- #58388 Add whole-entry elastic allocation for Guardian context @ioanbudea-OAI
- #58390 Expose parent context for host-managed child startup @rhan-oai
- #58395 Add scoped host metadata hooks for MCP tool requests @rhan-oai
- #58399 Reduce jemalloc arena count for Linux musl builds @dkovalenko-oai
- #58403 Run package updates outside the project on non-Windows platforms @viyatb-oai
- #58404 Fix context token estimates for responses without usable usage @dkovalenko-oai
- #58405 Add an option to suppress incremental model change announcements @chetan-oai
- #58406 Add host-inherited thread instructions and execution policies @rhan-oai
- #58410 Enable deferred tool world state by default @adaley-openai
- #58411 Expose non-consuming input activity waits to hosts @rhan-oai
- #58412 Keep exposed leading bangs literal in the chat composer @xma-oai
- #58418 Simplify recorded exec command review @swastik-oai
- #58427 Group alternative sign-in methods in a submenu @alexsong-oai
- #58428 Support app settings in plugin configuration @mzeng-openai
- #58430 Add audio file references with explicit runtime rejection @hung-oai
- #58434 Treat audio validation failures as non-retryable input errors @hung-oai
- #58436 Add interactive controls and refresh inline visualization styles @philipp-oai
- #58441 Preserve Apps usage instructions in model catalog messages @goodman-oai
- #58444 Cap Guardian context entries before elastic allocation @ioanbudea-OAI
- #58446 Make viewed image paths clickable in the TUI @etraut-openai
- #58454 Add elastic budgeting for Guardian context preparation @ioanbudea-OAI
- #58456 Preserve incomplete response output in failed inference traces @cassirer-openai
- #58457 Enable cross-backend session switching in the TUI @bc-openai
- #58459 Tighten Bazel CI snapshot handling and OTLP test cleanup @imac-oai
- #58713 Extract fresh session adoption from TUI session startup @bc-openai
- #58714 Sort agent center tasks by recency within status groups @etraut-openai
- #58716 Support OSC 52 clipboard forwarding through GNU screen @etraut-openai
- #58717 Make Bazel checks advisory and pause Bazel release artifacts @dkovalenko-oai
- #58718 Support rendering TUI conversations within an inset area @fcoury-oai
- #58719 Wire native voice dependencies into full Rust CI @bc-openai
- #58720 Prioritize pending approvals in the subagent picker @tamird
- #58722 Add naming and navigation helpers for TUI backend sessions @bc-openai
- #58727 Use local Bazel for voice release builds @fcoury-oai
- #58751 Release superseded assistant text from live paginated history @btraut-openai
- #58757 Remove Bazel outputs from DotSlash release configs @fcoury-oai
- Open the agent command center with
-
ChatGPT for iOS 1.2026.300
New features
- Add, preview, and remove attachments without leaving the full-screen composer.
- Task read status now syncs with supported hosts, helping clear stale unread indicators across devices.
Improvements and bug fixes
- Follow-ups steer the running task by default unless you have saved a different preference.
- Improved response annotations: add and edit notes on selected text, and tap numbered references to revisit the selected text and its note.
- Custom-provider tasks keep their model and reasoning effort when you send a follow-up from iOS.
- When you reopen a task, prompts that failed to send retain their attachments, and you can retry sending them.
- Improved keyboard behavior when opening tasks, scrolling long drafts, and returning to an open editor.
- Drafts, text selection, and undo history survive changes between compact and split layouts.
- Improved iPhone Duo layouts, including full-width editing and controls that stay above the keyboard.
- Linked files open directly, and closing the preview takes you back to the task. Absolute file links outside the workspace also open correctly.
- Images with relative file paths load from the directory where the original turn ran.
- Fixed invisible chart labels and bars in inline visualizations.
- Reconnect errors show a single Retry control, with better alignment on iPad.
- Archiving a task can reconnect to its host when the computer appears offline.
October 2026
-
Codex CLI 0.166.0
$ npm install -g @openai/codex@0.166.0View details
New Features
- Added keyboard-driven transcript selection with word, line, and page motions, integrated search, and configurable shortcuts. (#57221, #57222, #57223, #57224)
- Rendered Markdown consistently in async questions, choices, answers, and transcript replies. (#57259, #57292)
- Added GPT-6.1 Terra to the bundled, Vertex AI, and Amazon Bedrock model catalogs. (#57293)
- Added
codex queue --resumeto resume unloaded threads after queueing a message. (#57232) - Added clearer safety-block explanations and selectable safer follow-up prompts in the TUI. (#57363, #57365)
- Added
codex doctor --network-onlyfor focused configuration, connectivity, and WebSocket diagnostics. (#57606)
Bug Fixes
- Preserved acknowledged approval and permission settings when resuming or forking threads. (#57227)
- Preserved local image attachments when restoring killed composer text. (#57502)
- Fixed standalone release cleanup on macOS when installations are in use or paths contain non-ASCII characters. (#57503)
- Restored spawned descendant threads when unarchiving their parent. (#57635)
- Fixed app-server thread startup and shutdown races and released completed runtimes promptly. (#57787, #57788)
- Improved TUI reconnection recovery, including offline
/quitand/exithandling. (#57820) - Preserved reasoning-token accounting across resume and fork to avoid premature compaction. (#57839)
Chores
- Switched Bazel to source-built V8 with target-matched Rust bindings and native Windows MSVC archive support. (#57164, #57269, #57644, #57832)
- Shipped the standalone executor in canonical CLI and app-server release packages. (#57837)
- Standardized development and release builds on Node.js 24.22.1 and Rust 1.95.0. (#57168, #57373)
Changelog
Full Changelog: rust-v0.165.0...rust-v0.166.0
- #56468 Preserve
SystemRootfor Windows filesystem sandbox helpers @jif-oai - #56477 Move Guardian approval reason caps into context composition @ioanbudea-OAI
- #56483 Allow installed plugin metadata to skip display enrichment @bkotsopoulos
- #56493 Move Guardian tool description preparation into context composition @ioanbudea-OAI
- #56494 Add channel upserts to message boards @felixxia-oai
- #56495 Add paginated channel subscription queries to the local message board @felixxia-oai
- #56505 Defer synchronous Guardian tool-call truncation to preparation @ioanbudea-OAI
- #56514 Preserve tracing context throughout tool dispatch @bkotsopoulos
- #56515 Add trace instrumentation for turn startup and response streaming @bkotsopoulos
- #56516 Respect server approval policy defaults during TUI startup @etraut-openai
- #56524 Add turn, tool, and skill attribution to traces @bkotsopoulos
- #56525 Remove the 1 MiB response limit for explicit model catalogs @eternal-openai
- #56530 Record skill and plugin catalog sizes on publication @TAFOYA-OAI
- #56533 Defer sync Guardian tool-output truncation to transcript preparation @ioanbudea-OAI
- #56535 Extract the head-tail buffer into a utility crate @seanh-oai
- #56543 Track resume picker pagination and selection metadata per backend @bc-openai
- #56552 Initialize SQLite databases with DELETE journaling on NFS @dkovalenko-oai
- #56553 Include environment hooks in thread hook listings @andrewgu-oai
- #56554 Enable masked AWS credentials for local proxy signing @viyatb-oai
- #56555 Apply sync Guardian message limits during transcript preparation @ioanbudea-OAI
- #56556 Use conversations for all Guardian v2 async classification @felixxia-oai
- #56557 Exercise retained sampling in Guardian transport tests @felixxia-oai
- #56559 Remove Guardian snapshot-specific context helpers @felixxia-oai
- #56560 Allow configuring GCP project and location in provider settings @alexsong-oai
- #57164 Move the V8 Bazel build graph into Codex @seanh-oai
- #57165 Enforce V8 artifact profiles at Bazel target boundaries @seanh-oai
- #57166 Surface automatic marketplace update failures as startup warnings @dkovalenko-oai
- #57167 Track CUA tool call starts and deduplicate lifecycle events @trpcic-openai
- #57168 Centralize Node.js version selection on 24.22.1 @anp-oai
- #57169 Clarify config loader APIs and share interactive login setup @smurching-oai
- #57170 Update prebuilt argument-comment-lint to
rust-v0.164.0@tamird - #57171 Integrate runtime authentication into model requests @cooper-oai
- #57172 Expose lifecycle timestamps on app-server thread items @charliemarsh-oai
- #57174 Add scoped request-body secret substitution to MITM hooks @viyatb-oai
- #57175 Integrate config-server policies with startup and authentication @smurching-oai
- #57176 Defer Guardian Node REPL output truncation until prompt preparation @ioanbudea-OAI
- #57178 Route FedRAMP API keys to government endpoints by default @lsingh-oai
- #57179 Consolidate async header authentication in
apply_auth_headers@cooper-oai - #57180 Add constraint-aware standalone network proxy configuration @viyatb-oai
- #57181 Add optional names to untrusted additional context @akira-oai
- #57185 Centralize unified exec output rendering @anp-oai
- #57186 Fail closed on unreadable glob search root metadata errors @viyatb-oai
- #57187 Allow advisory rollout budgets with optional limit enforcement @nvogt-oai
- #57188 Add a credential file override for GCP provider authentication @alexsong-oai
- #57191 Read unified exec output directly from stdout and stderr @anp-oai
- #57192 Gate capability discovery V2 on executor version @TAFOYA-OAI
- #57193 Preserve failed
write_stdincalls in rollout trace replay @cassirer-openai - #57194 Classify rollout tool calls by their runtime handler @cassirer-openai
- #57196 Isolate MCP inputs and timeouts for callers sharing a connection @charliemarsh-oai
- #57197 Clarify skill toggle summaries in the TUI @fcoury-oai
- #57198 Report the local command working directory in PreToolUse hooks @eternal-openai
- #57199 Truncate rollout JSON summaries at UTF-8 character boundaries @cassirer-openai
- #57201 Capture direct-tool critical paths behind a feature flag @taohong339
- #57202 Preserve the tool dispatch span across runtime futures @trpcic-openai
- #57203 Preserve command cwd in permission and post-tool hooks @eternal-openai
- #57204 Register the
untrusted_as_tool_outputfeature flag @akira-oai - #57206 Ignore the crypto-bigint timing advisory in dependency checks @etraut-openai
- #57207 Attribute approval waits to tool critical-path timing @taohong339
- #57208 Propagate installer download failures in standalone Unix updates @etraut-openai
- #57209 Report turn critical-path timing in analytics @taohong339
- #57210 Add opt-in protocol discovery for local stdio MCP servers @charliemarsh-oai
- #57211 Share eligible local stdio MCP connections across chats @charliemarsh-oai
- #57212 Enable zstd compression for code-mode gRPC responses @cayoub-oai
- #57215 Coordinate resume picker sources independently @bc-openai
- #57218 Support negotiated WebSocket compression in the remote app-server client @thorvald-oai
- #57220 Log app-server WebSocket compression statistics @thorvald-oai
- #57221 Expand keyboard navigation and selection in the transcript @fcoury-oai
- #57222 Integrate Find with transcript selection mode @fcoury-oai
- #57223 Wire keyboard selection into transcript overlays @fcoury-oai
- #57224 Fix transcript selection input routing and preserve composer drafts @fcoury-oai
- #57225 Add managed enforcement of DELETE journaling on NFS @dkovalenko-oai
- #57226 Allow NFS database migration with shared file permissions @dkovalenko-oai
- #57227 Preserve acknowledged permissions when resuming and forking threads @charliemarsh-oai
- #57228 Give remote control pairing a 35-second deadline @etraut-openai
- #57229 Simplify code-mode cell completion delivery @cconger
- #57232 Add optional thread resumption to
codex queue@etraut-openai - #57233 Stop dotenv loading on persistent I/O errors @etraut-openai
- #57234 Prevent credential collisions in registry auth test fixtures @jif-oai
- #57235 Tag exec_command telemetry with the configured shell snapshot mode @jif-oai
- #57238 Exercise V2 spawning in subagent context inheritance tests @tamird
- #57239 Make the MCP HTTP probe timeout test deterministic @jif-oai
- #57240 Bound memory baseline files and recover incomplete snapshots @dhruvgupta-oai
- #57241 Honor configured message limits for encrypted guardian transcripts @ioanbudea-OAI
- #57242 Reduce the default thread unload delay to one minute @jif-oai
- #57243 Pause Tokio time in startup draft handoff tests @goodman-oai
- #57244 Wait for process completion in the unified exec reuse test @goodman-oai
- #57245 Stabilize the rejected queue message test @goodman-oai
- #57247 Release the rollout maintenance lock when its guard is dropped @goodman-oai
- #57248 Make login token-refresh tests wait for auth publication @goodman-oai
- #57249 Allow disabling plugin discovery prefetch at app-server startup @zamoshchin-openai
- #57251 Show native dollar thread usage for ENT26 plans @jif-oai
- #57253 Allow slow daemon startup while detecting early process exits @etraut-openai
- #57255 Record reviewed exceptions for zstd security advisories @charliemarsh-oai
- #57256 Keep parent history out of attached thread views @btraut-openai
- #57257 Avoid unnecessary connector directory work for tool suggestions @charliemarsh-oai
- #57258 Reduce remote plugin catalog cache probing overhead @charliemarsh-oai
- #57259 Render Markdown in TUI async question choices @imac-oai
- #57260 Centralize permission request preparation and approval actions @swastik-oai
- #57261 Separate
apply_patchrequest preparation from execution @swastik-oai - #57262 Add incremental skill catalogs behind
skill_catalog_deltas@adaley-openai - #57263 Support model-catalog wording for permission path warnings @goodman-oai
- #57265 Show effective processing tiers in TUI status surfaces @etraut-openai
- #57267 Keep cloud conversation settings server-owned in the TUI @bc-openai
- #57268 Record reasons for embedded TUI starts @etraut-openai
- #57269 Add native Windows MSVC V8 source archive builds @seanh-oai
- #57270 Load cloud config for sandbox and remote exec-server commands @abhinav-oai
- #57271 Enable text selection and mouse scrolling in the warning viewer @imac-oai
- #57272 Add code-mode output truncation protocol contracts @seanh-oai
- #57273 Reject unsupported options for
codex queue@etraut-openai - #57274 Defer REPL evidence rendering to synchronous context preparation @ioanbudea-OAI
- #57275 Preserve image generation failure metadata for premium usage limits @jimxie-oai
- #57276 Support window prefixes for extension world-state sections @fc-oai
- #57277 Use the crates.io release of
i18n-config@goodman-oai - #57278 Refactor agent spawning, startup, and communication helpers @rhan-oai
- #57279 Render untrusted additional context as named tool outputs @akira-oai
- #57280 Preserve full MCP results in rollout traces @cassirer-openai
- #57281 Enable agents navigation for remote App Server sessions @etraut-openai
- #57282 Promote rounded token counts to the next compact unit @etraut-openai
- #57284 Express TUI mouse capture as an explicit policy @imac-oai
- #57285 Let the terminal handle links in expanded questions @imac-oai
- #57286 Support
network_proxyin managed requirements @viyatb-oai - #57287 Preserve parent tool declarations in prediction forks @keyz
- #57290 Add a plugin process host with bounded IPC and lifecycle management @joesavona
- #57291 Represent user message presentation with an enum @imac-oai
- #57292 Render async questions and replies with Markdown in the TUI @imac-oai
- #57293 Add GPT-6.1 Terra to model catalogs @BOZHANG-OAI
- #57294 Extract plugin manager errors and box realtime handoff routing @TAFOYA-OAI
- #57295 Defer synchronous Guardian evidence limits to preparation @ioanbudea-OAI
- #57304 Surface refresh-token rejection errors during workspace routing @smurching-oai
- #57307 Bump
openai/fencetov0.12.2in the blob size policy @joesavona - #57311 Preserve tool output versions and history order in rollout traces @cassirer-openai
- #57312 Centralize Guardian root context preparation @ioanbudea-OAI
- #57313 Default gateway OAuth delivery to Authorization bearer tokens @smurching-oai
- #57314 Format all Rust sources and clean up repository checks @joesavona
- #57315 Keep failed subagents from marking tasks as needing attention @bc-openai
- #57317 Add opt-in concise hints for explicitly selected plugins @adaley-openai
- #57325 Add model catalog fields for granular approval templates @goodman-oai
- #57342 Separate TUI session resume preparation from activation @bc-openai
- #57352 Preserve child signal failures in the npm wrapper @dkovalenko-oai
- #57353 Avoid object-identity preflight for MXC path grants @iceweasel-oai
- #57357 Report when NFS database migration finds no databases @dkovalenko-oai
- #57358 Serialize session index mutations across processes @dkovalenko-oai
- #57360 Bound waits for the thread writer coordination lock @dkovalenko-oai
- #57363 Explain safety policy blocks with turn-scoped recourse in the TUI @etraut-openai
- #57365 Offer safer rewrites after safety blocks in the TUI @etraut-openai
- #57366 Show the selected ChatGPT workspace in
/status@etraut-openai - #57373 Pin the Rust toolchain to 1.95.0 @TAFOYA-OAI
- #57391 Drain pending terminal reports before returning to the shell @etraut-openai
- #57393 Render integral limits and parenthesized matrices in TUI math @etraut-openai
- #57394 Add experimental GCP account setup to the app server @alexsong-oai
- #57420 Make thread item timestamps optional in TypeScript exports @keyz
- #57425 Centralize Guardian root context preparation @ioanbudea-OAI
- #57430 Test goal provenance in existing workers' Guardian reviews @jif-oai
- #57433 Add opt-in synchronous Guardian review for native tool calls @jif-oai
- #57435 Extract unified exec command preparation into a reusable module @swastik-oai
- #57438 Carry prepared commands through unified execution @swastik-oai
- #57439 Preserve Guardian request metadata with custom OpenAI base URLs @jif-oai
- #57441 Add Guardian native multi-agent history feature flag @jif-oai
- #57448 Preserve native multi-agent calls in Guardian review history @jif-oai
- #57451 Route state-changing multi-agent calls through Guardian review @jif-oai
- #57452 Distinguish policy-restricted capacity failures from server overloads @toml-openai
- #57455 Centralize Guardian classification of multi-agent tool calls @jif-oai
- #57458 Move Guardian token usage calculation into the reviewer crate @jif-oai
- #57462 Always put Code Mode tool descriptions before namespace descriptions @swastik-oai
- #57468 Fix guardian handoff mocks for native history tests @jif-oai
- #57474 Test encrypted native call history across Guardian reviews @jif-oai
- #57476 Move Guardian session helpers into the reviewer crate @jif-oai
- #57478 Move Guardian approval request types into the reviewer crate @jif-oai
- #57483 Skip unrelated indexed rollouts during selected thread migration @charliemarsh-oai
- #57488 Move guardian prompt composition into the reviewer crate @jif-oai
- #57493 Move Guardian action JSON formatting into the reviewer crate @jif-oai
- #57494 Centralize synchronous Guardian context preparation @ioanbudea-OAI
- #57500 Add an option to omit descriptions from skill catalogs @adaley-openai
- #57501 Render escaped percent signs in TUI math @etraut-openai
- #57502 Preserve local image attachments when restoring killed text @etraut-openai
- #57503 Fix macOS standalone release pruning @etraut-openai
- #57504 Use the native clipboard for WSL SSH sessions with X11 forwarding @etraut-openai
- #57506 Move Guardian request mappings into the reviewer crate @jif-oai
- #57507 Resolve Guardian command path conventions inside
ReviewAction@swastik-oai - #57508 Add a bounded V8 runtime for UI plugin processes @joesavona
- #57509 Extract Guardian planned-action assembly into the reviewer crate @jif-oai
- #57512 Explicitly unlock daemon PID reservation probes on Unix @jif-oai
- #57513 Replace the npm wrapper with the native binary using
execve@bolinfest - #57514 Add experimental ChatGPT workspace switching to app-server @dhruvgupta-oai
- #57515 Limit MXC volume expansion probes to symbolic links @iceweasel-oai
- #57516 Add profile and provider status line items @etraut-openai
- #57519 Defer synchronous Guardian heartbeat compression to preparation @ioanbudea-OAI
- #57522 Add isolated reviews to the guardian reviewer pool @swastik-oai
- #57533 Release empty PID probe locks explicitly on Unix @jif-oai
- #57538 Preserve host-assigned user input IDs in Responses messages @zbrunson-openai
- #57542 Add model-gated literature search to standalone web search @rhan-oai
- #57552 Expose and persist image generation IDs @jimxie-oai
- #57553 Allow replacing dynamic tools between model steps @sdcoffey
- #57554 Keep submitted prompts shaded when terminal colors are unavailable @bc-openai
- #57563 Avoid retaining unneeded output items in HTTP response streams @btraut-openai
- #57564 Preserve rich composer content in Vim registers @bc-openai
- #57567 Allow catalog URL overrides for the built-in OpenAI provider @jamy-OAI
- #57568 Configure memory consolidation service tiers independently @mandal-OAI
- #57569 Preserve process output and control replies under backpressure @ztanner-oai
- #57572 Support Apps tool catalogs without shared snapshots @bkotsopoulos
- #57573 Add filesystem-free classification of intercepted patch commands @swastik-oai
- #57575 Refactor HTTP client construction and request execution @bz-openai
- #57581 Allow model catalogs to customize approval instruction headings @goodman-oai
- #57584 Preserve output boundaries through token truncation @seanh-oai
- #57585 Replace unavailable image references in model requests @kchainani-oai
- #57586 Add host-reserved V2 child creation APIs @rhan-oai
- #57589 Add a standalone
codex-exec-serverexecutable @dkovalenko-oai - #57590 Ship
codex-exec-serverin CLI and app-server packages @dkovalenko-oai - #57593 Remove empty local staging routing files @fcoury-oai
- #57597 Preserve WebSocket probe evidence and redact diagnostic details @dob-oai
- #57598 Cache empty remote skill discovery with filesystem watches @adams-oai
- #57599 Support catalog headings for saved command-prefix notices @goodman-oai
- #57606 Add
codex doctor --network-onlyfor focused network diagnostics @dob-oai - #57607 Share runtime authentication with model providers and catalogs @cooper-oai
- #57612 Disable terminal status sequences on older VTE backends @fcoury-oai
- #57615 Preserve rollout tracing across sub-agent reloads @cassirer-openai
- #57618 Release sampling prompts after stream setup @btraut-openai
- #57626 Show Bedrock setup for explicitly configured OpenAI providers @alexsong-oai
- #57628 Stop shipping
codex-exec-serverin release artifacts @fcoury-oai - #57635 Restore spawned descendants when unarchiving a thread @etraut-openai
- #57638 Add OpenTelemetry requirement types to the app-server protocol @arnavpatidar-OAI
- #57644 Generate Rust bindings that match Bazel-built V8 archives @seanh-oai
- #57649 Support managed OpenTelemetry configuration requirements @abhinav-oai
- #57654 Redact OTEL exporter headers in app-server config responses @arnavpatidar-OAI
- #57657 Fix trace exporter activation after account switches @arnavpatidar-OAI
- #57658 Support managed OpenTelemetry metadata and PEM client identities @abhinav-oai
- #57667 Remove detached delivery from
review/start@yansenzhou-oai - #57692 Wait for turn profiles before asserting sampling counts in trace tests @ioanbudea-OAI
- #57697 Move Guardian review state into the reviewer extension @jif-oai
- #57698 Move Guardian context policy and prompts into the reviewer extension @jif-oai
- #57702 Move Guardian review evidence into the reviewer extension @jif-oai
- #57710 Preserve parent routing affinity for Guardian reviews @jif-oai
- #57720 Move
ReviewActioninto the Guardian reviewer crate @jif-oai - #57723 Disable optimization for the on-demand Bazel schema generator @jif-oai
- #57729 Remove
free_guardianconfiguration from Guardian tests @ioanbudea-OAI - #57741 Separate test-only Rust sources from Bazel library and binary inputs @jif-oai
- #57742 Avoid recompiling Bazel integration tests for runtime fixture changes @jif-oai
- #57743 Move Guardian MCP elicitation helpers into the reviewer crate @jif-oai
- #57757 Expose Guardian assessments in response streams @jif-oai
- #57758 Include terminal launch commands in Guardian stdin reviews @jif-oai
- #57770 Respect model catalog origins when selecting Guardian reviewers @ioanbudea-OAI
- #57774 Skip non-regular files when detecting pasted image paths @etraut-openai
- #57782 Restrict code-mode host replacement to session admission @aakash-oai
- #57783 Exclude unrelated network shares from MXC default reads @iceweasel-oai
- #57787 Fix app-server thread listener startup and shutdown races @charliemarsh-oai
- #57788 Release app-server thread runtimes after shutdown @charliemarsh-oai
- #57789 Refresh the model catalog once when Guardian's default reviewer is missing @jif-oai
- #57790 Centralize synchronous Guardian prompt preparation @ioanbudea-OAI
- #57796 Extend GitHub release read retries and add jitter @imac-oai
- #57800 Backfill exec completion items through paginated history @btraut-openai
- #57817 Detach realtime sideband observers without ending the session @jiahao-oai
- #57818 Reduce unnecessary work in configuration processing @bc-openai
- #57819 Load up to eight plugins concurrently @bc-openai
- #57820 Improve TUI reconnect recovery and offline exit handling @etraut-openai
- #57824 Include directly attached threads in diagnostic uploads @btraut-openai
- #57825 Update CI setup to use
meta/install-dotslash@seanh-oai - #57832 Build V8 from source by default in Bazel @seanh-oai
- #57834 Add isolated Guardian assessments for prepared actions @swastik-oai
- #57835 Limit concurrent image availability checks to eight @kchainani-oai
- #57836 Declare the image generation result type in code mode @alicec-oai
- #57837 Ship the standalone executor in release packages @dkovalenko-oai
- #57839 Preserve reasoning token accounting across resume and fork @andrewgu-oai
- #57840 Validate thread providers before resume and input @abhinav-oai
- #57841 Add optional process metrics sampling for code-mode hosts @aakash-oai
-
ChatGPT for iOS 1.2026.293
New features
- Play audio and video directly in responses.
- Tap a sub-agent’s name in task activity to open its conversation.
Improvements and bug fixes
- Draft attachments and annotations are now restored when you reopen a task or restart the app.
- Reference autocomplete supports chat and skill names containing spaces. Plugin skill names are also easier to read.
- Plan mode preserves your selected reasoning effort when using the same model.
- Loaded activity stays visible if loading older work times out, with an option to retry.
- Queue-loading failures now offer a Retry action.
- Improved support for Windows file links and Markdown images.
- Fixed worktree creation on Linux hosts.
- Fixed crashes when steering queued messages or editing pairing codes, and iPad freezes when switching or resizing tasks.
-
Codex CLI 0.165.0
$ npm install -g @openai/codex@0.165.0View details
New Features
- Added a built-in Google Cloud Vertex AI provider, configured with
model_provider = "gcp". (#56265) - Added GPT-6.1 Terra to the model catalogs. (#57337)
- Added a repository filter to the session picker and directory grouping to the agent command center, making it easier to navigate sessions across linked worktrees. (#56308)
- Added experimental attached thread forks to the app-server API. (#56351)
- Enabled reasoning effort changes during a conversation by default for supported models. (#56163)
- Enabled memory v2 by default for fresh profiles and added support for importing external-agent memories into it. (#56211, #56414)
Bug Fixes
- Fixed fresh TUI sessions to honor the server’s default approval reviewer when no explicit override is provided. (#56090)
- Kept TUI preferences editable and immediately applicable when execution settings are invalid. (#56091)
- Cancelled remote MCP tool requests when their local response futures are dropped. (#56132)
- Prevented queued agent messages from restarting work after an interrupt or a switch to Plan mode. (#56330)
- Stopped retrying when a provider reports that a model was not found, preserving its error message. (#56445)
- Closed a marketplace URL validation gap that could allow Git to connect to a different host than the one checked against allowed patterns. (#56263)
Changelog
Full Changelog: rust-v0.164.0...rust-v0.165.0
- #56081 Cache decrypted Codex auth and managed secrets @celia-oai
- #56090 Honor server approval reviewer defaults on fresh TUI startup @etraut-openai
- #56091 Keep TUI preferences editable when execution settings are invalid @etraut-openai
- #56097 Prepare TUI startup to accept multiple backend sessions @bc-openai
- #56124 Forward Guardian reviewer events to parent raw-event subscribers @jif-oai
- #56127 Avoid blocking EMA auth status checks on account refresh @jif-oai
- #56132 Cancel MCP tool requests when response futures are dropped @rhan-oai
- #56133 Defer agent mail after empty final answers @eknight-oai
- #56139 Fix the MCP auth status test's IdP OAuth configuration @jif-oai
- #56153 Preserve safe enterprise MCP authentication error details @jif-oai
- #56154 Add managed network review domains before allow rules @olliem-oai
- #56163 Enable reasoning effort overrides by default @felixxia-oai
- #56182 Add AWS SigV4 signing to network proxy MITM hooks @viyatb-oai
- #56210 Stabilize the marketplace staging cleanup test @felixxia-oai
- #56211 Default fresh memory profiles to v2 @jif-oai
- #56214 Remove the
u64cast from WSL DrvFS detection @felixxia-oai - #56220 Use cargo_bin in the Windows sandbox manifest test @felixxia-oai
- #56222 Consolidate Bazel CI setup into
prepare-bazel-ci@anp-oai - #56224 Reuse current model context across paginated resume config loading @charliemarsh-oai
- #56233 Make Opus encoder test timestamps follow sample time @goodman-oai
- #56234 Emit prompt telemetry only after hooks accept input @abhinav-oai
- #56236 Make the code mode yield/resume test yield explicitly between phases @goodman-oai
- #56246 Bump Bazelisk to 1.30.0 in the Bazel CI setup action @anp-oai
- #56247 Consolidate Rust unit tests under dedicated test modules @dkovalenko-oai
- #56248 Bump uv to 0.13.5 in CI and release workflows @anp-oai
- #56250 Avoid redundant settings checkpoints when resuming threads @owenlin0
- #56261 Isolate V8 source dependencies and their C++ runtime settings @seanh-oai
- #56263 Reject backslashes in HTTP(S) marketplace URL userinfo @willwang-openai
- #56265 Add a built-in Google Cloud Vertex AI provider @celia-oai
- #56266 Preserve MCP disable reasons across runtime overlays @mzeng-openai
- #56272 Upgrade Python SDK model generation to datamodel-code-generator 0.64.0 @anp-oai
- #56274 Wait for cloud config refresh cancellation in loader lifetime tests @goodman-oai
- #56277 Support bounded request bodies in AWS SigV4 signing @viyatb-oai
- #56278 Add negotiated network policy metadata support for MCP calls @viyatb-oai
- #56280 Group consecutive transcript prompts into one background block @bc-openai
- #56284 Scope model catalogs and caches by thread originator @kennyyi-oai
- #56286 Bump
@modelcontextprotocol/sdkto1.32.0@anp-oai - #56288 Pin Linux artifact signing to Cosign v3.1.4 @anp-oai
- #56290 Lock Python release build tools with uv @anp-oai
- #56292 Fix MCP cancellation tests to use the metadata callback @anp-oai
- #56293 Use fixed-token auth fixtures in Vertex tests @anp-oai
- #56295 Decouple managed configuration loading from ChatGPT authentication @smurching-oai
- #56297 Mark built-in dummy credentials and strengthen collision checks @viyatb-oai
- #56301 Add TLS forwarding tests for MITM SigV4 requests @viyatb-oai
- #56302 Add hook configuration to environment attachments @andrewgu-oai
- #56304 Add support for environment-scoped managed hooks @andrewgu-oai
- #56308 Separate directory and repository scopes in the TUI @bc-openai
- #56309 Support model-specific writable-root permission wording @goodman-oai
- #56312 Track accepted conversation history in rollout traces @cassirer-openai
- #56313 Apply model catalog overrides to history, notes, and context tools @rhan-oai
- #56314 Add managed configuration loaders for custom config servers @smurching-oai
- #56330 Make agent-message wakes respect interrupts and Plan mode @alishobeiri-oai
- #56342 Match rollout trace image content across request snapshots @cassirer-openai
- #56343 Run environment hooks on their owning executors @andrewgu-oai
- #56351 Add experimental attached thread forks @btraut-openai
- #56364 Allow callers to set the thread source for sampling @keyz
- #56371 Make the Guardian review timeout configurable @vivi
- #56414 Support memory v2 in external-agent memory imports @jif-oai
- #56439 Update
ctutilsfrom 0.4.2 to 0.4.5 @felixxia-oai - #56445 Treat model-not-found provider errors as terminal failures @charliemarsh-oai
- #56453 Make the Realtime V2 background-agent steering test deterministic @felixxia-oai
- #56454 Make sandbox mount cleanup tests tolerate file descriptor reuse @felixxia-oai
- #56459 Add Guardian V3 feature configuration @felixxia-oai
- #56460 Add Guardian v3 local board helpers @felixxia-oai
- #56461 Add silent append support to message boards @felixxia-oai
- #56462 Prevent memory imports from racing with consolidation @jif-oai
- #56465 Add experimental thread memory summary reads @jif-oai
- #57337 [0.165.0-alpha.1.2] Backport GPT-6.1 Terra to the model catalogs @shijie-oai
- Added a built-in Google Cloud Vertex AI provider, configured with
-
GPT-6.1 Terra in Work and Codex
GPT-6.1 Terra is now available in ChatGPT Work and Codex on Plus, Pro, Business, Enterprise, and Edu plans. It’s a fast, efficient model for professional work that combines strong image understanding with precise computer use.
Reason about images and screens, then act on what you find across your browser, desktop, and apps. Terra also provides clear, direct writing that puts results first and explains supporting details in plain language.
Choose GPT-6.1 Terra from the model list in Advanced in the ChatGPT desktop app or ChatGPT Work on the web. Work also supports Terra on mobile. The model isn’t available in Chat and does not support UAE inference residency. Enterprise access depends on workspace availability and administrator controls.
See Models for guidance and browser use and computer use for tool setup and access requirements.
-
Codex CLI 0.164.0
$ npm install -g @openai/codex@0.164.0View details
New Features
- Save reusable prompts and slash commands in ten numbered
/presetsslots, with a keyboard menu for quick access. (#54380, #54381) - Set model, reasoning effort, speed, and permission profiles directly with inline
/modeland/permissionsarguments. (#54378, #54383) - Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)
- Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
- Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
- The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)
Bug Fixes
- Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)
- Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)
- Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)
- CLI configuration overrides are preserved when
-cor--configappears at multiple subcommand levels. (#56022) - Queued prompts now wait for pending permission selections to resolve before continuing. (#55682)
- Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)
Chores
- Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)
- Updated the embedded JavaScript runtime with safety checks for optimized
Array.sortoperations. (#54519)
Changelog
Full Changelog: rust-v0.163.0...rust-v0.164.0
- #53725 Render Markdown web links as labels in Rex @bc-openai
- #53728 Preserve the remote cwd filter in the in-app resume picker @fcoury-oai
- #53732 Reuse compiled search patterns across compressed rollouts @ethernetdan-openai
- #53733 Default Guardian v2 async classification to conversation mode @felixxia-oai
- #53736 Acquire and cache opt-in executor capability inventories via V2 @TAFOYA-OAI
- #53745 Remove
modelSlugfrom the latest-model resolver output @kkahadze-oai - #53747 Prefer remote Visualize installs over the bundled plugin @philipp-oai
- #53751 Apply feature overrides when restarting the app-server daemon @jif-oai
- #53753 Extend copy-on-select to composer text @fcoury-oai
- #53754 Support Command/Super shortcuts in the TUI keymap @fcoury-oai
- #53763 Enrich V2 capability discovery with resolved plugin and skill metadata @TAFOYA-OAI
- #53780 Remove redundant Codex manual cache directory check @kkahadze-oai
- #53781 Remove the product-gating TODO from
SkillPolicy@kkahadze-oai - #53784 Forward client voice session IDs in realtime requests @chrisdong-oai
- #53790 Fix cancellation of macOS user-verification prompts @bz-openai
- #53794 Retain rollout migration locks across worker cancellation @jif-oai
- #53795 Use the bundled model catalog in the MCP startup invalidation test @OLI-OAI
- #53797 Refresh Guardian reviews when review context changes @jif-oai
- #53800 Wire background compaction into the turn lifecycle @rka-oai
- #53804 Keep the Agent command center visible during archive and delete @etraut-openai
- #53805 Add safe diagnostics to workspace routing configuration errors @etraut-openai
- #53811 Support daemon installation from Windows WinGet packages @etraut-openai
- #53816 Reject Guardian review threads during interactive CLI resume @dylan-hurd-oai
- #53827 Prune unused app-server daemon releases safely @etraut-openai
- #53831 Track content provenance through prompt assembly and compaction @tz-openai
- #53845 Fix daemon updater socket binding and bootstrap readiness on Unix @etraut-openai
- #53853 Reuse staged file digests when preparing daemon installs @charliemarsh-oai
- #53859 Record bucketed terminal sizes in TUI telemetry @imac-oai
- #53872 Refresh model instructions in incremental-tool context windows @rhan-oai
- #53879 Preserve running turn recovery across thread settings updates @bc-openai
- #53895 Resume unloaded subagent threads when selected in the TUI @etraut-openai
- #53897 Isolate daemon package tests to reduce disk contention @etraut-openai
- #53908 Keep the agent dashboard browsable during task removal @etraut-openai
- #53932 Preserve conversation history when compaction fails @jif-oai
- #53940 Bound rollout input for memory extraction @jif-oai
- #53947 Stop rollout reads when the calling task is cancelled @jif-oai
- #53963 Test memory extraction budgets with excluded items and ciphertext @jif-oai
- #53969 Avoid reconnect races in the daemon restart test @jif-oai
- #53987 Skip service backoff for stale Guardian authorization retries @jif-oai
- #53990 Keep host MCP and plugin configuration local with remote environments @jif-oai
- #53991 Report the reason for ChatGPT token refresh requests @tejsudha-openai
- #53996 Bump
rustlsto0.23.46@jif-oai - #53997 Filter rollout filenames before checking compressed siblings @bbrown-oai
- #54003 Include compressed rollouts in doctor storage statistics @jif-oai
- #54008 Fix session lookup and resume after rollout compression @jif-oai
- #54027 Preserve Windows startup variables and MXC child environment defaults @iceweasel-oai
- #54032 Bound concurrent Git diffs for untracked files @yuzhu-oai
- #54033 Extend memory extension resource retention to 14 days @josh-oai
- #54039 Return async Guardian approvals before review cleanup finishes @jif-oai
- #54044 Keep fork lineage ahead of paginated transcript history @fcoury-oai
- #54046 Track approval cancellation sources and Guardian context changes @vkg-oai
- #54047 Restore elapsed time for replayed in-progress turns @etraut-openai
- #54048 Defer folder trust checks until starting a task from agents overview @etraut-openai
- #54050 Scope TUI skill refreshes and workspace commands to explicit directories @etraut-openai
- #54053 Add Responses API client metadata patches for turn start and steer @marksteinbrick-oai
- #54056 Coalesce overlapping native TLS root certificate loads @jif-oai
- #54057 Distinguish unsupported evidence in Decisions comparison metrics @swastik-oai
- #54058 Forward turn metadata to image generation and edit requests @duc-openai
- #54059 Support store-owned preparation when resuming threads @owenlin0
- #54060 Limit unarchive scans to the requested thread's archived rollouts @bz-openai
- #54069 Fix Windows environment handling for remote MCP servers @iceweasel-oai
- #54070 Expose gateway authentication as a reusable OAuth session API @smurching-oai
- #54076 Avoid false URL-launch detections in literal PowerShell commands @jif-oai
- #54078 Update
gixto 0.89.0 andgix-urlto 0.40.0 @jif-oai - #54079 Retire rejected MCP OAuth refresh tokens @mzeng-openai
- #54080 Extract TUI user-turn submission into a dedicated module @bc-openai
- #54081 Centralize vertical navigation in TUI list views @bc-openai
- #54082 Stabilize the Guardian network review timeout test @felixxia-oai
- #54087 Upgrade Bazel's
rules_pythonto 2.4.2 @dkovalenko-oai - #54094 Preserve specific MCP failure codes in metrics and spans @TAFOYA-OAI
- #54096 Add Bazel targets for on-demand schemas and Python SDK generation @dkovalenko-oai
- #54097 Show Daybreak notices after the session header @charliemarsh-oai
- #54098 Keep environment tools stable across readiness changes @aibrahim-oai
- #54099 Wait for readiness in the SIGTERM cancellation test @felixxia-oai
- #54113 Embed generated app-server schema bundles in Bazel builds @dkovalenko-oai
- #54114 Report terminal completion states and blocking reasons @cconger
- #54119 Allow stdin review under active grants with sandbox prompts disabled @tepman-oai
- #54133 Record per-tool incremental update and description size metrics @akira-oai
- #54135 Allow large file writes over direct exec-server WebSockets @ostepanian
- #54151 Generate keymap descriptors and binding accessors from one catalog @bc-openai
- #54169 Reload the model catalog after account changes @smurching-oai
- #54170 Preserve ChatGPT authentication for Gov MCP servers @lsingh-oai
- #54175 Retire worktree and voice feature flags @bc-openai
- #54216 Show image previews in the fullscreen transcript @etraut-openai
- #54217 Apply syntax theme colors to Markdown prose in the TUI @etraut-openai
- #54250 Add regression tests for case-variant metadata protection @jif-oai
- #54257 Preserve recent speech when trimming realtime transcripts @jif-oai
- #54263 Require fresh Guardian approval for escalated tool retries @jif-oai
- #54264 Track Guardian transcript admission across failed reviews @jif-oai
- #54265 Add regression coverage for Guardian sandbox retry approvals @jif-oai
- #54273 Protect metadata writes through macOS case aliases @jif-oai
- #54278 Share Guardian image deduplication and checkpoint restoration @felixxia-oai
- #54281 Attribute compaction summaries to the assistant in Guardian transcripts @jif-oai
- #54309 Enable credential masking for remote exec-server commands @viyatb-oai
- #54315 Keep TUI Markdown colors readable against their backgrounds @fcoury-oai
- #54316 Centralize context fragment kind constants @ioanbudea-OAI
- #54346 Add scoped executor credential auth for remote exec-server @viyatb-oai
- #54351 Use the turn index for turn-scoped item pagination @bz-openai
- #54363 Filter uninspectable network roots from implicit MXC read grants @iceweasel-oai
- #54365 Prevent duplicate assistant messages around interleaved commands @fcoury-oai
- #54369 Retry SQLite operations on transient writer contention @willwang-openai
- #54378 Support inline model, reasoning, and speed selection in
/model@fcoury-oai - #54379 Add configuration support for TUI input presets @fcoury-oai
- #54380 Add
/presetsfor reusable prompts and slash commands @fcoury-oai - #54381 Add a keyboard shortcut menu for presets @fcoury-oai
- #54383 Support inline permission profile selection with
/permissions@fcoury-oai - #54385 Allow saving current permission settings as presets @fcoury-oai
- #54387 Add session-only arguments to
/titleand/statusline@fcoury-oai - #54388 Add quick dial presets for terminal title and status line layouts @fcoury-oai
- #54389 Preserve existing SQLite journal modes on startup @dkovalenko-oai
- #54398 Store generated image items as attachment references @kchainani-oai
- #54401 Run managed daemon processes at background priority on macOS @bc-openai
- #54414 Allow root turn suspension with live descendants @miz-openai
- #54417 Skip SQLite page reclamation on Linux NFS mounts @dkovalenko-oai
- #54419 Support line breaks in Mermaid flowchart node labels @etraut-openai
- #54420 Record local image inputs on completed image-generation items @mjkaufer-openai
- #54421 Treat explicit connections to the verified default daemon as local @etraut-openai
- #54424 Add remote plugin metadata to plugin configuration @mzeng-openai
- #54432 Support remote credential masking with Zsh shell snapshots @viyatb-oai
- #54433 Use neutral labels for nonzero exits in compact TUI output @bc-openai
- #54434 Add rotating stdin credentials for remote exec-server @viyatb-oai
- #54445 Remove obsolete protected-path monitoring from the Linux sandbox @viyatb-oai
- #54475 Use a synchronous mutex for remote metadata request tracking @anp-oai
- #54505 Add streaming file replacement to filesystem abstractions @anp-oai
- #54519 Upgrade V8 to 152.2.0 and backport Array.sort safety guards @seanh-oai
- #54589 Preserve evidence message structure in Guardian Decisions requests @swastik-oai
- #54590 Capture sender context for
codex_app.create_threaddeliveries @felixxia-oai - #54619 Bind plugin hook approval to plugin contents @jif-oai
- #54623 Resolve stable releases dynamically for exec-server compatibility tests @felixxia-oai
- #54637 Preserve disconnect reasons in Noise handshake errors @virajrai-oai
- #54639 Stream rollout records during thread history materialization @chess-oai
- #54641 Retry npm release publishing and match macOS verification runners @jif-oai
- #54647 Make remote-control conflict retry tests deterministic @jif-oai
- #54653 Prefer resource-specific scopes during MCP OAuth discovery @zamoshchin-openai
- #54654 Allow dynamic tool calls to execute in parallel @sdcoffey
- #54656 Honor MCP tool-list changes within a turn @jif-oai
- #54664 Distinguish retryable thread-store errors from unknown write outcomes @wiltzius-openai
- #54672 Use shared Bazel CI preparation for lint and V8 jobs @anp-oai
- #54674 Add an opt-in tool for copying files between environments @anp-oai
- #54679 Distinguish MCP approval cancellation reasons @vkg-oai
- #54681 Keep TUI session selections bound to their backend @bc-openai
- #54686 Preserve MCP tool-list metadata in server status @victor-openai
- #54708 Honor home deletion preferences during Windows uninstall @chess-oai
- #54710 Move V8's ICU Bazel rules into the workspace @seanh-oai
- #54716 Keep prereleases in draft until release assets finish uploading @ioanbudea-OAI
- #54724 Preserve prereleased events when creating GitHub prereleases @ioanbudea-OAI
- #54737 Enable BuildBuddy for voice release builds @anp-oai
- #54739 Close arg0 lock files before removing temporary directories @dkovalenko-oai
- #54741 Gate the file-copy extension behind
multi_env_copy_file@anp-oai - #54742 Render slash command prefixes as composer prompt markers @bc-openai
- #54754 Reduce memory overhead in tool JSON schemas @charliemarsh-oai
- #54761 Upgrade
zipto 9.0.0 and update plugin archive extraction @anp-oai - #54763 Stop applying macOS background priority to managed daemons @bc-openai
- #54766 Defer unknown TUI config fields to the shared strict-config policy @etraut-openai
- #54776 Support typed content in contextual prompt fragments @pakrym-oai
- #54930 Add negotiated zstd compression to app-server WebSockets @thorvald-oai
- #54945 Share additional tool declarations across response item clones @charliemarsh-oai
- #54946 Preserve model catalog caches across header credential rotation @hlevy-openai
- #54949 Gate app-server WebSocket compression behind a feature flag @thorvald-oai
- #54961 Allow agent messages to wake idle root sessions behind a feature flag @alishobeiri-oai
- #55144 Add observation-only model request lifecycle hooks @vivi
- #55149 Prune unused standalone releases after successful installation @etraut-openai
- #55226 Bucket admitted Guardian request metrics by input size @ioanbudea-OAI
- #55227 Allow plus signs in metric tags @swastik-oai
- #55234 Record Guardian sampling retries, attempts, and delivery outcomes @ioanbudea-OAI
- #55237 Add Guardian review routing and cached score metrics @ioanbudea-OAI
- #55244 Batch thread history materialization into SQLite @jif-oai
- #55252 Preserve rollout access metadata across compression and restoration @jif-oai
- #55255 Unload idle ephemeral composer prediction threads without delay @jif-oai
- #55261 Share dynamic tool specifications across turn snapshots @charliemarsh-oai
- #55262 Stop memory dual-write when v2 is selected @jif-oai
- #55263 Start dormant MCP servers for hook calls @charliemarsh-oai
- #55265 Avoid cloning the full catalog for model metadata lookups @charliemarsh-oai
- #55270 Honor per-thread unload delays in app-server @jif-oai
- #55274 Stabilize daemon reconnect and Rosetta package startup tests @jif-oai
- #55278 Fall back when macOS rejects high stdio descriptors @chrishayduk-oai
- #55283 Avoid cloning events in the app-server thread listener @charliemarsh-oai
- #55287 Track MCP enterprise auth cancellation across config reloads @jif-oai
- #55288 Recheck EMA request authority at HTTP boundaries @jif-oai
- #55293 Keep only the latest adjacent reasoning effort update in requests @felixxia-oai
- #55296 Encapsulate Responses API proxy authentication @ee-oai
- #55297 Add GitHub Actions OIDC token acquisition to the responses API proxy @ee-oai
- #55298 Add renewable federated auth primitives to the Responses API proxy @ee-oai
- #55299 Refresh rejected proxy credentials and back off failed renewals @ee-oai
- #55300 Add one-shot app-server startup configuration discovery @acrognale-oai
- #55301 Reconcile V2 executor plugins with cloud catalogs @TAFOYA-OAI
- #55302 Stop the closest remote SHA search at zero distance @jif-oai
- #55303 Route skill reads by alias source @TAFOYA-OAI
- #55304 Reject TUI events from a different backend @bc-openai
- #55320 Enable GitHub Actions OIDC authentication in the Responses API proxy @ee-oai
- #55322 Integrate discovery V2 with step-scoped skill catalogs @TAFOYA-OAI
- #55324 Remove thread title generation spinners from the TUI @cconger
- #55327 Add configured thread environment inheritance for subagents @jif-oai
- #55330 Expose skill installations and stabilize package aliases @TAFOYA-OAI
- #55331 Use step environment snapshots for subagent inheritance @jif-oai
- #55334 Enable enterprise-managed authorization for MCP connections @jif-oai
- #55339 Add experimental
thread/samplerequests to the app server @liame-oai - #55342 Consolidate cached and fetched Codex manual handling @kkahadze-oai
- #55347 Add Guardian retry metrics and preserve turn attribution @ioanbudea-OAI
- #55351 Reduce path storage in the file-search index @charliemarsh-oai
- #55355 Remove the long-thread accuracy warning after compaction @asohrabi-oai
- #55357 Prepare skill catalogs before building step tools @TAFOYA-OAI
- #55358 Add a shared cleanup lock guard for local log directories @dkovalenko-oai
- #55365 Import only the continuation of backgrounded Claude sessions @jgrodman-arch
- #55366 Support catalog templates for approved command prefixes @dylan-hurd-oai
- #55368 Enable incremental tools by default for Responses Lite @akira-oai
- #55372 Fix recall of command-line initial prompts in the TUI @joesavona
- #55375 Add configured thread environment inheritance for subagents @jif-oai
- #55378 Migrate the Windows MXC sandbox to
mxc-sdk@johnl-oai - #55379 Handle response body failures in OpenAI docs downloads @kkahadze-oai
- #55380 Preserve thread metadata before rollout files are materialized @jif-oai
- #55381 Manage TUI backend sessions independently @bc-openai
- #55384 Reject replaceable symlinks in pre-sandbox executable lookup @keeley-openai
- #55387 Add support for Academic Researchers plans @etraut-openai
- #55388 Mark
transcript_v2as removed @etraut-openai - #55391 Deduplicate native agent messages in Guardian review context @jif-oai
- #55394 Use thread connections for enterprise MCP status listings @jif-oai
- #55395 Roll back interrupted Guardian reviews to preserve evidence @jif-oai
- #55396 Prefetch sibling rollout paths when reading history pages @bz-openai
- #55397 Record OAuth provenance and login identity for account tokens @jif-oai
- #55398 Add wire types for runtime agent registration @cooper-oai
- #55401 Defer environment disconnect notifications until recovery fails @richardopenai
- #55402 Add ephemeral runtime registration and signed assertions @cooper-oai
- #55406 Trace harness-side Noise handshake failures @alishobeiri-oai
- #55407 Clarify API key login and status messages @fcoury-oai
- #55409 Retry TUI startup after a server shutdown refusal @fcoury-oai
- #55410 Track credential sources separately from auth owners @cooper-oai
- #55411 Render async question prompts as Markdown in the TUI @bc-openai
- #55413 Share runtime authentication across requests and credential refreshes @cooper-oai
- #55441 Add cancellation for experimental thread samples @liame-oai
- #55442 Check daemon feature overrides and prompt for mismatch recovery @etraut-openai
- #55456 Support Windows registry overrides for
requirements.toml@johnl-oai - #55463 Add optional MCP disablement for prediction forks and samples @liame-oai
- #55498 Add correlated diagnostics for Noise relay handshakes @virajrai-oai
- #55524 Make the startup migration contention test deterministic @jif-oai
- #55533 Separate Guardian conversation preparation from execution @swastik-oai
- #55545 Improve diagnostics for compressed rollout read failures @jif-oai
- #55546 Add scoped leases for persisted account OAuth grants @jif-oai
- #55547 Ignore the basic-toml advisory in dependency audits @jif-oai
- #55548 Preserve parent history by default in full agent forks @jif-oai
- #55581 Avoid panics after background compaction fails before a checkpoint @jif-oai
- #55587 Allow callers to control prompt cache keys independently of session IDs @rm-openai
- #55591 Measure Guardian approval blocking time per turn @ioanbudea-OAI
- #55593 Reject unpackaged Windows sandbox provisioning clients @chess-oai
- #55596 Rank
$mentions by recent selection frequency @bc-openai - #55597 Extract shared TUI user prompt helpers from IDE context @bc-openai
- #55607 Propagate authentication header failures before sending requests @cooper-oai
- #55616 Update
rustls-webpkiandwebpki-rootslockfile versions @jif-oai - #55620 Move Linux sandbox unit tests into separate files @bolinfest
- #55623 Refactor Guardian v2 Decisions snapshot comparison @swastik-oai
- #55627 Reserve a sibling rollout candidate slot for the first ancestor @bz-openai
- #55631 Add frozen cloud skill snapshots to the app server @fc-oai
- #55633 Treat code-mode collaboration messages as plaintext @hlevy-openai
- #55635 Enable Decisions comparisons for Guardian V2 conversation mode @swastik-oai
- #55636 Add runtime assertion authentication modes and an auth provider @cooper-oai
- #55644 Make pending injections interrupt agent waits and sleep @jif-oai
- #55645 Fix in-process app-server shutdown with full queues @jif-oai
- #55646 Guard auth persistence and reloads against concurrent login changes @jif-oai
- #55652 Search compressed rollouts concurrently @ethernetdan-openai
- #55653 Track code-mode cell lifecycle and result buffering time @euroelessar
- #55657 Add lifecycle hooks for inter-agent messages @euroelessar
- #55666 Omit reasoning and compaction from Decisions snapshot comparisons @swastik-oai
- #55667 Enable app routing for remote curated Agent Plugins @tsarlandie-oai
- #55677 Upgrade the Rust toolchain to 1.99.1 @dkovalenko-oai
- #55680 Recheck account login ownership for enterprise MCP @jif-oai
- #55682 Fix TUI permission selection and session state handling @etraut-openai
- #55685 Add account credential support to EMA token exchange helpers @jif-oai
- #55689 Clean up failed and abandoned marketplace staging directories @dkovalenko-oai
- #55690 Reclaim aged legacy marketplace staging directories @dkovalenko-oai
- #55691 Refine enterprise MCP auth errors and request authority checks @jif-oai
- #55692 Tag tool registration metrics with effective incremental tools mode @akira-oai
- #55693 Use hermetic dsymutil for macOS Bazel builds @dkovalenko-oai
- #55696 Preserve enterprise MCP authorization across runtime refreshes @jif-oai
- #55698 Reuse Codex account grants for enterprise MCP authentication @jif-oai
- #55701 Enable MCP OAuth refresh coordination by default @mzeng-openai
- #55705 Centralize cloud skill cache state under the catalog lock @TAFOYA-OAI
- #55710 Resolve MCP backend identity from runtime events in rollout traces @cassirer-openai
- #55719 Allow unified exec to fall back when credential masking is unavailable @viyatb-oai
- #55723 Avoid redundant clones when sending app-server notifications @charliemarsh-oai
- #55724 Share prepared MCP tool definitions across sessions @charliemarsh-oai
- #55725 Preserve code cell response metadata in rollout traces @cassirer-openai
- #55733 Box session metadata and compaction payloads in
RolloutItem@charliemarsh-oai - #55804 Add a critical-path utility for exclusive duration attribution @taohong339
- #55846 Measure Guardian review latency once with a monotonic clock @ioanbudea-OAI
- #55847 Bound retained turn analytics and clean up closed threads @jif-oai
- #55848 Pause relay test time while inspecting handshake diagnostics @jif-oai
- #55856 Bound managed app-server and updater stderr logging @jif-oai
- #55859 Fix enterprise MCP credential selection and reauthentication @jif-oai
- #55883 Expand enterprise MCP authorization lifecycle test coverage @jif-oai
- #55913 Skip conversation scoring superseded by newer scores and history @jif-oai
- #55923 Preserve thread model settings across resume and revert @etraut-openai
- #55940 Add local diagnostic ZIP exports to the app server @viktor-oai
- #55946 Bound remote installed-plugin inventory pagination @mzeng-openai
- #55954 Separate retained instruction collection from budget policy @ioanbudea-OAI
- #55957 Refresh cloud plugin and skill catalogs after mid-turn auth changes @TAFOYA-OAI
- #55958 Preserve provider model catalogs when refreshes fail @abhinav-oai
- #55965 Add managed Desktop workspace storage requirements @acrognale-oai
- #55968 Back off failed cloud skill and plugin catalog refreshes @TAFOYA-OAI
- #55969 Drain WebSocket responses on mailbox preemption @jif-oai
- #55970 Extract shared message-board code into
codex-message-board@felixxia-oai - #55971 Add storage namespaces for local message boards @felixxia-oai
- #55973 Allow consumers to select message-board tools @felixxia-oai
- #55975 Add an experimental command to migrate NFS databases to DELETE mode @dkovalenko-oai
- #55978 Route SQLite logs to an explicitly configured
log_dir@dkovalenko-oai - #55987 Refresh remote exec-server credentials after unauthorized responses @apanasenko-oai
- #55991 Avoid double-counting retained reasoning in token usage @dkovalenko-oai
- #55993 Preserve per-execution trace context in code-mode stdio callbacks @bschoepke-openai
- #55994 Add a Windows proxy authentication tunnel helper @efrazer-oai
- #56000 Retry proxy CONNECT challenges with Windows authentication @efrazer-oai
- #56001 Support confidential OAuth clients for enterprise-managed MCP auth @jif-oai
- #56003 Scope MITM credential substitution to trusted origins and placeholders @viyatb-oai
- #56006 Assert shell tool overlap directly in the parallelism test @goodman-oai
- #56007 Pause Tokio time in the reused Guardian session test @goodman-oai
- #56008 Add a critical-path timing recorder for direct tool calls @taohong339
- #56011 Keep rollout trace terminal sessions distinct when process IDs are reused @cassirer-openai
- #56018 Avoid nested CLI startup in the MCP OAuth persistence test @goodman-oai
- #56020 Allow thread sampling after failed or interrupted turns @liame-oai
- #56021 Keep slash command prefixes in editable composer text @bc-openai
- #56022 Preserve config overrides across CLI subcommand boundaries @jmickey-oai
- #56023 Group Bedrock API key entry with other AWS sign-in methods @alexsong-oai
- #56024 Limit decoded HTTP/3 response headers in the TCP tunnel @richardopenai
- #56031 Support client Responses API metadata in
thread/sample@liame-oai - #56032 Fix entrypoint lookup in package debug-symbol smoke tests @dkovalenko-oai
- #56033 Enable the Bedrock setup wizard by default @alexsong-oai
- #56036 Add request-scoped OAuth credentials and session lifecycle APIs @smurching-oai
- #56037 Add a channel-backed cloud app-server client @bc-openai
- #56044 Enable executor cleanup hooks with V2 capability discovery @TAFOYA-OAI
- #56049 Support configured credential providers in remote execution @viyatb-oai
- #56055 Require managed configuration from the configured server @smurching-oai
- Save reusable prompts and slash commands in ten numbered
-
ChatGPT for iOS 1.2026.286
New features
- View and stop background commands using the new pill above the composer on supported remote hosts.
- Mention chats from other connected hosts with
@.
Improvements and bug fixes
- A loading indicator now shows when saved messages are refreshing.
- Activity groups are cleaner, and you can open images inspected by Codex on demand.
- Unanswered questions remain available after a turn finishes and when reopening a chat.
- More reliable replies to questions while another prompt is starting or finishing.
- Autocomplete suggestions appear as each source loads, without waiting for slower sources.
- Usage-limit explanations and reset times now appear directly in the chat.
- Fixed prompts incorrectly appearing to fail after a response timeout.
- Fixed extra lines in diffs after repeated edits to the same file.
- Images in responses open in the full-screen gallery, and attachment removal targets the correct image.
- The voice button returns after a call ends, so you can start another without reopening the chat.
-
Codex CLI 0.163.0
$ npm install -g @openai/codex@0.163.0View details
New Features
- Open
/configto search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429) - Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)
- Configure a leader key in
/keymap. The default isCtrl+X, shortcut hints stay open until you choose or cancel, and voice mute moves toF9. (#52273) - Restart a managed background server from
/daemon. Codex warns about work the restart could interrupt, then reconnects automatically. (#53173) - Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups. (#52245)
- Daybreak is enabled by default for eligible accounts.
codex execcan also select it with an OpenAI API key when the server offers access. (#53701, #53717)
Bug Fixes
- Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)
- The network proxy now checks permission before a DNS lookup, rejects duplicate
Hostheaders, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506) - Return to an existing side conversation with
/sideafter switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436) - On Windows,
Ctrl+VandShift+Insertpaste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453) - Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)
codex execno longer prints the same file diff again after an unrelated command. (#53444)
Documentation
- Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations. (#51768)
- Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering. (#52610)
Chores
- Codex now uses its standard shell executor and no longer bundles a patched
zsh. Configurations using the retired shell flags receive a migration notice. (#52160, #52213) - Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs. (#52178)
Changelog
Full Changelog: rust-v0.162.0...rust-v0.163.0
- #51539 Add completion-aware realtime attachment and session-scoped detach @zahan-oai
- #51547 Add a Windows MXC sandbox opt-out @iceweasel-oai
- #51556 Complete dynamic tool lifecycles on cancellation @mikelam-oai
- #51575 Expose package assembly helpers and support gzip DotSlash artifacts @bolinfest
- #51595 Add thread ID exclusions to
thread/list@btraut-openai - #51602 Distinguish thread listing failures from exhausted history @btraut-openai
- #51611 Signal abandonment of unanswered MCP elicitations @nicksteele-oai
- #51627 Stabilize Guardian snapshot prefixes by separating assistant context @jif-oai
- #51642 Fix retained context handling for typed section content @jif-oai
- #51650 Require hostname authorization before proxy DNS lookups @jif-oai
- #51651 Persist Guardian review failures for reports across restarts @jif-oai
- #51652 Record telemetry for AGENTS.md changes made by apply_patch @jif-oai
- #51678 Move Windows sandbox tests into a dedicated integration binary @jif-oai
- #51683 Roll back stale Guardian reviews before reusing reviewer history @olliem-oai
- #51689 Wait for helper completion in HTTP header cancellation tests @jif-oai
- #51690 Add a feature flag for Code Mode tool description ordering @swastik-oai
- #51704 Honor tool-description-first ordering in Code Mode @swastik-oai
- #51710 Fix a discovery race in the external auth refresh test @jgershen-oai
- #51734 Load persisted sender context for Guardian reviews @jif-oai
- #51755 Reuse MCP handler metadata for cache comparisons @owenlin0
- #51761 Reduce tool metadata cloning in the code-mode runtime @akira-oai
- #51768 Expand OpenAI Docs migration guidance to the GPT-6 model family @kkahadze-oai
- #51775 Prevent recursive Tokio tracing in telemetry and SQLite logs @zbarsky-openai
- #51786 Preserve sandbox overrides across execution requests @iceweasel-oai
- #51794 Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock @celia-oai
- #51800 Remove duplicate field initializers in extension registry tests @anp-oai
- #51808 Preserve diagnostic reasons for MCP user verification failures @berkdeniz-oai
- #51812 Enable instant interrupts by default @pakrym-oai
- #51819 Migrate the MXC sandbox to the 1.0.0 SDK @iceweasel-oai
- #51822 Avoid sharing violations when repairing Windows runtime ACLs @johnl-oai
- #51823 Share MCP binding tool metadata with prepared calls @owenlin0
- #51828 Add policy-based file contents integrity checks @iceweasel-oai
- #51831 Add MXC sandbox integrity dependency and policy preparation @iceweasel-oai
- #51835 Enable code mode interruption by default @won-openai
- #51840 Add a bubblewrap backend for sandbox integrity checks @iceweasel-oai
- #51841 Add a macOS Seatbelt backend for sandbox integrity @iceweasel-oai
- #51842 Add a sandbox integrity runner with outcome and timing metrics @iceweasel-oai
- #51843 Run sandbox integrity checks before commands and filesystem operations @iceweasel-oai
- #51847 Preserve Cargo package names in Bazel Rust builds @dkovalenko-oai
- #51848 Align Bazel release builds with Cargo and fix platform compatibility @dkovalenko-oai
- #51849 Fix package smoke tests for Cargo and Bazel debug symbols @dkovalenko-oai
- #51850 Add Bazel release staging archives @dkovalenko-oai
- #51855 Add Bazel support to the Codex package build action @dkovalenko-oai
- #51856 Build Bazel release artifacts alongside Cargo artifacts @dkovalenko-oai
- #51857 Add an app-server prompt prefix compatibility test @jif-oai
- #51865 Use readable plugin mentions without suppressing same-name skills @canvrno-oai
- #51866 Preserve line breaks and links in multiline async questions @pash-openai
- #51868 Record tool registration metrics for each sampling request @akira-oai
- #51872 Keep global app-server config independent of the launch directory @etraut-openai
- #51884 Add experimental prediction forks that inherit parent context @liame-oai
- #51890 Add the missing
mxc-sdkUTF-8 resource patch for Bazel @iceweasel-oai - #51892 Preserve tool call completeness when recorded arguments are truncated @ningyi-oai
- #51893 Record metrics for incremental tool updates @akira-oai
- #51895 Report specific reasons for WebSocket continuation failures @pakrym-oai
- #51896 Preserve native errors in Windows sandbox ACL diagnostics @alishobeiri-oai
- #51897 Use a dedicated matcher for network domain policies @rafael-oai
- #51908 Honor the user input setting for asynchronous questions @mandal-OAI
- #51930 Support model-specific function description prefixes @tz-openai
- #51963 Attribute compaction analytics to the correct voice session @reia-oai
- #51974 Log Windows sandbox availability and backend selection @iceweasel-oai
- #52034 Preserve agent state when unloading idle multi-agent v2 children @jif-oai
- #52040 Add regression coverage for cancelled agent reloads @jif-oai
- #52048 Cover instant interruption in steered-input persistence tests @jif-oai
- #52061 Run Guardian conversation classifiers concurrently and preserve action order @felixxia-oai
- #52062 Add scenario coverage for worker context across idle eviction @jif-oai
- #52065 Require assessment text in the Guardian parser @ioanbudea-OAI
- #52081 Fix idle cleanup for disconnected multi-agent v2 children @jif-oai
- #52119 Expose originating tool call metadata in command environments @leo-oai
- #52160 Remove the patched zsh shell execution backend @jif-oai
- #52164 Make environment context date and timezone configurable @surajs-oai
- #52176 Show AWS GovCloud guidance at startup and remember acknowledgment @jackz100
- #52177 Set a User-Agent for package archive downloads @bolinfest
- #52178 Strip symbols from source-built release package binaries @bolinfest
- #52182 Expose a verified sandbox launcher to local MCP servers @bolinfest
- #52183 Add optional descriptions to agent message board channels @jif-oai
- #52184 Preserve side conversations across thread navigation @etraut-openai
- #52193 Enforce managed MXC requirements on Windows @iceweasel-oai
- #52195 Track source attribution for individual context parts @tz-openai
- #52200 Allow plugin toggles while searching and preserve filters on refresh @fcoury-oai
- #52203 Expose Codex lifecycle status in iTerm2 sessions @fcoury-oai
- #52213 Stop bundling patched zsh in Codex packages @jif-oai
- #52215 Enforce application network policy in standalone MCP commands @lsingh-oai
- #52220 Add configurable default plugin activation policy @stevenlee-oai
- #52223 Enforce application network policy for daemon updates @jackz100
- #52225 Fix config rebuild call in the Windows MXC preference test @virajrai-oai
- #52226 Include foreground activity in iTerm2 session status @fcoury-oai
- #52228 Honor API-key feature gates in TUI Daybreak selection @julee-oai
- #52234 Support request IDs in exec-server WebSocket handshakes @mattj-openai
- #52235 Recover gRPC code-mode sessions after missing-session errors @surajs-oai
- #52241 Preserve subagent capabilities independently of forked history @anp-oai
- #52245 Enable parallel execution for read-only tools @zamoshchin-openai
- #52250 Add opt-in Guardian trust for orchestrator connector identities @ankushg
- #52256 Normalize formatting in docs, web assets, and sample scripts @anp-oai
- #52268 Preserve large arguments in executed tool call metadata @ningyi-oai
- #52270 Enable text selection in the fullscreen TUI footer @fcoury-oai
- #52273 Add configurable persistent leader shortcuts to the TUI @fcoury-oai
- #52274 Add structured tracing for Guardian reviews and background scoring @ioanbudea-OAI
- #52277 Preserve UTF-8 byte semantics in network domain matching @rafael-oai
- #52278 Honor custom OTLP metrics exporters when analytics is disabled @jackz100
- #52288 Remove duplicate field initializers from extension registry tests @anp-oai
- #52295 Emit one developer notice per incremental namespace update batch @akira-oai
- #52299 Make Bazel release jobs advisory @anp-oai
- #52302 Add opt-in credential masking for proxied sandboxed sessions @winston-openai
- #52304 Persist remote-control RPC preferences in managed daemon settings @etraut-openai
- #52325 Track history initialization in Responses turn metadata @anp-oai
- #52329 Remove per-content source attribution metadata @anp-oai
- #52330 Clamp wrapped source ranges before remapping terminal hyperlinks @bc-openai
- #52337 Add durable thread read state with revision-checked updates @btraut-openai
- #52350 Expose experimental durable thread read state in the app server @btraut-openai
- #52363 Expand realtime v3 voice support @jacksonmoody-oai
- #52381 Preserve per-session routing for gRPC code mode @cassirer-openai
- #52384 Notify subscribers when thread read state changes @btraut-openai
- #52395 Add experimental app-server thread read-state updates @btraut-openai
- #52418 Avoid an extra blank quote line when pasting text with a trailing newline @bc-openai
- #52535 Add opt-in history prefix preservation for full agent forks @jif-oai
- #52557 Forward clipboard copies to the terminal in Herdr sessions @fcoury-oai
- #52568 Expose message board permissions and structured denials @jif-oai
- #52591 Fix races in remote environment and session replacement tests @jif-oai
- #52608 Upgrade
hyperto 1.11.1 and test connection closure @jif-oai - #52610 Align Linux sandbox names and docs with bubblewrap and seccomp @bolinfest
- #52621 Add template setup for local agent message boards @jif-oai
- #52629 Consolidate local message board storage helpers @jif-oai
- #52635 Skip background workspace routing reads without ChatGPT auth @joesavona
- #52637 Add experimental thread item lookup by ID @btraut-openai
- #52640 Count interrupted goal continuations toward the no-activity limit @etraut-openai
- #52648 Limit daemon feature compatibility checks to explicit CLI overrides @etraut-openai
- #52652 Bound local exec-server output draining after process exit @jif-oai
- #52659 Add an opt-in feature for subagent model context defaults @hlevy-openai
- #52660 Handle completion events in either order in shell snapshot tests @jif-oai
- #52661 Prevent brokered credential aliases from bypassing MITM hooks @viyatb-oai
- #52671 Add retention annotations to submitted tool outputs @won-openai
- #52674 Move the exec-server test fixture into shared test support @anp-oai
- #52676 Refresh persisted capability roots from owner-provided configuration @teddywyly-oai
- #52679 Add timeout-aware exec-server configuration reads @hlevy-openai
- #52681 Reject reserved Serde JSON keys in code mode @cassirer-openai
- #52682 Validate Windows sandbox accounts before password repair @zm-oai
- #52685 Preserve code mode cancellation during output serialization @cassirer-openai
- #52686 Add opt-in retention for turn tool outputs @won-openai
- #52689 Forward per-turn Cyber access programs to Guardian @daneschneider-oai
- #52696 Fix marketplace path matching for Windows junctions @zm-oai
- #52700 Update the exec-server stable compatibility baseline to Codex 0.162.1 @iceweasel-oai
- #52702 Retry bootstrap GETs through the system proxy after request failures @abhinav-oai
- #52707 Migrate the Windows MXC sandbox to split MXC crates @iceweasel-oai
- #52721 Explain session creation failures during server shutdown @etraut-openai
- #52723 Add opt-in gRPC over stdio for the code-mode host @cconger
- #52724 Add observers for initial exec-server connection attempts @aaronl-openai
- #52725 Report terminal program status with OSC 7501 @fcoury-oai
- #52736 Allow model catalogs to override incremental tool notices @akira-oai
- #52742 Add opt-in output token replay for OpenAI requests @pakrym-oai
- #52748 Make code-mode
exit()stop the entire cell @cconger - #52756 Classify voice session failures and record terminal outcomes @bc-openai
- #52778 Make pinned transcript prompts clickable @fcoury-oai
- #52825 Report exec runtime resets before accepting further requests @JenZhao
- #52923 Stabilize the realtime steering timeline test @anp-oai
- #52937 Retain client-marked tool outputs across compaction @won-openai
- #52946 Keep agent command center rows stable across progress updates @fcoury-oai
- #52952 Verify reset notification during code-mode host recovery @etraut-openai
- #52959 Reduce stack usage in async TUI tests @jif-oai
- #52964 Defer owned transcript redraws during raw paste bursts @etraut-openai
- #52967 Reuse and prewarm the WSL clipboard text reader @etraut-openai
- #52968 Keep startup modals protected when terminal input draining times out @etraut-openai
- #52972 Upgrade
rmcpto3.5.1and harden lifecycle tests @alishobeiri-oai - #52990 Add a searchable
/configpreferences panel to the TUI @fcoury-oai - #53049 Add connection-bound reply handles for app-server requests @bc-openai
- #53109 Handle broken pipes gracefully in plugin list output @fcoury-oai
- #53148 Fix startup draft recovery for pending Vim Replace keys @etraut-openai
- #53150 Restore thread-owned permissions on cold resume @etraut-openai
- #53152 Allow selecting and copying TUI turn tips @etraut-openai
- #53153 Show subagent navigation shortcuts in TUI help @etraut-openai
- #53155 Keep remote app-server events deliverable during shutdown @etraut-openai
- #53156 Simplify the custom terminal drawing API @bc-openai
- #53173 Allow restarting managed background servers from the TUI @etraut-openai
- #53201 Keep agents navigation available after a thread is archived @etraut-openai
- #53224 Support Windows clipboard text paste shortcuts in the TUI @etraut-openai
- #53331 Finish remote exec cleanup when output streams remain open @jif-oai
- #53339 Test final polling of remote processes with open output streams @jif-oai
- #53358 Remove selected protocol, apply-patch, MCP, and TUI tests @vb-openai
- #53369 Allow turns when the agent message board is unavailable @jif-oai
- #53382 Ignore the unsafe-libyaml advisory in dependency audits @swastik-oai
- #53389 Use cached login credentials for Guardian decisions @swastik-oai
- #53393 Distinguish Guardian parent-compaction failure reasons @ioanbudea-OAI
- #53400 Add explicit local board connections with fixed runtime access @jif-oai
- #53412 Isolate arg0 helper directories by operating system @jif-oai
- #53419 Restore saved thread permissions during configuration loading @jif-oai
- #53424 Add regression coverage for network grants on cold thread resume @jif-oai
- #53426 Preserve Windows runtime registration failure diagnostics @zm-oai
- #53429 Apply configuration toggles live and improve settings navigation @fcoury-oai
- #53436 Route TUI request replies to their originating connection and thread @bc-openai
- #53438 Stop identifying Apple Terminal from
TERM_SESSION_ID@etraut-openai - #53440 Preserve status line accents on 16-color terminals @etraut-openai
- #53443 Use local MSVC toolchains for native Windows Bazel tests @etraut-openai
- #53444 Suppress repeated turn diffs in
codex exechuman output @fcoury-oai - #53451 Treat incomplete responses as terminal errors @jif-oai
- #53452 Close input admission while a turn finishes recording @etraut-openai
- #53453 Prefer the Windows clipboard and bound copy attempts on WSL @etraut-openai
- #53485 Update
quinn-prototo 0.11.18 @smurching-oai - #53496 Preserve pending Effects toggles across save refreshes @fcoury-oai
- #53506 Reject duplicate Host headers in the network proxy @jfoo-oai
- #53556 Deduplicate TUI modifier handling and terminal color caching @bc-openai
- #53595 Add async compaction feature configuration @rka-oai
- #53606 Prepare compaction helpers for background requests @rka-oai
- #53614 Add infrastructure for speculative remote V2 compaction @rka-oai
- #53617 Allow hiding native tools while retaining the multi-agent V2 runtime @jif-oai
- #53620 Reuse background results for remote V2 compaction @rka-oai
- #53622 Preserve remote exec output until it is collected @jif-oai
- #53628 Record truncation metrics for accepted Guardian review inputs @ioanbudea-OAI
- #53631 Materialize the thread before testing a discovered daemon restart @jif-oai
- #53632 Stabilize write ordering in the shared message board scenario @jif-oai
- #53633 Add an environment API key fallback for Guardian Decisions @swastik-oai
- #53654 Keep spawned children provisional until the spawn result returns @jif-oai
- #53657 Share hook configuration across cloned hook views @jif-oai
- #53660 Extract shared multi-agent v2 thread spawning @jif-oai
- #53668 Improve remote exec-server test startup diagnostics @jif-oai
- #53670 Account for token usage from incomplete responses @jif-oai
- #53672 Keep discovered Apps tools available during startup recovery @jif-oai
- #53673 Publish Rust releases with the GitHub CLI @jif-oai
- #53678 Preserve inherited context in prediction forks @keyz
- #53689 Constrain API-key model access programs to server support @julee-oai
- #53691 Account for replay caches in encrypted compaction budgets @ioanbudea-OAI
- #53693 Add keyboard selection support to the transcript view @fcoury-oai
- #53698 Interrupt and drain canceled classifier responses before socket reuse @felixxia-oai
- #53699 Cancel Guardian V2 classifications that exceed the tool-call lag window @felixxia-oai
- #53701 Enable CLI Daybreak by default and enforce background-turn eligibility @julee-oai
- #53706 Preserve URLs and email addresses during external agent migration @jif-oai
- #53709 Separate MCP sandbox policy from launcher metadata @bolinfest
- #53717 Enable Cyber access programs for API-key sessions by default @julee-oai
- #53723 Wire V2 capability discovery through exec-server RPC @TAFOYA-OAI
- Open
-
GPT-5.5 retirement in Codex
Effective October 14, 2026, at noon PDT (19:00 UTC), GPT-5.5 retires from Codex for users signed in with ChatGPT. The OpenAI API and Codex sessions authenticated with an API key aren’t affected.
Use GPT-6.1 Sol (
gpt-6.1-sol) when available to your plan and client. Update workspace defaults, saved model settings, managed configurations, custom agents, scheduled tasks, and scripts that still selectgpt-5.5.See GPT-5.5 retirement for plan-specific replacements and workspace model availability for administrator guidance.
-
ChatGPT for iOS 1.2026.279
New features
- File citations now open directly in the file viewer.
- Collapse the entire Projects section to reach recent tasks faster.
Improvements and bug fixes
- Faster task and thread loading, with saved task names and recent messages visible while reconnecting.
- Markdown now renders in sent prompts, with questions quoted above your replies.
- Queued messages appear immediately, with more reliable handling during turn interruptions.
- Markdown files open in rendered view by default.
- Clearer skill names and improved autocomplete after punctuation.
- Fixed missing Rename prompts and usage percentages on iPad.
- Plan mode stays selected when returning to the task list.
- Custom permission mode now respects project-defined permissions.
- Improved task widget reliability, including when local authentication is enabled for Codex.
- Usage widgets adapt to accounts with only a weekly limit.
- Connection errors offer a Retry action without hiding saved messages.
- Fixed raw image URLs appearing in image-only messages.
-
Composer predictions in Codex
Composer predictions adds autocomplete-style suggestions for your next message in the Codex desktop app. After Codex responds, it uses the current conversation to suggest a follow-up prompt in the message box. Press Tab to accept the suggestion as an editable draft, or type your own message. Accepting a prediction doesn’t send it for you.
The feature is available in beta to users aged 18 and older with personal ChatGPT Pro plans in supported regions, in local and SSH threads with GPT-6 Astra and GPT-6.1 Sol.
Learn more about composer predictions.
-
Codex CLI 0.162.1
$ npm install -g @openai/codex@0.162.1View details
Bug Fixes
- Fixed a TUI crash when asynchronous questions contain multiple lines, preserving line breaks and complete hyperlink destinations. (#51866)
- Fixed startup failures caused by differences between a running background server's feature settings and CLI defaults. Compatibility checks now apply only to explicit command-line feature overrides. (#52648)
Full Changelog: rust-v0.162.0...rust-v0.162.1
-
Codex app 26.1007
Performance improvements and bug fixes
- Fixed queued messages getting stuck on Sending and restored Steer in secondary app windows.
- Improved scrolling and navigation between files in the Changes panel.
- Added clearer recovery guidance when a tool call needs approval but the chat’s permissions prevent approval requests, with a link to those permissions when available.
-
GPT-6.1 Sol Ultrafast in Codex and ChatGPT Work
Ultrafast mode speeds up token generation with GPT-6.1 Sol in Codex and ChatGPT Work.
Ultrafast is available on Pro $500 and eligible Enterprise and Edu plans. Enterprise access is off by default; workspace owners must enable it. GPT-6.1 Sol Ultrafast supports inference residency in the United States and Europe (EEA + Switzerland).
See Ultrafast mode for plan and workspace requirements, Models for model guidance, and Pricing for usage and credit rates.
-
Codex CLI 0.162.0
$ npm install -g @openai/codex@0.162.0View details
New Features
- Add tools for creating and listing managed Git worktrees from trusted local projects when the worktrees feature is enabled. (#50148)
- Pin tasks in the agent Command Center with
pand keep them in a shared Pinned group when supported by the server. (#51500) - Navigate and copy transcript blocks with
/copy, useCtrl+Insertto copy selections, and tune mouse-wheel scrolling withtui.mouse_scroll_speed. (#50434, #50215, #50209) - Make URLs clickable in approval headers, questions, MCP prompts, warnings, banners, and verification prompts, including when links wrap across lines. (#51439, #51449, #51450, #51451, #51452, #51458)
- Configure live web access and remote compaction capabilities for custom Responses-compatible model providers. (#50459)
- Add JavaScript helpers for streaming promise results as they settle, plus opt-in ranked tool search in Code Mode. (#51126, #51209)
Bug Fixes
- Respect server model and reasoning-summary defaults for new TUI threads while retaining explicit launch overrides. (#50013, #50811, #50913)
- Preserve existing CRLF line endings in
apply_patchupdates without requiring an opt-in. (#51203) - Fix Linux sandbox startup with multiple denied files, reject writable sandbox-construction executables, and keep ripgrep configuration from weakening deny-glob masks. (#50059, #51211, #51407, #51527)
- Restore ordinary drive-letter file access on Windows 10 and match Windows sandbox temp permissions to the child process environment. (#51511, #51512)
- Honor server
Retry-Afteradvice for retryable Responses and WebSocket failures. (#50418, #51440) - Fix archive checksum verification when installing through Windows PowerShell with PowerShell 7 module paths present. (#51257)
Chores
- Publish a signed PowerShell installer with Windows releases. (#51158)
- Keep older stable releases and prereleases from replacing newer stable download targets or installer aliases. (#51186, #51425)
Changelog
Full Changelog: rust-v0.161.0...rust-v0.162.0
- #50013 Honor server model defaults when starting fresh TUI threads @etraut-openai
- #50018 Use descriptor-safe helpers for executable test fixtures @jif-oai
- #50019 Protect the guardian decisions API key from environment forwarding @swastik-oai
- #50026 Preserve user restrictions in Guardian handoff context @jif-oai
- #50035 Follow MCP tool pagination in legacy protocol mode @jif-oai
- #50039 Keep transcript Find results readable after closing the query @fcoury-oai
- #50045 Keep transcript Find expansion scoped to the current match @fcoury-oai
- #50046 Stabilize Windows voice build cache keys across tool reinstalls @anp-oai
- #50050 Keep plugin and skill snapshots scoped to each step @sayan-oai
- #50052 Preserve question context in recovered TUI answer drafts @imac-oai
- #50054 Check token estimate filtering directly on the tracing subscriber @tamird
- #50058 Upgrade Windows bindings to
windows-sys0.61.2 @tamird - #50059 Fix Linux sandbox startup with multiple denied files @yuzhu-oai
- #50066 Add a bounded Decisions transport for Guardian comparison classification @swastik-oai
- #50082 Enable dynamic tool inheritance for fresh V2 subagents @ke-oai
- #50083 Add paginated reverse lookup for thread attachments @joeytrasatti-openai
- #50087 Preserve queued agent mail across session eviction @jif-oai
- #50093 Prevent shared instruction providers from delegating to themselves @bryanashley
- #50094 Add attachment owner lookup to the app-server @joeytrasatti-openai
- #50099 Add opt-in Decisions comparison for Guardian V2 @swastik-oai
- #50105 Consolidate chat composer footer logic in
footer_state@imac-oai - #50109 Keep fullscreen prompts bounded and scrollable @imac-oai
- #50112 Centralize TUI loading glyphs and frame scheduling @imac-oai
- #50113 Add a native gRPC client for cloud thread resume and attach @bc-openai
- #50128 Expose the model selected for a running turn's next step @sayan-oai
- #50129 Preserve Windows environment variables for remote MCP servers @aidanv-oai
- #50131 Add opt-in JSON diagnostics for TCP tunnels @richardopenai
- #50140 Use the server permission catalog for TUI permission shortcuts @etraut-openai
- #50148 Add managed worktree tools to the TUI @bc-openai
- #50162 Bound in-flight file opens in exec-server @anp-oai
- #50166 Upgrade
ageto 0.12.1 and remove the obsolete advisory exception @michaelm-openai - #50177 Enable writable file streaming in exec-server @anp-oai
- #50183 Add
dotsto issue labeler guidance @etraut-openai - #50189 Replace the Figma OAuth exception with Mercado Pago @mzeng-openai
- #50199 Restore the account email in
/statusafter account updates @etraut-openai - #50200 Report the configured TUI mode in
codex doctor@etraut-openai - #50207 Release stable Markdown tables into scrollback during streaming @etraut-openai
- #50209 Make transcript mouse scroll speed configurable @etraut-openai
- #50215 Support Ctrl+Insert for copying TUI selections @etraut-openai
- #50216 Use the shared text editor for command-center task renaming @bc-openai
- #50219 Bound tmux option probes to one second @etraut-openai
- #50273 Record Guardian V2 Decisions agreement and latency metrics @swastik-oai
- #50339 Add end-to-end coverage for MCP sandbox state enforcement @bolinfest
- #50345 Keep the subagent picker consistent with thread archive state @etraut-openai
- #50348 Back off automatic remote control reconnects with jitter @cooper-oai
- #50354 Skip unrelated subtrees during config alias normalization @btraut-openai
- #50359 Render ANSI styles in TUI hook system messages @etraut-openai
- #50360 Remove initial messages from session configuration events @owenlin0
- #50375 Use printable ASCII terminal titles under GNU Screen @imac-oai
- #50380 Fix thread unloading after disconnect during MCP startup @yuzhu-oai
- #50384 Allow opting into 16 KiB ARM64 code pages for macOS signing @chess-oai
- #50389 Honor configured keybindings before transcript navigation @etraut-openai
- #50396 Honor pager bindings for transcript page keys @bc-openai
- #50402 Consolidate command execution output into
aggregated_output@owenlin0 - #50416 Clarify Git worktree choices for new and forked conversations @bc-openai
- #50418 Honor Retry-After headers in failed Responses events @anp-oai
- #50427 Cap persisted command output in paginated history at 64 KiB @owenlin0
- #50431 Preserve terminal hyperlinks in agents overview previews @bc-openai
- #50433 Allow API-key accounts to use Daybreak in the TUI @etraut-openai
- #50434 Add keyboard copy selection to the owned transcript @bc-openai
- #50435 Persist additional tool definitions in rollout history @pakrym-oai
- #50437 Add a CLI command to uninstall the legacy Windows sandbox @chess-oai
- #50441 Support ordered response items in world-state context updates @pakrym-oai
- #50442 Preserve native USD amounts in thread usage responses @asohrabi-oai
- #50443 Stabilize paused-time code-mode service tests @seanh-oai
- #50445 Assert that only direct tool calls emit timing events @seanh-oai
- #50446 Bundle rollout attachments into a gzip tar archive @dkovalenko-oai
- #50447 Remove the provider capability gate for tool namespaces @pakrym-oai
- #50454 Measure rollout persistence size reductions @owenlin0
- #50458 Truncate oversized MCP results in paginated thread history @owenlin0
- #50459 Add capability overrides for custom model providers @celia-oai
- #50462 Populate thread previews from delegated task inputs @bc-openai
- #50464 Add the
incremental_toolsfeature flag @pakrym-oai - #50465 Retry registry authentication outages and jitter executor reconnects @apanasenko-oai
- #50467 Copy transcript selections as literal text while preserving rich HTML @fcoury-oai
- #50470 Account for JSON overhead when truncating MCP tool results @owenlin0
- #50472 Enable Ultrafast service tiers for Amazon Bedrock Astra models @celia-oai
- #50477 Use the app-server default output cap for TUI workspace commands @etraut-openai
- #50480 Skip managed config loading for registered Windows sandbox refreshes @zm-oai
- #50499 Include installer stderr in daemon update failures @etraut-openai
- #50503 Use Enter to accept transcript Find results and Escape to cancel @fcoury-oai
- #50504 Center TUI confirmations over their retained backdrop @bc-openai
- #50505 Keep Command Center selection adjacent after task removal @bc-openai
- #50507 Record Windows sandbox service stop diagnostics @zm-oai
- #50510 Require GovCloud guidance acknowledgment after Bedrock setup @jackz100
- #50516 Add scenario coverage for remote
/compactcontext preservation @pakrym-oai - #50525 Reject unknown TUI keys in strict config validation @etraut-openai
- #50531 Persist realtime transcript tails before closure without inference @guinness-oai
- #50536 Keep shared MCP types stable in Code Mode exec descriptions @aibrahim-oai
- #50540 Send incremental tool catalog updates in Responses Lite @pakrym-oai
- #50546 Keep MCP resource helpers available in code mode @aibrahim-oai
- #50555 Skip daemon auto-start for Windows-mounted WSL homes @etraut-openai
- #50558 Avoid reading the current directory when resolving absolute paths @etraut-openai
- #50559 Distinguish daemon release identity from executable contents @etraut-openai
- #50562 Keep Code Mode tool discovery guidance stable across catalog changes @aibrahim-oai
- #50564 Allow transcript selection and copying while bottom modals are open @etraut-openai
- #50687 Keep third-party tools deferred in strict Code Mode Only @aibrahim-oai
- #50695 Preserve local Markdown link labels in the TUI @bc-openai
- #50700 Let the transport create the Windows remote-control socket directory @etraut-openai
- #50720 Decode Windows Terminal's mapped Shift+Enter sequence @bc-openai
- #50727 Show model and reasoning effort near the top of task details @etraut-openai
- #50741 Keep environment-backed tools exposed across readiness changes @won-openai
- #50756 Show unavailable slash commands when searched in side conversations @bc-openai
- #50764 Allow
/archivewhile a turn is running @bc-openai - #50781 Restrict TUI MCP startup notifications to owned threads @etraut-openai
- #50782 Retry Windows daemon release publication on transient file locks @etraut-openai
- #50786 Remember Command Center grouping across launches @bc-openai
- #50788 Open slash commands from empty drafts in Vim Normal mode @bc-openai
- #50802 Fall back to mklink when Windows daemon junction updates are denied @etraut-openai
- #50803 Use the managed daemon for eligible remote-control launches @etraut-openai
- #50804 Preserve review lifecycle ordering on failure @etraut-openai
- #50808 Prune TUI snapshots and consolidate behavior tests @etraut-openai
- #50811 Honor server reasoning summary defaults in new TUI threads @etraut-openai
- #50913 Use server model defaults for connected TUI fresh starts @etraut-openai
- #50940 Recover malformed Windows deny-read ACL state safely @zm-oai
- #50962 Gate stable environment tool exposure behind a feature flag @aibrahim-oai
- #50964 Track inference tool changes in turn analytics @aibrahim-oai
- #50977 Isolate tracing in the strict third-party tool deferral test @alishobeiri-oai
- #51061 Gate Guardian continuation tests on classifier request capture @jif-oai
- #51063 Honor prior cancellation before starting Codex delegates @jif-oai
- #51064 Ignore stale refresh responses in agents overview tests @jif-oai
- #51065 Scope Guardian V2 response timing to snapshot sampling @swastik-oai
- #51067 Use issuing-step context for Guardian MCP elicitation reviews @jif-oai
- #51070 Preserve trusted-tool context in Guardian Decisions requests @swastik-oai
- #51117 Install full context in compaction replacement history @pakrym-oai
- #51119 Clarify incremental tool namespace updates in Responses Lite @akira-oai
- #51126 Add promise settlement streaming helpers to code mode @cconger
- #51133 Allow Guardian Decisions to fall back to
OPENAI_API_KEY@swastik-oai - #51137 Recover Guardian reviews from parent checkpoints @felixxia-oai
- #51139 Force fresh Guardian sessions for parent-checkpoint recovery @felixxia-oai
- #51140 Isolate Guardian checkpoint recovery flags per review attempt @felixxia-oai
- #51156 Send base instructions as Responses input messages @pakrym-oai
- #51157 Enforce required environment skills before model inference @anp-oai
- #51158 Sign the PowerShell installer in Windows releases @chess-oai
- #51184 Remove obsolete Guardian thread-context enables from tests @felixxia-oai
- #51185 Retry transient gRPC code-mode session admission failures @cassirer-openai
- #51186 Prevent stable release pointers from moving backward @andrewgu-oai
- #51188 Record base instructions in incremental tool history @pakrym-oai
- #51191 Clean up Unix app-server control-socket startup lock files @etraut-openai
- #51192 Wait for SIGCONT when resuming the TUI @etraut-openai
- #51193 Test thread archiving before the first turn @btraut-openai
- #51194 Add browser extension request headers to config requirements @jn-openai
- #51198 Allow concurrent release builds while serializing publication @andrewgu-oai
- #51200 Upgrade Bazel to 9.2.0 and refresh the module lockfile @anp-oai
- #51202 Distinguish namespace removals in incremental tool updates @akira-oai
- #51203 Make apply_patch preserve line endings unconditionally @charliemarsh-oai
- #51206 Record initialization analytics for resumed subagents @peilin-openai
- #51207 Gate CLI Daybreak controls and selection behind an opt-in feature @julee-oai
- #51209 Add ranked tool discovery to JavaScript code mode @zamoshchin-openai
- #51211 Reject sandbox-writable bubblewrap executables from PATH @viyatb-oai
- #51215 Measure raw MCP tool catalog sizes in telemetry @owenlin0
- #51217 Preserve review targets and scope misalignment continuation metadata @yunhan-wei
- #51220 Honor the OTLP metrics temporality preference @daniel-oai
- #51221 Separate environment requests from runtime selections @anp-oai
- #51223 Remove legacy personality template metadata @rhan-oai
- #51230 Make session lookup pagination stable and report listing failures @etraut-openai
- #51235 Remove default model labels from TUI model pickers @etraut-openai
- #51241 Add a partial answer message phase @rb-oai
- #51249 Handle partial answers consistently across agent workflows @rb-oai
- #51253 Enforce Fast and Ultra Fast policies independently @dpatel-oai
- #51256 Start the Windows sandbox service during registered Core setup @zm-oai
- #51257 Fix installer checksum verification under Windows PowerShell @zm-oai
- #51260 Handle partial answers in realtime routing and thread search @rb-oai
- #51329 Remove partial-history subagent forks @jif-oai
- #51330 Measure total Guardian approval decision duration @jif-oai
- #51331 Track sub-agent result delivery outcomes @jif-oai
- #51332 Record multi-agent wait duration by outcome @jif-oai
- #51333 Record the multi-agent version in turn analytics @jif-oai
- #51334 Count Guardian denial-limit interruptions in telemetry @jif-oai
- #51335 Update collaboration snapshots for full-history fork instructions @jif-oai
- #51347 Measure shell snapshot use and wait time per command @jif-oai
- #51350 Allow larger shell snapshots when replaying from a file @jif-oai
- #51355 Add bounded diagnostics for agent spawn failures @jif-oai
- #51378 Keep Guardian v2 WebSocket pools warm with concurrent replenishment @jif-oai
- #51391 Make URLs in asynchronous question titles clickable @charliemarsh-oai
- #51396 Let late low-risk scores complete pending Guardian reviews @jif-oai
- #51400 Prevent later Guardian scores from releasing earlier pending reviews @jif-oai
- #51402 Preserve turn attribution across recovery and compaction @eddie-openai
- #51407 Protect ripgrep lookup during Linux sandbox construction @viyatb-oai
- #51411 Suppress repeated image paste presses in legacy terminals @etraut-openai
- #51415 Expose and persist turn lineage across the app server @eddie-openai
- #51419 Preserve turn attribution when queued mail wakes durable sleep @eddie-openai
- #51420 Finish idle thread unloads after slow shutdown @jif-oai
- #51421 Include root turn IDs in host-owned Apps tool calls @eddie-openai
- #51422 Accept environment requests at thread and turn settings boundaries @anp-oai
- #51425 Skip stable installer alias publishing for prereleases @zsol-openai
- #51426 Remove the Bazel JVM override for Windows ARM64 voice builds @anp-oai
- #51427 Prevent invalidated wakeups from starting a turn @jif-oai
- #51433 Show hook status messages as titles in the hooks browser @abhinav-oai
- #51439 Preserve clickable URLs in TUI approval headers @charliemarsh-oai
- #51440 Honor Retry-After in WebSocket error events @anp-oai
- #51441 Fix core integration tests for updated turn APIs @anp-oai
- #51449 Make URLs clickable in TUI user input questions @charliemarsh-oai
- #51450 Make URLs clickable in MCP elicitation prompts @charliemarsh-oai
- #51451 Make URLs in the TUI warnings viewer clickable @charliemarsh-oai
- #51452 Make banner URLs clickable across wrapped lines @charliemarsh-oai
- #51457 Preserve status usage hyperlinks when the URL wraps @charliemarsh-oai
- #51458 Make URLs clickable in user verification prompts @charliemarsh-oai
- #51459 Preserve wrapped help links in Windows sandbox prompts @charliemarsh-oai
- #51460 Retry realtime sideband attachment while an existing call activates @bullman-oai
- #51463 Record resolved model and reasoning effort in sub-agent activity @sdcoffey
- #51465 Add an optional JSON transcript format for Guardian @felixxia-oai
- #51466 Keep Guardian transcript records structured through budget recovery @felixxia-oai
- #51467 Keep submission logs useful without exposing payloads @chess-oai
- #51470 Raise the managed app-server file descriptor limit on Unix @etraut-openai
- #51471 Preserve clickable URLs in pending input previews @charliemarsh-oai
- #51472 Preserve clickable URLs in TUI selection rows @charliemarsh-oai
- #51473 Preserve URL destinations in wrapped hook details @charliemarsh-oai
- #51480 Preserve tool declaration mode across resumed context windows @pakrym-oai
- #51482 Use PathUri for skill identity and path matching @anp-oai
- #51483 Add correlated, credential-free rendezvous connection diagnostics @alexi-openai
- #51491 Classify executor capability root ownership independently of parsing @stevenlee-oai
- #51492 Remove obsolete fields from persisted turn context @pakrym-oai
- #51493 Bind capability roots to environment selections @anp-oai
- #51499 Load rollout history on a single blocking worker @charliemarsh-oai
- #51500 Add shared task pinning to the agent command center @etraut-openai
- #51502 Bound relay connection attempts and handle pongs during blocked writes @alexi-openai
- #51503 Expose selected environments to MCP contributors @mtsui-oai
- #51510 Preserve live TUI settings when configuration reloads fail @imac-oai
- #51511 Fix Windows 10 drive-letter opens for no-follow filesystem operations @zm-oai
- #51512 Align Windows sandbox temp permissions with the child environment @zm-oai
- #51515 Expose detailed agent tree shutdown failure reports @keitht-openai
- #51517 Pass thread persistence intent to attachment uploads @kchainani-oai
- #51525 Preserve the CLI MXC preference in executor config reads @zm-oai
- #51527 Ignore ripgrep configuration when expanding sandbox deny globs @viyatb-oai
-
Codex app 26.1002
Performance improvements and bug fixes
- Fixed Windows sandbox refresh failures after app updates.
- Fixed worktree creation and chat forking for WSL repositories whose paths conflicted with Windows directories.
- Kept the recent chats section collapsed when switching between chats.
- Fixed Remove from section so it removes a chat from its sidebar section without pinning it.
-
ChatGPT for iOS 1.2026.272
New features
- Page previews now appear inline in responses.
- Added support for opening Codex task links directly on iOS.
Improvements and bug fixes
- Redesigned the approval picker with clearer permission choices.
- Find plugins from a single Plugins entry in the composer’s plus menu.
- Faster streaming in long threads, with fewer freezes.
- New tasks keep your selected computer while it reconnects or is offline.
- Improved worktree support so files and changes match the checkout used on desktop.
- Fixed task lists remaining empty after connecting.
- Smoother keyboard transitions when starting tasks and swiping back.
- Status updates no longer appear as questions that need an answer.
- Clearer manual pairing code entry, including support for pasting formatted codes.
-
Codex CLI 0.161.0
$ npm install -g @openai/codex@0.161.0View details
New Features
- GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
- Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
- Sign in to MCP servers from an active terminal session with
/mcp login <name>. (#49290) - Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
- Daybreak is opt-in through
--enable cli_daybreakorfeatures.cli_daybreak=true;daybreak=truealone is insufficient. By default, controls and indicators are hidden,/daybreakis unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207) - Select a Cyber access program per turn with
codex exec --cyber-access-programor the TypeScript SDK’scyberAccessProgramoption. The explicit exec override remains available withcli_daybreakdisabled and leaves the saved choice unchanged. (#49939, #51207)
Bug Fixes
- Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
- Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
- Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
- Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
- Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
- Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)
Documentation
- Authentication guidance now accounts for keyring storage instead of implying credentials always reside in
auth.json. (#49361)
Chores
- Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)
Changelog
Full Changelog: rust-v0.160.0...rust-v0.161.0
- #49246 Use executable fixture copying in the bundled bwrap test @felixxia-oai
- #49257 Allow Guardian cached approvals with incomplete root context @felixxia-oai
- #49260 Restrict enterprise MCP auth and fail closed on config refresh @nicksteele-oai
- #49261 Preserve Windows sandbox runner launch errors @zm-oai
- #49262 Trace turn phases and correlate accepted input with turns @jif-oai
- #49266 Remove the remote agent message board client README @jif-oai
- #49267 Support remote agent message boards in multi-agent sessions @jif-oai
- #49269 Preserve thread overrides and cloud policy validity during config reloads @nicksteele-oai
- #49275 Isolate realtime conversation tests from Responses prewarm connections @felixxia-oai
- #49276 Enable enterprise MCP sign-in and account-scoped grant cleanup @nicksteele-oai
- #49277 Avoid a turn teardown race in the Guardian agent message test @felixxia-oai
- #49280 Restrict capability roots to captured turn environments @miz-openai
- #49286 Model exec-server session attachment state as an enum @jif-oai
- #49290 Add
/mcp login <name>to the TUI @nicksteele-oai - #49294 Record Guardian context mode in review and classification telemetry @felixxia-oai
- #49295 Simplify configuration fingerprint canonicalization @jif-oai
- #49297 Scan the session index backwards for batch thread name lookups @jif-oai
- #49300 Compact the inline hidden tag buffer once per chunk @jif-oai
- #49305 Batch metadata reads when resolving thread names @jif-oai
- #49308 Run piped legacy Windows sandbox processes without a console @etraut-openai
- #49312 Notify parent agents when Guardian stops a subagent @jif-oai
- #49316 Bump taiki-e/install-action to v2.87.21 in CI setup @jgershen-oai
- #49318 Add GPT-6.1 Sol as the default catalog model @andrewgu-oai
- #49325 Retry Windows sandbox runner logon once on error 1056 @zm-oai
- #49330 Keep remote control reconnect backoff capped during sustained failures @yansenzhou-oai
- #49332 Clean up canceled exec-server RPC requests immediately @jif-oai
- #49339 Add GPT-6.1 Sol to Bedrock catalogs and make it the default @celia-oai
- #49345 Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock @celia-oai
- #49353 Allow approved filesystem escalation while preserving denied reads @viyatb-oai
- #49357 Continue Markdown blockquotes when pasting multiline text @bc-openai
- #49360 Carry shell invocation metadata and report executor PATH directories @anp-oai
- #49361 Clarify credential storage wording across authentication UI and docs @celia-oai
- #49369 Update Bedrock GPT-6 Sol catalog tests to expect multi-agent V2 @celia-oai
- #49379 Compile hook matchers during discovery @jif-oai
- #49384 Track credential storage outcomes and redact sensitive errors @celia-oai
- #49388 Fix Windows path inference for opaque URIs with slash prefixes @dkovalenko-oai
- #49389 Serialize tests that share Windows sandbox accounts @jgershen-oai
- #49392 Add attributed MCP OAuth credential storage telemetry @celia-oai
- #49395 Remove randomized greetings from TUI session headers @etraut-openai
- #49401 Preserve live tool-call metadata across request windows @ningyi-oai
- #49403 Add an experimental flag for bundled tools in login shells @anp-oai
- #49406 Support explicit cyber access programs with OpenAI API keys @julee-oai
- #49407 Recover exec-server sessions after environment info timeouts @vivi
- #49408 Compare tool call metadata in the recorder refresh test @euroelessar
- #49411 Bind the app-server time provider to a local variable @euroelessar
- #49414 Filter graceful shutdown guard and trigger traces from SQLite logs @dkovalenko-oai
- #49415 Truncate input text in protocol debug output @dkovalenko-oai
- #49416 Omit payloads from multiline ANSI warnings @dkovalenko-oai
- #49424 Infer Windows UNC paths with forward and mixed slashes @dkovalenko-oai
- #49425 Prune diagnostic logs periodically by age and database size @dkovalenko-oai
- #49426 Enable analytics by default for daemon-launched app servers @bc-openai
- #49432 Preserve bootstrap discovery across authentication changes @cooper-oai
- #49437 Add local audio device selection to TUI voice settings @bc-openai
- #49441 Honor server retry advice across Responses retries and fallback @anp-oai
- #49444 Use
memrchrto find newlines in reverse JSONL scans @btraut-openai - #49467 Restore executor tool paths after login shell startup @anp-oai
- #49472 Use server-authoritative permissions in the TUI @etraut-openai
- #49473 Use the rmcp SDK for enterprise-managed token exchanges @nicksteele-oai
- #49475 Complete turn abort callbacks before emitting terminal events @euroelessar
- #49478 Discover and validate MCP authorization servers before ID-JAG exchange @nicksteele-oai
- #49480 Add experimental thread prediction protocol types @keyz
- #49489 Add regression coverage for account switches between analytics batches @anp-oai
- #49517 Add a fork shortcut to the TUI command center @etraut-openai
- #49560 Add an opt-in model catalog to multi-agent context @jif-oai
- #49564 Copy selected file paths as plain text in the TUI @fcoury-oai
- #49584 Skip host skill discovery for Guardian reviews @jif-oai
- #49595 Make the strict network approval test independent of request order @jif-oai
- #49598 Persist explicit user goal edits in model history @felixxia-oai
- #49599 Return authoritative replay history when resuming a thread @felixxia-oai
- #49600 Reuse unchanged history snapshots when resuming threads @felixxia-oai
- #49624 Use server authentication for explicit remote session commands @cooper-oai
- #49642 Allow managed requirements to disable the Windows MXC sandbox @iceweasel-oai
- #49675 Serialize Responses routing fields before large inputs @jbeckwith-oai
- #49678 Escape command drafts when recovering question answers @imac-oai
- #49683 Add a managed feature gate for in-app voice @vishnu-oai
- #49686 Deliver remote message board notifications to active turns @jif-oai
- #49689 Export skill invocation events through OpenTelemetry @jif-oai
- #49690 Preserve PowerShell relative paths in the elevated Windows sandbox @johnl-oai
- #49692 Keep compressed rollout snippet searches on one blocking worker @npancha-openai
- #49693 Move thread history projection into one blocking task @charliemarsh-oai
- #49694 Batch rollout listing scans on cancellable blocking workers @charliemarsh-oai
- #49696 Make exec-server file reads cancellable between chunks @charliemarsh-oai
- #49701 Detect SQLite corruption during startup and preserve recovery backups @dkovalenko-oai
- #49702 Rename exec-server file handle management identifiers @anp-oai
- #49704 Prevent npm alpha dist-tags from moving backward @imac-oai
- #49706 Upgrade the argument comment lint toolchain and Dylint @tamird
- #49708 Move session index I/O off async runtime threads @charliemarsh-oai
- #49710 Classify SQLite corruption using typed error codes @dkovalenko-oai
- #49712 Avoid full-string scans in token-budget truncation @jif-oai
- #49713 Remove repository-local Codex guidance, skills, and environment config @anp-oai
- #49714 Decouple API-key cyber access programs from model discovery @julee-oai
- #49715 Add account security setup reminders to the TUI @dennyku
- #49778 Define exec-server protocol types for streamed file writes @anp-oai
- #49781 Include the environment's MXC backend in MCP sandbox metadata @zm-oai
- #49782 Clean up process groups for failed shell snapshot captures @jif-oai
- #49783 Preserve background thread requests when forking in the TUI @etraut-openai
- #49784 Add a requirements feature gate for the browser annotation API @tepman-oai
- #49785 Persist empty paginated threads when naming them @rd-oai
- #49786 Clarify V2 spawn model override guidance for context catalogs @jif-oai
- #49787 Remove
AGENTS.mdfrom Bazel core test data @andrewgu-oai - #49792 Add retained conversation support to Guardian async sampling @felixxia-oai
- #49793 Add conversation mode to Guardian v2 async classification @felixxia-oai
- #49795 Avoid duplicate sync reviews in Guardian classifier continuations @felixxia-oai
- #49796 Deduplicate Guardian retained-context omission notices @felixxia-oai
- #49798 Share cached exec-server environment info with Arc @anp-oai
- #49799 Preserve server web-search settings in the TUI @etraut-openai
- #49800 Allow cleanup of replay-only side conversations with missing threads @bc-openai
- #49801 Update the Rust toolchain action for argument-comment linting @andrewgu-oai
- #49804 Use platform-specific modifier labels in TUI shortcut hints @bc-openai
- #49805 Add capability-gated writable file streams to the exec-server client @anp-oai
- #49806 Accept unknown Codex error variants in the app-server protocol @anp-oai
- #49807 Enable API-key model discovery by default @andrewgu-oai
- #49809 Preserve local launch permissions across TUI sessions and reconnects @etraut-openai
- #49810 Flush expired paste bursts before handling Enter @bc-openai
- #49811 Handle unsupported
fs/writeBlockrequests in exec-server @anp-oai - #49812 Move shadow skill ranking off the turn preparation path @vkg-oai
- #49813 Support AWS GovCloud regions for Amazon Bedrock Mantle @alexsong-oai
- #49814 Add coordinated shutdown for local agent trees @owenlin0
- #49816 Remove browser-open success messages from the TUI @bc-openai
- #49817 Add an advisory Bedrock GovCloud requirements check @alexsong-oai
- #49818 Use dedicated parameters for sandboxed file opens @anp-oai
- #49819 Recover daemon startup and updater re-exec after cwd deletion @etraut-openai
- #49822 Box the resume future in the agents overview permissions test @sayan-oai
- #49835 Clarify service tier default save errors in the TUI @etraut-openai
- #49836 Allow microphone channel selection for voice conversations @bc-openai
- #49843 Preserve daemon diagnostics and include updater logs in reports @etraut-openai
- #49846 Capture host-supplied extension data for each turn @sayan-oai
- #49847 Persist world-state snapshots alongside rendered context @pakrym-oai
- #49850 Launch Windows daemon children in a dedicated working directory @etraut-openai
- #49852 Improve diagnostics for report attachment failures @dkovalenko-oai
- #49855 Use embedded mode for elevated Windows TUI sessions @etraut-openai
- #49856 Support Daybreak selection in
codex exec@etraut-openai - #49857 Use the model catalog to select TUI cyber refusal guidance @etraut-openai
- #49858 Add a persistent
/daybreaktoggle to the TUI @etraut-openai - #49859 Honor Daybreak settings in TUI continuations and background tasks @etraut-openai
- #49861 Add Daybreak state to the status line and terminal title @etraut-openai
- #49867 Update elevated-launch warning snapshot to use
⌃ofor copy @etraut-openai - #49874 Point usage and credit links to ChatGPT settings @etraut-openai
- #49875 Decouple TUI startup presentation from execution configuration @etraut-openai
- #49876 Remove personality plumbing from the TUI @etraut-openai
- #49880 Bind permission grants to the originating turn @anp-oai
- #49894 Return world-state snapshots and context updates together @pakrym-oai
- #49898 Scope extension filesystem access to callback permissions @anp-oai
- #49910 Preserve validation errors for invalid TUI keybindings @etraut-openai
- #49912 Respect approval policies in temporary structured threads @etraut-openai
- #49939 Add per-turn Cyber access program selection to exec and the SDK @mldangelo-oai
- #49946 Prevent stale file search results from being labeled with a new query @jif-oai
- #49951 Include preceding assistant context in Guardian sender reviews @jif-oai
- #49956 Cache the placeholder regex for MCP hook argument expansion @jif-oai
- #49959 Test session index thread-name append and removal @jif-oai
- #49972 Share byte buffers across exec-server output chunks @jif-oai
- #49987 Add renewable EMA HTTP authentication and credential versioning @nicksteele-oai
- #49993 Preserve the async Guardian history prefix as retained context changes @felixxia-oai
-
Codex CLI 0.160.1
$ npm install -g @openai/codex@0.160.1View details
Bug Fixes
- Preserve
SYSTEMROOT,TEMP, andTMPwhen launching remote stdio MCP servers with explicitly configured remote environment variables, allowing Unix hosts to retain the Windows executor's startup environment.
Changelog
- #51121: Backport Windows remote MCP environment preservation to 0.160.
- Preserve
-
ChatGPT for iOS 1.2026.267
New features
- New Home Screen widgets show recent tasks from your selected computers.
- Track remaining usage and reset times with Home Screen and Lock Screen widgets.
- Added a setting to keep the keyboard open after sending a message.
Improvements and bug fixes
- Faster task list refresh when returning to the app, with existing task titles preserved.
- Fixed missing tasks when loading or scrolling through task lists.
- Smoother home screen, send, and keyboard transitions.
- Canceling a queued prompt returns recoverable text and attachments to the composer.
- Improved transcript stability when selecting text and loading older messages.
- Worktree creation now respects your computer’s configured storage location.
-
Codex app 26.930
New features
- Added the option to move selected chats to a project at once.
Performance improvements and bug fixes
- Improved recovery when attaching managed worktrees to chats.
- Fixed large diffs appearing blank at some zoom levels.
- Improved retries after queued messages fail to send or chats fail to open.
-
Codex CLI 0.160.0
$ npm install -g @openai/codex@0.160.0View details
New Features
- Browse older tasks in the agent command center with a keyboard-accessible “Show more” action. (#49106)
- Select transcript text and paste with middle-click in fullscreen mode on supported local Linux X11 terminals. (#49112)
- Start sessions outside a project with workspace defaults when policy permits, and restore saved permissions when resuming. (#49160)
- Added opt-in Guardian review capabilities to retrieve earlier user instructions and include context from agent handoffs. (#49036, #49057)
Bug Fixes
- Unsent queued messages now resume after reconnection once uncertain submissions are resolved, avoiding duplicate sends. (#49105)
- The terminal UI now preserves server provider, reasoning-summary, and verbosity settings and shows the correct sessions in resume and fork history. (#49144, #49161, #49171)
- Fixed Windows sandbox PowerShell fallbacks and long-path permission repairs, and suppressed unwanted console windows from background helpers. (#49019, #49058, #49098, #49164, #49386)
- Subagents now retain environments that are still starting and receive their configuration or preparation failure. (#49075)
- Prevented SQLite stalls during connection setup and logging, and surfaced initialization errors instead of masking them as timeouts. (#49032, #49102)
- Explicit provider model catalogs no longer include unsupported bundled models or reuse stale entries after refresh failures. (#49135)
Documentation
- Clarified how provider credentials use the configured storage backend and how
env_keyidentifies the API-key environment variable. (#49118)
Chores
- Reduced repeated plugin-loading work by caching parsed manifests and reusing HTTP connections for remote plugin requests. (#49099, #49100)
- Added background reclamation of unused log database space to reduce disk usage. (#49069)
Changelog
Full Changelog: rust-v0.159.0...rust-v0.160.0
- #48983 Avoid full metadata rewrites for thread timestamp updates @jif-oai
- #49000 Isolate the memory startup metadata test from Git enrichment @jif-oai
- #49019 Use a compatible PowerShell fallback for the Windows MXC sandbox @iceweasel-oai
- #49028 Use the numeric ioctl value in the macOS sandbox policy @aionescu-oai
- #49031 Clarify ChatGPT sign-in success copy @bc-openai
- #49032 Avoid SQLite stalls from connection setup and stderr span logging @jif-oai
- #49036 Add opt-in conversation history retrieval to Guardian reviews @felixxia-oai
- #49037 Show the Plan mode cycling hint in the fullscreen status line @fcoury-oai
- #49038 Preserve encrypted agent messages in Guardian reviews @felixxia-oai
- #49041 Copy selections within inline code as plain text @fcoury-oai
- #49043 Update Pro plan display names in the TUI @etraut-openai
- #49057 Add handoff-aware root context for Guardian reviews @jif-oai
- #49058 Fix Windows sandbox ACL repair for long runtime paths @darius-oai
- #49060 Update Guardian messaging snapshots for native agent messages @dkovalenko-oai
- #49065 Update Guardian handoff snapshot for separate agent messages @cassirer-openai
- #49067 Keep configuration values out of Windows sandbox policy events @zm-oai
- #49069 Reclaim unused SQLite log database pages in the background @dkovalenko-oai
- #49073 Surface realtime voice catalog failures in the TUI @etraut-openai
- #49074 Propagate Cargo package versions to Bazel Rust targets @tamird
- #49075 Preserve pending environments when spawning subagents @sayan-oai
- #49076 Avoid collecting unused Git metadata in skill analytics @tamird
- #49079 Update and centralize TUI subscription labels @etraut-openai
- #49082 Skip remote Git discovery for Guardian diff paths @jif-oai
- #49084 Track app-server running turns incrementally @tamird
- #49089 Render follow-up directive labels in the TUI and copied responses @etraut-openai
- #49093 Simplify startup promotions to platform-specific desktop app tips @etraut-openai
- #49096 Update
h2from 0.4.16 to 0.4.19 in Cargo and Bazel lockfiles @cassirer-openai - #49097 Notify lifecycle extensions of compaction usage limits @xli-oai
- #49098 Resolve Windows sandbox PowerShell fallbacks on the exec server @zm-oai
- #49099 Cache parsed plugin manifests across plugin workflows @dkovalenko-oai
- #49100 Reuse the HTTP connection pool for remote plugin requests @dkovalenko-oai
- #49102 Preserve SQLite vacuum modes and surface pool initialization errors @bc-openai
- #49103 Balance Windows Bazel test shards using duration estimates @jgershen-oai
- #49105 Resume unsent TUI input after reconnecting @etraut-openai
- #49106 Add history pagination to the agent command center @bc-openai
- #49112 Add X11 primary selection and middle-click paste support @fcoury-oai
- #49114 Point remote compaction tests at the mock ChatGPT server @OLI-OAI
- #49117 Attribute analytics requests to each thread's product SKU @papayo-oai
- #49118 Correct provider authentication storage documentation @celia-oai
- #49119 Add recovery guidance to content-filter retries @won-openai
- #49127 Deduplicate cloud and executor skill listings before budgeting @TAFOYA-OAI
- #49130 Move content-filter guidance into the shared Responses retry handler @won-openai
- #49135 Treat explicit provider model catalogs as authoritative @andrewgu-oai
- #49136 Remove the plus separator after Option symbols in TUI key hints @bc-openai
- #49138 Expose original error details to turn lifecycle contributors @bryanashley
- #49144 Preserve server reasoning summary and verbosity settings in the TUI @etraut-openai
- #49145 Hide reasoning summary settings in
/statusfor server connections @etraut-openai - #49147 Simplify cloud task base URL normalization @akira-oai
- #49153 Omit blockquote markers when copying quoted selections in the TUI @bc-openai
- #49160 Support projectless TUI sessions with workspace defaults @etraut-openai
- #49161 Honor app-server provider defaults in the TUI @etraut-openai
- #49164 Suppress Windows console windows for background subprocesses @etraut-openai
- #49171 Fix model provider lookup for TUI history @etraut-openai
- #49386 [0.160] Backport remaining Windows console fix to frozen alpha.6 @andrewgu-oai
- #49763 [0.160] Backport maintenance-line catalog and security reminder updates @andrewgu-oai
September 2026
-
Codex CLI 0.159.3
$ npm install -g @openai/codex@0.159.3View details
New Features
- Eligible local sessions signed in with ChatGPT can now show optional reminders to complete account security setup. (#49744)
Changelog
Full Changelog: rust-v0.159.2...rust-v0.159.3
- #49744 [0.159] Backport account security setup reminders for 0.159.3 @andrewgu-oai
-
Codex app 26.928
Performance improvements and bug fixes
- Improved terminal startup in attached worktrees and fixed failures caused by unavailable worktree environment settings.
- Kept earlier answers visible when you send new instructions during a task.
- Fixed automatic scrolling and prevented keyboard navigation through messages from jumping back to the latest response.
- Improved startup recovery when you return to the app window.
-
GPT-6.1 Sol in Codex and ChatGPT Work
GPT-6.1 Sol offers near-Astra performance for complex work at a lower cost than Astra. Consider it for repeated, long-running work across code, apps, and documents. Availability depends on your plan, client, and workspace settings.
Use
gpt-6.1-sol. See Models for availability and model selection to compare models. -
Codex CLI 0.159.2
$ npm install -g @openai/codex@0.159.2View details
Bug Fixes
- Suppressed console windows flashing on Windows when Codex launches background processes and sandboxed commands. (#49385)
Changelog
Full Changelog: rust-v0.159.1...rust-v0.159.2
- #49385 [0.159] Backport Windows console suppression for 0.159.2 @andrewgu-oai
-
Codex CLI 0.159.1
$ npm install -g @openai/codex@0.159.1View details
New Features
- Added GPT-6.1 Sol as the default model in the bundled catalog and Amazon Bedrock Mantle and Runtime catalogs. (#49323, #49342)
Changelog
Full Changelog: rust-v0.159.0...rust-v0.159.1
- #49323 [0.159] Prepare 0.159.1 release backports @andrewgu-oai
- #49342 [0.159] Backport GPT-6.1 Sol Bedrock catalogs @celia-oai
-
Codex CLI 0.159.0
$ npm install -g @openai/codex@0.159.0View details
New Features
- Opt-in
instant_interruptlets new input steer Codex during model responses or long-running code-mode calls. (#48135, #48141) - New sessions get a compact welcome screen and consistent headers, with occasional tips during and after turns. (#48513, #48562, #48352)
- The warnings viewer dismisses reviewed warnings when closed; press
kto keep one for later. (#48205, #48206) - You can scroll the transcript while deciding whether to implement a plan. (#48805)
- Native Mermaid rendering supports more flowchart edges, labels, and node groups. (#48814, #48895)
- App-server clients can paginate thread history from a specific item. (#48151)
Bug Fixes
- Windows launches avoid stray console windows for MCP servers, code-mode hosts, and piped commands; restrictive launchers can fall back to embedded mode. (#48138, #48238, #48483, #48491)
- Copying transcript selections preserves Markdown tables, formatting, and significant whitespace. More terminals now copy automatically on selection. (#48548, #48549, #48469)
- Blank sessions retain drafts when switching tasks, and threads can be archived and listed before their first turn. (#48628, #48828, #48199)
- Local ChatGPT sign-in opens the browser reliably; onboarding also provides a shortcut to copy the login link. (#48502, #48544)
- Approved commands retain explicit filesystem denials, and
.awsdirectories are protected by default under writable roots. (#48155, #48176) - Fixed macOS TLS access in network-enabled sandboxes and remote environments that require proxy access. (#48565, #48198)
Chores
- Removed automatic follow-up prompt suggestions and the
tui.prompt_suggestionssetting. (#48621) - Removed the bundled
plugin-creatorskill. (#48604)
Changelog
Full Changelog: rust-v0.158.0...rust-v0.159.0
- #48135 Add opt-in code-mode yielding on new user input @pakrym-oai
- #48138 Suppress console windows when spawning the code-mode host on Windows @zm-oai
- #48141 Preempt model responses when new user input arrives @pakrym-oai
- #48143 Preserve executor MCP credential boundaries across reconnects @rreichel3-oai
- #48151 Add item anchors to
thread/items/listpagination @btraut-openai - #48155 Preserve filesystem denials when preparing approved commands @viyatb-oai
- #48157 Allow Windows daemon launches with residual job membership @etraut-openai
- #48158 Fix Guardian retained context spacing and empty assistant handling @olliem-oai
- #48168 Generate unique exec-server process IDs for every request @sdcoffey
- #48174 Preserve usage limit windows in turn and compaction analytics @rhan-oai
- #48176 Protect
.awsdirectories under sandbox writable roots @jackz100 - #48187 Fix zsh alias quoting in sourced shell snapshots @jif-oai
- #48190 Bound agent message board SSE frames before parsing @jif-oai
- #48197 Optimize
blake3in Bazel fastbuilds @jif-oai - #48198 Honor execution environment proxy requirements @seanh-oai
- #48199 Keep archived threads with empty previews visible in listings @acrognale-oai
- #48200 Extract Responses header conversion into a shared module @anp-oai
- #48205 Dismiss viewed TUI warnings when closing the viewer @fcoury-oai
- #48206 Add a keep-and-next action to the warnings viewer @fcoury-oai
- #48207 Preserve queued output for observers during code-mode termination @pakrym-oai
- #48211 Keep Codex visible during external editor handoff @etraut-openai
- #48213 Isolate executable fixture copies in CLI tests on Linux @jif-oai
- #48222 Preserve late result metadata for truncated code-mode calls @ningyi-oai
- #48224 Preserve model and access program pairs during compaction @jamy-OAI
- #48229 Extract Responses failure parsing into a dedicated module @anp-oai
- #48238 Suppress console windows for local Windows MCP servers @malsamiri-oai
- #48272 Prevent Windows daemon launches from retaining launcher stdio @zm-oai
- #48318 Keep TUI reconnect attempts running until the shared deadline @etraut-openai
- #48344 Preserve tool metadata for OpenAI provider endpoint overrides @peilin-openai
- #48350 Display reconnect commands on a separate line @etraut-openai
- #48352 Show turn tips while working and after completion in the TUI @fcoury-oai
- #48353 Stabilize skill catalogs across executor availability changes @vkg-oai
- #48469 Default to copying transcript selections in more terminals @fcoury-oai
- #48483 Prevent console windows for piped Windows child processes @fcoury-oai
- #48489 Fix Mermaid shape, relationship, and state description parsing @etraut-openai
- #48491 Fall back to embedded mode under restrictive Windows launchers @fcoury-oai
- #48502 Fix ChatGPT browser sign-in for local app servers @etraut-openai
- #48508 Preserve WebSocket continuations when steering a turn @pakrym-oai
- #48513 Refresh the TUI welcome screen for new sessions @fcoury-oai
- #48531 Add context to Windows sandbox runtime registration errors @zm-oai
- #48544 Make onboarding login links easier to copy @etraut-openai
- #48547 Fade blossom replays back to the idle state @fcoury-oai
- #48548 Preserve table cell source metadata through TUI rendering @fcoury-oai
- #48549 Preserve Markdown tables and whitespace when copying TUI responses @fcoury-oai
- #48551 Fix TUI math rendering for zero and big wedge expressions @etraut-openai
- #48560 Keep working tips stable during transcript interaction @fcoury-oai
- #48562 Use a consistent borderless session header in the TUI @fcoury-oai
- #48565 Allow macOS TLS trust evaluation in network-enabled Seatbelt profiles @winston-openai
- #48568 Allow exec-server to proxy permitted private IPs upstream @open-matt
- #48574 Preserve deferred tool namespace names before descriptions @adaley-openai
- #48575 Allow provisioned executors more time to come online @richardopenai
- #48604 Remove the bundled
plugin-creatorskill @martinauyeung-oai - #48611 Centralize persistent mode enablement checks @alishobeiri-oai
- #48621 Remove follow-up prompt suggestions from the TUI @etraut-openai
- #48623 Preserve empty Markdown list markers in the TUI @etraut-openai
- #48626 Stop showing previous-session summaries when switching TUI sessions @etraut-openai
- #48628 Preserve blank TUI sessions when switching tasks @etraut-openai
- #48643 Set the provisioned macOS CLI bundle name to ChatGPT @riley-oai
- #48646 Fix the session-start helper call in the command center test @etraut-openai
- #48686 Remove WebSocket headers and tool payloads from info logs @chess-oai
- #48724 Prevent Linux ETXTBSY races in MCP stdio tests @jif-oai
- #48725 Retain confirmed Code Mode messages for Guardian reviews @ankushg
- #48727 Centralize executable fixture creation to avoid Linux ETXTBSY races @jif-oai
- #48754 Render
/statuswithout borders and wrap long values @fcoury-oai - #48757 Match TUI status shimmer timing to desktop headers @fcoury-oai
- #48761 Show hidden output line counts in compact terminal activity @fcoury-oai
- #48764 Preserve MCP app resource URIs without defaulting display mode @victor-openai
- #48772 Fix Unix socket connections through long symlink paths @etraut-openai
- #48775 Match pinned transcript headers to the original prompt style @etraut-openai
- #48776 Remove the
currentbadge from TUI task rows @etraut-openai - #48779 Preserve independent Guardian history across parent compaction @felixxia-oai
- #48783 Add single-server MCP status discovery with thread connection reuse @victor-openai
- #48796 Add opt-in structured errors for Guardian circuit-breaker interruptions @won-openai
- #48799 Fix SGR mouse reporting for Windows terminal capture @etraut-openai
- #48800 Use the terminal palette for ordered Markdown list markers @etraut-openai
- #48805 Allow transcript wheel scrolling while a modal is open @fcoury-oai
- #48807 Show short turn durations in TUI completion footers @fcoury-oai
- #48812 Add history-aware prewarming for idle threads @vkg-oai
- #48814 Preserve punctuation and semicolons in Mermaid labels @etraut-openai
- #48819 Use explicit histogram buckets for tool and skill context metrics @mzeng-openai
- #48824 Keep voice RTP timestamps aligned to 20 ms packets @bc-openai
- #48827 Show a hand pointer over transcript links in Ghostty and Kitty @bc-openai
- #48828 Allow archiving threads before their first turn @bc-openai
- #48829 Wait briefly for the Windows sandbox provisioning service to start @zm-oai
- #48830 Show a short, neutral TUI interruption notice @fcoury-oai
- #48895 Expand native Mermaid flowchart syntax support @etraut-openai
- #48973 Isolate realtime auth fallback test from startup prewarm @jif-oai
- #48982 Prevent message-board notifications from reopening final answers @eknight-oai
- Opt-in
-
Codex CLI 0.158.0
$ npm install -g @openai/codex@0.158.0View details
New Features
- Configure copy-on-select and right-click paste in the fullscreen TUI. Copied transcript selections now preserve Markdown formatting. (#47639, #47896, #48118)
- Connect to MCP servers that require pre-registered OAuth client secrets, including through
codex mcp add --oauth-client-secret. (#47891) - Secure direct exec-server WebSocket connections with bearer tokens, including connections configured through app-server. (#47601, #47648)
- Image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images. (#47484, #47956)
- Terminal input approval is enabled by default for commands running with elevated permissions; runtime-only grants no longer cause unnecessary reviews. (#47799, #48073)
Bug Fixes
- Fixed Windows sandbox failures involving ordinary Windows 10 paths, rejected stored credentials, and large permission policies. (#47672, #47695, #47919)
- Fixed Linux sandbox startup with nested writable roots and preserved Git metadata protections across writable roots on Linux and macOS. (#47623, #47974)
- macOS patch operations now recognize system path aliases covered by existing permissions, avoiding unnecessary approval prompts. (#47879)
- Approval reviews now retry when new user input arrives, so a status question does not automatically abort a pending action. (#47819)
- Mermaid flowcharts now render quoted labels and ampersands; unsupported diagrams explain why they fall back to source. (#47572, #47678)
- Command completion events now include early output and report process-launch failures to clients. (#47529, #47665)
Changelog
Full Changelog: rust-v0.157.0...rust-v0.158.0
- #47441 Use secondary text styling for the transcript footer shortcut hint @etraut-openai
- #47447 Extract WebSocket authentication into
codex-websocket-auth@euroelessar - #47458 Parallelize instruction refresh and tool preparation @hlevy-openai
- #47484 Add explicit background control to image generation @alicec-oai
- #47520 Route session agent operations through
AgentControl@jif-oai - #47529 Emit command lifecycle events for unified exec launch failures @steipete-oai
- #47536 Route agent lookups and V2 context through
AgentControl@jif-oai - #47539 Test interrupted one-shot command launch failure persistence @jif-oai
- #47540 Add an option to disable multi-agent v2 direct messaging @jif-oai
- #47565 Classify rollout read failures by reason and progress @jif-oai
- #47568 Record sandbox backends in command execution analytics @iceweasel-oai
- #47571 Wait for idle before injecting remote compaction test history @felixxia-oai
- #47572 Explain Mermaid rendering fallbacks in the TUI @etraut-openai
- #47582 Retain assistant context for Guardian authorization reviews @felixxia-oai
- #47584 Preserve streamed assistant message order in retained context @felixxia-oai
- #47585 Preserve delivered assistant messages in Guardian retained context @felixxia-oai
- #47589 Keep unfinished link destinations out of rich streaming previews @etraut-openai
- #47590 Serialize numeric custom reasoning effort as JSON numbers @dylan-hurd-oai
- #47591 Stream daemon executable hashing off the async runtime @etraut-openai
- #47596 Refresh realtime context for each model request @reia-oai
- #47597 Guard prerelease channel and canary updates against older versions @imac-oai
- #47601 Add opt-in WebSocket authentication to exec-server @euroelessar
- #47603 Add a reap-only drop policy for child processes @charliemarsh-oai
- #47604 Extend child commands with session and descriptor controls @charliemarsh-oai
- #47605 Route pipe processes through the shared child launcher @charliemarsh-oai
- #47610 Use native POSIX spawning for command hooks @charliemarsh-oai
- #47611 Use the shared process launcher for Unix shell snapshots @charliemarsh-oai
- #47612 Launch Linux pipe processes through a fresh setup helper @freeqaz-openai
- #47613 Expand Linux spawn-helper lifecycle test coverage @charliemarsh-oai
- #47617 Route Linux PTY launches through the process setup helper @charliemarsh-oai
- #47618 Prefer Shift-arrow hints for queued messages and questions @imac-oai
- #47619 Add bounded buffering for global operation metrics @celia-oai
- #47620 Add portable project trust lookup APIs @seanh-oai
- #47623 Fix read-only metadata mount ordering for nested writable roots @jif-oai
- #47624 Recognize
user_messagetools in Guardian authorization context @ankushg - #47625 Allow history and notes without experimental context capability @pmccrary-oai
- #47629 Route V2 child loading through
AgentControl@jif-oai - #47630 Bind Guardian reviews to the action's target environment @jif-oai
- #47633 Route message board agent resolution through the selected controller @jif-oai
- #47635 Overlap startup WebSocket preconnect with tool discovery @bromano-oai
- #47638 Classify retryable exec-server preparation errors by type @mtsui-oai
- #47639 Add configurable copy-on-select for transcript selections @fcoury-oai
- #47641 Honor Retry-After and preserve server retry deadlines @anp-oai
- #47642 Add model-specific prefixes to indirect tool descriptions @rhan-oai
- #47647 Apply Guardian computer-use review to the Browser connector @johnl-oai
- #47648 Support bearer tokens for app-server executor connections @euroelessar
- #47649 Add opt-in OTLP logging for final agent responses @xli-oai
- #47653 Attach inherited rollout history to diagnostic reports @dkovalenko-oai
- #47654 Make Linux descriptor cleanup fork-safe @yuzhu-oai
- #47655 Bump the exec-server stable compatibility test to Codex 0.156.1 @imac-oai
- #47657 Restrict the default Bedrock GovCloud model catalog @jackz100
- #47662 Expose tool dispatch and timing observations to extensions @euroelessar
- #47663 Preserve managed network policy in route-aware transports @jackz100
- #47665 Preserve early unified exec output in completion events @sdcoffey
- #47670 Support model-specific descriptions for agent message board tools @eknight-oai
- #47672 Fix no-reparse directory opens on Windows 10 @zm-oai
- #47673 Clarify registered Windows sandbox setup errors @zm-oai
- #47677 Support model catalog overrides for MCP resource tool specs @rhan-oai
- #47678 Support quoted labels and ampersands in Mermaid flowcharts @etraut-openai
- #47679 Add extension hooks for model requests and response streams @euroelessar
- #47680 Add exec-server RPC timing and process startup tracing @anp-oai
- #47683 Add executor capability discovery V2 infrastructure @TAFOYA-OAI
- #47686 Make thread-owned Guardian context always enabled @felixxia-oai
- #47688 Remove legacy Guardian authorization evidence paths @felixxia-oai
- #47689 Make Guardian thread context capture unconditional @felixxia-oai
- #47690 Remove obsolete Guardian context capture mode branches @felixxia-oai
- #47691 Materialize rollout persistence for pending inter-agent messages @dermanyang-oai
- #47693 Configure curl retries for DotSlash installation in CI @anp-oai
- #47695 Repair rejected Windows sandbox credentials during provisioning @zm-oai
- #47696 Avoid the shutdown timeout in the lagged-event test @jgershen-oai
- #47698 Allow WebSocket test server shutdown while waiting for requests @jgershen-oai
- #47701 Allow idle threads to prewarm and repair WebSocket connections @vkg-oai
- #47703 Preserve account network policy for ChatGPT backend requests @jackz100
- #47704 Fix spawn flag typing and isolate project configuration tests @seanh-oai
- #47709 Route resume prewarm through the cached WebSocket session @vkg-oai
- #47712 Update unified exec output buffers atomically @sdcoffey
- #47713 Reduce dependency coupling in shared configuration crates @aibrahim-oai
- #47714 Preserve tool result metadata more selectively under size limits @ningyi-oai
- #47717 Avoid recursive TUI event dispatch for model picker selections @etraut-openai
- #47741 Attribute tool telemetry to the invoking turn's product SKU @rennie-openai
- #47742 Honor network policy in history notes and image generation extensions @jackz100
- #47745 Skip startup prewarm preparation when the WebSocket is ready @vkg-oai
- #47748 Align Cargo and Bazel Rust debug information defaults @aibrahim-oai
- #47751 Reduce generic code duplication in RPC and Markdown rendering @aibrahim-oai
- #47755 Centralize typed app-server response decoding @aibrahim-oai
- #47757 Refactor tool telemetry product SKU matching to use an allowlist @rennie-openai
- #47758 Preserve more tool metadata within outgoing message budgets @ningyi-oai
- #47773 Honor catalog schemas for asynchronous user input @rhan-oai
- #47797 Support close-on-exec attachments without changing PTY semantics @jif-oai
- #47799 Enable terminal input approval by default @jif-oai
- #47808 Allow hosts to provide agent controllers through ThreadManager @jif-oai
- #47811 Preserve explicit user goal updates in Guardian authorization @felixxia-oai
- #47813 Fix sleep interruption test event handling and fixture lifetime @felixxia-oai
- #47814 Fix a lost wakeup in the unified exec termination test @felixxia-oai
- #47817 Stabilize thread resume and memory dual-write tests @jif-oai
- #47819 Retry Guardian reviews when authorization changes @teddywyly-oai
- #47820 Add integration coverage for host agent controllers @jif-oai
- #47824 Allow four concurrent threads in the multi-agent resume test @felixxia-oai
- #47828 Wait for login completion in recommended plugin tests @felixxia-oai
- #47830 Bind Guardian async scores to target environment permissions @jif-oai
- #47832 Stabilize Rosetta test timing and retry delay telemetry @jif-oai
- #47847 Keep the TUI responsive during clipboard copies @fcoury-oai
- #47851 Preserve human overrides across repeated heartbeat instructions @felixxia-oai
- #47852 Avoid blocking async proxy resolution on the system proxy cache @jif-oai
- #47856 Initialize media estimates outside the global cache lock @jif-oai
- #47858 Validate loaded plugins outside the cache lock @jif-oai
- #47861 Avoid nested read locking when rendering browser sign-in @jif-oai
- #47867 Render remote permission paths using executor context @iceweasel-oai
- #47870 Add opt-in OTLP logging for Guardian assessments @jif-oai
- #47871 Fix PID reservation test race and update guardian heartbeat snapshot @jif-oai
- #47873 Measure deferred tool namespace fragments before and after truncation @mzeng-openai
- #47879 Fix macOS system-alias matching in patch permission checks @felixxia-oai
- #47881 Use Tokio's clock for TUI paste timing @charliemarsh-oai
- #47886 Preserve diagnostic logs when SQLite logging fails @dkovalenko-oai
- #47887 Warn users when SQLite diagnostic log writes fail @dkovalenko-oai
- #47889 Include TUI client logs in diagnostic uploads @etraut-openai
- #47891 Support client secrets for pre-registered MCP OAuth clients @willwang-openai
- #47894 Clean up temporary Codex homes after TUI tests @fcoury-oai
- #47896 Preserve Markdown formatting when copying transcript selections @fcoury-oai
- #47898 Preserve local-binding inheritance in environment network policies @seanh-oai
- #47899 Add diagnostic reasons to MCP attribution errors @peilin-openai
- #47900 Default local threads to paginated history @owenlin0
- #47901 Add bounded credential-storage telemetry helpers @celia-oai
- #47902 Avoid repeated table clones during config merging @imac-oai
- #47903 Move config key alias normalization ahead of merging @imac-oai
- #47904 Support nested canonical paths in config key aliases @imac-oai
- #47908 Alias
tui.whimsytotui.effects.starfield@imac-oai - #47912 Fix attestation routing during thread startup @charliemarsh-oai
- #47913 Add an opt-in flag to defer mailbox preemption @jif-oai
- #47915 Reuse verified V8 checksum manifests from the artifact cache @aibrahim-oai
- #47918 Parameterize the turn-start originator header test @aibrahim-oai
- #47919 Transport large Windows sandbox launch payloads through the environment @malsamiri-oai
- #47920 Allow directory moves under global Seatbelt basename denies @chess-oai
- #47922 Allow full-access Windows setup to provision through registered Core @zm-oai
- #47924 Make project trust lookup paths explicit and defer root resolution @seanh-oai
- #47926 Retry file blob uploads on HTTP 502 and 504 @mtsui-oai
- #47927 Use
127.0.0.1for local login redirects @willwang-openai - #47932 Remove GPT-5.4 from bundled catalogs and preserve migration prompts @andrewgu-oai
- #47934 Apply the unchanged-model compaction shortcut to all session sources @hlevy-openai
- #47935 Allow cached catalogs to satisfy MCP startup readiness @hlevy-openai
- #47936 Make MCP and Code Mode input schema budgets configurable @vivi
- #47937 Add direct replies for thread settings updates @sayan-oai
- #47939 Separate selected plugin identities from MCP contributions @sayan-oai
- #47943 Remove unused Windows world-writable audit code @iceweasel-oai
- #47945 Parameterize the thread initialization analytics test by originator @eddie-openai
- #47946 Add an in-memory agent message board for ephemeral sessions @jif-oai
- #47947 Expand root authorization context to 16 messages @felixxia-oai
- #47951 Use prebuilt V8 archives for Bazel on macOS and GNU Linux @aibrahim-oai
- #47952 Prune expired in-memory message board registry entries @jif-oai
- #47954 Move fullscreen startup tips into the transcript @etraut-openai
- #47956 Support file references in image edit requests @kchainani-oai
- #47957 Bound tool-call observations to the outgoing Responses message budget @ningyi-oai
- #47962 Request transparent huge pages for Cargo and eligible Bazel rustc jobs @aibrahim-oai
- #47964 Preserve the client-agent header for Amazon Bedrock Runtime @celia-oai
- #47967 Surface Flex capacity failures as a distinct terminal error @sdcoffey
- #47968 Handle Btrfs device mismatches when masking daemon sockets @etraut-openai
- #47970 Expose current environment selections for a running turn @sayan-oai
- #47971 Add Pro Max plan support and update Pro display names @etraut-openai
- #47974 Preserve Git directory protections across writable roots @aionescu-oai
- #47975 Prevent stale voice answers from reappearing during speech recovery @etraut-openai
- #47981 Prepare MCP calls directly from advertised tool identities @hlevy-openai
- #47984 Add multi-agent spawn latency and failure metrics @owenlin0
- #47988 Reuse MCP handlers across equivalent bindings @hlevy-openai
- #47989 Add startup-only PID namespace inheritance to exec-server @open-matt
- #48004 Respect configured authentication in the thread manager sample @celia-oai
- #48015 Validate tool suggestion install URLs before showing the app link @aionescu-oai
- #48017 Test same-cell permission grants and strict review in code mode @anp-oai
- #48035 Remove plugin extension metadata from discovery and summaries @victor-openai
- #48060 Deduplicate retained instructions across Guardian reviews @felixxia-oai
- #48069 Handle early command yields in the Guardian network approval test @jif-oai
- #48072 Skip message-board notification previews when there are no recipients @jif-oai
- #48073 Avoid stdin approval for runtime-only permission grants @jif-oai
- #48077 Add Serde support to agent message board request types @jif-oai
- #48078 Replay exec-server shell snapshots through unnamed files @jif-oai
- #48098 Preserve recent authorization context for Guardian reviews @felixxia-oai
- #48099 Honor shell environment policy in legacy snapshots @jif-oai
- #48100 Add an HTTP client for remote agent message boards @jif-oai
- #48101 Show multiline command previews in
/ps@etraut-openai - #48109 Deduplicate retained instructions against Guardian transcripts @felixxia-oai
- #48110 Deduplicate retained instructions in async Guardian context @felixxia-oai
- #48115 Preserve user text parts during local compaction @felixxia-oai
- #48116 Allow reasoning shortcuts to reach Max @etraut-openai
- #48118 Add configurable right-click paste to the fullscreen TUI @fcoury-oai
- #48119 Prevent worker completion races in the guardian authorization test @felixxia-oai
- #48121 Keep startup drafts visible during command center session handoff @etraut-openai
- #48123 Add early yielding for code-mode observations @pakrym-oai
- #48130 Use request notifications in the cloud config loader lifetime test @felixxia-oai
- #48132 Allow Left to open the command center from read-only conversations @etraut-openai
-
Codex CLI 0.157.1
$ npm install -g @openai/codex@0.157.1View details
Chores
- Release highlights could not be determined: the supplied PR index is empty, and the GitHub tag comparison returned 404.
Changelog
Full Changelog: rust-v0.157.0...rust-v0.157.1
-
macOS security update 26.924
Security fixes
- Fixed CVE-2026-100754 on macOS in version 26.924.20706, with thanks to Patrick Wardle, Objective-See Foundation.
-
Codex CLI 0.157.0
$ npm install -g @openai/codex@0.157.0View details
New Features
- Added GPT-6 Sol and Luna, including Amazon Bedrock support and migration prompts for older models. (#47332, #47347)
- Enabled fullscreen transcripts by default and added Shift-click to extend text selections. (#47178, #47414)
- Enabled automatic background-server startup for eligible interactive sessions, with recovery choices when server settings are incompatible. (#47179, #47318)
- Added an
fshortcut to fork conversations open in another app, preserving drafts and queued prompts. (#47185) - Made
/importavailable in remote sessions and local background-server sessions. (#47317) - Improved terminal rendering with Unicode bullets, checkboxes, aligned equations, and optimization notation. (#47191, #47322)
Bug Fixes
- Preserved active voice conversations when switching threads. (#47381)
- Recovered unsent question answers into the composer when turns end, without disrupting active history searches. (#47422, #47423)
- Respected tmux mouse settings and restored native scrollback for Terminal.app over SSH in automatic screen mode. (#47399, #47417)
- Fixed configured proxy routing for realtime connections and standalone web search, including search redirects. (#47101, #47142, #47204)
- Added retries for transient file-upload failures and increased the upload timeout to five minutes. (#47122, #47393)
- Enforced network restrictions across redirects and ongoing HTTP and WebSocket traffic, including cancellation when policy changes revoke access. (#47389, #47407)
Changelog
Full Changelog: rust-v0.156.0...rust-v0.157.0
- #47063 Add a partial index for agent message board root posts @jif-oai
- #47064 Stop redundant message-board reads when limits reach one @jif-oai
- #47065 Deduplicate deprecation notices in the TUI transcript @etraut-openai
- #47068 Highlight selected newlines in the transcript view @etraut-openai
- #47073 Wait for thread idle in Guardian context budget tests @jif-oai
- #47074 Refresh host-supplied cloud skills at turn startup @TAFOYA-OAI
- #47075 Include attributed previews in agent message board notifications @jif-oai
- #47077 Serialize environment updates and cancel removed pending attachments @sayan-oai
- #47079 Mask daemon socket paths exposed through ancestor bind mounts @nicksteele-oai
- #47081 Track cumulative MCP attribution across requests and thread history @peilin-openai
- #47082 Show the voice toggle in the TUI shortcut overlay @etraut-openai
- #47083 Extract per-thread enrichment into a dedicated async helper @aibrahim-oai
- #47084 Avoid building a host SQLite driver for SQLx macros @aibrahim-oai
- #47085 Update model catalog descriptions and GPT-5.6-Sol priority @andrewgu-oai
- #47086 Format analytics credit usage with consistent decimal precision @fcoury-oai
- #47088 Disable unused default dependency features @aibrahim-oai
- #47089 Centralize JSON-RPC response serialization through payloads @aibrahim-oai
- #47094 Restrict Unix local MCP servers to stdio descriptors @yuzhu-oai
- #47095 Remove the
rust-release-prepareworkflow @andrewgu-oai - #47096 Keep TUI hints immediately above the composer @fcoury-oai
- #47100 Preserve assistant answers in bounded TUI task responses @etraut-openai
- #47101 Honor configured proxies for realtime WebSocket connections @celia-oai
- #47106 Preserve originating turn metadata for yielded skill calls @eddie-openai
- #47108 Preserve required Windows runtime variables for filesystem helpers @iceweasel-oai
- #47112 Lowercase the retry hint for conversations open in another app @fcoury-oai
- #47113 Persist thread creator identity in rollouts and SQLite @nornagon-openai
- #47114 Preserve and expose thread item lifecycle timestamps @chiam-oai
- #47116 Honor the configured product SKU in remote plugin requests @jessedu-oai
- #47118 Support model-catalog overrides for Code Mode tool messages @rhan-oai
- #47121 Pass thread IDs to attachment uploads @kchainani-oai
- #47122 Increase OpenAI file blob upload timeout from 60 seconds to 5 minutes @wilkes-oai
- #47125 Add extra policy configuration for Guardian reviews @won-openai
- #47129 Preserve foreign working directories in extension tool environments @anp-oai
- #47130 Remove the
ultrafastservice tier fromgpt-5.6-sol@andrewgu-oai - #47132 Support caller-provided MITM CAs in the network proxy @viyatb-oai
- #47137 Prevent horizontal transcript selection from triggering autoscroll @imac-oai
- #47142 Honor system proxy settings for standalone web search @celia-oai
- #47143 Extract exec-server CLI startup into a dedicated module @anp-oai
- #47149 Update code mode catalog snapshot hashes @andrewgu-oai
- #47155 Ignore stale thread-close notifications after resuming a thread @etraut-openai
- #47158 Harden gateway OAuth credential persistence and error redaction @alexsong-oai
- #47159 Expose HTTP origins in MCP server status @frantic-openai
- #47162 Apply workspace routing to Guardian v2 classifier requests @acrognale-oai
- #47170 Add explicit gateway login control and authentication status @alexsong-oai
- #47174 Preserve empty cell metadata under pending tool-call pressure @ningyi-oai
- #47178 Enable the fullscreen transcript by default @etraut-openai
- #47179 Enable automatic daemon startup by default @etraut-openai
- #47185 Allow forking conversations locked by another app in the TUI @fcoury-oai
- #47191 Render aligned equations and optimization notation in TUI math @etraut-openai
- #47199 Separate thread preparation from execution persistence @dermanyang-oai
- #47204 Resolve proxy routes for standalone web search redirects @celia-oai
- #47207 Add explicit gateway OAuth sign-in to app-server @alexsong-oai
- #47212 Preserve MCP request trace context across transport workers @bromano-oai
- #47235 Route multi-agent spawning through
SpawnRequest@jif-oai - #47236 Suppress agent message board notifications to the post author @jif-oai
- #47240 Prevent V2 agent eviction from racing with queued messages @jif-oai
- #47244 Centralize agent resume handling in
LocalAgentControl@jif-oai - #47248 Add explicit app and account targets to MCP resource reads @victor-openai
- #47249 Drop descendant channel posts from retained remote compaction v2 history @jif-oai
- #47252 Return agent snapshots from
close_agent@jif-oai - #47257 Preserve explicit message-board unsubscribes when posting @jif-oai
- #47258 Test spawn settings reporting after child removal @jif-oai
- #47259 Subscribe authors to message-board channels created by posting @jif-oai
- #47263 Expose hosted plugin extensions in app-server summaries @victor-openai
- #47267 Stream agent snapshots from local status subscriptions @jif-oai
- #47271 Implement
AgentControlforLocalAgentControl@jif-oai - #47272 Allow Guardian sync review across compaction hash differences @felixxia-oai
- #47275 Enable Guardian thread context by default @felixxia-oai
- #47281 Add regression coverage for message board unsubscribe persistence @jif-oai
- #47287 Update the Guardian extra-policy snapshot for retained instructions @felixxia-oai
- #47292 Consolidate agent operations in the
AgentControlimplementation @jif-oai - #47301 Separate local agent runtime state from controller handles @jif-oai
- #47302 Use compact display metadata for Guardian review threads @charliemarsh-oai
- #47303 Clean up legacy Guardian thread metadata in SQLite @charliemarsh-oai
- #47317 Enable
/importin remote and local daemon sessions @etraut-openai - #47318 Offer explicit recovery for incompatible background servers @etraut-openai
- #47319 Match agent status symbols to the selected row style @etraut-openai
- #47320 Fix Escape navigation in read-only agent sessions @etraut-openai
- #47321 Honor the system clock preference across more TUI timestamps @etraut-openai
- #47322 Render TUI Markdown lists with Unicode bullets and checkboxes @etraut-openai
- #47323 Persist resume metadata in compaction checkpoints @owenlin0
- #47325 Keep report reason tags within Sentry limits @ningyi-oai
- #47326 Restrict MCP OAuth authorization endpoints to HTTP(S) @viyatb-oai
- #47327 Preserve image generation request IDs on failure @chrisdong-oai
- #47329 Standardize TUI menu description wording and punctuation @etraut-openai
- #47330 Identify failed SQLite databases in
codex doctoroutput @dkovalenko-oai - #47331 Avoid redundant spacing above the transcript composer @fcoury-oai
- #47332 Add GPT-6 Sol and Luna to the model catalog @andrewgu-oai
- #47338 Move the activity inspection hint into keyboard shortcut help @fcoury-oai
- #47340 Add conditional turn interruption that preserves pending input @pmccrary-oai
- #47342 Skip stored title lookups for ephemeral forks @keyz
- #47347 Add GPT-6 Sol and Luna to Amazon Bedrock catalogs @celia-oai
- #47348 Overlap subagent spawn persistence and clean up cancelled children @owenlin0
- #47349 Move plugin recommendations into developer context @adaley-openai
- #47350 Reuse cloud skill catalogs across turns until invalidated @hlevy-openai
- #47353 Preserve
invalid_promptas a distinct error classification @rennie-openai - #47355 Reserve spacing after recaps at the transcript tail @fcoury-oai
- #47358 Color paths and URLs in
codex doctorby check status @dkovalenko-oai - #47360 Preserve user prompt URL destinations across terminal widths @fcoury-oai
- #47361 Restrict Windows sandbox default object access to the logon session @viyatb-oai
- #47362 Bound inbound exec-server requests across client transports @viyatb-oai
- #47365 Resume model context from the latest compaction boundary @owenlin0
- #47369 Overlap agent metadata reads when resuming a V2 root @vkg-oai
- #47375 Add an opt-in preference for the local MXC sandbox @iceweasel-oai
- #47377 Add opt-in reasoning status for realtime V3 delegations @guinness-oai
- #47380 Route TUI voice controls through the app @etraut-openai
- #47381 Keep voice conversations running across TUI thread navigation @etraut-openai
- #47382 Show a voice badge in the agents overview @etraut-openai
- #47384 Restore composer hints after clearing selection at the transcript bottom @fcoury-oai
- #47389 Enforce network policy throughout HTTP and WebSocket requests @acrognale-oai
- #47393 Retry transient OpenAI file blob upload failures @mtsui-oai
- #47397 Refresh bundled model metadata and instructions @andrewgu-oai
- #47399 Respect tmux mouse settings in fullscreen and overlays @fcoury-oai
- #47407 Enforce application network policy across app-server requests @acrognale-oai
- #47408 Enforce application network policy for AWS auth and telemetry @acrognale-oai
- #47410 Honor network policy in remote control and recover remote execution @acrognale-oai
- #47411 Apply shared network policy throughout embedded Codex startup @acrognale-oai
- #47413 Cache decrypted gateway OAuth secrets per backend @charliemarsh-oai
- #47414 Support Shift-click to extend transcript selections @etraut-openai
- #47417 Use native scrollback for Terminal.app over SSH in auto mode @fcoury-oai
- #47422 Recover unsent question drafts when TUI turns end @imac-oai
- #47423 Preserve history search during background draft recovery @imac-oai
- #47424 Clear pending async question notifications when turns end @imac-oai
- #47428 Apply inherited environment settings at turn boundaries @sayan-oai
- #47435 Allow environment selection updates during an active turn @sayan-oai
- #47437 Stabilize retry timing and WebSocket tests @anp-oai
-
ChatGPT for iOS 1.2026.258
New features
- Redesigned home screen.
- New iPad split view keeps your task list beside the open task in landscape.
- Added support for browsing changes inside nested Git repositories.
Improvements and bug fixes
- Side chats now carry over attachments, selected text, and review comments.
- Fixed replies appearing blank or incomplete when the next queued prompt starts.
- New tasks preserve your selected computer and better recognize project checkouts and worktrees.
- More reliable file links, with clearer loading feedback when opening files and new tasks.
- Clearer error messages explain why task history could not load and what to try next.
- Smoother animations when adding photos from the camera or Photo Library.
- Fixed pairing failures caused by an incorrect device clock and SSH connection issues on Mac and Linux.
-
Codex CLI 0.156.1
$ npm install -g @openai/codex@0.156.1View details
New Features
- Choose GPT-6 Sol or GPT-6 Luna from the model picker. The rate-limit switch prompt now recommends GPT-6 Luna. (#47405)
Changelog
Full Changelog: rust-v0.156.0...rust-v0.156.1
-
Codex app 26.917
New features
- Added a notification sound setting for task completions, permission requests, and questions. Choose Default, Classic, or None. On macOS, you can also choose a system sound or import an audio file.
Performance improvements and bug fixes
- Added a sign-in recovery dialog for session errors that prevent app startup.
- Preserved chat titles in the Rename dialog when worktree setup finishes.
-
GPT-6 Sol and Luna in Codex and ChatGPT Work
GPT-6 Sol and GPT-6 Luna are rolling out to Codex and ChatGPT Work at lower token prices than their GPT-5.6 predecessors. Use Sol for complex coding and agentic workflows, and Luna for focused, high-volume tasks.
Both models are rolling out to Plus, Pro, Business, Enterprise, and Edu users. Free and Go users can access Luna in the desktop app. Availability depends on rollout and workspace settings; Enterprise administrators must enable the new models. In ChatGPT, the models are available in Work and Codex, but not Chat.
Choose a model in the picker when available. In the CLI, use
/modelor start a task withcodex --model gpt-6-solorcodex --model gpt-6-luna.See Models for selection and migration guidance, Pricing for credit rates and usage, and Workspace model availability for administrator controls.
-
Codex CLI 0.156.0
$ npm install -g @openai/codex@0.156.0View details
New Features
- Choose an optional fullscreen UI with
/tuifor your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #46883, #46895) - Voice conversations are enabled by default, with an F8 toggle, a
/voice settingspicker, and bundled audio runtimes for Linux and Windows. (#44921, #46071, #44622, #44714, #44922) - Explore account usage, token totals, and plugin and skill activity through the
/usageanalytics dashboard. (#45764, #45769) - Filter tasks by status and create worktree sessions from the agent command center; worktree support is now enabled by default. (#46839, #45276, #44870)
- Customize the terminal with six new themes and view supported Mermaid diagrams and display equations directly in responses. (#46504, #46054, #45612)
- Update the local background server through
/daemon, or bypass it with--no-daemon. (#45854, #46088)
Bug Fixes
- Preserve streamed answers and plans when turns fail, are interrupted, or receive subagent completion events. (#45549, #46867)
- Fix clipboard forwarding in tmux and SSH sessions and preserve tab indentation when terminals send pasted text as individual keystrokes. (#45457, #45454)
- Restore Plan mode when resuming sessions and preserve thread identity and settings when editing earlier prompts. (#45519, #45845)
- Recover login through system proxies and refresh MCP credentials when OAuth discovery returns a 503 error. (#46562, #44636)
- Prevent speech from being dropped during playback pauses or bursts of incoming audio. (#46880)
- Close sandbox isolation gaps involving inbound Windows connections, privileged Linux/macOS sockets, and writes through read-only macOS file handles. (#44639, #45984, #46500)
Documentation
- Clarify that deprecated
friendlyandpragmaticpersonality settings no longer select response styles. (#45809) - Explain how
?matches a single character in network proxy allow and deny patterns. (#46027)
Chores
Changelog
Full Changelog: rust-v0.155.0...rust-v0.156.0
- #44606 Preserve whole diagnostic attachments and report incomplete uploads @chess-oai
- #44611 Preserve root turn attribution in turn-start events @owenlin0
- #44613 Enable user verification for local Codex Desktop sessions @riley-oai
- #44615 Treat non-interactive dumb terminals as warnings in
codex doctor@etraut-openai - #44616 Simplify enterprise OAuth login helpers and expand callback tests @nicksteele-oai
- #44617 Invalidate cached Guardian approvals for unscored permission widening @jif-oai
- #44619 Allow discarded code mode tool responses to be garbage collected @jif-oai
- #44620 Support temporary and minimal filesystem grants in MXC @iceweasel-oai
- #44622 Add
/voice settingsto choose a voice for future conversations @bc-openai - #44626 Add bounded environment transport for MXC launch requests @iceweasel-oai
- #44628 Expose session analytics state in Responses turn metadata @marksteinbrick-oai
- #44629 Add manual callback input to MCP OAuth login @willwang-openai
- #44631 Focus the task list when reopening the agent command center @etraut-openai
- #44636 Recover OAuth metadata discovery from 503 responses via OIDC @malsamiri-oai
- #44639 Block non-loopback inbound traffic for the Windows offline sandbox @viyatb-oai
- #44646 Honor thread analytics opt-outs when using shared clients @priyanshusingh-de
- #44650 Enforce managed model provider selection and definitions @alexsong-oai
- #44651 Keep command center errors visible and preserve drafts @etraut-openai
- #44654 Preserve missing environment variable diagnostics in Codex Doctor @etraut-openai
- #44655 Honor thread-level plugin exclusions across runtime capabilities @mzeng-openai
- #44656 Attribute turn metrics to the models used during the turn @eternal-openai
- #44658 Keep Windows sandbox private desktops alive across helper exits @chess-oai
- #44659 Preserve turn triggers across delegated agent work @joeytrasatti-openai
- #44661 Trace tool call receipt, result readiness, and code-mode dispatch @anp-oai
- #44666 Honor system reduced-motion preferences in the TUI @imac-oai
- #44669 Resolve filesystem denials with explicit path context @seanh-oai
- #44670 Restrict login setup redirects to known platform origins @hintz-openai
- #44671 Keep voice sessions alive through mute and audio backlog @bc-openai
- #44675 Refresh global instructions at model-request boundaries @vkg-oai
- #44676 Resolve permission profiles with explicit execution-host path context @seanh-oai
- #44691 Warn about ignored configuration settings @andrewgu-oai
- #44693 Preserve selected profile settings over managed new-thread defaults @alexr-oai
- #44694 Include the Windows sandbox service in release artifacts @johnl-oai
- #44701 Add a provider for thread-scoped instructions @vkg-oai
- #44711 Return to the command center after session cancellation or deletion @etraut-openai
- #44714 Bundle Linux voice runtimes and improve audio reliability @bc-openai
- #44732 Clarify folder trust prompts and add restricted widget support @etraut-openai
- #44742 Preserve editor yanks across new sessions and thread switches @bc-openai
- #44744 Make archive confirmation number shortcuts act immediately @etraut-openai
- #44746 Check folder trust after resolving the startup destination @etraut-openai
- #44747 Update
quinn-protoand allow the pinned H3 Git source @richardopenai - #44749 Preserve voice caption order when replaying TUI history @bc-openai
- #44752 Render Markdown in agent overview task details @etraut-openai
- #44755 Check folder consent before creating or resuming TUI tasks @etraut-openai
- #44814 Test approved command execution with managed unified exec disabled @jif-oai
- #44826 Expose advertised MCP server capabilities in status responses @gpeal
- #44832 Add trusted enterprise MCP auth configuration @nicksteele-oai
- #44857 Add consistent theme-based thread colors across the TUI @etraut-openai
- #44862 Preserve parent cache affinity for ephemeral forks @jif-oai
- #44865 Scope code mode callback delegates to individual executions @abhinav-oai
- #44866 Preserve originating context for yielded code-mode tool calls @abhinav-oai
- #44867 Preserve originating budgets for code mode notifications @abhinav-oai
- #44870 Enable worktrees by default and clarify local daemon errors @bc-openai
- #44872 Add managed network policy support to the Windows MXC sandbox @iceweasel-oai
- #44877 Return public key metadata from user verification enrollment @riley-oai
- #44879 Fade Astra composer stars and stabilize cursor redraws @imac-oai
- #44883 Reject token-budget history notes for unsupported starting models @jif-oai
- #44893 Expose available access programs in model discovery @faizan-oai
- #44903 Wire up the native Windows MXC helper entry point @iceweasel-oai
- #44905 Expose disabled plugin settings in the app-server API @mzeng-openai
- #44915 Remove the deprecated
thread/rollbackAPI @owenlin0 - #44921 Enable TUI voice conversations by default @bc-openai
- #44922 Bundle native voice runtimes in Windows releases @bc-openai
- #44924 Refresh the speaker format when restarting voice output @bc-openai
- #44925 Accept voice response audio before captions on quiet turns @bc-openai
- #44928 Preserve voice meter history through quiet samples @bc-openai
- #44930 Embed friendly instructions in bundled GPT-5.4 and GPT-5.5 @rhan-oai
- #44931 Stop setting
YARN_NO_PROXYin the managed proxy environment @viyatb-oai - #44932 Unify context snapshots and group requests into windows @pakrym-oai
- #44933 Remove Windows world-writable scans and warnings from the TUI @etraut-openai
- #44934 Add scenario snapshots for remote compaction and Code Mode tools @pakrym-oai
- #44935 Remove personality selection from the TUI @rhan-oai
- #44938 Add connector auth failure detection without an install URL @priyanshusingh-de
- #44939 Respect execution hosts in Windows sandbox setup @etraut-openai
- #44942 Clarify the Windows Visual C++ runtime notice for voice packages @bc-openai
- #44944 Enforce managed provider requirements on existing app-server threads @alexsong-oai
- #44945 Route TUI Windows sandbox setup through the app server @etraut-openai
- #44946 Retire Friendly and Pragmatic personality selection @rhan-oai
- #44948 Add context snapshots for async questions and plugin refresh @pakrym-oai
- #44952 Keep voice captions visible across speaker updates and history handoff @bc-openai
- #44957 Add model grouping to the agent command center @etraut-openai
- #44969 Open tasks managed elsewhere as read-only history in the command center @etraut-openai
- #44970 Show task tokens and usage estimates in the agent command center @etraut-openai
- #44976 Make context snapshot text rendering consistent @pakrym-oai
- #45035 Run DotSlash publishing directly on Ubuntu runners @charliemarsh-oai
- #45039 Use gzip compression level 6 for Codex package archives @charliemarsh-oai
- #45051 Consolidate Rust release artifact downloads @charliemarsh-oai
- #45089 Delay automatic recaps and compact their TUI layout @fcoury-oai
- #45090 Preserve conversation context and separate next actions in recaps @fcoury-oai
- #45094 Estimate history tokens from content instead of serialized envelopes @won-openai
- #45108 Cancel pending thread title generation after manual renames @fcoury-oai
- #45112 Use blueberry in the realtime background-agent test fixture @anp-oai
- #45116 Prevent multiline report notes from submitting early @etraut-openai
- #45124 Add a feature flag for asynchronous user messages @alishobeiri-oai
- #45135 Preview streaming prose before a newline arrives in the TUI @etraut-openai
- #45137 Remove Astra sparkle animation from the TUI composer @fcoury-oai
- #45149 Use OpenSSL 3.6.4 for musl builds @zm-oai
- #45169 Extract Windows sandbox setup and installation storage into the library @zm-oai
- #45176 Wire the Windows MXC sandbox into command execution @iceweasel-oai
- #45178 Split Windows sandbox cleanup into preparation and completion phases @zm-oai
- #45180 Extract shared network configuration and environment policy helpers @seanh-oai
- #45182 Validate Windows sandbox token groups before copying SIDs @zm-oai
- #45185 Bind direct tool-call metadata to invocation outputs @ningyi-oai
- #45224 Register Windows desktop uninstall ownership before sandbox setup @chess-oai
- #45248 Use captured step settings for request metadata and tool hooks @abhinav-oai
- #45255 Open new sessions directly from the command center @etraut-openai
- #45262 Route pastes into the active history search query @charliemarsh-oai
- #45271 Preserve terminal scrollback when growing the TUI viewport @fcoury-oai
- #45276 Add worktree session creation to the agents overview @etraut-openai
- #45312 Extract Windows sandbox configuration preparation into a helper @seanh-oai
- #45345 Publish opt-in provisioned macOS packages with Rust releases @riley-oai
- #45399 Cancel code mode timer tasks when cleared or the cell finishes @jif-oai
- #45409 Add session and originating window IDs to MCP request metadata @jif-oai
- #45413 Invalidate Guardian review sessions after parent history resets @jif-oai
- #45417 Extract guardian transcript selection into
guardian-context@felixxia-oai - #45418 Extract Guardian conversation bookkeeping into the reviewer crate @felixxia-oai
- #45420 Extract Guardian sampler execution into a dedicated module @felixxia-oai
- #45428 Avoid cloning MCP server status snapshot data @charliemarsh-oai
- #45439 Share tool output schemas and defer MCP envelope construction @charliemarsh-oai
- #45440 Share Apps tool catalogs without retaining unused snapshots @charliemarsh-oai
- #45441 Preserve Guardian parent response IDs across sampling requests @jif-oai
- #45445 Attribute command and plugin analytics to the invoking model @jwang-openai
- #45454 Preserve tabs in non-bracketed paste bursts @etraut-openai
- #45455 Refactor Windows sandbox setup and service helpers @zm-oai
- #45457 Fix clipboard routing for tmux and SSH sessions @fcoury-oai
- #45459 Resolve enterprise-managed MCP registrations in the catalog @nicksteele-oai
- #45461 Label rollout compression failures by stage and I/O error kind @jif-oai
- #45463 Allow dedicated listeners for managed network proxies @iceweasel-oai
- #45475 Fix fuzzy match scoring within Unicode lowercase expansions @etraut-openai
- #45487 Retain thread persistence acquisition through session cancellation @jif-oai
- #45489 Update
rustlsand AWS-LC dependencies in Cargo and Bazel lockfiles @zm-oai - #45491 Remove Guardian subagent-spawner plumbing @felixxia-oai
- #45492 Split Guardian V2 async scoring into focused modules @felixxia-oai
- #45493 Make the Guardian deadline cancellation helper crate-private @felixxia-oai
- #45495 Expose effective login methods in config requirements @acrognale-oai
- #45496 Trace global user instruction loading @vkg-oai
- #45499 Send local TUI images as portable attachments to remote app servers @etraut-openai
- #45501 Render inline TeX math as Unicode in the TUI @etraut-openai
- #45502 Add managed thread lifetimes with cancellation-safe startup @jif-oai
- #45503 Add revocable network policy primitives to the HTTP client @acrognale-oai
- #45504 Allow ConPTY output to close after the last console client exits @iceweasel-oai
- #45505 Add lifecycle tracing for unified exec @anp-oai
- #45506 Allow background persistence for steered user input @bryanashley
- #45509 Share MCP tool specs until search results are selected @owenlin0
- #45513 Allow setting
daybreakEnabledwhen starting a thread @faizan-oai - #45515 Filter plugin-install test analytics by event type @zm-oai
- #45516 Allow configuring the Guardian prompt template @won-openai
- #45517 Use a dedicated mock server in the provider enforcement test @zm-oai
- #45518 Route Guardian reviewers through ThreadManager for inline parents @jif-oai
- #45519 Restore collaboration mode when resuming threads @etraut-openai
- #45520 Add dependencies to the Windows sandbox service @zm-oai
- #45521 Move Guardian reviewer startup into the pool @jif-oai
- #45524 Enable MXC TTY launches and managed networking in the exec server @iceweasel-oai
- #45526 Stage Python runtime wheels directly from package directories @charliemarsh-oai
- #45528 Compress larger Windows release artifacts first @charliemarsh-oai
- #45529 Expose selected workspace routing in app-server account reads @acrognale-oai
- #45533 Harden and share Windows sandbox identity helpers @zm-oai
- #45534 Honor explicit Unix socket grants in the Linux managed sandbox @viyatb-oai
- #45535 Classify tool analytics events by call origin @eddie-openai
- #45537 Move Guardian reviewer lifecycle into the extension @jif-oai
- #45542 Add service-managed package registration for Windows sandbox accounts @zm-oai
- #45543 Refactor image content to use a shared
ImageReferencetype @kchainani-oai - #45544 Discourage logging full image generation results @Gan-Tu
- #45546 Move daemon packages out of the standalone CLI installation @etraut-openai
- #45548 Honor prepared Unix socket permissions in Seatbelt @viyatb-oai
- #45549 Preserve streamed answers and plans when turns terminate @etraut-openai
- #45550 Add opt-in registered package execution to the Windows sandbox @zm-oai
- #45554 Use shared Bazel cache preparation in SDK CI @charliemarsh-oai
- #45556 Add attachment upload and resolution APIs and pass stores into sessions @kchainani-oai
- #45558 Seed missing daemon installs from complete local CLI packages @etraut-openai
- #45559 Resume Windows sandbox registration refresh after service restarts @zm-oai
- #45579 Copy current thread attachments into non-ephemeral forks @joeytrasatti-openai
- #45580 Add explicit daemon package replacement from the CLI @etraut-openai
- #45602 Fix retry classification for throttling and quota errors @sdcoffey
- #45612 Render standalone display math in the TUI @etraut-openai
- #45649 Add elicitation classification support to app and MCP analytics @priyanshusingh-de
- #45669 Centralize child agent configuration in the agent module @jif-oai
- #45670 Move V2 agent message delivery into
AgentControl@jif-oai - #45672 Consolidate Guardian reviewer lifecycle ownership @jif-oai
- #45676 Move spawned-agent interruption rules into
AgentControl@jif-oai - #45677 Move Guardian review reporting and denial accounting into the extension @jif-oai
- #45679 Retire the unused Guardian extension prototype API @felixxia-oai
- #45680 Restrict guardian assessment parsing and circuit breaker visibility @felixxia-oai
- #45683 Consolidate guardian transcript tests in
guardian-context@felixxia-oai - #45684 Pass
ReviewModelthrough guardian review sessions @felixxia-oai - #45693 Move Guardian approval routing into the reviewer extension @jif-oai
- #45711 Add startup tool allowlists for threads @jif-oai
- #45716 Classify MCP auth and approval outcomes in analytics @priyanshusingh-de
- #45729 Move Guardian reviewer configuration into the extension @jif-oai
- #45730 Separate executor sandbox selection from Windows sandbox levels @iceweasel-oai
- #45736 Route Guardian requests through
/responseswith identifying headers @jif-oai - #45737 Separate Windows sandbox implementations from legacy setup modes @iceweasel-oai
- #45739 Add typed account analytics reports to the backend client @fcoury-oai
- #45740 Add account analytics data normalization to the TUI @fcoury-oai
- #45741 Add token history and credit formatting helpers for analytics @fcoury-oai
- #45742 Add account-bound authentication for analytics requests @fcoury-oai
- #45746 Explicitly gate DotSlash publishing on release success @chess-oai
- #45749 Extract reusable Bash and Zsh startup scripts @jif-oai
- #45755 Honor canonical plugin disables for shared connectors @mzeng-openai
- #45757 Wire Windows sandbox selection into managed proxy routing @iceweasel-oai
- #45760 Disable V8 optimization paths affected by array sort bugs @kliu128
- #45762 Load analytics reports with server plans and account identity checks @fcoury-oai
- #45763 Add stacked chart primitives for account analytics @fcoury-oai
- #45764 Add an account analytics dashboard to
/usage@fcoury-oai - #45765 Add Top chats to usage analytics @fcoury-oai
- #45766 Add gated plan usage history to TUI analytics @fcoury-oai
- #45768 Add consumer Top chats usage analytics @fcoury-oai
- #45769 Add an account Summary tab to Analytics @fcoury-oai
- #45770 Improve analytics chart readability and navigation @fcoury-oai
- #45772 Expose experimental analytics plan history and improve navigation @fcoury-oai
- #45779 Use native process identities for PID-managed daemons @etraut-openai
- #45780 Allow daemon updates to restore pinned packages to latest stable @etraut-openai
- #45781 Normalize bullet glyphs in the image preparation disconnect snapshot @jgershen-oai
- #45782 Preserve Guardian authorization evidence across checkpoint migration @felixxia-oai
- #45789 Preserve Guardian evidence during checkpoint migration @felixxia-oai
- #45794 Support image references by file ID in inputs and tool outputs @kchainani-oai
- #45796 Preserve
ImageUserInputin the Python SDK @kchainani-oai - #45799 Complete Windows sandbox uninstall cleanup @chess-oai
- #45805 Preserve MCP App UI metadata in tool-call events and history @victor-openai
- #45806 Restrict plugin install requests to the root thread @rennie-openai
- #45807 Record interrupted turns in managed daemon recovery snapshots @etraut-openai
- #45809 Retire the personality feature flag and document deprecated settings @rhan-oai
- #45811 Bound WSL terminal detection and handle inconclusive probes safely @etraut-openai
- #45812 Add workspace routing support for Responses requests @acrognale-oai
- #45813 Track Windows sandbox policy and per-thread executor hosts in the TUI @etraut-openai
- #45817 Add a bounded Mermaid text renderer @etraut-openai
- #45820 Continue interrupted work after managed daemon restarts @etraut-openai
- #45821 Use app-server state for TUI Windows sandbox decisions @etraut-openai
- #45822 Add opt-in response body limits to the HTTP transport @sergio-oai
- #45823 Run R2 publishing when release dependencies succeed @dkumar-oai
- #45825 Add opt-in nonfatal handling for clock read failures @vivi
- #45830 Use app-server configuration for Windows sandbox state in the TUI @etraut-openai
- #45831 Allow session-only model and reasoning selection in the TUI @etraut-openai
- #45837 Hide WSLg's duplicate root in restricted Linux sandboxes @etraut-openai
- #45845 Revert the current thread when editing an earlier TUI prompt @etraut-openai
- #45849 Preserve the app-server shutdown signal future across loop iterations @jgershen-oai
- #45852 Preserve executor path conventions in permission summaries @seanh-oai
- #45854 Add
/daemonmenu for local background server updates @etraut-openai - #45863 Preserve executor path URIs in permission profile workspace roots @seanh-oai
- #45865 Reject paths in project documentation fallback filenames @etraut-openai
- #45900 Add a hidden HTTP/3 TCP tunnel command @richardopenai
- #45915 Make Code Mode wrappers transparent to Guardian model policies @jif-oai
- #45928 Bound model catalog decode errors and classify request timeouts @jif-oai
- #45933 Avoid redundant model catalog lookups in reused Guardian reviewers @jif-oai
- #45956 Record memory storage size after successful consolidation @jif-oai
- #45957 Centralize Guardian policy resolution in config and protocol @jif-oai
- #45960 Tag memory usage telemetry with the memory version @jif-oai
- #45964 Expose partial completion in rollout compression metrics @jif-oai
- #45966 Measure rollout read and materialization durations @jif-oai
- #45978 Keep selection adjacent when hiding tasks in the agents overview @etraut-openai
- #45980 Fall back to summary history for read-only conversations @etraut-openai
- #45981 Preserve session config when switching thread permission profiles @etraut-openai
- #45982 Use native DNS resolution for the network proxy on macOS @jdkula-openai
- #45983 Show a loading message when opening tasks from the agents overview @etraut-openai
- #45984 Isolate app-server Unix sockets from filesystem-restricted commands @etraut-openai
- #45985 Replace guardian review result tuples with named structs @felixxia-oai
- #45987 Centralize Guardian action preparation for review @felixxia-oai
- #46002 Extract route-aware HTTP request execution into a separate module @acrognale-oai
- #46004 Preserve attachment Unix socket grants when controller policy is omitted @open-matt
- #46006 Report clock failures again after recovery @anp-oai
- #46008 Route built-in permission selections through the app server @etraut-openai
- #46009 Centralize compaction checkpoint selection and validation @felixxia-oai
- #46010 Enable app tool result metadata with analytics controls @ningyi-oai
- #46011 Enforce managed residency when constructing API providers @andrewgu-oai
- #46013 Route permission shortcuts through the shared selection flow @etraut-openai
- #46015 Allow callers to disable executor skills per environment @vkg-oai
- #46019 Allow hosted Apps MCP contributions to override the protocol mode @teddywyly-oai
- #46020 Add an experimental rollout compression endpoint @jif-oai
- #46026 Centralize model-message resolution and rendering in
codex-prompts@rhan-oai - #46027 Document and test
?wildcards in network proxy domain patterns @viyatb-oai - #46029 Allow browser app cleanup hooks on interrupt @syuan-oai
- #46031 Keep Noise relay streams alive after repeated handshake failures @viyatb-oai
- #46032 Require forced macOS preferences for managed configuration @joeflorencio-openai
- #46033 Preserve orchestrator skill caches across MCP runtime updates @hlevy-openai
- #46035 Add per-app tool exposure configuration @ptiet-oai
- #46036 Preserve config error causes when saving the approvals reviewer @darius-oai
- #46038 Test Windows sandbox bin DACL modification permissions @zm-oai
- #46040 Default TUI animations off when a screen reader is detected @etraut-openai
- #46041 Tighten request handling in Guardian approval tests @jgershen-oai
- #46042 Add read-only policy support to MCP tool requests @rennie-openai
- #46043 Repair expired Windows sandbox account passwords during setup @zm-oai
- #46044 Include Code Mode tool metadata in compaction prompts @ningyi-oai
- #46047 Tag rollout compression metrics by trigger @jif-oai
- #46051 Track WebSocket continuation modes and full-input send reasons @vkg-oai
- #46054 Render Mermaid code blocks as diagrams in the TUI @etraut-openai
- #46058 Attribute analytics events to realtime voice sessions @chrisdong-oai
- #46063 Trim Guardian tests and tighten request layout assertions @felixxia-oai
- #46064 Consolidate Guardian tests at shared policy and context boundaries @felixxia-oai
- #46065 Route prepared images through the attachment store @kchainani-oai
- #46066 Keep MCP user interaction on the root thread @rennie-openai
- #46067 Remove the
doneprefix from TUI completion timestamps @etraut-openai - #46069 Use syntax theme colors for inline code and file paths @etraut-openai
- #46070 Suppress warnings when skill descriptions are shortened @etraut-openai
- #46071 Add a configurable F8 shortcut for voice conversations @etraut-openai
- #46072 Account for file images in context budgets and Guardian reviews @kchainani-oai
- #46073 Bound code-mode output previews across result blocks @etraut-openai
- #46075 Use captured step settings when spawning subagents @rhan-oai
- #46077 Keep the composer responsive during Command Center session creation @etraut-openai
- #46081 Mark finished empty Code Mode tool inventories as complete @nf-openai
- #46088 Add
--no-daemonto bypass the shared background server @etraut-openai - #46096 Add a one-time composer starfield for new Astra tasks @imac-oai
- #46104 Pause TUI events in the agents overview regression test @etraut-openai
- #46107 Box app-server request handler futures to reduce stack usage @etraut-openai
- #46108 Replace Sites migration state with a runtime compatibility guard @jiwon-oai
- #46112 Preserve filesystem sandbox policy context when the cwd disappears @anp-oai
- #46116 Make TUI web and image activity summaries compact and descriptive @etraut-openai
- #46117 Add opt-in automatic background server startup @etraut-openai
- #46122 Route filesystem reads and writes by their own sandbox permissions @anp-oai
- #46123 Allow model catalogs to override the V2
spawn_agentdescription @rhan-oai - #46125 Fix daemon socket isolation checks for private tmp mounts @open-matt
- #46126 Record daemon startup and update telemetry with consent handling @etraut-openai
- #46179 Include sender user messages in Guardian delegation reviews @jif-oai
- #46230 Preserve configured Flex tiers without catalog or fast-mode support @sdcoffey
- #46237 Improve Windows sandbox error details and registry cleanup @chess-oai
- #46239 Prefer the provisioning service for automatic Windows sandbox setup @zm-oai
- #46241 Repair Windows sandbox access to existing runtime children @chess-oai
- #46245 Publish Guardian cached scores and coverage atomically @felixxia-oai
- #46258 Preserve uploaded image file IDs in user message display history @kchainani-oai
- #46264 Relax delegation guidance in the v2
spawn_agentdescription @surajs-oai - #46266 Expand Unicode math rendering with accents, symbols, and delimiters @etraut-openai
- #46268 Add filesystem accessors bound to environment permissions @anp-oai
- #46271 Enable MXC selection through Windows sandbox configuration @iceweasel-oai
- #46278 Reduce R2 release upload concurrency and enable standard retries @anp-oai
- #46279 Preserve Guardian's reusable history prefix across approval requests @jif-oai
- #46281 Connect app-server workspace discovery to model request routing @acrognale-oai
- #46288 Add opt-in overhead timing to code-mode responses @cassirer-openai
- #46291 Filter saved reasoning overrides from requests when disabled @felixxia-oai
- #46292 Preserve selected reasoning effort for synchronous Guardian reviews @felixxia-oai
- #46293 Route skill discovery and loading through
EnvironmentAccess@anp-oai - #46294 Separate thread startup metadata from replay history @charliemarsh-oai
- #46297 Support catalog descriptions for all multi-agent V2 tools @rhan-oai
- #46300 Centralize OAuth login and refresh handling with safer diagnostics @alexsong-oai
- #46302 Validate network socket policies using the executor OS @seanh-oai
- #46303 Serialize release asset uploads to avoid secondary rate limits @imac-oai
- #46305 Avoid cloning turn items for app-server active turn lookups @charliemarsh-oai
- #46306 Preserve bio policy errors as a distinct non-retryable error @rennie-openai
- #46309 Preserve plugin caches across display metadata refreshes @vkg-oai
- #46310 Defer environment selection changes until the next turn @sayan-oai
- #46318 Add OAuth credential management for model provider gateways @alexsong-oai
- #46319 Preserve web search actions and results in exec JSON output @etraut-openai
- #46322 Set the Windows sandbox type in the pending environment test @sayan-oai
- #46323 Record active plugin inventory in turn analytics @marksteinbrick-oai
- #46324 Broaden compaction fallback to the current model @aibrahim-oai
- #46328 Avoid persisting project trust for projectless directories @viyatb-oai
- #46330 Move retry backoff into
codex-async-utils@bolinfest - #46331 Defer environment network policy validation until after composition @seanh-oai
- #46332 Dim conversation recaps in the TUI @etraut-openai
- #46333 Handle disabled Windows sandbox accounts during cleanup @chess-oai
- #46334 Share platform identity across path, network, and sandbox configuration @seanh-oai
- #46335 Keep MCP policy evaluation consistent with turn environments @sayan-oai
- #46482 Handle unknown error classifications and configure gateway OAuth @etraut-openai
- #46486 Make TUI async question replies compatible with desktop @etraut-openai
- #46487 Keep TUI exploration grouped across reasoning and nonzero exits @etraut-openai
- #46488 Split analytics tests into focused suites @rhan-oai
- #46490 Compose gateway OAuth with primary provider authentication @alexsong-oai
- #46492 Unify TUI tool output previews with a three-row limit @etraut-openai
- #46493 Allow
/reviewduring MCP startup @etraut-openai - #46494 Keep remote workspace roots under server control @etraut-openai
- #46495 Preserve the provisioned macOS CLI's code-signing identity @riley-oai
- #46498 Allow worktree sessions to use an existing local daemon @etraut-openai
- #46499 Allow approved escalation with environment-owned network policies @sayan-oai
- #46500 Block mutating fcntls in restricted macOS Seatbelt policies @nornagon-openai
- #46501 Add configuration and feature diagnostics to report metadata @pakrym-oai
- #46503 Use catalog model display names throughout the TUI @etraut-openai
- #46504 Add six bundled TUI themes and theme-aware accents @etraut-openai
- #46505 Support catalog parameter schemas for Multi-Agent V2 tools @rhan-oai
- #46506 Share ChatGPT cookies between HTTP and WebSocket transports @jif-oai
- #46507 Run Windows sandbox tests exclusively when local @jif-oai
- #46508 Refresh the model catalog before turns after auth changes @jif-oai
- #46509 Flush completed Guardian reviews before delivering decisions @jif-oai
- #46510 Avoid cloning active turn items for metadata-only thread resumes @charliemarsh-oai
- #46511 Avoid cloning excluded turn items during thread resume @charliemarsh-oai
- #46512 Capture Guardian review checkpoints from live context @jif-oai
- #46513 Rename
AgentControltoLocalAgentControl@jif-oai - #46514 Replay guardian checkpoints into a fresh session in tests @jif-oai
- #46516 Handle completion timing in the multi-agent resume test @jif-oai
- #46517 Stabilize the TUI exit interruption test @jif-oai
- #46518 Handle delayed process startup in the Guardian network approval test @jif-oai
- #46519 Use paused time in sampler and model catalog timeout tests @jif-oai
- #46521 Use macOS member fallback in shared process-group termination helpers @jif-oai
- #46522 Enable Guardian parent-compaction reuse by default @felixxia-oai
- #46523 Default local binding to true for MXC managed networking @iceweasel-oai
- #46524 Retry busy executable launches in packaged daemon tests @felixxia-oai
- #46527 Pin WinGet publishing dependencies in the release workflow @imac-oai
- #46528 Bind executor plugin measurements to the trusted plugin version @papayo-oai
- #46529 Allow compatible feature overrides when starting the shared daemon @etraut-openai
- #46530 Gate reasoning effort updates on explicit model support @felixxia-oai
- #46531 Preserve request-level reasoning effort for memory and title workers @felixxia-oai
- #46532 Remove
com.apple.runningboardfrom Seatbelt platform defaults @nornagon-openai - #46533 Disable reasoning summaries by default for new TUI threads @celia-oai
- #46534 Support
env_inheritinworkspace_root_test@bolinfest - #46535 Allow unrelated namespace mounts in Linux sandbox socket checks @pash-openai
- #46539 Add a command-start callback for tool lifecycle extensions @papayo-oai
- #46540 Centralize retry decisions and delays in
CodexErr@anp-oai - #46541 Add opt-in compaction after final responses @hlevy-openai
- #46542 Add authenticated remote plugin measurement references @papayo-oai
- #46543 Add bounded filesystem path diagnostics to
codex doctor@etraut-openai - #46544 Expose declared onboarding skills in plugin details @victor-openai
- #46546 Skip skill discovery when injecting items into initialized threads @hlevy-openai
- #46547 Expose a backend-independent agent control contract @jif-oai
- #46548 Advertise the control socket's WebSocket message size limit @konsti-openai
- #46551 Add a composite action to build and smoke-test Codex packages @anp-oai
- #46552 Move child completion routing into the agent controller @jif-oai
- #46553 Return
LiveAgentrecords from agent listing @jif-oai - #46554 Always use private desktops for legacy Windows sandboxes @iceweasel-oai
- #46555 Track executor registrations across connection refresh and recovery @viyatb-oai
- #46556 Keep step settings and approval environments consistent @sayan-oai
- #46557 Fix active-turn environment selection lookup @sayan-oai
- #46558 Add shared plugin catalog discovery APIs @TAFOYA-OAI
- #46559 Encapsulate rollout budget accounting in
LocalAgentControl@jif-oai - #46560 Fix stale environment config in the network approval test @sayan-oai
- #46561 Support explicit provider model catalog URLs @andrewgu-oai
- #46562 Add system proxy fallback for login and startup requests @abhinav-oai
- #46564 Rename plugin MCP and app extension APIs @TAFOYA-OAI
- #46565 Preserve reasoning order in TUI activity groups @etraut-openai
- #46566 Allow recovery commands when the current thread is unavailable @etraut-openai
- #46567 Separate plugin catalog listing from package resolution @TAFOYA-OAI
- #46568 Use captured environment state for permissions and daemon recovery @sayan-oai
- #46569 Set explicit turn triggers for exec and TUI requests @eddie-openai
- #46570 Tag remote model fetch duration by authentication mode @andrewgu-oai
- #46571 Preserve macOS Seatbelt exclusions in scratch directories @nornagon-openai
- #46572 Add turn-start cloud plugin discovery to the MCP extension @TAFOYA-OAI
- #46573 Add a standalone network proxy binary with JSON configuration @viyatb-oai
- #46574 Notify users when asynchronous questions arrive in the TUI @etraut-openai
- #46575 Preserve Windows package identity for sandboxed descendants @zm-oai
- #46577 Allow thread instruction providers to share updates with subagents @vinh-gpt
- #46578 Fix standalone network proxy policy initialization @etraut-openai
- #46579 Limit the agent command center to 10 recent sessions on startup @etraut-openai
- #46580 Keep Guardian reviews on the applied instruction snapshot @jif-oai
- #46583 Deny XPC service lookups in macOS Seatbelt profiles @nornagon-openai
- #46659 Move local child-process spawning into
codex-utils-pty@charliemarsh-oai - #46660 Make local child process launch settings explicit @charliemarsh-oai
- #46661 Avoid fork when spawning macOS filesystem helpers @charliemarsh-oai
- #46673 Extend server version notices to prerelease and local clients @etraut-openai
- #46680 Improve TUI contrast, keyboard hints, and picker layouts @etraut-openai
- #46691 Standardize TUI picker presentation and fix wrapping boundaries @etraut-openai
- #46692 Unify TUI picker styling and improve compact layouts @etraut-openai
- #46694 Unify TUI completion popup styling and preserve result identity @etraut-openai
- #46695 Unify TUI prompts with shared picker styling and layouts @etraut-openai
- #46697 Unify TUI picker styling and improve compact session layouts @etraut-openai
- #46708 Preserve logical source text and styles across TUI wrapping @etraut-openai
- #46709 Add compact activity rendering and preserve transcript source text @etraut-openai
- #46710 Restore rich tool details in persisted TUI transcripts @etraut-openai
- #46711 Align persisted TUI activity groups and reasoning with live output @etraut-openai
- #46712 Recover executed tool call metadata under recorder capacity pressure @ningyi-oai
- #46714 Skip polling delays in the external queue lifecycle test @charliemarsh-oai
- #46715 Split shell snapshot credential tests into focused cases @charliemarsh-oai
- #46719 Extract the TUI transcript overlay into its own module @etraut-openai
- #46720 Cache transcript layouts across measurement and rendering @etraut-openai
- #46721 Anchor transcript scrolling to entries and bound viewport rendering @etraut-openai
- #46722 Cancel pending transcript Home jumps on subsequent navigation @etraut-openai
- #46731 Render dynamic tool activity and preserve TUI history ordering @etraut-openai
- #46732 Add selection and copying to the transcript viewer @etraut-openai
- #46733 Integrate the interactive transcript into the alternate-screen TUI @etraut-openai
- #46734 Add transcript search and per-activity detail controls @etraut-openai
- #46739 Add compact transcript browsing and prompt navigation to the TUI @etraut-openai
- #46749 Stabilize transcript and composer interactions in the TUI @etraut-openai
- #46750 Preserve startup drafts and submit them when the session is ready @etraut-openai
- #46751 Add a warning footer and dedicated warnings viewer to the TUI @etraut-openai
- #46752 Add an animated Codex logo to fresh conversations and onboarding @etraut-openai
- #46832 Add independent controls for TUI visual effects @etraut-openai
- #46835 Respect reduced motion in the voice UI @etraut-openai
- #46837 Improve agent command center rows and page navigation @etraut-openai
- #46838 Refine the agent command center layout and metadata editing @etraut-openai
- #46839 Add status filter tabs to the agent command center @etraut-openai
- #46840 Simplify agent command center hints and back navigation @etraut-openai
- #46844 Select read-only permissions for temporary structured threads @etraut-openai
- #46845 Honor the system clock preference in TUI completion timestamps @etraut-openai
- #46849 Move fullscreen transcript control to TUI configuration @etraut-openai
- #46855 Increase the default terminal probe timeout from 100 ms to 250 ms @etraut-openai
- #46856 Support stadium nodes in Mermaid terminal diagrams @etraut-openai
- #46857 Extract shared text selection helpers for the TUI @etraut-openai
- #46858 Add mouse selection and editing to the fullscreen composer @etraut-openai
- #46859 Limit the welcome logo animation to onboarding @etraut-openai
- #46861 Remove analytics TUI snapshots @etraut-openai
- #46862 Refresh analytics on identity changes and compact usage menus @etraut-openai
- #46863 Stabilize usage dashboard navigation and add keyboard help @etraut-openai
- #46864 Improve usage report layouts and preserve reading positions @etraut-openai
- #46866 Enable mouse navigation in the TUI usage view @etraut-openai
- #46867 Preserve streamed answers when subagents finish @fcoury-oai
- #46877 Allow subagents to request MCP elicitation input @rennie-openai
- #46879 Count TUI launches by fullscreen transcript configuration @etraut-openai
- #46880 Preserve voice playback across pauses and packet bursts @etraut-openai
- #46882 Streamline agent command-center shortcuts and layout @etraut-openai
- #46883 Add
/tuito choose the terminal UI mode for the next launch @fcoury-oai - #46884 Enable plain clicks on transcript links and style bare URLs @etraut-openai
- #46895 Add right-click copying for transcript and composer selections @fcoury-oai
- #46897 Honor the effective terminal color level in activity charts @etraut-openai
- #46899 Make transcript list spacing uniform after streaming @fcoury-oai
- #46902 Hide Back to bottom when the current transcript tail is visible @fcoury-oai
- #46905 Identify local background servers in
/status@etraut-openai - #46910 Preserve transcript position when opening settings pickers @etraut-openai
- #46912 Keep quota warnings visible in the TUI @fcoury-oai
- #46917 Enforce current provider requirements for the model catalog @alexsong-oai
- #46922 Fix realtime V3 transcript reconciliation for handoffs @etraut-openai
- #46929 Remove the
Errorprefix from TUIconfig.tomlload errors @etraut-openai - #46931 Use shared, keymap-aware tips in the fullscreen composer @etraut-openai
- #46938 Add independent TUI rendering toggles for Mermaid, math, and tables @etraut-openai
- #46946 Populate the agents overview from background tool responses @etraut-openai
- #46952 Preserve metadata in native user verification requests @teddywyly-oai
- #46959 Add shared agent message-board extension interfaces @jif-oai
- #46962 Avoid exposing config values in
codex doctorerrors @jif-oai - #46966 Add SQLite storage for local agent message boards @jif-oai
- #46978 Implement paginated queries for the local agent message board @jif-oai
- #46979 Index channel posts by timestamp for latest-message lookups @jif-oai
- #46981 Canonicalize the workspace trust key in the doctor config test @jif-oai
- #46985 Add collaboration tools for the agent message board @jif-oai
- #46989 Expand agent message board tool integration coverage @jif-oai
- #46993 Clarify Bazel lockfile verification failures @jif-oai
- #46994 Route agent delivery through captured send requests @jif-oai
- #46999 Decouple tool restrictions from session identity with
ToolPolicy@felixxia-oai - #47010 Add agent inspection without restoring unloaded runtimes @jif-oai
- #47017 Wire agent message boards into persistent multi-agent runtimes @jif-oai
- #47026 Add diagnostics for rollout compression metadata failures @jif-oai
- #47028 Align message-board tools with the multi-agent namespace @jif-oai
- #47029 Delete persisted message boards with their root threads @jif-oai
- #47030 Preserve ordered assistant context in Guardian reviews @felixxia-oai
- #47035 Defer extension tool history materialization until first access @charliemarsh-oai
- #47036 Share stored JSON payloads across code mode cells with
Arc@charliemarsh-oai - #47038 Cache OS discovery for user agents and telemetry @charliemarsh-oai
- #47039 Preserve delivered messages through post-tool hook failures @felixxia-oai
- #47042 Recover corrupt message-board storage during thread deletion @jif-oai
- #47049 Share SQLite pools across local agent message-board handles @jif-oai
- #47050 Batch message-board subscriber reads into one SQLite result @jif-oai
- #47055 Fetch local message board thread summaries in one query @jif-oai
- Choose an optional fullscreen UI with
-
ChatGPT for iOS 1.2026.251
New features
- Create folders directly from the file picker.
- Added support for writing blocks, with draft alternatives and copy actions.
Improvements and bug fixes
- New tasks remember your worktree mode and setup environment for each project.
- Long queued prompts show a compact preview and expand on tap.
- Fixed queued prompts missing or appearing outdated after reopening a task.
- Worktree task cards now open correctly after setup completes.
- Restored the new-task button for projects containing only worktree tasks.
- Improved voice-call reliability during temporary connection interruptions.
- Better alignment of project, environment, and Git controls on iPad.
- Fixed the thinking timer resetting when a new task starts.
-
Codex CLI 0.155.1
$ npm install -g @openai/codex@0.155.1View details
Bug Fixes
- New local TUI sessions now leave reasoning summaries disabled by default, fixing request rejection by providers that do not support them. Explicit reasoning-summary settings remain respected. (#46467)
Changelog
Full Changelog: rust-v0.155.0...rust-v0.155.1
- #46467 Restore none as the TUI reasoning summary default (@celia-oai)
-
Codex app 26.915
Performance improvements and bug fixes
- Fixed WSL terminals opening in the wrong Linux distribution or project folder.
- Fixed adding WSL project folders, including folders on mapped drives.
- Updated sign-in screens to show only the methods allowed by your organization’s policy.
-
Codex CLI 0.155.0
$ npm install -g @openai/codex@0.155.0View details
New Features
- Added experimental
/voiceconversations with live transcripts and microphone controls on supported builds, enabled through/experimental. (#43581, #43651, #44331) - The TUI now shows live reasoning summaries in the status row and completion timestamps after successful turns. (#43558, #43921)
- Added task hiding, archiving, and deletion in the agents overview, plus worktree ownership details and confirmed deletion of clean managed worktrees. (#43942, #44424, #44433)
- Added Touch ID verification for MCP requests in local TUI sessions on supported Macs. (#43624, #43712, #43715)
- Added configurable daemon update schedules and
codex app-server daemon update; saved threads and active goals can recover after daemon restarts. (#43542, #43562, #44314) - Amazon Bedrock can now obtain AWS credentials from configured commands, with caching, expiration-based refresh, and authentication recovery. (#44028)
Bug Fixes
- Accepted prompts are now saved even when compaction fails before a turn starts. (#44487)
- Fixed missed tmux resizes, transcript viewport restoration, and stale history appearing after switching threads. (#43603, #43889, #43994)
- MCP servers now report expired OAuth credentials accurately and provide reconnect guidance when token refresh fails. (#43947, #44359)
- Automatic approval reviews now preserve complete actions and authorization evidence more reliably, retry transient failures, and distinguish review failures from unsafe-action findings. (#44482, #44569, #44570)
- Switching accounts now invalidates remote-control sessions, cached WebSocket state, and model catalogs belonging to the previous identity. (#43906, #44341, #44489)
- Blocked Windows-process escapes from restricted WSL sandboxes and hardened brokered shell snapshots against credential exposure. (#44286, #43909, #44040)
Chores
- Aligned Python SDK and runtime publishing with stable CLI releases, using matching versions and verifying runtime assets before SDK publication. (#44067)
Changelog
Full Changelog: rust-v0.154.0...rust-v0.155.0
- #43521 Preserve standalone release pins during daemon updates @copyberry
- #43524 Restrict MCP user verification and add workspace-scoped identity @copyberry
- #43527 Discount an approval's own code-mode wrapper from Guardian score lag @copyberry
- #43529 Ensure the standalone updater runs on managed daemon starts @copyberry
- #43533 Fix jemalloc tools and compiler flags for Bazel musl builds @copyberry
- #43534 Preserve Guardian context sections and share planned-action rendering @copyberry
- #43538 Move Guardian permission context into the shared section registry @copyberry
- #43540 Preserve the multi-agent version when forking at a turn cutoff @copyberry
- #43542 Make app-server daemon automatic updates configurable @copyberry
- #43545 Preserve fork runtime versions without loading full model context @copyberry
- #43547 Add user-verification provider abstractions and RPC adapters @copyberry
- #43552 Record the launched app-server executable identity in PID files @copyberry
- #43558 Show completion timestamps after successful TUI turns @copyberry
- #43562 Add an explicit app-server daemon update command @copyberry
- #43568 Wire app-server user verification RPCs to the native provider @copyberry
- #43570 Manage synchronous Guardian reviewers through the thread manager @copyberry
- #43572 Make the managed app-server shutdown grace period configurable @copyberry
- #43576 Group adjacent computer actions in the TUI @copyberry
- #43581 Add live WebRTC voice conversations to the TUI @copyberry
- #43584 Remove a stale transcript field assignment from the TUI @copyberry
- #43595 Centralize bounded Guardian review evidence in guardian-context @copyberry
- #43597 Move trusted tool metadata into shared Guardian context @copyberry
- #43599 Move trusted skill evidence into the Guardian context registry @copyberry
- #43601 Move Guardian image selection into shared context sections @copyberry
- #43602 Move Guardian REPL evidence rendering into the shared context registry @copyberry
- #43603 Recover missed tmux resize notifications in the TUI @copyberry
- #43604 Exclude base instructions from the bundled model catalog @copyberry
- #43619 Add a stable TUI/app-server version comparison helper @copyberry
- #43621 Add worktree classification to thread telemetry @copyberry
- #43622 Warn when the connected Codex service is older than the CLI @copyberry
- #43624 Add macOS user verification with Secure Enclave signing @copyberry
- #43645 Expand TUI regression coverage for realtime voice conversations @copyberry
- #43651 Add voice mute shortcut and recording activity indicators @copyberry
- #43656 Animate live voice transcripts with split-flap tiles @copyberry
- #43676 Style spoken prompts and link workspace files in voice transcripts @copyberry
- #43683 Move voice controls into a dedicated composer strip @copyberry
- #43690 Make the voice mute shortcut configurable in the TUI @copyberry
- #43695 Stabilize realtime voice meter sampling across redraws @copyberry
- #43698 Make older app-server notices configurable in the TUI @copyberry
- #43699 Preserve split-flap animation state when voice transcripts scroll @copyberry
- #43702 Add a TUI user verification prompt component @copyberry
- #43704 Disable clock synchronization in the voice audio sink @copyberry
- #43708 Add TUI request bookkeeping for user verification @copyberry
- #43712 Enable MCP user verification in the TUI @copyberry
- #43715 Enable user verification for the bundled TUI on supported devices @copyberry
- #43790 Limit app-server storage metrics to session directories @copyberry
- #43795 Pin request reasoning effort while configuration overrides are active @copyberry
- #43796 Preserve reasoning effort through compaction and reset it on success @copyberry
- #43797 Add configurable memory versions with isolated storage @copyberry
- #43798 Batch non-user history eviction to preserve Guardian transcript deltas @copyberry
- #43799 Prioritize human evidence in memory v2 extraction @copyberry
- #43800 Add summary-only extraction for memory v2 @copyberry
- #43805 Centralize Guardian context composition @copyberry
- #43806 Centralize Guardian transcript policy in context profiles @copyberry
- #43808 Move v2 extraction chunking into the memory writer @copyberry
- #43813 Add dedicated memory v2 consolidation and read prompts @copyberry
- #43827 Add memory dual writing and v2 readiness reporting @copyberry
- #43842 Wait for parent idle before rollback in guardian fork tests @copyberry
- #43844 Add staged enterprise OIDC login and coordinated logout @copyberry
- #43846 Include completed commentary in the
/copypicker @copyberry - #43848 Preserve runtime workspace roots across thread resume @copyberry
- #43853 Add canonical permission translation for MXC execution requests @copyberry
- #43870 Close MCP stderr readers on client teardown @copyberry
- #43873 Handle undefined values before JSON serialization in code mode @copyberry
- #43876 Detach Unix hook commands from the controlling terminal @copyberry
- #43884 Close active network proxy connections on teardown @copyberry
- #43889 Fix transcript viewer restoration and half-page scrolling @copyberry
- #43894 Preserve thread identity in code-mode tool dispatch traces @copyberry
- #43895 Preserve
__oailbrouting cookies in ChatGPT HTTP clients @copyberry - #43897 Persist provider and auth identity with model catalog caches @copyberry
- #43900 Propagate Apps tool refreshes to existing threads @copyberry
- #43903 Extract Windows deny-read glob scan planning into protocol @copyberry
- #43906 Scope model catalog caches to the current provider and auth identity @copyberry
- #43907 Preserve complete shell snapshot exports through filtering and replay @copyberry
- #43909 Protect shell snapshots when credential brokerage is enabled @copyberry
- #43912 Keep Guardian reviewers on summary-based compaction @copyberry
- #43913 Add tracing for project instructions and filesystem sandbox operations @copyberry
- #43915 Remove the repository devcontainer configurations @copyberry
- #43918 Expose the queued event count on
CodexThread@copyberry - #43921 Show streaming reasoning summaries in the TUI status row @copyberry
- #43925 Add cancellation for native user-verification RPCs @copyberry
- #43927 Rename thread artifacts to attachments in the state database @copyberry
- #43930 Avoid Windows sandbox setup for irrelevant proxy port changes @copyberry
- #43934 Track voice session lifecycle metrics in the TUI @copyberry
- #43936 Stabilize subagent and unified exec test fixtures @copyberry
- #43937 Tag TUI startup metrics with terminal and multiplexer categories @copyberry
- #43939 Add executor-context filesystem permission helpers @copyberry
- #43942 Show worktree owner details and add confirmed deletion @copyberry
- #43943 Gate new turn submissions on host shutdown admission @copyberry
- #43947 Surface MCP reconnect signals when expired OAuth tokens cannot refresh @copyberry
- #43948 Show configured app-server updater settings in doctor @copyberry
- #43949 Add transactional thread attachment mutations to the state runtime @copyberry
- #43950 Keep app-server thread RPCs active until delegated work completes @copyberry
- #43953 Preserve per-image generation IDs in image generation analytics @copyberry
- #43954 Cache protected shell snapshots and harden capture cleanup @copyberry
- #43956 Increase the TUI thread capability test stack to 12 MiB @copyberry
- #43959 Gate new app-server work during graceful shutdown @copyberry
- #43961 Use curly apostrophes in protocol error messages @copyberry
- #43966 Heap-allocate the resume future in the legacy history test @copyberry
- #43983 Bundle signed voice resources in macOS releases @copyberry
- #43994 Clear stale transcript history when switching threads @copyberry
- #44002 Encapsulate executed tool call metadata recording @copyberry
- #44025 Refresh workspace lockfile before building macOS voice releases @copyberry
- #44027 Support image attachments in agents overview background tasks @copyberry
- #44028 Add AWS credential export commands for Amazon Bedrock @copyberry
- #44032 Generate Python SDK types from repository app-server schemas @copyberry
- #44038 Handle copied credentials in the broker and shell snapshots @copyberry
- #44040 Harden credential handling in shell snapshots and replay @copyberry
- #44043 Use
StartThreadOptionsacross thread fork APIs @copyberry - #44049 Extract credential broker environment and registry helpers @copyberry
- #44053 Test Python SDK against the built CLI and installed runtime @copyberry
- #44055 Gate Python SDK publishing on runtime availability and verify PyPI files @copyberry
- #44056 Add configurable credential providers to the network proxy @copyberry
- #44060 Raise Guardian's action review limit to 200,000 bytes @copyberry
- #44061 Build Python SDK artifacts before publishing the runtime @copyberry
- #44062 Fix voice runtime release builds and packaging @copyberry
- #44066 Extend configured credential brokerage to embedded aliases @copyberry
- #44067 Publish Python packages after stable CLI releases @copyberry
- #44068 Preserve credential broker destinations across environment filtering @copyberry
- #44070 Reject empty audio payloads in data URLs @copyberry
- #44072 Support configured credential providers across shell snapshots @copyberry
- #44077 Refactor credential-broker tunnel protocol detection @copyberry
- #44080 Make staged macOS voice runtimes writable before packaging @copyberry
- #44084 Expose Python SDK history selection and per-turn options @copyberry
- #44086 Add untrusted external messages to the Python SDK @copyberry
- #44089 Support credential brokering in plaintext HTTP tunnels @copyberry
- #44101 Handle empty voice arguments in macOS release packaging @copyberry
- #44121 Reuse MCP bindings while cached servers remain dormant @copyberry
- #44138 Coordinate rollout compression with active thread writers @copyberry
- #44164 Add Guardian context cost and request token telemetry @copyberry
- #44166 Add aggregate budget enforcement for Guardian context @copyberry
- #44175 Attach compressed rollouts to diagnostic reports as JSONL @copyberry
- #44176 Reduce TUI stack usage during session transitions @copyberry
- #44181 Use explicit histogram buckets for Guardian context metrics @copyberry
- #44183 Release persistent writers when session startup is cancelled @copyberry
- #44198 Preserve voice indicator styles during composer sparkle effects @copyberry
- #44200 Use captured step settings when building model context @copyberry
- #44202 Use captured step model settings for extension context @copyberry
- #44207 Measure total exec-server request duration including queueing @copyberry
- #44226 Continue rollout searches when a compressed rollout cannot be searched @copyberry
- #44227 Extract Guardian review policy into a dedicated crate @copyberry
- #44238 Fix MCP elicitation cancellation and reset state on reconnect @copyberry
- #44241 Handle credential provider source remapping across config layers @copyberry
- #44242 Use captured step settings for tool planning and execution @copyberry
- #44243 Use the originating model when recording conversation history @copyberry
- #44248 Preserve tool output truncation budgets across resume and fork @copyberry
- #44249 Normalize image detail for the receiving model @copyberry
- #44250 Remove retired model entries while preserving migration prompts @copyberry
- #44252 Move synchronous Guardian orchestration into the reviewer extension @copyberry
- #44255 Always use streamed remote compaction for supported providers @copyberry
- #44259 Remove the Windows
/sandbox-add-read-dirslash command @copyberry - #44273 Remove the unused legacy remote compaction implementation @copyberry
- #44276 Avoid duplicate reasoning effort updates during turn recovery @copyberry
- #44277 Surface environment startup failure reasons to the model @copyberry
- #44281 Enforce complete request budgets for Guardian reviews @copyberry
- #44283 Persist loaded threads before managed daemon shutdown @copyberry
- #44284 Add telemetry for the Windows system config namespace @copyberry
- #44285 Preserve prewarmed reasoning effort across replay and early rollback @copyberry
- #44286 Block WSL interop escapes from restricted filesystem sandboxes @copyberry
- #44288 Prevent command hooks from hanging on blocked stdin @copyberry
- #44289 Expand MXC volume grants and resolve deny globs @copyberry
- #44290 Allow user-requested goal pauses through
update_goal@copyberry - #44293 Enforce the async Guardian classifier's complete input budget @copyberry
- #44297 Isolate the hook pipe I/O timeout test from shell startup files @copyberry
- #44298 Set turn triggers for guardian and memory requests @copyberry
- #44299 Record thread recovery candidates on managed daemon shutdown @copyberry
- #44307 Add opt-in provisioned macOS CLI release candidates @copyberry
- #44311 Honor shared Retry-After deadlines for remote control @copyberry
- #44314 Restore saved threads when the managed daemon restarts @copyberry
- #44318 Give hosted Codex Apps an independent MCP protocol opt-in @copyberry
- #44320 Block goals after three empty automatic continuation turns @copyberry
- #44325 Return the prompt hash in upload responses @copyberry
- #44327 Prevent filesystem-root read denies in the Windows sandbox @copyberry
- #44328 Clear pending TUI questions when accepting a new prompt @copyberry
- #44330 Add paginated thread attachment listing to the state runtime @copyberry
- #44331 Expose voice conversations in experimental features @copyberry
- #44332 Persist disabled plugin IDs in thread settings @copyberry
- #44336 Add bounded tool-result metadata support to executed tool calls @copyberry
- #44337 Return to the agent command center after archiving on shared servers @copyberry
- #44341 Bind remote-control sessions to their authentication owner @copyberry
- #44344 Open tasks with Right from the agents overview @copyberry
- #44346 Support native verification in MCP tool continuations @copyberry
- #44349 Distinguish forked sessions in session-start hooks @copyberry
- #44350 Add thread attachment operations with coordinated deletion @copyberry
- #44352 Remove path-bearing fields from Guardian review analytics @copyberry
- #44354 Extract shared footer hint wrapping in the TUI @copyberry
- #44359 Report OAuth authentication failures in MCP status snapshots @copyberry
- #44360 Return focus to the agents overview composer on Escape @copyberry
- #44377 Update the forked-thread hook test to use
StartThreadOptions@copyberry - #44392 Add opt-in model discovery for OpenAI API keys @copyberry
- #44400 Start Python SDK turn subscriptions at their attachment point @copyberry
- #44424 Add a hide shortcut to the agents overview @copyberry
- #44433 Add archive and delete actions to the agents overview @copyberry
- #44472 Harden Code Mode tool-call completeness tracking @copyberry
- #44482 Improve Guardian retries and review failure reporting @copyberry
- #44487 Preserve incoming prompts when pre-turn compaction fails @copyberry
- #44489 Reset cached WebSocket state when auth ownership changes @copyberry
- #44492 Distinguish HTTP quota errors from rate limits @copyberry
- #44493 Bound MCP descriptions separately from Guardian action JSON @copyberry
- #44521 Decouple session isolation from subagent attribution @copyberry
- #44523 Bound app-server stdio shutdown and handle Unix SIGTERM gracefully @copyberry
- #44536 Move Guardian reviewer settings and execution into the reviewer crate @copyberry
- #44544 Move Guardian reporting and denial accounting into the extension @copyberry
- #44548 Add MIME-filtered resource listing for Codex Apps @copyberry
- #44564 Add app-server APIs for stored thread attachments @copyberry
- #44569 Preserve complete actions in Guardian approval reviews @copyberry
- #44570 Preserve Guardian authorization evidence until request budgeting @copyberry
- #44571 Allow extensions to select MCP protocol mode per HTTP server @copyberry
- #44574 Use captured action settings for Guardian reviews @copyberry
- #44575 Tie network approval reviews to their originating execution @copyberry
- #44580 Support symbolic
:rootfilesystem policies in MXC @copyberry - #44586 Remove
repo_urlfrom skill invocation analytics events @copyberry
- Added experimental
-
Codex app 26.911
Performance improvements and bug fixes
- Fixed back navigation getting stuck between settings and a chat.
- Kept configuration warnings visible after app startup and window reloads.
- Improved focus and alignment in answer fields for questions from Codex.
-
GPT-5.3-Codex-Spark deprecated
GPT-5.3-Codex-Spark was deprecated on September 14, 2026. The research preview is no longer available in the ChatGPT desktop app, Codex CLI, or IDE extension.
Switch to one of the recommended models, and update saved configurations, custom agents, and scripts that select
gpt-5.3-codex-spark.For faster responses with a supported model, see Fast mode.
-
GPT-5.5 retires from ChatGPT, ChatGPT Work, and Codex on October 14
On October 14, 2026, GPT-5.5 will retire from ChatGPT, ChatGPT Work, and Codex on all plans, including consumer, Business, Enterprise, and Edu plans. This retirement does not apply to the OpenAI API.
For Codex with ChatGPT sign-in, choose an available replacement for your plan and client. See GPT-5.5 retirement for migration guidance.
Update workspace defaults, saved model settings, managed configurations, custom agents, scheduled tasks, and scripts that still select
gpt-5.5.See GPT-5.5 retirement and workspace model availability for migration guidance.
-
Quick chats with Pets and Appshots on Windows 26.908
Chat while you work
Keep ChatGPT close while you work in other apps. In the ChatGPT desktop app on macOS and Windows, you can now type a quick chat from the floating Pets controls and press Enter to send it. Use
@to add context and$to choose a skill. Select the bell icon to follow progress in your threads, then select a thread to open the full conversation.Choose a companion or show just the controls in Settings > Pets. Press Option+Space on macOS or Windows+Alt+P on Windows to show the controls and focus Quick Chat. Pressing the shortcut again keeps Quick Chat open. You can change Show pet in Settings > Keyboard shortcuts. To hide the controls, select Hide pet in the command menu or Settings > Pets.
On macOS, you can also send an appshot to the floating controls. Keep the main ChatGPT window in the background and choose Automatic for Appshot destination.
Learn more about Pets.
Share an app window on Windows
Appshots are now available in the ChatGPT desktop app on Windows. Press both Alt keys to share the frontmost app window with ChatGPT, then ask a question or describe what you want to do. An appshot includes a screenshot and available text from that window. You can customize the shortcut and choose which chat receives it in settings.
Other improvements and bug fixes
- Open files directly from a conversation’s Sources panel, or download files that ChatGPT can’t preview.
- Assign a Codex Micro key to Insert text and add your own reusable text to the active prompt without sending it.
- Reset a pet to its default size in settings. Custom pets also stay in place when you refresh their artwork.
- Keep unfinished comments on response text when you switch chats and return.
- ChatGPT dictation now respects your saved Main language preference.
- Keep tab widths and scroll positions more stable as you close browser tabs in full and split views.
-
Codex CLI 0.154.0
$ npm install -g @openai/codex@0.154.0View details
New Features
- GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619)
- Experimental worktree support lets you create isolated checkouts for new or forked sessions using
--worktreeor/worktree, then browse and resume them. (#42652, #43069, #43120, #43286) - Answer questions inline while Codex continues working, using suggested choices or custom text without losing your main draft. (#42891, #42894, #42897)
- Windows sessions can now share a background Codex server, with daemon lifecycle commands and managed updates. (#42405, #42392)
- Vim editing gains
Rreplace mode with undo and dot-repeat, plus more reliable Escape handling in legacy terminals. (#42194, #42584) - Copying responses preserves formatting in rich-text apps, and
/copycan copy status output or individual session fields. (#42847, #43055)
Bug Fixes
- Existing sessions pick up newly installed plugin tools and refresh skills and hooks after external plugin upgrades or rollbacks. (#42284, #42593, #42990)
- MCP connections coordinate OAuth token refreshes and surface login challenges when refresh fails, without automatically replaying rejected tool calls. (#42413, #42552)
- Startup avoids running workspace-controlled helpers before trust is established, and the macOS sandbox blocks terminal input injection. (#42324, #42590)
- Remote resume and fork operations preserve saved permissions; fresh sessions and forks respect server model defaults unless explicitly overridden. (#43330, #43177, #43355)
- Resuming a conversation open in another app now shows a read-only transcript with a retry option while preserving your draft. (#43253)
- Automatic approval reviews better preserve authorization context through compaction and reject approvals invalidated by new user instructions or answers. (#42844, #42852, #43442)
Documentation
- Updated the bundled OpenAI Docs skill with GPT-6-Astra migration, compatibility, and prompting guidance. (#42931)
Chores
- The deprecated
codex mcp-serverentry point is no longer available. (#42993)
Changelog
Full Changelog: rust-v0.153.0...rust-v0.154.0
- #42188 Fix punctuation in npm packaging documentation @copyberry
- #42192 Use native spawning for bare macOS MCP commands @copyberry
- #42194 Add Vim replace mode to the TUI composer @copyberry
- #42196 Add managed worktree creation @copyberry
- #42199 Refactor shared TUI input routing @copyberry
- #42202 Separate TUI preferences from server configuration @copyberry
- #42204 Add macOS voice runtime projection @copyberry
- #42207 Retry TUI reconnects while threads are closing @copyberry
- #42208 Add GNU Linux voice runtime preparation @copyberry
- #42209 Add Windows voice runtime preparation @copyberry
- #42247 Track history notes thread hint outcomes @copyberry
- #42256 Skip Guardian scoring in User approval mode @copyberry
- #42270 Report the exec-server release version in environment info @copyberry
- #42284 Refresh plugin skills after out-of-process version changes @copyberry
- #42288 Fetch rules_rs zlib packages from Ubuntu snapshots @copyberry
- #42290 Expand Guardian history coverage across resume and rollback @copyberry
- #42293 Preserve verified answers across history compaction @copyberry
- #42298 Preserve retained answers across steer rollbacks @copyberry
- #42306 Stabilize the detached exec-server session resume test @copyberry
- #42309 Separate Windows sandbox provisioning from ACL refresh @copyberry
- #42314 Preserve target-native cwd in permission approval requests @copyberry
- #42316 Refactor exec-server startup futures @copyberry
- #42318 Support packaged managed Codex binary paths @copyberry
- #42319 Show live context compaction status in the TUI @copyberry
- #42320 Make the app-server thread unload delay configurable @copyberry
- #42324 Avoid executing PATH helpers before workspace trust @copyberry
- #42325 Render completed assistant messages directly during replay @copyberry
- #42326 Harden Windows control socket rendezvous @copyberry
- #42328 Support durable reasoning configuration updates @copyberry
- #42330 Protect Windows sandbox binaries from inherited write access @copyberry
- #42332 Package prepared runtimes with the voice host @copyberry
- #42334 Add a Windows sandbox provisioning protocol @copyberry
- #42337 Add an authenticated Windows sandbox provisioning client @copyberry
- #42341 Add Windows sandbox service lifecycle scaffolding @copyberry
- #42342 Harden Windows sandbox provisioning file handling @copyberry
- #42344 Prepare managed policy validation for Windows sandbox provisioning @copyberry
- #42348 Add Windows sandbox client authentication @copyberry
- #42351 Enable authenticated Windows sandbox provisioning @copyberry
- #42353 Add experimental Windows sandbox service provisioning @copyberry
- #42354 Add free-form asynchronous user messages @copyberry
- #42356 Initialize questions in buffered replay test messages @copyberry
- #42358 Extend rate limit reads with usage capabilities @copyberry
- #42364 Support graceful daemon shutdown on Windows @copyberry
- #42366 List managed worktrees for a repository @copyberry
- #42369 Keep SQLite history projection moving past invalid records @copyberry
- #42370 Improve MCP server startup error logging @copyberry
- #42372 Add Luna Reserve usage fallback to the TUI @copyberry
- #42373 Add attributed exec process lifecycle telemetry @copyberry
- #42374 Extract PID startup into a dedicated module @copyberry
- #42375 Clean up Windows sandbox resources on app uninstall @copyberry
- #42377 Make app-server realtime sessions always available @copyberry
- #42378 Route rollout reads through the canonical JSON decoder @copyberry
- #42380 Require confirmation for safety-buffered retries @copyberry
- #42381 Support managed app-server lifecycle on Windows @copyberry
- #42383 Update rmcp to 3.2.0 @copyberry
- #42384 Add an RMCP OAuth credential store adapter @copyberry
- #42385 Add experimental context management activation @copyberry
- #42386 Expose loaded thread environments in app-server responses @copyberry
- #42388 Recover deferred environments after provisioning failure @copyberry
- #42391 Authorize
apply_patchin the executor path context @copyberry - #42392 Support managed daemon updates on Windows @copyberry
- #42395 Expose the Codex version to commands and turn metadata @copyberry
- #42397 Extract focused TUI logic into submodules @copyberry
- #42399 Preserve restored input after resolved misalignment errors @copyberry
- #42401 Discover TUI collaboration modes from the app server @copyberry
- #42403 Expose the last accepted environment ready report @copyberry
- #42404 Read voice helper frames independently of pipe chunks @copyberry
- #42405 Support the app-server daemon on Windows @copyberry
- #42406 Honor explicit plugin mentions during MCP startup @copyberry
- #42408 Harden embedded composer input handling @copyberry
- #42410 Allow reviewing and continuing misalignment-paused chats @copyberry
- #42413 Enable coordinated MCP OAuth refresh @copyberry
- #42417 Expose managed application network requirements @copyberry
- #42419 Add session resume to the agent command center @copyberry
- #42422 Honor model requirements in Guardian computer-use scoring @copyberry
- #42425 Discover TUI experimental features from the server @copyberry
- #42428 Use the shared composer in the agent command center @copyberry
- #42432 Box the TUI resume picker future @copyberry
- #42445 Include originator in plugin measurement analytics @copyberry
- #42451 Acknowledge pending TUI steers by submission ID @copyberry
- #42453 Discover permission profiles from the app server @copyberry
- #42455 Show live task details in the agent command center @copyberry
- #42458 Expose thread originators through the app-server API @copyberry
- #42529 Register the Guardian thread context feature flag @copyberry
- #42552 Preserve MCP authentication challenges on tool calls @copyberry
- #42577 Preserve target-native paths in command approvals @copyberry
- #42579 Persist verified user answers in Guardian thread context @copyberry
- #42584 Recover Vim escape input in legacy terminals @copyberry
- #42588 Require Guardian review for incompatible compaction checkpoints @copyberry
- #42590 Harden the macOS sandbox against terminal input injection @copyberry
- #42593 Reload user config after local plugin installation @copyberry
- #42596 Record Windows sandbox private desktop usage @copyberry
- #42598 Report MCP tool discovery errors in server status @copyberry
- #42602 Deprecate detached review delivery @copyberry
- #42603 Expose global metrics installation in
codex-otel@copyberry - #42606 Support trusted headers for remote exec WebSockets @copyberry
- #42607 Add GPT-6-Astra to the bundled model catalog @copyberry
- #42609 Condense TUI startup warnings @copyberry
- #42619 Add GPT-6-Astra to Amazon Bedrock catalogs @copyberry
- #42623 Bound Noise handshakes by the exec server initialization timeout @copyberry
- #42624 Centralize prompt image detail modes @copyberry
- #42631 Initialize the packaged GStreamer runtime in the voice host @copyberry
- #42634 Add an injectable attachment store to ThreadManager @copyberry
- #42638 Update GPT-6-Astra Fast tier speed description @copyberry
- #42639 Warn when saved model defaults are overridden @copyberry
- #42640 Harden TUI parsing of assistant markup @copyberry
- #42641 Restore the inline TUI after full-screen overlays @copyberry
- #42650 Render assistant file citations as local links @copyberry
- #42652 Add managed worktrees to
codex exec@copyberry - #42654 Update the stable exec-server test to Codex 0.153.1 @copyberry
- #42657 Use a generic fallback model name in status tests @copyberry
- #42667 Tailor TUI cyber refusal notices to Daybreak eligibility @copyberry
- #42668 Cancel remote control enrollment on stdio shutdown @copyberry
- #42671 Preserve TUI sessions while starting replacement threads @copyberry
- #42674 Persist server-advertised experimental features from the TUI @copyberry
- #42676 Add WebRTC negotiation to the voice host @copyberry
- #42677 Narrow async user message guidance @copyberry
- #42682 Fix the worktrees experimental feature test fixture @copyberry
- #42716 Allow trusted symlinks beneath CODEX_HOME on macOS @copyberry
- #42718 Gate unified exec TTY support behind a feature flag @copyberry
- #42741 Make the TUI symlink startup test Bazel-compatible @copyberry
- #42744 Honor model-provided Guardian review policies @copyberry
- #42746 Handle pending network reviews after process completion @copyberry
- #42749 Improve automatic thread naming in the TUI @copyberry
- #42752 Preserve response IDs for fast collaborator tool events @copyberry
- #42755 Stabilize the interactive tmux startup safety test @copyberry
- #42758 Propagate response tickets to Guardian reviews @copyberry
- #42762 Retain user instructions in guardian thread context @copyberry
- #42767 Avoid port races in streamable HTTP tests @copyberry
- #42770 Preserve acceptance order in retained thread context @copyberry
- #42773 Avoid holding metadata permit during cold resume config load @copyberry
- #42781 Add direct SigV4 transport to exec-server @copyberry
- #42791 Keep TUI prompt history tied to local settings @copyberry
- #42792 Extract the note input view into its own module @copyberry
- #42798 Add data-use disclosures to the user report dialog @copyberry
- #42801 Keep the Windows sandbox command runner hidden @copyberry
- #42807 Add request-scoped Guardian approval decisions @copyberry
- #42811 Enable staging login issuer overrides in packaged builds @copyberry
- #42814 Support custom report event titles @copyberry
- #42819 Route Guardian approvals independently of async scoring @copyberry
- #42821 Report managed filesystem policy in
codex doctor@copyberry - #42823 Expose managed WebMCP policy through the app server @copyberry
- #42824 Refine user input guidance for GPT-6 @copyberry
- #42832 Preserve root authorization context in Guardian reviews @copyberry
- #42833 Preserve SystemRoot for Windows sandbox wrapper setup @copyberry
- #42835 Preserve Windows managed deny reads in the sandbox CLI @copyberry
- #42836 Make GPT-6-Astra user input guidance conditional @copyberry
- #42838 Preserve executor paths in Guardian approval reviews @copyberry
- #42841 Add a native Windows MXC sandbox adapter @copyberry
- #42842 Add Astra sparkle effects to the TUI composer @copyberry
- #42844 Retain user instructions in Guardian context @copyberry
- #42847 Preserve Markdown formatting when copying TUI responses @copyberry
- #42850 Use jemalloc for Linux musl binaries @copyberry
- #42852 Harden Guardian reviews after context compaction @copyberry
- #42854 Persist Daybreak preferences in thread metadata @copyberry
- #42863 Preserve precedence across feature requirement aliases @copyberry
- #42870 Avoid redundant filesystem sandbox path resolution @copyberry
- #42879 List GPT-6-Astra in the model picker @copyberry
- #42883 Add client-side exec-server RPC attempt metrics @copyberry
- #42889 Add TUI building blocks for inline async question editing @copyberry
- #42891 Integrate asynchronous questions into the TUI @copyberry
- #42894 Support selectable answers for asynchronous TUI questions @copyberry
- #42897 Add inline Other answers to async question choices @copyberry
- #42900 Establish root turn identity for independent tasks and memory requests @copyberry
- #42903 Preserve TUI question state and integrate history and queue navigation @copyberry
- #42904 Use static instructions for the Default collaboration mode @copyberry
- #42931 Update OpenAI Docs skill guidance for GPT-6 Astra @copyberry
- #42933 Wait for turn analytics before shutting down the Guardian v2 test @copyberry
- #42990 Refresh session hooks after external plugin updates @copyberry
- #42993 Remove the deprecated
codex mcp-servercommand @copyberry - #43000 Preserve the resolved multi-agent version when reverting threads @copyberry
- #43002 Replace Guardian tickets with parent response IDs @copyberry
- #43005 Add Guardian V2 failure reasons and connection timing metrics @copyberry
- #43031 Keep refreshed MCP tool catalogs with their clients @copyberry
- #43039 Refresh live thread tools through
app/installed@copyberry - #43043 Avoid filesystem scans when seeding the agents overview @copyberry
- #43055 Allow
/copyto copy status output and individual fields @copyberry - #43069 Support managed worktrees for interactive sessions and forks @copyberry
- #43070 Clarify comments in CI setup and the Rust workflow @copyberry
- #43074 Show a retryable error when the apps popup fails to load @copyberry
- #43079 Add opt-in local audio devices to the voice helper @copyberry
- #43083 Supply Bazel-managed CMake and Ninja for the bundled Opus build @copyberry
- #43090 Send processed microphone audio over RTP in voice-host @copyberry
- #43097 Add a helper-backed realtime WebRTC session API @copyberry
- #43099 Add receipt-verified native voice SDK export @copyberry
- #43100 Add bounded incoming Opus RTP handling to the voice host @copyberry
- #43102 Include GIO in voice SDKs and native runtimes @copyberry
- #43104 Move Guardian thread context into
guardianv2configuration @copyberry - #43109 Add explicit toolchain inputs for native voice builds @copyberry
- #43110 Record reasoning effort changes in conversation history behind a flag @copyberry
- #43111 Add a Bazel target for native voice dependencies @copyberry
- #43113 Save subagent and memory opt-ins through the app server @copyberry
- #43114 Add Bazel preparation for native voice runtimes @copyberry
- #43117 Link Unix Bazel bindings against the prepared voice runtime @copyberry
- #43120 Add managed worktree creation to TUI session commands @copyberry
- #43121 Require a prepared runtime when assembling voice helper packages @copyberry
- #43125 Add explicit Windows tool selection for native voice builds @copyberry
- #43126 Expose native Windows build tools through Bazel targets @copyberry
- #43144 Add Windows MSVC Bazel targets for native voice libraries @copyberry
- #43147 Gate experimental context by model capability at session startup @copyberry
- #43177 Use server model defaults for fresh TUI startup @copyberry
- #43178 Allow guarded legacy resume with background migration enabled @copyberry
- #43244 Add bounded GStreamer playback components to the voice host @copyberry
- #43248 Connect voice-host RTP audio to speaker playback @copyberry
- #43253 Show read-only conversations when resume encounters an active writer @copyberry
- #43261 Use server defaults when starting TUI background tasks @copyberry
- #43265 Add experimental user verification API contracts @copyberry
- #43279 Include linked worktrees in TUI session discovery @copyberry
- #43281 Move npm package staging into a separate release workflow job @copyberry
- #43282 Make Bazel binary stamping opt-in @copyberry
- #43286 Add a managed worktree browser to the TUI @copyberry
- #43289 Add capability-gated MCP user-verification handling @copyberry
- #43298 Defer managed worktree transitions to fresh TUI loop iterations @copyberry
- #43304 Isolate Bazel build commit metadata from Rust compilation inputs @copyberry
- #43308 Replace Windows app-server shutdown files with socket requests @copyberry
- #43315 Resolve session labels uniquely before acting on them @copyberry
- #43325 Sort JSON schema object keys for consistent Cargo and Bazel output @copyberry
- #43330 Preserve saved permissions when resuming or forking remote tasks @copyberry
- #43340 Enable remote named permission profile selection in the TUI @copyberry
- #43352 Add opt-in MCP user-verification transport @copyberry
- #43355 Let the app server resolve implicit model settings for CLI forks @copyberry
- #43359 Show the server's model provider ID in TUI status @copyberry
- #43360 Use app-server metadata for TUI session restoration @copyberry
- #43376 Defer resume picker and directory changes to a fresh TUI stack @copyberry
- #43408 Avoid WebSocket connection waits in Guardian v2 classification @copyberry
- #43419 Initialize
cwdin TUI resume and fork test fixtures @copyberry - #43421 Remove the app-server README and its contributor guidance references @copyberry
- #43423 Remove the app-server docs update requirement from
AGENTS.md@copyberry - #43426 Handle Luna HTTP requests in guardian history tests @copyberry
- #43428 Notify opted-in stdio MCP servers of auth changes @copyberry
- #43432 Route approvals through the extension decision API @copyberry
- #43442 Keep Guardian review evidence consistent and reject stale approvals @copyberry
- #43444 Pin V8 release manifests and prevent published release replacement @copyberry
- #43447 Route MCP elicitations through the shared approval decision path @copyberry
- #43454 Add diagnostic labels to shell snapshot capture metrics @copyberry
- #43456 Wait for thread idle before rollback in model-switching tests @copyberry
- #43458 Centralize Guardian context mode and checkpoint policy @copyberry
- #43462 Remove legacy Guardian approval review paths @copyberry
- #43472 Recover missing Guardian root instructions in acceptance order @copyberry
- #43478 Retain inherited Guardian instructions in standalone forks @copyberry
- #43490 Expose shared Guardian reviewer helpers through
guardian_review@copyberry - #43491 Include unloaded children in multi-agent v2 environment context @copyberry
- #43494 Limit archive rollout reads to requested threads @copyberry
- #43495 Allow internal sessions to fork from selected history @copyberry
- #43504 Treat zombie processes as inactive in the Unix PID backend @copyberry
- #43513 Expose a stable executor build identity in environment metadata @copyberry
- #43519 Set
recursion_limitto 256 for app-server, exec, and TUI @copyberry
-
Codex app 26.903
New features
- Added a configurable shortcut to open web links in your default browser.
- Added Open with > New tab to file diffs so you can open a source file at the selected line in the app.
Performance improvements and bug fixes
- Improved recovery and responsiveness when reopening chats or sending messages while a chat resumes.
- Fixed duplicate follow-up messages appearing in restored chat history.
-
ChatGPT for iOS 1.2026.244
New features
- Reference other tasks directly in the composer with
@mentions. - Answer live questions while Codex continues working, without losing your draft.
- Explore files with Back navigation, recent files, and remembered reading positions.
- Choose a starting branch for new worktrees, or include your current local changes.
- Worktree setup can now continue in the background on iOS 26, with progress shown in a Live Activity.
Improvements and bug fixes
- Voice now respects your selected model and reasoning effort.
- Restored missing delegated-task messages and fixed navigation between linked tasks.
- Code reviews now complete more reliably, without duplicate activity or stuck running states.
- Fixed crashes and stale queued messages when switching from Queue to Steer.
- Improved reconnect reliability and preserved device pairing during temporary service outages.
- Resolved duplicate plugin skills in composer suggestions.
- Reference other tasks directly in the composer with
-
Codex MCP server removed
The
codex mcp-servercommand and standalonecodex-mcp-serverbinary have been removed after their deprecation on August 24, 2026. Update integrations that launch either command before upgrading Codex.Use the Codex app server for integrations. The app-server command is experimental and isn’t supported for production workloads.
See the migration guidance for details. Codex continues to support connecting to external MCP servers through
codex mcp. -
Codex CLI 0.153.4
$ npm install -g @openai/codex@0.153.4View details
Bug Fixes
- Fixed Astra’s visibility in the bundled model picker and made it the bundled default when no model is explicitly configured. (#42874)
- Updated Astra’s guidance to use asynchronous questions only when the tool is available in the session. (#42878)
Changelog
Full Changelog: rust-v0.153.3...rust-v0.153.4
-
Codex CLI 0.153.3
$ npm install -g @openai/codex@0.153.3View details
New Features
- Added GPT-6-Astra to the Amazon Bedrock model picker for Mantle and Runtime global/US routes. (#42805)
Bug Fixes
- Corrected GPT-6-Astra’s guidance for asynchronous clarification questions to use the supported tool and recognize that it accepts text only. (#42809)
Changelog
Full Changelog: rust-v0.153.2...rust-v0.153.3
- #42805 [0.153 hotfix] Add GPT-6-Astra to Amazon Bedrock catalogs @celia-oai
- #42809 [0.153 hotfix] Update Astra async-question guidance @rhan-oai
-
Codex CLI 0.153.2
$ npm install -g @openai/codex@0.153.2View details
Bug Fixes
- Corrected the GPT-6-Astra Fast tier description to say “2x speed, increased usage” instead of “1.5x.” This changes only the displayed text, not how requests run. (#42632)
Changelog
Full Changelog: rust-v0.153.1...rust-v0.153.2
-
Codex CLI 0.153.1
$ npm install -g @openai/codex@0.153.1View details
New Features
- Added support for configuring GPT-6-Astra through the API without changing the default model or showing it in the model picker. (#42605)
Changelog
Full Changelog: rust-v0.153.0...rust-v0.153.1
-
Codex CLI 0.153.0
$ npm install -g @openai/codex@0.153.0View details
New Features
- Vim mode now supports undo with
uand redo withCtrl+R, preserving complete drafts including pasted content and attachments. (#41941, #42140) - The plugin CLI can list, install, and remove plugins from remote marketplaces. (#42150)
- Set
tui.auto_recap = falseto disable automatic recaps while keeping manual/recapavailable. (#42101) - TUI history shows complete patches, input sent to background terminals, and individual completed commands. (#41893, #42107)
- Plus and Team users receive an earlier warning when less than half of their allowance remains in an approximately five-hour usage window. (#42142)
Bug Fixes
- TUI sessions reconnect after an external app-server connection drops, preserving drafts and transcripts while keeping uncertain or queued submissions paused for review. (#41911, #41916, #41918)
- Full Access skips Guardian reviews for confirmation-only actions. User approval mode skips background Guardian scoring and prewarming, while sensitive-action checks and requests for user input retain their existing handling. (#42147, #42256)
- Guardian review history survives compaction, restarts, and user-created forks while respecting rollback boundaries and isolating subagent history. (#41879, #42065)
- Remembered MCP tool approvals are scoped to the selected app account, and relative MCP executable paths start more reliably on macOS. (#42133, #42117)
- Rollout compression includes shared histories,
codex exec resumehandles compressed rollouts when selecting by working directory, and thread forks work with symlinked session roots. (#42039, #42135)
Configuration and API Updates
- App-server thread metadata includes nullable
modelandreasoningEffortfields. Structured asynchronous questions are supported throughrequest_user_input_asyncwhen enabled by the model catalog. (#42151, #42178) tui.disable_paste_burstreplaces the top-level setting, which remains supported as a fallback. (#41976)- Adds the disabled-by-default
features.context_management.experimental_modeconfiguration. When enabled for eligible ChatGPT Plus, Pro, or Pro Lite sessions using the Codex backend, it activates token-budget context, history notes, and thenew_contexttool. API-key sessions, custom providers, and temporary structured threads remain excluded. (#42385)
Changelog
- #41870 Use shared transcript collection for Guardian reviews
- #41879 Preserve Guardian review evidence across compaction
- #41884 Add pinned native voice source preparation
- #41890 Add native voice dependency build recipe
- #41892 Retain the MCP client for event streams
- #41893 Show successful TUI commands individually
- #41894 Fix Windows native voice dependency builds
- #41897 Add the voice helper lifecycle foundation
- #41899 Keep MCP event subscriptions alive after task unloading
- #41901 Load bounded context after empty wake turns
- #41902 Add installed voice host lifecycle support
- #41906 Add a manager for MCP event streams
- #41908 Avoid scanning archived rollouts when archiving threads
- #41909 Make permission transforms aware of executor path context
- #41911 Preserve TUI drafts after app-server disconnects
- #41912 Persist response token usage in rollout history
- #41913 Preserve TUI status timing when the status row is hidden
- #41915 Move the config schema generator into a dedicated crate
- #41916 Reconnect TUI app-server sessions automatically
- #41917 Open the agents overview from an empty composer
- #41918 Restore agent navigation after TUI reconnects
- #41923 Allow per-call sideband endpoints for existing realtime calls
- #41924 Record realtime conversation history in Core
- #41925 Test repository-wide Rust formatter discovery
- #41928 Use executor path context for permission preapproval
- #41929 Open the agents overview directly in the reconnect test
- #41933 Report configured sandbox policy consistently
- #41934 Omit undersized WAV output from Code Mode
- #41936 Attach failed Guardian reviews to diagnostic reports
- #41937 Limit background terminal input previews
- #41938 Clarify resume guidance in exit summaries
- #41940 Preserve transcript layout caches during backtrack selection
- #41941 Add Vim undo to the TUI composer
- #41944 Emit turn cost telemetry for ChatGPT sessions
- #41946 Expand extension permission regression coverage
- #41949 Add plugin reconciliation app-server API
- #41950 Improve tracing for nested tool calls and exec processes
- #41953 Enforce marketplace source policy for curated plugins
- #41974 Track TUI starts by app server mode
- #41976 Move
disable_paste_burstunder[tui] - #41980 Preserve raw response usage metadata
- #42003 Report turn trigger and source in turn analytics
- #42031 Share Guardian user-message retention logic
- #42033 Improve Guardian report diagnostics
- #42039 Include shared histories in rollout compression
- #42043 Tag Codex home size metrics with compression state
- #42047 Add per-account approval settings for apps
- #42054 Honor explicit account selectors for Apps tool calls
- #42056 Honor app link settings for MCP tool approvals
- #42065 Preserve Guardian history across thread reconstruction
- #42066 Remove selected core test cases
- #42068 Detect standalone installs from the macOS CLI bundle
- #42069 Remove redundant test coverage
- #42071 Detect Vite+-managed Codex installs
- #42076 Unify Guardian context section collection
- #42082 Attribute nested REPL reviews to their tool calls
- #42085 Centralize Guardian context composition
- #42086 Attribute Guardian reviews to OpenAI app tools
- #42094 Record Windows MXC availability
- #42096 Make diagnostic report uploads resilient to slow networks
- #42100 Prefer remote Sites over the bundled plugin
- #42101 Add a TUI setting to disable automatic recaps
- #42102 Extract OTEL trace WebSocket into a reusable crate
- #42104 Show recent sessions in the agent command center
- #42107 Show full patches and terminal input in TUI history
- #42109 Format Python scripts across the repository
- #42110 Treat bundled cleanup hooks as built-ins
- #42113 Apply remote platform semantics to exec safety checks
- #42114 Centralize remote plugin mutations in
PluginsManager - #42117 Fix relative MCP server spawning on macOS
- #42118 Refine hook activity rendering in the TUI
- #42121 Allow updating the approval reviewer for active turns
- #42123 Preserve descriptive labels on local file links
- #42126 Ignore non-JSON files in plugin catalog test helpers
- #42128 Prepare MCP connections for coordinated OAuth refresh
- #42132 Bound Git root discovery for metadata enrichment
- #42133 Scope session MCP approvals to app account links
- #42134 Include app link metadata in MCP approval elicitations
- #42135 Support thread forks from symlinked session roots
- #42137 Prewarm shell snapshots for eligible turns
- #42140 Add redo support to Vim composer history
- #42142 Add early rate-limit warnings for Plus and Team plans
- #42144 Add Guardian V2 analytics events
- #42146 Resolve permission requests in the executor context
- #42147 Skip Guardian reviews in Full Access
- #42149 Upgrade Git marketplaces from merged configuration
- #42150 Support remote marketplaces in the plugin CLI
- #42151 Expose model settings in app-server thread metadata
- #42161 Split tool JSON Schema code into focused modules
- #42164 Record result sources in app tool analytics
- #42173 Support header injections in network requirements
- #42174 Add a cacheable Bazel app-server schema bundle
- #42178 Add structured asynchronous user input requests
- #42256 Skip Guardian scoring in User approval mode
- #42385 Add experimental context management activation
- Vim mode now supports undo with
-
Codex app 26.901
Includes updates through September 5, 2026.
Performance improvements and bug fixes
- Fixed the model picker closing while settings refresh.
- Distinguished successfully submitted feedback from failed diagnostic uploads.
- Fixed remote chats getting stuck when reopened after their host changes.
- Preserved preferences for automatically connecting to SSH hosts after an app restart.
-
ChatGPT for iOS 1.2026.237
New features
- Attachments now work across all connected hosts, including Windows and Linux, and support videos from the Photo Library.
- Press and hold the attachment button to attach recent photos.
- A new Priority view brings running tasks, unread updates, and tasks awaiting your response to the top of the task list.
- Queued prompts now sync with the connected host, remain editable, and send even when the app is in the background.
- Long-running tasks now show their live working time.
- Task menus now include an option to copy the thread ID.
Improvements and bug fixes
- Task list loading and organization are faster and more reliable, with simpler date sections and fewer stalls or disappearing projects.
- Reconnects are more reliable, resolving stuck Send states, missing approvals, and stale task updates.
- Long responses now stream with fewer visual interruptions.
- Side chat messages remain available until you close them, even after the chat can no longer reconnect.
-
Codex CLI 0.152.1
$ npm install -g @openai/codex@0.152.1View details
Bug Fixes
- Guardian approval review now honors Node REPL policies provided through model metadata.
Full Changelog: rust-v0.152.0...rust-v0.152.1
-
Codex CLI 0.152.0
$ npm install -g @openai/codex@0.152.0View details
New Features
- Vim mode supports
/and?searches within drafts, highlighted matches, and repeat navigation withnandN. (#41586) - Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
- The terminal UI and
codex execshow credential-refresh progress, including Amazon Bedrock reauthentication. (#41239) - MCP server names can contain
:,@,/, and., supporting package-style names throughout CLI commands and authentication. (#41700) - Individual MCP tools support an
output_token_limitsetting, with consistent truncation across session resumes. (#41421) - App-server clients can configure
thread/shellCommandtimeouts, including deadlines longer than one hour. (#41384)
Bug Fixes
-
Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)
-
Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)
-
Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)
-
Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)
-
MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)
-
Opening the model picker refreshes available models without losing the highlighted choice. (#41467)
-
Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals. (#41227, #41436, #41673)
-
Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials. (#41403)
Chores
- The planning tool is disabled by default; enable it with
tools.update_plan.enabled = true. (#41744) - Plugin recommendations begin loading during startup, reducing delays before the first turn. (#41375)
Changelog
Full Changelog: rust-v0.151.0...rust-v0.152.0
- #41210 Enable clock tools from model metadata @copyberry
- #41215 Roll over Guardian context before follow-up reviews @copyberry
- #41218 Share linked tool mention parsing in the TUI @copyberry
- #41219 Retry confirmed remote registration conflicts @copyberry
- #41221 Honor turn token budgets in Guardian review rollover @copyberry
- #41223 Add recency sorting to
project/list@copyberry - #41226 Move Guardian review session tests to a separate file @copyberry
- #41227 Use compatible PowerShell for elevated Windows sandbox commands @copyberry
- #41230 Apply app routing policy to unauthenticated plugin reads @copyberry
- #41231 Instrument the loaded plugin cache @copyberry
- #41232 Expose the PowerShell version in environment context @copyberry
- #41235 Sanitize history notes backend errors @copyberry
- #41239 Surface model provider authentication recovery progress @copyberry
- #41243 Add configurable gating for the sleep tool @copyberry
- #41250 Include thread source in realtime connection metadata @copyberry
- #41260 Let the history backend enforce tool output budgets @copyberry
- #41285 Drive keymap conflict checks from the action registry @copyberry
- #41292 Forward history note images to the model @copyberry
- #41308 Make subagents follow the root service tier @copyberry
- #41309 Honor required reviews when reusing Guardian scores @copyberry
- #41313 Decouple HTTP retry backoff from overload integration testing @copyberry
- #41322 Isolate required-model Guardian approval coverage @copyberry
- #41328 Review terminal input against retained permissions @copyberry
- #41331 Classify clock tools as built-in control tools @copyberry
- #41336 Preserve cached MCP tools during binding capture @copyberry
- #41344 Use refreshed MCP tool caches during binding capture @copyberry
- #41349 Assign stable IDs to generated Responses input items @copyberry
- #41354 Reject NUL bytes in reviewed terminal input @copyberry
- #41357 Support compression for shared rollout lineages @copyberry
- #41360 Measure Codex home usage at app-server startup @copyberry
- #41364 Test resuming compressed shared rollouts @copyberry
- #41365 Restrict async user messages to questions @copyberry
- #41368 Match Windows shell guidance to the executor platform @copyberry
- #41375 Preload plugin recommendations during session startup @copyberry
- #41380 Clarify proactive multi-agent delegation guidance @copyberry
- #41384 Support configurable timeouts for thread shell commands @copyberry
- #41385 Give Guardian classifications distinct turn identities @copyberry
- #41392 Add shared Guardian context primitives @copyberry
- #41393 Preserve one-shot exec when unified exec is disabled @copyberry
- #41396 Refresh runtimes for remote plugin state changes @copyberry
- #41400 Refresh MCP HTTP helper headers after authorization failures @copyberry
- #41403 Restrict cloud task credentials to trusted origins @copyberry
- #41413 Optimize history item lookups @copyberry
- #41416 Add app-server notification media filtering @copyberry
- #41421 Support per-tool MCP output limits @copyberry
- #41422 Add shared Guardian transcript collection @copyberry
- #41424 Preserve context baselines across nested agent forks @copyberry
- #41427 Filter media from function call output notifications @copyberry
- #41429 Retain the last selected step context for each turn @copyberry
- #41432 Run executor hooks for interrupted turns @copyberry
- #41435 Allow bundled browser cleanup hooks on subagent stop @copyberry
- #41436 Respond to terminal queries from TTY subprocesses @copyberry
- #41447 Support
openai/elicitationform requests @copyberry - #41448 Clarify question handling in Default collaboration mode @copyberry
- #41449 Rename the read-only Seatbelt platform defaults policy @copyberry
- #41452 Report code mode host request durations @copyberry
- #41454 Block goals after repeated execution host failures @copyberry
- #41456 Support app targets in executor plugin hooks @copyberry
- #41457 Source proactive multi-agent instructions from the model catalog @copyberry
- #41461 Source async user message descriptions from the model catalog @copyberry
- #41464 Preserve permissions when updating session metadata @copyberry
- #41467 Refresh the TUI model picker from the app server @copyberry
- #41476 Use rules_rs platforms for release binaries @copyberry
- #41477 Organize bundled Rust resources under asset directories @copyberry
- #41562 Preserve turn lineage across goal continuations @copyberry
- #41567 Restore thread cwd from owned settings snapshots @copyberry
- #41569 Harden diagnostic report uploads @copyberry
- #41570 Fix proactive multi-agent instruction grammar @copyberry
- #41586 Add Vim search motions to the composer @copyberry
- #41613 Move Vim history tests into the history search module @copyberry
- #41630 Update tests for default-enabled update_plan @copyberry
- #41660 Preserve Guardian authorization across history compaction @copyberry
- #41666 Approve the first Node REPL execution without a Guardian wait @copyberry
- #41673 Repair cursor-style rendering on older JediTerm terminals @copyberry
- #41683 Set working directories for environment MCP tests @copyberry
- #41700 Support package-style MCP server names @copyberry
- #41742 Show actionable rate-limit banners in the TUI @copyberry
- #41743 Mark history ingestion requests in turn metadata @copyberry
- #41744 Make the update_plan tool opt-in @copyberry
- #41803 Allow models to enable token budgeting by default @copyberry
- #41840 Use the async stack budget for approval reviews @copyberry
- #41846 Preserve Guardian review evidence across compaction @copyberry
- #41852 Preserve Guardian user answers across compaction @copyberry
- #41853 Box the session startup future at its API boundary @copyberry
- #41857 Preserve Guardian user answers from current history @copyberry
- #41858 Preserve user text when Guardian history drops oversized images @copyberry
- #41861 Keep history extension tools out of Guardian reviews @copyberry
- #41921 Start fresh Vim drafts in Insert mode
- #41931 Increase Guardian message transcript limits
- Vim mode supports
August 2026
-
Codex app 26.831
Performance improvements and bug fixes
- Fixed new chats getting stuck after pasting a large amount of text.
- Improved startup recovery on Windows and cleared stale startup errors after reconnection.
- Fixed response streaming stalls in hidden app windows.
-
Codex CLI 0.151.0
$ npm install -g @openai/codex@0.151.0View details
New Features
- Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
- Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
- Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)
Bug Fixes
- Preserved restored permission profiles across TUI turns and prevented
/cdfrom weakening sandbox restrictions. (#41192) - Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
- Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
- Preserved structured MCP tool and resource errors in app-server responses. (#41196)
- Counted nested subagent token usage toward root goal budgets. (#41183)
- Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)
Chores
- Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
- Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#41191, #41194)
Changelog
Full Changelog: rust-v0.150.0...rust-v0.151.0
- #41183 Account subagent token usage toward root goals @copyberry
- #41189 Instrument stdin review size checks @copyberry
- #41191 Stabilize Guardian WebSocket tests @copyberry
- #41192 Preserve restored permission profiles in TUI sessions @copyberry
- #41193 Report affected capabilities from remote plugin syncs @copyberry
- #41194 Harden core test fixture startup assertions @copyberry
- #41195 Finalize model-specific tool plans in
ToolRouter@copyberry - #41196 Improve sandboxing, MCP errors, and cached approvals @copyberry
- #41199 Make the optional MCP startup grace configurable @copyberry
- #41202 Let extensions process MCP tool results @copyberry
- #41204 Propagate executor home directories into sandbox contexts @copyberry
- #41205 Track executor MCP discovery telemetry @copyberry
- #41206 Make Ultra reasoning fallback model-aware @copyberry
- #41207 Propagate executor OS into turn environments @copyberry
- #41208 Honor per-repository plugin configuration in catalog requests @copyberry
- #41209 Align deny-read matching with executor path semantics @copyberry
-
Codex app 26.825
Performance improvements and bug fixes
- Preserved saved chats and projects when renaming an SSH connection.
-
Codex CLI 0.150.1
$ npm install -g @openai/codex@0.150.1View details
Bug Fixes
- Remote compaction now counts retained images toward its token budget by default, trimming older images as needed. (#41003)
Changelog
Full Changelog: rust-v0.150.0...rust-v0.150.1
-
ChatGPT for iOS 1.2026.230
New features
- Added task search across titles and conversation content on connected hosts.
- Added a compact composer gauge for viewing and adjusting reasoning effort.
- Added a full-screen editor for longer prompts.
- Added configurable Home Screen shortcuts for ChatGPT, Work, and Codex Remote.
- Added optional comments to selected response annotations.
Improvements and bug fixes
- Improved loading for long threads, with older history fetched as needed.
- Refined task list layout, ordering, and pinning to better match desktop.
- Inline visualizations now follow iOS appearance and accent settings.
-
Codex CLI 0.150.0
$ npm install -g @openai/codex@0.150.0View details
New Features
- Reference other Codex tasks with
@mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315) /copynow offers a picker for full responses, individual code blocks, and blockquotes. (#39997)- Unnamed terminal tasks receive descriptive titles automatically, and
/renamesuggests an editable title based on the conversation. (#40492, #40495) - Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)
- Bind shortcuts to cycle permission modes, and use
.in Vim mode to repeat your last edit. (#39873, #40521) - New
Interrupthooks can run commands or MCP handlers when an active top-level turn is interrupted. (#40511)
Bug Fixes
- Untrusted projects no longer supply project-level
AGENTS.mdinstructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004) - Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (#39993)
- Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)
- Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)
- Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)
- Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (#39804, #39825)
Changelog
Full Changelog: rust-v0.149.0...rust-v0.150.0
- #39667 Trace MCP runtime refresh coordination @copyberry
- #39691 Make Guardian v2 parent compaction reuse configurable @copyberry
- #39700 Fail closed on unsafe config and sed parsing @copyberry
- #39702 Wait for turn completion events in multi-agent resume tests @copyberry
- #39703 Move the global scope check into the code-mode runtime @copyberry
- #39706 Harden Seatbelt writable root path binding @copyberry
- #39707 Remove redundant code mode image helper test @copyberry
- #39709 Log TUI app event variants without their payloads @copyberry
- #39712 Reduce unified exec output buffer allocations @copyberry
- #39717 Pass CI workflow inputs through environment variables @copyberry
- #39719 Stop persisting checkout credentials in V8 workflows @copyberry
- #39720 Expose managed policy for browser settings imports @copyberry
- #39722 Track multi-agent v2 spawn calls in analytics @copyberry
- #39726 Box the WebSocket dial future @copyberry
- #39731 Avoid rollout reads for configured TUI sessions @copyberry
- #39736 Remove private executor directory creation @copyberry
- #39738 Honor Guardian runtime settings from model defaults @copyberry
- #39741 Use model-specific auto-review outcome instructions @copyberry
- #39744 Skip postprocessing for short composer input @copyberry
- #39746 Refresh resumed thread capability roots from executors @copyberry
- #39749 Require filesystem backends to implement directory walks @copyberry
- #39752 Expose uncompiled permission profile selection @copyberry
- #39755 Add managed developer instructions to requirements @copyberry
- #39756 Cache shell snapshots in the exec server @copyberry
- #39757 Standardize shell execution on unified exec @copyberry
- #39761 Add app-server MCP event streaming @copyberry
- #39765 Include suggestion IDs in plugin install metadata @copyberry
- #39770 Refresh bundled model definitions @copyberry
- #39772 Standardize shell execution on unified exec @copyberry
- #39776 Verify Codex app signatures before launch or install @copyberry
- #39777 Retry transient registry failures during initial exec connection @copyberry
- #39779 Make tool-result telemetry limits configurable @copyberry
- #39782 Support standalone named function call outputs @copyberry
- #39784 Classify rollout migration failures @copyberry
- #39785 Support turn cost telemetry for custom model providers @copyberry
- #39786 Support host-accepted exec-server WebSockets @copyberry
- #39790 Deduplicate zsh fork test setup @copyberry
- #39791 Handle standalone tool outputs as external context @copyberry
- #39792 Reject settings updates for parent-owned subagents @copyberry
- #39794 Install build tools in full Rust CI @copyberry
- #39795 Add hostname to the configurable TUI status line @copyberry
- #39797 Enrich thread archive analytics with thread context @copyberry
- #39798 Update rmcp to 3.1.3 @copyberry
- #39802 Optimize case-insensitive thread history matching @copyberry
- #39804 Use multi-agent V1 for Amazon Bedrock models @copyberry
- #39807 Finalize reserved PDF uploads with creation context @copyberry
- #39809 Preserve WINDIR in core Windows shell environments @copyberry
- #39811 Restrict macOS preference reads to full-disk policies @copyberry
- #39812 Avoid materializing writable-root carveouts for presence checks @copyberry
- #39813 Defer legacy filesystem policy projection @copyberry
- #39822 Preserve uncapped Guardian classifier instructions @copyberry
- #39825 Use Responses compaction for Amazon Bedrock @copyberry
- #39827 Add history and notes tools for token-budget sessions @copyberry
- #39830 Rename the history notes extension config option @copyberry
- #39837 Ignore project instructions for untrusted projects @copyberry
- #39847 Include context window IDs in response metadata @copyberry
- #39852 Reset registry retries when refreshing Noise bundles @copyberry
- #39864 Limit pending input preview wrapping work @copyberry
- #39870 Allow session configuration with
codex agents@copyberry - #39873 Add keybindings for cycling TUI permission modes @copyberry
- #39876 Support attaching to existing realtime calls @copyberry
- #39917 Honor request PATH in exec-server shell snapshots @copyberry
- #39926 Resolve HTTP MCP bearer tokens in executor environments @copyberry
- #39930 Track remote MCP header environment variables @copyberry
- #39935 Enforce issuer binding for MCP OAuth endpoints @copyberry
- #39937 Bound unified exec output delta frames @copyberry
- #39940 Allow more time for local code-mode host startup @copyberry
- #39941 Discover HTTP MCP servers from selected executors @copyberry
- #39952 Honor required MCP servers from selected executors @copyberry
- #39953 Support voice-aware configuration and version-skew builds @copyberry
- #39957 Add in-memory shell snapshots to unified exec @copyberry
- #39958 Stop advertising shell snapshots from local exec servers @copyberry
- #39961 Test browser MCP bearer tokens over executor WebSockets @copyberry
- #39962 Keep Guardian reviews isolated from executor MCP servers @copyberry
- #39967 Upgrade pnpm to 10.34.5 @copyberry
- #39969 Consolidate code mode output helper tests @copyberry
- #39971 Fix elevated Windows sandbox setup activation @copyberry
- #39975 Preserve root user authorization in subagent Guardian reviews @copyberry
- #39976 Allow semaphore limit queries in the macOS sandbox @copyberry
- #39979 Preserve MCP compatibility with older executors @copyberry
- #39980 Enforce environment network policies for remote execution @copyberry
- #39981 Bypass risk scoring for models that require automatic review @copyberry
- #39985 Truncate Guardian instructions after rendering the policy @copyberry
- #39991 Preserve TUI event ordering during active-thread draining @copyberry
- #39992 Keep keymap action descriptions stable while navigating @copyberry
- #39993 Keep credentials out of app-server logs @copyberry
- #39994 Add Guardian internal session support @copyberry
- #39995 Expand browser and computer use requirements @copyberry
- #39997 Add a response target picker to
/copy@copyberry - #39999 Hide Fast mode status for unsupported models @copyberry
- #40000 Expose browser and computer-use requirements through app-server @copyberry
- #40004 Preserve managed deny-read rules across permission updates @copyberry
- #40005 Route escalated commands through synchronous Guardian review @copyberry
- #40006 Synchronize Git enrichment tests explicitly @copyberry
- #40007 Implement Amazon Bedrock setup in the app server @copyberry
- #40009 Run allowlisted executor plugin stop hooks @copyberry
- #40011 Synchronize concurrent Git enrichment test explicitly @copyberry
- #40012 Preserve executor context for MCP stop hooks @copyberry
- #40013 Reuse Guardian reviews in async risk scoring @copyberry
- #40015 Harden remote installed plugin cache reconciliation @copyberry
- #40017 Trace turn context creation and realtime state checks @copyberry
- #40018 Add browser and computer use configuration @copyberry
- #40020 Add end-to-end tests for executor Stop hooks @copyberry
- #40021 Cancel Guardian reviews with their tool calls @copyberry
- #40024 Honor granular sandbox approvals in unified exec @copyberry
- #40028 Log Guardian V2 classification results @copyberry
- #40031 Preserve strict MCP auto-review outcomes @copyberry
- #40038 Add unfinished root turn suspension @copyberry
- #40068 Report runtime MCP connection status @copyberry
- #40150 Use thread source metadata for Guardian classifiers @copyberry
- #40161 Allow exec callers to classify new threads @copyberry
- #40166 Move the TUI cursor before showing it @copyberry
- #40169 Add regression coverage for patch approval paging @copyberry
- #40174 Preserve content item kinds in message metadata @copyberry
- #40177 Require content kinds for extension prompt fragments @copyberry
- #40179 Shut down resumed descendants when archiving thread trees @copyberry
- #40180 Classify contextual fragments with content kinds @copyberry
- #40184 Preserve context annotations in merged messages @copyberry
- #40186 Identify detached memory requests as memory consolidation @copyberry
- #40196 Annotate user input and contextual fragments with content kinds @copyberry
- #40200 Remove the Plan mode composer nudge @copyberry
- #40221 Distinguish Guardian review threads from subagents @copyberry
- #40257 Support
cua_replas a Node REPL-backed MCP server @copyberry - #40264 Preserve content metadata when truncating messages @copyberry
- #40266 Preserve content annotations when filtering forked agent history @copyberry
- #40271 Preserve content annotations when rolling back model switches @copyberry
- #40273 Normalize compacted user message annotations @copyberry
- #40275 Classify additional generated context fragments @copyberry
- #40277 Preserve annotations when omitting unsupported media @copyberry
- #40280 Budget retained images during remote compaction @copyberry
- #40281 Preserve content kinds during image preparation @copyberry
- #40292 Add smoke tests for assembled Codex packages @copyberry
- #40294 Classify internal model context by source @copyberry
- #40295 Classify permission instructions under the permissions namespace @copyberry
- #40296 Annotate Responses Lite base instructions @copyberry
- #40297 Preserve developer instruction annotations in subagent forks @copyberry
- #40301 Label Business Pro Lite plans as Business Premium @copyberry
- #40302 Harden bubblewrap synthetic mount registry isolation @copyberry
- #40308 Add TUI tools for managing Codex tasks @copyberry
- #40315 Add task mentions to the TUI composer @copyberry
- #40321 Update the frameless realtime default model @copyberry
- #40343 Cache executor metadata from initialization @copyberry
- #40363 Forward local env vars to Agent Plugin MCP servers @copyberry
- #40368 Use snapshot session sources for MCP projection @copyberry
- #40376 Advertise shell snapshot v2 support on Unix @copyberry
- #40381 Preserve sandbox errors during session initialization @copyberry
- #40382 Expose invocation sources to extension tools @copyberry
- #40393 Classify Guardian V2 risk with a single token @copyberry
- #40398 Stabilize the mismatched executor Stop hook test @copyberry
- #40403 Prewarm more Guardian sampling WebSockets @copyberry
- #40410 Strengthen Agent Plugin MCP environment overlay tests @copyberry
- #40413 Honor response budgets when listing skills @copyberry
- #40420 Represent Guardian policy as a contextual fragment @copyberry
- #40422 Harden Windows updater command execution @copyberry
- #40423 Harden Windows file URI conversion @copyberry
- #40431 Render Guardian review evidence with async scorer truncation @copyberry
- #40436 Add a managed gate for in-app local automation @copyberry
- #40437 Report completed sub-agent activity on parent turns @copyberry
- #40438 Use rust-lld for Bazel Windows MSVC Rust links @copyberry
- #40441 Preserve Windows root reads with deny-read rules @copyberry
- #40443 Batch sandboxed capability root discovery @copyberry
- #40447 Retry failed shell snapshot captures @copyberry
- #40449 Route peer agent completion activity to the initiating turn @copyberry
- #40450 Gate content item kinds behind a feature flag @copyberry
- #40460 Prevent Unix PTY I/O from blocking runtime shutdown @copyberry
- #40464 Enforce subagent ownership across app-server inputs @copyberry
- #40465 Record Guardian classifier input truncation metrics @copyberry
- #40466 Add credential brokering to network proxy feature config @copyberry
- #40471 Render Markdown links as clickable labels in supported terminals @copyberry
- #40472 Add structured full approval reviews to extensions @copyberry
- #40475 Request read control when updating Windows sandbox ACLs @copyberry
- #40477 Reload Multi-Agent V2 children through their parent @copyberry
- #40480 Add a computer-use-only Guardian v2 review scope @copyberry
- #40481 Support managed AWS access keys for Amazon Bedrock @copyberry
- #40484 Broker credential aliases in child environments @copyberry
- #40486 Add root turn IDs to turn and tool analytics @copyberry
- #40487 Extract agent role loading into a dedicated crate @copyberry
- #40488 Export turn cost as an OTEL metric @copyberry
- #40489 Honor disabled managed network configuration @copyberry
- #40490 Harden project config when credential brokering is active @copyberry
- #40491 Honor response budgets when reading skill resources @copyberry
- #40492 Generate descriptive TUI thread titles @copyberry
- #40494 Hide ephemeral system threads from TUI routing @copyberry
- #40495 Suggest conversation-based thread titles in
/rename@copyberry - #40496 Track history, notes, and async messages as control tools @copyberry
- #40497 Harden internal Guardian session isolation @copyberry
- #40498 Increase the app-server model refresh interval @copyberry
- #40499 Harden startup rollout migration against concurrent updates @copyberry
- #40501 Deduplicate plugin skills in unified mentions @copyberry
- #40502 Collapse home paths in AGENTS.md status summaries @copyberry
- #40504 Route cyber Trusted Access links by plan type @copyberry
- #40508 Persist realtime events in the thread timeline @copyberry
- #40509 Add persisted thread artifact models @copyberry
- #40511 Add hooks for interrupted turns @copyberry
- #40521 Add dot-repeat to Vim mode @copyberry
- #40523 Retry provider auth commands after initial failures @copyberry
- #40528 Represent terminal input in approval reviews @copyberry
- #40533 Route extension hints into context-window metadata @copyberry
- #40539 Inject history notes hints into context windows @copyberry
- #40544 Include transparent background in image generation analytics @copyberry
- #40551 Derive sandbox contexts from turn environments @copyberry
- #40554 Register the transcript v2 feature flag @copyberry
- #40570 Preserve Unicode paths in Windows batch aliases @copyberry
- #40585 Track remaining multi-agent v2 tools in analytics @copyberry
- #40587 Scope stop hooks for memory consolidation @copyberry
- #40594 Preserve conversation context in Guardian transcripts @copyberry
- Reference other Codex tasks with
-
Browser extensions, site tools, and cloud sign-in 26.820
-
More browsers: Use the ChatGPT browser extension in Microsoft Edge, Brave, Opera, and Vivaldi, as well as Chrome. Set up your browser in Settings > Computer Use in the ChatGPT desktop app. All five support tab mentions and browser control; Opera doesn’t support side chat.
-
Site tools (WebMCP): In the desktop app’s built-in browser, ChatGPT Work and Codex can use tools provided by a website to work with the page. Use GPT-5.6 Sol or GPT-5.6 Terra and update to the latest desktop app. Site tools aren’t available with GPT-5.6 Luna or in Enterprise or Edu workspaces.
-
Cloud browser sign-in: On eligible plans, ChatGPT Work on the web, iOS, and Android can ask you to sign in to a supported website through the cloud browser. Enter your details in the sign-in flow, not in the chat. Cloud browser sessions stay separate from your local browser. Website sign-in isn’t available for Enterprise or Edu workspaces.
Availability depends on rollout and workspace settings. Website-access and action-confirmation requirements still apply.
Performance improvements and bug fixes
- Fixed browser tab mentions being lost when starting a chat from Home.
- Improved right-to-left chat titles and Command+Arrow navigation in the composer.
-
-
Trigger scheduled tasks from Gmail, Slack, and GitHub events
ChatGPT scheduled tasks can now run when supported events occur in Gmail, Slack, or GitHub. Filter Gmail messages by sender or subject, watch selected Slack channels, or respond to pull request activity such as reviews, comments, commit updates, and merges.
Event-triggered tasks are available in ChatGPT on the web and mobile for eligible plans. Connect the relevant app and approve its requested access before creating a task. The ChatGPT Slack app must be a member of each watched channel, and the connected GitHub app must have access to each watched repository.
An event-triggered task can’t also use a time-based schedule. When matching events arrive close together, ChatGPT may combine them in one run. Open Scheduled to review pending events or choose Run now.
-
Codex MCP server command deprecated
The
codex mcp-servercommand is now deprecated. Use the Codex app server instead.Update, September 5, 2026: The command and standalone
codex-mcp-serverbinary have been removed. See the migration guidance. -
Codex CLI 0.149.1
$ npm install -g @openai/codex@0.149.1 -
Codex and ChatGPT updates
New features
-
Apple Messages: Use the Apple Messages plugin to read and search Messages chats on your Mac and prepare or send messages. It’s available on all plans in the ChatGPT desktop app for macOS. You can use the plugin in ChatGPT Work and Codex. By default, ChatGPT sends messages only after you approve the message and its recipients. See the plugin guide for persistent-approval risks, revocation steps, and the known issue with tasks that disable approval prompts.
-
Site co-editing: Where Site collaboration is available, owners can invite active members of the same workspace as editors. Editors can read the Site’s live database data, update the Site, save versions, and publish changes after the owner publishes the Site for the first time. Owners retain control of the audience, settings, analytics, ownership, version restoration, and editor access.
-
Editable Site URLs: Where URL editing is available, owners can change an existing Site’s ChatGPT-hosted address without creating another deployment. The previous address redirects to the new URL. Custom domains are a separate, existing feature and aren’t changed by this setting.
-
Computer History in Europe: Computer History is now available in the EEA, Switzerland, and the United Kingdom for ChatGPT Pro, Business, and Enterprise users in the ChatGPT desktop app on macOS. It’s off by default and requires Memories. Business and Enterprise administrators must enable access before workspace members can choose to turn it on.
-
Shared thread snapshots: On all Codex plans, share a read-only snapshot of a local Codex thread from the ChatGPT desktop app for macOS. The snapshot doesn’t update when the original thread changes. Personal-account links can be opened by anyone with the link; workspace-account links are limited to members of the originating workspace. Codex redacts known secret patterns, but review the shared content because sensitive content may remain. View or revoke links in ChatGPT data controls, under Shared links.
-
Unified pinned threads: Keep the same pinned chats across the ChatGPT desktop app and iOS.
-
-
Codex CLI 0.149.0
$ npm install -g @openai/codex@0.149.0View details
New Features
- Added an interactive
codex agentsdashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142) - Added
/cd,/pwd, and/cwdcommands for managing the working directory in TUI sessions. (#38894) - Added
codex queuefor sending messages to existing local or remote sessions. (#39092) - Expanded Vim editing with character replacement and more change motions such as
cw,c$, andcc. (#39661) codex doctornow diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity. (#38827, #38918, #39060, #39074)- SDK users can now pass exact CLI config overrides and select
maxorultrareasoning effort. (#38817, #39662)
Bug Fixes
- Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics. (#39034, #39385, #39604)
- Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults. (#39153)
- Fixed duplicate sub-agent activity and tightened TUI routing for sub-agent notifications and approvals. (#39049, #39088)
- Realtime WebRTC sideband connections now reconnect after unexpected transport loss without dropping pending output. (#39257)
- Inline TUI history now remains available in Windows Terminal scrollback. (#39619)
- Inactive TUI thread replay buffers are now bounded to prevent excessive retained streamed output. (#39081)
Documentation
- Clarified that external contributions should go through issues and design discussion rather than pull requests. (#39089)
- Documented DNS exfiltration risks and trust limitations for secure devcontainers. (#39283)
Changelog
Full Changelog: rust-v0.148.0...rust-v0.149.0
- #38817 Add raw config overrides to the TypeScript SDK @copyberry
- #38819 Support metadata staging for reserved thread IDs @copyberry
- #38822 Avoid cloning TUI history span content @copyberry
- #38823 Avoid allocating per character when decorating hyperlinks @copyberry
- #38827 Add endpoint protection checks to
codex doctor@copyberry - #38830 Isolate external editor buffers from sandbox-writable paths @copyberry
- #38837 Share editor keymaps across TUI composer components @copyberry
- #38840 Identify Mac mini hosts in remote control handshakes @copyberry
- #38893 Restore thread timestamp maxima independently @copyberry
- #38894 Add working-directory commands to the TUI @copyberry
- #38899 Move requirements policy ownership to execpolicy @copyberry
- #38902 Honor per-environment shell variable policies @copyberry
- #38907 Edit queued messages with Vim history-up @copyberry
- #38913 Stop rendering columns after filling their area @copyberry
- #38916 Honor legacy
:project_rootspermission entries @copyberry - #38918 Improve
codex doctornetwork diagnostics @copyberry - #38919 Reject obsolete app-server permission profile fields @copyberry
- #38921 Compact successful command activity in the TUI @copyberry
- #38940 Add experimental app-server project APIs @copyberry
- #38941 Prevent Noise auth tokens from reaching child processes @copyberry
- #38942 Enforce environment-specific command policies @copyberry
- #38947 Stop loading legacy managed config on Windows @copyberry
- #38978 Add a configurable skill catalog token budget @copyberry
- #38980 Bound Guardian v2 parent compaction context @copyberry
- #38987 Include images in Guardian v2 transcripts @copyberry
- #38990 Source Guardian v2 defaults from the model catalog @copyberry
- #38993 Evaluate recent and character-routed skill selection @copyberry
- #38994 Remove the workspace settings gate for apps and plugins @copyberry
- #38997 Retry transient Guardian sampling failures @copyberry
- #39001 Ignore stale Guardian tool risk scores @copyberry
- #39005 Disable Guardian V2 for managed automatic reviewers @copyberry
- #39006 Emit API-key turn cost telemetry from app-server @copyberry
- #39007 Wait for Guardian score progress in approval tests @copyberry
- #39008 Add task context to shadow skill selection @copyberry
- #39017 Move MCP policy types into
codex-protocol@copyberry - #39019 Isolate MCP resource headers during OAuth requests @copyberry
- #39020 Restrict Windows IDE pipe client impersonation @copyberry
- #39022 Hang soft-break whitespace in the TUI composer @copyberry
- #39023 Reduce retained MCP result data in TUI history @copyberry
- #39025 Speed up the large diff highlighting test @copyberry
- #39026 Use simulated time in the long typing test @copyberry
- #39028 Cache the test pet spritesheet encoding @copyberry
- #39030 Speed up the in-app resume cwd test @copyberry
- #39032 Encapsulate TUI shimmer under the motion module @copyberry
- #39033 Bound legacy resume preview scans @copyberry
- #39034 Dispatch queued messages written by other processes @copyberry
- #39035 Add app-server coverage for Guardian V2 approval routing @copyberry
- #39036 Allow config reads to join active app-server read batches @copyberry
- #39038 Restore Guardian risk scores across thread lifecycles @copyberry
- #39040 Preserve foreign paths in managed network approvals @copyberry
- #39043 Enforce managed authentication backend settings @copyberry
- #39045 Add managed gates for in-app chat and dictation @copyberry
- #39046 Restrict MCP HTTP redirects to the configured origin @copyberry
- #39047 Skip plugin hook loading when hooks are disabled @copyberry
- #39049 Avoid rendering sub-agent activity twice in the TUI @copyberry
- #39050 Prepare the telemetry shutdown worker during initialization @copyberry
- #39051 Use installed callable apps for TUI mentions @copyberry
- #39055 Add network policy metadata to environment configuration @copyberry
- #39056 Verify the pinned zsh manifest in release builds @copyberry
- #39057 Rate-limit TUI frames from their actual emission time @copyberry
- #39058 Tag Codex Apps protocol discovery metrics @copyberry
- #39060 Add desktop app diagnostics to
codex doctor@copyberry - #39061 Avoid rerendering streamed code fences @copyberry
- #39063 Render only visible rows in the transcript pager @copyberry
- #39064 Restrict queued-message editing to its dedicated binding @copyberry
- #39065 Limit terminal hyperlink layout to the visible viewport @copyberry
- #39067 Add desktop security enforcement diagnostics @copyberry
- #39068 Remove skill model delegation support @copyberry
- #39072 Persist generated images through turn executors @copyberry
- #39073 Propagate caller metadata to rendezvous connections @copyberry
- #39074 Add desktop update diagnostics to
codex doctor@copyberry - #39075 Avoid redundant terminal row clears @copyberry
- #39077 Build filesystem JSON params only for remote TUI sessions @copyberry
- #39078 Preserve tracing context for environment resolution @copyberry
- #39079 Apply user MCP policy to selected executor plugins @copyberry
- #39081 Bound TUI thread replay buffers by delta size @copyberry
- #39082 Prompt for project trust in remote TUI workspaces @copyberry
- #39083 Harden Windows sandbox provisioning against reparse points @copyberry
- #39084 Preserve filesystem permission path conventions @copyberry
- #39087 Read plugin authentication state from AuthManager @copyberry
- #39088 Harden TUI subagent navigation @copyberry
- #39089 Clarify the external contribution policy @copyberry
- #39092 Add a command to queue messages for existing sessions @copyberry
- #39094 Add an agents overview dashboard to the TUI @copyberry
- #39098 Trace exec-server requests from receipt through completion @copyberry
- #39100 Avoid redundant terminal size queries during history insertion @copyberry
- #39101 Update rmcp to 3.1.2 @copyberry
- #39102 Raise the GPT-5.6 maximum context window @copyberry
- #39103 Drop capabilities from Linux sandbox processes @copyberry
- #39112 Make the agents overview an interactive task dashboard @copyberry
- #39113 Surface interactive requests in realtime conversations @copyberry
- #39114 Add a dedicated
codex agentsdashboard command @copyberry - #39115 Remove the experimental thread config endpoint @copyberry
- #39117 Reject lossy legacy permission projections @copyberry
- #39122 Fail closed on deeply nested command wrappers @copyberry
- #39131 Validate identifiers in plugin creator workflows @copyberry
- #39141 Redact auth tokens from app-server response logs @copyberry
- #39142 Add configurable shortcuts for the agents dashboard @copyberry
- #39143 Hydrate recommended plugin metadata on selection @copyberry
- #39145 Persist active permission profiles in turn context @copyberry
- #39147 Centralize persisted resume settings lookup @copyberry
- #39152 Update PyPI publish action to v1.14.2 @copyberry
- #39153 Restore permission profiles when resuming threads @copyberry
- #39154 Box the TUI future to bound CLI stack usage @copyberry
- #39155 Prepare Python SDK 0.147.0 stable release @copyberry
- #39157 Notify clients when Guardian requires strict review @copyberry
- #39159 Require approval for commands with dynamic shell words @copyberry
- #39163 Refresh collaboration instructions when their content changes @copyberry
- #39165 Prevent marketplace identity spoofing @copyberry
- #39174 Skip empty user messages for automatic idle turns @copyberry
- #39176 Drop descendant progress updates after remote compaction @copyberry
- #39187 Scope MCP app resource reads to their originating call @copyberry
- #39192 Preserve MCP resource origins across compaction @copyberry
- #39200 Add a symlink-safe reader for sensitive files @copyberry
- #39205 Reject symbolic links in memory workspaces @copyberry
- #39213 Add a fail-closed Tree-sitter PowerShell lowerer @copyberry
- #39214 Prevent custom providers from inheriting ambient auth @copyberry
- #39220 Reconnect Guardian sampling WebSockets after auth changes @copyberry
- #39221 Skip redirected external-agent migration destinations @copyberry
- #39224 Add Guardian v2 approval review metrics @copyberry
- #39227 Include node_repl screenshots in Guardian v2 reviews @copyberry
- #39235 Decouple Noise relay streams from JSON-RPC processing @copyberry
- #39240 Deduplicate remote plugin bundle syncs with shared semaphores @copyberry
- #39241 Record Guardian v2 classification metrics @copyberry
- #39242 Add safe permission profile intersection @copyberry
- #39244 Scope MCP resource reads by connector @copyberry
- #39246 Give Guardian classifier connections distinct thread identities @copyberry
- #39249 Add exec-server forwarding mode @copyberry
- #39256 Deduplicate rollout moves when archiving threads @copyberry
- #39257 Reconnect WebRTC Realtime sideband transports @copyberry
- #39259 Simplify unified exec output snapshots @copyberry
- #39261 Stop TUI chats on misalignment policy violations @copyberry
- #39262 Prevent ConPTY DLL loading from the current directory @copyberry
- #39264 Improve Guardian v2 risk classification @copyberry
- #39266 Require fresh approval beneath denied permission paths @copyberry
- #39267 Inject Node REPL policy into Guardian review sessions @copyberry
- #39273 Preserve thread names during rollout migration @copyberry
- #39274 Add provider-owned authentication recovery @copyberry
- #39277 Declare experimental Amazon Bedrock setup APIs @copyberry
- #39278 Preserve owner-provided environment configuration @copyberry
- #39279 Propagate Windows sandbox ACL update failures @copyberry
- #39281 Move shell snapshot scripts into
codex-shell-command@copyberry - #39283 Document secure devcontainer DNS exfiltration risk @copyberry
- #39284 Report network disconnects during approval @copyberry
- #39285 Show file destinations in TUI change approvals @copyberry
- #39287 Report diagnostic upload failures @copyberry
- #39288 Register the async message feature flag @copyberry
- #39290 Add Windows sandbox diagnostics to
codex doctor@copyberry - #39293 Remove app-server's direct reqwest dependency @copyberry
- #39294 Increase SQLite log sink batching @copyberry
- #39296 Enable MCP tool hooks in Codex sessions @copyberry
- #39298 Allow overriding Codex package versions @copyberry
- #39299 Restrict agent roles to bounded configuration overrides @copyberry
- #39301 Prevent Node REPL auth tokens from reaching child processes @copyberry
- #39303 Record Guardian v2 classification token usage @copyberry
- #39304 Keep Guardian v2 risk scores in memory @copyberry
- #39306 Honor managed config during project discovery @copyberry
- #39307 Fail closed on Guardian V2 risk scoring errors @copyberry
- #39309 Attribute executor skill invocations to plugins @copyberry
- #39311 Bind unified exec approvals to shell executables @copyberry
- #39312 Add async delivery metadata to agent messages @copyberry
- #39314 Run hooks with the captured session environment @copyberry
- #39315 Evict guardian transcript entries in cacheable chunks @copyberry
- #39316 Support Edu Plus and Edu Pro account plans @copyberry
- #39319 Add the async user message tool @copyberry
- #39320 Expand OAuth metadata redirect test coverage @copyberry
- #39322 Enforce workspace restrictions for header authentication @copyberry
- #39325 Stop migrating Cursor sandbox settings @copyberry
- #39331 Route hook MCP calls through current connections @copyberry
- #39335 Enforce environment MCP policies @copyberry
- #39372 Scope TUI approval requests to their threads @copyberry
- #39385 Prefer the most recent session when queueing by name @copyberry
- #39402 Remove npm package staging from repo checks @copyberry
- #39404 Support FD mounts with older system Bubblewrap versions @copyberry
- #39410 Refresh expired AWS credentials for Bedrock @copyberry
- #39452 Remove the feature gate for async user messages @copyberry
- #39474 Consolidate Guardian extensions into
codex-guardian-v2@copyberry - #39480 Move shell snapshot tests into shell-command @copyberry
- #39493 Make head-tail buffer capacity const generic @copyberry
- #39494 Test panoramic Guardian transcript image resizing @copyberry
- #39496 Use default timeouts in cyber exec policy tests @copyberry
- #39497 Correct normalized dynamic tool coverage across response modes @copyberry
- #39501 Use a narrow fixture for the unified image resize test @copyberry
- #39505 Test text stringify errors in the code mode runtime @copyberry
- #39506 Test code mode notifications without a sync tool call @copyberry
- #39509 Test disabled enhanced Node REPL transcript images separately @copyberry
- #39510 Track built-in control tool calls in analytics @copyberry
- #39514 Use stored item types when materializing turn summaries @copyberry
- #39515 Use
mem::taketo drain unified exec output buffers @copyberry - #39520 Isolate automatic plugin Git operations @copyberry
- #39523 Persist thread section moves before the first turn @copyberry
- #39524 Stop treating Git commands as inherently safe @copyberry
- #39584 Add a just recipe for assembling Codex packages @copyberry
- #39585 Test plugin sync isolation from repository Git config @copyberry
- #39586 Isolate IPC in Bubblewrap sandboxes @copyberry
- #39588 Preserve unparsed shell wrappers in exec policy @copyberry
- #39590 Harden plugin manifest handling during installation @copyberry
- #39592 Prevent SQLx warnings from feeding back into SQLite logs @copyberry
- #39594 Raise the MCP tool name limit to 128 bytes @copyberry
- #39595 Keep marketplace upgrade state out of config @copyberry
- #39597 Separate thread settings from environment configuration @copyberry
- #39599 Protect macOS Seatbelt writable root anchors @copyberry
- #39601 Keep async user messages on the direct tool surface @copyberry
- #39602 Use in-process parsing for PowerShell command classification @copyberry
- #39604 Preserve queued TUI input semantics @copyberry
- #39605 Hide approved automatic review warnings in the TUI @copyberry
- #39606 Enable user namespaces in shared CI setup @copyberry
- #39607 Resolve model-provided shells by type @copyberry
- #39608 Harden skill installation against unsafe symlinks @copyberry
- #39609 Limit Bazel integration test threads on macOS @copyberry
- #39611 Harden MCP OAuth fallback credential writes @copyberry
- #39614 Prevent
apply_patchfrom widening write permissions @copyberry - #39615 Bind MCP OAuth refresh tokens to their issuer @copyberry
- #39616 Validate linked worktrees before inheriting project trust @copyberry
- #39618 Apply composer editing preferences to TUI text prompts @copyberry
- #39619 Preserve inline TUI scrollback in Windows Terminal @copyberry
- #39620 Stream executor capability and skill file reads @copyberry
- #39623 Prevent protected-path rename bypasses in macOS Seatbelt @copyberry
- #39625 Add cwd-relative turn diff paths @copyberry
- #39629 Preserve parent repository discovery through sandbox metadata mounts @copyberry
- #39630 Retire the untrusted approval policy @copyberry
- #39631 Skip sandboxed shell commands in Guardian v2 by default @copyberry
- #39632 Expose permission profile resolution in the core API @copyberry
- #39635 Show strict review warnings in the TUI @copyberry
- #39637 Treat
invalid_grantrefresh failures as permanent @copyberry - #39640 Prompt to unarchive sessions before resuming or forking @copyberry
- #39641 Sanitize developer context in full-history agent forks @copyberry
- #39645 Enforce managed residency for model providers @copyberry
- #39646 Exercise restricted-token sandboxing in cyber policy tests @copyberry
- #39649 Resolve bundled Windows helpers through bin junctions @copyberry
- #39653 Enforce filesystem permissions when loading AGENTS.md @copyberry
- #39655 Make core integration test permissions explicit @copyberry
- #39656 Advertise the Desktop app in graphical Linux sessions @copyberry
- #39657 Warn when launching the deprecated MCP server @copyberry
- #39658 Let Guardian V2 satisfy required model reviews @copyberry
- #39659 Harden unsandboxed patch filesystem access @copyberry
- #39661 Expand Vim change commands and add character replacement @copyberry
- #39662 Add max and ultra reasoning efforts to the SDKs @copyberry
- #39663 Restrict plugin migration to home scope @copyberry
- #39665 Add macOS Seatbelt filesystem integration tests @copyberry
- #39666 Improve no-follow filesystem behavior across platforms @copyberry
- Added an interactive
-
Codex app 26.818
Includes updates through August 23, 2026.
Performance improvements and bug fixes
- Eligible local chats interrupted by an app update now resume automatically after the app restarts.
- Preserved draft formatting and mentions when switching between chats.
- Fixed a blue composer background on Windows virtual desktops.
-
GitLab support in Codex cloud (Beta)
GitLab support is available in beta on all ChatGPT plans. Connect a GitLab project to Codex cloud, create an environment for it, start tasks from issues or merge requests with
@codex, and request one-off or automatic merge request reviews.The integration runs in Codex cloud. A managed workspace admin can disable the connector. GitLab-triggered activity requires permission to configure the applicable webhook. For GitLab Self-Managed or GitLab Dedicated, a workspace admin must configure the connection, and webhook activity requires GitLab 19.0 or later.
Codex cannot complete a review when GitLab omits a collapsed or oversize diff.
Learn how to use Codex with GitLab.
-
ChatGPT for iOS 1.2026.223
New features
- Added a setting to open ChatGPT directly in Codex Remote on launch.
- Added support for standard MCP forms and editable message approvals.
- Linked folders now open directly in the files sheet.
Improvements and bug fixes
- Improved the New Thread project picker to reflect the selected host’s current projects.
- Voice now works directly from existing task composers, connects more reliably, and continues task actions in the background.
- Improved diff review stability and performance, especially in large workspaces.
- Added a Retry action when task messages fail to load.
- Fixed large task responses failing to load.
- Fixed tasks disappearing or remaining unavailable after being idle, reconnecting, or returning to the task list.
- Improved host pairing reliability and prevented enrollment checks from freezing the app.
- Improved response annotations and preserved streamed activity when tasks complete.
- Canceling or editing a steering message now prevents delivery.
-
Codex CLI 0.148.0
$ npm install -g @openai/codex@0.148.0View details
New Features
- Export complete TUI conversations to Markdown with
/export, either to the clipboard or a new file. (#37358) - Fork sessions with
codex exec fork, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371) - Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
- View estimated thread credits or cost in
/status, status lines, and terminal titles for eligible workspaces. (#38281, #38282) - Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
- Hooks can now run commands asynchronously and invoke MCP tools. (#37533, #38705)
Bug Fixes
- Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream. (#37260, #38785)
- Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews. (#37198, #37368, #38605)
- Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex. (#37337, #37485, #38418)
- TUI startup no longer lets buffered terminal input activate prompts accidentally, and onboarding appears when authentication is missing. (#38641, #38643, #38644)
- Composer and transcript rendering now handle CRLF pastes, wrapped whitespace, and long URLs correctly. (#37709, #38380, #38704)
- Sandbox restrictions now fail closed for denied or unreadable paths across Linux and Windows. (#37875, #38026, #38416, #38660)
Documentation
- The bundled skill-creator guide is more focused, and validation now rejects unfinished TODO placeholders. (#38384)
Changelog
Full Changelog: rust-v0.147.0...rust-v0.148.0
- #37190 Interrupt cyber model turns after one Guardian denial @copyberry
- #37191 Preserve legacy semantics during rollout migration @copyberry
- #37198 Prefer persisted cwd when reading local threads @copyberry
- #37199 Track thread archive analytics @copyberry
- #37204 Add durable user-message queue dispatch @copyberry
- #37206 Add a unified image budget @copyberry
- #37210 Fetch remote installed plugins across all scopes @copyberry
- #37211 Harden network proxy MITM authorization @copyberry
- #37248 Cover remote MCP discovery timeout cleanup @copyberry
- #37252 Allow agent roles on full-history forks @copyberry
- #37260 Fix first-turn model switching and rollback @copyberry
- #37261 Start cached MCP servers lazily for subagents @copyberry
- #37267 Support plugin roots in the host skill loader @copyberry
- #37273 Reuse MCP handlers across sampling steps @copyberry
- #37279 Avoid cloning immutable metadata on tool search cache hits @copyberry
- #37335 Fully repaint inline viewports after history overlap @copyberry
- #37336 Use step environments for extension turn input @copyberry
- #37337 Recover MCP servers after OAuth reauthentication @copyberry
- #37338 Honor the configured ChatGPT origin in connector install URLs @copyberry
- #37339 Reload app-server telemetry after account changes @copyberry
- #37340 Consolidate deferred environment provisioning APIs @copyberry
- #37341 Support content references for inline visualizations @copyberry
- #37342 Preserve foreign cwd URIs for turn-input contributors @copyberry
- #37343 Stage Bazel app-server test binaries in
TEST_TMPDIR@copyberry - #37344 Fix subagent MCP startup status settling @copyberry
- #37345 Send model routing hints to the Codex backend @copyberry
- #37347 Track context windows per agent @copyberry
- #37348 Add rollout migration tooling and background migration @copyberry
- #37349 Mount a minimal
/devin full-filesystem Bubblewrap sandboxes @copyberry - #37350 Allow
ThreadManagerto customize thread ID generation @copyberry - #37352 Configure the default code-mode exec yield timeout @copyberry
- #37354 Retry busy app-server test executable spawns @copyberry
- #37356 Support agent identity endpoint overrides @copyberry
- #37357 Clamp short wait_agent timeouts to the configured minimum @copyberry
- #37358 Add Markdown conversation export to the TUI @copyberry
- #37360 Use consistent TUI input placeholders @copyberry
- #37363 Recognize MCP tool hook configurations @copyberry
- #37366 Harden local MCP server process tree cleanup @copyberry
- #37367 Add session forking to
codex exec@copyberry - #37368 Restore approval policy when resuming threads @copyberry
- #37369 Add session archiving to the resume picker @copyberry
- #37371 Restore archived sessions from the resume picker @copyberry
- #37389 Add tool namespace metadata configuration @copyberry
- #37400 Rename the tool registry metadata setting @copyberry
- #37406 Add a loader for executor-local config layers @copyberry
- #37408 Add executor-local config reads to the exec server @copyberry
- #37424 Cap project instructions across environments @copyberry
- #37433 Expose multi-agent versions in model/list @copyberry
- #37434 Add process diagnostics snapshots @copyberry
- #37439 Add shared skill root loading interfaces @copyberry
- #37440 Load plugin skill roots through the host skills service @copyberry
- #37444 Unify plugin skill loading with the host skill service @copyberry
- #37446 Preserve base instruction provenance across sessions @copyberry
- #37447 Respect plugin skill availability in tool suggestions @copyberry
- #37452 Unify plugin skill loading through the shared loader @copyberry
- #37457 Remove the legacy core skill loader @copyberry
- #37461 Remove the unused remote skills client @copyberry
- #37466 Move skill config rule resolution into
codex-config@copyberry - #37470 Expose app-server diagnostics through the experimental API @copyberry
- #37477 Include call IDs in MCP requests and clarify metadata config @copyberry
- #37478 Shard state unit tests under Bazel @copyberry
- #37479 Report temporary directories in exec-server environment info @copyberry
- #37480 Delegate remote process sandboxing to the executor @copyberry
- #37483 Interrupt active code-mode cells with their turn @copyberry
- #37485 Keep response streams alive through connection failures @copyberry
- #37486 Expose runtime activity in server diagnostics @copyberry
- #37488 Generalize skill locator aliases across providers @copyberry
- #37489 Alias resource-backed skill locators under context pressure @copyberry
- #37492 Include tool namespace inventory in turn metadata @copyberry
- #37494 Add MCP event discovery and subscriptions @copyberry
- #37497 Limit payload traces in diagnostic logs @copyberry
- #37498 Preserve child waiters during process termination @copyberry
- #37500 Remove the legacy code-mode tool metadata inventory @copyberry
- #37503 Move host skill prompt injection into the skills extension @copyberry
- #37504 Disable Nagle's algorithm for code-mode WebSockets @copyberry
- #37505 Remove the codex-core-skills crate @copyberry
- #37507 Include sandbox mode in response metadata @copyberry
- #37510 Define the code-mode host gRPC protocol @copyberry
- #37511 Enforce automatic review for managed models @copyberry
- #37513 Reuse parent compactions in Guardian review sessions @copyberry
- #37516 Ignore reusable command approvals for cyber models @copyberry
- #37519 Expose auto-review ignore rules in config requirements @copyberry
- #37527 Terminate timed-out hook process trees @copyberry
- #37528 Keep external agent detection from blocking config requests @copyberry
- #37530 Implement the gRPC code-mode host service @copyberry
- #37533 Support asynchronous command hooks @copyberry
- #37538 Expose execution mode in hook listings @copyberry
- #37607 Prevent launch context from reaching child processes @copyberry
- #37610 Add workload identity token exchange support @copyberry
- #37618 Use step environments for Guardian approval reviews @copyberry
- #37622 Include buffered turns when editing prompts @copyberry
- #37641 Use the step context for command approval prefix rules @copyberry
- #37644 Generalize hook handler execution @copyberry
- #37645 Improve plugin install failure analytics @copyberry
- #37654 Advertise environment config read support @copyberry
- #37709 Keep wrapped composer whitespace with following text @copyberry
- #37723 Report I/O subtypes for session config import failures @copyberry
- #37745 Add gRPC TCP transport to the code-mode host @copyberry
- #37747 Bound Cursor project path resolution @copyberry
- #37757 Add a line-ending preservation mode to
apply_patch@copyberry - #37758 Add a feature flag to preserve apply_patch line endings @copyberry
- #37773 Forward install attempt IDs for remote plugins @copyberry
- #37788 Use native transparency in the imagegen skill @copyberry
- #37806 Initialize the install attempt ID in the plugin analytics test @copyberry
- #37807 Share model-visible tool specs across prompts @copyberry
- #37808 Simplify package-based skill reads @copyberry
- #37810 Support packaged defaults in config layering @copyberry
- #37812 Keep multi-workspace skill listings consistent @copyberry
- #37828 Track running unified exec processes at turn completion @copyberry
- #37832 Remove obsolete plugin skill discovery helpers @copyberry
- #37833 Encapsulate watchable skill root selection @copyberry
- #37836 Run plugin and skill tests on Windows @copyberry
- #37838 Tighten the skills extension API surface @copyberry
- #37842 Speed up MCP OAuth credential reads @copyberry
- #37843 Use the shared environment scrubber in git-utils @copyberry
- #37847 Preserve environments when reloading V2 agents @copyberry
- #37848 Expose the session ID to shell commands @copyberry
- #37850 Expose plugin ownership in MCP server status @copyberry
- #37851 Route intercepted exec approvals through shared review @copyberry
- #37860 Speed up MCP OAuth credential reads @copyberry
- #37862 Rename environment config for turn scope @copyberry
- #37864 Support MCP form input in full-access user threads @copyberry
- #37866 Add MCP OAuth credential contention regression tests @copyberry
- #37867 Reject duplicate resolved paths in apply_patch @copyberry
- #37871 Extract persisted history types into a dedicated crate @copyberry
- #37874 Keep runtime summary metrics out of Statsig exports @copyberry
- #37875 Honor the configured Windows sandbox level for managed networking @copyberry
- #37878 Add configurable goal token budget limits @copyberry
- #37882 Read safety buffering from response metadata @copyberry
- #37886 Extend bundled package discovery and expose its version @copyberry
- #37889 Ignore Unix socket proxy settings on Windows @copyberry
- #37891 Use thread configuration for
app/read@copyberry - #37892 Validate images before returning
view_imageoutput @copyberry - #37895 Add configurable Responses API request metadata @copyberry
- #37896 Add hermetic Windows SDK and MSVC runtime repositories @copyberry
- #37898 Add appearance metadata to thread sections @copyberry
- #37901 Make submission operations move-only @copyberry
- #37902 Defer
view_imageprocessing to history insertion @copyberry - #37906 Make gRPC code-mode notifications fire-and-forget @copyberry
- #37908 Apply refreshed cloud config bundles to later sessions @copyberry
- #37922 Extract reusable code-mode host test support @copyberry
- #37926 Distinguish turn-start thread persistence @copyberry
- #37929 Add shared runtime build information @copyberry
- #37939 Validate images before returning
view_imageoutput @copyberry - #37970 Cache tool catalogs for streamable HTTP MCP servers @copyberry
- #37979 Honor per-directory bundled skill settings in
skills/list@copyberry - #37984 Stop re-exporting skill APIs from
codex-core@copyberry - #38011 Remove config lockfile support @copyberry
- #38020 Retry transient exec-server startup failures @copyberry
- #38024 Expose image generation usage-limit failures @copyberry
- #38026 Fail closed on unsafe Linux unreadable globs @copyberry
- #38032 Hide approved Guardian assessments from TUI history @copyberry
- #38033 Use session metadata to validate thread history paths @copyberry
- #38034 Filter live rollout items in place @copyberry
- #38035 Propagate MCP elicitation event delivery failures @copyberry
- #38036 Limit TUI streaming traces in SQLite logs @copyberry
- #38040 Propagate custom CA settings to local MCP servers @copyberry
- #38041 Add gRPC-backed code-mode sessions @copyberry
- #38043 Sandbox remote apply_patch operations @copyberry
- #38044 Compact code mode tool calls in TUI history @copyberry
- #38045 Store model history in response item envelopes @copyberry
- #38046 Include auto-review state in turn metadata @copyberry
- #38047 Add turn-aware response item injection @copyberry
- #38049 Harden network proxy credential brokerage @copyberry
- #38051 Run required CI against pull request merge commits @copyberry
- #38052 Add per-login MCP OAuth client registration selection @copyberry
- #38054 Add configuration-backed external authentication @copyberry
- #38056 Configure PSP routing through the feature system @copyberry
- #38057 Track artifact operations from trusted plugin markers @copyberry
- #38058 Preserve harness metadata across conversation history @copyberry
- #38060 Disable storage for Azure Responses requests @copyberry
- #38061 Preserve proxy settings for Windows sandbox debug sessions @copyberry
- #38064 Grant Windows sandbox access to the Codex app root @copyberry
- #38066 Track resource-backed skill invocations @copyberry
- #38067 Scope environment readiness config to thread attachments @copyberry
- #38072 Forward gRPC code-mode callbacks to session delegates @copyberry
- #38074 Track implicit executor skill invocations @copyberry
- #38075 Respect rendered width when adding TUI history @copyberry
- #38078 Reduce cloning in world-state patch handling @copyberry
- #38080 Allow nested Git repositories in the Windows sandbox @copyberry
- #38081 Use
ReviewDecisionfor MCP tool approvals @copyberry - #38083 Remove standard form input from app-server docs @copyberry
- #38084 Allow empty input to start a turn @copyberry
- #38086 Support execution-host context when resolving cloud config @copyberry
- #38087 Route gRPC code-mode sessions through the shared HTTP client @copyberry
- #38089 Add CIMD support to MCP OAuth registration @copyberry
- #38092 Simplify queued user message admission @copyberry
- #38094 Test Guardian context for code mode commands @copyberry
- #38101 Attach hosted app context to file uploads @copyberry
- #38103 Avoid cloning MCP invocations in TUI history @copyberry
- #38108 Route MCP tool calls through shared approval handling @copyberry
- #38127 Distinguish rollout IDs from thread IDs @copyberry
- #38165 Resolve subagent analytics connections lazily @copyberry
- #38167 Read executor skill packages directly @copyberry
- #38170 Notify running turn watchers only on count changes @copyberry
- #38172 Update
lruandwebbrowserdependencies @copyberry - #38179 Embed defaults in the packaged config layer @copyberry
- #38183 Add conservative restriction helpers for tool policies @copyberry
- #38184 Run search tool integration tests on Windows @copyberry
- #38186 Stop overriding environments in the skills user-turn test @copyberry
- #38188 Integrate workload identity with Codex authentication @copyberry
- #38189 Run plugin app-server tests in automatic environments @copyberry
- #38197 Add an LRU baseline to skill shadow selection @copyberry
- #38204 Fuse recent and lexical skills in shadow selection @copyberry
- #38205 Enforce non-interactive approval policy for Codex delegates @copyberry
- #38214 Avoid allocations when sanitizing TUI user text @copyberry
- #38217 Start required cached MCP servers lazily for subagents @copyberry
- #38227 Add a flag to retain client developer messages @copyberry
- #38228 Detect implicit skill invocations from PowerShell reads @copyberry
- #38232 Track root turns across delegated Codex requests @copyberry
- #38238 Add manifest-defined metrics for trusted plugin scripts @copyberry
- #38239 Add bounded plugin measurement analytics @copyberry
- #38241 Include Node REPL policy in turn metadata @copyberry
- #38242 Cache stable active-cell layout measurements @copyberry
- #38243 Track client-authored developer messages in rollout history @copyberry
- #38244 Resolve paginated thread history by rollout ID @copyberry
- #38245 Add dynamic HTTP header helpers for MCP servers @copyberry
- #38251 Read model ETags from WebSocket metadata events @copyberry
- #38252 Collect metrics from plugin shell commands @copyberry
- #38253 Collect plugin metrics from unified exec commands @copyberry
- #38256 Report the latest rejection from multiple network reviews @copyberry
- #38257 Reconnect gRPC code-mode sessions after host restarts @copyberry
- #38258 Unify external authentication provider handling @copyberry
- #38261 Resolve skill package aliases in
skills.read@copyberry - #38265 Use bounded fallback ports for Windows managed proxies @copyberry
- #38268 Expose executor skill roots from
skills.read@copyberry - #38270 Add per-thread usage queries to the backend client @copyberry
- #38272 Stamp conversation history items with creation times @copyberry
- #38274 Represent persisted world state as JSON objects @copyberry
- #38275 Unify turn input submission and routing @copyberry
- #38276 Track plugin metrics for background unified exec commands @copyberry
- #38278 Add app-server coverage for plugin measurement analytics @copyberry
- #38280 Use protobuf's built-in Bazel proto rule @copyberry
- #38281 Show estimated thread usage in
/status@copyberry - #38282 Add thread usage to TUI status surfaces @copyberry
- #38283 Collect plugin metrics from remote executors @copyberry
- #38285 Move
codex-execpolicyto protocol dev dependencies @copyberry - #38288 Support gRPC code-mode hosts in app server @copyberry
- #38291 Remove unused apply_patch prompt fallback @copyberry
- #38292 Add durable reverts for paginated threads @copyberry
- #38299 Route network access through the shared approval pipeline @copyberry
- #38303 Add interrupted turn recovery @copyberry
- #38306 Protect inline visualization viewers from sandbox writes @copyberry
- #38321 Make gRPC code-mode yield tests deterministic @copyberry
- #38336 Add Guardian V2 extension scaffold @copyberry
- #38356 Support sandboxed file streaming in exec-server @copyberry
- #38358 Optimize orphan output normalization @copyberry
- #38361 Test hook rejection for explicitly started queue items @copyberry
- #38362 Stabilize exec-server byte-budget tests @copyberry
- #38363 Persist security risk scores in rollout history @copyberry
- #38368 Add the Guardian V2 Luna sampler @copyberry
- #38377 Constrain Guardian reviews to parent filesystem permissions @copyberry
- #38380 Preserve user message styling when wrapping long URLs @copyberry
- #38381 Prevent unread events from blocking in-process requests @copyberry
- #38383 Return Luna samples when streamed JSON completes @copyberry
- #38384 Refine skill creation guidance and validation @copyberry
- #38390 Use effective permissions when trusting app-server projects @copyberry
- #38394 Reject sessions with unloadable required managed hooks @copyberry
- #38396 Reap orphaned processes in Linux sandboxes @copyberry
- #38397 Include Node REPL results in Guardian reviews @copyberry
- #38399 Preserve floating-point values when decoding rollout lines @copyberry
- #38400 Refresh tracing interest in the token estimate test @copyberry
- #38403 Expose conversation history to tool lifecycle extensions @copyberry
- #38406 Pool Guardian sampling WebSocket connections @copyberry
- #38409 Classify tool calls in the Guardian V2 extension @copyberry
- #38413 Allow metadata updates without materializing threads @copyberry
- #38414 Add bounded transcript rendering for Guardian v2 @copyberry
- #38415 Recognize PowerShell
Get-Contentfile reads @copyberry - #38416 Honor filesystem permissions for app file uploads @copyberry
- #38418 Clarify MCP OAuth reauthentication errors @copyberry
- #38419 Apply Codex attribution to app-created commits @copyberry
- #38420 Recover capability discovery after executor disconnects @copyberry
- #38423 Centralize thread environment selection state @copyberry
- #38424 Fail closed when workload identity initialization fails @copyberry
- #38426 Protect workload identity auth in app-server account RPCs @copyberry
- #38427 Add Guardian guidance for Node REPL tool calls @copyberry
- #38429 Route curated plugin catalogs by authentication mode @copyberry
- #38432 Gate Node REPL Guardian guidance on model metadata @copyberry
- #38436 Add rustls fallback for local MCP HTTP requests @copyberry
- #38439 Preserve approval policies for auto-reviewed models @copyberry
- #38440 Add app-server support for reverting paginated threads @copyberry
- #38441 Give Guardian V2 full tool action context @copyberry
- #38443 Tag current time reminders in model context @copyberry
- #38445 Retain client developer messages across context compaction @copyberry
- #38446 Refresh current-time reminders for full-history subagents @copyberry
- #38447 Add running-task exit choices to local daemon sessions @copyberry
- #38448 Support per-server MCP OAuth callback ports @copyberry
- #38449 Expose model upgrade retirement times @copyberry
- #38450 Embed the Windows sandbox setup manifest in Bazel builds @copyberry
- #38452 Add structured telemetry for response retries @copyberry
- #38454 Include node_repl images in Guardian review evidence @copyberry
- #38456 Add experimental thread queue APIs to app server @copyberry
- #38460 Add an
AbsolutePathBufconversion forFileSystemPath@copyberry - #38461 Centralize turn environment selection state @copyberry
- #38463 Preserve thread subscriptions across revert reloads @copyberry
- #38467 Parse model annotations from skill frontmatter @copyberry
- #38470 Add an Amazon Bedrock Runtime provider @copyberry
- #38473 Stop generating accepted-line fingerprints @copyberry
- #38475 Add bounded skill model delegation instructions @copyberry
- #38483 Include agent names in turn metadata @copyberry
- #38484 Search selected plugin apps before falling back @copyberry
- #38492 Enforce strict auto-review for MCP tool calls @copyberry
- #38493 Reuse pending MCP startups during reconciliation @copyberry
- #38494 Verify bundled bwrap in Bazel builds @copyberry
- #38499 Enable parallel tool calls for all model prompts @copyberry
- #38521 Carry environment config in turn selections @copyberry
- #38527 Configure Guardian sampling for responses lite @copyberry
- #38540 Record Guardian V2 risk scores on threads @copyberry
- #38553 Initialize Guardian V2 samplers per thread @copyberry
- #38555 Preserve Guardian transcript boundaries in sampling input @copyberry
- #38558 Improve Guardian transcript context selection @copyberry
- #38561 Restrict filesystem helper sandbox access @copyberry
- #38564 Reuse compatible parent compactions in Guardian V2 @copyberry
- #38567 Store security risk scores as a snapshot @copyberry
- #38568 Run tool start callbacks after pre-tool hooks @copyberry
- #38569 Require automatic review for high-risk Guardian v2 actions @copyberry
- #38579 Report thread storage changes after rollout migration @copyberry
- #38580 Keep the latest Guardian risk score during concurrent sampling @copyberry
- #38581 Honor cloud-managed requirements in feature listings @copyberry
- #38586 Bound Guardian V2 tool actions before risk classification @copyberry
- #38592 Let extensions resolve approval reviews before Guardian @copyberry
- #38596 Prioritize new Guardian classifications under load @copyberry
- #38597 Install Guardian V2 in the app server @copyberry
- #38601 Make unbounded connection retries configurable @copyberry
- #38602 Isolate Guardian reviewer sessions from parent extensions @copyberry
- #38604 Avoid paginated resume requests for verified legacy rollouts @copyberry
- #38605 Fix resume transcript preview line selection @copyberry
- #38606 Allow larger gRPC code mode tool descriptions @copyberry
- #38608 Fix the missing resume picker history mode import @copyberry
- #38610 Support workload identity in remote exec-server auth @copyberry
- #38612 Skip stale Guardian risk score persistence @copyberry
- #38615 Remove the gRPC code-mode enabled tool limit @copyberry
- #38616 Route escalated approval retries through Guardian @copyberry
- #38617 Prioritize global models in the Bedrock Runtime catalog @copyberry
- #38618 Apply Guardian policies to v2 risk classification @copyberry
- #38619 Source multi-agent instructions from the model catalog @copyberry
- #38621 Preserve large gRPC code-mode tool errors @copyberry
- #38623 Preserve MCP namespace descriptions in the tool catalog cache @copyberry
- #38624 Open notes when accepting the request input Other option @copyberry
- #38625 Enable unified exec by default on Windows @copyberry
- #38628 Make Guardian v2 risk classification configurable @copyberry
- #38630 Remove the gRPC code-mode open session limit @copyberry
- #38634 Add MCP protocol discovery metrics @copyberry
- #38635 Remove repository-local Codex skills @copyberry
- #38639 Render the initial TUI session header before input @copyberry
- #38641 Harden TUI startup input handling @copyberry
- #38642 Keep the composer editable during TUI startup @copyberry
- #38643 Delay the startup composer until first-login onboarding @copyberry
- #38644 Show onboarding when Codex home lacks authentication state @copyberry
- #38645 Deliver gRPC code-mode notifications without truncation @copyberry
- #38646 Read Apple notarization issuer ID from Key Vault @copyberry
- #38647 Add an override to skip project configuration @copyberry
- #38649 Reuse the TUI startup account response during bootstrap @copyberry
- #38650 Canonicalize default namespaces in gRPC subscription filters @copyberry
- #38651 Move permission profile snapshots into the protocol @copyberry
- #38657 Skip terminal hyperlink layout when no links are present @copyberry
- #38660 Enforce managed deny-read rules in the Windows sandbox @copyberry
- #38662 Delete Thai combining marks one at a time in the composer @copyberry
- #38664 Resolve local JSON Schema refs in Code Mode types @copyberry
- #38670 Forward executor network policy decisions for auditing @copyberry
- #38673 Honor per-environment permission profiles @copyberry
- #38675 Exclude shortcut-modified input from TUI paste bursts @copyberry
- #38678 Preserve environment configuration ownership @copyberry
- #38681 Preserve HTTP fallback for delegated sessions @copyberry
- #38682 Surface misalignment policy violations as typed errors @copyberry
- #38684 Support pending environment attachment configuration @copyberry
- #38690 Propagate request trace context through exec-server relays @copyberry
- #38701 Route permission requests through shared Guardian approvals @copyberry
- #38703 Refresh hook runtimes after plugin changes @copyberry
- #38704 Normalize CRLF line endings in pasted text @copyberry
- #38705 Add MCP tool handler support to the hooks engine @copyberry
- #38743 Scope TUI app directory state to the active context @copyberry
- #38746 Remove the TUI test dependency on
codex-cli@copyberry - #38767 Forward workload identity context during token exchange @copyberry
- #38774 Use paginated history for persistent exec threads @copyberry
- #38785 Keep active-turn model settings stable across updates @copyberry
- #38788 Show resume and fork status during TUI startup @copyberry
- #38795 Add storage diagnostics to
codex doctor@copyberry - #38800 Route executor policy audits through log-only telemetry @copyberry
- #38806 Add a health endpoint to the code-mode gRPC listener @copyberry
- Export complete TUI conversations to Markdown with
-
Public plugin catalog CSV export
Eligible ChatGPT Enterprise workspace owners and admins can download a CSV of the public plugins visible to their workspace. The export includes plugin, app, and Chat skill names and descriptions, along with developer, version, date added in UTC, and OpenAI verification metadata.
Open Admin > Plugins, select Public, and then select the download icon (Export CSV). The export uses a public-catalog snapshot that can be up to 48 hours old and does not include plugins created for the workspace. It isn’t available in FedRAMP workspaces.
Learn more about plugin controls.
-
Codex app 26.814
Performance improvements and bug fixes
- Kept sidebar projects in their saved order as chat activity changes.
-
Computer History 26.810
Computer History is an opt-in feature in the ChatGPT desktop app on macOS that turns activity across apps and websites into memories and a timeline that ChatGPT and Codex can use. Choose which apps and websites contribute, pause collection, and review or delete your history at any time.
Computer History is available to ChatGPT Pro, Business, and Enterprise users. Business and Enterprise administrators must enable access before workspace members can turn it on. Initial availability excludes the European Economic Area (EEA), Switzerland, and the United Kingdom.
Performance improvements and bug fixes
- Preserved undo and redo history in the Markdown editor when switching chats.
- Prevented duplicate pull request comments while comments are refreshing.
-
Linux desktop preview and agent imports
Install the ChatGPT desktop app on Linux
The ChatGPT desktop app for Linux is available in preview for supported Ubuntu, Debian, and Fedora desktop distributions on x64 and ARM64 processors. Download the
.debor.rpmpackage for your distribution, then sign in to work with projects, local files, and Codex.Import setup and recent work from other agents
The desktop app supports Claude Code, Claude Cowork, and Cursor. Import instructions, settings, skills, plugins, projects, and recent work, then turn on automatic updates in Settings > Import to keep imported work in sync.
Codex CLI can also import supported setup and recent chats from Claude Code and Cursor with
/import. -
Introducing Daybreak Blue and Daybreak Red
Daybreak now offers two access tiers for approved defenders: Daybreak Blue and Daybreak Red. Use them to move from security findings to validated fixes in explicitly authorized engagements.
Start with Daybreak Blue for most defensive security work. It provides access to general-purpose models such as GPT-5.6 Sol for vulnerability discovery, secure code review, detection engineering, incident response, malware analysis, and patch validation.
Daybreak Red provides separately approved access to purpose-trained models such as GPT-5.6 Cyber for authorized vulnerability reproduction, exploit validation, penetration testing, red teaming, and complex system analysis.
Access requires approval through Trusted Access for Cyber and applies only to the approved identity, workspace or API organization and project, model, and product surface. Daybreak Red requires separate approval and provisioning; Daybreak Blue access doesn’t grant access to Daybreak Red.
Work in an isolated environment, define your engagement scope, use least-privilege permission profiles, and configure Auto-review for eligible actions before they cross the sandbox boundary.
Learn more about Cyber Safety, Codex credit rates, and API token prices.
-
ChatGPT for iOS 1.2026.209
Improvements and bug fixes
- Improved task reconnection with visible progress while keeping existing tasks usable during connection checks.
- New tasks now preserve their first prompt and attachments while starting, preventing empty tasks that could not be reopened.
- Improved editing performance for long prompts.
- Voice conversations now follow your Background Conversations setting.
- Approvals and user-input requests now recover reliably after reconnecting, with cleaner approval details in the transcript.
- Fixed follow-up
/goalprompts after completing a goal. - Fixed task-list freezes, disappearing task titles, flashing thinking summaries, and transcript crashes.
-
Codex CLI 0.147.0
$ npm install -g @openai/codex@0.147.0View details
New Features
- Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
- Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
- Enable automatically reviewed approvals with the new
--approve-for-meCLI flag. (#36373) - Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
- Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)
- Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)
Bug Fixes
- Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)
- Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)
- Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (#35960, #35962, #37166)
- Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (#35655, #35851, #37129)
- Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (#36960, #37132)
- Harden plugin isolation and deny network access when policy updates fail. (#37027, #36967, #36037)
Documentation
- Improve the bundled OpenAI documentation skill with targeted official-source lookup and clearer guidance for Codex, model selection, and API workflows. (#36014)
Chores
- Upgrade the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0. (#36001, #35959, #35831)
- Secure macOS release notarization using Azure Key Vault instead of exporting private signing keys. (#37154)
- Remove the deprecated
codex exec --full-autoflag; use--sandbox workspace-writeinstead. (#36054) - Stop publishing redundant Linux bundle archives; use the standard
codex-package-<target>release archives. (#36342)
Changelog
Full Changelog: rust-v0.146.0...rust-v0.147.0
- #35590 Expose cached MCP tools before server startup @copyberry
- #35594 Recommend longer waits in the v2 wait_agent schema @copyberry
- #35595 Allow alpha hotfix versions in R2 releases @copyberry
- #35597 Add metrics for extension-rendered skill catalogs @copyberry
- #35607 Record metrics for empty skill catalogs @copyberry
- #35608 Support model-owned token budget defaults @copyberry
- #35621 Skip restored token usage replay for exec resumes @copyberry
- #35623 Parse Claude and Cursor session records separately @copyberry
- #35642 Make OpenTelemetry provider shutdown idempotent @copyberry
- #35644 Preserve thread metadata when rollout files are missing @copyberry
- #35649 Preserve TUI input when terminal focus returns @copyberry
- #35652 Enable network policy callbacks for remote exec @copyberry
- #35653 Test developer instruction inheritance for multi-agent workers @copyberry
- #35655 Terminate Windows non-TTY processes on interrupt @copyberry
- #35656 Preserve multi-agent settings across config representations @copyberry
- #35661 Place host skills before permission instructions @copyberry
- #35663 Evaluate character matching over skill routing metadata @copyberry
- #35665 Fix the async watcher test harness on Windows @copyberry
- #35668 Expose the network proxy spec constructor @copyberry
- #35670 Raise the Windows exec yield floor to 10 seconds @copyberry
- #35671 Route curated plugins by authentication mode @copyberry
- #35675 Prepare MCP and plugin recommendations concurrently @copyberry
- #35678 Preserve paginated thread metadata across resumes @copyberry
- #35685 Load cloud-managed profiles for
codex sandbox@copyberry - #35688 Point crossterm patch to the OpenAI OSS fork @copyberry
- #35689 Preserve item timestamps in thread history projections @copyberry
- #35691 Include empty-preview threads in relationship listings @copyberry
- #35693 Refresh the subagent picker in the background @copyberry
- #35695 Honor the configured SQLite home in the logs client @copyberry
- #35708 Add configurable developer instructions for v2 subagents @copyberry
- #35715 Support streaming bodies in route-aware HTTP requests @copyberry
- #35717 Reuse route-aware clients for OpenAI file uploads @copyberry
- #35720 Upgrade rmcp to 3.0.0-beta.3 @copyberry
- #35721 Honor disabled code mode fallback without a process host @copyberry
- #35722 Add persisted sections for organizing threads @copyberry
- #35724 Add MCP 2026-07-28 discovery support @copyberry
- #35725 Complete MCP 2026 client support @copyberry
- #35738 Add bounded metadata for executed tool calls @copyberry
- #35742 Avoid blocking turns on optional MCP startup @copyberry
- #35744 Keep agent registry identities consistent @copyberry
- #35766 Emit host skill budget warnings from world state @copyberry
- #35769 Share the skills budget across host and executor catalogs @copyberry
- #35772 Throttle models cache TTL renewals @copyberry
- #35773 Scale skill metadata budgets with context windows @copyberry
- #35777 Resolve MCP tool catalogs concurrently @copyberry
- #35779 Load thread titles concurrently during session startup @copyberry
- #35785 Support self-serve Business ProLite accounts @copyberry
- #35787 Gate paginated thread history on the state database @copyberry
- #35794 Wait for MCP readiness in the curated sync test @copyberry
- #35802 Tag reports with the selected turn's model and effort @copyberry
- #35806 Route MCP OAuth through configured HTTP clients @copyberry
- #35814 Use configured HTTP clients for all MCP OAuth requests @copyberry
- #35818 Advance latest-alpha-cli after release publishing completes @copyberry
- #35821 Use the shared HTTP client for TUI network checks @copyberry
- #35825 Use the shared HTTP client for announcement tips @copyberry
- #35828 Enforce centralized SQLite connection creation @copyberry
- #35830 Route WebRTC sideband joins to the Realtime API @copyberry
- #35831 Update rusty_v8 to 150.4.0 @copyberry
- #35835 Track parent turns for nested Codex requests @copyberry
- #35836 Clean up cancelled MCP elicitation requests @copyberry
- #35837 Expose plugin eligibility metadata in app-server summaries @copyberry
- #35839 Decouple recommended plugins from tool suggestions @copyberry
- #35840 Handle legacy MCP discovery prevalidation errors @copyberry
- #35843 Tie remote exec servers to their parent stdin @copyberry
- #35845 Support plaintext collaboration tool messages @copyberry
- #35850 Preserve foreign paths in background terminal listings @copyberry
- #35851 Normalize Windows namespace paths in path URIs @copyberry
- #35854 Box app-server event payloads @copyberry
- #35856 Resolve imported connectors by MCP server name @copyberry
- #35857 Add Bazel unit test targets for Rust binaries @copyberry
- #35859 Expose plugin installation timestamps in app-server summaries @copyberry
- #35870 Include session titles in external agent import history @copyberry
- #35874 Mark the primary environment in model context @copyberry
- #35875 Allow environment readiness updates in place @copyberry
- #35878 Use step environments for MCP file uploads @copyberry
- #35886 Show blocked goals as stalled in the TUI @copyberry
- #35887 Clean up side conversations in the background @copyberry
- #35895 Inherit ready step environments when spawning agents @copyberry
- #35937 Let unrelated tools run while MCP servers start @copyberry
- #35941 Bound MCP namespace descriptions @copyberry
- #35942 Update tests for current tool call and app-server event types @copyberry
- #35944 Report direct input capability for listed subagents @copyberry
- #35957 Fix TUI input queue handling during MCP startup @copyberry
- #35959 Upgrade Ratatui to 0.30.2 @copyberry
- #35960 Preserve hyperlink cell widths during terminal diffing @copyberry
- #35962 Fix TUI layout for halfwidth Japanese sound marks @copyberry
- #35982 Avoid cloning rollout history when truncating forks @copyberry
- #35989 Display title-only reasoning summaries in the TUI @copyberry
- #35990 Test exec-server compatibility across Codex versions @copyberry
- #35992 Group external agent config migration into a module @copyberry
- #35997 Remove obsolete rusty_v8 146.4.0 Bazel targets @copyberry
- #36001 Upgrade rmcp to 3.0.0 @copyberry
- #36002 Resolve MCP file uploads with environment-native paths @copyberry
- #36006 Reduce response serialization and rollout scan overhead @copyberry
- #36007 Add persisted manual ordering for thread sections @copyberry
- #36008 Route pet asset downloads through the shared HTTP client @copyberry
- #36011 Share optional MCP startup grace across connection sets @copyberry
- #36014 Refine OpenAI docs skill source routing @copyberry
- #36020 Avoid cloning ignored analytics notifications @copyberry
- #36030 Increase the app-server tracing test stack size @copyberry
- #36031 Load cloud-managed servers in MCP CLI commands @copyberry
- #36033 Use the shared HTTP client in codex-protocol @copyberry
- #36035 Exit the stdio app-server when its connection closes @copyberry
- #36036 Allow naming forked chats from the TUI @copyberry
- #36037 Deny network access when an allow amendment fails @copyberry
- #36039 Limit MCP catalog pagination @copyberry
- #36043 Document the Responses API proxy reqwest exception @copyberry
- #36045 Distinguish unknown MCP authentication status @copyberry
- #36047 Extract MCP environment headers into a local variable @copyberry
- #36049 Keep tool-call metrics out of Statsig exports @copyberry
- #36051 Avoid overwriting symlinked migration targets @copyberry
- #36054 Remove legacy
--full-autohandling fromcodex exec@copyberry - #36055 Expose MCP read-only hints in tool call items @copyberry
- #36076 Remove codex-core's direct reqwest dependency @copyberry
- #36078 Route Ollama through the shared HTTP client @copyberry
- #36083 Handle fractional rate limits in thread history projection @copyberry
- #36092 Correlate image requests and explicit interrupts with turns @copyberry
- #36119 Unify tool runtime assembly before router construction @copyberry
- #36120 Delegate readiness waits to tool runtimes @copyberry
- #36121 Sandbox executor skill resource reads @copyberry
- #36124 Respect filesystem permissions during capability discovery @copyberry
- #36127 Centralize tool registration and protect host tools @copyberry
- #36128 Preserve delegated tasks across remote compaction @copyberry
- #36129 Resolve normalized tool name collisions in code mode @copyberry
- #36133 Preserve executor workspace permissions for apply_patch @copyberry
- #36138 Isolate apply-patch permission test variants @copyberry
- #36139 Bound the code mode output termination test @copyberry
- #36140 Wait for memory consolidation shutdown before finishing jobs @copyberry
- #36146 Stabilize approval scenario tests @copyberry
- #36148 Harden the file change approval integration test @copyberry
- #36149 Strengthen session file change approval coverage @copyberry
- #36165 Stabilize file approval replay test @copyberry
- #36166 Make pending realtime sideband test deterministic @copyberry
- #36167 Harden the auto-review model override test @copyberry
- #36168 Make tool telemetry tag collection synchronous @copyberry
- #36171 Test workspace-root patch protection for metadata @copyberry
- #36177 Test remote Guardian network approval scoping @copyberry
- #36181 Record attempted tool calls in response metadata @copyberry
- #36183 Use permission profiles throughout sandbox execution @copyberry
- #36184 Coalesce concurrent remote metadata requests @copyberry
- #36187 Refresh environment dates from the configured clock @copyberry
- #36188 Make thread history projection resilient to malformed rollouts @copyberry
- #36191 Label explicit skill injection metrics @copyberry
- #36194 Avoid shifting bytes in streaming output buffers @copyberry
- #36207 Record normalized sandbox violation events @copyberry
- #36212 Precompute app-server protocol exports @copyberry
- #36217 Run code mode exclusively through the standalone host @copyberry
- #36218 Expose connector candidates in external agent detection @copyberry
- #36221 Ignore passthrough metadata when reconciling rollout items @copyberry
- #36223 Preserve executor paths in read command actions @copyberry
- #36228 Support Enterprise automation account plans @copyberry
- #36237 Ignore symbolic slash-tmp permissions on Windows @copyberry
- #36239 Refresh precomputed app-server protocol exports @copyberry
- #36264 Prefer the bundled resource for the code mode host @copyberry
- #36271 Derive report prompt hashes from persisted rollouts @copyberry
- #36306 Restrict hosted MCP credentials to local environments @copyberry
- #36309 Use the host skill provider catalog in world state @copyberry
- #36310 Isolate MCP OAuth credentials by environment @copyberry
- #36311 Include skills in debug prompt input output @copyberry
- #36327 Preserve discovery order for host skill path aliases @copyberry
- #36329 Restrict
shell_commandto a single local environment @copyberry - #36336 Detect connectors used in external agent sessions @copyberry
- #36339 Enable skills in the MCP server @copyberry
- #36342 Stop publishing legacy Linux bundle archives @copyberry
- #36350 Require explicit sandbox permissions with shell justifications @copyberry
- #36351 Use model catalog collaboration mode messages @copyberry
- #36354 Pass sessions directly to session tasks @copyberry
- #36355 Keep MCP tool calls bound to their thread @copyberry
- #36356 Sync updates to imported external agent sessions @copyberry
- #36357 Use the step-scoped router for tool execution @copyberry
- #36359 Consolidate MCP config editing in codex-core @copyberry
- #36360 Use MCP bindings as the step tool catalog @copyberry
- #36361 Migrate Cursor-managed skills into Codex @copyberry
- #36364 Move skill catalog rendering out of core @copyberry
- #36365 Add strict automatic review for MCP elicitations @copyberry
- #36367 Keep effective tool exposure in the registry @copyberry
- #36372 Run native Windows Bazel tests with MSVC @copyberry
- #36373 Add an
--approve-for-meCLI flag @copyberry - #36374 Enable sandboxed V8 for code mode @copyberry
- #36378 Load local session pickers from the state DB first @copyberry
- #36380 Add thread section management APIs @copyberry
- #36384 Load turn summaries with paginated queries @copyberry
- #36385 Add acknowledged user message submission to core @copyberry
- #36388 Track image preparation details in turn analytics @copyberry
- #36389 Enforce single-writer ownership for all thread histories @copyberry
- #36393 Avoid redundant filesystem probes @copyberry
- #36402 Declare the experimental plugin search API @copyberry
- #36408 Allow custom Codex instructions for realtime transitions @copyberry
- #36409 Implement remote plugin search @copyberry
- #36410 Make user input blocking behavior explicit @copyberry
- #36411 Use Git repositories as pre-tool hook test markers @copyberry
- #36413 Add a realtime delegation acknowledgement control @copyberry
- #36440 Extract exec-server request dispatching @copyberry
- #36482 Avoid querying terminal size on every TUI redraw @copyberry
- #36485 Increase remote plugin bundle size limits @copyberry
- #36507 Retain attempted tool metadata across prompts @copyberry
- #36511 Support two-stroke TUI key chords @copyberry
- #36534 Raise the MCP catalog item limit to 2,048 @copyberry
- #36544 Support portable Agent Plugins throughout installation @copyberry
- #36632 Preserve SQLite thread metadata during goal mutations @copyberry
- #36635 Expose onboarding hints in login completion notifications @copyberry
- #36641 Capture rollout budget units from response usage @copyberry
- #36715 Use provider-reported rollout budget units @copyberry
- #36716 Deduplicate MCP resource operation handling @copyberry
- #36727 Simplify turn metadata state ownership @copyberry
- #36729 Correlate code mode tool analytics with model responses @copyberry
- #36732 Stabilize the cloud environment HTTP test @copyberry
- #36734 Deduplicate MCP resource list handling @copyberry
- #36740 Store turn skill state in extension data @copyberry
- #36742 Simplify contextual user fragment registration @copyberry
- #36744 Store the extension registry directly in its builder @copyberry
- #36745 Consolidate apply_patch runtime execution @copyberry
- #36757 Wait for patch events before reading shell snapshots @copyberry
- #36759 Harden the TUI focus palette regression test @copyberry
- #36764 Avoid building code-mode definitions during registration @copyberry
- #36769 Stabilize the startup Git enrichment integration test @copyberry
- #36770 Stabilize deferred goal fork testing @copyberry
- #36771 Harden Linux managed proxy helper lifecycles @copyberry
- #36772 Raise the host-owned Codex Apps catalog limit @copyberry
- #36773 Derive the active user config layer from the layer stack @copyberry
- #36774 Clarify config layer iteration APIs @copyberry
- #36779 Stabilize network policy event capture in concurrent tests @copyberry
- #36781 Add per-surface MCP tool exposure controls @copyberry
- #36782 Add Guardian session reuse and interruption tests @copyberry
- #36787 Consolidate model instructions in
ModelMessages@copyberry - #36792 Gate plugin usage instructions by model capability @copyberry
- #36793 Terminate timed-out Git process trees @copyberry
- #36796 Add Agent Plugins MCP config parsing @copyberry
- #36797 Normalize rusty_v8 checksum manifest line endings @copyberry
- #36800 Avoid reinjecting permissions after command approvals @copyberry
- #36807 Extract audio preparation into a utility crate @copyberry
- #36808 Prefer SQLite names for local session archive commands @copyberry
- #36809 Prefer the state database for
exec resume --last@copyberry - #36810 Add MCP client conformance regression gates @copyberry
- #36811 Honor per-environment login shell policy @copyberry
- #36812 Add a dual-WebSocket transport for code mode @copyberry
- #36815 Identify agents by name in token budget context @copyberry
- #36822 Fix typo in approval resolver name @copyberry
- #36825 Consolidate approval telemetry context @copyberry
- #36830 Time out stalled code-mode host requests @copyberry
- #36834 Avoid requesting key-release events in Ghostty @copyberry
- #36840 Keep API request metrics out of Statsig exports @copyberry
- #36856 Support deferred loading for freeform tools @copyberry
- #36857 Support custom tools in namespaces @copyberry
- #36862 Consolidate thread spawning behind a request object @copyberry
- #36871 Parallelize R2 asset publishing with DotSlash @copyberry
- #36877 Move executor skill bundle loading into the skills extension @copyberry
- #36880 Move direct executor skill discovery into the skills extension @copyberry
- #36882 Preserve complete MCP namespace descriptions @copyberry
- #36884 Add host skill root loading @copyberry
- #36892 Support leaf models in multi-agent v2 @copyberry
- #36893 Redact secrets from app-server command execution items @copyberry
- #36895 Handle late MCP startup results after lag timeout @copyberry
- #36898 Avoid redundant filesystem metadata probes @copyberry
- #36900 Register app tools independently of the connector list @copyberry
- #36901 Propagate updated permissions to review threads @copyberry
- #36903 Load skill interface metadata in the host loader @copyberry
- #36904 Limit RMCP logs persisted to SQLite @copyberry
- #36906 Preserve model providers when reloading v2 agents @copyberry
- #36908 Improve bearer token secret redaction @copyberry
- #36910 Negotiate MCP extensions per app-server session @copyberry
- #36912 Read approval policy from the current turn configuration @copyberry
- #36913 Move skill policy resolution into
codex-skills@copyberry - #36916 Centralize app enabled-state evaluation @copyberry
- #36917 Test explicit plugin mentions with disabled apps @copyberry
- #36919 Merge local plugins into plugin search results @copyberry
- #36921 Move the host skills service into the skills extension @copyberry
- #36924 Reject implicitly discovered bare Git repositories @copyberry
- #36930 Read turn permissions from the current configuration @copyberry
- #36935 Trust undecided local projects automatically @copyberry
- #36938 Enable cached web search for Amazon Bedrock @copyberry
- #36939 Include policy approval reasons in Guardian reviews @copyberry
- #36941 Use current session settings for review threads @copyberry
- #36943 Move host skill root resolution into the skills extension @copyberry
- #36945 Grant the blob size policy job read access to contents @copyberry
- #36947 Accept user input when starting idle turns @copyberry
- #36948 Paginate transcript history in the TUI @copyberry
- #36949 Improve paginated TUI history loading @copyberry
- #36950 Paginate TUI transcript history @copyberry
- #36951 Harden paginated history handling in the TUI @copyberry
- #36952 Add durable per-thread user submission queues @copyberry
- #36954 Add tool registry collision policy configuration @copyberry
- #36956 Keep image resize notices attached during remote compaction @copyberry
- #36959 Track connectors detected in external agent sessions @copyberry
- #36960 Prompt before trusting local project directories @copyberry
- #36963 Link Codex attribution in pull request bodies @copyberry
- #36964 Preserve working directories when importing external sessions @copyberry
- #36966 Allow disabling the built-in image viewer @copyberry
- #36967 Skip symlinks when installing plugins @copyberry
- #36970 Make token budget context identity configurable @copyberry
- #36976 Honor explicit-only orchestrator skills @copyberry
- #36977 Improve connector detection for migrated sessions @copyberry
- #36979 Add Fence auditing to the blob size workflow @copyberry
- #36981 Enable remote compaction for Amazon Bedrock @copyberry
- #36983 Preserve ChatGPT auth for trusted staging MCP servers @copyberry
- #36984 Support configured ChatGPT cookies in HTTP clients @copyberry
- #36986 Add process-scoped PSP routing for ChatGPT requests @copyberry
- #36987 Add opt-in concurrent exec-server request dispatch @copyberry
- #36989 Preserve shared bundled skill caches @copyberry
- #36990 Remove legacy collaboration mode variants @copyberry
- #36992 Allow injecting model catalog caches @copyberry
- #36993 Support
includeTurnsreads for paginated threads @copyberry - #36998 Support deferred custom tools in tool search @copyberry
- #37000 Keep shared skill caches fresh across plugin loads @copyberry
- #37020 Enforce strict tool name collision errors @copyberry
- #37022 Canonicalize default tools under the
functionsnamespace @copyberry - #37027 Enforce Agent Plugin runtime boundaries @copyberry
- #37031 Apply permission profile updates to future turn environments @copyberry
- #37035 Align registry tests with canonical tool names @copyberry
- #37038 Use turn environment permissions for tool execution @copyberry
- #37040 Use turn environment permissions for context and discovery @copyberry
- #37053 Reject conflicting namespace descriptions in strict tool mode @copyberry
- #37055 Add safer TUI defaults for cyber models @copyberry
- #37066 Preserve longer MCP source descriptions in tool search @copyberry
- #37068 Fall back to per-process MCP cleanup on macOS @copyberry
- #37083 Consolidate unified exec output state @copyberry
- #37101 Reuse stable MCP bindings across sampling steps @copyberry
- #37103 Use Luna for API-key Guardian reviews @copyberry
- #37109 Bound interactive telemetry shutdown @copyberry
- #37114 Add per-session code-mode execution limits @copyberry
- #37128 Centralize tool approval handling in
Session@copyberry - #37129 Make Windows path URI comparisons ASCII-case-insensitive @copyberry
- #37132 Enforce managed authentication requirements locally @copyberry
- #37134 Report prompt image resizing to the model @copyberry
- #37144 Preserve discovery paths for symlinked skills @copyberry
- #37145 Gate Apps usage instructions by model capability @copyberry
- #37147 Track provisioned environment state across registration @copyberry
- #37149 Project orchestrator skills through world state @copyberry
- #37151 Coalesce concurrent Git status scans @copyberry
- #37154 Use Azure Key Vault for macOS notarization @copyberry
- #37156 Test remote environments reported ready before selection @copyberry
- #37157 Harden named session lookup in the TUI @copyberry
- #37162 Load host skill roots through the skills extension @copyberry
- #37166 Keep textarea cursors and rendering inside the viewport @copyberry
- #37167 Expose session sources to MCP contributors @copyberry
- #37168 Bound remote MCP handshake HTTP requests @copyberry
- #37169 Move plugin skill snapshot integration tests into core @copyberry
- #37174 Centralize skill invocation helpers in
codex-skills@copyberry - #37175 Add legacy rollout migration to paginated history @copyberry
- #37177 Move explicit skill selection into the skills crate @copyberry
- #37178 Preserve image transparency metadata in app-server items @copyberry
- #37188 Reserve the
tool_searchnamespace for the search tool @copyberry - #37189 Track multi-agent usage hints in world state @copyberry
-
Codex app 26.803
Performance improvements and bug fixes
- Fixed an issue where typing in Find could edit the open code file.
- Preserved the selected model and thinking level when moving a chat to a worktree.
- Made search for @-mentions case-insensitive.
-
Codex CLI 0.146.1
$ npm install -g @openai/codex@0.146.1View details
Bug Fixes
- Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057)
Changelog
Full Changelog: rust-v0.146.0...rust-v0.146.1
-
Codex app 26.730
New features
- Added source-folder shortcuts to the terminal for projects with more than one folder.
Performance improvements and bug fixes
- Fixed duplicate pinned chats in the sidebar.
- Kept other project folders available when repairing worktree setup.
July 2026
-
GPT-5.4 and GPT-5.4 mini retire from Codex on August 31
On August 31, 2026, GPT-5.4 and GPT-5.4 mini will no longer be available in Codex for users signed in with ChatGPT. GPT-5.4 and GPT-5.4 mini will remain available on the OpenAI API and Codex sessions authenticated with an API key.
Switch to their recommended replacements:
- Replace
gpt-5.4withgpt-5.6-terra(GPT-5.6 Terra). - Replace
gpt-5.4-miniwithgpt-5.6-luna(GPT-5.6 Luna).
Before the cutoff, update workspace defaults, saved model settings, managed configurations, custom agents, and scheduled tasks that use either model.
See Codex models and workspace model availability for details.
- Replace
-
Record & Replay expands to the EU, UK, and Switzerland
Record & Replay is now available in the European Union, the United Kingdom, and Switzerland. On macOS, demonstrate a workflow and turn it into a reusable skill. Computer Use must also be available and enabled.
-
Browser upgrades, multi-repository review, and image editing 26.727
The latest ChatGPT desktop app update makes browsing, reviewing code, and editing generated images faster and easier.
Browse and find context faster
- Type in the built-in browser’s address bar to revisit pages from your browsing history or search Google when there’s no match.
- Manage your browsing history in Settings, and let ChatGPT search that history when a task needs to find a page you visited before.
- Use the Chrome extension to mention open tabs or bring highlighted page text into your side chat.
- Ask questions about any YouTube video in the Chrome extension and get answers in seconds.
- Right-click a webpage and select Ask ChatGPT.
Learn more about the built-in browser and the Chrome extension.
Review changes across repositories
See all repositories in a multi-folder project and the lines changed in each one. Select Review to inspect diffs across those repositories without switching between separate review views.
Refine generated images
Open generated images in an expanded viewer, and switch between Focused view and Canvas view. Add comments across images, choose the ones you want, and send targeted edits without leaving your conversation. Learn more about image generation.
Other improvements and bug fixes
- Added a new “Activity view” in the sidebar to view which chats you engaged with recently and require attention. Click the bell or use Cmd/Ctrl+Opt+U to change to the new view.
- Updated browser settings to show only supported browsers.
- Improved Windows installation reliability when package file paths are long.
- Other performance and bug fixes.
-
Sign in with ChatGPT (beta)
Sign in with ChatGPT is beginning to roll out in beta across select plugins and partner sites, starting with Airtable, GitLab, HubSpot, Notion, Supabase, and Vercel.
When you connect a supported plugin from the ChatGPT plugin directory, you can use Sign in with ChatGPT to create or link an account with that service in fewer steps. On participating partner sites, you can also select Sign in with ChatGPT to create or access your account.
This makes it easier to start working with supported tools in ChatGPT and Codex.
When you sign in, the partner receives only your name, email address, and profile picture, if available. You must still review and approve each plugin’s requested access as a separate step.
-
Codex CLI 0.146.0
$ npm install -g @openai/codex@0.146.0View details
New Features
- Name new sessions with
/newor/clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) - Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979)
- Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251)
- Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098)
- Enable standalone web search for compatible custom model providers. (#34846)
- Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198)
Bug Fixes
- Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239)
- Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151)
- Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664)
- Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, #35021, #34775, #34778, #35365, #35375)
- Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, #34624, #35036)
- Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, #34738, #34997)
Documentation
- Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669)
- Clarify Windows drive-letter canonicalization for
PathUrivalues. (#34667)
Chores
- Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, #34508, #34729, #34910)
- Sign and notarize bundled macOS helper executables before packaging. (#35264)
- Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, #34766, #34825)
- Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, #35537)
Changelog
Full Changelog: rust-v0.145.0...rust-v0.146.0
- #34447 Add a route-aware HTTP client pool @copyberry
- #34449 Make external session detection limits configurable @copyberry
- #34451 Attribute external agent imports by provider @copyberry
- #34463 Support alpha hotfix release versions @copyberry
- #34469 Preserve thread settings for goal-first and forked threads @copyberry
- #34476 Separate HTTP execution from request logging @copyberry
- #34478 Honor
CARGO_HTTP_CAINFOin managed proxy environments @copyberry - #34479 Re-resolve system proxy routes across redirects @copyberry
- #34481 Add route-aware redirect test coverage @copyberry
- #34483 Expand route-aware proxy redirect coverage @copyberry
- #34490 Route backend requests through the HTTP client factory @copyberry
- #34491 Route cloud environment discovery through the HTTP client pool @copyberry
- #34495 Honor system proxy settings in the daemon updater @copyberry
- #34497 Preserve custom arg0 for sandboxed exec-server processes @copyberry
- #34505 Mirror Rust release artifacts to Cloudflare R2 @copyberry
- #34506 Respect system proxies during plugin startup sync @copyberry
- #34508 Publish release metadata to R2 channels @copyberry
- #34509 Honor system proxy settings for remote plugins @copyberry
- #34514 Add an optional releases.openai.com installer source @copyberry
- #34516 Allow
numerin codespell checks @copyberry - #34517 Pass empty inherited FDs in the Wine PTY test @copyberry
- #34522 Split MCP connection manager into focused modules @copyberry
- #34525 Add step-scoped data to extension contributors @copyberry
- #34533 Centralize compacted rollout item construction @copyberry
- #34540 Detach Git metadata commands from stdin @copyberry
- #34544 Size Noise handshake buffers to their messages @copyberry
- #34547 Add reciprocal rank fusion skill selection @copyberry
- #34550 Test thread-scoped MCP refresh behavior @copyberry
- #34551 Simplify TUI restoration for the external editor @copyberry
- #34552 Remove unused RtOptions setters @copyberry
- #34553 Remove the unused TUI shutdown app command @copyberry
- #34558 Remove obsolete ignored tests @copyberry
- #34559 Add backend client support for Codex user settings @copyberry
- #34561 Extract MCP binding clients from the connection manager @copyberry
- #34562 Record rollout boundaries for materialized turns @copyberry
- #34563 Page through inherited thread history @copyberry
- #34566 Protect fork history references during rollout cleanup @copyberry
- #34570 Highlight CUDA files as C++ in the TUI @copyberry
- #34573 Accept
forceRefetchin plugin list requests @copyberry - #34578 Gate the TUI suspend restore helper on Unix @copyberry
- #34581 Add routing-card lexical skill selection @copyberry
- #34588 Bind MCP calls to captured catalog revisions @copyberry
- #34590 Add keyed shell environment policy filters @copyberry
- #34597 Enforce exact values from managed config requirements @copyberry
- #34598 Skip missing paths in filesystem sandbox entries @copyberry
- #34601 Sanitize skill names in injection metrics @copyberry
- #34603 Allow explicitly permitted loopback proxy targets @copyberry
- #34605 Allow naming sessions with
/newand/clear@copyberry - #34611 Add compatibility policies for skill catalog rendering @copyberry
- #34612 Detach non-interactive subprocesses from stdin @copyberry
- #34613 Route Windows sandbox proxy traffic by restricting SID @copyberry
- #34615 Initialize missing-path behavior in exec-server sandbox test @copyberry
- #34620 Add exec-server network policy callback types @copyberry
- #34621 Load paginated model context across rollout lineages @copyberry
- #34622 Increase the auto-review model override test timeout @copyberry
- #34624 Terminate Windows process trees with job objects @copyberry
- #34625 Fix Windows TUI navigation key handling @copyberry
- #34626 Scale skill metadata budgets with model context windows @copyberry
- #34629 Harden Windows elevated sandbox startup @copyberry
- #34630 Add a policy-aware HTTP client builder @copyberry
- #34631 Migrate agent identity to the shared HTTP client @copyberry
- #34636 Keep the TUI open when starting a turn fails @copyberry
- #34637 Attribute review findings to repository rules @copyberry
- #34640 Update Windows process-tree tests for inherited FDs @copyberry
- #34641 Harden managed proxy setup for sandboxed executions @copyberry
- #34643 Migrate login HTTP construction to
HttpClient@copyberry - #34644 Verify Git plugin SHA checkouts @copyberry
- #34645 Always assign response item IDs @copyberry
- #34649 Propagate resolved proxy policy through auth routing @copyberry
- #34650 Require auth managers to receive routing configuration @copyberry
- #34651 Migrate core test support to the shared HTTP client @copyberry
- #34654 Render turn diffs for foreign environment paths @copyberry
- #34655 Honor configured proxy routes for auth refreshes @copyberry
- #34664 Preserve approvals reviewer when forking threads @copyberry
- #34667 Document
PathUridrive letter canonicalization @copyberry - #34669 Expand codex-http-client usage guidance @copyberry
- #34678 Route LM Studio requests through the shared HTTP client @copyberry
- #34681 Add session headers to realtime conversation starts @copyberry
- #34687 Configure Codex Auto Review model metadata @copyberry
- #34708 Rename the MCP connection manager to
McpConnectionSet@copyberry - #34713 Order unified exec lifecycle events reliably @copyberry
- #34728 Skip Git enrichment for prewarm and Guardian turns @copyberry
- #34729 Publish stable installer aliases to R2 @copyberry
- #34732 Preserve skill catalog entries under metadata pressure @copyberry
- #34733 Make MCP resource clients follow the latest runtime @copyberry
- #34734 Remove step-scoped data from extension contributors @copyberry
- #34738 Drop skill descriptions before omitting catalog entries @copyberry
- #34744 Update skills budget tests for extension API changes @copyberry
- #34746 Match core skill ordering in extension catalogs @copyberry
- #34747 Register the MCP 2026-07-28 feature flag @copyberry
- #34761 Reduce app-server JSON serialization overhead @copyberry
- #34763 Retry websocket requests when the previous response is missing @copyberry
- #34766 Reduce typed app-server request serialization overhead @copyberry
- #34769 Add the git attribution extension @copyberry
- #34770 Enable exec-server network policy callbacks @copyberry
- #34771 Size unified mention popups to visible results @copyberry
- #34772 Normalize whitespace-only lines in agent messages @copyberry
- #34775 Clamp session headers to narrow terminal widths @copyberry
- #34777 Include the final agent message in turn completion summaries @copyberry
- #34778 Coalesce wrapped OSC 8 hyperlinks in the TUI terminal @copyberry
- #34779 Use the live parent history mode when forking agents @copyberry
- #34781 Upgrade Bazel Rust and LLVM dependencies @copyberry
- #34784 Reject dynamic environments named
local@copyberry - #34785 Report skill catalog truncation during rendering @copyberry
- #34786 Simplify app-server integration test setup @copyberry
- #34789 Avoid unnecessary post-sampling token estimates @copyberry
- #34795 Remove obsolete step store from git attribution tests @copyberry
- #34796 Skip syntax highlighting for lines over 4 KiB @copyberry
- #34797 Suppress omission notices in core-compatible skill catalogs @copyberry
- #34806 Use path URIs in shell approval keys @copyberry
- #34808 Centralize SQLite connection configuration @copyberry
- #34811 Fix network access rendering in sandbox prompts @copyberry
- #34814 Consolidate thread startup around
StartThreadOptions@copyberry - #34816 Support configurable realtime BEM channel prefixes @copyberry
- #34819 Enable git attribution across Codex entry points @copyberry
- #34823 Run code-mode tests in non-Windows Bazel CI @copyberry
- #34824 Normalize Guardian review cwd reuse keys @copyberry
- #34825 Reduce cloning when building Responses requests @copyberry
- #34827 Remove Windows Bazel lint toolchain overrides @copyberry
- #34831 Flush analytics before in-process app server shutdown @copyberry
- #34835 Track compaction time in turn profiles @copyberry
- #34839 Preserve user input when MCP startup is interrupted @copyberry
- #34840 Add persisted thread pinning to the app server @copyberry
- #34844 Remove first-party type from app metadata @copyberry
- #34845 Track multi-agent mode in world state @copyberry
- #34846 Allow custom providers to opt into standalone web search @copyberry
- #34847 Use Guardian model limits for review sessions @copyberry
- #34849 Cache remote plugin catalogs by scope @copyberry
- #34850 Disable image generation for Free-plan accounts @copyberry
- #34851 Use batch metadata for plugin app summaries @copyberry
- #34852 Wake sleeping threads for queued agent mail @copyberry
- #34877 Wait for local plugin cache refreshes in
plugin/list@copyberry - #34883 Set a default user agent for MCP HTTP requests @copyberry
- #34887 Allow disabling the multi-agent wait tool @copyberry
- #34910 Prefer releases.openai.com in standalone installers @copyberry
- #34930 Centralize thread MCP state in
McpRuntime@copyberry - #34931 Use the API plugin marketplace for Amazon Bedrock @copyberry
- #34940 Keep session defaults static during config batch writes @copyberry
- #34952 Reuse MCP connections across runtime refreshes @copyberry
- #34957 Replace closed MCP connections during reconciliation @copyberry
- #34959 Handle @ in local marketplace paths @copyberry
- #34962 Move MCP connection helpers into the test module @copyberry
- #34969 Keep the sleep tool outside code mode @copyberry
- #34978 Honor disabled redirects in route-aware HTTP clients @copyberry
- #34979 Infer the bundled Claude Code plugin marketplace @copyberry
- #34981 Record externally completed agent config imports @copyberry
- #34986 Enforce single-writer ownership for paginated threads @copyberry
- #34989 Preserve timestamps when importing external agent sessions @copyberry
- #34991 Allow omitting MCP tool prefixes per server @copyberry
- #34994 Honor the configured SQLite home across state consumers @copyberry
- #34995 Initialize execution environments with the final HTTP policy @copyberry
- #34996 Separate Codex error details from retry metadata @copyberry
- #34997 Warn when skill catalogs exceed their context budget @copyberry
- #35000 Make TUI turn interrupts nonblocking @copyberry
- #35011 Keep side conversations open when switching threads @copyberry
- #35012 Expose remote skill icon URLs through app server @copyberry
- #35013 Support incremental replay of updated thread items @copyberry
- #35015 Align installed app duration metrics with the legacy baseline @copyberry
- #35016 Add trusted plugin script attribution @copyberry
- #35020 Attribute command executions to trusted plugin scripts @copyberry
- #35021 Adapt keyboard event reporting to the terminal @copyberry
- #35023 Route exec-server HTTP through configured proxy policy @copyberry
- #35028 Preserve refreshed Apps tools across MCP runtime updates @copyberry
- #35029 Preserve plugin attribution across command approvals @copyberry
- #35031 Enforce writer ownership for thread archive and deletion @copyberry
- #35033 Expose Browser Use requirements through the app server @copyberry
- #35034 Route environment registry requests through the shared HTTP client @copyberry
- #35036 Preserve Windows sandbox proxy settings in guardian sessions @copyberry
- #35048 Track app/read request duration @copyberry
- #35049 Register the Guardian V2 feature flag @copyberry
- #35054 Allow disabling the update_plan tool @copyberry
- #35056 Route exec-server WebSockets through configured proxies @copyberry
- #35059 Decouple exec-server HTTP from reqwest types @copyberry
- #35063 Track deferred tool namespaces in world state @copyberry
- #35065 Avoid duplicating deferred sources in tool search @copyberry
- #35067 Fix Bazel test configuration for platform-specific data @copyberry
- #35078 Add WebSocket transport to the code-mode host @copyberry
- #35098 Support remote code-mode hosts in app-server @copyberry
- #35105 Support Agent Plugins manifests @copyberry
- #35106 Allow hosts to customize
wait_for_environmentdescriptions @copyberry - #35144 Prewarm MCP runtime updates in the background @copyberry
- #35146 Refresh MCP runtimes when session auth changes @copyberry
- #35151 Reconnect MCP servers on explicit refresh @copyberry
- #35164 Encapsulate MCP refresh coordination @copyberry
- #35168 Route extension warnings to app-server threads @copyberry
- #35172 Compact host skill paths under metadata pressure @copyberry
- #35175 Wait for reloaded worker completion in the resume test @copyberry
- #35184 Expose executor skills through skill tools @copyberry
- #35194 Preserve output from hooks that exit before reading stdin @copyberry
- #35196 Make the Apps recovery exposure test deterministic @copyberry
- #35198 Enable resource reads for explicit executor skills @copyberry
- #35204 Refresh MCP runtimes across thread startup @copyberry
- #35205 Use current MCP authority for elicitation reviews @copyberry
- #35213 Refresh managed MCP requirements for active threads @copyberry
- #35216 Refresh MCP config independently across threads @copyberry
- #35220 Support paginated thread forks @copyberry
- #35221 Avoid persisting non-local threads for hook transcripts @copyberry
- #35238 Support the ent26 enterprise plan @copyberry
- #35239 Route MCP auth discovery through runtime HTTP clients @copyberry
- #35251 Support ephemeral forks of paginated threads @copyberry
- #35254 Expose workspace plugin publish capability @copyberry
- #35261 Propagate remote plugin IDs to skill metadata @copyberry
- #35262 Track remote plugin IDs in skill invocation analytics @copyberry
- #35264 Sign bundled macOS helper binaries @copyberry
- #35266 Allow disabling the in-process code-mode host fallback @copyberry
- #35267 Harden network approval cancellation and concurrency @copyberry
- #35271 Include code-mode tool names in Responses Lite metadata @copyberry
- #35275 Trace remote exec-server connection setup @copyberry
- #35280 Skip plugin MCP filtering when no allowlists are configured @copyberry
- #35359 Handle exec-server network policy requests in the client @copyberry
- #35363 Include item start times in completion events @copyberry
- #35364 Bound Code Mode metadata compatibility headers @copyberry
- #35365 Keep unified mention results fresh @copyberry
- #35375 Make the keymap action menu responsive @copyberry
- #35408 Ignore generated system skills in the skills watcher @copyberry
- #35414 Raise the MCP server recursion limit @copyberry
- #35523 Shut down the in-process outbound router explicitly @copyberry
- #35524 Preserve terminal turn errors in replayed history @copyberry
- #35525 Skip inactive TUI threads without pending user interaction @copyberry
- #35530 Track model and personality in world state @copyberry
- #35537 Add managed policy for in-app updates @copyberry
- Name new sessions with
-
ChatGPT for iOS 1.2026.202
Improvements and bug fixes
- Voice conversations now use your selected ChatGPT voice and show usage-limit warnings.
- Improved task reconnection and continuity when returning to the app or unlocking with Face ID.
- Composer autocomplete now matches desktop plugin mentions and includes skills from installed plugins.
- Selected-text references remain available after sending so you can preview them again.
- Improved goal controls with clearer progress when pausing or resuming.
- Inline visualizations now render tables and visual themes more reliably.
- Large workspace diffs are more responsive.
- Fixed restored tasks changing the selected model.
- Prevented the composer from becoming stuck after a prompt started.
- Corrected browser and computer tool labels, icons, and placeholder output.
-
ChatGPT Voice and multi-folder projects 26.715
Powered by GPT-Live, ChatGPT Voice lets you talk through work and coordinate tasks in Chat, Work, and Codex in the ChatGPT desktop app.
Start a new chat or task in voice mode, then ask ChatGPT to start, check, or steer work in other threads. On macOS, turn on Screen context to share an appshot of your frontmost window.
Voice is available with Plus, Pro, Business, Edu, and Enterprise plans in the desktop app and through Remote on iOS.
Local projects in the ChatGPT desktop app can now include multiple related folders. From a project’s menu, select Edit project to add folders and choose the primary folder. New chats, Git operations, and automatic discovery of
AGENTS.md, skills, andconfig.tomluse the primary folder. Secondary folders remain available for file search, reading, and editing.Get started with ChatGPT Voice and multi-folder local projects.
Performance improvements and bug fixes
Also includes fixes from version 26.721.
- Improved screen reader navigation between messages.
- Fixed Git detection on Windows.
- Fixed a freeze caused by missing icons in the Open in menu.
-
Codex CLI 0.145.0
$ npm install -g @openai/codex@0.145.0View details
New Features
- Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386)
- Expanded
/importto migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444) - Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695)
- Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385)
- Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383)
- Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346)
Bug Fixes
- Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211)
- Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359)
- Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, #32781, #32825, #33184, #33297)
- Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, #32857, #33926, #34423)
- Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, #31876, #31899)
- Strengthened safety and approval handling with better forced-
rmdetection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, #33464, #34400)
Documentation
- Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, #33121)
Chores
- Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173)
- Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, #33369, #33423, #34431)
- Updated the packaged ripgrep binary to 15.2.0. (#34384)
Changelog
Full Changelog: rust-v0.144.0...rust-v0.145.0
- #31667 fix: parse compact release metadata in installer @efrazer-oai
- #31362 core: route realtime and memories through HTTP client factory @bolinfest
- #31566 perf(skills): reuse walk inventory for host loading @jif-oai
- #31576 Bound exec-server process event reordering @jif-oai
- #31756 test(skills): assert symlinked metadata loading @jif-oai
- #31581 Resolve selected capability roots without starting executors @jif-oai
- #31789 Stop persisting RMCP service traces @jif-oai
- #31792 Summarize streamed response item logs @jif-oai
- #31791 Filter routine Hyper logs from SQLite @jif-oai
- #31790 Reduce MCP tool-list trace volume @jif-oai
- #31804 Stabilize the memories feature flag @jif-oai
- #31803 fix(mcp): default Apps product SKU to codex @alecbarber-oai
- #31745 code-mode: retain shared MCP types for deferred tools @sayan-oai
- #31672 Import enabled plugins from known marketplaces @charlesgong-openai
- #31652 fix(tui): hide empty reasoning summaries @fcoury-oai
- #31767 Remove the network proxy config wrapper @jif-oai
- #31481 fix: forward originator to Codex Apps MCP @raquel-openai
- #31363 codex-api: route file uploads through HTTP client factory @bolinfest
- #31813 tui: update safety buffering copy @etraut-openai
- #31830 fix(sandboxing): initialize network proxy config inline @fcoury-oai
- #31431 build: ratchet direct reqwest dependencies @bolinfest
- #31876 code-mode: fix installation on darwin @cconger
- #31842 Update bundled OpenAI Docs skill for GPT-5.6 @kkahadze-oai
- #31637 login: route raw auth flows through HTTP client @bolinfest
- #31686 [codex-apps] Filter optional file fields by tool schema @tsarlandie-oai
- #31899 code-mode: fall back to using in process v8 if we fail to resolve external process @cconger
- #31805 Bound remote MCP stdio lines @jif-oai
- #30293 Resolve and pin MCP OAuth credential stores @stevenlee-oai
- #31892 exec-server: materialize filesystem workspace roots @pakrym-oai
- #31327 feat: add managed Bedrock login API @celia-oai
- #31295 bench: add codex help e2e macrobenchmark @anp-oai
- #31428 bench: add e2e benchmark entrypoints @anp-oai
- #31937 exec-server: expose process helper to outer sandbox @pakrym-oai
- #32093 Remove the legacy exec policy engine @copyberry
- #32106 Reduce startup latency for ancestor discovery @copyberry
- #32112 Bound streamed exec-server HTTP response bodies @copyberry
- #32122 Test the shared exec-server HTTP response byte budget @copyberry
- #32123 Bound exec-server stdio JSON-RPC messages @copyberry
- #32126 Test bounded concurrency in ancestor discovery @copyberry
- #32134 Test stdio JSON-RPC size limits with LF and CRLF @copyberry
- #32135 Propagate tracing subscribers to exec start tasks @copyberry
- #32150 Keep unified exec output collection bounded @copyberry
- #32193 Validate memory consolidation artifacts before succeeding @copyberry
- #32197 Rebind memory consolidation workspace roots @copyberry
- #32200 Add a skill invocation extension contributor @copyberry
- #32206 Always send reasoning parameters in Responses requests @copyberry
- #32213 Generate unique IDs for review rollout messages @copyberry
- #32214 Propagate workspace roots to exec-server sandboxes @copyberry
- #32229 Serialize MCP OAuth credential refreshes @copyberry
- #32231 Support pending remote environment registration @copyberry
- #32232 Let permission hooks resolve strict auto-review requests @copyberry
- #32234 Add dedicated storage for paginated thread history @copyberry
- #32246 Extract reverse JSONL scanning from session indexing @copyberry
- #32256 Improve Responses WebSocket timing telemetry @copyberry
- #32261 Preserve local path conventions in automatic approvals @copyberry
- #32263 Include start times in terminal turn events @copyberry
- #32272 Expose scheduled tasks in plugin details @copyberry
- #32274 Remove the personality migration @copyberry
- #32276 Repair unterminated rollout files before appending @copyberry
- #32277 Honor
personality = "none"in model instructions @copyberry - #32280 Include terminal errors in turn completion events @copyberry
- #32286 Clarify waiting behavior in safety buffering prompts @copyberry
- #32288 Make GPT-5.6 Sol the default Bedrock model @copyberry
- #32289 Persist paginated items in the local thread store @copyberry
- #32290 Respect model support for reasoning summaries @copyberry
- #32301 Trust hooks from materialized workspace plugins @copyberry
- #32302 Prefer the Codex home socket for Unix IDE context @copyberry
- #32305 Improve file blob upload diagnostics @copyberry
- #32312 Require prefixes for outbound response item IDs @copyberry
- #32316 Stop falling back to older model availability announcements @copyberry
- #32326 Use canonical links in the moved config notice @copyberry
- #32332 Add ordinals to paginated rollout records @copyberry
- #32441 Preserve parent sandbox enforcement for memory consolidation @copyberry
- #32460 Emit thread-idle lifecycle after guardian interrupts @copyberry
- #32461 Expand tabs when rendering TUI diffs @copyberry
- #32485 Use available width for skill names in the toggle view @copyberry
- #32628 Improve composer completion target resolution @copyberry
- #32698 Extract connector runtime snapshot management @copyberry
- #32744 Log missing personality messages at trace level @copyberry
- #32746 Make advanced reasoning selection explicit in the TUI @copyberry
- #32747 Align Guardian reviews with session configuration @copyberry
- #32749 Expose model overrides for multi-agent v2 spawns @copyberry
- #32751 Restrict spawned-agent models to the active backend @copyberry
- #32761 Add shadow metrics for lexical skill selection @copyberry
- #32768 Align shadow skill selection with observable sources @copyberry
- #32780 Enable skill search shadow selection by default @copyberry
- #32781 Apply MCP startup timeouts during client creation @copyberry
- #32801 Refactor OAuth store lock contention tests @copyberry
- #32822 Make explicit multi-agent mode override proactive delegation @copyberry
- #32825 Avoid blocking thread startup on MCP OAuth discovery @copyberry
- #32835 Forward turn metadata in standalone web search @copyberry
- #32837 Restore V2 agent identities on root thread resume @copyberry
- #32838 Reap exited PID-managed app-server children @copyberry
- #32844 Expand millisecond duration histogram boundaries @copyberry
- #32849 Hide Windows filesystem helper console windows @copyberry
- #32857 Require the elevated Windows sandbox for network proxies @copyberry
- #32858 Persist slash-command popup dismissal @copyberry
- #32864 Coalesce concurrent Windows sandbox setup requests @copyberry
- #32866 Allow responses after image generation @copyberry
- #32867 Include connector IDs in MCP tool call analytics @copyberry
- #32875 Use model catalog policies for Guardian auto review @copyberry
- #32881 Broaden remote compaction model fallback @copyberry
- #32884 Prepare external agent migration for source adapters @copyberry
- #32887 Tag shell tool telemetry by command category @copyberry
- #32891 Attach connector caches to diagnostic uploads @copyberry
- #32894 Serialize plugin install requests @copyberry
- #32896 Load model context from a bounded rollout suffix @copyberry
- #32897 Route blocked network requests to their owning calls @copyberry
- #32898 Expose structured standalone web search results @copyberry
- #32899 Add exec-server environment status checks @copyberry
- #32900 Derive collaboration settings from turn context @copyberry
- #32903 Include session IDs in tool item analytics events @copyberry
- #32905 Timestamp app-server notifications at emission @copyberry
- #32911 Allow injecting the models manager into
ThreadManager@copyberry - #32920 Expose environment status through app-server @copyberry
- #32923 Materialize paginated thread history in SQLite @copyberry
- #32928 Resume thread history projection from its SQLite checkpoint @copyberry
- #32945 Restrict Guardian reviewer tools @copyberry
- #32949 Tighten recommended plugin install suggestions @copyberry
- #32952 Scope runtime workspace roots to execution environments @copyberry
- #32985 Expose exact per-response usage in raw app-server events @copyberry
- #32989 Always confirm before enabling full access @copyberry
- #33013 Bound exec-server JSON-RPC decoding complexity @copyberry
- #33026 Include raw response completions in TypeScript envelopes @copyberry
- #33030 Remove task messages from
list_agentsoutput @copyberry - #33031 Preserve JSON number precision in exec-server RPC messages @copyberry
- #33035 Use session IDs for prompt cache keys @copyberry
- #33040 Send plugin analytics with API key authentication @copyberry
- #33076 Add an agent extension runner @copyberry
- #33093 Preserve streamed output during capped history replay @copyberry
- #33105 Fix TUI status visibility around streamed output @copyberry
- #33107 Preserve special filesystem subpaths as wire strings @copyberry
- #33109 Reject forks of paginated threads @copyberry
- #33113 Allow injecting the Codex Apps tools cache @copyberry
- #33121 Refine GPT-5.6 prompting and migration guidance @copyberry
- #33147 Support model catalog permission messages @copyberry
- #33149 Build MCP tool runtimes before router planning @copyberry
- #33150 Clarify exec yield timing on Windows @copyberry
- #33152 Support paginated thread history in app-server list APIs @copyberry
- #33155 Trace startup prewarm tasks @copyberry
- #33156 Run detached reviews as review-agent turns @copyberry
- #33159 Move sleep items to the extension-owned lifecycle path @copyberry
- #33166 Defer Noise environment connections until registration @copyberry
- #33167 Document the Windows exec yield time range @copyberry
- #33170 Support Amazon Bedrock login in the app server @copyberry
- #33173 Migrate GPT-5.4 uses to GPT-5.6 variants @copyberry
- #33175 Handle Amazon Bedrock credentials during logout @copyberry
- #33177 Support model catalog templates for Guardian policy prompts @copyberry
- #33180 Serialize concurrent MCP stdin writes @copyberry
- #33182 Preserve plugin install failure subtypes during imports @copyberry
- #33184 Reuse MCP tool catalogs across sessions @copyberry
- #33185 Keep approval test targets in the temporary home @copyberry
- #33187 Honor workspace spend controls in rate-limit handling @copyberry
- #33198 Keep interrupted prompts in conversation history @copyberry
- #33200 Separate exec permission paths from core models @copyberry
- #33201 Branch conversations when editing earlier TUI prompts @copyberry
- #33203 Preserve in-flight state when restoring thread input @copyberry
- #33207 Retry safety-buffered turns on a forked thread @copyberry
- #33209 Separate session state from session I/O @copyberry
- #33211 Preserve thread context when retrying or editing turns @copyberry
- #33213 Prepare Python SDK 0.144.4 stable release @copyberry
- #33223 Instrument environment and plugin resolution paths @copyberry
- #33232 Disambiguate skill mentions from shell parameters @copyberry
- #33237 Fix skill completion around bound mentions with suffixes @copyberry
- #33239 Render TUI composer tabs as single-column spaces @copyberry
- #33243 Add auto-compaction fallback token-budget settings @copyberry
- #33251 Report selected environment connection transitions @copyberry
- #33255 Add a fallback phase before automatic context rollover @copyberry
- #33261 Add Frameless Bidi support for realtime conversations @copyberry
- #33297 Allow MCP servers to opt out of tool catalog caching @copyberry
- #33308 Expand MCP tool catalog cache regression coverage @copyberry
- #33364 Enable paginated thread history in app-server @copyberry
- #33367 Respect final-answer boundaries for queued agent mail @copyberry
- #33369 Scan skill roots concurrently @copyberry
- #33373 Render TUI prompts before submitting user turns @copyberry
- #33411 Migrate plugin commands into skills on install @copyberry
- #33412 Refactor world-state rendering tests into snapshots @copyberry
- #33414 Expose connector candidates from imported sessions @copyberry
- #33421 Fetch workspace connectors concurrently @copyberry
- #33423 Load executor plugin declarations concurrently @copyberry
- #33424 Attribute OpenAI docs MCP requests to Codex @copyberry
- #33425 Refresh host skill catalogs through world state @copyberry
- #33426 Add Cursor support to setup import @copyberry
- #33427 Propagate deferred environment capability roots to MCP @copyberry
- #33430 Avoid creating metadata paths in the Windows sandbox @copyberry
- #33432 Preserve paginated history for spawned subagents @copyberry
- #33435 Warn on conflicting capability root locations @copyberry
- #33441 Shut down Codex threads after approval scenarios @copyberry
- #33444 Add external agent memory migration @copyberry
- #33445 Select the elevated Windows sandbox for network proxies @copyberry
- #33446 Remove the unused network proxy loader @copyberry
- #33454 Track prompt cache write token usage @copyberry
- #33456 Move external agent migration into its crate @copyberry
- #33457 Use final answers in turn history summaries @copyberry
- #33459 Allow more time for image generation in code mode @copyberry
- #33464 Strengthen forced
rmcommand detection @copyberry - #33467 Remove template IDs from MCP tool call metadata @copyberry
- #33500 Add cache-write tokens to the raw response schema @copyberry
- #33509 Preserve encrypted content in MCP tool outputs @copyberry
- #33550 Unify multi-agent settings under
agents@copyberry - #33572 Expose spawn agent types only when roles are configured @copyberry
- #33605 Add fielded BM25 to shadow skill selection @copyberry
- #33613 Add character n-gram skill selection @copyberry
- #33614 Add multi-query lexical skill selection @copyberry
- #33631 Honor configured model defaults for spawned agents @copyberry
- #33632 Remove generated-default filesystem path variants @copyberry
- #33633 Clarify when to wait for starting environments @copyberry
- #33636 Clarify when to wait for starting environments @copyberry
- #33639 Remove the unused realtime WebRTC crate @copyberry
- #33640 Avoid duplicate cached app list update notifications @copyberry
- #33645 Run
write_stdinconcurrently across terminal sessions @copyberry - #33651 Add an app-server API for reading app metadata @copyberry
- #33656 Validate reasoning effort after applying spawn roles @copyberry
- #33657 Restore agent roles when reloading v2 sub-agents @copyberry
- #33658 Keep active-turn environments stable across settings updates @copyberry
- #33659 Require data URLs for code-mode image output @copyberry
- #33665 Refresh step world state for all sessions @copyberry
- #33677 Forward thread originators from standalone extensions @copyberry
- #33680 Reword the apply_patch tool description @copyberry
- #33683 Preserve scope and provenance for imported agent memory @copyberry
- #33684 Extract TUI approval request payloads into structs @copyberry
- #33687 Avoid unnecessary writes during migration repair @copyberry
- #33695 Support custom transports for Amazon Bedrock @copyberry
- #33841 Make parent-owned sub-agent threads read-only in the TUI @copyberry
- #33842 Give the zsh fork decline test more execution time @copyberry
- #33843 Add an API for reading installed app runtime state @copyberry
- #33845 Confirm usage-limit resets before redemption @copyberry
- #33848 Fix the managed Bedrock logout test assertion @copyberry
- #33851 Record web search result payload sizes @copyberry
- #33852 Add batched executor capability discovery @copyberry
- #33855 Tag realtime transcript tail flush delegations @copyberry
- #33856 Stream realtime V3 Codex handoff output @copyberry
- #33858 Isolate core tests from shell and rollout persistence @copyberry
- #33861 Test workspace write isolation across exec servers @copyberry
- #33862 Suppress empty multi-agent mode messages @copyberry
- #33863 Report detailed session import error types @copyberry
- #33864 Keep feature tests focused on behavior @copyberry
- #33866 Remove the redundant tool dispatch wrapper @copyberry
- #33867 Add grace period to code-mode yield timeouts @copyberry
- #33868 Remove stale ignored core tests @copyberry
- #33870 Remove the redundant borrowed line wrapping helper @copyberry
- #33872 Remove unused TUI collaboration mode indicators @copyberry
- #33876 Track collaboration mode instructions in world state @copyberry
- #33883 Report CLI as the external agent config import source @copyberry
- #33889 Centralize thread MCP connections in
McpRuntime@copyberry - #33892 Limit rollout metadata reads to headers @copyberry
- #33893 Track realtime conversation state in world state @copyberry
- #33895 Add SessionEnd hooks for thread teardown @copyberry
- #33896 Expose plugin installation interstitial requirements @copyberry
- #33901 Support ChatGPT-branded Desktop app builds @copyberry
- #33902 Add bounded batch lookups for message history @copyberry
- #33903 Route realtime V3 handoffs by response channel @copyberry
- #33905 Batch persistent history reads during reverse search @copyberry
- #33906 Launch managed network proxies on remote executors @copyberry
- #33907 Add occurrence search for paginated threads @copyberry
- #33908 Allow publishing plugins through share updates @copyberry
- #33921 Preserve sub-agent liveness in the agent picker @copyberry
- #33922 Allow selecting path-backed agents in the TUI picker @copyberry
- #33923 Add audio variants to user input protocols @copyberry
- #33925 Render inline visualization links in the TUI @copyberry
- #33926 Fix quoted hook commands on Windows @copyberry
- #33929 Handle audio inputs and Bazel unit test arguments @copyberry
- #33930 Track inherited paginated rollout prefixes @copyberry
- #33932 Forward audio inputs to the Responses API @copyberry
- #33938 Centralize SQLite connection configuration @copyberry
- #33944 Track permission instructions in world state @copyberry
- #33950 Let users remember the working directory for resumed sessions @copyberry
- #33961 Refresh bundled model metadata @copyberry
- #33963 Add context to sampling retry logs @copyberry
- #33982 Gate audio history by model input modalities @copyberry
- #34038 Handle compressed rollouts in doctor thread inventory @copyberry
- #34045 Render streamed Markdown incrementally @copyberry
- #34047 Avoid resending the model for reasoning shortcuts @copyberry
- #34049 Avoid redundant TUI redraws while streaming @copyberry
- #34067 Seed realtime V3 sessions with initial text items @copyberry
- #34080 Add audio output support to dynamic tools and code mode @copyberry
- #34085 Support legacy views for paginated thread history @copyberry
- #34194 Avoid cloning thread data when rendering transcripts @copyberry
- #34197 Use the Markdown collector as the streaming source of truth @copyberry
- #34198 Start side conversations without replaying inherited turns @copyberry
- #34199 Avoid liveness races when starting side conversations @copyberry
- #34204 Avoid cloning buffered TUI history lines @copyberry
- #34206 Avoid retaining decoded MCP images in history cells @copyberry
- #34216 Speed up TUI Markdown layout @copyberry
- #34217 Keep incremental rendering with visualization context @copyberry
- #34218 Track TUI command completion separately from output @copyberry
- #34222 Avoid buffering replay-irrelevant thread notifications @copyberry
- #34223 Cache finalized Markdown history rendering @copyberry
- #34224 Avoid cloning file changes in TUI diff rendering @copyberry
- #34226 Backfill completion items only for the active exec turn @copyberry
- #34229 Persist names for paginated threads @copyberry
- #34232 Remeasure dynamic cells in the transcript overlay @copyberry
- #34234 Avoid redundant TUI subagent metadata requests @copyberry
- #34271 Migrate legacy exec policy allow rules @copyberry
- #34293 Preserve zsh tied PATH exports in shell snapshots @copyberry
- #34344 Reject unsupported history modes when loading rollouts @copyberry
- #34345 Remove unused Rust helpers @copyberry
- #34346 Track inline visualization directives during streaming @copyberry
- #34347 Avoid cloning deferred TUI lifecycle payloads @copyberry
- #34348 Cache TUI flex heights across frame passes @copyberry
- #34355 Parallelize TUI bootstrap requests @copyberry
- #34357 Render streamed command output through preview iterators @copyberry
- #34359 Keep streamed command output bounded in the TUI @copyberry
- #34361 Avoid cloning thread history for token usage replay @copyberry
- #34365 Animate Max and Ultra reasoning effort changes @copyberry
- #34366 Avoid cloning hyperlink text during TUI rendering @copyberry
- #34368 Use app-server skill metadata directly in the TUI @copyberry
- #34371 Clear stale Guardian reviews when turns end @copyberry
- #34375 Extend second-based latency histogram buckets @copyberry
- #34378 Avoid rendering generated images twice @copyberry
- #34380 Stop retrying turns with invalid tool images @copyberry
- #34381 Avoid cloning Responses WebSocket payloads @copyberry
- #34382 Keep paginated thread Git metadata in SQLite @copyberry
- #34383 Mark multi-agent v2 as stable @copyberry
- #34384 Update packaged ripgrep to 15.2.0 @copyberry
- #34385 Preserve audio across history and tool outputs @copyberry
- #34386 Enable memories for paginated threads @copyberry
- #34387 Refresh bundled model metadata @copyberry
- #34389 Route Codex Apps MCP through plugin service @copyberry
- #34390 Use copy-on-write storage for history snapshots @copyberry
- #34392 Ignore inherited ACEs when refreshing Windows write roots @copyberry
- #34393 Add configurable hook context spill limits @copyberry
- #34396 Run compact session-start hooks before turn continuation @copyberry
- #34400 Propagate approval rejection reasons @copyberry
- #34403 Update tests for history and hook API changes @copyberry
- #34407 Resolve paginated rollout lineages @copyberry
- #34408 Support threadless MCP connections without event channels @copyberry
- #34409 Limit the Linux
/procpreflight filesystem view @copyberry - #34411 Require absolute paths for test SQLite configuration @copyberry
- #34413 Remove CSV-backed agent jobs @copyberry
- #34416 Show completed hook warnings in TUI headers @copyberry
- #34417 Enrich app/read connector metadata @copyberry
- #34423 Support Windows sandboxing in the exec server @copyberry
- #34429 Move shared skill models into
codex-skills@copyberry - #34431 Optimize remote compaction history handling @copyberry
- #34434 Support catalog messages for non-request approval policies @copyberry
- #34435 Resolve outbound proxy routes explicitly @copyberry
- #34436 Honor managed permission profiles in network proxy resolution @copyberry
- #34438 Increase the patch approval test timeout @copyberry
- #34441 Add buffered code-mode exec yields @copyberry
-
ChatGPT for iOS 1.2026.195
New features
- Added support for rendering Mermaid diagrams inline in task transcripts.
- Added support for interactive forms in Codex tasks.
- Added support for restoring unsent prompts when switching between tasks, hosts, and workspaces.
Improvements and bug fixes
- Improved task lists to sort by recent activity and show unavailable hosts when creating a task.
- Improved the composer with selected-text previews and smoother new-task transitions.
- Improved goals with support for resuming blocked or usage-limited runs.
- Improved plan progress, Fast controls, and inline dictation.
- Improved Remote onboarding, composer guidance, and iPad navigation.
- Fixed an issue that could close the app when duplicate task-list entries appeared while starting a task.
- Fixed iOS 18 task actions and task-list styling.
- Fixed composer spacing, attachment menu padding, and duplicate transcription indicators.
-
Codex CLI 0.144.6
$ npm install -g @openai/codex@0.144.6View details
Bug Fixes
- Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009)
Changelog
Full Changelog: rust-v0.144.5...rust-v0.144.6
- #33972 Backport refreshed bundled model metadata to 0.144 @sayan-oai
- #34009 Narrow 0.144 hotfix to GPT-5.6 prompts and context @sayan-oai
-
Codex CLI 0.144.5
$ npm install -g @openai/codex@0.144.5View details
Bug Fixes
- Improved dangerous-command detection, including more forced
rmforms, and provides clearer rejection reasons when commands are denied. (#33455)
Changelog
Full Changelog: rust-v0.144.4...rust-v0.144.5
- #33455 [release/0.144] fix(core) expand is_dangerous_command @dylan-hurd-oai
- Improved dangerous-command detection, including more forced
-
Codex CLI 0.144.4
$ npm install -g @openai/codex@0.144.4View details
Chores
- No user-facing changes in this patch release.
Changelog
Full Changelog: rust-v0.144.3...rust-v0.144.4
-
ChatGPT for iOS 1.2026.188
New features
- Added support for inline visualizations in Codex tasks.
Improvements and bug fixes
- Improved creating and managing tasks from conversations, with reliable links to newly created tasks.
- Improved tool activity styling and progress indicators.
- Improved file-opening feedback.
- Improved the composer so controls remain visible above the keyboard for long prompts and larger text sizes.
- Fixed Fast mode selection and restoration for each task.
- Fixed initial prompts ignoring the selected approval preset.
- Fixed autocomplete backgrounds and task rows becoming unresponsive during swipe gestures.
-
Codex CLI 0.144.3
$ npm install -g @openai/codex@0.144.3View details
Chores
- Published a version-only release with no merged pull request changes since
rust-v0.144.2.
Changelog
Full Changelog: rust-v0.144.2...rust-v0.144.3
- Published a version-only release with no merged pull request changes since
-
Codex CLI 0.144.2
$ npm install -g @openai/codex@0.144.2View details
Bug Fixes
- Restored the previous Guardian auto-review policy, request format, and tool behavior after rolling back a prompting regression. (#32672)
Changelog
Full Changelog: rust-v0.144.1...rust-v0.144.2
- #32672 [release/0.144] Revert "Update auto review prompting" @dylan-hurd-oai
-
Codex joins the ChatGPT desktop app 26.707
Codex is now part of the ChatGPT desktop app on macOS and Windows. Existing Codex app users can update as usual and keep their projects, settings, and workflows. You can make Codex the default view and, on macOS, keep the Codex app icon.
New features
- Edit Markdown and code directly in the app, use inline annotations, and ask Codex to revise selected content.
- Use PR Chat to review GitHub pull requests and ask Codex about changes in context. Send inline review feedback, inspect proposed patches, and edit, accept, or reject them without leaving the app.
- Connect custom domains to published Sites.
Performance improvements and bug fixes
- Made Computer Use faster with GPT-5.6.
- Made task and subagent activity easier to follow while Codex works.
- Simplified plugin management by moving it into Settings.
- Improved permission handling when resuming tasks or sending follow-ups.
- Added clearer Full access warnings and a dialog when combining Full access with Ultra.
- Improved macOS and Windows setup, including macOS installation, Git-backed workflows, and Computer Use on Windows.
- Fixed task resumption for local projects and onboarding retry loops.
- Fixed scrolling in pull request reviews and expanded Mermaid diagram labels.
- Improved mobile connection reliability and fixed video rendering for SSH projects.
- Additional performance improvements and bug fixes.
-
Codex CLI 0.144.1
$ npm install -g @openai/codex@0.144.1View details
Bug Fixes
- Fixed standalone installs failing when GitHub returns compact or reordered release metadata. (#31913)
- Ensured macOS package installs expose the code-mode host alongside the
codexexecutable. (#31913) - Kept code mode working when the companion host binary is unavailable by falling back to the embedded runtime. (#31913)
Changelog
Full Changelog: rust-v0.144.0...rust-v0.144.1
- #31913 [0.144] Backport installer and code-mode reliability fixes @bolinfest
-
Codex CLI 0.144.0
$ npm install -g @openai/codex@0.144.0View details
New Features
- Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488)
- Added a
writesapp-approval mode that allows declared read-only actions while prompting for writes. (#30482) - MCP tools can now request authentication interactively without an experimental opt-in. (#28772)
- App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274)
- Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503)
- Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621)
Bug Fixes
- Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319)
- Fixed Code Mode crashes in Intel macOS release binaries. (#30953)
- Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574)
- Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494)
- Long-running app sessions now refresh expired authentication for the hosted
codex_appsconnector. (#31486) - Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622)
Documentation
- Device-code login warnings now explain how to recognize and stop phishing attempts. (#31648)
Chores
- Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#31348)
- Made the
/reviewbranch picker faster and more reliable in large repositories. (#31464) - Improved automatic review behavior with clearer instructions and a focused tool set. (#31480)
- Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#31636)
Changelog
Full Changelog: rust-v0.143.0...rust-v0.144.0
- #30292 Serialize shared MCP OAuth credential stores @stevenlee-oai
- #30488 [codex-cli] Show reset details in redemption picker @jayp-oai
- #31297 feat(core): emit canonical command execution items @owenlin0
- #31298 feat(core): emit canonical dynamic tool call items @owenlin0
- #31369 test(skills): cover plugin namespace loading @anp-oai
- #30953 fix(release): add missing Intel V8 signing entitlement @malsamiri-oai
- #31355 refactor: make ExternalAuth return CodexAuth @lt-oai
- #31352 ci: increase Windows Bazel local test jobs @anp-oai
- #30482 [codex-rs] Add writes app approval mode @zamoshchin-openai
- #31439 Handle bio policy errors in Codex @fc-oai
- #31319 [codex] add connector runtime latency metrics @mzeng-openai
- #31312 Use model catalog approval messages @dylan-hurd-oai
- #31422 test: generalize exec-server fixture @anp-oai
- #28772 [codex] Enable auth elicitation by default @mzeng-openai
- #28745 [login] support hosted success redirects @rafael-jac
- #31316 chore: extract remote compaction request attempts @celia-oai
- #31299 feat(core): emit canonical sub-agent activity items @owenlin0
- #31285 [1/5] [codex] sync managed-layer bundle schema @hefuc-oai
- #31300 feat(core): emit canonical collab tool call items @owenlin0
- #31301 feat(core): emit canonical collab wait items @owenlin0
- #30319 fix: retry rejected previous-model compaction with selected model @celia-oai
- #30879 Handle mixed-case URLs in Windows command safety @charliemarsh-oai
- #31191 Handle completion separators and popup dismissal @charliemarsh-oai
- #31425 test: add TestAppServer builder @anp-oai
- #31342 http-client: expose WebSocket proxy prerequisites @bolinfest
- #31348 perf(skills): resolve plugin namespaces per root @anp-oai
- #31289 Use canonical indexed web access field @winston-openai
- #31464 Speed up review branch picker via
for-each-ref@charliemarsh-oai - #31332 ci: parameterize Cargo target paths @anp-oai
- #31421 refactor: unify external auth resolution @pakrym-oai
- #31451 test: migrate TestAppServer callers to builder @anp-oai
- #31274 [codex] Add externally provided Codex auth @lt-oai
- #31501 trace hook command execution @wiltzius-openai
- #31356 ci: run V8 source builds on Windows 2025 @anp-oai
- #31283 core: support extension-owned turn items @owenlin0
- #31570 fs: support pruning hidden directories during walks @jif-oai
- #31465 Align empty branch list message with search @charliemarsh-oai
- #31586 Stabilize encrypted MAv2 spawn request test @jif-oai
- #31585 Stabilize remote compaction parity against dynamic skill catalogs @jif-oai
- #31518 Log plugin install failure subtypes @charlesgong-openai
- #31587 Stabilize shared rollout budget test @jif-oai
- #31503 Detect Codex installs managed by pnpm @charliemarsh-oai
- #31525 core: migrate standalone web search to extension-owned turn items @owenlin0
- #31473 feat(core): emit canonical review mode items @owenlin0
- #31452 test: remove TestAppServer constructors @anp-oai
- #31612 Round MCP timeout durations in error messages @jif-oai
- #31138 fix(windows-sandbox): allow deletion in writable roots @fcoury-oai
- #31500 code-mode: move to hosted mode by default @cconger
- #31494 tui: sanitize terminal controls in user messages @etraut-openai
- #31524 chore(protocol): use UUIDv7 for generated item IDs @owenlin0
- #31496 Fall back to HTTP when Apple Git is unavailable @fc-oai
- #31578 Bound exec-server pending RPCs @jif-oai
- #29875 [codex] Sanitize imported session fallback titles @stefanstokic-oai
- #31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai
- #31622 websocket-client: add proxy-aware connector @bolinfest
- #31574 [codex] Grant Windows sandbox access to primary runtime @abhinav-oai
- #31292 Reuse MCP tool snapshot within a sampling request @sayan-oai
- #31630 feat(core): emit canonical hook prompt items @owenlin0
- #31636 feat: change amazon Bedrock GPT-5.6 display names @celia-oai
- #31629 core: stop emitting legacy command events directly @owenlin0
- #31441 core: preserve Responses WebSockets with system proxy @bolinfest
- #31357 ci: route build IO through Dev Drives @anp-oai
- #31461 chore: remove inert cargo audit workflow @anp-oai
- #31614 test: migrate app-server v2 starts to auto env @anp-oai
- #31497 [codex] increase tool schema compaction threshold @fbauer33
- #31650 code-mode: make all approvals trigger elicitation pause @cconger
- #31648 Clarify device-code phishing warning @etraut-openai
- #31663 test(app-server): use native rollout fixture paths @fcoury-oai
- #31330 [codex-apps] Omit internal fields from file payloads @jacobzhou-oai
- #31480 Update auto review prompting @olliem-oai
- #21818 Update models.json @github-actions
- #31427 test: add delayed exec-server transport @anp-oai
- #30278 [codex] Preserve reviewer when resuming threads @viyatb-oai
- #31675 Expand agent core ownership @pakrym-oai
- #31486 [connectors] Refresh codex_apps /ps/mcp auth @stevenlee-oai
- #31361 model-provider: route model discovery through HTTP client factory @bolinfest
- #30188 feat(rollout): persist TurnItems for paginated thread rollouts @owenlin0
- #31596 Use the image generation extension by default @won-openai
- #31684 Update models.json @github-actions
-
Codex CLI 0.143.0
$ npm install -g @openai/codex@0.143.0View details
New Features
- Remote plugins are now enabled by default, with richer catalog rows, npm marketplace sources, and visible remote/local versions. (#30297, #26705, #29375, #30981)
- Codex can route authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations. (#26708, #26709, #31335)
- Added
codex remote-control pairfor generating manual pairing codes from a running daemon. (#29913) - Added Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models, with first-class support for
maxreasoning effort. (#30285, #30467) - MCP tools now use tool search by default, and ChatGPT-hosted MCP servers can explicitly use session authentication. (#29486, #29733)
- App-server clients can inspect environments, list descendant threads, and fork history through a specific turn. (#30291, #29591, #30277)
Bug Fixes
- Fixed Windows ConPTY input handling for line endings and backspace, plus sandbox credential retry edge cases. (#29734, #29624, #29637)
- Fixed stale TUI safety prompts and cancelled reviews that could leave MCP startup appearing busy. (#30490, #31189)
- Improved recovery when exec servers are temporarily offline and prevented remote-control token refresh retry storms. (#30098, #30201)
- Preserved trailing realtime transcript text and terminal rollout events during shutdown. (#29918, #30144)
- Improved incremental WebSocket request success by ignoring response metadata during comparisons. (#30770)
- Reduced installer failures from GitHub API rate limits by reusing release metadata. (#31056)
Documentation
- Documented UUID7 thread and turn IDs, plus recommended remote-executor integration-test workflows. (#27714, #29790)
Chores
- Updated OpenSSL, Hono, fast-uri, quick-xml, and crossbeam-epoch to address security advisories. (#29487, #29650, #30941, #31308)
Changelog
Full Changelog: rust-v0.142.0...rust-v0.143.0
- #26708 PAC 3 - Add Windows system proxy resolver @canvrno-oai
- #28769 Register full CDP requirements feature @syuan-oai
- #29485 [codex] fetch featured IDs for remote plugins @ericning-o
- #29487 Upgrade bundled OpenSSL to 3.6.3 @jif-oai
- #29489 [codex] Update esbuild to 0.28.1 @pakrym-oai
- #29488 [plugins] Add dark-mode logo metadata @drewschuster-openai
- #29249 [codex] migrate environment context to model world state @pakrym-oai
- #29494 core: wrap token budget window context @bolinfest
- #29417 [codex] replace remote images with model-visible error text @rka-oai
- #28360 feat(core): store turn_id on ResponseItem metadata @owenlin0
- #29486 [codex] Use tool search for MCP tools by default @sayan-oai
- #29501 path-uri: clarify host-native path conversion @anp-oai
- #29504 fix: world state response item test @celia-oai
- #26704 TUI Plugin Sharing 4 - cover remote plugin catalog flows @canvrno-oai
- #29419 [codex] reject remote images at app-server ingress @rka-oai
- #28992 chore: improve expired Bedrock credential errors @celia-oai
- #29467 Make formatter output quiet on success @anp-oai
- #26709 PAC 4 - Add macOS system proxy resolver @canvrno-oai
- #29490 chore: warn when Code Mode lacks model metadata @celia-oai
- #29493 mcp: accept foreign absolute cwd for remote stdio @anp-oai
- #29473 Propagate safety buffering treatment metadata @fc-oai
- #24092 [codex] Reject unlowered PowerShell AST regions @bookholt-oai
- #29155 [codex] Expose service tier and reasoning effort in OTEL @daniel-oai
- #29068 [codex] stylistic changes @rka-oai
- #29518 Remove redundant Codex Apps manager flag @aibrahim-oai
- #27946 [codex] Use input items for Responses Lite tools @rka-oai
- #29528 Centralize Codex Apps client handling @aibrahim-oai
- #29577 Handle additional tools in image URL validation @aibrahim-oai
- #29575 Remove redundant Codex Apps cache guard @aibrahim-oai
- #29583 Group Codex Apps client setup @aibrahim-oai
- #29358 Allow codex sandbox to consume MCP sandbox state @jif-oai
- #29599 Stop persisting bridged log events @jif-oai
- #29615 Fix Codex Apps auth elicitation hang @jif-oai
- #29067 Namespace multi-agent v2 tools under collaboration @jif-oai
- #29614 path-uri: add lexical containment @jif-oai
- #28426 Share resumed rollout history @charliemarsh-oai
- #29634 Update rmcp to 1.8.0 @jif-oai
- #29650 Update vulnerable Hono and fast-uri dependencies @jif-oai
- #29498 [codex] Instrument rollout persistence bytes @wiltzius-openai
- #29659 [core] debounce current-time reminders by elapsed time @rka-oai
- #29608 Shut down superseded MCP managers on refresh @jif-oai
- #29527 core: use turn-owned world state for inline compaction @sayan-oai
- #29672 [codex] Handle additional tools in rollout persistence metrics @rka-oai
- #29669 Handle additional tools in rollout persistence metrics @winston-openai
- #29680 Revert "Handle additional tools in rollout persistence metrics" @rasmusrygaard
- #27714 app-server: document thread and turn IDs are UUID7 @owenlin0
- #29456 Prepare managed network sandbox context @jif-oai
- #28418 chore(core) rm AskForApproval::OnFailure @dylan-hurd-oai
- #29675 core: add extra metadata field to Thread struct @kumquatexpress
- #29013 Keep managed MITM CA private keys in proxy memory @winston-openai
- #29495 Separate local and remote plugin analytics IDs @jameswt-oai
- #29671 [codex] Preserve proxy state for filesystem sandbox helpers @iceweasel-oai
- #29513 [codex] allow image generation with provider auth @richardopenai
- #29526 core: resolve view_image paths in selected environment @anp-oai
- #29696 [codex] Fix stale approval policy in MCP test @sayan-oai
- #29704 [codex] Fix stale approval policy in MCP test @kumquatexpress
- #29547 core: use current step environments for tools @sayan-oai
- #28976 Add MCP tool call error metrics @stevenlee-oai
- #27045 feat(guardian): include connected account email in app reviews @viyatb-oai
- #29620 Decouple plugin manifest path resolution @jif-oai
- #29666 [codex] Report the exec-server working directory @rasmusrygaard
- #29705 feat(app-server): thread/turns/items/list -> thread/items/list @owenlin0
- #29716 code-mode: Rename codex_code_mode::CodeModeService @cconger
- #29712 test: branch on target OS instead of runner flavor @anp-oai
- #29728 core tests: rename automatic environment builder @anp-oai
- #29158 path-uri: remove legacy path deserialization @anp-oai
- #29519 core: persist initial context window metadata @bolinfest
- #28918 Make selected plugin roots URI-native @jif-oai
- #29515 [codex] define code mode host handshake protocol @cconger
- #29715 [codex] surface rollout budget exhaustion @rka-oai
- #29732 code-mode: Remove Session::is_alive() @cconger
- #29626 Load executor skills without host path conversion @jif-oai
- #29714 protocol: separate app and exec RPC ownership @anp-oai
- #29664 refactor: extract context window token status @bolinfest
- #29665 fix: scope context remaining to body window @bolinfest
- #29744 [codex] rename rollout budget error to session budget error @rka-oai
- #29739 Update new_context_window instructions @andmis
- #29743 core: reset context for token budget compaction @bolinfest
- #29477 Support thread-level originator overrides @alexsong-oai
- #29745 core: add wait_for_environment for starting environments @sayan-oai
- #28630 [codex] trace MCP startup latency @rphilizaire-openai
- #29750 chore: assign
amsg_IDs to agent messages @bolinfest - #29746 test: add app-server auto environment helper @anp-oai
- #29711 Let image generation extension hosts control output persistence @won-openai
- #29762 [codex] Reuse compacted history replacement for new context windows @pakrym-oai
- #29768 [codex] Update bundled skill installer guidance @sayan-oai
- #29690 [plugins] Add marketplace source requirements @xl-openai
- #29765 [codex] Ignore local curated plugins when remote catalog is active @xl-openai
- #29767 [codex] Assign response item IDs in forked history @pakrym-oai
- #29721 auth: move domain mode below app wire types @anp-oai
- #29753 [plugins] Enforce marketplace source admission requirements @xl-openai
- #29722 config: own layer provenance types @anp-oai
- #29723 connectors: own app metadata types @anp-oai
- #29788 test: run app-server integration tests under Wine @anp-oai
- #29789 test: use automatic environments in app-server integration tests @anp-oai
- #29790 docs: document remote executor integration testing @anp-oai
- #29815 [codex] Remove auto-compaction opt-out @rhan-oai
- #29628 Keep executor plugin MCP paths URI-native @jif-oai
- #29731 [codex] Emit implicit skill usage for support reads @alexsong-oai
- #29829 Persist agent messages as response items @jif-oai
- #29841 Add a bounded filesystem walk RPC @jif-oai
- #29842 Use fs/walk for environment skill discovery @jif-oai
- #29567 [codex] show external import result counts @charlesgong-openai
- #29831 Cache plugin namespace during executor skill discovery @jif-oai
- #29720 ci: fail jobs that dirty the worktree @anp-oai
- #29887 Fix environment skill discovery after merge @jif-oai
- #29734 [codex] fix Windows ConPTY input handling @iceweasel-oai
- #28593 [codex] suppress low usage remaining warnings when credits are available @brooks-oai
- #29624 Preserve Windows sandbox identity during credential retry @jif-oai
- #27466 [codex] Trace exec-server JSON-RPC requests @richardopenai
- #29844 Follow directory symlinks in filesystem walks @jif-oai
- #29637 Skip credential refresh for WindowsApps launch failures @jif-oai
- #29591 feat(app-server): list descendant threads by ancestor @btraut-openai
- #28034 feat(network-proxy): experimental local credential broker @winston-openai
- #29736 [codex] Inject agent graph store into ThreadManager @wiltzius-openai
- #29889 [apps] Thread structured icon assets through app list @drewschuster-openai
- #29724 mcp: keep elicitation requests below app wire types @anp-oai
- #29684 [plugins] Track plugin install requests by ID @adaley-openai
- #29870 Pipeline bounded AGENTS.md and Git root probes @jif-oai
- #29893 [codex] dedupe remote control account header @shuo-openai
- #29851 Add a connector declaration snapshot @jif-oai
- #29903 path-uri: normalize parent segments in absolute joins @anp-oai
- #29852 Read connector declarations from executor plugins @jif-oai
- #29785 Isolate curated plugin sync Git environment @etraut-openai
- #29907 [codex] namespace sleep under clock @rka-oai
- #29910 [codex] nest sleep config under current time reminder @rka-oai
- #29913 feat(remote-control): add daemon pairing command @apanasenko-oai
- #29936 core: add configurable <context_window_guidance> message @bolinfest
- #26705 TUI Plugin Sharing 5 - polish remote plugin catalog rows @canvrno-oai
- #29733 Allow ChatGPT-hosted MCP servers to use session auth @aibrahim-oai
- #29833 [1/3] core: make world state snapshots serializable @sayan-oai
- #29919 TUI support for buffer experience @etraut-openai
- #29924 Represent MCP authentication with an enum @aibrahim-oai
- #29804 code-mode: define process host wire protocol @cconger
- #29956 [codex] Populate remote plugin local versions @abhinav-oai
- #29835 [2/3] core: persist world state in rollouts @sayan-oai
- #29899 [codex] Update reasoning effort @shijie-oai
- #29837 [3/3] core: replay persisted world state @sayan-oai
- #29969 Report MCP error codes with server attribution @aibrahim-oai
- #29970 core: raise token budget message limits @bolinfest
- #29973 [codex] route sleep through time providers @rka-oai
- #19051 feat: use run agent task auth for inference @adrian-openai
- #29810 core: make AGENTS.md react to environment changes @sayan-oai
- #29997 core: reconcile legacy WorldState sections @sayan-oai
- #29990 Parallelize environment skill loading @anp-oai
- #28522 Support HTTP MCP servers from selected executor plugins @jif-oai
- #28529 Support OAuth for HTTP MCP servers from selected executor plugins @jif-oai
- #29656 Test executor-routed MCP OAuth token exchange @jif-oai
- #29928 chore(app-server): mark thread/rollback as deprecated @owenlin0
- #29856 Persist selected capability roots and resolve availability per model step @jif-oai
- #27467 [codex] Record exec-server lifecycle metrics @richardopenai
- #29942 feat: add provider-aware model fallback to thread start @celia-oai
- #30095 cli: rename sandbox permission profile flag @bolinfest
- #30029 [codex] current time reminder interval to be set to 0 @rka-oai
- #29941 core: expose permission profile to shell tools @bolinfest
- #30031 [codex] add current time reminder delivery mode config @rka-oai
- #30098 [codex] Retry temporarily offline exec-server recovery @richardopenai
- #30033 [codex] impl delivery_mode: current time reminders on response boundaries @rka-oai
- #30108 [codex] extend code-mode host IPC transport @cconger
- #27470 [codex] Observe remote exec-server lifecycle @richardopenai
- #30113 [codex] poll external clock during sleep @rka-oai
- #29003 feat(core, mcp): cache codex_apps tools in memory @owenlin0
- #30114 release: publish standalone zsh artifacts @bolinfest
- #30116 release: consume standalone zsh artifacts @bolinfest
- #29648 [codex] Add managed MCP server matchers @felixxia-oai
- #30100 Let extensions contribute World State sections @jif-oai
- #30124 fix(app-server): suppress TUI rollback warning @fcoury-oai
- #29877 [codex] Surface MCP reauthentication-required startup failures @felixxia-oai
- #29988 Recognize Work web and mobile thread originators @chiam-oai
- #30110 [codex] add code-mode host failure supervision hooks @cconger
- #30088 Project executor skills through World State @jif-oai
- #30117 [codex] Propagate traces through exec-server HTTP @wiltzius-openai
- #30101 Pin MCP runtimes to model steps @jif-oai
- #30134 ci: narrow Windows test skips @anp-oai
- #30093 Project selected plugin runtime by environment availability @jif-oai
- #30145 Reuse walk inventory for environment skill metadata @jif-oai
- #30111 [codex] implement standalone code-mode process host @cconger
- #29935 [codex] Attribute app-server analytics by thread originator @alexsong-oai
- #30152 Reinject missing World State fragments on resume @jif-oai
- #30127 Keep MCP elicitation routable across runtime refreshes @jif-oai
- #29934 Expose MCP app identity in app context @martinauyeung-oai
- #29909 [codex] allow CCA image generation and web search extensions @won-openai
- #30157 Test selected capabilities across availability and resume @jif-oai
- #30144 [codex] fix terminal rollout event durability @wiltzius-openai
- #29920 Retry failed Codex Apps MCP startup @kbazzi
- #29516 Persist Cloudflare affinity cookies for MCP HTTP @stevenlee-oai
- #30112 [codex] add process-owned code-mode session client @cconger
- #30142 [codex] wire process-owned code mode host into core @cconger
- #30198 [codex] fix CreateThreadParams test initializer @anp-oai
- #30148 Reuse MCP runtimes when selected availability changes nothing @jif-oai
- #30215 Test selected capabilities across unavailable resume @jif-oai
- #29991 [codex] narrow unused skills intro export @aibrahim-oai
- #30229 Relax hooks.json top-level metadata validation @charlesgong-openai
- #29927 feat(app-server): add history_mode to thread @owenlin0
- #30276 fix main @owenlin0
- #29683 [codex] Add managed new-thread model settings @hefuc-oai
- #30225 Overlap executor skill reads with namespace discovery @jif-oai
- #30274 [codex] allow AGENTS.md and skills to authorize delegation @charlesdu-openai
- #30147 [codex] Use managed defaults for TUI threads @hefuc-oai
- #30261 ensure thread.history_mode is immutable @owenlin0
- #30277 feat(app-server): add optional turn_id to thread/fork @owenlin0
- #30143 Let Codex consult user-level code-review-* skills. @anp-oai
- #30285 feat: add GPT-5.6 variants to Bedrock catalog @celia-oai
- #30173 Close thread persistence when submission channel closes @alfozan
- #30257 [codex] Classify nested MCP authentication startup errors @felixxia-oai
- #29375 [codex] Support npm marketplace plugin sources @charlesgong-openai
- #30146 [codex] group blocking and postmerge CI workflows @anp-oai
- #30282 feat(protocol): define missing rollout turn items @owenlin0
- #30201 fix(remote-control): avoid server token refresh retry storms @apanasenko-oai
- #30273 [codex] consume pushed exec-server process events @richardopenai
- #30286 core: overlap diff root discovery with world state @anp-oai
- #30314 app-server: structure and test JSON shutdown logs @bolinfest
- #30317 Update security check wording @etraut-openai
- #30302 Preserve namespaces on custom tool calls @nhamidi-oai
- #30327 core: stabilize synthesized call output IDs @bolinfest
- #30291 [app-server] expose environment info RPC @maxj-oai
- #29691 [plugins] Enforce marketplace source policy at runtime @xl-openai
- #30384 [app-server] increase currentTime/read timeout @rka-oai
- #30297 [codex] Enable remote plugins by default @xl-openai
- #30490 fix(tui): clear completed safety buffering prompt @fcoury-oai
- #29740 [codex] Use model metadata for skills usage instructions @ani-oai
- #30511 [codex] Restore v1 delegation guidance @aibrahim-oai
- #30508 Revert "Make auto-review on-request prompt more proactive" @dylan-hurd-oai
- #30467 [codex] Treat max as a first-class reasoning effort @shijie-oai
- #30491 Update safety check links @etraut-openai
- #30607 [codex] auto-label AWS Bedrock issues @etraut-openai
- #30269 [codex] disable Nagle on Rendezvous WebSockets @richardopenai
- #30645 [codex] Update safety notice wording @etraut-openai
- #30757 fix(core) Remove full text websocket trace @dylan-hurd-oai
- #30851 docs: add tag to fenced code block @bolinfest
- #30643 [codex] bound Rendezvous WebSocket liveness @richardopenai
- #30867 Consolidate multi-agent v2 communication sends @bolinfest
- #30872 Log multi-agent communication lifecycle @bolinfest
- #30883 [codex] emit per-request TTFT completion telemetry @xli-oai
- #30897 Fix inherited availability metadata for Bedrock models @shijie-oai
- #30941 fix: address quick-xml security advisories @bolinfest
- #30770 fix(websockets) ignore metadata for incremental requests @dylan-hurd-oai
- #30334 telemetry: log structured direct tool-call timing @bolinfest
- #30493 [codex] Add configurable multi-agent mode hint text @shijie-oai
- #30796 Fix MIME types for path-backed feedback attachments @btraut-openai
- #31056 fix(install): reuse GitHub release metadata @bolinfest
- #30981 [codex] expose remote plugin versions @ericning-o
- #31066 chore: remove unused git-cliff configuration @bolinfest
- #31064 [codex] Read buffering metadata from response events @fc-oai
- #30223 Make plugin guidance react to environment readiness @sayan-oai
- #31189 Fix cancelled review leaving MCP startup busy @charliemarsh-oai
- #30876 [core] Support interleaved response items @alexi-openai
- #31262 [codex] Read retry model from buffering events @fc-oai
- #31261 Revert "[core] Support interleaved response items" @alexi-openai
- #31253 Emit exec-policy warnings for freshly loaded thread config @etraut-openai
- #31179 Remove TUI exec-policy core exports @etraut-openai
- #29959 Conditional codex_home dotenv @canvrno-oai
- #30627 elicitations: Move to shared ElicitationService @cconger
- #30318 core: trace executor skill discovery @anp-oai
- #31276 Revert "Conditional codex_home dotenv" @canvrno-oai
- #30956 refactor(protocol): isolate legacy item fanout @owenlin0
- #30395 [app-server] Include reset-credit details in rate limits @jayp-oai
- #31267 chore(approvals) consolidate guardian calls for shell tools @dylan-hurd-oai
- #31252 [tui] Truncate hook context in conversation history @abhinav-oai
- #29918 [codex] Flush trailing realtime transcript tail @guinness-oai
- #30226 Make Apps guidance react to MCP availability @sayan-oai
- #31190 Use popup token ranges for autocomplete insertion @charliemarsh-oai
- #29697 fix: attribut network requests to the exact exec on linux @jif-oai
- #31303 feat(code-mode): allow disabling V8 JIT @cconger
- #31271 chore: use .worktreeinclude for user Bazel config @anp-oai
- #31308 fix: update crossbeam-epoch for RUSTSEC-2026-0204 @cconger
- #30202 [codex] bundle code mode host in release packages @cconger
- #31293 [codex] app-server: expose plugin install policy source @ericning-o
- #31318 ci: share common workflow setup @anp-oai
- #29992 app-server: cover selected environments in integration tests @anp-oai
- #31284 Warn when configured service tiers are unsupported @etraut-openai
- #31323 Extract shared HTTP transport into codex-http-client @bolinfest
- #31331 Migrate direct HTTP consumers to codex-http-client @bolinfest
- #31337 fix: restore Codex environment setup table @anp-oai
- #31188 Preserve managed exec policy after rules parse errors @etraut-openai
- #31306 [codex] Support sequential cutoff reasoning summaries @ashwinnathan-openai
- #31344 exec-server: use virtual time in Noise relay test @bolinfest
- #31296 refactor(protocol): map canonical tool items to legacy events @owenlin0
- #31335 core: route Responses API through system proxy @bolinfest
-
ChatGPT for iOS 1.2026.181
New features
- Added support for creating, searching, opening, forking, and managing Codex tasks directly from a conversation.
- Added filters for staged, unstaged, branch, and last-turn changes, with controls for comparing branches.
- Added support for adding selected transcript text directly to the composer.
- Added previews for image and file attachments before sending.
- Added inline Photos and Camera pickers to the attachment menu.
- Added a connection shortcut and support for SSH hosts using private keys or no credentials.
- Added usage limits and credit details to the task menu.
Improvements and bug fixes
- Improved the task list with consistent task terminology, clearer delegated task titles, and a Needs input status.
- Improved initial task loading and foreground recovery.
- Improved autocomplete by selecting the first result automatically and accepting it with Return.
- Improved model, reasoning, and Fast settings so changes remain scoped to the current task.
- Improved task-management and dynamic tool activity presentation.
- Improved side chats to open directly when only one conversation is available.
- Improved plugin autocomplete with installed plugins and their icons.
- Improved workspace diff accuracy and expand-and-collapse navigation.
- Improved recovery by preserving thread state across reconnects and host pairings across sign-out.
- Fixed stuck thread-list loading, prompt mode deadlocks, stale images, and microphone permission alerts.
- Fixed shake to undo and keyboard refocusing after sending a prompt.
-
Codex CLI 0.142.5
$ npm install -g @openai/codex@0.142.5View details
Bug Fixes
- Prevented full Responses WebSocket request payloads from being written to trace logs. (#30771)
Changelog
Full Changelog: rust-v0.142.4...rust-v0.142.5
- #30771 [codex] Backport websocket trace fix to release/0.142 @dylan-hurd-oai
June 2026
-
Codex CLI 0.142.4
$ npm install -g @openai/codex@0.142.4View details
Chores
- No user-facing changes were identified for this release.
Changelog
Full Changelog: rust-v0.142.3...rust-v0.142.4
-
Codex CLI 0.142.3
$ npm install -g @openai/codex@0.142.3View details
Chores
- Maintenance-only patch release with no user-facing changes since 0.142.2.
Changelog
Full Changelog: rust-v0.142.2...rust-v0.142.3
-
Codex Remote reaches general availability 26.623
Codex Remote has reached general availability. Use Codex from the ChatGPT mobile app to start or continue work on a connected Mac or Windows host, review progress, and approve actions from your phone.
Remote Control now uses authenticated one-to-one QR pairing between each iOS or Android device and each host. Update the ChatGPT mobile app and Codex App to the latest versions before connecting. Connections used since June 8, 2026, remain paired; older inactive connections need to pair again.
The new DigitalOcean plugin lets Codex provision a DigitalOcean Droplet, configure SSH access, and connect it to the Codex App as a remote workspace.
See Remote connections for setup and troubleshooting.
Performance improvements and bug fixes
- Improved recovery after a remote connection drops and reconnects.
- Restored the message composer immediately after connecting an app.
- Reduced browser flashing when Codex takes screenshots.
-
Codex CLI 0.142.2
$ npm install -g @openai/codex@0.142.2View details
New Features
- MCP tools now use tool search by default when supported, improving tool discovery while preserving compatibility with older models and providers. (#29486)
- macOS authentication clients can honor system proxy, PAC, and WPAD settings when
respect_system_proxyis enabled. (#26709) - Plugins can provide dedicated dark-mode logos through local manifests and remote catalogs. (#29488)
- Apps can display richer safety-buffering UI using server-provided visibility and faster-model metadata. (#29473)
Bug Fixes
- Remote plugin catalogs now return curated featured-plugin rankings. (#29485)
- Expired Amazon Bedrock credentials now produce actionable recovery guidance instead of a generic authorization error. (#28992)
- Remote stdio MCP servers now accept absolute working directories written in the remote platform’s path format. (#29493)
- Remote HTTP(S) image inputs now return clear model-visible validation errors; inline data URLs and local images remain supported. (#29417, #29419)
- PowerShell commands containing executable AST regions the safety classifier cannot inspect now require approval. (#24092)
- Code Mode now warns when the selected model lacks the required metadata. (#29490)
Chores
- Updated bundled OpenSSL and esbuild dependencies to patched releases. (#29487, #29489)
- Successful formatter runs are now quiet while failures still show diagnostics. (#29467)
Changelog
Full Changelog: rust-v0.142.1...rust-v0.142.2
- #28769 Register full CDP requirements feature @syuan-oai
- #29485 [codex] fetch featured IDs for remote plugins @ericning-o
- #29487 Upgrade bundled OpenSSL to 3.6.3 @jif-oai
- #29489 [codex] Update esbuild to 0.28.1 @pakrym-oai
- #29488 [plugins] Add dark-mode logo metadata @drewschuster-openai
- #29249 [codex] migrate environment context to model world state @pakrym-oai
- #29494 core: wrap token budget window context @bolinfest
- #29417 [codex] replace remote images with model-visible error text @rka-oai
- #28360 feat(core): store turn_id on ResponseItem metadata @owenlin0
- #29486 [codex] Use tool search for MCP tools by default @sayan-oai
- #29501 path-uri: clarify host-native path conversion @anp-oai
- #29504 fix: world state response item test @celia-oai
- #26704 TUI Plugin Sharing 4 - cover remote plugin catalog flows @canvrno-oai
- #29419 [codex] reject remote images at app-server ingress @rka-oai
- #28992 chore: improve expired Bedrock credential errors @celia-oai
- #29467 Make formatter output quiet on success @anp-oai
- #26709 PAC 4 - Add macOS system proxy resolver @canvrno-oai
- #29490 chore: warn when Code Mode lacks model metadata @celia-oai
- #29493 mcp: accept foreign absolute cwd for remote stdio @anp-oai
- #29473 Propagate safety buffering treatment metadata @fc-oai
- #24092 [codex] Reject unlowered PowerShell AST regions @bookholt-oai
-
ChatGPT for iOS 1.2026.167
New features
- Added per-host personality settings with Friendly and Pragmatic options.
- Added support for editing goals directly in the composer.
- Added a link from forked conversations back to the original thread.
Improvements and bug fixes
- Improved side chat visibility with separate conversations above the composer.
- Improved composer autocomplete for commands, skills, and plugins from any prefix.
- Improved progress visibility for subagents, tasks, and worktree creation.
- Fixed long threads loading.
- Improved workspace file search, code review drafts, steering, and host setup and recovery.
- Fixed Face ID unlocking, stopping responses, collapsed sections, and dark-mode host indicators.
-
Record & Replay and remote task handoff 26.616
New features
- Added Record & Replay, a macOS feature that turns a demonstrated workflow into a reusable skill. Initial availability excludes the European Economic Area, the United Kingdom, and Switzerland. You or your administrator must also enable Computer Use.
- Added bulk actions to automation run history so you can mark every run as read or archive eligible runs.
- Added thread handoff between local and remote hosts, so you can move a thread to a matching project on a connected host and continue it there. Codex can also coordinate the handoff for you.
Performance improvements and bug fixes
- Added new deep links to manage SSH connections.
- Improved Browser Use so visible-tab routing and annotations persist when a draft browser session moves to the server.
- Additional performance improvements and bug fixes.
-
More Codex features in the EEA, UK, and Switzerland 26.611
More Codex app capabilities are rolling out to users in the European Economic Area, the United Kingdom, and Switzerland:
- Computer Use is available on macOS and Windows in these regions, so Codex can operate desktop apps by seeing, clicking, and typing.
- The Codex Chrome extension is available for browser tasks that need signed-in Chrome context, working across tabs in the background without taking over your browser.
- Memories can remember useful preferences, recurring workflows, tech stacks, and repository conventions when enabled. Memories are off by default in the European Economic Area, the United Kingdom, and Switzerland.
- Chronicle is available as an opt-in research preview for ChatGPT Pro subscribers on macOS, helping Codex build memories from recent screen context.
-
ChatGPT for iOS 1.2026.160
New features
- Added a workspace file browser for previewing files and linking workspace paths into prompts.
- Added a directory picker for choosing a workspace folder when starting a new thread.
- Added controls to expand or collapse all diffs while reviewing changed files.
- Added MCP approval choices for allowing requested actions in the current chat or across chats.
- Added LaTeX rendering in Codex messages and plans.
Improvements and bug fixes
- Improved status indicators for running threads, queued prompts, side chats, and subagents.
- Improved pairing and onboarding with clearer errors, manual pairing-code support, and more reliable host selection after pairing.
- Improved task-list recovery, reconnect state, host-specific refresh, and thread performance.
- Improved Codex profile sharing, activity history, and settings layout.
- Improved goal workflows with a composer shortcut, desktop-aligned goal message actions, and better resumed question handling.
- Improved assistant message actions, transcript layout, and public rate-limit names.
- Fixed stuck thread-list swipe actions, duplicate messages when reopening a new thread, spawned subagents appearing as top-level task rows, and misleading connection errors when sending prompts.
-
Usage resets and Browser Developer mode 26.609
New features
- Added rate-limit reset banking for Plus and Pro users, including one free reset at launch and referral invitations for earning more during the current promotion. Eligible Business members can invite coworkers to earn shared workspace credits through a separate referral program.
- Added Developer mode for Browser use in Chrome and the Codex in-app browser. It gives Codex controlled Chrome DevTools Protocol (CDP) access for performance profiling and deeper debugging of network traffic, console output, runtime errors, and page state.
- Added the
/initcommand to the app composer for creating project instructions with the same initialization workflow as the Codex CLI. - Added customizable macOS Dock icons with light and dark Codex variants.
- Added Computer Use for Enterprise users outside the European Economic Area, the United Kingdom, and Switzerland.
- Added support for configuring per-app access controls for Computer Use on Windows.
- Added an Unread chats section to the command menu, with the most recently updated unread chat selected by default.
Performance improvements and bug fixes
- Made Browser use up to 2x faster through CDP and DOM snapshot optimizations that reduce browser round trips.
- Made command, browser, integration, and source activity summaries easier to understand, and improved how completed chats present files, automations, and other durable output.
- Improved plugin management by including workspace plugins, refreshing plugin state more reliably after installation or removal, and letting you upload a new version of an already-shared plugin without changing its access.
- Improved usage-limit errors with inline plan and workspace guidance, including reset timing when available.
- Added Cmd+Enter and Ctrl+Enter as shortcuts for submitting custom approval feedback.
- Fixed Browser use download handling and improved Developer mode recovery and diagnostics.
- Fixed scheduled automations so they honor the selected approval mode, and fixed manual project ordering, Browser tab dragging, MCP app sizing after right-pane transitions, and clickable ChatGPT thread mentions.
- Fixed issues affecting background agent tab restoration, commit and pull request message generation, sidebar pull request status updates, Codex Mobile QR pairing, remote-control MFA, remote SSH installation and connection, updater prompts, and overlay positioning at non-default zoom levels.
- Additional performance improvements and bug fixes.
-
Codex app 26.608
New features
- Added Import to Codex flows for importing supported setup from Claude Code and Claude Cowork, including during onboarding.
- Revamped plugins screen with separate tabs, marketplace and category filters, keyboard navigation, and clearer install actions.
- Expanded Settings search to find options from more panels, including Git and pets.
Performance improvements and bug fixes
- Fixed goal timer overlap in narrow layouts.
- Reduced unread notifications while an active goal continues running.
- Kept review diff ordering consistent with the file tree.
- Improved window rendering on systems that don’t support translucent backdrops, including Windows 10.
- Additional performance improvements and bug fixes.
-
ChatGPT for iOS 1.2026.153
New features
- Added support for choosing a branch, creating a worktree, and running an environment setup script for new threads.
- Added a Codex profile screen with usage stats and token activity charts.
- Added
/goalsupport for creating and managing goals from Codex Mobile. - Added inline review comments when viewing changed files.
- Added support for asking in side chat from selected transcript text.
- Added support for editing the latest sent prompt.
Improvements and bug fixes
- Improved attachment support on Windows hosts.
- Skills and plugins now appear directly inline in the composer.
- Improved side chat and queued prompt visibility while a thread is running.
- Improved message styling, navigation, tool activity, Face ID behavior, archived-thread browsing, and thread UI polish.
-
Codex app updates 26.602
New features
- Added activity insights and share cards to the Profile section. You can review Codex usage highlights and save a profile card; sharing is available on consumer ChatGPT plans.
Performance improvements and bug fixes
- Improved Computer Use startup readiness and appshot error reporting.
- Fixed browser and review UI issues, including fullscreen browser composer controls, hex color swatches, terminal scrollbar alignment, and animated diff stat alignment.
- Expanded onboarding with more role choices so Codex can tailor first-run suggestions more accurately.
- Fixed configuration writes after plugin installation.
- Additional performance improvements and bug fixes.
-
Build and deploy websites with Sites
Sites is now available in preview in the Codex app. Use the Sites plugin to create, save, deploy, and inspect websites, dashboards, internal tools, web apps, and games hosted by OpenAI.
Open Sites in the app sidebar to return to your projects and manage hosted environment variables and secrets.
ChatGPT Business workspaces include Sites by default. ChatGPT Enterprise admins can enable Sites for the appropriate roles through role-based access control (RBAC).
-
ChatGPT for iOS 1.2026.146
New features
- Added an optional Face ID or passcode lock for Codex.
- Added a new settings screen for choosing Queue or Steer as the default follow-up behavior and toggling line wrapping for code diffs.
- Added support for connecting to Windows machines over SSH.
Improvements and bug fixes
- Added support for
/side <prompt>to start a side conversation with an initial question. - Improved follow-up prompts, the Codex home screen, and viewing changed files.
- Fixed issues with reconnecting, archiving threads, loading tasks, and connecting to hosts.
-
Use Codex with Amazon Bedrock
Codex can now use supported OpenAI models available through Amazon Bedrock. Configure Amazon Bedrock as your model provider to run Codex locally with AWS-managed authentication, account controls, and billing.
-
Terminal placement controls 26.601
New features
- Added Default terminal location in General settings. When the bottom panel is enabled, choose whether the terminal shortcut and environment actions open terminal tabs in the bottom panel or the right panel.
Performance improvements and bug fixes
- Additional performance improvements and bug fixes.
May 2026
-
Computer use and mobile access on Windows 26.527
New features
- Computer Use now works on Windows. Codex can operate Windows desktop apps by seeing, clicking, and typing in the foreground while it works.
- Remote control now supports Windows devices. You can start Codex work on a Windows device from ChatGPT on iOS or Android, or from a Mac running Codex, and check its progress remotely.
- The Profile section now shows your profile details, usage stats, and token activity.
- Added thread coordination for local projects and worktrees, including separate background threads when explicitly requested.
- Expanded search for past Codex app threads to include conversation content and Git branch names.
- Added stable identicons for background subagents across the app.
- Improved keyboard shortcut settings with keypress search and a reset-all action.
- Improved Chrome context capture for Google Docs, Sheets, and Slides tabs.
Performance improvements and bug fixes
- Additional performance improvements and bug fixes.
-
GPT-5.3-Codex and GPT-5.2 deprecated
GPT-5.3-Codex and GPT-5.2 are now deprecated as user-selectable models in Codex for users signed in with ChatGPT. API-key workflows aren’t affected.
Use a current Codex model, such as GPT-5.5, GPT-5.4, or GPT-5.4 mini. See Codex models for model availability and Codex pricing for credit rates.
-
ChatGPT for iOS 1.2026.139
New features
- Added Spotlight and Shortcuts support for opening Codex Mobile directly.
- Added browsing for archived Codex threads.
- Added
/sidefor opening a side conversation. - Added options to save or copy rendered images.
Improvements and bug fixes
- Improved iPad keyboard shortcuts.
- Improved setup and relaunch reliability.
- Fixed issues with task progress, loading archived threads, previewing code changes, and switching hosts.
-
Appshots, goal mode, and more 26.519
Appshots are now available in the Codex app on macOS. Press both Command keys to send the frontmost app window to Codex with a screenshot and available text, so Codex can work from context in another app without you copying, pasting, or describing it manually.
This launch also includes:
- Goal mode is no longer an experimental feature and is available in the Codex app, IDE extension, and CLI. With Goal mode, you can have Codex drive toward a specific objective for hours or even days.
- Remote computer use, so Codex can use desktop apps after your Mac locks, including remotely via Codex Mobile. Codex scopes locked use to active, trusted computer use turns and includes safeguards such as short-lived authorization, covered displays, relock on local input, and manual-unlock fallback.
- Plugin sharing through marketplace sources is available for ChatGPT Business. Enterprise support is coming soon. Teams can distribute reusable plugin bundles that include skills, MCP servers, and lifecycle hooks.
- Advanced in-app browser annotations let you tweak styling such as font size, colors, and spacing directly using annotations. This gives Codex a clearer signal for changes.
- Browser-use improvements across in-app browser & Chrome:
- Codex can now download and extract all image assets from a page much more quickly.
- Codex can now extract structured data from pages more effectively and find information more quickly with a read-only JS sandbox.
- Chrome extension will create less clutter when using it. Codex will no longer create tab groups when taking over existing tabs, and at the end of a task for handoff. Instead, it uses tab icons to indicate status.
- Significantly improved reliability for browser use. We fixed bugs on Windows, flaky availability of the plugin to non geo-blocked regions, and many other issues impacting performance.
-
ChatGPT for iOS 1.2026.132
New features
- Added support for opening completed Codex tasks directly from iOS notifications.
- Added the ability to open changed files directly while reviewing a task.
Improvements and bug fixes
- Improved task resume, reconnection, and foreground reliability.
- Improved task progress updates, code review, and message composition.
-
Work with Codex from anywhere 26.513
You can now use Codex from the ChatGPT mobile app by connecting it to a Mac running the Codex app. Codex runs from the connected host, so the same projects, files, credentials, plugins, skills, and configuration are available from your phone.
See Remote connections for mobile setup, choosing a host, what comes from the connected machine, and SSH hosts. This launch also includes Hooks general availability, Codex access tokens for trusted automation, and Enterprise admin setup guidance.
-
Expanded Auto-review documentation
Added a dedicated Auto-review page covering the reviewer lifecycle, trigger conditions, failure behavior, and local or managed configuration.
Also updated the Agent approvals & security and Sandbox docs so they explain more clearly how Auto-review relates to the sandbox boundary.
-
Codex app 26.506
New features
- Added an in-app trust review flow for hooks and kept Hooks settings reachable even before hooks are fully configured.
Performance improvements and bug fixes
- Restored tooltip-wrapped dropdowns that could stop opening after the tooltip rewrite.
- Preserved in-progress message edits across thread switches.
- Fixed several desktop workflow regressions, including
Ctrl+Vpaste in the Windows terminal, opening modified external links outside the in-app browser, and keeping feedback slash commands attached to the right thread. - Improved loading and panel polish by showing model loading while a thread resumes, hiding unavailable model controls during load, and bundling summary-panel layout and hover fixes.
- Kept the Computer Use settings control visible even when uninstalled and disabled problematic extension hover panels.
- Additional performance improvements and bug fixes.
-
Codex for Chrome
With the new extension for Chrome, Codex is even better at working with apps and websites in your browser. It works in parallel across tabs in the background without taking over your browser, and you stay in control of which websites Codex can use.
Learn more in the Codex Chrome extension documentation.
-
Codex analytics governance docs update
Updated the Codex enterprise governance guide with more detailed coverage of the Analytics dashboard charts, data export options, and enterprise Analytics API endpoints.
-
Create Codex access tokens
ChatGPT Enterprise workspace owners and admins can allow permitted members to create Codex access tokens for trusted, non-interactive Codex local workflows. Members can use access tokens to run Codex from scripts, schedulers, and private CI runners with their ChatGPT workspace identity.
Learn more in Access tokens.
-
Codex app 26.429
New features
- Added dictation cleanup plus a configurable dictation dictionary for names, file paths, and code symbols.
- Added zoom and download controls to the image lightbox.
Performance improvements and bug fixes
- Improved voice and dictation error messages for microphone, connection, and quota failures.
- Fixed in-app browser comment markers so they stay aligned across scrolling, zoom, and responsive layout changes.
- Made pull request creation and recovery flows more reliable by preserving newly created pull request state, classifying more app-server failures as restart-required, and stopping exhausted remote reconnect loops.
- Additional performance improvements and bug fixes.
April 2026
-
Codex app 26.423
New features
- Added a tooltip on realtime delegation messages to clarify that Codex uses the surrounding voice conversation as context.
Performance improvements and bug fixes
- Fixed search in long review files so next and previous results reliably jump to off-screen matches.
- Kept embedded MCP app panels from restarting or losing state during fullscreen changes and thread reloads.
- Fixed several desktop regressions, including tray crashes when the local connection is missing, duplicate macOS fullscreen menu entries, and broken global dictation hotkeys on older macOS versions.
- Additional performance improvements and bug fixes.
-
GPT-5.5 and Codex app updates 26.422
GPT-5.5 is now available in Codex as OpenAI’s newest frontier model for complex coding, computer use, knowledge work, and research workflows.
GPT-5.5 in Codex
GPT-5.5 is the recommended choice for most Codex tasks when it appears in your model picker. It’s especially useful for implementation, refactors, debugging, testing, validation, and knowledge-work artifacts.
To switch to GPT-5.5:
- In the CLI, start a new thread with:
Or usecodex --model gpt-5.5/modelduring a session. - In the IDE extension, choose GPT-5.5 from the model selector in the composer.
- In the Codex app, choose GPT-5.5 from the model selector in the composer.
If you don’t see GPT-5.5 yet, update the CLI, IDE extension, or Codex app to the latest version. During the rollout, continue using GPT-5.4 if GPT-5.5 is not yet available.
Browser use in the Codex app
The Codex app can now let Codex operate the in-app browser for local development servers and file-backed pages. Ask Codex to use the browser when it needs to click through a rendered UI, reproduce a visual bug, or verify a local fix inside the app.
Browser use runs through the bundled Browser plugin. In settings, you can manage the plugin and review allowed or blocked websites.
Automatic approval reviews
Codex can route eligible approval prompts through an automatic reviewer agent before the request runs. When configured, the Codex app shows an automatic review item with the review status and risk level, so you can see whether the reviewer approved, denied, stopped, or timed out before deciding.
Performance improvements and bug fixes
- Fixed duplicate queued follow-up messages across app windows.
- Fixed new chats reverting to outdated model and thinking settings.
- Kept edits to the same file grouped together after reopening a chat.
- In the CLI, start a new thread with:
-
Codex app 26.417
New features
- Added local branch search and non-image file pasting in the composer.
- Added collapsible sidebar sections, tray usage-limit surfacing, and a command-palette theme switcher.
Performance improvements and bug fixes
- Made review faster and more stable with better diff batching and preserved diff and search state.
- Fixed projectless cwd and permissions handling, default file opening, spreadsheet suggestions, and remote-control reconnect issues.
- Additional performance improvements and bug fixes.
-
Codex can now help with more of your work 26.415
Codex is becoming a broader workspace for getting work done with AI. This update makes it easier to start work with less setup, verify what Codex is building, create richer outputs, and keep momentum across longer-running tasks.
Verify more of your work
The Codex app now includes an early in-app browser. You can open local or public pages that don’t require sign-in, comment directly on the rendered page, and ask Codex to address page-level feedback.
Computer use lets Codex operate macOS apps by seeing, clicking, and typing, which helps with native app testing, simulator flows, low-risk app settings, and GUI-only bugs.
The feature isn’t available in the European Economic Area, the United Kingdom, or Switzerland at launch.
Start, follow, and steer work
Chats are threads you can start without choosing a project folder first. They’re useful for research, writing, planning, analysis, source gathering, and tool-driven work that doesn’t begin in a codebase.
For work that needs a later check-in, thread automations can wake up the same thread on a schedule while preserving the conversation context. Use them to check a long-running process, watch for updates, or continue a follow-up loop without starting from scratch.
The task sidebar makes plans, sources, generated artifacts, and summaries easier to follow while Codex works. Context-aware suggestions can also help you pick up relevant follow-ups when you start or return to Codex.
Stronger for software development
Codex now brings more of the pull request workflow into the app. You can inspect GitHub pull requests in the sidebar, review comments in the diff, review changed files, then ask Codex to explain feedback, make changes, check them, and keep the review moving.
Review richer outputs
The artifact viewer can preview generated files such as PDF files, spreadsheets, documents, and presentations in the sidebar before you commit or share them. Memories, where available, can also carry useful context from past tasks into future threads, including stable preferences, project conventions, and recurring work patterns.
Other features
- Remote connections - We’re gradually rolling out SSH remote connections in alpha
- Support for multiple terminals
- macOS menu bar and Windows system tray support
- Multi-window support
- Intel Mac support
- New plugins
- Improved thread and tool rendering
-
Codex app 26.410
New features
- Added command-menu file search, including
Cmd+Prouting into workspace file search. - Added rich previews in the sidebar file viewer for images, PDFs, and Markdown.
- Added terminal tabs per thread, a selected-text Ask Codex overlay, and a Help menu feedback entry.
Performance improvements and bug fixes
- Improved review diff whitespace handling and search highlighting.
- Fixed in-app browser address bar and external-open issues, plus several file viewer and side-panel bugs.
- Additional performance improvements and bug fixes.
- Added command-menu file search, including
-
Codex app 26.409
New features
- Added Windows Store updater support.
- Expanded pull request workflows with an activity timeline, PR-page commenting, and push choices in the push modal.
- Added workspace file tabs in the thread side panel, drag-and-drop tab reordering, run action editing, and a logout confirmation dialog.
Performance improvements and bug fixes
- Improved pull request board performance and comment flyouts.
- Improved update and navigation resilience, and fixed projectless visibility, unread-state, and pinned-row edge cases.
- Additional performance improvements and bug fixes.
-
Codex app 26.406
New features
- Added collapsible inline review comments and inline or detached review modes.
- Added a Git summary and Sources section in the thread side panel.
- Added a New Quick Chat command and local video embeds in the app.
Performance improvements and bug fixes
- Preserved thread scroll position per conversation and unread state across windows.
- Improved review refresh reliability, and fixed dictation loss, right-panel reset, and GitHub reconnect messaging.
- Additional performance improvements and bug fixes.
-
Codex model availability update
We’re updating model availability for users who sign in with ChatGPT. Starting April 7, the model picker no longer shows
gpt-5.2-codex,gpt-5.1-codex-mini,gpt-5.1-codex-max,gpt-5.1-codex,gpt-5.1, orgpt-5. On April 14, we’ll remove those models from Codex for ChatGPT sign-in.Users can still choose from
gpt-5.4,gpt-5.4-mini,gpt-5.3-codex, andgpt-5.2. ChatGPT Pro users can also choosegpt-5.3-codex-spark.To use another API-supported model in Codex, sign in with an API key or configure a model provider.
-
Codex app 26.325, 26.331, 26.401
New features
- Added workspace settings to the app.
- Added “Don’t ask again” handling and polish for custom MCP approval panels.
- Added native Windows updater support, including MSIX support, plus a Windows system tray menu so Codex can stay resident after the last window closes.
- Added app and file
@mentions in the automation composer, surfaced subagent diff stats in the composer, and added artifact cards for generated file citations. - Added a Quick Chat app-menu shortcut, a review file tree open menu, early heartbeat automation affordances in threads, and image support for remote connections.
Performance improvements and bug fixes
- Fixed review panel scroll jumps and PR status actions while a conversation is still running.
- Fixed several multi-window issues, plus
@-mention results, duplicate project labeling, WindowsrunGitbehavior, and revert, unstage, and stage-all actions. - Improved remote-thread and sidebar polish, Windows update recovery, unsupported-version guidance, and overall thread search speed.
- Fixed sticky review issues such as diff hunk expansion, header overlap, archive-thread crashes, and window-zoom shell sizing.
- Additional performance improvements and bug fixes.
March 2026
-
Build and install plugins in Codex
Codex now supports plugins: installable bundles that package skills, app integrations, and MCP server configuration for reusable workflows.
Plugins are available in the Codex app, CLI, and IDE extensions.
You can install curated plugins from the plugin directory, or scaffold a local plugin with
@plugin-creatorand test it with workspace-scoped or home-scoped marketplaces.Learn more in the plugins documentation.

Plugin structure
Every plugin is a folder with a required
.codex-plugin/plugin.jsonmanifest and optional supporting files:my-plugin/ .codex-plugin/ plugin.json # Required: plugin manifest skills/ # Optional: packaged skills .app.json # Optional: app or connector mappings .mcp.json # Optional: MCP server configuration assets/ # Optional: icons, logos, screenshotsInstall plugins per-user or per-repo
You can install plugins for just yourself with
~/.agents/plugins/marketplace.jsonand~/.codex/plugins/, or for everyone on a project with.agents/plugins/marketplace.jsonand a repo-local plugin directory such as./plugins/.Curated plugins and local development
Codex surfaces curated public plugins in the plugin directory. Codex also ships with the built-in
@plugin-creatorskill to help you scaffold a plugin, add a local marketplace entry, and test it before sharing it with teammates. -
Codex app 26.324
New features
- Redesigned the skills and plugins browse and manage pages.
- Added per-window zoom and a clearer edited-files state in review.
- Added automation titles and icons in the sidebar, plus bundled Raycast themes.
Performance improvements and bug fixes
- Kept loaded threads and projects visible during reconnects and made navigation feel faster.
- Fixed archive freezes, markdown wrapping, hotkey-window regressions, and several permissions, terminal, and worktree issues.
- Additional performance improvements and bug fixes.
-
Codex app 26.323
New features
- Added search for past Codex app threads, including a sidebar shortcut and keyboard shortcuts for jumping to recent threads.
- Added a one-click option to archive all local threads in a project.
- Synced key settings between the Codex app and the VS Code extension, and added a settings entry point in the extension.
Performance improvements and bug fixes
- Additional performance improvements and bug fixes.
-
Codex app 26.320
New features
- Added Floating Composer v2.
- Added terminal shortcuts for jumping by word and line.
- Improved plugin discovery surfaces and file-path rendering for saved images.
Performance improvements and bug fixes
- Fixed sidebar crashes when subagent turn items are missing.
- Fixed pop-out thread routing and preserved local paths for composer image attachments.
- Additional performance improvements and bug fixes.
-
Codex app 26.318, 26.319
New features
- Added skills to the
@menu so you can insert them from the composer alongside other mentions. Cmd/Ctrl+Fnow starts with your current text selection, which makes searching reviews and diffs faster, alongside broader review navigation improvements such as a refreshed file tree and percentage-based file tree resizing.- Added a branded loading shimmer while the app starts.
Performance improvements and bug fixes
- Improved collapsed diff summaries in review.
- Fixed slash-command focus and composer alignment issues, and polished plugin cards and step details.
- Additional performance improvements and bug fixes.
- Added skills to the
-
Codex app 26.317
New features
- You can now fork a conversation from an earlier message, not just the latest turn.
- Added slash commands for switching models and reasoning levels, and made slash commands work in the middle of a draft prompt.
- Added notifications for plan mode questions so it’s easier to notice when Codex needs input.
Performance improvements and bug fixes
- Fixed thread handoff and subagent navigation issues across worktrees and the VS Code extension.
- Additional performance improvements and bug fixes.
-
Introducing GPT-5.4 mini in Codex
GPT-5.4 mini is now available in Codex as a fast, efficient model for lighter coding tasks and subagents.
It improves over GPT-5 mini across coding, reasoning, image understanding, and tool use while running more than 2x faster. In Codex, GPT-5.4 mini uses 30% as much of your included limits as GPT-5.4, so comparable tasks can last about 3.3x longer before you hit those limits.
GPT-5.4 mini is available in the Codex app, the CLI, the IDE extension, and Codex on the web. GPT-5.4 mini is also available in the API.
Use GPT-5.4 mini for codebase exploration, large-file review, processing supporting documents, and other less reasoning-intensive subagent work. For more complex planning, coordination, and final judgment, start with GPT-5.4.
To switch to GPT-5.4 mini:
- In the CLI, start a new thread with:
Or usecodex --model gpt-5.4-mini/modelduring a session. - In the IDE extension, choose GPT-5.4 mini from the model selector in the composer.
- In the Codex app, choose GPT-5.4 mini from the model selector in the composer.
If you don’t see GPT-5.4 mini yet, update the CLI, IDE extension, or Codex app to the latest version.
- In the CLI, start a new thread with:
-
Codex app 26.313
New features
- Added back and forward buttons in the header so you can move between recent screens more quickly.
- Added an Open in Finder, Open in Explorer, or Open in File Manager action from thread menus to jump straight to a thread’s project folder.
Performance improvements and bug fixes
- Improved resume and thread error toasts with clearer details when something goes wrong.
- Additional performance improvements and bug fixes.
-
Codex app 26.312
Themes
Change the Codex app appearance in Settings by choosing a base theme, adjusting accent, background, and foreground colors, and changing the UI and code fonts. You can also share your custom theme with friends.
Revamped Automations
You can now choose whether automations run locally or on a worktree, define custom reasoning levels and models, and use templates to find inspiration for new automations.
Performance improvements and bug fixes
Various bug fixes and performance improvements.
-
Codex app 26.311
Also covers version 26.309.
New features
- Codex can now read the integrated terminal for the current thread, so it can check the status of a running development server or refer back to failed build output while it works with you.
Performance improvements and bug fixes
- Remembered the last local, worktree, or cloud selection after restarting the app.
- Restored the button for adding inline comments from the diff gutter.
- Refreshed branch information after creating a branch.
- Additional performance improvements and bug fixes.
-
Introducing GPT-5.4 in Codex
GPT-5.4 is now available in Codex as OpenAI’s most capable and efficient frontier model for professional work.
It combines recent advances in reasoning, coding, and agentic workflows in one model, and it’s the recommended choice for most Codex tasks.
In Codex, GPT-5.4 is the first general-purpose model with native computer-use capabilities. GPT-5.4 in Codex includes experimental support for the 1M context window. It supports complex workflows across applications and long-horizon tasks, with stronger tool use and tool search that help agents find and use the right tools more efficiently.
GPT-5.4 is available everywhere you can use Codex: the Codex app, the CLI, the IDE extension, and Codex Cloud on the web. GPT-5.4 is also available in the API.
To switch to GPT-5.4:
- In the CLI, start a new thread with:
Or usecodex --model gpt-5.4/modelduring a session. - In the IDE extension, choose GPT-5.4 from the model selector in the composer.
- In the Codex app, choose GPT-5.4 from the model selector in the composer.
If you don’t see GPT-5.4 yet, update the CLI, IDE extension, or Codex app to the latest version.
- In the CLI, start a new thread with:
-
Codex app 26.305
Performance improvements and bug fixes
- Improved remote connections with clearer connection errors, better status updates, and clearer host labels in thread and settings views.
- Fixed copy and paste shortcuts in the integrated terminal on Windows.
- Fixed an issue where archived pinned threads could reappear in the sidebar.
- Fixed an issue where repeated
codex://newlinks could stop prefilling a new conversation when the app was already open. - Additional performance improvements and bug fixes.
-
Codex app 26.304
Codex app for Windows
The Codex app is now available on Windows. The app gives you one interface for working across projects, running parallel agent threads, and reviewing results in one place.
The Codex app runs natively on Windows using PowerShell and a native Windows sandbox for bounded permissions, so you can use Codex on Windows without moving your workflow into WSL, onto a virtual machine, or by deactivating the sandbox.
The Windows app includes the same core features as the rest of the Codex app:
- Skills to discover and extend Codex capabilities.
- Automations to run work in the background.
- Worktrees to handle independent tasks in the same project.
If you prefer to develop in WSL, you can also switch the Codex agent and the integrated terminal to run there.
Download it from the Microsoft Store and sign in with your ChatGPT account or an API key. For setup and configuration details, see Setup, Use WSL with the Codex app, and Customize the app for your development setup.
-
Codex app 26.303
New features
- Added a Worktrees setting to turn automatic cleanup of Codex-managed worktrees on or off.
- Added Handoff support for moving a thread between Local and Worktree.
- Added an explicit English option in the language menu.
Performance improvements and bug fixes
- Improved GitHub and pull request workflows.
- Improved approval prompts and app connection sign-in flows.
- Additional performance improvements and bug fixes.
February 2026
-
Codex app 26.228
Performance improvements and bug fixes
- Fixed a regression where conversation and task views could stop updating while Codex was streaming a response.
- Additional performance improvements and bug fixes.
-
Codex app 26.227
New features
- Added pull request status badges in task rows and PR buttons, including draft, open, merged, and closed states.
- Added a Worktrees setting to choose how many Codex-managed worktrees to keep before older ones are cleaned up.
Performance improvements and bug fixes
- Improved scrolling and navigation in long conversations and code review, including fixes for thread jumpiness, sidebar jitter, and diff scrolling.
- Improved app startup reliability and keyboard zoom behavior.
- Additional performance improvements and bug fixes.
-
Codex app 26.226
New features
- Added new MCP shortcuts in the composer, including install keyword suggestions and an MCP server submenu in Add context.
- Added support for
@mentionsand skill mentions in inline review comments.
Performance improvements and bug fixes
- Improved rendering of MCP tool calls and Mermaid diagram error handling.
- Fixed an issue where stopped terminal commands could continue appearing as running.
- Additional performance improvements and bug fixes.
-
Codex app 26.224
New features
- Added an option to run automations in a dedicated worktree or directly in a project folder.
Performance improvements and bug fixes
- Moved configuration warnings to settings, with links to the affected files.
- Improved prompt history navigation and preserved line breaks in draft messages.
-
Codex app 26.217
New features
- Added drag-and-drop support to reorder queued messages.
- Added a warning when the selected model is downgraded.
Improvements and bug fixes
- Improved file workflows with fuzzy file search and better attachment recovery after restart.
- Additional performance improvements and bug fixes.
-
Introducing GPT-5.3-Codex-Spark
Today, we’re releasing a research preview of GPT-5.3-Codex-Spark, a smaller version of GPT-5.3-Codex and our first model designed for real-time coding. Codex-Spark is optimized to feel near-instant, delivering more than 1000 tokens per second while remaining highly capable for real-world coding tasks.
Codex-Spark is available in research preview for ChatGPT Pro users in the latest Codex app, CLI, and IDE extension. This release also marks the first milestone in our partnership with Cerebras.
At launch, Codex-Spark is text-only with a 128k context window. During the research preview, usage has separate model-specific limits and doesn’t count against standard Codex limits. During high demand, access may slow down or queue while we balance reliability across users.
To switch to GPT-5.3-Codex-Spark:
- In the CLI, start a new thread with:
Or usecodex --model gpt-5.3-codex-spark/modelduring a session. - In the IDE extension, choose GPT-5.3-Codex-Spark from the model selector in the composer.
- In the Codex app, choose GPT-5.3-Codex-Spark from the model selector in the composer.
If you don’t see GPT-5.3-Codex-Spark yet, update the CLI, IDE extension, or Codex app to the latest version.
GPT-5.3-Codex-Spark isn’t available in the API at launch. For API-key workflows, continue using
gpt-5.2-codex. - In the CLI, start a new thread with:
-
Codex app 26.212
New features
- Support for GPT-5.3-Codex-Spark
- Added conversation forking
- Added floating pop-out window to take a conversation with you
Bug fixes
- Improved performance and bug fixes
Alpha testing for the Codex app on Windows is also starting. Sign up here to be a potential alpha tester.
-
Codex app 26.210
New features
- Added branch search in the branch picker.
- Added clearer guidance for entering plan mode when you type
planin the composer. - Added support for parallel approvals.
Improvements and bug fixes
- Additional performance improvements and bug fixes.
-
GPT-5.3-Codex in Cursor and VS Code
Starting today, GPT-5.3-Codex is available natively in Cursor and VS Code.
API access is starting with a small set of customers as part of a phased release.
This is the first model treated as a high security capability under the Preparedness Framework.
Safety controls will continue to scale, and API access will expand over the next few weeks.
-
Codex app 26.208
New features
- Added MCP and personality actions to the command palette.
- Updated follow-up behavior to queue by default.
Improvements and bug fixes
- Additional performance improvements and bug fixes.
-
Codex app 26.206
New features
- Added a file-reference action to reveal files directly in your OS file manager.
Improvements and bug fixes
- Improved handling of large reviews by removing the overall diff-size cap in the review pane.
- Additional performance improvements and bug fixes.
-
Introducing GPT-5.3-Codex
Today we’re releasing GPT-5.3-Codex, the most capable agentic coding model to date for complex, real-world software engineering.
GPT-5.3-Codex combines the frontier coding performance of GPT-5.2-Codex with stronger reasoning and professional knowledge capabilities, and runs 25% faster for Codex users. It’s also better at collaboration while the agent is working—delivering more frequent progress updates and responding to steering in real time.
GPT-5.3-Codex is available with paid ChatGPT plans everywhere you can use Codex: the Codex app, the CLI, the IDE extension, and Codex Cloud on the web. API access for the model will come soon.
To switch to GPT-5.3-Codex:
- In the CLI, start a new thread with:
Or usecodex --model gpt-5.3-codex/modelduring a session. - In the IDE extension, make sure you are signed in with ChatGPT, then choose GPT-5.3-Codex from the model selector in the composer.
- In the Codex app, make sure you are signed in with ChatGPT, then choose GPT-5.3-Codex from the model selector in the composer.
- If you don’t see GPT-5.3-Codex, update the CLI, IDE extension, or Codex app to the latest version.
For API-key workflows, continue using
gpt-5.2-codexwhile API support rolls out. - In the CLI, start a new thread with:
-
Codex app 26.205
New features
- Support for GPT-5.3-Codex.
- Added mid-turn steering. Submit a message while Codex is working to direct its behavior.
- Attach or drop any file type.
Bug fixes
- Fix flickering of the app.
-
Codex app 26.204
New features
- Added Zed and Textmate as options to open files and folders.
- Added PDF preview in the review panel.
Bug fixes
- Performance improvements.
-
Codex app 26.203
New features
- Added thread renaming on double-click in the thread list.
Improvements and bug fixes
- Renamed Sync to Handoff and added clearer source/destination stats in the handoff UI.
- Additional performance improvements and bug fixes.
-
Introducing the Codex app
Codex app
The Codex app for macOS is a desktop interface for running agent threads in parallel and collaborating with agents on long-running tasks. It includes a project sidebar, thread list, and review pane for tracking work across projects.
Key features:
- Multitask across projects
- Built-in worktree support
- Voice dictation
- Built-in Git tooling
- Skills
- Automations
For a limited time, ChatGPT Free and Go include Codex, and Plus, Pro, Business, Enterprise, and Edu plans get double rate limits. Those higher limits apply in the app, the CLI, your IDE, and the cloud.
Learn more in the Introducing the Codex app blog post.
Check out the Codex app documentation for more.
January 2026
-
Web search is now enabled by default
Codex now enables web search for local tasks in the Codex CLI and IDE Extension. By default, Codex uses a web search cache, which is an OpenAI-maintained index of web results. Cached mode returns pre-indexed results instead of fetching live pages, while live mode fetches the most recent data from the web. If you are using
--yoloor another full access sandbox setting, web search defaults to live results. To disable this behavior or switch modes, use theweb_searchconfiguration option:web_search = "cached"(default; serves results from the web search cache)web_search = "live"(fetches the most recent data from the web; same as--search)web_search = "disabled"to remove the tool
To learn more, check out the configuration documentation.
-
Team Config for shared configuration
Team Config groups the files teams use to standardize Codex across repositories and machines. Use it to share:
config.tomldefaultsrules/for command controls outside the sandboxskills/for reusable workflows
Codex loads these layers from
.codex/folders in the current working directory, parent folders, and the repo root, plus user (~/.codex/) and system (/etc/codex/) locations. Higher-precedence locations override lower-precedence ones.Admins can still enforce constraints with
requirements.toml, which overrides defaults regardless of location.Learn more in Team Config.
-
Custom prompts deprecated
Custom prompts are now deprecated. Use skills for reusable instructions and workflows instead.
-
GPT-5.2-Codex API availability
GPT-5.2-Codex is now available in the API and for users who sign into Codex with the API.
To learn more about using GPT-5.2-Codex check out our API documentation.
December 2025
-
Agent skills in Codex
Codex now supports agent skills: reusable bundles of instructions (plus optional scripts and resources) that help Codex reliably complete specific tasks.
Skills are available in both the Codex CLI and IDE extensions.
You can invoke a skill explicitly by typing
$skill-name(for example,$skill-installeror the experimental$create-planskill after installing it), or let Codex select a skill automatically based on your prompt.Learn more in the skills documentation.




Folder-based standard (agentskills.io)
Following the open agent skills specification, a skill is a folder with a required
SKILL.mdand optional supporting files:my-skill/ SKILL.md # Required: instructions + metadata scripts/ # Optional: executable code references/ # Optional: documentation assets/ # Optional: templates, resourcesInstall skills per-user or per-repo
You can install skills for just yourself in
~/.codex/skills, or for everyone on a project by checking them into.codex/skillsin the repository.Codex also ships with a few built-in system skills to get started, including
$skill-creatorand$skill-installer. The$create-planskill is experimental and needs to be installed (for example:$skill-installer install the create-plan skill from the .experimental folder).Curated skills directory
Codex ships with a small curated set of skills inspired by popular workflows at OpenAI. Install them with
$skill-installer, and expect more over time. -
Introducing GPT-5.2-Codex
Today we are releasing GPT-5.2-Codex, the most advanced agentic coding model yet for complex, real-world software engineering.
GPT-5.2-Codex is a version of GPT-5.2 further optimized for agentic coding in Codex, including improvements on long-horizon work through context compaction, stronger performance on large code changes like refactors and migrations, improved performance in Windows environments, and significantly stronger cybersecurity capabilities.
Starting today, the CLI and IDE Extension will default to
gpt-5.2-codexfor users who are signed in with ChatGPT. API access for the model will come soon.If you have a model specified in your
config.tomlconfiguration file, you can instead try outgpt-5.2-codexfor a new Codex CLI session using:codex --model gpt-5.2-codexYou can also use the
/modelslash command in the CLI. In the Codex IDE Extension you can select GPT-5.2-Codex from the dropdown menu.If you want to switch for all sessions, you can change your default model to
gpt-5.2-codexby updating yourconfig.tomlconfiguration file:model = "gpt-5.2-codex” -
Introducing Codex for Linear
Assign or mention @Codex in an issue to kick-off a Codex cloud task. As Codex works, it posts updates back to Linear, providing a link to the completed task so you can review, open a PR, or keep working.

To learn more about how to connect Codex to Linear both locally through MCP and through the new integration, check out the Codex for Linear documentation.
November 2025
-
Usage and credits fixes
Minor updates to address a few issues with Codex usage and credits:
- Adjusted all usage dashboards to show “limits remaining” for consistency. The CLI previously displayed “limits used.”
- Fixed an issue preventing users from buying credits if their ChatGPT subscription was purchased via iOS or Google Play.
- Fixed an issue where the CLI could display stale usage information; it now refreshes without needing to send a message first.
- Optimized the backend to help smooth out usage throughout the day, irrespective of overall Codex load or how traffic is routed. Before, users could get unlucky and hit a few cache misses in a row, leading to much less usage.
-
Introducing GPT-5.1-Codex-Max
Today we are releasing GPT-5.1-Codex-Max, our new frontier agentic coding model.
GPT‑5.1-Codex-Max is built on an update to our foundational reasoning model, which is trained on agentic tasks across software engineering, math, research, and more. GPT‑5.1-Codex-Max is faster, more intelligent, and more token-efficient at every stage of the development cycle–and a new step towards becoming a reliable coding partner.
Starting today, the CLI and IDE Extension will default to
gpt-5.1-codex-maxfor users that are signed in with ChatGPT. API access for the model will come soon.For non-latency-sensitive tasks, we’ve also added a new Extra High (
xhigh) reasoning effort, which lets the model think for an even longer period of time for a better answer. We still recommend medium as your daily driver for most tasks.If you have a model specified in your
config.tomlconfiguration file, you can instead try outgpt-5.1-codex-maxfor a new Codex CLI session using:codex --model gpt-5.1-codex-maxYou can also use the
/modelslash command in the CLI. In the Codex IDE Extension you can select GPT-5.1-Codex from the dropdown menu.If you want to switch for all sessions, you can change your default model to
gpt-5.1-codex-maxby updating yourconfig.tomlconfiguration file:model = "gpt-5.1-codex-max” -
Introducing GPT-5.1-Codex and GPT-5.1-Codex-Mini
Along with the GPT-5.1 launch in the API, we are introducing new
gpt-5.1-codex-miniandgpt-5.1-codexmodel options in Codex, a version of GPT-5.1 optimized for long-running, agentic coding tasks and use in coding agent harnesses in Codex or Codex-like harnesses.Starting today, the CLI and IDE Extension will default to
gpt-5.1-codexon macOS and Linux andgpt-5.1on Windows.If you have a model specified in your
config.tomlconfiguration file, you can instead try outgpt-5.1-codexfor a new Codex CLI session using:codex --model gpt-5.1-codexYou can also use the
/modelslash command in the CLI. In the Codex IDE Extension you can select GPT-5.1-Codex from the dropdown menu.If you want to switch for all sessions, you can change your default model to
gpt-5.1-codexby updating yourconfig.tomlconfiguration file:model = "gpt-5.1-codex” -
Introducing GPT-5-Codex-Mini
Today we are introducing a new
gpt-5-codex-minimodel option to Codex CLI and the IDE Extension. The model is a smaller, more cost-effective, but less capable version ofgpt-5-codexthat provides approximately 4x more usage as part of your ChatGPT subscription.Starting today, the CLI and IDE Extension will automatically suggest switching to
gpt-5-codex-miniwhen you reach 90% of your 5-hour usage limit, to help you work longer without interruptions.You can try the model for a new Codex CLI session using:
codex --model gpt-5-codex-miniYou can also use the
/modelslash command in the CLI. In the Codex IDE Extension you can select GPT-5-Codex-Mini from the dropdown menu.Alternatively, you can change your default model to
gpt-5-codex-miniby updating yourconfig.tomlconfiguration file:model = "gpt-5-codex-mini” -
GPT-5-Codex model update
We’ve shipped a minor update to GPT-5-Codex:
- More reliable file edits with
apply_patch. - Fewer destructive actions such as
git reset. - More collaborative behavior when encountering user edits in files.
- 3% more efficient in time and usage.
- More reliable file edits with
October 2025
-
Credits on ChatGPT Pro and Plus
Codex users on ChatGPT Plus and Pro can now use on-demand credits for more Codex usage beyond what’s included in your plan. Learn more.
-
Tag @Codex on GitHub Issues and PRs
You can now tag
@codexon a teammate’s pull request to ask clarifying questions, request a follow-up, or ask Codex to make changes. GitHub Issues now also support@codexmentions, so you can kick off tasks from any issue, without leaving your workflow.
-
Codex is now GA
Codex is now generally available with 3 new features — @Codex in Slack, Codex SDK, and new admin tools.
@Codex in Slack

You can now questions and assign tasks to Codex directly from Slack. See the Slack guide to get started.
Codex SDK
Integrate the same agent that powers the Codex CLI inside your own tools and workflows with the Codex SDK in Typescript. With the new Codex GitHub Action, you can easily add Codex to CI/CD workflows. See the Codex SDK guide to get started.
import { Codex } from "@openai/codex-sdk"; const agent = new Codex(); const thread = agent.startThread(); const result = await thread.run("Explore this repo"); console.log(result); const result2 = await thread.run("Propose changes"); console.log(result2);New admin controls and analytics

ChatGPT workspace admins can now edit or delete Codex Cloud environments. With managed config files, they can set safe defaults for CLI and IDE usage and monitor how Codex uses commands locally. New analytics dashboards help you track Codex usage and code review feedback. Learn more in the enterprise admin guide.
Availability and pricing updates
The Slack integration and Codex SDK are available to developers on ChatGPT Plus, Pro, Business, Edu, and Enterprise plans starting today, while the new admin features will be available to Business, Edu, and Enterprise. Beginning October 20, Codex Cloud tasks will count toward your Codex usage. Review the Codex pricing guide for plan-specific details.
September 2025
-
GPT-5-Codex in the API
GPT-5-Codex is now available in the Responses API, and you can also use it with your API Key in the Codex CLI. We plan on regularly updating this model snapshot. It is available at the same price as GPT-5. You can learn more about pricing and rate limits for this model on our model page.
-
Introducing GPT-5-Codex
New model: GPT-5-Codex

GPT-5-Codex is a version of GPT-5 further optimized for agentic coding in Codex. It’s available in the IDE extension and CLI when you sign in with your ChatGPT account. It also powers the cloud agent and Code Review in GitHub.
To learn more about GPT-5-Codex and how it performs compared to GPT-5 on software engineering tasks, see our announcement blog post.
Image outputs

When working in the cloud on front-end engineering tasks, GPT-5-Codex can now display screenshots of the UI in Codex web for you to review. With image output, you can iterate on the design without needing to check out the branch locally.
New in Codex CLI
- You can now resume sessions where you left off with
codex resume. - Context compaction automatically summarizes the session as it approaches the context window limit.
Learn more in the latest release notes
- You can now resume sessions where you left off with
August 2025
-
Late August update
IDE extension (Compatible with VS Code, Cursor, Windsurf)
Codex now runs in your IDE with an interactive UI for fast local iteration. Easily switch between modes and reasoning efforts.
Sign in with ChatGPT (IDE & CLI)
One-click authentication that removes API keys and uses ChatGPT Enterprise credits.
Move work between local ↔ cloud
Hand off tasks to Codex web from the IDE with the ability to apply changes locally so you can delegate jobs without leaving your editor.
Code Reviews
Codex goes beyond static analysis. It checks a PR against its intent, reasons across the codebase and dependencies, and can run code to validate the behavior of changes.
-
Mid August update
Image inputs

You can now attach images to your prompts in Codex web to ask for frontend changes or follow up on whiteboard sessions.
Container caching

Codex now caches containers to start new tasks and follow-ups 90% faster, reducing the median start time from 48 seconds to 5 seconds. You can configure a maintenance script to update the cached environment before new tasks.
Automatic environment setup
Environments without manual setup scripts now run the standard installation commands for common package managers like yarn, pnpm, npm, go mod, Gradle, pip, poetry, uv, and cargo. This reduces test failures for new environments by 40%.
June 2025
-
Best of N

Codex can now generate multiple responses simultaneously for a single task, helping you quickly explore possible solutions to pick the best approach.
Fixes & improvements
Added some keyboard shortcuts and a page to explore them. Open it by pressing ⌘-/ on macOS and Ctrl+/ on other platforms.
Added a “branch” query parameter in addition to the existing “environment”, “prompt” and “tab=archived” parameters.
Added a loading indicator when downloading a repo during container setup.
Added support for cancelling tasks.
Fixed issues causing tasks to fail during setup.
Fixed issues running followups in environments where the setup script changes files that are gitignored.
Improved how the agent understands and reacts to network access restrictions.
Increased the update rate of text describing what Codex is doing.
Increased the limit for setup script duration to 20 minutes for Pro and Business users.
Polished code diffs: You can now option-click a code diff header to expand/collapse all of them.
-
June update
Agent internet access

Now you can give Codex access to the internet during task execution to install dependencies, upgrade packages, run tests that need external resources, and more.
Internet access is off by default. Plus, Pro, and Business users can enable it for specific environments, with granular control of which domains and HTTP methods Codex can access. Internet access for Enterprise users is coming soon.
Learn more about usage and risks in the docs.
Update existing PRs

Now you can update existing pull requests when following up on a task.
Voice dictation
Now you can dictate tasks to Codex.
Fixes & improvements
Added a link to this changelog from the profile menu.
Added support for binary files: When applying patches, all file operations are supported. When using PRs, only deleting or renaming binary files is supported for now.
Fixed an issue on iOS where follow up tasks where shown duplicated in the task list.
Fixed an issue on iOS where pull request statuses were out of date.
Fixed an issue with follow ups where the environments were incorrectly started with the state from the first turn, rather than the most recent state.
Fixed internationalization of task events and logs.
Improved error messages for setup scripts.
Increased the limit on task diffs from 1 MB to 5 MB.
Increased the limit for setup script duration from 5 to 10 minutes.
Polished GitHub connection flow.
Re-enabled Live Activities on iOS after resolving an issue with missed notifications.
Removed the mandatory two-factor authentication requirement for users using SSO or social logins.
May 2025
-
Reworked environment page
It’s now easier and faster to set up code execution.

Fixes & improvements
Added a button to retry failed tasks
Added indicators to show that the agent runs without network access after setup
Added options to copy git patches after pushing a PR
Added support for unicode branch names
Fixed a bug where secrets were not piped to the setup script
Fixed creating branches when there’s a branch name conflict.
Fixed rendering diffs with multi-character emojis.
Improved error messages when starting tasks, running setup scripts, pushing PRs, or disconnected from GitHub to be more specific and indicate how to resolve the error.
Improved onboarding for teams.
Polished how new tasks look while loading.
Polished the followup composer.
Reduced GitHub disconnects by 90%.
Reduced PR creation latency by 35%.
Reduced tool call latency by 50%.
Reduced task completion latency by 20%.
Started setting page titles to task names so Codex tabs are easier to tell apart.
Tweaked the system prompt so that agent knows it’s working without network, and can suggest that the user set up dependencies.
Updated the docs.
-
Codex in the ChatGPT iOS app
Start tasks, view diffs, and push PRs—while you’re away from your desk.
