OpenAI Codex CLI

Summary

OpenAI Codex CLI is an open-source coding agent, free to use, that runs locally in your terminal to inspect files, edit code, run commands, and automate repeatable development tasks against your own repository. It is installed via a standalone script, npm, or Homebrew and run as the `codex` command from a project directory, either interactively or through `codex exec` in scripts and CI pipelines, making it suited to application developers who want an agent working directly against their local codebase rather than a cloud sandbox. The README distinguishes it from OpenAI's own IDE extension and cloud-based Codex Web offering, positioning the CLI specifically as the local, terminal-native option. Started in 2025, it has drawn nearly 700 contributors and over a hundred releases in the past year, with the latest just two weeks old, pointing to active, fast-moving development.

Lightweight coding agent that runs in your terminal

Command line

Values are placeholders taken from each option’s declared default. Nothing is executed here — the output shown is a recording of a run that already happened.

Release history

1. rust-v0.152.0-alpha.6 Aug 31, 2026 · issue 012

   Codex CLI alpha.6 adds actionable rate-limit banners in the TUI and makes the update_plan tool opt-in via config.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.152.0-alpha.6 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.152.0-alpha.6

   └──▷ USE IT
   Re-enable the update_plan tool when your workflow depends on Codex explicitly tracking and updating a plan during long-running tasks.
   yaml copy

   tools:
     update_plan:
       enabled: true

   • ›Adds tools.update_plan.enabled config key (defaults to false); set it to true to explicitly expose the update_plan tool — removing bundled planning guidance from prompts when disabled.
   • ›Adds actionable rate-limit banners in the TUI rendered above the composer, with actions for usage, credits, resets, owner notifications, plan management, and automatic fallback-model switching when instructed by the banner.
   • ›Sets history_ingest_requested to true in Responses turn metadata when the history-notes token-budget extension is enabled, and reserves the key so caller-provided metadata cannot override it.
   └──▷ BREAKING ON UPGRADE

   • !The update_plan tool now defaults to disabled (tools.update_plan.enabled: false); any workflow relying on update_plan being available by default will stop receiving it until the key is explicitly set to true.
2. rust-v0.152.0-alpha.5 Aug 31, 2026 · issue 012

   Codex CLI now accepts package-style MCP server names containing :, @, /, and .

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.152.0-alpha.5 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.152.0-alpha.5

   └──▷ TRY IT
   Register an npm-scoped MCP server using its full package-style name so the tool namespace and OAuth credentials stay properly isolated.
   copy

   $ codex mcp add npm:@modelcontextprotocol/server-sequential.thinking

   • ›MCP server names may now contain :, @, /, and . in addition to letters, numbers, -, and _, enabling names like npm:@modelcontextprotocol/server-sequential.thinking across mcp add, get, list, and remove commands, runtime tool namespaces, and OAuth credential lookup.
3. rust-v0.152.0-alpha.4 Aug 30, 2026 · issue 011

   Codex CLI gains clock tools from model metadata, per-tool MCP output limits, configurable sleep-tool gating, and elicitation form support.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.152.0-alpha.4 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.152.0-alpha.4

   • ›Adds clock.curr_time and clock.sleep tools when a model lists clock in experimental_supported_tools metadata, with current-time reminder injection controlled separately by the current_time_reminder feature.
   • ›Adds configurable gating for the sleep tool.
   • ›Adds Vim search motions to the TUI composer.
   • ›Subagents now follow the root service tier.
   • ›Guardian context rolls over before follow-up reviews to handle exhausted context windows, replaying the full transcript and image evidence after compaction.
   +3 moreshow less

   • ›History notes images are forwarded to the model.
   • ›MCP HTTP helper headers are refreshed after authorization failures.
   • ›Executor hooks now run for interrupted turns.
4. rust-v0.151.0-alpha.7.2 Aug 29, 2026 · issue 011

   Adds configurable sleep_tool feature gating, model-metadata-driven clock tools, and one-shot exec fallback with timeout_ms in managed mode.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.151.0-alpha.7.2 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.151.0-alpha.7.2

   └──▷ USE IT
   Force the sleep tool on regardless of model metadata, useful when automating workflows that need deliberate pauses.
   yaml copy

   features:
     sleep_tool:
       mode: always_on

   • ›Adds features.sleep_tool config key with model_driven and always_on modes to independently gate registration of the built-in sleep tool, separate from the broader clock tool.
   • ›Registers both clock.curr_time and clock.sleep tools automatically when a model advertises clock in its experimental_supported_tools metadata.
   • ›Preserves exec_command in completion-only (one-shot) mode when unified_exec is disabled, adding a timeout_ms argument and terminating timed-out commands with exit code 124.
   • ›Removes tty, yield_time_ms, session_id, and write_stdin from one-shot exec mode when unified_exec is disabled.
   └──▷ BREAKING ON UPGRADE

   • !tty, yield_time_ms, session_id, and write_stdin are removed from exec_command when operating in completion-only mode with unified_exec disabled.
5. rust-v0.152.0-alpha.1 Aug 29, 2026 · issue 011

   Codex CLI 0.152.0-alpha.1 adds clock tools, configurable sleep gating, per-tool MCP output limits, configurable thread shell timeouts, and elicitation form support.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.152.0-alpha.1 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.152.0-alpha.1

   • ›Adds configurable gating for the sleep tool, allowing it to be independently controlled.
   • ›Adds support for per-tool MCP output limits to cap individual tool response sizes.
   • ›Adds support for configurable timeouts for thread shell commands.
   • ›Adds support for openai/elicitation form requests in the agent runtime.
   • ›Exposes the PowerShell version in environment context for Windows sessions.
   +6 moreshow less

   • ›Adds app-server notification media filtering to suppress media from function call output notifications.
   • ›Supports compression for shared rollout lineages.
   • ›Preloads plugin recommendations during session startup for faster availability.
   • ›Forwards history note images to the model for multimodal context.
   • ›Makes subagents follow the root service tier for consistent resource usage.
   • ›Supports app targets in executor plugin hooks.
6. rust-v0.151.0 Aug 29, 2026 · issue 011

   Codex CLI adds configurable MCP startup grace period, extension MCP result interception, and per-repo plugin catalog merging.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.151.0 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.151.0

   • ›Adds a configurable grace period for discovering tools from optional MCP servers at startup, preventing slow servers from blocking the agent.
   • ›Enables extensions to inspect or replace MCP tool results before they reach the model, allowing middleware-style transformation of tool output.
   • ›Plugin catalogs now merge per-repository configuration with global settings and surface invalid project marketplace entries without suppressing valid plugins.
7. rust-v0.151.0-alpha.12 Aug 29, 2026 · issue 011

   Codex CLI alpha.12 adds compression for shared rollout lineages, per-tool MCP output limits, and configurable shell command timeouts.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.151.0-alpha.12 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.151.0-alpha.12

   • ›Adds opt-in local_thread_store_shared_compression feature flag to enable zstd compression for shared rollout lineages, including referenced sources and fork pointers.
   • ›Supports per-tool MCP output limits, letting operators cap how much output individual MCP tools can return.
   • ›Records codex.app_server.codex_home.size_bytes metrics for CODEX_HOME, sessions, and archived_sessions subdirectories at app-server startup.
   • ›Responds to terminal queries from TTY subprocesses, improving compatibility with interactive tools run inside the agent.
   • ›Restricts cloud task credentials to trusted origins, narrowing the credential exposure surface.
8. rust-v0.151.0-alpha.11 Aug 28, 2026 · issue 011

   Adds configurable timeoutMs to thread/shellCommand and platform-aware Windows shell guidance for exec_command.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.151.0-alpha.11 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.151.0-alpha.11

   • ›Adds optional timeoutMs parameter to thread/shellCommand to set per-command deadlines; defaults to one hour when omitted or null, treats 0 as an immediate timeout, and rejects negative values.
   • ›Adapts exec_command tool description to include Windows-specific safety guidance when the executor platform is Windows, and omits it for non-Windows executors.
   • ›Measures CODEX_HOME disk usage at app-server startup, recording codex.app_server.codex_home.size_bytes for the home directory and sessions / archived_sessions subdirectories.
9. rust-v0.151.0-alpha.3 Aug 26, 2026 · issue 009

   Codex CLI adds write_stdin_approval feature flag to gate input to escalated terminals and exposes MCP provenance to tool lifecycle extensions.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch rust-v0.151.0-alpha.3 https://github.com/openai/codex.git
   # already have the repo? check out this version:
   $ git checkout rust-v0.151.0-alpha.3

   • ›Adds write_stdin_approval feature flag (disabled by default) to require an explicit approval before sending non-empty input to an escalated unified-exec terminal, routing reviews through hooks, Guardian, app-server, and the TUI as writeStdin approvals.
   • ›Exposes MCP provenance metadata via optional McpToolContext in ToolStartInput, classifying MCP calls as connectors, configured servers, plugin servers, executor-selected plugins, or other registrations.
   • ›Gives Guardian a bounded trusted context fragment for user-configured MCP tools and connectors, while keeping tool descriptions, outputs, and unrelated tools untrusted.
   • ›Records Windows sandbox world-writable scan results in the codex.windows_sandbox.world_writable_scan_flagged_directories histogram, tagged with success or error, for both startup and warning-triggered scans.
   • ›Prearms Guardian's WebSocket pool in a background task so thread startup and resume are no longer blocked by initial Guardian connection delays.
10. rust-v0.151.0-alpha.2 Aug 26, 2026 · issue 009

    Codex CLI adds Guardian V2 risk score persistence, dedicated Guardian endpoints, Vim buffer jump motions, and layered plugin config support.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.151.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.151.0-alpha.2

    └──▷ USE IT
    Enable Guardian risk score persistence to disk for a debugging session — scores are written to rollout files only when this is explicitly set.
    toml copy

    [features.guardianv2]
    persist_scores = true

    Route Guardian inference through dedicated endpoints instead of /responses to reduce latency and separate Guardian traffic.
    toml copy

    [features.guardianv2]
    free_guardian = true

    • ›Adds features.guardianv2.persist_scores config option (default false) to opt into writing Guardian V2 reviewed actions and risk scores to rollout files for debugging.
    • ›Adds features.guardianv2.free_guardian config option to route eligible Guardian reviews to /guardian and asynchronous classifications to /guardian-classifier instead of /responses.
    • ›Honors layered configuration (not just user config) when loading plugins and marketplace sources.
    • ›Adds Vim buffer jump motions to the TUI.
    • ›Attaches originating Responses item ID to MCP tool request metadata as _meta.itemId.
    +4 moreshow less

    • ›Classifies streaming rate-limit errors as RateLimitExceeded for more precise error handling.
    • ›Enables clock tools for persistent reasoning turns.
    • ›Restricts macOS scratch directory access to process sandboxes.
    • ›Records call_id and action fields on SecurityRiskScore so persisted scores identify the tool call and bounded action that produced them.
11. rust-v0.150.0 Aug 26, 2026 · issue 009

    Codex CLI v0.150.0 adds task @ mentions, /copy target picker, Interrupt hooks, and keybindings for permission-mode cycling.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0

    • ›Adds /copy command picker to select full responses, individual code blocks, or blockquotes when copying output.
    • ›Adds /rename command that suggests an editable title for the current task based on the conversation.
    • ›New Interrupt hooks let you run commands or MCP handlers when an active top-level turn is interrupted.
    • ›Adds keybindings for cycling through TUI permission modes, and . in Vim mode to repeat the last edit.
    • ›Supports referencing other Codex tasks with @ mentions, enabling agents to read, create, or message tasks from the terminal.
    +2 moreshow less

    • ›Unnamed terminal tasks now receive descriptive titles automatically.
    • ›Markdown links render as clickable labels in supported terminals, with visible URLs retained in other terminals.
12. rust-v0.150.0-alpha.11 Aug 25, 2026 · issue 008

    Codex CLI alpha.11 adds per-turn cyber access program selection and hardens MCP OAuth callback handling.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.11

    • ›Adds the experimental turn/start.cyberAccessProgram option with standard, daybreakBlue, and daybreakRed values, forwarded as access_programs.cyber on Responses, WebSocket, and remote-compaction requests when using ChatGPT authentication.
    • ›Hardens MCP OAuth callback handling by validating issuer-bound authorization responses, persisting registered callback URLs for MCP servers and plugins, and inserting the active listener port into portless loopback redirects.
    • ›Adds a hidden --feedback flag to codex doctor that bounds each SQLite database integrity scan to a one-second deadline when collecting diagnostic attachments.
    • ›Restricts --code-mode-host on the app server to accept only http:// and https:// gRPC endpoints; WebSocket (ws://, wss://) host URLs are now rejected at CLI parse time.
    └──▷ BREAKING ON UPGRADE

    • !The app server --code-mode-host flag no longer accepts ws:// or wss:// URLs; only http:// and https:// gRPC endpoints are valid. Any configuration passing a WebSocket URL to --code-mode-host will fail at startup.
13. rust-v0.150.0-alpha.10 Aug 25, 2026 · issue 008

    Codex CLI alpha.10 adds managed AWS Bedrock access keys, computer-use-only Guardian scope, dot-repeat in Vim mode, and OTEL turn-cost metrics.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.10

    └──▷ USE IT
    Restrict Guardian v2 fast approvals to browser/computer-use tools only, keeping shell commands on the stricter synchronous path.
    yaml copy

    features:
      guardianv2:
        review_scope:
          computer_use_only: true

    • ›Adds features.guardianv2.review_scope.computer_use_only config key to restrict async Guardian v2 classification and fast approvals exclusively to browser and computer-use REPL tools, keeping all other tools on the synchronous approval path.
    • ›Adds amazonBedrockAccessKeys login flow, persisting SigV4-signed credentials in the configured auth store and reporting bedrockAccessKeys as a distinct auth mode.
    • ›Adds root_turn_id field to turn and tool-item analytics events to associate subagent activity with its originating top-level turn.
    • ›Introduces paginated thread history APIs and defaults durable threads to paginated history.
    • ›Adds Amazon Bedrock setup to the TUI onboarding flow.
    +5 moreshow less

    • ›Adds worktree settings parser for per-worktree configuration.
    • ›Brokers credential aliases in child environments, replacing embedded credentials with broker dummies and restoring only virtualized aliases.
    • ›Shows reconnect guidance in the TUI when disconnecting from tasks.
    • ›Allows extensions to skip host skill discovery.
    • ›Reconnects MCP servers automatically when authentication mode changes or startup timeout is updated.
14. rust-v0.150.0-alpha.9 Aug 25, 2026 · issue 007

    Codex CLI adds managed AWS access keys for Amazon Bedrock, computer-use-only Guardian v2 scope, OTEL turn-cost metrics, and dot-repeat in Vim mode.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.9 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.9

    • ›Adds BedrockAccessKeys as a distinct auth mode, enabling the experimental amazonBedrockAccessKeys app-server login flow with SigV4-signed Bedrock requests; credentials are persisted in the configured auth store and reported as bedrockAccessKeys in login status.
    • ›Adds features.guardianv2.review_scope.computer_use_only config option to restrict async classification and fast approvals exclusively to browser and computer-use REPL tools, giving this scope precedence over sandboxed_exec_commands when both are enabled.
    • ›Brokers credential aliases in child environments by discovering, replacing, and restoring credentials inherited from the parent even when their canonical provider variable is filtered out of the child environment.
    • ›Adds dot-repeat support to Vim mode in the TUI.
    • ›Generates descriptive TUI thread titles and suggests conversation-based titles via /rename.
    +2 moreshow less

    • ›Persists realtime events in the thread timeline and adds persisted thread artifact models.
    • ›Adds hooks for interrupted turns.
15. rust-v0.149.1 Aug 24, 2026 · issue 006

    Codex CLI gains --thread-source flag to classify new threads, plus an opt-in compaction_image_budget for image-aware remote compaction.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.1

    └──▷ TRY IT
    Tag threads created by an automated review pipeline so they are distinguishable from interactive user sessions.
    copy

    $ codex exec --thread-source automated_review --skip-git-repo-check --json

    • ›Adds global --thread-source <SOURCE> flag to codex exec to classify newly created or forked threads (e.g. automated_review, memory_consolidation); defaults to user when omitted and does not override the source when resuming an existing thread.
    • ›Adds opt-in compaction_image_budget feature to charge retained images against the remote compaction budget using the existing image size estimate, preventing image-heavy histories from exceeding the intended context budget.
16. rust-v0.149.0-alpha.4.3 Aug 23, 2026 · issue 006

    Codex CLI gains --thread-source flag for classifying new threads, plus Amazon Bedrock multi-agent and compaction improvements.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.0-alpha.4.3 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0-alpha.4.3

    └──▷ TRY IT
    Label an automated CI pipeline's Codex exec run as machine-initiated so threads are classified correctly in metadata.
    copy

    $ codex exec --thread-source automated_review --json --skip-git-repo-check "Review the diff and suggest fixes"

    • ›Switches Amazon Bedrock to multi-agent V1 protocol, which does not require response items unsupported by Bedrock.
    • ›Enables Responses compaction (compaction_trigger items via /v1/responses) for Amazon Bedrock, bringing it in line with OpenAI and Azure Responses providers.
17. rust-v0.150.0-alpha.7 Aug 22, 2026 · issue 005

    Codex CLI adds app signature verification, MCP event streaming, shell snapshot caching, hostname in TUI status, and codex agents session config

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.7

    • ›Adds codex agents subcommand to allow session configuration directly from the CLI.
    • ›Adds keybindings for cycling TUI permission modes interactively.
    • ›Adds a response target picker to the /copy command.
    • ›Enforces issuer binding for MCP OAuth endpoints.
    • ›Enables discovery of HTTP MCP servers from selected executors.
    +4 moreshow less

    • ›Supports attaching to existing realtime calls.
    • ›Enforces environment network policies for remote execution.
    • ›Makes tool-result telemetry limits configurable.
    • ›Ignores project instructions for untrusted projects.
18. rust-v0.149.0-alpha.7.2 Aug 22, 2026 · issue 005

    Amazon Bedrock gets multi-agent V1 support and Responses-based compaction; Guardian reviews now cancel with their tool calls.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.0-alpha.7.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0-alpha.7.2

    • ›Enables multi-agent V1 protocol for Amazon Bedrock models, which do not support the response items required by multi-agent V2.
    • ›Switches Amazon Bedrock remote compaction to compaction_trigger items sent through /v1/responses, replacing the legacy dedicated compaction protocol.
    • ›Propagates tool cancellation tokens into Guardian approval reviews so interrupting a tool also aborts its pending review, including server-initiated MCP approval elicitation.
    └──▷ BREAKING ON UPGRADE

    • !The legacy dedicated compaction protocol is removed from provider capabilities; remote compaction now defaults to unsupported and must be explicitly enabled per provider (currently OpenAI, Azure Responses, and Amazon Bedrock).
19. rust-v0.150.0-alpha.6 Aug 21, 2026 · issue 004

    Codex CLI alpha.6 adds Guardian internal sessions, Amazon Bedrock app-server setup, browser/computer-use config, and a response target picker for /copy.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.6

    • ›Adds a response target picker to the /copy command, letting users choose which response to copy.
    • ›Implements Amazon Bedrock setup in the app server, enabling Bedrock-backed model configuration.
    • ›Adds browser and computer-use configuration and exposes browser/computer-use requirements through the app server.
    • ›Adds Guardian internal session support, with escalated commands routed through synchronous Guardian review and Guardian reviews reused in async risk scoring.
    • ›Enforces environment network policies for remote execution, composing owner rules with controller constraints and saved network decisions.
    +1 moreshow less

    • ›Hides Fast mode status for models that do not support it.
20. rust-v0.150.0-alpha.3 Aug 21, 2026 · issue 004

    Codex CLI alpha.3 adds codex agents session config, TUI permission-mode keybindings, and existing-realtime-call attachment.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.3 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.3

    └──▷ USE IT
    Bind keys to cycle through TUI permission modes without touching the active config file.
    ~/.config/codex/config.toml copy

    [tui.keymap.chat]
    next_permission_mode = "]"
    previous_permission_mode = "["

    • ›Adds previous_permission_mode and next_permission_mode actions to tui.keymap.chat in config.toml, letting users bind keys to cycle through available built-in permission modes in the TUI.
    • ›Adds existingCall transport to thread/realtime/start, accepting a client-provided callId and optional realtimeSessionId so clients can attach Codex to a pre-negotiated realtime call.
    • ›Allows codex agents to accept session-configuration options — model, approval policy, sandbox mode, web search, working directory, and config overrides — when opening the agents dashboard.
    • ›Discovers HTTP MCP servers from selected executors and honors required MCP servers declared by those executors.
    • ›Enforces issuer binding for MCP OAuth endpoints.
    +2 moreshow less

    • ›Adds in-memory shell snapshots to unified exec and honors request PATH in exec-server shell snapshots.
    • ›Supports voice-aware configuration and version-skew builds.
21. rust-v0.150.0-alpha.2 Aug 21, 2026 · issue 003

    Codex CLI alpha adds macOS app signature verification, shell snapshot caching, MCP event streaming, and Amazon Bedrock multi-agent support.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.2

    • ›Adds additional_developer_instructions to managed requirements, exposed via configRequirements/read as additionalDeveloperInstructions, with a 10,000 estimated-token size limit.
    • ›Adds app-server MCP event streaming.
    • ›Adds hostname to the configurable TUI status line.
    • ›Adds history and notes tools for token-budget sessions.
    • ›Adds resolve_permission_profile_selection to select the effective permission profile using configured defaults, managed requirements, and allowlists without compiling platform-specific paths.
    +8 moreshow less

    • ›Verifies Codex desktop app bundle signatures using Apple codesign (bundle identifier com.openai.codex, team ID 2DC432GLL2) before launching or installing on macOS.
    • ›Enables multi-agent V1 protocol and Responses compaction for Amazon Bedrock models.
    • ›Requires filesystem backends to implement directory walks with bounded local walks on a blocking task, including symlink cycle detection, deterministic ordering, error collection, and response-size limits.
    • ›Includes suggestion IDs in plugin install metadata.
    • ›Supports turn cost telemetry for custom model providers.
    • ›Supports standalone named function call outputs handled as external context.
    • ›Refreshes bundled model definitions.
    • ›Retries transient registry failures during initial exec connection.
22. rust-v0.149.0-alpha.4.1 Aug 21, 2026 · issue 003

    Codex CLI adds Amazon Bedrock multi-agent V1 support and Responses-based compaction for Bedrock providers.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.0-alpha.4.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0-alpha.4.1

    • ›Enables multi-agent V1 protocol for Amazon Bedrock models, normalizing Bedrock model catalogs to advertise MultiAgentVersion::V1 to work around Bedrock's lack of support for response items required by multi-agent V2.
    • ›Switches Amazon Bedrock remote compaction to use compaction_trigger items sent through /v1/responses instead of the legacy dedicated compaction protocol, and explicitly enables remote compaction for OpenAI, Azure Responses, and Amazon Bedrock providers.
    └──▷ BREAKING ON UPGRADE

    • !The legacy dedicated compaction protocol is removed from provider capabilities; remote compaction now defaults to unsupported and must be explicitly enabled per provider.
23. rust-v0.150.0-alpha.1 Aug 20, 2026 · issue 003

    Codex CLI 0.150.0-alpha.1 adds app signature verification, shell snapshot caching, MCP event streaming, and configurable TUI hostname display.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.150.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.150.0-alpha.1

    • ›Adds shellSnapshotV2 executor capability and an optional shell snapshot request to ExecParams, caching and restoring Unix shell state and profile exports for bash, zsh, and sh in an in-memory, attachment-scoped cache.
    • ›Adds additional_developer_instructions to managed requirements, exposed through configRequirements/read as additionalDeveloperInstructions, with a 10,000 estimated-token size limit and support across compaction, resume, and agent forks.
    • ›Adds app-server MCP event streaming support.
    • ›Adds hostname to the configurable TUI status line.
    • ›Verifies Codex desktop app bundle signatures against OpenAI's Apple Team ID (2DC432GLL2) using codesign --verify --deep --strict before launch or install.
    +8 moreshow less

    • ›Adds resolve_permission_profile_selection to select the effective permission profile using configured defaults, managed requirements, and allowlists, returning a merged catalog without compiling platform-specific paths.
    • ›Requires filesystem backends to implement directory walks natively, with bounded local walks including symlink cycle detection, deterministic ordering, error collection, and response-size limits.
    • ›Supports turn cost telemetry for custom model providers.
    • ›Supports standalone named function call outputs handled as external context.
    • ›Refreshes bundled model definitions.
    • ›Retries transient registry failures during initial exec server connection.
    • ›Includes suggestion IDs in plugin install metadata.
    • ›Supports host-accepted exec-server WebSockets.
24. rust-v0.149.0 Aug 20, 2026 · issue 003

    Codex CLI v0.149.0 adds an interactive agents dashboard, codex queue, TUI working-directory commands, and expanded codex doctor diagnostics.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0

    └──▷ TRY IT
    Send a follow-up instruction to an already-running local or remote session without attaching to it interactively.
    copy

    $ codex queue <session-id> 'Run the full test suite and report failures'

    • ›Adds codex agents command with an interactive dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts.
    • ›Adds codex queue command for sending messages to existing local or remote sessions.
    • ›Adds /cd, /pwd, and /cwd commands for managing the working directory inside TUI sessions.
    • ›Expands codex doctor to diagnose endpoint protection, network/proxy failures, desktop app state, Windows sandbox provisioning, and update connectivity.
    • ›SDK users can now pass exact CLI config overrides and select max or ultra reasoning effort.
    +1 moreshow less

    • ›Expands Vim editing in the TUI composer with character replacement and change motions including cw, c$, and cc.
25. rust-v0.149.0-alpha.4 Aug 20, 2026 · issue 002

    Codex CLI alpha.4 raises MCP tool name limit to 128 bytes, adds --no-alt-screen flag, warns on deprecated codex mcp-server, and hardens sandbox IPC isolation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.0-alpha.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0-alpha.4

    └──▷ TRY IT
    Keep the TUI output inline (no alternate screen) when resuming a session inside a terminal that does not handle alt-screen well.
    copy

    $ codex resume --no-alt-screen <session-id>

    • ›Adds --no-alt-screen flag to the resume and fork subcommands, preserved across both interactive and subcommand invocations.
    • ›Emits a deprecation warning when codex mcp-server is invoked: 'warning: codex mcp-server is deprecated and will be removed in a future release.'
    • ›Passes --unshare-ipc in Bubblewrap sandbox arguments to isolate IPC namespaces in both restricted-filesystem and full-filesystem sandbox paths.
    • ›Guardian V2 now satisfies required model reviews and skips sandboxed shell commands by default.
    • ›Exposes permission profile resolution in the core API.
    +11 moreshow less

    • ›Validates linked worktrees before inheriting project trust.
    • ›Binds MCP OAuth refresh tokens to their issuer and hardens OAuth fallback credential writes.
    • ›Applies composer editing preferences to TUI text prompts.
    • ›Preserves inline TUI scrollback in Windows Terminal.
    • ›Shows strict review warnings in the TUI and hides approved automatic review warnings.
    • ›Prompts to unarchive sessions before resuming or forking.
    • ›Adds cwd-relative turn diff paths.
    • ›Enforces filesystem permissions when loading AGENTS.md.
    • ›Advertises the Desktop app in graphical Linux sessions.
    • ›Restricts plugin migration to home scope and hardens skill installation against unsafe symlinks.
    • ›Streams executor capability and skill file reads.
    └──▷ BREAKING ON UPGRADE

    • !The untrusted approval policy has been retired and is no longer available.
26. rust-v0.149.0-alpha.1 Aug 19, 2026 · issue 001

    codex doctor gains endpoint protection, network, desktop, sandbox, and security diagnostics in v0.149.0-alpha.1

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.149.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.149.0-alpha.1

    • ›Expands codex doctor with desktop app diagnostics, desktop update diagnostics, and desktop security enforcement diagnostics.
    • ›Improves codex doctor network diagnostics with dedicated network checks via new network module.
    • ›Adds sandbox checks to codex doctor via new sandbox_check.
    • ›Adds working-directory commands to the TUI, letting users change the working directory from within the interactive session.
    • ›Adds a configurable skill catalog token budget.
    +8 moreshow less

    • ›Isolates external editor buffers from sandbox-writable paths, protecting composer text from exposure under restricted filesystem policies.
    • ›Adds experimental app-server project APIs.
    • ›Enforces environment-specific command policies and honors per-environment shell variable policies.
    • ›Restricts MCP HTTP redirects to the configured origin and isolates MCP resource headers during OAuth requests.
    • ›Adds managed gates for in-app chat and dictation.
    • ›Compacts successful command activity in the TUI for a cleaner transcript view.
    • ›Enables editing queued messages with Vim history-up bindings.
    • ›Identifies Mac mini hosts in remote control handshakes.
    └──▷ BREAKING ON UPGRADE

    • !Rejects obsolete app-server permission profile fields — configs using removed fields will be refused on upgrade.
    • !Stops loading legacy managed config on Windows.
27. rust-v0.148.0 Aug 18, 2026 · issue -001

    Codex CLI gains Markdown conversation export, session forking/archiving, Bedrock support, and async hooks in v0.148.0

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0

    └──▷ TRY IT
    Export the current TUI conversation to a Markdown file for sharing or archiving after a long coding session.
    copy

    $ /export

    Fork an existing session to explore an alternative approach without losing the original conversation state.
    copy

    $ codex exec fork

    Check estimated cost or thread credits consumed so far for the current workspace session.
    copy

    $ /status

    • ›Adds /export TUI command to export complete conversations to Markdown, sending output to the clipboard or a new file.
    • ›Adds codex exec fork subcommand to fork sessions, plus archive and restore actions in the TUI resume picker.
    • ›Adds Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support.
    • ›Hooks can now run commands asynchronously and invoke MCP tools.
    • ›Adds /status command display and status-line/terminal-title indicators for estimated thread credits or cost in eligible workspaces.
    +1 moreshow less

    • ›Draft prompts can now be composed while the TUI initializes, with resume and fork progress shown during startup.
28. rust-v0.148.0 Aug 18, 2026 · issue 001

    Codex CLI v0.148.0 adds Markdown export, session forking, Amazon Bedrock, async hooks, and cost visibility in the TUI.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0

    └──▷ TRY IT
    Export your current TUI conversation to a Markdown file to share or archive a debugging session.
    copy

    $ /export

    Fork an existing session to explore an alternative approach without losing the original conversation state.
    copy

    $ codex exec fork

    Check estimated credit usage or cost for the current thread directly in the TUI.
    copy

    $ /status

    • ›Adds /export TUI command to export full conversations to Markdown, either to the clipboard or a new file.
    • ›Adds codex exec fork subcommand to fork sessions, plus archive and restore actions in the TUI resume picker.
    • ›Adds Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support.
    • ›Hooks can now run commands asynchronously and invoke MCP tools.
    • ›Adds estimated thread credits or cost display in /status, status lines, and terminal titles for eligible workspaces.
    +1 moreshow less

    • ›Supports drafting prompts while the TUI initializes, with resume and fork progress shown during startup.
29. rust-v0.148.0-alpha.23 Aug 18, 2026 · issue 001

    Codex CLI alpha.23 adds exec-server forwarding mode, PowerShell Tree-sitter safety analysis, and hardens auth isolation for custom providers.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.23 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.23

    • ›Adds exec-server forwarding mode via a new ExecServerSubcommand (accessible as codex exec-server <subcommand>), enabling the exec-server to be composed in additional topologies.
    • ›Adds --remote <URL> flag to exec-server (now marked global) for registering the exec-server as a remote environment, and makes --strict-config global so subcommands inherit it.
    • ›Adds a fail-closed Tree-sitter-based PowerShell lowerer that converts a conservative subset of literal PowerShell commands into argument vectors, rejecting dynamic expressions, #requires directives, and unrecognized syntax instead of guessing.
    • ›Adds symlink-safe reading of sensitive files via read_sensitive_file_to_string, refusing to follow the final symlink component on Unix or reparse points on Windows.
    • ›Rejects symbolic links used as memory workspace roots and removes links created during consolidation, preventing path-traversal out of the workspace.
    +5 moreshow less

    • ›Adds provider-owned authentication recovery, allowing providers to handle their own auth refresh flow independently.
    • ›Scopes MCP resource reads by connector, preventing cross-connector data access.
    • ›Requires fresh approval beneath denied permission paths, closing a re-approval gap in the permission model.
    • ›Adds Guardian v2 approval review metrics, risk classification improvements, and Node REPL policy injection into Guardian review sessions.
    • ›Reconnects WebRTC Realtime sideband transports on disconnection for improved reliability of real-time agent communication.
30. rust-v0.148.0-alpha.23 Aug 18, 2026 · issue -001

    Codex CLI alpha.23 adds exec-server forwarding mode, PowerShell Tree-sitter safety analysis, and hardens auth isolation for custom providers.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.23 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.23

    • ›Adds exec-server forwarding mode via a new ExecServerSubcommand (accessible as codex exec-server <subcommand>), enabling the exec-server to be composed in additional topologies.
    • ›Adds --remote <URL> flag to exec-server (now marked global) for registering the exec-server as a remote environment, and makes --strict-config global so subcommands inherit it.
    • ›Adds a fail-closed Tree-sitter-based PowerShell lowerer that converts a conservative subset of literal PowerShell commands into argument vectors, rejecting dynamic expressions, #requires directives, and unrecognized syntax instead of guessing.
    • ›Adds symlink-safe reading of sensitive files via read_sensitive_file_to_string, refusing to follow the final symlink component on Unix or reparse points on Windows.
    • ›Rejects symbolic links used as memory workspace roots and removes links created during consolidation, preventing path-traversal out of the workspace.
    +5 moreshow less

    • ›Adds provider-owned authentication recovery, allowing providers to handle their own auth refresh flow independently.
    • ›Scopes MCP resource reads by connector, preventing cross-connector data access.
    • ›Requires fresh approval beneath denied permission paths, closing a re-approval gap in the permission model.
    • ›Adds Guardian v2 approval review metrics, risk classification improvements, and Node REPL policy injection into Guardian review sessions.
    • ›Reconnects WebRTC Realtime sideband transports on disconnection for improved reliability of real-time agent communication.
31. rust-v0.148.0-alpha.22 Aug 18, 2026 · issue 001

    Codex CLI adds codex agents dashboard, desktop diagnostics in codex doctor, and queued-message dispatch for multi-process sessions.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.22 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.22

    └──▷ TRY IT
    Open the interactive agents dashboard to monitor and navigate running agent tasks in the TUI.
    copy

    $ codex agents

    • ›Adds codex agents as a dedicated interactive task dashboard command for monitoring and navigating agents in the TUI.
    • ›Adds desktop app diagnostics and desktop update diagnostics to codex doctor, covering app-server handshake status, security enforcement (macOS Gatekeeper/XProtect, Windows), and update state.
    • ›Adds a command to queue messages for existing sessions, enabling other processes to write to a running thread's durable queue and have idle threads dispatch them automatically.
    • ›Adds configurable keyboard shortcuts for the agents dashboard.
    • ›Restricts MCP HTTP redirects to the configured origin, tightening network policy for MCP app integrations.
    +8 moreshow less

    • ›Applies user MCP policy to selected executor plugins.
    • ›Adds network policy metadata to environment configuration.
    • ›Raises the GPT-5.6 maximum context window.
    • ›Drops capabilities from Linux sandbox processes, hardening the sandbox security posture.
    • ›Hardens Windows sandbox provisioning against reparse points.
    • ›Surfaces interactive requests in realtime conversations.
    • ›Requires approval for commands with dynamic shell words.
    • ›Adds managed gates for in-app chat and dictation.
    └──▷ BREAKING ON UPGRADE

    • !The experimental thread config endpoint has been removed (Remove the experimental thread config endpoint).
    • !Skill model delegation support has been removed.
32. rust-v0.148.0-alpha.22 Aug 18, 2026 · issue -001

    Codex CLI adds codex agents dashboard, desktop diagnostics in codex doctor, and queued-message dispatch for multi-process sessions.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.22 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.22

    └──▷ TRY IT
    Open the interactive agents dashboard to monitor and navigate running agent tasks in the TUI.
    copy

    $ codex agents

    • ›Adds codex agents as a dedicated interactive task dashboard command for monitoring and navigating agents in the TUI.
    • ›Adds desktop app diagnostics and desktop update diagnostics to codex doctor, covering app-server handshake status, security enforcement (macOS Gatekeeper/XProtect, Windows), and update state.
    • ›Adds a command to queue messages for existing sessions, enabling other processes to write to a running thread's durable queue and have idle threads dispatch them automatically.
    • ›Adds configurable keyboard shortcuts for the agents dashboard.
    • ›Restricts MCP HTTP redirects to the configured origin, tightening network policy for MCP app integrations.
    +8 moreshow less

    • ›Applies user MCP policy to selected executor plugins.
    • ›Adds network policy metadata to environment configuration.
    • ›Raises the GPT-5.6 maximum context window.
    • ›Drops capabilities from Linux sandbox processes, hardening the sandbox security posture.
    • ›Hardens Windows sandbox provisioning against reparse points.
    • ›Surfaces interactive requests in realtime conversations.
    • ›Requires approval for commands with dynamic shell words.
    • ›Adds managed gates for in-app chat and dictation.
    └──▷ BREAKING ON UPGRADE

    • !The experimental thread config endpoint has been removed (Remove the experimental thread config endpoint).
    • !Skill model delegation support has been removed.
33. rust-v0.148.0-alpha.21 Aug 17, 2026 · issue 001

    Codex CLI gains endpoint protection detection in codex doctor, improved network diagnostics, and working-directory TUI commands.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.21 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.21

    └──▷ USE IT
    Pass a raw TOML permission-map override with a literal path key via the TypeScript SDK when the structured config API cannot represent it.
    javascript copy

    const codex = new Codex({
      configOverrides: [
        '--config', 'sandbox.writable_roots."/var/myapp/data"=true'
      ]
    });

    • ›Improves codex doctor network diagnostics, including proxy environment details, macOS system proxy configuration detection, and rejection of proxy authentication challenges (HTTP 407).
    • ›Adds CodexOptions.configOverrides to the TypeScript SDK for passing ordered --config key=value arguments to Codex CLI unchanged, enabling TOML permission maps with literal path keys.
    • ›Adds working-directory commands to the TUI.
    • ›Supports per-environment shell variable policies and environment-specific command policies.
    • ›Adds experimental app-server project APIs.
    +4 moreshow less

    • ›Adds a configurable skill catalog token budget.
    • ›Compacts successful command activity in the TUI for a cleaner history view.
    • ›Enables editing queued messages with Vim history-up keybinding in the TUI composer.
    • ›Removes the workspace settings gate for apps and plugins.
34. rust-v0.148.0-alpha.21 Aug 17, 2026 · issue -002

    Codex CLI gains endpoint protection detection in codex doctor, improved network diagnostics, and working-directory TUI commands.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.21 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.21

    └──▷ USE IT
    Pass a raw TOML permission-map override with a literal path key via the TypeScript SDK when the structured config API cannot represent it.
    javascript copy

    const codex = new Codex({
      configOverrides: [
        '--config', 'sandbox.writable_roots."/var/myapp/data"=true'
      ]
    });

    • ›Improves codex doctor network diagnostics, including proxy environment details, macOS system proxy configuration detection, and rejection of proxy authentication challenges (HTTP 407).
    • ›Adds CodexOptions.configOverrides to the TypeScript SDK for passing ordered --config key=value arguments to Codex CLI unchanged, enabling TOML permission maps with literal path keys.
    • ›Adds working-directory commands to the TUI.
    • ›Supports per-environment shell variable policies and environment-specific command policies.
    • ›Adds experimental app-server project APIs.
    +4 moreshow less

    • ›Adds a configurable skill catalog token budget.
    • ›Compacts successful command activity in the TUI for a cleaner history view.
    • ›Enables editing queued messages with Vim history-up keybinding in the TUI composer.
    • ›Removes the workspace settings gate for apps and plugins.
35. rust-v0.148.0-alpha.20 Aug 16, 2026 · issue 001

    Codex CLI gains disk-space diagnostics in codex doctor, MCP tool handler hooks, and live hook refresh after plugin changes.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.20 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.20

    • ›Adds storage diagnostics to codex doctor, reporting free space for both CODEX_HOME and the worktree with warning (5 GiB) and failure (1 GiB) thresholds; on Windows, also checks Dev Drive health.
    • ›Propagates W3C traceparent and tracestate trace context through exec-server relay frames, including fragmented encrypted Noise-protocol requests.
    • ›Supports pending environment attachment configuration so threads start immediately without blocking while attachment configuration is not yet available, with a new failed-attachment state that recovers on a ready update.
    • ›Uses paginated history for persistent exec threads to keep memory usage bounded across long sessions.
    • ›Shows resume and fork status indicators during TUI startup.
36. rust-v0.148.0-alpha.20 Aug 16, 2026 · issue -003

    Codex CLI gains disk-space diagnostics in codex doctor, MCP tool handler hooks, and live hook refresh after plugin changes.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.20 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.20

    • ›Adds storage diagnostics to codex doctor, reporting free space for both CODEX_HOME and the worktree with warning (5 GiB) and failure (1 GiB) thresholds; on Windows, also checks Dev Drive health.
    • ›Propagates W3C traceparent and tracestate trace context through exec-server relay frames, including fragmented encrypted Noise-protocol requests.
    • ›Supports pending environment attachment configuration so threads start immediately without blocking while attachment configuration is not yet available, with a new failed-attachment state that recovers on a ready update.
    • ›Uses paginated history for persistent exec threads to keep memory usage bounded across long sessions.
    • ›Shows resume and fork status indicators during TUI startup.
37. rust-v0.148.0-alpha.18 Aug 14, 2026 · issue 001

    Codex CLI alpha.18 enables unified exec on Windows by default, makes Guardian v2 risk classification configurable, and removes the gRPC code-mode session limit.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.18 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.18

    • ›Makes features.guardianv2 in config accept either a boolean toggle or a structured object specifying classifier instructions, review threshold, reasoning effort, action/instruction token limits, transcript source controls, per-entry and total token budgets, and the number of recent non-user entries.
    • ›Adds an override to skip project configuration at startup.
    • ›Enables unified_exec by default on Windows, exposing exec_command and write_stdin instead of shell_command on that platform.
    • ›Removes the gRPC code-mode open session limit, allowing more than MAX_IN_FLIGHT_REQUESTS concurrent sessions.
    • ›Adds MCP protocol discovery metrics: records a counter and duration per discovery attempt, tagged with legacy or auto mode and classified as modern, legacy, or failure.
    +1 moreshow less

    • ›Routes 'None of the above' selection in request input prompts to the notes editor on Enter (in addition to Tab), preventing accidental submission.
38. rust-v0.148.0-alpha.18 Aug 14, 2026 · issue -005

    Codex CLI alpha.18 enables unified exec on Windows by default, makes Guardian v2 risk classification configurable, and removes the gRPC code-mode session limit.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.18 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.18

    • ›Makes features.guardianv2 in config accept either a boolean toggle or a structured object specifying classifier instructions, review threshold, reasoning effort, action/instruction token limits, transcript source controls, per-entry and total token budgets, and the number of recent non-user entries.
    • ›Adds an override to skip project configuration at startup.
    • ›Enables unified_exec by default on Windows, exposing exec_command and write_stdin instead of shell_command on that platform.
    • ›Removes the gRPC code-mode open session limit, allowing more than MAX_IN_FLIGHT_REQUESTS concurrent sessions.
    • ›Adds MCP protocol discovery metrics: records a counter and duration per discovery attempt, tagged with legacy or auto mode and classified as modern, legacy, or failure.
    +1 moreshow less

    • ›Routes 'None of the above' selection in request input prompts to the notes editor on Enter (in addition to Tab), preventing accidental submission.
39. rust-v0.148.0-alpha.16 Aug 14, 2026 · issue 001

    Codex CLI alpha.16 adds Guardian V2 risk scoring, parallel tool calls for all models, and stricter MCP auto-review enforcement.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.16 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.16

    • ›Enforces strict auto-review for MCP tool calls even when the approval policy, tool annotations, or a remembered session decision would otherwise skip review.
    • ›Adds Guardian V2 risk scoring: initializes per-thread samplers, records risk scores as snapshots on threads, preserves transcript boundaries in sampling input, and requires automatic review for high-risk actions.
    • ›Installs Guardian V2 in the app server and isolates Guardian reviewer sessions from parent extensions.
    • ›Reuses pending MCP server connections during reconciliation when identity, catalog limit, and protocol mode still match, avoiding duplicate startups.
    • ›Adds agent_name field to Responses API turn metadata, falling back to /root when no canonical agent path exists, and reserves the key from client metadata overrides.
    +3 moreshow less

    • ›Instructs the model to use tool_search to discover relevant tools when an explicitly selected plugin has apps available, before falling back to built-in tools.
    • ›Restricts filesystem helper sandbox access for tighter isolation.
    • ›Honors cloud-managed requirements in feature listings.
40. rust-v0.148.0-alpha.16 Aug 14, 2026 · issue -005

    Codex CLI alpha.16 adds Guardian V2 risk scoring, parallel tool calls for all models, and stricter MCP auto-review enforcement.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.16 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.16

    • ›Enforces strict auto-review for MCP tool calls even when the approval policy, tool annotations, or a remembered session decision would otherwise skip review.
    • ›Adds Guardian V2 risk scoring: initializes per-thread samplers, records risk scores as snapshots on threads, preserves transcript boundaries in sampling input, and requires automatic review for high-risk actions.
    • ›Installs Guardian V2 in the app server and isolates Guardian reviewer sessions from parent extensions.
    • ›Reuses pending MCP server connections during reconciliation when identity, catalog limit, and protocol mode still match, avoiding duplicate startups.
    • ›Adds agent_name field to Responses API turn metadata, falling back to /root when no canonical agent path exists, and reserves the key from client metadata overrides.
    +3 moreshow less

    • ›Instructs the model to use tool_search to discover relevant tools when an explicitly selected plugin has apps available, before falling back to built-in tools.
    • ›Restricts filesystem helper sandbox access for tighter isolation.
    • ›Honors cloud-managed requirements in feature listings.
41. rust-v0.148.0-alpha.15 Aug 14, 2026 · issue 001

    Codex CLI adds an Amazon Bedrock Runtime provider and skill-level model annotations with Luna delegation support.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.15 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.15

    • ›Adds the built-in amazon-bedrock-runtime provider for regional OpenAI-compatible Bedrock endpoints, with SigV4 auth, per-provider AWS profile/region/transport overrides, global and US cross-region model variants, and web search disabled.
    • ›Adds an optional model field to skill frontmatter (e.g. model: luna), enabling per-skill model annotations while silently ignoring unsupported values.
    • ›Adds SkillModelDelegationInstruction so skills requesting Luna can delegate to it when Luna is available in the current provider namespace, with bounded/validated model identifiers and instruction size limits.
42. rust-v0.148.0-alpha.15 Aug 14, 2026 · issue -005

    Codex CLI adds an Amazon Bedrock Runtime provider and skill-level model annotations with Luna delegation support.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.15 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.15

    • ›Adds the built-in amazon-bedrock-runtime provider for regional OpenAI-compatible Bedrock endpoints, with SigV4 auth, per-provider AWS profile/region/transport overrides, global and US cross-region model variants, and web search disabled.
    • ›Adds an optional model field to skill frontmatter (e.g. model: luna), enabling per-skill model annotations while silently ignoring unsupported values.
    • ›Adds SkillModelDelegationInstruction so skills requesting Luna can delegate to it when Luna is available in the current provider namespace, with bounded/validated model identifiers and instruction size limits.
43. rust-v0.148.0-alpha.14 Aug 14, 2026 · issue 001

    Codex CLI gains per-server MCP OAuth callback ports, running-task exit menu, and experimental thread queue APIs.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.14 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.14

    └──▷ USE IT
    Pin a specific MCP server to its own OAuth callback port so it does not conflict with other servers sharing the global port.
    yaml copy

    oauth:
      callback_port: 9876

    • ›Adds oauth.callback_port to MCP server configuration, letting each server override the global mcp_oauth_callback_port for CLI login, app-server, plugin installation, executor, and skill dependency OAuth flows.
    • ›Adds experimental thread queue APIs to the app server.
    • ›Adds a running-task exit menu to local daemon sessions: pressing Ctrl-C with an empty composer while a task runs now offers choices to cancel and stay, exit while leaving the task running, or stop and exit.
    • ›Exposes model upgrade retirement times in the model context.
    • ›Preserves client-authored developer messages across context compaction when retain_client_developer_messages is enabled.
    +5 moreshow less

    • ›Provides Guardian V2 with full tool action context — conversation transcript and a structured planned-action object containing tool name and arguments — for more accurate risk classification.
    • ›Wraps injected current-time reminders in <current_time_reminder> tags in model context.
    • ›Deduplicates current-time reminders when spawning full-history subagents, replacing inherited parent reminders with a single fresh reminder.
    • ›Adds structured telemetry for response retries.
    • ›Includes node_repl images in Guardian review evidence.
44. rust-v0.148.0-alpha.14 Aug 14, 2026 · issue -005

    Codex CLI gains per-server MCP OAuth callback ports, running-task exit menu, and experimental thread queue APIs.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.14 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.14

    └──▷ USE IT
    Pin a specific MCP server to its own OAuth callback port so it does not conflict with other servers sharing the global port.
    yaml copy

    oauth:
      callback_port: 9876

    • ›Adds oauth.callback_port to MCP server configuration, letting each server override the global mcp_oauth_callback_port for CLI login, app-server, plugin installation, executor, and skill dependency OAuth flows.
    • ›Adds experimental thread queue APIs to the app server.
    • ›Adds a running-task exit menu to local daemon sessions: pressing Ctrl-C with an empty composer while a task runs now offers choices to cancel and stay, exit while leaving the task running, or stop and exit.
    • ›Exposes model upgrade retirement times in the model context.
    • ›Preserves client-authored developer messages across context compaction when retain_client_developer_messages is enabled.
    +5 moreshow less

    • ›Provides Guardian V2 with full tool action context — conversation transcript and a structured planned-action object containing tool name and arguments — for more accurate risk classification.
    • ›Wraps injected current-time reminders in <current_time_reminder> tags in model context.
    • ›Deduplicates current-time reminders when spawning full-history subagents, replacing inherited parent reminders with a single fresh reminder.
    • ›Adds structured telemetry for response retries.
    • ›Includes node_repl images in Guardian review evidence.
45. rust-v0.148.0-alpha.12 Aug 13, 2026 · issue 001

    Codex CLI alpha.12 adds interrupted turn recovery, unified network approval pipeline, and sandboxed inline visualization protection.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.12 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.12

    • ›Adds RecoverTurnRequest and CodexThread::recover_turn_if_idle to resume an interrupted regular turn using its existing turn ID and updated thread settings, including Plan-mode recovery without injecting an empty user message.
    • ›Routes blocked network requests through the shared approval pipeline so permission hooks, automatic review, and user review all use the common approval flow — including for background terminals started by an earlier turn.
    • ›Materializes inline visualization viewer documents in a dedicated cache under CODEX_HOME, keyed by source and artifact thread IDs, so sandboxed sessions cannot overwrite viewer files before they are opened in a browser.
    • ›Persists deny amendments for blocked network requests and keeps denied requests denied across turns.
    • ›Records the final applied network decision in tool telemetry without exposing the destination or assigning an approval source.
    +1 moreshow less

    • ›Disables visualization links for full-disk-write sessions and rejects viewer cache paths containing symbolic links; reuses materialized viewer documents in memory when the source is unchanged.
46. rust-v0.148.0-alpha.12 Aug 13, 2026 · issue -006

    Codex CLI alpha.12 adds interrupted turn recovery, unified network approval pipeline, and sandboxed inline visualization protection.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.12 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.12

    • ›Adds RecoverTurnRequest and CodexThread::recover_turn_if_idle to resume an interrupted regular turn using its existing turn ID and updated thread settings, including Plan-mode recovery without injecting an empty user message.
    • ›Routes blocked network requests through the shared approval pipeline so permission hooks, automatic review, and user review all use the common approval flow — including for background terminals started by an earlier turn.
    • ›Materializes inline visualization viewer documents in a dedicated cache under CODEX_HOME, keyed by source and artifact thread IDs, so sandboxed sessions cannot overwrite viewer files before they are opened in a browser.
    • ›Persists deny amendments for blocked network requests and keeps denied requests denied across turns.
    • ›Records the final applied network decision in tool telemetry without exposing the destination or assigning an approval source.
    +1 moreshow less

    • ›Disables visualization links for full-disk-write sessions and rejects viewer cache paths containing symbolic links; reuses materialized viewer documents in memory when the source is unchanged.
47. rust-v0.148.0-alpha.11 Aug 13, 2026 · issue 001

    Codex CLI alpha.11 adds thread usage displays, thread-credits and estimated-thread-cost terminal title items, and improved MCP tool-call approval routing.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.11

    └──▷ USE IT
    Surface per-thread credit consumption and estimated cost directly in your terminal title bar while running Codex.
    yaml copy

    thread-credits, estimated-thread-cost

    • ›Adds thread-credits and estimated-thread-cost as configurable terminal title items, letting practitioners track per-thread quota consumption at a glance.
    • ›Shows estimated thread usage in the /status command and TUI status surfaces.
    • ›Adds dynamic HTTP header helpers for MCP servers.
    • ›Integrates workload identity with Codex authentication.
    • ›Supports gRPC code-mode hosts in the app server via --code-mode-host.
    +8 moreshow less

    • ›Enables executor skill packages to be passed directly to skills.read without a preceding skills.list lookup, including support for skill root aliases.
    • ›Enforces non-interactive approval policy for Codex delegate sessions.
    • ›Reconnects gRPC code-mode sessions automatically after host restarts.
    • ›Adds per-thread usage queries to the backend client.
    • ›Stamps conversation history items with creation times.
    • ›Adds durable reverts for paginated threads.
    • ›Adds manifest-defined metrics and bounded measurement analytics for trusted plugin scripts.
    • ›Attaches connector ID, action name, and model to file creation requests for hosted app tool calls.
48. rust-v0.148.0-alpha.11 Aug 13, 2026 · issue -006

    Codex CLI alpha.11 adds thread usage displays, thread-credits and estimated-thread-cost terminal title items, and improved MCP tool-call approval routing.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.11

    └──▷ USE IT
    Surface per-thread credit consumption and estimated cost directly in your terminal title bar while running Codex.
    yaml copy

    thread-credits, estimated-thread-cost

    • ›Adds thread-credits and estimated-thread-cost as configurable terminal title items, letting practitioners track per-thread quota consumption at a glance.
    • ›Shows estimated thread usage in the /status command and TUI status surfaces.
    • ›Adds dynamic HTTP header helpers for MCP servers.
    • ›Integrates workload identity with Codex authentication.
    • ›Supports gRPC code-mode hosts in the app server via --code-mode-host.
    +8 moreshow less

    • ›Enables executor skill packages to be passed directly to skills.read without a preceding skills.list lookup, including support for skill root aliases.
    • ›Enforces non-interactive approval policy for Codex delegate sessions.
    • ›Reconnects gRPC code-mode sessions automatically after host restarts.
    • ›Adds per-thread usage queries to the backend client.
    • ›Stamps conversation history items with creation times.
    • ›Adds durable reverts for paginated threads.
    • ›Adds manifest-defined metrics and bounded measurement analytics for trusted plugin scripts.
    • ›Attaches connector ID, action name, and model to file creation requests for hosted app tool calls.
49. rust-v0.148.0-alpha.7 Aug 11, 2026 · issue 001

    Codex CLI alpha.7 adds configurable goal token budget limits, session ID exposure to shell commands, and configurable Responses API request metadata.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.7

    • ›Adds configurable goal token budget limits via PR #37878 (Add configurable goal token budget limits).
    • ›Exposes the session ID to shell commands, enabling scripts and tools to reference the current session context.
    • ›Adds configurable Responses API request metadata, allowing custom metadata to be attached to API requests.
    • ›Supports MCP form input in full-access user threads, expanding interactive MCP workflows.
    • ›Adds packagedDefaults as a new lowest-precedence configuration layer, with its source path reported through config diagnostics and the app-server protocol; returns an error when a configured packaged defaults file is missing.
    +9 moreshow less

    • ›Caches tool catalogs for streamable HTTP MCP servers, reducing repeated catalog fetches.
    • ›Speeds up MCP OAuth credential reads.
    • ›Exposes plugin ownership in MCP server status.
    • ›Honors per-directory bundled skill settings in skills/list requests.
    • ›Simplifies skills.read so that package is the only required argument, resolving the owning orchestrator or executor catalog automatically and defaulting omitted resource values to the package's main SKILL.md.
    • ›Adds the codex.turn.unified_exec.running_processes counter to track background terminal processes remaining at turn completion.
    • ›Validates images before returning view_image output.
    • ›Honors the configured Windows sandbox level for managed networking.
    • ›Runs plugin and skill tests on Windows, extending platform coverage.
    └──▷ BREAKING ON UPGRADE

    • !Config lockfile support has been removed (Remove config lockfile support).
50. rust-v0.148.0-alpha.7 Aug 11, 2026 · issue -008

    Codex CLI alpha.7 adds configurable goal token budget limits, session ID exposure to shell commands, and configurable Responses API request metadata.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.7

    • ›Adds configurable goal token budget limits via PR #37878 (Add configurable goal token budget limits).
    • ›Exposes the session ID to shell commands, enabling scripts and tools to reference the current session context.
    • ›Adds configurable Responses API request metadata, allowing custom metadata to be attached to API requests.
    • ›Supports MCP form input in full-access user threads, expanding interactive MCP workflows.
    • ›Adds packagedDefaults as a new lowest-precedence configuration layer, with its source path reported through config diagnostics and the app-server protocol; returns an error when a configured packaged defaults file is missing.
    +9 moreshow less

    • ›Caches tool catalogs for streamable HTTP MCP servers, reducing repeated catalog fetches.
    • ›Speeds up MCP OAuth credential reads.
    • ›Exposes plugin ownership in MCP server status.
    • ›Honors per-directory bundled skill settings in skills/list requests.
    • ›Simplifies skills.read so that package is the only required argument, resolving the owning orchestrator or executor catalog automatically and defaulting omitted resource values to the package's main SKILL.md.
    • ›Adds the codex.turn.unified_exec.running_processes counter to track background terminal processes remaining at turn completion.
    • ›Validates images before returning view_image output.
    • ›Honors the configured Windows sandbox level for managed networking.
    • ›Runs plugin and skill tests on Windows, extending platform coverage.
    └──▷ BREAKING ON UPGRADE

    • !Config lockfile support has been removed (Remove config lockfile support).
51. rust-v0.147.0-alpha.6.6 Aug 10, 2026 · issue 001

    Codex CLI alpha.6.6 adds Amazon Bedrock web search, expanded MCP namespace descriptions, and Agent Plugin runtime isolation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.6

    • ›Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary, so complete server instructions are preserved in tool-search source metadata.
    • ›Enables cached web search for Amazon Bedrock: advertises hosted text web search while marking external live and indexed web access as unsupported, and resolves those modes to cached search (or disables the tool when cached search is prohibited by managed requirements).
    • ›Bounds model-visible skill instructions, plugin instructions, MCP descriptions, schemas, individual tools, and the aggregate Agent Plugin MCP tool set within plugin manifests.
    • ›Gives externalAgentConfig/detect its own global serialization queue so configuration reads, writes, and external agent imports remain responsive while detection is running.
    • ›Skips symbolic links (and other non-file, non-directory entries) when copying a plugin into the store, allowing plugin installation to proceed without failing on symlinked skill files or executables.
    +1 moreshow less

    • ›Bounds Cursor project path resolution to a set of 128 path candidates using common filename separators instead of walking the full directory tree, rejecting ambiguous matches and unsafe encoded components.
52. rust-v0.147.0-alpha.6.6 Aug 10, 2026 · issue -009

    Codex CLI alpha.6.6 adds Amazon Bedrock web search, expanded MCP namespace descriptions, and Agent Plugin runtime isolation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.6

    • ›Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary, so complete server instructions are preserved in tool-search source metadata.
    • ›Enables cached web search for Amazon Bedrock: advertises hosted text web search while marking external live and indexed web access as unsupported, and resolves those modes to cached search (or disables the tool when cached search is prohibited by managed requirements).
    • ›Bounds model-visible skill instructions, plugin instructions, MCP descriptions, schemas, individual tools, and the aggregate Agent Plugin MCP tool set within plugin manifests.
    • ›Gives externalAgentConfig/detect its own global serialization queue so configuration reads, writes, and external agent imports remain responsive while detection is running.
    • ›Skips symbolic links (and other non-file, non-directory entries) when copying a plugin into the store, allowing plugin installation to proceed without failing on symlinked skill files or executables.
    +1 moreshow less

    • ›Bounds Cursor project path resolution to a set of 128 path candidates using common filename separators instead of walking the full directory tree, rejecting ambiguous matches and unsafe encoded components.
53. rust-v0.148.0-alpha.6 Aug 10, 2026 · issue 001

    Codex CLI adds paginated TUI history, dual-WebSocket code-mode transport, cached web search for Amazon Bedrock, and tool registry collision policies.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.6

    • ›Adds --psp flag to app-server for process-scoped PSP routing of first-party ChatGPT requests.
    • ›Adds tool registry collision policy configuration (#36954) and enforces strict tool name collision errors.
    • ›Adds includeTurns reads for paginated threads to support incremental transcript access.
    • ›Adds a dual-WebSocket transport for code mode, enabling a new host-communication path.
    • ›Enables cached web search for Amazon Bedrock.
    +16 moreshow less

    • ›Enables remote compaction for Amazon Bedrock.
    • ›Adds paginated transcript history in the TUI, allowing large session histories to load incrementally.
    • ›Supports deferred loading for freeform tools and deferred custom tools in tool search.
    • ›Supports custom tools in namespaces.
    • ›Supports leaf models in multi-agent v2.
    • ›Adds opt-in concurrent exec-server request dispatch.
    • ›Adds durable per-thread user submission queues.
    • ›Adds host skill root loading and moves host skills service into the skills extension.
    • ›Prompts before trusting local project directories and rejects implicitly discovered bare Git repositories.
    • ›Adds Codex attribution links in pull request bodies.
    • ›Allows disabling the built-in image viewer.
    • ›Redacts secrets from app-server command execution items and improves bearer token secret redaction.
    • ›Negotiates MCP extensions per app-server session and handles late MCP startup results after lag timeout.
    • ›Preserves complete MCP namespace descriptions.
    • ›Identifies agents by name in token budget context and makes token budget context identity configurable.
    • ›Includes policy approval reasons in Guardian reviews.
54. rust-v0.148.0-alpha.6 Aug 10, 2026 · issue -009

    Codex CLI adds paginated TUI history, dual-WebSocket code-mode transport, cached web search for Amazon Bedrock, and tool registry collision policies.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.6

    • ›Adds --psp flag to app-server for process-scoped PSP routing of first-party ChatGPT requests.
    • ›Adds tool registry collision policy configuration (#36954) and enforces strict tool name collision errors.
    • ›Adds includeTurns reads for paginated threads to support incremental transcript access.
    • ›Adds a dual-WebSocket transport for code mode, enabling a new host-communication path.
    • ›Enables cached web search for Amazon Bedrock.
    +16 moreshow less

    • ›Enables remote compaction for Amazon Bedrock.
    • ›Adds paginated transcript history in the TUI, allowing large session histories to load incrementally.
    • ›Supports deferred loading for freeform tools and deferred custom tools in tool search.
    • ›Supports custom tools in namespaces.
    • ›Supports leaf models in multi-agent v2.
    • ›Adds opt-in concurrent exec-server request dispatch.
    • ›Adds durable per-thread user submission queues.
    • ›Adds host skill root loading and moves host skills service into the skills extension.
    • ›Prompts before trusting local project directories and rejects implicitly discovered bare Git repositories.
    • ›Adds Codex attribution links in pull request bodies.
    • ›Allows disabling the built-in image viewer.
    • ›Redacts secrets from app-server command execution items and improves bearer token secret redaction.
    • ›Negotiates MCP extensions per app-server session and handles late MCP startup results after lag timeout.
    • ›Preserves complete MCP namespace descriptions.
    • ›Identifies agents by name in token budget context and makes token budget context identity configurable.
    • ›Includes policy approval reasons in Guardian reviews.
55. rust-v0.148.0-alpha.5 Aug 8, 2026 · issue 001

    Codex CLI adds migrate-rollouts subcommand, Markdown conversation export, session forking in codex exec, and a Guardian circuit-breaker for cyber models.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.5

    └──▷ TRY IT
    Inspect or migrate legacy local sessions to paginated thread history before resuming old conversations.
    copy

    $ codex migrate-rollouts

    • ›Adds migrate-rollouts subcommand to inspect or migrate legacy local sessions to paginated thread history.
    • ›Adds Markdown conversation export to the TUI.
    • ›Adds session forking to codex exec.
    • ›Adds session archiving and restore to the resume picker.
    • ›Adds MCP event discovery and subscriptions.
    +10 moreshow less

    • ›Mounts a minimal /dev in full-filesystem Bubblewrap sandboxes.
    • ›Tracks context windows per agent.
    • ›Exposes multi-agent versions in model/list.
    • ›Exposes app-server diagnostics through the experimental API.
    • ›Adds process diagnostics snapshots.
    • ›Fetches remote installed plugins across all scopes.
    • ›Recovers MCP servers after OAuth reauthentication.
    • ›Starts cached MCP servers lazily for subagents.
    • ›Adds tool namespace metadata configuration.
    • ›Includes call IDs in MCP requests.
56. rust-v0.148.0-alpha.5 Aug 8, 2026 · issue -011

    Codex CLI adds migrate-rollouts subcommand, Markdown conversation export, session forking in codex exec, and a Guardian circuit-breaker for cyber models.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.5

    └──▷ TRY IT
    Inspect or migrate legacy local sessions to paginated thread history before resuming old conversations.
    copy

    $ codex migrate-rollouts

    • ›Adds migrate-rollouts subcommand to inspect or migrate legacy local sessions to paginated thread history.
    • ›Adds Markdown conversation export to the TUI.
    • ›Adds session forking to codex exec.
    • ›Adds session archiving and restore to the resume picker.
    • ›Adds MCP event discovery and subscriptions.
    +10 moreshow less

    • ›Mounts a minimal /dev in full-filesystem Bubblewrap sandboxes.
    • ›Tracks context windows per agent.
    • ›Exposes multi-agent versions in model/list.
    • ›Exposes app-server diagnostics through the experimental API.
    • ›Adds process diagnostics snapshots.
    • ›Fetches remote installed plugins across all scopes.
    • ›Recovers MCP servers after OAuth reauthentication.
    • ›Starts cached MCP servers lazily for subagents.
    • ›Adds tool namespace metadata configuration.
    • ›Includes call IDs in MCP requests.
57. rust-v0.148.0-alpha.4 Aug 8, 2026 · issue 001

    Codex CLI alpha adds multi-agent version metadata in model/list, MCP event discovery, process diagnostics, and a shared project-instruction byte budget.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.4

    • ›Adds nullable multiAgentVersion field to v2 model/list responses, with supported values disabled, v1, or v2, exposing multi-agent capability metadata for each model.
    • ›Adds codex-diagnostics crate that snapshots process ID, resident-memory measurements, and registered process-wide gauges; tracks live CodexThread instances via the core.threads.live gauge.
    • ›Adds MCP event discovery and subscriptions, enabling clients to subscribe to server-side events over MCP.
    • ›Includes call IDs in MCP requests for end-to-end traceability.
    • ›Treats project_doc_max_bytes as a single shared byte budget across all selected environments, truncating at the limit and skipping later environments once exhausted, capping total project instruction payload size.
    +7 moreshow less

    • ›Exposes app-server and runtime activity diagnostics through the experimental API.
    • ›Includes sandbox mode in response metadata.
    • ›Keeps response streams alive through connection failures, improving resilience for long-running agent turns.
    • ›Disables Nagle's algorithm for code-mode WebSockets, reducing latency for interactive sessions.
    • ›Reports temporary directories in exec-server environment info.
    • ›Includes tool namespace inventory in turn metadata.
    • ›Generalizes skill locator aliases across providers and aliases resource-backed skill locators under context pressure.
58. rust-v0.148.0-alpha.4 Aug 8, 2026 · issue -011

    Codex CLI alpha adds multi-agent version metadata in model/list, MCP event discovery, process diagnostics, and a shared project-instruction byte budget.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.4

    • ›Adds nullable multiAgentVersion field to v2 model/list responses, with supported values disabled, v1, or v2, exposing multi-agent capability metadata for each model.
    • ›Adds codex-diagnostics crate that snapshots process ID, resident-memory measurements, and registered process-wide gauges; tracks live CodexThread instances via the core.threads.live gauge.
    • ›Adds MCP event discovery and subscriptions, enabling clients to subscribe to server-side events over MCP.
    • ›Includes call IDs in MCP requests for end-to-end traceability.
    • ›Treats project_doc_max_bytes as a single shared byte budget across all selected environments, truncating at the limit and skipping later environments once exhausted, capping total project instruction payload size.
    +7 moreshow less

    • ›Exposes app-server and runtime activity diagnostics through the experimental API.
    • ›Includes sandbox mode in response metadata.
    • ›Keeps response streams alive through connection failures, improving resilience for long-running agent turns.
    • ›Disables Nagle's algorithm for code-mode WebSockets, reducing latency for interactive sessions.
    • ›Reports temporary directories in exec-server environment info.
    • ›Includes tool namespace inventory in turn metadata.
    • ›Generalizes skill locator aliases across providers and aliases resource-backed skill locators under context pressure.
59. rust-v0.148.0-alpha.2 Aug 7, 2026 · issue 001

    Codex CLI gains session forking, Markdown conversation export, session archiving, MCP tool hook config, and agent identity endpoint overrides.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.2

    └──▷ TRY IT
    Fork an existing session by ID and immediately send a follow-up prompt to continue work on a new branch of the conversation.
    copy

    $ codex exec fork session-123 'continue refactoring the auth module'

    Export the current TUI conversation to a Markdown file for documentation or sharing.
    copy

    $ /export ~/projects/my-session.md

    Point agent identity registration and verification at a staging environment instead of production.
    copy

    $ CODEX_AGENT_IDENTITY_AUTHAPI_BASE_URL=https://staging-auth.example.com CODEX_AGENT_IDENTITY_JWKS_BASE_URL=https://staging-jwks.example.com codex

    • ›Adds fork subcommand to codex exec that forks a previous session by UUID or thread name into a new session, with optional --image/-i flag for attachments and an optional prompt argument.
    • ›Adds /export TUI command to export the complete conversation history as structured Markdown, with clipboard and file destinations (including default filename prompt and support for an explicit path argument).
    • ›Supports CODEX_AGENT_IDENTITY_AUTHAPI_BASE_URL and CODEX_AGENT_IDENTITY_JWKS_BASE_URL environment variables to override agent identity registration and verification endpoints.
    • ›Adds session archiving to the resume picker, allowing sessions to be archived and restored from within the TUI.
    • ›Recognizes mcp_tool hook handler configurations (with server, tool, JSON input, and optional timeout and status message fields) and returns them from configRequirements/read.
    +1 moreshow less

    • ›Adds executor-local config layer loading for the exec server, enabling per-executor configuration overrides.
60. rust-v0.148.0-alpha.2 Aug 7, 2026 · issue -012

    Codex CLI gains session forking, Markdown conversation export, session archiving, MCP tool hook config, and agent identity endpoint overrides.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.2

    └──▷ TRY IT
    Fork an existing session by ID and immediately send a follow-up prompt to continue work on a new branch of the conversation.
    copy

    $ codex exec fork session-123 'continue refactoring the auth module'

    Export the current TUI conversation to a Markdown file for documentation or sharing.
    copy

    $ /export ~/projects/my-session.md

    Point agent identity registration and verification at a staging environment instead of production.
    copy

    $ CODEX_AGENT_IDENTITY_AUTHAPI_BASE_URL=https://staging-auth.example.com CODEX_AGENT_IDENTITY_JWKS_BASE_URL=https://staging-jwks.example.com codex

    • ›Adds fork subcommand to codex exec that forks a previous session by UUID or thread name into a new session, with optional --image/-i flag for attachments and an optional prompt argument.
    • ›Adds /export TUI command to export the complete conversation history as structured Markdown, with clipboard and file destinations (including default filename prompt and support for an explicit path argument).
    • ›Supports CODEX_AGENT_IDENTITY_AUTHAPI_BASE_URL and CODEX_AGENT_IDENTITY_JWKS_BASE_URL environment variables to override agent identity registration and verification endpoints.
    • ›Adds session archiving to the resume picker, allowing sessions to be archived and restored from within the TUI.
    • ›Recognizes mcp_tool hook handler configurations (with server, tool, JSON input, and optional timeout and status message fields) and returns them from configRequirements/read.
    +1 moreshow less

    • ›Adds executor-local config layer loading for the exec server, enabling per-executor configuration overrides.
61. rust-v0.148.0-alpha.1 Aug 7, 2026 · issue 001

    Codex CLI adds migrate-rollouts subcommand, Guardian circuit-breaker for cyber models, and a durable user-message queue.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.1

    └──▷ TRY IT
    Dry-run to see which local sessions are eligible for migration to paginated thread history before committing.
    copy

    $ codex migrate-rollouts --verbose --json

    Migrate a specific thread to paginated history with a bandwidth cap to avoid saturating disk I/O.
    copy

    $ codex migrate-rollouts --apply --thread <THREAD_ID> --max-mib-per-second 50

    • ›Adds migrate-rollouts subcommand with --apply, --thread <THREAD_ID>, --max-mib-per-second <MIB>, --json, and --verbose flags to inspect or migrate legacy local sessions to paginated thread history.
    • ›Adds a Guardian circuit-breaker policy that interrupts model turns after the first Guardian denial for models whose catalog specialty is cyber, while retaining existing denial thresholds for all other models.
    • ›Mounts a minimal /dev inside full-filesystem Bubblewrap sandboxes.
    • ›Starts cached MCP servers lazily for subagents, and recovers MCP servers automatically after OAuth reauthentication.
    • ›Fetches remote installed plugins across all scopes and supports plugin roots in the host skill loader.
    +1 moreshow less

    • ›Sends model routing hints to the Codex backend to improve model selection.
62. rust-v0.148.0-alpha.1 Aug 7, 2026 · issue -012

    Codex CLI adds migrate-rollouts subcommand, Guardian circuit-breaker for cyber models, and a durable user-message queue.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.148.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.148.0-alpha.1

    └──▷ TRY IT
    Dry-run to see which local sessions are eligible for migration to paginated thread history before committing.
    copy

    $ codex migrate-rollouts --verbose --json

    Migrate a specific thread to paginated history with a bandwidth cap to avoid saturating disk I/O.
    copy

    $ codex migrate-rollouts --apply --thread <THREAD_ID> --max-mib-per-second 50

    • ›Adds migrate-rollouts subcommand with --apply, --thread <THREAD_ID>, --max-mib-per-second <MIB>, --json, and --verbose flags to inspect or migrate legacy local sessions to paginated thread history.
    • ›Adds a Guardian circuit-breaker policy that interrupts model turns after the first Guardian denial for models whose catalog specialty is cyber, while retaining existing denial thresholds for all other models.
    • ›Mounts a minimal /dev inside full-filesystem Bubblewrap sandboxes.
    • ›Starts cached MCP servers lazily for subagents, and recovers MCP servers automatically after OAuth reauthentication.
    • ›Fetches remote installed plugins across all scopes and supports plugin roots in the host skill loader.
    +1 moreshow less

    • ›Sends model routing hints to the Codex backend to improve model selection.
63. rust-v0.147.0 Aug 7, 2026 · issue -012

    Codex CLI v0.147.0 adds --approve-for-me auto-approval, portable Agent Plugins, MCP 2026-07-28 protocol support, and Bedrock cached web search.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0

    └──▷ TRY IT
    Run a coding task in CI or unattended pipelines without being prompted to approve each agent action.
    copy

    $ codex exec --approve-for-me --sandbox workspace-write 'refactor auth module to use JWT'

    • ›Adds --approve-for-me CLI flag to enable automatically reviewed approvals without manual confirmation prompts.
    • ›Removes the deprecated codex exec --full-auto flag; --sandbox workspace-write is now the required replacement.
    • ›Supports the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup.
    • ›Installs portable Agent Plugins and searches across local, personal, workspace, and remote plugin catalogs.
    • ›Enables cached web search and remote conversation compaction for Amazon Bedrock.
    +2 moreshow less

    • ›Organizes conversations into persistent, manually ordered sections with incremental browsing of long transcripts.
    • ›Imports Cursor-managed skills and synchronizes changes to imported Claude and Cursor conversations without creating duplicates.
    └──▷ BREAKING ON UPGRADE

    • !The codex exec --full-auto flag has been removed; use --sandbox workspace-write instead.
    • !Redundant Linux bundle archives are no longer published; use the standard codex-package-<target> release archives instead.
64. rust-v0.147.0 Aug 7, 2026 · issue 001

    Codex CLI v0.147.0 adds --approve-for-me, portable Agent Plugins, MCP 2026 protocol support, and Amazon Bedrock cached web search.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0

    └──▷ TRY IT
    Run a coding task in CI without manual approval prompts by enabling auto-reviewed approvals.
    copy

    $ codex --approve-for-me 'refactor the auth module to use async/await'

    Run a sandboxed exec task using the replacement for the removed --full-auto flag.
    copy

    $ codex exec --sandbox workspace-write 'add unit tests for the payments service'

    • ›Adds --approve-for-me CLI flag to codex to enable automatically reviewed approvals without manual confirmation prompts.
    • ›Adds support for the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup.
    • ›Replaces the removed codex exec --full-auto flag with --sandbox workspace-write as the supported equivalent.
    • ›Introduces installable portable Agent Plugins with search across local, personal, workspace, and remote plugin catalogs.
    • ›Enables cached web search and remote conversation compaction for Amazon Bedrock backends.
    +3 moreshow less

    • ›Adds persistent, manually ordered conversation sections and incremental browsing of long transcripts in the TUI.
    • ›Supports importing Cursor-managed skills and synchronizing changes to imported Claude and Cursor conversations without duplicates.
    • ›Standardizes Linux release artifacts to codex-package-<target> archives, dropping the previously published redundant bundle archives.
    └──▷ BREAKING ON UPGRADE

    • !The --full-auto flag on codex exec has been removed; use --sandbox workspace-write instead.
    • !Redundant Linux bundle archives are no longer published; use the standard codex-package-<target> release archives.
65. rust-v0.147.0-alpha.13 Aug 6, 2026 · issue 001

    Codex CLI alpha adds thread section ordering, thread/section/move API, named forked chats, and MCP OAuth credential isolation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.13 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.13

    • ›Adds --psp flag to the app-server to enable process-only PSP routing for first-party ChatGPT requests.
    • ›Enables naming forked chats from the TUI.
    • ›Loads cloud-managed servers in MCP CLI commands.
    • ›Isolates MCP OAuth credentials by environment and restricts hosted MCP credentials to local environments.
    • ›Exposes MCP read-only hints in tool call items.
    +8 moreshow less

    • ›Distinguishes unknown MCP authentication status as a separate state.
    • ›Enables skills in the MCP server.
    • ›Supports Enterprise automation account plans.
    • ›Denies network access when an allow amendment fails, tightening sandbox enforcement.
    • ›Requires explicit sandbox permissions with shell justifications.
    • ›Restricts shell_command to a single local environment.
    • ›Detects connectors used in external agent sessions.
    • ›Records attempted tool calls in response metadata.
    └──▷ BREAKING ON UPGRADE

    • !Legacy --full-auto handling is removed from codex exec.
    • !Legacy Linux bundle archives are no longer published.
66. rust-v0.147.0-alpha.13 Aug 6, 2026 · issue -013

    Codex CLI alpha adds thread section ordering, thread/section/move API, named forked chats, and MCP OAuth credential isolation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.13 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.13

    • ›Adds --psp flag to the app-server to enable process-only PSP routing for first-party ChatGPT requests.
    • ›Enables naming forked chats from the TUI.
    • ›Loads cloud-managed servers in MCP CLI commands.
    • ›Isolates MCP OAuth credentials by environment and restricts hosted MCP credentials to local environments.
    • ›Exposes MCP read-only hints in tool call items.
    +8 moreshow less

    • ›Distinguishes unknown MCP authentication status as a separate state.
    • ›Enables skills in the MCP server.
    • ›Supports Enterprise automation account plans.
    • ›Denies network access when an allow amendment fails, tightening sandbox enforcement.
    • ›Requires explicit sandbox permissions with shell justifications.
    • ›Restricts shell_command to a single local environment.
    • ›Detects connectors used in external agent sessions.
    • ›Records attempted tool calls in response metadata.
    └──▷ BREAKING ON UPGRADE

    • !Legacy --full-auto handling is removed from codex exec.
    • !Legacy Linux bundle archives are no longer published.
67. rust-v0.147.0-alpha.12 Aug 5, 2026 · issue 001

    Adds disabled-by-default image resize notices, local auth requirement enforcement, and symlinked skill discovery path tracking.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.12 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.12

    • ›Adds the disabled-by-default image_resize_notice feature: when enabled, appends a developer message after resized images reporting each image's original and prepared dimensions, for both user messages and tool outputs.
    • ›Adds local requirements.toml allowlists for login methods and ChatGPT workspaces, enforced before stored or environment-provided credentials are used — including during bootstrap before cloud requirements are fetched.
    • ›Makes Windows PathUri equality and hashing ASCII-case-insensitive for drive and UNC paths while preserving case-sensitive POSIX behavior, including starts_with and relative_path_from comparisons.
68. rust-v0.147.0-alpha.12 Aug 5, 2026 · issue -014

    Adds disabled-by-default image resize notices, local auth requirement enforcement, and symlinked skill discovery path tracking.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.12 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.12

    • ›Adds the disabled-by-default image_resize_notice feature: when enabled, appends a developer message after resized images reporting each image's original and prepared dimensions, for both user messages and tool outputs.
    • ›Adds local requirements.toml allowlists for login methods and ChatGPT workspaces, enforced before stored or environment-provided credentials are used — including during bootstrap before cloud requirements are fetched.
    • ›Makes Windows PathUri equality and hashing ASCII-case-insensitive for drive and UNC paths while preserving case-sensitive POSIX behavior, including starts_with and relative_path_from comparisons.
69. rust-v0.147.0-alpha.6.5 Aug 5, 2026 · issue 001

    Codex CLI alpha.6.5 adds Amazon Bedrock cached web search, tightened Agent Plugin runtime boundaries, and fuller MCP namespace descriptions.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.5

    • ›Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary, so complete server instructions are preserved in tool-search metadata.
    • ›Enables cached web search for Amazon Bedrock: advertises hosted web search while marking external live/indexed access unsupported, and resolves unsupported modes to cached search or disables the tool when managed requirements prohibit it.
    • ›Skips symbolic links and other non-file, non-directory entries when installing a plugin into the store, allowing installations that include symlinked skill files or executables to succeed.
70. rust-v0.147.0-alpha.6.5 Aug 5, 2026 · issue -014

    Codex CLI alpha.6.5 adds Amazon Bedrock cached web search, tightened Agent Plugin runtime boundaries, and fuller MCP namespace descriptions.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.5

    • ›Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary, so complete server instructions are preserved in tool-search metadata.
    • ›Enables cached web search for Amazon Bedrock: advertises hosted web search while marking external live/indexed access unsupported, and resolves unsupported modes to cached search or disables the tool when managed requirements prohibit it.
    • ›Skips symbolic links and other non-file, non-directory entries when installing a plugin into the store, allowing installations that include symlinked skill files or executables to succeed.
71. rust-v0.147.0-alpha.11 Aug 5, 2026 · issue 001

    Codex CLI alpha.11 adds per-session code-mode execution limits and switches API-key Guardian reviews to gpt-5.6-luna.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.11

    • ›Adds create_session_with_limits and session-scoped cell execution limits via CodeModeSessionCellExecutionLimits, clamping execute and wait yield times to max_yield_time_ms without terminating the running cell; limits are negotiated with remote code-mode hosts and included in session/open only when non-default.
    • ›Switches Guardian approval reviews for API-key authenticated sessions to the gpt-5.6-luna model (retaining codex-auto-review for ChatGPT authentication), routing API-key reviews through Responses Lite with fallback to the bundled Guardian policy.
    • ›Caches McpBinding per published MCP runtime once the tool catalog revision is stable, reusing the binding across sampling steps and rebuilding only after a runtime publish or catalog change.
    • ›Bounds interactive TUI telemetry shutdown to a 500 ms budget via OtelProvider::shutdown_with_timeout, preventing a stalled OTLP exporter from blocking exit indefinitely.
72. rust-v0.147.0-alpha.11 Aug 5, 2026 · issue -014

    Codex CLI alpha.11 adds per-session code-mode execution limits and switches API-key Guardian reviews to gpt-5.6-luna.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.11 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.11

    • ›Adds create_session_with_limits and session-scoped cell execution limits via CodeModeSessionCellExecutionLimits, clamping execute and wait yield times to max_yield_time_ms without terminating the running cell; limits are negotiated with remote code-mode hosts and included in session/open only when non-default.
    • ›Switches Guardian approval reviews for API-key authenticated sessions to the gpt-5.6-luna model (retaining codex-auto-review for ChatGPT authentication), routing API-key reviews through Responses Lite with fallback to the bundled Guardian policy.
    • ›Caches McpBinding per published MCP runtime once the tool catalog revision is stable, reusing the binding across sampling steps and rebuilding only after a runtime publish or catalog change.
    • ›Bounds interactive TUI telemetry shutdown to a 500 ms budget via OtelProvider::shutdown_with_timeout, preventing a stalled OTLP exporter from blocking exit indefinitely.
73. rust-v0.147.0-alpha.10 Aug 5, 2026 · issue 001

    Codex CLI alpha adds concurrent exec-server dispatch, tool registry collision policy, paginated TUI history, and leaf model support for multi-agent v2.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.10

    └──▷ TRY IT
    Run the exec-server with up to 4 concurrent requests per connection to increase throughput in high-load environments.
    copy

    $ codex exec-server --concurrent-requests 4 --listen ws://127.0.0.1:8080

    Start Codex with process-scoped PSP routing enabled for first-party ChatGPT requests.
    copy

    $ codex --psp

    • ›Adds --concurrent-requests flag (alias --concurrent-requests COUNT, default 1) to the exec-server subcommand for opt-in concurrent request dispatch across connections.
    • ›Adds --psp global flag to enable process-scoped PSP routing for first-party ChatGPT requests.
    • ›Adds tool registry collision policy configuration with strict tool name collision errors enforced under a new canonical functions namespace.
    • ›Adds paginated transcript history loading in the TUI, enabling navigation of long session histories.
    • ›Enables cached web search for Amazon Bedrock.
    +11 moreshow less

    • ›Enables remote compaction for Amazon Bedrock.
    • ›Prompts before trusting local project directories, and rejects implicitly discovered bare Git repositories.
    • ›Adds durable per-thread user submission queues.
    • ›Links Codex attribution in pull request bodies.
    • ›Allows disabling the built-in image viewer.
    • ›Skips symlinks when installing plugins.
    • ›Limits RMCP logs persisted to SQLite.
    • ›Negotiates MCP extensions per app-server session.
    • ›Makes token budget context identity configurable.
    • ›Supports configured ChatGPT cookies in HTTP clients.
    • ›Adds safer TUI defaults for cyber models.
    └──▷ BREAKING ON UPGRADE

    • !Legacy collaboration mode variants have been removed (Remove legacy collaboration mode variants).
74. rust-v0.147.0-alpha.10 Aug 5, 2026 · issue -014

    Codex CLI alpha adds concurrent exec-server dispatch, tool registry collision policy, paginated TUI history, and leaf model support for multi-agent v2.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.10

    └──▷ TRY IT
    Run the exec-server with up to 4 concurrent requests per connection to increase throughput in high-load environments.
    copy

    $ codex exec-server --concurrent-requests 4 --listen ws://127.0.0.1:8080

    Start Codex with process-scoped PSP routing enabled for first-party ChatGPT requests.
    copy

    $ codex --psp

    • ›Adds --concurrent-requests flag (alias --concurrent-requests COUNT, default 1) to the exec-server subcommand for opt-in concurrent request dispatch across connections.
    • ›Adds --psp global flag to enable process-scoped PSP routing for first-party ChatGPT requests.
    • ›Adds tool registry collision policy configuration with strict tool name collision errors enforced under a new canonical functions namespace.
    • ›Adds paginated transcript history loading in the TUI, enabling navigation of long session histories.
    • ›Enables cached web search for Amazon Bedrock.
    +11 moreshow less

    • ›Enables remote compaction for Amazon Bedrock.
    • ›Prompts before trusting local project directories, and rejects implicitly discovered bare Git repositories.
    • ›Adds durable per-thread user submission queues.
    • ›Links Codex attribution in pull request bodies.
    • ›Allows disabling the built-in image viewer.
    • ›Skips symlinks when installing plugins.
    • ›Limits RMCP logs persisted to SQLite.
    • ›Negotiates MCP extensions per app-server session.
    • ›Makes token budget context identity configurable.
    • ›Supports configured ChatGPT cookies in HTTP clients.
    • ›Adds safer TUI defaults for cyber models.
    └──▷ BREAKING ON UPGRADE

    • !Legacy collaboration mode variants have been removed (Remove legacy collaboration mode variants).
75. rust-v0.147.0-alpha.6.4 Aug 4, 2026 · issue 001

    Codex CLI now enables cached web search for Amazon Bedrock, falling back from unsupported live/indexed modes automatically.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.4

    • ›Adds hosted web search support for Amazon Bedrock, advertising cached web search while marking external live and indexed web access as unsupported — unsupported modes resolve to cached search, or the tool is disabled when cached search is prohibited by managed requirements.
    • ›Normalizes built-in and configured Bedrock model catalogs to text-only web search payloads, removing the search_content_types field that Bedrock rejects for multimodal search.
    • ›Retains the runtime provider in session configuration so per-turn setup can apply provider-specific capabilities (e.g. text-only search for Bedrock).
76. rust-v0.147.0-alpha.6.4 Aug 4, 2026 · issue -015

    Codex CLI now enables cached web search for Amazon Bedrock, falling back from unsupported live/indexed modes automatically.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.4 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.4

    • ›Adds hosted web search support for Amazon Bedrock, advertising cached web search while marking external live and indexed web access as unsupported — unsupported modes resolve to cached search, or the tool is disabled when cached search is prohibited by managed requirements.
    • ›Normalizes built-in and configured Bedrock model catalogs to text-only web search payloads, removing the search_content_types field that Bedrock rejects for multimodal search.
    • ›Retains the runtime provider in session configuration so per-turn setup can apply provider-specific capabilities (e.g. text-only search for Bedrock).
77. rust-v0.147.0-alpha.6.3 Aug 4, 2026 · issue 001

    Codex CLI raises MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, preserving complete server instructions.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.3 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.3

    • ›Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary when the new limit is exceeded — preserving complete server instructions and preventing tools from being hidden.
    • ›Keeps complete MCP namespace descriptions in tool-search source metadata.
78. rust-v0.147.0-alpha.6.3 Aug 4, 2026 · issue -015

    Codex CLI raises MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, preserving complete server instructions.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.6.3 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.6.3

    • ›Raises the MCP namespace tool-spec description limit from 1,000 bytes to 512 KiB, truncating only at a UTF-8 character boundary when the new limit is exceeded — preserving complete server instructions and preventing tools from being hidden.
    • ›Keeps complete MCP namespace descriptions in tool-search source metadata.
79. rust-v0.147.0-alpha.7 Aug 4, 2026 · issue 001

    Codex CLI alpha.7 adds dual-WebSocket transport for code mode, MCP conformance regression gates, and per-environment login shell policy.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.7

    • ›Adds exec resume --last performance improvement by querying the state database first, avoiding a full rollout scan; falls back to scanning only on a complete database miss.
    • ›Supports per-environment allow_login_shell policy, exposing the login argument for shell tools when any selected environment permits login shells and validating each command against its own environment's policy.
    • ›Adds a dual-WebSocket transport for code mode, routing frames to the appropriate transport lane via transport_lane().
    • ›Adds MCP client conformance regression gates covering HTTP and stdio transports, OAuth scenarios, shipping/intermediate/modern protocol versions, and an app-server regression matrix for transport, security, schema, pagination, SSE, multi-round, and catalog-boundary behavior.
    • ›Adds codex-utils-audio workspace crate for canonicalizing audio inputs and estimating token usage.
    +4 moreshow less

    • ›Supports deferred loading for freeform tools and custom tools in namespaces.
    • ›Adds timeout handling for stalled code-mode host requests.
    • ›Identifies agents by name in token budget context.
    • ›Prefers SQLite-backed names when resolving local archive, delete, and unarchive session targets before falling back to rollout scanning.
80. rust-v0.147.0-alpha.7 Aug 4, 2026 · issue -015

    Codex CLI alpha.7 adds dual-WebSocket transport for code mode, MCP conformance regression gates, and per-environment login shell policy.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.7

    • ›Adds exec resume --last performance improvement by querying the state database first, avoiding a full rollout scan; falls back to scanning only on a complete database miss.
    • ›Supports per-environment allow_login_shell policy, exposing the login argument for shell tools when any selected environment permits login shells and validating each command against its own environment's policy.
    • ›Adds a dual-WebSocket transport for code mode, routing frames to the appropriate transport lane via transport_lane().
    • ›Adds MCP client conformance regression gates covering HTTP and stdio transports, OAuth scenarios, shipping/intermediate/modern protocol versions, and an app-server regression matrix for transport, security, schema, pagination, SSE, multi-round, and catalog-boundary behavior.
    • ›Adds codex-utils-audio workspace crate for canonicalizing audio inputs and estimating token usage.
    +4 moreshow less

    • ›Supports deferred loading for freeform tools and custom tools in namespaces.
    • ›Adds timeout handling for stalled code-mode host requests.
    • ›Identifies agents by name in token budget context.
    • ›Prefers SQLite-backed names when resolving local archive, delete, and unarchive session targets before falling back to rollout scanning.
81. rust-v0.147.0-alpha.2 Jul 30, 2026 · issue 001

    Codex CLI adds MCP 2026 protocol support, cloud-managed sandbox profiles, non-blocking MCP startup, and concurrent tool resolution.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.2

    • ›Adds MCP 2026-07-28 discovery support and completes full MCP 2026 client support.
    • ›Loads cloud-managed profiles for codex sandbox, enabling centrally provisioned sandbox configurations.
    • ›Routes MCP OAuth through configured HTTP clients, unifying network proxy handling for MCP authentication flows.
    • ›Adds configurable developer instructions for v2 subagents.
    • ›Supports model-owned token budget defaults, applying model-catalog-supplied budgets when no explicit token-budget configuration is set.
    +8 moreshow less

    • ›Routes WebRTC sideband joins to the Realtime API.
    • ›Adds persisted thread sections for organizing conversation threads.
    • ›Enables network policy callbacks for remote exec.
    • ›Terminates Windows non-TTY processes on interrupt, improving Ctrl-C behavior on Windows.
    • ›Loads thread titles concurrently during session startup.
    • ›Supports self-serve Business ProLite accounts.
    • ›Supports plaintext collaboration tool messages.
    • ›Honors the configured SQLite home in the logs client.
82. rust-v0.147.0-alpha.2 Jul 30, 2026 · issue -020

    Codex CLI adds MCP 2026 protocol support, cloud-managed sandbox profiles, non-blocking MCP startup, and concurrent tool resolution.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.2 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.2

    • ›Adds MCP 2026-07-28 discovery support and completes full MCP 2026 client support.
    • ›Loads cloud-managed profiles for codex sandbox, enabling centrally provisioned sandbox configurations.
    • ›Routes MCP OAuth through configured HTTP clients, unifying network proxy handling for MCP authentication flows.
    • ›Adds configurable developer instructions for v2 subagents.
    • ›Supports model-owned token budget defaults, applying model-catalog-supplied budgets when no explicit token-budget configuration is set.
    +8 moreshow less

    • ›Routes WebRTC sideband joins to the Realtime API.
    • ›Adds persisted thread sections for organizing conversation threads.
    • ›Enables network policy callbacks for remote exec.
    • ›Terminates Windows non-TTY processes on interrupt, improving Ctrl-C behavior on Windows.
    • ›Loads thread titles concurrently during session startup.
    • ›Supports self-serve Business ProLite accounts.
    • ›Supports plaintext collaboration tool messages.
    • ›Honors the configured SQLite home in the logs client.
83. rust-v0.146.0-alpha.9.1 Jul 29, 2026 · issue 001

    Codex CLI adds managed in-app updates so the tool can keep itself current without manual reinstallation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.9.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.9.1

    • ›Adds managed in-app updates, allowing Codex CLI to update itself automatically from within the application.
84. rust-v0.146.0-alpha.9.1 Jul 29, 2026 · issue -021

    Codex CLI adds managed in-app updates so the tool can keep itself current without manual reinstallation.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.9.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.9.1

    • ›Adds managed in-app updates, allowing Codex CLI to update itself automatically from within the application.
85. rust-v0.147.0-alpha.1 Jul 29, 2026 · issue 001

    Codex CLI adds features.code_mode_host table config, MCP 2026 support, cloud-managed sandbox profiles, and exec-server network policy callbacks.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.1

    • ›Adds MCP 2026-07-28 discovery support and completes the full MCP 2026 client specification.
    • ›Raises the MCP server recursion limit to unblock deeper tool-call chains.
    • ›Exposes cached MCP tools before the MCP server finishes starting up, reducing turn latency at session start.
    • ›Routes MCP OAuth flows through the configured HTTP clients, ensuring proxy and routing settings apply to all authentication requests.
    • ›Adds persisted sections for organizing threads in the TUI.
    +9 moreshow less

    • ›Adds configurable developer instructions for v2 subagents.
    • ›Supports model-owned token budget defaults.
    • ›Routes curated plugins by authentication mode.
    • ›Supports self-serve Business ProLite accounts.
    • ›Scales skill metadata budgets with context windows.
    • ›Adds bounded metadata for executed tool calls.
    • ›Adds managed policy support for in-app updates.
    • ›Terminates Windows non-TTY processes on interrupt, improving Ctrl-C behavior in non-interactive pipelines.
    • ›Raises the Windows exec yield floor to 10 seconds for more reliable subprocess scheduling.
86. rust-v0.147.0-alpha.1 Jul 29, 2026 · issue -021

    Codex CLI adds features.code_mode_host table config, MCP 2026 support, cloud-managed sandbox profiles, and exec-server network policy callbacks.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.147.0-alpha.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.147.0-alpha.1

    • ›Adds MCP 2026-07-28 discovery support and completes the full MCP 2026 client specification.
    • ›Raises the MCP server recursion limit to unblock deeper tool-call chains.
    • ›Exposes cached MCP tools before the MCP server finishes starting up, reducing turn latency at session start.
    • ›Routes MCP OAuth flows through the configured HTTP clients, ensuring proxy and routing settings apply to all authentication requests.
    • ›Adds persisted sections for organizing threads in the TUI.
    +9 moreshow less

    • ›Adds configurable developer instructions for v2 subagents.
    • ›Supports model-owned token budget defaults.
    • ›Routes curated plugins by authentication mode.
    • ›Supports self-serve Business ProLite accounts.
    • ›Scales skill metadata budgets with context windows.
    • ›Adds bounded metadata for executed tool calls.
    • ›Adds managed policy support for in-app updates.
    • ›Terminates Windows non-TTY processes on interrupt, improving Ctrl-C behavior in non-interactive pipelines.
    • ›Raises the Windows exec yield floor to 10 seconds for more reliable subprocess scheduling.
87. rust-v0.146.0 Jul 29, 2026 · issue -021

    Codex CLI gains session naming, thread pinning, fork history, Agent Plugins with Bedrock/Claude marketplaces, WebSocket Code Mode, and standalone web search.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0

    └──▷ TRY IT
    Name a new session inline when starting a fresh conversation, keeping thread history organized.
    copy

    $ /new my-audit-session

    • ›Enables naming new sessions directly from the /new or /clear commands and pinning important threads for persistent access.
    • ›Supports Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code.
    • ›Adds thread forking with paginated history, including temporary forks that do not appear in thread listings.
    • ›Connects app-server to remote Code Mode hosts over WebSocket.
    • ›Enables standalone web search for compatible custom model providers.
    +2 moreshow less

    • ›Discovers executor-provided skills and securely reads their associated resources, including explicitly selected skills.
    • ›Adds enterprise-plan recognition and administrator controls for in-app updates.
88. rust-v0.146.0 Jul 29, 2026 · issue 001

    Codex CLI v0.146.0 adds named sessions, thread pinning, thread forking, WebSocket Code Mode, web search for custom providers, and Agent Plugin marketplace support.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0

    └──▷ TRY IT
    Force the Codex installer to use GitHub Releases instead of releases.openai.com, useful when the OpenAI CDN is unreachable in a restricted environment.
    copy

    $ curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false sh

    • ›Enables standalone web search for compatible custom model providers via the allow custom providers to opt into standalone web search capability (PR #34846).
    • ›Supports CODEX_INSTALLER_USE_RELEASES_OPENAI_COM environment variable to control whether the installer pulls from https://releases.openai.com/codex or falls back to GitHub Releases.
    • ›Name new sessions using /new or /clear slash commands inside the TUI.
    • ›Pin important threads and switch between side conversations without closing them.
    • ›Fork threads with paginated history, including temporary forks that do not appear in thread listings.
    +4 moreshow less

    • ›Connects app-server to remote Code Mode hosts over WebSocket.
    • ›Adds support for Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code.
    • ›Discovers executor-provided skills and securely reads their associated resources, including explicitly selected skills.
    • ›Adds enterprise-plan recognition and administrator controls for in-app updates.
89. rust-v0.146.0-alpha.10 Jul 25, 2026 · issue 001

    Codex CLI alpha adds configurable code-mode host fallback, hardened network approval concurrency, and richer Responses Lite metadata.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.10

    • ›Adds disable_in_process_fallback key inside a features.code_mode_host configuration table, letting operators suppress the embedded-V8 fallback so that a failed standalone host surfaces as tool output instead of silently falling back.
    • ›Preserves backward compatibility: features.code_mode_host still accepts a plain boolean toggle in addition to the new table form.
    • ›Adds code_mode_tool_names field to Responses Lite turn metadata, mapping each normalized code-mode identifier to its structured ToolName (omitted from external MCP server metadata and non-Lite requests).
    • ›Scopes pending network approvals to a turn and execution, coalesces duplicate requests within one execution, and cancels in-flight Guardian reviews when their owner is dropped — eliminating races between concurrent allow/deny decisions.
90. rust-v0.146.0-alpha.10 Jul 25, 2026 · issue -025

    Codex CLI alpha adds configurable code-mode host fallback, hardened network approval concurrency, and richer Responses Lite metadata.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.10 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.10

    • ›Adds disable_in_process_fallback key inside a features.code_mode_host configuration table, letting operators suppress the embedded-V8 fallback so that a failed standalone host surfaces as tool output instead of silently falling back.
    • ›Preserves backward compatibility: features.code_mode_host still accepts a plain boolean toggle in addition to the new table form.
    • ›Adds code_mode_tool_names field to Responses Lite turn metadata, mapping each normalized code-mode identifier to its structured ToolName (omitted from external MCP server metadata and non-Lite requests).
    • ›Scopes pending network approvals to a turn and execution, coalesces duplicate requests within one execution, and cancels in-flight Guardian reviews when their owner is dropped — eliminating races between concurrent allow/deny decisions.
91. rust-v0.146.0-alpha.8 Jul 24, 2026 · issue 001

    Codex CLI alpha adds ent26 enterprise plan support, MCP OAuth proxy routing, ephemeral thread forks, and workspace plugin publish capability.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.8 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.8

    • ›Adds canPublishToWorkspace nullable metadata to plugin share contexts and plugin/share/save responses, letting clients surface workspace-directory publishing only when the capability is available.
    • ›Supports excludeTurns: true in thread/fork to create ephemeral forks from paginated thread history without creating a rollout path or exposing the fork via thread/list.
    • ›Routes MCP OAuth discovery and authentication status through each server's runtime HTTP client so MCP servers behind configured proxies are reliably discovered; caps local discovery at five seconds while preserving explicit login timeouts.
    • ›Adds recognition of the ent26 enterprise plan across authentication, account protocol, backend rate-limit payloads, and app-server schemas, treating it as an enterprise workspace plan for cloud-config eligibility and usage-limit guidance.
92. rust-v0.146.0-alpha.8 Jul 24, 2026 · issue -026

    Codex CLI alpha adds ent26 enterprise plan support, MCP OAuth proxy routing, ephemeral thread forks, and workspace plugin publish capability.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.8 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.8

    • ›Adds canPublishToWorkspace nullable metadata to plugin share contexts and plugin/share/save responses, letting clients surface workspace-directory publishing only when the capability is available.
    • ›Supports excludeTurns: true in thread/fork to create ephemeral forks from paginated thread history without creating a rollout path or exposing the fork via thread/list.
    • ›Routes MCP OAuth discovery and authentication status through each server's runtime HTTP client so MCP servers behind configured proxies are reliably discovered; caps local discovery at five seconds while preserving explicit login timeouts.
    • ›Adds recognition of the ent26 enterprise plan across authentication, account protocol, backend rate-limit payloads, and app-server schemas, treating it as an enterprise workspace plan for cloud-config eligibility and usage-limit guidance.
93. rust-v0.146.0-alpha.7 Jul 24, 2026 · issue 001

    Codex CLI gains Agent Plugins manifest support, MCP runtime prewarming, and background MCP refresh coordination.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.7

    • ›Supports Agent Plugins 1.0 schema: recognizes root plugin.json files and maps their portable metadata, skills/, and mcp.json into Codex plugin manifests, with .codex-plugin/plugin.json as a fallback overlay.
    • ›Adds WaitForEnvironmentToolConfig as thread extension data, letting hosts override the model-visible wait_for_environment tool and environment_id descriptions.
    • ›Adds background MCP runtime prewarming — a per-session worker eagerly rebuilds dirty MCP state after configuration, authentication, or explicit refresh changes, coalescing queued refreshes.
    • ›Refreshes MCP runtimes automatically when session auth changes (auth mode, account details, or token), and rebuilds the initial MCP projection if authentication changes during session startup.
    • ›Adds explicit RefreshMcpServers behavior that forces reconnection to every configured MCP server rather than reusing existing connections.
    +4 moreshow less

    • ›Refreshes MCP runtimes across thread startup and independently across active threads when managed MCP requirements change.
    • ›Supports paginated thread forks.
    • ›Exposes executor skills through skill tools and enables resource reads for explicit executor skills.
    • ›Preserves output from hooks that exit before reading stdin (fast-exiting hooks no longer lose stdout when stdin is not consumed).
94. rust-v0.146.0-alpha.7 Jul 24, 2026 · issue -026

    Codex CLI gains Agent Plugins manifest support, MCP runtime prewarming, and background MCP refresh coordination.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.7 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.7

    • ›Supports Agent Plugins 1.0 schema: recognizes root plugin.json files and maps their portable metadata, skills/, and mcp.json into Codex plugin manifests, with .codex-plugin/plugin.json as a fallback overlay.
    • ›Adds WaitForEnvironmentToolConfig as thread extension data, letting hosts override the model-visible wait_for_environment tool and environment_id descriptions.
    • ›Adds background MCP runtime prewarming — a per-session worker eagerly rebuilds dirty MCP state after configuration, authentication, or explicit refresh changes, coalescing queued refreshes.
    • ›Refreshes MCP runtimes automatically when session auth changes (auth mode, account details, or token), and rebuilds the initial MCP projection if authentication changes during session startup.
    • ›Adds explicit RefreshMcpServers behavior that forces reconnection to every configured MCP server rather than reusing existing connections.
    +4 moreshow less

    • ›Refreshes MCP runtimes across thread startup and independently across active threads when managed MCP requirements change.
    • ›Supports paginated thread forks.
    • ›Exposes executor skills through skill tools and enables resource reads for explicit executor skills.
    • ›Preserves output from hooks that exit before reading stdin (fast-exiting hooks no longer lose stdout when stdin is not consumed).
95. rust-v0.146.0-alpha.6 Jul 24, 2026 · issue 001

    Codex CLI alpha.6 adds remote code-mode host support via --code-mode-host, skill catalog context warnings, and nonblocking TUI turn interrupts.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.6

    └──▷ TRY IT
    Connect the app server to a remote code-mode host over a secure WebSocket instead of the default local transport.
    copy

    $ codex-app-server --code-mode-host wss://example.com/code-mode --listen stdio://

    • ›Adds --code-mode-host flag to codex-app-server, accepting a wss:// WebSocket URL to connect the app server to a remote code-mode host (invalid schemes such as http:// or bare ws:// are rejected at parse time).
    • ›Adds WebSocket transport to the code-mode host, enabling remote code-mode host connections through the app server.
    • ›Exposes Browser Use requirements and remote skill icon URLs through the app server for downstream consumers.
    • ›Attributes command executions to trusted plugin scripts, with attribution preserved across command approvals.
    • ›Routes exec-server HTTP and WebSocket traffic through the configured proxy policy.
    +4 moreshow less

    • ›Preserves refreshed Apps tools across MCP runtime updates and keeps side conversations open when switching threads.
    • ›Enforces writer ownership for thread archive and deletion operations.
    • ›Supports incremental replay of updated thread items.
    • ›Honors the configured SQLite home directory consistently across all state consumers, including startup backfill, thread listing, and paginated history.
96. rust-v0.146.0-alpha.6 Jul 24, 2026 · issue -026

    Codex CLI alpha.6 adds remote code-mode host support via --code-mode-host, skill catalog context warnings, and nonblocking TUI turn interrupts.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.6 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.6

    └──▷ TRY IT
    Connect the app server to a remote code-mode host over a secure WebSocket instead of the default local transport.
    copy

    $ codex-app-server --code-mode-host wss://example.com/code-mode --listen stdio://

    • ›Adds --code-mode-host flag to codex-app-server, accepting a wss:// WebSocket URL to connect the app server to a remote code-mode host (invalid schemes such as http:// or bare ws:// are rejected at parse time).
    • ›Adds WebSocket transport to the code-mode host, enabling remote code-mode host connections through the app server.
    • ›Exposes Browser Use requirements and remote skill icon URLs through the app server for downstream consumers.
    • ›Attributes command executions to trusted plugin scripts, with attribution preserved across command approvals.
    • ›Routes exec-server HTTP and WebSocket traffic through the configured proxy policy.
    +4 moreshow less

    • ›Preserves refreshed Apps tools across MCP runtime updates and keeps side conversations open when switching threads.
    • ›Enforces writer ownership for thread archive and deletion operations.
    • ›Supports incremental replay of updated thread items.
    • ›Honors the configured SQLite home directory consistently across all state consumers, including startup backfill, thread listing, and paginated history.
97. rust-v0.146.0-alpha.3.1 Jul 23, 2026 · issue 001

    Codex CLI adds supports_standalone_web_search setting so custom model providers can opt into the standalone web.run tool.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.3.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.3.1

    • ›Adds supports_standalone_web_search model-provider setting (defaults to false) that lets custom Responses API providers opt into the standalone web.run web-search tool when web search is enabled.
    • ›Routes standalone web search requests through the custom provider's own endpoint and authentication when supports_standalone_web_search is enabled.
98. rust-v0.146.0-alpha.3.1 Jul 23, 2026 · issue -027

    Codex CLI adds supports_standalone_web_search setting so custom model providers can opt into the standalone web.run tool.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.3.1 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.3.1

    • ›Adds supports_standalone_web_search model-provider setting (defaults to false) that lets custom Responses API providers opt into the standalone web.run web-search tool when web search is enabled.
    • ›Routes standalone web search requests through the custom provider's own endpoint and authentication when supports_standalone_web_search is enabled.
99. rust-v0.146.0-alpha.5 Jul 23, 2026 · issue 001

    Codex CLI alpha.5 adds thread pinning, MCP tool prefix control, custom provider web search, and MCP connection reuse.

    └──▷ GET THIS VERSION
    copy

    $ git clone --branch rust-v0.146.0-alpha.5 https://github.com/openai/codex.git
    # already have the repo? check out this version:
    $ git checkout rust-v0.146.0-alpha.5

    └──▷ TRY IT
    Force the standalone installer to use GitHub Releases instead of releases.openai.com, useful in environments that block the primary CDN.
    copy

    $ curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false sh

    • ›Adds isPinned field to thread responses and allows thread/metadata/update to pin or unpin stored threads.
    • ›Adds isPinned filter to thread/list, supporting cursor-based pagination and combinations with relationship filters.
    • ›Allows omitting MCP tool prefixes per server, reducing namespace clutter in multi-server setups.
    • ›Allows custom providers to opt into standalone web search.
    • ›Allows disabling the multi-agent wait tool.
    +9 moreshow less

    • ›Sets a default user agent for MCP HTTP requests.
    • ›Reuses MCP connections across runtime refreshes and replaces closed MCP connections during reconciliation, reducing reconnect overhead.
    • ›Caches remote plugin catalogs by scope for faster plugin resolution.
    • ›Tracks compaction_ms in turn profile facts and analytics events as a dedicated profile phase.
    • ›Preserves user input in conversation history when MCP startup is interrupted mid-turn.
    • ›Infers the bundled Claude Code plugin marketplace automatically.
    • ›Uses the API plugin marketplace for Amazon Bedrock.
    • ›Preserves timestamps when importing external agent sessions.
    • ›Standalone installers now prefer releases.openai.com by default and fall back to GitHub Releases; set CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false to force GitHub Releases.
100. rust-v0.146.0-alpha.5 Jul 23, 2026 · issue -027

     Codex CLI alpha.5 adds thread pinning, MCP tool prefix control, custom provider web search, and MCP connection reuse.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.146.0-alpha.5 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.146.0-alpha.5

     └──▷ TRY IT
     Force the standalone installer to use GitHub Releases instead of releases.openai.com, useful in environments that block the primary CDN.
     copy

     $ curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false sh

     • ›Adds isPinned field to thread responses and allows thread/metadata/update to pin or unpin stored threads.
     • ›Adds isPinned filter to thread/list, supporting cursor-based pagination and combinations with relationship filters.
     • ›Allows omitting MCP tool prefixes per server, reducing namespace clutter in multi-server setups.
     • ›Allows custom providers to opt into standalone web search.
     • ›Allows disabling the multi-agent wait tool.
     +9 moreshow less

     • ›Sets a default user agent for MCP HTTP requests.
     • ›Reuses MCP connections across runtime refreshes and replaces closed MCP connections during reconciliation, reducing reconnect overhead.
     • ›Caches remote plugin catalogs by scope for faster plugin resolution.
     • ›Tracks compaction_ms in turn profile facts and analytics events as a dedicated profile phase.
     • ›Preserves user input in conversation history when MCP startup is interrupted mid-turn.
     • ›Infers the bundled Claude Code plugin marketplace automatically.
     • ›Uses the API plugin marketplace for Amazon Bedrock.
     • ›Preserves timestamps when importing external agent sessions.
     • ›Standalone installers now prefer releases.openai.com by default and fall back to GitHub Releases; set CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false to force GitHub Releases.
101. rust-v0.145.0-alpha.30 Jul 22, 2026 · issue 001

     Codex CLI alpha.30 adds Esc-key session interruption and parallel stdin writes across unified-exec sessions.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.30 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.30

     • ›Adds Esc key as an interrupt mechanism to cancel a running agent task mid-session, now documented in the status indicator.
     • ›Runs write_stdin in parallel across unified-exec sessions, improving throughput when multiple shell sessions are active.
     • ›Updates bundled GPT-5.6 model variants with 272,000-token context windows and adds personality instruction variables.
     • ›Adds GPT-5.5 availability notice to the bundled model catalog.
     └──▷ BREAKING ON UPGRADE

     • !The auto_review and permissions message fields and the legacy supports_reasoning_summary_parameter flag are removed from the bundled model catalog.
102. rust-v0.145.0-alpha.30 Jul 22, 2026 · issue -028

     Codex CLI alpha.30 adds Esc-key session interruption and parallel stdin writes across unified-exec sessions.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.30 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.30

     • ›Adds Esc key as an interrupt mechanism to cancel a running agent task mid-session, now documented in the status indicator.
     • ›Runs write_stdin in parallel across unified-exec sessions, improving throughput when multiple shell sessions are active.
     • ›Updates bundled GPT-5.6 model variants with 272,000-token context windows and adds personality instruction variables.
     • ›Adds GPT-5.5 availability notice to the bundled model catalog.
     └──▷ BREAKING ON UPGRADE

     • !The auto_review and permissions message fields and the legacy supports_reasoning_summary_parameter flag are removed from the bundled model catalog.
103. rust-v0.145.0 Jul 21, 2026 · issue -029

     Codex CLI gains paginated thread history, Amazon Bedrock support, audio I/O, multi-agent V2 stability, and expanded /import migration.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0

     • ›Adds GPT-5.6 Sol as the default Amazon Bedrock model, with experimental managed Bedrock login, custom endpoint, and custom authentication support.
     • ›Expands /import to migrate settings, MCP servers, plugins, sessions, commands, and project-scoped memories from Cursor and Claude Code.
     • ›Adds experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories backed by a dedicated SQLite store.
     • ›Adds audio inputs and tool outputs supporting common local audio formats, and introduces streaming realtime V3 conversations.
     • ›Adds secure, clickable inline visualization links in the terminal UI.
104. rust-v0.145.0 Jul 21, 2026 · issue 001

     Codex CLI v0.145.0 adds paginated thread history, Bedrock login, audio inputs, stabilized multi-agent V2, and expanded /import migration.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0

     • ›Adds experimental Amazon Bedrock login with managed authentication support, custom endpoint configuration, and GPT-5.6 Sol as the default Bedrock model.
     • ›Expands /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories.
     • ›Adds experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories.
     • ›Adds audio inputs and tool outputs supporting common local audio formats, and introduces streaming realtime V3 conversations.
     • ›Adds secure, clickable inline visualization links rendered directly in the terminal UI.
105. rust-v0.145.0-alpha.29 Jul 21, 2026 · issue 001

     Codex CLI adds route-aware HTTP client pooling, system proxy support across all subsystems, and configurable external session detection limits.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.29 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.29

     └──▷ TRY IT
     Force the Codex installer to use GitHub Releases instead of releases.openai.com when behind a network that blocks the default source.
     copy

     $ curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false sh

     • ›Adds maxSessionAgeDays and maxSessions fields to the external-agent config detection request, making session discovery limits configurable (defaults remain 30-day max age and 50 sessions).
     • ›Adds CARGO_HTTP_CAINFO to the curated custom CA environment variables so Cargo inherits the managed MITM trust bundle in proxy environments.
     • ›Adds an optional opaque providerId field to externalAgentConfig/import for analytics attribution of external agent imports, independently of the migrationSource selector.
     • ›Introduces a route-aware HTTP client pool (RouteAwareClientPool) that resolves the outbound proxy route per request URL, with a bounded cache of 16 routes — enabling correct PAC and system-proxy handling across redirects.
     • ›Extends system proxy settings to cover the daemon updater, remote plugins, plugin startup sync, and cloud environment discovery.
     +4 moreshow less

     • ›Preserves thread settings for goal-first and forked threads on restart, so resumed threads use the configuration active when they were created rather than current config.
     • ›Adds an optional releases.openai.com installer source, with CODEX_INSTALLER_USE_RELEASES_OPENAI_COM controlling fallback to GitHub Releases.
     • ›Mirrors Rust release artifacts and metadata to Cloudflare R2 as an additional distribution channel.
     • ›Supports alpha hotfix release versions in the version scheme (mapping Python aN.postM to -alpha.N.M tags) across installers, npm publishing, and release validation.
106. rust-v0.145.0-alpha.29 Jul 21, 2026 · issue -029

     Codex CLI adds route-aware HTTP client pooling, system proxy support across all subsystems, and configurable external session detection limits.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.29 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.29

     └──▷ TRY IT
     Force the Codex installer to use GitHub Releases instead of releases.openai.com when behind a network that blocks the default source.
     copy

     $ curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_INSTALLER_USE_RELEASES_OPENAI_COM=false sh

     • ›Adds maxSessionAgeDays and maxSessions fields to the external-agent config detection request, making session discovery limits configurable (defaults remain 30-day max age and 50 sessions).
     • ›Adds CARGO_HTTP_CAINFO to the curated custom CA environment variables so Cargo inherits the managed MITM trust bundle in proxy environments.
     • ›Adds an optional opaque providerId field to externalAgentConfig/import for analytics attribution of external agent imports, independently of the migrationSource selector.
     • ›Introduces a route-aware HTTP client pool (RouteAwareClientPool) that resolves the outbound proxy route per request URL, with a bounded cache of 16 routes — enabling correct PAC and system-proxy handling across redirects.
     • ›Extends system proxy settings to cover the daemon updater, remote plugins, plugin startup sync, and cloud environment discovery.
     +4 moreshow less

     • ›Preserves thread settings for goal-first and forked threads on restart, so resumed threads use the configuration active when they were created rather than current config.
     • ›Adds an optional releases.openai.com installer source, with CODEX_INSTALLER_USE_RELEASES_OPENAI_COM controlling fallback to GitHub Releases.
     • ›Mirrors Rust release artifacts and metadata to Cloudflare R2 as an additional distribution channel.
     • ›Supports alpha hotfix release versions in the version scheme (mapping Python aN.postM to -alpha.N.M tags) across installers, npm publishing, and release validation.
107. rust-v0.145.0-alpha.28 Jul 21, 2026 · issue 001

     Codex CLI alpha.28 adds concurrent terminal stdin, Amazon Bedrock custom transports, audio I/O, and incremental Markdown streaming.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.28 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.28

     • ›Supports custom transports for Amazon Bedrock, enabling non-default network or proxy configurations when connecting to Bedrock-backed models.
     • ›Adds an app-server API for reading installed app runtime state.
     • ›Adds audio input and output support: audio variants in user input protocols, audio inputs forwarded to the Responses API, audio output in dynamic tools and code mode, and audio history gated by model input modalities.
     • ›Adds SessionEnd hooks for thread teardown, enabling cleanup logic when a session ends.
     • ›Adds batched executor capability discovery.
     +18 moreshow less

     • ›Adds occurrence search for paginated threads.
     • ›Renders inline visualization links in the TUI.
     • ›Renders streamed Markdown incrementally in the TUI, reducing layout work and redundant redraws while streaming.
     • ›Allows users to remember the working directory for resumed sessions.
     • ›Allows publishing plugins through share updates.
     • ›Allows selecting path-backed agents in the TUI agent picker.
     • ›Confirms usage-limit resets before redemption, preventing accidental redemption.
     • ›Suppresses empty multi-agent mode messages in the TUI.
     • ›Reports detailed session import error types.
     • ›Tracks collaboration mode instructions and permission instructions in world state.
     • ›Centralizes thread MCP connections in McpRuntime.
     • ›Supports ChatGPT-branded Desktop app builds.
     • ›Adds bounded batch lookups and batched persistent history reads for message history, improving reverse-search performance.
     • ›Launches managed network proxies on remote executors.
     • ›Makes parent-owned sub-agent threads read-only in the TUI.
     • ›Exposes plugin installation interstitial requirements.
     • ›Records web search result payload sizes.
     • ›Seeds realtime V3 sessions with initial text items and streams realtime V3 Codex handoff output.
108. rust-v0.145.0-alpha.28 Jul 21, 2026 · issue -029

     Codex CLI alpha.28 adds concurrent terminal stdin, Amazon Bedrock custom transports, audio I/O, and incremental Markdown streaming.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.28 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.28

     • ›Supports custom transports for Amazon Bedrock, enabling non-default network or proxy configurations when connecting to Bedrock-backed models.
     • ›Adds an app-server API for reading installed app runtime state.
     • ›Adds audio input and output support: audio variants in user input protocols, audio inputs forwarded to the Responses API, audio output in dynamic tools and code mode, and audio history gated by model input modalities.
     • ›Adds SessionEnd hooks for thread teardown, enabling cleanup logic when a session ends.
     • ›Adds batched executor capability discovery.
     +18 moreshow less

     • ›Adds occurrence search for paginated threads.
     • ›Renders inline visualization links in the TUI.
     • ›Renders streamed Markdown incrementally in the TUI, reducing layout work and redundant redraws while streaming.
     • ›Allows users to remember the working directory for resumed sessions.
     • ›Allows publishing plugins through share updates.
     • ›Allows selecting path-backed agents in the TUI agent picker.
     • ›Confirms usage-limit resets before redemption, preventing accidental redemption.
     • ›Suppresses empty multi-agent mode messages in the TUI.
     • ›Reports detailed session import error types.
     • ›Tracks collaboration mode instructions and permission instructions in world state.
     • ›Centralizes thread MCP connections in McpRuntime.
     • ›Supports ChatGPT-branded Desktop app builds.
     • ›Adds bounded batch lookups and batched persistent history reads for message history, improving reverse-search performance.
     • ›Launches managed network proxies on remote executors.
     • ›Makes parent-owned sub-agent threads read-only in the TUI.
     • ›Exposes plugin installation interstitial requirements.
     • ›Records web search result payload sizes.
     • ›Seeds realtime V3 sessions with initial text items and streams realtime V3 Codex handoff output.
109. rust-v0.145.0-alpha.27 Jul 21, 2026 · issue 001

     Codex CLI alpha.27 lets Esc interrupt a running session and updates bundled model metadata for GPT-5.6 and GPT-5.5.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.27 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.27

     • ›Allows pressing Esc to interrupt the current agent session while a task is running, with Esc now documented as an interrupt key in the status indicator.
     • ›Updates bundled GPT-5.6 model variant context windows to 272,000 tokens and refreshes model instructions, message configuration, and reasoning-summary support across the model catalog.
     • ›Adds personality instruction variables for GPT-5.6 model variants and adds a GPT-5.5 availability notice to the bundled catalog.
     • ›Runs write_stdin in parallel across unified-exec sessions, improving throughput for multi-session workloads.
     └──▷ BREAKING ON UPGRADE

     • !The auto_review and permissions message fields and the legacy supports_reasoning_summary_parameter flag are removed from the bundled model catalog.
110. rust-v0.145.0-alpha.27 Jul 21, 2026 · issue -029

     Codex CLI alpha.27 lets Esc interrupt a running session and updates bundled model metadata for GPT-5.6 and GPT-5.5.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.145.0-alpha.27 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.145.0-alpha.27

     • ›Allows pressing Esc to interrupt the current agent session while a task is running, with Esc now documented as an interrupt key in the status indicator.
     • ›Updates bundled GPT-5.6 model variant context windows to 272,000 tokens and refreshes model instructions, message configuration, and reasoning-summary support across the model catalog.
     • ›Adds personality instruction variables for GPT-5.6 model variants and adds a GPT-5.5 availability notice to the bundled catalog.
     • ›Runs write_stdin in parallel across unified-exec sessions, improving throughput for multi-session workloads.
     └──▷ BREAKING ON UPGRADE

     • !The auto_review and permissions message fields and the legacy supports_reasoning_summary_parameter flag are removed from the bundled model catalog.
111. rust-v0.144.0 Jul 9, 2026 · issue -041

     Codex CLI adds a writes approval mode, interactive MCP auth by default, and Ultra concurrency warnings in v0.144.0.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.144.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.144.0

     • ›Adds a writes app-approval mode that allows declared read-only actions without prompting while still requiring approval for write operations.
     • ›Enables MCP tool interactive authentication by default — no experimental opt-in required.
     • ›Usage-limit reset credits now display their type and expiration date, with an interactive picker to choose which credit to redeem.
     • ›App-server hosts can now supply Codex authentication at runtime and redirect users to a hosted page after successful login.
     • ›Selecting Ultra reasoning now triggers a warning when high multi-agent concurrency is configured, alerting users to potential rapid usage increases.
112. rust-v0.143.0 Jul 8, 2026 · issue -042

     Codex CLI gains system proxy routing, Amazon Bedrock new models, MCP session auth, and a remote-control pairing command.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.143.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.143.0

     └──▷ TRY IT
     Generate a pairing code when you need to connect a remote-control client to an already-running Codex daemon without restarting it.
     copy

     $ codex remote-control pair

     • ›Enables remote plugins by default, with richer catalog rows, npm marketplace sources, and visible remote/local version info.
     • ›Routes authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations.
     • ›Adds codex remote-control pair subcommand for generating manual pairing codes from a running daemon.
     • ›Adds Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models with first-class support for max reasoning effort.
     • ›Enables MCP tool search by default; ChatGPT-hosted MCP servers can now explicitly use session authentication.
     +1 moreshow less

     • ›App-server clients can inspect environments, list descendant threads, and fork history through a specific turn.
113. rust-v0.142.2 Jun 25, 2026 · issue -055

     Codex CLI gains default MCP tool search, macOS system proxy support, and dark-mode plugin logos.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.142.2 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.142.2

     └──▷ USE IT
     Route Codex CLI traffic through a corporate PAC/WPAD proxy on macOS without manual proxy configuration.
     yaml copy

     # In your Codex config, enable system proxy resolution:
     respect_system_proxy: true

     • ›Enables tool search for MCP tools by default when the model/provider supports it, improving tool discovery while staying compatible with older models.
     • ›Adds macOS system proxy, PAC, and WPAD resolution when respect_system_proxy is enabled, letting the CLI route through corporate proxies automatically.
     • ›Supports dark-mode logos for plugins via local manifests and remote catalogs.
     • ›Surfaces richer safety-buffering UI using server-provided visibility and faster-model metadata.
114. rust-v0.142.1 Jun 25, 2026 · issue -055

     OpenAI Codex CLI adds opt-in Windows system proxy support including PAC, WPAD, static proxies, and bypass rules.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.142.1 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.142.1

     • ›Adds opt-in Windows system proxy support for authentication, covering PAC, WPAD, static proxies, and bypass rules.
115. rust-v0.142.0 Jun 22, 2026 · issue -058

     Codex CLI gains indexed web search, rollout token budgets, multi-agent delegation controls, plugin sections, and scheduled time reminders.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.142.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.142.0

     • ›Adds /usage command support for viewing and redeeming earned usage-limit reset credits, with confirmation, retry, and refreshed availability states.
     • ›Organizes /plugins remote plugins into OpenAI Curated, Workspace, and Shared with me sections; eligible turns can now recommend and install relevant plugins.
     • ›Introduces configurable rollout token budgets that track usage across agent threads, surface remaining-budget reminders, and abort turns when the budget is exhausted.
     • ›Enables app-server clients to configure multi-agent delegation as disabled, explicit-request-only, or proactive at both the thread and turn level.
     • ›Adds an indexed web-search mode that allows live searches while restricting direct page access to server-approved URLs.
     +1 moreshow less

     • ›Supports scheduled UTC time reminders and direct current-time queries, including through client-provided app-server clocks.
116. rust-v0.141.0 Jun 18, 2026 · issue -062

     Codex CLI gains Noise-encrypted remote execution, per-thread MCP servers, auto-resolving TUI prompts, and richer app-server APIs.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.141.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.141.0

     • ›Adds authenticated, end-to-end encrypted Noise relay channels for remote executors.
     • ›Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries.
     • ›Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery adds a created-by-me marketplace and auth-specific curated catalogs.
     • ›App-server clients can list immediate child threads, correlate external-agent import results, and read or redeem rate-limit reset credits.
     • ›Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context.
117. rust-v0.140.0 Jun 15, 2026 · issue -065

     Codex CLI v0.140.0 adds usage dashboards, session deletion, Claude Code import, @-mentions menu, and managed Bedrock auth.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.140.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.140.0

     └──▷ TRY IT
     Permanently remove a stale session and all its subagents to keep your session list clean.
     copy

     $ codex delete

     • ›Adds /usage command with daily, weekly, and cumulative account token activity views.
     • ›Adds codex delete, /delete, and app-server thread/delete for permanent session deletion with confirmation safeguards and subagent cleanup.
     • ›Adds /import for selectively importing setup, project configuration, and recent chats from Claude Code.
     • ›Typing @ now opens a unified mentions menu for files, plugins, and skills by default.
     • ›Adds managed Amazon Bedrock API-key authentication with encrypted local storage for CLI and MCP OAuth credentials.
     +1 moreshow less

     • ›Preserves oversized text, large pasted blocks, and image attachments in /goal, including in remote app-server sessions.
118. rust-v0.139.0 Jun 9, 2026 · issue -071

     Codex CLI adds standalone web search in code mode, richer MCP schema support, and improved plugin marketplace JSON output.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.139.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.139.0

     └──▷ TRY IT
     List all plugin marketplace sources in JSON to script or audit which catalogs are configured.
     copy

     $ codex plugin marketplace list --json

     • ›Enables standalone web search in code mode, including from nested JavaScript tool calls, returning plaintext results.
     • ›Tool and connector input schemas now preserve oneOf and allOf, and large schemas retain more shallow structure when compacted for better MCP tool compatibility.
     • ›codex doctor now includes editor and pager environment details in the local report, with raw values redacted in JSON output.
     • ›codex plugin marketplace list --json now includes each marketplace source per entry.
     • ›Plugin lists can now return from the cached remote catalog before refreshing in the background, improving responsiveness.
     +2 moreshow less

     • ›Adds -P as a sandbox permissions profile alias flag.
     • ›Shows effective sandbox modes in /debug-config.
119. rust-v0.138.0 Jun 8, 2026 · issue -072

     Codex CLI gains Desktop handoff, richer plugin JSON output, image path exposure, PAT v2 auth, and flexible reasoning effort selection.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.138.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.138.0

     └──▷ TRY IT
     Hand off an active CLI session to Codex Desktop on macOS or Windows without losing context.
     copy

     $ /app

     Get structured JSON output from plugin marketplace commands for scripting or CI pipelines.
     copy

     $ codex plugin list --json

     • ›Adds /app command to hand off the current CLI thread into Codex Desktop on macOS and native Windows, with Windows workspace launches opening directly into Desktop.
     • ›Exposes saved file paths for local image attachments and standalone image generations to the model, enabling more reliable follow-up edits and file references.
     • ›Adds fallback keyboard shortcuts in the TUI for reasoning effort selection on terminals missing Alt bindings, and supports model-defined effort levels in model-advertised order.
     • ›App-server integrations can now read account token usage via the API.
     • ›Adds support for v2 personal access tokens in CLI and app-server authentication flows.
     +1 moreshow less

     • ›Adds --json output to plugin add/remove and marketplace commands; plugin list JSON now includes marketplace source; plugin detail data exposes default prompts, remote MCP servers, and unavailable app templates.
120. rust-v0.137.0 Jun 4, 2026 · issue -076

     Codex CLI gains F13-F24 keybindings, codex plugin list --json, remote-control pairing RPCs, and multi-agent v2 per-thread runtimes.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.137.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.137.0

     └──▷ TRY IT
     Get a machine-readable list of all installed plugins for scripting or audit pipelines.
     copy

     $ codex plugin list --json

     • ›Adds F13-F24 function key support in TUI keymaps for extended keyboard bindings.
     • ›Enables paste in searchable selection menus within the TUI.
     • ›Adds a compact reasoning-only status/title item to the TUI status surface.
     • ›Adds codex plugin list --json for machine-readable plugin inventory output.
     • ›Caches remote plugin catalog suggestions for faster plugin discovery.
     +9 moreshow less

     • ›Adds remote-control pairing start and client management RPCs (list/revoke controller grants) via app-server v2.
     • ›Shows enterprise monthly credit limits in the status display for admin/enterprise flows.
     • ›Supports applying cloud-managed config bundles, including EDU workspace accounts.
     • ›Enables parallel standalone web search calls in code-mode flows.
     • ›Exposes standalone image generation and hosted web/image tools in code-only mode.
     • ›Multi-agent v2 keeps runtime choice per-thread and exposes cleaner follow-up and metadata defaults for spawned agents.
     • ›Adds skills extension scaffold with per-turn catalog resolution and v1 prompt injection.
     • ›Keys request-permission grants by environment identity for scoped approvals.
     • ›Exports readable CA bundles to child commands when managed MITM proxying is active.
     └──▷ BREAKING ON UPGRADE

     • !The persist_extended_history bool flag is removed from app-server (the experimental flag no longer exists).
     • !The multi-agent v2 assign_task field is renamed to followup_task.
     • !hide_spawn_agent_metadata now defaults to true, changing the default metadata visibility for spawned agents.
121. rust-v0.136.0 Jun 1, 2026 · issue -079

     Codex CLI v0.136.0 adds session archiving, OSC 8 clickable links, stdio app-server mode, Windows sandbox provisioning, and a standalone image generation extension.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.136.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.136.0

     └──▷ TRY IT
     Archive a completed session from the CLI to prevent it from being resumed or forked accidentally.
     copy

     $ codex archive <session-id>

     Restore an archived session so it can be resumed or forked again.
     copy

     $ codex unarchive <session-id>

     Start the app-server in stdio mode for direct process-level integration without a network socket.
     copy

     $ codex app-server --stdio

     • ›Adds /archive slash command in the TUI and codex archive / codex unarchive CLI commands to protect sessions from accidental resume or fork until restored.
     • ›TUI markdown now renders clickable web links via OSC 8 metadata, and cramped tables automatically reformat as readable key/value records while preserving link targets.
     • ›Launches app-server in stdio mode with codex app-server --stdio for easier process-level integrations.
     • ›Supports CODEX_API_KEY registration for approved OpenAI hosts in remote execution setup; remote-control websockets now use short-lived server tokens instead of ChatGPT access tokens.
     • ›Adds alpha codex sandbox setup --elevated provisioning path for Windows admins, plus constrained requirements support for allowed Windows sandbox implementations.
     +4 moreshow less

     • ›Adds a feature-gated standalone image generation extension that runs through the native Codex image artifact completion pipeline.
     • ›Exposes richer MCP server status information in app-server integrations.
     • ›Adds focused diagnostics for MCP HTTP send failures.
     • ›Adds experimental_request_user_input toggle in config.
122. rust-v0.135.0 May 28, 2026 · issue -083

     Codex CLI gains richer doctor diagnostics, Vim text-object editing, named permission profiles, and non-interactive install support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.135.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.135.0

     └──▷ TRY IT
     Capture full environment, Git, terminal, and thread inventory diagnostics to share with support.
     copy

     $ codex doctor

     Run a silent, unattended Codex install in a CI pipeline or provisioning script.
     copy

     $ CODEX_NON_INTERACTIVE=1 bash install.sh

     Inspect which remote server you're connected to and its version without leaving the TUI.
     copy

     $ /status

     • ›Adds richer environment, Git, terminal, app-server, and thread inventory diagnostics to codex doctor for support cases.
     • ›New /status command shows remote connection details and server version when connected over a remote transport.
     • ›Vim mode gains text-object editing, improved word/line-end behavior, and a configurable turn-interruption keybind.
     • ›Adds named permission profile picker to /permissions, which now displays configured custom profiles.
     • ›Packaged Codex builds can discover and use the bundled patched zsh helper on supported macOS and Linux targets.
     +1 moreshow less

     • ›Supports non-interactive installation mode via install.sh/install.ps1 when CODEX_NON_INTERACTIVE=1 is set.
123. rust-v0.134.0 May 26, 2026 · issue -085

     Codex CLI gains conversation history search, concurrent read-only MCP tools, OAuth for MCP servers, and richer extension/hook context.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.134.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.134.0

     └──▷ TRY IT
     Select a named permission profile when starting a session, now consistently honored across CLI, TUI, and sandbox.
     copy

     $ codex --profile my-restricted-profile sandbox <target>

     Add an MCP server with OAuth enabled for a streamable HTTP endpoint.
     copy

     $ codex mcp add --oauth https://example.com/mcp

     • ›Adds search across local conversation history with case-insensitive content matching and result previews.
     • ›Makes --profile the primary profile selector across CLI, TUI permissions, and sandbox flows; legacy profile configs now rejected with migration guidance.
     • ›Supports per-server environment targeting and OAuth options for streamable HTTP MCP servers via codex mcp add.
     • ›Enables concurrent execution of read-only MCP tools that advertise readOnlyHint.
     • ›Preserves local $ref/$defs structures and compacts oversized schemas for more reliable connector tool schemas.
     +1 moreshow less

     • ›Exposes conversation history to extension tools and adds subagent identity to hook inputs for richer extension and hook context.
     └──▷ BREAKING ON UPGRADE

     • !Legacy profile v1 config selectors are now rejected; --profile is the required flag and legacy profile configs must be migrated.
124. rust-v0.133.0 May 21, 2026 · issue -090

     Codex CLI gains always-on goal tracking, improved remote-control UX, richer extension lifecycle hooks, and smarter plugin discovery.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.133.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.133.0

     • ›Enables Goals by default with dedicated storage and cross-turn progress tracking.
     • ›Permission profiles gain a list API, inheritance resolution, managed requirements.toml support, runtime refresh, and deeper Windows sandbox integration.
     • ›Plugin list output is now tabulated and marketplace-aware, showing installed versions, visible marketplace roots, and remote collection support.
     • ›Extensions can now observe SubagentStart/SubagentStop lifecycle hooks, tool execution events, turn-start metadata, and async approval/turn processing.
     • ›Adds a /btw alias for the side slash command.
     +5 moreshow less

     • ›Adds turn_id and truncation_policy fields to extension tool calls.
     • ›Adds a standalone web-search API client.
     • ›Adds MITM hook config model and wires MITM hooks into runtime enforcement with named permissions config.
     • ›Adds thread/settings/update app-server API for syncing TUI thread settings.
     • ›Exposes a --version flag on codex-app-server.
125. rust-v0.132.0 May 20, 2026 · issue -091

     Codex CLI gains --output-schema for resumed execs, faster TUI startup, and auth-backed remote executor registration.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.132.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.132.0

     └──▷ TRY IT
     Resume a long-running automation and enforce a structured JSON schema on its output without losing session context.
     copy

     $ codex exec resume <session-id> --output-schema '{"type":"object","properties":{"result":{"type":"string"}}}'

     • ›Adds --output-schema flag to codex exec resume, enabling resumed automations to enforce structured JSON output while preserving session context.
     • ›Enables remote executor registration via standard Codex auth, eliminating the need for a separate registry credential flow.
     • ›Optimizes TUI startup by batching terminal capability probes, reducing time to first interactive frame.
     • ›Supports preserving requested image fidelity — including original-resolution local images — across user inputs and image-producing tools in app-server turns.
126. rust-v0.131.0 May 18, 2026 · issue -093

     Codex CLI v0.131.0 adds codex doctor, unified @ mention picker, remote daemon control, marketplace plugin commands, and a richer TUI.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.131.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.131.0

     └──▷ TRY IT
     Run environment-wide diagnostics before filing a support ticket or debugging auth/network issues.
     copy

     $ codex doctor

     • ›Adds codex doctor command for support-ready diagnostics covering runtime, auth, terminal, network, config, and local state.
     • ›Unified @ mention picker now searches files, directories, plugins, and skills in a single interface backed by app-server plugin metadata.
     • ›Remote workflows gain codex remote-control daemon management, runtime enable/disable APIs, status reads, and registry-backed remote environments.
     • ›Plugin system adds marketplace CLI commands, version-aware sharing, share checkout, shared-workspace buckets, and default-enabled plugin hooks.
     • ›TUI gains data-driven service-tier slash commands, blended token usage display, permissions/approval mode visibility, effective workspace roots, and responsive Markdown tables.
     +8 moreshow less

     • ›Python SDK renamed to openai-codex / openai_codex, with pinned runtime-generated types, concurrent turn routing by ID, and approval modes.
     • ›Adds Windows deny-read sandbox parity matching existing macOS/Linux sandbox behavior.
     • ›Adds Windows hook command overrides for customizing hook behavior per-platform.
     • ›Supports PreToolUse updatedInput rewrites, allowing hooks to modify tool inputs before execution.
     • ›Supports multi-environment apply_patch selection for applying patches across multiple configured environments.
     • ›TUI keymap config now accepts minus as a key binding value.
     • ›Adds ambient terminal pets to the TUI.
     • ›Exec-server now uses protobuf relay frames for transport.
127. rust-v0.130.0 May 8, 2026 · issue -103

     Codex CLI gains codex remote-control, AWS Bedrock console-login auth, thread pagination, and plugin sharing controls.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.130.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.130.0

     └──▷ TRY IT
     Start a headless Codex app-server that can be driven remotely — useful for CI pipelines or remote automation.
     copy

     $ codex remote-control

     • ›Adds codex remote-control as a top-level command for starting a headless, remotely controllable app-server.
     • ›Bedrock auth now supports AWS console-login credentials from aws login profiles, enabling SSO-based access.
     • ›App-server clients can page large threads with unloaded, summary, or full turn item views via new thread pagination APIs.
     • ›Plugin details now display bundled hooks, and plugin sharing exposes link metadata plus discoverability controls.
128. rust-v0.129.0 May 7, 2026 · issue -104

     Codex CLI v0.129.0 adds Vim composer mode, /hooks browser, /ide context injection, workspace-aware /diff, and a /keymap debug inspector.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.129.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.129.0

     └──▷ TRY IT
     Switch the TUI composer into Vim normal mode for keyboard-driven editing during a session.
     copy

     $ /vim

     Inspect all registered lifecycle hooks and toggle them on or off without leaving the TUI.
     copy

     $ /hooks

     Diagnose unexpected key binding behaviour by viewing raw terminal key events as you press them.
     copy

     $ /keymap debug

     • ›Adds modal Vim editing in the TUI composer via /vim command, configurable default mode, and Vim-specific keymap contexts.
     • ›Adds /hooks browser for browsing and toggling lifecycle hooks, with support for pre/post-compaction hooks and PreToolUse context.
     • ›Adds /ide context injection so TUI workflows can pull in IDE-side context directly.
     • ›Adds workspace-aware /diff command for comparing workspace state within TUI sessions.
     • ›Adds /keymap debug inspector to inspect and diagnose terminal key events.
     +10 moreshow less

     • ›Adds PR summary and branch-change summaries to the status line, with theme-aware colors.
     • ›Adds redesigned resume/fork picker with raw scrollback mode for easier workflow resumption and copying.
     • ›Adds plugin marketplace upgrade flow (/plugins upgrade) and marketplace removal support.
     • ›Adds workspace plugin sharing, share access controls, source filtering, local share path tracking, and admin-disabled status handling for plugins.
     • ›Adds remote plugin bundle sync and refresh on auth changes.
     • ›Experimental goals now stay paused across thread resumes unless the user opts back in, with clearer validation and multi-day duration display.
     • ›Enforces animations = false setting for screen readers in the TUI.
     • ›Retires /approvals and renames /autoreview to /approve.
     • ›Adds Codex Apps auth and eligible MCP elicitations surfaced through TUI/Guardian flows.
     • ›Linux releases now bundle and verify a standalone bwrap fallback for npm and DotSlash installs.
     └──▷ BREAKING ON UPGRADE

     • !The /autoreview command is renamed to /approve; any scripts or muscle memory invoking /autoreview will no longer work.
129. rust-v0.128.0 Apr 30, 2026 · issue -111

     Codex CLI gains persisted /goal workflows, codex update, configurable keymaps, plugin marketplace, and richer MultiAgentV2 controls.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.128.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.128.0

     └──▷ TRY IT
     Keep the CLI up to date without manually downloading a new binary.
     copy

     $ codex update

     Check or update the active status line without interrupting an in-progress agent turn.
     copy

     $ codex /statusline "Running recon phase…"

     • ›Adds persisted /goal workflows with app-server APIs, model tools, runtime continuation, and TUI controls for create, pause, resume, and clear.
     • ›Adds codex update command for in-place CLI self-update.
     • ›Adds configurable TUI keymaps, plan-mode nudges, and action-required terminal titles.
     • ›Enables /statusline and /title slash commands during active turns.
     • ›Expands permission profiles with built-in defaults, sandbox CLI profile selection, cwd controls, and active-profile metadata for clients.
     +3 moreshow less

     • ›Adds plugin marketplace installation, remote bundle caching, remote uninstall, plugin-bundled hooks, hook enablement state, and external-agent config import.
     • ›Adds external agent session import, including background imports and imported-session title handling.
     • ›Makes MultiAgentV2 configuration more explicit with thread caps, wait-time controls, root/subagent context hints, and v2-specific depth handling.
     └──▷ BREAKING ON UPGRADE

     • !--full-auto is deprecated; users must migrate to explicit permission profiles and trust flows.
     • !GNU Linux binaries are no longer published as release artifacts.
130. rust-v0.125.0 Apr 24, 2026 · issue -117

     Codex CLI v0.125.0 adds Unix socket transport, remote plugin installs, reasoning-token reporting, and sticky environments for app-server workflows.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.125.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.125.0

     └──▷ TRY IT
     Capture reasoning-token usage programmatically when running a non-interactive task in CI or scripted pipelines.
     copy

     $ codex exec --json 'Audit this codebase for hardcoded credentials' | jq '.usage.reasoning_tokens'

     • ›Adds Unix socket transport for app-server integrations alongside existing transports.
     • ›Adds excludeTurns parameter to thread/resume and thread/fork endpoints for pagination-friendly session management.
     • ›Adds remote thread config/store plumbing and a remote thread config endpoint to app-server.
     • ›Adds sticky environment API and thread state to app-server integrations.
     • ›Enables remote plugin install writes and marketplace upgrade via a new app-server marketplace upgrade RPC.
     +5 moreshow less

     • ›Permission profiles now round-trip across TUI sessions, user turns, MCP sandbox state, shell escalation, and app-server APIs.
     • ›Model providers now own model discovery; AWS/Bedrock account state is exposed to app clients via account/read.
     • ›codex exec --json now surfaces reasoning-token usage in its JSON output.
     • ›Rollout tracing now records tool, code-mode, session, and multi-agent relationships, with a debug trace reduction command for inspection.
     • ›App-server persists device key bindings in SQLite.
131. rust-v0.124.0 Apr 23, 2026 · issue -118

     Codex CLI v0.124.0 adds Amazon Bedrock support, stable hooks, quick TUI reasoning controls, and remote plugin marketplace access.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.124.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.124.0

     └──▷ TRY IT
     Temporarily lower reasoning mid-session in the TUI when you want faster, cheaper responses without changing your config.
     copy

     $ # Inside the Codex TUI, press Alt+, to lower reasoning or Alt+. to raise it

     Configure a stable hook in config.toml to observe every apply_patch edit and run a linter automatically.
     toml copy

     [hooks]
     [[hooks.post_tool_use]]
     tool = "apply_patch"
     command = "ruff check --fix ."

     • ›Adds Alt+, / Alt+. keyboard shortcuts in the TUI to lower or raise reasoning level on the fly; model upgrades now reset reasoning to the new model's default.
     • ›Adds first-class Amazon Bedrock support for OpenAI-compatible providers, including AWS SigV4 signing and AWS credential-based authentication.
     • ›Hooks are now stable: configurable inline in config.toml and requirements.toml, and can observe MCP tools, apply_patch edits, and long-running Bash sessions.
     • ›App-server sessions can now manage multiple environments and select an environment and working directory per turn, enabling precise multi-workspace and remote targeting.
     • ›Remote plugin marketplaces can now be listed and read directly, with larger result pages and more reliable detail lookups.
     +1 moreshow less

     • ›Eligible ChatGPT plans now default to the Fast service tier unless explicitly opted out.
132. rust-v0.123.0 Apr 23, 2026 · issue -118

     Codex CLI gains native Amazon Bedrock support, verbose MCP diagnostics, and flexible .mcp.json plugin loading.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.123.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.123.0

     └──▷ TRY IT
     Inspect full MCP server state — resources, templates, and diagnostics — during a session to debug a misbehaving MCP tool.
     copy

     $ /mcp verbose

     • ›Adds built-in amazon-bedrock model provider with configurable AWS profile support.
     • ›Adds /mcp verbose subcommand for full MCP server diagnostics, resources, and resource templates without slowing down plain /mcp.
     • ›Supports both mcpServers and top-level server maps in .mcp.json for plugin MCP loading.
     • ›Improves realtime handoffs so background agents receive transcript deltas and can explicitly stay silent.
     • ›Adds remote_sandbox_config requirements for host-specific remote environment configuration.
     +1 moreshow less

     • ›Refreshes bundled model metadata, including gpt-5.4 as the current default.
133. rust-v0.122.0 Apr 20, 2026 · issue -121

     Codex CLI v0.122.0 adds side conversations, Plan Mode context control, plugin tabbed browsing, and deny-read glob sandbox policies.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.122.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.122.0

     └──▷ TRY IT
     Ask a quick question without leaving the current task — open a side conversation mid-session.
     copy

     $ /side What does this function return when input is nil?

     Check current context usage and default reasoning effort before continuing a plan.
     copy

     $ /status

     • ›New /side command in the TUI opens a side conversation for quick questions without interrupting the main session.
     • ›Queued input now accepts slash commands and ! shell prompts while work is already running.
     • ›Plan Mode can start implementation in a fresh context, with context-usage displayed before deciding whether to carry the planning thread forward.
     • ›Plugin workflows gain tabbed browsing, inline enable/disable toggles, marketplace removal, and support for remote, cross-repo, or local marketplace sources.
     • ›Filesystem permissions support new deny-read glob policies, managed deny-read requirements, and platform sandbox enforcement.
     +12 moreshow less

     • ›codex exec runs can now be isolated to ignore user config or rules.
     • ›Tool discovery (ToolSearch) and image generation are now enabled by default.
     • ›Image handling adds higher-detail support and original-detail metadata for MCP and js_repl image outputs.
     • ›Image resizing updated to fit within 2048-square bounds.
     • ›New codex app command correctly opens or installs the Desktop app on Windows and Intel Macs.
     • ›Standalone installs are now more self-contained.
     • ›New thread/turns/list API and sorting/backwards-cursor support added to thread/list.
     • ›Default reasoning effort is now shown in /status.
     • ›Adds MCP server environment config support.
     • ›Adds piped stdin support in the exec process API.
     • ›Remote compaction now supported for Azure responses providers.
     • ›Adds server-level approval defaults for custom MCP servers.
134. rust-v0.121.0 Apr 15, 2026 · issue -126

     Codex CLI gains plugin marketplace install, Ctrl+R history search, memory controls, expanded MCP support, and secure devcontainer/bubblewrap sandboxing.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.121.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.121.0

     └──▷ TRY IT
     Install a plugin marketplace from a GitHub repo so Codex can discover and use plugins from that source.
     copy

     $ codex marketplace add https://github.com/<org>/<marketplace-repo>

     Install a marketplace from a local directory during offline development or internal distribution.
     copy

     $ codex marketplace add /path/to/local/marketplace

     Search your TUI prompt history interactively to re-run a previous command without retyping it.
     copy

     $ # Inside the Codex TUI composer, press Ctrl+R and type keywords to reverse-search prompt history.

     • ›Adds codex marketplace add command to install plugin marketplaces from GitHub, git URLs, local directories, and direct marketplace.json URLs.
     • ›Adds Ctrl+R reverse search in the TUI composer for prompt history, plus local recall for accepted slash commands.
     • ›Adds TUI and app-server controls for memory mode, memory reset/deletion, and memory-extension cleanup, including a dedicated endpoint to delete memories.
     • ›Expands MCP/plugin support with MCP Apps tool calls, namespaced MCP tool registration, supports_parallel_tool_calls opt-in flag, and sandbox-state metadata sent through MCP tool metadata.
     • ›Adds realtime and app-server APIs for output modality, transcript completion events, and raw turn item injection.
     +7 moreshow less

     • ›Adds symlink-aware filesystem metadata flag to fs API.
     • ›Adds a secure devcontainer profile with bubblewrap sandboxing support.
     • ›Adds Unix socket allowlists for the macOS sandbox.
     • ›Adds context percentage indicator to the TUI status line.
     • ›Adds WebSocket capability token-hash support in the app-server.
     • ›Exposes instruction sources (AGENTS.md) via the app server.
     • ›Adds a CLI update announcement notification.
135. rust-v0.120.0 Apr 11, 2026 · issue -130

     Codex CLI v0.120.0 adds Realtime V2 background agent streaming, improved hook TUI, MCP outputSchema support, and richer SessionStart context.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.120.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.120.0

     • ›Streams Realtime V2 background agent progress live while work is still running, and queues follow-up responses until the active response completes.
     • ›Improves TUI hook activity display: live running hooks shown separately, completed hook output retained only when useful.
     • ›Adds thread title as a variable available in custom TUI status line configurations.
     • ›Includes MCP outputSchema details in Code-mode tool declarations so structured tool results carry precise typing.
     • ›Enables SessionStart hooks to distinguish sessions created by /clear from fresh startup or resume sessions.
136. rust-v0.119.0 Apr 10, 2026 · issue -131

     Codex CLI v0.119.0 adds voice v2 WebRTC, codex exec-server, Ctrl+O copy, /resume by ID, and richer MCP server support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.119.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.119.0

     • ›Realtime voice sessions now default to the v2 WebRTC path with configurable transport, voice selection, and native TUI media support.
     • ›New experimental codex exec-server subcommand for remote/app-server workflows.
     • ›Remote app-server sessions now support egress WebSocket transport and remote --cd forwarding.
     • ›Press Ctrl+O in the TUI to copy the latest agent response to the clipboard, with improved SSH and cross-platform clipboard behavior.
     • ›/resume can now jump directly to a session by ID or name from the TUI session picker.
     +5 moreshow less

     • ›TUI notifications are more configurable, adding Warp OSC 9 support and an opt-in mode for notifications even while the terminal is focused.
     • ›MCP Apps and custom MCP servers gain support for resource reads, tool-call metadata, custom-server tool search, server-driven elicitations, and file-parameter uploads.
     • ›Runtime remote-control enablement and sandbox-aware filesystem APIs added for app-server workflows.
     • ›Enables disabling prompt instruction blocks and environment context injection via config.
     • ›Fuzzy file search is now case-insensitive in the TUI.
     └──▷ BREAKING ON UPGRADE

     • !The OPENAI_BASE_URL config fallback has been removed.
137. rust-v0.118.0 Mar 31, 2026 · issue -141

     Codex CLI gains Windows proxy-only egress enforcement, piped stdin for codex exec, dynamic bearer tokens for custom model providers, and device-code ChatGPT login.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.118.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.118.0

     └──▷ TRY IT
     Pipe a file's contents into Codex while supplying a distinct prompt — useful for scripted code review or transformation tasks in CI.
     copy

     $ cat main.rs | codex exec "Refactor this to use idiomatic error handling"

     • ›Enforces proxy-only networking on Windows sandboxes with OS-level egress rules, replacing environment-variable-only controls.
     • ›Adds ChatGPT device-code sign-in flow for app-server clients when browser-callback login is unavailable.
     • ›Supports prompt-plus-stdin piping in codex exec, letting you pipe input while passing a separate prompt on the command line.
     • ›Enables custom model providers to fetch and refresh short-lived bearer tokens dynamically instead of relying on static config or environment credentials.
138. rust-v0.117.0 Mar 26, 2026 · issue -146

     Codex CLI gains first-class plugin management, path-based multi-agent addressing, and richer app-server capabilities in v0.117.0.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.117.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.117.0

     └──▷ TRY IT
     Browse, install, or remove plugins from within an active Codex session.
     copy

     $ /plugins

     Label a terminal session with a custom title so parallel Codex sessions are easy to tell apart.
     copy

     $ /title

     • ›Adds first-class plugin workflow: Codex syncs product-scoped plugins at startup, lets you browse them via /plugins, and install or remove them with auth/setup handling built in.
     • ›Introduces path-based sub-agent addressing (e.g. /root/agent_a) with structured inter-agent messaging and agent listing for multi-agent v2 workflows.
     • ›Adds /title terminal-title picker to both the classic TUI and the app-server TUI, making parallel sessions easier to distinguish.
     • ›App-server clients can now send ! shell commands, watch filesystem changes, and connect to remote WebSocket servers with bearer-token authentication.
     • ›Enables prompt history recall in the app-server TUI, persisting across sessions.
     +1 moreshow less

     • ›view_image now returns image URLs for code mode, generated images are reopenable from the TUI, and image-generation history survives session resume.
     └──▷ BREAKING ON UPGRADE

     • !The legacy artifact tool has been removed, and the old read_file and grep_files handlers have been retired — any workflow relying on these tool surfaces will break on upgrade.
     • !The app-server-backed TUI is now enabled by default, and plugin/app rollout flags have been flipped on in normal builds — setups that depended on the previous defaults may behave differently.
139. rust-v0.116.0 Mar 19, 2026 · issue -153

     Codex CLI gains ChatGPT device-code sign-in, a userpromptsubmit hook, smarter plugin management, and richer realtime sessions.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.116.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.116.0

     └──▷ TRY IT
     Intercept every user prompt before it runs — useful for adding mandatory prefixes or blocking disallowed patterns in shared environments.
     copy

     $ # In your Codex hooks config, register the new hook:
     # hooks:
     #   userpromptsubmit:
     #     - <path-to-your-hook-script>

     • ›Adds device-code ChatGPT sign-in during onboarding and token refresh support in the app-server TUI.
     • ›New userpromptsubmit hook lets users block or augment prompts before execution and before they enter history.
     • ›Plugin setup now prompts to install missing plugins/connectors, honors a configured suggestion allowlist, and syncs install/uninstall state remotely.
     • ›Realtime sessions start with recent thread context and are less likely to self-interrupt during audio playback.
140. rust-v0.115.0 Mar 16, 2026 · issue -156

     Codex CLI gains full-resolution image inspection, realtime transcription, filesystem RPCs, Smart Approvals guardian routing, and a new Python app-server SDK.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.115.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.115.0

     └──▷ USE IT
     Override the OpenAI base URL (e.g., to point at a self-hosted or proxy endpoint) without changing the built-in provider.
     toml copy

     openai_base_url = "https://my-proxy.internal/v1"

     • ›Adds full-resolution image inspection: models can now opt into detail: "original" via view_image and codex.emitImage(..., detail: "original") for precision visual tasks.
     • ›Exposes codex.cwd and codex.homeDir inside js_repl, and persists codex.tool(...) / codex.emitImage(...) references across cells.
     • ›Adds a dedicated transcription mode for realtime WebSocket sessions, plus v2 handoff support via the codex tool, with a unified [realtime] session config block.
     • ›New v2 app-server filesystem RPCs cover file reads, writes, copies, directory operations, and path watching.
     • ›New Python SDK for integrating with the v2 app-server filesystem API.
     +4 moreshow less

     • ›Smart Approvals can now route review requests through a guardian subagent in core, app-server, and TUI, reusing the same guardian session across follow-up approvals.
     • ›App integrations now use the Responses API tool-search flow, can suggest missing tools (tool_suggest), and fall back gracefully when the active model lacks search support.
     • ›Adds openai_base_url config override for the built-in provider.
     • ›The multi-agent wait tool is now consistently named wait_agent, aligning with spawn_agent and send_input.
     └──▷ BREAKING ON UPGRADE

     • !The multi-agent wait tool is renamed to wait_agent; any configuration or prompts referencing the old name will break.
141. rust-v0.114.0 Mar 11, 2026 · issue -160

     Codex CLI gains experimental code mode, a hooks engine with SessionStart/Stop events, health endpoints, and skill-disabling config.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.114.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.114.0

     └──▷ TRY IT
     Check whether a running WebSocket app-server is healthy from a load balancer or monitoring script.
     copy

     $ curl -sf http://localhost:<port>/healthz && echo 'healthy'

     • ›Adds experimental code mode for more isolated coding workflows.
     • ›Adds experimental hooks engine with SessionStart and Stop hook events.
     • ›Adds GET /readyz and GET /healthz health-check endpoints to WebSocket app-server deployments.
     • ›Adds a config switch to disable bundled system skills entirely.
     • ›Handoffs now carry realtime transcript context for improved continuity across turns.
     +1 moreshow less

     • ›Improves the $ mention picker with category labels (Skills, Apps, Plugins) and plugins surfaced first.
142. rust-v0.113.0 Mar 10, 2026 · issue -161

     Codex CLI gains runtime permission requests, a plugin marketplace, full web search config, and split sandbox policies.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.113.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.113.0

     • ›Adds built-in request_permissions tool so a running turn can request additional permissions at runtime, with new TUI rendering for those approval prompts.
     • ›Introduces a curated plugin marketplace with plugin/list metadata discovery, install-time auth checks, and a plugin/uninstall endpoint.
     • ›Upgrades app-server command execution with streaming stdin/stdout/stderr and TTY/PTY support; wires exec to the new in-process app-server path.
     • ›Expands web search tool configuration beyond on/off to support full options such as filters and location.
     • ›Adds a new permission-profile config language and splits filesystem/network sandbox policies for more precise per-policy control.
     +1 moreshow less

     • ›Image generation now saves output files into the current working directory automatically.
143. rust-v0.112.0 Mar 8, 2026 · issue -163

     Codex CLI gains @plugin mentions in chat, a refreshed model picker, and safer per-turn sandbox privilege merging.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.112.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.112.0

     • ›Adds @plugin mentions so users can reference plugins directly in chat and auto-include their associated MCP/app/skill context.
     • ›Updates the model-selection surface so the latest model catalog changes are surfaced in the TUI picker flow.
     • ›Merges executable permission profiles into per-turn sandbox policy for zsh-fork skill execution, enabling safer additive privilege handling for tool runs.
144. rust-v0.111.0 Mar 5, 2026 · issue -166

     Codex CLI rust-v0.111.0 enables Fast mode by default, adds local ESM imports in js_repl, and exposes MCP elicitation as structured flows.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.111.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.111.0

     └──▷ TRY IT
     Import a local workspace utility script inside a js_repl session to reuse shared helpers without copying code.
     copy

     $ const utils = await import('./scripts/utils.mjs');
     utils.analyzeResults(data);

     • ›Enables Fast mode by default for all sessions; TUI session header now displays whether the session is running in Fast or Standard mode.
     • ›Adds dynamic import of local .js and .mjs files in js_repl, allowing workspace scripts to be reused directly from the REPL.
     • ›Codex now reports enabled plugins (MCPs, apps, skills) to the model at session start, improving discovery of installed integrations.
     • ›App-server v2 exposes MCP elicitation as a structured request/response flow instead of raw events, simplifying client integrations.
     • ›Expands image workflow support for clients with client-side handling of image-generation events and model metadata for image-capable web search.
145. rust-v0.110.0 Mar 5, 2026 · issue -166

     Codex CLI gains a plugin system, multi-agent TUI upgrades, a /fast toggle, workspace-scoped memories, and a Windows installer.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.110.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.110.0

     └──▷ TRY IT
     Switch to fast mode mid-session to reduce latency when iterating quickly on a task.
     copy

     $ /fast

     Spin up a multi-agent workflow in the TUI and approve sub-agent actions interactively.
     copy

     $ /agent

     • ›Adds a plugin system that loads skills, MCP entries, and app connectors from config or a local marketplace, with an install endpoint for enabling plugins from the app server.
     • ›Expands TUI multi-agent flow with approval prompts, /agent-based enablement, ordinal nicknames, role-labeled handoff context, and clearer prompts.
     • ›Adds a persisted /fast toggle in the TUI plus app-server support for fast and flex service tiers.
     • ›Improves memories with workspace-scoped writes, renamed memory settings, and guardrails against saving stale or polluted facts.
     • ›Adds a direct Windows installer script to published release artifacts.
146. rust-v0.107.0 Mar 2, 2026 · issue -169

     Codex CLI gains thread forking for sub-agents, configurable memories, multimodal custom tools, and richer voice device controls.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.107.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.107.0

     └──▷ TRY IT
     Hard-wipe all saved memory state when you want a clean slate — useful after major project switches or corrupted memory accumulation.
     copy

     $ codex debug clear-memories

     • ›Adds thread forking into sub-agents, letting you branch work from the current conversation without losing context.
     • ›Enables microphone and speaker device selection for realtime voice sessions, with persistent device preferences and improved transcription-aligned audio format.
     • ›Supports multimodal output (including images and structured content) from custom tools, beyond plain text.
     • ›Introduces configurable memories and a new codex debug clear-memories command to fully reset saved memory state.
     • ›Exposes richer model availability and plan-upgrade metadata in the app server, surfacing plan-gated models with tooltips in the TUI.
     +1 moreshow less

     • ›Adds an ephemeral field to the Thread object in the app-server API.
147. rust-v0.106.0 Feb 26, 2026 · issue -172

     Codex CLI gains a direct install script, js_repl promotion, user-input in Default mode, and smarter memory management.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.106.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.106.0

     • ›Adds a direct install script for macOS and Linux, published as a GitHub release asset alongside the codex and rg binaries.
     • ›Promotes js_repl to /experimental with startup compatibility checks, user-visible warnings for incompatible Node versions, and a lowered minimum Node requirement of 22.22.0.
     • ›Enables request_user_input in Default collaboration mode, not only in Plan mode.
     • ›Makes the 5.3-codex model visible in the CLI model list for API users.
     • ›Introduces diff-based memory forgetting and usage-aware memory selection for improved long-session memory behavior.
     +3 moreshow less

     • ›Expands the app-server v2 thread API with experimental thread-scoped realtime endpoints/notifications and a thread/unsubscribe flow to unload live threads without archiving them.
     • ›Adds structured OTEL audit logging for embedded codex-network-proxy policy decisions and blocks.
     • ›Reduces sub-agent startup overhead by skipping expensive history metadata scans during subagent spawns.
148. rust-v0.105.0 Feb 25, 2026 · issue -173

     Codex CLI v0.105.0 adds syntax-highlighted diffs, voice dictation, multi-agent fan-out from CSV, new TUI commands, and granular approval controls.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.105.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.105.0

     └──▷ USE IT
     Enable voice dictation so you can hold spacebar to record and transcribe prompts instead of typing.
     toml copy

     # In your Codex config file (e.g. ~/.codex/config.toml)
     [features]
     voice_transcription = true

     • ›Adds syntax highlighting for fenced code blocks and diffs in the TUI, plus a /theme picker with live preview and theme-aware diff colors for light and dark terminals.
     • ›Enables voice dictation in the TUI: hold spacebar to record and transcribe a prompt directly (enable with features.voice_transcription = true in config).
     • ›New spawn_agents_on_csv capability fans out multi-agent work from a CSV file with built-in progress and ETA tracking.
     • ›Sub-agents now support nicknames, a cleaner picker UI, and visible child-thread approval prompts for easier multi-agent tracking.
     • ›New /copy TUI command copies the latest complete assistant reply to the clipboard.
     +15 moreshow less

     • ›New /clear command and Ctrl-L shortcut clear the screen without losing thread context; /clear can also start a fresh chat.
     • ›Codex can now request extra sandbox permissions for a command mid-session, and specific approval prompt types can be auto-rejected without disabling approvals entirely.
     • ›App-server thread/list now supports searching threads by title.
     • ›Thread status is now exposed in thread/read and thread/list responses and in notifications.
     • ›App-server thread/resume returns the latest turn inline, reducing data loss on reconnects.
     • ›Adds configurable MCP OAuth callback URL for MCP server login.
     • ›Adds allow_login_shell config option.
     • ›Implements proxy-only egress for the Linux sandbox via a TCP-UDS-TCP bridge.
     • ›Node module resolution paths can now be specified for js_repl.
     • ›Adds configurable agent spawn depth.
     • ›Adds configurable write_stdin timeout.
     • ›Adds network proxy config wiring via permissions.network proxy config.
     • ›Adds JSON tracing logs for the app-server.
     • ›Adds ability to attach extra files to feedback submissions.
     • ›Profile-level model_catalog_json override is now supported.
149. rust-v0.104.0 Feb 18, 2026 · issue -180

     Codex CLI gains WebSocket proxy support, thread archive notifications, and distinct command approval IDs.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.104.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.104.0

     └──▷ TRY IT
     Route Codex CLI WebSocket traffic through a corporate proxy without modifying code or config files.
     copy

     $ WS_PROXY=ws://proxy.corp.example.com:3128 codex

     • ›Supports WS_PROXY/WSS_PROXY environment variables (and lowercase variants) for proxying WebSocket connections through the network proxy.
     • ›App-server v2 now emits notifications when threads are archived or unarchived, so clients can react to state changes without polling.
     • ›Core and protocol layers now carry distinct approval IDs per command approval, enabling multiple approvals within a single shell command execution flow.
150. rust-v0.103.0 Feb 17, 2026 · issue -181

     Codex CLI gains richer app metadata in listings and a configurable prepare-commit-msg hook for co-author attribution.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.103.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.103.0

     • ›App listing responses now include app_metadata, branding, and labels, enabling richer app cards without extra requests.
     • ›Commit co-author attribution now uses a Codex-managed prepare-commit-msg hook, with command_attribution config support to set a default label, a custom label, or disable attribution entirely.
151. rust-v0.102.0 Feb 17, 2026 · issue -181

     Codex CLI gains unified permissions flow, structured network approvals, multi-agent roles, and model reroute notifications.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.102.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.102.0

     • ›Adds a unified permissions flow with clearer permissions history in the TUI and a new slash command to grant sandbox read access to blocked directories.
     • ›Introduces structured network approval handling with richer host/protocol context shown directly in approval prompts.
     • ›Adds customizable multi-agent roles configurable via the main config file.
     • ›Adds a model/rerouted notification so clients can detect and render model reroute events explicitly.
152. rust-v0.100.0 Feb 12, 2026 · issue -186

     Codex CLI gains a JS REPL runtime, memory slash commands, configurable sandbox read access, and multi-rate-limit support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.100.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.100.0

     └──▷ TRY IT
     Drop a persisted memory entry by name during a session to keep the agent's memory clean.
     copy

     $ /m_drop

     Update a persisted memory entry interactively from the TUI without leaving the session.
     copy

     $ /m_update

     • ›Adds experimental js_repl runtime that persists JavaScript state across tool calls, with optional runtime path overrides.
     • ›Adds /m_update and /m_drop TUI slash commands for in-session memory management.
     • ›Introduces ReadOnlyAccess policy shape for configurable sandbox read access on Linux and Windows.
     • ›Supports multiple simultaneous rate limits across the protocol, backend client, and TUI status surfaces.
     • ›Reintroduces app-server WebSocket transport with split inbound/outbound architecture and connection-aware thread resume subscriptions.
     +2 moreshow less

     • ›Enables Apps SDK apps in ChatGPT connector handling.
     • ›Promotes Linux bubblewrap sandbox and Windows Sandbox to Experimental capability level.
     └──▷ BREAKING ON UPGRADE

     • !The disable_websockets config key is renamed to websockets_disabled.
     • !CODEX_BWRAP_ENABLE_FFI environment variable is removed; vendored bubblewrap is now always compiled on Linux.
153. rust-v0.99.0 Feb 11, 2026 · issue -187

     Codex CLI v0.99.0 adds concurrent shell execution, new TUI controls, app-server steering APIs, and GIF/WebP image support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.99.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.99.0

     └──▷ TRY IT
     Customize which metadata fields appear in the TUI status line without leaving the interface.
     copy

     $ /statusline

     Restrict agents to specific web search modes and enforce network constraints for enterprise deployments.
     ini copy

     # requirements.toml
     [requirements]
     allowed_web_search_modes = ["safe"]
     
     [network]
     # network constraints defined here

     • ›Enables concurrent shell command execution alongside active agent turns without interruption.
     • ›Adds /statusline command for interactively configuring which metadata appears in the TUI footer.
     • ›Adds sortable resume picker with toggle between creation time and last-updated time, with an in-picker mode indicator.
     • ›New app-server APIs for steering active turns (turn/steer), listing experimental features, resuming agents (resume_agent), and opting out of specific notifications.
     • ›Enterprise requirements.toml now supports restricting allowed web search modes (allowed_web_search_modes) and defining network constraints.
     +2 moreshow less

     • ›Image attachments now accept GIF and WebP formats in addition to previously supported types.
     • ›Adds shell environment and rc file snapshotting to bootstrap shell commands.
154. rust-v0.98.0 Feb 5, 2026 · issue -193

     Codex CLI v0.98.0 ships GPT-5.3-Codex support and promotes Steer mode to stable-on-by-default.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.98.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.98.0

     • ›Adds GPT-5.3-Codex as a supported model.
     • ›Steer mode is now stable and enabled by default: Enter sends immediately during running tasks while Tab explicitly queues follow-up input.
     └──▷ BREAKING ON UPGRADE

     • !Steer mode is now enabled by default, changing keyboard behavior: Enter sends immediately during running tasks instead of queuing input, and Tab is now the explicit queue key — any workflow that relied on the previous Enter-to-queue behavior will behave differently without reconfiguration.
155. rust-v0.97.0 Feb 5, 2026 · issue -193

     Codex CLI v0.97.0 adds session-scoped tool auto-approval, live skill reloading, /debug-config, and configurable log_dir.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.97.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.97.0

     └──▷ TRY IT
     Inspect the exact merged configuration Codex is running with — useful when debugging unexpected behavior from config files, env vars, or MDM settings.
     copy

     $ /debug-config

     • ›Adds session-scoped 'Allow and remember' approval for MCP/App tools, so repeated calls to the same tool are auto-approved without re-prompting during a session.
     • ›Adds live skill update detection so changes to skill files are picked up without restarting the CLI.
     • ›Supports mixed text and image content in dynamic tool outputs for app-server integrations.
     • ›New /debug-config slash command in the TUI lets you inspect the effective configuration at runtime.
     • ›Introduces initial memory plumbing (API client and local persistence) to support thread memory summaries.
     +1 moreshow less

     • ›Adds configurable log_dir to redirect logs, overridable via -c flag.
156. rust-v0.96.0 Feb 4, 2026 · issue -194

     Codex CLI v0.96.0 adds thread compaction API, WebSocket rate-limit signaling, and unified exec on all non-Windows platforms.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.96.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.96.0

     • ›Adds thread/compact as an async trigger RPC in the v2 app-server API, letting clients start compaction immediately and track completion separately.
     • ›Adds a codex.rate_limits WebSocket event for rate-limit signaling, with WebSocket parity for ETag and reasoning metadata handling.
     • ›Enables unified_exec on all non-Windows platforms.
     • ›Constrained requirement values now include source provenance, enabling source-aware config debugging in UI flows such as /debug-config.
157. rust-v0.95.0 Feb 4, 2026 · issue -194

     Codex CLI adds macOS app launcher, personal skills, parallel shell tools, and CODEX_THREAD_ID injection.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.95.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.95.0

     └──▷ TRY IT
     Invoke /plan with an inline prompt in the TUI instead of typing it separately after the command.
     copy

     $ /plan refactor the authentication module to use JWT tokens

     Use CODEX_THREAD_ID in a skill or script to branch logic based on which Codex session is active.
     copy

     $ echo "Running in Codex thread: $CODEX_THREAD_ID"

     • ›Adds codex app <path> command on macOS to launch Codex Desktop from the CLI, auto-downloading the DMG if not present.
     • ›Supports personal skill loading from ~/.agents/skills (with ~/.codex/skills compatibility) and new app-server APIs/events to list and download public remote skills.
     • ›/plan now accepts inline prompt arguments and pasted images directly in the TUI, with improved slash-command editing and highlighting.
     • ›Shell-related tools can now execute in parallel, improving multi-command throughput.
     • ›Injects CODEX_THREAD_ID into the shell environment so scripts and skills can detect the active thread/session.
     +1 moreshow less

     • ›Adds vendored Bubblewrap with FFI wiring in the Linux sandbox as groundwork for upcoming runtime integration.
158. rust-v0.94.0 Feb 2, 2026 · issue -196

     Codex CLI v0.94.0 enables plan mode by default, stabilizes personality config, and adds skills loading from .agents/skills.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.94.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.94.0

     └──▷ USE IT
     Set your preferred personality in the Codex config file to control agent tone across all sessions.
     toml copy

     # In your codex config (e.g., ~/.codex/config.toml)
     personality = "friendly"

     • ›Plan mode is now enabled by default with updated interaction guidance in the plan prompt.
     • ›Personality configuration is now stable: default is friendly, configured via the personality config key, with automatic forward migration of existing settings.
     • ›Supports loading skills from .agents/skills, with explicit relative-path lookup instructions and nested-folder markers supported.
     • ›Console output now includes runtime metrics for easier diagnostics.
159. rust-v0.93.0 Jan 31, 2026 · issue -198

     Codex CLI gains SOCKS5 proxy support, streaming Plan mode TUI, SQLite log DB, connector browsing, and smart approvals by default.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.93.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.93.0

     └──▷ USE IT
     Configure TUI notification delivery method in your Codex config.
     yaml copy

     tui:
       notifications_method: "system"

     • ›Adds an optional SOCKS5 proxy listener with policy enforcement and config gating.
     • ›Plan mode now streams proposed plans into a dedicated TUI view, with a feature-gated /plan slash command for quick mode switching.
     • ›New /apps slash command lets users browse connectors in the TUI, plus $ insertion for app prompts.
     • ›App-server supports external auth mode, accepting ChatGPT auth tokens from a host app and requesting refreshes when needed.
     • ›Smart approvals are now enabled by default, with explicit approval prompts for MCP tool calls.
     +5 moreshow less

     • ›Introduces a SQLite-backed log database with thread-ID filtering, 90-day log retention, and heuristic coloring via an improved logs client.
     • ›Adds features enable/features disable subcommands for toggling feature flags.
     • ›Adds tui.notifications_method config option.
     • ›Adds output display to the /ps command.
     • ›Live web search is now enabled for the DangerFullAccess sandbox policy.
160. rust-v0.92.0 Jan 27, 2026 · issue -202

     Codex CLI v0.92.0 adds dynamic tool injection, thread unarchive RPC, MCP OAuth scopes config, multi-agent explorer role, and cached web_search by default.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.92.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.92.0

     • ›Enables dynamic tool injection at API v2 thread startup, routing tool calls and responses end-to-end through the server and core tool pipeline.
     • ›Adds thread/unarchive RPC to restore archived rollouts back into active sessions.
     • ›Supports defining OAuth scopes for MCP servers directly in config.toml, eliminating the need to pass --scopes on every login.
     • ›Expands multi-agent collaboration with an explorer role, improved collab event mapping, and max-depth guardrails to cap agent recursion.
     • ›Adds thread list filtering in the app server to simplify browsing large thread sets.
     +1 moreshow less

     • ›Makes cached web_search the default client-side behavior.
161. rust-v0.90.0 Jan 25, 2026 · issue -204

     Codex CLI gains a network sandbox proxy, connectors/MCP support, and a beta collaboration mode with ephemeral threads.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.90.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.90.0

     • ›Adds a network sandbox proxy with policy enforcement to control outbound network access.
     • ›Introduces connectors support (phase 1) via an app server and MCP integration, with new config surface.
     • ›Ships collaboration mode as beta in the TUI, featuring a clearer plan → execute handoff and simplified Coding vs Plan mode selection.
     • ›Supports ephemeral threads and improved provenance metadata for spawned collaboration threads.
     • ›Adds proxy configuration support for WebSocket connections.
     +1 moreshow less

     • ›Enforces stricter limits on the number of concurrent multi-agents.
162. rust-v0.89.0 Jan 22, 2026 · issue -207

     Codex CLI gains /permissions command, per-skill toggle UI, smarter slash-command matching, and expanded app-server APIs.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.89.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.89.0

     └──▷ TRY IT
     Quickly review and adjust sandbox permissions mid-session without typing the full /approvals command.
     copy

     $ /permissions

     Enable or disable a specific skill interactively during a session to control which capabilities Codex may invoke.
     copy

     $ /skill

     • ›Adds /permissions command as a shorter alias for the approval workflow (original /approvals kept for compatibility).
     • ›Adds /skill UI to enable or disable individual skills from within the TUI.
     • ›Improves slash-command selection by prioritizing exact and prefix matches over fuzzy matches.
     • ›App server supports new thread/read API and filtering of archived threads in thread/list.
     • ›App server clients support layered config.toml resolution; config/read can compute the effective config from a given working directory.
     +1 moreshow less

     • ›Release artifacts now include a stable URL for the published config schema.
163. rust-v0.88.0 Jan 21, 2026 · issue -208

     Codex CLI gains device-code auth, collaboration modes, /fork sessions, codex cloud list, and WebSocket proxy support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.88.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.88.0

     └──▷ TRY IT
     List available Codex cloud resources directly from the terminal.
     copy

     $ codex cloud list

     Use the renamed model instructions file key in your config to supply a custom system prompt.
     ini copy

     model_instructions_file = "/path/to/instructions.md"

     • ›Adds device-code auth as a standalone fallback for headless environments where browser-based login is unavailable.
     • ›Introduces collaboration modes (with presets and per-turn overrides) for multi-agent coordination.
     • ›New codex cloud list subcommand to list cloud resources from the CLI.
     • ›New /fork slash command to fork the current session instead of opening the session picker.
     • ›Shows forked-from session ID in /status output.
     +14 moreshow less

     • ›Supports enabling/disabling individual skills via config or API.
     • ›Adds model_personality config option to customize model behavior.
     • ›Renames experimental_instructions_file to model_instructions_file in config.
     • ›Adds /experimental menu in TUI2 for accessing experimental features.
     • ›Supports proxy configuration for WebSocket connections.
     • ›Auto-enables WebSocket transport when conditions are met.
     • ›New max_threads config option to cap concurrent thread count.
     • ›Returns threads sorted by created_at or updated_at via the app-server API.
     • ›Adds a request-user-input tool and overlay for interactive prompts during task execution.
     • ›Introduces forward navigation in backtrack preview within the TUI.
     • ›Closes all threads when /new is invoked.
     • ›Detaches non-TTY child processes for cleaner headless operation.
     • ›Displays raw shell command on user shell interactions.
     • ›Preserves slash command order in search results.
     └──▷ BREAKING ON UPGRADE

     • !The experimental_instructions_file config key is renamed to model_instructions_file; existing configs using the old key will need to be updated.
164. rust-v0.87.0 Jan 16, 2026 · issue -213

     Codex CLI v0.87.0 adds multi-ID collaboration waits, user-snapshot shell execution, and TUI approval surfacing for spawned threads.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.87.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.87.0

     • ›Enables collaboration wait calls to block on multiple IDs in a single request, simplifying multi-thread coordination.
     • ›Runs user shell commands under the user snapshot so aliases and shell config are honored.
     • ›Surfaces approval requests from spawned/unsubscribed threads directly in the TUI.
     • ›Adds user message metadata (text elements and byte ranges) round-tripping through protocol, app-server, and core so UI annotations survive history rebuilds.
165. rust-v0.86.0 Jan 16, 2026 · issue -213

     Codex CLI adds SKILL.toml metadata support and explicit web search disable control.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.86.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.86.0

     └──▷ TRY IT
     Define skill metadata for your project so it appears correctly in the Codex TUI and app server.
     copy

     $ # Place SKILL.toml at your project root:
     cat SKILL.toml
     # name = "My Skill"
     # description = "Does X and Y"
     # icon = "🔍"
     # brand_color = "#FF6600"
     # default_prompt = "Start by summarizing the repo."

     • ›Adds SKILL.toml support for defining skill metadata (names, descriptions, icons, brand color, default prompt) surfaced in the app server and TUI.
     • ›Enables clients to explicitly disable web search and signal eligibility via a header to align with server-side rollout controls.
166. rust-v0.85.0 Jan 15, 2026 · issue -214

     Codex CLI v0.85.0 adds real-time agent collaboration events, agent role presets, and interrupt-capable send_input.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.85.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.85.0

     • ›App-server v2 now emits collaboration tool calls as item events in the turn stream, enabling clients to render agent coordination in real time.
     • ›New spawn_agent parameter accepts an agent role preset for richer agent control in collaboration tools.
     • ›New send_input interrupt capability lets callers optionally interrupt a running agent before delivering a message.
     • ›/models metadata now includes migration_markdown so clients can display richer upgrade guidance when suggesting model migrations.
167. rust-v0.84.0 Jan 15, 2026 · issue -214

     Codex CLI Rust v0.84.0 adds metadata on text elements for richer client rendering and schema evolution.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.84.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.84.0

     • ›Adds additional metadata fields to text elements in the Rust protocol/types, enabling richer client rendering and future schema evolution.
168. rust-v0.81.0 Jan 14, 2026 · issue -215

     Codex CLI gains gpt-5.2-codex default, headless device-code login, Linux read-only mounts, and MCP threadId support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.81.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.81.0

     └──▷ TRY IT
     Keep TUI output in the main scroll buffer (not alternate screen) so Zellij scrollback works correctly.
     copy

     $ codex --no-alt-screen "refactor the auth module"

     • ›Switches default API model to gpt-5.2-codex.
     • ›Adds threadId to codex mcp-server responses, enabling chained use with the codex-reply tool.
     • ›Enables automatic device-code login flow when a headless (no-browser) environment is detected.
     • ›Supports read-only bind mounts in the Linux sandbox to prevent writes to sensitive paths.
     • ›Renders partial (in-flight) tool calls in the TUI transcript overlay.
     +2 moreshow less

     • ›Adds tui.alternate_screen config key and --no-alt-screen CLI flag to control alternate-screen behaviour (e.g., for Zellij scrollback).
     • ›Publishes a generated JSON Schema for config.toml in docs/ to enable config validation.
169. rust-v0.80.0 Jan 9, 2026 · issue -220

     Codex CLI gains session forking, sandbox elevation, skill invocations via v2 API, requirements exposure, and metrics observability.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.80.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.80.0

     └──▷ TRY IT
     Elevate sandbox permissions interactively when your agent needs capabilities beyond the default sandbox mode.
     copy

     $ /elevate-sandbox

     • ›Adds conversation/thread fork endpoints so clients can branch a session into a new thread.
     • ›Introduces the /elevate-sandbox command with onboarding prompts for upgrade/degraded sandbox mode.
     • ›Exposes requirement/list endpoint so clients can read requirements.toml and adapt agent-mode UX.
     • ›Supports explicit skill invocations through the v2 API UserInput::Skill.
     • ›Introduces metrics capabilities with additional counters for observability.
170. rust-v0.79.0 Jan 7, 2026 · issue -222

     Codex CLI gains multi-conversation agent control, thread rollback, cached web search, and an analytics config toggle.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.79.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.79.0

     └──▷ USE IT
     Opt out of analytics collection by adding the analytics section to your Codex config file.
     ini copy

     [analytics]
     enabled = false

     • ›Adds multi-conversation 'agent control' so a session can programmatically spawn or message other conversations.
     • ›Adds thread/rollback app-server API so IDE clients can undo the last N turns without rewriting history.
     • ›Adds web_search_cached flag to return cached-only Web Search results as a safer alternative to live requests.
     • ›Allows global exec flags (model, json, sandbox toggles, etc.) to be passed after codex exec resume.
     • ›Shows time/version-targeted announcement tips in the TUI, driven by a TOML file in the repo.
     +1 moreshow less

     • ›Adds [analytics] enabled=... config section to control analytics collection behavior.
171. rust-v0.78.0 Jan 6, 2026 · issue -223

     Codex CLI gains external-editor prompt editing, project-aware config layering, MDM support, and richer exec policy justifications.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.78.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.78.0

     └──▷ TRY IT
     Edit a long or complex prompt in your preferred editor mid-session instead of typing it inline in the TUI.
     copy

     $ # While in the Codex TUI, press Ctrl+G to open the current prompt in $VISUAL or $EDITOR, edit, save, and quit — edits are synced back automatically.

     • ›Adds Ctrl+G to open the current prompt in your configured external editor ($VISUAL/$EDITOR) and sync edits back into the TUI.
     • ›Supports project-aware config layering: loads repo-local .codex/config.toml, honors configurable project_root_markers, and merges with system config like /etc/codex/config.toml.
     • ›Supports enterprise-managed configuration requirements on macOS via an MDM-provided TOML payload.
     • ›Exec policy rules can now include human-readable justifications via a justification arg to prefix_rule() in *.rules files, with policy loading following the unified config-layer stack.
     • ›Improves tui2 transcript navigation with multi-click selection, a copy shortcut/affordance, and a draggable auto-hiding scrollbar.
     +1 moreshow less

     • ›Starts Windows PowerShell sessions in UTF-8 mode to reduce encoding-related prompt/output issues.
172. rust-v0.77.0 Dec 21, 2025 · issue -239

     Codex CLI v0.77.0 adds sandbox mode constraints, normalized TUI scrolling with config knobs, and flag-free MCP OAuth login.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.77.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.77.0

     └──▷ USE IT
     Lock a repo to only allow network-disabled sandbox modes, preventing contributors from accidentally running Codex with broader access.
     toml copy

     # In your project's requirements.toml
     allowed_sandbox_modes = ["workspace-write"]

     • ›Adds allowed_sandbox_modes field to requirements.toml to restrict which sandbox modes a project permits.
     • ›Adds tui.scroll_* config settings and normalizes mouse wheel and trackpad scrolling behavior across terminals in TUI2.
     • ›MCP OAuth login for streamable HTTP servers no longer requires the rmcp_client feature flag — works out of the box.
     • ›Improves fuzzy file search display consistency by centralizing file-name derivation in codex-file-search.
     • ›Updates bundled model metadata (models.json) with latest available models.
173. rust-v0.76.0 Dec 19, 2025 · issue -241

     Codex CLI gains /ps command, ExternalSandbox policy, model list UI, admin-scoped skills, and system-wide UNIX config support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.76.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.76.0

     └──▷ TRY IT
     Inspect processes currently running inside a Codex session — useful when debugging long-running agent tasks.
     copy

     $ /ps

     • ›Adds /ps command to list running processes from within the TUI.
     • ›Introduces ExternalSandbox policy for delegating sandbox enforcement to an external process.
     • ›Supports system-wide /etc/codex/requirements.toml on UNIX for admin-managed dependency configuration.
     • ›Adds a model list UI for browsing and selecting available models interactively.
     • ›Enables skills by default (previously opt-in), with support for admin-scoped skills.
     +4 moreshow less

     • ›Supports shortDescription field for skills entries, surfaced in the skills popup.
     • ›Adds macOS DMG build target for easier distribution and installation.
     • ›Improves terminal detection metadata to enable per-terminal scroll tuning.
     • ›Updates bundled system skills included with the CLI.
     └──▷ BREAKING ON UPGRADE

     • !The exclude setting now defaults to true in the app server, changing behavior for existing app-server deployments that relied on the previous default.
174. rust-v0.74.0 Dec 18, 2025 · issue -242

     Codex CLI gains gpt-5.2-codex model, a new /experimental slash command, model picker UI, and configurable ghost-snapshot warnings.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.74.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.74.0

     └──▷ TRY IT
     Access experimental features mid-session without restarting the CLI.
     copy

     $ /experimental

     • ›New /experimental slash command for accessing experimental features from within the CLI.
     • ›New model picker UI for selecting models interactively.
     • ›Adds config option to disable ghost snapshot warnings.
     • ›Supports SYSTEM-level skills, expanding the skills system beyond user-defined entries.
     • ›Adds public skills discovery with improved repo skill discovery and error UX.
     +4 moreshow less

     • ›TypeScript SDK gains xhigh reasoning effort support.
     • ›Model list loading is now non-blocking, improving startup responsiveness.
     • ›Constrains allowed values for approval_policy config field.
     • ›Sandboxes the .codex sub-folder as read-only when it resides inside a writable root.
175. rust-v0.73.0 Dec 15, 2025 · issue -245

     Codex CLI v0.73.0 adds OpenTelemetry tracing, ghost snapshot v2, ghost commit config support, and a reimplemented SkillsManager.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.73.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.73.0

     • ›Adds ghost snapshot v2 for improved session capture.
     • ›Supports ghost commits via config for session replay workflows.
     • ›Reimplements skills loading via SkillsManager and skills/list for consistent discovery.
     • ›Adds OpenTelemetry tracing support for observability into Codex operations.
176. rust-v0.72.0 Dec 13, 2025 · issue -247

     Codex CLI v0.72.0 adds remote compaction for API-key sessions, expanded sandbox safety, and 1Password support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.72.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.72.0

     • ›Enables remote compacting (context compaction via API) for API-key-based sessions, not just OAuth users.
     • ›Adds 1Password integration support.
     • ›Introduces Elevated Sandbox levels 3 and 4, tightening sandboxing for shell command execution.
     • ›Expands the safe-command allowlist, reducing unnecessary sandbox prompts for common operations.
     • ›Adds reliable utilities for locating pwsh.exe and powershell.exe on Windows, and uses PowerShell to parse PowerShell syntax.
     +2 moreshow less

     • ›Signs two additional Windows executables for improved trust on Windows hosts.
     • ›New config API with a cleaner config loading flow.
177. rust-v0.71.0 Dec 11, 2025 · issue -249

     Codex CLI rust-v0.71.0 adds gpt-5.2 support, shell snapshots, long-snapshot warnings, and an elevated Sandbox 2.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.71.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.71.0

     • ›Adds gpt-5.2 as a selectable model, OpenAI's latest frontier model with improvements across knowledge, reasoning, and coding.
     • ›Shows the default model in the model picker so practitioners can see at a glance what will be used.
     • ›Adds shell snapshots for shell commands, capturing environment state for reproducibility.
     • ›Adds warnings when snapshots grow too long, surfacing potential performance or context issues early.
     • ›Introduces Elevated Sandbox 2, an upgraded sandboxing environment.
178. rust-v0.69.0 Dec 10, 2025 · issue -250

     Codex CLI gains Skills injection, MCP in-session login, vim TUI navigation, shell snapshotting, and an experimental tui2 frontend.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.69.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.69.0

     • ›Adds Skills support: explicitly selecting a skill now injects its SKILL.md content into the turn; skills load once per session and warn on unreadable files.
     • ›Adds MCP in-session login so users can authenticate to Model Context Protocol servers without leaving the CLI session.
     • ›Adds vim-style navigation keys (hjkl/arrow equivalents) for both option selection menus and the transcript pager.
     • ›Adds shell snapshotting in the exec/sandbox layer for safer and more reliable command execution.
     • ›Introduces an experimental tui2 frontend, available behind a feature flag.
     +6 moreshow less

     • ›Elevates Linux sandbox allowances to permit sendmsg/recvmsg syscalls, unblocking more networked workloads.
     • ›Adds support for using a remote branch when performing reviews if the local branch trails, enabling review of unsynced work.
     • ›Rate-limit warnings now display as percentage of quota remaining for clearer visibility.
     • ›Config writes now preserve comments and key order; model field is optional to match real-world config files.
     • ›TUI log files now strip ANSI escape codes for cleaner plaintext logs.
     • ›Adds codex-max prompt and tools support for experimental models.
179. rust-v0.66.0 Dec 9, 2025 · issue -251

     Codex CLI gains execpolicy TUI whitelisting, --branch for cloud exec, sigstore signing, and cloud status/diff/apply flows.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.66.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.66.0

     • ›Adds TUI ability to whitelist command prefixes after an approval, so repeated similar commands skip future prompts.
     • ›Sandbox denials now propose an execpolicy amendment in the TUI that you can accept inline.
     • ›Shell MCP server now runs execpolicy, so MCP tools follow the same approval rules as direct commands.
     • ›Execpolicy fallback checks now inspect each pipeline segment, catching unsafe tails like | rm -rf that were previously missed.
     • ›Adds --branch flag to codex cloud exec for targeting a specific branch on remote runs.
     +4 moreshow less

     • ›Adds status, diff, and apply subflows to the cloud exec path so you can inspect and apply cloud-run changes locally.
     • ›Linux release artifacts are now signed via sigstore for supply-chain verification.
     • ›Adds is-mutating detection for the shell command handler to better classify dangerous shell operations.
     • ›Skills are also loaded from the repository root in addition to existing search paths.
     └──▷ BREAKING ON UPGRADE

     • !experimental_use_rmcp_client is removed from the config (the flag no longer exists).
180. rust-v0.65.0 Dec 4, 2025 · issue -256

     Codex CLI adds /resume and /skills commands, history trimming, pycache exclusion, and Ctrl-P/N TUI navigation in v0.65.0

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.65.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.65.0

     └──▷ TRY IT
     Resume a previous Codex session interactively without restarting from scratch.
     copy

     $ /resume

     Browse and activate skills defined in your skills.md during a session.
     copy

     $ /skills

     Cap local history file size to prevent unbounded growth across long-running projects.
     yaml copy

     # In your Codex config file:
     history:
       max_bytes: 10485760

     • ›Adds /resume slash command for snappier session resumption from the TUI.
     • ›Adds /skills slash command (also via $) for listing and selecting skills defined in skills.md.
     • ›Promotes Codex Max as the new default model.
     • ›Trims history.jsonl automatically when history.max_bytes is set, capping local history size.
     • ›Ignores common junk directories — including __pycache__ — by default to reduce context noise.
     +10 moreshow less

     • ›Adds Ctrl-P / Ctrl-N keyboard shortcuts for arrow navigation inside the TUI textarea.
     • ›Renders tips and tooltips via Markdown with a bold 'Tip' label for richer in-app guidance.
     • ›Adds model warning when apply_patch is used with an incompatible model.
     • ›Supports listing MCP servers from the app-server API.
     • ›Adds --version flag for the @openai/codex-shell-tool-mcp package.
     • ›Adds one-off commands support to app-server v2.
     • ›Introduces alias compaction for more efficient context management.
     • ›Adds experimental support for skills.md skill definitions.
     • ›Displays tokens used when the context window size is unknown.
     • ›Restores clipboard image paste support on native Windows in the TUI.
181. rust-v0.64.0 Dec 2, 2025 · issue -258

     Codex CLI v0.64.0 adds detached review mode, MCP elicitations, per-run custom env injection, compaction events, and ImageView inline rendering.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.64.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.64.0

     └──▷ TRY IT
     Install the shell-tool MCP server from npm and log in so Codex can authenticate on your behalf.
     copy

     $ npx @openai/codex-shell-tool-mcp login

     • ›Adds experimental exp model selection for tool experimentation.
     • ›Adds unified exec basic pruning strategy to limit session bloat.
     • ›Adds per-run custom environment injection for unified exec processes.
     • ›Adds policy-approved command bypass so approved commands skip sandbox checks.
     • ›Adds detached review mode with explicit enter/exit events and review thread IDs.
     +18 moreshow less

     • ›Adds MCP elicitations support for interactive model-initiated prompts.
     • ›Adds shell-tool MCP login support and explicit server capability declaration.
     • ›Publishes @openai/codex-shell-tool-mcp to npm for public installation.
     • ›Adds compaction events emitted on threads and turns for observability.
     • ›Adds token-usage and plan-update notifications on thread/turn events.
     • ›Adds item/fileChange/outputDelta output deltas on file-change items.
     • ›Adds ImageView item type that renders images inline in the app-server.
     • ›Exposes process IDs on command items for event handling.
     • ›Adds thread and turn IDs propagated on every item and error notification.
     • ›Exposes git info, current working directory, CLI version, and source metadata on threads.
     • ›Adds send-followup-v2 to the app-server test client.
     • ›Adds config management utilities to the app-server.
     • ›Enables history lookup on Windows and WSL.
     • ›Enables enterprises to skip upgrade checks and messages.
     • ›Windows sandbox flags risky browser or URL launches as dangerous before execution.
     • ›Consolidates world-writable-directory scanning for improved safety defaults.
     • ›Upgrades rmcp client to 0.10.0, enabling custom client notifications.
     • ›Adds cargo-audit and cargo-deny for supply-chain security in CI.
182. rust-v0.63.0 Nov 21, 2025 · issue -269

     Codex CLI adds a Declined status for command execution approvals in the app server.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.63.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.63.0

     • ›Adds a Declined status for command execution, allowing the app server to explicitly signal when a command has been rejected.
183. rust-v0.59.0 Nov 19, 2025 · issue -271

     Codex CLI gains GPT-5.1-Codex-Max, native Windows Agent mode, compaction support, and expanded 10K tool output tokens.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.59.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.59.0

     └──▷ USE IT
     Cap tool output size to avoid runaway token usage when working with verbose commands in long sessions.
     toml copy

     # In ~/.codex/config.toml
     tool_output_token_limit = 10000

     Enable Windows Agent mode with the experimental sandbox when running Codex on a native Windows machine.
     📍# When prompted during onboarding, or select 'auto' mode — Codex will prompt to enable the Windows sandbox automatically.
     • ›Adds GPT-5.1-Codex-Max model for higher reliability and long-running, project-scale agentic coding workflows.
     • ›Introduces native Windows Agent mode with an experimental sandbox that limits filesystem and network access, allowing Codex to read/write files and run commands with fewer approvals.
     • ›Adds first-class Native Compaction support to improve performance across extended coding sessions, enabled by default.
     • ›Expands tool output token limits to 10,000 tokens, configurable via tool_output_token_limit in config.toml.
     • ›Adds LM Studio OSS model support.
     +9 moreshow less

     • ›Adds mTLS configuration support for OpenTelemetry via the [otel] config section.
     • ›Enables parallel tool calls for faster multi-step agent execution.
     • ›Adds git branch tooling so the model can query and work with branches programmatically.
     • ›Adds --add-dir flag to exec and the TypeScript SDK for specifying additional working directories.
     • ›Credits are now visible via the /status command.
     • ›Codex Resume now displays branches and filters sessions by current working directory.
     • ›Adds placeholder icons for images that cannot be decoded to prevent API errors.
     • ›Adds non-blocking MCP server startup so the TUI is responsive while MCP tools initialize.
     • ›TUI notifications are now enabled by default.
184. rust-v0.58.0 Nov 13, 2025 · issue -277

     Codex CLI gains GPT-5.1 support, a new shell_command tool, seatbelt log-denials debugger, and app-server JSON schema generation.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.58.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.58.0

     └──▷ TRY IT
     Diagnose why the seatbelt sandbox is blocking a command by capturing denial events in real time.
     copy

     $ codex debug seatbelt --log-denials

     • ›Adds support for the gpt-5.1 model family, including model picker integration and NUX onboarding.
     • ›New shell_command tool for executing shell commands from within the agent.
     • ›New codex debug seatbelt --log-denials command for diagnosing sandbox permission denials.
     • ›App-server gains a new command to generate JSON schema for protocol definitions.
     • ›App-server adds item started/completed events for turn items, enabling finer-grained lifecycle tracking.
     +11 moreshow less

     • ›App-server thread/resume endpoint now supports history, path, and overrides parameters.
     • ›Adds workdir field to unified_exec for controlling working directory of executed commands.
     • ›Adds opt-out for rate-limit model nudge, giving users control over model-switch suggestions.
     • ›Unified exec gains escalation handling for more robust sandboxed execution.
     • ›Enables ghost_commit feature by default, committing only after mutating tools complete.
     • ›TUI now displays keyboard shortcuts inline for approval options.
     • ›Windows .exe artifacts are now uploaded for CLI releases, enabling direct Windows binary downloads.
     • ›Auth-aware status output now uses authentication information from AuthManager.
     • ›Rate-limit status bar is now surfaced in the UI.
     • ›Warns when a model switch occurs on session resume.
     • ›Proxy context is preserved across compaction events.
185. rust-v0.57.0 Nov 9, 2025 · issue -281

     Codex CLI gains Ctrl-N/P slash-command navigation, unified exec safe-command auto-approval, and new app-server endpoints.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.57.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.57.0

     └──▷ HOW TO FIND IT
     Navigate slash-command suggestions or history without leaving the keyboard while typing a prompt.
     📍# Inside the Codex TUI, type '/' to open the slash-command list, then press Ctrl-N / Ctrl-P to move up and down through suggestions.
     • ›Adds Ctrl-N / Ctrl-P keyboard navigation for slash command lists, file pickers, and history in the TUI.
     • ›Unified exec mode now allows safe commands to run without requiring user approval.
     • ›Skips retries automatically when the API returns an insufficient_quota error, avoiding unnecessary wait loops.
     • ›Removes the shell tool when unified exec is enabled, streamlining the tool surface.
     • ›Promotes shell config tool to model family config level.
     +6 moreshow less

     • ›App-server implements the account/read endpoint.
     • ›App-server exposes additional fields on the Thread object.
     • ›Adds network_access and web_search options to the TypeScript SDK.
     • ›WSL: normalizes Windows paths during updates.
     • ›Replaces raw Cloudflare 403 HTML responses with a friendly error message.
     • ›Kills shell tool process groups on timeout, improving cleanup for long-running commands.
     └──▷ BREAKING ON UPGRADE

     • !The shell tool is removed from the available tool set when unified exec is enabled (--unified-exec).
186. rust-v0.56.0 Nov 7, 2025 · issue -283

     Codex CLI gains GPT-5-Codex-Mini, model nudges, single-reasoning-effort model support, and new v2 server APIs.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.56.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.56.0

     • ›Introduces GPT-5-Codex-Mini, a compact and cost-efficient variant of GPT-5-Codex.
     • ›Adds model nudge suggestions for queries to guide model selection.
     • ›Supports models with a single reasoning effort level.
     • ›Windows Sandbox now warns when an Everyone-writable directory is detected.
     • ›Sandbox widened to allow certificate operations when network is enabled.
     +4 moreshow less

     • ›App-server exports v2 Thread, Turn, and account login (start/completed/cancel) APIs.
     • ›Session metadata is now included in listConversations responses.
     • ›Allows Codex to be run from PID 1.
     • ›Loads custom prompts from symlinked Markdown files.
187. rust-v0.54.0 Nov 4, 2025 · issue -286

     Codex CLI v0.54.0 adds Azure OpenAI proxy support, an improved compactor, and elapsed-time display after aborts.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.54.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.54.0

     • ›Adds options to responses-api-proxy to support Azure OpenAI endpoints.
     • ›Introduces compactor v2 (feat: compactor 2) for improved conversation compaction, with a warning displayed on compact.
     • ›Shows elapsed time in the TUI after aborting a request.
     • ›Follows symlinks during file search.
     • ›Parses Azure OpenAI rate-limit messages for clearer error reporting.
     +5 moreshow less

     • ›Logs sandbox commands to $CODEX_HOME instead of the current working directory.
     • ›Includes reasoning tokens in the context window calculation.
     • ›Adds sandbox command assessment changes based on experiment feedback.
     • ›Refines TUI text-area word separator handling.
     • ›Ensures the trust prompt is not skipped on Windows when sandbox is enabled.
188. rust-v0.53.0 Oct 31, 2025 · issue -290

     Codex CLI gains a Windows Sandbox alpha, /exit command alias, and absolute-time rate-limit errors.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.53.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.53.0

     └──▷ TRY IT
     Exit an interactive Codex session using the new alias instead of /quit.
     copy

     $ /exit

     • ›Adds Windows Sandbox alpha support for isolated execution on Windows.
     • ›Adds /exit as a slash-command alias for /quit.
     • ›Rate-limit errors now report an absolute timestamp instead of a relative delay.
     • ›Removes last-turn reasoning filtering, exposing full reasoning output.
     └──▷ BREAKING ON UPGRADE

     • !The include_view_image_tool config key has been removed; any config referencing it will need to be updated.
189. rust-v0.52.0 Oct 30, 2025 · issue -291

     Codex CLI v0.52.0 adds shell passthrough with !<cmd>, TUI undo, configurable compaction prompt, keyring auth, and MCP OAuth scopes.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.52.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.52.0

     └──▷ TRY IT
     Run a quick shell command mid-session without leaving the Codex prompt — useful for checking git status or running a build before your next instruction.
     copy

     $ !git status

     • ›Adds !<cmd> syntax to execute shell commands directly from the Codex prompt.
     • ›New TUI undo operation lets users roll back the last applied change.
     • ›Queued messages are now visible in the TUI during active response streaming.
     • ›Compaction prompt is now configurable by the user.
     • ›New auth storage abstraction with OS keyring support and configurable backend.
     +15 moreshow less

     • ›Adds MCP OAuth scope specification support via mcp add.
     • ›MCP tool call results that include images are now rendered to the model.
     • ›Environment variable values are redacted in /mcp and mcp get output.
     • ›New GetConversationSummary RPC enables fetching and resuming conversation summaries by ID.
     • ›Item streaming events added to the app-server protocol.
     • ›Sandbox policy violations now surface a model summary and risk assessment.
     • ›Adds sandbox_mode support in user profiles.
     • ›MIME type verification added for attached images.
     • ›Windows TUI now displays auto-mode setup guidance.
     • ›Conversations annotated with model_provider field to enable filtering.
     • ›Ability to purchase credits for additional usage surfaced in the CLI.
     • ›MCP startup errors for timeouts and GitHub auth now provide clearer messaging.
     • ›Local tokenizer used for accurate truncation of unified exec tool outputs.
     • ›Stale or missing rate-limit data now produces explicit messaging in the TUI.
     • ›Returns an error when an unknown feature flag is passed to enabled/disabled feature config.
190. rust-v0.50.0 Oct 25, 2025 · issue -296

     Codex CLI v0.50.0 adds sandbox policy risk assessments, stale rate-limit messaging, and MCP env-var redaction.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.50.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.50.0

     • ›Adds model summary and risk assessment output for commands that violate sandbox policy.
     • ›Adds messaging when rate limits are stale or no rate limits are cached.
     • ›Introduces codex/event/raw_item events in the app-server event stream.
     • ›Improves /feedback command diagnostics for better issue reporting.
191. rust-v0.48.0 Oct 23, 2025 · issue -298

     Codex CLI gains --add-dir, MCP tool filtering, OAuth scopes, enterprise login controls, and auto-compaction at 90% context.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.48.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.48.0

     └──▷ TRY IT
     Give the agent write access to a second directory (e.g. a shared library) alongside your current project.
     copy

     $ codex --add-dir ../shared-lib 'Refactor the auth module to use the shared validation helpers'

     Restrict an MCP server to only the tools your workflow needs, reducing attack surface.
     toml copy

     # In your Codex config (e.g. ~/.codex/config.toml):
     [mcp_servers.my_server]
     enabled_tools = ["read_file", "search_code"]

     Lock a team deployment to a specific login method and ChatGPT workspace via managed config.
     toml copy

     # In managed config:
     forced_login_method = "chatgpt"
     forced_chatgpt_workspace_id = "ws-abc123"

     • ›Adds --add-dir flag to specify additional writable working directories beyond the default.
     • ›MCP stdio servers now use the official Rust MCP SDK (rmcp) as their client backend.
     • ›MCP stdio servers can specify a cwd to set their working directory.
     • ›MCP servers support enabled_tools and disabled_tools config options to selectively allow or block individual tools.
     • ›Streamable HTTP MCP servers can specify OAuth scopes during codex mcp login.
     +10 moreshow less

     • ›Adds forced_login_method and forced_chatgpt_workspace_id configuration options for enterprise managed-config control.
     • ›Adds experimental codex stdio-to-uds subcommand.
     • ›Adds experimental_bearer_token option to model provider definitions for custom auth.
     • ›Auto-compacts conversation context when it reaches ~90% of the model's limit.
     • ›Plan tool is now enabled by default in exec mode.
     • ›Local tokenizer used for accurate context truncation in unified exec.
     • ›Text cleared with Ctrl+C is preserved in input history and recoverable with the up arrow.
     • ›MCP tool names are now prefixed with mcp__ for clearer namespacing.
     • ›Dedicated error message for GitHub MCP servers missing a personal access token.
     • ›When MCP auth expires, the user is prompted to log in again interactively.
     └──▷ BREAKING ON UPGRADE

     • !MCP tool names are now prefixed with mcp__ — any automation or configuration referencing MCP tool names by their previous unprefixed names will break.
192. rust-v0.47.0 Oct 17, 2025 · issue -304

     Codex CLI gains agent overrides, OAuth MCP login, full-access warnings, macOS code signing, and auto-update banners.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.47.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.47.0

     └──▷ TRY IT
     Suppress the interactive approval prompt when running codex exec in an automated pipeline — use with caution in trusted environments only.
     copy

     $ codex exec --dangerous-auto-approval 'run the test suite and output results'

     Run a task on Codex cloud instead of locally, useful when local sandbox resources are insufficient.
     copy

     $ codex cloud exec 'refactor the auth module to use JWT'

     • ›Adds indentation mode for read_file to control how file content is presented.
     • ›Adds an agent override file to customize agent behavior without changing global config.
     • ›Prompts MCP OAuth login automatically when adding a streamable HTTP server that supports OAuth.
     • ›Adds a confirmation prompt (warning) when enabling full-access approval mode.
     • ›Adds an auto-update banner with approval flow, including detection of Bun installs.
     +10 moreshow less

     • ›Adds a warning about rate limits when using high-effort mode.
     • ›Adds dangerous auto-approval option for codex exec.
     • ›Adds codex cloud exec subcommand for cloud-based execution.
     • ›Includes parsed command data in ExecApprovalRequestEvent for richer approval metadata.
     • ›Adds a path field to the ParsedCommand::Read variant.
     • ›Passes Codex thread ID in notifier metadata for better traceability.
     • ›Adds a header display for task kind in the TUI.
     • ›Adds macOS code signing and notarization to release binaries.
     • ›Shows a message when a stream is correctly resumed.
     • ›Exposes sandbox denied errors in logs for easier diagnosis.
193. rust-v0.46.0 Oct 9, 2025 · issue -312

     Codex CLI gains streamable HTTP MCP servers, new list_dir/grep_files tools, and alias creation in v0.46.0

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.46.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.46.0

     └──▷ USE IT
     Enable the new MCP client stack and disable a specific server without removing it from config.
     toml copy

     # In ~/.config/codex/config.toml
     experimental_use_rmcp_client = true
     
     [[mcp_servers]]
     name = "my-server"
     url = "https://my-mcp-server.example.com"
     enabled = false

     • ›Adds list_dir built-in tool, giving the agent a native directory-listing capability.
     • ›Adds grep_files built-in tool for pattern-based file searching during agent sessions.
     • ›Supports streamable HTTP MCP servers via codex mcp add, alongside optional bearer token or OAuth login.
     • ›Adds enabled config field per MCP server entry so individual servers can be toggled without removing them.
     • ›Adds ability to explicitly specify a credentials store for MCP server authentication.
     +7 moreshow less

     • ›Adds auth status reporting for MCP servers.
     • ›Enables new MCP stack via experimental_use_rmcp_client = true in config.toml.
     • ›Adds UP/ENTER keybinding support in the CLI input.
     • ›Switches TUI code highlighting to tree-sitter for bash syntax.
     • ›Adds animated breathing spinner on true-color terminals.
     • ›Adds dynamic width for line numbers in diff views.
     • ›Truncates context on compact to manage long sessions.
194. rust-v0.45.0 Oct 6, 2025 · issue -315

     Codex CLI gains OAuth MCP auth, parallel tool calls, and gpt-5 default for Windows in v0.45.0

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.45.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.45.0

     └──▷ TRY IT
     Securely log in to Codex CLI using an API key from your environment without exposing it on the command line.
     copy

     $ printenv OPENAI_API_KEY | codex login --with-api-key

     • ›Adds experimental OAuth authentication support for MCP servers.
     • ›Removes the requirement to set experimental_use_rmcp_client for streamable HTTP MCP servers that don't need OAuth.
     • ›Adds initial parallel tool call support.
     • ›Defaults to gpt-5 for Windows users who have not configured a model.
     • ›Outputs only the final message to stdout for codex exec, enabling cleaner scripting pipelines.
     +1 moreshow less

     • ›Adds a pulsing dot loading state indicator in the UI.
     └──▷ BREAKING ON UPGRADE

     • !The codex login --api-key flag is replaced by --with-api-key, which reads the key from stdin; existing scripts passing the key directly via --api-key will break.
195. rust-v0.44.0 Oct 3, 2025 · issue -317

     Codex CLI v0.44.0 adds cloud task management, streamable HTTP MCP servers, custom prompt arguments, and a refreshed TUI.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.44.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.44.0

     └──▷ TRY IT
     Manage cloud tasks from the CLI — useful for kicking off or inspecting long-running agent jobs in the cloud.
     copy

     $ codex cloud

     • ›New TUI refresh: updated chat composer, bottom pane, two-stage model picker, and upgrade nudge.
     • ›Custom prompts now support named and positional (numeric) arguments via the /prompts: prefix.
     • ›Adds support for streamable HTTP MCP servers.
     • ›New codex cloud subcommand (very experimental) for managing cloud tasks.
     • ›Experimental reduction of repetitive approval prompts for read-only (safe) commands on Windows via PowerShell command safety classification.
     +12 moreshow less

     • ›Displays context window usage ratio while tasks are running.
     • ›Shows 'Viewed Image' indicator when the model processes an image.
     • ›Adds /review command to main command palette.
     • ›Fuzzy file search is now exposed via the MCP server.
     • ›OpenTelemetry events support added.
     • ›Web search item wired up in the response stream.
     • ›Falls back to configured instruction files when AGENTS.md is not available.
     • ›Adds Updated at time in the session resume picker.
     • ›Supports CODEX_API_KEY environment variable for codex exec.
     • ›Separates codex mcp into distinct codex mcp-server and codex app-server subcommands.
     • ›TypeScript SDK scaffold introduced with support for model, sandbox mode, working directory, and skipGitRepoCheck options.
     • ›Writes PID in addition to port to the server info file.
     └──▷ BREAKING ON UPGRADE

     • !The codex mcp command is split into codex mcp-server and codex app-server; any scripts or configs invoking codex mcp will break.
     • !The legacy codex exec --json format is removed; callers relying on the old JSON output format will break.
196. rust-v0.42.0 Sep 26, 2025 · issue -324

     Codex CLI gains an experimental Rust SDK MCP client, a responses-API proxy, secure mode, and safer command execution checks.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.42.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.42.0

     └──▷ TRY IT
     Lock down process observability on a shared or production host before running Codex.
     copy

     $ CODEX_SECURE_MODE=1 codex <prompt>

     Inspect the current session status with the revamped, detail-rich output.
     copy

     $ /status

     • ›Adds experimental Rust SDK–based MCP client for model context protocol integration.
     • ›New responses-api-proxy component to simplify and secure response handling and proxying.
     • ›New CODEX_SECURE_MODE=1 environment variable to restrict process observability in sensitive environments.
     • ›Adds explicit codex exec events, including item.started, with improved output display on success.
     • ›Adds dangerous command detection checks in core and a Windows-specific safe-command check before execution.
     +5 moreshow less

     • ›Revamped /status command with clearer presentation and details.
     • ›Pageless session list for browsing sessions without pagination interruptions.
     • ›Approvals UI moved to ListSelectionView for a more consistent selection experience.
     • ›Improved MCP tool call styling in the terminal UI.
     • ›Hides status indicator during answer streaming to reduce visual noise.
197. rust-v0.41.0 Sep 24, 2025 · issue -326

     Codex CLI gains rate-limit visibility, exec output schemas, and an include-plan-tool flag in v0.41.0.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.41.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.41.0

     └──▷ TRY IT
     Enforce a structured JSON output shape when running a non-interactive exec task, useful for piping Codex output into downstream tooling.
     copy

     $ codex exec --output-schema '{"type":"object","properties":{"result":{"type":"string"}}}' 'Summarize the findings in ./report.txt'

     Run an exec task and include the plan tool output so you can inspect the model's reasoning steps alongside the result.
     copy

     $ codex exec --include-plan-tool 'Refactor the auth module in ./src/auth.rs to use async/await'

     • ›Shows rate-limit reset time and current usage when a rate limit is hit, so practitioners know exactly when to retry.
     • ›Adds --output-schema parameter to exec mode for specifying a structured output schema.
     • ›Adds --include-plan-tool flag to exec mode to include and display the plan tool.
     • ›Vendors Ripgrep (rg) directly into the npm release, eliminating @vscode/ripgrep postinstall failures.
198. rust-v0.40.0 Sep 23, 2025 · issue -327

     Codex CLI gains /review commands, usage limits in /status, MCP timeouts, and defaults to gpt-5-codex with auto-compaction.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.40.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.40.0

     └──▷ USE IT
     Prevent slow MCP servers from hanging a session by setting a per-server timeout in your config.
     ini copy

     [mcp_servers.my_server]
     tool_timeout_sec = 120

     • ›Switches default model to gpt-5-codex.
     • ›Adds automatic context compaction for gpt-5-codex when the session hits 220k tokens.
     • ›Adds usage limits display to the /status command.
     • ›Adds /review command with options to review a specific commit, diff against a base branch, or apply custom review instructions.
     • ›Adds configurable MCP tool call timeout: defaults to 60s, overridable per-server via tool_timeout_sec in config.toml.
     └──▷ BREAKING ON UPGRADE

     • !The /limits command has been removed; usage limit information has moved to /status.
199. rust-v0.39.0 Sep 18, 2025 · issue -332

     OpenAI Codex CLI v0.39.0 introduces the new /review command for in-session code review.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.39.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.39.0

     └──▷ TRY IT
     Trigger an inline code review of your current session's changes without leaving the Codex TUI.
     copy

     $ /review

     • ›Adds /review command for initiating code review directly within a Codex CLI session.
     • ›Adds hint for codex resume on TUI exit to help users continue interrupted sessions.
     • ›Turn notifications now include the agent's reply text for richer context.
200. rust-v0.37.0 Sep 17, 2025 · issue -333

     OpenAI Codex CLI rust-v0.37.0 adds approval/turn-end notifications, persistent search, and review mode core updates.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.37.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.37.0

     • ›Adds desktop notifications on approvals and turn end.
     • ›Persists search items across sessions.
     • ›Introduces review mode core updates.
     • ›Restyled thinking outputs for improved readability.
     • ›Adds a dev message upon review exit.
201. rust-v0.36.0 Sep 15, 2025 · issue -335

     Codex CLI v0.36.0 adds GPT-5-Codex, session resumption, JSON-RPC expansions, MCP interface, and experimental context compaction.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.36.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.36.0

     └──▷ TRY IT
     Migrate from env-var auth to the new explicit login so your API key persists across sessions.
     copy

     $ codex login --api-key "sk-...your-key..."

     • ›Adds GPT-5-Codex model support: faster on easy tasks, harder on complex tasks, with improved code quality and better AGENTS.md steerability.
     • ›New codex resume command lets practitioners pick up old conversations where they left off.
     • ›New codex login --api-key command stores API credentials in CODEX_HOME/auth.json for explicit, persistent authentication.
     • ›Adds initial MCP (Model Context Protocol) interface and documentation for integrating external tool servers.
     • ›Expands JSON-RPC server with SetDefaultModel (passing None clears the default), UserInfo, and reasoning_effort field in NewConversationResponse.
     +6 moreshow less

     • ›Introduces experimental automatic context compaction to handle long sessions without manual intervention.
     • ›New TUI onboarding flow with animations, consistent session headers on resume, and reasoning-level display in the header.
     • ›Expands default sandbox permissions to cover a broader set of operations out of the box.
     • ›Command output is now included when a timeout is sent to the model, giving it context on what ran before the cutoff.
     • ›Adds Review Mode core capability for reviewing changes before applying them.
     • ›Workspace roots are now injected into the environment context automatically.
     └──▷ BREAKING ON UPGRADE

     • !OPENAI_API_KEY is no longer read from the environment; run codex login --api-key "your-api-key-here" once to store the key in CODEX_HOME/auth.json, or run codex login to use ChatGPT auth.
202. rust-v0.33.0 Sep 10, 2025 · issue -340

     Codex CLI 0.33.0 adds a custom Markdown renderer, image support in messages, and keyboard word-deletion.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.33.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.33.0

     • ›New custom Markdown renderer replaces tui_markdown for improved in-terminal rendering.
     • ›Supports images in UserMessageEvent, enabling image attachments in chat messages.
     • ›Adds alt+delete keybinding to delete the word to the right of the cursor (delete_forward_word).
     • ›Sets a user-agent suffix when Codex is used as an MCP server.
     • ›Introduces rollout items for staged feature delivery.
     └──▷ BREAKING ON UPGRADE

     • !The POSIX unification and snapshot sessions feature (introduced in #3179) has been reverted; any workflows depending on that behavior will no longer work.
203. rust-v0.32.0 Sep 10, 2025 · issue -340

     Codex 0.32.0 adds Alt+Delete word deletion, ArchiveConversation API, rollout groundwork, and broader apply_patch OSS model compatibility.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.32.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.32.0

     • ›Adds Alt+Delete keybinding in the TUI to delete the next word to the right of the cursor.
     • ›Adds ArchiveConversation request type to the client protocol for conversation management.
     • ›Includes rollout_path in NewConversationResponse as initial groundwork for rollout support.
     • ›Expands apply_patch compatibility to OSS models from gpt-oss providers using alternative naming conventions (e.g. openai/gpt-oss-*).
     • ›Sets a user-agent suffix when Codex acts as an MCP server.
     +1 moreshow less

     • ›Re-exports InitialHistory from conversation_manager and generates additional TypeScript types, including returning conversation ID with ConversationSummary.
     └──▷ BREAKING ON UPGRADE

     • !The config.responses_originator_header_internal_override config key is replaced by the CODEX_INTERNAL_ORIGINATOR_OVERRIDE_ENV_VAR environment variable; any existing config using the old key will no longer work.
204. rust-v0.31.0 Sep 8, 2025 · issue -342

     Codex CLI 0.31.0 adds per-MCP-server startup timeouts, command preview highlighting, and richer session/status info.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.31.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.31.0

     └──▷ USE IT
     Set a longer startup timeout for a slow-starting MCP server (e.g., on Windows) to prevent premature connection failures.
     toml copy

     # In your codex config (e.g., ~/.codex/config.toml)
     [mcp_servers.my_server]
     command = "my-mcp-server"
     startup_timeout_ms = 15000

     • ›Adds startup_timeout_ms config option per MCP server declaration, fixing slow-start issues especially on Windows.
     • ›Shows minutes and hours in the TUI thinking timer for long-running sessions.
     • ›Displays CLI version in /status output.
     • ›Respects model family configuration overrides from the TOML config file.
     • ›Moves token usage and context information to the session level in the TUI.
     +4 moreshow less

     • ›Clears non-empty prompts with Ctrl+C.
     • ›Highlights the Proposed Command preview in the TUI.
     • ›Adds a getUserAgent MCP method.
     • ›Cancels pending OAuth login to free up the localhost port when login is abandoned.
205. rust-v0.30.0 Sep 5, 2025 · issue -345

     Codex CLI 0.30.0 adds session resume/continue flags, MCP session history, bash syntax highlighting, and Windows Full Access auto-approval.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.30.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.30.0

     └──▷ TRY IT
     Return to a previous Codex session interactively — useful for long-running tasks you stepped away from.
     copy

     $ codex --resume

     Instantly re-enter the most recent session without navigating a picker, ideal for quick follow-up prompts.
     copy

     $ codex --continue

     • ›Adds --resume session picker and --continue quick-resume flags to the TUI for returning to previous sessions.
     • ›Adds MCP session resume and history listing support, replaying event messages from response items on resume.
     • ›Adds bash syntax highlighting in the TUI command display.
     • ›Enables auto-approval of patches on Windows in Full Access (DangerFullAccess) mode, eliminating approval prompts on non-sandboxed platforms.
     • ›Improves @ file search to include specific hidden directories such as .github and .gitlab.
     +6 moreshow less

     • ›Introduces a rollout policy mechanism for controlled feature exposure.
     • ›Adds a shared HTTP client for more consistent network handling.
     • ›Uses macOS-native key glyphs (⌥⇧⌃) for keyboard hints on Mac.
     • ›Pager now auto-scrolls (pins scroll to bottom) in the TUI.
     • ›Introduces MCP sandbox call support.
     • ›Prompts Codex to read AGENTS.md files for project-level agent instructions.
     └──▷ BREAKING ON UPGRADE

     • !Project .env files are no longer loaded automatically — environment variables previously sourced from a project .env on startup must now be set in the shell or passed explicitly.
206. rust-v0.29.0 Sep 3, 2025 · issue -347

     Codex CLI 0.29.0 adds Android/Termux support, Windows ARM64 distribution, and switches to the latest search tool.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.29.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.29.0

     • ›Adds Android/Termux support by gating the arboard dependency on unsupported targets.
     • ›Includes Windows ARM64 executable in the npm package.
     • ›Switches to the latest search tool for @ search queries.
     • ›Supports cd foo && ... syntax in exec and apply_patch commands.
     • ›Shows a loading state in the TUI when @ search results are pending.
     +2 moreshow less

     • ›Adds stable, cross-platform file locking using std::fs APIs.
     • ›Adds a rollout listing API and returns file heads via the extracted rollout module.
207. rust-v0.26.0 Aug 29, 2025 · issue -352

     Codex CLI gains custom slash-prompt libraries, agentic image viewing, and an MCP GetConfig endpoint.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.26.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.26.0

     └──▷ TRY IT
     Create a reusable slash command so you can invoke a custom prompt mid-session without retyping it.
     copy

     $ mkdir -p ~/.codex/prompts
     echo 'Summarize the security implications of the following code:' > ~/.codex/prompts/secreview.md
     # Then inside a Codex session, type: /secreview

     • ›Adds custom /prompts support: drop prompt files into ~/.codex/prompts to create reusable slash commands.
     • ›New 'View Image' tool lets Codex agentically load and interpret local image files during a task.
     • ›New MCP GetConfig endpoint exposes the fully resolved Codex configuration for inspection by MCP clients.
208. rust-v0.25.0 Aug 27, 2025 · issue -354

     Codex CLI gains remove_conversation API, mouse wheel scrolling, Alt+Ctrl+H word deletion, and context window on task_started events.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.25.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.25.0

     └──▷ TRY IT
     Return queued messages to the composer when you change your mind mid-input — press ESC instead of losing them.
     copy

     $ # While messages are queued, press ESC to move them back to the composer for editing.

     • ›Adds remove_conversation API to ConversationManager for manual cleanup in long-lived servers.
     • ›Enables mouse wheel alternate scrolling in transcript and diff views.
     • ›Adds Alt+Ctrl+H shortcut to delete the previous word (parity with Alt+Backspace).
     • ›Includes context window information on task_started events; model may now vary per turn.
     • ›ESC with queued messages returns them to the composer instead of discarding them.
     +1 moreshow less

     • ›Caches transcript line wraps to keep long transcripts responsive.
209. rust-v0.24.0 Aug 26, 2025 · issue -355

     Codex CLI gains web search, transcript mode, image paste, queued messages, and long-running shell command support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.24.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.24.0

     └──▷ TRY IT
     Review the full session transcript with scrolling after a long agentic run to audit every command and output.
     copy

     $ # Inside a running codex TUI session, press Ctrl+T to open transcript mode and scroll through the history.

     Tune GPT-5 response verbosity to reduce noise in automated pipelines.
     yaml copy

     # In your codex config file:
     model_verbosity = "low"

     • ›Adds web search capability via the explicit --search option.
     • ›New transcript mode (Ctrl+T) with live-updating scrollable view of the full session.
     • ›Supports copy/paste and drag-and-drop of image files directly into the TUI (macOS Terminal + iTerm).
     • ›Introduces queued messages, letting input be staged while the model is still responding.
     • ›Adds edit/resume conversation from any previous message in history (esc-esc).
     +7 moreshow less

     • ›Adds long-running shell command support via new exec_command and write_stdin tools.
     • ›New model_verbosity config option for tuning GPT-5 output verbosity via the Responses API.
     • ›Now reads all AGENTS.md files up the directory tree to the git root for richer project context.
     • ›Diff output now displayed in a pager with hunk headers for easier review.
     • ›Simplifies command approval UI in the TUI.
     • ›Hides chain-of-thought (CoT) output by default; surfaces headers in the status indicator instead.
     • ›Improves MCP tool cache hit rate by sorting tools deterministically.
210. rust-v0.23.0 Aug 20, 2025 · issue -361

     Codex CLI gains /mcp, /approvals, and /model slash commands plus runtime reasoning effort control and ChatGPT auth auto-refresh.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.23.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.23.0

     └──▷ TRY IT
     Switch model and tune reasoning effort mid-session without restarting — useful when a task shifts from quick edits to deep reasoning.
     copy

     $ /model

     Lock down or loosen what Codex is allowed to do automatically during a sensitive refactor.
     copy

     $ /approvals

     List or interact with connected MCP servers directly from the TUI.
     copy

     $ /mcp

     • ›Adds /mcp slash command in the TUI to inspect and interact with MCP servers.
     • ›Adds /approvals slash command to control approval/permission settings at runtime.
     • ›Adds /model slash command to change the active model and reasoning effort without restarting.
     • ›Adds 'minimal' reasoning effort level for GPT-5 models.
     • ›Shows login options when not signed in with ChatGPT, improving auth discovery.
     +7 moreshow less

     • ›Auto-refreshes ChatGPT auth tokens to maintain uninterrupted sessions.
     • ›Shows a progress indicator for the /diff command.
     • ›Adds a /diff command for diffing session changes.
     • ›Releases zip-archived binaries for easier distribution.
     • ›Adds DotSlash entry for Windows x86_64, enabling Windows distribution support.
     • ›Adds Ctrl+H as an additional backspace keyboard shortcut in the TUI.
     • ›Supports Ghostty terminal Ctrl-b/Ctrl-f word-navigation fallback in the TUI.
211. rust-v0.22.0 Aug 15, 2025 · issue -363

     Codex CLI gains markdown streaming, improved diff UI, Ctrl-Z TUI suspend, and a Rust-native login server.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.22.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.22.0

     └──▷ TRY IT
     Suspend the Codex TUI mid-session to drop to the shell, then resume with fg.
     copy

     $ # While Codex TUI is running, press:
     ctrl-z
     # To resume:
     fg

     • ›Supports markdown streaming in the TUI output.
     • ›Improved diff display readability when using a light terminal background.
     • ›Adds ctrl-z keybinding to suspend the TUI.
     • ›Login server rewritten in Rust, replacing the Python implementation.
212. rust-v0.21.0 Aug 12, 2025 · issue -363

     Codex CLI v0.21.0 adds diff previews for apply_patch, output truncation notices, and MCP JSON schema sanitization.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.21.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.21.0

     • ›Shows a diff preview when apply_patch is about to modify files, letting you inspect changes before they land.
     • ›Includes an output truncation message in tool call results so the model knows when it received incomplete command output.
     • ›Adds JSON schema sanitization for MCP tools to ensure compatibility with internal JsonSchema enums.
     • ›Sends a prompt cache key to improve token efficiency through better caching.
     • ›Splits multiline commands in the UI for improved readability.
     +2 moreshow less

     • ›Parses and formats exec commands more clearly in the UI.
     • ›Shows a feedback message after the /compact command completes.
213. rust-v0.15.0 Aug 7, 2025 · issue -363

     Codex CLI v0.15.0: gpt-5 default, new approval mode, and trust-based onboarding flow

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.15.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.15.0

     └──▷ TRY IT
     Let the model self-select when to ask for approval, avoiding constant interruptions without going fully autonomous.
     copy

     $ codex --ask-for-approval on-request 'refactor the auth module to use JWT'

     Run Codex in a trusted Git repo with the recommended onboarding defaults: workspace-scoped writes and model-driven approval prompts.
     copy

     $ codex --sandbox workspace-write --ask-for-approval on-request 'add unit tests for src/api.rs'

     • ›Sets gpt-5 as the default model for all sessions.
     • ›Adds --ask-for-approval on-request mode, letting the model decide when to prompt for user approval — a middle ground between on-failure and never.
     • ›Introduces a new onboarding flow that auto-configures --sandbox workspace-write and --ask-for-approval on-request when a folder is marked as trusted, optimized for Git repo workflows.
     └──▷ BREAKING ON UPGRADE

     • !The default model is changed to gpt-5; any workflow that relied on the previous default model will now use gpt-5 instead.
214. rust-v0.11.0 Aug 2, 2025 · issue -363

     Codex CLI gets native terminal scrolling, /compact command, experimental planning tool, and version-update notifications.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.11.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.11.0

     └──▷ TRY IT
     Compact a long conversation mid-session to reduce context length and stay within token limits.
     copy

     $ /compact

     • ›New terminal UX appends output to the end of the terminal instead of running fullscreen, enabling native scrollback and copy/paste.
     • ›Adds the /compact command for compacting conversation context.
     • ›Introduces an experimental planning tool.
     • ›CLI now checks for newer versions and notifies you when an update is available.
215. rust-v0.10.0 Jul 24, 2025 · issue -364

     Codex CLI v0.10.0 expands trusted commands by default and adds Git state capture to session logs.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.10.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.10.0

     • ›Expands the set of commands trusted by default, reducing approval prompts for common operations.
     • ›Records Git state (branch, commit, etc.) in the .jsonl session log for better auditability of AI-driven changes.
216. rust-v0.8.0 Jul 19, 2025 · issue -364

     Codex CLI v0.8.0 adds response streaming in TUI and codex exec, plus a --json flag for JSONL output.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.8.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.8.0

     └──▷ TRY IT
     Capture structured, machine-readable output from a Codex exec run for piping into downstream tooling or logging.
     copy

     $ codex exec --json 'summarize the security findings in REPORT.md'

     • ›Streams model responses in real time in the TUI and when using codex exec.
     • ›Adds --json flag to codex exec to print output as JSONL to stdout.
     • ›Reorganizes ~/.codex/sessions into YYYY/MM/DD subfolders for easier navigation and better filesystem performance.
     • ›ctrl-d now only exits the TUI when the composer is empty, preventing accidental exits mid-session.
217. rust-v0.6.0 Jul 12, 2025 · issue -364

     OpenAI Codex CLI v0.6.0 adds paste summarization and an experimental codex apply command for Codex Web.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.6.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.6.0

     └──▷ TRY IT
     Interact with Codex Web from the terminal without leaving your workflow.
     copy

     $ codex apply

     • ›New codex apply command (experimental) lets you interact with Codex Web directly from the CLI.
     • ›Adds paste summarization for large pastes, automatically condensing oversized clipboard input.
218. rust-v0.5.0 Jul 10, 2025 · issue -364

     Codex CLI rust-v0.5.0 adds reasoning-summary config control and Android platform support via npm.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.5.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.5.0

     └──▷ USE IT
     Enable reasoning summaries for a model that supports them by setting the new config flag.
     yaml copy

     # In your Codex config file:
     model_supports_reasoning_summaries: true

     • ›New model_supports_reasoning_summaries config option to control reasoning summary behavior per model.
     • ›Running Codex installed via npm on Android (process.platform === "android") now routes to the Rust CLI.
219. rust-v0.4.0 Jul 9, 2025 · issue -364

     Codex CLI v0.4.0 adds shell completion generation, per-profile reasoning controls, and custom base URL support.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.4.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.4.0

     └──▷ TRY IT
     Generate shell completions for your shell (e.g. to install via Homebrew or manually source them).
     copy

     $ codex completion bash

     • ›Supports OPENAI_BASE_URL environment variable for the built-in openai model provider, enabling use of compatible API endpoints.
     • ›Adds model_reasoning_effort and model_reasoning_summary fields to profile definitions for fine-grained reasoning control.
     • ›New completion subcommand enables shell tab-completion generation for package managers like Homebrew.
220. rust-v0.3.0 Jul 8, 2025 · issue -364

     Codex CLI gains a --sandbox flag and custom HTTP header support for model provider requests.

     └──▷ GET THIS VERSION
     copy

     $ git clone --branch rust-v0.3.0 https://github.com/openai/codex.git
     # already have the repo? check out this version:
     $ git checkout rust-v0.3.0

     └──▷ TRY IT
     Run Codex with an explicit sandbox policy to control what the agent is allowed to do on your machine.
     copy

     $ codex --sandbox <sandbox-policy> "refactor the auth module"

     • ›Adds --sandbox flag to control sandbox behavior from the command line.
     • ›Enables configuration of custom HTTP headers when making requests to model providers.
     └──▷ BREAKING ON UPGRADE

     • !The config.toml sandbox-related options have breaking changes — existing sandbox configuration will need to be updated after upgrading.