Updatify / Codex Cli | Release notes

Install with pip install --upgrade openai-codex==0.154.0 (Python 3.10 or later). This release includes the matching openai-codex-cli-bin==0.154.0 runtime.

• Add max and ultra reasoning-effort values. #39662
• Add ExternalMessage to synchronous and asynchronous run() and turn() calls. External content can start a turn or join an active regular turn with tool-level authority; it does not grant user authorization. Consumers receive independent event streams. #44086
• Add include_turns on resume/fork, turn_service_tier for one newly started turn, and source metadata. History selection changes the returned response, not model context. Existing defaults are preserved when these options are omitted. #44084
• Refresh generated protocol models and notifications, and preserve completion events that arrive before a turn-start response. #44032, #44400

Check these migrations when upgrading:

• HookMetadata wraps its handler in .root. Replace accesses such as hook.command with hook.root.command, checking hook.root.handler_type before reading handler-specific fields.
• Some previously unknown notifications now have typed payloads. Read named fields instead of .params; unknown or invalid payloads still use UnknownNotification.

New Features

• GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619)
• Experimental worktree support lets you create isolated checkouts for new or forked sessions using --worktree or /worktree, then browse and resume them. (#42652, #43069, #43120, #43286)
• Answer questions inline while Codex continues working, using suggested choices or custom text without losing your main draft. (#42891, #42894, #42897)
• Windows sessions can now share a background Codex server, with daemon lifecycle commands and managed updates. (#42405, #42392)
• Vim editing gains R replace mode with undo and dot-repeat, plus more reliable Escape handling in legacy terminals. (#42194, #42584)
• Copying responses preserves formatting in rich-text apps, and /copy can copy status output or individual session fields. (#42847, #43055)

Bug Fixes

• Existing sessions pick up newly installed plugin tools and refresh skills and hooks after external plugin upgrades or rollbacks. (#42284, #42593, #42990)
• MCP connections coordinate OAuth token refreshes and surface login challenges when refresh fails, without automatically replaying rejected tool calls. (#42413, #42552)
• Startup avoids running workspace-controlled helpers before trust is established, and the macOS sandbox blocks terminal input injection. (#42324, #42590)

Bug Fixes

• Fixed Astra’s visibility in the bundled model picker and made it the bundled default when no model is explicitly configured. (#42874)
• Updated Astra’s guidance to use asynchronous questions only when the tool is available in the session. (#42878)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.153.3…rust-v0.153.4

• #42874 [0.153 hotfix] Show Astra in bundled model picker @rhan-oai
• #42878 [0.153 hotfix] Qualify Astra async-question guidance by tool availability @rhan-oai

New Features

• Added GPT-6-Astra to the Amazon Bedrock model picker for Mantle and Runtime global/US routes. (#42805)

Bug Fixes

• Corrected GPT-6-Astra’s guidance for asynchronous clarification questions to use the supported tool and recognize that it accepts text only. (#42809)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.153.2…rust-v0.153.3

• #42805 [0.153 hotfix] Add GPT-6-Astra to Amazon Bedrock catalogs @celia-oai
• #42809 [0.153 hotfix] Update Astra async-question guidance @rhan-oai

Bug Fixes

• Corrected the GPT-6-Astra Fast tier description to say “2x speed, increased usage” instead of “1.5x.” This changes only the displayed text, not how requests run. (#42632)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.153.1…rust-v0.153.2

• #42632 Fix GPT-6-Astra Fast tier description for 0.153.2 @anp-oai

New Features

• Added support for configuring GPT-6-Astra through the API without changing the default model or showing it in the model picker. (#42605)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.153.0…rust-v0.153.1

• #42605 Backport GPT-6-Astra model catalog to 0.153 @anp-oai

New Features

• Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. (#41941, #42140)
• The plugin CLI can list, install, and remove plugins from remote marketplaces. (#42150)
• Set tui.auto_recap = false to disable automatic recaps while keeping manual /recap available. (#42101)
• TUI history shows complete patches, input sent to background terminals, and individual completed commands. (#41893, #42107)
• Plus and Team users receive an earlier warning when less than half of their allowance remains in an approximately five-hour usage window. (#42142)

Bug Fixes

• TUI sessions reconnect after an external app-server connection drops, preserving drafts and transcripts while keeping uncertain or queued submissions paused for review. (#41911, #41916, #41918)

Bug Fixes

• Guardian approval review now honors Node REPL policies provided through model metadata.

Full Changelog: https://github.com/openai/codex/compare/rust-v0.152.0…rust-v0.152.1

New Features

• Vim mode supports / and ? searches within drafts, highlighted matches, and repeat navigation with n and N. (#41586)
• Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
• The terminal UI and codex exec show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)
• MCP server names can contain :, @, /, and ., supporting package-style names throughout CLI commands and authentication. (#41700)
• Individual MCP tools support an output_token_limit setting, with consistent truncation across session resumes. (#41421)
• App-server clients can configure thread/shellCommand timeouts, including deadlines longer than one hour. (#41384)

Bug Fixes

• Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)

• Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)

• Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)

• Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)

• MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)

New Features

• Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
• Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
• Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)

Bug Fixes

• Preserved restored permission profiles across TUI turns and prevented /cd from weakening sandbox restrictions. (#41192)
• Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
• Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
• Preserved structured MCP tool and resource errors in app-server responses. (#41196)
• Counted nested subagent token usage toward root goal budgets. (#41183)
• Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)

Chores

• Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
• Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#41191, #41194)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.150.0…rust-v0.151.0

• #41183 Account subagent token usage toward root goals @copyberry
• #41189 Instrument stdin review size checks @copyberry

Bug Fixes

• Remote compaction now counts retained images toward its token budget by default, trimming older images as needed. (#41003)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.150.0…rust-v0.150.1

• #41003 Backport retained-image compaction budgeting to 0.150 @rhan-oai

New Features

• Reference other Codex tasks with @ mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315)
• /copy now offers a picker for full responses, individual code blocks, and blockquotes. (#39997)
• Unnamed terminal tasks receive descriptive titles automatically, and /rename suggests an editable title based on the conversation. (#40492, #40495)
• Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)
• Bind shortcuts to cycle permission modes, and use . in Vim mode to repeat your last edit. (#39873, #40521)
• New Interrupt hooks can run commands or MCP handlers when an active top-level turn is interrupted. (#40511)

Bug Fixes

• Untrusted projects no longer supply project-level AGENTS.md instructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004)
• Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (#39993)
• Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)
• Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)
• Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.149.0…rust-v0.149.1

New Features

• Added an interactive codex agents dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142)
• Added /cd, /pwd, and /cwd commands for managing the working directory in TUI sessions. (#38894)
• Added codex queue for sending messages to existing local or remote sessions. (#39092)
• Expanded Vim editing with character replacement and more change motions such as cw, c$, and cc. (#39661)
• codex doctor now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity. (#38827, #38918, #39060, #39074)
• SDK users can now pass exact CLI config overrides and select max or ultra reasoning effort. (#38817, #39662)

Bug Fixes

• Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics. (#39034, #39385, #39604)
• Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults. (#39153)
• Fixed duplicate sub-agent activity and tightened TUI routing for sub-agent notifications and approvals. (#39049, #39088)
• Realtime WebRTC sideband connections now reconnect after unexpected transport loss without dropping pending output. (#39257)
• Inline TUI history now remains available in Windows Terminal scrollback. (#39619)

New Features

• Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file. (#37358)
• Fork sessions with codex exec fork, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371)
• Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
• View estimated thread credits or cost in /status, status lines, and terminal titles for eligible workspaces. (#38281, #38282)
• Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
• Hooks can now run commands asynchronously and invoke MCP tools. (#37533, #38705)

Bug Fixes

• Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream. (#37260, #38785)
• Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews. (#37198, #37368, #38605)
• Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex. (#37337, #37485, #38418)
• TUI startup no longer lets buffered terminal input activate prompts accidentally, and onboarding appears when authentication is missing. (#38641, #38643, #38644)
• Composer and transcript rendering now handle CRLF pastes, wrapped whitespace, and long URLs correctly. (#37709, #38380, #38704)

New Features

• Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
• Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
• Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373)
• Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
• Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)
• Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)

Bug Fixes

• Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)
• Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)
• Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (#35960, #35962, #37166)
• Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (#35655, #35851, #37129)

Bug Fixes

• Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.146.0…rust-v0.146.1

• #37057 [0.146] Backport safer cyber-model auto-review defaults @anp-oai

New Features

• Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011)
• Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979)
• Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251)
• Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098)
• Enable standalone web search for compatible custom model providers. (#34846)
• Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198)

Bug Fixes

• Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239)
• Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151)
• Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664)

New Features

• Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386)
• Expanded /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444)
• Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695)
• Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385)
• Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383)
• Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346)

Bug Fixes

• Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211)
• Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359)

Bug Fixes

• Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.5…rust-v0.144.6

• #33972 Backport refreshed bundled model metadata to 0.144 @sayan-oai
• #34009 Narrow 0.144 hotfix to GPT-5.6 prompts and context @sayan-oai

Bug Fixes

• Improved dangerous-command detection, including more forced rm forms, and provides clearer rejection reasons when commands are denied. (#33455)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.4…rust-v0.144.5

• #33455 [release/0.144] fix(core) expand is_dangerous_command @dylan-hurd-oai

Chores

• No user-facing changes in this patch release.

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.3…rust-v0.144.4

Chores

• Published a version-only release with no merged pull request changes since rust-v0.144.2.

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.2…rust-v0.144.3

Bug Fixes

• Restored the previous Guardian auto-review policy, request format, and tool behavior after rolling back a prompting regression. (#32672)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.1…rust-v0.144.2

• #32672 [release/0.144] Revert “Update auto review prompting” @dylan-hurd-oai

Bug Fixes

• Fixed standalone installs failing when GitHub returns compact or reordered release metadata. (#31913)
• Ensured macOS package installs expose the code-mode host alongside the codex executable. (#31913)
• Kept code mode working when the companion host binary is unavailable by falling back to the embedded runtime. (#31913)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.144.0…rust-v0.144.1

• #31913 [0.144] Backport installer and code-mode reliability fixes @bolinfest

New Features

• Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488)
• Added a writes app-approval mode that allows declared read-only actions while prompting for writes. (#30482)
• MCP tools can now request authentication interactively without an experimental opt-in. (#28772)
• App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274)
• Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503)
• Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621)

Bug Fixes

• Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319)
• Fixed Code Mode crashes in Intel macOS release binaries. (#30953)
• Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574)
• Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494)
• Long-running app sessions now refresh expired authentication for the hosted codex_apps connector. (#31486)
• Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622)

Documentation

New Features

• Remote plugins are now enabled by default, with richer catalog rows, npm marketplace sources, and visible remote/local versions. (#30297, #26705, #29375, #30981)
• Codex can route authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations. (#26708, #26709, #31335)
• Added codex remote-control pair for generating manual pairing codes from a running daemon. (#29913)
• Added Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models, with first-class support for max reasoning effort. (#30285, #30467)
• MCP tools now use tool search by default, and ChatGPT-hosted MCP servers can explicitly use session authentication. (#29486, #29733)
• App-server clients can inspect environments, list descendant threads, and fork history through a specific turn. (#30291, #29591, #30277)

Bug Fixes

• Fixed Windows ConPTY input handling for line endings and backspace, plus sandbox credential retry edge cases. (#29734, #29624, #29637)
• Fixed stale TUI safety prompts and cancelled reviews that could leave MCP startup appearing busy. (#30490, #31189)
• Improved recovery when exec servers are temporarily offline and prevented remote-control token refresh retry storms. (#30098, #30201)
• Preserved trailing realtime transcript text and terminal rollout events during shutdown. (#29918, #30144)
• Improved incremental WebSocket request success by ignoring response metadata during comparisons. (#30770)

Bug Fixes

• Prevented full Responses WebSocket request payloads from being written to trace logs. (#30771)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.142.4…rust-v0.142.5

• #30771 [codex] Backport websocket trace fix to release/0.142 @dylan-hurd-oai

Chores

• No user-facing changes were identified for this release.

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.142.3…rust-v0.142.4

Chores

• Maintenance-only patch release with no user-facing changes since 0.142.2.

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.142.2…rust-v0.142.3

New Features

• MCP tools now use tool search by default when supported, improving tool discovery while preserving compatibility with older models and providers. (#29486)
• macOS authentication clients can honor system proxy, PAC, and WPAD settings when respect_system_proxy is enabled. (#26709)
• Plugins can provide dedicated dark-mode logos through local manifests and remote catalogs. (#29488)
• Apps can display richer safety-buffering UI using server-provided visibility and faster-model metadata. (#29473)

Bug Fixes

• Remote plugin catalogs now return curated featured-plugin rankings. (#29485)
• Expired Amazon Bedrock credentials now produce actionable recovery guidance instead of a generic authorization error. (#28992)
• Remote stdio MCP servers now accept absolute working directories written in the remote platform’s path format. (#29493)
• Remote HTTP(S) image inputs now return clear model-visible validation errors; inline data URLs and local images remain supported. (#29417, #29419)
• PowerShell commands containing executable AST regions the safety classifier cannot inspect now require approval. (#24092)
• Code Mode now warns when the selected model lacks the required metadata. (#29490)

Chores

• Updated bundled OpenSSL and esbuild dependencies to patched releases. (#29487, #29489)
• Successful formatter runs are now quiet while failures still show diagnostics. (#29467)

Changelog

New Features

• Added opt-in Windows system proxy support for authentication, including PAC, WPAD, static proxies, and bypass rules. (#26708)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.142.0…rust-v0.142.1

• #26708 PAC 3 - Add Windows system proxy resolver @canvrno-oai

New Features

• /usage can now show and redeem earned usage-limit reset credits, with confirmation, retry, and refreshed availability states. (#28154, #28793)
• /plugins now organizes remote plugins into OpenAI Curated, Workspace, and Shared with me sections, while eligible turns can recommend and install relevant plugins. (#26703, #28399, #28400, #27704, #28403)
• Configurable rollout token budgets track usage across agent threads, provide remaining-budget reminders, and abort turns when exhausted. (#28746, #28494, #28707, #29423)
• App-server clients can configure multi-agent delegation as disabled, explicit-request-only, or proactive at the thread and turn level. (#28685, #28792, #29324)
• Added an indexed web-search mode that permits live searches while restricting direct page access to server-approved URLs. (#28489)
• Codex can now receive scheduled UTC time reminders and query the current time directly, including through client-provided app-server clocks. (#28822, #28824, #28835, #29011)

Bug Fixes

• Restored reliable Linux TUI rendering after suspending with Ctrl+Z and resuming with fg. (#28342)
• Exec-server processes and stdio MCP sessions now survive transient disconnects, including signed-URL refresh and retry-safe stdin writes. (#28512, #28374, #28546, #28895)

New Features

• Remote executors now use authenticated, end-to-end encrypted Noise relay channels. (#26242, #26245)
• Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries. (#27819, #27995, #28032, #28122, #28165, #28367)
• Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery also adds a created-by-me marketplace and auth-specific curated catalogs. (#27870, #27884, #27893, #28203, #28383)
• App-server clients can list immediate child threads, correlate external-agent imports with detailed results, and read or redeem rate-limit reset credits. (#26662, #28008, #28143)
• Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context. (#27917, #28405)
• TUI input prompts can auto-resolve after inactivity, with a countdown that pauses on interaction. (#28235)

Bug Fixes

• Hook trust bypass now persists through codex exec thread start and resume, while blocking PostToolUse hooks correctly reject code-mode tool calls. (#26434, #28365)
• Plugin capabilities now route consistently by authentication mode, deduplicate conflicting App/MCP declarations, and preserve remote marketplace ordering. (#27461, #27602, #27607, #27902, #27958, #28395)

New Features

• Added /usage views for daily, weekly, and cumulative account token activity. (#27925)
• /goal now preserves oversized text, large pasted blocks, and image attachments, including in remote app-server sessions. (#27508, #27509, #27510)
• Added permanent session deletion through codex delete, /delete, and app-server thread/delete, with confirmation safeguards and subagent cleanup. (#25018, #27476)
• Added /import for selectively importing setup, project configuration, and recent chats from Claude Code. (#27070, #27071, #27703)
• Typing @ now opens the unified mentions menu for files, plugins, and skills by default. (#27499)
• Added managed Amazon Bedrock API-key authentication and encrypted local storage for CLI and MCP OAuth credentials. (#27443, #27689, #27504, #27535, #27539, #27541)

Bug Fixes

• Corrupted SQLite state databases are now backed up and rebuilt automatically from rollout data, including malformed database-directory cases. (#26859, #27719)
• Prevented /review from crashing when Esc is pressed with queued guidance, while preserving that guidance when the review is canceled. (#22879)
• Improved MCP reliability by retrying transient startup failures, reporting unusable OAuth credentials as logged out, and preserving explicitly disabled servers. (#25147, #26713, #27414)
• Fixed remote plugin uninstall requests and correctly surfaced apps requiring authentication during installation. (#27085, #27223)

New Features

• Code mode can now call standalone web search directly, including from nested JavaScript tool calls, and receive plaintext search results. (#26719)
• Tool and connector input schemas now preserve oneOf and allOf, and large schemas keep more shallow structure when compacted, improving compatibility with richer MCP tools. (#24118, #27084)
• codex doctor now includes editor and pager environment details in the local report while redacting raw values in JSON output. (#27081)
• Plugin marketplace automation is more informative and responsive: codex plugin marketplace list --json now includes each marketplace source, and plugin lists can return from the cached remote catalog before refreshing in the background. (#27009, #26932)

Bug Fixes

• codex resume --last "..." and codex fork --last "..." now treat the trailing argument as the initial prompt instead of misreading it as a session ID. (#26818)
• MCP startup warnings from subagents now stay in the thread that owns them, avoiding duplicate parent-thread alerts and stuck startup spinners in the TUI. (#26639)
• Image edits now use the exact referenced image file paths instead of guessing from conversation history, so attached-image edits land on the intended input. (#26486)
• Bare URLs with ~ in the path are now linkified end to end in the TUI instead of being truncated before the tilde. (#27088)

New Features

• The /app command can now hand off the current CLI thread into Codex Desktop on macOS and native Windows, and Windows workspace launches can open directly into Desktop instead of stopping at a manual prompt. (#25638, #26500)
• Local image attachments and standalone image generations now expose their saved file paths to the model, which makes follow-up edits and file references more reliable. (#25944, #25947)
• Reasoning effort selection is more flexible: the TUI adds fallback shortcuts for terminals that miss Alt bindings, and model-defined effort levels now flow through in the order advertised by the model. (#25623, #26444, #26446)
• App-server integrations can now read account token usage, and Codex auth supports v2 personal access tokens in CLI and app-server flows. (#25344, #25731)
• Plugin automation got richer structured output: add/remove and marketplace commands support --json, plugin list JSON includes marketplace source, and plugin detail data now exposes default prompts, remote MCP servers, and unavailable app templates. (#26631, #26417, #25887, #26453, #26317)

Bug Fixes

• Goal workflows are more predictable: multiline paste in /goal edit no longer submits early, idle auto-turns stay out of Plan mode, and goals stop auto-continuing after terminal turn failures. (#26047, #26147, #26690)
• Forked threads now keep user-renamed titles instead of falling back to the original first-prompt name. (#26075)

New Features

• TUI controls now support F13-F24 keybindings, paste in searchable menus, and a compact reasoning-only status/title item (#25329, #25400, #25504).
• Enterprise/admin flows now show monthly credit limits and can apply cloud-managed config bundles, including EDU workspaces (#24812, #24617, #24619, #24620, #24622, #25963).
• Remote-control clients can start pairing and list or revoke controller grants through app-server v2 RPCs (#25675, #25785).
• Plugin workflows gained machine-readable codex plugin list --json output and cached remote catalog suggestions (#25330, #25457).
• Hosted web and image tools are available in more code-mode flows, with standalone web searches able to run in parallel (#25176, #25702, #25890, #25923).
• Multi-agent v2 keeps runtime choice with each thread and exposes cleaner follow-up and metadata defaults for spawned agents (#25266, #25636, #25720, #25721, #25722, #25841, #26114).

Bug Fixes

• Cancelling a submitted prompt before visible output now restores the draft, attachments, and collaboration mode for editing (#25316).
• Slash-command filtering and footer shortcut hints now reset or render according to the current UI state (#25492, #25625).
• Platform reliability improved for macOS app launches and Windows SQLite startup, thread resume, and sandbox setup refreshes (#25485, #25490, #25509, #25949).

New Features

• TUI markdown now keeps web links clickable with OSC 8 metadata, and cramped tables switch to readable key/value records without losing link targets. (#24472, #24636, #24825)
• Sessions can now be archived from the TUI with /archive or from the CLI with codex archive / codex unarchive; archived sessions are protected from resume/fork until restored. (#25027, #25021)
• App-server integrations can resume a thread with its initial turns page, see richer MCP server status, and launch stdio mode with codex app-server --stdio. (#23534, #24698, #24940)
• Remote execution setup now supports CODEX_API_KEY registration for approved OpenAI hosts, while remote-control websockets use short-lived server tokens instead of ChatGPT access tokens. (#24666, #24141)
• Windows admins get an alpha codex sandbox setup --elevated provisioning path, plus requirements support for allowed Windows sandbox implementations. (#24831, #23766)
• A feature-gated standalone image generation extension can run through the native Codex image artifact completion pipeline. (#24723, #24972)

Bug Fixes

• ChatGPT auth refreshes tokens before the five-minute expiry window and shows a relogin-required path for reused refresh tokens instead of collapsing into a generic cloud error. (#23546, #24830)

New Features

• codex doctor now reports richer environment, Git, terminal, app-server, and thread inventory diagnostics for support cases. (#24261, #24311, #24305)
• /status shows remote connection details and server version when the TUI is connected over a remote transport. (#24420)
• Vim mode gained text-object editing, improved word/line-end behavior, and a configurable interrupt-turn binding. (#24382, #24380, #24766)
• /permissions now understands named permission profiles and displays configured custom profiles. (#21559)
• Packaged Codex builds can discover and use the bundled patched zsh helper across supported macOS and Linux targets. (#23756, #24171)
• The Python SDK now exposes friendly Sandbox presets for thread and turn APIs. (#24772)
• install.sh/install.ps1 supports a non-interactive installation mode when CODEX_NON_INTERACTIVE=1 is set. (#21567)

Bug Fixes

• Markdown tables and multiline lists render more readably in the TUI, with better column sizing and app-style table formatting. (#24489, #24346, #24351)
• TUI output is more stable on macOS and Zellij, avoiding stderr/composer corruption and raw-output overlap. (#24459, #24479, #24593)
• Slash-command completion now preserves existing draft text for commands that accept inline arguments. (#23950)
• Older tmux/iTerm control-mode sessions no longer lose normal Ctrl-C handling from unsupported keyboard enhancement setup. (#24371)

New Features

• Added search across local conversation history, including case-insensitive content matches with result previews. (#23519, #23921)
• Made --profile the primary profile selector across CLI, TUI permissions, and sandbox flows, with legacy profile configs rejected through migration guidance. (#23708, #23883, #23890, #24051, #24055, #24059, #24067, #24110)
• Improved MCP setup with per-server environment targeting and OAuth options for streamable HTTP servers. (#23583, #24120)
• Made connector tool schemas more reliable by preserving local $ref/$defs structures and compacting oversized schemas before exposure. (#23357, #23904)
• Let read-only MCP tools run concurrently when they advertise readOnlyHint. (#23750)
• Added richer extension and hook context, including conversation history for extension tools and subagent identity in hook inputs. (#22882, #23963)

Bug Fixes

• Improved remote reliability by reconnecting stale exec-server websocket clients, retrying remote control immediately after auth recovery, and retrying remote compaction v2 streams. (#23867, #23775, #23951)
• Fixed Windows TUI rendering corruption by restoring virtual terminal mode before drawing. (#24082)
• Displayed workspace-specific usage-limit messages for credit and spend-cap failures. (#24114)
• Allowed plugin skills to reuse shared plugin-level icon assets. (#23776)
• Preserved active permission profile metadata when syncing auto-review runtime settings. (#23956)

New Features

• Goals are now enabled by default, backed by dedicated storage, and track progress across active turns. (#23300, #23685, #23696, #23732)
• codex remote-control now runs like a foreground command, waits for readiness, reports machine status, and keeps explicit daemon-style start/stop commands. (#22878)
• Permission profiles gained list APIs, inheritance, managed requirements.toml support, runtime refresh behavior, and stronger Windows sandbox integration. (#22928, #23412, #22270, #23433, #22931, #23715)
• Plugin discovery is easier to inspect, with marketplace-aware list output, installed versions, visible marketplace roots, and remote collection support. (#23372, #23584, #23727, #23730)
• Extensions can observe more lifecycle events, including subagent start/stop, tool execution, turn metadata, and async approval/turn processing. (#22782, #22873, #23309, #23688, #23690, #23692)

Bug Fixes

• Fixed TUI startup choosing the wrong working directory when reusing a local app-server socket. (#23538)
• Fixed plan-mode free-form answers so modified Enter keys, like Shift+Enter, no longer submit unexpectedly. (#23536)
• Removed stale background terminal poll events after a process exits. (#23231)
• Preserved raw code-mode exec output unless an explicit output token limit is requested. (#23564)
• Made AGENTS instruction loading more reliable, including local global reads and warnings for invalid UTF-8 instead of silent drops. (#23343, #23232)

New Features

• The Python SDK now supports first-class authentication, including API key login, ChatGPT browser and device-code flows, account inspection, and logout APIs. (#23093)
• Python turn APIs are easier to use for text-only workflows: you can pass a plain string as input, and handle-based runs now return a richer TurnResult with collected items, timing, and usage data. (#23151, #23162)
• codex exec resume now accepts --output-schema, so resumed automations can keep session context while still enforcing structured JSON output. (#23123)
• TUI startup is faster because terminal capability probes are now batched instead of waiting on several serial checks before the first interactive frame. (#23175)
• Remote executor registration can now use standard Codex auth instead of a separate registry credential flow. (#22769)
• App-server turns can preserve requested image fidelity, including original-resolution local images, across user inputs and image-producing tools. (#20693)

Bug Fixes

• Goal continuations now stop when they hit usage limits or a repeated blocker instead of looping and burning more tokens, and completion responses phrase usage more naturally. (#23094, #22907)
• The session picker is easier to trust: renamed threads now show name (thread-id) in resume hints, and pasted text works in the picker search box. (#23234, #23338)

New Features

• The TUI now offers richer session controls and display: data-driven service-tier commands, blended token usage, permissions/approval mode, effective workspace roots, and responsive Markdown tables. (#21745, #21906, #21991, #21669, #21677, #22052, #22612)
• @ mentions now search files, directories, plugins, and skills in one picker, backed by app-server plugin metadata. (#19068, #22375)
• Plugin workflows gained marketplace CLI commands, version-aware sharing, share checkout, clearer shared-workspace buckets, and default-enabled plugin hooks. (#21396, #22397, #22425, #22435, #22549)
• Remote workflows now support daemon-managed codex remote-control, runtime enable/disable APIs, status reads, and registry-backed/configured remote environments. (#20718, #22218, #22562, #22578, #22877, #20667, #21323)
• The Python SDK moved to openai-codex / openai_codex, with pinned runtime-generated types, concurrent turn routing, approval modes, and integration coverage. (#21778, #21891, #21893, #21896, #21905, #21910, #22014)
• Added codex doctor for support-ready diagnostics across runtime, auth, terminal, network, config, and local state. (#22336)

Bug Fixes

• Fixed several TUI interaction and rendering issues, including URL wrapping, light-mode selection contrast, Shift+Enter in tmux, /review MCP startup status, /side Esc handling, and network approval history text. (#21760, #21950, #21943, #21624, #22710, #22229)

New Features

• Plugin details now show bundled hooks, and plugin sharing exposes link metadata plus discoverability controls. (#21447, #21495, #21637)
• Added codex remote-control as a simpler entrypoint for starting a headless, remotely controllable app-server. (#21424)
• App-server clients can page large threads with unloaded, summary, or full turn item views. (#21566)
• Bedrock auth can now use AWS console-login credentials from aws login profiles. (#21623)
• view_image can resolve files through the selected environment for multi-environment sessions. (#21143)

Bug Fixes

• Live app-server threads now pick up config changes without requiring a restart. (#21187)
• Turn diffs stay accurate across apply-patch operations, including partial failures that still mutated files. (#21180, #21518)
• Thread summaries, renames, resume, and fork paths work better through ThreadStore, including threads without local rollout paths. (#21264, #21265, #21266)
• Remote compaction now emits response.processed for v2 streams and avoids sending service_tier on API-key compact requests. (#21642, #21676)
• Windows sandbox setup now grants sandbox users access to the desktop runtime binary cache. (#21564)
• Removed stale “research preview” wording from the codex exec startup banner. (#21683)

Documentation

New Features

• The TUI now supports modal Vim editing in the composer, including /vim, default-mode config, and Vim-specific keymap contexts. (#18595)
• TUI workflows are easier to resume and copy from with a redesigned resume/fork picker, raw scrollback mode, /ide context injection, and workspace-aware /diff. (#20065, #20819, #20294, #21001)
• The status line can show theme-aware colors plus optional PR and branch-change summaries, and /keymap debug helps inspect terminal key events. (#19631, #20892, #20794)
• Plugin management now supports workspace sharing, share access controls, source filtering, local share path tracking, marketplace removal/upgrades, remote bundle sync, and admin-disabled status handling. (#20278, #21124, #21419, #20560, #19843, #20478, #20268, #20298)
• Hooks can be browsed and toggled from /hooks, can run before/after compaction, and can add PreToolUse context; Codex Apps auth and eligible MCP elicitations now surface through TUI/Guardian flows. (#19882, #19905, #20692, #19193, #19431)
• Experimental goals are now discoverable, stay paused across resume unless the user opts back in, and show clearer validation and multi-day duration output. (#20083, #20790, #20746, #20558)

Bug Fixes

• /copy works better in tmux, Alt+Enter and modified Delete/Backspace keys behave correctly, and Windows typing/paste latency was reduced. (#20207, #20535, #21058, #18914)

New Features

• Added persisted /goal workflows with app-server APIs, model tools, runtime continuation, and TUI controls for create, pause, resume, and clear. (#18073, #18074, #18075, #18076, #18077, #20082)
• Added codex update, configurable TUI keymaps, plan-mode nudges, action-required terminal titles, and active-turn /statusline and /title edits. (#19933, #18593, #19901, #18372, #19917)
• Expanded permission profiles with built-in defaults, sandbox CLI profile selection, cwd controls, and active-profile metadata for clients. (#19900, #20117, #20118, #20095)
• Improved plugin workflows with marketplace installation, remote bundle caching, remote uninstall, plugin-bundled hooks, hook enablement state, and external-agent config import. (#18704, #19914, #19456, #19705, #19840, #19949)
• Added external agent session import, including background imports and imported-session title handling. (#19895, #20284, #20261)
• Made MultiAgentV2 configuration more explicit with thread caps, wait-time controls, root/subagent hints, and v2-specific depth handling. (#19360, #19792, #19805, #20052, #20180)

Bug Fixes

• Fixed several resume and interruption issues, including stale interrupt hangs, persisted provider restoration, large remote resume responses, and slow filtered resume lists. (#18392, #19287, #19920, #19591)

New Features

• App-server integrations now support Unix socket transport, pagination-friendly resume/fork, sticky environments, and remote thread config/store plumbing. (#18255, #18892, #18897, #18908, #19008, #19014)
• App-server plugin management can install remote plugins and upgrade configured marketplaces. (#18917, #19074)
• Permission profiles now round-trip across TUI sessions, user turns, MCP sandbox state, shell escalation, and app-server APIs. (#18284, #18285, #18286, #18287, #19231)
• Model providers now own model discovery, with AWS/Bedrock account state exposed to app clients. (#18950, #19048)
• codex exec --json now reports reasoning-token usage for programmatic consumers. (#19308)
• Rollout tracing now records tool, code-mode, session, and multi-agent relationships, with a debug reducer command for inspection. (#18878, #18879, #18880)

Bug Fixes

• Interrupting /review and exiting the TUI no longer leaves the interface wedged on delegate startup or unsubscribe. (#18921)
• Exec-server no longer drops buffered output after process exit and now waits correctly for stream closure. (#18946, #19130)
• App-server now respects explicitly untrusted project config instead of auto-persisting trust. (#18626)
• WebSocket app-server clients are less likely to disconnect during bursts of turn and tool-output notifications. (#19246)

New Features

• The TUI now has quick reasoning controls: Alt+, lowers reasoning, Alt+. raises it, and accepted model upgrades now reset reasoning to the new model’s default instead of carrying over stale settings. (#18866, #19085)
• App-server sessions can now manage multiple environments and choose an environment and working directory per turn, which makes multi-workspace and remote setups easier to target precisely. (#18401, #18416)
• Added first-class Amazon Bedrock support for OpenAI-compatible providers, including AWS SigV4 signing and AWS credential-based auth. (#17820)
• Remote plugin marketplaces can now be listed and read directly, with more reliable detail lookups and larger result pages. (#18452, #19079)
• Hooks are now stable, can be configured inline in config.toml and managed requirements.toml, and can observe MCP tools as well as apply_patch and long-running Bash sessions. (#18893, #18385, #18391, #18888, #19012)
• Eligible ChatGPT plans now default to the Fast service tier unless you explicitly opt out. (#19053)

Bug Fixes

• Preserved Cloudflare cookies across approved ChatGPT hosts, reducing auth breakage in HTTP-backed ChatGPT flows. (#17783)
• Fixed remote app-server reliability issues so websocket events keep draining under load and shutdown no longer fails when the remote worker exits during cleanup. (#18932, #18936)

New Features

• Added a built-in amazon-bedrock model provider with configurable AWS profile support (#18744).
• Added /mcp verbose for full MCP server diagnostics, resources, and resource templates while keeping plain /mcp fast (#18610).
• Made plugin MCP loading accept both mcpServers and top-level server maps in .mcp.json (#18780).
• Improved realtime handoffs so background agents receive transcript deltas and can explicitly stay silent when appropriate (#18597, #18761, #18635).
• Added host-specific remote_sandbox_config requirements for remote environments (#18763).
• Refreshed bundled model metadata, including the current gpt-5.4 default (#18586, #18388, #18719).

Bug Fixes

• Fixed /copy after rollback so it copies the latest visible assistant response, not a pre-rollback response (#18739).
• Queued normal follow-up text submitted while a manual shell command is running, preventing stuck Working states (#18820).
• Fixed Unicode/dead-key input in VS Code WSL terminals by disabling the enhanced keyboard mode there (#18741).
• Prevented stale proxy environment variables from being restored from shell snapshots (#17271).
• Made codex exec inherit root-level shared flags such as sandbox and model options (#18630).
• Removed leaked review prompts from TUI transcripts (#18659).

Documentation

• Added and tightened the Code Review skill instructions used by Codex-driven reviews (#18746, #18818).