0.144.0 — Codex Cli - Product release notes & changelog tool

New Features

Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488)
Added a writes app-approval mode that allows declared read-only actions while prompting for writes. (#30482)
MCP tools can now request authentication interactively without an experimental opt-in. (#28772)
App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274)
Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503)
Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621)

Bug Fixes

Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319)
Fixed Code Mode crashes in Intel macOS release binaries. (#30953)
Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574)
Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494)
Long-running app sessions now refresh expired authentication for the hosted codex_apps connector. (#31486)
Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622)

Documentation

Device-code login warnings now explain how to recognize and stop phishing attempts. (#31648)

Chores

Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#31348)
Made the /review branch picker faster and more reliable in large repositories. (#31464)
Improved automatic review behavior with clearer instructions and a focused tool set. (#31480)
Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#31636)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.143.0…rust-v0.144.0

#30292 Serialize shared MCP OAuth credential stores @stevenlee-oai
#30488 [codex-cli] Show reset details in redemption picker @jayp-oai
#31297 feat(core): emit canonical command execution items @owenlin0
#31298 feat(core): emit canonical dynamic tool call items @owenlin0
#31369 test(skills): cover plugin namespace loading @anp-oai
#30953 fix(release): add missing Intel V8 signing entitlement @malsamiri-oai
#31355 refactor: make ExternalAuth return CodexAuth @lt-oai
#31352 ci: increase Windows Bazel local test jobs @anp-oai
#30482 [codex-rs] Add writes app approval mode @zamoshchin-openai
#31439 Handle bio policy errors in Codex @fc-oai
#31319 [codex] add connector runtime latency metrics @mzeng-openai
#31312 Use model catalog approval messages @dylan-hurd-oai
#31422 test: generalize exec-server fixture @anp-oai
#28772 [codex] Enable auth elicitation by default @mzeng-openai
#28745 [login] support hosted success redirects @rafael-jac
#31316 chore: extract remote compaction request attempts @celia-oai
#31299 feat(core): emit canonical sub-agent activity items @owenlin0
#31285 [1/5] [codex] sync managed-layer bundle schema @hefuc-oai
#31300 feat(core): emit canonical collab tool call items @owenlin0
#31301 feat(core): emit canonical collab wait items @owenlin0
#30319 fix: retry rejected previous-model compaction with selected model @celia-oai
#30879 Handle mixed-case URLs in Windows command safety @charliemarsh-oai
#31191 Handle completion separators and popup dismissal @charliemarsh-oai
#31425 test: add TestAppServer builder @anp-oai
#31342 http-client: expose WebSocket proxy prerequisites @bolinfest
#31348 perf(skills): resolve plugin namespaces per root @anp-oai
#31289 Use canonical indexed web access field @winston-openai
#31464 Speed up review branch picker via for-each-ref @charliemarsh-oai
#31332 ci: parameterize Cargo target paths @anp-oai
#31421 refactor: unify external auth resolution @pakrym-oai
#31451 test: migrate TestAppServer callers to builder @anp-oai
#31274 [codex] Add externally provided Codex auth @lt-oai
#31501 trace hook command execution @wiltzius-openai
#31356 ci: run V8 source builds on Windows 2025 @anp-oai
#31283 core: support extension-owned turn items @owenlin0
#31570 fs: support pruning hidden directories during walks @jif-oai
#31465 Align empty branch list message with search @charliemarsh-oai
#31586 Stabilize encrypted MAv2 spawn request test @jif-oai
#31585 Stabilize remote compaction parity against dynamic skill catalogs @jif-oai
#31518 Log plugin install failure subtypes @charlesgong-openai
#31587 Stabilize shared rollout budget test @jif-oai
#31503 Detect Codex installs managed by pnpm @charliemarsh-oai
#31525 core: migrate standalone web search to extension-owned turn items @owenlin0
#31473 feat(core): emit canonical review mode items @owenlin0
#31452 test: remove TestAppServer constructors @anp-oai
#31612 Round MCP timeout durations in error messages @jif-oai
#31138 fix(windows-sandbox): allow deletion in writable roots @fcoury-oai
#31500 code-mode: move to hosted mode by default @cconger
#31494 tui: sanitize terminal controls in user messages @etraut-openai
#31524 chore(protocol): use UUIDv7 for generated item IDs @owenlin0
#31496 Fall back to HTTP when Apple Git is unavailable @fc-oai
#31578 Bound exec-server pending RPCs @jif-oai
#29875 [codex] Sanitize imported session fallback titles @stefanstokic-oai
#31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai
#31622 websocket-client: add proxy-aware connector @bolinfest
#31574 [codex] Grant Windows sandbox access to primary runtime @abhinav-oai
#31292 Reuse MCP tool snapshot within a sampling request @sayan-oai
#31630 feat(core): emit canonical hook prompt items @owenlin0
#31636 feat: change amazon Bedrock GPT-5.6 display names @celia-oai
#31629 core: stop emitting legacy command events directly @owenlin0
#31441 core: preserve Responses WebSockets with system proxy @bolinfest
#31357 ci: route build IO through Dev Drives @anp-oai
#31461 chore: remove inert cargo audit workflow @anp-oai
#31614 test: migrate app-server v2 starts to auto env @anp-oai
#31497 [codex] increase tool schema compaction threshold @fbauer33
#31650 code-mode: make all approvals trigger elicitation pause @cconger
#31648 Clarify device-code phishing warning @etraut-openai
#31663 test(app-server): use native rollout fixture paths @fcoury-oai
#31330 [codex-apps] Omit internal fields from file payloads @jacobzhou-oai
#31480 Update auto review prompting @olliem-oai
#21818 Update models.json @github-actions
#31427 test: add delayed exec-server transport @anp-oai
#30278 [codex] Preserve reviewer when resuming threads @viyatb-oai
#31675 Expand agent core ownership @pakrym-oai
#31486 [connectors] Refresh codex_apps /ps/mcp auth @stevenlee-oai
#31361 model-provider: route model discovery through HTTP client factory @bolinfest
#30188 feat(rollout): persist TurnItems for paginated thread rollouts @owenlin0
#31596 Use the image generation extension by default @won-openai
#31684 Update models.json @github-actions