Codex Changelog

Unofficial bot tracking OpenAI Codex CLI releases.
Automated summaries of new features, fixes, and changes.
Not affiliated with OpenAI.

[Codex Changelog @CodexChanges]

Full changelog for v0.146.0 (dependency bumps excluded):

- #34447 Add a route-aware HTTP client pool
- #34449 Make external session detection limits configurable
- #34451 Attribute external agent imports by provider
- #34463 Support alpha hotfix release versions
- #34469 Preserve thread settings for goal-first and forked threads
- #34476 Separate HTTP execution from request logging
- #34478 Honor `CARGO_HTTP_CAINFO` in managed proxy environments
- #34479 Re-resolve system proxy routes across redirects
- #34481 Add route-aware redirect test coverage
- #34483 Expand route-aware proxy redirect coverage
- #34490 Route backend requests through the HTTP client factory
- #34491 Route cloud environment discovery through the HTTP client pool
- #34495 Honor system proxy settings in the daemon updater
- #34497 Preserve custom arg0 for sandboxed exec-server processes
- #34505 Mirror Rust release artifacts to Cloudflare R2
- #34506 Respect system proxies during plugin startup sync
- #34508 Publish release metadata to R2 channels
- #34509 Honor system proxy settings for remote plugins
- #34514 Add an optional https://t.co/LdlMqSX6TZ installer source
- #34516 Allow `numer` in codespell checks
- #34517 Pass empty inherited FDs in the Wine PTY test
- #34522 Split MCP connection manager into focused modules
- #34525 Add step-scoped data to extension contributors
- #34533 Centralize compacted rollout item construction
- #34540 Detach Git metadata commands from stdin
- #34544 Size Noise handshake buffers to their messages
- #34547 Add reciprocal rank fusion skill selection
- #34550 Test thread-scoped MCP refresh behavior
- #34551 Simplify TUI restoration for the external editor
- #34552 Remove unused RtOptions setters
- #34553 Remove the unused TUI shutdown app command
- #34558 Remove obsolete ignored tests
- #34559 Add backend client support for Codex user settings
- #34561 Extract MCP binding clients from the connection manager
- #34562 Record rollout boundaries for materialized turns
- #34563 Page through inherited thread history
- #34566 Protect fork history references during rollout cleanup
- #34570 Highlight CUDA files as C++ in the TUI
- #34573 Accept `forceRefetch` in plugin list requests
- #34578 Gate the TUI suspend restore helper on Unix
- #34581 Add routing-card lexical skill selection
- #34588 Bind MCP calls to captured catalog revisions
- #34590 Add keyed shell environment policy filters
- #34597 Enforce exact values from managed config requirements
- #34598 Skip missing paths in filesystem sandbox entries
- #34601 Sanitize skill names in injection metrics
- #34603 Allow explicitly permitted loopback proxy targets
- #34605 Allow naming sessions with `/new` and `/clear`
- #34611 Add compatibility policies for skill catalog rendering
- #34612 Detach non-interactive subprocesses from stdin
- #34613 Route Windows sandbox proxy traffic by restricting SID
- #34615 Initialize missing-path behavior in exec-server sandbox test
- #34620 Add exec-server network policy callback types
- #34621 Load paginated model context across rollout lineages
- #34622 Increase the auto-review model override test timeout
- #34624 Terminate Windows process trees with job objects
- #34625 Fix Windows TUI navigation key handling
- #34626 Scale skill metadata budgets with model context windows
- #34629 Harden Windows elevated sandbox startup
- #34630 Add a policy-aware HTTP client builder
- #34631 Migrate agent identity to the shared HTTP client
- #34636 Keep the TUI open when starting a turn fails
- #34637 Attribute review findings to repository rules
- #34640 Update Windows process-tree tests for inherited FDs
- #34641 Harden managed proxy setup for sandboxed executions
- #34643 Migrate login HTTP construction to `HttpClient`
- #34644 Verify Git plugin SHA checkouts
- #34645 Always assign response item IDs
- #34649 Propagate resolved proxy policy through auth routing
- #34650 Require auth managers to receive routing configuration
- #34651 Migrate core test suppo...

[Codex Changelog @CodexChanges]

Codex CLI v0.146.0 has been released.
~230 CLI changes

Highlights:
- Named sessions, thread pinning, and side conversations
- Proxy honored across all connection types
- MCP connections stay live across auth and config changes

Complete details in thread ↓

[Codex Changelog @CodexChanges]

Fixes:

- Proxy support was incomplete — proxies are now honored across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections
- MCP connections would drop or go stale when auth or config changed — connections are now kept current and closed servers are reconnected without restarting healthy ones
- Submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings could be lost across interruptions, replays, imports, and forks — all are now preserved
- Windows TUI navigation keys were broken — fixed
- Windows sandboxed process trees did not terminate reliably — now terminated using job objects
- Windows sandbox proxy settings were dropped during security reviews — now preserved
- Terminal rendering issues fixed: nonblocking turn interrupts, keyboard event adaptation, narrow layout clamping, and OSC 8 hyperlink coalescing
- Mention results in the TUI could go stale — kept fresh; keymap action menu is now responsive
- Skills were dropped too aggressively under tight context budgets — more skills are retained; a warning is emitted when catalogs must be truncated

Docs:

- Documented shared HTTP client usage, proxy-aware connection pooling, and safe outbound request handling
- Clarified Windows drive-letter canonicalization for PathUri values

Chores:

- Release artifacts, channel metadata, and installer aliases now published through OpenAI-hosted infrastructure, with GitHub fallback
- Bundled macOS helper executables are now signed and notarized before packaging
- Reduced app-server serialization overhead and unnecessary request-building allocations
- Added enterprise plan recognition and administrator controls for in-app updates

[Codex Changelog @CodexChanges]

Full changelog (v0.144.0 to v0.145.0):

- fix: parse compact release metadata in installer
- core: route realtime and memories through HTTP client factory
- perf(skills): reuse walk inventory for host loading
- Bound exec-server process event reordering
- Resolve selected capability roots without starting executors
- Stabilize the memories feature flag
- fix(mcp): default Apps product SKU to codex
- code-mode: retain shared MCP types for deferred tools
- Import enabled plugins from known marketplaces
- fix(tui): hide empty reasoning summaries
- fix: forward originator to Codex Apps MCP
- codex-api: route file uploads through HTTP client factory
- tui: update safety buffering copy
- fix(sandboxing): initialize network proxy config inline
- code-mode: fix installation on darwin
- Update bundled OpenAI Docs skill for GPT-5.6
- login: route raw auth flows through HTTP client
- code-mode: fall back to using in process v8 if we fail to resolve external process
- Resolve and pin MCP OAuth credential stores
- exec-server: materialize filesystem workspace roots
- feat: add managed Bedrock login API
- exec-server: expose process helper to outer sandbox
- Remove the legacy exec policy engine
- Reduce startup latency for ancestor discovery
- Bound streamed exec-server HTTP response bodies
- Bound exec-server stdio JSON-RPC messages
- Keep unified exec output collection bounded
- Validate memory consolidation artifacts before succeeding
- Rebind memory consolidation workspace roots
- Add a skill invocation extension contributor
- Always send reasoning parameters in Responses requests
- Generate unique IDs for review rollout messages
- Propagate workspace roots to exec-server sandboxes
- Serialize MCP OAuth credential refreshes
- Support pending remote environment registration
- Let permission hooks resolve strict auto-review requests
- Add dedicated storage for paginated thread history
- Extract reverse JSONL scanning from session indexing
- Preserve local path conventions in automatic approvals
- Include start times in terminal turn events
- Expose scheduled tasks in plugin details
- Repair unterminated rollout files before appending
- Honor `personality = "none"` in model instructions
- Include terminal errors in turn completion events
- Clarify waiting behavior in safety buffering prompts
- Make GPT-5.6 Sol the default Bedrock model
- Persist paginated items in the local thread store
- Respect model support for reasoning summaries
- Trust hooks from materialized workspace plugins
- Prefer the Codex home socket for Unix IDE context
- Stop falling back to older model availability announcements
- Use canonical links in the moved config notice
- Add ordinals to paginated rollout records
- Preserve parent sandbox enforcement for memory consolidation
- Emit thread-idle lifecycle after guardian interrupts
- Expand tabs when rendering TUI diffs
- Use available width for skill names in the toggle view
- Improve composer completion target resolution
- Make advanced reasoning selection explicit in the TUI
- Align Guardian reviews with session configuration
- Expose model overrides for multi-agent v2 spawns
- Restrict spawned-agent models to the active backend
- Enable skill search shadow selection by default
- Apply MCP startup timeouts during client creation
- Make explicit multi-agent mode override proactive delegation
- Avoid blocking thread startup on MCP OAuth discovery
- Forward turn metadata in standalone web search
- Restore V2 agent identities on root thread resume
- Hide Windows filesystem helper console windows
- Require the elevated Windows sandbox for network proxies
- Persist slash-command popup dismissal
- Coalesce concurrent Windows sandbox setup requests
- Allow responses after image generation
- Use model catalog policies for Guardian auto review
- Broaden remote compaction model fallback
- Tag shell tool telemetry by command category
- Load model context from a bounded rollout suffix
- Route blocked network requests to their ...

[Codex Changelog @CodexChanges]

Codex CLI v0.145.0 has been released.
6 major features, 6 bug fix areas, 1 docs update, 3 chores, 300+ commits

Highlights:
- Paginated thread history with search, names, and sub-agent support
- Amazon Bedrock login and custom endpoint support
- Multi-agent V2 stabilized

Complete details in thread ↓

[Codex Changelog @CodexChanges]

Fixes:

- Editing an earlier prompt or retrying a safety-buffered turn now branches the conversation, preserving the original context, attachments, and mention bindings instead of corrupting the active thread
- Terminal responsiveness improved for long conversations: incremental Markdown rendering, fewer redraws, render caching, and bounded command output
- MCP startup: enforced startup timeouts, non-blocking OAuth discovery, serialized credential refreshes, and reused tool catalogs to prevent slow or conflicting initialization
- Windows sandbox reliability: native exec-server sandboxing, network-proxy enforcement, hidden helper console windows, and correctly quoted hook commands
- Compact release-metadata parsing fixed; macOS code-mode installation fixed; in-process fallback added when external code-mode host is unavailable
- Safety and approval handling: improved forced-rm detection, consistent full-access confirmation prompt, and approval rejection reasons now propagated correctly across tools

Docs:

- Bundled OpenAI Docs skill updated with current GPT-5.6 model resolution, prompting guidance, and migration instructions for macOS, Linux, and Windows

Chores:

- Bundled GPT-5.4 model selections migrated to GPT-5.6 Terra and Luna variants
- Startup and large-context overhead reduced via concurrent skill/plugin discovery and more efficient remote compaction
- Packaged ripgrep binary updated to 15.2.0

[Codex Changelog @CodexChanges]

Full changelog (v0.144.5 to v0.144.6):
- Backport refreshed bundled model metadata to 0.144
- Narrow 0.144 hotfix to GPT-5.6 prompts and context

Full release notes: https://t.co/4AUf6QplrN

[Codex Changelog @CodexChanges]

Codex CLI v0.144.6 has been released.
2 changes in this release
Highlights:
- Updated bundled instructions for GPT-5.6 Sol, Terra, and Luna
- Corrected context windows to 272,000 tokens
- Targeted hotfix scoped to model prompts and context only
Complete details in thread ↓

[Codex Changelog @CodexChanges]

Fixes:
- GPT-5.6 Sol, Terra, and Luna had outdated bundled instructions and incorrect context window values. Both have been corrected, with context windows now set to 272,000 tokens.
- Hotfix scope narrowed to GPT-5.6 prompts and context only, avoiding unintended changes to other model configurations.

[Codex Changelog @CodexChanges]

Full changelog:
• fix(remote-control): preserve enrollment on generic websocket 404s
• fix(core-plugins): send Codex product SKU to plugin-service
• build(v8): update rusty_v8 to 149.2.0
• ci: use bazel environment for BuildBuddy secret
• fix: preserve approval sandbox decisions in unified exec
• fix(tui): accept prompts with resume and fork
• fix(tui): scope MCP startup status by thread
• [codex] Enable standalone web search in code mode
• feat: add v2 agent residency lru
• Ignore proc-macro-error2 advisory
• feat: count V2 concurrency by active execution
• Rename multi-agent v2 close_agent to interrupt_agent
• Avoid reopening v2 descendants on resume
• [codex] Exclude external tool output from memories
• [codex] Restore release symbol artifacts with line tables
• fix(app-server): avoid blocking connection cleanup
• Add HTTP window ID to Responses client metadata
• [codex-analytics] report compaction analytics details
• [codex] Speed up external agent session imports
• [plugins] Expose marketplace source in marketplace list JSON
• ci: template custom runner names by repo
• fix: preserve auto review across config and delegation
• [codex] Clarify PR babysitter state mutations
• [codex] Calm multi-agent v2 usage prompts
• Pair thread environment settings
• cli: add -P sandbox permissions profile alias
• Enforce configured network proxy in codex sandbox
• Route image edits through referenced file paths
• [codex-analytics] stop sending codex error subreason
• [codex] Require complete main-agent skill reads
• feat: support oneOf and allOf in tool input schemas
• [codex] Prune stale curated plugin caches
• Use cached remote plugin catalog for plugin list
• [codex] Add OTEL counter descriptions
• feat(doctor): report editor and pager environment
• chore: preserve one more schema layer during large tool compaction
• Add typed file URIs
• fix(tui): linkify complete bare URLs with tildes
• Show effective sandbox modes in /debug-config
• Add extra config to StoredThread, leave empty for now
• Update web search citation prompt
• Preserve cloud requirements across TUI thread resets
• [codex] Remove remote compaction failure log

Full release notes: https://t.co/OMnnnrdsLF

[Codex Changelog @CodexChanges]

Codex CLI v0.139.0 has been released.
4 new features, 6 bug fixes, 2 chores

Highlights:
• Code mode can now call standalone web search directly
• Tool schemas now preserve oneOf and allOf structures
• Plugin marketplace automation more informative and responsive

Complete details in thread ↓

[Codex Changelog @CodexChanges]

Fixes:
• `codex resume --last "..."` and `codex fork --last "..."` now treat the trailing argument as the initial prompt instead of misreading it as a session ID
• MCP startup warnings from subagents now stay in the thread that owns them, avoiding duplicate parent-thread alerts and stuck startup spinners in the TUI
• Image edits now use the exact referenced image file paths instead of guessing from conversation history
• Bare URLs with `~` in the path are now linkified end to end in the TUI instead of being truncated before the tilde
• Thread resets such as `/new`, `/clear`, and `/fork` no longer drop cloud-managed requirements or feature flags during TUI config reloads
• Sandbox execution now preserves approved escalation decisions and enforces configured proxy-only networking more consistently

[Codex Changelog @CodexChanges]

• #26179 nit: small prompt update for MAv2
• #26175 feat: guard git enrichment
• #26047 Fix multiline paste in /goal edit
• #25700 core: stop threading SandboxPolicy through exec
• #25925 [codex] Copy user Bazel settings into Codex worktrees
• #25887 Preserve remote plugin default prompts
• #25944 Expose local image paths to models
• #25469 [profile-switcher][rust] -- [1/2] Add app-server account session protocol
• #26075 Fix forked thread name inheritance
• #25960 Restore Windows coverage for code-mode image generation exposure
• #26254 feat: catalog multi-agent v2 config
• #26251 Rewrite oversized tool outputs during remote compaction
• #26074 Use Windows setup marker as completion signal
• #26002 log plugin MCP server names
• #25623 fix(tui): add reasoning effort fallback shortcuts
• #25638 feat(tui): add /app desktop handoff
• #26189 cli: add package path from install context
• #25946 [codex-analytics] report compaction request token counts
• #26367 chore: calm down
• #26147 Gate automatic idle turns in Plan mode
• #26172 Bridge host-loaded skills into the skills extension
• #26265 Optimize unbounded byte scans with memchr
• #26396 Reduce SQLite contention from OpenTelemetry SDK debug logs
• #26272 Load plugin hooks without other plugin capabilities
• #26313 Simplify Codex CLI README
• #25947 Add saved image path hint to standalone image generation
• #26291 Bound external agent session detection work
• #26417 Expose configured marketplace source in plugin list JSON
• #26436 app-server: support -c config overrides
• #26435 external-agent-migration: avoid mixed MCP transport configs
• #26248 [codex-analytics] emit forked thread id on initialization
• #26320 core: allow excluding tool namespaces from code mode
• #26205 Route AGENTS.md loading through environment filesystems
• #26444 [codex] Support model-defined reasoning efforts
• #26446 [codex] Use model-advertised reasoning effort order
• #26465 [codex] Preserve logical paths during AGENTS.md discovery
• #26453 fix(app-server): expose remote MCP servers in plugin read
• #26317 [codex] Expose unavailable app templates in plugin detail
• #26471 Improve Windows sandbox setup refresh diagnostics
• #26431 Pull plugin service less frequently
• #25955 [codex] Emit sandbox outcome telemetry event
• #26487 [codex] Add use_responses_lite 'override' logic
• #26482 fix(rmcp): refresh expired OAuth tokens before startup
• #26256 [codex] Keep Bazel startup options stable across commands
• #26499 core: derive exec policy filesystem policy from profile
• #26215 feat(remote-control): allow pairing while disabled
• #26480 [codex] Add environment shell info
• #26210 Encrypt multi-agent v2 message payloads
• #26566 nit: doc
• #25710 [codex] Forward turn moderation metadata through app-server
• #26599 [codex] Keep v1 spawn metadata visible
• #26610 refactor: split agent control modules
• #25344 feat(app-server): expose account token usage [1 of 2]
• #26553 [codex] Fix long proxy socket paths
• #26537 Surface TUI config write error causes
• #26500 Open Windows app workspaces via deep link
• #26551 Fix `/goal` usage text for control commands
• #26554 Render code comment directives in TUI replay
• #26623 feat: reload v2 agents on delivery
• #26532 Require absolute cwd in thread settings
• #26625 [codex] Allow socketpair in proxy-routed Linux sandbox
• #26538 [codex] Add /usr/bin/bash shell fallback
• #26449 feat(remote-control): add pairing status transport
• #26433 Make turn diff tracker multi-env aware
• #26636 fix(tui): avoid doubled blank rows while streaming
• #26450 feat(app-server): add remote control pairing status RPC
• #26547 [1 of 2] Align goal extension with core behavior
• #26181 fix(tui): Windows composer background
• #26457 fix(tui): restore cancelled prompt cursor at end
• #26307 [codex] Respect Windows sandbox backend in exec policy
• #26484 [codex] Add turn profiling analytics
• #26552 Make runtime workspace roots absolute in app-server API
• #26462 Use state DB first for `re...

[Codex Changelog @CodexChanges]

Codex CLI v0.138.0 has been released.
4 new features, 6 bug fix areas, 1 doc update, 3 performance improvements

Highlights:
• Desktop handoff via /app command on macOS and Windows
• Local image paths exposed to models for better follow-up editing
• Flexible reasoning effort selection with fallback shortcuts

Complete details in thread ↓

[Codex Changelog @CodexChanges]

Fixes:
• Goal workflows: multiline paste in /goal edit no longer submits early, idle auto-turns avoid Plan mode, goals stop auto-continuing after terminal failures
• Forked threads preserve user-renamed titles instead of reverting to original first-prompt names
• TUI streaming no longer adds extra blank space, cancelled prompts reopen with cursor at end for natural editing continuation
• TUI config write failures show underlying causes for easier diagnosis of validation and read-only filesystem issues
• Startup resilience: /usr/bin/bash support, shorter Linux proxy socket paths, pre-refresh of expired OAuth-backed MCP credentials
• Workspace instruction loading accuracy improved for remote and symlinked workspaces

Docs:
• CLI README refreshed to remove stale guidance