Codex CLI changelog

New Features

• Open /config to search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429)
• Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)
• Configure a leader key in /keymap. The default is Ctrl+X, shortcut hints stay open until you choose or cancel, and voice mute moves to F9. (#52273)
• Restart a managed background server from /daemon. Codex warns about work the restart could interrupt, then reconnects automatically. (#53173)
• Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups. (#52245)
• Daybreak is enabled by default for eligible accounts. codex exec can also select it with an OpenAI API key when the server offers access. (#53701, #53717)

Bug Fixes

• Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)
• The network proxy now checks permission before a DNS lookup, rejects duplicate Host headers, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506)
• Return to an existing side conversation with /side after switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436)
• On Windows, Ctrl+V and Shift+Insert paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453)
• Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)
• codex exec no longer prints the same file diff again after an unrelated command. (#53444)

Documentation

• Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations. (#51768)
• Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering. (#52610)

Chores

• Codex now uses its standard shell executor and no longer bundles a patched zsh. Configurations using the retired shell flags receive a migration notice. (#52160, #52213)
• Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs. (#52178)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.162.0...rust-v0.163.0

• #51539 Add completion-aware realtime attachment and session-scoped detach @zahan-oai
• #51547 Add a Windows MXC sandbox opt-out @iceweasel-oai
• #51556 Complete dynamic tool lifecycles on cancellation @mikelam-oai
• #51575 Expose package assembly helpers and support gzip DotSlash artifacts @bolinfest
• #51595 Add thread ID exclusions to thread/list @btraut-openai
• #51602 Distinguish thread listing failures from exhausted history @btraut-openai
• #51611 Signal abandonment of unanswered MCP elicitations @nicksteele-oai
• #51627 Stabilize Guardian snapshot prefixes by separating assistant context @jif-oai
• #51642 Fix retained context handling for typed section content @jif-oai
• #51650 Require hostname authorization before proxy DNS lookups @jif-oai
• #51651 Persist Guardian review failures for reports across restarts @jif-oai
• #51652 Record telemetry for AGENTS.md changes made by apply_patch @jif-oai
• #51678 Move Windows sandbox tests into a dedicated integration binary @jif-oai
• #51683 Roll back stale Guardian reviews before reusing reviewer history @olliem-oai
• #51689 Wait for helper completion in HTTP header cancellation tests @jif-oai
• #51690 Add a feature flag for Code Mode tool description ordering @swastik-oai
• #51704 Honor tool-description-first ordering in Code Mode @swastik-oai
• #51710 Fix a discovery race in the external auth refresh test @jgershen-oai
• #51734 Load persisted sender context for Guardian reviews @jif-oai
• #51755 Reuse MCP handler metadata for cache comparisons @owenlin0
• #51761 Reduce tool metadata cloning in the code-mode runtime @akira-oai
• #51768 Expand OpenAI Docs migration guidance to the GPT-6 model family @kkahadze-oai
• #51775 Prevent recursive Tokio tracing in telemetry and SQLite logs @zbarsky-openai
• #51786 Preserve sandbox overrides across execution requests @iceweasel-oai
• #51794 Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock @celia-oai
• #51800 Remove duplicate field initializers in extension registry tests @anp-oai
• #51808 Preserve diagnostic reasons for MCP user verification failures @berkdeniz-oai
• #51812 Enable instant interrupts by default @pakrym-oai
• #51819 Migrate the MXC sandbox to the 1.0.0 SDK @iceweasel-oai
• #51822 Avoid sharing violations when repairing Windows runtime ACLs @johnl-oai
• #51823 Share MCP binding tool metadata with prepared calls @owenlin0
• #51828 Add policy-based file contents integrity checks @iceweasel-oai
• #51831 Add MXC sandbox integrity dependency and policy preparation @iceweasel-oai
• #51835 Enable code mode interruption by default @won-openai
• #51840 Add a bubblewrap backend for sandbox integrity checks @iceweasel-oai
• #51841 Add a macOS Seatbelt backend for sandbox integrity @iceweasel-oai
• #51842 Add a sandbox integrity runner with outcome and timing metrics @iceweasel-oai
• #51843 Run sandbox integrity checks before commands and filesystem operations @iceweasel-oai
• #51847 Preserve Cargo package names in Bazel Rust builds @dkovalenko-oai
• #51848 Align Bazel release builds with Cargo and fix platform compatibility @dkovalenko-oai
• #51849 Fix package smoke tests for Cargo and Bazel debug symbols @dkovalenko-oai
• #51850 Add Bazel release staging archives @dkovalenko-oai
• #51855 Add Bazel support to the Codex package build action @dkovalenko-oai
• #51856 Build Bazel release artifacts alongside Cargo artifacts @dkovalenko-oai
• #51857 Add an app-server prompt prefix compatibility test @jif-oai
• #51865 Use readable plugin mentions without suppressing same-name skills @canvrno-oai
• #51866 Preserve line breaks and links in multiline async questions @pash-openai
• #51868 Record tool registration metrics for each sampling request @akira-oai
• #51872 Keep global app-server config independent of the launch directory @etraut-openai
• #51884 Add experimental prediction forks that inherit parent context @liame-oai
• #51890 Add the missing mxc-sdk UTF-8 resource patch for Bazel @iceweasel-oai
• #51892 Preserve tool call completeness when recorded arguments are truncated @ningyi-oai
• #51893 Record metrics for incremental tool updates @akira-oai
• #51895 Report specific reasons for WebSocket continuation failures @pakrym-oai
• #51896 Preserve native errors in Windows sandbox ACL diagnostics @alishobeiri-oai
• #51897 Use a dedicated matcher for network domain policies @rafael-oai
• #51908 Honor the user input setting for asynchronous questions @mandal-OAI
• #51930 Support model-specific function description prefixes @tz-openai
• #51963 Attribute compaction analytics to the correct voice session @reia-oai
• #51974 Log Windows sandbox availability and backend selection @iceweasel-oai
• #52034 Preserve agent state when unloading idle multi-agent v2 children @jif-oai
• #52040 Add regression coverage for cancelled agent reloads @jif-oai
• #52048 Cover instant interruption in steered-input persistence tests @jif-oai
• #52061 Run Guardian conversation classifiers concurrently and preserve action order @felixxia-oai
• #52062 Add scenario coverage for worker context across idle eviction @jif-oai
• #52065 Require assessment text in the Guardian parser @ioanbudea-OAI
• #52081 Fix idle cleanup for disconnected multi-agent v2 children @jif-oai
• #52119 Expose originating tool call metadata in command environments @leo-oai
• #52160 Remove the patched zsh shell execution backend @jif-oai

…

Bug Fixes

• Fixed a TUI crash when asynchronous questions contain multiple lines, preserving line breaks and complete hyperlink destinations. (#51866)
• Fixed startup failures caused by differences between a running background server's feature settings and CLI defaults. Compatibility checks now apply only to explicit command-line feature overrides. (#52648)

Full Changelog: https://github.com/openai/codex/compare/rust-v0.162.0...rust-v0.162.1

New Features

• Add tools for creating and listing managed Git worktrees from trusted local projects when the worktrees feature is enabled. (#50148)
• Pin tasks in the agent Command Center with p and keep them in a shared Pinned group when supported by the server. (#51500)
• Navigate and copy transcript blocks with /copy, use Ctrl+Insert to copy selections, and tune mouse-wheel scrolling with tui.mouse_scroll_speed. (#50434, #50215, #50209)
• Make URLs clickable in approval headers, questions, MCP prompts, warnings, banners, and verification prompts, including when links wrap across lines. (#51439, #51449, #51450, #51451, #51452, #51458)
• Configure live web access and remote compaction capabilities for custom Responses-compatible model providers. (#50459)
• Add JavaScript helpers for streaming promise results as they settle, plus opt-in ranked tool search in Code Mode. (#51126, #51209)

Bug Fixes

• Respect server model and reasoning-summary defaults for new TUI threads while retaining explicit launch overrides. (#50013, #50811, #50913)
• Preserve existing CRLF line endings in apply_patch updates without requiring an opt-in. (#51203)
• Fix Linux sandbox startup with multiple denied files, reject writable sandbox-construction executables, and keep ripgrep configuration from weakening deny-glob masks. (#50059, #51211, #51407, #51527)
• Restore ordinary drive-letter file access on Windows 10 and match Windows sandbox temp permissions to the child process environment. (#51511, #51512)
• Honor server Retry-After advice for retryable Responses and WebSocket failures. (#50418, #51440)
• Fix archive checksum verification when installing through Windows PowerShell with PowerShell 7 module paths present. (#51257)

Chores

• Publish a signed PowerShell installer with Windows releases. (#51158)
• Keep older stable releases and prereleases from replacing newer stable download targets or installer aliases. (#51186, #51425)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.161.0...rust-v0.162.0

• #50013 Honor server model defaults when starting fresh TUI threads @etraut-openai
• #50018 Use descriptor-safe helpers for executable test fixtures @jif-oai
• #50019 Protect the guardian decisions API key from environment forwarding @swastik-oai
• #50026 Preserve user restrictions in Guardian handoff context @jif-oai
• #50035 Follow MCP tool pagination in legacy protocol mode @jif-oai
• #50039 Keep transcript Find results readable after closing the query @fcoury-oai
• #50045 Keep transcript Find expansion scoped to the current match @fcoury-oai
• #50046 Stabilize Windows voice build cache keys across tool reinstalls @anp-oai
• #50050 Keep plugin and skill snapshots scoped to each step @sayan-oai
• #50052 Preserve question context in recovered TUI answer drafts @imac-oai
• #50054 Check token estimate filtering directly on the tracing subscriber @tamird
• #50058 Upgrade Windows bindings to windows-sys 0.61.2 @tamird
• #50059 Fix Linux sandbox startup with multiple denied files @yuzhu-oai
• #50066 Add a bounded Decisions transport for Guardian comparison classification @swastik-oai
• #50082 Enable dynamic tool inheritance for fresh V2 subagents @ke-oai
• #50083 Add paginated reverse lookup for thread attachments @joeytrasatti-openai
• #50087 Preserve queued agent mail across session eviction @jif-oai
• #50093 Prevent shared instruction providers from delegating to themselves @bryanashley
• #50094 Add attachment owner lookup to the app-server @joeytrasatti-openai
• #50099 Add opt-in Decisions comparison for Guardian V2 @swastik-oai
• #50105 Consolidate chat composer footer logic in footer_state @imac-oai
• #50109 Keep fullscreen prompts bounded and scrollable @imac-oai
• #50112 Centralize TUI loading glyphs and frame scheduling @imac-oai
• #50113 Add a native gRPC client for cloud thread resume and attach @bc-openai
• #50128 Expose the model selected for a running turn's next step @sayan-oai
• #50129 Preserve Windows environment variables for remote MCP servers @aidanv-oai
• #50131 Add opt-in JSON diagnostics for TCP tunnels @richardopenai
• #50140 Use the server permission catalog for TUI permission shortcuts @etraut-openai
• #50148 Add managed worktree tools to the TUI @bc-openai
• #50162 Bound in-flight file opens in exec-server @anp-oai
• #50166 Upgrade age to 0.12.1 and remove the obsolete advisory exception @michaelm-openai
• #50177 Enable writable file streaming in exec-server @anp-oai
• #50183 Add dots to issue labeler guidance @etraut-openai
• #50189 Replace the Figma OAuth exception with Mercado Pago @mzeng-openai
• #50199 Restore the account email in /status after account updates @etraut-openai
• #50200 Report the configured TUI mode in codex doctor @etraut-openai
• #50207 Release stable Markdown tables into scrollback during streaming @etraut-openai
• #50209 Make transcript mouse scroll speed configurable @etraut-openai
• #50215 Support Ctrl+Insert for copying TUI selections @etraut-openai
• #50216 Use the shared text editor for command-center task renaming @bc-openai
• #50219 Bound tmux option probes to one second @etraut-openai
• #50273 Record Guardian V2 Decisions agreement and latency metrics @swastik-oai
• #50339 Add end-to-end coverage for MCP sandbox state enforcement @bolinfest
• #50345 Keep the subagent picker consistent with thread archive state @etraut-openai
• #50348 Back off automatic remote control reconnects with jitter @cooper-oai
• #50354 Skip unrelated subtrees during config alias normalization @btraut-openai
• #50359 Render ANSI styles in TUI hook system messages @etraut-openai
• #50360 Remove initial messages from session configuration events @owenlin0
• #50375 Use printable ASCII terminal titles under GNU Screen @imac-oai
• #50380 Fix thread unloading after disconnect during MCP startup @yuzhu-oai
• #50384 Allow opting into 16 KiB ARM64 code pages for macOS signing @chess-oai
• #50389 Honor configured keybindings before transcript navigation @etraut-openai
• #50396 Honor pager bindings for transcript page keys @bc-openai
• #50402 Consolidate command execution output into aggregated_output @owenlin0
• #50416 Clarify Git worktree choices for new and forked conversations @bc-openai
• #50418 Honor Retry-After headers in failed Responses events @anp-oai
• #50427 Cap persisted command output in paginated history at 64 KiB @owenlin0
• #50431 Preserve terminal hyperlinks in agents overview previews @bc-openai
• #50433 Allow API-key accounts to use Daybreak in the TUI @etraut-openai
• #50434 Add keyboard copy selection to the owned transcript @bc-openai
• #50435 Persist additional tool definitions in rollout history @pakrym-oai
• #50437 Add a CLI command to uninstall the legacy Windows sandbox @chess-oai
• #50441 Support ordered response items in world-state context updates @pakrym-oai
• #50442 Preserve native USD amounts in thread usage responses @asohrabi-oai
• #50443 Stabilize paused-time code-mode service tests @seanh-oai
• #50445 Assert that only direct tool calls emit timing events @seanh-oai
• #50446 Bundle rollout attachments into a gzip tar archive @dkovalenko-oai
• #50447 Remove the provider capability gate for tool namespaces @pakrym-oai
• #50454 Measure rollout persistence size reductions @owenlin0
• #50458 Truncate oversized MCP results in paginated thread history @owenlin0
• #50459 Add capability overrides for custom model providers @celia-oai
• #50462 Populate thread previews from delegated task inputs @bc-openai
• #50464 Add the incremental_tools feature flag @pakrym-oai
• #50465 Retry registry authentication outages and jitter executor reconnects @apanasenko-oai
• #50467 Copy transcript selections as literal text while preserving rich HTML @fcoury-oai
• #50470 Account for JSON overhead when truncating MCP tool results @owenlin0
• #50472 Enable Ultrafast service tiers for Amazon Bedrock Astra models @celia-oai
• #50477 Use the app-server default output cap for TUI workspace commands @etraut-openai

…

New Features

• GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
• Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
• Sign in to MCP servers from an active terminal session with /mcp login <name>. (#49290)
• Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
• Daybreak is opt-in through --enable cli_daybreak or features.cli_daybreak=true; daybreak=true alone is insufficient. By default, controls and indicators are hidden, /daybreak is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)
• Select a Cyber access program per turn with codex exec --cyber-access-program or the TypeScript SDK’s cyberAccessProgram option. The explicit exec override remains available with cli_daybreak disabled and leaves the saved choice unchanged. (#49939, #51207)

Bug Fixes

• Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
• Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
• Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
• Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
• Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
• Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)

Documentation

• Authentication guidance now accounts for keyring storage instead of implying credentials always reside in auth.json. (#49361)

Chores

• Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.160.0...rust-v0.161.0

• #49246 Use executable fixture copying in the bundled bwrap test @felixxia-oai
• #49257 Allow Guardian cached approvals with incomplete root context @felixxia-oai
• #49260 Restrict enterprise MCP auth and fail closed on config refresh @nicksteele-oai
• #49261 Preserve Windows sandbox runner launch errors @zm-oai
• #49262 Trace turn phases and correlate accepted input with turns @jif-oai
• #49266 Remove the remote agent message board client README @jif-oai
• #49267 Support remote agent message boards in multi-agent sessions @jif-oai
• #49269 Preserve thread overrides and cloud policy validity during config reloads @nicksteele-oai
• #49275 Isolate realtime conversation tests from Responses prewarm connections @felixxia-oai
• #49276 Enable enterprise MCP sign-in and account-scoped grant cleanup @nicksteele-oai
• #49277 Avoid a turn teardown race in the Guardian agent message test @felixxia-oai
• #49280 Restrict capability roots to captured turn environments @miz-openai
• #49286 Model exec-server session attachment state as an enum @jif-oai
• #49290 Add /mcp login <name> to the TUI @nicksteele-oai
• #49294 Record Guardian context mode in review and classification telemetry @felixxia-oai
• #49295 Simplify configuration fingerprint canonicalization @jif-oai
• #49297 Scan the session index backwards for batch thread name lookups @jif-oai
• #49300 Compact the inline hidden tag buffer once per chunk @jif-oai
• #49305 Batch metadata reads when resolving thread names @jif-oai
• #49308 Run piped legacy Windows sandbox processes without a console @etraut-openai
• #49312 Notify parent agents when Guardian stops a subagent @jif-oai
• #49316 Bump taiki-e/install-action to v2.87.21 in CI setup @jgershen-oai
• #49318 Add GPT-6.1 Sol as the default catalog model @andrewgu-oai
• #49325 Retry Windows sandbox runner logon once on error 1056 @zm-oai
• #49330 Keep remote control reconnect backoff capped during sustained failures @yansenzhou-oai
• #49332 Clean up canceled exec-server RPC requests immediately @jif-oai
• #49339 Add GPT-6.1 Sol to Bedrock catalogs and make it the default @celia-oai
• #49345 Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock @celia-oai
• #49353 Allow approved filesystem escalation while preserving denied reads @viyatb-oai
• #49357 Continue Markdown blockquotes when pasting multiline text @bc-openai
• #49360 Carry shell invocation metadata and report executor PATH directories @anp-oai
• #49361 Clarify credential storage wording across authentication UI and docs @celia-oai
• #49369 Update Bedrock GPT-6 Sol catalog tests to expect multi-agent V2 @celia-oai
• #49379 Compile hook matchers during discovery @jif-oai
• #49384 Track credential storage outcomes and redact sensitive errors @celia-oai
• #49388 Fix Windows path inference for opaque URIs with slash prefixes @dkovalenko-oai
• #49389 Serialize tests that share Windows sandbox accounts @jgershen-oai
• #49392 Add attributed MCP OAuth credential storage telemetry @celia-oai
• #49395 Remove randomized greetings from TUI session headers @etraut-openai
• #49401 Preserve live tool-call metadata across request windows @ningyi-oai
• #49403 Add an experimental flag for bundled tools in login shells @anp-oai
• #49406 Support explicit cyber access programs with OpenAI API keys @julee-oai
• #49407 Recover exec-server sessions after environment info timeouts @vivi
• #49408 Compare tool call metadata in the recorder refresh test @euroelessar
• #49411 Bind the app-server time provider to a local variable @euroelessar
• #49414 Filter graceful shutdown guard and trigger traces from SQLite logs @dkovalenko-oai
• #49415 Truncate input text in protocol debug output @dkovalenko-oai
• #49416 Omit payloads from multiline ANSI warnings @dkovalenko-oai
• #49424 Infer Windows UNC paths with forward and mixed slashes @dkovalenko-oai
• #49425 Prune diagnostic logs periodically by age and database size @dkovalenko-oai
• #49426 Enable analytics by default for daemon-launched app servers @bc-openai
• #49432 Preserve bootstrap discovery across authentication changes @cooper-oai
• #49437 Add local audio device selection to TUI voice settings @bc-openai
• #49441 Honor server retry advice across Responses retries and fallback @anp-oai
• #49444 Use memrchr to find newlines in reverse JSONL scans @btraut-openai
• #49467 Restore executor tool paths after login shell startup @anp-oai
• #49472 Use server-authoritative permissions in the TUI @etraut-openai
• #49473 Use the rmcp SDK for enterprise-managed token exchanges @nicksteele-oai
• #49475 Complete turn abort callbacks before emitting terminal events @euroelessar
• #49478 Discover and validate MCP authorization servers before ID-JAG exchange @nicksteele-oai
• #49480 Add experimental thread prediction protocol types @keyz
• #49489 Add regression coverage for account switches between analytics batches @anp-oai
• #49517 Add a fork shortcut to the TUI command center @etraut-openai
• #49560 Add an opt-in model catalog to multi-agent context @jif-oai
• #49564 Copy selected file paths as plain text in the TUI @fcoury-oai
• #49584 Skip host skill discovery for Guardian reviews @jif-oai
• #49595 Make the strict network approval test independent of request order @jif-oai
• #49598 Persist explicit user goal edits in model history @felixxia-oai
• #49599 Return authoritative replay history when resuming a thread @felixxia-oai
• #49600 Reuse unchanged history snapshots when resuming threads @felixxia-oai

…

Bug Fixes

• Preserve SYSTEMROOT, TEMP, and TMP when launching remote stdio MCP servers with explicitly configured remote environment variables, allowing Unix hosts to retain the Windows executor's startup environment.

Changelog

• #51121: Backport Windows remote MCP environment preservation to 0.160.

New Features

• Browse older tasks in the agent command center with a keyboard-accessible “Show more” action. (#49106)
• Select transcript text and paste with middle-click in fullscreen mode on supported local Linux X11 terminals. (#49112)
• Start sessions outside a project with workspace defaults when policy permits, and restore saved permissions when resuming. (#49160)
• Added opt-in Guardian review capabilities to retrieve earlier user instructions and include context from agent handoffs. (#49036, #49057)

Bug Fixes

• Unsent queued messages now resume after reconnection once uncertain submissions are resolved, avoiding duplicate sends. (#49105)
• The terminal UI now preserves server provider, reasoning-summary, and verbosity settings and shows the correct sessions in resume and fork history. (#49144, #49161, #49171)
• Fixed Windows sandbox PowerShell fallbacks and long-path permission repairs, and suppressed unwanted console windows from background helpers. (#49019, #49058, #49098, #49164, #49386)
• Subagents now retain environments that are still starting and receive their configuration or preparation failure. (#49075)
• Prevented SQLite stalls during connection setup and logging, and surfaced initialization errors instead of masking them as timeouts. (#49032, #49102)
• Explicit provider model catalogs no longer include unsupported bundled models or reuse stale entries after refresh failures. (#49135)

Documentation

• Clarified how provider credentials use the configured storage backend and how env_key identifies the API-key environment variable. (#49118)

Chores

• Reduced repeated plugin-loading work by caching parsed manifests and reusing HTTP connections for remote plugin requests. (#49099, #49100)
• Added background reclamation of unused log database space to reduce disk usage. (#49069)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.0...rust-v0.160.0

• #48983 Avoid full metadata rewrites for thread timestamp updates @jif-oai
• #49000 Isolate the memory startup metadata test from Git enrichment @jif-oai
• #49019 Use a compatible PowerShell fallback for the Windows MXC sandbox @iceweasel-oai
• #49028 Use the numeric ioctl value in the macOS sandbox policy @aionescu-oai
• #49031 Clarify ChatGPT sign-in success copy @bc-openai
• #49032 Avoid SQLite stalls from connection setup and stderr span logging @jif-oai
• #49036 Add opt-in conversation history retrieval to Guardian reviews @felixxia-oai
• #49037 Show the Plan mode cycling hint in the fullscreen status line @fcoury-oai
• #49038 Preserve encrypted agent messages in Guardian reviews @felixxia-oai
• #49041 Copy selections within inline code as plain text @fcoury-oai
• #49043 Update Pro plan display names in the TUI @etraut-openai
• #49057 Add handoff-aware root context for Guardian reviews @jif-oai
• #49058 Fix Windows sandbox ACL repair for long runtime paths @darius-oai
• #49060 Update Guardian messaging snapshots for native agent messages @dkovalenko-oai
• #49065 Update Guardian handoff snapshot for separate agent messages @cassirer-openai
• #49067 Keep configuration values out of Windows sandbox policy events @zm-oai
• #49069 Reclaim unused SQLite log database pages in the background @dkovalenko-oai
• #49073 Surface realtime voice catalog failures in the TUI @etraut-openai
• #49074 Propagate Cargo package versions to Bazel Rust targets @tamird
• #49075 Preserve pending environments when spawning subagents @sayan-oai
• #49076 Avoid collecting unused Git metadata in skill analytics @tamird
• #49079 Update and centralize TUI subscription labels @etraut-openai
• #49082 Skip remote Git discovery for Guardian diff paths @jif-oai
• #49084 Track app-server running turns incrementally @tamird
• #49089 Render follow-up directive labels in the TUI and copied responses @etraut-openai
• #49093 Simplify startup promotions to platform-specific desktop app tips @etraut-openai
• #49096 Update h2 from 0.4.16 to 0.4.19 in Cargo and Bazel lockfiles @cassirer-openai
• #49097 Notify lifecycle extensions of compaction usage limits @xli-oai
• #49098 Resolve Windows sandbox PowerShell fallbacks on the exec server @zm-oai
• #49099 Cache parsed plugin manifests across plugin workflows @dkovalenko-oai
• #49100 Reuse the HTTP connection pool for remote plugin requests @dkovalenko-oai
• #49102 Preserve SQLite vacuum modes and surface pool initialization errors @bc-openai
• #49103 Balance Windows Bazel test shards using duration estimates @jgershen-oai
• #49105 Resume unsent TUI input after reconnecting @etraut-openai
• #49106 Add history pagination to the agent command center @bc-openai
• #49112 Add X11 primary selection and middle-click paste support @fcoury-oai
• #49114 Point remote compaction tests at the mock ChatGPT server @OLI-OAI
• #49117 Attribute analytics requests to each thread's product SKU @papayo-oai
• #49118 Correct provider authentication storage documentation @celia-oai
• #49119 Add recovery guidance to content-filter retries @won-openai
• #49127 Deduplicate cloud and executor skill listings before budgeting @TAFOYA-OAI
• #49130 Move content-filter guidance into the shared Responses retry handler @won-openai
• #49135 Treat explicit provider model catalogs as authoritative @andrewgu-oai
• #49136 Remove the plus separator after Option symbols in TUI key hints @bc-openai
• #49138 Expose original error details to turn lifecycle contributors @bryanashley
• #49144 Preserve server reasoning summary and verbosity settings in the TUI @etraut-openai
• #49145 Hide reasoning summary settings in /status for server connections @etraut-openai
• #49147 Simplify cloud task base URL normalization @akira-oai
• #49153 Omit blockquote markers when copying quoted selections in the TUI @bc-openai
• #49160 Support projectless TUI sessions with workspace defaults @etraut-openai
• #49161 Honor app-server provider defaults in the TUI @etraut-openai
• #49164 Suppress Windows console windows for background subprocesses @etraut-openai
• #49171 Fix model provider lookup for TUI history @etraut-openai
• #49386 [0.160] Backport remaining Windows console fix to frozen alpha.6 @andrewgu-oai
• #49763 [0.160] Backport maintenance-line catalog and security reminder updates @andrewgu-oai

New Features

• Eligible local sessions signed in with ChatGPT can now show optional reminders to complete account security setup. (#49744)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.2...rust-v0.159.3

• #49744 [0.159] Backport account security setup reminders for 0.159.3 @andrewgu-oai

Bug Fixes

• Suppressed console windows flashing on Windows when Codex launches background processes and sandboxed commands. (#49385)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.1...rust-v0.159.2

• #49385 [0.159] Backport Windows console suppression for 0.159.2 @andrewgu-oai

New Features

• Added GPT-6.1 Sol as the default model in the bundled catalog and Amazon Bedrock Mantle and Runtime catalogs. (#49323, #49342)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.159.0...rust-v0.159.1

• #49323 [0.159] Prepare 0.159.1 release backports @andrewgu-oai
• #49342 [0.159] Backport GPT-6.1 Sol Bedrock catalogs @celia-oai

New Features

• Opt-in instant_interrupt lets new input steer Codex during model responses or long-running code-mode calls. (#48135, #48141)
• New sessions get a compact welcome screen and consistent headers, with occasional tips during and after turns. (#48513, #48562, #48352)
• The warnings viewer dismisses reviewed warnings when closed; press k to keep one for later. (#48205, #48206)
• You can scroll the transcript while deciding whether to implement a plan. (#48805)
• Native Mermaid rendering supports more flowchart edges, labels, and node groups. (#48814, #48895)
• App-server clients can paginate thread history from a specific item. (#48151)

Bug Fixes

• Windows launches avoid stray console windows for MCP servers, code-mode hosts, and piped commands; restrictive launchers can fall back to embedded mode. (#48138, #48238, #48483, #48491)
• Copying transcript selections preserves Markdown tables, formatting, and significant whitespace. More terminals now copy automatically on selection. (#48548, #48549, #48469)
• Blank sessions retain drafts when switching tasks, and threads can be archived and listed before their first turn. (#48628, #48828, #48199)
• Local ChatGPT sign-in opens the browser reliably; onboarding also provides a shortcut to copy the login link. (#48502, #48544)
• Approved commands retain explicit filesystem denials, and .aws directories are protected by default under writable roots. (#48155, #48176)
• Fixed macOS TLS access in network-enabled sandboxes and remote environments that require proxy access. (#48565, #48198)

Chores

• Removed automatic follow-up prompt suggestions and the tui.prompt_suggestions setting. (#48621)
• Removed the bundled plugin-creator skill. (#48604)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.158.0...rust-v0.159.0

• #48135 Add opt-in code-mode yielding on new user input @pakrym-oai
• #48138 Suppress console windows when spawning the code-mode host on Windows @zm-oai
• #48141 Preempt model responses when new user input arrives @pakrym-oai
• #48143 Preserve executor MCP credential boundaries across reconnects @rreichel3-oai
• #48151 Add item anchors to thread/items/list pagination @btraut-openai
• #48155 Preserve filesystem denials when preparing approved commands @viyatb-oai
• #48157 Allow Windows daemon launches with residual job membership @etraut-openai
• #48158 Fix Guardian retained context spacing and empty assistant handling @olliem-oai
• #48168 Generate unique exec-server process IDs for every request @sdcoffey
• #48174 Preserve usage limit windows in turn and compaction analytics @rhan-oai
• #48176 Protect .aws directories under sandbox writable roots @jackz100
• #48187 Fix zsh alias quoting in sourced shell snapshots @jif-oai
• #48190 Bound agent message board SSE frames before parsing @jif-oai
• #48197 Optimize blake3 in Bazel fastbuilds @jif-oai
• #48198 Honor execution environment proxy requirements @seanh-oai
• #48199 Keep archived threads with empty previews visible in listings @acrognale-oai
• #48200 Extract Responses header conversion into a shared module @anp-oai
• #48205 Dismiss viewed TUI warnings when closing the viewer @fcoury-oai
• #48206 Add a keep-and-next action to the warnings viewer @fcoury-oai
• #48207 Preserve queued output for observers during code-mode termination @pakrym-oai
• #48211 Keep Codex visible during external editor handoff @etraut-openai
• #48213 Isolate executable fixture copies in CLI tests on Linux @jif-oai
• #48222 Preserve late result metadata for truncated code-mode calls @ningyi-oai
• #48224 Preserve model and access program pairs during compaction @jamy-OAI
• #48229 Extract Responses failure parsing into a dedicated module @anp-oai
• #48238 Suppress console windows for local Windows MCP servers @malsamiri-oai
• #48272 Prevent Windows daemon launches from retaining launcher stdio @zm-oai
• #48318 Keep TUI reconnect attempts running until the shared deadline @etraut-openai
• #48344 Preserve tool metadata for OpenAI provider endpoint overrides @peilin-openai
• #48350 Display reconnect commands on a separate line @etraut-openai
• #48352 Show turn tips while working and after completion in the TUI @fcoury-oai
• #48353 Stabilize skill catalogs across executor availability changes @vkg-oai
• #48469 Default to copying transcript selections in more terminals @fcoury-oai
• #48483 Prevent console windows for piped Windows child processes @fcoury-oai
• #48489 Fix Mermaid shape, relationship, and state description parsing @etraut-openai
• #48491 Fall back to embedded mode under restrictive Windows launchers @fcoury-oai
• #48502 Fix ChatGPT browser sign-in for local app servers @etraut-openai
• #48508 Preserve WebSocket continuations when steering a turn @pakrym-oai
• #48513 Refresh the TUI welcome screen for new sessions @fcoury-oai
• #48531 Add context to Windows sandbox runtime registration errors @zm-oai
• #48544 Make onboarding login links easier to copy @etraut-openai
• #48547 Fade blossom replays back to the idle state @fcoury-oai
• #48548 Preserve table cell source metadata through TUI rendering @fcoury-oai
• #48549 Preserve Markdown tables and whitespace when copying TUI responses @fcoury-oai
• #48551 Fix TUI math rendering for zero and big wedge expressions @etraut-openai
• #48560 Keep working tips stable during transcript interaction @fcoury-oai
• #48562 Use a consistent borderless session header in the TUI @fcoury-oai
• #48565 Allow macOS TLS trust evaluation in network-enabled Seatbelt profiles @winston-openai
• #48568 Allow exec-server to proxy permitted private IPs upstream @open-matt
• #48574 Preserve deferred tool namespace names before descriptions @adaley-openai
• #48575 Allow provisioned executors more time to come online @richardopenai
• #48604 Remove the bundled plugin-creator skill @martinauyeung-oai
• #48611 Centralize persistent mode enablement checks @alishobeiri-oai
• #48621 Remove follow-up prompt suggestions from the TUI @etraut-openai
• #48623 Preserve empty Markdown list markers in the TUI @etraut-openai
• #48626 Stop showing previous-session summaries when switching TUI sessions @etraut-openai
• #48628 Preserve blank TUI sessions when switching tasks @etraut-openai
• #48643 Set the provisioned macOS CLI bundle name to ChatGPT @riley-oai
• #48646 Fix the session-start helper call in the command center test @etraut-openai
• #48686 Remove WebSocket headers and tool payloads from info logs @chess-oai
• #48724 Prevent Linux ETXTBSY races in MCP stdio tests @jif-oai
• #48725 Retain confirmed Code Mode messages for Guardian reviews @ankushg
• #48727 Centralize executable fixture creation to avoid Linux ETXTBSY races @jif-oai
• #48754 Render /status without borders and wrap long values @fcoury-oai
• #48757 Match TUI status shimmer timing to desktop headers @fcoury-oai
• #48761 Show hidden output line counts in compact terminal activity @fcoury-oai
• #48764 Preserve MCP app resource URIs without defaulting display mode @victor-openai
• #48772 Fix Unix socket connections through long symlink paths @etraut-openai
• #48775 Match pinned transcript headers to the original prompt style @etraut-openai
• #48776 Remove the current badge from TUI task rows @etraut-openai
• #48779 Preserve independent Guardian history across parent compaction @felixxia-oai
• #48783 Add single-server MCP status discovery with thread connection reuse @victor-openai
• #48796 Add opt-in structured errors for Guardian circuit-breaker interruptions @won-openai
• #48799 Fix SGR mouse reporting for Windows terminal capture @etraut-openai
• #48800 Use the terminal palette for ordered Markdown list markers @etraut-openai
• #48805 Allow transcript wheel scrolling while a modal is open @fcoury-oai
• #48807 Show short turn durations in TUI completion footers @fcoury-oai
• #48812 Add history-aware prewarming for idle threads @vkg-oai
• #48814 Preserve punctuation and semicolons in Mermaid labels @etraut-openai
• #48819 Use explicit histogram buckets for tool and skill context metrics @mzeng-openai

…