Codex Updates & Release Notes

Codex Remote has reached general availability. Use Codex from the ChatGPT mobile app to start or continue work on a connected Mac or Windows host, review progress, and approve actions from your phone.

Remote Control now uses authenticated one-to-one QR pairing between each iOS or Android device and each host. Update the ChatGPT mobile app and Codex App to the latest versions before connecting. Connections used since June 8, 2026, remain paired; older inactive connections need to pair again.

The new DigitalOcean plugin lets Codex provision a DigitalOcean Droplet, configure SSH access, and connect it to the Codex App as a remote workspace.

See Remote connections for setup and troubleshooting.

New Features

• MCP tools now use tool search by default when supported, improving tool discovery while preserving compatibility with older models and providers. (#29486)
• macOS authentication clients can honor system proxy, PAC, and WPAD settings when respect_system_proxy is enabled. (#26709)
• Plugins can provide dedicated dark-mode logos through local manifests and remote catalogs. (#29488)
• Apps can display richer safety-buffering UI using server-provided visibility and faster-model metadata. (#29473)

Bug Fixes

• Remote plugin catalogs now return curated featured-plugin rankings. (#29485)
• Expired Amazon Bedrock credentials now produce actionable recovery guidance instead of a generic authorization error. (#28992)
• Remote stdio MCP servers now accept absolute working directories written in the remote platform’s path format. (#29493)
• Remote HTTP(S) image inputs now return clear model-visible validation errors; inline data URLs and local images remain supported. (#29417, #29419)
• PowerShell commands containing executable AST regions the safety classifier cannot inspect now require approval. (#24092)
• Code Mode now warns when the selected model lacks the required metadata. (#29490)

Chores

• Updated bundled OpenSSL and esbuild dependencies to patched releases. (#29487, #29489)
• Successful formatter runs are now quiet while failures still show diagnostics. (#29467)

Changelog

Full Changelog: rust-v0.142.1...rust-v0.142.2

• #28769 Register full CDP requirements feature by @syuan-oai
• #29485 [codex] fetch featured IDs for remote plugins by @ericning-o
• #29487 Upgrade bundled OpenSSL to 3.6.3 by @jif-oai
• #29489 [codex] Update esbuild to 0.28.1 by @pakrym-oai
• #29488 [plugins] Add dark-mode logo metadata by @drewschuster-openai
• #29249 [codex] migrate environment context to model world state by @pakrym-oai
• #29494 core: wrap token budget window context by @bolinfest
• #29417 [codex] replace remote images with model-visible error text by @rka-oai
• #28360 feat(core): store turn_id on ResponseItem metadata by @owenlin0
• #29486 [codex] Use tool search for MCP tools by default by @sayan-oai
• #29501 path-uri: clarify host-native path conversion by @anp-oai
• #29504 fix: world state response item test by @celia-oai
• #26704 TUI Plugin Sharing 4 - cover remote plugin catalog flows by @canvrno-oai
• #29419 [codex] reject remote images at app-server ingress by @rka-oai
• #28992 chore: improve expired Bedrock credential errors by @celia-oai
• #29467 Make formatter output quiet on success by @anp-oai
• #26709 PAC 4 - Add macOS system proxy resolver by @canvrno-oai
• #29490 chore: warn when Code Mode lacks model metadata by @celia-oai
• #29493 mcp: accept foreign absolute cwd for remote stdio by @anp-oai
• #29473 Propagate safety buffering treatment metadata by @fc-oai
• #24092 [codex] Reject unlowered PowerShell AST regions by @bookholt-oai

New Features

• /usage can now show and redeem earned usage-limit reset credits, with confirmation, retry, and refreshed availability states. (#28154, #28793)
• /plugins now organizes remote plugins into OpenAI Curated, Workspace, and Shared with me sections, while eligible turns can recommend and install relevant plugins. (#26703, #28399, #28400, #27704, #28403)
• Configurable rollout token budgets track usage across agent threads, provide remaining-budget reminders, and abort turns when exhausted. (#28746, #28494, #28707, #29423)
• App-server clients can configure multi-agent delegation as disabled, explicit-request-only, or proactive at the thread and turn level. (#28685, #28792, #29324)
• Added an indexed web-search mode that permits live searches while restricting direct page access to server-approved URLs. (#28489)
• Codex can now receive scheduled UTC time reminders and query the current time directly, including through client-provided app-server clocks. (#28822, #28824, #28835, #29011)

Bug Fixes

• Restored reliable Linux TUI rendering after suspending with Ctrl+Z and resuming with fg. (#28342)
• Exec-server processes and stdio MCP sessions now survive transient disconnects, including signed-URL refresh and retry-safe stdin writes. (#28512, #28374, #28546, #28895)
• Remote environments now preserve executor-native paths, shells, AGENTS.md discovery, and sandbox behavior across operating systems. (#28146, #28152, #28958, #28983, #29099, #29108, #29113, #29424)
• Plugin loading and installation now handle root marketplace layouts, manifest fallbacks, multiple skill paths, actionable download errors, and immediate tool refreshes. (#28771, #28789, #28790, #28863, #28951)
• Parent agents now receive terminal subagent errors instead of seeing failed work as an empty successful completion. (#28375)
• Goal-first threads are once again persisted and returned by thread/list and thread/search. (#28808)

Chores

• Reduced startup and session latency by deferring unnecessary DNS work, warming the model cache, reusing parsed plugin skills, parallelizing skill metadata reads, and skipping redundant catalog synchronization. (#28542, #28699, #28844, #29326, #29005)
• Reduced persistent-log churn by removing per-event WebSocket payload logging and filtering duplicated telemetry records. (#29432, #29457)

Changelog

Full Changelog: rust-v0.141.0...rust-v0.142.0

• #28396 [codex] Record external agent import results by @charlesgong-openai
• #27751 [codex] expose Bedrock credential source in account/read by @celia-oai
• #28338 [codex] Compress cold active rollouts by @jif-oai
• #28368 feat: render typed envelopes for multi-agent v2 messages by @jif-oai
• #28508 [tests] Keep Apps out of generic core test harness by @jif-oai
• #28472 [codex] Clarify plugin load and runtime capability stages by @xl-openai
• #28375 core: surface terminal subagent errors to parent agents by @jif-oai
• #28542 perf(config): defer remote sandbox hostname lookup by @fcoury-oai
• #28473 [codex] Repair invalid skill frontmatter scalars by @charlesgong-openai
• #28632 Tell codex to avoid changing rollout format. by @anp-oai
• #28738 Scope command approvals by execution environment by @jif-oai
• #19047 feat: add run task identity primitives by @adrian-openai
• #28671 [codex] Restore thread recency with compatible migration history by @nornagon-openai
• #28768 Extract TUI plugin catalog rendering by @canvrno-oai
• #28389 [codex] Use compact OpenAI docs search queries by @kkahadze-oai
• #28681 unified-exec: preserve PathUri through exec-server by @anp-oai
• #28731 [codex] Track plugin install and import telemetry failures by @charlesgong-openai
• #28651 exec-server: expose environment registry payloads by @viyatb-oai
• #28771 fix(plugins): support root local marketplace plugins by @caseychow-oai
• #28791 bazel: refresh expired macOS SDK pin by @anp-oai
• #28782 [codex] trace tools build latency by @owenlin0
• #28778 path-uri: decouple native path parsing by @anp-oai
• #28774 feat(exec-server): add Noise rendezvous environment by @apanasenko-oai
• #28812 [codex] Add optional IDs to response items by @pakrym-oai
• #28784 fix(install): support older awk checksum parsing by @fcoury-oai
• #28826 [codex] Use unique IDs for realtime-routed turns by @guinness-oai
• #27986 [codex] control automatic realtime handoff delivery by @jiayuhuang-openai
• #28836 [codex] Support assistant realtime append text by @guinness-oai
• #28374 Refresh signed exec-server URLs on reconnect by @apanasenko-oai
• #28825 Expose selecte namespaces as direct model tools by @won-openai
• #28790 [codex] Support plugin manifest path lists by @charlesgong-openai
• #28851 Record more path migration guidance for codex. by @anp-oai
• #28780 unified-exec: retain PathUri in command events by @anp-oai
• #28605 [codex] Split plugin and skill warmup tracing by @mzeng-openai
• #28608 [codex] Pass plugin namespace into skill loading by @mzeng-openai
• #28746 [codex] add rollout token budget configuration (1/N) by @rka-oai
• #28766 Add network environment ID plumbing by @jif-oai
• #28915 Avoid sandbox helper in apply_patch approval tests by @jif-oai
• #28813 Pause active goals before TUI interrupts by @etraut-openai
• #28895 Recover exec process stdin writes by @jif-oai
• #28940 Pin Windows argument lint to Windows 2022 by @rka-oai
• #28914 Scope MCP sandbox metadata to server environment by @jif-oai
• #28911 Add turn-scoped context contributions by @jif-oai
• #28808 Fix goal-first live threads missing from thread/list by @etraut-openai
• #25019 [codex] Initialize exec-server OpenTelemetry at startup by @starr-openai
• #28943 [codex] Fix Windows sandbox runtime ACL refresh by @iceweasel-oai
• #28946 Synchronize realtime notification test requests by @rka-oai
• #28822 Add Config for Time Reminders (1/n) by @rka-oai
• #28494 [codex] rollout budget implementation (2/N) by @rka-oai
• #27500 Support openai/form extended form elicitations by @gpeal
• #28949 [codex] Make thread store turn filter optional by @wiltzius-openai
• #28824 current time reminders impl for system clock (2/n) by @rka-oai
• #27812 [codex] Cache plugin metadata for tool suggestions by @mzeng-openai
• #28854 apply-patch: carry paths as PathUri by @anp-oai
• #28835 Add app-server current-time impl (3/n) by @rka-oai
• #26496 Make auto-review on-request prompt more proactive by @maja-openai
• #28947 [codex] Remove hardcoded app ID filters by @ericning-o
• #28959 TUI: improve unified mention selection visibility by @canvrno-oai
• #27132 Emit Trusted MCP App Identity on Tool-Call Items by @martinauyeung-oai
• #19049 feat: opt ChatGPT auth into agent identity by @adrian-openai
• #28770 [connectors] Ignore synthetic links for app accessibility by @adaley-openai
• #28863 [codex] Preserve remote plugin download status errors by @xl-openai
• #28958 core: load AGENTS.md from foreign environments by @anp-oai
• #28789 [codex] Support marketplace plugin manifest fallback by @charlesgong-openai
• #28993 [codex] Remove child AGENTS.md prompt experiment by @pakrym-oai
• #28989 core: log AGENTS.md paths as URIs by @anp-oai
• #2 ...

Read more

New features

• Added Record & Replay, a macOS feature that turns a demonstrated workflow into a reusable skill. Initial availability excludes the European Economic Area, the United Kingdom, and Switzerland. You or your administrator must also enable Computer Use.
• Added bulk actions to automation run history so you can mark every run as read or archive eligible runs.
• Added thread handoff between local and remote hosts, so you can move a thread to a matching project on a connected host and continue it there. Codex can also coordinate the handoff for you.

Performance improvements and bug fixes

• Added new deep links to manage SSH connections.
• Improved Browser Use so visible-tab routing and annotations persist when a draft browser session moves to the server.
• Additional performance improvements and bug fixes.

More Codex app capabilities are rolling out to users in the European Economic Area, the United Kingdom, and Switzerland:

• Computer Use is available on macOS and Windows in these regions, so Codex can operate desktop apps by seeing, clicking, and typing.
• The Codex Chrome extension is available for browser tasks that need signed-in Chrome context, working across tabs in the background without taking over your browser.
• Memories can remember useful preferences, recurring workflows, tech stacks, and repository conventions when enabled. Memories are off by default in the European Economic Area, the United Kingdom, and Switzerland.
• Chronicle is available as an opt-in research preview for ChatGPT Pro subscribers on macOS, helping Codex build memories from recent screen context.

New Features

• Remote executors now use authenticated, end-to-end encrypted Noise relay channels. (#26242, #26245)
• Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries. (#27819, #27995, #28032, #28122, #28165, #28367)
• Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery also adds a created-by-me marketplace and auth-specific curated catalogs. (#27870, #27884, #27893, #28203, #28383)
• App-server clients can list immediate child threads, correlate external-agent imports with detailed results, and read or redeem rate-limit reset credits. (#26662, #28008, #28143)
• Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context. (#27917, #28405)
• TUI input prompts can auto-resolve after inactivity, with a countdown that pauses on interaction. (#28235)

Bug Fixes

• Hook trust bypass now persists through codex exec thread start and resume, while blocking PostToolUse hooks correctly reject code-mode tool calls. (#26434, #28365)
• Plugin capabilities now route consistently by authentication mode, deduplicate conflicting App/MCP declarations, and preserve remote marketplace ordering. (#27461, #27602, #27607, #27902, #27958, #28395)
• Windows sandbox execution repairs stale credentials automatically and gives PowerShell commands more time before backgrounding. (#27086, #27944)
• Idle exec-server relays remain connected, and steered user input immediately interrupts wait_agent. (#28286, #28341)
• Bundled SQLite is pinned to a version containing the WAL-reset corruption fix. (#27992)
• TLS connections now support P-521 certificate signatures commonly used by enterprise proxies. (#27706)

Chores

• Reduced latency and memory use in large, tool-heavy sessions by caching tool search and eliminating repeated request and history copies. (#27258, #27813, #28306, #28309, #28313, #28323, #28327)
• Bounded prompt-image caching to 64 MiB and feedback uploads to eight related threads. (#28294, #28332)
• Terminal resize reflow is now always enabled, ignoring obsolete disabled settings. (#27794)

Changelog

Full Changelog: rust-v0.140.0...rust-v0.141.0

• #28001 [codex] package Windows ARM64 on x64 by @tamird
• #28032 [codex] Carry exec-server cwd as PathUri by @anp-oai
• #27607 [codex] Dedupe plugin MCPs by app declaration name by @felixxia-oai
• #27992 [codex] Pin bundled SQLite to fixed WAL-reset version by @gpeal
• #28125 build: run buildifier from just fmt by @anp-oai
• #28120 bazel: add PowerShell to Wine test harness by @anp-oai
• #27819 path-uri: render native paths across platforms by @anp-oai
• #28122 [codex] exec-server honors remote environment cwd and shell by @anp-oai
• #26662 feat(app-server): filter threads by parent by @btraut-openai
• #27884 Add selected-plugin precedence and attribution to the MCP catalog by @jif-oai
• #27870 Discover stdio MCP servers from selected executor plugins by @jif-oai
• #28283 [codex] update multi-agent v2 prompts by @jif-oai
• #27602 [codex] Preserve plugin apps in connector listings by @felixxia-oai
• #27461 [codex] Skip plugin MCP OAuth for matching app routes by @felixxia-oai
• #27893 Activate selected executor plugin MCPs in app-server by @jif-oai
• #28332 [codex] Cap feedback upload subtrees by @jif-oai
• #27365 Represent dynamic tools with explicit namespaces internally by @sayan-oai
• #28333 skills: hide orchestrator skills with a local executor by @jif-oai
• #27756 [codex] simplify shell snapshot ownership by @pakrym-oai
• #27794 Remove terminal resize reflow flag gates by @etraut-openai
• #28286 chore: restore exec-server relay keepalives by @jif-oai
• #28164 [codex] simplify memory read metrics by @pakrym-oai
• #27371 Expose explicit dynamic tool namespaces in thread start by @sayan-oai
• #28309 linearize history output normalization by @jif-oai
• #28306 avoid cloning sampling request input by @jif-oai
• #28323 serialize websocket requests directly by @jif-oai
• #28313 avoid cloning websocket request history by @jif-oai
• #28344 [codex] remove stale PathExt import by @pakrym-oai
• #27059 [codex] Cover OTLP HTTP log and trace event export by @richardopenai
• #28327 reuse encoded Responses request bodies by @jif-oai
• #27995 [codex] preserve explicit environment cwd by @pakrym-oai
• #28285 guardian: isolate review context from skills and memories by @jif-oai
• #26702 TUI Plugin Sharing 2 - add remote plugin section plumbing by @canvrno-oai
• #28294 bound prompt image cache retention by @jif-oai
• #28257 Support staging OAuth client ID overrides by @apanasenko-oai
• #28341 core: let steer interrupt wait_agent by @jif-oai
• #28336 skills: cache orchestrator resources per thread by @jif-oai
• #28357 Extract shared Windows sandbox session runner by @iceweasel-oai
• #27706 Use aws-lc-rs for rustls crypto provider by @malsamiri-oai
• #28347 [codex] add path-types skill by @anp-oai
• #28235 Add request user input auto-resolution timer by @shijie-oai
• #28234 [mcp] Increase default tool timeout to 300 seconds by @adaley-openai
• #28008 [codex] Add external agent import result accounting by @charlesgong-openai
• #27944 recover stale Windows sandbox credentials by @iceweasel-oai
• #27086 Add Windows unified exec yield floor by @iceweasel-oai
• #28358 Add hidden Windows sandbox wrapper entrypoint by @iceweasel-oai
• #27258 core: cache the tool search handler per session by @mchen-oai
• #28143 feat(app-server): expose rate-limit reset credits by @jayp-oai
• #28355 feat(core): add metadata field to ResponseItem by @owenlin0
• #28203 [codex] Add created-by-me remote plugin marketplace by @ericning-o
• #28365 Respect blocking PostToolUse hooks in code mode by @abhinav-oai
• #27813 [codex] Reuse Apps policy evaluation across MCP tool exposure by @mzeng-openai
• #28300 Deflake realtime handoff steering test by @felixxia-oai
• #28395 [codex] Preserve remote plugin directory order by @jameswt-oai
• #27955 [codex] retain resolved environments across turns by @pakrym-oai
• #27917 Add realtime speech append control by @guinness-oai
• #27093 [codex-analytics] Analytics Capture to File in Debug Builds by @jameswt-oai
• #26242 exec-server: add Noise relay transport by @viyatb-oai
• #28165 Use PathUri in filesystem permission paths for exec-server by @anp-oai
• #28415 [codex] Fix missing response item metadata in tests by @adaley-openai
• #27058 [codex] Add second-based OTEL duration histograms by @richardopenai
• #28327 reuse encoded Responses request bodies by @jif-oai
• #27902 [codex] Centralize plugin auth capability filtering by @felixxia-oai
• #28405 Add a toggle for realtime startup context by @guinness-oai
• #26434 Preserve hook trust bypass in codex exec threads by @abhinav-oai
• #26245 exec-server: default remote transport to Noise by @viyatb-oai
• #28383 [codex] Load API curated marketplace by auth by @felixxia-oai
• #27958 [codex] Make plugin details capability aware by @felixxia-oai
• #28367 Use ApiPathString in app-server filesystem permission paths by @anp-oai
• #28421 [codex] Bind shell snapshots to retained thread environments by @pakrym-oai
• #28429 [codex] Add interruptible sleep tool by @pakrym-oai
• #28441 [codex] Use expect in integration tests by @pakrym-oai
• #28163 [codex] Use local environment for user shell commands by @pakrym-oai

Read more

New Features

• Added /usage views for daily, weekly, and cumulative account token activity. (#27925)
• /goal now preserves oversized text, large pasted blocks, and image attachments, including in remote app-server sessions. (#27508, #27509, #27510)
• Added permanent session deletion through codex delete, /delete, and app-server thread/delete, with confirmation safeguards and subagent cleanup. (#25018, #27476)
• Added /import for selectively importing setup, project configuration, and recent chats from Claude Code. (#27070, #27071, #27703)
• Typing @ now opens the unified mentions menu for files, plugins, and skills by default. (#27499)
• Added managed Amazon Bedrock API-key authentication and encrypted local storage for CLI and MCP OAuth credentials. (#27443, #27689, #27504, #27535, #27539, #27541)

Bug Fixes

• Corrupted SQLite state databases are now backed up and rebuilt automatically from rollout data, including malformed database-directory cases. (#26859, #27719)
• Prevented /review from crashing when Esc is pressed with queued guidance, while preserving that guidance when the review is canceled. (#22879)
• Improved MCP reliability by retrying transient startup failures, reporting unusable OAuth credentials as logged out, and preserving explicitly disabled servers. (#25147, #26713, #27414)
• Fixed remote plugin uninstall requests and correctly surfaced apps requiring authentication during installation. (#27085, #27223)
• Persisted “Don’t remind me” update dismissals reliably and cleared stale running-hook indicators after completed turns. (#27619, #27783)
• Non-TTY background commands can now be interrupted with Ctrl-C while preserving their final output and exit status. (#26734)

Documentation

• Clarified contributor guidance around keeping crate APIs narrow and supporting Linux, macOS, and Windows. (#27939, #27966)

Chores

• Improved responsiveness for large repositories and long sessions by preserving Git’s built-in filesystem monitor, avoiding duplicate history reads, accelerating archive lookup, and caching turn-diff rendering. (#26880, #27031, #27276, #27489)
• Removed the experimental /realtime voice controls and related audio dependencies from the TUI. (#27801)

Changelog

Full Changelog: rust-v0.139.0...rust-v0.140.0

• #26880 [codex] preserve fsmonitor for worktree Git reads by @tamird
• #27085 Use server app auth requirements for remote plugin install by @xl-openai
• #27098 [codex] Return workspace directory installed plugins by @xl-openai
• #27007 multi-agent: add path-based v2 activity tracking by @jif-oai
• #27166 app-server: clear stale thread watches after v2 agent interruption by @jif-oai
• #27080 [codex] Ignore pending PR review comments by @anp-oai
• #26420 Avoid no-op backfill state writes by @zanie-oai
• #27031 Avoid rereading rollout history during cold resume by @zanie-oai
• #22879 fix: Prevent /review crash when entering Esc on steer message by @canvrno-oai
• #27173 app-server: reject direct input to multi-agent v2 sub-agents by @jif-oai
• #27184 Load selected executor skills through extensions by @jif-oai
• #26835 [codex] Test extension API contracts by @anp-oai
• #27063 [codex-analytics] add extensible feature thread sources by @marksteinbrick-oai
• #26479 [codex] Speed up local nextest runs by @anp-oai
• #27223 fix: use plugin service route for remote uninstall by @ericning-o
• #22685 Add SOCKS5 TCP MITM coverage by @winston-openai
• Allow creating a new goal after completion by @etraut-openai

Read more

New features

• Added rate-limit reset banking for Plus and Pro users, including one free reset at launch and referral invitations for earning more during the current promotion. Eligible Business members can invite coworkers to earn shared workspace credits through a separate referral program.
• Added Developer mode for Browser use in Chrome and the Codex in-app browser. It gives Codex controlled Chrome DevTools Protocol (CDP) access for performance profiling and deeper debugging of network traffic, console output, runtime errors, and page state.
• Added the /init command to the app composer for creating project instructions with the same initialization workflow as the Codex CLI.
• Added customizable macOS Dock icons with light and dark Codex variants.
• Added Computer Use for Enterprise users outside the European Economic Area, the United Kingdom, and Switzerland.
• Added support for configuring per-app access controls for Computer Use on Windows.
• Added an Unread chats section to the command menu, with the most recently updated unread chat selected by default.

Performance improvements and bug fixes

• Made Browser use up to 2x faster through CDP and DOM snapshot optimizations that reduce browser round trips.
• Made command, browser, integration, and source activity summaries easier to understand, and improved how completed chats present files, automations, and other durable output.
• Improved plugin management by including workspace plugins, refreshing plugin state more reliably after installation or removal, and letting you upload a new version of an already-shared plugin without changing its access.
• Improved usage-limit errors with inline plan and workspace guidance, including reset timing when available.
• Added Cmd+Enter and Ctrl+Enter as shortcuts for submitting custom approval feedback.
• Fixed Browser use download handling and improved Developer mode recovery and diagnostics.
• Fixed scheduled automations so they honor the selected approval mode, and fixed manual project ordering, Browser tab dragging, MCP app sizing after right-pane transitions, and clickable ChatGPT thread mentions.
• Fixed issues affecting background agent tab restoration, commit and pull request message generation, sidebar pull request status updates, Codex Mobile QR pairing, remote-control MFA, remote SSH installation and connection, updater prompts, and overlay positioning at non-default zoom levels.
• Additional performance improvements and bug fixes.

New features

• Added Migrate to Codex flows for importing supported setup from Claude Code and Claude Cowork, including during onboarding.
• Revamped plugins screen with separate tabs, marketplace and category filters, keyboard navigation, and clearer install actions.
• Expanded Settings search to find options from more panels, including Git and pets.

Performance improvements and bug fixes

• Fixed goal timer overlap in narrow layouts.
• Reduced unread notifications while an active goal continues running.
• Kept review diff ordering consistent with the file tree.
• Improved window rendering on systems that don’t support translucent backdrops, including Windows 10.
• Additional performance improvements and bug fixes.

New Features

• TUI controls now support F13-F24 keybindings, paste in searchable menus, and a compact reasoning-only status/title item (#25329, #25400, #25504).
• Enterprise/admin flows now show monthly credit limits and can apply cloud-managed config bundles, including EDU workspaces (#24812, #24617, #24619, #24620, #24622, #25963).
• Remote-control clients can start pairing and list or revoke controller grants through app-server v2 RPCs (#25675, #25785).
• Plugin workflows gained machine-readable codex plugin list --json output and cached remote catalog suggestions (#25330, #25457).
• Hosted web and image tools are available in more code-mode flows, with standalone web searches able to run in parallel (#25176, #25702, #25890, #25923).
• Multi-agent v2 keeps runtime choice with each thread and exposes cleaner follow-up and metadata defaults for spawned agents (#25266, #25636, #25720, #25721, #25722, #25841, #26114).

Bug Fixes

• Cancelling a submitted prompt before visible output now restores the draft, attachments, and collaboration mode for editing (#25316).
• Slash-command filtering and footer shortcut hints now reset or render according to the current UI state (#25492, #25625).
• Platform reliability improved for macOS app launches and Windows SQLite startup, thread resume, and sandbox setup refreshes (#25485, #25490, #25509, #25949).
• Plugin loading preserves app manifest order, deduplicates local/remote curated installs, and treats malformed skills fields as warnings (#25491, #25681, #25717, #25782).
• Permission requests and approvals now carry environment identity, and managed MITM proxying exports readable CA bundles to child commands (#25850, #25858, #25862, #22668).
• Local session history is safer for compressed rollouts, renamed titles, pathless side-chat reloads, and stack-heavy startup/config rebuilds (#25087, #25624, #25661, #25814, #25844, #25847).

Documentation

• Added app-server docs and generated schema updates for monthly credit limits, remote-control RPCs, and environment-scoped permission approvals (#24812, #25675, #25785, #25862).
• Moved repo review rules and contributor conventions into AGENTS.md, including Rust test-module layout and Python 3 compatibility guidance (#25682, #25690, #25738).

Chores

• Root formatting and Justfile workflows are more complete and Windows-aware (#24983, #25165, #25683).
• Rust CI and release workflows use the git CLI for Cargo fetches to avoid intermittent libgit2/submodule failures (#25644, #25775).
• Python SDK releases now publish runtime wheels from the SDK workflow and pin to a glibc-compatible runtime package (#25906, #25907).
• Bazel CI’s BuildBuddy wrapper was reintroduced with Windows-safe process handling and validation (#25915).
• Shared prompts, context fragments, and skills plumbing moved into dedicated crates/extension paths to reduce codex-core coupling (#25151, #25953, #25959, #26106, #26122, #26167).

Changelog

Full Changelog:

rust-v0.136.0...rust-v0.137.0

New features

• Added activity insights and share cards to the Profile section. You can review Codex usage highlights and save a profile card; sharing is available on consumer ChatGPT plans.

Performance improvements and bug fixes

• Improved Computer Use startup readiness and appshot error reporting.
• Fixed browser and review UI issues, including fullscreen browser composer controls, hex color swatches, terminal scrollbar alignment, and animated diff stat alignment.
• Expanded onboarding with more role choices so Codex can tailor first-run suggestions more accurately.
• Fixed configuration writes after plugin installation.
• Additional performance improvements and bug fixes.