Codex Updates & Release Notes

New Features

• Browse older tasks in the agent command center with a keyboard-accessible “Show more” action. (#49106)
• Select transcript text and paste with middle-click in fullscreen mode on supported local Linux X11 terminals. (#49112)
• Start sessions outside a project with workspace defaults when policy permits, and restore saved permissions when resuming. (#49160)
• Added opt-in Guardian review capabilities to retrieve earlier user instructions and include context from agent handoffs. (#49036, #49057)

Bug Fixes

• Unsent queued messages now resume after reconnection once uncertain submissions are resolved, avoiding duplicate sends. (#49105)
• The terminal UI now preserves server provider, reasoning-summary, and verbosity settings and shows the correct sessions in resume and fork history. (#49144, #49161, #49171)
• Fixed Windows sandbox PowerShell fallbacks and long-path permission repairs, and suppressed unwanted console windows from background helpers. (#49019, #49058, #49098, #49164, #49386)
• Subagents now retain environments that are still starting and receive their configuration or preparation failure. (#49075)
• Prevented SQLite stalls during connection setup and logging, and surfaced initialization errors instead of masking them as timeouts. (#49032, #49102)
• Explicit provider model catalogs no longer include unsupported bundled models or reuse stale entries after refresh failures. (#49135)

Documentation

• Clarified how provider credentials use the configured storage backend and how env_key identifies the API-key environment variable. (#49118)

Chores

• Reduced repeated plugin-loading work by caching parsed manifests and reusing HTTP connections for remote plugin requests. (#49099, #49100)
• Added background reclamation of unused log database space to reduce disk usage. (#49069)

Changelog

Full Changelog: rust-v0.159.0...rust-v0.160.0

• #48983 Avoid full metadata rewrites for thread timestamp updates @jif-oai
• #49000 Isolate the memory startup metadata test from Git enrichment @jif-oai
• #49019 Use a compatible PowerShell fallback for the Windows MXC sandbox @iceweasel-oai
• #49028 Use the numeric ioctl value in the macOS sandbox policy @aionescu-oai
• #49031 Clarify ChatGPT sign-in success copy @bc-openai
• #49032 Avoid SQLite stalls from connection setup and stderr span logging @jif-oai
• #49036 Add opt-in conversation history retrieval to Guardian reviews @felixxia-oai
• #49037 Show the Plan mode cycling hint in the fullscreen status line @fcoury-oai
• #49038 Preserve encrypted agent messages in Guardian reviews @felixxia-oai
• #49041 Copy selections within inline code as plain text @fcoury-oai
• #49043 Update Pro plan display names in the TUI @etraut-openai
• #49057 Add handoff-aware root context for Guardian reviews @jif-oai
• #49058 Fix Windows sandbox ACL repair for long runtime paths @darius-oai
• #49060 Update Guardian messaging snapshots for native agent messages @dkovalenko-oai
• #49065 Update Guardian handoff snapshot for separate agent messages @cassirer-openai
• #49067 Keep configuration values out of Windows sandbox policy events @zm-oai
• #49069 Reclaim unused SQLite log database pages in the background @dkovalenko-oai
• #49073 Surface realtime voice catalog failures in the TUI @etraut-openai
• #49074 Propagate Cargo package versions to Bazel Rust targets @tamird
• #49075 Preserve pending environments when spawning subagents @sayan-oai
• #49076 Avoid collecting unused Git metadata in skill analytics @tamird
• #49079 Update and centralize TUI subscription labels @etraut-openai
• #49082 Skip remote Git discovery for Guardian diff paths @jif-oai
• #49084 Track app-server running turns incrementally @tamird
• #49089 Render follow-up directive labels in the TUI and copied responses @etraut-openai
• #49093 Simplify startup promotions to platform-specific desktop app tips @etraut-openai
• #49096 Update h2 from 0.4.16 to 0.4.19 in Cargo and Bazel lockfiles @cassirer-openai
• #49097 Notify lifecycle extensions of compaction usage limits @xli-oai
• #49098 Resolve Windows sandbox PowerShell fallbacks on the exec server @zm-oai
• #49099 Cache parsed plugin manifests across plugin workflows @dkovalenko-oai
• #49100 Reuse the HTTP connection pool for remote plugin requests @dkovalenko-oai
• #49102 Preserve SQLite vacuum modes and surface pool initialization errors @bc-openai
• #49103 Balance Windows Bazel test shards using duration estimates @jgershen-oai
• #49105 Resume unsent TUI input after reconnecting @etraut-openai
• #49106 Add history pagination to the agent command center @bc-openai
• #49112 Add X11 primary selection and middle-click paste support @fcoury-oai
• #49114 Point remote compaction tests at the mock ChatGPT server @OLI-OAI
• #49117 Attribute analytics requests to each thread's product SKU @papayo-oai
• #49118 Correct provider authentication storage documentation @celia-oai
• #49119 Add recovery guidance to content-filter retries @won-openai
• #49127 Deduplicate cloud and executor skill listings before budgeting @TAFOYA-OAI
• #49130 Move content-filter guidance into the shared Responses retry handler @won-openai
• #49135 Treat explicit provider model catalogs as authoritative @andrew-gu-oai
• #49136 Remove the plus separator after Option symbols in TUI key hints @bc-openai
• #49138 Expose original error details to turn lifecycle contributors @bryanashley
• #49144 Preserve server reasoning summary and verbosity settings in the TUI @etraut-openai
• #49145 Hide reasoning summary settings in /status for server connections @etraut-openai
• #49147 Simplify cloud task base URL normalization @akira-oai
• #49153 Omit blockquote markers when copying quoted selections in the TUI @bc-openai
• #49160 Support projectless TUI sessions with workspace defaults @etraut-openai
• #49161 Honor app-server provider defaults in the TUI @etraut-openai
• #49164 Suppress Windows console windows for background subprocesses @etraut-openai
• #49171 Fix model provider lookup for TUI history @etraut-openai
• #49386 [0.160] Backport remaining Windows console fix to frozen alpha.6 @andrewguoai
• #49763 [0.160] Backport maintenance-line catalog and security reminder updates @andrewguoai

New Features

• Opt-in instant_interrupt lets new input steer Codex during model responses or long-running code-mode calls. (#48135, #48141)
• New sessions get a compact welcome screen and consistent headers, with occasional tips during and after turns. (#48513, #48562, #48352)
• The warnings viewer dismisses reviewed warnings when closed; press k to keep one for later. (#48205, #48206)
• You can scroll the transcript while deciding whether to implement a plan. (#48805)
• Native Mermaid rendering supports more flowchart edges, labels, and node groups. (#48814, #48895)
• App-server clients can paginate thread history from a specific item. (#48151)

Bug Fixes

• Windows launches avoid stray console windows for MCP servers, code-mode hosts, and piped commands; restrictive launchers can fall back to embedded mode. (#48138, #48238, #48483, #48491)
• Copying transcript selections preserves Markdown tables, formatting, and significant whitespace. More terminals now copy automatically on selection. (#48548, #48549, #48469)
• Blank sessions retain drafts when switching tasks, and threads can be archived and listed before their first turn. (#48628, #48828, #48199)
• Local ChatGPT sign-in opens the browser reliably; onboarding also provides a shortcut to copy the login link. (#48502, #48544)
• Approved commands retain explicit filesystem denials, and .aws directories are protected by default under writable roots. (#48155, #48176)
• Fixed macOS TLS access in network-enabled sandboxes and remote environments that require proxy access. (#48565, #48198)

Chores

• Removed automatic follow-up prompt suggestions and the tui.prompt_suggestions setting. (#48621)
• Removed the bundled plugin-creator skill. (#48604)

Changelog

Full Changelog: rust-v0.158.0...rust-v0.159.0

New Features

• Configure copy-on-select and right-click paste in the fullscreen TUI. Copied transcript selections now preserve Markdown formatting. (#47639, #47896, #48118)
• Connect to MCP servers that require pre-registered OAuth client secrets, including through codex mcp add --oauth-client-secret. (#47891)
• Secure direct exec-server WebSocket connections with bearer tokens, including connections configured through app-server. (#47601, #47648)
• Image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images. (#47484, #47956)
• Terminal input approval is enabled by default for commands running with elevated permissions; runtime-only grants no longer cause unnecessary reviews. (#47799, #48073)

Bug Fixes

• Fixed Windows sandbox failures involving ordinary Windows 10 paths, rejected stored credentials, and large permission policies. (#47672, #47695, #47919)
• Fixed Linux sandbox startup with nested writable roots and preserved Git metadata protections across writable roots on Linux and macOS. (#47623, #47974)
• macOS patch operations now recognize system path aliases covered by existing permissions, avoiding unnecessary approval prompts. (#47879)
• Approval reviews now retry when new user input arrives, so a status question does not automatically abort a pending action. (#47819)
• Mermaid flowcharts now render quoted labels and ampersands; unsupported diagrams explain why they fall back to source. (#47572, #47678)
• Command completion events now include early output and report process-launch failures to clients. (#47529, #47665)

Changelog

Full Changelog: rust-v0.157.0...rust-v0.158.0

New Features

• Added GPT-6 Sol and Luna, including Amazon Bedrock support and migration prompts for older models. (#47332, #47347)
• Enabled fullscreen transcripts by default and added Shift-click to extend text selections. (#47178, #47414)
• Enabled automatic background-server startup for eligible interactive sessions, with recovery choices when server settings are incompatible. (#47179, #47318)
• Added an f shortcut to fork conversations open in another app, preserving drafts and queued prompts. (#47185)
• Made /import available in remote sessions and local background-server sessions. (#47117)
• Improved terminal rendering with Unicode bullets, checkboxes, aligned equations, and optimization notation. (#47191, #47322)

Bug Fixes

• Preserved active voice conversations when switching threads. (#47381)
• Recovered unsent question answers into the composer when turns end, without disrupting active history searches. (#47422, #47423)
• Respected tmux mouse settings and restored native scrollback for Terminal.app over SSH in automatic screen mode. (#47399, #47417)
• Fixed configured proxy routing for realtime connections and standalone web search, including search redirects. (#47101, #47142, #47204)
• Added retries for transient file-upload failures and increased the upload timeout to five minutes. (#47122, #47393)
• Enforced network restrictions across redirects and ongoing HTTP and WebSocket traffic, including cancellation when policy changes revoke access. (#47389, #47407)

Changelog

Full Changelog: rust-v0.156.0...rust-v0.157.0

New Features

• Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #46883, #46895)
• Voice conversations are enabled by default, with an F8 toggle, a /voice settings picker, and bundled audio runtimes for Linux and Windows. (#44921, #46071, #44622, #44714, #44922)
• Explore account usage, token totals, and plugin and skill activity through the /usage analytics dashboard. (#45764, #45769)
• Filter tasks by status and create worktree sessions from the agent command center; worktree support is now enabled by default. (#46839, #45276, #44870)
• Customize the terminal with six new themes and view supported Mermaid diagrams and display equations directly in responses. (#46504, #46054, #45612)
• Update the local background server through /daemon, or bypass it with --no-daemon. (#45854, #46088)

Bug Fixes

• Preserve streamed answers and plans when turns fail, are interrupted, or receive subagent completion events. (#45549, #46867)
• Fix clipboard forwarding in tmux and SSH sessions and preserve tab indentation when terminals send pasted text as individual keystrokes. (#45457, #45454)
• Restore Plan mode when resuming sessions and preserve thread identity and settings when editing earlier prompts. (#45519, #45845)
• Recover login through system proxies and refresh MCP credentials when OAuth discovery returns a 503 error. (#46562, #44636)
• Prevent speech from being dropped during playback pauses or bursts of incoming audio. (#46880)
• Close sandbox isolation gaps involving inbound Windows connections, privileged Linux/macOS sockets, and writes through read-only macOS file handles. (#44639, #45984, #46500)

Documentation

• Clarify that deprecated friendly and pragmatic personality settings no longer select response styles. (#45809)
• Explain how ? matches a single character in network proxy allow and deny patterns. (#46027)

Chores

• Update bundled TLS dependencies, including OpenSSL 3.6.4 for Linux musl builds. (#45149, #45489)

Changelog

Full Changelog: rust-v0.155.0...rust-v0.156.0

New Features

• Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, #44331)
• The TUI now shows live reasoning summaries in the status row and completion timestamps after successful turns. (#43558, #43921)
• Added task hiding, archiving, and deletion in the agents overview, plus worktree ownership details and confirmed deletion of clean managed worktrees. (#43942, #44424, #44433)
• Added Touch ID verification for MCP requests in local TUI sessions on supported Macs. (#43624, #43712, #43715)
• Added configurable daemon update schedules and codex app-server daemon update; saved threads and active goals can recover after daemon restarts. (#43542, #43562, #44314)
• Amazon Bedrock can now obtain AWS credentials from configured commands, with caching, expiration-based refresh, and authentication recovery. (#44028)

Bug Fixes

• Accepted prompts are now saved even when compaction fails before a turn starts. (#44487)
• Fixed missed tmux resizes, transcript viewport restoration, and stale history appearing after switching threads. (#43603, #43889, #43994)
• MCP servers now report expired OAuth credentials accurately and provide reconnect guidance when token refresh fails. (#43947, #44359)
• Automatic approval reviews now preserve complete actions and authorization evidence more reliably, retry transient failures, and distinguish review failures from unsafe-action findings. (#44482, #44569, #44570)
• Switching accounts now invalidates remote-control sessions, cached WebSocket state, and model catalogs belonging to the previous identity. (#43906, #44341, #44489)
• Blocked Windows-process escapes from restricted WSL sandboxes and hardened brokered shell snapshots against credential exposure. (#44286, #43909, #44040)

Chores

• Aligned Python SDK and runtime publishing with stable CLI releases, using matching versions and verifying runtime assets before SDK publication. (#44067)

Changelog

Full Changelog: rust-v0.154.0...rust-v0.155.0

Install with pip install --upgrade openai-codex==0.154.0 (Python 3.10 or later). This release includes the matching openai-codex-cli-bin==0.154.0 runtime.

• Add max and ultra reasoning-effort values. (#39662)
• Add ExternalMessage to synchronous and asynchronous run() and turn() calls. External content can start a turn or join an active regular turn with tool-level authority; it does not grant user authorization. Consumers receive independent event streams. (#44086)
• Add include_turns on resume/fork, turn_service_tier for one newly started turn, and source metadata. History selection changes the returned response, not model context. Existing defaults are preserved when these options are omitted. (#44084)
• Refresh generated protocol models and notifications, and preserve completion events that arrive before a turn-start response. (#44032, #44400)

Check these migrations when upgrading:

• HookMetadata wraps its handler in .root. Replace accesses such as hook.command with hook.root.command, checking hook.root.handler_type before reading handler-specific fields.
• Some previously unknown notifications now have typed payloads. Read named fields instead of .params; unknown or invalid payloads still use UnknownNotification.
• Manually constructed or late-joining turn handles receive events from their attachment point. Earlier output is not replayed, so collected results can be partial; attaching after completion can raise TransportClosedError. Use thread.read(include_turns=True) for saved history. Handles returned directly by thread.turn(...) retain events from when their request is sent.

Custom codex_bin overrides require CLI 0.151.0 or newer for ExternalMessage and the new history/per-turn options.

Read more

New Features

• GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619)
• Experimental worktree support lets you create isolated checkouts for new or forked sessions using --worktree or /worktree, then browse and resume them. (#42652, #43069, #43120, #43286)
• Answer questions inline while Codex continues working, using suggested choices or custom text without losing your main draft. (#42891, #42894, #42897)
• Windows sessions can now share a background Codex server, with daemon lifecycle commands and managed updates. (#42405, #42392)
• Vim editing gains R replace mode with undo and dot-repeat, plus more reliable Escape handling in legacy terminals. (#42194, #42584)
• Copying responses preserves formatting in rich-text apps, and /copy can copy status output or individual session fields. (#42847, #43055)

Bug Fixes

• Existing sessions pick up newly installed plugin tools and refresh skills and hooks after external plugin upgrades or rollbacks. (#42284, #42593, #42990)
• MCP connections coordinate OAuth token refreshes and surface login challenges when refresh fails, without automatically replaying rejected tool calls. (#42413, #42552)
• Startup avoids running workspace-controlled helpers before trust is established, and the macOS sandbox blocks terminal input injection. (#42324, #42590)
• Remote resume and fork operations preserve saved permissions; fresh sessions and forks respect server model defaults unless explicitly overridden. (#43330, #43177, #43355)
• Resuming a conversation open in another app now shows a read-only transcript with a retry option while preserving your draft. (#43253)
• Automatic approval reviews better preserve authorization context through compaction and reject approvals invalidated by new user instructions or answers. (#42844, #42852, #43442)

Documentation

• Updated the bundled OpenAI Docs skill with GPT-6-Astra migration, compatibility, and prompting guidance. (#42931)

Chores

• The deprecated codex mcp-server entry point is no longer available. (#42993)

Changelog

Full Changelog: rust-v0.153.0...rust-v0.154.0

Chat while you work

Keep ChatGPT close while you work in other apps. In the ChatGPT desktop app on macOS and Windows, you can now type a quick chat from the floating Pets controls and press Enter to send it. Use @ to add context and $ to choose a skill. Select the bell icon to follow progress in your threads, then select a thread to open the full conversation.

Choose a companion or show just the controls in Settings > Pets. Press Option+Space on macOS or Windows+Alt+P on Windows to show the controls and focus Quick Chat. Pressing the shortcut again keeps Quick Chat open. You can change Show pet in Settings > Keyboard shortcuts. To hide the controls, select Hide pet in the command menu or Settings > Pets.

On macOS, you can also send an appshot to the floating controls. Keep the main ChatGPT window in the background and choose Automatic for Appshot destination.

Learn more about Pets.

Share an app window on Windows

Appshots are now available in the ChatGPT desktop app on Windows. Press both Alt keys to share the frontmost app window with ChatGPT, then ask a question or describe what you want to do. An appshot includes a screenshot and available text from that window. You can customize the shortcut and choose which chat receives it in settings.

Other improvements and bug fixes

• Open files directly from a conversation's Sources panel, or download files that ChatGPT can't preview.
• Assign a Codex Micro key to Insert text and add your own reusable text to the active prompt without sending it.
• Reset a pet to its default size in settings. Custom pets also stay in place when you refresh their artwork.
• Keep unfinished comments on response text when you switch chats and return.
• ChatGPT dictation now respects your saved Main language preference.
• Keep tab widths and scroll positions more stable as you close browser tabs in full and split views.