Codex CLI changelog
The last 22 stable releases of Codex CLI, newest first, with the lines that remove, rename or deprecate something pulled out on top. Taken from the GitHub releases every morning.
Breaking changes and deprecations
- 0.156.0
- Clarify that deprecated friendly and pragmatic personality settings no longer select response styles.
- 0.154.0
- The deprecated codex mcp-server entry point is no longer available.
Latest releases
-
- Added keyboard-driven transcript selection with word, line, and page motions, integrated search, and configurable shortcuts.
- Rendered Markdown consistently in async questions, choices, answers, and transcript replies.
- Added GPT-6.1 Terra to the bundled, Vertex AI, and Amazon Bedrock model catalogs.
- Added codex queue --resume to resume unloaded threads after queueing a message.
- Added clearer safety-block explanations and selectable safer follow-up prompts in the TUI.
- Added codex doctor --network-only for focused configuration, connectivity, and WebSocket diagnostics.
- Preserved acknowledged approval and permission settings when resuming or forking threads.
- Preserved local image attachments when restoring killed composer text.
- Fixed standalone release cleanup on macOS when installations are in use or paths contain non-ASCII characters.
- Restored spawned descendant threads when unarchiving their parent.
-
- Added a built-in Google Cloud Vertex AI provider, configured with model_provider = "gcp".
- Added GPT-6.1 Terra to the model catalogs.
- Added a repository filter to the session picker and directory grouping to the agent command center, making it easier to navigate sessions across linked worktrees.
- Added experimental attached thread forks to the app-server API.
- Enabled reasoning effort changes during a conversation by default for supported models.
- Enabled memory v2 by default for fresh profiles and added support for importing external-agent memories into it.
- Fixed fresh TUI sessions to honor the server’s default approval reviewer when no explicit override is provided.
- Kept TUI preferences editable and immediately applicable when execution settings are invalid.
- Cancelled remote MCP tool requests when their local response futures are dropped.
- Prevented queued agent messages from restarting work after an interrupt or a switch to Plan mode.
-
- Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access.
- Set model, reasoning effort, speed, and permission profiles directly with inline /model and /permissions arguments.
- Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics.
- Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets.
- Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers.
- The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected.
- Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking.
- Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults.
- Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials.
- CLI configuration overrides are preserved when -c or --config appears at multiple subcommand levels.
-
- Open /config to search preferences across categories, change supported settings immediately, and see which changes require a restart.
- Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls.
- Configure a leader key in /keymap. The default is Ctrl+X, shortcut hints stay open until you choose or cancel, and voice mute moves to F9.
- Restart a managed background server from /daemon. Codex warns about work the restart could interrupt, then reconnects automatically.
- Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups.
- Daybreak is enabled by default for eligible accounts. codex exec can also select it with an OpenAI API key when the server offers access.
- Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy.
- The network proxy now checks permission before a DNS lookup, rejects duplicate Host headers, and prevents credential aliases from bypassing inspection hooks.
- Return to an existing side conversation with /side after switching threads. Answers to pending prompts also go back to the thread that asked.
- On Windows, Ctrl+V and Shift+Insert paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging.
-
- Fixed a TUI crash when asynchronous questions contain multiple lines, preserving line breaks and complete hyperlink destinations.
- Fixed startup failures caused by differences between a running background server's feature settings and CLI defaults. Compatibility checks now apply only to explicit command-line feature overrides.
-
- Add tools for creating and listing managed Git worktrees from trusted local projects when the worktrees feature is enabled.
- Pin tasks in the agent Command Center with p and keep them in a shared Pinned group when supported by the server.
- Navigate and copy transcript blocks with /copy, use Ctrl+Insert to copy selections, and tune mouse-wheel scrolling with tui.mouse_scroll_speed.
- Make URLs clickable in approval headers, questions, MCP prompts, warnings, banners, and verification prompts, including when links wrap across lines.
- Configure live web access and remote compaction capabilities for custom Responses-compatible model providers.
- Add JavaScript helpers for streaming promise results as they settle, plus opt-in ranked tool search in Code Mode.
- Respect server model and reasoning-summary defaults for new TUI threads while retaining explicit launch overrides.
- Preserve existing CRLF line endings in apply_patch updates without requiring an opt-in.
- Fix Linux sandbox startup with multiple denied files, reject writable sandbox-construction executables, and keep ripgrep configuration from weakening deny-glob masks.
- Restore ordinary drive-letter file access on Windows 10 and match Windows sandbox temp permissions to the child process environment.
-
- GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs.
- Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions.
- Sign in to MCP servers from an active terminal session with /mcp login .
- Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally.
- Daybreak is opt-in through --enable cli_daybreak or features.cli_daybreak=true; daybreak=true alone is insufficient. By default, controls and indicators are hidden, /daybreak is unavailable, and automatic Cyber routin…
- Select a Cyber access program per turn with codex exec --cyber-access-program or the TypeScript SDK’s cyberAccessProgram option. The explicit exec override remains available with cli_daybreak disabled and leaves the s…
- Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions.
- Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings.
- Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles.
- Enter correctly submits buffered input after paste detection expires, including in Vim insert mode.
-
- Preserve SYSTEMROOT, TEMP, and TMP when launching remote stdio MCP servers with explicitly configured remote environment variables, allowing Unix hosts to retain the Windows executor's startup environment.
- #51121: Backport Windows remote MCP environment preservation to 0.160.
-
- Browse older tasks in the agent command center with a keyboard-accessible “Show more” action.
- Select transcript text and paste with middle-click in fullscreen mode on supported local Linux X11 terminals.
- Start sessions outside a project with workspace defaults when policy permits, and restore saved permissions when resuming.
- Added opt-in Guardian review capabilities to retrieve earlier user instructions and include context from agent handoffs.
- Unsent queued messages now resume after reconnection once uncertain submissions are resolved, avoiding duplicate sends.
- The terminal UI now preserves server provider, reasoning-summary, and verbosity settings and shows the correct sessions in resume and fork history.
- Fixed Windows sandbox PowerShell fallbacks and long-path permission repairs, and suppressed unwanted console windows from background helpers.
- Subagents now retain environments that are still starting and receive their configuration or preparation failure.
- Prevented SQLite stalls during connection setup and logging, and surfaced initialization errors instead of masking them as timeouts.
- Explicit provider model catalogs no longer include unsupported bundled models or reuse stale entries after refresh failures.
-
- Eligible local sessions signed in with ChatGPT can now show optional reminders to complete account security setup.
-
- Suppressed console windows flashing on Windows when Codex launches background processes and sandboxed commands.
-
- Added GPT-6.1 Sol as the default model in the bundled catalog and Amazon Bedrock Mantle and Runtime catalogs.
-
- Opt-in instant_interrupt lets new input steer Codex during model responses or long-running code-mode calls.
- New sessions get a compact welcome screen and consistent headers, with occasional tips during and after turns.
- The warnings viewer dismisses reviewed warnings when closed; press k to keep one for later.
- You can scroll the transcript while deciding whether to implement a plan.
- Native Mermaid rendering supports more flowchart edges, labels, and node groups.
- App-server clients can paginate thread history from a specific item.
- Windows launches avoid stray console windows for MCP servers, code-mode hosts, and piped commands; restrictive launchers can fall back to embedded mode.
- Copying transcript selections preserves Markdown tables, formatting, and significant whitespace. More terminals now copy automatically on selection.
- Blank sessions retain drafts when switching tasks, and threads can be archived and listed before their first turn.
- Local ChatGPT sign-in opens the browser reliably; onboarding also provides a shortcut to copy the login link.
-
- Configure copy-on-select and right-click paste in the fullscreen TUI. Copied transcript selections now preserve Markdown formatting.
- Connect to MCP servers that require pre-registered OAuth client secrets, including through codex mcp add --oauth-client-secret.
- Secure direct exec-server WebSocket connections with bearer tokens, including connections configured through app-server.
- Image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images.
- Terminal input approval is enabled by default for commands running with elevated permissions; runtime-only grants no longer cause unnecessary reviews.
- Fixed Windows sandbox failures involving ordinary Windows 10 paths, rejected stored credentials, and large permission policies.
- Fixed Linux sandbox startup with nested writable roots and preserved Git metadata protections across writable roots on Linux and macOS.
- macOS patch operations now recognize system path aliases covered by existing permissions, avoiding unnecessary approval prompts.
- Approval reviews now retry when new user input arrives, so a status question does not automatically abort a pending action.
- Mermaid flowcharts now render quoted labels and ampersands; unsupported diagrams explain why they fall back to source.
-
- Release highlights could not be determined: the supplied PR index is empty, and the GitHub tag comparison returned 404.
-
- Added GPT-6 Sol and Luna, including Amazon Bedrock support and migration prompts for older models.
- Enabled fullscreen transcripts by default and added Shift-click to extend text selections.
- Enabled automatic background-server startup for eligible interactive sessions, with recovery choices when server settings are incompatible.
- Added an f shortcut to fork conversations open in another app, preserving drafts and queued prompts.
- Made /import available in remote sessions and local background-server sessions.
- Improved terminal rendering with Unicode bullets, checkboxes, aligned equations, and optimization notation.
- Preserved active voice conversations when switching threads.
- Recovered unsent question answers into the composer when turns end, without disrupting active history searches.
- Respected tmux mouse settings and restored native scrollback for Terminal.app over SSH in automatic screen mode.
- Fixed configured proxy routing for realtime connections and standalone web search, including search redirects.
-
- Choose GPT-6 Sol or GPT-6 Luna from the model picker. The rate-limit switch prompt now recommends GPT-6 Luna.
-
- Breaking Clarify that deprecated friendly and pragmatic personality settings no longer select response styles.
- Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying.
- Voice conversations are enabled by default, with an F8 toggle, a /voice settings picker, and bundled audio runtimes for Linux and Windows.
- Explore account usage, token totals, and plugin and skill activity through the /usage analytics dashboard.
- Filter tasks by status and create worktree sessions from the agent command center; worktree support is now enabled by default.
- Customize the terminal with six new themes and view supported Mermaid diagrams and display equations directly in responses.
- Update the local background server through /daemon, or bypass it with --no-daemon.
- Preserve streamed answers and plans when turns fail, are interrupted, or receive subagent completion events.
- Fix clipboard forwarding in tmux and SSH sessions and preserve tab indentation when terminals send pasted text as individual keystrokes.
- Restore Plan mode when resuming sessions and preserve thread identity and settings when editing earlier prompts.
- Recover login through system proxies and refresh MCP credentials when OAuth discovery returns a 503 error.
-
- New local TUI sessions now leave reasoning summaries disabled by default, fixing request rejection by providers that do not support them. Explicit reasoning-summary settings remain respected.
-
- Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental.
- The TUI now shows live reasoning summaries in the status row and completion timestamps after successful turns.
- Added task hiding, archiving, and deletion in the agents overview, plus worktree ownership details and confirmed deletion of clean managed worktrees.
- Added Touch ID verification for MCP requests in local TUI sessions on supported Macs.
- Added configurable daemon update schedules and codex app-server daemon update; saved threads and active goals can recover after daemon restarts.
- Amazon Bedrock can now obtain AWS credentials from configured commands, with caching, expiration-based refresh, and authentication recovery.
- Accepted prompts are now saved even when compaction fails before a turn starts.
- Fixed missed tmux resizes, transcript viewport restoration, and stale history appearing after switching threads.
- MCP servers now report expired OAuth credentials accurately and provide reconnect guidance when token refresh fails.
- Automatic approval reviews now preserve complete actions and authorization evidence more reliably, retry transient failures, and distinguish review failures from unsafe-action findings.
-
- Breaking The deprecated codex mcp-server entry point is no longer available.
- GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs.
- Experimental worktree support lets you create isolated checkouts for new or forked sessions using --worktree or /worktree, then browse and resume them.
- Answer questions inline while Codex continues working, using suggested choices or custom text without losing your main draft.
- Windows sessions can now share a background Codex server, with daemon lifecycle commands and managed updates.
- Vim editing gains R replace mode with undo and dot-repeat, plus more reliable Escape handling in legacy terminals.
- Copying responses preserves formatting in rich-text apps, and /copy can copy status output or individual session fields.
- Existing sessions pick up newly installed plugin tools and refresh skills and hooks after external plugin upgrades or rollbacks.
- MCP connections coordinate OAuth token refreshes and surface login challenges when refresh fails, without automatically replaying rejected tool calls.
- Startup avoids running workspace-controlled helpers before trust is established, and the macOS sandbox blocks terminal input injection.
- Remote resume and fork operations preserve saved permissions; fresh sessions and forks respect server model defaults unless explicitly overridden.
-
- Fixed Astra’s visibility in the bundled model picker and made it the bundled default when no model is explicitly configured.
- Updated Astra’s guidance to use asynchronous questions only when the tool is available in the session.
Other agents
Claude CodeGemini CLICopilot CLIopencodeHermes AgentQwen CodeKimi CLIGooseMistral VibeCrushAiderCline All agents →
Run Codex CLI next to the other agents and see when one needs you: AgentVera keeps them in one window on Mac, Windows and Linux, and on your phone.
Bring your agents to one desk.
Download, pick a project, open your first agent. Your installed CLIs are ready to go.