Codex Changelog

Full changelog: • codex: route global AGENTS reads through LOCAL_FS • fix: default unknown tool schemas to empty schemas • Add tool lifecycle extension contributor • Reduce rust-ci-full Windows nextest timeout flakes • Improve `codex remote-control` CLI UX • Publish Linux runtime wheels with glibc-compatible tags • Trim unused TurnContextItem fields • Include plugin id in plugin MCP tool metadata • Move pending input into input queue • fix(tui): warn on unsupported iTerm2 pet versions • preserve user thread source for exec threads • app-server: use profile ids in v2 permission params • Remove external websocket session resets • cleanup: Remove skill env var dependency prompting • Remove ToolSearch feature toggle • Add thread settings to UserInput • Remove UserInputWithTurnContext • Remove UserTurn • Extract turn skill and plugin injections • fix(plugins): keep version upgrades additive • Replace OverrideTurnContext with ThreadSettings • CI: Customize v8 building • Remove explicit connector tool undeferral • core: expose permission profile picker metadata • Preserve context baselines for full-history agent forks • feat: dedicated goal DB • Remove ToolsConfig from tool planning • Add `body_after_prefix` auto-compact token limit scope • Defer v1 multi-agent tools behind tool search • Allow empty turn/start requests • Move hook request plumbing into hook runtime • Preserve steer input as user input • tui: route app and skill enablement through app server • Make contextual user fragments dyn-renderable • chore: namespace v1 sub-agent tools • Make `deny` canonical for filesystem permission entries • Harden CLI rate limit window labels • Add SubagentStart hook • build: add Codex package builder • Make local environment optional in EnvironmentManager • Refactor exec-server websocket pump • fix(tui): preserve modified enter in plan questions • Fix empty rollout path app-server handling • Route local-only app-server gating through processors • Split plugin install discovery into list and request tools • fix: serialize unix app-server startup • Honor role-defined spawn service tiers • Add CUA requirements subsection for locked computer use • Fix: TUI starting in wrong CWD • build: fetch rg for Codex packages • Remove unused ARC monitor path • test: fix multi-agent service tier assertion • build: default Codex package target and output • Fan out rust-ci-full nextest by platform • feat: expose codex-app-server version flag • feat: add permission profile list api • Move plugin and skill warmup into session startup • Fix stale background terminal poll events • Preserve raw code-mode exec output by default • Warn on invalid UTF-8 in AGENTS.md files • feat: Add vertical remote plugin collection support • build: package prebuilt Codex entrypoints • ci: build Codex package archives in release workflow • runtime: detect Codex package layout • add encryptedcontent to functioncalloutput • Migrate exec-server remote registration to environments • Add timeout for remote compaction requests • feat: rename 1 • feat: rename 3 • feat: rename 2 • fix: main • feat: wire goal extension tools to the dedicated goal store • feat: async approval contrib • feat: async turn item process • feat: expose turn-start metadata to extensions • Hide deferred tools from code mode prompt • runtime: use install context for bundled bwrap • release: publish Codex package archive checksums • feat: Add btw alias for side slash command • feat: account active goal progress in the goal extension • Start fresh TUI thread in background • fix(app-server): speed up shutdown • windows-sandbox: add resolved permissions helper • Add thread/settings/update app-server API • Sync TUI thread settings through app server • feat: add turn_id and truncation_policy to extension tool calls • install: consume Codex package archives • Preserve failed goal accounting flushes • add standalone websearch api client • Fix thread settings clippy failure • npm: ship platform packages in Codex package la...

Fixes: • Fixed TUI startup choosing the wrong working directory when reusing a local app-server socket • Fixed plan-mode free-form answers so modified Enter keys, like Shift+Enter, no longer submit unexpectedly • Removed stale background terminal poll events after a process exits • Preserved raw code-mode exec output unless an explicit output token limit is requested • Made AGENTS instruction loading more reliable, including local global reads and warnings for invalid UTF-8 instead of silent drops • Fixed app-server startup/shutdown races, empty resume/fork paths, plugin upgrade failures, and realtime v1 websocket compatibility Docs: • Added clearer plugin-creator guidance for updating and reinstalling local personal plugins • Expanded app-server/API docs and schema coverage around managed permission profile requirements

Codex CLI v0.133.0 has been released. 5 feature areas, 6 bug fixes, 2 documentation updates Highlights: • Goals enabled by default with dedicated storage • Remote control runs as foreground command with status reporting • Permission profiles gain inheritance and Windows sandbox integration Complete details in thread ↓

• Preserve image detail in app-server inputs • tui: pass active permission profiles through app commands • app-server-protocol: remove PermissionProfile from API • [codex] Refine Python SDK user-facing docs • Fix Windows doctor npm root probe • core: set permission profiles from snapshots • [codex] Split Python SDK helper logic • Improve goal completion usage reporting • test: construct permission profiles directly • exec-server: support auth-backed remote executor registration • [codex] preserve MCP result meta in McpToolCallItemResult • multiagent: trim model-visible description, cap to 5 models • [1 of 4] tui: route primary settings writes through app server • sdk/python: add first-class login support • [codex] Return TurnResult from Python turn handles • Make multi-agent v2 tool namespace configurable • test: reduce core sandbox policy test setup • [codex] Accept string input for Python turns • Add exec-server websocket keepalive • Densify and version memory summaries • [codex] Add installed-plugin mention API • chore: goal ext skeleton • Make extension lifecycle hooks async • feat: add extension event sink capability • chore: isolate thread goal storage behind GoalStore • chore: goal resumed metrics • chore: make token usage async • Emit goal update events from goal extension tools • tui: keep cleared Fast tier from reappearing after side-thread resume • Support --output-schema for exec resume • Fix TUI stream cleanup after turn errors • Hide ChatGPT usage link for non-OpenAI status • [1 of 2] Optimize TUI startup terminal probes • [codex] Remove legacy shell output formatting paths • nit: read prompt • windows: link MSVC release binaries with static CRT • fix(tui): show shutdown feedback on exit • Fix remote turn diff display roots • Upload rust full CI JUnit reports • Simplify legacy Windows sandbox ACL persistence • fix: harden plugin creator sharing validation • goal: pause continuation loops on usage limits and blockers • Clarify resume hints for renamed threads • TUI: route elicitation responses to request thread • TUI: replay in-progress MCP calls as started • goals: keep pause transitions explicit • feat(tui): handle paste in session picker • feat(app-server): add optional thread_id to experimentalFeature/list Full release notes: github.com/openai/codex/r…

Fixes: • Goal continuations stop at usage limits or repeated blockers instead of looping and burning tokens, with more natural completion response phrasing • Session picker shows renamed threads as `name (thread-id)` format and supports pasted text in search box • Multi-session TUI: in-progress MCP calls stay marked as active during replay, elicitation replies sent to requesting thread • Remote sessions maintain websocket connections and show repo-relative diff paths instead of `/tmp/...` prefixes • Windows: `codex doctor` detects npm-managed installs correctly, MSVC release binaries no longer need separate VC++ runtime DLLs • TUI: immediate shutdown feedback on exit, ChatGPT usage link hidden for non-OpenAI providers, cleared Fast tier stays cleared after side-thread resume Docs: • Python SDK documentation refreshed with new auth flow and turn APIs, clearer setup guidance and simpler examples

Codex CLI v0.132.0 has been released. 6 new features, 15+ fixes, and documentation updates Highlights: • First-class Python SDK authentication with API key, ChatGPT browser, and device flows • Faster TUI startup with batched terminal capability probes • Goal continuations now respect usage limits instead of token burning Complete details in thread ↓

Full changelog: • The TUI now offers richer session controls and display: data-driven service-tier commands, blended token usage, permissions/approval mode, effective workspace roots, and responsive Markdown tables • @ mentions now search files, directories, plugins, and skills in one picker, backed by app-server plugin metadata • Plugin workflows gained marketplace CLI commands, version-aware sharing, share checkout, clearer shared-workspace buckets, and default-enabled plugin hooks • Remote workflows now support daemon-managed codex remote-control, runtime enable/disable APIs, status reads, and registry-backed/configured remote environments • The Python SDK moved to openai-codex / openai_codex, with pinned runtime-generated types, concurrent turn routing, approval modes, and integration coverage • Added codex doctor for support-ready diagnostics across runtime, auth, terminal, network, config, and local state • Fixed several TUI interaction and rendering issues, including URL wrapping, light-mode selection contrast, Shift+Enter in tmux, /review MCP startup status, /side Esc handling, and network approval history text • Hardened Windows sandbox behavior around deny-read rules, scoped write roots, ineffective firewall policy, and PowerShell edge cases • Preserved managed read restrictions during permission escalation and cleaned up workspace-root permission profile resolution • Made app-server and local state startup safer by preserving SQLite data, failing closed when state cannot open, adding recovery paths, and softening optional metadata sync failures • Improved Git and auth reliability by using root worktree hooks consistently, ignoring repo hook/fsmonitor config in helper commands, binding local MCP OAuth callbacks, and revoking superseded login tokens • Reduced remote and Windows cleanup friction with longer exec-server transport timeouts, quieter taskkill cleanup, and non-queued plugin reads Full release notes: github.com/openai/codex/r…

Fixes: • Fixed TUI URL wrapping, light-mode selection contrast, Shift+Enter in tmux, /review MCP startup status, and /side Esc handling • Hardened Windows sandbox deny-read rules, scoped write roots, firewall policy validation, and PowerShell edge case handling • Preserved managed read restrictions during permission escalation and cleaned up workspace-root permission profile resolution • Made app-server startup safer by preserving SQLite data, failing closed when state cannot open, and adding recovery paths • Improved Git reliability using root worktree hooks consistently and ignoring repo hook/fsmonitor config in helper commands • Reduced remote cleanup friction with longer exec-server transport timeouts and quieter taskkill cleanup Docs: • Clarified general Codex product docs scope and updated plugin-creator guidance for simplified local plugin handoff links

Codex CLI v0.131.0 has been released. 150+ changes across features, fixes, and improvements Highlights: • Unified @ mentions for files, directories, plugins, and skills • New codex doctor command for comprehensive diagnostics • Python SDK renamed to openai-codex with approval modes Complete details in thread ↓

• fix PluginListParams test initializer • Show plugin hooks in plugin details • make built-in MCPs first-class runtime servers • Make turn diff tracking operation backed • add account id to feedback uploads • device-key: clean up unused crate • fix: preserve exact turn diffs after partial apply_patch failures • add tool review event schema • Expose plugin share metadata in shareContext • Remove string-keyed MCP tool maps • add top-level remote-control command • app-server: refresh live threads from latest config snapshot • Move tool specs onto handlers • Move thread name edits to ThreadStore • Fix pathless thread summaries • Route ThreadManager rollout path reads through thread store • Grant sandbox users access to desktop runtime bin • Add a Cargo build profile for benchmarking • Fully qualify hash-pins in GitHub Actions • Ensure all mentions of cargo-install are --locked • Disable empty Cargo test targets • Thread pagination APIs and ThreadStore contract • add configurable trace metadata • Apply a Dependabot cooldown of 7 days • Remove remote thread store implementation • Add stdio exec-server client transport • Make environment providers own default selection • Route view_image through selected environments • Add CODEX_HOME environments TOML provider • Send response.processed after remote compaction v2 • plumb protocol-native review timing • Remove skills list extra roots • enable AWS login credentials for Bedrock auth • Update plugin share settings with discoverability • Fix duplicate CLI issue template description • Fix issue template labels • Fix feature request Contributing link • Remove exec research preview banner wording • Omit service_tier from remote /responses/compact requests under API auth Full release notes: github.com/openai/codex/r…

Fixes: • Live app-server threads now pick up config changes without requiring a restart • Turn diffs stay accurate across apply-patch operations, including partial failures that still mutated files • Thread summaries, renames, resume, and fork paths work better through ThreadStore, including threads without local rollout paths • Remote compaction now emits response.processed for v2 streams and avoids sending service_tier on API-key compact requests • Windows sandbox setup now grants sandbox users access to the desktop runtime binary cache • Removed stale "research preview" wording from the codex exec startup banner Docs: • Fixed issue templates so CLI reports keep intended guidance, labels apply correctly, and feature requests link to right contributing docs • Updated install and tooling docs to consistently use `cargo install --locked`

Codex CLI v0.130.0 has been released. 5 new features, 6 fixes, 2 doc updates, 4 internal improvements Highlights: • New remote-control command for headless app-server management • Plugin details now show bundled hooks and sharing metadata • Bedrock auth supports AWS console-login credentials Complete details in thread ↓

Full changelog: • feat: Add workspace plugin sharing APIs • Make missing config clears no-ops • Gate multi-agent v2 tools independently of collab • realtime: rename provider session ids • fix(core): truncate large mcp tool outputs in rollouts • Mark goals feature as experimental • /plugins: remove marketplace • [Extension] Allowlist Chrome Extension in the tool_suggest tool • Remove core protocol dependency [1/2] • Move item event mapping into app-server-protocol • Remove core protocol dependency [2/2] • Stop emitting item/fileChange/outputDelta output delta notifications • [Codex] Add browser use external feature flag • Add /hooks browser for lifecycle hooks • fix: show correct Bedrock runtime endpoint in /status • [codex] Fix elevated Windows sandbox named-pipe access • feat(rollouts): store EventMsg::ApplyPatchEnd in limited history mode • install WFP filters for Windows sandbox setup • [plugin] Add Canva to suggesteable list. • Send external import completion for sync imports • [codex] Migrate thread turns list to thread store • Move plugin out of core. • Make apply_patch streaming parser stateful • fix flaky test falls_back_to_registered_fallback_port_when_default_po… • fix: ignore dangerous project-level config keys • Sync remote installed plugin bundles • fix(tui): set persist_extended_history: false • Bypass review for always-allow MCP tools in auto-review • feat(tui): add vim composer mode • Emit analytics for remote plugin installs • fix(app-server): mark thread/turns/list and exclude_turns as experime… • Alias codex_hooks feature as hooks • execpolicy: unwrap PowerShell -Command wrappers on Windows • fix(exec_policy) heredoc parsing file_redirect • app-server: switch remote control to protocol v3 segmentation • [codex-analytics] centralize thread analytics state • [codex] Improve PR babysitter CI diagnostics and guardrails • Surface admin-disabled remote plugin status • [codex] Remove unused event messages • Make thread store process-scoped • Format multi-day goal durations in the TUI • Color TUI statusline from active theme • Refresh remote plugin cache on auth changes • Add remote plugin skill read API • feat: Track local paths for shared plugins • chore: allow memories edition • feat: ad-hoc instructions • chore: improve remember prompt • feat: seed ad-hoc memory extension instructions • feat: export and replay effective config locks • Move apply-patch file changes into turn items • Enforce `animations = false` for screen readers • Remove no-tool goal continuation suppression • fix: cargo deny • app-server: move transport into dedicated crate • Add /ide context support to the TUI • [codex] Add Codex environment config • deprecate legacy notify • [codex] Migrate loaded thread/read history to ThreadStore • Use selected turn environments for runtime context • fix(tui): restore alt-enter newline alias • fix: reduce ConfigBuilder::build stack usage • /plugins: add marketplace upgrade flow • [codex] Emit image view as core item • Use the 2025-06-18 elicitation capability shape • Clear live hook rows when turns finalize • Surface multi-environment choices in environment context • Prune unused code-mode globals • ci: cross-compile Windows Bazel tests • ci: cross-compile Windows Bazel clippy • Fix custom CA login behind TLS-inspecting proxies • fix(tui): bound startup terminal probes • [tool_suggest] More prompt polishes. • Bound websocket request sends with idle timeout • [codex] Add issue labeler area labels • Remove local docs and specs • [codex] Refactor app-server dispatch result flow • [codex] Emit MCP tool calls as turn items • feat: support template interpolation in multi-agent usage hints • feat: memories mcp v1 • feat: add remote compaction v2 Responses client path • feat: add line offsets to memory read MCP • feat: add max_lines to memories MCP read • feat: paginate MCP memories list • feat: make memories MCP list shallow • feat: paginate memories MCP search results • feat: add context lines to memories MCP ...

Fixes: • `/copy` works better in tmux, Alt+Enter and modified Delete/Backspace keys behave correctly, Windows typing/paste latency reduced • Large paste placeholders and Ctrl+C-stashed drafts survive clear/editor workflows without corrupting draft history • TUI startup improvements: bounded terminal probes, cleared first inline viewport render, honored `animations = false` for screen readers • Linux sandbox startup more reliable across older `bwrap`, slow mount probes, symlink-protected paths, shared `/tmp` setups • Windows sandbox handles named pipes, ConPTY teardown, PowerShell-wrapped allow rules, worktree `safe.directory`, unsafe Git options more reliably • Fixed custom CA login behind TLS-inspecting proxies, Bedrock runtime endpoint reporting, dangerous project config keys, heredoc redirect approval matching, unbounded MCP/hook output growth Docs: • Updated embedded OpenAI Docs sample skill for aligned API-key setup guidance • Documented git commit attribution gating and `config.toml` configuration • Removed local-only planning/spec docs, redirected to maintained external documentation

Codex CLI v0.129.0 has been released. 6 major feature areas, 18 bug fixes, 3 documentation updates Highlights: • Modal Vim editing support in TUI composer • Redesigned workflow resume/fork picker with raw scrollback mode • Enhanced plugin management with workspace sharing and access controls Complete details in thread ↓