Codex changelog

Codex CLI Release: 0.118.0

Tue, 31 Mar 2026 00:00:00 GMT

New Features

Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (#12220)
App-server clients can now start ChatGPT sign-in with a device code flow, which helps when browser callback login is unreliable or unavailable. (#15525)
codex exec now supports the prompt-plus-stdin workflow, so you can pipe input and still pass a separate prompt on the command line. (#15917)
Custom model providers can now fetch and refresh short-lived bearer tokens dynamically, instead of being limited to static credentials from config or environment variables. (#16286, #16287, #16288)

Bug Fixes

Project-local .codex files are now protected even on first creation, closing a gap where the initial write could bypass normal approval checks. (#15067)
Linux sandbox launches are more reliable because Codex once again finds a trusted system bwrap on normal multi-entry PATHs. (#15791, #15973)
The app-server-backed TUI regained several missing workflows: hook notifications replay correctly, /copy and /resume <name> work again, /agent no longer shows stale threads, and the skills picker scrolls past the first page. (#16013, #16021, #16050, #16014, #16109, #16110)
MCP startup is more robust: local servers get a longer startup window, and failed handshakes surface warnings in the TUI again instead of looking like clean startups. (#16080, #16041)
On Windows, apply_patch is less likely to fail because it no longer adds redundant writable roots that could trigger unnecessary ACL churn. (#16030)

Changelog

Full Changelog: rust-v0.117.0...rust-v0.118.0

#15891 [plugins] Polish tool suggest prompts. @mzeng-openai
#15791 fix: resolve bwrap from trusted PATH entry @viyatb-oai
#15900 skills: remove unused skill permission metadata @bolinfest
#15811 app-server: Split transport module @euroelessar
#15067 Protect first-time project .codex creation across Linux and macOS sandboxes @rreichel3-oai
#15903 [codex] import token_data from codex-login directly @bolinfest
#15897 sandboxing: use OsString for SandboxCommand.program @bolinfest
#15910 docs: update AGENTS.md to discourage adding code to codex-core @bolinfest
#15898 chore: move bwrap config helpers into dedicated module @viyatb-oai
#15906 chore: remove skill metadata from command approval payloads @bolinfest
#15909 fix(network-proxy): fail closed on network-proxy DNS lookup errors @viyatb-oai
#14495 Preserve bazel repository cache in github actions @siggisim
#15522 bazel: re-organize bazelrc @sluongng
#15923 codex-tools: extract shared tool schema parsing @bolinfest
#15918 permissions: remove macOS seatbelt extension profiles @bolinfest
#12220 feat(windows-sandbox): add network proxy support @viyatb-oai
#15931 fix: make MACOS_DEFAULT_PREFERENCES_POLICY part of MACOS_SEATBELT_BASE_POLICY @bolinfest
#15933 fix: use matrix.target instead of matrix.os for actions/cache build action @bolinfest
#15928 codex-tools: extract MCP schema adapters @bolinfest
#15948 fix: increase timeout for rust-ci to 45 minutes for now @bolinfest
#15921 [app-server-protocol] introduce generic ClientResponse for app-server-protocol @rhan-oai
#15120 chore: refactor network permissions to use explicit domain and unix socket rule maps @celia-oai
#15525 Add ChatGPT device-code login to app server @daniel-oai
#15876 chore: drop useless stuff @jif-oai
#15954 chore: move pty and windows sandbox to Rust 2024 @bolinfest
#15986 feat: spawn v2 make task name as mandatory @jif-oai
#16000 Use codex-utils-template for login error page @jif-oai
#16001 Use codex-utils-template for review prompts @jif-oai
#15998 Use codex-utils-template for sandbox mode prompts @jif-oai
#15995 Use codex-utils-template for collaboration mode presets @jif-oai
#15996 Use codex-utils-template for search tool descriptions @jif-oai
#15999 Use codex-utils-template for review exit XML @jif-oai
#15985 feat: spawn v2 as inter agent communication @jif-oai
#15973 fix(sandbox): fix bwrap lookup for multi-entry PATH @viyatb-oai
#15944 codex-tools: extract dynamic tool adapters @bolinfest
#15955 ci: add Bazel clippy workflow for codex-rs @bolinfest
#15953 codex-tools: introduce named tool definitions @bolinfest
#16027 fix: fix Windows CI regression introduced in #15999 @bolinfest
#16036 fix: disable plugins in SDK integration tests @bolinfest
#15946 Normalize /mcp tool grouping for hyphenated server names @pakrym-oai
#16035 plugins: Clean up stale curated plugin sync temp dirs and add sync metrics @xl-openai
#15934 Add usage-based business plan types @bwanner-oai
#16031 codex-tools: extract responses API tool models @bolinfest
#16013 Fix tui_app_server hook notification rendering and replay @etraut-openai
#16021 Fix /copy regression in tui_app_server turn completion @etraut-openai
#16044 [mcp] Bypass read-only tool checks. @mzeng-openai
#16030 don't include redundant write roots in apply_patch @iceweasel-oai
#15922 Remove the legacy TUI split @etraut-openai
#15828 [codex] Pin GitHub Actions workflow references @hintz-openai
#16046 ci: run SDK tests with a Bazel-built codex @bolinfest
#16050 Fix tui_app_server resume-by-name lookup regression @etraut-openai
#16014 Fix tui_app_server agent picker closed-state regression @etraut-openai
#16054 chore: clean up argument-comment lint and roll out all-target CI on macOS @bolinfest
#15917 Support Codex CLI stdin piping for codex exec @jliccini
#16057 shell-command: reuse a PowerShell parser process on Windows @bolinfest
#16063 refactor: rewrite argument-comment lint wrappers in Python @bolinfest
#15952 bazel: enable the full Windows gnullvm CI path @bolinfest
#16067 ci: run Bazel clippy on Windows gnullvm @bolinfest
#16071 fix: clean up remaining Windows argument-comment-lint violations @bolinfest
#16072 ci: split fast PR Rust CI from full post-merge Cargo CI @bolinfest
#16074 bazel: add Windows gnullvm stack flags to unit test binaries @bolinfest
#16026 fix(tui): refresh footer on collaboration mode changes @fcoury
#16112 Update PR babysitter skill for review replies and resolution @etraut-openai
#16104 Rename tui_app_server to tui @etraut-openai
#16118 fix: fix comment linter lint violations in Linux-only code @bolinfest
#16106 build: migrate argument-comment-lint to a native Bazel aspect @bolinfest
#16115 Remove remaining custom prompt support @etraut-openai
#16116 Remove the codex-tui app-server originator workaround @etraut-openai
#16047 codex-tools: extract tool spec models @bolinfest
#16128 bazel: refresh the expired macOS SDK pin @bolinfest
#16129 codex-tools: extract configured tool specs @bolinfest
#16130 ci: keep rust-ci-full Windows argument-comment-lint on packaged wrapper @bolinfest
#16126 core: fix stale curated plugin cache refresh races @bolinfest
#16132 codex-tools: extract code mode tool spec adapters @bolinfest
#16136 ci: use BuildBuddy for rust-ci-full non-Windows argument-comment-lint @bolinfest
#16137 exec: make review-policy tests hermetic @bolinfest
#16109 Fix skills picker scrolling in tui app server @etraut-openai
#16138 codex-tools: extract local host tool specs @bolinfest
#16114 Remove TUI voice transcription feature @etraut-openai
#16080 [mcp] Increase MCP startup timeout. @mzeng-openai
#16141 codex-tools: extract collaboration tool specs @bolinfest
#16041 Fix app-server TUI MCP startup warnings regression @etraut-openai
#16110 Fix tui_app_server ghost subagent entries in /agent @etraut-openai
#16154 codex-tools: extract utility tool specs @bolinfest
#16204 [codex] Normalize Windows path in MCP startup snapshot test @etraut-openai
#16010 feat: add mailbox concept for wait @jif-oai
#16237 fix: ma1 @jif-oai
#16193 codex-tools: extract discovery tool specs @bolinfest
#16254 codex-tools: extract discoverable tool models @bolinfest
#16253 fix: close Bazel argument-comment-lint CI gaps @bolinfest
#16225 [codex-analytics] refactor analytics to use reducer architecture @rhan-oai
#16279 Update code mode exec() instructions @andmis
#16120 ci: run Windows argument-comment-lint via native Bazel @bolinfest
#16286 auth: generalize external auth tokens for bearer-only sources @bolinfest
#16287 auth: let AuthManager own external bearer auth @bolinfest
#16288 core: support dynamic auth tokens for model providers @bolinfest

Codex CLI Release: 0.117.0

Thu, 26 Mar 2026 00:00:00 GMT

New Features

Plugins are now a first-class workflow: Codex can sync product-scoped plugins at startup, browse them in /plugins, and install or remove them with clearer auth/setup handling. (#15041, #15042, #15195, #15215, #15217, #15264, #15275, #15342, #15580, #15606, #15802)
Sub-agents now use readable path-based addresses like /root/agent_a, with structured inter-agent messaging and agent listing for multi-agent v2 workflows. (#15313, #15515, #15556, #15570, #15621, #15647)
The /title terminal-title picker now works in both the classic TUI and the app-server TUI, making parallel sessions easier to tell apart. (#12334, #15860)
App-server clients can now send ! shell commands, watch filesystem changes, and connect to remote websocket servers with bearer-token auth. (#14988, #14533, #14847, #14853)
Image workflows got smoother: view_image now returns image URLs for code mode, generated images are reopenable from the TUI, and image-generation history survives resume. (#15072, #15154, #15223)
Prompt history recall now works in the app-server TUI, including across sessions. (#14945)

Bug Fixes

tui_app_server no longer duplicates live reasoning summaries or /review output, and it preserves transcript text instead of dropping it under backpressure. (#15758, #15839, #15759)
ChatGPT login in tui_app_server now opens the local browser again, cancels cleanly on Ctrl+C, and no longer fails startup when you're logged out. (#15672, #15673, #15670)
Early exits now restore terminal state reliably, avoiding broken shell state after quitting; tmux users also get a working queued-message edit shortcut on Shift+Left. (#15671, #15480)
Linux sandboxed tool calls are more reliable on older distributions with older bubblewrap, and Windows restricted-token sandboxing now supports more split-policy carveout layouts. (#15693, #14172)
Remote multi-agent sessions now show agent names instead of raw IDs and recover more gracefully from stale turn-steering races. (#15513, #15714, #15163)
Plugin-backed mentions and product gating now behave more predictably, fixing cases where explicit mentions lost context or plugins were filtered incorrectly. (#15372, #15263, #15279)

Documentation

Expanded the app-server and exec-server docs/schema fixtures to cover exec-server setup, filesystem watch RPCs, realtime transcript notifications, and the new Python thread.run(...) quickstart flow. (#15089, #14533, #15344, #15088)

Chores

The app-server-backed TUI is now enabled by default, and the plugin/app rollout flags have been flipped on in normal builds. (#15661, #15713, #15719, #15820)
Removed the legacy artifact tool and retired the old read_file and grep_files handlers as part of ongoing tool-surface cleanup. (#15851, #15864, #15773, #15775)

Changelog

Full Changelog: rust-v0.116.0...rust-v0.117.0

#14945 feat(tui): restore composer history in app-server tui @fcoury
#15092 fix: try to fix "Stage npm package" step in ci.yml @bolinfest
#15075 Propagate tool errors to code mode @pakrym-oai
#15072 Return image URL from view_image tool @pakrym-oai
#15076 Add a startup deprecation warning for custom prompts @etraut-openai
#15102 Revert "fix: harden plugin feature gating" @xl-openai
#15077 Add final message prefix to realtime handoff output @aibrahim-oai
#13494 Align SQLite feedback logs with feedback formatter @charley-oai
#14888 Feat: reuse persisted model and reasoning effort on thread resume @shijie-oai
#15111 don't add transcript for v2 realtime @aibrahim-oai
#15103 Add update_plan code mode result @pakrym-oai
#15100 Add apply_patch code mode result @pakrym-oai
#15104 fix: harden plugin feature gating @xl-openai
#15089 Add exec-server stub server and protocol docs @starr-openai
#15042 Support featured plugins @alexsong-oai
#15088 Add Python SDK thread.run convenience methods @shaqayeq-oai
#15119 Remove stdio transport from exec server @pakrym-oai
#14632 feat(core, tracing): create turn spans over websockets @owenlin0
#15011 Forward session and turn headers to MCP HTTP requests @nicholasclark-openai
#15118 [hooks] turn_id extension for Stop & UserPromptSubmit @eternal-openai
#14970 Simple directory mentions @canvrno-oai
#14988 Add thread/shellCommand to app server API surface @etraut-openai
#15041 feat: support product-scoped plugins. @xl-openai
#15056 feat: add graph representation of agent network @jif-oai
#15163 fix: case where agent is already closed @jif-oai
#15125 Move environment abstraction into exec server @pakrym-oai
#15180 chore: add metrics for profile @jif-oai
#15175 chore: morpheus does not generate memories @jif-oai
#15185 Revert "Forward session and turn headers to MCP HTTP requests" @nicholasclark-openai
#14867 [hooks] use a user message > developer message for prompt continuation @eternal-openai
#15196 Add experimental exec server URL handling @pakrym-oai
#15198 Publish runnable DotSlash package for argument-comment lint @bolinfest
#15090 Add exec-server process and filesystem RPCs @starr-openai
#15201 Log automated reviewer approval sources distinctly @gabec-openai
#12334 feat(tui): add /title terminal title configuration @yvolovich-cyber
#15206 feat(tracing): tag app-server turn spans with turn_id @owenlin0
#15216 Move terminal module to terminal-detection crate @aibrahim-oai
#15207 add specific tool guidance for Windows destructive commands @iceweasel-oai
#15154 adding full imagepath to tui @won-openai
#15217 feat: expose needs_auth for plugin/read. @xl-openai
#15190 Plumb MCP turn metadata through _meta @nicholasclark-openai
#15220 feat(app-server): add mcpServer/startupStatus/updated notification @owenlin0
#15222 changed save directory to codex_home @won-openai
#15232 Refactor ExecServer filesystem split between local and remote @pakrym-oai
#15021 V8 Bazel Build @cconger
#15150 Move auth code into login crate @aibrahim-oai
#15195 [plugins] Install MCPs when calling plugin/install @mzeng-openai
#15254 core: add a full-buffer exec capture policy @bolinfest
#15263 fix: Distinguish missing and empty plugin products @xl-openai
#15253 Split features into codex-features crate @aibrahim-oai
#15233 Split exec process into local and remote implementations @starr-openai
#15199 Use released DotSlash package for argument-comment lint @bolinfest
#15215 Initial plugins TUI menu - list and read only. tui + tui_app_server @canvrno-oai
#15252 Disable hooks on windows for now @eternal-openai
#15264 feat: Add One-Time Startup Remote Plugin Sync @xl-openai
#15262 Add guardian follow-up reminder @charley-oai
#15223 Feat/restore image generation history @won-openai
#15275 feat: prefer git for curated plugin sync @xl-openai
#14869 Add remote env CI matrix and integration test @pakrym-oai
#15218 Add temporary app-server originator fallback for codex-tui @etraut-openai
#15328 try to fix bazel @jif-oai
#15324 Add remote test skill @pakrym-oai
#15313 feat: change multi-agent to use path-like system instead of uuids @jif-oai
#15244 Pin Python SDK app-server stdio to UTF-8 on Windows @shaqayeq-oai
#15337 Bump aws-lc-rs @cconger
#15203 Add v8-poc consumer of our new built v8 @cconger
#15273 [apps] Use ARC for yolo mode. @mzeng-openai
#15128 chore(core) Remove Feature::PowershellUtf8 @dylan-hurd-oai
#15344 Add realtime transcript notification in v2 @aibrahim-oai
#15285 Gate tui /plugins menu behind flag @canvrno-oai
#15114 fix: allow restricted filesystem profiles to read helper executables @celia-oai
#15231 chore(core) update prefix_rule guidance @dylan-hurd-oai
#15036 fix(core) disable command_might_be_dangerous when unsandboxed @dylan-hurd-oai
#15348 Pass platform param to featured plugins @alexsong-oai
#15276 Code mode on v8 @cconger
#15372 [plugins] Fix plugin explicit mention context management. @mzeng-openai
#15366 chore(context) Include guardian approval context @dylan-hurd-oai
#15390 Remove legacy app-server notification handling from tui_app_server @etraut-openai
#15409 Add JIT entitlement for macosx @cconger
#15414 Remove legacy auth and notification handling from tui_app_server @etraut-openai
#15376 [apps] Improve app tools loading for TUI. @mzeng-openai
#15415 chore(exec_policy) ExecPolicyRequirementScenario tests @dylan-hurd-oai
#15464 Remove smart_approvals alias migration @charley-oai
#15443 core: snapshot fork startup context injection @charley-oai
#15480 Use Shift+Left to edit queued messages in tmux @charley-oai
#15317 nit: guard -> registry @jif-oai
#15338 fix: fall back to vendored bubblewrap when system bwrap lacks --argv0 @bolinfest
#15520 fix: cargo deny @jif-oai
#15279 Label plugins as plugins, and hide skills/apps for given plugin @canvrno-oai
#15259 tui: queue follow-ups during manual /compact @charley-oai
#15515 feat: structured multi-agent output @jif-oai
#15357 Fix: proactive auth refresh to reload guarded disk state first @celia-oai
#15342 Plugins TUI install/uninstall @canvrno-oai
#15540 chore: split sub-agent v2 implementation @jif-oai
#15516 Thread guardian Responses API errors into denial rationale @charley-oai
#15378 feat: support disable skills by name. @xl-openai
#15529 Unify realtime stop handling in TUI @aibrahim-oai
#15557 fix: main tui @jif-oai
#15556 feat: new op type for sub-agents communication @jif-oai
#15211 [hooks] add non-streaming (non-stdin style) shell-only PreToolUse support @eternal-openai
#15560 feat: use serde to differenciate inter agent communication @jif-oai
#15426 chore(core) Add approvals reviewer to UserTurn @dylan-hurd-oai
#15562 [codex] Add rollback context duplication snapshot @charley-oai
#15570 feat: custom watcher for multi-agent v2 @jif-oai
#15575 feat: custom watcher for multi-agent v2 @jif-oai
#15576 feat: custom watcher for multi-agent v2 @jif-oai
#15360 fix: build PATH env var using OsString instead of String @bolinfest
#15239 Add fork snapshot modes @charley-oai
#15554 Add plugin-creator as system skill @alexsong-oai
#15592 Extract landlock helpers into codex-sandboxing @pakrym-oai
#15593 Move macOS sandbox builders into codex-sandboxing @pakrym-oai
#15478 [codex-cli][app-server] Update self-serve business usage limit copy in error returned @dhruvgupta-oai
#15600 move imagegen skill into system skills @dkundel-openai
#15599 Move sandbox policy transforms into codex-sandboxing @pakrym-oai
#15580 Remove filter from plugins/list result @canvrno-oai
#15581 Stabilize macOS CI test timeouts @dylan-hurd-oai
#15613 nit: split v2 wait @jif-oai
#15614 fix: flaky test @jif-oai
#15621 feat: list agents for sub-agent v2 @jif-oai
#15623 nit: optim on list agents @jif-oai
#15549 Allow global network allowlist wildcard @rreichel3-oai
#15424 Finish moving codex exec to app-server @etraut-openai
#15603 Extract sandbox manager and transforms into codex-sandboxing @pakrym-oai
#15484 chore(deps): bump pnpm/action-setup from 4 to 5 @dependabot
#14777 Bump vedantmgoyal9/winget-releaser from 19e706d4c9121098010096f9c495a70a7518b30f to 7bd472be23763def6e16bd06cc8b1cdfab0e2fd5 @dependabot
#15558 [Codex TUI] - Sort /plugins TUI menu by installed status first, alpha second @canvrno-oai
#15598 Refresh mentions list after plugin install/uninstall @canvrno-oai
#15624 feat: disable notifier v2 and start turn on agent interaction @jif-oai
#15605 [codex] Stabilize compact resume and fork snapshot flaky tests @charley-oai
#15658 try to fix git glitch @jif-oai
#15657 try to fix git glitch @jif-oai
#15656 try to fix git glitch @jif-oai
#15655 try to fix git glitch @jif-oai
#15654 try to fix git glitch @jif-oai
#15653 try to fix git glitch @jif-oai
#15652 try to fix git glitch @jif-oai
#15651 try to fix git glitch @jif-oai
#15650 try to fix git glitch @jif-oai
#15606 Pretty plugin labels, preserve plugin app provenance during MCP tool refresh @canvrno-oai
#15579 Increase voice space hold timeout to 1s @aibrahim-oai
#15093 core: Make FileWatcher reusable @euroelessar
#15547 app-server: Add back pressure and batching to command/exec @euroelessar
#15647 feat: communication pattern v2 @jif-oai
#15438 feat: include marketplace loading error in plugin/list @xl-openai
#15545 chore: use access token expiration for proactive auth refresh @celia-oai
#15530 chore: stop app-server auth refresh storms after permanent token failure @celia-oai
#15577 Trim pre-turn context updates during rollback @charley-oai
#15660 Hide numeric prefixes on disabled TUI list rows @canvrno-oai
#15644 fix: keep zsh-fork release assets after removing shell-tool-mcp @bolinfest
#15670 tui_app_server: tolerate missing rate limits while logged out @etraut-openai
#15564 Move git utilities into a dedicated crate @aibrahim-oai
#15669 Clean up TUI /plugins row allignment @canvrno-oai
#15671 tui: always restore the terminal on early exit @etraut-openai
#15672 tui_app_server: open ChatGPT login in the local browser @etraut-openai
#15673 tui_app_server: cancel active login before Ctrl+C exit @etraut-openai
#15676 Tweak /plugin menu wording @canvrno-oai
#15666 Suppress plugin-install MCP OAuth URL console spam @canvrno-oai
#15573 [plugins] Additional gating for tool suggest and apps. @mzeng-openai
#15665 Drop sandbox_permissions from sandbox exec requests @pakrym-oai
#15572 Move string truncation helpers into codex-utils-string @aibrahim-oai
#14533 app-server: add filesystem watch support @euroelessar
#15674 Use delayed shimmer for plugin loading headers in tui and tui_app_server @canvrno-oai
#15689 app-server: Return codex home in initialize response @euroelessar
#15363 fix: keep rmcp-client env vars as OsString @bolinfest
#15700 Remove provenance filtering in $mentions for apps and skills from plugins @canvrno-oai
#15692 Add legal link to TUI /plugin details @canvrno-oai
#15351 Expand ~ in MDM workspace write roots @evawong-oai
#15548 Extract rollout into its own crate @aibrahim-oai
#15699 [codex] Defer fork context injection until first turn @charley-oai
#15601 [app-server] Add a method to override feature flags. @mzeng-openai
#15708 TUI plugin menu cleanup - hide app ID @canvrno-oai
#15677 Fix stale quickstart integration assertion @shaqayeq-oai
#15713 [plugins] Flip the flags. @mzeng-openai
#15719 [plugins] Flip on additional flags. @mzeng-openai
#14172 fix: support split carveouts in windows restricted-token sandbox @viyatb-oai
#15714 Fix stale turn steering fallback in tui_app_server @etraut-openai
#15722 [plugins] Add a flag for tool search. @mzeng-openai
#15734 Update plugin creator skill. @xl-openai
#15766 chore: tty metric @jif-oai
#15519 fix(core): default approval behavior for mcp missing annotations @fouad-openai
#15775 chore: remove grep_files handler @jif-oai
#15710 Use AbsolutePathBuf for cwd state @pakrym-oai
#15778 feat: rendering library v1 @jif-oai
#15758 fix(tui): avoid duplicate live reasoning summaries @fcoury
#15773 chore: remove read_file handler @jif-oai
#15776 feat: add multi-thread log query @jif-oai
#15744 Extract codex-instructions crate @aibrahim-oai
#15339 Add non-interactive resume filter option @nornagon-openai
#15746 Extract codex-utils-plugins crate @aibrahim-oai
#15747 Extract codex-plugin crate @aibrahim-oai
#15748 Extract codex-analytics crate @aibrahim-oai
#15707 Clarify codex_home base for MDM path resolution @evawong-oai
#15513 fix(tui_app_server): fix remote subagent switching and agent names @fcoury
#14856 [apps][tool_suggest] Remove tool_suggest's dependency on tool search. @mzeng-openai
#14847 feat: add websocket auth for app-server @viyatb-oai
#15759 fix(tui_app_server): preserve transcript events under backpressure @fcoury
#15749 Extract codex-core-skills crate @aibrahim-oai
#15798 Avoid duplicate auth refreshes in getAuthStatus @etraut-openai
#15659 Add MCP tool call spans @nicholasclark-openai
#15789 Treat ChatGPT hc plan as Enterprise @arnavdugar-openai
#15802 TUI plugin menu polish @canvrno-oai
#15785 Add cached environment manager for exec server URL @pakrym-oai
#15806 Add ReloadUserConfig to tui_app_server @canvrno-oai
#15810 app-server: Organize app-server to allow more transports @euroelessar
#15800 [mcp] Improve custom MCP elicitation @mzeng-openai
#15531 [hooks] add non-streaming (non-stdin style) shell-only PostToolUse support @eternal-openai
#15820 [plugins] Flip flags on. @mzeng-openai
#15825 Fix quoted command rendering in tui_app_server @etraut-openai
#14853 Wire remote app-server auth through the client @etraut-openai
#15817 Expand home-relative paths on Windows @tiffanycitra
#15693 fix: fix old system bubblewrap compatibility without falling back to vendored bwrap @viyatb-oai
#15784 feat: replace askama by custom lib @jif-oai
#15851 feat: drop artifact tool and feature @jif-oai
#15861 feat: clean spawn v1 @jif-oai
#15691 feat: exec-server prep for unified exec @jif-oai
#15864 chore: drop artifacts lib @jif-oai
#15812 core: remove special execve handling for skill scripts @bolinfest
#15869 fix: flaky @jif-oai
#15877 chore: ask agents md not to play with PIDs @jif-oai
#15866 feat: use ProcessId in exec-server @jif-oai
#15829 [plugins] Update the suggestable plugins list. @mzeng-openai
#15880 fix: max depth agent still has v2 tools @jif-oai
#15839 Fix duplicate /review messages in app-server TUI @etraut-openai
#15805 Add MCP connector metrics @nicholasclark-openai
#15661 Enable tui_app_server feature by default @etraut-openai
#15835 fix: box apply_patch test harness futures @bolinfest
#15796 [codex] Block unsafe git global options from safe allowlist @adrian-openai
#15813 Add wildcard in the middle test coverage @evawong-oai
#15881 fix: root as std agent @jif-oai
#15860 feat(tui): add terminal title support to tui app server @fcoury
#15885 [mcp] Fix legacy_tools @mzeng-openai

Build and install plugins in Codex

Wed, 25 Mar 2026 00:00:00 GMT

# Build and install plugins in Codex Codex now supports **plugins**: installable bundles that package skills, app integrations, and MCP server configuration for reusable workflows. Plugins are available in the Codex app, CLI, and IDE extensions. You can install curated plugins from the plugin directory, or scaffold a local plugin with `@plugin-creator` and test it with workspace-scoped or home-scoped marketplaces. Learn more in the [plugins documentation](/codex/plugins).

#### Plugin structure Every plugin is a folder with a required `.codex-plugin/plugin.json` manifest and optional supporting files: ```text my-plugin/ .codex-plugin/ plugin.json # Required: plugin manifest skills/ # Optional: packaged skills .app.json # Optional: app or connector mappings .mcp.json # Optional: MCP server configuration assets/ # Optional: icons, logos, screenshots ``` #### Install plugins per-user or per-repo You can install plugins for just yourself with `~/.agents/plugins/marketplace.json` and `~/.codex/plugins/`, or for everyone on a project with `.agents/plugins/marketplace.json` and a repo-local plugin directory such as `./plugins/`. #### Curated plugins and local development Codex surfaces curated public plugins in the plugin directory. Codex also ships with the built-in `@plugin-creator` skill to help you scaffold a plugin, add a local marketplace entry, and test it before sharing it with teammates.

Codex app

Tue, 24 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added search for past Codex app threads, including a sidebar shortcut and keyboard shortcuts for jumping to recent threads. - Added a one-click option to archive all local threads in a project. - Synced key settings between the Codex app and the VS Code extension, and added a settings entry point in the extension. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

Codex app

Thu, 19 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added skills to the `@` menu so you can insert them from the composer alongside other mentions. - `Cmd/Ctrl+F` now starts with your current text selection, which makes searching reviews and diffs faster. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

Codex CLI Release: 0.116.0

Thu, 19 Mar 2026 00:00:00 GMT

New Features

App-server TUI now supports device-code ChatGPT sign-in during onboarding and can refresh existing ChatGPT tokens. (#14952)
Plugin setup is smoother: Codex can prompt to install missing plugins or connectors, honor a configured suggestion allowlist, and sync install/uninstall state remotely. (#14896, #15022, #14878)
Added a userpromptsubmit hook so prompts can be blocked or augmented before execution and before they enter history. (#14626)
Realtime sessions now start with recent thread context and are less likely to self-interrupt during audio playback. (#14829, #14827)

Bug Fixes

Fixed a first-turn stall where websocket prewarm could delay turn/start; startup now times out and falls back cleanly. (#14838)
Restored conversation history for remote resume/fork in the app-server TUI and stopped duplicate live transcript output from legacy stream events. (#14930, #14892)
Improved Linux sandbox startup on symlinked checkouts, missing writable roots, and Ubuntu/AppArmor hosts by preferring system bwrap when available. (#14849, #14890, #14963)
Fixed an agent job finalization race and reduced status polling churn for worker threads. (#14843)

Documentation

Refreshed the Python SDK public API docs, examples, and walkthrough around the generated app-server models. (#14446)

Chores

Pinned the setup-zig GitHub Action to an immutable SHA for more reproducible CI. (#14858)

Changelog

Full Changelog: rust-v0.115.0...rust-v0.116.0

#14717 Move TUI on top of app server (parallel code) @etraut-openai
#14665 Use request permission profile in app server @mousseau-oai
#14826 Fixed build failures related to PR 14717 @etraut-openai
#14833 fix(core): fix sanitize name to use '_' everywhere @apanasenko-oai
#14268 memories: exclude AGENTS and skills from stage1 input @andi-oai
#14139 windows-sandbox: add runner IPC foundation for future unified_exec @iceweasel-oai
#14851 Add exit helper to code mode scripts @pakrym-oai
#14828 [stack 1/4] Split realtime websocket methods by version @aibrahim-oai
#14652 Apply argument comment lint across codex-rs @bolinfest
#14837 skill-creator: default new skills to ~/.codex/skills @xl-openai
#14861 Add marketplace display names to plugin/list @xl-openai
#14878 feat: support remote_sync for plugin install/uninstall. @xl-openai
#14830 [stack 2/4] Align main realtime v2 wire and runtime flow @aibrahim-oai
#14886 fix: align marketplace display name with existing interface conventions @xl-openai
#14881 [codex] add Jason as a predefined subagent name @tibo-openai
#14864 fix: tighten up shell arg quoting in GitHub workflows @bolinfest
#14829 [stack 3/4] Add current thread context to realtime startup @aibrahim-oai
#14827 [stack 4/4] Reduce realtime self-interruptions during playback @aibrahim-oai
#14849 fix: canonicalize symlinked Linux sandbox cwd @viyatb-oai
#14892 Fix tui_app_server: ignore duplicate legacy stream events @etraut-openai
#14899 Revert tui code so it does not rely on in-process app server @etraut-openai
#14890 fix(linux-sandbox): ignore missing writable roots @viyatb-oai
#14920 feat: centralize package manager version @jif-oai
#14935 feat: rename to get more explicit close agent @jif-oai
#14843 Fix agent jobs finalization race and reduce status polling churn @daveaitel-openai
#14944 feat: show effective model in spawn agent event @jif-oai
#14838 fix(core): prevent hanging turn/start due to websocket warming issues @owenlin0
#14859 Feat: CXA-1831 Persist latest model and reasoning effort in sqlite @shijie-oai
#14930 fix(tui): restore remote resume and fork history @fcoury
#14955 Fix fuzzy search notification buffering in app-server tests @aibrahim-oai
#14938 feat: add suffix to shell snapshot name @jif-oai
#14959 Fix code mode yield startup race @aibrahim-oai
#14434 generate an internal json schema for RolloutLine @keyz
#14846 use framed IPC for elevated command runner @iceweasel-oai
#14952 Add device-code onboarding and ChatGPT token refresh to app-server TUI @etraut-openai
#14896 [plugins] Support plugin installation elicitation. @mzeng-openai
#14958 Stabilize Windows cmd-based shell test harnesses @aibrahim-oai
#14966 Stabilize permissions popup selection tests @aibrahim-oai
#14968 Stabilize approval matrix write-file command @aibrahim-oai
#14986 temporarily disable private desktop until it works with elevated IPC path @iceweasel-oai
#14983 Rename exec_wait tool to wait @pakrym-oai
#14905 Add auth env observability @ccy-oai
#14931 fix(tui): implement /mcp inventory for tui_app_server @fcoury
#14977 Cleanup skills/remote/xxx endpoints. @xl-openai
#14984 Gate realtime audio interruption logic to v2 @aibrahim-oai
#14902 Unify realtime shutdown in core @aibrahim-oai
#14963 fix(linux-sandbox): prefer system /usr/bin/bwrap when available @viyatb-oai
#14446 Add Python SDK public API and examples @shaqayeq-oai
#14993 feat: Add product-aware plugin policies and clean up manifest naming @xl-openai
#14995 app-server: reject websocket requests with Origin headers @maxj-oai
#14960 Add FS abstraction and use in view_image @pakrym-oai
#14293 fix: honor active permission profiles in sandbox debug @viyatb-oai
#14610 feat: support restricted ReadOnlyAccess in elevated Windows sandbox @viyatb-oai
#13592 Prefer websockets when providers support them @pakrym-oai
#14903 Handle realtime conversation end in the TUI @aibrahim-oai
#14727 Use workspace requirements for guardian prompt override @charley-oai
#14626 [hooks] userpromptsubmit - hook before user's prompt is executed @eternal-openai
#14858 Pin setup-zig GitHub Action to immutable SHA @viyatb-oai
#13702 fix(subagents) share execpolicy by default @dylan-hurd-oai
#15022 [plugins] Support configuration tool suggest allowlist. @mzeng-openai
#14947 feat: adapt artifacts to new packaging and 2.5.6 @jif-oai
#14821 feat: add memory citation to agent message @jif-oai
#15058 nit: disable live memory edition @jif-oai
#14942 Removed remaining core events from tui_app_server @etraut-openai
#15059 chore: disable memory read path for morpheus @jif-oai
#14842 Add notify to code-mode @pakrym-oai
#15020 fix: harden plugin feature gating @xl-openai

Codex app

Wed, 18 Mar 2026 00:00:00 GMT

# Codex app ### New features - You can now fork a conversation from an earlier message, not just the latest turn. - Added slash commands for switching models and reasoning levels, and made slash commands work in the middle of a draft prompt. - Added notifications for plan mode questions so it's easier to notice when Codex needs input. ### Performance improvements and bug fixes - Fixed thread handoff and subagent navigation issues across worktrees and the VS Code extension. - Additional performance improvements and bug fixes.

Introducing GPT-5.4 mini in Codex

Tue, 17 Mar 2026 00:00:00 GMT

# Introducing GPT-5.4 mini in Codex GPT-5.4 mini is now available in Codex as a fast, efficient model for lighter coding tasks and subagents. It improves over GPT-5 mini across coding, reasoning, image understanding, and tool use while running more than 2x faster. In Codex, GPT-5.4 mini uses 30% as much of your included limits as GPT-5.4, so comparable tasks can last about 3.3x longer before you hit those limits. GPT-5.4 mini is available in the Codex app, the CLI, the IDE extension, and Codex on the web. GPT-5.4 mini is also available in the API. Use GPT-5.4 mini for codebase exploration, large-file review, processing supporting documents, and other less reasoning-intensive subagent work. For more complex planning, coordination, and final judgment, start with GPT-5.4. To switch to GPT-5.4 mini: - In the CLI, start a new thread with: ```bash codex --model gpt-5.4-mini ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.4 mini from the model selector in the composer. - In the Codex app, choose GPT-5.4 mini from the model selector in the composer. If you don't see GPT-5.4 mini yet, update the CLI, IDE extension, or Codex app to the latest version.

Codex app

Mon, 16 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added back and forward buttons in the header so you can move between recent screens more quickly. - Added an **Open in Finder**, **Open in Explorer**, or **Open in File Manager** action from thread menus to jump straight to a thread's project folder. ### Performance improvements and bug fixes - Improved resume and thread error toasts with clearer details when something goes wrong. - Additional performance improvements and bug fixes.

Codex CLI Release: 0.115.0

Mon, 16 Mar 2026 00:00:00 GMT

New Features

Supported models can now request full-resolution image inspection through both view_image and codex.emitImage(..., detail: "original"), which helps with precision visual tasks. (#14175)
js_repl now exposes codex.cwd and codex.homeDir, and saved codex.tool(...) / codex.emitImage(...) references keep working across cells. (#14385, #14503)
Realtime websocket sessions gained a dedicated transcription mode, plus v2 handoff support through the codex tool, with a unified [realtime] session config. (#14554, #14556, #14606)
The v2 app-server now exposes filesystem RPCs for file reads, writes, copies, directory operations, and path watching, and there is a new Python SDK for integrating with that API. (#14245, #14435)
Smart Approvals can now route review requests through a guardian subagent in core, app-server, and TUI, reducing repeated setup work on follow-up approvals. (#13860, #14668)
App integrations now use the Responses API tool-search flow, can suggest missing tools, and fall back cleanly when the active model does not support search-based lookup. (#14274, #14287, #14732)

Bug Fixes

Spawned subagents now inherit sandbox and network rules more reliably, including project-profile layering, persisted host approvals, and symlinked writable roots. (#14619, #14650, #14674, #14807)
js_repl no longer hangs when dynamic tool responses contain literal U+2028 or U+2029 characters. (#14421)
The TUI no longer stalls on exit after creating subagents, and interrupting a turn no longer tears down background terminals by default. (#14816, #14602)
codex exec --profile once again preserves profile-scoped settings when starting or resuming a thread. (#14524)
MCP and elicitation flows are more robust, with safer tool-name normalization and preserved tool_params in approval prompts. (#14491, #14605, #14769)
The local network proxy now serves CONNECT traffic as explicit HTTP/1, improving compatibility with HTTP proxy clients. (#14395)

Chores

The subagent wait tool is now consistently named wait_agent, aligning it with spawn_agent and send_input. (#14631)

Changelog

Full Changelog: rust-v0.114.0...rust-v0.115.0

#14395 fix(network-proxy): serve HTTP proxy listener as HTTP/1 @viyatb-oai
#14385 Add js_repl cwd and homeDir helpers @fjord-oai
#14376 Keep agent-switch word-motion keys out of draft editing @joshka-oai
#14175 Let models opt into original image detail @fjord-oai
#14382 check for large binaries in CI @owenlin0
#14392 chore(app-server): stop emitting codex/event/ notifications @owenlin0
#14274 feat: search_tool migrate to bring you own tool of Responses API @apanasenko-oai
#14174 refactor: centralize filesystem permissions precedence @viyatb-oai
#14394 chore(app-server): delete unused rpc methods from v1.rs @owenlin0
#14171 fix: align core approvals with split sandbox policies @viyatb-oai
#14410 Make collab model metadata accurate on completion @aibrahim-oai
#14387 feat(app-server): propagate traces across tasks and core ops @owenlin0
#14407 chore: use AVAILABLE and ON_INSTALL as default plugin install and auth policies @sayan-oai
#14287 [apps] Add tool_suggest tool. @mzeng-openai
#14432 Clarify spawn agent authorization @aibrahim-oai
#14295 Support waiting for code_mode sessions @pakrym-oai
#14427 feat: refactor on openai-curated plugins. @xl-openai
#13996 refactor: make bubblewrap the default Linux sandbox @viyatb-oai
#14440 fix: follow up on linux sandbox review nits @viyatb-oai
#14431 Handle pre-approved permissions in zsh fork @mousseau-oai
#14403 [elicitation] User-friendly tool call messages. @mzeng-openai
#14429 Use granted permissions when invoking apply_patch @mousseau-oai
#14471 Updated out-of-date tip about availability on free and go plans @etraut-openai
#14444 fix: move inline codex-rs/core unit tests into sibling files @bolinfest
#14437 Dispatch tools when code mode is not awaited directly @pakrym-oai
#14435 Add Python app-server SDK @shaqayeq-oai
#14473 fix(cli): support legacy use_linux_sandbox_bwrap flag @viyatb-oai
#13882 Fix stdio-to-uds peer-close flake @aibrahim-oai
#14476 Move code mode tool files under tools/code_mode and split functionality @pakrym-oai
#14475 rename spawn_csv feature flag to enable_fanout @daveaitel-openai
#14173 fix: preserve split filesystem semantics in linux sandbox @viyatb-oai
#14480 Cleanup code_mode tool descriptions @pakrym-oai
#14488 Handle malformed agent role definitions nonfatally @gabec-openai
#14398 Do not allow unified_exec for sandboxed scenarios on Windows @iceweasel-oai
#14419 use scopes_supported for OAuth when present on MCP servers @jgershen-oai
#14484 Add default code-mode yield timeout @pakrym-oai
#14494 Add parallel tool call test @pakrym-oai
#14478 chore(app-server): stop exporting EventMsg schemas @owenlin0
#14490 fix turn_start_jsonrpc_span_parents_core_turn_spans flakiness @owenlin0
#14496 Reuse tool runtime for code mode worker @pakrym-oai
#14421 Fix js_repl hangs on U+2028/U+2029 dynamic tool responses @aaronl-openai
#14505 Skip nested tool call parallel test on Windows @pakrym-oai
#14491 Fix MCP tool calling @pakrym-oai
#14493 memories: focus write prompts on user preferences @andi-oai
#14510 Rename exec session IDs to cell IDs @pakrym-oai
#14500 Update tool search prompts @mzeng-openai
#14426 Decouple request permissions feature and tool @mousseau-oai
#14503 Persist js_repl codex helpers across cells @fjord-oai
#14517 Expose code-mode tools through globals @pakrym-oai
#14502 feat(search_tool): gate search_tool on model supports_search_tool field @apanasenko-oai
#14521 Reapply "Pass more params to compaction" (#14298) @rasmusrygaard
#14524 Fix codex exec --profile handling @etraut-openai
#14516 Rename reject approval policy to granular @mousseau-oai
#14445 feat: add plugin/read. @xl-openai
#14178 login: add custom CA support for login flows @joshka-oai
#14535 Split multi-agent handlers per tool @pakrym-oai
#13329 [js_repl] Hard-stop active js_repl execs on explicit user interrupts @aaronl-openai
#14239 client: extend custom CA handling across HTTPS and websocket clients @joshka-oai
#14536 Add typed multi-agent tool outputs @pakrym-oai
#14514 fix: reopen writable linux carveouts under denied parents @viyatb-oai
#14531 Add plugin usage telemetry @alexsong-oai
#14511 code_mode: Move exec params from runtime declarations to @pragma @cconger
#14504 Refactor cloud requirements error and surface in JSON-RPC error @alexsong-oai
#14537 Add realtime v2 event parser behind feature flag @aibrahim-oai
#14529 Simplify permissions available in request permissions tool @mousseau-oai
#14522 feat: support skill-scoped managed network domain overrides in skill config @celia-oai
#14554 Add codex tool support for realtime v2 handoff @aibrahim-oai
#14556 Add realtime transcription mode for websocket sessions @aibrahim-oai
#14518 Add diagnostics for read_only_unless_trusted timeout flake @aibrahim-oai
#14603 Split multi-agent handler into dedicated files @pakrym-oai
#14526 code mode: single line tool declarations @pakrym-oai
#14400 Use a private desktop for Windows sandbox instead of Winsta0\Default @iceweasel-oai
#14558 sending back imagaegencall response back to responseapi @won-openai
#14553 Improve granular approval policy prompt @mousseau-oai
#14541 chore: clarify plugin + app copy in model instructions @sayan-oai
#14542 [bazel] Bump up cc and rust toolchains @zbarsky-openai
#14512 Start TUI on embedded app server @etraut-openai
#14606 Unify realtime v1/v2 session config @aibrahim-oai
#14527 app-server: Add platform os and family to init response @euroelessar
#14618 Use subagents naming in the TUI @aibrahim-oai
#14304 Override local apps settings with requirements.toml settings @canvrno-oai
#14479 feat(app-server, core): add more spans @owenlin0
#13644 fix: preserve zsh-fork escalation fds across unified-exec spawn paths @bolinfest
#14617 Add code_mode_only feature @pakrym-oai
#13201 Slash copy osc52 wsl support @won-openai
#14631 Rename multi-agent wait tool to wait_agent @aibrahim-oai
#14622 Stabilize multi-agent feature flag @aibrahim-oai
#14245 app-server: add v2 filesystem APIs @euroelessar
#14605 Normalize MCP tool names to code-mode safe form @pakrym-oai
#14637 Fix wait_agent expectations in core tests @charley-oai
#13860 Add Smart Approvals guardian review across core, app-server, and TUI @charley-oai
#14639 Fix stale create_wait_tool reference @charley-oai
#14532 [hooks] stop continuation & stop_hook_active mechanics @eternal-openai
#14635 Fix realtime transcription session.update tools payload @aibrahim-oai
#14636 Use parser-specific realtime voice enum @aibrahim-oai
#14633 refactor: make unified-exec zsh-fork state explicit @bolinfest
#12031 Add openai_base_url config override for built-in provider @etraut-openai
#14645 Fix Windows CI assertions for guardian and Smart Approvals @aibrahim-oai
#14616 Fix turn context reconstruction after backtracking @charley-oai
#14619 fix: persist future network host approvals across sessions @viyatb-oai
#14650 fix: sync split sandbox policies for spawned subagents @viyatb-oai
#14609 move plugin/skill instructions into dev msg and reorder @sayan-oai
#12024 Enforce errors on overriding built-in model providers @etraut-openai
#14646 Refresh Python SDK generated types @sayan-oai
#14649 make defaultPrompt an array, keep backcompat @sayan-oai
#14501 dynamic tool calls: add param exposeToContext to optionally hide tool @cconger
#14651 Add argument-comment Dylint runner @bolinfest
#14674 fix: fix symlinked writable roots in sandbox policies @viyatb-oai
#14611 Add auth 401 recovery observability to client bug reports @ccy-oai
#14647 [apps] Add tool call meta. @mzeng-openai
#14732 [apps] Improve search tool fallback. @mzeng-openai
#14602 Preserve background terminals on interrupt and rename cleanup command to /stop @friel-openai
#14668 Reuse guardian session across approvals @charley-oai
#14769 fix(core): preserve tool_params for elicitations @mzeng-openai
#14807 fix: sub-agent role when using profiles @jif-oai
#14806 feat: improve skills cache key to take into account config layering @jif-oai
#13850 feat: make interrupt state not final for multi-agents @jif-oai
#14816 fix: tui freeze when sub-agents are present @jif-oai

Codex app

Thu, 12 Mar 2026 00:00:00 GMT

# Codex app ### Themes Change the Codex app appearance in **Settings** by choosing a base theme, adjusting accent, background, and foreground colors, and changing the UI and code fonts. You can also share your custom theme with friends. ### Revamped Automations You can now choose whether automations run locally or on a worktree, define custom reasoning levels and models, and use templates to find inspiration for new automations. ### Performance improvements and bug fixes Various bug fixes and performance improvements.

Codex app

Wed, 11 Mar 2026 00:00:00 GMT

# Codex app ### New features - Codex can now read the integrated terminal for the current thread, so it can check the status of a running development server or refer back to failed build output while it works with you. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

Codex CLI Release: 0.114.0

Wed, 11 Mar 2026 00:00:00 GMT

New Features

Added an experimental code mode for more isolated coding workflows. (#13418)
Added an experimental hooks engine with SessionStart and Stop hook events. (#13276)
WebSocket app-server deployments now expose GET /readyz and GET /healthz on the same listener for easier health checks. (#13782)
Added a config switch to disable bundled system skills entirely. (#13792)
Handoffs now carry realtime transcript context, which improves continuity when work is transferred between turns. (#14132)
Improved the $ mention picker by clearly labeling Skills, Apps, and Plugins, and by surfacing plugins first. (#14147, #14163)

Bug Fixes

Fixed a Linux tmux crash caused by concurrent user-shell lookups. (#13900)
Fixed apps being enabled in unsupported sessions by tightening the enablement check. (#14011)
Fixed reopened threads getting stuck as in-progress after quitting mid-run and then resuming later. (#14125)
Fixed permission handling so legacy workspace-write behavior is preserved and newer permission profiles degrade more safely on older builds. (#13957, #14107)
Fixed approval flows so granted permissions persist across turns, work with reject-style configs, and are honored by apply_patch. (#14009, #14055, #14118, #14165)

Chores

Laid the groundwork for the Python SDK’s generated v2 schema types and pinned platform-specific runtime binaries. (#13953)

Changelog

Full Changelog: rust-v0.113.0...rust-v0.114.0

#14009 feat(core) Persist request_permission data across turns @dylan-hurd-oai
#14136 fix(core): use dedicated types for responsesapi web search tool config @owenlin0
#13782 codex-rs/app-server: add health endpoints for --listen websocket server @maxj-oai
#14055 fix(core) RequestPermissions + ApplyPatch @dylan-hurd-oai
#14118 feat(approvals) RejectConfig for request_permissions @dylan-hurd-oai
#13957 fix(protocol): preserve legacy workspace-write semantics @viyatb-oai
#14107 fix: keep permissions profiles forward compatible @viyatb-oai
#14147 make dollar-mention always clarify item category (skill, app, plugin) @sayan-oai
#14152 Refactor tool output into trait implementations @pakrym-oai
#14163 sort plugins first in menu @sayan-oai
#13418 Add code_mode experimental feature @pakrym-oai
#13276 start of hooks engine @eternal-openai
#14135 tui: only show fast status for gpt-5.4 @pash-openai
#14157 Enforce single tool output type in codex handlers @pakrym-oai
#14165 fix(core) default RejectConfig.request_permissions @dylan-hurd-oai
#14167 Export tools module into code mode runner @pakrym-oai
#13792 feat: support disabling bundled system skills @xl-openai
#14169 Move exec command truncation into ExecCommandToolOutput @pakrym-oai
#14011 [apps] Fix apps enablement condition. @mzeng-openai
#14000 Delay pending cleanup until task aborts @aibrahim-oai
#12296 Implemented thread-level atomic elicitation counter for stopwatch pausing @cconger
#14132 Use realtime transcript for handoff context @aibrahim-oai
#13879 Stabilize incomplete SSE retry test @aibrahim-oai
#14184 Fix unified exec test output assertion @aibrahim-oai
#14002 Stabilize websocket test server binding @aibrahim-oai
#13939 Stabilize app-server notify initialize test @aibrahim-oai
#13953 python-sdk: generated type foundation (all v2 schemas) @shaqayeq-oai
#13603 Fix release-mode integration test compiler failure @etraut-openai
#13900 Fix Linux tmux segfault in user shell lookup @etraut-openai
#13901 Log ChatGPT user ID for feedback tags @etraut-openai
#14183 Expose strongly-typed result for exec_command @pakrym-oai
#14003 Stabilize split PTY output on Windows @aibrahim-oai
#14229 Reuse McpToolOutput in McpHandler @pakrym-oai
#14125 Mark incomplete resumed turns interrupted when idle @guinness-oai

Codex CLI Release: 0.113.0

Tue, 10 Mar 2026 00:00:00 GMT

New Features

Added a built-in request_permissions tool so running turns can request additional permissions at runtime, with new TUI rendering for those approval calls. (#13092, #14004)
Expanded plugin workflows with curated marketplace discovery, richer plugin/list metadata, install-time auth checks, and a plugin/uninstall endpoint. (#13712, #13540, #13685, #14111)
Upgraded app-server command execution with streaming stdin/stdout/stderr plus TTY/PTY support, and wired exec to the new in-process app server path. (#13640, #14005)
Web search settings now support full tool configuration (for example filters and location), not just on/off. (#13675)
Added the new permission-profile config language and split filesystem/network sandbox policy plumbing for more precise policy control. (#13434, #13439, #13440, #13448, #13449, #13453)
Image generation now saves output files into the current working directory. (#13607)

Bug Fixes

Fixed auth error handling for cloud requirements fetch so 401s trigger the normal auth-recovery messaging instead of a generic workspace-config failure. (#14049)
Fixed trust bootstrap to avoid running git commands before project trust is established. (#13804)
Fixed Windows execution edge cases, including incorrect PTY TerminateProcess success handling and stricter sandbox startup cwd validation. (#13989, #13833, #13742)
Fixed plugin startup behavior so curated plugins are loaded in TUI sessions as expected. (#14050)
Hardened network proxy policy parsing by rejecting global wildcard (*) domains while preserving scoped wildcard support. (#13789)
Fixed approval payload compatibility for macOS automation permissions by accepting both supported input shapes. (#13683)

Documentation

Clarified js_repl guidance for persistent bindings and redeclaration recovery to reduce avoidable REPL errors. (#13803)

Chores

Reduced log/storage overhead by moving logs to a dedicated SQLite DB, adding timestamps to feedback logs, pruning old data, and tightening retention/row limits. (#13645, #13688, #13734, #13763, #13772, #13781)
Improved Windows distribution automation by publishing CLI releases to winget. (#12943)

Changelog

Full Changelog: rust-v0.112.0...rust-v0.113.0

#13626 feat(otel): safe tracing @owenlin0
#13560 Refine realtime startup context formatting @aibrahim-oai
#13615 Replay thread rollback from rollout history @aibrahim-oai
#13642 fix(tui): clean up pending steer preview wrapping @charley-oai
#13645 Add timestamped SQLite /feedback logs without schema changes @charley-oai
#13654 tui: sort resume picker by last updated time @charley-oai
#13540 support plugin/list. @xl-openai
#13677 chore: remove unused legacy macOS permission types @celia-oai
#13683 fix: accept two macOS automation input shapes for approval payload compatibility @celia-oai
#13687 refactor: remove proxy admin endpoint @viyatb-oai
#13669 copy current exe to CODEX_HOME/.sandbox-bin for apply_patch @iceweasel-oai
#11874 fix(tui) remove config check for trusted setting @dylan-hurd-oai
#13685 check app auth in plugin/install @sayan-oai
#13697 change sound @aibrahim-oai
#13607 Enabling CWD Saving for Image-Gen @won-openai
#13621 [elicitations] Switch to use MCP style elicitation payload for mcp tool approvals. @mzeng-openai
#13619 feat: status line with real data @jif-oai
#13734 feat: prune old memories in DB @jif-oai
#13688 Add timestamps to feedback log lines @etraut-openai
#13742 fix: windows normalization @jif-oai
#13514 [rmcp-client] Recover from streamable HTTP 404 sessions @caseychow-oai
#13750 feat: drop sqlite db feature flag @jif-oai
#13753 feat: drop discrepency metrics @jif-oai
#13763 feat: limit number of rows per log @jif-oai
#13703 Clarify sandbox permission override helper semantics @charley-oai
#13770 fix(app-server): fix turn_start_shell_zsh_fork_executes_command_v2 flake @owenlin0
#13630 feat(otel, core): record turn TTFT and TTFM metrics in codex-core @owenlin0
#13674 app-server: Emit thread/name/updated event globally @euroelessar
#13772 Move sqlite logs to a dedicated database @charley-oai
#13620 chore: improve DB flushing @jif-oai
#13711 feat: structured plugin parsing @sayan-oai
#13781 Reduce SQLite log retention to 10 days @charley-oai
#13780 fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file @bolinfest
#13783 fix: move unit tests in codex-rs/core/src/codex.rs into their own file @bolinfest
#13787 fix bazel build @bolinfest
#13789 fix: reject global wildcard network proxy domains @viyatb-oai
#12943 Codex/winget auto update @iceweasel-oai
#13800 chore(otel): reorganize codex-otel crate @owenlin0
#13797 feat: add auth login diagnostics @joshka-oai
#13695 utils/pty: add streaming spawn and terminal sizing primitives @euroelessar
#13803 Clarify js_repl binding reuse guidance @fjord-oai
#13810 docs: remove auth login logging plan @joshka-oai
#13434 config: add initial support for the new permission profile config language in config.toml @bolinfest
#13796 Add realtime startup context override @aibrahim-oai
#13814 fix: include libcap-dev dependency when creating a devcontainer for building Codex @bolinfest
#13808 chore(otel): rename OtelManager to SessionTelemetry @owenlin0
#13712 feat: Add curated plugin marketplace + Metadata Cleanup. @xl-openai
#13791 fix(core): skip exec approval for permissionless skill scripts @celia-oai
#13675 Allow full web search tool config @rm-openai
#13640 app-server: Add streaming and tty/pty capabilities to command/exec @euroelessar
#13819 feat(app-server-protocol): address naming conflicts in json schema exporter @owenlin0
#13804 fix: avoid invoking git before project trust is established @viyatb-oai
#12752 fix: support managed network allowlist controls @viyatb-oai
#13439 sandboxing: plumb split sandbox policies through runtime @bolinfest
#13440 protocol: derive effective file access from filesystem policies @bolinfest
#13816 fix(core): respect reject policy by approval source for skill scripts @celia-oai
#13833 app-server: require absolute cwd for windowsSandbox/setupStart @iceweasel-oai
#13670 Add Fast mode status-line indicator @etraut-openai
#13445 safety: honor filesystem policy carveouts in apply_patch @bolinfest
#13771 feat: simplify DB further @jif-oai
#13692 Add guardian approval MVP @charley-oai
#13851 tmp: drop artifact skills @jif-oai
#13910 fix(core) rm guardian snapshot test @dylan-hurd-oai
#13911 fix(ci) fix guardian ci @dylan-hurd-oai
#13896 Fix TUI context window display before first TokenCount @etraut-openai
#13448 seatbelt: honor split filesystem sandbox policies @bolinfest
#13921 chore: use @plugin instead of $plugin for plaintext mentions @sayan-oai
#13807 [elicitations] Support always allow option for mcp tool calls. @mzeng-openai
#13449 linux-sandbox: plumb split sandbox policies through helper @bolinfest
#13451 sandboxing: preserve denied paths when widening permissions @bolinfest
#13452 protocol: keep root carveouts sandboxed @bolinfest
#13874 Stabilize abort task follow-up handling @aibrahim-oai
#13453 linux-sandbox: honor split filesystem policies in bwrap @bolinfest
#13989 Fix inverted Windows PTY TerminateProcess handling @etraut-openai
#13912 fix(ci): restore guardian coverage and bazel unit tests @charley-oai
#13877 Stabilize shell serialization tests @aibrahim-oai
#13839 [app-server] Support hot-reload user config when batch writing config. @mzeng-openai
#14005 Add in-process app server and wire up exec to use it @etraut-openai
#13929 app-server: include experimental skill metadata in exec approval requests @celia-oai
#14014 fix(core) patch otel test @dylan-hurd-oai
#13841 tui: clarify pending steer follow-ups @charley-oai
#13092 Add request permissions tool @mousseau-oai
#14027 fix(bazel) add missing app-server-client BUILD.bazel @dylan-hurd-oai
#14004 feat(tui) render request_permissions calls @dylan-hurd-oai
#14052 Stabilize app list update ordering test @aibrahim-oai
#13897 guardian initial feedback / tweaks @charley-oai
#13884 Reduce app-server test timeout pressure @aibrahim-oai
#13872 Stabilize zsh fork app-server tests @aibrahim-oai
#13881 Stabilize RMCP pid file cleanup test @aibrahim-oai
#13883 Stabilize PTY Python REPL test @aibrahim-oai
#14058 Stabilize plan item app-server tests @aibrahim-oai
#13943 Order websocket initialize after handshake @aibrahim-oai
#13885 Stabilize thread resume replay tests @aibrahim-oai
#13878 Serialize shell snapshot stdin test @aibrahim-oai
#13876 Stabilize realtime startup context tests @aibrahim-oai
#14050 fix(plugin): Also load curated plugins for TUI. @xl-openai
#14049 fix: properly handle 401 error in clound requirement fetch. @xl-openai
#14101 Stabilize shell approval MCP test @aibrahim-oai
#14102 Stabilize interrupted task approval cleanup @aibrahim-oai
#14103 Stabilize guardian approval coverage @aibrahim-oai
#14060 Stabilize resumed rollout messages @aibrahim-oai
#14114 fix(ci) Faster shell_command::unicode_output test @dylan-hurd-oai
#14111 chore: plugin/uninstall endpoint @sayan-oai
#14117 feat(otel): Centralize OTEL metric names and shared tag builders @owenlin0
#13880 Stabilize RMCP streamable HTTP readiness tests @aibrahim-oai
#14123 pass on save info to model + ui tweaks @won-openai
#13886 Stabilize protocol schema fixture generation @aibrahim-oai

Codex CLI Release: 0.112.0

Sun, 08 Mar 2026 00:00:00 GMT

New Features

Added @plugin mentions so users can reference plugins directly in chat and auto-include their associated MCP/app/skill context. (#13510)
Added a new model-selection surface update so the latest model catalog changes are surfaced in the TUI picker flow. (#13617)
Merged executable permission profiles into per-turn sandbox policy for zsh-fork skill execution, allowing safer, additive privilege handling for tool runs. (#13496)

Bug Fixes

Fixed JS REPL state handling so previously-initialized bindings persist after a failed cell, reducing brittle restarts during iterative sessions. (#13482)
Treated SIGTERM like Ctrl-C for graceful app-server websocket shutdown instead of abrupt termination behavior. (#13594)
Hardened js_repl image emission to accept only data: URLs, preventing external URL forwarding through emitImage. (#13507)
Ensured Linux bubblewrap sandbox runs always unshare the user namespace to keep isolation consistent even for root-owned invocations. (#13624)
Improved macOS sandbox network and unix-socket handling in Seatbelt, improving reliability for constrained subprocess environments. (#12702)
Surfaced feedback/diagnostics earlier in the workflow so connectivity and diagnostics are visible before later steps. (#13604)

Documentation

Clarified js_repl image guidance (emission and encoding semantics), including clearer usage around repeated emitImage calls. (#13639)

Chores

Fixed a small codespell warning in the TUI theme picker path. (#13605)

Changelog

Full Changelog: rust-v0.111.0...rust-v0.112.0

#13594 treat SIGTERM like ctrl-c for graceful shutdown @maxj-oai
#13605 Fix codespell warning about pre-selects @fjord-oai
#13482 Persist initialized js_repl bindings after failed cells @fjord-oai
#13604 [diagnostics] show diagnostics earlier in workflow @rhan-oai
#13496 feat: merge skill permission profiles into the turn sandbox for zsh-fork execs @celia-oai
#13507 Harden js_repl emitImage to accept only data: URLs @fjord-oai
#13602 feat(core): persist trace_id for turns in RolloutItem::TurnContext @owenlin0
#13624 fix(linux-sandbox): always unshare bwrap userns @viyatb-oai
#12702 Improve macOS Seatbelt network and unix socket handling @viyatb-oai
#13639 Clarify js_repl image emission and encoding guidance @fjord-oai
#13510 add @plugin mentions @sayan-oai
#13499 core/protocol: add structured macOS additional permissions and merge them into sandbox execution @celia-oai
#13617 Update models.json @aibrahim-oai

Codex app

Thu, 05 Mar 2026 00:00:00 GMT

# Codex app ### Performance improvements and bug fixes - Improved remote connections with clearer connection errors, better status updates, and clearer host labels in thread and settings views. - Fixed copy and paste shortcuts in the integrated terminal on Windows. - Fixed an issue where archived pinned threads could reappear in the sidebar. - Fixed an issue where repeated `codex://new` links could stop prefilling a new conversation when the app was already open. - Additional performance improvements and bug fixes.

Introducing GPT-5.4 in Codex

Thu, 05 Mar 2026 00:00:00 GMT

# Introducing GPT-5.4 in Codex GPT-5.4 is now available in Codex as OpenAI's most capable and efficient frontier model for professional work. It combines recent advances in reasoning, coding, and agentic workflows in one model, and it's the recommended choice for most Codex tasks. In Codex, GPT-5.4 is the first general-purpose model with native computer-use capabilities. GPT-5.4 in Codex includes experimental support for the 1M context window. It supports complex workflows across applications and long-horizon tasks, with stronger tool use and tool search that help agents find and use the right tools more efficiently. GPT-5.4 is available everywhere you can use Codex: the Codex app, the CLI, the IDE extension, and Codex Cloud on the web. GPT-5.4 is also available in the API. To switch to GPT-5.4: - In the CLI, start a new thread with: ```bash codex --model gpt-5.4 ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.4 from the model selector in the composer. - In the Codex app, choose GPT-5.4 from the model selector in the composer. If you don't see GPT-5.4 yet, update the CLI, IDE extension, or Codex app to the latest version.

Codex app

Wed, 04 Mar 2026 00:00:00 GMT

# Codex app #### Codex app for Windows The Codex app is now available on Windows. The app gives you one interface for working across projects, running parallel agent threads, and reviewing results in one place. The Codex app runs natively on Windows using PowerShell and a native Windows sandbox for bounded permissions, so you can use Codex on Windows without moving your workflow into WSL, onto a virtual machine, or by deactivating the sandbox. The Windows app includes the same core features as the rest of the Codex app: - [Skills](/codex/app/features#skills-support) to discover and extend Codex capabilities. - [Automations](/codex/app/automations) to run work in the background. - [Worktrees](/codex/app/worktrees) to handle independent tasks in the same project. If you prefer to develop in WSL, you can also switch the Codex agent and the integrated terminal to run there. Download it from the [Microsoft Store](https://apps.microsoft.com/detail/9plm9xgg6vks?hl=en-US&gl=US) and sign in with your ChatGPT account or an API key. For setup and configuration details, see [Setup](/codex/app/windows#setup), [Use WSL with the Codex app](/codex/app/windows#use-wsl-with-the-codex-app), and [Customize the app for your development setup](/codex/app/windows#customize-the-app-for-your-development-setup).

Codex app

Tue, 03 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added a Worktrees setting to turn automatic cleanup of Codex-managed worktrees on or off. - Added Handoff support for moving a thread between Local and [Worktree](/codex/app/worktrees). - Added an explicit English option in the language menu. ### Performance improvements and bug fixes - Improved GitHub and pull request workflows. - Improved approval prompts and app connection sign-in flows. - Additional performance improvements and bug fixes.

Codex app

Sat, 28 Feb 2026 00:00:00 GMT

# Codex app ### Performance improvements and bug fixes - Fixed a regression where conversation and task views could stop updating while Codex was streaming a response. - Additional performance improvements and bug fixes.

Codex app

Fri, 27 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added pull request status badges in task rows and PR buttons, including draft, open, merged, and closed states. - Added a Worktrees setting to choose how many Codex-managed worktrees to keep before older ones are cleaned up. ### Performance improvements and bug fixes - Improved scrolling and navigation in long conversations and code review, including fixes for thread jumpiness, sidebar jitter, and diff scrolling. - Improved app startup reliability and keyboard zoom behavior. - Additional performance improvements and bug fixes.

Codex app

Thu, 26 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added new MCP shortcuts in the composer, including install keyword suggestions and an MCP server submenu in **Add context**. - Added support for `@mentions` and skill mentions in inline review comments. ### Performance improvements and bug fixes - Improved rendering of MCP tool calls and Mermaid diagram error handling. - Fixed an issue where stopped terminal commands could continue appearing as running. - Additional performance improvements and bug fixes.

Codex app

Tue, 17 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added drag-and-drop support to reorder queued messages. - Added a warning when the selected model is downgraded. ### Improvements and bug fixes - Improved file workflows with fuzzy file search and better attachment recovery after restart. - Additional performance improvements and bug fixes.

Codex app

Thu, 12 Feb 2026 00:00:00 GMT

# Codex app ### New features - Support for GPT-5.3-Codex-Spark - Added conversation forking - Added [floating pop-out window](/codex/app/features#floating-pop-out-window) to take a conversation with you ### Bug fixes - Improved performance and bug fixes Alpha testing for the Codex app on Windows is also starting. [Sign up here](https://openai.com/form/codex-app/) to be a potential alpha tester.

Introducing GPT-5.3-Codex-Spark

Thu, 12 Feb 2026 00:00:00 GMT

# Introducing GPT-5.3-Codex-Spark [Today, we're releasing a research preview of GPT-5.3-Codex-Spark](https://openai.com/index/introducing-gpt-5-3-codex-spark/), a smaller version of GPT-5.3-Codex and our first model designed for real-time coding. Codex-Spark is optimized to feel near-instant, delivering more than 1000 tokens per second while remaining highly capable for real-world coding tasks. Codex-Spark is available in research preview for ChatGPT Pro users in the latest Codex app, CLI, and IDE extension. This release also marks the first milestone in our partnership with Cerebras. At launch, Codex-Spark is text-only with a 128k context window. During the research preview, usage has separate model-specific limits and doesn't count against standard Codex limits. During high demand, access may slow down or queue while we balance reliability across users. To switch to GPT-5.3-Codex-Spark: - In the CLI, start a new thread with: ```bash codex --model gpt-5.3-codex-spark ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.3-Codex-Spark from the model selector in the composer. - In the Codex app, choose GPT-5.3-Codex-Spark from the model selector in the composer. If you don't see GPT-5.3-Codex-Spark yet, update the CLI, IDE extension, or Codex app to the latest version. GPT-5.3-Codex-Spark isn't available in the API at launch. For API-key workflows, continue using `gpt-5.2-codex`.

Codex app

Tue, 10 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added branch search in the branch picker. - Added clearer guidance for entering plan mode when you type `plan` in the composer. - Added support for parallel approvals. ### Improvements and bug fixes - Additional performance improvements and bug fixes.

GPT-5.3-Codex in Cursor and VS Code

Mon, 09 Feb 2026 00:00:00 GMT

# GPT-5.3-Codex in Cursor and VS Code Starting today, GPT-5.3-Codex is available natively in Cursor and VS Code. API access is starting with a small set of customers as part of a phased release. This is the first model treated as a high security capability under the Preparedness Framework. Safety controls will continue to scale, and API access will expand over the next few weeks.

Codex app

Sun, 08 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added MCP and personality actions to the command palette. - Updated follow-up behavior to queue by default. ### Improvements and bug fixes - Additional performance improvements and bug fixes.

Codex app

Fri, 06 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added a file-reference action to reveal files directly in your OS file manager. ### Improvements and bug fixes - Improved handling of large reviews by removing the overall diff-size cap in the review pane. - Additional performance improvements and bug fixes.

Codex app

Thu, 05 Feb 2026 00:00:00 GMT

# Codex app ### New features - Support for **[GPT-5.3-Codex](https://openai.com/index/introducing-gpt-5-3-codex/)**. - Added mid-turn steering. Submit a message while Codex is working to direct its behavior. - Attach or drop any file type. ### Bug fixes - Fix flickering of the app.

Introducing GPT-5.3-Codex

Thu, 05 Feb 2026 00:00:00 GMT

# Introducing GPT-5.3-Codex [Today we're releasing GPT-5.3-Codex](https://openai.com/index/introducing-gpt-5-3-codex/), the most capable agentic coding model to date for complex, real-world software engineering. GPT-5.3-Codex combines the frontier coding performance of GPT-5.2-Codex with stronger reasoning and professional knowledge capabilities, and runs 25% faster for Codex users. It's also better at collaboration while the agent is working—delivering more frequent progress updates and responding to steering in real time. GPT-5.3-Codex is available with paid ChatGPT plans everywhere you can use Codex: the Codex app, the CLI, the IDE extension, and Codex Cloud on the web. API access for the model will come soon. To switch to GPT-5.3-Codex: - In the CLI, start a new thread with: ```bash codex --model gpt-5.3-codex ``` Or use `/model` during a session. - In the IDE extension, make sure you are signed in with ChatGPT, then choose GPT-5.3-Codex from the model selector in the composer. - In the Codex app, make sure you are signed in with ChatGPT, then choose GPT-5.3-Codex from the model selector in the composer. - If you don't see GPT-5.3-Codex, update the CLI, IDE extension, or Codex app to the latest version. For API-key workflows, continue using `gpt-5.2-codex` while API support rolls out.

Codex app

Wed, 04 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added **Zed** and **Textmate** as options to open files and folders. - Added PDF preview in the review panel. ### Bug fixes - Performance improvements.

Codex app

Tue, 03 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added thread renaming on double-click in the thread list. ### Improvements and bug fixes - Renamed **Sync** to **Handoff** and added clearer source/destination stats in the handoff UI. - Additional performance improvements and bug fixes.

Introducing the Codex app

Mon, 02 Feb 2026 00:00:00 GMT

# Introducing the Codex app #### Codex app The Codex app for macOS is a desktop interface for running agent threads in parallel and collaborating with agents on long-running tasks. It includes a project sidebar, thread list, and review pane for tracking work across projects. Key features: - [Multitask across projects](/codex/app/features#multitask-across-projects) - [Built-in worktree support](/codex/app/worktrees) - [Voice dictation](/codex/app/features#voice-dictation) - [Built-in Git tooling](/codex/app/features#built-in-git-tools) - [Skills](/codex/app/features#skills-support) - [Automations](/codex/app/automations) For a limited time, **ChatGPT Free and Go include Codex**, and **Plus, Pro, Business, Enterprise, and Edu** plans get **double rate limits**. Those higher limits apply in the app, the CLI, your IDE, and the cloud. Learn more in the [Introducing the Codex app](https://openai.com/index/introducing-the-codex-app/) blog post. Check out the [Codex app documentation](/codex/app) for more.

Web search is now enabled by default

Wed, 28 Jan 2026 00:00:00 GMT

# Web search is now enabled by default Codex now enables web search for local tasks in the Codex CLI and IDE Extension. By default, Codex uses a web search cache, which is an OpenAI-maintained index of web results. Cached mode returns pre-indexed results instead of fetching live pages, while live mode fetches the most recent data from the web. If you are using `--yolo` or another [full access sandbox setting](/codex/agent-approvals-security), web search defaults to live results. To disable this behavior or switch modes, use the `web_search` configuration option: - `web_search = "cached"` (default; serves results from the web search cache) - `web_search = "live"` (fetches the most recent data from the web; same as `--search`) - `web_search = "disabled"` to remove the tool To learn more, check out the [configuration documentation](/codex/config-basic).

Team Config for shared configuration

Fri, 23 Jan 2026 00:00:00 GMT

# Team Config for shared configuration Team Config groups the files teams use to standardize Codex across repositories and machines. Use it to share: - `config.toml` defaults - `rules/` for command controls outside the sandbox - `skills/` for reusable workflows Codex loads these layers from `.codex/` folders in the current working directory, parent folders, and the repo root, plus user (`~/.codex/`) and system (`/etc/codex/`) locations. Higher-precedence locations override lower-precedence ones. Admins can still enforce constraints with `requirements.toml`, which overrides defaults regardless of location. Learn more in [Team Config](/codex/enterprise/admin-setup#team-config).

Custom prompts deprecated

Thu, 22 Jan 2026 00:00:00 GMT

# Custom prompts deprecated Custom prompts are now deprecated. Use [skills](/codex/skills) for reusable instructions and workflows instead.

GPT-5.2-Codex API availability

Wed, 14 Jan 2026 00:00:00 GMT

# GPT-5.2-Codex API availability GPT-5.2-Codex is now available in the API and for users who sign into Codex with the API. To learn more about using GPT-5.2-Codex check out our [API documentation](https://platform.openai.com/docs/models/gpt-5.2-codex).

Agent skills in Codex

Fri, 19 Dec 2025 00:00:00 GMT

# Agent skills in Codex Codex now supports **agent skills**: reusable bundles of instructions (plus optional scripts and resources) that help Codex reliably complete specific tasks. Skills are available in both the Codex CLI and IDE extensions. You can invoke a skill explicitly by typing `$skill-name` (for example, `$skill-installer` or the experimental `$create-plan` skill after installing it), or let Codex select a skill automatically based on your prompt. Learn more in the [skills documentation](/codex/skills).

#### Folder-based standard (agentskills.io) Following the open [agent skills specification](https://agentskills.io/specification), a skill is a folder with a required `SKILL.md` and optional supporting files: ```text my-skill/ SKILL.md # Required: instructions + metadata scripts/ # Optional: executable code references/ # Optional: documentation assets/ # Optional: templates, resources ``` #### Install skills per-user or per-repo You can install skills for just yourself in `~/.codex/skills`, or for everyone on a project by checking them into `.codex/skills` in the repository. Codex also ships with a few built-in system skills to get started, including `$skill-creator` and `$skill-installer`. The `$create-plan` skill is experimental and needs to be installed (for example: `$skill-installer install the create-plan skill from the .experimental folder`). #### Curated skills directory Codex ships with a [small curated set of skills](https://github.com/openai/skills) inspired by popular workflows at OpenAI. Install them with `$skill-installer`, and expect more over time.

Introducing GPT-5.2-Codex

Thu, 18 Dec 2025 00:00:00 GMT

# Introducing GPT-5.2-Codex [Today we are releasing GPT-5.2-Codex](https://openai.com/index/gpt-5-2-codex), the most advanced agentic coding model yet for complex, real-world software engineering. GPT-5.2-Codex is a version of [GPT-5.2](https://openai.com/index/introducing-gpt-5-2/) further optimized for agentic coding in Codex, including improvements on long-horizon work through context compaction, stronger performance on large code changes like refactors and migrations, improved performance in Windows environments, and significantly stronger cybersecurity capabilities. Starting today, the CLI and IDE Extension will default to `gpt-5.2-codex` for users who are signed in with ChatGPT. API access for the model will come soon. If you have a model specified in your [`config.toml` configuration file](/codex/local-config), you can instead try out `gpt-5.2-codex` for a new Codex CLI session using: ```bash codex --model gpt-5.2-codex ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5.2-Codex from the dropdown menu. If you want to switch for all sessions, you can change your default model to `gpt-5.2-codex` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5.2-codex” ```

Introducing Codex for Linear

Thu, 04 Dec 2025 00:00:00 GMT

# Introducing Codex for Linear Assign or mention @Codex in an issue to kick-off a Codex cloud task. As Codex works, it posts updates back to Linear, providing a link to the completed task so you can review, open a PR, or keep working. ![Screenshot of a successful Codex task started in Linear](/images/codex/integrations/linear-codex-example.png) To learn more about how to connect Codex to Linear both locally through MCP and through the new integration, check out the [Codex for Linear documentation](/codex/integrations/linear).

Usage and credits fixes

Mon, 24 Nov 2025 00:00:00 GMT

# Usage and credits fixes Minor updates to address a few issues with Codex usage and credits: - Adjusted all usage dashboards to show "limits remaining" for consistency. The CLI previously displayed "limits used." - Fixed an issue preventing users from buying credits if their ChatGPT subscription was purchased via iOS or Google Play. - Fixed an issue where the CLI could display stale usage information; it now refreshes without needing to send a message first. - Optimized the backend to help smooth out usage throughout the day, irrespective of overall Codex load or how traffic is routed. Before, users could get unlucky and hit a few cache misses in a row, leading to much less usage.

Introducing GPT-5.1-Codex-Max

Tue, 18 Nov 2025 00:00:00 GMT

# Introducing GPT-5.1-Codex-Max [Today we are releasing GPT-5.1-Codex-Max](https://openai.com/index/gpt-5-1-codex-max), our new frontier agentic coding model. GPT‑5.1-Codex-Max is built on an update to our foundational reasoning model, which is trained on agentic tasks across software engineering, math, research, and more. GPT‑5.1-Codex-Max is faster, more intelligent, and more token-efficient at every stage of the development cycle–and a new step towards becoming a reliable coding partner. Starting today, the CLI and IDE Extension will default to `gpt-5.1-codex-max` for users that are signed in with ChatGPT. API access for the model will come soon. For non-latency-sensitive tasks, we’ve also added a new Extra High (`xhigh`) reasoning effort, which lets the model think for an even longer period of time for a better answer. We still recommend medium as your daily driver for most tasks. If you have a model specified in your [`config.toml` configuration file](/codex/local-config), you can instead try out `gpt-5.1-codex-max` for a new Codex CLI session using: ```bash codex --model gpt-5.1-codex-max ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5.1-Codex from the dropdown menu. If you want to switch for all sessions, you can change your default model to `gpt-5.1-codex-max` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5.1-codex-max” ```

Introducing GPT-5.1-Codex and GPT-5.1-Codex-Mini

Thu, 13 Nov 2025 00:00:00 GMT

# Introducing GPT-5.1-Codex and GPT-5.1-Codex-Mini Along with the [GPT-5.1 launch in the API](https://openai.com/index/gpt-5-1-for-developers/), we are introducing new `gpt-5.1-codex-mini` and `gpt-5.1-codex` model options in Codex, a version of GPT-5.1 optimized for long-running, agentic coding tasks and use in coding agent harnesses in Codex or Codex-like harnesses. Starting today, the CLI and IDE Extension will default to `gpt-5.1-codex` on macOS and Linux and `gpt-5.1` on Windows. If you have a model specified in your [`config.toml` configuration file](/codex/local-config), you can instead try out `gpt-5.1-codex` for a new Codex CLI session using: ```bash codex --model gpt-5.1-codex ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5.1-Codex from the dropdown menu. If you want to switch for all sessions, you can change your default model to `gpt-5.1-codex` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5.1-codex” ```

Introducing GPT-5-Codex-Mini

Fri, 07 Nov 2025 00:00:00 GMT

# Introducing GPT-5-Codex-Mini Today we are introducing a new `gpt-5-codex-mini` model option to Codex CLI and the IDE Extension. The model is a smaller, more cost-effective, but less capable version of `gpt-5-codex` that provides approximately 4x more usage as part of your ChatGPT subscription. Starting today, the CLI and IDE Extension will automatically suggest switching to `gpt-5-codex-mini` when you reach 90% of your 5-hour usage limit, to help you work longer without interruptions. You can try the model for a new Codex CLI session using: ```bash codex --model gpt-5-codex-mini ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5-Codex-Mini from the dropdown menu. Alternatively, you can change your default model to `gpt-5-codex-mini` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5-codex-mini” ```

GPT-5-Codex model update

Thu, 06 Nov 2025 00:00:00 GMT

# GPT-5-Codex model update We've shipped a minor update to GPT-5-Codex: - More reliable file edits with `apply_patch`. - Fewer destructive actions such as `git reset`. - More collaborative behavior when encountering user edits in files. - 3% more efficient in time and usage.

Credits on ChatGPT Pro and Plus

Thu, 30 Oct 2025 00:00:00 GMT

# Credits on ChatGPT Pro and Plus Codex users on ChatGPT Plus and Pro can now use on-demand credits for more Codex usage beyond what's included in your plan. [Learn more.](/codex/pricing)

Tag @Codex on GitHub Issues and PRs

Wed, 22 Oct 2025 00:00:00 GMT

# Tag @Codex on GitHub Issues and PRs You can now tag `@codex` on a teammate's pull request to ask clarifying questions, request a follow-up, or ask Codex to make changes. GitHub Issues now also support `@codex` mentions, so you can kick off tasks from any issue, without leaving your workflow. ![Codex responding to a GitHub pull request and issue after an @Codex mention.](/images/codex/integrations/github-example.png)

Codex is now GA

Mon, 06 Oct 2025 00:00:00 GMT

# Codex is now GA Codex is now generally available with 3 new features — @Codex in Slack, Codex SDK, and new admin tools. #### @Codex in Slack ![](/images/codex/integrations/slack-example.png) You can now questions and assign tasks to Codex directly from Slack. See the [Slack guide](/codex/integrations/slack) to get started. #### Codex SDK Integrate the same agent that powers the Codex CLI inside your own tools and workflows with the Codex SDK in Typescript. With the new Codex GitHub Action, you can easily add Codex to CI/CD workflows. See the [Codex SDK guide](/codex/sdk) to get started. ```ts const agent = new Codex(); const thread = await agent.startThread(); const result = await thread.run("Explore this repo"); console.log(result); const result2 = await thread.run("Propose changes"); console.log(result2); ``` #### New admin controls and analytics ![](/images/codex/enterprise/analytics.png) ChatGPT workspace admins can now edit or delete Codex Cloud environments. With managed config files, they can set safe defaults for CLI and IDE usage and monitor how Codex uses commands locally. New analytics dashboards help you track Codex usage and code review feedback. Learn more in the [enterprise admin guide.](/codex/enterprise/admin-setup) #### Availability and pricing updates The Slack integration and Codex SDK are available to developers on ChatGPT Plus, Pro, Business, Edu, and Enterprise plans starting today, while the new admin features will be available to Business, Edu, and Enterprise. Beginning October 20, Codex Cloud tasks will count toward your Codex usage. Review the [Codex pricing guide](/codex/pricing) for plan-specific details.

GPT-5-Codex in the API

Tue, 23 Sep 2025 00:00:00 GMT

# GPT-5-Codex in the API GPT-5-Codex is now available in the Responses API, and you can also use it with your API Key in the Codex CLI. We plan on regularly updating this model snapshot. It is available at the same price as GPT-5. You can learn more about pricing and rate limits for this model on our [model page](https://platform.openai.com/docs/models/gpt-5-codex).

Introducing GPT-5-Codex

Mon, 15 Sep 2025 00:00:00 GMT

# Introducing GPT-5-Codex #### New model: GPT-5-Codex ![codex-switch-model](https://cdn.openai.com/devhub/docs/codex-switch-model.png) GPT-5-Codex is a version of GPT-5 further optimized for agentic coding in Codex. It's available in the IDE extension and CLI when you sign in with your ChatGPT account. It also powers the cloud agent and Code Review in GitHub. To learn more about GPT-5-Codex and how it performs compared to GPT-5 on software engineering tasks, see our [announcement blog post](https://openai.com/index/introducing-upgrades-to-codex/). #### Image outputs ![codex-image-outputs](https://cdn.openai.com/devhub/docs/codex-image-output.png) When working in the cloud on front-end engineering tasks, GPT-5-Codex can now display screenshots of the UI in Codex web for you to review. With image output, you can iterate on the design without needing to check out the branch locally. #### New in Codex CLI - You can now resume sessions where you left off with `codex resume`. - Context compaction automatically summarizes the session as it approaches the context window limit. Learn more in the [latest release notes](https://github.com/openai/codex/releases/tag/rust-v0.36.0)

Late August update

Wed, 27 Aug 2025 00:00:00 GMT

# Late August update #### IDE extension (Compatible with VS Code, Cursor, Windsurf) ![](/images/codex/changelog/local_task.gif) Codex now runs in your IDE with an interactive UI for fast local iteration. Easily switch between modes and reasoning efforts. #### Sign in with ChatGPT (IDE & CLI) ![](/images/codex/changelog/sign-in-with-chat.gif) One-click authentication that removes API keys and uses ChatGPT Enterprise credits. #### Move work between local ↔ cloud ![](/images/codex/changelog/cloud_task.gif) Hand off tasks to Codex web from the IDE with the ability to apply changes locally so you can delegate jobs without leaving your editor. #### Code Reviews ![](/images/codex/changelog/codex_review.gif) Codex goes beyond static analysis. It checks a PR against its intent, reasons across the codebase and dependencies, and can run code to validate the behavior of changes.

Mid August update

Thu, 21 Aug 2025 00:00:00 GMT

# Mid August update #### Image inputs ![](/images/codex/changelog/image_input.png) You can now attach images to your prompts in Codex web. This is great for asking Codex to implement frontend changes or follow up on whiteboarding sessions. #### Container caching ![](/images/codex/changelog/container_caching.png) Codex now caches containers to start new tasks and followups 90% faster, dropping the median start time from 48 seconds to 5 seconds. You can optionally configure a maintenance script to update the environment from its cached state to prepare for new tasks. See the docs for more. #### Automatic environment setup Now, environments without manual setup scripts automatically run the standard installation commands for common package managers like yarn, pnpm, npm, go mod, gradle, pip, poetry, uv, and cargo. This reduces test failures for new environments by 40%.

Best of N

Fri, 13 Jun 2025 00:00:00 GMT

# Best of N ![](/images/codex/changelog/best-of-n.png) Codex can now generate multiple responses simultaneously for a single task, helping you quickly explore possible solutions to pick the best approach. ## Fixes & improvements - Added some keyboard shortcuts and a page to explore them. Open it by pressing ⌘-/ on macOS and Ctrl+/ on other platforms. - Added a “branch” query parameter in addition to the existing “environment”, “prompt” and “tab=archived” parameters. - Added a loading indicator when downloading a repo during container setup. - Added support for cancelling tasks. - Fixed issues causing tasks to fail during setup. - Fixed issues running followups in environments where the setup script changes files that are gitignored. - Improved how the agent understands and reacts to network access restrictions. - Increased the update rate of text describing what Codex is doing. - Increased the limit for setup script duration to 20 minutes for Pro and Business users. - Polished code diffs: You can now option-click a code diff header to expand/collapse all of them.

June update

Tue, 03 Jun 2025 00:00:00 GMT

# June update #### Agent internet access ![](/images/codex/changelog/internet_access.png) Now you can give Codex access to the internet during task execution to install dependencies, upgrade packages, run tests that need external resources, and more. Internet access is off by default. Plus, Pro, and Business users can enable it for specific environments, with granular control of which domains and HTTP methods Codex can access. Internet access for Enterprise users is coming soon. Learn more about usage and risks in the [docs](/codex/cloud/agent-internet). #### Update existing PRs ![](/images/codex/changelog/update_prs.png) Now you can update existing pull requests when following up on a task. #### Voice dictation ![](/images/codex/changelog/voice_dictation.gif) Now you can dictate tasks to Codex. ## Fixes & improvements - Added a link to this changelog from the profile menu. - Added support for binary files: When applying patches, all file operations are supported. When using PRs, only deleting or renaming binary files is supported for now. - Fixed an issue on iOS where follow up tasks where shown duplicated in the task list. - Fixed an issue on iOS where pull request statuses were out of date. - Fixed an issue with follow ups where the environments were incorrectly started with the state from the first turn, rather than the most recent state. - Fixed internationalization of task events and logs. - Improved error messages for setup scripts. - Increased the limit on task diffs from 1 MB to 5 MB. - Increased the limit for setup script duration from 5 to 10 minutes. - Polished GitHub connection flow. - Re-enabled Live Activities on iOS after resolving an issue with missed notifications. - Removed the mandatory two-factor authentication requirement for users using SSO or social logins.

Reworked environment page

Thu, 22 May 2025 00:00:00 GMT

# Reworked environment page It's now easier and faster to set up code execution. ![](/images/codex/changelog/environment_setup.png) ## Fixes & improvements - Added a button to retry failed tasks - Added indicators to show that the agent runs without network access after setup - Added options to copy git patches after pushing a PR - Added support for unicode branch names - Fixed a bug where secrets were not piped to the setup script - Fixed creating branches when there’s a branch name conflict. - Fixed rendering diffs with multi-character emojis. - Improved error messages when starting tasks, running setup scripts, pushing PRs, or disconnected from GitHub to be more specific and indicate how to resolve the error. - Improved onboarding for teams. - Polished how new tasks look while loading. - Polished the followup composer. - Reduced GitHub disconnects by 90%. - Reduced PR creation latency by 35%. - Reduced tool call latency by 50%. - Reduced task completion latency by 20%. - Started setting page titles to task names so Codex tabs are easier to tell apart. - Tweaked the system prompt so that agent knows it’s working without network, and can suggest that the user set up dependencies. - Updated the docs.

Codex in the ChatGPT iOS app

Mon, 19 May 2025 00:00:00 GMT

# Codex in the ChatGPT iOS app Start tasks, view diffs, and push PRs—while you're away from your desk. ![](/images/codex/changelog/mobile_support.png)