# Codex CLI: what changed

OpenAI's open-source coding agent; stable releases only, alpha builds are skipped. Quoted from https://github.com/openai/codex. Updated 2026-10-28. Page: https://newruntime.com/tools/codex/

## Week of Oct 26 – Nov 1, 2026 (2026-10-26 to 2026-11-01)

### 2026-10-27 Codex CLI 0.165.0 (0.165.0)

Source: https://github.com/openai/codex/releases/tag/rust-v0.165.0

Sections: New Features · Bug Fixes

- Added a built-in Google Cloud Vertex AI provider, configured with model_provider = "gcp".
- Added GPT-6.1 Terra to the model catalogs.
- Added a repository filter to the session picker and directory grouping to the agent command center, making it easier to navigate sessions across linked worktrees.
- Added experimental attached thread forks to the app-server API.
- Enabled reasoning effort changes during a conversation by default for supported models.
- Enabled memory v2 by default for fresh profiles and added support for importing external-agent memories into it. (#56211, #56414)
- Fixed fresh TUI sessions to honor the server’s default approval reviewer when no explicit override is provided.
- Kept TUI preferences editable and immediately applicable when execution settings are invalid.
- Cancelled remote MCP tool requests when their local response futures are dropped.
- Prevented queued agent messages from restarting work after an interrupt or a switch to Plan mode.
- Stopped retrying when a provider reports that a model was not found, preserving its error message.
- Closed a marketplace URL validation gap that could allow Git to connect to a different host than the one checked against allowed patterns.
- #56081 Cache decrypted Codex auth and managed secrets @celia-oai
- #56090 Honor server approval reviewer defaults on fresh TUI startup @etraut-openai
- #56091 Keep TUI preferences editable when execution settings are invalid @etraut-openai
- #56097 Prepare TUI startup to accept multiple backend sessions @bc-openai
- #56124 Forward Guardian reviewer events to parent raw-event subscribers @jif-oai
- #56127 Avoid blocking EMA auth status checks on account refresh @jif-oai
- #56132 Cancel MCP tool requests when response futures are dropped @rhan-oai
- #56133 Defer agent mail after empty final answers @eknight-oai
- #56139 Fix the MCP auth status test's IdP OAuth configuration @jif-oai
- #56153 Preserve safe enterprise MCP authentication error details @jif-oai
- #56154 Add managed network review domains before allow rules @olliem-oai
- #56163 Enable reasoning effort overrides by default @felixxia-oai
- #56182 Add AWS SigV4 signing to network proxy MITM hooks @viyatb-oai
- #56210 Stabilize the marketplace staging cleanup test @felixxia-oai
- #56211 Default fresh memory profiles to v2 @jif-oai
- #56214 Remove the u64 cast from WSL DrvFS detection @felixxia-oai
- #56220 Use cargo_bin in the Windows sandbox manifest test @felixxia-oai
- #56222 Consolidate Bazel CI setup into prepare-bazel-ci @anp-oai

## Week of Oct 19–25, 2026 (2026-10-19 to 2026-10-25)

### 2026-10-23 Codex CLI 0.164.0 (0.164.0)

Source: https://github.com/openai/codex/releases/tag/rust-v0.164.0

Sections: New Features · Bug Fixes · Chores

- Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381)
- Set model, reasoning effort, speed, and permission profiles directly with inline /model and /permissions arguments. (#54378, #54383)
- Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics.
- Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
- Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
- The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)
- Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)
- Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)
- Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)
- CLI configuration overrides are preserved when -c or --config appears at multiple subcommand levels.
- Queued prompts now wait for pending permission selections to resolve before continuing.
- Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)
- Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)
- Updated the embedded JavaScript runtime with safety checks for optimized Array.sort operations.
- #53725 Render Markdown web links as labels in Rex @bc-openai
- #53728 Preserve the remote cwd filter in the in-app resume picker @fcoury-oai
- #53732 Reuse compiled search patterns across compressed rollouts @ethernetdan-openai
- #53733 Default Guardian v2 async classification to conversation mode @felixxia-oai
- #53736 Acquire and cache opt-in executor capability inventories via V2 @TAFOYA-OAI
- #53745 Remove modelSlug from the latest-model resolver output @kkahadze-oai
- #53747 Prefer remote Visualize installs over the bundled plugin @philipp-oai
- #53751 Apply feature overrides when restarting the app-server daemon @jif-oai
- #53753 Extend copy-on-select to composer text @fcoury-oai
- #53754 Support Command/Super shortcuts in the TUI keymap @fcoury-oai
- #53763 Enrich V2 capability discovery with resolved plugin and skill metadata @TAFOYA-OAI
- #53780 Remove redundant Codex manual cache directory check @kkahadze-oai
- #53781 Remove the product-gating TODO from SkillPolicy @kkahadze-oai
- #53784 Forward client voice session IDs in realtime requests @chrisdong-oai
- #53790 Fix cancellation of macOS user-verification prompts @bz-openai
- #53794 Retain rollout migration locks across worker cancellation @jif-oai

## Week of Oct 12–18, 2026 (2026-10-12 to 2026-10-18)

### 2026-10-15 Codex CLI 0.163.0 (0.163.0)

Source: https://github.com/openai/codex/releases/tag/rust-v0.163.0

Sections: New Features · Bug Fixes · Documentation · Chores

- Open /config to search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429)
- Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)
- Configure a leader key in /keymap. The default is Ctrl+X, shortcut hints stay open until you choose or cancel, and voice mute moves to F9.
- Restart a managed background server from /daemon. Codex warns about work the restart could interrupt, then reconnects automatically.
- Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups.
- Daybreak is enabled by default for eligible accounts. codex exec can also select it with an OpenAI API key when the server offers access. (#53701, #53717)
- Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)
- The network proxy now checks permission before a DNS lookup, rejects duplicate Host headers, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506)
- Return to an existing side conversation with /side after switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436)
- On Windows, Ctrl+V and Shift+Insert paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453)
- Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)
- codex exec no longer prints the same file diff again after an unrelated command.
- Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations.
- Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering.
- Codex now uses its standard shell executor and no longer bundles a patched zsh. Configurations using the retired shell flags receive a migration notice. (#52160, #52213)
- Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs.
- #51539 Add completion-aware realtime attachment and session-scoped detach @zahan-oai
- #51547 Add a Windows MXC sandbox opt-out @iceweasel-oai
- #51556 Complete dynamic tool lifecycles on cancellation @mikelam-oai
- #51575 Expose package assembly helpers and support gzip DotSlash artifacts @bolinfest
- #51595 Add thread ID exclusions to thread/list @btraut-openai
- #51602 Distinguish thread listing failures from exhausted history @btraut-openai
- #51611 Signal abandonment of unanswered MCP elicitations @nicksteele-oai
- #51627 Stabilize Guardian snapshot prefixes by separating assistant context @jif-oai
- #51642 Fix retained context handling for typed section content @jif-oai
- #51650 Require hostname authorization before proxy DNS lookups @jif-oai
- #51651 Persist Guardian review failures for reports across restarts @jif-oai
- #51652 Record telemetry for AGENTS.md changes made by apply_patch @jif-oai
- #51678 Move Windows sandbox tests into a dedicated integration binary @jif-oai
- #51683 Roll back stale Guardian reviews before reusing reviewer history @olliem-oai