ChatGPT & Codex changelog

ChatGPT for iOS

Tue, 08 Sep 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Reference other tasks directly in the composer with `@` mentions. - Answer live questions while Codex continues working, without losing your draft. - Explore files with Back navigation, recent files, and remembered reading positions. - Choose a starting branch for new worktrees, or include your current local changes. - Worktree setup can now continue in the background on iOS 26, with progress shown in a Live Activity. ### Improvements and bug fixes - Voice now respects your selected model and reasoning effort. - Restored missing delegated-task messages and fixed navigation between linked tasks. - Code reviews now complete more reliably, without duplicate activity or stuck running states. - Fixed crashes and stale queued messages when switching from Queue to Steer. - Improved reconnect reliability and preserved device pairing during temporary service outages. - Resolved duplicate plugin skills in composer suggestions.

Codex CLI Release: 0.153.4

Fri, 04 Sep 2026 00:00:00 GMT

Bug Fixes

Fixed Astra’s visibility in the bundled model picker and made it the bundled default when no model is explicitly configured. (#42874)
Updated Astra’s guidance to use asynchronous questions only when the tool is available in the session. (#42878)

Changelog

Full Changelog: rust-v0.153.3...rust-v0.153.4

#42874 [0.153 hotfix] Show Astra in bundled model picker @rhan-oai
#42878 [0.153 hotfix] Qualify Astra async-question guidance by tool availability @rhan-oai

Codex CLI Release: 0.153.3

Fri, 04 Sep 2026 00:00:00 GMT

New Features

Added GPT-6-Astra to the Amazon Bedrock model picker for Mantle and Runtime global/US routes. (#42805)

Bug Fixes

Corrected GPT-6-Astra’s guidance for asynchronous clarification questions to use the supported tool and recognize that it accepts text only. (#42809)

Changelog

Full Changelog: rust-v0.153.2...rust-v0.153.3

#42805 [0.153 hotfix] Add GPT-6-Astra to Amazon Bedrock catalogs @celia-oai
#42809 [0.153 hotfix] Update Astra async-question guidance @rhan-oai

Codex CLI Release: 0.153.2

Thu, 03 Sep 2026 00:00:00 GMT

Bug Fixes

Corrected the GPT-6-Astra Fast tier description to say “2x speed, increased usage” instead of “1.5x.” This changes only the displayed text, not how requests run. (#42632)

Changelog

Full Changelog: rust-v0.153.1...rust-v0.153.2

#42632 Fix GPT-6-Astra Fast tier description for 0.153.2 @anp-oai

Codex CLI Release: 0.153.1

Thu, 03 Sep 2026 00:00:00 GMT

New Features

Added support for configuring GPT-6-Astra through the API without changing the default model or showing it in the model picker. (#42605)

Changelog

Full Changelog: rust-v0.153.0...rust-v0.153.1

#42605 Backport GPT-6-Astra model catalog to 0.153 @anp-oai

Codex CLI Release: 0.153.0

Thu, 03 Sep 2026 00:00:00 GMT

New Features

Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. (#41941, #42140)
The plugin CLI can list, install, and remove plugins from remote marketplaces. (#42150)
Set tui.auto_recap = false to disable automatic recaps while keeping manual /recap available. (#42101)
TUI history shows complete patches, input sent to background terminals, and individual completed commands. (#41893, #42107)
Plus and Team users receive an earlier warning when less than half of their allowance remains in an approximately five-hour usage window. (#42142)

Bug Fixes

TUI sessions reconnect after an external app-server connection drops, preserving drafts and transcripts while keeping uncertain or queued submissions paused for review. (#41911, #41916, #41918)
Full Access skips Guardian reviews for confirmation-only actions. User approval mode skips background Guardian scoring and prewarming, while sensitive-action checks and requests for user input retain their existing handling. (#42147, #42256)
Guardian review history survives compaction, restarts, and user-created forks while respecting rollback boundaries and isolating subagent history. (#41879, #42065)
Remembered MCP tool approvals are scoped to the selected app account, and relative MCP executable paths start more reliably on macOS. (#42133, #42117)
Rollout compression includes shared histories, codex exec resume handles compressed rollouts when selecting by working directory, and thread forks work with symlinked session roots. (#42039, #42135)

Configuration and API Updates

App-server thread metadata includes nullable model and reasoningEffort fields. Structured asynchronous questions are supported through request_user_input_async when enabled by the model catalog. (#42151, #42178)
tui.disable_paste_burst replaces the top-level setting, which remains supported as a fallback. (#41976)
Adds the disabled-by-default features.context_management.experimental_mode configuration. When enabled for eligible ChatGPT Plus, Pro, or Pro Lite sessions using the Codex backend, it activates token-budget context, history notes, and the new_context tool. API-key sessions, custom providers, and temporary structured threads remain excluded. (#42385)

Changelog

Full Changelog

#41870 Use shared transcript collection for Guardian reviews
#41879 Preserve Guardian review evidence across compaction
#41884 Add pinned native voice source preparation
#41890 Add native voice dependency build recipe
#41892 Retain the MCP client for event streams
#41893 Show successful TUI commands individually
#41894 Fix Windows native voice dependency builds
#41897 Add the voice helper lifecycle foundation
#41899 Keep MCP event subscriptions alive after task unloading
#41901 Load bounded context after empty wake turns
#41902 Add installed voice host lifecycle support
#41906 Add a manager for MCP event streams
#41908 Avoid scanning archived rollouts when archiving threads
#41909 Make permission transforms aware of executor path context
#41911 Preserve TUI drafts after app-server disconnects
#41912 Persist response token usage in rollout history
#41913 Preserve TUI status timing when the status row is hidden
#41915 Move the config schema generator into a dedicated crate
#41916 Reconnect TUI app-server sessions automatically
#41917 Open the agents overview from an empty composer
#41918 Restore agent navigation after TUI reconnects
#41923 Allow per-call sideband endpoints for existing realtime calls
#41924 Record realtime conversation history in Core
#41925 Test repository-wide Rust formatter discovery
#41928 Use executor path context for permission preapproval
#41929 Open the agents overview directly in the reconnect test
#41933 Report configured sandbox policy consistently
#41934 Omit undersized WAV output from Code Mode
#41936 Attach failed Guardian reviews to diagnostic reports
#41937 Limit background terminal input previews
#41938 Clarify resume guidance in exit summaries
#41940 Preserve transcript layout caches during backtrack selection
#41941 Add Vim undo to the TUI composer
#41944 Emit turn cost telemetry for ChatGPT sessions
#41946 Expand extension permission regression coverage
#41949 Add plugin reconciliation app-server API
#41950 Improve tracing for nested tool calls and exec processes
#41953 Enforce marketplace source policy for curated plugins
#41974 Track TUI starts by app server mode
#41976 Move disable_paste_burst under [tui]
#41980 Preserve raw response usage metadata
#42003 Report turn trigger and source in turn analytics
#42031 Share Guardian user-message retention logic
#42033 Improve Guardian report diagnostics
#42039 Include shared histories in rollout compression
#42043 Tag Codex home size metrics with compression state
#42047 Add per-account approval settings for apps
#42054 Honor explicit account selectors for Apps tool calls
#42056 Honor app link settings for MCP tool approvals
#42065 Preserve Guardian history across thread reconstruction
#42066 Remove selected core test cases
#42068 Detect standalone installs from the macOS CLI bundle
#42069 Remove redundant test coverage
#42071 Detect Vite+-managed Codex installs
#42076 Unify Guardian context section collection
#42082 Attribute nested REPL reviews to their tool calls
#42085 Centralize Guardian context composition
#42086 Attribute Guardian reviews to OpenAI app tools
#42094 Record Windows MXC availability
#42096 Make diagnostic report uploads resilient to slow networks
#42100 Prefer remote Sites over the bundled plugin
#42101 Add a TUI setting to disable automatic recaps
#42102 Extract OTEL trace WebSocket into a reusable crate
#42104 Show recent sessions in the agent command center
#42107 Show full patches and terminal input in TUI history
#42109 Format Python scripts across the repository
#42110 Treat bundled cleanup hooks as built-ins
#42113 Apply remote platform semantics to exec safety checks
#42114 Centralize remote plugin mutations in PluginsManager
#42117 Fix relative MCP server spawning on macOS
#42118 Refine hook activity rendering in the TUI
#42121 Allow updating the approval reviewer for active turns
#42123 Preserve descriptive labels on local file links
#42126 Ignore non-JSON files in plugin catalog test helpers
#42128 Prepare MCP connections for coordinated OAuth refresh
#42132 Bound Git root discovery for metadata enrichment
#42133 Scope session MCP approvals to app account links
#42134 Include app link metadata in MCP approval elicitations
#42135 Support thread forks from symlinked session roots
#42137 Prewarm shell snapshots for eligible turns
#42140 Add redo support to Vim composer history
#42142 Add early rate-limit warnings for Plus and Team plans
#42144 Add Guardian V2 analytics events
#42146 Resolve permission requests in the executor context
#42147 Skip Guardian reviews in Full Access
#42149 Upgrade Git marketplaces from merged configuration
#42150 Support remote marketplaces in the plugin CLI
#42151 Expose model settings in app-server thread metadata
#42161 Split tool JSON Schema code into focused modules
#42164 Record result sources in app tool analytics
#42173 Support header injections in network requirements
#42174 Add a cacheable Bazel app-server schema bundle
#42178 Add structured asynchronous user input requests
#42256 Skip Guardian scoring in User approval mode
#42385 Add experimental context management activation

ChatGPT for iOS

Tue, 01 Sep 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Attachments now work across all connected hosts, including Windows and Linux, and support videos from the Photo Library. - Press and hold the attachment button to attach recent photos. - A new Priority view brings running tasks, unread updates, and tasks awaiting your response to the top of the task list. - Queued prompts now sync with the connected host, remain editable, and send even when the app is in the background. - Long-running tasks now show their live working time. - Task menus now include an option to copy the thread ID. ### Improvements and bug fixes - Task list loading and organization are faster and more reliable, with simpler date sections and fewer stalls or disappearing projects. - Reconnects are more reliable, resolving stuck Send states, missing approvals, and stale task updates. - Long responses now stream with fewer visual interruptions. - Side chat messages remain available until you close them, even after the chat can no longer reconnect.

Codex CLI Release: 0.152.1

Tue, 01 Sep 2026 00:00:00 GMT

Bug Fixes

Guardian approval review now honors Node REPL policies provided through model metadata.

Full Changelog: rust-v0.152.0...rust-v0.152.1

Codex CLI Release: 0.152.0

Tue, 01 Sep 2026 00:00:00 GMT

New Features

Vim mode supports / and ? searches within drafts, highlighted matches, and repeat navigation with n and N. (#41586)
Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
The terminal UI and codex exec show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)
MCP server names can contain :, @, /, and ., supporting package-style names throughout CLI commands and authentication. (#41700)
Individual MCP tools support an output_token_limit setting, with consistent truncation across session resumes. (#41421)
App-server clients can configure thread/shellCommand timeouts, including deadlines longer than one hour. (#41384)

Bug Fixes

Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)
Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)
Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)
Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)
MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)
Opening the model picker refreshes available models without losing the highlighted choice. (#41467)
Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals. (#41227, #41436, #41673)
Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials. (#41403)

Chores

The planning tool is disabled by default; enable it with tools.update_plan.enabled = true. (#41744)
Plugin recommendations begin loading during startup, reducing delays before the first turn. (#41375)

Changelog

Full Changelog: rust-v0.151.0...rust-v0.152.0

#41210 Enable clock tools from model metadata @copyberry
#41215 Roll over Guardian context before follow-up reviews @copyberry
#41218 Share linked tool mention parsing in the TUI @copyberry
#41219 Retry confirmed remote registration conflicts @copyberry
#41221 Honor turn token budgets in Guardian review rollover @copyberry
#41223 Add recency sorting to project/list @copyberry
#41226 Move Guardian review session tests to a separate file @copyberry
#41227 Use compatible PowerShell for elevated Windows sandbox commands @copyberry
#41230 Apply app routing policy to unauthenticated plugin reads @copyberry
#41231 Instrument the loaded plugin cache @copyberry
#41232 Expose the PowerShell version in environment context @copyberry
#41235 Sanitize history notes backend errors @copyberry
#41239 Surface model provider authentication recovery progress @copyberry
#41243 Add configurable gating for the sleep tool @copyberry
#41250 Include thread source in realtime connection metadata @copyberry
#41260 Let the history backend enforce tool output budgets @copyberry
#41285 Drive keymap conflict checks from the action registry @copyberry
#41292 Forward history note images to the model @copyberry
#41308 Make subagents follow the root service tier @copyberry
#41309 Honor required reviews when reusing Guardian scores @copyberry
#41313 Decouple HTTP retry backoff from overload integration testing @copyberry
#41322 Isolate required-model Guardian approval coverage @copyberry
#41328 Review terminal input against retained permissions @copyberry
#41331 Classify clock tools as built-in control tools @copyberry
#41336 Preserve cached MCP tools during binding capture @copyberry
#41344 Use refreshed MCP tool caches during binding capture @copyberry
#41349 Assign stable IDs to generated Responses input items @copyberry
#41354 Reject NUL bytes in reviewed terminal input @copyberry
#41357 Support compression for shared rollout lineages @copyberry
#41360 Measure Codex home usage at app-server startup @copyberry
#41364 Test resuming compressed shared rollouts @copyberry
#41365 Restrict async user messages to questions @copyberry
#41368 Match Windows shell guidance to the executor platform @copyberry
#41375 Preload plugin recommendations during session startup @copyberry
#41380 Clarify proactive multi-agent delegation guidance @copyberry
#41384 Support configurable timeouts for thread shell commands @copyberry
#41385 Give Guardian classifications distinct turn identities @copyberry
#41392 Add shared Guardian context primitives @copyberry
#41393 Preserve one-shot exec when unified exec is disabled @copyberry
#41396 Refresh runtimes for remote plugin state changes @copyberry
#41400 Refresh MCP HTTP helper headers after authorization failures @copyberry
#41403 Restrict cloud task credentials to trusted origins @copyberry
#41413 Optimize history item lookups @copyberry
#41416 Add app-server notification media filtering @copyberry
#41421 Support per-tool MCP output limits @copyberry
#41422 Add shared Guardian transcript collection @copyberry
#41424 Preserve context baselines across nested agent forks @copyberry
#41427 Filter media from function call output notifications @copyberry
#41429 Retain the last selected step context for each turn @copyberry
#41432 Run executor hooks for interrupted turns @copyberry
#41435 Allow bundled browser cleanup hooks on subagent stop @copyberry
#41436 Respond to terminal queries from TTY subprocesses @copyberry
#41447 Support openai/elicitation form requests @copyberry
#41448 Clarify question handling in Default collaboration mode @copyberry
#41449 Rename the read-only Seatbelt platform defaults policy @copyberry
#41452 Report code mode host request durations @copyberry
#41454 Block goals after repeated execution host failures @copyberry
#41456 Support app targets in executor plugin hooks @copyberry
#41457 Source proactive multi-agent instructions from the model catalog @copyberry
#41461 Source async user message descriptions from the model catalog @copyberry
#41464 Preserve permissions when updating session metadata @copyberry
#41467 Refresh the TUI model picker from the app server @copyberry
#41476 Use rules_rs platforms for release binaries @copyberry
#41477 Organize bundled Rust resources under asset directories @copyberry
#41562 Preserve turn lineage across goal continuations @copyberry
#41567 Restore thread cwd from owned settings snapshots @copyberry
#41569 Harden diagnostic report uploads @copyberry
#41570 Fix proactive multi-agent instruction grammar @copyberry
#41586 Add Vim search motions to the composer @copyberry
#41613 Move Vim history tests into the history search module @copyberry
#41630 Update tests for default-enabled update_plan @copyberry
#41660 Preserve Guardian authorization across history compaction @copyberry
#41666 Approve the first Node REPL execution without a Guardian wait @copyberry
#41673 Repair cursor-style rendering on older JediTerm terminals @copyberry
#41683 Set working directories for environment MCP tests @copyberry
#41700 Support package-style MCP server names @copyberry
#41742 Show actionable rate-limit banners in the TUI @copyberry
#41743 Mark history ingestion requests in turn metadata @copyberry
#41744 Make the update_plan tool opt-in @copyberry
#41803 Allow models to enable token budgeting by default @copyberry
#41840 Use the async stack budget for approval reviews @copyberry
#41846 Preserve Guardian review evidence across compaction @copyberry
#41852 Preserve Guardian user answers across compaction @copyberry
#41853 Box the session startup future at its API boundary @copyberry
#41857 Preserve Guardian user answers from current history @copyberry
#41858 Preserve user text when Guardian history drops oversized images @copyberry
#41861 Keep history extension tools out of Guardian reviews @copyberry
#41921 Start fresh Vim drafts in Insert mode
#41931 Increase Guardian message transcript limits

Codex CLI Release: 0.151.0

Sat, 29 Aug 2026 00:00:00 GMT

New Features

Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)

Bug Fixes

Preserved restored permission profiles across TUI turns and prevented /cd from weakening sandbox restrictions. (#41192)
Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
Preserved structured MCP tool and resource errors in app-server responses. (#41196)
Counted nested subagent token usage toward root goal budgets. (#41183)
Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)

Chores

Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#41191, #41194)

Changelog

Full Changelog: rust-v0.150.0...rust-v0.151.0

#41183 Account subagent token usage toward root goals @copyberry
#41189 Instrument stdin review size checks @copyberry
#41191 Stabilize Guardian WebSocket tests @copyberry
#41192 Preserve restored permission profiles in TUI sessions @copyberry
#41193 Report affected capabilities from remote plugin syncs @copyberry
#41194 Harden core test fixture startup assertions @copyberry
#41195 Finalize model-specific tool plans in ToolRouter @copyberry
#41196 Improve sandboxing, MCP errors, and cached approvals @copyberry
#41199 Make the optional MCP startup grace configurable @copyberry
#41202 Let extensions process MCP tool results @copyberry
#41204 Propagate executor home directories into sandbox contexts @copyberry
#41205 Track executor MCP discovery telemetry @copyberry
#41206 Make Ultra reasoning fallback model-aware @copyberry
#41207 Propagate executor OS into turn environments @copyberry
#41208 Honor per-repository plugin configuration in catalog requests @copyberry
#41209 Align deny-read matching with executor path semantics @copyberry

Codex CLI Release: 0.150.1

Thu, 27 Aug 2026 00:00:00 GMT

Bug Fixes

Remote compaction now counts retained images toward its token budget by default, trimming older images as needed. (#41003)

Changelog

Full Changelog: rust-v0.150.0...rust-v0.150.1

#41003 Backport retained-image compaction budgeting to 0.150 @rhan-oai

ChatGPT for iOS

Wed, 26 Aug 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added task search across titles and conversation content on connected hosts. - Added a compact composer gauge for viewing and adjusting reasoning effort. - Added a full-screen editor for longer prompts. - Added configurable Home Screen shortcuts for ChatGPT, Work, and Codex Remote. - Added optional comments to selected response annotations. ### Improvements and bug fixes - Improved loading for long threads, with older history fetched as needed. - Refined task list layout, ordering, and pinning to better match desktop. - Inline visualizations now follow iOS appearance and accent settings.

Codex CLI Release: 0.150.0

Wed, 26 Aug 2026 00:00:00 GMT

New Features

Reference other Codex tasks with @ mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315)
/copy now offers a picker for full responses, individual code blocks, and blockquotes. (#39997)
Unnamed terminal tasks receive descriptive titles automatically, and /rename suggests an editable title based on the conversation. (#40492, #40495)
Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)
Bind shortcuts to cycle permission modes, and use . in Vim mode to repeat your last edit. (#39873, #40521)
New Interrupt hooks can run commands or MCP handlers when an active top-level turn is interrupted. (#40511)

Bug Fixes

Untrusted projects no longer supply project-level AGENTS.md instructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004)
Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (#39993)
Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)
Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)
Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)
Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (#39804, #39825)

Changelog

Full Changelog: rust-v0.149.0...rust-v0.150.0

#39667 Trace MCP runtime refresh coordination @copyberry
#39691 Make Guardian v2 parent compaction reuse configurable @copyberry
#39700 Fail closed on unsafe config and sed parsing @copyberry
#39702 Wait for turn completion events in multi-agent resume tests @copyberry
#39703 Move the global scope check into the code-mode runtime @copyberry
#39706 Harden Seatbelt writable root path binding @copyberry
#39707 Remove redundant code mode image helper test @copyberry
#39709 Log TUI app event variants without their payloads @copyberry
#39712 Reduce unified exec output buffer allocations @copyberry
#39717 Pass CI workflow inputs through environment variables @copyberry
#39719 Stop persisting checkout credentials in V8 workflows @copyberry
#39720 Expose managed policy for browser settings imports @copyberry
#39722 Track multi-agent v2 spawn calls in analytics @copyberry
#39726 Box the WebSocket dial future @copyberry
#39731 Avoid rollout reads for configured TUI sessions @copyberry
#39736 Remove private executor directory creation @copyberry
#39738 Honor Guardian runtime settings from model defaults @copyberry
#39741 Use model-specific auto-review outcome instructions @copyberry
#39744 Skip postprocessing for short composer input @copyberry
#39746 Refresh resumed thread capability roots from executors @copyberry
#39749 Require filesystem backends to implement directory walks @copyberry
#39752 Expose uncompiled permission profile selection @copyberry
#39755 Add managed developer instructions to requirements @copyberry
#39756 Cache shell snapshots in the exec server @copyberry
#39757 Standardize shell execution on unified exec @copyberry
#39761 Add app-server MCP event streaming @copyberry
#39765 Include suggestion IDs in plugin install metadata @copyberry
#39770 Refresh bundled model definitions @copyberry
#39772 Standardize shell execution on unified exec @copyberry
#39776 Verify Codex app signatures before launch or install @copyberry
#39777 Retry transient registry failures during initial exec connection @copyberry
#39779 Make tool-result telemetry limits configurable @copyberry
#39782 Support standalone named function call outputs @copyberry
#39784 Classify rollout migration failures @copyberry
#39785 Support turn cost telemetry for custom model providers @copyberry
#39786 Support host-accepted exec-server WebSockets @copyberry
#39790 Deduplicate zsh fork test setup @copyberry
#39791 Handle standalone tool outputs as external context @copyberry
#39792 Reject settings updates for parent-owned subagents @copyberry
#39794 Install build tools in full Rust CI @copyberry
#39795 Add hostname to the configurable TUI status line @copyberry
#39797 Enrich thread archive analytics with thread context @copyberry
#39798 Update rmcp to 3.1.3 @copyberry
#39802 Optimize case-insensitive thread history matching @copyberry
#39804 Use multi-agent V1 for Amazon Bedrock models @copyberry
#39807 Finalize reserved PDF uploads with creation context @copyberry
#39809 Preserve WINDIR in core Windows shell environments @copyberry
#39811 Restrict macOS preference reads to full-disk policies @copyberry
#39812 Avoid materializing writable-root carveouts for presence checks @copyberry
#39813 Defer legacy filesystem policy projection @copyberry
#39822 Preserve uncapped Guardian classifier instructions @copyberry
#39825 Use Responses compaction for Amazon Bedrock @copyberry
#39827 Add history and notes tools for token-budget sessions @copyberry
#39830 Rename the history notes extension config option @copyberry
#39837 Ignore project instructions for untrusted projects @copyberry
#39847 Include context window IDs in response metadata @copyberry
#39852 Reset registry retries when refreshing Noise bundles @copyberry
#39864 Limit pending input preview wrapping work @copyberry
#39870 Allow session configuration with codex agents @copyberry
#39873 Add keybindings for cycling TUI permission modes @copyberry
#39876 Support attaching to existing realtime calls @copyberry
#39917 Honor request PATH in exec-server shell snapshots @copyberry
#39926 Resolve HTTP MCP bearer tokens in executor environments @copyberry
#39930 Track remote MCP header environment variables @copyberry
#39935 Enforce issuer binding for MCP OAuth endpoints @copyberry
#39937 Bound unified exec output delta frames @copyberry
#39940 Allow more time for local code-mode host startup @copyberry
#39941 Discover HTTP MCP servers from selected executors @copyberry
#39952 Honor required MCP servers from selected executors @copyberry
#39953 Support voice-aware configuration and version-skew builds @copyberry
#39957 Add in-memory shell snapshots to unified exec @copyberry
#39958 Stop advertising shell snapshots from local exec servers @copyberry
#39961 Test browser MCP bearer tokens over executor WebSockets @copyberry
#39962 Keep Guardian reviews isolated from executor MCP servers @copyberry
#39967 Upgrade pnpm to 10.34.5 @copyberry
#39969 Consolidate code mode output helper tests @copyberry
#39971 Fix elevated Windows sandbox setup activation @copyberry
#39975 Preserve root user authorization in subagent Guardian reviews @copyberry
#39976 Allow semaphore limit queries in the macOS sandbox @copyberry
#39979 Preserve MCP compatibility with older executors @copyberry
#39980 Enforce environment network policies for remote execution @copyberry
#39981 Bypass risk scoring for models that require automatic review @copyberry
#39985 Truncate Guardian instructions after rendering the policy @copyberry
#39991 Preserve TUI event ordering during active-thread draining @copyberry
#39992 Keep keymap action descriptions stable while navigating @copyberry
#39993 Keep credentials out of app-server logs @copyberry
#39994 Add Guardian internal session support @copyberry
#39995 Expand browser and computer use requirements @copyberry
#39997 Add a response target picker to /copy @copyberry
#39999 Hide Fast mode status for unsupported models @copyberry
#40000 Expose browser and computer-use requirements through app-server @copyberry
#40004 Preserve managed deny-read rules across permission updates @copyberry
#40005 Route escalated commands through synchronous Guardian review @copyberry
#40006 Synchronize Git enrichment tests explicitly @copyberry
#40007 Implement Amazon Bedrock setup in the app server @copyberry
#40009 Run allowlisted executor plugin stop hooks @copyberry
#40011 Synchronize concurrent Git enrichment test explicitly @copyberry
#40012 Preserve executor context for MCP stop hooks @copyberry
#40013 Reuse Guardian reviews in async risk scoring @copyberry
#40015 Harden remote installed plugin cache reconciliation @copyberry
#40017 Trace turn context creation and realtime state checks @copyberry
#40018 Add browser and computer use configuration @copyberry
#40020 Add end-to-end tests for executor Stop hooks @copyberry
#40021 Cancel Guardian reviews with their tool calls @copyberry
#40024 Honor granular sandbox approvals in unified exec @copyberry
#40028 Log Guardian V2 classification results @copyberry
#40031 Preserve strict MCP auto-review outcomes @copyberry
#40038 Add unfinished root turn suspension @copyberry
#40068 Report runtime MCP connection status @copyberry
#40150 Use thread source metadata for Guardian classifiers @copyberry
#40161 Allow exec callers to classify new threads @copyberry
#40166 Move the TUI cursor before showing it @copyberry
#40169 Add regression coverage for patch approval paging @copyberry
#40174 Preserve content item kinds in message metadata @copyberry
#40177 Require content kinds for extension prompt fragments @copyberry
#40179 Shut down resumed descendants when archiving thread trees @copyberry
#40180 Classify contextual fragments with content kinds @copyberry
#40184 Preserve context annotations in merged messages @copyberry
#40186 Identify detached memory requests as memory consolidation @copyberry
#40196 Annotate user input and contextual fragments with content kinds @copyberry
#40200 Remove the Plan mode composer nudge @copyberry
#40221 Distinguish Guardian review threads from subagents @copyberry
#40257 Support cua_repl as a Node REPL-backed MCP server @copyberry
#40264 Preserve content metadata when truncating messages @copyberry
#40266 Preserve content annotations when filtering forked agent history @copyberry
#40271 Preserve content annotations when rolling back model switches @copyberry
#40273 Normalize compacted user message annotations @copyberry
#40275 Classify additional generated context fragments @copyberry
#40277 Preserve annotations when omitting unsupported media @copyberry
#40280 Budget retained images during remote compaction @copyberry
#40281 Preserve content kinds during image preparation @copyberry
#40292 Add smoke tests for assembled Codex packages @copyberry
#40294 Classify internal model context by source @copyberry
#40295 Classify permission instructions under the permissions namespace @copyberry
#40296 Annotate Responses Lite base instructions @copyberry
#40297 Preserve developer instruction annotations in subagent forks @copyberry
#40301 Label Business Pro Lite plans as Business Premium @copyberry
#40302 Harden bubblewrap synthetic mount registry isolation @copyberry
#40308 Add TUI tools for managing Codex tasks @copyberry
#40315 Add task mentions to the TUI composer @copyberry
#40321 Update the frameless realtime default model @copyberry
#40343 Cache executor metadata from initialization @copyberry
#40363 Forward local env vars to Agent Plugin MCP servers @copyberry
#40368 Use snapshot session sources for MCP projection @copyberry
#40376 Advertise shell snapshot v2 support on Unix @copyberry
#40381 Preserve sandbox errors during session initialization @copyberry
#40382 Expose invocation sources to extension tools @copyberry
#40393 Classify Guardian V2 risk with a single token @copyberry
#40398 Stabilize the mismatched executor Stop hook test @copyberry
#40403 Prewarm more Guardian sampling WebSockets @copyberry
#40410 Strengthen Agent Plugin MCP environment overlay tests @copyberry
#40413 Honor response budgets when listing skills @copyberry
#40420 Represent Guardian policy as a contextual fragment @copyberry
#40422 Harden Windows updater command execution @copyberry
#40423 Harden Windows file URI conversion @copyberry
#40431 Render Guardian review evidence with async scorer truncation @copyberry
#40436 Add a managed gate for in-app local automation @copyberry
#40437 Report completed sub-agent activity on parent turns @copyberry
#40438 Use rust-lld for Bazel Windows MSVC Rust links @copyberry
#40441 Preserve Windows root reads with deny-read rules @copyberry
#40443 Batch sandboxed capability root discovery @copyberry
#40447 Retry failed shell snapshot captures @copyberry
#40449 Route peer agent completion activity to the initiating turn @copyberry
#40450 Gate content item kinds behind a feature flag @copyberry
#40460 Prevent Unix PTY I/O from blocking runtime shutdown @copyberry
#40464 Enforce subagent ownership across app-server inputs @copyberry
#40465 Record Guardian classifier input truncation metrics @copyberry
#40466 Add credential brokering to network proxy feature config @copyberry
#40471 Render Markdown links as clickable labels in supported terminals @copyberry
#40472 Add structured full approval reviews to extensions @copyberry
#40475 Request read control when updating Windows sandbox ACLs @copyberry
#40477 Reload Multi-Agent V2 children through their parent @copyberry
#40480 Add a computer-use-only Guardian v2 review scope @copyberry
#40481 Support managed AWS access keys for Amazon Bedrock @copyberry
#40484 Broker credential aliases in child environments @copyberry
#40486 Add root turn IDs to turn and tool analytics @copyberry
#40487 Extract agent role loading into a dedicated crate @copyberry
#40488 Export turn cost as an OTEL metric @copyberry
#40489 Honor disabled managed network configuration @copyberry
#40490 Harden project config when credential brokering is active @copyberry
#40491 Honor response budgets when reading skill resources @copyberry
#40492 Generate descriptive TUI thread titles @copyberry
#40494 Hide ephemeral system threads from TUI routing @copyberry
#40495 Suggest conversation-based thread titles in /rename @copyberry
#40496 Track history, notes, and async messages as control tools @copyberry
#40497 Harden internal Guardian session isolation @copyberry
#40498 Increase the app-server model refresh interval @copyberry
#40499 Harden startup rollout migration against concurrent updates @copyberry
#40501 Deduplicate plugin skills in unified mentions @copyberry
#40502 Collapse home paths in AGENTS.md status summaries @copyberry
#40504 Route cyber Trusted Access links by plan type @copyberry
#40508 Persist realtime events in the thread timeline @copyberry
#40509 Add persisted thread artifact models @copyberry
#40511 Add hooks for interrupted turns @copyberry
#40521 Add dot-repeat to Vim mode @copyberry
#40523 Retry provider auth commands after initial failures @copyberry
#40528 Represent terminal input in approval reviews @copyberry
#40533 Route extension hints into context-window metadata @copyberry
#40539 Inject history notes hints into context windows @copyberry
#40544 Include transparent background in image generation analytics @copyberry
#40551 Derive sandbox contexts from turn environments @copyberry
#40554 Register the transcript v2 feature flag @copyberry
#40570 Preserve Unicode paths in Windows batch aliases @copyberry
#40585 Track remaining multi-agent v2 tools in analytics @copyberry
#40587 Scope stop hooks for memory consolidation @copyberry
#40594 Preserve conversation context in Guardian transcripts @copyberry

Browser extensions, site tools, and cloud sign-in

Tue, 25 Aug 2026 00:00:00 GMT

# Browser extensions, site tools, and cloud sign-in - **More browsers:** Use the [ChatGPT browser extension](/codex/chrome-extension) in Microsoft Edge, Brave, Opera, and Vivaldi, as well as Chrome. Set up your browser in **Settings > Computer Use** in the ChatGPT desktop app. All five support tab mentions and browser control; Opera doesn't support side chat. - **Site tools (WebMCP):** In the desktop app's built-in browser, ChatGPT Work and Codex can use [tools provided by a website](/codex/webmcp) to work with the page. Use GPT-5.6 Sol or GPT-5.6 Terra and update to the latest desktop app. Site tools aren't available with GPT-5.6 Luna or in Enterprise or Edu workspaces. - **Cloud browser sign-in:** On eligible plans, ChatGPT Work on the web, iOS, and Android can ask you to [sign in to a supported website](/codex/browser?surface=web#web-sign-in-to-a-website) through the cloud browser. Enter your details in the sign-in flow, not in the chat. Cloud browser sessions stay separate from your local browser. Website sign-in isn't available for Enterprise or Edu workspaces. Availability depends on rollout and workspace settings. Website-access and action-confirmation requirements still apply.

Trigger scheduled tasks from Gmail, Slack, and GitHub events

Tue, 25 Aug 2026 00:00:00 GMT

# Trigger scheduled tasks from Gmail, Slack, and GitHub events ChatGPT scheduled tasks can now run when supported events occur in Gmail, Slack, or GitHub. Filter Gmail messages by sender or subject, watch selected Slack channels, or respond to pull request activity such as reviews, comments, commit updates, and merges. Event-triggered tasks are available in ChatGPT on the web and mobile for eligible plans. Connect the relevant app and approve its requested access before creating a task. The ChatGPT Slack app must be a member of each watched channel, and the connected GitHub app must have access to each watched repository. An event-triggered task can't also use a time-based schedule. When matching events arrive close together, ChatGPT may combine them in one run. Open **Scheduled** to review pending events or choose **Run now**. [Learn how to trigger scheduled tasks from app events](/codex/automations?surface=web#web-trigger-tasks-from-app-events).

Codex MCP server command deprecated

Mon, 24 Aug 2026 00:00:00 GMT

# Codex MCP server command deprecated The `codex mcp-server` command is now deprecated. Use the [Codex app server](/codex/app-server) instead. To use Codex from Claude Code, use the [Codex plugin for Claude Code](https://github.com/openai/codex-plugin-cc).

Codex CLI Release: 0.149.1

Mon, 24 Aug 2026 00:00:00 GMT

Changelog

Full Changelog: rust-v0.149.0...rust-v0.149.1

Codex and ChatGPT updates

Thu, 20 Aug 2026 00:00:00 GMT

# Codex and ChatGPT updates ### New features - **Apple Messages:** Use the [Apple Messages plugin](/codex/plugins?surface=app#app-use-apple-messages-from-codex) to read and search Messages chats on your Mac and prepare or send messages. It's available on all plans in the ChatGPT desktop app for macOS. You can use the plugin in ChatGPT Work and Codex. By default, ChatGPT sends messages only after you approve the message and its recipients. See the plugin guide for persistent-approval risks, revocation steps, and the known issue with tasks that disable approval prompts. - **Site co-editing:** Where Site collaboration is available, owners can [invite active members of the same workspace as editors](/codex/sites#collaborate-on-a-site). Editors can read the Site's live database data, update the Site, save versions, and publish changes after the owner publishes the Site for the first time. Owners retain control of the audience, settings, analytics, ownership, version restoration, and editor access. - **Editable Site URLs:** Where URL editing is available, owners can [change an existing Site's ChatGPT-hosted address](/codex/sites#change-a-site-url) without creating another deployment. The previous address redirects to the new URL. Custom domains are a separate, existing feature and aren't changed by this setting. - **Computer History in Europe:** [Computer History](/codex/customization/computer-history) is now available in the EEA, Switzerland, and the United Kingdom for ChatGPT Pro, Business, and Enterprise users in the ChatGPT desktop app on macOS. It's off by default and requires Memories. Business and Enterprise administrators must enable access before workspace members can choose to turn it on. - **Shared thread snapshots:** On all Codex plans, [share a read-only snapshot of a local Codex thread](/codex/use-chatgpt#share-a-read-only-snapshot-of-a-codex-thread) from the ChatGPT desktop app for macOS. The snapshot doesn't update when the original thread changes. Personal-account links can be opened by anyone with the link; workspace-account links are limited to members of the originating workspace. Codex redacts known secret patterns, but review the shared content because sensitive content may remain. View or revoke links in [ChatGPT data controls](https://chatgpt.com/#settings/DataControls), under **Shared links**. - **Unified pinned threads:** Keep the same [pinned chats](/codex/projects?surface=app#app-organize-projects-and-chats) across the ChatGPT desktop app and iOS.

Codex CLI Release: 0.149.0

Thu, 20 Aug 2026 00:00:00 GMT

New Features

Added an interactive codex agents dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142)
Added /cd, /pwd, and /cwd commands for managing the working directory in TUI sessions. (#38894)
Added codex queue for sending messages to existing local or remote sessions. (#39092)
Expanded Vim editing with character replacement and more change motions such as cw, c$, and cc. (#39661)
codex doctor now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity. (#38827, #38918, #39060, #39074)
SDK users can now pass exact CLI config overrides and select max or ultra reasoning effort. (#38817, #39662)

Bug Fixes

Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics. (#39034, #39385, #39604)
Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults. (#39153)
Fixed duplicate sub-agent activity and tightened TUI routing for sub-agent notifications and approvals. (#39049, #39088)
Realtime WebRTC sideband connections now reconnect after unexpected transport loss without dropping pending output. (#39257)
Inline TUI history now remains available in Windows Terminal scrollback. (#39619)
Inactive TUI thread replay buffers are now bounded to prevent excessive retained streamed output. (#39081)

Documentation

Clarified that external contributions should go through issues and design discussion rather than pull requests. (#39089)
Documented DNS exfiltration risks and trust limitations for secure devcontainers. (#39283)

Changelog

Full Changelog: rust-v0.148.0...rust-v0.149.0

#38817 Add raw config overrides to the TypeScript SDK @copyberry
#38819 Support metadata staging for reserved thread IDs @copyberry
#38822 Avoid cloning TUI history span content @copyberry
#38823 Avoid allocating per character when decorating hyperlinks @copyberry
#38827 Add endpoint protection checks to codex doctor @copyberry
#38830 Isolate external editor buffers from sandbox-writable paths @copyberry
#38837 Share editor keymaps across TUI composer components @copyberry
#38840 Identify Mac mini hosts in remote control handshakes @copyberry
#38893 Restore thread timestamp maxima independently @copyberry
#38894 Add working-directory commands to the TUI @copyberry
#38899 Move requirements policy ownership to execpolicy @copyberry
#38902 Honor per-environment shell variable policies @copyberry
#38907 Edit queued messages with Vim history-up @copyberry
#38913 Stop rendering columns after filling their area @copyberry
#38916 Honor legacy :project_roots permission entries @copyberry
#38918 Improve codex doctor network diagnostics @copyberry
#38919 Reject obsolete app-server permission profile fields @copyberry
#38921 Compact successful command activity in the TUI @copyberry
#38940 Add experimental app-server project APIs @copyberry
#38941 Prevent Noise auth tokens from reaching child processes @copyberry
#38942 Enforce environment-specific command policies @copyberry
#38947 Stop loading legacy managed config on Windows @copyberry
#38978 Add a configurable skill catalog token budget @copyberry
#38980 Bound Guardian v2 parent compaction context @copyberry
#38987 Include images in Guardian v2 transcripts @copyberry
#38990 Source Guardian v2 defaults from the model catalog @copyberry
#38993 Evaluate recent and character-routed skill selection @copyberry
#38994 Remove the workspace settings gate for apps and plugins @copyberry
#38997 Retry transient Guardian sampling failures @copyberry
#39001 Ignore stale Guardian tool risk scores @copyberry
#39005 Disable Guardian V2 for managed automatic reviewers @copyberry
#39006 Emit API-key turn cost telemetry from app-server @copyberry
#39007 Wait for Guardian score progress in approval tests @copyberry
#39008 Add task context to shadow skill selection @copyberry
#39017 Move MCP policy types into codex-protocol @copyberry
#39019 Isolate MCP resource headers during OAuth requests @copyberry
#39020 Restrict Windows IDE pipe client impersonation @copyberry
#39022 Hang soft-break whitespace in the TUI composer @copyberry
#39023 Reduce retained MCP result data in TUI history @copyberry
#39025 Speed up the large diff highlighting test @copyberry
#39026 Use simulated time in the long typing test @copyberry
#39028 Cache the test pet spritesheet encoding @copyberry
#39030 Speed up the in-app resume cwd test @copyberry
#39032 Encapsulate TUI shimmer under the motion module @copyberry
#39033 Bound legacy resume preview scans @copyberry
#39034 Dispatch queued messages written by other processes @copyberry
#39035 Add app-server coverage for Guardian V2 approval routing @copyberry
#39036 Allow config reads to join active app-server read batches @copyberry
#39038 Restore Guardian risk scores across thread lifecycles @copyberry
#39040 Preserve foreign paths in managed network approvals @copyberry
#39043 Enforce managed authentication backend settings @copyberry
#39045 Add managed gates for in-app chat and dictation @copyberry
#39046 Restrict MCP HTTP redirects to the configured origin @copyberry
#39047 Skip plugin hook loading when hooks are disabled @copyberry
#39049 Avoid rendering sub-agent activity twice in the TUI @copyberry
#39050 Prepare the telemetry shutdown worker during initialization @copyberry
#39051 Use installed callable apps for TUI mentions @copyberry
#39055 Add network policy metadata to environment configuration @copyberry
#39056 Verify the pinned zsh manifest in release builds @copyberry
#39057 Rate-limit TUI frames from their actual emission time @copyberry
#39058 Tag Codex Apps protocol discovery metrics @copyberry
#39060 Add desktop app diagnostics to codex doctor @copyberry
#39061 Avoid rerendering streamed code fences @copyberry
#39063 Render only visible rows in the transcript pager @copyberry
#39064 Restrict queued-message editing to its dedicated binding @copyberry
#39065 Limit terminal hyperlink layout to the visible viewport @copyberry
#39067 Add desktop security enforcement diagnostics @copyberry
#39068 Remove skill model delegation support @copyberry
#39072 Persist generated images through turn executors @copyberry
#39073 Propagate caller metadata to rendezvous connections @copyberry
#39074 Add desktop update diagnostics to codex doctor @copyberry
#39075 Avoid redundant terminal row clears @copyberry
#39077 Build filesystem JSON params only for remote TUI sessions @copyberry
#39078 Preserve tracing context for environment resolution @copyberry
#39079 Apply user MCP policy to selected executor plugins @copyberry
#39081 Bound TUI thread replay buffers by delta size @copyberry
#39082 Prompt for project trust in remote TUI workspaces @copyberry
#39083 Harden Windows sandbox provisioning against reparse points @copyberry
#39084 Preserve filesystem permission path conventions @copyberry
#39087 Read plugin authentication state from AuthManager @copyberry
#39088 Harden TUI subagent navigation @copyberry
#39089 Clarify the external contribution policy @copyberry
#39092 Add a command to queue messages for existing sessions @copyberry
#39094 Add an agents overview dashboard to the TUI @copyberry
#39098 Trace exec-server requests from receipt through completion @copyberry
#39100 Avoid redundant terminal size queries during history insertion @copyberry
#39101 Update rmcp to 3.1.2 @copyberry
#39102 Raise the GPT-5.6 maximum context window @copyberry
#39103 Drop capabilities from Linux sandbox processes @copyberry
#39112 Make the agents overview an interactive task dashboard @copyberry
#39113 Surface interactive requests in realtime conversations @copyberry
#39114 Add a dedicated codex agents dashboard command @copyberry
#39115 Remove the experimental thread config endpoint @copyberry
#39117 Reject lossy legacy permission projections @copyberry
#39122 Fail closed on deeply nested command wrappers @copyberry
#39131 Validate identifiers in plugin creator workflows @copyberry
#39141 Redact auth tokens from app-server response logs @copyberry
#39142 Add configurable shortcuts for the agents dashboard @copyberry
#39143 Hydrate recommended plugin metadata on selection @copyberry
#39145 Persist active permission profiles in turn context @copyberry
#39147 Centralize persisted resume settings lookup @copyberry
#39152 Update PyPI publish action to v1.14.2 @copyberry
#39153 Restore permission profiles when resuming threads @copyberry
#39154 Box the TUI future to bound CLI stack usage @copyberry
#39155 Prepare Python SDK 0.147.0 stable release @copyberry
#39157 Notify clients when Guardian requires strict review @copyberry
#39159 Require approval for commands with dynamic shell words @copyberry
#39163 Refresh collaboration instructions when their content changes @copyberry
#39165 Prevent marketplace identity spoofing @copyberry
#39174 Skip empty user messages for automatic idle turns @copyberry
#39176 Drop descendant progress updates after remote compaction @copyberry
#39187 Scope MCP app resource reads to their originating call @copyberry
#39192 Preserve MCP resource origins across compaction @copyberry
#39200 Add a symlink-safe reader for sensitive files @copyberry
#39205 Reject symbolic links in memory workspaces @copyberry
#39213 Add a fail-closed Tree-sitter PowerShell lowerer @copyberry
#39214 Prevent custom providers from inheriting ambient auth @copyberry
#39220 Reconnect Guardian sampling WebSockets after auth changes @copyberry
#39221 Skip redirected external-agent migration destinations @copyberry
#39224 Add Guardian v2 approval review metrics @copyberry
#39227 Include node_repl screenshots in Guardian v2 reviews @copyberry
#39235 Decouple Noise relay streams from JSON-RPC processing @copyberry
#39240 Deduplicate remote plugin bundle syncs with shared semaphores @copyberry
#39241 Record Guardian v2 classification metrics @copyberry
#39242 Add safe permission profile intersection @copyberry
#39244 Scope MCP resource reads by connector @copyberry
#39246 Give Guardian classifier connections distinct thread identities @copyberry
#39249 Add exec-server forwarding mode @copyberry
#39256 Deduplicate rollout moves when archiving threads @copyberry
#39257 Reconnect WebRTC Realtime sideband transports @copyberry
#39259 Simplify unified exec output snapshots @copyberry
#39261 Stop TUI chats on misalignment policy violations @copyberry
#39262 Prevent ConPTY DLL loading from the current directory @copyberry
#39264 Improve Guardian v2 risk classification @copyberry
#39266 Require fresh approval beneath denied permission paths @copyberry
#39267 Inject Node REPL policy into Guardian review sessions @copyberry
#39273 Preserve thread names during rollout migration @copyberry
#39274 Add provider-owned authentication recovery @copyberry
#39277 Declare experimental Amazon Bedrock setup APIs @copyberry
#39278 Preserve owner-provided environment configuration @copyberry
#39279 Propagate Windows sandbox ACL update failures @copyberry
#39281 Move shell snapshot scripts into codex-shell-command @copyberry
#39283 Document secure devcontainer DNS exfiltration risk @copyberry
#39284 Report network disconnects during approval @copyberry
#39285 Show file destinations in TUI change approvals @copyberry
#39287 Report diagnostic upload failures @copyberry
#39288 Register the async message feature flag @copyberry
#39290 Add Windows sandbox diagnostics to codex doctor @copyberry
#39293 Remove app-server's direct reqwest dependency @copyberry
#39294 Increase SQLite log sink batching @copyberry
#39296 Enable MCP tool hooks in Codex sessions @copyberry
#39298 Allow overriding Codex package versions @copyberry
#39299 Restrict agent roles to bounded configuration overrides @copyberry
#39301 Prevent Node REPL auth tokens from reaching child processes @copyberry
#39303 Record Guardian v2 classification token usage @copyberry
#39304 Keep Guardian v2 risk scores in memory @copyberry
#39306 Honor managed config during project discovery @copyberry
#39307 Fail closed on Guardian V2 risk scoring errors @copyberry
#39309 Attribute executor skill invocations to plugins @copyberry
#39311 Bind unified exec approvals to shell executables @copyberry
#39312 Add async delivery metadata to agent messages @copyberry
#39314 Run hooks with the captured session environment @copyberry
#39315 Evict guardian transcript entries in cacheable chunks @copyberry
#39316 Support Edu Plus and Edu Pro account plans @copyberry
#39319 Add the async user message tool @copyberry
#39320 Expand OAuth metadata redirect test coverage @copyberry
#39322 Enforce workspace restrictions for header authentication @copyberry
#39325 Stop migrating Cursor sandbox settings @copyberry
#39331 Route hook MCP calls through current connections @copyberry
#39335 Enforce environment MCP policies @copyberry
#39372 Scope TUI approval requests to their threads @copyberry
#39385 Prefer the most recent session when queueing by name @copyberry
#39402 Remove npm package staging from repo checks @copyberry
#39404 Support FD mounts with older system Bubblewrap versions @copyberry
#39410 Refresh expired AWS credentials for Bedrock @copyberry
#39452 Remove the feature gate for async user messages @copyberry
#39474 Consolidate Guardian extensions into codex-guardian-v2 @copyberry
#39480 Move shell snapshot tests into shell-command @copyberry
#39493 Make head-tail buffer capacity const generic @copyberry
#39494 Test panoramic Guardian transcript image resizing @copyberry
#39496 Use default timeouts in cyber exec policy tests @copyberry
#39497 Correct normalized dynamic tool coverage across response modes @copyberry
#39501 Use a narrow fixture for the unified image resize test @copyberry
#39505 Test text stringify errors in the code mode runtime @copyberry
#39506 Test code mode notifications without a sync tool call @copyberry
#39509 Test disabled enhanced Node REPL transcript images separately @copyberry
#39510 Track built-in control tool calls in analytics @copyberry
#39514 Use stored item types when materializing turn summaries @copyberry
#39515 Use mem::take to drain unified exec output buffers @copyberry
#39520 Isolate automatic plugin Git operations @copyberry
#39523 Persist thread section moves before the first turn @copyberry
#39524 Stop treating Git commands as inherently safe @copyberry
#39584 Add a just recipe for assembling Codex packages @copyberry
#39585 Test plugin sync isolation from repository Git config @copyberry
#39586 Isolate IPC in Bubblewrap sandboxes @copyberry
#39588 Preserve unparsed shell wrappers in exec policy @copyberry
#39590 Harden plugin manifest handling during installation @copyberry
#39592 Prevent SQLx warnings from feeding back into SQLite logs @copyberry
#39594 Raise the MCP tool name limit to 128 bytes @copyberry
#39595 Keep marketplace upgrade state out of config @copyberry
#39597 Separate thread settings from environment configuration @copyberry
#39599 Protect macOS Seatbelt writable root anchors @copyberry
#39601 Keep async user messages on the direct tool surface @copyberry
#39602 Use in-process parsing for PowerShell command classification @copyberry
#39604 Preserve queued TUI input semantics @copyberry
#39605 Hide approved automatic review warnings in the TUI @copyberry
#39606 Enable user namespaces in shared CI setup @copyberry
#39607 Resolve model-provided shells by type @copyberry
#39608 Harden skill installation against unsafe symlinks @copyberry
#39609 Limit Bazel integration test threads on macOS @copyberry
#39611 Harden MCP OAuth fallback credential writes @copyberry
#39614 Prevent apply_patch from widening write permissions @copyberry
#39615 Bind MCP OAuth refresh tokens to their issuer @copyberry
#39616 Validate linked worktrees before inheriting project trust @copyberry
#39618 Apply composer editing preferences to TUI text prompts @copyberry
#39619 Preserve inline TUI scrollback in Windows Terminal @copyberry
#39620 Stream executor capability and skill file reads @copyberry
#39623 Prevent protected-path rename bypasses in macOS Seatbelt @copyberry
#39625 Add cwd-relative turn diff paths @copyberry
#39629 Preserve parent repository discovery through sandbox metadata mounts @copyberry
#39630 Retire the untrusted approval policy @copyberry
#39631 Skip sandboxed shell commands in Guardian v2 by default @copyberry
#39632 Expose permission profile resolution in the core API @copyberry
#39635 Show strict review warnings in the TUI @copyberry
#39637 Treat invalid_grant refresh failures as permanent @copyberry
#39640 Prompt to unarchive sessions before resuming or forking @copyberry
#39641 Sanitize developer context in full-history agent forks @copyberry
#39645 Enforce managed residency for model providers @copyberry
#39646 Exercise restricted-token sandboxing in cyber policy tests @copyberry
#39649 Resolve bundled Windows helpers through bin junctions @copyberry
#39653 Enforce filesystem permissions when loading AGENTS.md @copyberry
#39655 Make core integration test permissions explicit @copyberry
#39656 Advertise the Desktop app in graphical Linux sessions @copyberry
#39657 Warn when launching the deprecated MCP server @copyberry
#39658 Let Guardian V2 satisfy required model reviews @copyberry
#39659 Harden unsandboxed patch filesystem access @copyberry
#39661 Expand Vim change commands and add character replacement @copyberry
#39662 Add max and ultra reasoning efforts to the SDKs @copyberry
#39663 Restrict plugin migration to home scope @copyberry
#39665 Add macOS Seatbelt filesystem integration tests @copyberry
#39666 Improve no-follow filesystem behavior across platforms @copyberry

GitLab support in Codex cloud (Beta)

Wed, 19 Aug 2026 00:00:00 GMT

# GitLab support in Codex cloud (Beta) GitLab support is available in beta on all ChatGPT plans. Connect a GitLab project to Codex cloud, create an environment for it, start tasks from issues or merge requests with `@codex`, and request one-off or automatic merge request reviews. The integration runs in Codex cloud. A managed workspace admin can disable the connector. GitLab-triggered activity requires permission to configure the applicable webhook. For GitLab Self-Managed or GitLab Dedicated, a workspace admin must configure the connection, and webhook activity requires GitLab 19.0 or later. Codex cannot complete a review when GitLab omits a collapsed or oversize diff. Learn how to [use Codex with GitLab](/codex/third-party/gitlab).

ChatGPT for iOS

Tue, 18 Aug 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added a setting to open ChatGPT directly in Codex Remote on launch. - Added support for standard MCP forms and editable message approvals. - Linked folders now open directly in the files sheet. ### Improvements and bug fixes - Improved the New Thread project picker to reflect the selected host's current projects. - Voice now works directly from existing task composers, connects more reliably, and continues task actions in the background. - Improved diff review stability and performance, especially in large workspaces. - Added a Retry action when task messages fail to load. - Fixed large task responses failing to load. - Fixed tasks disappearing or remaining unavailable after being idle, reconnecting, or returning to the task list. - Improved host pairing reliability and prevented enrollment checks from freezing the app. - Improved response annotations and preserved streamed activity when tasks complete. - Canceling or editing a steering message now prevents delivery.

Codex CLI Release: 0.148.0

Tue, 18 Aug 2026 00:00:00 GMT

New Features

Export complete TUI conversations to Markdown with /export, either to the clipboard or a new file. (#37358)
Fork sessions with codex exec fork, and archive or restore sessions from the TUI resume picker. (#37367, #37369, #37371)
Draft prompts while the TUI initializes, with resume and fork progress shown during startup. (#38642, #38788)
View estimated thread credits or cost in /status, status lines, and terminal titles for eligible workspaces. (#38281, #38282)
Use Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing support. (#38470)
Hooks can now run commands asynchronously and invoke MCP tools. (#37533, #38705)

Bug Fixes

Model switches and settings updates no longer leave stale instructions behind or change an active turn midstream. (#37260, #38785)
Resumed sessions now restore their persisted working directory and approval policy, with more accurate transcript previews. (#37198, #37368, #38605)
Turns reconnect through temporary provider outages, and MCP servers recover after OAuth reauthentication without restarting Codex. (#37337, #37485, #38418)
TUI startup no longer lets buffered terminal input activate prompts accidentally, and onboarding appears when authentication is missing. (#38641, #38643, #38644)
Composer and transcript rendering now handle CRLF pastes, wrapped whitespace, and long URLs correctly. (#37709, #38380, #38704)
Sandbox restrictions now fail closed for denied or unreadable paths across Linux and Windows. (#37875, #38026, #38416, #38660)

Documentation

The bundled skill-creator guide is more focused, and validation now rejects unfinished TODO placeholders. (#38384)

Changelog

Full Changelog: rust-v0.147.0...rust-v0.148.0

#37190 Interrupt cyber model turns after one Guardian denial @copyberry
#37191 Preserve legacy semantics during rollout migration @copyberry
#37198 Prefer persisted cwd when reading local threads @copyberry
#37199 Track thread archive analytics @copyberry
#37204 Add durable user-message queue dispatch @copyberry
#37206 Add a unified image budget @copyberry
#37210 Fetch remote installed plugins across all scopes @copyberry
#37211 Harden network proxy MITM authorization @copyberry
#37248 Cover remote MCP discovery timeout cleanup @copyberry
#37252 Allow agent roles on full-history forks @copyberry
#37260 Fix first-turn model switching and rollback @copyberry
#37261 Start cached MCP servers lazily for subagents @copyberry
#37267 Support plugin roots in the host skill loader @copyberry
#37273 Reuse MCP handlers across sampling steps @copyberry
#37279 Avoid cloning immutable metadata on tool search cache hits @copyberry
#37335 Fully repaint inline viewports after history overlap @copyberry
#37336 Use step environments for extension turn input @copyberry
#37337 Recover MCP servers after OAuth reauthentication @copyberry
#37338 Honor the configured ChatGPT origin in connector install URLs @copyberry
#37339 Reload app-server telemetry after account changes @copyberry
#37340 Consolidate deferred environment provisioning APIs @copyberry
#37341 Support content references for inline visualizations @copyberry
#37342 Preserve foreign cwd URIs for turn-input contributors @copyberry
#37343 Stage Bazel app-server test binaries in TEST_TMPDIR @copyberry
#37344 Fix subagent MCP startup status settling @copyberry
#37345 Send model routing hints to the Codex backend @copyberry
#37347 Track context windows per agent @copyberry
#37348 Add rollout migration tooling and background migration @copyberry
#37349 Mount a minimal /dev in full-filesystem Bubblewrap sandboxes @copyberry
#37350 Allow ThreadManager to customize thread ID generation @copyberry
#37352 Configure the default code-mode exec yield timeout @copyberry
#37354 Retry busy app-server test executable spawns @copyberry
#37356 Support agent identity endpoint overrides @copyberry
#37357 Clamp short wait_agent timeouts to the configured minimum @copyberry
#37358 Add Markdown conversation export to the TUI @copyberry
#37360 Use consistent TUI input placeholders @copyberry
#37363 Recognize MCP tool hook configurations @copyberry
#37366 Harden local MCP server process tree cleanup @copyberry
#37367 Add session forking to codex exec @copyberry
#37368 Restore approval policy when resuming threads @copyberry
#37369 Add session archiving to the resume picker @copyberry
#37371 Restore archived sessions from the resume picker @copyberry
#37389 Add tool namespace metadata configuration @copyberry
#37400 Rename the tool registry metadata setting @copyberry
#37406 Add a loader for executor-local config layers @copyberry
#37408 Add executor-local config reads to the exec server @copyberry
#37424 Cap project instructions across environments @copyberry
#37433 Expose multi-agent versions in model/list @copyberry
#37434 Add process diagnostics snapshots @copyberry
#37439 Add shared skill root loading interfaces @copyberry
#37440 Load plugin skill roots through the host skills service @copyberry
#37444 Unify plugin skill loading with the host skill service @copyberry
#37446 Preserve base instruction provenance across sessions @copyberry
#37447 Respect plugin skill availability in tool suggestions @copyberry
#37452 Unify plugin skill loading through the shared loader @copyberry
#37457 Remove the legacy core skill loader @copyberry
#37461 Remove the unused remote skills client @copyberry
#37466 Move skill config rule resolution into codex-config @copyberry
#37470 Expose app-server diagnostics through the experimental API @copyberry
#37477 Include call IDs in MCP requests and clarify metadata config @copyberry
#37478 Shard state unit tests under Bazel @copyberry
#37479 Report temporary directories in exec-server environment info @copyberry
#37480 Delegate remote process sandboxing to the executor @copyberry
#37483 Interrupt active code-mode cells with their turn @copyberry
#37485 Keep response streams alive through connection failures @copyberry
#37486 Expose runtime activity in server diagnostics @copyberry
#37488 Generalize skill locator aliases across providers @copyberry
#37489 Alias resource-backed skill locators under context pressure @copyberry
#37492 Include tool namespace inventory in turn metadata @copyberry
#37494 Add MCP event discovery and subscriptions @copyberry
#37497 Limit payload traces in diagnostic logs @copyberry
#37498 Preserve child waiters during process termination @copyberry
#37500 Remove the legacy code-mode tool metadata inventory @copyberry
#37503 Move host skill prompt injection into the skills extension @copyberry
#37504 Disable Nagle's algorithm for code-mode WebSockets @copyberry
#37505 Remove the codex-core-skills crate @copyberry
#37507 Include sandbox mode in response metadata @copyberry
#37510 Define the code-mode host gRPC protocol @copyberry
#37511 Enforce automatic review for managed models @copyberry
#37513 Reuse parent compactions in Guardian review sessions @copyberry
#37516 Ignore reusable command approvals for cyber models @copyberry
#37519 Expose auto-review ignore rules in config requirements @copyberry
#37527 Terminate timed-out hook process trees @copyberry
#37528 Keep external agent detection from blocking config requests @copyberry
#37530 Implement the gRPC code-mode host service @copyberry
#37533 Support asynchronous command hooks @copyberry
#37538 Expose execution mode in hook listings @copyberry
#37607 Prevent launch context from reaching child processes @copyberry
#37610 Add workload identity token exchange support @copyberry
#37618 Use step environments for Guardian approval reviews @copyberry
#37622 Include buffered turns when editing prompts @copyberry
#37641 Use the step context for command approval prefix rules @copyberry
#37644 Generalize hook handler execution @copyberry
#37645 Improve plugin install failure analytics @copyberry
#37654 Advertise environment config read support @copyberry
#37709 Keep wrapped composer whitespace with following text @copyberry
#37723 Report I/O subtypes for session config import failures @copyberry
#37745 Add gRPC TCP transport to the code-mode host @copyberry
#37747 Bound Cursor project path resolution @copyberry
#37757 Add a line-ending preservation mode to apply_patch @copyberry
#37758 Add a feature flag to preserve apply_patch line endings @copyberry
#37773 Forward install attempt IDs for remote plugins @copyberry
#37788 Use native transparency in the imagegen skill @copyberry
#37806 Initialize the install attempt ID in the plugin analytics test @copyberry
#37807 Share model-visible tool specs across prompts @copyberry
#37808 Simplify package-based skill reads @copyberry
#37810 Support packaged defaults in config layering @copyberry
#37812 Keep multi-workspace skill listings consistent @copyberry
#37828 Track running unified exec processes at turn completion @copyberry
#37832 Remove obsolete plugin skill discovery helpers @copyberry
#37833 Encapsulate watchable skill root selection @copyberry
#37836 Run plugin and skill tests on Windows @copyberry
#37838 Tighten the skills extension API surface @copyberry
#37842 Speed up MCP OAuth credential reads @copyberry
#37843 Use the shared environment scrubber in git-utils @copyberry
#37847 Preserve environments when reloading V2 agents @copyberry
#37848 Expose the session ID to shell commands @copyberry
#37850 Expose plugin ownership in MCP server status @copyberry
#37851 Route intercepted exec approvals through shared review @copyberry
#37860 Speed up MCP OAuth credential reads @copyberry
#37862 Rename environment config for turn scope @copyberry
#37864 Support MCP form input in full-access user threads @copyberry
#37866 Add MCP OAuth credential contention regression tests @copyberry
#37867 Reject duplicate resolved paths in apply_patch @copyberry
#37871 Extract persisted history types into a dedicated crate @copyberry
#37874 Keep runtime summary metrics out of Statsig exports @copyberry
#37875 Honor the configured Windows sandbox level for managed networking @copyberry
#37878 Add configurable goal token budget limits @copyberry
#37882 Read safety buffering from response metadata @copyberry
#37886 Extend bundled package discovery and expose its version @copyberry
#37889 Ignore Unix socket proxy settings on Windows @copyberry
#37891 Use thread configuration for app/read @copyberry
#37892 Validate images before returning view_image output @copyberry
#37895 Add configurable Responses API request metadata @copyberry
#37896 Add hermetic Windows SDK and MSVC runtime repositories @copyberry
#37898 Add appearance metadata to thread sections @copyberry
#37901 Make submission operations move-only @copyberry
#37902 Defer view_image processing to history insertion @copyberry
#37906 Make gRPC code-mode notifications fire-and-forget @copyberry
#37908 Apply refreshed cloud config bundles to later sessions @copyberry
#37922 Extract reusable code-mode host test support @copyberry
#37926 Distinguish turn-start thread persistence @copyberry
#37929 Add shared runtime build information @copyberry
#37939 Validate images before returning view_image output @copyberry
#37970 Cache tool catalogs for streamable HTTP MCP servers @copyberry
#37979 Honor per-directory bundled skill settings in skills/list @copyberry
#37984 Stop re-exporting skill APIs from codex-core @copyberry
#38011 Remove config lockfile support @copyberry
#38020 Retry transient exec-server startup failures @copyberry
#38024 Expose image generation usage-limit failures @copyberry
#38026 Fail closed on unsafe Linux unreadable globs @copyberry
#38032 Hide approved Guardian assessments from TUI history @copyberry
#38033 Use session metadata to validate thread history paths @copyberry
#38034 Filter live rollout items in place @copyberry
#38035 Propagate MCP elicitation event delivery failures @copyberry
#38036 Limit TUI streaming traces in SQLite logs @copyberry
#38040 Propagate custom CA settings to local MCP servers @copyberry
#38041 Add gRPC-backed code-mode sessions @copyberry
#38043 Sandbox remote apply_patch operations @copyberry
#38044 Compact code mode tool calls in TUI history @copyberry
#38045 Store model history in response item envelopes @copyberry
#38046 Include auto-review state in turn metadata @copyberry
#38047 Add turn-aware response item injection @copyberry
#38049 Harden network proxy credential brokerage @copyberry
#38051 Run required CI against pull request merge commits @copyberry
#38052 Add per-login MCP OAuth client registration selection @copyberry
#38054 Add configuration-backed external authentication @copyberry
#38056 Configure PSP routing through the feature system @copyberry
#38057 Track artifact operations from trusted plugin markers @copyberry
#38058 Preserve harness metadata across conversation history @copyberry
#38060 Disable storage for Azure Responses requests @copyberry
#38061 Preserve proxy settings for Windows sandbox debug sessions @copyberry
#38064 Grant Windows sandbox access to the Codex app root @copyberry
#38066 Track resource-backed skill invocations @copyberry
#38067 Scope environment readiness config to thread attachments @copyberry
#38072 Forward gRPC code-mode callbacks to session delegates @copyberry
#38074 Track implicit executor skill invocations @copyberry
#38075 Respect rendered width when adding TUI history @copyberry
#38078 Reduce cloning in world-state patch handling @copyberry
#38080 Allow nested Git repositories in the Windows sandbox @copyberry
#38081 Use ReviewDecision for MCP tool approvals @copyberry
#38083 Remove standard form input from app-server docs @copyberry
#38084 Allow empty input to start a turn @copyberry
#38086 Support execution-host context when resolving cloud config @copyberry
#38087 Route gRPC code-mode sessions through the shared HTTP client @copyberry
#38089 Add CIMD support to MCP OAuth registration @copyberry
#38092 Simplify queued user message admission @copyberry
#38094 Test Guardian context for code mode commands @copyberry
#38101 Attach hosted app context to file uploads @copyberry
#38103 Avoid cloning MCP invocations in TUI history @copyberry
#38108 Route MCP tool calls through shared approval handling @copyberry
#38127 Distinguish rollout IDs from thread IDs @copyberry
#38165 Resolve subagent analytics connections lazily @copyberry
#38167 Read executor skill packages directly @copyberry
#38170 Notify running turn watchers only on count changes @copyberry
#38172 Update lru and webbrowser dependencies @copyberry
#38179 Embed defaults in the packaged config layer @copyberry
#38183 Add conservative restriction helpers for tool policies @copyberry
#38184 Run search tool integration tests on Windows @copyberry
#38186 Stop overriding environments in the skills user-turn test @copyberry
#38188 Integrate workload identity with Codex authentication @copyberry
#38189 Run plugin app-server tests in automatic environments @copyberry
#38197 Add an LRU baseline to skill shadow selection @copyberry
#38204 Fuse recent and lexical skills in shadow selection @copyberry
#38205 Enforce non-interactive approval policy for Codex delegates @copyberry
#38214 Avoid allocations when sanitizing TUI user text @copyberry
#38217 Start required cached MCP servers lazily for subagents @copyberry
#38227 Add a flag to retain client developer messages @copyberry
#38228 Detect implicit skill invocations from PowerShell reads @copyberry
#38232 Track root turns across delegated Codex requests @copyberry
#38238 Add manifest-defined metrics for trusted plugin scripts @copyberry
#38239 Add bounded plugin measurement analytics @copyberry
#38241 Include Node REPL policy in turn metadata @copyberry
#38242 Cache stable active-cell layout measurements @copyberry
#38243 Track client-authored developer messages in rollout history @copyberry
#38244 Resolve paginated thread history by rollout ID @copyberry
#38245 Add dynamic HTTP header helpers for MCP servers @copyberry
#38251 Read model ETags from WebSocket metadata events @copyberry
#38252 Collect metrics from plugin shell commands @copyberry
#38253 Collect plugin metrics from unified exec commands @copyberry
#38256 Report the latest rejection from multiple network reviews @copyberry
#38257 Reconnect gRPC code-mode sessions after host restarts @copyberry
#38258 Unify external authentication provider handling @copyberry
#38261 Resolve skill package aliases in skills.read @copyberry
#38265 Use bounded fallback ports for Windows managed proxies @copyberry
#38268 Expose executor skill roots from skills.read @copyberry
#38270 Add per-thread usage queries to the backend client @copyberry
#38272 Stamp conversation history items with creation times @copyberry
#38274 Represent persisted world state as JSON objects @copyberry
#38275 Unify turn input submission and routing @copyberry
#38276 Track plugin metrics for background unified exec commands @copyberry
#38278 Add app-server coverage for plugin measurement analytics @copyberry
#38280 Use protobuf's built-in Bazel proto rule @copyberry
#38281 Show estimated thread usage in /status @copyberry
#38282 Add thread usage to TUI status surfaces @copyberry
#38283 Collect plugin metrics from remote executors @copyberry
#38285 Move codex-execpolicy to protocol dev dependencies @copyberry
#38288 Support gRPC code-mode hosts in app server @copyberry
#38291 Remove unused apply_patch prompt fallback @copyberry
#38292 Add durable reverts for paginated threads @copyberry
#38299 Route network access through the shared approval pipeline @copyberry
#38303 Add interrupted turn recovery @copyberry
#38306 Protect inline visualization viewers from sandbox writes @copyberry
#38321 Make gRPC code-mode yield tests deterministic @copyberry
#38336 Add Guardian V2 extension scaffold @copyberry
#38356 Support sandboxed file streaming in exec-server @copyberry
#38358 Optimize orphan output normalization @copyberry
#38361 Test hook rejection for explicitly started queue items @copyberry
#38362 Stabilize exec-server byte-budget tests @copyberry
#38363 Persist security risk scores in rollout history @copyberry
#38368 Add the Guardian V2 Luna sampler @copyberry
#38377 Constrain Guardian reviews to parent filesystem permissions @copyberry
#38380 Preserve user message styling when wrapping long URLs @copyberry
#38381 Prevent unread events from blocking in-process requests @copyberry
#38383 Return Luna samples when streamed JSON completes @copyberry
#38384 Refine skill creation guidance and validation @copyberry
#38390 Use effective permissions when trusting app-server projects @copyberry
#38394 Reject sessions with unloadable required managed hooks @copyberry
#38396 Reap orphaned processes in Linux sandboxes @copyberry
#38397 Include Node REPL results in Guardian reviews @copyberry
#38399 Preserve floating-point values when decoding rollout lines @copyberry
#38400 Refresh tracing interest in the token estimate test @copyberry
#38403 Expose conversation history to tool lifecycle extensions @copyberry
#38406 Pool Guardian sampling WebSocket connections @copyberry
#38409 Classify tool calls in the Guardian V2 extension @copyberry
#38413 Allow metadata updates without materializing threads @copyberry
#38414 Add bounded transcript rendering for Guardian v2 @copyberry
#38415 Recognize PowerShell Get-Content file reads @copyberry
#38416 Honor filesystem permissions for app file uploads @copyberry
#38418 Clarify MCP OAuth reauthentication errors @copyberry
#38419 Apply Codex attribution to app-created commits @copyberry
#38420 Recover capability discovery after executor disconnects @copyberry
#38423 Centralize thread environment selection state @copyberry
#38424 Fail closed when workload identity initialization fails @copyberry
#38426 Protect workload identity auth in app-server account RPCs @copyberry
#38427 Add Guardian guidance for Node REPL tool calls @copyberry
#38429 Route curated plugin catalogs by authentication mode @copyberry
#38432 Gate Node REPL Guardian guidance on model metadata @copyberry
#38436 Add rustls fallback for local MCP HTTP requests @copyberry
#38439 Preserve approval policies for auto-reviewed models @copyberry
#38440 Add app-server support for reverting paginated threads @copyberry
#38441 Give Guardian V2 full tool action context @copyberry
#38443 Tag current time reminders in model context @copyberry
#38445 Retain client developer messages across context compaction @copyberry
#38446 Refresh current-time reminders for full-history subagents @copyberry
#38447 Add running-task exit choices to local daemon sessions @copyberry
#38448 Support per-server MCP OAuth callback ports @copyberry
#38449 Expose model upgrade retirement times @copyberry
#38450 Embed the Windows sandbox setup manifest in Bazel builds @copyberry
#38452 Add structured telemetry for response retries @copyberry
#38454 Include node_repl images in Guardian review evidence @copyberry
#38456 Add experimental thread queue APIs to app server @copyberry
#38460 Add an AbsolutePathBuf conversion for FileSystemPath @copyberry
#38461 Centralize turn environment selection state @copyberry
#38463 Preserve thread subscriptions across revert reloads @copyberry
#38467 Parse model annotations from skill frontmatter @copyberry
#38470 Add an Amazon Bedrock Runtime provider @copyberry
#38473 Stop generating accepted-line fingerprints @copyberry
#38475 Add bounded skill model delegation instructions @copyberry
#38483 Include agent names in turn metadata @copyberry
#38484 Search selected plugin apps before falling back @copyberry
#38492 Enforce strict auto-review for MCP tool calls @copyberry
#38493 Reuse pending MCP startups during reconciliation @copyberry
#38494 Verify bundled bwrap in Bazel builds @copyberry
#38499 Enable parallel tool calls for all model prompts @copyberry
#38521 Carry environment config in turn selections @copyberry
#38527 Configure Guardian sampling for responses lite @copyberry
#38540 Record Guardian V2 risk scores on threads @copyberry
#38553 Initialize Guardian V2 samplers per thread @copyberry
#38555 Preserve Guardian transcript boundaries in sampling input @copyberry
#38558 Improve Guardian transcript context selection @copyberry
#38561 Restrict filesystem helper sandbox access @copyberry
#38564 Reuse compatible parent compactions in Guardian V2 @copyberry
#38567 Store security risk scores as a snapshot @copyberry
#38568 Run tool start callbacks after pre-tool hooks @copyberry
#38569 Require automatic review for high-risk Guardian v2 actions @copyberry
#38579 Report thread storage changes after rollout migration @copyberry
#38580 Keep the latest Guardian risk score during concurrent sampling @copyberry
#38581 Honor cloud-managed requirements in feature listings @copyberry
#38586 Bound Guardian V2 tool actions before risk classification @copyberry
#38592 Let extensions resolve approval reviews before Guardian @copyberry
#38596 Prioritize new Guardian classifications under load @copyberry
#38597 Install Guardian V2 in the app server @copyberry
#38601 Make unbounded connection retries configurable @copyberry
#38602 Isolate Guardian reviewer sessions from parent extensions @copyberry
#38604 Avoid paginated resume requests for verified legacy rollouts @copyberry
#38605 Fix resume transcript preview line selection @copyberry
#38606 Allow larger gRPC code mode tool descriptions @copyberry
#38608 Fix the missing resume picker history mode import @copyberry
#38610 Support workload identity in remote exec-server auth @copyberry
#38612 Skip stale Guardian risk score persistence @copyberry
#38615 Remove the gRPC code-mode enabled tool limit @copyberry
#38616 Route escalated approval retries through Guardian @copyberry
#38617 Prioritize global models in the Bedrock Runtime catalog @copyberry
#38618 Apply Guardian policies to v2 risk classification @copyberry
#38619 Source multi-agent instructions from the model catalog @copyberry
#38621 Preserve large gRPC code-mode tool errors @copyberry
#38623 Preserve MCP namespace descriptions in the tool catalog cache @copyberry
#38624 Open notes when accepting the request input Other option @copyberry
#38625 Enable unified exec by default on Windows @copyberry
#38628 Make Guardian v2 risk classification configurable @copyberry
#38630 Remove the gRPC code-mode open session limit @copyberry
#38634 Add MCP protocol discovery metrics @copyberry
#38635 Remove repository-local Codex skills @copyberry
#38639 Render the initial TUI session header before input @copyberry
#38641 Harden TUI startup input handling @copyberry
#38642 Keep the composer editable during TUI startup @copyberry
#38643 Delay the startup composer until first-login onboarding @copyberry
#38644 Show onboarding when Codex home lacks authentication state @copyberry
#38645 Deliver gRPC code-mode notifications without truncation @copyberry
#38646 Read Apple notarization issuer ID from Key Vault @copyberry
#38647 Add an override to skip project configuration @copyberry
#38649 Reuse the TUI startup account response during bootstrap @copyberry
#38650 Canonicalize default namespaces in gRPC subscription filters @copyberry
#38651 Move permission profile snapshots into the protocol @copyberry
#38657 Skip terminal hyperlink layout when no links are present @copyberry
#38660 Enforce managed deny-read rules in the Windows sandbox @copyberry
#38662 Delete Thai combining marks one at a time in the composer @copyberry
#38664 Resolve local JSON Schema refs in Code Mode types @copyberry
#38670 Forward executor network policy decisions for auditing @copyberry
#38673 Honor per-environment permission profiles @copyberry
#38675 Exclude shortcut-modified input from TUI paste bursts @copyberry
#38678 Preserve environment configuration ownership @copyberry
#38681 Preserve HTTP fallback for delegated sessions @copyberry
#38682 Surface misalignment policy violations as typed errors @copyberry
#38684 Support pending environment attachment configuration @copyberry
#38690 Propagate request trace context through exec-server relays @copyberry
#38701 Route permission requests through shared Guardian approvals @copyberry
#38703 Refresh hook runtimes after plugin changes @copyberry
#38704 Normalize CRLF line endings in pasted text @copyberry
#38705 Add MCP tool handler support to the hooks engine @copyberry
#38743 Scope TUI app directory state to the active context @copyberry
#38746 Remove the TUI test dependency on codex-cli @copyberry
#38767 Forward workload identity context during token exchange @copyberry
#38774 Use paginated history for persistent exec threads @copyberry
#38785 Keep active-turn model settings stable across updates @copyberry
#38788 Show resume and fork status during TUI startup @copyberry
#38795 Add storage diagnostics to codex doctor @copyberry
#38800 Route executor policy audits through log-only telemetry @copyberry
#38806 Add a health endpoint to the code-mode gRPC listener @copyberry

Public plugin catalog CSV export

Mon, 17 Aug 2026 00:00:00 GMT

# Public plugin catalog CSV export Eligible ChatGPT Enterprise workspace owners and admins can download a CSV of the public plugins visible to their workspace. The export includes plugin, app, and Chat skill names and descriptions, along with developer, version, date added in UTC, and OpenAI verification metadata. Open [Admin > Plugins](https://chatgpt.com/admin/plugins), select **Public**, and then select the download icon (**Export CSV**). The export uses a public-catalog snapshot that can be up to 48 hours old and does not include plugins created for the workspace. It isn't available in FedRAMP workspaces. Learn more about [plugin controls](/codex/enterprise/apps-and-connectors).

Computer History

Thu, 13 Aug 2026 00:00:00 GMT

# Computer History [Computer History](/codex/customization/computer-history) is an opt-in feature in the ChatGPT desktop app on macOS that turns activity across apps and websites into memories and a timeline that ChatGPT and Codex can use. Choose which apps and websites contribute, pause collection, and review or delete your history at any time. Computer History is available to ChatGPT Pro, Business, and Enterprise users. Business and Enterprise administrators must enable access before workspace members can turn it on. Initial availability excludes the European Economic Area (EEA), Switzerland, and the United Kingdom.

Linux desktop preview and agent imports

Tue, 11 Aug 2026 00:00:00 GMT

# Linux desktop preview and agent imports ### Install the ChatGPT desktop app on Linux The [ChatGPT desktop app for Linux](/codex/linux/linux-app) is available in preview for supported Ubuntu, Debian, and Fedora desktop distributions on x64 and ARM64 processors. Download the `.deb` or `.rpm` package for your distribution, then sign in to work with projects, local files, and Codex. ### Import setup and recent work from other agents The desktop app supports **Claude Code**, **Claude Cowork**, and **Cursor**. [Import instructions, settings, skills, plugins, projects, and recent work](/codex/import), then turn on automatic updates in **Settings > Import** to keep imported work in sync. Codex CLI can also import supported setup and recent chats from Claude Code and Cursor with `/import`.

Introducing Daybreak Blue and Daybreak Red

Mon, 10 Aug 2026 00:00:00 GMT

# Introducing Daybreak Blue and Daybreak Red Daybreak now offers two access tiers for approved defenders: Daybreak Blue and Daybreak Red. Use them to move from security findings to validated fixes in explicitly authorized engagements. Start with Daybreak Blue for most defensive security work. It provides access to general-purpose models such as GPT-5.6 Sol for vulnerability discovery, secure code review, detection engineering, incident response, malware analysis, and patch validation. Daybreak Red provides separately approved access to purpose-trained models such as GPT-5.6 Cyber for authorized vulnerability reproduction, exploit validation, penetration testing, red teaming, and complex system analysis. Access requires approval through [Trusted Access for Cyber](/codex/cyber-safety#trusted-access-for-cyber) and applies only to the approved identity, workspace or API organization and project, model, and product surface. Daybreak Red requires separate approval and provisioning; Daybreak Blue access doesn't grant access to Daybreak Red. Work in an isolated environment, define your engagement scope, use least-privilege [permission profiles](/codex/permissions), and configure [Auto-review](/codex/sandboxing/auto-review) for eligible actions before they cross the sandbox boundary. Learn more about [Cyber Safety](/codex/cyber-safety), [Codex credit rates](/codex/pricing#credits-overview), and [API token prices](/api/docs/pricing).

ChatGPT for iOS

Fri, 07 Aug 2026 00:00:00 GMT

# ChatGPT for iOS ### Improvements and bug fixes - Improved task reconnection with visible progress while keeping existing tasks usable during connection checks. - New tasks now preserve their first prompt and attachments while starting, preventing empty tasks that could not be reopened. - Improved editing performance for long prompts. - Voice conversations now follow your Background Conversations setting. - Approvals and user-input requests now recover reliably after reconnecting, with cleaner approval details in the transcript. - Fixed follow-up `/goal` prompts after completing a goal. - Fixed task-list freezes, disappearing task titles, flashing thinking summaries, and transcript crashes.

Codex CLI Release: 0.147.0

Fri, 07 Aug 2026 00:00:00 GMT

New Features

Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373)
Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)
Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)

Bug Fixes

Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)
Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)
Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (#35960, #35962, #37166)
Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (#35655, #35851, #37129)
Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (#36960, #37132)
Harden plugin isolation and deny network access when policy updates fail. (#37027, #36967, #36037)

Documentation

Improve the bundled OpenAI documentation skill with targeted official-source lookup and clearer guidance for Codex, model selection, and API workflows. (#36014)

Chores

Upgrade the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0. (#36001, #35959, #35831)
Secure macOS release notarization using Azure Key Vault instead of exporting private signing keys. (#37154)
Remove the deprecated codex exec --full-auto flag; use --sandbox workspace-write instead. (#36054)
Stop publishing redundant Linux bundle archives; use the standard codex-package-<target> release archives. (#36342)

Changelog

Full Changelog: rust-v0.146.0...rust-v0.147.0

#35590 Expose cached MCP tools before server startup @copyberry
#35594 Recommend longer waits in the v2 wait_agent schema @copyberry
#35595 Allow alpha hotfix versions in R2 releases @copyberry
#35597 Add metrics for extension-rendered skill catalogs @copyberry
#35607 Record metrics for empty skill catalogs @copyberry
#35608 Support model-owned token budget defaults @copyberry
#35621 Skip restored token usage replay for exec resumes @copyberry
#35623 Parse Claude and Cursor session records separately @copyberry
#35642 Make OpenTelemetry provider shutdown idempotent @copyberry
#35644 Preserve thread metadata when rollout files are missing @copyberry
#35649 Preserve TUI input when terminal focus returns @copyberry
#35652 Enable network policy callbacks for remote exec @copyberry
#35653 Test developer instruction inheritance for multi-agent workers @copyberry
#35655 Terminate Windows non-TTY processes on interrupt @copyberry
#35656 Preserve multi-agent settings across config representations @copyberry
#35661 Place host skills before permission instructions @copyberry
#35663 Evaluate character matching over skill routing metadata @copyberry
#35665 Fix the async watcher test harness on Windows @copyberry
#35668 Expose the network proxy spec constructor @copyberry
#35670 Raise the Windows exec yield floor to 10 seconds @copyberry
#35671 Route curated plugins by authentication mode @copyberry
#35675 Prepare MCP and plugin recommendations concurrently @copyberry
#35678 Preserve paginated thread metadata across resumes @copyberry
#35685 Load cloud-managed profiles for codex sandbox @copyberry
#35688 Point crossterm patch to the OpenAI OSS fork @copyberry
#35689 Preserve item timestamps in thread history projections @copyberry
#35691 Include empty-preview threads in relationship listings @copyberry
#35693 Refresh the subagent picker in the background @copyberry
#35695 Honor the configured SQLite home in the logs client @copyberry
#35708 Add configurable developer instructions for v2 subagents @copyberry
#35715 Support streaming bodies in route-aware HTTP requests @copyberry
#35717 Reuse route-aware clients for OpenAI file uploads @copyberry
#35720 Upgrade rmcp to 3.0.0-beta.3 @copyberry
#35721 Honor disabled code mode fallback without a process host @copyberry
#35722 Add persisted sections for organizing threads @copyberry
#35724 Add MCP 2026-07-28 discovery support @copyberry
#35725 Complete MCP 2026 client support @copyberry
#35738 Add bounded metadata for executed tool calls @copyberry
#35742 Avoid blocking turns on optional MCP startup @copyberry
#35744 Keep agent registry identities consistent @copyberry
#35766 Emit host skill budget warnings from world state @copyberry
#35769 Share the skills budget across host and executor catalogs @copyberry
#35772 Throttle models cache TTL renewals @copyberry
#35773 Scale skill metadata budgets with context windows @copyberry
#35777 Resolve MCP tool catalogs concurrently @copyberry
#35779 Load thread titles concurrently during session startup @copyberry
#35785 Support self-serve Business ProLite accounts @copyberry
#35787 Gate paginated thread history on the state database @copyberry
#35794 Wait for MCP readiness in the curated sync test @copyberry
#35802 Tag reports with the selected turn's model and effort @copyberry
#35806 Route MCP OAuth through configured HTTP clients @copyberry
#35814 Use configured HTTP clients for all MCP OAuth requests @copyberry
#35818 Advance latest-alpha-cli after release publishing completes @copyberry
#35821 Use the shared HTTP client for TUI network checks @copyberry
#35825 Use the shared HTTP client for announcement tips @copyberry
#35828 Enforce centralized SQLite connection creation @copyberry
#35830 Route WebRTC sideband joins to the Realtime API @copyberry
#35831 Update rusty_v8 to 150.4.0 @copyberry
#35835 Track parent turns for nested Codex requests @copyberry
#35836 Clean up cancelled MCP elicitation requests @copyberry
#35837 Expose plugin eligibility metadata in app-server summaries @copyberry
#35839 Decouple recommended plugins from tool suggestions @copyberry
#35840 Handle legacy MCP discovery prevalidation errors @copyberry
#35843 Tie remote exec servers to their parent stdin @copyberry
#35845 Support plaintext collaboration tool messages @copyberry
#35850 Preserve foreign paths in background terminal listings @copyberry
#35851 Normalize Windows namespace paths in path URIs @copyberry
#35854 Box app-server event payloads @copyberry
#35856 Resolve imported connectors by MCP server name @copyberry
#35857 Add Bazel unit test targets for Rust binaries @copyberry
#35859 Expose plugin installation timestamps in app-server summaries @copyberry
#35870 Include session titles in external agent import history @copyberry
#35874 Mark the primary environment in model context @copyberry
#35875 Allow environment readiness updates in place @copyberry
#35878 Use step environments for MCP file uploads @copyberry
#35886 Show blocked goals as stalled in the TUI @copyberry
#35887 Clean up side conversations in the background @copyberry
#35895 Inherit ready step environments when spawning agents @copyberry
#35937 Let unrelated tools run while MCP servers start @copyberry
#35941 Bound MCP namespace descriptions @copyberry
#35942 Update tests for current tool call and app-server event types @copyberry
#35944 Report direct input capability for listed subagents @copyberry
#35957 Fix TUI input queue handling during MCP startup @copyberry
#35959 Upgrade Ratatui to 0.30.2 @copyberry
#35960 Preserve hyperlink cell widths during terminal diffing @copyberry
#35962 Fix TUI layout for halfwidth Japanese sound marks @copyberry
#35982 Avoid cloning rollout history when truncating forks @copyberry
#35989 Display title-only reasoning summaries in the TUI @copyberry
#35990 Test exec-server compatibility across Codex versions @copyberry
#35992 Group external agent config migration into a module @copyberry
#35997 Remove obsolete rusty_v8 146.4.0 Bazel targets @copyberry
#36001 Upgrade rmcp to 3.0.0 @copyberry
#36002 Resolve MCP file uploads with environment-native paths @copyberry
#36006 Reduce response serialization and rollout scan overhead @copyberry
#36007 Add persisted manual ordering for thread sections @copyberry
#36008 Route pet asset downloads through the shared HTTP client @copyberry
#36011 Share optional MCP startup grace across connection sets @copyberry
#36014 Refine OpenAI docs skill source routing @copyberry
#36020 Avoid cloning ignored analytics notifications @copyberry
#36030 Increase the app-server tracing test stack size @copyberry
#36031 Load cloud-managed servers in MCP CLI commands @copyberry
#36033 Use the shared HTTP client in codex-protocol @copyberry
#36035 Exit the stdio app-server when its connection closes @copyberry
#36036 Allow naming forked chats from the TUI @copyberry
#36037 Deny network access when an allow amendment fails @copyberry
#36039 Limit MCP catalog pagination @copyberry
#36043 Document the Responses API proxy reqwest exception @copyberry
#36045 Distinguish unknown MCP authentication status @copyberry
#36047 Extract MCP environment headers into a local variable @copyberry
#36049 Keep tool-call metrics out of Statsig exports @copyberry
#36051 Avoid overwriting symlinked migration targets @copyberry
#36054 Remove legacy --full-auto handling from codex exec @copyberry
#36055 Expose MCP read-only hints in tool call items @copyberry
#36076 Remove codex-core's direct reqwest dependency @copyberry
#36078 Route Ollama through the shared HTTP client @copyberry
#36083 Handle fractional rate limits in thread history projection @copyberry
#36092 Correlate image requests and explicit interrupts with turns @copyberry
#36119 Unify tool runtime assembly before router construction @copyberry
#36120 Delegate readiness waits to tool runtimes @copyberry
#36121 Sandbox executor skill resource reads @copyberry
#36124 Respect filesystem permissions during capability discovery @copyberry
#36127 Centralize tool registration and protect host tools @copyberry
#36128 Preserve delegated tasks across remote compaction @copyberry
#36129 Resolve normalized tool name collisions in code mode @copyberry
#36133 Preserve executor workspace permissions for apply_patch @copyberry
#36138 Isolate apply-patch permission test variants @copyberry
#36139 Bound the code mode output termination test @copyberry
#36140 Wait for memory consolidation shutdown before finishing jobs @copyberry
#36146 Stabilize approval scenario tests @copyberry
#36148 Harden the file change approval integration test @copyberry
#36149 Strengthen session file change approval coverage @copyberry
#36165 Stabilize file approval replay test @copyberry
#36166 Make pending realtime sideband test deterministic @copyberry
#36167 Harden the auto-review model override test @copyberry
#36168 Make tool telemetry tag collection synchronous @copyberry
#36171 Test workspace-root patch protection for metadata @copyberry
#36177 Test remote Guardian network approval scoping @copyberry
#36181 Record attempted tool calls in response metadata @copyberry
#36183 Use permission profiles throughout sandbox execution @copyberry
#36184 Coalesce concurrent remote metadata requests @copyberry
#36187 Refresh environment dates from the configured clock @copyberry
#36188 Make thread history projection resilient to malformed rollouts @copyberry
#36191 Label explicit skill injection metrics @copyberry
#36194 Avoid shifting bytes in streaming output buffers @copyberry
#36207 Record normalized sandbox violation events @copyberry
#36212 Precompute app-server protocol exports @copyberry
#36217 Run code mode exclusively through the standalone host @copyberry
#36218 Expose connector candidates in external agent detection @copyberry
#36221 Ignore passthrough metadata when reconciling rollout items @copyberry
#36223 Preserve executor paths in read command actions @copyberry
#36228 Support Enterprise automation account plans @copyberry
#36237 Ignore symbolic slash-tmp permissions on Windows @copyberry
#36239 Refresh precomputed app-server protocol exports @copyberry
#36264 Prefer the bundled resource for the code mode host @copyberry
#36271 Derive report prompt hashes from persisted rollouts @copyberry
#36306 Restrict hosted MCP credentials to local environments @copyberry
#36309 Use the host skill provider catalog in world state @copyberry
#36310 Isolate MCP OAuth credentials by environment @copyberry
#36311 Include skills in debug prompt input output @copyberry
#36327 Preserve discovery order for host skill path aliases @copyberry
#36329 Restrict shell_command to a single local environment @copyberry
#36336 Detect connectors used in external agent sessions @copyberry
#36339 Enable skills in the MCP server @copyberry
#36342 Stop publishing legacy Linux bundle archives @copyberry
#36350 Require explicit sandbox permissions with shell justifications @copyberry
#36351 Use model catalog collaboration mode messages @copyberry
#36354 Pass sessions directly to session tasks @copyberry
#36355 Keep MCP tool calls bound to their thread @copyberry
#36356 Sync updates to imported external agent sessions @copyberry
#36357 Use the step-scoped router for tool execution @copyberry
#36359 Consolidate MCP config editing in codex-core @copyberry
#36360 Use MCP bindings as the step tool catalog @copyberry
#36361 Migrate Cursor-managed skills into Codex @copyberry
#36364 Move skill catalog rendering out of core @copyberry
#36365 Add strict automatic review for MCP elicitations @copyberry
#36367 Keep effective tool exposure in the registry @copyberry
#36372 Run native Windows Bazel tests with MSVC @copyberry
#36373 Add an --approve-for-me CLI flag @copyberry
#36374 Enable sandboxed V8 for code mode @copyberry
#36378 Load local session pickers from the state DB first @copyberry
#36380 Add thread section management APIs @copyberry
#36384 Load turn summaries with paginated queries @copyberry
#36385 Add acknowledged user message submission to core @copyberry
#36388 Track image preparation details in turn analytics @copyberry
#36389 Enforce single-writer ownership for all thread histories @copyberry
#36393 Avoid redundant filesystem probes @copyberry
#36402 Declare the experimental plugin search API @copyberry
#36408 Allow custom Codex instructions for realtime transitions @copyberry
#36409 Implement remote plugin search @copyberry
#36410 Make user input blocking behavior explicit @copyberry
#36411 Use Git repositories as pre-tool hook test markers @copyberry
#36413 Add a realtime delegation acknowledgement control @copyberry
#36440 Extract exec-server request dispatching @copyberry
#36482 Avoid querying terminal size on every TUI redraw @copyberry
#36485 Increase remote plugin bundle size limits @copyberry
#36507 Retain attempted tool metadata across prompts @copyberry
#36511 Support two-stroke TUI key chords @copyberry
#36534 Raise the MCP catalog item limit to 2,048 @copyberry
#36544 Support portable Agent Plugins throughout installation @copyberry
#36632 Preserve SQLite thread metadata during goal mutations @copyberry
#36635 Expose onboarding hints in login completion notifications @copyberry
#36641 Capture rollout budget units from response usage @copyberry
#36715 Use provider-reported rollout budget units @copyberry
#36716 Deduplicate MCP resource operation handling @copyberry
#36727 Simplify turn metadata state ownership @copyberry
#36729 Correlate code mode tool analytics with model responses @copyberry
#36732 Stabilize the cloud environment HTTP test @copyberry
#36734 Deduplicate MCP resource list handling @copyberry
#36740 Store turn skill state in extension data @copyberry
#36742 Simplify contextual user fragment registration @copyberry
#36744 Store the extension registry directly in its builder @copyberry
#36745 Consolidate apply_patch runtime execution @copyberry
#36757 Wait for patch events before reading shell snapshots @copyberry
#36759 Harden the TUI focus palette regression test @copyberry
#36764 Avoid building code-mode definitions during registration @copyberry
#36769 Stabilize the startup Git enrichment integration test @copyberry
#36770 Stabilize deferred goal fork testing @copyberry
#36771 Harden Linux managed proxy helper lifecycles @copyberry
#36772 Raise the host-owned Codex Apps catalog limit @copyberry
#36773 Derive the active user config layer from the layer stack @copyberry
#36774 Clarify config layer iteration APIs @copyberry
#36779 Stabilize network policy event capture in concurrent tests @copyberry
#36781 Add per-surface MCP tool exposure controls @copyberry
#36782 Add Guardian session reuse and interruption tests @copyberry
#36787 Consolidate model instructions in ModelMessages @copyberry
#36792 Gate plugin usage instructions by model capability @copyberry
#36793 Terminate timed-out Git process trees @copyberry
#36796 Add Agent Plugins MCP config parsing @copyberry
#36797 Normalize rusty_v8 checksum manifest line endings @copyberry
#36800 Avoid reinjecting permissions after command approvals @copyberry
#36807 Extract audio preparation into a utility crate @copyberry
#36808 Prefer SQLite names for local session archive commands @copyberry
#36809 Prefer the state database for exec resume --last @copyberry
#36810 Add MCP client conformance regression gates @copyberry
#36811 Honor per-environment login shell policy @copyberry
#36812 Add a dual-WebSocket transport for code mode @copyberry
#36815 Identify agents by name in token budget context @copyberry
#36822 Fix typo in approval resolver name @copyberry
#36825 Consolidate approval telemetry context @copyberry
#36830 Time out stalled code-mode host requests @copyberry
#36834 Avoid requesting key-release events in Ghostty @copyberry
#36840 Keep API request metrics out of Statsig exports @copyberry
#36856 Support deferred loading for freeform tools @copyberry
#36857 Support custom tools in namespaces @copyberry
#36862 Consolidate thread spawning behind a request object @copyberry
#36871 Parallelize R2 asset publishing with DotSlash @copyberry
#36877 Move executor skill bundle loading into the skills extension @copyberry
#36880 Move direct executor skill discovery into the skills extension @copyberry
#36882 Preserve complete MCP namespace descriptions @copyberry
#36884 Add host skill root loading @copyberry
#36892 Support leaf models in multi-agent v2 @copyberry
#36893 Redact secrets from app-server command execution items @copyberry
#36895 Handle late MCP startup results after lag timeout @copyberry
#36898 Avoid redundant filesystem metadata probes @copyberry
#36900 Register app tools independently of the connector list @copyberry
#36901 Propagate updated permissions to review threads @copyberry
#36903 Load skill interface metadata in the host loader @copyberry
#36904 Limit RMCP logs persisted to SQLite @copyberry
#36906 Preserve model providers when reloading v2 agents @copyberry
#36908 Improve bearer token secret redaction @copyberry
#36910 Negotiate MCP extensions per app-server session @copyberry
#36912 Read approval policy from the current turn configuration @copyberry
#36913 Move skill policy resolution into codex-skills @copyberry
#36916 Centralize app enabled-state evaluation @copyberry
#36917 Test explicit plugin mentions with disabled apps @copyberry
#36919 Merge local plugins into plugin search results @copyberry
#36921 Move the host skills service into the skills extension @copyberry
#36924 Reject implicitly discovered bare Git repositories @copyberry
#36930 Read turn permissions from the current configuration @copyberry
#36935 Trust undecided local projects automatically @copyberry
#36938 Enable cached web search for Amazon Bedrock @copyberry
#36939 Include policy approval reasons in Guardian reviews @copyberry
#36941 Use current session settings for review threads @copyberry
#36943 Move host skill root resolution into the skills extension @copyberry
#36945 Grant the blob size policy job read access to contents @copyberry
#36947 Accept user input when starting idle turns @copyberry
#36948 Paginate transcript history in the TUI @copyberry
#36949 Improve paginated TUI history loading @copyberry
#36950 Paginate TUI transcript history @copyberry
#36951 Harden paginated history handling in the TUI @copyberry
#36952 Add durable per-thread user submission queues @copyberry
#36954 Add tool registry collision policy configuration @copyberry
#36956 Keep image resize notices attached during remote compaction @copyberry
#36959 Track connectors detected in external agent sessions @copyberry
#36960 Prompt before trusting local project directories @copyberry
#36963 Link Codex attribution in pull request bodies @copyberry
#36964 Preserve working directories when importing external sessions @copyberry
#36966 Allow disabling the built-in image viewer @copyberry
#36967 Skip symlinks when installing plugins @copyberry
#36970 Make token budget context identity configurable @copyberry
#36976 Honor explicit-only orchestrator skills @copyberry
#36977 Improve connector detection for migrated sessions @copyberry
#36979 Add Fence auditing to the blob size workflow @copyberry
#36981 Enable remote compaction for Amazon Bedrock @copyberry
#36983 Preserve ChatGPT auth for trusted staging MCP servers @copyberry
#36984 Support configured ChatGPT cookies in HTTP clients @copyberry
#36986 Add process-scoped PSP routing for ChatGPT requests @copyberry
#36987 Add opt-in concurrent exec-server request dispatch @copyberry
#36989 Preserve shared bundled skill caches @copyberry
#36990 Remove legacy collaboration mode variants @copyberry
#36992 Allow injecting model catalog caches @copyberry
#36993 Support includeTurns reads for paginated threads @copyberry
#36998 Support deferred custom tools in tool search @copyberry
#37000 Keep shared skill caches fresh across plugin loads @copyberry
#37020 Enforce strict tool name collision errors @copyberry
#37022 Canonicalize default tools under the functions namespace @copyberry
#37027 Enforce Agent Plugin runtime boundaries @copyberry
#37031 Apply permission profile updates to future turn environments @copyberry
#37035 Align registry tests with canonical tool names @copyberry
#37038 Use turn environment permissions for tool execution @copyberry
#37040 Use turn environment permissions for context and discovery @copyberry
#37053 Reject conflicting namespace descriptions in strict tool mode @copyberry
#37055 Add safer TUI defaults for cyber models @copyberry
#37066 Preserve longer MCP source descriptions in tool search @copyberry
#37068 Fall back to per-process MCP cleanup on macOS @copyberry
#37083 Consolidate unified exec output state @copyberry
#37101 Reuse stable MCP bindings across sampling steps @copyberry
#37103 Use Luna for API-key Guardian reviews @copyberry
#37109 Bound interactive telemetry shutdown @copyberry
#37114 Add per-session code-mode execution limits @copyberry
#37128 Centralize tool approval handling in Session @copyberry
#37129 Make Windows path URI comparisons ASCII-case-insensitive @copyberry
#37132 Enforce managed authentication requirements locally @copyberry
#37134 Report prompt image resizing to the model @copyberry
#37144 Preserve discovery paths for symlinked skills @copyberry
#37145 Gate Apps usage instructions by model capability @copyberry
#37147 Track provisioned environment state across registration @copyberry
#37149 Project orchestrator skills through world state @copyberry
#37151 Coalesce concurrent Git status scans @copyberry
#37154 Use Azure Key Vault for macOS notarization @copyberry
#37156 Test remote environments reported ready before selection @copyberry
#37157 Harden named session lookup in the TUI @copyberry
#37162 Load host skill roots through the skills extension @copyberry
#37166 Keep textarea cursors and rendering inside the viewport @copyberry
#37167 Expose session sources to MCP contributors @copyberry
#37168 Bound remote MCP handshake HTTP requests @copyberry
#37169 Move plugin skill snapshot integration tests into core @copyberry
#37174 Centralize skill invocation helpers in codex-skills @copyberry
#37175 Add legacy rollout migration to paginated history @copyberry
#37177 Move explicit skill selection into the skills crate @copyberry
#37178 Preserve image transparency metadata in app-server items @copyberry
#37188 Reserve the tool_search namespace for the search tool @copyberry
#37189 Track multi-agent usage hints in world state @copyberry

Codex CLI Release: 0.146.1

Wed, 05 Aug 2026 00:00:00 GMT

Bug Fixes

Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057)

Changelog

Full Changelog: rust-v0.146.0...rust-v0.146.1

#37057 [0.146] Backport safer cyber-model auto-review defaults @anp-oai

GPT-5.4 and GPT-5.4 mini retire from Codex on August 31

Fri, 31 Jul 2026 00:00:00 GMT

# GPT-5.4 and GPT-5.4 mini retire from Codex on August 31 On August 31, 2026, GPT-5.4 and GPT-5.4 mini will no longer be available in Codex for users signed in with ChatGPT. GPT-5.4 and GPT-5.4 mini will remain available on the OpenAI API and Codex sessions authenticated with an API key. Switch to their recommended replacements: - Replace `gpt-5.4` with `gpt-5.6-terra` (GPT-5.6 Terra). - Replace `gpt-5.4-mini` with `gpt-5.6-luna` (GPT-5.6 Luna). Before the cutoff, update workspace defaults, saved model settings, managed configurations, custom agents, and scheduled tasks that use either model. See [Codex models](/codex/models#deprecated-codex-models) and [workspace model availability](/codex/enterprise/workspace-model-availability) for details.

Record & Replay expands to the EU, UK, and Switzerland

Fri, 31 Jul 2026 00:00:00 GMT

# Record & Replay expands to the EU, UK, and Switzerland [Record & Replay](/codex/extend/record-and-replay) is now available in the European Union, the United Kingdom, and Switzerland. On macOS, demonstrate a workflow and turn it into a reusable skill. Computer Use must also be available and enabled.

Browser upgrades, multi-repository review, and image editing

Thu, 30 Jul 2026 00:00:00 GMT

# Browser upgrades, multi-repository review, and image editing The latest ChatGPT desktop app update makes browsing, reviewing code, and editing generated images faster and easier. ### Browse and find context faster - Type in the built-in browser's address bar to revisit pages from your browsing history or search Google when there's no match. - Manage your browsing history in Settings, and let ChatGPT search that history when a task needs to find a page you visited before. - Use the Chrome extension to mention open tabs or bring highlighted page text into your side chat. - Ask questions about any YouTube video in the Chrome extension and get answers in seconds. - Right-click a webpage and select **Ask ChatGPT**. Learn more about the [built-in browser](/codex/browser) and the [Chrome extension](/codex/chrome-extension). ### Review changes across repositories See all repositories in a [multi-folder project](/codex/projects#use-local-projects-for-folders-and-codebases) and the lines changed in each one. Select **Review** to inspect diffs across those repositories without switching between separate review views. ### Refine generated images Open generated images in an expanded viewer, and switch between **Focused view** and **Canvas view**. Add comments across images, choose the ones you want, and send targeted edits without leaving your conversation. Learn more about [image generation](/codex/image-generation). ### Other improvements and bug fixes - Added a new "Activity view" in the sidebar to view which chats you engaged with recently and require attention. Click the bell or use Cmd/Ctrl+Opt+U to change to the new view. - Updated browser settings to show only supported browsers. - Improved Windows installation reliability when package file paths are long. - Other performance and bug fixes.

Sign in with ChatGPT (beta)

Wed, 29 Jul 2026 00:00:00 GMT

# Sign in with ChatGPT (beta) Sign in with ChatGPT is beginning to roll out in beta across select plugins and partner sites, starting with Airtable, GitLab, HubSpot, Notion, Supabase, and Vercel. When you connect a supported plugin from the ChatGPT plugin directory, you can use Sign in with ChatGPT to create or link an account with that service in fewer steps. On participating partner sites, you can also select **Sign in with ChatGPT** to create or access your account. This makes it easier to start working with supported tools in ChatGPT and Codex. When you sign in, the partner receives only your name, email address, and profile picture, if available. You must still review and approve each plugin's requested access as a separate step.

ChatGPT for iOS

Mon, 27 Jul 2026 00:00:00 GMT

# ChatGPT for iOS ### Improvements and bug fixes - Voice conversations now use your selected ChatGPT voice and show usage-limit warnings. - Improved task reconnection and continuity when returning to the app or unlocking with Face ID. - Composer autocomplete now matches desktop plugin mentions and includes skills from installed plugins. - Selected-text references remain available after sending so you can preview them again. - Improved goal controls with clearer progress when pausing or resuming. - Inline visualizations now render tables and visual themes more reliably. - Large workspace diffs are more responsive. - Fixed restored tasks changing the selected model. - Prevented the composer from becoming stuck after a prompt started. - Corrected browser and computer tool labels, icons, and placeholder output.

ChatGPT Voice and multi-folder projects

Thu, 23 Jul 2026 00:00:00 GMT

# ChatGPT Voice and multi-folder projects Powered by GPT-Live, ChatGPT Voice lets you talk through work and coordinate tasks in Chat, Work, and Codex in the ChatGPT desktop app. Start a new chat or task in voice mode, then ask ChatGPT to start, check, or steer work in other threads. On macOS, turn on **Screen context** to share an [appshot](/codex/appshots) of your frontmost window. Voice is available with Plus, Pro, Business, Edu, and Enterprise plans in the desktop app and through [Remote on iOS](/codex/remote-connections#set-up-mobile-access). Local projects in the ChatGPT desktop app can now include multiple related folders. From a project's menu, select **Edit project** to add folders and choose the primary folder. New chats, Git operations, and automatic discovery of `AGENTS.md`, skills, and `config.toml` use the primary folder. Secondary folders remain available for file search, reading, and editing. Get started with [ChatGPT Voice](/codex/features/voice) and [multi-folder local projects](/codex/projects#use-local-projects-for-folders-and-codebases).

ChatGPT for iOS

Mon, 20 Jul 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added support for rendering Mermaid diagrams inline in task transcripts. - Added support for interactive forms in Codex tasks. - Added support for restoring unsent prompts when switching between tasks, hosts, and workspaces. ### Improvements and bug fixes - Improved task lists to sort by recent activity and show unavailable hosts when creating a task. - Improved the composer with selected-text previews and smoother new-task transitions. - Improved goals with support for resuming blocked or usage-limited runs. - Improved plan progress, Fast controls, and inline dictation. - Improved Remote onboarding, composer guidance, and iPad navigation. - Fixed an issue that could close the app when duplicate task-list entries appeared while starting a task. - Fixed iOS 18 task actions and task-list styling. - Fixed composer spacing, attachment menu padding, and duplicate transcription indicators.

ChatGPT for iOS

Mon, 13 Jul 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added support for inline visualizations in Codex tasks. ### Improvements and bug fixes - Improved creating and managing tasks from conversations, with reliable links to newly created tasks. - Improved tool activity styling and progress indicators. - Improved file-opening feedback. - Improved the composer so controls remain visible above the keyboard for long prompts and larger text sizes. - Fixed Fast mode selection and restoration for each task. - Fixed initial prompts ignoring the selected approval preset. - Fixed autocomplete backgrounds and task rows becoming unresponsive during swipe gestures.

Codex joins the ChatGPT desktop app

Thu, 09 Jul 2026 00:00:00 GMT

# Codex joins the ChatGPT desktop app Codex is now part of the ChatGPT desktop app on macOS and Windows. Existing Codex app users can update as usual and keep their projects, settings, and workflows. You can make Codex the default view and, on macOS, keep the Codex app icon. ### New features - Edit Markdown and code directly in the app, use inline annotations, and ask Codex to revise selected content. - Use PR Chat to review GitHub pull requests and ask Codex about changes in context. Send inline review feedback, inspect proposed patches, and edit, accept, or reject them without leaving the app. - Connect custom domains to published Sites. ### Performance improvements and bug fixes - Made Computer Use faster with GPT-5.6. - Made task and subagent activity easier to follow while Codex works. - Simplified plugin management by moving it into Settings. - Improved permission handling when resuming tasks or sending follow-ups. - Added clearer Full access warnings and a dialog when combining Full access with Ultra. - Improved macOS and Windows setup, including macOS installation, Git-backed workflows, and Computer Use on Windows. - Fixed task resumption for local projects and onboarding retry loops. - Fixed scrolling in pull request reviews and expanded Mermaid diagram labels. - Improved mobile connection reliability and fixed video rendering for SSH projects. - Additional performance improvements and bug fixes.

ChatGPT for iOS

Mon, 06 Jul 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added support for creating, searching, opening, forking, and managing Codex tasks directly from a conversation. - Added filters for staged, unstaged, branch, and last-turn changes, with controls for comparing branches. - Added support for adding selected transcript text directly to the composer. - Added previews for image and file attachments before sending. - Added inline Photos and Camera pickers to the attachment menu. - Added a connection shortcut and support for SSH hosts using private keys or no credentials. - Added usage limits and credit details to the task menu. ### Improvements and bug fixes - Improved the task list with consistent task terminology, clearer delegated task titles, and a Needs input status. - Improved initial task loading and foreground recovery. - Improved autocomplete by selecting the first result automatically and accepting it with Return. - Improved model, reasoning, and Fast settings so changes remain scoped to the current task. - Improved task-management and dynamic tool activity presentation. - Improved side chats to open directly when only one conversation is available. - Improved plugin autocomplete with installed plugins and their icons. - Improved workspace diff accuracy and expand-and-collapse navigation. - Improved recovery by preserving thread state across reconnects and host pairings across sign-out. - Fixed stuck thread-list loading, prompt mode deadlocks, stale images, and microphone permission alerts. - Fixed shake to undo and keyboard refocusing after sending a prompt.

Codex Remote reaches general availability

Thu, 25 Jun 2026 00:00:00 GMT

# Codex Remote reaches general availability Codex Remote has reached general availability. Use Codex from the ChatGPT mobile app to start or continue work on a connected Mac or Windows host, review progress, and approve actions from your phone. Remote Control now uses authenticated one-to-one QR pairing between each iOS or Android device and each host. Update the ChatGPT mobile app and Codex App to the latest versions before connecting. Connections used since June 8, 2026, remain paired; older inactive connections need to pair again. The new [DigitalOcean plugin](https://chatgpt.com/plugins/share/5dc672c7116c44ff92595d48e72df522) lets Codex provision a DigitalOcean Droplet, configure SSH access, and connect it to the Codex App as a remote workspace. See [Remote connections](/codex/remote-connections) for setup and troubleshooting.

ChatGPT for iOS

Mon, 22 Jun 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added per-host personality settings with Friendly and Pragmatic options. - Added support for editing goals directly in the composer. - Added a link from forked conversations back to the original thread. ### Improvements and bug fixes - Improved side chat visibility with separate conversations above the composer. - Improved composer autocomplete for commands, skills, and plugins from any prefix. - Improved progress visibility for subagents, tasks, and worktree creation. - Fixed long threads loading. - Improved workspace file search, code review drafts, steering, and host setup and recovery. - Fixed Face ID unlocking, stopping responses, collapsed sections, and dark-mode host indicators.

Record & Replay and remote task handoff

Thu, 18 Jun 2026 00:00:00 GMT

# Record & Replay and remote task handoff ### New features - Added [Record & Replay](/codex/extend/record-and-replay), a macOS feature that turns a demonstrated workflow into a reusable skill. Initial availability excludes the European Economic Area, the United Kingdom, and Switzerland. You or your administrator must also enable Computer Use. - Added bulk actions to [automation](/codex/automations) run history so you can mark every run as read or archive eligible runs. - Added [thread handoff between local and remote hosts](/codex/remote-connections#hand-off-a-task-between-hosts), so you can move a thread to a matching project on a connected host and continue it there. Codex can also coordinate the handoff for you. ### Performance improvements and bug fixes - Added new [deep links](/codex/app/commands#settings) to manage SSH connections. - Improved Browser Use so visible-tab routing and annotations persist when a draft browser session moves to the server. - Additional performance improvements and bug fixes.

More Codex features in the EEA, UK, and Switzerland

Tue, 16 Jun 2026 00:00:00 GMT

# More Codex features in the EEA, UK, and Switzerland More Codex app capabilities are rolling out to users in the European Economic Area, the United Kingdom, and Switzerland: - [Computer Use](/codex/computer-use) is available on macOS and Windows in these regions, so Codex can operate desktop apps by seeing, clicking, and typing. - The [Codex Chrome extension](/codex/chrome-extension) is available for browser tasks that need signed-in Chrome context, working across tabs in the background without taking over your browser. - [Memories](/codex/customization/memories) can remember useful preferences, recurring workflows, tech stacks, and repository conventions when enabled. Memories are off by default in the European Economic Area, the United Kingdom, and Switzerland. - [Chronicle](/codex/customization/chronicle) is available as an opt-in research preview for ChatGPT Pro subscribers on macOS, helping Codex build memories from recent screen context.

ChatGPT for iOS

Mon, 15 Jun 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added a workspace file browser for previewing files and linking workspace paths into prompts. - Added a directory picker for choosing a workspace folder when starting a new thread. - Added controls to expand or collapse all diffs while reviewing changed files. - Added MCP approval choices for allowing requested actions in the current chat or across chats. - Added LaTeX rendering in Codex messages and plans. ### Improvements and bug fixes - Improved status indicators for running threads, queued prompts, side chats, and subagents. - Improved pairing and onboarding with clearer errors, manual pairing-code support, and more reliable host selection after pairing. - Improved task-list recovery, reconnect state, host-specific refresh, and thread performance. - Improved Codex profile sharing, activity history, and settings layout. - Improved goal workflows with a composer shortcut, desktop-aligned goal message actions, and better resumed question handling. - Improved assistant message actions, transcript layout, and public rate-limit names. - Fixed stuck thread-list swipe actions, duplicate messages when reopening a new thread, spawned subagents appearing as top-level task rows, and misleading connection errors when sending prompts.

Usage resets and Browser Developer mode

Thu, 11 Jun 2026 00:00:00 GMT

# Usage resets and Browser Developer mode ### New features - Added rate-limit reset banking for Plus and Pro users, including one free reset at launch and [referral invitations](/codex/pricing#invite-friends-and-coworkers) for earning more during the current promotion. Eligible Business members can invite coworkers to earn shared workspace credits through a separate referral program. - Added [Developer mode](/codex/browser?surface=app#app-developer-mode) for Browser use in Chrome and the Codex in-app browser. It gives Codex controlled Chrome DevTools Protocol (CDP) access for performance profiling and deeper debugging of network traffic, console output, runtime errors, and page state. - Added the `/init` command to the app composer for creating project instructions with the same initialization workflow as the Codex CLI. - Added customizable macOS Dock icons with light and dark Codex variants. - Added Computer Use for Enterprise users outside the European Economic Area, the United Kingdom, and Switzerland. - Added support for configuring per-app access controls for Computer Use on Windows. - Added an **Unread chats** section to the command menu, with the most recently updated unread chat selected by default. ### Performance improvements and bug fixes - Made Browser use up to 2x faster through CDP and DOM snapshot optimizations that reduce browser round trips. - Made command, browser, integration, and source activity summaries easier to understand, and improved how completed chats present files, automations, and other durable output. - Improved plugin management by including workspace plugins, refreshing plugin state more reliably after installation or removal, and letting you upload a new version of an already-shared plugin without changing its access. - Improved usage-limit errors with inline plan and workspace guidance, including reset timing when available. - Added Cmd+Enter and Ctrl+Enter as shortcuts for submitting custom approval feedback. - Fixed Browser use download handling and improved Developer mode recovery and diagnostics. - Fixed scheduled automations so they honor the selected approval mode, and fixed manual project ordering, Browser tab dragging, MCP app sizing after right-pane transitions, and clickable ChatGPT thread mentions. - Fixed issues affecting background agent tab restoration, commit and pull request message generation, sidebar pull request status updates, Codex Mobile QR pairing, remote-control MFA, remote SSH installation and connection, updater prompts, and overlay positioning at non-default zoom levels. - Additional performance improvements and bug fixes.

Codex app

Tue, 09 Jun 2026 00:00:00 GMT

# Codex app ### New features - Added [Import to Codex](/codex/import) flows for importing supported setup from Claude Code and Claude Cowork, including during onboarding. - Revamped plugins screen with separate tabs, marketplace and category filters, keyboard navigation, and clearer install actions. - Expanded Settings search to find options from more panels, including Git and pets. ### Performance improvements and bug fixes - Fixed goal timer overlap in narrow layouts. - Reduced unread notifications while an active goal continues running. - Kept review diff ordering consistent with the file tree. - Improved window rendering on systems that don't support translucent backdrops, including Windows 10. - Additional performance improvements and bug fixes.

ChatGPT for iOS

Tue, 09 Jun 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added support for choosing a branch, creating a worktree, and running an environment setup script for new threads. - Added a Codex profile screen with usage stats and token activity charts. - Added `/goal` support for creating and managing goals from Codex Mobile. - Added inline review comments when viewing changed files. - Added support for asking in side chat from selected transcript text. - Added support for editing the latest sent prompt. ### Improvements and bug fixes - Improved attachment support on Windows hosts. - Skills and plugins now appear directly inline in the composer. - Improved side chat and queued prompt visibility while a thread is running. - Improved message styling, navigation, tool activity, Face ID behavior, archived-thread browsing, and thread UI polish.

Codex app updates

Thu, 04 Jun 2026 00:00:00 GMT

# Codex app updates ### New features - Added activity insights and share cards to the [Profile section](/codex/app/settings#profile). You can review Codex usage highlights and save a profile card; sharing is available on consumer ChatGPT plans. ### Performance improvements and bug fixes - Improved Computer Use startup readiness and appshot error reporting. - Fixed browser and review UI issues, including fullscreen browser composer controls, hex color swatches, terminal scrollbar alignment, and animated diff stat alignment. - Expanded onboarding with more role choices so Codex can tailor first-run suggestions more accurately. - Fixed configuration writes after plugin installation. - Additional performance improvements and bug fixes.

Build and deploy websites with Sites

Tue, 02 Jun 2026 00:00:00 GMT

# Build and deploy websites with Sites [**Sites**](/codex/sites) is now available in preview in the Codex app. Use the Sites plugin to create, save, deploy, and inspect websites, dashboards, internal tools, web apps, and games hosted by OpenAI. Open **Sites** in the app sidebar to return to your projects and manage hosted environment variables and secrets. ChatGPT Business workspaces include Sites by default. ChatGPT Enterprise admins can enable Sites for the appropriate roles through role-based access control (RBAC).

ChatGPT for iOS

Tue, 02 Jun 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added an optional Face ID or passcode lock for Codex. - Added a new settings screen for choosing Queue or Steer as the default follow-up behavior and toggling line wrapping for code diffs. - Added support for connecting to Windows machines over SSH. ### Improvements and bug fixes - Added support for `/side ` to start a side conversation with an initial question. - Improved follow-up prompts, the Codex home screen, and viewing changed files. - Fixed issues with reconnecting, archiving threads, loading tasks, and connecting to hosts.

Use Codex with Amazon Bedrock

Mon, 01 Jun 2026 00:00:00 GMT

# Use Codex with Amazon Bedrock Codex can now use supported OpenAI models available through Amazon Bedrock. Configure [Amazon Bedrock as your model provider](/codex/amazon-bedrock) to run Codex locally with AWS-managed authentication, account controls, and billing.

Terminal placement controls

Mon, 01 Jun 2026 00:00:00 GMT

# Terminal placement controls ### New features - Added **Default terminal location** in [General settings](/codex/app/settings#general). When the bottom panel is enabled, choose whether the terminal shortcut and environment actions open terminal tabs in the bottom panel or the right panel. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

Computer use and mobile access on Windows

Fri, 29 May 2026 00:00:00 GMT

# Computer use and mobile access on Windows ### New features - [Computer Use](/codex/computer-use) now works on Windows. Codex can operate Windows desktop apps by seeing, clicking, and typing in the foreground while it works. - [Remote control](/codex/remote-connections) now supports Windows devices. You can start Codex work on a Windows device from ChatGPT on iOS or Android, or from a Mac running Codex, and check its progress remotely. - The [Profile section](/codex/app/settings#profile) now shows your profile details, usage stats, and token activity. - Added thread coordination for local projects and worktrees, including separate background threads when explicitly requested. - Expanded search for past Codex app threads to include conversation content and Git branch names. - Added stable identicons for background subagents across the app. - Improved keyboard shortcut settings with keypress search and a reset-all action. - Improved Chrome context capture for Google Docs, Sheets, and Slides tabs. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

GPT-5.3-Codex and GPT-5.2 deprecated

Tue, 26 May 2026 00:00:00 GMT

# GPT-5.3-Codex and GPT-5.2 deprecated GPT-5.3-Codex and GPT-5.2 are now deprecated as user-selectable models in Codex for users signed in with ChatGPT. API-key workflows aren't affected. Use a current Codex model, such as GPT-5.5, GPT-5.4, or GPT-5.4 mini. See [Codex models](/codex/models#deprecated-codex-models) for model availability and [Codex pricing](/codex/pricing#credits-overview) for credit rates.

ChatGPT for iOS

Mon, 25 May 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added Spotlight and Shortcuts support for opening Codex Mobile directly. - Added browsing for archived Codex threads. - Added `/side` for opening a side conversation. - Added options to save or copy rendered images. ### Improvements and bug fixes - Improved iPad keyboard shortcuts. - Improved setup and relaunch reliability. - Fixed issues with task progress, loading archived threads, previewing code changes, and switching hosts.

Appshots, goal mode, and more

Thu, 21 May 2026 00:00:00 GMT

# Appshots, goal mode, and more [Appshots](/codex/appshots) are now available in the Codex app on macOS. Press both Command keys to send the frontmost app window to Codex with a screenshot and available text, so Codex can work from context in another app without you copying, pasting, or describing it manually. This launch also includes: - [Goal mode](/codex/prompting#goal-mode) is no longer an experimental feature and is available in the Codex app, IDE extension, and CLI. With Goal mode, you can have Codex drive toward a specific objective for hours or even days. - [Remote computer use](/codex/computer-use#locked-use), so Codex can use desktop apps after your Mac locks, including remotely via Codex Mobile. Codex scopes locked use to active, trusted computer use turns and includes safeguards such as short-lived authorization, covered displays, relock on local input, and manual-unlock fallback. - [Plugin sharing](/plugins/build/plugins#share-a-local-plugin-with-your-workspace) through marketplace sources is available for ChatGPT Business. Enterprise support is coming soon. Teams can distribute reusable plugin bundles that include skills, MCP servers, and lifecycle hooks. - [Advanced in-app browser annotations](/codex/browser?surface=app#app-styling-feedback) let you tweak styling such as font size, colors, and spacing directly using annotations. This gives Codex a clearer signal for changes. - Browser-use improvements across in-app browser & Chrome: - Codex can now download and extract all image assets from a page much more quickly. - Codex can now extract structured data from pages more effectively and find information more quickly with a read-only JS sandbox. - Chrome extension will create less clutter when using it. Codex will no longer create tab groups when taking over existing tabs, and at the end of a task for handoff. Instead, it uses tab icons to indicate status. - Significantly improved reliability for browser use. We fixed bugs on Windows, flaky availability of the plugin to non geo-blocked regions, and many other issues impacting performance.

ChatGPT for iOS

Mon, 18 May 2026 00:00:00 GMT

# ChatGPT for iOS ### New features - Added support for opening completed Codex tasks directly from iOS notifications. - Added the ability to open changed files directly while reviewing a task. ### Improvements and bug fixes - Improved task resume, reconnection, and foreground reliability. - Improved task progress updates, code review, and message composition.

Work with Codex from anywhere

Thu, 14 May 2026 00:00:00 GMT

# Work with Codex from anywhere You can now use Codex from the ChatGPT mobile app by connecting it to a Mac running the Codex app. Codex runs from the connected host, so the same projects, files, credentials, plugins, skills, and configuration are available from your phone. See [Remote connections](/codex/remote-connections) for mobile setup, choosing a host, what comes from the connected machine, and SSH hosts. This launch also includes [Hooks](/codex/hooks) general availability, [Codex access tokens](/codex/enterprise/access-tokens) for trusted automation, and [Enterprise admin setup](/codex/enterprise/admin-setup) guidance.

Expanded Auto-review documentation

Mon, 11 May 2026 00:00:00 GMT

# Expanded Auto-review documentation Added a dedicated [Auto-review](/codex/sandboxing/auto-review) page covering the reviewer lifecycle, trigger conditions, failure behavior, and local or managed configuration. Also updated the [Agent approvals & security](/codex/agent-approvals-security) and [Sandbox](/codex/sandboxing) docs so they explain more clearly how Auto-review relates to the sandbox boundary.

Codex app

Fri, 08 May 2026 00:00:00 GMT

# Codex app ### New features - Added an in-app trust review flow for hooks and kept Hooks settings reachable even before hooks are fully configured. ### Performance improvements and bug fixes - Restored tooltip-wrapped dropdowns that could stop opening after the tooltip rewrite. - Preserved in-progress message edits across thread switches. - Fixed several desktop workflow regressions, including `Ctrl+V` paste in the Windows terminal, opening modified external links outside the in-app browser, and keeping feedback slash commands attached to the right thread. - Improved loading and panel polish by showing model loading while a thread resumes, hiding unavailable model controls during load, and bundling summary-panel layout and hover fixes. - Kept the Computer Use settings control visible even when uninstalled and disabled problematic extension hover panels. - Additional performance improvements and bug fixes.

Codex for Chrome

Thu, 07 May 2026 00:00:00 GMT

# Codex for Chrome With the new extension for Chrome, Codex is even better at working with apps and websites in your browser. It works in parallel across tabs in the background without taking over your browser, and you stay in control of which websites Codex can use. Learn more in the [Codex Chrome extension documentation](/codex/chrome-extension).

Codex analytics governance docs update

Wed, 06 May 2026 00:00:00 GMT

# Codex analytics governance docs update Updated the Codex enterprise governance guide with more detailed coverage of the Analytics dashboard charts, data export options, and enterprise Analytics API endpoints.

Create Codex access tokens

Tue, 05 May 2026 00:00:00 GMT

# Create Codex access tokens ChatGPT Enterprise workspace owners and admins can allow permitted members to create Codex access tokens for trusted, non-interactive Codex local workflows. Members can use access tokens to run Codex from scripts, schedulers, and private CI runners with their ChatGPT workspace identity. Learn more in [Access tokens](/codex/enterprise/access-tokens).

Codex app

Tue, 05 May 2026 00:00:00 GMT

# Codex app ### New features - Added dictation cleanup plus a configurable dictation dictionary for names, file paths, and code symbols. - Added zoom and download controls to the image lightbox. ### Performance improvements and bug fixes - Improved voice and dictation error messages for microphone, connection, and quota failures. - Fixed in-app browser comment markers so they stay aligned across scrolling, zoom, and responsive layout changes. - Made pull request creation and recovery flows more reliable by preserving newly created pull request state, classifying more app-server failures as restart-required, and stopping exhausted remote reconnect loops. - Additional performance improvements and bug fixes.

Codex app

Fri, 24 Apr 2026 00:00:00 GMT

# Codex app ### New features - Added a tooltip on realtime delegation messages to clarify that Codex uses the surrounding voice conversation as context. ### Performance improvements and bug fixes - Fixed search in long review files so next and previous results reliably jump to off-screen matches. - Kept embedded MCP app panels from restarting or losing state during fullscreen changes and thread reloads. - Fixed several desktop regressions, including tray crashes when the local connection is missing, duplicate macOS fullscreen menu entries, and broken global dictation hotkeys on older macOS versions. - Additional performance improvements and bug fixes.

GPT-5.5 and Codex app updates

Thu, 23 Apr 2026 00:00:00 GMT

# GPT-5.5 and Codex app updates [GPT-5.5 is now available in Codex](https://openai.com/index/introducing-gpt-5-5/) as OpenAI's newest frontier model for complex coding, computer use, knowledge work, and research workflows. #### GPT-5.5 in Codex GPT-5.5 is the recommended choice for most Codex tasks when it appears in your model picker. It's especially useful for implementation, refactors, debugging, testing, validation, and knowledge-work artifacts. To switch to GPT-5.5: - In the CLI, start a new thread with: ```bash codex --model gpt-5.5 ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.5 from the model selector in the composer. - In the Codex app, choose GPT-5.5 from the model selector in the composer. If you don't see GPT-5.5 yet, update the CLI, IDE extension, or Codex app to the latest version. During the rollout, continue using GPT-5.4 if GPT-5.5 is not yet available. #### Browser use in the Codex app The Codex app can now let Codex operate the in-app browser for local development servers and file-backed pages. Ask Codex to use the browser when it needs to click through a rendered UI, reproduce a visual bug, or verify a local fix inside the app. Browser use runs through the bundled Browser plugin. In settings, you can manage the plugin and review allowed or blocked websites. #### Automatic approval reviews Codex can route eligible approval prompts through an automatic reviewer agent before the request runs. When configured, the Codex app shows an automatic review item with the review status and risk level, so you can see whether the reviewer approved, denied, stopped, or timed out before deciding.

Codex app

Mon, 20 Apr 2026 00:00:00 GMT

# Codex app ### New features - Added local branch search and non-image file pasting in the composer. - Added collapsible sidebar sections, tray usage-limit surfacing, and a command-palette theme switcher. ### Performance improvements and bug fixes - Made review faster and more stable with better diff batching and preserved diff and search state. - Fixed projectless cwd and permissions handling, default file opening, spreadsheet suggestions, and remote-control reconnect issues. - Additional performance improvements and bug fixes.

Codex can now help with more of your work

Thu, 16 Apr 2026 00:00:00 GMT

# Codex can now help with more of your work Codex is becoming a broader workspace for getting work done with AI. This update makes it easier to start work with less setup, verify what Codex is building, create richer outputs, and keep momentum across longer-running tasks. #### Verify more of your work The Codex app now includes an early [**in-app browser**](/codex/browser?surface=app). You can open local or public pages that don't require sign-in, comment directly on the rendered page, and ask Codex to address page-level feedback. ![Codex app showing a browser comment on a local web app preview]() [**Computer use**](/codex/computer-use) lets Codex operate macOS apps by seeing, clicking, and typing, which helps with native app testing, simulator flows, low-risk app settings, and GUI-only bugs. The feature isn't available in the European Economic Area, the United Kingdom, or Switzerland at launch. #### Start, follow, and steer work [**Chats**](/codex/projects#start-without-a-project) are threads you can start without choosing a project folder first. They're useful for research, writing, planning, analysis, source gathering, and tool-driven work that doesn't begin in a codebase. For work that needs a later check-in, [**thread automations**](/codex/automations#schedule-work-from-a-task) can wake up the same thread on a schedule while preserving the conversation context. Use them to check a long-running process, watch for updates, or continue a follow-up loop without starting from scratch. [**The task sidebar**](/codex/artifacts-viewer#follow-artifact-work) makes plans, sources, generated artifacts, and summaries easier to follow while Codex works. [**Context-aware suggestions**](/codex/app/settings#context-aware-suggestions) can also help you pick up relevant follow-ups when you start or return to Codex. #### Stronger for software development Codex now brings more of the **pull request workflow** into the app. You can inspect [**GitHub pull requests**](/codex/code-review?surface=app#app-pull-request-reviews) in the sidebar, review comments in the diff, review changed files, then ask Codex to explain feedback, make changes, check them, and keep the review moving. #### Review richer outputs The [**artifact viewer**](/codex/artifacts-viewer) can preview generated files such as PDF files, spreadsheets, documents, and presentations in the sidebar before you commit or share them. [**Memories**](/codex/customization/memories), where available, can also carry useful context from past tasks into future threads, including stable preferences, project conventions, and recurring work patterns. #### Other features - [Remote connections](/codex/remote-connections) - We're gradually rolling out SSH remote connections in alpha - Support for [multiple terminals](/codex/integrated-terminal) - macOS menu bar and [Windows system tray](/codex/windows/windows-app) support - [Multi-window support](/codex/reference/settings#keep-a-task-near-your-work) - [Intel Mac support](/codex/app) - [New plugins](/codex/plugins) - Improved thread and tool rendering

Codex app

Sun, 12 Apr 2026 00:00:00 GMT

# Codex app ### New features - Added command-menu file search, including `Cmd+P` routing into workspace file search. - Added rich previews in the sidebar file viewer for images, PDFs, and Markdown. - Added terminal tabs per thread, a selected-text Ask Codex overlay, and a Help menu feedback entry. ### Performance improvements and bug fixes - Improved review diff whitespace handling and search highlighting. - Fixed in-app browser address bar and external-open issues, plus several file viewer and side-panel bugs. - Additional performance improvements and bug fixes.

Codex app

Fri, 10 Apr 2026 00:00:00 GMT

# Codex app ### New features - Added Windows Store updater support. - Expanded pull request workflows with an activity timeline, PR-page commenting, and push choices in the push modal. - Added workspace file tabs in the thread side panel, drag-and-drop tab reordering, run action editing, and a logout confirmation dialog. ### Performance improvements and bug fixes - Improved pull request board performance and comment flyouts. - Improved update and navigation resilience, and fixed projectless visibility, unread-state, and pinned-row edge cases. - Additional performance improvements and bug fixes.

Codex app

Thu, 09 Apr 2026 00:00:00 GMT

# Codex app ### New features - Added collapsible inline review comments and inline or detached review modes. - Added a Git summary and Sources section in the thread side panel. - Added a New Quick Chat command and local video embeds in the app. ### Performance improvements and bug fixes - Preserved thread scroll position per conversation and unread state across windows. - Improved review refresh reliability, and fixed dictation loss, right-panel reset, and GitHub reconnect messaging. - Additional performance improvements and bug fixes.

Codex model availability update

Tue, 07 Apr 2026 00:00:00 GMT

# Codex model availability update We're updating model availability for users who sign in with ChatGPT. Starting April 7, the model picker no longer shows `gpt-5.2-codex`, `gpt-5.1-codex-mini`, `gpt-5.1-codex-max`, `gpt-5.1-codex`, `gpt-5.1`, or `gpt-5`. On April 14, we'll remove those models from Codex for ChatGPT sign-in. Users can still choose from `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.3-codex`, and `gpt-5.2`. ChatGPT Pro users can also choose `gpt-5.3-codex-spark`. To use another API-supported model in Codex, sign in with an API key or configure a model provider.

Codex app

Wed, 01 Apr 2026 00:00:00 GMT

# Codex app ### New features - Added workspace settings to the app. - Added "Don't ask again" handling and polish for custom MCP approval panels. - Added native Windows updater support, including MSIX support, plus a Windows system tray menu so Codex can stay resident after the last window closes. - Added app and file `@` mentions in the automation composer, surfaced subagent diff stats in the composer, and added artifact cards for generated file citations. - Added a Quick Chat app-menu shortcut, a review file tree open menu, early heartbeat automation affordances in threads, and image support for remote connections. ### Performance improvements and bug fixes - Fixed review panel scroll jumps and PR status actions while a conversation is still running. - Fixed several multi-window issues, plus `@`-mention results, duplicate project labeling, Windows `runGit` behavior, and revert, unstage, and stage-all actions. - Improved remote-thread and sidebar polish, Windows update recovery, unsupported-version guidance, and overall thread search speed. - Fixed sticky review issues such as diff hunk expansion, header overlap, archive-thread crashes, and window-zoom shell sizing. - Additional performance improvements and bug fixes.

Build and install plugins in Codex

Wed, 25 Mar 2026 00:00:00 GMT

# Build and install plugins in Codex Codex now supports **plugins**: installable bundles that package skills, app integrations, and MCP server configuration for reusable workflows. Plugins are available in the Codex app, CLI, and IDE extensions. You can install curated plugins from the plugin directory, or scaffold a local plugin with `@plugin-creator` and test it with workspace-scoped or home-scoped marketplaces. Learn more in the [plugins documentation](/codex/plugins). #### Plugin structure Every plugin is a folder with a required `.codex-plugin/plugin.json` manifest and optional supporting files: ```text my-plugin/ .codex-plugin/ plugin.json # Required: plugin manifest skills/ # Optional: packaged skills .app.json # Optional: app or connector mappings .mcp.json # Optional: MCP server configuration assets/ # Optional: icons, logos, screenshots ``` #### Install plugins per-user or per-repo You can install plugins for just yourself with `~/.agents/plugins/marketplace.json` and `~/.codex/plugins/`, or for everyone on a project with `.agents/plugins/marketplace.json` and a repo-local plugin directory such as `./plugins/`. #### Curated plugins and local development Codex surfaces curated public plugins in the plugin directory. Codex also ships with the built-in `@plugin-creator` skill to help you scaffold a plugin, add a local marketplace entry, and test it before sharing it with teammates.

Codex app

Wed, 25 Mar 2026 00:00:00 GMT

# Codex app ### New features - Redesigned the skills and plugins browse and manage pages. - Added per-window zoom and a clearer edited-files state in review. - Added automation titles and icons in the sidebar, plus bundled Raycast themes. ### Performance improvements and bug fixes - Kept loaded threads and projects visible during reconnects and made navigation feel faster. - Fixed archive freezes, markdown wrapping, hotkey-window regressions, and several permissions, terminal, and worktree issues. - Additional performance improvements and bug fixes.

Codex app

Tue, 24 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added search for past Codex app threads, including a sidebar shortcut and keyboard shortcuts for jumping to recent threads. - Added a one-click option to archive all local threads in a project. - Synced key settings between the Codex app and the VS Code extension, and added a settings entry point in the extension. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

Codex app

Fri, 20 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added Floating Composer v2. - Added terminal shortcuts for jumping by word and line. - Improved plugin discovery surfaces and file-path rendering for saved images. ### Performance improvements and bug fixes - Fixed sidebar crashes when subagent turn items are missing. - Fixed pop-out thread routing and preserved local paths for composer image attachments. - Additional performance improvements and bug fixes.

Codex app

Thu, 19 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added skills to the `@` menu so you can insert them from the composer alongside other mentions. - `Cmd/Ctrl+F` now starts with your current text selection, which makes searching reviews and diffs faster, alongside broader review navigation improvements such as a refreshed file tree and percentage-based file tree resizing. - Added a branded loading shimmer while the app starts. ### Performance improvements and bug fixes - Improved collapsed diff summaries in review. - Fixed slash-command focus and composer alignment issues, and polished plugin cards and step details. - Additional performance improvements and bug fixes.

Codex app

Wed, 18 Mar 2026 00:00:00 GMT

# Codex app ### New features - You can now fork a conversation from an earlier message, not just the latest turn. - Added slash commands for switching models and reasoning levels, and made slash commands work in the middle of a draft prompt. - Added notifications for plan mode questions so it's easier to notice when Codex needs input. ### Performance improvements and bug fixes - Fixed thread handoff and subagent navigation issues across worktrees and the VS Code extension. - Additional performance improvements and bug fixes.

Introducing GPT-5.4 mini in Codex

Tue, 17 Mar 2026 00:00:00 GMT

# Introducing GPT-5.4 mini in Codex GPT-5.4 mini is now available in Codex as a fast, efficient model for lighter coding tasks and subagents. It improves over GPT-5 mini across coding, reasoning, image understanding, and tool use while running more than 2x faster. In Codex, GPT-5.4 mini uses 30% as much of your included limits as GPT-5.4, so comparable tasks can last about 3.3x longer before you hit those limits. GPT-5.4 mini is available in the Codex app, the CLI, the IDE extension, and Codex on the web. GPT-5.4 mini is also available in the API. Use GPT-5.4 mini for codebase exploration, large-file review, processing supporting documents, and other less reasoning-intensive subagent work. For more complex planning, coordination, and final judgment, start with GPT-5.4. To switch to GPT-5.4 mini: - In the CLI, start a new thread with: ```bash codex --model gpt-5.4-mini ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.4 mini from the model selector in the composer. - In the Codex app, choose GPT-5.4 mini from the model selector in the composer. If you don't see GPT-5.4 mini yet, update the CLI, IDE extension, or Codex app to the latest version.

Codex app

Mon, 16 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added back and forward buttons in the header so you can move between recent screens more quickly. - Added an **Open in Finder**, **Open in Explorer**, or **Open in File Manager** action from thread menus to jump straight to a thread's project folder. ### Performance improvements and bug fixes - Improved resume and thread error toasts with clearer details when something goes wrong. - Additional performance improvements and bug fixes.

Codex app

Thu, 12 Mar 2026 00:00:00 GMT

# Codex app ### Themes Change the Codex app appearance in **Settings** by choosing a base theme, adjusting accent, background, and foreground colors, and changing the UI and code fonts. You can also share your custom theme with friends. ![Codex app theme settings showing custom themes, color controls, and font settings]() ### Revamped Automations You can now choose whether automations run locally or on a worktree, define custom reasoning levels and models, and use templates to find inspiration for new automations. ![Automations settings showing local and worktree options alongside scheduling controls]() ### Performance improvements and bug fixes Various bug fixes and performance improvements.

Codex app

Wed, 11 Mar 2026 00:00:00 GMT

# Codex app ### New features - Codex can now read the integrated terminal for the current thread, so it can check the status of a running development server or refer back to failed build output while it works with you. ### Performance improvements and bug fixes - Additional performance improvements and bug fixes.

Introducing GPT-5.4 in Codex

Thu, 05 Mar 2026 00:00:00 GMT

# Introducing GPT-5.4 in Codex GPT-5.4 is now available in Codex as OpenAI's most capable and efficient frontier model for professional work. It combines recent advances in reasoning, coding, and agentic workflows in one model, and it's the recommended choice for most Codex tasks. In Codex, GPT-5.4 is the first general-purpose model with native computer-use capabilities. GPT-5.4 in Codex includes experimental support for the 1M context window. It supports complex workflows across applications and long-horizon tasks, with stronger tool use and tool search that help agents find and use the right tools more efficiently. GPT-5.4 is available everywhere you can use Codex: the Codex app, the CLI, the IDE extension, and Codex Cloud on the web. GPT-5.4 is also available in the API. To switch to GPT-5.4: - In the CLI, start a new thread with: ```bash codex --model gpt-5.4 ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.4 from the model selector in the composer. - In the Codex app, choose GPT-5.4 from the model selector in the composer. If you don't see GPT-5.4 yet, update the CLI, IDE extension, or Codex app to the latest version.

Codex app

Thu, 05 Mar 2026 00:00:00 GMT

# Codex app ### Performance improvements and bug fixes - Improved remote connections with clearer connection errors, better status updates, and clearer host labels in thread and settings views. - Fixed copy and paste shortcuts in the integrated terminal on Windows. - Fixed an issue where archived pinned threads could reappear in the sidebar. - Fixed an issue where repeated `codex://new` links could stop prefilling a new conversation when the app was already open. - Additional performance improvements and bug fixes.

Codex app

Wed, 04 Mar 2026 00:00:00 GMT

# Codex app #### Codex app for Windows ![Codex app for Windows showing a project sidebar, active thread, and review pane]() The Codex app is now available on Windows. The app gives you one interface for working across projects, running parallel agent threads, and reviewing results in one place. The Codex app runs natively on Windows using PowerShell and a native Windows sandbox for bounded permissions, so you can use Codex on Windows without moving your workflow into WSL, onto a virtual machine, or by deactivating the sandbox. The Windows app includes the same core features as the rest of the Codex app: - [Skills](/codex/build-skills) to discover and extend Codex capabilities. - [Automations](/codex/automations) to run work in the background. - [Worktrees](/codex/environments/git-worktrees) to handle independent tasks in the same project. If you prefer to develop in WSL, you can also switch the Codex agent and the integrated terminal to run there. Download it from the [Microsoft Store](https://get.microsoft.com/installer/download/9PLM9XGG6VKS?cid=website_cta_psi) and sign in with your ChatGPT account or an API key. For setup and configuration details, see [Setup](/codex/windows/windows-app#download-the-chatgpt-desktop-app), [Use WSL with the Codex app](/codex/windows/windows-app#windows-subsystem-for-linux-wsl), and [Customize the app for your development setup](/codex/windows/windows-app#customize-for-your-dev-setup).

Codex app

Tue, 03 Mar 2026 00:00:00 GMT

# Codex app ### New features - Added a Worktrees setting to turn automatic cleanup of Codex-managed worktrees on or off. - Added Handoff support for moving a thread between Local and [Worktree](/codex/environments/git-worktrees). - Added an explicit English option in the language menu. ### Performance improvements and bug fixes - Improved GitHub and pull request workflows. - Improved approval prompts and app connection sign-in flows. - Additional performance improvements and bug fixes.

Codex app

Sat, 28 Feb 2026 00:00:00 GMT

# Codex app ### Performance improvements and bug fixes - Fixed a regression where conversation and task views could stop updating while Codex was streaming a response. - Additional performance improvements and bug fixes.

Codex app

Fri, 27 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added pull request status badges in task rows and PR buttons, including draft, open, merged, and closed states. - Added a Worktrees setting to choose how many Codex-managed worktrees to keep before older ones are cleaned up. ### Performance improvements and bug fixes - Improved scrolling and navigation in long conversations and code review, including fixes for thread jumpiness, sidebar jitter, and diff scrolling. - Improved app startup reliability and keyboard zoom behavior. - Additional performance improvements and bug fixes.

Codex app

Thu, 26 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added new MCP shortcuts in the composer, including install keyword suggestions and an MCP server submenu in **Add context**. - Added support for `@mentions` and skill mentions in inline review comments. ### Performance improvements and bug fixes - Improved rendering of MCP tool calls and Mermaid diagram error handling. - Fixed an issue where stopped terminal commands could continue appearing as running. - Additional performance improvements and bug fixes.

Codex app

Tue, 17 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added drag-and-drop support to reorder queued messages. - Added a warning when the selected model is downgraded. ### Improvements and bug fixes - Improved file workflows with fuzzy file search and better attachment recovery after restart. - Additional performance improvements and bug fixes.

Introducing GPT-5.3-Codex-Spark

Thu, 12 Feb 2026 00:00:00 GMT

# Introducing GPT-5.3-Codex-Spark [Today, we're releasing a research preview of GPT-5.3-Codex-Spark](https://openai.com/index/introducing-gpt-5-3-codex-spark/), a smaller version of GPT-5.3-Codex and our first model designed for real-time coding. Codex-Spark is optimized to feel near-instant, delivering more than 1000 tokens per second while remaining highly capable for real-world coding tasks. Codex-Spark is available in research preview for ChatGPT Pro users in the latest Codex app, CLI, and IDE extension. This release also marks the first milestone in our partnership with Cerebras. At launch, Codex-Spark is text-only with a 128k context window. During the research preview, usage has separate model-specific limits and doesn't count against standard Codex limits. During high demand, access may slow down or queue while we balance reliability across users. To switch to GPT-5.3-Codex-Spark: - In the CLI, start a new thread with: ```bash codex --model gpt-5.3-codex-spark ``` Or use `/model` during a session. - In the IDE extension, choose GPT-5.3-Codex-Spark from the model selector in the composer. - In the Codex app, choose GPT-5.3-Codex-Spark from the model selector in the composer. If you don't see GPT-5.3-Codex-Spark yet, update the CLI, IDE extension, or Codex app to the latest version. GPT-5.3-Codex-Spark isn't available in the API at launch. For API-key workflows, continue using `gpt-5.2-codex`.

Codex app

Thu, 12 Feb 2026 00:00:00 GMT

# Codex app ### New features - Support for GPT-5.3-Codex-Spark - Added conversation forking - Added [floating pop-out window](/codex/reference/settings#keep-a-task-near-your-work) to take a conversation with you ### Bug fixes - Improved performance and bug fixes Alpha testing for the Codex app on Windows is also starting. [Sign up here](https://openai.com/form/codex-app/) to be a potential alpha tester.

Codex app

Tue, 10 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added branch search in the branch picker. - Added clearer guidance for entering plan mode when you type `plan` in the composer. - Added support for parallel approvals. ### Improvements and bug fixes - Additional performance improvements and bug fixes.

GPT-5.3-Codex in Cursor and VS Code

Mon, 09 Feb 2026 00:00:00 GMT

# GPT-5.3-Codex in Cursor and VS Code Starting today, GPT-5.3-Codex is available natively in Cursor and VS Code. API access is starting with a small set of customers as part of a phased release. This is the first model treated as a high security capability under the Preparedness Framework. Safety controls will continue to scale, and API access will expand over the next few weeks.

Codex app

Sun, 08 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added MCP and personality actions to the command palette. - Updated follow-up behavior to queue by default. ### Improvements and bug fixes - Additional performance improvements and bug fixes.

Codex app

Fri, 06 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added a file-reference action to reveal files directly in your OS file manager. ### Improvements and bug fixes - Improved handling of large reviews by removing the overall diff-size cap in the review pane. - Additional performance improvements and bug fixes.

Introducing GPT-5.3-Codex

Thu, 05 Feb 2026 00:00:00 GMT

# Introducing GPT-5.3-Codex [Today we're releasing GPT-5.3-Codex](https://openai.com/index/introducing-gpt-5-3-codex/), the most capable agentic coding model to date for complex, real-world software engineering. GPT-5.3-Codex combines the frontier coding performance of GPT-5.2-Codex with stronger reasoning and professional knowledge capabilities, and runs 25% faster for Codex users. It's also better at collaboration while the agent is working—delivering more frequent progress updates and responding to steering in real time. GPT-5.3-Codex is available with paid ChatGPT plans everywhere you can use Codex: the Codex app, the CLI, the IDE extension, and Codex Cloud on the web. API access for the model will come soon. To switch to GPT-5.3-Codex: - In the CLI, start a new thread with: ```bash codex --model gpt-5.3-codex ``` Or use `/model` during a session. - In the IDE extension, make sure you are signed in with ChatGPT, then choose GPT-5.3-Codex from the model selector in the composer. - In the Codex app, make sure you are signed in with ChatGPT, then choose GPT-5.3-Codex from the model selector in the composer. - If you don't see GPT-5.3-Codex, update the CLI, IDE extension, or Codex app to the latest version. For API-key workflows, continue using `gpt-5.2-codex` while API support rolls out.

Codex app

Thu, 05 Feb 2026 00:00:00 GMT

# Codex app ### New features - Support for **[GPT-5.3-Codex](https://openai.com/index/introducing-gpt-5-3-codex/)**. - Added mid-turn steering. Submit a message while Codex is working to direct its behavior. - Attach or drop any file type. ### Bug fixes - Fix flickering of the app.

Codex app

Wed, 04 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added **Zed** and **Textmate** as options to open files and folders. - Added PDF preview in the review panel. ### Bug fixes - Performance improvements.

Codex app

Tue, 03 Feb 2026 00:00:00 GMT

# Codex app ### New features - Added thread renaming on double-click in the thread list. ### Improvements and bug fixes - Renamed **Sync** to **Handoff** and added clearer source/destination stats in the handoff UI. - Additional performance improvements and bug fixes.

Introducing the Codex app

Mon, 02 Feb 2026 00:00:00 GMT

# Introducing the Codex app #### Codex app ![Codex app showing a project sidebar, thread list, and review pane]() The Codex app for macOS is a desktop interface for running agent threads in parallel and collaborating with agents on long-running tasks. It includes a project sidebar, thread list, and review pane for tracking work across projects. Key features: - [Multitask across projects](/codex/projects) - [Built-in worktree support](/codex/environments/git-worktrees) - [Voice dictation](/codex/prompting#use-voice-dictation) - [Built-in Git tooling](/codex/environments/local-environment#use-built-in-git-tools) - [Skills](/codex/build-skills) - [Automations](/codex/automations) For a limited time, **ChatGPT Free and Go include Codex**, and **Plus, Pro, Business, Enterprise, and Edu** plans get **double rate limits**. Those higher limits apply in the app, the CLI, your IDE, and the cloud. Learn more in the [Introducing the Codex app](https://openai.com/index/introducing-the-codex-app/) blog post. Check out the [Codex app documentation](/codex/app) for more.

Web search is now enabled by default

Wed, 28 Jan 2026 00:00:00 GMT

# Web search is now enabled by default Codex now enables web search for local tasks in the Codex CLI and IDE Extension. By default, Codex uses a web search cache, which is an OpenAI-maintained index of web results. Cached mode returns pre-indexed results instead of fetching live pages, while live mode fetches the most recent data from the web. If you are using `--yolo` or another [full access sandbox setting](/codex/agent-approvals-security), web search defaults to live results. To disable this behavior or switch modes, use the `web_search` configuration option: - `web_search = "cached"` (default; serves results from the web search cache) - `web_search = "live"` (fetches the most recent data from the web; same as `--search`) - `web_search = "disabled"` to remove the tool To learn more, check out the [configuration documentation](/codex/config-file/config-basic).

Team Config for shared configuration

Fri, 23 Jan 2026 00:00:00 GMT

# Team Config for shared configuration Team Config groups the files teams use to standardize Codex across repositories and machines. Use it to share: - `config.toml` defaults - `rules/` for command controls outside the sandbox - `skills/` for reusable workflows Codex loads these layers from `.codex/` folders in the current working directory, parent folders, and the repo root, plus user (`~/.codex/`) and system (`/etc/codex/`) locations. Higher-precedence locations override lower-precedence ones. Admins can still enforce constraints with `requirements.toml`, which overrides defaults regardless of location. Learn more in [Team Config](/codex/enterprise/admin-setup#step-4-standardize-local-configuration-with-team-config).

Custom prompts deprecated

Thu, 22 Jan 2026 00:00:00 GMT

# Custom prompts deprecated Custom prompts are now deprecated. Use [skills](/codex/build-skills) for reusable instructions and workflows instead.

GPT-5.2-Codex API availability

Wed, 14 Jan 2026 00:00:00 GMT

# GPT-5.2-Codex API availability GPT-5.2-Codex is now available in the API and for users who sign into Codex with the API. To learn more about using GPT-5.2-Codex check out our [API documentation](https://platform.openai.com/docs/models/gpt-5.2-codex).

Agent skills in Codex

Fri, 19 Dec 2025 00:00:00 GMT

# Agent skills in Codex Codex now supports **agent skills**: reusable bundles of instructions (plus optional scripts and resources) that help Codex reliably complete specific tasks. Skills are available in both the Codex CLI and IDE extensions. You can invoke a skill explicitly by typing `$skill-name` (for example, `$skill-installer` or the experimental `$create-plan` skill after installing it), or let Codex select a skill automatically based on your prompt. Learn more in the [skills documentation](/codex/build-skills). #### Folder-based standard (agentskills.io) Following the open [agent skills specification](https://agentskills.io/specification), a skill is a folder with a required `SKILL.md` and optional supporting files: ```text my-skill/ SKILL.md # Required: instructions + metadata scripts/ # Optional: executable code references/ # Optional: documentation assets/ # Optional: templates, resources ``` #### Install skills per-user or per-repo You can install skills for just yourself in `~/.codex/skills`, or for everyone on a project by checking them into `.codex/skills` in the repository. Codex also ships with a few built-in system skills to get started, including `$skill-creator` and `$skill-installer`. The `$create-plan` skill is experimental and needs to be installed (for example: `$skill-installer install the create-plan skill from the .experimental folder`). #### Curated skills directory Codex ships with a [small curated set of skills](https://github.com/openai/skills) inspired by popular workflows at OpenAI. Install them with `$skill-installer`, and expect more over time.

Introducing GPT-5.2-Codex

Thu, 18 Dec 2025 00:00:00 GMT

# Introducing GPT-5.2-Codex [Today we are releasing GPT-5.2-Codex](https://openai.com/index/gpt-5-2-codex), the most advanced agentic coding model yet for complex, real-world software engineering. GPT-5.2-Codex is a version of [GPT-5.2](https://openai.com/index/introducing-gpt-5-2/) further optimized for agentic coding in Codex, including improvements on long-horizon work through context compaction, stronger performance on large code changes like refactors and migrations, improved performance in Windows environments, and significantly stronger cybersecurity capabilities. Starting today, the CLI and IDE Extension will default to `gpt-5.2-codex` for users who are signed in with ChatGPT. API access for the model will come soon. If you have a model specified in your [`config.toml` configuration file](/codex/local-config), you can instead try out `gpt-5.2-codex` for a new Codex CLI session using: ```bash codex --model gpt-5.2-codex ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5.2-Codex from the dropdown menu. If you want to switch for all sessions, you can change your default model to `gpt-5.2-codex` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5.2-codex” ```

Introducing Codex for Linear

Thu, 04 Dec 2025 00:00:00 GMT

# Introducing Codex for Linear Assign or mention @Codex in an issue to kick-off a Codex cloud task. As Codex works, it posts updates back to Linear, providing a link to the completed task so you can review, open a PR, or keep working. ![Screenshot of a successful Codex task started in Linear](/images/codex/integrations/linear-codex-example.png) To learn more about how to connect Codex to Linear both locally through MCP and through the new integration, check out the [Codex for Linear documentation](/codex/third-party/linear).

Usage and credits fixes

Mon, 24 Nov 2025 00:00:00 GMT

# Usage and credits fixes Minor updates to address a few issues with Codex usage and credits: - Adjusted all usage dashboards to show "limits remaining" for consistency. The CLI previously displayed "limits used." - Fixed an issue preventing users from buying credits if their ChatGPT subscription was purchased via iOS or Google Play. - Fixed an issue where the CLI could display stale usage information; it now refreshes without needing to send a message first. - Optimized the backend to help smooth out usage throughout the day, irrespective of overall Codex load or how traffic is routed. Before, users could get unlucky and hit a few cache misses in a row, leading to much less usage.

Introducing GPT-5.1-Codex-Max

Tue, 18 Nov 2025 00:00:00 GMT

# Introducing GPT-5.1-Codex-Max [Today we are releasing GPT-5.1-Codex-Max](https://openai.com/index/gpt-5-1-codex-max), our new frontier agentic coding model. GPT‑5.1-Codex-Max is built on an update to our foundational reasoning model, which is trained on agentic tasks across software engineering, math, research, and more. GPT‑5.1-Codex-Max is faster, more intelligent, and more token-efficient at every stage of the development cycle–and a new step towards becoming a reliable coding partner. Starting today, the CLI and IDE Extension will default to `gpt-5.1-codex-max` for users that are signed in with ChatGPT. API access for the model will come soon. For non-latency-sensitive tasks, we’ve also added a new Extra High (`xhigh`) reasoning effort, which lets the model think for an even longer period of time for a better answer. We still recommend medium as your daily driver for most tasks. If you have a model specified in your [`config.toml` configuration file](/codex/local-config), you can instead try out `gpt-5.1-codex-max` for a new Codex CLI session using: ```bash codex --model gpt-5.1-codex-max ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5.1-Codex from the dropdown menu. If you want to switch for all sessions, you can change your default model to `gpt-5.1-codex-max` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5.1-codex-max” ```

Introducing GPT-5.1-Codex and GPT-5.1-Codex-Mini

Thu, 13 Nov 2025 00:00:00 GMT

# Introducing GPT-5.1-Codex and GPT-5.1-Codex-Mini Along with the [GPT-5.1 launch in the API](https://openai.com/index/gpt-5-1-for-developers/), we are introducing new `gpt-5.1-codex-mini` and `gpt-5.1-codex` model options in Codex, a version of GPT-5.1 optimized for long-running, agentic coding tasks and use in coding agent harnesses in Codex or Codex-like harnesses. Starting today, the CLI and IDE Extension will default to `gpt-5.1-codex` on macOS and Linux and `gpt-5.1` on Windows. If you have a model specified in your [`config.toml` configuration file](/codex/local-config), you can instead try out `gpt-5.1-codex` for a new Codex CLI session using: ```bash codex --model gpt-5.1-codex ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5.1-Codex from the dropdown menu. If you want to switch for all sessions, you can change your default model to `gpt-5.1-codex` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5.1-codex” ```

Introducing GPT-5-Codex-Mini

Fri, 07 Nov 2025 00:00:00 GMT

# Introducing GPT-5-Codex-Mini Today we are introducing a new `gpt-5-codex-mini` model option to Codex CLI and the IDE Extension. The model is a smaller, more cost-effective, but less capable version of `gpt-5-codex` that provides approximately 4x more usage as part of your ChatGPT subscription. Starting today, the CLI and IDE Extension will automatically suggest switching to `gpt-5-codex-mini` when you reach 90% of your 5-hour usage limit, to help you work longer without interruptions. You can try the model for a new Codex CLI session using: ```bash codex --model gpt-5-codex-mini ``` You can also use the `/model` slash command in the CLI. In the Codex IDE Extension you can select GPT-5-Codex-Mini from the dropdown menu. Alternatively, you can change your default model to `gpt-5-codex-mini` by updating your `config.toml` [configuration file](/codex/local-config): ```toml model = "gpt-5-codex-mini” ```

GPT-5-Codex model update

Thu, 06 Nov 2025 00:00:00 GMT

# GPT-5-Codex model update We've shipped a minor update to GPT-5-Codex: - More reliable file edits with `apply_patch`. - Fewer destructive actions such as `git reset`. - More collaborative behavior when encountering user edits in files. - 3% more efficient in time and usage.

Credits on ChatGPT Pro and Plus

Thu, 30 Oct 2025 00:00:00 GMT

# Credits on ChatGPT Pro and Plus Codex users on ChatGPT Plus and Pro can now use on-demand credits for more Codex usage beyond what's included in your plan. [Learn more.](/codex/pricing)

Tag @Codex on GitHub Issues and PRs

Wed, 22 Oct 2025 00:00:00 GMT

# Tag @Codex on GitHub Issues and PRs You can now tag `@codex` on a teammate's pull request to ask clarifying questions, request a follow-up, or ask Codex to make changes. GitHub Issues now also support `@codex` mentions, so you can kick off tasks from any issue, without leaving your workflow. ![Codex responding to a GitHub pull request and issue after an @Codex mention.](/images/codex/integrations/github-example.png)

Codex is now GA

Mon, 06 Oct 2025 00:00:00 GMT

# Codex is now GA Codex is now generally available with 3 new features — @Codex in Slack, Codex SDK, and new admin tools. #### @Codex in Slack ![](/images/codex/integrations/slack-example.png) You can now questions and assign tasks to Codex directly from Slack. See the [Slack guide](/codex/third-party/slack) to get started. #### Codex SDK Integrate the same agent that powers the Codex CLI inside your own tools and workflows with the Codex SDK in Typescript. With the new Codex GitHub Action, you can easily add Codex to CI/CD workflows. See the [Codex SDK guide](/codex/codex-sdk) to get started. ```ts const agent = new Codex(); const thread = await agent.startThread(); const result = await thread.run("Explore this repo"); console.log(result); const result2 = await thread.run("Propose changes"); console.log(result2); ``` #### New admin controls and analytics ![](/images/codex/enterprise/analytics.png) ChatGPT workspace admins can now edit or delete Codex Cloud environments. With managed config files, they can set safe defaults for CLI and IDE usage and monitor how Codex uses commands locally. New analytics dashboards help you track Codex usage and code review feedback. Learn more in the [enterprise admin guide.](/codex/enterprise/admin-setup) #### Availability and pricing updates The Slack integration and Codex SDK are available to developers on ChatGPT Plus, Pro, Business, Edu, and Enterprise plans starting today, while the new admin features will be available to Business, Edu, and Enterprise. Beginning October 20, Codex Cloud tasks will count toward your Codex usage. Review the [Codex pricing guide](/codex/pricing) for plan-specific details.

GPT-5-Codex in the API

Tue, 23 Sep 2025 00:00:00 GMT

# GPT-5-Codex in the API GPT-5-Codex is now available in the Responses API, and you can also use it with your API Key in the Codex CLI. We plan on regularly updating this model snapshot. It is available at the same price as GPT-5. You can learn more about pricing and rate limits for this model on our [model page](https://platform.openai.com/docs/models/gpt-5-codex).

Introducing GPT-5-Codex

Mon, 15 Sep 2025 00:00:00 GMT

# Introducing GPT-5-Codex #### New model: GPT-5-Codex ![codex-switch-model](https://cdn.openai.com/devhub/docs/codex-switch-model.png) GPT-5-Codex is a version of GPT-5 further optimized for agentic coding in Codex. It's available in the IDE extension and CLI when you sign in with your ChatGPT account. It also powers the cloud agent and Code Review in GitHub. To learn more about GPT-5-Codex and how it performs compared to GPT-5 on software engineering tasks, see our [announcement blog post](https://openai.com/index/introducing-upgrades-to-codex/). #### Image outputs ![codex-image-outputs](https://cdn.openai.com/devhub/docs/codex-image-output.png) When working in the cloud on front-end engineering tasks, GPT-5-Codex can now display screenshots of the UI in Codex web for you to review. With image output, you can iterate on the design without needing to check out the branch locally. #### New in Codex CLI - You can now resume sessions where you left off with `codex resume`. - Context compaction automatically summarizes the session as it approaches the context window limit. Learn more in the [latest release notes](https://github.com/openai/codex/releases/tag/rust-v0.36.0)

Late August update

Wed, 27 Aug 2025 00:00:00 GMT

# Late August update #### IDE extension (Compatible with VS Code, Cursor, Windsurf) Codex now runs in your IDE with an interactive UI for fast local iteration. Easily switch between modes and reasoning efforts. #### Sign in with ChatGPT (IDE & CLI) One-click authentication that removes API keys and uses ChatGPT Enterprise credits. #### Move work between local ↔ cloud Hand off tasks to Codex web from the IDE with the ability to apply changes locally so you can delegate jobs without leaving your editor. #### Code Reviews Codex goes beyond static analysis. It checks a PR against its intent, reasons across the codebase and dependencies, and can run code to validate the behavior of changes.

Mid August update

Thu, 21 Aug 2025 00:00:00 GMT

# Mid August update #### Image inputs ![](/images/codex/changelog/image_input.png) You can now attach images to your prompts in Codex web. This is great for asking Codex to implement frontend changes or follow up on whiteboarding sessions. #### Container caching ![](/images/codex/changelog/container_caching.png) Codex now caches containers to start new tasks and followups 90% faster, dropping the median start time from 48 seconds to 5 seconds. You can optionally configure a maintenance script to update the environment from its cached state to prepare for new tasks. See the docs for more. #### Automatic environment setup Now, environments without manual setup scripts automatically run the standard installation commands for common package managers like yarn, pnpm, npm, go mod, gradle, pip, poetry, uv, and cargo. This reduces test failures for new environments by 40%.

Best of N

Fri, 13 Jun 2025 00:00:00 GMT

# Best of N ![](/images/codex/changelog/best-of-n.png) Codex can now generate multiple responses simultaneously for a single task, helping you quickly explore possible solutions to pick the best approach. ## Fixes & improvements - Added some keyboard shortcuts and a page to explore them. Open it by pressing ⌘-/ on macOS and Ctrl+/ on other platforms. - Added a “branch” query parameter in addition to the existing “environment”, “prompt” and “tab=archived” parameters. - Added a loading indicator when downloading a repo during container setup. - Added support for cancelling tasks. - Fixed issues causing tasks to fail during setup. - Fixed issues running followups in environments where the setup script changes files that are gitignored. - Improved how the agent understands and reacts to network access restrictions. - Increased the update rate of text describing what Codex is doing. - Increased the limit for setup script duration to 20 minutes for Pro and Business users. - Polished code diffs: You can now option-click a code diff header to expand/collapse all of them.

June update

Tue, 03 Jun 2025 00:00:00 GMT

# June update #### Agent internet access ![](/images/codex/changelog/internet_access.png) Now you can give Codex access to the internet during task execution to install dependencies, upgrade packages, run tests that need external resources, and more. Internet access is off by default. Plus, Pro, and Business users can enable it for specific environments, with granular control of which domains and HTTP methods Codex can access. Internet access for Enterprise users is coming soon. Learn more about usage and risks in the [docs](/codex/cloud/agent-internet). #### Update existing PRs ![](/images/codex/changelog/update_prs.png) Now you can update existing pull requests when following up on a task. #### Voice dictation Now you can dictate tasks to Codex. ## Fixes & improvements - Added a link to this changelog from the profile menu. - Added support for binary files: When applying patches, all file operations are supported. When using PRs, only deleting or renaming binary files is supported for now. - Fixed an issue on iOS where follow up tasks where shown duplicated in the task list. - Fixed an issue on iOS where pull request statuses were out of date. - Fixed an issue with follow ups where the environments were incorrectly started with the state from the first turn, rather than the most recent state. - Fixed internationalization of task events and logs. - Improved error messages for setup scripts. - Increased the limit on task diffs from 1 MB to 5 MB. - Increased the limit for setup script duration from 5 to 10 minutes. - Polished GitHub connection flow. - Re-enabled Live Activities on iOS after resolving an issue with missed notifications. - Removed the mandatory two-factor authentication requirement for users using SSO or social logins.

Reworked environment page

Thu, 22 May 2025 00:00:00 GMT

# Reworked environment page It's now easier and faster to set up code execution. ![](/images/codex/changelog/environment_setup.png) ## Fixes & improvements - Added a button to retry failed tasks - Added indicators to show that the agent runs without network access after setup - Added options to copy git patches after pushing a PR - Added support for unicode branch names - Fixed a bug where secrets were not piped to the setup script - Fixed creating branches when there’s a branch name conflict. - Fixed rendering diffs with multi-character emojis. - Improved error messages when starting tasks, running setup scripts, pushing PRs, or disconnected from GitHub to be more specific and indicate how to resolve the error. - Improved onboarding for teams. - Polished how new tasks look while loading. - Polished the followup composer. - Reduced GitHub disconnects by 90%. - Reduced PR creation latency by 35%. - Reduced tool call latency by 50%. - Reduced task completion latency by 20%. - Started setting page titles to task names so Codex tabs are easier to tell apart. - Tweaked the system prompt so that agent knows it’s working without network, and can suggest that the user set up dependencies. - Updated the docs.

Codex in the ChatGPT iOS app

Mon, 19 May 2025 00:00:00 GMT

# Codex in the ChatGPT iOS app Start tasks, view diffs, and push PRs—while you're away from your desk. ![](/images/codex/changelog/mobile_support.png)