Codex 0.161.0

[Changelog] #49713 Remove repository-local Codex guidance, skills, and environment config @anp-oai

[Changelog] #49702 Rename exec-server file handle management identifiers @anp-oai

[New Features] GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)

[New Features] Daybreak is opt-in through `--enable cli_daybreak` or `features.cli_daybreak=true`; `daybreak=true` alone is insufficient. By default, controls and indicators are hidden, `/daybreak` is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)

[Changelog] #49339 Add GPT-6.1 Sol to Bedrock catalogs and make it the default @celia-oai

[Changelog] #49835 Clarify service tier default save errors in the TUI @etraut-openai

[New Features] Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)

[New Features] Sign in to MCP servers from an active terminal session with `/mcp login <name>`. (#49290)

[New Features] Select a Cyber access program per turn with `codex exec --cyber-access-program` or the TypeScript SDK’s `cyberAccessProgram` option. The explicit exec override remains available with `cli_daybreak` disabled and leaves the saved choice unchanged. (#49939, #51207)

[Changelog] #49257 Allow Guardian cached approvals with incomplete root context @felixxia-oai

[Changelog] #49260 Restrict enterprise MCP auth and fail closed on config refresh @nicksteele-oai

[Changelog] #49267 Support remote agent message boards in multi-agent sessions @jif-oai

[Changelog] #49276 Enable enterprise MCP sign-in and account-scoped grant cleanup @nicksteele-oai

[Changelog] #49290 Add `/mcp login <name>` to the TUI @nicksteele-oai

[Changelog] #49312 Notify parent agents when Guardian stops a subagent @jif-oai

[Changelog] #49318 Add GPT-6.1 Sol as the default catalog model @andrewgu-oai

[Changelog] #49345 Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock @celia-oai

[Changelog] #49353 Allow approved filesystem escalation while preserving denied reads @viyatb-oai

[Changelog] #49357 Continue Markdown blockquotes when pasting multiline text @bc-openai

[Changelog] #49392 Add attributed MCP OAuth credential storage telemetry @celia-oai

[Changelog] #49406 Support explicit cyber access programs with OpenAI API keys @julee-oai

[Changelog] #49426 Enable analytics by default for daemon-launched app servers @bc-openai

[Changelog] #49473 Use the rmcp SDK for enterprise-managed token exchanges @nicksteele-oai

[Changelog] #49478 Discover and validate MCP authorization servers before ID-JAG exchange @nicksteele-oai

[Changelog] #49517 Add a fork shortcut to the TUI command center @etraut-openai

[Changelog] #49598 Persist explicit user goal edits in model history @felixxia-oai

[Changelog] #49624 Use server authentication for explicit remote session commands @cooper-oai

[Changelog] #49683 Add a managed feature gate for in-app voice @vishnu-oai

[Changelog] #49689 Export skill invocation events through OpenTelemetry @jif-oai

[Changelog] #49715 Add account security setup reminders to the TUI @dennyku

[Changelog] #49792 Add retained conversation support to Guardian async sampling @felixxia-oai

[Changelog] #49793 Add conversation mode to Guardian v2 async classification @felixxia-oai

[Changelog] #49805 Add capability-gated writable file streams to the exec-server client @anp-oai

[Changelog] #49807 Enable API-key model discovery by default @andrewgu-oai

[Changelog] #49814 Add coordinated shutdown for local agent trees @owenlin0

[Changelog] #49847 Persist world-state snapshots alongside rendered context @pakrym-oai

[Changelog] #49856 Support Daybreak selection in `codex exec` @etraut-openai

[Changelog] #49858 Add a persistent `/daybreak` toggle to the TUI @etraut-openai

[Changelog] #49894 Return world-state snapshots and context updates together @pakrym-oai

[Changelog] #49939 Add per-turn Cyber access program selection to exec and the SDK @mldangelo-oai

[Changelog] #49987 Add renewable EMA HTTP authentication and credential versioning @nicksteele-oai

[New Features] Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)

[Changelog] #49262 Trace turn phases and correlate accepted input with turns @jif-oai

[Changelog] #49269 Preserve thread overrides and cloud policy validity during config reloads @nicksteele-oai

[Changelog] #49280 Restrict capability roots to captured turn environments @miz-openai

[Changelog] #49294 Record Guardian context mode in review and classification telemetry @felixxia-oai

[Changelog] #49308 Run piped legacy Windows sandbox processes without a console @etraut-openai

[Changelog] #49411 Bind the app-server time provider to a local variable @euroelessar

[Changelog] #49437 Add local audio device selection to TUI voice settings @bc-openai

[Changelog] #49480 Add experimental thread prediction protocol types @keyz

[Changelog] #49560 Add an opt-in model catalog to multi-agent context @jif-oai

[Changelog] #49564 Copy selected file paths as plain text in the TUI @fcoury-oai

[Changelog] #49584 Skip host skill discovery for Guardian reviews @jif-oai

[Changelog] #49595 Make the strict network approval test independent of request order @jif-oai

[Changelog] #49600 Reuse unchanged history snapshots when resuming threads @felixxia-oai

[Changelog] #49675 Serialize Responses routing fields before large inputs @jbeckwith-oai

[Changelog] #49686 Deliver remote message board notifications to active turns @jif-oai

[Changelog] #49778 Define exec-server protocol types for streamed file writes @anp-oai

[Changelog] #49781 Include the environment's MXC backend in MCP sandbox metadata @zm-oai

[Changelog] #49784 Add a requirements feature gate for the browser annotation API @tepman-oai

[Changelog] #49786 Clarify V2 spawn model override guidance for context catalogs @jif-oai

[Changelog] #49800 Allow cleanup of replay-only side conversations with missing threads @bc-openai

[Changelog] #49804 Use platform-specific modifier labels in TUI shortcut hints @bc-openai

[Changelog] #49812 Move shadow skill ranking off the turn preparation path @vkg-oai

[Changelog] #49817 Add an advisory Bedrock GovCloud requirements check @alexsong-oai

[Changelog] #49818 Use dedicated parameters for sandboxed file opens @anp-oai

[Changelog] #49836 Allow microphone channel selection for voice conversations @bc-openai

[Changelog] #49846 Capture host-supplied extension data for each turn @sayan-oai

[Changelog] #49855 Use embedded mode for elevated Windows TUI sessions @etraut-openai

[Changelog] #49857 Use the model catalog to select TUI cyber refusal guidance @etraut-openai

[Changelog] #49861 Add Daybreak state to the status line and terminal title @etraut-openai

[Changelog] #49867 Update elevated-launch warning snapshot to use `⌃o` for copy @etraut-openai

[Changelog] #49875 Decouple TUI startup presentation from execution configuration @etraut-openai

[Changelog] #49898 Scope extension filesystem access to callback permissions @anp-oai

[Changelog] #49951 Include preceding assistant context in Guardian sender reviews @jif-oai

[Changelog] #49956 Cache the placeholder regex for MCP hook argument expansion @jif-oai

[Changelog] #49972 Share byte buffers across exec-server output chunks @jif-oai

[Changelog] #49424 Infer Windows UNC paths with forward and mixed slashes @dkovalenko-oai

[Bug Fixes] Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)

[Bug Fixes] Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)

[Bug Fixes] Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)

[Bug Fixes] Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)

[Changelog] #49384 Track credential storage outcomes and redact sensitive errors @celia-oai

[Changelog] #49599 Return authoritative replay history when resuming a thread @felixxia-oai

[Changelog] #49642 Allow managed requirements to disable the Windows MXC sandbox @iceweasel-oai

[Changelog] #49678 Escape command drafts when recovering question answers @imac-oai

[Changelog] #49694 Batch rollout listing scans on cancellable blocking workers @charliemarsh-oai

[Changelog] #49701 Detect SQLite corruption during startup and preserve recovery backups @dkovalenko-oai

[Changelog] #49796 Deduplicate Guardian retained-context omission notices @felixxia-oai

[Changelog] #49809 Preserve local launch permissions across TUI sessions and reconnects @etraut-openai

[Changelog] #49813 Support AWS GovCloud regions for Amazon Bedrock Mantle @alexsong-oai

[Changelog] #49819 Recover daemon startup and updater re-exec after cwd deletion @etraut-openai

[Changelog] #49843 Preserve daemon diagnostics and include updater logs in reports @etraut-openai

[Changelog] #49880 Bind permission grants to the originating turn @anp-oai

[Changelog] #49912 Respect approval policies in temporary structured threads @etraut-openai

[Bug Fixes] Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)

[Bug Fixes] Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)

[Changelog] #49261 Preserve Windows sandbox runner launch errors @zm-oai

[Changelog] #49277 Avoid a turn teardown race in the Guardian agent message test @felixxia-oai

[Changelog] #49286 Model exec-server session attachment state as an enum @jif-oai

[Changelog] #49325 Retry Windows sandbox runner logon once on error 1056 @zm-oai

[Changelog] #49330 Keep remote control reconnect backoff capped during sustained failures @yansenzhou-oai

[Changelog] #49332 Clean up canceled exec-server RPC requests immediately @jif-oai

[Changelog] #49388 Fix Windows path inference for opaque URIs with slash prefixes @dkovalenko-oai

[Changelog] #49389 Serialize tests that share Windows sandbox accounts @jgershen-oai

[Changelog] #49395 Remove randomized greetings from TUI session headers @etraut-openai

[Changelog] #49401 Preserve live tool-call metadata across request windows @ningyi-oai

[Changelog] #49403 Add an experimental flag for bundled tools in login shells @anp-oai

[Changelog] #49407 Recover exec-server sessions after environment info timeouts @vivi

[Changelog] #49414 Filter graceful shutdown guard and trigger traces from SQLite logs @dkovalenko-oai

[Changelog] #49432 Preserve bootstrap discovery across authentication changes @cooper-oai

[Changelog] #49441 Honor server retry advice across Responses retries and fallback @anp-oai

[Changelog] #49467 Restore executor tool paths after login shell startup @anp-oai

[Changelog] #49472 Use server-authoritative permissions in the TUI @etraut-openai

[Changelog] #49475 Complete turn abort callbacks before emitting terminal events @euroelessar

[Changelog] #49489 Add regression coverage for account switches between analytics batches @anp-oai

[Changelog] #49690 Preserve PowerShell relative paths in the elevated Windows sandbox @johnl-oai

[Changelog] #49693 Move thread history projection into one blocking task @charliemarsh-oai

[Changelog] #49696 Make exec-server file reads cancellable between chunks @charliemarsh-oai

[Changelog] #49704 Prevent npm alpha dist-tags from moving backward @imac-oai

[Changelog] #49708 Move session index I/O off async runtime threads @charliemarsh-oai

[Changelog] #49710 Classify SQLite corruption using typed error codes @dkovalenko-oai

[Changelog] #49712 Avoid full-string scans in token-budget truncation @jif-oai

[Changelog] #49714 Decouple API-key cyber access programs from model discovery @julee-oai

[Changelog] #49783 Preserve background thread requests when forking in the TUI @etraut-openai

[Changelog] #49785 Persist empty paginated threads when naming them @rd-oai

[Changelog] #49795 Avoid duplicate sync reviews in Guardian classifier continuations @felixxia-oai

[Changelog] #49799 Preserve server web-search settings in the TUI @etraut-openai

[Changelog] #49806 Accept unknown Codex error variants in the app-server protocol @anp-oai

[Changelog] #49810 Flush expired paste bursts before handling Enter @bc-openai

[Changelog] #49811 Handle unsupported `fs/writeBlock` requests in exec-server @anp-oai

[Changelog] #49816 Remove browser-open success messages from the TUI @bc-openai

[Changelog] #49822 Box the resume future in the agents overview permissions test @sayan-oai

[Changelog] #49850 Launch Windows daemon children in a dedicated working directory @etraut-openai

[Changelog] #49852 Improve diagnostics for report attachment failures @dkovalenko-oai

[Changelog] #49859 Honor Daybreak settings in TUI continuations and background tasks @etraut-openai

[Changelog] #49876 Remove personality plumbing from the TUI @etraut-openai

[Changelog] #49910 Preserve validation errors for invalid TUI keybindings @etraut-openai

[Changelog] #49946 Prevent stale file search results from being labeled with a new query @jif-oai

[Changelog] #49993 Preserve the async Guardian history prefix as retained context changes @felixxia-oai

[Changelog] #49275 Isolate realtime conversation tests from Responses prewarm connections @felixxia-oai

[Changelog] #49297 Scan the session index backwards for batch thread name lookups @jif-oai

[Changelog] #49408 Compare tool call metadata in the recorder refresh test @euroelessar

[Changelog] #49415 Truncate input text in protocol debug output @dkovalenko-oai

[Changelog] #49416 Omit payloads from multiline ANSI warnings @dkovalenko-oai

[Changelog] #49692 Keep compressed rollout snippet searches on one blocking worker @npancha-openai

[Changelog] #49782 Clean up process groups for failed shell snapshot captures @jif-oai

[Changelog] #49361 Clarify credential storage wording across authentication UI and docs @celia-oai

[Documentation] Authentication guidance now accounts for keyring storage instead of implying credentials always reside in `auth.json`. (#49361)

[Chores] Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)

[Changelog] #49246 Use executable fixture copying in the bundled bwrap test @felixxia-oai

[Changelog] #49266 Remove the remote agent message board client README @jif-oai

[Changelog] #49295 Simplify configuration fingerprint canonicalization @jif-oai

[Changelog] #49300 Compact the inline hidden tag buffer once per chunk @jif-oai

[Changelog] #49305 Batch metadata reads when resolving thread names @jif-oai

[Changelog] #49316 Bump taiki-e/install-action to v2.87.21 in CI setup @jgershen-oai

[Changelog] #49360 Carry shell invocation metadata and report executor PATH directories @anp-oai

[Changelog] #49369 Update Bedrock GPT-6 Sol catalog tests to expect multi-agent V2 @celia-oai

[Changelog] #49379 Compile hook matchers during discovery @jif-oai

[Changelog] #49425 Prune diagnostic logs periodically by age and database size @dkovalenko-oai

[Changelog] #49444 Use `memrchr` to find newlines in reverse JSONL scans @btraut-openai

[Changelog] #49706 Upgrade the argument comment lint toolchain and Dylint @tamird

[Changelog] #49787 Remove `AGENTS.md` from Bazel core test data @andrewgu-oai

[Changelog] #49798 Share cached exec-server environment info with Arc @anp-oai

[Changelog] #49801 Update the Rust toolchain action for argument-comment linting @andrewgu-oai

[Changelog] #49874 Point usage and credit links to ChatGPT settings @etraut-openai

[Changelog] #49959 Test session index thread-name append and removal @jif-oai