Codex 0.163.0

[Chores] Codex now uses its standard shell executor and no longer bundles a patched `zsh`. Configurations using the retired shell flags receive a migration notice. (#52160, #52213)

[Changelog] #52213 Stop bundling patched zsh in Codex packages @jif-oai

[Changelog] #52329 Remove per-content source attribution metadata @anp-oai

[Changelog] #52160 Remove the patched zsh shell execution backend @jif-oai

[Changelog] #51650 Require hostname authorization before proxy DNS lookups @jif-oai

[Changelog] #51831 Add MXC sandbox integrity dependency and policy preparation @iceweasel-oai

[Changelog] #52661 Prevent brokered credential aliases from bypassing MITM hooks @viyatb-oai

[Changelog] #52682 Validate Windows sandbox accounts before password repair @zm-oai

[Changelog] #51841 Add a macOS Seatbelt backend for sandbox integrity @iceweasel-oai

[New Features] Open `/config` to search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429)

[New Features] Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)

[Changelog] #51794 Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock @celia-oai

[Changelog] #51812 Enable instant interrupts by default @pakrym-oai

[Changelog] #52250 Add opt-in Guardian trust for orchestrator connector identities @ankushg

[New Features] Configure a leader key in `/keymap`. The default is `Ctrl+X`, shortcut hints stay open until you choose or cancel, and voice mute moves to `F9`. (#52273)

[New Features] Restart a managed background server from `/daemon`. Codex warns about work the restart could interrupt, then reconnects automatically. (#53173)

[New Features] Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups. (#52245)

[New Features] Daybreak is enabled by default for eligible accounts. `codex exec` can also select it with an OpenAI API key when the server offers access. (#53701, #53717)

[Changelog] #51539 Add completion-aware realtime attachment and session-scoped detach @zahan-oai

[Changelog] #51547 Add a Windows MXC sandbox opt-out @iceweasel-oai

[Changelog] #51575 Expose package assembly helpers and support gzip DotSlash artifacts @bolinfest

[Changelog] #51734 Load persisted sender context for Guardian reviews @jif-oai

[Changelog] #51828 Add policy-based file contents integrity checks @iceweasel-oai

[Changelog] #51835 Enable code mode interruption by default @won-openai

[Changelog] #51843 Run sandbox integrity checks before commands and filesystem operations @iceweasel-oai

[Changelog] #51855 Add Bazel support to the Codex package build action @dkovalenko-oai

[Changelog] #51856 Build Bazel release artifacts alongside Cargo artifacts @dkovalenko-oai

[Changelog] #51868 Record tool registration metrics for each sampling request @akira-oai

[Changelog] #51884 Add experimental prediction forks that inherit parent context @liame-oai

[Changelog] #51930 Support model-specific function description prefixes @tz-openai

[Changelog] #52040 Add regression coverage for cancelled agent reloads @jif-oai

[Changelog] #52048 Cover instant interruption in steered-input persistence tests @jif-oai

[Changelog] #52061 Run Guardian conversation classifiers concurrently and preserve action order @felixxia-oai

[Changelog] #52065 Require assessment text in the Guardian parser @ioanbudea-OAI

[Changelog] #52119 Expose originating tool call metadata in command environments @leo-oai

[Changelog] #52164 Make environment context date and timezone configurable @surajs-oai

[Changelog] #52176 Show AWS GovCloud guidance at startup and remember acknowledgment @jackz100

[Changelog] #52182 Expose a verified sandbox launcher to local MCP servers @bolinfest

[Changelog] #52193 Enforce managed MXC requirements on Windows @iceweasel-oai

[Changelog] #52200 Allow plugin toggles while searching and preserve filters on refresh @fcoury-oai

[Changelog] #52223 Enforce application network policy for daemon updates @jackz100

[Changelog] #52241 Preserve subagent capabilities independently of forked history @anp-oai

[Changelog] #52245 Enable parallel execution for read-only tools @zamoshchin-openai

[Changelog] #52274 Add structured tracing for Guardian reviews and background scoring @ioanbudea-OAI

[Changelog] #52302 Add opt-in credential masking for proxied sandboxed sessions @winston-openai

[Changelog] #52337 Add durable thread read state with revision-checked updates @btraut-openai

[Changelog] #52350 Expose experimental durable thread read state in the app server @btraut-openai

[Changelog] #52363 Expand realtime v3 voice support @jacksonmoody-oai

[Changelog] #52395 Add experimental app-server thread read-state updates @btraut-openai

[Changelog] #52535 Add opt-in history prefix preservation for full agent forks @jif-oai

[Changelog] #52557 Forward clipboard copies to the terminal in Herdr sessions @fcoury-oai

[Changelog] #52568 Expose message board permissions and structured denials @jif-oai

[Changelog] #52621 Add template setup for local agent message boards @jif-oai

[Changelog] #52640 Count interrupted goal continuations toward the no-activity limit @etraut-openai

[Changelog] #52659 Add an opt-in feature for subagent model context defaults @hlevy-openai

[Changelog] #52686 Add opt-in retention for turn tool outputs @won-openai

[Changelog] #52689 Forward per-turn Cyber access programs to Guardian @daneschneider-oai

[Changelog] #52723 Add opt-in gRPC over stdio for the code-mode host @cconger

[Changelog] #52748 Make code-mode `exit()` stop the entire cell @cconger

[Changelog] #52990 Add a searchable `/config` preferences panel to the TUI @fcoury-oai

[Changelog] #53153 Show subagent navigation shortcuts in TUI help @etraut-openai

[Changelog] #53224 Support Windows clipboard text paste shortcuts in the TUI @etraut-openai

[Changelog] #53369 Allow turns when the agent message board is unavailable @jif-oai

[Changelog] #53389 Use cached login credentials for Guardian decisions @swastik-oai

[Changelog] #53400 Add explicit local board connections with fixed runtime access @jif-oai

[Changelog] #53429 Apply configuration toggles live and improve settings navigation @fcoury-oai

[Changelog] #53444 Suppress repeated turn diffs in `codex exec` human output @fcoury-oai

[Changelog] #53595 Add async compaction feature configuration @rka-oai

[Changelog] #53617 Allow hiding native tools while retaining the multi-agent V2 runtime @jif-oai

[Changelog] #53633 Add an environment API key fallback for Guardian Decisions @swastik-oai

[Changelog] #53670 Account for token usage from incomplete responses @jif-oai

[Changelog] #53693 Add keyboard selection support to the transcript view @fcoury-oai

[Changelog] #53701 Enable CLI Daybreak by default and enforce background-turn eligibility @julee-oai

[Changelog] #53717 Enable Cyber access programs for API-key sessions by default @julee-oai

[Changelog] #51595 Add thread ID exclusions to `thread/list` @btraut-openai

[Changelog] #51627 Stabilize Guardian snapshot prefixes by separating assistant context @jif-oai

[Changelog] #51690 Add a feature flag for Code Mode tool description ordering @swastik-oai

[Changelog] #51761 Reduce tool metadata cloning in the code-mode runtime @akira-oai

[Changelog] #51840 Add a bubblewrap backend for sandbox integrity checks @iceweasel-oai

[Changelog] #51842 Add a sandbox integrity runner with outcome and timing metrics @iceweasel-oai

[Changelog] #51865 Use readable plugin mentions without suppressing same-name skills @canvrno-oai

[Changelog] #51974 Log Windows sandbox availability and backend selection @iceweasel-oai

[Changelog] #52062 Add scenario coverage for worker context across idle eviction @jif-oai

[Changelog] #52177 Set a User-Agent for package archive downloads @bolinfest

[Changelog] #52183 Add optional descriptions to agent message board channels @jif-oai

[Changelog] #52195 Track source attribution for individual context parts @tz-openai

[Changelog] #52203 Expose Codex lifecycle status in iTerm2 sessions @fcoury-oai

[Changelog] #52220 Add configurable default plugin activation policy @stevenlee-oai

[Changelog] #52226 Include foreground activity in iTerm2 session status @fcoury-oai

[Changelog] #52270 Enable text selection in the fullscreen TUI footer @fcoury-oai

[Changelog] #52295 Emit one developer notice per incremental namespace update batch @akira-oai

[Changelog] #52304 Persist remote-control RPC preferences in managed daemon settings @etraut-openai

[Changelog] #52384 Notify subscribers when thread read state changes @btraut-openai

[Changelog] #52610 Align Linux sandbox names and docs with bubblewrap and seccomp @bolinfest

[Changelog] #52635 Skip background workspace routing reads without ChatGPT auth @joesavona

[Changelog] #52637 Add experimental thread item lookup by ID @btraut-openai

[Changelog] #52648 Limit daemon feature compatibility checks to explicit CLI overrides @etraut-openai

[Changelog] #52671 Add retention annotations to submitted tool outputs @won-openai

[Changelog] #52676 Refresh persisted capability roots from owner-provided configuration @teddywyly-oai

[Changelog] #52679 Add timeout-aware exec-server configuration reads @hlevy-openai

[Changelog] #52681 Reject reserved Serde JSON keys in code mode @cassirer-openai

[Changelog] #52724 Add observers for initial exec-server connection attempts @aaronl-openai

[Changelog] #52725 Report terminal program status with OSC 7501 @fcoury-oai

[Changelog] #52736 Allow model catalogs to override incremental tool notices @akira-oai

[Changelog] #52742 Add opt-in output token replay for OpenAI requests @pakrym-oai

[Changelog] #52756 Classify voice session failures and record terminal outcomes @bc-openai

[Changelog] #52778 Make pinned transcript prompts clickable @fcoury-oai

[Changelog] #53049 Add connection-bound reply handles for app-server requests @bc-openai

[Changelog] #53152 Allow selecting and copying TUI turn tips @etraut-openai

[Changelog] #53156 Simplify the custom terminal drawing API @bc-openai

[Changelog] #53436 Route TUI request replies to their originating connection and thread @bc-openai

[Changelog] #53443 Use local MSVC toolchains for native Windows Bazel tests @etraut-openai

[Changelog] #53453 Prefer the Windows clipboard and bound copy attempts on WSL @etraut-openai

[Changelog] #53614 Add infrastructure for speculative remote V2 compaction @rka-oai

[Changelog] #53620 Reuse background results for remote V2 compaction @rka-oai

[Changelog] #53631 Materialize the thread before testing a discovered daemon restart @jif-oai

[Changelog] #53657 Share hook configuration across cloned hook views @jif-oai

[Changelog] #53709 Separate MCP sandbox policy from launcher metadata @bolinfest

[Changelog] #51823 Share MCP binding tool metadata with prepared calls @owenlin0

[Changelog] #51850 Add Bazel release staging archives @dkovalenko-oai

[Changelog] #51857 Add an app-server prompt prefix compatibility test @jif-oai

[Changelog] #51890 Add the missing `mxc-sdk` UTF-8 resource patch for Bazel @iceweasel-oai

[Changelog] #52234 Support request IDs in exec-server WebSocket handshakes @mattj-openai

[Bug Fixes] Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)

[Bug Fixes] The network proxy now checks permission before a DNS lookup, rejects duplicate `Host` headers, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506)

[Bug Fixes] Return to an existing side conversation with `/side` after switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436)

[Bug Fixes] On Windows, `Ctrl+V` and `Shift+Insert` paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453)

[Changelog] #51602 Distinguish thread listing failures from exhausted history @btraut-openai

[Changelog] #51611 Signal abandonment of unanswered MCP elicitations @nicksteele-oai

[Changelog] #51786 Preserve sandbox overrides across execution requests @iceweasel-oai

[Changelog] #51908 Honor the user input setting for asynchronous questions @mandal-OAI

[Changelog] #52034 Preserve agent state when unloading idle multi-agent v2 children @jif-oai

[Changelog] #52215 Enforce application network policy in standalone MCP commands @lsingh-oai

[Changelog] #52228 Honor API-key feature gates in TUI Daybreak selection @julee-oai

[Changelog] #52235 Recover gRPC code-mode sessions after missing-session errors @surajs-oai

[Changelog] #52381 Preserve per-session routing for gRPC code mode @cassirer-openai

[Changelog] #52825 Report exec runtime resets before accepting further requests @JenZhao

[Changelog] #53150 Restore thread-owned permissions on cold resume @etraut-openai

[Changelog] #53438 Stop identifying Apple Terminal from `TERM_SESSION_ID` @etraut-openai

[Changelog] #53451 Treat incomplete responses as terminal errors @jif-oai

[Changelog] #53506 Reject duplicate Host headers in the network proxy @jfoo-oai

[Bug Fixes] Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)

[Bug Fixes] `codex exec` no longer prints the same file diff again after an unrelated command. (#53444)

[Changelog] #51556 Complete dynamic tool lifecycles on cancellation @mikelam-oai

[Changelog] #51642 Fix retained context handling for typed section content @jif-oai

[Changelog] #51651 Persist Guardian review failures for reports across restarts @jif-oai

[Changelog] #51683 Roll back stale Guardian reviews before reusing reviewer history @olliem-oai

[Changelog] #51704 Honor tool-description-first ordering in Code Mode @swastik-oai

[Changelog] #51710 Fix a discovery race in the external auth refresh test @jgershen-oai

[Changelog] #51755 Reuse MCP handler metadata for cache comparisons @owenlin0

[Changelog] #51775 Prevent recursive Tokio tracing in telemetry and SQLite logs @zbarsky-openai

[Changelog] #51808 Preserve diagnostic reasons for MCP user verification failures @berkdeniz-oai

[Changelog] #51822 Avoid sharing violations when repairing Windows runtime ACLs @johnl-oai

[Changelog] #51847 Preserve Cargo package names in Bazel Rust builds @dkovalenko-oai

[Changelog] #51848 Align Bazel release builds with Cargo and fix platform compatibility @dkovalenko-oai

[Changelog] #51866 Preserve line breaks and links in multiline async questions @pash-openai

[Changelog] #51872 Keep global app-server config independent of the launch directory @etraut-openai

[Changelog] #51892 Preserve tool call completeness when recorded arguments are truncated @ningyi-oai

[Changelog] #51895 Report specific reasons for WebSocket continuation failures @pakrym-oai

[Changelog] #51896 Preserve native errors in Windows sandbox ACL diagnostics @alishobeiri-oai

[Changelog] #51897 Use a dedicated matcher for network domain policies @rafael-oai

[Changelog] #51963 Attribute compaction analytics to the correct voice session @reia-oai

[Changelog] #52081 Fix idle cleanup for disconnected multi-agent v2 children @jif-oai

[Changelog] #52184 Preserve side conversations across thread navigation @etraut-openai

[Changelog] #52225 Fix config rebuild call in the Windows MXC preference test @virajrai-oai

[Changelog] #52268 Preserve large arguments in executed tool call metadata @ningyi-oai

[Changelog] #52273 Add configurable persistent leader shortcuts to the TUI @fcoury-oai

[Changelog] #52277 Preserve UTF-8 byte semantics in network domain matching @rafael-oai

[Changelog] #52278 Honor custom OTLP metrics exporters when analytics is disabled @jackz100

[Changelog] #52330 Clamp wrapped source ranges before remapping terminal hyperlinks @bc-openai

[Changelog] #52418 Avoid an extra blank quote line when pasting text with a trailing newline @bc-openai

[Changelog] #52591 Fix races in remote environment and session replacement tests @jif-oai

[Changelog] #52652 Bound local exec-server output draining after process exit @jif-oai

[Changelog] #52660 Handle completion events in either order in shell snapshot tests @jif-oai

[Changelog] #52685 Preserve code mode cancellation during output serialization @cassirer-openai

[Changelog] #52696 Fix marketplace path matching for Windows junctions @zm-oai

[Changelog] #52702 Retry bootstrap GETs through the system proxy after request failures @abhinav-oai

[Changelog] #52707 Migrate the Windows MXC sandbox to split MXC crates @iceweasel-oai

[Changelog] #52721 Explain session creation failures during server shutdown @etraut-openai

[Changelog] #52923 Stabilize the realtime steering timeline test @anp-oai

[Changelog] #52937 Retain client-marked tool outputs across compaction @won-openai

[Changelog] #52946 Keep agent command center rows stable across progress updates @fcoury-oai

[Changelog] #52952 Verify reset notification during code-mode host recovery @etraut-openai

[Changelog] #52964 Defer owned transcript redraws during raw paste bursts @etraut-openai

[Changelog] #52968 Keep startup modals protected when terminal input draining times out @etraut-openai

[Changelog] #53109 Handle broken pipes gracefully in plugin list output @fcoury-oai

[Changelog] #53148 Fix startup draft recovery for pending Vim Replace keys @etraut-openai

[Changelog] #53155 Keep remote app-server events deliverable during shutdown @etraut-openai

[Changelog] #53173 Allow restarting managed background servers from the TUI @etraut-openai

[Changelog] #53201 Keep agents navigation available after a thread is archived @etraut-openai

[Changelog] #53331 Finish remote exec cleanup when output streams remain open @jif-oai

[Changelog] #53339 Test final polling of remote processes with open output streams @jif-oai

[Changelog] #53393 Distinguish Guardian parent-compaction failure reasons @ioanbudea-OAI

[Changelog] #53419 Restore saved thread permissions during configuration loading @jif-oai

[Changelog] #53426 Preserve Windows runtime registration failure diagnostics @zm-oai

[Changelog] #53440 Preserve status line accents on 16-color terminals @etraut-openai

[Changelog] #53452 Close input admission while a turn finishes recording @etraut-openai

[Changelog] #53496 Preserve pending Effects toggles across save refreshes @fcoury-oai

[Changelog] #53556 Deduplicate TUI modifier handling and terminal color caching @bc-openai

[Changelog] #53622 Preserve remote exec output until it is collected @jif-oai

[Changelog] #53632 Stabilize write ordering in the shared message board scenario @jif-oai

[Changelog] #53654 Keep spawned children provisional until the spawn result returns @jif-oai

[Changelog] #53660 Extract shared multi-agent v2 thread spawning @jif-oai

[Changelog] #53668 Improve remote exec-server test startup diagnostics @jif-oai

[Changelog] #53672 Keep discovered Apps tools available during startup recovery @jif-oai

[Changelog] #53678 Preserve inherited context in prediction forks @keyz

[Changelog] #53689 Constrain API-key model access programs to server support @julee-oai

[Changelog] #53691 Account for replay caches in encrypted compaction budgets @ioanbudea-OAI

[Changelog] #53698 Interrupt and drain canceled classifier responses before socket reuse @felixxia-oai

[Changelog] #53699 Cancel Guardian V2 classifications that exceed the tool-call lag window @felixxia-oai

[Changelog] #53706 Preserve URLs and email addresses during external agent migration @jif-oai

[Changelog] #53723 Wire V2 capability discovery through exec-server RPC @TAFOYA-OAI

[Changelog] #51800 Remove duplicate field initializers in extension registry tests @anp-oai

[Changelog] #51849 Fix package smoke tests for Cargo and Bazel debug symbols @dkovalenko-oai

[Changelog] #51893 Record metrics for incremental tool updates @akira-oai

[Changelog] #52288 Remove duplicate field initializers from extension registry tests @anp-oai

[Changelog] #52299 Make Bazel release jobs advisory @anp-oai

[Changelog] #52959 Reduce stack usage in async TUI tests @jif-oai

[Changelog] #52967 Reuse and prewarm the WSL clipboard text reader @etraut-openai

[Changelog] #53424 Add regression coverage for network grants on cold thread resume @jif-oai

[Documentation] Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations. (#51768)

[Documentation] Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering. (#52610)

[Chores] Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs. (#52178)

[Changelog] #51652 Record telemetry for AGENTS.md changes made by apply_patch @jif-oai

[Changelog] #51678 Move Windows sandbox tests into a dedicated integration binary @jif-oai

[Changelog] #51689 Wait for helper completion in HTTP header cancellation tests @jif-oai

[Changelog] #51768 Expand OpenAI Docs migration guidance to the GPT-6 model family @kkahadze-oai

[Changelog] #51819 Migrate the MXC sandbox to the 1.0.0 SDK @iceweasel-oai

[Changelog] #52178 Strip symbols from source-built release package binaries @bolinfest

[Changelog] #52256 Normalize formatting in docs, web assets, and sample scripts @anp-oai

[Changelog] #52325 Track history initialization in Responses turn metadata @anp-oai

[Changelog] #52608 Upgrade `hyper` to 1.11.1 and test connection closure @jif-oai

[Changelog] #52629 Consolidate local message board storage helpers @jif-oai

[Changelog] #52674 Move the exec-server test fixture into shared test support @anp-oai

[Changelog] #52700 Update the exec-server stable compatibility baseline to Codex 0.162.1 @iceweasel-oai

[Changelog] #52972 Upgrade `rmcp` to `3.5.1` and harden lifecycle tests @alishobeiri-oai

[Changelog] #53358 Remove selected protocol, apply-patch, MCP, and TUI tests @vb-openai

[Changelog] #53382 Ignore the unsafe-libyaml advisory in dependency audits @swastik-oai

[Changelog] #53412 Isolate arg0 helper directories by operating system @jif-oai

[Changelog] #53485 Update `quinn-proto` to 0.11.18 @smurching-oai

[Changelog] #53606 Prepare compaction helpers for background requests @rka-oai

[Changelog] #53628 Record truncation metrics for accepted Guardian review inputs @ioanbudea-OAI

[Changelog] #53673 Publish Rust releases with the GitHub CLI @jif-oai