Updates

2026-10-23 · Codex CLI 0.163.0

Compared stable 0.163.0 (2026-10-15) with Developer Commands. npm latest=0.163.0 and alpha=0.164.0-alpha.12. Alpha changes are excluded from stable usage guidance.

• Settings and input: search /config, apply supported settings immediately, and check which need a restart. Follow-ups sent during a response now steer it immediately by default. Interrupting a turn also stops active Code Mode cells and nested tool calls.
• Shortcuts and server: /keymap defaults to a Ctrl+X leader with hints retained until selection or cancellation. Voice mute moved to F9. /daemon can restart a managed background server, warns about interrupted work, and reconnects automatically.
• Permissions and Daybreak: resume restores saved permissions and network approvals while respecting explicit overrides and current managed policy. Daybreak is enabled by default for eligible accounts, superseding the 0.161.0 opt-in guidance. API-key authenticated codex exec can select a program when the server provides access.
• Execution and recovery: independent read-only tools, including skill, memory, and conversation-history lookups, can run in parallel. /side returns to an existing side chat after navigation; pending answers return to the originating thread. Windows text paste, WSL clipboard timeouts, lingering output pipes, and collection of final remote output were fixed.
• Compatibility: patched zsh is no longer bundled; retired shell flags produce migration guidance. Linux sandbox documentation now describes bubblewrap filesystem isolation and seccomp filtering. The proxy checks authorization before DNS and blocks duplicate Host headers and credential-alias inspection bypasses.
• Reference audit: the slash table grows from 50 to 57 rows. /agents (server command center) is separate from /subagents (child thread). /tui, /export, /recap, /cd, /pwd (/cwd), /worktree, /daemon, and /warnings are listed. /agent, /personality, and /sandbox-add-read-dir are absent; their old anchors remain with explicit status. CLI overview grows from 27 to 29 rows, adding codex agents and codex queue. Global/exec option changes and the Linux sandbox table were updated. /config and /voice remain release-tracked.
• GPT-5.5 retirement completed: it left ChatGPT-authenticated Codex at 19:00 UTC on 2026-10-14. Update saved configuration, custom agents, scheduled tasks, and scripts to an available replacement such as GPT-6.1 Sol (gpt-6.1-sol). The OpenAI API and API-key authenticated Codex are unaffected.

Sources: 0.163.0 release, Developer Commands, Official changelog, Models, npm dist-tags.

October 10, 2026 release refresh

Updated for Codex CLI 0.162.1 (October 9), covering the stable releases from 0.161.0 through 0.162.1. npm latest=0.162.1 and alpha=0.163.0-alpha.5 were checked on October 10, 2026 KST. The new settings, flags, and commands in these releases are confirmed from release notes and pull-request descriptions and are not in the official doc tables yet.

• Models and Bedrock: GPT-6.1 Sol remains the bundled default (since 0.159.1), and the 0.161.0 release notes restate it as the default in the bundled and Amazon Bedrock catalogs. From 0.161.0, Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models, and Bedrock Mantle accepts AWS GovCloud regions. The 2026-10-14 GPT-5.5 retirement from ChatGPT-sign-in Codex is unchanged. The official models page lists Ultrafast for GPT-6.1 Sol on Pro $500 and eligible Enterprise and Edu plans.
• Daybreak and Cyber access: Daybreak in the CLI is opt-in (0.161.0). Unless it is enabled with --enable cli_daybreak or features.cli_daybreak = true, its controls and indicators are hidden, /daybreak is unavailable, and automatic Cyber routing is omitted, even for saved Daybreak threads. codex exec --cyber-access-program and the TypeScript SDK's cyberAccessProgram option select a Cyber access program per turn.
• Permissions and sandbox: approved filesystem escalation can grant broader write access while preserving denied reads and network restrictions. Background tasks keep their originating turn's permissions, and explicit launch permissions survive terminal reconnects and new sessions (0.161.0). 0.162.0 fixes Linux sandbox startup with multiple denied files and keeps ripgrep configuration from weakening deny-glob masks.
• TUI and input: /mcp login <name> signs in to an MCP server from an active session, and voice conversations let you choose the microphone, speaker, and microphone input channels (0.161.0). /copy navigates and copies transcript blocks, Ctrl+Insert copies selections, tui.mouse_scroll_speed tunes mouse-wheel scrolling, and p pins tasks in the agent Command Center (0.162.0).
• Configuration and install: custom Responses-compatible model providers can configure live web access and remote compaction capabilities, and Windows releases publish a signed PowerShell installer (0.162.0). 0.162.1 fixes a TUI crash on multi-line asynchronous questions and startup failures caused by differences between a running background server's feature settings and CLI defaults.

Sources: GitHub releases rust-v0.161.0, rust-v0.162.0, and rust-v0.162.1; Models; npm dist-tags. The official changelog was restructured into a combined ChatGPT and Codex changelog that no longer lists Codex CLI version numbers, so CLI versions are tracked through GitHub releases and npm.

Updated: index, models, config, governance, setup, exec, and verification (both locales where the chapter covers the topic), plus both locales of the Codex Command Master.

October 7, 2026 release refresh

Updated for Codex CLI 0.160.1 (October 5), covering the stable releases from 0.158.0 through 0.160.1. npm latest=0.160.1 and alpha=0.162.0-alpha.18 were checked on October 7, 2026 KST.

• GPT-6.1 Sol (2026-09-29): gpt-6.1-sol offers near-Astra performance at a lower cost. From CLI 0.159.1 it is the default in the bundled catalog and in the Bedrock Mantle and Runtime catalogs, so a session with an unset model now uses GPT-6.1 Sol instead of GPT-6 Astra. API pricing per 1M is $2 input, $0.10 cached input, and $10 output, with a 1,050,000-token context. Enterprise and Edu administrators must enable it first, and Free and Go are not included at launch.
• Retirements: the 2026-10-14 GPT-5.5 retirement from ChatGPT-sign-in Codex is unchanged. The official retirement notice still names GPT-6 Sol as the replacement, and GPT-6 Sol, GPT-6 Luna, and the GPT-5.6 family remain selectable. GPT-5.4 left the bundled catalogs (0.158.0).
• Input and TUI: tui.copy_on_select and tui.right_click_paste control copy-on-select and right-click paste in fullscreen (0.158.0). The opt-in instant_interrupt feature flag delivers new input during a model response or a long code-mode call (0.159.0). Automatic follow-up prompt suggestions, the tui.prompt_suggestions setting, and the bundled plugin-creator skill were removed (0.159.0).
• Approvals and sandbox: terminal input approval is on by default for commands running with elevated permissions (0.158.0). .aws directories under writable roots are protected by default, and approved commands keep explicit filesystem denials (0.159.0). Sessions outside a project start with workspace default permissions when policy permits and restore saved permissions on resume (0.160.0). Opt-in Guardian review capabilities can retrieve earlier user instructions and use agent-handoff context (0.160.0).
• MCP and connections: codex mcp add --oauth-client-secret connects MCP servers that require a pre-registered OAuth client secret, and direct exec-server WebSocket connections can be protected with bearer tokens (0.158.0).

Sources: official changelog, Models, GPT-6.1 Sol, npm dist-tags.

Updated: index, models, config, governance, setup, exec, and verification (both locales where the chapter covers the topic), plus both locales of the Codex Command Master.

September 26, 2026 release refresh

Updated for Codex CLI 0.157.1 (September 26), covering the stable releases from 0.155.0 through 0.157.1. npm latest=0.157.1 and alpha=0.159.0-alpha.4 were checked on September 26, 2026 KST.

• GPT-6 Sol and Luna (2026-09-22): gpt-6-sol targets complex coding and agentic work, gpt-6-luna focused high-volume tasks. They appear in the picker from CLI 0.156.1, and 0.157.0 adds Bedrock support and migration prompts for older models. API pricing per 1M is $2 / $10 for Sol and $0.10 / $0.50 for Luna, both with a 1,050,000-token context. Enterprise and Edu administrators must enable them first. GPT-6 Astra remains the bundled default.
• Retirements: GPT-5.5 retires from ChatGPT-sign-in Codex on 2026-10-14 (the API is unaffected); move paid plans to GPT-6 Sol and Free/Go to GPT-6 Luna. GPT-5.3-Codex-Spark was deprecated on 2026-09-14, and GPT-5.6 Sol, Terra, and Luna stay available during the rollout.
• Sessions and the background server: worktree support is on by default (0.156.0), and the agents overview can hide, archive, and delete tasks (0.155.0). From 0.157.0, eligible interactive sessions start the local background server automatically; bypass it with --no-daemon and update it with /daemon.
• TUI: /voice conversations moved from experimental (0.155.0) to on by default (0.156.0, F8). /tui chooses the fullscreen UI, and fullscreen transcripts are default from 0.157.0. /usage becomes an analytics dashboard, with six new themes and Mermaid and equation rendering. Personality selection left the TUI, and friendly/pragmatic no longer change style.
• Security and network: Touch ID verification for MCP requests (0.155.0), sandbox isolation fixes across WSL, Windows, Linux, and macOS (0.155.0–0.156.0), and network restrictions enforced across redirects and ongoing HTTP/WebSocket traffic (0.157.0). From 0.155.1, new local TUI sessions leave reasoning summaries off by default.

Sources: official changelog, Models, GPT-6 Sol, GPT-6 Luna, npm dist-tags.

Updated: index, models, config, governance, setup, exec, mcp, thread-lifecycle, slash-commands, and verification (both locales where the chapter covers the topic). Old developers.openai.com/codex/* links were moved to their learn.chatgpt.com targets after checking each redirect.

September 12, 2026 release refresh

Updated for Codex CLI 0.154.0 (September 9). npm latest=0.154.0 and alpha=0.155.0-alpha.3.10 were checked on September 12, 2026 KST.

• Sessions: experimental --worktree and /worktree create isolated checkouts for new or forked sessions, with browse/resume support. Inline questions accept choices or free text while work continues.
• Extensions and approvals: existing sessions refresh installed plugin tools, skills, and hooks. Failed MCP OAuth refreshes surface sign-in without replaying rejected calls. Resume/fork preserve permissions, and new user instructions invalidate stale automatic approvals.
• Compatibility: codex mcp-server and the standalone codex-mcp-server were removed. External MCP connections through codex mcp remain supported. Evaluate migration to experimental codex app-server; the official documentation does not support production workloads on that command.
• Editing: /copy preserves formatting and supports status output; Vim gains R replace mode. Windows gains a shared background server and daemon management.

Sources: official changelog, npm dist-tags.

Updated: both locales of the index, setup, verification, and relevant command/operations chapters. Entries below retain their historical verification dates.

2026-09-05

• Raised the baseline to npm latest=0.153.4 and alpha=0.154.0-alpha.3, cross-checked against the local CLI at 0.153.4.
• Added GPT-6 Astra (gpt-6-astra, released 2026-09-03): CLI 0.153.0 minimum, bundled default from 0.153.4, 1,050,000-token context, 128K output, $10 / $1 cached / $50 per 1M, and an April 30, 2026 knowledge cutoff.
• Recorded how Astra landed across 0.153.0 through 0.153.4, including the Bedrock Mantle and Runtime pickers, and its Critical cybersecurity classification with the approval and sandbox review it implies.
• Documented the 0.152.0 default change that disables the planning tool, plus tui.auto_recap, tui.disable_paste_burst, features.context_management.experimental_mode, MCP output_token_limit, relaxed MCP naming, the optional-MCP discovery grace period, and longer app-server shell timeouts.
• Added the 0.153.0 Guardian changes: review history survives compaction, restarts, and forks, and Full Access skips Guardian reviews for confirmation-only actions.
• Marked the ChatGPT-sign-in retirement of GPT-5.4 and GPT-5.4 mini as completed on 2026-08-31.

2026-08-28

• Raised the baseline to npm latest=0.150.1 and alpha=0.151.0-alpha.6, including image-aware remote compaction.
• Added codex agents, codex queue, task mentions, automatic titles, working-directory commands, and the /copy picker.
• Added clickable links, permission/Vim improvements, Interrupt hooks, and expanded codex doctor coverage.
• Added untrusted-project instruction isolation, persistent managed deny-read, credential redaction, MCP/Windows/shutdown/Bedrock fixes, and the mcp-server to app-server transition.

2026-08-20

• Raised the baseline to npm latest=0.148.0 and alpha=0.149.0-alpha.4, covering /export, codex exec fork, resume-picker archive/restore, startup prompt drafting, and estimated credits/cost.
• Added portable Agent Plugins, --approve-for-me, Cursor skill/conversation import, opt-in MCP 2026-07-28, the built-in Amazon Bedrock Runtime provider, and async/MCP hooks.
• Migrated model guidance to GPT-5.6 Sol + medium, Terra/Luna task roles, Ultra versus Max, and the 2026-08-31 ChatGPT-sign-in retirement of GPT-5.4/mini.
• Removed codex exec --full-auto from current guidance and added secret redaction, OAuth/reconnect, plugin isolation, fail-closed network/sandbox, and resume-state fixes.

2026-08-03

• Re-checked official releases, the local CLI, and npm: stable/latest remains Codex CLI 0.146.0; npm alpha remains 0.147.0-alpha.4.
• Synchronized the current official command inventory for /copy, /rename, /pets (/pet), Windows-only /setup-default-sandbox, and /app.
• Added the documented /subagents alias for /agent and /btw alias for /side.
• Updated the cover, slash-command chapter, verification report, and both Command Master locales.

2026-08-01

• Updated the stable/latest baseline to Codex CLI 0.146.0; npm reports latest=0.146.0 and alpha=0.147.0-alpha.4.
• Added 0.145.0 paginated history, expanded Cursor/Claude Code import, Bedrock login, audio, stabilized Multi-agent V2, and safe visualization-link guidance.
• Added 0.146.0 named threads, pins, side switching, paginated forks, Agent Plugins/marketplaces, remote Code Mode hosts, custom-provider web search, executor skills, broader proxy coverage, and MCP/App refresh guidance.
• Added replay/import/fork preservation and terminal/Windows/skill-catalog reliability checks.

2026-07-10

• Updated the stable/latest baseline to Codex CLI 0.144.0; npm reports latest=0.144.0 and alpha=0.145.0-alpha.1.
• Added 0.143.0 guidance for default-enabled remote plugins, npm marketplace sources, system proxies, codex remote-control pair, default MCP tool search/session auth, Bedrock GPT-5.6 variants with max effort, and app-server environment/thread APIs.
• Added 0.144.0 guidance for selectable reset credits, app approval writes, default interactive MCP authentication, runtime-provided app-server auth, pnpm install detection, and Ultra concurrency warnings.
• Added reliability and security notes for retired-model compaction recovery, Windows sandbox deletion/runtime access, terminal-control sanitization, connector auth refresh, proxy-aware Responses WebSockets, and review improvements.

2026-07-01

• Refreshed the English handbook stable/latest baseline to Codex CLI 0.142.5; npm latest is 0.142.5 and alpha is 0.143.0-alpha.31.
• Treated 0.142.5 as a security/privacy bug-fix patch that prevents full Responses WebSocket request payloads from being written to trace logs; the feature operating baseline remains 0.142.0.
• Updated setup, security, verification, and cover metadata to match the Korean handbook.

2026-06-25

• Refreshed the English handbook baseline to Codex CLI 0.142.0; npm latest is 0.142.0 and alpha is 0.143.0-alpha.14, so team guidance remains on stable/latest.
• Added the 0.140.0~0.142.0 operating deltas: /delete, /import, /usage, codex delete <SESSION>, app-server thread/delete, Claude Code import, plugin organization, rollout token budgets, indexed web search, scheduled UTC reminders/current-time handling, multi-agent delegation modes, and app-server/exec/MCP disconnect recovery.
• Clarified that deletion policy is separate from archive policy, /import requires diff/config review, and /usage belongs in long /goal and multi-agent runbooks.
• Kept detailed command pages in the command-master book while this handbook carries the team-operations summary.

2026-06-13

• Fixed locale-leaking navigation: corrected the cover-page contents Card links from bare /books/codex-advanced/... to locale-prefixed /en/books/codex-advanced/..., so chapter navigation no longer redirects English readers into the Korean edition.
• Review pass: confirmed chapter content, model policy, and CLI baseline were unchanged in this round; the update was limited to the link fix.

2026-06-12

• Refreshed the English handbook baseline to Codex CLI 0.139.0.
• Added current operational deltas from CLI 0.138.0~0.139.0: /app Desktop handoff, code-mode standalone web search, MCP schema preservation for oneOf/allOf, plugin JSON automation, app-server account token usage, ChatGPT v2 personal access tokens, restored send-message-v2 debug command, image file-path exposure and referenced-path image edits, reasoning effort fallback shortcuts, sandbox diagnostics, resume/fork --last prompt handling, scoped MCP startup warnings, cloud-managed requirement preservation, and Cloud exec provider notes.
• Re-checked the model baseline: gpt-5.5 remains the default recommendation, gpt-5.2 and gpt-5.3-codex remain deprecated for ChatGPT sign-in, and Codex Cloud model selection remains separate.
• Kept detailed release tables in the Korean source while this English edition carries compact parity updates.

2026-06-08

• Refreshed the English handbook baseline to Codex CLI 0.137.0.
• Added the current operational deltas from CLI 0.133.0~0.137.0: goal-by-default, file-based --profile migration, named permission profiles, /archive, codex app-server --stdio, cloud-managed config bundles, remote-control grants, codex plugin list --json, and Multi-agent v2 runtime metadata.
• Kept this English edition as a compact parity summary while the Korean edition carries the detailed chapter-level changelog.

2026-05-13

• Published the English edition of the Advanced Codex Usage handbook.
• Added chapters for setup, config, memories, approvals, security, workflows, MCP, models, and governance.
• Aligned the handbook with the operating style used by the English handbook collection.

Update Policy

Update this handbook when Codex configuration, permissions, supported interfaces, model policy, MCP capabilities, or team rollout guidance changes materially.