mirror of
https://github.com/openai/codex.git
synced 2026-09-04 15:08:45 +00:00
3fb81667d3
- Remote executors now use authenticated, end-to-end encrypted Noise relay channels. (#26242, #26245) - Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries. (#27819, #27995, #28032, #28122, #28165, #28367) - Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery also adds a created-by-me marketplace and auth-specific curated catalogs. (#27870, #27884, #27893, #28203, #28383) - App-server clients can list immediate child threads, correlate external-agent imports with detailed results, and read or redeem rate-limit reset credits. (#26662, #28008, #28143) - Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context. (#27917, #28405) - TUI input prompts can auto-resolve after inactivity, with a countdown that pauses on interaction. (#28235) ## Bug Fixes - Hook trust bypass now persists through `codex exec` thread start and resume, while blocking `PostToolUse` hooks correctly reject code-mode tool calls. (#26434, #28365) - Plugin capabilities now route consistently by authentication mode, deduplicate conflicting App/MCP declarations, and preserve remote marketplace ordering. (#27461, #27602, #27607, #27902, #27958, #28395) - Windows sandbox execution repairs stale credentials automatically and gives PowerShell commands more time before backgrounding. (#27086, #27944) - Idle exec-server relays remain connected, and steered user input immediately interrupts `wait_agent`. (#28286, #28341) - Bundled SQLite is pinned to a version containing the WAL-reset corruption fix. (#27992) - TLS connections now support P-521 certificate signatures commonly used by enterprise proxies. (#27706) ## Chores - Reduced latency and memory use in large, tool-heavy sessions by caching tool search and eliminating repeated request and history copies. (#27258, #27813, #28306, #28309, #28313, #28323, #28327) - Bounded prompt-image caching to 64 MiB and feedback uploads to eight related threads. (#28294, #28332) - Terminal resize reflow is now always enabled, ignoring obsolete disabled settings. (#27794) ## Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.140.0...rust-v0.141.0 - #28001 [codex] package Windows ARM64 on x64 @tamird - #28032 [codex] Carry exec-server cwd as PathUri @anp-oai - #27607 [codex] Dedupe plugin MCPs by app declaration name @felixxia-oai - #27992 [codex] Pin bundled SQLite to fixed WAL-reset version @gpeal - #28125 build: run buildifier from just fmt @anp-oai - #28120 bazel: add PowerShell to Wine test harness @anp-oai - #27819 path-uri: render native paths across platforms @anp-oai - #28122 [codex] exec-server honors remote environment cwd and shell @anp-oai - #26662 feat(app-server): filter threads by parent @btraut-openai - #27884 Add selected-plugin precedence and attribution to the MCP catalog @jif-oai - #27870 Discover stdio MCP servers from selected executor plugins @jif-oai - #28283 [codex] update multi-agent v2 prompts @jif-oai - #27602 [codex] Preserve plugin apps in connector listings @felixxia-oai - #27461 [codex] Skip plugin MCP OAuth for matching app routes @felixxia-oai - #27893 Activate selected executor plugin MCPs in app-server @jif-oai - #28332 [codex] Cap feedback upload subtrees @jif-oai - #27365 Represent dynamic tools with explicit namespaces internally @sayan-oai - #28333 skills: hide orchestrator skills with a local executor @jif-oai - #27756 [codex] simplify shell snapshot ownership @pakrym-oai - #27794 Remove terminal resize reflow flag gates @etraut-openai - #28286 chore: restore exec-server relay keepalives @jif-oai - #28164 [codex] simplify memory read metrics @pakrym-oai - #27371 Expose explicit dynamic tool namespaces in thread start @sayan-oai - #28309 linearize history output normalization @jif-oai - #28306 avoid cloning sampling request input @jif-oai - #28323 serialize websocket requests directly @jif-oai - #28313 avoid cloning websocket request history @jif-oai - #28344 [codex] remove stale PathExt import @pakrym-oai - #27059 [codex] Cover OTLP HTTP log and trace event export @richardopenai - #28327 reuse encoded Responses request bodies @jif-oai - #27995 [codex] preserve explicit environment cwd @pakrym-oai - #28285 guardian: isolate review context from skills and memories @jif-oai - #26702 TUI Plugin Sharing 2 - add remote plugin section plumbing @canvrno-oai - #28294 bound prompt image cache retention @jif-oai - #28257 Support staging OAuth client ID overrides @apanasenko-oai - #28341 core: let steer interrupt wait_agent @jif-oai - #28336 skills: cache orchestrator resources per thread @jif-oai - #28357 Extract shared Windows sandbox session runner @iceweasel-oai - #27706 Use aws-lc-rs for rustls crypto provider @malsamiri-oai - #28347 [codex] add path-types skill @anp-oai - #28235 Add request user input auto-resolution timer @shijie-oai - #28234 [mcp] Increase default tool timeout to 300 seconds @adaley-openai - #28008 [codex] Add external agent import result accounting @charlesgong-openai - #27944 recover stale Windows sandbox credentials @iceweasel-oai - #27086 Add Windows unified exec yield floor @iceweasel-oai - #28358 Add hidden Windows sandbox wrapper entrypoint @iceweasel-oai - #27258 core: cache the tool search handler per session @mchen-oai - #28143 feat(app-server): expose rate-limit reset credits @jayp-oai - #28355 feat(core): add metadata field to ResponseItem @owenlin0 - #28203 [codex] Add created-by-me remote plugin marketplace @ericning-o - #28365 Respect blocking PostToolUse hooks in code mode @abhinav-oai - #27813 [codex] Reuse Apps policy evaluation across MCP tool exposure @mzeng-openai - #28300 Deflake realtime handoff steering test @felixxia-oai - #28395 [codex] Preserve remote plugin directory order @jameswt-oai - #27955 [codex] retain resolved environments across turns @pakrym-oai - #27917 Add realtime speech append control @guinness-oai - #27093 [codex-analytics] Analytics Capture to File in Debug Builds @jameswt-oai - #26242 exec-server: add Noise relay transport @viyatb-oai - #28165 Use PathUri in filesystem permission paths for exec-server @anp-oai - #28415 [codex] Fix missing response item metadata in tests @adaley-openai - #27058 [codex] Add second-based OTEL duration histograms @richardopenai - #27902 [codex] Centralize plugin auth capability filtering @felixxia-oai - #28405 Add a toggle for realtime startup context @guinness-oai - #26434 Preserve hook trust bypass in codex exec threads @abhinav-oai - #26245 exec-server: default remote transport to Noise @viyatb-oai - #28383 [codex] Load API curated marketplace by auth @felixxia-oai - #27958 [codex] Make plugin details capability aware @felixxia-oai - #28367 Use ApiPathString in app-server filesystem permission paths @anp-oai - #28421 [codex] Bind shell snapshots to retained thread environments @pakrym-oai - #28429 [codex] Add interruptible sleep tool @pakrym-oai - #28441 [codex] Use expect in integration tests @pakrym-oai - #28163 [codex] Use local environment for user shell commands @pakrym-oai
Codex CLI is a coding agent from OpenAI that runs locally on your computer.
If you want Codex in your code editor (VS Code, Cursor, Windsurf), install in your IDE.
If you want the desktop app experience, run
codex app or visit the Codex App page.
If you are looking for the cloud-based agent from OpenAI, Codex Web, go to chatgpt.com/codex.
Quickstart
Installing and running Codex CLI
Run the following on Mac or Linux to install Codex CLI:
curl -fsSL https://chatgpt.com/codex/install.sh | sh
Run the following on Windows to install Codex CLI:
powershell -ExecutionPolicy ByPass -c "irm https://chatgpt.com/codex/install.ps1 | iex"
Codex CLI can also be installed via the following package managers:
# Install using npm
npm install -g @openai/codex
# Install using Homebrew
brew install --cask codex
Then simply run codex to get started.
You can also go to the latest GitHub Release and download the appropriate binary for your platform.
Each GitHub Release contains many executables, but in practice, you likely want one of these:
- macOS
- Apple Silicon/arm64:
codex-aarch64-apple-darwin.tar.gz - x86_64 (older Mac hardware):
codex-x86_64-apple-darwin.tar.gz
- Apple Silicon/arm64:
- Linux
- x86_64:
codex-x86_64-unknown-linux-musl.tar.gz - arm64:
codex-aarch64-unknown-linux-musl.tar.gz
- x86_64:
Each archive contains a single entry with the platform baked into the name (e.g., codex-x86_64-unknown-linux-musl), so you likely want to rename it to codex after extracting it.
Using Codex with your ChatGPT plan
Run codex and select Sign in with ChatGPT. We recommend signing into your ChatGPT account to use Codex as part of your Plus, Pro, Business, Edu, or Enterprise plan. Learn more about what's included in your ChatGPT plan.
You can also use Codex with an API key, but this requires additional setup.
Docs
This repository is licensed under the Apache-2.0 License.