Codex CLI v0.169.0 Release Notes — What's New

New Features

The opt-in terminal workspace supports multiple side-chat tabs. Switch between them with the keyboard or mouse, and reopen saved local side chats after restarting Codex. (#59784, #60152, #60181)
Search older tasks from the agent command center by name, prompt preview, or working directory. (#60286)
Turn on Collapse turn details in the full-screen transcript to fold completed activity beneath each prompt while keeping answers visible and tool output searchable. (#60554, #60555, #60556, #60557)
Add or edit custom model providers from the terminal. With custom gateway onboarding enabled, you can create a provider during sign-in and use a device code for supported gateways over SSH or without a local browser. (#59779, #60009, #60186, #60486, #60662)
Press Ctrl+S in the terminal report editor to save a diagnostic ZIP locally, even when uploads are disabled. (#60542)
With the opt-in Cloud connection on macOS and Linux, send images, choose a model and reasoning effort, and archive or restore Cloud conversations from the terminal. (#59828, #60061, #60635, #60651)

Bug Fixes

codex exec keeps project configuration and MCP servers disabled in untrusted directories, even with --sandbox workspace-write. Use --trust with codex exec or codex review to explicitly save project trust. (#60041)
Yes, clear context and implement now hands the full approved plan to the fresh session and keeps the current session open if the handoff fails. (#60763)
Fixed Windows sandbox handling for quoted cmd.exe paths and for PowerShell sessions whose working directory has an unreadable parent. (#60624, #60647)
Pasted images on macOS retain their intended orientation and use native PNG or JPEG clipboard data when available. (#60455)
The terminal no longer stays busy waiting for MCP servers that a shared app server did not report. (#60280, #60622)
Interrupted turns now close cleanly, and delayed aborts or file approval cancellations no longer interrupt a later turn. (#59910, #60700)

Documentation

Updated the openai-docs skill to focus on Codex and ChatGPT Work questions and first-time API setup, with dedicated guidance for configuring Codex across a team. (#59944, #59949)
Documented how app-server clients can list models or authorize a gateway for a configured provider without changing the default provider. (#59776, #59819)

Chores

Updated bundled SQLite to 3.54 to pick up write-ahead log fixes. (#60432)
Plugin marketplace upgrades can reuse Git objects already on disk, reducing repeat downloads. (#60528)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.168.0...rust-v0.169.0

#59739 Add a sidebar chooser and floating workspace shortcut panels @fcoury-oai
#59743 Forward explicit cyber access programs with header authentication @jamy-OAI
#59745 Repair legacy Windows sandbox bin permissions for SYSTEM @zm-oai
#59746 Add typed Cloud user-message submission receipts @bc-openai
#59749 Use runtime authentication for OpenAI MCP and app requests @cooper-oai
#59750 Stop Noise relay recovery on rejected executor credentials @richardopenai
#59752 Configure the Opus Bazel patch and isolate auth tests @bkotsopoulos
#59754 Enforce host-required cyber access programs per thread @jamy-OAI
#59759 Update WebSocket dependency forks @charliemarsh-oai
#59767 Add sidebar tabs and nonblocking side-chat creation @fcoury-oai
#59768 Stop prefetching plugin discovery at app-server startup @zamoshchin-openai
#59769 Reuse decoded WebSocket event kinds in telemetry @charliemarsh-oai
#59770 Add shared service-tier support for host-owned agents @rhan-oai
#59772 Remove the legacy sandbox policy constructor @ioanbudea-OAI
#59774 Remove the legacy Seatbelt command wrapper @ioanbudea-OAI
#59776 Allow selecting a configured provider in model/list @abhinav-oai
#59778 Expose acceptance metadata and code-cell links in rollout traces @tz-openai
#59779 Add provider configuration editing to the TUI @alexsong-oai
#59780 Enable safe identical code folding for x86-64 musl releases @dkovalenko-oai
#59783 Tie gRPC code-mode connection lifetime to live sessions @frantic-openai
#59784 Support multiple side chats in the TUI sidebar @fcoury-oai
#59785 Decouple message lifecycle state from model-visible item IDs @euroelessar
#59787 Support credential export commands for gateway authentication @alexsong-oai
#59789 Render delegated thread messages as Markdown in the TUI @bc-openai
#59792 Centralize managed proxy preparation and sandbox routing @viyatb-oai
#59793 Support update-boundary paging across forked thread histories @owenlin0
#59794 Check extension budgets before model generation requests @rhan-oai
#59795 Support optional thread IDs in hosted file uploads @lt-oai
#59805 Pack relative relocations in x86-64 musl release builds @dkovalenko-oai
#59816 Retry gateway credential exports after unauthorized responses @alexsong-oai
#59817 Handle TUI message submission receipts and preserve uncertain drafts @bc-openai
#59819 Allow provider selection for gateway OAuth reads and logins @abhinav-oai
#59822 Add device-code authorization for gateway OAuth @smurching-oai
#59823 Bind runtime auth to the provider's selected credential source @cooper-oai
#59824 Enable resizing the sidebar chooser @fcoury-oai
#59826 Preserve client metadata through queued submissions @eddie-openai
#59828 Add a gated Cloud backend to the TUI @bc-openai
#59832 Add opt-in incremental tools for regular OpenAI Responses @akira-oai
#59842 Carry targeted moderation decisions on final-answer messages @psachdeva-oai
#59887 Remove incomplete prereleases after asset upload failures @jif-oai
#59891 Bound REPL provenance costs in elastic context preparation @jif-oai
#59893 Recompute the approval reviewer when switching models @jif-oai
#59902 Keep verified question/answer records whole under elastic budgets @jif-oai
#59903 Delete incomplete prereleases by release ID @jif-oai
#59905 Validate implicit API keys for Guardian Decisions @jif-oai
#59908 Avoid full image decoding for original-detail context estimates @jif-oai
#59910 Scope file change approval cancellation to the requesting turn @jif-oai
#59913 Resolve Guardian policy from the reviewed thread's catalog @jif-oai
#59914 Bind Guardian Decisions requests to their credential source @jif-oai
#59928 Improve sidebar chat selection and tab hover highlighting @fcoury-oai
#59933 Use permission profiles for protected-model startup downgrades @ioanbudea-OAI
#59944 Narrow openai-docs to product Q&A and first-time API setup @provencher-oai
#59949 Route broad Codex setup questions through self-knowledge guidance @vb-openai
#59954 Resolve skill display names in read and installations tools @jif-oai
#59955 Bump ignore to 0.4.30 @iceweasel-oai
#59958 Expose model metadata from each thread's catalog and settings @seanh-oai
#59960 Skip the network denial grace period when remote decisions drain @jif-oai
#59963 Normalize turn context permissions to a required profile @ioanbudea-OAI
#59969 Reduce contention in thread writer lock coordination @dkovalenko-oai
#59972 Fix Opus header installation with relative symlink inputs @bc-openai
#59973 Enable gRPC and host output truncation by default for Code Mode @seanh-oai
#59974 Test command completion before network denial grace expires @jif-oai
#59980 Test rejection of PNGs with readable dimensions but corrupt pixels @fjord-oai
#59983 Render typed prompts as Markdown in the TUI @bc-openai
#59987 Resolve startup models using thread creation options @seanh-oai
#59988 Add inherited styling to TUI display trees @joesavona
#59991 Preserve app invocation context across MCP tool refreshes @fahad-OAI
#59993 Add fixed read views for local message boards @felixxia-oai
#59994 Add read-only evidence retrieval tools for Guardian reviewers @felixxia-oai
#59995 Add subscription tools for Guardian reviewers @felixxia-oai

…