Skip to content
Back

OpenAICodex CLI

Codex CLI 0.158.0

5 new6 fixes

AI summary

Written by AI from the official notes. Check them for exact details.

Codex CLI 0.158.0 introduces new features for improved usability and security, along with several bug fixes.

  • Configure copy-on-select and right-click paste in fullscreen TUI.
  • Connect to MCP servers with OAuth client secrets.
  • Secure WebSocket connections with bearer tokens.
  • Request transparent backgrounds for image generation and editing.
  • Terminal input approval is now default for elevated commands.

Why it matters: Developers using Codex CLI should care for enhanced functionality and improved security measures.

Official notes on developers.openai.com

Full release notes11 changes

New Features

  • Configure copy-on-select and right-click paste in the fullscreen TUI. Copied transcript selections now preserve Markdown formatting.
  • Connect to MCP servers that require pre-registered OAuth client secrets, including through codex mcp add --oauth-client-secret.
  • Secure direct exec-server WebSocket connections with bearer tokens, including connections configured through app-server.
  • Image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images.
  • Terminal input approval is enabled by default for commands running with elevated permissions; runtime-only grants no longer cause unnecessary reviews.

Bug Fixes

  • Fixed Windows sandbox failures involving ordinary Windows 10 paths, rejected stored credentials, and large permission policies.
  • Fixed Linux sandbox startup with nested writable roots and preserved Git metadata protections across writable roots on Linux and macOS.
  • macOS patch operations now recognize system path aliases covered by existing permissions, avoiding unnecessary approval prompts.
  • Approval reviews now retry when new user input arrives, so a status question does not automatically abort a pending action.
  • Mermaid flowcharts now render quoted labels and ampersands; unsupported diagrams explain why they fall back to source.
  • Command completion events now include early output and report process-launch failures to clients.