Codex 0.143.0: Remote plugins by default and flawless system proxy routing

Release notes

FEATURE

Remote plugins by default and flawless system proxy routing

Bringing in outside help is easier than ever. The system now enables remote plugins by default, featuring a much richer catalog that clearly shows both remote and local version differences, plus it now supports pulling directly from the npm marketplace. Best of all, if you're working behind a corporate firewall, all authentication and API network traffic will now seamlessly route through your macOS and Windows system proxies—including complex PAC and WPAD auto-configurations. Like international online shopping finally becoming effortless: the product catalogs are gorgeous and clearly label exactly where things come from, and if you're ordering from the office, the packages magically know how to navigate the company's strict mailroom and security checkpoints without ever getting stuck.

FEATURE

Welcome the GPT-5.6 family and powerful new debugging tools

Amazon Bedrock users can now select the GPT-5.6 family (Sol, Terra, and Luna) and use their absolute maximum (max) reasoning effort. For developers, the app-server client has gained microscope-level debugging tools: you can now inspect underlying environments, list out all descendant thread branches, and even fork your conversation history straight from a specific past turn to test different outcomes. Additionally, there's a new codex remote-control pair command that lets you manually generate pairing codes directly from a running daemon. It's like hiring a squad of brilliant geniuses who can run at 100% brain capacity; while simultaneously being handed a magical pocket watch that lets you pause meetings, peek at everyone's notes, or branch off an alternate universe from something said ten minutes ago just to see what would happen—plus a trusty backup skeleton key for manual remote unlocking.

FEATURE

Automated tool search and patched underlying security flaws

When calling MCP (the protocol for external tools), the AI now defaults to searching for the right tool by keyword; additionally, MCP servers hosted by ChatGPT can now explicitly specify session-specific authentication. We've also fortified the underlying defenses, upgrading core packages like OpenSSL, Hono, fast-uri, and quick-xml to immediately patch recently disclosed security vulnerabilities. For developers, the team thoughtfully added documentation explaining how UUID7 IDs work for threads and turns, along with recommended workflows for testing remote execution. Like a Swiss Army knife that automatically pops out the correct blade for the job, while the manufacturer tightened a few loose screws on the handle to prevent accidents, and tossed in a detailed maintenance manual to ensure it stays sharp and safe.

BUGFIX

Fixed Windows terminal inputs and smoothed out disconnect hiccups

If you're using a Windows terminal (ConPTY), line endings and the backspace key will finally stop acting weird. Cancelled "safety prompts" will no longer stubbornly stick to your screen, falsely making the system look like it's busy stalling out. When a remote server drops offline temporarily, the system now recovers much more gracefully instead of panic-retrying and blowing up the token refresh limits; and when the system shuts down, any trailing real-time conversation text that hasn't finished printing will now be properly saved instead of vanishing into thin air. Furthermore, incremental WebSocket requests are now much more reliable because the system smartly ignores irrelevant metadata during comparisons; and the installer is now clever enough to reuse release metadata, so it stops getting rate-limited and blocked by GitHub. Like a mechanic who finally unstuck your jammed backspace key, peeled the obsolete warning stickers off your monitor, stopped your router from panic-beeping during a lag spike, and made sure your very last sentence was safely saved before your computer powered down.

Original changelog

Original changelogRemote plugins by default and flawless system proxy routing

Remote plugins are now enabled by default, with richer catalog rows, npm marketplace sources, and visible remote/local versions. (#30297, #26705, #29375, #30981)
Codex can route authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations. (#26708, #26709, #31335)

Original changelogWelcome the GPT-5.6 family and powerful new debugging tools

Added Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models, with first-class support for `max` reasoning effort. (#30285, #30467)
App-server clients can inspect environments, list descendant threads, and fork history through a specific turn. (#30291, #29591, #30277)
Added `codex remote-control pair` for generating manual pairing codes from a running daemon. (#29913)

Original changelogAutomated tool search and patched underlying security flaws

MCP tools now use tool search by default, and ChatGPT-hosted MCP servers can explicitly use session authentication. (#29486, #29733)
Updated OpenSSL, Hono, fast-uri, quick-xml, and crossbeam-epoch to address security advisories. (#29487, #29650, #30941, #31308)
Documented UUID7 thread and turn IDs, plus recommended remote-executor integration-test workflows. (#27714, #29790)

Original changelogFixed Windows terminal inputs and smoothed out disconnect hiccups

Fixed Windows ConPTY input handling for line endings and backspace, plus sandbox credential retry edge cases. (#29734, #29624, #29637)
Fixed stale TUI safety prompts and cancelled reviews that could leave MCP startup appearing busy. (#30490, #31189)
Improved recovery when exec servers are temporarily offline and prevented remote-control token refresh retry storms. (#30098, #30201)
Preserved trailing realtime transcript text and terminal rollout events during shutdown. (#29918, #30144)
Improved incremental WebSocket request success by ignoring response metadata during comparisons. (#30770)
Reduced installer failures from GitHub API rate limits by reusing release metadata. (#31056)