Experimental Voice Conversations Now Live with Real-Time Transcripts and Microphone Controls
Want to explain your requirements to the AI directly with your voice instead of constantly typing on a keyboard? Codex has introduced experimental /voice conversations on supported builds.
You only need to type the /experimental command in a conversation to open the experimental features list and enable this mode. After entering a voice conversation, the terminal screen simultaneously displays live transcripts alongside dedicated microphone controls to toggle audio capture states, keeping spoken communication and written records in sync.
FEATURE
Status Row Displays Live Reasoning Summaries with Completion Timestamps
You no longer need to stare at a blank screen while waiting for the AI to reason about code architecture. The terminal UI status row now displays live reasoning summaries in real time, clearly showing the model's current thinking steps. Once a turn completes successfully, the screen also proactively displays a completion timestamp.
With this improvement, you can stay informed about ongoing computation progress and exact completion times.
FEATURE
Agents Overview Adds Task Hiding, Archiving, and Deletion with Worktree Ownership and Safe Cleanup
Managing multiple background agents and parallel branches is now much more organized. The agents overview page now supports hiding, archiving, and deleting tasks, making it easy to organize completed items or tasks you no longer need to track. In addition, the system includes worktree ownership details and supports confirmed deletion of clean managed worktrees without lingering modifications.
This keeps parallel branches cleaner and safer when maintaining large projects.
FEATURE
MCP Supports Touch ID on Mac with Reconnect Guidance for Expired OAuth Credentials
Security verification is now faster and more streamlined when connecting external tools via the command line on macOS. On supported Mac models, local terminal UI sessions now support Touch ID verification for MCP (Model Context Protocol) operation requests. Meanwhile, when OAuth credentials on external MCP servers expire, the system accurately reports the error state. If token refresh fails, the interface proactively provides clear reconnection guidance to walk you through login verification.
FEATURE
Daemon Supports Configurable Update Schedules with Thread and Goal Recovery After Restarts
Background servers now offer more flexible updates and recovery resilience. You can configure automatic update schedules for the daemon or run codex app-server daemon update at any time to manually check and apply updates. Furthermore, even if the daemon restarts in the background, saved threads and active goals recover automatically without losing workflow context.
FEATURE
Amazon Bedrock Supports Command-Based AWS Credentials with Caching and Auto-Refresh
Cloud credential management is now more automated when invoking models via Amazon Bedrock. The system can now execute configured custom commands directly to obtain AWS credentials and cache them for subsequent use. When credentials near expiration, background processes automatically refresh them based on their lifespan and initiate recovery procedures if authentication anomalies occur.
This eliminates the hassle of manually updating keys frequently.
BUGFIX
Accepted Prompts Preserved on Compaction Failures with Fixes for tmux Resizes and History Viewports
Text and screen states now remain stable during long conversations or frequent window switching. Even if history compaction fails before a turn begins, the system completely preserves accepted prompts to prevent lost input. Additionally, this update fixes missed tmux resize events, transcript viewport restoration issues, and stale history appearing after switching between threads.
FEATURE
Automatic Approval Reviews Preserve Full Actions and Evidence with Retry Support and Clarified Risk Alerts
Automated review of elevated permissions is now more reliable and fault-tolerant. Automatic approval reviews preserve complete action steps and authorization evidence more reliably during evaluation, providing a solid audit trail. The review process automatically retries upon transient network or server failures, while clearly distinguishing review execution failures from unsafe-action findings to avoid misclassifying system anomalies as security threats.
FEATURE
Account Switching Invalidates Previous Sessions While Clearing Connection Caches and Model Catalogs
Switching between user accounts on the same machine now completely clears sensitive connections and resources from the previous identity. Once account switching completes, the system immediately invalidates all remote-control sessions belonging to the prior identity and clears cached WebSocket connection state and model catalogs, ensuring complete isolation of permissions and data between accounts.
FEATURE
Blocks WSL Sandbox Escapes and Hardens Shell Snapshots Against Credential Leaks
Security safeguards are further enhanced when running scripts or commands in restricted environments. Codex successfully blocks escapes from restricted WSL sandboxes that attempt to launch Windows processes. Meanwhile, the system hardens brokered shell snapshots to prevent confidential credentials from leaking through environment snapshots.
This gives you greater peace of mind when testing untrusted code in isolated environments.
FEATURE
Python SDK and Runtime Align with Stable CLI Releases with Matching Versions and Pre-Validated Assets
Package versions and core tools now stay closely synchronized when invoking Codex services via Python. Publishing workflows for the Python SDK and runtime packages are now fully aligned with stable CLI releases, using matching version numbers across both. Before SDK publication, the system rigorously verifies required runtime assets to ensure a complete and ready environment.
This effectively prevents mismatched versions or missing asset issues.
Original changelog
Original changelogExperimental Voice Conversations Now Live with Real-Time Transcripts and Microphone Controls
Added experimental `/voice` conversations with live transcripts and microphone controls on supported builds, enabled through `/experimental`. (#43581, #43651, #44331)
Original changelogStatus Row Displays Live Reasoning Summaries with Completion Timestamps
The TUI now shows live reasoning summaries in the status row and completion timestamps after successful turns. (#43558, #43921)
Original changelogAgents Overview Adds Task Hiding, Archiving, and Deletion with Worktree Ownership and Safe Cleanup
Added task hiding, archiving, and deletion in the agents overview, plus worktree ownership details and confirmed deletion of clean managed worktrees. (#43942, #44424, #44433)
Original changelogMCP Supports Touch ID on Mac with Reconnect Guidance for Expired OAuth Credentials
Added Touch ID verification for MCP requests in local TUI sessions on supported Macs. (#43624, #43712, #43715)
MCP servers now report expired OAuth credentials accurately and provide reconnect guidance when token refresh fails. (#43947, #44359)
Original changelogDaemon Supports Configurable Update Schedules with Thread and Goal Recovery After Restarts
Added configurable daemon update schedules and `codex app-server daemon update`; saved threads and active goals can recover after daemon restarts. (#43542, #43562, #44314)
Original changelogAmazon Bedrock Supports Command-Based AWS Credentials with Caching and Auto-Refresh
Amazon Bedrock can now obtain AWS credentials from configured commands, with caching, expiration-based refresh, and authentication recovery. (#44028)
Original changelogAccepted Prompts Preserved on Compaction Failures with Fixes for tmux Resizes and History Viewports
Accepted prompts are now saved even when compaction fails before a turn starts. (#44487)
Fixed missed tmux resizes, transcript viewport restoration, and stale history appearing after switching threads. (#43603, #43889, #43994)
Original changelogAutomatic Approval Reviews Preserve Full Actions and Evidence with Retry Support and Clarified Risk Alerts
Automatic approval reviews now preserve complete actions and authorization evidence more reliably, retry transient failures, and distinguish review failures from unsafe-action findings. (#44482, #44569, #44570)
Original changelogAccount Switching Invalidates Previous Sessions While Clearing Connection Caches and Model Catalogs
Switching accounts now invalidates remote-control sessions, cached WebSocket state, and model catalogs belonging to the previous identity. (#43906, #44341, #44489)
Original changelogBlocks WSL Sandbox Escapes and Hardens Shell Snapshots Against Credential Leaks
Blocked Windows-process escapes from restricted WSL sandboxes and hardened brokered shell snapshots against credential exposure. (#44286, #43909, #44040)
Original changelogPython SDK and Runtime Align with Stable CLI Releases with Matching Versions and Pre-Validated Assets
Aligned Python SDK and runtime publishing with stable CLI releases, using matching versions and verifying runtime assets before SDK publication. (#44067)