OpenAI Codex CLI rust-v0.141.0

OpenAI Codex CLI rust-v0.141.0 was released on .

Summary

New Features - Remote executors now use authenticated, end-to-end encrypted Noise relay channels. (26242, 26245) - Cross-platform remote execution now preserves executor-native working directories ...

Release Context

Shipped around the same time

Within 3 days of this release, other AI coding tools also shipped:

Compare OpenAI Codex CLI: vs Claude Code · vs Cursor · vs Gemini CLI · vs Kiro CLI · vs GitHub Copilot CLI · vs Devin Desktop · vs Antigravity CLI

Release Notes

New Features - Remote executors now use authenticated, end-to-end encrypted Noise relay channels. (26242, 26245) - Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries. (27819, 27995, 28032, 28122, 28165, 28367) - Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery also adds a created-by-me marketplace and auth-specific curated catalogs. (27870, 27884, 27893, 28203, 28383) - App-server clients can list immediate child threads, correlate external-agent imports with detailed results, and read or redeem rate-limit reset credits. (26662, 28008, 28143) - Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context. (27917, 28405) - TUI input prompts can auto-resolve after inactivity, with a countdown that pauses on interaction. (28235) Bug Fixes - Hook trust bypass now persists through codex exec thread start and resume, while blocking PostToolUse hooks correctly reject code-mode tool calls. (26434, 28365) - Plugin capabilities now route consistently by authentication mode, deduplicate conflicting App/MCP declarations, and preserve remote marketplace ordering. (27461, 27602, 27607, 27902, 27958, 28395) - Windows sandbox execution repairs stale credentials automatically and gives PowerShell commands more time before backgrounding. (27086, 27944) - Idle exec-server relays remain connected, and steered user input immediately interrupts waitagent. (28286, 28341) - Bundled SQLite is pinned to a version containing the WAL-reset corruption fix. (27992) - TLS connections now support P-521 certificate signatures commonly used by enterprise proxies. (27706) Chores - Reduced latency and memory use in large, tool-heavy sessions by caching tool search and eliminating repeated request and history copies. (27258, 27813, 28306, 28309, 28313, 28323, 28327) - Bounded prompt-image caching to 64 MiB and feedback uploads to eight related threads. (28294, 28332) - Terminal resize reflow is now always enabled, ignoring obsolete disabled settings. (27794) Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.140.0...rust-v0.141.0 - 28001 [codex] package Windows ARM64 on x64 @tamird - 28032 [codex] Carry exec-server cwd as PathUri @anp-oai - 27607 [codex] Dedupe plugin MCPs by app declaration name @felixxia-oai - 27992 [codex] Pin bundled SQLite to fixed WAL-reset version @gpeal - 28125 build: run buildifier from just fmt @anp-oai - 28120 bazel: add PowerShell to Wine test harness @anp-oai - 27819 path-uri: render native paths across platforms @anp-oai - 28122 [codex] exec-server honors remote environment cwd and shell @anp-oai - 26662 feat(app-server): filter threads by parent @btraut-openai - 27884 Add selected-plugin precedence and attribution to the MCP catalog @jif-oai - 27870 Discover stdio MCP servers from selected executor plugins @jif-oai - 28283 [codex] update multi-agent v2 prompts @jif-oai - 27602 [codex] Preserve plugin apps in connector listings @felixxia-oai - 27461 [codex] Skip plugin MCP OAuth for matching app routes @felixxia-oai - 27893 Activate selected executor plugin MCPs in app-server @jif-oai - 28332 [codex] Cap feedback upload subtrees @jif-oai - 27365 Represent dynamic tools with explicit namespaces internally @sayan-oai - 28333 skills: hide orchestrator skills with a local executor @jif-oai - 27756 [codex] simplify shell snapshot ownership @pakrym-oai - 27794 Remove terminal resize reflow flag gates @etraut-openai - 28286 chore: restore exec-server relay keepalives @jif-oai - 28164 [codex] simplify memory read metrics @pakrym-oai - 27371 Expose explicit dynamic tool namespaces in thread start @sayan-oai - 28309 linearize history output normalization @jif-oai - 28306 avoid cloning sampling request input @jif-oai - 28323 serialize websocket requests directly @jif-oai - 28313 avoid cloning websocket request history @jif-oai - 28344 [codex] remove stale PathExt import @pakrym-oai - 27059 [codex] Cover OTLP HTTP log and trace event export @richardopenai - 28327 reuse encoded Responses request bodies @jif-oai - 27995 [codex] preserve explicit environment cwd @pakrym-oai - 28285 guardian: isolate review context from skills and memories @jif-oai - 26702 TUI Plugin Sharing 2 - add remote plugin section plumbing @canvrno-oai - 28294 bound prompt image cache retention @jif-oai - 28257 Support staging OAuth client ID overrides @apanasenko-oai - 28341 core: let steer interrupt waitagent @jif-oai - 28336 skills: cache orchestrator resources per thread @jif-oai - 28357 Extract shared Windows sandbox session runner @iceweasel-oai - 27706 Use aws-lc-rs for rustls crypto provider @malsamiri-oai - 28347 [codex] add path-types skill @anp-oai - 28235 Add request user input auto-resolution timer @shijie-oai - 28234 [mcp] Increase default tool timeout to 300 seconds @adaley-openai - 28008 [codex] Add external agent import result accounting @charlesgong-openai - 27944 recover stale Windows sandbox credentials @iceweasel-oai - 27086 Add Windows unified exec yield floor @iceweasel-oai - 28358 Add hidden Windows sandbox wrapper entrypoint @iceweasel-oai - 27258 core: cache the tool search handler per session @mchen-oai - 28143 feat(app-server): expose rate-limit reset credits @jayp-oai - 28355 feat(core): add metadata field to ResponseItem @owenlin0 - 28203 [codex] Add created-by-me remote plugin marketplace @ericning-o - 28365 Respect blocking PostToolUse hooks in code mode @abhinav-oai - 27813 [codex] Reuse Apps policy evaluation across MCP tool exposure @mzeng-openai - 28300 Deflake realtime handoff steering test @felixxia-oai - 28395 [codex] Preserve remote plugin directory order @jameswt-oai - 27955 [codex] retain resolved environments across turns @pakrym-oai - 27917 Add realtime speech append control @guinness-oai - 27093 [codex-analytics] Analytics Capture to File in Debug Builds @jameswt-oai - 26242 exec-server: add Noise relay transport @viyatb-oai - 28165 Use PathUri in filesystem permission paths for exec-server @anp-oai - 28415 [codex] Fix missing response item metadata in tests @adaley-openai - 27058 [codex] Add second-based OTEL duration histograms @richardopenai - 27902 [codex] Centralize plugin auth capability filtering @felixxia-oai - 28405 Add a toggle for realtime startup context @guinness-oai - 26434 Preserve hook trust bypass in codex exec threads @abhinav-oai - 26245 exec-server: default remote transport to Noise @viyatb-oai - 28383 [codex] Load API curated marketplace by auth @felixxia-oai - 27958 [codex] Make plugin details capability aware @felixxia-oai - 28367 Use ApiPathString in app-server filesystem permission paths @anp-oai - 28421 [codex] Bind shell snapshots to retained thread environments @pakrym-oai - 28429 [codex] Add interruptible sleep tool @pakrym-oai - 28441 [codex] Use expect in integration tests @pakrym-oai - 28163 [codex] Use local environment for user shell commands @pakrym-oai

View original release

Other Recent OpenAI Codex CLI Releases

All OpenAI Codex CLI releases · All AI coding tool releases on Havoptic