codex

feat: tool call duration metric (#9364 )

jif-oai · 2026-01-16 18:33:14 +01:00

e650d4b02c

Turn-state sticky routing per turn (#9332 )

- capture the header from SSE/WS handshakes, store it per
ModelClientSession using `Oncelock`, echo it on turn-scoped requests,
and add SSE+WS integration tests for within-turn persistence +
cross-turn reset.

- keep `x-codex-turn-state` sticky within a user turn to maintain
routing continuity for retries/tool follow-ups.

Ahmed Ibrahim · 2026-01-16 09:30:11 -08:00

ebdd8795e9

add codex cloud list (#9324 )

for listing cloud tasks.

Jeremy Rose · 2026-01-16 08:56:38 -08:00

4125c825f9

Made codex exec resume --last consistent with codex resume --last (#9352 )

PR #9245 made `codex resume --last` honor cwd, but I forgot to make the
same change for `codex exec resume --last`. This PR fixes the
inconsistency.

This addresses #8700

Eric Traut · 2026-01-16 08:53:47 -08:00

9147df0e60

[device-auth] Add device code auth as a standalone option when headless environment is detected. (#9333 )

Matthew Zeng · 2026-01-16 08:35:03 -08:00

131590066e

fix: flaky tests (#9373 )

jif-oai · 2026-01-16 17:24:41 +01:00

2691e1ce21

chore: close pipe on non-pty processes (#9369 )

Closing the STDIN of piped process when starting them to avoid commands
like `rg` to wait for content on STDIN and hangs for ever

jif-oai · 2026-01-16 15:54:32 +01:00

1668ca726f

prompt collab (#9367 )

jif-oai · 2026-01-16 15:12:41 +01:00

7905e99d03

feat: CODEX_CI (#9366 )

jif-oai · 2026-01-16 13:52:16 +00:00

7fc49697dd

feat: collab wait multiple IDs (#9294 )

jif-oai · 2026-01-16 12:05:04 +01:00

c576756c81

feat: run user commands under user snapshot (#9357 )

The initial goal is for user snapshots to have access to aliases etc

jif-oai · 2026-01-16 11:49:28 +01:00

c1ac5223e1

feat: propagate approval request of unsubscribed threads (#9232 )

A thread can now be spawned by another thread. In order to process the
approval requests of such sub-threads, we need to detect those event and
show them in the TUI.

This is a temporary solution while the UX is being figured out. This PR
should be reverted once done

jif-oai · 2026-01-16 11:23:01 +01:00

f5b3e738fb

rename model turn to sampling request (#9336 )

We have two type of turns now: model and user turns. It's always
confusing to refer to either. Model turn is basically a sampling
request.

Ahmed Ibrahim · 2026-01-16 10:06:24 +01:00

0cce6ebd83

Fix token estimate during compaction (#9337 )

This addresses #9287

Eric Traut · 2026-01-15 19:48:11 -08:00

1fc72c647f

fix(mcp): include threadId in both content and structuredContent in CallToolResult (#9338 )

Michael Bolin · 2026-01-15 18:33:11 -08:00

99f47d6e9a

fix(tui): only show 'Worked for' separator when actual work was performed (#8958 )

Fixes #7919.

This PR addresses a TUI display bug where the "Worked for" separator
would appear prematurely during the planning stage.

**Changes:**
- Added `had_work_activity` flag to `ChatWidget` to track if actual work
(exec commands, MCP tool calls, patches) was performed in the current
turn.
- Updated `handle_streaming_delta` to only display the
`FinalMessageSeparator` if both `needs_final_message_separator` AND
`had_work_activity` are true.
- Updated `handle_exec_end_now`, `handle_patch_apply_end_now`, and
`handle_mcp_end_now` to set `had_work_activity = true`.

**Verification:**
- Ran `cargo test -p codex-tui` to ensure no regressions.
- Manual verification confirms the separator now only appears after
actual work is completed.

---------

Co-authored-by: Josh McKinney <joshka@openai.com>

Thanh Nguyen · 2026-01-16 01:41:43 +00:00

a6324ab34b

chore(windows) Enable Powershell UTF8 feature (#9195 )

## Summary
We've received a lot of positive feedback about this feature, so we're
going to enable it by default.

Dylan Hurd · 2026-01-16 01:29:12 +00:00

3cabb24210

Add text element metadata to protocol, app server, and core (#9331 )

The second part of breaking up PR
https://github.com/openai/codex/pull/9116

Summary:

- Add `TextElement` / `ByteRange` to protocol user inputs and user
message events with defaults.
- Thread `text_elements` through app-server v1/v2 request handling and
history rebuild.
- Preserve UI metadata only in user input/events (not `ContentItem`)
while keeping local image attachments in user events for rehydration.

Details:

- Protocol: `UserInput::Text` carries `text_elements`;
`UserMessageEvent` carries `text_elements` + `local_images`.
Serialization includes empty vectors for backward compatibility.
- app-server-protocol: v1 defines `V1TextElement` / `V1ByteRange` in
camelCase with conversions; v2 uses its own camelCase wrapper.
- app-server: v1/v2 input mapping includes `text_elements`; thread
history rebuilds include them.
- Core: user event emission preserves UI metadata while model history
stays clean; history replay round-trips the metadata.

charley-oai · 2026-01-15 17:26:41 -08:00

1fa8350ae7

fix: send non-null content on elicitation Accept (#9196 )

## Summary

- When a user accepts an MCP elicitation request, send `content:
Some(json!({}))` instead of `None`
- MCP servers that use elicitation expect content to be present when
action is Accept
- This matches the expected behavior shown in tests at
`exec-server/tests/common/lib.rs:171`

## Root Cause

In `codex-rs/core/src/codex.rs`, the `resolve_elicitation` function
always sent `content: None`:

```rust
let response = ElicitationResponse {
    action,
    content: None,  // Always None, even for Accept
};
```

## Fix

Send an empty object when accepting:

```rust
let content = match action {
    ElicitationAction::Accept => Some(serde_json::json!({})),
    ElicitationAction::Decline | ElicitationAction::Cancel => None,
};
```

## Test plan

- [x] Code compiles with `cargo check -p codex-core`
- [x] Formatted with `just fmt`
- [ ] Integration test `accept_elicitation_for_prompt_rule` (requires
MCP server binary)

Fixes #9053

Yuvraj Angad Singh · 2026-01-15 14:20:57 -08:00

004a74940a

Revert empty paste image handling (#9318 )

Revert #9049 behavior so empty paste events no longer trigger a
clipboard image read.

Ahmed Ibrahim · 2026-01-15 14:16:09 -08:00

749b58366c

remove needs_follow_up error log (#9272 )

pap-openai · 2026-01-15 21:20:54 +00:00

d886a8646c

[search] allow explicitly disabling web search (#9249 )

moving `web_search` rollout serverside, so need a way to explicitly
disable search + signal eligibility from the client.

- Add `x‑oai‑web‑search‑eligible` header that signifies whether the
request can have web search.
- Only attach the `web_search` tool when the resolved `WebSearchMode` is
`Live` or `Cached`.

sayan-oai · 2026-01-15 11:28:57 -08:00

169201b1b5

Support SKILL.toml file. (#9125 )

We’re introducing a new SKILL.toml to hold skill metadata so Codex can
deliver a richer Skills experience.

Initial focus is the interface block:
```
[interface]
display_name = "Optional user-facing name"
short_description = "Optional user-facing description"
icon_small = "./assets/small-400px.png"
icon_large = "./assets/large-logo.svg"
brand_color = "#3B82F6"
default_prompt = "Optional surrounding prompt to use the skill with"
```

All fields are exposed via the app server API.
display_name and short_description are consumed by the TUI.

xl-openai · 2026-01-15 11:20:04 -08:00

42fa4c237f

Revert recent styling change for input prompt placeholder text (#9307 )

A recent change in commit ccba737d26 modified the styling of the
placeholder text (e.g. "Implement {feature}") in the input box of the
CLI, changing it from non-italic to italic. I think this was likely
unintentional. It results in a bad display appearance on some terminal
emulators, and several users have complained about it.

This change switches back to non-italic styling, restoring the older
behavior.

It addresses #9262

Eric Traut · 2026-01-15 10:58:12 -08:00

5f10548772

nit: clean unified exec background processes (#9304 )

To fix the occurences where the End event is received after the listener
stopped listenning

jif-oai · 2026-01-15 18:34:33 +00:00

da44569fef

chore: better orchestrator prompt (#9301 )

jif-oai · 2026-01-15 18:11:43 +00:00

393a5a0311

revert: remove pre-Landlock bind mounts apply (#9300 )

**Description**

This removes the pre‑Landlock read‑only bind‑mount step from the Linux
sandbox so filesystem restrictions rely solely on Landlock again.
`mounts.rs` is kept in place but left unused. The linux‑sandbox README
is updated to match the new behavior and manual test expectations.

viyatb-oai · 2026-01-15 09:47:57 -08:00

55bda1a0f2

fix(exec): improve stdin prompt decoding (#9151 )

Fixes #8733.

- Read prompt from stdin as raw bytes and decode more helpfully.
- Strip UTF-8 BOM; decode UTF-16LE/UTF-16BE when a BOM is present.
- For other non-UTF8 input, fail with an actionable message (offset +
iconv hint).

Tests: `cargo test -p codex-exec`.

李琼羽 · 2026-01-15 09:29:05 -08:00

b4d240c3ae

Propagate MCP disabled reason (#9207 )

Indicate why MCP servers are disabled when they are disabled by
requirements:

```
➜  codex git:(main) ✗ just codex mcp list
cargo run --bin codex -- "$@"
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.27s
     Running `target/debug/codex mcp list`
Name         Command          Args  Env  Cwd  Status                                                                  Auth
docs         docs-mcp         -     -    -    disabled: requirements (MDM com.openai.codex:requirements_toml_base64)  Unsupported
hello_world  hello-world-mcp  -     -    -    disabled: requirements (MDM com.openai.codex:requirements_toml_base64)  Unsupported

➜  codex git:(main) ✗ just c
cargo run --bin codex -- "$@"
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.90s
     Running `target/debug/codex`
╭─────────────────────────────────────────────╮
│ >_ OpenAI Codex (v0.0.0)                    │
│                                             │
│ model:     gpt-5.2 xhigh   /model to change │
│ directory: ~/code/codex/codex-rs            │
╰─────────────────────────────────────────────╯

/mcp

🔌  MCP Tools

  • No MCP tools available.

  • docs (disabled)
    • Reason: requirements (MDM com.openai.codex:requirements_toml_base64)

  • hello_world (disabled)
    • Reason: requirements (MDM com.openai.codex:requirements_toml_base64)
```

gt-oai · 2026-01-15 17:24:00 +00:00

f6df1596eb

Changed codex resume --last to honor the current cwd (#9245 )

This PR changes `codex resume --last` to work consistently with `codex
resume`. Namely, it filters based on the cwd when selecting the last
session. It also supports the `--all` modifier as an override.

This addresses #8700

Eric Traut · 2026-01-15 17:05:08 +00:00

ae96a15312

feat: basic tui for event emission (#9209 )

jif-oai · 2026-01-15 15:53:02 +00:00

3fc487e0e0

feat: add interrupt capabilities to send_input (#9276 )

jif-oai · 2026-01-15 14:59:07 +00:00

faeb08c1e1

feat: add agent roles to collab tools (#9275 )

Add `agent_type` parameter to the collab tool `spawn_agent` that
contains a preset to apply on the config when spawning this agent

jif-oai · 2026-01-15 13:33:52 +00:00

05b960671d

feat: collab tools app-server event mapping (#9213 )

jif-oai · 2026-01-15 09:03:26 +00:00

bad4c12b9d

fix: fallback to Landlock-only when user namespaces unavailable and set PR_SET_NO_NEW_PRIVS early (#9250 )

fixes https://github.com/openai/codex/issues/9236

### Motivation
- Prevent sandbox setup from failing when unprivileged user namespaces
are denied so Landlock-only protections can still be applied.
- Ensure `PR_SET_NO_NEW_PRIVS` is set before installing seccomp and
Landlock restrictions to avoid kernel `EPERM`/`LandlockRestrict`
ordering issues.

### Description
- Add `is_permission_denied` helper that detects `EPERM` /
`PermissionDenied` from `CodexErr` to drive fallback logic.
- In `apply_read_only_mounts` skip read-only bind-mount setup and return
`Ok(())` when `unshare_user_and_mount_namespaces()` fails with
permission-denied so Landlock rules can still be installed.
- Add `set_no_new_privs()` and call it from
`apply_sandbox_policy_to_current_thread` before installing seccomp
filters and Landlock rules when disk or network access is restricted.

viyatb-oai · 2026-01-14 22:24:34 -08:00

2259031d64

Add migration_markdown in model_info (#9219 )

Next step would be to clean Model Upgrade in model presets

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: aibrahim-oai <219906144+aibrahim-oai@users.noreply.github.com>

Ahmed Ibrahim · 2026-01-15 01:55:22 +00:00

a09711332a

Add text element metadata to types (#9235 )

Initial type tweaking PR to make the diff of
https://github.com/openai/codex/pull/9116 smaller

This should not change any behavior, just adds some fields to types

charley-oai · 2026-01-14 16:41:50 -08:00

4a9c2bcc5a

fix: increase timeout for release builds from 30 to 60 minutes (#9242 )

Windows builds have been tripping the 30 minute timeout. For sure, we
need to improve this, but as a quick fix, let's just increase the
timeout.

Perhaps we should switch to `lto = "thin"` for release builds, at least
for Windows:


https://github.com/openai/codex/blob/3728db11b87cb8490bcf6bf2cdf0e13dcfb0c28b/codex-rs/Cargo.toml#L288

See https://doc.rust-lang.org/cargo/reference/profiles.html#lto for
details.

Michael Bolin · 2026-01-15 00:38:25 +00:00

2a68b74b9b

fix: eliminate unnecessary clone() for each SSE event (#9238 )

Given how many SSE events we get, seems worth fixing.

Michael Bolin · 2026-01-15 00:06:09 +00:00

3728db11b8

fix: correct linux sandbox uid/gid mapping after unshare (#9234 )

fixes https://github.com/openai/codex/issues/9233
## Summary
- capture effective uid/gid before unshare for user namespace maps
- pass captured ids into uid/gid map writer

## Testing
- just fmt
- just fix -p codex-linux-sandbox
- cargo test -p codex-linux-sandbox

viyatb-oai · 2026-01-14 15:35:53 -08:00

e59e7d163d

upgrade runners in rust-ci.yml to use the larger runners (#9106 )

Upgrades runners in rust-ci.yaml to larger runners

ubuntu-24.04 (x64 and arm64) -> custom 16 core ubuntu 24.04 runners
macos-14 -> mac0s-15-xlarge
[TODO] windows (x64 and arm64) -> custom 16 core windows runners

willwang-openai · 2026-01-14 15:22:59 -08:00

71a2973fd9

Updated issue template to ask for terminal emulator (#9231 )

Co-authored-by: Josh McKinney <joshka@openai.com>

Eric Traut · 2026-01-14 23:00:15 +00:00

24b88890cb

add WebSearchMode enum (#9216 )

### What
Add `WebSearchMode` enum (disabled, cached live, defaults to cached) to
config + V2 protocol. This enum takes precedence over legacy flags:
`web_search_cached`, `web_search_request`, and `tools.web_search`.

Keep `--search` as live.

### Tests
Added tests

sayan-oai · 2026-01-14 12:51:42 -08:00

5e426ac270

fix(tui): disable double-press quit shortcut (#9220 )

Disables the default Ctrl+C/Ctrl+D double-press quit UX (keeps the code
path behind a const) while we rethink the quit/interrupt flow.

Tests:
- just fmt
- cargo clippy --fix --all-features --tests --allow-dirty --allow-no-vcs
-p codex-tui
- cargo test -p codex-tui --lib

Josh McKinney · 2026-01-14 20:28:18 +00:00

27da8a68d3

fix(tui2): align Steer submit keys (#9218 )

- Remove legacy Ctrl+K queuing in tui2; Tab is the queue key.
- Make Enter queue when Steer is disabled and submit immediately when
Steer is enabled.
- Add Steer keybinding docs on both tui and tui2 chat composers.

Josh McKinney · 2026-01-14 19:35:55 +00:00

0471ddbe74

Rename hierarchical_agents to child_agents_md (#9215 )

Clearer name

pakrym-oai · 2026-01-14 19:14:24 +00:00

e6d2ef432d

feat: adding piped process to replace PTY when needed (#8797 )

jif-oai · 2026-01-14 18:44:04 +00:00

577e1fd1b2

s/mcp_server_requirements/mcp_servers (#9212 )

A simple `s/mcp_server_requirements/mcp_servers/g` for an unreleased
feature. @bolinfest correctly pointed out, it's already in
`requirements.toml` so the `_requirements` is redundant.

gt-oai · 2026-01-14 18:41:52 +00:00

fe1e0da102

Log headers in trace mode (#9214 )

To enable:

```
export RUST_LOG="warn,codex_=trace"
```

Sample: 
```
Request completed method=POST url=https://chatgpt.com/backend-api/codex/responses status=200 OK headers={"date": "Wed, 14 Jan 2026 18:21:21 GMT", "transfer-encoding": "chunked", "connection": "keep-alive", "x-codex-plan-type": "business", "x-codex-primary-used-percent": "3", "x-codex-secondary-used-percent": "6", "x-codex-primary-window-minutes": "300", "x-codex-primary-over-secondary-limit-percent": "0", "x-codex-secondary-window-minutes": "10080", "x-codex-primary-reset-after-seconds": "9944", "x-codex-secondary-reset-after-seconds": "171121", "x-codex-primary-reset-at": "1768424824", "x-codex-secondary-reset-at": "1768586001", "x-codex-credits-has-credits": "False", "x-codex-credits-balance": "", "x-codex-credits-unlimited": "False", "x-models-etag": "W/\"7a7ffbc83c159dbd7a2a73aaa9c91b7a\"", "x-oai-request-id": "ffedcd30-6d8a-4c4d-be10-8ebb23c142c8", "x-envoy-upstream-service-time": "417", "x-openai-proxy-wasm": "v0.1", "cf-cache-status": "DYNAMIC", "set-cookie": "__cf_bm=xFKeaMbWNbKO5ZX.K5cJBhj34OA1QvnF_3nkdMThjlA-1768414881-1.0.1.1-uLpsE_BDkUfcmOMaeKVQmv_6_2ytnh_R3lO_il5N5K3YPQEkBo0cOMTdma6bK0Gz.hQYcIesFwKIJht1kZ9JKqAYYnjgB96hF4.sii2U3cE; path=/; expires=Wed, 14-Jan-26 18:51:21 GMT; domain=.chatgpt.com; HttpOnly; Secure; SameSite=None", "report-to": "{\"endpoints\":[{\"url\":\"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Kc7g4zUhKkIm3xHuB6ba4jyIUqqZ07ETwIPAYQASikRjA8JesbtUKDP9tSrZ5PnzWldaiSz5dZVQFI579LEsCMlMUSelTvmyQ8j4FbFDawi%2FprWZ5iRePiaSalr\"}],\"group\":\"cf-nel\",\"max_age\":604800}", "nel": "{\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "x-content-type-options": "nosniff", "cross-origin-opener-policy": "same-origin-allow-popups", "referrer-policy": "strict-origin-when-cross-origin", "server": "cloudflare", "cf-ray": "9bdf270adc7aba3a-SEA"} version=HTTP/1.1
```

pakrym-oai · 2026-01-14 18:38:12 +00:00

e958d0337e

Get model on session configured (#9191 )

- Don't try to precompute model unless you know it from `config`
- Block `/model` on session configured
- Queue messages until session configured
- show "loading" in status until session configured

Ahmed Ibrahim · 2026-01-14 10:20:41 -08:00

8e937fbba9

2885 Commits