OpenAI Codex CLI rust-v0.144.0 now gives you better control over your usage credits with clearer type and expiration details, plus smarter safeguards like warnings when high concurrency could spike your costs. We've also squashed critical bugs affecting Windows and Mac users, ...

New Features - Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (30488) - Added a writes app-approval mode that allows declared read-only actions while prompting for writes. (30482) - MCP tools can now request authentication interactively without an experimental opt-in. (28772) - App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (28745, 31274) - Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (31503) - Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (31621) Bug Fixes - Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (30319) - Fixed Code Mode crashes in Intel macOS release binaries. (30953) - Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (31138, 31574) - Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (31494) - Long-running app sessions now refresh expired authentication for the hosted codexapps connector. (31486) - Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (31441, 31622) Documentation - Device-code login warnings now explain how to recognize and stop phishing attempts. (31648) Chores - Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (31348) - Made the /review branch picker faster and more reliable in large repositories. (31464) - Improved automatic review behavior with clearer instructions and a focused tool set. (31480) - Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (31636) Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.143.0...rust-v0.144.0 - 30292 Serialize shared MCP OAuth credential stores @stevenlee-oai - 30488 [codex-cli] Show reset details in redemption picker @jayp-oai - 31297 feat(core): emit canonical command execution items @owenlin0 - 31298 feat(core): emit canonical dynamic tool call items @owenlin0 - 31369 test(skills): cover plugin namespace loading @anp-oai - 30953 fix(release): add missing Intel V8 signing entitlement @malsamiri-oai - 31355 refactor: make ExternalAuth return CodexAuth @lt-oai - 31352 ci: increase Windows Bazel local test jobs @anp-oai - 30482 [codex-rs] Add writes app approval mode @zamoshchin-openai - 31439 Handle bio policy errors in Codex @fc-oai - 31319 [codex] add connector runtime latency metrics @mzeng-openai - 31312 Use model catalog approval messages @dylan-hurd-oai - 31422 test: generalize exec-server fixture @anp-oai - 28772 [codex] Enable auth elicitation by default @mzeng-openai - 28745 [login] support hosted success redirects @rafael-jac - 31316 chore: extract remote compaction request attempts @celia-oai - 31299 feat(core): emit canonical sub-agent activity items @owenlin0 - 31285 [1/5] [codex] sync managed-layer bundle schema @hefuc-oai - 31300 feat(core): emit canonical collab tool call items @owenlin0 - 31301 feat(core): emit canonical collab wait items @owenlin0 - 30319 fix: retry rejected previous-model compaction with selected model @celia-oai - 30879 Handle mixed-case URLs in Windows command safety @charliemarsh-oai - 31191 Handle completion separators and popup dismissal @charliemarsh-oai - 31425 test: add TestAppServer builder @anp-oai - 31342 http-client: expose WebSocket proxy prerequisites @bolinfest - 31348 perf(skills): resolve plugin namespaces per root @anp-oai - 31289 Use canonical indexed web access field @winston-openai - 31464 Speed up review branch picker via for-each-ref @charliemarsh-oai - 31332 ci: parameterize Cargo target paths @anp-oai - 31421 refactor: unify external auth resolution @pakrym-oai - 31451 test: migrate TestAppServer callers to builder @anp-oai - 31274 [codex] Add externally provided Codex auth @lt-oai - 31501 trace hook command execution @wiltzius-openai - 31356 ci: run V8 source builds on Windows 2025 @anp-oai - 31283 core: support extension-owned turn items @owenlin0 - 31570 fs: support pruning hidden directories during walks @jif-oai - 31465 Align empty branch list message with search @charliemarsh-oai - 31586 Stabilize encrypted MAv2 spawn request test @jif-oai - 31585 Stabilize remote compaction parity against dynamic skill catalogs @jif-oai - 31518 Log plugin install failure subtypes @charlesgong-openai - 31587 Stabilize shared rollout budget test @jif-oai - 31503 Detect Codex installs managed by pnpm @charliemarsh-oai - 31525 core: migrate standalone web search to extension-owned turn items @owenlin0 - 31473 feat(core): emit canonical review mode items @owenlin0 - 31452 test: remove TestAppServer constructors @anp-oai - 31612 Round MCP timeout durations in error messages @jif-oai - 31138 fix(windows-sandbox): allow deletion in writable roots @fcoury-oai - 31500 code-mode: move to hosted mode by default @cconger - 31494 tui: sanitize terminal controls in user messages @etraut-openai - 31524 chore(protocol): use UUIDv7 for generated item IDs @owenlin0 - 31496 Fall back to HTTP when Apple Git is unavailable @fc-oai - 31578 Bound exec-server pending RPCs @jif-oai - 29875 [codex] Sanitize imported session fallback titles @stefanstokic-oai - 31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai - 31622 websocket-client: add proxy-aware connector @bolinfest - 31574 [codex] Grant Windows sandbox access to primary runtime @abhinav-oai - 31292 Reuse MCP tool snapshot within a sampling request @sayan-oai - 31630 feat(core): emit canonical hook prompt items @owenlin0 - 31636 feat: change amazon Bedrock GPT-5.6 display names @celia-oai - 31629 core: stop emitting legacy command events directly @owenlin0 - 31441 core: preserve Responses WebSockets with system proxy @bolinfest - 31357 ci: route build IO through Dev Drives @anp-oai - 31461 chore: remove inert cargo audit workflow @anp-oai - 31614 test: migrate app-server v2 starts to auto env @anp-oai - 31497 [codex] increase tool schema compaction threshold @fbauer33 - 31650 code-mode: make all approvals trigger elicitation pause @cconger - 31648 Clarify device-code phishing warning @etraut-openai - 31663 test(app-server): use native rollout fixture paths @fcoury-oai - 31330 [codex-apps] Omit internal fields from file payloads @jacobzhou-oai - 31480 Update auto review prompting @olliem-oai - 21818 Update models.json @github-actions - 31427 test: add delayed exec-server transport @anp-oai - 30278 [codex] Preserve reviewer when resuming threads @viyatb-oai - 31675 Expand agent core ownership @pakrym-oai - 31486 [connectors] Refresh codexapps /ps/mcp auth @stevenlee-oai - 31361 model-provider: route model discovery through HTTP client factory @bolinfest - 30188 feat(rollout): persist TurnItems for paginated thread rollouts @owenlin0 - 31596 Use the image generation extension by default @won-openai - 31684 Update models.json @github-actions