Codex 0.158.0
By Steven Van ·
Codex 0.158.0 adds TUI copy-on-select, OAuth-secured MCP connections, and fixes sandbox issues on Windows, Linux and macOS.
- Terminal: The fullscreen TUI now supports copy-on-select and right-click paste, and copied transcript selections keep their Markdown formatting.
- MCP connections: Codex can connect to MCP servers that require pre-registered OAuth client secrets, including via codex mcp add --oauth-client-secret.
- exec-server security: direct exec-server WebSocket connections, including those set up through app-server, can now be secured with bearer tokens.
- Images: image generation and editing can explicitly request transparent backgrounds, and edits now accept file-backed conversation images.
- Approvals: terminal input approval is now on by default for commands running with elevated permissions, and runtime-only grants no longer trigger unnecessary reviews.
The release also fixes several sandbox issues: Windows sandbox failures tied to ordinary Windows 10 paths, rejected stored credentials, and large permission policies; Linux sandbox startup with nested writable roots; and Git metadata protections across writable roots on both Linux and macOS. macOS patch operations now recognize system path aliases already covered by existing permissions, so they no longer trigger extra approval prompts, and approval reviews retry when new input arrives instead of aborting a pending action. Mermaid flowcharts now render quoted labels and ampersands correctly, and unsupported diagrams explain why they fall back to source.
