OpenAI Codex CLI 0.160.1: latest version, removed flags and gotchas

Codex CLI 0.160.1 (2026-10-05 18:29 UTC)

• Remote stdio MCP servers keep SYSTEMROOT, TEMP and TMP when launched with explicitly configured remote environment variables (Windows executor fix). (source)

Codex CLI 0.160.0 (2026-10-01 20:19 UTC)

• Start sessions outside a project with workspace defaults when policy permits; saved permissions are restored on resume. (source)
• Opt-in Guardian review can retrieve earlier user instructions and include context from agent handoffs. (source)
• Explicit provider model catalogs no longer include unsupported bundled models. (source)
• SQLite stalls during connection setup fixed; initialization errors are surfaced instead of reported as timeouts. (source)

Codex CLI 0.159.3 (2026-09-30 22:57 UTC)

• Local sessions signed in with ChatGPT can show optional reminders to complete account security setup. (source)

Codex CLI 0.159.2 (2026-09-29 23:57 UTC)

• No more console windows flashing on Windows for background processes and sandboxed commands. (source)

Codex CLI 0.159.1 (2026-09-29 20:32 UTC)

• GPT-6.1 Sol is the default model in the bundled catalog and the Amazon Bedrock catalogs (our 0.160.1 sandbox run printed model: gpt-6.1-sol). (source)

Codex CLI 0.159.3 → 0.160.1

0 commands added, 0 removed, 0 commands with flags added or removed; 0 help pages changed in any way.

Method: bin/tool-snapshot ran --help for every codex subcommand of both versions in a throwaway Linux sandbox (72 and 72 help pages), then bin/tool-diff compared them. Hidden flags do not appear in --help.

• These are the last two minor versions (latest patch of each). Their --help output is identical, so 0.160.x changed behaviour, not the command line.

Codex CLI 0.153.4 → 0.154.0

0 commands added, 1 removed, 13 commands with flags added or removed; 13 help pages changed in any way.

Method: bin/tool-snapshot ran --help for every codex subcommand of both versions in a throwaway Linux sandbox (72 and 71 help pages), then bin/tool-diff compared them. Hidden flags do not appear in --help.

Commands removed:

• codex mcp-server

• codex mcp-server disappears from the top-level command list; --worktree arrives on 12 commands.

Codex CLI 0.146.1 → 0.147.0

0 commands added, 0 removed, 8 commands with flags added or removed; 31 help pages changed in any way.

Method: bin/tool-snapshot ran --help for every codex subcommand of both versions in a throwaway Linux sandbox (67 and 67 help pages), then bin/tool-diff compared them. Hidden flags do not appear in --help.

• The removal of codex exec --full-auto does not show here: the flag was hidden from --help before it was removed. See the gotcha below for the error it now produces.

`codex exec --full-auto` fails with unexpected argument (Codex CLI 0.160.1)

codex exec --full-auto "say hi"

error: unexpected argument '--full-auto' found

  tip: to pass '--full-auto' as a value, use '-- --full-auto'

Usage: codex exec [OPTIONS] [PROMPT]
       codex exec [OPTIONS] <COMMAND> [ARGS]

For more information, try '--help'.
# exit 2. In 0.146.1 the same command printed: warning: `--full-auto` is deprecated; use `--sandbox workspace-write` instead.

Fix: Use codex exec --sandbox workspace-write "...". The flag was hidden from --help, so a help diff cannot show its removal; only running it does. (source)

`codex mcp-server` no longer starts an MCP server (Codex CLI 0.160.1)

codex mcp-server </dev/null

Error: stdin is not a terminal
# exit 1

Fix: The subcommand was removed in 0.154.0; with no subcommand of that name, our run ended in the interactive UI's terminal check instead of an unknown-command error. Pin @openai/codex@0.153.4 for MCP clients that still spawn codex mcp-server. (source)

`codex exec` refuses to run outside a Git repository (Codex CLI 0.160.1)

cd /tmp && codex exec --sandbox workspace-write "say hi"

Reading additional input from stdin...
Not inside a trusted directory and --skip-git-repo-check was not specified.
# exit 1

Fix: Run inside a Git repository or a trusted directory, or add --skip-git-repo-check. Reading additional input from stdin... appears whenever stdin is not a terminal; pass </dev/null in scripts. (source)

Linux sandbox warns that bubblewrap is missing (Codex CLI 0.160.1)

codex exec --skip-git-repo-check --sandbox workspace-write "say hi"   # Debian 13 container

warning: Codex could not find bubblewrap on PATH. Install bubblewrap with your OS package manager. See the sandbox prerequisites: https://developers.openai.com/codex/concepts/sandboxing#prerequisites. Codex will use the bundled bubblewrap in the meantime.

Fix: apt-get install bubblewrap (or your distribution's package) before running Codex on Linux; the bundled copy is a fallback. (source)

2026-10: 0.160.0 to 0.160.1 (2 releases to 2026-10-07)

• 0.160.0: projectless sessions with workspace defaults; Guardian review context. (source)

2026-09: 0.152.0 to 0.159.3 (19 releases)

• 0.154.0 (2026-09-09) removed codex mcp-server and added experimental --worktree sessions. (source)
• 0.157.0 added GPT-6 Sol and Luna; 0.159.1 made GPT-6.1 Sol the bundled default. (source)
• 0.156.0 added /tui fullscreen UI, voice by default and --no-daemon; 0.159.0 removed tui.prompt_suggestions. (source)

2026-08: 0.146.1 to 0.151.0 (8 releases)

• 0.147.0 (2026-08-07) removed codex exec --full-auto and added --approve-for-me. (source)
• 0.148.0 added codex exec fork; 0.149.0 added the codex agents dashboard and codex queue. (source)

2026-07: 0.142.5 to 0.146.0 (11 releases)

• 0.143.0 enabled remote plugins by default and added codex remote-control pair. (source)
• 0.145.0 expanded /import to migrate Cursor and Claude Code settings, MCP servers and sessions. (source)

2026-06: 0.136.0 to 0.142.4 (11 releases)

• 0.136.0 added codex archive and codex unarchive; 0.140.0 added codex delete and removed /realtime. (source)

2026-05: 0.129.0 to 0.135.0 (7 releases)

• 0.129.0 added Vim editing in the composer; 0.132.0 let codex exec resume take --output-schema. (source)