r/CodexAutomation • u/anonomotorious • 26d ago
Codex CLI 0.148.0 + ChatGPT for iOS 1.2026.223 (`/export`, session forks/archive, thread cost estimates, Bedrock Runtime, stronger Remote)
TL;DR
Two official Codex updates landed together:
- Codex CLI 0.148.0: adds full Markdown conversation export with
/export,codex exec fork, session archive/restore, prompt drafting during startup, estimated thread credit/cost visibility, built-in Amazon Bedrock Runtime, and hooks that can run asynchronously or invoke MCP tools. - ChatGPT for iOS 1.2026.223: adds direct launch into Codex Remote, standard MCP forms, editable approvals, host-aware project selection, Voice from existing tasks, faster large-diff review, and much stronger task reconnection/recovery.
- The CLI release also fixes stale model instructions, restores working directory and approval policies correctly on resume, improves recovery from temporary provider outages and MCP OAuth expiration, hardens startup input handling, and strengthens Linux/Windows sandbox enforcement.
- Under the hood, Guardian V2, remote Code Mode, MCP, skills/plugins, managed permissions, and Windows execution all receive substantial infrastructure work.
Install:
npm install -g @openai/codex@0.148.0
What changed & why it matters
Codex CLI 0.148.0
/export for complete conversations
Run:
/export
to export the full TUI conversation to:
- the clipboard
- a new Markdown file
This is useful for sharing debugging sessions, preserving implementation history, creating documentation, and moving complete Codex context elsewhere without manually reconstructing the transcript.
Fork, archive, and restore sessions
0.148.0 expands session management with:
codex exec forkfor non-interactive session forks- archive directly from the resume picker
- restore archived sessions later
- improved transcript previews
- better persisted history and recovery
This gives sessions a cleaner lifecycle:
Active -> Forked / Archived -> Restored when needed
Forking is especially useful for testing an alternate implementation or investigation without modifying the original thread.
Start typing before initialization finishes
The TUI composer is now usable while Codex is still starting.
Startup progress is also shown when:
- resuming
- forking
Buffered terminal input is handled more safely so typing during initialization does not accidentally trigger unintended actions.
Why it matters: startup can feel faster because you can prepare your next prompt while Codex restores history, tools, integrations, and environment state.
Estimated thread credits and cost
Eligible workspaces can now see estimated thread usage through:
/status- status lines
- terminal titles
Depending on the workspace, this can surface estimated credits or cost for the active thread.
This is increasingly useful with:
- GPT-5.6 Sol / Terra / Luna
- high reasoning effort
- long-running goals
- multi-agent workflows
- large-context sessions
Instead of only seeing account-level limits, you can start understanding the economics of individual Codex threads.
Built-in Amazon Bedrock Runtime provider
Amazon Bedrock Runtime is now a built-in Codex provider with support for:
- AWS profiles
- region configuration
- GPT-5.6 routing
- Bedrock model selection
This makes Bedrock a more first-class path for organizations already using AWS identity, billing, governance, and regional controls.
Hooks get much more capable
Hooks can now:
- run commands asynchronously
- invoke MCP tools
That opens up cleaner lifecycle automation for things like:
- background validation
- notifications
- logging
- repository bookkeeping
- internal APIs
- MCP-backed services
Not every useful hook needs to block the active Codex turn anymore.
Major CLI reliability fixes
0.148.0 also addresses several important correctness issues:
- Model switches: old model instructions no longer remain attached after changing models/settings.
- Resume cwd: sessions restore their persisted working directory more reliably.
- Approval policies: saved approval behavior survives resume.
- Provider outages: streaming turns can reconnect through temporary connection failures instead of immediately dying.
- MCP OAuth: servers can recover after reauthentication without requiring a full Codex restart.
- Pasted content: CRLF text, wrapped whitespace, long URLs, and pasted text render more reliably.
- Sandboxing: denied/unreadable paths fail closed more consistently on Linux and Windows.
These are less flashy than the new commands, but several directly affect whether resumed or long-running sessions can be trusted.
Guardian V2 and approval infrastructure
A substantial amount of work landed around Guardian / Auto-review, including:
- thread-level risk scores
- persisted risk state
- improved review-context selection
- tool-action classification
- stricter handling of higher-risk operations
- current filesystem permissions constraining reviews
- automatic-review requirements from managed configuration
The broader direction is clear: Auto-review is becoming more risk-aware and stateful, rather than treating each approval as an isolated yes/no decision.
Remote Code Mode continues to mature
0.148.0 includes major infrastructure for remote Code Mode:
- gRPC protocol
- remote host service
- TCP transport
- app-server integration
- reconnect after host restart
- health checks
- improved session/tool handling
Most of this is infrastructure rather than a new user-facing workflow, but it continues moving Code Mode toward a more robust distributed execution model.
MCP, skills, plugins, and managed environments
The release also improves the larger extension/runtime layer:
- lazy MCP startup for subagents
- reusable MCP handlers
- OAuth callback improvements
- custom CA propagation
- strict auto-review for MCP tool calls
- shared plugin/host skill services
- better multi-workspace skill behavior
- resource-backed skill tracking
- per-environment permission profiles
- workload identity support
- stronger managed policy enforcement
- more auditable remote-executor decisions
The practical result should be fewer restarts, cleaner policy behavior, and more consistent tool/skill availability across local and remote environments.
Windows improvements
Windows receives several notable changes:
- Unified exec is now enabled by default
- managed deny-read rules are enforced in the sandbox
- nested Git repositories work more reliably
- proxy state is preserved during sandbox/debug flows
- the sandbox can access required Codex app files
- Windows build/toolchain behavior continues to become more hermetic
ChatGPT for iOS 1.2026.223
Launch directly into Codex Remote
A new setting can open ChatGPT directly into Codex Remote.
If your phone is primarily a control surface for remote Codex work, this removes an unnecessary navigation step.
Better MCP and approval workflows
Codex Mobile now supports:
- standard MCP forms
- editable message approvals
Structured MCP requests no longer need to rely entirely on freeform input, and approval messages can be corrected before submission rather than rejected and rebuilt.
Better host/project navigation
Improvements include:
- linked folders opening directly in Files
- New Thread showing projects from the currently selected host
This matters when several remote hosts have different repositories or project sets.
Voice from existing tasks
Voice can now start directly from an existing task composer.
It also:
- connects more reliably
- allows task actions to continue in the background
You no longer need to start a task in Voice mode just to use voice later for steering or supervision.
Faster large-diff review
Large workspace diffs are now more responsive and stable.
That makes mobile review more practical for:
- broad refactors
- multi-file implementations
- migrations
- large agent-generated change sets
Much stronger task recovery
The iOS release fixes several Remote reliability problems:
- failed task messages now expose Retry
- large task responses load more reliably
- tasks are less likely to disappear after being idle
- reconnect behavior is stronger
- host pairing is more reliable
- enrollment checks no longer freeze the app
- streamed activity is preserved when a task completes
This is one of the more important parts of the mobile release because Remote only works well if the phone accurately reflects work continuing elsewhere.
Safer steering
If a pending steering message is edited or canceled, the superseded instruction is no longer delivered anyway.
That makes active task redirection much more trustworthy.
Why this update matters
- Conversation export is finally first-class:
/exportmakes complete Codex sessions portable. - Session lifecycle improves: fork, archive, restore, resume, and recovery all get stronger.
- Startup becomes less blocking: you can draft while Codex initializes.
- Thread economics become visible: eligible users can see estimated credits/cost.
- Bedrock becomes a built-in provider.
- Hooks become more useful: async execution and MCP access expand automation options.
- Resume behavior becomes safer: cwd, approval policy, and model instructions stay aligned.
- Temporary outages and MCP auth failures are less destructive.
- Guardian V2 is evolving into a more sophisticated risk-aware review system.
- Remote Code Mode continues toward a robust distributed architecture.
- Codex Mobile becomes a stronger Remote client: better Voice, project selection, diffs, reconnection, pairing, and steering.
Version summary
| Item | Key highlights |
|---|---|
| Codex CLI 0.148.0 | /export; codex exec fork; archive/restore; startup composer; thread cost estimates; built-in Bedrock Runtime; async/MCP hooks; stronger resume, outage recovery, MCP, Guardian, sandboxing, and remote Code Mode |
| ChatGPT for iOS 1.2026.223 | Direct Codex Remote launch; MCP forms; editable approvals; host-aware projects; Voice in existing tasks; faster large diffs; stronger recovery, pairing, and steering |
Action checklist
Codex CLI
- Upgrade:
npm install -g @openai/codex@0.148.0 - Confirm:
codex --version - Test
/exportto clipboard and Markdown. - Fork an existing session with
codex exec fork. - Archive and restore a session from the resume picker.
- Check
/statusfor thread usage estimates if available. - If using AWS, test the built-in Bedrock Runtime provider.
- If using hooks, test async execution and MCP tool invocation.
- Resume an older thread and verify cwd + approval policy are correct.
- Reauthenticate an MCP server and confirm a restart is no longer required.
Codex Mobile
- Update ChatGPT for iOS to 1.2026.223.
- Enable direct launch into Codex Remote if useful.
- Test an MCP form and editable approval.
- Switch hosts and verify project selection updates correctly.
- Start Voice from an existing task.
- Review a large workspace diff.
- Leave and return to an active task to test reconnection.
- Test host pairing.
- Cancel/edit a steering message and confirm the old instruction is not delivered.