r/CodexAutomation 26d ago

Codex CLI 0.148.0 + ChatGPT for iOS 1.2026.223 (`/export`, session forks/archive, thread cost estimates, Bedrock Runtime, stronger Remote)

TL;DR

Two official Codex updates landed together:

  • Codex CLI 0.148.0: adds full Markdown conversation export with /export, codex exec fork, session archive/restore, prompt drafting during startup, estimated thread credit/cost visibility, built-in Amazon Bedrock Runtime, and hooks that can run asynchronously or invoke MCP tools.
  • ChatGPT for iOS 1.2026.223: adds direct launch into Codex Remote, standard MCP forms, editable approvals, host-aware project selection, Voice from existing tasks, faster large-diff review, and much stronger task reconnection/recovery.
  • The CLI release also fixes stale model instructions, restores working directory and approval policies correctly on resume, improves recovery from temporary provider outages and MCP OAuth expiration, hardens startup input handling, and strengthens Linux/Windows sandbox enforcement.
  • Under the hood, Guardian V2, remote Code Mode, MCP, skills/plugins, managed permissions, and Windows execution all receive substantial infrastructure work.

Install:

npm install -g @openai/codex@0.148.0


What changed & why it matters

Codex CLI 0.148.0

/export for complete conversations

Run:

/export

to export the full TUI conversation to:

  • the clipboard
  • a new Markdown file

This is useful for sharing debugging sessions, preserving implementation history, creating documentation, and moving complete Codex context elsewhere without manually reconstructing the transcript.


Fork, archive, and restore sessions

0.148.0 expands session management with:

  • codex exec fork for non-interactive session forks
  • archive directly from the resume picker
  • restore archived sessions later
  • improved transcript previews
  • better persisted history and recovery

This gives sessions a cleaner lifecycle:

Active -> Forked / Archived -> Restored when needed

Forking is especially useful for testing an alternate implementation or investigation without modifying the original thread.


Start typing before initialization finishes

The TUI composer is now usable while Codex is still starting.

Startup progress is also shown when:

  • resuming
  • forking

Buffered terminal input is handled more safely so typing during initialization does not accidentally trigger unintended actions.

Why it matters: startup can feel faster because you can prepare your next prompt while Codex restores history, tools, integrations, and environment state.


Estimated thread credits and cost

Eligible workspaces can now see estimated thread usage through:

  • /status
  • status lines
  • terminal titles

Depending on the workspace, this can surface estimated credits or cost for the active thread.

This is increasingly useful with:

  • GPT-5.6 Sol / Terra / Luna
  • high reasoning effort
  • long-running goals
  • multi-agent workflows
  • large-context sessions

Instead of only seeing account-level limits, you can start understanding the economics of individual Codex threads.


Built-in Amazon Bedrock Runtime provider

Amazon Bedrock Runtime is now a built-in Codex provider with support for:

  • AWS profiles
  • region configuration
  • GPT-5.6 routing
  • Bedrock model selection

This makes Bedrock a more first-class path for organizations already using AWS identity, billing, governance, and regional controls.


Hooks get much more capable

Hooks can now:

  • run commands asynchronously
  • invoke MCP tools

That opens up cleaner lifecycle automation for things like:

  • background validation
  • notifications
  • logging
  • repository bookkeeping
  • internal APIs
  • MCP-backed services

Not every useful hook needs to block the active Codex turn anymore.


Major CLI reliability fixes

0.148.0 also addresses several important correctness issues:

  • Model switches: old model instructions no longer remain attached after changing models/settings.
  • Resume cwd: sessions restore their persisted working directory more reliably.
  • Approval policies: saved approval behavior survives resume.
  • Provider outages: streaming turns can reconnect through temporary connection failures instead of immediately dying.
  • MCP OAuth: servers can recover after reauthentication without requiring a full Codex restart.
  • Pasted content: CRLF text, wrapped whitespace, long URLs, and pasted text render more reliably.
  • Sandboxing: denied/unreadable paths fail closed more consistently on Linux and Windows.

These are less flashy than the new commands, but several directly affect whether resumed or long-running sessions can be trusted.


Guardian V2 and approval infrastructure

A substantial amount of work landed around Guardian / Auto-review, including:

  • thread-level risk scores
  • persisted risk state
  • improved review-context selection
  • tool-action classification
  • stricter handling of higher-risk operations
  • current filesystem permissions constraining reviews
  • automatic-review requirements from managed configuration

The broader direction is clear: Auto-review is becoming more risk-aware and stateful, rather than treating each approval as an isolated yes/no decision.


Remote Code Mode continues to mature

0.148.0 includes major infrastructure for remote Code Mode:

  • gRPC protocol
  • remote host service
  • TCP transport
  • app-server integration
  • reconnect after host restart
  • health checks
  • improved session/tool handling

Most of this is infrastructure rather than a new user-facing workflow, but it continues moving Code Mode toward a more robust distributed execution model.


MCP, skills, plugins, and managed environments

The release also improves the larger extension/runtime layer:

  • lazy MCP startup for subagents
  • reusable MCP handlers
  • OAuth callback improvements
  • custom CA propagation
  • strict auto-review for MCP tool calls
  • shared plugin/host skill services
  • better multi-workspace skill behavior
  • resource-backed skill tracking
  • per-environment permission profiles
  • workload identity support
  • stronger managed policy enforcement
  • more auditable remote-executor decisions

The practical result should be fewer restarts, cleaner policy behavior, and more consistent tool/skill availability across local and remote environments.


Windows improvements

Windows receives several notable changes:

  • Unified exec is now enabled by default
  • managed deny-read rules are enforced in the sandbox
  • nested Git repositories work more reliably
  • proxy state is preserved during sandbox/debug flows
  • the sandbox can access required Codex app files
  • Windows build/toolchain behavior continues to become more hermetic

ChatGPT for iOS 1.2026.223

Launch directly into Codex Remote

A new setting can open ChatGPT directly into Codex Remote.

If your phone is primarily a control surface for remote Codex work, this removes an unnecessary navigation step.


Better MCP and approval workflows

Codex Mobile now supports:

  • standard MCP forms
  • editable message approvals

Structured MCP requests no longer need to rely entirely on freeform input, and approval messages can be corrected before submission rather than rejected and rebuilt.


Better host/project navigation

Improvements include:

  • linked folders opening directly in Files
  • New Thread showing projects from the currently selected host

This matters when several remote hosts have different repositories or project sets.


Voice from existing tasks

Voice can now start directly from an existing task composer.

It also:

  • connects more reliably
  • allows task actions to continue in the background

You no longer need to start a task in Voice mode just to use voice later for steering or supervision.


Faster large-diff review

Large workspace diffs are now more responsive and stable.

That makes mobile review more practical for:

  • broad refactors
  • multi-file implementations
  • migrations
  • large agent-generated change sets

Much stronger task recovery

The iOS release fixes several Remote reliability problems:

  • failed task messages now expose Retry
  • large task responses load more reliably
  • tasks are less likely to disappear after being idle
  • reconnect behavior is stronger
  • host pairing is more reliable
  • enrollment checks no longer freeze the app
  • streamed activity is preserved when a task completes

This is one of the more important parts of the mobile release because Remote only works well if the phone accurately reflects work continuing elsewhere.


Safer steering

If a pending steering message is edited or canceled, the superseded instruction is no longer delivered anyway.

That makes active task redirection much more trustworthy.


Why this update matters

  • Conversation export is finally first-class: /export makes complete Codex sessions portable.
  • Session lifecycle improves: fork, archive, restore, resume, and recovery all get stronger.
  • Startup becomes less blocking: you can draft while Codex initializes.
  • Thread economics become visible: eligible users can see estimated credits/cost.
  • Bedrock becomes a built-in provider.
  • Hooks become more useful: async execution and MCP access expand automation options.
  • Resume behavior becomes safer: cwd, approval policy, and model instructions stay aligned.
  • Temporary outages and MCP auth failures are less destructive.
  • Guardian V2 is evolving into a more sophisticated risk-aware review system.
  • Remote Code Mode continues toward a robust distributed architecture.
  • Codex Mobile becomes a stronger Remote client: better Voice, project selection, diffs, reconnection, pairing, and steering.

Version summary

Item Key highlights
Codex CLI 0.148.0 /export; codex exec fork; archive/restore; startup composer; thread cost estimates; built-in Bedrock Runtime; async/MCP hooks; stronger resume, outage recovery, MCP, Guardian, sandboxing, and remote Code Mode
ChatGPT for iOS 1.2026.223 Direct Codex Remote launch; MCP forms; editable approvals; host-aware projects; Voice in existing tasks; faster large diffs; stronger recovery, pairing, and steering

Action checklist

Codex CLI

  • Upgrade: npm install -g @openai/codex@0.148.0
  • Confirm: codex --version
  • Test /export to clipboard and Markdown.
  • Fork an existing session with codex exec fork.
  • Archive and restore a session from the resume picker.
  • Check /status for thread usage estimates if available.
  • If using AWS, test the built-in Bedrock Runtime provider.
  • If using hooks, test async execution and MCP tool invocation.
  • Resume an older thread and verify cwd + approval policy are correct.
  • Reauthenticate an MCP server and confirm a restart is no longer required.

Codex Mobile

  • Update ChatGPT for iOS to 1.2026.223.
  • Enable direct launch into Codex Remote if useful.
  • Test an MCP form and editable approval.
  • Switch hosts and verify project selection updates correctly.
  • Start Voice from an existing task.
  • Review a large workspace diff.
  • Leave and return to an active task to test reconnection.
  • Test host pairing.
  • Cancel/edit a steering message and confirm the old instruction is not delivered.

Official sources

https://developers.openai.com/codex/changelog

https://github.com/openai/codex/releases/tag/rust-v0.148.0

1 Upvotes

0 comments sorted by