OpenAI released Codex 0.154.0 with GPT-6-Astra in the model picker and Amazon Bedrock catalogs, giving Codex users another selectable model while adding experimental worktrees and less disruptive ways to respond during active tasks. The update also changes session behavior across Windows, plugins, MCP authentication, remote work and approval reviews.
Isolated checkouts and ongoing conversations
The largest workflow addition is experimental managed-worktree support. Developers can create an isolated checkout for a new or forked session with --worktree or /worktree, then discover, browse and resume those worktrees from Codex. Because the release explicitly labels this support experimental, it should not be treated as a finalized workflow.
Codex can also present questions inline while continuing its work. Users may select a suggested answer or provide custom text without abandoning the draft already in the composer. Related changes preserve question state and integrate it with history and queue navigation, supporting a more continuous exchange during long-running tasks.
On Windows, sessions can share a background Codex server. The release includes daemon lifecycle support, graceful shutdown work and managed daemon updates, reducing the need for each session to operate as a completely separate server process.
The terminal interface receives smaller usability improvements. Vim users gain R replace mode with undo and dot-repeat, while Escape input is handled more reliably in legacy terminals. Copied responses retain Markdown formatting when pasted into rich-text applications, and /copy can target status output or individual session fields.
Live plugin refreshes and safer authentication
Codex 0.154.0 improves how running sessions react to plugin changes. Existing sessions can discover tools from newly installed plugins, reload user configuration after local installation, and refresh skills and hooks after an external upgrade or rollback. The practical effect is that users should not have to start an entirely new conversation merely to expose updated plugin capabilities.
MCP connections now coordinate OAuth token refreshes so concurrent activity does not independently perform the same refresh work. When refresh fails, Codex preserves and surfaces the authentication challenge. It deliberately does not replay a rejected tool call automatically, a limitation that avoids silently repeating an operation after authentication state changes.
The release also hardens startup and sandbox boundaries. Codex avoids executing workspace-controlled PATH helpers until workspace trust has been established, and its macOS sandbox blocks terminal-input injection. These fixes address two distinct boundaries: code supplied by an untrusted workspace during startup and attempts to feed input into a terminal from inside the sandbox.
Session state and approval safeguards
Remote resume and fork operations now retain saved permission settings. Separately, fresh sessions and forks use model defaults supplied by the server unless the user explicitly overrides them. That makes resumed authorization state and newly resolved model configuration less likely to diverge from their intended source.
If a conversation is already open for writing in another application, a resume attempt now displays a read-only transcript, preserves the user’s draft and offers a retry path. This avoids competing writers while still allowing the conversation to be inspected.
Automatic approval reviews receive additional context safeguards. Codex now better retains authorization context when conversation history is compacted, and approvals are rejected when subsequent instructions or answers make the earlier authorization stale. The release notes describe these as consistency and invalidation protections rather than a broader guarantee about approval correctness.
Documentation and compatibility change
The bundled OpenAI Docs skill has been updated with GPT-6-Astra migration, compatibility and prompting guidance. One deprecated interface is removed: the codex mcp-server entry point is no longer available, so integrations still invoking that command will need to stop relying on it.
The release page identifies the tag as rust-v0.154.0 and links a complete comparison against rust-v0.153.0. The page reports 215 commits to the main branch since this release; that repository status figure is separate from the curated feature and bug-fix list above.
Source: OpenAI Codex 0.154.0 release notes.
Definition. Codex 0.154.0 is a release that adds GPT-6-Astra access, experimental managed worktrees, inline questions and multiple session, security and compatibility updates.
| Change | Effect |
|---|---|
| GPT-6-Astra access | Adds the model to the model picker and Amazon Bedrock catalogs. |
| Managed worktrees | Creates isolated checkouts for new or forked sessions; the feature is experimental. |
| Inline questions | Allows responses during active work without abandoning the composer draft. |
| Plugin refreshes | Exposes newly installed or updated plugin capabilities in running sessions. |
| MCP OAuth refresh | Coordinates concurrent token refreshes and surfaces failed authentication challenges. |
| Workspace and sandbox boundaries | Delays workspace-controlled PATH helpers until trust and blocks terminal-input injection on macOS. |
| Approval reviews | Retains authorization context through compaction and rejects approvals made stale by later input. |
| codex mcp-server | Removes the deprecated entry point. |
Key takeaways
- GPT-6-Astra is available in the model picker and Amazon Bedrock catalogs.
- Experimental managed worktrees provide isolated checkouts for new or forked sessions.
- Inline questions let users respond while preserving the draft already in the composer.
- Running sessions can discover newly installed plugin tools and refresh skills and hooks after upgrades or rollbacks.
- OAuth refresh coordination, startup trust checks and sandbox protections strengthen authentication and security boundaries.
- The deprecated codex mcp-server entry point has been removed.
FAQ
What does Codex 0.154.0 add?
It adds GPT-6-Astra access, experimental managed worktrees, inline questions and updates spanning Windows sessions, plugins, MCP authentication, sandboxing and approvals.
Are managed worktrees finalized in Codex 0.154.0?
No. The release explicitly labels managed-worktree support as experimental.
Can active Codex sessions detect plugin changes?
Yes. Existing sessions can discover tools from newly installed plugins, reload user configuration after local installation and refresh skills and hooks after an external upgrade or rollback.
Does Codex automatically replay a tool call after an OAuth refresh failure?
No. It preserves and surfaces the authentication challenge but does not automatically replay the rejected tool call.
What happens when a conversation is already open for writing elsewhere?
A resume attempt shows a read-only transcript, preserves the user's draft and provides a retry path.
What compatibility change may affect integrations?
The deprecated codex mcp-server entry point is no longer available, so integrations invoking it must stop relying on that command.
