OpenAI shipped Codex rust-v0.158.0 on 2026-09-28 (@openai/codex 0.158.0): MCP servers with pre-registered OAuth client secrets (codex mcp add --oauth-client-secret); bearer-token auth for exec-server WebSockets; fullscreen TUI copy-on-select/right-click paste with Markdown-preserving copies; explicit transparent backgrounds for image gen/edit. Elevated-permission terminal approvals default on; Windows/Linux/macOS sandbox and approval-retry fixes land too.

Key Takeaways

  • ✓Shipped rust-v0.158.0 / @openai/codex 0.158.0 — docs: CLI + MCP
  • ✓MCP pre-registered OAuth via codex mcp add --oauth-client-secret
  • ✓Bearer-secured exec-server WebSockets; elevated terminal approvals on by default
  • ✓Fullscreen TUI copy/paste keeps Markdown; Mermaid quoted labels/& supported
  • ✓Sandbox fixes across Windows 10, Linux nested writable roots, macOS path aliases
🧭

Finished reading? Explore benchmark rankings & pricing

Real-world SWE-bench scores & $20/mo vs API cost break-even calculator

🏆 Leaderboard→💰 Compare Plans↗
🔗

Project Links & Resources

Direct Access
Direct access to official project resources and documentation
🐙
GitHub Release rust-v0.158.0
github.com/openai/codex/releases/tag/rust-v0.158.0
↗
🐙
openai/codex repository
github.com/openai/codex
↗
📖
Codex CLI docs
developers.openai.com/codex/cli/
↗
📖
Codex MCP docs
developers.openai.com/codex/mcp/
↗
🌐
npm @openai/codex 0.158.0
www.npmjs.com/package/@openai/codex
↗
🐙
#47891
github.com/openai/codex/pull/47891
↗
🔬

In-Depth Technical Analysis

Core Background & Industry Pain Points

Local coding agents must close the loop across MCP, sandboxes, and human approvals. Enterprise MCP often needs pre-registered OAuth client secrets; exec-server links want bearer auth; fullscreen TUI copy that drops Markdown and noisy elevated approvals slow the write→run→tool loop.

Architecture Highlights & Internals

rust-v0.158.0 adds codex mcp add --oauth-client-secret (#47891), bearer-secured exec-server WebSockets, Markdown-preserving fullscreen copy/paste, explicit transparent image gen/edit, and default terminal approval for elevated commands with smarter approval retries.

Authoritative Benchmarks & Measured Scores

No public SWE-bench/latency table ships with this release—validate MCP OAuth handshakes, bearer exec-server, and sandbox approval counts on your repos. Do not treat release-footer figures as a general benchmark.

Developer Hands-on Guide

Upgrade with npm i -g @openai/[email protected]. Configure MCP per docs and CLI via Codex CLI. See the release notes.