Adds enterprise MCPThe Model Context Protocol — an open standard that lets any AI assistant plug into any tool or data source without custom integration code.Full definition → authentication and credential masking for remote Bash commands, and fixes failed context compactionSummarizing an agent's earlier conversation to free room in the context window so a long session can keep going.Full definition → leaving partial summaries in history. These matter when running Codex in managed environments.
Key takeaways · AI-distilled
Codex 0.164.0 adds ten numbered /presets slots for saving reusable prompts and slash commands, reachable from a keyboard menu, and lets /model and /permissions take inline arguments for model, reasoning effort, speed and permission profiles.
Resumed Codex sessions now locate compressed histories and restore their saved thread settings, where earlier builds replaced those settings with global defaults.
Queued prompts in Codex now wait until pending permission selections resolve before continuing, and CLI overrides passed with -c or --config are kept when the flag appears at more than one subcommand level.
On Windows, Codex HTTPS and WebSocket connections can now answer proxy authentication challenges with the signed-in user's Negotiate or NTLM credentials, and the Amazon Bedrock setup wizard is now on by default.
Codex hardened its sandboxAn isolated environment where AI-generated code or agent actions run without being able to touch anything real.Full definition → checks against case-variant metadata paths on macOS and replaceable symlinks used to locate executables, and now prunes unused installations and bounds daemon logs to cut disk use.
Terms in this piece · Glossary
MCP — The Model Context Protocol — an open standard that lets any AI assistant plug into any tool or data source without custom integration code.
context compaction — Summarizing an agent's earlier conversation to free room in the context window so a long session can keep going.
sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.
