Codex 0.157.0 enforces network policy across redirects and live WebSockets, and limits local MCP servers to stdio descriptors

GitHub·medium signalXBlueskyLinkedInCopy link

Codex rust-v0.157.0 shipped 2026-09-25 at 02:31 UTC. PR #47389 checks each redirect destination against network policy and holds a revocable permit while reading response bodies and WebSocket traffic, so revoking access cancels the operation that is already running. Policy denials are no longer retried. PR #47094 restricts Unix local MCP servers to stdio descriptors, and #47079 masks daemon socket paths exposed through ancestor bind mounts. The release also adds GPT-6 Sol and Luna, including on Bedrock, makes the fullscreen transcript and automatic background-server startup the defaults, and adds an `f` shortcut to fork a conversation that is open in another app.