Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-09-19 · high
The same release adds live reasoning summaries and voice mode, then a same-day patch turned reasoning summaries off by default.
Why now: OpenAI released Codex CLI 0.155.0 and patched it as 0.155.1 on the same day, September 17.
OpenAI released Codex CLI 0.155.0 on September 17 and closed a path letting a Windows process escape a restricted WSL sandbox, per Codex's release notes. A restricted sandbox exists so an agent can run commands without touching the host. An escape route defeats that purpose.
The same release adds Touch ID verification for MCP requests on supported Macs, so approval can take a fingerprint rather than a keystroke. It also adds experimental voice conversations with live transcripts and live reasoning summaries in the terminal UI with completion timestamps. Two more additions: configurable daemon update schedules, and AWS credential retrieval from a configured command with caching and refresh.
A separate Codex release restricts plugin installs and MCP interaction to a single root thread, tightening how the CLI handles third-party tool calls.
The reasoning summaries didn't survive the day. Some providers don't support them and were rejecting the requests outright. OpenAI shipped 0.155.1 the same day, turning reasoning summaries off by default in new local sessions.
Each link below shares sources, entities, or timing with this story.
Two PRs merged five hours apart on September 8 wire biometric approval into every Codex agent tool call, and remote workspaces don't get it.
The nightly enforces OAuth issuer checks, isolates the sandbox, and strips a hardcoded Google API key from chrome-devtools-mcp.
Searching, starting, and opening tasks from one view, plus sending messages into existing local or remote sessions. Also /cd, /pwd, /cwd, Vim character-replace and motion commands, and bounded replay buffers to stop excessive memory retention. GitHub Queued messages now reliab...
OpenBot reached 3,364 stars and 412 forks since its 2026-08-17 creation, MIT-licensed and pushed 2026-08-28.
Send Host: localhost and 9router hands over proxy access to its owner's paid OpenAI and Anthropic credentials, no token required.
OpenAI merged the pull request September 7, and Codex speaks only its final answers, keeping reasoning silent.
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.