CODEX PASS / PRODUCT UPDATES
Features, improvements and fixes across the app and services.
395 entries
The current plan card shows only the plan expiry date.
Permission credential validity moves to Sync details, with a note that it refreshes automatically while online. This client change is awaiting release.
Upload changed file contents and an encrypted inventory each hour. Weekly generations start with an independent seed; every recovery point restores without replaying earlier hourly inventories.
Restore verifies encrypted objects, file hashes and database integrity, and continues to read existing full backups. Initial migration retains all old archives and new recovery points without automatic deletion.
Version 0.1.157 is published. Local end-to-end acceptance restored multiple recovery points and a legacy full archive, including SQLite verification. Production migration and restore acceptance remain pending; only the backup service needs an update.
Fix the disabled next-step predictions switch on Windows. Connect an AI gateway, enable takeover and sign in to ChatGPT, then restart ChatGPT through Codex Pass.
Version 0.6.46 is published with Windows regression checks passing. Native prediction display still awaits Windows acceptance and depends on the current model and ChatGPT preferences.
Secure-channel permissions refresh even when team synchronization fails. Compatibility with older Consoles preserves existing profile ownership checks.
Revoked permissions still take effect, and existing team data remains protected during Console upgrades.
Console 0.1.153 is now deployed with the workspace identity endpoints required by current desktop clients. This restores permission renewal that could otherwise stop after a client upgrade.
Verified with the secure channel enabled: two real model requests completed successfully.
An optional Codex setting shortens recognized base instructions while retaining essential tool rules. It is off by default and includes one-click restore for subsequent requests.
Applies to native Responses requests sent to an AI gateway through the local proxy. Custom instructions, Skills, memory, unknown templates, official account requests, and other protocols are preserved. Savings and task results vary by model.
Press ⌘K (Ctrl+K on Windows and Linux) or the sidebar search button to find pages, tabs and actions. English names and abbreviations also match.
Recent entries stay on this computer. When no entry matches, the final option searches Codex settings for the typed text.
The sidebar toggle sits at the upper-right corner of the sidebar, with space beside its edge. When the sidebar is hidden, the toggle remains available in the upper-left toolbar.
The toggle stays in the window-control row with space around the icon. On macOS it clears the system window controls, including in narrow windows. Keyboard shortcuts and the saved sidebar state remain available.
Changing the model, reasoning effort or Fast mode no longer triggers a configuration alert, including preferences saved in profiles. Other ordinary settings also stay quiet.
External changes to connection and routing settings still trigger a reminder. Deleted, unreadable or malformed configuration files and referenced model catalogs still require attention. Current edits are preserved.
Diagnostic reports include recent failed-request metadata and identify information that could not be collected. Interrupted HTTP 200 streams also count as failures.
Dollar amounts in usage views display two decimal places. Weekly report images retain the full cost summary and place the brand on its own line.
Root administrators can view and download App diagnostic reports, filter their status and save handling notes. Original reports remain available for the existing 90-day retention period.
Team administrators can see ChatGPT emails for team-managed accounts and active personal sign-ins in the member list. Credentials are not returned.
Changes are awaiting release; Console has not been deployed.
Find projects by their Codex names and chats by their titles. Project selection, project filters and chat selection use searchable menus styled for the app.
Instructions follow the project and its chat membership. Renaming a project keeps its instructions; projects sharing a folder stay separate. Existing folder rules are reused only when they identify one project.
Chat instructions override project instructions, then global instructions. Clearing an override restores inheritance. Saved changes invalidate earlier suggestions.
Fixed data synchronization logic.
Fixed data synchronization logic.
Set instructions globally, per project directory or per conversation. Conversation instructions override project instructions, and projects override the global default. Clearing an override restores inheritance.
The settings page shows the saved effective source and instructions. Filter conversations by project and search by title or ID. Composer help uses connected paragraphs. Notification fallback follows the same instructions.
Saved edits invalidate earlier prediction cache versions. Repeated native predictions reuse the previous answer when only helper-message IDs or internal timestamps change.
Nine checks passed with the original signed macOS client and real GPT-6.1 Sol text inference in an isolated profile. Web search/image tools were disabled for this acceptance run; Windows/Linux native runtime was not exercised. Already displayed suggestions refresh on the next native prediction.
When several Codex binaries are installed, discovery selects the stable release over a same-number alpha and correctly orders numbered prereleases.
Build metadata alone no longer triggers an app update or a minimum-version requirement. The Codex version gap does not count multiple builds of the same release as separate upgrades.
Compatibility warnings and macOS/Windows desktop build rules retain their existing scope. This fix is not yet released.
Capability scans and Check updates use the same version comparison, including alpha, beta and release-candidate suffixes.
A prerelease is older than the stable release with the same version number. An alpha of the next version is newer than the previous stable release. Build metadata does not affect version precedence.
Compatibility warnings are retained. This fix is not yet released.
Administrators in Plan and Workspace can open a separate temporary sign-in window through the member account proxy. The window and member dialog show the measured exit IP.
Location follows the exit IP and WebRTC is restricted. Missing or mismatched exits, unavailable routing or expired authorization stop the browser; device anonymity is not guaranteed.
Implemented and not released. Requires the matching Console update and macOS 14 or later on Mac. Native test pages passed on macOS, Windows Server 2025 (WebView2) and Ubuntu 22.04 (WebKitGTK). Real ChatGPT authorization and Windows 10/11 desktop acceptance remain unverified.
A signed desktop administrator endpoint supplies the current pending member authorization and matching account proxy to the native App. Ordinary account lists remain redacted and refresh tokens are never returned.
Merged into the source and not deployed. Update the Console app together with the matching App; core, executor, schema, environment and reverse-proxy changes are not required.
Next-step reminders stay on the computer running that turn, matching turn-cost reminders. Synced conversations no longer generate extra suggestions or consume model quota elsewhere. Continuing on another computer follows its new turn, including when usage logging is off or upstream usage is absent.
Pending Codex settings remain visible after reopening Codex Pass. Restarting ChatGPT acknowledges only settings saved before that restart began, preserving reminders for concurrent saves. Model-picker preferences and unchanged settings do not create a durable reminder.
Doctor can verify that a local route probe actually reaches Codex Pass. Optional native checks compare direct arrival with the Codex Pass proxy environment without credentials or redirects; external Codex process routes remain unverified.
Adaptive routing can score a channel's success rate by a lower confidence bound, so a channel with only a few successes ranks below a proven one until it has enough results. New channels still receive traffic.
Adaptive routing can keep each channel's long-term success rate and first-byte latency in the database, shared by all gateway nodes, so a restart or a quiet period no longer gives a chronically failing channel its full share again. In an end-to-end restart test, failed attempts on such a channel fell from 10–14 to 3–6 per 60 requests.
Both are new options on the circuit breaker settings card (Score Confidence and Long-Term Score Half-Life) and are off by default; with both off, routing is unchanged. Texts cover Chinese, English, French, Spanish and Japanese.
Prepared for review and not released.
Extends the macOS Send-button compatibility to Windows and Linux. With an AI gateway connected and takeover enabled, an exhausted official allowance no longer blocks sending to that gateway.
Please open ChatGPT from Codex Pass to load the required settings. Windows can request a restart for an existing client; on Linux, please fully quit ChatGPT first, then reopen it from Codex Pass.
Released in v0.6.38. Preserves the official login, actual quota recovery checks and configured Official-first thresholds. Windows and Linux native startup paths are tested with isolated fixtures; authenticated native GUI acceptance remains pending. Official voice, image generation and Apps remain subject to their own availability.
On macOS, a connected AI gateway can keep the Send button available when the official ChatGPT allowance is exhausted. Open ChatGPT from Codex Pass; an already running client may need one restart.
The official login, usage percentages, reset times and separate feature limits are retained. Official-first keeps its configured reserve thresholds and checks the real allowance independently for recovery.
Released in v0.6.37. Update Codex Pass, then open ChatGPT from Codex Pass; one restart may be needed. Native acceptance used simulated exhaustion and a local model fixture. Voice, image generation and Apps remain subject to official availability.
MyCP now suggests mostly common English names, with a smaller selection of less common established names. Customers can request another suggestion; free text and symbols remain rejected.
Existing pinyin names remain valid for renewal and synchronization. The matching IdP update is deployed and Console v0.1.151 is published. The operator still needs to update the Console app.
Adds a four-digit @mycp.dev identity beside ChatGPT account binding. One-time CNY 100 payment covers 30 days; display names use generated pinyin. Initial capacity is 25 seats.
Console federation links a fixed user identity with verified payment and single-use login codes. Expiry or refund stops new SSO. OpenAI membership removal is required before an administrator releases a paid seat.
Console v0.1.150 is published and MyCP is deployed. Purchases remain closed until the operator updates Console and configures matching keys, Stripe and verified-domain joining. Live payment and automatic team joining remain to be verified.
Codex first tries a WebSocket connection to the Responses API. Codex Pass answers 426 so Codex uses HTTP. The request log now labels these rows Switched to HTTP and explains that no action is needed.
These rows appear under successful requests instead of failed ones, and they no longer make the tray report recent errors. Other 426 responses and real failures on the same path still show as failed.
Released in v0.6.37. Please update Codex Pass to use the corrected request status.
The AI gateway console adds a Degradation benchmark page next to channel health, visible to administrators.
A fixed probe suite of five SVG drawing tasks and one deterministic logic question replays against every enabled channel on a schedule, every 3 hours by default. Each channel runs one model, chosen the same way as channel tests, and a channel ID list can limit the scope.
The archive shows each probe's SVG output or answer, pass or fail, the failure reason, duration, channel and model. A Run now button starts a round immediately, and root can change enablement, frequency and channel filters on the page.
Texts cover Chinese, English, French, Spanish and Japanese. Prepared for review and not released.
Connection codes accept Apps in the same major.minor series. For example, a code issued for 0.6.1 can connect an updated 0.6.x App. Other series and device platforms must still match.
Requires App 0.6.36 or later in the same version series and Console 0.1.149 or later. Login encryption, device binding, and one-use codes remain enforced. Older Apps keep exact-version checks and do not consume a mismatched code.
Existing login recovery keeps the same device connection when an administrator signs a lapsed ChatGPT account in again. The App retrieves the renewed credentials automatically; the member does not need to reconnect through Console. Explicitly revoked connections still require new access.
Connection codes accept Apps in the same major.minor series. For example, a code issued for 0.6.1 can connect an updated 0.6.x App. Other series and device platforms must still match.
Requires App 0.6.36 or later in the same version series and Console 0.1.149 or later. Login encryption, device binding, and one-use codes remain enforced. Older Apps keep exact-version checks and do not consume a mismatched code.
The release images are published; server deployment is managed by the operator. Existing recovery keeps the same device connection when an administrator signs a lapsed ChatGPT account in again. Explicitly revoked connections still require new access.
Startup checks configuration changes made while Codex Pass was closed. An enabled connection restores its saved route and repairs conflicting model catalog references and matching stale caches, while keeping compatible settings and explicitly saved custom catalogs.
Notifications distinguish restored connections, adopted settings, and incomplete recovery. Failed recovery retries on the next launch. Native model selection and sign-in files are preserved. Running Codex clients must reload their configuration.
Doctor detects custom catalogs even when they contain gpt-* model names, including the active profile. Intentional catalogs can be kept; explicit removal preserves model preferences and catalog files.
Background monitoring reports configuration changes; it does not block other processes from writing files.
Each full restart checks public update requirements immediately. Required updates download automatically; other users can continue using the app and receive the normal update notice.
A minimum supported version can require an upgrade. Existing local package verification and explicit restart remain in place. Earlier clients need one normal upgrade to support these requirements.
Published in 0.6.35 for Windows x86_64, macOS x86_64/arm64, and Linux x86_64/arm64. All five public update packages were downloaded in full and their signatures verified again after Console deployment. Console 0.1.148 is deployed with every rule optional. Native Windows forced-update installation remains pending.
System settings includes App updates, with force-latest and minimum version controls for all platforms, Windows, macOS, and Linux.
Global requirements also apply to each platform. The higher minimum wins, and the required version must have published packages for every supported architecture. Reading the policy requires no login or invitation.
Console and its backup service are running 0.1.148. Core and executor were left unchanged. The public policy endpoint is live; all platform rules remain optional with no minimum version. Legacy connections are not revoked.
The App checks its public IP through the actual ChatGPT route, including enterprise channels, account proxies, Console tunnels and configured local proxies. Signed reports distinguish public measurements from Console connection sources. Requires Console 0.1.146 or later.
Official account keeps Retry available. Failed or stale checks do not reuse a previous matching result; Console browser checks remain separate from the member App.
Raw Codex memories are exported read-only into the storage vault as JSONL. Team uploads are redacted. This is backup-only and is not restored into another computer. Other computers using 0.6.33 or earlier must update before reading the new vault manifest; newer Apps skip unknown entry kinds.
App connection sources, including private enterprise tunnel addresses, are shown separately from measured public exits. Legacy observations are no longer reported as public-exit mismatches.
Member-account dialogs and platform seats can test the current browser directly. Browser results have their own time and do not overwrite the member App result; proxy rules may differ between browsers and Apps.
Updated Apps report a signed public check through their ChatGPT route and identify enterprise channels and configured local proxies. Failed or stale measurements do not claim matching exits. Actual App measurements require the matching App update.
Console v0.1.146 is published with verified amd64 and arm64 images. Actual App measurements are included in App v0.6.34. The Console server still requires an operator update; publication does not confirm deployment.
Account IP checks use the actual ChatGPT route, covering enterprise channels, account proxies, Console tunnels and configured local proxies. Public echo requests carry no account token, Console credential or device proof.
The App automatically measures and signs a minimal report to Console. Official account always offers Retry; failed and stale checks do not reuse a previous matching result. Requires Console 0.1.146 or later.
Released as v0.6.34. The public update feed provides macOS Apple Silicon and Intel, Linux x86_64 and ARM64, and Windows x86_64 packages; downloaded updater packages match their published sizes and SHA-256 digests and pass updater signature verification. Your installed App still needs to be updated.
The Last 24 hours list uses smaller conversation titles to keep recent activity easy to scan. Text continues to follow your interface size setting.
Released as v0.6.34. The public update feed provides macOS Apple Silicon and Intel, Linux x86_64 and ARM64, and Windows x86_64 packages; downloaded updater packages match their published sizes and SHA-256 digests and pass updater signature verification. Your installed App still needs to be updated.
Changing a conversation model or reasoning preference no longer raises a configuration warning, including inside profiles. Connection and permission changes and damaged configuration files still raise alerts.
Usage logs can filter for saved request content, with request and response content shown before technical details. Capture also covers model catalogs, MCP, invalid requests and unmatched routes; existing limits remain, and pairing credentials are excluded.
Share links provide Markdown instructions for AI agents, with visitor API and MCP access. The Sharing page can copy AI access instructions. Existing invitations, limits and moderation rules still apply.
Remembering a model or reasoning preference no longer triggers an external configuration warning, including when using configuration profiles.
Connection, permission, and other monitored settings still trigger alerts. Missing, unreadable, or malformed configuration files still trigger alerts. Current settings are not overwritten.
Released as v0.6.32. macOS Apple Silicon and Intel, Linux x86_64 and ARM64, and Windows x86_64 packages are available through the public update feed. Your installed app still needs to be updated.
Restore the saved or system appearance before application scripts and styles load, avoiding a white canvas when refreshing dark mode.
Local browser verification covers Chromium and WebKit. Deployment remains pending.
Restore the saved or system appearance before application scripts and styles load, avoiding a white canvas when refreshing dark mode.
Local browser verification covers Chromium and WebKit. Deployment remains pending.
Use the Contains request data filter to find requests with viewable content, including records beyond the first page.
Rows with request data are marked in the list. Request and response content appears before technical details.
Recording also covers model and plugin catalogs, MCP and HTTP handler failures. Pairing credentials are excluded. Existing size and retention limits still apply.
Released as v0.6.32. macOS Apple Silicon and Intel, Linux x86_64 and ARM64, and Windows x86_64 packages are available through the public update feed. Your installed app still needs to be updated.
Team owners and administrators can set monthly and total USD limits from a member’s usage dialog. Both limits apply alongside account-wide limits.
Each member’s budget counts only spending in the selected Workspace. Dollar usage and remaining amounts are shown first; Token and request controls remain available.
Console and Core are deployed to v0.1.131. Existing member caps remain unlimited until a manager sets them.
View monthly and lifetime limits, used amounts and remaining amounts for both your account and the connected Workspace. Console v0.1.131 or later is required for team limits.
Dollar costs take priority in usage views, with pending and settled charges kept distinct.
Published in v0.6.30 for macOS, Windows x64 and Linux. The in-app update feed serves this release; GitHub labels it as a prerelease. Microsoft Store submission is blocked by listing search terms.
Set monthly and lifetime USD limits together across an account’s devices and Workspaces.
Usage shows remaining amounts and per-request fees, with outstanding reservations explained.
Console and Core have both been deployed to v0.1.130.
The Model usage page tells your own turns apart from what Codex Pass features spend, and adds a "By project" view.
Next step suggestions now offer composer predictions only.
Editing a channel keeps its saved API key until Replace key is selected.
Apply enabled ChatGPT features with one restart on macOS.
Codex no longer shows five 405 retries before each answer while composer predictions are on.
A short network drop no longer fails requests that go through the enterprise secure channel.
Spare tasks use official weekly quota that would otherwise expire.
Check & repair → Processes shows which project, conversation and command uses CPU and memory when ChatGPT or Codex slows down.
Check & repair → Processes now works on Windows.
Codex memory extraction can run on a local Ollama model.
Composer predictions are now a delivery option of next-step suggestions.
The Home page no longer shows forwarding as off while composer predictions are on.
A one-time term and a subscription never fund the same Workspace at once.
Root can audit how a plan was activated.
A bought plan is not offered again by default.
Root can tell a Solo Team trial from a paid plan.
Entitlement tokens are bound to one sharing connection.
Bind entitlements to the sharing connection. Explain deleted shares and specific voice failures.
Release idle processes from previous pages. Show busy conversations read-only, then take over when available. Use the model selected on the computer.
Sync client, Remote and Share sources in an isolated worktree while retaining enterprise identity, service origins and signature checks. Local source sync only; unpublished.
Next-step suggestions work with device-bound team connections.
Show predictions in the Codex composer.
Next step suggestions can use your connected AI gateway and pick the model from a list.
Next step suggestions for Codex.
Next step suggestions can now fill the composer automatically or from a shortcut.
Non-streaming Chat Completions replies from an AI gateway are no longer rejected when they contain "tool_calls": null.
The Next step page now says when the system blocks its notifications.
Complete service-tier pricing defaults and improve protocol receipt handling.
Keep token models in the correct pricing list.
Cache writes retain their billing duration.
Import and check a team's New API prices.
Explain estimates and reconcile supplier credits.
Native quotes preserve their units.
New models require a complete billing price.
Unknown receipts wait for pricing review.
Own AI gateways use the team's agreed prices.
Responses from third-party relays are checked before they reach Codex.
Pending model prices refresh their source evidence.
Model prices show coverage and preserve administrator decisions.
Deferred charges use the original request price.
Own AI gateways have separate cost estimates.
The Team page no longer says channel exits wait for a paired server when the plan includes the platform's channel.
Home switches keep their normal proportions.
Plan & workspace now opens with your plan, features, and limits.
App settings shows one set of network controls at a time.
Home and Voice fit a narrow window in English.
Team administrators write the secure channel's split rules as a list of sites, one per line.
A platform proxy no longer reaches a team's own channel server.
Refresh Modern administration, per-turn settlement and price provenance. Catalog snapshots do not establish live provider availability.
Sync official feature data through rust-v0.163.0. This is the Codex source version.
Home now leads with account and gateway status.
The desktop interface is easier to read and navigate.
Privacy mode is in Codex configuration → Advanced.
AI gateway errors that pass through Cloudflare now show their real reason.
Lock Codex configuration has moved to the Codex config page, under Advanced.
The Personal edition's key has one name everywhere.
Codex can change models and settings again on macOS.
Personal can be purchased inside Codex Pass and activates itself once the payment completes.
A Solo Team trial pauses the Personal trial instead of using it up.
When a workspace plan no longer includes the hosted ChatGPT sign-in, Codex Pass removes it from this computer and says so once.
Codex configuration is protected from other applications on macOS by default.
Signing in can recover when another application occupies the local route port.
Environment checks identify local port owners and competing Codex routes.
External Codex configuration changes now trigger background alerts.
Team administrators can manage members directly in Codex Pass.
Paid cloud plans now appear under their product names: Solo Team, Team and Team Max.
Cost estimates without a Console connection now follow the same rules as Console and the Gateway.
Web searches are priced in usage costs.
AI gateway models can be priced as an official model.
Cost estimates use the prices cp.dev publishes.
Codex Pass no longer fetches prices from models.dev.
Hosted ChatGPT sign-in follows the plan.
Solo Team trial.
Personal overview
The license key is emailed after payment.
New /personal/done page
Save a key to your account from a link.
Root manages perks
Personal devices are root's setting.
Proxy updates recheck administrator authority after acquiring the workspace write lock, so a role change cannot leave a queued write authorized.
The page's explanation is rewritten in plain words in all five languages: most of these requests are settled automatically; nothing here costs extra credits or changes the bill; only members with a monthly Token limit are affected, because an unconfirmed request counts toward their limit at an estimate; to resolve one, open Request details and enter the actual usage.
Manual catalog prices accept any spelling of a service tier.
A Team Max Workspace's purchase page offers no other plan: it keeps its current plan, credits and records and shows the renewal contact.
Promotion codes are found and checked before checkout.
The billing page response adds each plan's features, entitlements and maxDevices, plus freePlan and unlimitedPlan for the comparison.
A live Solo subscription upgrades to Team without canceling.
Accounts holding a paid lifetime license (bought signed in, claimed by key, or credited) no longer receive the Solo lifetime award; the evaluation is recorded as excluded (paid_lifetime).
No more guessed prices.
Stopping an answer is billed for what was served.
App prices.
Ledger: cp_relay_requests gains pending_reason, price_version_id, usage_source; price source catalog and pending.
Keep conversation-specific failures from suspending a channel. Preserve input usage from Claude upstreams.
Administrators can split the enterprise secure channel by site with a PAC script.
Cost labels name where a request went.
The usage overview no longer counts subagent and rerouted requests twice.
Team storage redacts conversations and memories before sealing them.
The AI gateway has one name everywhere.
Each page's own refresh button is gone.
Codex settings can limit which websites the Codex in-app browser opens.
Input, menus and conversation updates now respond with subtle, continuous motion across App, Share and Remote.
Team storage can keep its keys with the team instead of the Console.
The sidebar and edition names are now the same everywhere in the App.
On the Web search page, the Chinese status line names the section that is actually shown.
Administrators can export a member's content from team storage.
Skills sync can keep its vault in your own storage.
The startup guide links to cp.dev sign-up.
A startup guide replaces the old first-run guide and checks the environment first.
ChatGPT can be installed from inside the guide on macOS.
Team storage: members' content goes straight to the team's own bucket.
Plans ask for a term and a payment method separately.
Credit packs on a Workspace without a paid plan now say that a paid plan comes first and point to the plans, instead of "No top-up packs are on sale yet".
Public pricing page, /pricing.
Every relayed request has a ledger id the App can look up.
A positive balance below the estimate no longer refuses the request.
A Personal purchase can come with trial credits.
The System page lists saved Resend keys by their last four characters and sender, adds keys one per line and removes them one at a time; keys are still never sent to the browser.
Default-service settings align model fields, move source-list help below its input, group channels, and simplify memory settings.
Under team-held keys, team memory is merged by an administrator's App.
The team storage page shows who holds the keys.
Public App downloads (docs/app-downloads.md).
Trial credits need a verified email address.
Diagnostic reports need a device connection.
Removed: the invite beta.
New personal workspaces use <display name or username> 的 workspace.
Project backups made with team storage on live in the team's bucket.
The CORS rule the team storage page suggests now includes PUT, which project content needs.
The team memory page decrypts in the browser.
Go side of the cpv1 format
The legacy erase now also removes the team memory contributions the Console kept.
Fixed: when two first requests created the same member or shared vault at once, the losing request answered with its own discarded key instead of the stored one.
Workspace switching shows each workspace’s effective edition beside its role.
Administrators can erase the copies the Console kept before team storage.
Personal users who keep sessions in their own storage can erase the Console copies.
Reclaim stores no content when team storage is on.
Prepaid renewals retain the original calendar day after a short month.
Deployment for the five-edition rollout: update console app first and confirm its database migrations finish, then update console-core before enabling the new plans.
Team gifts arrive monthly, regardless of payment interval.
Restore only the current monthly gift after an official weekly reset.
Unlimited enterprise plans retain usage accounting without charging the wallet.
Devices get vault keys and scoped pre-signed URLs.
With team storage on, member content no longer lands in the Console.
Sync feature data through rust-v0.162.1.
Import pinned client and supporting service sources. Complete customer acceptance remains separate.
Settings → Reset and diagnostics: reset the Codex configuration to its official state.
Settings → Reset and diagnostics: a diagnostics report you can read before sending.
On macOS, the local proxy credential Codex Pass hands to ChatGPT at launch no longer appears on any process command line.
Uninstalling Codex Pass on Windows no longer deletes files that other applications keep directly in your user Programs folder.
Removing another tool's model list now also clears the saved takeover backup.
Expired voice attestations are swept every ten minutes.
Private Playground conversations are erased after a retention period.
GET /desktop/v1/chatgpt-download/files/:name streams the installer.
System administrators review reports under /api/desktop/v1/admin/diagnostics
Add amd64 and arm64 image build support and encrypted off-site backups through Console.
Codex Pass now checks the signature of the compatibility notes, quota policy, hook descriptions and feature descriptions it downloads from the public mirror.
The enterprise secure channel is rolled out in stages.
The enterprise secure channel can run on a server other than the Console.
Per member, from either page.
Connection security keeps only pairing and device binding.
A paired channel server that reaches the Console over the internal network shows as "internal network" instead of a private address as its exit.
On start the Console moves 0.1.62's channel exits into the pool under the same IDs (member exits, defaults and usage keep pointing at them), merges entries with the same address and empties cp_workspace_channel_exits (the table stays for a pinned core, so the schema check passes and core needs no upgrade).
Traffic per member.
New internal endpoints for the server (GET /internal/v1/secure-channel/exits, POST …/exits/report, POST …/usage); the lease carries exitId and exitProxy.
Policy version 3 (X-CP-Secure-Channel-Policy: 3) adds destinations to the signed policy (all for a Workspace's own server, allow with the host list for the platform's), so the next App sends only those connections into the channel.
A paired server reaches devices only after the Console checked it.
Pairing is the only way to set a Workspace's server: the address and trust-anchor fields are gone from the page and the settings endpoint ignores them.
The platform's own channel, for plans with platform_channel, is a cp-channel server named by CODEXPASS_SECURE_CHANNEL_ORIGIN with its inner CA in CODEXPASS_SECURE_CHANNEL_CA_FILE (and a platform token from CODEXPASS_SECURE_CHANNEL_SERVER_TOKENS); without the origin there is no platform channel.
Add an independent enterprise desktop and Windows/macOS preview builds. Bundle an optional standalone channel that upgrades do not automatically enable.
Enterprise administrators can provision a secure network channel.
Sharing and remote access now accept only recent entitlements from the member who owns them.
Codex Pass now checks the signature of the official model catalog from the public mirror before Codex uses it.
The standalone channel server moved to its own repository
A Console-assigned team exit is now used only with CHANNEL_FOLLOW_TEAM_EXIT=true (or the page's switch); an organization's server uses its own exit.
A paired server's token is limited to its Workspace.
An organization can bring its own channel server.
Managers can exempt one device from the channel for up to 168 hours
A live bound connection can always reach the Console through the channel,
Newly provisioned secure-channel server certificates are valid for 365 days.
A malformed CODEXPASS_LICENSE_SIGNING_KEY (for example with quotes or a placeholder) no longer stops the console.
Require recent member-owned entitlements and pause visitor answers when sharing is no longer included.
Support English, Simplified Chinese, Traditional Chinese and Japanese. Explain revoked browsers and clear their saved key.
Sign catalogs, quota policy, annotations, hooks and compatibility data. Production publication rejects unsigned payloads.
Move Remote and Share to Node.js and SQLite. Organize services with Compose while retaining access controls and customer configuration. A supporting-service milestone for the enterprise client.
AI brands are easier to recognize, and Home icons have more breathing room.
Remote control shows file changes correctly when a changed line itself starts with "---" or "+++".
When your computer goes offline, the remote-control page clears pending approvals and stops waiting,
The Session Sync entry in the sidebar is now called Sync.
Deploy this Console version and the existing platform signing key before that Desktop release: bound clients need a signed policy even when their plan does not enable the channel.
The retail multiplier hint no longer says a plan can override it; every Workspace has paid the platform multiplier since 0.1.34.
Add an offline OpenSSL 3 provisioning script for an encrypted dedicated CA, a 90-day channel server certificate and a public desktop trust profile.
Preserve account exit proxies and enforce public destination and team proxy checks.
Apply provider capabilities to protocol conversion and improve settlement of interrupted streams.
Clean up closed and expired shares. Keep working folders and real conversation IDs out of cloud payloads.
Separate host credentials from pairing links, revoke individual browsers and provide entitlement-controlled encrypted Skills storage.
Background memory, suggestion and title-generation tasks no longer show conversation cost notifications.
Testing a model connection reports the most useful failure.
The Models page no longer locks up when the entry being edited disappears after a refresh.
Request and access logs show when a refresh or "load more" fails
The desktop app no longer opens the WebView context menu on right-click.
The contact panel has more space above and below its content.
Turn-cost notifications lead with the cost of the latest turn.
Update only the console app container.
A connection made with the member's own login now ends only when the console revokes it.
The connections page shows a member whose team account is not working that they may sign in their own account meanwhile, when the policy allows it, and offers "Use my own ChatGPT account" next to a working team account when the policy is "Allowed, and used first".
Update the console app container; the new own_login_policy column on cp_pool_accounts is added automatically.
This also applies when the team account's refresh failed: the member waits for the administrator to sign it in again instead of claiming a free account.
The connections page shows only the status of the team account to a locked member, without the own sign-in form or the free account, and the member list tells administrators that signing in an account replaces the member's own login in the team.
Update only the console app container.
Connection-code form: the project picker moves into "More options" next to device compatibility, so device name, the ChatGPT replacement choice and "Create App connection code" fit on one screen.
The list of authorized apps is padded inside its panel with a line between rows (the 0.1.38 panels put text and buttons against the panel edge).
The activity log, team knowledge and backup lists get the same inset and row lines.
Update only the console app container.
Simplify Chinese feature and hook descriptions while preserving source grounding.
Turn-cost notifications open their Codex conversation.
The ChatGPT Account page says whether Codex Pass touched Computer History.
Shared conversations (share.cp.dev) and remote access (remote.cp.dev) use the same canvas-and-glass look as the App.
Tray connection status now refreshes immediately after workspace changes.
Voice: the device verification success message points up to Realtime voice chat.
Doctor → Memory reports only failures after the last success.
After activation, Get started opens Home and checks this computer again.
Picks up the current shared design library: higher-contrast secondary text in light and dark mode, consistent icon spacing and the current palette set.
Update only the console app container.
Company memory ranks entries by recent use as well as agreement.
Members' "Mark wrong" in the App now reaches Console (PUT /desktop/v1/team-memory/flags, the device's complete list).
scripts/team-memory-e2e runs the merge, ranking and flag flow against a local console started by scripts/dev.sh, signing requests like the App, and writes the transcript as its artifact.
Update only the console app container.
The invitation email now says that people without an account can sign up through the link without a separate invite code.
Update only the console app container.
Add automatic synchronization for new official Codex tags.
Organize more than 20 task titles at once.
Sharing: long conversation titles are cut short, and the editor height follows the page.
Windows: configuration writes no longer fail with "Access is denied".
Connecting or switching providers keeps the MCP servers you added yourself.
Reconnecting a saved custom API keeps its API format, routing switch and name.
A shorter sidebar.
The home page starts from Codex itself.
The official quota reserve is kept for voice and Live.
In-app updates no longer sit at "Downloading…" while the Console is slow to answer.
Unlock local features with a local edition license.
Every feature in the catalog now has its own gate.
Find and continue Share and Remote conversations more easily.
A member whose own login is signed out (by them or by OpenAI) can now enter another ChatGPT email instead of being refused with "Disconnect the existing ChatGPT account".
Update only the console app container.
Member entitlements list every catalog key with enabled and reason, add maxDevices, and apply a new step after the Workspace policy: member_off.
Issuing or redeeming a connection for a member who has reached the plan's device limit is refused with HTTP 409 device_limit_reached and the limit; connected devices are never cut off.
Every Workspace now buys model credits at the platform retail multiplier.
Separate inference Core and administration control delivery.
Simplify sharing workflows and recovery when an action cannot continue.
Simplify remote connection workflows and expose recovery actions.
Add reviewed Codex quota-plan policy data.
Restart ChatGPT reliably right after it opens.
Authenticate Workspace Anthropic services with x-api-key.
Bound combined proxy retries.
Recover transient Responses failures before output.
Isolate and bound cached state.
Choose language and appearance before activation.
Give desktop controls and columns consistent room.
Include local Codex sessions in usage totals.
Give expanded license details more space below their headings.
Hide the duplicate macOS window title.
Add the optional CODEXPASS_INFERENCE_BASE_URL setting: the origin new App connections send model requests to.
Update both containers, the console app first and then the model relay (console-core), and announce the relay update in advance: set CONSOLE_CORE_TAG to v0.1.33 in .env.
Existing services become relayed: their keys are no longer sent to member Apps, which remove them at their next sync.
Update both containers, the console app first and then the model relay (console-core), and announce the relay update in advance: set CONSOLE_CORE_TAG to v0.1.32 in .env.
Add "Detect format" to the service form.
A TypeSafe Jev service is a decision service, not a model provider: it is sent to member Apps in a new decisionServices list, it never appears in the member model list, and it accepts exactly one model.
Update the console app container only.
This update needs the console app container only.
The usage alert page explains that requests using models provided by the platform are confirmed automatically, usually within an hour.
Requires a gateway that offers GET /api/reseller/v1/requests.
Update the console app container only.
Rename settlement alerts to "Usage to confirm" and rewrite the page in plain language in English, Chinese, Japanese, Spanish, and French: what the listed amounts are, that they are not charged, that they only affect members with a monthly Token limit, and when no action is needed.
Update both the console app container and the model relay (console-core): the new zero-usage rule runs in the relay, and the one-time cleanup runs in the app.
Update the console app container only.
Update the console app container only.
Show members by their display name consistently across lists, account dialogs, ownership, project handoff, model access, and memory access.
Add password visibility controls, preserve unfinished input when switching sections, confirm before discarding memory drafts or removing a domain, and make invitation setup actions lead directly to the relevant controls.
Replace internal setting names and technical explanations with clearer labels and guidance in English, Chinese, Japanese, Spanish, and French.
This update changes Console pages and member display data only.
Upgrade a personal Workspace to a team in place.
Change a paid plan's terms in place with a scheduled change instead of copying it into a new version.
This update needs the console app container only.
Show device names separately from compatibility details and hide disconnect actions for expired or revoked connections.
This update changes Console pages only.
Keep web search fallback controls usable when a save reply is lost.
Align the action buttons on the Voice page.
Add "Sign out" for root's pool accounts.
Check the ChatGPT sign-ins that members and workspace administrators added for themselves, not only pool and team accounts.
Sidebar regrouped around the product's main features.
Display top-up offers, balances, wallet history and redemption results as USD usage amounts instead of mixing internal credits with estimated model tokens.
Preserve a 44px minimum hit area on narrow screens and retain unsaved input when sections are collapsed.
Redesign Trials & gifts around the user's available promotional balance, nearest expiration, and individual gift balances.
Localize the invitation welcome gift in all five languages, keep expired, exhausted, revoked, and other-workspace grants out of the available total, and show claim duration, limits, loading, retry, and empty states.
Avoid reporting a proxy connection failure as an authentication error when its URL or port happens to contain 407.
Let connected App users buy credit packs for their personal Workspace through device-authenticated Stripe checkout, with balance and purchase history.
Pass native Responses through custom OpenAI endpoints and preserve structured-output constraints.
Associate macOS background startup with Codex Pass.
Workspace sync stays inside Codex's own files and never widens a project to the whole disk.
The Local Route sends each key only to its own connection and holds up against faulty AI gateways.
Official traffic leaves through the exit the administrator chose for the account.
A voice attestation capture always mints a new certificate.
A timed ChatGPT seat now ends on this computer at the minute the console set, and its token is refused from then on.
The sidebar marks Settings when a new version is available.
A Workspace page manages the cp.dev account, plan and member invitations.
The 官方账号 page is now 账号额度设定 and only covers the ChatGPT account and its quota.
Doctor → thread titles generates titles with the model each conversation uses.
The App calls your model endpoint an AI gateway instead of a relay.
Text in the App, share pages and remote pages is polite and formal in every language.
Mission Control finds the CLIs you actually have, including Antigravity CLI and Kimi Code.
Keep persistent state outside panel-managed directories to avoid permission resets affecting login.
Bind a managed ChatGPT account's device traffic to the server's exit (docs/egress-binding.md, first step): the connection payload and credential snapshot carry an egress block for Apps from 0.5.50 ({"mode":"console"} for a root pool account, {"mode":"device","url":…} with the proxy for a team member account with one), GET /desktop/v1/egress/whoami tells a connected App which address it arrives from and records it, saving or testing a proxy learns the address the console leaves from through it (via the public GET /api/desktop/egress/echo), and administrators see the server and App exits side by side in the member dialog, the pool's proxy list and seat list.
Tunnel a pool account's OpenAI traffic through the console: GET /desktop/v1/egress/tunnel?host=…&port=443 (sync key and device signature, WebSocket) pipes the device's own TLS session to an OpenAI host through the account's egress proxy, or from the server itself when the account has none, so the console never decrypts it.
Regularize page layouts: one page width for every workspace and administration page, metrics as one framed row, the overview as full-width connect block plus two equal panels, one level of framing per page (boxes inside a panel become divided blocks or inset panels), the plan and balance section as a side navigation instead of a second row of tabs, and System settings without its duplicate card heading.
Let the desktop App's Workspace page show the member's account, Workspace and plan, and let owners and administrators create, list, re-copy and revoke member invitations with the App's device credential (GET /desktop/v1/workspace, /desktop/v1/workspace/invitations).
Use formal, polite wording in every language (Chinese 您 and 请, Japanese です・ます, English without contractions, Spanish usted, French vous), including messages returned by the server.
Connect Stripe from System settings: the secret key and webhook signing secret are saved sealed and applied at once, with the environment variables as fallback.
A voice attestation capture removes its certificate when it ends.
The errors Codex shows from Codex Pass now follow the App language.
The rest of Codex Pass's errors now follow the App language too.
Official first now brings a conversation back to ChatGPT once it can take it again.
When the relay fails for a conversation Official first moved there, the error says why and how to get back.
Turn-cost notifications now read as a cost reminder instead of a chat message.
Replies on the official ChatGPT card now stream, and their usage is recorded.
Group general settings, members, client preferences and activity behind bookmarkable workspace tabs.
Show existing devices before installation guidance, distinguish device names from platform details, and separate downloading the App from connecting a new device.
Use a compact workspace summary and narrower settings pages, with responsive navigation and the shared light/dark theme.
Prefill App connections with the latest published desktop version and detected platform, enable ChatGPT account replacement by default, and align its checkbox and explanation on narrow screens.
Apply consistent information layouts across system administration, personal workspace and authentication pages while preserving the shared palette.
Keep directory search, filters and pagination outside scrollable tables; add sortable plan columns, column visibility and contextual actions while retaining server-side user and workspace pagination.
Order channels by cost, throughput and capabilities. Fetch and compare prices before administrator review and application.
Sharing, Remote access and Doctor use the Codex CLI that ships inside ChatGPT on macOS and Windows.
Read shared conversations in a two-column layout.
Opening a native Codex thread from the sharing page or Mission Control uses the neutral codex_open_thread command; the desktop project list file name lives in codex_config, so the workspace module no longer depends on the remote-access module.
Jev decisions use TypeSafe's native API through the relay and pause after repeated failures.
Use concise, formal language throughout the desktop client.
Scrolling next to the sidebar no longer drags the whole window on Mission Control.
Shorten plan catalog instructions and collapse Stripe price configuration by default, preserving unsaved input when it is reopened.
Clarify that Gateway reseller access must be enabled before issuing a reseller key.
Include repeatable browser checks for card spacing, table scrolling, search and billing drafts across desktop and mobile widths in both themes.
Separate current plans, permanent balance, trial benefits, saved configuration and device reports.
Improve administrator directories, plan pricing, subscriptions, channels and system settings.
Fix narrow-screen table readability, form alignment, recent-project ordering across time zones, and draft retention while switching settings categories.
Give each user a personal workspace and manage time-limited trial benefits independently of their base plan.
Organize personal workspace pages around existing connections, projects, knowledge, backups, API channels, usage and saved configuration.
Distinguish permanent balance from trial benefits, pending usage from confirmed usage, and saved configuration from App application reports.
Add a sidebar reading layout and enforce Console sharing entitlements.
Rebuild the desktop home around one question: can Codex use Codex Pass right now?
Add account channels, credential refresh, usage cooldown and overload protection.
Show the translated Retry label when remote pairing cannot load.
Updates come through the cp.dev console, and App downloads are no longer public.
The download link for a database from a newer version opens the console's download page.
The website describes what Codex Pass does today and collects sign-ups for the invite beta.
Every waitlist sign-up on the website reaches the Google Form.
Remote buttons keep their visible primary action and outline.
The app, shared conversations and remote workspaces now feel like one product.
The Doctor's memory pipeline card can change the memory models while runtime policy management is off.
The thread titles page lists a long task once and no longer rejects it as changed.
A failed title generation says why the model stopped.
The content guidelines read like a note to colleagues.
Auto delegation planners can use exposed models from the current connection's model pool.
Visitors and sharers can report messages, participants and AI answers.
Sharers can remove messages for everyone and block participants.
Shares are clearly invite-only, with replaceable links.
Connect with your Google account instead of pasting a code.
Website policies explain product data and service use in plain language.
The Privacy Policy and Terms of Service name FLOWNET TECH LLC as the operator.
Mission Control preview:
Workspace project launches no longer get stuck or run templates unattended.
Voice relay and company memory citations recover from server refusals.
Add health probing, recovery, alerts, channel proxies and model usage limits.
Moderate discussion before display. Add reporting, blocking, message removal and invited-only access.
Company memory citations are reported to the Workspace.
cp.dev connections are bound to this computer.
A workspace can ask this device to open a project in Codex.
A pushed thread that fails midway no longer leaves a new orphan Codex thread every 45 seconds.
An unreadable Codex Desktop state file is left alone.
Workspace memory sync no longer blocks reclaim and the other workspace commands when the server refuses an upload.
The connect card no longer prints a doubled sentence mark after a cp.dev claim failure.
The remote web page holds approvals for threads you are not looking at.
The remote web page follows the Cursor agents workspace.
Company memory reaches the server the same way the rest of the app does.
Preserve approvals in other conversations and restore archived conversations.
Remote access pairing and a more complete web client.
Code samples on the remote web page use Streamdown's code card.
The remote web page uses the shadcn blocks shell.
The remote access web page was rewritten.
Usage accounting no longer writes to SQLite on the proxy's request threads.
The proxy notices panel showed "…" while loading because it asked for a translation key that did not exist; it now says "Loading notices…" in all four languages.
Remote access points at [link omitted] the address 0.5.5 shipped with no longer serves the relay.
Codex Doctor now reports "installed but not recognized" instead of "not installed" when it finds an OpenAI-signed desktop app under an unknown identity.
Windows installs of the current ChatGPT desktop app are detected again.
Sharing works on Windows and Linux: the host now finds the installed Codex CLI instead of assuming the macOS desktop path.
Team memory collected nothing on Windows.
Codex Doctor now surfaces compatibility intelligence for the config surface this app manages.
Jev decision models now automatically enable Jev Auto and optional MCP tools when discovered on the active managed connection.
Bring your own TypeSafe key for Jev.
The connection-result banner now follows the interface language instead of staying in the language that was active when it appeared.
Codex 0.155 no longer shows a sign-in wall over the tasks and usage pages while Codex Pass is connected.
When a connection cannot carry Codex's own web search, the notice no longer claims search is gone — it names the built-in search that took over.
Team memory: what this computer learned in a shared repository can now reach the rest of the team, through Codex's own memory extension directory.
Web search now works on every connection, and it runs on the signed-in ChatGPT account.
Creating a sharing link no longer lets the whole window scroll, taking the logo and the top bar off screen.
Switching views, opening menus and toggling controls now animate briefly instead of jumping.
The connection page names the product Codex Pass
Full-access shares stay bound to their own guest branches, and creating one still requires an explicit desktop confirmation.
Models a relay only serves over Chat Completions now work in Codex without manual setup.
The Sharing page no longer shows a whole first message as a conversation title.
Mounted macOS installers display the CP brand icon.
Checking for updates no longer fails when a release has no package for this platform yet.
Failed update downloads and installations can be retried without checking for updates again.
A truncated Claude response stops forwarding tool calls as soon as a tool-argument envelope fails.
The release page and the app's "What changed" text list what the version changed.
Settings rows are separated by dividers.
The tray menu no longer closes by itself, and its entries respond to clicks right after launch.
Sharing no longer leaves dozens of cut-off plugin catalog requests in the request log.
Claude tool calls that ignore the transport envelope are passed through instead of rejected.
Pausing reception always stops the local sharing host.
Upgrading a hand-written installation of the retired built-in sharing service keeps its Codex path, model and gateway settings.
The desktop refreshes built-in sharing DNS on startup, when opening Sharing, and when using its refresh button.
Pausing reception confirms that shared links will also stop accepting messages.
Claude tools with union or composed parameter schemas now work through the local proxy.
Claude tool calls can continue when the preceding response contains no thinking block.
The bilingual product website now presents device setup in an interactive console and separates available features from the roadmap.
The optional upstream diagnostic recognises any 400 that mentions a call ID and records the request as it was actually forwarded.
Tool call error diagnostics moved from Settings into Codex Doctor › Check
Third-party models that reason but publish no effort levels now advertise low / medium / high in Codex's catalog; models that do not reason advertise none.
Shared conversations use the Codex Pass logo and support light, dark and system appearance.
Shared conversations are easier to read and navigate.
Shared conversations use fewer cloud requests while idle.
A failed branch now says why, and the two messages no longer contradict each other.
The sharing panel shows when the background sharing service stopped on its own
The visitor page names a missing share
GPT-5.6 Sol was priced at $5 / $30 per million tokens; the current list price is $4 / $20
Codex Pass tells you what a turn cost when it finishes.
GPT-6 usage is priced.
A compromised sharing service can no longer make Codex Pass open the owner's private conversations.
macOS disk images use lzma compression.
Sharing can resume after opening a discussion in Codex.
Idle windows no longer run an unused status animation.
Opening a guest discussion in Codex stays responsive while an answer finishes.
Chat-compatible gateways handle empty error placeholders consistently.
Leaving the voice page releases a recording that is still starting.
Image generation survives navigation between pages.
The "All requests received" view is now a list with a detail pane.
Recording content now keeps the responses of every method, not only POST.
Text log level is adjustable from the Logs page
Optional recording of what each request sent and what came back.
Each request shows which project and Codex thread it belongs to.
Automatic provider switches no longer reset the model you picked in Codex.
Choose who pays for fallback searches: the relay or your own ChatGPT account.
New OpenAI models show up in Codex the day they ship.
Third-party models in the native Codex picker.
One-click voice attestation capture.
Separate egress proxy toggles for OpenAI traffic and relay traffic.
ChatGPT launched from Codex Pass honours the proxy in both its layers.
Multi-Mac session sync.
Voice input: speech-to-text and realtime voice calls, using your own ChatGPT login.
The product is now Codex Pass ("Your Codex. Anywhere.").
Installing a login never clobbers a newer one.
0xINF UCX2 one-time keys.
Please try another keyword or component.