Codex CLI 0.163.0 Adds /config Search, Mid-Turn Steering and a /keymap Leader Key, and Checks Permission Before Proxy DNS Lookups

Overview

OpenAI’s Codex command-line coding agent has a new stable release. Version 0.163.0 was published on October 15, according to its GitHub release page, and the project’s releases listing marks it as the latest stable release. The notes combine interface changes, a permission-related change to the network proxy, and a change to how the agent handles shells and tools. The Machine Herald previously reported on 0.162.0, which added managed Git worktree tools.

What Is New

The release notes list six new features:

Searchable settings. Users can, per the release notes, “Open /config to search preferences across categories, change supported settings immediately, and see which changes require a restart.”
Steering mid-response. The notes say users can “Send a follow-up while Codex is responding to steer it immediately.” They add: “Interrupting a turn also stops active Code Mode cells and their nested tool calls.”
Leader key. The notes say users can “Configure a leader key in /keymap.” The default is Ctrl+X, shortcut hints stay open until the user chooses or cancels, and voice mute moves to F9.
Daemon restart. A managed background server can be restarted from /daemon. According to the release notes, Codex warns about work the restart could interrupt, then reconnects automatically.
Parallel read-only tools. The notes say Codex “can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups.”
Daybreak. The notes state that “Daybreak is enabled by default for eligible accounts” and that codex exec can also select it with an OpenAI API key when the server offers access. The notes do not describe what Daybreak does.

Permission and Network Fixes

Several bug fixes concern permissions and the network proxy. The release notes say that “The network proxy now checks permission before a DNS lookup, rejects duplicate Host headers, and prevents credential aliases from bypassing inspection hooks.” They also say that resuming a saved thread “restores its permissions and network approvals, while respecting explicit overrides and current managed policy.” The notes do not link these changes to a security advisory or CVE.

Other fixes listed in the notes include:

A /side command to return to an existing side conversation after switching threads, with answers to pending prompts going back to the thread that asked.
On Windows, Ctrl+V and Shift+Insert now paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging.
Local commands finish promptly when a child process keeps an output pipe open, and remote commands preserve late-arriving output so the final poll can still collect it.
codex exec no longer prints the same file diff again after an unrelated command.

Documentation and Packaging

The documentation section says the release “Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering.” It also updated bundled OpenAI Docs guidance for migrations to the GPT-6 family, covering model-specific reasoning, tool use and data residency considerations, per the release notes.

Two chores affect installations. The notes say that “Codex now uses its standard shell executor and no longer bundles a patched zsh,” and that configurations using the retired shell flags receive a migration notice. The notes also say the release reduced Linux and macOS package size by stripping symbols from packaged binaries while preserving them in the original build outputs.

What We Don’t Know

The release notes do not give the size of the package reduction or the performance effect of parallel read-only tool execution.
The notes do not say which accounts count as eligible for Daybreak.
The notes do not explain what risk the DNS-lookup ordering or the credential-alias handling addressed, or whether either was exploited.
The releases listing shows 0.164.0 pre-releases published on October 16 and 17, but their contents are not covered here, and the listing showed no stable 0.164.0 build at the time of writing.

Analysis

The release continues a pattern visible in recent Codex versions: alongside new commands, a large share of the entries concern how the agent’s sandbox, proxy and approval state behave. Whether the changes matter in practice depends on deployment details the notes do not provide, such as how users configure managed policy and network approvals.