- [new]
codex exec-serverandcodex exec-server forwardaccept--proxy-private-ips-via-upstream. Permitted private IP destinations can use the configured upstream proxy; if no valid upstream proxy applies to the request protocol, Codex connects directly. Loopback stays local, and the flag does not require upstream routing. Bash, fish, and zsh completions include the option.
Under the hood
- World state now tracks tools and a tools budget so context can account for tool use more explicitly.
- Markdown copy in the TUI can handle tables.
- Exec-server relay framing was simplified.
Upgrade notes
- Default networking is unchanged. To let permitted private-IP destinations use an upstream proxy from exec-server, pass
--proxy-private-ips-via-upstream. Loopback continues to stay local.