Codex CLI v0.164.0: /presets slots, inline /model arguments, credential masking#

Published October 23, 2026 by Alex Sorokoletov

Part of the Codex CLI Version Tracker series. | Codex on GitHub | Official Changelog

Codex CLI v0.164.0 follows v0.163.0 with ten numbered /presets slots for reusable prompts and slash commands, inline arguments that set the model, reasoning effort, speed, and permission profile on /model and /permissions, credential masking during remote Bash and Zsh snapshot sessions, and enterprise MCP connections that sign in through Codex account grants. Compaction and session-resume fixes ship alongside.^[1]

What shipped#

Prompts and arguments you drive directly#

Ten numbered /presets slots hold reusable prompts and slash commands, and a keyboard menu opens them for quick access. The /model and /permissions commands take inline arguments, so a single line sets the model, the reasoning effort, the speed, and the permission profile instead of stepping through a menu. In the fullscreen transcript, images you open and images Codex generates preview inline on terminals that support Kitty or Sixel graphics.^[1]

Credentials and enterprise sign-in#

Enterprise MCP connections authenticate through eligible Codex account grants or a dedicated sign-in, including OAuth clients that require secrets. Supported remote Bash commands and Zsh snapshot sessions mask credentials, including credentials from custom providers. The Amazon Bedrock setup wizard is enabled by default and groups API-key entry with the other AWS sign-in methods when it detects credentials. On Windows, HTTPS and WebSocket connections answer proxy authentication challenges with the signed-in user's Negotiate or NTLM credentials.^[1]

Fixes for long sessions#

A failed compaction no longer leaves partial summaries in conversation history, and a background compaction failure falls back without panicking. Resuming a session finds compressed histories and restores that session's saved thread settings rather than replacing them with global defaults. Queued prompts wait for a pending permission selection to resolve before they continue. CLI configuration overrides survive when -c or --config appears at more than one subcommand level. Sandbox checks are hardened for case-variant metadata paths on macOS and for replaceable symlinks used to locate executables.^[1]

Housekeeping lands alongside: Codex prunes unused installations, clears abandoned marketplace checkouts, and bounds daemon logs to reduce disk usage, and the embedded JavaScript runtime gains safety checks for optimized Array.sort operations.^[1]

Where the credential path moved#

The largest group of new features touches how secrets reach the model's tools. Enterprise MCP connections sign in through Codex account grants or a dedicated flow, remote Bash commands and Zsh snapshot sessions mask credentials from both built-in and custom providers, the Bedrock wizard runs by default, and Windows proxy challenges answer with the signed-in user's Negotiate or NTLM credentials. One effect of masking the remote Bash and Zsh snapshot paths is that a credential can be used by a tool call without appearing in the transcript or the session's shell snapshot.

A separate group hardens long-running conversations. Failed and background compactions no longer corrupt or crash the history, and a resumed session reads compressed rollouts and keeps its own saved settings. Those are the paths a conversation hits once it grows past the context window and gets picked up again later, so the fixes land where an all-day session tends to break.

All trademarks and software referenced belong to their respective owners.

Sources#

1. Codex CLI release notes, rust-v0.164.0