
Codex CLI Gets Touch ID, Smarter Approvals, and Live TUI Updates
This episode breaks down the latest Codex CLI release, including Touch ID approval for MCP requests on supported Macs, workspace-scoped identity protection, and cleaner cancellation handling. It also covers daemon update scheduling, live reasoning summaries in the TUI, worktree cleanup, Bedrock auth improvements, and the new experimental voice mode.
Show Notes
- Releases · openai/codex - GitHub: https://github.com/openai/codex/releases
Chapter 1
Hardware Backed MCP Approvals via macOS Touch ID in Codex 0.155.0
Maya
So I was messing around with agent tool approvals earlier, and I swear my index finger is going to get a workout today.
Ethan Park
Wait, you mean the new Touch ID integration?
Maya
Yes! The, the Codex zero point one five five point zero release. According to the OpenAI Codex release notes, Codex CLI zero point one five five point zero added Touch ID verification for MCP requests in local TUI sessions on supported Macs.
Ethan Park
Right, because previously, if you were running Model Context Protocol servers for, say, production database connectors or cloud deployments, you were stuck in this awful dilemma. You either passed scary auto approval flags or you typed yes fifty times a minute.
Maya
Exact, exactly. Prompt fatigue is real. People end up just broad approving everything because typing y and pressing enter over and over breaks your whole flow. But now, when an MCP tool wants to execute something high privilege, the app server triggers a native macOS prompt.
Ethan Park
And it is not just a UI trick either. It actually signs the approval payload using the Secure Enclave on the Mac hardware. That is pulled from pull requests forty three six two four and forty three seven one two.
Maya
Wait, how does it handle switching between projects? Like, if I have an administrative tool open in one window and some random third party repo open in another?
Ethan Park
That is the smart part. They added workspace scoped identity protection. User verification providers now pin identity to the active workspace root. So a rogue prompt or bad actor in an untrusted project directory cannot tap into the authorization state you granted somewhere else.
Maya
Okay, but what happens when I tap cancel because I realize the agent is about to drop a schema? Does the whole turn crash?
Ethan Park
No, it handles RPC cancellation cleanly. Canceling the Touch ID prompt sends a cancel signal back to the app server without dropping your thread context. Plus, they adjusted the Guardian score policy so the extra biometric check step does not falsely drag down turn performance numbers.
Maya
That is actually really smooth. It turns what used to be a friction point into a quick physical tap.
Chapter 2
Configurable Daemon Restarts Live Reasoning Summaries and QoL Polish
Ethan Park
Now, speaking of workflow friction, the zero point one five five point zero release also fixes a big headache with background daemons.
Maya
Oh man, the background restarts? I used to have active subagents just lose their mind mid task if the background process updated.
Ethan Park
Exactly. They added configurable daemon update schedules and a explicit command, codex app server daemon update. The best part is that saved threads and active session goals can now recover right after the daemon restarts.
Maya
That is huge for long running tasks! What about in the TUI itself? Anything new to look at while the model is deep in thought?
Ethan Park
Instead of just staring at a static spinning wheel for thirty seconds, the status row now streams live reasoning summaries in real time. And once a turn finishes, it prints explicit completion timestamps right there.
Maya
No more guessing whether it finished two seconds ago or ten minutes ago while I was grabbing coffee.
Ethan Park
Right. And for people managing multiple agents across repositories, the agents overview now shows worktree ownership details. You can hide, archive, or delete background tasks, and confirmed deletion actually cleans up managed git worktrees so you do not accumulate orphan folders.
Maya
That keeps your local workspace clean. Did they touch provider authentications too? I saw something about Amazon Bedrock.
Ethan Park
Yeah, Bedrock can now grab AWS credentials directly from configured shell commands, complete with expiration caching and automatic refresh.
Maya
Oh, and we cannot forget the experimental voice feature! If you pass slash experimental, you can try live slash voice WebRTC conversations with live split flap animated transcript tiles right inside the terminal.
Ethan Park
Split flap animation in a terminal UI? That is equal parts retro and ridiculously cool.
Maya
It really is. Sounds like a solid release all around. Good stuff to play with today!