The Codex Changelog
All Episodes
Codex CLI Gets Touch ID, Smarter Approvals, and Live TUI Updates

Codex CLI Gets Touch ID, Smarter Approvals, and Live TUI Updates

0:00|0:00

This episode breaks down the latest Codex CLI release, including Touch ID approval for MCP requests on supported Macs, workspace-scoped identity protection, and cleaner cancellation handling. It also covers daemon update scheduling, live reasoning summaries in the TUI, worktree cleanup, Bedrock auth improvements, and the new experimental voice mode.

Show Notes


Chapter 1

Hardware Backed MCP Approvals via macOS Touch ID in Codex 0.155.0

Maya

So I was messing around with agent tool approvals earlier, and I swear my index finger is going to get a workout today.

Ethan Park

Wait, you mean the new Touch ID integration?

Maya

Yes! The, the Codex zero point one five five point zero release. According to the OpenAI Codex release notes, Codex CLI zero point one five five point zero added Touch ID verification for MCP requests in local TUI sessions on supported Macs.

Ethan Park

Right, because previously, if you were running Model Context Protocol servers for, say, production database connectors or cloud deployments, you were stuck in this awful dilemma. You either passed scary auto approval flags or you typed yes fifty times a minute.

Maya

Exact, exactly. Prompt fatigue is real. People end up just broad approving everything because typing y and pressing enter over and over breaks your whole flow. But now, when an MCP tool wants to execute something high privilege, the app server triggers a native macOS prompt.

Ethan Park

And it is not just a UI trick either. It actually signs the approval payload using the Secure Enclave on the Mac hardware. That is pulled from pull requests forty three six two four and forty three seven one two.

Maya

Wait, how does it handle switching between projects? Like, if I have an administrative tool open in one window and some random third party repo open in another?

Ethan Park

That is the smart part. They added workspace scoped identity protection. User verification providers now pin identity to the active workspace root. So a rogue prompt or bad actor in an untrusted project directory cannot tap into the authorization state you granted somewhere else.

Maya

Okay, but what happens when I tap cancel because I realize the agent is about to drop a schema? Does the whole turn crash?

Ethan Park

No, it handles RPC cancellation cleanly. Canceling the Touch ID prompt sends a cancel signal back to the app server without dropping your thread context. Plus, they adjusted the Guardian score policy so the extra biometric check step does not falsely drag down turn performance numbers.

Maya

That is actually really smooth. It turns what used to be a friction point into a quick physical tap.

Chapter 2

Configurable Daemon Restarts Live Reasoning Summaries and QoL Polish

Ethan Park

Now, speaking of workflow friction, the zero point one five five point zero release also fixes a big headache with background daemons.

Maya

Oh man, the background restarts? I used to have active subagents just lose their mind mid task if the background process updated.

Ethan Park

Exactly. They added configurable daemon update schedules and a explicit command, codex app server daemon update. The best part is that saved threads and active session goals can now recover right after the daemon restarts.

Maya

That is huge for long running tasks! What about in the TUI itself? Anything new to look at while the model is deep in thought?

Ethan Park

Instead of just staring at a static spinning wheel for thirty seconds, the status row now streams live reasoning summaries in real time. And once a turn finishes, it prints explicit completion timestamps right there.

Maya

No more guessing whether it finished two seconds ago or ten minutes ago while I was grabbing coffee.

Ethan Park

Right. And for people managing multiple agents across repositories, the agents overview now shows worktree ownership details. You can hide, archive, or delete background tasks, and confirmed deletion actually cleans up managed git worktrees so you do not accumulate orphan folders.

Maya

That keeps your local workspace clean. Did they touch provider authentications too? I saw something about Amazon Bedrock.

Ethan Park

Yeah, Bedrock can now grab AWS credentials directly from configured shell commands, complete with expiration caching and automatic refresh.

Maya

Oh, and we cannot forget the experimental voice feature! If you pass slash experimental, you can try live slash voice WebRTC conversations with live split flap animated transcript tiles right inside the terminal.

Ethan Park

Split flap animation in a terminal UI? That is equal parts retro and ridiculously cool.

Maya

It really is. Sounds like a solid release all around. Good stuff to play with today!