Codex CLI 0.158.0: MCP OAuth client secrets + fullscreen TUI copy/paste
OpenAI shipped Codex CLI 0.158.0 with codex mcp add --oauth-client-secret for MCP servers that need pre-registered OAuth clients, plus copy-on-select and right-click paste in the fullscreen TUI (Markdown preserved). The release also adds bearer-token auth for exec-server WebSockets, default terminal-input approval for elevated commands, and Windows/Linux/macOS sandbox fixes.