Codex CLI 0.141.0 just encrypted your remote agent channels with Noise. Your exec-server traffic was plaintext until yesterday.

OpenAI shipped Codex CLI 0.141.0 on June 18.

The headline change: remote executors now use authenticated, end-to-end encrypted Noise relay channels.

This is not a minor transport swap.

Until this release, your agent's commands, file contents, and tool outputs traveled between app-server and exec-server over whatever transport the relay provided. Now every remote execution session runs through Noise — the same protocol WireGuard uses for its handshake. Authenticated. Encrypted. No plaintext in transit.

The architecture matters. Codex's remote execution model splits your agent into two halves: the reasoning loop (app-server) and the actual shell/filesystem (exec-server). When your agent runs `git diff` or edits a file on a remote machine, that command crosses a network boundary. Before 0.141.0, you were trusting the relay. Now the protocol guarantees confidentiality even if the relay is compromised.

Six pull requests landed this feature: #26242 adds the Noise transport, #26245 defaults remote transport to Noise, and four more handle cross-platform path resolution so your working directory and filesystem permissions survive the hop between app-server and exec-server across macOS, Linux, and Windows.

But the real signal is what else shipped in the same release. Executor plugins can now activate their stdio MCP servers per thread. Your agent's tool surface is no longer global — it's scoped to the conversation. A database plugin loads its MCP server when the thread needs it, not when the process starts. Plugin discovery got a created-by-me marketplace and auth-specific curated catalogs. Your tools are becoming a runtime marketplace, not a config file.

Audit your exec-server transport config today. If you're running Codex against remote environments, verify you're on 0.141.0 and that Noise relay is active. If your security team has been waiting for encrypted agent transport to approve remote execution, this is the gate.

Upgrade: npm install -g @openai/codex@0.141.0
Verify: codex --version returns 0.141.0
Inspect: check your exec-server logs for "Noise relay transport" confirmation

SOURCE: https://developers.openai.com/codex/changelog
VERIFIED: OpenAI Codex changelog (developers.openai.com/codex/changelog), GitHub release rust-v0.141.0 (github.com/openai/codex/releases/tag/rust-v0.141.0), Codex CLI 0.140.0 stable release guide (codex.danielvaughan.com)
SIGNAL: Agent infrastructure just got its first encrypted transport layer. Every team running remote executors should verify their relay channels are Noise-protected before their next deploy.

---