diff --git a/changelog/unreleased/codex-stable-identity.md b/changelog/unreleased/codex-stable-identity.md
new file mode 100644
index 00000000..1aa84a4a
--- /dev/null
+++ b/changelog/unreleased/codex-stable-identity.md
@@ -0,0 +1,7 @@
+### English
+
+- Codex requests present the official stable CLI identity, `codex_cli_rs/0.169.0`.
+
+### 中文
+
+- Codex 请求使用官方稳定版 CLI 身份 `codex_cli_rs/0.169.0`。
diff --git a/internal/providers/codex/credential.go b/internal/providers/codex/credential.go
index 57b4ac9a..8463f9e5 100644
--- a/internal/providers/codex/credential.go
+++ b/internal/providers/codex/credential.go
@@ -58,10 +58,10 @@ const (
 	pathWhamUsage = "/wham/usage"
 
 	// Cloaking: upstream gates on the official Codex CLI UA/originator.
-	// rust-v0.167.2 (stable) defaults the originator to codex_cli_rs and
+	// rust-v0.169.0 (stable) defaults the originator to codex_cli_rs and
 	// builds the UA as "{originator}/{version} ({os} {os_version}; {arch}) {terminal}".
 	// Alpha releases stay off this pin.
-	UserAgent  = "codex_cli_rs/0.167.2 (Mac OS 26.5.2; arm64) iTerm.app/3.6.11"
+	UserAgent  = "codex_cli_rs/0.169.0 (Mac OS 26.5.2; arm64) iTerm.app/3.6.11"
 	Originator = "codex_cli_rs"
 
 	QuotaUnit = "rate_limit_window"
diff --git a/internal/providers/codex/headers_passthrough_test.go b/internal/providers/codex/headers_passthrough_test.go
index f2a71528..d53f1a12 100644
--- a/internal/providers/codex/headers_passthrough_test.go
+++ b/internal/providers/codex/headers_passthrough_test.go
@@ -80,7 +80,7 @@ func TestRoutingHintCarriesAcceptedTier(t *testing.T) {
 }
 
 func TestUserAgentPinnedToOfficialStable(t *testing.T) {
-	if UserAgent != "codex_cli_rs/0.167.2 (Mac OS 26.5.2; arm64) iTerm.app/3.6.11" || Originator != "codex_cli_rs" {
+	if UserAgent != "codex_cli_rs/0.169.0 (Mac OS 26.5.2; arm64) iTerm.app/3.6.11" || Originator != "codex_cli_rs" {
 		t.Fatalf("UserAgent=%q Originator=%q", UserAgent, Originator)
 	}
 }