0.122.0

New Features

• Standalone installs are more self-contained, and codex app now opens or installs Desktop correctly on Windows and Intel Macs (#17022, #18500).
• The TUI can open /side conversations for quick side questions, and queued input now supports slash commands and ! shell prompts while work is running (#18190, #18542).
• Plan Mode can start implementation in a fresh context, with context-usage shown before deciding whether to carry the planning thread forward (#17499, #18573).
• Plugin workflows now include tabbed browsing, inline enable/disable toggles, marketplace removal, and remote, cross-repo, or local marketplace sources (#18222, #18395, #17752, #17751, #17277, #18017, #18246).
• Filesystem permissions now support deny-read glob policies, managed deny-read requirements, platform sandbox enforcement, and isolated codex exec runs that ignore user config or rules (#15979, #17740, #18096, #18646).
• Tool discovery and image generation are now enabled by default, with higher-detail image handling and original-detail metadata support for MCP and js_repl image outputs (#17854, #17153, #17714, #18386).

Bug Fixes

• App-server approvals, user-input prompts, and MCP elicitations now disappear from the TUI when another client resolves them, instead of leaving stale prompts behind (#15134).
• Remote-control startup now tolerates missing ChatGPT auth, and MCP startup cancellation works again through app-server sessions (#18117, #18078).
• Resumed and forked app-server threads now replay token usage immediately so context/status UI starts with the restored state (#18023).
• Security-sensitive flows were tightened: logout revokes managed ChatGPT tokens, project hooks and exec policies require trusted workspaces, and Windows sandbox setup avoids broad user-profile and SSH-root grants (#17825, #14718, #18443, #18493).
• Sandboxed apply_patch writes work correctly with split filesystem policies, and file watchers now notice files created after watching begins (#18296, #18492).
• Several TUI rough edges were fixed, including fatal skills-list failures, invalid resume hints, duplicate context statusline entries, /model menu loops, redundant memory notices, and terminal title quoting in iTerm2 (#18061, #18059, #18054, #18154, #18580, #18261).

Documentation

• Added a security-boundaries reference to SECURITY.md for sandboxing, approvals, and network controls (#17848, #18004).
• Documented custom MCP server approval defaults and exec-server stdin behavior (#17843, #18086).
• Updated app-server docs for plugin API changes, marketplace removal, resume/fork token-usage replay, and warning notifications (#17277, #17751, #18023, #18298).
• Added a short guide for the responses API proxy (#18604).

Chores

• Split plugin and marketplace code into codex-core-plugins, moved more connector code into connectors, and continued breaking up the large core session/turn modules (#18070, #18158, #18200, #18206, #18244, #18249).
• Refactored config loading and AGENTS.md discovery behind narrower filesystem and manager abstractions (#18209, #18035).
• Stabilized Bazel and CI with flake fixes, native Rust test sharding, scoped repository caches, stronger Windows clippy coverage, and updated rules_rs/LLVM pins (#17791, #18082, #18366, #18350, #18397).
• Added core CODEOWNERS and a smaller development build profile (#18362, #18612).
• Removed the stale core models.json and updated release preparation to refresh the active model catalog (#18585).

Changelog

Full Changelog: rust-v0.121.0...rust-v0.122.0

• #17958 Support remote compaction for Azure responses providers @ivanmurashko
• #17848 [docs] Add security boundaries reference in SECURITY.md @evawong-oai
• #17990 Auto install start-codex-exec.sh dependencies @pakrym-oai
• #17892 Migrate archive/unarchive to local ThreadStore @wiltzius-openai
• #17989 [codex] Restore remote exec-server filesystem tests @starr-openai
• #15134 Dismiss stale app-server requests after remote resolution @ebrevdo
• #18002 Re-enable it @jif-oai
• #17885 feat: Support alternate marketplace manifests and local string @xl-openai
• #18003 [docs] Revert extra changes from PR 17848 @evawong-oai
• #17714 Support original-detail metadata on MCP image outputs @fjord-oai
• #17022 Significantly improve standalone installer @efrazer-oai
• #17853 [mcp] Add dummy tools for previously called but currently missing tools. @mzeng-openai
• #18004 [docs] Restore SECURITY.md update from PR 17848 @evawong-oai
• #17896 Clarify realtime v2 context and handoff messages @bxie-openai
• #17742 removing network proxy for yolo @won-openai
• #17999 [codex] Make command exec delta tests chunk tolerant @euroelessar
• #18033 feat: introduce codex-pr-body skill @bolinfest
• #17877 Display YOLO mode permissions if set when launching TUI @canvrno-oai
• #18022 Async config loading @pakrym-oai
• #17854 Update ToolSearch to be enabled by default @mzeng-openai
• #17831 [codex][mcp] Add resource uri meta to tool call item. @mzeng-openai
• #18070 Extract plugin loading and marketplace logic into codex-core-plugins @xl-openai
• #18078 Fix MCP startup cancellation through app server @etraut-openai
• #17151 [codex] Route Fed ChatGPT auth through Fed edge @jackz-oai
• #18006 fix: more flake @jif-oai
• #18127 fix: windows flake @jif-oai
• #18137 nit: add min values for memories @jif-oai
• #18135 debug: windows flake @jif-oai
• #18138 chore: more pollution filtering @jif-oai
• #18134 chore: unify memory drop endpoints @jif-oai
• #18144 nit: get rid of an expect @jif-oai
• #17791 Stabilize Bazel tests (timeout tweaks and flake fixes) @ddr-oai
• #18117 fix: auth preflight @jif-oai
• #18146 chore: use justfile_directory in just file @jif-oai
• #18085 [1/8] Add MCP server environment config @aibrahim-oai
• #18054 fix(tui): remove duplicate context statusline item @etraut-openai
• #17287 [code mode] defer mcp tools from exec description @sayan-oai
• #18057 Prefill rename prompt with current thread name @etraut-openai
• #18059 Fix invalid TUI resume hints @etraut-openai
• #17153 Launch image generation by default @won-openai
• #18042 Make yolo skip managed-network tool enforcement @won-openai
• #18154 fix: model menu pop @jif-oai
• #17826 [codex] Add remote thread store implementation @wiltzius-openai
• #18086 [2/8] Support piped stdin in exec process API @aibrahim-oai
• #18061 Avoid fatal TUI errors on skills list failure @etraut-openai
• #15979 feat(permissions): add glob deny-read policy support @viyatb-oai
• #18055 Improve external agent plugin migration for configured marketplaces @alexsong-oai
• #17425 Auto-upgrade configured marketplaces @xli-oai
• #18035 Refactor AGENTS.md discovery into AgentsMdManager @pakrym-oai
• #18158 Move more connector logic into connectors crate @pakrym-oai
• #17843 Add server-level approval defaults for custom MCP servers @mzeng-openai
• #18178 fix: drop lock earlier; was held across send_event().await unnecessarily @bolinfest
• #18000 Make thread unsubscribe test deterministic @starr-openai
• #17996 Add codex_hook_run analytics event @abhinav-oai
• #18184 fix: fix clippy issue in examples/ folder @bolinfest
• #18023 fix(app-server): replay token usage after resume and fork @fcoury-oai
• #18172 [codex] Make realtime startup context truncation deterministic @bxie-openai
• #18192 Throttle Windows Bazel test concurrency @starr-openai
• #18200 [codex] Split codex op handlers @pakrym-oai
• #17387 Register agent tasks behind use_agent_identity @adrian-openai
• #18026 Add OTEL metrics for hook runs @abhinav-oai
• #18092 [codex] Update realtime V2 VAD silence delay and 1.5 prompt @bxie-openai
• #18188 Add tabbed lists, single line rendering, col width changes @canvrno-oai
• #18206 [codex] Split codex turn logic @pakrym-oai
• #18169 Use codex-auto-review for guardian reviews @jeffsharris
• #18196 Use in-process app-server for unknown-thread MCP read test @mzeng-openai
• #18116 Move marketplace add under plugin command @xli-oai
• #18096 feat(sandbox): add glob deny-read platform enforcement @viyatb-oai
• #17971 fix: deprecate use_legacy_landlock feature flag @viyatb-oai
• #18209 Refactor config loading to use filesystem abstraction @pakrym-oai
• #17862 Stream apply_patch changes @akshaynathan
• #18244 Split codex session modules @pakrym-oai
• #17713 feat: add opt-in provider runtime abstraction @celia-oai
• #18182 feat: Handle alternate plugin manifest paths @xl-openai
• #18219 Move Computer Use tool suggestion to core @leoshimo-oai
• #18231 codex: split thread/read view loading @wiltzius-openai
• #18126 fix(exec-policy) rules parsing @dylan-hurd-oai
• #17825 [codex] Revoke ChatGPT tokens on logout @sashank-oai
• #18304 Fix Windows exec policy test flake @etraut-openai
• #17947 fix: reduce writable root @jif-oai
• #18246 Sync local plugin imports, async remote imports, refresh caches after… @alexsong-oai
• #18097 defer all tools behind feature flag @sayan-oai
• #17563 Add PermissionRequest hooks support @abhinav-oai
• #18338 nit: phase 2 ephemeral @jif-oai
• #18267 Support Ctrl+P/Ctrl+N in resume picker @etraut-openai
• #18261 fix(tui): use BEL for terminal title updates @etraut-openai
• #17740 feat(config): support managed deny-read requirements @viyatb-oai
• #18249 Move codex module under session @pakrym-oai
• #18351 Fix config-loader tests after filesystem abstraction race @bolinfest
• #18021 Guardian -> Auto-Review @won-openai
• #18140 feat: config aliases @jif-oai
• #17232 Make app tool hint defaults pessimistic for app policies @colby-oai
• #17499 feat(tui): add clear-context plan implementation @fcoury-oai
• #18352 codex: route thread/read persistence through thread store @wiltzius-openai
• #18263 enable tool search over dynamic tools @sayan-oai
• #18350 ci: make Windows Bazel clippy catch core test imports @bolinfest
• #18362 Add core CODEOWNERS @aibrahim-oai
• #18366 ci: scope Bazel repository cache by job @bolinfest
• #17305 Add sorting/backward...

0.123.0-alpha.2

Release 0.123.0-alpha.2

0.122.0-alpha.13

Release 0.122.0-alpha.13

0.122.0-alpha.12

Release 0.122.0-alpha.12

0.122.0-alpha.11

Release 0.122.0-alpha.11

0.122.0-alpha.10

Release 0.122.0-alpha.10

0.122.0-alpha.9

Release 0.122.0-alpha.9

0.122.0-alpha.8

Release 0.122.0-alpha.8

0.122.0-alpha.7

Release 0.122.0-alpha.7

0.122.0-alpha.6

Release 0.122.0-alpha.6