Added persisted /goal workflows with app-server APIs, model tools, runtime continuation, and TUI controls for create, pause, resume, and clear. (#18073, #18074, #18075, #18076, #18077, #20082)
Added codex update, configurable TUI keymaps, plan-mode nudges, action-required terminal titles, and active-turn /statusline and /title edits. (#19933, #18593, #19901, #18372, #19917)
Expanded permission profiles with built-in defaults, sandbox CLI profile selection, cwd controls, and active-profile metadata for clients. (#19900, #20117, #20118, #20095)
Improved plugin workflows with marketplace installation, remote bundle caching, remote uninstall, plugin-bundled hooks, hook enablement state, and external-agent config import. (#18704, #19914, #19456, #19705, #19840, #19949)
Added external agent session import, including background imports and imported-session title handling. (#19895, #20284, #20261)
Made MultiAgentV2 configuration more explicit with thread caps, wait-time controls, root/subagent hints, and v2-specific depth handling. (#19360, #19792, #19805, #20052, #20180)

Bug Fixes

Fixed several resume and interruption issues, including stale interrupt hangs, persisted provider restoration, large remote resume responses, and slow filtered resume lists. (#18392, #19287, #19920, #19591)
Improved TUI reliability around terminal resize reflow, markdown list spacing, slash-command popup layout, keyboard cleanup, shell-mode escape, and working status updates. (#18575, #19706, #19511, #19625, #19986, #19939)
Hardened managed network behavior for deferred denials, proxy bypass defaults, resolved target checks, IPv6 host matching, and git -C approval handling. (#19184, #20002, #19999, #19995, #20085)
Fixed Windows sandbox and PTY edge cases, including pseudoconsole startup, elevated runner process handling, core shell environment inheritance, and named-pipe validation. (#20042, #19211, #20089, #19283)
Fixed Bedrock model support for apply_patch, GPT-5.4 reasoning levels, and updated Bedrock GPT-5.4 endpoint/model metadata. (#19416, #19461, #20109)
Fixed MCP/plugin edge cases around stdio server cleanup, plugin MCP approval persistence, and custom MCP metadata isolation. (#19753, #19537, #19836, #19875)

Documentation

Updated the bundled OpenAI Docs skill for GPT-5.5, gpt-image-2, and clearer upgrade guidance. (#19407, #19443, #19422)
Clarified contributor-facing docs, including the PR template, Rust async trait guidance, and README wording. (#19912, #20242, #19514)
Added a checked-in codex-core public API listing and a ThreadManager sample crate. (#20243, #20141)

Chores

Published codex-app-server release artifacts, stopped publishing GNU Linux binaries, and increased release workflow timeouts. (#19447, #19445, #20271, #20343)
Added Codex-pinned versioning for the Python app-server SDK package. (#18996)
Deprecated --full-auto while steering users toward explicit permission profiles and trust flows. (#20133)
Stabilized CI and release plumbing with Bazel setup migration, release smoke-test pinning, and updated workflow pins/timeouts. (#19851, #19854, #19472, #19609)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.125.0...rust-v0.128.0

#19124 Make MultiAgentV2 interruption markers assistant-authored @jif-oai
#19354 chore: alias max_concurrent_threads_per_session @jif-oai
#19360 feat: surface multi-agent thread limit in spawn description @jif-oai
#19351 Add agents.interrupt_message for interruption markers @jif-oai
#18392 Fix hang on turn/interrupt @danwang-oai
#19380 chore: drop MCP Plugins and App from Morpheus @jif-oai
#18907 respect workspace option for disabling plugins @zamoshchin-openai
#19283 check PID of named pipe consumer @iceweasel-oai
#19407 Update bundled OpenAI Docs skill for GPT-5.5 @kkahadze-oai
#19163 Harden package-manager install policy @mcgrew-oai
#19416 Fix: use function apply_patch tool for Bedrock model @celia-oai
#19093 [codex] Omit fork turns from thread started notifications @euroelessar
#19244 Update unix socket transport to use WebSocket upgrade @willwang-openai
#19170 Skip disabled rows in selection menu numbering and default focus @canvrno-oai
#19414 permissions: make legacy profile conversion cwd-free @bolinfest
#18900 Migrate fork and resume reads to thread store @wiltzius-openai
#19445 ci: stop publishing GNU Linux release artifacts @bolinfest
#19443 Add gpt-image-2 to bundled OpenAI Docs skill @kkahadze-oai
#18584 [4/4] Honor Streamable HTTP MCP placement @aibrahim-oai
#19447 ci: publish codex-app-server release artifacts @bolinfest
#19422 Clarify bundled OpenAI Docs upgrade guide wording @kkahadze-oai
#19266 [codex] add non-local thread store regression harness @wiltzius-openai
#19098 feat: Compress skill paths with root aliases @xl-openai
#19207 [codex] Forward Codex Apps tool call IDs to backend metadata @rreichel3-oai
#19453 Serialize legacy Windows PowerShell sandbox tests @dylan-hurd-oai
#19234 Refactor log DB into LogWriter interface @rasmusrygaard
#19461 fix: Bedrock GPT-5.4 reasoning levels @celia-oai
#19449 permissions: remove legacy read-only access modes @bolinfest
#19472 ci: pin codex-action v1.7 @viyatb-oai
#19468 Fix Bazel cargo_bin runfiles paths @fjord-oai
#19410 Remove js_repl feature @fjord-oai
#18073 Add goal persistence foundation (1 / 5) @etraut-openai
#18074 Add goal app-server API (2 / 5) @etraut-openai
#18075 Add goal model tools (3 / 5) @etraut-openai
#18076 Add goal core runtime (4 / 5) @etraut-openai
#18077 Add goal TUI UX (5 / 5) @etraut-openai
#19454 Split approval matrix test groups @dylan-hurd-oai
#19514 Fix codex-rs README grammar @etraut-openai
#19459 Enable unavailable dummy tools by default @mzeng-openai
#19524 [codex] Prune unused codex-mcp API and duplicate helpers @aibrahim-oai
#19526 [codex] Order codex-mcp items by visibility @aibrahim-oai
#19578 fix: increase Bazel timeout to 45 minutes @bolinfest
#19287 Restore persisted model provider on thread resume @etraut-openai
#19593 test: isolate remote thread store regression from plugin warmups @bolinfest
#19511 Keep slash command popup columns stable while scrolling @etraut-openai
#19595 [codex] Bypass managed network for escalated exec @viyatb-oai
#19604 test: stabilize app-server path assertions on Windows @bolinfest
#19609 fix: restore 30-minute timeout for Bazel builds @bolinfest
#19389 Guard npm update readiness @shijie-oai
#18575 fix(tui): reflow scrollback on terminal resize @fcoury-oai
#19610 Support end_turn in response.completed @andmis
#19640 [codex] remove responses command @tibo-openai
#19683 test: harden app-server integration tests @bolinfest
#18904 feat: load AgentIdentity from JWT login/env @efrazer-oai
#19606 permissions: make runtime config profile-backed @bolinfest
#19392 permissions: derive compatibility policies from profiles @bolinfest
#19484 Lift app-server JSON-RPC error handling to request boundary @pakrym-oai
#19487 [codex] Move config loading into codex-config @pakrym-oai
#19393 permissions: migrate approval and sandbox consumers to profiles @bolinfest
#19726 Fix codex-core config test type paths @pakrym-oai
#19727 test: increase core-all-test shard count to 16 @bolinfest
#19725 Split MCP connection modules @aibrahim-oai
#19605 Delete unused ResponseItem::Message.end_turn @andmis
#19394 permissions: remove core legacy policy round trips @bolinfest
#19733 Allow agents.max_threads to work with multi_agent_v2 @andmis
#19395 permissions: finish profile-backed app surfaces @bolinfest
#19739 inline hostname resolution for remote sandbox config @abhinav-oai
#19734 permissions: centralize legacy sandbox projection @bolinfest
#19058 Add /auto-review-denials retry approval flow @won-openai
#19735 permissions: store only constrained permission profiles @bolinfest
#19736 permissions: constrain requirements as profiles @bolinfest
#19737 permissions: derive legacy exec policies at boundaries @bolinfest
#19779 Add Codex issue digest skill @etraut-openai
#19792 multi_agent_v2: move thread cap into feature config @jif-oai
#18982 feat: use git-backed workspace diffs for memory consolidation @jif-oai
#19809 Allow Phase 2 memory claims after retry exhaustion @jif-oai
#19812 Avoid rewriting Phase 2 selection on clean workspace @jif-oai
#19813 nit: one more fix @jif-oai
#19818 chore: split memories part 1 @jif-oai
#19510 Hide rewind preview when no user message exists @etraut-openai
#19618 Persist shell mode commands in prompt history @etraut-openai
#19709 Render delegated patch approval details @etraut-openai
#19490 Streamline plugin, apps, and skills handlers @pakrym-oai
#19762 refactor: make auth loading async @efrazer-oai
#19854 ci: pin npm staging smoke test to a recent rust-release run @bolinfest
#19851 ci: migrate Bazel setup away from archived setup-bazelisk @bolinfest
#19491 Streamline account and command handlers @pakrym-oai
#19771 fix: filter dynamic deferred tools from model_visible_specs @sayan-oai
#19863 [codex-analytics] remove ga flag @rhan-oai
#19865 Cap original-detail image token estimates @fjord-oai
#19591 Fix filtered thread-list resume regression in TUI @etraut-openai
#19513 Delay approval prompts while typing @etraut-openai
#19706 Preserve TUI markdown list spacing after code blocks @etraut-openai
#19841 permissions: remove cwd special path @bolinfest
#19492 Streamline thread start handler @pakrym-oai
#19874 [codex-backend] Prefer state git metadata in filtered thread lists @joeytrasatti-openai
#19493 Streamline thread mutation handlers @pakrym-oai
#19862 [codex] Shard exec Bazel integration test @starr-openai
#18996 Publish Python SDK with Codex-pinned versioning @sdcoffey
#19494 Streamline thread read handlers @pakrym-oai
#19839 [codex] Trace cancelled inference streams @cassirer-openai
#19495 Streamline thread resume and fork handlers @pakrym-oai
#19497 Streamline turn and realtime handlers @pakrym-oai
#18372 Show action required in terminal title @canvrno-oai
#19884 Add MCP app feature flag @mzeng-openai
#19498 Streamline review and feedback handlers @pakrym-oai
#19772 permissions: derive config defaults as profiles @bolinfest
#19836 disallow fileparams metadata for custom mcps @colby-oai
#19892 Refactor exec-server filesystem API into codex-file-system @miz-openai
#19452 Stabilize plugin MCP fixture tests @dylan-hurd-oai
#19481 Remove ghost snapshots @pakrym-oai
#19773 permissions: require profiles in TUI thread state @bolinfest
#19917 Allow /statusline and /title slash commands during active turns @canvrno-oai
#19763 refactor: load agent identity runtime eagerly @efrazer-oai
#17689 [codex-analytics] include user agent in default headers @marksteinbrick-oai
#19912 Clarify PR template invitation requirement @etraut-openai
#19630 Avoid persisting ShutdownComplete after thread shutdown @etraut-openai
#19774 permissions: make SessionConfigured profile-only @bolinfest
#19775 permissions: derive snapshot sandbox projections @bolinfest
#19920 Allow large remote app-server resume responses @etraut-openai
#19776 permissions: store thread sessions as profiles @bolinfest
#19899 app-server-protocol: mark permission profiles experimental @bolinfest
#19933 Add codex update command @etraut-openai
#19914 feat: Cache remote plugin bundles on install @xl-openai
#19456 Add remote plugin uninstall API @xli-oai
#19805 Add MultiAgentV2 root and subagent context hints @jif-oai
#19860 feat: split memories part 2 @jif-oai
#19961 feat: fix hinting 2 @jif-oai
#19963 feat: fix hinting 3 @jif-oai
#19967 Stabilize memory Phase 2 input ordering @jif-oai
#19970 feat: trigger memories from user turns with cooldown @jif-oai
#19904 fix: configure AgentIdentity AuthAPI base URL @efrazer-oai
#19990 feat: skip memory startup when Codex rate limits are low @jif-oai
#19998 feat: house-keeping memories 1 @jif-oai
#20000 feat: house-keeping memories 2 @jif-oai
#19832 Preserve assistant phase for replayed messages @friel-openai
#19625 Reset TUI keyboard reporting on exit @etraut-openai
#18593 feat(tui): add configurable keymap support @fcoury-oai
#19846 [sandbox] Enforce protected workspace metadata paths @evawong-oai
#20005 feat: house-keeping memories 3 @jif-oai
#19929 TUI: use cumulative turn duration for worked-for separator @etraut-openai
#19753 Terminate stdio MCP servers on shutdown to avoid process leaks @etraut-openai
#19473 Add turn start timestamp to turn metadata @mchen-oai
#19875 Strip connector provenance metadata from custom MCP tools @colby-oai
#19764 feat: verify agent identity JWTs with JWKS @efrazer-oai
#19847 Enforce workspace metadata protections in Seatbelt @evawong-oai
#19509 Record MCP result telemetry on mcp.tools.call spans @mchen-oai
#19907 Clarify network approval auto-review prompts @maja-openai
#19901 feat(tui): suggest plan mode from composer drafts @fcoury-oai
#19931 Move local /resume cwd filtering into thread/list @canvrno-oai
#19986 fix(tui): let esc exit empty shell mode @fcoury-oai
#19895 External agent session support @stefanstokic-oai
#20002 fix(network-proxy): tighten network proxy bypass defaults @viyatb-oai
#19900 permissions: add built-in default profiles @bolinfest
#20045 Fix plan mode nudge test after task completion signature change @canvrno-oai
#19432 [codex] Add token usage to turn tracing spans @charley-openai
#20001 fix(network-proxy): harden linux proxy bridge helpers @viyatb-oai
#19959 Fix log db batch flush flake @dylan-hurd-oai
#17373 app-server: run initialized rpcs with keyed serialization @euroelessar
#19708 Load cloud requirements for agent identity @shijie-oai
#19999 fix(network-proxy): recheck network proxy connect targets @viyatb-oai
#20047 app-server: allow remote_control runtime feature override @euroelessar
#20052 Make MultiAgentV2 wait minimum configurable @jif-oai
#20008 tui: use permission profiles for sandbox state @bolinfest
#20068 app-server: disable remote control without sqlite @euroelessar
#20066 [rollout-trace] Include x-request-id in rollout trace. @cassirer-openai
#19705 Discover hooks bundled with plugins @abhinav-oai
#18704 /plugins: add marketplace install flow @canvrno-oai
#20085 fix: don't auto approve git -C ... @owenlin0
#20088 Fix flaky plugin hook env test @abhinav-oai
#19995 fix(network-proxy): normalize network proxy host matching @viyatb-oai
#20010 core tests: submit turns with permission profiles @bolinfest
#20092 Return None when auth refresh fails @gpeal
#19919 app-server: notify clients of remote-control status changes @euroelessar
#20097 Refine Codex issue digest summaries @etraut-openai
#20011 core tests: build user turns from permission profiles @bolinfest
#20013 core tests: migrate more turns to permission profiles @bolinfest
#20015 core tests: configure profiles directly @bolinfest
#20016 core tests: send model turns with permission profiles @bolinfest
#20100 Increase plugin hook env test timeout @abhinav-oai
#20018 core tests: migrate model/personality turns to profiles @bolinfest
#20021 core tests: migrate view image turns to profiles @bolinfest
#20024 core tests: migrate safety check turns to profiles @bolinfest
#20026 core tests: migrate plan item turns to profiles @bolinfest
#20027 core tests: migrate tools tests to permission profiles @bolinfest
#20028 core tests: migrate permissions message tests to profiles @bolinfest
#20030 core tests: migrate exec policy turns to profiles @bolinfest
#20032 core tests: migrate prompt caching turns to profiles @bolinfest
#20033 core tests: migrate request permissions tool turns to profiles @bolinfest
#20034 core tests: migrate zsh-fork permissions to profiles @bolinfest
#20035 core tests: migrate compact turns to profiles @bolinfest
#20037 core tests: migrate rmcp turns to profiles @bolinfest
#20040 core tests: migrate apply patch turns to profiles @bolinfest
#20041 core tests: migrate hook turns to profiles @bolinfest
#20072 Support disabling tool suggest for specific tools. @mzeng-openai
#19949 Support detect and import MCP, Subagents, hooks, commands from external @alexsong-oai
#19442 feat: disable capabilities by model provider @celia-oai
#20108 fix: restore live event submit path for apply patch tests @bolinfest
#19939 Restore TUI working status after steer message is set @canvrno-oai
#20086 Fix plugin list workspace settings test isolation @canvrno-oai
#20049 feat: expose provider capability bounds to app server clients @celia-oai
#20109 feat: update Bedrock Mantle endpoint and GPT-5.4 model ID @celia-oai
#20106 linux-sandbox: switch helper plumbing to PermissionProfile @bolinfest
#20112 Soften skill description budget warnings @xl-openai
#20058 Add environment provider snapshot @starr-openai
#20133 chore(cli) deprecate --full-auto @dylan-hurd-oai
#20117 feat(cli): add explicit sandbox permission profiles @viyatb-oai
#20139 Delete multi_agent_v2 followup_task interrupt parameter @andmis
#20118 feat(cli): add sandbox profile config controls @viyatb-oai
#20144 Fix migrated hook path rewriting @alexsong-oai
#20042 Fix Windows pseudoconsole attribute handling for sandboxed PTY sessions @iceweasel-oai
#20186 nit: drop old memories things @jif-oai
#20180 Make multi-agent v2 ignore agents.max_depth @jif-oai
#20082 Use /goal resume for paused goals @etraut-openai
#20172 TUI: Remove core protocol dependency [1/7] @etraut-openai
#19211 Improve Windows process management edge cases @iceweasel-oai
#20123 [rollout-tracer] Match analysis messages on encrypted id. @cassirer-openai
#20173 TUI: Remove core protocol dependency [2/7] @etraut-openai
#20174 TUI: Remove core protocol dependency [3/7] @etraut-openai
#20228 [codex-backend] Prefer sqlite git info for rollout-path reads @joeytrasatti-openai
#20141 Add ThreadManager sample crate @pakrym-oai
#20046 test protocol: lock inter-agent commentary phase @friel-openai
#20064 Include auto-review rollout in feedback uploads @won-openai
#20096 feat: Use remote installed plugin cache for skills and MCP @xl-openai
#19184 fix: handle deferred network proxy denials @viyatb-oai
#20089 expand the set of core shell env vars for Windows. @iceweasel-oai
#17088 [codex-analytics] ingest server requests and responses @rhan-oai
#20091 [tool_suggest] Improve tool_suggest triggering conditions. @mzeng-openai
#20258 app-server: fix outgoing sender test setup @sayan-oai
#20050 [app-server] type client response payloads @rhan-oai
#19966 Require remote plugin detail before uninstall @xli-oai
#20059 [app-server] centralize client response analytics @rhan-oai
#19334 Fallback login callback port when default is busy @xli-oai
#20231 [apps] Add apps MCP path override @adaley-openai
#20242 docs: discourage #[async_trait] and #[allow(async_fn_in_trait)] @bolinfest
#19620 Escape turn metadata headers as ASCII JSON @etraut-openai
#19537 [mcp] Fix plugin MCP approval policy. @mzeng-openai
#19229 Add agent graph store interface @rasmusrygaard
#20243 Add codex-core public API listing @pakrym-oai
#19435 stop blocking unified_exec on Windows @iceweasel-oai
#19852 Enforce workspace metadata protections in Linux sandbox @evawong-oai
#20136 Update Codex login success page UX @rafael-jac
#20271 chore: increase release build timeout from 60 min to 90 @bolinfest
#19778 Add hooks/list app-server RPC @abhinav-oai
#20261 Consume ai-title from external sessions and add end marker @alexsong-oai
#20284 Import external agent sessions in background @stefanstokic-oai
#20149 Reduce the surface of collaboration modes @pakrym-oai
#20282 tui: return from side chat on Ctrl-D @etraut-openai
#20250 update codex_plugins_beta_setting (from workspace settings) @zamoshchin-openai
#20080 [codex-analytics] prevent stale guardian events from satisfying reused reviews @rhan-oai
#20291 app-server: remove dead api version handling from bespoke events @pakrym-oai
#20304 [plugins] Allow MSFT curated plugins in tool_suggest @mzeng-openai
#20095 permissions: expose active profile metadata @bolinfest
#19840 Add persisted hook enablement state @abhinav-oai
#20343 ci: increase Windows release workflow timeouts @bolinfest