OpenAI Codex CLI rust-v0.128.0

OpenAI Codex CLI rust-v0.128.0 was released on April 30, 2026.

Summary

New Features - Added persisted /goal workflows with app-server APIs, model tools, runtime continuation, and TUI controls for create, pause, resume, and clear. (18073, 18074, 18075, 18076, 18077, 20...

Release Notes

New Features - Added persisted /goal workflows with app-server APIs, model tools, runtime continuation, and TUI controls for create, pause, resume, and clear. (18073, 18074, 18075, 18076, 18077, 20082) - Added codex update, configurable TUI keymaps, plan-mode nudges, action-required terminal titles, and active-turn /statusline and /title edits. (19933, 18593, 19901, 18372, 19917) - Expanded permission profiles with built-in defaults, sandbox CLI profile selection, cwd controls, and active-profile metadata for clients. (19900, 20117, 20118, 20095) - Improved plugin workflows with marketplace installation, remote bundle caching, remote uninstall, plugin-bundled hooks, hook enablement state, and external-agent config import. (18704, 19914, 19456, 19705, 19840, 19949) - Added external agent session import, including background imports and imported-session title handling. (19895, 20284, 20261) - Made MultiAgentV2 configuration more explicit with thread caps, wait-time controls, root/subagent hints, and v2-specific depth handling. (19360, 19792, 19805, 20052, 20180) Bug Fixes - Fixed several resume and interruption issues, including stale interrupt hangs, persisted provider restoration, large remote resume responses, and slow filtered resume lists. (18392, 19287, 19920, 19591) - Improved TUI reliability around terminal resize reflow, markdown list spacing, slash-command popup layout, keyboard cleanup, shell-mode escape, and working status updates. (18575, 19706, 19511, 19625, 19986, 19939) - Hardened managed network behavior for deferred denials, proxy bypass defaults, resolved target checks, IPv6 host matching, and git -C approval handling. (19184, 20002, 19999, 19995, 20085) - Fixed Windows sandbox and PTY edge cases, including pseudoconsole startup, elevated runner process handling, core shell environment inheritance, and named-pipe validation. (20042, 19211, 20089, 19283) - Fixed Bedrock model support for applypatch, GPT-5.4 reasoning levels, and updated Bedrock GPT-5.4 endpoint/model metadata. (19416, 19461, 20109) - Fixed MCP/plugin edge cases around stdio server cleanup, plugin MCP approval persistence, and custom MCP metadata isolation. (19753, 19537, 19836, 19875) Documentation - Updated the bundled OpenAI Docs skill for GPT-5.5, gpt-image-2, and clearer upgrade guidance. (19407, 19443, 19422) - Clarified contributor-facing docs, including the PR template, Rust async trait guidance, and README wording. (19912, 20242, 19514) - Added a checked-in codex-core public API listing and a ThreadManager sample crate. (20243, 20141) Chores - Published codex-app-server release artifacts, stopped publishing GNU Linux binaries, and increased release workflow timeouts. (19447, 19445, 20271, 20343) - Added Codex-pinned versioning for the Python app-server SDK package. (18996) - Deprecated --full-auto while steering users toward explicit permission profiles and trust flows. (20133) - Stabilized CI and release plumbing with Bazel setup migration, release smoke-test pinning, and updated workflow pins/timeouts. (19851, 19854, 19472, 19609) Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.125.0...rust-v0.128.0 - 19124 Make MultiAgentV2 interruption markers assistant-authored @jif-oai - 19354 chore: alias maxconcurrentthreadspersession @jif-oai - 19360 feat: surface multi-agent thread limit in spawn description @jif-oai - 19351 Add agents.interruptmessage for interruption markers @jif-oai - 18392 Fix hang on turn/interrupt @danwang-oai - 19380 chore: drop MCP Plugins and App from Morpheus @jif-oai - 18907 respect workspace option for disabling plugins @zamoshchin-openai - 19283 check PID of named pipe consumer @iceweasel-oai - 19407 Update bundled OpenAI Docs skill for GPT-5.5 @kkahadze-oai - 19163 Harden package-manager install policy @mcgrew-oai - 19416 Fix: use function applypatch tool for Bedrock model @celia-oai - 19093 [codex] Omit fork turns from thread started notifications @euroelessar - 19244 Update unix socket transport to use WebSocket upgrade @willwang-openai - 19170 Skip disabled rows in selection menu numbering and default focus @canvrno-oai - 19414 permissions: make legacy profile conversion cwd-free @bolinfest - 18900 Migrate fork and resume reads to thread store @wiltzius-openai - 19445 ci: stop publishing GNU Linux release artifacts @bolinfest - 19443 Add gpt-image-2 to bundled OpenAI Docs skill @kkahadze-oai - 18584 [4/4] Honor Streamable HTTP MCP placement @aibrahim-oai - 19447 ci: publish codex-app-server release artifacts @bolinfest - 19422 Clarify bundled OpenAI Docs upgrade guide wording @kkahadze-oai - 19266 [codex] add non-local thread store regression harness @wiltzius-openai - 19098 feat: Compress skill paths with root aliases @xl-openai - 19207 [codex] Forward Codex Apps tool call IDs to backend metadata @rreichel3-oai - 19453 Serialize legacy Windows PowerShell sandbox tests @dylan-hurd-oai - 19234 Refactor log DB into LogWriter interface @rasmusrygaard - 19461 fix: Bedrock GPT-5.4 reasoning levels @celia-oai - 19449 permissions: remove legacy read-only access modes @bolinfest - 19472 ci: pin codex-action v1.7 @viyatb-oai - 19468 Fix Bazel cargobin runfiles paths @fjord-oai - 19410 Remove jsrepl feature @fjord-oai - 18073 Add goal persistence foundation (1 / 5) @etraut-openai - 18074 Add goal app-server API (2 / 5) @etraut-openai - 18075 Add goal model tools (3 / 5) @etraut-openai - 18076 Add goal core runtime (4 / 5) @etraut-openai - 18077 Add goal TUI UX (5 / 5) @etraut-openai - 19454 Split approval matrix test groups @dylan-hurd-oai - 19514 Fix codex-rs README grammar @etraut-openai - 19459 Enable unavailable dummy tools by default @mzeng-openai - 19524 [codex] Prune unused codex-mcp API and duplicate helpers @aibrahim-oai - 19526 [codex] Order codex-mcp items by visibility @aibrahim-oai - 19578 fix: increase Bazel timeout to 45 minutes @bolinfest - 19287 Restore persisted model provider on thread resume @etraut-openai - 19593 test: isolate remote thread store regression from plugin warmups @bolinfest - 19511 Keep slash command popup columns stable while scrolling @etraut-openai - 19595 [codex] Bypass managed network for escalated exec @viyatb-oai - 19604 test: stabilize app-server path assertions on Windows @bolinfest - 19609 fix: restore 30-minute timeout for Bazel builds @bolinfest - 19389 Guard npm update readiness @shijie-oai - 18575 fix(tui): reflow scrollback on terminal resize @fcoury-oai - 19610 Support endturn in response.completed @andmis - 19640 [codex] remove responses command @tibo-openai - 19683 test: harden app-server integration tests @bolinfest - 18904 feat: load AgentIdentity from JWT login/env @efrazer-oai - 19606 permissions: make runtime config profile-backed @bolinfest - 19392 permissions: derive compatibility policies from profiles @bolinfest - 19484 Lift app-server JSON-RPC error handling to request boundary @pakrym-oai - 19487 [codex] Move config loading into codex-config @pakrym-oai - 19393 permissions: migrate approval and sandbox consumers to profiles @bolinfest - 19726 Fix codex-core config test type paths @pakrym-oai - 19727 test: increase core-all-test shard count to 16 @bolinfest - 19725 Split MCP connection modules @aibrahim-oai - 19605 Delete unused ResponseItem::Message.endturn @andmis - 19394 permissions: remove core legacy policy round trips @bolinfest - 19733 Allow agents.maxthreads to work with multiagentv2 @andmis - 19395 permissions: finish profile-backed app surfaces @bolinfest - 19739 inline hostname resolution for remote sandbox config @abhinav-oai - 19734 permissions: centralize legacy sandbox projection @bolinfest - 19058 Add /auto-review-denials retry approval flow @won-openai - 19735 permissions: store only constrained permission profiles @bolinfest - 19736 permissions: constrain requirements as profiles @bolinfest - 19737 permissions: derive legacy exec policies at boundaries @bolinfest - 19779 Add Codex issue digest skill @etraut-openai - 19792 multiagentv2: move thread cap into feature config @jif-oai - 18982 feat: use git-backed workspace diffs for memory consolidation @jif-oai - 19809 Allow Phase 2 memory claims after retry exhaustion @jif-oai - 19812 Avoid rewriting Phase 2 selection on clean workspace @jif-oai - 19813 nit: one more fix @jif-oai - 19818 chore: split memories part 1 @jif-oai - 19510 Hide rewind preview when no user message exists @etraut-openai - 19618 Persist shell mode commands in prompt history @etraut-openai - 19709 Render delegated patch approval details @etraut-openai - 19490 Streamline plugin, apps, and skills handlers @pakrym-oai - 19762 refactor: make auth loading async @efrazer-oai - 19854 ci: pin npm staging smoke test to a recent rust-release run @bolinfest - 19851 ci: migrate Bazel setup away from archived setup-bazelisk @bolinfest - 19491 Streamline account and command handlers @pakrym-oai - 19771 fix: filter dynamic deferred tools from modelvisiblespecs @sayan-oai - 19863 [codex-analytics] remove ga flag @rhan-oai - 19865 Cap original-detail image token estimates @fjord-oai - 19591 Fix filtered thread-list resume regression in TUI @etraut-openai - 19513 Delay approval prompts while typing @etraut-openai - 19706 Preserve TUI markdown list spacing after code blocks @etraut-openai - 19841 permissions: remove cwd special path @bolinfest - 19492 Streamline thread start handler @pakrym-oai - 19874 [codex-backend] Prefer state git metadata in filtered thread lists @joeytrasatti-openai - 19493 Streamline thread mutation handlers @pakrym-oai - 19862 [codex] Shard exec Bazel integration test @starr-openai - 18996 Publish Python SDK with Codex-pinned versioning @sdcoffey - 19494 Streamline thread read handlers @pakrym-oai - 19839 [codex] Trace cancelled inference streams @cassirer-openai - 19495 Streamline thread resume and fork handlers @pakrym-oai - 19497 Streamline turn and realtime handlers @pakrym-oai - 18372 Show action required in terminal title @canvrno-oai - 19884 Add MCP app feature flag @mzeng-openai - 19498 Streamline review and feedback handlers @pakrym-oai - 19772 permissions: derive config defaults as profiles @bolinfest - 19836 disallow fileparams metadata for custom mcps @colby-oai - 19892 Refactor exec-server filesystem API into codex-file-system @miz-openai - 19452 Stabilize plugin MCP fixture tests @dylan-hurd-oai - 19481 Remove ghost snapshots @pakrym-oai - 19773 permissions: require profiles in TUI thread state @bolinfest - 19917 Allow /statusline and /title slash commands during active turns @canvrno-oai - 19763 refactor: load agent identity runtime eagerly @efrazer-oai - 17689 [codex-analytics] include user agent in default headers @marksteinbrick-oai - 19912 Clarify PR template invitation requirement @etraut-openai - 19630 Avoid persisting ShutdownComplete after thread shutdown @etraut-openai - 19774 permissions: make SessionConfigured profile-only @bolinfest - 19775 permissions: derive snapshot sandbox projections @bolinfest - 19920 Allow large remote app-server resume responses @etraut-openai - 19776 permissions: store thread sessions as profiles @bolinfest - 19899 app-server-protocol: mark permission profiles experimental @bolinfest - 19933 Add codex update command @etraut-openai - 19914 feat: Cache remote plugin bundles on install @xl-openai - 19456 Add remote plugin uninstall API @xli-oai - 19805 Add MultiAgentV2 root and subagent context hints @jif-oai - 19860 feat: split memories part 2 @jif-oai - 19961 feat: fix hinting 2 @jif-oai - 19963 feat: fix hinting 3 @jif-oai - 19967 Stabilize memory Phase 2 input ordering @jif-oai - 19970 feat: trigger memories from user turns with cooldown @jif-oai - 19904 fix: configure AgentIdentity AuthAPI base URL @efrazer-oai - 19990 feat: skip memory startup when Codex rate limits are low @jif-oai - 19998 feat: house-keeping memories 1 @jif-oai - 20000 feat: house-keeping memories 2 @jif-oai - 19832 Preserve assistant phase for replayed messages @friel-openai - 19625 Reset TUI keyboard reporting on exit @etraut-openai - 18593 feat(tui): add configurable keymap support @fcoury-oai - 19846 [sandbox] Enforce protected workspace metadata paths @evawong-oai - 20005 feat: house-keeping memories 3 @jif-oai - 19929 TUI: use cumulative turn duration for worked-for separator @etraut-openai - 19753 Terminate stdio MCP servers on shutdown to avoid process leaks @etraut-openai - 19473 Add turn start timestamp to turn metadata @mchen-oai - 19875 Strip connector provenance metadata from custom MCP tools @colby-oai - 19764 feat: verify agent identity JWTs with JWKS @efrazer-oai - 19847 Enforce workspace metadata protections in Seatbelt @evawong-oai - 19509 Record MCP result telemetry on mcp.tools.call spans @mchen-oai - 19907 Clarify network approval auto-review prompts @maja-openai - 19901 feat(tui): suggest plan mode from composer drafts @fcoury-oai - 19931 Move local /resume cwd filtering into thread/list @canvrno-oai - 19986 fix(tui): let esc exit empty shell mode @fcoury-oai - 19895 External agent session support @stefanstokic-oai - 20002 fix(network-proxy): tighten network proxy bypass defaults @viyatb-oai - 19900 permissions: add built-in default profiles @bolinfest - 20045 Fix plan mode nudge test after task completion signature change @canvrno-oai - 19432 [codex] Add token usage to turn tracing spans @charley-openai - 20001 fix(network-proxy): harden linux proxy bridge helpers @viyatb-oai - 19959 Fix log db batch flush flake @dylan-hurd-oai - 17373 app-server: run initialized rpcs with keyed serialization @euroelessar - 19708 Load cloud requirements for agent identity @shijie-oai - 19999 fix(network-proxy): recheck network proxy connect targets @viyatb-oai - 20047 app-server: allow remotecontrol runtime feature override @euroelessar - 20052 Make MultiAgentV2 wait minimum configurable @jif-oai - 20008 tui: use permission profiles for sandbox state @bolinfest - 20068 app-server: disable remote control without sqlite @euroelessar - 20066 [rollout-trace] Include x-request-id in rollout trace. @cassirer-openai - 19705 Discover hooks bundled with plugins @abhinav-oai - 18704 /plugins: add marketplace install flow @canvrno-oai - 20085 fix: don't auto approve git -C ... @owenlin0 - 20088 Fix flaky plugin hook env test @abhinav-oai - 19995 fix(network-proxy): normalize network proxy host matching @viyatb-oai - 20010 core tests: submit turns with permission profiles @bolinfest - 20092 Return None when auth refresh fails @gpeal - 19919 app-server: notify clients of remote-control status changes @euroelessar - 20097 Refine Codex issue digest summaries @etraut-openai - 20011 core tests: build user turns from permission profiles @bolinfest - 20013 core tests: migrate more turns to permission profiles @bolinfest - 20015 core tests: configure profiles directly @bolinfest - 20016 core tests: send model turns with permission profiles @bolinfest - 20100 Increase plugin hook env test timeout @abhinav-oai - 20018 core tests: migrate model/personality turns to profiles @bolinfest - 20021 core tests: migrate view image turns to profiles @bolinfest - 20024 core tests: migrate safety check turns to profiles @bolinfest - 20026 core tests: migrate plan item turns to profiles @bolinfest - 20027 core tests: migrate tools tests to permission profiles @bolinfest - 20028 core tests: migrate permissions message tests to profiles @bolinfest - 20030 core tests: migrate exec policy turns to profiles @bolinfest - 20032 core tests: migrate prompt caching turns to profiles @bolinfest - 20033 core tests: migrate request permissions tool turns to profiles @bolinfest - 20034 core tests: migrate zsh-fork permissions to profiles @bolinfest - 20035 core tests: migrate compact turns to profiles @bolinfest - 20037 core tests: migrate rmcp turns to profiles @bolinfest - 20040 core tests: migrate apply patch turns to profiles @bolinfest - 20041 core tests: migrate hook turns to profiles @bolinfest - 20072 Support disabling tool suggest for specific tools. @mzeng-openai - 19949 Support detect and import MCP, Subagents, hooks, commands from external @alexsong-oai - 19442 feat: disable capabilities by model provider @celia-oai - 20108 fix: restore live event submit path for apply patch tests @bolinfest - 19939 Restore TUI working status after steer message is set @canvrno-oai - 20086 Fix plugin list workspace settings test isolation @canvrno-oai - 20049 feat: expose provider capability bounds to app server clients @celia-oai - 20109 feat: update Bedrock Mantle endpoint and GPT-5.4 model ID @celia-oai - 20106 linux-sandbox: switch helper plumbing to PermissionProfile @bolinfest - 20112 Soften skill description budget warnings @xl-openai - 20058 Add environment provider snapshot @starr-openai - 20133 chore(cli) deprecate --full-auto @dylan-hurd-oai - 20117 feat(cli): add explicit sandbox permission profiles @viyatb-oai - 20139 Delete multiagentv2 followuptask interrupt parameter @andmis - 20118 feat(cli): add sandbox profile config controls @viyatb-oai - 20144 Fix migrated hook path rewriting @alexsong-oai - 20042 Fix Windows pseudoconsole attribute handling for sandboxed PTY sessions @iceweasel-oai - 20186 nit: drop old memories things @jif-oai - 20180 Make multi-agent v2 ignore agents.maxdepth @jif-oai - 20082 Use /goal resume for paused goals @etraut-openai - 20172 TUI: Remove core protocol dependency [1/7] @etraut-openai - 19211 Improve Windows process management edge cases @iceweasel-oai - 20123 [rollout-tracer] Match analysis messages on encrypted id. @cassirer-openai - 20173 TUI: Remove core protocol dependency [2/7] @etraut-openai - 20174 TUI: Remove core protocol dependency [3/7] @etraut-openai - 20228 [codex-backend] Prefer sqlite git info for rollout-path reads @joeytrasatti-openai - 20141 Add ThreadManager sample crate @pakrym-oai - 20046 test protocol: lock inter-agent commentary phase @friel-openai - 20064 Include auto-review rollout in feedback uploads @won-openai - 20096 feat: Use remote installed plugin cache for skills and MCP @xl-openai - 19184 fix: handle deferred network proxy denials @viyatb-oai - 20089 expand the set of core shell env vars for Windows. @iceweasel-oai - 17088 [codex-analytics] ingest server requests and responses @rhan-oai - 20091 [toolsuggest] Improve toolsuggest triggering conditions. @mzeng-openai - 20258 app-server: fix outgoing sender test setup @sayan-oai - 20050 [app-server] type client response payloads @rhan-oai - 19966 Require remote plugin detail before uninstall @xli-oai - 20059 [app-server] centralize client response analytics @rhan-oai - 19334 Fallback login callback port when default is busy @xli-oai - 20231 [apps] Add apps MCP path override @adaley-openai - 20242 docs: discourage [asynctrait] and [allow(asyncfnintrait)] @bolinfest - 19620 Escape turn metadata headers as ASCII JSON @etraut-openai - 19537 [mcp] Fix plugin MCP approval policy. @mzeng-openai - 19229 Add agent graph store interface @rasmusrygaard - 20243 Add codex-core public API listing @pakrym-oai - 19435 stop blocking unifiedexec on Windows @iceweasel-oai - 19852 Enforce workspace metadata protections in Linux sandbox @evawong-oai - 20136 Update Codex login success page UX @rafael-jac - 20271 chore: increase release build timeout from 60 min to 90 @bolinfest - 19778 Add hooks/list app-server RPC @abhinav-oai - 20261 Consume ai-title from external sessions and add end marker @alexsong-oai - 20284 Import external agent sessions in background @stefanstokic-oai - 20149 Reduce the surface of collaboration modes @pakrym-oai - 20282 tui: return from side chat on Ctrl-D @etraut-openai - 20250 update codexpluginsbetasetting (from workspace settings) @zamoshchin-openai - 20080 [codex-analytics] prevent stale guardian events from satisfying reused reviews @rhan-oai - 20291 app-server: remove dead api version handling from bespoke events @pakrym-oai - 20304 [plugins] Allow MSFT curated plugins in toolsuggest @mzeng-openai - 20095 permissions: expose active profile metadata @bolinfest - 19840 Add persisted hook enablement state @abhinav-oai - 20343 ci: increase Windows release workflow timeouts @bolinfest

View original release

Other Recent OpenAI Codex CLI Releases

• rust-v0.144.6 (July 18, 2026)
• rust-v0.144.5 (July 16, 2026)
• rust-v0.144.4 (July 14, 2026)
• rust-v0.144.3 (July 13, 2026)
• rust-v0.144.2 (July 13, 2026)

All OpenAI Codex CLI releases · All AI coding tool releases on Havoptic