openai

Codex CLI 0.121.0: Marketplace, Memory, MCP Expansion

Codex CLI 0.121.0 adds marketplace install flexibility, TUI history search, memory controls, and expanded MCP support. macOS sandbox and Windows path fixes included.

TL;DR

Marketplace install command now supports GitHub, git URLs, local dirs, and direct JSON URLs
TUI history search (Ctrl+R) and memory management controls added
MCP/plugin support expanded with parallel tool calls, namespaced registration, and sandbox metadata
macOS sandbox fixes for private DNS; Windows path handling corrected

New

Marketplace install command — codex marketplace add now installs plugins from GitHub, git URLs, local directories, and direct marketplace.json URLs.
TUI history search — Ctrl+R reverse search in composer, plus local recall for accepted slash commands.
Memory controls — TUI and app-server endpoints for memory mode toggle, reset/deletion, and extension cleanup.
MCP tool calls — MCP Apps support with namespaced registration, parallel-call opt-in flag, and sandbox-state metadata for MCP servers.
Realtime API expansion — Output modality, transcript completion events, raw turn item injection, and symlink-aware filesystem metadata.
Secure devcontainer profile — New profile with bubblewrap support; macOS sandbox now allows Unix socket allowlists.

Fixed

macOS sandbox/proxy handling for private DNS; removed danger-full-access denylist-only network mode.
Windows cwd/session matching for resume --last and thread/list with verbatim path prefixes.
Rate-limit/account handling for prolite plans; unknown WHAM plan values now decodable.
Guardian timeouts now distinct from policy denials with timeout-specific guidance and visible TUI history.
App-server stability — prevents premature thread unloads, tolerates failed trust persistence, skips broken symlinks in fs/readDirectory.
MCP/tool-call edge cases including flattened deferred tool names, elicitation timeout accounting, and empty namespace descriptions.