Codex CLI 0.128.0: Persisted Goals, Permission Profiles, Plugin Marketplace

TL;DR

• Persisted /goal workflows with pause/resume and TUI controls
• Permission profiles now explicit with built-in defaults and CLI controls
• Plugin marketplace install, remote caching, and external agent session import
• Windows sandbox and network proxy hardening; Bedrock GPT-5.4 support

New

• Persisted /goal workflows — Create, pause, resume, and clear goals with app-server APIs, model tools, runtime continuation, and full TUI controls
• codex update command — Built-in update mechanism for the CLI
• Configurable TUI keymaps — Customize keyboard shortcuts in the terminal interface
• Permission profiles expansion — Built-in defaults, sandbox CLI profile selection, cwd controls, and active-profile metadata for clients
• Plugin marketplace install — Install plugins directly from marketplace with remote bundle caching
• Remote plugin uninstall — Remove plugins via API without local filesystem access
• Plugin-bundled hooks — Discover and manage hooks shipped with plugins; hook enablement state now persisted
• External agent session import — Import sessions from external agents with background processing and title handling
• MultiAgentV2 configuration — Thread caps, wait-time controls, root/subagent hints, and v2-specific depth handling now explicit
• Action-required terminal titles — Show when Codex needs user input in the window title
• /statusline and /title edits — Edit these slash commands during active turns

Fixed

• Resume and interruption hangs — Fixed stale interrupt hangs, persisted provider restoration, large remote resume responses, and slow filtered resume lists
• TUI reliability — Terminal resize reflow, markdown list spacing, slash-command popup layout, keyboard cleanup, shell-mode escape, and working status updates
• Network proxy behavior — Deferred denials, proxy bypass defaults, resolved target checks, IPv6 host matching, and git -C approval handling
• Windows sandbox and PTY edge cases — Pseudoconsole startup, elevated runner process handling, core shell environment inheritance, and named-pipe validation
• Bedrock model support — Fixed apply_patch tool for Bedrock; GPT-5.4 reasoning levels and endpoint metadata updated
• MCP/plugin edge cases — Stdio server cleanup, plugin MCP approval persistence, and custom MCP metadata isolation

Breaking Changes

• --full-auto deprecated — Use explicit permission profiles and trust flows instead
• GNU Linux binaries no longer published — Release artifacts now focus on primary platforms

Update via: codex update or download from GitHub releases

Source: Codex