openai

Codex CLI 0.129.0: Vim Composer, Plugin Sharing, Linux Sandbox Fixes

Codex CLI 0.129.0 brings Vim composer mode, plugin workspace sharing with access controls, and critical Linux/Windows sandbox reliability fixes. Memories MCP v1 adds persistent memory management.

TL;DR

Modal Vim editing now available in the TUI composer with full keymap support
Plugin workspace sharing with access controls and marketplace upgrades
Linux sandbox reliability fixes for older bwrap, symlinks, and shared /tmp setups
Windows sandbox improvements for named pipes, ConPTY teardown, and Git worktrees

New

Vim composer mode — Modal Vim editing in the TUI with /vim command, default-mode config, and Vim-specific keymap contexts
Plugin workspace sharing — Share plugins across workspaces with access controls, source filtering, local path tracking, and marketplace removal/upgrade flows
Redesigned session picker — Easier resume and fork workflows with raw scrollback mode, /ide context injection, and workspace-aware /diff
/hooks browser — Browse and toggle lifecycle hooks from the TUI, with PreToolUse context support and before/after compaction execution
Theme-aware status line — Color-coded status line with optional PR and branch-change summaries; /keymap debug inspector for terminal key events
Experimental goals improvements — Goals now discoverable, stay paused across resume unless opted back in, with clearer validation and multi-day duration output
Memories MCP v1 — Full MCP integration for persistent memory management with pagination, multi-query search, normalized matching, and symlink protection

Fixed

/copy now works correctly in tmux without passthrough mode
Alt+Enter and modified Delete/Backspace keys behave correctly in the TUI
Windows typing and paste latency reduced with shared burst interval
Large paste placeholders and Ctrl+C-stashed drafts survive clear/editor workflows without corrupting draft history
TUI startup and accessibility tightened by bounding terminal probes, clearing first inline viewport render, and honoring animations=false for screen readers
Linux sandbox startup more reliable across older bwrap versions, slow mount probes, symlink-protected paths, and shared /tmp setups
Windows sandbox and exec policy now handle named pipes, ConPTY teardown, PowerShell-wrapped allow rules, Git worktree safe.directory, and unsafe Git options
Custom CA login behind TLS-inspecting proxies, Bedrock runtime endpoint reporting, dangerous project config keys, heredoc redirect approval matching, and unbounded MCP/hook output growth