ดาวน์โหลด Codex CLI 0.122.0

New Features
- Standalone installs are more self-contained, and codex app now opens or installs Desktop correctly on Windows and Intel Macs (#17022, #18500).
- The TUI can open /side conversations for quick side questions, and queued input now supports slash commands and ! shell prompts while work is running (#18190, #18542).
- Plan Mode can start implementation in a fresh context, with context-usage shown before deciding whether to carry the planning thread forward (#17499, #18573).
- Plugin workflows now include tabbed browsing, inline enable/disable toggles, marketplace removal, and remote, cross-repo, or local marketplace sources (#18222, #18395, #17752, #17751, #17277, #18017, #18246).
- Filesystem permissions now support deny-read glob policies, managed deny-read requirements, platform sandbox enforcement, and isolated codex exec runs that ignore user config or rules (#15979, #17740, #18096, #18646).
- Tool discovery and image generation are now enabled by default, with higher-detail image handling and original-detail metadata support for MCP and js_repl image outputs (#17854, #17153, #17714, #18386).
Bug Fixes
- App-server approvals, user-input prompts, and MCP elicitations now disappear from the TUI when another client resolves them, instead of leaving stale prompts behind (#15134).
- Remote-control startup now tolerates missing ChatGPT auth, and MCP startup cancellation works again through app-server sessions (#18117, #18078).
- Resumed and forked app-server threads now replay token usage immediately so context/status UI starts with the restored state (#18023).
- Security-sensitive flows were tightened: logout revokes managed ChatGPT tokens, project hooks and exec policies require trusted workspaces, and Windows sandbox setup avoids broad user-profile and SSH-root grants (#17825, #14718, #18443, #18493).
- Sandboxed apply_patch writes work correctly with split filesystem policies, and file watchers now notice files created after watching begins (#18296, #18492).
- Several TUI rough edges were fixed, including fatal skills-list failures, invalid resume hints, duplicate context statusline entries, /model menu loops, redundant memory notices, and terminal title quoting in iTerm2 (#18061, #18059, #18054, #18154, #18580, #18261).
Documentation
- Added a security-boundaries reference to SECURITY.md for sandboxing, approvals, and network controls (#17848, #18004).
- Documented custom MCP server approval defaults and exec-server stdin behavior (#17843, #18086).
- Updated app-server docs for plugin API changes, marketplace removal, resume/fork token-usage replay, and warning notifications (#17277, #17751, #18023, #18298).
- Added a short guide for the responses API proxy (#18604).
Chores
- Split plugin and marketplace code into codex-core-plugins, moved more connector code into connectors, and continued breaking up the large core session/turn modules (#18070, #18158, #18200, #18206, #18244, #18249).
- Refactored config loading and AGENTS.md discovery behind narrower filesystem and manager abstractions (#18209, #18035).
- Stabilized Bazel and CI with flake fixes, native Rust test sharding, scoped repository caches, stronger Windows clippy coverage, and updated rules_rs/LLVM pins (#17791, #18082, #18366, #18350, #18397).
- Added core CODEOWNERS and a smaller development build profile (#18362, #18612).
- Removed the stale core models.json and updated release preparation to refresh the active model catalog (#18585).
Changelog
Full Changelog: rust-v0.121.0...rust-v0.122.0
- #17958 Support remote compaction for Azure responses providers @ivanmurashko
- #17848 [docs] Add security boundaries reference in SECURITY.md @evawong-oai
- #17990 Auto install start-codex-exec.sh dependencies @pakrym-oai
- #17892 Migrate archive/unarchive to local ThreadStore @wiltzius-openai
- #17989 [codex] Restore remote exec-server filesystem tests @starr-openai
- #15134 Dismiss stale app-server requests after remote resolution @ebrevdo
- #18002 Re-enable it @jif-oai
- #17885 feat: Support alternate marketplace manifests and local string @xl-openai
- #18003 [docs] Revert extra changes from PR 17848 @evawong-oai
- #17714 Support original-detail metadata on MCP image outputs @fjord-oai
- #17022 Significantly improve standalone installer @efrazer-oai
- #17853 [mcp] Add dummy tools for previously called but currently missing tools. @mzeng-openai
- #18004 [docs] Restore SECURITY.md update from PR 17848 @evawong-oai
- #17896 Clarify realtime v2 context and handoff messages @bxie-openai
- #17742 removing network proxy for yolo @won-openai
- #17999 [codex] Make command exec delta tests chunk tolerant @euroelessar
- #18033 feat: introduce codex-pr-body skill @bolinfest
- #17877 Display YOLO mode permissions if set when launching TUI @canvrno-oai
- #18022 Async config loading @pakrym-oai
- #17854 Update ToolSearch to be enabled by default @mzeng-openai
- #17831 [codex][mcp] Add resource uri meta to tool call item. @mzeng-openai
- #18070 Extract plugin loading and marketplace logic into codex-core-plugins @xl-openai
- #18078 Fix MCP startup cancellation through app server @etraut-openai
- #17151 [codex] Route Fed ChatGPT auth through Fed edge @jackz-oai
- #18006 fix: more flake @jif-oai
- #18127 fix: windows flake @jif-oai
- #18137 nit: add min values for memories @jif-oai
- #18135 debug: windows flake @jif-oai
- #18138 chore: more pollution filtering @jif-oai
- #18134 chore: unify memory drop endpoints @jif-oai
- #18144 nit: get rid of an expect @jif-oai
- #17791 Stabilize Bazel tests (timeout tweaks and flake fixes) @ddr-oai
- #18117 fix: auth preflight @jif-oai
- #18146 chore: use justfile_directory in just file @jif-oai
- #18085 [1/8] Add MCP server environment config @aibrahim-oai
- #18054 fix(tui): remove duplicate context statusline item @etraut-openai
- #17287 [code mode] defer mcp tools from exec description @sayan-oai
- #18057 Prefill rename prompt with current thread name @etraut-openai
- #18059 Fix invalid TUI resume hints @etraut-openai
- #17153 Launch image generation by default @won-openai
- #18042 Make yolo skip managed-network tool enforcement @won-openai
- #18154 fix: model menu pop @jif-oai
- #17826 [codex] Add remote thread store implementation @wiltzius-openai
- #18086 [2/8] Support piped stdin in exec process API @aibrahim-oai
- #18061 Avoid fatal TUI errors on skills list failure @etraut-openai
- #15979 feat(permissions): add glob deny-read policy support @viyatb-oai
- #18055 Improve external agent plugin migration for configured marketplaces @alexsong-oai
- #17425 Auto-upgrade configured marketplaces @xli-oai
- #18035 Refactor AGENTS.md discovery into AgentsMdManager @pakrym-oai
- #18158 Move more connector logic into connectors crate @pakrym-oai
- #17843 Add server-level approval defaults for custom MCP servers @mzeng-openai
- #18178 fix: drop lock earlier; was held across send_event().await unnecessarily @bolinfest
- #18000 Make thread unsubscribe test deterministic @starr-openai
- #17996 Add codex_hook_run analytics event @abhinav-oai
- #18184 fix: fix clippy issue in examples/ folder @bolinfest
- #18023 fix(app-server): replay token usage after resume and fork @fcoury-oai
- #18172 [codex] Make realtime startup context truncation deterministic @bxie-openai
- #18192 Throttle Windows Bazel test concurrency @starr-openai
- #18200 [codex] Split codex op handlers @pakrym-oai
- #17387 Register agent tasks behind use_agent_identity @adrian-openai
- #18026 Add OTEL metrics for hook runs @abhinav-oai
- #18092 [codex] Update realtime V2 VAD silence delay and 1.5 prompt @bxie-openai
- #18188 Add tabbed lists, single line rendering, col width changes @canvrno-oai
- #18206 [codex] Split codex turn logic @pakrym-oai
- #18169 Use codex-auto-review for guardian reviews @jeffsharris
- #18196 Use in-process app-server for unknown-thread MCP read test @mzeng-openai
- #18116 Move marketplace add under plugin command @xli-oai
- #18096 feat(sandbox): add glob deny-read platform enforcement @viyatb-oai
- #17971 fix: deprecate use_legacy_landlock feature flag @viyatb-oai
- #18209 Refactor config loading to use filesystem abstraction @pakrym-oai
- #17862 Stream apply_patch changes @akshaynathan
- #18244 Split codex session modules @pakrym-oai
- #17713 feat: add opt-in provider runtime abstraction @celia-oai
- #18182 feat: Handle alternate plugin manifest paths @xl-openai
- #18219 Move Computer Use tool suggestion to core @leoshimo-oai
- #18231 codex: split thread/read view loading @wiltzius-openai
- #18126 fix(exec-policy) rules parsing @dylan-hurd-oai
- #17825 [codex] Revoke ChatGPT tokens on logout @sashank-oai
- #18304 Fix Windows exec policy test flake @etraut-openai
- #17947 fix: reduce writable root @jif-oai
- #18246 Sync local plugin imports, async remote imports, refresh caches after… @alexsong-oai
- #18097 defer all tools behind feature flag @sayan-oai
- #17563 Add PermissionRequest hooks support @abhinav-oai
- #18338 nit: phase 2 ephemeral @jif-oai
- #18267 Support Ctrl+P/Ctrl+N in resume picker @etraut-openai
- #18261 fix(tui): use BEL for terminal title updates @etraut-openai
- #17740 feat(config): support managed deny-read requirements @viyatb-oai
- #18249 Move codex module under session @pakrym-oai
- #18351 Fix config-loader tests after filesystem abstraction race @bolinfest
- #18021 Guardian -> Auto-Review @won-openai
- #18140 feat: config aliases @jif-oai
- #17232 Make app tool hint defaults pessimistic for app policies @colby-oai
- #17499 feat(tui): add clear-context plan implementation @fcoury-oai
- #18352 codex: route thread/read persistence through thread store @wiltzius-openai
- #18263 enable tool search over dynamic tools @sayan-oai
- #18350 ci: make Windows Bazel clippy catch core test imports @bolinfest
- #18362 Add core CODEOWNERS @aibrahim-oai
- #18366 ci: scope Bazel repository cache by job @bolinfest
- #17305 Add sorting/backwardsCursor to thread/list and new thread/turns/list api @ddr-oai