OpenAI Codex CLI vrust-v0.121.0
Summary
New Features - Added codex marketplace add and app-server support for installing plugin marketplaces from GitHub, git URLs, local directories, and direct marketplace.json URLs (17087, 17717, 17756)...
Release Notes
New Features - Added codex marketplace add and app-server support for installing plugin marketplaces from GitHub, git URLs, local directories, and direct marketplace.json URLs (17087, 17717, 17756). - Added TUI prompt history improvements, including Ctrl+R reverse search and local recall for accepted slash commands (17550, 17336). - Added TUI and app-server controls for memory mode, memory reset/deletion, and memory-extension cleanup (17632, 17626, 17913, 17937, 17844). - Expanded MCP/plugin support with MCP Apps tool calls, namespaced MCP registration, parallel-call opt-in, and sandbox-state metadata for MCP servers (17364, 17404, 17667, 17763). - Added realtime and app-server APIs for output modality, transcript completion events, raw turn item injection, and symlink-aware filesystem metadata (17701, 17703, 17719). - Added a secure devcontainer profile with bubblewrap support, plus macOS sandbox allowlists for Unix sockets (10431, 17547, 17654). Bug Fixes - Fixed macOS sandbox/proxy handling for private DNS and removed the danger-full-access denylist-only network mode (17370, 17732). - Fixed Windows cwd/session matching so resume --last and thread/list work when paths use verbatim prefixes (17414). - Fixed rate-limit/account handling for prolite plans and made unknown WHAM plan values decodable (17419). - Made Guardian timeouts distinct from policy denials, with timeout-specific guidance and visible TUI history entries (17381, 17486, 17521, 17557). - Stabilized app-server behavior by avoiding premature thread unloads, tolerating failed trust persistence on startup, and skipping broken symlinks in fs/readDirectory (17398, 17595, 17907). - Fixed MCP/tool-call edge cases including flattened deferred tool names, elicitation timeout accounting, and empty namespace descriptions (17556, 17566, 17946). Documentation - Documented the secure devcontainer profile and its bubblewrap requirements (10431, 17547). - Added TUI composer documentation for history search behavior (1