OpenAI Codex CLI vrust-v0.122.0
Summary
New Features - Standalone installs are more self-contained, and codex app now opens or installs Desktop correctly on Windows and Intel Macs (17022, 18500). - The TUI can open /side conversations fo...
Release Notes
New Features - Standalone installs are more self-contained, and codex app now opens or installs Desktop correctly on Windows and Intel Macs (17022, 18500). - The TUI can open /side conversations for quick side questions, and queued input now supports slash commands and ! shell prompts while work is running (18190, 18542). - Plan Mode can start implementation in a fresh context, with context-usage shown before deciding whether to carry the planning thread forward (17499, 18573). - Plugin workflows now include tabbed browsing, inline enable/disable toggles, marketplace removal, and remote, cross-repo, or local marketplace sources (18222, 18395, 17752, 17751, 17277, 18017, 18246). - Filesystem permissions now support deny-read glob policies, managed deny-read requirements, platform sandbox enforcement, and isolated codex exec runs that ignore user config or rules (15979, 17740, 18096, 18646). - Tool discovery and image generation are now enabled by default, with higher-detail image handling and original-detail metadata support for MCP and jsrepl image outputs (17854, 17153, 17714, 18386). Bug Fixes - App-server approvals, user-input prompts, and MCP elicitations now disappear from the TUI when another client resolves them, instead of leaving stale prompts behind (15134). - Remote-control startup now tolerates missing ChatGPT auth, and MCP startup cancellation works again through app-server sessions (18117, 18078). - Resumed and forked app-server threads now replay token usage immediately so context/status UI starts with the restored state (18023). - Security-sensitive flows were tightened: logout revokes managed ChatGPT tokens, project hooks and exec policies require trusted workspaces, and Windows sandbox setup avoids broad user-profile and SSH-root grants (17825, 14718, 18443, 18493). - Sandboxed applypatch writes work correctly with split filesystem policies, and file watchers now notice files created after watching begins (18296, 18492). - Several TUI rough edges w