## New Features

- Added goal workflows with `/goal`, persisted objective state, pause/resume/clear controls, budgets, and TUI status indicators (#18073, #18074, #18075, #18076, #18077, #20082).
- Added configurable TUI keymaps through `[tui.keymap]`, including action-based bindings, conflict checks, and updated shortcut hints (#18593).
- Added `codex update` so the CLI can run the detected package-manager update path directly (#19933).
- Expanded plugin management with marketplace install, remote plugin caching/uninstall, cached remote skills/MCP loading, and plugin-bundled hooks (#18704, #19914, #19456, #19966, #20096, #19705).
- Added external-agent migration/import for sessions, MCP servers, hooks, commands, subagents, and background session history import (#19895, #19949, #20261, #20284).
- Added clearer permission-control surfaces, including built-in permission profiles, sandbox profile CLI controls, and a TUI flow for retrying recently denied auto-review actions (#19058, #19900, #20117, #20118).

## Bug Fixes
- Fixed `turn/interrupt` requests hanging when the target turn had already completed (#18392).
- Reworked TUI scrollback so finalized transcript output reflows cleanly after terminal resize (#18575).
- Improved resume and sign-in reliability by restoring persisted model providers, avoiding slow filtered resume scans, and falling back to a secondary OAuth callback port (#19287, #19591, #19334).
- Polished TUI input edge cases: approval prompts no longer steal typed-ahead shortcut keys, `Esc` exits empty shell mode, terminal keyboard reporting is reset on exit, and lists after code blocks keep readable spacing (#19513, #19986, #19625, #19706).
- Hardened sandbox/network enforcement by canceling commands on deferred proxy denials, rechecking resolved connect targets, tightening bypass defaults, and protecting workspace metadata paths (#19184, #19995, #19999, #20001, #20002, #19846, #19847, #19852, #20085).
- Fixed Bedrock provider compatibility for apply-patch tooling, supported reasoning levels, the Mantle endpoint/model ID, and provider-specific capability filtering (#19416, #19461, #20109, #19442).

## Documentation
- Refreshed the bundled OpenAI Docs skill for GPT-5.5, gpt-image-2, and clearer upgrade guidance (#19407, #19443, #19422).
- Added contributor guidance for async Rust traits, preferring native returned futures with explicit `Send` bounds over `#[async_trait]` shortcuts (#20242).
- Added developer-facing API artifacts and examples for `codex-core`/ThreadManager users (#20141, #20243).

## Chores
- Release packaging now publishes standalone `codex-app-server` artifacts and a Codex-versioned Python app-server SDK (#19447, #18996).
- Linux release publishing now targets MUSL artifacts only, dropping the unused GNU Linux release builds (#19445).
- Removed the hidden `codex responses` command and began deprecating `--full-auto` in favor of permission-profile flows (#19640, #20133).

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.125.0...rust-v0.127.0

- #19124 Make MultiAgentV2 interruption markers assistant-authored @jif-oai
- #19354 chore: alias max_concurrent_threads_per_session @jif-oai
- #19360 feat: surface multi-agent thread limit in spawn description @jif-oai
- #19351 Add agents.interrupt_message for interruption markers @jif-oai
- #18392 Fix hang on turn/interrupt @danwang-oai
- #19380 chore: drop MCP Plugins and App from Morpheus @jif-oai
- #18907 respect workspace option for disabling plugins @zamoshchin-openai
- #19283 check PID of named pipe consumer @iceweasel-oai
- #19407 Update bundled OpenAI Docs skill for GPT-5.5 @kkahadze-oai
- #19163 Harden package-manager install policy @mcgrew-oai
- #19416 Fix: use function apply_patch tool for Bedrock model @celia-oai
- #19093 [codex] Omit fork turns from thread started notifications @euroelessar
- #19244 Update unix socket transport to use WebSocket upgrade @willwang-openai
- #19170 Skip disabled rows in selection menu numbering and default focus @canvrno-oai
- #19414 permissions: make legacy profile conversion cwd-free @bolinfest
- #18900 Migrate fork and resume reads to thread store @wiltzius-openai
- #19445 ci: stop publishing GNU Linux release artifacts @bolinfest
- #19443 Add gpt-image-2 to bundled OpenAI Docs skill @kkahadze-oai
- #18584 [4/4] Honor Streamable HTTP MCP placement @aibrahim-oai
- #19447 ci: publish codex-app-server release artifacts @bolinfest
- #19422 Clarify bundled OpenAI Docs upgrade guide wording @kkahadze-oai
- #19266 [codex] add non-local thread store regression harness @wiltzius-openai
- #19098 feat: Compress skill paths with root aliases @xl-openai
- #19207 [codex] Forward Codex Apps tool call IDs to backend metadata @rreichel3-oai
- #19453 Serialize legacy Windows PowerShell sandbox tests @dylan-hurd-oai
- #19234 Refactor log DB into LogWriter interface @rasmusrygaard
- #19461 fix: Bedrock GPT-5.4 reasoning levels @celia-oai
- #19449 permissions: remove legacy read-only access modes @bolinfest
- #19472 ci: pin codex-action v1.7 @viyatb-oai
- #19468 Fix Bazel cargo_bin runfiles paths @fjord-oai
- #19410 Remove js_repl feature @fjord-oai
- #18073 Add goal persistence foundation (1 / 5) @etraut-openai
- #18074 Add goal app-server API (2 / 5) @etraut-openai
- #18075 Add goal model tools (3 / 5) @etraut-openai
- #18076 Add goal core runtime (4 / 5) @etraut-openai
- #18077 Add goal TUI UX (5 / 5) @etraut-openai
- #19454 Split approval matrix test groups @dylan-hurd-oai
- #19514 Fix codex-rs README grammar @etraut-openai
- #19459 Enable unavailable dummy tools by default @mzeng-openai
- #19524 [codex] Prune unused codex-mcp API and duplicate helpers @aibrahim-oai
- #19526 [codex] Order codex-mcp items by visibility @aibrahim-oai
- #19578 fix: increase Bazel timeout to 45 minutes @bolinfest
- #19287 Restore persisted model provider on thread resume @etraut-openai
- #19593 test: isolate remote thread store regression from plugin warmups @bolinfest
- #19511 Keep slash command popup columns stable while scrolling @etraut-openai
- #19595 [codex] Bypass managed network for escalated exec @viyatb-oai
- #19604 test: stabilize app-server path assertions on Windows @bolinfest
- #19609 fix: restore 30-minute timeout for Bazel builds @bolinfest
- #19389 Guard npm update readiness @shijie-oai
- #18575 fix(tui): reflow scrollback on terminal resize @fcoury-oai
- #19610 Support end_turn in response.completed @andmis
- #19640 [codex] remove responses command @tibo-openai
- #19683 test: harden app-server integration tests @bolinfest
- #18904 feat: load AgentIdentity from JWT login/env @efrazer-oai
- #19606 permissions: make runtime config profile-backed @bolinfest
- #19392 permissions: derive compatibility policies from profiles @bolinfest
- #19484 Lift app-server JSON-RPC error handling to request boundary @pakrym-oai
- #19487 [codex] Move config loading into codex-config @pakrym-oai
- #19393 permissions: migrate approval and sandbox consumers to profiles @bolinfest
- #19726 Fix codex-core config test type paths @pakrym-oai
- #19727 test: increase core-all-test shard count to 16 @bolinfest
- #19725 Split MCP connection modules @aibrahim-oai
- #19605 Delete unused ResponseItem::Message.end_turn @andmis
- #19394 permissions: remove core legacy policy round trips @bolinfest
- #19733 Allow agents.max_threads to work with multi_agent_v2 @andmis
- #19395 permissions: finish profile-backed app surfaces @bolinfest
- #19739 inline hostname resolution for remote sandbox config @abhinav-oai
- #19734 permissions: centralize legacy sandbox projection @bolinfest
- #19058 Add /auto-review-denials retry approval flow @won-openai
- #19735 permissions: store only constrained permission profiles @bolinfest
- #19736 permissions: constrain requirements as profiles @bolinfest
- #19737 permissions: derive legacy exec policies at boundaries @bolinfest
- #19779 Add Codex issue digest skill @etraut-openai
- #19792 multi_agent_v2: move thread cap into feature config @jif-oai
- #18982 feat: use git-backed workspace diffs for memory consolidation @jif-oai
- #19809 Allow Phase 2 memory claims after retry exhaustion @jif-oai
- #19812 Avoid rewriting Phase 2 selection on clean workspace @jif-oai
- #19813 nit: one more fix @jif-oai
- #19818 chore: split memories part 1 @jif-oai
- #19510 Hide rewind preview when no user message exists @etraut-openai
- #19618 Persist shell mode commands in prompt history @etraut-openai
- #19709 Render delegated patch approval details @etraut-openai
- #19490 Streamline plugin, apps, and skills handlers @pakrym-oai
- #19762 refactor: make auth loading async @efrazer-oai
- #19854 ci: pin npm staging smoke test to a recent rust-release run @bolinfest
- #19851 ci: migrate Bazel setup away from archived setup-bazelisk @bolinfest
- #19491 Streamline account and command handlers @pakrym-oai
- #19771 fix: filter dynamic deferred tools from model_visible_specs @sayan-oai
- #19863 [codex-analytics] remove ga flag @rhan-oai
- #19865 Cap original-detail image token estimates @fjord-oai
- #19591 Fix filtered thread-list resume regression in TUI @etraut-openai
- #19513 Delay approval prompts while typing @etraut-openai
- #19706 Preserve TUI markdown list spacing after code blocks @etraut-openai
- #19841 permissions: remove cwd special path @bolinfest
- #19492 Streamline thread start handler @pakrym-oai
- #19874 [codex-backend] Prefer state git metadata in filtered thread lists @joeytrasatti-openai
- #19493 Streamline thread mutation handlers @pakrym-oai
- #19862 [codex] Shard exec Bazel integration test @starr-openai
- #18996 Publish Python SDK with Codex-pinned versioning @sdcoffey
- #19494 Streamline thread read handlers @pakrym-oai
- #19839 [codex] Trace cancelled inference streams @cassirer-openai
- #19495 Streamline thread resume and fork handlers @pakrym-oai
- #19497 Streamline turn and realtime handlers @pakrym-oai
- #18372 Show action required in terminal title @canvrno-oai
- #19884 Add MCP app feature flag @mzeng-openai
- #19498 Streamline review and feedback handlers @pakrym-oai
- #19772 permissions: derive config defaults as profiles @bolinfest
- #19836 disallow fileparams metadata for custom mcps @colby-oai
- #19892 Refactor exec-server filesystem API into codex-file-system @miz-openai
- #19452 Stabilize plugin MCP fixture tests @dylan-hurd-oai
- #19481 Remove ghost snapshots  @pakrym-oai
- #19773 permissions: require profiles in TUI thread state @bolinfest
- #19917 Allow /statusline and /title slash commands during active turns @canvrno-oai
- #19763 refactor: load agent identity runtime eagerly @efrazer-oai
- #17689 [codex-analytics] include user agent in default headers @marksteinbrick-oai
- #19912 Clarify PR template invitation requirement @etraut-openai
- #19630 Avoid persisting ShutdownComplete after thread shutdown @etraut-openai
- #19774 permissions: make SessionConfigured profile-only @bolinfest
- #19775 permissions: derive snapshot sandbox projections @bolinfest
- #19920 Allow large remote app-server resume responses @etraut-openai
- #19776 permissions: store thread sessions as profiles @bolinfest
- #19899 app-server-protocol: mark permission profiles experimental @bolinfest
- #19933 Add `codex update` command @etraut-openai
- #19914 feat: Cache remote plugin bundles on install @xl-openai
- #19456 Add remote plugin uninstall API @xli-oai
- #19805 Add MultiAgentV2 root and subagent context hints @jif-oai
- #19860 feat: split memories part 2 @jif-oai
- #19961 feat: fix hinting 2 @jif-oai
- #19963 feat: fix hinting 3 @jif-oai
- #19967 Stabilize memory Phase 2 input ordering @jif-oai
- #19970 feat: trigger memories from user turns with cooldown @jif-oai
- #19904 fix: configure AgentIdentity AuthAPI base URL @efrazer-oai
- #19990 feat: skip memory startup when Codex rate limits are low @jif-oai
- #19998 feat: house-keeping memories 1 @jif-oai
- #20000 feat: house-keeping memories 2 @jif-oai
- #19832 Preserve assistant phase for replayed messages @friel-openai
- #19625 Reset TUI keyboard reporting on exit @etraut-openai
- #18593 feat(tui): add configurable keymap support @fcoury-oai
- #19846 [sandbox] Enforce protected workspace metadata paths @evawong-oai
- #20005 feat: house-keeping memories 3 @jif-oai
- #19929 TUI: use cumulative turn duration for worked-for separator @etraut-openai
- #19753 Terminate stdio MCP servers on shutdown to avoid process leaks @etraut-openai
- #19473 Add turn start timestamp to turn metadata @mchen-oai
- #19875 Strip connector provenance metadata from custom MCP tools @colby-oai
- #19764 feat: verify agent identity JWTs with JWKS @efrazer-oai
- #19847 Enforce workspace metadata protections in Seatbelt @evawong-oai
- #19509 Record MCP result telemetry on mcp.tools.call spans @mchen-oai
- #19907 Clarify network approval auto-review prompts @maja-openai
- #19901 feat(tui): suggest plan mode from composer drafts @fcoury-oai
- #19931 Move local /resume cwd filtering into thread/list @canvrno-oai
- #19986 fix(tui): let esc exit empty shell mode @fcoury-oai
- #19895 External agent session support @stefanstokic-oai
- #20002 fix(network-proxy): tighten network proxy bypass defaults @viyatb-oai
- #19900 permissions: add built-in default profiles @bolinfest
- #20045 Fix plan mode nudge test after task completion signature change @canvrno-oai
- #19432 [codex] Add token usage to turn tracing spans @charley-openai
- #20001 fix(network-proxy): harden linux proxy bridge helpers @viyatb-oai
- #19959 Fix log db batch flush flake @dylan-hurd-oai
- #17373 app-server: run initialized rpcs with keyed serialization @euroelessar
- #19708 Load cloud requirements for agent identity @shijie-oai
- #19999 fix(network-proxy): recheck network proxy connect targets @viyatb-oai
- #20047 app-server: allow remote_control runtime feature override @euroelessar
- #20052 Make MultiAgentV2 wait minimum configurable @jif-oai
- #20008 tui: use permission profiles for sandbox state @bolinfest
- #20068 app-server: disable remote control without sqlite @euroelessar
- #20066 [rollout-trace] Include x-request-id in rollout trace. @cassirer-openai
- #19705 Discover hooks bundled with plugins @abhinav-oai
- #18704 /plugins: add marketplace install flow @canvrno-oai
- #20085 fix: don't auto approve git -C ... @owenlin0
- #20088 Fix flaky plugin hook env test @abhinav-oai
- #19995 fix(network-proxy): normalize network proxy host matching @viyatb-oai
- #20010 core tests: submit turns with permission profiles @bolinfest
- #20092 Return None when auth refresh fails @gpeal
- #19919 app-server: notify clients of remote-control status changes @euroelessar
- #20097 Refine Codex issue digest summaries @etraut-openai
- #20011 core tests: build user turns from permission profiles @bolinfest
- #20013 core tests: migrate more turns to permission profiles @bolinfest
- #20015 core tests: configure profiles directly @bolinfest
- #20016 core tests: send model turns with permission profiles @bolinfest
- #20100 Increase plugin hook env test timeout @abhinav-oai
- #20018 core tests: migrate model/personality turns to profiles @bolinfest
- #20021 core tests: migrate view image turns to profiles @bolinfest
- #20024 core tests: migrate safety check turns to profiles @bolinfest
- #20026 core tests: migrate plan item turns to profiles @bolinfest
- #20027 core tests: migrate tools tests to permission profiles @bolinfest
- #20028 core tests: migrate permissions message tests to profiles @bolinfest
- #20030 core tests: migrate exec policy turns to profiles @bolinfest
- #20032 core tests: migrate prompt caching turns to profiles @bolinfest
- #20033 core tests: migrate request permissions tool turns to profiles @bolinfest
- #20034 core tests: migrate zsh-fork permissions to profiles @bolinfest
- #20035 core tests: migrate compact turns to profiles @bolinfest
- #20037 core tests: migrate rmcp turns to profiles @bolinfest
- #20040 core tests: migrate apply patch turns to profiles @bolinfest
- #20041 core tests: migrate hook turns to profiles @bolinfest
- #20072 Support disabling tool suggest for specific tools. @mzeng-openai
- #19949 Support detect and import MCP, Subagents, hooks, commands from external @alexsong-oai
- #19442 feat: disable capabilities by model provider @celia-oai
- #20108 fix: restore live event submit path for apply patch tests @bolinfest
- #19939 Restore TUI working status after steer message is set @canvrno-oai
- #20086 Fix plugin list workspace settings test isolation @canvrno-oai
- #20049 feat: expose provider capability bounds to app server clients @celia-oai
- #20109 feat: update Bedrock Mantle endpoint and GPT-5.4 model ID @celia-oai
- #20106 linux-sandbox: switch helper plumbing to PermissionProfile @bolinfest
- #20112 Soften skill description budget warnings @xl-openai
- #20058 Add environment provider snapshot @starr-openai
- #20133 chore(cli) deprecate --full-auto @dylan-hurd-oai
- #20117 feat(cli): add explicit sandbox permission profiles @viyatb-oai
- #20139 Delete multi_agent_v2 followup_task interrupt parameter @andmis
- #20118 feat(cli): add sandbox profile config controls @viyatb-oai
- #20144 Fix migrated hook path rewriting @alexsong-oai
- #20042 Fix Windows pseudoconsole attribute handling for sandboxed PTY sessions @iceweasel-oai
- #20186 nit: drop old memories things @jif-oai
- #20180 Make multi-agent v2 ignore agents.max_depth @jif-oai
- #20082 Use /goal resume for paused goals @etraut-openai
- #20172 TUI: Remove core protocol dependency [1/7] @etraut-openai
- #19211 Improve Windows process management edge cases @iceweasel-oai
- #20123 [rollout-tracer] Match analysis messages on encrypted id. @cassirer-openai
- #20173 TUI: Remove core protocol dependency [2/7] @etraut-openai
- #20174 TUI: Remove core protocol dependency [3/7] @etraut-openai
- #20228 [codex-backend] Prefer sqlite git info for rollout-path reads @joeytrasatti-openai
- #20141 Add ThreadManager sample crate @pakrym-oai
- #20046 test protocol: lock inter-agent commentary phase @friel-openai
- #20064 Include auto-review rollout in feedback uploads @won-openai
- #20096 feat: Use remote installed plugin cache for skills and MCP @xl-openai
- #19184 fix: handle deferred network proxy denials @viyatb-oai
- #20089 expand the set of core shell env vars for Windows. @iceweasel-oai
- #17088 [codex-analytics] ingest server requests and responses @rhan-oai
- #20091 [tool_suggest] Improve tool_suggest triggering conditions. @mzeng-openai
- #20258 app-server: fix outgoing sender test setup @sayan-oai
- #20050 [app-server] type client response payloads @rhan-oai
- #19966 Require remote plugin detail before uninstall @xli-oai
- #20059 [app-server] centralize client response analytics @rhan-oai
- #19334 Fallback login callback port when default is busy @xli-oai
- #20231 [apps] Add apps MCP path override @adaley-openai
- #20242 docs: discourage `#[async_trait]` and `#[allow(async_fn_in_trait)]` @bolinfest
- #19620 Escape turn metadata headers as ASCII JSON @etraut-openai
- #19537 [mcp] Fix plugin MCP approval policy. @mzeng-openai
- #19229 Add agent graph store interface @rasmusrygaard
- #20243 Add codex-core public API listing @pakrym-oai
- #19435 stop blocking unified_exec on Windows @iceweasel-oai
- #19852 Enforce workspace metadata protections in Linux sandbox @evawong-oai
- #20136 Update Codex login success page UX @rafael-jac
- #20271 chore: increase release build timeout from 60 min to 90 @bolinfest
- #19778 Add hooks/list app-server RPC @abhinav-oai
- #20261 Consume ai-title from external sessions and add end marker @alexsong-oai
- #20284 Import external agent sessions in background @stefanstokic-oai

codex-rs/Cargo.toml

@@ -109,7 +109,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.0.0"
+version = "0.127.0"
 # Track the edition for all workspace crates in one place. Individual
 # crates can still override this value, but keeping it here means new
 # crates created with `cargo new -w ...` automatically inherit the 2024