OpenAI Codex CLI rust-v0.125.0

New Features - App-server integrations now support Unix socket transport, pagination-friendly resume/fork, sticky environments, and remote thread config/store plumbing. (18255, 18892, 18897, 18908,...

New Features - App-server integrations now support Unix socket transport, pagination-friendly resume/fork, sticky environments, and remote thread config/store plumbing. (18255, 18892, 18897, 18908, 19008, 19014) - App-server plugin management can install remote plugins and upgrade configured marketplaces. (18917, 19074) - Permission profiles now round-trip across TUI sessions, user turns, MCP sandbox state, shell escalation, and app-server APIs. (18284, 18285, 18286, 18287, 19231) - Model providers now own model discovery, with AWS/Bedrock account state exposed to app clients. (18950, 19048) - codex exec --json now reports reasoning-token usage for programmatic consumers. (19308) - Rollout tracing now records tool, code-mode, session, and multi-agent relationships, with a debug reducer command for inspection. (18878, 18879, 18880) Bug Fixes - Interrupting /review and exiting the TUI no longer leaves the interface wedged on delegate startup or unsubscribe. (18921) - Exec-server no longer drops buffered output after process exit and now waits correctly for stream closure. (18946, 19130) - App-server now respects explicitly untrusted project config instead of auto-persisting trust. (18626) - WebSocket app-server clients are less likely to disconnect during bursts of turn and tool-output notifications. (19246) - Windows sandbox startup handles multiple CLI versions and installed app directories better, and background Start-Process calls avoid visible PowerShell windows. (19044, 19180, 19214) - Config/schema handling now rejects conflicting MultiAgentV2 thread limits, resolves relative agent-role config paths, hides unsupported MCP bearer-token fields, and rejects invalid jsrepl image MIME types. (19129, 19261, 19294, 19292) Documentation - App-server docs and generated schemas were refreshed for the new transport, thread, marketplace, sticky environment, and permission-profile APIs. (18255, 18897, 19014, 19074, 19231) - Rollout-trace documentation now covers the debug trace reduction workflow. (18880) Chores - Refreshed models.json and related core, app-server, SDK, and TUI fixtures for the latest model catalog and reasoning defaults. (19323) - Windows Bazel CI now uses a stable PATH and shared query startup path for better cache reuse. (19161, 19232) - Plugin marketplace add/remove/startup-sync internals moved out of codex-core, and curated plugin cache versions now use short SHAs. (19099, 19095) - Reverted a macOS signing entitlement change after it caused alpha startup failures. (19167, 19350) - Stabilized flaky approval-popup and plugin MCP tool-discovery tests. (19178, 19191) Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.124.0...rust-v0.125.0 - 19129 Reject agents.maxthreads with multiagentv2 @jif-oai - 19130 exec-server: wait for close after observed exit @jif-oai - 19149 Update safety check wording @etraut-openai - 18284 tui: sync session permission profiles @bolinfest - 18710 [codex] Fix plugin marketplace help usage @xli-oai - 19127 feat: drop spawned-agent context instructions @jif-oai - 18892 Add remote thread config loader protos @rasmusrygaard - 19014 Add excludeTurns parameter to thread/resume and thread/fork @ddr-oai - 18882 [codex] Route live thread writes through ThreadStore @wiltzius-openai - 19008 [codex] Implement remote thread store methods @wiltzius-openai - 18626 Respect explicit untrusted project config @etraut-openai - 18255 app-server: add Unix socket transport @euroelessar - 19167 ci: add macOS keychain entitlements @euroelessar - 19099 Move marketplace add/remove and startup sync out of core. @xl-openai - 19168 Use Auto-review wording for fallback rationale @maja-openai - 18908 Add remote thread config endpoint @rasmusrygaard - 18285 tui: carry permission profiles on user turns @bolinfest - 18286 mcp: include permission profiles in sandbox state @bolinfest - 18878 [rollouttrace] Trace tool and code-mode boundaries @cassirer-openai - 18287 shell-escalation: carry resolved permission profiles @bolinfest - 18946 fix(exec-server): retain output until streams close @bolinfest - 19074 Add app-server marketplace upgrade RPC @xli-oai - 19180 use a version-specific suffix for command runner binary in .sandbox-bin @iceweasel-oai - 19178 Stabilize approvals popup disabled-row test @etraut-openai - 18921 Fix /review interrupt and TUI exit wedges @etraut-openai - 19191 Stabilize plugin MCP tools test @etraut-openai - 19194 Mark hooks schema fixtures as generated @abhinav-oai - 18288 tests: isolate approval fixtures from host rules @bolinfest - 19044 guide Windows to use -WindowStyle Hidden for Start-Process calls @iceweasel-oai - 19214 do not attempt ACLs on installed codex dir @iceweasel-oai - 19161 ci: derive cache-stable Windows Bazel PATH @bolinfest - 18811 refactor: route Codex auth through AuthProvider @efrazer-oai - 19246 Increase app-server WebSocket outbound buffer @etraut-openai - 19048 feat: expose AWS account state from account/read @celia-oai - 18880 [rollouttrace] Add debug trace reduction command @cassirer-openai - 18897 Add sticky environment API and thread state @starr-openai - 18879 [rollouttrace] Trace sessions and multi-agent edges @cassirer-openai - 19095 feat: Use short SHA versions for curated plugin cache entries @xl-openai - 18950 feat: let model providers own model discovery @celia-oai - 19206 app-server: persist device key bindings in sqlite @euroelessar - 18917 [codex] Support remote plugin install writes @xli-oai - 19231 permissions: make profiles represent enforcement @bolinfest - 19261 Resolve relative agent role config paths from layers @etraut-openai - 19232 ci: reuse Bazel CI startup for target-discovery queries @bolinfest - 19292 Reject unsupported jsrepl image MIME types @etraut-openai - 19247 chore: apply truncation policy to unifiedexec @sayan-oai - 19294 Hide unsupported MCP bearertoken from config schema @etraut-openai - 19308 Surface reasoning tokens in exec JSON usage @etraut-openai - 19323 Update models.json and related fixtures @sayan-oai - 19350 fix alpha build @jif-oai