Novedades de Codex 0.121.0

Versión oficialPublicada el 15 abr 2026Notas originales en GitHub

Traducción pendiente · se muestran las notas oficiales en inglés.

Novedades

Added codex marketplace add and app-server support for installing plugin marketplaces from GitHub, git URLs, local directories, and direct marketplace.json URLs (#17087, #17717, #17756).
Added TUI prompt history improvements, including Ctrl+R reverse search and local recall for accepted slash commands (#17550, #17336).
Added TUI and app-server controls for memory mode, memory reset/deletion, and memory-extension cleanup (#17632, #17626, #17913, #17937, #17844).
Expanded MCP/plugin support with MCP Apps tool calls, namespaced MCP registration, parallel-call opt-in, and sandbox-state metadata for MCP servers (#17364, #17404, #17667, #17763).
Added realtime and app-server APIs for output modality, transcript completion events, raw turn item injection, and symlink-aware filesystem metadata (#17701, #17703, #17719).
Added a secure devcontainer profile with bubblewrap support, plus macOS sandbox allowlists for Unix sockets (#10431, #17547, #17654).

Fixed macOS sandbox/proxy handling for private DNS and removed the danger-full-access denylist-only network mode (#17370, #17732).
Fixed Windows cwd/session matching so resume --last and thread/list work when paths use verbatim prefixes (#17414).
Fixed rate-limit/account handling for prolite plans and made unknown WHAM plan values decodable (#17419).
Made Guardian timeouts distinct from policy denials, with timeout-specific guidance and visible TUI history entries (#17381, #17486, #17521, #17557).
Stabilized app-server behavior by avoiding premature thread unloads, tolerating failed trust persistence on startup, and skipping broken symlinks in fs/readDirectory (#17398, #17595, #17907).
Fixed MCP/tool-call edge cases including flattened deferred tool names, elicitation timeout accounting, and empty namespace descriptions (#17556, #17566, #17946).

Documented the secure devcontainer profile and its bubblewrap requirements (#10431, #17547).
Added TUI composer documentation for history search behavior (#17550).
Updated app-server docs for new MCP, marketplace, turn injection, memory reset, filesystem metadata, external-agent migration, and websocket token-hash APIs (#17364, #17717, #17703, #17913, #17719, #17855, #17871).
Documented WSL1 bubblewrap limitations and WSL2 behavior (#17559).
Added memory pipeline documentation for extension cleanup (#17844).

Hardened supply-chain and CI inputs by pinning GitHub Actions, cargo installs, git dependencies, V8 checksums, and cargo-deny source allowlists (#17471).
Added Bazel release-build verification so release-only Rust code is compiled in PR CI (#17704, #17705).
Introduced the codex-thread-store crate/interface and moved local thread listing behind it (#17659, #17824).
Required reviewed pnpm dependency build scripts for workspace installs (#17558).
Reduced Rust maintenance surface with broader absolute-path types and removal of unused helper APIs (#17407, #17792, #17146).