Codex CLI 0.141.0

New Features

• Remote executors now use authenticated, end-to-end encrypted Noise relay channels.
• Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries.
• Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery also adds a created-by-me marketplace and auth-specific curated catalogs.
• App-server clients can list immediate child threads, correlate external-agent imports with detailed results, and read or redeem rate-limit reset credits.
• Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context.
• TUI input prompts can auto-resolve after inactivity, with a countdown that pauses on interaction.

Bug Fixes

• Hook trust bypass now persists through codex exec thread start and resume, while blocking PostToolUse hooks correctly reject code-mode tool calls.
• Plugin capabilities now route consistently by authentication mode, deduplicate conflicting App/MCP declarations, and preserve remote marketplace ordering.
• Windows sandbox execution repairs stale credentials automatically and gives PowerShell commands more time before backgrounding.
• Idle exec-server relays remain connected, and steered user input immediately interrupts wait_agent.
• Bundled SQLite is pinned to a version containing the WAL-reset corruption fix.
• TLS connections now support P-521 certificate signatures commonly used by enterprise proxies.

Chores

• Reduced latency and memory use in large, tool-heavy sessions by caching tool search and eliminating repeated request and history copies.
• Bounded prompt-image caching to 64 MiB and feedback uploads to eight related threads.
• Terminal resize reflow is now always enabled, ignoring obsolete disabled settings.