TL;DR

OpenAI shipped Codex CLI 0.122.0 on April 20, 2026. Three headline shifts: the plugin system grew a real UI (tabs, inline toggles, marketplace add/remove, remote and cross-repo sources); the TUI learned /side for quick side conversations plus slash commands and shell prompts inside queued input; and Plan Mode can now start execution in a fresh context with a usage preview before you commit. Sandboxing also tightened with deny-read globs and trusted-workspace hooks.

What's new

  • Plugin tabs + inline toggles. Plugin management moves from a flat list to a tabbed workflow. Enable/disable without opening a settings pane, remove from the marketplace in one step, and pull plugins from remote, cross-repo, or local marketplace sources.
  • /side conversations. A new slash command opens a side thread for quick questions without polluting the main context. Ask "what does this regex do?" while the agent keeps building.
  • Slash + shell in queued input. While the agent is working, you can queue not just text, but slash commands and shell prompts. Stack /plan or a shell command mid-run instead of waiting.
  • Plan Mode, fresh context. Plan Mode can launch implementation in a clean context window rather than forcing the planning thread forward. A context-usage preview shows before you decide whether to carry the planning history.
  • Standalone installer fixes. codex app now opens or installs Codex Desktop correctly on Windows and Intel Macs; installs are more self-contained.
  • Tighter sandboxing. New deny-read glob policies, managed requirement enforcement, platform sandbox hardening, and isolated codex exec runs.
  • Defaults changed. Tool discovery and image generation are now on by default, with higher-detail image handling.

Why it matters

The 0.122 release is about two long-standing pain points: context bloat and flow interruption. Plan Mode used to shove a bulky planning transcript into the execution context, eating tokens and hurting model focus. Branching into a fresh context with an upfront usage preview fixes that directly. On the flow side, /side plus queued slash/shell commands means you no longer stall the agent to ask a quick question or sneak in a status check. Plugins getting a real UI is the quiet story: once installing and toggling extensions is frictionless, a third-party ecosystem actually has room to grow.

Technical facts

  • Version: 0.122.0 (stable, cut from 0.122.0-alpha.7).
  • Released: April 20, 2026.
  • Install: existing installer, npm i -g @openai/codex, or standalone binary.
  • Desktop fix: codex app on Windows and Intel Macs no longer double-installs or fails to open.
  • Sandbox: deny-read glob policies, per-run isolation for codex exec, trusted-workspace requirement for project hooks.
  • Security: logout now revokes managed tokens (previously lingered).
  • Bug fixes: stale app-server prompts clear when resolved by other clients; remote control startup tolerates missing ChatGPT auth; resumed threads replay token usage immediately so the context meter is correct on resume.

Comparison vs 0.121.x

Area0.121.x0.122.0
Plugin UIFlat listTabs, inline toggles, marketplace add/remove
Plugin sourcesLocal / single sourceRemote, cross-repo, local marketplaces
Side conversationsNot available/side slash command
Queued inputText onlyText + slash + shell prompts
Plan Mode contextCarried forward (heavy)Fresh context option with usage preview
Sandbox controlsBasic allow/denyDeny-read globs, trusted-workspace hooks

Use cases

  • Long planning sessions: design in Plan Mode, check the context-usage preview, launch execution in a clean context. Keeps the coder fast even when the plan is huge.
  • Quick detours: /side mid-task for "what does this API return?" without breaking the main thread.
  • Team plugin distribution: point the marketplace at an internal Git repo so every engineer installs the same extension set with one click.
  • Mid-run command stacking: queue a /plan or shell git status while a long edit finishes — no flow break.
  • Locked-down monorepos: deny-read globs plus trusted-workspace hooks let Codex run closer to sensitive files without trust drift.

Limitations & pricing

Codex CLI stays free and open-source; model usage still bills against your OpenAI API credits or ChatGPT Plus/Pro entitlements. One known Plan Mode edge case (GitHub issue #18496): security-redaction placeholder blocks can fail exact replacement while Plan still reports "ready to implement" — workaround is re-plan or edit manually. The Desktop installer fix covers Windows and Intel Macs; Linux standalone still follows the prior install path. And because the plugin marketplace now accepts remote sources with no central review step, trust becomes the user's responsibility — treat third-party plugin installs like any other supply-chain action.

What's next

Direction is clear from what 0.122 invests in: sandbox policies will keep hardening, the plugin ecosystem has room to grow now that the UX is in place, and the separation between planning and execution context is likely to deepen — expect the queued-input surface to keep expanding in upcoming minors. If you run Codex daily, the upgrade is a no-brainer: the /side + queued-input combo alone earns back its install time within an afternoon.

Nguồn: Codex Changelog on X, openai/codex releases, OpenAI Developers Codex changelog.