v1.4.0

Highlights

Claude model resolution now belongs to Claude Code. --model forwards every value through unchanged and the friendly aliases fable, opus, sonnet, and haiku are matched case-insensitively. The plugin no longer pins claude-opus-4-7[1m] / claude-sonnet-4-6[1m] or forces the 1M-context variant — run /model in Claude Code to see what your account and provider actually offer.

⚠️ Default effort changed. Every friendly alias now defaults to high, so opus moves from xhigh to high and haiku moves from unset to high. Pass --effort to keep the previous behavior.

New model alias: fable, available across review, adversarial-review, and rescue.

Fixes

• Codex 0.145 compatibility. spawn_agent only advertises agent_type when custom agents are configured, and gpt-5.4-mini / gpt-5.4 are gone from the child-model catalog. Both were pinned in the built-in forwarding contracts, breaking every background review/rescue spawn. The forwarding children now inherit the built-in default agent and the parent model.
• Claude API network access from inside the Codex sandbox (#81). The companion command now requests targeted sandbox_permissions: "require_escalated" instead of failing with ENOTFOUND in the default workspace-write sandbox. Global network_access is still not required.
• Live background jobs are no longer auto-reaped when the sandbox denies a process probe (#79, #83). EPERM now means "exists but cannot be signaled" for both the liveness probe and the identity check; ESRCH, absent PIDs, and genuine identity mismatches stay classified as dead.

Maintenance

actions/checkout 7.0.1, actions/setup-node 7.0.0, eslint 10.8.0, globals 17.8.0, and a transitive brace-expansion advisory cleared from the dev tree.

Thanks to @behruznassre (#79/#80, #81/#82, #83) and @mychaelconnolly (#76, #77).

Full changelog: https://github.com/sendbird/cc-plugin-codex/blob/v1.4.0/CHANGELOG.md