Codex CLI 0.157.0 silently installs a persistent daemon

Since version 0.157.0, OpenAI's Codex CLI leaves a background daemon running after every interactive session that survives terminal closure and self-updates hourly. Users filed issue #48195 on September 25, 2026, demanding the behavior be opt-in.

• The daemon copies ~374 MB of the package to ~/.codex/packages/ and runs from that copy
• An updater checks for updates hourly and can kill active agent turns
• Running app-server daemon stop does not terminate the pid-update-loop process
• Auto-start can only be disabled manually via daemon_auto_start = false