Interactive Codex ignores disabled state for remote installed plugins

Codex version

0.149.0

Platform

Linux x86_64

Problem

Interactive Codex does not persist or honor the disabled state for an installed remote plugin. This was reproduced with Superpowers.

Reproduction

1. Open /plugins in interactive Codex.
2. Select Superpowers and press Space.
3. The row changes from [*] to [-].
4. Press Esc and reopen /plugins.
5. The row is back to [*].
6. Restart Codex and create a completely new chat.
7. Superpowers skills are still injected and used.

Persisted configuration

The toggle correctly writes:

[plugins."superpowers@openai-curated-remote"]
enabled = false

The setting remains false after restart and there are no project or profile overrides.

Direct runtime evidence

Inspecting the recorded developer payload of a completely new interactive session with source cli shows all superpowers-prefixed skills, including superpowers:using-superpowers, despite enabled=false.

By contrast, a brand-new non-interactive session created by codex exec with source exec omits every Superpowers skill under the same config. The earlier conclusion that this was display-only was based on that non-interactive path and was incorrect.

This isolates the failure to the interactive CLI startup/plugin-loading path: interactive codex ignores enabled=false for this remote installed plugin, while codex exec honors it.

Launching a fresh interactive TUI with explicit false overrides for both superpowers@openai-curated-remote and superpowers@openai-curated still renders [*] and loads the interactive plugin state.

Expected behavior

After disabling an installed plugin, reopening /plugins should show [-], and new interactive chats must not receive its skills.

Actual behavior

The plugin returns to [*], and new interactive chats receive and use its skills. Only codex exec honors the disabled setting.

Remote plugin

Name: Superpowers
Remote plugin id: plugins~Plugin_60aea7460bd4819199fd97a9553a5e12

Uploaded diagnostics

Feedback upload thread: 01a02329-a61a-7033-b0b1-abe0fb0729bf

Start by tracing the interactive CLI startup/plugin-loading path and compare it with the codex exec path, using the /plugins reproduction and the persisted enabled=false configuration. Done means reopening /plugins preserves the disabled state and new interactive chats omit the disabled plugin's skills, matching codex exec behavior.