OpenAI Codex CLI rust-v0.150.0

OpenAI Codex CLI rust-v0.150.0 was released on August 26, 2026.

Summary

OpenAI Codex CLI rust-v0.150.0 lets you reference tasks with @ mentions and get smarter task titles automatically generated from conversations. The /copy command now picks exactly what you need, and markdown links are clickable in your terminal. See what else improved under th...

Release Notes

New Features - Reference other Codex tasks with @ mentions, and ask agents to read, create, or message tasks from the terminal. (40308, 40315) - /copy now offers a picker for full responses, individual code blocks, and blockquotes. (39997) - Unnamed terminal tasks receive descriptive titles automatically, and /rename suggests an editable title based on the conversation. (40492, 40495) - Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (40471) - Bind shortcuts to cycle permission modes, and use . in Vim mode to repeat your last edit. (39873, 40521) - New Interrupt hooks can run commands or MCP handlers when an active top-level turn is interrupted. (40511) Bug Fixes - Untrusted projects no longer supply project-level AGENTS.md instructions, and managed deny-read rules remain enforced after permission changes. (39837, 40004) - Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (39993) - Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (39926, 39952, 39979) - Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (39971, 40570) - Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (40460) - Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (39804, 39825) Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.149.0...rust-v0.150.0 - 39667 Trace MCP runtime refresh coordination @copyberry - 39691 Make Guardian v2 parent compaction reuse configurable @copyberry - 39700 Fail closed on unsafe config and sed parsing @copyberry - 39702 Wait for turn completion events in multi-agent resume tests @copyberry - 39703 Move the global scope check into the code-mode runtime @copyberry - 39706 Harden Seatbelt writable root path binding @copyberry - 39707 Remove redundant code mode image helper test @copyberry - 39709 Log TUI app event variants without their payloads @copyberry - 39712 Reduce unified exec output buffer allocations @copyberry - 39717 Pass CI workflow inputs through environment variables @copyberry - 39719 Stop persisting checkout credentials in V8 workflows @copyberry - 39720 Expose managed policy for browser settings imports @copyberry - 39722 Track multi-agent v2 spawn calls in analytics @copyberry - 39726 Box the WebSocket dial future @copyberry - 39731 Avoid rollout reads for configured TUI sessions @copyberry - 39736 Remove private executor directory creation @copyberry - 39738 Honor Guardian runtime settings from model defaults @copyberry - 39741 Use model-specific auto-review outcome instructions @copyberry - 39744 Skip postprocessing for short composer input @copyberry - 39746 Refresh resumed thread capability roots from executors @copyberry - 39749 Require filesystem backends to implement directory walks @copyberry - 39752 Expose uncompiled permission profile selection @copyberry - 39755 Add managed developer instructions to requirements @copyberry - 39756 Cache shell snapshots in the exec server @copyberry - 39757 Standardize shell execution on unified exec @copyberry - 39761 Add app-server MCP event streaming @copyberry - 39765 Include suggestion IDs in plugin install metadata @copyberry - 39770 Refresh bundled model definitions @copyberry - 39772 Standardize shell execution on unified exec @copyberry - 39776 Verify Codex app signatures before launch or install @copyberry - 39777 Retry transient registry failures during initial exec connection @copyberry - 39779 Make tool-result telemetry limits configurable @copyberry - 39782 Support standalone named function call outputs @copyberry - 39784 Classify rollout migration failures @copyberry - 39785 Support turn cost telemetry for custom model providers @copyberry - 39786 Support host-accepted exec-server WebSockets @copyberry - 39790 Deduplicate zsh fork test setup @copyberry - 39791 Handle standalone tool outputs as external context @copyberry - 39792 Reject settings updates for parent-owned subagents @copyberry - 39794 Install build tools in full Rust CI @copyberry - 39795 Add hostname to the configurable TUI status line @copyberry - 39797 Enrich thread archive analytics with thread context @copyberry - 39798 Update rmcp to 3.1.3 @copyberry - 39802 Optimize case-insensitive thread history matching @copyberry - 39804 Use multi-agent V1 for Amazon Bedrock models @copyberry - 39807 Finalize reserved PDF uploads with creation context @copyberry - 39809 Preserve WINDIR in core Windows shell environments @copyberry - 39811 Restrict macOS preference reads to full-disk policies @copyberry - 39812 Avoid materializing writable-root carveouts for presence checks @copyberry - 39813 Defer legacy filesystem policy projection @copyberry - 39822 Preserve uncapped Guardian classifier instructions @copyberry - 39825 Use Responses compaction for Amazon Bedrock @copyberry - 39827 Add history and notes tools for token-budget sessions @copyberry - 39830 Rename the history notes extension config option @copyberry - 39837 Ignore project instructions for untrusted projects @copyberry - 39847 Include context window IDs in response metadata @copyberry - 39852 Reset registry retries when refreshing Noise bundles @copyberry - 39864 Limit pending input preview wrapping work @copyberry - 39870 Allow session configuration with codex agents @copyberry - 39873 Add keybindings for cycling TUI permission modes @copyberry - 39876 Support attaching to existing realtime calls @copyberry - 39917 Honor request PATH in exec-server shell snapshots @copyberry - 39926 Resolve HTTP MCP bearer tokens in executor environments @copyberry - 39930 Track remote MCP header environment variables @copyberry - 39935 Enforce issuer binding for MCP OAuth endpoints @copyberry - 39937 Bound unified exec output delta frames @copyberry - 39940 Allow more time for local code-mode host startup @copyberry - 39941 Discover HTTP MCP servers from selected executors @copyberry - 39952 Honor required MCP servers from selected executors @copyberry - 39953 Support voice-aware configuration and version-skew builds @copyberry - 39957 Add in-memory shell snapshots to unified exec @copyberry - 39958 Stop advertising shell snapshots from local exec servers @copyberry - 39961 Test browser MCP bearer tokens over executor WebSockets @copyberry - 39962 Keep Guardian reviews isolated from executor MCP servers @copyberry - 39967 Upgrade pnpm to 10.34.5 @copyberry - 39969 Consolidate code mode output helper tests @copyberry - 39971 Fix elevated Windows sandbox setup activation @copyberry - 39975 Preserve root user authorization in subagent Guardian reviews @copyberry - 39976 Allow semaphore limit queries in the macOS sandbox @copyberry - 39979 Preserve MCP compatibility with older executors @copyberry - 39980 Enforce environment network policies for remote execution @copyberry - 39981 Bypass risk scoring for models that require automatic review @copyberry - 39985 Truncate Guardian instructions after rendering the policy @copyberry - 39991 Preserve TUI event ordering during active-thread draining @copyberry - 39992 Keep keymap action descriptions stable while navigating @copyberry - 39993 Keep credentials out of app-server logs @copyberry - 39994 Add Guardian internal session support @copyberry - 39995 Expand browser and computer use requirements @copyberry - 39997 Add a response target picker to /copy @copyberry - 39999 Hide Fast mode status for unsupported models @copyberry - 40000 Expose browser and computer-use requirements through app-server @copyberry - 40004 Preserve managed deny-read rules across permission updates @copyberry - 40005 Route escalated commands through synchronous Guardian review @copyberry - 40006 Synchronize Git enrichment tests explicitly @copyberry - 40007 Implement Amazon Bedrock setup in the app server @copyberry - 40009 Run allowlisted executor plugin stop hooks @copyberry - 40011 Synchronize concurrent Git enrichment test explicitly @copyberry - 40012 Preserve executor context for MCP stop hooks @copyberry - 40013 Reuse Guardian reviews in async risk scoring @copyberry - 40015 Harden remote installed plugin cache reconciliation @copyberry - 40017 Trace turn context creation and realtime state checks @copyberry - 40018 Add browser and computer use configuration @copyberry - 40020 Add end-to-end tests for executor Stop hooks @copyberry - 40021 Cancel Guardian reviews with their tool calls @copyberry - 40024 Honor granular sandbox approvals in unified exec @copyberry - 40028 Log Guardian V2 classification results @copyberry - 40031 Preserve strict MCP auto-review outcomes @copyberry - 40038 Add unfinished root turn suspension @copyberry - 40068 Report runtime MCP connection status @copyberry - 40150 Use thread source metadata for Guardian classifiers @copyberry - 40161 Allow exec callers to classify new threads @copyberry - 40166 Move the TUI cursor before showing it @copyberry - 40169 Add regression coverage for patch approval paging @copyberry - 40174 Preserve content item kinds in message metadata @copyberry - 40177 Require content kinds for extension prompt fragments @copyberry - 40179 Shut down resumed descendants when archiving thread trees @copyberry - 40180 Classify contextual fragments with content kinds @copyberry - 40184 Preserve context annotations in merged messages @copyberry - 40186 Identify detached memory requests as memory consolidation @copyberry - 40196 Annotate user input and contextual fragments with content kinds @copyberry - 40200 Remove the Plan mode composer nudge @copyberry - 40221 Distinguish Guardian review threads from subagents @copyberry - 40257 Support cuarepl as a Node REPL-backed MCP server @copyberry - 40264 Preserve content metadata when truncating messages @copyberry - 40266 Preserve content annotations when filtering forked agent history @copyberry - 40271 Preserve content annotations when rolling back model switches @copyberry - 40273 Normalize compacted user message annotations @copyberry - 40275 Classify additional generated context fragments @copyberry - 40277 Preserve annotations when omitting unsupported media @copyberry - 40280 Budget retained images during remote compaction @copyberry - 40281 Preserve content kinds during image preparation @copyberry - 40292 Add smoke tests for assembled Codex packages @copyberry - 40294 Classify internal model context by source @copyberry - 40295 Classify permission instructions under the permissions namespace @copyberry - 40296 Annotate Responses Lite base instructions @copyberry - 40297 Preserve developer instruction annotations in subagent forks @copyberry - 40301 Label Business Pro Lite plans as Business Premium @copyberry - 40302 Harden bubblewrap synthetic mount registry isolation @copyberry - 40308 Add TUI tools for managing Codex tasks @copyberry - 40315 Add task mentions to the TUI composer @copyberry - 40321 Update the frameless realtime default model @copyberry - 40343 Cache executor metadata from initialization @copyberry - 40363 Forward local env vars to Agent Plugin MCP servers @copyberry - 40368 Use snapshot session sources for MCP projection @copyberry - 40376 Advertise shell snapshot v2 support on Unix @copyberry - 40381 Preserve sandbox errors during session initialization @copyberry - 40382 Expose invocation sources to extension tools @copyberry - 40393 Classify Guardian V2 risk with a single token @copyberry - 40398 Stabilize the mismatched executor Stop hook test @copyberry - 40403 Prewarm more Guardian sampling WebSockets @copyberry - 40410 Strengthen Agent Plugin MCP environment overlay tests @copyberry - 40413 Honor response budgets when listing skills @copyberry - 40420 Represent Guardian policy as a contextual fragment @copyberry - 40422 Harden Windows updater command execution @copyberry - 40423 Harden Windows file URI conversion @copyberry - 40431 Render Guardian review evidence with async scorer truncation @copyberry - 40436 Add a managed gate for in-app local automation @copyberry - 40437 Report completed sub-agent activity on parent turns @copyberry - 40438 Use rust-lld for Bazel Windows MSVC Rust links @copyberry - 40441 Preserve Windows root reads with deny-read rules @copyberry - 40443 Batch sandboxed capability root discovery @copyberry - 40447 Retry failed shell snapshot captures @copyberry - 40449 Route peer agent completion activity to the initiating turn @copyberry - 40450 Gate content item kinds behind a feature flag @copyberry - 40460 Prevent Unix PTY I/O from blocking runtime shutdown @copyberry - 40464 Enforce subagent ownership across app-server inputs @copyberry - 40465 Record Guardian classifier input truncation metrics @copyberry - 40466 Add credential brokering to network proxy feature config @copyberry - 40471 Render Markdown links as clickable labels in supported terminals @copyberry - 40472 Add structured full approval reviews to extensions @copyberry - 40475 Request read control when updating Windows sandbox ACLs @copyberry - 40477 Reload Multi-Agent V2 children through their parent @copyberry - 40480 Add a computer-use-only Guardian v2 review scope @copyberry - 40481 Support managed AWS access keys for Amazon Bedrock @copyberry - 40484 Broker credential aliases in child environments @copyberry - 40486 Add root turn IDs to turn and tool analytics @copyberry - 40487 Extract agent role loading into a dedicated crate @copyberry - 40488 Export turn cost as an OTEL metric @copyberry - 40489 Honor disabled managed network configuration @copyberry - 40490 Harden project config when credential brokering is active @copyberry - 40491 Honor response budgets when reading skill resources @copyberry - 40492 Generate descriptive TUI thread titles @copyberry - 40494 Hide ephemeral system threads from TUI routing @copyberry - 40495 Suggest conversation-based thread titles in /rename @copyberry - 40496 Track history, notes, and async messages as control tools @copyberry - 40497 Harden internal Guardian session isolation @copyberry - 40498 Increase the app-server model refresh interval @copyberry - 40499 Harden startup rollout migration against concurrent updates @copyberry - 40501 Deduplicate plugin skills in unified mentions @copyberry - 40502 Collapse home paths in AGENTS.md status summaries @copyberry - 40504 Route cyber Trusted Access links by plan type @copyberry - 40508 Persist realtime events in the thread timeline @copyberry - 40509 Add persisted thread artifact models @copyberry - 40511 Add hooks for interrupted turns @copyberry - 40521 Add dot-repeat to Vim mode @copyberry - 40523 Retry provider auth commands after initial failures @copyberry - 40528 Represent terminal input in approval reviews @copyberry - 40533 Route extension hints into context-window metadata @copyberry - 40539 Inject history notes hints into context windows @copyberry - 40544 Include transparent background in image generation analytics @copyberry - 40551 Derive sandbox contexts from turn environments @copyberry - 40554 Register the transcript v2 feature flag @copyberry - 40570 Preserve Unicode paths in Windows batch aliases @copyberry - 40585 Track remaining multi-agent v2 tools in analytics @copyberry - 40587 Scope stop hooks for memory consolidation @copyberry - 40594 Preserve conversation context in Guardian transcripts @copyberry

View original release

Other Recent OpenAI Codex CLI Releases

• rust-v0.149.0 (August 20, 2026)
• rust-v0.148.0 (August 18, 2026)
• rust-v0.147.0 (August 7, 2026)
• rust-v0.146.1 (August 5, 2026)
• rust-v0.146.0 (July 29, 2026)

All OpenAI Codex CLI releases · All AI coding tool releases on Havoptic