OpenAI Codex CLI rust-v0.150.0

New Features

• Reference other Codex tasks with @ mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315)

• /copy now offers a picker for full responses, individual code blocks, and blockquotes. (#39997)

• Unnamed terminal tasks receive descriptive titles automatically, and /rename suggests an editable title based on the conversation. (#40492, #40495)

• Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)

• Bind shortcuts to cycle permission modes, and use . in Vim mode to repeat your last edit. (#39873, #40521)

• New Interrupt hooks can run commands or MCP handlers when an active top-level turn is interrupted. (#40511)

Bug Fixes

• Untrusted projects no longer supply project-level AGENTS.md instructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004)

• Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (#39993)

• Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)

• Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)

• Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)

• Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (#39804, #39825)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.149.0...rust-v0.150.0

• #39667 Trace MCP runtime refresh coordination @copyberry

• #39691 Make Guardian v2 parent compaction reuse configurable @copyberry

• #39700 Fail closed on unsafe config and sed parsing @copyberry

• #39702 Wait for turn completion events in multi-agent resume tests @copyberry

• #39703 Move the global scope check into the code-mode runtime @copyberry

• #39706 Harden Seatbelt writable root path binding @copyberry

• #39707 Remove redundant code mode image helper test @copyberry

• #39709 Log TUI app event variants without their payloads @copyberry

• #39712 Reduce unified exec output buffer allocations @copyberry

• #39717 Pass CI workflow inputs through environment variables @copyberry

• #39719 Stop persisting checkout credentials in V8 workflows @copyberry

• #39720 Expose managed policy for browser settings imports @copyberry

• #39722 Track multi-agent v2 spawn calls in analytics @copyberry

• #39726 Box the WebSocket dial future @copyberry

• #39731 Avoid rollout reads for configured TUI sessions @copyberry

• #39736 Remove private executor directory creation @copyberry

• #39738 Honor Guardian runtime settings from model defaults @copyberry

• #39741 Use model-specific auto-review outcome instructions @copyberry

• #39744 Skip postprocessing for short composer input @copyberry

• #39746 Refresh resumed thread capability roots from executors @copyberry

• #39749 Require filesystem backends to implement directory walks @copyberry

• #39752 Expose uncompiled permission profile selection @copyberry

• #39755 Add managed developer instructions to requirements @copyberry

• #39756 Cache shell snapshots in the exec server @copyberry

• #39757 Standardize shell execution on unified exec @copyberry

• #39761 Add app-server MCP event streaming @copyberry

• #39765 Include suggestion IDs in plugin install metadata @copyberry

• #39770 Refresh bundled model definitions @copyberry

• #39772 Standardize shell execution on unified exec @copyberry

• #39776 Verify Codex app signatures before launch or install @copyberry

• #39777 Retry transient registry failures during initial exec connection @copyberry

• #39779 Make tool-result telemetry limits configurable @copyberry

• #39782 Support standalone named function call outputs @copyberry

• #39784 Classify rollout migration failures @copyberry

• #39785 Support turn cost telemetry for custom model providers @copyberry

• #39786 Support host-accepted exec-server WebSockets @copyberry

• #39790 Deduplicate zsh fork test setup @copyberry

• #39791 Handle standalone tool outputs as external context @copyberry

• #39792 Reject settings updates for parent-owned subagents @copyberry

• #39794 Install build tools in full Rust CI @copyberry

• #39795 Add hostname to the configurable TUI status line @copyberry

• #39797 Enrich thread archive analytics with thread context @copyberry

• #39798 Update rmcp to 3.1.3 @copyberry

• #39802 Optimize case-insensitive thread history matching @copyberry

• #39804 Use multi-agent V1 for Amazon Bedrock models @copyberry

• #39807 Finalize reserved PDF uploads with creation context @copyberry

• #39809 Preserve WINDIR in core Windows shell environments @copyberry

• #39811 Restrict macOS preference reads to full-disk policies @copyberry

• #39812 Avoid materializing writable-root carveouts for presence checks @copyberry

• #39813 Defer legacy filesystem policy projection @copyberry

• #39822 Preserve uncapped Guardian classifier instructions @copyberry

• #39825 Use Responses compaction for Amazon Bedrock @copyberry

• #39827 Add history and notes tools for token-budget sessions @copyberry

• #39830 Rename the history notes extension config option @copyberry

• #39837 Ignore project instructions for untrusted projects @copyberry

• #39847 Include context window IDs in response metadata @copyberry

• #39852 Reset registry retries when refreshing Noise bundles @copyberry

• #39864 Limit pending input preview wrapping work @copyberry

• #39870 Allow session configuration with codex agents @copyberry

• #39873 Add keybindings for cycling TUI permission modes @copyberry

• #39876 Support attaching to existing realtime calls @copyberry

• #39917 Honor request PATH in exec-server shell snapshots @copyberry

• #39926 Resolve HTTP MCP bearer tokens in executor environments @copyberry

• #39930 Track remote MCP header environment variables @copyberry