New Features
-
Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
-
Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
-
Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)
Bug Fixes
-
Preserved restored permission profiles across TUI turns and prevented
/cdfrom weakening sandbox restrictions. (#41192) -
Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
-
Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
-
Preserved structured MCP tool and resource errors in app-server responses. (#41196)
-
Counted nested subagent token usage toward root goal budgets. (#41183)
-
Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)
Chores
-
Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
-
Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#41191, #41194)
Changelog
Full Changelog: https://github.com/openai/codex/compare/rust-v0.150.0...rust-v0.151.0
-
#41183 Account subagent token usage toward root goals @copyberry
-
#41189 Instrument stdin review size checks @copyberry
-
#41191 Stabilize Guardian WebSocket tests @copyberry
-
#41192 Preserve restored permission profiles in TUI sessions @copyberry
-
#41193 Report affected capabilities from remote plugin syncs @copyberry
-
#41194 Harden core test fixture startup assertions @copyberry
-
#41195 Finalize model-specific tool plans in
ToolRouter@copyberry -
#41196 Improve sandboxing, MCP errors, and cached approvals @copyberry
-
#41199 Make the optional MCP startup grace configurable @copyberry
-
#41202 Let extensions process MCP tool results @copyberry
-
#41204 Propagate executor home directories into sandbox contexts @copyberry
-
#41205 Track executor MCP discovery telemetry @copyberry
-
#41206 Make Ultra reasoning fallback model-aware @copyberry
-
#41207 Propagate executor OS into turn environments @copyberry
-
#41208 Honor per-repository plugin configuration in catalog requests @copyberry
-
#41209 Align deny-read matching with executor path semantics @copyberry