OpenAI Codex CLI rust-v0.152.0

New Features

• Vim mode supports / and ? searches within drafts, highlighted matches, and repeat navigation with n and N. (#41586)

• Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)

• The terminal UI and codex exec show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)

• MCP server names can contain :, @, /, and ., supporting package-style names throughout CLI commands and authentication. (#41700)

• Individual MCP tools support an output_token_limit setting, with consistent truncation across session resumes. (#41421)

• App-server clients can configure thread/shellCommand timeouts, including deadlines longer than one hour. (#41384)

Bug Fixes

• Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)

• Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)

• Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)

• Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)

• MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)

• Opening the model picker refreshes available models without losing the highlighted choice. (#41467)

• Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals. (#41227, #41436, #41673)

• Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials. (#41403)

Chores

• The planning tool is disabled by default; enable it with tools.update_plan.enabled = true. (#41744)

• Plugin recommendations begin loading during startup, reducing delays before the first turn. (#41375)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.151.0...rust-v0.152.0

• #41210 Enable clock tools from model metadata @copyberry

• #41215 Roll over Guardian context before follow-up reviews @copyberry

• #41218 Share linked tool mention parsing in the TUI @copyberry

• #41219 Retry confirmed remote registration conflicts @copyberry

• #41221 Honor turn token budgets in Guardian review rollover @copyberry

• #41223 Add recency sorting to project/list @copyberry

• #41226 Move Guardian review session tests to a separate file @copyberry

• #41227 Use compatible PowerShell for elevated Windows sandbox commands @copyberry

• #41230 Apply app routing policy to unauthenticated plugin reads @copyberry

• #41231 Instrument the loaded plugin cache @copyberry

• #41232 Expose the PowerShell version in environment context @copyberry

• #41235 Sanitize history notes backend errors @copyberry

• #41239 Surface model provider authentication recovery progress @copyberry

• #41243 Add configurable gating for the sleep tool @copyberry

• #41250 Include thread source in realtime connection metadata @copyberry

• #41260 Let the history backend enforce tool output budgets @copyberry

• #41285 Drive keymap conflict checks from the action registry @copyberry

• #41292 Forward history note images to the model @copyberry

• #41308 Make subagents follow the root service tier @copyberry

• #41309 Honor required reviews when reusing Guardian scores @copyberry

• #41313 Decouple HTTP retry backoff from overload integration testing @copyberry

• #41322 Isolate required-model Guardian approval coverage @copyberry

• #41328 Review terminal input against retained permissions @copyberry

• #41331 Classify clock tools as built-in control tools @copyberry

• #41336 Preserve cached MCP tools during binding capture @copyberry

• #41344 Use refreshed MCP tool caches during binding capture @copyberry

• #41349 Assign stable IDs to generated Responses input items @copyberry

• #41354 Reject NUL bytes in reviewed terminal input @copyberry

• #41357 Support compression for shared rollout lineages @copyberry

• #41360 Measure Codex home usage at app-server startup @copyberry

• #41364 Test resuming compressed shared rollouts @copyberry

• #41365 Restrict async user messages to questions @copyberry

• #41368 Match Windows shell guidance to the executor platform @copyberry

• #41375 Preload plugin recommendations during session startup @copyberry

• #41380 Clarify proactive multi-agent delegation guidance @copyberry

• #41384 Support configurable timeouts for thread shell commands @copyberry

• #41385 Give Guardian classifications distinct turn identities @copyberry

• #41392 Add shared Guardian context primitives @copyberry

• #41393 Preserve one-shot exec when unified exec is disabled @copyberry

• #41396 Refresh runtimes for remote plugin state changes @copyberry

• #41400 Refresh MCP HTTP helper headers after authorization failures @copyberry

• #41403 Restrict cloud task credentials to trusted origins @copyberry

• #41413 Optimize history item lookups @copyberry

• #41416 Add app-server notification media filtering @copyberry

• #41421 Support per-tool MCP output limits @copyberry

• #41422 Add shared Guardian transcript collection @copyberry

• #41424 Preserve context baselines across nested agent forks @copyberry

• #41427 Filter media from function call output notifications @copyberry

• #41429 Retain the last selected step context for each turn @copyberry

• #41432 Run executor hooks for interrupted turns @copyberry

• #41435 Allow bundled browser cleanup hooks on subagent stop @copyberry

• #41436 Respond to terminal queries from TTY subprocesses @copyberry

• #41447 Support openai/elicitation form requests @copyberry

• #41448 Clarify question handling in Default collaboration mode @copyberry