OpenAI Codex CLI rust-v0.154.0

New Features

• GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619)

• Experimental worktree support lets you create isolated checkouts for new or forked sessions using --worktree or /worktree, then browse and resume them. (#42652, #43069, #43120, #43286)

• Answer questions inline while Codex continues working, using suggested choices or custom text without losing your main draft. (#42891, #42894, #42897)

• Windows sessions can now share a background Codex server, with daemon lifecycle commands and managed updates. (#42405, #42392)

• Vim editing gains R replace mode with undo and dot-repeat, plus more reliable Escape handling in legacy terminals. (#42194, #42584)

• Copying responses preserves formatting in rich-text apps, and /copy can copy status output or individual session fields. (#42847, #43055)

Bug Fixes

• Existing sessions pick up newly installed plugin tools and refresh skills and hooks after external plugin upgrades or rollbacks. (#42284, #42593, #42990)

• MCP connections coordinate OAuth token refreshes and surface login challenges when refresh fails, without automatically replaying rejected tool calls. (#42413, #42552)

• Startup avoids running workspace-controlled helpers before trust is established, and the macOS sandbox blocks terminal input injection. (#42324, #42590)

• Remote resume and fork operations preserve saved permissions; fresh sessions and forks respect server model defaults unless explicitly overridden. (#43330, #43177, #43355)

• Resuming a conversation open in another app now shows a read-only transcript with a retry option while preserving your draft. (#43253)

• Automatic approval reviews better preserve authorization context through compaction and reject approvals invalidated by new user instructions or answers. (#42844, #42852, #43442)

Documentation

• Updated the bundled OpenAI Docs skill with GPT-6-Astra migration, compatibility, and prompting guidance. (#42931)

Chores

• The deprecated codex mcp-server entry point is no longer available. (#42993)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.153.0...rust-v0.154.0

• #42188 Fix punctuation in npm packaging documentation @copyberry

• #42192 Use native spawning for bare macOS MCP commands @copyberry

• #42194 Add Vim replace mode to the TUI composer @copyberry

• #42196 Add managed worktree creation @copyberry

• #42199 Refactor shared TUI input routing @copyberry

• #42202 Separate TUI preferences from server configuration @copyberry

• #42204 Add macOS voice runtime projection @copyberry

• #42207 Retry TUI reconnects while threads are closing @copyberry

• #42208 Add GNU Linux voice runtime preparation @copyberry

• #42209 Add Windows voice runtime preparation @copyberry

• #42247 Track history notes thread hint outcomes @copyberry

• #42256 Skip Guardian scoring in User approval mode @copyberry

• #42270 Report the exec-server release version in environment info @copyberry

• #42284 Refresh plugin skills after out-of-process version changes @copyberry

• #42288 Fetch rules_rs zlib packages from Ubuntu snapshots @copyberry

• #42290 Expand Guardian history coverage across resume and rollback @copyberry

• #42293 Preserve verified answers across history compaction @copyberry

• #42298 Preserve retained answers across steer rollbacks @copyberry

• #42306 Stabilize the detached exec-server session resume test @copyberry

• #42309 Separate Windows sandbox provisioning from ACL refresh @copyberry

• #42314 Preserve target-native cwd in permission approval requests @copyberry

• #42316 Refactor exec-server startup futures @copyberry

• #42318 Support packaged managed Codex binary paths @copyberry

• #42319 Show live context compaction status in the TUI @copyberry

• #42320 Make the app-server thread unload delay configurable @copyberry

• #42324 Avoid executing PATH helpers before workspace trust @copyberry

• #42325 Render completed assistant messages directly during replay @copyberry

• #42326 Harden Windows control socket rendezvous @copyberry

• #42328 Support durable reasoning configuration updates @copyberry

• #42330 Protect Windows sandbox binaries from inherited write access @copyberry

• #42332 Package prepared runtimes with the voice host @copyberry

• #42334 Add a Windows sandbox provisioning protocol @copyberry

• #42337 Add an authenticated Windows sandbox provisioning client @copyberry

• #42341 Add Windows sandbox service lifecycle scaffolding @copyberry

• #42342 Harden Windows sandbox provisioning file handling @copyberry

• #42344 Prepare managed policy validation for Windows sandbox provisioning @copyberry

• #42348 Add Windows sandbox client authentication @copyberry

• #42351 Enable authenticated Windows sandbox provisioning @copyberry

• #42353 Add experimental Windows sandbox service provisioning @copyberry

• #42354 Add free-form asynchronous user messages @copyberry

• #42356 Initialize questions in buffered replay test messages @copyberry

• #42358 Extend rate limit reads with usage capabilities @copyberry

• #42364 Support graceful daemon shutdown on Windows @copyberry

• #42366 List managed worktrees for a repository @copyberry

• #42369 Keep SQLite history projection moving past invalid records @copyberry

• #42370 Improve MCP server startup error logging @copyberry

• #42372 Add Luna Reserve usage fallback to the TUI @copyberry

• #42373 Add attributed exec process lifecycle telemetry @copyberry

• #42374 Extract PID startup into a dedicated module @copyberry

• #42375 Clean up Windows sandbox resources on app uninstall @copyberry

• #42377 Make app-server realtime sessions always available @copyberry

• #42378 Route rollout reads through the canonical JSON decoder @copyberry

• #42380 Require confirmation for safety-buffered retries @copyberry

• #42381 Support managed app-server lifecycle on Windows @copyberry

• #42383 Update rmcp to 3.2.0 @copyberry

• #42384 Add an RMCP OAuth credential store adapter @copyberry