OpenAI Codex CLIrust-v0.151.0Aug 29, 2026
Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
- Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
- Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)
- Preserved restored permission profiles across TUI turns and prevented `/cd` from weakening sandbox restrictions. (#41192)
- Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
- +22 more changes
Read the full release noteHide the full release note
New Features
-
Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
-
Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
-
Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)
Bug Fixes
-
Preserved restored permission profiles across TUI turns and prevented
/cdfrom weakening sandbox restrictions. (#41192) -
Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
-
Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
-
Preserved structured MCP tool and resource errors in app-server responses. (#41196)
-
Counted nested subagent token usage toward root goal budgets. (#41183)
-
Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)
Chores
- Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
Excerpt ends here — this release continues at the source ↗.