Codex CLI 0.150.0 herunterladen

New Features
- Reference other Codex tasks with @ mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315)
- /copy now offers a picker for full responses, individual code blocks, and blockquotes. (#39997)
- Threads receive descriptive titles automatically, and /rename suggests an editable title based on the conversation. (#40492, #40495)
- Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)
- Bind shortcuts to cycle permission modes, and use . in Vim mode to repeat your last edit. (#39873, #40521)
- New Interrupt hooks can run commands or MCP handlers when an active turn is interrupted. (#40511)
Bug Fixes
- Untrusted projects no longer supply project-level AGENTS.md instructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004)
- Provider credentials and authentication tokens are now redacted from app-server diagnostic logs. (#39993)
- Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)
- Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)
- Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)
- Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (#39804, #39825)
Changelog
Full Changelog: rust-v0.149.0...rust-v0.150.0
- #39667 Trace MCP runtime refresh coordination @copyberry
- #39691 Make Guardian v2 parent compaction reuse configurable @copyberry
- #39700 Fail closed on unsafe config and sed parsing @copyberry
- #39702 Wait for turn completion events in multi-agent resume tests @copyberry
- #39703 Move the global scope check into the code-mode runtime @copyberry
- #39706 Harden Seatbelt writable root path binding @copyberry
- #39707 Remove redundant code mode image helper test @copyberry
- #39709 Log TUI app event variants without their payloads @copyberry
- #39712 Reduce unified exec output buffer allocations @copyberry
- #39717 Pass CI workflow inputs through environment variables @copyberry
- #39719 Stop persisting checkout credentials in V8 workflows @copyberry
- #39720 Expose managed policy for browser settings imports @copyberry
- #39722 Track multi-agent v2 spawn calls in analytics @copyberry
- #39726 Box the WebSocket dial future @copyberry
- #39731 Avoid rollout reads for configured TUI sessions @copyberry
- #39736 Remove private executor directory creation @copyberry
- #39738 Honor Guardian runtime settings from model defaults @copyberry
- #39741 Use model-specific auto-review outcome instructions @copyberry
- #39744 Skip postprocessing for short composer input @copyberry
- #39746 Refresh resumed thread capability roots from executors @copyberry
- #39749 Require filesystem backends to implement directory walks @copyberry
- #39752 Expose uncompiled permission profile selection @copyberry
- #39755 Add managed developer instructions to requirements @copyberry
- #39756 Cache shell snapshots in the exec server @copyberry
- #39757 Standardize shell execution on unified exec @copyberry
- #39761 Add app-server MCP event streaming @copyberry
- #39765 Include suggestion IDs in plugin install metadata @copyberry
- #39770 Refresh bundled model definitions @copyberry
- #39772 Standardize shell execution on unified exec @copyberry
- #39776 Verify Codex app signatures before launch or install @copyberry
- #39777 Retry transient registry failures during initial exec connection @copyberry
- #39779 Make tool-result telemetry limits configurable @copyberry
- #39782 Support standalone named function call outputs @copyberry
- #39784 Classify rollout migration failures @copyberry
- #39785 Support turn cost telemetry for custom model providers @copyberry
- #39786 Support host-accepted exec-server WebSockets @copyberry
- #39790 Deduplicate zsh fork test setup @copyberry
- #39791 Handle standalone tool outputs as external context @copyberry
- #39792 Reject settings updates for parent-owned subagents @copyberry
- #39794 Install build tools in full Rust CI @copyberry
- #39795 Add hostname to the configurable TUI status line @copyberry
- #39797 Enrich thread archive analytics with thread context @copyberry
- #39798 Update rmcp to 3.1.3 @copyberry
- #39802 Optimize case-insensitive thread history matching @copyberry
- #39804 Use multi-agent V1 for Amazon Bedrock models @copyberry
- #39807 Finalize reserved PDF uploads with creation context @copyberry
- #39809 Preserve WINDIR in core Windows shell environments @copyberry
- #39811 Restrict macOS preference reads to full-disk policies @copyberry
- #39812 Avoid materializing writable-root carveouts for presence checks @copyberry
- #39813 Defer legacy filesystem policy projection @copyberry
- #39822 Preserve uncapped Guardian classifier instructions @copyberry
- #39825 Use Responses compaction for Amazon Bedrock @copyberry
- #39827 Add history and notes tools for token-budget sessions @copyberry
- #39830 Rename the history notes extension config option @copyberry
- #39837 Ignore project instructions for untrusted projects @copyberry
- #39847 Include context window IDs in response metadata @copyberry
- #39852 Reset registry retries when refreshing Noise bundles @copyberry
- #39864 Limit pending input preview wrapping work @copyberry
- #39870 Allow session configuration with codex agents @copyberry
- #39873 Add keybindings for cycling TUI permission modes @copyberry
- #39876 Support attaching to existing realtime calls @copyberry
- #39917 Honor request PATH in exec-server shell snapshots @copyberry
- #39926 Resolve HTTP MCP bearer tokens in executor environments @copyberry
- #39930 Track remote MCP header environment variables @copyberry
- #39935 Enforce issuer binding for MCP OAuth endpoints @copyberry
- #39937 Bound unified exec output delta frames @copyberry
- #39940 Allow more time for local code-mode host startup @copyberry
- #39941 Discover HTTP MCP servers from selected executors @copyberry
- #39952 Honor required MCP servers from selected executors @copyberry
- #39953 Support voice-aware configuration and version-skew builds @copyberry
- #39957 Add in-memory shell snapshots to unified exec @copyberry
- #39958 Stop advertising shell snapshots from local exec servers @copyberry
- #39961 Test browser MCP bearer tokens over executor WebSockets @copyberry
- #39962 Keep Guardian reviews isolated from executor MCP servers @copyberry
- #39967 Upgrade pnpm to 10.34.5 @copyberry
- #39969 Consolidate code mode output helper tests @copyberry
- #39971 Fix elevated Windows sandbox setup activation @copyberry
- #39975 Preserve root user authorization in subagent Guardian reviews @copyberry
- #39976 Allow semaphore limit queries in the macOS sandbox @copyberry
- #39979 Preserve MCP compatibility with older executors @copyberry
- #39980 Enforce environment network policies for remote execution @copyberry
- #39981 Bypass risk scoring for models that require automatic review @copyberry
- #39985 Truncate Guardian instructions after rendering the policy @copyberry
- #39991 Preserve TUI event ordering during active-thread draining @copyberry
- #39992 Keep keymap action descriptions stable while navigating @copyberry
- #39993 Keep credentials out of app-server logs @copyberry
- #39994 Add Guardian internal session support @copyberry
- #39995 Expand browser and computer use requirements @copyberry
- #39997 Add a response target picker to /copy @copyberry
- #39999 Hide Fast mode status for unsupported models @copyberry
- #40000 Expose browser and computer-use requirements through app-server @copyberry
- #40004 Preserve managed deny-read rules across permission updates @copyberry
- #40005 Route escalated commands through synchronous Guardian review @copyberry
- #40006 Synchronize Git enrichment tests explicitly @copyberry
- #40007 Implement Amazon Bedrock setup in the app server @copyberry
- #40009 Run allowlisted executor plugin stop hooks @copyberry
- #40011 Synchronize concurrent Git enrichment test explicitly @copyberry
- #40012 Preserve executor context for MCP stop hooks @copyberry
- #40013 Reuse Guardian reviews in async risk scoring @copyberry
- #40015 Harden remote installed plugin cache reconciliation @copyberry
- #40017 Trace turn context creation and realtime state checks @copyberry
- #40018 Add browser and computer use configuration @copyberry
- #40020 Add end-to-end tests for executor Stop hooks @copyberry
- #40021 Cancel Guardian reviews with their tool calls @copyberry
- #40024 Honor granular sandbox approvals in unified exec @copyberry
- #40028 Log Guardian V2 classification results @copyberry
- #40031 Preserve strict MCP auto-review outcomes @copyberry
- #40038 Add unfinished root turn suspension @copyberry
- #40068 Report runtime MCP connection status @copyberry
- #40150 Use thread source metadata for Guardian classifiers @copyberry
- #40161 Allow exec callers to classify new threads @copyberry
- #40166 Move the TUI cursor before showing it @copyberry
- #40169 Add regression coverage for patch approval paging @copyberry
- #40174 Preserve content item kinds in message metadata @copyberry
- #40177 Require content kinds for extension prompt fragments @copyberry
- #40179 Shut down resumed descendants when archiving thread trees @copyberry
- #40180 Classify contextual fragments with content kinds @copyberry
- #40184 Preserve context annotations in merged messages @copyberry
- #40186 Identify detached memory requests as memory consolidation @copyberry
- #40196 Annotate user input and contextual fragments with content kinds @copyberry
- #40200 Remove the Plan mode composer nudge @copyberry
- #40221 Distinguish Guardian review threads from subagents @copyberry
- #40257 Support cua_repl as a Node REPL-backed MCP server @copyberry
- #40264 Preserve content metadata when truncating messages @copyberry