This is an older version. The current version is 0.161.0. Codex CLI 0.161.0 · Released:
Installer files 0.151.0
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
New Features
- Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
- Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
- Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)
Bug Fixes
- Preserved restored permission profiles across TUI turns and prevented /cd from weakening sandbox restrictions. (#41192)
- Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
- Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
- Preserved structured MCP tool and resource errors in app-server responses. (#41196)
- Counted nested subagent token usage toward root goal budgets. (#41183)
- Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)
Chores
- Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
- Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#41191, #41194)
Changelog
Full Changelog: rust-v0.150.0...rust-v0.151.0
- #41183 Account subagent token usage toward root goals @copyberry
- #41189 Instrument stdin review size checks @copyberry
- #41191 Stabilize Guardian WebSocket tests @copyberry
- #41192 Preserve restored permission profiles in TUI sessions @copyberry
- #41193 Report affected capabilities from remote plugin syncs @copyberry
- #41194 Harden core test fixture startup assertions @copyberry
- #41195 Finalize model-specific tool plans in ToolRouter @copyberry
- #41196 Improve sandboxing, MCP errors, and cached approvals @copyberry
- #41199 Make the optional MCP startup grace configurable @copyberry
- #41202 Let extensions process MCP tool results @copyberry
- #41204 Propagate executor home directories into sandbox contexts @copyberry
- #41205 Track executor MCP discovery telemetry @copyberry
- #41206 Make Ultra reasoning fallback model-aware @copyberry
- #41207 Propagate executor OS into turn environments @copyberry
- #41208 Honor per-repository plugin configuration in catalog requests @copyberry
- #41209 Align deny-read matching with executor path semantics @copyberry
