openai/codex rust-v0.154.0

0.154.0

Repository: openai/codex

Tag: rust-v0.154.0

Published: 2026-09-09T22:35:38Z

Prerelease: no

Release notes:

New Features

• GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619)
• Experimental worktree support lets you create isolated checkouts for new or forked sessions using --worktree or /worktree, then browse and resume them. (#42652, #43069, #43120, #43286)
• Answer questions inline while Codex continues working, using suggested choices or custom text without losing your main draft. (#42891, #42894, #42897)
• Windows sessions can now share a background Codex server, with daemon lifecycle commands and managed updates. (#42405, #42392)
• Vim editing gains R replace mode with undo and dot-repeat, plus more reliable Escape handling in legacy terminals. (#42194, #42584)
• Copying responses preserves formatting in rich-text apps, and /copy can copy status output or individual session fields. (#42847, #43055)

Bug Fixes

• Existing sessions pick up newly installed plugin tools and refresh skills and hooks after external plugin upgrades or rollbacks. (#42284, #42593, #42990)
• MCP connections coordinate OAuth token refreshes and surface login challenges when refresh fails, without automatically replaying rejected tool calls. (#42413, #42552)
• Startup avoids running workspace-controlled helpers before trust is established, and the macOS sandbox blocks terminal input injection. (#42324, #42590)
• Remote resume and fork operations preserve saved permissions; fresh sessions and forks respect server model defaults unless explicitly overridden. (#43330, #43177, #43355)
• Resuming a conversation open in another app now shows a read-only transcript with a retry option while preserving your draft. (#43253)
• Automatic approval reviews better preserve authorization context through compaction and reject approvals invalidated by new user instructions or answers. (#42844, #42852, #43442)

Documentation

• Updated the bundled OpenAI Docs skill with GPT-6-Astra migration, compatibility, and prompting guidance. (#42931)

Chores

• The deprecated codex mcp-server entry point is no longer available. (#42993)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.153.0...rust-v0.154.0

• #42188 Fix punctuation in npm packaging documentation @copyberry
• #42192 Use native spawning for bare macOS MCP commands @copyberry
• #42194 Add Vim replace mode to the TUI composer @copyberry
• #42196 Add managed worktree creation @copyberry
• #42199 Refactor shared TUI input routing @copyberry
• #42202 Separate TUI preferences from server configuration @copyberry
• #42204 Add macOS voice runtime projection @copyberry
• #42207 Retry TUI reconnects while threads are closing @copyberry
• #42208 Add GNU Linux voice runtime preparation @copyberry
• #42209 Add Windows voice runtime preparation @copyberry
• #42247 Track history notes thread hint outcomes @copyberry
• #42256 Skip Guardian scoring in User approval mode @copyberry
• #42270 Report the exec-server release version in environment info @copyberry
• #42284 Refresh plugin skills after out-of-process version changes @copyberry
• #42288 Fetch rules_rs zlib packages from Ubuntu snapshots @copyberry
• #42290 Expand Guardian history coverage across resume and rollback @copyberry
• #42293 Preserve verified answers across history compaction @copyberry
• #42298 Preserve retained answers across steer rollbacks @copyberry
• #42306 Stabilize the detached exec-server session resume test @copyberry
• #42309 Separate Windows sandbox provisioning from ACL refresh @copyberry
• #42314 Preserve target-native cwd in permission approval requests @copyberry
• #42316 Refactor exec-server startup futures @copyberry
• #42318 Support packaged managed Codex binary paths @copyberry
• #42319 Show live context compaction status in the TUI @copyberry
• #42320 Make the app-server thread unload delay configurable @copyberry
• #42324 Avoid executing PATH helpers before workspace trust @copyberry
• #42325 Render completed assistant messages directly during replay @copyberry
• #42326 Harden Windows control socket rendezvous @copyberry
• #42328 Support durable reasoning configuration updates @copyberry
• #42330 Protect Windows sandbox binaries from inherited write access @copyberry
• #42332 Package prepared runtimes with the voice host @copyberry
• #42334 Add a Windows sandbox provisioning protocol @copyberry
• #42337 Add an authenticated Windows sandbox provisioning client @copyberry
• #42341 Add Windows sandbox service lifecycle scaffolding @copyberry
• #42342 Harden Windows sandbox provisioning file handling @copyberry
• #42344 Prepare managed policy validation for Windows sandbox provisioning @copyberry
• #42348 Add Windows sandbox client authentication @copyberry
• #42351 Enable authenticated Windows sandbox provisioning @copyberry
• #42353 Add experimental Windows sandbox service provisioning @copyberry
• #42354 Add free-form asynchronous user messages @copyberry
• #42356 Initialize questions in buffered replay test messages @copyberry
• #42358 Extend rate limit reads with usage capabilities @copyberry
• #42364 Support graceful daemon shutdown on Windows @copyberry
• #42366 List managed worktrees for a repository @copyberry
• #42369 Keep SQLite history projection moving past invalid records @copyberry
• #42370 Improve MCP server startup error logging @copyberry
• #42372 Add Luna Reserve usage fallback to the TUI @copyberry
• #42373 Add attributed exec process lifecycle telemetry @copyberry
• #42374 Extract PID startup into a dedicated module @copyberry
• #42375 Clean up Windows sandbox resources on app uninstall @copyberry
• #42377 Make app-server realtime sessions always available @copyberry
• #42378 Route rollout reads through the canonical JSON decoder @copyberry
• #42380 Require confirmation for safety-buffered retries @copyberry
• #42381 Support managed app-server lifecycle on Windows @copyberry
• #42383 Update rmcp to 3.2.0 @copyberry
• #42384 Add an RMCP OAuth credential store adapter @copyberry
• #42385 Add experimental context management activation @copyberry
• #42386 Expose loaded thread environments in app-server responses @copyberry
• #42388 Recover deferred environments after provisioning failure @copyberry
• #42391 Authorize apply_patch in the executor path context @copyberry
• #42392 Support managed daemon updates on Windows @copyberry
• #42395 Expose the Codex version to...