# codex rust-v0.149.0 — 0.149.0

- Product: codex (https://whatsnew.fyi/product/codex)
- Vendor: codex
- Date: 2026-08-20
- Version: rust-v0.149.0
- Original notes: https://github.com/openai/codex/releases/tag/rust-v0.149.0
- Permalink: https://whatsnew.fyi/product/codex/releases/rust-v0.149.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Added an interactive codex agents dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts
- **added** — Added /cd, /pwd, and /cwd commands for managing the working directory in TUI sessions
- **added** — Added codex queue for sending messages to existing local or remote sessions
- **added** — Expanded Vim editing with character replacement and more change motions such as cw, c$, and cc
- **changed** — codex doctor now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity
- **added** — SDK users can now pass exact CLI config overrides and select max or ultra reasoning effort
- **fixed** — Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics
- **fixed** — Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults
- **fixed** — Fixed duplicate sub-agent activity and tightened TUI routing for sub-agent notifications and approvals
- **fixed** — Realtime WebRTC sideband connections now reconnect after unexpected transport loss without dropping pending output
- **fixed** — Inline TUI history now remains available in Windows Terminal scrollback
- **fixed** — Inactive TUI thread replay buffers are now bounded to prevent excessive retained streamed output

##### New Features

- Added an interactive `codex agents` dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142)
- Added `/cd`, `/pwd`, and `/cwd` commands for managing the working directory in TUI sessions. (#38894)
- Added `codex queue` for sending messages to existing local or remote sessions. (#39092)
- Expanded Vim editing with character replacement and more change motions such as `cw`, `c$`, and `cc`. (#39661)
- `codex doctor` now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity. (#38827, #38918, #39060, #39074)
- SDK users can now pass exact CLI config overrides and select `max` or `ultra` reasoning effort. (#38817, #39662)

##### Bug Fixes

- Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics. (#39034, #39385, #39604)
- Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults. (#39153)
- Fixed duplicate sub-agent activity and tightened TUI routing for sub-agent notifications and approvals. (#39049, #39088)
- Realtime WebRTC sideband connections now reconnect after unexpected transport loss without dropping pending output. (#39257)
- Inline TUI history now remains available in Windows Terminal scrollback. (#39619)
- Inactive TUI thread replay buffers are now bounded to prevent excessive retained streamed output. (#39081)

##### Documentation

- Clarified that external contributions should go through issues and design discussion rather than pull requests. (#39089)
- Documented DNS exfiltration risks and trust limitations for secure devcontainers. (#39283)

##### Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.148.0...rust-v0.149.0

- #38817 Add raw config overrides to the TypeScript SDK @copyberry
- #38819 Support metadata staging for reserved thread IDs @copyberry
- #38822 Avoid cloning TUI history span content @copyberry
- #38823 Avoid allocating per character when decorating hyperlinks @copyberry
- #38827 Add endpoint protection checks to `codex doctor` @copyberry
- #38830 Isolate external editor buffers from sandbox-writable paths @copyberry
- #38837 Share editor keymaps across TUI composer components @copyberry
- #38840 Identify Mac mini hosts in remote control handshakes @copyberry
- #38893 Restore thread timestamp maxima independently @copyberry
- #38894 Add working-directory commands to the TUI @copyberry
- #38899 Move requirements policy ownership to execpolicy @copyberry
- #38902 Honor per-environment shell variable policies @copyberry
- #38907 Edit queued messages with Vim history-up @copyberry
- #38913 Stop rendering columns after filling their area @copyberry
- #38916 Honor legacy `:project_roots` permission entries @copyberry
- #38918 Improve `codex doctor` network diagnostics @copyberry
- #38919 Reject obsolete app-server permission profile fields @copyberry
- #38921 Compact successful command activity in the TUI @copyberry
- #38940 Add experimental app-server project APIs @copyberry
- #38941 Prevent Noise auth tokens from reaching child processes @copyberry
- #38942 Enforce environment-specific command policies @copyberry
- #38947 Stop loading legacy managed config on Windows @copyberry
- #38978 Add a configurable skill catalog token budget @copyberry
- #38980 Bound Guardian v2 parent compaction context @copyberry
- #38987 Include images in Guardian v2 transcripts @copyberry
- #38990 Source Guardian v2 defaults from the model catalog @copyberry
- #38993 Evaluate recent and character-routed skill selection @copyberry
- #38994 Remove the workspace settings gate for apps and plugins @copyberry
- #38997 Retry transient Guardian sampling failures @copyberry
- #39001 Ignore stale Guardian tool risk scores @copyberry
- #39005 Disable Guardian V2 for managed automatic reviewers @copyberry
- #39006 Em

_[Truncated at 4000 characters — full notes: https://github.com/openai/codex/releases/tag/rust-v0.149.0]_