# codex rust-v0.151.0 — 0.151.0

- Product: codex (https://whatsnew.fyi/product/codex)
- Vendor: codex
- Date: 2026-08-29
- Version: rust-v0.151.0
- Original notes: https://github.com/openai/codex/releases/tag/rust-v0.151.0
- Permalink: https://whatsnew.fyi/product/codex/releases/rust-v0.151.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Added a configurable grace period for discovering tools from optional MCP servers
- **added** — Extensions can now inspect or replace MCP tool results before they reach the model
- **added** — Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins
- **fixed** — Preserved restored permission profiles across TUI turns and prevented `/cd` from weakening sandbox restrictions
- **fixed** — Kept tool availability and reasoning effort correct when switching models or falling back to another model
- **fixed** — Improved remote sandbox enforcement using the executor's actual home directory, operating system, and path conventions
- **fixed** — Preserved structured MCP tool and resource errors in app-server responses
- **fixed** — Counted nested subagent token usage toward root goal budgets
- **fixed** — Prevented stale Guardian classifications from authorizing actions after permission state changes

##### New Features

- Added a configurable grace period for discovering tools from optional MCP servers. (#41199)
- Extensions can now inspect or replace MCP tool results before they reach the model. (#41202)
- Plugin catalogs now combine per-repository configuration and report invalid project marketplaces without hiding valid plugins. (#41208)

##### Bug Fixes

- Preserved restored permission profiles across TUI turns and prevented `/cd` from weakening sandbox restrictions. (#41192)
- Kept tool availability and reasoning effort correct when switching models or falling back to another model. (#41195, #41206)
- Improved remote sandbox enforcement using the executor’s actual home directory, operating system, and path conventions. (#41196, #41204, #41207, #41209)
- Preserved structured MCP tool and resource errors in app-server responses. (#41196)
- Counted nested subagent token usage toward root goal budgets. (#41183)
- Prevented stale Guardian classifications from authorizing actions after permission state changes. (#41196)

##### Chores

- Added telemetry for escalated stdin reviews and remote executor MCP discovery. (#41189, #41205)
- Stabilized Guardian WebSocket and core fixture tests under slow or highly concurrent CI. (#41191, #41194)

##### Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.150.0...rust-v0.151.0

- #41183 Account subagent token usage toward root goals @copyberry
- #41189 Instrument stdin review size checks @copyberry
- #41191 Stabilize Guardian WebSocket tests @copyberry
- #41192 Preserve restored permission profiles in TUI sessions @copyberry
- #41193 Report affected capabilities from remote plugin syncs @copyberry
- #41194 Harden core test fixture startup assertions @copyberry
- #41195 Finalize model-specific tool plans in `ToolRouter` @copyberry
- #41196 Improve sandboxing, MCP errors, and cached approvals @copyberry
- #41199 Make the optional MCP startup grace configurable @copyberry
- #41202 Let extensions process MCP tool results @copyberry
- #41204 Propagate executor home directories into sandbox contexts @copyberry
- #41205 Track executor MCP discovery telemetry @copyberry
- #41206 Make Ultra reasoning fallback model-aware @copyberry
- #41207 Propagate executor OS into turn environments @copyberry
- #41208 Honor per-repository plugin configuration in catalog requests @copyberry
- #41209 Align deny-read matching with executor path semantics @copyberry