# codex rust-v0.152.0 — 0.152.0

- Product: codex (https://whatsnew.fyi/product/codex)
- Vendor: codex
- Date: 2026-09-01
- Version: rust-v0.152.0
- Original notes: https://github.com/openai/codex/releases/tag/rust-v0.152.0
- Permalink: https://whatsnew.fyi/product/codex/releases/rust-v0.152.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Vim mode supports `/` and `?` searches within drafts, highlighted matches, and repeat navigation with `n` and `N`
- **added** — Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans
- **added** — Terminal UI and `codex exec` show credential-refresh progress, including Amazon Bedrock reauthentication
- **added** — MCP server names can contain `:`, `@`, `/`, and `.`, supporting package-style names throughout CLI commands and authentication
- **added** — Individual MCP tools support an `output_token_limit` setting, with consistent truncation across session resumes
- **added** — App-server clients can configure `thread/shellCommand` timeouts, including deadlines longer than one hour
- **fixed** — Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands
- **fixed** — Automatic approval reviews can retain longer messages and a larger conversation transcript
- **fixed** — Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction
- **fixed** — Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions
- **fixed** — MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers
- **fixed** — Opening the model picker refreshes available models without losing the highlighted choice
- **fixed** — Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals
- **security** — Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials
- **changed** — The planning tool is disabled by default; enable it with `tools.update_plan.enabled = true`
- **changed** — Plugin recommendations begin loading during startup, reducing delays before the first turn

##### New Features

- Vim mode supports `/` and `?` searches within drafts, highlighted matches, and repeat navigation with `n` and `N`. (#41586)
- Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
- The terminal UI and `codex exec` show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)
- MCP server names can contain `:`, `@`, `/`, and `.`, supporting package-style names throughout CLI commands and authentication. (#41700)
- Individual MCP tools support an `output_token_limit` setting, with consistent truncation across session resumes. (#41421)
- App-server clients can configure `thread/shellCommand` timeouts, including deadlines longer than one hour. (#41384)

##### Bug Fixes

- Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)
- Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)

- Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)
- Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)
- MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)
- Opening the model picker refreshes available models without losing the highlighted choice. (#41467)
- Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals. (#41227, #41436, #41673)
- Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials. (#41403)

##### Chores

- The planning tool is disabled by default; enable it with `tools.update_plan.enabled = true`. (#41744)
- Plugin recommendations begin loading during startup, reducing delays before the first turn. (#41375)

##### Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.151.0...rust-v0.152.0

- #41210 Enable clock tools from model metadata @copyberry
- #41215 Roll over Guardian context before follow-up reviews @copyberry
- #41218 Share linked tool mention parsing in the TUI @copyberry
- #41219 Retry confirmed remote registration conflicts @copyberry
- #41221 Honor turn token budgets in Guardian review rollover @copyberry
- #41223 Add recency sorting to `project/list` @copyberry
- #41226 Move Guardian review session tests to a separate file @copyberry
- #41227 Use compatible PowerShell for elevated Windows sandbox commands @copyberry
- #41230 Apply app routing policy to unauthenticated plugin reads @copyberry
- #41231 Instrument the loaded plugin cache @copyberry
- #41232 Expose the PowerShell version in environment context @copyberry
- #41235 Sanitize history notes backend errors @copyberry
- #41239 Surface model provider authentication recovery progress @copyberry
- #41243 Add configurable gating for the sleep tool @copyberry
- #41250 Include thread source in realtime connection metadata @copyberry
- #41260 Let the history backend enforce tool output budgets @copyberry
- #41285 Drive keymap conflict checks from the action registry @copyberry
- #41292 Forward history note images to the model @copyberry
- #41308 Make subagents follow the root service tier @copyberry
- #41309 Honor required reviews when reusing Guardian scores @copyberry
- #41313 Decouple HTTP retry backoff from overload integration testing @copyberry
- #41322 Isolate required-model Guardian approval coverage @copyberry
- #41328 Review terminal input against retained permissions @copyberry
- #41331 Classify clock tools as built-in control tools @copyberry
- #41336 Preserve cached MCP tools during binding capture @copyberry
- #41344 Use refreshed MCP t

_[Truncated at 4000 characters — full notes: https://github.com/openai/codex/releases/tag/rust-v0.152.0]_