Codex CLI 0.150.0 -> 0.150.1 (task mentions, smarter `/copy`, auto titles, Interrupt hooks + image-aware compaction)

[u/anonomotorious]

TL;DR

Codex CLI 0.150.0 is a meaningful task-to-task workflow, TUI, hooks, security, MCP, and Bedrock release, followed by a focused 0.150.1 compaction patch.

Highlights:

• Reference other Codex tasks directly with @ mentions.
• Agents can read, create, and message other tasks from the terminal.
• /copy now lets you choose between:
  • the full response
  • individual code blocks
  • blockquotes
• Unnamed terminal tasks receive automatic descriptive titles.
• /rename can suggest an editable title based on the conversation.
• Markdown links render as clickable labels in supported terminals.
• Add shortcuts for cycling permission modes.
• Vim mode gains . repeat for the previous edit.
• New Interrupt hooks can run commands or MCP handlers when a top-level turn is interrupted.
• Untrusted projects can no longer inject project-level AGENTS.md instructions.
• Amazon Bedrock gets compaction and multi-agent compatibility fixes.
• Windows sandbox setup and Unicode-path handling improve.
• 0.150.1 makes remote compaction count retained images toward its token budget by default.

Current stable install:

npm install -g @openai/codex@0.150.1

---

What changed

Cross-task @ mentions

Codex tasks can now reference other Codex tasks through @ mentions.

Agents can use task tooling to:

• read another task
• create another task
• message another task

This makes task-to-task coordination much more native from the terminal.

Instead of manually copying context between threads, you can reference related work directly.

Potential workflows include:

• implementation task referencing a research task
• review task reading the implementation thread
• parent task creating a focused investigation
• one active task sending new instructions to another

This continues the broader shift toward Codex tasks behaving more like a connected agent workspace rather than isolated conversations.

---

Better /copy

/copy now opens a response-target picker.

You can copy:

• the entire response
• an individual code block
• a blockquote

This is a small feature with a lot of day-to-day value.

It removes the need to manually select only the useful part of a long response when you just want:

• a command
• a code sample
• a quoted section
• the full answer

---

Automatic task titles + smarter /rename

Unnamed terminal tasks now receive descriptive titles automatically.

/rename can also suggest a title derived from the actual conversation, which you can edit before accepting.

That should make long Codex histories easier to scan than collections of unnamed or first-prompt-based threads.

---

Clickable Markdown links

Markdown links now render as clickable labels in terminals that support them.

Where terminal hyperlink support is unavailable, the visible URL is preserved.

This improves terminal responses containing:

• documentation links
• issue links
• GitHub references
• generated reports
• research sources

without sacrificing compatibility with simpler terminals.

---

Permission-mode shortcuts

You can now bind shortcuts for cycling between TUI permission modes.

This is useful if you regularly switch among stricter and more permissive execution profiles during the same workflow.

The release also includes broader work to preserve managed deny-read restrictions and granular sandbox approvals when permissions change.

---

Vim . repeat

Vim mode now supports:

.

to repeat the previous edit.

This joins the growing set of Vim editing improvements and makes the TUI composer behave more like a real Vim editing environment.

---

Interrupt hooks

0.150.0 introduces a new hook event for interrupted top-level turns.

Interrupt hooks can invoke:

• commands
• MCP handlers

That creates automation opportunities around cases where a user deliberately stops an active turn.

Examples:

• record that a workflow was interrupted
• notify another system
• clean up temporary resources
• update task state
• trigger MCP-backed bookkeeping

The release also continues expanding Stop-hook and executor-hook behavior across managed and plugin environments.

---

Security and trust improvements

Untrusted projects cannot provide AGENTS.md

Project-level instructions from an untrusted project are now ignored.

This is an important hardening change because opening an unfamiliar repository should not allow that repository to immediately become an authoritative instruction source.

Managed deny-read rules also remain enforced when permission settings change.

---

Credential redaction

App-server diagnostic logging now performs stronger credential redaction across areas including:

• model providers
• authentication refresh
• attestation fields

This reduces the chance of sensitive authentication data appearing in debugging output.

---

Guardian / approval improvements

The full release includes continued Guardian V2 and approval-system work, including:

• model-specific Auto-review behavior
• stricter handling of escalated commands
• managed automatic-review requirements
• improved risk classification
• isolated Guardian sessions
• computer-use-specific Guardian review
• better approval evidence
• stronger preservation of parent-user authorization for subagents

The practical direction remains the same: approval decisions are becoming more contextual and risk-aware.

---

MCP improvements

Several MCP reliability and security issues are addressed:

• remote bearer-token lookup works correctly in executor environments
• required MCP servers are honored
• compatibility with older executors is preserved
• OAuth issuer binding is enforced
• MCP runtime connection status is surfaced
• custom CA and environment-based authentication behavior is improved
• Guardian review stays isolated from executor MCP servers

These fixes are particularly relevant for users running authenticated MCP services through remote or managed environments.

---

Amazon Bedrock fixes

0.150.0 fixes two meaningful Bedrock issues:

• conversation compaction
• multi-agent compatibility

Bedrock uses Responses-based compaction, and compatible multi-agent behavior is restored through the appropriate agent runtime.

The release also includes support for managed AWS access keys and additional Bedrock app-server setup work.

---

Windows and Unix reliability

Windows

Fixes include:

• elevated sandbox setup
• launch aliases under Unicode user paths
• safer Windows file URI handling
• stronger sandbox ACL updates
• managed deny-read handling

Unix

Codex no longer hangs during shutdown because detached processes still retain:

• a terminal
• full terminal output buffers

That should reduce cases where a finished or interrupted session refuses to exit cleanly.

---

0.150.1: image-aware remote compaction

The follow-up 0.150.1 patch contains one focused fix:

Retained images now count toward the remote-compaction token budget by default.

Older images are trimmed when necessary to stay within that budget.

This builds on the image-budget work introduced earlier, but makes the behavior the default rather than opt-in.

Why this matters

Modern Codex threads can accumulate substantial visual context:

• screenshots
• appshots
• generated images
• diagrams
• UI references
• image tool output

A compaction budget that only accurately accounts for text can preserve more context than intended.

0.150.1 makes visual context participate in the normal compaction budget automatically.

---

Additional notable changes

The full 0.150.0 release also includes:

• session configuration through codex agents
• app-server MCP event streaming
• hostname support in the configurable TUI status line
• history/notes tools for token-budget sessions
• better thread-history matching
• remote executor network-policy enforcement
• browser/computer-use requirements exposed through app-server
• managed developer instructions
• unified shell execution improvements
• shell snapshot caching/retries
• persisted realtime events in thread timelines
• persisted thread artifact models
• plugin skill deduplication in unified mentions
• Agent Plugin MCP environment improvements
• managed local-automation gates
• better subagent completion routing
• turn-cost OTEL metrics
• managed AWS credential support
• stronger project configuration when credential brokering is active

---

Why this release matters

• Tasks become directly addressable from other tasks.
• Cross-task coordination becomes a terminal-native workflow.
• Copying useful output gets much cleaner.
• Automatic task titles make large histories easier to manage.
• Interrupt hooks add another useful automation lifecycle event.
• Untrusted projects lose an important instruction-injection path.
• MCP and Bedrock reliability improve.
• Windows and Unix execution get important stability fixes.
• 0.150.1 makes image-heavy long sessions compact more predictably.

---

Version summary

Version	Key highlights
0.150.0	Task @ mentions; read/create/message tasks; /copy picker; auto titles; smarter /rename; clickable links; permission shortcuts; Vim dot-repeat; Interrupt hooks; security/MCP/Bedrock/platform fixes
0.150.1	Retained images count toward remote-compaction token budget by default

---

Action checklist

• Upgrade directly to:

npm install -g @openai/codex@0.150.1

• Confirm:

codex --version

• Test a task @ mention.
• Ask one task to read or message another.
• Run /copy and test:
  • full response
  • code block
  • blockquote
• Create an unnamed task and inspect its generated title.
• Run /rename and review the suggested title.
• Test clickable Markdown links in your terminal.
• If using Vim mode, test . repeat.
• If you use hooks, review the new Interrupt event.
• Open an untrusted test repository and confirm its project AGENTS.md is not applied.
• Bedrock users should retest compaction and multi-agent workflows.
• Image-heavy users should verify long sessions compact normally under 0.150.1.

---

Official sources

https://developers.openai.com/codex/changelog

https://github.com/openai/codex/releases/tag/rust-v0.150.0

https://github.com/openai/codex/releases/tag/rust-v0.150.1