Codex CLI v0.150.1: Orchestrating Multiple Agent Tasks From the Terminal#
Part of the Codex CLI Version Tracker series. | Codex on GitHub | Official Changelog
Between v0.146.0 and v0.150.1, Codex CLI gained a terminal dashboard for running many agent tasks at once, scriptable hooks, opt-in support for the MCP 2026-07-28 protocol, and a built-in Amazon Bedrock provider.
New environment variables#
| Variable | What It Does |
|---|---|
CODEX_MCP_PROTOCOL_VERSION | Selects the MCP protocol version Codex negotiates with servers. v0.147.0 added opt-in support for the MCP 2026-07-28 protocol (paginated discovery, multi-round requests, non-blocking server startup)[1], and this variable is how you request it. |
CODEX_APPLY_PATCH_PRESERVE_LINE_ENDINGS | Keeps a file's existing line endings when apply_patch edits it instead of normalizing them, which matters for CRLF files edited on Windows. |
CODEX_BEDROCK_AWS_REFRESH_COMMAND | Command Codex runs to refresh AWS credentials for the built-in Amazon Bedrock provider added in v0.148.0, which supports AWS profile, region, and GPT-5.6 routing.[2] |
CODEX_SESSION_ID | Makes the active session's ID available to hook commands and spawned child processes, which pairs with hooks becoming able to run commands and invoke MCP tools in v0.148.0.[2] |
Running many tasks from one terminal#
The clearest new direction across this range is task orchestration. v0.149.0 added an interactive codex agents dashboard for searching, starting, opening, renaming, and stopping tasks, plus codex queue for sending messages to existing local or remote sessions.[3] v0.150.0 built on that: you can reference other Codex tasks with @ mentions and ask an agent to read, create, or message tasks straight from the terminal.[4] Supporting commands landed alongside, including /cd, /pwd, and /cwd for moving between working directories inside a session (v0.149.0), and automatic descriptive titles for unnamed tasks with /rename suggesting an editable one (v0.150.0).
Sessions you can export, fork, and archive#
v0.148.0 turned threads into artifacts you can move around. /export writes a full TUI conversation to Markdown, to the clipboard or a new file; codex exec fork forks a session; and the resume picker archives or restores sessions.[2] You can also draft a prompt while the TUI is still initializing, with resume and fork progress shown during startup.
Plugins, MCP, and providers#
v0.147.0 made Agent Plugins portable: install them and search across local, personal, workspace, and remote catalogs.[1] The same release added the opt-in MCP 2026-07-28 protocol described above. v0.148.0 added Amazon Bedrock Runtime as a built-in provider with AWS profile, region, and GPT-5.6 routing, with CODEX_BEDROCK_AWS_REFRESH_COMMAND handling credential refresh.[2]
Hooks and security#
Hooks became programmable. v0.148.0 let them run commands asynchronously and invoke MCP tools; v0.150.0 added Interrupt hooks that fire when an active top-level turn is interrupted.[2][4] Security work runs through every release in the range: secrets and bearer tokens are redacted from displayed commands and replayed history (v0.147.0), unfamiliar local projects require explicit trust (v0.147.0), and untrusted projects no longer contribute project-level AGENTS.md instructions while managed deny-read rules stay enforced after permission changes (v0.150.0).[1][4]
Inside the release#
The diff from rust-v0.146.0 to rust-v0.150.1 is 1,172 commits from 65 distinct authors, with the sampled window running August 19 to August 27, spread across four minor releases (0.147 through 0.150) plus the 0.150.1 backport. The contributor list is almost entirely staff: jif-oai leads the sample at 42 commits, then pakrym-oai (24), felixxia-oai (18), and etraut-openai (16), with -oai and -openai handles dominating a long tail. Work concentrates in one place, with 255 of 300 sampled file changes under codex-rs and about 17,000 lines added against 4,300 removed, so the surface keeps growing. The next-largest touched directory is .github (31 changes), consistent with CI and release-tooling upkeep at this cadence.
An identity and federation layer is taking shape that the release notes do not mention: new OPENAI_WORKLOAD_IDENTITY_CONTEXT and OPENAI_IDENTITY_TOKEN_FILE variables, a CODEX_AGENT_IDENTITY_JWKS_BASE_URL, an OPENAI_FEDERATION_RULE_ID, and codex-workload-identity and codex-agent-roles gates.
What this tells us#
The codex agents dashboard, codex queue, and @-task mentions add terminal controls for starting, watching, and messaging many concurrent tasks, local or remote. That is the same fan-out-and-supervise model Claude Code approaches through subagents and background tasks and that Amp organizes around its thread model.
The plugin portability, MCP 2026-07-28 support, and built-in Bedrock provider point outward. Searchable plugin catalogs and a documented provider path make Codex usable against non-OpenAI models and third-party tooling, which lowers the cost of adopting it inside an existing stack.
The window also adds workload-identity, federation, redaction, and trust primitives alongside the identity variables above: a workload identity context, an identity token file, a JWKS base URL, and federation rule IDs, plus the secret redaction and project-trust changes from the release notes.
Sources#
- Codex CLI v0.147.0 release notes
- Codex CLI v0.148.0 release notes
- Codex CLI v0.149.0 release notes
- Codex CLI v0.150.0 release notes and v0.150.1
This analysis is based on publicly available open-source code and release metadata, conducted for educational and research purposes. All trademarks and software referenced belong to their respective owners.