# Codex CLI 0.149.0: agents dashboard, codex queue, working-directory commands

> Codex CLI 0.149.0 adds an interactive `codex agents` dashboard for managing tasks, a `codex queue` command for messaging existing local or remote sessions, and TUI commands for changing the working directory. It also expands `codex doctor` diagnostics and hardens several MCP, auth-token, and managed-config paths.

| | |
|---|---|
| **Tool** | Codex CLI |
| **Version** | rust-v0.149.0 |
| **Kind** | release |
| **Published** | 2026-08-20 |
| **Observed** | 2026-08-21 |
| **Significance** | 4/5 |
| **Breaking** | no |
| **Categories** | feature, fix, security, api-change, docs |

## What changed


- New interactive `codex agents` dashboard: search, start, open, rename, stop tasks; configurable shortcuts.
- New `/cd`, `/pwd`, `/cwd` TUI commands for managing the session working directory.
- New `codex queue` for sending messages into existing local or remote sessions.
- Vim editing expanded with character replacement and change motions (`cw`, `c$`, `cc`).
- `codex doctor` now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity.
- TypeScript SDK can pass raw CLI config overrides and select `max` or `ultra` reasoning effort.
- Resumed and forked threads restore their active permission profile instead of falling back to current defaults.
- Fixes: queued messages wake idle sessions, duplicate sub-agent activity in the TUI, WebRTC sideband reconnect after transport loss, inline TUI history in Windows Terminal scrollback, bounded replay buffers for inactive threads.
- Hardening: Noise auth tokens no longer reach child processes, MCP HTTP redirects restricted to the configured origin, MCP resource headers isolated during OAuth, Windows IDE pipe client impersonation restricted, external editor buffers isolated from sandbox-writable paths.
- Guardian v2 changes: bounded parent compaction context, images in transcripts, defaults sourced from the model catalog, disabled for managed automatic reviewers.
- Docs: external contributions should go through issues and design discussion rather than pull requests; DNS exfiltration risks and trust limits documented for secure devcontainers.


## Sources

- [github_release](https://github.com/openai/codex/releases/tag/rust-v0.149.0) — retrieved 2026-08-21


## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/codex-cli/rust-v0-149-0
Entity: https://changelogs.info/codex-cli
Event ID: `evt_2026-08-20_codex-cli_rust-v0-149-0`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.