Codex 0.140.0: Expanded CLI tools for usage stats, cleanup, and seamless

Release notes

FEATURE

Expanded CLI tools for usage stats, cleanup, and seamless migration

Managing your account and projects is now much easier. You can use /usage to view your daily, weekly, or cumulative token activity; when you want to clean house, running codex delete or /delete permanently wipes a session, complete with confirmation safeguards and automatic subagent cleanup. If you're switching over from Claude Code, the new /import command lets you seamlessly bring over your setups, project configurations, and recent chats. Like having a dedicated butler who can show you exactly how much you've spent this month, safely throws out junk (clearing the basement along with it), and flawlessly moves all your furniture straight from your old apartment to your new one.

FEATURE

Freer chat UI with flawless handling of massive text and images

The terminal chat interface has become much more forgiving and convenient. The /goal command now flawlessly preserves oversized text, massive code blocks, and image attachments without truncating them. When you type @, a unified menu now automatically pops up, letting you easily mention specific files, plugins, or skills. Additionally, if you dismiss an update reminder, the system now reliably remembers your choice and stops bothering you, and stale loading indicators are correctly cleared after a turn ends. Oh, and the experimental /realtime voice control feature has gracefully retired and been removed. Like upgrading to a jumbo mailbox that easily swallows the giant packages and photo albums that used to jam the slot; writing a letter now magically auto-completes your addresses, and the postman finally respects the "No Solicitors" sign on your door.

FEATURE

Secure credential storage with rock-solid tool connections

Your authentication and plugin connections are now under tighter security. We've added managed Amazon Bedrock API-key authentication, and your credentials (keys proving you're a valid user) are now safely locked in encrypted local storage. When connecting to external tools (MCP), the system now smartly retries if it fails to start on the first try, explicitly reports unusable credentials as logged out, and completely respects your choice if you've explicitly disabled a server. Remote plugin uninstallations are now completely fixed, and it clearly flags apps that require authentication during installation. Like locking your house keys in a biometric safe: the security system will now try twice if the sensor is finicky, politely ask you to re-register if your badge is wiped, and absolutely refuses to turn on an alarm module you explicitly disabled.

BUGFIX

Auto-repairing databases and crash-proof safety nets

If the underlying SQLite state database gets corrupted (even if the folder morphs into an unrecognizable file), the system now automatically backs it up and rebuilds it perfectly from your rollout history. Pressing Esc to exit a /review while guidance is queued no longer crashes the screen, and cancelling the review leaves that guidance safely intact. You can now interrupt background commands with Ctrl-C on the fly, and the system will still cleanly capture their final output. For massive codebases and marathon chat sessions, it also learned to cache UI rendering and skip duplicate history reads, delivering a massive speed boost. Like a car equipped with a black box and self-healing paint: mashing the wrong buttons or getting hit by flying gravel won't leave you stranded on the highway; it just quietly fixes the scratches and keeps the engine purring smoothly.

Original changelog

Original changelogExpanded CLI tools for usage stats, cleanup, and seamless migration

Added `/usage` views for daily, weekly, and cumulative account token activity. (#27925)
Added permanent session deletion through `codex delete`, `/delete`, and app-server `thread/delete`, with confirmation safeguards and subagent cleanup. (#25018, #27476)
Added `/import` for selectively importing setup, project configuration, and recent chats from Claude Code. (#27070, #27071, #27703)

Original changelogFreer chat UI with flawless handling of massive text and images

`/goal` now preserves oversized text, large pasted blocks, and image attachments, including in remote app-server sessions. (#27508, #27509, #27510)
Typing `@` now opens the unified mentions menu for files, plugins, and skills by default. (#27499)
Persisted “Don’t remind me” update dismissals reliably and cleared stale running-hook indicators after completed turns. (#27619, #27783)
Removed the experimental `/realtime` voice controls and related audio dependencies from the TUI. (#27801)

Original changelogSecure credential storage with rock-solid tool connections

Added managed Amazon Bedrock API-key authentication and encrypted local storage for CLI and MCP OAuth credentials. (#27443, #27689, #27504, #27535, #27539, #27541)
Improved MCP reliability by retrying transient startup failures, reporting unusable OAuth credentials as logged out, and preserving explicitly disabled servers. (#25147, #26713, #27414)
Fixed remote plugin uninstall requests and correctly surfaced apps requiring authentication during installation. (#27085, #27223)

Original changelogAuto-repairing databases and crash-proof safety nets

Corrupted SQLite state databases are now backed up and rebuilt automatically from rollout data, including malformed database-directory cases. (#26859, #27719)
Prevented `/review` from crashing when `Esc` is pressed with queued guidance, while preserving that guidance when the review is canceled. (#22879)
Non-TTY background commands can now be interrupted with Ctrl-C while preserving their final output and exit status. (#26734)
Improved responsiveness for large repositories and long sessions by preserving Git’s built-in filesystem monitor, avoiding duplicate history reads, accelerating archive lookup, and caching turn-diff rendering. (#26880, #27031, #27276, #27489)