Vim mode supports in-draft search and starts fresh drafts ready for typing
When editing long drafts in Vim mode within the Codex composer, finding an earlier filename no longer requires manual scrolling. You can now press / to search forward or ? to search backward with highlighted matches, and navigate with n and N to jump between occurrences.
Furthermore, fresh drafts now start directly ready for typing: whether you just submitted a message or ran a slash command, you can start typing immediately without manually switching modes.
FEATURE
Rate-limit banners let you check usage and manage limits directly
When hit by a rate limit, users previously saw only a plain banner stating that requests were temporarily blocked, leaving them to figure out the next step on their own. The banner now includes direct action buttons to check current usage, manage credits, reset limits, and manage subscription plans, allowing you to handle each task immediately without dismissing the alert to search through settings.
FEATURE
Reauthentication progress is now visible in the terminal UI and codex exec
The terminal UI and the non-interactive codex exec command now display live progress when refreshing credentials, including multi-step flows like Amazon Bedrock reauthentication. Previously, reauthentication would leave the screen hanging with no feedback, making it impossible to tell whether the process was working or frozen.
FEATURE
MCP server names support package formats, and tool outputs can set limits
MCP server names were previously limited to simple characters. They can now include :, @, /, and ., enabling standard package-style naming such as @scope/name across all CLI commands and authentication flows. In addition, individual MCP tools now support an output_token_limit setting to cap output tokens per invocation, maintaining consistent truncation rules across resumed sessions.
FEATURE
The planning tool is now disabled by default and requires explicit configuration
Codex previously enabled its built-in planning tool out of the box, but the feature is now disabled by default. To use it, you must add the following snippet to your configuration file:
{"tools": {"update_plan": {"enabled": true}}}
This sets tools.update_plan.enabled to true. Rather than introducing a new feature, this update makes an existing capability opt-in.
FEATURE
Automatic approval reviews retain longer transcripts and preserve authorizations across compaction
Automatic approval reviews now retain richer conversation context. While earlier reviews were limited when handling lengthy exchanges, the system can now hold longer messages and larger conversation transcripts. Crucially, when conversations undergo history compaction to condense past turns, original user instructions, provided answers, and granted authorizations are preserved rather than compressed away, ensuring reviews retain full context.
FEATURE
Background operations refined across thread resumption, caching, and model menus
This release fixes multiple background edge cases. Clients connecting to app-server can now configure thread/shellCommand timeouts, including deadlines longer than one hour. Resumed threads automatically restore their previous working directory when none is specified, and client metadata updates preserve existing filesystem permissions. In addition, MCP tools remain callable during cache refreshes and remote plugin updates, while authentication retries adopt newly refreshed helper headers. Opening the model picker refreshes the model list without losing your currently selected item, and plugin recommendations begin loading at startup to minimize delays before the first prompt.
BUGFIX
Three Windows fixes resolved and cloud tasks reject untrusted URLs
Three issues on Windows have been resolved in this release: sandbox execution errors with Microsoft Store PowerShell, subprocess hangs during terminal queries, and cursor-related display corruption in older JediTerm terminals. In addition, cloud task requests now reject untrusted backend URLs and disable automatic redirects to prevent saved credentials from being leaked to unintended destinations.
Original changelog
Original changelogVim mode supports in-draft search and starts fresh drafts ready for typing
Vim mode supports `/` and `?` searches within drafts, highlighted matches, and repeat navigation with `n` and `N`. (#41586)
Vim-enabled composers now start fresh drafts in Insert mode, including after submitting messages or dispatching slash commands. (#41921)
Original changelogRate-limit banners let you check usage and manage limits directly
Rate-limit banners offer actions for checking usage, managing credits, resetting limits, and managing plans. (#41742)
Original changelogReauthentication progress is now visible in the terminal UI and codex exec
The terminal UI and `codex exec` show credential-refresh progress, including Amazon Bedrock reauthentication. (#41239)
Original changelogMCP server names support package formats, and tool outputs can set limits
MCP server names can contain `:`, `@`, `/`, and `.`, supporting package-style names throughout CLI commands and authentication. (#41700)
Individual MCP tools support an `output_token_limit` setting, with consistent truncation across session resumes. (#41421)
Original changelogThe planning tool is now disabled by default and requires explicit configuration
The planning tool is disabled by default; enable it with `tools.update_plan.enabled = true`. (#41744)
Original changelogAutomatic approval reviews retain longer transcripts and preserve authorizations across compaction
Automatic approval reviews can retain longer messages and a larger conversation transcript. (#41931)
Automatic approval reviews preserve user instructions, answers, and valid authorizations across history compaction. (#41660, #41846, #41852)
Original changelogBackground operations refined across thread resumption, caching, and model menus
App-server clients can configure `thread/shellCommand` timeouts, including deadlines longer than one hour. (#41384)
Resumed threads restore their saved working directory when none is supplied, and client metadata updates preserve filesystem permissions. (#41567, #41464)
MCP tools remain available through cache refreshes and remote plugin changes; authentication retries use refreshed helper-provided headers. (#41336, #41344, #41396, #41400)
Opening the model picker refreshes available models without losing the highlighted choice. (#41467)
Plugin recommendations begin loading during startup, reducing delays before the first turn. (#41375)
Original changelogThree Windows fixes resolved and cloud tasks reject untrusted URLs
Fixed Windows sandbox execution with Microsoft Store PowerShell, subprocess hangs on terminal queries, and cursor-related display corruption in older JediTerm terminals. (#41227, #41436, #41673)
Cloud task requests reject untrusted backend URLs and disable redirects to protect saved credentials. (#41403)