• Added CLAUDE_CODE_ENABLE_FEEDBACK_SURVEY_FOR_OTEL to re-enable the session quality survey for enterprises capturing responses through OpenTelemetry

• Added settings.autoMode.hard_deny for auto mode classifier rules that block unconditionally regardless of user intent or allow exceptions

• Fixed MCP servers configured in .mcp.json, plugins, and claude.ai connectors silently disappearing after /clear in the VS Code extension, JetBrains plugin, and Agent SDK

• Fixed a rare login loop where a concurrent credential write could overwrite a freshly-rotated OAuth token and force re-login

• Fixed MCP OAuth refresh tokens being lost when multiple servers refresh concurrently — users with several remote MCP servers should no longer need daily re-authentication

• Fixed an API error (400) when extended thinking emitted a redacted thinking block after a tool call

• Fixed --resume / --continue not finding sessions when the project path contains underscores

• Fixed plan mode not blocking file writes when a matching Edit(...) allow rule exists

• WSL2: image paste from Windows clipboard now works via a PowerShell fallback when xclip/wl-paste cannot read image data

• Fixed plugin Stop/UserPromptSubmit hooks failing when cache cleanup deletes a version still in use by a running session

• Improved visual consistency across slash command dialogs: standardized footer hints, dialog spacing, and arrow-key styling, and the dialog frame now appears immediately during loading instead of popping in after

• Fixed colors appearing at wrong positions in bash command output and markdown code blocks

• Fixed ReasonML diffs rendering corrupted "undefined" text artifacts at word-diff boundaries

• Fixed worktree exit dialog warning about uncommitted files in the wrong directory after worktree removal

• Fixed @ file picker not matching files created mid-session in small non-git directories

• Fixed @-mention file picker not finding files in directories with more than 100 entries

• Fixed failed tool calls not being click-to-expand in fullscreen mode when their output was truncated

• Fixed Backspace and Ctrl+Backspace getting swapped after using Ctrl+G to open an external editor on terminals with persistent extended-key modes

• Fixed /usage weekly reset showing time of day instead of the calendar date

• Fixed welcome banner ellipsis causing column overflow on CJK terminals

• Fixed /insights crash when session history contains tool calls with malformed input fields

• Fixed a renderer crash when a tool's collapsibility classification changes mid-session

• Fixed a skills entry in plugin.json hiding the plugin's default skills/ directory, and listing a file path now shows an error instead of failing silently

• Fixed IDE shell-integration lock files not respecting CLAUDE_CONFIG_DIR

• Fixed trailing whitespace in copied terminal output during streaming

• Fixed plugin uninstall and enable/disable not matching slugs case-insensitively

• Fixed tool error truncation marker showing a negative count for surrogate-pair strings

• Fixed env vars from CLAUDE_ENV_FILE SessionStart hooks going stale after /resume or /clear

• Fixed /branch saving a multi-line session title when given a pasted multi-line name

• Fixed a stray leading space on the second line of wrapped text at the column boundary

• Fixed Esc not dismissing dialogs in /install-github-app, /desktop, /resume, and /web-setup

• Fixed /doctor MCP schema errors not naming the missing field or showing the source file path

• Fixed Bash permission prompts showing an internal parser diagnostic instead of a user-readable explanation

• Fixed plugin slash commands with spaces (e.g. /myplugin review) not resolving to their namespaced form

• Fixed AskUserQuestion discarding multi-select answers when supplied as an array

• Fixed /clear not labeling the cleared session for /resume

• Fixed CronList output missing qualifiers and the scheduled prompt

• Fixed "Jump to bottom" overlay leaving color artifacts on CJK characters in fullscreen mode

• Fixed wide markdown tables leaving a stale bordered render in terminal scrollback while streaming

• Fixed pasted text being silently dropped when a long prompt with a pasted-text placeholder was auto-truncated

• Fixed /release-notes getting stuck on an old version after a failed changelog refresh

• Fixed /mcp server list not scrolling when there are more servers than fit in the terminal

• Fixed mid-input slash command autocomplete not working after an initial slash command

• Fixed scrolling to bottom re-engaging auto-follow with autoScrollEnabled: false

• Fixed prompt suggestions being auto-submitted by Enter on an empty input instead of requiring Tab or arrow to accept

• Fixed keyboard shortcut hints not reflecting rebound keys from keybindings.json

• Fixed /settings language change being reverted on Escape after confirming

• Fixed /terminal-setup only appearing in autocomplete on exact name match instead of partial prefixes

• Fixed "Chat about this" on an AskUserQuestion dialog erasing the question text

• Fixed MCP tool results being invisible when the server returns content blocks

• Improved error message when --worktree collides with an existing or stale worktree

• Changed plugin marketplace removal key to d (matching delete elsewhere) instead of r which collided with retry

• Added worktree.baseRef setting (fresh | head) to choose whether --worktree, EnterWorktree, and agent-isolation worktrees branch from origin/ or local HEAD. Note: the default fresh changes EnterWorktree's base back to origin/ (it has been local HEAD since 2.1.128) — set worktree.baseRef: "head" to keep unpushed commits in new worktrees

• Added sandbox.bwrapPath and sandbox.socatPath managed settings (Linux/WSL) to specify custom bubblewrap and socat binary locations

• Added parentSettingsBehavior admin-tier key ('first-wins' | 'merge') to let admins opt SDK managedSettings (parent tier) into the policy merge

• Hooks now receive the active effort level via the effort.level JSON input field and the $CLAUDE_EFFORT environment variable, and Bash tool commands can read $CLAUDE_EFFORT

• Improved focus mode behavior

• Improved memory usage by releasing warm-spare background workers under memory pressure

• Fixed parallel sessions all dead-ending at 401 after a refresh-token race wiped shared credentials

• Fixed Edit/Write allow rules scoped to a drive root (C:\) or POSIX / matching incorrectly and always prompting

• Fixed an unhandled rejection (ECOMPROMISED) when a history or session-log file lock is compromised by clock skew or slow disk

• Fixed pressing Esc during conversation compaction showing a spurious "Error compacting conversation" notification

• Fixed HTTP(S)_PROXY / NO_PROXY / mTLS not being respected for the full MCP OAuth flow including discovery, dynamic client registration, token exchange, and token refresh

• Fixed Read/Write/Edit being denied on mapped network drives passed via --add-dir / SDK additionalDirectories

• Fixed Remote Control stop/interrupt from claude.ai not fully canceling the CLI session the same way local Esc does, causing queued messages to never advance after interrupting a stuck tool or prompt

• Fixed /effort in one session unexpectedly changing the effort level of other concurrent sessions, and a related issue where an IDE effort change could be silently dropped

• Fixed subagents not discovering project, user, or plugin skills via the Skill tool

• claude --help now lists --remote-control alongside --remote-control-session-name-prefix

• [VSCode] Fixed claudeCode.claudeProcessWrapper failing with "Unsupported platform" when the extension build doesn't bundle a Claude binary

Explore new realtime voice models in the OpenAI API that can reason, translate, and transcribe speech, enabling more natural and intelligent voice experiences.

Codex for Chrome

With the new extension for Chrome, Codex is even better at working with apps and websites in your browser. It works in parallel across tabs in the background without taking over your browser, and you stay in control of which websites Codex can use.

Learn more in the Codex Chrome extension documentation.

New Features

• The TUI now supports modal Vim editing in the composer, including /vim, default-mode config, and Vim-specific keymap contexts. (#18595)

• TUI workflows are easier to resume and copy from with a redesigned resume/fork picker, raw scrollback mode, /ide context injection, and workspace-aware /diff. (#20065, #20819, #20294, #21001)

• The status line can show theme-aware colors plus optional PR and branch-change summaries, and /keymap debug helps inspect terminal key events. (#19631, #20892, #20794)

• Plugin management now supports workspace sharing, share access controls, source filtering, local share path tracking, marketplace removal/upgrades, remote bundle sync, and admin-disabled status handling. (#20278, #21124, #21419, #20560, #19843, #20478, #20268, #20298)

• Hooks can be browsed and toggled from /hooks, can run before/after compaction, and can add PreToolUse context; Codex Apps auth and eligible MCP elicitations now surface through TUI/Guardian flows. (#19882, #19905, #20692, #19193, #19431)

• Experimental goals are now discoverable, stay paused across resume unless the user opts back in, and show clearer validation and multi-day duration output. (#20083, #20790, #20746, #20558)

Bug Fixes

• /copy works better in tmux, Alt+Enter and modified Delete/Backspace keys behave correctly, and Windows typing/paste latency was reduced. (#20207, #20535, #21058, #18914)

• Large paste placeholders and Ctrl+C-stashed drafts now survive clear/editor workflows without corrupting draft history. (#21091, #21190, #21351, #21397)

• TUI startup and accessibility were tightened by bounding terminal probes, clearing the first inline viewport render, and honoring animations = false for live rows. (#20654, #21450, #20564)

• Linux sandbox startup is more reliable across older bwrap, slow mount probes, symlink-protected paths, and shared /tmp setups. (#20628, #20111, #21127, #21234)

• Windows sandbox and exec policy now handle named pipes, ConPTY teardown, PowerShell-wrapped allow rules, worktree safe.directory, and unsafe Git options more reliably. (#20270, #20685, #20336, #21409, #21275)

• Fixed custom CA login behind TLS-inspecting proxies, Bedrock runtime endpoint reporting, dangerous project config keys, heredoc redirect approval matching, and unbounded MCP/hook output growth. (#20676, #20275, #20098, #20113, #20260, #21069)

Documentation

• Updated the embedded OpenAI Docs sample skill so API-key setup guidance stays aligned with other docs variants. (#21263)

• Documented how generated git commit attribution is gated by codex_git_commit and configured in config.toml. (#21379)

• Removed local-only planning/spec docs and redirected config docs toward the maintained external documentation surface. (#20896)

Chores

• Linux releases now build, publish, bundle, and verify a standalone bwrap fallback for npm and DotSlash installs. (#21255, #21256, #21257, #21312, #21285)

• Vendored Bubblewrap was updated to 0.11.2, including upstream security changes around setuid support. (#21389)

• Windows Bazel CI now uses faster cross-compilation for tests, clippy, and release-build checks, and Bazel now runs sharded Rust integration tests. (#20585, #20701, #21057)

• App-server and protocol internals were split and slimmed down, including transport extraction, protocol module decomposition, thread/message history moves, and tool-handler cleanup. (#20324, #20325, #20348, #20545, #21251, #21278, #21395)

• Analytics and diagnostics coverage expanded for tool lifecycles, goals, plugin skills, thread sources, service tiers, and PR issue labeling. (#17089, #17090, #20799, #20923, #20949, #20969, #20893)

Changelog

Full Changelog: rust-v0.128.0...rust-v0.129.0

• #20278 feat: Add workspace plugin sharing APIs @xl-openai

• #20334 Make missing config clears no-ops @etraut-openai

• #20246 Gate multi-agent v2 tools independently of collab @jif-oai

• #20361 realtime: rename provider session ids @aibrahim-oai

• #20260 fix(core): truncate large mcp tool outputs in rollouts @owenlin0

• #20083 Mark goals feature as experimental @etraut-openai

• #19843 /plugins: remove marketplace @canvrno-oai

• #20458 [Extension] Allowlist Chrome Extension in the tool_suggest tool @teddywyly-oai

• #20324 Remove core protocol dependency [1/2] @etraut-openai

• #20299 Move item event mapping into app-server-protocol @pakrym-oai

• #20325 Remove core protocol dependency [2/2] @etraut-openai

• #20471 Stop emitting item/fileChange/outputDelta output delta notifications @pakrym-oai

• #20245 [Codex] Add browser use external feature flag @khoi-oai

• #19882 Add /hooks browser for lifecycle hooks @abhinav-oai

• #20275 fix: show correct Bedrock runtime endpoint in /status @celia-oai

• #20270 [codex] Fix elevated Windows sandbox named-pipe access @iceweasel-oai

• #20463 feat(rollouts): store EventMsg::ApplyPatchEnd in limited history mode @owenlin0

• #20101 install WFP filters for Windows sandbox setup @iceweasel-oai

• #20474 [plugin] Add Canva to suggesteable list. @mzeng-openai

• #20379 Send external import completion for sync imports @alexsong-oai

• #19280 [codex] Migrate thread turns list to thread store @wiltzius-openai

• #20348 Move plugin out of core. @xl-openai

• #19160 Make apply_patch streaming parser stateful @akshaynathan

• #20504 fix flaky test falls_back_to_registered_fallback_port_when_default_po… @owenlin0

• #20098 fix: ignore dangerous project-level config keys @owenlin0

• #20268 Sync remote installed plugin bundles @xli-oai

• #20502 fix(tui): set persist_extended_history: false @owenlin0

• #20069 Bypass review for always-allow MCP tools in auto-review @maja-openai

• #18595 feat(tui): add vim composer mode @fcoury-oai

• #20267 Emit analytics for remote plugin installs @xli-oai

• #20499 fix(app-server): mark thread/turns/list and exclude_turns as experime… @owenlin0

• #20522 Alias codex_hooks feature as hooks @abhinav-oai

• #20336 execpolicy: unwrap PowerShell -Command wrappers on Windows @iceweasel-oai

• #20113 fix(exec_policy) heredoc parsing file_redirect @dylan-hurd-oai

• #20341 app-server: switch remote control to protocol v3 segmentation @euroelessar

• #20300 [codex-analytics] centralize thread analytics state @rhan-oai

• #20484 [codex] Improve PR babysitter CI diagnostics and guardrails @wiltzius-openai

• #20298 Surface admin-disabled remote plugin status @xli-oai

• #20511 [codex] Remove unused event messages @pakrym-oai

• #19474 Make thread store process-scoped @wiltzius-openai

• #20558 Format multi-day goal durations in the TUI @etraut-openai

• #19631 Color TUI statusline from active theme @etraut-openai

• #20265 Refresh remote plugin cache on auth changes @xli-oai

• #20150 Add remote plugin skill read API @xli-oai

• #20560 feat: Track local paths for shared plugins @xl-openai

• #20600 chore: allow memories edition @jif-oai

• #20602 feat: ad-hoc instructions @jif-oai

• #20610 chore: improve remember prompt @jif-oai

• #20606 feat: seed ad-hoc memory extension instructions @jif-oai

• #20405 feat: export and replay effective config locks @jif-oai

• #20540 Move apply-patch file changes into turn items @pakrym-oai

• #20564 Enforce animations = false for screen readers @etraut-openai

• #20523 Remove no-tool goal continuation suppression @etraut-openai

• #20627 fix: cargo deny @jif-oai

• #20545 app-server: move transport into dedicated crate @euroelessar

• #20294 Add /ide context support to the TUI @etraut-openai

• #20630 [codex] Add Codex environment config @pakrym-oai

• #20524 deprecate legacy notify @abhinav-oai

• #20486 [codex] Migrate loaded thread/read history to ThreadStore @wiltzius-openai

• #20281 Use selected turn environments for runtime context @starr-openai

• #20535 fix(tui): restore alt-enter newline alias @fcoury-oai

• #20650 fix: reduce ConfigBuilder::build stack usage @jif-oai

• #20478 /plugins: add marketplace upgrade flow @canvrno-oai

• #20512 [codex] Emit image view as core item @pakrym-oai

• #20562 Use the 2025-06-18 elicitation capability shape @abhinav-oai

• #20674 Clear live hook rows when turns finalize @abhinav-oai

• #20646 Surface multi-environment choices in environment context @starr-openai

• #20542 Prune unused code-mode globals @cconger

• #20585 ci: cross-compile Windows Bazel tests @bolinfest

• #20701 ci: cross-compile Windows Bazel clippy @bolinfest

• #20676 Fix custom CA login behind TLS-inspecting proxies @jgershen-oai

• #20654 fix(tui): bound startup terminal probes @fcoury-oai

• #20566 [tool_suggest] More prompt polishes. @mzeng-openai

• #20751 Bound websocket request sends with idle timeout @pakrym-oai

• #20893 [codex] Add issue labeler area labels @etraut-openai

• #20896 Remove local docs and specs @etraut-openai

• #20897 [codex] Refactor app-server dispatch result flow @pakrym-oai

• #20677 [codex] Emit MCP tool calls as turn items @pakrym-oai

• #20973 feat: support template interpolation in multi-agent usage hints @jif-oai

• #20622 feat: memories mcp v1 @jif-oai

• #20773 feat: add remote compaction v2 Responses client path @jif-oai

• #20986 feat: add line offsets to memory read MCP @jif-oai

• #20991 feat: add max_lines to memories MCP read @jif-oai

• #20993 feat: paginate MCP memories list @jif-oai

• #20994 feat: make memories MCP list shallow @jif-oai

• #20996 feat: paginate memories MCP search results @jif-oai

• #20997 feat: add context lines to memories MCP search @jif-oai

• #20998 nit: renaming @jif-oai

• #21004 feat: support multi-query memories search @jif-oai

• #21006 nit: legacy @jif-oai

• #20815 Speed up /side parent restore replay @etraut-openai

• #20790 Keep paused goals paused on thread resume @etraut-openai

• #20940 [codex] Split app-server request processors @pakrym-oai

• #21023 typo @jif-oai

• #21012 memories/mcp: generate tool schemas with schemars @jif-oai

• #21010 memories-mcp: reject symlink traversal in local backend @jif-oai

• #20989 core: share responses request builder with compact requests @jif-oai

• #20853 [mcp-apps] Persist MCP Apps specific tool call end event. @mzeng-openai

• #20750 Unify skip-review handling for approval_mode = "approve" @mzeng-openai

• #20682 feat(app-server): always return limited thread history @owenlin0

• #20628 fix(linux-sandbox): fall back when system bwrap lacks perms @viyatb-oai

• #20794 feat(tui): add keymap debug inspector @fcoury-oai

• #21034 tui: retire /approvals and rename /autoreview to /approve @won-openai

• #20669 Prepare selected environment plumbing @starr-openai

• #20685 Fix Windows PTY teardown by preserving ConPTY ownership @iceweasel-oai

• #20663 Add stdio exec-server listener @starr-openai

• #20561 state: pass state db handles through consumers @euroelessar

• #21054 rollout: store web search and mcp tool calls @owenlin0

• #20892 feat(tui): add PR summary statusline items @fcoury-oai

• #20798 feat(tui): improve TUI keymap coverage @fcoury-oai

• #21053 Use MCP server instructions in deferred namespace descriptions @sayan-oai

• #21026 core: preserve last model ids in feedback tags @sayan-oai

• #21060 core: fix apply_patch request permissions test @bolinfest

• #20060 Add reasoning effort to turn tracing spans @charley-openai

• #21058 fix(tui): support modified backspace/delete keys @fcoury-oai

• #21057 bazel: run sharded rust integration tests @bolinfest

• #18914 fix(tui): use shared paste burst interval on Windows @fcoury-oai

• #20715 Make realtime sideband startup async @kmeelu-oai

• #20514 [codex-analytics] add item lifecycle timing @rhan-oai

• #20722 Remove remote plugin uninstall prefix gate @xli-oai

• #19040 [codex] Add unsandboxed process exec API @euroelessar

• #21105 [network-proxy] Cover DNS timeout blocking @evawong-oai

• #21059 Rename agent identity login surface to access token @shijie-oai

• #20576 codex: route metadata updates through ThreadStore @wiltzius-openai

• #20923 Add plugin ID to skill analytics @alexsong-oai

• #21122 Add turn_id to Codex skill invocation analytics @edwardysun3

• #20575 codex: migrate (more) app-server thread history reads to ThreadStore @wiltzius-openai

• #21069 Spill large hook outputs from context @abhinav-oai

• #20969 1- Add model service tiers metadata @aibrahim-oai

• #21170 tools: remove unused experimental list_dir tool @jif-oai

• #21201 memories-mcp: hide dot paths from list, read, and search @jif-oai

• #21204 feat: support windowed multi-query memory search @jif-oai

• #21205 feat: add normalized matching to memory search @jif-oai

• #20207 fix(tui): make /copy work inside tmux without passthrough @fcoury-oai

• #20799 Add goal lifecycle metrics @etraut-openai

• #20746 Validate /goal objective length in TUI @etraut-openai

• #20708 Add Windows sandbox readiness RPC @iceweasel-oai

• #20692 Support PreToolUse additionalContext @abhinav-oai

• #21091 [codex] Fix TUI large paste placeholder numbering after Ctrl+C @canvrno-oai

• #21089 [codex] Fix fork --last cwd filtering @canvrno-oai

• #21152 revert legacy notify deprecation @abhinav-oai

• #21190 fix(tui): external editor expansion for same-size large pastes @fcoury-oai

• #20111 fix(sandboxing): Bound advisory system bwrap startup probe @viyatb-oai

• #21220 chore: add minimal proxy egress diagnostics @viyatb-oai

• #20819 feat(tui): add raw scrollback mode @fcoury-oai

• #21225 app-server: ignore persist_extended_history param @owenlin0

• #17089 [codex-analytics] add tool item event schemas @rhan-oai

• #20647 Route process tools to selected environments @starr-openai

• #20321 hook trust metadata and enforcement @abhinav-oai

• #21221 [codex] Use shared app-server JSON-RPC error helpers @pakrym-oai

• #21063 add turn items view to app-server turns @rhan-oai

• #21001 feat(tui): route /diff through workspace commands @fcoury-oai

• #20065 feat(tui): redesign session picker @fcoury-oai

• #21127 fix(linux-sandbox): avoid panic on bwrap build failures @viyatb-oai

• #21234 fix(linux-sandbox): isolate Linux sandbox synthetic mount registry per user for shared codex use case @viyatb-oai

• #20687 [codex] Split tool handlers by tool name @pakrym-oai

• #21113 Auto-deny MCP elicitations for Xcode 26.4 clients @etraut-openai

• #21243 [codex] fix TUI turn items view fixtures @fcoury-oai

• #21146 Enable V8 sandboxing for source-built builds @cconger

• #20689 Inject state DB, agent graph store @rasmusrygaard

• #19575 Add cloud executor registration to exec-server @miz-openai

• #20577 codex: use ThreadStore history for core review forks @wiltzius-openai

• #21261 fix build @bolinfest

• #21251 chore(app-server-protocol): split v2 API definitions into modules @owenlin0

• #21259 ci: trigger rusty-v8 releases from tags @cconger

• #21255 linux-sandbox: use standalone bundled bwrap @bolinfest

• #21256 release: publish standalone bwrap artifacts @bolinfest

• #21260 [codex] Move thread naming to app server @pakrym-oai

• #21219 Add model and reasoning effort to MCP turn metadata @mchen-oai

• #21275 Share Git safe-command logic on Windows @iceweasel-oai

• #21257 release/npm: bundle standalone bwrap on Linux @bolinfest

• #21276 [codex] Remove unused ListModels op @pakrym-oai

• #21282 [codex] Remove legacy ListSkills op @pakrym-oai

• #21271 Expose plugin manifest keywords in app server @alfozan

• #20949 [codex-analytics] rework thread_source for thread analytics @rhan-oai

• #21124 feat: Add plugin share access controls @xl-openai

• #20724 app-server: align dynamic tool identifiers with Responses API @eternal-openai

• #21055 Preserve session MCP config on refresh @aaronl-openai

• #21277 [mcp] Return Accept early per feedback. @mzeng-openai

• #21285 fix(bwrap): emit libcap after standalone archive @viyatb-oai

• #21312 release: bundle bwrap with Linux codex DotSlash artifact @bolinfest

• #19193 Support Codex Apps auth elicitations @mzeng-openai

• #20437 feat: add session_id @jif-oai

• #21328 test: isolate app-server-client in-process test state @jif-oai

• #21329 feat: include thread ID in MCP turn metadata @jif-oai

• #21332 feat: return session ID from thread/fork @jif-oai

• #21337 Revert "feat: support template interpolation in multi-agent usage hints" @jif-oai

• #21249 Propagate cache key and service tiers in compact @aibrahim-oai

• #21182 Move installation ID resolution out of core startup @jif-oai

• #21214 chore: spawn MCP for memories @jif-oai

• #21336 feat(app-server): move v2 sessionId onto Thread @jif-oai

• #21350 [codex] fix builtin MCP Windows path test @jif-oai

• #20971 2- Use string service tiers in session protocol @aibrahim-oai

• #21278 Move message history out of core @pakrym-oai

• #21284 [codex] Add response.processed websocket request @pakrym-oai

• #21367 rollout: coalesce thread updated_at touches @jif-oai

• #21378 feat: move auto vaccum @jif-oai

• #21263 [codex] Coordinate OpenAI docs sample with API key setup @mifan-oai

• #21351 fix(tui): keep Ctrl-C stashed drafts after /clear @fcoury-oai

• #21389 vendor: update bubblewrap to 0.11.2 @bolinfest

• #21281 Remove core MCP list tools op @pakrym-oai

• #21381 [codex] Handle git pagination flags by position @iceweasel-oai

• #21397 fix(tui): persist ctrl-c draft via app event @fcoury-oai

• #19431 Route opted-in MCP elicitations through Guardian @cd-oai

• #21107 Avoid noisy OTEL diagnostics in codex exec @cpaasch-oai

• #21390 Avoid hard-coded environment context shell @starr-openai

• #21090 [codex] Dedupe fallback model metadata warnings @canvrno-oai

• #21395 [codex] Split tool handlers into separate files @pakrym-oai

• #21401 [codex-tui] pass thread source for tui threads @rhan-oai

• #17090 [codex-analytics] emit tool item events from item lifecycle @rhan-oai

• #21409 [codex] Fix Windows sandbox git safe.directory for worktrees @iceweasel-oai

• #21379 Document Codex git commit attribution config @henzelmann-oai

• #21287 Move skills watcher to app-server @pakrym-oai

• #21416 [codex] Move tool specs into core handlers @pakrym-oai

• #21419 feat: Add marketplace source filtering and plugin share context @xl-openai

• #19905 Add compact lifecycle hooks (started by vincentkoc - external contrib) @eternal-openai

• #21460 Revert "Move skills watcher to app-server" @pakrym-oai

• #21450 fix(tui): clear first inline viewport render @fcoury-oai

• #21427 [codex] Delete tool handler plan indirection @pakrym-oai

• #21423 [codex] Add OpenAI Developers to tool suggest allowlist @mifan-oai

• #21340 [codex] allow shared config reads in app-server queue @xli-oai

• #21441 [codex] Parallelize skills list cwd loading @xli-oai

• #21481 Revert state DB injection and agent graph store @pakrym-oai

• Added CLAUDE_CODE_SESSION_ID environment variable to the Bash tool subprocess environment, matching the session_id passed to hooks

• Added CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1 env var to opt out of the fullscreen alternate-screen renderer and keep the conversation in the terminal's native scrollback

• Added a "Pasting…" footer hint while a Ctrl+V image paste is being read from the clipboard

• Fixed external SIGINT (e.g. IDE stop button, kill -INT) not running graceful shutdown — terminal modes are now restored and the --resume hint is printed instead of an abrupt exit

• Fixed an uncaught exception when the terminal is closed or SSH disconnects mid-session under the native build

• Fixed --resume failing with no low surrogate in string when a tool error truncation split an emoji; pre-corrupted sessions are sanitized on load

• Fixed --permission-mode flag being ignored when resuming a plan-mode session with -p --continue/--resume, and plan mode not being re-applied after ExitPlanMode within the same session

• Fixed fullscreen mode showing a blank screen after laptop sleep/wake or Ctrl+Z/fg until the next keystroke or stream output

• Fixed cursor landing mid-grapheme on Ctrl+E/A/K/U/arrow keys when an Indic conjunct or ZWJ emoji wraps across lines

• Fixed vim operators corrupting text containing decomposed (NFD) accented characters

• Fixed pasting text starting with / silently swallowing the input or triggering an unknown-command reply

• Fixed pasting dumping stray escape sequences into the prompt when focus events or mouse-tracking reports interleave with the bracketed paste

• Fixed mouse wheel scrolling being too fast in Cursor and VS Code 1.92–1.104 due to an upstream xterm.js bug

• Fixed scroll-wheel handling in JetBrains IDE 2025.2 terminals (spurious arrow keys, wrong-direction events, runaway acceleration)

• Fixed /usage Ctrl+S hanging when copying the stats screenshot to the clipboard on Linux/X11

• Fixed /terminal-setup showing a contradictory error in Windows Terminal — Shift+Enter is natively supported there

• Fixed /effort picker not reflecting the CLAUDE_CODE_EFFORT_LEVEL env var override

• Fixed /status showing the wrong default model for some users

• Fixed slash command autocomplete popup being capped at ~3–5 visible commands instead of scaling with terminal height

• Fixed statusline context_window token counts reflecting cumulative session totals instead of current context usage

• Fixed Alt+T (thinking toggle) not working on macOS terminals without "Option as Meta" enabled (iTerm2, Terminal.app defaults)

• Fixed dead keyboard input on Windows after re-opening a background session from claude agents

• Fixed unbounded memory growth (10GB+ RSS) when a stdio MCP server writes non-protocol data to stdout

• Fixed MCP servers that connect but fail tools/list silently showing 0 tools — they now retry once and show "connected · tools fetch failed" in /mcp

• Fixed unauthorized claude.ai MCP connectors showing as "failed" instead of "needs auth", and headless -p mode retrying non-transient 4xx connection failures

• Improved visual consistency in slash command dialogs and /login, /upgrade, /extra-usage dialog spacing

• Updated the /tui fullscreen startup banner to describe additional renderer benefits (lower memory usage, mouse support, auto-copy on select)

• Fixed Bedrock and Vertex 400 errors when ENABLE_PROMPT_CACHING_1H is set

• Fixed VS Code extension failing to activate on Windows due to a hardcoded build path in the bundled SDK (createRequire polyfill bug)

• Fixed Mantle endpoint authentication failing with missing x-api-key header

• Added --plugin-url flag to fetch a plugin .zip archive from a URL for the current session

• Added CLAUDE_CODE_FORCE_SYNC_OUTPUT=1 env var to force-enable synchronized output on terminals that auto-detection misses (e.g. Emacs eat)

• Added CLAUDE_CODE_PACKAGE_MANAGER_AUTO_UPDATE: when set on Homebrew or WinGet installations, Claude Code runs the upgrade command in the background and prompts to restart

• Plugin manifests: themes and monitors should now be declared under "experimental": { ... }. Top-level declarations still work but claude plugin validate will warn

• Gateway /v1/models discovery for the /model picker is now opt-in via CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY=1 (was automatic in 2.1.126–2.1.128)

• Ctrl+R history picker now defaults to searching all prompts across all projects, matching pre-2.1.124 behavior. Press Ctrl+S to narrow to the current project or session

• Third-party deployments (Bedrock, Vertex, Foundry, or ANTHROPIC_BASE_URL gateway) no longer see spinner tips pointing at first-party Anthropic surfaces

• skillOverrides setting now works: off hides from model and /, user-invocable-only hides from model only, name-only collapses description

• The claude_code.pull_request.count OTel metric now counts PRs/MRs created via MCP tools, not just shell commands

• Policy refusal error messages now include the API Request ID for easier support debugging

• Fixed API errors with unrecognized 400 status codes showing raw JSON instead of the underlying error message

• Fixed /clear not resetting the terminal tab title after a conversation

• Fixed session title chip from /rename disappearing while a permission or other dialog is active

• Fixed agent panel below the prompt being hidden when subagents are running (regression in 2.1.122)

• Fixed external-editor handoff (Ctrl+G) blanking the conversation history above the prompt

• Fixed /context dumping its rendered ASCII visualization grid into the conversation, wasting ~1.6k tokens per call

• Fixed /agents Library list arrow-key navigation: the highlighted agent now stays visible when the list exceeds the viewport

• Fixed /branch success message not including the new branch's session id for /resume

• Fixed bold headers with keycap/ZWJ/skin-tone emoji losing trailing characters in fullscreen mode

• Fixed server-managed settings policy not applying for enterprise/team users whose stored OAuth credentials lacked the user:inference scope

• Fixed OAuth refresh race after wake-from-sleep that could log out all running sessions

• Fixed 1-hour prompt cache TTL being silently downgraded to 5 minutes

• Fixed cache-miss warning appearing spuriously after /clear or compaction when changing /effort or /model

• Fixed Bash(mkdir *), Bash(touch *) and similar allow rules not being honored for in-project paths

• Fixed deniedMcpServers patterns with a *:// scheme wildcard not matching mixed-case hostnames

• Fixed harmless WebSocket warning being logged as an error in --debug during voice mode

• [VSCode] Fixed /clear not clearing the conversation context and displayed transcript

Multiagent sessions and Outcomes are now in public beta under the standard managed-agents-2026-04-01 beta header. Vault credential background refresh is now supported for mcp_oauth credentials. Webhooks for Claude Managed Agents are now supported, with event types including session and vault lifecycle events. Additional filtering and sorting options are now supported—sessions can be filtered by status, and events can be filtered by type and creation time.

GPT-5.5 Instant updates ChatGPT’s default model with smarter, more accurate answers, reduced hallucinations, and improved personalization controls.

Shows how to prompt realtime voice agents, including Realtime 2 reasoning, preambles, tools, and exact entity capture.

OpenAI expands ChatGPT ads with a beta self-serve Ads Manager, CPC bidding, and enhanced measurement tools—built to protect privacy and keep conversations separate from ads.

• Bare /color (no args) now picks a random session color

• /mcp now shows the tool count for connected servers and flags servers that connected with 0 tools

• --plugin-dir now accepts .zip plugin archives in addition to directories

• --channels now works with console (API key) authentication — console orgs with managed settings must set channelsEnabled: true to enable

• Updated /model picker: collapsed duplicate Opus 4.7 entries, and current Opus now shows as "Opus" instead of "Opus 4.7"

• Subprocesses (Bash, hooks, MCP, LSP) no longer inherit OTEL_* environment variables, so OTEL-instrumented apps run via the Bash tool no longer pick up the CLI's own OTLP endpoint

• MCP: workspace is now a reserved server name — existing servers with that name will be skipped with a warning

• Reconnecting MCP servers no longer flood the conversation with full tool-name lists on every reconnect — re-announced tools are summarized by server prefix

• SDK hosts now receive a persistent localSettings suggestion for Bash permission prompts, so "Always allow" writes to .claude/settings.local.json

• EnterWorktree now creates the new branch from local HEAD as documented, instead of origin/ — unpushed commits are no longer dropped

• Auto mode: when the classifier can't evaluate an action, the error now includes a hint (retry, /compact, or run with --debug)

• Fixed focus mode briefly dimming the previous response when submitting a new prompt

• Fixed stray "4;0;" desktop notification on every /exit in Kitty and other terminals that interpret OSC 9 as a notification

• Fixed Remote Control showing an empty "Opening your options…" message on rate limit instead of actionable upsell options

• Fixed drag-and-drop image upload hanging on "Pasting text…" when the image read fails

• Fixed crash loop when piping very large input (>10 MB) to claude -p via stdin

• Fixed long URLs not being individually clickable on every wrapped row in fullscreen mode

• Fixed /plugin Components panel showing "Marketplace 'inline' not found" for plugins loaded via --plugin-dir

• Fixed MCP tool results dropping images when the server returns both structured content and content blocks

• Fixed fenced code blocks inside list items carrying leading whitespace into the clipboard on copy-paste

• Fixed tab navigation in /config stranding focus — the tab header now stays focused so arrows and Esc keep working

• Fixed markdown link labels being lost on terminals without OSC 8 hyperlink support — links now render as label (url) instead of just the URL

• Fixed sessions on 1M-context models with a smaller autocompact window being falsely blocked with "Prompt is too long" before reaching the actual API limit

• Fixed parallel shell tool calls: a failing read-only command (grep, git diff, ls) no longer cancels sibling calls

• Fixed banner showing "with X effort" on models that don't support effort

• Fixed /fast on 3P providers fuzzy-matching to an unrelated skill instead of showing "not available"

• Fixed Bedrock default model resolving to global.* instead of the region-appropriate prefix

• Fixed vim mode: Space in NORMAL mode now moves the cursor right, matching standard vi/vim behavior

• Fixed terminal progress indicator (OSC 9;4) flickering off between tool calls — stays visible across the full turn

• Fixed /rename without args failing on resumed sessions whose last entry is a compact boundary

• Fixed stale "remote-control is active" status lines from prior sessions appearing after --resume/--continue

• Fixed stale installed_plugins.json entries pointing at deleted cache directories polluting PATH

• Fixed MCP stdio servers receiving corrupted arguments when CLAUDE_CODE_SHELL_PREFIX is set and an argument contains spaces or shell metacharacters

• Fixed sub-agent progress summaries missing the prompt cache (~3× cache_creation reduction)

• Fixed /plugin update never detecting new versions of npm-sourced plugins

• Fixed sub-agent summaries firing repeatedly while a sub-agent's transcript is static, capping worst-case token cost on idle sub-agents

• Headless --output-format stream-json: init.plugin_errors now includes --plugin-dir load failures in addition to dependency demotions