Codex CLI 0.145.0-alpha.12

• [new] Recognizes the o1 model identifier.
• [new] Adds CODEX_SANDBOX_NETWORK_DISABLED to control network access in the sandbox.
• [new] Adds Bedrock authentication handling on the app-server request path.
• [new] Introduces MCP tool-exposure controls so which tools are visible can be managed more deliberately.
• [new] Improves local thread-history reading (cursor/metadata support for stored turns).
• [new] Extends the client event stream with ack and client-message / chunk events.
• [changed] Expands rate-limit snapshot data carried in API payloads.
• [changed] Refines external agent config import failure records and related messaging types.
• [changed] Updates web-search and filesystem tool payloads (begin events, metadata/open responses).
• [removed] Drops the exec-server relay protobuf module in favor of the current protocol path.

Under the hood

• New core module for MCP tool exposure and a dedicated Bedrock auth request processor.
• Thread-store local history read path for more structured history access.
• Broader data-model churn around permissions, stored turn errors, config-layer metadata, and agent/thread items as the app-server protocol evolves.
• Dependency lockfile and version metadata bumped for 0.145.0-alpha.12.

Upgrade notes

• If you pin sandbox networking via environment, prefer CODEX_SANDBOX_NETWORK_DISABLED over any prior ad-hoc overrides.
• Clients that consume rate-limit snapshots or client events should tolerate the expanded snapshot fields and the new ack/message events.