Codex CLI 0.146.0-alpha.3

• [new] Exec-server network policy flow with explicit ask/deny decisions and additional network permission handling.
• [new] Optional sandbox network disable via CODEX_SANDBOX_NETWORK_DISABLED.
• [new] Richer thread lifecycle support: archive, unarchive, delete/closed notifications, goal get/update, and thread item listing.
• [new] Client message events, including chunked client messages and ack signaling.
• [new] Skills config write and extra skills-roots controls.
• [new] Marketplace remove/upgrade operations and clearer marketplace load error reporting.
• [new] Filesystem helpers for directory read, watch teardown, and fuzzy file-search session stop/completion.
• [new] Process controls for kill and terminal size reporting.
• [new] Web search begin event and local audio as a user input variant.
• [new] CODEX_CI environment flag for CI-oriented runs.
• [changed] Thread realtime start parameters/transport (including WebRTC-related startup shape).
• [changed] MCP server identity and value-matching options (command/URL forms and regex matching).
• [removed] Older elicitation/status/warning and related legacy notification payloads superseded by the newer thread and client-event models.

Under the hood

• New exec-server modules for network policy decisions and RPC server request handling, laying groundwork for tighter host/agent control of network access.
• Expanded typed protocol surface across threads, marketplace/plugins, skills, approvals, and exec/process operations (including apply-patch approval responses and recommended plugin install args).
• Event stream adjustments: added exec_command_begin and client-message-related events; dropped obsolete failure hooks such as the old MITM-deny and repository-failed paths.
• Dependency set picks up event-listener-strategy, with lockfile/version metadata bumped for the alpha.3 tag.