Codex CLI 0.150.0-alpha.9

• [new] Realtime thread items: started/completed notifications, transcript deltas, and related session lifecycle handling so live thread activity can stream as it happens.
• [new] Thread timeline listing, including timeline cursors and entries for turns and realtime items.
• [new] Dedicated agent-roles support for discovering and loading roles (moved out of core config into its own subsystem).
• [new] Exec path that processes events for JSONL output.
• [new] TUI thread title handling.
• [new] Hook interrupt events, plus agent handlers as a configured hook option.
• [new] Guardian review evidence in context, with expanded review-scope config and WriteStdin covered in guardian approval/assessment actions.
• [new] Amazon Bedrock access-keys login path and a richer auth.json shape.
• [new] o1 model identifier.
• [changed] Managed hooks requirements and several approval/execution request payloads carry additional fields.
• [changed] TUI Vim normal keymap updated.
• [changed] Skill metadata and related marketplace/package summary types refreshed.
• [removed] exclude_slash_tmp config key.

Under the hood

• New agent-roles workspace crate (discovery and loader); prior in-core agent-roles config module removed in favor of that crate.
• App-server realtime event handling and local thread-history realtime support for the new notification and timeline flows.
• Temporary structured-request support in the TUI and other small presentation/enum extensions (for example inline visualization and realtime item content variants).
• Exec-server noise-relay message framing removed; dependency locks and version metadata bumped for 0.150.0-alpha.9.

Upgrade notes

• Drop any use of the removed exclude_slash_tmp setting.
• If you maintain auth or Bedrock login automation, expect the access-keys login option and an updated auth.json field set.
• Config or integrations that assumed the old agent-roles layout should follow the dedicated agent-roles loader/discovery behavior.