Codex CLI 0.151.0-alpha.12

• [changed] MCP handshake and server identity handling now center on protocol version compatibility, including a dedicated reject path when no compatible version is available, plus clearer command/URL identity for raw MCP server entries.
• [changed] Client message results are delivered through a single result event; the previous chunked client-message result event is gone.
• [changed] Shell secrets requirements for exec are modeled as one unified request shape instead of a separate secrets-only request.
• [changed] Review targeting accepts a custom review target, and tool-call summaries use a generic message variant where a terminal-specific one was used before.
• [changed] Plugin/marketplace install modeling is refreshed (recommended install args; older raw marketplace manifest shapes dropped).
• [new] TOML config surfaces for analytics, auto-review, and models requirements.
• [removed] In-app announcement-tip documents and guardian warning notifications from the notification/document model.
• [removed] Several unused or superseded payloads and events (including MITM hook-denied and TUI suspend-failed notifications, end-synchronized-update, and older GitHub repository summary types).

Under the hood

• Exec-server gains a v1 relay protobuf path for host/agent exec relay wiring.
• Sandboxing adds terminal-query support so the runtime can inspect terminal state when applying sandbox policy.
• CODEX_MCP_PROTOCOL_VERSION is available for MCP protocol version negotiation.
• Data-model churn around verified access, patch approval, output diffs, managed developer-instructions snapshots, npm package metadata, and Git ref summaries supports those flows without changing the external CLI surface in this alpha.
• Dependency lockfile updates accompany the 0.151.0-alpha.12 version bump.