Codex CLI 0.152.0-alpha.1

• [new] Amazon Bedrock account type and login parameters so Bedrock can be selected as an account path.
• [new] Auth recovery events and notifications for guiding re-authentication when a session needs it.
• [new] Plugin sharing models (share context and principal) for describing who a plugin is shared with and under what context.
• [new] macOS computer-use configuration surface for computer-use setups on Mac.
• [new] Sleep tool TOML configuration for controlling sleep-tool behavior.
• [new] Collaboration “waiting end” signaling when a collab wait completes.
• [new] Token usage profile and account token-usage summary types for richer usage reporting.
• [new] Thread search result payload for returning matched threads from search.
• [new] Turn steer response support for steering an in-flight turn.
• [changed] Environments snapshot and status reporting expanded (broader environment state in snapshots).
• [changed] Multi-agent mode message payloads carry additional fields.
• [changed] Spawn-agent arguments reshaped ( leaner arg set for agent spawn).
• [changed] Thread shell-command parameters extended.
• [changed] Realtime conversation start transport updated (existing-call path emphasized over the previous WebRTC variant).
• [changed] Hook handler configuration recognizes agent and MCP tool-hook handler forms.
• [changed] MCP elicitation requests include an OpenAI elicitation form variant.
• [removed] exclude_slash_tmp config key.
• [removed] Dedicated apply-patch instructions prompt content.

Under the hood

• Codex home metrics collection on the app server for home-directory–scoped telemetry.
• Code-mode tool telemetry hooks for better visibility into code-mode tool use.
• Exec-server remote registration retry logic for more resilient remote registration.
• Exec-server environment knobs refined around stdin-close exit behavior, Noise/ChatGPT account id wiring, and URL/RPC endpoint configuration.
• MCP client WWW-Authenticate handling relocated/simplified as its own module path; related MCP protocol version / protoc-oriented env wiring adjusted.
• Seekable rollout reader for more flexible rollout log reads (including seeking within rollout data).
• Sandbox terminal query support for inspecting terminal state under sandboxing.
• TUI app-server session model helpers and chat turn runtime support for clearer session/turn lifecycle handling in the UI.
• Permission- and plugin-metrics–related environment options introduced or renamed for clearer control of permissions and metrics output.
• App-server realtime history path removed in favor of newer realtime/conversation event shapes (including ack-style client events and auth-recovery payloads).
• Exec-server noise-relay message framing module removed as that path was reworked.
• Dependency locks and version metadata switched to the alpha channel for 0.152.0-alpha.1.

Upgrade notes

• If you still set exclude_slash_tmp in config, remove it; the key is no longer recognized.
• This build is an alpha (0.152.0-alpha.1), not a stable patch on 0.151.0. Prefer it only if you intend to try pre-release behavior; pin back to 0.151.0 for production-stable use.
• Exec-server and MCP-related environment variable names were adjusted in this alpha—double-check any automation that exports CODEX_EXEC_SERVER_*, CODEX_MCP_*, CODEX_PERMISSION, or plugin metrics output variables before upgrading wrappers or CI.