Codex CLI 0.152.0-alpha.4

• [new] Vim-style search in the TUI, including textarea integration and a dedicated search keymap.
• [new] Feedback upload support for sending feedback from the CLI.
• [new] CODEX_SANDBOX_NETWORK_DISABLED environment variable to disable network access in the sandbox.
• [new] Additional thread controls on the wire format, including unarchive and unsubscribe responses and a thread-settings-applied event.
• [new] Apps and skills list/read response shapes for installed apps and available skills.
• [new] Patch-approval response handling for approval flows.
• [new] ToolsV2 tooling surface alongside existing tool calling.
• [changed] TUI token chart styling via a dedicated palette for clearer usage visuals.
• [changed] Text-editing actions expanded (including delete-to-line-end) in the bottom pane.
• [changed] Shell secrets / unified exec request payloads reworked for secret-aware execution.
• [changed] Marketplace, plugin, and account-related response models trimmed and reshaped (including rate-limit credit and credits-nudge email responses).
• [removed] Older config and feature bundles dropped from the model surface, including analytics, auto-review, goals, computer-use (macOS), and several marketplace/plugin share types.
• [removed] Collaboration “waiting” end signaling and some legacy MCP startup / turn-steer paths no longer part of the event surface.

Under the hood

• Feedback gained a dedicated upload module so submission can be handled as its own path rather than ad hoc client logic.
• TUI search and chat chrome were split into clearer modules (vim search, token chart palette); the old turn-runtime chat helper was removed in favor of the newer layout.
• Client streaming events were adjusted (chunked client-message results replacing older ack-style result events).
• Legacy rollout conversion now surfaces an explicit failure path when conversion cannot be completed.
• Account/login and realtime transport enums were reshuffled (API key vs ChatGPT thread init, WebRTC-oriented realtime start), reflecting current auth and session startup options.
• Internal dependency/lockfile and alpha version metadata were bumped to 0.152.0-alpha.4.

Upgrade notes

• If you relied on sandbox network behavior implicitly, set CODEX_SANDBOX_NETWORK_DISABLED explicitly when you need network blocked in the sandbox.
• Config consumers expecting analytics, auto-review, goals, or computer-use (macOS) TOML sections should verify those keys are no longer honored and migrate off them.
• Integrators listening for collab waiting-end, older MCP startup, or turn-steer events should update to the current thread/settings and client-message event set.
• Tooling clients should be prepared for ToolsV2 payloads in addition to prior tool-call shapes.