Patch alpha (0.153.0-alpha.2 → 0.153.0-alpha.4) focused on Windows command-safety hardening, TUI/session polish, MCP transport work, and dropping the o1 model id.
Changelog
[new] Stronger Windows shell command safety, including PowerShell-aware checks and a dedicated dangerous-command path before execution.
[new] Markdown rendering in the TUI now handles local links more explicitly.
[new] Agents overview gains thread-oriented UI support for browsing agent threads.
[new] Resume flow can load dedicated resume configuration when bringing a session back.
[changed] Realtime conversation history has a clearer presentation layer for how turns are shown.
[changed] Plugin system updates: bundled-plugin exclusion handling and support for remote plugin mutations.
[changed] MCP stdio transport is bounded to better contain oversized or runaway stdio traffic.
[changed] Account/login wiring is reshaped around API key and ChatGPT thread-initialization paths (including related hook/handler variants).
[changed] Review can target a specific commit match when starting a review.
[changed] Turn-settings updates and compacted rollout/wire items carry a slightly richer shape for session control and history.
[removed] The o1 model identifier is no longer advertised in the build.
[removed] The standalone diff preview renderer path in the TUI is gone (diff viewing is no longer routed through that preview module).
Under the hood
New CODEX_SANDBOX_NETWORK_DISABLED switch for runs that must keep sandbox networking off.
MCP/build-facing env naming cleanup (CODEX_MCP_PROTOC; older mistyped CODEX_MCP_* spellings dropped), plus CODEX_MANAGED_BY_VITE_PLUS for managed Vite Plus hosting.
Internal event/payload renames around exec begin, collab waiting, tool-trace start, and TUI suspend failure so startup and process lifecycle signals stay consistent.
