Codex CLI 0.154.0-alpha.2

• [new] Sessions can retain context across the session lifecycle so follow-on turns keep more of what matters.
• [new] The TUI surfaces startup warnings on launch when something needs attention before you work.
• [new] Sandbox denials are reported as first-class notifications when the sandbox blocks an action.
• [new] Guardian warning notifications call out policy or safety issues in-product.
• [changed] MCP server status reporting carries a richer snapshot (more detail on server state).
• [new] Goals can be expressed in TOML-oriented config (Goals support).
• [new] Recommended plugin install flow accepts structured install arguments.
• [changed] Account rate-limit handling includes a reset-credit consumption response path.

Under the hood

• New session retained-context module and TUI startup-warning path wire the behaviors above into core and the app shell.
• Default config shows up as a typed payload in the client data model; several older one-off response/config shapes were folded or removed in favor of the current types.
• Permission and thread-id related environment hooks were cleaned up; refresh-token URL override support is present for controlled auth setups. Network-disabled sandbox env wiring was dropped from this build’s surface.
• Client event stream includes message-chunk style result events; TUI suspend-failure is tracked as its own process notification.
• Workspace lockfile and alpha version metadata bumped for 0.154.0-alpha.2.

Upgrade notes

• If you relied on CODEX_SANDBOX_NETWORK_DISABLED, that env hook is gone in this build—use current sandbox/approval settings instead.
• MCP status consumers should tolerate the expanded server status shape.
• Alpha build: treat goals config, guardian warnings, and plugin-install recommendations as early surfaces and verify against your environment before depending on them in automation.