Codex CLI 0.154.0-alpha.7

• [new] Realtime voice support lands in the interactive UI, including a /voice slash command, a voice strip, spoken-turn artifacts, and audio control/state handling over a WebRTC transport.
• [new] codex app-server daemon update updates a standalone installation and restarts the managed daemon (this may interrupt in-flight work). Shell completions for bash, fish, and zsh cover the new subcommand.
• [new] User verification flow support in the app server and TUI, including verify responses and clearer cancelled/failed/invalid/unavailable error cases.
• [new] Memory status request handling, with richer memories configuration and runtime readiness/version tracking.
• [new] o1 is available as a model identifier.
• [removed] The exclude_slash_tmp config key is no longer recognized.

Under the hood

• New realtime-webrtc client/session stack powers realtime delivery in the TUI and app-server session path (offer/hello handshake, transport lifecycle, device open/inspect, and audio control messages).
• Guardian context gains profile/window support and review-session thread handling.
• App-server daemon manual-update wiring backs the new update subcommand.
• Size monitoring, turn runtime, and computer-activity history cells support the expanded realtime/TUI surface.
• Dependency set picks up blake3; assorted request/response payloads and enums were extended for apps, collaboration modes, experimental features, MCP resource reads, tools, and related client events.
• The JSONL exec event processor path was removed in favor of the current output pipeline.

Upgrade notes

• If you script or document app-server daemon management, add update beside start / restart / stop; expect the managed daemon to restart and possibly interrupt active sessions.
• Drop any remaining exclude_slash_tmp settings from config—they no longer apply.
• Voice/realtime UI depends on the new WebRTC path; use /voice only where mic/audio device access is available.