Codex CLI 0.154.0-alpha.8

• [new] Shell snapshot support for capture, credentials handling, and sandbox integration, including snapshot-related configuration hooks for POSIX startup.
• [new] Exec path can emit events via a JSONL event processor for machine-readable run output.
• [new] TUI reasoning replay support for revisiting prior reasoning turns in the app UI.
• [new] RMCP client enterprise OAuth login and EMA identity handling for enterprise-oriented auth flows.
• [new] Network proxy connection lifecycle controls (scope, service, and listeners) for brokered proxy connections and credentials.
• [new] Windows path glob helpers under protocol permissions for permission matching on Windows.
• [new] User verification cancel request support, plus an ack-style client result event in the protocol surface.
• [new] mitm_hook_denied notification when a MITM-style hook blocks an action.
• [changed] Thread settings snapshots carry a richer settings payload than before.
• [changed] Hook configuration distinguishes agent vs command hook handlers more clearly.
• [changed] Login account parameters split more cleanly between API key and ChatGPT login paths.
• [changed] MCP protocol version gating updated toward the 2025 protocol version line.
• [removed] The standalone windows-sandbox-rs crate (including its deny-read resolver) is no longer part of the workspace.
• [removed] The o1 model identifier is dropped from the built-in model list.

Under the hood

• Exec-server gains a relay protobuf module (codex.exec_server.relay.v1) to support exec-server relay traffic.
• Models cache entries and several environment/plugin/skills/agent registration response types were reshaped; related account, marketplace, and experimental-feature payloads were trimmed or replaced.
• Error and handshake reject reasons were adjusted (including clearer HTTP connection-failure signaling).
• OpenTelemetry exporter configuration continues to evolve around OTLP HTTP with AWS auth refresh/timeout options.
• CA certificate and permission-related environment knobs were renamed/cleaned up; snapshot and network-proxy credential flags were added for the new subsystems above.
• Workspace crate count drops with the Windows sandbox crate removal; version metadata bumps to 0.154.0-alpha.8.

Upgrade notes

• If you still pointed tooling at the removed windows-sandbox-rs integration or at the o1 model id, switch to the current sandbox/permission paths and a supported model name.
• Callers that parsed prior thread-settings snapshots, models cache entries, or login/verification payloads should recheck field shapes before relying on them in automation.
• Teams using network proxy or shell snapshot features should review the new snapshot and proxy-related environment configuration when enabling those paths.