Codex CLI 0.155.0-alpha.1

• [new] Experimental voice support lands behind the /voice slash command, with realtime audio delivery in the TUI (including a voice strip and spoken-artifact history).
• [new] codex app-server daemon update updates the standalone installation and restarts the managed daemon (may interrupt in-flight work). Shell completions cover the new subcommand.
• [new] codex app-server --managed-daemon saves loaded threads when a managed daemon shuts down.
• [new] App-server and TUI paths for user verification, so identity checks can be requested and completed in-session.
• [new] Network proxy credential brokering and brokered tunnels, including environment snapshotting so proxied shells can restore original vs. brokered credentials safely.
• [new] Amazon Bedrock account support gains credential-export configuration for provider setup.
• [new] MCP client support for enterprise OAuth login and stricter tool-input handling.
• [new] Config key exclude_slash_tmp for controlling temporary slash-command paths.
• [new] Memory status / readiness surfaces on the app-server (query whether memory subsystems are ready and which versions are active).
• [new] Thread attachments in local thread storage, so threads can carry additional attached artifacts.
• [changed] Remote history compaction is reworked around a dedicated compact-remote-history path (replacing the previous compact-remote request helpers).
• [changed] Guardian gains review-session and input-budget machinery, with profile/enforcement context for guarded runs.
• [changed] Remote-control transport adds connection auth, controller logic, and persistence for managed remote-control sessions.
• [changed] Executed tool-call tracking keeps request metadata and seen IDs so duplicate or retried tool calls are handled more reliably.
• [changed] TUI additions for agents-overview actions, reasoning replay, computer-activity history cells, and terminal size monitoring.
• [removed] /sandbox-add-read-dir slash command.
• [removed] on-failure approval policy.
• [removed] gpt-5.4-mini as a built-in model identifier.
• [removed] Windows-specific sandbox crate (windows-sandbox-rs) from this build.

Under the hood

• New realtime-webrtc crate powers realtime WebRTC client/session messaging used by voice features.
• App-server daemon work includes manual update handling, thread recovery, and daemon snapshot request processors.
• Network-proxy connection lifecycle (listeners, scope, service) and a restructured credential-broker registry/matching/replacement stack replace the older per-provider broker modules.
• Shell-command snapshot capture (literals, credentials, sandbox integration) supports proxy and environment replay.
• Rollout writer locking moved into the rollout crate; thread-store attachments and runtime memory versioning landed in state.
• Protocol permissions gain Windows glob helpers; permissions and analytics/config TOML shapes expanded (e.g. richer NetworkProxyConfigToml, MemoriesToml, thread settings snapshots).
• Dependency updates include blake3, headers, and rand_regex.
• Build metadata is marked alpha (0.155.0-alpha.1).

Upgrade notes

• This is an alpha (0.155.0-alpha.1). Prefer it for testing; pin to 0.154.0 if you need the prior stable channel.
• codex app-server daemon update may interrupt active managed-daemon work while it restarts.
• Drop any workflows that relied on /sandbox-add-read-dir, the on-failure approval policy, or the gpt-5.4-mini model id.
• If you used Windows sandbox read-deny resolution via the old Windows sandbox integration, re-validate sandbox behavior on this build.