[new]codex tcp-tunnel— Internal subcommand that forwards a local TCP socket through an HTTP/3 CONNECT proxy. Configure the proxy origin (--proxy-url), optional approved-origins file (--proxy-origins-file), CONNECT target (--target), and listen address (--listen-addr). Auth and CONNECT headers can be supplied on stdin (--auth-token-stdin,--auth-token-updates-stdin,--connect-headers-stdin), with the usual--config/--enable/--disableoverrides. Shell completions (bash, zsh, fish) include the new command.[new]/daemonslash command — New interactive slash command for daemon-related workflows.[changed]Remote client events — Remote session traffic now uses an ack-style client event path in place of the previous chunked client-message event.[new]TUI suspend failure signal — The process layer can surface atui_suspend_failednotification when suspending the terminal UI does not succeed.
Under the hood
- New
tcp-tunnelworkspace crate implements the tunnel path on QUIC/HTTP/3 (via Quinn and related crates) with connection bookkeeping support. - Config and API surface expands for context management, tool choice, follow-up task args, application requirements / apps list responses, and thread unarchive payloads.
- Model-provider workspace routing module removed; minor TUI analytics palette cleanup.
- Dependency lockfiles and version metadata bumped to
0.155.0-alpha.11.