[new]Thread attachments: app-server support to add, list, and remove attachments on a thread, with updated notifications when attachments change.[new]Thread queue change notifications so clients can react when a thread’s queue state updates.[new]Thread unarchive response handling for restoring archived threads.[new]Agent control payloads for interrupting an agent, waiting, and stop settings.[new]Tool request flow can return a user-input response payload when the tool needs input.[new]Additional requirements/config shapes for application requirements, in-app browser requirements, context management, and cloud-managed requirements bundles.[new]Capability roots discovery response and environment-registry harness key validation response types.[new]MCP server migration model support and JWKS (JwkSet) handling for key material.[changed]Collaboration-mode and hook-handler configuration enums were reshaped (including agent-hooks handling and hook credential/auth method options).[changed]Review targeting and several trace/client event variants were adjusted (including inference-started trace payload coverage).[removed]exclude_slash_tmpconfig key.[removed]Computer-use macOS config/requirements types.[removed]External agent config detection response, apps listing response, and remote-control pairing start response types.[removed]Thread background terminal and thread usage query response types, plus turn steer response.[removed]Retired env surface related toOPENAI_AHand the priorCODEX_PERMISSION/ exec-server stdin-close exit flag naming (permission-related env naming was refreshed).
Under the hood
- New app-server request processor path for thread attachments, with matching client request variants and typed params/notifications.
- Auth-related network surface expanded (including an
auth.ope.openai.comendpoint entry) alongside JWKS support. - Managed-config payload modeling broadened for MDM/legacy/file/cloud-managed config combinations.
- Workspace lockfile and alpha version metadata bumped to
0.155.0-alpha.2.
Upgrade notes
- If you still set
exclude_slash_tmp, remove it; that config key is no longer recognized. - Re-check permission-related and exec-server env configuration after upgrade — several
CODEX_*/OPENAI_*names in this area were removed or renamed in this build. - Integrators depending on the removed response types (computer-use macOS requirements, remote-control pairing start, thread usage query, turn steer, background terminal, external agent detect, get-apps) should move to the replacement APIs in this alpha.