Codex CLI 0.155.0-alpha.9

• [new] Session daemon recovery so interrupted or restarted sessions can be restored from a recovery snapshot.
• [new] Workspace-aware routing in login/auth for directing authentication by workspace.
• [new] Agent interrupt/close handling, including structured interrupted-turn state.
• [changed] MCP tool-call begin/end items and events carry a richer payload (additional fields on the wire).
• [new] Early hooks for apps/marketplace-style flows (app listing/UI metadata, raw marketplace manifest, recommended plugin install args).
• [new] Optional analytics configuration via TOML (AnalyticsConfigToml).
• [removed] The exclude_slash_tmp config key is no longer supported.
• [changed] Sandbox and session-related environment knobs: CODEX_SANDBOX_NETWORK_DISABLED is available; IDE/install/session/thread env names are normalized (CODEX_IDE_VSCODE, CODEX_INSTALL_DADB, CODEX_SESSION_IDS, CODEX_THREAD_ID).

Under the hood

• New first-party modules for daemon recovery and workspace routing in the auth manager.
• MCP tool-call event/item shapes were revised in place (field counts increased on begin/end/item types).
• Several internal request/notification types were dropped or replaced (including legacy managed-config and wait/stdin-style tool arg shapes), and a SecretsRequest payload was added.
• Client messaging events were tightened (chunked remote client-message path replaced with a simpler client-message event).
• Third-party stack picks up event-listener-strategy 0.5.4; lockfile/version metadata bumped to 0.155.0-alpha.9.

Upgrade notes

• Remove any exclude_slash_tmp entries from config; the key is gone and will not apply.
• If you set Codex env vars for IDE detection, install, session, or thread identity, switch to the normalized names above (CODEX_IDE_VSCODE, CODEX_INSTALL_DADB, CODEX_SESSION_IDS, CODEX_THREAD_ID) and drop the old spellings.
• Callers that parse MCP tool-call begin/end events should accept the expanded payloads.