Codex CLI 0.157.0-alpha.3

• [changed] Code-mode wait handling is reworked around an explicit wait spec instead of the previous wait-args shape.
• [new] Agent list and register flows gain typed request/response support (list args and a register response).
• [new] Follow-up task arguments are modeled for multi-step task continuation.
• [new] Recommended plugin install arguments are available for guided plugin setup.
• [new] API key turn-cost responses are represented in the data model for cost reporting.
• [changed] Auto-review and config-requirements TOML layouts are expanded with additional fields.
• [changed] Thread item entries carry a richer set of fields.
• [new] Client message chunk events support streamed client message delivery (replacing the prior ack-style client event).
• [new] A mitm_hook_denied notification surfaces when a MITM hook blocks an action.
• [changed] Response stream disconnect errors are clarified (stream disconnected vs. a generic connection failure).
• [new] Amazon Bedrock login can use access-key parameters alongside existing auth paths.
• [changed] MCP handshake rejection can report no compatible protocol version; MCP protocol version env handling is updated.
• [changed] Session identity env handling is tightened around CODEX_SESSION_ID.
• [new] A secrets request payload supports structured secret retrieval.
• [changed] WSL worktree path payloads better express include/glob-style worktree paths.
• [changed] Dynamic tool output can include input-audio content items; filesystem path enums distinguish glob patterns and project-roots special paths more clearly.
• [changed] Hook configuration recognizes Agent and MCP-tool handlers more cleanly.
• [changed] Tool-call summaries can represent wait-agent work; permissions snapshots expose a current snapshot variant.
• [removed] Older argument-info, request-user-input tool args, and several superseded enum variants/payloads from the prior alpha are dropped.

Under the hood

• Code-mode protocol description bits were removed in favor of the newer wait-spec and related tool wiring.
• Default config and related internal payloads were added to support the expanded requirements and review config surfaces.
• Process identity handling for Linux and macOS remote-control connection states was cleaned up.
• Credential output distinguishes STS authorization more explicitly.
• Trace/event payloads adjust inference-started and related tool-trace response shapes.
• Dependency hygiene: color_quant is no longer pulled in.
• Workspace lockfile and version metadata bump to 0.157.0-alpha.3.