Codex CLI 0.131.0 ဒေါင်းလုဒ်

New Features
- The TUI now offers richer session controls and display: data-driven service-tier commands, blended token usage, permissions/approval mode, effective workspace roots, and responsive Markdown tables. (#21745, #21906, #21991, #21669, #21677, #22052, #22612)
- @ mentions now search files, directories, plugins, and skills in one picker, backed by app-server plugin metadata. (#19068, #22375)
- Plugin workflows gained marketplace CLI commands, version-aware sharing, share checkout, clearer shared-workspace buckets, and default-enabled plugin hooks. (#21396, #22397, #22425, #22435, #22549)
- Remote workflows now support daemon-managed codex remote-control, runtime enable/disable APIs, status reads, and registry-backed/configured remote environments. (#20718, #22218, #22562, #22578, #22877, #20667, #21323)
- The Python SDK moved to openai-codex / openai_codex, with pinned runtime-generated types, concurrent turn routing, approval modes, and integration coverage. (#21778, #21891, #21893, #21896, #21905, #21910, #22014)
- Added codex doctor for support-ready diagnostics across runtime, auth, terminal, network, config, and local state. (#22336)
Bug Fixes
- Fixed several TUI interaction and rendering issues, including URL wrapping, light-mode selection contrast, Shift+Enter in tmux, /review MCP startup status, /side Esc handling, and network approval history text. (#21760, #21950, #21943, #21624, #22710, #22229)
- Hardened Windows sandbox behavior around deny-read rules, scoped write roots, ineffective firewall policy, and PowerShell edge cases. (#18202, #21479, #22353, #21400, #22643)
- Preserved managed read restrictions during permission escalation and cleaned up workspace-root permission profile resolution. (#15977, #22624, #22683)
- Made app-server and local state startup safer by preserving SQLite data, failing closed when state cannot open, adding recovery paths, and softening optional metadata sync failures. (#21831, #21847, #22580, #22734, #22899)
- Improved Git and auth reliability by using root worktree hooks consistently, ignoring repo hook/fsmonitor config in helper commands, binding local MCP OAuth callbacks, and revoking superseded login tokens. (#21969, #22843, #22652, #20237, #21747)
- Reduced remote and Windows cleanup friction with longer exec-server transport timeouts, quieter taskkill cleanup, and non-queued plugin reads. (#21825, #21759, #22058, #22703)
Documentation
- Clarified that general Codex product docs should not be added to this repo, while app-server API docs remain in scope. (#21772)
- Updated plugin-creator guidance for the simplified local plugin handoff links. (#22240)
- Documented new app-server/API contracts for remote environments and the desktop-owned config namespace. (#21323, #22584)
Chores
- Improved CI and release reliability across Rust CI, exact PR-head checkout, Windows Bazel sharding, unsigned macOS artifacts, and signed macOS promotion. (#21604, #21628, #21835, #22408, #22559, #22649, #22737, #22788, #22900)
- Split large TUI ChatWidget, history, and composer code into focused modules without intended behavior changes. (#21866, #22269, #22407, #22433, #22518, #22537, #22704, #22581, #22656)
- Continued extracting extension and tool internals, including shared tool contracts plus guardian and memory extension plumbing. (#21736, #21737, #21738, #22138, #22147, #22216, #22258, #22344, #22476, #22480, #22485, #22498)
- Removed obsolete tool paths, feature flags, config gates, and legacy hooks as defaults stabilized. (#21651, #21805, #22173, #22246, #22565, #22711, #22717, #22724, #22730)
Changelog
Full Changelog: rust-v0.130.0...rust-v0.131.0
- #21550 [codex] make shutdown pending-touch test deterministic @jif-oai
- #21697 Allow string service tiers in config TOML @aibrahim-oai
- #21687 [codex] Enable apply_patch freeform by default @aibrahim-oai
- #19896 Update models.json @github-actions
- #21669 Display blended token count in status line @etraut-openai
- #21677 Show permissions and approval mode in the TUI status line @etraut-openai
- #21757 api: send hyphenated session and thread headers @jif-oai
- #21763 nit: comment @jif-oai
- #21749 codex-otel: validate provider span attributes consistently @bbrown-oai
- #21767 chore: thread tui @jif-oai
- #21443 [sandboxing] Remove Darwin user cache write from Seatbelt network policy @evawong-oai
- #21604 Fix rust-ci-full failures due to missing bwrap @zanie-oai
- #21628 Use CARGO_NET_GIT_FETCH_WITH_CLI in rust-ci-full for more reliable git fetches @zanie-oai
- #21745 [codex] Generalize service tier slash commands @aibrahim-oai
- #21772 Clarify docs folder guidance in AGENTS.md @etraut-openai
- #21622 [codex] Address some more GHA hygiene issues @ww-oai
- #21662 feat: Use installation ID in remote enrollments @ddr-oai
- #20667 Load configured environments from CODEX_HOME @starr-openai
- #21776 Update models.json @github-actions
- #21787 Support resource binaries in Python runtime staging @aibrahim-oai
- #21784 Publish Python runtime wheels on release @aibrahim-oai
- #21601 Emit accepted line fingerprint analytics @alexsong-oai
- #21465 Remove ToolName display helper @pakrym-oai
- #20619 [codex] request desktop attestation from app @jiamingz42
- #21810 Revert "Publish Python runtime wheels on release" @aibrahim-oai
- #21651 [codex] Delete function-style apply_patch @pakrym-oai
- #21805 [codex] Remove legacy after tool use hooks @pakrym-oai
- #21616 Enable --deny-warnings for cargo shear @charliemarsh-oai
- #21497 Using cached connector directory for discoverable tools list @mzeng-openai
- #21835 ci: check out PR head commits in workflows @bolinfest
- #21794 Make environment provider snapshots path-free @starr-openai
- #21831 app-server: support daemon-safe restart handling @euroelessar
- #20293 Support openai library tool @lt-oai
- #21323 [codex] support executor registry remote environments @miz-openai
- #21825 Increase exec-server environment transport timeouts @starr-openai
- #20718 [daemon] Add app-server daemon lifecycle management @euroelessar
- #21840 feat: add Bedrock Mantle client agent header @celia-oai
- #21847 sqlite: no more destructive version bumps @owenlin0
- #21652 Reapply "Move skills watcher to app-server" @pakrym-oai
- #21290 Move file watcher out of core @pakrym-oai
- #21867 feat: Add role-aware plugin share context APIs @xl-openai
- #21875 [codex] compact network context rendering @sayan-oai
- #21778 Route Python SDK turn notifications by ID @aibrahim-oai
- #21906 [codex] Lowercase TUI service tier commands @aibrahim-oai
- #21819 tests: cover sandbox link write behavior @bolinfest
- #21760 fix(tui): preserve wrapped prose beside URLs @fcoury-oai
- #21950 fix(tui): improve light-mode selection contrast @fcoury-oai
- #21755 Improve hooks trust flow in TUI @abhinav-oai
- #21870 Avoid blocking TUI on agent metadata hydration @etraut-openai
- #21866 Split ChatWidget state into focused modules @etraut-openai
- #21991 Persist 'priority' service tier as fast in config @aibrahim-oai
- #21943 fix(tui): preserve Shift+Enter in tmux csi-u panes @fcoury-oai
- #21759 fix(tui): suppress taskkill output for MCP teardown on Windows @fcoury-oai
- #22039 Deduplicate issue digest interactions by user @etraut-openai
- #22052 feat(tui): render responsive Markdown tables in TUI @fcoury-oai
- #20825 Read cached metadata for installed Git plugins @xli-oai
- #21736 extension: add initial typed extension API @jif-oai
- #21737 extension: wire extension registries into sessions @jif-oai
- #21738 extension: move git attribution into an extension @jif-oai
- #22138 refactor: extract executable tool contracts into codex-tool-api @jif-oai
- #22140 feat: drop CodexExtension @jif-oai
- #22143 [codex] default unknown contributed tools to mutating @jif-oai
- #22147 feat: wire extension tool bundles into core @jif-oai
- #22163 feat: move extensions tool @jif-oai
- #22113 Add x-codex-ws-stream-request-start-ms @andmis
- #21860 Persist /goal commands in history @etraut-openai
- #22141 [codex] Harden overflow auto-compaction recovery @aibrahim-oai
- #22170 Revert "[codex] Harden overflow auto-compaction recovery" @aibrahim-oai
- #22106 Fix side conversation config inheritance @etraut-openai
- #22045 Improve goal continuation based on feedback @etraut-openai
- #21981 Use goal preview metadata for goal-first threads @etraut-openai
- #21843 app-server: remove TCP websocket listener @euroelessar
- #22173 chore: drop built-in MCPs @jif-oai
- #21954 Fix goal update and add /goal edit command in TUI @etraut-openai
- #22110 Make auto-review denial short-circuit use a rolling review window @won-openai
- #21431 [codex-analytics] add turn tool counts to turn events @rhan-oai
- #22154 Add process-scoped SQLite telemetry @jif-oai
- #19068 Unified mentions in TUI @canvrno-oai
- #20305 fix(exec-policy) use is_known_safe_command less @dylan-hurd-oai
- #22058 fix(exec-server): suppress Windows taskkill output @fcoury-oai
- #22178 fix(app-server): thread history redaction for remote clients @owenlin0
- #15977 fix(permissions): preserve managed deny-read during escalation @viyatb-oai
- #21061 feat(connectors): support managed app tool approval requirements @viyatb-oai
- #22188 [elicitation] Advertise new url elicitation capability when auth_elicitation is enabled. @mzeng-openai
- #22192 config: accept minus in TUI keymap config @fcoury-oai
- #21853 daemon: refresh updater after validated binary rollout @euroelessar
- #21747 [login] revoke superseded auth tokens on relogin @cooper-oai
- #20147 feat: add network proxy feature flag @viyatb-oai
- #21891 [1/8] Pin Python SDK runtime dependency @aibrahim-oai
- #21893 [2/8] Generate Python SDK types from pinned runtime @aibrahim-oai
- #21895 [3/8] Run Python SDK tests in CI @aibrahim-oai
- #21896 [4/8] Define Python SDK public API surface @aibrahim-oai
- #21905 [5/8] Rename Python SDK package to openai-codex @aibrahim-oai
- #21910 [6/8] Add high-level Python SDK approval mode @aibrahim-oai