Release 0.131.0-cometix · Haleclipse/codex

New Features

Richer TUI session controls: data-driven service-tier commands, blended token usage, permissions/approval mode display, responsive Markdown tables (openai#21745, openai#21906, openai#21991, openai#22052, openai#22612).
Unified @ mentions searching files, directories, plugins, skills in one picker (openai#19068, openai#22375).
Plugin marketplace CLI commands, version-aware sharing, share checkout (openai#21396, openai#22397, openai#22425, openai#22549).
Remote workflows: daemon-managed remote-control, runtime enable/disable APIs, registry-backed environments (openai#20718, openai#22218, openai#22562, openai#22578).
codex doctor for support-ready diagnostics (openai#22336).
Python SDK moved to openai-codex with concurrent turn routing (openai#21778-openai#22014).

Fixed URL wrapping, light-mode contrast, Shift+Enter in tmux, /review MCP status (openai#21760, openai#21950, openai#21943, openai#22710, openai#22229).
Hardened Windows sandbox: deny-read rules, scoped write roots, firewall policy (openai#18202, openai#21479, openai#22353, openai#22643).
Preserved managed read restrictions during permission escalation (openai#15977, openai#22624, openai#22683).
Safer app-server startup with SQLite preservation and recovery paths (openai#21831, openai#21847, openai#22580, openai#22734).
Git/auth reliability: root worktree hooks, local MCP OAuth, revoked superseded tokens (openai#21969, openai#22843, openai#22652).

Split ChatWidget, history_cell, composer into focused submodules (openai#21866, openai#22269, openai#22407, openai#22704).
Removed obsolete tool paths, feature flags, config gates, legacy hooks (openai#21651, openai#21805, openai#22173, openai#22711).
CI: exact PR-head checkout, unsigned macOS artifacts, signed macOS promotion (openai#21604, openai#22408, openai#22649, openai#22900).

history_cell.rs split into history_cell/ directory; created translation.rs submodule for AgentReasoningTranslationCell.
User message blank line background removed in new messages.rs.
Cxline data push (update_cxline_data, request_cxline_git_preview) moved to status_controls.rs.
Rate limit cxline_weekly_resets_at_ts added to rate_limits.rs.
Personality override, translation routing, cursor_pos, border lines, ❯ prompt re-applied to refactored submodules.
justfile fmt recipe stripped of Python SDK formatting.
Removed 13 upstream-only workflow files.