Release v2.16.0 - Codex Agent Driver · sequant-io/sequant

What's Changed

Codex is a selectable agent driver: --agent codex / run.agent: "codex". CodexDriver runs codex exec --json as a subprocess with an SDK-typed event parser and a three-level outcome evaluator; new run.codex settings for model, sandbox mode, network access and extra args (#497, #1062)
sequant init --agent codex provisions the .agents/skills symlink, a .codex/config.toml hook wrapper around the existing guard hooks, and matching doctor checks (#497, #1066, #1072)
Codex phases can commit their own work and reach GitHub: the git dir is passed as a writable root and workspace-write phases get network access, with run.codex.networkAccess: false to seal them off (#1076, #1079)
/qa treats an unchecked PR test-plan box that names a command as unexecuted declared evidence (#1065)

One declared ownership rule (sequant-owned / user-owned / merge) now governs every file init, sync and update write, with a two-sided gate test; importing the settings module no longer reads package.json as a side effect (#1090)
The plugin's MCP server no longer dies with CONNECTION_CLOSED when the open project has an older sequant in node_modules; doctor gains a local-shadow check (#1084)
sequant init on an initialized repo preserves .sequant/settings.json, including its JSONC comments; --force remains the escape hatch (#1071, #1100)
doctor's codex/opencode CLI probes and gh auth status are bounded by timeouts and can no longer hang the command (#1075, #1099)
# characters in stdin-heredoc commit subjects survive conventional-commit validation (#1064)

The env-dump guard allows anchored env | grep; red tests outside the diff need an issue number (#1101)
Pinned doctor's latest-version lookup and moved two cold-import costs off the 5s unit budget (#1063)

Full Changelog: v2.15.1...v2.16.0