Codex CLI 0.131.0: TUI Overhaul, Plugin Marketplace, Python SDK

TL;DR

• TUI now shows blended token usage, permissions, approval modes, and responsive Markdown tables
• Python SDK renamed to openai-codex with pinned runtime types and concurrent turn routing
• Plugin marketplace CLI commands, version-aware sharing, and default-enabled plugin hooks
• Remote workflows gain daemon-managed control, runtime enable/disable APIs, and registry-backed environments
• New codex doctor command for support diagnostics across runtime, auth, network, and config

New

• TUI session controls — Display blended token counts, permissions, approval modes, effective workspace roots, and responsive Markdown tables in status line and summaries
• Unified @mentions picker — Search files, directories, plugins, and skills in one picker backed by app-server plugin metadata
• Plugin marketplace CLI — Version-aware plugin sharing, share checkout, clearer shared-workspace buckets, and default-enabled plugin hooks
• Remote control daemon APIs — codex remote-control now manages daemon lifecycle with runtime enable/disable, status reads, and registry-backed environments
• Python SDK overhaul — Moved to openai-codex package with pinned runtime-generated types, concurrent turn routing, approval modes, and full integration coverage
• codex doctor — New diagnostics command for runtime, auth, terminal, network, config, and local state troubleshooting

Fixed

• TUI rendering — URL wrapping, light-mode selection contrast, Shift+Enter in tmux, /review MCP startup status, /side Esc handling, network approval history text
• Windows sandbox — Hardened deny-read rules, scoped write roots, firewall policy validation, and PowerShell edge cases
• Permission escalation — Preserved managed read restrictions during escalation and cleaned up workspace-root permission profile resolution
• App-server startup — Safer SQLite data preservation, fail-closed when state cannot open, recovery paths, and softened optional metadata sync failures
• Git and auth reliability — Root worktree hooks consistency, repo hook/fsmonitor config ignored in helpers, local MCP OAuth callbacks bound, superseded login tokens revoked
• Remote and Windows cleanup — Longer exec-server transport timeouts, quieter taskkill cleanup, non-queued plugin reads

Breaking Changes

• Python SDK package renamed from codex to openai-codex — Update imports and install commands accordingly
• Plugin hooks now enabled by default — Review hook configurations if you have custom setups

Update via: brew upgrade codex or download from GitHub releases

Source: Codex