Codex CLI 0.157.0-alpha.6

• [new] Gateway-oriented auth login path for account sign-in flows that go through the gateway.
• [new] Structured math rendering support in the TUI markdown pipeline, so math-heavy assistant output can be laid out more reliably.
• [new] exclude_slash_tmp configuration key for controlling whether slash-related temp paths are excluded.
• [changed] CI-related environment handling now centers on CODEX_CIBASH / CODEX_CIBASH_ENV instead of the older CODEX_CI name.
• [changed] Thread identity env var renamed from CODEX_THREAD_ID to CODEX_THREAD_IDT.
• [changed] MCP server status reporting carries a slightly richer status model.
• [changed] Chat turn runtime wiring in the TUI was refactored (previous turn-runtime module folded away) without changing the overall chat UX surface.
• [removed] Several older experimental / follow-up agent payload shapes and related cloud TOML / feature stubs were dropped as part of model cleanup.

Under the hood

• Login crate gains a dedicated gateway auth login module to keep gateway OAuth/cookie-style delivery paths separate from other account login variants.
• Markdown math rendering picks up a structured render path; dependency set adjusts with color_quant (useful for palette-sensitive rendering) and drops unused event-listener-strategy.
• Internal event and tool-trace payload naming was tightened (ack-style client events, disconnect and hook-handler variants, process-identity and permissions snapshot details).
• Rate-limit credit reset, user-input tool, and wait argument payloads were reshaped; unused default-config and older WSL worktree include payload names were consolidated.

Upgrade notes

• If you set CODEX_CI or CODEX_THREAD_ID in scripts or CI, switch to CODEX_CIBASH_ENV (under the CODEX_CIBASH group) and CODEX_THREAD_IDT.
• Review config if you care about slash temp path handling — exclude_slash_tmp is available in this build.
• No other migration steps expected for typical CLI usage on this alpha.