Codex CLI: Direct Install Script, Realtime Thread API & Security Hardening
CodexCodex CLI 0.106.0 ships a long-awaited direct install script for macOS and Linux, published as a GitHub release asset and eliminating the Rust toolchain requirement for new users. The release also expands the app-server v2 thread API with experimental realtime endpoints and a thread/unsubscribe flow, and promotes js_repl to /experimental status with improved Node compatibility. A security fix closes a zsh-fork shell execution path that could bypass sandbox filesystem restrictions.
Sources & Mentions
5 external resources covering this update
Simpler Installation
Codex CLI 0.106.0 introduces a direct install script for macOS and Linux, published as a GitHub release asset. This eliminates the Rust toolchain requirement for new users, significantly lowering the barrier to entry.
App-Server v2 Realtime Thread Endpoints
The release expands the app-server v2 thread API with experimental realtime endpoints and a thread/unsubscribe flow, enabling more responsive and flexible thread management.
js_repl Promotion to /experimental
The js_repl feature has been promoted to /experimental status with Node.js compatibility checks requiring a minimum of v22.22.0.
request_user_input in Default Mode
The request_user_input capability is now available in Default mode, improving the interactive experience.
gpt-5.3-codex Visibility
The gpt-5.3-codex model is now visible in the interface.
Security Fix
A security fix closes a zsh-fork shell execution path that could bypass sandbox filesystem restrictions.
Reliability Improvements
Several reliability improvements have been made including WebSocket retry logic, approximately 1M character input cap, TUI local file-link rendering, diff-based forgetting, and usage-aware memory selection.