Codex CLI 0.100.0: JS REPL & Sandbox Upgrades

TL;DR

• Experimental JavaScript REPL runtime with stateful tool calls now available
• Sandbox capabilities promoted to stable on Linux and Windows with configurable read access
• Websocket stability fixes and memory management slash commands added

New

• JavaScript REPL runtime — Feature-gated `js_repl` that persists state across tool calls with optional runtime path overrides.
• Multiple simultaneous rate limits — Protocol, backend client, and TUI status surfaces now support concurrent rate-limit handling.
• App-server websocket transport — Reintroduced with split inbound/outbound architecture and connection-aware thread resume subscriptions.
• Memory management commands — New TUI slash commands `/m_update` and `/m_drop` for memory control, plus expanded metrics plumbing.
• Apps SDK support — ChatGPT connector now handles Apps SDK apps.
• Sandbox promotion — Linux bubblewrap and Windows sandbox moved to Experimental status with new `ReadOnlyAccess` policy for granular read permissions.

Fixed

• Websocket incremental output duplication — Prevented duplicate appends after `response.completed` and treated `response.incomplete` as error path.
• Websocket session stability — Continued ping handling when idle and suppressed noisy first-retry errors during quick reconnects.
• Stale thread entries — Fixed by dropping missing rollout files and cleaning stale DB metadata during thread listing.
• Windows multi-line paste reliability — Increased paste burst timing tolerance in terminals, especially VS Code integrated terminal.
• Rate-limit inheritance bug — Fixed incorrect `limit_name` inheritance when merging partial rate-limit updates.
• Skill parse-error spam — Increased file-watcher debounce from 1s to 10s to reduce repeated errors during active edits.

Update via: cargo install codex-cli or check the GitHub release for platform-specific binaries.

Source: Codex