Codex CLI 0.113.0: Permissions, Plugins, Streaming
Codex CLI 0.113.0 adds runtime permission requests, plugin marketplace discovery, streaming command execution with TTY support, and granular sandbox policies.
TL;DR
- Runtime permission requests with new TUI rendering for approval flows
- Plugin marketplace discovery, install-time auth checks, and uninstall endpoint
- Streaming stdin/stdout/stderr with TTY/PTY support for command execution
- Split filesystem/network sandbox policies for granular permission control
New
- Runtime permission requests — Turns can now request additional permissions at runtime with dedicated TUI rendering for approval calls.
- Plugin marketplace — Curated plugin discovery, richer metadata in
plugin/list, install-time auth checks, and newplugin/uninstallendpoint. - Streaming command execution — App-server now supports streaming stdin/stdout/stderr plus TTY/PTY support, with
execwired to the new in-process app server path. - Web search configuration — Full tool configuration support (filters, location) instead of just on/off toggle.
- Permission profiles — New config language for permission profiles with split filesystem/network sandbox policy plumbing for precise control.
- Image generation output — Generated images now save to the current working directory by default.
Fixed
- Auth error handling for cloud requirements — 401 errors now trigger normal auth-recovery messaging instead of generic workspace-config failures.
- Trust bootstrap — Fixed git command execution before project trust is established.
- Windows execution edge cases — Corrected PTY
TerminateProcesssuccess handling and stricter sandbox startup cwd validation. - Plugin startup behavior — Curated plugins now load in TUI sessions as expected.
- Network proxy policy parsing — Global wildcard (
*) domains now rejected while preserving scoped wildcard support. - macOS automation permissions — Approval payload now accepts both supported input shapes for compatibility.
Documentation
- Clarified
js_replguidance for persistent bindings and redeclaration recovery to reduce avoidable REPL errors.
Chores
- Log storage optimization — Moved logs to dedicated SQLite DB with timestamps, data pruning, and tightened retention/row limits.
- Windows distribution — CLI releases now published to winget for easier updates.
Update via: npm install -g @openai/codex@0.113.0 or check the full release on GitHub.
Source: Codex