Codex CLI 0.138.0-alpha.7

User-facing

• [removed] The app subcommand, and its completions, help text, and flags (including --download-url).
• [changed] The sandbox subcommand dropped the --allow-unix-socket and --log-denials flags, with an updated description.
• [changed] The top-level help no longer lists app.

Internal / groundwork

• Removed the realtime-webrtc and uds crates.
• Added internal modules for WSL path handling, agent execution and residency control, atomic sync, multi-agent interrupts, and a reworked Linux sandbox (bundled bwrap launcher and exec utilities).
• Removed the old app command, the debug and desktop-app modules, the macOS config loader, the seatbelt sandbox, and the voice/realtime/audio modules.
• Expanded the internal data model with new types for proxy routing, collection and item search, sessions, secrets, shell info, and several notifications.
• Added environment variables including CODEX_BWRAP_SHA256, CODEX_CLOUD_TASKS_FORCE_INTERNAL, CODEX_SNAPSHOT_PROXY_OVERRIDE, and OPENAI_ORGANIZATION.
• Added the gpt-5.1 and gpt-5.1-codex model identifiers.
• Dependency bumps: anyhow 1.0.101→1.0.102, logos 0.12.1→0.15.1, starlark 0.13.0→0.14.2, tokio 1.49.0→1.52.3, v8 147.4.0→149.2.0, and others.

Upgrade notes

• Completions for sandbox and top-level help have changed; regenerate if vendored.