- [changed] Renamed the
--permissions-profile/-Pflag to--permission-profilefor thesandboxsubcommand (shell completions updated accordingly).
Under the hood
Several new CODEX_* environment variables were introduced to control permissions profiles, network sandboxing, home directory handling, and related execution behaviour. New internal subsystems were added for exec-server telemetry, resolved capability tracking, and MCP app caching. A number of supporting data-model types and event payloads were updated or replaced to accommodate these changes.
Upgrade notes
Scripts or aliases that pass --permissions-profile to codex sandbox should be updated to the new --permission-profile spelling.