- [new] Added
--sandbox-state-json,--sandbox-state-readable-root, and--sandbox-state-disable-networkflags to thesandboxsubcommand for applying and modifying sandbox state directly from the CLI. - [new] Shell completion scripts for bash, fish, and zsh now include the new sandbox-state flags and their argument handling.
Under the hood
- Added the
SandboxStatedata model. - Introduced environment variables
CODEX_CLOUD_TASKS_FORCE_INTERNALandCODEX_MANAGED_BY_BUNO; removedCODEX_CLOUD_TASKS_FORCE_INTERNALSOCKS5. - Added supporting event types (
ClientMessageChunkevent,collab_waiting_end,exec_command_begin) and theDHEECDHERequestpayload. - Updated several internal enum variants to reflect refined account, client event, tool trace, and MCP server handling.
Upgrade notes
Shell completion users should regenerate completions to pick up the new sandbox flags.