- [new]
codex sandbox uninstallremoves the legacy Windows sandbox’s machine-wide accounts and network rules. Bash, fish, and zsh completions include the subcommand. - [removed] The
exclude_slash_tmpconfiguration key is no longer recognized.
Under the hood
- Remote exec now backs off on reconnect and uses explicit noise-relay message framing in place of the previous relay protocol.
- Feedback can archive rollouts.
- TUI work for account status, transcript copy mode, a single-line textarea, and managed-worktree tools; the old projectless and agent-navigation paths are gone.
- App-server/protocol updates for thread attachments (add/list), command-execution events, and richer model-provider capability info.
- Encryption and localization libraries moved forward (
age/age-core0.12, Fluent and i18n-embed).
Upgrade notes
- On Windows, run
codex sandbox uninstallif you still have leftover machine-wide sandbox accounts or network rules from the legacy sandbox. - Drop
exclude_slash_tmpfrom config if you set it; it has no effect. - Refresh vendored shell completions so
sandbox uninstallcompletes.