Skip to content
DevAgentRadarDevAgentRadar
Sign in
Proposals/Replace codex --full-auto with --sandbox workspa
proposalteamP5Worth a lookOpenAI Codex CLI

Replace codex --full-auto with --sandbox workspace-write and enable --approve-for-me

Upgrade to Codex rust-v0.147.0, migrate off removed --full-auto, turn on --approve-for-me, and adopt portable Agent Plugins plus Cursor skill import for shared agent workflows.

Why this loop

Codex rust-v0.147.0 removes the deprecated codex exec --full-auto flag; --sandbox workspace-write is the replacement, so scripts and aliases that still pass --full-auto will fail after upgrade. The same release adds --approve-for-me for automatically reviewed approvals, portable Agent Plugins searchable across local, personal, workspace, and remote catalogs, and import of Cursor-managed skills with duplicate-free sync of imported Claude and Cursor conversations. Linux installs must use codex-package-<target> archives because redundant Linux bundle archives are no longer published. Unfamiliar local projects now require explicit trust, managed authentication restrictions are enforced before credentials are used, plugin isolation is hardened (network access denied when policy updates fail), and secrets plus complete bearer tokens are redacted from displayed commands and replayed history.

Proposed actions

  1. Upgrade Codex CLI to rust-v0.147.0 from https://github.com/openai/codex/releases/tag/rust-v0.147.0. On Linux install only codex-package-<target> archives; do not use the removed redundant Linux bundle archives.
  2. Run: rg -n --hidden -g '!/node_modules/' -g '!/.git/' -- '--full-auto' then replace every Codex use of --full-auto, including codex exec --full-auto, with --sandbox workspace-write and delete --full-auto.
  3. Add --approve-for-me to Codex CLI invocations used for unattended or pre-reviewed runs (shell aliases, agent wrappers, and CI codex / codex exec steps).
  4. Import Cursor-managed skills into Codex and re-synchronize already-imported Claude and Cursor conversations so updates apply without creating duplicate sessions.
  5. Install portable Agent Plugins and search local, personal, workspace, and remote plugin catalogs instead of copying plugin files. Expect explicit trust for unfamiliar local projects, managed-auth checks before credentials are used, and network deny if plugin policy updates fail.

Agent prompt

Paste into your agent or query via MCP (get_agent_prompt) — free, no extra AI cost

Codex / agent CLI task

DevAgentRadar → OpenAI Codex

Task: evaluate and optionally implement follow-ups from this coding-assistant release.

Context

Assistant: OpenAI Codex CLI Proposal: Replace codex --full-auto with --sandbox workspace-write and enable --approve-for-me Summary: Upgrade to Codex rust-v0.147.0, migrate off removed --full-auto, turn on --approve-for-me, and adopt portable Agent Plugins plus Cursor skill import for shared agent workflows. Primary source: https://github.com/openai/codex/releases/tag/rust-v0.147.0

Why it matters

Codex rust-v0.147.0 removes the deprecated codex exec --full-auto flag; --sandbox workspace-write is the replacement, so scripts and aliases that still pass --full-auto will fail after upgrade. The same release adds --approve-for-me for automatically reviewed approvals, portable Agent Plugins searchable across local, personal, workspace, and remote catalogs, and import of Cursor-managed skills with duplicate-free sync of imported Claude and Cursor conversations. Linux installs must use codex-package-<target> archives because redundant Linux bundle archives are no longer published. Unfamiliar local projects now require explicit trust, managed authentication restrictions are enforced before credentials are used, plugin isolation is hardened (network access denied when policy updates fail), and secrets plus complete bearer tokens are redacted from displayed commands and replayed history.

Suggested actions

  1. Upgrade Codex CLI to rust-v0.147.0 from https://github.com/openai/codex/releases/tag/rust-v0.147.0. On Linux install only codex-package-<target> archives; do not use the removed redundant Linux bundle archives.
  2. Run: rg -n --hidden -g '!/node_modules/' -g '!/.git/' -- '--full-auto' then replace every Codex use of --full-auto, including codex exec --full-auto, with --sandbox workspace-write and delete --full-auto.
  3. Add --approve-for-me to Codex CLI invocations used for unattended or pre-reviewed runs (shell aliases, agent wrappers, and CI codex / codex exec steps).
  4. Import Cursor-managed skills into Codex and re-synchronize already-imported Claude and Cursor conversations so updates apply without creating duplicate sessions.
  5. Install portable Agent Plugins and search local, personal, workspace, and remote plugin catalogs instead of copying plugin files. Expect explicit trust for unfamiliar local projects, managed-auth checks before credentials are used, and network deny if plugin policy updates fail.

Config surfaces this release may change

  • sandbox settings (high confidence) — check your repo before applying
  • MCP servers — check your repo before applying

After you finish

Do not report this as applied to DevAgentRadar. You cannot write the visitor's loop.

Tell the human: open https://devagentradar.com/proposals/openai-codex-rust-v0-147-0-replace-codex-full-auto-with-sandbox-workspac and mark Applied, Skipped, or Failed. Proposal id: 1b479e9c-64be-47d4-8404-600b3d6a6995

Deliverables:

  • Short impact assessment
  • Optional patch plan (files + steps)
  • Do not invent APIs not in the source notes
agentmcpmodelsecurityideRelease source ↗

Your loop

This browser · no sign-in · not shared as “you”

After you run the prompt

Only you can mark this. Agents cannot write your loop.

Your decision stays on this device. A public tally appears after a few votes.

Originating release signal

OpenAI Codex CLIrust-v0.147.0Aug 7, 2026

rust-v0.147.0 0.147.0

Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796) · Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950) · Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373) · Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623) · +155 more changes
Verified excerpt — the source's own words

New Features

  • Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)

  • Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)

  • Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373)

  • Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)

  • Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)

  • Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)

Bug Fixes

  • Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)

  • Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)

Excerpt ends here — this release continues at the source ↗.

Primary source ↗