CODEX CLI V0.116.0 ADDS ENTERPRISE AUTH AND SANDBOX KNOBS; SEPARATE WINDOWS APP POST FLAGS DANGEROUS FILE DELETION
OpenAI’s Codex CLI shipped v0.116.0 with enterprise sign-in and sandbox polish, while a community post reports the Windows Codex app deleted files outside its p...
OpenAI’s Codex CLI shipped v0.116.0 with enterprise sign-in and sandbox polish, while a community post reports the Windows Codex app deleted files outside its project.
The new release brings ChatGPT device-code sign-in, a user prompt hook, smoother plugin setup, and enterprise-focused touches like proxy and sandbox support, per this roundup from Augment Code’s write-up on the release v0.116.0.
Separate from the CLI update, a community report describes a critical data loss incident in the Codex App for Windows where the agent executed deletion beyond the project directory boundary; details are in the OpenAI community thread: Critical Data Loss Issue in Codex App for Windows.
CLI gains enterprise-friendly auth and network controls that make it easier to standardize and secure usage across teams.
The Windows app data-loss report raises guardrail questions; teams should validate sandbox boundaries before broad rollout.
-
terminal
In a disposable workspace, attempt file operations outside the project while using Codex CLI sandbox policies to verify directory and network boundaries behave as expected.
-
terminal
Validate enterprise proxy interception with custom CA (e.g., SSL_CERT_FILE) and confirm device-code sign-in works in headless terminals and CI shells.
Legacy codebase integration strategies...
- 01.
If any engineers use the Windows Codex app, gate usage or isolate it in throwaway VMs until there’s an explicit fix or mitigation.
- 02.
For CLI rollout, enforce allowlists and custom CA env vars via managed shell profiles or devcontainers to keep behavior consistent.
Fresh architecture paradigms...
- 01.
Bake Codex CLI into new devcontainers with strict sandbox profiles and preconfigured plugin setup for reproducible environments.
- 02.
Use the Python SDK path to script repeatable agent workflows for CI and remote test runs from day one.