fix(codex): adapt upstream changes and explain sandbox tracking access