Codex CLI 0.133.0 fails to start with default permissions, but starts when explicitly passing `--sandbox workspace-write`.

What version of Codex CLI is running?

0.133.0

What subscription do you have?

Plus

Which model were you using?

gpt-5.5

What platform is your computer?

Linux 5.15.167.4-microsoft-standard-WSL2 x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

Ghostty / tmux

Codex doctor report

What issue are you seeing?

Description

Codex CLI 0.133.0 fails to start with default permissions, but starts when explicitly passing --sandbox workspace-write.

Environment

• OS: Linux
• Install path: /home/yunqing/.nvm/versions/node/v22.17.0/bin/codex
• Version: codex-cli 0.133.0
• CWD: /home/yunqing/projects/trade

Error

Running:

codex

fails with

Error: Failed to start a fresh session through the app server: thread/start failed during TUI bootstrap: thread/start failed: Invalid request: invalid type: string ":workspace", expected internally tagged enum PermissionProfileSelectionParams (code -32600)

Workaround

This works

codex --sandbox workspace-write

Downgrade also works

npm install -g @openai/codex@0.132.0

What steps can reproduce the bug?

Upgrade to codex 0.133.0 and run $ codex

What is the expected behavior?

Codex CLI should open without any error.

Additional information

_No response_