diff --git a/apps/docs/content/docs/terminal-presets.mdx b/apps/docs/content/docs/terminal-presets.mdx
index 6078dbcac80..6f98199c1ca 100644
--- a/apps/docs/content/docs/terminal-presets.mdx
+++ b/apps/docs/content/docs/terminal-presets.mdx
@@ -45,7 +45,7 @@ Pre-configured presets for popular AI agents. Defaults are safe-by-default — a
 
 - **amp** - `amp` (built-in permission rules auto-deny destructive ops)
 - **claude** - `claude --permission-mode acceptEdits`
-- **codex** - `codex ... --full-auto` (workspace-sandboxed)
+- **codex** - `codex ... --sandbox workspace-write --ask-for-approval never` (workspace-sandboxed)
 - **gemini** - `gemini --approval-mode=auto_edit`
 - **copilot** - `copilot --allow-tool=write`
 - **cursor-agent** - `cursor-agent` (prompts for every action)
diff --git a/packages/host-service/src/trpc/router/settings/agent-presets.ts b/packages/host-service/src/trpc/router/settings/agent-presets.ts
index 7fec9751ef8..2ad480ced1c 100644
--- a/packages/host-service/src/trpc/router/settings/agent-presets.ts
+++ b/packages/host-service/src/trpc/router/settings/agent-presets.ts
@@ -64,7 +64,10 @@ export const AGENT_PRESETS = [
 			'model_reasoning_summary="detailed"',
 			"-c",
 			"model_supports_reasoning_summaries=true",
-			"--full-auto",
+			"--sandbox",
+			"workspace-write",
+			"--ask-for-approval",
+			"never",
 		],
 		promptTransport: "argv",
 		promptArgs: ["--"],
diff --git a/packages/shared/src/agent-command.test.ts b/packages/shared/src/agent-command.test.ts
index 6796358105d..78d01bb48aa 100644
--- a/packages/shared/src/agent-command.test.ts
+++ b/packages/shared/src/agent-command.test.ts
@@ -13,7 +13,7 @@ describe("buildAgentPromptCommand", () => {
 		});
 
 		expect(command).toContain(
-			"model_supports_reasoning_summaries=true --full-auto -- \"$(cat <<'SUPERSET_PROMPT_12345678'",
+			"model_supports_reasoning_summaries=true --sandbox workspace-write --ask-for-approval never -- \"$(cat <<'SUPERSET_PROMPT_12345678'",
 		);
 		expect(command).toContain("- Only modified file: runtime.ts");
 	});
diff --git a/packages/shared/src/agent-launch-request.test.ts b/packages/shared/src/agent-launch-request.test.ts
index 9264b27fc46..4a1212088db 100644
--- a/packages/shared/src/agent-launch-request.test.ts
+++ b/packages/shared/src/agent-launch-request.test.ts
@@ -46,7 +46,7 @@ describe("buildPromptAgentLaunchRequest", () => {
 			agentType: "codex",
 			terminal: {
 				command:
-					'codex -c model_reasoning_effort="high" -c model_reasoning_summary="detailed" -c model_supports_reasoning_summaries=true --full-auto',
+					'codex -c model_reasoning_effort="high" -c model_reasoning_summary="detailed" -c model_supports_reasoning_summaries=true --sandbox workspace-write --ask-for-approval never',
 			},
 		});
 	});
diff --git a/packages/shared/src/builtin-terminal-agents.ts b/packages/shared/src/builtin-terminal-agents.ts
index 2e748878355..0e7f27127d4 100644
--- a/packages/shared/src/builtin-terminal-agents.ts
+++ b/packages/shared/src/builtin-terminal-agents.ts
@@ -80,9 +80,9 @@ export const BUILTIN_TERMINAL_AGENTS = [
 		description:
 			"OpenAI's coding agent for reading, modifying, and running code across tasks.",
 		command:
-			'codex -c model_reasoning_effort="high" -c model_reasoning_summary="detailed" -c model_supports_reasoning_summaries=true --full-auto',
+			'codex -c model_reasoning_effort="high" -c model_reasoning_summary="detailed" -c model_supports_reasoning_summaries=true --sandbox workspace-write --ask-for-approval never',
 		promptCommand:
-			'codex -c model_reasoning_effort="high" -c model_reasoning_summary="detailed" -c model_supports_reasoning_summaries=true --full-auto --',
+			'codex -c model_reasoning_effort="high" -c model_reasoning_summary="detailed" -c model_supports_reasoning_summaries=true --sandbox workspace-write --ask-for-approval never --',
 		includeInDefaultTerminalPresets: true,
 	}),
 	createBuiltinTerminalAgent({