A common setup now is Codex CLI for scaffolding, Claude Code for refactoring, and Cursor for IDE or cloud-agent workflows. This month all three shipped infra updates — on different dates, solving different problems.

Here is what changed, what can be wired through one endpoint, and what has to remain separate.

The Updates

Codex CLI — Windows Sandbox (May 13)

Codex now has real OS-level sandboxing on Windows. Dedicated user accounts ( CodexSandboxOffline / CodexSandboxOnline ), per-account firewall rules, helper binaries for privilege boundaries. Linux already had seccomp/bubblewrap; Windows finally caught up.

Previously, Windows sandbox attempts used synthetic SIDs and proxy-based network blocking — programs could bypass them by implementing their own networking stack.

Claude Code — Doubled Five-Hour Rate Limits (May 6)

Anthropic doubled Claude Code's five-hour rate limits for Pro, Max, Team, and seat-based Enterprise plans.…