A common setup now is Codex CLI for scaffolding, Claude Code for refactoring, and Cursor for IDE or cloud-agent workflows. This month all three shipped infra updates — on different dates, solving different problems. Here is what changed, what can be wired through one endpoint, and what has to remain separate. The Updates Codex CLI — Windows Sandbox (May 13) Codex now has real OS-level sandboxing on Windows. Dedicated user accounts ( CodexSandboxOffline / CodexSandboxOnline ), per-account firewall rules, helper binaries for privilege boundaries. Linux already had seccomp/bubblewrap; Windows finally caught up. Previously, Windows sandbox attempts used synthetic SIDs and proxy-based network blocking — programs could bypass them by implementing their own networking stack. Claude Code — Doubled Five-Hour Rate Limits (May 6) Anthropic doubled Claude Code's five-hour rate limits for Pro, Max, Team, and seat-based Enterprise plans. Also removed the peak hours limit reduction for Pro and Max.…