Why

codex sandbox --permissions-profile is useful when running commands under a named permissions profile, but the long option is cumbersome for a debugging-oriented command. -p is already used for the config profile selector, so -P gives the permissions profile selector a compact, non-conflicting alias.

What Changed

• Added short = 'P' to the permissions_profile option for the macOS, Linux, and Windows sandbox command structs in codex-rs/cli/src/lib.rs.
• Added parser coverage for codex sandbox -P :workspace -- echo in codex-rs/cli/src/main.rs.

Verification

• just test -p codex-cli passed, including the new sandbox_parses_permissions_profile_short_alias parser test.