3521 Commits

This Branch

This Branch

All Branches

• feat: retain NetworkProxy, when appropriate (#11207)

  As of this PR, `SessionServices` retains a
  `Option<StartedNetworkProxy>`, if appropriate.
  
  Now the `network` field on `Config` is `Option<NetworkProxySpec>`
  instead of `Option<NetworkProxy>`.
  
  Over in `Session::new()`, we invoke `NetworkProxySpec::start_proxy()` to
  create the `StartedNetworkProxy`, which is a new struct that retains the
  `NetworkProxy` as well as the `NetworkProxyHandle`. (Note that `Drop` is
  implemented for `NetworkProxyHandle` to ensure the proxies are shutdown
  when it is dropped.)
  
  The `NetworkProxy` from the `StartedNetworkProxy` is threaded through to
  the appropriate places.
  
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/11207).
  * #11285
  * __->__ #11207

  Michael Bolin · 2026-02-10 02:09:23 -08:00
  44ebf4588f
• chore: put crypto provider logic in a shared crate (#11294)

  Ensures a process-wide rustls crypto provider is installed.
  
  Both the `codex-network-proxy` and `codex-api` crates need this.

  Michael Bolin · 2026-02-10 01:04:31 -08:00
  8e240a13be
• feat: support configurable metric_exporter (#10940)
  alexsong-oai · 2026-02-10 08:14:28 +00:00
  9fded117ac
• feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

  ## Summary
  - expand proxy env injection to cover common tool env vars
  (`HTTP_PROXY`/`HTTPS_PROXY`/`ALL_PROXY`/`NO_PROXY` families +
  tool-specific variants)
  - harden macOS Seatbelt network policy generation to route through
  inferred loopback proxy endpoints and fail closed when proxy env is
  malformed
  - thread proxy-aware Linux sandbox flags and add minimal bwrap netns
  isolation hook for restricted non-proxy runs
  - add/refresh tests for proxy env wiring, Seatbelt policy generation,
  and Linux sandbox argument wiring

  viyatb-oai · 2026-02-10 07:44:21 +00:00
  3391e5ea86
• chore(tui) cleanup /approvals (#10215)

  ## Summary
  Consolidate on the new `/permissions` flow
  
  ## Testing
  - [x] updated snapshots

  Dylan Hurd · 2026-02-09 23:24:06 -08:00
  b61ea47e83
• feat: add SkillPolicy to skill metadata and support allow_implicit_invocation (#11244)

  Tested by setting the policy in agents/openai.yaml to true, false, and
  leaving it unset (default).
  ```
  policy:
    allow_implicit_invocation: false
  ```
  <img width="847" height="289" alt="Screenshot 2026-02-09 at 3 42 41 PM"
  src="https://github.com/user-attachments/assets/d3476264-3355-47cf-894a-4ffba53e3481"
  />

  alexsong-oai · 2026-02-09 23:13:27 -08:00
  91704c5672
• [apps] Add thread_id param to optionally load thread config for apps feature check. (#11279)

  - [x] Add thread_id param to optionally load thread config for apps
  feature check

  Matthew Zeng · 2026-02-09 23:10:26 -08:00
  005e040f97
• feat: reserve loopback ephemeral listeners for managed proxy (#11269)

  Codex may run many per-thread proxy instances, so hardcoded proxy ports
  are brittle and conflict-prone. The previous "ephemeral" approach still
  had a race: `build()` read `local_addr()` from temporary listeners and
  dropped them before `run()` rebound the ports. That left a
  [TOCTOU](https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use)
  window where the OS (or another process) could reuse the same port,
  causing intermittent `EADDRINUSE` and partial proxy startup.
  
  Change the managed proxy path to reserve real listener sockets up front
  and keep them alive until startup:
  
  - add `ReservedListeners` on `NetworkProxy` to hold HTTP/SOCKS/admin std
  listeners allocated during `build()`
  - in managed mode, bind `127.0.0.1:0` for each listener and carry those
  bound sockets into `run()` instead of rebinding by address later
  - add `run_*_with_std_listener` entry points for HTTP, SOCKS5, and admin
  servers so `run()` can start services from already-reserved sockets
  - keep static/configured ports only when `managed_by_codex(false)`,
  including explicit `socks_addr` override support
  - remove fallback synthetic port allocation and add tests for managed
  ephemeral loopback binding and unmanaged configured-port behavior
  
  This makes managed startup deterministic, avoids port collisions, and
  preserves the intended distinction between Codex-managed ephemeral ports
  and externally managed fixed ports.

  Michael Bolin · 2026-02-10 06:11:02 +00:00
  503186b31f
• Disable dynamic model refresh for custom model providers (#11239)

  The dynamic model refresh feature (`https://api.openai.com/v1/models`
  endpoint) is currently gated on a runtime check for an auth method other
  than API Key. It should be gated on a check specifically for ChatGPT
  Auth because some custom model providers (e.g. for local models) use no
  auth mechanism. A call to `self.auth_manager.auth_mode()` will return
  `None` in this case.
  
  Addresses #11213

  Eric Traut · 2026-02-09 21:36:09 -08:00
  bb974c78de
• chore(deps): bump regex from 1.12.2 to 1.12.3 in /codex-rs (#11138)

  Bumps [regex](https://github.com/rust-lang/regex) from 1.12.2 to 1.12.3.
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/rust-lang/regex/blob/master/CHANGELOG.md">regex's
  changelog</a>.</em></p>
  <blockquote>
  <h1>1.12.3 (2025-02-03)</h1>
  <p>This release excludes some unnecessary things from the archive
  published to
  crates.io. Specifically, fuzzing data and various shell scripts are now
  excluded. If you run into problems, please file an issue.</p>
  <p>Improvements:</p>
  <ul>
  <li><a
  href="https://redirect.github.com/rust-lang/regex/pull/1319">#1319</a>:
  Switch from a Cargo <code>exclude</code> list to an <code>include</code>
  list, and exclude some
  unnecessary stuff.</li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/rust-lang/regex/commit/b028e4f40eac8959d05e82abf8404906b1c565c0"><code>b028e4f</code></a>
  1.12.3</li>
  <li><a
  href="https://github.com/rust-lang/regex/commit/5e195de266e203441b2c8001d6ebefab1161a59e"><code>5e195de</code></a>
  regex-automata-0.4.14</li>
  <li><a
  href="https://github.com/rust-lang/regex/commit/a3433f691863d80300dfd6a52e332cb5a568e895"><code>a3433f6</code></a>
  regex-syntax-0.8.9</li>
  <li><a
  href="https://github.com/rust-lang/regex/commit/0c07fae444adf0802d84455e689f1143d2dd7790"><code>0c07fae</code></a>
  regex-lite-0.1.9</li>
  <li><a
  href="https://github.com/rust-lang/regex/commit/6a810068f030c023a12c93ccae49bc5fd907c4f6"><code>6a81006</code></a>
  cargo: exclude development scripts and fuzzing data</li>
  <li><a
  href="https://github.com/rust-lang/regex/commit/4733e28ba4f281f643ce93e4089eccbb9a9d5a5a"><code>4733e28</code></a>
  automata: fix <code>onepass::DFA::try_search_slots</code> panic when too
  many slots are ...</li>
  <li>See full diff in <a
  href="https://github.com/rust-lang/regex/compare/1.12.2...1.12.3">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=regex&package-manager=cargo&previous-version=1.12.2&new-version=1.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2026-02-09 21:34:22 -08:00
  c0994b363d
• chore(deps): bump anyhow from 1.0.100 to 1.0.101 in /codex-rs (#11139)

  Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.100 to
  1.0.101.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/dtolnay/anyhow/releases">anyhow's
  releases</a>.</em></p>
  <blockquote>
  <h2>1.0.101</h2>
  <ul>
  <li>Add #[inline] to anyhow::Ok helper (<a
  href="https://redirect.github.com/dtolnay/anyhow/issues/437">#437</a>,
  thanks <a
  href="https://github.com/Ibitier"><code>@​Ibitier</code></a>)</li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/80bfe291b16071c70f141e90e67e7032d966826b"><code>80bfe29</code></a>
  Release 1.0.101</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/dff8c432f95095cac19aa446da5047880b8ebdf3"><code>dff8c43</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/anyhow/issues/437">#437</a>
  from Ibitier/inline-ok-helper</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/85d9ea9a1c7d7490578865e16ff64787efc7d01d"><code>85d9ea9</code></a>
  Add #[inline] to anyhow::Ok helper</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/54036cc289b754775b884485f486e000bcda2875"><code>54036cc</code></a>
  Update ui test suite to nightly-2026-01-21</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/cce0579d85fd1f6352a5955a9c134fc8655c853d"><code>cce0579</code></a>
  Update actions/upload-artifact@v5 -&gt; v6</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/f2c598ca0e8ffd7ffcbcf93b8a6ad4df57c719fd"><code>f2c598c</code></a>
  Update actions/upload-artifact@v4 -&gt; v5</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/2c0bda4ce944d943e7141f0316b0ea996602238e"><code>2c0bda4</code></a>
  Update to 2021 edition</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/0d822681293d71c72440c9cdd635b4f15da064c4"><code>0d82268</code></a>
  Remove rustc version requirement from readme</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/67df01216d29bc3bede925ab4483353b66c159f2"><code>67df012</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/anyhow/issues/436">#436</a>
  from dtolnay/up</li>
  <li><a
  href="https://github.com/dtolnay/anyhow/commit/c8984880a87ae4fd4b04c956cfdc9af5f69eab55"><code>c898488</code></a>
  Raise required compiler to Rust 1.68</li>
  <li>Additional commits viewable in <a
  href="https://github.com/dtolnay/anyhow/compare/1.0.100...1.0.101">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anyhow&package-manager=cargo&previous-version=1.0.100&new-version=1.0.101)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2026-02-09 21:33:56 -08:00
  cd7f8c6dab
• chore(deps): bump insta from 1.46.2 to 1.46.3 in /codex-rs (#11140)

  Bumps [insta](https://github.com/mitsuhiko/insta) from 1.46.2 to 1.46.3.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/mitsuhiko/insta/releases">insta's
  releases</a>.</em></p>
  <blockquote>
  <h2>1.46.3</h2>
  <h2>Release Notes</h2>
  <ul>
  <li>Fix inline escaped snapshots incorrectly stripping leading newlines
  when content contains control characters like carriage returns. The
  escaped format (used for snapshots with control chars) now correctly
  preserves the original content without stripping a non-existent
  formatting newline. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/865">#865</a></li>
  </ul>
  <h2>Install cargo-insta 1.46.3</h2>
  <h3>Install prebuilt binaries via shell script</h3>
  <pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf
  https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-installer.sh
  | sh
  </code></pre>
  <h3>Install prebuilt binaries via powershell script</h3>
  <pre lang="sh"><code>powershell -ExecutionPolicy Bypass -c &quot;irm
  https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-installer.ps1
  | iex&quot;
  </code></pre>
  <h2>Download cargo-insta 1.46.3</h2>
  <table>
  <thead>
  <tr>
  <th>File</th>
  <th>Platform</th>
  <th>Checksum</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-aarch64-apple-darwin.tar.xz">cargo-insta-aarch64-apple-darwin.tar.xz</a></td>
  <td>Apple Silicon macOS</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-aarch64-apple-darwin.tar.xz.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-apple-darwin.tar.xz">cargo-insta-x86_64-apple-darwin.tar.xz</a></td>
  <td>Intel macOS</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-apple-darwin.tar.xz.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-pc-windows-msvc.zip">cargo-insta-x86_64-pc-windows-msvc.zip</a></td>
  <td>x64 Windows</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-pc-windows-msvc.zip.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-unknown-linux-gnu.tar.xz">cargo-insta-x86_64-unknown-linux-gnu.tar.xz</a></td>
  <td>x64 Linux</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-unknown-linux-gnu.tar.xz.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-unknown-linux-musl.tar.xz">cargo-insta-x86_64-unknown-linux-musl.tar.xz</a></td>
  <td>x64 MUSL Linux</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.46.3/cargo-insta-x86_64-unknown-linux-musl.tar.xz.sha256">checksum</a></td>
  </tr>
  </tbody>
  </table>
  </blockquote>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md">insta's
  changelog</a>.</em></p>
  <blockquote>
  <h2>1.46.3</h2>
  <ul>
  <li>Fix inline escaped snapshots incorrectly stripping leading newlines
  when content contains control characters like carriage returns. The
  escaped format (used for snapshots with control chars) now correctly
  preserves the original content without stripping a non-existent
  formatting newline. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/865">#865</a></li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/13245901751701f45677b9cfe3537c182b47af02"><code>1324590</code></a>
  Release 1.46.3 (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/870">#870</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/b26bc7ffe1653d42e274077bb711559f2cd5a553"><code>b26bc7f</code></a>
  Fix escaped format inline snapshots not stripping formatting newline (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/869">#869</a>)</li>
  <li>See full diff in <a
  href="https://github.com/mitsuhiko/insta/compare/1.46.2...1.46.3">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=insta&package-manager=cargo&previous-version=1.46.2&new-version=1.46.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2026-02-09 21:33:31 -08:00
  10b1214606
• fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

  …ount_id and chatgpt_plan_type
  
  ### Summary
  Following up on external auth mode which was introduced here:
  https://github.com/openai/codex/pull/10012
  
  Turns out some clients have a differently shaped ID token and don't have
  a chosen workspace (aka chatgpt_account_id) encoded in their ID token.
  So, let's replace `id_token` param with `chatgpt_account_id` and
  `chatgpt_plan_type` (optional) when initializing the external ChatGPT
  auth mode (`account/login/start` with `chatgptAuthTokens`).
  
  The client was able to test end-to-end with a Codex build from this
  branch and verified it worked!

  Owen Lin · 2026-02-09 20:48:58 -08:00
  53741013ab
• Adjust shell command timeouts for Windows (#11247)

  Summary
  - add platform-aware defaults for shell command timeouts so Windows
  tests get longer waits
  - keep medium timeout longer on Windows to ensure flakiness is reduced
  
  Testing
  - Not run (not requested)

  Dylan Hurd · 2026-02-09 20:03:32 -08:00
  168c359b71
• test: deflake nextest child-process leak in MCP harnesses (#11263)

  ## Summary
  - add deterministic child-process cleanup to both test `McpProcess`
  helpers
  - keep Tokio `kill_on_drop(true)` but also reap via bounded `try_wait()`
  polling in `Drop`
  - document the failure mode and why this avoids nondeterministic `LEAK`
  flakes
  
  ## Why
  `cargo nextest` leak detection can intermittently report `LEAK` when a
  spawned server outlives test teardown, making CI flaky.
  
  ## Testing
  - `just fmt`
  - `cargo test -p codex-app-server`
  - `cargo test -p codex-mcp-server`
  
  
  ## Failing CI Reference
  - Original failing job:
  https://github.com/openai/codex/actions/runs/21845226299/job/63039443593?pr=11245

  Josh McKinney · 2026-02-10 03:43:24 +00:00
  de59e550c0
• chore: change ConfigState so it no longer depends on a single config.toml file for reloading (#11262)

  If anything, it should depend on `ConfigLayerStack`.
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/11262).
  * #11207
  * __->__ #11262

  Michael Bolin · 2026-02-09 19:26:39 -08:00
  862ab63071
• Revert "Revert "Update models.json"" (#11256)

  Reverts openai/codex#11255

  Ahmed Ibrahim · 2026-02-09 19:22:41 -08:00
  d1df3bd63b
• deflake linux-sandbox NoNewPrivs timeout (#11245)

  Deflake `codex-linux-sandbox::all
  suite::landlock::test_no_new_privs_is_enabled`.
  
  CI has intermittently failed with `Sandbox(Timeout)` (exit 124) because
  the sandboxed
  `grep '^NoNewPrivs:' /proc/self/status` can run close to the short
  timeout budget.
  
  This updates only this test to use `LONG_TIMEOUT_MS`, which removes the
  near-threshold timeout
  behavior while keeping the rest of the suite unchanged.
  
  Refs (previous failures):
  - PR:
  https://github.com/openai/codex/actions/runs/21836764823/job/63009902779
  - PR:
  https://github.com/openai/codex/actions/runs/21837427251/job/63012470353
  - main:
  https://github.com/openai/codex/actions/runs/21830746538/job/62988079964
  
  Validation:
  - Local: `cd codex-rs && cargo test -p codex-linux-sandbox` (non-Linux
  runs 0 tests)

  Josh McKinney · 2026-02-10 03:03:58 +00:00
  34c88d10ea
• Revert "Update models.json" (#11255)

  Reverts openai/codex#9739

  Ahmed Ibrahim · 2026-02-09 17:44:11 -08:00
  03adb5db3e
• Update models.json (#9739)

  Automated update of models.json.
  
  ---------
  
  Co-authored-by: aibrahim-oai <219906144+aibrahim-oai@users.noreply.github.com>
  Co-authored-by: Ahmed Ibrahim <aibrahim@openai.com>

  github-actions[bot] · 2026-02-09 17:20:18 -08:00
  c816c430a0
• Remove offline fallback for models (#11238)

  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.
  
  Include a link to a bug report or enhancement request.

  Ahmed Ibrahim · 2026-02-09 16:58:54 -08:00
  a1abd53b6a
• fix(tui): tab submits when no task running in steer mode (#10035)

  When steer mode is enabled, Tab used to only queue while a task was
  running and otherwise did nothing. Treat Tab as an immediate submit when
  no task is running so input isn't dropped when the inflight turn ends
  mid-typing.
  
  Adds a regression test and updates docs/tooltips.

  Josh McKinney · 2026-02-10 00:39:09 +00:00
  a3e4bd3bc0
• fix: nix build by adding missing dependencies and fix outputHashes (#11185)

  Fixes #11020
  
  I do think think `nix build` should run in CI, I had multiple issues
  trying to build the flake in the past, as it's continuously out of sync
  with the rest of the repo. (like a few days ago I didn't need the
  updated outputHashes, just the missing packages).
  
  Co-authored-by: Eric Traut <etraut@openai.com>

  Philipp Mildenberger · 2026-02-09 15:25:48 -08:00
  c9271cdff2
• fix(feature) UnderDevelopment feature must be off (#11242)

  ## Summary
  1. Bump RemoteModels to Stable
  2. Assert that all UnderDevelopment features are off by default
  
  ## Testing
  - [x] Added unit test

  Dylan Hurd · 2026-02-09 15:14:15 -08:00
  d65f09b913
• Use longest remote model prefix matching (#11228)

  Match model metadata by longest matching remote slug prefix before local
  fallback.
  
  - Update `get_model_info` to prefer the most specific remote slug prefix
  for the requested model.
  - Add an integration test to assert `gpt-5.3-codex-test` resolves to
  `gpt-5.3-codex` over `gpt-5.3`.

  Ahmed Ibrahim · 2026-02-09 15:05:56 -08:00
  481145e959
• [apps] Add gated instructions for Apps. (#10924)

  - [x] Add gated instructions for Apps.

  Matthew Zeng · 2026-02-09 14:48:09 -08:00
  d90df4761b
• adding image support for gif and webp (#11237)

  Adds image support for gif and webp images. Tested using webp and gif
  (both single and multi image gif files)

  natea-oai · 2026-02-09 14:47:22 -08:00
  ed977dbeda
• Add originator to otel metadata tags (#11232)
  alexsong-oai · 2026-02-09 14:29:19 -08:00
  373f5467ef
• fix(tui): keep unified exec summary on working line (#10962)

  ## Problem
  When unified-exec background sessions appear while the status indicator
  is visible, the bottom pane can grow by one row to show a dedicated
  footer line. That row insertion/removal makes the composer jump
  vertically and produces visible jitter/flicker during streaming turns.
  
  ## Mental model
  The bottom pane should expose one canonical background-exec summary
  string, but it should surface that string in only one place at a time:
  - if the status indicator row is visible, show the summary inline on
  that row;
  - if the status indicator row is hidden, show the summary as the
  standalone unified-exec footer row.
  
  This keeps status information visible while preserving a stable pane
  height.
  
  ## Non-goals
  This change does not alter unified-exec lifecycle, process tracking, or
  `/ps` behavior. It does not redesign status text copy, spinner timing,
  or interrupt handling semantics.
  
  ## Tradeoffs
  Inlining the summary preserves layout stability and keeps interrupt
  affordances in a fixed location, but it reduces horizontal space for
  long status/detail text in narrow terminals. We accept that truncation
  risk in exchange for removing vertical jitter and keeping the composer
  anchored.
  
  ## Architecture
  `UnifiedExecFooter` remains the source of truth for background-process
  summary copy via `summary_text()`. `BottomPane` mirrors that text into
  `StatusIndicatorWidget::update_inline_message()` whenever process state
  changes or a status widget is created. Rendering enforces single-surface
  output: the standalone footer row is skipped while status is present,
  and the status row appends the summary after the elapsed/interrupt
  segment.
  
  ## Documentation pass
  Added non-functional docs/comments that make the new invariant explicit:
  - status row owns inline summary when present;
  - unified-exec footer row renders only when status row is absent;
  - summary ordering keeps elapsed/interrupt affordance in a stable
  position.
  
  ## Observability
  No new telemetry or logs are introduced. The behavior is traceable
  through:
  - `BottomPane::set_unified_exec_processes()` for state updates,
  - `BottomPane::sync_status_inline_message()` for status-row
  synchronization,
  - `StatusIndicatorWidget::render()` for final inline ordering.
  
  ## Tests
  - Added
  `bottom_pane::tests::unified_exec_summary_does_not_increase_height_when_status_visible`
  to lock the no-height-growth invariant.
  - Updated the unified-exec status restoration snapshot to match inline
  rendering order.
  - Validated with:
    - `just fmt`
    - `cargo test -p codex-tui --lib`
  
  ---------
  
  Co-authored-by: Sayan Sisodiya <sayan@openai.com>

  Josh McKinney · 2026-02-09 14:25:32 -08:00
  2bdf9617bb
• feat: tie shell snapshot to cwd (#11231)

  Fix for this: https://github.com/openai/codex/issues/11223
  
  Basically we tie the shell snapshot to a `cwd` to handle `cwd`-based env
  setups

  jif-oai · 2026-02-09 22:14:39 +00:00
  ffd4bd345c
• feat: use a notify instead of grace to close ue process (#11219)
  jif-oai · 2026-02-09 22:14:33 +00:00
  c2ca51273f
• skill-creator: Remove invalid reference. (#10960)

  Remove references to two files that do not exist.

  xl-openai · 2026-02-09 13:37:27 -08:00
  cca13fb03a
• feat: extend skills/list to support additional roots. (#10835)

  Add an optional perCwdExtraUserRoots

  xl-openai · 2026-02-09 13:30:38 -08:00
  a33ee46e3b
• state: add memory consolidation lock primitives (#11199)

  ## Summary
  - add a migration for memory_consolidation_locks
  - add acquire/release lock primitives to codex-state runtime
  - add core/state_db wrappers and cwd normalization for memory queries
  and lock keys
  
  ## Testing
  - cargo test -p codex-state memory_consolidation_lock_
  - cargo test -p codex-core --lib state_db::

  jif-oai · 2026-02-09 21:04:20 +00:00
  74ecd6e3b2
• feat: search_tool (#10657)

  **Why We Did This**
  - The goal is to reduce MCP tool context pollution by not exposing the
  full MCP tool list up front
  - It forces an explicit discovery step (`search_tool_bm25`) so the model
  narrows tool scope before making MCP calls, which helps relevance and
  lowers prompt/tool clutter.
  
  **What It Changed**
  - Added a new experimental feature flag `search_tool` in
  `core/src/features.rs:90` and `core/src/features.rs:430`.
  - Added config/schema support for that flag in
  `core/config.schema.json:214` and `core/config.schema.json:1235`.
  - Added BM25 dependency (`bm25`) in `Cargo.toml:129` and
  `core/Cargo.toml:23`.
  - Added new tool handler `search_tool_bm25` in
  `core/src/tools/handlers/search_tool_bm25.rs:18`.
  - Registered the handler and tool spec in
  `core/src/tools/handlers/mod.rs:11` and `core/src/tools/spec.rs:780` and
  `core/src/tools/spec.rs:1344`.
  - Extended `ToolsConfig` to carry `search_tool` enablement in
  `core/src/tools/spec.rs:32` and `core/src/tools/spec.rs:56`.
  - Injected dedicated developer instructions for tool-discovery workflow
  in `core/src/codex.rs:483` and `core/src/codex.rs:1976`, using
  `core/templates/search_tool/developer_instructions.md:1`.
  - Added session state to store one-shot selected MCP tools in
  `core/src/state/session.rs:27` and `core/src/state/session.rs:131`.
  - Added filtering so when feature is enabled, only selected MCP tools
  are exposed on the next request (then consumed) in
  `core/src/codex.rs:3800` and `core/src/codex.rs:3843`.
  - Added E2E suite coverage for
  enablement/instructions/hide-until-search/one-turn-selection in
  `core/tests/suite/search_tool.rs:72`,
  `core/tests/suite/search_tool.rs:109`,
  `core/tests/suite/search_tool.rs:147`, and
  `core/tests/suite/search_tool.rs:218`.
  - Refactored test helper utilities to support config-driven tool
  collection in `core/tests/suite/tools.rs:281`.
  
  **Net Behavioral Effect**
  - With `search_tool` **off**: existing MCP behavior (tools exposed
  normally).
  - With `search_tool` **on**: MCP tools start hidden, model must call
  `search_tool_bm25`, and only returned `selected_tools` are available for
  the next model call.

  Anton Panasenko · 2026-02-09 12:53:50 -08:00
  becc3a0424
• core: add focused diagnostics for remote compaction overflows (#11133)

  ## Summary
  - add targeted remote-compaction failure diagnostics in compact_remote
  logging
  - log the specific values needed to explain overflow timing:
    - last_api_response_total_tokens
    - estimated_tokens_of_items_added_since_last_successful_api_response
    - estimated_bytes_of_items_added_since_last_successful_api_response
    - failing_compaction_request_body_bytes
  - simplify breakdown naming and remove
  last_api_response_total_bytes_estimate (it was an approximation and not
  useful for debugging)
  
  ## Why
  When compaction fails with context_length_exceeded, we need concrete,
  low-ambiguity numbers that map directly to:
  1) what the API most recently reported, and
  2) what local history added since then.
  
  This keeps the failure logs actionable without adding broad, noisy
  metrics.
  
  ## Testing
  - just fmt
  - cargo test -p codex-core

  Charley Cunningham · 2026-02-09 12:42:20 -08:00
  9450cd9ce5
• TUI: fix request_user_input wrapping for long option labels (#11123)

  ## Summary
  
  This PR fixes long-text rendering in the `request_user_input` TUI
  overlay while preserving a clear two-column option layout. (Issue
  https://github.com/openai/codex/issues/11093)
  
  Before:
  - very long option labels could push description text into a narrow
  right-edge strip
  - option labels were effectively single-line when descriptions were
  present, causing truncation/poor readability
  - label and description wrapping interacted in one combined wrapped line
  
  <img width="504" height="409" alt="Screenshot 2026-02-08 at 2 27 25 PM"
  src="https://github.com/user-attachments/assets/a9afd108-d792-4522-bce1-e43b3cce882b"
  />
  
  After:
  - option labels wrap inside the left column
  - descriptions wrap independently inside the right column
  - row measurement and row rendering use the same wrapping path, so
  layout stays stable
  
  <img width="582" height="211" alt="Screenshot 2026-02-09 at 10 28 02 AM"
  src="https://github.com/user-attachments/assets/47885a1c-07e5-4b0f-b992-032b149f1b0d"
  />
  
  ## Problem
  
  `request_user_input` needs to handle verbose prompts/options. With
  oversized labels:
  - descriptions could collapse into a thin, hard-to-read column
  - important label context was lost
  
  ## Root Cause
  
  In shared row rendering (`selection_popup_common`):
  - rows were wrapped as a single combined line
  - auto column sizing could still place `desc_col` too far right for long
  labels
  - `request_user_input` rows did not provide wrap metadata to align
  continuation lines after the option prefix
  
  ## What Changed
  
  ### 1) `request_user_input` rows opt into wrapped labels
  File: `codex-rs/tui/src/bottom_pane/request_user_input/mod.rs`
  
  - In `option_rows()`, compute the rendered option prefix (`› 1. ` / ` 2.
  `) and set `wrap_indent` from its display width.
  - Apply the same behavior to the synthetic “None of the above” row.
  - Add long-text snapshot test coverage
  (`question_with_very_long_option_text` +
  `request_user_input_long_option_text_snapshot`).
  
  ### 2) Shared renderer now has an opt-in two-column wrapping path
  File: `codex-rs/tui/src/bottom_pane/selection_popup_common.rs`
  
  - Add focused helpers:
    - `should_wrap_name_in_column`
    - `wrap_two_column_row`
    - `wrap_standard_row`
    - `wrap_row_lines`
    - `apply_row_state_style`
  - For opted-in rows (plain option rows with `wrap_indent` +
  description), wrap label and description independently in their own
  columns.
  - Keep the legacy standard wrapping path for non-opted rows.
  - Use the same `wrap_row_lines` function in both rendering and height
  measurement to keep them in sync.
  
  ### 3) Keep column sizing simple and derived from existing fixed split
  constants
  File: `codex-rs/tui/src/bottom_pane/selection_popup_common.rs`
  
  - Keep fixed mode at `3/10` left column (`30/70` split).
  - In auto modes, cap label width using those same fixed constants (max
  70% label, min 30% description), instead of extra special-case
  constants/branches.
  - Add/keep narrow-width safety guard in `wrap_two_column_row` so
  extremely small widths do not panic.
  
  ### 4) Snapshot coverage
  File: `codex-rs/tui/src/bottom_pane/request_user_input/snapshots/
  
  codex_tui__bottom_pane__request_user_input__tests__request_user_input_long_option_text.snap`
  
  - Add snapshot for long-label/long-description two-column rendering
  behavior.

  Charley Cunningham · 2026-02-09 12:23:31 -08:00
  f88667042e
• Revert "chore: enable sub agents" (#11230)

  Reverts openai/codex#11173

  jif-oai · 2026-02-09 20:22:38 +00:00
  c2bfd1e473
• chore: remove network-proxy-cli crate (#11158)

  ## Summary
  - remove `network-proxy-cli` from the Rust workspace members
  - delete the dedicated `codex-network-proxy-cli` crate files
  - remove the stale `codex-network-proxy-cli` package entry from
  `Cargo.lock`
  
  ## Testing
  - just fmt
  - cargo test -p codex-network-proxy

  viyatb-oai · 2026-02-09 12:13:55 -08:00
  c2c6bc90f8
• [bazel] Upgrade some rulesets in preparation for enabling windows, part 2 (#11197)

  https://github.com/openai/codex/pull/11109 had automerge set, so I
  didn't get to address feedback before merging, oops!

  zbarsky-openai · 2026-02-09 20:08:10 +00:00
  86183847fd
• Try to stop small helper methods (#11203)
  pakrym-oai · 2026-02-09 20:01:30 +00:00
  086d02fb14
• Move warmup to the task level (#11216)

  Instead of storing a special connection on the client level make the
  regular task responsible for establishing a normal client session and
  open a connection on it.
  
  Then when the turn is started we pass in a pre-established session.

  pakrym-oai · 2026-02-09 11:58:53 -08:00
  7044511ae8
• Move warmup to the task level (#11216)

  Instead of storing a special connection on the client level make the
  regular task responsible for establishing a normal client session and
  open a connection on it.
  
  Then when the turn is started we pass in a pre-established session.

  pakrym-oai · 2026-02-09 10:57:52 -08:00
  ccd17374cb
• Fixed bug in file watcher that results in spurious skills update events and large log files (#11217)

  On some platforms, the "notify" file watcher library emits events for
  file opens and reads, not just file modifications or deletes. The
  previous implementation didn't take this into account.
  
  Furthermore, the `tracing.info!` call that I previously added was
  emitting a lot of logs. I had assumed incorrectly that `info` level
  logging was disabled by default, but it's apparently enabled for this
  crate. This is resulting in large logs (hundreds of MB) for some users.

  Eric Traut · 2026-02-09 10:33:57 -08:00
  9346d321d2
• Translate websocket errors (#10937)

  When getting errors over a websocket connection, translate the error
  into our regular API error format

  Rasmus Rygaard · 2026-02-09 17:53:09 +00:00
  b2d3843109
• tools: remove get_memory tool and tests (#11198)

  Drop this memory tool as the design changed

  jif-oai · 2026-02-09 17:47:36 +00:00
  cfce286459
• core: account for all post-response items in auto-compact token checks (#11132)

  ## Summary
  - change compaction pre-check accounting to include all items added
  after the last model-generated item, not only trailing codex-generated
  outputs
  - use that boundary consistently in get_total_token_usage() and
  get_total_token_usage_breakdown()
  - update history tests to cover user/tool-output items after the last
  model item
  
  ## Why
  last_token_usage.total_tokens is API-reported for the last successful
  model response. After that point, local history may gain additional
  items (user messages, injected context, tool outputs). Compaction
  triggering must account for all of those items to avoid late compaction
  attempts that can overflow context.
  
  ## Testing
  - just fmt
  - cargo test -p codex-core

  Charley Cunningham · 2026-02-09 08:34:38 -08:00
  0883e5d3e5
• Load requirements on windows (#10770)

  We support requirements on Unix, loading from
  `/etc/codex/requirements.toml`. On MacOS, we also support MDM.
  
  Now, on Windows, we'll load requirements from
  `%ProgramData%\OpenAI\Codex\requirements.toml`

  gt-oai · 2026-02-09 16:05:38 +00:00
  9fe925b15a
• Deflake mixed parallel tools timing test (#11193)

  ```
          FAIL [   1.903s] (1926/3311) codex-core::all suite::tool_parallelism::mixed_parallel_tools_run_in_parallel
    stdout ───
  
      running 1 test
      test suite::tool_parallelism::mixed_parallel_tools_run_in_parallel ... FAILED
  
      failures:
  
      failures:
          suite::tool_parallelism::mixed_parallel_tools_run_in_parallel
  
      test result: FAILED. 0 passed; 1 failed; 0 ignored; 0 measured; 684 filtered out; finished in 1.86s
      
    stderr ───
  
      thread 'suite::tool_parallelism::mixed_parallel_tools_run_in_parallel' (205083) panicked at core/tests/suite/tool_parallelism.rs:74:5:
      expected parallel execution to finish quickly, got 1.406255993s
      stack backtrace:
         0: __rustc::rust_begin_unwind
                   at /rustc/254b59607d4417e9dffbc307138ae5c86280fe4c/library/std/src/panicking.rs:689:5
         1: core::panicking::panic_fmt
                   at /rustc/254b59607d4417e9dffbc307138ae5c86280fe4c/library/core/src/panicking.rs:80:14
         2: all::suite::tool_parallelism::assert_parallel_duration
                   at ./tests/suite/tool_parallelism.rs:74:5
         3: all::suite::tool_parallelism::mixed_parallel_tools_run_in_parallel::{{closure}}
                   at ./tests/suite/tool_parallelism.rs:206:5
         4: <core::pin::Pin<P> as core::future::future::Future>::poll
                   at /home/runner/.rustup/toolchains/1.93.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/future/future.rs:133:9
         5: tokio::runtime::park::CachedParkThread::block_on::{{closure}}
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/park.rs:284:71
         6: tokio::task::coop::with_budget
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/task/coop/mod.rs:167:5
         7: tokio::task::coop::budget
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/task/coop/mod.rs:133:5
         8: tokio::runtime::park::CachedParkThread::block_on
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/park.rs:284:31
         9: tokio::runtime::context::blocking::BlockingRegionGuard::block_on
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/context/blocking.rs:66:14
        10: tokio::runtime::scheduler::multi_thread::MultiThread::block_on::{{closure}}
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/scheduler/multi_thread/mod.rs:89:22
        11: tokio::runtime::context::runtime::enter_runtime
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/context/runtime.rs:65:16
        12: tokio::runtime::scheduler::multi_thread::MultiThread::block_on
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/scheduler/multi_thread/mod.rs:88:9
        13: tokio::runtime::runtime::Runtime::block_on_inner
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/runtime.rs:370:50
        14: tokio::runtime::runtime::Runtime::block_on
                   at /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/tokio-1.49.0/src/runtime/runtime.rs:342:18
        15: all::suite::tool_parallelism::mixed_parallel_tools_run_in_parallel
                   at ./tests/suite/tool_parallelism.rs:208:7
        16: all::suite::tool_parallelism::mixed_parallel_tools_run_in_parallel::{{closure}}
                   at ./tests/suite/tool_parallelism.rs:178:52
        17: core::ops::function::FnOnce::call_once
                   at /home/runner/.rustup/toolchains/1.93.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/ops/function.rs:250:5
        18: core::ops::function::FnOnce::call_once
                   at /rustc/254b59607d4417e9dffbc307138ae5c86280fe4c/library/core/src/ops/function.rs:250:5
      note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace.
  ```

  gt-oai · 2026-02-09 15:16:54 +00:00
  54b401aa5f
• chore: enable sub agents (#11173)
  jif-oai · 2026-02-09 11:25:37 +00:00
  284c03ceab