Digest / July 29, 2026
Codex Issues Digest — July 29, 2026
153 new issues filed ·
18 resolved in openai/codex (UTC day).
New issues (153)
- Add a persistent, agent-updatable status panel for each Desktop thread
- macOS ChatGPT App
- Repeated implicit Skill use rereads unchanged SKILL.md on every turn
- Android Remote Control pairing fails with Windows Codex 26.721.41059 / ChatGPT Android 1.2026.202 (25)
- Feature request: model-callable EnterPlanMode / ExitPlanMode tools for safe mid-implementation replanning
- [Desktop/macOS] Full Access still requests terminal approval in 26.721.41059
- codex mcp-server: `-c` config overrides are accepted but never applied to sessions
- False “Content cannot be shown” errors during IDA SDK debugger development
- Codex Desktop lifecycle SessionStart hooks are detected but command hooks never execute
- [BUGFIX INCLUDED] Windows unelevated sandbox rejects enforceable split writable roots, breaking apply_patch updates and deletes
- codex-core full suite fails tracing event_enabled test that passes in isolation
- [Windows][VS Code extension] Native modal disappears and leaves VS Code window disabled
- [Desktop] Pinning a project task hides it from the project list and mimics data loss
- Custom pet selected at first wake initializes a persistently undersized drag hit region on Windows
- [bug][otel]: Plugin Skills injected by SkillsExtension do not emit codex.skill.injected
- Windows sandbox: CreateProcessAsUserW fails with error 5 when the resolved shell is the MSIX (Store) build of pwsh
- Codex Security 0.1.14 Deep Scan fails with spawn EPERM on Windows when CODEX_CLI_PATH is unset
- Codex desktop app erroneously shows 'task completed' blue circles for tasks containing results that were already seen. This happens on application start.
- [bug] GitHub publish skill requires gh even when connector path is available
- Require a hard confirmation gate before agents send email or create autonomous email sequences
- Codex Desktop on Windows is an unoptimized mess — massive memory consumption, fans at full blast with zero workload
- Windows Codex Desktop opens Git Credential Manager while checking ChatGPT Sites remotes
- Remote project threads disappeared from Codex sidebar after Codex 0.146.0 update
- Codex Desktop reliability: pre-output instruction gate failed, then violation handling blocked correction
- [macOS] Dock badge remains at 1 after completed task is opened and read
- exec_command CreateProcess failed: os error 2
- Change Preview is Inaccurately Labeled "Edited"
- Persistent startup crash loop in the Codex Windows app after abnormal termination
- [exec-server] Make missing environment/info failures explicit and observable
- Agent-initiated Browser Use can trigger Code Integrity 3033, GPU relaunch failure, and Store remediation
- Long-running tasks keep expanding work instead of converging or stopping
- apply_patch bug
- app-server: dynamic tool request is broadcast to all thread subscribers and first response wins
- Freeze TUI for very long time when I start codex cli, and run '/permissions'
- Codex Windows app crashes after the in-app browser GPU process fails
- BLOCKER - Model not found gpt-5.6-sol
- Codex Desktop: make the projectless voice workspace root configurable
- Windows ARM64: Existing conversation repeatedly crashes Desktop app, while the same conversation works via Remote Control
- ChatGPT Chrome Extension Causes a Controlled Renderer to Grow by ~0.65 GiB/min Until It Reaches 10+ GiB
- Collaboration spawn: thread-store reports ENOSPC with 170 GiB free
- Remove-Item fails with Full access while .NET deletion succeeds
- Unexpected status 404 Not Found: Model not found gpt-5.6-sol
- Windows app unlaunchable ("This app can't open") - MSIX ships a file at a 275+ char path; 26.721 also re-flags itself in use
- Codex Desktop: MCP form elicitation messages collapse newline characters in approval UI
- ESC from "Toggle voice chat" creates dead history entries.
- node_modules/.bin/vitest.CMD promlem
- failed goals
- Codex generates 214-character loose checkpoint refs that exceed Windows path limits
- Codex Desktop emits “remote compact task” model-capacity error during automatic compaction
- Codex Security Deep scan reaches 25/25 but cannot recover or finalize
- Add an option to hide rotating empty-composer prompt placeholders
- Codex Desktop Windows sandbox hangs on Google Drive virtual filesystem — SetNamedSecurityInfoW failed: 87
- Codex Desktop: expose detailed agent activity comparable to the mobile remote view
- Pet overlay takes 15–30s to reappear after being closed — first paint blocked on the Statsig bootstrap
- [Windows][Codex Desktop 26.721.4979.0] Quick Chat "Open in a new window" closes without showing a new window
- [Windows Desktop] Restore inline comments on Plan mode plans
- Accessibility: Add-files composer menu is not operable with NVDA on Windows
- Stop hook (failed) error: hook exited with code 1 codex cli
- Codex view remains blank on VS Code 1.128 (Windows 10)
- Codex App fails to open files in IntelliJ IDEA 2026.2 due to CLI argument order
- 0.146.0 hides image_generation for Pro accounts until re-login refreshes stale Free plan cache
- VS Code extension: Statsig initialization fails through SOCKS5 but succeeds through HTTP on the same proxy core
- Prompt-cache misses — mostly mid-loop or after silent context pruning — were 94% of a $210 session's uncached cost; counters can't show cached vs uncached
- Support image attachments in request_user_input notes
- Codex App: first-class multi-label tagging for sessions in the GUI
- Remote Connections docs contradict the new `codex remote-control pair` CLI workflow
- Security: define UserPromptSubmit hook ordering and deny short-circuit across plugins
- Show an automatic progress percentage for every running task
- Desktop composer appends trailing instructions to a URL and drops the prompt
- Custom-provider subagents lose dynamic task payload on stable v0.146.0 — supported behavior or bug?
- Selected text in input is not deleted — selection disappears on any delete action
- app-server sandbox stays read-only despite workspace-write request (Claude Code plugin, codex-cli 0.146.0)
- [Windows][Regression] Context compaction loses task state, repeats completed work, and exhausts weekly usage
- Interactive Ultra selection produces inconsistent Default/Plan reasoning state
- Spell checker
- Received usage restriction during Kaggle AI security competition – please lift
- Windows: codex sandbox leaks one logon session per invocation (lsass grows until reboot)
- Codex App does not recover Remote SSH connection after local sleep/wake
- Codex App renders ChatGPT-generated Markdown download links as non-clickable text
- Codex Desktop automation creation no longer offers Worktree execution on macOS
- Codex Desktop on Windows: MCP elicitation approvals lack the actionable notification used for command approvals
- [Windows][Codex Desktop 26.721.4979.0] custom_tool_call_output is surfaced as a user message and re-enters the active turn
- [Windows] Error submitting message: turn/start fails with agent loop died unexpectedly
- [macOS][Automations] Scheduled local run stalls until the thread is opened and resumed
- Weekly limits reset extending to infinity when we are getting close to it
- [iOS Remote] Previously visible subagent and Steps cards disappear after reopening a task
- [Codex Desktop] Inaccessible GitHub pull requests remain in the Pull Requests list
- Remote Control task stays spinning after host turn completes following sequence gap
- OpenAI Developers plugin is enabled and injects skills even though I never installed it
- Windows sandbox (unelevated): CreateProcessAsUserW denial rendered as "-1073283067 (Win32 error -1073283067)" instead of the decoded error
- Plan/Default mode toggles add repeated noisy model-change messages to the transcript
- Windows desktop app exits unexpectedly after memory-leak and hang events
- Codex security report rejected as lacking a PoC despite attached deterministic reproduction package
- Windows app: "Finish Windows setup" never starts elevated sandbox setup; `sandbox = "unelevated"` works
- Codex Desktop: coordinate voice and text so the same task is not run twice
- KEYRING auth store mode is silently ignored in local dev builds; request for trace warning or doctor check
- Voice chat fails to start: overlay 10s launch timeout races slow skills/list; session starts after timeout fires
- Duplicated "Auto" string in the ChatGPT App
- Quick chat doesn't work in the new ChatGPT/Codex desktop app on Mac
- Native timer test
- Codex Mobile Remote project assignment does not reconcile with Desktop project assignment
- False positive: embedded firmware reverse engineering workflow is consistently classified as cybersecurity
- danger-full-access still advertises no-op require_escalated capability
- Codex Desktop: add a prompt-first user-intent navigation rail for long agent threads
- Windows ChatGPT/Codex Store app failed to launch due to AppX package state "Modified, NeedsRemediation"
- Recently viewed chat shortcuts include archived chats and open “Conversation not found”
- Frequent "Context compacting" despite the low reported usage in UI
- git-branch disappears from status line after exiting /statusline menu
- Review Diff crashes with "Thread context is unavailable for non-thread routes" and then shows "No diff available"
- Cybersecurity Scans Blocked Despite Verified Account Status
- Cyber Block "False Postive"
- agents.max_threads "When unset, no limit is enforced" is back in config_toml.rs and config.schema.json (regression of #13964)
- Windows Codex Desktop: unhandled `write EOF` after IpcRouter EPIPE when browser-sidebar client closes
- Codex security causes codex crash
- Desktop app: copying a shell tool call removes its trailing quote
- Could you please re-enable web search for 5.6 family of models?
- Show a live percentage progress indicator for every task
- Repeatable macOS OOM: Codex/ChatGPT reaches 40–59 GB with runaway subprocess activity
- Windows: Python available in interactive PowerShell but unavailable during Codex task execution
- VS Code extension UI: Add Toggle Codex Secondary Sidebar button/command
- eating my tokens and credits
- Windows app UI stutters while opening a project; possible synchronous discovery of “Open in” IDEs
- Incorrect error message trying to paste text into Codex CLI
- Codex App: support spoiler-style hidden text in prompts (`||...||`)
- [macOS][CLI 0.146.0] TUI silently exits right after final agent-message consolidation — 5 sessions lost in one night
- macOS: Desktop hardened Node cannot load bundled unsigned skia.node
- TUI /resume picker resets to Cwd filter after launching with codex resume --all
- [Windows][CLI 0.146.0] MultiAgentV2 custom-agent spawn ends the parent after child task_started with zero model events
- Codex Desktop: tool_search advertises read_thread but invocation fails with “No handler registered” until app restart
- Remote paired but active desktop chats missing on mobile; WebSocket remains Unknown
- Codex VS Code Extension – Diff view fails to open
- Feature request: configure tab width in rendered Codex CLI/TUI content
- Feature request: configure rendered tab width in Codex CLI TUI
- Feature Request: Allow Computer Use and browser activity to be restricted to selected displays
- Inappropriate assumptions around implementation details.
- Codex app. Black screen.
- GitHub review helper fails to decode emoji on Windows cp1252 locale
- Benign usage being flagged for security risk
- [Windows app] System-wide mouse/input lag from repeated PowerShell WMI process snapshots
- codex mcp login for Atlassian Rovo reaches consent, then returns invalid_request before callback
- [IDE extension][Linux] bundled app-server 0.146.0-alpha.3.1 repeatedly exits with SIGILL and does not recover
- Delegated worktree creation does not apply the selected local environment setup
- Restore a working Codex-specific llms.txt endpoint
- Large-context Chat→Work migration reliably wedges the renderer; smaller contexts succeed.
- gpt-5.6-sol gives "Safety reminder for malicious cybersecurity requests" even for the most basic replication steps - even after being cyber verified. All other models work fine
- Windows Codex app resource exhaustion, LiveKernelEvent 0x1CC, and unexpected reboot
- Regression: iOS Remote only lists projects with recent chats
- Codex Micro: expose a stable read-only Agent Key status/lighting API in app-server
- Codex 5.6 GitHub connector regression: fails to use valid branch-write access that works under 5.5
- Codex locked
- Slow typing
- Codex CLI v0.146.0 returns "Invalid type for 'input'" for every prompt
- [app][Windows][26.721.4979.0] Voice shortcut forks chat and archives the original task
Resolved issues (18)
- Repeated implicit Skill use rereads unchanged SKILL.md on every turn
- LLM Responses Not Revealed Unless Switching Between Chats
- Standalone Codex CLI crashes in `exec --dangerously-bypass-approvals-and-sandbox` on macOS 15.7.7 x86_64 with V8 SetPermissions SIGTRAP
- Desktop app crashes when opening a specific thread; replacing the entire session JSONL does not resolve it
- [Windows][Codex Desktop 26.721.4979.0] custom_tool_call_output is surfaced as a user message and re-enters the active turn
- Windows Desktop WSL mode should split persistent CODEX_HOME from native WSL runtime cache
- install.sh doesn't support version formats like 0.146.0-alpha.10.1, so it can't install it
- Windows Computer Use enabled but node_repl/js tool is not injected into sessions
- Windows Codex app rewrites node_repl / Computer Use config on startup or plugin update, breaking @oai/sky resolution
- Singleton reasoning title is missing from live TUI history
- macOS: Desktop hardened Node cannot load bundled unsigned skia.node
- Add explicit MCP server mentions in prompts (for example, #server-name)
- Feature request: configure rendered tab width in Codex CLI TUI
- Invalid Value: 'tools'. Function 'functions.spawn_agent' declares encrypted parameters but is not configured for encrypted tool use by this model.
- codex mcp login for Atlassian Rovo reaches consent, then returns invalid_request before callback
- Restore a working Codex-specific llms.txt endpoint
- Feature request: configure tab width in rendered Codex CLI/TUI content
- Codex locked