codex app can't touch web , but codex cli can

I’m observing inconsistent behavior when executing the same network command (curl) in Codex CLI vs Codex App, even though web search is enabled in my Codex CLI configuration.

Specifically:

• In Codex CLI, curl can successfully access external websites (e.g. www.baidu.com).
• In Codex App, the same curl command fails at the DNS resolution stage with Could not resolve host.

---

Environment

Codex CLI

• web search enabled in config.toml
• Commands are executed in the local machine environment
• Network access works as expected

Codex App

• Commands appear to run in a sandboxed execution environment
• Network / DNS behavior differs from CLI

---

Steps to Reproduce

1. Codex CLI (web search enabled)

Input in Codex CLI:

Please curl Baidu and describe the response.

Codex CLI executes:

curl -i https://www.baidu.com

Result:

• Request succeeds
• HTTP response headers and HTML body are returned normally

---

2. Codex App

Input in Codex App (semantically equivalent):

I will directly execute a curl request to Baidu and describe the response.

Codex App executes:

curl -I -L https://www.baidu.com

and:

curl -L https://www.baidu.com | head -n 30

Result:

curl: (6) Could not resolve host: www.baidu.com

• Failure occurs at the DNS resolution stage
• No TCP/TLS connection is established
• No HTTP response is received

---

Expected Behavior

• Either:

• Codex App and Codex CLI use equivalent network/DNS capabilities, or
• The difference in execution environment and network limitations is made explicit to users

• If web search is enabled, it should be clear:

• Which environments it applies to (CLI only vs App as well)
• Whether it affects command execution or only model-level browsing

---

Actual Behavior

• Codex CLI can resolve and access external domains
• Codex App fails DNS resolution for the same domains
• The App still reports “command executed”, which can be misleading when the environment itself is restricted

---

Questions / Clarification Needed

Does the web search configuration apply only to Codex CLI, and not to Codex App?