Network/proxy/AppContainer issue causing Codex Store app to hang

What version of the Codex App are you using (From “About Codex” dialog)?

Latest

What subscription do you have?

plus

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What issue are you seeing?

<img width="1946" height="1253" alt="Image" src="https://github.com/user-attachments/assets/ba7e482c-c8cb-4d19-bce3-97314c006a95" />
正文：

Summary

The Microsoft Store version of Codex fails to load / becomes unresponsive on Windows when using a local proxy/VPN setup, even after adding the Codex AppContainer loopback exemption and importing the system proxy into WinHTTP.
This looks related to AppContainer / localhost proxy / WebView2 / Codex sandbox networking rather than a normal browser/network issue.

Environment

• OS: Windows 10 Pro
• OS build: 26200
• Architecture: x64
• Codex package:
• Name: OpenAI.Codex
• PackageFamilyName: OpenAI.Codex_2p2nqsd0c76g0
• PackageFullName: OpenAI.Codex_26.422.3464.0_x64__2p2nqsd0c76g0
• Version: 26.422.3464.0
• Codex executable:
• Path: C:\Program Files\WindowsApps\OpenAI.Codex_26.422.3464.0_x64__2p2nqsd0c76g0\app\Codex.exe
• Windows Error Reporting shows version: 2080.0.0.0
• WebView2:
• Path: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\147.0.3912.86\msedgewebview2.exe
• Proxy/VPN:
• Clash Verge / Mihomo
• Local mixed proxy: 127.0.0.1:7897
• TUN mode enabled
• Rule mode enabled

Current proxy state

verge-mihomo is listening on the local proxy port:

Get-NetTCPConnection -State Listen | Where-Object { $_.LocalPort -eq 7897 }
Result:
LocalAddress : ::
LocalPort    : 7897
ProcessName  : verge-mihomo
WinHTTP proxy has also been imported:
netsh winhttp show proxy
Result:
Proxy Server(s): 127.0.0.1:7897
Bypass List: localhost;127.*;192.168.*;10.*;172.16.*;...
Windows user proxy is also enabled:
ProxyEnable: 1
ProxyServer: 127.0.0.1:7897
Loopback exemption state
I added the Codex AppContainer loopback exemption:
CheckNetIsolation LoopbackExempt -a -n="OpenAI.Codex_2p2nqsd0c76g0"
It now appears in the exemption list:
Name: openai.codex_2p2nqsd0c76g0
SID: S-1-15-2-2968813833-811790644-2202111208-3784096404-1081847329-2708967783-1438471679
Microsoft Store itself works after similar network fixes, but Codex still does not.
Network observations
Direct connection to chatgpt.com:443 without the proxy fails in my region/network, but through the Clash/Mihomo TUN/proxy path DNS resolves to fake-ip and TCP succeeds:
Resolve-DnsName chatgpt.com -Server 127.0.0.1
Result:
chatgpt.com A 198.18.0.11
Test-NetConnection chatgpt.com -Port 443
Result:
ComputerName     : chatgpt.com
RemoteAddress    : 198.18.0.11
TcpTestSucceeded : True
So the local proxy/TUN path is available at the system level.
Actual behavior
Codex still fails to load correctly / becomes unresponsive.
Windows Event Viewer shows Codex.exe application hangs:
ProviderName: Application Hang
Event ID: 1002
Message: Codex.exe version 2080.0.0.0 stopped interacting with Windows and was closed.
Windows Error Reporting shows:
Event type: MoAppHang
P1: OpenAI.Codex_26.422.3464.0_x64__2p2nqsd0c76g0
P2: praid:App
P3: 2080.0.0.0
There is also a memory warning:
Event type: RADAR_PRE_LEAK_64
P1: Codex.exe
P2: 2080.0.0.0
WER reports exist under:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_OpenAI.Codex_26...
Codex app logs
Codex logs are located under:
C:\Users\<user>\AppData\Local\Packages\OpenAI.Codex_2p2nqsd0c76g0\LocalCache\Local\Codex\Logs\
Recent logs include repeated errors like:
error [electron-message-handler] Request failed
error={"code":-32600,"message":"unsupported feature enablement `workspace_dependencies`: currently supported features are apps, memories, plugins, tool_search, tool_suggest, tool_call_mcp_elicitation"}
method=experimentalFeature/enablement/set
The app also logs runtime config pointing to:
https://persistent.oaistatic.com/codex-primary-runtime/26.423.10653/codex-primary-runtime-win32-x64-26.423.10653.tar.xz
Expected behavior
After:
1. adding OpenAI.Codex_2p2nqsd0c76g0 to CheckNetIsolation LoopbackExempt,
2. importing WinHTTP proxy from system proxy,
3. confirming 127.0.0.1:7897 is listening,
4. confirming chatgpt.com:443 is reachable through the TUN/fake-ip path,
Codex should be able to use the local proxy/TUN route and load normally.
Actual behavior
Codex still fails / hangs, while the browser and Microsoft Store can use the same network/proxy setup.
Related issues
This seems related to, but not fully solved by, the following issues:
- https://github.com/openai/codex/issues/18675  
  Windows Codex app DNS/network fails in sandbox despite network enabled; cannot reach local proxy.
- https://github.com/openai/codex/issues/17137  
  Windows app sandbox refresh fails with localhost proxy / Clash Verge TUN. This was reportedly fixed, but this issue still reproduces on OpenAI.Codex_26.422.3464.0.
- https://github.com/openai/codex/issues/18647  
  Windows desktop app intermittently fails streamed responses behind Clash Verge Rev proxy.
- https://github.com/openai/codex/issues/17610  
  Windows desktop app hangs / MoAppHang.
- https://github.com/openai/codex/issues/16374  
  Codex desktop app freezes / MoAppHang.
Question
Is the Microsoft Store Codex app expected to support Windows localhost proxies / Clash Verge TUN setups from inside the AppContainer/WebView2/sandbox environment?
If yes, what additional diagnostics should I collect to identify why Codex still hangs even after loopback exemption and WinHTTP proxy import?

### What steps can reproduce the bug?

## Steps to reproduce
1. Install Codex from Microsoft Store.
2. Use Windows with a local proxy/VPN client, e.g. Clash Verge / Mihomo.
3. Enable the local proxy:
   - Mixed proxy: `127.0.0.1:7897`
   - TUN mode: enabled
   - Rule mode: enabled
4. Confirm the system/browser can access ChatGPT/OpenAI through the proxy.
5. Launch the Microsoft Store Codex app.
6. Codex fails to load or becomes unresponsive.
7. Add AppContainer loopback exemption:
   ```powershell
   CheckNetIsolation LoopbackExempt -a -n="OpenAI.Codex_2p2nqsd0c76g0"
8. Import system proxy into WinHTTP:
      netsh winhttp import proxy source=ie
   
9. Restart Codex and try again.
10. Codex still fails to load / hangs, even though the proxy works for browser/system traffic.
如果它要求更短版，就填：
```markdown
1. Install Microsoft Store Codex on Windows.
2. Use Clash Verge / Mihomo with local proxy `127.0.0.1:7897`, TUN enabled, rule mode enabled.
3. Verify browser can access ChatGPT/OpenAI through the proxy.
4. Launch Codex.
5. Codex fails to load / hangs.
6. Add `OpenAI.Codex_2p2nqsd0c76g0` to `CheckNetIsolation LoopbackExempt`.
7. Run `netsh winhttp import proxy source=ie`.
8. Restart Codex.
9. Codex still fails / becomes unresponsive.

### What is the expected behavior?

_No response_

### Additional information

_No response_