app-server.md +14 −10
232- `externalAgentConfig/import` - apply selected external-agent migration items by passing explicit `migrationItems` with `cwd` (`null` for home).232- `externalAgentConfig/import` - apply selected external-agent migration items by passing explicit `migrationItems` with `cwd` (`null` for home).
233- `config/value/write` - write a single configuration key/value to the user's `config.toml` on disk.233- `config/value/write` - write a single configuration key/value to the user's `config.toml` on disk.
234- `config/batchWrite` - apply configuration edits atomically to the user's `config.toml` on disk.234- `config/batchWrite` - apply configuration edits atomically to the user's `config.toml` on disk.
235235- `configRequirements/read` - fetch requirements from `requirements.toml` and/or MDM, including allow-lists and residency requirements (or `null` if you haven’t set any up).- `configRequirements/read` - fetch requirements from `requirements.toml` and/or MDM, including allow-lists, pinned `featureRequirements`, and residency/network requirements (or `null` if you haven't set any up).
236 236
237## Models237## Models
238 238
244{ "method": "model/list", "id": 6, "params": { "limit": 20, "includeHidden": false } }244{ "method": "model/list", "id": 6, "params": { "limit": 20, "includeHidden": false } }
245{ "id": 6, "result": {245{ "id": 6, "result": {
246 "data": [{246 "data": [{
247247 "id": "gpt-5.2-codex", "id": "gpt-5.4",
248248 "model": "gpt-5.2-codex", "model": "gpt-5.4",
249249 "upgrade": "gpt-5.3-codex", "displayName": "GPT-5.4",
250 "displayName": "GPT-5.2 Codex",
251 "hidden": false,250 "hidden": false,
252 "defaultReasoningEffort": "medium",251 "defaultReasoningEffort": "medium",
253252 "reasoningEffort": [{ "supportedReasoningEfforts": [{
254253 "effort": "low", "reasoningEffort": "low",
255 "description": "Lower latency"254 "description": "Lower latency"
256 }],255 }],
257 "inputModalities": ["text", "image"],256 "inputModalities": ["text", "image"],
264 263
265Each model entry can include:264Each model entry can include:
266 265
267266- `reasoningEffort` - supported effort options for the model.- `supportedReasoningEfforts` - supported effort options for the model.
268- `defaultReasoningEffort` - suggested default effort for clients.267- `defaultReasoningEffort` - suggested default effort for clients.
269- `upgrade` - optional recommended upgrade model id for migration prompts in clients.268- `upgrade` - optional recommended upgrade model id for migration prompts in clients.
269- `upgradeInfo` - optional upgrade metadata for migration prompts in clients.
270- `hidden` - whether the model is hidden from the default picker list.270- `hidden` - whether the model is hidden from the default picker list.
271- `inputModalities` - supported input types for the model (for example `text`, `image`).271- `inputModalities` - supported input types for the model (for example `text`, `image`).
272- `supportsPersonality` - whether the model supports personality-specific instructions such as `/personality`.272- `supportsPersonality` - whether the model supports personality-specific instructions such as `/personality`.
724 "requirements": {724 "requirements": {
725 "allowedApprovalPolicies": ["onRequest", "unlessTrusted"],725 "allowedApprovalPolicies": ["onRequest", "unlessTrusted"],
726 "allowedSandboxModes": ["readOnly", "workspaceWrite"],726 "allowedSandboxModes": ["readOnly", "workspaceWrite"],
727 "featureRequirements": {
728 "personality": true,
729 "unified_exec": false
730 },
727 "network": {731 "network": {
728 "enabled": true,732 "enabled": true,
729 "allowedDomains": ["api.openai.com"],733 "allowedDomains": ["api.openai.com"],
734} }738} }
735```739```
736 740
737741`result.requirements` is `null` when no requirements are configured. When present, the optional `network` object carries managed proxy constraints (domain rules, proxy settings, and unix-socket policy).`result.requirements` is `null` when no requirements are configured. See the docs on [`requirements.toml`](https://developers.openai.com/codex/config-reference#requirementstoml) for details on supported keys and values.
738 742
739### Windows sandbox setup (`windowsSandbox/setupStart`)743### Windows sandbox setup (`windowsSandbox/setupStart`)
740 744
868 872
869When `networkApprovalContext` is present, the prompt is for managed network access (not a general shell-command approval). The current v2 schema exposes the target `host` and `protocol`; clients should render a network-specific prompt and not rely on `command` being a user-meaningful shell command preview.873When `networkApprovalContext` is present, the prompt is for managed network access (not a general shell-command approval). The current v2 schema exposes the target `host` and `protocol`; clients should render a network-specific prompt and not rely on `command` being a user-meaningful shell command preview.
870 874
871875Codex deduplicates concurrent network approval prompts by destination (`host`, protocol, and port). The app-server may therefore send one prompt that unblocks multiple queued requests to the same destination, while different ports on the same host are treated separately.Codex groups concurrent network approval prompts by destination (`host`, protocol, and port). The app-server may therefore send one prompt that unblocks multiple queued requests to the same destination, while different ports on the same host are treated separately.
872 876
873### File change approvals877### File change approvals
874 878