[Bug]: Routed models are loaded by Codex app-server but missing from Desktop model picker

[Lingchen97]

Summary

OpenCodex successfully injects 13 routed models into the Codex catalog, and the Codex CLI/app-server can read all of them, but Codex Desktop does not show any routed model in its model picker.

The desktop picker only shows the current native models:

• 5.6 Sol
• 5.6 Terra
• 5.6 Luna
• 5.5
• 5.4
• 5.4 Mini

Expected: routed entries such as input/glm-5.2, input/grok-4.5, and input/kimi-k2.7-code should also appear, as described in the OpenCodex “Codex App model picker” documentation.

This does not appear to be a stale catalog, failed injection, or stopped proxy:

• OpenCodex is healthy and running.
• model_catalog_json and openai_base_url are present as root settings.
• opencodex-catalog.json contains all 13 routed entries with visibility: "list".
• The Codex Desktop bundled CLI's codex debug models reads all 13 routed entries.
• A direct model/list request to the bundled Codex app-server also returns all routed entries.
• Fully quitting and reopening Codex Desktop does not change the picker.

Reproduction

1. Configure a custom OpenAI Responses-compatible provider:

   {
     "defaultProvider": "openai",
     "providers": {
       "openai": {
         "adapter": "openai-responses",
         "baseUrl": "https://chatgpt.com/backend-api/codex",
         "authMode": "forward"
       },
       "input": {
         "adapter": "openai-responses",
         "baseUrl": "https://example.invalid",
         "authMode": "key"
       }
     }
   }

2. Run ocx start.

3. Confirm that ~/.codex/config.toml contains:

   model_catalog_json = "/Users/example/.codex/opencodex-catalog.json"
   openai_base_url = "http://127.0.0.1:10100/v1"

4. Confirm that the generated catalog contains routed models with visibility: "list".

5. Run the Codex binary bundled with the desktop app:

   /Applications/ChatGPT.app/Contents/Resources/codex debug models

   Observe that the returned model list includes all routed input/... entries.

6. Fully quit and reopen Codex Desktop.

7. Open the model picker.

8. Observe that only native OpenAI models are displayed; none of the routed input/... models appear.

Logs and screenshots

$ ocx status
Proxy: running
Health: http://127.0.0.1:10100/healthz ok v2.7.31

$ /Applications/ChatGPT.app/Contents/Resources/codex --version
codex-cli 0.145.0-alpha.27

$ jq -r '.models[] | select(.slug | startswith("input/")) | [.slug, .visibility] | @tsv' ~/.codex/opencodex-catalog.json
input/grok-4.5               list
input/gpt-5.6-sol            list
input/glm-5.2                list
input/codex-auto-review      list
input/gemma-4                list
input/glm-4.7-flash          list
input/gpt-5.3-codex-spark    list
input/gpt-5.4                list
input/gpt-5.4-mini           list
input/gpt-5.5                list
input/gpt-5.6-luna           list
input/gpt-5.6-terra          list
input/kimi-k2.7-code         list

Additional diagnostic evidence:

• The bundled Codex app-server returns 20 models from model/list, including all 13 routed entries.
• The routed entries are returned as visible/non-hidden.
• Inspection of the current Desktop frontend bundle shows that the picker can switch from catalog visibility to an available_models allowlist when the remote use_hidden_models setting is active. In this environment, that allowlist appears to contain only native model ids. This would explain why the app-server sees the routed entries while the picker drops them.

Screenshot available if needed: the picker contains only 5.6 Sol, 5.6 Terra, 5.6 Luna, 5.5, 5.4, and 5.4 Mini.

Area

Other

Version

OpenCodex 2.7.31

Codex Desktop 26.715.70719 (build 5650)

Bundled codex-cli 0.145.0-alpha.27

OS

macOS 27.0 (build 26A5378n), Apple Silicon

Config shape

{
  "defaultProvider": "openai",
  "providers": {
    "openai": {
      "adapter": "openai-responses",
      "baseUrl": "https://chatgpt.com/backend-api/codex",
      "authMode": "forward"
    },
    "input": {
      "adapter": "openai-responses",
      "baseUrl": "<redacted relay URL>",
      "authMode": "key"
    }
  }
}

Checks

• I searched existing issues and docs first.
• I removed secrets, tokens, and personal data from logs and screenshots.

[Wibias]

Thanks for the thorough diagnostic work here - this is clearly not user error.

Your evidence is conclusive: OpenCodex is doing everything correctly on its side. The catalog contains all 13 routed models with visibility: "list", the app-server returns them via model/list, and the bundled CLI reads them all. The injection pipeline is working as designed.

The filtering you identified is happening inside the Codex Desktop frontend. When the remote use_hidden_models setting is active, the picker switches from catalog visibility to an available_models allowlist that only contains native OpenAI model IDs. That allowlist is controlled by the Desktop app's own remote configuration, not by anything OpenCodex writes to the catalog or config.

Unfortunately this is outside OpenCodex's control. The Desktop frontend applies its own allowlist on top of whatever the app-server reports, and there's no hook in the catalog format or config.toml to override it.

A couple of things worth trying in the meantime:

1. Check whether the use_hidden_models remote setting can be toggled off locally (it may be stored in the Desktop app's preferences/state DB under ~/Library/Application Support/ChatGPT/ on macOS).
2. The Codex CLI (codex in terminal) does not apply this allowlist, so routed models work there as expected. If the Desktop picker is the only blocker, the CLI remains a fully functional path.

[lidge-jun]

Status update after investigation: the missing entries are caused by Codex Desktop's remote model allowlist, which filters what the picker shows on the client side. OpenCodex correctly advertises the routed models through the app-server (as your logs show — they are loaded), but the Desktop picker only renders models on its own allowlist. This is outside what the proxy can control.

Keeping this open as an upstream-tracking issue so others hitting the same behavior can find it. If Desktop exposes a supported control for this allowlist, we can reassess whether any OpenCodex-side change is needed.

[lidge-jun]

Periodic status check (2026-07-24): unchanged, still upstream-blocked.

OpenCodex catalog generation and app-server delivery continue to work (routed models are loaded by the Codex app-server), but Codex Desktop filters its model picker against a remote available_models allowlist that the proxy cannot influence. No supported proxy-side override exists.

Keeping open for upstream tracking; will update when the Desktop picker behavior changes.

[Killin-7]

Apologies for the noise — the previous "test" comment from Killin-7 was posted accidentally by an automation during local troubleshooting. It carries no content and can be ignored. No action needed on this issue thread.

[github-actions]

_{Automated translation bookkeeping — detected language: unknown.}

[lidge-jun]

Triage: the proxy side is verified correct — routed visibility: "list" catalog entries are served (tests/api-catalog-route.test.ts:39). The models missing from the Desktop picker are filtered by the Desktop app's own remote allowlist, which is outside this repository. Leaving open as an upstream/documentation item.