Tools
Codex binds direct tool-call metadata to invocations so reused call IDs cannot fake Code Mode completeness
openai/codex #45185, merged 2026-09-12, attaches direct-call records to outputs before they enter history and sets `tool_calls_complete` only when an invocation's arguments are fully recorded, independently of whether the tool succeeded. It tracks call IDs that bypass dispatch specifically so their reuse cannot incorrectly establish Code Mode completeness, bounds pending recordings and retained metadata, and releases reservations on completion or cancellation. Executed-call metadata is now stripped from app-server raw response notifications and excluded from Guardian history retention budgets.
Source
↳ Follow the thread