@oneciel-ai/ciel-runtime 0.2.38 → 0.2.39

package/CHANGELOG.md

@@ -5,6 +5,13 @@ capability, followed by the complete commit ledger merged into each release.
 
 ## Unreleased
 
+## 0.2.39 — 2026-09-07
+
+- Fix native Codex startup failing with `invalid transport` when DuckDuckGo or
+  web_fetch is not registered. Inspect the effective workspace configuration
+  before adding process-only disabling overrides; never modify global or
+  workspace TOML. Concurrent non-native sessions retain their MCP settings.
+
 ## 0.2.38 — 2026-09-07
 
 - Disable inherited DuckDuckGo and web_fetch MCP servers with per-launch

package/ciel_runtime_support/managed_tool_injection.py

@@ -1,5 +1,10 @@
 """Launch-mode policy for Ciel-owned tools, never user MCP definitions."""
 from collections.abc import Mapping
+import json
+import logging
+from pathlib import Path
+import subprocess
+from subprocess import run as run_codex_config_probe
 from typing import Any
 
 
@@ -9,14 +14,57 @@ def should_inject_tool(*, native: bool, mode: str = "always") -> bool:
     return mode == "always" or (mode == "native") == native
 
 
-def codex_native_web_tool_overrides(*, native: bool) -> list[str]:
+def codex_native_web_tool_overrides(
+    *, native: bool, passthrough: list[str] | None = None,
+    env: dict[str, str] | None = None, cwd: Path | None = None,
+    codex: str = "codex",
+) -> list[str]:
     """Disable inherited replacement web MCPs for this launch, not on disk."""
     if not native:
         return []
-    return [
-        "-c", "mcp_servers.duckduckgo.enabled=false",
-        "-c", "mcp_servers.web_fetch.enabled=false",
-    ]
+    # An enabled-only table is NOT a valid Codex MCP transport, even when
+    # disabled. Never manufacture such a table on a fresh installation.
+    # Ask the same executable to resolve its effective configuration. Merely
+    # scanning project TOML is unsafe: Codex can ignore untrusted projects,
+    # which would turn our enabled override into another transport-less table.
+    # `mcp list` reads configuration; it does not connect to MCP servers.
+    arguments = passthrough or []
+    configuration_args = []
+    index = 0
+    while index < len(arguments):
+        argument = arguments[index]
+        if argument == "--":
+            break
+        if argument in ("-c", "--config", "-p", "--profile", "-C", "--cd") and index + 1 < len(arguments):
+            configuration_args.extend([argument, arguments[index + 1]])
+            index += 1
+        elif argument.startswith(("--config=", "--profile=", "--cd=")):
+            configuration_args.append(argument)
+        index += 1
+    try:
+        completed = run_codex_config_probe(
+            [codex, *configuration_args, "mcp", "list", "--json"],
+            env=env, cwd=cwd, capture_output=True, text=True, encoding="utf-8",
+            errors="replace", timeout=5, check=False,
+        )
+        if completed.returncode != 0:
+            raise ValueError("configuration probe failed")
+        entries = json.loads(completed.stdout)
+        if not isinstance(entries, list):
+            raise ValueError("unexpected MCP list shape")
+    except (OSError, subprocess.TimeoutExpired, ValueError):
+        # Never print probe output: MCP configuration can contain credentials.
+        logging.getLogger(__name__).warning(
+            "Could not inspect Codex MCP configuration; skipping native web MCP overrides"
+        )
+        return []
+    names = {entry.get("name") for entry in entries if isinstance(entry, dict)
+             and isinstance(entry.get("name"), str)}
+    result = []
+    for name in ("duckduckgo", "web_fetch"):
+        if name in names:
+            result.extend(["-c", f"mcp_servers.{name}.enabled=false"])
+    return result
 
 
 def select_managed_tools(

package/ciel_runtime_support/runtime_constants.py

@@ -97,7 +97,7 @@ OPENCODE_ENDPOINT_ALIASES = {
 }
 
 APP_NAME = "Ciel Runtime"
-VERSION = "0.2.38"
+VERSION = "0.2.39"
 CREDITS = "Credits: One Ciel LLC"
 PRELAUNCH_CANCEL = 10
 PRELAUNCH_LAUNCH_CODEX = 11

package/ciel_runtime_support/runtime_launch.py

@@ -927,7 +927,11 @@ def run_codex(
     )
     if workspace_mcp_launch is not None:
         codex_mcp_compat_args.extend(workspace_mcp_launch.codex_args)
-    codex_mcp_compat_args.extend(codex_native_web_tool_overrides(native=native_codex_enabled(provider)))
+    codex_mcp_compat_args.extend(codex_native_web_tool_overrides(
+        native=native_codex_enabled(provider),
+        codex=codex,
+        passthrough=[*codex_passthrough, *codex_mcp_compat_args], env=env, cwd=launch_cwd,
+    ))
     codex_yolo_args = codex_yolo_launch_args(codex_passthrough)
     if not use_native_codex and not use_codex_routed:
         env[CODEX_RUNTIME_API_KEY_ENV] = env.get(CODEX_RUNTIME_API_KEY_ENV) or "ciel-runtime-router-local-key"
@@ -1260,7 +1264,11 @@ def run_codex_app_server(
     try:
         if workspace_mcp_launch is not None:
             codex_mcp_compat_args.extend(workspace_mcp_launch.codex_args)
-        codex_mcp_compat_args.extend(codex_native_web_tool_overrides(native=native_codex_enabled(provider)))
+        codex_mcp_compat_args.extend(codex_native_web_tool_overrides(
+            native=native_codex_enabled(provider),
+            codex=codex,
+            passthrough=[*passthrough, *config_args, *codex_mcp_compat_args], env=env, cwd=launch_cwd,
+        ))
         config_args = [*config_args, *codex_mcp_compat_args]
         listen_url = codex_app_server_default_listen_url()
         app_server_args = codex_app_server_launch_args(

package/docs/journal/2026/09/07/fixes/codex/native-web-transport.okf

@@ -0,0 +1,39 @@
+title: Codex native web MCP overrides without cross-session configuration writes
+date: 2026-09-07
+status: source fixed and locally verified; not installed or published
+request:
+  symptom: Codex 0.153.4 fails with invalid transport in mcp_servers.duckduckgo.
+  isolation: Do not change global TOML; isolate workspace/provider sessions.
+evidence:
+  reproduction:
+    environment: Real Windows codex-cli 0.153.4 with temporary empty CODEX_HOME.
+    arguments: -c mcp_servers.duckduckgo.enabled=false mcp list --json
+    exit_code: 1
+    stderr: "Error: failed to load bootstrap configuration; invalid transport in mcp_servers.duckduckgo"
+  cause: The unconditional native override creates an enabled-only server table without command or URL when the server is absent.
+  official_documentation: https://learn.chatgpt.com/docs/extend/mcp?surface=cli
+  documented_constraints: STDIO requires command; HTTP requires url; project configuration applies only to trusted projects.
+implementation:
+  discovery: Run the same Codex executable's mcp list --json with the launch environment, cwd, and configuration arguments.
+  isolation: Apply enabled=false only in this process's arguments, only for servers in the effective list; no TOML writes.
+  workspace: Codex resolves workspace trust/configuration itself; no independent TOML parser or global edits.
+  native: Disable existing duckduckgo and web_fetch entries for CLI and app-server launches.
+  nonnative: No discovery process and no disabling overrides.
+  failure_policy: Five-second bounded probe; if unavailable/invalid, log a credential-free warning and skip overrides.
+  limitation: If discovery fails, replacement MCPs may remain enabled; this must not be described as successful suppression.
+verification:
+  real_cli_command: "$env:CIEL_TEST_CODEX_EXE='C:/Users/djlov/AppData/Local/Programs/OpenAI/Codex/bin/codex.exe'; python -m unittest discover -s tests -p test_codex_native_web_cli.py -v"
+  real_cli_output: "Ran 4 tests in 0.667s; OK"
+  real_cli_cases:
+    empty_home: No overrides; mcp list exits 0 instead of invalid transport.
+    concurrent_shared_home_different_workspaces: native false/false; nonnative true/true for duckduckgo/web_fetch.
+    concurrent_shared_home_same_workspace: native false/false; nonnative true/true for duckduckgo/web_fetch.
+    file_integrity: Shared test config SHA256 unchanged; no workspace config created by override logic.
+    project_configuration: Trusted and untrusted project cases match Codex's effective server list; project TOML bytes unchanged.
+    generated_transport: Native disabled; nonnative enabled; no MCP connection needed.
+  policy_tests: "python -m unittest discover -s tests -p test_managed_tool_injection.py -v: Ran 9 tests; OK"
+  runtime_group: "python scripts/run_test_group.py runtime: Ran 280 tests; OK (skipped=12), real CLI checks enabled"
+  static_checks: py_compile successful; ruff All checks passed; git diff --check clean.
+boundaries:
+  unchanged: Real user global/project TOML, active sessions, installation, npm registry, git remotes.
+  tested: Configuration loading and launch argument policy, not a paid model inference or remote user's TUI.

package/docs/journal/2026/09/07/release/stable/0.2.39.okf

@@ -0,0 +1,10 @@
+title: Publish native Codex transport regression fix as stable 0.2.39
+date: 2026-09-07
+authorization: User requested continuing through main branch deployment.
+version: 0.2.39
+scope: Commit verified fix and version increment, push main, verify CI and npm latest package.
+verification_plan:
+  local: Lint, isolated runtime tests, real Codex config-loader regression checks.
+  remote: Publish workflow runs all test groups before publishing.
+  artifact: Download published package and verify runtime version and fixed helper behavior.
+exclusions: No user configuration edits or active session restart.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneciel-ai/ciel-runtime",
-  "version": "0.2.38",
+  "version": "0.2.39",
   "description": "Universal AI coding-agent runtime and model-routing layer for Claude, Codex, AGY, ZCode, and compatible runtimes.",
   "license": "MIT",
   "author": "One Ciel LLC",