Skip to content

Enable GitHub-hosted inference for Codex - #54606

Draft
pelikhan with Copilot wants to merge 25 commits into
mainfrom
copilot/add-codex-engine-support
Draft

Enable GitHub-hosted inference for Codex#54606
pelikhan with Copilot wants to merge 25 commits into
mainfrom
copilot/add-codex-engine-support

Conversation

Copilot AI commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Codex workflows can now select GitHub-hosted inference through the existing top-level model field. Setting engine: codex with model: copilot-large configures Codex’s BYOK path for GitHub Inference Cloud and GitHub Models.

engine: codex
model: copilot-large

permissions:
  copilot-requests: write
  • Provider routing

    • Infer the GitHub provider from copilot-large.
    • Preserve explicit engine.provider and engine.model-provider overrides.
    • Resolve and validate the selected provider endpoint through AWF reflection.
  • Authentication

    • Use COPILOT_GITHUB_TOKEN for GitHub-hosted inference.
    • Support ${{ github.token }} with copilot-requests: write.
    • Retain existing OpenAI credentials for other Codex models.
  • Network configuration

    • Include Copilot domains in Codex’s runtime and sanitization allowlists.
    • Keep provider endpoint validation strict without falling back to unrelated endpoints.
  • Coverage and documentation

    • Add compiler, engine, and harness tests for provider selection, credentials, and endpoint routing.
    • Document Codex configuration with copilot-large.
    • Add a release changeset.

Copilot AI and others added 2 commits August 21, 2026 19:39
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title Support Copilot inference models with Codex Enable GitHub-hosted inference for Codex Aug 21, 2026
Copilot AI requested a review from pelikhan August 21, 2026 19:51
@pelikhan

Copy link
Copy Markdown
Collaborator

@copilot enable this feature on a few agentic workflows using copilot in this repo

Copilot AI and others added 2 commits August 21, 2026 20:28
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI commented Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

@copilot enable this feature on a few agentic workflows using copilot in this repo

Enabled GitHub-hosted Codex inference in smoke-codex, issue-arborist, and duplicate-code-detector with model: copilot-large and copilot-requests: write. Recompiled their lockfiles in commit 78e7dee4f3.

@pelikhan

Copy link
Copy Markdown
Collaborator

@copilot not copilot-large... copilot/* configures copilot as the inference provider.

Ex: copilot/auto

Copilot AI and others added 2 commits August 21, 2026 21:10
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI commented Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

@copilot not copilot-large... copilot/* configures copilot as the inference provider.

Ex: copilot/auto

Updated Codex routing to use the copilot/* provider prefix and strip it before invoking Codex. The example workflows now use model: copilot/auto. Addressed in 34616c9aa6 (with test wording cleanup in acd7b83bf1).

@pelikhan

Copy link
Copy Markdown
Collaborator

@copilot in this mode, you need to use codex BYOK route or it will fail (see error in agent job at https://github.com/github/gh-aw/actions/runs/32527867880/job/96913833938). Review codex byok guidance and configure the GitHub copilot inference endpoint as a BYOK provider. merge main and recompile

Copilot AI and others added 7 commits August 21, 2026 21:47
…ine-support

# Conflicts:
#	.github/workflows/duplicate-code-detector.lock.yml
#	.github/workflows/issue-arborist.lock.yml
#	.github/workflows/smoke-codex.lock.yml

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI commented Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

@copilot in this mode, you need to use codex BYOK route or it will fail (see error in agent job at https://github.com/github/gh-aw/actions/runs/32527867880/job/96913833938). Review codex byok guidance...

Configured Codex’s copilot/* route as a custom BYOK Responses provider, isolated the real GitHub token from sandboxes, selected the Copilot gateway for external detection, merged main, and recompiled workflows. Addressed in 2ff3af9701.

@pelikhan

Copy link
Copy Markdown
Collaborator

/smoke-codex

@github-actions

github-actions Bot commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

🔮 The oracle has spoken through Smoke Codex

@pelikhan

Copy link
Copy Markdown
Collaborator

Copilot AI and others added 2 commits August 23, 2026 00:24
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI commented Aug 23, 2026

Copy link
Copy Markdown
Contributor Author

@copilot investigate https://github.com/github/gh-aw/actions/runs/32605816618/job/97110738580

The run failed before Codex started: AWF could not resolve RUNNER_TOOL_CACHE referenced by Serena’s MCP mount because the gateway container did not receive that environment variable. Commit 87473f5 forwards the non-secret runner path only when a configured MCP mount needs it and recompiles affected workflows, including smoke-codex.

@github-actions

Copy link
Copy Markdown
Contributor

PR Triage

  • Category: feature
  • Risk: high
  • Score: 45/100 (impact 30, urgency 5, quality 10)
  • Recommended action: defer

Draft PR, large diff (64 files) touching auth/provider routing across many generated workflows. No reviews yet, mergeable_state blocked. Recommend deferring until draft status is lifted and CI/review are available.

Generated by 🔧 PR Triage Agent · auto · 44.3 AIC · ⌖ 5.93 AIC · ⊞ 8.3K ·

@pelikhan

Copy link
Copy Markdown
Collaborator

@copilot merge main and recompile

…ine-support

# Conflicts:
#	.github/workflows/archie.lock.yml
#	.github/workflows/cloclo.lock.yml
#	.github/workflows/daily-compiler-quality.lock.yml
#	.github/workflows/daily-file-diet.lock.yml
#	.github/workflows/daily-function-namer.lock.yml
#	.github/workflows/daily-mcp-concurrency-analysis.lock.yml
#	.github/workflows/daily-testify-uber-super-expert.lock.yml
#	.github/workflows/developer-docs-consolidator.lock.yml
#	.github/workflows/duplicate-code-detector.lock.yml
#	.github/workflows/glossary-maintainer.lock.yml
#	.github/workflows/go-fan.lock.yml
#	.github/workflows/linter-miner.lock.yml
#	.github/workflows/mcp-inspector.lock.yml
#	.github/workflows/purelock.lock.yml
#	.github/workflows/semantic-function-refactor.lock.yml
#	.github/workflows/sergo.lock.yml
#	.github/workflows/smoke-codex.lock.yml
#	.github/workflows/smoke-copilot-aoai-apikey.lock.yml
#	.github/workflows/smoke-copilot-aoai-entra.lock.yml
#	.github/workflows/smoke-copilot-arm.lock.yml
#	.github/workflows/smoke-copilot.lock.yml
#	.github/workflows/spec-extractor.lock.yml
#	.github/workflows/spec-librarian.lock.yml
#	.github/workflows/terminal-stylist.lock.yml
#	.github/workflows/typist.lock.yml

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI commented Aug 23, 2026

Copy link
Copy Markdown
Contributor Author

@copilot merge main and recompile

Merged the latest main and recompiled all agentic workflows in 3f65e5ec68.

@pelikhan

Copy link
Copy Markdown
Collaborator

/smoke-codex

@github-actions

github-actions Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

🔮 The oracle has spoken through Smoke Codex

@github-actions

Copy link
Copy Markdown
Contributor

PR Triage

  • Category: feature (Codex GitHub-hosted inference support)
  • Risk: high
  • Priority score: 40/100 (impact 30, urgency 5, quality 5)
  • Recommended action: defer

Rationale: Large cross-cutting change (64 files, +1087/-370) touching provider routing, auth, network allowlists, and regenerating dozens of .lock.yml workflow files. CI agent check run failed on latest commit. Draft status. High blast radius across many workflows warrants careful human review before promotion; defer until CI passes and scope is narrowed/reviewed.

Generated by 🔧 PR Triage Agent · auto · 26.2 AIC · ⌖ 6.14 AIC · ⊞ 8.4K ·

@pelikhan

Copy link
Copy Markdown
Collaborator

@copilot merge main and recompile

…ine-support

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI commented Aug 23, 2026

Copy link
Copy Markdown
Contributor Author

@copilot merge main and recompile

Merged the latest main and recompiled all 289 agentic workflows in 04034b071f; recompilation produced no additional lockfile delta.

@pelikhan

Copy link
Copy Markdown
Collaborator

/smoke-codex

@github-actions

github-actions Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

🔮 The oracle has spoken through Smoke Codex

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants