| duplicate compaction install for | exception | error | |
| failed to read image at | exception | error | |
| failed to read policy file | exception | error | |
| guardian review session could not clear MCP servers | exception | error | |
| permission profile requests full-disk filesystem writes… | exception | error | |
| query key must list at least one allowed value | validation | error | |
| retryable error | exception | error | |
| Specify --uncommitted, --base, --commit, or provide custom… | exception | error | |
| timed out pairing code-mode host bulk websocket | exception | error | |
| unsupported input item | exception | error | |
| UpdateProcThreadAttribute failed | exception | error | |
| `codex sandbox` is not supported on this operating system | exception | error | |
| credentials path is not a regular file | exception | error | |
| cyber policy | exception | error | |
| error loading otel config | exception | error | |
| filesystem glob subpath | validation | error | |
| MCP server ` ` is running in environment ` `, expected | exception | error | |
| recovered handshake succeeded but server info was missing | exception | error | |
| runner pipe closed before exit | exception | error | |
| thread not found | exception | error | |
| git command ` ` produced non-UTF-8 output | exception | error | |
| uses a reserved namespace | validation | error | |
| MCP client startup timed out after | exception | error | |
| no-follow filesystem operations require a normalized path | validation | error | |
| sandbox must be one of | exception | error | |
| CopySid failed for | exception | error | |
| duplicate agent role name | validation | error | |
| rules prefix_rule at index | validation | error | |
| unknown configuration field | validation | error | |
| Windows sandbox setup is missing or out of date; rerun the… | exception | error | |
| expected an absolute path, got | validation | error | |
| failed to serialize default config | exception | error | |
| must be a 64-character hex SHA-256 digest | validation | error | |
| guardian review session was not available after spawn | exception | error | |
| invalid host | exception | error | |
| MCP client not initialized | exception | error | |
| prefix rule requires at least one token | exception | error | |
| runner spawn_ready write failed: pipe_write lock poisoned | exception | error | |
| the workload identity process-session registry is… | exception | error | |
| api error | exception | error | |
| failed to create psuedo console: HRESULT | exception | error | |
| features.token_budget.auto_compact_fallback_buffer_tokens… | validation | error | |
| is installed but missing its package metadata at | exception | error | |
| runner: no pipe-out provided | validation | error | |
| credentials are not allowed in path URIs | exception | error | |
| directory already exists | exception | error | |
| in-process app-server shutdown failed | exception | error | |
| no-follow filesystem operations require an absolute path | validation | error | |
| runner: no pipe-in provided | validation | error | |
| cannot update network.socks_url on a running proxy | validation | error | |
| `codex agents` is unavailable while workload identity is… | validation | error | |
| compaction request used thread , but codex turn belongs to | exception | error | |
| failed to determine current user from environment | exception | error | |
| failed to read effective config for selected permission… | validation | error | |
| invalid windows sandbox level | validation | error | |
| MCP server URL ` ` must include a host | validation | error | |
| MCP tool arguments must be a JSON object, got | validation | error | |
| OAuth authorization server issuer does not match… | exception | error | |
| recursive no-follow removal is unsupported | exception | error | |
| refusing to reuse existing mismatched file | exception | error | |
| remote control pairing status requires pairingCode or… | validation | error | |
| requirements.toml default_permissions | validation | error | |
| `sandbox_mode` and `permission_profile` overrides cannot… | validation | error | |
| tool ' ' is disabled for MCP server | exception | error | |
| agent role file at must define `developer_instructions | validation | error | |
| code-mode IPC frame length exceeds u32 | exception | error | |
| Codex Exec exited with | exception | error | |
| CreateRestrictedToken failed | exception | error | |
| goals.max_goal_token_budget exceeds the maximum supported… | validation | error | |
| invalid OTLP metrics configuration | validation | error | |
| plugin id ` ` belongs to marketplace ` `, but --marketplace… | validation | error | |
| agent role ` ` must define a description | validation | error | |
| API key must be provided via stdin (e.g. printenv… | validation | error | rust, stdin, api-key, missing-credentials |
| cannot update network.enable_socks5_udp on a running proxy | validation | error | |
| CODEX_HOME points to | exception | error | |
| `codex sandbox setup` currently requires --elevated | validation | error | |
| environment network policy cannot override a disabled… | validation | error | |
| did not include a thread id | exception | error | |
| execution-scoped network proxy is already running | exception | error | |
| failed to read rules file | exception | error | |
| failed to send OpenAI file request to | exception | error | |
| invalid --sandbox-state-json value | exception | error | |
| managed Codex version output was malformed | exception | error | |
| runner: empty capability SID list | exception | error | |
| must be absolute | validation | error | |
| fs/readFile returned invalid base64 dataBase64 | validation | error | |
| invalid pattern element | exception | error | |
| managed network proxy refresh semaphore closed | exception | error | |
| MCP tool returned an error | exception | error | |
| `--remote ` is only supported for interactive TUI commands… | exception | error | |
| cannot update network.enable_socks5 on a running proxy | validation | error | |
| Codex process closed stdout. stderr_tail= | exception | error | |
| is empty | validation | error | |
| failed to generate CA key pair | exception | error | |
| failed to serialize or deserialize exec-server JSON | exception | error | |
| failed to update runtime denylist | exception | error | |
| filesystem path ` ` does not support nested entries | validation | error | |
| image is too large ( bytes; max bytes) | validation | error | |
| OSS provider not set but oss flag was used | exception | error | |
| turn completed event not received | exception | error | |