Route Copilot auto requests to Codex-compatible Responses models by Copilot · Pull Request #9422 · github/gh-aw-firewall

Copilot · 2026-10-03T17:14:46Z

Copilot auto works on Chat Completions, but Responses requests send the unsupported literal auto and fail before inference. Codex needs a concrete model that supports both Responses and its tool surface, without changing provider or credentials.

Responses routing: For native Copilot requests, select the highest-version available Codex model whose inventory entry advertises Responses support; respect the configured model policy.
Fail closed: Refresh the inventory once, then return an explicit 503 if no eligible model is available.
Preserve behavior and observability: Leave Chat Completions and custom Copilot targets unchanged; log the requested and resolved model.

{"model":"copilot/auto","input":"..."}

On /responses, the proxy rewrites model to an eligible inventory model, such as gpt-5.3-codex.

Fixes [awf] Route Copilot auto to a Codex-compatible Responses model #9421

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot

Copilot review overview

🟡 Changes recommended

Policy handling can bypass routing, and disabled Copilot models can be selected.

Review effort: Balanced
Findings: 2

Open (2)

Exclude disabled models from Codex candidate selection · New
Avoid blocking auto routing before concrete model policy validation · New

What changed in this PR

Routes native Copilot Responses auto requests to an eligible Codex model while preserving Chat Completions and custom-target behavior.

Changes:

Adds inventory- and policy-aware Responses model selection.
Refreshes inventory before returning an explicit 503.
Documents behavior and adds focused tests.

File	Description
`docs/troubleshooting.md`	Clarifies native OpenAI versus Copilot `auto`.
`docs/api-proxy-sidecar.md`	Documents Copilot Responses routing.
`containers/api-proxy/server.js`	Enables routing for native Copilot targets.
`containers/api-proxy/model-config.js`	Integrates resolution and refresh behavior.
`containers/api-proxy/model-body-rewriter.js`	Selects and rewrites eligible Codex models.
`containers/api-proxy/copilot-auto-responses.test.js`	Tests routing, refresh, failure, and exclusions.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

+    .filter(record => record &&
+      /(?:^|[-.])codex(?:$|[-.])/i.test(record.id) &&
+      Array.isArray(record.supportedEndpoints) &&
+      record.supportedEndpoints.some(endpoint => ['/responses', '/v1/responses', 'responses'].includes(endpoint)) &&


lpcox · 2026-10-03T17:36:30Z

@copilot merge main and address review feedback

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-10-03T17:53:53Z

@copilot merge main and address review feedback

Merged main in e83418e and addressed both findings in 8a985da: disabled inventory models are excluded, and policy is enforced against resolved concrete models rather than literal auto. Added regression coverage; all 2,142 API proxy tests pass. CodeQL found no alerts, and a fallback read-only review found no issues (the automated reviewer’s configured model was unavailable).

github-actions · 2026-10-03T18:02:27Z

Documentation Preview

Documentation has been built for this PR.

Download preview artifact

To view locally:

Download the docs-preview-pr-9422 artifact from the workflow run
Unzip and open index.html in your browser

Built from commit db00bbb

github-actions · 2026-10-03T18:02:27Z

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

🛡️ Egress verdict from Smoke Copilot Network Isolation

github-actions · 2026-10-03T18:02:28Z

❌ Smoke Copilot BYOK AOAI (api-key) reports failed. AOAI BYOK (api-key) mode investigation needed...

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)

github-actions · 2026-10-03T18:02:28Z

✅ Smoke Claude passed

Generated by Smoke Claude for #9422

github-actions · 2026-10-03T18:02:29Z

✅ Build Test Suite completed successfully!

Generated by Build Test Suite for #9422

github-actions · 2026-10-03T18:02:29Z

❌ Smoke Gemini reports failed. Facets need polishing...

💎 Faceted by Smoke Gemini

github-actions · 2026-10-03T18:02:30Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

Tested by Smoke Chroot

github-actions · 2026-10-03T18:02:31Z

🔌 Smoke Services — All services reachable! ✅

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-10-03T18:02:31Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-10-03T18:02:33Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-10-03T18:02:37Z

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-10-03T18:02:39Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

📡 OTel tracing validated by Smoke OTel Tracing

github-actions · 2026-10-03T18:03:00Z

✅ Security Guard completed successfully!

Security review complete: PR #9422 adds Copilot auto-to-Codex routing with proper model policy enforcement, authentication gating, and defensive input validation. No security weakening detected. Changes are feature-gated behind native Copilot environment checks and model policy guards.

Generated by Security Guard for #9422

github-actions · 2026-10-03T18:03:00Z

Smoke Cloud Hypervisor completed. Cloud Hypervisor + Copilot passed.

Cloud Hypervisor + Copilot smoke test by Smoke Cloud Hypervisor

github-actions · 2026-10-03T18:03:43Z

❌ Smoke Copilot BYOK AOAI (Entra) reports failed. AOAI BYOK (Entra) mode investigation needed...

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)

github-actions · 2026-10-03T18:05:18Z

Smoke Test: Claude Engine Validation

API status: ✅ PASS
GitHub check: ✅ PASS
File status: ✅ PASS

Overall result: PASS

Generated by Smoke Claude for #9422 · claude · haiku45 · 24.3 AIC · ⊞ 6.2K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:05:19Z

Smoke Copilot: PASS ✅

MCP: ✅ (last merged: "[WIP] Fix Squid crashes with assertion failure in Claude inference")
github.com: ✅ (HTTP 200)
File write/read: ✅
Author: @Copilot · Assignees: @lpcox @Copilot

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:05:36Z

✅ Smoke Test: Copilot BYOK (Direct) Mode

✅ GitHub MCP: PR Upgrade gh-aw prerelease to v0.90.3 #9415, test: add Cloud Hypervisor enclave conformance and gated host probes #9399 fetched
✅ GitHub.com: HTTP 200
✅ File Write/Read: /tmp/gh-aw/agent/smoke-test-copilot-byok.txt
✅ BYOK Inference: Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy → api.githubcopilot.com

Overall: PASS

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:05:47Z

EGRESS_RESULT allow=pass deny=pass

✅ Allowed domain (api.github.com): HTTP 200
✅ Blocked domain (example.com): blocked (curl failed with a TLS error: self-signed certificate)
Overall: PASS

cc @lpcox

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:06:05Z

Smoke Test: Cloud Hypervisor + Copilot

list_pull_requests (github/gh-aw-firewall): PASS — returned PR Route Copilot auto requests to Codex-compatible Responses models #9422.
curl https://github.com: FAIL — blocked at sandbox permission layer (no HTTP status obtained, not 200/301).
Write/read /tmp/gh-aw/agent/smoke-cloud-hypervisor-*.txt: PASS.
curl (example.com/redacted) (expect block): FAIL — blocked at sandbox permission layer, not a 000/403 from curl itself.

Note: outbound curl is denied by the sandbox before execution, so checks 2 and 4 could not be validated via actual HTTP response codes.

Cloud Hypervisor + Copilot smoke test by Smoke Cloud Hypervisor
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:06:29Z

OTEL smoke test (re-verified locally)

✅ S1 Module: otel.js loads, isEnabled()=true; exports startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled, etc.
✅ S2 Tests: 3 suites, 68/68 passed
✅ S3 Env forwarding: trace/parent-span IDs in env-passthrough.ts and api-proxy-env-config.ts; OTLP endpoint in api-proxy-env-config.ts
✅ S4 Token tracker: onUsage hook present in token-tracker-http.js
⚠️ S5 Diagnostics: no api-proxy otel.jsonl span file in this run (api-proxy not exercised; not treated as a failure)

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:06:46Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	92.91%	92.91%	➡️ +0.00%
Statements	91.38%	91.38%	➡️ +0.00%
Functions	89.55%	89.55%	➡️ +0.00%
Branches	85.04%	85.03%	📉 -0.01%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/nvx/one-shot-adapter.ts`	83.5% → 82.9% (-0.60%)	80.3% → 79.8% (-0.56%)
`src/log-directory-setup.ts`	96.8% → 100.0% (+3.18%)	96.9% → 100.0% (+3.13%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-10-03T18:06:50Z

Smoke services: ✅ Redis PONG · ✅ pg_isready accepting connections · ✅ SELECT 1 → 1. PASS

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:07:02Z

Chroot Version Comparison

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.14	Python 3.12.14	✅ YES
Node.js	v24.21.0	v2.98.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Result: Not all tests passed (Node.js mismatch), so the smoke-chroot label was not added.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:07:11Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	❌	N/A	❌ FAIL
Bun	hono	❌	N/A	❌ FAIL
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	❌	N/A	❌ FAIL
Deno	std	❌	N/A	❌ FAIL
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 pkg passed	✅ PASS
Go	env	✅	1/1 pkg passed	✅ PASS
Go	uuid	✅	1/1 pkg passed	✅ PASS
Java	gson	❌	N/A	❌ FAIL
Java	caffeine	❌	N/A	❌ FAIL
Node.js	clsx	✅	all passed	✅ PASS
Node.js	execa	✅	all passed	✅ PASS
Node.js	p-limit	✅	all passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 5/8 ecosystems passed — FAIL

Failures:

Bun / Deno: the install scripts (curl ... | bash/sh) were denied by the sandbox ("Permission denied and could not request permission"), so bun/deno were not installed and the tests were not run.
Java: Maven failed with Could not create local repository at /home/runner/.m2/repository (LocalRepositoryNotAccessibleException) for both projects.

All 8 repos cloned successfully. The build-test label was not added because of the failures.

Generated by Build Test Suite for #9422 · copilot · auto · 19.3 AIC · ⊞ 11.8K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-10-03T18:07:35Z

Merged PR lookup: ❌
PR detail lookup: ❌
Playwright title check: ❌
Smoke file write/read: ✅
AWF build: ❌
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

Initial plan

35fa07f

Copilot AI assigned Copilot and lpcox Oct 3, 2026

Copilot started work on behalf of lpcox October 3, 2026 17:15 View session

Copilot AI linked an issue Oct 3, 2026 that may be closed by this pull request

[awf] Route Copilot auto to a Codex-compatible Responses model #9421

Closed

fix: route Copilot auto for Responses requests

38b838f

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Route Copilot auto to a Codex-compatible Responses model~~ Route Copilot auto requests to Codex-compatible Responses models Oct 3, 2026

Copilot finished work on behalf of lpcox October 3, 2026 17:26

Copilot AI requested a review from lpcox October 3, 2026 17:26

lpcox marked this pull request as ready for review October 3, 2026 17:28

Copilot AI balanced review requested due to automatic review settings October 3, 2026 17:28

Copilot started reviewing on behalf of lpcox October 3, 2026 17:29 View session

Copilot AI reviewed Oct 3, 2026

View reviewed changes

Copilot started work on behalf of lpcox October 3, 2026 17:36 View session

Copilot AI and others added 2 commits October 3, 2026 17:39

chore: merge main into Copilot Responses routing branch

e83418e

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

fix: enforce concrete model policy for Copilot Responses auto

8a985da

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox October 3, 2026 17:54

lpcox added the ready-for-aw label Oct 3, 2026

lpcox enabled auto-merge (squash) October 3, 2026 18:02

lpcox had a problem deploying to aoai-model October 3, 2026 18:03 — with GitHub Actions Failure

github-actions Bot added the smoke-copilot label Oct 3, 2026

github-actions Bot added the smoke-claude label Oct 3, 2026

github-actions Bot added smoke-copilot-byok smoke-copilot-network-isolation Copilot network-isolation egress smoke test labels Oct 3, 2026

github-actions Bot added the smoke-services label Oct 3, 2026

github-actions Bot mentioned this pull request Oct 3, 2026

Warn when Copilot API-proxy mode disables native web tools #9420

Merged

lpcox deployed to aoai-model October 3, 2026 18:07 — with GitHub Actions Active

lpcox merged commit 140c4fa into main Oct 3, 2026
129 of 135 checks passed

lpcox deleted the copilot/awf-route-copilot-auto-to-codex branch October 3, 2026 18:14

Conversation

Copilot AI commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟡 Changes recommended

Uh oh!

Uh oh!

lpcox commented Oct 3, 2026

Uh oh!

Copilot AI commented Oct 3, 2026

Uh oh!

github-actions Bot commented Oct 3, 2026

Documentation Preview

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 3, 2026

Smoke Test: Claude Engine Validation

Uh oh!

github-actions Bot commented Oct 3, 2026

Uh oh!

github-actions Bot commented Oct 3, 2026

Uh oh!

github-actions Bot commented Oct 3, 2026

Uh oh!

github-actions Bot commented Oct 3, 2026

Smoke Test: Cloud Hypervisor + Copilot

Uh oh!

github-actions Bot commented Oct 3, 2026

Uh oh!

github-actions Bot commented Oct 3, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions Bot commented Oct 3, 2026

Uh oh!

github-actions Bot commented Oct 3, 2026

Copilot AI commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading

github-actions Bot commented Oct 3, 2026 •

edited

Loading