lidge-jun · robin-bially · Sep 23, 2026 · Sep 23, 2026 · Sep 23, 2026 · Sep 23, 2026
@@ -207,6 +207,29 @@ timeout, and limit.
 omitted keys unchanged. `timeoutMs` uses the runtime integer bounds
 (1–2147483647 ms).
 
+The web-search sidecar card carries the same control shape: the model picker's first row is
+**Off**. Off does two things, and the second one is the reason the row exists. OpenCodex stops
+intercepting `web_search`, and the Codex integration writes Codex's own
+`web_search = "disabled"` mode into `~/.codex/config.toml` — because Codex keeps declaring its
+native hosted `web_search` tool until its own mode says otherwise, and the tool a client
+advertises is the one the model reaches for. An operator who wants an MCP search server to be
+the only search path needs both halves; otherwise the model keeps calling the native tool.
+
+`web_search` is Codex's key with its own value space (`disabled`, `cached`, `indexed`, `live`).
+OpenCodex only ever writes `disabled` while the sidecar is off, and removes its marker-owned line
+again once the sidecar is back on — a re-enabled sidecar whose client still had the native tool
+switched off would have nothing to intercept. The write needs a managed `~/.codex/config.toml` (`ocx
+sync`); the management response reports it as `codexWebSearch`, and both surfaces that can show it
+do: the Dashboard's web-search card warns when the write did not happen, and `ocx agent sidecar web
+--enabled off` prints whether it happened. Only a save that moves the switch triggers the write, so
+the ordinary "nothing changed" answer reports `not_requested` and prints nothing extra. A root
+`web_search` line the operator set by hand is replaced while the sidecar is off, since two root keys
+of the same name are not valid TOML. Its exact text is recorded in the Codex journal and put back in
+its place when the sidecar is switched on again — including for a line added after the journal
+snapshot was taken, which `ocx restore` alone cannot cover. The same record is what still
+recognizes our own `disabled` line when the Codex app has rewritten `config.toml` and dropped the
+comment that named its owner.
+
 You can still set `enabled: false` in `config.json` if you prefer to edit the
 file directly. Anthropic-OAuth search and image description reuse the existing
 Claude Code OAuth fingerprint precedent, but should be soak-tested with the

@@ -31,8 +31,18 @@ stay writable).
 ```bash
 ocx agent sidecar web --list
 ocx agent sidecar web --model gpt-5.6-luna
+ocx agent sidecar web --enabled off
 ```
 
+`--enabled off` is the same switch as the Dashboard's Off row: OpenCodex stops running the
+sidecar and the Codex integration writes `web_search = "disabled"` into `~/.codex/config.toml`,
+which is what lets an MCP search server be the only search path. `--enabled on` removes that
+marker-owned line again. When the save actually moves the switch, the command reports the
+Codex-side write it triggered (`codexWebSearch` in `--json`, a trailing `Codex config:` line
+otherwise) and points at `ocx sync` when it could not happen; a save that leaves the switch
+where it was has nothing to report and prints no `Codex config:` line. The flag works for
+`vision` too.
+
 ### `ocx effort [status|set|clear]`
 
 Inspect or change main and subagent reasoning-effort caps through the live proxy, or the local

@@ -657,7 +657,7 @@ Images API paths and response shape expected by Codex.
 
 | Field | Type | Default | Meaning |
 | --- | --- | --- | --- |
-| `enabled?` | `boolean` | on when usable | Master switch. |
+| `enabled?` | `boolean` | on when usable | Master switch. When false, OpenCodex stops intercepting `web_search` AND the Codex integration writes `web_search = "disabled"` into `~/.codex/config.toml`. |
 | `backend?` | `"openai" \| "anthropic" \| "xai" \| "gemini" \| "exa"` | `openai` | Explicit wins; unset always resolves to `openai`. `anthropic` and `xai` run only when explicitly configured; `gemini` and `exa` remain reserved until their executors ship. |
 | `model?` | `string` | backend-dependent | `gpt-5.6-luna` for OpenAI, `claude-sonnet-5` for Anthropic, or `grok-4.6` for xAI. Legacy explicit `gpt-5.4-mini` migrates on start. |
 | `exaApiKey?` | `string` | none | Operator key for the `exa` backend. Write-only: management reads never return the stored value. |

@@ -356,6 +356,8 @@ export const de: Record<TKey, string> = {
   "dash.visionModelHint": "Modell zur Beschreibung von Bildern für nur-Text-Routen. Erfordert ChatGPT-Login.",
   "dash.webSearchSidecar": "Websuche-Sidecar",
   "dash.webSearchSidecarHint": "Backend und Modell für die Websuche gerouteter Modelle auswählen.",
+  "dash.webSearchOff": "Aus",
+  "dash.webSearchCodexSync": "Gespeichert. Codex' Config wurde nicht neu geschrieben – nutze „Modelle synchronisieren“.",
   "dash.webSearchStream": "Antworten live streamen",
   "dash.webSearchStreamHint": "Führenden Text und Reasoning live streamen, bis das Modell über einen Tool-Aufruf entscheidet; der Rest bleibt für das Abfangen der Suche gepuffert. Text vor einer Suche kann sich teilweise wiederholen.",
   "dash.visionSidecar": "Vision-Sidecar",

@@ -368,6 +368,8 @@ export const en = {
   "dash.visionModelHint": "Model used to describe images for text-only routed models. Requires ChatGPT login.",
   "dash.webSearchSidecar": "Web search sidecar",
   "dash.webSearchSidecarHint": "Choose the backend and model used for web search on routed models.",
+  "dash.webSearchOff": "Off",
+  "dash.webSearchCodexSync": "Saved. Codex's config was not rewritten — run Sync models to apply it.",
   "dash.webSearchStream": "Stream answers live",
   "dash.webSearchStreamHint": "Stream the model’s leading text and reasoning live until it decides on a tool call; the rest of the turn stays buffered for search interception. Text written before a search may partially repeat.",
   "dash.visionSidecar": "Vision sidecar",

@@ -358,6 +358,8 @@ export const fr: Record<TKey, string> = {
   "dash.visionModelHint": "Modèle utilisé pour décrire les images aux modèles routés en mode texte uniquement. Nécessite une connexion à ChatGPT.",
   "dash.webSearchSidecar": "Service auxiliaire de recherche Web",
   "dash.webSearchSidecarHint": "Choisissez le moteur et le modèle utilisés pour la recherche Web sur les modèles routés.",
+  "dash.webSearchOff": "Désactivé",
+  "dash.webSearchCodexSync": "Enregistré. La config de Codex n'a pas été réécrite — lancez « Synchroniser les modèles ».",
   "dash.webSearchStream": "Diffuser les réponses en direct",
   "dash.webSearchStreamHint": "Diffuse en direct le texte initial et le raisonnement du modèle jusqu’à ce qu’il décide d’appeler un outil ; le reste du tour demeure en mémoire tampon pour intercepter la recherche. Le texte produit avant une recherche peut être partiellement répété.",
   "dash.visionSidecar": "Service auxiliaire de vision",

@@ -365,6 +365,8 @@ export const ja: Record<TKey, string> = {
   "dash.visionModelHint": "テキスト専用ルーティングモデルで画像を説明するために使うモデル。ChatGPT ログインが必要です。",
   "dash.webSearchSidecar": "ウェブ検索サイドカー",
   "dash.webSearchSidecarHint": "ルーティングモデルでウェブ検索に使うバックエンドとモデルを選択します。",
+  "dash.webSearchOff": "オフ",
+  "dash.webSearchCodexSync": "保存しました。Codex の設定はまだ書き換えられていません —「モデルを同期」を実行してください。",
   "dash.webSearchStream": "回答をライブ配信",
   "dash.webSearchStreamHint": "モデルがツール呼び出しを決定するまで、先頭のテキストと推論をライブ配信します。以降は検索インターセプトのためバッファされます。検索前のテキストは一部繰り返される場合があります。",
   "dash.visionSidecar": "ビジョンサイドカー",

@@ -360,6 +360,8 @@ export const ko: Record<TKey, string> = {
   "dash.visionModelHint": "텍스트 전용 라우팅 모델에 이미지를 설명하는 데 사용되는 모델입니다. ChatGPT 로그인 필요.",
   "dash.webSearchSidecar": "웹 검색 사이드카",
   "dash.webSearchSidecarHint": "라우팅 모델의 웹 검색에 쓸 백엔드와 모델을 고릅니다.",
+  "dash.webSearchOff": "끔",
+  "dash.webSearchCodexSync": "저장했습니다. Codex 설정이 아직 다시 작성되지 않았습니다 — “모델 동기화”를 실행하세요.",
   "dash.webSearchStream": "응답 실시간 스트리밍",
   "dash.webSearchStreamHint": "모델이 도구 호출을 결정할 때까지 앞부분 텍스트와 추론을 실시간 스트리밍합니다. 이후는 검색 가로채기를 위해 버퍼링됩니다. 검색 전 텍스트가 일부 반복될 수 있습니다.",
   "dash.visionSidecar": "비전 사이드카",

@@ -365,6 +365,8 @@ export const ru: Record<TKey, string> = {
   "dash.visionModelHint": "Модель, которая описывает изображения для маршрутизируемых моделей, работающих только с текстом. Требуется вход в аккаунт ChatGPT.",
   "dash.webSearchSidecar": "Сайдкар веб-поиска",
   "dash.webSearchSidecarHint": "Выберите бэкенд и модель, используемые для веб-поиска на маршрутизируемых моделях.",
+  "dash.webSearchOff": "Выкл",
+  "dash.webSearchCodexSync": "Сохранено. Конфигурация Codex не перезаписана — запустите «Синхронизировать модели».",
   "dash.webSearchStream": "Стримить ответы вживую",
   "dash.webSearchStreamHint": "Транслировать начальный текст и рассуждения вживую, пока модель не решит вызвать инструмент; остальное буферизуется для перехвата поиска. Текст до поиска может частично повторяться.",
   "dash.visionSidecar": "Сайдкар для изображений",

@@ -366,6 +366,8 @@ export const tr: Record<TKey, string> = {
   "dash.visionModelHint": "Salt metin yönlendirilen modeller için görselleri tanımlamakta kullanılan model. ChatGPT girişi gerektirir.",
   "dash.webSearchSidecar": "Web arama yan aracı (sidecar)",
   "dash.webSearchSidecarHint": "Yönlendirilen modellerde web araması için kullanılan arka ucu ve modeli seçin.",
+  "dash.webSearchOff": "Kapalı",
+  "dash.webSearchCodexSync": "Kaydedildi. Codex yapılandırması henüz yeniden yazılmadı — “Modelleri senkronize et”i çalıştırın.",
   "dash.webSearchStream": "Yanıtları canlı akıt",
   "dash.webSearchStreamHint": "Model bir araç çağrısına karar verene kadar baştaki metni ve akıl yürütmeyi canlı akıtır; kalanı arama yakalama için arabelleğe alınır. Aramadan önce yazılan metin kısmen tekrarlanabilir.",
   "dash.visionSidecar": "Görsel yan aracı (sidecar)",

@@ -358,6 +358,8 @@ export const vi: Record<TKey, string> = {
   "dash.visionModelHint": "Model được sử dụng để mô tả hình ảnh cho các model định tuyến chỉ hỗ trợ văn bản. Yêu cầu đăng nhập ChatGPT.",
   "dash.webSearchSidecar": "Web search sidecar",
   "dash.webSearchSidecarHint": "Chọn backend và model được sử dụng cho tìm kiếm web trên các models định tuyến.",
+  "dash.webSearchOff": "Tắt",
+  "dash.webSearchCodexSync": "Đã lưu. Cấu hình Codex chưa được ghi lại — hãy chạy “Đồng bộ models”.",
   "dash.webSearchStream": "Phát trực tuyến (Stream) các câu trả lời trực tiếp",
   "dash.webSearchStreamHint": "Phát trực tuyến các văn bản dẫn dắt và quá trình lý luận của model cho đến khi nó quyết định gọi một công cụ; phần còn lại của lượt chạy sẽ được lưu đệm (buffered) để can thiệp tìm kiếm. Văn bản được viết trước một tìm kiếm có thể lặp lại một phần.",
   "dash.visionSidecar": "Vision sidecar",

@@ -255,6 +255,8 @@ export const zhTW: Record<TKey, string> = {
   "dash.visionModelHint": "為純文字路由模型描述圖像的模型。需要 ChatGPT 登入。",
   "dash.webSearchSidecar": "網頁搜尋附屬服務",
   "dash.webSearchSidecarHint": "選擇路由模型進行網頁搜尋時使用的後端和模型。",
+  "dash.webSearchOff": "關閉",
+  "dash.webSearchCodexSync": "已儲存。Codex 的設定尚未重寫 — 請執行「同步模型」。",
   "dash.webSearchStream": "即時串流輸出回答",
   "dash.webSearchStreamHint": "即時串流輸出開頭的文字和推理，直到模型決定呼叫工具；其餘部分為攔截搜尋而保持緩衝。搜尋前的文字可能會部分重複。",
   "dash.visionSidecar": "視覺附屬服務",

@@ -360,6 +360,8 @@ export const zh: Record<TKey, string> = {
   "dash.visionModelHint": "为纯文本路由模型描述图像的模型。需要 ChatGPT 登录。",
   "dash.webSearchSidecar": "网页搜索附属服务",
   "dash.webSearchSidecarHint": "选择路由模型进行网页搜索时使用的后端和模型。",
+  "dash.webSearchOff": "关闭",
+  "dash.webSearchCodexSync": "已保存。Codex 的配置尚未重写 — 请运行“同步模型”。",
   "dash.webSearchStream": "实时流式输出回答",
   "dash.webSearchStreamHint": "实时流式输出开头的文本和推理，直到模型决定调用工具；其余部分为拦截搜索而保持缓冲。搜索前的文本可能会部分重复。",
   "dash.visionSidecar": "视觉附属服务",

@@ -17,6 +17,8 @@ import {
   shadowCallModelOptions,
   webSearchSidecarSelectionForModel,
   updateJobLabel,
+  webSearchEnabledPatch,
+  sidecarCodexWritePending,
   visionEnabledPatch,
   visionMaxDescriptionsPatch,
   visionReasoningLadder,
@@ -441,10 +443,14 @@ export function DashboardSidecarPanels({ d }: { d: Dash }) {
     t, settings, settingsSaving, syncing, toggleCodexAutoStart, toggleCodexDesktopAuthless,
     toggleCodexClientCompaction,
     sidecar, sidecarSaving, sidecarModels, visionModels, models, saveSidecar,
+    sidecarCodexApply,
     shadowCall, shadowCallSaving, shadowCallHelpTriggerRef, shadowCallHelpOpen, setShadowCallHelpOpen, saveShadowCall,
   } = d;
   const visionEnabled = sidecar?.vision?.enabled !== false;
   const visionModel = visionEnabled ? (sidecar?.vision?.model ?? "gpt-5.6-luna") : "";
+  const webSearchEnabled = sidecar?.webSearch?.enabled !== false;
+  // Same shape as the Vision card: Off is a row in the picker, and choosing a model is the way back.
+  const webSearchModel = webSearchEnabled ? (sidecar?.webSearch?.model ?? "gpt-5.6-luna") : "";
   const persistedVisionReasoning = sidecar?.vision?.reasoning ?? "low";
   const visionLadder = visionReasoningLadder(models, visionModel);
   const visionReasoning = clampVisionReasoningToLadder(visionLadder, persistedVisionReasoning);
@@ -553,6 +559,15 @@ export function DashboardSidecarPanels({ d }: { d: Dash }) {
           <div className="dash-sidecar-copy">
             <div className="font-semibold">{t("dash.webSearchSidecar")}</div>
             <div className="muted setting-hint">{t("dash.webSearchSidecarHint")}</div>
+            {/* The switch is stored even when Codex's own key was not rewritten. Saying nothing
+                here would read as "the native tool is off now", which is exactly the state the
+                operator asked for and may not have. */}
+            {sidecarCodexWritePending(sidecarCodexApply) && (
+              <div className="notice-warn" role="status">
+                <IconAlert />
+                <span>{t("dash.webSearchCodexSync")}</span>
+              </div>
+            )}
           </div>
           {/* Same two-row shape as the vision card: the model select owns the first row,
               and the secondary control sits right-aligned on its own row below. Sharing the
@@ -561,10 +576,17 @@ export function DashboardSidecarPanels({ d }: { d: Dash }) {
           <div className="dash-delegation-controls">
             <div className="dash-sidecar-select-row">
               <Select
-                value={sidecar?.webSearch?.model ?? "gpt-5.6-luna"}
-                options={sidecarModels}
+                value={webSearchModel}
+                options={[{ value: "", label: t("dash.webSearchOff") }, ...sidecarModels]}
                 onChange={model => {
-                  void saveSidecar({ webSearch: webSearchSidecarSelectionForModel(models, sidecarModels, model) });
+                  if (model === "") {
+                    void saveSidecar(webSearchEnabledPatch(false));
+                    return;
+                  }
+                  const patch: SidecarPatch = { webSearch: webSearchSidecarSelectionForModel(models, sidecarModels, model) };
+                  // Choosing a model is the activation control: turning the sidecar back on from Off.
+                  if (!webSearchEnabled) patch.webSearch = { ...patch.webSearch, enabled: true };
+                  void saveSidecar(patch);
                 }}
                 disabled={!sidecar || sidecarSaving}
                 label={t("dash.sidecarModel")}
@@ -579,7 +601,7 @@ export function DashboardSidecarPanels({ d }: { d: Dash }) {
                 onClick={() => {
                   void saveSidecar({ webSearch: { streamRoutedModelOutput: !sidecar?.webSearch?.streamRoutedModelOutput } });
                 }}
-                disabled={!sidecar || sidecarSaving}
+                disabled={!webSearchEnabled || !sidecar || sidecarSaving}
                 aria-label={t("dash.webSearchStream")}
                 aria-pressed={sidecar?.webSearch?.streamRoutedModelOutput === true}
               >