Repository navigation
Windows Remote: every new projectless chat fails trust verification with malformed path #39855
Description
What version of the Codex App are you using?
Windows Store package observed from the running process:
OpenAI.Codex_26.818.3698.0_x64__2p2nqsd0c76g0
Both the Windows Codex app and the ChatGPT mobile app are fully updated as of 2026-08-20.
What platform is your computer?
Windows x64.
What issue are you seeing?
Creating any new projectless Codex chat from Remote in the ChatGPT mobile app fails with a project-trust error:
Can't verify project trust for C:\Users\<user>\Documents\Codex\2026-08-20hello-3.
Open the repository in Codex on the remote computer and make a trust choice,
then select that repository's original directory and try again.
You can also start in Read only mode.
This is systematic for every newly created Remote chat, not specific to one repository.
The displayed path is malformed: it omits the separator between the date directory and generated chat directory:
Malformed: C:\Users\<user>\Documents\Codex\2026-08-20hello-3
Actual: C:\Users\<user>\Documents\Codex\2026-08-20\hello-3
The generated hello-3 directory:
- exists at the actual path;
- is an empty projectless-chat folder;
- is not a Git repository;
- is not a symlink, junction, shortcut, or reparse point;
- has normal read/write permissions;
- can be opened directly in Codex.
Opening that folder on the desktop does not solve the systematic problem because the next new Remote chat creates a different generated projectless directory and fails the same way.
Local inspection also found:
- Remote Control has persisted installation and environment IDs;
- the Remote configuration migration is marked complete;
- the parent Codex workspace is already trusted;
- no stale saved-project registration exists for
hello-3; hello-3is correctly absent from saved local projects because it is projectless;- filesystem read/write/cleanup succeeds.
This appears to be a Remote projectless-chat classification and Windows path-joining defect: a generated projectless workspace is treated as a repository requiring an individual trust decision, while its validation path is constructed without a directory separator.
What steps can reproduce the bug?
- Run the current Codex desktop app on Windows.
- Enable Remote Control.
- In the current ChatGPT mobile app, connect to the Windows machine.
- Start a brand-new projectless Codex chat from Remote.
- Observe the project-trust failure for the automatically generated chat folder.
- Inspect the reported path and notice the missing separator between the date directory and chat slug.
- Start another new projectless Remote chat.
- Observe the same failure for the newly generated directory.
Opening/trusting the previous generated folder does not prevent the next new Remote chat from failing.
What is the expected behavior?
A new projectless Remote chat should start without being treated as a Git repository requiring project trust.
The generated Windows path should be canonical and correctly joined:
C:\Users\<user>\Documents\Codex\YYYY-MM-DD\<chat-slug>
If a trust check is intentionally required, it should apply to the stable projectless workspace root rather than requiring a separate desktop action for every automatically generated chat folder.
Actual behavior
Every new projectless Remote chat is blocked by repository trust verification. The error references a nonexistent malformed path with a missing backslash. Read-only mode is the only reliable workaround.
Impact
Remote cannot create normal writable projectless chats on the affected Windows machine. The user must either accept read-only mode, pre-create each chat on the desktop, or repeatedly interact with automatically generated folders, which defeats Remote's purpose.
Activity
github-actions commentedon Aug 21, 2026
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
anjel2026 commentedon Aug 25, 2026
Additional reproducible distinction and workaround:
This suggests the Voice creation flow may use a different session/workspace initialization path that avoids the affected projectless-chat trust classification or malformed Windows path join. It is also a practical workaround while the normal Remote new-session flow is affected.
searchadvert commentedon Aug 25, 2026
bryanpettit80-cpu commentedon Aug 26, 2026
I can reproduce this on Windows through Codex Remote from the ChatGPT Android app with No project selected.
One potentially important difference from the original report: in my case the path displayed in the trust error is correctly joined and points to the generated projectless directory structure, e.g.:
Remote still fails with:
The mobile UI clearly shows No project selected when the failure occurs.
This suggests the malformed Windows path described in the original report may be a secondary symptom rather than the root cause. The underlying issue appears consistent with #39678: the automatically generated disposable/projectless workspace is being routed through repository trust validation as though it were a pre-existing project that should already have an explicit trust decision.
In other words, the trust failure can still occur even when Windows path joining is correct.
I have a screenshot of the failure with the correctly formed path and can provide additional version/environment details if useful.
FuriousBot1 commentedon Aug 26, 2026
I can reproduce this consistently on a Windows host controlled from the ChatGPT Android Remote UI.
Environment:
Steps / observed behavior:
%USERPROFILE%\Documents\Codex\YYYY-MM-DD\<generated-slug>.A difference from the original report: in this reproduction, the displayed path contains the correct directory separators (
...\YYYY-MM-DD\<slug>). The trust/classification failure therefore also occurs without the missing-backslash formatting defect.Troubleshooting already attempted, with no change:
.gitmarker from the parent folder (retained as a backup).Result: new writable Remote chats are still blocked by the same trust error. Read-only mode is the only remaining path, which does not allow normal product use.
This suggests the projectless workspace may be classified as a repository before initialization, independently of the Windows path-joining and path-casing issues. Redacted logs or thread identifiers can be provided through an OpenAI-controlled private channel if useful.
NightRa commentedon Aug 26, 2026
+1, this has been quite annoying and blocking my work, would be glad to see it fixed
ESKehler commentedon Aug 27, 2026
Initial Windows/Android reproduction: generated workspace fails trust before thread dispatch
This began as one new-chat incident with retries. A later independent brand-new Remote chat reproduced the same failure again; see the follow-up comment below. Existing chats can still work, but every brand-new Remote chat attempt observed during the current test window has failed before dispatch.
Environment:
26.818.8289.0I attempted to start one brand-new Remote chat. Android displayed:
The Windows path was correctly joined in this reproduction, confirming that the original missing-separator symptom is not required.
Three retries during the same incident created:
I checked the generated directories read-only. All three:
Additional host-side boundary:
thread/startrequest was recorded in the exact failure window;Observed sequence:
This makes the incident both a task-creation blocker and an orphan-directory leak. Read-only mode is not equivalent when the intended task requires normal writable or system-management capabilities.
Private host names, usernames, prompt-derived directory names, message contents, task IDs, and raw local paths are omitted.
ESKehler commentedon Aug 27, 2026
android-remote-new-chat-success-26.908.40834.zip
Update 2026-09-15: fixed for me in Codex Desktop
26.908.40834Normal projectless New chat from Android Remote now works for me on this version. I used the normal New chat button, sent
test, and received the reply on Android—not Voice creation and not another agent creating the thread.The successful test was at 02:59 PDT / 09:59 UTC on September 15:
26.908.40834, recorded in the host log for this exact attempt.0.154.0-alpha.6.2.09:59:22.791921200Z, the app server acceptedtestwithturn_trigger: "remote_android".09:59:47.098Zafter 24,157 ms, and its response appeared on the phone.This is one confirmed successful retest of my previously failing normal creation flow. I cannot say whether this was the first fixed release or whether it resolves every other reporter's setup. The earlier affected versions and reproduction evidence are preserved below.
Earlier reproduction (historical)
Previous result: persisted after upgrade and reproduced with a single-word prompt
Affected Codex Desktop builds now confirmed:
26.818.8289.026.820.9563.026.820.10647.0— downloaded but not yet running or testedThe same failure reproduced on the current running build at approximately 20:00 local time. The complete new-chat prompt was simply:
Android again rejected the brand-new projectless Remote chat with the same trust-verification error and a correctly joined Windows path.
Host-side checks for this minimal reproduction:
This confirms the defect survives the upgrade from
26.818.8289.0to26.820.9563.0; it is not specific to a complicated prompt or the earlier build.Earlier on 2026-08-27, a separate brand-new projectless Remote chat also failed with the same error. Its generated directory was likewise empty and non-Git, with no durable thread row or host-side
thread/start/turn/startentry in the corresponding failure window.Every brand-new Remote chat attempt observed during these test windows has failed this way. I am not claiming that every future attempt must fail, but the behavior is repeatable across separate prompts, timestamps, and now two Codex Desktop versions.
The attached screenshot has the host name, username, absolute path, and prompt-derived folder redacted.
Richaaldo commentedon Aug 27, 2026
Confirmed on a Windows host with ChatGPT/Codex desktop app 26.820.60940 and ChatGPT Android Remote, both updated.
The failure persists on 2026-08-27:
C:\Users\<user>\Documents\Codex\2026-08-26\<prompt-slug>-<n>.So the issue is not limited to malformed path joining: even a correctly joined generated projectless path can fail the same trust check.
AletheiaVox commentedon Aug 27, 2026
Additional reproduction with two independent Windows hosts and one mobile client.
Environment
26.820.9563.0after updating todaycodex-cli 0.150.0-alpha.8Observed behavior
Host-side trust check
trustedinconfig.toml.Troubleshooting attempted, with no change
A separately installed CLI
0.150.1also has no effect, as expected: the desktop Remote host continues to use its bundled CLI.The cross-host result makes a single corrupt host trust database unlikely. It also suggests the failure is broader than projectless-workspace classification alone, because a saved and already-trusted project is rejected through the same mobile new-task flow.
deskcode85 commentedon Aug 28, 2026
Still broken for me. I created a new folder, reset both chatgpt apps on desktop and android, still the same error
Ghiath-Najjar commentedon Aug 28, 2026
Having the same issue since yesterday and it's very annoying
AletheiaVox commentedon Aug 28, 2026
Follow-up to my earlier reproduction report:
One more useful boundary and workaround: on the same two Windows hosts where the official ChatGPT Remote flow fails its project-trust check, I can still create new writable Codex tasks through Hearth Remote, an unofficial open-source client I maintain. This works from both its Windows client (on another computer) and phone PWA.
Hearth Remote uses a local supervised Codex app-server listener instead of the official paired Remote new-task flow. The task it creates are normal local Codex tasks. This suggests that the host filesystem, trust configuration, and underlying task-creation capability are healthy; the failure is specific to the official Remote project/trust preflight before dispatch.
For anyone blocked by this issue and comfortable testing a public alpha, the project is here: AletheiaVox/HearthRemote. It's Windows-only, requires Tailscale, is not affiliated with OpenAI, and depends on experimental app-server interfaces that might change.
ESKehler commentedon Aug 28, 2026
my workaround is to just tell my dedicated debugger chat to make the new thread for me (i had sent screenshots of each failure, so it already knew the prompts)
i do have a skill i made to make sure the threads have the ability to do that even when computer use is not activated, but it might just work even without that
still annoying that you can't do it through the officially supported UI route, but, doing it via another chat that already exists is way less overhead
AletheiaVox commentedon Aug 29, 2026
@ ESKehler
Yeah, that works. I mostly created that app because Codex doesn't natively support Windows-to-Windows remote access or accessing anything when the Codex desktop app isn't running. And then I discovered it also bypasses the Trust issue discussed here so I thought I'd package it as an easy installer for other people. Glad things are working out for you though!
sheikings-lgtm commentedon Aug 29, 2026
Confirmed on a newer Windows package:
OpenAI.Codex_26.825.5331.0_x64__2p2nqsd0c76g0(2026-08-29).On Android ChatGPT Remote, every mobile-created New chat fails — including
No projectand with plain text such as123. Existing Remote Recents remain fully usable and accept follow-up prompts, so the host, pairing, and existing project files are healthy.A full desktop-app restart and remote-service restart did not change the behavior. The target path changes for each new chat (for example
<user>\Documents\Codex\2026-08-29\test-3), making per-folder trust impractical. This looks like a Remote new-thread regression rather than a user configuration issue.Could the team confirm whether a fix is planned, and which desktop/mobile version will contain it?
DavidTheArchitect commentedon Aug 29, 2026
Some mechanism detail from black-box testing on Windows. I think two separate defects are being conflated in this thread, and that explains why the workaround in #40002 fixes it for some people and not others.
There are two independent failures. Projectless chats hit both.
config.tomlkeys that the app itself wrote lowercased, so nothing matches.For an existing project, only (1) applies. There is a lowercase entry available to re-case, so the #40002 workaround fixes it. I can confirm that independently: adding an exact-case duplicate alongside the lowercase key immediately restored new Remote chats in a saved project.
For a projectless chat, (1) and (2) compose. There is no entry to re-case, so the #40002 workaround is not applicable on its own. I believe that is what one commenter above ran into when they applied it and stayed blocked. Both conditions have to be satisfied: an entry must exist for the generated directory, and it must be in the exact casing Remote displays. Supplying both makes projectless Remote chats work again.
Observations that may help whoever picks this up:
Documents\Codexhas no effect. Configs that predate the regression contain separate entries for<dir>,<dir>\outputsand<dir>\work, which is consistent with that.config/readre-readsconfig.tomlfrom disk on every call. An entry added externally is visible to the already-running app-server immediately, with no restart of Codex Desktop orcodex.exe. Tested against an isolated app-server: callconfig/read, append an entry to the file, callconfig/readagain, and the new key is present in the second response.thread/startdoes not enforce trust. It succeeds against an untrusted cwd. The gate appears to be on the client side, afterconfig/read, which matches the failure happening before thread creation.join(homedir, 'Documents', 'Codex'). So pointing that setting at an already-trusted directory cannot work around this from Remote.<slug>,<slug>-2, ... skipping any name whose directory already exists. So pre-creating and pre-trusting folders does not help; the app simply picks the next unused name.Status with a local workaround in place: a small filesystem watcher that writes a trust entry, in both spellings, for each new directory under
Documents\Codexas it appears restores normal service. Both projectless and in-project Remote chats have worked consistently since. Because trust entries do not require the path to exist, also pre-writing the collision names<slug>-2 .. <slug>-Nmakes a retry succeed even if the watcher loses the race against the trust check.Environment: Windows 11 x64, Codex Desktop 26.825.x, codex-cli 0.150.0, official ChatGPT Android app.
This is all black-box observation, so please treat the internals as inference rather than confirmed fact. Happy to provide more detail if it would help.
anjel2026 commentedon Aug 30, 2026
Additional reproduction: projectless Voice thread is displayed as a different Project on Android Remote and then hangs indefinitely
I found a stronger reproduction that may connect the projectless trust failure with the stale/incorrect Project metadata reported in #41197.
Reproduction
Android behavior
When Android first attempts to open the thread, the header initially shows the expected projectless state.
For example, one screenshot shows:
新しいリアルタイム音声チャット(New realtime voice chat)チャット(Chats)While the thread is still loading, the header then changes without any user action.
A second screenshot of the same failure state shows:
リモート(Remote)タイムカード(Timecard), which is a completely different existing ProjectI did not move or rename the thread.
Important control
I checked the same thread again on the Windows Codex Desktop host after Android displayed the different Project.
Desktop still showed the thread as No project / projectless.
It had not actually been moved into the
TimecardProject.This means the Project change shown on Android appears to be a Remote/mobile metadata or presentation change rather than an actual host-side reassignment of the thread.
Possible failure sequence
This could explain why projectless Remote sessions fail even when the actual thread exists and works normally on the Windows host.
It may also explain why Voice appears to partially bypass the original new-thread failure: Voice can create the projectless thread, but opening that thread afterward through the normal Android Remote UI still encounters the Project-association mismatch.
Possible relationship to recent Project reassignment behavior
A related possibility is that the newer ability to move threads between No project and named Projects introduced separate states for:
Issue #40703 already demonstrates that visual Project placement and the actual runtime working directory can diverge.
If Android Remote is resolving the display-side Project association while the underlying thread remains projectless, that mismatch could be contributing to both the endless loading behavior and the trust-verification failures.
Related issues
I have screenshots showing the Android header changing from the projectless
Chatsstate to the unrelatedTimecardProject while loading. I can upload them manually if useful.The key observation is:
Android Remote shows the thread as belonging to another Project, while Windows Desktop simultaneously confirms that the same thread is still projectless.
llmeking commentedon Sep 1, 2026
I can confirm that this issue is still reproducible on a newer Windows Codex build.
Environment:
26.825.6671.00.151.0-alpha.7.2Every new projectless Remote chat creates a different directory, for example:
Each attempt fails with the project-trust verification error. Trusting the parent directory or one generated child directory does not fix the next attempt because a new child directory is generated every time.
As a control test, Remote works correctly when I select an existing saved project: a message sent from the phone is received and answered successfully. This confirms that Remote pairing, networking, account access, and normal saved-project trust are working. Only writable projectless Remote chat creation fails.
The projectless root is a real physical directory, not a symlink, junction, shortcut, or reparse point. File-system access is normal, and the generated directories are empty and are not Git repositories.
Please prioritize a fix in the next Windows Codex update. The Remote trust check should not require a separate trust decision for every automatically generated projectless directory, and the Windows path should be joined and canonicalized correctly. A regression test for writable projectless chats started from Remote on Windows would also be appreciated.