Codex first-class provider parity (Astra / Sol / Terra / Luna / 5.5 / Spark) #1162

Make Codex a first-class Solenta provider, the same way Grok and Claude are: every listed model can run, resume, search, write the worktree, call first-party MCP (including Planboard), and show usage/context in the UI.

Live CLI on 2026-09-09: codex-cli 0.153.4, ~/.codex/models_cache.json visibility=list:

• gpt-6-astra (flagship, 272k context, efforts through ultra, images, search, experimental send_user_message_async)
• gpt-5.6-sol / terra (272k, through ultra, images, search)
• gpt-5.6-luna (272k, through max, images, search)
• gpt-5.5 (272k, through xhigh, images, search)
• gpt-5.3-codex-spark (128k, through xhigh, text only)

Hidden (keep out of the picker): gpt-reserve, codex-auto-review. Retired vs snapshot 0.153.2: gpt-5.4-mini is gone from the live cache.

Already shipped, do not re-do:

• sandbox + writable_roots (Codex threads run in a read-only sandbox; Solenta never passes --sandbox #170, Managed worktrees cannot run git add or git commit because their Git metadata is read-only #847, Codex sandbox still blocks git commits in managed worktrees (live miss of #847) #1160)
• -c web_search=live (Codex live web search (--search) cannot be enabled per thread #174 / Codex exec resume rejects --search; follow-up turns die (exit 2) #799)
• MCP auto-approve after exec (Explicit Grok worker forks are impossible when approval policy is never #846)
• todo_list → thread planSteps (Codex work log drops most JSON item types (file_change, reasoning, web_search, mcp_tool_call, todo_list) #171)
• sessionPinsModel (model switch drops resume)

Still open / remaining:

• Codex sessions advertise Planboard MCP writes but omit issue tools and reject authorized GitHub writes #927 Planboard issue_* tools omitted (Codex MCP URL has no ?projectId=)
• Use native attachment flags for codex (-i) and opencode (-f) instead of prompt-text paths #176 native codex exec -i attachments (prompt-text paths today)
• Verify Codex git commits on Linux sandbox #1161 Linux git-commit sandbox verify
• Context ring hidden: Codex modelInfo has no contextTokens
• Snapshot still lists gpt-5.4-mini
• supportsSteer is false (queue-only while running)
• Spark is text-only; image attach is still offered

Do not treat #847/#1160 plan:done as proof a live Codex session can git-commit; #1161 is the Linux check. Prefer host-side issue_* tools over sandboxed gh.