@openclaw/codex 2026.10.1-beta.2 → 2026.10.5-beta.1

package/dist/.setup/{upstream-session-fork-ChSld66u.mjs → upstream-session-fork-Djp_yssT.mjs}

@@ -1,30 +1,32 @@
 import { i as isJsonObject, r as flattenCodexDynamicToolFunctions } from "./protocol-CANUwXJ3.mjs";
-import { m as sessionBindingIdentity } from "./session-binding-record-BZB8RgcF.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
-import { s as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-HG_Rr3W_.mjs";
-import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-Dp24d7-F.mjs";
-import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError } from "./rpc-error-hmWM21RB.mjs";
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
-import { r as projectCodexUserItemText } from "./transcript-history-projection-B9a7HwUV.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-DU_0biMD.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
+import { s as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-DDzeNQ8m.mjs";
+import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-CeyYScUC.mjs";
+import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError } from "./rpc-error-C98SHchT.mjs";
+import { a as readUpstreamUserText, i as readMirrorIdentity } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
+import { r as projectCodexUserItemText } from "./transcript-history-projection-DfKcoZCB.mjs";
 import { n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.mjs";
-import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BW8rd98k.mjs";
+import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
 import { n as readCodexSessionMeta } from "./session-catalog-provenance-CmsOE5mh.mjs";
-import "./request-jSbhc1sg.mjs";
-import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-0Gxk3_eq.mjs";
-import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-YSegaktH.mjs";
-import { P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-qhyYWbew.mjs";
-import { m as assertCodexThreadForkResponse, p as assertCodexThreadAcceptsDirectInput, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-C8lgBOoO.mjs";
-import { A as buildCodexNativeHookRelayId, Ct as mergeCodexThreadConfigs, D as assertCodexNativeHookRelayAllowed, H as parseCodexNativeToolCatalog, L as checkCodexThreadAppAvailability, N as resolveCodexNativeHookRelayEvents, O as buildCodexNativeHookRelayConfig, Q as fingerprintUserMcpServersConfigPatch, Tt as shouldBuildCodexPluginThreadConfig, U as applyCodexNativeSkillIsolation, W as resolveCodexNativeSkillIsolation, Z as fingerprintJsonObject, a as buildCodexThreadConfiguration, g as buildDeveloperInstructions, gt as buildCodexPluginThreadConfig, m as resolveCodexWebSearchPlan, q as codexDynamicToolsFingerprint } from "./thread-requests-CL1e8Wmx.mjs";
-import "./session-binding-Ce7BqiPN.mjs";
-import { n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy } from "./thread-policy-DoNxbhqt.mjs";
-import "./thread-ownership-DwuSrt3s.mjs";
-import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-ClzpdG3D.mjs";
-import { l as isCodexDynamicToolExcluded } from "./shell-dynamic-tools-D3Brj3g9.mjs";
-import { c as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-workspace-context-BY0jprWJ.mjs";
-import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-D68Whix6.mjs";
-import { n as prepareCodexSessionInitialization } from "./session-initialization-D6dtFQkE.mjs";
-import { createImportedCodexSession } from "./session-history-import-NWKPa4ZO.mjs";
+import "./request-Y8dmbqZ3.mjs";
+import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-C1YVVLEA.mjs";
+import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
+import { l as readCodexMirrorSourceFingerprint, o as fingerprintCodexMirrorSourceMessage } from "./transcript-mirror-attestation-BzUXnrvv.mjs";
+import { P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-ByIwuAC-.mjs";
+import { m as assertCodexThreadForkResponse, p as assertCodexThreadAcceptsDirectInput, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-y7nO6X9c.mjs";
+import { d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, p as shouldBuildCodexPluginThreadConfig } from "./project-doc-thread-config-BVcvnps8.mjs";
+import { T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, a as buildCodexThreadConfiguration, b as codexDynamicToolsFingerprint, h as resolveCodexWebSearchPlan, w as fingerprintJsonObject } from "./thread-requests-BgzJwJtS.mjs";
+import "./session-binding-JEHNMPsr.mjs";
+import "./thread-ownership-Be53aiaG.mjs";
+import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-MXEe7PB3.mjs";
+import { n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy } from "./thread-policy-CHgY-KNl.mjs";
+import { b as isCodexDynamicToolExcluded, f as codexNativeHookRemoteCredentialPath, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, o as buildCodexNativeHookRelayId, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-BUWIOrSr.mjs";
+import { c as parseCodexNativeToolCatalog, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-UMVoNjZz.mjs";
+import { c as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-workspace-context-CcwP3DA3.mjs";
+import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-CjRaV3bx.mjs";
+import { n as prepareCodexSessionInitialization } from "./session-initialization-Bi_2DKhc.mjs";
+import { createImportedCodexSession } from "./session-history-import-CaO8s6ta.mjs";
 import { isRecord, normalizeOptionalString, readNonBlankString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
@@ -32,13 +34,13 @@ import path from "node:path";
 import { lstat } from "node:fs/promises";
 import { root } from "openclaw/plugin-sdk/file-access-runtime";
 import { constants, createZstdDecompress } from "node:zlib";
-import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
+import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { appendSessionTranscriptMessagesByIdentity, readVisibleSessionTranscriptMessageEntries } from "openclaw/plugin-sdk/session-transcript-runtime";
 import { buildCodexUserMcpServersThreadConfigPatchForRuntime, resolveCodexMcpToolOverridesForAgent } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { buildNativeHookRelayCommandPlan } from "openclaw/plugin-sdk/native-hook-relay-runtime";
-import { appendSessionTranscriptMessagesByIdentity, readVisibleSessionTranscriptMessageEntries } from "openclaw/plugin-sdk/session-transcript-runtime";
 //#region extensions/codex/src/session-rollout-snapshot.ts
 const CHUNK_BYTES = 65536;
 const META_BYTES = 1048576;
@@ -267,16 +269,17 @@ async function prepareCanonicalCodexFork(params) {
 	});
 	assertCurrent();
 	const generation = randomUUID();
+	const relayId = buildCodexNativeHookRelayId({
+		agentId: created.agentId,
+		sessionKey: created.key,
+		sessionId: created.sessionId
+	});
 	const relay = buildNativeHookRelayCommandPlan({
 		provider: "codex",
 		agentId: created.agentId,
 		sessionKey: created.key,
 		config,
-		relayId: buildCodexNativeHookRelayId({
-			agentId: created.agentId,
-			sessionKey: created.key,
-			sessionId: created.sessionId
-		}),
+		relayId,
 		generation,
 		preToolUseLoopDetection: appServer.loopDetectionPreToolUseRelay
 	});
@@ -306,13 +309,17 @@ async function prepareCanonicalCodexFork(params) {
 		sessionKey: created.key,
 		modelId: params.model
 	};
-	const developerInstructions = [buildDeveloperInstructions(promptContext, { dynamicTools }), workspaceInstructions].filter(Boolean).join("\n\n");
+	const developerInstructions = [buildDeveloperInstructions(promptContext, {
+		dynamicTools,
+		nativeCodeModeOnlyEnabled: appServer.codeModeOnly
+	}), workspaceInstructions].filter(Boolean).join("\n\n");
 	const bundleConfig = bundleMcp.configPatch;
 	if (bundleConfig && !isJsonObject(bundleConfig)) throw new Error("Invalid child MCP thread configuration");
 	const threadConfig = applyCodexNativeSkillIsolation(mergeCodexThreadConfigs(bundleConfig, userMcp, apps?.configPatch, appServer.networkProxy?.configPatch, buildCodexNativeHookRelayConfig({
 		relay,
 		events,
-		clearOmittedEvents: true
+		clearOmittedEvents: true,
+		...appServer.nativeHookRelay ? { remoteCredentialPath: codexNativeHookRemoteCredentialPath(appServer.nativeHookRelay, relayId, generation) } : {}
 	})), nativeSkillIsolation);
 	return {
 		request: buildCodexThreadConfiguration(promptContext, {
@@ -348,6 +355,7 @@ async function prepareCanonicalCodexFork(params) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/upstream-fork-boundary.ts
+const IN_PROGRESS_TURN_MESSAGE = "This Codex turn is still in progress. Wait for it to finish, then try forking again.";
 const TURN_PAGE_LIMIT = 100;
 function failure(code, message) {
 	return {
@@ -361,10 +369,8 @@ function textOnlyMessage(content) {
 	if (!Array.isArray(content)) return;
 	const texts = [];
 	for (const block of content) {
-		if (!block || typeof block !== "object" || Array.isArray(block)) return;
-		const typed = block;
-		if (typed.type !== "text" || typeof typed.text !== "string") return;
-		texts.push(typed.text);
+		if (!isRecord(block) || block.type !== "text" || typeof block.text !== "string") return;
+		texts.push(block.text);
 	}
 	return texts.join("\n");
 }
@@ -395,7 +401,7 @@ function resolveCodexUpstreamForkBoundaryFromTurns(params) {
 				continue;
 			}
 			if (isSteer) return failure("steer-message", "This message steered an existing Codex turn and cannot be forked independently. Fork from the turn's first message instead.");
-			if (turn.status === "inProgress") return failure("in-progress-turn", "This Codex turn is still in progress. Wait for it to finish, then try forking again.");
+			if (turn.status === "inProgress") return failure("in-progress-turn", IN_PROGRESS_TURN_MESSAGE);
 			const retained = turnIndex > 0 ? params.turns[turnIndex - 1] : void 0;
 			return {
 				ok: true,
@@ -494,7 +500,7 @@ async function resolveCodexUpstreamForkBoundary(params) {
 function precheckCodexUpstreamForkBoundary(params) {
 	const target = params.turns.find((turn) => turn.id === params.boundary.beforeTurnId);
 	if (!target) return failure("upstream-unavailable", "The Codex thread changed before it could be forked. Refresh the session and try again.");
-	if (target.status === "inProgress") return failure("in-progress-turn", "This Codex turn is still in progress. Wait for it to finish, then try forking again.");
+	if (target.status === "inProgress") return failure("in-progress-turn", IN_PROGRESS_TURN_MESSAGE);
 	return {
 		ok: true,
 		boundary: params.boundary
@@ -680,7 +686,7 @@ async function forkCanonicalCodexSession(params) {
 					});
 					assertCurrent();
 					if (appended.length !== resolved.canonical.prefix.length || appended.some((item, index) => !item.appended || !isDeepStrictEqual(item.message, resolved.canonical.prefix[index]?.message) || index > 0 && item.effectiveParentId !== appended[index - 1]?.messageId)) throw new Error("The canonical Codex display prefix could not be copied completely");
-					initialization.link({
+					await initialization.linkAsync({
 						sessionKey: created.key,
 						agentId: created.agentId,
 						catalogId: fork.upstream.catalogId,
@@ -728,6 +734,7 @@ async function forkCanonicalCodexSession(params) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/upstream-session-fork.ts
+const UNAVAILABLE_CONNECTION_MESSAGE = "This Codex thread is not available on the current connection. Reconnect to its host and try again.";
 function unavailable(message) {
 	return {
 		status: "failed",
@@ -739,7 +746,7 @@ async function forkCodexUpstreamSession(params, options) {
 	try {
 		const sourceFingerprint = params.upstream.kind === "codex-app-server" && isRecord(params.upstream.ref) ? readNonBlankString(params.upstream.ref.connectionFingerprint) : void 0;
 		const requestControl = sourceFingerprint ? await options.controlFactory.forUpstream(params.source.agentId, sourceFingerprint) : void 0;
-		if (!sourceFingerprint || !requestControl) return unavailable("This Codex thread is not available on the current connection. Reconnect to its host and try again.");
+		if (!sourceFingerprint || !requestControl) return unavailable(UNAVAILABLE_CONNECTION_MESSAGE);
 		return await requestControl.withPinnedConnection(async (control) => {
 			const sourceBinding = options.bindingStore.read(sessionBindingIdentity({
 				...params.source,
@@ -760,7 +767,7 @@ async function forkCodexUpstreamSession(params, options) {
 					throw new Error("Codex fork cleanup could not be verified; inspect the retained native thread before retrying.", { cause });
 				}
 			});
-			if (sourceFingerprint !== control.connectionFingerprint || supervised && (sourceBinding.supervisionSourceThreadId !== params.upstream.threadId || (sourceBinding.pendingSupervisionBranch?.connectionFingerprint ?? sourceBinding.appServerRuntimeFingerprint) !== sourceFingerprint)) return unavailable("This Codex thread is not available on the current connection. Reconnect to its host and try again.");
+			if (sourceFingerprint !== control.connectionFingerprint || supervised && (sourceBinding.supervisionSourceThreadId !== params.upstream.threadId || (sourceBinding.pendingSupervisionBranch?.connectionFingerprint ?? sourceBinding.appServerRuntimeFingerprint) !== sourceFingerprint)) return unavailable(UNAVAILABLE_CONNECTION_MESSAGE);
 			const resolved = await resolveCodexUpstreamForkBoundary({
 				...params.source,
 				threadId: sourceThreadId,
@@ -845,7 +852,7 @@ async function forkCodexUpstreamSession(params, options) {
 							modelSelectionLocked: true
 						},
 						afterImport: async (entry, initialization) => {
-							initialization.link({
+							await initialization.linkAsync({
 								sessionKey: entry.key,
 								agentId: entry.agentId,
 								catalogId: params.upstream.catalogId,

package/dist/.setup/{usage-D8e8Xiqf.mjs → usage-DQA-peQC.mjs}

@@ -1,7 +1,7 @@
-import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-CMPy24F5.mjs";
-import { t as readCodexAppServerUsage } from "./request-jSbhc1sg.mjs";
-import "./config-0Gxk3_eq.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
+import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-CI8pTPqL.mjs";
+import { t as readCodexAppServerUsage } from "./request-Y8dmbqZ3.mjs";
+import "./config-C1YVVLEA.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
 import { CODEX_APP_SERVER_AUTH_MARKER } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/usage.ts
 /** Handles the synthetic usage credential for a Codex-backed OpenAI route. */

package/dist/.setup/{usage-limit-error-GbT-5NcW.mjs → usage-limit-error-2t3KBqiX.mjs}

@@ -1,10 +1,10 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { a as shouldRefreshCodexRateLimitsForUsageLimitMessage, i as resolveCodexUsageLimitResetAtMs, n as formatCodexUsageLimitErrorMessage } from "./rate-limits-CMPy24F5.mjs";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-kQntafj_.mjs";
-import { X as readRecentCodexRateLimits, Y as readCodexRateLimitsRevision, Z as rememberCodexRateLimitsRead } from "./shared-client-qhyYWbew.mjs";
+import { a as shouldRefreshCodexRateLimitsForUsageLimitMessage, i as resolveCodexUsageLimitResetAtMs, n as formatCodexUsageLimitErrorMessage } from "./rate-limits-CI8pTPqL.mjs";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-DbOzOglY.mjs";
+import { X as readRecentCodexRateLimits, Y as readCodexRateLimitsRevision, Z as rememberCodexRateLimitsRead } from "./shared-client-ByIwuAC-.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { markAuthProfileBlockedUntil } from "openclaw/plugin-sdk/agent-runtime";
+import { embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/usage-limit-error.ts
 const CODEX_USAGE_LIMIT_RATE_LIMIT_REFRESH_TIMEOUT_MS = 5e3;
 var CodexUsageLimitPromptError = class extends Error {
@@ -59,41 +59,32 @@ async function markCodexAuthProfileBlockedFromRateLimits(params) {
 }
 async function formatCodexTurnStartUsageLimitError(params) {
 	return refreshCodexUsageLimitError({
-		client: params.client,
-		source: readCodexTurnStartUsageLimitErrorSource(params.client, params.error, params.errorNotification, params.rateLimitsRevisionBeforeTurnStart),
-		timeoutMs: params.timeoutMs,
-		signal: params.signal
+		...params,
+		source: readCodexTurnStartUsageLimitErrorSource(params.client, params.error, params.errorNotification, params.rateLimitsRevisionBeforeTurnStart)
 	});
 }
 async function refreshCodexUsageLimitPromptError(params) {
 	if (!shouldRefreshCodexRateLimitsForUsageLimitMessage(params.message)) return;
 	return refreshCodexUsageLimitError({
-		client: params.client,
+		...params,
 		source: {
 			message: params.message,
 			codexErrorInfo: "usageLimitExceeded",
 			rateLimits: readRecentCodexRateLimits(params.client)
-		},
-		timeoutMs: params.timeoutMs,
-		signal: params.signal
+		}
 	});
 }
 async function refreshCodexUsageLimitError(params) {
 	const initialMessage = formatCodexUsageLimitErrorMessage(params.source);
 	const rateLimits = shouldRefreshCodexRateLimitsForUsageLimitMessage(initialMessage) ? await readCodexRateLimitsFromAppServerForUsageLimitError(params) : void 0;
-	if (!rateLimits) return initialMessage ? {
-		message: initialMessage,
-		...params.source.rateLimitsTrustedForProfile ? { rateLimitsForProfile: params.source.rateLimits } : {}
-	} : void 0;
-	const message = formatCodexUsageLimitErrorMessage({
-		message: params.source.message,
-		codexErrorInfo: params.source.codexErrorInfo,
+	const message = rateLimits ? formatCodexUsageLimitErrorMessage({
+		...params.source,
 		rateLimits,
 		rateLimitsAuthoritative: true
-	}) ?? initialMessage;
+	}) ?? initialMessage : initialMessage;
 	return message ? {
 		message,
-		rateLimitsForProfile: rateLimits
+		...rateLimits || params.source.rateLimitsTrustedForProfile ? { rateLimitsForProfile: rateLimits || params.source.rateLimits } : {}
 	} : void 0;
 }
 async function readCodexRateLimitsFromAppServerForUsageLimitError(params) {

package/dist/.setup/web-search-item-CvokaZOo.mjs

@@ -0,0 +1,20 @@
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { normalizeOptionalString, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
+//#region extensions/codex/src/app-server/web-search-item.ts
+function projectCodexWebSearchItem(item) {
+	const action = isJsonObject(item.action) ? item.action : void 0;
+	const actionType = normalizeOptionalString(action?.type);
+	const queries = actionType === "search" ? normalizeTrimmedStringList(action?.queries) : [];
+	const query = normalizeOptionalString(item.query) ?? (actionType === "search" ? normalizeOptionalString(action?.query) : void 0) ?? queries[0];
+	const url = normalizeOptionalString(action?.url);
+	const pattern = normalizeOptionalString(action?.pattern);
+	return {
+		...query ? { query } : {},
+		...queries.length > 0 ? { queries } : {},
+		...actionType && actionType !== "search" ? { action: actionType } : {},
+		...url ? { url } : {},
+		...pattern ? { pattern } : {}
+	};
+}
+//#endregion
+export { projectCodexWebSearchItem as t };

package/dist/.setup/{web-search-provider.runtime-dL2GD1Kl.mjs → web-search-provider.runtime-BsuCMNix.mjs}

@@ -1,6 +1,6 @@
-import { p as buildCodexNativeWebSearchThreadConfig } from "./thread-requests-CL1e8Wmx.mjs";
-import { l as projectCodexWebSearchItem } from "./native-subagent-monitor-BUYOUp9X.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-pGsfXcmH.mjs";
+import { m as buildCodexNativeWebSearchThreadConfig } from "./thread-requests-BgzJwJtS.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-CyQVQwGe.mjs";
+import { t as projectCodexWebSearchItem } from "./web-search-item-CvokaZOo.mjs";
 import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
 //#region extensions/codex/src/web-search-provider.runtime.ts
 async function executeCodexWebSearchProviderTool(ctx, args, executionContext, options) {

package/dist/.setup/{workspace-write-sandbox-probe-DmUHLrrl.mjs → workspace-write-sandbox-probe-BDWO2Qkh.mjs}

@@ -1,6 +1,6 @@
 import { a as resolveCodexPrivateLauncher, n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-a0HDa2Mj.mjs";
-import { t as resolveCodexDoctorStartOptions } from "./doctor-start-options-DPW9JxIE.mjs";
+import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-CRWTkKOn.mjs";
+import { t as resolveCodexDoctorStartOptions } from "./doctor-start-options-JjTAl-q_.mjs";
 import { runUtf8CommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -79,7 +79,7 @@ async function probeCodexWorkspaceWriteSandbox(params) {
 			if (result.outputLimitExceeded || result.termination !== "exit" || result.signal) return {
 				status: "inconclusive",
 				command,
-				reason: result.outputLimitExceeded ? "Sandbox probe output exceeded its capture limit." : result.termination === "timeout" ? `Sandbox probe timed out after ${PROBE_TIMEOUT_MS} ms.` : `Sandbox probe ended with ${result.signal ?? result.termination}.`
+				reason: result.outputLimitExceeded ? "Sandbox check output exceeded its capture limit." : result.termination === "timeout" ? `Sandbox check timed out after ${PROBE_TIMEOUT_MS} ms.` : `Sandbox check ended with ${result.signal ?? result.termination}.`
 			};
 			if (result.code === 0) return {
 				status: "ok",
@@ -94,7 +94,7 @@ async function probeCodexWorkspaceWriteSandbox(params) {
 			return {
 				status: "inconclusive",
 				command,
-				reason: `Sandbox probe exited with ${result.code ?? "no exit code"} without a recognized bwrap denial.`
+				reason: `Sandbox check exited with ${result.code ?? "no exit code"} without a recognized bwrap denial.`
 			};
 		} finally {
 			await fs.rm(root, {

package/dist/api.js

@@ -1,7 +1,7 @@
-import { i as resolveManagedCodexNativeCommand, s as CODEX_APP_SERVER_VERSION } from "./.setup/managed-binary-C1VFoVPf.mjs";
+import { i as resolveManagedCodexNativeCommand, s as CODEX_APP_SERVER_VERSION } from "./.setup/managed-binary-BtIjV7yN.mjs";
 import { t as codexNativeProfileRecoveryHealthCheck } from "./.setup/auth-profile-health-oHizqgye.mjs";
 import { n as findCodexAppServerSpawnError, t as describeCodexSpawnError } from "./.setup/spawn-error-CL3n6MAa.mjs";
-import { t as resolveCodexDoctorStartOptions } from "./.setup/doctor-start-options-DPW9JxIE.mjs";
+import { t as resolveCodexDoctorStartOptions } from "./.setup/doctor-start-options-JjTAl-q_.mjs";
 import { runUtf8CommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 import path from "node:path";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
@@ -10,8 +10,8 @@ import { fileURLToPath } from "node:url";
 const CODEX_MANAGED_APP_SERVER_CHECK_ID = "codex/managed-app-server";
 const CODEX_VERSION_TIMEOUT_MS = 5e3;
 const CODEX_VERSION_MAX_BUFFER_BYTES = 65536;
-function managedCodexFinding(params) {
-	return {
+function managedCodexFindings(params) {
+	return [{
 		checkId: CODEX_MANAGED_APP_SERVER_CHECK_ID,
 		severity: params.severity ?? "error",
 		source: "codex",
@@ -19,7 +19,7 @@ function managedCodexFinding(params) {
 		...params.path ? { path: params.path } : {},
 		...params.requirement ? { requirement: params.requirement } : {},
 		...params.fixHint ? { fixHint: params.fixHint } : {}
-	};
+	}];
 }
 function parseCodexVersion(output) {
 	return /(?:^|\s)(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?)(?:\s|$)/u.exec(output)?.[1];
@@ -36,7 +36,7 @@ async function runVersionCommand(command, env) {
 		killSignal: "SIGKILL",
 		killGraceMs: 0
 	});
-	if (result.termination !== "exit" || result.code !== 0 || result.outputLimitExceeded) throw new Error(result.outputLimitExceeded ? "Version output exceeded its capture limit" : result.termination === "timeout" ? `Version probe timed out after ${CODEX_VERSION_TIMEOUT_MS} ms` : `Version probe failed (${result.signal ?? result.code ?? result.termination})`);
+	if (result.termination !== "exit" || result.code !== 0 || result.outputLimitExceeded) throw new Error(result.outputLimitExceeded ? "Version output exceeded its capture limit" : result.termination === "timeout" ? `Version check timed out after ${CODEX_VERSION_TIMEOUT_MS} ms` : `Version check failed (${result.signal ?? result.code ?? result.termination})`);
 	return result;
 }
 function createCodexManagedAppServerHealthCheck(params) {
@@ -62,43 +62,43 @@ function createCodexManagedAppServerHealthCheck(params) {
 					deps: params.deps
 				});
 			} catch (error) {
-				return [managedCodexFinding({
+				return managedCodexFindings({
 					message: `Managed Codex app-server could not be resolved: ${coerceErrorMessage(error)}`,
 					path: params.pluginRoot,
 					requirement: `an executable Codex ${CODEX_APP_SERVER_VERSION} managed artifact`,
 					fixHint: "Reinstall the staged OpenClaw package with its @openai/codex platform dependency, then rerun the candidate check."
-				})];
+				});
 			}
 			if (selection.status === "skipped") return [];
 			const resolved = selection.start;
 			const nativeCommand = resolveNativeCommand(resolved.command);
-			if (!nativeCommand) return [managedCodexFinding({
+			if (!nativeCommand) return managedCodexFindings({
 				message: "Managed Codex app-server resolved a launcher without a native artifact.",
 				path: resolved.command,
 				requirement: `the platform-native Codex ${CODEX_APP_SERVER_VERSION} executable`,
 				fixHint: "Reinstall the staged OpenClaw package with the matching @openai/codex platform package, then rerun the candidate check."
-			})];
+			});
 			let output;
 			try {
 				output = await (params.deps?.runVersionCommand ? params.deps.runVersionCommand(nativeCommand) : runVersionCommand(nativeCommand, env));
 			} catch (error) {
 				const spawnFailure = findCodexAppServerSpawnError(describeCodexSpawnError(error, nativeCommand));
-				return [managedCodexFinding({
+				return managedCodexFindings({
 					message: spawnFailure?.message ?? `Managed Codex app-server version check failed: ${coerceErrorMessage(error)}`,
 					severity: spawnFailure && resolved.managedCommandOrder === "package-only" ? "warning" : versionFailureSeverity,
 					path: nativeCommand,
 					requirement: `Codex ${CODEX_APP_SERVER_VERSION} must report its version within ${CODEX_VERSION_TIMEOUT_MS} ms`,
 					fixHint: versionFailureHint ?? "Repair or reinstall the staged OpenClaw package, then rerun the candidate check before cutover."
-				})];
+				});
 			}
 			const detectedVersion = parseCodexVersion(`${output.stdout}\n${output.stderr}`);
-			if (detectedVersion !== "0.160.0") return [managedCodexFinding({
+			if (detectedVersion !== "0.160.0") return managedCodexFindings({
 				severity: versionFailureSeverity,
 				message: detectedVersion ? `Managed Codex app-server version mismatch: expected ${CODEX_APP_SERVER_VERSION}, detected ${detectedVersion}.` : `Managed Codex app-server did not report a parseable version; expected ${CODEX_APP_SERVER_VERSION}.`,
 				path: nativeCommand,
 				requirement: `the exact OpenClaw-pinned Codex version ${CODEX_APP_SERVER_VERSION}`,
 				fixHint: versionFailureHint ?? "Reinstall the staged OpenClaw package so its managed @openai/codex dependency matches the pinned version, then rerun the candidate check."
-			})];
+			});
 			return [];
 		}
 	};
@@ -115,7 +115,7 @@ function registerCodexManagedAppServerDoctorChecks$1(host, deps) {
 const CODEX_PLUGIN_ROOT = path.dirname(fileURLToPath(import.meta.url));
 async function probeCodexWorkspaceWriteSandbox(params) {
 	try {
-		const { probeCodexWorkspaceWriteSandbox: probe } = await import("./.setup/workspace-write-sandbox-probe-DmUHLrrl.mjs");
+		const { probeCodexWorkspaceWriteSandbox: probe } = await import("./.setup/workspace-write-sandbox-probe-BDWO2Qkh.mjs");
 		return await probe({
 			...params,
 			pluginRoot: CODEX_PLUGIN_ROOT

package/dist/catalog-page.worker.js

@@ -1,4 +1,4 @@
-import { t as createCodexCatalogDecoder } from "./.setup/client-catalog-response-Bqp7WG51.mjs";
+import { t as createCodexCatalogDecoder } from "./.setup/client-catalog-response-DsbEAtpd.mjs";
 import { serveWorkerTasks } from "openclaw/plugin-sdk/worker-task-server";
 //#region extensions/codex/catalog-page.worker.ts
 const decode = createCodexCatalogDecoder();

package/dist/cli-metadata.js

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/codex/cli-metadata.ts
 function registerCodexCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./.setup/session-cli-kH4vuGod.mjs");
+		const { registerCodexSessionCli } = await import("./.setup/session-cli-GwU0izn-.mjs");
 		registerCodexSessionCli(program);
 	}, { descriptors: [{
 		name: "codex",

package/dist/doctor-contract-api.js

@@ -128,7 +128,6 @@ function hasRetiredTurnIdleTimeout(value) {
 	const appServer = asNullableRecord(value);
 	return appServer !== null && RETIRED_TURN_IDLE_TIMEOUT_KEYS.some((key) => Object.hasOwn(appServer, key));
 }
-/** Legacy Codex config keys that doctor should report or repair. */
 const legacyConfigRules = [
 	{
 		path: [
@@ -249,15 +248,15 @@ const stateMigrations = [
 	{
 		id: "codex-app-server-sidecars-to-plugin-state",
 		label: "Codex app-server thread bindings",
-		detectLegacyState: async (params) => (await import("./.setup/session-binding-sidecars-BrdV95Fg.mjs")).detectLegacySessionBindingSidecars(params),
-		migrateLegacyState: async (params) => (await import("./.setup/session-binding-sidecars-BrdV95Fg.mjs")).migrateLegacySessionBindingSidecars(params)
+		detectLegacyState: async (params) => (await import("./.setup/session-binding-sidecars-DD-enC8w.mjs")).detectLegacySessionBindingSidecars(params),
+		migrateLegacyState: async (params) => (await import("./.setup/session-binding-sidecars-DD-enC8w.mjs")).migrateLegacySessionBindingSidecars(params)
 	},
 	{
 		id: "codex-native-task-assignments",
 		label: "Codex native pending assignments",
-		collectBackupResources: async (params) => (await import("./.setup/native-task-assignments-C6KVqiN1.mjs")).codexNativeTaskAssignmentMigration.collectBackupResources(params),
-		detectLegacyState: async (params) => (await import("./.setup/native-task-assignments-C6KVqiN1.mjs")).codexNativeTaskAssignmentMigration.detectLegacyState(params),
-		migrateLegacyState: async (params) => (await import("./.setup/native-task-assignments-C6KVqiN1.mjs")).codexNativeTaskAssignmentMigration.migrateLegacyState(params)
+		collectBackupResources: async (params) => (await import("./.setup/native-task-assignments-DimsQ9Qa.mjs")).codexNativeTaskAssignmentMigration.collectBackupResources(params),
+		detectLegacyState: async (params) => (await import("./.setup/native-task-assignments-DimsQ9Qa.mjs")).codexNativeTaskAssignmentMigration.detectLegacyState(params),
+		migrateLegacyState: async (params) => (await import("./.setup/native-task-assignments-DimsQ9Qa.mjs")).codexNativeTaskAssignmentMigration.migrateLegacyState(params)
 	},
 	codexOrphanedSessionBindingMigration
 ];