@openclaw/codex 2026.10.1-beta.2 → 2026.10.5-beta.1

package/dist/media-understanding-provider.js

@@ -33,7 +33,7 @@ async function describeCodexImages(req, options) {
 	const model = req.model.trim();
 	if (!model) throw new Error("Codex image understanding requires model id.");
 	req.signal?.throwIfAborted();
-	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-pGsfXcmH.mjs");
+	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-CyQVQwGe.mjs");
 	req.signal?.throwIfAborted();
 	const { text } = await runBoundedCodexAppServerTurn({
 		config: req.cfg,
@@ -73,7 +73,7 @@ async function extractCodexStructured(req, options) {
 	if (req.input.length === 0) throw new Error("Codex structured extraction requires at least one input.");
 	if (!req.input.some((entry) => entry.type === "image")) throw new Error("Codex structured extraction requires at least one image input.");
 	req.signal?.throwIfAborted();
-	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-pGsfXcmH.mjs");
+	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-CyQVQwGe.mjs");
 	req.signal?.throwIfAborted();
 	const { text } = await runBoundedCodexAppServerTurn({
 		config: req.cfg,
@@ -94,12 +94,33 @@ async function extractCodexStructured(req, options) {
 		requiredModalities: ["text", "image"],
 		isolation: "configured-transport"
 	});
-	return normalizeStructuredExtractionResult({
+	const result = {
 		text,
 		model,
 		provider: req.provider,
-		req
-	});
+		contentType: req.jsonMode === false ? "text" : "json"
+	};
+	if (req.jsonMode !== false) {
+		try {
+			result.parsed = JSON.parse(text);
+		} catch {
+			throw new Error("Codex structured extraction returned invalid JSON.");
+		}
+		if (isRecord(req.jsonSchema)) {
+			const validation = validateJsonSchemaValue({
+				schema: req.jsonSchema,
+				cacheKey: "codex.media-understanding.extractStructured",
+				value: result.parsed,
+				cache: false
+			});
+			if (!validation.ok) {
+				const message = validation.errors.map((error) => error.text).join("; ") || "invalid";
+				throw new Error(`Codex structured extraction JSON did not match schema: ${message}`);
+			}
+			result.parsed = validation.value;
+		}
+	}
+	return result;
 }
 function buildCodexImagePrompt(req) {
 	const prompt = req.prompt?.trim() || DEFAULT_CODEX_IMAGE_PROMPT;
@@ -109,7 +130,12 @@ function buildCodexImagePrompt(req) {
 function buildCodexStructuredInput(req) {
 	return [{
 		type: "text",
-		text: buildStructuredExtractionPrompt(req),
+		text: [
+			req.instructions.trim(),
+			req.schemaName ? `Schema name: ${req.schemaName}` : void 0,
+			req.jsonSchema ? `JSON schema:\n${JSON.stringify(req.jsonSchema)}` : void 0,
+			req.jsonMode === false ? "Return the extraction as concise text." : "Return valid JSON only. Do not wrap the JSON in Markdown fences."
+		].filter((part) => Boolean(part)).join("\n\n"),
 		text_elements: []
 	}, ...req.input.map((entry) => {
 		if (entry.type === "text") return {
@@ -123,42 +149,5 @@ function buildCodexStructuredInput(req) {
 		};
 	})];
 }
-function buildStructuredExtractionPrompt(req) {
-	return [
-		req.instructions.trim(),
-		req.schemaName ? `Schema name: ${req.schemaName}` : void 0,
-		req.jsonSchema ? `JSON schema:\n${JSON.stringify(req.jsonSchema)}` : void 0,
-		req.jsonMode === false ? "Return the extraction as concise text." : "Return valid JSON only. Do not wrap the JSON in Markdown fences."
-	].filter((part) => Boolean(part)).join("\n\n");
-}
-function normalizeStructuredExtractionResult(params) {
-	const result = {
-		text: params.text,
-		model: params.model,
-		provider: params.provider,
-		contentType: params.req.jsonMode === false ? "text" : "json"
-	};
-	if (params.req.jsonMode !== false) {
-		try {
-			result.parsed = JSON.parse(params.text);
-		} catch {
-			throw new Error("Codex structured extraction returned invalid JSON.");
-		}
-		if (isRecord(params.req.jsonSchema)) {
-			const validation = validateJsonSchemaValue({
-				schema: params.req.jsonSchema,
-				cacheKey: "codex.media-understanding.extractStructured",
-				value: result.parsed,
-				cache: false
-			});
-			if (!validation.ok) {
-				const message = validation.errors.map((error) => error.text).join("; ") || "invalid";
-				throw new Error(`Codex structured extraction JSON did not match schema: ${message}`);
-			}
-			result.parsed = validation.value;
-		}
-	}
-	return result;
-}
 //#endregion
 export { buildCodexMediaUnderstandingProvider };

package/dist/migration-provider-api.js

@@ -1,2 +1,2 @@
-import { t as buildCodexMigrationProvider } from "./.setup/provider-BnwHVD_z.mjs";
+import { t as buildCodexMigrationProvider } from "./.setup/provider-BJ4xhaGX.mjs";
 export { buildCodexMigrationProvider as buildMigrationProvider };

package/dist/native-session-binding-api.js

@@ -1,2 +1,2 @@
-import { a as readStoredCodexAppServerBinding } from "./.setup/session-binding-record-codec-z4ZpDn6E.mjs";
+import { a as readStoredCodexAppServerBinding } from "./.setup/session-binding-record-codec-BpH8u_G9.mjs";
 export { readStoredCodexAppServerBinding as readNativeSessionBindingRecord };

package/dist/native-tool-policy.js

@@ -8,5 +8,27 @@ const CODEX_NATIVE_TOOL_REQUIREMENTS = [
 	"edit",
 	"apply_patch"
 ];
+const CODEX_TOOL_POLICY_SAFE_DENY_NAMES = [
+	"web_fetch",
+	"x_search",
+	"memory_search",
+	"memory_get",
+	"dashboard",
+	"canvas",
+	"show_widget",
+	"message",
+	"heartbeat_respond",
+	"automations",
+	"gateway",
+	"agents_list",
+	"openclaw",
+	"session_status",
+	"progress_card",
+	"skill_workshop",
+	"image_generate",
+	"music_generate",
+	"video_generate",
+	"tts"
+];
 //#endregion
-export { CODEX_NATIVE_TOOL_REQUIREMENTS };
+export { CODEX_NATIVE_TOOL_REQUIREMENTS, CODEX_TOOL_POLICY_SAFE_DENY_NAMES };

package/dist/provider-discovery.js

@@ -5,7 +5,7 @@ const codexProviderDiscovery = {
 	auth: [],
 	prepareSyntheticAuth: async ({ config, provider, env, signal, pluginRoot }) => {
 		if (provider !== "codex") return;
-		const { probeCodexNativeAuth } = await import("./.setup/native-auth-Cjb9y7IZ.mjs");
+		const { probeCodexNativeAuth } = await import("./.setup/native-auth-esN5MdIv.mjs");
 		return await probeCodexNativeAuth({
 			config,
 			env,

package/dist/session-history-worker-runtime.js

@@ -1,10 +1,11 @@
-import { a as codexHistoryRejectionReason, t as consumeCodexHistory } from "./.setup/session-history-read-CNN8zwbD.mjs";
-import { n as projectVerifiedSettledCodexMessages, t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-Cq_4DYgN.mjs";
-import { n as resolveCodexHistoryTarget } from "./.setup/session-history-BogBHKLk.mjs";
+import { n as codexHistoryRejectionReason } from "./.setup/history-rejection-B4nOXNXF.mjs";
+import { t as consumeCodexHistory } from "./.setup/session-history-read-BI_2jRED.mjs";
+import { n as projectVerifiedSettledCodexMessages, t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-DJQfek5p.mjs";
+import { n as resolveCodexHistoryTarget } from "./.setup/session-history-BO6i_pfk.mjs";
 import { WorkerTaskPool, resolveRuntimeWorkerArgv, resolveRuntimeWorkerUrl } from "openclaw/plugin-sdk/process-runtime";
 import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";
 import { fileURLToPath } from "node:url";
-import { SessionTranscriptReadFenceError, captureCodexSessionTranscriptReadAdmission, validateCodexSessionTranscriptContextVersion, validateCodexSessionTranscriptReadAdmission } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
+import { SessionTranscriptReadFenceError, captureCodexSessionContextReader, readCodexSessionContextProjection } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
 //#region extensions/codex/session-history-worker-runtime.ts
 const codexHistoryWorkerEntrypoint = {
 	currentModuleUrl: import.meta.url,
@@ -15,27 +16,29 @@ const codexHistoryWorkerEntrypoint = {
 		distWorkerPath: "session-history.worker.js"
 	}
 };
-function resolveCodexHistoryWorkerUrl() {
-	const sourceUrl = resolveRuntimeWorkerUrl(codexHistoryWorkerEntrypoint);
-	if (!(/\.[cm]?ts$/u.test(sourceUrl.pathname) && (typeof process.versions.bun === "string" || resolveRuntimeWorkerArgv(sourceUrl).length === 1))) return sourceUrl;
-	return resolveRuntimeWorkerUrl({
+const sourceWorkerUrl = resolveRuntimeWorkerUrl(codexHistoryWorkerEntrypoint);
+const sourceNeedsBuiltFallback = /\.[cm]?ts$/u.test(sourceWorkerUrl.pathname) && (typeof process.versions.bun === "string" || resolveRuntimeWorkerArgv(sourceWorkerUrl).length === 1);
+const historyReads = new WorkerTaskPool({
+	workerUrl: sourceNeedsBuiltFallback ? resolveRuntimeWorkerUrl({
 		...codexHistoryWorkerEntrypoint,
 		root: fileURLToPath(new URL("../..", import.meta.url))
-	});
-}
-const historyReads = new WorkerTaskPool({
-	workerUrl: resolveCodexHistoryWorkerUrl(),
+	}) : sourceWorkerUrl,
+	workerClass: "reader",
 	maxWorkers: 1
 });
 async function projectCodexSettledHistoryInWorker(target, signal, contextReader) {
 	signal?.throwIfAborted();
 	if (contextReader && !target.sessionTarget) throw new Error("Actor history requires a captured sessionTarget");
 	const resolved = resolveCodexHistoryTarget(target);
-	if (contextReader) {
+	const reader = contextReader ?? (target.sessionTarget && resolved.kind === "sqlite" ? captureCodexSessionContextReader({
+		...target.sessionTarget,
+		...resolved.target
+	}, signal) : void 0);
+	if (reader) {
 		if (resolved.kind !== "sqlite") throw new Error("Actor history requires a complete matching sessionTarget");
 		let result;
 		try {
-			result = await contextReader(resolved.target, (messages, header) => {
+			result = await reader(resolved.target, (messages, header) => {
 				signal?.throwIfAborted();
 				try {
 					return {
@@ -59,31 +62,49 @@ async function projectCodexSettledHistoryInWorker(target, signal, contextReader)
 		signal?.throwIfAborted();
 		return result;
 	}
-	const receipt = resolved.kind === "sqlite" ? captureCodexSessionTranscriptReadAdmission(resolved.target) : void 0;
-	const input = {
-		target: resolved,
-		sessionId: target.sessionId,
-		...receipt ? { admission: { ...receipt } } : {},
-		evidence: {
-			mirroredMessages: target.mirroredMessages,
-			settledMessages: target.settledMessages,
-			turnId: target.turnId
-		}
+	const evidence = {
+		mirroredMessages: target.mirroredMessages,
+		settledMessages: target.settledMessages,
+		turnId: target.turnId
 	};
-	const result = resolved.kind === "sqlite" && isIncognitoSessionKey(resolved.target.sessionKey) ? await runCodexHistoryWorkerInput(input) : await historyReads.run(input, {
-		timeoutMs: 6e4,
-		signal
-	});
-	signal?.throwIfAborted();
 	if (resolved.kind === "sqlite") try {
-		if (input.admission) validateCodexSessionTranscriptReadAdmission(resolved.target, input.admission);
-		else validateCodexSessionTranscriptContextVersion(resolved.target, result.version);
+		return await readCodexSessionContextProjection(resolved.target, async ({ target: captured, admission, physicalSource }) => {
+			const input = {
+				target: {
+					kind: "sqlite",
+					target: captured
+				},
+				sessionId: target.sessionId,
+				admission,
+				physicalSource,
+				evidence
+			};
+			const result = isIncognitoSessionKey(captured.sessionKey) ? await runCodexHistoryWorkerInput(input) : await historyReads.run(input, {
+				timeoutMs: 6e4,
+				signal
+			});
+			return {
+				value: result.result,
+				version: result.version
+			};
+		}, signal);
 	} catch (error) {
+		signal?.throwIfAborted();
 		return {
 			status: "rejected",
 			reason: error instanceof SessionTranscriptReadFenceError ? "snapshot_invalidated" : codexHistoryRejectionReason(error)
 		};
 	}
+	const input = {
+		target: resolved,
+		sessionId: target.sessionId,
+		evidence
+	};
+	const result = await historyReads.run(input, {
+		timeoutMs: 6e4,
+		signal
+	});
+	signal?.throwIfAborted();
 	return result.result;
 }
 //#endregion

package/dist/session-history.worker.js

@@ -1,2 +1,2 @@
-import { t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-Cq_4DYgN.mjs";
+import { t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-DJQfek5p.mjs";
 export { runCodexHistoryWorkerInput };

package/openclaw.plugin.json

@@ -551,6 +551,23 @@
           "remoteWorkspaceRoot": {
             "type": "string"
           },
+          "nativeHookRelay": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "url",
+              "credentialDirectory"
+            ],
+            "properties": {
+              "url": {
+                "type": "string",
+                "format": "uri"
+              },
+              "credentialDirectory": {
+                "type": "string"
+              }
+            }
+          },
           "codeModeOnly": {
             "type": "boolean",
             "default": false
@@ -784,7 +801,7 @@
     },
     "computerUse.liveTestTimeoutMs": {
       "label": "Live Test Timeout",
-      "help": "Maximum time for the Computer Use list_apps readiness probe before status and startup treat the live test as failed.",
+      "help": "Maximum time for the Computer Use list_apps readiness check before status and startup treat the live test as failed.",
       "advanced": true
     },
     "computerUse.toolCallTimeoutMs": {
@@ -794,7 +811,7 @@
     },
     "computerUse.healthCheckEnabled": {
       "label": "Periodic Health Checks",
-      "help": "When true, run periodic Computer Use live probes on the configured cadence.",
+      "help": "When true, run periodic Computer Use live checks on the configured cadence.",
       "advanced": true
     },
     "computerUse.healthCheckIntervalMinutes": {
@@ -809,7 +826,7 @@
     },
     "computerUse.strictReadiness": {
       "label": "Strict Readiness",
-      "help": "When true, a failed Computer Use live probe stops Codex-mode startup. The default false value preserves existing enabled setups by continuing with a warning.",
+      "help": "When true, a failed Computer Use live check stops Codex-mode startup. The default false value preserves existing enabled setups by continuing with a warning.",
       "advanced": true
     },
     "computerUse.autoRepair": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.10.1-beta.2",
+  "version": "2026.10.5-beta.1",
   "description": "OpenClaw Codex app-server harness and native session supervision plugin.",
   "repository": {
     "type": "git",
@@ -9,11 +9,11 @@
   "type": "module",
   "dependencies": {
     "@openai/codex": "0.160.0",
-    "@openclaw/fs-safe": "0.23.0",
+    "@openclaw/fs-safe": "0.25.0",
     "semver": "7.8.5",
-    "smol-toml": "1.8.0",
+    "smol-toml": "1.9.0",
     "typebox": "1.3.34",
-    "ws": "8.21.3",
+    "ws": "8.22.0",
     "zod": "4.6.5"
   },
   "devDependencies": {
@@ -38,10 +38,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.10.1-beta.2"
+      "pluginApi": ">=2026.10.5-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.10.1-beta.2",
+      "openclawVersion": "2026.10.5-beta.1",
       "workerEntries": [
         "./catalog-page.worker.ts"
       ]
@@ -66,7 +66,7 @@
     "assets/activity.svg"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.10.1-beta.2"
+    "openclaw": ">=2026.10.5-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/.setup/attempt-terminal-gZrxQ35N.mjs

@@ -1,5 +0,0 @@
-import { agentHarnessAttemptTerminal } from "openclaw/plugin-sdk/agent-harness-runtime";
-//#region extensions/codex/src/app-server/attempt-terminal.ts
-const attemptTerminal = agentHarnessAttemptTerminal;
-//#endregion
-export { attemptTerminal as t };

package/dist/.setup/plugin-thread-config-deadline-B8LGaZNW.mjs

@@ -1,124 +0,0 @@
-import { f as resolveCodexPluginsPolicy } from "./config-parsing-BQq-CHTF.mjs";
-import { r as withAbortableTimeout } from "./timeout-CXOfNoaX.mjs";
-import { a as defaultCodexAppInventoryCache } from "./plugin-app-cache-key-BW8rd98k.mjs";
-import { s as resolveRecoverableCodexPluginConfigKeys } from "./plugin-inventory-Bf0_piTw.mjs";
-import "./config-0Gxk3_eq.mjs";
-import { Tt as shouldBuildCodexPluginThreadConfig, gt as buildCodexPluginThreadConfig, vt as buildCodexPluginThreadConfigTimeoutFallback } from "./thread-requests-CL1e8Wmx.mjs";
-import { m as readCurrentCodexScheduledAppPolicy, p as intersectCodexPluginThreadConfigWithScheduledAuthority } from "./thread-lifecycle-Cbz_7ySv.mjs";
-import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-C8xGEXmR.mjs";
-import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-DWnB7VMj.mjs";
-import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-runtime";
-//#region extensions/codex/src/app-server/plugin-thread-config-deadline.ts
-/** Enforces one bounded startup budget across Codex plugin config discovery. */
-const CODEX_PLUGIN_THREAD_CONFIG_MAX_TIMEOUT_MS = 6e4;
-const CODEX_PLUGIN_THREAD_CONFIG_TIMEOUT_DIVISOR = 4;
-const CODEX_PLUGIN_THREAD_CONFIG_MIN_TIMEOUT_MS = 100;
-var CodexPluginThreadConfigDeadlineError = class extends Error {
-	constructor() {
-		super("Codex plugin thread config deadline elapsed");
-		this.name = "CodexPluginThreadConfigDeadlineError";
-	}
-};
-/** Resolves the plugin policy state reused throughout app-server startup. */
-function resolveCodexPluginThreadConfigStartupPolicy(params) {
-	const pluginThreadConfigRequired = params.hostedAppsSupported === false || Boolean(params.scheduledRuntimeAuthority) || !params.nativeToolSurfaceEnabled || shouldBuildCodexPluginThreadConfig(params.pluginConfig);
-	const pluginThreadConfigPluginConfig = params.hostedAppsSupported !== false && (params.nativeToolSurfaceEnabled || params.scheduledRuntimeAuthority) ? params.pluginConfig : disableCodexPluginThreadConfig(params.pluginConfig);
-	const resolvedPluginPolicy = pluginThreadConfigRequired ? resolveCodexPluginsPolicy(pluginThreadConfigPluginConfig) : void 0;
-	return {
-		pluginThreadConfigRequired,
-		pluginThreadConfigPluginConfig,
-		resolvedPluginPolicy,
-		enabledPluginConfigKeys: resolvedPluginPolicy ? resolvedPluginPolicy.pluginPolicies.filter((plugin) => plugin.enabled).map((plugin) => plugin.configKey).toSorted() : void 0
-	};
-}
-/** Builds plugin config without allowing sequential RPC timeouts to consume the turn. */
-async function buildCodexPluginThreadConfigWithinDeadline(params) {
-	const { requestTimeoutMs, signal, request, failClosedOnTimeout, transform, ...buildParams } = params;
-	signal.throwIfAborted();
-	const timeoutMs = resolveCodexPluginThreadConfigTimeoutMs(requestTimeoutMs);
-	const deadlineMs = performance.now() + timeoutMs;
-	let requestTimedOut = false;
-	const boundedRequest = async (method, requestParams) => {
-		const remainingTimeoutMs = deadlineMs - performance.now();
-		if (requestTimedOut || remainingTimeoutMs <= 0) throw new CodexPluginThreadConfigDeadlineError();
-		try {
-			return await request(method, requestParams, {
-				timeoutMs: remainingTimeoutMs,
-				signal
-			});
-		} catch (error) {
-			requestTimedOut ||= isCodexPluginThreadConfigTimeoutError(error);
-			throw error;
-		}
-	};
-	try {
-		return await withAbortableTimeout({
-			signal,
-			timeoutMs,
-			promise: (async () => {
-				const config = await buildCodexPluginThreadConfig({
-					...buildParams,
-					request: boundedRequest
-				});
-				const result = transform ? await transform(config, boundedRequest) : config;
-				if (requestTimedOut || performance.now() >= deadlineMs) throw new CodexPluginThreadConfigDeadlineError();
-				return result;
-			})(),
-			timeoutMessage: "Codex plugin thread config deadline elapsed",
-			createTimeoutError: () => new CodexPluginThreadConfigDeadlineError()
-		});
-	} catch (error) {
-		if (signal.aborted || !requestTimedOut && !isCodexPluginThreadConfigTimeoutError(error) && performance.now() < deadlineMs) throw error;
-		if (failClosedOnTimeout) throw new AgentHarnessPreflightError(`Codex app policy verification exceeded its ${timeoutMs} ms startup budget. No app tools were executed. Retry after Codex app inventory is responsive.`);
-		return buildCodexPluginThreadConfigTimeoutFallback({
-			pluginConfig: buildParams.pluginConfig,
-			appCacheKey: buildParams.appCacheKey,
-			message: `Codex plugin discovery exceeded its ${timeoutMs} ms startup budget; plugin apps were disabled for this turn.`
-		});
-	}
-}
-/** Creates the recovery metadata and bounded builder used by thread startup. */
-function createCodexPluginThreadConfigStartupProvider(params) {
-	const { client, policy, inputFingerprint, enabledPluginConfigKeys, appCache, metadataCache: configuredMetadataCache, ...buildParams } = params;
-	const metadataCache = configuredMetadataCache ?? defaultCodexPluginMetadataCache;
-	return {
-		enabled: true,
-		requiresCurrentPolicyCheck: Boolean(policy?.enabled || params.scheduledRuntimeAuthority),
-		inputFingerprint,
-		enabledPluginConfigKeys,
-		accountAppRecoveryEnabled: policy?.allowAllPlugins,
-		recoverablePluginConfigKeys: policy ? resolveRecoverableCodexPluginConfigKeys({
-			policy,
-			metadataCache,
-			appCacheKey: params.appCacheKey,
-			configCwd: params.configCwd
-		}) : void 0,
-		build: async (buildOptions) => {
-			const config = await buildCodexPluginThreadConfigWithinDeadline({
-				...buildParams,
-				threadId: buildOptions?.threadId,
-				appCache: appCache ?? defaultCodexAppInventoryCache,
-				metadataCache,
-				failClosedOnTimeout: Boolean(params.scheduledRuntimeAuthority),
-				transform: params.scheduledRuntimeAuthority ? async (builtConfig, request) => intersectCodexPluginThreadConfigWithScheduledAuthority(builtConfig, params.scheduledRuntimeAuthority, await readCurrentCodexScheduledAppPolicy({
-					request,
-					configCwd: params.configCwd,
-					threadId: buildOptions?.threadId
-				})) : void 0,
-				request: (method, requestParams, options) => client.request(method, requestParams, options)
-			});
-			return params.scheduledRuntimeAuthority && params.inputFingerprint ? {
-				...config,
-				inputFingerprint: params.inputFingerprint
-			} : config;
-		}
-	};
-}
-function resolveCodexPluginThreadConfigTimeoutMs(requestTimeoutMs) {
-	return Math.min(CODEX_PLUGIN_THREAD_CONFIG_MAX_TIMEOUT_MS, Math.max(CODEX_PLUGIN_THREAD_CONFIG_MIN_TIMEOUT_MS, Math.floor((Number.isFinite(requestTimeoutMs) && requestTimeoutMs > 0 ? requestTimeoutMs : CODEX_PLUGIN_THREAD_CONFIG_MAX_TIMEOUT_MS * CODEX_PLUGIN_THREAD_CONFIG_TIMEOUT_DIVISOR) / CODEX_PLUGIN_THREAD_CONFIG_TIMEOUT_DIVISOR)));
-}
-function isCodexPluginThreadConfigTimeoutError(error) {
-	return error instanceof CodexPluginThreadConfigDeadlineError || error instanceof Error && "code" in error && error.code === "CODEX_APP_SERVER_LOCAL_REQUEST_CANCELLED" && error.message.endsWith(" timed out");
-}
-//#endregion
-export { resolveCodexPluginThreadConfigStartupPolicy as n, createCodexPluginThreadConfigStartupProvider as t };

package/dist/.setup/service-tier-normalization-Cei89SW6.mjs

@@ -1,15 +0,0 @@
-//#region extensions/codex/src/app-server/config-contracts.shared.ts
-const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
-//#endregion
-//#region extensions/codex/src/app-server/service-tier-normalization.ts
-function normalizeCodexServiceTier(value) {
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	if (!trimmed) return;
-	const normalized = trimmed.toLowerCase();
-	if (normalized === "fast" || normalized === "priority") return "priority";
-	if (normalized === "flex") return "flex";
-	return trimmed;
-}
-//#endregion
-export { CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as n, normalizeCodexServiceTier as t };

package/dist/.setup/shell-dynamic-tools-D3Brj3g9.mjs

@@ -1,85 +0,0 @@
-import { ft as normalizeCodexDynamicToolName } from "./thread-requests-CL1e8Wmx.mjs";
-import { pinExecToolTarget } from "openclaw/plugin-sdk/codex-mcp-projection";
-import { loadNodeExecAvailability } from "openclaw/plugin-sdk/node-selection-runtime";
-//#region extensions/codex/src/app-server/shell-dynamic-tools.ts
-const CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME = "node_exec";
-const CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME = "gateway_exec";
-const CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME = "gateway_process";
-const CODEX_DISABLED_NATIVE_SHELL_DYNAMIC_TOOLS = /* @__PURE__ */ new Set([
-	"exec",
-	"process",
-	"sandbox_exec",
-	"sandbox_process",
-	CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME,
-	CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME,
-	CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME
-]);
-const PROCESS_FOLLOWUP_TEXT = "Use process (list/poll/log/write/send-keys/submit/paste/kill/clear/remove) for follow-up.";
-function isCodexDynamicToolExcluded(config, names) {
-	const normalizedNames = new Set(names.map((name) => normalizeCodexDynamicToolName(name)));
-	return (config.codexDynamicToolsExclude ?? []).some((name) => normalizedNames.has(normalizeCodexDynamicToolName(name)));
-}
-async function createNodeExecAliasDynamicTool(execTool, node, discoverySignal, availabilityRef) {
-	const pinnedNode = node?.trim();
-	const availability = await (availabilityRef ? availabilityRef.current ??= loadNodeExecAvailability(discoverySignal) : loadNodeExecAvailability(discoverySignal));
-	discoverySignal?.throwIfAborted();
-	if (!availability.isAvailable(pinnedNode)) return;
-	const pinnedTool = pinExecToolTarget(execTool, {
-		host: "node",
-		...pinnedNode ? { node: pinnedNode } : {}
-	});
-	return {
-		...pinnedTool,
-		name: CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME,
-		description: pinnedNode ? "Run a shell command to completion on the OpenClaw configured remote node for this session. This tool always uses OpenClaw host=node internally and follows the existing node exec approval and allowlist policy. Remote-node background follow-up is unavailable. Use Codex's native shell for local app-server work when it is available." : "Run a shell command to completion on an OpenClaw remote node. The sole connected node that can execute commands is selected automatically; select by name or id when several can. This tool always uses OpenClaw host=node internally and follows the existing node exec approval and allowlist policy. Remote-node background follow-up is unavailable. Use Codex's native shell for local app-server work when it is available.",
-		execute: withProcessFollowupText(pinnedTool, "Remote-node background follow-up is unavailable. Wait for the command to complete.")
-	};
-}
-function createGatewayExecProjection(createProjection, execTool, params) {
-	return createProjection(execTool, {
-		kind: "exec",
-		name: CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME,
-		description: "Run a shell command through OpenClaw on the Gateway host for OpenClaw-managed Gateway environment access, including Secret Store agent-readable environment values and protected egress sentinels. Native Codex shell remains preferred for ordinary local work. This tool always uses OpenClaw host=gateway internally and follows Gateway exec approval and allowlist policy.",
-		followupText: params.processAliasAvailable ? "Use gateway_process (list/poll/log/write/send-keys/submit/paste/kill/clear/remove) for follow-up." : "Background session follow-up is unavailable because gateway_process is not exposed. Rerun without background=true and set yieldMs high enough to wait for completion.",
-		...params.ask ? { ask: params.ask } : {}
-	});
-}
-function createGatewayProcessProjection(createProjection, processTool) {
-	return createProjection(processTool, {
-		kind: "process",
-		name: CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME,
-		description: "Manage background shell sessions in the existing per-session OpenClaw process scope: list, poll, log, write, send-keys, submit, paste, kill, clear, or remove. Use for gateway_exec follow-up; use native Codex shell session handling for ordinary local work."
-	});
-}
-function createSandboxExecProjection(execTool) {
-	return {
-		...execTool,
-		name: "sandbox_exec",
-		description: "Run a shell command through OpenClaw's configured sandbox backend for this session. Use when OpenClaw sandboxing is active or when a command must execute in the sandbox backend, such as an SSH-backed sandbox or Docker container-path bind layout. Use Codex's native shell only when no OpenClaw sandbox is active and native Code Mode is available.",
-		execute: withProcessFollowupText(execTool, "Use sandbox_process (list/poll/log/write/send-keys/submit/paste/kill/clear/remove) for follow-up.")
-	};
-}
-function withProcessFollowupText(tool, followupText) {
-	return async (toolCallId, args, signal, onUpdate) => {
-		const result = await tool.execute(toolCallId, args, signal, onUpdate);
-		return {
-			...result,
-			content: result.content.map((item) => item.type === "text" ? Object.assign({}, item, { text: item.text.replace(PROCESS_FOLLOWUP_TEXT, followupText) }) : item)
-		};
-	};
-}
-function createSandboxProcessProjection(processTool) {
-	return {
-		...processTool,
-		name: "sandbox_process",
-		description: "Manage background shell sessions through OpenClaw's configured sandbox backend for this session: list, poll, log, write, send-keys, submit, paste, kill, clear, or remove. Use only for sandbox follow-up; use Codex's native shell session handling only when no OpenClaw sandbox is active and native Code Mode is available."
-	};
-}
-/** Keeps replacement shell tools direct even when model metadata mandates Codex Code Mode. */
-function placeDisabledNativeShellToolsInDirectNamespace(tools, nativeToolSurfaceEnabled) {
-	if (nativeToolSurfaceEnabled !== false) return tools;
-	for (const tool of tools) if (CODEX_DISABLED_NATIVE_SHELL_DYNAMIC_TOOLS.has(normalizeCodexDynamicToolName(tool.name))) tool.catalogMode = "direct-only";
-	return tools;
-}
-//#endregion
-export { createGatewayProcessProjection as a, createSandboxProcessProjection as c, createGatewayExecProjection as i, isCodexDynamicToolExcluded as l, CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME as n, createNodeExecAliasDynamicTool as o, CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME as r, createSandboxExecProjection as s, CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME as t, placeDisabledNativeShellToolsInDirectNamespace as u };