@openclaw/codex 2026.10.1 → 2026.10.5-beta.1

package/dist/.setup/{conversation-control-CuiZ_pDL.mjs → conversation-control-GXM3unE4.mjs}

@@ -1,11 +1,10 @@
-import { r as bindingStoreKey } from "./session-binding-record-BZB8RgcF.mjs";
-import { m as isCodexFastServiceTier } from "./config-parsing-BQq-CHTF.mjs";
-import { o as formatCodexDisplayText } from "./command-formatters-DV3DHhdr.mjs";
-import "./config-0Gxk3_eq.mjs";
+import { r as bindingStoreKey } from "./session-binding-record-DU_0biMD.mjs";
+import { r as isCodexFastServiceTier } from "./config-utils-DN_YT7dE.mjs";
+import { o as formatCodexDisplayText } from "./command-formatters-xW9KpoSZ.mjs";
+import "./config-C1YVVLEA.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-requests-Dwg2b4Xl.mjs";
-import "./thread-lifecycle-CoqYpbpk.mjs";
-import "./session-binding-Ce7BqiPN.mjs";
+import "./session-binding-JEHNMPsr.mjs";
+import { a as resolveCodexBindingModelProviderFallback, r as resolveCodexAppServerRequestModelSelection } from "./thread-model-selection-DcVebr8N.mjs";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";
@@ -189,13 +188,11 @@ async function setCodexConversationPermissions(params) {
 }
 function parseCodexFastModeArg(arg) {
 	const normalized = arg?.trim().toLowerCase();
-	if (!normalized || normalized === "status") return;
 	if (normalized === "on" || normalized === "true" || normalized === "fast") return true;
 	if (normalized === "off" || normalized === "false" || normalized === "flex") return false;
 }
 function parseCodexPermissionsModeArg(arg) {
-	const normalized = arg?.trim().toLowerCase();
-	if (!normalized || normalized === "status") return;
+	const normalized = arg?.trim().toLowerCase() ?? "";
 	if (normalized === "yolo" || normalized === "full" || normalized === "full-access") return "yolo";
 	if ([
 		"default",

package/dist/.setup/{cyber-failover-Bb1J6hS1.mjs → cyber-failover-D4dgNfFf.mjs}

@@ -1,5 +1,5 @@
-import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
-import { t as attemptTerminal } from "./attempt-terminal-gZrxQ35N.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
+import { t as attemptTerminal } from "./attempt-terminal-jO5IMj9K.mjs";
 //#region extensions/codex/src/app-server/cyber-failover.ts
 /**
 * Automatic Daybreak escalation for OpenAI cyber-policy refusals.
@@ -50,7 +50,6 @@ function reserveCodexCyberProbe(params) {
 		inFlightProbes.delete(key);
 	};
 }
-/** Remembers that this workspace cannot use the target for `cooloffMs`. */
 function recordCodexCyberTargetUnavailable(params) {
 	if (params.cooloffMs <= 0) return;
 	const now = params.now ?? Date.now();
@@ -62,7 +61,6 @@ function recordCodexCyberTargetUnavailable(params) {
 	}
 	unavailableTargets.set(targetKey(params.model, params.workspace), now + params.cooloffMs);
 }
-/** Decides whether a refused turn may be retried on Daybreak. */
 function planCodexCyberEscalation(params) {
 	const { config } = params;
 	if (config.mode !== "auto") return {
@@ -99,7 +97,6 @@ function planCodexCyberEscalation(params) {
 	};
 }
 const AUTHORIZATION_FAILURE_RE = /\b(401|403)\b|unauthorized|not authorized|forbidden/i;
-/** Everything the escalation decision needs from one attempt outcome. */
 function readCodexCyberAttemptVerdict(result) {
 	const message = result?.currentAttemptAssistant;
 	const refusals = message?.role === "assistant" ? message.diagnostics ?? [] : [];

package/dist/.setup/{cyber-failover-notice-XR03ef31.mjs → cyber-failover-notice-ljgGGL0s.mjs}

@@ -1,4 +1,4 @@
-import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-BuZgVbDA.mjs";
+import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-KN4oh-7O.mjs";
 //#region extensions/codex/src/app-server/cyber-failover-notice.ts
 async function emitCodexCyberNotice(params, notice) {
 	await emitCodexAppServerEvent(params, {

package/dist/.setup/{doctor-start-options-DPW9JxIE.mjs → doctor-start-options-JjTAl-q_.mjs}

@@ -1,8 +1,8 @@
-import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
-import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-HG_Rr3W_.mjs";
-import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-C1VFoVPf.mjs";
-import "./config-0Gxk3_eq.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
+import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-DDzeNQ8m.mjs";
+import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-BtIjV7yN.mjs";
+import "./config-C1YVVLEA.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
 import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveDefaultModelForAgent } from "openclaw/plugin-sdk/agent-runtime";
 import { resolveEffectiveAgentRuntime } from "openclaw/plugin-sdk/command-auth-native";

package/dist/.setup/{dynamic-tool-build-DgWZMfAQ.mjs → dynamic-tool-build-D731PCdv.mjs}

@@ -1,17 +1,31 @@
 import { CODEX_NATIVE_TOOL_REQUIREMENTS } from "../native-tool-policy.js";
-import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-BQq-CHTF.mjs";
-import "./config-0Gxk3_eq.mjs";
+import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-DsWSCPHO.mjs";
+import "./config-C1YVVLEA.mjs";
 import { a as isCodexResponsesOAuthRun } from "./responses-oauth-twnuTaAa.mjs";
-import { ct as filterCodexDynamicToolsForDisabledNativeSurface, dt as isSystemAgentOnlyCodexDynamicToolAllowlist, ft as normalizeCodexDynamicToolName, lt as isForcedPrivateQaCodexRuntime, m as resolveCodexWebSearchPlan, st as filterCodexDynamicTools } from "./thread-requests-Dwg2b4Xl.mjs";
-import { n as resolveCodexNativeExecutionPolicy, r as resolveCodexNodeExecToolOverrides } from "./native-execution-policy-ClzpdG3D.mjs";
-import { a as createGatewayProcessProjection, c as createSandboxProcessProjection, i as createGatewayExecProjection, l as isCodexDynamicToolExcluded, o as createNodeExecAliasDynamicTool, s as createSandboxExecProjection, u as placeDisabledNativeShellToolsInDirectNamespace } from "./shell-dynamic-tools-BqGszXcq.mjs";
+import { F as isForcedPrivateQaCodexRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, R as normalizeCodexDynamicToolName, h as resolveCodexWebSearchPlan } from "./thread-requests-BgzJwJtS.mjs";
+import { n as resolveCodexNativeExecutionPolicy, r as resolveCodexNodeExecToolOverrides } from "./native-execution-policy-MXEe7PB3.mjs";
+import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-BUWIOrSr.mjs";
 import path from "node:path";
 import { createStageTimingTracker, formatStageTimings } from "openclaw/plugin-sdk/time-runtime";
+import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { applyEmbeddedAttemptToolsAllow, buildAgentHookContextChannelFields, buildEmbeddedAttemptToolRunContext, embeddedAgentLog, filterProviderNormalizableTools, getPluginToolMeta, isHostScopedAgentToolActive, isSubagentSessionKey, normalizeAgentRuntimeTools, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
-import { resolveCodexScheduledToolProjectionFactory, runWithCronCreatorAuthorityCapabilityResolver } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { isToolAllowed } from "openclaw/plugin-sdk/sandbox";
+import { resolveCodexScheduledToolProjectionFactory, runWithCronCreatorAuthorityCapabilityResolver } from "openclaw/plugin-sdk/codex-mcp-projection";
 //#region extensions/codex/src/app-server/dynamic-tool-construction-plan.ts
+/** Constructs through the live host while preserving the originating cron authority scope. */
+function createCodexHostToolSurface(params, options, bindingOptions, resolveCronCreatorToolAuthority) {
+	const construct = () => {
+		const createToolSurfaceAsync = params.hostCapabilities.createToolSurfaceAsync;
+		if (!createToolSurfaceAsync) throw new Error("Codex tool construction requires a current host capability");
+		return createToolSurfaceAsync(options, bindingOptions);
+	};
+	return resolveCronCreatorToolAuthority ? runWithCronCreatorAuthorityCapabilityResolver({
+		capability: params.cronCreatorAuthorityCapability,
+		runId: params.runId,
+		resolve: resolveCronCreatorToolAuthority,
+		run: construct
+	}) : construct();
+}
 /** Keeps node filesystem and process ownership on its native exec-server. */
 function resolveCodexToolConstructionPlan(sandbox, nativeToolSurfaceEnabled, requireWorkspaceOnly) {
 	const nodeExecution = isCodexPairedNodeRemoteExecPlacementSandbox(sandbox) && sandbox?.backendId === "node";
@@ -37,7 +51,8 @@ function mapCodexAppServerRemoteWorkspacePath(params) {
 	if (normalizedValue === localRoot) return remoteRoot;
 	const prefix = localRoot.endsWith("/") ? localRoot : `${localRoot}/`;
 	if (!normalizedValue.startsWith(prefix)) throw new Error(`Codex remoteWorkspaceRoot is configured but cwd ${params.value} is outside OpenClaw workspace root ${params.localWorkspaceRoot}; refusing to send a gateway-local cwd to the remote Codex app-server.`);
-	return joinRemoteWorkspacePath(remoteRoot, normalizedValue.slice(prefix.length));
+	const suffix = normalizedValue.slice(prefix.length);
+	return `${remoteRoot}${remoteRoot.endsWith("/") ? "" : "/"}${suffix}`;
 }
 /** Maps a remote workspace artifact back into the corresponding gateway workspace. */
 function mapCodexAppServerLocalWorkspacePath(params) {
@@ -55,7 +70,7 @@ function mapCodexAppServerLocalWorkspacePath(params) {
 	const isRemoteWorkspacePath = matchValue.startsWith(prefix);
 	if (!isRemoteWorkspacePath && isAbsoluteWorkspacePath(normalizedValue)) throw new Error(`Codex remote workspace artifact ${params.value} is outside ${params.remoteWorkspaceRoot}.`);
 	const suffixSegments = (isRemoteWorkspacePath ? normalizedValue.slice(prefix.length) : normalizedValue).split("/");
-	if (suffixSegments.some((segment) => segment === "..")) throw new Error(`Codex remote workspace artifact ${params.value} must stay inside ${params.remoteWorkspaceRoot}.`);
+	if (suffixSegments.includes("..")) throw new Error(`Codex remote workspace artifact ${params.value} must stay inside ${params.remoteWorkspaceRoot}.`);
 	return path.join(params.localWorkspaceRoot, ...suffixSegments.filter((segment) => segment !== "."));
 }
 function normalizeWorkspaceMatchPath(value) {
@@ -68,10 +83,7 @@ function isCodexPassThroughMediaSource(value) {
 	return /^(?:https?|mxc|buffer|media):\/\//iu.test(value) || /^data:/iu.test(value);
 }
 function isAbsoluteWorkspacePath(value) {
-	return value.startsWith("/") || /^[a-z]:\//iu.test(value) || /^[a-z][a-z0-9+.-]*:/iu.test(value);
-}
-function joinRemoteWorkspacePath(remoteRoot, suffix) {
-	return remoteRoot.endsWith("/") ? `${remoteRoot}${suffix}` : `${remoteRoot}/${suffix}`;
+	return value.startsWith("/") || /^[a-z][a-z0-9+.-]*:/iu.test(value);
 }
 //#endregion
 //#region extensions/codex/src/app-server/vision-tools.ts
@@ -80,17 +92,11 @@ function joinRemoteWorkspacePath(remoteRoot, suffix) {
 * OpenClaw's view_image tool only when that surface or model vision is unavailable.
 */
 function filterCodexVisionTools(tools, params) {
-	if (!params.modelHasVision || !params.nativeImageInspectionEnabled) return tools;
-	return tools.filter((tool) => tool.name !== "view_image");
+	return !params.modelHasVision || !params.nativeImageInspectionEnabled ? tools : tools.filter((tool) => tool.name !== "view_image");
 }
 //#endregion
 //#region extensions/codex/src/app-server/dynamic-tool-build.ts
 const CODEX_MEMORY_FLUSH_DYNAMIC_TOOL_ALLOW = /* @__PURE__ */ new Set(["read", "write"]);
-function preserveRingZeroSystemAgentTool(allTools, filteredTools) {
-	const openclaw = allTools.find((tool) => tool.name === "openclaw" && tool.catalogMode === "direct-only");
-	if (!openclaw) return filteredTools;
-	return [openclaw, ...filteredTools.filter((tool) => tool.name !== "openclaw")];
-}
 function resolveCodexMessageToolProvider(params) {
 	return params.messageChannel ?? params.messageProvider;
 }
@@ -131,7 +137,7 @@ async function buildDynamicTools(input) {
 	}
 	const toolBuildStages = createStageTimingTracker();
 	const modelHasVision = params.model.input?.includes("image") ?? false;
-	const agentDir = params.agentDir ?? resolveAgentDir$1(params.config ?? {}, input.sessionAgentId);
+	const agentDir = params.agentDir ?? resolveAgentDir(params.config ?? {}, input.sessionAgentId);
 	const nativeExecutionPolicy = resolveCodexNativeExecutionPolicyForRun(params, {
 		agentId: input.policyAgentId,
 		runtimeSessionKey: input.sandboxSessionKey,
@@ -233,26 +239,16 @@ async function buildDynamicTools(input) {
 		cronCreatorAuthorityUnavailableReason: input.cronCreatorAuthorityUnavailableReason
 	};
 	input.onMessageToolTargetResolved?.(options.requireExplicitMessageTarget === true);
-	const buildOpenClawCodingTools = () => {
-		const bindingOptions = { cwd: input.effectiveCwd ?? input.effectiveWorkspace };
-		const createToolSurface = params.hostCapabilities.createToolSurface;
-		if (!createToolSurface) throw new Error("Codex tool construction requires a current host capability");
-		return createToolSurface(options, bindingOptions);
-	};
-	const allTools = input.resolveCronCreatorToolAuthority ? runWithCronCreatorAuthorityCapabilityResolver({
-		capability: params.cronCreatorAuthorityCapability,
-		runId: params.runId,
-		resolve: input.resolveCronCreatorToolAuthority,
-		run: buildOpenClawCodingTools
-	}) : buildOpenClawCodingTools();
+	const allTools = await createCodexHostToolSurface(params, options, { cwd: input.effectiveCwd ?? input.effectiveWorkspace }, input.resolveCronCreatorToolAuthority);
 	toolBuildStages.mark("create-openclaw-coding-tools");
 	const preNormalizationDiagnostics = [];
 	const readableAllToolProjection = filterProviderNormalizableTools(allTools);
 	preNormalizationDiagnostics.push(...readableAllToolProjection.diagnostics);
 	const readableAllTools = [...readableAllToolProjection.tools];
-	const normallyProfiledTools = input.nativeToolSurfaceEnabled === false ? filterCodexDynamicToolsForDisabledNativeSurface(readableAllTools, input.pluginConfig, { preserveShell: shouldKeepOpenClawShellDynamicTools(input, nativeExecutionPolicy) }) : filterCodexDynamicTools(readableAllTools, input.pluginConfig);
-	const profileFilteredTools = (input.isHostScopedToolActive?.("openclaw") ?? isHostScopedAgentToolActive("openclaw")) && isSystemAgentOnlyCodexDynamicToolAllowlist(params.toolsAllow) ? preserveRingZeroSystemAgentTool(readableAllTools, normallyProfiledTools) : normallyProfiledTools;
-	const codexFilteredTools = await addShellDynamicTools(isCodexMemoryFlushRun(params) ? filterCodexMemoryFlushDynamicTools(readableAllTools) : profileFilteredTools, readableAllTools, input, nativeExecutionPolicy);
+	const normallyProfiledTools = filterCodexDynamicTools(readableAllTools, input.pluginConfig, { disabledNativeSurface: input.nativeToolSurfaceEnabled === false ? { preserveShell: !isCodexMemoryFlushRun(params) && input.sandbox?.enabled !== true && nativeExecutionPolicy.effectiveExecHost !== "node" } : void 0 });
+	const systemAgentTool = (input.isHostScopedToolActive?.("openclaw") ?? isHostScopedAgentToolActive("openclaw")) && isSystemAgentOnlyCodexDynamicToolAllowlist(params.toolsAllow) && readableAllTools.find((tool) => tool.name === "openclaw" && tool.catalogMode === "direct-only");
+	const profileFilteredTools = systemAgentTool ? [systemAgentTool, ...normallyProfiledTools.filter((tool) => tool.name !== "openclaw")] : normallyProfiledTools;
+	const codexFilteredTools = await addShellDynamicTools(isCodexMemoryFlushRun(params) ? readableAllTools.filter((tool) => CODEX_MEMORY_FLUSH_DYNAMIC_TOOL_ALLOW.has(normalizeCodexDynamicToolName(tool.name))) : profileFilteredTools, readableAllTools, input, nativeExecutionPolicy);
 	toolBuildStages.mark("codex-filtering");
 	const visionFilteredTools = filterCodexVisionTools(codexFilteredTools, {
 		modelHasVision,
@@ -260,15 +256,22 @@ async function buildDynamicTools(input) {
 	});
 	toolBuildStages.mark("vision-filtering");
 	const webSearchPresent = visionFilteredTools.some((tool) => tool.name === "web_search");
-	const persistentCodexWebSearchSurface = params.config?.tools?.web?.search?.enabled !== false && !(input.pluginConfig.codexDynamicToolsExclude ?? []).some((name) => normalizeCodexDynamicToolName(name) === "web_search");
+	const persistentCodexWebSearchSurface = params.config?.tools?.web?.search?.enabled !== false && !isCodexDynamicToolExcluded(input.pluginConfig, ["web_search"]);
+	const persistentHostedWebSearchEligible = resolveCodexWebSearchPlan({
+		config: params.config,
+		nativeProviderWebSearchSupport: input.nativeProviderWebSearchSupport
+	}).kind === "native-hosted";
+	let nativeWebSearchAllowed = false;
 	let persistentWebSearchAllowed = webSearchPresent;
-	if (input.onPersistentWebSearchPolicyResolved && !webSearchPresent && persistentCodexWebSearchSurface) {
+	if ((input.onPersistentWebSearchPolicyResolved || webSearchPlan.kind === "native-hosted" && (input.onWebSearchPolicyResolved || webSearchPlan.webFetchHostnameAllowlist)) && !webSearchPresent && persistentCodexWebSearchSurface) {
 		const webSearchPolicy = (await import("openclaw/plugin-sdk/agent-harness")).resolveWebSearchToolPolicy({
 			config: params.config,
 			modelProvider: params.model.provider,
 			modelId: params.modelId,
 			agentId: input.policyAgentId,
 			sessionKey: input.sandboxSessionKey,
+			sessionId: params.sessionId,
+			...persistentHostedWebSearchEligible ? { runtimeToolAllowlist: toolRunContext.runtimeToolAllowlist } : {},
 			sandboxToolPolicy: input.sandbox?.tools,
 			messageProvider: messageToolProvider,
 			agentAccountId: params.agentAccountId,
@@ -284,10 +287,17 @@ async function buildDynamicTools(input) {
 			trustedInternalHandoff: params.trustedInternalHandoff,
 			scheduledToolPolicy: params.scheduledToolPolicy
 		});
-		persistentWebSearchAllowed = webSearchPolicy.persistentAllowed && (!webSearchPolicy.allowed || isCodexMemoryFlushRun(params));
+		persistentWebSearchAllowed = webSearchPolicy.persistentAllowed && (persistentHostedWebSearchEligible || !webSearchPolicy.allowed || isCodexMemoryFlushRun(params));
+		nativeWebSearchAllowed = webSearchPlan.kind === "native-hosted" && webSearchPolicy.allowed && !isCodexMemoryFlushRun(params);
 	}
 	input.onPersistentWebSearchPolicyResolved?.(persistentWebSearchAllowed);
-	const filteredTools = filterCodexDynamicToolsForAllowlist(visionFilteredTools, toolRunContext.runtimeToolAllowlist);
+	const filteredTools = applyEmbeddedAttemptToolsAllow(visionFilteredTools, toolRunContext.runtimeToolAllowlist, {
+		toolMeta: getPluginToolMeta,
+		toolAliases: (tool) => {
+			const normalized = normalizeCodexDynamicToolName(tool.name);
+			return normalized === "sandbox_exec" || normalized === "gateway_exec" || normalized === "node_exec" ? ["exec"] : normalized === "sandbox_process" || normalized === "gateway_process" ? ["exec", "process"] : [];
+		}
+	});
 	toolBuildStages.mark("allowlist-filter");
 	const normalizedTools = normalizeAgentRuntimeTools({
 		runtimePlan: input.ignoreRuntimePlan ? void 0 : params.runtimePlan,
@@ -303,7 +313,7 @@ async function buildDynamicTools(input) {
 		onPreNormalizationSchemaDiagnostics: (diagnostics) => preNormalizationDiagnostics.push(...diagnostics)
 	});
 	toolBuildStages.mark("runtime-normalization");
-	const webSearchAllowed = normalizedTools.some((tool) => tool.name === "web_search");
+	const webSearchAllowed = nativeWebSearchAllowed || normalizedTools.some((tool) => tool.name === "web_search");
 	webFetchHostnameAllowlistRef.value = webSearchAllowed ? webSearchPlan.webFetchHostnameAllowlist : void 0;
 	input.onWebSearchPolicyResolved?.(webSearchAllowed);
 	const webSearchFilteredTools = webSearchPlan.suppressManagedWebSearch ? normalizedTools.filter((tool) => tool.name !== "web_search") : normalizedTools;
@@ -367,9 +377,6 @@ function canCodexAppServerNativeToolSurfaceHonorSandbox(sandbox, options = {}) {
 function isCodexMemoryFlushRun(params) {
 	return params?.trigger === "memory" && Boolean(params.memoryFlushWritePath?.trim());
 }
-function filterCodexMemoryFlushDynamicTools(tools) {
-	return tools.filter((tool) => CODEX_MEMORY_FLUSH_DYNAMIC_TOOL_ALLOW.has(normalizeCodexDynamicToolName(tool.name)));
-}
 /** Requires a Codex sandbox environment only when native tools must run inside OpenClaw sandboxing. */
 function shouldRequireCodexSandboxExecServerEnvironment(params) {
 	return Boolean(isCodexRemoteExecPlacementSandbox(params.sandbox) || params.sandbox?.enabled && params.nativeToolSurfaceEnabled && params.sandboxExecServerEnabled);
@@ -385,20 +392,14 @@ function resolveCodexAppServerExecutionCwd(params) {
 	});
 }
 function resolveCodexExternalSandboxPolicyForOpenClawSandbox(sandbox) {
+	const backendId = sandbox?.backendId.trim().toLowerCase();
+	const dockerNetwork = backendId === "docker" || backendId === "podman";
+	const network = dockerNetwork ? sandbox?.docker?.network?.trim().toLowerCase() : void 0;
 	return {
 		type: "externalSandbox",
-		networkAccess: codexNetworkAccessForOpenClawSandbox(sandbox) ? "enabled" : "restricted"
+		networkAccess: !dockerNetwork || network && network !== "none" ? "enabled" : "restricted"
 	};
 }
-function usesDockerNetworkConfig(sandbox) {
-	const backendId = sandbox?.backendId.trim().toLowerCase();
-	return backendId === "docker" || backendId === "podman";
-}
-function codexNetworkAccessForOpenClawSandbox(sandbox) {
-	if (!usesDockerNetworkConfig(sandbox)) return true;
-	const network = sandbox?.docker?.network?.trim().toLowerCase();
-	return Boolean(network && network !== "none");
-}
 function disableCodexPluginThreadConfig(pluginConfig) {
 	const config = readCodexPluginConfig(pluginConfig);
 	return {
@@ -423,8 +424,8 @@ async function addShellDynamicTools(filteredTools, allTools, input, executionPol
 		"process",
 		"sandbox_process"
 	])) {
-		additions.push(createSandboxExecProjection(execTool));
-		if (processTool) additions.push(createSandboxProcessProjection(processTool));
+		additions.push(createSandboxShellProjection(execTool, "exec"));
+		if (processTool) additions.push(createSandboxShellProjection(processTool, "process"));
 	}
 	if (input.nativeToolSurfaceEnabled === true && input.sandbox?.enabled !== true && executionPolicy.nativeToolSurfaceAllowed && executionPolicy.effectiveExecHost === "gateway" && !isCodexDynamicToolExcluded(input.pluginConfig, ["exec", "gateway_exec"]) && !existingNames.has("gateway_exec")) {
 		const processAliasAvailable = Boolean(processTool && !isCodexDynamicToolExcluded(input.pluginConfig, ["process", "gateway_process"]) && !existingNames.has("gateway_process"));
@@ -443,19 +444,6 @@ async function addShellDynamicTools(filteredTools, allTools, input, executionPol
 	}
 	return additions.length ? [...filteredTools, ...additions] : filteredTools;
 }
-function shouldKeepOpenClawShellDynamicTools(input, nodePolicy) {
-	return !isCodexMemoryFlushRun(input.params) && input.nativeToolSurfaceEnabled === false && input.sandbox?.enabled !== true && nodePolicy.effectiveExecHost !== "node";
-}
-/** Applies a normalized tool allowlist while preserving shell aliases for exec/process. */
-function filterCodexDynamicToolsForAllowlist(tools, toolsAllow) {
-	return applyEmbeddedAttemptToolsAllow(tools, toolsAllow, {
-		toolMeta: getPluginToolMeta,
-		toolAliases: (tool) => {
-			const normalized = normalizeCodexDynamicToolName(tool.name);
-			return normalized === "sandbox_exec" || normalized === "gateway_exec" || normalized === "node_exec" ? ["exec"] : normalized === "sandbox_process" || normalized === "gateway_process" ? ["exec", "process"] : [];
-		}
-	});
-}
 function shouldForceMessageTool(params) {
 	return params.disableMessageTool !== true && params.sourceReplyDeliveryMode === "message_tool_only";
 }