@openclaw/codex 2026.10.5-beta.4 → 2026.10.6

package/dist/.setup/{config-parsing-DsWSCPHO.mjs → config-parsing-CVK2Q463.mjs}

@@ -1,10 +1,48 @@
-import { t as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-contracts.shared-D85SGEuq.mjs";
-import { t as normalizeCodexServiceTier } from "./service-tier-normalization-BPgw2Wdt.mjs";
-import "./config-utils-DN_YT7dE.mjs";
-import { asNullableRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { n as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, t as normalizeCodexServiceTier } from "./service-tier-normalization-C2OVdF6E.mjs";
+import { asNullableRecord, asOptionalRecord as readRecord, normalizeOptionalString as readNonEmptyString, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { createHmac, randomBytes } from "node:crypto";
 import { z } from "zod";
-import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
+import { buildSecretInputSchema, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
+import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
+import { splitCommandArgs } from "openclaw/plugin-sdk/process-runtime";
+//#region extensions/codex/src/app-server/config-utils.ts
+const START_OPTIONS_KEY_SECRET = resolveGlobalSingleton(Symbol.for("openclaw.codexAppServerStartOptionsKeySecret"), () => randomBytes(32));
+const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
+function isCodexFastServiceTier(value) {
+	return normalizeCodexServiceTier(value) === "priority";
+}
+function normalizeHeaders(value) {
+	return Object.fromEntries(Object.entries(value ?? {}).flatMap(([key, child]) => {
+		const name = key.trim();
+		const header = normalizeResolvedSecretInputString({
+			value: child,
+			path: `plugins.entries.codex.config.appServer.headers.${key}`
+		});
+		return name && header ? [[name, header]] : [];
+	}));
+}
+function readExecSecurity(value) {
+	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
+}
+function readExecAsk(value) {
+	return value === "off" || value === "on-miss" || value === "always" ? value : void 0;
+}
+function readNumberEnv(value) {
+	const trimmed = value?.trim();
+	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
+	const parsed = Number(trimmed);
+	return Number.isFinite(parsed) ? parsed : void 0;
+}
+function resolveArgs(configArgs, envArgs) {
+	if (Array.isArray(configArgs)) return normalizeTrimmedStringList(configArgs);
+	return splitCommandArgs(configArgs ?? envArgs ?? "", { allowUnclosedQuotes: true });
+}
+function hashSecretForKey(value, label) {
+	if (!value) return null;
+	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
+}
+//#endregion
 //#region extensions/codex/src/app-server/session-discovery-config.ts
 const codexSessionCatalogHomeSchema = z.union([z.string().trim().min(1), z.object({
 	path: z.string().trim().min(1),
@@ -228,4 +266,4 @@ function resolveCodexPluginDestructivePolicy(policy) {
 	};
 }
 //#endregion
-export { DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME as a, isCodexPairedNodeRemoteExecPlacementSandbox as c, readCodexPluginConfig as d, resolveCodexPluginsPolicy as f, DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME as i, isCodexRemoteExecPlacementSandbox as l, DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS as n, DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS as o, DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS as r, assertCodexAppServerCommandHasNoInlineArgs as s, DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX as t, isCodexSandboxExecServerEnabled as u };
+export { readExecSecurity as _, DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME as a, readRecord as b, isCodexPairedNodeRemoteExecPlacementSandbox as c, readCodexPluginConfig as d, resolveCodexPluginsPolicy as f, readExecAsk as g, normalizeHeaders as h, DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME as i, isCodexRemoteExecPlacementSandbox as l, isCodexFastServiceTier as m, DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS as n, DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS as o, hashSecretForKey as p, DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS as r, assertCodexAppServerCommandHasNoInlineArgs as s, DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX as t, isCodexSandboxExecServerEnabled as u, readNonEmptyString as v, resolveArgs as x, readNumberEnv as y };

package/dist/.setup/{config-runtime-DWzK-k0n.mjs → config-runtime-DGB1-VbB.mjs}

@@ -1,5 +1,5 @@
-import { r as createCodexAppServerConfig } from "./config-options-DDzeNQ8m.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { r as createCodexAppServerConfig } from "./config-options-CZmH25Xq.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({

package/dist/.setup/{config-security-clxAZYWX.mjs → config-security-DpkGNy5T.mjs}

@@ -1,5 +1,4 @@
-import { l as readRecord, s as readNonEmptyString } from "./config-utils-DN_YT7dE.mjs";
-import "./config-parsing-DsWSCPHO.mjs";
+import { b as readRecord, v as readNonEmptyString } from "./config-parsing-CVK2Q463.mjs";
 import { createHash } from "node:crypto";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { parse } from "smol-toml";
@@ -225,7 +224,7 @@ function hasCodexMcpToolApprovalOverrides(servers, serverNames, projectedMcpServ
 	return [...modes.values()].some((mode) => mode === "auto" || mode === "prompt");
 }
 function withMcpElicitationsApprovalPolicy(policy) {
-	if (policy === "untrusted") return policy;
+	if (policy === "untrusted" || policy === "on-request") return policy;
 	if (typeof policy !== "string") return { granular: {
 		...policy.granular,
 		mcp_elicitations: true

package/dist/.setup/{conversation-binding-BieJZRRV.mjs → conversation-binding-Dcv7_rs-.mjs}

@@ -1,27 +1,27 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-DU_0biMD.mjs";
-import { d as readCodexRequirementsToml } from "./config-security-clxAZYWX.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
-import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-DDzeNQ8m.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-f8ODJ_OX.mjs";
-import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-UgLuTSQT.mjs";
-import { o as isCodexAppServerOverloadError } from "./rpc-error-C98SHchT.mjs";
+import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-C2kDBZhx.mjs";
+import { d as readCodexRequirementsToml } from "./config-security-DpkGNy5T.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
+import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-CZmH25Xq.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CXK7tmkb.mjs";
+import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-GRGSgAro.mjs";
+import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-C98SHchT.mjs";
 import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-DfKcoZCB.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-C1YVVLEA.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-LQemoqTL.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, K as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease } from "./shared-client-BCx1wbyA.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-D93nbdB8.mjs";
-import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-DBVMToGo.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-zNuNTKVr.mjs";
-import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-BVcvnps8.mjs";
-import "./session-binding-JEHNMPsr.mjs";
+import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, H as isCodexAppServerLiveThreadClaimed, R as hasCodexAppServerLiveThread, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, q as releaseCodexAppServerLiveThread } from "./shared-client-CNGDTv68.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-Div-zqnz.mjs";
+import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-BVww-ct8.mjs";
+import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-D_sWbxFR.mjs";
+import "./session-binding-BDnNz-Co.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DcVebr8N.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BoUd0i6L.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-D-3bsr1j.mjs";
-import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-CD2MAWU8.mjs";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-D_zv8J7V.mjs";
-import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-GXM3unE4.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BBsOFzCM.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BqOca2Iy.mjs";
+import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-C7kYxPGd.mjs";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-V8zuN8q_.mjs";
+import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-BtPxevoK.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -268,7 +268,7 @@ async function bindThread(params, threadId) {
 function assertNativeConversationApprovalPolicySupported(runtime) {
 	if (runtime.approvalPolicy !== "never" && runtime.approvalsReviewer === "user") throw new Error(NATIVE_CONVERSATION_INTERACTIVE_APPROVALS_UNAVAILABLE);
 }
-async function prepareCodexConversationBinding(params, options = {}) {
+async function prepareCodexConversationBinding(params) {
 	const identity = {
 		kind: "conversation",
 		bindingId: params.data.bindingId
@@ -278,7 +278,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 		const current = params.bindingStore.read(identity);
 		if (current?.threadId !== snapshot?.threadId || current?.clientId !== snapshot?.clientId) throw new Error("Codex conversation binding changed before preparation.");
 		const requested = params.data.start && current?.conversationStartId !== params.data.start.id ? params.data.start : void 0;
-		if (current && !requested && !options.forceNew) return;
+		if (current && !requested) return;
 		const sourceIdentity = params.data.source ? sessionBindingIdentity({
 			agentId: params.data.source.agentId,
 			sessionId: params.data.source.sessionId,
@@ -310,7 +310,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 			agentId: params.data.source?.agentId ?? params.data.agentId
 		};
 		const threadId = requested?.threadId;
-		await bindThread(bindingParams, options.forceNew ? void 0 : threadId);
+		await bindThread(bindingParams, threadId);
 		const stored = params.bindingStore.read(identity);
 		if (!stored) throw new Error("Codex conversation binding disappeared while initializing its thread.");
 		if (sourceIdentity && params.data.source && !current?.conversationSourceTransferComplete) await params.bindingStore.withLease(sourceIdentity, async () => {
@@ -535,6 +535,12 @@ function readLocalMediaPath(value) {
 //#endregion
 //#region extensions/codex/src/conversation-binding.ts
 const DEFAULT_BOUND_TURN_TIMEOUT_MS = 12e5;
+var CodexConversationUnloadedThreadError = class extends Error {
+	constructor(threadId, cause) {
+		super(cause.message, { cause });
+		this.threadId = threadId;
+	}
+};
 async function runBoundTurn(params) {
 	const agentLookup = buildCodexConversationAgentLookup({
 		agentDir: params.data.agentDir,
@@ -546,6 +552,7 @@ async function runBoundTurn(params) {
 	};
 	const binding = params.bindingStore.read(identity);
 	if (!binding?.threadId) throw new Error("bound Codex conversation has no thread binding");
+	if (params.resumeThreadId && binding.threadId !== params.resumeThreadId) throw new Error("Codex conversation binding changed before recovery; review it before resending.");
 	return await withExclusiveCodexAppServerThread({
 		bindingStore: params.bindingStore,
 		identity,
@@ -576,6 +583,7 @@ async function runBoundTurn(params) {
 			const permissionProfile = runtime.networkProxy?.profileName;
 			const networkProxyConfigFingerprint = runtime.networkProxy?.configFingerprint;
 			const networkProxyBindingChanged = binding.networkProxyProfileName !== permissionProfile || binding.networkProxyConfigFingerprint !== networkProxyConfigFingerprint;
+			if (params.resumeThreadId && networkProxyBindingChanged) throw new Error("Codex conversation policy changed before recovery; rebind the conversation and resend your message.");
 			const serviceTier = binding.serviceTier ?? runtime.serviceTier;
 			let useStickyNetworkProfile = permissionProfile !== void 0 && !networkProxyBindingChanged;
 			assertNativeConversationApprovalPolicySupported(runtime);
@@ -625,7 +633,7 @@ async function runBoundTurn(params) {
 						ownsNativeSubscription = true;
 					}
 				}
-				if (networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !params.incognito && !liveThreadOwnership) {
+				if (params.resumeThreadId || networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !params.incognito && !liveThreadOwnership) {
 					if (!networkProxyBindingChanged && binding.clientId === client.getInstanceId()) await assertResumeInputAllowed();
 					const result = await withLeasedCodexAppServerClientStartSelectionRetry({
 						lease: clientLease,
@@ -726,7 +734,10 @@ async function runBoundTurn(params) {
 					...modelSelection?.model ? { model: modelSelection.model } : {},
 					personality: CODEX_NATIVE_PERSONALITY_NONE,
 					...serviceTier ? { serviceTier } : {}
-				}, { timeoutMs: runtime.requestTimeoutMs })).turn.id;
+				}, { timeoutMs: runtime.requestTimeoutMs }).catch((error) => {
+					if (!params.incognito && error instanceof CodexAppServerRpcError && error.method === "turn/start" && error.code === -32600 && error.message === `thread not found: ${threadId}`) throw new CodexConversationUnloadedThreadError(threadId, error);
+					throw error;
+				})).turn.id;
 				activeTurnCleanup = trackCodexConversationActiveTurn({
 					identity,
 					client,
@@ -740,6 +751,7 @@ async function runBoundTurn(params) {
 				turnSucceeded = true;
 				return { text: replyText || "Codex completed without a text reply." };
 			} catch (error) {
+				if (params.resumeThreadId && isCodexThreadReadMissingError(error, threadId)) throw new Error("The bound Codex thread is unavailable. Your message was not submitted; rebind the conversation and resend it.", { cause: error });
 				if (isCodexAppServerOverloadError(error) && error.method === "thread/resume") throw error;
 				if (error instanceof CodexThreadDirectInputError) {
 					if (params.incognito && ownsNativeSubscription) {
@@ -808,15 +820,12 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 	try {
 		return await runBoundTurn(params);
 	} catch (error) {
-		if (!isCodexThreadNotFoundError(error)) throw error;
-		await prepareCodexConversationBinding(params, { forceNew: true });
-		return await runBoundTurn(params);
+		if (!(error instanceof CodexConversationUnloadedThreadError)) throw error;
+		return await runBoundTurn({
+			...params,
+			resumeThreadId: error.threadId
+		});
 	}
 }
-function isCodexThreadNotFoundError(error) {
-	if (isCodexAppServerOverloadError(error) || error instanceof CodexAppServerUnsafeSubscriptionError) return false;
-	const message = formatErrorMessage(error);
-	return /\bthread not found:/iu.test(message) || /\bbound Codex conversation has no thread binding\b/u.test(message);
-}
 //#endregion
 export { runBoundTurnWithMissingThreadRecovery };

package/dist/.setup/{conversation-binding-data-UgLuTSQT.mjs → conversation-binding-data-GRGSgAro.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonBlankString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import process from "node:process";

package/dist/.setup/{conversation-control-GXM3unE4.mjs → conversation-control-BtPxevoK.mjs}

@@ -1,9 +1,9 @@
-import { r as bindingStoreKey } from "./session-binding-record-DU_0biMD.mjs";
-import { r as isCodexFastServiceTier } from "./config-utils-DN_YT7dE.mjs";
+import { r as bindingStoreKey } from "./session-binding-record-C2kDBZhx.mjs";
+import { m as isCodexFastServiceTier } from "./config-parsing-CVK2Q463.mjs";
 import { o as formatCodexDisplayText } from "./command-formatters-xW9KpoSZ.mjs";
-import "./config-C1YVVLEA.mjs";
+import "./config-LQemoqTL.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import "./session-binding-JEHNMPsr.mjs";
+import "./session-binding-BDnNz-Co.mjs";
 import { a as resolveCodexBindingModelProviderFallback, r as resolveCodexAppServerRequestModelSelection } from "./thread-model-selection-DcVebr8N.mjs";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";

package/dist/.setup/{cyber-failover-D4dgNfFf.mjs → cyber-failover-B-q6oT01.mjs}

@@ -1,5 +1,5 @@
-import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
-import { t as attemptTerminal } from "./attempt-terminal-jO5IMj9K.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
+import { t as attemptTerminal } from "./attempt-terminal-sZutF0WY.mjs";
 //#region extensions/codex/src/app-server/cyber-failover.ts
 /**
 * Automatic Daybreak escalation for OpenAI cyber-policy refusals.

package/dist/.setup/{cyber-failover-notice-ljgGGL0s.mjs → cyber-failover-notice-poL3Advd.mjs}

@@ -1,4 +1,4 @@
-import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-KN4oh-7O.mjs";
+import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-DN-ATDp9.mjs";
 //#region extensions/codex/src/app-server/cyber-failover-notice.ts
 async function emitCodexCyberNotice(params, notice) {
 	await emitCodexAppServerEvent(params, {

package/dist/.setup/{doctor-start-options-JjTAl-q_.mjs → doctor-start-options-C28ek2hD.mjs}

@@ -1,8 +1,8 @@
-import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
-import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-DDzeNQ8m.mjs";
-import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-BtIjV7yN.mjs";
-import "./config-C1YVVLEA.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
+import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-CZmH25Xq.mjs";
+import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-DwC9wxch.mjs";
+import "./config-LQemoqTL.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveDefaultModelForAgent } from "openclaw/plugin-sdk/agent-runtime";
 import { resolveEffectiveAgentRuntime } from "openclaw/plugin-sdk/command-auth-native";

package/dist/.setup/{dynamic-tool-build-DcaPmBlE.mjs → dynamic-tool-build-DjbDZzOJ.mjs}

@@ -1,10 +1,10 @@
 import { CODEX_NATIVE_TOOL_REQUIREMENTS } from "../native-tool-policy.js";
-import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-DsWSCPHO.mjs";
-import "./config-C1YVVLEA.mjs";
+import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-CVK2Q463.mjs";
+import "./config-LQemoqTL.mjs";
 import { a as isCodexResponsesOAuthRun } from "./responses-oauth-twnuTaAa.mjs";
-import { F as isForcedPrivateQaCodexRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, R as normalizeCodexDynamicToolName, h as resolveCodexWebSearchPlan } from "./thread-requests-BgzJwJtS.mjs";
+import { F as isForcedPrivateQaCodexRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, R as normalizeCodexDynamicToolName, h as resolveCodexWebSearchPlan } from "./thread-requests-DjyDmCo4.mjs";
 import { n as resolveCodexNativeExecutionPolicy, r as resolveCodexNodeExecToolOverrides } from "./native-execution-policy-MXEe7PB3.mjs";
-import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-wq7jrNLk.mjs";
+import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-BvwSj5bt.mjs";
 import path from "node:path";
 import { createStageTimingTracker, formatStageTimings } from "openclaw/plugin-sdk/time-runtime";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
@@ -350,7 +350,7 @@ async function buildDynamicTools(input) {
 	return exposedTools;
 }
 function shouldEnableCodexAppServerNativeToolSurface(params, sandbox, options = {}) {
-	if (isCodexResponsesOAuthRun(params) || params.requireWorkspaceOnly === true || params.pluginHarnessToolPolicyRestricted === true || isCodexMemoryFlushRun(params) || params.disableTools) return false;
+	if (isCodexResponsesOAuthRun(params) || params.requireWorkspaceOnly === true || params.pluginHarnessToolPolicyRestricted === true || isCodexMemoryFlushRun(params) || params.disableTools || params.oneShotCliRun === true) return false;
 	if (!resolveCodexNativeExecutionPolicyForRun(params, {
 		agentId: options.agentId,
 		runtimeSessionKey: options.runtimeSessionKey,

package/dist/.setup/{dynamic-tools-CnQFnNKH.mjs → dynamic-tools-75qoSOch.mjs}

@@ -1,21 +1,21 @@
 import { i as isJsonObject, r as flattenCodexDynamicToolFunctions, t as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE } from "./protocol-CANUwXJ3.mjs";
-import { n as codexSandboxPolicyForTurn } from "./config-options-DDzeNQ8m.mjs";
+import { n as codexSandboxPolicyForTurn } from "./config-options-CZmH25Xq.mjs";
 import { o as formatCodexDisplayText } from "./command-formatters-xW9KpoSZ.mjs";
 import { o as readItem } from "./event-projector-values-CLvG1Hil.mjs";
 import { s as codexAppIdentityKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import "./config-C1YVVLEA.mjs";
+import "./config-LQemoqTL.mjs";
 import { r as invalidInlineImageText } from "./session-history-read-BI_2jRED.mjs";
 import { o as neutralizeCodexExplicitMentionSigils } from "./context-engine-projection-ps-yn_ci.mjs";
-import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-BCx1wbyA.mjs";
-import { A as createFailedDynamicToolResponse, j as failedToolResult, k as resolveCodexToolAbortTerminalReason, l as CodexServerRequestResolvedError, w as createCodexElicitationResponse, x as readCodexTurnCompletedNotification } from "./client-D93nbdB8.mjs";
+import { G as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-CNGDTv68.mjs";
+import { A as createFailedDynamicToolResponse, j as failedToolResult, k as resolveCodexToolAbortTerminalReason, l as CodexServerRequestResolvedError, w as createCodexElicitationResponse, x as readCodexTurnCompletedNotification } from "./client-Div-zqnz.mjs";
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
-import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, c as readCodexNotificationTurnId, d as auditNativeToolUnfinishedStatus, l as auditNativeToolName, s as readCodexNotificationThreadId, u as auditNativeToolTerminalStatus, v as itemStatus } from "./turn-router-DBVMToGo.mjs";
+import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, c as readCodexNotificationTurnId, d as auditNativeToolUnfinishedStatus, l as auditNativeToolName, s as readCodexNotificationThreadId, u as auditNativeToolTerminalStatus, v as itemStatus } from "./turn-router-DM0fRrYI.mjs";
 import { n as resolveCodexAppServerReasoningEffort, t as readCodexSupportedReasoningEfforts } from "./reasoning-effort-CS9kKWB9.mjs";
-import { V as joinPresentSections } from "./thread-requests-BgzJwJtS.mjs";
+import { V as joinPresentSections } from "./thread-requests-DjyDmCo4.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DcVebr8N.mjs";
-import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-CD88q3yx.mjs";
-import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-DcaPmBlE.mjs";
-import { c as emitCodexNativePreToolUseFailureDiagnostic } from "./native-hook-relay-wq7jrNLk.mjs";
+import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-CXXXhuKi.mjs";
+import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-DjbDZzOJ.mjs";
+import { c as emitCodexNativePreToolUseFailureDiagnostic } from "./native-hook-relay-BvwSj5bt.mjs";
 import { createRequire } from "node:module";
 import { asNonArrayRecord, asOptionalRecord, filterStringEntries, isRecord, normalizeOptionalString, normalizeTrimmedStringList, readNonBlankString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
@@ -26,12 +26,12 @@ import { DEFAULT_MAX_LIVE_TOOL_RESULT_CHARS, estimateToolResultTextChars, resolv
 import path, { posix } from "node:path";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { createBoundedRemoteFileReader, isPathStrictlyInside, root } from "openclaw/plugin-sdk/file-access-runtime";
+import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 import { once } from "node:events";
 import { spawn } from "node:child_process";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { emitTrustedDiagnosticEvent, hasPendingInternalDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { buildHarnessVisibleReplyGuidance, buildTemporalContextText, captureToolAuthoredSourceReply, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractMessagingToolSend, extractMessagingToolSendResult, finalizeAgentToolAvailability, finalizeToolTerminalPresentation, formatApprovalDisplayPath, formatToolExecutionErrorMessage, getBeforeToolCallFailureDisposition, getChannelAgentToolMeta, getPluginToolMeta, getPluginToolSideEffectOwnerKey, hasNativeHookRelayInvocation, invokeNativeHookRelay, isDeliveredMessageToolOnlySourceReplyResult, isDeliveredMessagingToolResult, isDeliveredMessagingToolSendToCurrentSource, isMessagingTool, isReplaySafeToolCall, isToolResultError, isToolWrappedWithBeforeToolCallHook, projectPluginMessageDeliveryFact, projectRuntimeToolInputSchema, readEmbeddedMessageDeliveryFact, readToolOperatorHint, resolveNativeHookRelayDeferredToolApproval, resolveToolExecutionErrorKind, runAgentHarnessAfterToolCallHook, sanitizeToolResult, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { sanitizeInlineImageDataUrl } from "openclaw/plugin-sdk/inline-image-data-url-runtime";

package/dist/.setup/{effective-mcp-catalog-B5HKFZNK.mjs → effective-mcp-catalog-Dz0J8iAj.mjs}

@@ -1,8 +1,8 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-DU_0biMD.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-f8ODJ_OX.mjs";
-import { W as protectCodexAppServerLiveThread } from "./shared-client-BCx1wbyA.mjs";
-import "./session-binding-JEHNMPsr.mjs";
-import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-DW41snf3.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-C2kDBZhx.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CXK7tmkb.mjs";
+import { G as protectCodexAppServerLiveThread } from "./shared-client-CNGDTv68.mjs";
+import "./session-binding-BDnNz-Co.mjs";
+import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-_sawBkIh.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts
@@ -107,7 +107,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 	if (!retained && params.prepareSession) {
 		const preparation = await params.prepareSession();
 		params.assertCurrent();
-		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-Dz2GOwyE.mjs");
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-C7LyxbAm.mjs");
 		await prepareCodexMcpAppSession({
 			preparation,
 			bindingStore: options.bindingStore,
@@ -128,7 +128,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 		};
 		params.assertCurrent();
 		assertBinding();
-		const { createNativeMcpRuntime } = await import("./native-mcp-app-DX3nyTtc.mjs").then((n) => n.n);
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-DDEtVQED.mjs").then((n) => n.n);
 		params.assertCurrent();
 		const runtime = createNativeMcpRuntime({
 			client: retained.client,

package/dist/.setup/{ephemeral-turn-De3qb8EQ.mjs → ephemeral-turn-K_d99r9P.mjs}

@@ -1,6 +1,6 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { x as readCodexTurnCompletedNotification } from "./client-D93nbdB8.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-DBVMToGo.mjs";
+import { x as readCodexTurnCompletedNotification } from "./client-Div-zqnz.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
 import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-BpKfdoTm.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{inference-proxy-BDWV0djM.mjs → inference-proxy-DSnaS-uS.mjs}

@@ -289,6 +289,7 @@ async function createCodexInferenceProxy(params) {
 			let resident = null;
 			const controller = new AbortController();
 			const deadlineAtMs = Date.now() + HANDSHAKE_TIMEOUT_MS;
+			const deadlineAtMonotonicMs = performance.now() + HANDSHAKE_TIMEOUT_MS;
 			let releasePermit = null;
 			let framePending = false;
 			let idleTimer;
@@ -322,7 +323,7 @@ async function createCodexInferenceProxy(params) {
 				});
 			};
 			const close = () => finish();
-			const failHandshake = () => finish(Date.now() >= deadlineAtMs ? 504 : 502);
+			const failHandshake = () => finish(performance.now() >= deadlineAtMonotonicMs ? 504 : 502);
 			try {
 				const { target, path } = resolveTarget(req);
 				if (params.oauth) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
@@ -352,12 +353,12 @@ async function createCodexInferenceProxy(params) {
 					rejectBusyUpgrade(socket);
 					return;
 				}
-				handshakeTimer = setTimeout(() => finish(504), Math.max(1, deadlineAtMs - Date.now()));
+				handshakeTimer = setTimeout(() => finish(504), Math.max(1, deadlineAtMonotonicMs - performance.now()));
 				handshakeTimer.unref();
 				const assertHandshakeCurrent = () => {
 					assertCurrent();
 					signal.throwIfAborted();
-					if (Date.now() >= deadlineAtMs) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
+					if (performance.now() >= deadlineAtMonotonicMs) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
 				};
 				proxyAgent = createNodeProxyAgent({
 					mode: "env",
@@ -374,7 +375,7 @@ async function createCodexInferenceProxy(params) {
 					followRedirects: false,
 					perMessageDeflate: false,
 					maxPayload: MAX_BODY_BYTES,
-					handshakeTimeout: Math.max(1, deadlineAtMs - Date.now()),
+					handshakeTimeout: Math.max(1, deadlineAtMonotonicMs - performance.now()),
 					finishRequest(request) {
 						let socketClosed = Promise.resolve();
 						request.once("socket", (upstreamSocket) => {

package/dist/.setup/{isolated-completion-BPJdvk5F.mjs → isolated-completion-dNt4kRLw.mjs}

@@ -1,10 +1,10 @@
-import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
-import { i as resolveCodexAppServerHomeScope } from "./config-options-DDzeNQ8m.mjs";
-import "./config-C1YVVLEA.mjs";
-import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-BCx1wbyA.mjs";
-import { f as assertCodexPassiveTurnItems } from "./client-D93nbdB8.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-DfIJtRlv.mjs";
-import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-BfDAo-qZ.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
+import { i as resolveCodexAppServerHomeScope } from "./config-options-CZmH25Xq.mjs";
+import "./config-LQemoqTL.mjs";
+import { rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CNGDTv68.mjs";
+import { f as assertCodexPassiveTurnItems } from "./client-Div-zqnz.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-vdpL2efh.mjs";
+import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-CIQJykuM.mjs";
 import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CLMKN4x-.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts
 /** Runs prompt-only Codex inference on an ephemeral, ring-zero native thread. */

package/dist/.setup/{managed-binary-BtIjV7yN.mjs → managed-binary-DwC9wxch.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
 import { createRequire } from "node:module";
 import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 import { constants, existsSync, realpathSync } from "node:fs";

package/dist/.setup/{mcp-app-session-preparation-Dz2GOwyE.mjs → mcp-app-session-preparation-C7LyxbAm.mjs}

@@ -1,18 +1,17 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-DU_0biMD.mjs";
-import { d as readCodexRequirementsToml } from "./config-security-clxAZYWX.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-C2kDBZhx.mjs";
+import { d as readCodexRequirementsToml } from "./config-security-DpkGNy5T.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { i as withCodexAppServerGitConfig } from "./transport-stdio-CRWTkKOn.mjs";
 import { n as buildCodexAppServerRuntimeFingerprint, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-B7HAAZSI.mjs";
-import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-C1YVVLEA.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-C0t9TBX_.mjs";
+import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-LQemoqTL.mjs";
 import { r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BCx1wbyA.mjs";
-import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-BVcvnps8.mjs";
-import { i as resolveCodexSessionBinding } from "./session-binding-JEHNMPsr.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BoUd0i6L.mjs";
-import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-C_aYiYqk.mjs";
-import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-CD2MAWU8.mjs";
+import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CNGDTv68.mjs";
+import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-D_sWbxFR.mjs";
+import { i as resolveCodexSessionBinding } from "./session-binding-BDnNz-Co.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BBsOFzCM.mjs";
+import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-DjSfTw6v.mjs";
+import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-C7kYxPGd.mjs";
 import { z } from "zod";
 import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
@@ -76,8 +75,7 @@ async function prepareCodexMcpAppSession(params) {
 				canUseAutoReview: false
 			});
 			const environment = input.hostCapabilities.preparedEnvironment?.();
-			const ownedLocalProcess = appServer.start.transport === "stdio" && !isCodexAppServerProxyLaunch(appServer.start.args) && !appServer.remoteWorkspaceRoot;
-			const baseStartOptions = appServer.start.transport === "stdio" && !isCodexAppServerProxyLaunch(appServer.start.args) ? {
+			const startOptions = appServer.start.transport === "stdio" && !isCodexAppServerProxyLaunch(appServer.start.args) ? {
 				...appServer.start,
 				env: {
 					...appServer.start.env,
@@ -86,8 +84,6 @@ async function prepareCodexMcpAppSession(params) {
 					...environment?.localProcessEnv
 				}
 			} : appServer.start;
-			const shellGitConfigParameters = ownedLocalProcess ? environment?.localGitConfigParameters : void 0;
-			const startOptions = shellGitConfigParameters ? withCodexAppServerGitConfig(baseStartOptions, shellGitConfigParameters) : baseStartOptions;
 			const authProfileId = resolveCodexAppServerAuthProfileId({
 				authProfileId: input.authProfileId ?? admitted.binding?.authProfileId,
 				store: input.authProfileStore,
@@ -168,7 +164,6 @@ async function prepareCodexMcpAppSession(params) {
 					agentDir: input.agentDir,
 					cwd: input.workspaceDir,
 					appServer,
-					shellGitConfigParameters,
 					dynamicTools: [],
 					nativeCodeModeEnabled: false,
 					webSearchAllowed: false,

package/dist/.setup/{mcp-tool-metadata-DW41snf3.mjs → mcp-tool-metadata-_sawBkIh.mjs}

@@ -1,4 +1,4 @@
-import { r as parseCodexPluginMarketplaceId } from "./plugin-marketplace-discovery-BblHM3DU.mjs";
+import { r as parseCodexPluginMarketplaceId } from "./plugin-marketplace-discovery-BNyI1zd_.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeMcpCodexToolAnnotations, readMcpAppIcons, readMcpAppSettingsCapability, readMcpAppToolExtensions } from "openclaw/plugin-sdk/codex-mcp-projection";
 //#region extensions/codex/src/app-server/mcp-tool-metadata.ts

package/dist/.setup/{model-catalog-ZNwltCKl.mjs → model-catalog-BRJ7RMXY.mjs}

@@ -1,15 +1,15 @@
 import { t as buildCodexRuntimeModelParams } from "./model-runtime-BdqzOMkU.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-f8ODJ_OX.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-Bo0kKABI.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
+import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-CXK7tmkb.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-m-H-7FMu.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-BCx1wbyA.mjs";
+import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-CNGDTv68.mjs";
 import { i as isCodexResponsesOAuthCredential } from "./responses-oauth-twnuTaAa.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-D93nbdB8.mjs";
-import { n as listAllCodexAppServerModels } from "./models-BHpbAuz8.mjs";
-import { probeCodexNativeAuth } from "./native-auth-esN5MdIv.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-Div-zqnz.mjs";
+import { n as listAllCodexAppServerModels } from "./models-CusrgpiY.mjs";
+import { probeCodexNativeAuth } from "./native-auth-CveRfTpz.mjs";
 //#region extensions/codex/src/app-server/model-catalog.ts
 const INPUT_TYPES = /* @__PURE__ */ new Set([
 	"text",

package/dist/.setup/{models-BHpbAuz8.mjs → models-CusrgpiY.mjs}

@@ -1,4 +1,4 @@
-import { d as assertCodexModelListResponse } from "./client-D93nbdB8.mjs";
+import { d as assertCodexModelListResponse } from "./client-Div-zqnz.mjs";
 import { normalizeOptionalString, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 1e4;
@@ -29,8 +29,8 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
 	const timeoutMs = options.timeoutMs ?? 1e4;
-	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-BCx1wbyA.mjs").then((n) => n.v);
-	const { requestCodexAppServerClientJson } = await import("./request-Bo0kKABI.mjs").then((n) => n.i);
+	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CNGDTv68.mjs").then((n) => n.v);
+	const { requestCodexAppServerClientJson } = await import("./request-m-H-7FMu.mjs").then((n) => n.i);
 	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,