@openclaw/codex 2026.5.10-beta.5 → 2026.5.12-beta.2

package/dist/{client-factory-D2P0KD6r.js → client-factory-Bw7M3rdW.js}

@@ -1,5 +1,5 @@
 //#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-K13b0L1X.js").then((n) => n.i).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-DSSqFqHM.js").then((n) => n.i).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
 	agentDir,

package/dist/{client-CpksBQ9l.js → client-kySkmL1r.js}

@@ -1,4 +1,4 @@
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
+import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { n as isRpcResponse } from "./protocol-C9UWI98H.js";
 import { createInterface } from "node:readline";
 import { OPENCLAW_VERSION, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/{command-handlers-iLF1EI-b.js → command-handlers-D9CzemFF.js}

@@ -1,12 +1,12 @@
-import { i as isCodexFastServiceTier, s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-Bg-Qf5s-.js";
+import { i as isCodexFastServiceTier, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-DqfYggBz.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as CODEX_CONTROL_METHODS, r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BCAfJvSg.js";
+import { n as CODEX_CONTROL_METHODS, r as describeControlFailure, t as requestCodexAppServerJson } from "./request-DSOsuqmX.js";
 import { a as formatComputerUseStatus, c as formatThreads, i as formatCodexStatus, l as readString$1, n as formatAccount, o as formatList, p as summarizeCodexAccountUsage, r as formatCodexDisplayText, s as formatModels, t as buildHelp } from "./command-formatters-Ttwc_kgX.js";
-import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-UFKjHkKJ.js";
-import { a as parseCodexFastModeArg, c as setCodexConversationFastMode, d as steerCodexConversationTurn, f as stopCodexConversationTurn, i as formatPermissionsMode, l as setCodexConversationModel, m as resolveCodexDefaultWorkspaceDir, o as parseCodexPermissionsModeArg, p as readCodexConversationBindingData, r as startCodexConversationThread, s as readCodexConversationActiveTurn, u as setCodexConversationPermissions } from "./conversation-binding-D4XZ-tvV.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CVLaKaW3.js";
-import { n as rememberCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
+import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CDN-Pf8K.js";
+import { a as parseCodexFastModeArg, c as setCodexConversationFastMode, d as steerCodexConversationTurn, f as stopCodexConversationTurn, i as formatPermissionsMode, l as setCodexConversationModel, m as resolveCodexDefaultWorkspaceDir, o as parseCodexPermissionsModeArg, p as readCodexConversationBindingData, r as startCodexConversationThread, s as readCodexConversationActiveTurn, u as setCodexConversationPermissions } from "./conversation-binding-Dn66MHqg.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-Br-1hHIR.js";
+import { n as rememberCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
 import crypto from "node:crypto";
 import { ensureAuthProfileStore, findNormalizedProviderValue, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveDefaultAgentDir, resolveProfileUnusableUntilForDisplay } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/command-account.ts

package/dist/{compact-BJ1UYEyA.js → compact-DfmGNV9J.js}

@@ -1,7 +1,7 @@
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
+import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { i as readCodexAppServerBinding } from "./session-binding-UFKjHkKJ.js";
-import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-D2P0KD6r.js";
+import { i as readCodexAppServerBinding } from "./session-binding-CDN-Pf8K.js";
+import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-Bw7M3rdW.js";
 import { embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, runHarnessContextEngineMaintenance } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const DEFAULT_CODEX_COMPACTION_WAIT_TIMEOUT_MS = 300 * 1e3;

package/dist/{computer-use-CVLaKaW3.js → computer-use-Br-1hHIR.js}

@@ -1,5 +1,5 @@
-import { c as resolveCodexComputerUseConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
-import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BCAfJvSg.js";
+import { c as resolveCodexComputerUseConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-DSOsuqmX.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{config-C7xdbzrp.js → config-0rd3LnKg.js}

@@ -92,7 +92,7 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 	const config = readCodexPluginConfig(pluginConfig).codexPlugins;
 	const configured = config !== void 0;
 	const enabled = config?.enabled === true;
-	const allowDestructiveActions = config?.allow_destructive_actions ?? false;
+	const allowDestructiveActions = config?.allow_destructive_actions ?? true;
 	return {
 		configured,
 		enabled,

package/dist/{conversation-binding-D4XZ-tvV.js → conversation-binding-Dn66MHqg.js}

@@ -1,9 +1,9 @@
-import { i as isCodexFastServiceTier, r as codexSandboxPolicyForTurn, s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
+import { i as isCodexFastServiceTier, r as codexSandboxPolicyForTurn, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as CODEX_CONTROL_METHODS } from "./request-BCAfJvSg.js";
+import { n as CODEX_CONTROL_METHODS } from "./request-DSOsuqmX.js";
 import { r as formatCodexDisplayText } from "./command-formatters-Ttwc_kgX.js";
-import { l as resolveCodexAppServerAuthProfileIdForAgent, r as getSharedCodexAppServerClient } from "./shared-client-K13b0L1X.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-UFKjHkKJ.js";
+import { l as resolveCodexAppServerAuthProfileIdForAgent, r as getSharedCodexAppServerClient } from "./shared-client-DSSqFqHM.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-CDN-Pf8K.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import path from "node:path";
 import { fileURLToPath } from "node:url";

package/dist/harness.js

@@ -18,25 +18,25 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-DZvighJE.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-y4QDhBHf.js");
 			return runCodexAppServerAttempt(params, { pluginConfig: options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-Dh_g53P9.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-BcATx0hX.js");
 			return runCodexAppServerSideQuestion(params, { pluginConfig: options?.pluginConfig });
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-BJ1UYEyA.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-DfmGNV9J.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.pluginConfig });
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-UFKjHkKJ.js").then((n) => n.a);
+				const { clearCodexAppServerBinding } = await import("./session-binding-CDN-Pf8K.js").then((n) => n.a);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-K13b0L1X.js").then((n) => n.i);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-DSSqFqHM.js").then((n) => n.i);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,11 +1,13 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
-import { t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-C7xdbzrp.js";
+import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0rd3LnKg.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
 import { buildCodexProvider } from "./provider.js";
-import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BCAfJvSg.js";
+import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-DSOsuqmX.js";
 import { r as formatCodexDisplayText } from "./command-formatters-Ttwc_kgX.js";
-import { n as handleCodexConversationInboundClaim, t as handleCodexConversationBindingResolved } from "./conversation-binding-D4XZ-tvV.js";
-import { i as defaultCodexAppInventoryCache, t as ensureCodexPluginActivation } from "./plugin-activation-C0soz2YD.js";
+import { l as resolveCodexAppServerAuthProfileIdForAgent, s as resolveCodexAppServerAuthAccountCacheKey, u as resolveCodexAppServerEnvApiKeyCacheKey } from "./shared-client-DSSqFqHM.js";
+import { n as handleCodexConversationInboundClaim, t as handleCodexConversationBindingResolved } from "./conversation-binding-Dn66MHqg.js";
+import { a as defaultCodexAppInventoryCache, n as pluginReadParams, t as ensureCodexPluginActivation } from "./plugin-activation-PXGqUjwY.js";
+import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DjrZp49q.js";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import os from "node:os";
@@ -37,7 +39,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-iLF1EI-b.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-D9CzemFF.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -134,46 +136,24 @@ async function discoverPluginDirs(codexHome) {
 	await visit(root, 0);
 	return [...discovered.values()].toSorted((a, b) => a.source.localeCompare(b.source));
 }
-async function discoverInstalledCuratedPlugins(codexHome) {
+async function discoverInstalledCuratedPlugins(codexHome, options = {}) {
+	const requestOptions = { startOptions: sourceCodexAppServerStartOptions(codexHome) };
 	try {
-		const marketplace = (await requestCodexAppServerJson({
+		const marketplace = (await requestSourceCodexAppServerJson(requestOptions, {
 			method: "plugin/list",
-			requestParams: { cwds: [] },
-			timeoutMs: 6e4,
-			startOptions: {
-				transport: "stdio",
-				command: "codex",
-				commandSource: "config",
-				args: [
-					"app-server",
-					"--listen",
-					"stdio://"
-				],
-				headers: {},
-				env: {
-					CODEX_HOME: codexHome,
-					HOME: path.dirname(codexHome)
-				}
-			}
+			requestParams: { cwds: [] }
 		})).marketplaces.find((entry) => entry.name === CODEX_PLUGINS_MARKETPLACE_NAME);
 		if (!marketplace) return {
 			plugins: [],
 			error: `Codex marketplace ${CODEX_PLUGINS_MARKETPLACE_NAME} was not found in source plugin inventory.`
 		};
-		return { plugins: marketplace.plugins.filter((plugin) => plugin.installed).map((plugin) => {
-			const pluginName = pluginNameFromSummary(plugin);
-			if (!pluginName) return;
-			return {
-				name: plugin.name,
-				pluginName,
-				marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
-				source: `${CODEX_PLUGINS_MARKETPLACE_NAME}/${pluginName}`,
-				sourceKind: "app-server",
-				migratable: true,
-				installed: plugin.installed,
-				enabled: plugin.enabled
-			};
-		}).filter((plugin) => plugin !== void 0).toSorted((a, b) => (a.pluginName ?? a.name).localeCompare(b.pluginName ?? b.name)) };
+		const plugins = marketplace.plugins.filter((plugin) => plugin.installed).map((plugin) => buildInstalledPluginSource(plugin)).filter((plugin) => plugin !== void 0);
+		return { plugins: (options.evaluatePluginMigrationEligibility === true ? await withPluginMigrationEligibility({
+			plugins,
+			marketplace: marketplaceRef(marketplace),
+			requestOptions,
+			verifyPluginApps: options.verifyPluginApps === true
+		}) : plugins).toSorted((a, b) => (a.pluginName ?? a.name).localeCompare(b.pluginName ?? b.name)) };
 	} catch (error) {
 		return {
 			plugins: [],
@@ -181,6 +161,239 @@ async function discoverInstalledCuratedPlugins(codexHome) {
 		};
 	}
 }
+function sourceCodexAppServerStartOptions(codexHome) {
+	return {
+		transport: "stdio",
+		command: "codex",
+		commandSource: "config",
+		args: [
+			"app-server",
+			"--listen",
+			"stdio://"
+		],
+		headers: {},
+		env: {
+			CODEX_HOME: codexHome,
+			HOME: path.dirname(codexHome)
+		}
+	};
+}
+async function requestSourceCodexAppServerJson(options, params) {
+	return await requestCodexAppServerJson({
+		method: params.method,
+		requestParams: params.requestParams,
+		timeoutMs: 6e4,
+		startOptions: options.startOptions,
+		authProfileId: null,
+		isolated: true
+	});
+}
+function buildInstalledPluginSource(plugin) {
+	const pluginName = pluginNameFromSummary(plugin);
+	if (!pluginName) return;
+	return {
+		name: plugin.name,
+		pluginName,
+		marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
+		source: `${CODEX_PLUGINS_MARKETPLACE_NAME}/${pluginName}`,
+		sourceKind: "app-server",
+		migratable: true,
+		installed: plugin.installed,
+		enabled: plugin.enabled
+	};
+}
+function marketplaceRef(marketplace) {
+	return {
+		name: CODEX_PLUGINS_MARKETPLACE_NAME,
+		...marketplace.path ? { path: marketplace.path } : {},
+		...!marketplace.path ? { remoteMarketplaceName: marketplace.name } : {}
+	};
+}
+async function withPluginMigrationEligibility(params) {
+	const pending = [];
+	const evaluated = [];
+	for (const plugin of params.plugins) {
+		if (plugin.enabled !== true) {
+			evaluated.push({
+				...plugin,
+				migratable: false,
+				migrationBlock: { code: "plugin_disabled" },
+				message: `Codex plugin "${plugin.pluginName ?? plugin.name}" is installed in Codex but disabled; enable it in Codex before migrating it to OpenClaw.`
+			});
+			continue;
+		}
+		const detail = await readPluginDetail(params.requestOptions, params.marketplace, plugin);
+		if (!detail.ok) {
+			evaluated.push({
+				...plugin,
+				migratable: false,
+				migrationBlock: {
+					code: "plugin_read_unavailable",
+					error: detail.error
+				},
+				message: `Codex plugin "${plugin.pluginName ?? plugin.name}" detail could not be read: ${detail.error}`
+			});
+			continue;
+		}
+		if (detail.detail.apps.length === 0) {
+			evaluated.push({
+				...plugin,
+				migratable: true
+			});
+			continue;
+		}
+		const apps = detail.detail.apps.map(sourcePluginAppFact).toSorted((left, right) => left.id.localeCompare(right.id));
+		pending.push({
+			plugin,
+			apps
+		});
+	}
+	if (pending.length === 0) return evaluated;
+	let sourceAccount;
+	try {
+		sourceAccount = await readSourceCodexAccount(params.requestOptions);
+	} catch (error) {
+		if (!params.verifyPluginApps) {
+			const message = error instanceof Error ? error.message : String(error);
+			for (const { plugin, apps } of pending) evaluated.push({
+				...plugin,
+				migratable: false,
+				migrationBlock: {
+					code: "codex_account_unavailable",
+					apps,
+					error: message
+				},
+				message: `Codex plugin "${plugin.pluginName ?? plugin.name}" owns apps, but the source Codex app-server account could not be read: ${message}`
+			});
+			return evaluated;
+		}
+	}
+	if (sourceAccount && sourceAccount !== "chatgpt") {
+		for (const { plugin, apps } of pending) evaluated.push({
+			...plugin,
+			migratable: false,
+			migrationBlock: {
+				code: "codex_subscription_required",
+				apps
+			},
+			message: codexSubscriptionRequiredMessage(plugin)
+		});
+		return evaluated;
+	}
+	if (!params.verifyPluginApps) {
+		for (const { plugin, apps } of pending) evaluated.push({
+			...plugin,
+			apps,
+			migratable: true
+		});
+		return evaluated;
+	}
+	const snapshot = await refreshSourceAppInventory(params.requestOptions).catch((error) => {
+		const message = error instanceof Error ? error.message : String(error);
+		for (const { plugin, apps } of pending) evaluated.push({
+			...plugin,
+			migratable: false,
+			migrationBlock: {
+				code: "app_inventory_unavailable",
+				apps,
+				error: message
+			},
+			message: `Codex plugin "${plugin.pluginName ?? plugin.name}" owns apps, but source app inventory could not be read: ${message}`
+		});
+	});
+	if (!snapshot) return evaluated;
+	const appInfoById = new Map(snapshot.apps.map((app) => [app.id, app]));
+	for (const { plugin, apps: declaredApps } of pending) {
+		const apps = declaredApps.map((app) => sourcePluginAppFactWithInventory(app, appInfoById.get(app.id))).toSorted((left, right) => left.id.localeCompare(right.id));
+		const blockCode = migrationBlockCodeForApps(apps);
+		if (!blockCode) {
+			evaluated.push({
+				...plugin,
+				apps,
+				migratable: true
+			});
+			continue;
+		}
+		evaluated.push({
+			...plugin,
+			migratable: false,
+			migrationBlock: {
+				code: blockCode,
+				apps
+			},
+			message: appInventoryBlockMessage(plugin, apps, blockCode)
+		});
+	}
+	return evaluated;
+}
+async function readSourceCodexAccount(options) {
+	const response = await requestSourceCodexAppServerJson(options, {
+		method: "account/read",
+		requestParams: { refreshToken: false }
+	});
+	if (!response.account || typeof response.account !== "object" || Array.isArray(response.account)) return "missing";
+	return response.account.type === "chatgpt" ? "chatgpt" : "non_chatgpt";
+}
+async function readPluginDetail(options, marketplace, plugin) {
+	try {
+		return {
+			ok: true,
+			detail: (await requestSourceCodexAppServerJson(options, {
+				method: "plugin/read",
+				requestParams: pluginReadParams(marketplace, plugin.pluginName ?? plugin.name)
+			})).plugin
+		};
+	} catch (error) {
+		return {
+			ok: false,
+			error: error instanceof Error ? error.message : String(error)
+		};
+	}
+}
+async function refreshSourceAppInventory(options) {
+	const key = buildCodexPluginAppCacheKey({ appServer: { start: options.startOptions } });
+	const request = async (method, requestParams) => await requestSourceCodexAppServerJson(options, {
+		method,
+		requestParams
+	});
+	return await defaultCodexAppInventoryCache.refreshNow({
+		key,
+		request,
+		forceRefetch: true
+	});
+}
+function sourcePluginAppFact(app) {
+	return {
+		id: app.id,
+		name: app.name,
+		needsAuth: app.needsAuth
+	};
+}
+function sourcePluginAppFactWithInventory(app, info) {
+	if (!info) return app;
+	return {
+		...app,
+		isAccessible: info.isAccessible,
+		isEnabled: info.isEnabled
+	};
+}
+function migrationBlockCodeForApps(apps) {
+	if (apps.some((app) => app.isAccessible === false)) return "app_inaccessible";
+	if (apps.some((app) => app.isEnabled === false)) return "app_disabled";
+	if (apps.some((app) => app.isAccessible === void 0 || app.isEnabled === void 0)) return "app_missing";
+}
+function appInventoryBlockMessage(plugin, apps, code) {
+	const status = code === "app_inaccessible" ? "inaccessible" : code === "app_disabled" ? "disabled" : "missing";
+	const blocking = apps.find((app) => code === "app_inaccessible" ? app.isAccessible === false : code === "app_disabled" ? app.isEnabled === false : app.isAccessible === void 0 || app.isEnabled === void 0) ?? apps[0];
+	const appLabel = blocking ? ` app "${blocking.name}"` : " an owned app";
+	return `Codex plugin "${plugin.pluginName ?? plugin.name}" owns${appLabel} but the source app inventory reports it is ${status}; authenticate or enable the app in Codex before migrating it to OpenClaw.`;
+}
+function codexPluginMigrationSubscriptionWarning() {
+	return "Codex app-backed plugin migration requires the Codex app-server source account to be logged in with a ChatGPT subscription account. Log in to the Codex app with subscription auth; OpenClaw auth or API-key auth does not satisfy Codex app connector access.";
+}
+function codexSubscriptionRequiredMessage(plugin) {
+	return `Codex plugin "${plugin.pluginName ?? plugin.name}" owns apps, but ${codexPluginMigrationSubscriptionWarning()}`;
+}
 function pluginNameFromSummary(summary) {
 	const candidates = [summary.id, summary.name];
 	for (const candidate of candidates) {
@@ -190,8 +403,9 @@ function pluginNameFromSummary(summary) {
 		if (normalized) return normalized;
 	}
 }
-async function discoverCodexSource(input) {
-	const codexHome = resolveHomePath(input?.trim() || defaultCodexHome());
+async function discoverCodexSource(inputOrOptions) {
+	const options = typeof inputOrOptions === "string" || inputOrOptions === void 0 ? { input: inputOrOptions } : inputOrOptions;
+	const codexHome = resolveHomePath(options.input?.trim() || defaultCodexHome());
 	const codexSkillsDir = path.join(codexHome, "skills");
 	const agentsSkillsDir = personalAgentsSkillsDir();
 	const configPath = path.join(codexHome, "config.toml");
@@ -205,7 +419,7 @@ async function discoverCodexSource(input) {
 		root: agentsSkillsDir,
 		sourceLabel: "personal AgentSkill"
 	});
-	const sourcePluginDiscovery = await discoverInstalledCuratedPlugins(codexHome);
+	const sourcePluginDiscovery = await discoverInstalledCuratedPlugins(codexHome, options);
 	const sourcePluginNames = new Set(sourcePluginDiscovery.plugins.flatMap((plugin) => plugin.pluginName ? [plugin.pluginName] : []));
 	const cachedPlugins = (await discoverPluginDirs(codexHome)).filter((plugin) => {
 		const normalizedName = sanitizePluginName(plugin.name);
@@ -282,6 +496,7 @@ const CODEX_PLUGIN_NATIVE_CONFIG_PATH = [
 	"codexPlugins"
 ];
 const MIGRATION_REASON_PLUGIN_EXISTS = "plugin exists";
+const CODEX_PLUGIN_SOURCE_APP_VERIFICATION_UNVERIFIED = "not_run";
 function uniqueSkillName(skill, counts) {
 	const base = sanitizeName(skill.name) || "codex-skill";
 	if ((counts.get(base) ?? 0) <= 1) return base;
@@ -374,12 +589,32 @@ function buildPluginItems(ctx, plugins) {
 					marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
 					pluginName: plugin.pluginName,
 					sourceInstalled: plugin.installed === true,
-					sourceEnabled: plugin.enabled === true
+					sourceEnabled: plugin.enabled === true,
+					...plugin.apps && plugin.apps.length > 0 && !shouldVerifyPluginApps(ctx) ? { sourceAppVerification: CODEX_PLUGIN_SOURCE_APP_VERIFICATION_UNVERIFIED } : {}
 				}
 			}));
 			continue;
 		}
 		manualIndex += 1;
+		if (plugin.migrationBlock && plugin.pluginName) {
+			const details = {
+				pluginName: plugin.pluginName,
+				marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
+				...plugin.migrationBlock.apps ? { apps: plugin.migrationBlock.apps } : {},
+				...plugin.migrationBlock.error ? { error: plugin.migrationBlock.error } : {}
+			};
+			items.push(createMigrationItem({
+				id: `plugin:${sanitizeName(plugin.name) || sanitizeName(path.basename(plugin.source))}:${manualIndex}`,
+				kind: "manual",
+				action: "manual",
+				source: plugin.source,
+				status: "skipped",
+				reason: plugin.migrationBlock.code,
+				message: plugin.message ?? `Codex native plugin "${plugin.name}" was found but not activated automatically.`,
+				details: { ...details }
+			}));
+			continue;
+		}
 		items.push(createMigrationManualItem({
 			id: `plugin:${sanitizeName(plugin.name) || sanitizeName(path.basename(plugin.source))}:${manualIndex}`,
 			source: plugin.source,
@@ -389,6 +624,9 @@ function buildPluginItems(ctx, plugins) {
 	}
 	return items;
 }
+function shouldVerifyPluginApps(ctx) {
+	return ctx.providerOptions?.verifyPluginApps === true;
+}
 function readCodexPluginMigrationConfigEntry(item, enabled) {
 	const configKey = item.details?.configKey;
 	const marketplaceName = item.details?.marketplaceName;
@@ -417,7 +655,7 @@ function buildCodexPluginsConfigValue(entries, params = {}) {
 		enabled: true,
 		config: { codexPlugins: {
 			enabled: true,
-			allow_destructive_actions: params.config === void 0 ? false : readExistingAllowDestructiveActions(params.config) ?? false,
+			allow_destructive_actions: params.config === void 0 ? true : readExistingAllowDestructiveActions(params.config) ?? true,
 			plugins
 		} }
 	};
@@ -460,9 +698,13 @@ function buildPluginConfigItem(ctx, pluginItems) {
 	});
 }
 async function buildCodexMigrationPlan(ctx) {
-	const source = await discoverCodexSource(ctx.source);
-	if (!hasCodexSource(source)) throw new Error(`Codex state was not found at ${source.root}. Pass --from <path> if it lives elsewhere.`);
 	const targets = resolveCodexMigrationTargets(ctx);
+	const source = await discoverCodexSource({
+		input: ctx.source,
+		evaluatePluginMigrationEligibility: true,
+		verifyPluginApps: shouldVerifyPluginApps(ctx)
+	});
+	if (!hasCodexSource(source)) throw new Error(`Codex state was not found at ${source.root}. Pass --from <path> if it lives elsewhere.`);
 	const items = [];
 	items.push(...await buildSkillItems({
 		skills: source.skills,
@@ -483,8 +725,11 @@ async function buildCodexMigrationPlan(ctx) {
 	}));
 	const warnings = [
 		...items.some((item) => item.status === "conflict") ? ["Conflicts were found. Re-run with --overwrite to replace conflicting migration targets after item-level backups."] : [],
-		...source.plugins.length > 0 ? ["Codex source-installed openai-curated plugins are planned for native activation; cached plugin bundles remain manual-review only."] : [],
+		...source.plugins.some((plugin) => plugin.migratable) ? ["Codex source-installed openai-curated plugins are planned for native activation; cached plugin bundles remain manual-review only."] : [],
+		...source.plugins.some((plugin) => plugin.migratable && plugin.apps && plugin.apps.length > 0) && !shouldVerifyPluginApps(ctx) ? ["Codex app-backed plugins were planned without source app accessibility verification. Re-run with --verify-plugin-apps to force a fresh source app/list check before planning native plugin activation."] : [],
+		...source.plugins.some((plugin) => plugin.sourceKind === "cache") ? ["Codex cached plugin bundles remain manual-review only."] : [],
 		...source.pluginDiscoveryError ? [`Codex app-server plugin inventory discovery failed: ${source.pluginDiscoveryError}. Cached plugin bundles, if any, are advisory only.`] : [],
+		...source.plugins.some((plugin) => plugin.migrationBlock?.code === "codex_subscription_required") ? [codexPluginMigrationSubscriptionWarning()] : [],
 		...source.archivePaths.length > 0 ? ["Codex config and hook files are archive-only. They are preserved in the migration report, not loaded into OpenClaw automatically."] : []
 	];
 	return {
@@ -554,6 +799,8 @@ async function applyCodexPluginInstallItem(ctx, item) {
 		}
 	};
 	try {
+		const appCacheKey = await buildTargetCodexPluginAppCacheKey(ctx);
+		const appServer = resolveTargetCodexAppServer(ctx);
 		const result = await ensureCodexPluginActivation({
 			identity: policy,
 			installEvenIfActive: true,
@@ -561,10 +808,13 @@ async function applyCodexPluginInstallItem(ctx, item) {
 				method,
 				requestParams,
 				timeoutMs: 6e4,
+				startOptions: appServer.start,
+				agentDir: resolveCodexMigrationTargets(ctx).agentDir,
 				config: ctx.config
-			})
+			}),
+			appCache: defaultCodexAppInventoryCache,
+			appCacheKey
 		});
-		defaultCodexAppInventoryCache.clear();
 		const baseDetails = {
 			...item.details,
 			code: result.reason,
@@ -606,6 +856,30 @@ async function applyCodexPluginInstallItem(ctx, item) {
 		};
 	}
 }
+function resolveTargetCodexAppServer(ctx) {
+	return resolveCodexAppServerRuntimeOptions({ pluginConfig: readCodexPluginConfig(ctx.config) });
+}
+async function buildTargetCodexPluginAppCacheKey(ctx) {
+	const targets = resolveCodexMigrationTargets(ctx);
+	const appServer = resolveTargetCodexAppServer(ctx);
+	const authProfileId = resolveCodexAppServerAuthProfileIdForAgent({
+		agentDir: targets.agentDir,
+		config: ctx.config
+	});
+	const accountId = await resolveCodexAppServerAuthAccountCacheKey({
+		authProfileId,
+		agentDir: targets.agentDir,
+		config: ctx.config
+	});
+	const envApiKeyFingerprint = authProfileId ? void 0 : resolveCodexAppServerEnvApiKeyCacheKey({ startOptions: appServer.start });
+	return buildCodexPluginAppCacheKey({
+		appServer,
+		agentDir: targets.agentDir,
+		authProfileId,
+		accountId,
+		envApiKeyFingerprint
+	});
+}
 async function applyCodexPluginConfigItem(ctx, item, appliedItems) {
 	const entries = appliedItems.map(readAppliedPluginConfigEntry).filter((entry) => entry !== void 0);
 	if (entries.length === 0) return markMigrationItemSkipped(item, "no selected Codex plugins");
@@ -651,7 +925,7 @@ function readCodexPluginPolicy(item) {
 		marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
 		pluginName,
 		enabled: true,
-		allowDestructiveActions: false
+		allowDestructiveActions: true
 	};
 }
 function codexPluginActivationReportState(result) {
@@ -693,7 +967,7 @@ function buildCodexMigrationProvider(params = {}) {
 		label: "Codex",
 		description: "Inventory and promote Codex CLI skills while keeping Codex native plugins and hooks explicit.",
 		async detect(ctx) {
-			const source = await discoverCodexSource(ctx.source);
+			const source = await discoverCodexSource({ input: ctx.source });
 			const found = hasCodexSource(source);
 			return {
 				found,

package/dist/media-understanding-provider.js

@@ -1,7 +1,7 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
+import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CSY0BFBo.js";
-import { i as readModelListResult } from "./models-Bg-Qf5s-.js";
+import { i as readModelListResult } from "./models-DqfYggBz.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 //#region extensions/codex/media-understanding-provider.ts
@@ -62,7 +62,7 @@ async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = Math.max(100, params.timeoutMs);
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-K13b0L1X.js").then((n) => n.i).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-DSSqFqHM.js").then((n) => n.i).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: params.profile

package/dist/{models-Bg-Qf5s-.js → models-DqfYggBz.js}

@@ -39,7 +39,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-K13b0L1X.js").then((n) => n.i);
+	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-DSSqFqHM.js").then((n) => n.i);
 	const client = useSharedClient ? await getSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,