@openclaw/codex 2026.5.10-beta.5 → 2026.5.12-beta.2

package/dist/{session-binding-UFKjHkKJ.js → session-binding-CDN-Pf8K.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
-import { a as normalizeCodexServiceTier } from "./config-C7xdbzrp.js";
+import { a as normalizeCodexServiceTier } from "./config-0rd3LnKg.js";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import fs from "node:fs/promises";
 import { ensureAuthProfileStore, resolveDefaultAgentDir, resolveProviderIdForAuth } from "openclaw/plugin-sdk/agent-runtime";

package/dist/{shared-client-K13b0L1X.js → shared-client-DSSqFqHM.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
-import { n as codexAppServerStartOptionsKey, s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
-import { a as MANAGED_CODEX_APP_SERVER_PACKAGE, o as resolveCodexAppServerSpawnEnv, t as CodexAppServerClient } from "./client-CpksBQ9l.js";
+import { n as codexAppServerStartOptionsKey, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { a as MANAGED_CODEX_APP_SERVER_PACKAGE, o as resolveCodexAppServerSpawnEnv, t as CodexAppServerClient } from "./client-kySkmL1r.js";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import { constants, readFileSync } from "node:fs";
@@ -22,6 +22,7 @@ const CODEX_APP_SERVER_ISOLATION_ENV_VARS = [CODEX_HOME_ENV_VAR, HOME_ENV_VAR];
 async function bridgeCodexAppServerStartOptions(params) {
 	if (params.startOptions.transport !== "stdio") return params.startOptions;
 	const isolatedStartOptions = await withAgentCodexHomeEnvironment(params.startOptions, params.agentDir);
+	if (params.authProfileId === null) return isolatedStartOptions;
 	const store = ensureCodexAppServerAuthProfileStore({
 		agentDir: params.agentDir,
 		authProfileId: params.authProfileId,
@@ -174,6 +175,7 @@ function withoutClearedCodexIsolationEnv(clearEnv) {
 	return filtered.length === clearEnv.length ? clearEnv : filtered;
 }
 async function applyCodexAppServerAuthProfile(params) {
+	if (params.authProfileId === null) return;
 	const loginParams = await resolveCodexAppServerAuthProfileLoginParams({
 		agentDir: params.agentDir,
 		authProfileId: params.authProfileId,
@@ -488,20 +490,22 @@ function getSharedCodexAppServerClientState() {
 async function getSharedCodexAppServerClient(options) {
 	const state = getSharedCodexAppServerClientState();
 	const agentDir = options?.agentDir ?? resolveDefaultAgentDir(options?.config ?? {});
-	const authProfileId = resolveCodexAppServerAuthProfileIdForAgent({
-		authProfileId: options?.authProfileId,
+	const usesNativeAuth = options?.authProfileId === null;
+	const requestedAuthProfileId = options?.authProfileId === null ? void 0 : options?.authProfileId;
+	const authProfileId = usesNativeAuth ? void 0 : resolveCodexAppServerAuthProfileIdForAgent({
+		authProfileId: requestedAuthProfileId,
 		agentDir,
 		config: options?.config
 	});
 	const startOptions = await bridgeCodexAppServerStartOptions({
 		startOptions: await resolveManagedCodexAppServerStartOptions(options?.startOptions ?? resolveCodexAppServerRuntimeOptions().start),
 		agentDir,
-		authProfileId,
+		authProfileId: usesNativeAuth ? null : authProfileId,
 		config: options?.config
 	});
 	const key = codexAppServerStartOptionsKey(startOptions, {
 		authProfileId,
-		agentDir
+		agentDir: usesNativeAuth ? void 0 : agentDir
 	});
 	if (state.key && state.key !== key) clearSharedCodexAppServerClient();
 	state.key = key;
@@ -514,7 +518,7 @@ async function getSharedCodexAppServerClient(options) {
 			await applyCodexAppServerAuthProfile({
 				client,
 				agentDir,
-				authProfileId,
+				authProfileId: usesNativeAuth ? null : authProfileId,
 				startOptions,
 				config: options?.config
 			});
@@ -533,15 +537,17 @@ async function getSharedCodexAppServerClient(options) {
 }
 async function createIsolatedCodexAppServerClient(options) {
 	const agentDir = options?.agentDir ?? resolveDefaultAgentDir(options?.config ?? {});
-	const authProfileId = resolveCodexAppServerAuthProfileIdForAgent({
-		authProfileId: options?.authProfileId,
+	const usesNativeAuth = options?.authProfileId === null;
+	const requestedAuthProfileId = options?.authProfileId === null ? void 0 : options?.authProfileId;
+	const authProfileId = usesNativeAuth ? void 0 : resolveCodexAppServerAuthProfileIdForAgent({
+		authProfileId: requestedAuthProfileId,
 		agentDir,
 		config: options?.config
 	});
 	const startOptions = await bridgeCodexAppServerStartOptions({
 		startOptions: await resolveManagedCodexAppServerStartOptions(options?.startOptions ?? resolveCodexAppServerRuntimeOptions().start),
 		agentDir,
-		authProfileId,
+		authProfileId: usesNativeAuth ? null : authProfileId,
 		config: options?.config
 	});
 	const client = CodexAppServerClient.start(startOptions);
@@ -551,7 +557,7 @@ async function createIsolatedCodexAppServerClient(options) {
 		await applyCodexAppServerAuthProfile({
 			client,
 			agentDir,
-			authProfileId,
+			authProfileId: usesNativeAuth ? null : authProfileId,
 			startOptions,
 			config: options?.config
 		});

package/dist/{side-question-Dh_g53P9.js → side-question-BcATx0hX.js}

@@ -1,13 +1,13 @@
-import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
+import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { a as readCodexDynamicToolCallParams, i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, t as assertCodexThreadForkResponse } from "./protocol-validators-CSY0BFBo.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { r as isCodexAppServerApprovalRequest } from "./client-CpksBQ9l.js";
+import { r as isCodexAppServerApprovalRequest } from "./client-kySkmL1r.js";
 import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-Ttwc_kgX.js";
-import { o as refreshCodexAppServerAuthTokens, r as getSharedCodexAppServerClient } from "./shared-client-K13b0L1X.js";
-import { i as readCodexAppServerBinding } from "./session-binding-UFKjHkKJ.js";
-import { c as resolveCodexAppServerModelProvider, h as filterCodexDynamicTools, l as resolveReasoningEffort, m as createCodexDynamicToolBridge, n as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-i42nWiSS.js";
-import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-Bo0P6gwM.js";
-import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
+import { o as refreshCodexAppServerAuthTokens, r as getSharedCodexAppServerClient } from "./shared-client-DSSqFqHM.js";
+import { i as readCodexAppServerBinding } from "./session-binding-CDN-Pf8K.js";
+import { c as resolveCodexAppServerModelProvider, h as filterCodexDynamicTools, l as resolveReasoningEffort, m as createCodexDynamicToolBridge, n as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-DW0z5zYm.js";
+import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-DHyuabWn.js";
+import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
 import { embeddedAgentLog, formatErrorMessage, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/side-question.ts
 const CODEX_SIDE_DYNAMIC_TOOL_TIMEOUT_MS = 3e4;

package/dist/test-api.js

@@ -1,5 +1,5 @@
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-C7xdbzrp.js";
-import { a as buildThreadStartParams, h as filterCodexDynamicTools, i as buildThreadResumeParams, m as createCodexDynamicToolBridge, o as buildTurnStartParams, r as buildDeveloperInstructions } from "./thread-lifecycle-i42nWiSS.js";
+import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { a as buildThreadStartParams, h as filterCodexDynamicTools, i as buildThreadResumeParams, m as createCodexDynamicToolBridge, o as buildTurnStartParams, r as buildDeveloperInstructions } from "./thread-lifecycle-DW0z5zYm.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-i42nWiSS.js → thread-lifecycle-DW0z5zYm.js}

@@ -1,11 +1,11 @@
-import { l as resolveCodexPluginsPolicy, r as codexSandboxPolicyForTurn } from "./config-C7xdbzrp.js";
+import { l as resolveCodexPluginsPolicy, r as codexSandboxPolicyForTurn } from "./config-0rd3LnKg.js";
 import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-CSY0BFBo.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY, renderCodexPromptOverlay } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
-import { i as isCodexAppServerConnectionClosedError } from "./client-CpksBQ9l.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-UFKjHkKJ.js";
-import { i as defaultCodexAppInventoryCache, n as readCodexPluginInventory, t as ensureCodexPluginActivation } from "./plugin-activation-C0soz2YD.js";
+import { i as isCodexAppServerConnectionClosedError } from "./client-kySkmL1r.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CDN-Pf8K.js";
+import { a as defaultCodexAppInventoryCache, r as readCodexPluginInventory, t as ensureCodexPluginActivation } from "./plugin-activation-PXGqUjwY.js";
 import crypto from "node:crypto";
 import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, runAgentHarnessAfterToolCallHook, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/dynamic-tool-profile.ts

package/dist/{vision-tools-Bo0P6gwM.js → vision-tools-DHyuabWn.js}

@@ -543,12 +543,16 @@ const MCP_TOOL_APPROVAL_CONNECTOR_NAME_KEY = "connector_name";
 const MCP_TOOL_APPROVAL_TOOL_TITLE_KEY = "tool_title";
 const MCP_TOOL_APPROVAL_TOOL_DESCRIPTION_KEY = "tool_description";
 const MCP_TOOL_APPROVAL_TOOL_PARAMS_DISPLAY_KEY = "tool_params_display";
+const MCP_TOOL_APPROVAL_SOURCE_KEY = "source";
+const MCP_TOOL_APPROVAL_CONNECTOR_SOURCE = "connector";
+const CODEX_APPS_SERVER_NAME = "codex_apps";
 const PLUGIN_APP_ID_META_KEYS = [
 	"app_id",
 	"appId",
 	"codex_app_id",
 	"codexAppId"
 ];
+const PLUGIN_CONNECTOR_ID_META_KEYS = ["connector_id", "connectorId"];
 const PLUGIN_NAME_META_KEYS = [
 	"plugin_name",
 	"pluginName",
@@ -625,6 +629,12 @@ function resolvePluginElicitation(params) {
 	const context = params.pluginAppPolicyContext;
 	const entries = context ? Object.values(context.apps) : [];
 	const appId = readFirstString(meta, PLUGIN_APP_ID_META_KEYS) ?? readFirstString(requestParams, PLUGIN_APP_ID_META_KEYS);
+	const connectorId = readFirstString(meta, PLUGIN_CONNECTOR_ID_META_KEYS);
+	const isCodexConnectorApproval = isCodexConnectorApprovalElicitation(requestParams, meta);
+	if (isCodexConnectorApproval && appId && connectorId && appId !== connectorId) return {
+		kind: "decline",
+		reason: "app_id_connector_id_mismatch"
+	};
 	if (appId) {
 		if (!context) return {
 			kind: "decline",
@@ -633,6 +643,14 @@ function resolvePluginElicitation(params) {
 		const entry = context.apps[appId];
 		return uniquePluginMatch(entry ? [entry] : [], "app_id");
 	}
+	if (isCodexConnectorApproval && connectorId) {
+		if (!context) return {
+			kind: "decline",
+			reason: "missing_policy_context"
+		};
+		const entry = context.apps[connectorId];
+		return uniquePluginMatch(entry ? [entry] : [], "connector_id");
+	}
 	const serverName = readString(requestParams, "serverName");
 	if (serverName && context) {
 		const matches = entries.filter((entry) => entry.mcpServerNames.includes(serverName));
@@ -651,6 +669,9 @@ function resolvePluginElicitation(params) {
 	};
 	return { kind: "not_plugin" };
 }
+function isCodexConnectorApprovalElicitation(requestParams, meta) {
+	return readString(requestParams, "serverName") === CODEX_APPS_SERVER_NAME && readString(meta, MCP_TOOL_APPROVAL_KIND_KEY) === MCP_TOOL_APPROVAL_KIND && readString(meta, MCP_TOOL_APPROVAL_SOURCE_KEY) === MCP_TOOL_APPROVAL_CONNECTOR_SOURCE;
+}
 function resolvePluginStableMetadataMatch(params) {
 	const pluginName = readFirstString(params.meta, PLUGIN_NAME_META_KEYS) ?? readFirstString(params.requestParams, PLUGIN_NAME_META_KEYS);
 	const configKey = readFirstString(params.meta, PLUGIN_CONFIG_KEY_META_KEYS) ?? readFirstString(params.requestParams, PLUGIN_CONFIG_KEY_META_KEYS);

package/openclaw.plugin.json

@@ -101,7 +101,7 @@
           },
           "allow_destructive_actions": {
             "type": "boolean",
-            "default": false
+            "default": true
           },
           "plugins": {
             "type": "object",
@@ -272,7 +272,7 @@
     },
     "codexPlugins.allow_destructive_actions": {
       "label": "Allow Destructive Plugin Actions",
-      "help": "Default policy for plugin app write or destructive action elicitations. Defaults to false.",
+      "help": "Default policy for plugin app write or destructive action elicitations. Defaults to true.",
       "advanced": true
     },
     "codexPlugins.plugins": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.10-beta.5",
+  "version": "2026.5.12-beta.2",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -10,9 +10,9 @@
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.74.0",
     "@openai/codex": "0.130.0",
-    "ajv": "^8.20.0",
-    "ws": "^8.20.0",
-    "zod": "^4.4.3"
+    "ajv": "8.20.0",
+    "ws": "8.20.0",
+    "zod": "4.4.3"
   },
   "devDependencies": {
     "@openclaw/plugin-sdk": "workspace:*"
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.10-beta.5"
+      "pluginApi": ">=2026.5.12-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.10-beta.5"
+      "openclawVersion": "2026.5.12-beta.2"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.10-beta.5"
+    "openclaw": ">=2026.5.12-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {