@openclaw/codex 2026.5.12-beta.6 → 2026.5.12-beta.8

package/dist/{client-factory-Bw7M3rdW.js → client-factory-DfnbdQv7.js}

@@ -1,5 +1,5 @@
 //#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-DSSqFqHM.js").then((n) => n.i).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-Cr6W-a2G.js").then((n) => n.i).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
 	agentDir,

package/dist/{client-kySkmL1r.js → client-iRf11BEu.js}

@@ -203,12 +203,28 @@ const CODEX_DYNAMIC_TOOL_SERVER_REQUEST_TIMEOUT_MS = 6e5;
 const CODEX_APP_SERVER_STDERR_TAIL_MAX = 2e3;
 var CodexAppServerRpcError = class extends Error {
 	constructor(error, method) {
-		super(error.message || `${method} failed`);
+		super(formatCodexAppServerRpcErrorMessage(error, method));
 		this.name = "CodexAppServerRpcError";
 		this.code = error.code;
 		this.data = error.data;
 	}
 };
+function formatCodexAppServerRpcErrorMessage(error, method) {
+	const message = error.message || `${method} failed`;
+	const detail = readCodexAppServerRpcReloginDetail(error.data);
+	return detail && !message.includes(detail) ? `${message}: ${detail}` : message;
+}
+function readCodexAppServerRpcReloginDetail(data) {
+	const record = isJsonObject(data) ? data : void 0;
+	const nested = isJsonObject(record?.error) ? record.error : record;
+	if (!nested) return;
+	const isRelogin = nested.action === "relogin" || nested.reason === "cloudRequirements" && nested.errorCode === "Auth";
+	const detail = typeof nested.detail === "string" ? nested.detail.trim() : "";
+	return isRelogin && detail ? detail : void 0;
+}
+function isJsonObject(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
 function isCodexAppServerConnectionClosedError(error) {
 	if (!(error instanceof Error)) return false;
 	return error.message === "codex app-server client is closed" || error.message.startsWith("codex app-server exited:");

package/dist/{command-handlers-PjNRHJvR.js → command-handlers-BYf_veEb.js}

@@ -1,11 +1,11 @@
 import { i as isCodexFastServiceTier, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-DqfYggBz.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-BmLfrDci.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as CODEX_CONTROL_METHODS, r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BbINGs00.js";
+import { n as CODEX_CONTROL_METHODS, r as describeControlFailure, t as requestCodexAppServerJson } from "./request-ohCy5ASa.js";
 import { a as formatComputerUseStatus, c as formatThreads, i as formatCodexStatus, l as readString$1, n as formatAccount, o as formatList, p as summarizeCodexAccountUsage, r as formatCodexDisplayText, s as formatModels, t as buildHelp } from "./command-formatters-Ttwc_kgX.js";
-import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-BrQ-kLlK.js";
-import { a as parseCodexFastModeArg, c as setCodexConversationFastMode, d as steerCodexConversationTurn, f as stopCodexConversationTurn, i as formatPermissionsMode, l as setCodexConversationModel, m as resolveCodexDefaultWorkspaceDir, o as parseCodexPermissionsModeArg, p as readCodexConversationBindingData, r as startCodexConversationThread, s as readCodexConversationActiveTurn, u as setCodexConversationPermissions } from "./conversation-binding-C9cDz5yO.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CxZtHe2d.js";
+import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
+import { a as parseCodexFastModeArg, c as setCodexConversationFastMode, d as steerCodexConversationTurn, f as stopCodexConversationTurn, i as formatPermissionsMode, l as setCodexConversationModel, m as resolveCodexDefaultWorkspaceDir, o as parseCodexPermissionsModeArg, p as readCodexConversationBindingData, r as startCodexConversationThread, s as readCodexConversationActiveTurn, u as setCodexConversationPermissions } from "./conversation-binding-CKofEetY.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-Ct3ngNBt.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
 import crypto from "node:crypto";
 import { ensureAuthProfileStore, findNormalizedProviderValue, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveDefaultAgentDir, resolveProfileUnusableUntilForDisplay } from "openclaw/plugin-sdk/agent-runtime";

package/dist/{compact-Hyo2qw1o.js → compact-Bl8jRPk4.js}

@@ -1,7 +1,7 @@
 import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { i as readCodexAppServerBinding } from "./session-binding-BrQ-kLlK.js";
-import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-Bw7M3rdW.js";
+import { i as readCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
+import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-DfnbdQv7.js";
 import { embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, runHarnessContextEngineMaintenance } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const DEFAULT_CODEX_COMPACTION_WAIT_TIMEOUT_MS = 300 * 1e3;

package/dist/{computer-use-CxZtHe2d.js → computer-use-Ct3ngNBt.js}

@@ -1,5 +1,5 @@
 import { c as resolveCodexComputerUseConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BbINGs00.js";
+import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-ohCy5ASa.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{conversation-binding-C9cDz5yO.js → conversation-binding-CKofEetY.js}

@@ -1,9 +1,9 @@
 import { i as isCodexFastServiceTier, r as codexSandboxPolicyForTurn, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as CODEX_CONTROL_METHODS } from "./request-BbINGs00.js";
+import { n as CODEX_CONTROL_METHODS } from "./request-ohCy5ASa.js";
 import { r as formatCodexDisplayText } from "./command-formatters-Ttwc_kgX.js";
-import { l as resolveCodexAppServerAuthProfileIdForAgent, r as getSharedCodexAppServerClient } from "./shared-client-DSSqFqHM.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-BrQ-kLlK.js";
+import { l as resolveCodexAppServerAuthProfileIdForAgent, r as getSharedCodexAppServerClient } from "./shared-client-Cr6W-a2G.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import path from "node:path";
 import { fileURLToPath } from "node:url";

package/dist/harness.js

@@ -18,25 +18,25 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-Pt1oe-_9.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-4t06MuNr.js");
 			return runCodexAppServerAttempt(params, { pluginConfig: options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-ByLC-uHj.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-DV7KYIB8.js");
 			return runCodexAppServerSideQuestion(params, { pluginConfig: options?.pluginConfig });
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-Hyo2qw1o.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-Bl8jRPk4.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.pluginConfig });
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-BrQ-kLlK.js").then((n) => n.a);
+				const { clearCodexAppServerBinding } = await import("./session-binding-CMTXuyoz.js").then((n) => n.a);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-DSSqFqHM.js").then((n) => n.i);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-Cr6W-a2G.js").then((n) => n.i);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -2,12 +2,12 @@ import { createCodexAppServerAgentHarness } from "./harness.js";
 import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0rd3LnKg.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
 import { buildCodexProvider } from "./provider.js";
-import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BbINGs00.js";
+import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-ohCy5ASa.js";
 import { r as formatCodexDisplayText } from "./command-formatters-Ttwc_kgX.js";
-import { l as resolveCodexAppServerAuthProfileIdForAgent, s as resolveCodexAppServerAuthAccountCacheKey, u as resolveCodexAppServerEnvApiKeyCacheKey } from "./shared-client-DSSqFqHM.js";
-import { n as handleCodexConversationInboundClaim, t as handleCodexConversationBindingResolved } from "./conversation-binding-C9cDz5yO.js";
+import { l as resolveCodexAppServerAuthProfileIdForAgent, s as resolveCodexAppServerAuthAccountCacheKey, u as resolveCodexAppServerEnvApiKeyCacheKey } from "./shared-client-Cr6W-a2G.js";
+import { n as handleCodexConversationInboundClaim, t as handleCodexConversationBindingResolved } from "./conversation-binding-CKofEetY.js";
 import { a as defaultCodexAppInventoryCache, n as pluginReadParams, t as ensureCodexPluginActivation } from "./plugin-activation-PXGqUjwY.js";
-import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DjrZp49q.js";
+import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-B7eU8fNZ.js";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import os from "node:os";
@@ -39,7 +39,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-PjNRHJvR.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-BYf_veEb.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -165,7 +165,7 @@ function sourceCodexAppServerStartOptions(codexHome) {
 	return {
 		transport: "stdio",
 		command: "codex",
-		commandSource: "config",
+		commandSource: "managed",
 		args: [
 			"app-server",
 			"--listen",

package/dist/media-understanding-provider.js

@@ -1,7 +1,7 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
 import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CSY0BFBo.js";
-import { i as readModelListResult } from "./models-DqfYggBz.js";
+import { i as readModelListResult } from "./models-BmLfrDci.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 //#region extensions/codex/media-understanding-provider.ts
@@ -62,7 +62,7 @@ async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = Math.max(100, params.timeoutMs);
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-DSSqFqHM.js").then((n) => n.i).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-Cr6W-a2G.js").then((n) => n.i).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: params.profile

package/dist/{models-DqfYggBz.js → models-BmLfrDci.js}

@@ -39,7 +39,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-DSSqFqHM.js").then((n) => n.i);
+	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-Cr6W-a2G.js").then((n) => n.i);
 	const client = useSharedClient ? await getSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/{plugin-app-cache-key-DjrZp49q.js → plugin-app-cache-key-B7eU8fNZ.js}

@@ -1,4 +1,4 @@
-import { d as resolveCodexAppServerHomeDir } from "./shared-client-DSSqFqHM.js";
+import { d as resolveCodexAppServerHomeDir } from "./shared-client-Cr6W-a2G.js";
 import { i as buildCodexAppInventoryCacheKey } from "./plugin-activation-PXGqUjwY.js";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/plugin-app-cache-key.ts

package/dist/provider.js

@@ -123,7 +123,7 @@ async function listModelsBestEffort(params) {
 	}
 }
 async function listCodexAppServerModelsLazy(options) {
-	const { listCodexAppServerModels } = await import("./models-DqfYggBz.js").then((n) => n.r);
+	const { listCodexAppServerModels } = await import("./models-BmLfrDci.js").then((n) => n.r);
 	return listCodexAppServerModels(options);
 }
 function normalizeTimeoutMs(value) {

package/dist/{request-BbINGs00.js → request-ohCy5ASa.js}

@@ -1,5 +1,5 @@
-import { n as CodexAppServerRpcError } from "./client-kySkmL1r.js";
-import { a as withTimeout, n as createIsolatedCodexAppServerClient, r as getSharedCodexAppServerClient } from "./shared-client-DSSqFqHM.js";
+import { n as CodexAppServerRpcError } from "./client-iRf11BEu.js";
+import { a as withTimeout, n as createIsolatedCodexAppServerClient, r as getSharedCodexAppServerClient } from "./shared-client-Cr6W-a2G.js";
 //#region extensions/codex/src/app-server/capabilities.ts
 const CODEX_CONTROL_METHODS = {
 	account: "account/read",

package/dist/{run-attempt-Pt1oe-_9.js → run-attempt-4t06MuNr.js}

@@ -1,21 +1,21 @@
 import { l as resolveCodexPluginsPolicy, o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions, u as withMcpElicitationsApprovalPolicy } from "./config-0rd3LnKg.js";
 import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse } from "./protocol-validators-CSY0BFBo.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { i as isCodexAppServerConnectionClosedError, r as isCodexAppServerApprovalRequest } from "./client-kySkmL1r.js";
-import { n as CODEX_CONTROL_METHODS } from "./request-BbINGs00.js";
+import { i as isCodexAppServerConnectionClosedError, r as isCodexAppServerApprovalRequest } from "./client-iRf11BEu.js";
+import { n as CODEX_CONTROL_METHODS } from "./request-ohCy5ASa.js";
 import { d as resolveCodexUsageLimitResetAtMs, f as shouldRefreshCodexRateLimitsForUsageLimitMessage, r as formatCodexDisplayText, u as formatCodexUsageLimitErrorMessage } from "./command-formatters-Ttwc_kgX.js";
-import { c as resolveCodexAppServerAuthProfileId, l as resolveCodexAppServerAuthProfileIdForAgent, o as refreshCodexAppServerAuthTokens, s as resolveCodexAppServerAuthAccountCacheKey, t as clearSharedCodexAppServerClientIfCurrent, u as resolveCodexAppServerEnvApiKeyCacheKey } from "./shared-client-DSSqFqHM.js";
-import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-BrQ-kLlK.js";
+import { c as resolveCodexAppServerAuthProfileId, l as resolveCodexAppServerAuthProfileIdForAgent, o as refreshCodexAppServerAuthTokens, s as resolveCodexAppServerAuthAccountCacheKey, t as clearSharedCodexAppServerClientIfCurrent, u as resolveCodexAppServerEnvApiKeyCacheKey } from "./shared-client-Cr6W-a2G.js";
+import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
 import { a as defaultCodexAppInventoryCache } from "./plugin-activation-PXGqUjwY.js";
-import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DjrZp49q.js";
-import { _ as createCodexDynamicToolBridge, d as buildCodexPluginThreadConfig, f as buildCodexPluginThreadConfigInputFingerprint, g as resolveCodexContextEngineProjectionReserveTokens, h as resolveCodexContextEngineProjectionMaxChars, m as projectContextEngineAssemblyForCodex, o as buildTurnStartParams, p as shouldBuildCodexPluginThreadConfig, r as buildDeveloperInstructions, s as codexDynamicToolsFingerprint, t as areCodexDynamicToolFingerprintsCompatible, u as startOrResumeThread, v as filterCodexDynamicTools, y as normalizeCodexDynamicToolName } from "./thread-lifecycle-DMn8qeke.js";
-import { n as defaultCodexAppServerClientFactory } from "./client-factory-Bw7M3rdW.js";
+import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-B7eU8fNZ.js";
+import { _ as resolveCodexContextEngineProjectionReserveTokens, b as normalizeCodexDynamicToolName, d as buildCodexPluginThreadConfig, f as buildCodexPluginThreadConfigInputFingerprint, g as resolveCodexContextEngineProjectionMaxChars, h as projectContextEngineAssemblyForCodex, m as shouldBuildCodexPluginThreadConfig, o as buildTurnStartParams, p as mergeCodexThreadConfigs, r as buildDeveloperInstructions, s as codexDynamicToolsFingerprint, t as areCodexDynamicToolFingerprintsCompatible, u as startOrResumeThread, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-CJppEyYT.js";
+import { n as defaultCodexAppServerClientFactory } from "./client-factory-DfnbdQv7.js";
 import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-DHyuabWn.js";
-import { t as ensureCodexComputerUse } from "./computer-use-CxZtHe2d.js";
+import { t as ensureCodexComputerUse } from "./computer-use-Ct3ngNBt.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
 import { createHash } from "node:crypto";
 import nodeFs from "node:fs";
-import { TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, bootstrapHarnessContextEngine, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, finalizeHarnessContextEngineTurn, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, normalizeAgentRuntimeTools, normalizeUsage, registerNativeHookRelay, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveSessionWriteLockAcquireTimeoutMs, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, bootstrapHarnessContextEngine, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, finalizeHarnessContextEngineTurn, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, loadCodexBundleMcpThreadConfig, normalizeAgentRuntimeTools, normalizeUsage, registerNativeHookRelay, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveSessionWriteLockAcquireTimeoutMs, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { markAuthProfileBlockedUntil, resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
@@ -636,6 +636,7 @@ var CodexAppServerEventProjector = class {
 			messagingToolSentTexts: toolTelemetry.messagingToolSentTexts,
 			messagingToolSentMediaUrls: toolTelemetry.messagingToolSentMediaUrls,
 			messagingToolSentTargets: toolTelemetry.messagingToolSentTargets,
+			messagingToolSourceReplyPayloads: toolTelemetry.messagingToolSourceReplyPayloads ?? [],
 			heartbeatToolResponse: toolTelemetry.heartbeatToolResponse,
 			toolMediaUrls: this.buildToolMediaUrls(toolTelemetry),
 			toolAudioAsVoice: toolTelemetry.toolAudioAsVoice,
@@ -2297,6 +2298,14 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		config: params.config
 	});
 	const startupEnvApiKeyCacheKey = startupAuthProfileId ? void 0 : resolveCodexAppServerEnvApiKeyCacheKey({ startOptions: appServer.start });
+	const bundleMcpThreadConfig = await loadCodexBundleMcpThreadConfig({
+		workspaceDir: effectiveWorkspace,
+		cfg: params.config,
+		toolsEnabled: supportsModelTools(params.model),
+		disableTools: params.disableTools,
+		toolsAllow: params.toolsAllow
+	});
+	for (const diagnostic of bundleMcpThreadConfig.diagnostics) embeddedAgentLog.warn(`bundle-mcp: ${diagnostic.pluginId}: ${diagnostic.message}`);
 	const activeContextEngine = isActiveHarnessContextEngine(params.contextEngine) ? params.contextEngine : void 0;
 	let yieldDetected = false;
 	const toolBridge = createCodexDynamicToolBridge({
@@ -2459,11 +2468,11 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			turnStartTimeoutMs: params.timeoutMs,
 			signal: runAbortController.signal
 		});
-		const threadConfig = nativeHookRelay ? buildCodexNativeHookRelayConfig({
+		const threadConfig = mergeCodexThreadConfigs(nativeHookRelay ? buildCodexNativeHookRelayConfig({
 			relay: nativeHookRelay,
 			events: nativeHookRelayEvents,
 			hookTimeoutSec: options.nativeHookRelay?.hookTimeoutSec
-		}) : options.nativeHookRelay?.enabled === false ? buildCodexNativeHookRelayDisabledConfig() : void 0;
+		}) : options.nativeHookRelay?.enabled === false ? buildCodexNativeHookRelayDisabledConfig() : void 0, bundleMcpThreadConfig?.configPatch);
 		const pluginThreadConfigEnabled = shouldBuildCodexPluginThreadConfig(pluginConfig);
 		const pluginAppCacheKey = buildCodexPluginAppCacheKey({
 			appServer,
@@ -2505,6 +2514,8 @@ async function runCodexAppServerAttempt(params, options = {}) {
 						appServer: pluginAppServer,
 						developerInstructions: promptBuild.developerInstructions,
 						config: threadConfig,
+						mcpServersFingerprint: bundleMcpThreadConfig.fingerprint,
+						mcpServersFingerprintEvaluated: bundleMcpThreadConfig.evaluated,
 						pluginThreadConfig: pluginThreadConfigEnabled ? {
 							enabled: true,
 							inputFingerprint: pluginThreadConfigInputFingerprint,
@@ -2614,6 +2625,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	let turnCompletionLastActivityReason = "startup";
 	let turnCompletionLastActivityDetails;
 	let activeAppServerTurnRequests = 0;
+	const activeOpenClawDynamicToolCallIds = /* @__PURE__ */ new Set();
 	const activeTurnItemIds = /* @__PURE__ */ new Set();
 	const clearTurnCompletionIdleTimer = () => {
 		if (turnCompletionIdleTimer) {
@@ -2864,7 +2876,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		else if (isCurrentTurnNotification && isCompletedAssistantNotification(notification)) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
 		else if (unblockedAssistantCompletionRelease) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
 		else if (isCurrentTurnNotification && shouldDisarmAssistantCompletionIdleWatch(notification)) disarmTurnAssistantCompletionIdleWatch();
-		if (turnCompletionIdleWatchArmed && !turnCompletionIdleWatchPinnedByTerminalError && notification.method !== "turn/completed" && isCurrentTurnNotification) disarmTurnCompletionIdleWatch();
+		if (turnCompletionIdleWatchArmed && !turnCompletionIdleWatchPinnedByTerminalError && notification.method !== "turn/completed" && isCurrentTurnNotification && !isTrackedOpenClawDynamicToolCompletionNotification(notification, activeOpenClawDynamicToolCallIds)) disarmTurnCompletionIdleWatch();
 		const isTurnAbortMarker = isCurrentTurnNotification && isCodexTurnAbortMarkerNotification(notification, { currentPromptText: promptBuild.prompt });
 		const isTurnTerminal = isTurnCompletion || isTurnAbortMarker;
 		try {
@@ -2939,6 +2951,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			const call = readDynamicToolCallParams(request.params);
 			if (!call || call.threadId !== thread.threadId || call.turnId !== turnId) return;
 			armCompletionWatchOnResponse = true;
+			activeOpenClawDynamicToolCallIds.add(call.callId);
 			trajectoryRecorder?.recordEvent("tool.call", {
 				threadId: call.threadId,
 				turnId: call.turnId,
@@ -3413,6 +3426,7 @@ function buildCodexTurnStartFailureResult(params) {
 		messagingToolSentTexts: [],
 		messagingToolSentMediaUrls: [],
 		messagingToolSentTargets: [],
+		messagingToolSourceReplyPayloads: [],
 		cloudCodeAssistFormatError: false,
 		replayMetadata: {
 			hadPotentialSideEffects: false,
@@ -3881,6 +3895,14 @@ function readNotificationItemId(notification) {
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return (item ? readString(item, "id") : void 0) ?? readString(notification.params, "itemId") ?? readString(notification.params, "id");
 }
+function isTrackedOpenClawDynamicToolCompletionNotification(notification, activeOpenClawDynamicToolCallIds) {
+	if (notification.method !== "item/completed" || !isJsonObject(notification.params)) return false;
+	const itemId = readNotificationItemId(notification);
+	if (!itemId || !activeOpenClawDynamicToolCallIds.has(itemId)) return false;
+	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
+	const itemType = item ? readString(item, "type") : void 0;
+	return itemType === void 0 || itemType === "dynamicToolCall";
+}
 function readRawAssistantTextPreview(item) {
 	if (readString(item, "role") !== "assistant" || !Array.isArray(item.content)) return;
 	const text = item.content.flatMap((content) => {

package/dist/{session-binding-BrQ-kLlK.js → session-binding-CMTXuyoz.js}

@@ -51,6 +51,7 @@ async function readCodexAppServerBinding(sessionFile, lookup = {}) {
 			serviceTier: readServiceTier(parsed.serviceTier),
 			dynamicToolsFingerprint: typeof parsed.dynamicToolsFingerprint === "string" ? parsed.dynamicToolsFingerprint : void 0,
 			userMcpServersFingerprint: typeof parsed.userMcpServersFingerprint === "string" ? parsed.userMcpServersFingerprint : void 0,
+			mcpServersFingerprint: typeof parsed.mcpServersFingerprint === "string" ? parsed.mcpServersFingerprint : void 0,
 			pluginAppsFingerprint: typeof parsed.pluginAppsFingerprint === "string" ? parsed.pluginAppsFingerprint : void 0,
 			pluginAppsInputFingerprint: typeof parsed.pluginAppsInputFingerprint === "string" ? parsed.pluginAppsInputFingerprint : void 0,
 			pluginAppPolicyContext: readPluginAppPolicyContext(parsed.pluginAppPolicyContext),
@@ -85,6 +86,7 @@ async function writeCodexAppServerBinding(sessionFile, binding, lookup = {}) {
 		serviceTier: binding.serviceTier,
 		dynamicToolsFingerprint: binding.dynamicToolsFingerprint,
 		userMcpServersFingerprint: binding.userMcpServersFingerprint,
+		mcpServersFingerprint: binding.mcpServersFingerprint,
 		pluginAppsFingerprint: binding.pluginAppsFingerprint,
 		pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 		pluginAppPolicyContext: binding.pluginAppPolicyContext,

package/dist/{shared-client-DSSqFqHM.js → shared-client-Cr6W-a2G.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
 import { n as codexAppServerStartOptionsKey, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { a as MANAGED_CODEX_APP_SERVER_PACKAGE, o as resolveCodexAppServerSpawnEnv, t as CodexAppServerClient } from "./client-kySkmL1r.js";
+import { a as MANAGED_CODEX_APP_SERVER_PACKAGE, o as resolveCodexAppServerSpawnEnv, t as CodexAppServerClient } from "./client-iRf11BEu.js";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import { constants, readFileSync } from "node:fs";
@@ -16,9 +16,8 @@ const OPENAI_CODEX_DEFAULT_PROFILE_ID = "openai-codex:default";
 const CODEX_HOME_ENV_VAR = "CODEX_HOME";
 const HOME_ENV_VAR = "HOME";
 const CODEX_APP_SERVER_HOME_DIRNAME = "codex-home";
-const CODEX_APP_SERVER_NATIVE_HOME_DIRNAME = "home";
 const CODEX_APP_SERVER_API_KEY_ENV_VARS = ["CODEX_API_KEY", "OPENAI_API_KEY"];
-const CODEX_APP_SERVER_ISOLATION_ENV_VARS = [CODEX_HOME_ENV_VAR, HOME_ENV_VAR];
+const CODEX_APP_SERVER_HOME_ENV_VARS = [CODEX_HOME_ENV_VAR, HOME_ENV_VAR];
 async function bridgeCodexAppServerStartOptions(params) {
 	if (params.startOptions.transport !== "stdio") return params.startOptions;
 	const isolatedStartOptions = await withAgentCodexHomeEnvironment(params.startOptions, params.agentDir);
@@ -152,25 +151,25 @@ function resolveCodexAppServerHomeDir(agentDir) {
 }
 async function withAgentCodexHomeEnvironment(startOptions, agentDir) {
 	const codexHome = startOptions.env?.[CODEX_HOME_ENV_VAR]?.trim() ? startOptions.env[CODEX_HOME_ENV_VAR] : resolveCodexAppServerHomeDir(agentDir);
-	const nativeHome = startOptions.env?.[HOME_ENV_VAR]?.trim() ? startOptions.env[HOME_ENV_VAR] : path.join(codexHome, CODEX_APP_SERVER_NATIVE_HOME_DIRNAME);
+	const nativeHome = startOptions.env?.[HOME_ENV_VAR]?.trim() ? startOptions.env[HOME_ENV_VAR] : void 0;
 	await fs.mkdir(codexHome, { recursive: true });
-	await fs.mkdir(nativeHome, { recursive: true });
+	if (nativeHome) await fs.mkdir(nativeHome, { recursive: true });
 	const nextStartOptions = {
 		...startOptions,
 		env: {
 			...startOptions.env,
 			[CODEX_HOME_ENV_VAR]: codexHome,
-			[HOME_ENV_VAR]: nativeHome
+			...nativeHome ? { [HOME_ENV_VAR]: nativeHome } : {}
 		}
 	};
-	const clearEnv = withoutClearedCodexIsolationEnv(startOptions.clearEnv);
+	const clearEnv = withoutClearedCodexHomeEnv(startOptions.clearEnv);
 	if (clearEnv) nextStartOptions.clearEnv = clearEnv;
 	else delete nextStartOptions.clearEnv;
 	return nextStartOptions;
 }
-function withoutClearedCodexIsolationEnv(clearEnv) {
+function withoutClearedCodexHomeEnv(clearEnv) {
 	if (!clearEnv) return;
-	const reserved = new Set(CODEX_APP_SERVER_ISOLATION_ENV_VARS);
+	const reserved = new Set(CODEX_APP_SERVER_HOME_ENV_VARS);
 	const filtered = clearEnv.filter((envVar) => !reserved.has(envVar.trim().toUpperCase()));
 	return filtered.length === clearEnv.length ? clearEnv : filtered;
 }

package/dist/{side-question-ByLC-uHj.js → side-question-DV7KYIB8.js}

@@ -1,11 +1,11 @@
 import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { a as readCodexDynamicToolCallParams, i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, t as assertCodexThreadForkResponse } from "./protocol-validators-CSY0BFBo.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { r as isCodexAppServerApprovalRequest } from "./client-kySkmL1r.js";
+import { r as isCodexAppServerApprovalRequest } from "./client-iRf11BEu.js";
 import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-Ttwc_kgX.js";
-import { o as refreshCodexAppServerAuthTokens, r as getSharedCodexAppServerClient } from "./shared-client-DSSqFqHM.js";
-import { i as readCodexAppServerBinding } from "./session-binding-BrQ-kLlK.js";
-import { _ as createCodexDynamicToolBridge, c as resolveCodexAppServerModelProvider, l as resolveReasoningEffort, n as buildCodexRuntimeThreadConfig, v as filterCodexDynamicTools } from "./thread-lifecycle-DMn8qeke.js";
+import { o as refreshCodexAppServerAuthTokens, r as getSharedCodexAppServerClient } from "./shared-client-Cr6W-a2G.js";
+import { i as readCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
+import { c as resolveCodexAppServerModelProvider, l as resolveReasoningEffort, n as buildCodexRuntimeThreadConfig, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-CJppEyYT.js";
 import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-DHyuabWn.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
 import { embeddedAgentLog, formatErrorMessage, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/test-api.js

@@ -1,5 +1,5 @@
 import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { _ as createCodexDynamicToolBridge, a as buildThreadStartParams, i as buildThreadResumeParams, o as buildTurnStartParams, r as buildDeveloperInstructions, v as filterCodexDynamicTools } from "./thread-lifecycle-DMn8qeke.js";
+import { a as buildThreadStartParams, i as buildThreadResumeParams, o as buildTurnStartParams, r as buildDeveloperInstructions, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-CJppEyYT.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-DMn8qeke.js → thread-lifecycle-CJppEyYT.js}

@@ -3,8 +3,8 @@ import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartRespon
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY, renderCodexPromptOverlay } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
-import { i as isCodexAppServerConnectionClosedError } from "./client-kySkmL1r.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-BrQ-kLlK.js";
+import { i as isCodexAppServerConnectionClosedError } from "./client-iRf11BEu.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
 import { a as defaultCodexAppInventoryCache, r as readCodexPluginInventory, t as ensureCodexPluginActivation } from "./plugin-activation-PXGqUjwY.js";
 import crypto from "node:crypto";
 import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, isActiveHarnessContextEngine, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, runAgentHarnessAfterToolCallHook, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -49,6 +49,7 @@ function createCodexDynamicToolBridge(params) {
 		messagingToolSentTexts: [],
 		messagingToolSentMediaUrls: [],
 		messagingToolSentTargets: [],
+		messagingToolSourceReplyPayloads: [],
 		toolMediaUrls: [],
 		toolAudioAsVoice: false
 	};
@@ -201,6 +202,11 @@ function collectToolTelemetry(params) {
 	}
 	if (!isMessagingTool(params.toolName) || !isMessagingToolSendAction(params.toolName, params.args)) return;
 	params.telemetry.didSendViaMessagingTool = true;
+	const sourceReplyPayload = extractInternalSourceReplyPayload(params.result?.details);
+	if (sourceReplyPayload) {
+		params.telemetry.messagingToolSourceReplyPayloads.push(sourceReplyPayload);
+		return;
+	}
 	const text = readFirstString(params.args, [
 		"text",
 		"message",
@@ -228,6 +234,25 @@ function collectToolTelemetry(params) {
 		...mediaUrls.length > 0 ? { mediaUrls } : {}
 	});
 }
+function extractInternalSourceReplyPayload(details) {
+	if (!isRecord(details) || details.sourceReplySink !== "internal-ui") return;
+	const rawPayload = details.sourceReply;
+	if (!isRecord(rawPayload)) return;
+	const text = readFirstString(rawPayload, ["text", "message"]);
+	const mediaUrls = collectMediaUrls(rawPayload);
+	const mediaUrl = typeof rawPayload.mediaUrl === "string" && rawPayload.mediaUrl.trim() ? rawPayload.mediaUrl.trim() : mediaUrls[0];
+	const payload = {
+		...text ? { text } : {},
+		...mediaUrl ? { mediaUrl } : {},
+		...mediaUrls.length > 0 ? { mediaUrls } : {},
+		...rawPayload.audioAsVoice === true ? { audioAsVoice: true } : {},
+		...isRecord(rawPayload.presentation) ? { presentation: rawPayload.presentation } : {},
+		...isRecord(rawPayload.interactive) ? { interactive: rawPayload.interactive } : {},
+		...isRecord(rawPayload.channelData) ? { channelData: rawPayload.channelData } : {},
+		...typeof details.idempotencyKey === "string" && details.idempotencyKey.trim() ? { idempotencyKey: details.idempotencyKey.trim() } : {}
+	};
+	return text || mediaUrls.length > 0 || payload.presentation || payload.interactive ? payload : void 0;
+}
 function isRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -685,6 +710,11 @@ async function startOrResumeThread(params) {
 		await clearCodexAppServerBinding(params.params.sessionFile);
 		binding = void 0;
 	}
+	if (binding?.threadId && params.mcpServersFingerprintEvaluated === true && binding.mcpServersFingerprint !== params.mcpServersFingerprint) {
+		embeddedAgentLog.debug("codex app-server MCP config changed; starting a new thread", { threadId: binding.threadId });
+		await clearCodexAppServerBinding(params.params.sessionFile);
+		binding = void 0;
+	}
 	if (binding?.threadId) {
 		let pluginBindingStale = isCodexPluginThreadBindingStale({
 			codexPluginsEnabled: params.pluginThreadConfig?.enabled ?? false,
@@ -711,6 +741,11 @@ async function startOrResumeThread(params) {
 			binding = void 0;
 		}
 	}
+	if (binding?.threadId && params.mcpServersFingerprintEvaluated === true && binding.mcpServersFingerprint !== params.mcpServersFingerprint) {
+		embeddedAgentLog.debug("codex app-server MCP config changed; starting a new thread", { threadId: binding.threadId });
+		await clearCodexAppServerBinding(params.params.sessionFile);
+		binding = void 0;
+	}
 	if (binding?.threadId) if (binding.dynamicToolsFingerprint && !areDynamicToolFingerprintsCompatible(binding.dynamicToolsFingerprint, dynamicToolsFingerprint)) {
 		preserveExistingBinding = shouldStartTransientNoToolThread({
 			previous: binding.dynamicToolsFingerprint,
@@ -723,12 +758,13 @@ async function startOrResumeThread(params) {
 		}
 	} else try {
 		const authProfileId = params.params.authProfileId ?? binding.authProfileId;
+		const resumeConfig = mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch);
 		const response = assertCodexThreadResumeResponse(await params.client.request("thread/resume", buildThreadResumeParams(params.params, {
 			threadId: binding.threadId,
 			authProfileId,
 			appServer: params.appServer,
 			developerInstructions: params.developerInstructions,
-			config: params.config
+			config: resumeConfig
 		})));
 		const boundAuthProfileId = authProfileId;
 		const fallbackModelProvider = resolveCodexAppServerModelProvider({
@@ -738,6 +774,7 @@ async function startOrResumeThread(params) {
 			agentDir: params.params.agentDir,
 			config: params.params.config
 		});
+		const nextMcpServersFingerprint = params.mcpServersFingerprintEvaluated === true ? params.mcpServersFingerprint : binding.mcpServersFingerprint;
 		await writeCodexAppServerBinding(params.params.sessionFile, {
 			threadId: response.thread.id,
 			cwd: params.cwd,
@@ -746,6 +783,7 @@ async function startOrResumeThread(params) {
 			modelProvider: response.modelProvider ?? fallbackModelProvider,
 			dynamicToolsFingerprint,
 			userMcpServersFingerprint,
+			mcpServersFingerprint: nextMcpServersFingerprint,
 			pluginAppsFingerprint: binding.pluginAppsFingerprint,
 			pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 			pluginAppPolicyContext: binding.pluginAppPolicyContext,
@@ -765,6 +803,7 @@ async function startOrResumeThread(params) {
 			modelProvider: response.modelProvider ?? fallbackModelProvider,
 			dynamicToolsFingerprint,
 			userMcpServersFingerprint,
+			mcpServersFingerprint: nextMcpServersFingerprint,
 			pluginAppsFingerprint: binding.pluginAppsFingerprint,
 			pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 			pluginAppPolicyContext: binding.pluginAppPolicyContext,
@@ -793,6 +832,7 @@ async function startOrResumeThread(params) {
 		config: params.params.config
 	});
 	const createdAt = (/* @__PURE__ */ new Date()).toISOString();
+	const nextMcpServersFingerprint = params.mcpServersFingerprintEvaluated === true ? params.mcpServersFingerprint : void 0;
 	if (!preserveExistingBinding) await writeCodexAppServerBinding(params.params.sessionFile, {
 		threadId: response.thread.id,
 		cwd: params.cwd,
@@ -801,6 +841,7 @@ async function startOrResumeThread(params) {
 		modelProvider: response.modelProvider ?? modelProvider,
 		dynamicToolsFingerprint,
 		userMcpServersFingerprint,
+		mcpServersFingerprint: nextMcpServersFingerprint,
 		pluginAppsFingerprint: pluginThreadConfig?.fingerprint,
 		pluginAppsInputFingerprint: pluginThreadConfig?.inputFingerprint,
 		pluginAppPolicyContext: pluginThreadConfig?.policyContext,
@@ -821,6 +862,7 @@ async function startOrResumeThread(params) {
 		modelProvider: response.modelProvider ?? modelProvider,
 		dynamicToolsFingerprint,
 		userMcpServersFingerprint,
+		mcpServersFingerprint: nextMcpServersFingerprint,
 		pluginAppsFingerprint: pluginThreadConfig?.fingerprint,
 		pluginAppsInputFingerprint: pluginThreadConfig?.inputFingerprint,
 		pluginAppPolicyContext: pluginThreadConfig?.policyContext,
@@ -1050,4 +1092,4 @@ function resolveReasoningEffort(thinkLevel, modelId) {
 	return null;
 }
 //#endregion
-export { createCodexDynamicToolBridge as _, buildThreadStartParams as a, resolveCodexAppServerModelProvider as c, buildCodexPluginThreadConfig as d, buildCodexPluginThreadConfigInputFingerprint as f, resolveCodexContextEngineProjectionReserveTokens as g, resolveCodexContextEngineProjectionMaxChars as h, buildThreadResumeParams as i, resolveReasoningEffort as l, projectContextEngineAssemblyForCodex as m, buildCodexRuntimeThreadConfig as n, buildTurnStartParams as o, shouldBuildCodexPluginThreadConfig as p, buildDeveloperInstructions as r, codexDynamicToolsFingerprint as s, areCodexDynamicToolFingerprintsCompatible as t, startOrResumeThread as u, filterCodexDynamicTools as v, normalizeCodexDynamicToolName as y };
+export { resolveCodexContextEngineProjectionReserveTokens as _, buildThreadStartParams as a, normalizeCodexDynamicToolName as b, resolveCodexAppServerModelProvider as c, buildCodexPluginThreadConfig as d, buildCodexPluginThreadConfigInputFingerprint as f, resolveCodexContextEngineProjectionMaxChars as g, projectContextEngineAssemblyForCodex as h, buildThreadResumeParams as i, resolveReasoningEffort as l, shouldBuildCodexPluginThreadConfig as m, buildCodexRuntimeThreadConfig as n, buildTurnStartParams as o, mergeCodexThreadConfigs as p, buildDeveloperInstructions as r, codexDynamicToolsFingerprint as s, areCodexDynamicToolFingerprintsCompatible as t, startOrResumeThread as u, createCodexDynamicToolBridge as v, filterCodexDynamicTools as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.12-beta.6",
+  "version": "2026.5.12-beta.8",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12-beta.6"
+      "pluginApi": ">=2026.5.12-beta.8"
     },
     "build": {
-      "openclawVersion": "2026.5.12-beta.6"
+      "openclawVersion": "2026.5.12-beta.8"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.12-beta.6"
+    "openclaw": ">=2026.5.12-beta.8"
   },
   "peerDependenciesMeta": {
     "openclaw": {