@openclaw/codex 2026.5.14-beta.1 → 2026.5.14-beta.2

package/dist/client-factory-Be6RD28K.js

@@ -0,0 +1,9 @@
+//#region extensions/codex/src/app-server/client-factory.ts
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-BwUqd3lh.js").then((n) => n.a).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+	startOptions,
+	authProfileId,
+	agentDir,
+	config
+}));
+//#endregion
+export { defaultCodexAppServerClientFactory as t };

package/dist/{command-formatters-CJH9-hFT.js → command-formatters-DRJaVHhN.js}

@@ -26,9 +26,13 @@ function shouldRefreshCodexRateLimitsForUsageLimitMessage(message) {
 	return Boolean(text?.includes("You've reached your Codex subscription usage limit.") && !text.includes("Next reset "));
 }
 function summarizeCodexRateLimits(value, nowMs = Date.now()) {
-	const snapshots = collectCodexRateLimitSnapshots(value);
+	const snapshots = collectCodexRateLimitSnapshots(value).filter(snapshotHasDisplayableData);
 	if (snapshots.length === 0) return;
-	return snapshots.slice(0, 4).map((snapshot) => summarizeRateLimitSnapshot(snapshot, nowMs)).join("; ");
+	const summaries = snapshots.slice(0, 4).map((snapshot) => summarizeRateLimitSnapshot(snapshot, nowMs)).filter((summary) => summary !== void 0);
+	return summaries.length > 0 ? summaries.join("; ") : void 0;
+}
+function hasCodexRateLimitSnapshots(value) {
+	return collectCodexRateLimitSnapshots(value).length > 0;
 }
 function summarizeCodexAccountRateLimits(value, nowMs = Date.now()) {
 	const summary = summarizeCodexAccountUsage(value, nowMs);
@@ -40,7 +44,7 @@ function resolveCodexUsageLimitResetAtMs(value, nowMs = Date.now()) {
 	return selectBlockingRateLimitReset(value, nowMs)?.resetsAtMs;
 }
 function summarizeCodexAccountUsage(value, nowMs = Date.now()) {
-	const snapshots = collectCodexRateLimitSnapshots(value);
+	const snapshots = collectCodexRateLimitSnapshots(value).filter(snapshotHasDisplayableData);
 	if (snapshots.length === 0) return;
 	const usageSnapshot = snapshots.find(isCodexLimitSnapshot) ?? snapshots[0];
 	const blockedSnapshots = snapshots.filter(snapshotHasLimitBlock);
@@ -86,7 +90,8 @@ function summarizeRateLimitSnapshot(snapshot, nowMs) {
 	});
 	const reachedType = readString$1(snapshot, "rateLimitReachedType") ?? readString$1(snapshot, "rate_limit_reached_type");
 	const suffix = reachedType ? ` (${formatReachedType(reachedType)})` : "";
-	return `${label}: ${windows.join(" · ") || "available"}${suffix}`;
+	if (windows.length > 0) return `${label}: ${windows.join(" · ")}${suffix}`;
+	if (reachedType) return `${label}: ${formatReachedType(reachedType)}`;
 }
 function collectCodexRateLimitSnapshots(value) {
 	const snapshots = [];
@@ -143,6 +148,10 @@ function readRateLimitWindow(snapshot, key) {
 		...readOptionalNumberField(window, "windowDurationMins", "window_duration_mins", "windowMinutes", "window_minutes")
 	};
 }
+function snapshotHasDisplayableData(snapshot) {
+	if (readString$1(snapshot, "rateLimitReachedType") ?? readString$1(snapshot, "rate_limit_reached_type")) return true;
+	return readWindowEntries(snapshot).some((entry) => entry.window.usedPercent !== void 0 || entry.window.resetsAtMs > 0);
+}
 function readOptionalNumberField(record, ...keys) {
 	const value = keys.map((key) => readNumber(record, key)).find((entry) => entry !== void 0);
 	if (value === void 0) return {};
@@ -454,11 +463,13 @@ function summarizeArrayLike(value) {
 	return `${entries.length}`;
 }
 function formatCodexRateLimitSummary(value) {
-	return formatCodexDisplayText(summarizeCodexRateLimits(value) ?? summarizeRateLimits(value));
+	const summary = summarizeCodexRateLimits(value);
+	if (summary) return formatCodexDisplayText(summary);
+	return formatCodexDisplayText(hasCodexRateLimitSnapshots(value) ? "none returned" : summarizeRateLimits(value));
 }
 function formatCodexRateLimitDetails(value) {
 	const lines = summarizeCodexAccountRateLimits(value);
-	if (!lines) return formatCodexDisplayText(summarizeRateLimits(value));
+	if (!lines) return formatCodexDisplayText(hasCodexRateLimitSnapshots(value) ? "none returned" : summarizeRateLimits(value));
 	return lines.map(formatCodexDisplayText).join("\n");
 }
 function summarizeRateLimits(value) {

package/dist/{command-handlers-DIXo49aO.js → command-handlers-CXxykxjq.js}

@@ -1,12 +1,12 @@
 import { i as isCodexFastServiceTier, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-GCYf5s8J.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as CODEX_CONTROL_METHODS, r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BxAP1uyw.js";
-import { a as formatComputerUseStatus, c as formatThreads, i as formatCodexStatus, l as readString$1, n as formatAccount, o as formatList, p as summarizeCodexAccountUsage, r as formatCodexDisplayText, s as formatModels, t as buildHelp } from "./command-formatters-CJH9-hFT.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-CKYiRqsN.js";
+import { a as formatComputerUseStatus, c as formatThreads, i as formatCodexStatus, l as readString$1, n as formatAccount, o as formatList, p as summarizeCodexAccountUsage, r as formatCodexDisplayText, s as formatModels, t as buildHelp } from "./command-formatters-DRJaVHhN.js";
 import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, l as startCodexConversationThread, m as setCodexConversationFastMode, p as readCodexConversationActiveTurn, r as formatCodexCliSessions, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./node-cli-sessions-CV5Kmdwt.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-DFdLwPQa.js";
-import { n as rememberCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, l as startCodexConversationThread, m as setCodexConversationFastMode, p as readCodexConversationActiveTurn, r as formatCodexCliSessions, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./node-cli-sessions-CiexDHeV.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-DsJxRRtm.js";
+import { n as rememberCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import crypto from "node:crypto";
 import { ensureAuthProfileStore, findNormalizedProviderValue, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveDefaultAgentDir, resolveProfileUnusableUntilForDisplay } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/command-account.ts

package/dist/{compact-Ck9ckRkJ.js → compact-DWa8cylR.js}

@@ -1,11 +1,10 @@
 import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { i as readCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-BB5hgnWH.js";
+import { t as defaultCodexAppServerClientFactory } from "./client-factory-Be6RD28K.js";
 import { embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, runHarnessContextEngineMaintenance } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const DEFAULT_CODEX_COMPACTION_WAIT_TIMEOUT_MS = 300 * 1e3;
-let clientFactory = defaultCodexAppServerClientFactory;
 async function maybeCompactCodexAppServerSession(params, options = {}) {
 	const activeContextEngine = isActiveHarnessContextEngine(params.contextEngine) ? params.contextEngine : void 0;
 	if (activeContextEngine?.info.ownsCompaction) {
@@ -77,7 +76,7 @@ async function compactCodexNativeThread(params, options = {}) {
 		compacted: false,
 		reason: "auth profile mismatch for session binding"
 	};
-	const client = await clientFactory(appServer.start, requestedAuthProfileId ?? binding.authProfileId, params.agentDir, params.config);
+	const client = await (options.clientFactory ?? defaultCodexAppServerClientFactory)(appServer.start, requestedAuthProfileId ?? binding.authProfileId, params.agentDir, params.config);
 	const waiter = createCodexNativeCompactionWaiter(client, binding.threadId);
 	let completion;
 	try {
@@ -253,8 +252,5 @@ function formatCompactionError(error) {
 	if (error instanceof Error) return error.message;
 	return String(error);
 }
-createCodexAppServerClientFactoryTestHooks((factory) => {
-	clientFactory = factory;
-});
 //#endregion
 export { maybeCompactCodexAppServerSession };

package/dist/{computer-use-DFdLwPQa.js → computer-use-DsJxRRtm.js}

@@ -1,5 +1,5 @@
 import { c as resolveCodexComputerUseConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BxAP1uyw.js";
+import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-CKYiRqsN.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/harness.js

@@ -18,15 +18,15 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-CN9AS7qv.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DG9NQab2.js");
 			return runCodexAppServerAttempt(params, { pluginConfig: options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-BsBqLpar.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-CVWPOkY-.js");
 			return runCodexAppServerSideQuestion(params, { pluginConfig: options?.pluginConfig });
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-Ck9ckRkJ.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-DWa8cylR.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.pluginConfig });
 		},
 		reset: async (params) => {

package/dist/index.js

@@ -2,12 +2,11 @@ import { createCodexAppServerAgentHarness } from "./harness.js";
 import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0rd3LnKg.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
 import { buildCodexProvider } from "./provider.js";
-import { r as describeControlFailure, t as requestCodexAppServerJson } from "./request-BxAP1uyw.js";
-import { r as formatCodexDisplayText } from "./command-formatters-CJH9-hFT.js";
+import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-CKYiRqsN.js";
+import { r as formatCodexDisplayText } from "./command-formatters-DRJaVHhN.js";
 import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, i as getSharedCodexAppServerClient, t as clearSharedCodexAppServerClientAndWait, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-BwUqd3lh.js";
-import { a as resolveCodexCliSessionForBindingOnNode, c as handleCodexConversationInboundClaim, i as listCodexCliSessionsOnNode, n as createCodexCliSessionNodeInvokePolicies, o as resumeCodexCliSessionOnNode, s as handleCodexConversationBindingResolved, t as createCodexCliSessionNodeHostCommands } from "./node-cli-sessions-CV5Kmdwt.js";
-import { a as defaultCodexAppInventoryCache, n as pluginReadParams, t as ensureCodexPluginActivation } from "./plugin-activation-PXGqUjwY.js";
-import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DBlqE0gO.js";
+import { a as resolveCodexCliSessionForBindingOnNode, c as handleCodexConversationInboundClaim, i as listCodexCliSessionsOnNode, n as createCodexCliSessionNodeInvokePolicies, o as resumeCodexCliSessionOnNode, s as handleCodexConversationBindingResolved, t as createCodexCliSessionNodeHostCommands } from "./node-cli-sessions-CiexDHeV.js";
+import { a as defaultCodexAppInventoryCache, n as pluginReadParams, t as ensureCodexPluginActivation } from "./plugin-activation-aQOmRQwA.js";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import os from "node:os";
@@ -39,7 +38,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-DIXo49aO.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-CXxykxjq.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -725,11 +724,8 @@ async function buildCodexMigrationPlan(ctx) {
 	}));
 	const warnings = [
 		...items.some((item) => item.status === "conflict") ? ["Conflicts were found. Re-run with --overwrite to replace conflicting migration targets after item-level backups."] : [],
-		...source.plugins.some((plugin) => plugin.migratable) ? ["Codex source-installed openai-curated plugins are planned for native activation; cached plugin bundles remain manual-review only."] : [],
-		...source.plugins.some((plugin) => plugin.migratable && plugin.apps && plugin.apps.length > 0) && !shouldVerifyPluginApps(ctx) ? ["Codex app-backed plugins were planned without source app accessibility verification. Re-run with --verify-plugin-apps to force a fresh source app/list check before planning native plugin activation."] : [],
 		...source.pluginDiscoveryError ? [`Codex app-server plugin inventory discovery failed: ${source.pluginDiscoveryError}. Cached plugin bundles, if any, are advisory only.`] : [],
-		...source.plugins.some((plugin) => plugin.migrationBlock?.code === "codex_subscription_required") ? [codexPluginMigrationSubscriptionWarning()] : [],
-		...source.archivePaths.length > 0 ? ["Codex config and hook files are archive-only. They are preserved in the migration report, not loaded into OpenClaw automatically."] : []
+		...source.plugins.some((plugin) => plugin.migrationBlock?.code === "codex_subscription_required") ? [codexPluginMigrationSubscriptionWarning()] : []
 	];
 	return {
 		providerId: "codex",

package/dist/{node-cli-sessions-CV5Kmdwt.js → node-cli-sessions-CiexDHeV.js}

@@ -1,7 +1,7 @@
 import { i as isCodexFastServiceTier, r as codexSandboxPolicyForTurn, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as CODEX_CONTROL_METHODS } from "./request-BxAP1uyw.js";
-import { r as formatCodexDisplayText } from "./command-formatters-CJH9-hFT.js";
+import { r as CODEX_CONTROL_METHODS } from "./request-CKYiRqsN.js";
+import { r as formatCodexDisplayText } from "./command-formatters-DRJaVHhN.js";
 import { i as getSharedCodexAppServerClient, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-BwUqd3lh.js";
 import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
 import os from "node:os";

package/dist/{plugin-activation-PXGqUjwY.js → plugin-activation-aQOmRQwA.js}

@@ -313,8 +313,12 @@ function marketplaceRef(marketplace) {
 //#region extensions/codex/src/app-server/plugin-activation.ts
 async function ensureCodexPluginActivation(params) {
 	if (params.identity.marketplaceName !== "openai-curated") return activationFailure(params.identity, "marketplace_missing", { message: "Only " + CODEX_PLUGINS_MARKETPLACE_NAME + " plugins can be activated." });
-	const resolved = findOpenAiCuratedPluginSummary(await params.request("plugin/list", { cwds: [] }), params.identity.pluginName);
-	if (!resolved) return activationFailure(params.identity, "plugin_missing", { message: `${params.identity.pluginName} was not found in ${CODEX_PLUGINS_MARKETPLACE_NAME}.` });
+	const listed = await params.request("plugin/list", { cwds: [] });
+	const resolved = findOpenAiCuratedPluginSummary(listed, params.identity.pluginName);
+	if (!resolved) {
+		if (!listed.marketplaces.some((marketplace) => marketplace.name === "openai-curated")) return activationFailure(params.identity, "marketplace_missing", { message: `Codex marketplace ${CODEX_PLUGINS_MARKETPLACE_NAME} was not found.` });
+		return activationFailure(params.identity, "plugin_missing", { message: `${params.identity.pluginName} was not found in ${CODEX_PLUGINS_MARKETPLACE_NAME}.` });
+	}
 	if (resolved.summary.installed && resolved.summary.enabled && !params.installEvenIfActive) return {
 		identity: params.identity,
 		ok: true,

package/dist/{plugin-app-cache-key-DBlqE0gO.js → request-CKYiRqsN.js}

@@ -1,6 +1,27 @@
-import { f as resolveCodexAppServerHomeDir } from "./shared-client-BwUqd3lh.js";
-import { i as buildCodexAppInventoryCacheKey } from "./plugin-activation-PXGqUjwY.js";
+import { n as CodexAppServerRpcError } from "./client-CoctX13d.js";
+import { f as resolveCodexAppServerHomeDir, i as getSharedCodexAppServerClient, o as withTimeout, r as createIsolatedCodexAppServerClient } from "./shared-client-BwUqd3lh.js";
+import { i as buildCodexAppInventoryCacheKey } from "./plugin-activation-aQOmRQwA.js";
 import { createHash } from "node:crypto";
+//#region extensions/codex/src/app-server/capabilities.ts
+const CODEX_CONTROL_METHODS = {
+	account: "account/read",
+	compact: "thread/compact/start",
+	feedback: "feedback/upload",
+	listMcpServers: "mcpServerStatus/list",
+	listSkills: "skills/list",
+	listThreads: "thread/list",
+	rateLimits: "account/rateLimits/read",
+	resumeThread: "thread/resume",
+	review: "review/start"
+};
+function describeControlFailure(error) {
+	if (isUnsupportedControlError(error)) return "unsupported by this Codex app-server";
+	return error instanceof Error ? error.message : String(error);
+}
+function isUnsupportedControlError(error) {
+	return error instanceof CodexAppServerRpcError && error.code === -32601;
+}
+//#endregion
 //#region extensions/codex/src/app-server/plugin-app-cache-key.ts
 function buildCodexPluginAppCacheKey(params) {
 	return buildCodexAppInventoryCacheKey({
@@ -43,4 +64,26 @@ function fingerprintCodexPluginAppCacheCredentials(startOptions) {
 	return `sha256:${hash.digest("hex")}`;
 }
 //#endregion
-export { buildCodexPluginAppCacheKey as t };
+//#region extensions/codex/src/app-server/request.ts
+async function requestCodexAppServerJson(params) {
+	const timeoutMs = params.timeoutMs ?? 6e4;
+	return await withTimeout((async () => {
+		const client = await (params.isolated ? createIsolatedCodexAppServerClient : getSharedCodexAppServerClient)({
+			startOptions: params.startOptions,
+			timeoutMs,
+			authProfileId: params.authProfileId,
+			agentDir: params.agentDir,
+			config: params.config
+		});
+		try {
+			return await client.request(params.method, params.requestParams, { timeoutMs });
+		} finally {
+			if (params.isolated) await client.closeAndWait({
+				exitTimeoutMs: 2e3,
+				forceKillDelayMs: 250
+			});
+		}
+	})(), timeoutMs, `codex app-server ${params.method} timed out`);
+}
+//#endregion
+export { describeControlFailure as i, buildCodexPluginAppCacheKey as n, CODEX_CONTROL_METHODS as r, requestCodexAppServerJson as t };

package/dist/{run-attempt-CN9AS7qv.js → run-attempt-DG9NQab2.js}

@@ -2,17 +2,16 @@ import { l as resolveCodexPluginsPolicy, o as readCodexPluginConfig, s as resolv
 import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse } from "./protocol-validators-CSY0BFBo.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { i as isCodexAppServerConnectionClosedError, r as isCodexAppServerApprovalRequest } from "./client-CoctX13d.js";
-import { n as CODEX_CONTROL_METHODS } from "./request-BxAP1uyw.js";
-import { d as resolveCodexUsageLimitResetAtMs, f as shouldRefreshCodexRateLimitsForUsageLimitMessage, r as formatCodexDisplayText, u as formatCodexUsageLimitErrorMessage } from "./command-formatters-CJH9-hFT.js";
+import { n as buildCodexPluginAppCacheKey, r as CODEX_CONTROL_METHODS } from "./request-CKYiRqsN.js";
+import { d as resolveCodexUsageLimitResetAtMs, f as shouldRefreshCodexRateLimitsForUsageLimitMessage, r as formatCodexDisplayText, u as formatCodexUsageLimitErrorMessage } from "./command-formatters-DRJaVHhN.js";
 import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, l as resolveCodexAppServerAuthProfileId, n as clearSharedCodexAppServerClientIfCurrent, s as refreshCodexAppServerAuthTokens, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-BwUqd3lh.js";
 import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { a as defaultCodexAppInventoryCache } from "./plugin-activation-PXGqUjwY.js";
-import { t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DBlqE0gO.js";
-import { _ as resolveCodexContextEngineProjectionReserveTokens, b as normalizeCodexDynamicToolName, d as buildCodexPluginThreadConfig, f as buildCodexPluginThreadConfigInputFingerprint, g as resolveCodexContextEngineProjectionMaxChars, h as projectContextEngineAssemblyForCodex, m as shouldBuildCodexPluginThreadConfig, o as buildTurnStartParams, p as mergeCodexThreadConfigs, r as buildDeveloperInstructions, s as codexDynamicToolsFingerprint, t as areCodexDynamicToolFingerprintsCompatible, u as startOrResumeThread, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-B_oezv_0.js";
-import { n as defaultCodexAppServerClientFactory } from "./client-factory-BB5hgnWH.js";
-import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-cbM0WkCZ.js";
-import { t as ensureCodexComputerUse } from "./computer-use-DFdLwPQa.js";
-import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
+import { a as defaultCodexAppInventoryCache } from "./plugin-activation-aQOmRQwA.js";
+import { _ as resolveCodexContextEngineProjectionReserveTokens, b as normalizeCodexDynamicToolName, d as buildCodexPluginThreadConfig, f as buildCodexPluginThreadConfigInputFingerprint, g as resolveCodexContextEngineProjectionMaxChars, h as projectContextEngineAssemblyForCodex, m as shouldBuildCodexPluginThreadConfig, o as buildTurnStartParams, p as mergeCodexThreadConfigs, r as buildDeveloperInstructions, s as codexDynamicToolsFingerprint, t as areCodexDynamicToolFingerprintsCompatible, u as startOrResumeThread, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-DrbViNpf.js";
+import { t as defaultCodexAppServerClientFactory } from "./client-factory-Be6RD28K.js";
+import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-CzTdigBu.js";
+import { t as ensureCodexComputerUse } from "./computer-use-DsJxRRtm.js";
+import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import { createHash } from "node:crypto";
 import nodeFs from "node:fs";
 import { TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, bootstrapHarnessContextEngine, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, finalizeHarnessContextEngineTurn, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, loadCodexBundleMcpThreadConfig, normalizeAgentRuntimeTools, normalizeUsage, registerNativeHookRelay, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveSessionWriteLockAcquireTimeoutMs, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -20,7 +19,6 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { markAuthProfileBlockedUntil, resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
 import { appendRegularFile, pathExists } from "openclaw/plugin-sdk/security-runtime";
-import { AsyncLocalStorage } from "node:async_hooks";
 import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { createRunningTaskRun, finalizeTaskRunByRunId, recordTaskRunProgressByRunId } from "openclaw/plugin-sdk/codex-native-task-runtime";
 import { buildSessionContext, migrateSessionEntries, parseSessionEntries } from "@earendil-works/pi-coding-agent";
@@ -2132,12 +2130,7 @@ const CODEX_BOOTSTRAP_CONTEXT_ORDER = new Map([
 	["memory.md", 60],
 	["heartbeat.md", 70]
 ]);
-const testClientFactoryStorage = new AsyncLocalStorage();
-const clientFactory = defaultCodexAppServerClientFactory;
 let openClawCodingToolsFactoryForTests;
-function resolveCodexAppServerClientFactory() {
-	return testClientFactoryStorage.getStore() ?? clientFactory;
-}
 function emitCodexAppServerEvent(params, event) {
 	try {
 		emitAgentEvent({
@@ -2293,7 +2286,7 @@ function restrictCodexAppServerSandboxForOpenClawSandbox(appServer, sandbox) {
 }
 async function runCodexAppServerAttempt(params, options = {}) {
 	const attemptStartedAt = Date.now();
-	const attemptClientFactory = resolveCodexAppServerClientFactory();
+	const attemptClientFactory = options.clientFactory ?? defaultCodexAppServerClientFactory;
 	const pluginConfig = readCodexPluginConfig(options.pluginConfig);
 	const configuredAppServer = resolveCodexAppServerRuntimeOptions({ pluginConfig });
 	const resolvedWorkspace = resolveUserPath(params.workspaceDir);
@@ -2384,6 +2377,11 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	});
 	const hadSessionFile = await pathExists(params.sessionFile);
 	let historyMessages = await readMirroredSessionHistoryMessages(params.sessionFile) ?? [];
+	const hookContextWindowFields = {
+		...params.contextWindowInfo?.tokens ? { contextTokenBudget: params.contextWindowInfo.tokens } : params.contextTokenBudget ? { contextTokenBudget: params.contextTokenBudget } : {},
+		...params.contextWindowInfo?.source ? { contextWindowSource: params.contextWindowInfo.source } : {},
+		...params.contextWindowInfo?.referenceTokens ? { contextWindowReferenceTokens: params.contextWindowInfo.referenceTokens } : {}
+	};
 	const hookContext = {
 		runId: params.runId,
 		agentId: sessionAgentId,
@@ -2392,7 +2390,8 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		workspaceDir: params.workspaceDir,
 		messageProvider: params.messageProvider ?? void 0,
 		trigger: params.trigger,
-		channelId: params.messageChannel ?? params.messageProvider ?? void 0
+		channelId: params.messageChannel ?? params.messageProvider ?? void 0,
+		...hookContextWindowFields
 	};
 	if (activeContextEngine) {
 		await bootstrapHarnessContextEngine({
@@ -3174,6 +3173,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 					sessionId: params.sessionId,
 					provider: params.provider,
 					model: params.modelId,
+					...hookContextWindowFields,
 					resolvedRef: params.runtimePlan?.observability.resolvedRef ?? `${params.provider}/${params.modelId}`,
 					...params.runtimePlan?.observability.harnessId ? { harnessId: params.runtimePlan.observability.harnessId } : {},
 					assistantTexts: []
@@ -3373,6 +3373,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 				sessionId: params.sessionId,
 				provider: params.provider,
 				model: params.modelId,
+				...hookContextWindowFields,
 				resolvedRef: params.runtimePlan?.observability.resolvedRef ?? `${params.provider}/${params.modelId}`,
 				...params.runtimePlan?.observability.harnessId ? { harnessId: params.runtimePlan.observability.harnessId } : {},
 				assistantTexts: result.assistantTexts,
@@ -3723,7 +3724,7 @@ async function buildDynamicTools(input) {
 	}), input.pluginConfig), {
 		modelHasVision,
 		hasInboundImages: (params.images?.length ?? 0) > 0
-	}), params.toolsAllow);
+	}), includeForcedMessageToolAllow(params.toolsAllow, params));
 	return normalizeAgentRuntimeTools({
 		runtimePlan: params.runtimePlan,
 		tools: filteredTools,
@@ -3736,6 +3737,12 @@ async function buildDynamicTools(input) {
 		model: params.model
 	});
 }
+function includeForcedMessageToolAllow(toolsAllow, params) {
+	if (!shouldForceMessageTool(params)) return toolsAllow;
+	if (toolsAllow === void 0) return toolsAllow;
+	if (toolsAllow.length === 0) return ["message"];
+	return new Set(toolsAllow.map((name) => normalizeCodexDynamicToolName(name))).has("message") ? toolsAllow : [...toolsAllow, "message"];
+}
 function filterCodexDynamicToolsForAllowlist(tools, toolsAllow) {
 	if (!toolsAllow || toolsAllow.length === 0) return tools;
 	const allowSet = new Set(toolsAllow.map((name) => normalizeCodexDynamicToolName(name)).filter(Boolean));

package/dist/{side-question-BsBqLpar.js → side-question-CVWPOkY-.js}

@@ -2,12 +2,12 @@ import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions }
 import { a as readCodexDynamicToolCallParams, i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, t as assertCodexThreadForkResponse } from "./protocol-validators-CSY0BFBo.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { r as isCodexAppServerApprovalRequest } from "./client-CoctX13d.js";
-import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-CJH9-hFT.js";
+import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-DRJaVHhN.js";
 import { i as getSharedCodexAppServerClient, s as refreshCodexAppServerAuthTokens } from "./shared-client-BwUqd3lh.js";
 import { i as readCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { c as resolveCodexAppServerModelProvider, l as resolveReasoningEffort, n as buildCodexRuntimeThreadConfig, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-B_oezv_0.js";
-import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-cbM0WkCZ.js";
-import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-BFi-50LG.js";
+import { c as resolveCodexAppServerModelProvider, l as resolveReasoningEffort, n as buildCodexRuntimeThreadConfig, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-DrbViNpf.js";
+import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-CzTdigBu.js";
+import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import { embeddedAgentLog, formatErrorMessage, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/side-question.ts
 const CODEX_SIDE_DYNAMIC_TOOL_TIMEOUT_MS = 3e4;

package/dist/test-api.js

@@ -1,5 +1,5 @@
 import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { a as buildThreadStartParams, i as buildThreadResumeParams, o as buildTurnStartParams, r as buildDeveloperInstructions, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-B_oezv_0.js";
+import { a as buildThreadStartParams, i as buildThreadResumeParams, o as buildTurnStartParams, r as buildDeveloperInstructions, v as createCodexDynamicToolBridge, y as filterCodexDynamicTools } from "./thread-lifecycle-DrbViNpf.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-B_oezv_0.js → thread-lifecycle-DrbViNpf.js}

@@ -5,7 +5,7 @@ import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY, renderCodexPromptOverlay } from ".
 import { isModernCodexModel } from "./provider.js";
 import { i as isCodexAppServerConnectionClosedError } from "./client-CoctX13d.js";
 import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { a as defaultCodexAppInventoryCache, r as readCodexPluginInventory, t as ensureCodexPluginActivation } from "./plugin-activation-PXGqUjwY.js";
+import { a as defaultCodexAppInventoryCache, r as readCodexPluginInventory, t as ensureCodexPluginActivation } from "./plugin-activation-aQOmRQwA.js";
 import crypto from "node:crypto";
 import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, isActiveHarnessContextEngine, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, runAgentHarnessAfterToolCallHook, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { buildCodexUserMcpServersThreadConfigPatch } from "openclaw/plugin-sdk/codex-mcp-projection";
@@ -297,14 +297,33 @@ function readFirstString(record, keys) {
 }
 function collectMediaUrls(record) {
 	const urls = [];
+	const pushMediaUrl = (value) => {
+		if (typeof value === "string" && value.trim()) urls.push(value.trim());
+	};
+	const pushAttachment = (value) => {
+		if (!value || typeof value !== "object" || Array.isArray(value)) return;
+		const attachment = value;
+		for (const key of [
+			"media",
+			"mediaUrl",
+			"path",
+			"filePath",
+			"fileUrl",
+			"url"
+		]) pushMediaUrl(attachment[key]);
+	};
 	for (const key of [
+		"media",
 		"mediaUrl",
 		"media_url",
+		"path",
+		"filePath",
+		"fileUrl",
 		"imageUrl",
 		"image_url"
 	]) {
 		const value = record[key];
-		if (typeof value === "string" && value.trim()) urls.push(value.trim());
+		pushMediaUrl(value);
 	}
 	for (const key of [
 		"mediaUrls",
@@ -314,8 +333,10 @@ function collectMediaUrls(record) {
 	]) {
 		const value = record[key];
 		if (!Array.isArray(value)) continue;
-		for (const entry of value) if (typeof entry === "string" && entry.trim()) urls.push(entry.trim());
+		for (const entry of value) pushMediaUrl(entry);
 	}
+	const attachments = record.attachments;
+	if (Array.isArray(attachments)) for (const attachment of attachments) pushAttachment(attachment);
 	return urls;
 }
 function isCronAddAction(args) {
@@ -680,6 +701,7 @@ const CODEX_CODE_MODE_THREAD_CONFIG = {
 	"features.code_mode": true,
 	"features.code_mode_only": true
 };
+const CODEX_LIGHTWEIGHT_CONTEXT_THREAD_CONFIG = { project_doc_max_bytes: 0 };
 async function startOrResumeThread(params) {
 	const dynamicToolsFingerprint = fingerprintDynamicTools(params.dynamicTools);
 	const contextEngineBinding = buildContextEngineBinding(params.params);
@@ -939,7 +961,7 @@ function buildThreadStartParams(params, options) {
 		sandbox: options.appServer.sandbox,
 		...options.appServer.serviceTier ? { serviceTier: options.appServer.serviceTier } : {},
 		serviceName: "OpenClaw",
-		config: buildCodexRuntimeThreadConfig(options.config),
+		config: buildCodexRuntimeThreadConfigForRun(params, options.config),
 		developerInstructions: options.developerInstructions ?? buildDeveloperInstructions(params),
 		dynamicTools: options.dynamicTools,
 		experimentalRawEvents: true,
@@ -962,7 +984,7 @@ function buildThreadResumeParams(params, options) {
 		approvalsReviewer: options.appServer.approvalsReviewer,
 		sandbox: options.appServer.sandbox,
 		...options.appServer.serviceTier ? { serviceTier: options.appServer.serviceTier } : {},
-		config: buildCodexRuntimeThreadConfig(options.config),
+		config: buildCodexRuntimeThreadConfigForRun(params, options.config),
 		developerInstructions: options.developerInstructions ?? buildDeveloperInstructions(params),
 		persistExtendedHistory: true
 	};
@@ -970,6 +992,14 @@ function buildThreadResumeParams(params, options) {
 function buildCodexRuntimeThreadConfig(config) {
 	return mergeCodexThreadConfigs(config, CODEX_CODE_MODE_THREAD_CONFIG) ?? { ...CODEX_CODE_MODE_THREAD_CONFIG };
 }
+function buildCodexRuntimeThreadConfigForRun(params, config) {
+	const runtimeConfig = buildCodexRuntimeThreadConfig(config);
+	if (params.bootstrapContextMode !== "lightweight") return runtimeConfig;
+	return mergeCodexThreadConfigs(runtimeConfig, CODEX_LIGHTWEIGHT_CONTEXT_THREAD_CONFIG) ?? {
+		...runtimeConfig,
+		...CODEX_LIGHTWEIGHT_CONTEXT_THREAD_CONFIG
+	};
+}
 function buildTurnStartParams(params, options) {
 	return {
 		threadId: options.threadId,

package/dist/{vision-tools-cbM0WkCZ.js → vision-tools-CzTdigBu.js}

@@ -1,5 +1,5 @@
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { r as formatCodexDisplayText } from "./command-formatters-CJH9-hFT.js";
+import { r as formatCodexDisplayText } from "./command-formatters-DRJaVHhN.js";
 import { callGatewayTool, embeddedAgentLog, formatApprovalDisplayPath } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/plugin-approval-roundtrip.ts
 const DEFAULT_CODEX_APPROVAL_TIMEOUT_MS = 12e4;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.14-beta.1",
+  "version": "2026.5.14-beta.2",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -11,7 +11,7 @@
     "@earendil-works/pi-coding-agent": "0.74.0",
     "@openai/codex": "0.130.0",
     "ajv": "8.20.0",
-    "ws": "8.20.0",
+    "ws": "8.20.1",
     "zod": "4.4.3"
   },
   "devDependencies": {
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.14-beta.1"
+      "pluginApi": ">=2026.5.14-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.14-beta.1"
+      "openclawVersion": "2026.5.14-beta.2"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.14-beta.1"
+    "openclaw": ">=2026.5.14-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/client-factory-BB5hgnWH.js

@@ -1,19 +0,0 @@
-//#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-BwUqd3lh.js").then((n) => n.a).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
-	startOptions,
-	authProfileId,
-	agentDir,
-	config
-}));
-function createCodexAppServerClientFactoryTestHooks(setFactory) {
-	return {
-		setCodexAppServerClientFactoryForTests(factory) {
-			setFactory(factory);
-		},
-		resetCodexAppServerClientFactoryForTests() {
-			setFactory(defaultCodexAppServerClientFactory);
-		}
-	};
-}
-//#endregion
-export { defaultCodexAppServerClientFactory as n, createCodexAppServerClientFactoryTestHooks as t };

package/dist/request-BxAP1uyw.js

@@ -1,45 +0,0 @@
-import { n as CodexAppServerRpcError } from "./client-CoctX13d.js";
-import { i as getSharedCodexAppServerClient, o as withTimeout, r as createIsolatedCodexAppServerClient } from "./shared-client-BwUqd3lh.js";
-//#region extensions/codex/src/app-server/capabilities.ts
-const CODEX_CONTROL_METHODS = {
-	account: "account/read",
-	compact: "thread/compact/start",
-	feedback: "feedback/upload",
-	listMcpServers: "mcpServerStatus/list",
-	listSkills: "skills/list",
-	listThreads: "thread/list",
-	rateLimits: "account/rateLimits/read",
-	resumeThread: "thread/resume",
-	review: "review/start"
-};
-function describeControlFailure(error) {
-	if (isUnsupportedControlError(error)) return "unsupported by this Codex app-server";
-	return error instanceof Error ? error.message : String(error);
-}
-function isUnsupportedControlError(error) {
-	return error instanceof CodexAppServerRpcError && error.code === -32601;
-}
-//#endregion
-//#region extensions/codex/src/app-server/request.ts
-async function requestCodexAppServerJson(params) {
-	const timeoutMs = params.timeoutMs ?? 6e4;
-	return await withTimeout((async () => {
-		const client = await (params.isolated ? createIsolatedCodexAppServerClient : getSharedCodexAppServerClient)({
-			startOptions: params.startOptions,
-			timeoutMs,
-			authProfileId: params.authProfileId,
-			agentDir: params.agentDir,
-			config: params.config
-		});
-		try {
-			return await client.request(params.method, params.requestParams, { timeoutMs });
-		} finally {
-			if (params.isolated) await client.closeAndWait({
-				exitTimeoutMs: 2e3,
-				forceKillDelayMs: 250
-			});
-		}
-	})(), timeoutMs, `codex app-server ${params.method} timed out`);
-}
-//#endregion
-export { CODEX_CONTROL_METHODS as n, describeControlFailure as r, requestCodexAppServerJson as t };