@openclaw/codex 2026.5.16-beta.1 → 2026.5.16-beta.3

package/dist/{client-CoctX13d.js → client-CA7amCZ8.js}

@@ -1,4 +1,4 @@
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
 import { n as isRpcResponse } from "./protocol-C9UWI98H.js";
 import { createInterface } from "node:readline";
 import { OPENCLAW_VERSION, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/{client-factory-Be6RD28K.js → client-factory-DwzPofwS.js}

@@ -1,5 +1,5 @@
 //#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-BwUqd3lh.js").then((n) => n.a).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-CnbrvEfV.js").then((n) => n.a).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
 	agentDir,

package/dist/{command-handlers-CbJPJwK_.js → command-handlers-C4F8BChC.js}

@@ -1,11 +1,11 @@
-import { i as isCodexFastServiceTier, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-GCYf5s8J.js";
+import { a as isCodexFastServiceTier, c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-BZLMz9WS.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-CKYiRqsN.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-Czoa60Nt.js";
 import { a as formatComputerUseStatus, c as formatThreads, i as formatCodexStatus, l as readString$1, n as formatAccount, o as formatList, p as summarizeCodexAccountUsage, r as formatCodexDisplayText, s as formatModels, t as buildHelp } from "./command-formatters-BRW7_Nu7.js";
-import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, l as startCodexConversationThread, m as setCodexConversationFastMode, p as readCodexConversationActiveTurn, r as formatCodexCliSessions, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./node-cli-sessions-xstpFJmx.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-DsJxRRtm.js";
+import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DbdVqMzW.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, l as startCodexConversationThread, m as setCodexConversationFastMode, p as readCodexConversationActiveTurn, r as formatCodexCliSessions, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./node-cli-sessions-BLDFnUEF.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-BX02ojP4.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import crypto from "node:crypto";
 import { ensureAuthProfileStore, findNormalizedProviderValue, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveDefaultAgentDir, resolveProfileUnusableUntilForDisplay } from "openclaw/plugin-sdk/agent-runtime";

package/dist/{compact-CKWfgifa.js → compact-96QPqIAu.js}

@@ -1,13 +1,14 @@
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { i as readCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
-import { t as defaultCodexAppServerClientFactory } from "./client-factory-Be6RD28K.js";
+import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DbdVqMzW.js";
+import { t as defaultCodexAppServerClientFactory } from "./client-factory-DwzPofwS.js";
 import { embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, resolveContextEngineOwnerPluginId, runHarnessContextEngineMaintenance } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const DEFAULT_CODEX_COMPACTION_WAIT_TIMEOUT_MS = 300 * 1e3;
 const warnedIgnoredCompactionOverrides = /* @__PURE__ */ new Set();
 async function maybeCompactCodexAppServerSession(params, options = {}) {
 	const activeContextEngine = isActiveHarnessContextEngine(params.contextEngine) ? params.contextEngine : void 0;
+	if (activeContextEngine?.info.ownsCompaction) return await compactOwningContextEngine(params, activeContextEngine);
 	warnIfIgnoringOpenClawCompactionOverrides(params);
 	const nativeResult = await compactCodexNativeThread(params, options);
 	if (activeContextEngine && nativeResult?.ok && nativeResult.compacted) try {
@@ -29,6 +30,99 @@ async function maybeCompactCodexAppServerSession(params, options = {}) {
 	}
 	return nativeResult;
 }
+async function compactOwningContextEngine(params, contextEngine) {
+	embeddedAgentLog.info("starting context-engine-owned Codex app-server compaction", {
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		engineId: contextEngine.info.id,
+		tokenBudget: params.contextTokenBudget,
+		currentTokenCount: params.currentTokenCount,
+		trigger: params.trigger,
+		compactionTarget: params.trigger === "manual" ? "threshold" : "budget",
+		force: params.trigger === "manual"
+	});
+	let result;
+	try {
+		result = await contextEngine.compact({
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			sessionFile: params.sessionFile,
+			tokenBudget: params.contextTokenBudget,
+			currentTokenCount: params.currentTokenCount,
+			compactionTarget: params.trigger === "manual" ? "threshold" : "budget",
+			customInstructions: params.customInstructions,
+			force: params.trigger === "manual",
+			runtimeContext: params.contextEngineRuntimeContext
+		});
+	} catch (error) {
+		embeddedAgentLog.warn("context-engine-owned Codex app-server compaction failed", {
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			engineId: contextEngine.info.id,
+			error: formatErrorMessage(error)
+		});
+		return {
+			ok: false,
+			compacted: false,
+			reason: `context engine compaction failed: ${formatErrorMessage(error)}`
+		};
+	}
+	if (result.ok && result.compacted) {
+		const compactedSessionId = result.result?.sessionId ?? params.sessionId;
+		const compactedSessionFile = result.result?.sessionFile ?? params.sessionFile;
+		try {
+			await runHarnessContextEngineMaintenance({
+				contextEngine,
+				sessionId: compactedSessionId,
+				sessionKey: params.sessionKey,
+				sessionFile: compactedSessionFile,
+				reason: "compaction",
+				runtimeContext: params.contextEngineRuntimeContext,
+				config: params.config
+			});
+		} catch (error) {
+			embeddedAgentLog.warn("context engine compaction maintenance failed", {
+				sessionId: compactedSessionId,
+				engineId: contextEngine.info.id,
+				error: formatErrorMessage(error)
+			});
+		}
+		await clearCodexAppServerBinding(params.sessionFile);
+		if (compactedSessionFile !== params.sessionFile) await clearCodexAppServerBinding(compactedSessionFile);
+	}
+	embeddedAgentLog.info("completed context-engine-owned Codex app-server compaction", {
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		engineId: contextEngine.info.id,
+		ok: result.ok,
+		compacted: result.compacted,
+		reason: result.reason,
+		codexThreadBindingInvalidated: result.ok && result.compacted
+	});
+	return {
+		ok: result.ok,
+		compacted: result.compacted,
+		reason: result.reason,
+		result: result.result ? {
+			...result.result,
+			summary: result.result.summary ?? "",
+			firstKeptEntryId: result.result.firstKeptEntryId ?? "",
+			details: mergeContextEngineCompactionDetails(result.result.details, { codexThreadBindingInvalidated: result.ok && result.compacted })
+		} : result.ok && result.compacted ? {
+			summary: "",
+			firstKeptEntryId: "",
+			tokensBefore: params.currentTokenCount ?? 0,
+			details: { codexThreadBindingInvalidated: true }
+		} : void 0
+	};
+}
+function mergeContextEngineCompactionDetails(details, extra) {
+	if (details && typeof details === "object" && !Array.isArray(details)) return {
+		...details,
+		...extra
+	};
+	return extra;
+}
 function warnIfIgnoringOpenClawCompactionOverrides(params) {
 	const ignoredConfig = readIgnoredCompactionOverridePaths(params, isActiveHarnessContextEngine(params.contextEngine) ? params.contextEngine : void 0);
 	if (ignoredConfig.length === 0) return;

package/dist/{computer-use-DsJxRRtm.js → computer-use-BX02ojP4.js}

@@ -1,5 +1,5 @@
-import { c as resolveCodexComputerUseConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-CKYiRqsN.js";
+import { c as resolveCodexAppServerRuntimeOptions, l as resolveCodexComputerUseConfig } from "./config-3ATInASk.js";
+import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-Czoa60Nt.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{config-0rd3LnKg.js → config-3ATInASk.js}

@@ -158,6 +158,12 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 		...serviceTier ? { serviceTier } : {}
 	};
 }
+function isCodexAppServerApprovalPolicyAllowedByRequirements(policy, params = {}) {
+	const content = readCodexRequirementsToml(params);
+	if (content === void 0) return true;
+	const allowedApprovalPolicies = parseAllowedApprovalPoliciesFromCodexRequirements(content);
+	return allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has(policy);
+}
 function resolveCodexComputerUseConfig(params = {}) {
 	const env = params.env ?? process.env;
 	const config = readCodexPluginConfig(params.pluginConfig).computerUse ?? {};
@@ -493,4 +499,4 @@ function splitShellWords(value) {
 	return words;
 }
 //#endregion
-export { normalizeCodexServiceTier as a, resolveCodexComputerUseConfig as c, isCodexFastServiceTier as i, resolveCodexPluginsPolicy as l, codexAppServerStartOptionsKey as n, readCodexPluginConfig as o, codexSandboxPolicyForTurn as r, resolveCodexAppServerRuntimeOptions as s, CODEX_PLUGINS_MARKETPLACE_NAME as t, withMcpElicitationsApprovalPolicy as u };
+export { isCodexFastServiceTier as a, resolveCodexAppServerRuntimeOptions as c, withMcpElicitationsApprovalPolicy as d, isCodexAppServerApprovalPolicyAllowedByRequirements as i, resolveCodexComputerUseConfig as l, codexAppServerStartOptionsKey as n, normalizeCodexServiceTier as o, codexSandboxPolicyForTurn as r, readCodexPluginConfig as s, CODEX_PLUGINS_MARKETPLACE_NAME as t, resolveCodexPluginsPolicy as u };

package/dist/harness.js

@@ -18,25 +18,28 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-frGYsF9Y.js");
-			return runCodexAppServerAttempt(params, { pluginConfig: options?.pluginConfig });
+			const { runCodexAppServerAttempt } = await import("./run-attempt-B3nk5oT1.js");
+			return runCodexAppServerAttempt(params, {
+				pluginConfig: options?.pluginConfig,
+				nativeHookRelay: { enabled: true }
+			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-CDcvaIKA.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-D3nH-Jk1.js");
 			return runCodexAppServerSideQuestion(params, { pluginConfig: options?.pluginConfig });
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-CKWfgifa.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-96QPqIAu.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.pluginConfig });
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-CMTXuyoz.js").then((n) => n.a);
+				const { clearCodexAppServerBinding } = await import("./session-binding-DbdVqMzW.js").then((n) => n.a);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-BwUqd3lh.js").then((n) => n.a);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-CnbrvEfV.js").then((n) => n.a);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,12 +1,12 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
-import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0rd3LnKg.js";
+import { c as resolveCodexAppServerRuntimeOptions, s as readCodexPluginConfig, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-3ATInASk.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
 import { buildCodexProvider } from "./provider.js";
-import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-CKYiRqsN.js";
+import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-Czoa60Nt.js";
 import { r as formatCodexDisplayText } from "./command-formatters-BRW7_Nu7.js";
-import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, i as getSharedCodexAppServerClient, t as clearSharedCodexAppServerClientAndWait, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-BwUqd3lh.js";
-import { a as resolveCodexCliSessionForBindingOnNode, c as handleCodexConversationInboundClaim, i as listCodexCliSessionsOnNode, n as createCodexCliSessionNodeInvokePolicies, o as resumeCodexCliSessionOnNode, s as handleCodexConversationBindingResolved, t as createCodexCliSessionNodeHostCommands } from "./node-cli-sessions-xstpFJmx.js";
-import { a as defaultCodexAppInventoryCache, n as pluginReadParams, t as ensureCodexPluginActivation } from "./plugin-activation-aQOmRQwA.js";
+import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, i as getSharedCodexAppServerClient, t as clearSharedCodexAppServerClientAndWait, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-CnbrvEfV.js";
+import { a as resolveCodexCliSessionForBindingOnNode, c as handleCodexConversationInboundClaim, i as listCodexCliSessionsOnNode, n as createCodexCliSessionNodeInvokePolicies, o as resumeCodexCliSessionOnNode, s as handleCodexConversationBindingResolved, t as createCodexCliSessionNodeHostCommands } from "./node-cli-sessions-BLDFnUEF.js";
+import { a as defaultCodexAppInventoryCache, n as pluginReadParams, t as ensureCodexPluginActivation } from "./plugin-activation-BDU4e-NA.js";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import os from "node:os";
@@ -38,7 +38,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-CbJPJwK_.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-C4F8BChC.js");
 	return handleCodexSubcommand;
 }
 //#endregion

package/dist/media-understanding-provider.js

@@ -1,7 +1,7 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
-import { s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
-import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CSY0BFBo.js";
-import { i as readModelListResult } from "./models-GCYf5s8J.js";
+import { c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
+import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-BGBspNmF.js";
+import { i as readModelListResult } from "./models-BZLMz9WS.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 //#region extensions/codex/media-understanding-provider.ts
@@ -62,7 +62,7 @@ async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = Math.max(100, params.timeoutMs);
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-BwUqd3lh.js").then((n) => n.a).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-CnbrvEfV.js").then((n) => n.a).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: params.profile

package/dist/{models-GCYf5s8J.js → models-BZLMz9WS.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
-import { s as readCodexModelListResponse } from "./protocol-validators-CSY0BFBo.js";
+import { s as readCodexModelListResponse } from "./protocol-validators-BGBspNmF.js";
 //#region extensions/codex/src/app-server/models.ts
 var models_exports = /* @__PURE__ */ __exportAll({
 	listAllCodexAppServerModels: () => listAllCodexAppServerModels,
@@ -39,7 +39,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-BwUqd3lh.js").then((n) => n.a);
+	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-CnbrvEfV.js").then((n) => n.a);
 	const client = useSharedClient ? await getSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/{node-cli-sessions-xstpFJmx.js → node-cli-sessions-BLDFnUEF.js}

@@ -1,9 +1,9 @@
-import { i as isCodexFastServiceTier, r as codexSandboxPolicyForTurn, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { a as isCodexFastServiceTier, c as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-3ATInASk.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { r as CODEX_CONTROL_METHODS } from "./request-CKYiRqsN.js";
+import { r as CODEX_CONTROL_METHODS } from "./request-Czoa60Nt.js";
 import { r as formatCodexDisplayText } from "./command-formatters-BRW7_Nu7.js";
-import { i as getSharedCodexAppServerClient, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-BwUqd3lh.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-CMTXuyoz.js";
+import { i as getSharedCodexAppServerClient, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-CnbrvEfV.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-DbdVqMzW.js";
 import os from "node:os";
 import { formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { spawn } from "node:child_process";

package/dist/{plugin-activation-aQOmRQwA.js → plugin-activation-BDU4e-NA.js}

@@ -1,4 +1,4 @@
-import { l as resolveCodexPluginsPolicy, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0rd3LnKg.js";
+import { t as CODEX_PLUGINS_MARKETPLACE_NAME, u as resolveCodexPluginsPolicy } from "./config-3ATInASk.js";
 import "node:fs/promises";
 import "node:path";
 var CodexAppInventoryCache = class {

package/dist/{protocol-validators-CSY0BFBo.js → protocol-validators-BGBspNmF.js}

@@ -318,6 +318,12 @@ var ThreadResumeResponse_default = {
 			"anyOf": [{ "$ref": "#/definitions/PermissionProfile" }, { "type": "null" }]
 		},
 		"reasoningEffort": { "anyOf": [{ "$ref": "#/definitions/ReasoningEffort" }, { "type": "null" }] },
+		"runtimeWorkspaceRoots": {
+			"description": "Thread-scoped runtime workspace roots used to materialize `:workspace_roots`.",
+			"default": [],
+			"type": "array",
+			"items": { "$ref": "#/definitions/AbsolutePathBuf" }
+		},
 		"sandbox": {
 			"description": "Legacy sandbox policy retained for compatibility. Experimental clients should prefer `permissionProfile` when they need exact runtime permissions.",
 			"allOf": [{ "$ref": "#/definitions/SandboxPolicy" }]
@@ -342,29 +348,9 @@ var ThreadResumeResponse_default = {
 				"id": {
 					"description": "Identifier from `default_permissions` or the implicit built-in default, such as `:workspace` or a user-defined `[permissions.<id>]` profile.",
 					"type": "string"
-				},
-				"modifications": {
-					"description": "Bounded user-requested modifications applied on top of the named profile, if any.",
-					"default": [],
-					"type": "array",
-					"items": { "$ref": "#/definitions/ActivePermissionProfileModification" }
 				}
 			}
 		},
-		"ActivePermissionProfileModification": { "oneOf": [{
-			"description": "Additional concrete directory that should be writable.",
-			"type": "object",
-			"required": ["path", "type"],
-			"properties": {
-				"path": { "$ref": "#/definitions/AbsolutePathBuf" },
-				"type": {
-					"type": "string",
-					"enum": ["additionalWritableRoot"],
-					"title": "AdditionalWritableRootActivePermissionProfileModificationType"
-				}
-			},
-			"title": "AdditionalWritableRootActivePermissionProfileModification"
-		}] },
 		"AgentPath": { "type": "string" },
 		"ApprovalsReviewer": {
 			"description": "Configures who approval requests are routed to for review. Examples include sandbox escapes, blocked network access, MCP approval prompts, and ARC escalations. Defaults to `user`. `auto_review` uses a carefully prompted subagent to gather relevant context and apply a risk-based decision framework before approving or denying the request. The legacy value `guardian_subagent` is accepted for compatibility.",
@@ -2035,6 +2021,12 @@ var ThreadStartResponse_default = {
 			"anyOf": [{ "$ref": "#/definitions/PermissionProfile" }, { "type": "null" }]
 		},
 		"reasoningEffort": { "anyOf": [{ "$ref": "#/definitions/ReasoningEffort" }, { "type": "null" }] },
+		"runtimeWorkspaceRoots": {
+			"description": "Thread-scoped runtime workspace roots used to materialize `:workspace_roots`.",
+			"default": [],
+			"type": "array",
+			"items": { "$ref": "#/definitions/AbsolutePathBuf" }
+		},
 		"sandbox": {
 			"description": "Legacy sandbox policy retained for compatibility. Experimental clients should prefer `permissionProfile` when they need exact runtime permissions.",
 			"allOf": [{ "$ref": "#/definitions/SandboxPolicy" }]
@@ -2059,29 +2051,9 @@ var ThreadStartResponse_default = {
 				"id": {
 					"description": "Identifier from `default_permissions` or the implicit built-in default, such as `:workspace` or a user-defined `[permissions.<id>]` profile.",
 					"type": "string"
-				},
-				"modifications": {
-					"description": "Bounded user-requested modifications applied on top of the named profile, if any.",
-					"default": [],
-					"type": "array",
-					"items": { "$ref": "#/definitions/ActivePermissionProfileModification" }
 				}
 			}
 		},
-		"ActivePermissionProfileModification": { "oneOf": [{
-			"description": "Additional concrete directory that should be writable.",
-			"type": "object",
-			"required": ["path", "type"],
-			"properties": {
-				"path": { "$ref": "#/definitions/AbsolutePathBuf" },
-				"type": {
-					"type": "string",
-					"enum": ["additionalWritableRoot"],
-					"title": "AdditionalWritableRootActivePermissionProfileModificationType"
-				}
-			},
-			"title": "AdditionalWritableRootActivePermissionProfileModification"
-		}] },
 		"AgentPath": { "type": "string" },
 		"ApprovalsReviewer": {
 			"description": "Configures who approval requests are routed to for review. Examples include sandbox escapes, blocked network access, MCP approval prompts, and ARC escalations. Defaults to `user`. `auto_review` uses a carefully prompted subagent to gather relevant context and apply a risk-based decision framework before approving or denying the request. The legacy value `guardian_subagent` is accepted for compatibility.",

package/dist/provider.js

@@ -1,5 +1,5 @@
 import { CODEX_APP_SERVER_AUTH_MARKER, CODEX_BASE_URL, CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS, buildCodexModelDefinition, buildCodexProviderConfig } from "./provider-catalog.js";
-import { o as readCodexPluginConfig, s as resolveCodexAppServerRuntimeOptions } from "./config-0rd3LnKg.js";
+import { c as resolveCodexAppServerRuntimeOptions, s as readCodexPluginConfig } from "./config-3ATInASk.js";
 import { resolveCodexSystemPromptContribution } from "./prompt-overlay.js";
 import { resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { createSubsystemLogger } from "openclaw/plugin-sdk/core";
@@ -123,7 +123,7 @@ async function listModelsBestEffort(params) {
 	}
 }
 async function listCodexAppServerModelsLazy(options) {
-	const { listCodexAppServerModels } = await import("./models-GCYf5s8J.js").then((n) => n.r);
+	const { listCodexAppServerModels } = await import("./models-BZLMz9WS.js").then((n) => n.r);
 	return listCodexAppServerModels(options);
 }
 function normalizeTimeoutMs(value) {

package/dist/{request-CKYiRqsN.js → request-Czoa60Nt.js}

@@ -1,6 +1,6 @@
-import { n as CodexAppServerRpcError } from "./client-CoctX13d.js";
-import { f as resolveCodexAppServerHomeDir, i as getSharedCodexAppServerClient, o as withTimeout, r as createIsolatedCodexAppServerClient } from "./shared-client-BwUqd3lh.js";
-import { i as buildCodexAppInventoryCacheKey } from "./plugin-activation-aQOmRQwA.js";
+import { n as CodexAppServerRpcError } from "./client-CA7amCZ8.js";
+import { f as resolveCodexAppServerHomeDir, i as getSharedCodexAppServerClient, o as withTimeout, r as createIsolatedCodexAppServerClient } from "./shared-client-CnbrvEfV.js";
+import { i as buildCodexAppInventoryCacheKey } from "./plugin-activation-BDU4e-NA.js";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/capabilities.ts
 const CODEX_CONTROL_METHODS = {