@openclaw/codex 2026.5.16-beta.2 → 2026.5.16-beta.3

package/dist/{command-handlers-D6UDzndR.js → command-handlers-C4F8BChC.js}

@@ -1,5 +1,5 @@
 import { a as isCodexFastServiceTier, c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-BHS-8DS_.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-BZLMz9WS.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-Czoa60Nt.js";
 import { a as formatComputerUseStatus, c as formatThreads, i as formatCodexStatus, l as readString$1, n as formatAccount, o as formatList, p as summarizeCodexAccountUsage, r as formatCodexDisplayText, s as formatModels, t as buildHelp } from "./command-formatters-BRW7_Nu7.js";

package/dist/harness.js

@@ -18,14 +18,14 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-B6gN6CrO.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-B3nk5oT1.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-CFcVH8fj.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-D3nH-Jk1.js");
 			return runCodexAppServerSideQuestion(params, { pluginConfig: options?.pluginConfig });
 		},
 		compact: async (params) => {

package/dist/index.js

@@ -38,7 +38,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-D6UDzndR.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-C4F8BChC.js");
 	return handleCodexSubcommand;
 }
 //#endregion

package/dist/media-understanding-provider.js

@@ -1,7 +1,7 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
 import { c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
-import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CSY0BFBo.js";
-import { i as readModelListResult } from "./models-BHS-8DS_.js";
+import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-BGBspNmF.js";
+import { i as readModelListResult } from "./models-BZLMz9WS.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 //#region extensions/codex/media-understanding-provider.ts

package/dist/{models-BHS-8DS_.js → models-BZLMz9WS.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
-import { s as readCodexModelListResponse } from "./protocol-validators-CSY0BFBo.js";
+import { s as readCodexModelListResponse } from "./protocol-validators-BGBspNmF.js";
 //#region extensions/codex/src/app-server/models.ts
 var models_exports = /* @__PURE__ */ __exportAll({
 	listAllCodexAppServerModels: () => listAllCodexAppServerModels,

package/dist/{protocol-validators-CSY0BFBo.js → protocol-validators-BGBspNmF.js}

@@ -318,6 +318,12 @@ var ThreadResumeResponse_default = {
 			"anyOf": [{ "$ref": "#/definitions/PermissionProfile" }, { "type": "null" }]
 		},
 		"reasoningEffort": { "anyOf": [{ "$ref": "#/definitions/ReasoningEffort" }, { "type": "null" }] },
+		"runtimeWorkspaceRoots": {
+			"description": "Thread-scoped runtime workspace roots used to materialize `:workspace_roots`.",
+			"default": [],
+			"type": "array",
+			"items": { "$ref": "#/definitions/AbsolutePathBuf" }
+		},
 		"sandbox": {
 			"description": "Legacy sandbox policy retained for compatibility. Experimental clients should prefer `permissionProfile` when they need exact runtime permissions.",
 			"allOf": [{ "$ref": "#/definitions/SandboxPolicy" }]
@@ -342,29 +348,9 @@ var ThreadResumeResponse_default = {
 				"id": {
 					"description": "Identifier from `default_permissions` or the implicit built-in default, such as `:workspace` or a user-defined `[permissions.<id>]` profile.",
 					"type": "string"
-				},
-				"modifications": {
-					"description": "Bounded user-requested modifications applied on top of the named profile, if any.",
-					"default": [],
-					"type": "array",
-					"items": { "$ref": "#/definitions/ActivePermissionProfileModification" }
 				}
 			}
 		},
-		"ActivePermissionProfileModification": { "oneOf": [{
-			"description": "Additional concrete directory that should be writable.",
-			"type": "object",
-			"required": ["path", "type"],
-			"properties": {
-				"path": { "$ref": "#/definitions/AbsolutePathBuf" },
-				"type": {
-					"type": "string",
-					"enum": ["additionalWritableRoot"],
-					"title": "AdditionalWritableRootActivePermissionProfileModificationType"
-				}
-			},
-			"title": "AdditionalWritableRootActivePermissionProfileModification"
-		}] },
 		"AgentPath": { "type": "string" },
 		"ApprovalsReviewer": {
 			"description": "Configures who approval requests are routed to for review. Examples include sandbox escapes, blocked network access, MCP approval prompts, and ARC escalations. Defaults to `user`. `auto_review` uses a carefully prompted subagent to gather relevant context and apply a risk-based decision framework before approving or denying the request. The legacy value `guardian_subagent` is accepted for compatibility.",
@@ -2035,6 +2021,12 @@ var ThreadStartResponse_default = {
 			"anyOf": [{ "$ref": "#/definitions/PermissionProfile" }, { "type": "null" }]
 		},
 		"reasoningEffort": { "anyOf": [{ "$ref": "#/definitions/ReasoningEffort" }, { "type": "null" }] },
+		"runtimeWorkspaceRoots": {
+			"description": "Thread-scoped runtime workspace roots used to materialize `:workspace_roots`.",
+			"default": [],
+			"type": "array",
+			"items": { "$ref": "#/definitions/AbsolutePathBuf" }
+		},
 		"sandbox": {
 			"description": "Legacy sandbox policy retained for compatibility. Experimental clients should prefer `permissionProfile` when they need exact runtime permissions.",
 			"allOf": [{ "$ref": "#/definitions/SandboxPolicy" }]
@@ -2059,29 +2051,9 @@ var ThreadStartResponse_default = {
 				"id": {
 					"description": "Identifier from `default_permissions` or the implicit built-in default, such as `:workspace` or a user-defined `[permissions.<id>]` profile.",
 					"type": "string"
-				},
-				"modifications": {
-					"description": "Bounded user-requested modifications applied on top of the named profile, if any.",
-					"default": [],
-					"type": "array",
-					"items": { "$ref": "#/definitions/ActivePermissionProfileModification" }
 				}
 			}
 		},
-		"ActivePermissionProfileModification": { "oneOf": [{
-			"description": "Additional concrete directory that should be writable.",
-			"type": "object",
-			"required": ["path", "type"],
-			"properties": {
-				"path": { "$ref": "#/definitions/AbsolutePathBuf" },
-				"type": {
-					"type": "string",
-					"enum": ["additionalWritableRoot"],
-					"title": "AdditionalWritableRootActivePermissionProfileModificationType"
-				}
-			},
-			"title": "AdditionalWritableRootActivePermissionProfileModification"
-		}] },
 		"AgentPath": { "type": "string" },
 		"ApprovalsReviewer": {
 			"description": "Configures who approval requests are routed to for review. Examples include sandbox escapes, blocked network access, MCP approval prompts, and ARC escalations. Defaults to `user`. `auto_review` uses a carefully prompted subagent to gather relevant context and apply a risk-based decision framework before approving or denying the request. The legacy value `guardian_subagent` is accepted for compatibility.",

package/dist/provider.js

@@ -123,7 +123,7 @@ async function listModelsBestEffort(params) {
 	}
 }
 async function listCodexAppServerModelsLazy(options) {
-	const { listCodexAppServerModels } = await import("./models-BHS-8DS_.js").then((n) => n.r);
+	const { listCodexAppServerModels } = await import("./models-BZLMz9WS.js").then((n) => n.r);
 	return listCodexAppServerModels(options);
 }
 function normalizeTimeoutMs(value) {

package/dist/{run-attempt-B6gN6CrO.js → run-attempt-B3nk5oT1.js}

@@ -1,5 +1,5 @@
 import { c as resolveCodexAppServerRuntimeOptions, d as withMcpElicitationsApprovalPolicy, i as isCodexAppServerApprovalPolicyAllowedByRequirements, s as readCodexPluginConfig, u as resolveCodexPluginsPolicy } from "./config-3ATInASk.js";
-import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse } from "./protocol-validators-CSY0BFBo.js";
+import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse } from "./protocol-validators-BGBspNmF.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { i as isCodexAppServerConnectionClosedError, r as isCodexAppServerApprovalRequest } from "./client-CA7amCZ8.js";
 import { n as buildCodexPluginAppCacheKey, r as CODEX_CONTROL_METHODS } from "./request-Czoa60Nt.js";
@@ -7,7 +7,7 @@ import { d as resolveCodexUsageLimitResetAtMs, f as shouldRefreshCodexRateLimits
 import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, l as resolveCodexAppServerAuthProfileId, n as clearSharedCodexAppServerClientIfCurrent, s as refreshCodexAppServerAuthTokens, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-CnbrvEfV.js";
 import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DbdVqMzW.js";
 import { a as defaultCodexAppInventoryCache } from "./plugin-activation-BDU4e-NA.js";
-import { S as normalizeCodexDynamicToolName, _ as projectContextEngineAssemblyForCodex, b as createCodexDynamicToolBridge, c as codexDynamicToolsFingerprint, f as startOrResumeThread, g as shouldBuildCodexPluginThreadConfig, h as mergeCodexThreadConfigs, i as buildDeveloperInstructions, l as isContextEngineBindingCompatible, m as buildCodexPluginThreadConfigInputFingerprint, p as buildCodexPluginThreadConfig, r as buildContextEngineBinding, s as buildTurnStartParams, t as areCodexDynamicToolFingerprintsCompatible, v as resolveCodexContextEngineProjectionMaxChars, x as filterCodexDynamicTools, y as resolveCodexContextEngineProjectionReserveTokens } from "./thread-lifecycle-BMK4m_PL.js";
+import { S as normalizeCodexDynamicToolName, _ as projectContextEngineAssemblyForCodex, b as createCodexDynamicToolBridge, c as codexDynamicToolsFingerprint, f as startOrResumeThread, g as shouldBuildCodexPluginThreadConfig, h as mergeCodexThreadConfigs, i as buildDeveloperInstructions, l as isContextEngineBindingCompatible, m as buildCodexPluginThreadConfigInputFingerprint, p as buildCodexPluginThreadConfig, r as buildContextEngineBinding, s as buildTurnStartParams, t as areCodexDynamicToolFingerprintsCompatible, v as resolveCodexContextEngineProjectionMaxChars, x as filterCodexDynamicTools, y as resolveCodexContextEngineProjectionReserveTokens } from "./thread-lifecycle-D2sxRPdz.js";
 import { t as defaultCodexAppServerClientFactory } from "./client-factory-DwzPofwS.js";
 import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-Cm_YicZb.js";
 import { t as ensureCodexComputerUse } from "./computer-use-BX02ojP4.js";
@@ -23,6 +23,26 @@ import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugi
 import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { createRunningTaskRun, finalizeTaskRunByRunId, recordTaskRunProgressByRunId } from "openclaw/plugin-sdk/codex-native-task-runtime";
 import { buildSessionContext, migrateSessionEntries, parseSessionEntries } from "@earendil-works/pi-coding-agent";
+//#region extensions/codex/src/app-server/local-runtime-attribution.ts
+const OPENAI_PROVIDER_ID = "openai";
+const OPENAI_RESPONSES_API = "openai-responses";
+const OPENAI_CODEX_PROVIDER_ID = "openai-codex";
+const OPENAI_CODEX_RESPONSES_API = "openai-codex-responses";
+function normalizeRuntimeId(value) {
+	return value?.trim().toLowerCase() ?? "";
+}
+function resolveCodexLocalRuntimeAttribution(params) {
+	const authProfileProvider = normalizeRuntimeId(params.runtimePlan?.auth?.authProfileProviderForAuth);
+	if (normalizeRuntimeId(params.runtimePlan?.observability.harnessId) === "codex" && authProfileProvider !== OPENAI_PROVIDER_ID && normalizeRuntimeId(params.model.provider) === OPENAI_PROVIDER_ID && normalizeRuntimeId(params.model.api) === OPENAI_RESPONSES_API) return {
+		provider: OPENAI_CODEX_PROVIDER_ID,
+		api: OPENAI_CODEX_RESPONSES_API
+	};
+	return {
+		provider: params.provider,
+		api: params.model.api
+	};
+}
+//#endregion
 //#region extensions/codex/src/app-server/native-subagent-task-mirror.ts
 const CODEX_NATIVE_SUBAGENT_RUNTIME = "subagent";
 const CODEX_NATIVE_SUBAGENT_TASK_KIND = "codex-native";
@@ -860,6 +880,7 @@ var CodexAppServerEventProjector = class {
 				data: {
 					phase: "end",
 					backend: "codex-app-server",
+					completed: true,
 					threadId: this.threadId,
 					turnId: this.turnId,
 					itemId
@@ -1017,8 +1038,14 @@ var CodexAppServerEventProjector = class {
 		const text = extractRawAssistantText(item);
 		if (!text) return;
 		const itemId = readString$2(item, "id") ?? `raw-assistant-${this.assistantItemOrder.length + 1}`;
+		const phase = readString$2(item, "phase");
+		if (phase) this.assistantPhaseByItem.set(itemId, phase);
 		this.rememberAssistantItem(itemId);
 		this.assistantTextByItem.set(itemId, text);
+		if (phase === "commentary") this.emitCommentaryProgress({
+			itemId,
+			text
+		});
 	}
 	recordNativeGeneratedMedia(item) {
 		if (item?.type !== "imageGeneration") return;
@@ -1327,6 +1354,7 @@ var CodexAppServerEventProjector = class {
 		return await readCodexMirroredSessionHistoryMessages(this.params.sessionFile) ?? [];
 	}
 	createAssistantMessage(text) {
+		const attribution = resolveCodexLocalRuntimeAttribution(this.params);
 		const usage = this.tokenUsage ? {
 			input: this.tokenUsage.input ?? 0,
 			output: this.tokenUsage.output ?? 0,
@@ -1341,8 +1369,8 @@ var CodexAppServerEventProjector = class {
 				type: "text",
 				text
 			}],
-			api: this.params.model.api ?? "openai-codex-responses",
-			provider: this.params.provider,
+			api: attribution.api ?? "openai-codex-responses",
+			provider: attribution.provider,
 			model: this.params.modelId,
 			usage,
 			stopReason: this.aborted ? "aborted" : this.promptError ? "error" : "stop",
@@ -1351,14 +1379,15 @@ var CodexAppServerEventProjector = class {
 		};
 	}
 	createAssistantMirrorMessage(title, text) {
+		const attribution = resolveCodexLocalRuntimeAttribution(this.params);
 		return {
 			role: "assistant",
 			content: [{
 				type: "text",
 				text: `${title}:\n${text}`
 			}],
-			api: this.params.model.api ?? "openai-codex-responses",
-			provider: this.params.provider,
+			api: attribution.api ?? "openai-codex-responses",
+			provider: attribution.provider,
 			model: this.params.modelId,
 			usage: ZERO_USAGE,
 			stopReason: "stop",
@@ -1367,6 +1396,7 @@ var CodexAppServerEventProjector = class {
 	}
 	createToolCallMessage(params) {
 		const args = normalizeToolTranscriptArguments(params.arguments);
+		const attribution = resolveCodexLocalRuntimeAttribution(this.params);
 		return {
 			role: "assistant",
 			content: [{
@@ -1376,8 +1406,8 @@ var CodexAppServerEventProjector = class {
 				arguments: args,
 				input: args
 			}],
-			api: this.params.model.api ?? "openai-codex-responses",
-			provider: this.params.provider,
+			api: attribution.api ?? "openai-codex-responses",
+			provider: attribution.provider,
 			model: this.params.modelId,
 			usage: ZERO_USAGE,
 			stopReason: "toolUse",
@@ -1882,6 +1912,7 @@ function createCodexTrajectoryRecorder(params) {
 	});
 	let queue = Promise.resolve();
 	let seq = 0;
+	const attribution = resolveCodexLocalRuntimeAttribution(params.attempt);
 	return {
 		filePath,
 		recordEvent: (type, data) => {
@@ -1898,9 +1929,9 @@ function createCodexTrajectoryRecorder(params) {
 				sessionKey: params.attempt.sessionKey,
 				runId: params.attempt.runId,
 				workspaceDir: params.cwd,
-				provider: params.attempt.provider,
+				provider: attribution.provider,
 				modelId: params.attempt.modelId,
-				modelApi: params.attempt.model.api,
+				modelApi: attribution.api,
 				data: data ? sanitizeValue(data) : void 0
 			});
 			if (!line) return;
@@ -2186,6 +2217,7 @@ const CODEX_TURN_ASSISTANT_COMPLETION_IDLE_TIMEOUT_MS = 1e4;
 const CODEX_TURN_TERMINAL_IDLE_TIMEOUT_MS = 30 * 6e4;
 const CODEX_NATIVE_HOOK_RELAY_MIN_TTL_MS = 30 * 6e4;
 const CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS = 5 * 6e4;
+const CODEX_NATIVE_HOOK_RELAY_RENEW_INTERVAL_MS = 6e4;
 const CODEX_STEER_ALL_DEBOUNCE_MS = 500;
 const LOG_FIELD_MAX_LENGTH = 160;
 const CODEX_NATIVE_PROJECT_DOC_BASENAMES = new Set(["agents.md"]);
@@ -2814,14 +2846,22 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	let turnAssistantCompletionIdleWatchArmed = false;
 	let turnAssistantCompletionLastActivityAt = Date.now();
 	let turnAssistantCompletionLastActivityDetails;
+	const turnAttemptIdleTimeoutMs = Math.max(100, Math.floor(params.timeoutMs));
+	let turnAttemptIdleTimer;
+	let turnAttemptIdleWatchArmed = false;
 	let turnTerminalIdleTimer;
 	let turnTerminalIdleWatchArmed = false;
 	let turnCompletionLastActivityAt = Date.now();
 	let turnCompletionLastActivityReason = "startup";
 	let turnCompletionLastActivityDetails;
+	let turnAttemptLastProgressAt = Date.now();
+	let turnAttemptLastProgressReason = "startup";
+	let turnAttemptLastProgressDetails;
+	let nativeHookRelayLastRenewedAt = 0;
 	let activeAppServerTurnRequests = 0;
 	const activeOpenClawDynamicToolCallIds = /* @__PURE__ */ new Set();
 	const activeTurnItemIds = /* @__PURE__ */ new Set();
+	let turnCrossedToolHandoff = false;
 	const clearTurnCompletionIdleTimer = () => {
 		if (turnCompletionIdleTimer) {
 			clearTimeout(turnCompletionIdleTimer);
@@ -2840,6 +2880,12 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			turnAssistantCompletionIdleTimer = void 0;
 		}
 	};
+	const clearTurnAttemptIdleTimer = () => {
+		if (turnAttemptIdleTimer) {
+			clearTimeout(turnAttemptIdleTimer);
+			turnAttemptIdleTimer = void 0;
+		}
+	};
 	const fireTurnAssistantCompletionIdleRelease = () => {
 		if (completed || runAbortController.signal.aborted || !turnAssistantCompletionIdleWatchArmed) return;
 		if (activeAppServerTurnRequests > 0 || activeTurnItemIds.size > 0) {
@@ -2876,6 +2922,35 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		completed = true;
 		resolveCompletion?.();
 	};
+	const fireTurnAttemptIdleTimeout = () => {
+		if (completed || runAbortController.signal.aborted || !turnAttemptIdleWatchArmed) return;
+		const idleMs = Math.max(0, Date.now() - turnAttemptLastProgressAt);
+		if (idleMs < turnAttemptIdleTimeoutMs) {
+			scheduleTurnAttemptIdleWatch();
+			return;
+		}
+		timedOut = true;
+		turnCompletionIdleTimedOut = true;
+		turnCompletionIdleTimeoutMessage = "codex app-server turn idle timed out waiting for turn/completed";
+		projector?.markTimedOut();
+		trajectoryRecorder?.recordEvent("turn.progress_idle_timeout", {
+			threadId: thread.threadId,
+			turnId,
+			idleMs,
+			timeoutMs: turnAttemptIdleTimeoutMs,
+			lastActivityReason: turnAttemptLastProgressReason,
+			...turnAttemptLastProgressDetails
+		});
+		embeddedAgentLog.warn("codex app-server turn idle timed out waiting for progress", {
+			threadId: thread.threadId,
+			turnId,
+			idleMs,
+			timeoutMs: turnAttemptIdleTimeoutMs,
+			lastActivityReason: turnAttemptLastProgressReason,
+			...turnAttemptLastProgressDetails
+		});
+		runAbortController.abort("turn_progress_idle_timeout");
+	};
 	const fireTurnCompletionIdleTimeout = () => {
 		if (completed || runAbortController.signal.aborted || !turnCompletionIdleWatchArmed || activeAppServerTurnRequests > 0) return;
 		const idleMs = Math.max(0, Date.now() - turnCompletionLastActivityAt);
@@ -2950,6 +3025,14 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		turnAssistantCompletionIdleTimer = setTimeout(fireTurnAssistantCompletionIdleRelease, delayMs);
 		turnAssistantCompletionIdleTimer.unref?.();
 	}
+	function scheduleTurnAttemptIdleWatch() {
+		clearTurnAttemptIdleTimer();
+		if (completed || runAbortController.signal.aborted || !turnAttemptIdleWatchArmed) return;
+		const elapsedMs = Math.max(0, Date.now() - turnAttemptLastProgressAt);
+		const delayMs = Math.max(1, turnAttemptIdleTimeoutMs - elapsedMs);
+		turnAttemptIdleTimer = setTimeout(fireTurnAttemptIdleTimeout, delayMs);
+		turnAttemptIdleTimer.unref?.();
+	}
 	function scheduleTurnTerminalIdleWatch() {
 		clearTurnTerminalIdleTimer();
 		if (completed || runAbortController.signal.aborted || !turnTerminalIdleWatchArmed || activeAppServerTurnRequests > 0) return;
@@ -2958,10 +3041,41 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		turnTerminalIdleTimer = setTimeout(fireTurnTerminalIdleTimeout, delayMs);
 		turnTerminalIdleTimer.unref?.();
 	}
+	function scheduleTurnProgressWatches() {
+		scheduleTurnAttemptIdleWatch();
+		scheduleTurnCompletionIdleWatch();
+		scheduleTurnTerminalIdleWatch();
+	}
+	const renewNativeHookRelayForTurnProgress = () => {
+		if (!nativeHookRelay || options.nativeHookRelay?.ttlMs !== void 0) return;
+		const now = Date.now();
+		const renewsRecently = now - nativeHookRelayLastRenewedAt < CODEX_NATIVE_HOOK_RELAY_RENEW_INTERVAL_MS;
+		const expiresSoon = now >= nativeHookRelay.expiresAtMs - CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS;
+		if (renewsRecently && !expiresSoon) return;
+		nativeHookRelayLastRenewedAt = now;
+		nativeHookRelay.renew(resolveCodexNativeHookRelayTtlMs({
+			explicitTtlMs: void 0,
+			attemptTimeoutMs: turnAttemptIdleTimeoutMs,
+			startupTimeoutMs,
+			turnStartTimeoutMs: params.timeoutMs
+		}));
+	};
 	const touchTurnCompletionActivity = (reason, options) => {
 		turnCompletionLastActivityAt = Date.now();
 		turnCompletionLastActivityReason = reason;
 		turnCompletionLastActivityDetails = options?.details;
+		if (options?.attemptProgress) {
+			turnAttemptLastProgressAt = turnCompletionLastActivityAt;
+			turnAttemptLastProgressReason = reason;
+			turnAttemptLastProgressDetails = options.details;
+			renewNativeHookRelayForTurnProgress();
+			params.onRunProgress?.({
+				reason,
+				provider: params.provider,
+				model: params.modelId,
+				backend: "codex-app-server"
+			});
+		}
 		emitTrustedDiagnosticEvent({
 			type: "run.progress",
 			runId: params.runId,
@@ -2973,8 +3087,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			turnCompletionIdleWatchArmed = true;
 			turnCompletionIdleWatchPinnedByTerminalError = false;
 		}
-		scheduleTurnCompletionIdleWatch();
-		scheduleTurnTerminalIdleWatch();
+		scheduleTurnProgressWatches();
 	};
 	const disarmTurnCompletionIdleWatch = () => {
 		turnCompletionIdleWatchArmed = false;
@@ -3058,20 +3171,25 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		const isCurrentTurnNotification = isTurnNotification(notification.params, thread.threadId, turnId);
 		const isTurnCompletion = notification.method === "turn/completed" && isCurrentTurnNotification;
 		if (isCurrentTurnNotification) {
-			touchTurnCompletionActivity(`notification:${notification.method}`, { details: describeNotificationActivity(notification) });
+			touchTurnCompletionActivity(`notification:${notification.method}`, {
+				details: describeNotificationActivity(notification),
+				attemptProgress: true
+			});
 			reportCodexExecutionNotification(notification);
 		}
 		if (isCurrentTurnNotification) updateActiveTurnItemIds(notification, activeTurnItemIds);
 		const unblockedAssistantCompletionRelease = isCurrentTurnNotification && turnAssistantCompletionIdleWatchArmed && notification.method === "item/completed" && activeTurnItemIds.size === 0;
 		const trackedDynamicToolCompletion = isTrackedOpenClawDynamicToolCompletionNotification(notification, activeOpenClawDynamicToolCallIds);
 		const rawToolOutputCompletion = isRawToolOutputCompletionNotification(notification);
-		const shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem = isCurrentTurnNotification && notification.method === "item/completed" && activeTurnItemIds.size === 0 && !trackedDynamicToolCompletion && !isCompletedAssistantNotification(notification);
+		if (isCurrentTurnNotification && (rawToolOutputCompletion || isNativeToolProgressNotification(notification))) turnCrossedToolHandoff = true;
+		const assistantCompletionCanRelease = isAssistantCompletionReleaseNotification(notification, turnCrossedToolHandoff);
+		const shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem = isCurrentTurnNotification && notification.method === "item/completed" && activeTurnItemIds.size === 0 && !trackedDynamicToolCompletion && !assistantCompletionCanRelease;
 		if (isCurrentTurnNotification && notification.method === "error") {
 			if (isRetryableErrorNotification(notification.params)) disarmTurnCompletionIdleWatch();
 			else armTurnCompletionIdleWatch({ pinnedByTerminalError: true });
 			disarmTurnAssistantCompletionIdleWatch();
 		} else if (isTurnCompletion) disarmTurnAssistantCompletionIdleWatch();
-		else if (isCurrentTurnNotification && isCompletedAssistantNotification(notification)) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
+		else if (isCurrentTurnNotification && assistantCompletionCanRelease) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
 		else if (unblockedAssistantCompletionRelease) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
 		else if (shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem) armTurnCompletionIdleWatch();
 		else if (isCurrentTurnNotification && rawToolOutputCompletion) armTurnCompletionIdleWatch();
@@ -3110,11 +3228,15 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	};
 	const notificationCleanup = client.addNotificationHandler(enqueueNotification);
 	const requestCleanup = client.addRequestHandler(async (request) => {
-		activeAppServerTurnRequests += 1;
-		clearTurnCompletionIdleTimer();
-		disarmTurnAssistantCompletionIdleWatch();
-		touchTurnCompletionActivity(`request:${request.method}`);
 		let armCompletionWatchOnResponse = false;
+		let requestCountsAsTurnActivity = false;
+		const markCurrentTurnRequestProgress = () => {
+			activeAppServerTurnRequests += 1;
+			clearTurnCompletionIdleTimer();
+			disarmTurnAssistantCompletionIdleWatch();
+			requestCountsAsTurnActivity = true;
+			touchTurnCompletionActivity(`request:${request.method}:start`, { attemptProgress: true });
+		};
 		try {
 			if (request.method === "account/chatgptAuthTokens/refresh") return refreshCodexAppServerAuthTokens({
 				agentDir,
@@ -3123,7 +3245,10 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			});
 			if (!turnId) return;
 			if (request.method === "mcpServer/elicitation/request") {
-				armCompletionWatchOnResponse = true;
+				if (isCurrentThreadOptionalTurnRequestParams(request.params, thread.threadId, turnId)) {
+					armCompletionWatchOnResponse = true;
+					markCurrentTurnRequestProgress();
+				}
 				return handleCodexAppServerElicitationRequest({
 					requestParams: request.params,
 					paramsForRun: params,
@@ -3134,7 +3259,10 @@ async function runCodexAppServerAttempt(params, options = {}) {
 				});
 			}
 			if (request.method === "item/tool/requestUserInput") {
-				armCompletionWatchOnResponse = true;
+				if (isCurrentThreadTurnRequestParams(request.params, thread.threadId, turnId)) {
+					armCompletionWatchOnResponse = true;
+					markCurrentTurnRequestProgress();
+				}
 				return userInputBridge?.handleRequest({
 					id: request.id,
 					params: request.params
@@ -3142,7 +3270,10 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			}
 			if (request.method !== "item/tool/call") {
 				if (isCodexAppServerApprovalRequest(request.method)) {
-					armCompletionWatchOnResponse = true;
+					if (isCurrentApprovalTurnRequestParams(request.params, thread.threadId, turnId)) {
+						armCompletionWatchOnResponse = true;
+						markCurrentTurnRequestProgress();
+					}
 					return handleApprovalRequest({
 						method: request.method,
 						params: request.params,
@@ -3157,6 +3288,8 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			const call = readDynamicToolCallParams(request.params);
 			if (!call || call.threadId !== thread.threadId || call.turnId !== turnId) return;
 			armCompletionWatchOnResponse = true;
+			markCurrentTurnRequestProgress();
+			turnCrossedToolHandoff = true;
 			activeOpenClawDynamicToolCallIds.add(call.callId);
 			trajectoryRecorder?.recordEvent("tool.call", {
 				threadId: call.threadId,
@@ -3233,8 +3366,13 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			});
 			return response;
 		} finally {
-			activeAppServerTurnRequests = Math.max(0, activeAppServerTurnRequests - 1);
-			touchTurnCompletionActivity(`request:${request.method}:response`, { arm: armCompletionWatchOnResponse });
+			if (requestCountsAsTurnActivity) {
+				activeAppServerTurnRequests = Math.max(0, activeAppServerTurnRequests - 1);
+				touchTurnCompletionActivity(`request:${request.method}:response`, {
+					arm: armCompletionWatchOnResponse,
+					attemptProgress: true
+				});
+			} else scheduleTurnProgressWatches();
 		}
 	});
 	const forceContextEngineCompactionForCodexOverflow = async (error) => {
@@ -3495,11 +3633,9 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		abort: () => runAbortController.abort("aborted")
 	};
 	setActiveEmbeddedRun(params.sessionId, handle, params.sessionKey);
-	const timeout = setTimeout(() => {
-		timedOut = true;
-		projector?.markTimedOut();
-		runAbortController.abort("timeout");
-	}, Math.max(100, params.timeoutMs));
+	turnAttemptIdleWatchArmed = true;
+	turnTerminalIdleWatchArmed = true;
+	touchTurnCompletionActivity("turn:start", { attemptProgress: true });
 	const abortListener = () => {
 		const shouldRetireClient = timedOut;
 		interruptCodexTurnBestEffort(client, {
@@ -3655,7 +3791,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		});
 		if (!timedOut && !runAbortController.signal.aborted) await steeringQueue?.flushPending();
 		userInputBridge?.cancelPending();
-		clearTimeout(timeout);
+		clearTurnAttemptIdleTimer();
 		clearTurnCompletionIdleTimer();
 		clearTurnAssistantCompletionIdleTimer();
 		clearTurnTerminalIdleTimer();
@@ -4217,6 +4353,10 @@ function isCompletedAssistantNotification(notification) {
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return Boolean(item && readString(item, "type") === "agentMessage" && readString(item, "phase") !== "commentary");
 }
+function isAssistantCompletionReleaseNotification(notification, turnCrossedToolHandoff) {
+	if (isCompletedAssistantNotification(notification)) return true;
+	return !turnCrossedToolHandoff && isRawAssistantCompletionNotification(notification);
+}
 function shouldDisarmAssistantCompletionIdleWatch(notification) {
 	if (!isJsonObject(notification.params)) return false;
 	if (notification.method === "item/started") return true;
@@ -4241,6 +4381,23 @@ function isRawToolOutputCompletionNotification(notification) {
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return item ? readString(item, "type") === "custom_tool_call_output" : false;
 }
+function isNativeToolProgressNotification(notification) {
+	if (notification.method !== "item/started" && notification.method !== "item/completed" && notification.method !== "item/updated") return false;
+	if (!isJsonObject(notification.params)) return false;
+	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
+	switch (item ? readString(item, "type") : void 0) {
+		case "commandExecution":
+		case "fileChange":
+		case "mcpToolCall":
+		case "webSearch": return true;
+		default: return false;
+	}
+}
+function isRawAssistantCompletionNotification(notification) {
+	if (notification.method !== "rawResponseItem/completed" || !isJsonObject(notification.params)) return false;
+	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
+	return Boolean(item && readString(item, "type") === "message" && readString(item, "role") === "assistant" && readString(item, "phase") !== "commentary" && readRawAssistantTextPreview(item));
+}
 function readRawAssistantTextPreview(item) {
 	if (readString(item, "role") !== "assistant" || !Array.isArray(item.content)) return;
 	const text = item.content.flatMap((content) => {
@@ -4255,6 +4412,19 @@ function isTurnNotification(value, threadId, turnId) {
 	if (!isJsonObject(value)) return false;
 	return readString(value, "threadId") === threadId && readNotificationTurnId(value) === turnId;
 }
+function isCurrentThreadTurnRequestParams(value, threadId, turnId) {
+	if (!isJsonObject(value)) return false;
+	return readString(value, "threadId") === threadId && readString(value, "turnId") === turnId;
+}
+function isCurrentApprovalTurnRequestParams(value, threadId, turnId) {
+	if (!isJsonObject(value)) return false;
+	return (readString(value, "threadId") ?? readString(value, "conversationId")) === threadId && readString(value, "turnId") === turnId;
+}
+function isCurrentThreadOptionalTurnRequestParams(value, threadId, turnId) {
+	if (!isJsonObject(value) || readString(value, "threadId") !== threadId) return false;
+	const requestTurnId = value.turnId;
+	return requestTurnId === null || requestTurnId === void 0 || requestTurnId === turnId;
+}
 function isRetryableErrorNotification(value) {
 	if (!isJsonObject(value)) return false;
 	return readBoolean(value, "willRetry") === true || readBoolean(value, "will_retry") === true;

package/dist/{side-question-CFcVH8fj.js → side-question-D3nH-Jk1.js}

@@ -1,11 +1,11 @@
 import { c as resolveCodexAppServerRuntimeOptions, s as readCodexPluginConfig } from "./config-3ATInASk.js";
-import { a as readCodexDynamicToolCallParams, i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, t as assertCodexThreadForkResponse } from "./protocol-validators-CSY0BFBo.js";
+import { a as readCodexDynamicToolCallParams, i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, t as assertCodexThreadForkResponse } from "./protocol-validators-BGBspNmF.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { r as isCodexAppServerApprovalRequest } from "./client-CA7amCZ8.js";
 import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-BRW7_Nu7.js";
 import { i as getSharedCodexAppServerClient, s as refreshCodexAppServerAuthTokens } from "./shared-client-CnbrvEfV.js";
 import { i as readCodexAppServerBinding } from "./session-binding-DbdVqMzW.js";
-import { b as createCodexDynamicToolBridge, d as resolveReasoningEffort, n as buildCodexRuntimeThreadConfig, u as resolveCodexAppServerModelProvider, x as filterCodexDynamicTools } from "./thread-lifecycle-BMK4m_PL.js";
+import { b as createCodexDynamicToolBridge, d as resolveReasoningEffort, n as buildCodexRuntimeThreadConfig, u as resolveCodexAppServerModelProvider, x as filterCodexDynamicTools } from "./thread-lifecycle-D2sxRPdz.js";
 import { n as handleCodexAppServerElicitationRequest, r as handleCodexAppServerApprovalRequest, t as filterToolsForVisionInputs } from "./vision-tools-Cm_YicZb.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import { embeddedAgentLog, formatErrorMessage, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/test-api.js

@@ -1,5 +1,5 @@
 import { c as resolveCodexAppServerRuntimeOptions } from "./config-3ATInASk.js";
-import { a as buildThreadResumeParams, b as createCodexDynamicToolBridge, i as buildDeveloperInstructions, o as buildThreadStartParams, s as buildTurnStartParams, x as filterCodexDynamicTools } from "./thread-lifecycle-BMK4m_PL.js";
+import { a as buildThreadResumeParams, b as createCodexDynamicToolBridge, i as buildDeveloperInstructions, o as buildThreadStartParams, s as buildTurnStartParams, x as filterCodexDynamicTools } from "./thread-lifecycle-D2sxRPdz.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-BMK4m_PL.js → thread-lifecycle-D2sxRPdz.js}

@@ -1,5 +1,5 @@
 import { r as codexSandboxPolicyForTurn, u as resolveCodexPluginsPolicy } from "./config-3ATInASk.js";
-import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-CSY0BFBo.js";
+import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-BGBspNmF.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY, renderCodexPromptOverlay } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
@@ -19,10 +19,10 @@ const CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES = [
 	"exec",
 	"process",
 	"update_plan",
-	"tool_search_code",
-	"tool_search",
+	"tool_call",
 	"tool_describe",
-	"tool_call"
+	"tool_search",
+	"tool_search_code"
 ];
 const DYNAMIC_TOOL_NAME_ALIASES = {
 	bash: "exec",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.16-beta.2",
+  "version": "2026.5.16-beta.3",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.16-beta.2"
+      "pluginApi": ">=2026.5.16-beta.3"
     },
     "build": {
-      "openclawVersion": "2026.5.16-beta.2"
+      "openclawVersion": "2026.5.16-beta.3"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.16-beta.2"
+    "openclaw": ">=2026.5.16-beta.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {