@openclaw/codex 2026.5.16-beta.6 → 2026.5.18-beta.1

package/dist/harness.js

@@ -18,14 +18,14 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-D6sdcUE0.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DyLQRA61.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-BzVnOoBU.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-CfRPUq5X.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.pluginConfig,
 				nativeHookRelay: { enabled: true }

package/dist/{run-attempt-D6sdcUE0.js → run-attempt-DyLQRA61.js}

@@ -7,7 +7,7 @@ import { d as resolveCodexUsageLimitResetAtMs, f as shouldRefreshCodexRateLimits
 import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, f as resolveCodexAppServerHomeDir, l as resolveCodexAppServerAuthProfileId, s as refreshCodexAppServerAuthTokens, t as clearSharedCodexAppServerClientIfCurrent, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-DlvmoLBJ.js";
 import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DqApZIgD.js";
 import { a as defaultCodexAppInventoryCache } from "./plugin-activation-B49xb7pI.js";
-import { C as isForcedPrivateQaCodexRuntime, S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, _ as projectContextEngineAssemblyForCodex, b as createCodexDynamicToolBridge, c as codexDynamicToolsFingerprint, f as startOrResumeThread, g as shouldBuildCodexPluginThreadConfig, h as mergeCodexThreadConfigs, i as buildDeveloperInstructions, l as isContextEngineBindingCompatible, m as buildCodexPluginThreadConfigInputFingerprint, p as buildCodexPluginThreadConfig, r as buildContextEngineBinding, s as buildTurnStartParams, t as areCodexDynamicToolFingerprintsCompatible, v as resolveCodexContextEngineProjectionMaxChars, w as normalizeCodexDynamicToolName, x as sanitizeCodexHistoryImagePayloads, y as resolveCodexContextEngineProjectionReserveTokens } from "./thread-lifecycle-Cc_ljZLZ.js";
+import { C as isForcedPrivateQaCodexRuntime, S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, _ as projectContextEngineAssemblyForCodex, b as createCodexDynamicToolBridge, c as codexDynamicToolsFingerprint, f as startOrResumeThread, g as shouldBuildCodexPluginThreadConfig, h as mergeCodexThreadConfigs, i as buildDeveloperInstructions, l as isContextEngineBindingCompatible, m as buildCodexPluginThreadConfigInputFingerprint, p as buildCodexPluginThreadConfig, r as buildContextEngineBinding, s as buildTurnStartParams, t as areCodexDynamicToolFingerprintsCompatible, v as resolveCodexContextEngineProjectionMaxChars, w as normalizeCodexDynamicToolName, x as sanitizeCodexHistoryImagePayloads, y as resolveCodexContextEngineProjectionReserveTokens } from "./thread-lifecycle-5SBrtWFl.js";
 import { t as defaultCodexAppServerClientFactory } from "./client-factory-9L6Ie1dC.js";
 import { a as handleCodexAppServerElicitationRequest, i as buildCodexNativeHookRelayDisabledConfig, n as CODEX_NATIVE_HOOK_RELAY_EVENTS, o as handleCodexAppServerApprovalRequest, r as buildCodexNativeHookRelayConfig, t as filterToolsForVisionInputs } from "./vision-tools-BX9YuTEK.js";
 import { t as ensureCodexComputerUse } from "./computer-use-UJ3dxrXF.js";
@@ -21,7 +21,7 @@ import { markAuthProfileBlockedUntil, resolveAgentDir as resolveAgentDir$1 } fro
 import { appendRegularFile, pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
 import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
-import { createRunningTaskRun, finalizeTaskRunByRunId, recordTaskRunProgressByRunId } from "openclaw/plugin-sdk/codex-native-task-runtime";
+import { CODEX_NATIVE_SUBAGENT_RUNTIME, CODEX_NATIVE_SUBAGENT_RUN_ID_PREFIX, CODEX_NATIVE_SUBAGENT_TASK_KIND, createRunningTaskRun, finalizeTaskRunByRunId, recordTaskRunProgressByRunId } from "openclaw/plugin-sdk/codex-native-task-runtime";
 import { buildSessionContext, migrateSessionEntries, parseSessionEntries } from "@earendil-works/pi-coding-agent";
 //#region extensions/codex/src/app-server/local-runtime-attribution.ts
 const OPENAI_PROVIDER_ID = "openai";
@@ -44,8 +44,6 @@ function resolveCodexLocalRuntimeAttribution(params) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/native-subagent-task-mirror.ts
-const CODEX_NATIVE_SUBAGENT_RUNTIME = "subagent";
-const CODEX_NATIVE_SUBAGENT_TASK_KIND = "codex-native";
 const defaultRuntime = {
 	createRunningTaskRun,
 	recordTaskRunProgressByRunId,
@@ -239,7 +237,7 @@ var CodexNativeSubagentTaskMirror = class {
 	}
 };
 function codexNativeSubagentRunId(threadId) {
-	return `codex-thread:${threadId.trim()}`;
+	return `${CODEX_NATIVE_SUBAGENT_RUN_ID_PREFIX}${threadId.trim()}`;
 }
 function readSubagentThreadSpawnSource(source, parentThreadId) {
 	if (!source || typeof source !== "object" || !("subAgent" in source)) return;
@@ -700,6 +698,7 @@ var CodexAppServerEventProjector = class {
 			assistantTexts,
 			toolMetas: [...this.toolMetas.values()],
 			lastAssistant,
+			...this.lastNativeToolError ? { lastToolError: this.lastNativeToolError } : {},
 			didSendViaMessagingTool: toolTelemetry.didSendViaMessagingTool,
 			messagingToolSentTexts: toolTelemetry.messagingToolSentTexts,
 			messagingToolSentMediaUrls: toolTelemetry.messagingToolSentMediaUrls,
@@ -1175,6 +1174,7 @@ var CodexAppServerEventProjector = class {
 		if (!name) return;
 		const status = params.phase === "result" ? itemStatus(item) : "running";
 		const args = itemToolArgs(item);
+		const meta = itemMeta(item, this.toolProgressDetailMode());
 		this.recordToolTrajectoryEvent({
 			phase: params.phase,
 			item,
@@ -1188,11 +1188,16 @@ var CodexAppServerEventProjector = class {
 			name,
 			status
 		});
+		if (params.phase === "result") this.recordNativeToolError({
+			item,
+			name,
+			meta,
+			status
+		});
 		if (!shouldEmitTranscriptToolProgress(name, args)) {
 			if (params.phase === "result") this.emitAfterToolCallObservation(item);
 			return;
 		}
-		const meta = itemMeta(item, this.toolProgressDetailMode());
 		this.emitAgentEvent({
 			stream: "tool",
 			data: {
@@ -1211,6 +1216,27 @@ var CodexAppServerEventProjector = class {
 		});
 		if (params.phase === "result") this.emitAfterToolCallObservation(item);
 	}
+	recordNativeToolError(params) {
+		if (!isNonSuccessItemStatus(params.status)) {
+			if (!this.lastNativeToolError) return;
+			if (!this.lastNativeToolError.mutatingAction) {
+				this.lastNativeToolError = void 0;
+				return;
+			}
+			const actionFingerprint = nativeToolActionFingerprint(params.item);
+			if (this.lastNativeToolError.actionFingerprint && actionFingerprint && this.lastNativeToolError.actionFingerprint === actionFingerprint) this.lastNativeToolError = void 0;
+			return;
+		}
+		const error = itemToolError(params.item, params.status, this.toolResultOutputTextByItem);
+		const actionFingerprint = nativeToolActionFingerprint(params.item);
+		this.lastNativeToolError = {
+			toolName: params.name,
+			...params.meta ? { meta: params.meta } : {},
+			...error ? { error } : {},
+			...isMutatingNativeToolItem(params.item) ? { mutatingAction: true } : {},
+			...actionFingerprint ? { actionFingerprint } : {}
+		};
+	}
 	recordToolTrajectoryEvent(params) {
 		if (params.phase === "start") {
 			this.options.trajectoryRecorder?.recordEvent("tool.call", {
@@ -1728,6 +1754,20 @@ function shouldSynthesizeToolProgressForItem(item) {
 		default: return false;
 	}
 }
+function isMutatingNativeToolItem(item) {
+	return item.type === "commandExecution" || item.type === "fileChange";
+}
+function nativeToolActionFingerprint(item) {
+	if (item.type === "commandExecution" && typeof item.command === "string") return JSON.stringify({
+		type: item.type,
+		command: item.command,
+		cwd: typeof item.cwd === "string" ? item.cwd : ""
+	});
+	if (item.type === "fileChange") return JSON.stringify({
+		type: item.type,
+		changes: itemFileChanges(item)
+	});
+}
 function isNativePostToolUseRelayItem(item) {
 	switch (item.type) {
 		case "commandExecution":
@@ -2442,13 +2482,21 @@ function toCodexTextInput(text) {
 		text_elements: []
 	};
 }
-function restrictCodexAppServerSandboxForOpenClawSandbox(appServer, sandbox) {
-	if (!sandbox?.enabled || appServer.sandbox !== "danger-full-access") return appServer;
+function resolveCodexAppServerSandboxPolicyForOpenClawSandbox(appServer, sandbox, cwd) {
+	if (!sandbox?.enabled || appServer.sandbox === "read-only") return;
+	const networkAccess = codexNetworkAccessForOpenClawSandbox(sandbox);
 	return {
-		...appServer,
-		sandbox: "workspace-write"
+		type: "workspaceWrite",
+		writableRoots: [cwd],
+		networkAccess,
+		excludeTmpdirEnvVar: false,
+		excludeSlashTmp: false
 	};
 }
+function codexNetworkAccessForOpenClawSandbox(sandbox) {
+	if (!sandbox?.enabled || sandbox.backendId !== "docker") return true;
+	return sandbox.docker.network.trim().toLowerCase() !== "none";
+}
 function resolveCodexAppServerForOpenClawToolPolicy(params) {
 	if (!params.shouldPromote || !params.canUseUntrustedApprovalPolicy || params.appServer.approvalPolicy !== "never") return params.appServer;
 	const explicitMode = params.pluginConfig.appServer?.mode !== void 0 || isCodexAppServerPolicyMode(params.env.OPENCLAW_CODEX_APP_SERVER_MODE);
@@ -2643,8 +2691,9 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
 	await fs.mkdir(effectiveWorkspace, { recursive: true });
+	const codexSandboxPolicy = resolveCodexAppServerSandboxPolicyForOpenClawSandbox(configuredAppServer, sandbox, effectiveWorkspace);
 	const appServer = resolveCodexAppServerForOpenClawToolPolicy({
-		appServer: restrictCodexAppServerSandboxForOpenClawSandbox(configuredAppServer, sandbox),
+		appServer: configuredAppServer,
 		pluginConfig,
 		env: process.env,
 		shouldPromote: hasBeforeToolCallPolicy(),
@@ -3726,7 +3775,8 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		threadId: thread.threadId,
 		cwd: effectiveWorkspace,
 		appServer: pluginAppServer,
-		promptText: promptBuild.prompt
+		promptText: promptBuild.prompt,
+		sandboxPolicy: codexSandboxPolicy
 	}), {
 		timeoutMs: params.timeoutMs,
 		signal: runAbortController.signal
@@ -4328,12 +4378,14 @@ function resolveCodexAppServerHookChannelId(params, sandboxSessionKey) {
 		messageTo: params.messageTo
 	}).channelId;
 }
-function buildOpenClawCodingToolsOptions(input) {
+async function buildDynamicTools(input) {
 	const { params } = input;
+	if (params.disableTools || !supportsModelTools(params.model)) return [];
 	const modelHasVision = params.model.input?.includes("image") ?? false;
 	const agentDir = params.agentDir ?? resolveAgentDir$1(params.config ?? {}, input.sessionAgentId);
+	const createOpenClawCodingTools = openClawCodingToolsFactoryForTests ?? (await import("openclaw/plugin-sdk/agent-harness")).createOpenClawCodingTools;
 	const sessionKeys = resolveOpenClawCodingToolsSessionKeys(params, input.sandboxSessionKey);
-	return {
+	const filteredTools = filterCodexDynamicToolsForAllowlist(filterToolsForVisionInputs(filterCodexDynamicTools(createOpenClawCodingTools({
 		agentId: input.sessionAgentId,
 		...buildEmbeddedAttemptToolRunContext(params),
 		exec: {
@@ -4398,15 +4450,8 @@ function buildOpenClawCodingToolsOptions(input) {
 			});
 			input.runAbortController.abort("sessions_yield");
 		}
-	};
-}
-async function buildDynamicTools(input) {
-	const { params } = input;
-	if (params.disableTools || !supportsModelTools(params.model)) return [];
-	const createOpenClawCodingTools = openClawCodingToolsFactoryForTests ?? (await import("openclaw/plugin-sdk/agent-harness")).createOpenClawCodingTools;
-	const toolOptions = buildOpenClawCodingToolsOptions(input);
-	const filteredTools = filterCodexDynamicToolsForAllowlist(filterToolsForVisionInputs(filterCodexDynamicTools(createOpenClawCodingTools(toolOptions), input.pluginConfig), {
-		modelHasVision: toolOptions.modelHasVision ?? false,
+	}), input.pluginConfig), {
+		modelHasVision,
 		hasInboundImages: (params.images?.length ?? 0) > 0
 	}), includeForcedMessageToolAllow(params.toolsAllow, params));
 	return normalizeAgentRuntimeTools({

package/dist/{side-question-BzVnOoBU.js → side-question-CfRPUq5X.js}

@@ -5,7 +5,7 @@ import { r as isCodexAppServerApprovalRequest } from "./client-6FkrXfaz.js";
 import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-BRW7_Nu7.js";
 import { i as getSharedCodexAppServerClient, s as refreshCodexAppServerAuthTokens } from "./shared-client-DlvmoLBJ.js";
 import { i as readCodexAppServerBinding } from "./session-binding-DqApZIgD.js";
-import { S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, b as createCodexDynamicToolBridge, d as resolveReasoningEffort, h as mergeCodexThreadConfigs, n as buildCodexRuntimeThreadConfig, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-Cc_ljZLZ.js";
+import { S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, b as createCodexDynamicToolBridge, d as resolveReasoningEffort, h as mergeCodexThreadConfigs, n as buildCodexRuntimeThreadConfig, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-5SBrtWFl.js";
 import { a as handleCodexAppServerElicitationRequest, i as buildCodexNativeHookRelayDisabledConfig, n as CODEX_NATIVE_HOOK_RELAY_EVENTS, o as handleCodexAppServerApprovalRequest, r as buildCodexNativeHookRelayConfig, t as filterToolsForVisionInputs } from "./vision-tools-BX9YuTEK.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/test-api.js

@@ -1,5 +1,5 @@
 import { c as resolveCodexAppServerRuntimeOptions } from "./config-B5pq6hEz.js";
-import { S as filterCodexDynamicTools, a as buildThreadResumeParams, b as createCodexDynamicToolBridge, i as buildDeveloperInstructions, o as buildThreadStartParams, s as buildTurnStartParams } from "./thread-lifecycle-Cc_ljZLZ.js";
+import { S as filterCodexDynamicTools, a as buildThreadResumeParams, b as createCodexDynamicToolBridge, i as buildDeveloperInstructions, o as buildThreadStartParams, s as buildTurnStartParams } from "./thread-lifecycle-5SBrtWFl.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-Cc_ljZLZ.js → thread-lifecycle-5SBrtWFl.js}

@@ -986,7 +986,7 @@ function stableStringify(value) {
 //#region extensions/codex/src/app-server/thread-lifecycle.ts
 const CODEX_CODE_MODE_THREAD_CONFIG = {
 	"features.code_mode": true,
-	"features.code_mode_only": true
+	"features.code_mode_only": false
 };
 const CODEX_CODE_MODE_DISABLED_THREAD_CONFIG = {
 	"features.code_mode": false,
@@ -1328,8 +1328,8 @@ function buildThreadResumeParams(params, options) {
 	};
 }
 function buildCodexRuntimeThreadConfig(config, options = {}) {
-	const codeModeConfig = options.nativeCodeModeEnabled === false ? CODEX_CODE_MODE_DISABLED_THREAD_CONFIG : CODEX_CODE_MODE_THREAD_CONFIG;
-	return mergeCodexThreadConfigs(config, codeModeConfig) ?? { ...codeModeConfig };
+	if (options.nativeCodeModeEnabled === false) return mergeCodexThreadConfigs(CODEX_CODE_MODE_THREAD_CONFIG, config, CODEX_CODE_MODE_DISABLED_THREAD_CONFIG) ?? { ...CODEX_CODE_MODE_DISABLED_THREAD_CONFIG };
+	return mergeCodexThreadConfigs(CODEX_CODE_MODE_THREAD_CONFIG, config) ?? { ...CODEX_CODE_MODE_THREAD_CONFIG };
 }
 function buildCodexRuntimeThreadConfigForRun(params, config, options = {}) {
 	const runtimeConfig = buildCodexRuntimeThreadConfig(config, options);
@@ -1346,7 +1346,7 @@ function buildTurnStartParams(params, options) {
 		cwd: options.cwd,
 		approvalPolicy: options.appServer.approvalPolicy,
 		approvalsReviewer: options.appServer.approvalsReviewer,
-		sandboxPolicy: codexSandboxPolicyForTurn(options.appServer.sandbox, options.cwd),
+		sandboxPolicy: options.sandboxPolicy ?? codexSandboxPolicyForTurn(options.appServer.sandbox, options.cwd),
 		model: params.modelId,
 		...options.appServer.serviceTier ? { serviceTier: options.appServer.serviceTier } : {},
 		effort: resolveReasoningEffort(params.thinkLevel, params.modelId),
@@ -1424,6 +1424,7 @@ function compareJsonFingerprint(left, right) {
 function buildDeveloperInstructions(params) {
 	return [
 		"Running inside OpenClaw. Use dynamic tools for messaging, cron, sessions, media, gateway, and nodes when available.",
+		"Use Codex native `spawn_agent` for Codex subagents. Use OpenClaw `sessions_spawn` only for OpenClaw or ACP delegation; if it is not already loaded, search for `sessions_spawn` in the `openclaw` dynamic tool namespace before calling it.",
 		"Preserve channel/session context. Visible channel replies: use `message`, do not describe would-reply.",
 		renderCodexRuntimePromptOverlay(params),
 		params.extraSystemPrompt,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.16-beta.6",
+  "version": "2026.5.18-beta.1",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "dependencies": {
-    "@earendil-works/pi-coding-agent": "0.74.1",
+    "@earendil-works/pi-coding-agent": "0.75.1",
     "@openai/codex": "0.130.0",
     "ajv": "8.20.0",
     "ws": "8.20.1",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.16-beta.6"
+      "pluginApi": ">=2026.5.18-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.16-beta.6"
+      "openclawVersion": "2026.5.18-beta.1"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.16-beta.6"
+    "openclaw": ">=2026.5.18-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {