@openclaw/codex 2026.5.16-beta.7 → 2026.5.18

package/dist/harness.js

@@ -18,14 +18,14 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-Mn4zlbBO.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DyLQRA61.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-D8VnF9iq.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-CfRPUq5X.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.pluginConfig,
 				nativeHookRelay: { enabled: true }

package/dist/{run-attempt-Mn4zlbBO.js → run-attempt-DyLQRA61.js}

@@ -7,7 +7,7 @@ import { d as resolveCodexUsageLimitResetAtMs, f as shouldRefreshCodexRateLimits
 import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerEnvApiKeyCacheKey, f as resolveCodexAppServerHomeDir, l as resolveCodexAppServerAuthProfileId, s as refreshCodexAppServerAuthTokens, t as clearSharedCodexAppServerClientIfCurrent, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-DlvmoLBJ.js";
 import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DqApZIgD.js";
 import { a as defaultCodexAppInventoryCache } from "./plugin-activation-B49xb7pI.js";
-import { C as isForcedPrivateQaCodexRuntime, S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, _ as projectContextEngineAssemblyForCodex, b as createCodexDynamicToolBridge, c as codexDynamicToolsFingerprint, f as startOrResumeThread, g as shouldBuildCodexPluginThreadConfig, h as mergeCodexThreadConfigs, i as buildDeveloperInstructions, l as isContextEngineBindingCompatible, m as buildCodexPluginThreadConfigInputFingerprint, p as buildCodexPluginThreadConfig, r as buildContextEngineBinding, s as buildTurnStartParams, t as areCodexDynamicToolFingerprintsCompatible, v as resolveCodexContextEngineProjectionMaxChars, w as normalizeCodexDynamicToolName, x as sanitizeCodexHistoryImagePayloads, y as resolveCodexContextEngineProjectionReserveTokens } from "./thread-lifecycle-Czx7CGwZ.js";
+import { C as isForcedPrivateQaCodexRuntime, S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, _ as projectContextEngineAssemblyForCodex, b as createCodexDynamicToolBridge, c as codexDynamicToolsFingerprint, f as startOrResumeThread, g as shouldBuildCodexPluginThreadConfig, h as mergeCodexThreadConfigs, i as buildDeveloperInstructions, l as isContextEngineBindingCompatible, m as buildCodexPluginThreadConfigInputFingerprint, p as buildCodexPluginThreadConfig, r as buildContextEngineBinding, s as buildTurnStartParams, t as areCodexDynamicToolFingerprintsCompatible, v as resolveCodexContextEngineProjectionMaxChars, w as normalizeCodexDynamicToolName, x as sanitizeCodexHistoryImagePayloads, y as resolveCodexContextEngineProjectionReserveTokens } from "./thread-lifecycle-5SBrtWFl.js";
 import { t as defaultCodexAppServerClientFactory } from "./client-factory-9L6Ie1dC.js";
 import { a as handleCodexAppServerElicitationRequest, i as buildCodexNativeHookRelayDisabledConfig, n as CODEX_NATIVE_HOOK_RELAY_EVENTS, o as handleCodexAppServerApprovalRequest, r as buildCodexNativeHookRelayConfig, t as filterToolsForVisionInputs } from "./vision-tools-BX9YuTEK.js";
 import { t as ensureCodexComputerUse } from "./computer-use-UJ3dxrXF.js";
@@ -2482,13 +2482,21 @@ function toCodexTextInput(text) {
 		text_elements: []
 	};
 }
-function restrictCodexAppServerSandboxForOpenClawSandbox(appServer, sandbox) {
-	if (!sandbox?.enabled || appServer.sandbox !== "danger-full-access") return appServer;
+function resolveCodexAppServerSandboxPolicyForOpenClawSandbox(appServer, sandbox, cwd) {
+	if (!sandbox?.enabled || appServer.sandbox === "read-only") return;
+	const networkAccess = codexNetworkAccessForOpenClawSandbox(sandbox);
 	return {
-		...appServer,
-		sandbox: "workspace-write"
+		type: "workspaceWrite",
+		writableRoots: [cwd],
+		networkAccess,
+		excludeTmpdirEnvVar: false,
+		excludeSlashTmp: false
 	};
 }
+function codexNetworkAccessForOpenClawSandbox(sandbox) {
+	if (!sandbox?.enabled || sandbox.backendId !== "docker") return true;
+	return sandbox.docker.network.trim().toLowerCase() !== "none";
+}
 function resolveCodexAppServerForOpenClawToolPolicy(params) {
 	if (!params.shouldPromote || !params.canUseUntrustedApprovalPolicy || params.appServer.approvalPolicy !== "never") return params.appServer;
 	const explicitMode = params.pluginConfig.appServer?.mode !== void 0 || isCodexAppServerPolicyMode(params.env.OPENCLAW_CODEX_APP_SERVER_MODE);
@@ -2683,8 +2691,9 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	});
 	const effectiveWorkspace = sandbox?.enabled ? sandbox.workspaceAccess === "rw" ? resolvedWorkspace : sandbox.workspaceDir : resolvedWorkspace;
 	await fs.mkdir(effectiveWorkspace, { recursive: true });
+	const codexSandboxPolicy = resolveCodexAppServerSandboxPolicyForOpenClawSandbox(configuredAppServer, sandbox, effectiveWorkspace);
 	const appServer = resolveCodexAppServerForOpenClawToolPolicy({
-		appServer: restrictCodexAppServerSandboxForOpenClawSandbox(configuredAppServer, sandbox),
+		appServer: configuredAppServer,
 		pluginConfig,
 		env: process.env,
 		shouldPromote: hasBeforeToolCallPolicy(),
@@ -3766,7 +3775,8 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		threadId: thread.threadId,
 		cwd: effectiveWorkspace,
 		appServer: pluginAppServer,
-		promptText: promptBuild.prompt
+		promptText: promptBuild.prompt,
+		sandboxPolicy: codexSandboxPolicy
 	}), {
 		timeoutMs: params.timeoutMs,
 		signal: runAbortController.signal
@@ -4368,12 +4378,14 @@ function resolveCodexAppServerHookChannelId(params, sandboxSessionKey) {
 		messageTo: params.messageTo
 	}).channelId;
 }
-function buildOpenClawCodingToolsOptions(input) {
+async function buildDynamicTools(input) {
 	const { params } = input;
+	if (params.disableTools || !supportsModelTools(params.model)) return [];
 	const modelHasVision = params.model.input?.includes("image") ?? false;
 	const agentDir = params.agentDir ?? resolveAgentDir$1(params.config ?? {}, input.sessionAgentId);
+	const createOpenClawCodingTools = openClawCodingToolsFactoryForTests ?? (await import("openclaw/plugin-sdk/agent-harness")).createOpenClawCodingTools;
 	const sessionKeys = resolveOpenClawCodingToolsSessionKeys(params, input.sandboxSessionKey);
-	return {
+	const filteredTools = filterCodexDynamicToolsForAllowlist(filterToolsForVisionInputs(filterCodexDynamicTools(createOpenClawCodingTools({
 		agentId: input.sessionAgentId,
 		...buildEmbeddedAttemptToolRunContext(params),
 		exec: {
@@ -4438,15 +4450,8 @@ function buildOpenClawCodingToolsOptions(input) {
 			});
 			input.runAbortController.abort("sessions_yield");
 		}
-	};
-}
-async function buildDynamicTools(input) {
-	const { params } = input;
-	if (params.disableTools || !supportsModelTools(params.model)) return [];
-	const createOpenClawCodingTools = openClawCodingToolsFactoryForTests ?? (await import("openclaw/plugin-sdk/agent-harness")).createOpenClawCodingTools;
-	const toolOptions = buildOpenClawCodingToolsOptions(input);
-	const filteredTools = filterCodexDynamicToolsForAllowlist(filterToolsForVisionInputs(filterCodexDynamicTools(createOpenClawCodingTools(toolOptions), input.pluginConfig), {
-		modelHasVision: toolOptions.modelHasVision ?? false,
+	}), input.pluginConfig), {
+		modelHasVision,
 		hasInboundImages: (params.images?.length ?? 0) > 0
 	}), includeForcedMessageToolAllow(params.toolsAllow, params));
 	return normalizeAgentRuntimeTools({

package/dist/{side-question-D8VnF9iq.js → side-question-CfRPUq5X.js}

@@ -5,7 +5,7 @@ import { r as isCodexAppServerApprovalRequest } from "./client-6FkrXfaz.js";
 import { u as formatCodexUsageLimitErrorMessage } from "./command-formatters-BRW7_Nu7.js";
 import { i as getSharedCodexAppServerClient, s as refreshCodexAppServerAuthTokens } from "./shared-client-DlvmoLBJ.js";
 import { i as readCodexAppServerBinding } from "./session-binding-DqApZIgD.js";
-import { S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, b as createCodexDynamicToolBridge, d as resolveReasoningEffort, h as mergeCodexThreadConfigs, n as buildCodexRuntimeThreadConfig, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-Czx7CGwZ.js";
+import { S as filterCodexDynamicTools, T as resolveCodexDynamicToolsLoading, b as createCodexDynamicToolBridge, d as resolveReasoningEffort, h as mergeCodexThreadConfigs, n as buildCodexRuntimeThreadConfig, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-5SBrtWFl.js";
 import { a as handleCodexAppServerElicitationRequest, i as buildCodexNativeHookRelayDisabledConfig, n as CODEX_NATIVE_HOOK_RELAY_EVENTS, o as handleCodexAppServerApprovalRequest, r as buildCodexNativeHookRelayConfig, t as filterToolsForVisionInputs } from "./vision-tools-BX9YuTEK.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-dvhq-4pi.js";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/test-api.js

@@ -1,5 +1,5 @@
 import { c as resolveCodexAppServerRuntimeOptions } from "./config-B5pq6hEz.js";
-import { S as filterCodexDynamicTools, a as buildThreadResumeParams, b as createCodexDynamicToolBridge, i as buildDeveloperInstructions, o as buildThreadStartParams, s as buildTurnStartParams } from "./thread-lifecycle-Czx7CGwZ.js";
+import { S as filterCodexDynamicTools, a as buildThreadResumeParams, b as createCodexDynamicToolBridge, i as buildDeveloperInstructions, o as buildThreadStartParams, s as buildTurnStartParams } from "./thread-lifecycle-5SBrtWFl.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-Czx7CGwZ.js → thread-lifecycle-5SBrtWFl.js}

@@ -986,7 +986,7 @@ function stableStringify(value) {
 //#region extensions/codex/src/app-server/thread-lifecycle.ts
 const CODEX_CODE_MODE_THREAD_CONFIG = {
 	"features.code_mode": true,
-	"features.code_mode_only": true
+	"features.code_mode_only": false
 };
 const CODEX_CODE_MODE_DISABLED_THREAD_CONFIG = {
 	"features.code_mode": false,
@@ -1328,8 +1328,8 @@ function buildThreadResumeParams(params, options) {
 	};
 }
 function buildCodexRuntimeThreadConfig(config, options = {}) {
-	const codeModeConfig = options.nativeCodeModeEnabled === false ? CODEX_CODE_MODE_DISABLED_THREAD_CONFIG : CODEX_CODE_MODE_THREAD_CONFIG;
-	return mergeCodexThreadConfigs(config, codeModeConfig) ?? { ...codeModeConfig };
+	if (options.nativeCodeModeEnabled === false) return mergeCodexThreadConfigs(CODEX_CODE_MODE_THREAD_CONFIG, config, CODEX_CODE_MODE_DISABLED_THREAD_CONFIG) ?? { ...CODEX_CODE_MODE_DISABLED_THREAD_CONFIG };
+	return mergeCodexThreadConfigs(CODEX_CODE_MODE_THREAD_CONFIG, config) ?? { ...CODEX_CODE_MODE_THREAD_CONFIG };
 }
 function buildCodexRuntimeThreadConfigForRun(params, config, options = {}) {
 	const runtimeConfig = buildCodexRuntimeThreadConfig(config, options);
@@ -1346,7 +1346,7 @@ function buildTurnStartParams(params, options) {
 		cwd: options.cwd,
 		approvalPolicy: options.appServer.approvalPolicy,
 		approvalsReviewer: options.appServer.approvalsReviewer,
-		sandboxPolicy: codexSandboxPolicyForTurn(options.appServer.sandbox, options.cwd),
+		sandboxPolicy: options.sandboxPolicy ?? codexSandboxPolicyForTurn(options.appServer.sandbox, options.cwd),
 		model: params.modelId,
 		...options.appServer.serviceTier ? { serviceTier: options.appServer.serviceTier } : {},
 		effort: resolveReasoningEffort(params.thinkLevel, params.modelId),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.16-beta.7",
+  "version": "2026.5.18",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.16-beta.7"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.16-beta.7"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.16-beta.7"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {