@openclaw/codex 2026.5.20 → 2026.5.24-beta.1

package/dist/{thread-lifecycle-Cgi62SSl.js → thread-lifecycle-DGoaguJh.js}

@@ -1,593 +1,17 @@
-import { r as codexSandboxPolicyForTurn, u as resolveCodexPluginsPolicy } from "./config-DqIp6oTk.js";
+import { d as resolveCodexPluginsPolicy, r as codexSandboxPolicyForTurn, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-DDMrwfJl.js";
 import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-_gKDcd0x.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
-import { i as isCodexAppServerConnectionClosedError } from "./client-Ab4Fw77C.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DEiYHgJ_.js";
-import { a as defaultCodexAppInventoryCache, o as serializeCodexAppInventoryError, r as readCodexPluginInventory, t as ensureCodexPluginActivation } from "./plugin-activation-BkQkPLOY.js";
+import { a as isCodexAppServerConnectionClosedError } from "./client-1sSy4p3z.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-Bw_mfIW2.js";
 import crypto from "node:crypto";
-import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, isActiveHarnessContextEngine, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, runAgentHarnessAfterToolCallHook, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
+import { embeddedAgentLog, isActiveHarnessContextEngine } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { buildCodexUserMcpServersThreadConfigPatch } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { listRegisteredPluginAgentPromptGuidance } from "openclaw/plugin-sdk/plugin-runtime";
 import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
-//#region extensions/codex/src/app-server/dynamic-tool-profile.ts
-const CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES = [
-	"read",
-	"write",
-	"edit",
-	"apply_patch",
-	"exec",
-	"process",
-	"update_plan",
-	"tool_call",
-	"tool_describe",
-	"tool_search",
-	"tool_search_code"
-];
-const DYNAMIC_TOOL_NAME_ALIASES = {
-	bash: "exec",
-	"apply-patch": "apply_patch"
-};
-function normalizeCodexDynamicToolName(name) {
-	const normalized = name.trim().toLowerCase();
-	return DYNAMIC_TOOL_NAME_ALIASES[normalized] ?? normalized;
-}
-function isForcedPrivateQaCodexRuntime(env = process.env) {
-	return env.OPENCLAW_BUILD_PRIVATE_QA === "1" && env.OPENCLAW_QA_FORCE_RUNTIME?.trim().toLowerCase() === "codex";
-}
-function resolveCodexDynamicToolsLoading(config, env = process.env) {
-	return isForcedPrivateQaCodexRuntime(env) ? "direct" : config.codexDynamicToolsLoading ?? "searchable";
-}
-function filterCodexDynamicTools(tools, config, env = process.env) {
-	const excludes = /* @__PURE__ */ new Set();
-	if (!isForcedPrivateQaCodexRuntime(env)) for (const name of CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES) excludes.add(name);
-	for (const name of config.codexDynamicToolsExclude ?? []) {
-		const trimmed = normalizeCodexDynamicToolName(name);
-		if (trimmed) excludes.add(trimmed);
-	}
-	return excludes.size === 0 ? tools : tools.filter((tool) => !excludes.has(normalizeCodexDynamicToolName(tool.name)));
-}
-//#endregion
-//#region extensions/codex/src/app-server/image-payload-sanitizer.ts
-const DATA_URL_PREFIX = "data:";
-const IMAGE_OMITTED_TEXT = "omitted image payload: invalid inline image data";
-const IMAGE_SIGNATURES = [
-	{
-		mime: "image/png",
-		matches: (buffer) => buffer.length >= 8 && buffer[0] === 137 && buffer[1] === 80 && buffer[2] === 78 && buffer[3] === 71 && buffer[4] === 13 && buffer[5] === 10 && buffer[6] === 26 && buffer[7] === 10
-	},
-	{
-		mime: "image/jpeg",
-		matches: (buffer) => buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255
-	},
-	{
-		mime: "image/webp",
-		matches: (buffer) => buffer.length >= 12 && buffer.subarray(0, 4).toString("ascii") === "RIFF" && buffer.subarray(8, 12).toString("ascii") === "WEBP"
-	},
-	{
-		mime: "image/gif",
-		matches: (buffer) => buffer.length >= 6 && (buffer.subarray(0, 6).toString("ascii") === "GIF87a" || buffer.subarray(0, 6).toString("ascii") === "GIF89a")
-	}
-];
-function startsWithDataUrl(value) {
-	return value.slice(0, 5).toLowerCase() === DATA_URL_PREFIX;
-}
-function canonicalizeBase64(base64) {
-	let cleaned = "";
-	let padding = 0;
-	let sawPadding = false;
-	for (let i = 0; i < base64.length; i += 1) {
-		const code = base64.charCodeAt(i);
-		if (code <= 32) continue;
-		if (code === 61) {
-			padding += 1;
-			if (padding > 2) return;
-			sawPadding = true;
-			cleaned += "=";
-			continue;
-		}
-		if (sawPadding || !(code >= 65 && code <= 90 || code >= 97 && code <= 122 || code >= 48 && code <= 57 || code === 43 || code === 47)) return;
-		cleaned += base64[i];
-	}
-	if (!cleaned || cleaned.length % 4 !== 0) return;
-	return cleaned;
-}
-function sniffImageMime(buffer) {
-	return IMAGE_SIGNATURES.find((signature) => signature.matches(buffer))?.mime;
-}
-function parseImageDataUrl(value) {
-	if (!startsWithDataUrl(value)) return {
-		metadata: [],
-		payload: value
-	};
-	const commaIndex = value.indexOf(",");
-	if (commaIndex < 0) return;
-	return {
-		metadata: value.slice(5, commaIndex).split(";").map((part) => part.trim()),
-		payload: value.slice(commaIndex + 1)
-	};
-}
-function metadataAllowsImageBase64(metadata) {
-	const [mimeType, ...options] = metadata;
-	return mimeType !== void 0 && mimeType.toLowerCase().startsWith("image/") && options.some((part) => part.toLowerCase() === "base64");
-}
-function sanitizeInlineImageDataUrl(imageUrl) {
-	const parsed = parseImageDataUrl(imageUrl);
-	if (!parsed) return;
-	if (parsed.metadata.length === 0) return imageUrl;
-	if (!metadataAllowsImageBase64(parsed.metadata)) return;
-	const canonicalPayload = canonicalizeBase64(parsed.payload);
-	if (!canonicalPayload) return;
-	const sniffedMimeType = sniffImageMime(Buffer.from(canonicalPayload, "base64"));
-	if (!sniffedMimeType) return;
-	return `data:${sniffedMimeType};base64,${canonicalPayload}`;
-}
-function invalidInlineImageText(label) {
-	return `[${label}] ${IMAGE_OMITTED_TEXT}`;
-}
-function isRecord$1(value) {
-	return Boolean(value && typeof value === "object" && !Array.isArray(value));
-}
-function sanitizeImageContentRecord(record, label) {
-	if (record.type === "image" && typeof record.data === "string") {
-		const mimeType = typeof record.mimeType === "string" ? record.mimeType : "image/png";
-		const imageUrl = sanitizeInlineImageDataUrl(`data:${mimeType};base64,${record.data}`);
-		if (!imageUrl) return {
-			type: "text",
-			text: invalidInlineImageText(label)
-		};
-		const commaIndex = imageUrl.indexOf(",");
-		const mime = imageUrl.slice(5, commaIndex).split(";")[0] ?? mimeType;
-		return {
-			...record,
-			mimeType: mime,
-			data: imageUrl.slice(commaIndex + 1)
-		};
-	}
-	if (record.type === "inputImage" && typeof record.imageUrl === "string") {
-		const imageUrl = sanitizeInlineImageDataUrl(record.imageUrl);
-		return imageUrl ? {
-			...record,
-			imageUrl
-		} : {
-			type: "inputText",
-			text: invalidInlineImageText(label)
-		};
-	}
-	if (record.type === "input_image" && typeof record.image_url === "string") {
-		const imageUrl = sanitizeInlineImageDataUrl(record.image_url);
-		return imageUrl ? {
-			...record,
-			image_url: imageUrl
-		} : {
-			type: "input_text",
-			text: invalidInlineImageText(label)
-		};
-	}
-}
-function sanitizeCodexHistoryImagePayloads(value, label) {
-	if (Array.isArray(value)) return value.map((entry) => sanitizeCodexHistoryImagePayloads(entry, label));
-	if (!isRecord$1(value)) return value;
-	const imageRecord = sanitizeImageContentRecord(value, label);
-	if (imageRecord) return imageRecord;
-	const next = {};
-	for (const [key, child] of Object.entries(value)) next[key] = sanitizeCodexHistoryImagePayloads(child, label);
-	return next;
-}
-//#endregion
-//#region extensions/codex/src/app-server/dynamic-tools.ts
-const CODEX_OPENCLAW_DYNAMIC_TOOL_NAMESPACE = "openclaw";
-const ALWAYS_DIRECT_DYNAMIC_TOOL_NAMES = new Set(["sessions_yield"]);
-const DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS = 16e3;
-function createCodexDynamicToolBridge(params) {
-	const toolResultHookContext = toToolResultHookContext(params.hookContext);
-	const toolResultMaxChars = resolveCodexDynamicToolResultMaxChars(params.hookContext);
-	const tools = params.tools.map((tool) => {
-		if (isToolWrappedWithBeforeToolCallHook(tool)) {
-			setBeforeToolCallDiagnosticsEnabled(tool, false);
-			return tool;
-		}
-		return wrapToolWithBeforeToolCallHook(tool, params.hookContext, { emitDiagnostics: false });
-	});
-	const toolMap = new Map(tools.map((tool) => [tool.name, tool]));
-	const telemetry = {
-		didSendViaMessagingTool: false,
-		messagingToolSentTexts: [],
-		messagingToolSentMediaUrls: [],
-		messagingToolSentTargets: [],
-		messagingToolSourceReplyPayloads: [],
-		toolMediaUrls: [],
-		toolAudioAsVoice: false
-	};
-	const middlewareRunner = createAgentToolResultMiddlewareRunner({
-		runtime: "codex",
-		...toolResultHookContext
-	});
-	const legacyExtensionRunner = createCodexAppServerToolResultExtensionRunner(toolResultHookContext);
-	const directToolNames = new Set([...ALWAYS_DIRECT_DYNAMIC_TOOL_NAMES, ...params.directToolNames ?? []]);
-	return {
-		specs: tools.map((tool) => createCodexDynamicToolSpec({
-			tool,
-			loading: params.loading ?? "searchable",
-			directToolNames
-		})),
-		telemetry,
-		handleToolCall: async (call, options) => {
-			const tool = toolMap.get(call.tool);
-			if (!tool) return {
-				contentItems: [{
-					type: "inputText",
-					text: `Unknown OpenClaw tool: ${call.tool}`
-				}],
-				success: false
-			};
-			const args = jsonObjectToRecord(call.arguments);
-			const startedAt = Date.now();
-			const signal = composeAbortSignals(params.signal, options?.signal);
-			try {
-				const preparedArgs = tool.prepareArguments ? tool.prepareArguments(args) : args;
-				const rawResult = await tool.execute(call.callId, preparedArgs, signal);
-				const rawIsError = isToolResultError(rawResult);
-				const middlewareResult = await middlewareRunner.applyToolResultMiddleware({
-					threadId: call.threadId,
-					turnId: call.turnId,
-					toolCallId: call.callId,
-					toolName: tool.name,
-					args,
-					isError: rawIsError,
-					result: rawResult
-				});
-				const result = await legacyExtensionRunner.applyToolResultExtensions({
-					threadId: call.threadId,
-					turnId: call.turnId,
-					toolCallId: call.callId,
-					toolName: tool.name,
-					args,
-					result: middlewareResult
-				});
-				const resultIsError = rawIsError || isToolResultError(result);
-				collectToolTelemetry({
-					toolName: tool.name,
-					args,
-					result,
-					mediaTrustResult: rawResult,
-					telemetry,
-					isError: resultIsError
-				});
-				runAgentHarnessAfterToolCallHook({
-					toolName: tool.name,
-					toolCallId: call.callId,
-					runId: toolResultHookContext.runId,
-					agentId: toolResultHookContext.agentId,
-					sessionId: toolResultHookContext.sessionId,
-					sessionKey: toolResultHookContext.sessionKey,
-					channelId: toolResultHookContext.channelId,
-					startArgs: args,
-					result,
-					startedAt
-				});
-				return withDiagnosticTerminalType({
-					contentItems: convertToolContents(result.content, toolResultMaxChars),
-					success: !resultIsError
-				}, inferToolResultDiagnosticTerminalType(result, resultIsError));
-			} catch (error) {
-				collectToolTelemetry({
-					toolName: tool.name,
-					args,
-					result: void 0,
-					telemetry,
-					isError: true
-				});
-				runAgentHarnessAfterToolCallHook({
-					toolName: tool.name,
-					toolCallId: call.callId,
-					runId: toolResultHookContext.runId,
-					agentId: toolResultHookContext.agentId,
-					sessionId: toolResultHookContext.sessionId,
-					sessionKey: toolResultHookContext.sessionKey,
-					channelId: toolResultHookContext.channelId,
-					startArgs: args,
-					error: error instanceof Error ? error.message : String(error),
-					startedAt
-				});
-				return withDiagnosticTerminalType({
-					contentItems: [{
-						type: "inputText",
-						text: error instanceof Error ? error.message : String(error)
-					}],
-					success: false
-				}, "error");
-			}
-		}
-	};
-}
-function createCodexDynamicToolSpec(params) {
-	const base = {
-		name: params.tool.name,
-		description: params.tool.description,
-		inputSchema: toJsonValue(params.tool.parameters)
-	};
-	if (params.loading === "direct" || params.directToolNames.has(params.tool.name)) return base;
-	return {
-		...base,
-		namespace: CODEX_OPENCLAW_DYNAMIC_TOOL_NAMESPACE,
-		deferLoading: true
-	};
-}
-function toToolResultHookContext(ctx) {
-	const { agentId, sessionId, sessionKey, runId, channelId } = ctx ?? {};
-	return {
-		...agentId && { agentId },
-		...sessionId && { sessionId },
-		...sessionKey && { sessionKey },
-		...runId && { runId },
-		...channelId && { channelId }
-	};
-}
-function resolveCodexDynamicToolResultMaxChars(ctx) {
-	return resolveAgentContextLimitValue({
-		config: ctx?.config,
-		agentId: ctx?.agentId,
-		key: "toolResultMaxChars"
-	}) ?? DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS;
-}
-function resolveAgentContextLimitValue(params) {
-	const agents = readRecord(params.config?.agents);
-	const defaultValue = readPositiveInteger(readRecord(readRecord(agents?.defaults)?.contextLimits)?.[params.key]);
-	if (!params.agentId) return defaultValue;
-	const list = agents?.list;
-	if (!Array.isArray(list)) return defaultValue;
-	const normalizedAgentId = normalizeAgentId(params.agentId);
-	return readPositiveInteger(readRecord(readRecord(list.find((entry) => {
-		const entryId = readRecord(entry)?.id;
-		return typeof entryId === "string" && normalizeAgentId(entryId) === normalizedAgentId;
-	}))?.contextLimits)?.[params.key]) ?? defaultValue;
-}
-function composeAbortSignals(...signals) {
-	const activeSignals = signals.filter((signal) => Boolean(signal));
-	if (activeSignals.length === 0) return new AbortController().signal;
-	if (activeSignals.length === 1) return activeSignals[0];
-	return AbortSignal.any(activeSignals);
-}
-function collectToolTelemetry(params) {
-	if (params.isError) return;
-	if (!params.isError && params.toolName === "cron" && isCronAddAction(params.args)) params.telemetry.successfulCronAdds = (params.telemetry.successfulCronAdds ?? 0) + 1;
-	if (!params.isError && params.toolName === HEARTBEAT_RESPONSE_TOOL_NAME) {
-		const response = normalizeHeartbeatToolResponse(params.result?.details);
-		if (response) params.telemetry.heartbeatToolResponse = response;
-	}
-	if (!params.isError && params.result) {
-		const media = extractToolResultMediaArtifact(params.result);
-		if (media) {
-			const mediaUrls = filterToolResultMediaUrls(params.toolName, media.mediaUrls, params.mediaTrustResult ?? params.result);
-			const seen = new Set(params.telemetry.toolMediaUrls);
-			for (const mediaUrl of mediaUrls) if (!seen.has(mediaUrl)) {
-				seen.add(mediaUrl);
-				params.telemetry.toolMediaUrls.push(mediaUrl);
-			}
-			if (media.audioAsVoice) params.telemetry.toolAudioAsVoice = true;
-		}
-	}
-	if (!isMessagingTool(params.toolName) || !isMessagingToolSendAction(params.toolName, params.args)) return;
-	params.telemetry.didSendViaMessagingTool = true;
-	const sourceReplyPayload = extractInternalSourceReplyPayload(params.result?.details);
-	if (sourceReplyPayload) {
-		params.telemetry.messagingToolSourceReplyPayloads.push(sourceReplyPayload);
-		return;
-	}
-	const text = readFirstString(params.args, [
-		"text",
-		"message",
-		"body",
-		"content"
-	]);
-	if (text) params.telemetry.messagingToolSentTexts.push(text);
-	const mediaUrls = collectMediaUrls(params.args);
-	params.telemetry.messagingToolSentMediaUrls.push(...mediaUrls);
-	params.telemetry.messagingToolSentTargets.push({
-		tool: params.toolName,
-		provider: readFirstString(params.args, ["provider", "channel"]) ?? params.toolName,
-		accountId: readFirstString(params.args, ["accountId", "account_id"]),
-		to: readFirstString(params.args, [
-			"to",
-			"target",
-			"recipient"
-		]),
-		threadId: readFirstString(params.args, [
-			"threadId",
-			"thread_id",
-			"messageThreadId"
-		]),
-		...text ? { text } : {},
-		...mediaUrls.length > 0 ? { mediaUrls } : {}
-	});
-}
-function extractInternalSourceReplyPayload(details) {
-	if (!isRecord(details) || details.sourceReplySink !== "internal-ui") return;
-	const rawPayload = details.sourceReply;
-	if (!isRecord(rawPayload)) return;
-	const text = readFirstString(rawPayload, ["text", "message"]);
-	const mediaUrls = collectMediaUrls(rawPayload);
-	const mediaUrl = typeof rawPayload.mediaUrl === "string" && rawPayload.mediaUrl.trim() ? rawPayload.mediaUrl.trim() : mediaUrls[0];
-	const payload = {
-		...text ? { text } : {},
-		...mediaUrl ? { mediaUrl } : {},
-		...mediaUrls.length > 0 ? { mediaUrls } : {},
-		...rawPayload.audioAsVoice === true ? { audioAsVoice: true } : {},
-		...isRecord(rawPayload.presentation) ? { presentation: rawPayload.presentation } : {},
-		...isRecord(rawPayload.interactive) ? { interactive: rawPayload.interactive } : {},
-		...isRecord(rawPayload.channelData) ? { channelData: rawPayload.channelData } : {},
-		...typeof details.idempotencyKey === "string" && details.idempotencyKey.trim() ? { idempotencyKey: details.idempotencyKey.trim() } : {}
-	};
-	return text || mediaUrls.length > 0 || payload.presentation || payload.interactive ? payload : void 0;
-}
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function readRecord(value) {
-	return isRecord(value) ? value : void 0;
-}
-function readPositiveInteger(value) {
-	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
-	return Math.floor(value);
-}
-function isToolResultError(result) {
-	const details = result.details;
-	if (!isRecord(details)) return false;
-	if (details.timedOut === true) return true;
-	if (typeof details.exitCode === "number" && details.exitCode !== 0) return true;
-	if (typeof details.status !== "string") return false;
-	const status = details.status.trim().toLowerCase();
-	return status !== "" && status !== "0" && status !== "ok" && status !== "success" && status !== "completed" && status !== "recorded" && status !== "running";
-}
-function inferToolResultDiagnosticTerminalType(result, isError) {
-	const details = result.details;
-	if (isRecord(details) && typeof details.status === "string") {
-		if (details.status.trim().toLowerCase() === "blocked") return "blocked";
-	}
-	return isError ? "error" : "completed";
-}
-function withDiagnosticTerminalType(response, terminalType) {
-	Object.defineProperty(response, "diagnosticTerminalType", {
-		configurable: true,
-		enumerable: false,
-		value: terminalType
-	});
-	return response;
-}
-function normalizeToolResultMaxChars(maxChars) {
-	return typeof maxChars === "number" && Number.isFinite(maxChars) && maxChars > 0 ? Math.floor(maxChars) : DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS;
-}
-function convertToolContents(content, toolResultMaxChars = DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS) {
-	const maxChars = normalizeToolResultMaxChars(toolResultMaxChars);
-	const totalTextChars = content.reduce((total, item) => total + (item.type === "text" ? item.text.length : 0), 0);
-	if (totalTextChars <= maxChars) return content.flatMap(convertToolContent);
-	const noticeText = `...(OpenClaw truncated dynamic tool result: original ${totalTextChars} chars, showing ${maxChars}; rerun with narrower args.)`;
-	const notice = `\n${noticeText}`;
-	let remainingTextBudget = Math.max(0, maxChars - notice.length);
-	let appendedNotice = false;
-	const output = [];
-	for (const item of content) {
-		if (item.type !== "text") {
-			output.push(...convertToolContent(item));
-			continue;
-		}
-		if (appendedNotice) continue;
-		if (notice.length >= maxChars) {
-			output.push({
-				type: "inputText",
-				text: noticeText.slice(0, maxChars)
-			});
-			appendedNotice = true;
-			continue;
-		}
-		const sliceLength = Math.min(item.text.length, remainingTextBudget);
-		remainingTextBudget -= sliceLength;
-		const shouldAppendNotice = remainingTextBudget <= 0;
-		const text = item.text.slice(0, sliceLength);
-		if (shouldAppendNotice) {
-			output.push({
-				type: "inputText",
-				text: `${text.trimEnd()}${notice}`.slice(0, maxChars)
-			});
-			appendedNotice = true;
-		} else if (text.length > 0) output.push({
-			type: "inputText",
-			text
-		});
-	}
-	if (!appendedNotice) output.push({
-		type: "inputText",
-		text: noticeText.slice(0, maxChars)
-	});
-	return output;
-}
-function convertToolContent(content) {
-	if (content.type === "text") return [{
-		type: "inputText",
-		text: content.text
-	}];
-	const imageUrl = sanitizeInlineImageDataUrl(`data:${content.mimeType};base64,${content.data}`);
-	if (!imageUrl) return [{
-		type: "inputText",
-		text: invalidInlineImageText("codex dynamic tool")
-	}];
-	return [{
-		type: "inputImage",
-		imageUrl
-	}];
-}
-function toJsonValue(value) {
-	try {
-		const text = JSON.stringify(value);
-		if (!text) return {};
-		return JSON.parse(text);
-	} catch {
-		return {};
-	}
-}
-function jsonObjectToRecord(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-	return value;
-}
-function readFirstString(record, keys) {
-	for (const key of keys) {
-		const value = record[key];
-		if (typeof value === "string" && value.trim()) return value.trim();
-		if (typeof value === "number" && Number.isFinite(value)) return String(value);
-	}
-}
-function collectMediaUrls(record) {
-	const urls = [];
-	const pushMediaUrl = (value) => {
-		if (typeof value === "string" && value.trim()) urls.push(value.trim());
-	};
-	const pushAttachment = (value) => {
-		if (!value || typeof value !== "object" || Array.isArray(value)) return;
-		const attachment = value;
-		for (const key of [
-			"media",
-			"mediaUrl",
-			"path",
-			"filePath",
-			"fileUrl",
-			"url"
-		]) pushMediaUrl(attachment[key]);
-	};
-	for (const key of [
-		"media",
-		"mediaUrl",
-		"media_url",
-		"path",
-		"filePath",
-		"fileUrl",
-		"imageUrl",
-		"image_url"
-	]) {
-		const value = record[key];
-		pushMediaUrl(value);
-	}
-	for (const key of [
-		"mediaUrls",
-		"media_urls",
-		"imageUrls",
-		"image_urls"
-	]) {
-		const value = record[key];
-		if (!Array.isArray(value)) continue;
-		for (const entry of value) pushMediaUrl(entry);
-	}
-	const attachments = record.attachments;
-	if (Array.isArray(attachments)) for (const attachment of attachments) pushAttachment(attachment);
-	return urls;
-}
-function isCronAddAction(args) {
-	const action = args.action;
-	return typeof action === "string" && action.trim().toLowerCase() === "add";
-}
-//#endregion
+import "node:fs/promises";
+import "node:path";
 //#region extensions/codex/src/app-server/context-engine-projection.ts
 const CONTEXT_HEADER = "OpenClaw assembled context for this turn:";
 const CONTEXT_OPEN = "<conversation_context>";
@@ -599,7 +23,7 @@ const MAX_RENDERED_CONTEXT_CHARS = 1e6;
 const DEFAULT_TEXT_PART_CHARS = 6e3;
 const MAX_TEXT_PART_CHARS = 128e3;
 const APPROX_RENDERED_CHARS_PER_TOKEN = 4;
-const DEFAULT_PROJECTION_RESERVE_TOKENS = 2e4;
+const DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS = 2e4;
 const MIN_PROMPT_BUDGET_RATIO = .5;
 const MIN_PROMPT_BUDGET_TOKENS = 8e3;
 /**
@@ -643,11 +67,11 @@ function resolveCodexContextEngineProjectionReserveTokens(params) {
 	const compaction = asRecord(asRecord(asRecord(params.config)?.agents)?.defaults)?.compaction;
 	const configuredReserveTokens = toNonNegativeInt(asRecord(compaction)?.reserveTokens);
 	const configuredReserveTokensFloor = toNonNegativeInt(asRecord(compaction)?.reserveTokensFloor);
-	if (configuredReserveTokens !== void 0) return Math.max(configuredReserveTokens, configuredReserveTokensFloor ?? DEFAULT_PROJECTION_RESERVE_TOKENS);
+	if (configuredReserveTokens !== void 0) return Math.max(configuredReserveTokens, configuredReserveTokensFloor ?? 2e4);
 	if (configuredReserveTokensFloor !== void 0) return configuredReserveTokensFloor;
 }
 function resolveProjectionPromptBudgetTokens(params) {
-	const requestedReserveTokens = typeof params.reserveTokens === "number" && Number.isFinite(params.reserveTokens) && params.reserveTokens >= 0 ? Math.floor(params.reserveTokens) : DEFAULT_PROJECTION_RESERVE_TOKENS;
+	const requestedReserveTokens = typeof params.reserveTokens === "number" && Number.isFinite(params.reserveTokens) && params.reserveTokens >= 0 ? Math.floor(params.reserveTokens) : DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS;
 	const minPromptBudget = Math.min(MIN_PROMPT_BUDGET_TOKENS, Math.max(1, Math.floor(params.contextTokenBudget * MIN_PROMPT_BUDGET_RATIO)));
 	const effectiveReserveTokens = Math.min(requestedReserveTokens, Math.max(0, params.contextTokenBudget - minPromptBudget));
 	return Math.max(1, params.contextTokenBudget - effectiveReserveTokens);
@@ -800,6 +224,579 @@ function truncateOlderContext(text, maxChars) {
 	return `${marker}${text.slice(text.length - tailChars).trimStart()}`;
 }
 //#endregion
+//#region extensions/codex/src/app-server/image-payload-sanitizer.ts
+const DATA_URL_PREFIX = "data:";
+const IMAGE_OMITTED_TEXT = "omitted image payload: invalid inline image data";
+const IMAGE_SIGNATURES = [
+	{
+		mime: "image/png",
+		matches: (buffer) => buffer.length >= 8 && buffer[0] === 137 && buffer[1] === 80 && buffer[2] === 78 && buffer[3] === 71 && buffer[4] === 13 && buffer[5] === 10 && buffer[6] === 26 && buffer[7] === 10
+	},
+	{
+		mime: "image/jpeg",
+		matches: (buffer) => buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255
+	},
+	{
+		mime: "image/webp",
+		matches: (buffer) => buffer.length >= 12 && buffer.subarray(0, 4).toString("ascii") === "RIFF" && buffer.subarray(8, 12).toString("ascii") === "WEBP"
+	},
+	{
+		mime: "image/gif",
+		matches: (buffer) => buffer.length >= 6 && (buffer.subarray(0, 6).toString("ascii") === "GIF87a" || buffer.subarray(0, 6).toString("ascii") === "GIF89a")
+	}
+];
+function startsWithDataUrl(value) {
+	return value.slice(0, 5).toLowerCase() === DATA_URL_PREFIX;
+}
+function canonicalizeBase64(base64) {
+	let cleaned = "";
+	let padding = 0;
+	let sawPadding = false;
+	for (let i = 0; i < base64.length; i += 1) {
+		const code = base64.charCodeAt(i);
+		if (code <= 32) continue;
+		if (code === 61) {
+			padding += 1;
+			if (padding > 2) return;
+			sawPadding = true;
+			cleaned += "=";
+			continue;
+		}
+		if (sawPadding || !(code >= 65 && code <= 90 || code >= 97 && code <= 122 || code >= 48 && code <= 57 || code === 43 || code === 47)) return;
+		cleaned += base64[i];
+	}
+	if (!cleaned || cleaned.length % 4 !== 0) return;
+	return cleaned;
+}
+function sniffImageMime(buffer) {
+	return IMAGE_SIGNATURES.find((signature) => signature.matches(buffer))?.mime;
+}
+function parseImageDataUrl(value) {
+	if (!startsWithDataUrl(value)) return {
+		metadata: [],
+		payload: value
+	};
+	const commaIndex = value.indexOf(",");
+	if (commaIndex < 0) return;
+	return {
+		metadata: value.slice(5, commaIndex).split(";").map((part) => part.trim()),
+		payload: value.slice(commaIndex + 1)
+	};
+}
+function metadataAllowsImageBase64(metadata) {
+	const [mimeType, ...options] = metadata;
+	return mimeType !== void 0 && mimeType.toLowerCase().startsWith("image/") && options.some((part) => part.toLowerCase() === "base64");
+}
+function sanitizeInlineImageDataUrl(imageUrl) {
+	const parsed = parseImageDataUrl(imageUrl);
+	if (!parsed) return;
+	if (parsed.metadata.length === 0) return imageUrl;
+	if (!metadataAllowsImageBase64(parsed.metadata)) return;
+	const canonicalPayload = canonicalizeBase64(parsed.payload);
+	if (!canonicalPayload) return;
+	const sniffedMimeType = sniffImageMime(Buffer.from(canonicalPayload, "base64"));
+	if (!sniffedMimeType) return;
+	return `data:${sniffedMimeType};base64,${canonicalPayload}`;
+}
+function invalidInlineImageText(label) {
+	return `[${label}] ${IMAGE_OMITTED_TEXT}`;
+}
+function isRecord$1(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function sanitizeImageContentRecord(record, label) {
+	if (record.type === "image" && typeof record.data === "string") {
+		const mimeType = typeof record.mimeType === "string" ? record.mimeType : "image/png";
+		const imageUrl = sanitizeInlineImageDataUrl(`data:${mimeType};base64,${record.data}`);
+		if (!imageUrl) return {
+			type: "text",
+			text: invalidInlineImageText(label)
+		};
+		const commaIndex = imageUrl.indexOf(",");
+		const mime = imageUrl.slice(5, commaIndex).split(";")[0] ?? mimeType;
+		return {
+			...record,
+			mimeType: mime,
+			data: imageUrl.slice(commaIndex + 1)
+		};
+	}
+	if (record.type === "inputImage" && typeof record.imageUrl === "string") {
+		const imageUrl = sanitizeInlineImageDataUrl(record.imageUrl);
+		return imageUrl ? {
+			...record,
+			imageUrl
+		} : {
+			type: "inputText",
+			text: invalidInlineImageText(label)
+		};
+	}
+	if (record.type === "input_image" && typeof record.image_url === "string") {
+		const imageUrl = sanitizeInlineImageDataUrl(record.image_url);
+		return imageUrl ? {
+			...record,
+			image_url: imageUrl
+		} : {
+			type: "input_text",
+			text: invalidInlineImageText(label)
+		};
+	}
+}
+function sanitizeCodexHistoryImagePayloads(value, label) {
+	if (Array.isArray(value)) return value.map((entry) => sanitizeCodexHistoryImagePayloads(entry, label));
+	if (!isRecord$1(value)) return value;
+	const imageRecord = sanitizeImageContentRecord(value, label);
+	if (imageRecord) return imageRecord;
+	const next = {};
+	for (const [key, child] of Object.entries(value)) next[key] = sanitizeCodexHistoryImagePayloads(child, label);
+	return next;
+}
+const MAX_SERIALIZED_ERROR_MESSAGE_LENGTH = 500;
+var CodexAppInventoryCache = class {
+	constructor(options = {}) {
+		this.entries = /* @__PURE__ */ new Map();
+		this.inFlight = /* @__PURE__ */ new Map();
+		this.refreshTokens = /* @__PURE__ */ new Map();
+		this.diagnostics = /* @__PURE__ */ new Map();
+		this.revision = 0;
+		this.ttlMs = options.ttlMs ?? 36e5;
+	}
+	read(params) {
+		const nowMs = params.nowMs ?? Date.now();
+		const entry = this.entries.get(params.key);
+		if (!entry) {
+			const refreshScheduled = params.suppressRefresh ? false : this.scheduleRefresh(params);
+			return {
+				state: "missing",
+				key: params.key,
+				revision: this.revision,
+				refreshScheduled,
+				...this.diagnostics.get(params.key) ? { diagnostic: this.diagnostics.get(params.key) } : {}
+			};
+		}
+		const state = entry.invalidated || entry.expiresAtMs <= nowMs ? "stale" : "fresh";
+		const refreshScheduled = state === "fresh" && !params.forceRefetch ? false : this.scheduleRefresh(params);
+		return {
+			state,
+			key: params.key,
+			revision: entry.revision,
+			snapshot: stripEntryState(entry),
+			refreshScheduled,
+			...entry.lastError ? { diagnostic: entry.lastError } : {}
+		};
+	}
+	refreshNow(params) {
+		return this.refresh(params);
+	}
+	invalidate(key, reason, nowMs = Date.now()) {
+		this.revision += 1;
+		const diagnostic = {
+			message: reason,
+			atMs: nowMs
+		};
+		const entry = this.entries.get(key);
+		if (entry) {
+			entry.invalidated = true;
+			entry.lastError = diagnostic;
+			entry.revision = this.revision;
+		} else this.diagnostics.set(key, diagnostic);
+		return this.revision;
+	}
+	clear() {
+		this.entries.clear();
+		this.inFlight.clear();
+		this.refreshTokens.clear();
+		this.diagnostics.clear();
+		this.revision = 0;
+	}
+	getRevision() {
+		return this.revision;
+	}
+	scheduleRefresh(params) {
+		if (this.inFlight.has(params.key) && !params.forceRefetch) return true;
+		const promise = this.refresh(params);
+		this.inFlight.set(params.key, promise);
+		promise.catch(() => void 0);
+		return true;
+	}
+	async refresh(params) {
+		const existing = this.inFlight.get(params.key);
+		if (existing && !params.forceRefetch) return existing;
+		const refreshToken = (this.refreshTokens.get(params.key) ?? 0) + 1;
+		this.refreshTokens.set(params.key, refreshToken);
+		const promise = this.refreshUncoalesced(params, refreshToken);
+		this.inFlight.set(params.key, promise);
+		try {
+			return await promise;
+		} finally {
+			if (this.inFlight.get(params.key) === promise) this.inFlight.delete(params.key);
+		}
+	}
+	async refreshUncoalesced(params, refreshToken) {
+		const nowMs = params.nowMs ?? Date.now();
+		try {
+			const apps = await listAllApps(params.request, params.forceRefetch ?? false);
+			this.revision += 1;
+			const snapshot = {
+				key: params.key,
+				apps,
+				fetchedAtMs: nowMs,
+				expiresAtMs: nowMs + this.ttlMs,
+				revision: this.revision
+			};
+			if (this.refreshTokens.get(params.key) === refreshToken) {
+				this.entries.set(params.key, {
+					...snapshot,
+					invalidated: false
+				});
+				this.diagnostics.delete(params.key);
+			}
+			return snapshot;
+		} catch (error) {
+			const diagnostic = {
+				message: sanitizeErrorMessage(error instanceof Error ? error.message : String(error)),
+				atMs: nowMs
+			};
+			this.diagnostics.set(params.key, diagnostic);
+			const entry = this.entries.get(params.key);
+			if (entry) entry.lastError = diagnostic;
+			embeddedAgentLog.warn("codex app inventory refresh failed", {
+				forceRefetch: params.forceRefetch === true,
+				keyFingerprint: fingerprintInventoryCacheKey(params.key),
+				error: serializeCodexAppInventoryError(error)
+			});
+			throw error;
+		}
+	}
+};
+function serializeCodexAppInventoryError(error) {
+	const record = isRecord(error) ? error : void 0;
+	const data = record && "data" in record ? redactErrorData(record.data) : void 0;
+	return {
+		name: error instanceof Error ? error.name : typeof record?.name === "string" ? record.name : void 0,
+		message: sanitizeErrorMessage(error instanceof Error ? error.message : String(error)),
+		...typeof record?.code === "number" ? { code: record.code } : {},
+		...data !== void 0 ? { data } : {}
+	};
+}
+const defaultCodexAppInventoryCache = new CodexAppInventoryCache();
+function buildCodexAppInventoryCacheKey(input) {
+	return JSON.stringify({
+		codexHome: input.codexHome ?? null,
+		endpoint: input.endpoint ?? null,
+		authProfileId: input.authProfileId ?? null,
+		accountId: input.accountId ?? null,
+		envApiKeyFingerprint: input.envApiKeyFingerprint ?? null,
+		appServerVersion: input.appServerVersion ?? null
+	});
+}
+async function listAllApps(request, forceRefetch) {
+	const apps = [];
+	let cursor;
+	do {
+		const response = await request("app/list", {
+			cursor,
+			limit: 100,
+			forceRefetch
+		});
+		apps.push(...response.data);
+		cursor = response.nextCursor;
+	} while (cursor);
+	return apps;
+}
+function stripEntryState(entry) {
+	const { invalidated: _invalidated, ...snapshot } = entry;
+	return snapshot;
+}
+function fingerprintInventoryCacheKey(key) {
+	let hash = 0;
+	for (let index = 0; index < key.length; index += 1) hash = hash * 31 + key.charCodeAt(index) >>> 0;
+	return hash.toString(16).padStart(8, "0");
+}
+function isRecord(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function redactErrorData(value, depth = 0) {
+	if (value === void 0) return;
+	if (value === null || typeof value === "boolean" || typeof value === "number") return value;
+	if (depth > 6) return "[truncated]";
+	if (Array.isArray(value)) return value.map((entry) => redactErrorData(entry, depth + 1) ?? null);
+	if (isRecord(value)) {
+		const redacted = {};
+		for (const [key, entry] of Object.entries(value)) redacted[key] = isSensitiveErrorDataKey(key) ? "<redacted>" : redactErrorData(entry, depth + 1) ?? null;
+		return redacted;
+	}
+	if (typeof value === "string" && value.length > 500) return `${value.slice(0, 500)}...`;
+	if (typeof value === "string") return value;
+	if (typeof value === "bigint") return value.toString();
+	if (typeof value === "symbol") return value.description ? `Symbol(${value.description})` : "Symbol()";
+	if (typeof value === "function") return value.name ? `[function ${value.name}]` : "[function]";
+	return "[unserializable]";
+}
+function sanitizeErrorMessage(message) {
+	const htmlStart = message.search(/<html[\s>]/i);
+	const redacted = (htmlStart >= 0 ? `${message.slice(0, htmlStart).trimEnd()} [HTML response body omitted]` : message).replace(/([?&][^=\s"'<>]*(?:api[_-]?key|authorization|cookie|credential|password|secret|token|tk)[^=\s"'<>]*=)[^&\s"'<>]+/gi, "$1<redacted>");
+	return redacted.length > MAX_SERIALIZED_ERROR_MESSAGE_LENGTH ? `${redacted.slice(0, MAX_SERIALIZED_ERROR_MESSAGE_LENGTH)}...` : redacted;
+}
+function isSensitiveErrorDataKey(key) {
+	return /api[_-]?key|authorization|cookie|credential|password|secret|token/i.test(key);
+}
+//#endregion
+//#region extensions/codex/src/app-server/plugin-inventory.ts
+async function readCodexPluginInventory(params) {
+	const policy = params.policy ?? resolveCodexPluginsPolicy(params.pluginConfig);
+	if (!policy.enabled) return {
+		policy,
+		records: [],
+		diagnostics: [{
+			code: "disabled",
+			message: "Native Codex plugin support is disabled."
+		}]
+	};
+	const appInventory = readCachedAppInventory(params);
+	const marketplaceEntry = (await params.request("plugin/list", { cwds: [] })).marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
+	if (!marketplaceEntry) return {
+		policy,
+		records: [],
+		diagnostics: policy.pluginPolicies.filter((pluginPolicy) => pluginPolicy.enabled).map((pluginPolicy) => ({
+			code: "marketplace_missing",
+			plugin: pluginPolicy,
+			message: `Codex marketplace ${CODEX_PLUGINS_MARKETPLACE_NAME} was not found.`
+		})),
+		...appInventory ? { appInventory } : {}
+	};
+	const marketplace = marketplaceRef(marketplaceEntry);
+	const diagnostics = [];
+	const records = [];
+	if (appInventory?.state === "missing") diagnostics.push({
+		code: "app_inventory_missing",
+		message: "Cached Codex app inventory is missing; plugin apps are excluded for this setup."
+	});
+	else if (appInventory?.state === "stale") diagnostics.push({
+		code: "app_inventory_stale",
+		message: "Cached Codex app inventory is stale; using stale app readiness and refreshing."
+	});
+	for (const pluginPolicy of policy.pluginPolicies) {
+		if (!pluginPolicy.enabled) continue;
+		const summary = findPluginSummary(marketplaceEntry, pluginPolicy.pluginName);
+		if (!summary) {
+			diagnostics.push({
+				code: "plugin_missing",
+				plugin: pluginPolicy,
+				message: `${pluginPolicy.pluginName} was not found in ${CODEX_PLUGINS_MARKETPLACE_NAME}.`
+			});
+			continue;
+		}
+		const detail = await readPluginDetail(params, marketplace, pluginPolicy, diagnostics);
+		const ownedAppIds = detail?.apps.map((app) => app.id).filter(Boolean).toSorted() ?? [];
+		const appOwnership = resolveAppOwnership({
+			detail,
+			appInventory,
+			summary
+		});
+		if (appOwnership === "ambiguous") diagnostics.push({
+			code: "app_ownership_ambiguous",
+			plugin: pluginPolicy,
+			message: `${pluginPolicy.pluginName} has only display-name app matches; apps are not exposed until ownership is stable.`
+		});
+		if (summary.installed && !summary.enabled) diagnostics.push({
+			code: "plugin_disabled",
+			plugin: pluginPolicy,
+			message: `${pluginPolicy.pluginName} is installed in Codex but disabled.`
+		});
+		const apps = resolveOwnedApps({
+			pluginPolicy,
+			detail,
+			appInventory
+		});
+		records.push({
+			policy: pluginPolicy,
+			summary,
+			...detail ? { detail } : {},
+			activationRequired: !summary.installed || !summary.enabled,
+			authRequired: apps.some((app) => app.needsAuth || !app.accessible),
+			appOwnership,
+			ownedAppIds,
+			apps
+		});
+	}
+	return {
+		policy,
+		marketplace,
+		records,
+		diagnostics,
+		...appInventory ? { appInventory } : {}
+	};
+}
+function findOpenAiCuratedPluginSummary(listed, pluginName) {
+	const marketplaceEntry = listed.marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
+	if (!marketplaceEntry) return;
+	const summary = findPluginSummary(marketplaceEntry, pluginName);
+	return summary ? {
+		marketplace: marketplaceRef(marketplaceEntry),
+		summary
+	} : void 0;
+}
+function pluginReadParams(marketplace, pluginName) {
+	return {
+		...marketplace.path ? { marketplacePath: marketplace.path } : {},
+		...marketplace.remoteMarketplaceName ? { remoteMarketplaceName: marketplace.remoteMarketplaceName } : {},
+		pluginName
+	};
+}
+function readCachedAppInventory(params) {
+	if (!params.appCache || !params.appCacheKey) return;
+	const request = async (method, requestParams) => await params.request(method, requestParams);
+	return params.appCache.read({
+		key: params.appCacheKey,
+		request,
+		nowMs: params.nowMs,
+		suppressRefresh: params.suppressAppInventoryRefresh
+	});
+}
+async function readPluginDetail(params, marketplace, pluginPolicy, diagnostics) {
+	if (params.readPluginDetails === false) return;
+	try {
+		return (await params.request("plugin/read", pluginReadParams(marketplace, pluginPolicy.pluginName))).plugin;
+	} catch (error) {
+		diagnostics.push({
+			code: "plugin_detail_unavailable",
+			plugin: pluginPolicy,
+			message: `${pluginPolicy.pluginName} detail unavailable: ${error instanceof Error ? error.message : String(error)}`
+		});
+		return;
+	}
+}
+function resolveAppOwnership(params) {
+	if (params.detail && params.detail.apps.length > 0) return "proven";
+	return (params.appInventory?.snapshot?.apps ?? []).filter((app) => app.pluginDisplayNames.some((displayName) => displayName === params.summary.name)).length > 0 ? "ambiguous" : "none";
+}
+function resolveOwnedApps(params) {
+	const detailApps = params.detail?.apps ?? [];
+	if (detailApps.length === 0) return [];
+	if (params.appInventory?.state === "missing") {
+		embeddedAgentLog.warn("codex plugin inventory missing app inventory for detail apps", {
+			configKey: params.pluginPolicy.configKey,
+			pluginName: params.pluginPolicy.pluginName,
+			appIds: detailApps.map((app) => app.id).toSorted()
+		});
+		return [];
+	}
+	const appInfoById = new Map((params.appInventory?.snapshot?.apps ?? []).map((app) => [app.id, app]));
+	return detailApps.map((app) => {
+		const info = appInfoById.get(app.id);
+		if (!info) return {
+			id: app.id,
+			name: app.name,
+			accessible: false,
+			enabled: false,
+			needsAuth: true
+		};
+		return {
+			id: app.id,
+			name: app.name,
+			accessible: info.isAccessible,
+			enabled: info.isEnabled,
+			needsAuth: app.needsAuth || !info.isAccessible
+		};
+	}).toSorted((left, right) => left.id.localeCompare(right.id));
+}
+function findPluginSummary(marketplace, pluginName) {
+	return marketplace.plugins.find((plugin) => plugin.name === pluginName || plugin.id === pluginName || plugin.id === `${pluginName}@${marketplace.name}` || pluginNameFromPluginId(plugin.id, marketplace.name) === pluginName);
+}
+function pluginNameFromPluginId(pluginId, marketplaceName) {
+	const trimmed = pluginId.trim();
+	if (!trimmed) return;
+	const marketplaceSuffix = `@${marketplaceName}`;
+	return (trimmed.endsWith(marketplaceSuffix) ? trimmed.slice(0, -marketplaceSuffix.length) : trimmed).split("/").at(-1)?.trim() || void 0;
+}
+function marketplaceRef(marketplace) {
+	return {
+		name: CODEX_PLUGINS_MARKETPLACE_NAME,
+		...marketplace.path ? { path: marketplace.path } : {},
+		...!marketplace.path ? { remoteMarketplaceName: marketplace.name } : {}
+	};
+}
+//#endregion
+//#region extensions/codex/src/app-server/plugin-activation.ts
+async function ensureCodexPluginActivation(params) {
+	if (params.identity.marketplaceName !== "openai-curated") return activationFailure(params.identity, "marketplace_missing", { message: "Only " + CODEX_PLUGINS_MARKETPLACE_NAME + " plugins can be activated." });
+	const listed = await params.request("plugin/list", { cwds: [] });
+	const resolved = findOpenAiCuratedPluginSummary(listed, params.identity.pluginName);
+	if (!resolved) {
+		if (!listed.marketplaces.some((marketplace) => marketplace.name === "openai-curated")) return activationFailure(params.identity, "marketplace_missing", { message: `Codex marketplace ${CODEX_PLUGINS_MARKETPLACE_NAME} was not found.` });
+		return activationFailure(params.identity, "plugin_missing", { message: `${params.identity.pluginName} was not found in ${CODEX_PLUGINS_MARKETPLACE_NAME}.` });
+	}
+	if (resolved.summary.installed && resolved.summary.enabled && !params.installEvenIfActive) return {
+		identity: params.identity,
+		ok: true,
+		reason: "already_active",
+		installAttempted: false,
+		marketplace: resolved.marketplace,
+		diagnostics: []
+	};
+	const installResponse = await params.request("plugin/install", pluginReadParams(resolved.marketplace, params.identity.pluginName));
+	const refreshDiagnostics = [];
+	let refreshFailed = false;
+	try {
+		const refreshResult = await refreshCodexPluginRuntimeState({
+			request: params.request,
+			appCache: params.appCache,
+			appCacheKey: params.appCacheKey
+		});
+		refreshDiagnostics.push(...refreshResult.diagnostics);
+	} catch (error) {
+		refreshFailed = true;
+		refreshDiagnostics.push({ message: `Codex plugin runtime refresh failed after install: ${error instanceof Error ? error.message : String(error)}` });
+	}
+	const authRequired = installResponse.appsNeedingAuth.length > 0;
+	return {
+		identity: params.identity,
+		ok: !authRequired && !refreshFailed,
+		reason: refreshFailed ? "refresh_failed" : authRequired ? "auth_required" : resolved.summary.installed && resolved.summary.enabled ? "already_active" : "installed",
+		installAttempted: true,
+		marketplace: resolved.marketplace,
+		installResponse,
+		diagnostics: [...refreshDiagnostics, ...installResponse.appsNeedingAuth.map((app) => ({ message: `${app.name} requires app authentication before plugin tools are exposed.` }))]
+	};
+}
+async function refreshCodexPluginRuntimeState(params) {
+	const diagnostics = [];
+	await params.request("plugin/list", { cwds: [] });
+	await params.request("skills/list", {
+		cwds: [],
+		forceReload: true
+	});
+	try {
+		await params.request("hooks/list", { cwds: [] });
+	} catch (error) {
+		diagnostics.push({ message: `Codex hooks refresh skipped: ${error instanceof Error ? error.message : String(error)}` });
+	}
+	await params.request("config/mcpServer/reload", void 0);
+	if (params.appCache && params.appCacheKey) {
+		params.appCache.invalidate(params.appCacheKey, "Codex plugin activation changed app inventory");
+		const request = async (method, requestParams) => await params.request(method, requestParams);
+		try {
+			await params.appCache.refreshNow({
+				key: params.appCacheKey,
+				request,
+				forceRefetch: true
+			});
+		} catch (error) {
+			diagnostics.push({ message: `Codex app inventory refresh skipped: ${error instanceof Error ? error.message : String(error)}` });
+		}
+	}
+	return { diagnostics };
+}
+function activationFailure(identity, reason, diagnostic) {
+	return {
+		identity,
+		ok: false,
+		reason,
+		installAttempted: false,
+		diagnostics: [diagnostic]
+	};
+}
+//#endregion
 //#region extensions/codex/src/app-server/plugin-thread-config.ts
 const CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION = 1;
 const CODEX_PLUGIN_THREAD_CONFIG_FINGERPRINT_VERSION = 1;
@@ -1091,6 +1088,7 @@ async function startOrResumeThread(params) {
 	const contextEngineBinding = buildContextEngineBinding(params.params, params.contextEngineProjection);
 	const userMcpServersConfigPatch = params.userMcpServersEnabled === false ? void 0 : buildCodexUserMcpServersThreadConfigPatch(params.params.config, { agentId: params.agentId ?? params.params.agentId });
 	const userMcpServersFingerprint = fingerprintUserMcpServersConfigPatch(userMcpServersConfigPatch);
+	const environmentSelectionFingerprint = fingerprintEnvironmentSelection(params.environmentSelection);
 	let binding = await readCodexAppServerBinding(params.params.sessionFile, {
 		authProfileStore: params.params.authProfileStore,
 		agentDir: params.params.agentDir,
@@ -1127,6 +1125,11 @@ async function startOrResumeThread(params) {
 		await clearCodexAppServerBinding(params.params.sessionFile);
 		binding = void 0;
 	}
+	if (binding?.threadId && binding.environmentSelectionFingerprint !== environmentSelectionFingerprint) {
+		embeddedAgentLog.debug("codex app-server environment selection changed; starting a new thread", { threadId: binding.threadId });
+		await clearCodexAppServerBinding(params.params.sessionFile);
+		binding = void 0;
+	}
 	if (binding?.threadId && params.mcpServersFingerprintEvaluated === true && binding.mcpServersFingerprint !== params.mcpServersFingerprint) {
 		embeddedAgentLog.debug("codex app-server MCP config changed; starting a new thread", { threadId: binding.threadId });
 		await clearCodexAppServerBinding(params.params.sessionFile);
@@ -1208,6 +1211,7 @@ async function startOrResumeThread(params) {
 			pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 			pluginAppPolicyContext: binding.pluginAppPolicyContext,
 			contextEngine: contextEngineBinding,
+			environmentSelectionFingerprint,
 			createdAt: binding.createdAt
 		}, {
 			authProfileStore: params.params.authProfileStore,
@@ -1237,6 +1241,7 @@ async function startOrResumeThread(params) {
 			pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 			pluginAppPolicyContext: binding.pluginAppPolicyContext,
 			contextEngine: contextEngineBinding,
+			environmentSelectionFingerprint,
 			lifecycle: { action: "resumed" }
 		};
 	} catch (error) {
@@ -1253,7 +1258,8 @@ async function startOrResumeThread(params) {
 		developerInstructions: params.developerInstructions,
 		config,
 		nativeCodeModeEnabled: params.nativeCodeModeEnabled,
-		nativeCodeModeOnlyEnabled: params.nativeCodeModeOnlyEnabled
+		nativeCodeModeOnlyEnabled: params.nativeCodeModeOnlyEnabled,
+		environmentSelection: params.environmentSelection
 	})));
 	const modelProvider = resolveCodexAppServerModelProvider({
 		provider: params.params.provider,
@@ -1278,6 +1284,7 @@ async function startOrResumeThread(params) {
 			pluginAppsInputFingerprint: pluginThreadConfig?.inputFingerprint,
 			pluginAppPolicyContext: pluginThreadConfig?.policyContext,
 			contextEngine: contextEngineBinding,
+			environmentSelectionFingerprint,
 			createdAt
 		}, {
 			authProfileStore: params.params.authProfileStore,
@@ -1309,6 +1316,7 @@ async function startOrResumeThread(params) {
 		pluginAppsInputFingerprint: pluginThreadConfig?.inputFingerprint,
 		pluginAppPolicyContext: pluginThreadConfig?.policyContext,
 		contextEngine: contextEngineBinding,
+		environmentSelectionFingerprint,
 		createdAt,
 		updatedAt: createdAt,
 		lifecycle: {
@@ -1398,7 +1406,7 @@ function buildThreadStartParams(params, options) {
 			nativeCodeModeEnabled: options.nativeCodeModeEnabled,
 			nativeCodeModeOnlyEnabled: options.nativeCodeModeOnlyEnabled
 		}),
-		...options.nativeCodeModeEnabled === false ? { environments: [] } : {},
+		...resolveCodexThreadEnvironmentSelection(options),
 		developerInstructions: options.developerInstructions ?? buildDeveloperInstructions(params, { dynamicTools: options.dynamicTools }),
 		dynamicTools: options.dynamicTools,
 		experimentalRawEvents: true,
@@ -1460,9 +1468,18 @@ function buildTurnStartParams(params, options) {
 		model: params.modelId,
 		...options.appServer.serviceTier ? { serviceTier: options.appServer.serviceTier } : {},
 		effort: resolveReasoningEffort(params.thinkLevel, params.modelId),
-		collaborationMode: buildTurnCollaborationMode(params, { heartbeatCollaborationInstructions: options.heartbeatCollaborationInstructions })
+		...options.environmentSelection ? { environments: options.environmentSelection } : {},
+		collaborationMode: buildTurnCollaborationMode(params, {
+			turnScopedDeveloperInstructions: options.turnScopedDeveloperInstructions,
+			heartbeatCollaborationInstructions: options.heartbeatCollaborationInstructions
+		})
 	};
 }
+function resolveCodexThreadEnvironmentSelection(options) {
+	if (options.nativeCodeModeEnabled === false) return { environments: [] };
+	if (options.environmentSelection) return { environments: options.environmentSelection };
+	return {};
+}
 function buildTurnCollaborationMode(params, options = {}) {
 	return {
 		mode: "default",
@@ -1474,10 +1491,26 @@ function buildTurnCollaborationMode(params, options = {}) {
 	};
 }
 function buildTurnScopedCollaborationInstructions(params, options = {}) {
-	if (params.trigger === "cron") return buildCronCollaborationInstructions();
-	if (params.trigger === "heartbeat") return joinPresentSections(buildHeartbeatCollaborationInstructions(), options.heartbeatCollaborationInstructions);
+	if (params.trigger === "cron") return joinPresentSections(buildCronCollaborationInstructions(), options.turnScopedDeveloperInstructions);
+	if (params.trigger === "heartbeat") return joinPresentSections(buildHeartbeatCollaborationInstructions(), options.turnScopedDeveloperInstructions, options.heartbeatCollaborationInstructions);
+	if (options.turnScopedDeveloperInstructions?.trim()) return joinPresentSections(buildDefaultCollaborationInstructions(), options.turnScopedDeveloperInstructions);
 	return null;
 }
+function buildDefaultCollaborationInstructions() {
+	return [
+		"# Collaboration Mode: Default",
+		"",
+		"You are now in Default mode. Any previous instructions for other modes (e.g. Plan mode) are no longer active.",
+		"",
+		"Your active mode changes only when new developer instructions with a different `<collaboration_mode>...</collaboration_mode>` change it; user requests or tool descriptions do not change mode by themselves. Known mode names are Default and Plan.",
+		"",
+		"## request_user_input availability",
+		"",
+		"Use the `request_user_input` tool only when it is listed in the available tools for this turn.",
+		"",
+		"In Default mode, strongly prefer making reasonable assumptions and executing the user's request rather than stopping to ask questions. If you absolutely must ask a question because the answer cannot be discovered from local context and a reasonable assumption would be risky, ask the user directly with a concise plain-text question. Never write a multiple choice question as a textual assistant message."
+	].join("\n");
+}
 function buildCronCollaborationInstructions() {
 	return [
 		"This is an OpenClaw cron automation turn. Apply these instructions only to this scheduled job; ordinary chat turns should stay in Codex Default mode.",
@@ -1508,11 +1541,14 @@ function fingerprintDynamicTools(dynamicTools) {
 function fingerprintUserMcpServersConfigPatch(configPatch) {
 	return configPatch ? JSON.stringify(stabilizeJsonValue(configPatch)) : void 0;
 }
+function fingerprintEnvironmentSelection(environments) {
+	return environments ? JSON.stringify(environments.map(stabilizeJsonValue)) : void 0;
+}
 function fingerprintDynamicToolSpec(tool) {
 	if (!isJsonObject(tool)) return stabilizeJsonValue(tool);
 	const stable = {};
 	for (const [key, child] of Object.entries(tool).toSorted(([left], [right]) => left.localeCompare(right))) {
-		if (key === "description") continue;
+		if (key === "description" || key === "deferLoading" || key === "namespace") continue;
 		stable[key] = stabilizeJsonValue(child);
 	}
 	return stable;
@@ -1589,4 +1625,4 @@ function resolveReasoningEffort(thinkLevel, modelId) {
 	return null;
 }
 //#endregion
-export { isForcedPrivateQaCodexRuntime as C, filterCodexDynamicTools as S, resolveCodexDynamicToolsLoading as T, projectContextEngineAssemblyForCodex as _, buildThreadResumeParams as a, createCodexDynamicToolBridge as b, codexDynamicToolsFingerprint as c, resolveReasoningEffort as d, startOrResumeThread as f, shouldBuildCodexPluginThreadConfig as g, mergeCodexThreadConfigs as h, buildDeveloperInstructions as i, isContextEngineBindingCompatible as l, buildCodexPluginThreadConfigInputFingerprint as m, buildCodexRuntimeThreadConfig as n, buildThreadStartParams as o, buildCodexPluginThreadConfig as p, buildContextEngineBinding as r, buildTurnStartParams as s, areCodexDynamicToolFingerprintsCompatible as t, resolveCodexAppServerModelProvider as u, resolveCodexContextEngineProjectionMaxChars as v, normalizeCodexDynamicToolName as w, sanitizeCodexHistoryImagePayloads as x, resolveCodexContextEngineProjectionReserveTokens as y };
+export { sanitizeCodexHistoryImagePayloads as C, resolveCodexContextEngineProjectionMaxChars as D, projectContextEngineAssemblyForCodex as E, resolveCodexContextEngineProjectionReserveTokens as O, invalidInlineImageText as S, DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS as T, shouldBuildCodexPluginThreadConfig as _, buildThreadResumeParams as a, buildCodexAppInventoryCacheKey as b, buildTurnStartParams as c, resolveCodexAppServerModelProvider as d, resolveReasoningEffort as f, mergeCodexThreadConfigs as g, buildCodexPluginThreadConfigInputFingerprint as h, buildDeveloperInstructions as i, codexDynamicToolsFingerprint as l, buildCodexPluginThreadConfig as m, buildCodexRuntimeThreadConfig as n, buildThreadStartParams as o, startOrResumeThread as p, buildContextEngineBinding as r, buildTurnCollaborationMode as s, areCodexDynamicToolFingerprintsCompatible as t, isContextEngineBindingCompatible as u, ensureCodexPluginActivation as v, sanitizeInlineImageDataUrl as w, defaultCodexAppInventoryCache as x, pluginReadParams as y };