@openclaw/codex 2026.5.26-beta.1 → 2026.5.26

package/dist/client-factory-fW4Hh9q_.js

@@ -0,0 +1,15 @@
+//#region extensions/codex/src/app-server/client-factory.ts
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-8kIrP817.js").then((n) => n.s).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+	startOptions,
+	authProfileId,
+	agentDir,
+	config
+}));
+const defaultLeasedCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-8kIrP817.js").then((n) => n.s).then(({ getLeasedSharedCodexAppServerClient }) => getLeasedSharedCodexAppServerClient({
+	startOptions,
+	authProfileId,
+	agentDir,
+	config
+}));
+//#endregion
+export { defaultLeasedCodexAppServerClientFactory as n, defaultCodexAppServerClientFactory as t };

package/dist/{command-handlers-D4C2y46B.js → command-handlers-hYTtzAdy.js}

@@ -1,12 +1,12 @@
 import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-ASKu9eOY.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-_XwpqjR8.js";
 import { l as isJsonObject } from "./client-BVK_jmHW.js";
 import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
-import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-DmBkYLPy.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-OaxhR46w.js";
 import { _ as summarizeCodexAccountUsage, a as buildHelp, c as formatCodexStatus, d as formatModels, f as formatThreads, l as formatComputerUseStatus, o as formatAccount, p as readString$1, s as formatCodexDisplayText, u as formatList } from "./notification-correlation-YINts3PA.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-BnnjOmgs.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CDDlIBhY.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-OjYqDwhw.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-DSdj1hJY.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
 import crypto from "node:crypto";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/{compact-CRI0BEc_.js → compact-C_1JAB4C.js}

@@ -1,4 +1,4 @@
-import { t as defaultCodexAppServerClientFactory } from "./client-factory-CaOpX89B.js";
+import { t as defaultCodexAppServerClientFactory } from "./client-factory-fW4Hh9q_.js";
 import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
 import { i as readCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-CTnEWuor.js";
@@ -61,6 +61,29 @@ function readAgentIdFromSessionKey(sessionKey) {
 	return parts[1]?.trim() || void 0;
 }
 async function compactCodexNativeThread(params, options = {}) {
+	if (params.trigger !== "manual") {
+		embeddedAgentLog.info("skipping codex app-server compaction for non-manual trigger", {
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			trigger: params.trigger
+		});
+		return {
+			ok: true,
+			compacted: false,
+			reason: "codex app-server owns automatic compaction",
+			result: {
+				summary: "",
+				firstKeptEntryId: "",
+				tokensBefore: params.currentTokenCount ?? 0,
+				details: {
+					backend: "codex-app-server",
+					skipped: true,
+					reason: "non_manual_trigger",
+					trigger: params.trigger ?? "unknown"
+				}
+			}
+		};
+	}
 	const nativeExecutionBlock = resolveCodexNativeExecutionBlock({
 		config: params.config,
 		sessionKey: params.sandboxSessionKey ?? params.sessionKey,

package/dist/{computer-use-CDDlIBhY.js → computer-use-DSdj1hJY.js}

@@ -1,5 +1,5 @@
 import { l as resolveCodexAppServerRuntimeOptions, u as resolveCodexComputerUseConfig } from "./config-0-UN67Qg.js";
-import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-DmBkYLPy.js";
+import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-OaxhR46w.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{conversation-binding-BnnjOmgs.js → conversation-binding-OjYqDwhw.js}

@@ -1,10 +1,10 @@
 import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-0-UN67Qg.js";
 import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-BapIT9Qs.js";
+import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-CUXQezJL.js";
 import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
-import { r as CODEX_CONTROL_METHODS } from "./request-DmBkYLPy.js";
+import { r as CODEX_CONTROL_METHODS } from "./request-OaxhR46w.js";
 import { i as readCodexNotificationTurnId, r as readCodexNotificationThreadId, s as formatCodexDisplayText } from "./notification-correlation-YINts3PA.js";
-import { i as getSharedCodexAppServerClient, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-Fou5nAyt.js";
+import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient } from "./shared-client-8kIrP817.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
 import os from "node:os";
 import { asOptionalRecord, isRecord, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -98,15 +98,20 @@ async function stopCodexConversationTurn(params) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
 	const lookup = buildBindingLookup(params);
 	const binding = await readCodexAppServerBinding(params.sessionFile, lookup);
-	await (await getSharedCodexAppServerClient({
+	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
 		authProfileId: binding?.authProfileId,
 		...lookup
-	})).request("turn/interrupt", {
-		threadId: active.threadId,
-		turnId: active.turnId
-	}, { timeoutMs: runtime.requestTimeoutMs });
+	});
+	try {
+		await client.request("turn/interrupt", {
+			threadId: active.threadId,
+			turnId: active.turnId
+		}, { timeoutMs: runtime.requestTimeoutMs });
+	} finally {
+		releaseLeasedSharedCodexAppServerClient(client);
+	}
 	return {
 		stopped: true,
 		message: "Codex stop requested."
@@ -126,20 +131,25 @@ async function steerCodexConversationTurn(params) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
 	const lookup = buildBindingLookup(params);
 	const binding = await readCodexAppServerBinding(params.sessionFile, lookup);
-	await (await getSharedCodexAppServerClient({
+	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
 		authProfileId: binding?.authProfileId,
 		...lookup
-	})).request("turn/steer", {
-		threadId: active.threadId,
-		expectedTurnId: active.turnId,
-		input: [{
-			type: "text",
-			text,
-			text_elements: []
-		}]
-	}, { timeoutMs: runtime.requestTimeoutMs });
+	});
+	try {
+		await client.request("turn/steer", {
+			threadId: active.threadId,
+			expectedTurnId: active.turnId,
+			input: [{
+				type: "text",
+				text,
+				text_elements: []
+			}]
+		}, { timeoutMs: runtime.requestTimeoutMs });
+	} finally {
+		releaseLeasedSharedCodexAppServerClient(client);
+	}
 	return {
 		steered: true,
 		message: "Sent steer message to Codex."
@@ -214,20 +224,25 @@ async function requireThreadBinding(sessionFile, lookup = {}) {
 }
 async function resumeThreadWithOverrides(params) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
-	return await (await getSharedCodexAppServerClient({
+	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
 		authProfileId: params.authProfileId,
 		...buildBindingLookup(params)
-	})).request(CODEX_CONTROL_METHODS.resumeThread, {
-		threadId: params.threadId,
-		...params.model ? { model: params.model } : {},
-		approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
-		sandbox: params.sandbox ?? runtime.sandbox,
-		approvalsReviewer: runtime.approvalsReviewer,
-		...params.serviceTier ? { serviceTier: params.serviceTier } : {},
-		persistExtendedHistory: true
-	}, { timeoutMs: runtime.requestTimeoutMs });
+	});
+	try {
+		return await client.request(CODEX_CONTROL_METHODS.resumeThread, {
+			threadId: params.threadId,
+			...params.model ? { model: params.model } : {},
+			approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
+			sandbox: params.sandbox ?? runtime.sandbox,
+			approvalsReviewer: runtime.approvalsReviewer,
+			...params.serviceTier ? { serviceTier: params.serviceTier } : {},
+			persistExtendedHistory: true
+		}, { timeoutMs: runtime.requestTimeoutMs });
+	} finally {
+		releaseLeasedSharedCodexAppServerClient(client);
+	}
 }
 function buildBindingLookup(params) {
 	const agentDir = params.agentDir?.trim();
@@ -1029,38 +1044,43 @@ async function attachExistingThread(params) {
 		modelProvider: params.modelProvider,
 		...agentLookup
 	});
-	const response = await (await getSharedCodexAppServerClient({
+	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
 		authProfileId: params.authProfileId,
 		...agentLookup
-	})).request(CODEX_CONTROL_METHODS.resumeThread, {
-		threadId: params.threadId,
-		...params.model ? { model: params.model } : {},
-		...modelProvider ? { modelProvider } : {},
-		personality: CODEX_NATIVE_PERSONALITY_NONE,
-		approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
-		approvalsReviewer: runtime.approvalsReviewer,
-		sandbox: params.sandbox ?? runtime.sandbox,
-		...params.serviceTier ?? runtime.serviceTier ? { serviceTier: params.serviceTier ?? runtime.serviceTier } : {},
-		persistExtendedHistory: true
-	}, { timeoutMs: runtime.requestTimeoutMs });
-	const thread = response.thread;
-	const runtimeApprovalPolicy = typeof runtime.approvalPolicy === "string" ? runtime.approvalPolicy : void 0;
-	await writeCodexAppServerBinding(params.sessionFile, {
-		threadId: thread.id,
-		cwd: thread.cwd ?? params.workspaceDir,
-		authProfileId: params.authProfileId,
-		model: response.model ?? params.model,
-		modelProvider: normalizeCodexAppServerBindingModelProvider({
+	});
+	try {
+		const response = await client.request(CODEX_CONTROL_METHODS.resumeThread, {
+			threadId: params.threadId,
+			...params.model ? { model: params.model } : {},
+			...modelProvider ? { modelProvider } : {},
+			personality: CODEX_NATIVE_PERSONALITY_NONE,
+			approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
+			approvalsReviewer: runtime.approvalsReviewer,
+			sandbox: params.sandbox ?? runtime.sandbox,
+			...params.serviceTier ?? runtime.serviceTier ? { serviceTier: params.serviceTier ?? runtime.serviceTier } : {},
+			persistExtendedHistory: true
+		}, { timeoutMs: runtime.requestTimeoutMs });
+		const thread = response.thread;
+		const runtimeApprovalPolicy = typeof runtime.approvalPolicy === "string" ? runtime.approvalPolicy : void 0;
+		await writeCodexAppServerBinding(params.sessionFile, {
+			threadId: thread.id,
+			cwd: thread.cwd ?? params.workspaceDir,
 			authProfileId: params.authProfileId,
-			modelProvider: response.modelProvider ?? params.modelProvider,
-			...agentLookup
-		}),
-		approvalPolicy: params.approvalPolicy ?? runtimeApprovalPolicy,
-		sandbox: params.sandbox ?? runtime.sandbox,
-		serviceTier: params.serviceTier ?? runtime.serviceTier
-	}, { ...agentLookup });
+			model: response.model ?? params.model,
+			modelProvider: normalizeCodexAppServerBindingModelProvider({
+				authProfileId: params.authProfileId,
+				modelProvider: response.modelProvider ?? params.modelProvider,
+				...agentLookup
+			}),
+			approvalPolicy: params.approvalPolicy ?? runtimeApprovalPolicy,
+			sandbox: params.sandbox ?? runtime.sandbox,
+			serviceTier: params.serviceTier ?? runtime.serviceTier
+		}, { ...agentLookup });
+	} finally {
+		releaseLeasedSharedCodexAppServerClient(client);
+	}
 }
 async function createThread(params) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
@@ -1073,39 +1093,44 @@ async function createThread(params) {
 		modelProvider: params.modelProvider,
 		...agentLookup
 	});
-	const response = await (await getSharedCodexAppServerClient({
+	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
 		authProfileId: params.authProfileId,
 		...agentLookup
-	})).request("thread/start", {
-		cwd: params.workspaceDir,
-		...params.model ? { model: params.model } : {},
-		...modelProvider ? { modelProvider } : {},
-		personality: CODEX_NATIVE_PERSONALITY_NONE,
-		approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
-		approvalsReviewer: runtime.approvalsReviewer,
-		sandbox: params.sandbox ?? runtime.sandbox,
-		...params.serviceTier ?? runtime.serviceTier ? { serviceTier: params.serviceTier ?? runtime.serviceTier } : {},
-		developerInstructions: "This Codex thread is bound to an OpenClaw conversation. Answer normally; OpenClaw will deliver your final response back to the conversation.",
-		experimentalRawEvents: true,
-		persistExtendedHistory: true
-	}, { timeoutMs: runtime.requestTimeoutMs });
-	const runtimeApprovalPolicy = typeof runtime.approvalPolicy === "string" ? runtime.approvalPolicy : void 0;
-	await writeCodexAppServerBinding(params.sessionFile, {
-		threadId: response.thread.id,
-		cwd: response.thread.cwd ?? params.workspaceDir,
-		authProfileId: params.authProfileId,
-		model: response.model ?? params.model,
-		modelProvider: normalizeCodexAppServerBindingModelProvider({
+	});
+	try {
+		const response = await client.request("thread/start", {
+			cwd: params.workspaceDir,
+			...params.model ? { model: params.model } : {},
+			...modelProvider ? { modelProvider } : {},
+			personality: CODEX_NATIVE_PERSONALITY_NONE,
+			approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
+			approvalsReviewer: runtime.approvalsReviewer,
+			sandbox: params.sandbox ?? runtime.sandbox,
+			...params.serviceTier ?? runtime.serviceTier ? { serviceTier: params.serviceTier ?? runtime.serviceTier } : {},
+			developerInstructions: "This Codex thread is bound to an OpenClaw conversation. Answer normally; OpenClaw will deliver your final response back to the conversation.",
+			experimentalRawEvents: true,
+			persistExtendedHistory: true
+		}, { timeoutMs: runtime.requestTimeoutMs });
+		const runtimeApprovalPolicy = typeof runtime.approvalPolicy === "string" ? runtime.approvalPolicy : void 0;
+		await writeCodexAppServerBinding(params.sessionFile, {
+			threadId: response.thread.id,
+			cwd: response.thread.cwd ?? params.workspaceDir,
 			authProfileId: params.authProfileId,
-			modelProvider: response.modelProvider ?? params.modelProvider,
-			...agentLookup
-		}),
-		approvalPolicy: params.approvalPolicy ?? runtimeApprovalPolicy,
-		sandbox: params.sandbox ?? runtime.sandbox,
-		serviceTier: params.serviceTier ?? runtime.serviceTier
-	}, { ...agentLookup });
+			model: response.model ?? params.model,
+			modelProvider: normalizeCodexAppServerBindingModelProvider({
+				authProfileId: params.authProfileId,
+				modelProvider: response.modelProvider ?? params.modelProvider,
+				...agentLookup
+			}),
+			approvalPolicy: params.approvalPolicy ?? runtimeApprovalPolicy,
+			sandbox: params.sandbox ?? runtime.sandbox,
+			serviceTier: params.serviceTier ?? runtime.serviceTier
+		}, { ...agentLookup });
+	} finally {
+		releaseLeasedSharedCodexAppServerClient(client);
+	}
 }
 async function runBoundTurn(params) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
@@ -1113,7 +1138,7 @@ async function runBoundTurn(params) {
 	const binding = await readCodexAppServerBinding(params.data.sessionFile, agentLookup);
 	const threadId = binding?.threadId;
 	if (!threadId) throw new Error("bound Codex conversation has no thread binding");
-	const client = await getSharedCodexAppServerClient({
+	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
 		authProfileId: binding.authProfileId,
@@ -1167,6 +1192,7 @@ async function runBoundTurn(params) {
 	} finally {
 		notificationCleanup();
 		requestCleanup();
+		releaseLeasedSharedCodexAppServerClient(client);
 	}
 }
 async function runBoundTurnWithMissingThreadRecovery(params) {

package/dist/{dynamic-tools-BG9ICyU4.js → dynamic-tools-DlEefKNQ.js}

@@ -1,6 +1,6 @@
-import { E as sanitizeInlineImageDataUrl, w as invalidInlineImageText } from "./thread-lifecycle-BapIT9Qs.js";
+import { E as sanitizeInlineImageDataUrl, w as invalidInlineImageText } from "./thread-lifecycle-CUXQezJL.js";
 import { asOptionalRecord, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, extractToolResultMediaArtifact, filterToolResultMediaUrls, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, runAgentHarnessAfterToolCallHook, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, projectRuntimeToolInputSchema, runAgentHarnessAfterToolCallHook, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 //#region extensions/codex/src/app-server/dynamic-tool-profile.ts
 const CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES = [
@@ -47,16 +47,26 @@ const DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS = 16e3;
 function createCodexDynamicToolBridge(params) {
 	const toolResultHookContext = toToolResultHookContext(params.hookContext);
 	const toolResultMaxChars = resolveCodexDynamicToolResultMaxChars(params.hookContext);
-	const tools = params.tools.map((tool) => {
+	const availableProjection = projectCodexDynamicTools(params.tools);
+	const registeredProjection = params.registeredTools ? projectCodexDynamicTools(params.registeredTools) : availableProjection;
+	const availableTools = availableProjection.tools.map(({ tool, inputSchema }) => {
 		if (isToolWrappedWithBeforeToolCallHook(tool)) {
 			setBeforeToolCallDiagnosticsEnabled(tool, false);
-			return tool;
+			return {
+				tool,
+				inputSchema
+			};
 		}
-		return wrapToolWithBeforeToolCallHook(tool, params.hookContext, { emitDiagnostics: false });
+		return {
+			tool: wrapToolWithBeforeToolCallHook(tool, params.hookContext, { emitDiagnostics: false }),
+			inputSchema
+		};
 	});
-	const toolMap = new Map(tools.map((tool) => [tool.name, tool]));
-	const registeredTools = params.registeredTools ?? tools;
+	const toolMap = new Map(availableTools.map(({ tool }) => [tool.name, tool]));
+	const registeredTools = registeredProjection.tools.map(({ tool }) => tool);
 	const registeredToolNames = new Set(registeredTools.map((tool) => tool.name));
+	const quarantinedTools = dedupeQuarantinedDynamicTools([...availableProjection.quarantinedTools, ...registeredProjection.quarantinedTools]);
+	warnQuarantinedDynamicTools(quarantinedTools);
 	const telemetry = {
 		didSendViaMessagingTool: false,
 		messagingToolSentTexts: [],
@@ -64,7 +74,8 @@ function createCodexDynamicToolBridge(params) {
 		messagingToolSentTargets: [],
 		messagingToolSourceReplyPayloads: [],
 		toolMediaUrls: [],
-		toolAudioAsVoice: false
+		toolAudioAsVoice: false,
+		quarantinedTools
 	};
 	const middlewareRunner = createAgentToolResultMiddlewareRunner({
 		runtime: "codex",
@@ -73,13 +84,15 @@ function createCodexDynamicToolBridge(params) {
 	const legacyExtensionRunner = createCodexAppServerToolResultExtensionRunner(toolResultHookContext);
 	const directToolNames = new Set([...ALWAYS_DIRECT_DYNAMIC_TOOL_NAMES, ...params.directToolNames ?? []]);
 	return {
-		availableSpecs: tools.map((tool) => createCodexDynamicToolSpec({
+		availableSpecs: availableTools.map(({ tool, inputSchema }) => createCodexDynamicToolSpec({
 			tool,
+			inputSchema,
 			loading: params.loading ?? "searchable",
 			directToolNames
 		})),
-		specs: registeredTools.map((tool) => createCodexDynamicToolSpec({
+		specs: registeredProjection.tools.map(({ tool, inputSchema }) => createCodexDynamicToolSpec({
 			tool,
+			inputSchema,
 			loading: params.loading ?? "searchable",
 			directToolNames
 		})),
@@ -192,7 +205,7 @@ function createCodexDynamicToolSpec(params) {
 	const base = {
 		name: params.tool.name,
 		description: params.tool.description,
-		inputSchema: toJsonValue(params.tool.parameters)
+		inputSchema: params.inputSchema
 	};
 	if (params.loading === "direct" || params.directToolNames.has(params.tool.name)) return base;
 	return {
@@ -201,6 +214,43 @@ function createCodexDynamicToolSpec(params) {
 		deferLoading: true
 	};
 }
+function projectCodexDynamicTools(tools) {
+	const projectedTools = [];
+	const quarantinedTools = [];
+	for (const tool of tools) {
+		const projection = projectRuntimeToolInputSchema(tool.parameters, `${tool.name}.inputSchema`);
+		if (projection.violations.length > 0) {
+			quarantinedTools.push({
+				tool: tool.name,
+				violations: projection.violations
+			});
+			continue;
+		}
+		projectedTools.push({
+			tool,
+			inputSchema: projection.schema
+		});
+	}
+	return {
+		tools: projectedTools,
+		quarantinedTools
+	};
+}
+function warnQuarantinedDynamicTools(tools) {
+	if (tools.length === 0) return;
+	const unique = /* @__PURE__ */ new Map();
+	for (const tool of tools) unique.set(tool.tool, tool.violations);
+	embeddedAgentLog.warn(`codex app-server quarantined ${unique.size} dynamic ${unique.size === 1 ? "tool" : "tools"} with unsupported input schemas: ${[...unique.keys()].join(", ")}`, { tools: [...unique.entries()].map(([tool, violations]) => ({
+		tool,
+		violations
+	})) });
+}
+function dedupeQuarantinedDynamicTools(tools) {
+	return [...new Map(tools.map((tool) => [tool.tool, {
+		tool: tool.tool,
+		violations: tool.violations
+	}])).values()];
+}
 function toToolResultHookContext(ctx) {
 	const { agentId, sessionId, sessionKey, runId, channelId } = ctx ?? {};
 	return {
@@ -434,15 +484,6 @@ function convertToolContent(content) {
 		imageUrl
 	}];
 }
-function toJsonValue(value) {
-	try {
-		const text = JSON.stringify(value);
-		if (!text) return {};
-		return JSON.parse(text);
-	} catch {
-		return {};
-	}
-}
 function jsonObjectToRecord(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
 	return value;

package/dist/harness.js

@@ -28,21 +28,21 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-CFBsGx1T.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-D8Vxo-Jm.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-fq_T2d_x.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-DU7en3_R.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-CRI0BEc_.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-C_1JAB4C.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		reset: async (params) => {
@@ -52,7 +52,7 @@ function createCodexAppServerAgentHarness(options) {
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-Fou5nAyt.js").then((n) => n.a);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-8kIrP817.js").then((n) => n.s);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,12 +1,12 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
 import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0-UN67Qg.js";
 import { buildCodexProvider } from "./provider.js";
-import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-BapIT9Qs.js";
+import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-CUXQezJL.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
-import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-DmBkYLPy.js";
+import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-OaxhR46w.js";
 import { s as formatCodexDisplayText } from "./notification-correlation-YINts3PA.js";
-import { c as resolveCodexAppServerAuthAccountCacheKey, d as resolveCodexAppServerFallbackApiKeyCacheKey, i as getSharedCodexAppServerClient, n as clearSharedCodexAppServerClientIfCurrentAndWait, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-Fou5nAyt.js";
-import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-BnnjOmgs.js";
+import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient, n as clearSharedCodexAppServerClientIfCurrentAndWait, p as resolveCodexAppServerFallbackApiKeyCacheKey, u as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-8kIrP817.js";
+import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-OjYqDwhw.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -47,7 +47,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-D4C2y46B.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-hYTtzAdy.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -1182,7 +1182,7 @@ function prepareTargetCodexAppServer(ctx) {
 	const appServer = resolveTargetCodexAppServer(ctx);
 	const targets = resolveCodexMigrationTargets(ctx);
 	let warmedClient;
-	const ready = getSharedCodexAppServerClient({
+	const ready = getLeasedSharedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs: 6e4,
 		agentDir: targets.agentDir,
@@ -1192,6 +1192,7 @@ function prepareTargetCodexAppServer(ctx) {
 	}, () => void 0);
 	return { async dispose() {
 		await ready;
+		if (warmedClient) releaseLeasedSharedCodexAppServerClient(warmedClient);
 		await clearSharedCodexAppServerClientIfCurrentAndWait(warmedClient, {
 			exitTimeoutMs: 2e3,
 			forceKillDelayMs: 250

package/dist/media-understanding-provider.js

@@ -1,10 +1,10 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
-import "./client-factory-CaOpX89B.js";
+import "./client-factory-fW4Hh9q_.js";
 import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
-import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CSuFMLvY.js";
-import { i as readModelListResult } from "./models-ASKu9eOY.js";
+import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-DtjYmUw_.js";
+import { i as readModelListResult } from "./models-_XwpqjR8.js";
 import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-BapIT9Qs.js";
+import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-CUXQezJL.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import "openclaw/plugin-sdk/media-understanding";
 //#region extensions/codex/media-understanding-provider.ts
@@ -65,7 +65,7 @@ async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = Math.max(100, params.timeoutMs);
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-Fou5nAyt.js").then((n) => n.a).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-8kIrP817.js").then((n) => n.s).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: params.profile

package/dist/{models-ASKu9eOY.js → models-_XwpqjR8.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { s as readCodexModelListResponse } from "./protocol-validators-CSuFMLvY.js";
+import { s as readCodexModelListResponse } from "./protocol-validators-DtjYmUw_.js";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 var models_exports = /* @__PURE__ */ __exportAll({
@@ -40,8 +40,8 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-Fou5nAyt.js").then((n) => n.a);
-	const client = useSharedClient ? await getSharedCodexAppServerClient({
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-8kIrP817.js").then((n) => n.s);
+	const client = useSharedClient ? await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,
 		authProfileId: options.authProfileId,
@@ -60,7 +60,8 @@ async function withCodexAppServerModelClient(options, run) {
 			timeoutMs
 		});
 	} finally {
-		if (!useSharedClient) client.close();
+		if (useSharedClient) releaseLeasedSharedCodexAppServerClient(client);
+		else client.close();
 	}
 }
 async function requestModelListPage(client, options) {