@openclaw/codex 2026.5.26 → 2026.5.27

package/dist/{command-handlers-hYTtzAdy.js → command-handlers-YXjMla3v.js}

@@ -1,12 +1,12 @@
 import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
 import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-_XwpqjR8.js";
 import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
-import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-OaxhR46w.js";
+import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-Dtg0vQrE.js";
 import { _ as summarizeCodexAccountUsage, a as buildHelp, c as formatCodexStatus, d as formatModels, f as formatThreads, l as formatComputerUseStatus, o as formatAccount, p as readString$1, s as formatCodexDisplayText, u as formatList } from "./notification-correlation-YINts3PA.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-OjYqDwhw.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-DSdj1hJY.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-CWaG0k5A.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CakwWGCR.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
 import crypto from "node:crypto";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/{compact-C_1JAB4C.js → compact-DIXx9K0Q.js}

@@ -1,6 +1,6 @@
 import { t as defaultCodexAppServerClientFactory } from "./client-factory-fW4Hh9q_.js";
 import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
-import { i as readCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
+import { i as readCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-CTnEWuor.js";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/{computer-use-DSdj1hJY.js → computer-use-CakwWGCR.js}

@@ -1,5 +1,5 @@
 import { l as resolveCodexAppServerRuntimeOptions, u as resolveCodexComputerUseConfig } from "./config-0-UN67Qg.js";
-import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-OaxhR46w.js";
+import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-Dtg0vQrE.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{conversation-binding-OjYqDwhw.js → conversation-binding-CWaG0k5A.js}

@@ -1,8 +1,8 @@
 import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-0-UN67Qg.js";
 import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-CUXQezJL.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
-import { r as CODEX_CONTROL_METHODS } from "./request-OaxhR46w.js";
+import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-DZAfY4d6.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
+import { r as CODEX_CONTROL_METHODS } from "./request-Dtg0vQrE.js";
 import { i as readCodexNotificationTurnId, r as readCodexNotificationThreadId, s as formatCodexDisplayText } from "./notification-correlation-YINts3PA.js";
 import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient } from "./shared-client-8kIrP817.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";

package/dist/{dynamic-tools-DlEefKNQ.js → dynamic-tools-BSZIYzfP.js}

@@ -1,6 +1,7 @@
-import { E as sanitizeInlineImageDataUrl, w as invalidInlineImageText } from "./thread-lifecycle-CUXQezJL.js";
+import { E as sanitizeInlineImageDataUrl, w as invalidInlineImageText } from "./thread-lifecycle-DZAfY4d6.js";
 import { asOptionalRecord, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { HEARTBEAT_RESPONSE_TOOL_NAME, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, projectRuntimeToolInputSchema, runAgentHarnessAfterToolCallHook, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 //#region extensions/codex/src/app-server/dynamic-tool-profile.ts
 const CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES = [
@@ -67,6 +68,7 @@ function createCodexDynamicToolBridge(params) {
 	const registeredToolNames = new Set(registeredTools.map((tool) => tool.name));
 	const quarantinedTools = dedupeQuarantinedDynamicTools([...availableProjection.quarantinedTools, ...registeredProjection.quarantinedTools]);
 	warnQuarantinedDynamicTools(quarantinedTools);
+	emitQuarantinedDynamicToolDiagnostics(quarantinedTools, params.hookContext);
 	const telemetry = {
 		didSendViaMessagingTool: false,
 		messagingToolSentTexts: [],
@@ -245,6 +247,17 @@ function warnQuarantinedDynamicTools(tools) {
 		violations
 	})) });
 }
+function emitQuarantinedDynamicToolDiagnostics(tools, ctx) {
+	for (const tool of tools) emitTrustedDiagnosticEvent({
+		type: "tool.execution.blocked",
+		runId: ctx?.runId,
+		sessionId: ctx?.sessionId,
+		sessionKey: ctx?.sessionKey,
+		toolName: tool.tool,
+		deniedReason: "unsupported_tool_schema",
+		reason: tool.violations.join(", ")
+	});
+}
 function dedupeQuarantinedDynamicTools(tools) {
 	return [...new Map(tools.map((tool) => [tool.tool, {
 		tool: tool.tool,

package/dist/harness.js

@@ -1,5 +1,9 @@
 //#region extensions/codex/harness.ts
-const DEFAULT_CODEX_HARNESS_PROVIDER_IDS = new Set(["codex"]);
+const DEFAULT_CODEX_HARNESS_PROVIDER_IDS = new Set([
+	"codex",
+	"openai-codex",
+	"openai"
+]);
 const CODEX_APP_SERVER_CONTEXT_ENGINE_HOST_CAPABILITIES = [
 	"bootstrap",
 	"assemble-before-prompt",
@@ -28,26 +32,26 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-D8Vxo-Jm.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-BIbGYJog.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-DU7en3_R.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-v4nixmAs.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-C_1JAB4C.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-DIXx9K0Q.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-UFjjws4k.js").then((n) => n.a);
+				const { clearCodexAppServerBinding } = await import("./session-binding-4fRldGaa.js").then((n) => n.a);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},

package/dist/index.js

@@ -1,12 +1,12 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
 import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0-UN67Qg.js";
 import { buildCodexProvider } from "./provider.js";
-import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-CUXQezJL.js";
+import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-DZAfY4d6.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
-import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-OaxhR46w.js";
+import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-Dtg0vQrE.js";
 import { s as formatCodexDisplayText } from "./notification-correlation-YINts3PA.js";
 import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient, n as clearSharedCodexAppServerClientIfCurrentAndWait, p as resolveCodexAppServerFallbackApiKeyCacheKey, u as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-8kIrP817.js";
-import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-OjYqDwhw.js";
+import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-CWaG0k5A.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -47,7 +47,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-hYTtzAdy.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-YXjMla3v.js");
 	return handleCodexSubcommand;
 }
 //#endregion

package/dist/media-understanding-provider.js

@@ -4,7 +4,7 @@ import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
 import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-DtjYmUw_.js";
 import { i as readModelListResult } from "./models-_XwpqjR8.js";
 import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-CUXQezJL.js";
+import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-DZAfY4d6.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import "openclaw/plugin-sdk/media-understanding";
 //#region extensions/codex/media-understanding-provider.ts

package/dist/{request-OaxhR46w.js → request-Dtg0vQrE.js}

@@ -1,5 +1,5 @@
 import { n as CodexAppServerRpcError } from "./client-BVK_jmHW.js";
-import { S as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-CUXQezJL.js";
+import { S as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-DZAfY4d6.js";
 import { a as releaseLeasedSharedCodexAppServerClient, c as withTimeout, i as getLeasedSharedCodexAppServerClient, m as resolveCodexAppServerHomeDir, r as createIsolatedCodexAppServerClient } from "./shared-client-8kIrP817.js";
 import { t as resolveCodexAppServerDirectSandboxBypassBlock } from "./sandbox-guard-CTnEWuor.js";
 import { createHash } from "node:crypto";

package/dist/{run-attempt-D8Vxo-Jm.js → run-attempt-BIbGYJog.js}

@@ -2,20 +2,20 @@ import { n as defaultLeasedCodexAppServerClientFactory } from "./client-factory-
 import { c as readCodexPluginConfig, d as resolveCodexPluginsPolicy, f as shouldAutoApproveCodexAppServerApprovals, i as isCodexAppServerApprovalPolicyAllowedByRequirements, l as resolveCodexAppServerRuntimeOptions, o as isCodexSandboxExecServerEnabled, p as withMcpElicitationsApprovalPolicy, u as resolveCodexComputerUseConfig } from "./config-0-UN67Qg.js";
 import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse } from "./protocol-validators-DtjYmUw_.js";
 import { a as isCodexAppServerConnectionClosedError, i as isCodexAppServerApprovalRequest, l as isJsonObject, r as compareCodexAppServerVersions, s as MIN_CODEX_SANDBOX_EXEC_SERVER_APP_SERVER_VERSION } from "./client-BVK_jmHW.js";
-import { C as defaultCodexAppInventoryCache, D as projectContextEngineAssemblyForCodex, O as resolveCodexContextEngineProjectionMaxChars, T as sanitizeCodexHistoryImagePayloads, _ as buildCodexPluginThreadConfigInputFingerprint, a as buildDeveloperInstructions, c as buildTurnCollaborationMode, d as isContextEngineBindingCompatible, g as buildCodexPluginThreadConfig, h as isCodexAppServerProfilerEnabled, i as buildContextEngineBinding, k as resolveCodexContextEngineProjectionReserveTokens, l as buildTurnStartParams, m as startOrResumeThread, n as areCodexDynamicToolFingerprintsCompatible, u as codexDynamicToolsFingerprint, v as mergeCodexThreadConfigs, y as shouldBuildCodexPluginThreadConfig } from "./thread-lifecycle-CUXQezJL.js";
-import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
-import { n as buildCodexPluginAppCacheKey, r as CODEX_CONTROL_METHODS } from "./request-OaxhR46w.js";
+import { C as defaultCodexAppInventoryCache, D as projectContextEngineAssemblyForCodex, O as resolveCodexContextEngineProjectionMaxChars, T as sanitizeCodexHistoryImagePayloads, _ as buildCodexPluginThreadConfigInputFingerprint, a as buildDeveloperInstructions, c as buildTurnCollaborationMode, d as isContextEngineBindingCompatible, g as buildCodexPluginThreadConfig, h as isCodexAppServerProfilerEnabled, i as buildContextEngineBinding, k as resolveCodexContextEngineProjectionReserveTokens, l as buildTurnStartParams, m as startOrResumeThread, n as areCodexDynamicToolFingerprintsCompatible, u as codexDynamicToolsFingerprint, v as mergeCodexThreadConfigs, y as shouldBuildCodexPluginThreadConfig } from "./thread-lifecycle-DZAfY4d6.js";
+import { i as readCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
+import { n as buildCodexPluginAppCacheKey, r as CODEX_CONTROL_METHODS } from "./request-Dtg0vQrE.js";
 import { g as shouldRefreshCodexRateLimitsForUsageLimitMessage, h as resolveCodexUsageLimitResetAtMs, i as readCodexNotificationTurnId, m as formatCodexUsageLimitErrorMessage, n as isCodexNotificationForTurn, r as readCodexNotificationThreadId, s as formatCodexDisplayText, t as describeCodexNotificationCorrelation } from "./notification-correlation-YINts3PA.js";
 import { a as releaseLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthProfileId, f as resolveCodexAppServerAuthProfileIdForAgent, l as refreshCodexAppServerAuthTokens, m as resolveCodexAppServerHomeDir, o as retireSharedCodexAppServerClientIfCurrent, p as resolveCodexAppServerFallbackApiKeyCacheKey, t as clearSharedCodexAppServerClientIfCurrent, u as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-8kIrP817.js";
 import { i as resolveCodexNativeExecutionPolicy } from "./sandbox-guard-CTnEWuor.js";
-import { a as resolveCodexDynamicToolsLoading, i as normalizeCodexDynamicToolName, n as filterCodexDynamicTools, r as isForcedPrivateQaCodexRuntime, t as createCodexDynamicToolBridge } from "./dynamic-tools-DlEefKNQ.js";
+import { a as resolveCodexDynamicToolsLoading, i as normalizeCodexDynamicToolName, n as filterCodexDynamicTools, r as isForcedPrivateQaCodexRuntime, t as createCodexDynamicToolBridge } from "./dynamic-tools-BSZIYzfP.js";
 import { a as handleCodexAppServerElicitationRequest, c as emitDynamicToolTerminalDiagnostic, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerApprovalRequest, n as CODEX_NATIVE_HOOK_RELAY_EVENTS, o as emitDynamicToolErrorDiagnostic, r as buildCodexNativeHookRelayConfig, s as emitDynamicToolStartedDiagnostic, t as filterToolsForVisionInputs } from "./vision-tools-DqpLmF5H.js";
-import { t as ensureCodexComputerUse } from "./computer-use-DSdj1hJY.js";
+import { t as ensureCodexComputerUse } from "./computer-use-CakwWGCR.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
 import { createHash, randomUUID } from "node:crypto";
 import fsSync from "node:fs";
 import { asBoolean, asFiniteNumber, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { CODEX_APP_SERVER_CONTEXT_ENGINE_HOST, TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, assertContextEngineHostSupport, awaitAgentHarnessAgentEndHook, bootstrapHarnessContextEngine, buildAgentHookContextChannelFields, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, finalizeHarnessContextEngineTurn, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, getBeforeToolCallPolicyDiagnosticState, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, loadCodexBundleMcpThreadConfig, normalizeAgentRuntimeTools, normalizeUsage, registerNativeHookRelay, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveContextEngineOwnerPluginId, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveSessionWriteLockOptions, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { CODEX_APP_SERVER_CONTEXT_ENGINE_HOST, TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, assertContextEngineHostSupport, awaitAgentHarnessAgentEndHook, bootstrapHarnessContextEngine, buildAgentHookContextChannelFields, buildBootstrapContextForFiles, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, finalizeHarnessContextEngineTurn, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, getBeforeToolCallPolicyDiagnosticState, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, loadCodexBundleMcpThreadConfig, normalizeAgentRuntimeTools, normalizeUsage, registerNativeHookRelay, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapFilesForRun, resolveContextEngineOwnerPluginId, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, resolveSessionWriteLockOptions, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { spawn } from "node:child_process";
 import { once } from "node:events";
 import { WebSocketServer } from "ws";
@@ -23,7 +23,7 @@ import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugi
 import fs from "node:fs/promises";
 import path, { posix } from "node:path";
 import { createDiagnosticTraceContextFromActiveScope, emitTrustedDiagnosticEvent, emitTrustedDiagnosticEventWithPrivateData, freezeDiagnosticTraceContext, hasPendingInternalDiagnosticEvent, onInternalDiagnosticEvent, resolveDiagnosticModelContentCapturePolicy } from "openclaw/plugin-sdk/diagnostic-runtime";
-import { markAuthProfileBlockedUntil, resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
+import { markAuthProfileBlockedUntil, resolveAgentDir as resolveAgentDir$1, resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { isToolAllowed } from "openclaw/plugin-sdk/sandbox";
 import { appendRegularFile, pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { buildSessionContext, migrateSessionEntries, parseSessionEntries } from "@earendil-works/pi-coding-agent";
@@ -4387,6 +4387,7 @@ const CODEX_TURN_SCOPED_WORKSPACE_DEVELOPER_CONTEXT_BASENAMES = new Set([
 ]);
 const CODEX_WORKSPACE_DEVELOPER_CONTEXT_BASENAMES = new Set([...CODEX_INHERITED_WORKSPACE_DEVELOPER_CONTEXT_BASENAMES, ...CODEX_TURN_SCOPED_WORKSPACE_DEVELOPER_CONTEXT_BASENAMES]);
 const CODEX_HEARTBEAT_CONTEXT_BASENAME = "heartbeat.md";
+const CODEX_MEMORY_TOOL_NAMES = new Set(["memory_search", "memory_get"]);
 const CODEX_NATIVE_HOOK_RELAY_EVENTS_WITH_APP_SERVER_APPROVALS = CODEX_NATIVE_HOOK_RELAY_EVENTS.filter((event) => event !== "permission_request");
 const CODEX_BOOTSTRAP_CONTEXT_ORDER = new Map([
 	["soul.md", 10],
@@ -5065,13 +5066,18 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		resolvedWorkspace,
 		effectiveWorkspace,
 		sessionKey: contextSessionKey,
-		sessionAgentId
+		sessionAgentId,
+		memoryToolNames: getCodexWorkspaceMemoryToolNames(toolBridge.availableSpecs)
 	});
 	const baseDeveloperInstructions = joinPresentSections(buildDeveloperInstructions(params, { dynamicTools: toolBridge.availableSpecs }), workspaceBootstrapContext.developerInstructions);
 	const openClawPromptContext = buildCodexOpenClawPromptContext({
 		params,
 		skillsPrompt: params.skillsSnapshot?.prompt,
-		workspacePromptContext: workspaceBootstrapContext.promptContext
+		workspacePromptContext: workspaceBootstrapContext.promptContext,
+		workspaceMemoryReference: renderCodexWorkspaceMemoryReference({
+			files: workspaceBootstrapContext.memoryReferenceFiles ?? [],
+			toolNames: workspaceBootstrapContext.memoryToolNames
+		})
 	});
 	let promptText = params.prompt;
 	let developerInstructions = baseDeveloperInstructions;
@@ -5203,13 +5209,12 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		timeoutMs: params.timeoutMs,
 		timeoutFloorMs: options.startupTimeoutFloorMs
 	});
-	try {
-		emitCodexAppServerEvent(params, {
-			stream: "codex_app_server.lifecycle",
-			data: { phase: "startup" }
-		});
+	const buildNativeHookRelayFinalConfigPatch = (decision) => {
+		nativeHookRelay?.unregister();
 		nativeHookRelay = createCodexNativeHookRelay({
 			options: options.nativeHookRelay,
+			generation: decision.action === "resume" ? decision.binding.nativeHookRelayGeneration : void 0,
+			generationMismatchGraceMs: decision.action === "resume" && !decision.binding.nativeHookRelayGeneration ? CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS : void 0,
 			events: nativeHookRelayEvents,
 			agentId: sessionAgentId,
 			sessionId: params.sessionId,
@@ -5222,11 +5227,20 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			turnStartTimeoutMs: params.timeoutMs,
 			signal: runAbortController.signal
 		});
-		const nativeHookRelayConfig = nativeHookRelay ? buildCodexNativeHookRelayConfig({
-			relay: nativeHookRelay,
-			events: nativeHookRelayEvents,
-			hookTimeoutSec: options.nativeHookRelay?.hookTimeoutSec
-		}) : options.nativeHookRelay?.enabled === false ? buildCodexNativeHookRelayDisabledConfig() : void 0;
+		return {
+			configPatch: nativeHookRelay ? buildCodexNativeHookRelayConfig({
+				relay: nativeHookRelay,
+				events: nativeHookRelayEvents,
+				hookTimeoutSec: options.nativeHookRelay?.hookTimeoutSec
+			}) : options.nativeHookRelay?.enabled === false ? buildCodexNativeHookRelayDisabledConfig() : void 0,
+			nativeHookRelayGeneration: nativeHookRelay?.generation
+		};
+	};
+	try {
+		emitCodexAppServerEvent(params, {
+			stream: "codex_app_server.lifecycle",
+			data: { phase: "startup" }
+		});
 		const threadConfig = mergeCodexThreadConfigs(bundleMcpThreadConfig?.configPatch);
 		const pluginThreadConfigRequired = !nativeToolSurfaceEnabled || shouldBuildCodexPluginThreadConfig(pluginConfig);
 		const pluginThreadConfigPluginConfig = nativeToolSurfaceEnabled ? pluginConfig : disableCodexPluginThreadConfig(pluginConfig);
@@ -5333,7 +5347,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 							appServer: pluginAppServer,
 							developerInstructions: promptBuild.developerInstructions,
 							config: threadConfig,
-							finalConfigPatch: nativeHookRelayConfig,
+							buildFinalConfigPatch: buildNativeHookRelayFinalConfigPatch,
 							nativeCodeModeEnabled: nativeToolSurfaceEnabled,
 							nativeCodeModeOnlyEnabled: appServer.codeModeOnly,
 							userMcpServersEnabled: nativeToolSurfaceEnabled,
@@ -5431,7 +5445,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	} catch (error) {
 		nativeHookRelay?.unregister();
 		await releaseSandboxExecEnvironment();
-		clearSharedCodexAppServerClientIfCurrent(startupClientForCleanup);
+		if (runAbortController.signal.aborted || shouldClearSharedClientAfterStartupRace(error)) clearSharedCodexAppServerClientIfCurrent(startupClientForCleanup);
 		params.abortSignal?.removeEventListener("abort", abortFromUpstream);
 		throw error;
 	}
@@ -5892,7 +5906,9 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		if (isCurrentTurnNotification && (rawToolOutputCompletion || isNativeToolProgressNotification(notification))) turnCrossedToolHandoff = true;
 		const assistantCompletionCanRelease = isAssistantCompletionReleaseNotification(notification, turnCrossedToolHandoff);
 		const postToolRawAssistantCompletionNeedsTerminalGuard = isCurrentTurnNotification && turnCrossedToolHandoff && isRawAssistantCompletionNotification(notification) && activeTurnItemIds.size === 0;
+		const rawResponseItemCompletedWithNoActiveItems = isCurrentTurnNotification && notification.method === "rawResponseItem/completed" && activeTurnItemIds.size === 0 && activeAppServerTurnRequests === 0 && !assistantCompletionCanRelease && !postToolRawAssistantCompletionNeedsTerminalGuard;
 		const shouldArmPostReasoningSourceReplyWatch = isCurrentTurnNotification && isReasoningItemCompletionNotification(notification) && activeTurnItemIds.size === 0 && params.sourceReplyDeliveryMode === "message_tool_only";
+		const shouldArmPostRawReasoningSourceReplyWatch = rawResponseItemCompletedWithNoActiveItems && isRawReasoningCompletionNotification(notification) && params.sourceReplyDeliveryMode === "message_tool_only";
 		const shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem = isCurrentTurnNotification && notification.method === "item/completed" && activeTurnItemIds.size === 0 && !trackedDynamicToolCompletion && !assistantCompletionCanRelease && !shouldArmPostReasoningSourceReplyWatch;
 		if (isCurrentTurnNotification && notification.method === "error") {
 			if (isRetryableErrorNotification(notification.params)) disarmTurnCompletionIdleWatch();
@@ -5901,12 +5917,13 @@ async function runCodexAppServerAttempt(params, options = {}) {
 		} else if (isTurnCompletion) disarmTurnAssistantCompletionIdleWatch();
 		else if (isCurrentTurnNotification && assistantCompletionCanRelease) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
 		else if (postToolRawAssistantCompletionNeedsTerminalGuard) armTurnCompletionIdleWatch({ timeoutMs: postToolRawAssistantCompletionIdleTimeoutMs });
-		else if (shouldArmPostReasoningSourceReplyWatch) armTurnCompletionIdleWatch({ timeoutMs: CODEX_POST_REASONING_SOURCE_REPLY_IDLE_TIMEOUT_MS });
+		else if (shouldArmPostReasoningSourceReplyWatch || shouldArmPostRawReasoningSourceReplyWatch) armTurnCompletionIdleWatch({ timeoutMs: CODEX_POST_REASONING_SOURCE_REPLY_IDLE_TIMEOUT_MS });
 		else if (unblockedAssistantCompletionRelease) armTurnAssistantCompletionIdleWatch(describeNotificationActivity(notification));
 		else if (shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem) armTurnCompletionIdleWatch();
+		else if (rawResponseItemCompletedWithNoActiveItems) armTurnCompletionIdleWatch();
 		else if (isCurrentTurnNotification && rawToolOutputCompletion) armTurnCompletionIdleWatch();
 		else if (isCurrentTurnNotification && shouldDisarmAssistantCompletionIdleWatch(notification)) disarmTurnAssistantCompletionIdleWatch();
-		if (turnCompletionIdleWatchArmed && !turnCompletionIdleWatchPinnedByTerminalError && notification.method !== "turn/completed" && isCurrentTurnNotification && !trackedDynamicToolCompletion && !rawToolOutputCompletion && !postToolRawAssistantCompletionNeedsTerminalGuard && !shouldArmPostReasoningSourceReplyWatch && !shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem) disarmTurnCompletionIdleWatch();
+		if (turnCompletionIdleWatchArmed && !turnCompletionIdleWatchPinnedByTerminalError && notification.method !== "turn/completed" && isCurrentTurnNotification && !trackedDynamicToolCompletion && !rawToolOutputCompletion && !postToolRawAssistantCompletionNeedsTerminalGuard && !rawResponseItemCompletedWithNoActiveItems && !shouldArmPostReasoningSourceReplyWatch && !shouldArmPostRawReasoningSourceReplyWatch && !shouldRearmCompletionIdleWatchAfterLastCurrentTurnItem) disarmTurnCompletionIdleWatch();
 		if (trackedDynamicToolCompletion) {
 			const itemId = readNotificationItemId(notification);
 			if (itemId) {
@@ -6497,7 +6514,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	const handle = {
 		kind: "embedded",
 		queueMessage: async (text, options) => activeSteeringQueue.queue(text, options),
-		isStreaming: () => !completed,
+		isStreaming: () => !completed && !terminalTurnNotificationQueued,
 		isCompacting: () => projector?.isCompacting() ?? false,
 		sourceReplyDeliveryMode: params.sourceReplyDeliveryMode,
 		cancel: () => runAbortController.abort("cancelled"),
@@ -6932,6 +6949,8 @@ function createCodexNativeHookRelay(params) {
 			sessionId: params.sessionId,
 			sessionKey: params.sessionKey
 		}),
+		...params.generation ? { generation: params.generation } : {},
+		...params.generationMismatchGraceMs ? { generationMismatchGraceMs: params.generationMismatchGraceMs } : {},
 		...params.agentId ? { agentId: params.agentId } : {},
 		sessionId: params.sessionId,
 		...params.sessionKey ? { sessionKey: params.sessionKey } : {},
@@ -7681,6 +7700,11 @@ function isReasoningItemCompletionNotification(notification) {
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return item ? readString(item, "type") === "reasoning" : false;
 }
+function isRawReasoningCompletionNotification(notification) {
+	if (!isJsonObject(notification.params) || notification.method !== "rawResponseItem/completed") return false;
+	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
+	return item ? readString(item, "type") === "reasoning" : false;
+}
 function isAssistantCompletionReleaseNotification(notification, turnCrossedToolHandoff) {
 	if (isCompletedAssistantNotification(notification)) return true;
 	return !turnCrossedToolHandoff && isRawAssistantCompletionNotification(notification);
@@ -7810,7 +7834,12 @@ async function readMirroredSessionHistoryMessages(sessionFile) {
 }
 async function buildCodexWorkspaceBootstrapContext(params) {
 	try {
-		const bootstrapContext = await resolveBootstrapContextForRun({
+		const memoryToolsAvailable = params.memoryToolNames.length > 0 && canRouteCodexWorkspaceMemoryThroughTools({
+			config: params.params.config,
+			agentId: params.params.agentId ?? params.sessionAgentId,
+			workspaceDir: params.effectiveWorkspace
+		});
+		const bootstrapFiles = await resolveBootstrapFilesForRun({
 			workspaceDir: params.resolvedWorkspace,
 			config: params.params.config,
 			sessionKey: params.sessionKey,
@@ -7820,22 +7849,45 @@ async function buildCodexWorkspaceBootstrapContext(params) {
 			contextMode: params.params.bootstrapContextMode,
 			runKind: params.params.bootstrapContextRunKind
 		});
-		const contextFiles = bootstrapContext.contextFiles.map((file) => remapCodexContextFilePath({
+		const memoryToolRoutedBootstrapFiles = memoryToolsAvailable ? selectCodexWorkspaceMemoryReferenceFiles({
+			bootstrapFiles,
+			workspaceDir: params.resolvedWorkspace
+		}) : [];
+		const memoryReferenceFiles = memoryToolRoutedBootstrapFiles.map((file) => remapCodexContextFilePath({
+			file: toCodexEmbeddedContextFile(file),
+			sourceWorkspaceDir: params.resolvedWorkspace,
+			targetWorkspaceDir: params.effectiveWorkspace
+		}));
+		const contextFiles = buildBootstrapContextForFiles(memoryToolsAvailable ? bootstrapFiles.filter((file) => !isCodexWorkspaceRootMemoryBootstrapFile({
+			file,
+			workspaceDir: params.resolvedWorkspace
+		})) : bootstrapFiles, {
+			config: params.params.config,
+			agentId: params.params.agentId ?? params.sessionAgentId,
+			warn: (message) => embeddedAgentLog.warn(message)
+		}).map((file) => remapCodexContextFilePath({
 			file,
 			sourceWorkspaceDir: params.resolvedWorkspace,
 			targetWorkspaceDir: params.effectiveWorkspace
 		}));
-		const promptContextFiles = selectCodexWorkspacePromptContextFiles(contextFiles);
+		const promptContextFiles = selectCodexWorkspacePromptContextFiles(contextFiles, {
+			excludeMemory: memoryToolsAvailable,
+			memoryWorkspaceDir: params.effectiveWorkspace
+		});
 		const developerInstructionFiles = shouldInjectCodexOpenClawPromptContext(params.params) ? selectCodexWorkspaceInheritedDeveloperInstructionFiles(contextFiles) : [];
 		const turnScopedDeveloperInstructionFiles = shouldInjectCodexOpenClawPromptContext(params.params) ? selectCodexWorkspaceTurnScopedDeveloperInstructionFiles(contextFiles) : [];
 		const heartbeatReferenceFiles = selectCodexWorkspaceHeartbeatReferenceFiles(contextFiles);
 		return {
-			...bootstrapContext,
+			bootstrapFiles,
 			contextFiles,
 			promptContextFiles,
 			developerInstructionFiles,
 			turnScopedDeveloperInstructionFiles,
 			heartbeatReferenceFiles,
+			memoryReferenceFiles,
+			memoryToolRoutedBootstrapFiles,
+			memoryToolNames: [...params.memoryToolNames],
+			memoryToolRouted: memoryToolsAvailable,
 			promptContext: renderCodexWorkspaceBootstrapPromptContext(promptContextFiles),
 			developerInstructions: renderCodexWorkspaceThreadDeveloperInstructions(developerInstructionFiles),
 			turnScopedDeveloperInstructions: renderCodexWorkspaceCollaborationDeveloperInstructions(turnScopedDeveloperInstructionFiles),
@@ -7874,7 +7926,9 @@ function buildCodexSystemPromptReport(params) {
 		injectedWorkspaceFiles: buildCodexBootstrapInjectionStats({
 			bootstrapFiles: params.workspaceBootstrapContext.bootstrapFiles,
 			injectedFiles: params.workspaceBootstrapContext.promptContextFiles ?? [],
-			developerInstructionFiles: [...params.workspaceBootstrapContext.developerInstructionFiles ?? [], ...params.workspaceBootstrapContext.turnScopedDeveloperInstructionFiles ?? []]
+			developerInstructionFiles: [...params.workspaceBootstrapContext.developerInstructionFiles ?? [], ...params.workspaceBootstrapContext.turnScopedDeveloperInstructionFiles ?? []],
+			memoryToolRoutedBootstrapFiles: params.workspaceBootstrapContext.memoryToolRoutedBootstrapFiles ?? [],
+			memoryToolRouted: params.workspaceBootstrapContext.memoryToolRouted === true
 		}),
 		skills: {
 			promptChars: skillsPrompt.length,
@@ -7954,6 +8008,10 @@ function stableJsonHash(value) {
 function buildCodexBootstrapInjectionStats(params) {
 	const injectedIndex = indexCodexContextFileContent(params.injectedFiles);
 	const developerInstructionIndex = indexCodexContextFileContent(params.developerInstructionFiles ?? []);
+	const memoryToolRoutedIndex = new Set((params.memoryToolRoutedBootstrapFiles ?? []).map((file) => {
+		const fileName = readNonEmptyString(file.name);
+		return readNonEmptyString(file.path) ?? fileName ?? "";
+	}));
 	return params.bootstrapFiles.map((file) => {
 		const fileName = readNonEmptyString(file.name);
 		const pathValue = readNonEmptyString(file.path) ?? fileName ?? "";
@@ -7963,6 +8021,10 @@ function buildCodexBootstrapInjectionStats(params) {
 		const injected = readCodexIndexedContextFileContent(injectedIndex, pathValue, fileName) ?? readCodexIndexedContextFileContent(developerInstructionIndex, pathValue, fileName);
 		let injectedChars = injected?.length ?? 0;
 		let truncated = !file.missing && injectedChars < rawChars;
+		if (params.memoryToolRouted === true && memoryToolRoutedIndex.has(pathValue)) {
+			injectedChars = 0;
+			truncated = false;
+		}
 		if (injected === void 0) {
 			if (CODEX_NATIVE_PROJECT_DOC_BASENAMES.has(baseName)) {
 				injectedChars = rawChars;
@@ -8025,15 +8087,19 @@ function splitLeadingCodexDeliveryHint(prompt) {
 }
 function buildCodexOpenClawPromptContext(params) {
 	if (!shouldInjectCodexOpenClawPromptContext(params.params)) return;
-	const sections = [params.skillsPrompt?.trim() ? [
-		"## OpenClaw Skills",
-		"",
-		params.skillsPrompt.trim()
-	].join("\n") : void 0, params.workspacePromptContext?.trim() ? [
-		"## OpenClaw Workspace Context",
-		"",
-		params.workspacePromptContext.trim()
-	].join("\n") : void 0].filter(isNonEmptyString);
+	const sections = [
+		params.skillsPrompt?.trim() ? [
+			"## OpenClaw Skills",
+			"",
+			params.skillsPrompt.trim()
+		].join("\n") : void 0,
+		params.workspacePromptContext?.trim() ? [
+			"## OpenClaw Workspace Context",
+			"",
+			params.workspacePromptContext.trim()
+		].join("\n") : void 0,
+		params.workspaceMemoryReference?.trim()
+	].filter(isNonEmptyString);
 	if (sections.length === 0) return;
 	return [
 		"OpenClaw runtime context for this turn:",
@@ -8074,10 +8140,13 @@ function renderCodexWorkspaceBootstrapPromptContext(contextFiles) {
 	for (const file of files) lines.push(`## ${file.path}`, "", file.content, "");
 	return lines.join("\n").trim();
 }
-function selectCodexWorkspacePromptContextFiles(contextFiles) {
+function selectCodexWorkspacePromptContextFiles(contextFiles, options = {}) {
 	return contextFiles.filter((file) => {
 		const baseName = getCodexContextFileBasename(file.path);
-		return baseName && !CODEX_NATIVE_PROJECT_DOC_BASENAMES.has(baseName) && !CODEX_WORKSPACE_DEVELOPER_CONTEXT_BASENAMES.has(baseName) && baseName !== CODEX_HEARTBEAT_CONTEXT_BASENAME && !isMissingCodexBootstrapContextFile(file);
+		return baseName && !CODEX_NATIVE_PROJECT_DOC_BASENAMES.has(baseName) && !CODEX_WORKSPACE_DEVELOPER_CONTEXT_BASENAMES.has(baseName) && baseName !== CODEX_HEARTBEAT_CONTEXT_BASENAME && !(options.excludeMemory === true && isCodexWorkspaceRootMemoryContextFile({
+			file,
+			workspaceDir: options.memoryWorkspaceDir
+		})) && !isMissingCodexBootstrapContextFile(file);
 	}).toSorted(compareCodexContextFiles);
 }
 function selectCodexWorkspaceInheritedDeveloperInstructionFiles(contextFiles) {
@@ -8134,9 +8203,63 @@ function renderCodexWorkspaceHeartbeatReference(files) {
 	for (const file of files) lines.push(`- ${file.path}`);
 	return lines.join("\n").trim();
 }
+function selectCodexWorkspaceMemoryReferenceFiles(params) {
+	return params.bootstrapFiles.filter((file) => {
+		return isCodexWorkspaceRootMemoryBootstrapFile({
+			file,
+			workspaceDir: params.workspaceDir
+		}) && !file.missing && (file.content ?? "").trim().length > 0;
+	}).toSorted(compareCodexBootstrapFiles);
+}
+function renderCodexWorkspaceMemoryReference(params) {
+	if (params.files.length === 0) return;
+	const lines = [
+		"## OpenClaw Workspace Memory",
+		"",
+		`MEMORY.md exists in the active agent workspace. OpenClaw does not paste its contents into native Codex turns; use ${(params.toolNames?.length ? params.toolNames : Array.from(CODEX_MEMORY_TOOL_NAMES)).join(" or ")} when durable memory is relevant and the tools are available.`,
+		""
+	];
+	for (const file of params.files) lines.push(`- ${file.path}`);
+	return lines.join("\n").trim();
+}
+function getCodexWorkspaceMemoryToolNames(tools) {
+	const availableToolNames = new Set(tools.map((tool) => normalizeCodexDynamicToolName(tool.name)));
+	return Array.from(CODEX_MEMORY_TOOL_NAMES).filter((name) => availableToolNames.has(name));
+}
+function canRouteCodexWorkspaceMemoryThroughTools(params) {
+	if (!params.config) return false;
+	return isSameCodexWorkspacePath(resolveAgentWorkspaceDir(params.config, params.agentId), params.workspaceDir);
+}
 function isMissingCodexBootstrapContextFile(file) {
 	return file.content.trimStart().startsWith("[MISSING] Expected at:");
 }
+function toCodexEmbeddedContextFile(file) {
+	return {
+		path: readNonEmptyString(file.path) ?? readNonEmptyString(file.name) ?? "",
+		content: file.content ?? ""
+	};
+}
+function isCodexWorkspaceRootMemoryBootstrapFile(params) {
+	return isCodexWorkspaceRootMemoryPath({
+		filePath: readNonEmptyString(params.file.path) ?? readNonEmptyString(params.file.name) ?? "",
+		workspaceDir: params.workspaceDir
+	});
+}
+function isCodexWorkspaceRootMemoryContextFile(params) {
+	if (!params.workspaceDir) return false;
+	return isCodexWorkspaceRootMemoryPath({
+		filePath: params.file.path,
+		workspaceDir: params.workspaceDir
+	});
+}
+function isCodexWorkspaceRootMemoryPath(params) {
+	const filePath = params.filePath.trim();
+	if (!filePath) return false;
+	return (path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(params.workspaceDir, filePath)) === path.join(path.resolve(params.workspaceDir), "MEMORY.md");
+}
+function isSameCodexWorkspacePath(left, right) {
+	return path.resolve(left) === path.resolve(right);
+}
 function remapCodexContextFilePath(params) {
 	const relativePath = path.relative(params.sourceWorkspaceDir, params.file.path);
 	if (!relativePath || relativePath === ".." || relativePath.startsWith(`..${path.sep}`) || path.isAbsolute(relativePath) || params.sourceWorkspaceDir === params.targetWorkspaceDir) return params.file;
@@ -8158,6 +8281,9 @@ function compareCodexContextFiles(left, right) {
 	if (leftBase !== rightBase) return leftBase.localeCompare(rightBase);
 	return leftPath.localeCompare(rightPath);
 }
+function compareCodexBootstrapFiles(left, right) {
+	return compareCodexContextFiles(toCodexEmbeddedContextFile(left), toCodexEmbeddedContextFile(right));
+}
 function normalizeCodexContextFilePath(filePath) {
 	return filePath.trim().replaceAll("\\", "/").toLowerCase();
 }
@@ -8268,6 +8394,9 @@ function waitForCodexNotificationDispatchTurn() {
 		setImmediate(resolve);
 	});
 }
+function shouldClearSharedClientAfterStartupRace(error) {
+	return error instanceof Error && (error.message === "codex app-server startup timed out" || error.message === "codex app-server startup aborted" || error.message.endsWith(" timed out"));
+}
 function handleApprovalRequest(params) {
 	return handleCodexAppServerApprovalRequest({
 		method: params.method,

package/dist/{session-binding-UFjjws4k.js → session-binding-4fRldGaa.js}

@@ -52,6 +52,7 @@ async function readCodexAppServerBinding(sessionFile, lookup = {}) {
 			dynamicToolsFingerprint: typeof parsed.dynamicToolsFingerprint === "string" ? parsed.dynamicToolsFingerprint : void 0,
 			userMcpServersFingerprint: typeof parsed.userMcpServersFingerprint === "string" ? parsed.userMcpServersFingerprint : void 0,
 			mcpServersFingerprint: typeof parsed.mcpServersFingerprint === "string" ? parsed.mcpServersFingerprint : void 0,
+			nativeHookRelayGeneration: typeof parsed.nativeHookRelayGeneration === "string" && parsed.nativeHookRelayGeneration.trim() ? parsed.nativeHookRelayGeneration : void 0,
 			pluginAppsFingerprint: typeof parsed.pluginAppsFingerprint === "string" ? parsed.pluginAppsFingerprint : void 0,
 			pluginAppsInputFingerprint: typeof parsed.pluginAppsInputFingerprint === "string" ? parsed.pluginAppsInputFingerprint : void 0,
 			pluginAppPolicyContext: readPluginAppPolicyContext(parsed.pluginAppPolicyContext),
@@ -88,6 +89,7 @@ async function writeCodexAppServerBinding(sessionFile, binding, lookup = {}) {
 		dynamicToolsFingerprint: binding.dynamicToolsFingerprint,
 		userMcpServersFingerprint: binding.userMcpServersFingerprint,
 		mcpServersFingerprint: binding.mcpServersFingerprint,
+		nativeHookRelayGeneration: binding.nativeHookRelayGeneration,
 		pluginAppsFingerprint: binding.pluginAppsFingerprint,
 		pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 		pluginAppPolicyContext: binding.pluginAppPolicyContext,

package/dist/{side-question-DU7en3_R.js → side-question-v4nixmAs.js}

@@ -1,12 +1,12 @@
 import { c as readCodexPluginConfig, f as shouldAutoApproveCodexAppServerApprovals, l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
 import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse, t as assertCodexThreadForkResponse } from "./protocol-validators-DtjYmUw_.js";
 import { i as isCodexAppServerApprovalRequest, l as isJsonObject } from "./client-BVK_jmHW.js";
-import { f as resolveCodexAppServerModelProvider, p as resolveReasoningEffort, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, v as mergeCodexThreadConfigs } from "./thread-lifecycle-CUXQezJL.js";
-import { i as readCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
+import { f as resolveCodexAppServerModelProvider, p as resolveReasoningEffort, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, v as mergeCodexThreadConfigs } from "./thread-lifecycle-DZAfY4d6.js";
+import { i as readCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
 import { i as readCodexNotificationTurnId, m as formatCodexUsageLimitErrorMessage, r as readCodexNotificationThreadId } from "./notification-correlation-YINts3PA.js";
 import { a as releaseLeasedSharedCodexAppServerClient, i as getLeasedSharedCodexAppServerClient, l as refreshCodexAppServerAuthTokens } from "./shared-client-8kIrP817.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-CTnEWuor.js";
-import { a as resolveCodexDynamicToolsLoading, n as filterCodexDynamicTools, t as createCodexDynamicToolBridge } from "./dynamic-tools-DlEefKNQ.js";
+import { a as resolveCodexDynamicToolsLoading, n as filterCodexDynamicTools, t as createCodexDynamicToolBridge } from "./dynamic-tools-BSZIYzfP.js";
 import { a as handleCodexAppServerElicitationRequest, c as emitDynamicToolTerminalDiagnostic, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerApprovalRequest, n as CODEX_NATIVE_HOOK_RELAY_EVENTS, o as emitDynamicToolErrorDiagnostic, r as buildCodexNativeHookRelayConfig, s as emitDynamicToolStartedDiagnostic, t as filterToolsForVisionInputs } from "./vision-tools-DqpLmF5H.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/test-api.js

@@ -1,6 +1,6 @@
 import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
-import { a as buildDeveloperInstructions, l as buildTurnStartParams, o as buildThreadResumeParams, s as buildThreadStartParams } from "./thread-lifecycle-CUXQezJL.js";
-import { n as filterCodexDynamicTools, t as createCodexDynamicToolBridge } from "./dynamic-tools-DlEefKNQ.js";
+import { a as buildDeveloperInstructions, l as buildTurnStartParams, o as buildThreadResumeParams, s as buildThreadStartParams } from "./thread-lifecycle-DZAfY4d6.js";
+import { n as filterCodexDynamicTools, t as createCodexDynamicToolBridge } from "./dynamic-tools-BSZIYzfP.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-CUXQezJL.js → thread-lifecycle-DZAfY4d6.js}

@@ -1,12 +1,12 @@
 import { d as resolveCodexPluginsPolicy, r as codexSandboxPolicyForTurn, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0-UN67Qg.js";
 import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-DtjYmUw_.js";
-import { a as isCodexAppServerConnectionClosedError, l as isJsonObject } from "./client-BVK_jmHW.js";
+import { a as isCodexAppServerConnectionClosedError, l as isJsonObject, n as CodexAppServerRpcError } from "./client-BVK_jmHW.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-UFjjws4k.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
 import crypto from "node:crypto";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { embeddedAgentLog, isActiveHarnessContextEngine } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { buildCodexUserMcpServersThreadConfigPatch } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { listRegisteredPluginAgentPromptGuidance } from "openclaw/plugin-sdk/plugin-runtime";
 import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
@@ -1075,6 +1075,12 @@ function isCodexAppServerProfilerEnabled(config, env = process.env) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/thread-lifecycle.ts
+var CodexThreadStartRequestError = class extends Error {
+	constructor(cause) {
+		super(formatErrorMessage(cause), { cause });
+		this.name = "CodexThreadStartRequestError";
+	}
+};
 const CODEX_NATIVE_PERSONALITY_NONE = "none";
 const CODEX_CODE_MODE_THREAD_CONFIG = {
 	"features.code_mode": true,
@@ -1244,7 +1250,14 @@ async function startOrResumeThread(params) {
 		}
 	} else try {
 		const authProfileId = params.params.authProfileId ?? binding.authProfileId;
-		const resumeConfig = mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch, params.finalConfigPatch);
+		const finalConfigPatch = params.buildFinalConfigPatch?.({
+			action: "resume",
+			binding
+		}) ?? {
+			configPatch: params.finalConfigPatch,
+			nativeHookRelayGeneration: params.nativeHookRelayGeneration
+		};
+		const resumeConfig = mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch, finalConfigPatch.configPatch);
 		const resumeParams = lifecycleTiming.measureSync("thread_resume_params", () => buildThreadResumeParams(params.params, {
 			threadId: binding.threadId,
 			authProfileId,
@@ -1274,6 +1287,7 @@ async function startOrResumeThread(params) {
 			dynamicToolsFingerprint,
 			userMcpServersFingerprint,
 			mcpServersFingerprint: nextMcpServersFingerprint,
+			nativeHookRelayGeneration: finalConfigPatch.nativeHookRelayGeneration ?? binding.nativeHookRelayGeneration,
 			pluginAppsFingerprint: binding.pluginAppsFingerprint,
 			pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 			pluginAppPolicyContext: binding.pluginAppPolicyContext,
@@ -1311,6 +1325,7 @@ async function startOrResumeThread(params) {
 			dynamicToolsFingerprint,
 			userMcpServersFingerprint,
 			mcpServersFingerprint: nextMcpServersFingerprint,
+			nativeHookRelayGeneration: finalConfigPatch.nativeHookRelayGeneration ?? binding.nativeHookRelayGeneration,
 			pluginAppsFingerprint: binding.pluginAppsFingerprint,
 			pluginAppsInputFingerprint: binding.pluginAppsInputFingerprint,
 			pluginAppPolicyContext: binding.pluginAppPolicyContext,
@@ -1324,7 +1339,11 @@ async function startOrResumeThread(params) {
 		await clearCodexAppServerBinding(params.params.sessionFile);
 	}
 	const pluginThreadConfig = params.pluginThreadConfig?.enabled ? prebuiltPluginThreadConfig ?? await lifecycleTiming.measure("plugin_config_build", () => params.pluginThreadConfig?.build()) : void 0;
-	const config = lifecycleTiming.measureSync("merge_thread_config", () => mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch, pluginThreadConfig?.configPatch, params.finalConfigPatch));
+	const finalConfigPatch = params.buildFinalConfigPatch?.({ action: "start" }) ?? {
+		configPatch: params.finalConfigPatch,
+		nativeHookRelayGeneration: params.nativeHookRelayGeneration
+	};
+	const config = lifecycleTiming.measureSync("merge_thread_config", () => mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch, pluginThreadConfig?.configPatch, finalConfigPatch.configPatch));
 	const startParams = lifecycleTiming.measureSync("thread_start_params", () => buildThreadStartParams(params.params, {
 		cwd: params.cwd,
 		dynamicTools: params.dynamicTools,
@@ -1335,7 +1354,14 @@ async function startOrResumeThread(params) {
 		nativeCodeModeOnlyEnabled: params.nativeCodeModeOnlyEnabled,
 		environmentSelection: params.environmentSelection
 	}));
-	const response = assertCodexThreadStartResponse(await lifecycleTiming.measure("thread_start_request", () => params.client.request("thread/start", startParams)));
+	const response = assertCodexThreadStartResponse(await lifecycleTiming.measure("thread_start_request", async () => {
+		try {
+			return await params.client.request("thread/start", startParams);
+		} catch (error) {
+			if (error instanceof CodexAppServerRpcError) throw new CodexThreadStartRequestError(error);
+			throw error;
+		}
+	}));
 	const modelProvider = resolveCodexAppServerModelProvider({
 		provider: params.params.provider,
 		authProfileId: params.params.authProfileId,
@@ -1355,6 +1381,7 @@ async function startOrResumeThread(params) {
 			dynamicToolsFingerprint,
 			userMcpServersFingerprint,
 			mcpServersFingerprint: nextMcpServersFingerprint,
+			nativeHookRelayGeneration: finalConfigPatch.nativeHookRelayGeneration,
 			pluginAppsFingerprint: pluginThreadConfig?.fingerprint,
 			pluginAppsInputFingerprint: pluginThreadConfig?.inputFingerprint,
 			pluginAppPolicyContext: pluginThreadConfig?.policyContext,
@@ -1394,6 +1421,7 @@ async function startOrResumeThread(params) {
 		dynamicToolsFingerprint,
 		userMcpServersFingerprint,
 		mcpServersFingerprint: nextMcpServersFingerprint,
+		nativeHookRelayGeneration: finalConfigPatch.nativeHookRelayGeneration,
 		pluginAppsFingerprint: pluginThreadConfig?.fingerprint,
 		pluginAppsInputFingerprint: pluginThreadConfig?.inputFingerprint,
 		pluginAppPolicyContext: pluginThreadConfig?.policyContext,

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.26",
+  "version": "2026.5.27",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/codex",
-      "version": "2026.5.26",
+      "version": "2026.5.27",
       "dependencies": {
         "@earendil-works/pi-coding-agent": "0.75.5",
         "@openai/codex": "0.134.0",

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "codex",
   "name": "Codex",
-  "description": "Codex app-server harness and Codex-managed GPT model catalog.",
+  "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "providers": ["codex"],
   "contracts": {
     "mediaUnderstandingProviders": ["codex"],

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.26",
-  "description": "OpenClaw Codex harness and model provider plugin",
+  "version": "2026.5.27",
+  "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "repository": {
     "type": "git",
     "url": "https://github.com/openclaw/openclaw"
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.26"
+      "pluginApi": ">=2026.5.27"
     },
     "build": {
-      "openclawVersion": "2026.5.26"
+      "openclawVersion": "2026.5.27"
     },
     "release": {
       "publishToClawHub": true,
@@ -47,7 +47,7 @@
     "npm-shrinkwrap.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.26"
+    "openclaw": ">=2026.5.27"
   },
   "peerDependenciesMeta": {
     "openclaw": {