@openclaw/codex 2026.5.27-beta.1 → 2026.5.28-beta.1

package/dist/{client-BVK_jmHW.js → client-TfDda-h3.js}

@@ -1,4 +1,4 @@
-import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
+import { l as resolveCodexAppServerRuntimeOptions } from "./config-BW7NPdAQ.js";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { OPENCLAW_VERSION, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { createInterface } from "node:readline";

package/dist/{client-factory-fW4Hh9q_.js → client-factory-BPBvbguy.js}

@@ -1,11 +1,11 @@
 //#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-8kIrP817.js").then((n) => n.s).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-DICbgRn5.js").then((n) => n.s).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
 	agentDir,
 	config
 }));
-const defaultLeasedCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-8kIrP817.js").then((n) => n.s).then(({ getLeasedSharedCodexAppServerClient }) => getLeasedSharedCodexAppServerClient({
+const defaultLeasedCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-DICbgRn5.js").then((n) => n.s).then(({ getLeasedSharedCodexAppServerClient }) => getLeasedSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
 	agentDir,

package/dist/{command-handlers-YXjMla3v.js → command-handlers-B8MXR7fh.js}

@@ -1,12 +1,12 @@
-import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-_XwpqjR8.js";
-import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
-import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-Dtg0vQrE.js";
-import { _ as summarizeCodexAccountUsage, a as buildHelp, c as formatCodexStatus, d as formatModels, f as formatThreads, l as formatComputerUseStatus, o as formatAccount, p as readString$1, s as formatCodexDisplayText, u as formatList } from "./notification-correlation-YINts3PA.js";
+import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions } from "./config-BW7NPdAQ.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-Dnasi6LR.js";
+import { l as isJsonObject } from "./client-TfDda-h3.js";
+import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DuJisBZB.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-Cj95iOk6.js";
+import { a as buildHelp, c as formatCodexStatus, d as formatModels, f as formatSkills, l as formatComputerUseStatus, m as readString$1, o as formatAccount, p as formatThreads, s as formatCodexDisplayText, u as formatList, v as summarizeCodexAccountUsage } from "./notification-correlation-BVB6XFQM.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-CWaG0k5A.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CakwWGCR.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-D8OO0S9R.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-BRIifWhE.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
 import crypto from "node:crypto";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -536,7 +536,7 @@ async function handleCodexSubcommand(ctx, options) {
 	}
 	if (normalized === "skills") {
 		if (rest.length > 0) return { text: "Usage: /codex skills" };
-		return { text: formatList(await deps.codexControlRequest(options.pluginConfig, CODEX_CONTROL_METHODS.listSkills, {}), "Codex skills") };
+		return { text: formatSkills(await deps.codexControlRequest(options.pluginConfig, CODEX_CONTROL_METHODS.listSkills, {})) };
 	}
 	if (normalized === "account") {
 		if (rest.length > 0) return { text: "Usage: /codex account" };
@@ -1443,8 +1443,8 @@ function parseCodexCliSessionsArgs(args) {
 		}
 		if (arg === "--limit") {
 			const value = readRequiredOptionValue(args, index);
-			const parsedLimit = value ? Number.parseInt(value, 10) : NaN;
-			if (!Number.isFinite(parsedLimit) || parsedLimit <= 0) {
+			const parsedLimit = value && /^\+?\d+$/.test(value.trim()) ? Number(value.trim()) : NaN;
+			if (!Number.isSafeInteger(parsedLimit) || parsedLimit <= 0) {
 				parsed.help = true;
 				continue;
 			}

package/dist/{compact-DIXx9K0Q.js → compact-Dyz0rQLl.js}

@@ -1,8 +1,7 @@
-import { t as defaultCodexAppServerClientFactory } from "./client-factory-fW4Hh9q_.js";
-import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
-import { i as readCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
+import { t as defaultCodexAppServerClientFactory } from "./client-factory-BPBvbguy.js";
+import { l as resolveCodexAppServerRuntimeOptions } from "./config-BW7NPdAQ.js";
+import { i as readCodexAppServerBinding } from "./session-binding-DuJisBZB.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-CTnEWuor.js";
-import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const warnedIgnoredCompactionOverrides = /* @__PURE__ */ new Set();
@@ -35,18 +34,18 @@ function readIgnoredCompactionOverridePaths(params) {
 }
 function readCompactionOverrideEntries(params) {
 	const entries = [];
-	const defaultCompaction = asOptionalRecord(asOptionalRecord(params.config?.agents)?.defaults)?.compaction;
-	const defaultRecord = asOptionalRecord(defaultCompaction);
+	const defaultCompaction = readRecord(readRecord(params.config?.agents)?.defaults)?.compaction;
+	const defaultRecord = readRecord(defaultCompaction);
 	if (defaultRecord) entries.push({
 		path: "agents.defaults",
 		record: defaultRecord
 	});
 	const agentId = readAgentIdFromSessionKey(params.sessionKey ?? params.sandboxSessionKey);
 	if (!agentId) return entries;
-	const agentCompaction = asOptionalRecord((Array.isArray(params.config?.agents?.list) ? params.config.agents.list : []).find((agent) => {
+	const agentCompaction = readRecord((Array.isArray(params.config?.agents?.list) ? params.config.agents.list : []).find((agent) => {
 		return (typeof agent?.id === "string" ? agent.id.trim().toLowerCase() : "") === agentId;
 	}))?.compaction;
-	const agentRecord = asOptionalRecord(agentCompaction);
+	const agentRecord = readRecord(agentCompaction);
 	if (agentRecord) entries.push({
 		path: `agents.list.${agentId}`,
 		record: agentRecord,
@@ -60,6 +59,9 @@ function readAgentIdFromSessionKey(sessionKey) {
 	if (parts.length < 3 || parts[0] !== "agent") return;
 	return parts[1]?.trim() || void 0;
 }
+function readRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
 async function compactCodexNativeThread(params, options = {}) {
 	if (params.trigger !== "manual") {
 		embeddedAgentLog.info("skipping codex app-server compaction for non-manual trigger", {

package/dist/{computer-use-CakwWGCR.js → computer-use-BRIifWhE.js}

@@ -1,5 +1,5 @@
-import { l as resolveCodexAppServerRuntimeOptions, u as resolveCodexComputerUseConfig } from "./config-0-UN67Qg.js";
-import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-Dtg0vQrE.js";
+import { l as resolveCodexAppServerRuntimeOptions, u as resolveCodexComputerUseConfig } from "./config-BW7NPdAQ.js";
+import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-Cj95iOk6.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{config-0-UN67Qg.js → config-BW7NPdAQ.js}

@@ -9,6 +9,7 @@ const START_OPTIONS_KEY_SECRET_SYMBOL = Symbol.for("openclaw.codexAppServerStart
 const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
 const UNIX_CODEX_REQUIREMENTS_PATH = "/etc/codex/requirements.toml";
 const WINDOWS_CODEX_REQUIREMENTS_SUFFIX = "\\OpenAI\\Codex\\requirements.toml";
+const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
 const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
 function shouldAutoApproveCodexAppServerApprovals(appServer) {
 	return appServer.approvalPolicy === "never" && appServer.sandbox === "danger-full-access";
@@ -159,6 +160,10 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 	const policyMode = explicitPolicyMode ?? defaultPolicy?.mode ?? "yolo";
 	const serviceTier = normalizeCodexServiceTier(config.serviceTier);
 	if (transport === "websocket" && !url) throw new Error("plugins.entries.codex.config.appServer.url is required when appServer.transport is websocket");
+	const configApprovalPolicy = resolveApprovalPolicy(config.approvalPolicy);
+	const envApprovalPolicy = resolveApprovalPolicy(env.OPENCLAW_CODEX_APP_SERVER_APPROVAL_POLICY);
+	const approvalPolicy = configApprovalPolicy ?? envApprovalPolicy ?? defaultPolicy?.approvalPolicy ?? (policyMode === "guardian" ? "on-request" : "never");
+	const approvalPolicySource = configApprovalPolicy ? "config" : envApprovalPolicy ? "env" : defaultPolicy?.approvalPolicy ? "requirements" : "implicit";
 	return {
 		start: {
 			transport,
@@ -178,7 +183,8 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 		requestTimeoutMs: normalizePositiveNumber(config.requestTimeoutMs, 6e4),
 		turnCompletionIdleTimeoutMs: normalizePositiveNumber(config.turnCompletionIdleTimeoutMs, 6e4),
 		...config.postToolRawAssistantCompletionIdleTimeoutMs !== void 0 ? { postToolRawAssistantCompletionIdleTimeoutMs: normalizePositiveNumber(config.postToolRawAssistantCompletionIdleTimeoutMs, 6e4) } : {},
-		approvalPolicy: resolveApprovalPolicy(config.approvalPolicy) ?? resolveApprovalPolicy(env.OPENCLAW_CODEX_APP_SERVER_APPROVAL_POLICY) ?? defaultPolicy?.approvalPolicy ?? (policyMode === "guardian" ? "on-request" : "never"),
+		approvalPolicy,
+		approvalPolicySource,
 		sandbox: resolveSandbox(config.sandbox) ?? resolveSandbox(env.OPENCLAW_CODEX_APP_SERVER_SANDBOX) ?? defaultPolicy?.sandbox ?? (policyMode === "guardian" ? "workspace-write" : "danger-full-access"),
 		approvalsReviewer: resolveApprovalsReviewer(config.approvalsReviewer) ?? defaultPolicy?.approvalsReviewer ?? (policyMode === "guardian" ? "auto_review" : "user"),
 		...serviceTier ? { serviceTier } : {}
@@ -481,8 +487,9 @@ function readBooleanEnv(value) {
 	].includes(normalized)) return false;
 }
 function readNumberEnv(value) {
-	if (value === void 0) return;
-	const parsed = Number(value);
+	const trimmed = value?.trim();
+	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
+	const parsed = Number(trimmed);
 	return Number.isFinite(parsed) ? parsed : void 0;
 }
 function resolveArgs(configArgs, envArgs) {

package/dist/{conversation-binding-CWaG0k5A.js → conversation-binding-D8OO0S9R.js}

@@ -1,10 +1,10 @@
-import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-0-UN67Qg.js";
-import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-DZAfY4d6.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-4fRldGaa.js";
-import { r as CODEX_CONTROL_METHODS } from "./request-Dtg0vQrE.js";
-import { i as readCodexNotificationTurnId, r as readCodexNotificationThreadId, s as formatCodexDisplayText } from "./notification-correlation-YINts3PA.js";
-import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient } from "./shared-client-8kIrP817.js";
+import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-BW7NPdAQ.js";
+import { l as isJsonObject } from "./client-TfDda-h3.js";
+import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-1u5ogKG_.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-DuJisBZB.js";
+import { r as CODEX_CONTROL_METHODS } from "./request-Cj95iOk6.js";
+import { i as readCodexNotificationTurnId, r as readCodexNotificationThreadId, s as formatCodexDisplayText } from "./notification-correlation-BVB6XFQM.js";
+import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient } from "./shared-client-DICbgRn5.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
 import os from "node:os";
 import { asOptionalRecord, isRecord, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/harness.js

@@ -32,31 +32,31 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-BIbGYJog.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-D9i99EqV.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-v4nixmAs.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-280VWjeH.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-DIXx9K0Q.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-Dyz0rQLl.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-4fRldGaa.js").then((n) => n.a);
+				const { clearCodexAppServerBinding } = await import("./session-binding-DuJisBZB.js").then((n) => n.a);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-8kIrP817.js").then((n) => n.s);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-DICbgRn5.js").then((n) => n.s);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,12 +1,12 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
-import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-0-UN67Qg.js";
+import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-BW7NPdAQ.js";
 import { buildCodexProvider } from "./provider.js";
-import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-DZAfY4d6.js";
+import { v as ensureCodexPluginActivation, x as defaultCodexAppInventoryCache, y as pluginReadParams } from "./thread-lifecycle-1u5ogKG_.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
-import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-Dtg0vQrE.js";
-import { s as formatCodexDisplayText } from "./notification-correlation-YINts3PA.js";
-import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient, n as clearSharedCodexAppServerClientIfCurrentAndWait, p as resolveCodexAppServerFallbackApiKeyCacheKey, u as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-8kIrP817.js";
-import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-CWaG0k5A.js";
+import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-Cj95iOk6.js";
+import { s as formatCodexDisplayText } from "./notification-correlation-BVB6XFQM.js";
+import { a as releaseLeasedSharedCodexAppServerClient, f as resolveCodexAppServerAuthProfileIdForAgent, i as getLeasedSharedCodexAppServerClient, n as clearSharedCodexAppServerClientIfCurrentAndWait, p as resolveCodexAppServerFallbackApiKeyCacheKey, u as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-DICbgRn5.js";
+import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-D8OO0S9R.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -18,6 +18,7 @@ import { loadAuthProfileStoreWithoutExternalProfiles, resolveAgentConfig, resolv
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { MIGRATION_REASON_TARGET_EXISTS, applyMigrationManualItem, createMigrationItem, createMigrationManualItem, hasMigrationConfigPatchConflict, markMigrationItemConflict, markMigrationItemError, markMigrationItemSkipped, readMigrationConfigPath, summarizeMigrationItems, writeMigrationConfigPath } from "openclaw/plugin-sdk/migration";
 import { archiveMigrationItem, copyMigrationFileItem, withCachedMigrationConfigRuntime, writeMigrationReport } from "openclaw/plugin-sdk/migration-runtime";
+import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import { applyAuthProfileConfig, buildApiKeyCredential, buildOauthProviderAuthResult, readCodexCliCredentialsCached, updateAuthProfileStoreWithLock } from "openclaw/plugin-sdk/provider-auth";
 import { readJsonFileWithFallback } from "openclaw/plugin-sdk/json-store";
 //#region extensions/codex/src/commands.ts
@@ -28,10 +29,10 @@ function createCodexCommand(options) {
 		ownership: "reserved",
 		agentPromptGuidance: [{
 			text: "Native Codex app-server plugin is available (`/codex ...`). For Codex bind/control/thread/resume/steer/stop requests, prefer `/codex bind`, `/codex threads`, `/codex resume`, `/codex steer`, and `/codex stop` over ACP. When OpenClaw sandboxing is active, native Codex execution modes are unavailable; use normal Codex harness turns.",
-			surfaces: ["pi_main"]
+			surfaces: ["openclaw_main"]
 		}, {
 			text: "Use ACP for Codex only when the user explicitly asks for ACP/acpx or wants to test the ACP path.",
-			surfaces: ["pi_main"]
+			surfaces: ["openclaw_main"]
 		}],
 		acceptsArgs: true,
 		requireAuth: true,
@@ -47,7 +48,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-YXjMla3v.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-B8MXR7fh.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -1382,9 +1383,9 @@ function hasOpenAiCuratedMarketplace(response) {
 	const marketplaces = response.marketplaces;
 	return Array.isArray(marketplaces) && marketplaces.some((marketplace) => marketplace && typeof marketplace === "object" && marketplace.name === "openai-curated");
 }
-function targetCodexMarketplaceDiscoveryTimeoutMs() {
-	const configured = Number(process.env[TARGET_CODEX_MARKETPLACE_DISCOVERY_TIMEOUT_ENV]);
-	if (Number.isFinite(configured) && configured >= 0) return configured;
+function targetCodexMarketplaceDiscoveryTimeoutMs(env = process.env) {
+	const configured = parseStrictNonNegativeInteger(env[TARGET_CODEX_MARKETPLACE_DISCOVERY_TIMEOUT_ENV]);
+	if (configured !== void 0) return configured;
 	return TARGET_CODEX_MARKETPLACE_DISCOVERY_TIMEOUT_MS;
 }
 function isCodexPluginLoadWarningItem(item) {

package/dist/media-understanding-provider.js

@@ -1,10 +1,10 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
-import "./client-factory-fW4Hh9q_.js";
-import { l as resolveCodexAppServerRuntimeOptions } from "./config-0-UN67Qg.js";
+import "./client-factory-BPBvbguy.js";
+import { l as resolveCodexAppServerRuntimeOptions } from "./config-BW7NPdAQ.js";
 import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-DtjYmUw_.js";
-import { i as readModelListResult } from "./models-_XwpqjR8.js";
-import { l as isJsonObject } from "./client-BVK_jmHW.js";
-import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-DZAfY4d6.js";
+import { i as readModelListResult } from "./models-Dnasi6LR.js";
+import { l as isJsonObject } from "./client-TfDda-h3.js";
+import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-1u5ogKG_.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import "openclaw/plugin-sdk/media-understanding";
 //#region extensions/codex/media-understanding-provider.ts
@@ -65,7 +65,7 @@ async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = Math.max(100, params.timeoutMs);
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-8kIrP817.js").then((n) => n.s).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-DICbgRn5.js").then((n) => n.s).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: params.profile

package/dist/{models-_XwpqjR8.js → models-Dnasi6LR.js}

@@ -40,7 +40,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-8kIrP817.js").then((n) => n.s);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-DICbgRn5.js").then((n) => n.s);
 	const client = useSharedClient ? await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,