@openclaw/codex 2026.5.3 → 2026.5.4-beta.1

package/dist/{client-factory-MaOMEltT.js → client-factory-ClSvDfKC.js}

@@ -1,8 +1,9 @@
 //#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir) => import("./shared-client-0El8eRIE.js").then((n) => n.r).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-B7LbV3PF.js").then((n) => n.r).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
-	agentDir
+	agentDir,
+	config
 }));
 function createCodexAppServerClientFactoryTestHooks(setFactory) {
 	return {

package/dist/{command-handlers-CeaXhO5y.js → command-handlers-DsknA9lT.js}

@@ -1,10 +1,10 @@
 import { i as resolveCodexAppServerRuntimeOptions } from "./config-CkkoMeqF.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-Ds7g6191.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-B-1qT9nX.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-BmhO5h8O.js";
 import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DuJYTJQy.js";
-import { a as parseCodexFastModeArg, c as setCodexConversationFastMode, d as steerCodexConversationTurn, f as stopCodexConversationTurn, i as formatPermissionsMode, l as setCodexConversationModel, m as resolveCodexDefaultWorkspaceDir, o as parseCodexPermissionsModeArg, p as readCodexConversationBindingData, r as startCodexConversationThread, s as readCodexConversationActiveTurn, u as setCodexConversationPermissions } from "./conversation-binding-DjptpT9W.js";
-import { i as requestCodexAppServerJson, n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-amNk2zrB.js";
+import { a as parseCodexFastModeArg, c as setCodexConversationFastMode, d as steerCodexConversationTurn, f as stopCodexConversationTurn, i as formatPermissionsMode, l as setCodexConversationModel, m as resolveCodexDefaultWorkspaceDir, o as parseCodexPermissionsModeArg, p as readCodexConversationBindingData, r as startCodexConversationThread, s as readCodexConversationActiveTurn, u as setCodexConversationPermissions } from "./conversation-binding-LXwwffvV.js";
+import { i as requestCodexAppServerJson, n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-DtCrnbLb.js";
 import crypto from "node:crypto";
 //#region extensions/codex/src/command-formatters.ts
 function formatCodexStatus(probes) {
@@ -120,36 +120,38 @@ function readString(record, key) {
 }
 //#endregion
 //#region extensions/codex/src/command-rpc.ts
-function requestOptions(pluginConfig, limit) {
+function requestOptions(pluginConfig, limit, config) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig });
 	return {
 		limit,
 		timeoutMs: runtime.requestTimeoutMs,
-		startOptions: runtime.start
+		startOptions: runtime.start,
+		config
 	};
 }
-async function codexControlRequest(pluginConfig, method, requestParams) {
+async function codexControlRequest(pluginConfig, method, requestParams, options = {}) {
 	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig });
 	return await requestCodexAppServerJson({
 		method,
 		requestParams,
 		timeoutMs: runtime.requestTimeoutMs,
-		startOptions: runtime.start
+		startOptions: runtime.start,
+		config: options.config
 	});
 }
-async function safeCodexControlRequest(pluginConfig, method, requestParams) {
-	return await safeValue(async () => await codexControlRequest(pluginConfig, method, requestParams));
+async function safeCodexControlRequest(pluginConfig, method, requestParams, options = {}) {
+	return await safeValue(async () => await codexControlRequest(pluginConfig, method, requestParams, options));
 }
-async function safeCodexModelList(pluginConfig, limit) {
-	return await safeValue(async () => await listCodexAppServerModels(requestOptions(pluginConfig, limit)));
+async function safeCodexModelList(pluginConfig, limit, config) {
+	return await safeValue(async () => await listCodexAppServerModels(requestOptions(pluginConfig, limit, config)));
 }
-async function readCodexStatusProbes(pluginConfig) {
+async function readCodexStatusProbes(pluginConfig, config) {
 	const [models, account, limits, mcps, skills] = await Promise.all([
-		safeCodexModelList(pluginConfig, 20),
-		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.account, { refreshToken: false }),
-		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.rateLimits, void 0),
-		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.listMcpServers, { limit: 100 }),
-		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.listSkills, {})
+		safeCodexModelList(pluginConfig, 20, config),
+		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.account, { refreshToken: false }, { config }),
+		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.rateLimits, void 0, { config }),
+		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.listMcpServers, { limit: 100 }, { config }),
+		safeCodexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.listSkills, {}, { config })
 	]);
 	return {
 		models,
@@ -217,8 +219,8 @@ async function handleCodexSubcommand(ctx, options) {
 	const [subcommand = "status", ...rest] = splitArgs(ctx.args);
 	const normalized = subcommand.toLowerCase();
 	if (normalized === "help") return { text: buildHelp() };
-	if (normalized === "status") return { text: formatCodexStatus(await deps.readCodexStatusProbes(options.pluginConfig)) };
-	if (normalized === "models") return { text: formatModels(await deps.listCodexAppServerModels(deps.requestOptions(options.pluginConfig, 100))) };
+	if (normalized === "status") return { text: formatCodexStatus(await deps.readCodexStatusProbes(options.pluginConfig, ctx.config)) };
+	if (normalized === "models") return { text: formatModels(await deps.listCodexAppServerModels(deps.requestOptions(options.pluginConfig, 100, ctx.config))) };
 	if (normalized === "threads") return { text: await buildThreads(deps, options.pluginConfig, rest.join(" ")) };
 	if (normalized === "resume") return { text: await resumeThread(deps, ctx, options.pluginConfig, rest[0]) };
 	if (normalized === "bind") return await bindConversation(deps, ctx, options.pluginConfig, rest);

package/dist/{compact-C0_rGlHZ.js → compact-CCKeE8zJ.js}

@@ -1,7 +1,7 @@
 import { i as resolveCodexAppServerRuntimeOptions } from "./config-CkkoMeqF.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { i as readCodexAppServerBinding } from "./session-binding-DuJYTJQy.js";
-import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-MaOMEltT.js";
+import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-ClSvDfKC.js";
 import { embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, runHarnessContextEngineMaintenance } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const DEFAULT_CODEX_COMPACTION_WAIT_TIMEOUT_MS = 300 * 1e3;
@@ -65,7 +65,7 @@ async function maybeCompactCodexAppServerSession(params, options = {}) {
 }
 async function compactCodexNativeThread(params, options = {}) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: options.pluginConfig });
-	const binding = await readCodexAppServerBinding(params.sessionFile);
+	const binding = await readCodexAppServerBinding(params.sessionFile, { config: params.config });
 	if (!binding?.threadId) return {
 		ok: false,
 		compacted: false,
@@ -77,7 +77,7 @@ async function compactCodexNativeThread(params, options = {}) {
 		compacted: false,
 		reason: "auth profile mismatch for session binding"
 	};
-	const client = await clientFactory(appServer.start, requestedAuthProfileId ?? binding.authProfileId, params.agentDir);
+	const client = await clientFactory(appServer.start, requestedAuthProfileId ?? binding.authProfileId, params.agentDir, params.config);
 	const waiter = createCodexNativeCompactionWaiter(client, binding.threadId);
 	let completion;
 	try {

package/dist/{computer-use-amNk2zrB.js → computer-use-DtCrnbLb.js}

@@ -1,5 +1,5 @@
 import { a as resolveCodexComputerUseConfig, i as resolveCodexAppServerRuntimeOptions } from "./config-CkkoMeqF.js";
-import { i as withTimeout, n as getSharedCodexAppServerClient } from "./shared-client-0El8eRIE.js";
+import { i as withTimeout, n as getSharedCodexAppServerClient } from "./shared-client-B7LbV3PF.js";
 import { n as describeControlFailure } from "./capabilities-BmhO5h8O.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/request.ts
@@ -9,7 +9,8 @@ async function requestCodexAppServerJson(params) {
 		return await (await getSharedCodexAppServerClient({
 			startOptions: params.startOptions,
 			timeoutMs,
-			authProfileId: params.authProfileId
+			authProfileId: params.authProfileId,
+			config: params.config
 		})).request(params.method, params.requestParams, { timeoutMs });
 	})(), timeoutMs, `codex app-server ${params.method} timed out`);
 }

package/dist/{conversation-binding-DjptpT9W.js → conversation-binding-LXwwffvV.js}

@@ -1,6 +1,6 @@
 import { i as resolveCodexAppServerRuntimeOptions, n as codexSandboxPolicyForTurn } from "./config-CkkoMeqF.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
-import { n as getSharedCodexAppServerClient, s as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-0El8eRIE.js";
+import { n as getSharedCodexAppServerClient, s as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-B7LbV3PF.js";
 import { t as CODEX_CONTROL_METHODS } from "./capabilities-BmhO5h8O.js";
 import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-DuJYTJQy.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/harness.js

@@ -18,11 +18,11 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-BNbVe-IG.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DdEBxgoj.js");
 			return runCodexAppServerAttempt(params, { pluginConfig: options?.pluginConfig });
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-C0_rGlHZ.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-CCKeE8zJ.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.pluginConfig });
 		},
 		reset: async (params) => {
@@ -32,7 +32,7 @@ function createCodexAppServerAgentHarness(options) {
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-0El8eRIE.js").then((n) => n.r);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-B7LbV3PF.js").then((n) => n.r);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,7 +1,7 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
 import { buildCodexProvider } from "./provider.js";
-import { n as handleCodexConversationInboundClaim, t as handleCodexConversationBindingResolved } from "./conversation-binding-DjptpT9W.js";
+import { n as handleCodexConversationInboundClaim, t as handleCodexConversationBindingResolved } from "./conversation-binding-LXwwffvV.js";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import fs from "node:fs/promises";
@@ -23,7 +23,7 @@ function createCodexCommand(options) {
 	};
 }
 async function handleCodexCommand(ctx, options = {}) {
-	const { handleCodexSubcommand } = await import("./command-handlers-CeaXhO5y.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-DsknA9lT.js");
 	return await handleCodexSubcommand(ctx, options);
 }
 //#endregion

package/dist/media-understanding-provider.js

@@ -1,7 +1,7 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
 import { i as resolveCodexAppServerRuntimeOptions } from "./config-CkkoMeqF.js";
 import { a as readCodexErrorNotification, c as readCodexTurnCompletedNotification, n as assertCodexThreadStartResponse, r as assertCodexTurnStartResponse } from "./protocol-validators-Cpopom3_.js";
-import { i as readModelListResult } from "./models-Ds7g6191.js";
+import { i as readModelListResult } from "./models-B-1qT9nX.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 //#region extensions/codex/media-understanding-provider.ts
 const DEFAULT_CODEX_IMAGE_MODEL = FALLBACK_CODEX_MODELS.find((model) => model.inputModalities.includes("image"))?.id ?? FALLBACK_CODEX_MODELS[0]?.id;
@@ -37,7 +37,7 @@ async function describeCodexImages(req, options) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: options.pluginConfig });
 	const timeoutMs = Math.max(100, req.timeoutMs);
 	const ownsClient = !options.clientFactory;
-	const client = options.clientFactory ? await options.clientFactory(appServer.start, req.profile) : await import("./shared-client-0El8eRIE.js").then((n) => n.r).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = options.clientFactory ? await options.clientFactory(appServer.start, req.profile) : await import("./shared-client-B7LbV3PF.js").then((n) => n.r).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: req.profile

package/dist/{models-Ds7g6191.js → models-B-1qT9nX.js}

@@ -39,17 +39,19 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-0El8eRIE.js").then((n) => n.r);
+	const { createIsolatedCodexAppServerClient, getSharedCodexAppServerClient } = await import("./shared-client-B7LbV3PF.js").then((n) => n.r);
 	const client = useSharedClient ? await getSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,
 		authProfileId: options.authProfileId,
-		agentDir: options.agentDir
+		agentDir: options.agentDir,
+		config: options.config
 	}) : await createIsolatedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,
 		authProfileId: options.authProfileId,
-		agentDir: options.agentDir
+		agentDir: options.agentDir,
+		config: options.config
 	});
 	try {
 		return await run({

package/dist/provider.js

@@ -123,7 +123,7 @@ async function listModelsBestEffort(params) {
 	}
 }
 async function listCodexAppServerModelsLazy(options) {
-	const { listCodexAppServerModels } = await import("./models-Ds7g6191.js").then((n) => n.r);
+	const { listCodexAppServerModels } = await import("./models-B-1qT9nX.js").then((n) => n.r);
 	return listCodexAppServerModels(options);
 }
 function normalizeTimeoutMs(value) {

package/dist/{run-attempt-BNbVe-IG.js → run-attempt-DdEBxgoj.js}

@@ -2,11 +2,11 @@ import { i as resolveCodexAppServerRuntimeOptions, r as readCodexPluginConfig }
 import { i as readCodexDynamicToolCallParams, r as assertCodexTurnStartResponse, s as readCodexTurn } from "./protocol-validators-Cpopom3_.js";
 import { t as isJsonObject } from "./protocol-C9UWI98H.js";
 import { i as isCodexAppServerConnectionClosedError, r as isCodexAppServerApprovalRequest } from "./client-chGfNrq5.js";
-import { a as refreshCodexAppServerAuthTokens, o as resolveCodexAppServerAuthProfileId, s as resolveCodexAppServerAuthProfileIdForAgent, t as clearSharedCodexAppServerClientIfCurrent } from "./shared-client-0El8eRIE.js";
+import { a as refreshCodexAppServerAuthTokens, o as resolveCodexAppServerAuthProfileId, s as resolveCodexAppServerAuthProfileIdForAgent, t as clearSharedCodexAppServerClientIfCurrent } from "./shared-client-B7LbV3PF.js";
 import { i as readCodexAppServerBinding } from "./session-binding-DuJYTJQy.js";
-import { a as startOrResumeThread, i as buildTurnStartParams, o as createCodexDynamicToolBridge, s as applyCodexDynamicToolProfile, t as buildDeveloperInstructions } from "./thread-lifecycle-OAlp5Pku.js";
-import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-MaOMEltT.js";
-import { t as ensureCodexComputerUse } from "./computer-use-amNk2zrB.js";
+import { a as startOrResumeThread, i as buildTurnStartParams, o as createCodexDynamicToolBridge, s as applyCodexDynamicToolProfile, t as buildDeveloperInstructions } from "./thread-lifecycle-C2MSeIjn.js";
+import { n as defaultCodexAppServerClientFactory, t as createCodexAppServerClientFactoryTestHooks } from "./client-factory-ClSvDfKC.js";
+import { t as ensureCodexComputerUse } from "./computer-use-DtCrnbLb.js";
 import { createHash } from "node:crypto";
 import { TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, bootstrapHarnessContextEngine, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, callGatewayTool, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, finalizeHarnessContextEngineTurn, formatApprovalDisplayPath, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, normalizeAgentRuntimeTools, normalizeUsage, registerNativeHookRelay, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapContextForRun, resolveModelAuthMode, resolveOpenClawAgentDir, resolveSandboxContext, resolveSessionAgentIds, resolveSessionWriteLockAcquireTimeoutMs, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import fs from "node:fs/promises";
@@ -1354,6 +1354,7 @@ var CodexAppServerEventProjector = class {
 		if (!item) return;
 		const kind = itemKind(item);
 		if (!kind) return;
+		const meta = itemMeta(item, this.toolProgressDetailMode());
 		this.emitAgentEvent({
 			stream: "item",
 			data: {
@@ -1363,7 +1364,7 @@ var CodexAppServerEventProjector = class {
 				title: itemTitle(item),
 				status: params.phase === "start" ? "running" : itemStatus(item),
 				...itemName(item) ? { name: itemName(item) } : {},
-				...itemMeta(item) ? { meta: itemMeta(item) } : {}
+				...meta ? { meta } : {}
 			}
 		});
 	}
@@ -1374,7 +1375,7 @@ var CodexAppServerEventProjector = class {
 		const toolName = itemName(item);
 		if (!toolName) return;
 		this.toolResultSummaryItemIds.add(itemId);
-		const meta = itemMeta(item);
+		const meta = itemMeta(item, this.toolProgressDetailMode());
 		this.emitToolResultMessage({
 			itemId,
 			text: formatToolSummary(toolName, meta)
@@ -1390,7 +1391,7 @@ var CodexAppServerEventProjector = class {
 		if (!toolName || !output) return;
 		this.emitToolResultMessage({
 			itemId,
-			text: formatToolOutput(toolName, itemMeta(item), output),
+			text: formatToolOutput(toolName, itemMeta(item, this.toolProgressDetailMode()), output),
 			finalOutput: true
 		});
 	}
@@ -1406,13 +1407,17 @@ var CodexAppServerEventProjector = class {
 	shouldEmitToolOutput() {
 		return typeof this.params.shouldEmitToolOutput === "function" ? this.params.shouldEmitToolOutput() : this.params.verboseLevel === "full";
 	}
+	toolProgressDetailMode() {
+		return this.params.toolProgressDetail === "raw" ? "raw" : "explain";
+	}
 	recordToolMeta(item) {
 		if (!item) return;
 		const toolName = itemName(item);
 		if (!toolName) return;
+		const meta = itemMeta(item, this.toolProgressDetailMode());
 		this.toolMetas.set(item.id, {
 			toolName,
-			...itemMeta(item) ? { meta: itemMeta(item) } : {}
+			...meta ? { meta } : {}
 		});
 	}
 	emitAgentEvent(event) {
@@ -1653,14 +1658,14 @@ function itemName(item) {
 	if (item.type === "fileChange") return "apply_patch";
 	if (item.type === "webSearch") return "web_search";
 }
-function itemMeta(item) {
+function itemMeta(item, detailMode = "explain") {
 	if (item.type === "commandExecution" && typeof item.command === "string") return inferToolMetaFromArgs("exec", {
 		command: item.command,
 		cwd: typeof item.cwd === "string" ? item.cwd : void 0
-	});
+	}, { detailMode });
 	if (item.type === "webSearch" && typeof item.query === "string") return item.query;
 	const toolName = itemName(item);
-	if ((item.type === "dynamicToolCall" || item.type === "mcpToolCall") && toolName) return inferToolMetaFromArgs(toolName, item.arguments);
+	if ((item.type === "dynamicToolCall" || item.type === "mcpToolCall") && toolName) return inferToolMetaFromArgs(toolName, item.arguments, { detailMode });
 }
 function itemOutputText(item) {
 	if (item.type === "commandExecution") return item.aggregatedOutput?.trim() || void 0;
@@ -2408,7 +2413,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig });
 	const resolvedWorkspace = resolveUserPath(params.workspaceDir);
 	await fs.mkdir(resolvedWorkspace, { recursive: true });
-	const sandboxSessionKey = params.sessionKey?.trim() || params.sessionId;
+	const sandboxSessionKey = params.sandboxSessionKey?.trim() || params.sessionKey?.trim() || params.sessionId;
 	const sandbox = await resolveSandboxContext({
 		config: params.config,
 		sessionKey: sandboxSessionKey,
@@ -2578,7 +2583,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 			operation: async () => {
 				let attemptedClient;
 				const startupAttempt = async () => {
-					const startupClient = await attemptClientFactory(appServer.start, startupAuthProfileId, agentDir);
+					const startupClient = await attemptClientFactory(appServer.start, startupAuthProfileId, agentDir, params.config);
 					attemptedClient = startupClient;
 					startupClientForCleanup = startupClient;
 					await ensureCodexComputerUse({
@@ -3315,6 +3320,7 @@ async function buildDynamicTools(input) {
 		senderIsOwner: params.senderIsOwner,
 		allowGatewaySubagentBinding: params.allowGatewaySubagentBinding,
 		sessionKey: input.sandboxSessionKey,
+		runSessionKey: params.sessionKey && params.sessionKey !== input.sandboxSessionKey ? params.sessionKey : void 0,
 		sessionId: params.sessionId,
 		runId: params.runId,
 		agentDir,

package/dist/{shared-client-0El8eRIE.js → shared-client-B7LbV3PF.js}

@@ -25,8 +25,10 @@ async function bridgeCodexAppServerStartOptions(params) {
 		store,
 		authProfileId: resolveCodexAppServerAuthProfileId({
 			authProfileId: params.authProfileId,
-			store
-		})
+			store,
+			config: params.config
+		}),
+		config: params.config
 	}) ? withClearedEnvironmentVariables(isolatedStartOptions, CODEX_APP_SERVER_API_KEY_ENV_VARS) : isolatedStartOptions;
 }
 function resolveCodexAppServerAuthProfileId(params) {
@@ -76,7 +78,8 @@ function withoutClearedCodexIsolationEnv(clearEnv) {
 async function applyCodexAppServerAuthProfile(params) {
 	const loginParams = await resolveCodexAppServerAuthProfileLoginParams({
 		agentDir: params.agentDir,
-		authProfileId: params.authProfileId
+		authProfileId: params.authProfileId,
+		config: params.config
 	});
 	if (!loginParams) {
 		if (params.startOptions?.transport !== "stdio") return;
@@ -109,15 +112,17 @@ async function resolveCodexAppServerAuthProfileLoginParamsInternal(params) {
 	const store = ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false });
 	const profileId = resolveCodexAppServerAuthProfileId({
 		authProfileId: params.authProfileId,
-		store
+		store,
+		config: params.config
 	});
 	if (!profileId) return;
 	const credential = store.profiles[profileId];
 	if (!credential) throw new Error(`Codex app-server auth profile "${profileId}" was not found.`);
-	if (!isCodexAppServerAuthProvider(credential.provider)) throw new Error(`Codex app-server auth profile "${profileId}" must belong to provider "openai-codex" or a supported alias.`);
+	if (!isCodexAppServerAuthProvider(credential.provider, params.config)) throw new Error(`Codex app-server auth profile "${profileId}" must belong to provider "openai-codex" or a supported alias.`);
 	const loginParams = await resolveLoginParamsForCredential(profileId, credential, {
 		agentDir: params.agentDir,
-		forceOAuthRefresh: params.forceOAuthRefresh === true
+		forceOAuthRefresh: params.forceOAuthRefresh === true,
+		config: params.config
 	});
 	if (!loginParams) throw new Error(`Codex app-server auth profile "${profileId}" does not contain usable credentials.`);
 	return loginParams;
@@ -154,7 +159,8 @@ async function resolveLoginParamsForCredential(profileId, credential, params) {
 	}
 	const resolvedCredential = await resolveOAuthCredentialForCodexAppServer(profileId, credential, {
 		agentDir: params.agentDir,
-		forceRefresh: params.forceOAuthRefresh
+		forceRefresh: params.forceOAuthRefresh,
+		config: params.config
 	});
 	const accessToken = resolvedCredential.access?.trim();
 	return accessToken ? buildChatgptAuthTokensParams(profileId, resolvedCredential, accessToken) : void 0;
@@ -166,7 +172,7 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 	});
 	const store = ensureAuthProfileStore(ownerAgentDir, { allowKeychainPrompt: false });
 	const ownerCredential = store.profiles[profileId];
-	const credentialForOwner = ownerCredential?.type === "oauth" && isCodexAppServerAuthProvider(ownerCredential.provider) ? ownerCredential : credential;
+	const credentialForOwner = ownerCredential?.type === "oauth" && isCodexAppServerAuthProvider(ownerCredential.provider, params.config) ? ownerCredential : credential;
 	if (params.forceRefresh) {
 		store.profiles[profileId] = {
 			...credentialForOwner,
@@ -181,21 +187,21 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 	});
 	const refreshed = loadAuthProfileStoreForSecretsRuntime(ownerAgentDir).profiles[profileId];
 	const storedCredential = store.profiles[profileId];
-	const candidate = refreshed?.type === "oauth" && isCodexAppServerAuthProvider(refreshed.provider) ? refreshed : storedCredential?.type === "oauth" && isCodexAppServerAuthProvider(storedCredential.provider) ? storedCredential : credential;
+	const candidate = refreshed?.type === "oauth" && isCodexAppServerAuthProvider(refreshed.provider, params.config) ? refreshed : storedCredential?.type === "oauth" && isCodexAppServerAuthProvider(storedCredential.provider, params.config) ? storedCredential : credential;
 	return resolved?.apiKey ? {
 		...candidate,
 		access: resolved.apiKey
 	} : candidate;
 }
-function isCodexAppServerAuthProvider(provider) {
-	return resolveProviderIdForAuth(provider) === CODEX_APP_SERVER_AUTH_PROVIDER;
+function isCodexAppServerAuthProvider(provider, config) {
+	return resolveProviderIdForAuth(provider, { config }) === CODEX_APP_SERVER_AUTH_PROVIDER;
 }
 function shouldClearOpenAiApiKeyForCodexAuthProfile(params) {
 	const profileId = params.authProfileId?.trim();
-	return isCodexSubscriptionCredential(profileId ? params.store.profiles[profileId] : params.store.profiles[OPENAI_CODEX_DEFAULT_PROFILE_ID]);
+	return isCodexSubscriptionCredential(profileId ? params.store.profiles[profileId] : params.store.profiles[OPENAI_CODEX_DEFAULT_PROFILE_ID], params.config);
 }
-function isCodexSubscriptionCredential(credential) {
-	if (!credential || !isCodexAppServerAuthProvider(credential.provider)) return false;
+function isCodexSubscriptionCredential(credential, config) {
+	if (!credential || !isCodexAppServerAuthProvider(credential.provider, config)) return false;
 	return credential.type === "oauth" || credential.type === "token";
 }
 function withClearedEnvironmentVariables(startOptions, envVars) {
@@ -362,13 +368,19 @@ function getSharedCodexAppServerClientState() {
 async function getSharedCodexAppServerClient(options) {
 	const state = getSharedCodexAppServerClientState();
 	const agentDir = options?.agentDir ?? resolveOpenClawAgentDir$1();
+	const authProfileId = resolveCodexAppServerAuthProfileIdForAgent({
+		authProfileId: options?.authProfileId,
+		agentDir,
+		config: options?.config
+	});
 	const startOptions = await bridgeCodexAppServerStartOptions({
 		startOptions: await resolveManagedCodexAppServerStartOptions(options?.startOptions ?? resolveCodexAppServerRuntimeOptions().start),
 		agentDir,
-		authProfileId: options?.authProfileId
+		authProfileId,
+		config: options?.config
 	});
 	const key = codexAppServerStartOptionsKey(startOptions, {
-		authProfileId: options?.authProfileId,
+		authProfileId,
 		agentDir
 	});
 	if (state.key && state.key !== key) clearSharedCodexAppServerClient();
@@ -382,8 +394,9 @@ async function getSharedCodexAppServerClient(options) {
 			await applyCodexAppServerAuthProfile({
 				client,
 				agentDir,
-				authProfileId: options?.authProfileId,
-				startOptions
+				authProfileId,
+				startOptions,
+				config: options?.config
 			});
 			return client;
 		} catch (error) {
@@ -400,10 +413,16 @@ async function getSharedCodexAppServerClient(options) {
 }
 async function createIsolatedCodexAppServerClient(options) {
 	const agentDir = options?.agentDir ?? resolveOpenClawAgentDir$1();
+	const authProfileId = resolveCodexAppServerAuthProfileIdForAgent({
+		authProfileId: options?.authProfileId,
+		agentDir,
+		config: options?.config
+	});
 	const startOptions = await bridgeCodexAppServerStartOptions({
 		startOptions: await resolveManagedCodexAppServerStartOptions(options?.startOptions ?? resolveCodexAppServerRuntimeOptions().start),
 		agentDir,
-		authProfileId: options?.authProfileId
+		authProfileId,
+		config: options?.config
 	});
 	const client = CodexAppServerClient.start(startOptions);
 	const initialize = client.initialize();
@@ -412,8 +431,9 @@ async function createIsolatedCodexAppServerClient(options) {
 		await applyCodexAppServerAuthProfile({
 			client,
 			agentDir,
-			authProfileId: options?.authProfileId,
-			startOptions
+			authProfileId,
+			startOptions,
+			config: options?.config
 		});
 		return client;
 	} catch (error) {

package/dist/test-api.js

@@ -1,5 +1,5 @@
 import { i as resolveCodexAppServerRuntimeOptions } from "./config-CkkoMeqF.js";
-import { i as buildTurnStartParams, n as buildThreadResumeParams, o as createCodexDynamicToolBridge, r as buildThreadStartParams, s as applyCodexDynamicToolProfile, t as buildDeveloperInstructions } from "./thread-lifecycle-OAlp5Pku.js";
+import { i as buildTurnStartParams, n as buildThreadResumeParams, o as createCodexDynamicToolBridge, r as buildThreadStartParams, s as applyCodexDynamicToolProfile, t as buildDeveloperInstructions } from "./thread-lifecycle-C2MSeIjn.js";
 //#region extensions/codex/test-api.ts
 function resolveCodexPromptSnapshotAppServerOptions(pluginConfig) {
 	return resolveCodexAppServerRuntimeOptions({

package/dist/{thread-lifecycle-OAlp5Pku.js → thread-lifecycle-C2MSeIjn.js}

@@ -170,7 +170,8 @@ function collectToolTelemetry(params) {
 		"content"
 	]);
 	if (text) params.telemetry.messagingToolSentTexts.push(text);
-	params.telemetry.messagingToolSentMediaUrls.push(...collectMediaUrls(params.args));
+	const mediaUrls = collectMediaUrls(params.args);
+	params.telemetry.messagingToolSentMediaUrls.push(...mediaUrls);
 	params.telemetry.messagingToolSentTargets.push({
 		tool: params.toolName,
 		provider: readFirstString(params.args, ["provider", "channel"]) ?? params.toolName,
@@ -184,7 +185,9 @@ function collectToolTelemetry(params) {
 			"threadId",
 			"thread_id",
 			"messageThreadId"
-		])
+		]),
+		...text ? { text } : {},
+		...mediaUrls.length > 0 ? { mediaUrls } : {}
 	});
 }
 function isRecord(value) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.3",
+  "version": "2026.5.4-beta.1",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.3"
+      "pluginApi": ">=2026.5.4-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.3"
+      "openclawVersion": "2026.5.4-beta.1"
     },
     "release": {
       "publishToClawHub": true,
@@ -45,7 +45,7 @@
     "openclaw.plugin.json"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.5.3"
+    "openclaw": ">=2026.5.4-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {