@openclaw/codex 2026.6.1 → 2026.6.5-beta.1

package/dist/{sandbox-guard-DMCJlzmz.js → sandbox-guard-C-Yv9uwY.js}

@@ -6,6 +6,7 @@ const VALID_AGENT_ID_PATTERN = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
 const INVALID_AGENT_ID_CHARS_PATTERN = /[^a-z0-9_-]+/g;
 const LEADING_DASH_PATTERN = /^-+/;
 const TRAILING_DASH_PATTERN = /-+$/;
+/** Resolves node/gateway/sandbox execution ownership from overrides, session, agent, and config. */
 function resolveCodexNativeExecutionPolicy(params) {
 	const config = params.config ?? {};
 	const sessionKey = params.sessionKey?.trim() || params.sessionId?.trim() || void 0;
@@ -43,6 +44,7 @@ function resolveCodexNativeExecutionPolicy(params) {
 		blockReason: "OpenClaw exec host=node is active for this session. Codex app-server native execution cannot route shell, filesystem, MCP, or app-backed work through the selected OpenClaw node."
 	};
 }
+/** Formats the user-facing explanation shown when native tools are blocked by exec host=node. */
 function formatCodexNativeNodeExecBlock(params) {
 	return [
 		`Codex-native ${params.surface} is unavailable because OpenClaw exec host=node is active for this session.`,
@@ -155,6 +157,7 @@ const BLOCKED_DIRECT_METHOD_PREFIXES = [
 	"windowsSandbox/"
 ];
 const NODE_EXEC_BLOCKED_CONTROL_PLANE_METHODS = new Set(["config/mcpServer/reload"]);
+/** Returns a block message when a direct app-server method would bypass OpenClaw execution policy. */
 function resolveCodexAppServerDirectSandboxBypassBlock(params) {
 	const policy = resolveDirectMethodPolicy(params.method);
 	if (NODE_EXEC_BLOCKED_CONTROL_PLANE_METHODS.has(params.method)) {
@@ -185,9 +188,11 @@ function resolveCodexAppServerDirectSandboxBypassBlock(params) {
 	if (policy === "requires-openclaw-environment" && hasOpenClawSandboxEnvironmentSelection(params.requestParams)) return;
 	return sandboxBlock;
 }
+/** Resolves the generic native-execution block for sandboxed or node-hosted sessions. */
 function resolveCodexNativeExecutionBlock(params) {
 	return resolveCodexNativeSandboxBlock(params) ?? resolveCodexNativeNodeExecBlock(params);
 }
+/** Returns a block message when native Codex execution cannot honor active sandboxing. */
 function resolveCodexNativeSandboxBlock(params) {
 	const sessionKey = params.sessionKey?.trim() || params.sessionId?.trim();
 	if (!sessionKey) return;

package/dist/{session-binding-DWiEGATW.js → session-binding-BgTv_YGm.js}

@@ -1,9 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { l as normalizeCodexServiceTier, s as isCodexPluginsMarketplaceName } from "./config-AlzuNKCY.js";
+import { s as normalizeCodexServiceTier } from "./config-BT6SLiE6.js";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import fs from "node:fs/promises";
 import { ensureAuthProfileStore, resolveDefaultAgentDir, resolveProviderIdForAuth } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/session-binding.ts
+/**
+* Persists and normalizes the Codex app-server thread binding associated with
+* an OpenClaw session file.
+*/
 var session_binding_exports = /* @__PURE__ */ __exportAll({
 	clearCodexAppServerBinding: () => clearCodexAppServerBinding,
 	clearCodexAppServerBindingForThread: () => clearCodexAppServerBindingForThread,
@@ -15,9 +19,11 @@ var session_binding_exports = /* @__PURE__ */ __exportAll({
 });
 const CODEX_APP_SERVER_NATIVE_AUTH_PROVIDER = "openai";
 const PUBLIC_OPENAI_MODEL_PROVIDER = "openai";
+/** Returns the JSON sidecar path for the Codex app-server binding beside a session file. */
 function resolveCodexAppServerBindingPath(sessionFile) {
 	return `${sessionFile}.codex-app-server.json`;
 }
+/** Reads and normalizes a Codex app-server binding sidecar, returning undefined on stale data. */
 async function readCodexAppServerBinding(sessionFile, lookup = {}) {
 	const path = resolveCodexAppServerBindingPath(sessionFile);
 	let raw;
@@ -71,6 +77,7 @@ async function readCodexAppServerBinding(sessionFile, lookup = {}) {
 		return;
 	}
 }
+/** Writes the Codex app-server binding sidecar with normalized provider/auth metadata. */
 async function writeCodexAppServerBinding(sessionFile, binding, lookup = {}) {
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	const payload = {
@@ -135,7 +142,7 @@ function readPluginAppPolicyContext(value) {
 	for (const [appId, rawEntry] of Object.entries(apps)) {
 		if (!rawEntry || typeof rawEntry !== "object" || Array.isArray(rawEntry)) return;
 		const entry = rawEntry;
-		if ("appId" in entry || typeof entry.configKey !== "string" || typeof entry.marketplaceName !== "string" || !isCodexPluginsMarketplaceName(entry.marketplaceName) || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || !Array.isArray(entry.mcpServerNames) || entry.mcpServerNames.some((serverName) => typeof serverName !== "string")) return;
+		if ("appId" in entry || typeof entry.configKey !== "string" || entry.marketplaceName !== "openai-curated" || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || !Array.isArray(entry.mcpServerNames) || entry.mcpServerNames.some((serverName) => typeof serverName !== "string")) return;
 		parsedApps[appId] = {
 			configKey: entry.configKey,
 			marketplaceName: entry.marketplaceName,
@@ -157,6 +164,7 @@ function readPluginAppPolicyContext(value) {
 		pluginAppIds: parsedPluginAppIds
 	};
 }
+/** Removes the Codex app-server binding sidecar if present. */
 async function clearCodexAppServerBinding(sessionFile, _lookup = {}) {
 	try {
 		await fs.unlink(resolveCodexAppServerBindingPath(sessionFile));
@@ -167,6 +175,7 @@ async function clearCodexAppServerBinding(sessionFile, _lookup = {}) {
 		});
 	}
 }
+/** Clears a binding only when it still points at the expected Codex thread id. */
 async function clearCodexAppServerBindingForThread(sessionFile, threadId, lookup = {}) {
 	const binding = await readCodexAppServerBinding(sessionFile, lookup);
 	if (!binding) return false;
@@ -184,6 +193,7 @@ async function clearCodexAppServerBindingForThread(sessionFile, threadId, lookup
 function isNotFound(error) {
 	return Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
 }
+/** Returns true when an auth profile uses native Codex/OpenAI app-server auth. */
 function isCodexAppServerNativeAuthProfile(lookup) {
 	const authProfileId = lookup.authProfileId?.trim();
 	if (!authProfileId) return false;
@@ -205,6 +215,7 @@ function isCodexAppServerNativeAuthProfile(lookup) {
 		return false;
 	}
 }
+/** Hides redundant OpenAI provider attribution for native Codex auth bindings. */
 function normalizeCodexAppServerBindingModelProvider(params) {
 	const modelProvider = params.modelProvider?.trim();
 	if (!modelProvider) return;

package/dist/{shared-client-DUWLidr5.js → shared-client-xytpSKD0.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { d as resolveCodexAppServerRuntimeOptions, r as codexAppServerStartOptionsKey } from "./config-AlzuNKCY.js";
-import { c as resolveCodexAppServerSpawnEnv, o as MANAGED_CODEX_APP_SERVER_PACKAGE, t as CodexAppServerClient } from "./client-BnOmn0y-.js";
+import { l as resolveCodexAppServerRuntimeOptions, n as codexAppServerStartOptionsKey } from "./config-BT6SLiE6.js";
+import { c as resolveCodexAppServerSpawnEnv, o as MANAGED_CODEX_APP_SERVER_PACKAGE, t as CodexAppServerClient } from "./client-kMCtlApt.js";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import fsSync, { constants, readFileSync } from "node:fs";
@@ -12,6 +12,7 @@ import { fileURLToPath } from "node:url";
 import { withTimeout } from "openclaw/plugin-sdk/security-runtime";
 //#region extensions/codex/src/app-server/auth-bridge.ts
 const CODEX_APP_SERVER_AUTH_PROVIDER = "openai";
+const OPENAI_CODEX_APP_SERVER_AUTH_PROVIDER = "openai-codex";
 const LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER = "codex-cli";
 const CODEX_APP_SERVER_EXTERNAL_CLI_PROVIDER_IDS = [CODEX_APP_SERVER_AUTH_PROVIDER, LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER];
 const OPENAI_PROVIDER = "openai";
@@ -368,7 +369,7 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 }
 function isCodexAppServerAuthProvider(provider, config) {
 	const resolvedProvider = resolveProviderIdForAuth(provider, { config });
-	return resolvedProvider === CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER;
+	return resolvedProvider === CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === OPENAI_CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER;
 }
 function isOpenAIApiKeyBackupCredential(credential, config) {
 	return credential.type === "api_key" && resolveProviderIdForAuth(credential.provider, { config }) === OPENAI_PROVIDER;
@@ -427,7 +428,12 @@ function resolveChatgptAccountId(profileId, credential) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/managed-binary.ts
+/**
+* Resolves the managed Codex app-server binary shipped with or installed beside
+* the Codex plugin before stdio startup.
+*/
 const CODEX_PLUGIN_ROOT = resolveDefaultCodexPluginRoot(path.dirname(fileURLToPath(import.meta.url)));
+/** Rewrites managed stdio start options to point at an executable Codex binary path. */
 async function resolveManagedCodexAppServerStartOptions(startOptions, options = {}) {
 	if (startOptions.transport !== "stdio" || startOptions.commandSource !== "managed") return startOptions;
 	const platform = options.platform ?? process.platform;
@@ -447,6 +453,7 @@ async function resolveManagedCodexAppServerStartOptions(startOptions, options =
 		commandSource: "resolved-managed"
 	};
 }
+/** Returns the preferred and fallback managed Codex binary paths for a plugin root. */
 function resolveManagedCodexAppServerPaths(params) {
 	const platform = params.platform ?? process.platform;
 	const candidateCommandPaths = resolveManagedCodexAppServerCommandCandidates(params.pluginRoot ?? CODEX_PLUGIN_ROOT, platform);
@@ -543,15 +550,25 @@ async function commandPathExists(filePath, platform) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/timeout.ts
+/**
+* Thin Codex app-server timeout adapter around OpenClaw's shared security
+* runtime timeout helper.
+*/
+/** Awaits a promise with a Codex-specific timeout error message. */
 async function withTimeout$1(promise, timeoutMs, timeoutMessage) {
 	return await withTimeout(promise, timeoutMs, { message: timeoutMessage });
 }
 //#endregion
 //#region extensions/codex/src/app-server/shared-client.ts
+/**
+* Owns shared and isolated Codex app-server client startup, auth application,
+* lease tracking, and teardown.
+*/
 var shared_client_exports = /* @__PURE__ */ __exportAll({
 	clearSharedCodexAppServerClient: () => clearSharedCodexAppServerClient,
 	clearSharedCodexAppServerClientAndWait: () => clearSharedCodexAppServerClientAndWait,
 	clearSharedCodexAppServerClientIfCurrent: () => clearSharedCodexAppServerClientIfCurrent,
+	clearSharedCodexAppServerClientIfCurrentAndUnclaimed: () => clearSharedCodexAppServerClientIfCurrentAndUnclaimed,
 	clearSharedCodexAppServerClientIfCurrentAndWait: () => clearSharedCodexAppServerClientIfCurrentAndWait,
 	createIsolatedCodexAppServerClient: () => createIsolatedCodexAppServerClient,
 	detachSharedCodexAppServerClientIfCurrent: () => detachSharedCodexAppServerClientIfCurrent,
@@ -571,6 +588,7 @@ function getSharedCodexAppServerClientState() {
 		const clients = keyedState.clients;
 		for (const entry of clients.values()) {
 			entry.activeLeases ??= 0;
+			entry.pendingAcquires ??= 0;
 			entry.closeWhenIdle ??= false;
 		}
 		const nextState = {
@@ -588,6 +606,7 @@ function getSharedCodexAppServerClientState() {
 			client: legacyState.client,
 			promise: legacyState.promise,
 			activeLeases: 0,
+			pendingAcquires: 0,
 			closeWhenIdle: false
 		});
 		legacyState.client?.addCloseHandler((closedClient) => clearSharedClientEntryIfCurrent(legacyKey, closedClient));
@@ -627,9 +646,11 @@ async function resolveCodexAppServerClientStartContext(options) {
 		})
 	};
 }
+/** Gets or starts a shared Codex app-server client without retaining a lease. */
 async function getSharedCodexAppServerClient(options) {
 	return (await acquireSharedCodexAppServerClient(options)).client;
 }
+/** Gets or starts a shared Codex app-server client and records a release lease. */
 async function getLeasedSharedCodexAppServerClient(options) {
 	const acquired = await acquireSharedCodexAppServerClient(options, { leased: true });
 	const state = getSharedCodexAppServerClientState();
@@ -638,6 +659,7 @@ async function getLeasedSharedCodexAppServerClient(options) {
 	state.leasedReleases.set(acquired.client, releases);
 	return acquired.client;
 }
+/** Releases one outstanding lease for a shared Codex app-server client. */
 function releaseLeasedSharedCodexAppServerClient(client) {
 	const state = getSharedCodexAppServerClientState();
 	const releases = state.leasedReleases.get(client);
@@ -658,9 +680,21 @@ async function acquireSharedCodexAppServerClient(options, leaseOptions) {
 	});
 	const state = getSharedCodexAppServerClientState();
 	const entry = getOrCreateSharedClientEntry(state, key);
+	const releasePendingAcquire = retainPendingSharedClientAcquire(entry);
+	let cleanupAbandonSignal;
+	if (options?.abandonSignal) {
+		const abandon = () => {
+			releasePendingAcquire();
+			closeSharedClientEntryIfUnclaimed(key, entry);
+		};
+		options.abandonSignal.addEventListener("abort", abandon, { once: true });
+		cleanupAbandonSignal = () => options.abandonSignal?.removeEventListener("abort", abandon);
+		if (options.abandonSignal.aborted) abandon();
+	}
 	const sharedPromise = entry.promise ?? (entry.promise = (async () => {
 		const client = CodexAppServerClient.start(startOptions);
 		entry.client = client;
+		options?.onStartedClient?.(client);
 		client.setActiveSharedLeaseCountProviderForUnscopedNotifications(() => entry.activeLeases);
 		client.addCloseHandler((closedClient) => clearSharedClientEntryIfCurrent(key, closedClient));
 		try {
@@ -690,8 +724,12 @@ async function acquireSharedCodexAppServerClient(options, leaseOptions) {
 		const currentEntry = state.clients.get(key);
 		if (currentEntry?.promise === sharedPromise) clearSharedClientEntry(key, currentEntry);
 		throw error;
+	} finally {
+		cleanupAbandonSignal?.();
+		releasePendingAcquire();
 	}
 }
+/** Starts a non-shared Codex app-server client owned entirely by the caller. */
 async function createIsolatedCodexAppServerClient(options) {
 	const { agentDir, usesNativeAuth, authProfileId, startOptions } = await resolveCodexAppServerClientStartContext(options);
 	const client = CodexAppServerClient.start(startOptions);
@@ -712,6 +750,7 @@ async function createIsolatedCodexAppServerClient(options) {
 		throw error;
 	}
 }
+/** Clears and closes all shared clients for deterministic tests. */
 function resetSharedCodexAppServerClientForTests() {
 	const state = getSharedCodexAppServerClientState();
 	const clients = collectSharedClients(state);
@@ -719,12 +758,14 @@ function resetSharedCodexAppServerClientForTests() {
 	state.leasedReleases = /* @__PURE__ */ new WeakMap();
 	for (const client of clients) client.close();
 }
+/** Clears and closes all shared clients. */
 function clearSharedCodexAppServerClient() {
 	const state = getSharedCodexAppServerClientState();
 	const clients = collectSharedClients(state);
 	state.clients.clear();
 	for (const client of clients) client.close();
 }
+/** Clears and closes the shared entry only if it still owns the supplied client. */
 function clearSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return false;
 	const state = getSharedCodexAppServerClientState();
@@ -735,6 +776,7 @@ function clearSharedCodexAppServerClientIfCurrent(client) {
 	}
 	return false;
 }
+/** Detaches the shared entry without closing the client when it still matches. */
 function detachSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return false;
 	const state = getSharedCodexAppServerClientState();
@@ -744,11 +786,13 @@ function detachSharedCodexAppServerClientIfCurrent(client) {
 	}
 	return false;
 }
+/** Retains the matching shared client and returns a release callback. */
 function retainSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return;
 	const state = getSharedCodexAppServerClientState();
 	for (const entry of state.clients.values()) if (entry.client === client) return retainSharedClientEntry(entry);
 }
+/** Marks a matching shared client to close after active leases/acquires drain. */
 function retireSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return;
 	const state = getSharedCodexAppServerClientState();
@@ -767,6 +811,7 @@ function retireSharedCodexAppServerClientIfCurrent(client) {
 		closed: false
 	};
 }
+/** Clears a matching shared client and waits for its process to exit. */
 async function clearSharedCodexAppServerClientIfCurrentAndWait(client, options) {
 	if (!client) return false;
 	const state = getSharedCodexAppServerClientState();
@@ -777,6 +822,7 @@ async function clearSharedCodexAppServerClientIfCurrentAndWait(client, options)
 	}
 	return false;
 }
+/** Clears all shared clients and waits for their processes to exit. */
 async function clearSharedCodexAppServerClientAndWait(options) {
 	const state = getSharedCodexAppServerClientState();
 	const clients = collectSharedClients(state);
@@ -788,6 +834,7 @@ function getOrCreateSharedClientEntry(state, key) {
 	if (!entry) {
 		entry = {
 			activeLeases: 0,
+			pendingAcquires: 0,
 			closeWhenIdle: false
 		};
 		state.clients.set(key, entry);
@@ -804,6 +851,38 @@ function clearSharedClientEntryIfCurrent(key, client) {
 	const state = getSharedCodexAppServerClientState();
 	if (state.clients.get(key)?.client === client) state.clients.delete(key);
 }
+/** Clears a matching shared client only when no lease or acquire currently claims it. */
+function clearSharedCodexAppServerClientIfCurrentAndUnclaimed(client) {
+	if (!client) return {
+		found: false,
+		closed: false,
+		activeLeases: 0,
+		pendingAcquires: 0
+	};
+	const state = getSharedCodexAppServerClientState();
+	for (const [key, entry] of state.clients) if (entry.client === client) return {
+		found: true,
+		closed: closeSharedClientEntryIfUnclaimed(key, entry),
+		activeLeases: entry.activeLeases,
+		pendingAcquires: entry.pendingAcquires
+	};
+	return {
+		found: false,
+		closed: false,
+		activeLeases: 0,
+		pendingAcquires: 0
+	};
+}
+function retainPendingSharedClientAcquire(entry) {
+	let released = false;
+	entry.pendingAcquires += 1;
+	return () => {
+		if (released) return;
+		released = true;
+		entry.pendingAcquires = Math.max(0, entry.pendingAcquires - 1);
+		closeRetiredSharedClientEntryIfIdle(entry);
+	};
+}
 function retainSharedClientEntry(entry) {
 	let released = false;
 	entry.activeLeases += 1;
@@ -815,15 +894,23 @@ function retainSharedClientEntry(entry) {
 	};
 }
 function closeRetiredSharedClientEntryIfIdle(entry) {
-	if (!entry.closeWhenIdle || entry.activeLeases > 0 || !entry.client) return false;
+	if (!entry.closeWhenIdle || entry.activeLeases > 0 || entry.pendingAcquires > 0 || !entry.client) return false;
 	const client = entry.client;
 	entry.closeWhenIdle = false;
 	entry.client = void 0;
 	client.close();
 	return true;
 }
+function closeSharedClientEntryIfUnclaimed(key, entry) {
+	if (entry.activeLeases > 0 || entry.pendingAcquires > 0) return false;
+	const state = getSharedCodexAppServerClientState();
+	if (state.clients.get(key) !== entry) return false;
+	state.clients.delete(key);
+	entry.client?.close();
+	return Boolean(entry.client);
+}
 function collectSharedClients(state) {
 	return [...new Set([...state.clients.values()].map((entry) => entry.client).filter((client) => Boolean(client)))];
 }
 //#endregion
-export { releaseLeasedSharedCodexAppServerClient as a, withTimeout$1 as c, resolveCodexAppServerAuthProfileId as d, resolveCodexAppServerAuthProfileIdForAgent as f, getLeasedSharedCodexAppServerClient as i, refreshCodexAppServerAuthTokens as l, resolveCodexAppServerHomeDir as m, clearSharedCodexAppServerClientIfCurrentAndWait as n, retireSharedCodexAppServerClientIfCurrent as o, resolveCodexAppServerFallbackApiKeyCacheKey as p, createIsolatedCodexAppServerClient as r, shared_client_exports as s, clearSharedCodexAppServerClientIfCurrent as t, resolveCodexAppServerAuthAccountCacheKey as u };
+export { getLeasedSharedCodexAppServerClient as a, shared_client_exports as c, resolveCodexAppServerAuthAccountCacheKey as d, resolveCodexAppServerAuthProfileId as f, resolveCodexAppServerHomeDir as h, createIsolatedCodexAppServerClient as i, withTimeout$1 as l, resolveCodexAppServerFallbackApiKeyCacheKey as m, clearSharedCodexAppServerClientIfCurrentAndUnclaimed as n, releaseLeasedSharedCodexAppServerClient as o, resolveCodexAppServerAuthProfileIdForAgent as p, clearSharedCodexAppServerClientIfCurrentAndWait as r, retireSharedCodexAppServerClientIfCurrent as s, clearSharedCodexAppServerClientIfCurrent as t, refreshCodexAppServerAuthTokens as u };

package/dist/{side-question-dIZf9RBV.js → side-question-BEpALo9c.js}

@@ -1,13 +1,13 @@
-import { d as resolveCodexAppServerRuntimeOptions, h as shouldAutoApproveCodexAppServerApprovals, u as readCodexPluginConfig } from "./config-AlzuNKCY.js";
-import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse, t as assertCodexThreadForkResponse } from "./protocol-validators-DIt7cXIp.js";
-import { i as isCodexAppServerApprovalRequest, l as isJsonObject } from "./client-BnOmn0y-.js";
-import { O as resolveCodexDynamicToolsLoading, T as filterCodexDynamicTools, d as resolveReasoningEffort, g as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-6nrEQZMV.js";
-import { a as readCodexAppServerBinding } from "./session-binding-DWiEGATW.js";
-import { h as formatCodexUsageLimitErrorMessage, i as readCodexNotificationTurnId, r as readCodexNotificationThreadId } from "./notification-correlation-BykOI_jh.js";
-import { a as releaseLeasedSharedCodexAppServerClient, i as getLeasedSharedCodexAppServerClient, l as refreshCodexAppServerAuthTokens } from "./shared-client-DUWLidr5.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DMCJlzmz.js";
-import { d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, t as CODEX_NATIVE_HOOK_RELAY_EVENTS, u as createCodexDynamicToolBridge } from "./native-hook-relay-CIJt8cLN.js";
-import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
+import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, p as shouldAutoApproveCodexAppServerApprovals } from "./config-BT6SLiE6.js";
+import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse, t as assertCodexThreadForkResponse } from "./protocol-validators-CIpP8IJ2.js";
+import { i as isCodexAppServerApprovalRequest, l as isJsonObject } from "./client-kMCtlApt.js";
+import { O as resolveCodexDynamicToolsLoading, T as filterCodexDynamicTools, d as resolveReasoningEffort, g as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-BJsazZ8j.js";
+import { a as readCodexAppServerBinding } from "./session-binding-BgTv_YGm.js";
+import { h as formatCodexUsageLimitErrorMessage, i as readCodexNotificationTurnId, r as readCodexNotificationThreadId } from "./notification-correlation-o8quHmTK.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, u as refreshCodexAppServerAuthTokens } from "./shared-client-xytpSKD0.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C-Yv9uwY.js";
+import { d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, t as CODEX_NATIVE_HOOK_RELAY_EVENTS, u as createCodexDynamicToolBridge } from "./native-hook-relay-DZ3Oon0b.js";
+import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-C7qmZ0Jh.js";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/side-question.ts
 const CODEX_SIDE_DYNAMIC_TOOL_TIMEOUT_MS = 9e4;