@openclaw/codex 2026.6.1 → 2026.6.5-beta.1

package/dist/{thread-lifecycle-6nrEQZMV.js → thread-lifecycle-BJsazZ8j.js}

@@ -1,9 +1,9 @@
-import { i as codexSandboxPolicyForTurn, n as CODEX_PLUGINS_MARKETPLACE_NAMES, p as resolveCodexPluginsPolicy, s as isCodexPluginsMarketplaceName, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-AlzuNKCY.js";
-import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-DIt7cXIp.js";
-import { a as isCodexAppServerConnectionClosedError, l as isJsonObject, n as CodexAppServerRpcError } from "./client-BnOmn0y-.js";
+import { d as resolveCodexPluginsPolicy, r as codexSandboxPolicyForTurn, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-BT6SLiE6.js";
+import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-CIpP8IJ2.js";
+import { a as isCodexAppServerConnectionClosedError, l as isJsonObject, n as CodexAppServerRpcError } from "./client-kMCtlApt.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
-import { a as readCodexAppServerBinding, r as isCodexAppServerNativeAuthProfile, s as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-DWiEGATW.js";
+import { a as readCodexAppServerBinding, r as isCodexAppServerNativeAuthProfile, s as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-BgTv_YGm.js";
 import { isFutureDateTimestampMs, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import crypto from "node:crypto";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -26,12 +26,11 @@ const MAX_RENDERED_CONTEXT_CHARS = 1e6;
 const DEFAULT_TEXT_PART_CHARS = 6e3;
 const MAX_TEXT_PART_CHARS = 128e3;
 const APPROX_RENDERED_CHARS_PER_TOKEN = 4;
+/** Default token reserve kept out of rendered context-engine prompt text. */
 const DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS = 2e4;
 const MIN_PROMPT_BUDGET_RATIO = .5;
 const MIN_PROMPT_BUDGET_TOKENS = 8e3;
-/**
-* Project assembled OpenClaw context-engine messages into Codex prompt inputs.
-*/
+/** Projects assembled OpenClaw context-engine messages into Codex prompt inputs. */
 function projectContextEngineAssemblyForCodex(params) {
 	const prompt = params.prompt.trim();
 	const contextMessages = dropDuplicateTrailingPrompt(params.assembledMessages, prompt);
@@ -58,6 +57,7 @@ function projectContextEngineAssemblyForCodex(params) {
 		prePromptMessageCount: params.originalHistoryMessages.length
 	};
 }
+/** Resolves rendered context size from a token budget and reserve. */
 function resolveCodexContextEngineProjectionMaxChars(params) {
 	const contextTokenBudget = typeof params.contextTokenBudget === "number" && Number.isFinite(params.contextTokenBudget) ? Math.floor(params.contextTokenBudget) : void 0;
 	if (!contextTokenBudget || contextTokenBudget <= 0) return DEFAULT_RENDERED_CONTEXT_CHARS;
@@ -66,6 +66,7 @@ function resolveCodexContextEngineProjectionMaxChars(params) {
 		reserveTokens: params.reserveTokens
 	}) * APPROX_RENDERED_CHARS_PER_TOKEN);
 }
+/** Reads Codex projection reserve tokens from compaction config. */
 function resolveCodexContextEngineProjectionReserveTokens(params) {
 	const compaction = asRecord(asRecord(asRecord(params.config)?.agents)?.defaults)?.compaction;
 	const configuredReserveTokens = toNonNegativeInt(asRecord(compaction)?.reserveTokens);
@@ -228,6 +229,7 @@ function truncateOlderContext(text, maxChars) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/dynamic-tool-profile.ts
+/** Tool names owned by Codex app-server and normally excluded from OpenClaw dynamic tools. */
 const CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES = [
 	"read",
 	"write",
@@ -245,13 +247,16 @@ const DYNAMIC_TOOL_NAME_ALIASES = {
 	bash: "exec",
 	"apply-patch": "apply_patch"
 };
+/** Normalizes OpenClaw/Codex tool names before filtering and allowlist checks. */
 function normalizeCodexDynamicToolName(name) {
 	const normalized = name.trim().toLowerCase();
 	return DYNAMIC_TOOL_NAME_ALIASES[normalized] ?? normalized;
 }
+/** Returns true for private QA runs that force the Codex runtime profile. */
 function isForcedPrivateQaCodexRuntime(env = process.env) {
 	return env.OPENCLAW_BUILD_PRIVATE_QA === "1" && env.OPENCLAW_QA_FORCE_RUNTIME?.trim().toLowerCase() === "codex";
 }
+/** Resolves whether dynamic tools load directly or through Codex tool search. */
 function resolveCodexDynamicToolsLoading(config, env = process.env) {
 	return isForcedPrivateQaCodexRuntime(env) ? "direct" : config.codexDynamicToolsLoading ?? "searchable";
 }
@@ -260,16 +265,20 @@ function normalizeCodexModelId(modelId) {
 	if (!normalized) return "";
 	return normalized.includes("/") ? normalized.split("/").at(-1) : normalized;
 }
+/** Returns true when model behavior requires direct dynamic-tool registration. */
 function shouldUseDirectCodexDynamicToolsForModel(modelId) {
 	return shouldDisableCodexToolSearchForModel(modelId);
 }
+/** Returns true for models whose tool-search path is unsupported or inefficient. */
 function shouldDisableCodexToolSearchForModel(modelId) {
 	return normalizeCodexModelId(modelId) === "gpt-5.4-nano";
 }
+/** Resolves dynamic-tool loading after applying model-specific restrictions. */
 function resolveCodexDynamicToolsLoadingForModel(config, modelId, env = process.env) {
 	const loading = resolveCodexDynamicToolsLoading(config, env);
 	return loading === "searchable" && shouldUseDirectCodexDynamicToolsForModel(modelId) ? "direct" : loading;
 }
+/** Filters OpenClaw tools that Codex owns natively or config explicitly excludes. */
 function filterCodexDynamicTools(tools, config, env = process.env) {
 	const excludes = /* @__PURE__ */ new Set();
 	if (!isForcedPrivateQaCodexRuntime(env)) for (const name of CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES) excludes.add(name);
@@ -281,10 +290,16 @@ function filterCodexDynamicTools(tools, config, env = process.env) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/image-payload-sanitizer.ts
+/**
+* Sanitizes inline image payloads mirrored through Codex history so invalid
+* base64 data becomes readable text instead of poisoning replayed transcripts.
+*/
 const IMAGE_OMITTED_TEXT = "omitted image payload: invalid inline image data";
+/** Validates and normalizes an inline image data URL for Codex history payloads. */
 function sanitizeInlineImageDataUrl$1(imageUrl) {
 	return sanitizeInlineImageDataUrl(imageUrl);
 }
+/** Builds the replacement text inserted when an inline image payload is invalid. */
 function invalidInlineImageText(label) {
 	return `[${label}] ${IMAGE_OMITTED_TEXT}`;
 }
@@ -325,6 +340,7 @@ function sanitizeImageContentRecord(record, label) {
 		};
 	}
 }
+/** Recursively sanitizes all Codex history image shapes while preserving unknown structure. */
 function sanitizeCodexHistoryImagePayloads(value, label) {
 	if (Array.isArray(value)) return value.map((entry) => sanitizeCodexHistoryImagePayloads(entry, label));
 	if (!isRecord(value)) return value;
@@ -335,6 +351,7 @@ function sanitizeCodexHistoryImagePayloads(value, label) {
 	return next;
 }
 const MAX_SERIALIZED_ERROR_MESSAGE_LENGTH = 500;
+/** In-memory app inventory cache with coalesced refreshes per key. */
 var CodexAppInventoryCache = class {
 	constructor(options = {}) {
 		this.entries = /* @__PURE__ */ new Map();
@@ -344,6 +361,7 @@ var CodexAppInventoryCache = class {
 		this.revision = 0;
 		this.ttlMs = options.ttlMs ?? 36e5;
 	}
+	/** Reads a snapshot and schedules refresh when missing, stale, or forced. */
 	read(params) {
 		const nowMs = resolveDateTimestampMs(params.nowMs);
 		const entry = this.entries.get(params.key);
@@ -368,9 +386,11 @@ var CodexAppInventoryCache = class {
 			...entry.lastError ? { diagnostic: entry.lastError } : {}
 		};
 	}
+	/** Forces or joins an immediate refresh for a cache key. */
 	refreshNow(params) {
 		return this.refresh(params);
 	}
+	/** Marks a key stale and records the reason as a diagnostic. */
 	invalidate(key, reason, nowMs = Date.now()) {
 		this.revision += 1;
 		const diagnostic = {
@@ -385,6 +405,7 @@ var CodexAppInventoryCache = class {
 		} else this.diagnostics.set(key, diagnostic);
 		return this.revision;
 	}
+	/** Clears all cached snapshots, diagnostics, in-flight requests, and revision state. */
 	clear() {
 		this.entries.clear();
 		this.inFlight.clear();
@@ -392,6 +413,7 @@ var CodexAppInventoryCache = class {
 		this.diagnostics.clear();
 		this.revision = 0;
 	}
+	/** Returns the monotonically increasing cache revision. */
 	getRevision() {
 		return this.revision;
 	}
@@ -453,6 +475,7 @@ var CodexAppInventoryCache = class {
 		}
 	}
 };
+/** Serializes a refresh failure without leaking large or sensitive error data. */
 function serializeCodexAppInventoryError(error) {
 	const record = isRecord(error) ? error : void 0;
 	const data = record && "data" in record ? redactErrorData(record.data) : void 0;
@@ -463,7 +486,9 @@ function serializeCodexAppInventoryError(error) {
 		...data !== void 0 ? { data } : {}
 	};
 }
+/** Shared app inventory cache used by Codex app-server runtime paths. */
 const defaultCodexAppInventoryCache = new CodexAppInventoryCache();
+/** Builds a stable cache key from runtime identity fields. */
 function buildCodexAppInventoryCacheKey(input) {
 	return JSON.stringify({
 		codexHome: input.codexHome ?? null,
@@ -524,6 +549,11 @@ function isSensitiveErrorDataKey(key) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-inventory.ts
+/**
+* Reads Codex plugin marketplace state and app inventory to decide which
+* plugin-owned apps can be exposed to a native Codex thread.
+*/
+/** Reads configured Codex plugin state and maps owned apps to readiness diagnostics. */
 async function readCodexPluginInventory(params) {
 	const policy = params.policy ?? resolveCodexPluginsPolicy(params.pluginConfig);
 	if (!policy.enabled) return {
@@ -535,9 +565,18 @@ async function readCodexPluginInventory(params) {
 		}]
 	};
 	const appInventory = readCachedAppInventory(params);
-	const listed = await params.request("plugin/list", { cwds: [] });
-	const marketplaceByName = /* @__PURE__ */ new Map();
-	for (const marketplace of listed.marketplaces) if (isCodexPluginsMarketplaceName(marketplace.name)) marketplaceByName.set(marketplace.name, marketplace);
+	const marketplaceEntry = (await params.request("plugin/list", { cwds: [] })).marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
+	if (!marketplaceEntry) return {
+		policy,
+		records: [],
+		diagnostics: policy.pluginPolicies.filter((pluginPolicy) => pluginPolicy.enabled).map((pluginPolicy) => ({
+			code: "marketplace_missing",
+			plugin: pluginPolicy,
+			message: `Codex marketplace ${CODEX_PLUGINS_MARKETPLACE_NAME} was not found.`
+		})),
+		...appInventory ? { appInventory } : {}
+	};
+	const marketplace = marketplaceRef(marketplaceEntry);
 	const diagnostics = [];
 	const records = [];
 	if (appInventory?.state === "missing") diagnostics.push({
@@ -550,22 +589,12 @@ async function readCodexPluginInventory(params) {
 	});
 	for (const pluginPolicy of policy.pluginPolicies) {
 		if (!pluginPolicy.enabled) continue;
-		const marketplaceEntry = marketplaceByName.get(pluginPolicy.marketplaceName);
-		if (!marketplaceEntry) {
-			diagnostics.push({
-				code: "marketplace_missing",
-				plugin: pluginPolicy,
-				message: `Codex marketplace ${pluginPolicy.marketplaceName} was not found.`
-			});
-			continue;
-		}
-		const marketplace = marketplaceRef(marketplaceEntry);
 		const summary = findPluginSummary(marketplaceEntry, pluginPolicy.pluginName);
 		if (!summary) {
 			diagnostics.push({
 				code: "plugin_missing",
 				plugin: pluginPolicy,
-				message: `${pluginPolicy.pluginName} was not found in ${pluginPolicy.marketplaceName}.`
+				message: `${pluginPolicy.pluginName} was not found in ${CODEX_PLUGINS_MARKETPLACE_NAME}.`
 			});
 			continue;
 		}
@@ -604,31 +633,23 @@ async function readCodexPluginInventory(params) {
 	}
 	return {
 		policy,
+		marketplace,
 		records,
 		diagnostics,
 		...appInventory ? { appInventory } : {}
 	};
 }
-function findOpenAiCuratedPluginSummary(listed, pluginName, marketplaceName) {
-	if (marketplaceName) {
-		const marketplaceEntry = listed.marketplaces.find((marketplace) => marketplace.name === marketplaceName);
-		if (!marketplaceEntry) return;
-		const summary = findPluginSummary(marketplaceEntry, pluginName);
-		return summary ? {
-			marketplace: marketplaceRef(marketplaceEntry),
-			summary
-		} : void 0;
-	}
-	for (const allowedName of CODEX_PLUGINS_MARKETPLACE_NAMES) {
-		const marketplaceEntry = listed.marketplaces.find((marketplace) => marketplace.name === allowedName);
-		if (!marketplaceEntry) continue;
-		const summary = findPluginSummary(marketplaceEntry, pluginName);
-		if (summary) return {
-			marketplace: marketplaceRef(marketplaceEntry),
-			summary
-		};
-	}
-}
+/** Finds one plugin summary in the OpenAI curated marketplace response. */
+function findOpenAiCuratedPluginSummary(listed, pluginName) {
+	const marketplaceEntry = listed.marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
+	if (!marketplaceEntry) return;
+	const summary = findPluginSummary(marketplaceEntry, pluginName);
+	return summary ? {
+		marketplace: marketplaceRef(marketplaceEntry),
+		summary
+	} : void 0;
+}
+/** Builds plugin/read or plugin/install params from a marketplace reference. */
 function pluginReadParams(marketplace, pluginName) {
 	return {
 		...marketplace.path ? { marketplacePath: marketplace.path } : {},
@@ -704,20 +725,21 @@ function pluginNameFromPluginId(pluginId, marketplaceName) {
 }
 function marketplaceRef(marketplace) {
 	return {
-		name: isCodexPluginsMarketplaceName(marketplace.name) ? marketplace.name : CODEX_PLUGINS_MARKETPLACE_NAME,
+		name: CODEX_PLUGINS_MARKETPLACE_NAME,
 		...marketplace.path ? { path: marketplace.path } : {},
 		...!marketplace.path ? { remoteMarketplaceName: marketplace.name } : {}
 	};
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-activation.ts
+/** Installs/enables a configured Codex plugin and refreshes plugin/app state. */
 async function ensureCodexPluginActivation(params) {
-	if (!isCodexPluginsMarketplaceName(params.identity.marketplaceName)) return activationFailure(params.identity, "marketplace_missing", { message: "Only " + CODEX_PLUGINS_MARKETPLACE_NAMES.join(" or ") + " plugins can be activated." });
+	if (params.identity.marketplaceName !== "openai-curated") return activationFailure(params.identity, "marketplace_missing", { message: "Only openai-curated plugins can be activated." });
 	const listed = await params.request("plugin/list", { cwds: [] });
-	const resolved = findOpenAiCuratedPluginSummary(listed, params.identity.pluginName, params.identity.marketplaceName);
+	const resolved = findOpenAiCuratedPluginSummary(listed, params.identity.pluginName);
 	if (!resolved) {
-		if (!listed.marketplaces.some((marketplace) => marketplace.name === params.identity.marketplaceName)) return activationFailure(params.identity, "marketplace_missing", { message: `Codex marketplace ${params.identity.marketplaceName} was not found.` });
-		return activationFailure(params.identity, "plugin_missing", { message: `${params.identity.pluginName} was not found in ${params.identity.marketplaceName}.` });
+		if (!listed.marketplaces.some((marketplace) => marketplace.name === "openai-curated")) return activationFailure(params.identity, "marketplace_missing", { message: `Codex marketplace ${CODEX_PLUGINS_MARKETPLACE_NAME} was not found.` });
+		return activationFailure(params.identity, "plugin_missing", { message: `${params.identity.pluginName} was not found in ${CODEX_PLUGINS_MARKETPLACE_NAME}.` });
 	}
 	if (resolved.summary.installed && resolved.summary.enabled && !params.installEvenIfActive) return {
 		identity: params.identity,
@@ -752,6 +774,7 @@ async function ensureCodexPluginActivation(params) {
 		diagnostics: [...refreshDiagnostics, ...installResponse.appsNeedingAuth.map((app) => ({ message: `${app.name} requires app authentication before plugin tools are exposed.` }))]
 	};
 }
+/** Forces Codex plugin, skill, hook, MCP, and app inventory refreshes after activation. */
 async function refreshCodexPluginRuntimeState(params) {
 	const diagnostics = [];
 	await params.request("plugin/list", { cwds: [] });
@@ -791,11 +814,17 @@ function activationFailure(identity, reason, diagnostic) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-thread-config.ts
+/**
+* Builds Codex thread config patches that expose only policy-approved
+* plugin-owned apps for native Codex turns.
+*/
 const CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION = 1;
 const CODEX_PLUGIN_THREAD_CONFIG_FINGERPRINT_VERSION = 1;
+/** Returns true when plugin config exists and thread config may need app patches. */
 function shouldBuildCodexPluginThreadConfig(pluginConfig) {
 	return resolveCodexPluginsPolicy(pluginConfig).configured;
 }
+/** Fingerprints policy and app-cache identity before runtime inventory is read. */
 function buildCodexPluginThreadConfigInputFingerprint(params) {
 	return fingerprintJson({
 		version: CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION,
@@ -803,6 +832,7 @@ function buildCodexPluginThreadConfigInputFingerprint(params) {
 		appCacheKey: params.appCacheKey ?? null
 	});
 }
+/** Builds the Codex apps config patch and policy context for a native thread. */
 async function buildCodexPluginThreadConfig(params) {
 	const appCache = params.appCache ?? defaultCodexAppInventoryCache;
 	let inputFingerprint = buildCodexPluginThreadConfigInputFingerprint({
@@ -954,6 +984,7 @@ async function buildCodexPluginThreadConfig(params) {
 		diagnostics
 	};
 }
+/** Deep-merges optional Codex thread config patches, returning undefined when empty. */
 function mergeCodexThreadConfigs(...configs) {
 	let merged;
 	for (const config of configs) {
@@ -962,6 +993,7 @@ function mergeCodexThreadConfigs(...configs) {
 	}
 	return merged && Object.keys(merged).length > 0 ? merged : void 0;
 }
+/** Detects when a stored thread binding no longer matches current plugin policy inputs. */
 function isCodexPluginThreadBindingStale(params) {
 	if (!params.codexPluginsEnabled) return Boolean(params.bindingFingerprint || params.bindingInputFingerprint || params.hasBindingPolicyContext);
 	if (!params.bindingFingerprint || !params.bindingInputFingerprint || !params.hasBindingPolicyContext) return true;
@@ -1068,6 +1100,7 @@ function stableStringify(value) {
 //#endregion
 //#region extensions/codex/src/app-server/profiler-flag.ts
 const PROFILER_FLAGS = ["profiler", "codex.profiler"];
+/** Checks the generic and Codex-specific profiler diagnostic flags. */
 function isCodexAppServerProfilerEnabled(config, env = process.env) {
 	return PROFILER_FLAGS.some((flag) => isDiagnosticFlagEnabled(flag, config, env));
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.1",
+  "version": "2026.6.5-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/codex",
-      "version": "2026.6.1",
+      "version": "2026.6.5-beta.1",
       "dependencies": {
         "@openai/codex": "0.135.0",
         "typebox": "1.1.39",

package/openclaw.plugin.json

@@ -114,7 +114,7 @@
                 },
                 "marketplaceName": {
                   "type": "string",
-                  "enum": ["openai-curated", "openai-bundled", "openai-primary-runtime"]
+                  "enum": ["openai-curated"]
                 },
                 "pluginName": {
                   "type": "string"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.1",
+  "version": "2026.6.5-beta.1",
   "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "repository": {
     "type": "git",
@@ -26,10 +26,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.6.1"
+      "pluginApi": ">=2026.6.5-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.6.1"
+      "openclawVersion": "2026.6.5-beta.1"
     },
     "release": {
       "publishToClawHub": true,
@@ -47,7 +47,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.6.1"
+    "openclaw": ">=2026.6.5-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/client-factory-3ykiiX2z.js

@@ -1,20 +0,0 @@
-//#region extensions/codex/src/app-server/client-factory.ts
-let sharedClientModulePromise = null;
-const loadSharedClientModule = async () => {
-	sharedClientModulePromise ??= import("./shared-client-DUWLidr5.js").then((n) => n.s);
-	return await sharedClientModulePromise;
-};
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => loadSharedClientModule().then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
-	startOptions,
-	authProfileId,
-	agentDir,
-	config
-}));
-const defaultLeasedCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => loadSharedClientModule().then(({ getLeasedSharedCodexAppServerClient }) => getLeasedSharedCodexAppServerClient({
-	startOptions,
-	authProfileId,
-	agentDir,
-	config
-}));
-//#endregion
-export { defaultLeasedCodexAppServerClientFactory as n, defaultCodexAppServerClientFactory as t };