@openclaw/codex 2026.6.11 → 2026.7.1-beta.1

package/dist/{thread-lifecycle-DtT3-ehU.js → thread-lifecycle-DeSMZSXr.js}

@@ -1,10 +1,10 @@
 import { n as isJsonObject, t as flattenCodexDynamicToolFunctions } from "./protocol-dh-ETiNd.js";
-import { i as codexSandboxPolicyForTurn, m as resolveCodexPluginsPolicy, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-CszD0vP3.js";
-import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-B19q5BIX.js";
+import { i as codexSandboxPolicyForTurn, m as resolveCodexPluginsPolicy, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-C_whBx3M.js";
+import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-CB4mtyrs.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY } from "./prompt-overlay.js";
-import { r as isModernCodexModel } from "./provider-B-OHpbD3.js";
-import { a as isCodexAppServerConnectionClosedError, n as CodexAppServerRpcError } from "./client-CLrtWgrD.js";
-import { i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-HOuPt-E0.js";
+import { a as readCodexSupportedReasoningEfforts, i as isModernCodexModel, o as resolveCodexSupportedReasoningEffort, r as isMaxReasoningCodexModel } from "./provider-DosqwRb6.js";
+import { a as isCodexAppServerConnectionClosedError, n as CodexAppServerRpcError } from "./client-IcTBKEqA.js";
+import { i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-Cm0Gg7Z1.js";
 import "node:fs/promises";
 import "node:path";
 import { isFutureDateTimestampMs, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
@@ -74,6 +74,7 @@ function readString(record, key) {
 	const value = record[key];
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
+const CODEX_TARGETED_APP_INVENTORY_LIMIT = 1e3;
 const MAX_SERIALIZED_ERROR_MESSAGE_LENGTH = 500;
 /** In-memory app inventory cache with coalesced refreshes per key. */
 var CodexAppInventoryCache = class {
@@ -212,9 +213,11 @@ function serializeCodexAppInventoryError(error) {
 }
 /** Shared app inventory cache used by Codex app-server runtime paths. */
 const defaultCodexAppInventoryCache = new CodexAppInventoryCache();
-/** Builds a stable cache key from runtime identity fields. */
-function buildCodexAppInventoryCacheKey(input) {
+/** Builds a stable cache key from build versions and runtime identity fields. */
+function buildCodexAppInventoryCacheKey(input, openClawVersion, codexPluginVersion) {
 	return JSON.stringify({
+		openClawVersion,
+		codexPluginVersion,
 		codexHome: input.codexHome ?? null,
 		endpoint: input.endpoint ?? null,
 		runtimeIdentity: normalizeRuntimeIdentityForCacheKey(input.runtimeIdentity),
@@ -235,18 +238,21 @@ function normalizeRuntimeIdentityForCacheKey(value) {
 async function listAllApps(request, forceRefetch, targetAppIds = []) {
 	const apps = [];
 	const targetIds = new Set(targetAppIds.filter(Boolean));
-	const foundTargetIds = /* @__PURE__ */ new Set();
+	const remainingTargetIds = new Set(targetIds);
+	const seenCursors = /* @__PURE__ */ new Set();
 	let cursor;
 	do {
 		const response = await request("app/list", {
 			cursor,
-			limit: 100,
+			limit: targetIds.size > 0 ? CODEX_TARGETED_APP_INVENTORY_LIMIT : 100,
 			forceRefetch
 		});
 		apps.push(...response.data);
-		for (const app of response.data) if (targetIds.has(app.id)) foundTargetIds.add(app.id);
+		for (const app of response.data) remainingTargetIds.delete(app.id);
+		if (targetIds.size > 0 && remainingTargetIds.size === 0) break;
 		cursor = response.nextCursor;
-		if (targetIds.size > 0 && foundTargetIds.size === targetIds.size) break;
+		if (cursor && seenCursors.has(cursor)) throw new Error(`app/list returned repeated cursor ${cursor}`);
+		if (cursor) seenCursors.add(cursor);
 	} while (cursor);
 	return apps;
 }
@@ -290,6 +296,7 @@ function isSensitiveErrorDataKey(key) {
 * Reads Codex plugin marketplace state and app inventory to decide which
 * plugin-owned apps can be exposed to a native Codex thread.
 */
+const CODEX_PLUGINS_REMOTE_MARKETPLACE_NAME = `${CODEX_PLUGINS_MARKETPLACE_NAME}-remote`;
 /** Reads configured Codex plugin state and maps owned apps to readiness diagnostics. */
 async function readCodexPluginInventory(params) {
 	const policy = params.policy ?? resolveCodexPluginsPolicy(params.pluginConfig);
@@ -302,7 +309,8 @@ async function readCodexPluginInventory(params) {
 		}]
 	};
 	const appInventory = readCachedAppInventory(params);
-	const marketplaceEntry = (await params.request("plugin/list", { cwds: [] })).marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
+	const listed = await params.request("plugin/list", { cwds: [] });
+	const marketplaceEntry = listed.marketplaces.find(isOpenAiCuratedMarketplace);
 	if (!marketplaceEntry) return {
 		policy,
 		records: [],
@@ -313,7 +321,7 @@ async function readCodexPluginInventory(params) {
 		})),
 		...appInventory ? { appInventory } : {}
 	};
-	const marketplace = marketplaceRef(marketplaceEntry);
+	let marketplace = marketplaceRef(marketplaceEntry);
 	const diagnostics = [];
 	const records = [];
 	if (appInventory?.state === "missing") diagnostics.push({
@@ -326,8 +334,8 @@ async function readCodexPluginInventory(params) {
 	});
 	for (const pluginPolicy of policy.pluginPolicies) {
 		if (!pluginPolicy.enabled) continue;
-		const summary = findPluginSummary(marketplaceEntry, pluginPolicy.pluginName);
-		if (!summary) {
+		const resolvedPlugin = findOpenAiCuratedMarketplacePlugin(listed, pluginPolicy.pluginName);
+		if (!resolvedPlugin) {
 			diagnostics.push({
 				code: "plugin_missing",
 				plugin: pluginPolicy,
@@ -335,7 +343,10 @@ async function readCodexPluginInventory(params) {
 			});
 			continue;
 		}
-		const detail = await readPluginDetail(params, marketplace, pluginPolicy, diagnostics);
+		const { summary } = resolvedPlugin;
+		const pluginMarketplace = marketplaceRef(resolvedPlugin.marketplace);
+		if (records.length === 0) marketplace = pluginMarketplace;
+		const detail = await readPluginDetail(params, pluginMarketplace, pluginPolicy, summary, diagnostics);
 		const ownedAppIds = detail?.apps.map((app) => app.id).filter(Boolean).toSorted() ?? [];
 		const appOwnership = resolveAppOwnership({
 			detail,
@@ -378,12 +389,10 @@ async function readCodexPluginInventory(params) {
 }
 /** Finds one plugin summary in the OpenAI curated marketplace response. */
 function findOpenAiCuratedPluginSummary(listed, pluginName) {
-	const marketplaceEntry = listed.marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
-	if (!marketplaceEntry) return;
-	const summary = findPluginSummary(marketplaceEntry, pluginName);
-	return summary ? {
-		marketplace: marketplaceRef(marketplaceEntry),
-		summary
+	const resolved = findOpenAiCuratedMarketplacePlugin(listed, pluginName);
+	return resolved ? {
+		marketplace: marketplaceRef(resolved.marketplace),
+		summary: resolved.summary
 	} : void 0;
 }
 /** Builds plugin/read or plugin/install params from a marketplace reference. */
@@ -404,10 +413,10 @@ function readCachedAppInventory(params) {
 		suppressRefresh: params.suppressAppInventoryRefresh
 	});
 }
-async function readPluginDetail(params, marketplace, pluginPolicy, diagnostics) {
+async function readPluginDetail(params, marketplace, pluginPolicy, summary, diagnostics) {
 	if (params.readPluginDetails === false) return;
 	try {
-		return (await params.request("plugin/read", pluginReadParams(marketplace, pluginPolicy.pluginName))).plugin;
+		return (await params.request("plugin/read", pluginReadParams(marketplace, marketplace.remoteMarketplaceName && summary.remotePluginId ? summary.remotePluginId : pluginPolicy.pluginName))).plugin;
 	} catch (error) {
 		diagnostics.push({
 			code: "plugin_detail_unavailable",
@@ -454,6 +463,16 @@ function resolveOwnedApps(params) {
 function findPluginSummary(marketplace, pluginName) {
 	return marketplace.plugins.find((plugin) => plugin.name === pluginName || plugin.id === pluginName || plugin.id === `${pluginName}@${marketplace.name}` || pluginNameFromPluginId(plugin.id, marketplace.name) === pluginName);
 }
+function findOpenAiCuratedMarketplacePlugin(listed, pluginName) {
+	for (const marketplace of listed.marketplaces) {
+		if (!isOpenAiCuratedMarketplace(marketplace)) continue;
+		const summary = findPluginSummary(marketplace, pluginName);
+		if (summary) return {
+			marketplace,
+			summary
+		};
+	}
+}
 function pluginNameFromPluginId(pluginId, marketplaceName) {
 	const trimmed = pluginId.trim();
 	if (!trimmed) return;
@@ -467,6 +486,9 @@ function marketplaceRef(marketplace) {
 		...!marketplace.path ? { remoteMarketplaceName: marketplace.name } : {}
 	};
 }
+function isOpenAiCuratedMarketplace(marketplace) {
+	return marketplace.name === "openai-curated" || marketplace.name === CODEX_PLUGINS_REMOTE_MARKETPLACE_NAME;
+}
 //#endregion
 //#region extensions/codex/src/app-server/plugin-activation.ts
 /** Installs/enables a configured Codex plugin and refreshes plugin/app state. */
@@ -486,7 +508,7 @@ async function ensureCodexPluginActivation(params) {
 		marketplace: resolved.marketplace,
 		diagnostics: []
 	};
-	const installResponse = await params.request("plugin/install", pluginReadParams(resolved.marketplace, params.identity.pluginName));
+	const installResponse = await params.request("plugin/install", pluginReadParams(resolved.marketplace, resolved.marketplace.remoteMarketplaceName && resolved.summary.remotePluginId ? resolved.summary.remotePluginId : params.identity.pluginName));
 	const refreshDiagnostics = [];
 	let refreshFailed = false;
 	try {
@@ -593,9 +615,10 @@ async function buildCodexPluginThreadConfig(params) {
 		nowMs: params.nowMs,
 		suppressAppInventoryRefresh: true
 	});
+	const appInventoryRefreshDeferredForActivation = inventory.records.some((record) => record.activationRequired) && shouldRefreshMissingAppInventory(params, policy, inventory);
 	if (shouldWaitForInitialAppInventory(params, policy, inventory)) {
 		await refreshAppInventoryNow(params, appCache, {
-			forceRefetch: true,
+			forceRefetch: false,
 			reason: "initial_missing",
 			targetAppIds: collectInventoryOwnedAppIds(inventory)
 		});
@@ -630,10 +653,12 @@ async function buildCodexPluginThreadConfig(params) {
 			message: activation.diagnostics.map((item) => item.message).join(" ") || activation.reason
 		});
 	}
-	if (activationResults.some((activation) => activation.ok && activation.installAttempted)) {
+	const postInstallRefreshRequired = activationResults.some((activation) => activation.ok && activation.installAttempted);
+	const deferredMissingRefreshRequired = appInventoryRefreshDeferredForActivation && !postInstallRefreshRequired && shouldRefreshMissingAppInventory(params, policy, inventory);
+	if (postInstallRefreshRequired || deferredMissingRefreshRequired) {
 		await refreshAppInventoryNow(params, appCache, {
 			forceRefetch: true,
-			reason: "post_install",
+			reason: postInstallRefreshRequired ? "post_install" : "deferred_missing",
 			targetAppIds: collectInventoryOwnedAppIds(inventory)
 		});
 		inventory = await readCodexPluginInventory({
@@ -677,29 +702,36 @@ async function buildCodexPluginThreadConfig(params) {
 	const policyApps = {};
 	const pluginAppIds = {};
 	for (const record of inventory.records) {
-		if (record.activationRequired) {
-			if (!activationResults.find((item) => item.identity.configKey === record.policy.configKey)?.ok) continue;
-		}
+		const activation = activationResults.find((item) => item.identity.configKey === record.policy.configKey);
+		if (activation?.ok === false || record.activationRequired && !activation?.ok) continue;
 		if (record.appOwnership !== "proven") continue;
 		pluginAppIds[record.policy.configKey] = [...record.ownedAppIds].toSorted();
 		for (const app of resolveThreadConfigAppsForRecord({
 			record,
 			inventory
 		})) {
-			if (!app.accessible || !app.enabled) {
+			if (!isPluginAppReadyForThreadStart(app)) {
 				diagnostics.push({
 					code: "app_not_ready",
 					plugin: record.policy,
-					message: `${app.id} is not accessible or enabled for ${record.policy.pluginName}.`
+					message: `${app.id} is not accessible for ${record.policy.pluginName}.`
 				});
 				continue;
 			}
+			if (record.policy.destructiveApprovalMode === "ask" && !await clearPersistedAppToolApprovalOverrides({
+				request: params.request,
+				configCwd: params.configCwd,
+				plugin: record.policy,
+				app,
+				diagnostics
+			})) continue;
 			const appConfig = {
 				enabled: true,
 				destructive_enabled: record.policy.allowDestructiveActions,
 				open_world_enabled: true,
 				default_tools_approval_mode: "auto"
 			};
+			if (record.policy.destructiveApprovalMode === "ask") appConfig.approvals_reviewer = "user";
 			apps[app.id] = appConfig;
 			policyApps[app.id] = {
 				configKey: record.policy.configKey,
@@ -766,6 +798,22 @@ function buildDisabledAppsConfigPatch() {
 		open_world_enabled: false
 	} } };
 }
+/** Rebuilds the safe per-thread apps patch persisted with a Codex thread binding. */
+function buildCodexPluginAppsConfigPatchFromPolicyContext(policyContext) {
+	const apps = { _default: {
+		enabled: false,
+		destructive_enabled: false,
+		open_world_enabled: false
+	} };
+	for (const [appId, policy] of Object.entries(policyContext.apps).toSorted(([left], [right]) => left.localeCompare(right))) apps[appId] = {
+		enabled: true,
+		destructive_enabled: policy.allowDestructiveActions,
+		open_world_enabled: true,
+		default_tools_approval_mode: "auto",
+		...policy.destructiveApprovalMode === "ask" ? { approvals_reviewer: "user" } : {}
+	};
+	return { apps };
+}
 function buildPluginAppPolicyContext(apps, pluginAppIds) {
 	return {
 		fingerprint: fingerprintJson({
@@ -777,8 +825,53 @@ function buildPluginAppPolicyContext(apps, pluginAppIds) {
 		pluginAppIds
 	};
 }
+async function clearPersistedAppToolApprovalOverrides(params) {
+	try {
+		const overrideNames = await readPersistedAppToolApprovalOverrideNames(params);
+		for (const toolName of overrideNames) if (isOverriddenConfigWriteResponse(await params.request("config/value/write", {
+			keyPath: `apps.${quoteConfigKeyPathSegment(params.app.id)}.tools.${quoteConfigKeyPathSegment(toolName)}.approval_mode`,
+			value: null,
+			mergeStrategy: "replace"
+		}))) throw new Error(`approval override for ${toolName} is controlled by another config layer`);
+		const remainingOverrideNames = await readPersistedAppToolApprovalOverrideNames(params);
+		if (remainingOverrideNames.length > 0) throw new Error(`effective approval overrides remain for ${remainingOverrideNames.join(", ")}`);
+		return true;
+	} catch (error) {
+		params.diagnostics.push({
+			code: "approval_overrides_clear_failed",
+			plugin: params.plugin,
+			message: `Could not clear durable Codex app approval overrides for ${params.app.id}: ${error instanceof Error ? error.message : String(error)}`
+		});
+		return false;
+	}
+}
+async function readPersistedAppToolApprovalOverrideNames(params) {
+	const response = await params.request("config/read", {
+		includeLayers: false,
+		...params.configCwd ? { cwd: params.configCwd } : {}
+	});
+	const config = isJsonObject(response) ? response.config : void 0;
+	const appsRoot = isJsonObject(config) ? config.apps : void 0;
+	const nestedApps = isJsonObject(appsRoot) ? appsRoot.apps : void 0;
+	const appConfig = isJsonObject(appsRoot) ? appsRoot[params.app.id] ?? (isJsonObject(nestedApps) ? nestedApps[params.app.id] : void 0) : void 0;
+	const tools = isJsonObject(appConfig) ? appConfig.tools : void 0;
+	if (!isJsonObject(tools)) return [];
+	return Object.entries(tools).filter(([, value]) => hasPersistedToolApprovalOverride(value)).map(([toolName]) => toolName).toSorted();
+}
+function hasPersistedToolApprovalOverride(value) {
+	return isJsonObject(value) && (value.approval_mode !== void 0 || value.approvalMode !== void 0);
+}
+function isOverriddenConfigWriteResponse(response) {
+	return isJsonObject(response) && response.status === "okOverridden";
+}
+function quoteConfigKeyPathSegment(segment) {
+	return `"${segment.replace(/["\\]/g, (char) => `\\${char}`)}"`;
+}
 function shouldWaitForInitialAppInventory(params, policy, inventory) {
 	if (inventory.records.some((record) => record.activationRequired)) return false;
+	return shouldRefreshMissingAppInventory(params, policy, inventory);
+}
+function shouldRefreshMissingAppInventory(params, policy, inventory) {
 	return Boolean(params.appCacheKey && policy.pluginPolicies.some((plugin) => plugin.enabled) && inventory.appInventory?.state === "missing");
 }
 async function refreshAppInventoryNow(params, appCache, options = {}) {
@@ -809,10 +902,13 @@ function resolveThreadConfigAppsForRecord(params) {
 	if (params.inventory.appInventory?.state === "missing") return [];
 	return params.record.apps;
 }
+function isPluginAppReadyForThreadStart(app) {
+	return app.accessible;
+}
 function shouldForceRefreshForNotReadyPluginApps(params, policy, inventory) {
 	if (!params.appCacheKey || !policy.pluginPolicies.some((plugin) => plugin.enabled)) return false;
 	if (inventory.appInventory?.state === "missing") return false;
-	return inventory.records.some((record) => record.appOwnership === "proven" && record.ownedAppIds.length > 0 && (record.apps.length === 0 || record.apps.some((app) => !app.accessible || !app.enabled)));
+	return inventory.records.some((record) => record.appOwnership === "proven" && record.ownedAppIds.length > 0 && (record.apps.length === 0 || record.apps.some((app) => !app.accessible)));
 }
 function policyFingerprint(policy) {
 	return {
@@ -1598,7 +1694,8 @@ async function startOrResumeThread(params) {
 				configPatch: params.finalConfigPatch,
 				nativeHookRelayGeneration: params.nativeHookRelayGeneration
 			};
-			const resumeConfig = mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch, finalConfigPatch.configPatch);
+			const pluginAppsConfigPatch = params.pluginThreadConfig?.enabled && resumeBinding.pluginAppPolicyContext ? buildCodexPluginAppsConfigPatchFromPolicyContext(resumeBinding.pluginAppPolicyContext) : void 0;
+			const resumeConfig = mergeCodexThreadConfigs(params.config, userMcpServersConfigPatch, pluginAppsConfigPatch, finalConfigPatch.configPatch);
 			const resumeParams = lifecycleTiming.measureSync("thread-resume-params", () => buildThreadResumeParams(params.params, {
 				threadId: resumeBinding.threadId,
 				authProfileId,
@@ -1907,7 +2004,7 @@ function buildThreadStartParams(params, options) {
 		...modelSelection.modelProvider ? { modelProvider: modelSelection.modelProvider } : {},
 		cwd: options.cwd,
 		approvalPolicy: options.appServer.approvalPolicy,
-		approvalsReviewer: options.appServer.approvalsReviewer,
+		approvalsReviewer: resolveCodexThreadApprovalsReviewer(options.appServer, options.config),
 		...codexThreadSandboxOrPermissions(options.appServer),
 		...options.appServer.serviceTier !== void 0 ? { serviceTier: options.appServer.serviceTier } : {},
 		personality: CODEX_NATIVE_PERSONALITY_NONE,
@@ -1957,7 +2054,7 @@ function buildThreadResumeParams(params, options) {
 		model: modelSelection.model,
 		...modelSelection.modelProvider ? { modelProvider: modelSelection.modelProvider } : {},
 		approvalPolicy: options.appServer.approvalPolicy,
-		approvalsReviewer: options.appServer.approvalsReviewer,
+		approvalsReviewer: resolveCodexThreadApprovalsReviewer(options.appServer, options.config),
 		...codexThreadSandboxOrPermissions(options.appServer),
 		...options.appServer.serviceTier !== void 0 ? { serviceTier: options.appServer.serviceTier } : {},
 		personality: CODEX_NATIVE_PERSONALITY_NONE,
@@ -2082,7 +2179,7 @@ function buildTurnStartParams(params, options) {
 		model: modelSelection.model,
 		personality: CODEX_NATIVE_PERSONALITY_NONE,
 		...options.appServer.serviceTier !== void 0 ? { serviceTier: options.appServer.serviceTier } : {},
-		effort: resolveReasoningEffort(params.thinkLevel, modelSelection.model),
+		effort: resolveReasoningEffort(params.thinkLevel, modelSelection.model, readCodexSupportedReasoningEfforts(params.model?.compat)),
 		...options.environmentSelection ? { environments: options.environmentSelection } : {},
 		collaborationMode: buildTurnCollaborationMode(params, {
 			model: modelSelection.model,
@@ -2093,6 +2190,9 @@ function buildTurnStartParams(params, options) {
 		})
 	};
 }
+function resolveCodexThreadApprovalsReviewer(appServer, config) {
+	return config?.approvals_reviewer === "user" ? "user" : appServer.approvalsReviewer;
+}
 function codexThreadSandboxOrPermissions(appServer) {
 	if (appServer.networkProxy) return {};
 	return { sandbox: appServer.sandbox };
@@ -2108,7 +2208,7 @@ function buildTurnCollaborationMode(params, options = {}) {
 		mode: "default",
 		settings: {
 			model,
-			reasoning_effort: resolveReasoningEffort(params.thinkLevel, model),
+			reasoning_effort: resolveReasoningEffort(params.thinkLevel, model, readCodexSupportedReasoningEfforts(params.model?.compat)),
 			developer_instructions: buildTurnScopedCollaborationInstructions(params, options)
 		}
 	};
@@ -2116,7 +2216,7 @@ function buildTurnCollaborationMode(params, options = {}) {
 function buildTurnScopedCollaborationInstructions(params, options = {}) {
 	const contextInstructions = joinPresentSections(options.turnScopedDeveloperInstructions, options.memoryCollaborationInstructions, options.skillsCollaborationInstructions);
 	if (params.trigger === "cron") return joinPresentSections(buildCronCollaborationInstructions(), contextInstructions);
-	if (params.trigger === "heartbeat") return joinPresentSections(buildHeartbeatCollaborationInstructions(), contextInstructions, options.heartbeatCollaborationInstructions);
+	if (params.trigger === "heartbeat" && params.bootstrapContextRunKind !== "commitment-only") return joinPresentSections(buildHeartbeatCollaborationInstructions(), contextInstructions, options.heartbeatCollaborationInstructions);
 	if (contextInstructions?.trim()) return joinPresentSections(buildDefaultCollaborationInstructions(), contextInstructions);
 	return null;
 }
@@ -2259,10 +2359,16 @@ function resolveCodexAppServerModelProvider(params) {
 	if (isCodexAppServerNativeAuthProfile(params) && normalizedLower === "openai") return;
 	return normalizedLower === "openai" ? "openai" : normalized;
 }
-function resolveReasoningEffort(thinkLevel, modelId) {
+function resolveReasoningEffort(thinkLevel, modelId, supportedReasoningEfforts) {
+	if (thinkLevel === "off" || thinkLevel === "adaptive") return null;
+	if (supportedReasoningEfforts) return resolveCodexSupportedReasoningEffort({
+		requested: thinkLevel,
+		supportedReasoningEfforts
+	}) ?? null;
 	if (thinkLevel === "minimal") return isModernCodexModel(modelId) ? "low" : "minimal";
 	if (thinkLevel === "low" || thinkLevel === "medium" || thinkLevel === "high" || thinkLevel === "xhigh") return thinkLevel;
+	if (thinkLevel === "max" && isMaxReasoningCodexModel(modelId)) return "max";
 	return null;
 }
 //#endregion
-export { resolveCodexContextEngineProjectionReserveTokens as A, isCodexNotificationForTurn as B, isForcedPrivateQaCodexRuntime as C, fitCodexProjectedContextForTurnStart as D, resolveCodexDynamicToolsLoadingForRuntime as E, ensureCodexPluginActivation as F, readCodexNotificationTurnId as H, pluginReadParams as I, buildCodexAppInventoryCacheKey as L, buildCodexPluginThreadConfigInputFingerprint as M, mergeCodexThreadConfigs as N, projectContextEngineAssemblyForCodex as O, shouldBuildCodexPluginThreadConfig as P, defaultCodexAppInventoryCache as R, filterCodexDynamicTools as S, resolveCodexDynamicToolsLoading as T, readCodexNotificationThreadId as V, resolveCodexWebSearchPlan as _, buildDeveloperInstructions as a, sanitizeCodexHistoryImagePayloads as b, codexDynamicToolsFingerprint as c, resolveCodexAppServerRequestModelSelection as d, resolveCodexAppServerThreadModelSelection as f, buildCodexNativeWebSearchThreadConfig as g, startOrResumeThread as h, buildContextEngineBinding as i, buildCodexPluginThreadConfig as j, resolveCodexContextEngineProjectionMaxChars as k, isContextEngineBindingCompatible as l, resolveReasoningEffort as m, areCodexDynamicToolFingerprintsCompatible as n, buildTurnCollaborationMode as o, resolveCodexBindingModelProviderFallback as p, buildCodexRuntimeThreadConfig as r, buildTurnStartParams as s, CODEX_NATIVE_PERSONALITY_NONE as t, resolveCodexAppServerModelProvider as u, isCodexAppServerProfilerEnabled as v, normalizeCodexDynamicToolName as w, sanitizeInlineImageDataUrl$1 as x, invalidInlineImageText as y, describeCodexNotificationCorrelation as z };
+export { resolveCodexContextEngineProjectionReserveTokens as A, describeCodexNotificationCorrelation as B, isForcedPrivateQaCodexRuntime as C, fitCodexProjectedContextForTurnStart as D, resolveCodexDynamicToolsLoadingForRuntime as E, shouldBuildCodexPluginThreadConfig as F, readCodexNotificationThreadId as H, ensureCodexPluginActivation as I, pluginReadParams as L, buildCodexPluginThreadConfig as M, buildCodexPluginThreadConfigInputFingerprint as N, projectContextEngineAssemblyForCodex as O, mergeCodexThreadConfigs as P, buildCodexAppInventoryCacheKey as R, filterCodexDynamicTools as S, resolveCodexDynamicToolsLoading as T, readCodexNotificationTurnId as U, isCodexNotificationForTurn as V, resolveCodexWebSearchPlan as _, buildDeveloperInstructions as a, sanitizeCodexHistoryImagePayloads as b, codexDynamicToolsFingerprint as c, resolveCodexAppServerRequestModelSelection as d, resolveCodexAppServerThreadModelSelection as f, buildCodexNativeWebSearchThreadConfig as g, startOrResumeThread as h, buildContextEngineBinding as i, buildCodexPluginAppsConfigPatchFromPolicyContext as j, resolveCodexContextEngineProjectionMaxChars as k, isContextEngineBindingCompatible as l, resolveReasoningEffort as m, areCodexDynamicToolFingerprintsCompatible as n, buildTurnCollaborationMode as o, resolveCodexBindingModelProviderFallback as p, buildCodexRuntimeThreadConfig as r, buildTurnStartParams as s, CODEX_NATIVE_PERSONALITY_NONE as t, resolveCodexAppServerModelProvider as u, isCodexAppServerProfilerEnabled as v, normalizeCodexDynamicToolName as w, sanitizeInlineImageDataUrl$1 as x, invalidInlineImageText as y, defaultCodexAppInventoryCache as z };

package/dist/{web-search-provider.runtime-CkwxrXQj.js → web-search-provider.runtime-Q89rQhsL.js}

@@ -1,6 +1,6 @@
 import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
-import { g as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-DtT3-ehU.js";
-import { n as runBoundedCodexAppServerTurn } from "./media-understanding-provider-ZUQHN7gT.js";
+import { g as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-DeSMZSXr.js";
+import { n as runBoundedCodexAppServerTurn } from "./media-understanding-provider-C5yYzx_6.js";
 import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
 //#region extensions/codex/src/web-search-provider.runtime.ts
 async function executeCodexWebSearchProviderTool(ctx, args, executionContext, options) {

package/npm-shrinkwrap.json

@@ -1,23 +1,23 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.11",
+  "version": "2026.7.1-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/codex",
-      "version": "2026.6.11",
+      "version": "2026.7.1-beta.1",
       "dependencies": {
-        "@openai/codex": "0.139.0",
+        "@openai/codex": "0.142.4",
         "typebox": "1.1.39",
         "ws": "8.21.0",
         "zod": "4.4.3"
       }
     },
     "node_modules/@openai/codex": {
-      "version": "0.139.0",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0.tgz",
-      "integrity": "sha512-wr2fRE+fzW0CjEbfFsLh1ftarVEcw0CMLWS7QyA0nyOz5qacQPVq3cq2+/U7oEbwm1TOqoi0Fm1nxniB5FkpmA==",
+      "version": "0.142.4",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4.tgz",
+      "integrity": "sha512-BW9+3Cs7tChgkc0QhUsZIDm6XgpSDSeJkljRSHhJZqDwlaxDnNVhRP/sZwhgrTn3f2jPn3jc4WTKfLOTk+g5pA==",
       "license": "Apache-2.0",
       "bin": {
         "codex": "bin/codex.js"
@@ -26,19 +26,19 @@
         "node": ">=16"
       },
       "optionalDependencies": {
-        "@openai/codex-darwin-arm64": "npm:@openai/codex@0.139.0-darwin-arm64",
-        "@openai/codex-darwin-x64": "npm:@openai/codex@0.139.0-darwin-x64",
-        "@openai/codex-linux-arm64": "npm:@openai/codex@0.139.0-linux-arm64",
-        "@openai/codex-linux-x64": "npm:@openai/codex@0.139.0-linux-x64",
-        "@openai/codex-win32-arm64": "npm:@openai/codex@0.139.0-win32-arm64",
-        "@openai/codex-win32-x64": "npm:@openai/codex@0.139.0-win32-x64"
+        "@openai/codex-darwin-arm64": "npm:@openai/codex@0.142.4-darwin-arm64",
+        "@openai/codex-darwin-x64": "npm:@openai/codex@0.142.4-darwin-x64",
+        "@openai/codex-linux-arm64": "npm:@openai/codex@0.142.4-linux-arm64",
+        "@openai/codex-linux-x64": "npm:@openai/codex@0.142.4-linux-x64",
+        "@openai/codex-win32-arm64": "npm:@openai/codex@0.142.4-win32-arm64",
+        "@openai/codex-win32-x64": "npm:@openai/codex@0.142.4-win32-x64"
       }
     },
     "node_modules/@openai/codex-darwin-arm64": {
       "name": "@openai/codex",
-      "version": "0.139.0-darwin-arm64",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0-darwin-arm64.tgz",
-      "integrity": "sha512-o+0ZKWwgDFMMLO7rwinzO0PQsgK+Vme1pMN2GeAxsX29ZgGZcyPICfpJbeGSUO1mb2a36Skjx6nfdRnxMY0r7w==",
+      "version": "0.142.4-darwin-arm64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4-darwin-arm64.tgz",
+      "integrity": "sha512-CfXp5jilBOxD8zLuG6Nk7w5ZPP3roE3s1rsr60za9PQKI7kaJ/5G+oP3Z0N1CoB4mpy+5JHkMLTZAZZPGFlSgQ==",
       "cpu": [
         "arm64"
       ],
@@ -53,9 +53,9 @@
     },
     "node_modules/@openai/codex-darwin-x64": {
       "name": "@openai/codex",
-      "version": "0.139.0-darwin-x64",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0-darwin-x64.tgz",
-      "integrity": "sha512-9gkBWzu6DB2rqU4DbpxD3DE5bofGpsK46Lp0h0I+bKWc2IIcxvSi8K2utKmBLoJCbKrn4JQu7dFNGRqEfENung==",
+      "version": "0.142.4-darwin-x64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4-darwin-x64.tgz",
+      "integrity": "sha512-H9ia31pkJFtBk+UrREAfJiTUfcvgactKbG4W4SF2LFfJOTRsrsJZGtscHQ8/lLGeKEfOk/psrbSOPDyrZnxvnQ==",
       "cpu": [
         "x64"
       ],
@@ -70,9 +70,9 @@
     },
     "node_modules/@openai/codex-linux-arm64": {
       "name": "@openai/codex",
-      "version": "0.139.0-linux-arm64",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0-linux-arm64.tgz",
-      "integrity": "sha512-tBQE5lZciRHeWZGuURgjP9S717MvTIpQMc593+DNxY2LQxozkngOkzFSQd1+/UmQKGrCqdFLu5irIwPXpSZyEw==",
+      "version": "0.142.4-linux-arm64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4-linux-arm64.tgz",
+      "integrity": "sha512-/bBcEm+OKmlGHH0c88jrVgYMRyaNC/hGOW/znP/PiHQEeIf4UdsUGQ7x4FAZm648140cgaeKYIBoRBbHizS+5w==",
       "cpu": [
         "arm64"
       ],
@@ -87,9 +87,9 @@
     },
     "node_modules/@openai/codex-linux-x64": {
       "name": "@openai/codex",
-      "version": "0.139.0-linux-x64",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0-linux-x64.tgz",
-      "integrity": "sha512-14UgzDS+X4crkvdt6S02A/ZZOrS8ZyWiuTRpguCtnhNamb7unSuDxy86BWgpAl3sqiTaN2CP8VLyp2ohQ8Nbzw==",
+      "version": "0.142.4-linux-x64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4-linux-x64.tgz",
+      "integrity": "sha512-t3tNOkDdiO5/gRqkTmuMcAj5JjCbeWotOJzxV7pPkD2u2KvzVRrk7jPAjuy+85wPc12lsIupYgxHlK7CkVLOjA==",
       "cpu": [
         "x64"
       ],
@@ -104,9 +104,9 @@
     },
     "node_modules/@openai/codex-win32-arm64": {
       "name": "@openai/codex",
-      "version": "0.139.0-win32-arm64",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0-win32-arm64.tgz",
-      "integrity": "sha512-nlwRjsYotH1Rtqu/Q0VwQbIeO2UX1mkHK84Ov9qn/hl29QqqoBtno0tRyqIPbkXFIVQuWiAYXlV3ugLwH5fTrQ==",
+      "version": "0.142.4-win32-arm64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4-win32-arm64.tgz",
+      "integrity": "sha512-QBGeoYk3pmVscVIxeW21cvPJIjsnmD5dOTqMAzypXGik5soNIKHbps2Kj1LBKOjVbbx5qoDEbTwDfYmnjfqgdQ==",
       "cpu": [
         "arm64"
       ],
@@ -121,9 +121,9 @@
     },
     "node_modules/@openai/codex-win32-x64": {
       "name": "@openai/codex",
-      "version": "0.139.0-win32-x64",
-      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0-win32-x64.tgz",
-      "integrity": "sha512-lQrVLNz+90wdvWVNFDvCkHQRiAK9ZllmkTka3c8eqSDqdJk35Gpgppfv9Xtw5M2ZBtTq0sBdWBiCMyzGDBSpmQ==",
+      "version": "0.142.4-win32-x64",
+      "resolved": "https://registry.npmjs.org/@openai/codex/-/codex-0.142.4-win32-x64.tgz",
+      "integrity": "sha512-W0rSPT0t7FnKlJYNu9/HpHzaSOutuSSYjIVunKorYmrScXk9pQxBEhEuyn16JOtywc/2nX8nHEmWsuj2sd8suw==",
       "cpu": [
         "x64"
       ],

package/openclaw.plugin.json

@@ -101,7 +101,7 @@
             "default": false
           },
           "allow_destructive_actions": {
-            "oneOf": [{ "type": "boolean" }, { "const": "auto" }],
+            "oneOf": [{ "type": "boolean" }, { "const": "auto" }, { "const": "ask" }],
             "default": true
           },
           "plugins": {
@@ -121,7 +121,7 @@
                   "type": "string"
                 },
                 "allow_destructive_actions": {
-                  "oneOf": [{ "type": "boolean" }, { "const": "auto" }]
+                  "oneOf": [{ "type": "boolean" }, { "const": "auto" }, { "const": "ask" }]
                 }
               }
             }
@@ -343,7 +343,7 @@
     },
     "codexPlugins.allow_destructive_actions": {
       "label": "Allow Destructive Plugin Actions",
-      "help": "Default policy for plugin app write or destructive action elicitations. Use true to accept safe schemas without prompting, false to decline, or auto to ask through plugin approvals.",
+      "help": "Default policy for plugin app write or destructive action elicitations. Use true to accept safe schemas without prompting, false to decline, auto to ask through plugin approvals when Codex requires approval, or ask to prompt for every write/destructive action without durable approval.",
       "advanced": true
     },
     "codexPlugins.plugins": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.11",
+  "version": "2026.7.1-beta.1",
   "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "dependencies": {
-    "@openai/codex": "0.139.0",
+    "@openai/codex": "0.142.4",
     "typebox": "1.1.39",
     "ws": "8.21.0",
     "zod": "4.4.3"
@@ -34,10 +34,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.6.11"
+      "pluginApi": ">=2026.7.1-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.6.11"
+      "openclawVersion": "2026.7.1-beta.1"
     },
     "release": {
       "publishToClawHub": true,
@@ -55,7 +55,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.6.11"
+    "openclaw": ">=2026.7.1-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {