@openclaw/codex 2026.6.11 → 2026.7.1-beta.2

package/dist/{app-server-policy-BPTiVNsW.js → app-server-policy-B7hqD3Xj.js}

@@ -1,6 +1,6 @@
 import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-CszD0vP3.js";
-import { a as hasCodexRateLimitSnapshots, c as summarizeCodexAccountRateLimits, u as summarizeCodexRateLimits } from "./provider-B-OHpbD3.js";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-C_whBx3M.js";
+import { c as hasCodexRateLimitSnapshots, d as summarizeCodexAccountRateLimits, p as summarizeCodexRateLimits } from "./provider-nmtMDcGH.js";
 //#region extensions/codex/src/command-formatters.ts
 /** Formats the combined `/codex status` probe result. */
 function formatCodexStatus(probes) {

package/dist/{attempt-notifications-BYnndyFl.js → attempt-notifications-tqyQ_Tdn.js}

@@ -1,5 +1,5 @@
 import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
-import { B as isCodexNotificationForTurn } from "./thread-lifecycle-DtT3-ehU.js";
+import { V as isCodexNotificationForTurn } from "./thread-lifecycle-D6R40plk.js";
 import { asBoolean } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/attempt-notifications.ts
 /**
@@ -34,6 +34,30 @@ function updateActiveTurnItemIds(notification, activeItemIds) {
 	}
 	activeItemIds.delete(itemId);
 }
+function updateActiveCompletionBlockerItemIds(notification, activeItemIds) {
+	if (notification.method !== "item/started" && notification.method !== "item/completed") return;
+	const itemId = readNotificationItemId(notification);
+	if (!itemId) return;
+	if (notification.method === "item/completed") {
+		activeItemIds.delete(itemId);
+		return;
+	}
+	const item = readCodexNotificationItem(notification.params);
+	if (item && isCompletionBlockingItem(item)) activeItemIds.add(itemId);
+}
+function isCompletionBlockingItem(item) {
+	switch (item.type) {
+		case "collabAgentToolCall":
+		case "commandExecution":
+		case "dynamicToolCall":
+		case "fileChange":
+		case "imageGeneration":
+		case "imageView":
+		case "mcpToolCall":
+		case "webSearch": return true;
+		default: return false;
+	}
+}
 function isCompletedAssistantNotification(notification) {
 	if (!isJsonObject(notification.params)) return false;
 	if (notification.method !== "item/completed") return false;
@@ -255,4 +279,4 @@ function isNonEmptyString(value) {
 	return typeof value === "string" && value.length > 0;
 }
 //#endregion
-export { readCodexNotificationItem as C, updateActiveTurnItemIds as D, shouldDisarmAssistantCompletionIdleWatch as E, isTurnNotification as S, readRawResponseToolCallId as T, isRawToolOutputCompletionNotification as _, isCodexNotificationOutsideActiveRun as a, isRetryableErrorNotification as b, isCurrentThreadOptionalTurnRequestParams as c, isNativeResponseStreamDeltaNotification as d, isNativeToolProgressNotification as f, isRawReasoningCompletionNotification as g, isRawFunctionToolOutputCompletionNotification as h, isAssistantCompletionReleaseNotification as i, isCurrentThreadTurnRequestParams as l, isRawAssistantProgressNotification as m, describeNotificationActivity as n, isCodexTurnAbortMarkerNotification as o, isPendingOpenClawDynamicToolCompletionNotification as p, isAssistantCommentaryCompletionNotification as r, isCurrentApprovalTurnRequestParams as s, codexExecutionToolName as t, isFileChangePatchUpdatedNotification as u, isReasoningItemCompletionNotification as v, readNotificationItemId as w, isTerminalTurnStatus as x, isReasoningProgressNotification as y };
+export { readCodexNotificationItem as C, updateActiveCompletionBlockerItemIds as D, shouldDisarmAssistantCompletionIdleWatch as E, updateActiveTurnItemIds as O, isTurnNotification as S, readRawResponseToolCallId as T, isRawToolOutputCompletionNotification as _, isCodexNotificationOutsideActiveRun as a, isRetryableErrorNotification as b, isCurrentThreadOptionalTurnRequestParams as c, isNativeResponseStreamDeltaNotification as d, isNativeToolProgressNotification as f, isRawReasoningCompletionNotification as g, isRawFunctionToolOutputCompletionNotification as h, isAssistantCompletionReleaseNotification as i, isCurrentThreadTurnRequestParams as l, isRawAssistantProgressNotification as m, describeNotificationActivity as n, isCodexTurnAbortMarkerNotification as o, isPendingOpenClawDynamicToolCompletionNotification as p, isAssistantCommentaryCompletionNotification as r, isCurrentApprovalTurnRequestParams as s, codexExecutionToolName as t, isFileChangePatchUpdatedNotification as u, isReasoningItemCompletionNotification as v, readNotificationItemId as w, isTerminalTurnStatus as x, isReasoningProgressNotification as y };

package/dist/{client-CLrtWgrD.js → client-IcTBKEqA.js}

@@ -1,5 +1,5 @@
 import { r as isRpcResponse } from "./protocol-dh-ETiNd.js";
-import { d as resolveCodexAppServerRuntimeOptions } from "./config-CszD0vP3.js";
+import { d as resolveCodexAppServerRuntimeOptions } from "./config-C_whBx3M.js";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { OPENCLAW_VERSION, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { createInterface } from "node:readline";
@@ -637,6 +637,9 @@ function assertSupportedCodexAppServerVersion(response) {
 	if (compareCodexAppServerVersions(detectedVersion, "0.125.0") < 0) throw new Error(`Codex app-server ${MIN_CODEX_APP_SERVER_VERSION} or newer is required, but detected ${detectedVersion}. Update the configured Codex app-server binary, or remove custom command overrides to use the managed binary.`);
 	return detectedVersion;
 }
+function isUnsupportedCodexAppServerVersionError(error) {
+	return error instanceof Error && error.message.startsWith(`Codex app-server 0.125.0 or newer is required`);
+}
 function buildCodexAppServerRuntimeIdentity(response, serverVersion) {
 	const userAgent = readNonEmptyInitializeString(response.userAgent);
 	const codexHome = readNonEmptyInitializeString(response.codexHome);
@@ -726,4 +729,4 @@ function formatExitValue(value) {
 	return "unknown";
 }
 //#endregion
-export { isCodexAppServerConnectionClosedError as a, resolveCodexAppServerSpawnEnv as c, isCodexAppServerApprovalRequest as i, CodexAppServerRpcError as n, MANAGED_CODEX_APP_SERVER_PACKAGE as o, compareCodexAppServerVersions as r, MIN_CODEX_SANDBOX_EXEC_SERVER_APP_SERVER_VERSION as s, CodexAppServerClient as t };
+export { isCodexAppServerConnectionClosedError as a, MIN_CODEX_SANDBOX_EXEC_SERVER_APP_SERVER_VERSION as c, isCodexAppServerApprovalRequest as i, resolveCodexAppServerSpawnEnv as l, CodexAppServerRpcError as n, isUnsupportedCodexAppServerVersionError as o, compareCodexAppServerVersions as r, MANAGED_CODEX_APP_SERVER_PACKAGE as s, CodexAppServerClient as t };

package/dist/{client-factory-Bm6HsGob.js → client-factory-DfFu9JH_.js}

@@ -1,9 +1,6 @@
+import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/codex/src/app-server/client-factory.ts
-let sharedClientModulePromise = null;
-const loadSharedClientModule = async () => {
-	sharedClientModulePromise ??= import("./shared-client-Dtx5i7Ez.js").then((n) => n.c);
-	return await sharedClientModulePromise;
-};
+const loadSharedClientModule = createLazyRuntimeModule(() => import("./shared-client-rR6TDJA3.js").then((n) => n.c));
 /** Returns a leased shared client so startup can release ownership explicitly. */
 const defaultLeasedCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config, options) => loadSharedClientModule().then(({ getLeasedSharedCodexAppServerClient }) => getLeasedSharedCodexAppServerClient({
 	startOptions,

package/dist/{command-handlers-DEPTJYk0.js → command-handlers-C9K-KRU-.js}

@@ -1,14 +1,14 @@
 import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
-import { d as resolveCodexAppServerRuntimeOptions, o as isCodexFastServiceTier } from "./config-CszD0vP3.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-CAmfBWRl.js";
-import { l as summarizeCodexAccountUsage } from "./provider-B-OHpbD3.js";
-import { l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-HOuPt-E0.js";
-import { i as describeControlFailure, r as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-C9ILt7bl.js";
-import { a as formatCodexDisplayText, c as formatList, d as formatThreads, f as readString$1, i as formatAccount, l as formatModels, o as formatCodexStatus, r as buildHelp, s as formatComputerUseStatus, u as formatSkills } from "./app-server-policy-BPTiVNsW.js";
-import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-3tnjhjFb.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-t0XMLz-j.js";
-import { t as requestCodexAppServerJson } from "./request-Dcd452Nk.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-ClrJwoFp.js";
+import { d as resolveCodexAppServerRuntimeOptions, o as isCodexFastServiceTier } from "./config-C_whBx3M.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-DpzY1xpp.js";
+import { f as summarizeCodexAccountUsage } from "./provider-nmtMDcGH.js";
+import { l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-Cm0Gg7Z1.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-BrZUG9jj.js";
+import { a as formatCodexDisplayText, c as formatList, d as formatThreads, f as readString$1, i as formatAccount, l as formatModels, o as formatCodexStatus, r as buildHelp, s as formatComputerUseStatus, u as formatSkills } from "./app-server-policy-B7hqD3Xj.js";
+import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-pTY2COoC.js";
+import { C as canMutateCodexHost, S as CODEX_NATIVE_EXECUTION_AUTH_ERROR, _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-DOJtUxOy.js";
+import { t as requestCodexAppServerJson } from "./request-BQuSQF29.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CpurU-G9.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-C7qmZ0Jh.js";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -349,7 +349,7 @@ async function handleCodexPluginsSubcommand(ctx, rest, io) {
 	if (normalized === "enable" || normalized === "disable") {
 		if (args.length === 0) return buildPluginNamePickerReply(normalized, await io.readConfig());
 		if (!target || args.length > 1) return { text: `Usage: /codex plugins ${normalized} <name>` };
-		if (!canMutateCodexPlugins(ctx)) return { text: `Only an owner or operator.admin gateway client can run /codex plugins ${normalized}.` };
+		if (!canMutateCodexHost(ctx)) return { text: `Only an owner or operator.admin gateway client can run /codex plugins ${normalized}.` };
 		const wantEnabled = normalized === "enable";
 		if (!((await io.readConfig()).plugins ?? {})[target]) return { text: `Codex sub-plugin '${formatCodexDisplayText(target)}' is not configured. Run '/codex plugins list' to see configured plugins.` };
 		await io.mutate((block) => {
@@ -440,10 +440,6 @@ function buildPluginNamePickerReply(verb, current) {
 		presentation: buildCodexCommandPickerPresentation("Codex sub-plugins", `Pick a Codex sub-plugin to ${verb}:`, buttons)
 	};
 }
-function canMutateCodexPlugins(ctx) {
-	if (ctx.senderIsOwner === true) return true;
-	return ctx.gatewayClientScopes?.includes("operator.admin") === true;
-}
 function buildPluginsHelp() {
 	return [
 		"Codex sub-plugin management (writes only to ~/.openclaw/openclaw.json, never to ~/.codex/config.toml):",
@@ -588,6 +584,12 @@ const CODEX_NATIVE_EXECUTION_SUBCOMMANDS = new Set([
 	"compact",
 	"review"
 ]);
+const CODEX_NATIVE_CONTROL_SUBCOMMANDS = new Set([
+	...CODEX_NATIVE_EXECUTION_SUBCOMMANDS,
+	"detach",
+	"unbind",
+	"stop"
+]);
 const lastCodexDiagnosticsUploadByThread = /* @__PURE__ */ new Map();
 const lastCodexDiagnosticsUploadByScope = /* @__PURE__ */ new Map();
 const pendingCodexDiagnosticsConfirmations = /* @__PURE__ */ new Map();
@@ -725,6 +727,7 @@ async function handleCodexSubcommand(ctx, options) {
 	const [subcommand = "status", ...rest] = args;
 	const normalized = subcommand.toLowerCase();
 	if (normalized === "help") return { text: buildHelp() };
+	if (CODEX_NATIVE_CONTROL_SUBCOMMANDS.has(normalized) && !returnsBeforeNativeCodexExecution(normalized, rest) && !canMutateCodexHost(ctx)) return { text: CODEX_NATIVE_EXECUTION_AUTH_ERROR };
 	const sandboxBlock = resolveCodexNativeCommandSandboxBlock(ctx, normalized, rest);
 	if (sandboxBlock) return { text: sandboxBlock };
 	if (normalized === "plugins") {
@@ -770,7 +773,7 @@ async function handleCodexSubcommand(ctx, options) {
 	if (normalized === "diagnostics") return await handleCodexDiagnosticsFeedback(deps, ctx, options.pluginConfig, rest.join(" "), "/codex diagnostics");
 	if (normalized === "computer-use" || normalized === "computeruse") {
 		if (isMenuVerb(rest)) return buildCodexComputerUseMenuReply();
-		return { text: await handleComputerUseCommand(deps, options.pluginConfig, rest) };
+		return { text: await handleComputerUseCommand(deps, ctx, options.pluginConfig, rest) };
 	}
 	if (normalized === "mcp") {
 		if (rest.length > 0) return { text: "Usage: /codex mcp" };
@@ -820,6 +823,8 @@ function returnsBeforeNativeCodexExecution(subcommand, args) {
 		case "permissions": return args.length === 0 || args.length > 1 || parseCodexPermissionsModeArg(args[0]) === void 0;
 		case "compact":
 		case "review":
+		case "detach":
+		case "unbind":
 		case "stop": return args.length > 0;
 		default: return false;
 	}
@@ -836,9 +841,10 @@ function returnsBeforeNativeCodexResume(args) {
 	if (parsed.host) return !normalizedThreadId || parsed.bindHere !== true;
 	return !normalizedThreadId || args.length !== 1;
 }
-async function handleComputerUseCommand(deps, pluginConfig, args) {
+async function handleComputerUseCommand(deps, ctx, pluginConfig, args) {
 	const parsed = parseComputerUseArgs(args);
 	if (parsed.help) return ["Usage: /codex computer-use [status|install] [--source <marketplace-source>] [--marketplace-path <path>] [--marketplace <name>]", "Checks or installs the configured Codex Computer Use plugin through app-server."].join("\n");
+	if (parsed.action === "install" && !canMutateCodexHost(ctx)) return "Only an owner or operator.admin gateway client can configure Codex Computer Use.";
 	const params = {
 		pluginConfig,
 		forceEnable: parsed.action === "install" || parsed.hasOverrides,
@@ -1046,11 +1052,11 @@ async function setConversationFastMode(deps, ctx, pluginConfig, args) {
 }
 async function setConversationPermissions(deps, ctx, pluginConfig, args) {
 	if (args.length > 1) return "Usage: /codex permissions [default|yolo|status]";
-	const target = await resolveControlTarget(ctx);
-	if (!target) return "Cannot set Codex permissions because this command did not include an OpenClaw session file.";
 	const value = args[0];
 	const parsed = parseCodexPermissionsModeArg(value);
 	if (value && !parsed && value.trim().toLowerCase() !== "status") return "Usage: /codex permissions [default|yolo|status]";
+	const target = await resolveControlTarget(ctx);
+	if (!target) return "Cannot set Codex permissions because this command did not include an OpenClaw session file.";
 	return await deps.setCodexConversationPermissions({
 		sessionFile: target.sessionFile,
 		pluginConfig,

package/dist/{compact-aQJ0ZKhe.js → compact-CILptrPS.js}

@@ -1,8 +1,8 @@
-import { d as resolveCodexAppServerRuntimeOptions } from "./config-CszD0vP3.js";
-import { c as withCodexAppServerBindingLock, l as writeCodexAppServerBinding, o as readCodexAppServerBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-HOuPt-E0.js";
-import { o as releaseLeasedSharedCodexAppServerClient } from "./shared-client-Dtx5i7Ez.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-3tnjhjFb.js";
-import { t as defaultLeasedCodexAppServerClientFactory } from "./client-factory-Bm6HsGob.js";
+import { d as resolveCodexAppServerRuntimeOptions } from "./config-C_whBx3M.js";
+import { c as withCodexAppServerBindingLock, l as writeCodexAppServerBinding, o as readCodexAppServerBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-Cm0Gg7Z1.js";
+import { o as releaseLeasedSharedCodexAppServerClient } from "./shared-client-rR6TDJA3.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-pTY2COoC.js";
+import { t as defaultLeasedCodexAppServerClientFactory } from "./client-factory-DfFu9JH_.js";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 /**

package/dist/{computer-use-ClrJwoFp.js → computer-use-CpurU-G9.js}

@@ -1,6 +1,6 @@
-import { d as resolveCodexAppServerRuntimeOptions, f as resolveCodexComputerUseConfig } from "./config-CszD0vP3.js";
-import { i as describeControlFailure } from "./plugin-app-cache-key-C9ILt7bl.js";
-import { t as requestCodexAppServerJson } from "./request-Dcd452Nk.js";
+import { d as resolveCodexAppServerRuntimeOptions, f as resolveCodexComputerUseConfig } from "./config-C_whBx3M.js";
+import { i as describeControlFailure } from "./plugin-app-cache-key-BrZUG9jj.js";
+import { t as requestCodexAppServerJson } from "./request-BQuSQF29.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 /**

package/dist/{config-CszD0vP3.js → config-C_whBx3M.js}

@@ -46,7 +46,11 @@ const codexAppServerApprovalsReviewerSchema = z.enum([
 	"guardian_subagent"
 ]);
 const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
-const codexPluginDestructivePolicySchema = z.union([z.boolean(), z.literal("auto")]);
+const codexPluginDestructivePolicySchema = z.union([
+	z.boolean(),
+	z.literal("auto"),
+	z.literal("ask")
+]);
 const codexAppServerServiceTierSchema = z.preprocess((value) => value === null ? null : normalizeCodexServiceTier(value), z.string().trim().min(1).nullable().optional()).optional();
 const codexAppServerExperimentalSchema = z.object({ sandboxExecServer: z.boolean().optional() }).strict();
 const codexAppServerRemoteWorkspaceRootSchema = z.string().trim().min(1);
@@ -167,9 +171,9 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 	};
 }
 function resolveCodexPluginDestructivePolicy(policy) {
-	if (policy === "auto") return {
+	if (policy === "auto" || policy === "ask") return {
 		allowDestructiveActions: true,
-		destructiveApprovalMode: "auto"
+		destructiveApprovalMode: policy
 	};
 	return {
 		allowDestructiveActions: policy,
@@ -366,6 +370,7 @@ function codexAppServerStartOptionsKey(options, params = {}) {
 		transport: options.transport,
 		command: options.command,
 		commandSource: options.commandSource ?? null,
+		managedFallbackCommandPaths: [...options.managedFallbackCommandPaths ?? []],
 		args: options.args,
 		url: options.url ?? null,
 		authToken: hashSecretForKey(options.authToken, "authToken"),

package/dist/{conversation-binding-t0XMLz-j.js → conversation-binding-DOJtUxOy.js}

@@ -1,12 +1,12 @@
 import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
-import { H as readCodexNotificationTurnId, V as readCodexNotificationThreadId, d as resolveCodexAppServerRequestModelSelection, p as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-DtT3-ehU.js";
-import { d as resolveCodexAppServerRuntimeOptions, h as resolveOpenClawExecPolicyForCodexAppServer, i as codexSandboxPolicyForTurn, n as canUseCodexModelBackedApprovalsReviewerForModel, o as isCodexFastServiceTier, p as resolveCodexModelBackedReviewerPolicyContext } from "./config-CszD0vP3.js";
-import { r as assertCodexThreadStartResponse } from "./protocol-validators-B19q5BIX.js";
-import { a as normalizeCodexAppServerBindingModelProvider, i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-HOuPt-E0.js";
-import { r as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-C9ILt7bl.js";
-import { a as formatCodexDisplayText, t as resolveCodexAppServerForModelProvider } from "./app-server-policy-BPTiVNsW.js";
-import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-Dtx5i7Ez.js";
-import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-3tnjhjFb.js";
+import { H as readCodexNotificationThreadId, U as readCodexNotificationTurnId, d as resolveCodexAppServerRequestModelSelection, p as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-D6R40plk.js";
+import { d as resolveCodexAppServerRuntimeOptions, h as resolveOpenClawExecPolicyForCodexAppServer, i as codexSandboxPolicyForTurn, n as canUseCodexModelBackedApprovalsReviewerForModel, o as isCodexFastServiceTier, p as resolveCodexModelBackedReviewerPolicyContext } from "./config-C_whBx3M.js";
+import { r as assertCodexThreadStartResponse } from "./protocol-validators-CJiWigAJ.js";
+import { a as normalizeCodexAppServerBindingModelProvider, i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-Cm0Gg7Z1.js";
+import { r as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-BrZUG9jj.js";
+import { a as formatCodexDisplayText, t as resolveCodexAppServerForModelProvider } from "./app-server-policy-B7hqD3Xj.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-rR6TDJA3.js";
+import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-pTY2COoC.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveTimerTimeoutMs, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
@@ -18,9 +18,16 @@ import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { formatErrorMessage, resolveSandboxContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { spawn } from "node:child_process";
-import { loadSessionStore, resolveSessionStoreEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { fileURLToPath } from "node:url";
 import process$1 from "node:process";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
+//#region extensions/codex/src/command-authorization.ts
+const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";
+function canMutateCodexHost(ctx) {
+	return ctx.senderIsOwner === true || ctx.gatewayClientScopes?.includes("operator.admin") === true;
+}
+//#endregion
 //#region extensions/codex/src/conversation-binding-data.ts
 const BINDING_DATA_VERSION = 1;
 function createCodexConversationBindingData(params) {
@@ -942,7 +949,8 @@ function normalizeTimeoutMs(value) {
 	return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.min(60 * 6e4, Math.floor(value)) : DEFAULT_RESUME_TIMEOUT_MS;
 }
 function truncateText(value, max) {
-	return value.length > max ? `${value.slice(0, max - 3)}...` : value;
+	if (value.length <= max) return value;
+	return `${truncateUtf16Safe(value, Math.max(0, max - 3))}...`;
 }
 function compareOptionalStringsDesc(a, b) {
 	return (b ?? "").localeCompare(a ?? "");
@@ -1054,6 +1062,10 @@ async function handleCodexConversationInboundClaim(event, ctx, options = {}) {
 	if (event.commandAuthorized !== true) return { handled: true };
 	const prompt = event.bodyForAgent?.trim() || event.content?.trim() || "";
 	if (!prompt) return { handled: true };
+	if (!canMutateCodexHost(event)) return {
+		handled: true,
+		reply: { text: CODEX_NATIVE_EXECUTION_AUTH_ERROR }
+	};
 	const nativeExecutionBlock = data.kind === "codex-cli-node-session" ? resolveCodexNativeSandboxBlock({
 		config: options.config,
 		sessionKey: event.sessionKey ?? ctx.sessionKey,
@@ -1466,10 +1478,11 @@ function readSessionExecOverrides(params) {
 		agentId: params.agentId,
 		sessionKey
 	})) return;
-	const entry = resolveSessionStoreEntry({
-		store: loadSessionStore(resolveStorePath(params.config.session?.store, { agentId: params.agentId }), { skipCache: true }),
-		sessionKey
-	}).existing;
+	const entry = getSessionEntry({
+		storePath: resolveStorePath(params.config.session?.store, { agentId: params.agentId }),
+		sessionKey,
+		readConsistency: "latest"
+	});
 	if (!entry?.execSecurity && !entry?.execAsk) return;
 	return {
 		security: entry.execSecurity,
@@ -1554,4 +1567,4 @@ function buildAgentLookup(params) {
 	};
 }
 //#endregion
-export { steerCodexConversationTurn as _, createCodexCliSessionNodeInvokePolicies as a, readCodexConversationBindingData as b, resolveCodexCliSessionForBindingOnNode as c, parseCodexFastModeArg as d, parseCodexPermissionsModeArg as f, setCodexConversationPermissions as g, setCodexConversationModel as h, createCodexCliSessionNodeHostCommands as i, resumeCodexCliSessionOnNode as l, setCodexConversationFastMode as m, handleCodexConversationInboundClaim as n, formatCodexCliSessions as o, readCodexConversationActiveTurn as p, startCodexConversationThread as r, listCodexCliSessionsOnNode as s, handleCodexConversationBindingResolved as t, formatPermissionsMode as u, stopCodexConversationTurn as v, resolveCodexDefaultWorkspaceDir as x, createCodexCliNodeConversationBindingData as y };
+export { canMutateCodexHost as C, CODEX_NATIVE_EXECUTION_AUTH_ERROR as S, steerCodexConversationTurn as _, createCodexCliSessionNodeInvokePolicies as a, readCodexConversationBindingData as b, resolveCodexCliSessionForBindingOnNode as c, parseCodexFastModeArg as d, parseCodexPermissionsModeArg as f, setCodexConversationPermissions as g, setCodexConversationModel as h, createCodexCliSessionNodeHostCommands as i, resumeCodexCliSessionOnNode as l, setCodexConversationFastMode as m, handleCodexConversationInboundClaim as n, formatCodexCliSessions as o, readCodexConversationActiveTurn as p, startCodexConversationThread as r, listCodexCliSessionsOnNode as s, handleCodexConversationBindingResolved as t, formatPermissionsMode as u, stopCodexConversationTurn as v, resolveCodexDefaultWorkspaceDir as x, createCodexCliNodeConversationBindingData as y };

package/dist/harness.js

@@ -32,25 +32,25 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-CXxtFC9d.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DikbXia_.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-C-DhgJOd.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-Ca9wqmd0.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-aQJ0ZKhe.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-CILptrPS.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		compactAfterContextEngine: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-aQJ0ZKhe.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-CILptrPS.js");
 			return maybeCompactCodexAppServerSession(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				allowNonManualNativeRequest: true
@@ -58,12 +58,12 @@ function createCodexAppServerAgentHarness(options) {
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-HOuPt-E0.js").then((n) => n.s);
+				const { clearCodexAppServerBinding } = await import("./session-binding-Cm0Gg7Z1.js").then((n) => n.s);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-Dtx5i7Ez.js").then((n) => n.c);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-rR6TDJA3.js").then((n) => n.c);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,13 +1,13 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
-import { F as ensureCodexPluginActivation, I as pluginReadParams, R as defaultCodexAppInventoryCache } from "./thread-lifecycle-DtT3-ehU.js";
-import { d as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME, u as readCodexPluginConfig } from "./config-CszD0vP3.js";
-import { t as buildCodexProvider } from "./provider-B-OHpbD3.js";
-import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-ZUQHN7gT.js";
-import { i as describeControlFailure, n as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-C9ILt7bl.js";
-import { a as formatCodexDisplayText } from "./app-server-policy-BPTiVNsW.js";
-import { a as getLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthAccountCacheKey, m as resolveCodexAppServerFallbackApiKeyCacheKey, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, r as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-Dtx5i7Ez.js";
-import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-t0XMLz-j.js";
-import { t as requestCodexAppServerJson } from "./request-Dcd452Nk.js";
+import { I as ensureCodexPluginActivation, L as pluginReadParams, z as defaultCodexAppInventoryCache } from "./thread-lifecycle-D6R40plk.js";
+import { d as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME, u as readCodexPluginConfig } from "./config-C_whBx3M.js";
+import { t as buildCodexProvider } from "./provider-nmtMDcGH.js";
+import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-BOeoBhEw.js";
+import { i as describeControlFailure, n as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BrZUG9jj.js";
+import { a as formatCodexDisplayText } from "./app-server-policy-B7hqD3Xj.js";
+import { a as getLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthAccountCacheKey, m as resolveCodexAppServerFallbackApiKeyCacheKey, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, r as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-rR6TDJA3.js";
+import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-DOJtUxOy.js";
+import { t as requestCodexAppServerJson } from "./request-BQuSQF29.js";
 import { t as createCodexWebSearchProviderBase } from "./web-search-provider.shared-BrZmlqyR.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { resolveLivePluginConfigObject, resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
@@ -22,7 +22,9 @@ import { applyAuthProfileConfig, buildApiKeyCredential, buildOauthProviderAuthRe
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { MIGRATION_REASON_TARGET_EXISTS, applyMigrationManualItem, createMigrationItem, createMigrationManualItem, hasMigrationConfigPatchConflict, markMigrationItemConflict, markMigrationItemError, markMigrationItemSkipped, readMigrationConfigPath, summarizeMigrationItems, writeMigrationConfigPath } from "openclaw/plugin-sdk/migration";
 import { archiveMigrationItem, copyMigrationFileItem, withCachedMigrationConfigRuntime, writeMigrationReport } from "openclaw/plugin-sdk/migration-runtime";
+import { sleep } from "openclaw/plugin-sdk/runtime-env";
 import { readJsonFileWithFallback } from "openclaw/plugin-sdk/json-store";
+import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/codex/src/commands.ts
 /** Creates the reserved `/codex` command definition exposed by the plugin. */
 function createCodexCommand(options) {
@@ -52,7 +54,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-DEPTJYk0.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-C9K-KRU-.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -950,9 +952,11 @@ function isLegacyDestructivePolicyRepair(existing, nextEntry) {
 	const normalizedEntries = Object.entries(normalizedExisting);
 	return normalizedEntries.length === Object.keys(nextEntry).length && normalizedEntries.every(([key, value]) => nextEntry[key] === value);
 }
-function isLegacyDestructivePolicyConfigEntryRepair(existing, pluginName) {
+function readExistingPluginAllowDestructiveActions(existing, pluginName) {
 	const existingEntry = isRecord(existing) ? existing : void 0;
-	return existingEntry?.allow_destructive_actions === "on-request" && existingEntry.pluginName === pluginName;
+	if (existingEntry?.pluginName !== pluginName) return;
+	const normalized = normalizeExistingAllowDestructiveActions(existingEntry.allow_destructive_actions);
+	return normalized === "auto" || normalized === "ask" ? normalized : void 0;
 }
 function buildPluginItems(ctx, plugins) {
 	const baseCounts = /* @__PURE__ */ new Map();
@@ -971,7 +975,10 @@ function buildPluginItems(ctx, plugins) {
 				enabled: true,
 				marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
 				pluginName: plugin.pluginName,
-				...isLegacyDestructivePolicyConfigEntryRepair(existingPluginEntries[configKey], plugin.pluginName) ? { allow_destructive_actions: "auto" } : {}
+				...(() => {
+					const allowDestructiveActions = readExistingPluginAllowDestructiveActions(existingPluginEntries[configKey], plugin.pluginName);
+					return allowDestructiveActions ? { allow_destructive_actions: allowDestructiveActions } : {};
+				})()
 			};
 			const conflict = !ctx.overwrite && hasExistingCodexPluginEntry(existingPluginEntries, configKey, plugin.pluginName, plannedEntry);
 			items.push(createMigrationItem({
@@ -989,7 +996,7 @@ function buildPluginItems(ctx, plugins) {
 					pluginName: plugin.pluginName,
 					sourceInstalled: plugin.installed === true,
 					sourceEnabled: plugin.enabled === true,
-					...plannedEntry.allow_destructive_actions === "auto" ? { allowDestructiveActions: "auto" } : {},
+					...plannedEntry.allow_destructive_actions === "auto" || plannedEntry.allow_destructive_actions === "ask" ? { allowDestructiveActions: plannedEntry.allow_destructive_actions } : {},
 					...plugin.apps && plugin.apps.length > 0 && !shouldVerifyPluginApps(ctx) ? { sourceAppVerification: CODEX_PLUGIN_SOURCE_APP_VERIFICATION_UNVERIFIED } : {}
 				}
 			}));
@@ -1032,18 +1039,21 @@ function readCodexPluginMigrationConfigEntry(item, enabled) {
 	const marketplaceName = item.details?.marketplaceName;
 	const pluginName = item.details?.pluginName;
 	if (item.kind !== "plugin" || item.action !== "install" || typeof configKey !== "string" || marketplaceName !== "openai-curated" || typeof pluginName !== "string") return;
+	const allowDestructiveActions = item.details?.allowDestructiveActions;
 	return {
 		configKey,
 		pluginName,
 		enabled,
-		...item.details?.allowDestructiveActions === "auto" ? { allowDestructiveActions: "auto" } : {}
+		...allowDestructiveActions === "auto" || allowDestructiveActions === "ask" ? { allowDestructiveActions } : {}
 	};
 }
 function readExistingAllowDestructiveActions(config) {
 	return normalizeExistingAllowDestructiveActions(readMigrationConfigPath(config, [...CODEX_PLUGIN_NATIVE_CONFIG_PATH, "allow_destructive_actions"]));
 }
 function normalizeExistingAllowDestructiveActions(value) {
-	return value === "auto" || value === "on-request" ? "auto" : asBoolean(value);
+	if (value === "auto" || value === "on-request") return "auto";
+	if (value === "ask") return "ask";
+	return asBoolean(value);
 }
 function readExistingPluginPolicyRepairs(config) {
 	if (config === void 0) return {};
@@ -1397,11 +1407,6 @@ function targetCodexMarketplaceDiscoveryTimeoutMs(env = process.env) {
 function isCodexPluginLoadWarningItem(item) {
 	return item.kind === "plugin" && item.action === "install" && item.status === "warning" && item.details?.warningReason === CODEX_PLUGIN_LOAD_WARNING;
 }
-async function sleep(ms) {
-	await new Promise((resolve) => {
-		setTimeout(resolve, ms);
-	});
-}
 async function buildTargetCodexPluginAppCacheKey(ctx) {
 	const targets = resolveCodexMigrationTargets(ctx);
 	const appServer = resolveTargetCodexAppServer(ctx);
@@ -1540,11 +1545,7 @@ function buildCodexMigrationProvider(params = {}) {
 }
 //#endregion
 //#region extensions/codex/src/web-search-provider.ts
-let codexWebSearchRuntimePromise;
-function loadCodexWebSearchRuntime() {
-	codexWebSearchRuntimePromise ??= import("./web-search-provider.runtime-CkwxrXQj.js");
-	return codexWebSearchRuntimePromise;
-}
+const loadCodexWebSearchRuntime = createLazyRuntimeModule(() => import("./web-search-provider.runtime-B6eZEFmd.js"));
 const CodexWebSearchSchema = {
 	type: "object",
 	properties: { query: {

package/dist/{media-understanding-provider-ZUQHN7gT.js → media-understanding-provider-BOeoBhEw.js}

@@ -1,10 +1,10 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
 import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
-import { N as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-DtT3-ehU.js";
-import { C as readCodexNotificationItem } from "./attempt-notifications-BYnndyFl.js";
-import { d as resolveCodexAppServerRuntimeOptions } from "./config-CszD0vP3.js";
-import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-B19q5BIX.js";
-import { i as readModelListResult } from "./models-CAmfBWRl.js";
+import { P as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-D6R40plk.js";
+import { C as readCodexNotificationItem } from "./attempt-notifications-tqyQ_Tdn.js";
+import { d as resolveCodexAppServerRuntimeOptions } from "./config-C_whBx3M.js";
+import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CJiWigAJ.js";
+import { i as readModelListResult } from "./models-DpzY1xpp.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -51,7 +51,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 	const agentDir = params.agentDir?.trim() || void 0;
 	const startOptions = workspace.codexHome ? buildPrivateCodexAppServerStartOptions(appServer.start, workspace.codexHome) : appServer.start;
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(startOptions, params.profile, agentDir, params.config, { timeoutMs }) : await import("./shared-client-Dtx5i7Ez.js").then((n) => n.c).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(startOptions, params.profile, agentDir, params.config, { timeoutMs }) : await import("./shared-client-rR6TDJA3.js").then((n) => n.c).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions,
 		timeoutMs,
 		authProfileId: params.profile,

package/dist/media-understanding-provider.js

@@ -1,2 +1,2 @@
-import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-ZUQHN7gT.js";
+import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-BOeoBhEw.js";
 export { buildCodexMediaUnderstandingProvider };

package/dist/{models-CAmfBWRl.js → models-DpzY1xpp.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { s as readCodexModelListResponse } from "./protocol-validators-B19q5BIX.js";
+import { s as readCodexModelListResponse } from "./protocol-validators-CJiWigAJ.js";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 /**
@@ -46,7 +46,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-Dtx5i7Ez.js").then((n) => n.c);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-rR6TDJA3.js").then((n) => n.c);
 	const client = useSharedClient ? await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/{plugin-app-cache-key-C9ILt7bl.js → plugin-app-cache-key-BrZUG9jj.js}

@@ -1,7 +1,10 @@
-import { L as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-DtT3-ehU.js";
-import { n as CodexAppServerRpcError } from "./client-CLrtWgrD.js";
-import { h as resolveCodexAppServerHomeDir } from "./shared-client-Dtx5i7Ez.js";
+import { R as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-D6R40plk.js";
+import { n as CodexAppServerRpcError } from "./client-IcTBKEqA.js";
+import { h as resolveCodexAppServerHomeDir } from "./shared-client-rR6TDJA3.js";
+import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
+import { OPENCLAW_VERSION } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { readPluginPackageVersion } from "openclaw/plugin-sdk/extension-shared";
 //#region extensions/codex/src/app-server/capabilities.ts
 /**
 * Capability helpers for optional Codex app-server control-plane methods.
@@ -32,6 +35,7 @@ function isUnsupportedControlError(error) {
 * Builds stable Codex plugin/app inventory cache keys from app-server startup,
 * auth, account, and version inputs without storing secret material.
 */
+const CODEX_PLUGIN_VERSION = readPluginPackageVersion({ require: createRequire(import.meta.url) });
 /** Builds the full app inventory cache key for Codex plugin/app discovery. */
 function buildCodexPluginAppCacheKey(params) {
 	return buildCodexAppInventoryCacheKey({
@@ -42,7 +46,7 @@ function buildCodexPluginAppCacheKey(params) {
 		envApiKeyFingerprint: params.envApiKeyFingerprint,
 		appServerVersion: params.appServerVersion ?? params.runtimeIdentity?.serverVersion,
 		runtimeIdentity: params.runtimeIdentity
-	});
+	}, OPENCLAW_VERSION, CODEX_PLUGIN_VERSION);
 }
 /** Builds a durable thread-binding fingerprint for one initialized app-server runtime. */
 function buildCodexAppServerRuntimeFingerprint(params) {