@openclaw/codex 2026.6.2-beta.1 → 2026.6.5-beta.2

package/dist/{sandbox-guard-DMCJlzmz.js → sandbox-guard-C-Yv9uwY.js}

@@ -6,6 +6,7 @@ const VALID_AGENT_ID_PATTERN = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
 const INVALID_AGENT_ID_CHARS_PATTERN = /[^a-z0-9_-]+/g;
 const LEADING_DASH_PATTERN = /^-+/;
 const TRAILING_DASH_PATTERN = /-+$/;
+/** Resolves node/gateway/sandbox execution ownership from overrides, session, agent, and config. */
 function resolveCodexNativeExecutionPolicy(params) {
 	const config = params.config ?? {};
 	const sessionKey = params.sessionKey?.trim() || params.sessionId?.trim() || void 0;
@@ -43,6 +44,7 @@ function resolveCodexNativeExecutionPolicy(params) {
 		blockReason: "OpenClaw exec host=node is active for this session. Codex app-server native execution cannot route shell, filesystem, MCP, or app-backed work through the selected OpenClaw node."
 	};
 }
+/** Formats the user-facing explanation shown when native tools are blocked by exec host=node. */
 function formatCodexNativeNodeExecBlock(params) {
 	return [
 		`Codex-native ${params.surface} is unavailable because OpenClaw exec host=node is active for this session.`,
@@ -155,6 +157,7 @@ const BLOCKED_DIRECT_METHOD_PREFIXES = [
 	"windowsSandbox/"
 ];
 const NODE_EXEC_BLOCKED_CONTROL_PLANE_METHODS = new Set(["config/mcpServer/reload"]);
+/** Returns a block message when a direct app-server method would bypass OpenClaw execution policy. */
 function resolveCodexAppServerDirectSandboxBypassBlock(params) {
 	const policy = resolveDirectMethodPolicy(params.method);
 	if (NODE_EXEC_BLOCKED_CONTROL_PLANE_METHODS.has(params.method)) {
@@ -185,9 +188,11 @@ function resolveCodexAppServerDirectSandboxBypassBlock(params) {
 	if (policy === "requires-openclaw-environment" && hasOpenClawSandboxEnvironmentSelection(params.requestParams)) return;
 	return sandboxBlock;
 }
+/** Resolves the generic native-execution block for sandboxed or node-hosted sessions. */
 function resolveCodexNativeExecutionBlock(params) {
 	return resolveCodexNativeSandboxBlock(params) ?? resolveCodexNativeNodeExecBlock(params);
 }
+/** Returns a block message when native Codex execution cannot honor active sandboxing. */
 function resolveCodexNativeSandboxBlock(params) {
 	const sessionKey = params.sessionKey?.trim() || params.sessionId?.trim();
 	if (!sessionKey) return;

package/dist/{session-binding-D8DxeEbf.js → session-binding-BgTv_YGm.js}

@@ -4,6 +4,10 @@ import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import fs from "node:fs/promises";
 import { ensureAuthProfileStore, resolveDefaultAgentDir, resolveProviderIdForAuth } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/session-binding.ts
+/**
+* Persists and normalizes the Codex app-server thread binding associated with
+* an OpenClaw session file.
+*/
 var session_binding_exports = /* @__PURE__ */ __exportAll({
 	clearCodexAppServerBinding: () => clearCodexAppServerBinding,
 	clearCodexAppServerBindingForThread: () => clearCodexAppServerBindingForThread,
@@ -15,9 +19,11 @@ var session_binding_exports = /* @__PURE__ */ __exportAll({
 });
 const CODEX_APP_SERVER_NATIVE_AUTH_PROVIDER = "openai";
 const PUBLIC_OPENAI_MODEL_PROVIDER = "openai";
+/** Returns the JSON sidecar path for the Codex app-server binding beside a session file. */
 function resolveCodexAppServerBindingPath(sessionFile) {
 	return `${sessionFile}.codex-app-server.json`;
 }
+/** Reads and normalizes a Codex app-server binding sidecar, returning undefined on stale data. */
 async function readCodexAppServerBinding(sessionFile, lookup = {}) {
 	const path = resolveCodexAppServerBindingPath(sessionFile);
 	let raw;
@@ -71,6 +77,7 @@ async function readCodexAppServerBinding(sessionFile, lookup = {}) {
 		return;
 	}
 }
+/** Writes the Codex app-server binding sidecar with normalized provider/auth metadata. */
 async function writeCodexAppServerBinding(sessionFile, binding, lookup = {}) {
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	const payload = {
@@ -157,6 +164,7 @@ function readPluginAppPolicyContext(value) {
 		pluginAppIds: parsedPluginAppIds
 	};
 }
+/** Removes the Codex app-server binding sidecar if present. */
 async function clearCodexAppServerBinding(sessionFile, _lookup = {}) {
 	try {
 		await fs.unlink(resolveCodexAppServerBindingPath(sessionFile));
@@ -167,6 +175,7 @@ async function clearCodexAppServerBinding(sessionFile, _lookup = {}) {
 		});
 	}
 }
+/** Clears a binding only when it still points at the expected Codex thread id. */
 async function clearCodexAppServerBindingForThread(sessionFile, threadId, lookup = {}) {
 	const binding = await readCodexAppServerBinding(sessionFile, lookup);
 	if (!binding) return false;
@@ -184,6 +193,7 @@ async function clearCodexAppServerBindingForThread(sessionFile, threadId, lookup
 function isNotFound(error) {
 	return Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
 }
+/** Returns true when an auth profile uses native Codex/OpenAI app-server auth. */
 function isCodexAppServerNativeAuthProfile(lookup) {
 	const authProfileId = lookup.authProfileId?.trim();
 	if (!authProfileId) return false;
@@ -205,6 +215,7 @@ function isCodexAppServerNativeAuthProfile(lookup) {
 		return false;
 	}
 }
+/** Hides redundant OpenAI provider attribution for native Codex auth bindings. */
 function normalizeCodexAppServerBindingModelProvider(params) {
 	const modelProvider = params.modelProvider?.trim();
 	if (!modelProvider) return;

package/dist/{shared-client-B31-oqN-.js → shared-client-xytpSKD0.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { l as resolveCodexAppServerRuntimeOptions, n as codexAppServerStartOptionsKey } from "./config-BT6SLiE6.js";
-import { c as resolveCodexAppServerSpawnEnv, o as MANAGED_CODEX_APP_SERVER_PACKAGE, t as CodexAppServerClient } from "./client-BFxKzFnH.js";
+import { c as resolveCodexAppServerSpawnEnv, o as MANAGED_CODEX_APP_SERVER_PACKAGE, t as CodexAppServerClient } from "./client-kMCtlApt.js";
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
 import fsSync, { constants, readFileSync } from "node:fs";
@@ -12,6 +12,7 @@ import { fileURLToPath } from "node:url";
 import { withTimeout } from "openclaw/plugin-sdk/security-runtime";
 //#region extensions/codex/src/app-server/auth-bridge.ts
 const CODEX_APP_SERVER_AUTH_PROVIDER = "openai";
+const OPENAI_CODEX_APP_SERVER_AUTH_PROVIDER = "openai-codex";
 const LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER = "codex-cli";
 const CODEX_APP_SERVER_EXTERNAL_CLI_PROVIDER_IDS = [CODEX_APP_SERVER_AUTH_PROVIDER, LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER];
 const OPENAI_PROVIDER = "openai";
@@ -368,7 +369,7 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 }
 function isCodexAppServerAuthProvider(provider, config) {
 	const resolvedProvider = resolveProviderIdForAuth(provider, { config });
-	return resolvedProvider === CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER;
+	return resolvedProvider === CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === OPENAI_CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER;
 }
 function isOpenAIApiKeyBackupCredential(credential, config) {
 	return credential.type === "api_key" && resolveProviderIdForAuth(credential.provider, { config }) === OPENAI_PROVIDER;
@@ -427,7 +428,12 @@ function resolveChatgptAccountId(profileId, credential) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/managed-binary.ts
+/**
+* Resolves the managed Codex app-server binary shipped with or installed beside
+* the Codex plugin before stdio startup.
+*/
 const CODEX_PLUGIN_ROOT = resolveDefaultCodexPluginRoot(path.dirname(fileURLToPath(import.meta.url)));
+/** Rewrites managed stdio start options to point at an executable Codex binary path. */
 async function resolveManagedCodexAppServerStartOptions(startOptions, options = {}) {
 	if (startOptions.transport !== "stdio" || startOptions.commandSource !== "managed") return startOptions;
 	const platform = options.platform ?? process.platform;
@@ -447,6 +453,7 @@ async function resolveManagedCodexAppServerStartOptions(startOptions, options =
 		commandSource: "resolved-managed"
 	};
 }
+/** Returns the preferred and fallback managed Codex binary paths for a plugin root. */
 function resolveManagedCodexAppServerPaths(params) {
 	const platform = params.platform ?? process.platform;
 	const candidateCommandPaths = resolveManagedCodexAppServerCommandCandidates(params.pluginRoot ?? CODEX_PLUGIN_ROOT, platform);
@@ -543,11 +550,20 @@ async function commandPathExists(filePath, platform) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/timeout.ts
+/**
+* Thin Codex app-server timeout adapter around OpenClaw's shared security
+* runtime timeout helper.
+*/
+/** Awaits a promise with a Codex-specific timeout error message. */
 async function withTimeout$1(promise, timeoutMs, timeoutMessage) {
 	return await withTimeout(promise, timeoutMs, { message: timeoutMessage });
 }
 //#endregion
 //#region extensions/codex/src/app-server/shared-client.ts
+/**
+* Owns shared and isolated Codex app-server client startup, auth application,
+* lease tracking, and teardown.
+*/
 var shared_client_exports = /* @__PURE__ */ __exportAll({
 	clearSharedCodexAppServerClient: () => clearSharedCodexAppServerClient,
 	clearSharedCodexAppServerClientAndWait: () => clearSharedCodexAppServerClientAndWait,
@@ -630,9 +646,11 @@ async function resolveCodexAppServerClientStartContext(options) {
 		})
 	};
 }
+/** Gets or starts a shared Codex app-server client without retaining a lease. */
 async function getSharedCodexAppServerClient(options) {
 	return (await acquireSharedCodexAppServerClient(options)).client;
 }
+/** Gets or starts a shared Codex app-server client and records a release lease. */
 async function getLeasedSharedCodexAppServerClient(options) {
 	const acquired = await acquireSharedCodexAppServerClient(options, { leased: true });
 	const state = getSharedCodexAppServerClientState();
@@ -641,6 +659,7 @@ async function getLeasedSharedCodexAppServerClient(options) {
 	state.leasedReleases.set(acquired.client, releases);
 	return acquired.client;
 }
+/** Releases one outstanding lease for a shared Codex app-server client. */
 function releaseLeasedSharedCodexAppServerClient(client) {
 	const state = getSharedCodexAppServerClientState();
 	const releases = state.leasedReleases.get(client);
@@ -710,6 +729,7 @@ async function acquireSharedCodexAppServerClient(options, leaseOptions) {
 		releasePendingAcquire();
 	}
 }
+/** Starts a non-shared Codex app-server client owned entirely by the caller. */
 async function createIsolatedCodexAppServerClient(options) {
 	const { agentDir, usesNativeAuth, authProfileId, startOptions } = await resolveCodexAppServerClientStartContext(options);
 	const client = CodexAppServerClient.start(startOptions);
@@ -730,6 +750,7 @@ async function createIsolatedCodexAppServerClient(options) {
 		throw error;
 	}
 }
+/** Clears and closes all shared clients for deterministic tests. */
 function resetSharedCodexAppServerClientForTests() {
 	const state = getSharedCodexAppServerClientState();
 	const clients = collectSharedClients(state);
@@ -737,12 +758,14 @@ function resetSharedCodexAppServerClientForTests() {
 	state.leasedReleases = /* @__PURE__ */ new WeakMap();
 	for (const client of clients) client.close();
 }
+/** Clears and closes all shared clients. */
 function clearSharedCodexAppServerClient() {
 	const state = getSharedCodexAppServerClientState();
 	const clients = collectSharedClients(state);
 	state.clients.clear();
 	for (const client of clients) client.close();
 }
+/** Clears and closes the shared entry only if it still owns the supplied client. */
 function clearSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return false;
 	const state = getSharedCodexAppServerClientState();
@@ -753,6 +776,7 @@ function clearSharedCodexAppServerClientIfCurrent(client) {
 	}
 	return false;
 }
+/** Detaches the shared entry without closing the client when it still matches. */
 function detachSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return false;
 	const state = getSharedCodexAppServerClientState();
@@ -762,11 +786,13 @@ function detachSharedCodexAppServerClientIfCurrent(client) {
 	}
 	return false;
 }
+/** Retains the matching shared client and returns a release callback. */
 function retainSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return;
 	const state = getSharedCodexAppServerClientState();
 	for (const entry of state.clients.values()) if (entry.client === client) return retainSharedClientEntry(entry);
 }
+/** Marks a matching shared client to close after active leases/acquires drain. */
 function retireSharedCodexAppServerClientIfCurrent(client) {
 	if (!client) return;
 	const state = getSharedCodexAppServerClientState();
@@ -785,6 +811,7 @@ function retireSharedCodexAppServerClientIfCurrent(client) {
 		closed: false
 	};
 }
+/** Clears a matching shared client and waits for its process to exit. */
 async function clearSharedCodexAppServerClientIfCurrentAndWait(client, options) {
 	if (!client) return false;
 	const state = getSharedCodexAppServerClientState();
@@ -795,6 +822,7 @@ async function clearSharedCodexAppServerClientIfCurrentAndWait(client, options)
 	}
 	return false;
 }
+/** Clears all shared clients and waits for their processes to exit. */
 async function clearSharedCodexAppServerClientAndWait(options) {
 	const state = getSharedCodexAppServerClientState();
 	const clients = collectSharedClients(state);
@@ -823,6 +851,7 @@ function clearSharedClientEntryIfCurrent(key, client) {
 	const state = getSharedCodexAppServerClientState();
 	if (state.clients.get(key)?.client === client) state.clients.delete(key);
 }
+/** Clears a matching shared client only when no lease or acquire currently claims it. */
 function clearSharedCodexAppServerClientIfCurrentAndUnclaimed(client) {
 	if (!client) return {
 		found: false,

package/dist/{side-question-DbYSPUnj.js → side-question-BEpALo9c.js}

@@ -1,13 +1,13 @@
 import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, p as shouldAutoApproveCodexAppServerApprovals } from "./config-BT6SLiE6.js";
-import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse, t as assertCodexThreadForkResponse } from "./protocol-validators-DIt7cXIp.js";
-import { i as isCodexAppServerApprovalRequest, l as isJsonObject } from "./client-BFxKzFnH.js";
-import { O as resolveCodexDynamicToolsLoading, T as filterCodexDynamicTools, d as resolveReasoningEffort, g as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-BOYYMjx6.js";
-import { a as readCodexAppServerBinding } from "./session-binding-D8DxeEbf.js";
-import { h as formatCodexUsageLimitErrorMessage, i as readCodexNotificationTurnId, r as readCodexNotificationThreadId } from "./notification-correlation-Bg-AlEEy.js";
-import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, u as refreshCodexAppServerAuthTokens } from "./shared-client-B31-oqN-.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DMCJlzmz.js";
-import { d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, t as CODEX_NATIVE_HOOK_RELAY_EVENTS, u as createCodexDynamicToolBridge } from "./native-hook-relay-CBp3nIGk.js";
-import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
+import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse, t as assertCodexThreadForkResponse } from "./protocol-validators-CIpP8IJ2.js";
+import { i as isCodexAppServerApprovalRequest, l as isJsonObject } from "./client-kMCtlApt.js";
+import { O as resolveCodexDynamicToolsLoading, T as filterCodexDynamicTools, d as resolveReasoningEffort, g as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, u as resolveCodexAppServerModelProvider } from "./thread-lifecycle-BJsazZ8j.js";
+import { a as readCodexAppServerBinding } from "./session-binding-BgTv_YGm.js";
+import { h as formatCodexUsageLimitErrorMessage, i as readCodexNotificationTurnId, r as readCodexNotificationThreadId } from "./notification-correlation-o8quHmTK.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, u as refreshCodexAppServerAuthTokens } from "./shared-client-xytpSKD0.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C-Yv9uwY.js";
+import { d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, t as CODEX_NATIVE_HOOK_RELAY_EVENTS, u as createCodexDynamicToolBridge } from "./native-hook-relay-DZ3Oon0b.js";
+import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-C7qmZ0Jh.js";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/side-question.ts
 const CODEX_SIDE_DYNAMIC_TOOL_TIMEOUT_MS = 9e4;

package/dist/{thread-lifecycle-BOYYMjx6.js → thread-lifecycle-BJsazZ8j.js}

@@ -1,9 +1,9 @@
 import { d as resolveCodexPluginsPolicy, r as codexSandboxPolicyForTurn, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-BT6SLiE6.js";
-import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-DIt7cXIp.js";
-import { a as isCodexAppServerConnectionClosedError, l as isJsonObject, n as CodexAppServerRpcError } from "./client-BFxKzFnH.js";
+import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-CIpP8IJ2.js";
+import { a as isCodexAppServerConnectionClosedError, l as isJsonObject, n as CodexAppServerRpcError } from "./client-kMCtlApt.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY } from "./prompt-overlay.js";
 import { isModernCodexModel } from "./provider.js";
-import { a as readCodexAppServerBinding, r as isCodexAppServerNativeAuthProfile, s as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-D8DxeEbf.js";
+import { a as readCodexAppServerBinding, r as isCodexAppServerNativeAuthProfile, s as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-BgTv_YGm.js";
 import { isFutureDateTimestampMs, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import crypto from "node:crypto";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -26,12 +26,11 @@ const MAX_RENDERED_CONTEXT_CHARS = 1e6;
 const DEFAULT_TEXT_PART_CHARS = 6e3;
 const MAX_TEXT_PART_CHARS = 128e3;
 const APPROX_RENDERED_CHARS_PER_TOKEN = 4;
+/** Default token reserve kept out of rendered context-engine prompt text. */
 const DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS = 2e4;
 const MIN_PROMPT_BUDGET_RATIO = .5;
 const MIN_PROMPT_BUDGET_TOKENS = 8e3;
-/**
-* Project assembled OpenClaw context-engine messages into Codex prompt inputs.
-*/
+/** Projects assembled OpenClaw context-engine messages into Codex prompt inputs. */
 function projectContextEngineAssemblyForCodex(params) {
 	const prompt = params.prompt.trim();
 	const contextMessages = dropDuplicateTrailingPrompt(params.assembledMessages, prompt);
@@ -58,6 +57,7 @@ function projectContextEngineAssemblyForCodex(params) {
 		prePromptMessageCount: params.originalHistoryMessages.length
 	};
 }
+/** Resolves rendered context size from a token budget and reserve. */
 function resolveCodexContextEngineProjectionMaxChars(params) {
 	const contextTokenBudget = typeof params.contextTokenBudget === "number" && Number.isFinite(params.contextTokenBudget) ? Math.floor(params.contextTokenBudget) : void 0;
 	if (!contextTokenBudget || contextTokenBudget <= 0) return DEFAULT_RENDERED_CONTEXT_CHARS;
@@ -66,6 +66,7 @@ function resolveCodexContextEngineProjectionMaxChars(params) {
 		reserveTokens: params.reserveTokens
 	}) * APPROX_RENDERED_CHARS_PER_TOKEN);
 }
+/** Reads Codex projection reserve tokens from compaction config. */
 function resolveCodexContextEngineProjectionReserveTokens(params) {
 	const compaction = asRecord(asRecord(asRecord(params.config)?.agents)?.defaults)?.compaction;
 	const configuredReserveTokens = toNonNegativeInt(asRecord(compaction)?.reserveTokens);
@@ -228,6 +229,7 @@ function truncateOlderContext(text, maxChars) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/dynamic-tool-profile.ts
+/** Tool names owned by Codex app-server and normally excluded from OpenClaw dynamic tools. */
 const CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES = [
 	"read",
 	"write",
@@ -245,13 +247,16 @@ const DYNAMIC_TOOL_NAME_ALIASES = {
 	bash: "exec",
 	"apply-patch": "apply_patch"
 };
+/** Normalizes OpenClaw/Codex tool names before filtering and allowlist checks. */
 function normalizeCodexDynamicToolName(name) {
 	const normalized = name.trim().toLowerCase();
 	return DYNAMIC_TOOL_NAME_ALIASES[normalized] ?? normalized;
 }
+/** Returns true for private QA runs that force the Codex runtime profile. */
 function isForcedPrivateQaCodexRuntime(env = process.env) {
 	return env.OPENCLAW_BUILD_PRIVATE_QA === "1" && env.OPENCLAW_QA_FORCE_RUNTIME?.trim().toLowerCase() === "codex";
 }
+/** Resolves whether dynamic tools load directly or through Codex tool search. */
 function resolveCodexDynamicToolsLoading(config, env = process.env) {
 	return isForcedPrivateQaCodexRuntime(env) ? "direct" : config.codexDynamicToolsLoading ?? "searchable";
 }
@@ -260,16 +265,20 @@ function normalizeCodexModelId(modelId) {
 	if (!normalized) return "";
 	return normalized.includes("/") ? normalized.split("/").at(-1) : normalized;
 }
+/** Returns true when model behavior requires direct dynamic-tool registration. */
 function shouldUseDirectCodexDynamicToolsForModel(modelId) {
 	return shouldDisableCodexToolSearchForModel(modelId);
 }
+/** Returns true for models whose tool-search path is unsupported or inefficient. */
 function shouldDisableCodexToolSearchForModel(modelId) {
 	return normalizeCodexModelId(modelId) === "gpt-5.4-nano";
 }
+/** Resolves dynamic-tool loading after applying model-specific restrictions. */
 function resolveCodexDynamicToolsLoadingForModel(config, modelId, env = process.env) {
 	const loading = resolveCodexDynamicToolsLoading(config, env);
 	return loading === "searchable" && shouldUseDirectCodexDynamicToolsForModel(modelId) ? "direct" : loading;
 }
+/** Filters OpenClaw tools that Codex owns natively or config explicitly excludes. */
 function filterCodexDynamicTools(tools, config, env = process.env) {
 	const excludes = /* @__PURE__ */ new Set();
 	if (!isForcedPrivateQaCodexRuntime(env)) for (const name of CODEX_APP_SERVER_OWNED_DYNAMIC_TOOL_EXCLUDES) excludes.add(name);
@@ -281,10 +290,16 @@ function filterCodexDynamicTools(tools, config, env = process.env) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/image-payload-sanitizer.ts
+/**
+* Sanitizes inline image payloads mirrored through Codex history so invalid
+* base64 data becomes readable text instead of poisoning replayed transcripts.
+*/
 const IMAGE_OMITTED_TEXT = "omitted image payload: invalid inline image data";
+/** Validates and normalizes an inline image data URL for Codex history payloads. */
 function sanitizeInlineImageDataUrl$1(imageUrl) {
 	return sanitizeInlineImageDataUrl(imageUrl);
 }
+/** Builds the replacement text inserted when an inline image payload is invalid. */
 function invalidInlineImageText(label) {
 	return `[${label}] ${IMAGE_OMITTED_TEXT}`;
 }
@@ -325,6 +340,7 @@ function sanitizeImageContentRecord(record, label) {
 		};
 	}
 }
+/** Recursively sanitizes all Codex history image shapes while preserving unknown structure. */
 function sanitizeCodexHistoryImagePayloads(value, label) {
 	if (Array.isArray(value)) return value.map((entry) => sanitizeCodexHistoryImagePayloads(entry, label));
 	if (!isRecord(value)) return value;
@@ -335,6 +351,7 @@ function sanitizeCodexHistoryImagePayloads(value, label) {
 	return next;
 }
 const MAX_SERIALIZED_ERROR_MESSAGE_LENGTH = 500;
+/** In-memory app inventory cache with coalesced refreshes per key. */
 var CodexAppInventoryCache = class {
 	constructor(options = {}) {
 		this.entries = /* @__PURE__ */ new Map();
@@ -344,6 +361,7 @@ var CodexAppInventoryCache = class {
 		this.revision = 0;
 		this.ttlMs = options.ttlMs ?? 36e5;
 	}
+	/** Reads a snapshot and schedules refresh when missing, stale, or forced. */
 	read(params) {
 		const nowMs = resolveDateTimestampMs(params.nowMs);
 		const entry = this.entries.get(params.key);
@@ -368,9 +386,11 @@ var CodexAppInventoryCache = class {
 			...entry.lastError ? { diagnostic: entry.lastError } : {}
 		};
 	}
+	/** Forces or joins an immediate refresh for a cache key. */
 	refreshNow(params) {
 		return this.refresh(params);
 	}
+	/** Marks a key stale and records the reason as a diagnostic. */
 	invalidate(key, reason, nowMs = Date.now()) {
 		this.revision += 1;
 		const diagnostic = {
@@ -385,6 +405,7 @@ var CodexAppInventoryCache = class {
 		} else this.diagnostics.set(key, diagnostic);
 		return this.revision;
 	}
+	/** Clears all cached snapshots, diagnostics, in-flight requests, and revision state. */
 	clear() {
 		this.entries.clear();
 		this.inFlight.clear();
@@ -392,6 +413,7 @@ var CodexAppInventoryCache = class {
 		this.diagnostics.clear();
 		this.revision = 0;
 	}
+	/** Returns the monotonically increasing cache revision. */
 	getRevision() {
 		return this.revision;
 	}
@@ -453,6 +475,7 @@ var CodexAppInventoryCache = class {
 		}
 	}
 };
+/** Serializes a refresh failure without leaking large or sensitive error data. */
 function serializeCodexAppInventoryError(error) {
 	const record = isRecord(error) ? error : void 0;
 	const data = record && "data" in record ? redactErrorData(record.data) : void 0;
@@ -463,7 +486,9 @@ function serializeCodexAppInventoryError(error) {
 		...data !== void 0 ? { data } : {}
 	};
 }
+/** Shared app inventory cache used by Codex app-server runtime paths. */
 const defaultCodexAppInventoryCache = new CodexAppInventoryCache();
+/** Builds a stable cache key from runtime identity fields. */
 function buildCodexAppInventoryCacheKey(input) {
 	return JSON.stringify({
 		codexHome: input.codexHome ?? null,
@@ -524,6 +549,11 @@ function isSensitiveErrorDataKey(key) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-inventory.ts
+/**
+* Reads Codex plugin marketplace state and app inventory to decide which
+* plugin-owned apps can be exposed to a native Codex thread.
+*/
+/** Reads configured Codex plugin state and maps owned apps to readiness diagnostics. */
 async function readCodexPluginInventory(params) {
 	const policy = params.policy ?? resolveCodexPluginsPolicy(params.pluginConfig);
 	if (!policy.enabled) return {
@@ -609,6 +639,7 @@ async function readCodexPluginInventory(params) {
 		...appInventory ? { appInventory } : {}
 	};
 }
+/** Finds one plugin summary in the OpenAI curated marketplace response. */
 function findOpenAiCuratedPluginSummary(listed, pluginName) {
 	const marketplaceEntry = listed.marketplaces.find((marketplace) => marketplace.name === CODEX_PLUGINS_MARKETPLACE_NAME);
 	if (!marketplaceEntry) return;
@@ -618,6 +649,7 @@ function findOpenAiCuratedPluginSummary(listed, pluginName) {
 		summary
 	} : void 0;
 }
+/** Builds plugin/read or plugin/install params from a marketplace reference. */
 function pluginReadParams(marketplace, pluginName) {
 	return {
 		...marketplace.path ? { marketplacePath: marketplace.path } : {},
@@ -700,6 +732,7 @@ function marketplaceRef(marketplace) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-activation.ts
+/** Installs/enables a configured Codex plugin and refreshes plugin/app state. */
 async function ensureCodexPluginActivation(params) {
 	if (params.identity.marketplaceName !== "openai-curated") return activationFailure(params.identity, "marketplace_missing", { message: "Only openai-curated plugins can be activated." });
 	const listed = await params.request("plugin/list", { cwds: [] });
@@ -741,6 +774,7 @@ async function ensureCodexPluginActivation(params) {
 		diagnostics: [...refreshDiagnostics, ...installResponse.appsNeedingAuth.map((app) => ({ message: `${app.name} requires app authentication before plugin tools are exposed.` }))]
 	};
 }
+/** Forces Codex plugin, skill, hook, MCP, and app inventory refreshes after activation. */
 async function refreshCodexPluginRuntimeState(params) {
 	const diagnostics = [];
 	await params.request("plugin/list", { cwds: [] });
@@ -780,11 +814,17 @@ function activationFailure(identity, reason, diagnostic) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-thread-config.ts
+/**
+* Builds Codex thread config patches that expose only policy-approved
+* plugin-owned apps for native Codex turns.
+*/
 const CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION = 1;
 const CODEX_PLUGIN_THREAD_CONFIG_FINGERPRINT_VERSION = 1;
+/** Returns true when plugin config exists and thread config may need app patches. */
 function shouldBuildCodexPluginThreadConfig(pluginConfig) {
 	return resolveCodexPluginsPolicy(pluginConfig).configured;
 }
+/** Fingerprints policy and app-cache identity before runtime inventory is read. */
 function buildCodexPluginThreadConfigInputFingerprint(params) {
 	return fingerprintJson({
 		version: CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION,
@@ -792,6 +832,7 @@ function buildCodexPluginThreadConfigInputFingerprint(params) {
 		appCacheKey: params.appCacheKey ?? null
 	});
 }
+/** Builds the Codex apps config patch and policy context for a native thread. */
 async function buildCodexPluginThreadConfig(params) {
 	const appCache = params.appCache ?? defaultCodexAppInventoryCache;
 	let inputFingerprint = buildCodexPluginThreadConfigInputFingerprint({
@@ -943,6 +984,7 @@ async function buildCodexPluginThreadConfig(params) {
 		diagnostics
 	};
 }
+/** Deep-merges optional Codex thread config patches, returning undefined when empty. */
 function mergeCodexThreadConfigs(...configs) {
 	let merged;
 	for (const config of configs) {
@@ -951,6 +993,7 @@ function mergeCodexThreadConfigs(...configs) {
 	}
 	return merged && Object.keys(merged).length > 0 ? merged : void 0;
 }
+/** Detects when a stored thread binding no longer matches current plugin policy inputs. */
 function isCodexPluginThreadBindingStale(params) {
 	if (!params.codexPluginsEnabled) return Boolean(params.bindingFingerprint || params.bindingInputFingerprint || params.hasBindingPolicyContext);
 	if (!params.bindingFingerprint || !params.bindingInputFingerprint || !params.hasBindingPolicyContext) return true;
@@ -1057,6 +1100,7 @@ function stableStringify(value) {
 //#endregion
 //#region extensions/codex/src/app-server/profiler-flag.ts
 const PROFILER_FLAGS = ["profiler", "codex.profiler"];
+/** Checks the generic and Codex-specific profiler diagnostic flags. */
 function isCodexAppServerProfilerEnabled(config, env = process.env) {
 	return PROFILER_FLAGS.some((flag) => isDiagnosticFlagEnabled(flag, config, env));
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.2-beta.1",
+  "version": "2026.6.5-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/codex",
-      "version": "2026.6.2-beta.1",
+      "version": "2026.6.5-beta.2",
       "dependencies": {
         "@openai/codex": "0.135.0",
         "typebox": "1.1.39",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.2-beta.1",
+  "version": "2026.6.5-beta.2",
   "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "repository": {
     "type": "git",
@@ -26,10 +26,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.6.2-beta.1"
+      "pluginApi": ">=2026.6.5-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.6.2-beta.1"
+      "openclawVersion": "2026.6.5-beta.2"
     },
     "release": {
       "publishToClawHub": true,
@@ -47,7 +47,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.6.2-beta.1"
+    "openclaw": ">=2026.6.5-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {