@openclaw/codex 2026.6.5 → 2026.6.6-beta.2

package/dist/{conversation-binding-CzpvaBs1.js → conversation-binding-CMwrZrt7.js}

@@ -1,24 +1,24 @@
-import { a as isCodexFastServiceTier, f as resolveOpenClawExecPolicyForCodexAppServer, l as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-BT6SLiE6.js";
-import { l as isJsonObject } from "./client-kMCtlApt.js";
-import { t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-BJsazZ8j.js";
-import { a as readCodexAppServerBinding, i as normalizeCodexAppServerBindingModelProvider, r as isCodexAppServerNativeAuthProfile, s as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-BgTv_YGm.js";
-import { r as CODEX_CONTROL_METHODS } from "./request-D64BfplD.js";
-import { i as readCodexNotificationTurnId, r as readCodexNotificationThreadId, s as formatCodexDisplayText } from "./notification-correlation-o8quHmTK.js";
-import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-xytpSKD0.js";
+import { d as resolveCodexAppServerRuntimeOptions, h as resolveOpenClawExecPolicyForCodexAppServer, i as codexSandboxPolicyForTurn, n as canUseCodexModelBackedApprovalsReviewerForModel, o as isCodexFastServiceTier, p as resolveCodexModelBackedReviewerPolicyContext } from "./config-DJXpBkGf.js";
+import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
+import { d as resolveCodexAppServerRequestModelSelection, f as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-Cq1-IfZB.js";
+import { a as normalizeCodexAppServerBindingModelProvider, i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-ElbcSq2o.js";
+import { n as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-NpzxEcSR.js";
+import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, l as formatCodexDisplayText, r as readCodexNotificationThreadId } from "./notification-correlation-D-MYfJwV.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-CflavQ_i.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-C-Yv9uwY.js";
 import { resolveTimerTimeoutMs, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import os from "node:os";
+import path from "node:path";
+import { resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { asOptionalRecord, isRecord, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { formatErrorMessage, resolveSandboxContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { spawn } from "node:child_process";
 import fs from "node:fs/promises";
-import path from "node:path";
-import { resolveSessionAgentIds as resolveSessionAgentIds$1 } from "openclaw/plugin-sdk/agent-runtime";
 import { loadSessionStore, resolveSessionStoreEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { fileURLToPath } from "node:url";
-import process from "node:process";
+import process$1 from "node:process";
 import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/codex/src/conversation-binding-data.ts
 const BINDING_DATA_VERSION = 1;
@@ -64,12 +64,12 @@ function readCodexConversationBindingDataRecord(data) {
 		kind: "codex-app-server-session",
 		version: BINDING_DATA_VERSION,
 		sessionFile: data.sessionFile,
-		workspaceDir: typeof data.workspaceDir === "string" && data.workspaceDir.trim() ? data.workspaceDir : process.cwd(),
+		workspaceDir: typeof data.workspaceDir === "string" && data.workspaceDir.trim() ? data.workspaceDir : process$1.cwd(),
 		agentDir: typeof data.agentDir === "string" && data.agentDir.trim() ? data.agentDir : void 0
 	};
 }
 function resolveCodexDefaultWorkspaceDir(pluginConfig) {
-	return readString$1(asOptionalRecord(asOptionalRecord(pluginConfig)?.appServer), "defaultWorkspaceDir") ?? process.cwd();
+	return readString$1(asOptionalRecord(asOptionalRecord(pluginConfig)?.appServer), "defaultWorkspaceDir") ?? process$1.cwd();
 }
 function readString$1(record, key) {
 	const value = record?.[key];
@@ -164,19 +164,48 @@ async function setCodexConversationModel(params) {
 	if (!model) return "Usage: /codex model <model>";
 	const lookup = buildBindingLookup(params);
 	const binding = await requireThreadBinding(params.sessionFile, lookup);
-	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
-	const response = await resumeThreadWithOverrides({
+	const reviewerPolicyContext = resolveCodexModelBackedReviewerPolicyContext({
+		provider: "codex",
+		model,
+		bindingModelProvider: binding.modelProvider,
+		bindingModel: binding.model,
+		nativeAuthProfile: isCodexAppServerNativeAuthProfile({
+			authProfileId: binding.authProfileId,
+			...lookup
+		})
+	});
+	const runtime = resolveCodexAppServerRuntimeOptions({
 		pluginConfig: params.pluginConfig,
+		modelProvider: reviewerPolicyContext.modelProvider,
+		model: reviewerPolicyContext.model,
+		config: params.config,
+		agentDir: params.agentDir
+	});
+	const modelSelection = resolveCodexAppServerRequestModelSelection({
+		model,
+		modelProvider: resolveConversationControlModelProvider({
+			authProfileId: binding.authProfileId,
+			bindingModel: binding.model,
+			bindingModelProvider: binding.modelProvider,
+			currentModel: model,
+			...lookup
+		}),
+		authProfileId: binding.authProfileId,
+		...lookup
+	});
+	const response = await resumeThreadWithOverrides({
+		runtime,
 		threadId: binding.threadId,
 		authProfileId: binding.authProfileId,
 		...lookup,
-		model
+		model: modelSelection.model,
+		modelProvider: modelSelection.modelProvider
 	});
 	await writeCodexAppServerBinding(params.sessionFile, {
 		...binding,
 		cwd: response.thread.cwd ?? binding.cwd,
-		model: response.model ?? model,
-		modelProvider: response.modelProvider ?? binding.modelProvider,
+		model: response.model ?? modelSelection.model,
+		modelProvider: response.modelProvider ?? modelSelection.modelProvider,
 		approvalPolicy: binding.approvalPolicy,
 		sandbox: binding.sandbox,
 		serviceTier: binding.serviceTier ?? runtime.serviceTier
@@ -227,7 +256,7 @@ async function requireThreadBinding(sessionFile, lookup = {}) {
 	return binding;
 }
 async function resumeThreadWithOverrides(params) {
-	const runtime = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.pluginConfig });
+	const runtime = params.runtime;
 	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
@@ -238,6 +267,7 @@ async function resumeThreadWithOverrides(params) {
 		return await client.request(CODEX_CONTROL_METHODS.resumeThread, {
 			threadId: params.threadId,
 			...params.model ? { model: params.model } : {},
+			...params.modelProvider ? { modelProvider: params.modelProvider } : {},
 			approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
 			sandbox: params.sandbox ?? runtime.sandbox,
 			approvalsReviewer: runtime.approvalsReviewer,
@@ -255,6 +285,16 @@ function buildBindingLookup(params) {
 		...params.config ? { config: params.config } : {}
 	};
 }
+function resolveConversationControlModelProvider(params) {
+	const modelProvider = resolveCodexBindingModelProviderFallback({
+		currentModel: params.currentModel,
+		bindingModel: params.bindingModel,
+		bindingModelProvider: params.bindingModelProvider
+	})?.trim();
+	if (!modelProvider || modelProvider.toLowerCase() === "codex") return;
+	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === "openai") return;
+	return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
+}
 function permissionsForMode(mode) {
 	return mode === "yolo" ? {
 		approvalPolicy: "never",
@@ -467,9 +507,9 @@ const DEFAULT_RESUME_TIMEOUT_MS = 20 * 6e4;
 const SESSION_ID_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
 const activeResumeSessions = /* @__PURE__ */ new Set();
 const DEFAULT_RESUME_SPAWN_RUNTIME = {
-	platform: process.platform,
-	env: process.env,
-	execPath: process.execPath
+	platform: process$1.platform,
+	env: process$1.env,
+	execPath: process$1.execPath
 };
 function createCodexCliSessionNodeHostCommands() {
 	return [{
@@ -613,18 +653,18 @@ async function runCodexExecResume(params) {
 			params.sessionId,
 			"-"
 		], {
-			platform: process.platform,
-			env: process.env,
-			execPath: process.execPath
+			platform: process$1.platform,
+			env: process$1.env,
+			execPath: process$1.execPath
 		});
 		const child = spawn(invocation.command, invocation.args, {
-			cwd: params.cwd || process.cwd(),
+			cwd: params.cwd || process$1.cwd(),
 			stdio: [
 				"pipe",
 				"pipe",
 				"pipe"
 			],
-			env: process.env,
+			env: process$1.env,
 			shell: invocation.shell,
 			windowsHide: invocation.windowsHide
 		});
@@ -872,7 +912,7 @@ function readRecordParam(paramsJSON) {
 	}
 }
 function resolveCodexHome() {
-	return process.env.CODEX_HOME?.trim() || path.join(os.homedir(), ".codex");
+	return process$1.env.CODEX_HOME?.trim() || path.join(os.homedir(), ".codex");
 }
 async function readFileIfExists(file) {
 	try {
@@ -929,18 +969,17 @@ async function resolveConversationAppServerRuntime(params) {
 		sessionKey: params.sessionKey,
 		workspaceDir: params.workspaceDir
 	}) : void 0;
-	const runtime = resolveCodexAppServerRuntimeOptions({
-		pluginConfig: params.pluginConfig,
-		execPolicy,
-		openClawSandboxActive: Boolean(sandboxForPolicy?.enabled)
-	});
-	assertNativeConversationApprovalPolicySupported({
-		execPolicy,
-		runtime
-	});
 	return {
 		execPolicy,
-		runtime
+		runtime: resolveCodexAppServerRuntimeOptions({
+			pluginConfig: params.pluginConfig,
+			execPolicy,
+			modelProvider: params.modelProvider,
+			model: params.model,
+			config: params.config,
+			agentDir: params.agentDir,
+			openClawSandboxActive: Boolean(sandboxForPolicy?.enabled)
+		})
 	};
 }
 const CODEX_CONVERSATION_GLOBAL_STATE = Symbol.for("openclaw.codex.conversationBinding");
@@ -1068,32 +1107,69 @@ async function handleCodexConversationBindingResolved(event) {
 	await clearCodexAppServerBinding(data.sessionFile);
 }
 async function resolveThreadBindingRuntime(params) {
+	const agentLookup = buildAgentLookup({
+		agentDir: params.agentDir,
+		config: params.config
+	});
+	const modelProvider = resolveThreadRequestModelProvider({
+		authProfileId: params.authProfileId,
+		modelProvider: params.modelProvider,
+		...agentLookup
+	});
+	const modelSelection = resolveOptionalThreadRequestModelSelection({
+		model: params.model,
+		modelProvider,
+		authProfileId: params.authProfileId,
+		...agentLookup
+	});
+	const reviewerModelProvider = resolveModelBackedReviewerPolicyProvider({
+		authProfileId: params.authProfileId,
+		modelProvider: params.modelProvider,
+		...agentLookup
+	});
 	const { execPolicy, runtime } = await resolveConversationAppServerRuntime({
 		pluginConfig: params.pluginConfig,
 		config: params.config,
 		agentId: params.agentId,
 		sessionKey: params.sessionKey,
-		workspaceDir: params.workspaceDir
+		workspaceDir: params.workspaceDir,
+		modelProvider: reviewerModelProvider,
+		model: params.model,
+		agentDir: params.agentDir
 	});
-	const agentLookup = buildAgentLookup({
-		agentDir: params.agentDir,
-		config: params.config
+	const modelScopedRuntime = resolveCodexAppServerForModelProvider({
+		appServer: runtime,
+		provider: reviewerModelProvider,
+		model: params.model,
+		config: params.config,
+		env: process.env,
+		agentDir: params.agentDir
+	});
+	assertNativeConversationApprovalPolicySupported({
+		execPolicy,
+		approvalPolicy: execPolicy?.touched ? modelScopedRuntime.approvalPolicy : params.approvalPolicy ?? modelScopedRuntime.approvalPolicy,
+		approvalsReviewer: modelScopedRuntime.approvalsReviewer,
+		modelBackedApprovalsReviewerUnavailable: !canUseCodexModelBackedApprovalsReviewerForModel({
+			modelProvider: reviewerModelProvider,
+			model: params.model,
+			config: params.config,
+			env: process.env,
+			agentDir: params.agentDir
+		})
+	});
+	const client = await getLeasedSharedCodexAppServerClient({
+		startOptions: runtime.start,
+		timeoutMs: runtime.requestTimeoutMs,
+		authProfileId: params.authProfileId,
+		...agentLookup
 	});
 	return {
 		execPolicy,
-		runtime,
+		runtime: modelScopedRuntime,
 		agentLookup,
-		modelProvider: resolveThreadRequestModelProvider({
-			authProfileId: params.authProfileId,
-			modelProvider: params.modelProvider,
-			...agentLookup
-		}),
-		client: await getLeasedSharedCodexAppServerClient({
-			startOptions: runtime.start,
-			timeoutMs: runtime.requestTimeoutMs,
-			authProfileId: params.authProfileId,
-			...agentLookup
-		})
+		model: modelSelection?.model,
+		modelProvider: modelSelection?.modelProvider ?? modelProvider,
+		client
 	};
 }
 function buildThreadRequestRuntimeOptions(params, resolved) {
@@ -1111,10 +1187,10 @@ async function writeThreadBindingFromResponse(params, resolved, response) {
 		threadId: response.thread.id,
 		cwd: response.thread.cwd ?? params.workspaceDir,
 		authProfileId: params.authProfileId,
-		model: response.model ?? params.model,
+		model: response.model ?? resolved.model ?? params.model,
 		modelProvider: normalizeCodexAppServerBindingModelProvider({
 			authProfileId: params.authProfileId,
-			modelProvider: response.modelProvider ?? params.modelProvider,
+			modelProvider: response.modelProvider ?? resolved.modelProvider ?? params.modelProvider,
 			...resolved.agentLookup
 		}),
 		approvalPolicy: resolved.execPolicy?.touched ? runtimeApprovalPolicy : params.approvalPolicy ?? runtimeApprovalPolicy,
@@ -1127,7 +1203,7 @@ async function attachExistingThread(params) {
 	try {
 		await writeThreadBindingFromResponse(params, resolved, await resolved.client.request(CODEX_CONTROL_METHODS.resumeThread, {
 			threadId: params.threadId,
-			...params.model ? { model: params.model } : {},
+			...resolved.model ? { model: resolved.model } : {},
 			...resolved.modelProvider ? { modelProvider: resolved.modelProvider } : {},
 			personality: CODEX_NATIVE_PERSONALITY_NONE,
 			...buildThreadRequestRuntimeOptions(params, resolved),
@@ -1142,7 +1218,7 @@ async function createThread(params) {
 	try {
 		await writeThreadBindingFromResponse(params, resolved, await resolved.client.request("thread/start", {
 			cwd: params.workspaceDir,
-			...params.model ? { model: params.model } : {},
+			...resolved.model ? { model: resolved.model } : {},
 			...resolved.modelProvider ? { modelProvider: resolved.modelProvider } : {},
 			personality: CODEX_NATIVE_PERSONALITY_NONE,
 			...buildThreadRequestRuntimeOptions(params, resolved),
@@ -1163,16 +1239,50 @@ async function runBoundTurn(params) {
 	const threadId = binding?.threadId;
 	if (!threadId) throw new Error("bound Codex conversation has no thread binding");
 	const workspaceDir = binding.cwd || params.data.workspaceDir;
+	const reviewerModelProvider = resolveModelBackedReviewerPolicyProvider({
+		authProfileId: binding.authProfileId,
+		modelProvider: binding.modelProvider,
+		...agentLookup
+	});
 	const { execPolicy, runtime } = await resolveConversationAppServerRuntime({
 		pluginConfig: params.pluginConfig,
 		config: params.config,
 		sessionKey: params.sessionKey,
-		workspaceDir
+		workspaceDir,
+		modelProvider: reviewerModelProvider,
+		model: binding.model,
+		agentDir: params.data.agentDir
+	});
+	const modelScopedRuntime = resolveCodexAppServerForModelProvider({
+		appServer: runtime,
+		provider: reviewerModelProvider,
+		model: binding.model,
+		config: params.config,
+		env: process.env,
+		agentDir: params.data.agentDir
 	});
+	const modelBackedApprovalsReviewerUnavailable = !canUseCodexModelBackedApprovalsReviewerForModel({
+		modelProvider: reviewerModelProvider,
+		model: binding.model,
+		config: params.config,
+		env: process.env,
+		agentDir: params.data.agentDir
+	});
+	const useModelScopedPolicy = execPolicy?.touched === true || modelBackedApprovalsReviewerUnavailable;
+	const approvalPolicy = useModelScopedPolicy ? modelScopedRuntime.approvalPolicy : binding.approvalPolicy ?? modelScopedRuntime.approvalPolicy;
+	const sandbox = useModelScopedPolicy ? modelScopedRuntime.sandbox : binding.sandbox ?? modelScopedRuntime.sandbox;
 	assertNativeConversationApprovalPolicySupported({
 		execPolicy,
-		runtime
+		approvalPolicy,
+		approvalsReviewer: modelScopedRuntime.approvalsReviewer,
+		modelBackedApprovalsReviewerUnavailable
 	});
+	const modelSelection = binding.model ? resolveCodexAppServerRequestModelSelection({
+		model: binding.model,
+		modelProvider: binding.modelProvider,
+		authProfileId: binding.authProfileId,
+		...agentLookup
+	}) : void 0;
 	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: runtime.start,
 		timeoutMs: runtime.requestTimeoutMs,
@@ -1210,10 +1320,10 @@ async function runBoundTurn(params) {
 				event: params.event
 			}),
 			cwd: workspaceDir,
-			approvalPolicy: execPolicy?.touched ? runtime.approvalPolicy : binding.approvalPolicy ?? runtime.approvalPolicy,
-			approvalsReviewer: runtime.approvalsReviewer,
-			sandboxPolicy: codexSandboxPolicyForTurn(execPolicy?.touched ? runtime.sandbox : binding.sandbox ?? runtime.sandbox, workspaceDir),
-			...binding.model ? { model: binding.model } : {},
+			approvalPolicy,
+			approvalsReviewer: modelScopedRuntime.approvalsReviewer,
+			sandboxPolicy: codexSandboxPolicyForTurn(sandbox, workspaceDir),
+			...modelSelection?.model ? { model: modelSelection.model } : {},
 			personality: CODEX_NATIVE_PERSONALITY_NONE,
 			...binding.serviceTier ?? runtime.serviceTier ? { serviceTier: binding.serviceTier ?? runtime.serviceTier } : {}
 		}, { timeoutMs: runtime.requestTimeoutMs })).turn.id;
@@ -1231,7 +1341,7 @@ async function runBoundTurn(params) {
 	}
 }
 function assertNativeConversationApprovalPolicySupported(params) {
-	if (params.execPolicy?.touched === true && params.runtime.approvalPolicy !== "never") throw new Error(NATIVE_CONVERSATION_INTERACTIVE_APPROVALS_UNAVAILABLE);
+	if (params.approvalPolicy !== "never" && (params.execPolicy?.touched === true || params.modelBackedApprovalsReviewerUnavailable && params.approvalsReviewer === "user")) throw new Error(NATIVE_CONVERSATION_INTERACTIVE_APPROVALS_UNAVAILABLE);
 }
 async function runBoundTurnWithMissingThreadRecovery(params) {
 	try {
@@ -1265,7 +1375,7 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 	}
 }
 function resolveConversationExecPolicy(params) {
-	const agentId = params.agentId ?? (params.config ? resolveSessionAgentIds$1({
+	const agentId = params.agentId ?? (params.config ? resolveSessionAgentIds({
 		sessionKey: params.sessionKey,
 		config: params.config
 	}).sessionAgentId : void 0);
@@ -1313,6 +1423,21 @@ function resolveThreadRequestModelProvider(params) {
 	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === "openai") return;
 	return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
 }
+function resolveOptionalThreadRequestModelSelection(params) {
+	if (!params.model?.trim()) return;
+	return resolveCodexAppServerRequestModelSelection({
+		model: params.model,
+		modelProvider: params.modelProvider,
+		authProfileId: params.authProfileId,
+		agentDir: params.agentDir,
+		config: params.config
+	});
+}
+function resolveModelBackedReviewerPolicyProvider(params) {
+	const modelProvider = params.modelProvider?.trim();
+	if (modelProvider && modelProvider.toLowerCase() !== "codex") return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
+	return isCodexAppServerNativeAuthProfile(params) ? "openai" : void 0;
+}
 function buildAgentLookup(params) {
 	const agentDir = params.agentDir?.trim();
 	return {

package/dist/harness.js

@@ -32,31 +32,38 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-BWdNnok4.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DG9p9ReO.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-BnvBQPqW.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-Ctu2VXAG.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-CwnPeYnM.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-BWiNkDSs.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
+		compactAfterContextEngine: async (params) => {
+			const { maybeCompactCodexAppServerSession } = await import("./compact-BWiNkDSs.js");
+			return maybeCompactCodexAppServerSession(params, {
+				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
+				allowNonManualNativeRequest: true
+			});
+		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-BgTv_YGm.js").then((n) => n.o);
+				const { clearCodexAppServerBinding } = await import("./session-binding-ElbcSq2o.js").then((n) => n.s);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-xytpSKD0.js").then((n) => n.c);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-CflavQ_i.js").then((n) => n.c);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,21 +1,22 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
-import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-BT6SLiE6.js";
-import { buildCodexProvider } from "./provider.js";
-import { v as ensureCodexPluginActivation, x as defaultCodexAppInventoryCache, y as pluginReadParams } from "./thread-lifecycle-BJsazZ8j.js";
+import { d as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME, u as readCodexPluginConfig } from "./config-DJXpBkGf.js";
+import { t as buildCodexProvider } from "./provider-Cs6kWhDQ.js";
+import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-Cq1-IfZB.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
-import { i as describeControlFailure, n as buildCodexPluginAppCacheKey, t as requestCodexAppServerJson } from "./request-D64BfplD.js";
-import { s as formatCodexDisplayText } from "./notification-correlation-o8quHmTK.js";
-import { a as getLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthAccountCacheKey, m as resolveCodexAppServerFallbackApiKeyCacheKey, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, r as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-xytpSKD0.js";
-import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-CzpvaBs1.js";
+import { r as describeControlFailure, t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-NpzxEcSR.js";
+import { l as formatCodexDisplayText } from "./notification-correlation-D-MYfJwV.js";
+import { a as getLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthAccountCacheKey, m as resolveCodexAppServerFallbackApiKeyCacheKey, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, r as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-CflavQ_i.js";
+import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-CMwrZrt7.js";
+import { t as requestCodexAppServerJson } from "./request-Dq0LUOqZ.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import os from "node:os";
-import { asBoolean, isRecord, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
-import fs from "node:fs/promises";
 import path from "node:path";
 import { loadAuthProfileStoreWithoutExternalProfiles, resolveAgentConfig, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
+import { asBoolean, isRecord, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import fs from "node:fs/promises";
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { MIGRATION_REASON_TARGET_EXISTS, applyMigrationManualItem, createMigrationItem, createMigrationManualItem, hasMigrationConfigPatchConflict, markMigrationItemConflict, markMigrationItemError, markMigrationItemSkipped, readMigrationConfigPath, summarizeMigrationItems, writeMigrationConfigPath } from "openclaw/plugin-sdk/migration";
 import { archiveMigrationItem, copyMigrationFileItem, withCachedMigrationConfigRuntime, writeMigrationReport } from "openclaw/plugin-sdk/migration-runtime";
@@ -50,7 +51,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-DMn2M7W7.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-DIUFKqaF.js");
 	return handleCodexSubcommand;
 }
 //#endregion

package/dist/media-understanding-provider.js

@@ -1,9 +1,9 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
-import { l as resolveCodexAppServerRuntimeOptions } from "./config-BT6SLiE6.js";
-import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-CIpP8IJ2.js";
-import { i as readModelListResult } from "./models-DXorTaja.js";
-import { l as isJsonObject } from "./client-kMCtlApt.js";
-import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-BJsazZ8j.js";
+import { d as resolveCodexAppServerRuntimeOptions } from "./config-DJXpBkGf.js";
+import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-B48C6S9O.js";
+import { i as readModelListResult } from "./models-CQGfP7nG.js";
+import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
+import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-Cq1-IfZB.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 //#region extensions/codex/media-understanding-provider.ts
@@ -72,7 +72,7 @@ async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = resolveTimerTimeoutMs(params.timeoutMs, 100, 100);
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-xytpSKD0.js").then((n) => n.c).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-CflavQ_i.js").then((n) => n.c).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
 		authProfileId: params.profile

package/dist/{models-DXorTaja.js → models-CQGfP7nG.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { s as readCodexModelListResponse } from "./protocol-validators-CIpP8IJ2.js";
+import { s as readCodexModelListResponse } from "./protocol-validators-B48C6S9O.js";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 /**
@@ -46,7 +46,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-xytpSKD0.js").then((n) => n.c);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CflavQ_i.js").then((n) => n.c);
 	const client = useSharedClient ? await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,