@openclaw/codex 2026.6.6 → 2026.6.8-beta.2

package/dist/{client-factory-XajDuvQ1.js → client-factory-C71Xdb6z.js}

@@ -1,7 +1,7 @@
 //#region extensions/codex/src/app-server/client-factory.ts
 let sharedClientModulePromise = null;
 const loadSharedClientModule = async () => {
-	sharedClientModulePromise ??= import("./shared-client-CflavQ_i.js").then((n) => n.c);
+	sharedClientModulePromise ??= import("./shared-client-jFMumCOe.js").then((n) => n.c);
 	return await sharedClientModulePromise;
 };
 /** Returns a leased shared client so startup can release ownership explicitly. */

package/dist/{command-handlers-DIUFKqaF.js → command-handlers-DHecBkuc.js}

@@ -1,14 +1,14 @@
 import { d as resolveCodexAppServerRuntimeOptions, o as isCodexFastServiceTier } from "./config-DJXpBkGf.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-CQGfP7nG.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-DRKnOpzF.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { l as summarizeCodexAccountUsage } from "./provider-Cs6kWhDQ.js";
+import { l as summarizeCodexAccountUsage } from "./provider-C5P6352f.js";
 import { l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-ElbcSq2o.js";
-import { n as CODEX_CONTROL_METHODS, r as describeControlFailure } from "./plugin-app-cache-key-NpzxEcSR.js";
-import { c as formatAccount, d as formatComputerUseStatus, f as formatList, g as readString$1, h as formatThreads, l as formatCodexDisplayText, m as formatSkills, p as formatModels, s as buildHelp, u as formatCodexStatus } from "./notification-correlation-D-MYfJwV.js";
+import { n as CODEX_CONTROL_METHODS, r as describeControlFailure } from "./plugin-app-cache-key-kIqpGTQj.js";
+import { c as formatAccount, d as formatComputerUseStatus, f as formatList, g as readString$1, h as formatThreads, l as formatCodexDisplayText, m as formatSkills, p as formatModels, s as buildHelp, u as formatCodexStatus } from "./notification-correlation-BGoG0N90.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-C-Yv9uwY.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-CMwrZrt7.js";
-import { t as requestCodexAppServerJson } from "./request-Dq0LUOqZ.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-D3pi5csE.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-CbnMilVW.js";
+import { t as requestCodexAppServerJson } from "./request-BxZ40QKY.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-D1qxvTE_.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-C7qmZ0Jh.js";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import crypto from "node:crypto";

package/dist/{compact-BWiNkDSs.js → compact-GEKusemL.js}

@@ -1,8 +1,8 @@
 import { d as resolveCodexAppServerRuntimeOptions } from "./config-DJXpBkGf.js";
 import { c as withCodexAppServerBindingLock, l as writeCodexAppServerBinding, o as readCodexAppServerBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-ElbcSq2o.js";
-import { o as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CflavQ_i.js";
+import { o as releaseLeasedSharedCodexAppServerClient } from "./shared-client-jFMumCOe.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C-Yv9uwY.js";
-import { t as defaultLeasedCodexAppServerClientFactory } from "./client-factory-XajDuvQ1.js";
+import { t as defaultLeasedCodexAppServerClientFactory } from "./client-factory-C71Xdb6z.js";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 /**

package/dist/{computer-use-D3pi5csE.js → computer-use-D1qxvTE_.js}

@@ -1,6 +1,6 @@
 import { d as resolveCodexAppServerRuntimeOptions, f as resolveCodexComputerUseConfig } from "./config-DJXpBkGf.js";
-import { r as describeControlFailure } from "./plugin-app-cache-key-NpzxEcSR.js";
-import { t as requestCodexAppServerJson } from "./request-Dq0LUOqZ.js";
+import { r as describeControlFailure } from "./plugin-app-cache-key-kIqpGTQj.js";
+import { t as requestCodexAppServerJson } from "./request-BxZ40QKY.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 /**

package/dist/{conversation-binding-CMwrZrt7.js → conversation-binding-CbnMilVW.js}

@@ -1,10 +1,10 @@
 import { d as resolveCodexAppServerRuntimeOptions, h as resolveOpenClawExecPolicyForCodexAppServer, i as codexSandboxPolicyForTurn, n as canUseCodexModelBackedApprovalsReviewerForModel, o as isCodexFastServiceTier, p as resolveCodexModelBackedReviewerPolicyContext } from "./config-DJXpBkGf.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { d as resolveCodexAppServerRequestModelSelection, f as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-Cq1-IfZB.js";
+import { d as resolveCodexAppServerRequestModelSelection, f as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-cban34w3.js";
 import { a as normalizeCodexAppServerBindingModelProvider, i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-ElbcSq2o.js";
-import { n as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-NpzxEcSR.js";
-import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, l as formatCodexDisplayText, r as readCodexNotificationThreadId } from "./notification-correlation-D-MYfJwV.js";
-import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-CflavQ_i.js";
+import { n as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-kIqpGTQj.js";
+import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, l as formatCodexDisplayText, r as readCodexNotificationThreadId } from "./notification-correlation-BGoG0N90.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-jFMumCOe.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-C-Yv9uwY.js";
 import { resolveTimerTimeoutMs, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import os from "node:os";

package/dist/harness.js

@@ -32,25 +32,25 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-DG9p9ReO.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-D_q-VrpR.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-Ctu2VXAG.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-DqKLfWMB.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-BWiNkDSs.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-GEKusemL.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		compactAfterContextEngine: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-BWiNkDSs.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-GEKusemL.js");
 			return maybeCompactCodexAppServerSession(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				allowNonManualNativeRequest: true
@@ -63,7 +63,7 @@ function createCodexAppServerAgentHarness(options) {
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-CflavQ_i.js").then((n) => n.c);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-jFMumCOe.js").then((n) => n.c);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};

package/dist/index.js

@@ -1,13 +1,13 @@
 import { createCodexAppServerAgentHarness } from "./harness.js";
 import { d as resolveCodexAppServerRuntimeOptions, t as CODEX_PLUGINS_MARKETPLACE_NAME, u as readCodexPluginConfig } from "./config-DJXpBkGf.js";
-import { t as buildCodexProvider } from "./provider-Cs6kWhDQ.js";
-import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-Cq1-IfZB.js";
+import { t as buildCodexProvider } from "./provider-C5P6352f.js";
+import { C as defaultCodexAppInventoryCache, b as ensureCodexPluginActivation, x as pluginReadParams } from "./thread-lifecycle-cban34w3.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
-import { r as describeControlFailure, t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-NpzxEcSR.js";
-import { l as formatCodexDisplayText } from "./notification-correlation-D-MYfJwV.js";
-import { a as getLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthAccountCacheKey, m as resolveCodexAppServerFallbackApiKeyCacheKey, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, r as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-CflavQ_i.js";
-import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-CMwrZrt7.js";
-import { t as requestCodexAppServerJson } from "./request-Dq0LUOqZ.js";
+import { r as describeControlFailure, t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-kIqpGTQj.js";
+import { l as formatCodexDisplayText } from "./notification-correlation-BGoG0N90.js";
+import { a as getLeasedSharedCodexAppServerClient, d as resolveCodexAppServerAuthAccountCacheKey, m as resolveCodexAppServerFallbackApiKeyCacheKey, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, r as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-jFMumCOe.js";
+import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, n as handleCodexConversationInboundClaim, s as listCodexCliSessionsOnNode, t as handleCodexConversationBindingResolved } from "./conversation-binding-CbnMilVW.js";
+import { t as requestCodexAppServerJson } from "./request-BxZ40QKY.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { resolveLivePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -17,10 +17,10 @@ import path from "node:path";
 import { loadAuthProfileStoreWithoutExternalProfiles, resolveAgentConfig, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
 import { asBoolean, isRecord, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs/promises";
+import { applyAuthProfileConfig, buildApiKeyCredential, buildOauthProviderAuthResult, buildOpenAICodexCredentialExtra, readCodexCliCredentialsCached, resolveOpenAICodexAuthIdentity, resolveOpenAICodexImportProfileName, updateAuthProfileStoreWithLock } from "openclaw/plugin-sdk/provider-auth";
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { MIGRATION_REASON_TARGET_EXISTS, applyMigrationManualItem, createMigrationItem, createMigrationManualItem, hasMigrationConfigPatchConflict, markMigrationItemConflict, markMigrationItemError, markMigrationItemSkipped, readMigrationConfigPath, summarizeMigrationItems, writeMigrationConfigPath } from "openclaw/plugin-sdk/migration";
 import { archiveMigrationItem, copyMigrationFileItem, withCachedMigrationConfigRuntime, writeMigrationReport } from "openclaw/plugin-sdk/migration-runtime";
-import { applyAuthProfileConfig, buildApiKeyCredential, buildOauthProviderAuthResult, buildOpenAICodexCredentialExtra, readCodexCliCredentialsCached, resolveOpenAICodexAuthIdentity, resolveOpenAICodexImportProfileName, updateAuthProfileStoreWithLock } from "openclaw/plugin-sdk/provider-auth";
 import { readJsonFileWithFallback } from "openclaw/plugin-sdk/json-store";
 //#region extensions/codex/src/commands.ts
 /** Creates the reserved `/codex` command definition exposed by the plugin. */
@@ -51,7 +51,7 @@ async function handleCodexCommand(ctx, options = {}) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-DIUFKqaF.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-DHecBkuc.js");
 	return handleCodexSubcommand;
 }
 //#endregion

package/dist/media-understanding-provider.js

@@ -1,9 +1,9 @@
 import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
 import { d as resolveCodexAppServerRuntimeOptions } from "./config-DJXpBkGf.js";
 import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-B48C6S9O.js";
-import { i as readModelListResult } from "./models-CQGfP7nG.js";
+import { i as readModelListResult } from "./models-DRKnOpzF.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-Cq1-IfZB.js";
+import { r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-cban34w3.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 //#region extensions/codex/media-understanding-provider.ts
@@ -52,6 +52,8 @@ async function describeCodexImages(req, options) {
 			profile: req.profile,
 			timeoutMs: req.timeoutMs,
 			agentDir: req.agentDir,
+			authStore: req.authStore,
+			cfg: req.cfg,
 			options,
 			taskLabel: "image understanding",
 			developerInstructions: "You are OpenClaw's bounded image-understanding worker. Describe only the provided image content. Do not call tools, edit files, or ask follow-up questions.",
@@ -71,11 +73,16 @@ async function describeCodexImages(req, options) {
 async function runBoundedCodexVisionTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: params.options.pluginConfig });
 	const timeoutMs = resolveTimerTimeoutMs(params.timeoutMs, 100, 100);
+	const agentDir = params.agentDir?.trim() || void 0;
+	const cwd = agentDir ?? process.cwd();
 	const ownsClient = !params.options.clientFactory;
-	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile) : await import("./shared-client-CflavQ_i.js").then((n) => n.c).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(appServer.start, params.profile, agentDir, params.cfg) : await import("./shared-client-jFMumCOe.js").then((n) => n.c).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions: appServer.start,
 		timeoutMs,
-		authProfileId: params.profile
+		authProfileId: params.profile,
+		agentDir,
+		authProfileStore: params.authStore,
+		config: params.cfg
 	}));
 	const abortController = new AbortController();
 	const timeout = setTimeout(() => abortController.abort("timeout"), timeoutMs);
@@ -91,7 +98,7 @@ async function runBoundedCodexVisionTurn(params) {
 		const thread = assertCodexThreadStartResponse(await client.request("thread/start", {
 			model: params.model,
 			modelProvider: "openai",
-			cwd: params.agentDir || process.cwd(),
+			cwd,
 			approvalPolicy: "on-request",
 			sandbox: "read-only",
 			serviceName: "OpenClaw",
@@ -113,7 +120,7 @@ async function runBoundedCodexVisionTurn(params) {
 			const turn = assertCodexTurnStartResponse(await client.request("turn/start", {
 				threadId: thread.thread.id,
 				input: params.input,
-				cwd: params.agentDir || process.cwd(),
+				cwd,
 				approvalPolicy: "on-request",
 				model: params.model,
 				effort: "low"
@@ -146,6 +153,8 @@ async function extractCodexStructured(req, options) {
 			profile: req.profile,
 			timeoutMs: req.timeoutMs,
 			agentDir: req.agentDir,
+			authStore: req.authStore,
+			cfg: req.cfg,
 			options,
 			taskLabel: "structured extraction",
 			developerInstructions: "You are OpenClaw's bounded structured-extraction worker. Return only the requested extraction. Do not call tools, edit files, ask follow-up questions, or include secrets.",

package/dist/{models-CQGfP7nG.js → models-DRKnOpzF.js}

@@ -46,7 +46,7 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CflavQ_i.js").then((n) => n.c);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-jFMumCOe.js").then((n) => n.c);
 	const client = useSharedClient ? await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/{native-hook-relay-CmUUO3Eu.js → native-hook-relay-C3i3FYtc.js}

@@ -1,12 +1,12 @@
 import { c as isTrustedCodexModelBackedOpenAIProvider } from "./config-DJXpBkGf.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { E as sanitizeInlineImageDataUrl, w as invalidInlineImageText } from "./thread-lifecycle-Cq1-IfZB.js";
-import { l as formatCodexDisplayText } from "./notification-correlation-D-MYfJwV.js";
+import { E as sanitizeInlineImageDataUrl, w as invalidInlineImageText } from "./thread-lifecycle-cban34w3.js";
+import { l as formatCodexDisplayText } from "./notification-correlation-BGoG0N90.js";
 import { addTimerTimeoutGraceMs, finiteSecondsToTimerSafeMilliseconds, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { createHash } from "node:crypto";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { asOptionalRecord, isRecord, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { HEARTBEAT_RESPONSE_TOOL_NAME, buildAgentHookContextChannelFields, callGatewayTool, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, formatApprovalDisplayPath, hasNativeHookRelayInvocation, invokeNativeHookRelay, isMessagingTool, isMessagingToolSendAction, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, projectRuntimeToolInputSchema, registerNativeHookRelay, resolveNativeHookRelayDeferredToolApproval, runAgentHarnessAfterToolCallHook, runBeforeToolCallHook, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { HEARTBEAT_RESPONSE_TOOL_NAME, buildAgentHookContextChannelFields, callGatewayTool, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractToolResultMediaArtifact, filterToolResultMediaUrls, formatApprovalDisplayPath, hasNativeHookRelayInvocation, invokeNativeHookRelay, isMessagingTool, isMessagingToolSendAction, isToolResultError, isToolWrappedWithBeforeToolCallHook, normalizeHeartbeatToolResponse, projectRuntimeToolInputSchema, registerNativeHookRelay, resolveNativeHookRelayDeferredToolApproval, runAgentHarnessAfterToolCallHook, runBeforeToolCallHook, sanitizeToolResult, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { buildExecAutoReviewInputForShellCommand, reviewExecRequestWithConfiguredModel } from "openclaw/plugin-sdk/agent-harness-exec-review-runtime";
 /** Default idle timeout while waiting for app-server turn completion. */
@@ -1185,17 +1185,19 @@ function createCodexDynamicToolBridge(params) {
 		handleToolCall: async (call, options) => {
 			const toolEntry = toolMap.get(call.tool);
 			if (!toolEntry) {
+				const message = registeredToolNames.has(call.tool) ? `OpenClaw tool is not available for this turn: ${call.tool}` : `Unknown OpenClaw tool: ${call.tool}`;
+				notifyAgentToolResult(options?.onAgentToolResult, call.tool, failedToolResult(message), true);
 				if (registeredToolNames.has(call.tool)) return {
 					contentItems: [{
 						type: "inputText",
-						text: `OpenClaw tool is not available for this turn: ${call.tool}`
+						text: message
 					}],
 					success: false
 				};
 				return {
 					contentItems: [{
 						type: "inputText",
-						text: `Unknown OpenClaw tool: ${call.tool}`
+						text: message
 					}],
 					success: false
 				};
@@ -1209,7 +1211,7 @@ function createCodexDynamicToolBridge(params) {
 				const preparedArgs = tool.prepareArguments ? tool.prepareArguments(args) : args;
 				didStartExecution = true;
 				const rawResult = await tool.execute(call.callId, preparedArgs, signal);
-				const rawIsError = isToolResultError(rawResult);
+				const rawIsError = isCodexToolResultError(rawResult);
 				const middlewareResult = await middlewareRunner.applyToolResultMiddleware({
 					threadId: call.threadId,
 					turnId: call.turnId,
@@ -1227,7 +1229,8 @@ function createCodexDynamicToolBridge(params) {
 					args,
 					result: middlewareResult
 				});
-				const resultIsError = rawIsError || isToolResultError(result);
+				const resultIsError = rawIsError || isCodexToolResultError(result);
+				notifyAgentToolResult(options?.onAgentToolResult, toolName, result, resultIsError);
 				collectToolTelemetry({
 					toolName,
 					args,
@@ -1257,6 +1260,8 @@ function createCodexDynamicToolBridge(params) {
 				withDynamicToolAsyncStarted(response, isAsyncStartedToolResult(rawResult) || isAsyncStartedToolResult(result));
 				return withSideEffectEvidence(response, terminalType !== "blocked");
 			} catch (error) {
+				const errorMessage = error instanceof Error ? error.message : String(error);
+				notifyAgentToolResult(options?.onAgentToolResult, toolName, failedToolResult(errorMessage), true);
 				collectToolTelemetry({
 					toolName,
 					args,
@@ -1273,13 +1278,13 @@ function createCodexDynamicToolBridge(params) {
 					sessionKey: toolResultHookContext.sessionKey,
 					channelId: toolResultHookContext.channelId,
 					startArgs: args,
-					error: error instanceof Error ? error.message : String(error),
+					error: errorMessage,
 					startedAt
 				});
 				return withSideEffectEvidence(withDiagnosticTerminalType({
 					contentItems: [{
 						type: "inputText",
-						text: error instanceof Error ? error.message : String(error)
+						text: errorMessage
 					}],
 					success: false
 				}, "error"), didStartExecution);
@@ -1287,6 +1292,29 @@ function createCodexDynamicToolBridge(params) {
 		}
 	};
 }
+function notifyAgentToolResult(observer, toolName, result, isError) {
+	try {
+		observer?.({
+			toolName,
+			result: sanitizeToolResult(result),
+			isError
+		});
+	} catch (error) {
+		embeddedAgentLog.warn(`onAgentToolResult handler failed: tool=${toolName} error=${String(error)}`);
+	}
+}
+function failedToolResult(message) {
+	return {
+		content: [{
+			type: "text",
+			text: message
+		}],
+		details: {
+			status: "failed",
+			error: message
+		}
+	};
+}
 function wrapProjectedCodexDynamicTools(tools, hookContext) {
 	const wrappedTools = [];
 	const quarantinedTools = [];
@@ -1565,9 +1593,11 @@ function readPositiveInteger(value) {
 	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
 	return Math.floor(value);
 }
-function isToolResultError(result) {
+function isCodexToolResultError(result) {
+	if (isToolResultError(result)) return true;
 	const details = result.details;
 	if (!isRecord(details)) return false;
+	if (details.ok === true || details.success === true) return false;
 	if (details.timedOut === true) return true;
 	if (typeof details.exitCode === "number" && details.exitCode !== 0) return true;
 	if (typeof details.status !== "string") return false;

package/dist/{notification-correlation-D-MYfJwV.js → notification-correlation-BGoG0N90.js}

@@ -1,6 +1,6 @@
 import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-DJXpBkGf.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { a as hasCodexRateLimitSnapshots, c as summarizeCodexAccountRateLimits, u as summarizeCodexRateLimits } from "./provider-Cs6kWhDQ.js";
+import { a as hasCodexRateLimitSnapshots, c as summarizeCodexAccountRateLimits, u as summarizeCodexRateLimits } from "./provider-C5P6352f.js";
 //#region extensions/codex/src/command-formatters.ts
 /** Formats the combined `/codex status` probe result. */
 function formatCodexStatus(probes) {

package/dist/{plugin-app-cache-key-NpzxEcSR.js → plugin-app-cache-key-kIqpGTQj.js}

@@ -1,6 +1,6 @@
 import { n as CodexAppServerRpcError } from "./client-DovmVtbr.js";
-import { S as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-Cq1-IfZB.js";
-import { h as resolveCodexAppServerHomeDir } from "./shared-client-CflavQ_i.js";
+import { S as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-cban34w3.js";
+import { h as resolveCodexAppServerHomeDir } from "./shared-client-jFMumCOe.js";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/capabilities.ts
 /**

package/dist/{provider-Cs6kWhDQ.js → provider-C5P6352f.js}

@@ -541,11 +541,11 @@ async function listModelsBestEffort(params) {
 	}
 }
 async function listCodexAppServerModelsLazy(options) {
-	const { listCodexAppServerModels } = await import("./models-CQGfP7nG.js").then((n) => n.r);
+	const { listCodexAppServerModels } = await import("./models-DRKnOpzF.js").then((n) => n.r);
 	return listCodexAppServerModels(options);
 }
 async function requestCodexAppServerRateLimitsLazy(options) {
-	const { requestCodexAppServerJson } = await import("./request-Dq0LUOqZ.js").then((n) => n.n);
+	const { requestCodexAppServerJson } = await import("./request-BxZ40QKY.js").then((n) => n.n);
 	return await requestCodexAppServerJson({
 		method: "account/rateLimits/read",
 		timeoutMs: options.timeoutMs,

package/dist/provider.js

@@ -1,2 +1,2 @@
-import { n as buildCodexProviderCatalog, r as isModernCodexModel, t as buildCodexProvider } from "./provider-Cs6kWhDQ.js";
+import { n as buildCodexProviderCatalog, r as isModernCodexModel, t as buildCodexProvider } from "./provider-C5P6352f.js";
 export { buildCodexProvider, buildCodexProviderCatalog, isModernCodexModel };

package/dist/{request-Dq0LUOqZ.js → request-BxZ40QKY.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as getLeasedSharedCodexAppServerClient, i as createIsolatedCodexAppServerClient, l as withTimeout, o as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CflavQ_i.js";
+import { a as getLeasedSharedCodexAppServerClient, i as createIsolatedCodexAppServerClient, l as withTimeout, o as releaseLeasedSharedCodexAppServerClient } from "./shared-client-jFMumCOe.js";
 import { t as resolveCodexAppServerDirectSandboxBypassBlock } from "./sandbox-guard-C-Yv9uwY.js";
 //#region extensions/codex/src/app-server/request.ts
 var request_exports = /* @__PURE__ */ __exportAll({ requestCodexAppServerJson: () => requestCodexAppServerJson });

package/dist/{run-attempt-DG9p9ReO.js → run-attempt-D_q-VrpR.js}

@@ -1,17 +1,17 @@
 import { _ as withMcpElicitationsApprovalPolicy, a as isCodexAppServerApprovalPolicyAllowedByRequirements, d as resolveCodexAppServerRuntimeOptions, f as resolveCodexComputerUseConfig, g as shouldAutoApproveCodexAppServerApprovals, h as resolveOpenClawExecPolicyForCodexAppServer, m as resolveCodexPluginsPolicy, p as resolveCodexModelBackedReviewerPolicyContext, s as isCodexSandboxExecServerEnabled, u as readCodexPluginConfig } from "./config-DJXpBkGf.js";
 import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse } from "./protocol-validators-B48C6S9O.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { i as formatCodexUsageLimitErrorMessage, o as resolveCodexUsageLimitResetAtMs, s as shouldRefreshCodexRateLimitsForUsageLimitMessage } from "./provider-Cs6kWhDQ.js";
+import { i as formatCodexUsageLimitErrorMessage, o as resolveCodexUsageLimitResetAtMs, s as shouldRefreshCodexRateLimitsForUsageLimitMessage } from "./provider-C5P6352f.js";
 import { a as isCodexAppServerConnectionClosedError, i as isCodexAppServerApprovalRequest, n as CodexAppServerRpcError, r as compareCodexAppServerVersions, s as MIN_CODEX_SANDBOX_EXEC_SERVER_APP_SERVER_VERSION } from "./client-DovmVtbr.js";
-import { C as defaultCodexAppInventoryCache, D as filterCodexDynamicTools, M as projectContextEngineAssemblyForCodex, N as resolveCodexContextEngineProjectionMaxChars, O as isForcedPrivateQaCodexRuntime, P as resolveCodexContextEngineProjectionReserveTokens, T as sanitizeCodexHistoryImagePayloads, _ as buildCodexPluginThreadConfigInputFingerprint, a as buildDeveloperInstructions, c as codexDynamicToolsFingerprint, g as buildCodexPluginThreadConfig, h as isCodexAppServerProfilerEnabled, i as buildContextEngineBinding, j as resolveCodexDynamicToolsLoadingForModel, k as normalizeCodexDynamicToolName$1, l as isContextEngineBindingCompatible, m as startOrResumeThread, n as areCodexDynamicToolFingerprintsCompatible, o as buildTurnCollaborationMode, s as buildTurnStartParams, v as mergeCodexThreadConfigs, y as shouldBuildCodexPluginThreadConfig } from "./thread-lifecycle-Cq1-IfZB.js";
+import { C as defaultCodexAppInventoryCache, D as filterCodexDynamicTools, M as projectContextEngineAssemblyForCodex, N as resolveCodexContextEngineProjectionMaxChars, O as isForcedPrivateQaCodexRuntime, P as resolveCodexContextEngineProjectionReserveTokens, T as sanitizeCodexHistoryImagePayloads, _ as buildCodexPluginThreadConfigInputFingerprint, a as buildDeveloperInstructions, c as codexDynamicToolsFingerprint, g as buildCodexPluginThreadConfig, h as isCodexAppServerProfilerEnabled, i as buildContextEngineBinding, j as resolveCodexDynamicToolsLoadingForModel, k as normalizeCodexDynamicToolName$1, l as isContextEngineBindingCompatible, m as startOrResumeThread, n as areCodexDynamicToolFingerprintsCompatible, o as buildTurnCollaborationMode, s as buildTurnStartParams, v as mergeCodexThreadConfigs, y as shouldBuildCodexPluginThreadConfig } from "./thread-lifecycle-cban34w3.js";
 import { i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding, r as clearCodexAppServerBindingForThread } from "./session-binding-ElbcSq2o.js";
-import { n as CODEX_CONTROL_METHODS, t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-NpzxEcSR.js";
-import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, l as formatCodexDisplayText, n as isCodexNotificationForTurn, o as resolveCodexAppServerForOpenClawToolPolicy, r as readCodexNotificationThreadId, t as describeCodexNotificationCorrelation } from "./notification-correlation-D-MYfJwV.js";
-import { d as resolveCodexAppServerAuthAccountCacheKey, f as resolveCodexAppServerAuthProfileId, h as resolveCodexAppServerHomeDir, m as resolveCodexAppServerFallbackApiKeyCacheKey, n as clearSharedCodexAppServerClientIfCurrentAndUnclaimed, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, s as retireSharedCodexAppServerClientIfCurrent, t as clearSharedCodexAppServerClientIfCurrent, u as refreshCodexAppServerAuthTokens } from "./shared-client-CflavQ_i.js";
+import { n as CODEX_CONTROL_METHODS, t as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-kIqpGTQj.js";
+import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, l as formatCodexDisplayText, n as isCodexNotificationForTurn, o as resolveCodexAppServerForOpenClawToolPolicy, r as readCodexNotificationThreadId, t as describeCodexNotificationCorrelation } from "./notification-correlation-BGoG0N90.js";
+import { d as resolveCodexAppServerAuthAccountCacheKey, f as resolveCodexAppServerAuthProfileId, h as resolveCodexAppServerHomeDir, m as resolveCodexAppServerFallbackApiKeyCacheKey, n as clearSharedCodexAppServerClientIfCurrentAndUnclaimed, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent, s as retireSharedCodexAppServerClientIfCurrent, t as clearSharedCodexAppServerClientIfCurrent, u as refreshCodexAppServerAuthTokens } from "./shared-client-jFMumCOe.js";
 import { i as resolveCodexNativeExecutionPolicy } from "./sandbox-guard-C-Yv9uwY.js";
-import { t as defaultLeasedCodexAppServerClientFactory } from "./client-factory-XajDuvQ1.js";
-import { S as withCodexStartupTimeout, _ as resolveCodexPostToolRawAssistantCompletionIdleTimeoutMs, a as createCodexNativeHookRelay, b as resolveCodexTurnCompletionIdleTimeoutMs, c as scheduleCodexNativeHookRelayUnregister, d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, g as CODEX_POST_REASONING_REPLY_IDLE_TIMEOUT_MS, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, n as CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS, o as resolveCodexNativeHookRelayEvents, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, s as resolveCodexNativeHookRelayTtlMs, u as createCodexDynamicToolBridge, v as resolveCodexStartupTimeoutMs, x as resolveCodexTurnTerminalIdleTimeoutMs, y as resolveCodexTurnAssistantCompletionIdleTimeoutMs } from "./native-hook-relay-CmUUO3Eu.js";
-import { t as ensureCodexComputerUse } from "./computer-use-D3pi5csE.js";
+import { t as defaultLeasedCodexAppServerClientFactory } from "./client-factory-C71Xdb6z.js";
+import { S as withCodexStartupTimeout, _ as resolveCodexPostToolRawAssistantCompletionIdleTimeoutMs, a as createCodexNativeHookRelay, b as resolveCodexTurnCompletionIdleTimeoutMs, c as scheduleCodexNativeHookRelayUnregister, d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, g as CODEX_POST_REASONING_REPLY_IDLE_TIMEOUT_MS, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, n as CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS, o as resolveCodexNativeHookRelayEvents, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, s as resolveCodexNativeHookRelayTtlMs, u as createCodexDynamicToolBridge, v as resolveCodexStartupTimeoutMs, x as resolveCodexTurnTerminalIdleTimeoutMs, y as resolveCodexTurnAssistantCompletionIdleTimeoutMs } from "./native-hook-relay-C3i3FYtc.js";
+import { t as ensureCodexComputerUse } from "./computer-use-D1qxvTE_.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-C7qmZ0Jh.js";
 import { asDateTimestampMs, parseStrictNonNegativeInteger, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { createHash, randomUUID } from "node:crypto";
@@ -21,6 +21,7 @@ import { markAuthProfileBlockedUntil, resolveAgentDir, resolveAgentWorkspaceDir
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { asBoolean, asFiniteNumber, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { CODEX_APP_SERVER_CONTEXT_ENGINE_HOST, TOOL_PROGRESS_OUTPUT_MAX_CHARS, acquireSessionWriteLock, appendSessionTranscriptMessage, assembleHarnessContextEngine, assertContextEngineHostSupport, awaitAgentHarnessAgentEndHook, bootstrapHarnessContextEngine, buildAgentHookContextChannelFields, buildBootstrapContextForFiles, buildEmbeddedAttemptToolRunContext, buildHarnessContextEngineRuntimeContext, buildHarnessContextEngineRuntimeContextFromUsage, classifyAgentHarnessTerminalOutcome, clearActiveEmbeddedRun, embeddedAgentLog, emitAgentEvent, emitSessionTranscriptUpdate, filterProviderNormalizableTools, finalizeHarnessContextEngineTurn, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, getAgentHarnessHookRunner, getBeforeToolCallPolicyDiagnosticState, inferToolMetaFromArgs, isActiveHarnessContextEngine, isSubagentSessionKey, loadCodexBundleMcpThreadConfig, normalizeAgentRuntimeTools, normalizeUsage, resolveAgentHarnessBeforePromptBuildResult, resolveAttemptSpawnWorkspaceDir, resolveBootstrapFilesForRun, resolveContextEngineOwnerPluginId, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds as resolveSessionAgentIds$1, resolveSessionWriteLockOptions, resolveUserPath, runAgentCleanupStep, runAgentHarnessAfterCompactionHook, runAgentHarnessAfterToolCallHook, runAgentHarnessAgentEndHook, runAgentHarnessBeforeCompactionHook, runAgentHarnessBeforeMessageWriteHook, runAgentHarnessLlmInputHook, runAgentHarnessLlmOutputHook, runHarnessContextEngineMaintenance, setActiveEmbeddedRun, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { buildMemorySystemPromptAddition } from "openclaw/plugin-sdk/core";
 import { spawn } from "node:child_process";
 import { once } from "node:events";
 import { WebSocketServer } from "ws";
@@ -29,6 +30,7 @@ import fs from "node:fs/promises";
 import { createDiagnosticTraceContextFromActiveScope, emitTrustedDiagnosticEvent, emitTrustedDiagnosticEventWithPrivateData, freezeDiagnosticTraceContext, hasPendingInternalDiagnosticEvent, onInternalDiagnosticEvent, resolveDiagnosticModelContentCapturePolicy } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { isToolAllowed } from "openclaw/plugin-sdk/sandbox";
 import { appendRegularFile, pathExists } from "openclaw/plugin-sdk/security-runtime";
+import { MESSAGE_TOOL_DELIVERY_HINTS } from "openclaw/plugin-sdk/message-tool-delivery-hints";
 import { buildSessionContext, migrateSessionEntries, parseSessionEntries } from "openclaw/plugin-sdk/agent-sessions";
 import { isIP } from "node:net";
 import { SsrFBlockedError, isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
@@ -270,9 +272,11 @@ async function buildCodexWorkspaceBootstrapContext(params) {
 			promptContext: renderCodexWorkspaceBootstrapPromptContext(promptContextFiles),
 			developerInstructions: renderCodexWorkspaceThreadDeveloperInstructions(developerInstructionFiles),
 			turnScopedDeveloperInstructions: renderCodexWorkspaceCollaborationDeveloperInstructions(turnScopedDeveloperInstructionFiles),
-			memoryCollaborationInstructions: shouldInjectCodexOpenClawPromptContext(params.params) ? renderCodexWorkspaceMemoryReference({
+			memoryCollaborationInstructions: shouldInjectCodexOpenClawPromptContext(params.params) ? renderCodexWorkspaceMemoryCollaborationInstructions({
 				files: memoryReferenceFiles,
-				toolNames: params.memoryToolNames
+				toolNames: params.memoryToolNames,
+				memoryToolRouted: memoryToolsAvailable,
+				citationsMode: params.params.config?.memory?.citations
 			}) : void 0,
 			heartbeatCollaborationInstructions: renderCodexWorkspaceHeartbeatReference(heartbeatReferenceFiles)
 		};
@@ -495,10 +499,9 @@ function prependCodexOpenClawPromptContext(prompt, context, options = {}) {
 		promptSection
 	].filter(Boolean).join("\n\n");
 }
-const CODEX_DELIVERY_HINT_LINES = ["Delivery: to send a message, use the `message` tool.", "Delivery: Final assistant text is not automatically delivered in this run. Use the `message` tool to send user-visible output."];
 function splitLeadingCodexDeliveryHint(prompt) {
 	const trimmedStart = prompt.trimStart();
-	const matchedHint = CODEX_DELIVERY_HINT_LINES.find((hint) => trimmedStart.startsWith(hint));
+	const matchedHint = MESSAGE_TOOL_DELIVERY_HINTS.find((hint) => trimmedStart.startsWith(hint));
 	if (!matchedHint) return { prompt };
 	return {
 		deliveryHint: matchedHint,
@@ -609,6 +612,29 @@ function renderCodexWorkspaceMemoryReference(params) {
 	for (const file of params.files) lines.push(`- ${file.path}`);
 	return lines.join("\n").trim();
 }
+function renderCodexWorkspaceMemoryCollaborationInstructions(params) {
+	const sections = [params.memoryToolRouted ? renderCodexMemoryRecallInstructions({
+		toolNames: params.toolNames,
+		citationsMode: params.citationsMode
+	}) : void 0, renderCodexWorkspaceMemoryReference({
+		files: params.files,
+		toolNames: params.toolNames
+	})].filter(isNonEmptyString$2);
+	return sections.length > 0 ? sections.join("\n\n") : void 0;
+}
+function renderCodexMemoryRecallInstructions(params) {
+	const memoryPrompt = buildMemorySystemPromptAddition({
+		availableTools: new Set(params.toolNames),
+		citationsMode: params.citationsMode
+	});
+	if (!memoryPrompt) return;
+	return [memoryPrompt, renderCodexMemoryToolSearchBridge(params.toolNames)].filter(isNonEmptyString$2).join("\n").trim();
+}
+function renderCodexMemoryToolSearchBridge(toolNames) {
+	const memoryToolNames = toolNames.map((name) => normalizeCodexDynamicToolName(name)).filter((name) => CODEX_MEMORY_TOOL_NAMES.has(name)).toSorted();
+	if (memoryToolNames.length === 0) return;
+	return `Codex may expose ${memoryToolNames.join(" and ")} as deferred tools. When the memory guidance above calls for memory recall, use an already-loaded memory tool directly. If the needed memory tool is deferred and not currently callable, use \`tool_search\` to load it, then call that memory tool.`;
+}
 /** Lists available memory tool names understood by Codex workspace memory routing. */
 function getCodexWorkspaceMemoryToolNames(tools) {
 	const availableToolNames = new Set(tools.map((tool) => normalizeCodexDynamicToolName(tool.name)));
@@ -2788,6 +2814,7 @@ function readStringList(value) {
 * execution can register as an external environment.
 */
 const SANDBOX_EXEC_SERVERS = /* @__PURE__ */ new Map();
+const CODEX_SANDBOX_EXEC_SERVER_MAX_INBOUND_MESSAGE_BYTES = 100 * 1024 * 1024;
 /** Starts or reuses a sandbox exec-server and registers it with Codex app-server. */
 async function ensureCodexSandboxExecServerEnvironment(params) {
 	if (!params.sandbox?.enabled || !params.sandbox.backend) return;
@@ -2864,7 +2891,8 @@ function startAndRememberOpenClawExecServer(sandbox) {
 async function startOpenClawExecServer(sandbox) {
 	const server = new WebSocketServer({
 		host: "127.0.0.1",
-		port: 0
+		port: 0,
+		maxPayload: CODEX_SANDBOX_EXEC_SERVER_MAX_INBOUND_MESSAGE_BYTES
 	});
 	await once(server, "listening");
 	const address = server.address();
@@ -2881,6 +2909,7 @@ async function startOpenClawExecServer(sandbox) {
 		server
 	};
 	server.on("connection", (socket, request) => {
+		socket.on("error", handleExecServerSocketError);
 		if (!isAuthorizedExecServerRequest(execServer, request)) {
 			socket.close(1008, "unauthorized");
 			return;
@@ -2928,6 +2957,9 @@ function handleConnection(execServer, socket) {
 		for (const process of processes.values()) process.abortController.abort();
 	});
 }
+function handleExecServerSocketError(error) {
+	embeddedAgentLog.debug("codex sandbox exec-server websocket failed", { error });
+}
 async function handleMessage(execServer, processes, socket, data) {
 	const request = parseRequest(data);
 	if (!request.method) {
@@ -3797,7 +3829,37 @@ function formatDynamicToolTimeoutDetails(params) {
 * returning a Codex protocol response instead of throwing.
 */
 async function handleDynamicToolCallWithTimeout(params) {
-	if (params.signal.aborted) return failedDynamicToolResponse("OpenClaw dynamic tool call aborted before execution.");
+	let didNotifyAgentToolResult = false;
+	const notifyAgentToolResult = (event) => {
+		if (didNotifyAgentToolResult) return;
+		didNotifyAgentToolResult = true;
+		try {
+			params.onAgentToolResult?.(event);
+		} catch (error) {
+			embeddedAgentLog.warn(`onAgentToolResult handler failed: tool=${params.call.tool} error=${String(error)}`);
+		}
+	};
+	const notifyFailedToolResult = (message) => {
+		notifyAgentToolResult({
+			toolName: params.call.tool,
+			result: {
+				content: [{
+					type: "text",
+					text: message
+				}],
+				details: {
+					status: "failed",
+					error: message
+				}
+			},
+			isError: true
+		});
+	};
+	if (params.signal.aborted) {
+		const message = "OpenClaw dynamic tool call aborted before execution.";
+		notifyFailedToolResult(message);
+		return failedDynamicToolResponse(message);
+	}
 	const controller = new AbortController();
 	let timeout;
 	let timedOut = false;
@@ -3805,6 +3867,7 @@ async function handleDynamicToolCallWithTimeout(params) {
 	const abortFromRun = () => {
 		const message = "OpenClaw dynamic tool call aborted.";
 		controller.abort(params.signal.reason ?? /* @__PURE__ */ new Error(message));
+		notifyFailedToolResult(message);
 		resolveAbort?.(failedDynamicToolResponse(message, { sideEffectEvidence: true }));
 	};
 	const abortPromise = new Promise((resolve) => {
@@ -3824,6 +3887,7 @@ async function handleDynamicToolCallWithTimeout(params) {
 				...timeoutDetails.meta,
 				consoleMessage: timeoutDetails.consoleMessage
 			});
+			notifyFailedToolResult(timeoutDetails.responseMessage);
 			resolve(failedDynamicToolResponse(timeoutDetails.responseMessage, { sideEffectEvidence: true }));
 		}, timeoutMs);
 		timeout.unref?.();
@@ -3831,13 +3895,20 @@ async function handleDynamicToolCallWithTimeout(params) {
 	try {
 		params.signal.addEventListener("abort", abortFromRun, { once: true });
 		if (params.signal.aborted) abortFromRun();
-		return await Promise.race([
-			params.toolBridge.handleToolCall(params.call, { signal: controller.signal }),
+		const response = await Promise.race([
+			params.toolBridge.handleToolCall(params.call, {
+				signal: controller.signal,
+				onAgentToolResult: notifyAgentToolResult
+			}),
 			abortPromise,
 			timeoutPromise
 		]);
+		if (!response.success && !didNotifyAgentToolResult) notifyFailedToolResult(readDynamicToolResponseText(response));
+		return response;
 	} catch (error) {
-		return failedDynamicToolResponse(error instanceof Error ? error.message : String(error), { sideEffectEvidence: true });
+		const message = error instanceof Error ? error.message : String(error);
+		notifyFailedToolResult(message);
+		return failedDynamicToolResponse(message, { sideEffectEvidence: true });
 	} finally {
 		if (timeout) clearTimeout(timeout);
 		params.signal.removeEventListener("abort", abortFromRun);
@@ -3845,6 +3916,9 @@ async function handleDynamicToolCallWithTimeout(params) {
 		if (!timedOut && !controller.signal.aborted) controller.abort(/* @__PURE__ */ new Error("OpenClaw dynamic tool call finished."));
 	}
 }
+function readDynamicToolResponseText(response) {
+	return response.contentItems.flatMap((item) => item.type === "inputText" && typeof item.text === "string" ? [item.text] : []).join("\n").trim() || "OpenClaw dynamic tool call failed.";
+}
 function failedDynamicToolResponse(message, options) {
 	const response = {
 		contentItems: [{
@@ -9130,6 +9204,7 @@ async function runCodexAppServerAttempt(params, options = {}) {
 					toolBridge,
 					signal: runAbortController.signal,
 					timeoutMs: dynamicToolTimeoutMs,
+					onAgentToolResult: params.onAgentToolResult,
 					onTimeout: () => {
 						trajectoryRecorder?.recordEvent("tool.timeout", {
 							threadId: call.threadId,

package/dist/{shared-client-CflavQ_i.js → shared-client-jFMumCOe.js}

@@ -6,8 +6,10 @@ import { createHash } from "node:crypto";
 import fsSync, { constants, readFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { ensureAuthProfileStore, ensureAuthProfileStoreWithoutExternalProfiles, loadAuthProfileStoreForSecretsRuntime, refreshOAuthCredentialForRuntime, resolveApiKeyForProfile, resolveAuthProfileOrder, resolveDefaultAgentDir, resolvePersistedAuthProfileOwnerAgentDir, resolveProviderIdForAuth } from "openclaw/plugin-sdk/agent-runtime";
+import { ensureAuthProfileStore, findPersistedAuthProfileCredential, loadAuthProfileStoreForSecretsRuntime, refreshOAuthCredentialForRuntime, resolveApiKeyForProfile, resolveAuthProfileOrder, resolveDefaultAgentDir, resolvePersistedAuthProfileOwnerAgentDir, resolveProviderIdForAuth } from "openclaw/plugin-sdk/agent-runtime";
 import fs, { access } from "node:fs/promises";
+import { isDeepStrictEqual } from "node:util";
+import { hasUsableOAuthCredential } from "openclaw/plugin-sdk/provider-auth";
 import { fileURLToPath } from "node:url";
 import { withTimeout } from "openclaw/plugin-sdk/security-runtime";
 //#region extensions/codex/src/app-server/auth-bridge.ts
@@ -24,13 +26,15 @@ const CODEX_APP_SERVER_API_KEY_ENV_VARS = ["CODEX_API_KEY", "OPENAI_API_KEY"];
 const CODEX_APP_SERVER_HOME_ENV_VARS = [CODEX_HOME_ENV_VAR, HOME_ENV_VAR];
 const CODEX_AUTH_JSON_FILENAME = "auth.json";
 const CODEX_HOME_DIRNAME = ".codex";
+const scopedOAuthRefreshQueues = /* @__PURE__ */ new WeakMap();
 async function bridgeCodexAppServerStartOptions(params) {
 	if (params.startOptions.transport !== "stdio") return params.startOptions;
 	const isolatedStartOptions = await withAgentCodexHomeEnvironment(params.startOptions, params.agentDir);
 	if (params.authProfileId === null) return isolatedStartOptions;
-	const store = ensureCodexAppServerAuthProfileStore({
+	const store = resolveCodexAppServerAuthProfileStore({
 		agentDir: params.agentDir,
 		authProfileId: params.authProfileId,
+		authProfileStore: params.authProfileStore,
 		config: params.config
 	});
 	return shouldClearOpenAiApiKeyForCodexAuthProfile({
@@ -53,9 +57,10 @@ function resolveCodexAppServerAuthProfileId(params) {
 	})[0]?.trim();
 }
 function resolveCodexAppServerAuthProfileIdForAgent(params) {
-	const store = ensureCodexAppServerAuthProfileStore({
+	const store = resolveCodexAppServerAuthProfileStore({
 		agentDir: params.agentDir?.trim() || resolveDefaultAgentDir(params.config ?? {}),
 		authProfileId: params.authProfileId,
+		authProfileStore: params.authProfileStore,
 		config: params.config
 	});
 	return resolveCodexAppServerAuthProfileId({
@@ -91,13 +96,24 @@ function resolveCodexAppServerAuthProfileStore(params) {
 		...overlaidStore.order,
 		...params.authProfileStore.order
 	} : void 0;
+	const profiles = {
+		...overlaidStore.profiles,
+		...params.authProfileStore.profiles
+	};
+	const suppliedProfileIds = new Set(Object.keys(params.authProfileStore.profiles));
+	const mergeRuntimeProfileIds = (overlaidIds, suppliedIds) => [...(overlaidIds ?? []).filter((profileId) => !suppliedProfileIds.has(profileId)), ...suppliedIds ?? []];
+	const runtimePersistedProfileIds = mergeRuntimeProfileIds(overlaidStore.runtimePersistedProfileIds, params.authProfileStore.runtimePersistedProfileIds).filter((profileId) => profiles[profileId]);
+	const runtimeExternalProfileIds = mergeRuntimeProfileIds(overlaidStore.runtimeExternalProfileIds, params.authProfileStore.runtimeExternalProfileIds).filter((profileId) => profiles[profileId]);
+	const runtimeExternalProfileIdsAuthoritative = overlaidStore.runtimeExternalProfileIdsAuthoritative === true || params.authProfileStore.runtimeExternalProfileIdsAuthoritative === true;
 	return {
 		...params.authProfileStore,
 		...order ? { order } : {},
-		profiles: {
-			...overlaidStore.profiles,
-			...params.authProfileStore.profiles
-		}
+		profiles,
+		...runtimePersistedProfileIds.length > 0 ? { runtimePersistedProfileIds: [...new Set(runtimePersistedProfileIds)] } : {},
+		...runtimeExternalProfileIds.length > 0 || runtimeExternalProfileIdsAuthoritative ? {
+			runtimeExternalProfileIds: [...new Set(runtimeExternalProfileIds)],
+			...runtimeExternalProfileIdsAuthoritative ? { runtimeExternalProfileIdsAuthoritative: true } : {}
+		} : {}
 	};
 }
 async function resolveCodexAppServerAuthAccountCacheKey(params) {
@@ -203,6 +219,7 @@ async function applyCodexAppServerAuthProfile(params) {
 	const loginParams = await resolveCodexAppServerAuthProfileLoginParams({
 		agentDir: params.agentDir,
 		authProfileId: params.authProfileId,
+		authProfileStore: params.authProfileStore,
 		config: params.config
 	});
 	if (!loginParams) {
@@ -234,9 +251,10 @@ async function refreshCodexAppServerAuthTokens(params) {
 	};
 }
 async function resolveCodexAppServerAuthProfileLoginParamsInternal(params) {
-	const store = ensureCodexAppServerAuthProfileStore({
+	const store = resolveCodexAppServerAuthProfileStore({
 		agentDir: params.agentDir,
 		authProfileId: params.authProfileId,
+		authProfileStore: params.authProfileStore,
 		config: params.config
 	});
 	const profileId = resolveCodexAppServerAuthProfileId({
@@ -250,6 +268,8 @@ async function resolveCodexAppServerAuthProfileLoginParamsInternal(params) {
 	if (!isCodexAppServerAuthProfileCredential(credential, params.config)) throw new Error(`Codex app-server auth profile "${profileId}" must be OpenAI Codex auth or an OpenAI API-key backup.`);
 	const loginParams = await resolveLoginParamsForCredential(profileId, credential, {
 		agentDir: params.agentDir,
+		store,
+		preferStoreCredential: Boolean(params.authProfileStore?.profiles[profileId]),
 		forceOAuthRefresh: params.forceOAuthRefresh === true,
 		config: params.config
 	});
@@ -307,7 +327,7 @@ function resolveCodexCliAuthFileApiKeyCacheKey(env) {
 async function resolveLoginParamsForCredential(profileId, credential, params) {
 	if (credential.type === "api_key") {
 		const apiKey = (await resolveApiKeyForProfile({
-			store: ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false }),
+			store: params.preferStoreCredential ? params.store : ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false }),
 			profileId,
 			agentDir: params.agentDir
 		}))?.apiKey?.trim();
@@ -318,7 +338,7 @@ async function resolveLoginParamsForCredential(profileId, credential, params) {
 	}
 	if (credential.type === "token") {
 		const accessToken = (await resolveApiKeyForProfile({
-			store: ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false }),
+			store: params.preferStoreCredential ? params.store : ensureAuthProfileStore(params.agentDir, { allowKeychainPrompt: false }),
 			profileId,
 			agentDir: params.agentDir
 		}))?.apiKey?.trim();
@@ -327,6 +347,8 @@ async function resolveLoginParamsForCredential(profileId, credential, params) {
 	if (credential.type !== "oauth") return;
 	const resolvedCredential = await resolveOAuthCredentialForCodexAppServer(profileId, credential, {
 		agentDir: params.agentDir,
+		store: params.store,
+		preferStoreCredential: params.preferStoreCredential,
 		forceRefresh: params.forceOAuthRefresh,
 		config: params.config
 	});
@@ -338,15 +360,31 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 		agentDir: params.agentDir,
 		profileId
 	});
-	const store = ensureCodexAppServerAuthProfileStore({
+	const persistedCredential = findPersistedAuthProfileCredential({
+		agentDir: ownerAgentDir,
+		profileId
+	});
+	const useScopedCredential = params.preferStoreCredential && shouldUseScopedOAuthCredential({
+		store: params.store,
+		profileId,
+		persistedCredential,
+		suppliedCredential: credential,
+		config: params.config
+	});
+	const store = useScopedCredential ? params.store : ensureCodexAppServerAuthProfileStore({
 		agentDir: ownerAgentDir,
 		authProfileId: profileId,
 		config: params.config
 	});
-	const persistedCredential = ensureAuthProfileStoreWithoutExternalProfiles(ownerAgentDir, { allowKeychainPrompt: false }).profiles[profileId];
-	const persistedOAuthCredential = persistedCredential?.type === "oauth" && isCodexAppServerAuthProvider(persistedCredential.provider, params.config) ? persistedCredential : void 0;
+	const persistedOAuthCredential = !useScopedCredential && persistedCredential?.type === "oauth" && isCodexAppServerAuthProvider(persistedCredential.provider, params.config) ? persistedCredential : void 0;
 	const ownerCredential = store.profiles[profileId];
 	const overlaidOAuthCredential = ownerCredential?.type === "oauth" && isCodexAppServerAuthProvider(ownerCredential.provider, params.config) ? ownerCredential : void 0;
+	if (useScopedCredential && overlaidOAuthCredential) return await resolveScopedOAuthCredential({
+		store,
+		profileId,
+		credential: overlaidOAuthCredential,
+		forceRefresh: params.forceRefresh
+	});
 	if (params.forceRefresh && !persistedOAuthCredential && overlaidOAuthCredential) {
 		const refreshedRuntimeCredential = await refreshOAuthCredentialForRuntime({ credential: overlaidOAuthCredential });
 		if (!refreshedRuntimeCredential?.access?.trim()) throw new Error(`Codex app-server auth profile "${profileId}" could not refresh.`);
@@ -359,14 +397,54 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 		agentDir: ownerAgentDir,
 		forceRefresh: params.forceRefresh && Boolean(persistedOAuthCredential)
 	});
-	const refreshed = loadAuthProfileStoreForSecretsRuntime(ownerAgentDir).profiles[profileId];
+	const refreshed = useScopedCredential ? void 0 : loadAuthProfileStoreForSecretsRuntime(ownerAgentDir).profiles[profileId];
+	const refreshedOAuthCredential = refreshed?.type === "oauth" && isCodexAppServerAuthProvider(refreshed.provider, params.config) ? refreshed : void 0;
+	if (refreshedOAuthCredential && isDeepStrictEqual(params.store.profiles[profileId], credential)) params.store.profiles[profileId] = refreshedOAuthCredential;
 	const storedCredential = store.profiles[profileId];
-	const candidate = refreshed?.type === "oauth" && isCodexAppServerAuthProvider(refreshed.provider, params.config) ? refreshed : storedCredential?.type === "oauth" && isCodexAppServerAuthProvider(storedCredential.provider, params.config) ? storedCredential : credential;
+	const candidate = refreshedOAuthCredential ? refreshedOAuthCredential : storedCredential?.type === "oauth" && isCodexAppServerAuthProvider(storedCredential.provider, params.config) ? storedCredential : credential;
 	return resolved?.apiKey ? {
 		...candidate,
 		access: resolved.apiKey
 	} : candidate;
 }
+function shouldUseScopedOAuthCredential(params) {
+	if (!params.store.runtimePersistedProfileIds?.includes(params.profileId)) return true;
+	const persisted = params.persistedCredential;
+	if (persisted?.type !== "oauth") return true;
+	if (resolveProviderIdForAuth(persisted.provider, { config: params.config }) !== resolveProviderIdForAuth(params.suppliedCredential.provider, { config: params.config })) return true;
+	return !isDeepStrictEqual(persisted, params.suppliedCredential) && !hasMatchingOAuthIdentity(persisted, params.suppliedCredential);
+}
+function hasMatchingOAuthIdentity(persisted, supplied) {
+	const persistedAccountId = persisted.accountId?.trim();
+	const suppliedAccountId = supplied.accountId?.trim();
+	if (persistedAccountId && suppliedAccountId) return persistedAccountId === suppliedAccountId;
+	const persistedEmail = persisted.email?.trim().toLowerCase();
+	const suppliedEmail = supplied.email?.trim().toLowerCase();
+	return Boolean(persistedEmail && suppliedEmail && persistedEmail === suppliedEmail);
+}
+async function resolveScopedOAuthCredential(params) {
+	const existingRefresh = scopedOAuthRefreshQueues.get(params.store)?.get(params.profileId);
+	if (existingRefresh) return await existingRefresh;
+	if (!params.forceRefresh && hasUsableOAuthCredential(params.credential)) return params.credential;
+	const storeRefreshes = scopedOAuthRefreshQueues.get(params.store) ?? /* @__PURE__ */ new Map();
+	scopedOAuthRefreshQueues.set(params.store, storeRefreshes);
+	const refresh = (async () => {
+		const current = params.store.profiles[params.profileId];
+		const credential = current?.type === "oauth" ? current : params.credential;
+		if (!params.forceRefresh && hasUsableOAuthCredential(credential)) return credential;
+		const refreshed = await refreshOAuthCredentialForRuntime({ credential });
+		if (!refreshed?.access?.trim()) throw new Error(`Codex app-server auth profile "${params.profileId}" could not refresh.`);
+		if (!isDeepStrictEqual(params.store.profiles[params.profileId], credential)) throw new Error(`Codex app-server auth profile "${params.profileId}" changed while refreshing.`);
+		params.store.profiles[params.profileId] = refreshed;
+		return refreshed;
+	})();
+	storeRefreshes.set(params.profileId, refresh);
+	try {
+		return await refresh;
+	} finally {
+		if (storeRefreshes.get(params.profileId) === refresh) storeRefreshes.delete(params.profileId);
+	}
+}
 function isCodexAppServerAuthProvider(provider, config) {
 	const resolvedProvider = resolveProviderIdForAuth(provider, { config });
 	return resolvedProvider === CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === OPENAI_CODEX_APP_SERVER_AUTH_PROVIDER || resolvedProvider === LEGACY_CODEX_APP_SERVER_AUTH_PROVIDER;
@@ -629,20 +707,29 @@ async function resolveCodexAppServerClientStartContext(options) {
 	const agentDir = options?.agentDir ?? resolveDefaultAgentDir(options?.config ?? {});
 	const usesNativeAuth = options?.authProfileId === null;
 	const requestedAuthProfileId = options?.authProfileId === null ? void 0 : options?.authProfileId;
+	const authProfileStore = !usesNativeAuth && options?.authProfileStore ? resolveCodexAppServerAuthProfileStore({
+		agentDir,
+		authProfileId: requestedAuthProfileId,
+		authProfileStore: options.authProfileStore,
+		config: options.config
+	}) : options?.authProfileStore;
 	const authProfileId = usesNativeAuth ? void 0 : resolveCodexAppServerAuthProfileIdForAgent({
 		authProfileId: requestedAuthProfileId,
 		agentDir,
-		config: options?.config
+		config: options?.config,
+		...authProfileStore ? { authProfileStore } : {}
 	});
 	return {
 		agentDir,
 		usesNativeAuth,
 		authProfileId,
+		authProfileStore,
 		startOptions: await bridgeCodexAppServerStartOptions({
 			startOptions: await resolveManagedCodexAppServerStartOptions(options?.startOptions ?? resolveCodexAppServerRuntimeOptions().start),
 			agentDir,
 			authProfileId: usesNativeAuth ? null : authProfileId,
-			config: options?.config
+			config: options?.config,
+			...authProfileStore ? { authProfileStore } : {}
 		})
 	};
 }
@@ -731,8 +818,17 @@ async function acquireSharedCodexAppServerClient(options, leaseOptions) {
 }
 /** Starts a non-shared Codex app-server client owned entirely by the caller. */
 async function createIsolatedCodexAppServerClient(options) {
-	const { agentDir, usesNativeAuth, authProfileId, startOptions } = await resolveCodexAppServerClientStartContext(options);
+	const { agentDir, usesNativeAuth, authProfileId, authProfileStore, startOptions } = await resolveCodexAppServerClientStartContext(options);
 	const client = CodexAppServerClient.start(startOptions);
+	if (authProfileId) client.addRequestHandler(async (request) => {
+		if (request.method !== "account/chatgptAuthTokens/refresh") return;
+		return await refreshCodexAppServerAuthTokens({
+			agentDir,
+			authProfileId,
+			...authProfileStore ? { authProfileStore } : {},
+			config: options?.config
+		});
+	});
 	const initialize = client.initialize();
 	try {
 		await withTimeout$1(initialize, options?.timeoutMs ?? 0, "codex app-server initialize timed out");
@@ -741,7 +837,8 @@ async function createIsolatedCodexAppServerClient(options) {
 			agentDir,
 			authProfileId: usesNativeAuth ? null : authProfileId,
 			startOptions,
-			config: options?.config
+			config: options?.config,
+			...authProfileStore ? { authProfileStore } : {}
 		});
 		return client;
 	} catch (error) {

package/dist/{side-question-Ctu2VXAG.js → side-question-DqKLfWMB.js}

@@ -1,14 +1,14 @@
 import { d as resolveCodexAppServerRuntimeOptions, g as shouldAutoApproveCodexAppServerApprovals, h as resolveOpenClawExecPolicyForCodexAppServer, n as canUseCodexModelBackedApprovalsReviewerForModel, p as resolveCodexModelBackedReviewerPolicyContext, u as readCodexPluginConfig } from "./config-DJXpBkGf.js";
 import { a as readCodexDynamicToolCallParams, c as readCodexTurn, i as assertCodexTurnStartResponse, t as assertCodexThreadForkResponse } from "./protocol-validators-B48C6S9O.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { i as formatCodexUsageLimitErrorMessage } from "./provider-Cs6kWhDQ.js";
+import { i as formatCodexUsageLimitErrorMessage } from "./provider-C5P6352f.js";
 import { i as isCodexAppServerApprovalRequest } from "./client-DovmVtbr.js";
-import { A as resolveCodexDynamicToolsLoading, D as filterCodexDynamicTools, d as resolveCodexAppServerRequestModelSelection, f as resolveCodexBindingModelProviderFallback, p as resolveReasoningEffort, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, u as resolveCodexAppServerModelProvider, v as mergeCodexThreadConfigs } from "./thread-lifecycle-Cq1-IfZB.js";
+import { A as resolveCodexDynamicToolsLoading, D as filterCodexDynamicTools, d as resolveCodexAppServerRequestModelSelection, f as resolveCodexBindingModelProviderFallback, p as resolveReasoningEffort, r as buildCodexRuntimeThreadConfig, t as CODEX_NATIVE_PERSONALITY_NONE, u as resolveCodexAppServerModelProvider, v as mergeCodexThreadConfigs } from "./thread-lifecycle-cban34w3.js";
 import { i as isCodexAppServerNativeAuthProfile, o as readCodexAppServerBinding } from "./session-binding-ElbcSq2o.js";
-import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, r as readCodexNotificationThreadId } from "./notification-correlation-D-MYfJwV.js";
-import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, u as refreshCodexAppServerAuthTokens } from "./shared-client-CflavQ_i.js";
+import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, r as readCodexNotificationThreadId } from "./notification-correlation-BGoG0N90.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, u as refreshCodexAppServerAuthTokens } from "./shared-client-jFMumCOe.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C-Yv9uwY.js";
-import { d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, t as CODEX_NATIVE_HOOK_RELAY_EVENTS, u as createCodexDynamicToolBridge } from "./native-hook-relay-CmUUO3Eu.js";
+import { d as emitDynamicToolErrorDiagnostic, f as emitDynamicToolStartedDiagnostic, h as handleCodexAppServerApprovalRequest, i as buildCodexNativeHookRelayDisabledConfig, l as handleCodexAppServerElicitationRequest, m as filterToolsForVisionInputs, p as emitDynamicToolTerminalDiagnostic, r as buildCodexNativeHookRelayConfig, t as CODEX_NATIVE_HOOK_RELAY_EVENTS, u as createCodexDynamicToolBridge } from "./native-hook-relay-C3i3FYtc.js";
 import { n as rememberCodexRateLimits, t as readRecentCodexRateLimits } from "./rate-limit-cache-C7qmZ0Jh.js";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/{thread-lifecycle-Cq1-IfZB.js → thread-lifecycle-cban34w3.js}

@@ -2,7 +2,7 @@ import { i as codexSandboxPolicyForTurn, m as resolveCodexPluginsPolicy, t as CO
 import { n as assertCodexThreadResumeResponse, r as assertCodexThreadStartResponse } from "./protocol-validators-B48C6S9O.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
 import { CODEX_GPT5_HEARTBEAT_PROMPT_OVERLAY } from "./prompt-overlay.js";
-import { r as isModernCodexModel } from "./provider-Cs6kWhDQ.js";
+import { r as isModernCodexModel } from "./provider-C5P6352f.js";
 import { a as isCodexAppServerConnectionClosedError, n as CodexAppServerRpcError } from "./client-DovmVtbr.js";
 import { i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-ElbcSq2o.js";
 import { isFutureDateTimestampMs, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.6",
+  "version": "2026.6.8-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/codex",
-      "version": "2026.6.6",
+      "version": "2026.6.8-beta.2",
       "dependencies": {
         "@openai/codex": "0.139.0",
         "typebox": "1.1.39",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.6",
+  "version": "2026.6.8-beta.2",
   "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "repository": {
     "type": "git",
@@ -26,10 +26,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.6.6"
+      "pluginApi": ">=2026.6.8-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.6.6"
+      "openclawVersion": "2026.6.8-beta.2"
     },
     "release": {
       "publishToClawHub": true,
@@ -47,7 +47,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.6.6"
+    "openclaw": ">=2026.6.8-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {