@openclaw/codex 2026.6.8-beta.2 → 2026.6.9-beta.1

package/dist/{conversation-binding-CbnMilVW.js → conversation-binding-DBof5w9J.js}

@@ -1,35 +1,38 @@
-import { d as resolveCodexAppServerRuntimeOptions, h as resolveOpenClawExecPolicyForCodexAppServer, i as codexSandboxPolicyForTurn, n as canUseCodexModelBackedApprovalsReviewerForModel, o as isCodexFastServiceTier, p as resolveCodexModelBackedReviewerPolicyContext } from "./config-DJXpBkGf.js";
-import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { d as resolveCodexAppServerRequestModelSelection, f as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-cban34w3.js";
-import { a as normalizeCodexAppServerBindingModelProvider, i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-ElbcSq2o.js";
-import { n as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-kIqpGTQj.js";
-import { a as resolveCodexAppServerForModelProvider, i as readCodexNotificationTurnId, l as formatCodexDisplayText, r as readCodexNotificationThreadId } from "./notification-correlation-BGoG0N90.js";
-import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-jFMumCOe.js";
-import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-C-Yv9uwY.js";
+import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
+import { B as readCodexNotificationThreadId, V as readCodexNotificationTurnId, d as resolveCodexAppServerRequestModelSelection, p as resolveCodexBindingModelProviderFallback, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-CbJqqnEw.js";
+import { d as resolveCodexAppServerRuntimeOptions, h as resolveOpenClawExecPolicyForCodexAppServer, i as codexSandboxPolicyForTurn, n as canUseCodexModelBackedApprovalsReviewerForModel, o as isCodexFastServiceTier, p as resolveCodexModelBackedReviewerPolicyContext } from "./config-BksX0T33.js";
+import { r as assertCodexThreadStartResponse } from "./protocol-validators-B19q5BIX.js";
+import { a as normalizeCodexAppServerBindingModelProvider, i as isCodexAppServerNativeAuthProfile, l as writeCodexAppServerBinding, n as clearCodexAppServerBinding, o as readCodexAppServerBinding } from "./session-binding-BRUi8y6E.js";
+import { r as CODEX_CONTROL_METHODS } from "./plugin-app-cache-key-CN9zBiCG.js";
+import { a as formatCodexDisplayText, t as resolveCodexAppServerForModelProvider } from "./app-server-policy-KpyUye2D.js";
+import { a as getLeasedSharedCodexAppServerClient, o as releaseLeasedSharedCodexAppServerClient, p as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-Bg5d7VV9.js";
+import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-3tnjhjFb.js";
+import fs from "node:fs/promises";
+import path from "node:path";
 import { resolveTimerTimeoutMs, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
+import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
+import { asOptionalRecord, isRecord, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import os from "node:os";
-import path from "node:path";
 import { resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
-import { asOptionalRecord, isRecord, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { formatErrorMessage, resolveSandboxContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { spawn } from "node:child_process";
-import fs from "node:fs/promises";
 import { loadSessionStore, resolveSessionStoreEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { fileURLToPath } from "node:url";
 import process$1 from "node:process";
-import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/codex/src/conversation-binding-data.ts
 const BINDING_DATA_VERSION = 1;
 function createCodexConversationBindingData(params) {
 	const agentDir = params.agentDir?.trim();
+	const agentId = params.agentId?.trim();
 	return {
 		kind: "codex-app-server-session",
 		version: BINDING_DATA_VERSION,
 		sessionFile: params.sessionFile,
 		workspaceDir: params.workspaceDir,
-		...agentDir ? { agentDir } : {}
+		...agentDir ? { agentDir } : {},
+		...agentId ? { agentId } : {}
 	};
 }
 function createCodexCliNodeConversationBindingData(params) {
@@ -65,7 +68,8 @@ function readCodexConversationBindingDataRecord(data) {
 		version: BINDING_DATA_VERSION,
 		sessionFile: data.sessionFile,
 		workspaceDir: typeof data.workspaceDir === "string" && data.workspaceDir.trim() ? data.workspaceDir : process$1.cwd(),
-		agentDir: typeof data.agentDir === "string" && data.agentDir.trim() ? data.agentDir : void 0
+		agentDir: typeof data.agentDir === "string" && data.agentDir.trim() ? data.agentDir : void 0,
+		agentId: typeof data.agentId === "string" && data.agentId.trim() ? data.agentId : void 0
 	};
 }
 function resolveCodexDefaultWorkspaceDir(pluginConfig) {
@@ -957,6 +961,11 @@ function formatNodeLabel(node) {
 //#endregion
 //#region extensions/codex/src/conversation-binding.ts
 const DEFAULT_BOUND_TURN_TIMEOUT_MS = 20 * 6e4;
+const DEFAULT_AGENT_ID = "main";
+const VALID_AGENT_ID_PATTERN = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
+const INVALID_AGENT_ID_CHARS_PATTERN = /[^a-z0-9_-]+/g;
+const LEADING_DASH_PATTERN = /^-+/;
+const TRAILING_DASH_PATTERN = /-+$/;
 const NATIVE_CONVERSATION_INTERACTIVE_APPROVALS_UNAVAILABLE = "OpenClaw native Codex conversation binding cannot route interactive approvals yet; use the Codex harness or explicit /acp spawn codex for that workflow.";
 async function resolveConversationAppServerRuntime(params) {
 	const execPolicy = resolveConversationExecPolicy({
@@ -983,6 +992,7 @@ async function resolveConversationAppServerRuntime(params) {
 	};
 }
 const CODEX_CONVERSATION_GLOBAL_STATE = Symbol.for("openclaw.codex.conversationBinding");
+const CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS = "This Codex thread is bound to an OpenClaw conversation. Answer normally; OpenClaw will deliver your final response back to the conversation.";
 function getGlobalState() {
 	const globalState = globalThis;
 	globalState[CODEX_CONVERSATION_GLOBAL_STATE] ??= { queues: /* @__PURE__ */ new Map() };
@@ -1013,7 +1023,8 @@ async function startCodexConversationThread(params) {
 		sandbox: params.sandbox,
 		serviceTier: params.serviceTier,
 		config: params.config,
-		sessionKey: params.sessionKey
+		sessionKey: params.sessionKey,
+		agentId: params.agentId
 	});
 	else await createThread({
 		pluginConfig: params.pluginConfig,
@@ -1027,12 +1038,14 @@ async function startCodexConversationThread(params) {
 		sandbox: params.sandbox,
 		serviceTier: params.serviceTier,
 		config: params.config,
-		sessionKey: params.sessionKey
+		sessionKey: params.sessionKey,
+		agentId: params.agentId
 	});
 	return createCodexConversationBindingData({
 		sessionFile: params.sessionFile,
 		workspaceDir,
-		...agentDir ? { agentDir } : {}
+		...agentDir ? { agentDir } : {},
+		agentId: params.agentId
 	});
 }
 async function handleCodexConversationInboundClaim(event, ctx, options = {}) {
@@ -1048,6 +1061,7 @@ async function handleCodexConversationInboundClaim(event, ctx, options = {}) {
 	}) : resolveCodexNativeExecutionBlock({
 		config: options.config,
 		sessionKey: event.sessionKey ?? ctx.sessionKey,
+		agentId: data.agentId,
 		surface: "Codex app-server conversation binding"
 	});
 	if (nativeExecutionBlock) return {
@@ -1174,13 +1188,31 @@ async function resolveThreadBindingRuntime(params) {
 }
 function buildThreadRequestRuntimeOptions(params, resolved) {
 	const serviceTier = params.serviceTier ?? resolved.runtime.serviceTier;
+	const sandbox = resolved.execPolicy?.touched ? resolved.runtime.sandbox : params.sandbox ?? resolved.runtime.sandbox;
 	return {
 		approvalPolicy: resolved.execPolicy?.touched ? resolved.runtime.approvalPolicy : params.approvalPolicy ?? resolved.runtime.approvalPolicy,
 		approvalsReviewer: resolved.runtime.approvalsReviewer,
-		sandbox: resolved.execPolicy?.touched ? resolved.runtime.sandbox : params.sandbox ?? resolved.runtime.sandbox,
+		...codexConversationSandboxOrPermissions(resolved.runtime, sandbox),
 		...serviceTier ? { serviceTier } : {}
 	};
 }
+function codexConversationSandboxOrPermissions(runtime, sandbox) {
+	const networkProxy = runtime.networkProxy;
+	if (networkProxy) return { config: networkProxy.configPatch };
+	return { sandbox };
+}
+async function requestNewConversationBindingThread(params, resolved) {
+	return await resolved.client.request("thread/start", {
+		cwd: params.workspaceDir,
+		...resolved.model ? { model: resolved.model } : {},
+		...resolved.modelProvider ? { modelProvider: resolved.modelProvider } : {},
+		personality: CODEX_NATIVE_PERSONALITY_NONE,
+		...buildThreadRequestRuntimeOptions(params, resolved),
+		developerInstructions: CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS,
+		experimentalRawEvents: true,
+		persistExtendedHistory: true
+	}, { timeoutMs: resolved.runtime.requestTimeoutMs });
+}
 async function writeThreadBindingFromResponse(params, resolved, response) {
 	const runtimeApprovalPolicy = typeof resolved.runtime.approvalPolicy === "string" ? resolved.runtime.approvalPolicy : void 0;
 	await writeCodexAppServerBinding(params.sessionFile, {
@@ -1195,13 +1227,15 @@ async function writeThreadBindingFromResponse(params, resolved, response) {
 		}),
 		approvalPolicy: resolved.execPolicy?.touched ? runtimeApprovalPolicy : params.approvalPolicy ?? runtimeApprovalPolicy,
 		sandbox: resolved.execPolicy?.touched ? resolved.runtime.sandbox : params.sandbox ?? resolved.runtime.sandbox,
-		serviceTier: params.serviceTier ?? resolved.runtime.serviceTier
+		serviceTier: params.serviceTier ?? resolved.runtime.serviceTier,
+		networkProxyProfileName: resolved.runtime.networkProxy?.profileName,
+		networkProxyConfigFingerprint: resolved.runtime.networkProxy?.configFingerprint
 	}, { ...resolved.agentLookup });
 }
 async function attachExistingThread(params) {
 	const resolved = await resolveThreadBindingRuntime(params);
 	try {
-		await writeThreadBindingFromResponse(params, resolved, await resolved.client.request(CODEX_CONTROL_METHODS.resumeThread, {
+		await writeThreadBindingFromResponse(params, resolved, resolved.runtime.networkProxy ? await requestNewConversationBindingThread(params, resolved) : await resolved.client.request(CODEX_CONTROL_METHODS.resumeThread, {
 			threadId: params.threadId,
 			...resolved.model ? { model: resolved.model } : {},
 			...resolved.modelProvider ? { modelProvider: resolved.modelProvider } : {},
@@ -1216,16 +1250,7 @@ async function attachExistingThread(params) {
 async function createThread(params) {
 	const resolved = await resolveThreadBindingRuntime(params);
 	try {
-		await writeThreadBindingFromResponse(params, resolved, await resolved.client.request("thread/start", {
-			cwd: params.workspaceDir,
-			...resolved.model ? { model: resolved.model } : {},
-			...resolved.modelProvider ? { modelProvider: resolved.modelProvider } : {},
-			personality: CODEX_NATIVE_PERSONALITY_NONE,
-			...buildThreadRequestRuntimeOptions(params, resolved),
-			developerInstructions: "This Codex thread is bound to an OpenClaw conversation. Answer normally; OpenClaw will deliver your final response back to the conversation.",
-			experimentalRawEvents: true,
-			persistExtendedHistory: true
-		}, { timeoutMs: resolved.runtime.requestTimeoutMs }));
+		await writeThreadBindingFromResponse(params, resolved, await requestNewConversationBindingThread(params, resolved));
 	} finally {
 		releaseLeasedSharedCodexAppServerClient(resolved.client);
 	}
@@ -1236,8 +1261,8 @@ async function runBoundTurn(params) {
 		config: params.config
 	});
 	const binding = await readCodexAppServerBinding(params.data.sessionFile, agentLookup);
-	const threadId = binding?.threadId;
-	if (!threadId) throw new Error("bound Codex conversation has no thread binding");
+	if (!binding?.threadId) throw new Error("bound Codex conversation has no thread binding");
+	let threadId = binding.threadId;
 	const workspaceDir = binding.cwd || params.data.workspaceDir;
 	const reviewerModelProvider = resolveModelBackedReviewerPolicyProvider({
 		authProfileId: binding.authProfileId,
@@ -1247,6 +1272,7 @@ async function runBoundTurn(params) {
 	const { execPolicy, runtime } = await resolveConversationAppServerRuntime({
 		pluginConfig: params.pluginConfig,
 		config: params.config,
+		agentId: params.data.agentId,
 		sessionKey: params.sessionKey,
 		workspaceDir,
 		modelProvider: reviewerModelProvider,
@@ -1271,6 +1297,11 @@ async function runBoundTurn(params) {
 	const useModelScopedPolicy = execPolicy?.touched === true || modelBackedApprovalsReviewerUnavailable;
 	const approvalPolicy = useModelScopedPolicy ? modelScopedRuntime.approvalPolicy : binding.approvalPolicy ?? modelScopedRuntime.approvalPolicy;
 	const sandbox = useModelScopedPolicy ? modelScopedRuntime.sandbox : binding.sandbox ?? modelScopedRuntime.sandbox;
+	const permissionProfile = modelScopedRuntime.networkProxy?.profileName;
+	const networkProxyConfigFingerprint = modelScopedRuntime.networkProxy?.configFingerprint;
+	const networkProxyBindingChanged = binding.networkProxyProfileName !== permissionProfile || binding.networkProxyConfigFingerprint !== networkProxyConfigFingerprint;
+	const serviceTier = binding.serviceTier ?? runtime.serviceTier;
+	let useStickyNetworkProfile = permissionProfile !== void 0 && binding.networkProxyProfileName === permissionProfile && binding.networkProxyConfigFingerprint === networkProxyConfigFingerprint;
 	assertNativeConversationApprovalPolicySupported({
 		execPolicy,
 		approvalPolicy,
@@ -1289,30 +1320,65 @@ async function runBoundTurn(params) {
 		authProfileId: binding.authProfileId,
 		...agentLookup
 	});
-	const collector = createCodexConversationTurnCollector(threadId);
-	const notificationCleanup = client.addNotificationHandler((notification) => collector.handleNotification(notification));
-	const requestCleanup = client.addRequestHandler(async (request) => {
-		if (request.method === "item/tool/call") return {
-			contentItems: [{
-				type: "inputText",
-				text: "OpenClaw native Codex conversation binding does not expose dynamic OpenClaw tools yet."
-			}],
-			success: false
-		};
-		if (request.method === "item/commandExecution/requestApproval" || request.method === "item/fileChange/requestApproval") return {
-			decision: "decline",
-			reason: "OpenClaw native Codex conversation binding cannot route interactive approvals yet; use the Codex harness or explicit /acp spawn codex for that workflow."
-		};
-		if (request.method === "item/permissions/requestApproval") return {
-			permissions: {},
-			scope: "turn"
-		};
-		if (request.method.includes("requestApproval")) return {
-			decision: "decline",
-			reason: "OpenClaw native Codex conversation binding cannot route interactive approvals yet; use the Codex harness or explicit /acp spawn codex for that workflow."
-		};
-	});
+	let notificationCleanup = () => void 0;
+	let requestCleanup = () => void 0;
 	try {
+		if (networkProxyBindingChanged) {
+			const response = assertCodexThreadStartResponse(await client.request("thread/start", {
+				cwd: workspaceDir,
+				...modelSelection?.model ? { model: modelSelection.model } : {},
+				...modelSelection?.modelProvider ? { modelProvider: modelSelection.modelProvider } : {},
+				personality: CODEX_NATIVE_PERSONALITY_NONE,
+				approvalPolicy,
+				approvalsReviewer: modelScopedRuntime.approvalsReviewer,
+				...modelScopedRuntime.networkProxy ? { config: modelScopedRuntime.networkProxy.configPatch } : { sandbox },
+				...serviceTier ? { serviceTier } : {},
+				developerInstructions: CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS,
+				experimentalRawEvents: true,
+				persistExtendedHistory: true
+			}, { timeoutMs: runtime.requestTimeoutMs }));
+			threadId = response.thread.id;
+			await writeCodexAppServerBinding(params.data.sessionFile, {
+				threadId,
+				cwd: response.thread.cwd ?? workspaceDir,
+				authProfileId: binding.authProfileId,
+				model: response.model ?? modelSelection?.model ?? binding.model,
+				modelProvider: normalizeCodexAppServerBindingModelProvider({
+					authProfileId: binding.authProfileId,
+					modelProvider: response.modelProvider ?? modelSelection?.modelProvider ?? binding.modelProvider,
+					...agentLookup
+				}),
+				approvalPolicy: typeof approvalPolicy === "string" ? approvalPolicy : void 0,
+				sandbox,
+				serviceTier,
+				networkProxyProfileName: modelScopedRuntime.networkProxy?.profileName,
+				networkProxyConfigFingerprint: modelScopedRuntime.networkProxy?.configFingerprint
+			}, agentLookup);
+			useStickyNetworkProfile = modelScopedRuntime.networkProxy !== void 0;
+		}
+		const collector = createCodexConversationTurnCollector(threadId);
+		notificationCleanup = client.addNotificationHandler((notification) => collector.handleNotification(notification));
+		requestCleanup = client.addRequestHandler(async (request) => {
+			if (request.method === "item/tool/call") return {
+				contentItems: [{
+					type: "inputText",
+					text: "OpenClaw native Codex conversation binding does not expose dynamic OpenClaw tools yet."
+				}],
+				success: false
+			};
+			if (request.method === "item/commandExecution/requestApproval" || request.method === "item/fileChange/requestApproval") return {
+				decision: "decline",
+				reason: "OpenClaw native Codex conversation binding cannot route interactive approvals yet; use the Codex harness or explicit /acp spawn codex for that workflow."
+			};
+			if (request.method === "item/permissions/requestApproval") return {
+				permissions: {},
+				scope: "turn"
+			};
+			if (request.method.includes("requestApproval")) return {
+				decision: "decline",
+				reason: "OpenClaw native Codex conversation binding cannot route interactive approvals yet; use the Codex harness or explicit /acp spawn codex for that workflow."
+			};
+		});
 		const turnId = (await client.request("turn/start", {
 			threadId,
 			input: buildCodexConversationTurnInput({
@@ -1322,10 +1388,10 @@ async function runBoundTurn(params) {
 			cwd: workspaceDir,
 			approvalPolicy,
 			approvalsReviewer: modelScopedRuntime.approvalsReviewer,
-			sandboxPolicy: codexSandboxPolicyForTurn(sandbox, workspaceDir),
+			...useStickyNetworkProfile ? {} : { sandboxPolicy: codexSandboxPolicyForTurn(sandbox, workspaceDir) },
 			...modelSelection?.model ? { model: modelSelection.model } : {},
 			personality: CODEX_NATIVE_PERSONALITY_NONE,
-			...binding.serviceTier ?? runtime.serviceTier ? { serviceTier: binding.serviceTier ?? runtime.serviceTier } : {}
+			...serviceTier ? { serviceTier } : {}
 		}, { timeoutMs: runtime.requestTimeoutMs })).turn.id;
 		const activeCleanup = trackCodexConversationActiveTurn({
 			sessionFile: params.data.sessionFile,
@@ -1355,6 +1421,7 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 		const binding = await readCodexAppServerBinding(params.data.sessionFile, agentLookup);
 		const useCurrentRuntimePolicy = resolveConversationExecPolicy({
 			config: params.config,
+			agentId: params.data.agentId,
 			sessionKey: params.sessionKey
 		}).touched;
 		await startCodexConversationThread({
@@ -1369,7 +1436,8 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 			sandbox: useCurrentRuntimePolicy ? void 0 : binding?.sandbox,
 			serviceTier: binding?.serviceTier,
 			config: params.config,
-			sessionKey: params.sessionKey
+			sessionKey: params.sessionKey,
+			agentId: params.data.agentId
 		});
 		return await runBoundTurn(params);
 	}
@@ -1393,6 +1461,11 @@ function resolveConversationExecPolicy(params) {
 function readSessionExecOverrides(params) {
 	const sessionKey = params.sessionKey?.trim();
 	if (!params.config || !sessionKey) return;
+	if (!canReadSessionExecOverrides({
+		config: params.config,
+		agentId: params.agentId,
+		sessionKey
+	})) return;
 	const entry = resolveSessionStoreEntry({
 		store: loadSessionStore(resolveStorePath(params.config.session?.store, { agentId: params.agentId }), { skipCache: true }),
 		sessionKey
@@ -1403,6 +1476,41 @@ function readSessionExecOverrides(params) {
 		ask: entry.execAsk
 	};
 }
+function canReadSessionExecOverrides(params) {
+	const agentId = normalizeAgentIdOrDefault(params.agentId);
+	if (!agentId) return true;
+	const sessionAgentId = parseAgentIdFromSessionKey(params.sessionKey);
+	if (!sessionAgentId) return isDefaultAgentSessionKeyForAgent({
+		config: params.config,
+		agentId
+	});
+	return sessionAgentId === agentId;
+}
+function parseAgentIdFromSessionKey(sessionKey) {
+	const raw = sessionKey?.trim();
+	if (!raw) return;
+	const parts = raw.toLowerCase().split(":").filter(Boolean);
+	if (parts.length < 3 || parts[0] !== "agent" || !parts[2]) return;
+	return normalizeAgentIdOrDefault(parts[1]);
+}
+function isDefaultAgentSessionKeyForAgent(params) {
+	return normalizeAgentId(params.agentId) === resolveDefaultPolicyAgentId(params.config);
+}
+function resolveDefaultPolicyAgentId(config) {
+	const agents = (config.agents?.list ?? []).filter((entry) => entry !== null && typeof entry === "object");
+	return normalizeAgentId((agents.find((entry) => entry?.default) ?? agents[0])?.id);
+}
+function normalizeAgentIdOrDefault(value) {
+	const normalized = normalizeAgentId(value);
+	return normalized === DEFAULT_AGENT_ID && !(value ?? "").trim() ? void 0 : normalized;
+}
+function normalizeAgentId(value) {
+	const trimmed = (value ?? "").trim();
+	if (!trimmed) return DEFAULT_AGENT_ID;
+	const normalized = trimmed.toLowerCase();
+	if (VALID_AGENT_ID_PATTERN.test(trimmed)) return normalized;
+	return normalized.replace(INVALID_AGENT_ID_CHARS_PATTERN, "-").replace(LEADING_DASH_PATTERN, "").replace(TRAILING_DASH_PATTERN, "").slice(0, 64) || DEFAULT_AGENT_ID;
+}
 function isCodexThreadNotFoundError(error) {
 	const message = formatErrorMessage(error);
 	return /\bthread not found:/iu.test(message) || /\bbound Codex conversation has no thread binding\b/u.test(message);

package/dist/doctor-contract-api.js

@@ -5,6 +5,13 @@ function asRecord(value) {
 function hasRetiredDynamicToolsProfile(value) {
 	return Object.hasOwn(asRecord(value) ?? {}, "codexDynamicToolsProfile");
 }
+function hasLegacyPluginDestructivePolicy(value) {
+	const codexPlugins = asRecord(value);
+	if (!codexPlugins) return false;
+	if (codexPlugins.allow_destructive_actions === "on-request") return true;
+	const plugins = asRecord(codexPlugins.plugins);
+	return Object.values(plugins ?? {}).some((plugin) => asRecord(plugin)?.allow_destructive_actions === "on-request");
+}
 /** Legacy Codex config keys that doctor should report or repair. */
 const legacyConfigRules = [{
 	path: [
@@ -15,13 +22,26 @@ const legacyConfigRules = [{
 	],
 	message: "plugins.entries.codex.config.codexDynamicToolsProfile is retired; Codex app-server always keeps Codex-native workspace tools native. Run \"openclaw doctor --fix\".",
 	match: hasRetiredDynamicToolsProfile
+}, {
+	path: [
+		"plugins",
+		"entries",
+		"codex",
+		"config",
+		"codexPlugins"
+	],
+	message: "plugins.entries.codex.config.codexPlugins.allow_destructive_actions=\"on-request\" was renamed to \"auto\". Run \"openclaw doctor --fix\".",
+	match: hasLegacyPluginDestructivePolicy
 }];
 /**
 * Removes retired Codex plugin config keys while preserving unrelated config.
 */
 function normalizeCompatibilityConfig({ cfg }) {
 	const rawPluginConfig = asRecord(asRecord(cfg.plugins?.entries?.codex)?.config);
-	if (!rawPluginConfig || !hasRetiredDynamicToolsProfile(rawPluginConfig)) return {
+	const rawCodexPlugins = asRecord(rawPluginConfig?.codexPlugins);
+	const shouldRemoveDynamicToolsProfile = rawPluginConfig !== null && hasRetiredDynamicToolsProfile(rawPluginConfig);
+	const shouldRewriteDestructivePolicy = hasLegacyPluginDestructivePolicy(rawCodexPlugins);
+	if (!rawPluginConfig || !shouldRemoveDynamicToolsProfile && !shouldRewriteDestructivePolicy) return {
 		config: cfg,
 		changes: []
 	};
@@ -31,10 +51,24 @@ function normalizeCompatibilityConfig({ cfg }) {
 		config: cfg,
 		changes: []
 	};
-	delete nextPluginConfig.codexDynamicToolsProfile;
+	const changes = [];
+	if (shouldRemoveDynamicToolsProfile) {
+		delete nextPluginConfig.codexDynamicToolsProfile;
+		changes.push("Removed retired plugins.entries.codex.config.codexDynamicToolsProfile; Codex app-server always keeps Codex-native workspace tools native.");
+	}
+	if (shouldRewriteDestructivePolicy) {
+		const nextCodexPlugins = asRecord(nextPluginConfig.codexPlugins);
+		if (nextCodexPlugins?.allow_destructive_actions === "on-request") nextCodexPlugins.allow_destructive_actions = "auto";
+		const nextPluginPolicies = asRecord(nextCodexPlugins?.plugins);
+		for (const plugin of Object.values(nextPluginPolicies ?? {})) {
+			const nextPlugin = asRecord(plugin);
+			if (nextPlugin?.allow_destructive_actions === "on-request") nextPlugin.allow_destructive_actions = "auto";
+		}
+		changes.push("Renamed plugins.entries.codex.config.codexPlugins allow_destructive_actions=\"on-request\" values to \"auto\".");
+	}
 	return {
 		config: nextConfig,
-		changes: ["Removed retired plugins.entries.codex.config.codexDynamicToolsProfile; Codex app-server always keeps Codex-native workspace tools native."]
+		changes
 	};
 }
 /** Session/auth ownership metadata used by doctor route-state checks. */

package/dist/harness.js

@@ -32,25 +32,25 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-D_q-VrpR.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-DRhB6bTc.js");
 			return runCodexAppServerAttempt(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-DqKLfWMB.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-BdYL4kj1.js");
 			return runCodexAppServerSideQuestion(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				nativeHookRelay: { enabled: true }
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-GEKusemL.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-CMVlldii.js");
 			return maybeCompactCodexAppServerSession(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		compactAfterContextEngine: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-GEKusemL.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-CMVlldii.js");
 			return maybeCompactCodexAppServerSession(params, {
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
 				allowNonManualNativeRequest: true
@@ -58,12 +58,12 @@ function createCodexAppServerAgentHarness(options) {
 		},
 		reset: async (params) => {
 			if (params.sessionFile) {
-				const { clearCodexAppServerBinding } = await import("./session-binding-ElbcSq2o.js").then((n) => n.s);
+				const { clearCodexAppServerBinding } = await import("./session-binding-BRUi8y6E.js").then((n) => n.s);
 				await clearCodexAppServerBinding(params.sessionFile);
 			}
 		},
 		dispose: async () => {
-			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-jFMumCOe.js").then((n) => n.c);
+			const { clearSharedCodexAppServerClientAndWait } = await import("./shared-client-Bg5d7VV9.js").then((n) => n.c);
 			await clearSharedCodexAppServerClientAndWait();
 		}
 	};