@openclaw/codex 2026.7.2-beta.1 → 2026.7.2-beta.2

package/dist/harness.js

@@ -37,6 +37,10 @@ function createCodexAppServerAgentHarness(options) {
 			const { validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-C2ITXdhM.js");
 			return validateCodexAppServerRuntimeArtifact(binding);
 		} },
+		fetchUsageSnapshot: async (ctx) => {
+			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-D5Rohxoc.js");
+			return await fetchCodexAppServerUsageSnapshot(ctx, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
+		},
 		supports: (ctx) => {
 			const provider = ctx.provider.trim().toLowerCase();
 			if (!providerIds.has(provider)) return {
@@ -75,7 +79,7 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-VPVJoYDP.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-MLzoMe_m.js");
 			return runCodexAppServerAttempt(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -83,7 +87,7 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-CgJBz52s.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-DqDvIwSU.js");
 			return runCodexAppServerSideQuestion(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -91,14 +95,14 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-FnJmiPNA.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-DCTmg3id.js");
 			return maybeCompactCodexAppServerSession(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig
 			});
 		},
 		compactAfterContextEngine: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-FnJmiPNA.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-DCTmg3id.js");
 			return maybeCompactCodexAppServerSession(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -107,7 +111,7 @@ function createCodexAppServerAgentHarness(options) {
 		},
 		reset: async (params) => {
 			if (params.sessionId) {
-				const { reclaimCurrentCodexSessionGeneration, sessionBindingIdentity } = await import("./session-binding-BMfX1OX-.js").then((n) => n.l);
+				const { reclaimCurrentCodexSessionGeneration, sessionBindingIdentity } = await import("./session-binding-h1mmCGnl.js").then((n) => n.l);
 				const identity = sessionBindingIdentity({
 					agentId: params.agentId,
 					sessionId: params.sessionId,

package/dist/index.js

@@ -1,24 +1,20 @@
 import { registerCodexCliMetadata } from "./cli-metadata.js";
 import { createCodexAppServerAgentHarness } from "./harness.js";
-import { i as isJsonObject, t as CODEX_INTERACTIVE_THREAD_SOURCE_KINDS } from "./protocol-BMifTfdW.js";
-import { a as codexAppServerStartOptionsKey, d as readCodexPluginConfig, f as resolveCodexAppServerRuntimeOptions, i as canUseCodexModelBackedApprovalsReviewerForModel, o as codexSandboxPolicyForTurn, r as assertCodexAppServerConnectionSecurity, t as CODEX_PLUGINS_MARKETPLACE_NAME, v as resolveCodexSupervisionAppServerRuntimeOptions, y as resolveOpenClawExecPolicyForCodexAppServer } from "./config-c48K5HP9.js";
-import { r as assertCodexThreadStartResponse } from "./protocol-validators-dZQ-UTOa.js";
-import { i as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BKNjHMEs.js";
-import { C as resolveCodexAppServerFallbackApiKeyCacheKey, S as resolveCodexAppServerAuthProfileIdForAgent, a as getLeasedSharedCodexAppServerClient, b as resolveCodexAppServerAuthAccountCacheKey, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, r as clearSharedCodexAppServerClientIfCurrentAndWait, s as releaseCodexAppServerClientLease } from "./shared-client-D4mFI9al.js";
-import { K as ensureCodexPluginActivation, f as resolveCodexAppServerRequestModelSelection, q as pluginReadParams, t as CODEX_NATIVE_PERSONALITY_NONE, y as resumeCodexAppServerThread } from "./thread-lifecycle-BgLXzjvV.js";
+import { C as resolveCodexAppServerFallbackApiKeyCacheKey, J as CODEX_INTERACTIVE_THREAD_SOURCE_KINDS, S as resolveCodexAppServerAuthProfileIdForAgent, Z as isJsonObject, a as getLeasedSharedCodexAppServerClient, b as resolveCodexAppServerAuthAccountCacheKey, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, r as clearSharedCodexAppServerClientIfCurrentAndWait, s as releaseCodexAppServerClientLease } from "./shared-client-JiAnW6pc.js";
+import { D as resolveOpenClawExecPolicyForCodexAppServer, E as resolveCodexSupervisionAppServerRuntimeOptions, a as isCodexAppServerNativeAuthProfile, b as resolveCodexAppServerRuntimeOptions, c as sessionBindingIdentity, f as assertCodexAppServerConnectionSecurity, h as codexSandboxPolicyForTurn, m as codexAppServerStartOptionsKey, n as assertCodexBindingMayBeReplaced, o as normalizeCodexAppServerBindingModelProvider, p as canUseCodexModelBackedApprovalsReviewerForModel, u as CODEX_PLUGINS_MARKETPLACE_NAME, y as readCodexPluginConfig } from "./session-binding-h1mmCGnl.js";
+import { d as assertCodexThreadStartResponse } from "./transcript-mirror-D9rTxx2P.js";
+import { i as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-Ceb-lm2c.js";
+import { X as ensureCodexPluginActivation, Z as pluginReadParams, c as resumeCodexAppServerThread, h as resolveCodexAppServerRequestModelSelection, p as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-CN_pPtPh.js";
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
-import { a as isCodexAppServerNativeAuthProfile, c as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as normalizeCodexAppServerBindingModelProvider } from "./session-binding-BMfX1OX-.js";
-import { buildCodexProvider } from "./provider.js";
-import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-D580L0P8.js";
-import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-42Dfn2TV.js";
-import { r as formatCodexDisplayText } from "./command-formatters-D6ZlGNmb.js";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-DVcxdse_.js";
+import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-D31dOJwb.js";
+import { d as CODEX_CONTROL_METHODS, f as describeControlFailure, r as formatCodexDisplayText } from "./command-formatters-Dq9InZUK.js";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Scc-Wevo.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-D1Wky__S.js";
-import { d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, u as trackCodexConversationActiveTurn } from "./conversation-control-DtQ-E7mr.js";
+import { d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, u as trackCodexConversationActiveTurn } from "./conversation-control-CGkBlfc5.js";
 import { a as readCodexConversationBindingDataRecord, i as readCodexConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-BHRpYbX3.js";
-import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-DfaCm0mx.js";
-import { d as createCodexCliSessionNodeHostCommands, f as createCodexCliSessionNodeInvokePolicies, g as resumeCodexCliSessionOnNode, h as resolveCodexCliSessionForBindingOnNode, i as createCodexSessionCatalogNodeInvokePolicies, m as listCodexCliSessionsOnNode, n as createCodexSessionCatalogControl, o as codexControlRequest, r as createCodexSessionCatalogNodeHostCommands, t as codexSessionCatalogRuntime, u as assertCodexArchiveDescendantsUnowned } from "./session-catalog-7H112Tr_.js";
-import { n as requestCodexAppServerJson } from "./request-DborTWgw.js";
+import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-KmfV4EkP.js";
+import { d as createCodexCliSessionNodeHostCommands, f as createCodexCliSessionNodeInvokePolicies, g as resumeCodexCliSessionOnNode, h as resolveCodexCliSessionForBindingOnNode, i as createCodexSessionCatalogNodeInvokePolicies, m as listCodexCliSessionsOnNode, n as createCodexSessionCatalogControl, o as codexControlRequest, r as createCodexSessionCatalogNodeHostCommands, t as codexSessionCatalogRuntime, u as assertCodexArchiveDescendantsUnowned } from "./session-catalog-CEvoXWHA.js";
+import { r as requestCodexAppServerJson } from "./request-B_oQsCXy.js";
 import { t as createCodexWebSearchProviderBase } from "./web-search-provider.shared-BrZmlqyR.js";
 import { mutateConfigFile } from "openclaw/plugin-sdk/config-mutation";
 import { normalizePluginsConfig, resolveEffectiveEnableState, resolveLivePluginConfigObject, resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
@@ -36,20 +32,20 @@ import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-s
 import { fileURLToPath } from "node:url";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { canonicalPathFromExistingAncestor, isPathInside, pathExists } from "openclaw/plugin-sdk/security-runtime";
-import { jsonResult, readStringParam } from "openclaw/plugin-sdk/core";
 import { KeyedAsyncQueue } from "openclaw/plugin-sdk/keyed-async-queue";
 import { ModelSelectionLockedError, isModelSelectionLocked } from "openclaw/plugin-sdk/model-session-runtime";
 import { MIGRATION_REASON_TARGET_EXISTS, applyMigrationManualItem, createMigrationItem, createMigrationManualItem, hasMigrationConfigPatchConflict, markMigrationItemConflict, markMigrationItemError, markMigrationItemSkipped, readMigrationConfigPath, summarizeMigrationItems, writeMigrationConfigPath } from "openclaw/plugin-sdk/migration";
 import { archiveMigrationItem, copyMemoryMigrationFileItem, copyMigrationFileItem, withCachedMigrationConfigRuntime, writeMigrationReport } from "openclaw/plugin-sdk/migration-runtime";
 import { sleep } from "openclaw/plugin-sdk/runtime-env";
 import { readJsonFileWithFallback } from "openclaw/plugin-sdk/json-store";
+import { jsonResult, readStringParam } from "openclaw/plugin-sdk/core";
 import { Type } from "typebox";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/codex/src/app-server/session-binding-store.ts
 /** Defers schema compilation and auth loading until the first binding operation. */
 function createLazyCodexAppServerBindingStore(state) {
 	let resolved;
-	const store = () => resolved ??= import("./session-binding-BMfX1OX-.js").then((n) => n.l).then(({ createCodexAppServerBindingStore }) => createCodexAppServerBindingStore(state));
+	const store = () => resolved ??= import("./session-binding-h1mmCGnl.js").then((n) => n.l).then(({ createCodexAppServerBindingStore }) => createCodexAppServerBindingStore(state));
 	return {
 		read: async (identity) => (await store()).read(identity),
 		hasOtherThreadOwner: async (threadId, currentIdentity) => (await store()).hasOtherThreadOwner(threadId, currentIdentity),
@@ -76,7 +72,7 @@ async function handleCodexCommand(ctx, options) {
 	}
 }
 async function loadDefaultCodexSubcommandHandler() {
-	const { handleCodexSubcommand } = await import("./command-handlers-Cpl9fUWv.js");
+	const { handleCodexSubcommand } = await import("./command-handlers-IgqmL_kv.js");
 	return handleCodexSubcommand;
 }
 //#endregion
@@ -1463,6 +1459,16 @@ async function buildCodexAuthConfigPatchItems(params) {
 }
 //#endregion
 //#region extensions/codex/src/migration/memory-plan.ts
+const MIGRATION_REASON_TARGET_NOT_REGULAR = "target is not a regular file";
+async function lstatIfExists(filePath) {
+	try {
+		return await fs.lstat(filePath);
+	} catch (error) {
+		const code = error && typeof error === "object" && "code" in error ? String(error.code) : void 0;
+		if (code === "ENOENT" || code === "ENOTDIR") return;
+		throw error;
+	}
+}
 async function assertSafeMemoryDestination(params) {
 	const [canonicalSource, canonicalWorkspace, canonicalTarget] = await Promise.all([
 		fs.realpath(path.dirname(params.source)),
@@ -1476,20 +1482,23 @@ async function buildCodexMemoryItems(params) {
 	const items = [];
 	for (const memory of params.memoryFiles) {
 		const target = path.join(params.workspaceDir, "memory", "imports", "codex", path.basename(memory.path));
-		await assertSafeMemoryDestination({
+		const targetStat = await lstatIfExists(target);
+		const targetExists = targetStat !== void 0;
+		const targetNotRegular = targetExists && !targetStat.isFile();
+		if (!targetNotRegular) await assertSafeMemoryDestination({
 			source: memory.path,
 			workspaceDir: params.workspaceDir,
 			target
 		});
-		const targetExists = await exists(target);
+		const targetConflict = targetNotRegular || targetExists && !params.overwrite;
 		items.push(createMigrationItem({
 			id: memory.id,
 			kind: "memory",
 			action: "copy",
 			source: memory.path,
 			target,
-			status: targetExists && !params.overwrite ? "conflict" : "planned",
-			reason: targetExists && !params.overwrite ? MIGRATION_REASON_TARGET_EXISTS : void 0,
+			status: targetConflict ? "conflict" : "planned",
+			reason: targetNotRegular ? MIGRATION_REASON_TARGET_NOT_REGULAR : targetConflict ? MIGRATION_REASON_TARGET_EXISTS : void 0,
 			message: "Copy consolidated Codex memory into the OpenClaw memory index.",
 			details: {
 				sourceType: "codex-memory",
@@ -1637,7 +1646,8 @@ async function discoverCodexMemorySources(codexHome) {
 //#endregion
 //#region extensions/codex/src/migration/source.ts
 function defaultCodexHome() {
-	return resolveHomePath(process.env.CODEX_HOME?.trim() || "~/.codex");
+	const configuredHome = process.env.CODEX_HOME;
+	return resolveHomePath(configuredHome !== void 0 && configuredHome.length > 0 ? configuredHome : "~/.codex");
 }
 function personalAgentsSkillsDir() {
 	return path.join(resolveUserHomeDir(), ".agents", "skills");
@@ -3716,7 +3726,7 @@ function createCodexSupervisionTools(options) {
 }
 //#endregion
 //#region extensions/codex/src/web-search-provider.ts
-const loadCodexWebSearchRuntime = createLazyRuntimeModule(() => import("./web-search-provider.runtime-Bs-eTn5U.js"));
+const loadCodexWebSearchRuntime = createLazyRuntimeModule(() => import("./web-search-provider.runtime-CKVBn3fP.js"));
 const CodexWebSearchSchema = {
 	type: "object",
 	properties: { query: {
@@ -3758,7 +3768,7 @@ const ENDED_SESSION_REASONS = /* @__PURE__ */ new Set([
 var codex_default = definePluginEntry({
 	id: "codex",
 	name: "Codex",
-	description: "Codex app-server harness, Codex-managed GPT catalog, and native session supervision.",
+	description: "Codex app-server harness and native session supervision.",
 	register(api) {
 		const resolveCurrentConfig = () => api.runtime.config?.current ? api.runtime.config.current() : void 0;
 		const resolvePluginConfig = (resolveConfig) => {
@@ -3775,11 +3785,20 @@ var codex_default = definePluginEntry({
 			return livePluginConfig;
 		};
 		const resolveCurrentPluginConfig = () => resolvePluginConfig(resolveCurrentConfig);
-		const bindingStore = createLazyCodexAppServerBindingStore(api.runtime.state.openSyncKeyedStore({
+		let bindingStateStore;
+		const openBindingStateStore = () => bindingStateStore ??= api.runtime.state.openSyncKeyedStore({
 			namespace: CODEX_APP_SERVER_BINDING_NAMESPACE,
 			maxEntries: CODEX_APP_SERVER_BINDING_MAX_ENTRIES,
 			overflowPolicy: "reject-new"
-		}));
+		});
+		const bindingStore = createLazyCodexAppServerBindingStore({
+			entries: () => openBindingStateStore().entries(),
+			lookup: (key) => openBindingStateStore().lookup(key),
+			get update() {
+				const store = openBindingStateStore();
+				return store.update?.bind(store);
+			}
+		});
 		registerCodexCliMetadata(api);
 		const sessionCatalogControl = createCodexSessionCatalogControl({
 			getPluginConfig: resolveCurrentPluginConfig,
@@ -3809,7 +3828,6 @@ var codex_default = definePluginEntry({
 			resolveConfig: resolveCurrentConfig,
 			resolvePluginConfig: resolveCurrentPluginConfig
 		}));
-		api.registerProvider(buildCodexProvider({ pluginConfig: api.pluginConfig }));
 		api.registerMediaUnderstandingProvider(buildCodexMediaUnderstandingProvider({ pluginConfig: api.pluginConfig }));
 		api.registerWebSearchProvider(createCodexWebSearchProvider({ resolvePluginConfig: resolveCurrentPluginConfig }));
 		api.registerMigrationProvider(buildCodexMigrationProvider({ runtime: api.runtime }));
@@ -3896,7 +3914,7 @@ var codex_default = definePluginEntry({
 			if (!previousSessionId || !sessionId || previousSessionId === sessionId) return;
 			const config = resolveCurrentConfig();
 			const sessionKey = ctx.sessionKey?.trim();
-			const { sessionBindingIdentity } = await import("./session-binding-BMfX1OX-.js").then((n) => n.l);
+			const { sessionBindingIdentity } = await import("./session-binding-h1mmCGnl.js").then((n) => n.l);
 			const identity = sessionBindingIdentity({
 				sessionId,
 				...sessionKey ? { sessionKey } : {},
@@ -3909,8 +3927,11 @@ var codex_default = definePluginEntry({
 		api.on("session_end", async (event, ctx) => {
 			if (!event.reason || !ENDED_SESSION_REASONS.has(event.reason)) return;
 			const sessionKey = event.sessionKey ?? ctx.sessionKey;
+			const endedSessionKey = sessionKey?.trim();
+			const nextSessionKey = event.nextSessionKey?.trim();
+			if (endedSessionKey && nextSessionKey && nextSessionKey !== endedSessionKey) return;
 			const config = resolveCurrentConfig();
-			const { sessionBindingIdentity } = await import("./session-binding-BMfX1OX-.js").then((n) => n.l);
+			const { sessionBindingIdentity } = await import("./session-binding-h1mmCGnl.js").then((n) => n.l);
 			await bindingStore.retireSessionGeneration(sessionBindingIdentity({
 				sessionId: event.sessionId,
 				...sessionKey ? { sessionKey } : {},

package/dist/{media-understanding-provider-D580L0P8.js → media-understanding-provider-D31dOJwb.js}

@@ -1,11 +1,9 @@
-import { CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS } from "./provider-catalog.js";
-import { i as isJsonObject } from "./protocol-BMifTfdW.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-DEv9h7iC.js";
-import { f as resolveCodexAppServerRuntimeOptions } from "./config-c48K5HP9.js";
-import { i as assertCodexTurnStartResponse, l as readCodexTurnCompletedNotification, o as readCodexErrorNotification, r as assertCodexThreadStartResponse } from "./protocol-validators-dZQ-UTOa.js";
-import { i as readModelListResult } from "./models-DuKzZA6G.js";
-import { o as isCodexAppServerStartSelectionChangedError } from "./shared-client-D4mFI9al.js";
-import { W as mergeCodexThreadConfigs, r as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-BgLXzjvV.js";
+import { Z as isJsonObject, o as isCodexAppServerStartSelectionChangedError } from "./shared-client-JiAnW6pc.js";
+import { _ as readCodexNotificationItem } from "./attempt-notifications-BFmNhqFl.js";
+import { b as resolveCodexAppServerRuntimeOptions } from "./session-binding-h1mmCGnl.js";
+import { _ as readCodexTurnCompletedNotification, d as assertCodexThreadStartResponse, f as assertCodexTurnStartResponse, m as readCodexErrorNotification } from "./transcript-mirror-D9rTxx2P.js";
+import { r as readModelListResult } from "./models-uh26C8QU.js";
+import { J as mergeCodexThreadConfigs, l as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-CN_pPtPh.js";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -64,7 +62,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		agentDir,
 		config: params.config,
 		timeoutMs
-	}) : await import("./shared-client-D4mFI9al.js").then((n) => n.f).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	}) : await import("./shared-client-JiAnW6pc.js").then((n) => n.f).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions,
 		timeoutMs,
 		authProfileId: params.profile,
@@ -323,7 +321,8 @@ function isTerminalTurn(turn) {
 * Codex-backed media understanding provider for bounded image description and
 * structured extraction turns.
 */
-const DEFAULT_CODEX_IMAGE_MODEL = FALLBACK_CODEX_MODELS.find((model) => model.inputModalities.includes("image"))?.id ?? FALLBACK_CODEX_MODELS[0]?.id;
+const CODEX_MEDIA_PROVIDER_ID = "codex";
+const DEFAULT_CODEX_IMAGE_MODEL = "gpt-5.6-sol";
 const DEFAULT_CODEX_IMAGE_PROMPT = "Describe the image.";
 /**
 * Builds the media-understanding provider that delegates image tasks to an
@@ -331,9 +330,9 @@ const DEFAULT_CODEX_IMAGE_PROMPT = "Describe the image.";
 */
 function buildCodexMediaUnderstandingProvider(options = {}) {
 	return {
-		id: CODEX_PROVIDER_ID,
+		id: CODEX_MEDIA_PROVIDER_ID,
 		capabilities: ["image"],
-		...DEFAULT_CODEX_IMAGE_MODEL ? { defaultModels: { image: DEFAULT_CODEX_IMAGE_MODEL } } : {},
+		defaultModels: { image: DEFAULT_CODEX_IMAGE_MODEL },
 		describeImage: async (req) => describeCodexImages({
 			images: [{
 				buffer: req.buffer,

package/dist/media-understanding-provider.js

@@ -1,2 +1,2 @@
-import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-D580L0P8.js";
+import { t as buildCodexMediaUnderstandingProvider } from "./media-understanding-provider-D31dOJwb.js";
 export { buildCodexMediaUnderstandingProvider };

package/dist/{models-DuKzZA6G.js → models-uh26C8QU.js}

@@ -1,16 +1,10 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { s as readCodexModelListResponse } from "./protocol-validators-dZQ-UTOa.js";
+import { h as readCodexModelListResponse } from "./transcript-mirror-D9rTxx2P.js";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 /**
 * Lists and normalizes models exposed by the Codex app-server `model/list`
 * endpoint, including pagination and shared-client lease handling.
 */
-var models_exports = /* @__PURE__ */ __exportAll({
-	listAllCodexAppServerModels: () => listAllCodexAppServerModels,
-	listCodexAppServerModels: () => listCodexAppServerModels,
-	readModelListResult: () => readModelListResult
-});
 /** Lists one Codex app-server model page using the configured auth/client options. */
 async function listCodexAppServerModels(options = {}) {
 	return await withCodexAppServerModelClient(options, async ({ client, timeoutMs }) => requestModelListPage(client, {
@@ -46,17 +40,19 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelClient(options, run) {
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-D4mFI9al.js").then((n) => n.f);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-JiAnW6pc.js").then((n) => n.f);
 	const client = useSharedClient ? await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,
 		authProfileId: options.authProfileId,
+		authRequirement: options.authRequirement,
 		agentDir: options.agentDir,
 		config: options.config
 	}) : await createIsolatedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,
 		authProfileId: options.authProfileId,
+		authRequirement: options.authRequirement,
 		agentDir: options.agentDir,
 		config: options.config
 	});
@@ -115,4 +111,4 @@ function normalizeMaxPages(value) {
 	return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : 20;
 }
 //#endregion
-export { readModelListResult as i, listCodexAppServerModels as n, models_exports as r, listAllCodexAppServerModels as t };
+export { listCodexAppServerModels as n, readModelListResult as r, listAllCodexAppServerModels as t };

package/dist/{notification-correlation-DfaCm0mx.js → notification-correlation-KmfV4EkP.js}

@@ -1,6 +1,6 @@
-import { i as isJsonObject } from "./protocol-BMifTfdW.js";
-import { d as readCodexPluginConfig, f as resolveCodexAppServerRuntimeOptions, v as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-c48K5HP9.js";
-import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-BKNjHMEs.js";
+import { Z as isJsonObject } from "./shared-client-JiAnW6pc.js";
+import { E as resolveCodexSupervisionAppServerRuntimeOptions, b as resolveCodexAppServerRuntimeOptions, y as readCodexPluginConfig } from "./session-binding-h1mmCGnl.js";
+import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-Ceb-lm2c.js";
 //#region extensions/codex/src/app-server/binding-connection.ts
 /** Requires the native model pair after a supervised pending branch has materialized. */
 function requireCodexSupervisionModelSelection(binding) {

package/dist/{plugin-app-cache-key-BKNjHMEs.js → plugin-app-cache-key-Ceb-lm2c.js}

@@ -1,5 +1,5 @@
-import { m as resolveCodexAppServerUserHomeDir } from "./config-c48K5HP9.js";
-import { D as resolveCodexAppServerHomeDir } from "./shared-client-D4mFI9al.js";
+import { D as resolveCodexAppServerHomeDir } from "./shared-client-JiAnW6pc.js";
+import { S as resolveCodexAppServerUserHomeDir } from "./session-binding-h1mmCGnl.js";
 import { createRequire } from "node:module";
 import { isFutureDateTimestampMs, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";

package/dist/{rate-limits-Dhp04Rqo.js → rate-limits-DyXaYAxU.js}

@@ -1,4 +1,4 @@
-import { i as isJsonObject } from "./protocol-BMifTfdW.js";
+import { Z as isJsonObject } from "./shared-client-JiAnW6pc.js";
 import { MAX_DATE_TIMESTAMP_MS, resolveExpiresAtMsFromEpochSeconds } from "openclaw/plugin-sdk/number-runtime";
 import { asFiniteNumber, parseStrictFiniteNumber } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
@@ -17,14 +17,15 @@ const ONE_DAY_MS = 24 * ONE_HOUR_MS;
 const DAY_WINDOW_MINUTES = 1440;
 const WEEKLY_WINDOW_MINUTES = 7 * DAY_WINDOW_MINUTES;
 const WEEKLY_RESET_GAP_MS = 3 * ONE_DAY_MS;
+const CODEX_USAGE_LIMIT_MESSAGE_PREFIX = "You've reached your Codex subscription usage limit.";
 /** Enriches Codex usage-limit failures with reset timing and recovery guidance. */
 function formatCodexUsageLimitErrorMessage(params) {
 	const message = normalizeText(params.message);
-	if (!isCodexUsageLimitError(params.codexErrorInfo, message)) return;
+	if (!isCodexUsageLimitError(params.codexErrorInfo)) return;
 	const nowMs = params.nowMs ?? Date.now();
 	const usageSummary = summarizeCodexAccountUsage(params.rateLimits, nowMs);
 	const nextReset = selectBlockingRateLimitReset(params.rateLimits, nowMs) ?? (usageSummary?.blocked ? void 0 : selectNextRateLimitReset(params.rateLimits, nowMs));
-	const parts = ["You've reached your Codex subscription usage limit."];
+	const parts = [CODEX_USAGE_LIMIT_MESSAGE_PREFIX];
 	let recoveryAction = "Wait until Codex becomes available";
 	if (nextReset) {
 		parts.push(`Next reset ${formatResetTime(nextReset.resetsAtMs, nowMs)}.`);
@@ -45,7 +46,7 @@ function formatCodexUsageLimitErrorMessage(params) {
 /** Detects usage-limit messages that need a fresh rate-limit query before display. */
 function shouldRefreshCodexRateLimitsForUsageLimitMessage(message) {
 	const text = normalizeText(message);
-	return Boolean(text?.includes("You've reached your Codex subscription usage limit.") && !text.includes("Next reset "));
+	return Boolean(text?.startsWith(CODEX_USAGE_LIMIT_MESSAGE_PREFIX) && !text.includes("Next reset "));
 }
 /** Formats compact summaries for raw Codex rate-limit snapshot payloads. */
 function summarizeCodexRateLimits(value, nowMs = Date.now()) {
@@ -106,12 +107,12 @@ function buildCodexAppServerUsageSnapshot(value) {
 		...snapshot ? { plan: resolveCodexProviderUsagePlan(snapshot) } : {}
 	};
 }
-function isCodexUsageLimitError(codexErrorInfo, message) {
+function isCodexUsageLimitError(codexErrorInfo) {
 	if (codexErrorInfo === "usageLimitExceeded") return true;
 	if (typeof codexErrorInfo === "string") {
 		if (codexErrorInfo.replace(/[_\s-]/gu, "").toLowerCase() === "usagelimitexceeded") return true;
 	}
-	return Boolean(message?.toLowerCase().includes("usage limit"));
+	return false;
 }
 function selectNextRateLimitReset(value, nowMs) {
 	const futureWindows = collectCodexRateLimitSnapshots(value).flatMap((snapshot) => LIMIT_WINDOW_KEYS.flatMap((key) => readRateLimitWindow(snapshot, key) ?? [])).filter((window) => window.resetsAtMs > nowMs);

package/dist/{request-DborTWgw.js → request-B_oQsCXy.js}

@@ -1,12 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, d as retireSharedCodexAppServerClientIfCurrent, i as createIsolatedCodexAppServerClient, m as withTimeout, o as isCodexAppServerStartSelectionChangedError } from "./shared-client-D4mFI9al.js";
+import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, d as retireSharedCodexAppServerClientIfCurrent, i as createIsolatedCodexAppServerClient, m as withTimeout, o as isCodexAppServerStartSelectionChangedError } from "./shared-client-JiAnW6pc.js";
 import { t as resolveCodexAppServerDirectSandboxBypassBlock } from "./sandbox-guard-D1Wky__S.js";
 //#region extensions/codex/src/app-server/request.ts
-var request_exports = /* @__PURE__ */ __exportAll({
-	requestCodexAppServerClientJson: () => requestCodexAppServerClientJson,
-	requestCodexAppServerJson: () => requestCodexAppServerJson,
-	withCodexAppServerJsonClient: () => withCodexAppServerJsonClient
-});
 /** Sends one guarded request over a client lease owned by the caller. */
 async function requestCodexAppServerClientJson(params) {
 	const sandboxBlock = resolveCodexAppServerDirectSandboxBypassBlock({
@@ -37,6 +31,58 @@ async function requestCodexAppServerJson(params) {
 		requestParams: params.requestParams
 	}));
 }
+const CODEX_USAGE_ISOLATED_SHUTDOWN = {
+	forceKillDelayMs: 200,
+	exitTimeoutMs: 300
+};
+const CODEX_ACCOUNT_READ_MAX_TIMEOUT_MS = 4e3;
+const CODEX_USAGE_DEADLINE_RESERVE_MS = CODEX_USAGE_ISOLATED_SHUTDOWN.forceKillDelayMs + CODEX_USAGE_ISOLATED_SHUTDOWN.exitTimeoutMs + 250;
+/** Reads rate limits and best-effort account identity from one isolated app-server session. */
+async function readCodexAppServerUsage(options) {
+	const deadline = Date.now() + options.timeoutMs;
+	return await withCodexAppServerJsonClient({
+		timeoutMs: options.timeoutMs,
+		timeoutMessage: "codex app-server usage read timed out",
+		agentDir: options.agentDir,
+		...options.authProfileId ? { authProfileId: options.authProfileId } : {},
+		config: options.config,
+		startOptions: options.startOptions,
+		isolated: true,
+		isolatedShutdown: CODEX_USAGE_ISOLATED_SHUTDOWN
+	}, async (request) => {
+		const rateLimits = await request({ method: "account/rateLimits/read" });
+		const accountEmail = await readCodexAccountEmailBestEffort(request, deadline);
+		return {
+			rateLimits,
+			...accountEmail ? { accountEmail } : {}
+		};
+	});
+}
+function extractCodexAccountEmail(value) {
+	if (!value || typeof value !== "object") return;
+	const record = value;
+	const account = record.account && typeof record.account === "object" ? record.account : record;
+	const email = account.email ?? account.accountEmail;
+	return typeof email === "string" && email.trim() ? email.trim() : void 0;
+}
+async function readCodexAccountEmailBestEffort(request, deadline) {
+	const boundMs = Math.min(CODEX_ACCOUNT_READ_MAX_TIMEOUT_MS, deadline - Date.now() - CODEX_USAGE_DEADLINE_RESERVE_MS);
+	if (boundMs <= 0) return;
+	const read = request({
+		method: "account/read",
+		requestParams: {}
+	}).then((account) => extractCodexAccountEmail(account), () => void 0);
+	let timer;
+	const timeout = new Promise((resolve) => {
+		timer = setTimeout(() => resolve(void 0), boundMs);
+		timer.unref?.();
+	});
+	try {
+		return await Promise.race([read, timeout]);
+	} finally {
+		if (timer) clearTimeout(timer);
+	}
+}
 /**
 * Runs several guarded requests over one acquired client (shared lease or
 * isolated child) so related reads see the same app-server session. The whole
@@ -108,4 +154,4 @@ async function withCodexAppServerJsonClient(params, run) {
 	}
 }
 //#endregion
-export { requestCodexAppServerJson as n, request_exports as r, requestCodexAppServerClientJson as t };
+export { requestCodexAppServerClientJson as n, requestCodexAppServerJson as r, readCodexAppServerUsage as t };