@openclaw/codex 2026.7.2-beta.2 → 2026.7.2-beta.3

package/dist/{app-server-policy-Scc-Wevo.js → app-server-policy-DUMF2Xyr.js}

@@ -1,4 +1,4 @@
-import { p as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-h1mmCGnl.js";
+import { p as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-Bmt20HfB.js";
 //#region extensions/codex/src/app-server/app-server-policy.ts
 /**
 * Policy promotion for Codex app-server runs that can safely use OpenClaw tool

package/dist/{attempt-notifications-BFmNhqFl.js → attempt-notifications-Ecjyzufe.js}

@@ -1,4 +1,4 @@
-import { Z as isJsonObject } from "./shared-client-JiAnW6pc.js";
+import { Z as isJsonObject } from "./shared-client-CSXLtCLE.js";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/codex/src/app-server/attempt-notifications.ts
 /**

package/dist/cli-metadata.js

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/codex/cli-metadata.ts
 function registerCodexCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./session-cli-XsEuWb_C.js");
+		const { registerCodexSessionCli } = await import("./session-cli-Bxk3-Wqz.js");
 		registerCodexSessionCli(program);
 	}, { descriptors: [{
 		name: "codex",

package/dist/{command-formatters-Dq9InZUK.js → command-formatters-NCTL7A2q.js}

@@ -1,5 +1,5 @@
-import { R as CodexAppServerRpcError, Z as isJsonObject } from "./shared-client-JiAnW6pc.js";
-import { c as summarizeCodexRateLimits, o as summarizeCodexAccountRateLimits, r as hasCodexRateLimitSnapshots } from "./rate-limits-DyXaYAxU.js";
+import { R as CodexAppServerRpcError, Z as isJsonObject } from "./shared-client-CSXLtCLE.js";
+import { c as summarizeCodexRateLimits, o as summarizeCodexAccountRateLimits, r as hasCodexRateLimitSnapshots } from "./rate-limits-CqhWQ2R9.js";
 //#region extensions/codex/src/app-server/capabilities.ts
 /**
 * Capability helpers for optional Codex app-server control-plane methods.
@@ -20,7 +20,10 @@ const CODEX_CONTROL_METHODS = {
 	renameThread: "thread/name/set",
 	resumeThread: "thread/resume",
 	review: "review/start",
-	unarchiveThread: "thread/unarchive"
+	unarchiveThread: "thread/unarchive",
+	getThreadGoal: "thread/goal/get",
+	setThreadGoal: "thread/goal/set",
+	clearThreadGoal: "thread/goal/clear"
 };
 /** Formats unsupported control calls differently from ordinary RPC failures. */
 function describeControlFailure(error) {
@@ -206,6 +209,7 @@ function buildHelp() {
 		"- /codex status",
 		"- /codex models",
 		"- /codex threads [filter]",
+		"- /codex goal [status|set <objective>|pause|resume|block|complete|clear]",
 		"- /codex sessions --host <node> [filter]",
 		"- /codex resume <thread-id>",
 		"- /codex resume <session-id> --host <node> --bind here",

package/dist/{command-handlers-IgqmL_kv.js → command-handlers-DtFbZiba.js}

@@ -1,15 +1,15 @@
-import { S as resolveCodexAppServerAuthProfileIdForAgent, Z as isJsonObject } from "./shared-client-JiAnW6pc.js";
-import { _ as isCodexFastServiceTier, c as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, s as reclaimCurrentCodexSessionGeneration } from "./session-binding-h1mmCGnl.js";
+import { S as resolveCodexAppServerAuthProfileIdForAgent, Z as isJsonObject } from "./shared-client-CSXLtCLE.js";
+import { _ as isCodexFastServiceTier, c as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, s as reclaimCurrentCodexSessionGeneration } from "./session-binding-Bmt20HfB.js";
 import { u as assertCodexThreadResumeResponse } from "./transcript-mirror-D9rTxx2P.js";
-import { t as listAllCodexAppServerModels } from "./models-uh26C8QU.js";
-import { a as formatComputerUseStatus, c as formatSkills, d as CODEX_CONTROL_METHODS, i as formatCodexStatus, l as formatThreads, n as formatAccount, o as formatList, r as formatCodexDisplayText, s as formatModels, t as buildHelp, u as readString$1 } from "./command-formatters-Dq9InZUK.js";
-import { s as summarizeCodexAccountUsage } from "./rate-limits-DyXaYAxU.js";
+import { t as listAllCodexAppServerModels } from "./models-DD5zBdX5.js";
+import { a as formatComputerUseStatus, c as formatSkills, d as CODEX_CONTROL_METHODS, i as formatCodexStatus, l as formatThreads, n as formatAccount, o as formatList, r as formatCodexDisplayText, s as formatModels, t as buildHelp, u as readString$1 } from "./command-formatters-NCTL7A2q.js";
+import { s as summarizeCodexAccountUsage } from "./rate-limits-CqhWQ2R9.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-CGkBlfc5.js";
+import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-B0s3aIjT.js";
 import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-BHRpYbX3.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-KmfV4EkP.js";
-import { c as requestOptions, l as safeCodexControlRequest, o as codexControlRequest, p as formatCodexCliSessions, s as readCodexStatusProbes } from "./session-catalog-CEvoXWHA.js";
-import { i as readCodexComputerUseStatus, n as installCodexComputerUse } from "./computer-use-CPcU8TjG.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-C8DVQ_Bq.js";
+import { c as requestOptions, l as safeCodexControlRequest, o as codexControlRequest, p as formatCodexCliSessions, s as readCodexStatusProbes } from "./session-catalog-CA7R-hX2.js";
+import { i as readCodexComputerUseStatus, n as installCodexComputerUse } from "./computer-use-C7x4ZaqR.js";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import crypto from "node:crypto";
@@ -539,7 +539,8 @@ const CODEX_NATIVE_EXECUTION_SUBCOMMANDS = /* @__PURE__ */ new Set([
 	"fast",
 	"permissions",
 	"compact",
-	"review"
+	"review",
+	"goal"
 ]);
 const CODEX_NATIVE_CONTROL_SUBCOMMANDS = /* @__PURE__ */ new Set([
 	...CODEX_NATIVE_EXECUTION_SUBCOMMANDS,
@@ -681,7 +682,7 @@ async function handleCodexSubcommand(ctx, options) {
 	const [subcommand = "status", ...rest] = args;
 	const normalized = subcommand.toLowerCase();
 	if (normalized === "help") return { text: buildHelp() };
-	if (CODEX_NATIVE_CONTROL_SUBCOMMANDS.has(normalized) && !returnsBeforeNativeCodexExecution(normalized, rest) && !canMutateCodexHost(ctx)) return { text: CODEX_NATIVE_EXECUTION_AUTH_ERROR };
+	if (CODEX_NATIVE_CONTROL_SUBCOMMANDS.has(normalized) && !returnsBeforeNativeCodexExecution(normalized, rest) && !isReadOnlyCodexGoalCommand(normalized, rest) && !canMutateCodexHost(ctx)) return { text: CODEX_NATIVE_EXECUTION_AUTH_ERROR };
 	const sandboxBlock = resolveCodexNativeCommandSandboxBlock(ctx, normalized, rest);
 	if (sandboxBlock) return { text: sandboxBlock };
 	if (normalized === "plugins") {
@@ -699,6 +700,7 @@ async function handleCodexSubcommand(ctx, options) {
 		return { text: formatModels(await deps.listCodexAppServerModels(deps.requestOptions(options.pluginConfig, 100, ctx.config, agentDir))) };
 	}
 	if (normalized === "threads") return { text: await buildThreads(deps, ctx, options.pluginConfig, rest.join(" ")) };
+	if (normalized === "goal") return { text: await handleNativeGoal(deps, ctx, options.pluginConfig, rest) };
 	if (normalized === "sessions") return { text: await buildCodexCliSessions(deps, rest) };
 	if (normalized === "resume") return { text: await resumeThread(deps, ctx, options.pluginConfig, rest) };
 	if (normalized === "bind") return await bindConversation(deps, ctx, options.pluginConfig, rest);
@@ -777,6 +779,7 @@ function isCurrentSessionModelSelectionLocked(ctx) {
 	}));
 }
 function resolveCodexNativeCommandSandboxBlock(ctx, subcommand, args) {
+	if (isReadOnlyCodexGoalCommand(subcommand, args)) return;
 	if (!CODEX_NATIVE_EXECUTION_SUBCOMMANDS.has(subcommand)) return;
 	if (returnsBeforeNativeCodexExecution(subcommand, args)) return;
 	if (isCodexCliNodeResumeBind(subcommand, args)) return resolveCodexNativeSandboxBlock({
@@ -793,6 +796,11 @@ function resolveCodexNativeCommandSandboxBlock(ctx, subcommand, args) {
 		surface: `/${["codex", subcommand].join(" ")}`
 	});
 }
+function isReadOnlyCodexGoalCommand(subcommand, args) {
+	if (subcommand !== "goal" || args.length > 1) return false;
+	const action = (args[0] ?? "status").toLowerCase();
+	return action === "status" || action === "get";
+}
 function returnsBeforeNativeCodexExecution(subcommand, args) {
 	switch (subcommand) {
 		case "bind": return parseBindArgs([...args]).help === true;
@@ -930,6 +938,56 @@ async function buildThreads(deps, ctx, pluginConfig, filter) {
 		...scope
 	}));
 }
+async function handleNativeGoal(deps, ctx, pluginConfig, args) {
+	const action = (args[0] ?? "status").toLowerCase();
+	const objective = args.slice(1).join(" ").trim();
+	const target = await resolveControlTarget(ctx);
+	if (!target) return "Cannot manage the Codex goal because this command has no stable binding identity.";
+	const binding = await deps.bindingStore.read(target.identity);
+	if (!binding?.threadId) return "No Codex thread is attached to this OpenClaw session yet.";
+	const connection = resolveCodexBindingAppServerConnection({
+		binding,
+		authProfileId: binding.authProfileId,
+		pluginConfig
+	});
+	const goalRequestOptions = {
+		agentDir: target.agentDir,
+		authProfileId: connection.clientAuthProfileId,
+		config: ctx.config,
+		...connection.usesSupervisionConnection ? { startOptions: connection.appServer.start } : {}
+	};
+	if (action === "status" || action === "get") {
+		if (args.length > 1) return "Usage: /codex goal [status]";
+		return formatNativeGoal(await deps.codexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.getThreadGoal, { threadId: binding.threadId }, goalRequestOptions));
+	}
+	if (action === "clear") {
+		if (args.length > 1) return "Usage: /codex goal clear";
+		const response = await deps.codexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.clearThreadGoal, { threadId: binding.threadId }, goalRequestOptions);
+		return isJsonObject(response) && response.cleared === true ? "Cleared the Codex goal." : "No Codex goal was active.";
+	}
+	const requestedStatus = action === "pause" ? "paused" : action === "resume" ? "active" : action === "block" ? "blocked" : action === "complete" ? "complete" : void 0;
+	const isObjectiveUpdate = action === "set";
+	if (!requestedStatus && !isObjectiveUpdate || isObjectiveUpdate && !objective) return "Usage: /codex goal [status|set <objective>|pause|resume|block|complete|clear]";
+	if (requestedStatus && args.length > 1) return `Usage: /codex goal ${action}`;
+	return formatNativeGoal(await deps.codexControlRequest(pluginConfig, CODEX_CONTROL_METHODS.setThreadGoal, {
+		threadId: binding.threadId,
+		...objective ? { objective } : {},
+		...requestedStatus ? { status: requestedStatus } : {}
+	}, goalRequestOptions));
+}
+function formatNativeGoal(response) {
+	const goal = isJsonObject(response) && isJsonObject(response.goal) ? response.goal : void 0;
+	if (!goal) return "No Codex goal is active.";
+	const objective = readString$1(goal, "objective") ?? "unknown";
+	const status = readString$1(goal, "status") ?? "unknown";
+	const tokensUsed = typeof goal.tokensUsed === "number" ? goal.tokensUsed : 0;
+	const tokenBudget = typeof goal.tokenBudget === "number" ? goal.tokenBudget : void 0;
+	return [
+		`Codex goal: ${formatCodexDisplayText(objective)}`,
+		`- Status: ${formatCodexDisplayText(status)}`,
+		`- Tokens: ${tokensUsed}${tokenBudget === void 0 ? "" : ` / ${tokenBudget}`}`
+	].join("\n");
+}
 async function buildCodexCliSessions(deps, args) {
 	const parsed = parseCodexCliSessionsArgs(args);
 	if (parsed.help || !parsed.host) return "Usage: /codex sessions --host <node> [filter] [--limit <n>]";

package/dist/{compact-DCTmg3id.js → compact-Kgy26gIM.js}

@@ -1,8 +1,8 @@
-import { R as CodexAppServerRpcError, Z as isJsonObject, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient } from "./shared-client-JiAnW6pc.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-BFmNhqFl.js";
-import { c as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-h1mmCGnl.js";
+import { R as CodexAppServerRpcError, Z as isJsonObject, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CSXLtCLE.js";
+import { _ as readCodexNotificationItem } from "./attempt-notifications-Ecjyzufe.js";
+import { c as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-Bmt20HfB.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-KmfV4EkP.js";
+import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-C8DVQ_Bq.js";
 import { resolveAgentDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
 import { embeddedAgentLog, resolveCompactionTimeoutMs } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts

package/dist/{computer-use-CPcU8TjG.js → computer-use-C7x4ZaqR.js}

@@ -1,7 +1,7 @@
-import { E as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, H as isCodexAppServerConnectionClosedError, U as isCodexAppServerIndeterminateRequestCancellationError, W as isCodexAppServerIndeterminateTransportError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, h as acquireCodexNativeConfigFence, l as resolveCodexNativeConfigFenceKey } from "./shared-client-JiAnW6pc.js";
-import { C as resolveCodexComputerUseConfig, b as resolveCodexAppServerRuntimeOptions } from "./session-binding-h1mmCGnl.js";
-import { f as describeControlFailure } from "./command-formatters-Dq9InZUK.js";
-import { r as requestCodexAppServerJson } from "./request-B_oQsCXy.js";
+import { E as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, H as isCodexAppServerConnectionClosedError, U as isCodexAppServerIndeterminateRequestCancellationError, W as isCodexAppServerIndeterminateTransportError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, h as acquireCodexNativeConfigFence, l as resolveCodexNativeConfigFenceKey } from "./shared-client-CSXLtCLE.js";
+import { C as resolveCodexComputerUseConfig, b as resolveCodexAppServerRuntimeOptions } from "./session-binding-Bmt20HfB.js";
+import { f as describeControlFailure } from "./command-formatters-NCTL7A2q.js";
+import { r as requestCodexAppServerJson } from "./request-9yf9pZjf.js";
 import { existsSync } from "node:fs";
 import { runExec } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/codex/src/app-server/computer-use.ts

package/dist/{conversation-control-CGkBlfc5.js → conversation-control-B0s3aIjT.js}

@@ -1,8 +1,8 @@
-import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, s as releaseCodexAppServerClientLease } from "./shared-client-JiAnW6pc.js";
-import { _ as isCodexFastServiceTier, a as isCodexAppServerNativeAuthProfile, b as resolveCodexAppServerRuntimeOptions, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, w as resolveCodexModelBackedReviewerPolicyContext } from "./session-binding-h1mmCGnl.js";
-import { _ as resolveCodexBindingModelProviderFallback, h as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-CN_pPtPh.js";
-import { d as CODEX_CONTROL_METHODS, r as formatCodexDisplayText } from "./command-formatters-Dq9InZUK.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-KmfV4EkP.js";
+import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, s as releaseCodexAppServerClientLease } from "./shared-client-CSXLtCLE.js";
+import { _ as isCodexFastServiceTier, a as isCodexAppServerNativeAuthProfile, b as resolveCodexAppServerRuntimeOptions, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, w as resolveCodexModelBackedReviewerPolicyContext } from "./session-binding-Bmt20HfB.js";
+import { _ as resolveCodexBindingModelProviderFallback, h as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-CQ_9mAa1.js";
+import { d as CODEX_CONTROL_METHODS, r as formatCodexDisplayText } from "./command-formatters-NCTL7A2q.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-C8DVQ_Bq.js";
 import { ModelSelectionLockedError } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";

package/dist/doctor-contract-api.js

@@ -302,7 +302,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-h1mmCGnl.js").then((n) => n.l), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Bmt20HfB.js").then((n) => n.l), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),