@openclaw/codex 2026.7.2-beta.3 → 2026.7.2-beta.4

package/dist/{app-server-policy-DUMF2Xyr.js → app-server-policy-BO3jYBkv.js}

@@ -1,4 +1,4 @@
-import { p as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-Bmt20HfB.js";
+import { m as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-ZSMX1omP.js";
 //#region extensions/codex/src/app-server/app-server-policy.ts
 /**
 * Policy promotion for Codex app-server runs that can safely use OpenClaw tool

package/dist/{attempt-notifications-Ecjyzufe.js → attempt-notifications-DdmnBMUp.js}

@@ -1,4 +1,4 @@
-import { Z as isJsonObject } from "./shared-client-CSXLtCLE.js";
+import { Q as isJsonObject } from "./shared-client-wmgNFNYp.js";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/codex/src/app-server/attempt-notifications.ts
 /**

package/dist/{media-understanding-provider-IPNNQre6.js → bounded-turn-CaQL96kg.js}

@@ -1,10 +1,10 @@
-import { Z as isJsonObject, o as isCodexAppServerStartSelectionChangedError } from "./shared-client-CSXLtCLE.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-Ecjyzufe.js";
-import { b as resolveCodexAppServerRuntimeOptions } from "./session-binding-Bmt20HfB.js";
-import { _ as readCodexTurnCompletedNotification, d as assertCodexThreadStartResponse, f as assertCodexTurnStartResponse, m as readCodexErrorNotification } from "./transcript-mirror-D9rTxx2P.js";
-import { r as readModelListResult } from "./models-DD5zBdX5.js";
-import { J as mergeCodexThreadConfigs, l as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-CQ_9mAa1.js";
-import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
+import { Q as isJsonObject, o as isCodexAppServerStartSelectionChangedError } from "./shared-client-wmgNFNYp.js";
+import { _ as readCodexNotificationItem, h as isRetryableErrorNotification } from "./attempt-notifications-DdmnBMUp.js";
+import { x as resolveCodexAppServerRuntimeOptions } from "./session-binding-ZSMX1omP.js";
+import { Q as mergeCodexThreadConfigs, d as buildCodexRingZeroThreadConfigPatch, f as buildCodexRuntimeThreadConfig, l as assertCodexRingZeroHasNoManagedHooks, p as readCodexInheritedMcpServerNames, u as attestCodexRingZeroThreadHasNoMcpServers } from "./thread-lifecycle-cqrOlJkq.js";
+import { t as normalizeCodexResponseTokenUsage } from "./event-projector-usage-D6tE7_qD.js";
+import { C as readCodexTurnCompletedNotification, _ as assertCodexThreadStartResponse, b as readCodexErrorNotification, v as assertCodexTurnStartResponse } from "./transcript-mirror-2p7kl6e4.js";
+import { r as readModelListResult } from "./models-BNeMlHgg.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -15,7 +15,7 @@ const CODEX_PRIVATE_STDIO_ARGS = [
 	"--listen",
 	"stdio://"
 ];
-const OPENCLAW_CODEX_APP_SERVER_ARGS_ENV_VAR = "OPENCLAW_CODEX_APP_SERVER_ARGS";
+const CODEX_APP_SERVER_ARGS_ENV_KEY = "OPENCLAW_CODEX_APP_SERVER_ARGS";
 const CODEX_BOUNDED_THREAD_CONFIG = {
 	"features.multi_agent": false,
 	"features.apps": false,
@@ -28,6 +28,10 @@ const CODEX_PRIVATE_BOUNDED_THREAD_CONFIG = {
 	"features.hooks": false,
 	notify: []
 };
+const CODEX_SETTLED_FINALIZER_THREAD_CONFIG = {
+	"skills.include_instructions": false,
+	include_environment_context: false
+};
 async function runBoundedCodexAppServerTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({
 		pluginConfig: params.options.pluginConfig,
@@ -62,7 +66,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		agentDir,
 		config: params.config,
 		timeoutMs
-	}) : await import("./shared-client-CSXLtCLE.js").then((n) => n.f).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	}) : await import("./shared-client-wmgNFNYp.js").then((n) => n.f).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions,
 		timeoutMs,
 		authProfileId: params.profile,
@@ -87,6 +91,8 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 			timeoutMs,
 			signal: abortController.signal
 		});
+		const inheritedMcpServerNames = params.requireNoExternalCapabilities ? await readCodexInheritedMcpServerNames(client, workspace.cwd, abortController.signal) : [];
+		if (params.requireNoExternalCapabilities) await assertCodexRingZeroHasNoManagedHooks(client, abortController.signal);
 		const thread = assertCodexThreadStartResponse(await client.request("thread/start", {
 			model,
 			modelProvider: "openai",
@@ -94,8 +100,9 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 			approvalPolicy: "on-request",
 			sandbox: "read-only",
 			serviceName: "OpenClaw",
+			...params.requireNoExternalCapabilities ? { baseInstructions: "" } : {},
 			developerInstructions: params.developerInstructions,
-			config: buildCodexRuntimeThreadConfig(resolveBoundedThreadConfig(params, workspace), { nativeCodeModeEnabled: false }),
+			config: buildCodexRuntimeThreadConfig(resolveBoundedThreadConfig(params, workspace, inheritedMcpServerNames), { nativeCodeModeEnabled: false }),
 			environments: [],
 			dynamicTools: [],
 			experimentalRawEvents: true,
@@ -104,6 +111,14 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 			timeoutMs,
 			signal: abortController.signal
 		}));
+		if (params.requireNoExternalCapabilities) await attestCodexRingZeroThreadHasNoMcpServers(client, thread.thread.id, abortController.signal);
+		if (params.historyItems?.length) await client.request("thread/inject_items", {
+			threadId: thread.thread.id,
+			items: params.historyItems
+		}, {
+			timeoutMs,
+			signal: abortController.signal
+		});
 		const collector = createCodexBoundedTurnCollector(thread.thread.id, params.taskLabel);
 		const cleanup = client.addNotificationHandler(collector.handleNotification);
 		const requestCleanup = client.addRequestHandler(createCodexBoundedApprovalHandler(params.taskLabel));
@@ -144,15 +159,17 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 	});
 	throw new Error("Codex bounded turn selection retry exited unexpectedly");
 }
-function resolveBoundedThreadConfig(params, workspace) {
+function resolveBoundedThreadConfig(params, workspace, inheritedMcpServerNames) {
 	const boundedConfig = mergeCodexThreadConfigs(CODEX_BOUNDED_THREAD_CONFIG, params.threadConfig) ?? CODEX_BOUNDED_THREAD_CONFIG;
-	return workspace.codexHome ? mergeCodexThreadConfigs(boundedConfig, CODEX_PRIVATE_BOUNDED_THREAD_CONFIG) ?? boundedConfig : boundedConfig;
+	const privateConfig = workspace.codexHome ? mergeCodexThreadConfigs(boundedConfig, CODEX_PRIVATE_BOUNDED_THREAD_CONFIG) ?? boundedConfig : boundedConfig;
+	if (!params.requireNoExternalCapabilities) return privateConfig;
+	return mergeCodexThreadConfigs(privateConfig, CODEX_SETTLED_FINALIZER_THREAD_CONFIG, buildCodexRingZeroThreadConfigPatch({ toolsAllow: ["openclaw"] }, true, inheritedMcpServerNames)) ?? privateConfig;
 }
 function buildPrivateCodexAppServerStartOptions(start, codexHome) {
-	const privateEnv = Object.fromEntries(Object.entries(start.env ?? {}).filter(([name]) => name.trim().toUpperCase() !== OPENCLAW_CODEX_APP_SERVER_ARGS_ENV_VAR));
+	const privateEnv = Object.fromEntries(Object.entries(start.env ?? {}).filter(([name]) => name.trim().toUpperCase() !== CODEX_APP_SERVER_ARGS_ENV_KEY));
 	const clearEnv = (start.clearEnv ?? []).filter((name) => {
 		const normalized = name.trim().toUpperCase();
-		return normalized !== "CODEX_HOME" && normalized !== OPENCLAW_CODEX_APP_SERVER_ARGS_ENV_VAR;
+		return normalized !== "CODEX_HOME" && normalized !== CODEX_APP_SERVER_ARGS_ENV_KEY;
 	});
 	return {
 		...start,
@@ -161,7 +178,7 @@ function buildPrivateCodexAppServerStartOptions(start, codexHome) {
 			...privateEnv,
 			CODEX_HOME: codexHome
 		},
-		clearEnv: [...clearEnv, OPENCLAW_CODEX_APP_SERVER_ARGS_ENV_VAR]
+		clearEnv: [...clearEnv, CODEX_APP_SERVER_ARGS_ENV_KEY]
 	};
 }
 function createCodexBoundedApprovalHandler(taskLabel) {
@@ -207,6 +224,7 @@ function createCodexBoundedTurnCollector(threadId, taskLabel) {
 	let turnId;
 	let completedTurn;
 	let promptError;
+	let responseUsage;
 	const pending = [];
 	const completedItems = /* @__PURE__ */ new Map();
 	const assistantTextByItem = /* @__PURE__ */ new Map();
@@ -242,12 +260,18 @@ function createCodexBoundedTurnCollector(threadId, taskLabel) {
 			rememberAssistantText(itemId, `${assistantTextByItem.get(itemId) ?? ""}${delta}`);
 			return;
 		}
+		if (notification.method === "rawResponse/completed") {
+			const usage = isJsonObject(params.usage) ? params.usage : void 0;
+			responseUsage = usage ? normalizeCodexResponseTokenUsage(usage) : void 0;
+			return;
+		}
 		if (notification.method === "turn/completed") {
 			completedTurn = readCodexTurnCompletedNotification(notification.params)?.turn ?? completedTurn;
 			resolveCompletion?.();
 			return;
 		}
 		if (notification.method === "error") {
+			if (isRetryableErrorNotification(notification.params)) return;
 			promptError = readCodexErrorNotification(notification.params)?.error.message ?? `codex app-server ${taskLabel} turn failed`;
 			resolveCompletion?.();
 		}
@@ -266,6 +290,7 @@ function createCodexBoundedTurnCollector(threadId, taskLabel) {
 			});
 			if (promptError) throw new Error(promptError);
 			if (completedTurn?.status === "failed") throw new Error(completedTurn.error?.message ?? `codex app-server ${taskLabel} turn failed`);
+			if (completedTurn?.status !== "completed") throw new Error(`codex app-server ${taskLabel} turn ended with status ${completedTurn?.status ?? "unknown"}`);
 			const items = collectCompletedItems(completedTurn?.items, completedItems);
 			const itemText = collectAssistantTextFromItems(items);
 			const deltaText = assistantItemOrder.map((itemId) => assistantTextByItem.get(itemId)?.trim()).filter((text) => Boolean(text)).join("\n\n").trim();
@@ -273,7 +298,8 @@ function createCodexBoundedTurnCollector(threadId, taskLabel) {
 			if (!text) throw new Error(`Codex app-server ${taskLabel} turn returned no text.`);
 			return {
 				text,
-				items
+				items,
+				...responseUsage ? { usage: responseUsage } : {}
 			};
 		}
 	};
@@ -316,170 +342,4 @@ function isTerminalTurn(turn) {
 	return turn.status === "completed" || turn.status === "interrupted" || turn.status === "failed";
 }
 //#endregion
-//#region extensions/codex/media-understanding-provider.ts
-/**
-* Codex-backed media understanding provider for bounded image description and
-* structured extraction turns.
-*/
-const CODEX_MEDIA_PROVIDER_ID = "codex";
-const DEFAULT_CODEX_IMAGE_MODEL = "gpt-5.6-sol";
-const DEFAULT_CODEX_IMAGE_PROMPT = "Describe the image.";
-/**
-* Builds the media-understanding provider that delegates image tasks to an
-* isolated Codex app-server session.
-*/
-function buildCodexMediaUnderstandingProvider(options = {}) {
-	return {
-		id: CODEX_MEDIA_PROVIDER_ID,
-		capabilities: ["image"],
-		defaultModels: { image: DEFAULT_CODEX_IMAGE_MODEL },
-		describeImage: async (req) => describeCodexImages({
-			images: [{
-				buffer: req.buffer,
-				fileName: req.fileName,
-				mime: req.mime
-			}],
-			provider: req.provider,
-			model: req.model,
-			prompt: req.prompt,
-			maxTokens: req.maxTokens,
-			timeoutMs: req.timeoutMs,
-			profile: req.profile,
-			preferredProfile: req.preferredProfile,
-			authStore: req.authStore,
-			agentDir: req.agentDir,
-			cfg: req.cfg
-		}, options),
-		describeImages: async (req) => describeCodexImages(req, options),
-		extractStructured: async (req) => extractCodexStructured(req, options)
-	};
-}
-async function describeCodexImages(req, options) {
-	const model = req.model.trim();
-	if (!model) throw new Error("Codex image understanding requires model id.");
-	const { text } = await runBoundedCodexAppServerTurn({
-		config: req.cfg,
-		model: {
-			mode: "required",
-			id: model
-		},
-		profile: req.profile,
-		timeoutMs: req.timeoutMs,
-		agentDir: req.agentDir,
-		authProfileStore: req.authStore,
-		options,
-		taskLabel: "image understanding",
-		developerInstructions: "You are OpenClaw's bounded image-understanding worker. Describe only the provided image content. Do not call tools, edit files, or ask follow-up questions.",
-		input: [{
-			type: "text",
-			text: buildCodexImagePrompt(req),
-			text_elements: []
-		}, ...req.images.map((image) => ({
-			type: "image",
-			url: `data:${image.mime ?? "image/png"};base64,${image.buffer.toString("base64")}`
-		}))],
-		requiredModalities: ["text", "image"],
-		isolation: "configured-transport"
-	});
-	return {
-		text,
-		model
-	};
-}
-async function extractCodexStructured(req, options) {
-	const model = req.model.trim();
-	if (!model) throw new Error("Codex structured extraction requires model id.");
-	if (!req.instructions.trim()) throw new Error("Codex structured extraction requires instructions.");
-	if (req.input.length === 0) throw new Error("Codex structured extraction requires at least one input.");
-	if (!req.input.some((entry) => entry.type === "image")) throw new Error("Codex structured extraction requires at least one image input.");
-	const { text } = await runBoundedCodexAppServerTurn({
-		config: req.cfg,
-		model: {
-			mode: "required",
-			id: model
-		},
-		profile: req.profile,
-		timeoutMs: req.timeoutMs,
-		agentDir: req.agentDir,
-		authProfileStore: req.authStore,
-		options,
-		taskLabel: "structured extraction",
-		developerInstructions: "You are OpenClaw's bounded structured-extraction worker. Return only the requested extraction. Do not call tools, edit files, ask follow-up questions, or include secrets.",
-		input: buildCodexStructuredInput(req),
-		requiredModalities: requiredStructuredModalities(),
-		isolation: "configured-transport"
-	});
-	return normalizeStructuredExtractionResult({
-		text,
-		model,
-		provider: req.provider,
-		req
-	});
-}
-function buildCodexImagePrompt(req) {
-	const prompt = req.prompt?.trim() || DEFAULT_CODEX_IMAGE_PROMPT;
-	if (req.images.length <= 1) return prompt;
-	return `${prompt}\n\nAnalyze all ${req.images.length} images together.`;
-}
-function requiredStructuredModalities() {
-	return ["text", "image"];
-}
-function buildCodexStructuredInput(req) {
-	return [{
-		type: "text",
-		text: buildStructuredExtractionPrompt(req),
-		text_elements: []
-	}, ...req.input.map((entry) => {
-		if (entry.type === "text") return {
-			type: "text",
-			text: entry.text,
-			text_elements: []
-		};
-		return {
-			type: "image",
-			url: `data:${entry.mime ?? "image/png"};base64,${entry.buffer.toString("base64")}`
-		};
-	})];
-}
-function buildStructuredExtractionPrompt(req) {
-	return [
-		req.instructions.trim(),
-		req.schemaName ? `Schema name: ${req.schemaName}` : void 0,
-		req.jsonSchema ? `JSON schema:\n${JSON.stringify(req.jsonSchema)}` : void 0,
-		req.jsonMode === false ? "Return the extraction as concise text." : "Return valid JSON only. Do not wrap the JSON in Markdown fences."
-	].filter((part) => Boolean(part)).join("\n\n");
-}
-function isJsonSchemaObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function normalizeStructuredExtractionResult(params) {
-	const result = {
-		text: params.text,
-		model: params.model,
-		provider: params.provider,
-		contentType: params.req.jsonMode === false ? "text" : "json"
-	};
-	if (params.req.jsonMode !== false) {
-		try {
-			result.parsed = JSON.parse(params.text);
-		} catch {
-			throw new Error("Codex structured extraction returned invalid JSON.");
-		}
-		if (isJsonSchemaObject(params.req.jsonSchema)) {
-			const validation = validateJsonSchemaValue({
-				schema: params.req.jsonSchema,
-				cacheKey: "codex.media-understanding.extractStructured",
-				value: result.parsed,
-				cache: false
-			});
-			if (!validation.ok) {
-				const message = validation.errors.map((error) => error.text).join("; ") || "invalid";
-				throw new Error(`Codex structured extraction JSON did not match schema: ${message}`);
-			}
-			result.parsed = validation.value;
-		}
-	}
-	return result;
-}
-//#endregion
-export { runBoundedCodexAppServerTurn as n, buildCodexMediaUnderstandingProvider as t };
+export { runBoundedCodexAppServerTurn as t };

package/dist/capabilities-CLICvTxf.js

@@ -0,0 +1,36 @@
+import { R as CodexAppServerRpcError } from "./shared-client-wmgNFNYp.js";
+//#region extensions/codex/src/app-server/capabilities.ts
+/**
+* Capability helpers for optional Codex app-server control-plane methods.
+*/
+/** Known app-server methods used by OpenClaw control surfaces. */
+const CODEX_CONTROL_METHODS = {
+	account: "account/read",
+	compact: "thread/compact/start",
+	feedback: "feedback/upload",
+	forkThread: "thread/fork",
+	listMcpServers: "mcpServerStatus/list",
+	listSkills: "skills/list",
+	listThreads: "thread/list",
+	listThreadTurns: "thread/turns/list",
+	readThread: "thread/read",
+	rateLimits: "account/rateLimits/read",
+	archiveThread: "thread/archive",
+	renameThread: "thread/name/set",
+	resumeThread: "thread/resume",
+	review: "review/start",
+	unarchiveThread: "thread/unarchive",
+	getThreadGoal: "thread/goal/get",
+	setThreadGoal: "thread/goal/set",
+	clearThreadGoal: "thread/goal/clear"
+};
+/** Formats unsupported control calls differently from ordinary RPC failures. */
+function describeControlFailure(error) {
+	if (isUnsupportedControlError(error)) return "unsupported by this Codex app-server";
+	return error instanceof Error ? error.message : String(error);
+}
+function isUnsupportedControlError(error) {
+	return error instanceof CodexAppServerRpcError && error.code === -32601;
+}
+//#endregion
+export { describeControlFailure as n, CODEX_CONTROL_METHODS as t };

package/dist/cli-metadata.js

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/codex/cli-metadata.ts
 function registerCodexCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./session-cli-Bxk3-Wqz.js");
+		const { registerCodexSessionCli } = await import("./session-cli-CYJTfRLG.js");
 		registerCodexSessionCli(program);
 	}, { descriptors: [{
 		name: "codex",

package/dist/{command-formatters-NCTL7A2q.js → command-formatters-DgADqnHa.js}

@@ -1,39 +1,5 @@
-import { R as CodexAppServerRpcError, Z as isJsonObject } from "./shared-client-CSXLtCLE.js";
-import { c as summarizeCodexRateLimits, o as summarizeCodexAccountRateLimits, r as hasCodexRateLimitSnapshots } from "./rate-limits-CqhWQ2R9.js";
-//#region extensions/codex/src/app-server/capabilities.ts
-/**
-* Capability helpers for optional Codex app-server control-plane methods.
-*/
-/** Known app-server methods used by OpenClaw control surfaces. */
-const CODEX_CONTROL_METHODS = {
-	account: "account/read",
-	compact: "thread/compact/start",
-	feedback: "feedback/upload",
-	forkThread: "thread/fork",
-	listMcpServers: "mcpServerStatus/list",
-	listSkills: "skills/list",
-	listThreads: "thread/list",
-	listThreadTurns: "thread/turns/list",
-	readThread: "thread/read",
-	rateLimits: "account/rateLimits/read",
-	archiveThread: "thread/archive",
-	renameThread: "thread/name/set",
-	resumeThread: "thread/resume",
-	review: "review/start",
-	unarchiveThread: "thread/unarchive",
-	getThreadGoal: "thread/goal/get",
-	setThreadGoal: "thread/goal/set",
-	clearThreadGoal: "thread/goal/clear"
-};
-/** Formats unsupported control calls differently from ordinary RPC failures. */
-function describeControlFailure(error) {
-	if (isUnsupportedControlError(error)) return "unsupported by this Codex app-server";
-	return error instanceof Error ? error.message : String(error);
-}
-function isUnsupportedControlError(error) {
-	return error instanceof CodexAppServerRpcError && error.code === -32601;
-}
-//#endregion
+import { Q as isJsonObject } from "./shared-client-wmgNFNYp.js";
+import { c as summarizeCodexRateLimits, o as summarizeCodexAccountRateLimits, r as hasCodexRateLimitSnapshots } from "./rate-limits-D0IJT-a6.js";
 //#region extensions/codex/src/command-formatters.ts
 /** Formats the combined `/codex status` probe result. */
 function formatCodexStatus(probes) {
@@ -312,4 +278,4 @@ function readString(record, key) {
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 //#endregion
-export { formatComputerUseStatus as a, formatSkills as c, CODEX_CONTROL_METHODS as d, describeControlFailure as f, formatCodexStatus as i, formatThreads as l, formatAccount as n, formatList as o, formatCodexDisplayText as r, formatModels as s, buildHelp as t, readString as u };
+export { formatComputerUseStatus as a, formatSkills as c, formatCodexStatus as i, formatThreads as l, formatAccount as n, formatList as o, formatCodexDisplayText as r, formatModels as s, buildHelp as t, readString as u };

package/dist/{command-handlers-DtFbZiba.js → command-handlers-l_lVPNlB.js}

@@ -1,15 +1,16 @@
-import { S as resolveCodexAppServerAuthProfileIdForAgent, Z as isJsonObject } from "./shared-client-CSXLtCLE.js";
-import { _ as isCodexFastServiceTier, c as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, s as reclaimCurrentCodexSessionGeneration } from "./session-binding-Bmt20HfB.js";
-import { u as assertCodexThreadResumeResponse } from "./transcript-mirror-D9rTxx2P.js";
-import { t as listAllCodexAppServerModels } from "./models-DD5zBdX5.js";
-import { a as formatComputerUseStatus, c as formatSkills, d as CODEX_CONTROL_METHODS, i as formatCodexStatus, l as formatThreads, n as formatAccount, o as formatList, r as formatCodexDisplayText, s as formatModels, t as buildHelp, u as readString$1 } from "./command-formatters-NCTL7A2q.js";
-import { s as summarizeCodexAccountUsage } from "./rate-limits-CqhWQ2R9.js";
+import { Q as isJsonObject, S as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-wmgNFNYp.js";
+import { c as reclaimCurrentCodexSessionGeneration, i as createCodexSessionGenerationSupersededError, l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider, v as isCodexFastServiceTier } from "./session-binding-ZSMX1omP.js";
+import { g as assertCodexThreadResumeResponse } from "./transcript-mirror-2p7kl6e4.js";
+import { t as listAllCodexAppServerModels } from "./models-BNeMlHgg.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-CLICvTxf.js";
+import { s as summarizeCodexAccountUsage } from "./rate-limits-D0IJT-a6.js";
+import { a as formatComputerUseStatus, c as formatSkills, i as formatCodexStatus, l as formatThreads, n as formatAccount, o as formatList, r as formatCodexDisplayText, s as formatModels, t as buildHelp, u as readString$1 } from "./command-formatters-DgADqnHa.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-B0s3aIjT.js";
+import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-sNPsbTCP.js";
 import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-BHRpYbX3.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-C8DVQ_Bq.js";
-import { c as requestOptions, l as safeCodexControlRequest, o as codexControlRequest, p as formatCodexCliSessions, s as readCodexStatusProbes } from "./session-catalog-CA7R-hX2.js";
-import { i as readCodexComputerUseStatus, n as installCodexComputerUse } from "./computer-use-C7x4ZaqR.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-BGLixv5_.js";
+import { c as requestOptions, l as safeCodexControlRequest, o as codexControlRequest, p as formatCodexCliSessions, s as readCodexStatusProbes } from "./session-catalog-DsKaezgR.js";
+import { i as readCodexComputerUseStatus, n as installCodexComputerUse } from "./computer-use-Ip1-QGa-.js";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import crypto from "node:crypto";
@@ -1017,7 +1018,7 @@ async function resumeThread(deps, ctx, pluginConfig, args) {
 			bindingStore: deps.bindingStore,
 			identity,
 			config: ctx.config
-		})) throw new Error(`Codex session generation is no longer current: ${identity.sessionId}`);
+		})) throw createCodexSessionGenerationSupersededError(identity.sessionId);
 		const currentBinding = await deps.bindingStore.read(identity);
 		assertCodexBindingMayBeReplaced(currentBinding, "attaching a different resumed thread");
 		const authProfileId = resolveCodexAppServerAuthProfileIdForAgent({

package/dist/{compact-Kgy26gIM.js → compact-CC5KhBzX.js}

@@ -1,8 +1,8 @@
-import { R as CodexAppServerRpcError, Z as isJsonObject, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CSXLtCLE.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-Ecjyzufe.js";
-import { c as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-Bmt20HfB.js";
+import { Q as isJsonObject, R as CodexAppServerRpcError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient } from "./shared-client-wmgNFNYp.js";
+import { _ as readCodexNotificationItem } from "./attempt-notifications-DdmnBMUp.js";
+import { l as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-ZSMX1omP.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-C8DVQ_Bq.js";
+import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-BGLixv5_.js";
 import { resolveAgentDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
 import { embeddedAgentLog, resolveCompactionTimeoutMs } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/compact.ts
@@ -261,6 +261,7 @@ function readIgnoredCompactionOverridePaths(params) {
 		const inheritedProvider = !localProvider && typeof entry.inheritedRecord?.provider === "string" ? entry.inheritedRecord.provider.trim() : "";
 		const providerPath = localProvider ? `${entry.path}.compaction.provider` : inheritedProvider && entry.inheritedPath ? `${entry.inheritedPath}.compaction.provider` : void 0;
 		if (typeof entry.record.model === "string" && entry.record.model.trim()) ignored.add(`${entry.path}.compaction.model`);
+		if (typeof entry.record.thinkingLevel === "string" && entry.record.thinkingLevel.trim()) ignored.add(`${entry.path}.compaction.thinkingLevel`);
 		if (providerPath) ignored.add(providerPath);
 	}
 	return [...ignored];

package/dist/{computer-use-C7x4ZaqR.js → computer-use-Ip1-QGa-.js}

@@ -1,7 +1,7 @@
-import { E as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, H as isCodexAppServerConnectionClosedError, U as isCodexAppServerIndeterminateRequestCancellationError, W as isCodexAppServerIndeterminateTransportError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, h as acquireCodexNativeConfigFence, l as resolveCodexNativeConfigFenceKey } from "./shared-client-CSXLtCLE.js";
-import { C as resolveCodexComputerUseConfig, b as resolveCodexAppServerRuntimeOptions } from "./session-binding-Bmt20HfB.js";
-import { f as describeControlFailure } from "./command-formatters-NCTL7A2q.js";
-import { r as requestCodexAppServerJson } from "./request-9yf9pZjf.js";
+import { E as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, H as isCodexAppServerConnectionClosedError, U as isCodexAppServerIndeterminateRequestCancellationError, W as isCodexAppServerIndeterminateTransportError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, h as acquireCodexNativeConfigFence, l as resolveCodexNativeConfigFenceKey } from "./shared-client-wmgNFNYp.js";
+import { w as resolveCodexComputerUseConfig, x as resolveCodexAppServerRuntimeOptions } from "./session-binding-ZSMX1omP.js";
+import { n as describeControlFailure } from "./capabilities-CLICvTxf.js";
+import { r as requestCodexAppServerJson } from "./request-BTccUTD3.js";
 import { existsSync } from "node:fs";
 import { runExec } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/codex/src/app-server/computer-use.ts

package/dist/{conversation-control-B0s3aIjT.js → conversation-control-sNPsbTCP.js}

@@ -1,8 +1,9 @@
-import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, s as releaseCodexAppServerClientLease } from "./shared-client-CSXLtCLE.js";
-import { _ as isCodexFastServiceTier, a as isCodexAppServerNativeAuthProfile, b as resolveCodexAppServerRuntimeOptions, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, w as resolveCodexModelBackedReviewerPolicyContext } from "./session-binding-Bmt20HfB.js";
-import { _ as resolveCodexBindingModelProviderFallback, h as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-CQ_9mAa1.js";
-import { d as CODEX_CONTROL_METHODS, r as formatCodexDisplayText } from "./command-formatters-NCTL7A2q.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-C8DVQ_Bq.js";
+import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, s as releaseCodexAppServerClientLease } from "./shared-client-wmgNFNYp.js";
+import { T as resolveCodexModelBackedReviewerPolicyContext, o as isCodexAppServerNativeAuthProfile, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider, v as isCodexFastServiceTier, x as resolveCodexAppServerRuntimeOptions } from "./session-binding-ZSMX1omP.js";
+import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-cqrOlJkq.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-CLICvTxf.js";
+import { r as formatCodexDisplayText } from "./command-formatters-DgADqnHa.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-BGLixv5_.js";
 import { ModelSelectionLockedError } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";

package/dist/doctor-contract-api.js

@@ -302,7 +302,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Bmt20HfB.js").then((n) => n.l), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-ZSMX1omP.js").then((n) => n.u), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),