@openclaw/codex 2026.7.2-beta.4 → 2026.7.2-beta.5

package/dist/{compact-CC5KhBzX.js → compact-dEN49UH6.js}

@@ -1,10 +1,10 @@
-import { Q as isJsonObject, R as CodexAppServerRpcError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient } from "./shared-client-wmgNFNYp.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-DdmnBMUp.js";
-import { l as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-ZSMX1omP.js";
+import { V as isJsonObject, _ as CodexAppServerRpcError, a as getLeasedSharedCodexAppServerClient, l as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BVKE40c-.js";
+import { l as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-DlVQ-Pxs.js";
+import { _ as readCodexNotificationItem } from "./attempt-notifications-CMR2_fmR.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-BGLixv5_.js";
-import { resolveAgentDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
+import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-Bj_Ak_jI.js";
 import { embeddedAgentLog, resolveCompactionTimeoutMs } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { resolveAgentDir as resolveAgentDir$1, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 /**
 * Native Codex app-server compaction bridge for bound OpenClaw sessions.
@@ -353,7 +353,7 @@ async function compactCodexNativeThread(params, options) {
 			authProfileId: requestedAuthProfileId ?? binding.authProfileId,
 			pluginConfig: options.pluginConfig,
 			config,
-			agentDir: resolveAgentDir(config, agentId)
+			agentDir: resolveAgentDir$1(config, agentId)
 		});
 	} catch (error) {
 		return {
@@ -371,7 +371,7 @@ async function compactCodexNativeThread(params, options) {
 	const shouldReleaseDefaultLease = !options.clientFactory;
 	const clientFactory = options.clientFactory ?? getLeasedSharedCodexAppServerClient;
 	const runtimeAuthPlan = params.runtimeAuthPlan ?? params.runtimePlan?.auth;
-	const usesPreparedApiKey = !usesSupervisionConnection && runtimeAuthPlan?.modelRoute?.authRequirement === "api-key";
+	const usesPreparedApiKey = !usesSupervisionConnection && appServer.start.homeScope !== "user" && runtimeAuthPlan?.modelRoute?.authRequirement === "api-key";
 	const preparedApiKey = usesPreparedApiKey ? params.resolvedApiKey?.trim() : void 0;
 	if (usesPreparedApiKey && !preparedApiKey) return {
 		ok: false,

package/dist/{computer-use-Ip1-QGa-.js → computer-use-BjGylO-E.js}

@@ -1,7 +1,7 @@
-import { E as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, H as isCodexAppServerConnectionClosedError, U as isCodexAppServerIndeterminateRequestCancellationError, W as isCodexAppServerIndeterminateTransportError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, h as acquireCodexNativeConfigFence, l as resolveCodexNativeConfigFenceKey } from "./shared-client-wmgNFNYp.js";
-import { w as resolveCodexComputerUseConfig, x as resolveCodexAppServerRuntimeOptions } from "./session-binding-ZSMX1omP.js";
-import { n as describeControlFailure } from "./capabilities-CLICvTxf.js";
-import { r as requestCodexAppServerJson } from "./request-BTccUTD3.js";
+import { C as isCodexAppServerIndeterminateTransportError, H as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, S as isCodexAppServerIndeterminateRequestCancellationError, a as getLeasedSharedCodexAppServerClient, g as acquireCodexNativeConfigFence, l as releaseLeasedSharedCodexAppServerClient, u as resolveCodexNativeConfigFenceKey, x as isCodexAppServerConnectionClosedError } from "./shared-client-BVKE40c-.js";
+import { h as resolveCodexComputerUseConfig, p as resolveCodexAppServerRuntimeOptions } from "./session-binding-DlVQ-Pxs.js";
+import { n as describeControlFailure } from "./capabilities-BHRSI6Cn.js";
+import { r as requestCodexAppServerJson } from "./request-CXpPennK.js";
 import { existsSync } from "node:fs";
 import { runExec } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/codex/src/app-server/computer-use.ts
@@ -113,6 +113,7 @@ async function inspectCodexComputerUse(params) {
 			if (!runtime) throw new Error("Computer Use install could not resolve its app-server runtime");
 			client = await getLeasedSharedCodexAppServerClient({
 				startOptions: runtime.start,
+				pluginConfig: params.pluginConfig,
 				timeoutMs: params.timeoutMs ?? runtime.requestTimeoutMs,
 				config: params.config,
 				agentDir: params.agentDir,
@@ -213,9 +214,11 @@ async function ensureComputerUsePlugin(params) {
 }
 async function readComputerUseTools(params) {
 	let server = await readMcpServerStatus(params.request, params.config.mcpServerName);
-	if (!server && params.installPlugin) {
+	let tools = Object.keys(server?.tools ?? {}).toSorted();
+	if ((!server || tools.length === 0) && params.installPlugin) {
 		await reloadMcpServers(params.request);
 		server = await readMcpServerStatus(params.request, params.config.mcpServerName);
+		tools = Object.keys(server?.tools ?? {}).toSorted();
 	}
 	if (!server) return statusFromPlugin({
 		config: params.config,
@@ -224,10 +227,17 @@ async function readComputerUseTools(params) {
 		reason: "mcp_missing",
 		message: `Computer Use is installed, but the ${params.config.mcpServerName} MCP server is not available.`
 	});
+	if (tools.length === 0) return statusFromPlugin({
+		config: params.config,
+		plugin: params.plugin,
+		tools,
+		reason: "mcp_missing",
+		message: `Computer Use is installed, but the ${params.config.mcpServerName} MCP server exposes no tools.`
+	});
 	const status = statusFromPlugin({
 		config: params.config,
 		plugin: params.plugin,
-		tools: Object.keys(server.tools).toSorted(),
+		tools,
 		reason: "ready",
 		message: "Computer Use is ready."
 	});

package/dist/{conversation-control-sNPsbTCP.js → conversation-control-DE7d9DOj.js}

@@ -1,9 +1,9 @@
-import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, s as releaseCodexAppServerClientLease } from "./shared-client-wmgNFNYp.js";
-import { T as resolveCodexModelBackedReviewerPolicyContext, o as isCodexAppServerNativeAuthProfile, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider, v as isCodexFastServiceTier, x as resolveCodexAppServerRuntimeOptions } from "./session-binding-ZSMX1omP.js";
-import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-cqrOlJkq.js";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-CLICvTxf.js";
-import { r as formatCodexDisplayText } from "./command-formatters-DgADqnHa.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-BGLixv5_.js";
+import { a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, l as releaseLeasedSharedCodexAppServerClient, m as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-BVKE40c-.js";
+import { O as isCodexFastServiceTier, S as resolveCodexModelBackedReviewerPolicyContext, o as isCodexAppServerNativeAuthProfile, p as resolveCodexAppServerRuntimeOptions, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-DlVQ-Pxs.js";
+import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-DRg_FdzC.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-BHRSI6Cn.js";
+import { r as formatCodexDisplayText } from "./command-formatters-ico4ZFnk.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-Bj_Ak_jI.js";
 import { ModelSelectionLockedError } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";

package/dist/doctor-contract-api.js

@@ -3,37 +3,11 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { listAgentIds, resolveAgentDir, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";
 import { isDeepStrictEqual } from "node:util";
+import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { canonicalPathFromExistingAncestor, isPathInside, pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
-//#region extensions/codex/src/migration/session-binding-sidecar-archive.ts
-async function pathExists$1(filePath) {
-	try {
-		await fs.access(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-}
-async function firstFreeArchivePath(sourcePath) {
-	for (let index = 2;; index++) {
-		const candidate = `${sourcePath}.migrated.${index}`;
-		if (!await pathExists$1(candidate)) return candidate;
-	}
-}
-async function archiveBindingSidecar(sourcePath) {
-	const archivePath = `${sourcePath}.migrated`;
-	if (!await pathExists$1(archivePath)) {
-		await fs.rename(sourcePath, archivePath);
-		return;
-	}
-	const [sourceBytes, archiveBytes] = await Promise.all([fs.readFile(sourcePath), fs.readFile(archivePath)]);
-	if (sourceBytes.equals(archiveBytes)) {
-		await fs.rm(sourcePath, { force: true });
-		return;
-	}
-	await fs.rename(sourcePath, await firstFreeArchivePath(sourcePath));
-}
-//#endregion
+import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor";
 //#region extensions/codex/src/migration/session-binding-sidecars.ts
 const LEGACY_BINDING_SUFFIX = ".codex-app-server.json";
 const CODEX_AGENT_HARNESS_ID = "codex";
@@ -49,9 +23,9 @@ const LEGACY_BINDING_LOCK_OPTIONS = {
 };
 async function collectSessionSurfaces(params) {
 	const surfaces = /* @__PURE__ */ new Map();
-	const stateRoot = await canonicalizePath(params.stateDir);
+	const stateRoot = await canonicalPathFromExistingAncestor(params.stateDir);
 	const add = async (root, storePath, agentId, scan) => {
-		const canonicalRoot = await canonicalizePath(root);
+		const canonicalRoot = await canonicalPathFromExistingAncestor(root);
 		const surface = surfaces.get(canonicalRoot) ?? {
 			root: canonicalRoot,
 			scan: false,
@@ -81,7 +55,7 @@ async function collectSessionSurfaces(params) {
 			env: params.env
 		});
 		const root = path.dirname(storePath);
-		await add(root, storePath, agentId, isPathWithin(stateRoot, await canonicalizePath(root)));
+		await add(root, storePath, agentId, isPathInside(stateRoot, await canonicalPathFromExistingAncestor(root)));
 	}
 	const legacyRoot = path.join(params.stateDir, "sessions");
 	const defaultAgentId = resolveSessionAgentIds({ config: params.config }).defaultAgentId;
@@ -92,7 +66,7 @@ async function collectLegacyBindingSources(params, options = {}) {
 	const surfaces = await collectSessionSurfaces(params);
 	const sources = /* @__PURE__ */ new Map();
 	const addSource = async (sidecarPath, surface) => {
-		const canonicalSidecar = await canonicalizePath(sidecarPath);
+		const canonicalSidecar = await canonicalPathFromExistingAncestor(sidecarPath);
 		const source = sources.get(canonicalSidecar) ?? {
 			sidecarPath: canonicalSidecar,
 			transcriptPath: sidecarPath.slice(0, -22),
@@ -167,7 +141,7 @@ async function* iterateIndexedSidecars(surface) {
 				continue;
 			}
 			const sidecarPath = `${transcriptPath}${LEGACY_BINDING_SUFFIX}`;
-			if (await isRegularFile(sidecarPath)) yield sidecarPath;
+			if (await legacyStateFileExists(sidecarPath)) yield sidecarPath;
 		}
 	}
 }
@@ -190,7 +164,7 @@ async function* walkSidecars(root) {
 	}
 }
 async function collectBindingOwners(sources, surfaces, params) {
-	const sourcePaths = new Set(await Promise.all(sources.map((source) => canonicalizePath(source.transcriptPath))));
+	const sourcePaths = new Set(await Promise.all(sources.map((source) => canonicalPathFromExistingAncestor(source.transcriptPath))));
 	const owners = /* @__PURE__ */ new Map();
 	const storePaths = new Set(surfaces.flatMap((surface) => [...surface.storePaths]));
 	const storeAgentIds = /* @__PURE__ */ new Map();
@@ -201,7 +175,7 @@ async function collectBindingOwners(sources, surfaces, params) {
 	}
 	const failures = [];
 	for (const storePath of storePaths) {
-		const canonicalStorePath = await canonicalizePath(storePath);
+		const canonicalStorePath = await canonicalPathFromExistingAncestor(storePath);
 		const index = await readLegacySessionIndex(storePath);
 		if ("failure" in index) {
 			failures.push(index.failure);
@@ -219,7 +193,7 @@ async function collectBindingOwners(sources, surfaces, params) {
 			let canonicalLegacyTranscriptPath;
 			try {
 				legacyTranscriptPath = await resolveLegacySessionFileLocator(sessionsDir, entry, sessionId);
-				canonicalLegacyTranscriptPath = await canonicalizePath(legacyTranscriptPath);
+				canonicalLegacyTranscriptPath = await canonicalPathFromExistingAncestor(legacyTranscriptPath);
 			} catch {
 				failures.push(`session index ${storePath} has an invalid locator for ${sessionKey}`);
 				continue;
@@ -256,8 +230,8 @@ async function resolveLegacySessionFileLocator(sessionsDir, entry, sessionId) {
 	const sessionFile = entry.sessionFile?.trim();
 	if (!sessionFile) return fallback;
 	const candidate = path.resolve(base, sessionFile);
-	const [canonicalBase, canonicalCandidate] = await Promise.all([canonicalizePathForContainment(base), canonicalizePathForContainment(candidate)]);
-	if (!isPathWithin(canonicalBase, canonicalCandidate)) throw new Error("legacy session file locator escapes its session directory");
+	const [canonicalBase, canonicalCandidate] = await Promise.all([canonicalPathFromExistingAncestor(base), canonicalPathFromExistingAncestor(candidate)]);
+	if (!isPathInside(canonicalBase, canonicalCandidate)) throw new Error("legacy session file locator escapes its session directory");
 	return candidate;
 }
 function resolveLegacyBindingOwnerAgentId(params) {
@@ -302,7 +276,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-ZSMX1omP.js").then((n) => n.u), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-DlVQ-Pxs.js").then((n) => n.u), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -402,7 +376,14 @@ async function migrateSource(source, candidates, params, store) {
 				}
 				for (const entry of entries) if (!hasExpected(await store.lookup(entry.key), entry.value)) return retain(`canonical plugin state changed at ${entry.key}`);
 			}
-			await archiveBindingSidecar(source.sidecarPath);
+			const archiveWarnings = [];
+			await archiveLegacyStateSource({
+				filePath: source.sidecarPath,
+				label: "Codex app-server binding",
+				changes: [],
+				warnings: archiveWarnings
+			});
+			if (archiveWarnings.length > 0 && await pathExists(source.sidecarPath)) return retain(archiveWarnings.join("; "));
 			return {
 				archived: true,
 				importedKeys
@@ -427,7 +408,7 @@ async function recordSessionOwner(owner, env) {
 	} catch {
 		return "its session owner changed before Codex ownership could be recorded";
 	}
-	if (await canonicalizePath(currentTranscriptPath) !== await canonicalizePath(owner.transcriptPath) || currentOwner.entry.lifecycleRevision !== owner.lifecycleRevision) return "its session owner changed before Codex ownership could be recorded";
+	if (await canonicalPathFromExistingAncestor(currentTranscriptPath) !== await canonicalPathFromExistingAncestor(owner.transcriptPath) || currentOwner.entry.lifecycleRevision !== owner.lifecycleRevision) return "its session owner changed before Codex ownership could be recorded";
 	const legacyHarnessId = currentOwner.entry.agentHarnessId?.trim();
 	if (currentOwner.entry.agentHarnessId !== void 0 && !legacyHarnessId) return "its session owner changed before Codex ownership could be recorded";
 	if (legacyHarnessId && legacyHarnessId !== CODEX_AGENT_HARNESS_ID) return `its session is owned by agent harness ${legacyHarnessId}`;
@@ -474,54 +455,11 @@ async function readDirectoryEntries(directory) {
 		throw error;
 	}
 }
-async function isRegularFile(filePath) {
-	try {
-		return (await fs.stat(filePath)).isFile();
-	} catch {
-		return false;
-	}
-}
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function isSafeLegacySessionId(value) {
 	if (typeof value !== "string") return false;
 	const trimmed = value.trim();
 	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
 }
-function isPathWithin(root, candidate) {
-	const relative = path.relative(root, candidate);
-	return relative === "" || relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
-}
-async function canonicalizePath(filePath) {
-	try {
-		return await fs.realpath(filePath);
-	} catch {
-		return path.resolve(filePath);
-	}
-}
-async function canonicalizePathForContainment(filePath) {
-	const resolved = path.resolve(filePath);
-	const suffix = [];
-	let probe = resolved;
-	while (true) try {
-		const realProbe = await fs.realpath(probe);
-		return suffix.length === 0 ? realProbe : path.join(realProbe, ...suffix.toReversed());
-	} catch {
-		const parent = path.dirname(probe);
-		if (parent === probe) return resolved;
-		suffix.push(path.basename(probe));
-		probe = parent;
-	}
-}
-async function pathExists(filePath) {
-	try {
-		await fs.access(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-}
 const stateMigrations = [{
 	id: "codex-app-server-sidecars-to-plugin-state",
 	label: "Codex app-server thread bindings",
@@ -554,7 +492,7 @@ const stateMigrations = [{
 		let migrated = 0;
 		let partialImports = 0;
 		for (const source of sources) {
-			const result = await migrateSource(source, ownerCollection.owners.get(await canonicalizePath(source.transcriptPath)) ?? [], params, store);
+			const result = await migrateSource(source, ownerCollection.owners.get(await canonicalPathFromExistingAncestor(source.transcriptPath)) ?? [], params, store);
 			if (result.warning) warnings.push(result.warning);
 			if (result.notice) notices.push(result.notice);
 			if (result.archived) migrated++;

package/dist/{dynamic-tools-CQI3UwqY.js → dynamic-tools-LIt9ojep.js}

@@ -1,17 +1,16 @@
-import { Q as isJsonObject, X as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE, c as releaseLeasedSharedCodexAppServerClient, j as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-wmgNFNYp.js";
-import { b as readCodexPluginConfig } from "./session-binding-ZSMX1omP.js";
-import { D as isForcedPrivateQaCodexRuntime, E as filterCodexDynamicToolsWithOpenClawShell, O as isSystemAgentOnlyCodexDynamicToolAllowlist, T as filterCodexDynamicTools, ct as readItemString, h as resolveCodexWebSearchPlan, i as invalidInlineImageText, k as normalizeCodexDynamicToolName, mt as readString$2, o as sanitizeInlineImageDataUrl, st as readItem } from "./thread-lifecycle-cqrOlJkq.js";
-import { S as readCodexTurn } from "./transcript-mirror-2p7kl6e4.js";
-import { r as formatCodexDisplayText } from "./command-formatters-DgADqnHa.js";
+import { V as isJsonObject, l as releaseLeasedSharedCodexAppServerClient, q as resolveCodexGatewayTimeoutWithGraceMs, z as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE } from "./shared-client-BVKE40c-.js";
+import { T as readCodexPluginConfig } from "./session-binding-DlVQ-Pxs.js";
+import { D as isForcedPrivateQaCodexRuntime, E as filterCodexDynamicToolsWithOpenClawShell, O as isSystemAgentOnlyCodexDynamicToolAllowlist, T as filterCodexDynamicTools, et as readItem, h as resolveCodexWebSearchPlan, i as invalidInlineImageText, k as normalizeCodexDynamicToolName, o as sanitizeInlineImageDataUrl, st as readString$2, tt as readItemString } from "./thread-lifecycle-DRg_FdzC.js";
+import { l as readCodexTurn } from "./protocol-validators-Dm4eXZmt.js";
+import { r as formatCodexDisplayText } from "./command-formatters-ico4ZFnk.js";
 import { a as resolveCodexNodeExecToolOverrides, i as resolveCodexNativeExecutionPolicy } from "./sandbox-guard-D1Wky__S.js";
-import { n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-BGLixv5_.js";
+import { n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-Bj_Ak_jI.js";
 import { addTimerTimeoutGraceMs, asDateTimestampMs, finiteSecondsToTimerSafeMilliseconds, parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
-import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { createHash } from "node:crypto";
-import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
-import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
-import { asOptionalRecord, isRecord, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { HEARTBEAT_RESPONSE_TOOL_NAME, buildAgentHookContextChannelFields, buildEmbeddedAttemptToolRunContext, callGatewayTool, consumeAdjustedParamsForToolCall, consumePreExecutionBlockedToolCall, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractMessagingToolSend, extractMessagingToolSendResult, extractToolResultMediaArtifact, filterProviderNormalizableTools, filterToolResultMediaUrls, finalizeToolTerminalPresentation, formatApprovalDisplayPath, formatToolExecutionErrorMessage, getBeforeToolCallFailureDisposition, getChannelAgentToolMeta, getPluginToolMeta, hasNativeHookRelayInvocation, invokeNativeHookRelay, isDeliveredMessageToolOnlySourceReplyResult, isDeliveredMessagingToolResult, isHostScopedAgentToolActive, isMessagingTool, isMessagingToolSendAction, isReplaySafeToolCall, isSubagentSessionKey, isToolResultError, isToolWrappedWithBeforeToolCallHook, normalizeAgentRuntimeTools, normalizeHeartbeatToolResponse, projectRuntimeToolInputSchema, registerNativeHookRelay, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveNativeHookRelayDeferredToolApproval, resolveToolExecutionErrorKind, resolveToolResultFailureKind, runAgentHarnessAfterToolCallHook, runBeforeToolCallHook, sanitizeToolResult, setBeforeToolCallDiagnosticsEnabled, supportsModelTools, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { createHash } from "node:crypto";
+import { resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
+import { isRecord, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { emitTrustedDiagnosticEvent, hasPendingInternalDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { isToolAllowed } from "openclaw/plugin-sdk/sandbox";
@@ -129,6 +128,18 @@ function shouldClearTerminalPresentationForNativeItem(item) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/dynamic-tool-response-state.ts
+/** Retains the host-owned app preview without adding it to Codex's response payload. */
+function withDynamicToolTranscriptDetails(response, details) {
+	if (!details || typeof details !== "object" || Array.isArray(details)) return response;
+	const mcpAppPreview = details.mcpAppPreview;
+	if (!mcpAppPreview || typeof mcpAppPreview !== "object" || Array.isArray(mcpAppPreview)) return response;
+	Object.defineProperty(response, "transcriptDetails", {
+		configurable: true,
+		enumerable: false,
+		value: { mcpAppPreview }
+	});
+	return response;
+}
 function withDynamicToolTerminalResolution(response, terminalResolution) {
 	if (terminalResolution) {
 		Object.defineProperties(response, {
@@ -444,13 +455,16 @@ function toCodexDynamicToolProtocolResponse(response) {
 }
 /** Adds async-started progress details when a tool result continues out of band. */
 function toCodexDynamicToolProgressResponse(response, protocolResponse) {
-	if (response.asyncStarted !== true) return protocolResponse;
+	const transcriptDetails = response.transcriptDetails;
+	if (response.asyncStarted !== true && transcriptDetails === void 0) return protocolResponse;
 	return {
 		...protocolResponse,
-		details: {
+		...transcriptDetails ? { details: transcriptDetails } : {},
+		...response.asyncStarted === true ? { details: {
+			...transcriptDetails,
 			async: true,
 			status: "started"
-		}
+		} } : {}
 	};
 }
 /** Decides whether a terminal dynamic tool response can release the Codex turn. */
@@ -1178,7 +1192,7 @@ async function buildDynamicTools(input) {
 	}
 	const toolBuildStages = createCodexDynamicToolBuildStageTracker({ enabled: input.profilerEnabled });
 	const modelHasVision = params.model.input?.includes("image") ?? false;
-	const agentDir = params.agentDir ?? resolveAgentDir(params.config ?? {}, input.sessionAgentId);
+	const agentDir = params.agentDir ?? resolveAgentDir$1(params.config ?? {}, input.sessionAgentId);
 	const { createOpenClawCodingTools: defaultCreateOpenClawCodingTools, resolveWebSearchToolPolicy } = await import("openclaw/plugin-sdk/agent-harness");
 	const createOpenClawCodingTools = dynamicToolBuildState.openClawCodingToolsFactory ?? defaultCreateOpenClawCodingTools;
 	toolBuildStages.mark("load-agent-harness-tools");
@@ -1214,6 +1228,7 @@ async function buildDynamicTools(input) {
 		senderIsOwner: params.senderIsOwner,
 		inputProvenance: params.inputProvenance,
 		trustedInternalHandoff: params.trustedInternalHandoff,
+		scheduledToolPolicy: params.scheduledToolPolicy,
 		allowGatewaySubagentBinding: params.allowGatewaySubagentBinding || isForcedPrivateQaCodexRuntime(),
 		...sessionKeys,
 		sessionId: params.sessionId,
@@ -1308,7 +1323,8 @@ async function buildDynamicTools(input) {
 		senderUsername: params.senderUsername,
 		senderE164: params.senderE164,
 		inputProvenance: params.inputProvenance,
-		trustedInternalHandoff: params.trustedInternalHandoff
+		trustedInternalHandoff: params.trustedInternalHandoff,
+		scheduledToolPolicy: params.scheduledToolPolicy
 	});
 	const transientWebSearchRestriction = !webSearchPolicy.allowed && webSearchPolicy.persistentAllowed || isCodexMemoryFlushRun(params);
 	const persistentCodexWebSearchSurface = params.config?.tools?.web?.search?.enabled !== false && !(input.pluginConfig.codexDynamicToolsExclude ?? []).some((name) => normalizeCodexDynamicToolName(name) === "web_search");
@@ -1587,6 +1603,11 @@ function settleCodexSourceReplyFinality(owner, turnSucceeded) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/provider-capabilities.ts
+function resolveOverriddenProviderWebSearchSupport(modelProviderOverride) {
+	const provider = modelProviderOverride?.trim().toLowerCase();
+	if (!provider) return;
+	return provider === "openai" ? "supported" : "unsupported";
+}
 async function readConfiguredProviderWebSearchSupport(params) {
 	return (await params.client.request("modelProvider/capabilities/read", {}, {
 		timeoutMs: params.timeoutMs,
@@ -1594,9 +1615,8 @@ async function readConfiguredProviderWebSearchSupport(params) {
 	})).webSearch ? "supported" : "unsupported";
 }
 async function resolveCodexProviderWebSearchSupportForClient(params) {
-	const modelProviderOverride = params.modelProviderOverride?.trim().toLowerCase();
-	if (modelProviderOverride === "openai") return "supported";
-	if (modelProviderOverride) return "unsupported";
+	const overrideSupport = resolveOverriddenProviderWebSearchSupport(params.modelProviderOverride);
+	if (overrideSupport) return overrideSupport;
 	try {
 		return await readConfiguredProviderWebSearchSupport(params);
 	} catch {
@@ -1604,6 +1624,8 @@ async function resolveCodexProviderWebSearchSupportForClient(params) {
 	}
 }
 async function resolveCodexProviderWebSearchSupport(params) {
+	const overrideSupport = resolveOverriddenProviderWebSearchSupport(params.modelProviderOverride);
+	if (overrideSupport) return overrideSupport;
 	let client;
 	try {
 		client = await params.clientFactory({
@@ -3152,25 +3174,6 @@ function formatErrorMessage$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
-//#region extensions/codex/src/app-server/agent-context-limits.ts
-/** Resolves an agent override before falling back to the configured default. */
-function resolveAgentContextLimitValue(params) {
-	const agents = asOptionalRecord(params.config?.agents);
-	const defaultValue = readPositiveInteger(asOptionalRecord(asOptionalRecord(agents?.defaults)?.contextLimits)?.[params.key]);
-	if (!params.agentId) return defaultValue;
-	const list = agents?.list;
-	if (!Array.isArray(list)) return defaultValue;
-	const normalizedAgentId = normalizeAgentId(params.agentId);
-	return readPositiveInteger(asOptionalRecord(asOptionalRecord(list.find((entry) => {
-		const entryId = asOptionalRecord(entry)?.id;
-		return typeof entryId === "string" && normalizeAgentId(entryId) === normalizedAgentId;
-	}))?.contextLimits)?.[params.key]) ?? defaultValue;
-}
-function readPositiveInteger(value) {
-	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
-	return Math.floor(value);
-}
-//#endregion
 //#region extensions/codex/src/app-server/dynamic-tools.ts
 /**
 * Bridges OpenClaw runtime tools into Codex app-server dynamic tool specs and
@@ -3319,6 +3322,13 @@ const EXPLICIT_MESSAGE_REPLY_KEYS = [
 	"replyToIdFull"
 ];
 const DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS = 16e3;
+const LARGE_CONTEXT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS = 32e3;
+const XL_CONTEXT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS = 64e3;
+function resolveCodexDynamicToolResultMaxChars(contextWindowTokens) {
+	if (typeof contextWindowTokens !== "number" || !Number.isFinite(contextWindowTokens) || contextWindowTokens <= 0) return DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS;
+	const tokens = Math.floor(contextWindowTokens);
+	return Math.min(tokens >= 2e5 ? XL_CONTEXT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS : tokens >= 1e5 ? LARGE_CONTEXT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS : DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS, Math.max(1, Math.floor(tokens * .3) * 4));
+}
 function computerFrameImageIdentity(content) {
 	if (!Array.isArray(content)) return;
 	const images = content.filter((block) => block.type === "image");
@@ -3337,7 +3347,7 @@ function invalidateComputerFrame(contextEpoch) {
 */
 function createCodexDynamicToolBridge(params) {
 	const toolResultHookContext = toToolResultHookContext(params.hookContext);
-	const toolResultMaxChars = resolveCodexDynamicToolResultMaxChars(params.hookContext);
+	const toolResultMaxChars = resolveCodexDynamicToolResultMaxChars(params.hookContext?.contextWindowTokens);
 	const availableProjection = projectCodexDynamicTools(params.tools);
 	const registeredProjection = params.registeredTools ? projectCodexDynamicTools(params.registeredTools) : availableProjection;
 	const wrappedAvailableProjection = wrapProjectedCodexDynamicTools(availableProjection.tools, params.hookContext);
@@ -3516,6 +3526,7 @@ function createCodexDynamicToolBridge(params) {
 					contentItems,
 					success: !resultIsError
 				}, terminalType);
+				withDynamicToolTranscriptDetails(response, result.details);
 				withDiagnosticFailureDisposition(response, resultFailureKind);
 				const blocksSourceReplyTermination = hasExplicitNonSourceMessageRoute(executedArgs, params.hookContext, confirmedMessagingTarget);
 				const deliveredSourceReply = isDeliveredMessageToolOnlySourceReplyResult({
@@ -3856,13 +3867,6 @@ function toToolResultHookContext(ctx) {
 		...channelId && { channelId }
 	};
 }
-function resolveCodexDynamicToolResultMaxChars(ctx) {
-	return resolveAgentContextLimitValue({
-		config: ctx?.config,
-		agentId: ctx?.agentId,
-		key: "toolResultMaxChars"
-	}) ?? DEFAULT_CODEX_DYNAMIC_TOOL_RESULT_MAX_CHARS;
-}
 function composeAbortSignals(...signals) {
 	const activeSignals = signals.filter((signal) => Boolean(signal));
 	if (activeSignals.length === 0) return new AbortController().signal;

package/dist/{event-projector-usage-D6tE7_qD.js → event-projector-usage-tvgb1NCX.js}

@@ -1,5 +1,5 @@
-import { Q as isJsonObject } from "./shared-client-wmgNFNYp.js";
-import { dt as readNonNegativeInteger, pt as readNumber } from "./thread-lifecycle-cqrOlJkq.js";
+import { V as isJsonObject } from "./shared-client-BVKE40c-.js";
+import { it as readNonNegativeInteger, ot as readNumber } from "./thread-lifecycle-DRg_FdzC.js";
 import { normalizeUsage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/event-projector-usage.ts
 function readTokenCount(record, key) {

package/dist/harness.js

@@ -35,7 +35,7 @@ function createCodexAppServerAgentHarness(options) {
 		...sessionCatalogControl && sessionRuntime ? { sessionFork: {
 			upstreamKinds: ["codex-app-server"],
 			fork: async (params) => {
-				const { forkCodexUpstreamSession } = await import("./upstream-session-fork-vPjwkT1i.js");
+				const { forkCodexUpstreamSession } = await import("./upstream-session-fork-_Vrz4WJr.js");
 				return await forkCodexUpstreamSession(params, {
 					bindingStore: options.bindingStore,
 					control: sessionCatalogControl,
@@ -46,7 +46,7 @@ function createCodexAppServerAgentHarness(options) {
 			}
 		} } : {},
 		authBinding: { fingerprint: async (params) => {
-			const { fingerprintCodexAppServerAuthBinding } = await import("./auth-binding-C1czuHPA.js").then((n) => n.t);
+			const { fingerprintCodexAppServerAuthBinding } = await import("./auth-binding-B4FfbcCg.js").then((n) => n.t);
 			return fingerprintCodexAppServerAuthBinding(params);
 		} },
 		runtimeArtifact: { validate: async (binding) => {
@@ -54,7 +54,7 @@ function createCodexAppServerAgentHarness(options) {
 			return validateCodexAppServerRuntimeArtifact(binding);
 		} },
 		fetchUsageSnapshot: async (ctx) => {
-			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-DM_I3mPT.js");
+			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-UpVbdX5G.js");
 			return await fetchCodexAppServerUsageSnapshot(ctx, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		supports: (ctx) => {
@@ -95,7 +95,7 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt--858NXDl.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-C5GTPJOE.js");
 			return runCodexAppServerAttempt(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -103,11 +103,11 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		finalizeSettledTurn: async (params) => {
-			const { runCodexSettledTurnFinalization } = await import("./settled-turn-finalizer-DHltNgtF.js");
+			const { runCodexSettledTurnFinalization } = await import("./settled-turn-finalizer-CA_2QXIE.js");
 			return runCodexSettledTurnFinalization(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-BfFZCsJ-.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-CO12sHxo.js");
 			return runCodexAppServerSideQuestion(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -115,14 +115,14 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-CC5KhBzX.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-dEN49UH6.js");
 			return maybeCompactCodexAppServerSession(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig
 			});
 		},
 		compactAfterContextEngine: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-CC5KhBzX.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-dEN49UH6.js");
 			return maybeCompactCodexAppServerSession(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -131,21 +131,22 @@ function createCodexAppServerAgentHarness(options) {
 		},
 		reset: async (params) => {
 			if (params.sessionId) {
-				const { reclaimCurrentCodexSessionGeneration, sessionBindingIdentity } = await import("./session-binding-ZSMX1omP.js").then((n) => n.u);
+				const { reclaimCurrentCodexSessionGeneration, sessionBindingIdentity } = await import("./session-binding-DlVQ-Pxs.js").then((n) => n.u);
 				const identity = sessionBindingIdentity({
 					agentId: params.agentId,
 					sessionId: params.sessionId,
 					sessionKey: params.sessionKey
 				});
-				let retired = await options.bindingStore.retireSessionGeneration(identity);
-				if (retired === "conflict") {
+				const resetGeneration = params.reason === "deleted" ? options.bindingStore.retireSessionGeneration.bind(options.bindingStore) : options.bindingStore.resetSessionGeneration.bind(options.bindingStore);
+				let reset = await resetGeneration(identity);
+				if (reset === "conflict") {
 					if (await reclaimCurrentCodexSessionGeneration({
 						bindingStore: options.bindingStore,
 						identity,
 						config: options.resolveConfig?.()
-					})) retired = await options.bindingStore.retireSessionGeneration(identity);
+					})) reset = await resetGeneration(identity);
 				}
-				if (retired === "conflict") throw new Error(`Codex binding generation changed before session ${params.sessionId} could reset`);
+				if (reset === "conflict") throw new Error(`Codex binding generation changed before session ${params.sessionId} could reset`);
 			}
 		},
 		dispose: disposeSharedCodexAppServerClients