@openclaw/codex 2026.7.2-beta.5 → 2026.7.2-beta.7

package/dist/{app-server-policy-BmDgseo_.js → app-server-policy-BSaO2JIT.js}

@@ -1,4 +1,4 @@
-import { b as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-DlVQ-Pxs.js";
+import { C as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-BXpo9ymA.js";
 //#region extensions/codex/src/app-server/app-server-policy.ts
 /**
 * Policy promotion for Codex app-server runs that can safely use OpenClaw tool

package/dist/{attempt-notifications-CMR2_fmR.js → attempt-notifications-AP-a-Q5k.js}

@@ -1,4 +1,4 @@
-import { V as isJsonObject } from "./shared-client-BVKE40c-.js";
+import { W as isJsonObject } from "./shared-client-DTbvH-XV.js";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/codex/src/app-server/attempt-notifications.ts
 /**

package/dist/{bounded-turn-FEbUXoYT.js → bounded-turn-D2ZAgZVz.js}

@@ -1,11 +1,10 @@
-import { V as isJsonObject, s as isCodexAppServerStartSelectionChangedError } from "./shared-client-BVKE40c-.js";
-import { p as resolveCodexAppServerRuntimeOptions } from "./session-binding-DlVQ-Pxs.js";
-import { o as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-Ia52yRWc.js";
-import { _ as readCodexNotificationItem, h as isRetryableErrorNotification } from "./attempt-notifications-CMR2_fmR.js";
-import { G as mergeCodexThreadConfigs, d as buildCodexRingZeroThreadConfigPatch, f as buildCodexRuntimeThreadConfig, l as assertCodexRingZeroHasNoManagedHooks, p as readCodexInheritedMcpServerNames, u as attestCodexRingZeroThreadHasNoMcpServers } from "./thread-lifecycle-DRg_FdzC.js";
-import { t as normalizeCodexResponseTokenUsage } from "./event-projector-usage-tvgb1NCX.js";
-import { a as assertCodexTurnStartResponse, i as assertCodexThreadStartResponse, s as readCodexErrorNotification, u as readCodexTurnCompletedNotification } from "./protocol-validators-Dm4eXZmt.js";
-import { r as readModelListResult } from "./models-BA01NEez.js";
+import { W as isJsonObject, s as isCodexAppServerStartSelectionChangedError } from "./shared-client-DTbvH-XV.js";
+import { g as resolveCodexAppServerRuntimeOptions } from "./session-binding-BXpo9ymA.js";
+import { G as mergeCodexThreadConfigs, d as attestCodexRingZeroThreadHasNoMcpServers, f as buildCodexRingZeroThreadConfigPatch, m as readCodexInheritedMcpServerNames, mt as interruptCodexTurnAndWaitBestEffort, p as buildCodexRuntimeThreadConfig, u as assertCodexRingZeroHasNoManagedHooks, ut as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./thread-lifecycle-DF53ogiA.js";
+import { _ as readCodexNotificationItem, h as isRetryableErrorNotification } from "./attempt-notifications-AP-a-Q5k.js";
+import { n as normalizeCodexResponseTokenUsage } from "./event-projector-usage-Xp4AlR2k.js";
+import { C as readCodexTurnCompletedNotification, _ as assertCodexThreadStartResponse, b as readCodexErrorNotification, v as assertCodexTurnStartResponse } from "./transcript-mirror-DzsdNCf5.js";
+import { r as readModelListResult } from "./models-BBMKU4jA.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -33,6 +32,13 @@ const CODEX_SETTLED_FINALIZER_THREAD_CONFIG = {
 	"skills.include_instructions": false,
 	include_environment_context: false
 };
+var CodexBoundedTurnTimeoutError = class extends Error {
+	constructor(taskLabel, timeoutMs) {
+		const bound = timeoutMs % 1e3 === 0 ? `${timeoutMs / 1e3}s` : `${timeoutMs}ms`;
+		super(`codex app-server ${taskLabel} turn timed out after ${bound}`);
+		this.name = "TimeoutError";
+	}
+};
 async function runBoundedCodexAppServerTurn(params) {
 	const appServer = resolveCodexAppServerRuntimeOptions({
 		pluginConfig: params.options.pluginConfig,
@@ -55,9 +61,10 @@ async function runBoundedCodexAppServerTurn(params) {
 }
 async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, workspace, selectionAttempt = 0, timing) {
 	const totalTimeoutMs = timing?.timeoutMs ?? resolveTimerTimeoutMs(params.timeoutMs, 100, 100);
+	const timeoutError = new CodexBoundedTurnTimeoutError(params.taskLabel, totalTimeoutMs);
 	const deadline = timing?.deadline ?? Date.now() + totalTimeoutMs;
 	const timeoutMs = deadline - Date.now();
-	if (timeoutMs <= 0) throw new Error(`${params.taskLabel} timed out`);
+	if (timeoutMs <= 0) throw timeoutError;
 	const agentDir = params.agentDir?.trim() || void 0;
 	const startOptions = workspace.codexHome ? buildPrivateCodexAppServerStartOptions(appServer.start, workspace.codexHome) : appServer.start;
 	const ownsClient = !params.options.clientFactory;
@@ -68,7 +75,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		config: params.config,
 		timeoutMs,
 		...params.signal ? { abandonSignal: params.signal } : {}
-	}) : await import("./shared-client-BVKE40c-.js").then((n) => n.p).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	}) : await import("./shared-client-DTbvH-XV.js").then((n) => n.m).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		startOptions,
 		timeoutMs,
 		authProfileId: params.profile,
@@ -97,8 +104,8 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 	if (params.signal?.aborted) abortFromCaller();
 	else params.signal?.addEventListener("abort", abortFromCaller, { once: true });
 	const remainingRunMs = deadline - Date.now();
-	if (remainingRunMs <= 0) abortRun("timeout");
-	const timeout = setTimeout(() => abortRun("timeout"), Math.max(1, remainingRunMs));
+	if (remainingRunMs <= 0) abortRun(timeoutError);
+	const timeout = setTimeout(() => abortRun(timeoutError), Math.max(1, remainingRunMs));
 	timeout.unref?.();
 	let retrySelection = false;
 	try {
@@ -158,8 +165,8 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 			if (abortController.signal.aborted) requestInterrupt();
 			return {
 				...await collector.collect(turn.turn, {
-					timeoutMs,
-					signal: abortController.signal
+					signal: abortController.signal,
+					timeoutError
 				}),
 				model
 			};
@@ -168,6 +175,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 			cleanup();
 		}
 	} catch (error) {
+		if (abortController.signal.aborted) throw resolveCodexBoundedTurnAbortError(abortController.signal, params.taskLabel, timeoutError);
 		if (ownsClient && isCodexAppServerStartSelectionChangedError(error) && selectionAttempt === 0) retrySelection = true;
 		else throw error;
 	} finally {
@@ -307,9 +315,9 @@ function createCodexBoundedTurnCollector(threadId, taskLabel) {
 			for (const notification of pending.splice(0)) handleNotification(notification);
 			if (!completedTurn && !promptError) await waitForTurnCompletion({
 				completion,
-				timeoutMs: options.timeoutMs,
 				signal: options.signal,
-				taskLabel
+				taskLabel,
+				timeoutError: options.timeoutError
 			});
 			if (promptError) throw new Error(promptError);
 			if (completedTurn?.status === "failed") throw new Error(completedTurn.error?.message ?? `codex app-server ${taskLabel} turn failed`);
@@ -333,22 +341,21 @@ function collectCompletedItems(turnItems, notificationItems) {
 	return [...items.values()];
 }
 async function waitForTurnCompletion(params) {
-	if (params.signal.aborted) throw new Error(`codex app-server ${params.taskLabel} turn aborted`);
-	let timeout;
+	if (params.signal.aborted) throw resolveCodexBoundedTurnAbortError(params.signal, params.taskLabel, params.timeoutError);
 	let cleanupAbort;
 	try {
 		await Promise.race([params.completion, new Promise((_, reject) => {
-			timeout = setTimeout(() => reject(/* @__PURE__ */ new Error(`codex app-server ${params.taskLabel} turn timed out`)), params.timeoutMs);
-			timeout.unref?.();
-			const abortListener = () => reject(/* @__PURE__ */ new Error(`codex app-server ${params.taskLabel} turn aborted`));
+			const abortListener = () => reject(resolveCodexBoundedTurnAbortError(params.signal, params.taskLabel, params.timeoutError));
 			params.signal.addEventListener("abort", abortListener, { once: true });
 			cleanupAbort = () => params.signal.removeEventListener("abort", abortListener);
 		})]);
 	} finally {
-		if (timeout) clearTimeout(timeout);
 		cleanupAbort?.();
 	}
 }
+function resolveCodexBoundedTurnAbortError(signal, taskLabel, timeoutError) {
+	return signal.reason === timeoutError ? timeoutError : /* @__PURE__ */ new Error(`codex app-server ${taskLabel} turn aborted`);
+}
 function collectAssistantTextFromItems(items) {
 	return (items ?? []).filter((item) => item.type === "agentMessage").map((item) => item.text.trim()).filter(Boolean).join("\n\n").trim();
 }

package/dist/{capabilities-BHRSI6Cn.js → capabilities-BFDTVYr4.js}

@@ -1,4 +1,4 @@
-import { _ as CodexAppServerRpcError } from "./shared-client-BVKE40c-.js";
+import { v as CodexAppServerRpcError } from "./shared-client-DTbvH-XV.js";
 //#region extensions/codex/src/app-server/capabilities.ts
 /**
 * Capability helpers for optional Codex app-server control-plane methods.

package/dist/cli-metadata.js

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/codex/cli-metadata.ts
 function registerCodexCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./session-cli-CqZ0Fp2a.js");
+		const { registerCodexSessionCli } = await import("./session-cli-2PZaFLRh.js");
 		registerCodexSessionCli(program);
 	}, { descriptors: [{
 		name: "codex",

package/dist/{command-formatters-ico4ZFnk.js → command-formatters-C336eRVS.js}

@@ -1,5 +1,5 @@
-import { V as isJsonObject } from "./shared-client-BVKE40c-.js";
-import { c as summarizeCodexRateLimits, o as summarizeCodexAccountRateLimits, r as hasCodexRateLimitSnapshots } from "./rate-limits-S_PXs0ul.js";
+import { W as isJsonObject } from "./shared-client-DTbvH-XV.js";
+import { c as summarizeCodexRateLimits, o as summarizeCodexAccountRateLimits, r as hasCodexRateLimitSnapshots } from "./rate-limits-CU-gVCCS.js";
 //#region extensions/codex/src/command-formatters.ts
 /** Formats the combined `/codex status` probe result. */
 function formatCodexStatus(probes) {

package/dist/{command-handlers-CRmnwI2N.js → command-handlers-DAHUSry9.js}

@@ -1,16 +1,16 @@
-import { N as resolveCodexAppServerAuthProfileIdForAgent, V as isJsonObject } from "./shared-client-BVKE40c-.js";
-import { O as isCodexFastServiceTier, c as reclaimCurrentCodexSessionGeneration, i as createCodexSessionGenerationSupersededError, l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-DlVQ-Pxs.js";
-import { r as assertCodexThreadResumeResponse } from "./protocol-validators-Dm4eXZmt.js";
-import { t as listAllCodexAppServerModels } from "./models-BA01NEez.js";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-BHRSI6Cn.js";
-import { s as summarizeCodexAccountUsage } from "./rate-limits-S_PXs0ul.js";
-import { a as formatComputerUseStatus, c as formatSkills, i as formatCodexStatus, l as formatThreads, n as formatAccount, o as formatList, r as formatCodexDisplayText, s as formatModels, t as buildHelp, u as readString$1 } from "./command-formatters-ico4ZFnk.js";
-import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-DE7d9DOj.js";
+import { I as resolveCodexAppServerAuthProfileIdForAgent, W as isJsonObject } from "./shared-client-DTbvH-XV.js";
+import { c as reclaimCurrentCodexSessionGeneration, d as sessionBindingIdentity, i as createCodexSessionGenerationSupersededError, j as isCodexFastServiceTier, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-BXpo9ymA.js";
+import { g as assertCodexThreadResumeResponse } from "./transcript-mirror-DzsdNCf5.js";
+import { t as listAllCodexAppServerModels } from "./models-BBMKU4jA.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-BFDTVYr4.js";
+import { s as summarizeCodexAccountUsage } from "./rate-limits-CU-gVCCS.js";
+import { a as formatComputerUseStatus, c as formatSkills, i as formatCodexStatus, l as formatThreads, n as formatAccount, o as formatList, r as formatCodexDisplayText, s as formatModels, t as buildHelp, u as readString$1 } from "./command-formatters-C336eRVS.js";
+import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-NuhpXmPB.js";
+import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, d as CODEX_NATIVE_EXECUTION_AUTH_ERROR, f as canMutateCodexHost, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-xsIeXbo4.js";
 import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-BHRpYbX3.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-Bj_Ak_jI.js";
-import { c as requestOptions, l as safeCodexControlRequest, o as codexControlRequest, p as formatCodexCliSessions, s as readCodexStatusProbes } from "./session-catalog-CP2oCcEb.js";
-import { i as readCodexComputerUseStatus, n as installCodexComputerUse } from "./computer-use-BjGylO-E.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-CU6_AnOb.js";
+import { c as requestOptions, l as safeCodexControlRequest, o as codexControlRequest, p as formatCodexCliSessions, s as readCodexStatusProbes } from "./session-catalog-DyOgR4WH.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CYEc8U3w.js";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import crypto from "node:crypto";
 import { ensureAuthProfileStore, findNormalizedProviderValue, resolveAgentDir, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveProfileUnusableUntilForDisplay, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";

package/dist/{compact-dEN49UH6.js → compact-D_uvHurS.js}

@@ -1,8 +1,8 @@
-import { V as isJsonObject, _ as CodexAppServerRpcError, a as getLeasedSharedCodexAppServerClient, l as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BVKE40c-.js";
-import { l as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-DlVQ-Pxs.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-CMR2_fmR.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-Bj_Ak_jI.js";
+import { W as isJsonObject, a as getLeasedSharedCodexAppServerClient, l as releaseLeasedSharedCodexAppServerClient, v as CodexAppServerRpcError } from "./shared-client-DTbvH-XV.js";
+import { d as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-BXpo9ymA.js";
+import { _ as readCodexNotificationItem } from "./attempt-notifications-AP-a-Q5k.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-NuhpXmPB.js";
+import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-CU6_AnOb.js";
 import { embeddedAgentLog, resolveCompactionTimeoutMs } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveAgentDir as resolveAgentDir$1, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/compact.ts

package/dist/{computer-use-BjGylO-E.js → computer-use-CYEc8U3w.js}

@@ -1,9 +1,91 @@
-import { C as isCodexAppServerIndeterminateTransportError, H as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, S as isCodexAppServerIndeterminateRequestCancellationError, a as getLeasedSharedCodexAppServerClient, g as acquireCodexNativeConfigFence, l as releaseLeasedSharedCodexAppServerClient, u as resolveCodexNativeConfigFenceKey, x as isCodexAppServerConnectionClosedError } from "./shared-client-BVKE40c-.js";
-import { h as resolveCodexComputerUseConfig, p as resolveCodexAppServerRuntimeOptions } from "./session-binding-DlVQ-Pxs.js";
-import { n as describeControlFailure } from "./capabilities-BHRSI6Cn.js";
-import { r as requestCodexAppServerJson } from "./request-CXpPennK.js";
+import { C as isCodexAppServerIndeterminateRequestCancellationError, G as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, S as isCodexAppServerConnectionClosedError, _ as acquireCodexNativeConfigFence, a as getLeasedSharedCodexAppServerClient, l as releaseLeasedSharedCodexAppServerClient, u as resolveCodexNativeConfigFenceKey, w as isCodexAppServerIndeterminateTransportError } from "./shared-client-DTbvH-XV.js";
+import { g as resolveCodexAppServerRuntimeOptions, v as resolveCodexComputerUseConfig } from "./session-binding-BXpo9ymA.js";
+import { n as describeControlFailure } from "./capabilities-BFDTVYr4.js";
+import { r as requestCodexAppServerJson } from "./request-qKh331yu.js";
 import { existsSync } from "node:fs";
 import { runExec } from "openclaw/plugin-sdk/process-runtime";
+//#region extensions/codex/src/app-server/computer-use-process-repair.ts
+const COMPUTER_USE_PROCESS_LIST_TIMEOUT_MS = 2e3;
+const COMPUTER_USE_PROCESS_LIST_MAX_BUFFER_BYTES = 5 * 1024 * 1024;
+function scopedRepairUnavailableStatus() {
+	return {
+		attempted: false,
+		killedPids: [],
+		warnings: ["Computer Use auto-repair skipped because no scoped Codex app-server process was available."],
+		message: "Computer Use stale child repair requires a scoped local app-server PID."
+	};
+}
+async function killStaleComputerUseMcpChildren(options = {}) {
+	if (process.platform !== "darwin") return {
+		attempted: true,
+		killedPids: [],
+		warnings: [`Computer Use stale child repair is currently macOS-only, not ${process.platform}.`],
+		message: "Computer Use stale child repair skipped on this platform."
+	};
+	if (!options.ancestorPid || !Number.isSafeInteger(options.ancestorPid) || options.ancestorPid <= 0) return scopedRepairUnavailableStatus();
+	let stdout;
+	try {
+		stdout = (await runExec("/bin/ps", ["-axo", "pid=,ppid=,command="], {
+			logOutput: false,
+			maxBuffer: COMPUTER_USE_PROCESS_LIST_MAX_BUFFER_BYTES,
+			timeoutMs: COMPUTER_USE_PROCESS_LIST_TIMEOUT_MS
+		})).stdout;
+	} catch (error) {
+		return {
+			attempted: true,
+			killedPids: [],
+			warnings: [`Could not list processes for Computer Use repair: ${describeControlFailure(error)}`],
+			message: "Computer Use stale child repair could not inspect running processes."
+		};
+	}
+	const killedPids = [];
+	const warnings = [];
+	const processInfos = parsePsOutput(stdout);
+	for (const processInfo of processInfos) {
+		if (!isStaleComputerUseMcpChild(processInfo.command)) continue;
+		if (!isDescendantOfPid(processInfo.pid, options.ancestorPid, processInfos)) continue;
+		try {
+			process.kill(processInfo.pid, "SIGTERM");
+			killedPids.push(processInfo.pid);
+		} catch (error) {
+			warnings.push(`Could not terminate stale Computer Use MCP child pid ${processInfo.pid}: ${describeControlFailure(error)}`);
+		}
+	}
+	return {
+		attempted: true,
+		killedPids,
+		warnings,
+		message: killedPids.length === 0 ? "No stale Computer Use MCP children were found under the scoped Codex app-server process." : `Terminated ${killedPids.length} stale Computer Use MCP child process${killedPids.length === 1 ? "" : "es"} under the scoped Codex app-server process.`
+	};
+}
+function parsePsOutput(stdout) {
+	return stdout.split(/\r?\n/u).flatMap((line) => {
+		const match = /^\s*(\d+)\s+(\d+)\s+(.+)$/u.exec(line);
+		if (!match) return [];
+		return [{
+			pid: Number(match[1]),
+			ppid: Number(match[2]),
+			command: match[3] ?? ""
+		}];
+	}).filter((processInfo) => Number.isSafeInteger(processInfo.pid) && processInfo.pid > 0 && Number.isSafeInteger(processInfo.ppid) && processInfo.ppid >= 0);
+}
+function isStaleComputerUseMcpChild(command) {
+	return command.includes("SkyComputerUseClient") && /(?:^|\s)mcp(?:\s|$)/u.test(command);
+}
+function isDescendantOfPid(pid, ancestorPid, processInfos) {
+	const parents = new Map(processInfos.map((processInfo) => [processInfo.pid, processInfo.ppid]));
+	const seen = /* @__PURE__ */ new Set();
+	let current = pid;
+	while (!seen.has(current)) {
+		seen.add(current);
+		const parent = parents.get(current);
+		if (!parent || parent <= 0) return false;
+		if (parent === ancestorPid) return true;
+		current = parent;
+	}
+	return false;
+}
+//#endregion
 //#region extensions/codex/src/app-server/computer-use.ts
 /**
 * Computer Use plugin/MCP readiness checks and optional install flow for Codex
@@ -20,6 +102,8 @@ const CURATED_MARKETPLACE_POLL_INTERVAL_MS = 2e3;
 const COMPUTER_USE_MARKETPLACE_NAME_PRIORITY = [
 	"openai-bundled",
 	"openai-curated",
+	"openai-api-curated",
+	"openai-curated-remote",
 	"local"
 ];
 const COMPUTER_USE_LIVE_TEST_RETRY_COUNT = 1;
@@ -179,18 +263,8 @@ async function ensureComputerUsePlugin(params) {
 				config: params.config,
 				plugin,
 				tools: [],
-				reason: pluginSetupReason(plugin, params.marketplace),
-				message: pluginSetupMessage(params.config, plugin, params.marketplace)
-			})
-		};
-		if (params.marketplace.kind === "remote") return {
-			ok: false,
-			status: statusFromPlugin({
-				config: params.config,
-				plugin,
-				tools: [],
-				reason: "remote_install_unsupported",
-				message: remoteInstallUnsupportedMessage(plugin, params.marketplace)
+				reason: pluginSetupReason(plugin),
+				message: pluginSetupMessage(params.config, plugin)
 			})
 		};
 		await params.request("plugin/install", pluginRequestParams(params.marketplace, params.config.pluginName));
@@ -203,8 +277,8 @@ async function ensureComputerUsePlugin(params) {
 			config: params.config,
 			plugin,
 			tools: [],
-			reason: pluginSetupReason(plugin, params.marketplace),
-			message: pluginSetupMessage(params.config, plugin, params.marketplace)
+			reason: pluginSetupReason(plugin),
+			message: pluginSetupMessage(params.config, plugin)
 		})
 	};
 	return {
@@ -326,14 +400,6 @@ async function runCodexComputerUseLiveTest(params) {
 async function cleanupComputerUseProbeThread(request, threadId, config) {
 	await Promise.allSettled([request("thread/unsubscribe", { threadId }, { timeoutMs: config.liveTestTimeoutMs }), request("thread/archive", { threadId }, { timeoutMs: config.liveTestTimeoutMs })]);
 }
-function scopedRepairUnavailableStatus() {
-	return {
-		attempted: false,
-		killedPids: [],
-		warnings: ["Computer Use auto-repair skipped because no scoped Codex app-server process was available."],
-		message: "Computer Use stale child repair requires a scoped local app-server PID."
-	};
-}
 async function resolveMarketplaceRef(params) {
 	let preferredMarketplaceName = params.config.marketplaceName;
 	if (params.config.marketplaceSource && params.allowAdd) {
@@ -390,17 +456,22 @@ function resolveBundledComputerUseMarketplacePath(params) {
 	return resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath({ candidates: params.defaultBundledMarketplacePathCandidates });
 }
 function findComputerUseMarketplaces(listed, pluginName) {
-	return listed.marketplaces.filter((marketplace) => marketplace.plugins.some((plugin) => plugin.name === pluginName || plugin.id === pluginName || plugin.id === `${pluginName}@${marketplace.name}`)).map((marketplace) => {
-		if (marketplace.path) return {
+	return listed.marketplaces.flatMap((marketplace) => {
+		const plugin = marketplace.plugins.find((candidate) => candidate.name === pluginName || candidate.id === pluginName || candidate.id === `${pluginName}@${marketplace.name}`);
+		if (!plugin) return [];
+		if (marketplace.path) return [{
 			kind: "local",
 			name: marketplace.name,
 			path: marketplace.path
-		};
-		return {
+		}];
+		const remotePluginId = plugin.remotePluginId?.trim();
+		if (!remotePluginId) return [];
+		return [{
 			kind: "remote",
 			name: marketplace.name,
-			remoteMarketplaceName: marketplace.name
-		};
+			remoteMarketplaceName: marketplace.name,
+			remotePluginId
+		}];
 	});
 }
 function chooseKnownComputerUseMarketplace(candidates) {
@@ -452,25 +523,21 @@ async function reloadMcpServers(request) {
 	await request("config/mcpServer/reload", void 0);
 }
 function pluginRequestParams(marketplace, pluginName) {
-	return {
-		...marketplace.kind === "local" ? { marketplacePath: marketplace.path } : {},
-		...marketplace.kind === "remote" ? { remoteMarketplaceName: marketplace.remoteMarketplaceName } : {},
+	return marketplace.kind === "local" ? {
+		marketplacePath: marketplace.path,
 		pluginName
+	} : {
+		remoteMarketplaceName: marketplace.remoteMarketplaceName,
+		pluginName: marketplace.remotePluginId
 	};
 }
-function pluginSetupReason(plugin, marketplace) {
-	if (marketplace.kind === "remote") return "remote_install_unsupported";
+function pluginSetupReason(plugin) {
 	return plugin.summary.installed ? "plugin_disabled" : "plugin_not_installed";
 }
-function pluginSetupMessage(config, plugin, marketplace) {
-	if (marketplace.kind === "remote") return remoteInstallUnsupportedMessage(plugin, marketplace);
+function pluginSetupMessage(config, plugin) {
 	if (!plugin.summary.installed) return "Computer Use is available but not installed. Run /codex computer-use install or enable computerUse.autoInstall.";
 	return `Computer Use is installed, but the ${config.pluginName} plugin is disabled. Run /codex computer-use install or enable computerUse.autoInstall to re-enable it.`;
 }
-function remoteInstallUnsupportedMessage(plugin, marketplace) {
-	const marketplaceName = marketplace.name ?? plugin.marketplaceName;
-	return `Computer Use is ${plugin.summary.installed ? "installed but disabled" : "available"} in remote Codex marketplace ${marketplaceName}, but Codex app-server does not support remote plugin install yet. Configure computerUse.marketplaceSource or computerUse.marketplacePath for a local marketplace, then run /codex computer-use install.`;
-}
 function statusFromPlugin(params) {
 	return {
 		enabled: true,
@@ -592,75 +659,6 @@ function pluginWarnings(plugin) {
 	if (source && typeof source === "object" && "type" in source && source.type === "remote") warnings.push("Computer Use plugin is resolved from a remote marketplace; live local bundles are preferred.");
 	return warnings;
 }
-async function killStaleComputerUseMcpChildren(options = {}) {
-	if (process.platform !== "darwin") return {
-		attempted: true,
-		killedPids: [],
-		warnings: [`Computer Use stale child repair is currently macOS-only, not ${process.platform}.`],
-		message: "Computer Use stale child repair skipped on this platform."
-	};
-	if (!options.ancestorPid || !Number.isSafeInteger(options.ancestorPid) || options.ancestorPid <= 0) return scopedRepairUnavailableStatus();
-	let stdout;
-	try {
-		stdout = (await runExec("/bin/ps", ["-axo", "pid=,ppid=,command="], {
-			logOutput: false,
-			maxBuffer: 5 * 1024 * 1024
-		})).stdout;
-	} catch (error) {
-		return {
-			attempted: true,
-			killedPids: [],
-			warnings: [`Could not list processes for Computer Use repair: ${describeControlFailure(error)}`],
-			message: "Computer Use stale child repair could not inspect running processes."
-		};
-	}
-	const killedPids = [];
-	const warnings = [];
-	const processInfos = parsePsOutput(stdout);
-	for (const processInfo of processInfos) {
-		if (!isStaleComputerUseMcpChild(processInfo.command)) continue;
-		if (!isDescendantOfPid(processInfo.pid, options.ancestorPid, processInfos)) continue;
-		try {
-			process.kill(processInfo.pid, "SIGTERM");
-			killedPids.push(processInfo.pid);
-		} catch (error) {
-			warnings.push(`Could not terminate stale Computer Use MCP child pid ${processInfo.pid}: ${describeControlFailure(error)}`);
-		}
-	}
-	return {
-		attempted: true,
-		killedPids,
-		warnings,
-		message: killedPids.length === 0 ? "No stale Computer Use MCP children were found under the scoped Codex app-server process." : `Terminated ${killedPids.length} stale Computer Use MCP child process${killedPids.length === 1 ? "" : "es"} under the scoped Codex app-server process.`
-	};
-}
-function parsePsOutput(stdout) {
-	return stdout.split(/\r?\n/u).flatMap((line) => {
-		const match = /^\s*(\d+)\s+(\d+)\s+(.+)$/u.exec(line);
-		if (!match) return [];
-		return [{
-			pid: Number(match[1]),
-			ppid: Number(match[2]),
-			command: match[3] ?? ""
-		}];
-	}).filter((processInfo) => Number.isSafeInteger(processInfo.pid) && processInfo.pid > 0 && Number.isSafeInteger(processInfo.ppid) && processInfo.ppid >= 0);
-}
-function isStaleComputerUseMcpChild(command) {
-	return command.includes("SkyComputerUseClient") && /(?:^|\s)mcp(?:\s|$)/u.test(command);
-}
-function isDescendantOfPid(pid, ancestorPid, processInfos) {
-	const parents = new Map(processInfos.map((processInfo) => [processInfo.pid, processInfo.ppid]));
-	const seen = /* @__PURE__ */ new Set();
-	let current = pid;
-	while (!seen.has(current)) {
-		seen.add(current);
-		const parent = parents.get(current);
-		if (!parent || parent <= 0) return false;
-		if (parent === ancestorPid) return true;
-		current = parent;
-	}
-	return false;
-}
 function createComputerUseRequest(params) {
 	if (params.request) return params.request;
 	if (params.client) return async (method, requestParams, options) => await params.client.request(method, requestParams, {
@@ -692,4 +690,4 @@ function resolveComputerUseConfig(params) {
 	});
 }
 //#endregion
-export { runCodexComputerUseLiveTest as a, readCodexComputerUseStatus as i, installCodexComputerUse as n, killStaleComputerUseMcpChildren as r, ensureCodexComputerUse as t };
+export { killStaleComputerUseMcpChildren as a, runCodexComputerUseLiveTest as i, installCodexComputerUse as n, readCodexComputerUseStatus as r, ensureCodexComputerUse as t };

package/dist/{conversation-control-DE7d9DOj.js → conversation-control-xsIeXbo4.js}

@@ -1,9 +1,9 @@
-import { a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, l as releaseLeasedSharedCodexAppServerClient, m as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-BVKE40c-.js";
-import { O as isCodexFastServiceTier, S as resolveCodexModelBackedReviewerPolicyContext, o as isCodexAppServerNativeAuthProfile, p as resolveCodexAppServerRuntimeOptions, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-DlVQ-Pxs.js";
-import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-DRg_FdzC.js";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-BHRSI6Cn.js";
-import { r as formatCodexDisplayText } from "./command-formatters-ico4ZFnk.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-Bj_Ak_jI.js";
+import { a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, h as withLeasedCodexAppServerClientStartSelectionRetry, l as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DTbvH-XV.js";
+import { T as resolveCodexModelBackedReviewerPolicyContext, g as resolveCodexAppServerRuntimeOptions, j as isCodexFastServiceTier, o as isCodexAppServerNativeAuthProfile, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-BXpo9ymA.js";
+import { S as resolveCodexBindingModelProviderFallback, b as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-DF53ogiA.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-BFDTVYr4.js";
+import { r as formatCodexDisplayText } from "./command-formatters-C336eRVS.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-CU6_AnOb.js";
 import { ModelSelectionLockedError } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";

package/dist/doctor-contract-api.js

@@ -276,7 +276,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-DlVQ-Pxs.js").then((n) => n.u), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-BXpo9ymA.js").then((n) => n.f), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),