@openclaw/codex 2026.8.1 → 2026.8.2

package/dist/{dynamic-tools-BFoUcRdx.js → dynamic-tools-BmeXjwNZ.js}

@@ -1,12 +1,12 @@
-import { C as isCodexRemoteExecPlacementSandbox, T as readCodexPluginConfig } from "./config-Cxw3Cl3k.js";
-import { Bt as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE, Ht as isJsonObject, dt as resolveCodexToolAbortTerminalReason, et as createCodexElicitationResponse, ft as createFailedDynamicToolResponse, h as releaseLeasedSharedCodexAppServerClient, mt as withDynamicToolTranscriptDetails, pt as withDynamicToolExecutionState } from "./shared-client-kNkljY-R.js";
+import { C as isCodexRemoteExecPlacementSandbox, T as readCodexPluginConfig } from "./config-CcYL77O6.js";
+import { Bt as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE, Ht as isJsonObject, dt as resolveCodexToolAbortTerminalReason, et as createCodexElicitationResponse, ft as createFailedDynamicToolResponse, h as releaseLeasedSharedCodexAppServerClient, mt as withDynamicToolTranscriptDetails, pt as withDynamicToolExecutionState } from "./shared-client-B1tT5U6r.js";
 import { d as readCodexTurn } from "./protocol-validators-Bg5rpNxk.js";
-import { D as itemStatus, I as readItem, b as auditNativeToolTerminalStatus, g as isCodexNotificationForTurn, x as auditNativeToolUnfinishedStatus, y as auditNativeToolName } from "./attempt-client-cleanup-CVPvp9dL.js";
-import { H as normalizeCodexDynamicToolName, L as filterCodexDynamicTools, R as filterCodexDynamicToolsForDisabledNativeSurface, V as isSystemAgentOnlyCodexDynamicToolAllowlist, d as emitCodexNativePreToolUseFailureDiagnostic, x as resolveCodexWebSearchPlan, z as isForcedPrivateQaCodexRuntime } from "./thread-lifecycle-Ss-uwnC4.js";
-import { l as resolveCodexNativeExecutionPolicy, u as resolveCodexNodeExecToolOverrides } from "./request-CCm4LaED.js";
+import { D as itemStatus, I as readItem, b as auditNativeToolTerminalStatus, g as isCodexNotificationForTurn, x as auditNativeToolUnfinishedStatus, y as auditNativeToolName } from "./attempt-client-cleanup-CpVfwctT.js";
+import { H as normalizeCodexDynamicToolName, L as filterCodexDynamicTools, R as filterCodexDynamicToolsForDisabledNativeSurface, V as isSystemAgentOnlyCodexDynamicToolAllowlist, d as emitCodexNativePreToolUseFailureDiagnostic, x as resolveCodexWebSearchPlan, z as isForcedPrivateQaCodexRuntime } from "./thread-lifecycle-CGGKP720.js";
+import { l as resolveCodexNativeExecutionPolicy, u as resolveCodexNodeExecToolOverrides } from "./request-BWxweEdK.js";
 import { r as sanitizeInlineImageDataUrl, t as invalidInlineImageText } from "./image-payload-sanitizer-CnfoUPCE.js";
-import { r as formatCodexDisplayText } from "./command-formatters-C54Yg3eA.js";
-import { a as sanitizeCodexApprovalVisibleText, c as waitForPluginApprovalDecision, i as requestPluginApproval, n as codexApprovalTimeoutText, o as stripDanglingCodexApprovalTerminalSequence, r as mapExecDecisionToOutcome, s as truncateCodexApprovalDisplayText, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-D80UZiJ_.js";
+import { r as formatCodexDisplayText } from "./command-formatters--UToCokS.js";
+import { a as sanitizeCodexApprovalVisibleText, c as waitForPluginApprovalDecision, i as requestPluginApproval, n as codexApprovalTimeoutText, o as stripDanglingCodexApprovalTerminalSequence, r as mapExecDecisionToOutcome, s as truncateCodexApprovalDisplayText, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-CCWQGlAI.js";
 import { asNonArrayRecord, asOptionalRecord, isRecord, normalizeOptionalString, normalizeTrimmedStringList, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 import path, { posix } from "node:path";
@@ -33,6 +33,7 @@ import { buildRemoteCommand, isToolAllowed, sanitizeEnvVars } from "openclaw/plu
 import { pinExecToolTarget, resolveCodexScheduledToolProjectionFactory, runWithCronCreatorAuthorityCapabilityResolver } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { saveMediaBuffer } from "openclaw/plugin-sdk/media-store";
 import { getMediaDir } from "openclaw/plugin-sdk/media-runtime";
+import { getCoreTtsToolResultMediaUrls } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
 import { normalizeOpenAIToolSchemas } from "openclaw/plugin-sdk/provider-tools";
 //#region extensions/codex/src/app-server/event-projector-native-tool-lifecycle.ts
 /** Projects metadata-only lifecycle diagnostics for native tool items. */
@@ -278,10 +279,10 @@ function joinRemoteWorkspacePath(remoteRoot, suffix) {
 //#endregion
 //#region extensions/codex/src/app-server/remote-workspace-media.ts
 const REMOTE_WORKSPACE_MEDIA_TIMEOUT_MS = 6e4;
-const REMOTE_WORKSPACE_MEDIA_MAX_BYTES = 64 * 1024 * 1024;
+const REMOTE_WORKSPACE_MEDIA_MAX_BYTES = 67108864;
 const REMOTE_WORKSPACE_MEDIA_MAX_ATTACHMENTS = 16;
-const CODEX_REMOTE_MEDIA_CHUNK_BYTES = 512 * 1024;
-const CODEX_REMOTE_COMMAND_DEFAULT_OUTPUT_BYTES = 1024 * 1024;
+const CODEX_REMOTE_MEDIA_CHUNK_BYTES = 524288;
+const CODEX_REMOTE_COMMAND_DEFAULT_OUTPUT_BYTES = 1048576;
 const CODEX_BOUNDED_REMOTE_FILE_READER = [
 	"try{",
 	"const fs=require(\"node:fs\");",
@@ -632,13 +633,6 @@ function preserveRingZeroSystemAgentTool(allTools, filteredTools) {
 	if (!openclaw) return filteredTools;
 	return [openclaw, ...filteredTools.filter((tool) => tool.name !== "openclaw")];
 }
-/** Splits sandbox and run session keys so tool calls can bind to both scopes when needed. */
-function resolveOpenClawCodingToolsSessionKeys(params, sandboxSessionKey) {
-	return {
-		sessionKey: sandboxSessionKey,
-		runSessionKey: params.sessionKey && params.sessionKey !== sandboxSessionKey ? params.sessionKey : void 0
-	};
-}
 /** Returns the canonical channel used for Codex message routing and receipts. */
 function resolveCodexMessageToolProvider(params) {
 	return params.messageChannel ?? params.messageProvider;
@@ -720,11 +714,11 @@ async function buildDynamicTools(input) {
 	const modelHasVision = params.model.input?.includes("image") ?? false;
 	const agentDir = params.agentDir ?? resolveAgentDir$1(params.config ?? {}, input.sessionAgentId);
 	const injectedOpenClawCodingToolsFactory = dynamicToolBuildState.openClawCodingToolsFactory;
-	let agentHarnessModule;
-	const loadAgentHarnessModule = async () => agentHarnessModule ??= await import("openclaw/plugin-sdk/agent-harness");
-	toolBuildStages.mark("load-agent-harness-tools");
-	const sessionKeys = resolveOpenClawCodingToolsSessionKeys(params, input.sandboxSessionKey);
-	const nativeExecutionPolicy = resolveCodexNativeExecutionPolicyForDynamicTools(input);
+	const nativeExecutionPolicy = resolveCodexNativeExecutionPolicyForRun(params, {
+		agentId: input.policyAgentId,
+		runtimeSessionKey: input.sandboxSessionKey,
+		sandbox: input.sandbox
+	});
 	const webSearchPlan = resolveCodexWebSearchPlan({
 		config: params.config,
 		disableTools: params.disableTools,
@@ -736,6 +730,7 @@ async function buildDynamicTools(input) {
 		const toolConstructionPlan = resolveCodexNodePlacementToolConstructionPlan(input.sandbox, input.nativeToolSurfaceEnabled);
 		const options = {
 			agentId: input.sessionAgentId,
+			policyAgentId: input.policyAgentId,
 			...toolRunContext,
 			exec: {
 				...params.execOverrides,
@@ -772,7 +767,8 @@ async function buildDynamicTools(input) {
 			trustedInternalHandoff: params.trustedInternalHandoff,
 			scheduledToolPolicy: params.scheduledToolPolicy,
 			allowGatewaySubagentBinding: params.allowGatewaySubagentBinding || isForcedPrivateQaCodexRuntime(),
-			...sessionKeys,
+			sessionKey: input.sandboxSessionKey,
+			runSessionKey: params.sessionKey && params.sessionKey !== input.sandboxSessionKey ? params.sessionKey : void 0,
 			sessionId: params.sessionId,
 			runId: params.runId,
 			approvalReviewerDeviceId: params.approvalReviewerDeviceId,
@@ -855,7 +851,7 @@ async function buildDynamicTools(input) {
 	const readableAllTools = [...readableAllToolProjection.tools];
 	const normallyProfiledTools = input.nativeToolSurfaceEnabled === false ? filterCodexDynamicToolsForDisabledNativeSurface(readableAllTools, input.pluginConfig, { preserveShell: shouldKeepOpenClawShellDynamicTools(input, nativeExecutionPolicy) }) : filterCodexDynamicTools(readableAllTools, input.pluginConfig);
 	const profileFilteredTools = (input.isHostScopedToolActive?.("openclaw") ?? isHostScopedAgentToolActive("openclaw")) && isSystemAgentOnlyCodexDynamicToolAllowlist(params.toolsAllow) ? preserveRingZeroSystemAgentTool(readableAllTools, normallyProfiledTools) : normallyProfiledTools;
-	const codexFilteredTools = addNodeShellDynamicToolsIfNeeded(addGatewayShellDynamicToolsIfAvailable(addSandboxShellDynamicToolsIfAvailable(isCodexMemoryFlushRun(params) ? filterCodexMemoryFlushDynamicTools(readableAllTools) : profileFilteredTools, readableAllTools, input), readableAllTools, input, nativeExecutionPolicy), readableAllTools, input, nativeExecutionPolicy);
+	const codexFilteredTools = addNodeShellDynamicToolsIfNeeded(addGatewayShellDynamicToolsIfAvailable(addSandboxShellDynamicToolsIfAvailable(isCodexMemoryFlushRun(params) ? filterCodexMemoryFlushDynamicTools(readableAllTools) : profileFilteredTools, readableAllTools, input, nativeExecutionPolicy), readableAllTools, input, nativeExecutionPolicy), readableAllTools, input, nativeExecutionPolicy);
 	toolBuildStages.mark("codex-filtering");
 	const visionFilteredTools = filterCodexVisionTools(codexFilteredTools, {
 		modelHasVision,
@@ -864,32 +860,32 @@ async function buildDynamicTools(input) {
 	toolBuildStages.mark("vision-filtering");
 	const webSearchPresent = visionFilteredTools.some((tool) => tool.name === "web_search");
 	const persistentCodexWebSearchSurface = params.config?.tools?.web?.search?.enabled !== false && !(input.pluginConfig.codexDynamicToolsExclude ?? []).some((name) => normalizeCodexDynamicToolName(name) === "web_search");
-	const webSearchPolicy = webSearchPresent || persistentCodexWebSearchSurface ? (await loadAgentHarnessModule()).resolveWebSearchToolPolicy({
-		config: params.config,
-		modelProvider: params.model.provider,
-		modelId: params.modelId,
-		agentId: input.sessionAgentId,
-		sessionKey: input.sandboxSessionKey,
-		sandboxToolPolicy: input.sandbox?.tools,
-		messageProvider: resolveCodexMessageToolProvider(params),
-		agentAccountId: params.agentAccountId,
-		groupId: params.groupId,
-		groupChannel: params.groupChannel,
-		groupSpace: params.groupSpace,
-		spawnedBy: params.spawnedBy,
-		senderId: params.senderId,
-		senderName: params.senderName,
-		senderUsername: params.senderUsername,
-		senderE164: params.senderE164,
-		inputProvenance: params.inputProvenance,
-		trustedInternalHandoff: params.trustedInternalHandoff,
-		scheduledToolPolicy: params.scheduledToolPolicy
-	}) : {
-		allowed: false,
-		persistentAllowed: false
-	};
-	const transientWebSearchRestriction = !webSearchPolicy.allowed && webSearchPolicy.persistentAllowed || isCodexMemoryFlushRun(params);
-	input.onPersistentWebSearchPolicyResolved?.(webSearchPresent || persistentCodexWebSearchSurface && transientWebSearchRestriction && webSearchPolicy.persistentAllowed);
+	let persistentWebSearchAllowed = webSearchPresent;
+	if (input.onPersistentWebSearchPolicyResolved && !webSearchPresent && persistentCodexWebSearchSurface) {
+		const webSearchPolicy = (await import("openclaw/plugin-sdk/agent-harness")).resolveWebSearchToolPolicy({
+			config: params.config,
+			modelProvider: params.model.provider,
+			modelId: params.modelId,
+			agentId: input.policyAgentId,
+			sessionKey: input.sandboxSessionKey,
+			sandboxToolPolicy: input.sandbox?.tools,
+			messageProvider: resolveCodexMessageToolProvider(params),
+			agentAccountId: params.agentAccountId,
+			groupId: params.groupId,
+			groupChannel: params.groupChannel,
+			groupSpace: params.groupSpace,
+			spawnedBy: params.spawnedBy,
+			senderId: params.senderId,
+			senderName: params.senderName,
+			senderUsername: params.senderUsername,
+			senderE164: params.senderE164,
+			inputProvenance: params.inputProvenance,
+			trustedInternalHandoff: params.trustedInternalHandoff,
+			scheduledToolPolicy: params.scheduledToolPolicy
+		});
+		persistentWebSearchAllowed = webSearchPolicy.persistentAllowed && (!webSearchPolicy.allowed || isCodexMemoryFlushRun(params));
+	}
+	input.onPersistentWebSearchPolicyResolved?.(persistentWebSearchAllowed);
 	const filteredTools = filterCodexDynamicToolsForAllowlist(visionFilteredTools, toolRunContext.runtimeToolAllowlist);
 	toolBuildStages.mark("allowlist-filter");
 	const normalizedTools = normalizeAgentRuntimeTools({
@@ -965,26 +961,25 @@ function shouldEnableCodexAppServerNativeToolSurface(params, sandbox, options =
 	if (params.pluginHarnessToolPolicyRestricted === true) return false;
 	if (isCodexMemoryFlushRun(params)) return false;
 	if (params.disableTools) return false;
-	if (isCodexNativeExecutionBlockedByNodeExecHost(params, {
+	if (!resolveCodexNativeExecutionPolicyForRun(params, {
 		agentId: options.agentId,
 		runtimeSessionKey: options.runtimeSessionKey,
 		sandbox
-	})) return false;
+	}).nativeToolSurfaceAllowed) return false;
 	const toolsAllow = params.toolsAllow;
 	if (toolsAllow === void 0) return canCodexAppServerNativeToolSurfaceHonorSandbox(sandbox, options);
 	return hasWildcardCodexToolsAllow(toolsAllow) && canCodexAppServerNativeToolSurfaceHonorSandbox(sandbox, options);
 }
-/** Returns true when OpenClaw policy requires the Node-owned exec/process tools instead. */
-function isCodexNativeExecutionBlockedByNodeExecHost(params, options = {}) {
-	return !resolveCodexNativeExecutionPolicy({
+function resolveCodexNativeExecutionPolicyForRun(params, options = {}) {
+	return resolveCodexNativeExecutionPolicy({
 		config: params.config,
 		sessionKey: resolveCodexRuntimePolicySessionKey(params, options.runtimeSessionKey),
 		sessionId: params.sessionId,
 		agentId: options.agentId,
 		execOverrides: params.execOverrides,
-		sandboxAvailable: options.sandbox?.enabled,
+		sandboxAvailable: options.sandbox === null ? false : options.sandbox?.enabled,
 		readRuntimeSessionEntry: true
-	}).nativeToolSurfaceAllowed;
+	});
 }
 function resolveCodexRuntimePolicySessionKey(params, runtimeSessionKey) {
 	return runtimeSessionKey?.trim() || params.sandboxSessionKey?.trim() || params.sessionKey?.trim() || params.sessionId;
@@ -1047,8 +1042,8 @@ function disableCodexPluginThreadConfig(pluginConfig) {
 	};
 }
 /** Adds sandbox_exec/process aliases when native Code Mode cannot directly honor the sandbox. */
-function addSandboxShellDynamicToolsIfAvailable(filteredTools, allTools, input) {
-	if (!shouldExposeSandboxExecDynamicTool(input) || isSandboxShellDynamicToolExcluded(input.pluginConfig)) return filteredTools;
+function addSandboxShellDynamicToolsIfAvailable(filteredTools, allTools, input, executionPolicy) {
+	if (isCodexMemoryFlushRun(input.params) || !executionPolicy.nativeToolSurfaceAllowed || !input.sandbox?.enabled || !input.sandbox.backendId.trim() || input.nativeToolSurfaceEnabled !== false || isSandboxShellDynamicToolExcluded(input.pluginConfig)) return filteredTools;
 	const execTool = allTools.find((tool) => normalizeCodexDynamicToolName(tool.name) === "exec");
 	const processTool = allTools.find((tool) => normalizeCodexDynamicToolName(tool.name) === "process");
 	if (!execTool || !processTool) return filteredTools;
@@ -1075,16 +1070,6 @@ function addSandboxShellDynamicToolsIfAvailable(filteredTools, allTools, input)
 		sandboxProcessTool
 	];
 }
-function shouldExposeSandboxExecDynamicTool(input) {
-	if (isCodexMemoryFlushRun(input.params)) return false;
-	if (isCodexNativeExecutionBlockedByNodeExecHost(input.params, {
-		agentId: input.sessionAgentId,
-		runtimeSessionKey: input.sandboxSessionKey,
-		sandbox: input.sandbox
-	})) return false;
-	const backendId = input.sandbox?.enabled ? input.sandbox.backendId.trim().toLowerCase() : "";
-	return Boolean(backendId && input.nativeToolSurfaceEnabled === false);
-}
 function isSandboxShellDynamicToolExcluded(config) {
 	return isCodexDynamicToolExcluded(config, [
 		"exec",
@@ -1106,17 +1091,6 @@ function addNodeShellDynamicToolsIfNeeded(filteredTools, allTools, input, nodePo
 function shouldKeepOpenClawShellDynamicTools(input, nodePolicy) {
 	return !isCodexMemoryFlushRun(input.params) && input.nativeToolSurfaceEnabled === false && input.sandbox?.enabled !== true && nodePolicy.effectiveExecHost !== "node";
 }
-function resolveCodexNativeExecutionPolicyForDynamicTools(input) {
-	return resolveCodexNativeExecutionPolicy({
-		config: input.params.config,
-		sessionKey: resolveCodexRuntimePolicySessionKey(input.params, input.sandboxSessionKey),
-		sessionId: input.params.sessionId,
-		agentId: input.sessionAgentId,
-		execOverrides: input.params.execOverrides,
-		sandboxAvailable: input.sandbox?.enabled,
-		readRuntimeSessionEntry: true
-	});
-}
 /** Applies a normalized tool allowlist while preserving shell aliases for exec/process. */
 function filterCodexDynamicToolsForAllowlist(tools, toolsAllow) {
 	if (!toolsAllow) return tools;
@@ -1138,9 +1112,9 @@ function shouldForceMessageTool(params) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/sandbox-exec-server-node-relay.ts
-const CODEX_NODE_EXEC_SERVER_MAX_MESSAGE_BYTES$1 = 64 * 1024 * 1024;
+const CODEX_NODE_EXEC_SERVER_MAX_MESSAGE_BYTES$1 = 67108864;
 const CODEX_NODE_EXEC_SERVER_MAX_FAILURE_DETAIL_CHARS = 240;
-const CODEX_NODE_HTTP_CREDENTIAL_BODY_MAX_BYTES = 1024 * 1024;
+const CODEX_NODE_HTTP_CREDENTIAL_BODY_MAX_BYTES = 1048576;
 const CODEX_NODE_HTTP_CREDENTIAL_SCAN_MAX_FIELDS = 256;
 const CODEX_NODE_HTTP_CREDENTIAL_SCAN_MAX_DEPTH = 8;
 const CODEX_NODE_HTTP_CREDENTIAL_HEADER_NAMES = /* @__PURE__ */ new Set([
@@ -1780,10 +1754,10 @@ function joinSandboxChildPath(parent, child) {
 * Implements filesystem JSON-RPC handlers for the Codex sandbox exec-server
 * with OpenClaw sandbox policy checks before every bridge operation.
 */
-const CODEX_SANDBOX_EXEC_SERVER_MAX_READ_FILE_BYTES = 512 * 1024 * 1024;
+const CODEX_SANDBOX_EXEC_SERVER_MAX_READ_FILE_BYTES = 536870912;
 const CODEX_SANDBOX_EXEC_SERVER_MAX_OPEN_FILE_READS = 128;
-const CODEX_SANDBOX_EXEC_SERVER_MAX_BUFFERED_FILE_READ_BYTES = 64 * 1024 * 1024;
-const CODEX_SANDBOX_EXEC_SERVER_MAX_READ_BLOCK_BYTES = 1024 * 1024;
+const CODEX_SANDBOX_EXEC_SERVER_MAX_BUFFERED_FILE_READ_BYTES = 67108864;
+const CODEX_SANDBOX_EXEC_SERVER_MAX_READ_BLOCK_BYTES = 1048576;
 const CODEX_SANDBOX_EXEC_SERVER_MAX_FILE_READ_HANDLE_ID_BYTES = 32;
 /** Opens a policy-checked sandbox file under a bounded, connection-owned handle. */
 async function openFile(execServer, handles, params) {
@@ -2187,7 +2161,7 @@ function delay(ms) {
 * access through the active OpenClaw sandbox backend.
 */
 /** Maximum JSON-line size accepted from the streaming HTTP helper process. */
-const SANDBOX_HTTP_STREAM_LINE_MAX_CHARS = 256 * 1024;
+const SANDBOX_HTTP_STREAM_LINE_MAX_CHARS = 262144;
 /** Handles one sandbox HTTP JSON-RPC request, optionally streaming response body deltas. */
 async function httpRequest(execServer, notifications, params) {
 	const record = requireObject(params, "http/request params");
@@ -2499,6 +2473,9 @@ def assert_url_allowed(url):
     PINNED_ADDRESSES[hostname] = sorted(addresses)
 
 class GuardedRedirectHandler(urllib.request.HTTPRedirectHandler):
+    # Python 3.9 lacks the 308 dispatch alias; use the same guarded redirect path.
+    http_error_308 = urllib.request.HTTPRedirectHandler.http_error_302
+
     def __init__(self, redirect_policy):
         self.redirect_policy = redirect_policy
 
@@ -2612,7 +2589,7 @@ python3 "$tmp"
 * termination for Codex sandbox exec-server process RPCs.
 */
 const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
-const RETAINED_PROCESS_OUTPUT_BYTES = 1024 * 1024;
+const RETAINED_PROCESS_OUTPUT_BYTES = 1048576;
 const CLOSED_PROCESS_EVICTION_MS = 6e4;
 /** Starts a sandbox-backed process and registers it in the connection-local process table. */
 async function startProcess(execServer, processes, notify, params) {
@@ -2869,10 +2846,11 @@ function readEnv(value) {
 	return env;
 }
 function readProcessEnv(record) {
-	return sanitizeEnvVars({
+	const requestedEnv = {
 		...buildEnvFromPolicy(record.envPolicy),
 		...readEnv(record.env)
-	}).allowed;
+	};
+	return sanitizeEnvVars(requestedEnv).allowed;
 }
 function buildEnvFromPolicy(value) {
 	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
@@ -2987,8 +2965,8 @@ var CodexSandboxExecSession = class {
 * Hosts the local OpenClaw sandbox exec-server that Codex app-server native
 * execution can register as an external environment.
 */
-const CODEX_SANDBOX_EXEC_SERVER_MAX_INBOUND_MESSAGE_BYTES = 100 * 1024 * 1024;
-const CODEX_NODE_EXEC_SERVER_MAX_MESSAGE_BYTES = 64 * 1024 * 1024;
+const CODEX_SANDBOX_EXEC_SERVER_MAX_INBOUND_MESSAGE_BYTES = 104857600;
+const CODEX_NODE_EXEC_SERVER_MAX_MESSAGE_BYTES = 67108864;
 const codexNodeExecServerLeases = /* @__PURE__ */ new WeakMap();
 /** Starts or reuses a sandbox exec-server and registers it with Codex app-server. */
 async function ensureCodexSandboxExecServerEnvironment(params) {
@@ -3369,6 +3347,8 @@ async function handleCodexAppServerApprovalRequest(params) {
 			resolvedOutcome = "approved-once";
 			resolvedMessage = "Codex app-server approval granted for this byte-bound command only.";
 		}
+		params.signal?.throwIfAborted();
+		if (resolvedOutcome !== "denied") params.paramsForRun.hostCapabilities.assertActive();
 		emitApprovalEvent(params.paramsForRun, {
 			phase: "resolved",
 			kind: context.kind,
@@ -3407,6 +3387,7 @@ async function handleCodexAppServerApprovalRequest(params) {
 			autoApprove: params.autoApprove,
 			signal: params.signal
 		});
+		params.signal?.throwIfAborted();
 		if (policyOutcome?.outcome === "denied") {
 			recordNativeToolFailureDisposition(params, context, policyOutcome.failureDisposition);
 			return await resolvePolicyApproval("denied", policyOutcome.reason);
@@ -3415,6 +3396,7 @@ async function handleCodexAppServerApprovalRequest(params) {
 		if (CONCRETE_TOOL_AUTO_APPROVAL_METHODS.has(params.method) && !readNetworkApprovalContext(requestParams) && params.autoApprove === true) return await resolvePolicyApproval("approved-session", "Codex app-server approval auto-approved by runtime policy.");
 		const requestResult = await requestPluginApproval({
 			hostCapabilities: params.paramsForRun.hostCapabilities,
+			signal: params.signal,
 			title: context.title,
 			description: context.description,
 			severity: context.severity,
@@ -3928,7 +3910,8 @@ function summarizeNetworkPolicyAmendments(value) {
 function sanitizePermissionHostValue(value) {
 	const withoutScheme = sanitizePermissionScalar(value).toLowerCase().replace(/^[a-z][a-z0-9+.-]*:\/\//, "");
 	const authority = withoutScheme.split(/[/?#]/, 1)[0] ?? withoutScheme;
-	return truncateCodexApprovalDisplayText(authority.includes("@") ? authority.slice(authority.lastIndexOf("@") + 1) : authority, PERMISSION_VALUE_MAX_LENGTH);
+	const withoutUserInfo = authority.includes("@") ? authority.slice(authority.lastIndexOf("@") + 1) : authority;
+	return truncateCodexApprovalDisplayText(withoutUserInfo, PERMISSION_VALUE_MAX_LENGTH);
 }
 function sanitizePermissionPathValue(value) {
 	return truncateCodexApprovalDisplayText(formatApprovalDisplayPath(sanitizePermissionScalar(value)), PERMISSION_VALUE_MAX_LENGTH);
@@ -4057,7 +4040,8 @@ function appendPreviewPart(source, part, separator) {
 }
 function sanitizeApprovalPreview(source, maxLength) {
 	if (!source || !source.value) return { omitted: false };
-	const sanitized = sanitizeCodexApprovalVisibleText(stripDanglingCodexApprovalTerminalSequence(source.value));
+	const rawPreview = stripDanglingCodexApprovalTerminalSequence(source.value);
+	const sanitized = sanitizeCodexApprovalVisibleText(rawPreview);
 	if (!sanitized) return { omitted: true };
 	return {
 		text: formatCodexDisplayText(truncateCodexApprovalDisplayText(sanitized, maxLength)),
@@ -4202,6 +4186,7 @@ async function routeCodexAppServerElicitationRequest(params) {
 	const requestTurnId = requestParams.turnId;
 	if (requestTurnId !== null && requestTurnId !== void 0 && requestTurnId !== params.turnId) return { kind: "not-mine" };
 	if (!((isJsonObject(requestParams["_meta"]) ? requestParams["_meta"] : void 0)?.[MCP_TOOL_APPROVAL_KIND_KEY] === MCP_TOOL_APPROVAL_KIND || params.computerUseMcpServerName !== void 0 && readNonBlankStringField(requestParams, "serverName") === params.computerUseMcpServerName)) return { kind: "not-mine" };
+	if (params.signal?.aborted) return handled(createCodexElicitationResponse("cancel"));
 	const pluginResolution = resolvePluginElicitation({
 		requestParams,
 		pluginAppPolicyContext: params.pluginAppPolicyContext
@@ -4500,7 +4485,8 @@ function readDisplayParamLines(meta) {
 	return remaining > 0 ? [...lines, `- Additional parameters: ${remaining} more`] : lines;
 }
 function formatDisplayParamValue(value) {
-	return truncateCodexApprovalDisplayText(sanitizeDisplayText(typeof value === "string" ? value : formatDisplayJsonValue(value ?? null)), MAX_DISPLAY_PARAM_VALUE_LENGTH);
+	const formatted = typeof value === "string" ? value : formatDisplayJsonValue(value ?? null);
+	return truncateCodexApprovalDisplayText(sanitizeDisplayText(formatted), MAX_DISPLAY_PARAM_VALUE_LENGTH);
 }
 function formatDisplayJsonValue(value, depth = MAX_DISPLAY_VALUE_DEPTH) {
 	if (value === null) return "null";
@@ -4548,6 +4534,7 @@ async function requestPluginApprovalOutcome(params) {
 	try {
 		const requestResult = await requestPluginApproval({
 			hostCapabilities: params.paramsForRun.hostCapabilities,
+			signal: params.signal,
 			title: params.title,
 			description: params.description,
 			severity: "warning",
@@ -4734,7 +4721,7 @@ function assertCodexDynamicToolInputMatchesSchema(params) {
 	const visibleErrors = validation.errors.slice(0, MAX_CODEX_DYNAMIC_TOOL_VALIDATION_ERRORS);
 	const details = visibleErrors.map((error) => {
 		if (error.text.length <= MAX_CODEX_DYNAMIC_TOOL_VALIDATION_ERROR_CHARS) return error.text;
-		return `${error.text.slice(0, MAX_CODEX_DYNAMIC_TOOL_VALIDATION_ERROR_CHARS - 19)}${CODEX_DYNAMIC_TOOL_VALIDATION_TRUNCATED_SUFFIX}`;
+		return `${error.text.slice(0, 141)}${CODEX_DYNAMIC_TOOL_VALIDATION_TRUNCATED_SUFFIX}`;
 	}).join("; ");
 	const omitted = validation.errors.length - visibleErrors.length;
 	const omittedSuffix = omitted > 0 ? `; ${omitted} more violation(s) omitted` : "";
@@ -4943,6 +4930,8 @@ function createCodexDynamicToolBridge(params) {
 		messagingToolSentTargets: [],
 		messagingToolSourceReplyPayloads: [],
 		toolMediaUrls: [],
+		toolAutoDeliveryMediaUrls: [],
+		coreTtsToolResults: [],
 		toolAudioAsVoice: false,
 		acceptedSessionSpawns: [],
 		quarantinedTools
@@ -5156,13 +5145,17 @@ function createCodexDynamicToolBridge(params) {
 				const toolConfirmedSourceReply = params.hookContext?.sourceReplyDeliveryMode === "message_tool_only" && toolName === "message" && !resultIsError && (rawResult.terminate === true || result.terminate === true);
 				const confirmedSourceReply = params.hookContext?.sourceReplyDeliveryMode === "message_tool_only" && toolName === "message" && (toolConfirmedSourceReply || deliveredSourceReply || receiptConfirmedSourceReply);
 				const sourceReplyFinal = confirmedSourceReply ? executedArgs.final !== false : void 0;
+				const autoDeliveryTtsMediaUrls = getCoreTtsToolResultMediaUrls(rawResult);
 				collectToolTelemetry({
 					toolName,
 					args: executedArgs,
 					result,
 					mediaTrustResult: telemetryRawResult,
 					telemetry,
+					signal,
 					isError: resultIsError,
+					autoDeliveryTtsMediaUrls,
+					coreTtsToolResult: autoDeliveryTtsMediaUrls?.length ? rawResult : void 0,
 					messagingTarget: confirmedMessagingTarget,
 					sourceReplyFinal
 				});
@@ -5194,13 +5187,6 @@ function createCodexDynamicToolBridge(params) {
 					toolCallOrdinal: options?.toolCallOrdinal
 				});
 				notifyAgentToolResult(options?.onAgentToolResult, toolName, failedResult, true);
-				collectToolTelemetry({
-					toolName,
-					args: executedArgs,
-					result: void 0,
-					telemetry,
-					isError: true
-				});
 				runAgentHarnessAfterToolCallHook({
 					toolName,
 					toolCallId: call.callId,
@@ -5525,15 +5511,26 @@ function collectToolTelemetry(params) {
 		const response = normalizeHeartbeatToolResponse(params.result?.details);
 		if (response) params.telemetry.heartbeatToolResponse = response;
 	}
-	if (!params.isError && params.result) {
+	if (params.result && !params.signal.aborted) {
 		const media = extractToolResultMediaArtifact(params.result);
 		if (media) {
 			const mediaUrls = filterToolResultMediaUrls(params.toolName, media.mediaUrls, params.mediaTrustResult ?? params.result);
 			const seen = new Set(params.telemetry.toolMediaUrls);
-			for (const mediaUrl of mediaUrls) if (!seen.has(mediaUrl)) {
-				seen.add(mediaUrl);
-				params.telemetry.toolMediaUrls.push(mediaUrl);
+			const autoDeliveryMediaUrls = new Set(params.telemetry.toolAutoDeliveryMediaUrls);
+			const rawAutoDeliveryMediaUrls = new Set(params.autoDeliveryTtsMediaUrls);
+			let retainsCoreTtsMedia = false;
+			for (const mediaUrl of mediaUrls) {
+				if (!seen.has(mediaUrl)) {
+					seen.add(mediaUrl);
+					params.telemetry.toolMediaUrls.push(mediaUrl);
+				}
+				if (rawAutoDeliveryMediaUrls.has(mediaUrl)) {
+					autoDeliveryMediaUrls.add(mediaUrl);
+					retainsCoreTtsMedia = true;
+				} else autoDeliveryMediaUrls.delete(mediaUrl);
 			}
+			params.telemetry.toolAutoDeliveryMediaUrls = [...autoDeliveryMediaUrls];
+			if (retainsCoreTtsMedia && params.coreTtsToolResult && !params.telemetry.coreTtsToolResults.includes(params.coreTtsToolResult)) params.telemetry.coreTtsToolResults.push(params.coreTtsToolResult);
 			if (media.audioAsVoice) params.telemetry.toolAudioAsVoice = true;
 		}
 	}

package/dist/{effective-mcp-catalog-BTJHnDSx.js → effective-mcp-catalog-XXQKgK1U.js}

@@ -1,5 +1,5 @@
-import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-kNkljY-R.js";
-import { d as sessionBindingIdentity } from "./session-binding-q2WSTVmC.js";
+import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-B1tT5U6r.js";
+import { d as sessionBindingIdentity } from "./session-binding-D0zinCP1.js";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts

package/dist/{event-projector-usage-D3PHFFXh.js → event-projector-usage-B2r5vhWH.js}

@@ -1,4 +1,4 @@
-import { Ht as isJsonObject } from "./shared-client-kNkljY-R.js";
+import { Ht as isJsonObject } from "./shared-client-B1tT5U6r.js";
 import { asSafeIntegerInRange, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeUsage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
@@ -246,7 +246,7 @@ function readTokenCount(record, key) {
 function readCodexThreadTokenUsage(params) {
 	const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
 	const last = tokenUsage && isJsonObject(tokenUsage.last) ? tokenUsage.last : void 0;
-	return last ? normalizeCodexThreadTokenUsage(last) : void 0;
+	return last ? normalizeCodexResponseTokenUsage(last) : void 0;
 }
 function readCodexThreadContextSnapshot(params) {
 	const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
@@ -256,7 +256,6 @@ function readCodexThreadContextSnapshot(params) {
 	const inputTokens = last ? readTokenCount(last, "inputTokens") : void 0;
 	const cachedInputTokens = last ? readTokenCount(last, "cachedInputTokens") : void 0;
 	const cacheWriteInputTokens = last ? readTokenCount(last, "cacheWriteInputTokens") : void 0;
-	const outputTokens = last ? readTokenCount(last, "outputTokens") : void 0;
 	const reasoningOutputTokens = last ? readTokenCount(last, "reasoningOutputTokens") : void 0;
 	return {
 		...activeContextTokens !== void 0 ? { activeContextTokens } : {},
@@ -264,7 +263,6 @@ function readCodexThreadContextSnapshot(params) {
 		...cacheWriteInputTokens !== void 0 ? { cacheWriteInputTokens } : {},
 		...inputTokens !== void 0 ? { inputTokens } : {},
 		...modelContextWindow && modelContextWindow > 0 ? { modelContextWindow } : {},
-		...outputTokens !== void 0 ? { outputTokens } : {},
 		...inputTokens !== void 0 ? { promptTokens: inputTokens } : {},
 		...reasoningOutputTokens !== void 0 ? { reasoningOutputTokens } : {}
 	};
@@ -274,13 +272,7 @@ function projectCodexThreadUsageUpdate(params, currentUsage, applyUsage, emitCon
 	const context = readCodexThreadContextSnapshot(params);
 	if (Object.keys(context).length > 0) emitContext(context);
 }
-function normalizeCodexThreadTokenUsage(record) {
-	return normalizeCodexTokenUsageBreakdown(record);
-}
 function normalizeCodexResponseTokenUsage(record) {
-	return normalizeCodexTokenUsageBreakdown(record);
-}
-function normalizeCodexTokenUsageBreakdown(record) {
 	const totalTokens = readTokenCount(record, "totalTokens");
 	const inputTokens = readTokenCount(record, "inputTokens");
 	const cacheRead = readTokenCount(record, "cachedInputTokens");
@@ -317,11 +309,14 @@ var CodexResponseCompletionProjection = class {
 	clear() {
 		this.usage = void 0;
 	}
-	record(params) {
+	record(params, reportOutputTokens) {
 		const responseId = readStringField(params, "responseId");
-		if (responseId) this.responseIds.add(responseId);
+		if (!responseId || this.responseIds.has(responseId)) return;
+		this.responseIds.add(responseId);
 		const usage = isJsonObject(params.usage) ? params.usage : void 0;
 		this.usage = usage ? normalizeCodexResponseTokenUsage(usage) : void 0;
+		const outputTokens = this.usage?.output;
+		if (outputTokens !== void 0) reportOutputTokens?.(outputTokens);
 	}
 };
 //#endregion

package/dist/{harness-DVfUQBlQ.js → harness-BgeB7LnD.js}

@@ -77,7 +77,7 @@ function createCodexAppServerAgentHarness(options) {
 		...sessionCatalogControlFactory && sessionRuntime ? { sessionFork: {
 			upstreamKinds: ["codex-app-server"],
 			fork: async (params) => {
-				const { forkCodexUpstreamSession } = await import("./upstream-session-fork-BACGlOFa.js");
+				const { forkCodexUpstreamSession } = await import("./upstream-session-fork-Dc8BFExw.js");
 				return await forkCodexUpstreamSession(params, {
 					bindingStore: options.bindingStore,
 					controlFactory: sessionCatalogControlFactory,
@@ -92,22 +92,22 @@ function createCodexAppServerAgentHarness(options) {
 			return fingerprintCodexAppServerAuthBinding(params);
 		} },
 		runtimeArtifact: { validate: async (binding) => {
-			const { validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-DeBvleJw.js");
+			const { validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-D9pYp4zL.js");
 			return validateCodexAppServerRuntimeArtifact(binding);
 		} },
 		fetchUsageSnapshot: async (ctx) => {
-			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-C2l8Mils.js");
+			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-DUhd58gI.js");
 			return await fetchCodexAppServerUsageSnapshot(ctx, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		loadModelCatalog: async (params) => {
-			const { createCodexAppServerModelCatalog } = await import("./model-catalog-o6Cgjoss.js");
+			const { createCodexAppServerModelCatalog } = await import("./model-catalog-DULBcniB.js");
 			if (disposed) return [];
 			modelCatalog ??= createCodexAppServerModelCatalog(harnessRuntimeId);
 			return await modelCatalog.load(params, resolveAttemptPluginConfig(params.config));
 		},
 		readModelCatalogReadiness: (params) => modelCatalog?.read(params, resolveAttemptPluginConfig(params.config)),
 		loadMcpToolCatalog: async (params) => {
-			const { loadCodexEffectiveMcpCatalog } = await import("./effective-mcp-catalog-BTJHnDSx.js");
+			const { loadCodexEffectiveMcpCatalog } = await import("./effective-mcp-catalog-XXQKgK1U.js");
 			return await loadCodexEffectiveMcpCatalog(params, { bindingStore: options.bindingStore });
 		},
 		supports: (ctx) => {
@@ -150,7 +150,7 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-BwNQDH2u.js");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-BVLE4Gbi.js");
 			return runCodexAppServerAttempt(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: resolveAttemptPluginConfig(params.config),
@@ -161,7 +161,7 @@ function createCodexAppServerAgentHarness(options) {
 		},
 		runIsolatedCompletionV2: async (params) => {
 			if (params.authorization.owner === "host") return runHostPreparedIsolatedCompletion(params);
-			const { runCodexIsolatedCompletion } = await import("./isolated-completion-Cbbx_5Ed.js");
+			const { runCodexIsolatedCompletion } = await import("./isolated-completion-CxTus3vZ.js");
 			return runCodexIsolatedCompletion(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runIsolatedCompletion: async (params) => {
@@ -176,11 +176,11 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		finalizeSettledTurn: async (params) => {
-			const { runCodexSettledTurnFinalization } = await import("./settled-turn-finalizer-B8JJcxCi.js");
+			const { runCodexSettledTurnFinalization } = await import("./settled-turn-finalizer-BXLN9PfJ.js");
 			return runCodexSettledTurnFinalization(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-GwD73tX6.js");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-CZ-mCw-t.js");
 			return runCodexAppServerSideQuestion(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -190,20 +190,20 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-Hd7SAc0N.js");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-5xqW1oCh.js");
 			return maybeCompactCodexAppServerSession(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig
 			});
 		},
 		withSessionDeletion: async (params, run) => {
-			const { withCodexAppServerSessionDeletion } = await import("./session-retirement-CdkI0bvb.js");
+			const { withCodexAppServerSessionDeletion } = await import("./session-retirement-CtUtUTr9.js");
 			params.assertCurrent();
 			return withCodexAppServerSessionDeletion(options.bindingStore, params, run);
 		},
 		reset: async (params) => {
 			if (params.sessionId && params.reason !== "deleted") {
-				const [{ reclaimCurrentCodexSessionGeneration, sessionBindingIdentity }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./session-binding-q2WSTVmC.js").then((n) => n.f), import("./session-retirement-CdkI0bvb.js")]);
+				const [{ reclaimCurrentCodexSessionGeneration, sessionBindingIdentity }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./session-binding-D0zinCP1.js").then((n) => n.f), import("./session-retirement-CtUtUTr9.js")]);
 				const identity = sessionBindingIdentity({
 					agentId: params.agentId,
 					sessionId: params.sessionId,
@@ -235,7 +235,7 @@ function createCodexAppServerAgentHarness(options) {
 /** Creates the private native-compaction bridge registered in host-owned capability state. */
 function createCodexAppServerNativeCompaction(options) {
 	return async (params) => {
-		const { maybeCompactCodexAppServerSession } = await import("./compact-Hd7SAc0N.js");
+		const { maybeCompactCodexAppServerSession } = await import("./compact-5xqW1oCh.js");
 		return maybeCompactCodexAppServerSession(params, {
 			bindingStore: options.bindingStore,
 			pluginConfig: options.resolvePluginConfig?.() ?? options.pluginConfig,

package/dist/harness.js

@@ -1,2 +1,2 @@
-import { n as createCodexAppServerNativeCompaction, t as createCodexAppServerAgentHarness } from "./harness-DVfUQBlQ.js";
+import { n as createCodexAppServerNativeCompaction, t as createCodexAppServerAgentHarness } from "./harness-BgeB7LnD.js";
 export { createCodexAppServerAgentHarness, createCodexAppServerNativeCompaction };