@openclaw/codex 2026.9.3 → 2026.9.4

package/dist/{command-rpc-BMqRQOFX.js → command-rpc-CR5EOEZX.js}

@@ -1,16 +1,16 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-BeqLPbtM.js";
-import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-CGvGOpeR.js";
-import "./config-JDfTI4VI.js";
-import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
-import { n as prepareCodexAppServerAuthBinding } from "./auth-binding-Co2Vfcf_.js";
+import { o as isJsonObject } from "./protocol-5bh1G-H7.js";
+import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-8vx68WLH.js";
+import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-B7hEkBGq.js";
+import "./config-oIORaQ5T.js";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-D0zGNIHu.js";
+import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-CWlKVccJ.js";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CwzO4_RG.js";
-import { Z as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-D6cR54TV.js";
-import { n as listCodexAppServerModels } from "./models-P9k2qAof.js";
-import { n as createCodexSessionGenerationSupersededError } from "./session-binding-CKSepwIC.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
+import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CscigXXL.js";
+import { a as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { n as listCodexAppServerModels } from "./models-PCKOim-h.js";
+import { n as createCodexSessionGenerationSupersededError } from "./session-binding-CI8UuilT.js";
+import { t as resumeCodexAppServerThread } from "./thread-resume-DsDOZpFg.js";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { prepareAgentRuntimeAuth } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -20,16 +20,20 @@ import { resolveApiKeyForProvider } from "openclaw/plugin-sdk/provider-auth-runt
 //#region extensions/codex/src/command-rpc.ts
 var command_rpc_exports = /* @__PURE__ */ __exportAll({
 	codexControlRequest: () => codexControlRequest,
+	prepareCodexControlSessionAuth: () => prepareCodexControlSessionAuth,
 	readCodexStatusProbes: () => readCodexStatusProbes,
 	requestOptions: () => requestOptions,
 	safeCodexControlRequest: () => safeCodexControlRequest
 });
-async function prepareControlAuth(options, startOptions) {
-	if (!options.onResponse) return {
-		authProfileId: options.authProfileId ?? void 0,
-		clientOptions: { authProfileId: options.authProfileId }
-	};
-	if (!options.config || !options.sessionKey || !options.sessionId) throw new Error("Codex control subscription requires admitted session authority.");
+/** Selects the same prepared auth partition as an admitted session turn. */
+async function prepareCodexControlSessionAuth(options, startOptions) {
+	if (!options.config || !options.sessionKey || !options.sessionId) {
+		if (options.onResponse) throw new Error("Codex control subscription requires admitted session authority.");
+		return {
+			authProfileId: options.authProfileId ?? void 0,
+			clientOptions: { authProfileId: options.authProfileId }
+		};
+	}
 	const config = options.config;
 	const { sessionAgentId } = resolveSessionAgentIdsStrict({
 		config,
@@ -128,7 +132,10 @@ function requestOptions(pluginConfig, limit, config, agentDir) {
 async function codexControlRequest(pluginConfig, method, requestParams, options = {}) {
 	const runtime = options.startOptions ? resolveCodexSupervisionAppServerRuntimeOptions({ pluginConfig }) : resolveCodexAppServerRuntimeOptions({ pluginConfig });
 	const startOptions = options.startOptions ?? runtime.start;
-	const auth = await prepareControlAuth(options, startOptions);
+	const auth = options.onResponse ? await prepareCodexControlSessionAuth(options, startOptions) : {
+		authProfileId: options.authProfileId ?? void 0,
+		clientOptions: { authProfileId: options.authProfileId }
+	};
 	const controlRequestOptions = {
 		timeoutMs: options.timeoutMs ?? runtime.requestTimeoutMs,
 		assertCurrent: options.assertCurrent,
@@ -223,4 +230,4 @@ async function safeValue(read) {
 	}
 }
 //#endregion
-export { safeCodexControlRequest as a, requestOptions as i, command_rpc_exports as n, readCodexStatusProbes as r, codexControlRequest as t };
+export { requestOptions as a, readCodexStatusProbes as i, command_rpc_exports as n, safeCodexControlRequest as o, prepareCodexControlSessionAuth as r, codexControlRequest as t };

package/dist/{compact-CGJZ2rlb.js → compact-B_H3AOd7.js}

@@ -1,19 +1,19 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-CaZjYwNS.js";
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import { u as isCodexAppServerPrewriteRequestCancellationError } from "./client-BEKu4yDx.js";
+import { l as sessionBindingIdentity } from "./session-binding-record-Bcvslnhf.js";
+import { o as isJsonObject } from "./protocol-5bh1G-H7.js";
+import { u as isCodexAppServerPrewriteRequestCancellationError } from "./client-B57KWPQx.js";
 import { n as withCodexAppServerThreadMutation, t as isIncognitoSessionKey } from "./incognito-session-uhrBF6wJ.js";
-import { r as CodexAppServerRpcError } from "./session-catalog-provenance-DkJHo735.js";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-QqgcPCgk.js";
-import { P as consumeCodexAppServerLiveThread, W as retainCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CVhez2Uo.js";
-import { _ as readCodexNotificationTurnId, a as closeCodexStartupClientBestEffort, c as isCodexNoActiveTurnInterruptError, d as unsubscribeCodexThreadBestEffort, g as readCodexNotificationThreadId, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
-import { s as readCodexNotificationItem } from "./attempt-notifications--H8zXR5-.js";
-import { n as readCodexThreadContextSnapshot } from "./event-projector-usage-CIyrYYid.js";
-import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-CKSepwIC.js";
-import { r as assertCodexSupervisionThreadLineage } from "./thread-policy-D8kI7yAO.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
-import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-D6oASVRu.js";
+import { t as CodexAppServerRpcError } from "./rpc-error-ttN_QjEm.js";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-D3udKbIE.js";
+import { J as retainCodexAppServerLiveThread, R as consumeCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CscigXXL.js";
+import { _ as readCodexNotificationTurnId, a as closeCodexStartupClientBestEffort, c as isCodexNoActiveTurnInterruptError, d as unsubscribeCodexThreadBestEffort, g as readCodexNotificationThreadId, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { s as readCodexNotificationItem } from "./attempt-notifications-C9XufG6l.js";
+import { n as readCodexThreadContextSnapshot } from "./event-projector-usage-BfXmpOec.js";
+import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-CI8UuilT.js";
+import { r as assertCodexSupervisionThreadLineage } from "./thread-policy-BuEQfE0g.js";
+import { t as resumeCodexAppServerThread } from "./thread-resume-DsDOZpFg.js";
+import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BsDRTsyp.js";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.js";
-import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BcT66fWy.js";
+import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BxgyoM8M.js";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";

package/dist/{config-JDfTI4VI.js → config-oIORaQ5T.js}

@@ -1,7 +1,7 @@
-import { c as readExecAsk, f as readRecord, l as readExecSecurity } from "./config-utils-C57JiJrU.js";
-import { p as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-jnIFvwxD.js";
-import "./protocol-CAAcVIKF.js";
-import "./config-runtime-BWf6JLWG.js";
+import { c as readExecAsk, f as readRecord, l as readExecSecurity } from "./config-utils-DujwEnhg.js";
+import { p as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-CXMq1T-C.js";
+import "./protocol-5bh1G-H7.js";
+import "./config-runtime-D0zGNIHu.js";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";

package/dist/{config-options-jnIFvwxD.js → config-options-CXMq1T-C.js}

@@ -1,5 +1,5 @@
-import { a as normalizeHeaders, d as readNumberEnv, f as readRecord, i as normalizeCodexServiceTier, o as normalizePositiveNumber, p as resolveArgs, r as normalizeCodexAppServerSecretInput, s as readBooleanEnv, t as hashSecretForKey, u as readNonEmptyString } from "./config-utils-C57JiJrU.js";
-import { _ as assertCodexAppServerCommandHasNoInlineArgs, d as DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX, f as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, g as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, h as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, l as resolveCodexAppServerUserHomeDir, o as isJsonObject, p as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as resolveCodexAppServerHomeDir, x as readCodexPluginConfig } from "./protocol-CAAcVIKF.js";
+import { a as normalizeHeaders, d as readNumberEnv, f as readRecord, i as normalizeCodexServiceTier, o as normalizePositiveNumber, p as resolveArgs, r as normalizeCodexAppServerSecretInput, s as readBooleanEnv, t as hashSecretForKey, u as readNonEmptyString } from "./config-utils-DujwEnhg.js";
+import { _ as assertCodexAppServerCommandHasNoInlineArgs, d as DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX, f as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, g as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, h as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, l as resolveCodexAppServerUserHomeDir, o as isJsonObject, p as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as resolveCodexAppServerHomeDir, x as readCodexPluginConfig } from "./protocol-5bh1G-H7.js";
 import { r as readCodexAppServerConfigOptions } from "./launch-args-RXQwn8zV.js";
 import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
@@ -256,11 +256,11 @@ const CODEX_SESSION_OVERRIDABLE_LAYER_TYPES = /* @__PURE__ */ new Set([
 	"sessionFlags"
 ]);
 /** Read one effective snapshot for the current boundary's reviewer and tool-policy checks. */
-async function readCodexEffectiveConfig(client, cwd, signal) {
+async function readCodexEffectiveConfig(client, cwd, options) {
 	const response = await client.request("config/read", {
 		cwd: path.resolve(cwd),
 		includeLayers: true
-	}, { signal });
+	}, options);
 	if (!isJsonObject(response) || !isJsonObject(response.config)) throw new Error("Codex config/read returned an invalid effective config");
 	return response;
 }
@@ -270,7 +270,7 @@ const CODEX_CONFIG_TOML_FILENAME = "config.toml";
 /** Cloud/system config can redirect reviews after local home/profile checks have passed. */
 async function assertCodexModelBackedReviewerEffectiveConfig(params) {
 	if (params.approvalsReviewer !== "auto_review" && params.approvalsReviewer !== "guardian_subagent") return;
-	const response = await readCodexEffectiveConfig(params.client, params.cwd, params.signal);
+	const response = await readCodexEffectiveConfig(params.client, params.cwd, { signal: params.signal });
 	const effectiveConfig = response.config;
 	const modelProvider = effectiveConfig.model_provider;
 	const providers = effectiveConfig.model_providers;

package/dist/{config-runtime-BWf6JLWG.js → config-runtime-D0zGNIHu.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { r as createCodexAppServerConfig } from "./config-options-jnIFvwxD.js";
+import { r as createCodexAppServerConfig } from "./config-options-CXMq1T-C.js";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{config-utils-C57JiJrU.js → config-utils-DujwEnhg.js}

@@ -3,9 +3,7 @@ import { createHmac, randomBytes } from "node:crypto";
 import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { splitCommandArgs } from "openclaw/plugin-sdk/process-runtime";
 import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
-//#region extensions/codex/src/app-server/config-contracts.ts
-const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
-const CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME = "workspace-directory";
+//#region extensions/codex/src/app-server/config-contracts.shared.ts
 const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
 //#endregion
 //#region extensions/codex/src/app-server/config-utils.ts
@@ -66,4 +64,4 @@ function getStartOptionsKeySecret() {
 	return globalState[START_OPTIONS_KEY_SECRET_SYMBOL];
 }
 //#endregion
-export { normalizeHeaders as a, readExecAsk as c, readNumberEnv as d, readRecord as f, CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as g, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME as h, normalizeCodexServiceTier as i, readExecSecurity as l, CODEX_PLUGINS_MARKETPLACE_NAME as m, isCodexFastServiceTier as n, normalizePositiveNumber as o, resolveArgs as p, normalizeCodexAppServerSecretInput as r, readBooleanEnv as s, hashSecretForKey as t, readNonEmptyString as u };
+export { normalizeHeaders as a, readExecAsk as c, readNumberEnv as d, readRecord as f, normalizeCodexServiceTier as i, readExecSecurity as l, CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as m, isCodexFastServiceTier as n, normalizePositiveNumber as o, resolveArgs as p, normalizeCodexAppServerSecretInput as r, readBooleanEnv as s, hashSecretForKey as t, readNonEmptyString as u };

package/dist/{conversation-binding-CxOlHiix.js → conversation-binding-DsB4-O7U.js}

@@ -1,21 +1,21 @@
-import { l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-CaZjYwNS.js";
-import { b as readCodexRequirementsToml, n as codexSandboxPolicyForTurn } from "./config-options-jnIFvwxD.js";
-import { o as isJsonObject, x as readCodexPluginConfig } from "./protocol-CAAcVIKF.js";
-import { _ as assertCodexThreadAcceptsDirectInput, b as assertCodexThreadStartResponse, l as isCodexAppServerOverloadError, m as CodexThreadDirectInputError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-BEKu4yDx.js";
+import { l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-Bcvslnhf.js";
+import { b as readCodexRequirementsToml, g as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-CXMq1T-C.js";
+import { o as isJsonObject, x as readCodexPluginConfig } from "./protocol-5bh1G-H7.js";
+import { _ as assertCodexThreadAcceptsDirectInput, b as assertCodexThreadStartResponse, l as isCodexAppServerOverloadError, m as CodexThreadDirectInputError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-B57KWPQx.js";
 import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-BiodpIzq.js";
-import { i as projectBoundedCodexVisibleSessionHistory } from "./session-catalog-home-id-D7-aLiNt.js";
-import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-JDfTI4VI.js";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
+import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-v17wXgdK.js";
+import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-oIORaQ5T.js";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-D0zGNIHu.js";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CwzO4_RG.js";
-import { L as hasCodexAppServerLiveThread, P as consumeCodexAppServerLiveThread, R as isCodexAppServerClientRuntimeLive, U as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, x as withLeasedCodexAppServerClientStartSelectionRetry, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort, p as getCodexAppServerTurnRouter, s as isCodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
-import { n as isAssistantCommentaryCompletionNotification } from "./attempt-notifications--H8zXR5-.js";
-import { E as resolveCodexAppServerRequestModelSelection, Tt as mergeCodexThreadConfigs, k as buildCodexProjectDocThreadConfig, w as CODEX_NATIVE_PERSONALITY_NONE, wt as buildDisabledAppsConfigPatch } from "./thread-lifecycle-D1pzRwHB.js";
-import "./session-binding-CKSepwIC.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
-import { a as rollbackCodexAppServerBindingSubscription, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-D6oASVRu.js";
-import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-B22InTp_.js";
-import { u as trackCodexConversationActiveTurn } from "./conversation-control-CUCrSIQI.js";
+import { H as isCodexAppServerClientRuntimeLive, R as consumeCodexAppServerLiveThread, U as isCodexAppServerLiveThreadClaimed, V as hasCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, q as releaseCodexAppServerLiveThread, x as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-CscigXXL.js";
+import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort, p as getCodexAppServerTurnRouter, s as isCodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { n as isAssistantCommentaryCompletionNotification } from "./attempt-notifications-C9XufG6l.js";
+import { D as resolveCodexAppServerRequestModelSelection, Et as mergeCodexThreadConfigs, M as buildCodexProjectDocThreadConfig, T as CODEX_NATIVE_PERSONALITY_NONE, Tt as buildDisabledAppsConfigPatch } from "./thread-lifecycle-DXl1-I6b.js";
+import "./session-binding-CI8UuilT.js";
+import { t as resumeCodexAppServerThread } from "./thread-resume-DsDOZpFg.js";
+import { a as rollbackCodexAppServerBindingSubscription, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BsDRTsyp.js";
+import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-BBmXA8Eg.js";
+import { u as trackCodexConversationActiveTurn } from "./conversation-control-CtUu1b3m.js";
 import { asOptionalRecord, normalizeOptionalString, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -157,7 +157,7 @@ async function resolveThreadBindingRuntime(params) {
 		clientOptions
 	};
 }
-function buildConversationThreadRequest(resolved, serviceTier) {
+function buildConversationThreadRequest(resolved, serviceTier, effectiveNativeConfig) {
 	return {
 		cwd: resolved.workspaceDir,
 		...resolved.model ? { model: resolved.model } : {},
@@ -166,13 +166,18 @@ function buildConversationThreadRequest(resolved, serviceTier) {
 		approvalPolicy: resolved.runtime.approvalPolicy,
 		approvalsReviewer: resolved.runtime.approvalsReviewer,
 		...resolved.runtime.sessionRoot ? { runtimeWorkspaceRoots: [resolved.runtime.sessionRoot] } : {},
-		...codexConversationSandboxOrPermissions(resolved.runtime, resolved.runtime.sandbox),
+		...codexConversationSandboxOrPermissions(resolved.runtime, resolved.runtime.sandbox, effectiveNativeConfig),
 		...serviceTier ? { serviceTier } : {}
 	};
 }
-function codexConversationSandboxOrPermissions(runtime, sandbox) {
+async function buildConversationThreadRequestForClient(client, resolved, serviceTier, requestOptions) {
+	const effectiveConfig = await readCodexEffectiveConfig(client, resolved.workspaceDir, requestOptions());
+	requestOptions();
+	return buildConversationThreadRequest(resolved, serviceTier, effectiveConfig);
+}
+function codexConversationSandboxOrPermissions(runtime, sandbox, effectiveNativeConfig) {
 	const networkProxy = runtime.networkProxy;
-	const config = buildCodexProjectDocThreadConfig(mergeCodexThreadConfigs(networkProxy?.configPatch, buildDisabledAppsConfigPatch()));
+	const config = buildCodexProjectDocThreadConfig(mergeCodexThreadConfigs(networkProxy?.configPatch, buildDisabledAppsConfigPatch()), effectiveNativeConfig);
 	return networkProxy ? { config } : {
 		sandbox,
 		config
@@ -233,7 +238,7 @@ async function bindThread(params, threadId) {
 			lease: clientLease,
 			options: resolved.clientOptions,
 			run: async (client, requestOptions) => {
-				const request = buildConversationThreadRequest(resolved, params.serviceTier ?? resolved.runtime.serviceTier);
+				const request = await buildConversationThreadRequestForClient(client, resolved, params.serviceTier ?? resolved.runtime.serviceTier, requestOptions);
 				let response;
 				if (threadId && !resolved.runtime.networkProxy) {
 					if (isCodexAppServerLiveThreadClaimed(client, threadId)) throw new Error(`Codex thread ${threadId} has an active run; stop it before binding its conversation.`);
@@ -682,12 +687,15 @@ async function runBoundTurn(params) {
 					const response = assertCodexThreadStartResponse(await withLeasedCodexAppServerClientStartSelectionRetry({
 						lease: clientLease,
 						options: clientOptions,
-						run: async (requestClient, requestOptions) => await requestClient.request("thread/start", {
-							...buildConversationThreadRequest(threadRequestRuntime, serviceTier),
-							developerInstructions: CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS,
-							experimentalRawEvents: true,
-							...params.incognito ? { ephemeral: true } : {}
-						}, requestOptions()),
+						run: async (requestClient, requestOptions) => {
+							const threadRequest = await buildConversationThreadRequestForClient(requestClient, threadRequestRuntime, serviceTier, requestOptions);
+							return await requestClient.request("thread/start", {
+								...threadRequest,
+								developerInstructions: CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS,
+								experimentalRawEvents: true,
+								...params.incognito ? { ephemeral: true } : {}
+							}, requestOptions());
+						},
 						onClientChange: (nextClient) => {
 							client = nextClient;
 						}
@@ -733,21 +741,24 @@ async function runBoundTurn(params) {
 					const response = await withLeasedCodexAppServerClientStartSelectionRetry({
 						lease: clientLease,
 						options: clientOptions,
-						run: async (requestClient, requestOptions) => await resumeCodexAppServerThread({
-							client: requestClient,
-							onSubscriptionReleased: () => {
-								isolatedSubscriptionClient = requestClient;
-							},
-							abandonClient: async () => {
-								await closeCodexStartupClientBestEffort(requestClient);
-								isolatedSubscriptionClient = requestClient;
-							},
-							request: {
-								threadId,
-								...buildConversationThreadRequest(threadRequestRuntime, serviceTier)
-							},
-							requestResume: (request) => requestClient.request("thread/resume", request, requestOptions())
-						}),
+						run: async (requestClient, requestOptions) => {
+							const threadRequest = await buildConversationThreadRequestForClient(requestClient, threadRequestRuntime, serviceTier, requestOptions);
+							return await resumeCodexAppServerThread({
+								client: requestClient,
+								onSubscriptionReleased: () => {
+									isolatedSubscriptionClient = requestClient;
+								},
+								abandonClient: async () => {
+									await closeCodexStartupClientBestEffort(requestClient);
+									isolatedSubscriptionClient = requestClient;
+								},
+								request: {
+									threadId,
+									...threadRequest
+								},
+								requestResume: (request) => requestClient.request("thread/resume", request, requestOptions())
+							});
+						},
 						onClientChange: (nextClient) => {
 							client = nextClient;
 						}

package/dist/{conversation-control-CUCrSIQI.js → conversation-control-CtUu1b3m.js}

@@ -1,12 +1,12 @@
-import { n as isCodexFastServiceTier } from "./config-utils-C57JiJrU.js";
-import { r as bindingStoreKey } from "./session-binding-record-CaZjYwNS.js";
-import { a as formatCodexDisplayText } from "./command-formatters-DeTfrapr.js";
-import "./config-JDfTI4VI.js";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-QqgcPCgk.js";
+import { n as isCodexFastServiceTier } from "./config-utils-DujwEnhg.js";
+import { r as bindingStoreKey } from "./session-binding-record-Bcvslnhf.js";
+import { o as formatCodexDisplayText } from "./command-formatters-lxlkNZgU.js";
+import "./config-oIORaQ5T.js";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-D3udKbIE.js";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CwzO4_RG.js";
-import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CVhez2Uo.js";
-import { E as resolveCodexAppServerRequestModelSelection, O as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-D1pzRwHB.js";
-import "./session-binding-CKSepwIC.js";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CscigXXL.js";
+import { D as resolveCodexAppServerRequestModelSelection, k as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-DXl1-I6b.js";
+import "./session-binding-CI8UuilT.js";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";

package/dist/doctor-contract-api.js

@@ -391,7 +391,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-CKSepwIC.js").then((n) => n.c), import("./conversation-binding-data-BiodpIzq.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-CI8UuilT.js").then((n) => n.c), import("./conversation-binding-data-BiodpIzq.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),

package/dist/{dynamic-tools-D-JBoaLt.js → dynamic-tools-CmN5RAip.js}

@@ -1,13 +1,14 @@
-import { a as flattenCodexDynamicToolFunctions, o as isJsonObject, r as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE, x as readCodexPluginConfig, y as isCodexRemoteExecPlacementSandbox } from "./protocol-CAAcVIKF.js";
-import { B as withDynamicToolTranscriptDetails, E as createCodexElicitationResponse, L as resolveCodexToolAbortTerminalReason, R as createFailedDynamicToolResponse, w as readCodexTurn, z as withDynamicToolExecutionState } from "./client-BEKu4yDx.js";
-import { a as formatCodexDisplayText } from "./command-formatters-DeTfrapr.js";
-import "./config-JDfTI4VI.js";
+import { a as flattenCodexDynamicToolFunctions, o as isJsonObject, r as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE, x as readCodexPluginConfig, y as isCodexRemoteExecPlacementSandbox } from "./protocol-5bh1G-H7.js";
+import { B as withDynamicToolTranscriptDetails, E as createCodexElicitationResponse, L as resolveCodexToolAbortTerminalReason, R as createFailedDynamicToolResponse, w as readCodexTurn, z as withDynamicToolExecutionState } from "./client-B57KWPQx.js";
+import { o as formatCodexDisplayText } from "./command-formatters-lxlkNZgU.js";
+import { c as itemName, f as shouldClearTerminalPresentationForNativeItem, l as itemStatus, n as auditNativeToolTerminalStatus, r as auditNativeToolUnfinishedStatus, t as auditNativeToolName, x as readItem } from "./event-projector-items-5VhsECCO.js";
+import "./config-oIORaQ5T.js";
 import { r as sanitizeInlineImageDataUrl, t as invalidInlineImageText } from "./image-payload-sanitizer-tupAr-2o.js";
-import { E as itemStatus, L as readItem, T as itemName, b as auditNativeToolUnfinishedStatus, h as isCodexNotificationForTurn, k as shouldClearTerminalPresentationForNativeItem, v as auditNativeToolName, y as auditNativeToolTerminalStatus } from "./attempt-client-cleanup-D6cR54TV.js";
-import { B as emitCodexNativePreToolUseFailureDiagnostic, S as resolveCodexWebSearchPlan, it as isForcedPrivateQaCodexRuntime, nt as filterCodexDynamicTools, ot as isSystemAgentOnlyCodexDynamicToolAllowlist, rt as filterCodexDynamicToolsForDisabledNativeSurface, st as normalizeCodexDynamicToolName } from "./thread-lifecycle-D1pzRwHB.js";
+import { h as isCodexNotificationForTurn } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { C as resolveCodexWebSearchPlan, V as emitCodexNativePreToolUseFailureDiagnostic, at as isForcedPrivateQaCodexRuntime, ct as normalizeCodexDynamicToolName, it as filterCodexDynamicToolsForDisabledNativeSurface, rt as filterCodexDynamicTools, st as isSystemAgentOnlyCodexDynamicToolAllowlist } from "./thread-lifecycle-DXl1-I6b.js";
 import { n as resolveCodexNativeExecutionPolicy, r as resolveCodexNodeExecToolOverrides } from "./native-execution-policy-umd0tgh4.js";
-import { a as CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME, c as createNodeExecAliasDynamicTool, i as CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME, l as isCodexDynamicToolExcluded, o as createGatewayExecProjection, r as CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME, s as createGatewayProcessProjection } from "./provider-capabilities-W4tfK5Y5.js";
-import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-DeW95wB5.js";
+import { a as CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME, c as createNodeExecAliasDynamicTool, i as CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME, l as isCodexDynamicToolExcluded, o as createGatewayExecProjection, r as CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME, s as createGatewayProcessProjection } from "./provider-capabilities-BvCUL69A.js";
+import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-Bz3FT8W5.js";
 import { createRequire } from "node:module";
 import { asNonArrayRecord, asOptionalRecord, isRecord, normalizeOptionalString, normalizeTrimmedStringList, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
@@ -32,10 +33,10 @@ import { isIP } from "node:net";
 import { redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
 import { formatMcpCodexApprovalRemedy, requiresMcpCodexToolApproval, resolveCodexScheduledToolProjectionFactory, resolveProjectedMcpCodexToolApprovalMode, runWithCronCreatorAuthorityCapabilityResolver } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { buildRemoteCommand, isToolAllowed, sanitizeEnvVars } from "openclaw/plugin-sdk/sandbox";
+import { SsrFBlockedError, isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
 import { saveMediaBuffer } from "openclaw/plugin-sdk/media-store";
 import { getMediaDir } from "openclaw/plugin-sdk/media-runtime";
 import { consumeTrustedToolNoStartError, copyInternalToolResultState, getCoreTtsToolResultMediaUrls } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
-import { SsrFBlockedError, isBlockedHostnameOrIp } from "openclaw/plugin-sdk/ssrf-runtime";
 import { normalizeOpenAIStrictCompatSchema } from "openclaw/plugin-sdk/provider-tools";
 //#region extensions/codex/src/app-server/dynamic-tool-build-state.ts
 /** Mutable dependency seam shared by dynamic-tool construction and its behavioral tests. */
@@ -4662,6 +4663,64 @@ function readFirstString$1(record, keys) {
 	}
 }
 //#endregion
+//#region extensions/codex/src/app-server/dynamic-tool-automations-allowlist.ts
+function createCodexAutomationsToolsAllowResolver(specs) {
+	const names = /* @__PURE__ */ new Set();
+	const qualifiedNames = /* @__PURE__ */ new Map();
+	for (const spec of specs) {
+		if (spec.type === "function") {
+			names.add(spec.name);
+			continue;
+		}
+		for (const tool of spec.tools) {
+			names.add(tool.name);
+			const separator = spec.name.endsWith("_") || tool.name.startsWith("_") ? "" : "__";
+			qualifiedNames.set(`${spec.name}${separator}${tool.name}`, tool.name);
+		}
+	}
+	function resolveList(value) {
+		const resolved = value.map((name) => typeof name !== "string" || names.has(name) ? name : qualifiedNames.get(name) ?? name);
+		return resolved.every((name, index) => name === value[index]) ? value : resolved;
+	}
+	function resolvePayload(value) {
+		if (!isJsonObject(value) || !Array.isArray(value.toolsAllow)) return value;
+		const toolsAllow = resolveList(value.toolsAllow);
+		return toolsAllow === value.toolsAllow ? value : {
+			...value,
+			toolsAllow
+		};
+	}
+	function resolveJobFields(value, paddedKeys) {
+		let resolved = value;
+		for (const [key, entry] of Object.entries(value)) {
+			const field = paddedKeys ? key.trim() : key;
+			if (key !== field && Object.hasOwn(value, field)) continue;
+			const next = field === "toolsAllow" && Array.isArray(entry) ? resolveList(entry) : field === "payload" || field === "namePayload" ? resolvePayload(entry) : entry;
+			if (next !== entry) {
+				if (resolved === value) resolved = { ...value };
+				resolved[key] = next;
+			}
+		}
+		return resolved;
+	}
+	return (args) => {
+		if (!isJsonObject(args)) return args;
+		const job = args.job;
+		if (!job || isJsonObject(job) && Object.keys(job).length === 0) return resolveJobFields(args, false);
+		if (!isJsonObject(job)) return args;
+		const wrapper = isJsonObject(job.data) ? "data" : isJsonObject(job.job) ? "job" : void 0;
+		const wrapped = wrapper ? job[wrapper] : void 0;
+		const resolved = wrapper && isJsonObject(wrapped) ? {
+			...job,
+			[wrapper]: resolveJobFields(wrapped, true)
+		} : resolveJobFields(job, true);
+		return resolved === job ? args : {
+			...args,
+			job: resolved
+		};
+	};
+}
+//#endregion
 //#region extensions/codex/src/app-server/dynamic-tool-catalog.ts
 /** Namespace attached to OpenClaw-owned dynamic tools exposed to Codex. */
 const CODEX_OPENCLAW_DYNAMIC_TOOL_NAMESPACE = "openclaw";
@@ -5121,6 +5180,12 @@ function createCodexDynamicToolBridge(params) {
 	const legacyExtensionRunner = createCodexAppServerToolResultExtensionRunner(toolResultHookContext);
 	const executionSnapshotStates = /* @__PURE__ */ new Map();
 	const directToolNames = params.directToolNames;
+	const specs = inheritedSpecs ?? createCodexDynamicToolSpecs({
+		entries: registeredSpecTools,
+		loading: params.loading ?? "searchable",
+		directToolNames
+	});
+	const resolveAutomationsToolsAllow = createCodexAutomationsToolsAllowResolver(specs);
 	let readRemoteWorkspaceFile;
 	return {
 		availableTools: availableTools.map((entry) => entry.tool),
@@ -5136,11 +5201,7 @@ function createCodexDynamicToolBridge(params) {
 			loading: params.loading ?? "searchable",
 			directToolNames
 		}),
-		specs: inheritedSpecs ?? createCodexDynamicToolSpecs({
-			entries: registeredSpecTools,
-			loading: params.loading ?? "searchable",
-			directToolNames
-		}),
+		specs,
 		resultContentSourceForTool: (toolName) => toolMap.get(toolName)?.tool.resultContentSource,
 		sideEffectOwnerKeyForTool: (toolName) => {
 			const tool = toolMap.get(toolName)?.tool;
@@ -5177,7 +5238,7 @@ function createCodexDynamicToolBridge(params) {
 				});
 			}
 			const { tool, name: toolName } = toolEntry;
-			const rawArguments = call.arguments;
+			const rawArguments = toolName === "automations" ? resolveAutomationsToolsAllow(call.arguments) : call.arguments;
 			const args = asNonArrayRecord(rawArguments);
 			const startedAt = Date.now();
 			const signal = composeAbortSignals(params.signal, options?.signal);

package/dist/{effective-mcp-catalog-J_5Ep5Um.js → effective-mcp-catalog-Bd73bqA8.js}

@@ -1,6 +1,6 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-CaZjYwNS.js";
-import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-CVhez2Uo.js";
-import "./session-binding-CKSepwIC.js";
+import { l as sessionBindingIdentity } from "./session-binding-record-Bcvslnhf.js";
+import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-CscigXXL.js";
+import "./session-binding-CI8UuilT.js";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts

package/dist/{ephemeral-turn-DSwzP8YY.js → ephemeral-turn-D78_VmzO.js}

@@ -1,8 +1,8 @@
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import { T as readCodexTurnCompletedNotification } from "./client-BEKu4yDx.js";
-import { p as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-D6cR54TV.js";
-import { o as isTerminalTurnStatus, s as readCodexNotificationItem } from "./attempt-notifications--H8zXR5-.js";
-import { t as CodexUsageProjection } from "./event-projector-usage-CIyrYYid.js";
+import { o as isJsonObject } from "./protocol-5bh1G-H7.js";
+import { T as readCodexTurnCompletedNotification } from "./client-B57KWPQx.js";
+import { p as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { o as isTerminalTurnStatus, s as readCodexNotificationItem } from "./attempt-notifications-C9XufG6l.js";
+import { t as CodexUsageProjection } from "./event-projector-usage-BfXmpOec.js";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";