@openclaw/codex 2026.9.6 → 2026.9.7

package/dist/.setup/{command-handlers-DW7Lx9oH.mjs → command-handlers-ylTMS00z.mjs}

@@ -1,40 +1,42 @@
-import { n as isCodexFastServiceTier } from "./config-utils-DujwEnhg.mjs";
-import { c as CODEX_PLUGINS_MARKETPLACE_NAME, i as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as findCodexMarketplacePluginSummary } from "./plugin-inventory-BoRei8Z4.mjs";
-import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey } from "./session-binding-record-BGoz8wOK.mjs";
+import { n as isCodexFastServiceTier } from "./config-utils-D0CXecki.mjs";
+import { o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as findCodexMarketplacePluginSummary, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-Cky2XJUw.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-B2mpaI9D.mjs";
-import { r as withCodexConversationThreadActivity, t as isIncognitoSessionKey } from "./incognito-session-uhrBF6wJ.mjs";
-import { a as CODEX_HOST_INSPECTION_AUTH_ERROR, c as canMutateCodexHost, i as CODEX_FULL_PERMISSIONS_AUTH_ERROR, l as hasCodexAdminScope, n as filterCodexMarketplacePlugins, o as CODEX_NATIVE_EXECUTION_AUTH_ERROR, r as parseCodexPluginMarketplaceId, s as assertCodexHostOwnerCurrent, t as discoverCodexMarketplacePlugins } from "./plugin-marketplace-discovery-CDOi8IFs.mjs";
-import { s as summarizeCodexAccountUsage } from "./rate-limits-CMU3DUD0.mjs";
-import { a as formatCodexAccountLine, c as formatCodexTextForDisplay, d as formatModels, f as formatSkills, i as formatAccount, l as formatComputerUseStatus, n as buildHelp, o as formatCodexDisplayText, p as formatThreads, r as escapeCodexChatText, s as formatCodexStatus, t as CODEX_RESUME_SAFE_THREAD_ID_PATTERN, u as formatList } from "./command-formatters-Bmqvr9tO.mjs";
-import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-CrcyZk6O.mjs";
-import { o as CodexAppServerRpcError } from "./timeout-C910MdAB.mjs";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-CDXOOFdZ.mjs";
-import { o as formatCodexCliSessions } from "./node-cli-sessions-r3avj02l.mjs";
-import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-B2CsSdnV.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-ThoatDcb.mjs";
-import { o as withCodexAppServerJsonClient } from "./request-D2L0zMrq.mjs";
-import "./config-BoTP_mrL.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C8Rw1m1m.mjs";
-import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-WqZtZfXN.mjs";
-import { I as hasCodexAppServerLiveThread, N as consumeCodexAppServerLiveThread, X as resolveCodexAppServerAuthAccountCacheKey, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DA4VR4Eb.mjs";
-import { b as assertCodexThreadResumeResponse, s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-Cs08OXVQ.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-CEv1cKwF.mjs";
-import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-DhLWa_7K.mjs";
-import { t as listAllCodexAppServerModels } from "./models-KnqBv0hE.mjs";
-import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-DT3MNtqj.mjs";
-import { n as createCodexSessionGenerationSupersededError, o as resolveCodexSessionBinding } from "./session-binding-Cm0apEbd.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DGuQsuFC.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DcTtAcXj.mjs";
-import { n as resolveCodexNativeSandboxBlock, t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C2sRMOEY.mjs";
-import { i as readCodexComputerUseStatus, r as installCodexComputerUse, t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-Ctmo83k_.mjs";
-import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-DixIj3HW.mjs";
-import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-uK9Jomlc.mjs";
+import { n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
+import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Dbvq-QgB.mjs";
+import { n as withCodexConversationThreadActivity } from "./thread-ownership-queue-Dp24d7-F.mjs";
+import { a as CODEX_HOST_INSPECTION_AUTH_ERROR, c as canMutateCodexHost, i as CODEX_FULL_PERMISSIONS_AUTH_ERROR, l as hasCodexAdminScope, n as filterCodexMarketplacePlugins, o as CODEX_NATIVE_EXECUTION_AUTH_ERROR, r as parseCodexPluginMarketplaceId, s as assertCodexHostOwnerCurrent, t as discoverCodexMarketplacePlugins } from "./plugin-marketplace-discovery-D_dV9FXa.mjs";
+import { l as formatRelativeDuration, s as summarizeCodexAccountUsage } from "./rate-limits-B7-X2TgG.mjs";
+import { a as formatCodexAccountLine, c as formatCodexTextForDisplay, d as formatModels, f as formatSkills, i as formatAccount, l as formatComputerUseStatus, n as buildHelp, o as formatCodexDisplayText, p as formatThreads, r as escapeCodexChatText, s as formatCodexStatus, t as CODEX_RESUME_SAFE_THREAD_ID_PATTERN, u as formatList } from "./command-formatters-R3ckE3Co.mjs";
+import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-C746z5Pn.mjs";
+import { t as isIncognitoSessionKey } from "./incognito-session-DWYapfwf.mjs";
+import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-B3WEZl4e.mjs";
+import { o as formatCodexCliSessions } from "./node-cli-sessions-HC4W6FLI.mjs";
+import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BL9B5H0L.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DTtN1KrX.mjs";
+import { o as withCodexAppServerJsonClient } from "./request-BHZ1nz8d.mjs";
+import "./config-DKhXquav.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-B0okYl2D.mjs";
+import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, et as resolveCodexAppServerAuthAccountCacheKey, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DqyTMYug.mjs";
+import { b as assertCodexThreadResumeResponse, s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-N0JpgSzF.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DOP-cW5j.mjs";
+import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-BLWz7stm.mjs";
+import { n as listAllCodexAppServerModels } from "./models-DHXZtVVk.mjs";
+import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-cNHRfaxU.mjs";
+import { n as createCodexSessionGenerationSupersededError, o as resolveCodexSessionBinding } from "./session-binding-DGCYAfvD.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DTd-DtkX.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-roNP0l1c.mjs";
+import { n as resolveCodexNativeSandboxBlock, t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DjCz2eOw.mjs";
+import { i as readCodexComputerUseStatus, r as installCodexComputerUse, t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-DsjsL1dr.mjs";
+import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-CGJGUQ6Y.mjs";
+import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-CEP8X5JC.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
+import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
@@ -138,7 +140,7 @@ function buildProfileRow(params) {
 function describeInactiveProfileStatus(params) {
 	const stats = params.store.usageStats?.[params.profileId];
 	const blockedUntil = stats?.blockedUntil;
-	if (isActiveUntil(blockedUntil, params.now)) return `rate-limited - resets ${formatRelativeReset(blockedUntil, params.now)}`;
+	if (isActiveUntil(blockedUntil, params.now)) return `rate-limited - resets in ${formatRelativeDuration(Math.max(6e4, blockedUntil - params.now))}`;
 	if (isActiveUntil(resolveProfileUnusableUntilForDisplay(params.store, params.profileId) ?? void 0, params.now)) return describeFailureStatus(stats?.disabledReason ?? stats?.cooldownReason, params.credential);
 	const eligibility = resolveAuthProfileEligibility({
 		cfg: params.config,
@@ -229,22 +231,6 @@ function describeEligibilityStatus(reason, credential) {
 function isActiveUntil(value, now) {
 	return typeof value === "number" && Number.isFinite(value) && value > now;
 }
-function formatRelativeReset(untilMs, nowMs) {
-	const durationMs = Math.max(1e3, untilMs - nowMs);
-	const minuteMs = 6e4;
-	const hourMs = 60 * minuteMs;
-	const dayMs = 24 * hourMs;
-	if (durationMs < hourMs) {
-		const minutes = Math.ceil(durationMs / minuteMs);
-		return `in ${minutes} ${minutes === 1 ? "minute" : "minutes"}`;
-	}
-	if (durationMs < dayMs) {
-		const hours = Math.ceil(durationMs / hourMs);
-		return `in ${hours} ${hours === 1 ? "hour" : "hours"}`;
-	}
-	const days = Math.ceil(durationMs / dayMs);
-	return `in ${days} ${days === 1 ? "day" : "days"}`;
-}
 function buildCodexPluginAppLinks(apps, options = {}) {
 	const blocks = apps.slice(0, 5).map((app) => {
 		const name = formatCodexDisplayText((app.name.trim() || app.id).slice(0, 80));
@@ -284,6 +270,24 @@ function buildCodexPluginAppLinks(apps, options = {}) {
 	});
 	return blocks;
 }
+function buildCodexPluginStatusButtons(pluginId, canRefreshHostedApps) {
+	return {
+		type: "buttons",
+		buttons: [...canRefreshHostedApps ? [{
+			label: "Refresh hosted apps",
+			action: {
+				type: "command",
+				command: "/codex plugins refresh"
+			}
+		}] : [], {
+			label: "Check status",
+			action: {
+				type: "command",
+				command: `/codex plugins status ${pluginId}`
+			}
+		}]
+	};
+}
 function safeCodexAppLink(value) {
 	if (!value || value.length > 2048 || /[\s\p{Cc}\p{Cf}<>]/u.test(value)) return;
 	try {
@@ -591,22 +595,7 @@ function formatCodexPluginReadiness(readiness, page = 1) {
 				type: "text",
 				text: "Flags reflect Codex's runtime snapshot; status does not refresh hosted tools. After connecting, /codex plugins refresh refreshes hosted inventory for the current Codex account/runtime, across all apps. Use Check status separately to inspect this plugin without refreshing. OpenClaw app-access changes take effect on your next message; use /new or /reset after connecting."
 			});
-			blocks.push({
-				type: "buttons",
-				buttons: [...canRefreshHostedApps ? [{
-					label: "Refresh hosted apps",
-					action: {
-						type: "command",
-						command: "/codex plugins refresh"
-					}
-				}] : [], {
-					label: "Check status",
-					action: {
-						type: "command",
-						command: `/codex plugins status ${readiness.commandId}`
-					}
-				}]
-			});
+			blocks.push(buildCodexPluginStatusButtons(readiness.commandId, canRefreshHostedApps));
 		}
 	}
 	const presentation = {
@@ -777,73 +766,59 @@ function buildCodexSubcommandPickerReply() {
 	};
 }
 function buildCodexFastMenuReply() {
-	const modes = [
-		"on",
-		"off",
-		"status"
-	];
-	const buttons = [...modes.map((mode) => ({
-		label: mode,
-		command: `/codex fast ${mode}`
-	})), {
-		label: "back",
-		command: "/codex"
-	}];
-	return {
-		text: [
-			"Codex fast mode. Pick one or type /codex fast <mode>:",
-			"",
-			...modes.map((m, i) => `  ${i + 1}. /codex fast ${m}`),
-			"",
-			"Type '/codex' to go back to the main menu."
-		].join("\n"),
-		presentation: buildCodexCommandPickerPresentation("Codex fast mode", "Pick a Codex fast mode:", buttons)
-	};
+	return buildCodexChoiceMenuReply({
+		title: "Codex fast mode",
+		prompt: "Pick a Codex fast mode:",
+		introduction: "Codex fast mode. Pick one or type /codex fast <mode>:",
+		command: "/codex fast",
+		choices: [
+			"on",
+			"off",
+			"status"
+		]
+	});
 }
 function buildCodexPermissionsMenuReply() {
-	const modes = [
-		"default",
-		"yolo",
-		"status"
-	];
-	const buttons = [...modes.map((mode) => ({
-		label: mode,
-		command: `/codex permissions ${mode}`
-	})), {
-		label: "back",
-		command: "/codex"
-	}];
-	return {
-		text: [
-			"Codex permissions. Pick one or type /codex permissions <mode>:",
-			"",
-			...modes.map((m, i) => `  ${i + 1}. /codex permissions ${m}`),
-			"",
-			"Type '/codex' to go back to the main menu."
-		].join("\n"),
-		presentation: buildCodexCommandPickerPresentation("Codex permissions", "Pick a Codex permissions mode:", buttons)
-	};
+	return buildCodexChoiceMenuReply({
+		title: "Codex permissions",
+		prompt: "Pick a Codex permissions mode:",
+		introduction: "Codex permissions. Pick one or type /codex permissions <mode>:",
+		command: "/codex permissions",
+		choices: [
+			"default",
+			"yolo",
+			"status"
+		]
+	});
 }
 function buildCodexComputerUseMenuReply() {
-	const actions = ["status", "install"];
-	const buttons = [...actions.map((action) => ({
-		label: action,
-		command: `/codex computer-use ${action}`
+	return buildCodexChoiceMenuReply({
+		title: "Codex computer-use",
+		prompt: "Pick a Codex computer-use action:",
+		introduction: "Codex computer-use. Pick one or type /codex computer-use <action>:",
+		command: "/codex computer-use",
+		choices: ["status", "install"],
+		hint: "Flag-driven invocations (--source, --marketplace-path, --marketplace) are not in the picker. Type '/codex computer-use' or read '/codex help' for the full surface."
+	});
+}
+function buildCodexChoiceMenuReply(params) {
+	const buttons = [...params.choices.map((choice) => ({
+		label: choice,
+		command: `${params.command} ${choice}`
 	})), {
 		label: "back",
 		command: "/codex"
 	}];
 	return {
 		text: [
-			"Codex computer-use. Pick one or type /codex computer-use <action>:",
+			params.introduction,
 			"",
-			...actions.map((a, i) => `  ${i + 1}. /codex computer-use ${a}`),
-			"",
-			"Flag-driven invocations (--source, --marketplace-path, --marketplace) are not in the picker. Type '/codex computer-use' or read '/codex help' for the full surface.",
+			...params.choices.map((choice, index) => `  ${index + 1}. ${params.command} ${choice}`),
 			"",
+			...params.hint ? [params.hint, ""] : [],
 			"Type '/codex' to go back to the main menu."
 		].join("\n"),
-		presentation: buildCodexCommandPickerPresentation("Codex computer-use", "Pick a Codex computer-use action:", buttons)
+		presentation: buildCodexCommandPickerPresentation(params.title, params.prompt, buttons)
 	};
 }
 function isMenuVerb(rest) {
@@ -895,54 +870,18 @@ function splitArgs(value) {
 	return args;
 }
 function parseBindArgs(args) {
-	const parsed = {};
-	for (let index = 0; index < args.length; index += 1) {
-		const arg = expectDefined(args[index], "current Codex bind argument");
-		if (arg === "--help" || arg === "-h") {
-			parsed.help = true;
-			continue;
-		}
-		if (arg === "--cwd") {
-			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.cwd !== void 0) {
-				parsed.help = true;
-				continue;
-			}
-			parsed.cwd = value;
-			index += 1;
-			continue;
-		}
-		if (arg === "--model") {
-			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.model !== void 0) {
-				parsed.help = true;
-				continue;
-			}
-			parsed.model = value;
-			index += 1;
-			continue;
-		}
-		if (arg === "--provider" || arg === "--model-provider") {
-			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.provider !== void 0) {
-				parsed.help = true;
-				continue;
-			}
-			parsed.provider = value;
-			index += 1;
-			continue;
-		}
-		if (!arg.startsWith("-") && !parsed.threadId) {
-			parsed.threadId = arg;
-			continue;
-		}
-		parsed.help = true;
-	}
-	parsed.threadId = normalizeOptionalString(parsed.threadId);
-	parsed.cwd = normalizeOptionalString(parsed.cwd);
-	parsed.model = normalizeOptionalString(parsed.model);
-	parsed.provider = normalizeOptionalString(parsed.provider);
-	return parsed;
+	const { parsed, values } = parseThreadArgs(args, /* @__PURE__ */ new Map([
+		["--cwd", "cwd"],
+		["--model", "model"],
+		["--provider", "provider"],
+		["--model-provider", "provider"]
+	]));
+	return {
+		...parsed,
+		cwd: normalizeOptionalString(values.get("cwd")),
+		model: normalizeOptionalString(values.get("model")),
+		provider: normalizeOptionalString(values.get("provider"))
+	};
 }
 function parseCodexCliSessionsArgs(args) {
 	const parsed = { filter: "" };
@@ -985,29 +924,34 @@ function parseCodexCliSessionsArgs(args) {
 	return parsed;
 }
 function parseResumeArgs(args) {
+	const { parsed, values } = parseThreadArgs(args, /* @__PURE__ */ new Map([
+		["--host", "host"],
+		["--node", "host"],
+		["--bind", "bind"]
+	]));
+	return {
+		...parsed,
+		...values.has("bind") ? { bindHere: true } : {},
+		host: normalizeOptionalString(values.get("host"))
+	};
+}
+function parseThreadArgs(args, options) {
 	const parsed = {};
+	const values = /* @__PURE__ */ new Map();
 	for (let index = 0; index < args.length; index += 1) {
-		const arg = expectDefined(args[index], "current Codex resume argument");
+		const arg = expectDefined(args[index], "current Codex thread argument");
 		if (arg === "--help" || arg === "-h") {
 			parsed.help = true;
 			continue;
 		}
-		if (arg === "--host" || arg === "--node") {
+		const option = options.get(arg);
+		if (option) {
 			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.host !== void 0) {
-				parsed.help = true;
-				continue;
-			}
-			parsed.host = value;
-			index += 1;
-			continue;
-		}
-		if (arg === "--bind") {
-			if (readRequiredOptionValue(args, index) !== "here" || parsed.bindHere !== void 0) {
+			if (!value || values.has(option) || option === "bind" && value !== "here") {
 				parsed.help = true;
 				continue;
 			}
-			parsed.bindHere = true;
+			values.set(option, value);
 			index += 1;
 			continue;
 		}
@@ -1018,8 +962,10 @@ function parseResumeArgs(args) {
 		parsed.help = true;
 	}
 	parsed.threadId = normalizeOptionalString(parsed.threadId);
-	parsed.host = normalizeOptionalString(parsed.host);
-	return parsed;
+	return {
+		parsed,
+		values
+	};
 }
 function parseComputerUseArgs(args) {
 	const parsed = {
@@ -1044,33 +990,14 @@ function parseComputerUseArgs(args) {
 			parsed.action = arg;
 			continue;
 		}
-		if (arg === "--source" || arg === "--marketplace-source") {
-			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.overrides.marketplaceSource !== void 0) {
-				parsed.help = true;
-				continue;
-			}
-			parsed.overrides.marketplaceSource = value;
-			index += 1;
-			continue;
-		}
-		if (arg === "--marketplace-path" || arg === "--path") {
+		const option = arg === "--source" || arg === "--marketplace-source" ? "marketplaceSource" : arg === "--marketplace-path" || arg === "--path" ? "marketplacePath" : arg === "--marketplace" ? "marketplaceName" : void 0;
+		if (option) {
 			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.overrides.marketplacePath !== void 0) {
+			if (!value || parsed.overrides[option] !== void 0) {
 				parsed.help = true;
 				continue;
 			}
-			parsed.overrides.marketplacePath = value;
-			index += 1;
-			continue;
-		}
-		if (arg === "--marketplace") {
-			const value = readRequiredOptionValue(args, index);
-			if (!value || parsed.overrides.marketplaceName !== void 0) {
-				parsed.help = true;
-				continue;
-			}
-			parsed.overrides.marketplaceName = value;
+			parsed.overrides[option] = value;
 			index += 1;
 			continue;
 		}
@@ -1087,8 +1014,19 @@ function parseComputerUseArgs(args) {
 		}
 		parsed.help = true;
 	}
-	parsed.overrides = normalizeComputerUseStringOverrides(parsed.overrides);
-	parsed.hasOverrides = Object.values(parsed.overrides).some(Boolean);
+	const overrides = parsed.overrides;
+	parsed.overrides = {};
+	for (const key of [
+		"marketplaceSource",
+		"marketplacePath",
+		"marketplaceName"
+	]) {
+		const value = normalizeOptionalString(overrides[key]);
+		if (value) {
+			parsed.overrides[key] = value;
+			parsed.hasOverrides = true;
+		}
+	}
 	return parsed;
 }
 function formatComputerUsePersistentIdentityMigration(parsed) {
@@ -1108,16 +1046,6 @@ function readRequiredOptionValue(args, index) {
 	if (!normalized || normalized.startsWith("-")) return;
 	return value;
 }
-function normalizeComputerUseStringOverrides(overrides) {
-	const normalized = {};
-	const marketplaceSource = normalizeOptionalString(overrides.marketplaceSource);
-	if (marketplaceSource) normalized.marketplaceSource = marketplaceSource;
-	const marketplacePath = normalizeOptionalString(overrides.marketplacePath);
-	if (marketplacePath) normalized.marketplacePath = marketplacePath;
-	const marketplaceName = normalizeOptionalString(overrides.marketplaceName);
-	if (marketplaceName) normalized.marketplaceName = marketplaceName;
-	return normalized;
-}
 //#endregion
 //#region extensions/codex/src/command-diagnostics-support.ts
 const CODEX_DIAGNOSTICS_SOURCE = "openclaw-diagnostics";
@@ -1137,16 +1065,11 @@ function normalizeDiagnosticsReason(note) {
 }
 function parseDiagnosticsArgs(args) {
 	const [action, token, ...extra] = splitArgs(args);
-	const normalizedAction = action?.toLowerCase();
-	if ((normalizedAction === "confirm" || normalizedAction === "--confirm") && token && extra.length === 0) return {
-		action: "confirm",
+	const normalizedAction = action?.toLowerCase().replace(/^--/, "");
+	if (normalizedAction === "confirm" || normalizedAction === "cancel") return token && extra.length === 0 ? {
+		action: normalizedAction,
 		token
-	};
-	if ((normalizedAction === "cancel" || normalizedAction === "--cancel") && token && extra.length === 0) return {
-		action: "cancel",
-		token
-	};
-	if (normalizedAction === "confirm" || normalizedAction === "--confirm" || normalizedAction === "cancel" || normalizedAction === "--cancel") return { action: "usage" };
+	} : { action: "usage" };
 	return {
 		action: "request",
 		note: args
@@ -1202,27 +1125,14 @@ function readCodexDiagnosticsConfirmationScope(ctx) {
 }
 function readCodexDiagnosticsScopeMismatch(pending, ctx) {
 	const current = readCodexDiagnosticsConfirmationScope(ctx);
-	if (pending.accountId !== current.accountId) return {
-		confirmMessage: "This Codex diagnostics confirmation belongs to a different account.",
-		cancelMessage: "This Codex diagnostics confirmation belongs to a different account."
-	};
+	if (pending.accountId !== current.accountId) return "This Codex diagnostics confirmation belongs to a different account.";
 	if (pending.privateRouted) return;
-	if (pending.channelId !== current.channelId) return {
-		confirmMessage: "This Codex diagnostics confirmation belongs to a different channel instance.",
-		cancelMessage: "This Codex diagnostics confirmation belongs to a different channel instance."
-	};
-	if (pending.messageThreadId !== current.messageThreadId) return {
-		confirmMessage: "This Codex diagnostics confirmation belongs to a different thread.",
-		cancelMessage: "This Codex diagnostics confirmation belongs to a different thread."
-	};
-	if (pending.threadParentId !== current.threadParentId) return {
-		confirmMessage: "This Codex diagnostics confirmation belongs to a different parent thread.",
-		cancelMessage: "This Codex diagnostics confirmation belongs to a different parent thread."
-	};
-	if (pending.sessionKey !== current.sessionKey) return {
-		confirmMessage: "This Codex diagnostics confirmation belongs to a different session.",
-		cancelMessage: "This Codex diagnostics confirmation belongs to a different session."
-	};
+	for (const [field, label] of [
+		["channelId", "channel instance"],
+		["messageThreadId", "thread"],
+		["threadParentId", "parent thread"],
+		["sessionKey", "session"]
+	]) if (pending[field] !== current[field]) return `This Codex diagnostics confirmation belongs to a different ${label}.`;
 }
 function readPendingCodexDiagnosticsConfirmation(token, now) {
 	prunePendingCodexDiagnosticsConfirmations(now);
@@ -1299,13 +1209,13 @@ function formatCodexDiagnosticsTargetLine(target) {
 }
 function readCodexDiagnosticsTargetsCooldownMessage(targets, ctx, now, options = {}) {
 	for (const target of targets) {
-		const cooldownMs = readCodexDiagnosticsCooldownMs(target.threadId, now);
+		const cooldownMs = readCodexDiagnosticsCooldownMs(lastCodexDiagnosticsUploadByThread, target.threadId, now);
 		if (cooldownMs > 0) {
 			if (options.includeThreadId === false) return `Codex diagnostics were already sent for one of these Codex threads recently. Try again in ${Math.ceil(cooldownMs / 1e3)}s.`;
 			return `Codex diagnostics were already sent for thread ${formatCodexDisplayText(target.threadId)} recently. Try again in ${Math.ceil(cooldownMs / 1e3)}s.`;
 		}
 	}
-	const scopeCooldownMs = readCodexDiagnosticsScopeCooldownMs(options.cooldownScope ?? readCodexDiagnosticsCooldownScope(ctx), now);
+	const scopeCooldownMs = readCodexDiagnosticsCooldownMs(lastCodexDiagnosticsUploadByScope, options.cooldownScope ?? readCodexDiagnosticsCooldownScope(ctx), now);
 	if (scopeCooldownMs > 0) return `Codex diagnostics were already sent for this account or channel recently. Try again in ${Math.ceil(scopeCooldownMs / 1e3)}s.`;
 }
 function recordCodexDiagnosticsUpload(threadId, ctx, now, cooldownScope) {
@@ -1327,30 +1237,22 @@ function readCodexDiagnosticsCooldownScope(ctx) {
 	return crypto.createHash("sha256").update(payload).digest("hex");
 }
 function buildDiagnosticsTags(ctx) {
-	const tags = { source: CODEX_DIAGNOSTICS_SOURCE };
-	addTag(tags, "channel", ctx.channel);
-	return tags;
-}
-function addTag(tags, key, value) {
-	if (typeof value === "string" && value.trim()) tags[key] = value.trim();
+	const channel = normalizeOptionalString(ctx.channel);
+	return {
+		source: CODEX_DIAGNOSTICS_SOURCE,
+		...channel ? { channel } : {}
+	};
 }
 function formatCodexCopyableValueForDisplay(value) {
 	const safe = formatCodexTextForDisplay(value);
 	if (CODEX_RESUME_SAFE_THREAD_ID_PATTERN.test(safe)) return `\`${safe}\``;
 	return escapeCodexChatText(safe);
 }
-function readCodexDiagnosticsCooldownMs(threadId, now) {
-	const lastSentAt = lastCodexDiagnosticsUploadByThread.get(threadId);
-	if (!lastSentAt) return 0;
-	const remainingMs = Math.max(0, CODEX_DIAGNOSTICS_COOLDOWN_MS - (now - lastSentAt));
-	if (remainingMs === 0) lastCodexDiagnosticsUploadByThread.delete(threadId);
-	return remainingMs;
-}
-function readCodexDiagnosticsScopeCooldownMs(scope, now) {
-	const lastSentAt = lastCodexDiagnosticsUploadByScope.get(scope);
+function readCodexDiagnosticsCooldownMs(map, key, now) {
+	const lastSentAt = map.get(key);
 	if (!lastSentAt) return 0;
 	const remainingMs = Math.max(0, CODEX_DIAGNOSTICS_COOLDOWN_MS - (now - lastSentAt));
-	if (remainingMs === 0) lastCodexDiagnosticsUploadByScope.delete(scope);
+	if (remainingMs === 0) map.delete(key);
 	return remainingMs;
 }
 function recordBoundedCodexDiagnosticsCooldown(map, key, maxSize, now) {
@@ -1544,6 +1446,7 @@ function resolveCodexConversationControlScope(ctx) {
 }
 //#endregion
 //#region extensions/codex/src/command-diagnostics.ts
+const NO_DIAGNOSTICS_THREAD = ["No Codex thread is attached to this OpenClaw session yet.", "Use /codex threads to find a thread, then /codex resume <thread-id> before sending diagnostics."].join("\n");
 async function handleCodexDiagnosticsFeedback(deps, context, pluginConfig, args, commandPrefix) {
 	const ctx = { ...context };
 	if (ctx.senderIsOwner !== true) return { text: "Only an owner can send Codex diagnostics." };
@@ -1556,9 +1459,8 @@ async function handleCodexDiagnosticsFeedback(deps, context, pluginConfig, args,
 	return await requestCodexDiagnosticsFeedbackApproval(deps, ctx, parsed.note, commandPrefix);
 }
 async function requestCodexDiagnosticsFeedbackApproval(deps, ctx, note, commandPrefix) {
-	if (!await hasAnyCodexDiagnosticsIdentity(ctx)) return { text: "Cannot send Codex diagnostics because this command did not include a stable session identity." };
-	const targets = await resolveCodexDiagnosticsTargets(deps, ctx);
-	if (targets.length === 0) return { text: ["No Codex thread is attached to this OpenClaw session yet.", "Use /codex threads to find a thread, then /codex resume <thread-id> before sending diagnostics."].join("\n") };
+	const targets = await requireCodexDiagnosticsTargets(deps, ctx);
+	if (typeof targets === "string") return { text: targets };
 	const now = Date.now();
 	const cooldownMessage = readCodexDiagnosticsTargetsCooldownMessage(targets, ctx, now);
 	if (cooldownMessage) return { text: cooldownMessage };
@@ -1612,9 +1514,8 @@ async function requestCodexDiagnosticsFeedbackApproval(deps, ctx, note, commandP
 	};
 }
 async function previewCodexDiagnosticsFeedbackApproval(deps, ctx, note) {
-	if (!await hasAnyCodexDiagnosticsIdentity(ctx)) return "Cannot send Codex diagnostics because this command did not include a stable session identity.";
-	const targets = await resolveCodexDiagnosticsTargets(deps, ctx);
-	if (targets.length === 0) return ["No Codex thread is attached to this OpenClaw session yet.", "Use /codex threads to find a thread, then /codex resume <thread-id> before sending diagnostics."].join("\n");
+	const targets = await requireCodexDiagnosticsTargets(deps, ctx);
+	if (typeof targets === "string") return targets;
 	const cooldownMessage = readCodexDiagnosticsTargetsCooldownMessage(targets, ctx, Date.now(), { includeThreadId: false });
 	if (cooldownMessage) return cooldownMessage;
 	const reason = normalizeDiagnosticsReason(note);
@@ -1628,28 +1529,16 @@ async function previewCodexDiagnosticsFeedbackApproval(deps, ctx, note) {
 	].join("\n");
 }
 async function confirmCodexDiagnosticsFeedback(deps, ctx, pluginConfig, token) {
-	const pending = readPendingCodexDiagnosticsConfirmation(token, Date.now());
-	if (!pending) return "No pending Codex diagnostics confirmation was found. Run /diagnostics again to create a fresh request.";
-	if (!pending.senderId || !ctx.senderId) return "Cannot confirm Codex diagnostics because this command did not include the original sender identity.";
-	if (pending.senderId !== ctx.senderId) return "Only the user who requested these Codex diagnostics can confirm the upload.";
-	if (pending.channel !== ctx.channel) return "This Codex diagnostics confirmation belongs to a different channel.";
-	const scopeMismatch = readCodexDiagnosticsScopeMismatch(pending, ctx);
-	if (scopeMismatch) return scopeMismatch.confirmMessage;
-	deletePendingCodexDiagnosticsConfirmation(token);
+	const pending = consumeCodexDiagnosticsConfirmation(ctx, token, "confirm");
+	if (typeof pending === "string") return pending;
 	if (!pending.privateRouted && !await hasAnyCodexDiagnosticsIdentity(ctx)) return "Cannot send Codex diagnostics because this command did not include a stable session identity.";
 	const currentTargets = pending.privateRouted ? resolvePendingCodexDiagnosticsTargets(deps, pending.targets, ctx.config) : await resolveCodexDiagnosticsTargets(deps, ctx);
 	if (!codexDiagnosticsTargetsMatch(pending.targets, currentTargets)) return "The Codex diagnostics sessions changed before confirmation. Run /diagnostics again for the current threads.";
 	return await sendCodexDiagnosticsFeedbackForTargets(deps, ctx, pluginConfig, pending.note ?? "", currentTargets, { cooldownScope: pending.scopeKey });
 }
 function cancelCodexDiagnosticsFeedback(ctx, token) {
-	const pending = readPendingCodexDiagnosticsConfirmation(token, Date.now());
-	if (!pending) return "No pending Codex diagnostics confirmation was found.";
-	if (!pending.senderId || !ctx.senderId) return "Cannot cancel Codex diagnostics because this command did not include the original sender identity.";
-	if (pending.senderId !== ctx.senderId) return "Only the user who requested these Codex diagnostics can cancel the upload.";
-	if (pending.channel !== ctx.channel) return "This Codex diagnostics confirmation belongs to a different channel.";
-	const scopeMismatch = readCodexDiagnosticsScopeMismatch(pending, ctx);
-	if (scopeMismatch) return scopeMismatch.cancelMessage;
-	deletePendingCodexDiagnosticsConfirmation(token);
+	const pending = consumeCodexDiagnosticsConfirmation(ctx, token, "cancel");
+	if (typeof pending === "string") return pending;
 	return [
 		"Codex diagnostics upload canceled.",
 		"Codex sessions:",
@@ -1657,13 +1546,12 @@ function cancelCodexDiagnosticsFeedback(ctx, token) {
 	].join("\n");
 }
 async function sendCodexDiagnosticsFeedbackForContext(deps, ctx, pluginConfig, note) {
-	if (!await hasAnyCodexDiagnosticsIdentity(ctx)) return "Cannot send Codex diagnostics because this command did not include a stable session identity.";
-	const targets = await resolveCodexDiagnosticsTargets(deps, ctx);
-	if (targets.length === 0) return ["No Codex thread is attached to this OpenClaw session yet.", "Use /codex threads to find a thread, then /codex resume <thread-id> before sending diagnostics."].join("\n");
+	const targets = await requireCodexDiagnosticsTargets(deps, ctx);
+	if (typeof targets === "string") return targets;
 	return await sendCodexDiagnosticsFeedbackForTargets(deps, ctx, pluginConfig, note, targets);
 }
 async function sendCodexDiagnosticsFeedbackForTargets(deps, ctx, pluginConfig, note, targets, options = {}) {
-	if (targets.length === 0) return ["No Codex thread is attached to this OpenClaw session yet.", "Use /codex threads to find a thread, then /codex resume <thread-id> before sending diagnostics."].join("\n");
+	if (targets.length === 0) return NO_DIAGNOSTICS_THREAD;
 	const now = Date.now();
 	const cooldownMessage = readCodexDiagnosticsTargetsCooldownMessage(targets, ctx, now, { cooldownScope: options.cooldownScope });
 	if (cooldownMessage) return cooldownMessage;
@@ -1724,6 +1612,22 @@ async function sendCodexDiagnosticsFeedbackForTargets(deps, ctx, pluginConfig, n
 	}
 	return formatCodexDiagnosticsUploadResult(sent, failed);
 }
+function consumeCodexDiagnosticsConfirmation(ctx, token, action) {
+	const pending = readPendingCodexDiagnosticsConfirmation(token, Date.now());
+	if (!pending) return action === "confirm" ? "No pending Codex diagnostics confirmation was found. Run /diagnostics again to create a fresh request." : "No pending Codex diagnostics confirmation was found.";
+	if (!pending.senderId || !ctx.senderId) return `Cannot ${action} Codex diagnostics because this command did not include the original sender identity.`;
+	if (pending.senderId !== ctx.senderId) return `Only the user who requested these Codex diagnostics can ${action} the upload.`;
+	if (pending.channel !== ctx.channel) return "This Codex diagnostics confirmation belongs to a different channel.";
+	const scopeMismatch = readCodexDiagnosticsScopeMismatch(pending, ctx);
+	if (scopeMismatch) return scopeMismatch;
+	deletePendingCodexDiagnosticsConfirmation(token);
+	return pending;
+}
+async function requireCodexDiagnosticsTargets(deps, ctx) {
+	if (!await hasAnyCodexDiagnosticsIdentity(ctx)) return "Cannot send Codex diagnostics because this command did not include a stable session identity.";
+	const targets = await resolveCodexDiagnosticsTargets(deps, ctx);
+	return targets.length > 0 ? targets : NO_DIAGNOSTICS_THREAD;
+}
 async function hasAnyCodexDiagnosticsIdentity(ctx) {
 	if (await resolveControlTarget(ctx)) return true;
 	return (ctx.diagnosticsSessions ?? []).some((session) => Boolean(session.sessionId));
@@ -2037,7 +1941,10 @@ async function resumeThread(deps, ctx, pluginConfig, args) {
 					retained = await retainCodexAppServerBindingSubscription(client, effectiveThreadId, knownOwnership);
 					assertCurrent();
 					if (!retained) throw new Error("Codex resumed thread lost its native subscription owner.");
-					if (bindingBeforeCommit && !sameOwner) await releaseCodexAppServerBindingSubscription(bindingBeforeCommit, { assertCurrent });
+					if (bindingBeforeCommit && !sameOwner) await releaseCodexAppServerBindingSubscription(bindingBeforeCommit, {
+						assertCurrent,
+						retainedClientId: clientId
+					});
 					assertCurrent();
 					if (!await deps.bindingStore.mutate(identity, {
 						kind: "set",
@@ -2538,7 +2445,7 @@ async function handleCodexPluginsSubcommand(input, rest, io, runtime) {
 			});
 			return formatCodexAvailablePlugins(discovered.plugins, discovered.warnings, query, page);
 		} catch (error) {
-			return { text: `Could not list Codex plugins: ${formatCodexDisplayText(errorMessage(error))}` };
+			return { text: `Could not list Codex plugins: ${formatCodexDisplayText(coerceErrorMessage(error))}` };
 		}
 	}
 	if (normalized === "status") {
@@ -2710,7 +2617,7 @@ async function installCodexPlugin(requestedId, io, runtime, ctx) {
 			if (!plugin) return { text: `Multiple available Codex plugins match '${formatCodexDisplayText(requestedId)}'; the marketplace identity must be unique.` };
 		} else plugin = matching[0];
 	} catch (error) {
-		return { text: `Could not verify the requested Codex plugin: ${formatCodexDisplayText(errorMessage(error))}` };
+		return { text: `Could not verify the requested Codex plugin: ${formatCodexDisplayText(coerceErrorMessage(error))}` };
 	}
 	if (!plugin) return { text: `${formatCodexDisplayText(requestedId)} was not found. Run /codex plugins available to inspect the current marketplaces.` };
 	if (!plugin.available) return { text: `${formatCodexDisplayText(requestedId)} is unavailable or disabled by its marketplace administrator.` };
@@ -2723,7 +2630,7 @@ async function installCodexPlugin(requestedId, io, runtime, ctx) {
 		const configured = resolveInstalledPluginKey((await io.readConfig()).plugins ?? {}, plugin);
 		if (configured.status === "ambiguous" || configured.status === "mismatched") return { text: describeConfiguredPluginIdentityConflict(requestedId, configured.status) };
 	} catch (error) {
-		return { text: `Could not verify existing Codex plugin authorization: ${formatCodexDisplayText(errorMessage(error))}` };
+		return { text: `Could not verify existing Codex plugin authorization: ${formatCodexDisplayText(coerceErrorMessage(error))}` };
 	}
 	let result;
 	if (!alreadyInstalled) {
@@ -2739,7 +2646,7 @@ async function installCodexPlugin(requestedId, io, runtime, ctx) {
 			assertCodexHostOwnerCurrent(ctx);
 			result = await runtime.install(requestParams);
 		} catch (error) {
-			return { text: `Could not install ${formatCodexDisplayText(requestedId)}: ${formatCodexDisplayText(errorMessage(error))}` };
+			return { text: `Could not install ${formatCodexDisplayText(requestedId)}: ${formatCodexDisplayText(coerceErrorMessage(error))}` };
 		}
 	}
 	const selectedPlugin = plugin;
@@ -2763,13 +2670,13 @@ async function installCodexPlugin(requestedId, io, runtime, ctx) {
 			block.plugins[configKey] = updated;
 		}, () => assertCodexHostOwnerCurrent(ctx));
 	} catch (error) {
-		return { text: `${formatCodexDisplayText(requestedId)} was installed in Codex but could not be authorized in OpenClaw and will not be exposed: ${formatCodexDisplayText(errorMessage(error))}` };
+		return { text: `${formatCodexDisplayText(requestedId)} was installed in Codex but could not be authorized in OpenClaw and will not be exposed: ${formatCodexDisplayText(coerceErrorMessage(error))}` };
 	}
 	let refreshWarning = "";
 	if (runtime.refresh) try {
 		refreshWarning = (await runtime.refresh(workspaceDir)).diagnostics.map((diagnostic) => ` ${formatCodexDisplayText(diagnostic.message)}`).join("");
 	} catch (error) {
-		refreshWarning = ` Runtime refresh requires a new conversation: ${formatCodexDisplayText(errorMessage(error))}`;
+		refreshWarning = ` Runtime refresh requires a new conversation: ${formatCodexDisplayText(coerceErrorMessage(error))}`;
 	}
 	const appsNeedingAuth = result?.appsNeedingAuth ?? [];
 	if (appsNeedingAuth.length > 0) {
@@ -2801,22 +2708,7 @@ async function installCodexPlugin(requestedId, io, runtime, ctx) {
 					type: "text",
 					text: `Some app setup permissions could not be confirmed. Run /codex plugins status ${requestedId} to check the current account and restrictions.`
 				}] : [],
-				{
-					type: "buttons",
-					buttons: [...appLinks.length > 0 ? [{
-						label: "Refresh hosted apps",
-						action: {
-							type: "command",
-							command: "/codex plugins refresh"
-						}
-					}] : [], {
-						label: "Check status",
-						action: {
-							type: "command",
-							command: `/codex plugins status ${requestedId}`
-						}
-					}]
-				},
+				buildCodexPluginStatusButtons(requestedId, appLinks.length > 0),
 				{
 					type: "context",
 					text: `${refreshWarning.trim()} ${POLICY_REFRESH_HINT}`.trim()
@@ -2832,9 +2724,6 @@ async function installCodexPlugin(requestedId, io, runtime, ctx) {
 	const status = alreadyInstalled ? "bundle was already installed in Codex" : "bundle was installed in Codex";
 	return { text: `${formatCodexDisplayText(requestedId)} ${status}. OpenClaw app access is configured.${refreshWarning} ${POLICY_REFRESH_HINT}` };
 }
-function errorMessage(error) {
-	return error instanceof Error ? error.message : String(error);
-}
 function formatPluginList(plugins, options = {}) {
 	const globalEnabled = options.globalEnabled === true;
 	const keys = Object.keys(plugins).toSorted();
@@ -3002,6 +2891,17 @@ async function handleCodexSubcommand(ctx, options) {
 	if (CODEX_NATIVE_CONTROL_SUBCOMMANDS.has(normalized) && !returnsBeforeNativeCodexExecution(normalized, rest) && !isReadOnlyCodexGoalCommand(normalized, rest) && !canMutateCodexHost(ctx)) return { text: CODEX_NATIVE_EXECUTION_AUTH_ERROR };
 	const sandboxBlock = resolveCodexNativeCommandSandboxBlock(ctx, normalized, rest);
 	if (sandboxBlock) return { text: sandboxBlock };
+	const usageCommand = normalized === "unbind" ? "detach" : normalized;
+	if (rest.length > 0 && [
+		"status",
+		"models",
+		"detach",
+		"binding",
+		"stop",
+		"mcp",
+		"skills",
+		"account"
+	].includes(usageCommand)) return { text: `Usage: /codex ${usageCommand}` };
 	if (normalized === "plugins") {
 		if (rest[0]?.toLowerCase() === "refresh") {
 			if (rest.length !== 1) return { text: "Usage: /codex plugins refresh — refresh hosted app inventory for the current Codex account/runtime." };
@@ -3090,12 +2990,10 @@ async function handleCodexSubcommand(ctx, options) {
 		});
 	}
 	if (normalized === "status") {
-		if (rest.length > 0) return { text: "Usage: /codex status" };
 		const { agentDir } = resolveCodexConversationControlScope(ctx);
 		return { text: formatCodexStatus(await deps.readCodexStatusProbes(options.pluginConfig, ctx.config, agentDir)) };
 	}
 	if (normalized === "models") {
-		if (rest.length > 0) return { text: "Usage: /codex models" };
 		const { agentDir } = resolveCodexConversationControlScope(ctx);
 		return { text: formatModels(await deps.listCodexAppServerModels(deps.requestOptions(options.pluginConfig, 100, ctx.config, agentDir))) };
 	}
@@ -3104,18 +3002,9 @@ async function handleCodexSubcommand(ctx, options) {
 	if (normalized === "sessions") return { text: await buildCodexCliSessions(deps, rest) };
 	if (normalized === "resume") return { text: await resumeThread(deps, ctx, options.pluginConfig, rest) };
 	if (normalized === "bind") return await bindConversation(deps, ctx, options.pluginConfig, rest);
-	if (normalized === "detach" || normalized === "unbind") {
-		if (rest.length > 0) return { text: "Usage: /codex detach" };
-		return { text: await detachConversation(deps, ctx) };
-	}
-	if (normalized === "binding") {
-		if (rest.length > 0) return { text: "Usage: /codex binding" };
-		return { text: await describeConversationBinding(deps, ctx) };
-	}
-	if (normalized === "stop") {
-		if (rest.length > 0) return { text: "Usage: /codex stop" };
-		return { text: await stopConversationTurn(deps, ctx) };
-	}
+	if (normalized === "detach" || normalized === "unbind") return { text: await detachConversation(deps, ctx) };
+	if (normalized === "binding") return { text: await describeConversationBinding(deps, ctx) };
+	if (normalized === "stop") return { text: await stopConversationTurn(deps, ctx) };
 	if (normalized === "steer") return { text: await steerConversationTurn(deps, ctx, rest.join(" ")) };
 	if (normalized === "model") return { text: await setConversationModel(deps, ctx, options.pluginConfig, rest) };
 	if (normalized === "fast") {
@@ -3126,31 +3015,21 @@ async function handleCodexSubcommand(ctx, options) {
 		if (isMenuVerb(rest)) return buildCodexPermissionsMenuReply();
 		return { text: await setConversationPermissions(deps, ctx, rest) };
 	}
-	if (normalized === "compact") return { text: await startThreadAction(deps, ctx, options.pluginConfig, "compact", rest) };
-	if (normalized === "review") return { text: await startThreadAction(deps, ctx, options.pluginConfig, "review", rest) };
+	if (normalized === "compact" || normalized === "review") return { text: await startThreadAction(deps, ctx, options.pluginConfig, normalized, rest) };
 	if (normalized === "diagnostics") return await handleCodexDiagnosticsFeedback(deps, ctx, options.pluginConfig, rest.join(" "), "/codex diagnostics");
 	if (normalized === "computer-use" || normalized === "computeruse") {
 		if (isMenuVerb(rest)) return buildCodexComputerUseMenuReply();
 		return { text: await handleComputerUseCommand(deps, ctx, options.pluginConfig, rest) };
 	}
-	if (normalized === "mcp") {
-		if (rest.length > 0) return { text: "Usage: /codex mcp" };
-		const scope = await resolveCommandAppServerScope(deps, ctx, options.pluginConfig);
-		return { text: formatList(await deps.codexControlRequest(options.pluginConfig, CODEX_CONTROL_METHODS.listMcpServers, { limit: 100 }, {
-			config: ctx.config,
-			...scope
-		}), "MCP servers") };
-	}
-	if (normalized === "skills") {
-		if (rest.length > 0) return { text: "Usage: /codex skills" };
+	if (normalized === "mcp" || normalized === "skills") {
 		const scope = await resolveCommandAppServerScope(deps, ctx, options.pluginConfig);
-		return { text: formatSkills(await deps.codexControlRequest(options.pluginConfig, CODEX_CONTROL_METHODS.listSkills, {}, {
+		const response = await deps.codexControlRequest(options.pluginConfig, normalized === "mcp" ? CODEX_CONTROL_METHODS.listMcpServers : CODEX_CONTROL_METHODS.listSkills, normalized === "mcp" ? { limit: 100 } : {}, {
 			config: ctx.config,
 			...scope
-		})) };
+		});
+		return { text: normalized === "mcp" ? formatList(response, "MCP servers") : formatSkills(response) };
 	}
 	if (normalized === "account") {
-		if (rest.length > 0) return { text: "Usage: /codex account" };
 		const scope = await resolveCommandAppServerScope(deps, ctx, options.pluginConfig);
 		const requestScope = {
 			config: ctx.config,