@openclaw/codex 2026.9.7 → 2026.10.1-beta.1

package/dist/.setup/{effective-mcp-catalog-CxUtC-xG.mjs → effective-mcp-catalog-BysTBZCW.mjs}

@@ -1,7 +1,8 @@
-import { v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import { l as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-DJIgqgMw.mjs";
-import "./shared-client-DqyTMYug.mjs";
-import "./session-binding-DGCYAfvD.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-BZB8RgcF.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CEd9QlIs.mjs";
+import { U as protectCodexAppServerLiveThread } from "./shared-client-DJJ3ljH2.mjs";
+import "./session-binding-Ce7BqiPN.mjs";
+import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-j10HhfTC.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts
@@ -10,7 +11,8 @@ const MCP_STATUS_MAX_PAGES = 100;
 function catalogTool(params) {
 	const raw = asOptionalRecord(params.raw);
 	const description = normalizeOptionalString(raw?.description);
-	const title = normalizeOptionalString(raw?.title);
+	const { title, ...metadata } = projectCodexMcpToolMetadata(params.toolName, raw);
+	const ui = asOptionalRecord(asOptionalRecord(raw?._meta)?.ui);
 	return {
 		serverName: params.serverName,
 		safeServerName: params.safeServerName,
@@ -18,7 +20,8 @@ function catalogTool(params) {
 		...title ? { title } : {},
 		...description ? { description } : {},
 		inputSchema: asOptionalRecord(raw?.inputSchema) ?? { type: "object" },
-		fallbackDescription: description ?? params.toolName,
+		...metadata,
+		...Array.isArray(ui?.visibility) ? { uiVisibility: ui.visibility.filter((value) => value === "app" || value === "model") } : {},
 		...params.deniedBySession ? { deniedBySession: true } : {}
 	};
 }
@@ -43,8 +46,7 @@ function buildCodexEffectiveMcpCatalog(statuses, toolOverrides) {
 				raw,
 				...deniedBySession ? { deniedBySession } : {}
 			});
-			if (deniedBySession) sessionDeniedTools.push(tool);
-			else tools.push(tool);
+			(deniedBySession ? sessionDeniedTools : tools).push(tool);
 		}
 		for (const toolName of [...deniedNames].toSorted()) {
 			if (observedNames.has(toolName)) continue;
@@ -56,9 +58,8 @@ function buildCodexEffectiveMcpCatalog(statuses, toolOverrides) {
 			}));
 		}
 		serverEntries.push([status.name, {
-			serverName: status.name,
+			...projectCodexMcpServerMetadata(status),
 			safeServerName,
-			launchSummary: "Codex native MCP connection",
 			toolCount: observedNames.size + [...deniedNames].filter((name) => !observedNames.has(name)).length
 		}]);
 	}
@@ -107,5 +108,76 @@ async function loadCodexEffectiveMcpCatalog(params, options) {
 		await retained.release();
 	}
 }
+/** Explicit App requests retain the thread owner, never start a second MCP client. */
+async function acquireCodexMcpAppRuntime(params, options) {
+	const identity = sessionBindingIdentity(params);
+	let binding = options.bindingStore.read(identity);
+	let retained = await retainSharedCodexAppServerClientByInstanceId(binding?.clientId);
+	if (!retained && params.prepareSession) {
+		const preparation = await params.prepareSession();
+		params.assertCurrent();
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-CdqsXwZX.mjs");
+		await prepareCodexMcpAppSession({
+			preparation,
+			bindingStore: options.bindingStore,
+			pluginConfig: options.pluginConfig,
+			assertCurrent: params.assertCurrent
+		});
+		params.assertCurrent();
+		binding = options.bindingStore.read(identity);
+		retained = await retainSharedCodexAppServerClientByInstanceId(binding?.clientId);
+	}
+	if (!binding?.clientId || !retained) return;
+	const acquired = retained;
+	const admittedBinding = binding;
+	try {
+		const assertBinding = () => {
+			const latest = options.bindingStore.read(identity);
+			if (!latest || latest.clientId !== admittedBinding.clientId || latest.threadId !== admittedBinding.threadId) throw new Error("Native MCP session binding changed");
+		};
+		params.assertCurrent();
+		assertBinding();
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-DV7VbfzF.mjs").then((n) => n.n);
+		params.assertCurrent();
+		const runtime = createNativeMcpRuntime({
+			client: retained.client,
+			threadId: binding.threadId,
+			attempt: params,
+			appRequester: params.appRequester,
+			originCallId: "",
+			assertCurrent: assertBinding
+		});
+		const allowed = new Set(params.mcpServerNames.filter((name) => name !== "codex_apps"));
+		const getCatalog = runtime.getCatalog;
+		let catalog = null;
+		runtime.getCatalog = async () => {
+			const loaded = await getCatalog();
+			for (const server of Object.values(loaded.servers)) if (server.serverName !== "codex_apps" && server.pluginId) allowed.add(server.serverName);
+			catalog = {
+				...loaded,
+				servers: Object.fromEntries(Object.entries(loaded.servers).filter(([name]) => allowed.has(name))),
+				tools: loaded.tools.filter((tool) => allowed.has(tool.serverName) && !params.toolOverrides?.mcpToolsDeny?.[tool.serverName]?.includes(tool.toolName))
+			};
+			return catalog;
+		};
+		runtime.peekCatalog = () => catalog;
+		const unprotect = protectCodexAppServerLiveThread(acquired.client, admittedBinding.threadId);
+		let cleanup;
+		runtime.joinCleanup = async () => {
+			await cleanup;
+		};
+		return {
+			runtime,
+			releaseLease: () => {
+				unprotect();
+				cleanup = acquired.release();
+				cleanup?.catch(() => void 0);
+			}
+		};
+	} catch (error) {
+		await retained.release();
+		throw error;
+	}
+}
 //#endregion
-export { loadCodexEffectiveMcpCatalog };
+export { acquireCodexMcpAppRuntime, loadCodexEffectiveMcpCatalog };

package/dist/.setup/{elicitation-input-DPoK8F7w.mjs → elicitation-input-r9axtppm.mjs}

@@ -22,7 +22,7 @@ function compileCodexOrdinaryElicitation(params) {
 			protocolName: "MCP"
 		})
 	};
-	if (mode !== "form" && mode !== "openai/form") return {
+	if (mode !== "form" && mode !== "openai/form" && mode !== "openaiForm") return {
 		kind: "compiled",
 		input: {
 			kind: "unsupported",
@@ -36,7 +36,9 @@ function compileCodexOrdinaryElicitation(params) {
 			message: readCodexElicitationString(params.snapshot, "message"),
 			fallbackMessage: "Codex needs input",
 			options: {
-				protocolName: mode === "openai/form" ? "OpenAI" : "MCP",
+				protocolName: mode === "form" ? "MCP" : "OpenAI",
+				allowRichForms: mode === "openaiForm",
+				resourceContext: params.resourceContext,
 				allowEmptyForm: true,
 				minimumChoiceCount: 1,
 				allowEnumNames: true,

package/dist/.setup/{ephemeral-turn-CDsPJOa2.mjs → ephemeral-turn-oPKxs3ia.mjs}

@@ -1,6 +1,6 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { E as readCodexTurnCompletedNotification } from "./client-N0JpgSzF.mjs";
-import { h as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-DOP-cW5j.mjs";
+import { x as readCodexTurnCompletedNotification } from "./client-CBzEVDyb.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-CX1-EoCp.mjs";
 import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-03R0I2dM.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{event-projector-assistant-message-CigreO4K.mjs → event-projector-assistant-message-YCL2wspu.mjs}

@@ -1,5 +1,5 @@
-import { t as codexProviderRefusalDiagnostics } from "./event-projector-values-DJSz8BTk.mjs";
-import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-Dpsmf2wz.mjs";
+import { t as codexProviderRefusalDiagnostics } from "./event-projector-values-DTqZHizf.mjs";
+import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-CCEFO6qK.mjs";
 import { createAgentHarnessAssistantMessage } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";
 //#region extensions/codex/src/app-server/event-projector-assistant-message.ts
 function createAssistantMessage(params, text, options) {

package/dist/.setup/{event-projector-values-DJSz8BTk.mjs → event-projector-values-DTqZHizf.mjs}

@@ -1,5 +1,5 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { asFiniteNumber, normalizeOptionalString as normalizeOptionalString$1, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { Buffer } from "node:buffer";
 //#region extensions/codex/src/app-server/event-projector-values.ts
 const BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX = "This content was flagged for possible biological risk.";
@@ -53,18 +53,11 @@ function codexProviderRefusalDiagnostics(refusal, timestamp) {
 		details: codexProviderRefusalDetails(refusal)
 	}] } : {};
 }
-function readNonEmptyString(record, key) {
-	return normalizeOptionalString$1(record[key]);
-}
 function readNullableString(record, key) {
 	const value = record[key];
 	if (value === null) return null;
 	return typeof value === "string" ? value : void 0;
 }
-function readNonNegativeInteger(record, key) {
-	const value = asFiniteNumber(record[key]);
-	return value !== void 0 && Number.isInteger(value) && value >= 0 ? value : void 0;
-}
 function readCodexErrorNotificationMessage(record) {
 	const error = record.error;
 	return isJsonObject(error) ? readStringField(error, "message") : void 0;
@@ -82,9 +75,6 @@ function readHookOutputEntries(value) {
 		}];
 	});
 }
-function splitPlanText(text) {
-	return text.split(/\r?\n/).map((line) => line.trim().replace(/^[-*]\s+/, "")).filter((line) => line.length > 0);
-}
 function extractRawAssistantText(item) {
 	const parts = (Array.isArray(item.content) ? item.content : []).flatMap((entry) => {
 		if (!isJsonObject(entry)) return [];
@@ -103,4 +93,4 @@ function readItem(value) {
 	return value;
 }
 //#endregion
-export { readCodexProviderRefusal as a, readNonEmptyString as c, splitPlanText as d, readCodexErrorNotificationMessage as i, readNonNegativeInteger as l, extractRawAssistantText as n, readHookOutputEntries as o, normalizeOptionalString$1 as r, readItem as s, codexProviderRefusalDiagnostics as t, readNullableString as u };
+export { readHookOutputEntries as a, readCodexProviderRefusal as i, extractRawAssistantText as n, readItem as o, readCodexErrorNotificationMessage as r, readNullableString as s, codexProviderRefusalDiagnostics as t };

package/dist/.setup/{inference-dispatch-CMZtjQyz.mjs → inference-dispatch-B5UKEUyC.mjs}

@@ -149,12 +149,8 @@ function createCodexInferenceModelBinding(params) {
 		const reviewer = metadata.subagent === "guardian" && metadata.threadSource === "guardian_review";
 		const classifier = metadata.subagent === "guardian" && metadata.threadSource === "guardian_classifier";
 		if (path === "/guardian" && !reviewer || path === "/guardian-classifier" && !classifier || path === "/responses/compact" && metadata.requestKind !== "compaction") throw new CodexInferenceAuthorizationError("owner");
-		if (path === "/responses" && metadata.requestKind === "prewarm" && body.generate === false) return {
-			assertCurrent: assertClient,
-			release: () => {}
-		};
 		const memory = metadata.threadSource === "memory_consolidation" && (metadata.requestKind === "memory" || metadata.subagent === "memory_consolidation");
-		if (memory && params.memoryConfigured() && path === "/responses") return {
+		if (path === "/responses" && metadata.requestKind === "prewarm" && body.generate === false || memory && params.memoryConfigured() && path === "/responses") return {
 			assertCurrent: assertClient,
 			release: () => {}
 		};
@@ -189,6 +185,11 @@ function createCodexInferenceModelBinding(params) {
 		};
 		let model;
 		let releaseAbort = () => {};
+		const release = () => {
+			releaseAbort();
+			model?.release();
+			captured.release();
+		};
 		try {
 			captured.assertCurrent();
 			signal.throwIfAborted();
@@ -209,10 +210,9 @@ function createCodexInferenceModelBinding(params) {
 					throw new CodexInferenceAuthorizationError("model");
 				}
 				if (!model) throw new CodexInferenceAuthorizationError("owner");
-				const revoke = cancelNativeTurn;
-				model?.signal.addEventListener("abort", revoke, { once: true });
-				releaseAbort = () => model?.signal.removeEventListener("abort", revoke);
-				if (model?.signal.aborted) revoke();
+				model.signal.addEventListener("abort", cancelNativeTurn, { once: true });
+				releaseAbort = () => model?.signal.removeEventListener("abort", cancelNativeTurn);
+				if (model.signal.aborted) cancelNativeTurn();
 			}
 			if (!parentExecution) captured.recordNativeReviewRequirement(metadata.autoReviewEnabled === true || metadata.nodeReplAutoReviewRequired === true);
 			const assertExecution = () => {
@@ -228,16 +228,10 @@ function createCodexInferenceModelBinding(params) {
 			return {
 				assertCurrent: assertExecution,
 				signal: model?.signal ?? captured.source?.signal,
-				release: () => {
-					releaseAbort();
-					model?.release();
-					captured.release();
-				}
+				release
 			};
 		} catch (error) {
-			releaseAbort();
-			model?.release();
-			captured.release();
+			release();
 			return refuseOwner(error, signal);
 		}
 	};
@@ -344,9 +338,6 @@ async function readProxyBody(stream, maxBytes) {
 	}
 	return Buffer.concat(chunks);
 }
-function readProxyWebSocketBody(data) {
-	return Array.isArray(data) ? Buffer.concat(data) : Buffer.isBuffer(data) ? data : Buffer.from(data);
-}
 function isTerminalResponse(bytes) {
 	try {
 		const event = JSON.parse(bytes.toString("utf8"));
@@ -356,4 +347,4 @@ function isTerminalResponse(bytes) {
 	}
 }
 //#endregion
-export { CODEX_INFERENCE_TRANSPORT_FAILURE, CodexInferenceAuthorizationError, authorizationFailure, createCodexInferenceDispatch, createCodexInferenceModelBinding, isTerminalResponse, createUploadAdmission as n, readProxyBody, readProxyWebSocketBody, MAX_BODY_BYTES as t };
+export { CODEX_INFERENCE_TRANSPORT_FAILURE, CodexInferenceAuthorizationError, authorizationFailure, createCodexInferenceDispatch, createCodexInferenceModelBinding, isTerminalResponse, createUploadAdmission as n, readProxyBody, MAX_BODY_BYTES as t };

package/dist/.setup/{inference-proxy-DhcXOgUE.mjs → inference-proxy-DUO5E2QQ.mjs}

@@ -1,4 +1,5 @@
-import { CODEX_INFERENCE_TRANSPORT_FAILURE, CodexInferenceAuthorizationError, authorizationFailure, createCodexInferenceDispatch, isTerminalResponse, n as createUploadAdmission, readProxyBody, readProxyWebSocketBody, t as MAX_BODY_BYTES } from "./inference-dispatch-CMZtjQyz.mjs";
+import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
+import { CODEX_INFERENCE_TRANSPORT_FAILURE, authorizationFailure, createCodexInferenceDispatch, isTerminalResponse, n as createUploadAdmission, readProxyBody, t as MAX_BODY_BYTES } from "./inference-dispatch-B5UKEUyC.mjs";
 import { t as createCodexInferenceContext } from "./inference-context-D-9gWlTR.mjs";
 import { createPermitPool } from "openclaw/plugin-sdk/concurrency-runtime";
 import { Writable } from "node:stream";
@@ -471,7 +472,7 @@ async function createCodexInferenceProxy(params) {
 									let prepared;
 									try {
 										if (binary) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
-										prepared = await prepare(readProxyWebSocketBody(data), sampling, path, req.headers, signal, "websocket");
+										prepared = await prepare(codexWebSocketDataToBuffer(data), sampling, path, req.headers, signal, "websocket");
 										prepared.assertCurrent();
 										const frame = prepared;
 										const onAbort = () => close();
@@ -498,11 +499,11 @@ async function createCodexInferenceProxy(params) {
 							});
 							accepted.once("close", () => releaseFrame());
 							remote.on("message", (data, binary) => {
-								if (accepted.readyState !== WebSocket.OPEN || accepted.bufferedAmount + readProxyWebSocketBody(data).length > 33554432) {
+								if (accepted.readyState !== WebSocket.OPEN || accepted.bufferedAmount + codexWebSocketDataToBuffer(data).length > 33554432) {
 									close();
 									return;
 								}
-								const terminal = !binary && isTerminalResponse(readProxyWebSocketBody(data));
+								const terminal = !binary && isTerminalResponse(codexWebSocketDataToBuffer(data));
 								const releaseCompletedFrame = terminal ? settleFrame : void 0;
 								accepted.send(data, { binary }, (error) => {
 									if (error) close();
@@ -558,4 +559,4 @@ async function createCodexInferenceProxy(params) {
 	}
 }
 //#endregion
-export { CodexInferenceAuthorizationError, createCodexInferenceProxy };
+export { createCodexInferenceProxy };

package/dist/.setup/{isolated-completion-Dm3PzxJk.mjs → isolated-completion-D5gbKm6k.mjs}

@@ -1,11 +1,11 @@
-import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
-import { i as resolveCodexAppServerHomeScope } from "./config-options-CzyWLTJt.mjs";
-import "./config-DKhXquav.mjs";
-import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-DqyTMYug.mjs";
-import { _ as assertCodexPassiveTurnItems } from "./client-N0JpgSzF.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-CbjoN2OW.mjs";
-import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-B8K_ylqk.mjs";
-import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CigreO4K.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
+import { i as resolveCodexAppServerHomeScope } from "./config-options-HG_Rr3W_.mjs";
+import "./config-0Gxk3_eq.mjs";
+import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-DJJ3ljH2.mjs";
+import { f as assertCodexPassiveTurnItems } from "./client-CBzEVDyb.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DlHlNTyS.mjs";
+import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-DklXNk3k.mjs";
+import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-YCL2wspu.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts
 /** Runs prompt-only Codex inference on an ephemeral, ring-zero native thread. */
 async function runCodexIsolatedCompletion(params, options) {

package/dist/.setup/{managed-binary-kiWRhNRE.mjs → managed-binary-C1VFoVPf.mjs}

@@ -1,28 +1,28 @@
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { createRequire } from "node:module";
+import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 import { constants, existsSync, realpathSync } from "node:fs";
 import path from "node:path";
 import { access } from "node:fs/promises";
-import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
-import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 //#region extensions/codex/src/app-server/desktop-app-paths.ts
 /** Shared path candidates for Codex's macOS desktop app bundle. */
-const MACOS_DESKTOP_CODEX_APP_PATH_CANDIDATES = [{
-	appName: "ChatGPT.app",
-	appBundlePath: "/Applications/ChatGPT.app",
-	appServerCommandPath: "/Applications/ChatGPT.app/Contents/Resources/codex",
-	bundledMarketplacePath: "/Applications/ChatGPT.app/Contents/Resources/plugins/openai-bundled",
-	computerUseServiceAppPaths: ["/Applications/ChatGPT.app/Contents/Resources/cua_node/lib/node_modules/@oai/sky/Codex Computer Use.app", "/Applications/ChatGPT.app/Contents/Resources/plugins/openai-bundled/plugins/computer-use/Codex Computer Use.app"]
-}, {
-	appName: "Codex.app",
-	appBundlePath: "/Applications/Codex.app",
-	appServerCommandPath: "/Applications/Codex.app/Contents/Resources/codex",
-	bundledMarketplacePath: "/Applications/Codex.app/Contents/Resources/plugins/openai-bundled",
-	computerUseServiceAppPaths: ["/Applications/Codex.app/Contents/Resources/plugins/openai-bundled/plugins/computer-use/Codex Computer Use.app", "/Applications/Codex.app/Contents/Resources/cua_node/lib/node_modules/@oai/sky/Codex Computer Use.app"]
-}].flatMap((candidate) => [{
-	...candidate,
-	appServerCommandPath: path.join(candidate.appBundlePath, "Contents", "Resources", "codex-cli", "CodexCLI.app", "Contents", "MacOS", "codex")
-}, candidate]);
+const MACOS_DESKTOP_CODEX_APP_PATH_CANDIDATES = ["ChatGPT.app", "Codex.app"].flatMap((appName) => {
+	const appBundlePath = `/Applications/${appName}`;
+	const resources = `${appBundlePath}/Contents/Resources`;
+	const computerUseServiceAppPaths = [`${resources}/cua_node/lib/node_modules/@oai/sky/Codex Computer Use.app`, `${resources}/plugins/openai-bundled/plugins/computer-use/Codex Computer Use.app`];
+	if (appName === "Codex.app") computerUseServiceAppPaths.reverse();
+	const candidate = {
+		appName,
+		appBundlePath,
+		appServerCommandPath: `${resources}/codex`,
+		bundledMarketplacePath: `${resources}/plugins/openai-bundled`,
+		computerUseServiceAppPaths
+	};
+	return [{
+		...candidate,
+		appServerCommandPath: path.join(appBundlePath, "Contents", "Resources", "codex-cli", "CodexCLI.app", "Contents", "MacOS", "codex")
+	}, candidate];
+});
 function resolveMacOSDesktopCodexAppPathCandidates(platform = process.platform) {
 	return platform === "darwin" ? MACOS_DESKTOP_CODEX_APP_PATH_CANDIDATES : [];
 }
@@ -47,7 +47,7 @@ function resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath(params = {}
 //#endregion
 //#region extensions/codex/src/app-server/version.ts
 /** Exact Codex app-server version shipped by the OpenClaw Codex bridge. */
-const CODEX_APP_SERVER_VERSION = "0.158.0";
+const CODEX_APP_SERVER_VERSION = "0.160.0";
 /** Inclusive runtime compatibility floor for external app-server binaries. */
 const MIN_SUPPORTED_CODEX_APP_SERVER_VERSION = "0.149.0";
 const MANAGED_CODEX_APP_SERVER_PACKAGE = "@openai/codex";
@@ -76,13 +76,16 @@ async function resolveManagedCodexAppServerStartOptions(startOptions, options =
 	const pluginRoot = options.pluginRoot ?? registeredCodexPlugin.root;
 	if (!pluginRoot) throw new Error("Codex plugin root is unavailable. Load the Codex plugin before starting its managed app-server.");
 	const platform = options.platform ?? process.platform;
-	const commandPaths = await findManagedCodexAppServerCommandPaths({
-		candidateCommandPaths: resolveManagedCodexAppServerCommandCandidates(pluginRoot, platform, startOptions.managedCommandOrder ?? "package-first"),
-		pathExists: options.pathExists ?? commandPathExists,
-		platform
-	});
-	const commandPath = expectDefined(commandPaths[0], "resolved managed Codex command path");
-	const managedFallbackCommandPaths = commandPaths.slice(1);
+	const candidateCommandPaths = resolveManagedCodexAppServerCommandCandidates(pluginRoot, platform, startOptions.managedCommandOrder ?? "package-first");
+	const pathExists = options.pathExists ?? commandPathExists;
+	const commandPaths = [];
+	for (const commandPath of candidateCommandPaths) if (await pathExists(commandPath, platform)) commandPaths.push(commandPath);
+	const [commandPath, ...managedFallbackCommandPaths] = commandPaths;
+	if (commandPath === void 0) throw new Error([
+		`Managed Codex app-server binary was not found for ${MANAGED_CODEX_APP_SERVER_PACKAGE}.`,
+		"Reinstall or update OpenClaw, or run pnpm install in a source checkout.",
+		"Set plugins.entries.codex.config.appServer.command or OPENCLAW_CODEX_APP_SERVER_BIN to use a custom Codex binary."
+	].join(" "));
 	return {
 		...startOptions,
 		command: commandPath,
@@ -113,7 +116,7 @@ function resolvePackagedCodexNativeCommand(entrypoint) {
 }
 /** Returns whether a command is one of the standard macOS desktop app executables. */
 function isManagedCodexDesktopCommand(command, platform = process.platform) {
-	return platform === "darwin" && resolveMacOSDesktopCodexAppServerCommandCandidates(platform).some((candidate) => candidate === command);
+	return platform === "darwin" && resolveMacOSDesktopCodexAppServerCommandCandidates(platform).includes(command);
 }
 function resolveManagedCodexPackageRootForCommand(command, platform) {
 	const pathApi = platform === "win32" ? path.win32 : path.posix;
@@ -180,16 +183,6 @@ function resolveManagedCodexPackageEntrypoint(pluginRoot) {
 		return;
 	}
 }
-async function findManagedCodexAppServerCommandPaths(params) {
-	const commandPaths = [];
-	for (const commandPath of params.candidateCommandPaths) if (await params.pathExists(commandPath, params.platform)) commandPaths.push(commandPath);
-	if (commandPaths.length > 0) return commandPaths;
-	throw new Error([
-		`Managed Codex app-server binary was not found for ${MANAGED_CODEX_APP_SERVER_PACKAGE}.`,
-		"Reinstall or update OpenClaw, or run pnpm install in a source checkout.",
-		"Set plugins.entries.codex.config.appServer.command or OPENCLAW_CODEX_APP_SERVER_BIN to use a custom Codex binary."
-	].join(" "));
-}
 async function commandPathExists(filePath, platform) {
 	try {
 		await access(filePath, platform === "win32" ? constants.F_OK : constants.X_OK);