@openclaw/codex 2026.9.7 → 2026.10.1-beta.1

package/dist/.setup/{config-security-CE-FcGw9.mjs → config-security-KAPScztc.mjs}

@@ -1,5 +1,4 @@
-import { l as readRecord, s as readNonEmptyString } from "./config-utils-D0CXecki.mjs";
-import { t as DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX } from "./config-parsing-b088LyhT.mjs";
+import { b as readRecord, v as readNonEmptyString } from "./config-parsing-BQq-CHTF.mjs";
 import { createHash } from "node:crypto";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { parse } from "smol-toml";
@@ -65,17 +64,13 @@ function resolveCodexRequirementsPath(env, platform) {
 	if (platform === "win32") return `${(readNonEmptyString(env.ProgramData) ?? "C:\\ProgramData").replace(/[\\/]+$/, "")}${WINDOWS_CODEX_REQUIREMENTS_SUFFIX}`;
 	return UNIX_CODEX_REQUIREMENTS_PATH;
 }
-function parseAllowedSandboxModesFromCodexRequirements(content, hostName) {
-	const requirements = parseCodexRequirements(content);
-	const remoteSandboxModes = parseMatchingRemoteSandboxModesFromCodexRequirements(requirements, hostName);
-	if (remoteSandboxModes !== void 0) return remoteSandboxModes;
-	return parseRequirementsValues(requirements?.allowed_sandbox_modes, normalizeRequirementsSandboxMode);
-}
-function parseAllowedApprovalPoliciesFromCodexRequirements(content) {
-	return parseRequirementsValues(parseCodexRequirements(content)?.allowed_approval_policies, normalizeRequirementsApprovalPolicy);
-}
-function parseAllowedApprovalsReviewersFromCodexRequirements(content) {
-	return parseRequirementsValues(parseCodexRequirements(content)?.allowed_approvals_reviewers, (value) => resolveApprovalsReviewer(value.trim().toLowerCase()));
+function parseCodexRequirementsPolicy(content, hostName = "") {
+	const requirements = content === void 0 ? void 0 : parseCodexRequirements(content);
+	return {
+		allowedSandboxModes: parseMatchingRemoteSandboxModesFromCodexRequirements(requirements, hostName) ?? parseRequirementsValues(requirements?.allowed_sandbox_modes, normalizeRequirementsSandboxMode),
+		allowedApprovalPolicies: parseRequirementsValues(requirements?.allowed_approval_policies, normalizeRequirementsApprovalPolicy),
+		allowedApprovalsReviewers: parseRequirementsValues(requirements?.allowed_approvals_reviewers, (value) => resolveApprovalsReviewer(value.trim().toLowerCase()))
+	};
 }
 function parseMatchingRemoteSandboxModesFromCodexRequirements(requirements, hostName) {
 	const normalizedHostName = normalizeRequirementsHostName(hostName);
@@ -130,7 +125,6 @@ function globPatternMatches(value, pattern) {
 }
 function normalizeRequirementsApprovalPolicy(value) {
 	const normalized = value.trim().toLowerCase();
-	if (normalized === "on-failure") return "on-request";
 	if (normalized === "untrusted") return normalized;
 	return resolveApprovalPolicy(normalized);
 }
@@ -154,6 +148,9 @@ function selectUserApprovalsReviewer(allowedApprovalsReviewers, execModeRequirin
 }
 //#endregion
 //#region extensions/codex/src/app-server/config-policy-json.ts
+function fingerprintCodexPolicy(value) {
+	return createHash("sha256").update(stringifyCodexPolicy(value)).digest("hex");
+}
 function stringifyCodexPolicy(value) {
 	if (Array.isArray(value)) return `[${value.map((item) => stringifyCodexPolicy(item)).join(",")}]`;
 	if (value && typeof value === "object") return `{${Object.entries(value).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stringifyCodexPolicy(item)}`).join(",")}}`;
@@ -188,7 +185,10 @@ function resolveCodexAppServerNetworkProxy(config, sandbox) {
 		},
 		network: networkConfig
 	};
-	const profileName = resolveNetworkProxyPermissionProfileName(config, profile);
+	const profileName = readNonEmptyString(config.profileName) ?? `openclaw-network-${fingerprintCodexPolicy({
+		version: 1,
+		profile
+	}).slice(0, 16)}`;
 	const configPatch = {
 		"features.network_proxy.enabled": true,
 		default_permissions: profileName,
@@ -196,19 +196,10 @@ function resolveCodexAppServerNetworkProxy(config, sandbox) {
 	};
 	return { networkProxy: {
 		profileName,
-		configFingerprint: createHash("sha256").update(stringifyCodexPolicy(configPatch)).digest("hex"),
+		configFingerprint: fingerprintCodexPolicy(configPatch),
 		configPatch
 	} };
 }
-function resolveNetworkProxyPermissionProfileName(config, profile) {
-	const explicitProfileName = readNonEmptyString(config.profileName);
-	if (explicitProfileName) return explicitProfileName;
-	const suffix = createHash("sha256").update(stringifyCodexPolicy({
-		version: 1,
-		profile
-	})).digest("hex").slice(0, 16);
-	return `${DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX}-${suffix}`;
-}
 function normalizeNetworkProxyPermissionMap(value) {
 	const entries = Object.entries(value ?? {}).map(([key, permission]) => [key.trim(), permission === "none" ? "deny" : permission]).filter(([key]) => key.length > 0);
 	return entries.length > 0 ? Object.fromEntries(entries) : void 0;
@@ -253,13 +244,8 @@ function assertCodexAppServerConnectionSecurity(params) {
 	if (inferCodexAppServerConnectionClass(params) === "remote" && !hasIdentityBearingWebSocketAuth(params)) throw new Error("remote Codex app-server WebSocket URLs require appServer.authToken or an Authorization header");
 }
 function isLoopbackWebSocketUrl(value) {
-	let parsed;
-	try {
-		parsed = new URL(value);
-	} catch {
-		return false;
-	}
-	if (parsed.protocol !== "ws:" && parsed.protocol !== "wss:") return false;
+	const parsed = URL.parse(value);
+	if (parsed?.protocol !== "ws:" && parsed?.protocol !== "wss:") return false;
 	return isLoopbackHost(parsed.hostname);
 }
 function hasIdentityBearingWebSocketAuth(params) {
@@ -279,9 +265,7 @@ function resolveDefaultCodexAppServerPolicy(params) {
 		mode: "yolo",
 		dangerFullAccessAllowed: true
 	};
-	const allowedSandboxModes = content === void 0 ? void 0 : parseAllowedSandboxModesFromCodexRequirements(content, readNonEmptyString(params.hostName) ?? hostname());
-	const allowedApprovalPolicies = content === void 0 ? void 0 : parseAllowedApprovalPoliciesFromCodexRequirements(content);
-	const allowedApprovalsReviewers = content === void 0 ? void 0 : parseAllowedApprovalsReviewersFromCodexRequirements(content);
+	const { allowedSandboxModes, allowedApprovalPolicies, allowedApprovalsReviewers } = parseCodexRequirementsPolicy(content, content === void 0 ? void 0 : readNonEmptyString(params.hostName) ?? hostname());
 	const yoloSandboxAllowed = allowedSandboxModes === void 0 || allowedSandboxModes.has("danger-full-access");
 	const yoloApprovalAllowed = allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has("never") && !allowedApprovalPolicies.has("untrusted");
 	const yoloReviewerAllowed = allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("user");
@@ -298,4 +282,4 @@ function resolveDefaultCodexAppServerPolicy(params) {
 	};
 }
 //#endregion
-export { resolveSandbox as C, selectGuardianSandbox as E, resolveEffectiveOpenClawExecModeForCodexAppServer as S, selectForcedPromptingSandbox as T, selectUserApprovalsReviewer as _, resolveDefaultCodexAppServerPolicy as a, resolveApprovalsReviewer as b, shouldAutoApproveCodexAppServerApprovals as c, parseAllowedApprovalPoliciesFromCodexRequirements as d, parseAllowedApprovalsReviewersFromCodexRequirements as f, selectGuardianApprovalsReviewer as g, selectGuardianApprovalPolicy as h, resolveCodexAppServerNetworkProxy as i, withMcpElicitationsApprovalPolicy as l, readCodexRequirementsToml as m, hasCodexMcpToolApprovalOverrides as n, resolvePolicyMode as o, parseAllowedSandboxModesFromCodexRequirements as p, inferCodexAppServerConnectionClass as r, resolveTransport as s, assertCodexAppServerConnectionSecurity as t, stringifyCodexPolicy as u, assertCodexAppServerAllowedForOpenClawExecMode as v, selectForcedDangerFullAccessSandbox as w, resolveCodexPolicyModeForOpenClawExecMode as x, resolveApprovalPolicy as y };
+export { selectForcedPromptingSandbox as C, selectForcedDangerFullAccessSandbox as S, resolveApprovalPolicy as _, resolveDefaultCodexAppServerPolicy as a, resolveEffectiveOpenClawExecModeForCodexAppServer as b, shouldAutoApproveCodexAppServerApprovals as c, parseCodexRequirementsPolicy as d, readCodexRequirementsToml as f, assertCodexAppServerAllowedForOpenClawExecMode as g, selectUserApprovalsReviewer as h, resolveCodexAppServerNetworkProxy as i, withMcpElicitationsApprovalPolicy as l, selectGuardianApprovalsReviewer as m, hasCodexMcpToolApprovalOverrides as n, resolvePolicyMode as o, selectGuardianApprovalPolicy as p, inferCodexAppServerConnectionClass as r, resolveTransport as s, assertCodexAppServerConnectionSecurity as t, fingerprintCodexPolicy as u, resolveApprovalsReviewer as v, selectGuardianSandbox as w, resolveSandbox as x, resolveCodexPolicyModeForOpenClawExecMode as y };

package/dist/.setup/{context-engine-projection-PezSESth.mjs → context-engine-projection-CsgYSQhW.mjs}

@@ -1,3 +1,4 @@
+import { asFiniteNumber } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { isOpenClawRuntimeContextCustomMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { IMAGE_BLOCK_TOKENS } from "openclaw/plugin-sdk/agent-core";
@@ -94,8 +95,8 @@ async function projectContextEngineAssemblyForCodex(params) {
 }
 /** Resolves rendered context size from a token budget and reserve. */
 function resolveCodexContextEngineProjectionMaxChars(params) {
-	const contextTokenBudget = typeof params.contextTokenBudget === "number" && Number.isFinite(params.contextTokenBudget) ? Math.floor(params.contextTokenBudget) : void 0;
-	if (!contextTokenBudget || contextTokenBudget <= 0) return DEFAULT_RENDERED_CONTEXT_CHARS;
+	const contextTokenBudget = Math.floor(asFiniteNumber(params.contextTokenBudget) ?? 0);
+	if (contextTokenBudget <= 0) return DEFAULT_RENDERED_CONTEXT_CHARS;
 	return normalizeRenderedContextMaxChars(resolveProjectionPromptBudgetTokens({
 		contextTokenBudget,
 		reserveTokens: params.reserveTokens
@@ -120,8 +121,8 @@ function resolveContinuityCharsPerToken(calibration) {
 }
 /** Resolves rendered context size for no-engine continuity projections. */
 function resolveCodexContinuityProjectionMaxChars(params) {
-	const contextTokenBudget = typeof params.contextTokenBudget === "number" && Number.isFinite(params.contextTokenBudget) ? Math.floor(params.contextTokenBudget) : void 0;
-	if (!contextTokenBudget || contextTokenBudget <= 0) return DEFAULT_RENDERED_CONTEXT_CHARS;
+	const contextTokenBudget = Math.floor(asFiniteNumber(params.contextTokenBudget) ?? 0);
+	if (contextTokenBudget <= 0) return DEFAULT_RENDERED_CONTEXT_CHARS;
 	return normalizeRenderedContextMaxChars(resolveProjectionPromptBudgetTokens({
 		contextTokenBudget,
 		reserveTokens: Math.max(DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS, Math.floor(contextTokenBudget * CONTINUITY_PROJECTION_RESERVE_RATIO))
@@ -296,12 +297,10 @@ function renderToolCallPayload(record) {
 	return payload;
 }
 function renderToolResultPayload(record) {
-	const payload = pickToolPayloadMetadata(record);
-	for (const [key, value] of Object.entries(record)) {
-		if (TOOL_PAYLOAD_METADATA_KEYS.has(key)) continue;
-		payload[key] = projectToolPayloadValue(value, "content", key);
-	}
-	return payload;
+	return {
+		...pickToolPayloadMetadata(record),
+		...Object.fromEntries(Object.entries(record).filter(([key]) => !TOOL_PAYLOAD_METADATA_KEYS.has(key)).map(([key, value]) => [key, projectToolPayloadValue(value, "content", key)]))
+	};
 }
 const TOOL_PAYLOAD_METADATA_KEYS = /* @__PURE__ */ new Set([
 	"type",
@@ -330,9 +329,7 @@ function projectToolPayloadValue(value, mode, key = "", seen = /* @__PURE__ */ n
 		if (seen.has(value)) return "[Circular]";
 		seen.add(value);
 		if (Array.isArray(value)) return value.map((entry) => projectToolPayloadValue(entry, mode, key, seen));
-		const out = {};
-		for (const [childKey, child] of Object.entries(value)) out[childKey] = projectToolPayloadValue(child, mode, childKey, seen);
-		return out;
+		return Object.fromEntries(Object.entries(value).map(([childKey, child]) => [childKey, projectToolPayloadValue(child, mode, childKey, seen)]));
 	}
 	return `[${typeof value}]`;
 }
@@ -384,4 +381,4 @@ function truncateOlderContext(text, maxChars, totalChars = text.length) {
 	};
 }
 //#endregion
-export { isCodexDurableCustomMessage as a, resolveCodexContextEngineProjectionMaxChars as c, fitCodexProjectedContextForTurnStart as i, resolveCodexContinuityProjectionMaxChars as l, CodexContextAttachmentError as n, neutralizeCodexExplicitMentionSigils as o, buildCodexContinuityCalibration as r, projectContextEngineAssemblyForCodex as s, CODEX_TURN_START_TEXT_INPUT_MAX_CHARS as t };
+export { isCodexDurableCustomMessage as a, resolveCodexContextEngineProjectionMaxChars as c, fitCodexProjectedContextForTurnStart as i, resolveCodexContinuityProjectionMaxChars as l, CodexContextAttachmentError as n, neutralizeCodexExplicitMentionSigils as o, buildCodexContinuityCalibration as r, projectContextEngineAssemblyForCodex as s, CODEX_TURN_START_TEXT_INPUT_MAX_CHARS as t, resolveProjectionPromptBudgetTokens as u };

package/dist/.setup/{conversation-binding-3Min8qvP.mjs → conversation-binding-CgSSD1Qz.mjs}

@@ -1,31 +1,34 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as assertCodexBindingMayBeReplaced, v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import { m as readCodexRequirementsToml } from "./config-security-CE-FcGw9.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
-import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-CzyWLTJt.mjs";
-import { l as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-DJIgqgMw.mjs";
-import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-C746z5Pn.mjs";
-import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-DRSifI-1.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
-import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-B0okYl2D.mjs";
-import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, G as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease } from "./shared-client-DqyTMYug.mjs";
-import { h as CodexThreadDirectInputError, l as isCodexAppServerOverloadError, s as isCodexAppServerIndeterminateRequestCancellationError, v as assertCodexThreadAcceptsDirectInput, x as assertCodexThreadStartResponse } from "./client-N0JpgSzF.mjs";
-import { c as isCodexAppServerUnsafeSubscriptionError, h as getCodexAppServerTurnRouter, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, s as interruptCodexTurnAndWaitBestEffort, u as retireUnsafeCodexTurnClientBestEffort, v as isCodexNotificationForTurn } from "./attempt-client-cleanup-DOP-cW5j.mjs";
-import { S as buildCodexProjectDocThreadConfig, St as mergeCodexThreadConfigs, g as CODEX_NATIVE_PERSONALITY_NONE, v as resolveCodexAppServerRequestModelSelection, vt as buildDisabledAppsConfigPatch } from "./thread-requests-B_bRnMGN.mjs";
-import "./thread-lifecycle-DPflntEJ.mjs";
-import "./session-binding-DGCYAfvD.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-CdDaoc7T.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-roNP0l1c.mjs";
-import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-Ci_fVX6y.mjs";
-import { u as trackCodexConversationActiveTurn } from "./conversation-control-CEP8X5JC.mjs";
+import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-BZB8RgcF.mjs";
+import { f as readCodexRequirementsToml } from "./config-security-KAPScztc.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
+import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-HG_Rr3W_.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CEd9QlIs.mjs";
+import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-DJ4ix-W5.mjs";
+import { o as isCodexAppServerOverloadError } from "./rpc-error-hmWM21RB.mjs";
+import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-B9a7HwUV.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-0Gxk3_eq.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
+import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, G as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease } from "./shared-client-DJJ3ljH2.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-CBzEVDyb.mjs";
+import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-CX1-EoCp.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-yLjGwbwT.mjs";
+import { C as buildCodexProjectDocThreadConfig, Ct as mergeCodexThreadConfigs, _ as CODEX_NATIVE_PERSONALITY_NONE, y as resolveCodexAppServerRequestModelSelection, yt as buildDisabledAppsConfigPatch } from "./thread-requests-COrRJcZb.mjs";
+import "./thread-lifecycle-DkcoX9q-.mjs";
+import "./session-binding-Ce7BqiPN.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-rx7J68Rx.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-0aRHD9iK.mjs";
+import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-BxIUJ0Zd.mjs";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Bg4FZw1f.mjs";
+import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-tCg763cI.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";
+import { embeddedAgentLog, formatErrorMessage, resolveActiveEmbeddedRunSessionId, resolveSandboxContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { fileURLToPath } from "node:url";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
-import { embeddedAgentLog, formatErrorMessage, resolveActiveEmbeddedRunSessionId, resolveSandboxContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { getSessionEntry, resolveStorePath, resolveTranscriptSessionKeyBySessionId } from "openclaw/plugin-sdk/session-store-runtime";
 import { readVisibleSessionTranscriptMessageEntries } from "openclaw/plugin-sdk/session-transcript-runtime";
@@ -160,9 +163,11 @@ async function resolveThreadBindingRuntime(params) {
 		clientOptions
 	};
 }
-function buildConversationThreadRequest(resolved, serviceTier, effectiveNativeConfig) {
+async function buildConversationThreadRequestForClient(client, resolved, serviceTier, requestOptions) {
+	const effectiveConfig = await readCodexEffectiveConfig(client, resolved.workspaceDir, requestOptions());
+	requestOptions();
 	const { runtime } = resolved;
-	const config = buildCodexProjectDocThreadConfig(mergeCodexThreadConfigs(runtime.networkProxy?.configPatch, buildDisabledAppsConfigPatch()), effectiveNativeConfig);
+	const config = buildCodexProjectDocThreadConfig(mergeCodexThreadConfigs(runtime.networkProxy?.configPatch, buildDisabledAppsConfigPatch()), effectiveConfig);
 	return {
 		cwd: resolved.workspaceDir,
 		...resolved.model ? { model: resolved.model } : {},
@@ -178,11 +183,6 @@ function buildConversationThreadRequest(resolved, serviceTier, effectiveNativeCo
 		...serviceTier ? { serviceTier } : {}
 	};
 }
-async function buildConversationThreadRequestForClient(client, resolved, serviceTier, requestOptions) {
-	const effectiveConfig = await readCodexEffectiveConfig(client, resolved.workspaceDir, requestOptions());
-	requestOptions();
-	return buildConversationThreadRequest(resolved, serviceTier, effectiveConfig);
-}
 async function writeThreadBindingFromResponse(params, resolved, client, response, requestOptions) {
 	let retained = false;
 	let sameOwner = false;
@@ -387,24 +387,11 @@ async function projectConversationSourceHistory(source, target, config) {
 		await clientLease.release();
 	}
 }
-function resolveThreadRequestModelProvider(params) {
-	const modelProvider = params.modelProvider?.trim();
-	if (!modelProvider || modelProvider.toLowerCase() === "codex") return;
-	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === "openai") return;
-	return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
-}
 function resolveModelBackedReviewerPolicyProvider(params) {
 	const modelProvider = params.modelProvider?.trim();
 	if (modelProvider && modelProvider.toLowerCase() !== "codex") return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
 	return isCodexAppServerNativeAuthProfile(params) ? "openai" : void 0;
 }
-function buildCodexConversationAgentLookup(params) {
-	const agentDir = params.agentDir?.trim();
-	return {
-		...agentDir ? { agentDir } : {},
-		...params.config ? { config: params.config } : {}
-	};
-}
 //#endregion
 //#region extensions/codex/src/conversation-turn-collector.ts
 /** Identifies a timer that expired in the bound-turn collector itself. */
@@ -425,6 +412,11 @@ function createCodexConversationTurnCollector(threadId) {
 	const collectReplyText = () => {
 		return [...assistantTextByItem.values()].map((text) => text.trim()).filter(Boolean).at(-1) ?? "";
 	};
+	const completeItem = (item, itemId) => {
+		assistantTextByItem.delete(itemId);
+		const text = readAssistantReplyText(item);
+		if (text?.trim()) assistantTextByItem.set(itemId, text);
+	};
 	const clearWaitState = () => {
 		if (timeout) {
 			clearTimeout(timeout);
@@ -454,9 +446,7 @@ function createCodexConversationTurnCollector(threadId) {
 			const item = isJsonObject(params.item) ? params.item : void 0;
 			if (item?.type === "agentMessage") {
 				const itemId = normalizeOptionalString(item.id) ?? normalizeOptionalString(params.itemId) ?? "assistant";
-				assistantTextByItem.delete(itemId);
-				const text = readAssistantReplyText(item);
-				if (text?.trim()) assistantTextByItem.set(itemId, text);
+				completeItem(item, itemId);
 			}
 			return;
 		}
@@ -471,9 +461,7 @@ function createCodexConversationTurnCollector(threadId) {
 				for (const item of items) {
 					if (!isJsonObject(item) || item.type !== "agentMessage") continue;
 					const itemId = normalizeOptionalString(item.id) ?? `assistant-${assistantTextByItem.size + 1}`;
-					assistantTextByItem.delete(itemId);
-					const text = readAssistantReplyText(item);
-					if (text?.trim()) assistantTextByItem.set(itemId, text);
+					completeItem(item, itemId);
 				}
 			}
 			finish();
@@ -860,7 +848,7 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 	}
 }
 function isCodexThreadNotFoundError(error) {
-	if (isCodexAppServerOverloadError(error) || isCodexAppServerUnsafeSubscriptionError(error)) return false;
+	if (isCodexAppServerOverloadError(error) || error instanceof CodexAppServerUnsafeSubscriptionError) return false;
 	const message = formatErrorMessage(error);
 	return /\bthread not found:/iu.test(message) || /\bbound Codex conversation has no thread binding\b/u.test(message);
 }

package/dist/.setup/{conversation-binding-data-C746z5Pn.mjs → conversation-binding-data-DJ4ix-W5.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import process from "node:process";

package/dist/.setup/{conversation-control-CEP8X5JC.mjs → conversation-control-tCg763cI.mjs}

@@ -1,11 +1,11 @@
-import { n as isCodexFastServiceTier } from "./config-utils-D0CXecki.mjs";
-import { r as bindingStoreKey } from "./session-binding-record-Oe9L-CNY.mjs";
-import { o as formatCodexDisplayText } from "./command-formatters-R3ckE3Co.mjs";
-import "./config-DKhXquav.mjs";
-import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-B0okYl2D.mjs";
-import { b as resolveCodexBindingModelProviderFallback, v as resolveCodexAppServerRequestModelSelection } from "./thread-requests-B_bRnMGN.mjs";
-import "./thread-lifecycle-DPflntEJ.mjs";
-import "./session-binding-DGCYAfvD.mjs";
+import { r as bindingStoreKey } from "./session-binding-record-BZB8RgcF.mjs";
+import { m as isCodexFastServiceTier } from "./config-parsing-BQq-CHTF.mjs";
+import { o as formatCodexDisplayText } from "./command-formatters-DV3DHhdr.mjs";
+import "./config-0Gxk3_eq.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
+import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-requests-COrRJcZb.mjs";
+import "./thread-lifecycle-DkcoX9q-.mjs";
+import "./session-binding-Ce7BqiPN.mjs";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";
@@ -85,16 +85,18 @@ async function setCodexConversationModel(input) {
 	const params = { ...input };
 	const model = params.model.trim();
 	if (!model) return "Usage: /codex model <model>";
-	const lookup = buildBindingLookup(params);
+	const lookup = buildCodexConversationAgentLookup(params);
 	params.assertCurrent();
 	const assertCommitAllowed = params.assertCommitAllowed ?? params.assertCurrent;
 	const binding = requirePreparedThreadBinding(params.binding);
 	if (binding.connectionScope === "supervision") throw new ModelSelectionLockedError();
-	const modelProvider = resolveConversationControlModelProvider({
+	const modelProvider = resolveThreadRequestModelProvider({
 		authProfileId: binding.authProfileId,
-		bindingModel: binding.model,
-		bindingModelProvider: binding.modelProvider,
-		currentModel: model,
+		modelProvider: resolveCodexBindingModelProviderFallback({
+			bindingModel: binding.model,
+			bindingModelProvider: binding.modelProvider,
+			currentModel: model
+		}),
 		...lookup
 	});
 	const modelSelection = resolveCodexAppServerRequestModelSelection({
@@ -216,22 +218,18 @@ async function patchThreadBinding(bindingStore, identity, threadId, patch, asser
 		patch
 	}, assertCurrent)) throw new Error("Codex thread binding changed while applying the control update.");
 }
-function buildBindingLookup(params) {
+function buildCodexConversationAgentLookup(params) {
 	const agentDir = params.agentDir?.trim();
 	return {
 		...agentDir ? { agentDir } : {},
 		...params.config ? { config: params.config } : {}
 	};
 }
-function resolveConversationControlModelProvider(params) {
-	const modelProvider = resolveCodexBindingModelProviderFallback({
-		currentModel: params.currentModel,
-		bindingModel: params.bindingModel,
-		bindingModelProvider: params.bindingModelProvider
-	})?.trim();
+function resolveThreadRequestModelProvider(params) {
+	const modelProvider = params.modelProvider?.trim();
 	if (!modelProvider || modelProvider.toLowerCase() === "codex") return;
 	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === "openai") return;
 	return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
 }
 //#endregion
-export { setCodexConversationFastMode as a, steerCodexConversationTurn as c, readCodexConversationActiveTurn as i, stopCodexConversationTurn as l, parseCodexFastModeArg as n, setCodexConversationModel as o, parseCodexPermissionsModeArg as r, setCodexConversationPermissions as s, formatPermissionsMode as t, trackCodexConversationActiveTurn as u };
+export { readCodexConversationActiveTurn as a, setCodexConversationModel as c, stopCodexConversationTurn as d, trackCodexConversationActiveTurn as f, parseCodexPermissionsModeArg as i, setCodexConversationPermissions as l, formatPermissionsMode as n, resolveThreadRequestModelProvider as o, parseCodexFastModeArg as r, setCodexConversationFastMode as s, buildCodexConversationAgentLookup as t, steerCodexConversationTurn as u };

package/dist/.setup/{cyber-failover-XV0nNRZu.mjs → cyber-failover-Bb1J6hS1.mjs}

@@ -1,4 +1,4 @@
-import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
 import { t as attemptTerminal } from "./attempt-terminal-gZrxQ35N.mjs";
 //#region extensions/codex/src/app-server/cyber-failover.ts
 /**

package/dist/.setup/{cyber-failover-notice-RNpGpTyP.mjs → cyber-failover-notice-XR03ef31.mjs}

@@ -1,4 +1,4 @@
-import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-C-6O3Exn.mjs";
+import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-BuZgVbDA.mjs";
 //#region extensions/codex/src/app-server/cyber-failover-notice.ts
 async function emitCodexCyberNotice(params, notice) {
 	await emitCodexAppServerEvent(params, {

package/dist/.setup/doctor-start-options-DPW9JxIE.mjs

@@ -0,0 +1,63 @@
+import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
+import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-HG_Rr3W_.mjs";
+import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-C1VFoVPf.mjs";
+import "./config-0Gxk3_eq.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
+import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";
+import { resolveDefaultModelForAgent } from "openclaw/plugin-sdk/agent-runtime";
+import { resolveEffectiveAgentRuntime } from "openclaw/plugin-sdk/command-auth-native";
+//#region extensions/codex/src/doctor-start-options.ts
+/** Selects the same local agent or passive-catalog command for both Doctor probes. */
+async function resolveCodexDoctorStartOptions(params) {
+	const pluginConfig = params.cfg.plugins?.entries?.codex?.config;
+	const start = resolveCodexAppServerRuntimeOptions({
+		pluginConfig,
+		env: params.env
+	}).start;
+	if (start.transport !== "stdio") return {
+		status: "skipped",
+		reason: "Codex uses a remote app-server transport."
+	};
+	if (params.managedOnly && start.commandSource !== "managed") return {
+		status: "skipped",
+		reason: "Codex uses a custom app-server command."
+	};
+	const resolveAgentStartOptions = params.deps?.resolveAgentStartOptions ?? resolveCodexAppServerStartOptionsForAgent;
+	const resolveStartOptions = params.deps?.resolveStartOptions ?? resolveManagedCodexAppServerStartOptions;
+	const isDesktopCommand = params.deps?.isDesktopCommand ?? isManagedCodexDesktopCommand;
+	const candidates = [];
+	for (const agentId of listAgentIds(params.cfg)) {
+		const model = resolveDefaultModelForAgent({
+			cfg: params.cfg,
+			agentId
+		});
+		if (resolveEffectiveAgentRuntime({
+			cfg: params.cfg,
+			provider: model.provider,
+			modelId: model.model,
+			agentId
+		}) !== "codex") continue;
+		candidates.push(resolveAgentStartOptions({
+			startOptions: start,
+			agentDir: resolveAgentDir(params.cfg, agentId, params.env),
+			env: params.env
+		}));
+	}
+	if (params.cfg.plugins?.entries?.codex?.enabled === true && readCodexPluginConfig(pluginConfig).sessionCatalog?.enabled !== false) candidates.push({
+		...start,
+		managedCommandOrder: "package-only"
+	});
+	for (const candidate of candidates) {
+		const resolved = await resolveStartOptions(candidate, { pluginRoot: params.pluginRoot });
+		if (!isDesktopCommand(resolved.command)) return {
+			status: "selected",
+			start: resolved
+		};
+	}
+	return {
+		status: "skipped",
+		reason: candidates.length ? "Only desktop-owned Codex commands are configured." : "No local Codex runtime is configured."
+	};
+}
+//#endregion
+export { resolveCodexDoctorStartOptions as t };