@openclaw/codex 2026.9.8 → 2026.9.33

package/dist/.setup/{account-usage-runtime-G348lY1q.mjs → account-usage-runtime-dYM1lh1V.mjs}

@@ -1,6 +1,6 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-B7-X2TgG.mjs";
-import { n as readCodexAppServerUsage } from "./request-BZOfsSXW.mjs";
+import { n as readCodexAppServerUsage } from "./request-DQh7X3fU.mjs";
 import "./config-DKhXquav.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
 import { a as resolveCodexAppServerAuthProfileStore } from "./auth-profile-B0okYl2D.mjs";

package/dist/.setup/{apply-Cqb-YoCS.mjs → apply-C82xe8Bk.mjs}

@@ -1,14 +1,14 @@
 import { n as isOpenAiCuratedMarketplace, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-Cky2XJUw.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
-import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Dnps4W4_.mjs";
+import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-CWpIEtTm.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BL9B5H0L.mjs";
-import { i as requestCodexAppServerJson } from "./request-BZOfsSXW.mjs";
+import { i as requestCodexAppServerJson } from "./request-DQh7X3fU.mjs";
 import "./config-DKhXquav.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
 import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-B0okYl2D.mjs";
-import { c as getLeasedSharedCodexAppServerClient, et as resolveCodexAppServerAuthAccountCacheKey, h as releaseLeasedSharedCodexAppServerClient, o as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-CJCTeFpQ.mjs";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, o as clearSharedCodexAppServerClientIfCurrentAndWait, tt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-zsK3DTPh.mjs";
 import { t as ensureCodexPluginActivation } from "./plugin-activation-cNHRfaxU.mjs";
-import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-DPdMk1Oy.mjs";
+import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-NTSBQtKx.mjs";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";

package/dist/.setup/{attempt-client-cleanup-B-S7ngS_.mjs → attempt-client-cleanup-D1aznv7C.mjs}

@@ -1,9 +1,9 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { d as retireSharedCodexAppServerClientIfCurrent } from "./shared-client-lifecycle-7xgtlo15.mjs";
+import { d as retireSharedCodexAppServerClientIfCurrent } from "./shared-client-lifecycle-4LdC3gM4.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
 import { n as waitForPromiseOrAbort, t as abortReason } from "./timeout-CXOfNoaX.mjs";
-import { J as unsubscribeCodexAppServerLiveThread, ft as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-CJCTeFpQ.mjs";
-import { E as readCodexTurnCompletedNotification, a as isCodexAppServerBrokenPipeError, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError } from "./client-qyUBJlGZ.mjs";
+import { Y as unsubscribeCodexAppServerLiveThread, pt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-zsK3DTPh.mjs";
+import { E as readCodexTurnCompletedNotification, a as isCodexAppServerBrokenPipeError, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError } from "./client-6GbdZFc0.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { AsyncResource } from "node:async_hooks";

package/dist/.setup/{attempt-workspace-context-BJ5Z_olH.mjs → attempt-workspace-context-DKAbD-vI.mjs}

@@ -1,5 +1,5 @@
 import { r as flattenCodexDynamicToolFunctions } from "./protocol-CANUwXJ3.mjs";
-import { lt as isMessageOnlyCodexSourceReply } from "./thread-requests-OWGOiDaV.mjs";
+import { lt as isMessageOnlyCodexSourceReply } from "./thread-requests-15uBuGjw.mjs";
 import path from "node:path";
 import { buildAgentWorkspaceInstructionSnapshot, buildBootstrapContextForFiles, embeddedAgentLog, prepareAgentWorkspaceContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveAgentWorkspaceMemoryRouting, shouldIncludeAgentHarnessRuntimeContext } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";

package/dist/.setup/{auth-cache-key-Dnps4W4_.mjs → auth-cache-key-CWpIEtTm.mjs}

@@ -1,6 +1,6 @@
-import { n as defineCodexBuildState } from "./build-state-DIQ5O_-S.mjs";
-import { u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-kiWRhNRE.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Bdegpn2V.mjs";
+import { n as defineCodexBuildState } from "./build-state-E-CRUdgh.mjs";
+import { u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-B6hQ1UKR.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-CbutOIEh.mjs";
 import { createHash } from "node:crypto";
 import fs, { constants, existsSync, watch } from "node:fs";
 import path from "node:path";

package/dist/.setup/{bounded-turn-BNunZPtz.mjs → bounded-turn-Ca4urQ25.mjs}

@@ -3,14 +3,14 @@ import { a as resolveCodexPrivateLauncher, i as readCodexAppServerConfigOptions
 import { d as readCodexEffectiveConfig } from "./config-options-CzyWLTJt.mjs";
 import "./config-DKhXquav.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
-import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-CJCTeFpQ.mjs";
-import { S as assertCodexTurnStartResponse, T as readCodexErrorNotification, k as createCodexElicitationResponse, x as assertCodexThreadStartResponse } from "./client-qyUBJlGZ.mjs";
-import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-B-S7ngS_.mjs";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-DiCS1ijR.mjs";
-import { i as readModelListResult } from "./models-DfLmPV0k.mjs";
-import { R as attestCodexRestrictedToolSurfaceMcpServersDisabled, St as mergeCodexThreadConfigs, l as readCodexInheritedMcpServerNames, n as buildCodexRingZeroThreadConfigPatch, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy } from "./thread-requests-OWGOiDaV.mjs";
-import { S as resolveCodexAppServerReasoningEffort } from "./thread-lifecycle-_bAbjedG.mjs";
-import { a as resolveCodexPromptError } from "./usage-limit-error-wSMQkbpV.mjs";
+import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-zsK3DTPh.mjs";
+import { S as assertCodexTurnStartResponse, T as readCodexErrorNotification, k as createCodexElicitationResponse, x as assertCodexThreadStartResponse } from "./client-6GbdZFc0.mjs";
+import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-D1aznv7C.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-Cyu_xJDs.mjs";
+import { i as readModelListResult } from "./models-Bs4aEhpG.mjs";
+import { R as attestCodexRestrictedToolSurfaceMcpServersDisabled, St as mergeCodexThreadConfigs, l as readCodexInheritedMcpServerNames, n as buildCodexRingZeroThreadConfigPatch, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy } from "./thread-requests-15uBuGjw.mjs";
+import { S as resolveCodexAppServerReasoningEffort } from "./thread-lifecycle-D03WesNn.mjs";
+import { a as resolveCodexPromptError } from "./usage-limit-error-BEyQJjD_.mjs";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import path from "node:path";
@@ -144,7 +144,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		assertCurrent: params.assertCurrent,
 		...params.signal ? { abandonSignal: params.signal } : {}
 	};
-	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-CJCTeFpQ.mjs").then((n) => n.v).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-zsK3DTPh.mjs").then((n) => n.v).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		...clientOptions,
 		authProfileStore: params.authProfileStore
 	}));

package/dist/.setup/{build-state-DIQ5O_-S.mjs → build-state-E-CRUdgh.mjs}

@@ -1,5 +1,5 @@
 //#region extensions/codex/package.json
-var version = "2026.9.8";
+var version = "2026.9.33";
 //#endregion
 //#region extensions/codex/src/build-state.ts
 /**

package/dist/.setup/{client-qyUBJlGZ.mjs → client-6GbdZFc0.mjs}

@@ -1,9 +1,9 @@
-import { a as stringifyCodexAppServerMessage, c as isRpcResponse, i as readCodexCatalogDecodeRoute, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as listenCodexAppServerLines, s as redactCodexAppServerLinePreview } from "./client-catalog-response-DRvx_wCC.mjs";
+import { a as stringifyCodexAppServerMessage, c as isRpcResponse, i as readCodexCatalogDecodeRoute, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as listenCodexAppServerLines, s as redactCodexAppServerLinePreview } from "./client-catalog-response-HvvnCxvX.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { c as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, s as CODEX_APP_SERVER_VERSION } from "./managed-binary-kiWRhNRE.mjs";
-import { a as closeCodexAppServerTransportAndWait, i as closeCodexAppServerTransport, o as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-Bdegpn2V.mjs";
+import { c as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, s as CODEX_APP_SERVER_VERSION } from "./managed-binary-B6hQ1UKR.mjs";
+import { a as closeCodexAppServerTransportAndWait, i as closeCodexAppServerTransport, o as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-CbutOIEh.mjs";
 import { n as CodexAppServerRpcError, t as CODEX_APP_SERVER_OVERLOADED_ERROR_CODE } from "./rpc-error-BlD2vuzn.mjs";
-import { f as recordCodexCatalogResponseSource, i as reuseCodexCatalogPreview, o as closeCodexCatalogClientSource, s as codexCatalogSourceForClient } from "./session-catalog-native-projection-CuaFZuQE.mjs";
+import { f as recordCodexCatalogResponseSource, i as reuseCodexCatalogPreview, o as closeCodexCatalogClientSource, s as codexCatalogSourceForClient } from "./session-catalog-native-projection-LshItrMe.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
 import { codexCatalogPageWorkerEntrypoint } from "../catalog-page-worker-entrypoint.js";
 import { t as createWebSocketTransport } from "./transport-websocket-BTBE-LD9.mjs";
@@ -861,6 +861,15 @@ var definitions = {
 			"type": "object"
 		}
 	] },
+	"AccountRoutingOverride": {
+		"description": "Backend routing policy. Wire values match the accounts/check contract.",
+		"enum": [
+			"NO_CONSTRAINT",
+			"us",
+			"us_cr"
+		],
+		"type": "string"
+	},
 	"ActivePermissionProfile": {
 		"properties": {
 			"extends": {
@@ -1032,9 +1041,11 @@ var definitions = {
 					"sessionBudgetExceeded",
 					"usageLimitExceeded",
 					"rateLimitExceeded",
+					"flexUnavailable",
 					"serverOverloaded",
 					"cyberPolicy",
 					"misalignmentPolicyViolation",
+					"tooManyDenials",
 					"internalServerError",
 					"unauthorized",
 					"badRequest",
@@ -1089,6 +1100,15 @@ var definitions = {
 		],
 		"type": "string"
 	},
+	"CollaborationMode": {
+		"description": "Collaboration mode for a Codex session.",
+		"properties": {
+			"mode": { "$ref": "#/definitions/ModeKind" },
+			"settings": { "$ref": "#/definitions/Settings" }
+		},
+		"required": ["mode", "settings"],
+		"type": "object"
+	},
 	"CommandAction": { "oneOf": [
 		{
 			"properties": {
@@ -1171,6 +1191,15 @@ var definitions = {
 		],
 		"type": "string"
 	},
+	"CyberAccessProgram": {
+		"description": "Requested cyber treatment for a ChatGPT-authenticated Codex turn. Authorization and model-tier restrictions remain server-owned.",
+		"enum": [
+			"standard",
+			"daybreakBlue",
+			"daybreakRed"
+		],
+		"type": "string"
+	},
 	"DynamicToolCallOutputContentItem": { "oneOf": [
 		{
 			"properties": {
@@ -1254,16 +1283,26 @@ var definitions = {
 				"type": "object"
 			},
 			{
+				"anyOf": [{
+					"properties": { "image_url": { "type": "string" } },
+					"required": ["image_url"],
+					"title": "ImageUrlFunctionCallOutputContentItem",
+					"type": "object"
+				}, {
+					"properties": { "file_id": { "type": "string" } },
+					"required": ["file_id"],
+					"title": "FileIdFunctionCallOutputContentItem",
+					"type": "object"
+				}],
 				"properties": {
 					"detail": { "anyOf": [{ "$ref": "#/definitions/ImageDetail" }, { "type": "null" }] },
-					"image_url": { "type": "string" },
 					"type": {
 						"enum": ["input_image"],
 						"title": "InputImageFunctionCallOutputContentItemType",
 						"type": "string"
 					}
 				},
-				"required": ["image_url", "type"],
+				"required": ["type"],
 				"title": "InputImageFunctionCallOutputContentItem",
 				"type": "object"
 			},
@@ -1358,6 +1397,19 @@ var definitions = {
 		]
 	},
 	"LegacyAppPathString": { "type": "string" },
+	"McpAppDisplayMode": {
+		"enum": ["inline", "fullscreen"],
+		"type": "string"
+	},
+	"McpAppUi": {
+		"description": "UI resource and display preference for model invocations, captured from the tool descriptor.",
+		"properties": {
+			"preferredModelDisplayMode": { "$ref": "#/definitions/McpAppDisplayMode" },
+			"resourceUri": { "type": "string" }
+		},
+		"required": ["preferredModelDisplayMode", "resourceUri"],
+		"type": "object"
+	},
 	"McpToolCallAppContext": {
 		"properties": {
 			"actionName": { "type": ["string", "null"] },
@@ -1465,6 +1517,11 @@ var definitions = {
 		"required": ["message"],
 		"type": "object"
 	},
+	"ModeKind": {
+		"description": "Initial collaboration mode to use when the TUI starts.",
+		"enum": ["plan", "default"],
+		"type": "string"
+	},
 	"Model": {
 		"properties": {
 			"additionalSpeedTiers": {
@@ -1474,6 +1531,11 @@ var definitions = {
 				"type": "array"
 			},
 			"availabilityNux": { "anyOf": [{ "$ref": "#/definitions/ModelAvailabilityNux" }, { "type": "null" }] },
+			"availableAccessPrograms": {
+				"anyOf": [{ "$ref": "#/definitions/ModelAccessPrograms" }, { "type": "null" }],
+				"default": null,
+				"description": "Null when the catalog does not provide access-program metadata."
+			},
 			"defaultReasoningEffort": { "$ref": "#/definitions/ReasoningEffort" },
 			"defaultServiceTier": {
 				"default": null,
@@ -1510,6 +1572,7 @@ var definitions = {
 			},
 			"supportsPersonality": {
 				"default": false,
+				"description": "@deprecated Always false; models no longer support personality selection.",
 				"type": "boolean"
 			},
 			"upgrade": { "type": ["string", "null"] },
@@ -1527,6 +1590,16 @@ var definitions = {
 		],
 		"type": "object"
 	},
+	"ModelAccessPrograms": {
+		"description": "Caller-specific explicit access programs advertised by model discovery.",
+		"properties": { "cyber": {
+			"description": "Accepted explicit selections.",
+			"items": { "$ref": "#/definitions/CyberAccessProgram" },
+			"type": "array"
+		} },
+		"required": ["cyber"],
+		"type": "object"
+	},
 	"ModelAvailabilityNux": {
 		"properties": { "message": { "type": "string" } },
 		"required": ["message"],
@@ -1641,6 +1714,7 @@ var definitions = {
 			"plus",
 			"pro",
 			"prolite",
+			"promax",
 			"team",
 			"self_serve_business_prolite",
 			"self_serve_business_usage_based",
@@ -1768,6 +1842,16 @@ var definitions = {
 			"type": "string"
 		}
 	] },
+	"Settings": {
+		"description": "Settings for a collaboration mode.",
+		"properties": {
+			"developer_instructions": { "type": ["string", "null"] },
+			"model": { "type": "string" },
+			"reasoning_effort": { "anyOf": [{ "$ref": "#/definitions/ReasoningEffort" }, { "type": "null" }] }
+		},
+		"required": ["model"],
+		"type": "object"
+	},
 	"SubAgentActivityKind": {
 		"enum": [
 			"started",
@@ -1864,6 +1948,16 @@ var definitions = {
 				"allOf": [{ "$ref": "#/definitions/AbsolutePathBuf" }],
 				"description": "Working directory captured for the thread."
 			},
+			"daybreakEnabled": {
+				"description": "Saved Daybreak choice, independent of turn execution. Null if unset.",
+				"type": ["boolean", "null"]
+			},
+			"environments": {
+				"default": null,
+				"description": "Current environments for a loaded thread, in priority order, primary first. `null` means the thread is not loaded or the server does not expose its selection. An empty list means no environments are selected. This does not report connection status.",
+				"items": { "$ref": "#/definitions/ThreadEnvironment" },
+				"type": ["array", "null"]
+			},
 			"ephemeral": {
 				"description": "Whether the thread is ephemeral and should not be materialized on disk.",
 				"type": "boolean"
@@ -1901,6 +1995,10 @@ var definitions = {
 				"description": "Optional user-facing thread title.",
 				"type": ["string", "null"]
 			},
+			"originator": {
+				"description": "Originator recorded when the thread was created, independent of its current client or executor. Null when the recorded originator is unavailable.",
+				"type": ["string", "null"]
+			},
 			"parentThreadId": {
 				"description": "The ID of the parent thread. This will only be set if this thread is a subagent.",
 				"type": ["string", "null"]
@@ -1954,7 +2052,7 @@ var definitions = {
 				"description": "Optional analytics source classification for this thread."
 			},
 			"turns": {
-				"description": "Only populated on `thread/resume`, `thread/rollback`, `thread/fork`, and `thread/read` (when `includeTurns` is true) responses. For all other responses and notifications returning a Thread, the turns field will be an empty list.",
+				"description": "Only populated on `thread/resume`, `thread/fork`, and `thread/read` (when `includeTurns` is true) responses. For all other responses and notifications returning a Thread, the turns field will be an empty list.",
 				"items": { "$ref": "#/definitions/Turn" },
 				"type": "array"
 			},
@@ -1985,6 +2083,23 @@ var definitions = {
 		"enum": ["waitingOnApproval", "waitingOnUserInput"],
 		"type": "string"
 	},
+	"ThreadEnvironment": {
+		"description": "An environment selected by a loaded thread, independent of connection status.",
+		"properties": {
+			"cwd": { "$ref": "#/definitions/LegacyAppPathString" },
+			"environmentId": { "type": "string" },
+			"runtimeWorkspaceRoots": {
+				"items": { "$ref": "#/definitions/LegacyAppPathString" },
+				"type": "array"
+			}
+		},
+		"required": [
+			"cwd",
+			"environmentId",
+			"runtimeWorkspaceRoots"
+		],
+		"type": "object"
+	},
 	"ThreadExtra": {
 		"description": "Extra app-server data for a thread.",
 		"type": "object"
@@ -2237,9 +2352,13 @@ var definitions = {
 				"error": { "anyOf": [{ "$ref": "#/definitions/McpToolCallError" }, { "type": "null" }] },
 				"id": { "type": "string" },
 				"mcpAppResourceUri": {
-					"description": "Deprecated: use `appContext.resourceUri` instead.",
+					"description": "Legacy compatibility field; prefer `mcpAppUi.resourceUri` when available.",
 					"type": ["string", "null"]
 				},
+				"mcpAppUi": {
+					"anyOf": [{ "$ref": "#/definitions/McpAppUi" }, { "type": "null" }],
+					"description": "Presentation captured from the invoked descriptor; absent in older history."
+				},
 				"pluginId": { "type": ["string", "null"] },
 				"readOnlyHint": { "type": ["boolean", "null"] },
 				"result": { "anyOf": [{ "$ref": "#/definitions/McpToolCallResult" }, { "type": "null" }] },
@@ -2613,7 +2732,7 @@ var definitions = {
 			},
 			"error": {
 				"anyOf": [{ "$ref": "#/definitions/TurnError" }, { "type": "null" }],
-				"description": "Only populated when the Turn's status is failed."
+				"description": "Error associated with a failed or interrupted turn."
 			},
 			"id": {
 				"description": "Identifier for this turn. Codex-generated turn IDs are UUIDv7.",
@@ -2719,6 +2838,17 @@ var definitions = {
 			"type": "object"
 		},
 		{
+			"anyOf": [{
+				"properties": { "url": { "type": "string" } },
+				"required": ["url"],
+				"title": "UrlUserInput",
+				"type": "object"
+			}, {
+				"properties": { "fileId": { "type": "string" } },
+				"required": ["fileId"],
+				"title": "FileIdUserInput",
+				"type": "object"
+			}],
 			"properties": {
 				"detail": {
 					"anyOf": [{ "$ref": "#/definitions/ImageDetail" }, { "type": "null" }],
@@ -2728,10 +2858,9 @@ var definitions = {
 					"enum": ["image"],
 					"title": "ImageUserInputType",
 					"type": "string"
-				},
-				"url": { "type": "string" }
+				}
 			},
-			"required": ["type", "url"],
+			"required": ["type"],
 			"title": "ImageUserInput",
 			"type": "object"
 		},
@@ -2870,7 +2999,20 @@ var definitions = {
 			"title": "OtherWebSearchAction",
 			"type": "object"
 		}
-	] }
+	] },
+	"WorkspaceRouting": {
+		"properties": {
+			"accountRoutingOverride": { "$ref": "#/definitions/AccountRoutingOverride" },
+			"backendOrigin": { "type": "string" },
+			"chatgptAccountId": { "type": "string" }
+		},
+		"required": [
+			"accountRoutingOverride",
+			"backendOrigin",
+			"chatgptAccountId"
+		],
+		"type": "object"
+	}
 };
 //#endregion
 //#region extensions/codex/src/app-server/protocol-generated/json/v2/ErrorNotification.json
@@ -2924,7 +3066,17 @@ var ThreadResumeResponse_default = {
 			"allOf": [{ "$ref": "./CodexAppServerProtocolDefinitions.json#/definitions/ApprovalsReviewer" }],
 			"description": "Reviewer currently used for approval requests on this thread."
 		},
+		"collaborationMode": {
+			"anyOf": [{ "$ref": "./CodexAppServerProtocolDefinitions.json#/definitions/CollaborationMode" }, { "type": "null" }],
+			"description": "Effective collaboration mode. Absent when resuming from an older server."
+		},
 		"cwd": { "$ref": "./CodexAppServerProtocolDefinitions.json#/definitions/AbsolutePathBuf" },
+		"disabledPluginIds": {
+			"default": [],
+			"description": "Saved list of disabled plugin IDs. Does not yet filter plugin capabilities.",
+			"items": { "type": "string" },
+			"type": "array"
+		},
 		"initialTurnsPage": {
 			"anyOf": [{ "$ref": "./CodexAppServerProtocolDefinitions.json#/definitions/TurnsPage" }, { "type": "null" }],
 			"default": null,
@@ -2995,6 +3147,12 @@ var ThreadStartResponse_default = {
 			"description": "Reviewer currently used for approval requests on this thread."
 		},
 		"cwd": { "$ref": "./CodexAppServerProtocolDefinitions.json#/definitions/AbsolutePathBuf" },
+		"disabledPluginIds": {
+			"default": [],
+			"description": "Saved list of disabled plugin IDs. Does not yet filter plugin capabilities.",
+			"items": { "type": "string" },
+			"type": "array"
+		},
 		"instructionSources": {
 			"default": [],
 			"description": "Environment-native paths to instruction source files currently loaded for this thread.",
@@ -3913,7 +4071,7 @@ function assertSupportedCodexAppServerVersion(response) {
 	if (!detectedVersion) throw new CodexAppServerVersionError(detectedVersion);
 	const detected = parse(detectedVersion);
 	if (!detected || detected.compare("0.149.0") < 0) throw new CodexAppServerVersionError(detectedVersion);
-	if (detected.compare("0.158.0") > 0) embeddedAgentLog.warn("codex app-server is newer than OpenClaw's managed runtime; continuing with normal startup validation", {
+	if (detected.compare("0.160.0") > 0) embeddedAgentLog.warn("codex app-server is newer than OpenClaw's managed runtime; continuing with normal startup validation", {
 		detectedVersion,
 		validatedVersion: CODEX_APP_SERVER_VERSION
 	});

package/dist/.setup/{client-catalog-response-DRvx_wCC.mjs → client-catalog-response-HvvnCxvX.mjs}

@@ -1,5 +1,5 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-CuaFZuQE.mjs";
+import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-LshItrMe.mjs";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";

package/dist/.setup/{command-dispatch-Btrs1D6f.mjs → command-dispatch-_PPJobF7.mjs}

@@ -9,7 +9,7 @@ async function handleCodexCommand(ctx, options) {
 	};
 	const { resolvePluginConfig, ...subcommandOptions } = options;
 	try {
-		const { handleCodexSubcommand } = await import("./command-handlers-DvlCHJch.mjs");
+		const { handleCodexSubcommand } = await import("./command-handlers-Do_MOc5V.mjs");
 		return await handleCodexSubcommand(commandContext, {
 			...subcommandOptions,
 			pluginConfig: resolvePluginConfig?.() ?? subcommandOptions.pluginConfig

package/dist/.setup/{command-handlers-DvlCHJch.mjs → command-handlers-Do_MOc5V.mjs}

@@ -2,7 +2,7 @@ import { n as isCodexFastServiceTier } from "./config-utils-D0CXecki.mjs";
 import { o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as findCodexMarketplacePluginSummary, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-Cky2XJUw.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Dnps4W4_.mjs";
+import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-CWpIEtTm.mjs";
 import { n as withCodexConversationThreadActivity } from "./thread-ownership-queue-Dp24d7-F.mjs";
 import { a as CODEX_HOST_INSPECTION_AUTH_ERROR, c as canMutateCodexHost, i as CODEX_FULL_PERMISSIONS_AUTH_ERROR, l as hasCodexAdminScope, n as filterCodexMarketplacePlugins, o as CODEX_NATIVE_EXECUTION_AUTH_ERROR, r as parseCodexPluginMarketplaceId, s as assertCodexHostOwnerCurrent, t as discoverCodexMarketplacePlugins } from "./plugin-marketplace-discovery-D_dV9FXa.mjs";
 import { l as formatRelativeDuration, s as summarizeCodexAccountUsage } from "./rate-limits-B7-X2TgG.mjs";
@@ -14,23 +14,23 @@ import { t as CODEX_CONTROL_METHODS } from "./capabilities-B3WEZl4e.mjs";
 import { o as formatCodexCliSessions } from "./node-cli-sessions-HC4W6FLI.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BL9B5H0L.mjs";
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DTtN1KrX.mjs";
-import { o as withCodexAppServerJsonClient } from "./request-BZOfsSXW.mjs";
+import { o as withCodexAppServerJsonClient } from "./request-DQh7X3fU.mjs";
 import "./config-DKhXquav.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-B0okYl2D.mjs";
-import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, et as resolveCodexAppServerAuthAccountCacheKey, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CJCTeFpQ.mjs";
-import { b as assertCodexThreadResumeResponse, s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-qyUBJlGZ.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-B-S7ngS_.mjs";
+import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, tt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-zsK3DTPh.mjs";
+import { b as assertCodexThreadResumeResponse, s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-6GbdZFc0.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-D1aznv7C.mjs";
 import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-BLWz7stm.mjs";
-import { n as listAllCodexAppServerModels } from "./models-DfLmPV0k.mjs";
+import { n as listAllCodexAppServerModels } from "./models-Bs4aEhpG.mjs";
 import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-cNHRfaxU.mjs";
 import { n as createCodexSessionGenerationSupersededError, o as resolveCodexSessionBinding } from "./session-binding-DGCYAfvD.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-gNPzzpVp.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B6pPt21M.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-g1TKKqWj.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B0xUCXOU.mjs";
 import { n as resolveCodexNativeSandboxBlock, t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DjCz2eOw.mjs";
-import { i as readCodexComputerUseStatus, r as installCodexComputerUse, t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-BRwtRct9.mjs";
-import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-skzRq4wD.mjs";
-import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-OrN6zuaY.mjs";
+import { i as readCodexComputerUseStatus, r as installCodexComputerUse, t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-Z06WuND0.mjs";
+import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-Bc_OIgK0.mjs";
+import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-DoxkQ9nq.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{command-rpc-skzRq4wD.mjs → command-rpc-Bc_OIgK0.mjs}

@@ -1,17 +1,17 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
 import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-B3WEZl4e.mjs";
-import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-BZOfsSXW.mjs";
+import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-DQh7X3fU.mjs";
 import "./config-DKhXquav.mjs";
 import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-B0okYl2D.mjs";
-import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CJCTeFpQ.mjs";
-import { c as isCodexAppServerIndeterminateTransportError, l as isCodexAppServerOverloadError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-qyUBJlGZ.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-B-S7ngS_.mjs";
+import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-zsK3DTPh.mjs";
+import { c as isCodexAppServerIndeterminateTransportError, l as isCodexAppServerOverloadError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-6GbdZFc0.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-D1aznv7C.mjs";
 import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-BLWz7stm.mjs";
-import { r as listCodexAppServerModels } from "./models-DfLmPV0k.mjs";
+import { r as listCodexAppServerModels } from "./models-Bs4aEhpG.mjs";
 import { n as createCodexSessionGenerationSupersededError } from "./session-binding-DGCYAfvD.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-GOry0AYh.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BZfwM8Jh.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";

package/dist/.setup/{compact-8ttks5U5.mjs → compact-BVSQoyh-.mjs}

@@ -1,20 +1,20 @@
 import { n as readCodexRuntimeModelId } from "./model-runtime-BdqzOMkU.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import { l as retainSharedCodexAppServerClientByInstanceId, p as waitForCodexAppServerClientExit } from "./shared-client-lifecycle-7xgtlo15.mjs";
+import { l as retainSharedCodexAppServerClientByInstanceId, p as waitForCodexAppServerClientExit } from "./shared-client-lifecycle-4LdC3gM4.mjs";
 import { t as isIncognitoSessionKey } from "./incognito-session-DWYapfwf.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DTtN1KrX.mjs";
-import { F as consumeCodexAppServerLiveThread, K as retainCodexAppServerLiveThread, M as getCodexInferenceThreadQualification, U as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, q as revertCodexAppServerLiveThreadSkillsCatalog, s as createIsolatedCodexAppServerClient } from "./shared-client-CJCTeFpQ.mjs";
+import { F as consumeCodexAppServerLiveThread, J as revertCodexAppServerLiveThreadSkillsCatalog, M as getCodexInferenceThreadQualification, W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, q as retainCodexAppServerLiveThread, s as createIsolatedCodexAppServerClient } from "./shared-client-zsK3DTPh.mjs";
 import "./responses-oauth-twnuTaAa.mjs";
-import { s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-qyUBJlGZ.mjs";
-import { b as readCodexNotificationTurnId, l as isCodexNoActiveTurnInterruptError, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError, y as readCodexNotificationThreadId } from "./attempt-client-cleanup-B-S7ngS_.mjs";
+import { s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-6GbdZFc0.mjs";
+import { b as readCodexNotificationTurnId, l as isCodexNoActiveTurnInterruptError, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError, y as readCodexNotificationThreadId } from "./attempt-client-cleanup-D1aznv7C.mjs";
 import { n as readCodexThreadContextSnapshot, s as readCodexNotificationItem } from "./event-projector-usage-03R0I2dM.mjs";
 import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-DGCYAfvD.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-BwkQXf9e.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-gNPzzpVp.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-GOry0AYh.mjs";
-import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B6pPt21M.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-DbNIloTJ.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-g1TKKqWj.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BZfwM8Jh.mjs";
+import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B0xUCXOU.mjs";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
 import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DjCz2eOw.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";