@openclaw/codex 2026.10.1 → 2026.10.5-beta.1

package/dist/.setup/{thread-resume--WOKWxZd.mjs → thread-resume-B2EmMcgE.mjs}

@@ -1,8 +1,8 @@
-import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-hmWM21RB.mjs";
-import { r as publishCodexCatalogResume } from "./session-catalog-events-DRaivXvC.mjs";
-import { L as forgetCodexWorkspaceReferences, ft as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-DeenOD8U.mjs";
-import { h as assertCodexThreadResumeResponse, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-BIRVBXXb.mjs";
-import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-HXQxfMc1.mjs";
+import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-C98SHchT.mjs";
+import { r as publishCodexCatalogResume } from "./session-catalog-events-DzFlXNUe.mjs";
+import { L as forgetCodexWorkspaceReferences, ft as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-ByIwuAC-.mjs";
+import { h as assertCodexThreadResumeResponse, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-y7nO6X9c.mjs";
+import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-t-kd_1ys.mjs";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/thread-resume.ts
 /** Owns Codex thread/resume subscription safety. */

package/dist/.setup/{timeout-CXOfNoaX.mjs → timeout-D0mEWSGG.mjs}

@@ -1,4 +1,4 @@
-import { withTimeout } from "openclaw/plugin-sdk/time-runtime";
+import { racePromiseWithAbortSignal, withTimeout } from "openclaw/plugin-sdk/time-runtime";
 //#region extensions/codex/src/app-server/timeout.ts
 function resolveAbortError(signal) {
 	return signal.reason instanceof Error ? signal.reason : new Error("Codex app-server operation aborted", { cause: signal.reason });
@@ -27,17 +27,11 @@ async function withAbortableTimeout(params) {
 }
 async function waitForPromiseOrAbort(promise, signal) {
 	if (signal.aborted) return false;
-	let removeAbort;
-	try {
-		return await Promise.race([promise.then(() => true), new Promise((resolve) => {
-			const onAbort = () => resolve(false);
-			signal.addEventListener("abort", onAbort, { once: true });
-			removeAbort = () => signal.removeEventListener("abort", onAbort);
-			if (signal.aborted) onAbort();
-		})]);
-	} finally {
-		removeAbort?.();
-	}
+	const aborted = Symbol("codex-promise-aborted");
+	return await racePromiseWithAbortSignal(promise.then(() => true), signal, () => aborted).catch((error) => {
+		if (error !== aborted) throw error;
+		return false;
+	});
 }
 function abortReason(signal) {
 	return signal.reason instanceof Error ? signal.reason : new Error(String(signal.reason ?? "codex app-server thread route aborted"));

package/dist/.setup/{transcript-history-projection-B9a7HwUV.mjs → transcript-history-projection-DfKcoZCB.mjs}

@@ -1,6 +1,6 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { i as readCodexProviderRefusal, t as codexProviderRefusalDiagnostics } from "./event-projector-values-DTqZHizf.mjs";
-import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
+import { i as readCodexProviderRefusal, t as codexProviderRefusalDiagnostics } from "./event-projector-values-CLvG1Hil.mjs";
+import { n as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf8Prefix } from "openclaw/plugin-sdk/text-utility-runtime";
 import { Buffer } from "node:buffer";
@@ -133,7 +133,7 @@ function projectCodexThreadHistory(params) {
 			}, identity);
 			projected.push(projectCodexHistoryMessage(message, text));
 		}
-		if (params.includeErrorOnlyTurns && !hasAssistantMessage && turn.status === "failed" && turn.error?.message) {
+		if (!hasAssistantMessage && turn.status === "failed" && turn.error?.message) {
 			const timestamp = (turn.completedAt ?? turn.startedAt ?? threadTimestamp / 1e3) * 1e3;
 			const text = normalizeImportedHistoryText(turn.error.message) ?? "Codex turn failed.";
 			const message = attachCodexMirrorIdentity({
@@ -168,7 +168,6 @@ function projectBoundedCodexThreadHistory(params) {
 		thread: params.thread,
 		turns: selectTurnsThroughBoundary(params.thread, params.throughTurnId),
 		importedAt: params.importedAt,
-		includeErrorOnlyTurns: true,
 		...params.modelProvider ? { modelProvider: params.modelProvider } : {}
 	});
 	const selected = selectBoundedCodexHistoryTail(projected);

package/dist/.setup/{transcript-mirror-BfLRARNL.mjs → transcript-mirror-Bee2o6jj.mjs}

@@ -1,29 +1,21 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
-import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-B9a7HwUV.mjs";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-YSegaktH.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
+import { a as readUpstreamUserText, i as readMirrorIdentity, n as attachCodexMirrorIdentity, o as takeCodexAssistantItemIds, r as attachUpstreamUserText } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DfKcoZCB.mjs";
+import { a as buildCodexMirrorIdempotencyKey, c as isMirroredAgentMessage, i as buildCodexMirrorDedupeIdentity, l as readCodexMirrorSourceFingerprint, n as attachCodexMirrorAttestation, o as fingerprintCodexMirrorSourceMessage, r as attachCodexMirrorRunId, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-BzUXnrvv.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, restorePreparedUserTurnOperationalMetaForRuntime, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { withCodexSessionTranscriptMirrorWriteLock } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
-import { publishSessionTranscriptUpdateByIdentity } from "openclaw/plugin-sdk/session-transcript-runtime";
+import { withCodexSessionTranscriptMirrorWrite } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
+import { createNativeSessionBindingAuthority } from "openclaw/plugin-sdk/agent-harness-session-runtime";
+import { composeSessionTranscriptWriteAssertion, publishSessionTranscriptUpdateByIdentity } from "openclaw/plugin-sdk/session-transcript-runtime";
 //#region extensions/codex/src/app-server/user-prompt-message.ts
-function buildSenderLabel(params) {
-	const label = params.senderName ?? params.senderUsername ?? params.senderE164 ?? params.senderId;
-	if (!label) return;
-	return !params.senderId || label.includes(params.senderId) ? label : `${label} (${params.senderId})`;
-}
 function buildFromPrepared(params, preparedUserMessage) {
 	const senderId = normalizeOptionalString(params.senderId);
 	const senderName = normalizeOptionalString(params.senderName);
 	const senderUsername = normalizeOptionalString(params.senderUsername);
 	const senderE164 = normalizeOptionalString(params.senderE164);
-	const senderLabel = buildSenderLabel({
-		senderId,
-		senderName,
-		senderUsername,
-		senderE164
-	});
+	const label = senderName ?? senderUsername ?? senderE164 ?? senderId;
+	const senderLabel = label && senderId && !label.includes(senderId) ? `${label} (${senderId})` : label;
 	const sourceChannel = normalizeOptionalString(params.inputProvenance?.sourceChannel ?? params.messageChannel ?? params.messageProvider);
 	return {
 		role: "user",
@@ -74,52 +66,79 @@ async function mirror(params) {
 		messagesPresent: [],
 		userMessageReceipts: []
 	};
-	const candidates = messages.map((message) => {
+	const candidates = messages.map((source) => {
+		const message = { ...source };
+		const assistantItemIds = takeCodexAssistantItemIds(message);
 		const dedupeIdentity = buildCodexMirrorDedupeIdentity(message);
 		const sourceFingerprint = fingerprintCodexMirrorSourceMessage(message);
 		return {
 			dedupeIdentity,
-			idempotencyKey: (message.role === "user" ? normalizeOptionalString("idempotencyKey" in message ? message.idempotencyKey : void 0) : void 0) ?? (params.idempotencyScope ? `${params.idempotencyScope}:${dedupeIdentity}` : void 0),
+			idempotencyKey: (message.role === "user" ? normalizeOptionalString("idempotencyKey" in message ? message.idempotencyKey : void 0) : void 0) ?? (params.idempotencyScope ? buildCodexMirrorIdempotencyKey(params.idempotencyScope, dedupeIdentity) : void 0),
 			message,
-			sourceFingerprint
+			sourceFingerprint,
+			assistantItemIds
 		};
 	});
 	const candidateIdempotencyKeys = candidates.flatMap(({ idempotencyKey }) => idempotencyKey ? [idempotencyKey] : []);
 	const transcriptTarget = resolveCodexMirrorTranscriptTarget(params);
-	const assertWritable = () => {
-		params.assertCurrent?.();
-		params.assertWriteCurrent?.();
+	const publishCommitted = async (update) => {
+		try {
+			const terminalOwner = params.terminalAssistantOwner;
+			const terminalRunId = update.message.role === "assistant" && terminalOwner && readMirrorIdentity(update.message) === terminalOwner.mirrorIdentity ? terminalOwner.runId : void 0;
+			await publishSessionTranscriptUpdateByIdentity({
+				...transcriptTarget,
+				update: {
+					...update,
+					...params.agentId ? { agentId: params.agentId } : {},
+					...terminalRunId ? { runId: terminalRunId } : {},
+					sessionKey: transcriptTarget.sessionKey
+				}
+			});
+		} catch (error) {
+			embeddedAgentLog.warn("failed to publish codex app-server transcript update", { error: formatErrorMessage(error) });
+		}
 	};
+	const assertWritable = composeSessionTranscriptWriteAssertion([params.assertCurrent, params.assertWriteCurrent]);
 	assertWritable();
-	const mirrorBatch = await withCodexSessionTranscriptMirrorWriteLock({
+	const result = await withCodexSessionTranscriptMirrorWrite({
 		...transcriptTarget,
 		config: params.config
 	}, async (transcript) => {
 		assertWritable();
-		const nextAppendedUpdates = [];
 		const nextAssistantMirrorIdentitiesOwned = /* @__PURE__ */ new Set();
+		const recordAssistantOwnership = (identity) => {
+			nextAssistantMirrorIdentitiesOwned.add(identity);
+			params.onAssistantMessageOwned?.(identity);
+		};
 		const nextAnchorsByMirrorIdentity = /* @__PURE__ */ new Map();
 		const nextMessagesPresent = [];
 		const nextUserMessageReceipts = [];
 		const mirrorFacts = await transcript.readMessageFacts({ idempotencyKeys: candidateIdempotencyKeys });
 		assertWritable();
 		const taint = { tainted: false };
-		for (const { dedupeIdentity, idempotencyKey, message, sourceFingerprint } of candidates) {
+		for (const { dedupeIdentity, idempotencyKey, message, sourceFingerprint, assistantItemIds } of candidates) {
 			const sourceMessage = applyCodexTranscriptTaint(message, taint);
 			const mirrorIdentity = readMirrorIdentity(message);
 			const ownsRun = Boolean(params.runId && (!params.runMirrorIdentityPrefix || mirrorIdentity?.startsWith(params.runMirrorIdentityPrefix)));
 			const terminalOwner = params.terminalAssistantOwner;
 			const ownsTerminal = Boolean(ownsRun && terminalOwner && mirrorIdentity === terminalOwner.mirrorIdentity);
-			const ownedMessage = ownsRun && params.runId ? attachCodexMirrorRunId(sourceMessage, params.runId, ownsTerminal, terminalOwner?.settlementWarning) : sourceMessage;
-			const transcriptMessage = {
-				...attachCodexMirrorAttestation(ownedMessage, sourceFingerprint),
+			const withRunOwnership = (candidate) => ownsRun && params.runId ? attachCodexMirrorRunId(candidate, params.runId, ownsTerminal, terminalOwner?.settlementWarning) : candidate;
+			const withAttestation = (candidate) => ({
+				...attachCodexMirrorAttestation(candidate, sourceFingerprint),
 				...idempotencyKey ? { idempotencyKey } : {}
-			};
+			});
+			const transcriptMessage = withAttestation(withRunOwnership(sourceMessage));
 			if (idempotencyKey && mirrorFacts.existingIdempotencyKeys.has(idempotencyKey)) {
 				const persistedMessage = mirrorFacts.messagesByIdempotencyKey.get(idempotencyKey);
 				const persistedAnchor = mirrorFacts.anchorsByIdempotencyKey.get(idempotencyKey);
 				if (persistedMessage && isMirroredAgentMessage(persistedMessage)) {
 					nextMessagesPresent.push(persistedMessage);
+					if (assistantItemIds && persistedAnchor && readCodexMirrorSourceFingerprint(persistedMessage) === sourceFingerprint) await publishCommitted({
+						messageId: persistedAnchor.entryId,
+						messageSeq: persistedAnchor.activeMessagePosition + 1,
+						message: persistedMessage,
+						assistantItemIds
+					});
 					if (persistedMessage.role === "user" && persistedAnchor) nextUserMessageReceipts.push({
 						anchor: persistedAnchor,
 						appended: false,
@@ -127,7 +146,7 @@ async function mirror(params) {
 					});
 				}
 				if (persistedAnchor) nextAnchorsByMirrorIdentity.set(dedupeIdentity, persistedAnchor);
-				if (message.role === "assistant") nextAssistantMirrorIdentitiesOwned.add(dedupeIdentity);
+				if (message.role === "assistant") recordAssistantOwnership(dedupeIdentity);
 				continue;
 			}
 			assertWritable();
@@ -148,19 +167,15 @@ async function mirror(params) {
 				prepareAssistantTranscriptMessage: ownsTerminal ? params.prepareAssistantTranscriptMessage : void 0
 			});
 			if (!nextMessage) {
-				if (message.role === "assistant") nextAssistantMirrorIdentitiesOwned.add(dedupeIdentity);
+				if (message.role === "assistant") recordAssistantOwnership(dedupeIdentity);
 				continue;
 			}
-			const restoredMessage = restorePreparedUserTurnOperationalMetaForRuntime({
+			let messageToAppend = withAttestation(restorePreparedUserTurnOperationalMetaForRuntime({
 				runtimeMessage: nextMessage,
 				preparedMessage: preparedUserMessage
-			});
-			let messageToAppend = {
-				...attachCodexMirrorAttestation(restoredMessage, sourceFingerprint),
-				...idempotencyKey ? { idempotencyKey } : {}
-			};
+			}));
 			if (mirrorIdentity) messageToAppend = attachCodexMirrorIdentity(messageToAppend, mirrorIdentity);
-			if (ownsRun && params.runId) messageToAppend = attachCodexMirrorRunId(messageToAppend, params.runId, ownsTerminal, terminalOwner?.settlementWarning);
+			messageToAppend = withRunOwnership(messageToAppend);
 			if (message.role === "assistant" && message.openclawAsyncDelivery) {
 				const questions = isMirroredAgentMessage(messageToAppend) && readMirroredAssistantText(messageToAppend) === asyncSourceText ? readCodexAsyncQuestions(messageToAppend.openclawAsyncDelivery?.questions) : void 0;
 				messageToAppend = Object.assign(messageToAppend, { openclawAsyncDelivery: {
@@ -176,40 +191,44 @@ async function mirror(params) {
 			assertWritable();
 			const { lifecycleRevision, messageSeq, result: appended } = await transcript.appendMessageWithMessageSequence({
 				message: messageToAppend,
-				...params.assertCurrent || params.assertWriteCurrent ? { prepareMessageAfterIdempotencyCheck: (preparedMessage) => {
-					assertWritable();
-					return preparedMessage;
+				...params.assertCurrent || params.assertWriteCurrent ? { preparation: {
+					prepareMessage: async (preparedMessage) => preparedMessage,
+					source: assertWritable
 				} } : {},
 				idempotencyLookup: "scan",
 				cwd: params.cwd
 			});
-			params.assertCurrent?.();
-			if (!appended) continue;
+			if (appended && message.role === "assistant") recordAssistantOwnership(dedupeIdentity);
+			if (!appended) {
+				params.assertCurrent?.();
+				continue;
+			}
 			const { messageId, message: appendedMessage } = appended;
 			if (isMirroredAgentMessage(appendedMessage)) {
 				nextMessagesPresent.push(appendedMessage);
 				if (idempotencyKey) mirrorFacts.messagesByIdempotencyKey.set(idempotencyKey, appendedMessage);
 			}
-			if (message.role === "assistant") nextAssistantMirrorIdentitiesOwned.add(dedupeIdentity);
 			if (appended.anchor) nextAnchorsByMirrorIdentity.set(dedupeIdentity, appended.anchor);
 			if (appendedMessage.role === "user" && appended.anchor) nextUserMessageReceipts.push({
 				anchor: appended.anchor,
 				appended: appended.appended,
 				message: appendedMessage
 			});
-			if (appended.appended) nextAppendedUpdates.push({
+			const committedItemIds = isMirroredAgentMessage(appendedMessage) && readCodexMirrorSourceFingerprint(appendedMessage) === sourceFingerprint ? assistantItemIds : void 0;
+			if (appended.appended || committedItemIds) await publishCommitted({
 				lifecycleRevision,
 				messageId,
 				message: appendedMessage,
-				...messageSeq !== void 0 ? { messageSeq } : {}
+				...messageSeq !== void 0 ? { messageSeq } : {},
+				...committedItemIds ? { assistantItemIds: committedItemIds } : {}
 			});
+			params.assertCurrent?.();
 			if (idempotencyKey) {
 				mirrorFacts.existingIdempotencyKeys.add(idempotencyKey);
 				if (appended.anchor) mirrorFacts.anchorsByIdempotencyKey.set(idempotencyKey, appended.anchor);
 			}
 		}
 		return {
-			appendedUpdates: nextAppendedUpdates,
 			assistantMirrorIdentitiesOwned: [...nextAssistantMirrorIdentitiesOwned],
 			anchorsByMirrorIdentity: nextAnchorsByMirrorIdentity,
 			messagesPresent: nextMessagesPresent,
@@ -217,25 +236,6 @@ async function mirror(params) {
 		};
 	});
 	params.assertCurrent?.();
-	const { appendedUpdates, ...result } = mirrorBatch;
-	for (const update of appendedUpdates) try {
-		const terminalOwner = params.terminalAssistantOwner;
-		const terminalRunId = update.message.role === "assistant" && terminalOwner && readMirrorIdentity(update.message) === terminalOwner.mirrorIdentity ? terminalOwner.runId : void 0;
-		await publishSessionTranscriptUpdateByIdentity({
-			...transcriptTarget,
-			update: {
-				lifecycleRevision: update.lifecycleRevision,
-				...params.agentId ? { agentId: params.agentId } : {},
-				message: update.message,
-				messageId: update.messageId,
-				...update.messageSeq !== void 0 ? { messageSeq: update.messageSeq } : {},
-				...terminalRunId ? { runId: terminalRunId } : {},
-				sessionKey: transcriptTarget.sessionKey
-			}
-		});
-	} catch (error) {
-		embeddedAgentLog.warn("failed to publish codex app-server transcript update", { error: formatErrorMessage(error) });
-	}
 	return result;
 }
 function resolveCodexMirrorTranscriptTarget(params) {
@@ -399,7 +399,7 @@ async function mirrorPromptAtTurnStartBestEffort(params) {
 				return;
 			}
 			const mirrorResult = await mirror({
-				assertCurrent: params.params.hostCapabilities.assertActive,
+				assertCurrent: createNativeSessionBindingAuthority([], params.params.hostCapabilities.assertActive).assertLegacyCurrent,
 				agentId: params.agentId,
 				sessionKey: params.sessionKey,
 				sessionId: params.params.sessionId,

package/dist/.setup/{transcript-mirror-attestation-YSegaktH.mjs → transcript-mirror-attestation-BzUXnrvv.mjs}

@@ -1,5 +1,5 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
+import { a as readUpstreamUserText, i as readMirrorIdentity } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/transcript-mirror-attestation.ts
@@ -15,6 +15,9 @@ function buildCodexMirrorDedupeIdentity(message) {
 	});
 	return `${message.role}:${createHash("sha256").update(payload).digest("hex").slice(0, 16)}`;
 }
+function buildCodexMirrorIdempotencyKey(scope, identity) {
+	return `${scope}:${identity}`;
+}
 const MIRROR_ORIGIN_META_KEY = "mirrorOrigin";
 const MIRROR_SOURCE_FINGERPRINT_META_KEY = "mirrorSourceFingerprint";
 const CODEX_APP_SERVER_MIRROR_ORIGIN = "codex-app-server";
@@ -88,4 +91,4 @@ function fingerprintCodexMirrorSourceMessage(message) {
 	return createHash("sha256").update(serializeCodexMirrorSourceEvidence(message)).digest("hex").slice(0, 32);
 }
 //#endregion
-export { fingerprintCodexMirrorSourceMessage as a, readCodexMirrorSourceFingerprint as c, buildCodexMirrorDedupeIdentity as i, serializeCodexMirrorSourceEvidence as l, attachCodexMirrorAttestation as n, hasCodexMirrorOrigin as o, attachCodexMirrorRunId as r, isMirroredAgentMessage as s, applyCodexTranscriptTaint as t };
+export { buildCodexMirrorIdempotencyKey as a, isMirroredAgentMessage as c, buildCodexMirrorDedupeIdentity as i, readCodexMirrorSourceFingerprint as l, attachCodexMirrorAttestation as n, fingerprintCodexMirrorSourceMessage as o, attachCodexMirrorRunId as r, hasCodexMirrorOrigin as s, applyCodexTranscriptTaint as t, serializeCodexMirrorSourceEvidence as u };