@openclaw/codex 2026.10.10-beta.2 → 2026.10.10-beta.3

package/dist/.setup/{account-usage-runtime-BVO-lpvn.mjs → account-usage-runtime-BOspqhfQ.mjs}

@@ -1,6 +1,6 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-BpfURnuy.mjs";
-import { t as readCodexAppServerUsage } from "./request-C6U8q2uz.mjs";
+import { t as readCodexAppServerUsage } from "./request-DbU7VQMs.mjs";
 import "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { a as resolveCodexAppServerAuthProfileStore } from "./auth-profile-auwzSwwy.mjs";

package/dist/.setup/{apply-tJl5mopa.mjs → apply-DVeFKzUL.mjs}

@@ -1,13 +1,13 @@
-import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-BW1YeaIk.mjs";
+import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-aolg0chE.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { r as requestCodexAppServerJson } from "./request-C6U8q2uz.mjs";
+import { r as requestCodexAppServerJson } from "./request-DbU7VQMs.mjs";
 import { r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DE9wcaeH.mjs";
 import "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-auwzSwwy.mjs";
-import { Z as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, i as clearSharedCodexAppServerClientIfCurrentAndWait, o as getLeasedSharedCodexAppServerClient } from "./shared-client-CkyTrNB8.mjs";
+import { $ as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, i as clearSharedCodexAppServerClientIfCurrentAndWait, o as getLeasedSharedCodexAppServerClient } from "./shared-client-B8v6e5D0.mjs";
 import { t as ensureCodexPluginActivation } from "./plugin-activation-CXPWe-hl.mjs";
-import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-Bqj6VQvQ.mjs";
+import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-BUB3QGL7.mjs";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";

package/dist/.setup/{attempt-client-cleanup-DMJWXGxM.mjs → attempt-client-cleanup-BLp6z_DD.mjs}

@@ -1,8 +1,8 @@
-import { D as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-BW1YeaIk.mjs";
+import { D as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-aolg0chE.mjs";
 import { a as codexPrewriteRejectionCause, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
-import { H as unsubscribeCodexAppServerLiveThread, lt as isCodexAppServerStartupError } from "./shared-client-CkyTrNB8.mjs";
-import { N as isCodexAppServerBrokenPipeError, s as isCodexAppServerRequestTimeoutError } from "./client--P8jwXvA.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-BGj67FMK.mjs";
+import { U as unsubscribeCodexAppServerLiveThread, dt as isCodexAppServerStartupError } from "./shared-client-B8v6e5D0.mjs";
+import { N as isCodexAppServerBrokenPipeError, s as isCodexAppServerRequestTimeoutError } from "./client-CPPD2q0Z.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-CaEj5E0i.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { AgentHarnessPreflightError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{auth-cache-key-BW1YeaIk.mjs → auth-cache-key-aolg0chE.mjs}

@@ -1,4 +1,4 @@
-import { n as defineCodexBuildState } from "./build-state-CjLCC0wm.mjs";
+import { n as defineCodexBuildState } from "./build-state-DswWyGqI.mjs";
 import { y as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-DbKvGXKl.mjs";
 import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Bq160Dhv.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/.setup/{bounded-turn-BQkmyyjB.mjs → bounded-turn-DJr0EXh7.mjs}

@@ -4,14 +4,14 @@ import { d as readCodexEffectiveConfig } from "./config-options-DMFZkd3X.mjs";
 import { a as codexPrewriteRejectionCause } from "./rpc-error-DemqqaxE.mjs";
 import "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
-import { C as createCodexElicitationResponse, g as assertCodexTurnStartResponse, h as assertCodexThreadStartResponse, y as readCodexErrorNotification } from "./client--P8jwXvA.mjs";
-import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-B2z0RIeF.mjs";
-import { i as readModelListResult } from "./models-CmOBxsKF.mjs";
+import { C as createCodexElicitationResponse, g as assertCodexTurnStartResponse, h as assertCodexThreadStartResponse, y as readCodexErrorNotification } from "./client-CPPD2q0Z.mjs";
+import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-BLp6z_DD.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-C9iVxYQi.mjs";
+import { i as readModelListResult } from "./models-Bc4yyUrk.mjs";
 import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-B0UI3f1D.mjs";
 import { n as resolveCodexAppServerReasoningEffort } from "./reasoning-effort-CS9kKWB9.mjs";
 import { n as buildCodexRingZeroThreadConfigPatch, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames } from "./thread-requests-BjawdIVV.mjs";
-import { a as resolveCodexPromptError } from "./usage-limit-error-BdNbGJC3.mjs";
+import { a as resolveCodexPromptError } from "./usage-limit-error-B0x1eymI.mjs";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import path from "node:path";
@@ -146,7 +146,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		assertCurrent: params.assertCurrent,
 		...params.signal ? { abandonSignal: params.signal } : {}
 	};
-	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-CkyTrNB8.mjs").then((n) => n.m).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-B8v6e5D0.mjs").then((n) => n.m).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		...clientOptions,
 		authProfileStore: params.authProfileStore
 	}));

package/dist/.setup/{build-state-CjLCC0wm.mjs → build-state-DswWyGqI.mjs}

@@ -1,5 +1,5 @@
 //#region extensions/codex/package.json
-var version = "2026.10.10-beta.2";
+var version = "2026.10.10-beta.3";
 //#endregion
 //#region extensions/codex/src/build-state.ts
 /**

package/dist/.setup/{client--P8jwXvA.mjs → client-CPPD2q0Z.mjs}

@@ -1,9 +1,9 @@
-import { a as readCodexCatalogDecodeRoute, c as isRpcResponse, i as listenCodexAppServerLines, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as createCodexAppServerMessageWriter, s as redactCodexAppServerLinePreview } from "./client-catalog-response-CsDxVVOZ.mjs";
+import { a as readCodexCatalogDecodeRoute, c as isRpcResponse, i as listenCodexAppServerLines, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as createCodexAppServerMessageWriter, s as redactCodexAppServerLinePreview } from "./client-catalog-response-FeIOBhaz.mjs";
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { a as closeCodexAppServerTransport, l as getCodexAppServerRegisteredTransportIdentity, o as closeCodexAppServerTransportAndWait, s as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-Bq160Dhv.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, n as CodexAppServerLocalRequestCancellationError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, t as CODEX_APP_SERVER_OVERLOADED_ERROR_CODE } from "./rpc-error-DemqqaxE.mjs";
-import { n as codexCatalogSourceForClient, o as recordCodexCatalogResponseSource, t as closeCodexCatalogClientSource } from "./session-catalog-source-z_mNyQdX.mjs";
-import { i as reuseCodexCatalogPreview } from "./session-catalog-native-projection-BqBYi6kV.mjs";
+import { n as codexCatalogSourceForClient, o as recordCodexCatalogResponseSource, t as closeCodexCatalogClientSource } from "./session-catalog-source-DghHV4qB.mjs";
+import { i as reuseCodexCatalogPreview } from "./session-catalog-native-projection-CwOyRRXK.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { codexCatalogPageWorkerEntrypoint } from "../catalog-page-worker-entrypoint.js";
 import { a as isUnsupportedCodexAppServerVersionError, i as createCodexInitializeDiagnostics, n as buildCodexAppServerInitializeParams, r as buildCodexAppServerRuntimeIdentity, t as assertSupportedCodexAppServerVersion } from "./client-initialize-CjgZcX61.mjs";

package/dist/.setup/{client-catalog-response-CsDxVVOZ.mjs → client-catalog-response-FeIOBhaz.mjs}

@@ -1,5 +1,5 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-BqBYi6kV.mjs";
+import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-CwOyRRXK.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-registration";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";

package/dist/.setup/{command-dispatch-DqaVBeR3.mjs → command-dispatch-DlgDPLEv.mjs}

@@ -8,7 +8,7 @@ async function handleCodexCommand(ctx, options) {
 	};
 	const { resolvePluginConfig, ...subcommandOptions } = options;
 	try {
-		const { handleCodexSubcommand } = await import("./command-handlers-i6mEjvfo.mjs");
+		const { handleCodexSubcommand } = await import("./command-handlers-B7Kcgt8i.mjs");
 		return await handleCodexSubcommand(commandContext, {
 			...subcommandOptions,
 			pluginConfig: resolvePluginConfig?.() ?? subcommandOptions.pluginConfig

package/dist/.setup/{command-handlers-i6mEjvfo.mjs → command-handlers-B7Kcgt8i.mjs}

@@ -1,7 +1,7 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey } from "./session-binding-record-C_THntMe.mjs";
 import { r as isCodexFastServiceTier } from "./config-utils-DN_YT7dE.mjs";
-import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-BW1YeaIk.mjs";
+import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-aolg0chE.mjs";
 import { n as withCodexConversationThreadActivity } from "./thread-ownership-queue-CeyYScUC.mjs";
 import { a as canMutateCodexHost, i as assertCodexHostOwnerCurrent, n as CODEX_HOST_INSPECTION_AUTH_ERROR, o as hasCodexAdminScope, r as CODEX_NATIVE_EXECUTION_AUTH_ERROR, t as CODEX_FULL_PERMISSIONS_AUTH_ERROR } from "./command-authorization-AikPDtcc.mjs";
 import { l as formatRelativeDuration, s as summarizeCodexAccountUsage } from "./rate-limits-BpfURnuy.mjs";
@@ -13,25 +13,25 @@ import { n as filterCodexMarketplacePlugins, r as parseCodexPluginMarketplaceId,
 import { o as formatCodexCliSessions } from "./node-cli-sessions-BuJnBnEq.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-GTgUj9pi.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-C6U8q2uz.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-DbU7VQMs.mjs";
 import { n as findCodexMarketplacePluginSummary, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DE9wcaeH.mjs";
 import "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { A as hasCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, Z as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, o as getLeasedSharedCodexAppServerClient } from "./shared-client-CkyTrNB8.mjs";
-import { f as assertCodexThreadAcceptsDirectInput, i as isCodexAppServerIndeterminateRequestCancellationError, m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { $ as resolveCodexAppServerAuthAccountCacheKey, A as hasCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, f as releaseLeasedSharedCodexAppServerClient, o as getLeasedSharedCodexAppServerClient } from "./shared-client-B8v6e5D0.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, i as isCodexAppServerIndeterminateRequestCancellationError, m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client-CPPD2q0Z.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-BLp6z_DD.mjs";
 import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-830RLAJW.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CmOBxsKF.mjs";
+import { n as listAllCodexAppServerModels } from "./models-Bc4yyUrk.mjs";
 import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-CXPWe-hl.mjs";
 import { i as resolveCodexSessionBinding, n as createCodexSessionGenerationSupersededError } from "./session-binding-BgsWcbdY.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DJ8PPxRc.mjs";
 import { n as prepareCodexNativeExecutionBlock, r as prepareCodexNativeSandboxBlock } from "./sandbox-guard-DneAfNye.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DYtvZ5Ay.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-UldER50x.mjs";
 import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-BqC-a6Fb.mjs";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-YUnu0JVx.mjs";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-BFfXSTZw.mjs";
 import { t as readCodexExperimentalFeature } from "./experimental-features-uGnVDtp-.mjs";
-import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-B65jEc0r.mjs";
+import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-DomZ6_l8.mjs";
 import { a as readCodexConversationActiveTurn, c as setCodexConversationModel, d as stopCodexConversationTurn, i as parseCodexPermissionsModeArg, l as setCodexConversationPermissions, n as formatPermissionsMode, r as parseCodexFastModeArg, s as setCodexConversationFastMode, u as steerCodexConversationTurn } from "./conversation-control-B2EpVZEb.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";

package/dist/.setup/{command-rpc-B65jEc0r.mjs → command-rpc-DomZ6_l8.mjs}

@@ -1,17 +1,17 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
 import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-DAS-JX1z.mjs";
-import { a as withCodexAppServerJsonClient, r as requestCodexAppServerJson } from "./request-C6U8q2uz.mjs";
+import { a as withCodexAppServerJsonClient, r as requestCodexAppServerJson } from "./request-DbU7VQMs.mjs";
 import "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { Q as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CkyTrNB8.mjs";
-import { a as isCodexAppServerIndeterminateTransportError, i as isCodexAppServerIndeterminateRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { et as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-B8v6e5D0.mjs";
+import { a as isCodexAppServerIndeterminateTransportError, i as isCodexAppServerIndeterminateRequestCancellationError } from "./client-CPPD2q0Z.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-BLp6z_DD.mjs";
 import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-830RLAJW.mjs";
-import { r as listCodexAppServerModels } from "./models-CmOBxsKF.mjs";
+import { r as listCodexAppServerModels } from "./models-Bc4yyUrk.mjs";
 import { n as createCodexSessionGenerationSupersededError } from "./session-binding-BgsWcbdY.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BZWI-rUL.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";

package/dist/.setup/{compact-AO2H4RJe.mjs → compact-H5H5Cvbw.mjs}

@@ -1,23 +1,23 @@
 import { n as readCodexRuntimeModelId } from "./model-runtime-BdqzOMkU.mjs";
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { g as sessionBindingIdentity } from "./session-binding-record-C_THntMe.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId, k as waitForCodexAppServerClientExit } from "./auth-cache-key-BW1YeaIk.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId, k as waitForCodexAppServerClientExit } from "./auth-cache-key-aolg0chE.mjs";
 import { t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-meta-Lkm5Lpf4.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-GTgUj9pi.mjs";
-import { B as retainCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, I as protectCodexAppServerLiveThread, V as revertCodexAppServerLiveThreadInstructions, a as createIsolatedCodexAppServerClient, p as retainSharedCodexAppServerClientIfCurrent, w as getCodexInferenceThreadQualification } from "./shared-client-CkyTrNB8.mjs";
+import { D as consumeCodexAppServerLiveThread, H as revertCodexAppServerLiveThreadInstructions, I as protectCodexAppServerLiveThread, V as retainCodexAppServerLiveThread, a as createIsolatedCodexAppServerClient, p as retainSharedCodexAppServerClientIfCurrent, w as getCodexInferenceThreadQualification } from "./shared-client-B8v6e5D0.mjs";
 import "./responses-oauth-CCV7aVYF.mjs";
-import { i as isCodexAppServerIndeterminateRequestCancellationError, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { c as readCodexNotificationTurnId, s as readCodexNotificationThreadId } from "./turn-router-BGj67FMK.mjs";
-import { c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { i as isCodexAppServerIndeterminateRequestCancellationError, o as isCodexAppServerPrewriteRequestCancellationError } from "./client-CPPD2q0Z.mjs";
+import { c as readCodexNotificationTurnId, s as readCodexNotificationThreadId } from "./turn-router-CaEj5E0i.mjs";
+import { c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BLp6z_DD.mjs";
 import { n as readCodexThreadContextSnapshot, s as readCodexNotificationItem } from "./event-projector-usage-CBY0Hkga.mjs";
 import { i as resolveCodexSessionBinding } from "./session-binding-BgsWcbdY.mjs";
-import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
+import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DJ8PPxRc.mjs";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-C3CIIaZG.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-D1pYkirc.mjs";
 import { n as prepareCodexNativeExecutionBlock } from "./sandbox-guard-DneAfNye.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DYtvZ5Ay.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-UldER50x.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BZWI-rUL.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";

package/dist/.setup/{computer-use-YUnu0JVx.mjs → computer-use-BFfXSTZw.mjs}

@@ -2,11 +2,11 @@ import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8
 import { o as resolveCodexComputerUseConfig } from "./config-options-DMFZkd3X.mjs";
 import { a as isManagedCodexDesktopCommand, b as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-DbKvGXKl.mjs";
 import { n as describeControlFailure } from "./capabilities-DAS-JX1z.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-DbU7VQMs.mjs";
 import "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
-import { $ as resolveBundledComputerUseMarketplacePath, X as reconcileCodexComputerUseStartArtifacts, at as assertNotSymlink, c as readCodexAppServerClientDesktopGeneration, et as resolveClientManagedBundledMarketplacePath, f as releaseLeasedSharedCodexAppServerClient, h as withCodexAppServerClientRequestScope, it as ensureCodexComputerUseSharedPluginCache, nt as isLegacyCodexComputerUsePluginDisabled, o as getLeasedSharedCodexAppServerClient, rt as resolveManagedCodexComputerUseConfig, tt as hasLegacyCodexComputerUseMcpPolicy, u as readCodexAppServerClientProcessIdentity } from "./shared-client-CkyTrNB8.mjs";
-import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { Q as reconcileCodexComputerUseStartArtifacts, at as resolveManagedCodexComputerUseConfig, c as readCodexAppServerClientDesktopGeneration, f as releaseLeasedSharedCodexAppServerClient, h as withCodexAppServerClientRequestScope, it as isLegacyCodexComputerUsePluginDisabled, nt as resolveClientManagedBundledMarketplacePath, o as getLeasedSharedCodexAppServerClient, ot as ensureCodexComputerUseSharedPluginCache, rt as hasLegacyCodexComputerUseMcpPolicy, st as assertNotSymlink, tt as resolveBundledComputerUseMarketplacePath, u as readCodexAppServerClientProcessIdentity } from "./shared-client-B8v6e5D0.mjs";
+import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BLp6z_DD.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{conversation-binding-CfnUR-IM.mjs → conversation-binding-DyiBKCA4.mjs}

@@ -3,24 +3,24 @@ import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } fro
 import { d as readCodexRequirementsToml } from "./config-security-clxAZYWX.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-DMFZkd3X.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BW1YeaIk.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-aolg0chE.mjs";
 import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-khgW0n-o.mjs";
-import { o as isCodexAppServerOverloadError } from "./rpc-error-DemqqaxE.mjs";
+import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-DemqqaxE.mjs";
 import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-i-FVpyha.mjs";
 import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BfrAlTMT.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, o as resolveModelBackedReviewerPolicyProvider } from "./auth-profile-auwzSwwy.mjs";
-import { A as hasCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, d as releaseCodexAppServerClientLease, h as withCodexAppServerClientRequestScope, o as getLeasedSharedCodexAppServerClient, z as releaseCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
-import { f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, l as CodexThreadDirectInputError } from "./client--P8jwXvA.mjs";
-import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-BGj67FMK.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { A as hasCodexAppServerLiveThread, B as releaseCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, d as releaseCodexAppServerClientLease, h as withCodexAppServerClientRequestScope, o as getLeasedSharedCodexAppServerClient } from "./shared-client-B8v6e5D0.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, l as CodexThreadDirectInputError } from "./client-CPPD2q0Z.mjs";
+import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-CaEj5E0i.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-BLp6z_DD.mjs";
 import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-B0UI3f1D.mjs";
 import "./session-binding-BgsWcbdY.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DxposL4X.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DJ8PPxRc.mjs";
 import { i as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-D09tLP-u.mjs";
 import { i as resolveCodexNativeExecutionBlock, t as assertNativeConversationApprovalPolicySupported } from "./sandbox-guard-DneAfNye.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BZWI-rUL.mjs";
 import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-CD2MAWU8.mjs";
 import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Cog6mm2i.mjs";
 import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-B2EpVZEb.mjs";
@@ -371,7 +371,7 @@ async function bindThread(params, threadId) {
 		release: resolved.release
 	};
 }
-async function prepareCodexConversationBinding(params, options = {}) {
+async function prepareCodexConversationBinding(params) {
 	const identity = {
 		kind: "conversation",
 		bindingId: params.data.bindingId
@@ -381,7 +381,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 		const current = await params.bindingStore.readAsync(identity);
 		if (current?.threadId !== snapshot?.threadId || current?.clientId !== snapshot?.clientId) throw new Error("Codex conversation binding changed before preparation.");
 		const requested = params.data.start && current?.conversationStartId !== params.data.start.id ? params.data.start : void 0;
-		if (current && !requested && !options.forceNew) return;
+		if (current && !requested) return;
 		const sourceIdentity = params.data.source ? sessionBindingIdentity({
 			agentId: params.data.source.agentId,
 			sessionId: params.data.source.sessionId,
@@ -413,7 +413,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 			agentId: params.data.source?.agentId ?? params.data.agentId
 		};
 		const threadId = requested?.threadId;
-		const sourceAuthority = await bindThread(bindingParams, options.forceNew ? void 0 : threadId);
+		const sourceAuthority = await bindThread(bindingParams, threadId);
 		using _ = { [Symbol.dispose]: sourceAuthority.release };
 		await sourceAuthority.assertCurrent();
 		const sourceGuard = sourceAuthority.source;
@@ -613,6 +613,12 @@ function readLocalMediaPath(value) {
 //#endregion
 //#region extensions/codex/src/conversation-binding.ts
 const DEFAULT_BOUND_TURN_TIMEOUT_MS = 12e5;
+var CodexConversationUnloadedThreadError = class extends Error {
+	constructor(threadId, cause) {
+		super(cause.message, { cause });
+		this.threadId = threadId;
+	}
+};
 async function runBoundTurn(params) {
 	const agentLookup = buildCodexConversationAgentLookup({
 		agentDir: params.data.agentDir,
@@ -624,6 +630,7 @@ async function runBoundTurn(params) {
 	};
 	const binding = await params.bindingStore.readAsync(identity);
 	if (!binding?.threadId) throw new Error("bound Codex conversation has no thread binding");
+	if (params.resumeThreadId && binding.threadId !== params.resumeThreadId) throw new Error("Codex conversation binding changed before recovery; review it before resending.");
 	return await withExclusiveCodexAppServerThread({
 		bindingStore: params.bindingStore,
 		identity,
@@ -656,6 +663,7 @@ async function runBoundTurn(params) {
 			const permissionProfile = runtime.networkProxy?.profileName;
 			const networkProxyConfigFingerprint = runtime.networkProxy?.configFingerprint;
 			const networkProxyBindingChanged = binding.networkProxyProfileName !== permissionProfile || binding.networkProxyConfigFingerprint !== networkProxyConfigFingerprint;
+			if (params.resumeThreadId && networkProxyBindingChanged) throw new Error("Codex conversation policy changed before recovery; rebind the conversation and resend your message.");
 			const serviceTier = binding.serviceTier ?? runtime.serviceTier;
 			let useStickyNetworkProfile = permissionProfile !== void 0 && !networkProxyBindingChanged;
 			assertNativeConversationApprovalPolicySupported(runtime);
@@ -716,7 +724,7 @@ async function runBoundTurn(params) {
 						ownsNativeSubscription = true;
 					}
 				}
-				if (networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !incognito && !liveThreadOwnership) {
+				if (params.resumeThreadId || networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !incognito && !liveThreadOwnership) {
 					if (!networkProxyBindingChanged && binding.clientId === client.getInstanceId()) await assertResumeInputAllowed();
 					const result = await withCodexAppServerClientRequestScope({
 						lease: clientLease,
@@ -838,6 +846,9 @@ async function runBoundTurn(params) {
 				}, {
 					timeoutMs: runtime.requestTimeoutMs,
 					withCurrent
+				}).catch((error) => {
+					if (!incognito && error instanceof CodexAppServerRpcError && error.method === "turn/start" && error.code === -32600 && error.message === `thread not found: ${threadId}`) throw new CodexConversationUnloadedThreadError(threadId, error);
+					throw error;
 				})).turn.id;
 				activeTurnCleanup = trackCodexConversationActiveTurn({
 					identity,
@@ -852,6 +863,7 @@ async function runBoundTurn(params) {
 				turnSucceeded = true;
 				return { text: replyText || "Codex completed without a text reply." };
 			} catch (error) {
+				if (params.resumeThreadId && isCodexThreadReadMissingError(error, threadId)) throw new Error("The bound Codex thread is unavailable. Your message was not submitted; rebind the conversation and resend it.", { cause: error });
 				if (isCodexAppServerOverloadError(error) && error.method === "thread/resume") throw error;
 				if (error instanceof CodexThreadDirectInputError) {
 					if (incognito && ownsNativeSubscription) {
@@ -920,15 +932,12 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 	try {
 		return await runBoundTurn(params);
 	} catch (error) {
-		if (!isCodexThreadNotFoundError(error)) throw error;
-		await prepareCodexConversationBinding(params, { forceNew: true });
-		return await runBoundTurn(params);
+		if (!(error instanceof CodexConversationUnloadedThreadError)) throw error;
+		return await runBoundTurn({
+			...params,
+			resumeThreadId: error.threadId
+		});
 	}
 }
-function isCodexThreadNotFoundError(error) {
-	if (isCodexAppServerOverloadError(error) || error instanceof CodexAppServerUnsafeSubscriptionError) return false;
-	const message = formatErrorMessage(error);
-	return /\bthread not found:/iu.test(message) || /\bbound Codex conversation has no thread binding\b/u.test(message);
-}
 //#endregion
 export { runBoundTurnWithMissingThreadRecovery };

package/dist/.setup/{dynamic-tool-build-DOub3CB5.mjs → dynamic-tool-build-DkJpWzXt.mjs}

@@ -4,7 +4,7 @@ import "./config-BfrAlTMT.mjs";
 import { a as isCodexResponsesOAuthRun } from "./responses-oauth-CCV7aVYF.mjs";
 import { F as isForcedPrivateQaCodexRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, R as normalizeCodexDynamicToolName, h as resolveCodexWebSearchPlan } from "./thread-requests-BjawdIVV.mjs";
 import { a as resolveCodexNodeExecToolOverrides, r as prepareCodexNativeExecutionPolicyForRun } from "./native-execution-policy-D09tLP-u.mjs";
-import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-CocOW9YS.mjs";
+import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-DbNYjwuC.mjs";
 import path from "node:path";
 import { createStageTimingTracker, formatStageTimings } from "openclaw/plugin-sdk/time-runtime";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";

package/dist/.setup/{dynamic-tools-Us5mvq_N.mjs → dynamic-tools-UL4DHNTh.mjs}

@@ -6,16 +6,16 @@ import { s as codexAppIdentityKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
 import "./config-BfrAlTMT.mjs";
 import { r as invalidInlineImageText } from "./session-history-read-BI_2jRED.mjs";
 import { o as neutralizeCodexExplicitMentionSigils } from "./context-engine-projection-PIeLSnR-.mjs";
-import { I as protectCodexAppServerLiveThread, p as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-CkyTrNB8.mjs";
-import { A as failedToolResult, C as createCodexElicitationResponse, O as resolveCodexToolAbortTerminalReason, b as readCodexTurnCompletedNotification, c as CodexServerRequestResolvedError, k as createFailedDynamicToolResponse } from "./client--P8jwXvA.mjs";
+import { I as protectCodexAppServerLiveThread, p as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-B8v6e5D0.mjs";
+import { A as failedToolResult, C as createCodexElicitationResponse, O as resolveCodexToolAbortTerminalReason, b as readCodexTurnCompletedNotification, c as CodexServerRequestResolvedError, k as createFailedDynamicToolResponse } from "./client-CPPD2q0Z.mjs";
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
-import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, c as readCodexNotificationTurnId, d as auditNativeToolUnfinishedStatus, l as auditNativeToolName, s as readCodexNotificationThreadId, u as auditNativeToolTerminalStatus, v as itemStatus } from "./turn-router-BGj67FMK.mjs";
+import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, c as readCodexNotificationTurnId, d as auditNativeToolUnfinishedStatus, l as auditNativeToolName, s as readCodexNotificationThreadId, u as auditNativeToolTerminalStatus, v as itemStatus } from "./turn-router-CaEj5E0i.mjs";
 import { n as resolveCodexAppServerReasoningEffort, t as readCodexSupportedReasoningEfforts } from "./reasoning-effort-CS9kKWB9.mjs";
 import { V as joinPresentSections } from "./thread-requests-BjawdIVV.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DxposL4X.mjs";
-import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-CGEiG7hG.mjs";
-import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-DOub3CB5.mjs";
-import { c as emitCodexNativePreToolUseFailureDiagnostic } from "./native-hook-relay-CocOW9YS.mjs";
+import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-BkiVPLuc.mjs";
+import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-DkJpWzXt.mjs";
+import { c as emitCodexNativePreToolUseFailureDiagnostic } from "./native-hook-relay-DbNYjwuC.mjs";
 import { createRequire } from "node:module";
 import { asNonArrayRecord, asOptionalRecord, filterStringEntries, isRecord, normalizeOptionalString, normalizeTrimmedStringList, readNonBlankString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";

package/dist/.setup/{effective-mcp-catalog-DfUUoeeM.mjs → effective-mcp-catalog-CvJiu5dn.mjs}

@@ -1,6 +1,6 @@
 import { g as sessionBindingIdentity } from "./session-binding-record-C_THntMe.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BW1YeaIk.mjs";
-import { I as protectCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-aolg0chE.mjs";
+import { I as protectCodexAppServerLiveThread } from "./shared-client-B8v6e5D0.mjs";
 import "./session-binding-BgsWcbdY.mjs";
 import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-DW41snf3.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -108,7 +108,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 	if (!retained && params.prepareSession) {
 		const preparation = await params.prepareSession();
 		params.assertCurrent();
-		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-zUgpDLWR.mjs");
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-DtvMR_yX.mjs");
 		await prepareCodexMcpAppSession({
 			preparation,
 			bindingStore: options.bindingStore,
@@ -130,7 +130,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 		};
 		params.assertCurrent();
 		assertBinding();
-		const { createNativeMcpRuntime } = await import("./native-mcp-app-DrQeLxXj.mjs").then((n) => n.n);
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-gkEJsgj2.mjs").then((n) => n.n);
 		params.assertCurrent();
 		const runtime = createNativeMcpRuntime({
 			client: retained.client,

package/dist/.setup/{ephemeral-turn-B2z0RIeF.mjs → ephemeral-turn-C9iVxYQi.mjs}

@@ -1,6 +1,6 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { b as readCodexTurnCompletedNotification } from "./client--P8jwXvA.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-BGj67FMK.mjs";
+import { b as readCodexTurnCompletedNotification } from "./client-CPPD2q0Z.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-CaEj5E0i.mjs";
 import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-CBY0Hkga.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{inference-context-HRw3PDwn.mjs → inference-context-BPwyk-Op.mjs}

@@ -1,5 +1,5 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { n as defineCodexBuildState } from "./build-state-CjLCC0wm.mjs";
+import { n as defineCodexBuildState } from "./build-state-DswWyGqI.mjs";
 import { n as readCodexInferenceMetadata } from "./inference-metadata-CYFWLHVk.mjs";
 import { randomUUID } from "node:crypto";
 //#region extensions/codex/src/app-server/inference-context.ts

package/dist/.setup/{inference-proxy-CiLbHMLf.mjs → inference-proxy-iJoMVyEy.mjs}

@@ -1,6 +1,6 @@
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
 import { CODEX_INFERENCE_TRANSPORT_FAILURE, authorizationFailure, createCodexInferenceDispatch, isTerminalResponse, n as createUploadAdmission, readProxyBody, t as MAX_BODY_BYTES } from "./inference-dispatch-C2zVSnrr.mjs";
-import { t as createCodexInferenceContext } from "./inference-context-HRw3PDwn.mjs";
+import { t as createCodexInferenceContext } from "./inference-context-BPwyk-Op.mjs";
 import { createDeferred, createPermitPool } from "openclaw/plugin-sdk/concurrency-runtime";
 import { Writable } from "node:stream";
 import { WebSocket, WebSocketServer, rejectWebSocketUpgrade } from "openclaw/plugin-sdk/websocket-runtime";

package/dist/.setup/{isolated-completion-CybgD6uU.mjs → isolated-completion-Bv8qIPw_.mjs}

@@ -1,9 +1,9 @@
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { i as resolveCodexAppServerHomeScope } from "./config-options-DMFZkd3X.mjs";
 import "./config-BfrAlTMT.mjs";
-import { Q as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CkyTrNB8.mjs";
-import { d as assertCodexPassiveTurnItems } from "./client--P8jwXvA.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-BQkmyyjB.mjs";
+import { et as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-B8v6e5D0.mjs";
+import { d as assertCodexPassiveTurnItems } from "./client-CPPD2q0Z.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DJr0EXh7.mjs";
 import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-D8CDrAVX.mjs";
 import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-ChOAY7rW.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts

package/dist/.setup/{mcp-app-session-preparation-zUgpDLWR.mjs → mcp-app-session-preparation-DtvMR_yX.mjs}

@@ -7,11 +7,11 @@ import { n as buildCodexAppServerRuntimeFingerprint, r as buildCodexPluginAppCac
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-GTgUj9pi.mjs";
 import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BfrAlTMT.mjs";
 import { r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { O as ensureCodexAppServerClientRuntime, f as releaseLeasedSharedCodexAppServerClient, o as getLeasedSharedCodexAppServerClient } from "./shared-client-CkyTrNB8.mjs";
+import { O as ensureCodexAppServerClientRuntime, f as releaseLeasedSharedCodexAppServerClient, o as getLeasedSharedCodexAppServerClient } from "./shared-client-B8v6e5D0.mjs";
 import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-B0UI3f1D.mjs";
 import { i as resolveCodexSessionBinding } from "./session-binding-BgsWcbdY.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
-import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-zCXYFW8W.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DJ8PPxRc.mjs";
+import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-DOC2IWpW.mjs";
 import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-CD2MAWU8.mjs";
 import { z } from "zod";
 import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{model-catalog-CWY3wo0B.mjs → model-catalog-EWVLBn3F.mjs}

@@ -1,14 +1,14 @@
 import { t as buildCodexRuntimeModelParams } from "./model-runtime-BdqzOMkU.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { D as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-BW1YeaIk.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-C6U8q2uz.mjs";
+import { D as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-aolg0chE.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-DbU7VQMs.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { n as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-CkyTrNB8.mjs";
+import { n as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-B8v6e5D0.mjs";
 import { i as isCodexResponsesOAuthCredential } from "./responses-oauth-CCV7aVYF.mjs";
-import { i as isCodexAppServerIndeterminateRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CmOBxsKF.mjs";
+import { i as isCodexAppServerIndeterminateRequestCancellationError } from "./client-CPPD2q0Z.mjs";
+import { n as listAllCodexAppServerModels } from "./models-Bc4yyUrk.mjs";
 import { probeCodexNativeAuth } from "./native-auth-DpZIaY8N.mjs";
 //#region extensions/codex/src/app-server/model-catalog.ts
 const INPUT_TYPES = /* @__PURE__ */ new Set([

package/dist/.setup/{models-CmOBxsKF.mjs → models-Bc4yyUrk.mjs}

@@ -1,4 +1,4 @@
-import { u as assertCodexModelListResponse } from "./client--P8jwXvA.mjs";
+import { u as assertCodexModelListResponse } from "./client-CPPD2q0Z.mjs";
 import { normalizeOptionalString, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 1e4;
@@ -29,8 +29,8 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
 	const timeoutMs = options.timeoutMs ?? 1e4;
-	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CkyTrNB8.mjs").then((n) => n.m);
-	const { requestCodexAppServerClientJson } = await import("./request-C6U8q2uz.mjs").then((n) => n.i);
+	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-B8v6e5D0.mjs").then((n) => n.m);
+	const { requestCodexAppServerClientJson } = await import("./request-DbU7VQMs.mjs").then((n) => n.i);
 	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/.setup/{native-hook-relay-CocOW9YS.mjs → native-hook-relay-DbNYjwuC.mjs}

@@ -1,9 +1,9 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { l as fingerprintCodexPolicy } from "./config-security-clxAZYWX.mjs";
-import { b as nativeHookRelayUnregisterQueue } from "./shared-client-CkyTrNB8.mjs";
-import { O as resolveCodexToolAbortTerminalReason } from "./client--P8jwXvA.mjs";
+import { b as nativeHookRelayUnregisterQueue } from "./shared-client-B8v6e5D0.mjs";
+import { O as resolveCodexToolAbortTerminalReason } from "./client-CPPD2q0Z.mjs";
 import { R as normalizeCodexDynamicToolName } from "./thread-requests-BjawdIVV.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-C3CIIaZG.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-D1pYkirc.mjs";
 import { createHash } from "node:crypto";
 import { addTimerTimeoutGraceMs, finiteSecondsToTimerSafeMilliseconds } from "openclaw/plugin-sdk/number-runtime";
 import { escapeRegExp } from "openclaw/plugin-sdk/text-utility-runtime";