@openclaw/codex 2026.10.10-beta.2 → 2026.10.10-beta.4

package/dist/.setup/{account-usage-runtime-BVO-lpvn.mjs → account-usage-runtime-CO_i9_7B.mjs}

@@ -1,8 +1,8 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-BpfURnuy.mjs";
-import { t as readCodexAppServerUsage } from "./request-C6U8q2uz.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { t as readCodexAppServerUsage } from "./request-DTgD_jsY.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { a as resolveCodexAppServerAuthProfileStore } from "./auth-profile-auwzSwwy.mjs";
 import { isDeepStrictEqual } from "node:util";
 import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";

package/dist/.setup/{app-server-policy-Cog6mm2i.mjs → app-server-policy-CFCEWj0w.mjs}

@@ -1,4 +1,4 @@
-import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-BfrAlTMT.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-BZYTxljj.mjs";
 //#region extensions/codex/src/app-server/app-server-policy.ts
 function resolveCodexAppServerForModelProvider(params) {
 	return params.appServer.approvalsReviewer === "user" || canUseCodexModelBackedApprovalsReviewerForModel({

package/dist/.setup/{apply-tJl5mopa.mjs → apply-DvEtGGBB.mjs}

@@ -1,13 +1,13 @@
-import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-BW1YeaIk.mjs";
+import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { r as requestCodexAppServerJson } from "./request-C6U8q2uz.mjs";
-import { r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DE9wcaeH.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { r as requestCodexAppServerJson } from "./request-DTgD_jsY.mjs";
+import { r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-BVP15PmN.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-auwzSwwy.mjs";
-import { Z as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, i as clearSharedCodexAppServerClientIfCurrentAndWait, o as getLeasedSharedCodexAppServerClient } from "./shared-client-CkyTrNB8.mjs";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-CXPWe-hl.mjs";
-import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-Bqj6VQvQ.mjs";
+import { et as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, i as clearSharedCodexAppServerClientIfCurrentAndWait, o as getLeasedSharedCodexAppServerClient } from "./shared-client-BelwlhWf.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-Cj2k3W9n.mjs";
+import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-C3H9W_2P.mjs";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";

package/dist/.setup/{attempt-client-cleanup-DMJWXGxM.mjs → attempt-client-cleanup-Bj4T3tcX.mjs}

@@ -1,9 +1,9 @@
-import { D as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-BW1YeaIk.mjs";
+import { D as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { a as codexPrewriteRejectionCause, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
-import { H as unsubscribeCodexAppServerLiveThread, lt as isCodexAppServerStartupError } from "./shared-client-CkyTrNB8.mjs";
-import { N as isCodexAppServerBrokenPipeError, s as isCodexAppServerRequestTimeoutError } from "./client--P8jwXvA.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-BGj67FMK.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { U as unsubscribeCodexAppServerLiveThread, ft as isCodexAppServerStartupError } from "./shared-client-BelwlhWf.mjs";
+import { N as isCodexAppServerBrokenPipeError, s as isCodexAppServerRequestTimeoutError } from "./client-Bxe8bl-K.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-B62dF4CM.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { AgentHarnessPreflightError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/attempt-client-cleanup.ts

package/dist/.setup/{attempt-workspace-context-GYPLawX6.mjs → attempt-workspace-context-DxHd71bH.mjs}

@@ -1,5 +1,5 @@
 import { n as flattenCodexDynamicToolFunctions } from "./protocol-CaPAVwe9.mjs";
-import { I as isMessageOnlyCodexSourceReply } from "./thread-requests-BjawdIVV.mjs";
+import { I as isMessageOnlyCodexSourceReply } from "./thread-requests-6Dy8hyXF.mjs";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import { buildAgentWorkspaceInstructionSnapshot, buildBootstrapContextForFiles, embeddedAgentLog, prepareAgentWorkspaceContext } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{auth-binding-830RLAJW.mjs → auth-binding-BY7Fm501.mjs}

@@ -1,5 +1,5 @@
 import { i as isCodexResponsesOAuthCredential, o as resolveCodexResponsesOAuthProfileFingerprint } from "./responses-oauth-CCV7aVYF.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { resolveApiKeyForProfile } from "openclaw/plugin-sdk/agent-runtime";
 import { fingerprintResolvedAuthProfileCredential } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveOpenAICodexAuthIdentity } from "openclaw/plugin-sdk/provider-auth";

package/dist/.setup/{auth-cache-key-BW1YeaIk.mjs → auth-cache-key-Do2ZQrNP.mjs}

@@ -1,6 +1,6 @@
-import { n as defineCodexBuildState } from "./build-state-CjLCC0wm.mjs";
-import { y as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-DbKvGXKl.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Bq160Dhv.mjs";
+import { n as defineCodexBuildState } from "./build-state-CpGXWSN4.mjs";
+import { y as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-BwzkwiGo.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-BVeWgcK6.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import fs, { constants, existsSync, watch } from "node:fs";

package/dist/.setup/{binding-connection-GTgUj9pi.mjs → binding-connection-hJD5mFkM.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 //#region extensions/codex/src/app-server/binding-connection.ts
@@ -44,7 +44,7 @@ function requireCodexSupervisionModelSelection(binding) {
 }
 /** Registration publishes the resolver; connection policy loads only for an actual request. */
 async function resolveCodexBindingAppServerConnection(params) {
-	return (await import("./binding-connection.runtime-RcWR3vQu.mjs")).resolveCodexBindingAppServerConnection(params, catalogHomes.tryGetRuntime());
+	return (await import("./binding-connection.runtime-Dap4qmsz.mjs")).resolveCodexBindingAppServerConnection(params, catalogHomes.tryGetRuntime());
 }
 //#endregion
 export { setCodexCatalogConnectionHomeResolver as a, resolveCodexBindingAppServerConnection as i, binding_connection_exports as n, requireCodexSupervisionModelSelection as r, assertCodexSessionRuntimeOwnership as t };

package/dist/.setup/{binding-connection.runtime-RcWR3vQu.mjs → binding-connection.runtime-Dap4qmsz.mjs}

@@ -1,7 +1,7 @@
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { n as resolveCodexAppServerLocalHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 //#region extensions/codex/src/app-server/binding-connection.runtime.ts
 /** Resolves connection and auth ownership exclusively from the private thread binding. */
 async function resolveCodexBindingAppServerConnection(params, discoverHomes) {

package/dist/.setup/{bounded-turn-BQkmyyjB.mjs → bounded-turn-DnxnHHZP.mjs}

@@ -2,16 +2,16 @@ import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { a as resolveCodexPrivateLauncher, i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
 import { d as readCodexEffectiveConfig } from "./config-options-DMFZkd3X.mjs";
 import { a as codexPrewriteRejectionCause } from "./rpc-error-DemqqaxE.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
-import { C as createCodexElicitationResponse, g as assertCodexTurnStartResponse, h as assertCodexThreadStartResponse, y as readCodexErrorNotification } from "./client--P8jwXvA.mjs";
-import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-B2z0RIeF.mjs";
-import { i as readModelListResult } from "./models-CmOBxsKF.mjs";
-import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-B0UI3f1D.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
+import { C as createCodexElicitationResponse, g as assertCodexTurnStartResponse, h as assertCodexThreadStartResponse, y as readCodexErrorNotification } from "./client-Bxe8bl-K.mjs";
+import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-CNm9tN72.mjs";
+import { i as readModelListResult } from "./models-HgvyBseb.mjs";
+import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-Ds92xu17.mjs";
 import { n as resolveCodexAppServerReasoningEffort } from "./reasoning-effort-CS9kKWB9.mjs";
-import { n as buildCodexRingZeroThreadConfigPatch, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames } from "./thread-requests-BjawdIVV.mjs";
-import { a as resolveCodexPromptError } from "./usage-limit-error-BdNbGJC3.mjs";
+import { n as buildCodexRingZeroThreadConfigPatch, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames } from "./thread-requests-6Dy8hyXF.mjs";
+import { a as resolveCodexPromptError } from "./usage-limit-error-A0XP58jR.mjs";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import path from "node:path";
@@ -146,7 +146,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		assertCurrent: params.assertCurrent,
 		...params.signal ? { abandonSignal: params.signal } : {}
 	};
-	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-CkyTrNB8.mjs").then((n) => n.m).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-BelwlhWf.mjs").then((n) => n.m).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		...clientOptions,
 		authProfileStore: params.authProfileStore
 	}));

package/dist/.setup/{bounded-turn-isolation-D8CDrAVX.mjs → bounded-turn-isolation-Iz8EsqFg.mjs}

@@ -1,8 +1,8 @@
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { i as resolveCodexAppServerHomeScope } from "./config-options-DMFZkd3X.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 //#region extensions/codex/src/app-server/bounded-turn-isolation.ts
 function resolveCodexBoundedTurnIsolation(options) {
 	const pluginConfig = readCodexPluginConfig(options.pluginConfig);

package/dist/.setup/{build-state-CjLCC0wm.mjs → build-state-CpGXWSN4.mjs}

@@ -1,5 +1,5 @@
 //#region extensions/codex/package.json
-var version = "2026.10.10-beta.2";
+var version = "2026.10.10-beta.4";
 //#endregion
 //#region extensions/codex/src/build-state.ts
 /**

package/dist/.setup/{client--P8jwXvA.mjs → client-Bxe8bl-K.mjs}

@@ -1,14 +1,14 @@
-import { a as readCodexCatalogDecodeRoute, c as isRpcResponse, i as listenCodexAppServerLines, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as createCodexAppServerMessageWriter, s as redactCodexAppServerLinePreview } from "./client-catalog-response-CsDxVVOZ.mjs";
+import { a as readCodexCatalogDecodeRoute, c as isRpcResponse, i as listenCodexAppServerLines, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as createCodexAppServerMessageWriter, s as redactCodexAppServerLinePreview } from "./client-catalog-response-D-dEl0Ac.mjs";
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { a as closeCodexAppServerTransport, l as getCodexAppServerRegisteredTransportIdentity, o as closeCodexAppServerTransportAndWait, s as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-Bq160Dhv.mjs";
+import { a as closeCodexAppServerTransport, l as getCodexAppServerRegisteredTransportIdentity, o as closeCodexAppServerTransportAndWait, s as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-BVeWgcK6.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, n as CodexAppServerLocalRequestCancellationError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, t as CODEX_APP_SERVER_OVERLOADED_ERROR_CODE } from "./rpc-error-DemqqaxE.mjs";
-import { n as codexCatalogSourceForClient, o as recordCodexCatalogResponseSource, t as closeCodexCatalogClientSource } from "./session-catalog-source-z_mNyQdX.mjs";
-import { i as reuseCodexCatalogPreview } from "./session-catalog-native-projection-BqBYi6kV.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { n as codexCatalogSourceForClient, o as recordCodexCatalogResponseSource, t as closeCodexCatalogClientSource } from "./session-catalog-source-BW46oF7X.mjs";
+import { i as reuseCodexCatalogPreview } from "./session-catalog-native-projection-HAmuA2-G.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { codexCatalogPageWorkerEntrypoint } from "../catalog-page-worker-entrypoint.js";
-import { a as isUnsupportedCodexAppServerVersionError, i as createCodexInitializeDiagnostics, n as buildCodexAppServerInitializeParams, r as buildCodexAppServerRuntimeIdentity, t as assertSupportedCodexAppServerVersion } from "./client-initialize-CjgZcX61.mjs";
-import { t as createWebSocketTransport } from "./transport-websocket-0YqiI_MH.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { a as isUnsupportedCodexAppServerVersionError, i as createCodexInitializeDiagnostics, n as buildCodexAppServerInitializeParams, r as buildCodexAppServerRuntimeIdentity, t as assertSupportedCodexAppServerVersion } from "./client-initialize-CPNmLwhL.mjs";
+import { t as createWebSocketTransport } from "./transport-websocket-2Y-cL8kD.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { isRecord, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { normalizeJsonSchemaForTypeBox } from "openclaw/plugin-sdk/json-schema-runtime";

package/dist/.setup/{client-catalog-response-CsDxVVOZ.mjs → client-catalog-response-D-dEl0Ac.mjs}

@@ -1,5 +1,5 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-BqBYi6kV.mjs";
+import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-HAmuA2-G.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-registration";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";

package/dist/.setup/{client-initialize-CjgZcX61.mjs → client-initialize-CPNmLwhL.mjs}

@@ -1,4 +1,4 @@
-import { _ as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, g as CODEX_APP_SERVER_VERSION } from "./managed-binary-DbKvGXKl.mjs";
+import { _ as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, g as CODEX_APP_SERVER_VERSION } from "./managed-binary-BwzkwiGo.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parse } from "semver";
 import { OPENCLAW_VERSION, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{command-dispatch-DqaVBeR3.mjs → command-dispatch-BD9-WK7I.mjs}

@@ -8,7 +8,7 @@ async function handleCodexCommand(ctx, options) {
 	};
 	const { resolvePluginConfig, ...subcommandOptions } = options;
 	try {
-		const { handleCodexSubcommand } = await import("./command-handlers-i6mEjvfo.mjs");
+		const { handleCodexSubcommand } = await import("./command-handlers-g046iNsp.mjs");
 		return await handleCodexSubcommand(commandContext, {
 			...subcommandOptions,
 			pluginConfig: resolvePluginConfig?.() ?? subcommandOptions.pluginConfig

package/dist/.setup/{command-handlers-i6mEjvfo.mjs → command-handlers-g046iNsp.mjs}

@@ -1,38 +1,38 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey } from "./session-binding-record-C_THntMe.mjs";
+import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey } from "./session-binding-record-BpWF2Sus.mjs";
 import { r as isCodexFastServiceTier } from "./config-utils-DN_YT7dE.mjs";
-import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-BW1YeaIk.mjs";
+import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { n as withCodexConversationThreadActivity } from "./thread-ownership-queue-CeyYScUC.mjs";
 import { a as canMutateCodexHost, i as assertCodexHostOwnerCurrent, n as CODEX_HOST_INSPECTION_AUTH_ERROR, o as hasCodexAdminScope, r as CODEX_NATIVE_EXECUTION_AUTH_ERROR, t as CODEX_FULL_PERMISSIONS_AUTH_ERROR } from "./command-authorization-AikPDtcc.mjs";
 import { l as formatRelativeDuration, s as summarizeCodexAccountUsage } from "./rate-limits-BpfURnuy.mjs";
 import { a as formatCodexAccountLine, c as formatCodexTextForDisplay, d as formatModels, f as formatSkills, i as formatAccount, l as formatComputerUseStatus, m as isLikelyEmailAddress, n as buildHelp, o as formatCodexDisplayText, p as formatThreads, r as escapeCodexChatText, s as formatCodexStatus, t as CODEX_RESUME_SAFE_THREAD_ID_PATTERN, u as formatList } from "./command-formatters-B_7-QZ1c.mjs";
-import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-khgW0n-o.mjs";
+import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-CAKQCqTL.mjs";
 import { r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
 import { t as CODEX_CONTROL_METHODS } from "./capabilities-DAS-JX1z.mjs";
 import { n as filterCodexMarketplacePlugins, r as parseCodexPluginMarketplaceId, t as discoverCodexMarketplacePlugins } from "./plugin-marketplace-discovery-BblHM3DU.mjs";
-import { o as formatCodexCliSessions } from "./node-cli-sessions-BuJnBnEq.mjs";
+import { o as formatCodexCliSessions } from "./node-cli-sessions-C59CAyDh.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-GTgUj9pi.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-C6U8q2uz.mjs";
-import { n as findCodexMarketplacePluginSummary, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DE9wcaeH.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-hJD5mFkM.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-DTgD_jsY.mjs";
+import { n as findCodexMarketplacePluginSummary, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-BVP15PmN.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { A as hasCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, Z as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, o as getLeasedSharedCodexAppServerClient } from "./shared-client-CkyTrNB8.mjs";
-import { f as assertCodexThreadAcceptsDirectInput, i as isCodexAppServerIndeterminateRequestCancellationError, m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-830RLAJW.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CmOBxsKF.mjs";
-import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-CXPWe-hl.mjs";
-import { i as resolveCodexSessionBinding, n as createCodexSessionGenerationSupersededError } from "./session-binding-BgsWcbdY.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
-import { n as prepareCodexNativeExecutionBlock, r as prepareCodexNativeSandboxBlock } from "./sandbox-guard-DneAfNye.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DYtvZ5Ay.mjs";
+import { A as hasCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, et as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, o as getLeasedSharedCodexAppServerClient } from "./shared-client-BelwlhWf.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, i as isCodexAppServerIndeterminateRequestCancellationError, m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client-Bxe8bl-K.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-BY7Fm501.mjs";
+import { n as listAllCodexAppServerModels } from "./models-HgvyBseb.mjs";
+import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-Cj2k3W9n.mjs";
+import { i as resolveCodexSessionBinding, n as createCodexSessionGenerationSupersededError } from "./session-binding-Dg0B6Zua.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
+import { n as prepareCodexNativeExecutionBlock, r as prepareCodexNativeSandboxBlock } from "./sandbox-guard-CrzVgQUn.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-j-BAwvSk.mjs";
 import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-BqC-a6Fb.mjs";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-YUnu0JVx.mjs";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-C0qJq1rh.mjs";
 import { t as readCodexExperimentalFeature } from "./experimental-features-uGnVDtp-.mjs";
-import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-B65jEc0r.mjs";
-import { a as readCodexConversationActiveTurn, c as setCodexConversationModel, d as stopCodexConversationTurn, i as parseCodexPermissionsModeArg, l as setCodexConversationPermissions, n as formatPermissionsMode, r as parseCodexFastModeArg, s as setCodexConversationFastMode, u as steerCodexConversationTurn } from "./conversation-control-B2EpVZEb.mjs";
+import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-CwpCTOrX.mjs";
+import { a as readCodexConversationActiveTurn, c as setCodexConversationModel, d as stopCodexConversationTurn, i as parseCodexPermissionsModeArg, l as setCodexConversationPermissions, n as formatPermissionsMode, r as parseCodexFastModeArg, s as setCodexConversationFastMode, u as steerCodexConversationTurn } from "./conversation-control-CTZTP_rE.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{command-rpc-B65jEc0r.mjs → command-rpc-CwpCTOrX.mjs}

@@ -1,18 +1,18 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
 import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-DAS-JX1z.mjs";
-import { a as withCodexAppServerJsonClient, r as requestCodexAppServerJson } from "./request-C6U8q2uz.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { a as withCodexAppServerJsonClient, r as requestCodexAppServerJson } from "./request-DTgD_jsY.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { Q as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CkyTrNB8.mjs";
-import { a as isCodexAppServerIndeterminateTransportError, i as isCodexAppServerIndeterminateRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-830RLAJW.mjs";
-import { r as listCodexAppServerModels } from "./models-CmOBxsKF.mjs";
-import { n as createCodexSessionGenerationSupersededError } from "./session-binding-BgsWcbdY.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-BelwlhWf.mjs";
+import { a as isCodexAppServerIndeterminateTransportError, i as isCodexAppServerIndeterminateRequestCancellationError } from "./client-Bxe8bl-K.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-BY7Fm501.mjs";
+import { r as listCodexAppServerModels } from "./models-HgvyBseb.mjs";
+import { n as createCodexSessionGenerationSupersededError } from "./session-binding-Dg0B6Zua.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-CZxguYjc.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { prepareAgentRuntimeAuth } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{compact-AO2H4RJe.mjs → compact-B-qCn3BG.mjs}

@@ -1,23 +1,23 @@
 import { n as readCodexRuntimeModelId } from "./model-runtime-BdqzOMkU.mjs";
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { g as sessionBindingIdentity } from "./session-binding-record-C_THntMe.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId, k as waitForCodexAppServerClientExit } from "./auth-cache-key-BW1YeaIk.mjs";
+import { g as sessionBindingIdentity } from "./session-binding-record-BpWF2Sus.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId, k as waitForCodexAppServerClientExit } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-meta-Lkm5Lpf4.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-GTgUj9pi.mjs";
-import { B as retainCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, I as protectCodexAppServerLiveThread, V as revertCodexAppServerLiveThreadInstructions, a as createIsolatedCodexAppServerClient, p as retainSharedCodexAppServerClientIfCurrent, w as getCodexInferenceThreadQualification } from "./shared-client-CkyTrNB8.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-hJD5mFkM.mjs";
+import { D as consumeCodexAppServerLiveThread, H as revertCodexAppServerLiveThreadInstructions, I as protectCodexAppServerLiveThread, V as retainCodexAppServerLiveThread, a as createIsolatedCodexAppServerClient, p as retainSharedCodexAppServerClientIfCurrent, w as getCodexInferenceThreadQualification } from "./shared-client-BelwlhWf.mjs";
 import "./responses-oauth-CCV7aVYF.mjs";
-import { i as isCodexAppServerIndeterminateRequestCancellationError, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { c as readCodexNotificationTurnId, s as readCodexNotificationThreadId } from "./turn-router-BGj67FMK.mjs";
-import { c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { i as isCodexAppServerIndeterminateRequestCancellationError, o as isCodexAppServerPrewriteRequestCancellationError } from "./client-Bxe8bl-K.mjs";
+import { c as readCodexNotificationTurnId, s as readCodexNotificationThreadId } from "./turn-router-B62dF4CM.mjs";
+import { c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
 import { n as readCodexThreadContextSnapshot, s as readCodexNotificationItem } from "./event-projector-usage-CBY0Hkga.mjs";
-import { i as resolveCodexSessionBinding } from "./session-binding-BgsWcbdY.mjs";
-import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
+import { i as resolveCodexSessionBinding } from "./session-binding-Dg0B6Zua.mjs";
+import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-C3CIIaZG.mjs";
-import { n as prepareCodexNativeExecutionBlock } from "./sandbox-guard-DneAfNye.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DYtvZ5Ay.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-LJd5_D5F.mjs";
+import { n as prepareCodexNativeExecutionBlock } from "./sandbox-guard-CrzVgQUn.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-j-BAwvSk.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-CZxguYjc.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";

package/dist/.setup/{computer-use-YUnu0JVx.mjs → computer-use-C0qJq1rh.mjs}

@@ -1,12 +1,12 @@
 import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { o as resolveCodexComputerUseConfig } from "./config-options-DMFZkd3X.mjs";
-import { a as isManagedCodexDesktopCommand, b as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-DbKvGXKl.mjs";
+import { a as isManagedCodexDesktopCommand, b as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-BwzkwiGo.mjs";
 import { n as describeControlFailure } from "./capabilities-DAS-JX1z.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
-import { $ as resolveBundledComputerUseMarketplacePath, X as reconcileCodexComputerUseStartArtifacts, at as assertNotSymlink, c as readCodexAppServerClientDesktopGeneration, et as resolveClientManagedBundledMarketplacePath, f as releaseLeasedSharedCodexAppServerClient, h as withCodexAppServerClientRequestScope, it as ensureCodexComputerUseSharedPluginCache, nt as isLegacyCodexComputerUsePluginDisabled, o as getLeasedSharedCodexAppServerClient, rt as resolveManagedCodexComputerUseConfig, tt as hasLegacyCodexComputerUseMcpPolicy, u as readCodexAppServerClientProcessIdentity } from "./shared-client-CkyTrNB8.mjs";
-import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-DTgD_jsY.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
+import { $ as reconcileCodexComputerUseStartArtifacts, at as isLegacyCodexComputerUsePluginDisabled, c as readCodexAppServerClientDesktopGeneration, ct as assertNotSymlink, f as releaseLeasedSharedCodexAppServerClient, h as withCodexAppServerClientRequestScope, it as hasLegacyCodexComputerUseMcpPolicy, nt as resolveBundledComputerUseMarketplacePath, o as getLeasedSharedCodexAppServerClient, ot as resolveManagedCodexComputerUseConfig, rt as resolveClientManagedBundledMarketplacePath, st as ensureCodexComputerUseSharedPluginCache, u as readCodexAppServerClientProcessIdentity } from "./shared-client-BelwlhWf.mjs";
+import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{config-BfrAlTMT.mjs → config-BZYTxljj.mjs}

@@ -3,8 +3,8 @@ import { a as readExecAsk, l as readRecord, o as readExecSecurity } from "./conf
 import "./config-parsing-DsWSCPHO.mjs";
 import "./auth-start-options-BPIPeEX8.mjs";
 import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-DMFZkd3X.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";

package/dist/.setup/{config-runtime-BZRizyuG.mjs → config-runtime-CqCrHEAU.mjs}

@@ -1,5 +1,5 @@
 import { r as createCodexAppServerConfig } from "./config-options-DMFZkd3X.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({

package/dist/.setup/{conversation-binding-CfnUR-IM.mjs → conversation-binding-CXGGbblk.mjs}

@@ -1,29 +1,29 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-C_THntMe.mjs";
+import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-BpWF2Sus.mjs";
 import { d as readCodexRequirementsToml } from "./config-security-clxAZYWX.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-DMFZkd3X.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BW1YeaIk.mjs";
-import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-khgW0n-o.mjs";
-import { o as isCodexAppServerOverloadError } from "./rpc-error-DemqqaxE.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-Do2ZQrNP.mjs";
+import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-CAKQCqTL.mjs";
+import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-DemqqaxE.mjs";
 import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-i-FVpyha.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, o as resolveModelBackedReviewerPolicyProvider } from "./auth-profile-auwzSwwy.mjs";
-import { A as hasCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, d as releaseCodexAppServerClientLease, h as withCodexAppServerClientRequestScope, o as getLeasedSharedCodexAppServerClient, z as releaseCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
-import { f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, l as CodexThreadDirectInputError } from "./client--P8jwXvA.mjs";
-import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-BGj67FMK.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-B0UI3f1D.mjs";
-import "./session-binding-BgsWcbdY.mjs";
+import { A as hasCodexAppServerLiveThread, B as releaseCodexAppServerLiveThread, D as consumeCodexAppServerLiveThread, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, d as releaseCodexAppServerClientLease, h as withCodexAppServerClientRequestScope, o as getLeasedSharedCodexAppServerClient } from "./shared-client-BelwlhWf.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, l as CodexThreadDirectInputError } from "./client-Bxe8bl-K.mjs";
+import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-B62dF4CM.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-Ds92xu17.mjs";
+import "./session-binding-Dg0B6Zua.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DxposL4X.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
 import { i as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-D09tLP-u.mjs";
-import { i as resolveCodexNativeExecutionBlock, t as assertNativeConversationApprovalPolicySupported } from "./sandbox-guard-DneAfNye.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
+import { i as resolveCodexNativeExecutionBlock, t as assertNativeConversationApprovalPolicySupported } from "./sandbox-guard-CrzVgQUn.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-CZxguYjc.mjs";
 import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-CD2MAWU8.mjs";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Cog6mm2i.mjs";
-import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-B2EpVZEb.mjs";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-CFCEWj0w.mjs";
+import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-CTZTP_rE.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -371,7 +371,7 @@ async function bindThread(params, threadId) {
 		release: resolved.release
 	};
 }
-async function prepareCodexConversationBinding(params, options = {}) {
+async function prepareCodexConversationBinding(params) {
 	const identity = {
 		kind: "conversation",
 		bindingId: params.data.bindingId
@@ -381,7 +381,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 		const current = await params.bindingStore.readAsync(identity);
 		if (current?.threadId !== snapshot?.threadId || current?.clientId !== snapshot?.clientId) throw new Error("Codex conversation binding changed before preparation.");
 		const requested = params.data.start && current?.conversationStartId !== params.data.start.id ? params.data.start : void 0;
-		if (current && !requested && !options.forceNew) return;
+		if (current && !requested) return;
 		const sourceIdentity = params.data.source ? sessionBindingIdentity({
 			agentId: params.data.source.agentId,
 			sessionId: params.data.source.sessionId,
@@ -413,7 +413,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 			agentId: params.data.source?.agentId ?? params.data.agentId
 		};
 		const threadId = requested?.threadId;
-		const sourceAuthority = await bindThread(bindingParams, options.forceNew ? void 0 : threadId);
+		const sourceAuthority = await bindThread(bindingParams, threadId);
 		using _ = { [Symbol.dispose]: sourceAuthority.release };
 		await sourceAuthority.assertCurrent();
 		const sourceGuard = sourceAuthority.source;
@@ -613,6 +613,12 @@ function readLocalMediaPath(value) {
 //#endregion
 //#region extensions/codex/src/conversation-binding.ts
 const DEFAULT_BOUND_TURN_TIMEOUT_MS = 12e5;
+var CodexConversationUnloadedThreadError = class extends Error {
+	constructor(threadId, cause) {
+		super(cause.message, { cause });
+		this.threadId = threadId;
+	}
+};
 async function runBoundTurn(params) {
 	const agentLookup = buildCodexConversationAgentLookup({
 		agentDir: params.data.agentDir,
@@ -624,6 +630,7 @@ async function runBoundTurn(params) {
 	};
 	const binding = await params.bindingStore.readAsync(identity);
 	if (!binding?.threadId) throw new Error("bound Codex conversation has no thread binding");
+	if (params.resumeThreadId && binding.threadId !== params.resumeThreadId) throw new Error("Codex conversation binding changed before recovery; review it before resending.");
 	return await withExclusiveCodexAppServerThread({
 		bindingStore: params.bindingStore,
 		identity,
@@ -656,6 +663,7 @@ async function runBoundTurn(params) {
 			const permissionProfile = runtime.networkProxy?.profileName;
 			const networkProxyConfigFingerprint = runtime.networkProxy?.configFingerprint;
 			const networkProxyBindingChanged = binding.networkProxyProfileName !== permissionProfile || binding.networkProxyConfigFingerprint !== networkProxyConfigFingerprint;
+			if (params.resumeThreadId && networkProxyBindingChanged) throw new Error("Codex conversation policy changed before recovery; rebind the conversation and resend your message.");
 			const serviceTier = binding.serviceTier ?? runtime.serviceTier;
 			let useStickyNetworkProfile = permissionProfile !== void 0 && !networkProxyBindingChanged;
 			assertNativeConversationApprovalPolicySupported(runtime);
@@ -716,7 +724,7 @@ async function runBoundTurn(params) {
 						ownsNativeSubscription = true;
 					}
 				}
-				if (networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !incognito && !liveThreadOwnership) {
+				if (params.resumeThreadId || networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !incognito && !liveThreadOwnership) {
 					if (!networkProxyBindingChanged && binding.clientId === client.getInstanceId()) await assertResumeInputAllowed();
 					const result = await withCodexAppServerClientRequestScope({
 						lease: clientLease,
@@ -838,6 +846,9 @@ async function runBoundTurn(params) {
 				}, {
 					timeoutMs: runtime.requestTimeoutMs,
 					withCurrent
+				}).catch((error) => {
+					if (!incognito && error instanceof CodexAppServerRpcError && error.method === "turn/start" && error.code === -32600 && error.message === `thread not found: ${threadId}`) throw new CodexConversationUnloadedThreadError(threadId, error);
+					throw error;
 				})).turn.id;
 				activeTurnCleanup = trackCodexConversationActiveTurn({
 					identity,
@@ -852,6 +863,7 @@ async function runBoundTurn(params) {
 				turnSucceeded = true;
 				return { text: replyText || "Codex completed without a text reply." };
 			} catch (error) {
+				if (params.resumeThreadId && isCodexThreadReadMissingError(error, threadId)) throw new Error("The bound Codex thread is unavailable. Your message was not submitted; rebind the conversation and resend it.", { cause: error });
 				if (isCodexAppServerOverloadError(error) && error.method === "thread/resume") throw error;
 				if (error instanceof CodexThreadDirectInputError) {
 					if (incognito && ownsNativeSubscription) {
@@ -920,15 +932,12 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 	try {
 		return await runBoundTurn(params);
 	} catch (error) {
-		if (!isCodexThreadNotFoundError(error)) throw error;
-		await prepareCodexConversationBinding(params, { forceNew: true });
-		return await runBoundTurn(params);
+		if (!(error instanceof CodexConversationUnloadedThreadError)) throw error;
+		return await runBoundTurn({
+			...params,
+			resumeThreadId: error.threadId
+		});
 	}
 }
-function isCodexThreadNotFoundError(error) {
-	if (isCodexAppServerOverloadError(error) || error instanceof CodexAppServerUnsafeSubscriptionError) return false;
-	const message = formatErrorMessage(error);
-	return /\bthread not found:/iu.test(message) || /\bbound Codex conversation has no thread binding\b/u.test(message);
-}
 //#endregion
 export { runBoundTurnWithMissingThreadRecovery };

package/dist/.setup/{conversation-binding-data-khgW0n-o.mjs → conversation-binding-data-CAKQCqTL.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonBlankString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import process from "node:process";