@openclaw/codex 2026.10.10-beta.2 → 2026.10.10-beta.4

package/dist/.setup/{side-question-DHPWKgO3.mjs → side-question-Bt2vXr-h.mjs}

@@ -1,36 +1,36 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { g as sessionBindingIdentity } from "./session-binding-record-C_THntMe.mjs";
+import { g as sessionBindingIdentity } from "./session-binding-record-BpWF2Sus.mjs";
 import { c as withMcpElicitationsApprovalPolicy, d as readCodexRequirementsToml, n as hasCodexMcpToolApprovalOverrides, s as shouldAutoApproveCodexAppServerApprovals } from "./config-security-clxAZYWX.mjs";
 import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox, u as isCodexSandboxExecServerEnabled } from "./config-parsing-DsWSCPHO.mjs";
 import { i as resolveCodexAppServerHomeScope, l as resolveCodexModelBackedReviewerPolicyContext } from "./config-options-DMFZkd3X.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BW1YeaIk.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-BpfURnuy.mjs";
 import { c as isMissingCodexParentThreadError } from "./rpc-error-DemqqaxE.mjs";
-import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection } from "./binding-connection-GTgUj9pi.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BfrAlTMT.mjs";
-import { C as getCodexInferenceThread, Q as resolveCodexAppServerPreparedAuthHandoff, W as readRecentCodexRateLimits, Y as requireCodexThreadForkSettings, d as releaseCodexAppServerClientLease, h as withCodexAppServerClientRequestScope, o as getLeasedSharedCodexAppServerClient, w as getCodexInferenceThreadQualification } from "./shared-client-CkyTrNB8.mjs";
-import { C as createCodexElicitationResponse, D as toCodexDynamicToolProtocolResponse, O as resolveCodexToolAbortTerminalReason, T as resolveDynamicToolCallTimeoutMs, g as assertCodexTurnStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, p as assertCodexThreadForkResponse, r as isCodexAppServerApprovalRequest, v as readCodexDynamicToolCallParams, w as handleDynamicToolCallWithTimeout } from "./client--P8jwXvA.mjs";
-import { d as terminateCodexBackgroundTerminals, f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-B2z0RIeF.mjs";
-import { d as mergeCodexThreadConfigs, f as refreshCodexPluginAppApprovalPolicy } from "./project-doc-thread-config-B0UI3f1D.mjs";
+import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection } from "./binding-connection-hJD5mFkM.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BZYTxljj.mjs";
+import { C as getCodexInferenceThread, G as readRecentCodexRateLimits, Q as requireCodexThreadForkSettings, d as releaseCodexAppServerClientLease, h as withCodexAppServerClientRequestScope, o as getLeasedSharedCodexAppServerClient, tt as resolveCodexAppServerPreparedAuthHandoff, w as getCodexInferenceThreadQualification } from "./shared-client-BelwlhWf.mjs";
+import { C as createCodexElicitationResponse, D as toCodexDynamicToolProtocolResponse, O as resolveCodexToolAbortTerminalReason, T as resolveDynamicToolCallTimeoutMs, g as assertCodexTurnStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, p as assertCodexThreadForkResponse, r as isCodexAppServerApprovalRequest, v as readCodexDynamicToolCallParams, w as handleDynamicToolCallWithTimeout } from "./client-Bxe8bl-K.mjs";
+import { d as terminateCodexBackgroundTerminals, f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-CNm9tN72.mjs";
+import { d as mergeCodexThreadConfigs, f as refreshCodexPluginAppApprovalPolicy } from "./project-doc-thread-config-Ds92xu17.mjs";
 import { n as resolveCodexAppServerReasoningEffort, t as readCodexSupportedReasoningEfforts } from "./reasoning-effort-CS9kKWB9.mjs";
-import { h as resolveCodexWebSearchPlan, r as buildCodexRuntimeThreadConfig, z as resolveCodexDynamicToolsLoading } from "./thread-requests-BjawdIVV.mjs";
-import { i as resolveCodexSessionBinding } from "./session-binding-BgsWcbdY.mjs";
+import { h as resolveCodexWebSearchPlan, r as buildCodexRuntimeThreadConfig, z as resolveCodexDynamicToolsLoading } from "./thread-requests-6Dy8hyXF.mjs";
+import { i as resolveCodexSessionBinding } from "./session-binding-Dg0B6Zua.mjs";
 import { i as resolveCodexAppServerThreadModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DxposL4X.mjs";
-import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-C3CIIaZG.mjs";
+import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-LJd5_D5F.mjs";
 import { r as prepareCodexNativeExecutionPolicyForRun } from "./native-execution-policy-D09tLP-u.mjs";
-import { i as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DneAfNye.mjs";
-import { i as assertCodexSupervisionThreadLineage, n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy } from "./thread-policy-DYtvZ5Ay.mjs";
+import { i as resolveCodexNativeExecutionBlock } from "./sandbox-guard-CrzVgQUn.mjs";
+import { i as assertCodexSupervisionThreadLineage, n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy } from "./thread-policy-j-BAwvSk.mjs";
 import { o as runCodexCleanupStep } from "./run-attempt-lifecycle-DN-ATDp9.mjs";
 import { t as CODEX_INFERENCE_GENERATION_KEY } from "./inference-metadata-CYFWLHVk.mjs";
-import "./inference-context-HRw3PDwn.mjs";
-import { a as resolveCodexExternalSandboxPolicyForOpenClawSandbox, c as shouldEnableCodexAppServerNativeToolSurface, l as shouldRequireCodexSandboxExecServerEnvironment, o as resolveCodexMessageToolProvider, s as resolveCodexSandboxEnvironmentSelection, t as buildDynamicTools } from "./dynamic-tool-build-DOub3CB5.mjs";
-import { a as buildCodexNativeHookRelayDisabledConfig, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, r as assertCodexNativeHookRelayAllowed, u as resolveCodexNativeHookRelayTtlMs } from "./native-hook-relay-CocOW9YS.mjs";
+import "./inference-context-DYpvCEF3.mjs";
+import { a as resolveCodexExternalSandboxPolicyForOpenClawSandbox, c as shouldEnableCodexAppServerNativeToolSurface, l as shouldRequireCodexSandboxExecServerEnvironment, o as resolveCodexMessageToolProvider, s as resolveCodexSandboxEnvironmentSelection, t as buildDynamicTools } from "./dynamic-tool-build-BzTaCmlT.mjs";
+import { a as buildCodexNativeHookRelayDisabledConfig, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, r as assertCodexNativeHookRelayAllowed, u as resolveCodexNativeHookRelayTtlMs } from "./native-hook-relay-COcu2b4l.mjs";
 import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-CD2MAWU8.mjs";
-import { a as handleCodexAppServerApprovalRequest, c as createCodexNativePreToolUseFailureBuffer, d as buildCodexTemporalAdditionalContext, g as buildCodexUserInput, i as createCodexDynamicToolDiagnostics, o as ensureCodexSandboxExecServerEnvironment, r as routeCodexAppServerElicitationRequest, s as releaseCodexSandboxExecServerEnvironment, t as createCodexDynamicToolBridge, y as CodexNativeToolLifecycleProjector } from "./dynamic-tools-Us5mvq_N.mjs";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Cog6mm2i.mjs";
-import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-C7pYYpvh.mjs";
+import { a as handleCodexAppServerApprovalRequest, c as createCodexNativePreToolUseFailureBuffer, d as buildCodexTemporalAdditionalContext, g as buildCodexUserInput, i as createCodexDynamicToolDiagnostics, o as ensureCodexSandboxExecServerEnvironment, r as routeCodexAppServerElicitationRequest, s as releaseCodexSandboxExecServerEnvironment, t as createCodexDynamicToolBridge, y as CodexNativeToolLifecycleProjector } from "./dynamic-tools-BALvjDwR.mjs";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-CFCEWj0w.mjs";
+import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-DMfkFwZi.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{source-63MLSmLJ.mjs → source-DQN8P65G.mjs}

@@ -1,8 +1,8 @@
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-C6U8q2uz.mjs";
-import { a as marketplaceRef, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DE9wcaeH.mjs";
-import "./config-BfrAlTMT.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-DTgD_jsY.mjs";
+import { a as marketplaceRef, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-BVP15PmN.mjs";
+import "./config-BZYTxljj.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { asNonArrayRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import os from "node:os";

package/dist/.setup/{thread-lifecycle-run-zCXYFW8W.mjs → thread-lifecycle-run-aBfXzIGf.mjs}

@@ -1,11 +1,11 @@
 import { n as flattenCodexDynamicToolFunctions, r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { n as matchesPendingSupervisionBranch } from "./session-binding-record-codec-DvmOI7g_.mjs";
-import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-C_THntMe.mjs";
+import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-BpWF2Sus.mjs";
 import { l as fingerprintCodexPolicy } from "./config-security-clxAZYWX.mjs";
 import { f as resolveCodexPluginsPolicy } from "./config-parsing-DsWSCPHO.mjs";
 import { n as resolveCodexAppServerLocalHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { d as readCodexEffectiveConfig, s as assertCodexModelBackedReviewerEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DMFZkd3X.mjs";
-import { T as retainSharedCodexAppServerClientByInstanceId, f as getCurrentSharedClientEntry } from "./auth-cache-key-BW1YeaIk.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId, f as getCurrentSharedClientEntry } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-CeyYScUC.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-DemqqaxE.mjs";
 import { t as codexCatalogHomeId } from "./session-catalog-home-id-vlih0B_g.mjs";
@@ -13,30 +13,30 @@ import { r as withAbortableTimeout } from "./timeout-D0mEWSGG.mjs";
 import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-i-FVpyha.mjs";
 import { a as defaultCodexAppInventoryCache, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-DRb-niJc.mjs";
 import { n as readCodexSessionMeta } from "./session-catalog-provenance-Dg9s12z-.mjs";
-import { t as assertCodexSessionRuntimeOwnership } from "./binding-connection-GTgUj9pi.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
-import { c as resolveRecoverableCodexPluginConfigKeys } from "./plugin-inventory-DE9wcaeH.mjs";
-import "./config-BfrAlTMT.mjs";
+import { t as assertCodexSessionRuntimeOwnership } from "./binding-connection-hJD5mFkM.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-DTgD_jsY.mjs";
+import { c as resolveRecoverableCodexPluginConfigKeys } from "./plugin-inventory-BVP15PmN.mjs";
+import "./config-BZYTxljj.mjs";
 import { c as resolveCodexContextEngineProjectionMaxChars } from "./context-engine-projection-PIeLSnR-.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-auwzSwwy.mjs";
-import { C as getCodexInferenceThread, D as consumeCodexAppServerLiveThread, H as unsubscribeCodexAppServerLiveThread, K as createCodexEphemeralThreadPolicy, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, P as isCodexAppServerLiveThreadProtected, R as readCodexLiveThreadEphemeralPolicy, S as bindCodexInferenceThread, T as prepareCodexInferenceThreadConfig, _ as CodexThreadBindingConflictError, g as CodexAdoptedThreadActiveError, j as hasCodexAppServerSiblingThreadWork, q as recordCodexThreadForkSettings, t as captureCodexAppServerClientLifetime, v as CodexThreadClientReplacementError, w as getCodexInferenceThreadQualification, x as assertCodexInferenceRouteConfig, y as CodexThreadStartRequestError, z as releaseCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
+import { B as releaseCodexAppServerLiveThread, C as getCodexInferenceThread, D as consumeCodexAppServerLiveThread, J as isThreadBackgroundOnly, L as readCodexAppServerThreadOwnershipState, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, P as isCodexAppServerLiveThreadProtected, S as bindCodexInferenceThread, T as prepareCodexInferenceThreadConfig, U as unsubscribeCodexAppServerLiveThread, X as recordCodexThreadForkSettings, Y as wasCodexAppServerThreadClosed, _ as CodexThreadBindingConflictError, g as CodexAdoptedThreadActiveError, j as hasCodexAppServerSiblingThreadWork, q as createCodexEphemeralThreadPolicy, t as captureCodexAppServerClientLifetime, v as CodexThreadClientReplacementError, w as getCodexInferenceThreadQualification, x as assertCodexInferenceRouteConfig, y as CodexThreadStartRequestError, z as readCodexLiveThreadEphemeralPolicy } from "./shared-client-BelwlhWf.mjs";
 import "./responses-oauth-CCV7aVYF.mjs";
-import { M as getCodexAppServerClientInstanceId, P as resolveCodexAppServerClientInstanceId, S as resolveCodexThreadRolloutPath, _ as assertExactSupervisionModelSelection, f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, p as assertCodexThreadForkResponse, s as isCodexAppServerRequestTimeoutError, x as readSupervisionResponseThreadId } from "./client--P8jwXvA.mjs";
-import { r as hasCodexAppServerSiblingRouteWork } from "./turn-router-BGj67FMK.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CmOBxsKF.mjs";
-import { a as buildCodexPluginThreadConfigInputFingerprint, c as buildPluginAppPolicyContext, d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, l as disableUnlistedCodexApps, m as buildCodexAppApprovalOverrides, n as mergeCodexNativeProjectDocThreadConfig, o as buildCodexPluginThreadConfigTimeoutFallback, p as shouldBuildCodexPluginThreadConfig, r as buildCodexPluginAppsConfigPatchFromPolicyContext, u as isCodexPluginThreadBindingStale } from "./project-doc-thread-config-B0UI3f1D.mjs";
-import { A as isTransientWebSearchRestriction, C as fingerprintEnvironmentSelection, D as readActiveCodexTurnIdsFromResume, E as legacyFingerprintUserMcpServersConfigPatch, I as isMessageOnlyCodexSourceReply, L as isSystemAgentOnlyCodexDynamicToolAllowlist, M as shouldRotateCodexAppServerBindingForRuntime, N as shouldRotateCodexGpt56MultiAgentBinding, O as shouldStartTransientNoToolThread, S as fingerprintCodexThreadConfig, T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, b as codexDynamicToolsFingerprint, c as codexThreadSandboxOrPermissions, d as readCodexManagedRequirementsFingerprint, f as resolveCodexThreadApprovalsReviewer, g as mergeCodexNativeShellEnvironment, h as resolveCodexWebSearchPlan, i as buildCodexRuntimeThreadConfigForRun, j as shouldRecheckRecoverablePluginBinding, n as buildCodexRingZeroThreadConfigPatch, o as buildThreadResumeParams, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, s as buildThreadStartParams, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames, v as areCodexDynamicToolFingerprintsCompatible, w as fingerprintJsonObject, x as codexLegacyDynamicToolsFingerprint, y as areUserMcpServersFingerprintsCompatible } from "./thread-requests-BjawdIVV.mjs";
-import { i as resolveCodexSessionBinding, o as hashCodexAppServerBindingFingerprint } from "./session-binding-BgsWcbdY.mjs";
+import { M as getCodexAppServerClientInstanceId, P as resolveCodexAppServerClientInstanceId, S as resolveCodexThreadRolloutPath, _ as assertExactSupervisionModelSelection, f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, p as assertCodexThreadForkResponse, s as isCodexAppServerRequestTimeoutError, x as readSupervisionResponseThreadId } from "./client-Bxe8bl-K.mjs";
+import { r as hasCodexAppServerSiblingRouteWork } from "./turn-router-B62dF4CM.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { n as listAllCodexAppServerModels } from "./models-HgvyBseb.mjs";
+import { a as buildCodexPluginThreadConfigInputFingerprint, c as buildPluginAppPolicyContext, d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, l as disableUnlistedCodexApps, m as buildCodexAppApprovalOverrides, n as mergeCodexNativeProjectDocThreadConfig, o as buildCodexPluginThreadConfigTimeoutFallback, p as shouldBuildCodexPluginThreadConfig, r as buildCodexPluginAppsConfigPatchFromPolicyContext, u as isCodexPluginThreadBindingStale } from "./project-doc-thread-config-Ds92xu17.mjs";
+import { A as isTransientWebSearchRestriction, C as fingerprintEnvironmentSelection, D as readActiveCodexTurnIdsFromResume, E as legacyFingerprintUserMcpServersConfigPatch, I as isMessageOnlyCodexSourceReply, L as isSystemAgentOnlyCodexDynamicToolAllowlist, M as shouldRotateCodexAppServerBindingForRuntime, N as shouldRotateCodexGpt56MultiAgentBinding, O as shouldStartTransientNoToolThread, S as fingerprintCodexThreadConfig, T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, b as codexDynamicToolsFingerprint, c as codexThreadSandboxOrPermissions, d as readCodexManagedRequirementsFingerprint, f as resolveCodexThreadApprovalsReviewer, g as mergeCodexNativeShellEnvironment, h as resolveCodexWebSearchPlan, i as buildCodexRuntimeThreadConfigForRun, j as shouldRecheckRecoverablePluginBinding, n as buildCodexRingZeroThreadConfigPatch, o as buildThreadResumeParams, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, s as buildThreadStartParams, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames, v as areCodexDynamicToolFingerprintsCompatible, w as fingerprintJsonObject, x as codexLegacyDynamicToolsFingerprint, y as areUserMcpServersFingerprintsCompatible } from "./thread-requests-6Dy8hyXF.mjs";
+import { i as resolveCodexSessionBinding, o as hashCodexAppServerBindingFingerprint } from "./session-binding-Dg0B6Zua.mjs";
 import { i as resolveCodexAppServerThreadModelSelection, n as resolveCodexAppServerModelProvider } from "./thread-model-selection-DxposL4X.mjs";
-import { c as withExclusiveCodexAppServerThread, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
-import { a as refreshCodexThreadInstructions, i as assertCodexSupervisionThreadLineage, n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy, r as assertAdoptedCodexThreadResumeAllowed, t as CodexIncognitoPolicyChangeError } from "./thread-policy-DYtvZ5Ay.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
+import { c as withExclusiveCodexAppServerThread, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
+import { a as refreshCodexThreadInstructions, i as assertCodexSupervisionThreadLineage, n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy, r as assertAdoptedCodexThreadResumeAllowed, t as CodexIncognitoPolicyChangeError } from "./thread-policy-j-BAwvSk.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-CZxguYjc.mjs";
 import { r as readCodexMcpToolConnectorId } from "./mcp-tool-metadata-DW41snf3.mjs";
-import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-DOub3CB5.mjs";
-import { n as CodexManagedHooksOnlyError, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-CocOW9YS.mjs";
+import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-BzTaCmlT.mjs";
+import { n as CodexManagedHooksOnlyError, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-COcu2b4l.mjs";
 import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-BqC-a6Fb.mjs";
-import { a as discardUnattestedCodexPluginThread, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, o as hasCodexNativeToolCatalog, r as attestCodexThreadToolSurface, s as loadCodexNativeToolCatalog, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-DL4-PQa4.mjs";
+import { a as discardUnattestedCodexPluginThread, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, o as hasCodexNativeToolCatalog, r as attestCodexThreadToolSurface, s as loadCodexNativeToolCatalog, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-B8cWhSFy.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
@@ -535,6 +535,12 @@ function isCodexPluginThreadConfigTimeoutError(error) {
 	return error instanceof CodexPluginThreadConfigDeadlineError || error instanceof Error && "code" in error && error.code === "CODEX_APP_SERVER_LOCAL_REQUEST_CANCELLED" && error.message.endsWith(" timed out");
 }
 //#endregion
+//#region extensions/codex/src/app-server/client-runtime-thread-state.ts
+/** Completed foreground work may leave cleanup custody with native background work. */
+function isCodexAppServerLiveThreadBackgroundOnly(client, threadId, configFingerprint) {
+	return isThreadBackgroundOnly(readCodexAppServerThreadOwnershipState(client), threadId, configFingerprint);
+}
+//#endregion
 //#region extensions/codex/src/app-server/thread-context-engine.ts
 function buildContextEngineBinding(params, projection) {
 	const contextEngine = isActiveHarnessContextEngine(params.contextEngine) ? params.contextEngine : void 0;
@@ -1301,6 +1307,16 @@ async function releaseCodexBoundLiveThread(options) {
 	}) : void 0;
 	if (changedClient && !previous) return false;
 	const client = previous?.client ?? options.client;
+	let threadClosed;
+	let stopWatching;
+	if (previous) {
+		threadClosed = new Promise((resolve) => {
+			stopWatching = client.addNotificationHandler((notification) => {
+				if (notification.method === "thread/closed" && isJsonObject(notification.params) && notification.params.threadId === options.threadId) resolve();
+			});
+		});
+		if (wasCodexAppServerThreadClosed(client, options.threadId)) threadClosed = Promise.resolve();
+	}
 	try {
 		if (isCodexAppServerLiveThreadClaimed(client, options.threadId) || isCodexAppServerLiveThreadProtected(client, options.threadId)) throw new Error(`Codex thread ${options.threadId} is claimed by active work; stop it first.`);
 		return await releaseCodexRetainedLiveThread({
@@ -1314,8 +1330,12 @@ async function releaseCodexBoundLiveThread(options) {
 			} : void 0
 		});
 	} finally {
-		const retiredExit = previous?.release(!isCodexAppServerLiveThreadClaimed(client, options.threadId) && !isCodexAppServerLiveThreadProtected(client, options.threadId));
-		if (retiredExit) await racePromiseWithAbortSignal(retiredExit, options.signal, codexThreadLifecycleAbortError);
+		try {
+			const retiredExit = previous?.release(!isCodexAppServerLiveThreadClaimed(client, options.threadId) && !isCodexAppServerLiveThreadProtected(client, options.threadId));
+			if (retiredExit) await racePromiseWithAbortSignal(threadClosed ? Promise.race([retiredExit, threadClosed]) : retiredExit, options.signal, codexThreadLifecycleAbortError);
+		} finally {
+			stopWatching?.();
+		}
 	}
 }
 /** Reuses one safely owned, fully matching subscription on its original client. */
@@ -1676,6 +1696,16 @@ function observeCodexThreadConfiguration(params, thread, assertCurrent) {
 	};
 }
 //#endregion
+//#region extensions/codex/src/app-server/thread-lifecycle-projection.ts
+/** Projection identity omits persistent instructions: qualify using warm reuse's full policy. */
+async function canRetainCodexProjectionBackgroundWork(params, binding, context, pluginThreadConfig) {
+	const finalConfig = await prepareCodexThreadFinalConfigPatch(params, context.nativeModelInputTools, binding);
+	const pluginConfig = pluginThreadConfig?.configPatch ?? (params.pluginThreadConfig?.enabled && binding.pluginAppPolicyContext ? buildCodexPluginAppsConfigPatchFromPolicyContext(binding.pluginAppPolicyContext) : void 0);
+	const authProfileId = binding.connectionScope === "supervision" ? void 0 : params.params.authProfileId ?? binding.authProfileId;
+	const resumeParams = await context.buildResumeParams(binding, authProfileId, buildCodexThreadRequestConfig(params, context, pluginConfig, finalConfig.configPatch));
+	return isCodexAppServerLiveThreadBackgroundOnly(params.client, binding.threadId, fingerprintCodexThreadConfig(resumeParams, authProfileId, context.dynamicToolsFingerprint, binding));
+}
+//#endregion
 //#region extensions/codex/src/app-server/thread-supervision-cleanup.ts
 function withPendingSupervisionCleanup(pending, cleanupThreadIds) {
 	return {
@@ -2013,6 +2043,7 @@ async function startOrResumeThread(input) {
 		const preflight = await prepareCodexThreadLifecyclePreflight(params);
 		const callerConfig = params.config;
 		const { contextEngineBinding, dynamicToolsContainDeferred, dynamicToolsFingerprint, hostSystemAgentActive, legacyDynamicToolsFingerprint, legacyUserMcpServersFingerprint, lifecycleTiming, nativeSkillIsolationFingerprint, networkProxyConfigFingerprint, ringZeroActive, ringZeroClientInstanceId, ringZeroConfigFingerprint, restrictedToolSurface, restrictedToolSurfaceInheritedMcpServerNames, userMcpServersFingerprint, webSearchThreadConfigFingerprint } = preflight;
+		let retainBackgroundPredecessor = false;
 		let replacementPredecessor;
 		const initialBoundThreadId = binding?.threadId;
 		const initialBoundClientId = binding?.clientId;
@@ -2200,21 +2231,6 @@ async function startOrResumeThread(input) {
 			embeddedAgentLog.debug("codex app-server delegation restricted for turn; starting transient thread", { threadId: binding.threadId });
 			binding = void 0;
 		}
-		if (binding?.threadId && (binding.contextEngine || contextEngineBinding)) {
-			if (!contextEngineBinding || !isContextEngineBindingCompatible(binding.contextEngine, contextEngineBinding)) {
-				rotateStaleBinding(binding, "context-engine binding", {
-					engineId: contextEngineBinding?.engineId,
-					previousEngineId: binding.contextEngine?.engineId,
-					epoch: contextEngineBinding?.projection?.epoch,
-					previousEpoch: binding.contextEngine?.projection?.epoch,
-					fingerprint: contextEngineBinding?.projection?.fingerprint,
-					previousFingerprint: binding.contextEngine?.projection?.fingerprint,
-					policyFingerprint: contextEngineBinding?.policyFingerprint,
-					previousPolicyFingerprint: binding.contextEngine?.policyFingerprint
-				});
-				rotatedContextEngineBinding = true;
-			}
-		}
 		if (binding?.threadId) {
 			if (!areUserMcpServersFingerprintsCompatible({
 				previous: binding.userMcpServersFingerprint,
@@ -2231,6 +2247,31 @@ async function startOrResumeThread(input) {
 			})) rotateStaleBinding(binding, "plugin app config");
 			else if (binding.dynamicToolsFingerprint && params.dynamicTools.length > 0 && binding.dynamicToolsContainDeferred !== dynamicToolsContainDeferred && (binding.dynamicToolsContainDeferred !== void 0 || !dynamicToolsContainDeferred)) rotateStaleBinding(binding, "dynamic tool loading");
 		}
+		if (binding?.threadId && (binding.contextEngine || contextEngineBinding)) {
+			if (!contextEngineBinding || !isContextEngineBindingCompatible(binding.contextEngine, contextEngineBinding)) {
+				retainBackgroundPredecessor = initialBoundClientId === clientId && binding.contextEngine?.engineId === contextEngineBinding?.engineId && binding.contextEngine?.policyFingerprint === contextEngineBinding?.policyFingerprint && Boolean(contextEngineBinding) && (!binding.dynamicToolsFingerprint || areCodexDynamicToolFingerprintsCompatible({
+					previous: binding.dynamicToolsFingerprint,
+					next: dynamicToolsFingerprint,
+					nextLegacy: legacyDynamicToolsFingerprint
+				})) && isCodexAppServerLiveThreadBackgroundOnly(params.client, binding.threadId);
+				if (retainBackgroundPredecessor) {
+					const currentPluginConfig = await buildLoadedPluginThreadConfig(binding);
+					if (currentPluginConfig && currentPluginConfig.fingerprint !== binding.pluginAppsFingerprint) retainBackgroundPredecessor = false;
+				}
+				if (retainBackgroundPredecessor) retainBackgroundPredecessor = await canRetainCodexProjectionBackgroundWork(params, binding, await prepareRequestContext(), prebuiltPluginThreadConfig);
+				rotateStaleBinding(binding, "context-engine binding", {
+					engineId: contextEngineBinding?.engineId,
+					previousEngineId: binding.contextEngine?.engineId,
+					epoch: contextEngineBinding?.projection?.epoch,
+					previousEpoch: binding.contextEngine?.projection?.epoch,
+					fingerprint: contextEngineBinding?.projection?.fingerprint,
+					previousFingerprint: binding.contextEngine?.projection?.fingerprint,
+					policyFingerprint: contextEngineBinding?.policyFingerprint,
+					previousPolicyFingerprint: binding.contextEngine?.policyFingerprint
+				});
+				rotatedContextEngineBinding = true;
+			}
+		}
 		if (binding?.threadId) {
 			if (binding.dynamicToolsFingerprint && !areCodexDynamicToolFingerprintsCompatible({
 				previous: binding.dynamicToolsFingerprint,
@@ -2280,7 +2321,7 @@ async function startOrResumeThread(input) {
 		}
 		assertCodexBindingMayBeReplaced(binding, "starting a fresh native thread", expectedOwnership);
 		const requestContext = await prepareRequestContext();
-		if (initialBoundThreadId && !preserveExistingBinding && !configuredMcpOwnershipChanged) await releaseRetainedThread(initialBoundThreadId);
+		if (initialBoundThreadId && !preserveExistingBinding && !configuredMcpOwnershipChanged && !(retainBackgroundPredecessor && isCodexAppServerLiveThreadBackgroundOnly(params.client, initialBoundThreadId))) await releaseRetainedThread(initialBoundThreadId);
 		const started = await startFreshCodexThread(params, {
 			...requestContext,
 			prebuiltPluginThreadConfig,

package/dist/.setup/{thread-ownership-Bmk5a2Gu.mjs → thread-ownership-DxW6b6fR.mjs}

@@ -1,8 +1,8 @@
-import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BW1YeaIk.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-Do2ZQrNP.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-CeyYScUC.mjs";
-import { B as retainCodexAppServerLiveThread, N as isCodexAppServerLiveThreadClaimed, z as releaseCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
-import { f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { B as releaseCodexAppServerLiveThread, N as isCodexAppServerLiveThreadClaimed, V as retainCodexAppServerLiveThread } from "./shared-client-BelwlhWf.mjs";
+import { f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { runWithAsyncWorkResources } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
 //#region extensions/codex/src/app-server/thread-ownership.ts

package/dist/.setup/{thread-policy-DYtvZ5Ay.mjs → thread-policy-j-BAwvSk.mjs}

@@ -1,7 +1,7 @@
 import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError } from "./rpc-error-DemqqaxE.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
-import { g as CodexAdoptedThreadActiveError } from "./shared-client-CkyTrNB8.mjs";
-import { f as assertCodexThreadAcceptsDirectInput, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-DTgD_jsY.mjs";
+import { g as CodexAdoptedThreadActiveError } from "./shared-client-BelwlhWf.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, o as isCodexAppServerPrewriteRequestCancellationError } from "./client-Bxe8bl-K.mjs";
 import { AgentHarnessPreflightError, embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/thread-policy.ts
 /** A refusal, not a failed native write: the ephemeral conversation must stay alive. */

package/dist/.setup/{thread-requests-BjawdIVV.mjs → thread-requests-6Dy8hyXF.mjs}

@@ -2,8 +2,8 @@ import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { t as appendCodexGitConfigParameters } from "./config-utils-DN_YT7dE.mjs";
 import { d as readCodexEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DMFZkd3X.mjs";
 import { a as isCodexResponsesOAuthRun } from "./responses-oauth-CCV7aVYF.mjs";
-import { d as mergeCodexThreadConfigs, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-B0UI3f1D.mjs";
-import { o as hashCodexAppServerBindingFingerprint } from "./session-binding-BgsWcbdY.mjs";
+import { d as mergeCodexThreadConfigs, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-Ds92xu17.mjs";
+import { o as hashCodexAppServerBindingFingerprint } from "./session-binding-Dg0B6Zua.mjs";
 import { n as resolveCodexAppServerModelProvider, r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DxposL4X.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto, * as crypto$1 from "node:crypto";

package/dist/.setup/{thread-resume-vBShG3-o.mjs → thread-resume-CZxguYjc.mjs}

@@ -1,8 +1,8 @@
 import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
-import { r as publishCodexCatalogResume } from "./session-catalog-events-CEi6SuLQ.mjs";
-import { k as forgetCodexWorkspaceReferences, lt as isCodexAppServerStartupError } from "./shared-client-CkyTrNB8.mjs";
-import { m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
-import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { r as publishCodexCatalogResume } from "./session-catalog-events-BmhPYZGw.mjs";
+import { ft as isCodexAppServerStartupError, k as forgetCodexWorkspaceReferences } from "./shared-client-BelwlhWf.mjs";
+import { m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client-Bxe8bl-K.mjs";
+import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/thread-resume.ts
 /** Owns Codex thread/resume subscription safety. */

package/dist/.setup/{transcript-mirror-CEQJZlF3.mjs → transcript-mirror-5w4Hx1kt.mjs}

@@ -2,7 +2,7 @@ import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
 import { a as readUpstreamUserText, i as readMirrorIdentity, n as attachCodexMirrorIdentity, o as takeCodexAssistantItemIds, r as attachUpstreamUserText } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
 import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-i-FVpyha.mjs";
 import { a as buildCodexMirrorIdempotencyKey, c as isMirroredAgentMessage, i as buildCodexMirrorDedupeIdentity, l as readCodexMirrorSourceFingerprint, n as attachCodexMirrorAttestation, o as fingerprintCodexMirrorSourceMessage, r as attachCodexMirrorRunId, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-BzUXnrvv.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, restorePreparedUserTurnOperationalMetaForRuntime, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { withCodexSessionTranscriptMirrorWrite } from "openclaw/plugin-sdk/codex-session-transcript-runtime";

package/dist/.setup/{transport-stdio-Bq160Dhv.mjs → transport-stdio-BVeWgcK6.mjs}

@@ -1,6 +1,6 @@
 import { t as appendCodexGitConfigParameters } from "./config-utils-DN_YT7dE.mjs";
 import { r as normalizeCodexAppServerArgs } from "./launch-args-DbFCehO7.mjs";
-import { f as resolveManagedCodexNativeCommand } from "./managed-binary-DbKvGXKl.mjs";
+import { f as resolveManagedCodexNativeCommand } from "./managed-binary-BwzkwiGo.mjs";
 import { i as recordCodexAppServerSpawnFailure, r as getCodexAppServerSpawnFailure } from "./spawn-error-CL3n6MAa.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { stripVTControlCharacters } from "node:util";

package/dist/.setup/{transport-websocket-0YqiI_MH.mjs → transport-websocket-2Y-cL8kD.mjs}

@@ -1,5 +1,5 @@
 import { r as resolveCodexAppServerUserHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
-import "./config-BfrAlTMT.mjs";
+import "./config-BZYTxljj.mjs";
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
 import path from "node:path";
 import { EventEmitter } from "node:events";

package/dist/.setup/{turn-router-BGj67FMK.mjs → turn-router-B62dF4CM.mjs}

@@ -1,6 +1,6 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { n as waitForPromiseOrAbort, t as abortReason } from "./timeout-D0mEWSGG.mjs";
-import { b as readCodexTurnCompletedNotification } from "./client--P8jwXvA.mjs";
+import { b as readCodexTurnCompletedNotification } from "./client-Bxe8bl-K.mjs";
 import { normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { AsyncResource } from "node:async_hooks";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";

package/dist/.setup/{upstream-session-fork-CWKjpdtW.mjs → upstream-session-fork-5d_7cWPF.mjs}

@@ -1,5 +1,5 @@
 import { n as flattenCodexDynamicToolFunctions, r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
-import { g as sessionBindingIdentity } from "./session-binding-record-C_THntMe.mjs";
+import { g as sessionBindingIdentity } from "./session-binding-record-BpWF2Sus.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
 import { s as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-DMFZkd3X.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-CeyYScUC.mjs";
@@ -9,24 +9,24 @@ import { r as projectCodexUserItemText } from "./transcript-history-projection-i
 import { n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.mjs";
 import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
 import { n as readCodexSessionMeta } from "./session-catalog-provenance-Dg9s12z-.mjs";
-import "./request-C6U8q2uz.mjs";
-import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BfrAlTMT.mjs";
-import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import "./request-DTgD_jsY.mjs";
+import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BZYTxljj.mjs";
+import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { l as readCodexMirrorSourceFingerprint, o as fingerprintCodexMirrorSourceMessage } from "./transcript-mirror-attestation-BzUXnrvv.mjs";
-import { A as hasCodexAppServerLiveThread, E as claimCodexAppServerLiveThread, l as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-CkyTrNB8.mjs";
-import { f as assertCodexThreadAcceptsDirectInput, o as isCodexAppServerPrewriteRequestCancellationError, p as assertCodexThreadForkResponse } from "./client--P8jwXvA.mjs";
-import { d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, p as shouldBuildCodexPluginThreadConfig } from "./project-doc-thread-config-B0UI3f1D.mjs";
-import { T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, a as buildCodexThreadConfiguration, b as codexDynamicToolsFingerprint, h as resolveCodexWebSearchPlan, w as fingerprintJsonObject } from "./thread-requests-BjawdIVV.mjs";
-import "./session-binding-BgsWcbdY.mjs";
-import "./thread-ownership-Bmk5a2Gu.mjs";
+import { A as hasCodexAppServerLiveThread, E as claimCodexAppServerLiveThread, l as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-BelwlhWf.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, o as isCodexAppServerPrewriteRequestCancellationError, p as assertCodexThreadForkResponse } from "./client-Bxe8bl-K.mjs";
+import { d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, p as shouldBuildCodexPluginThreadConfig } from "./project-doc-thread-config-Ds92xu17.mjs";
+import { T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, a as buildCodexThreadConfiguration, b as codexDynamicToolsFingerprint, h as resolveCodexWebSearchPlan, w as fingerprintJsonObject } from "./thread-requests-6Dy8hyXF.mjs";
+import "./session-binding-Dg0B6Zua.mjs";
+import "./thread-ownership-DxW6b6fR.mjs";
 import { i as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-D09tLP-u.mjs";
-import { n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy } from "./thread-policy-DYtvZ5Ay.mjs";
-import { b as isCodexDynamicToolExcluded, f as codexNativeHookRemoteCredentialPath, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, o as buildCodexNativeHookRelayId, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-CocOW9YS.mjs";
-import { c as parseCodexNativeToolCatalog, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-DL4-PQa4.mjs";
-import { c as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-workspace-context-GYPLawX6.mjs";
-import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-C7pYYpvh.mjs";
-import { n as prepareCodexSessionInitialization } from "./session-initialization-Dn3vveGv.mjs";
-import { createImportedCodexSession } from "./session-history-import-BwPKwcNi.mjs";
+import { n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy } from "./thread-policy-j-BAwvSk.mjs";
+import { b as isCodexDynamicToolExcluded, f as codexNativeHookRemoteCredentialPath, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, o as buildCodexNativeHookRelayId, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-COcu2b4l.mjs";
+import { c as parseCodexNativeToolCatalog, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-B8cWhSFy.mjs";
+import { c as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-workspace-context-DxHd71bH.mjs";
+import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-DMfkFwZi.mjs";
+import { n as prepareCodexSessionInitialization } from "./session-initialization-Bztyf-sf.mjs";
+import { createImportedCodexSession } from "./session-history-import-BZHN6RtG.mjs";
 import { isRecord, normalizeOptionalString, readNonBlankString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{usage-AhrLFxZP.mjs → usage-DSIlxJrx.mjs}

@@ -1,7 +1,7 @@
 import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-BpfURnuy.mjs";
-import { t as readCodexAppServerUsage } from "./request-C6U8q2uz.mjs";
-import "./config-BfrAlTMT.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { t as readCodexAppServerUsage } from "./request-DTgD_jsY.mjs";
+import "./config-BZYTxljj.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CqCrHEAU.mjs";
 import { CODEX_APP_SERVER_AUTH_MARKER } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/usage.ts
 /** Handles the synthetic usage credential for a Codex-backed OpenAI route. */

package/dist/.setup/{usage-limit-error-BdNbGJC3.mjs → usage-limit-error-A0XP58jR.mjs}

@@ -1,7 +1,7 @@
 import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { a as shouldRefreshCodexRateLimitsForUsageLimitMessage, i as resolveCodexUsageLimitResetAtMs, n as formatCodexUsageLimitErrorMessage } from "./rate-limits-BpfURnuy.mjs";
 import { t as CODEX_CONTROL_METHODS } from "./capabilities-DAS-JX1z.mjs";
-import { G as rememberCodexRateLimitsRead, U as readCodexRateLimitsRevision, W as readRecentCodexRateLimits } from "./shared-client-CkyTrNB8.mjs";
+import { G as readRecentCodexRateLimits, K as rememberCodexRateLimitsRead, W as readCodexRateLimitsRevision } from "./shared-client-BelwlhWf.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { markAuthProfileBlockedUntil } from "openclaw/plugin-sdk/agent-runtime";
 import { embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{web-search-provider.runtime-Yk6lnJBG.mjs → web-search-provider.runtime-B-m9u2M1.mjs}

@@ -1,5 +1,5 @@
-import { m as buildCodexNativeWebSearchThreadConfig } from "./thread-requests-BjawdIVV.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-BQkmyyjB.mjs";
+import { m as buildCodexNativeWebSearchThreadConfig } from "./thread-requests-6Dy8hyXF.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DnxnHHZP.mjs";
 import { t as projectCodexWebSearchItem } from "./web-search-item-DHVuNSqk.mjs";
 import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
 //#region extensions/codex/src/web-search-provider.runtime.ts

package/dist/.setup/{workspace-write-sandbox-probe-DJxOXcF3.mjs → workspace-write-sandbox-probe-D5OfU42L.mjs}

@@ -1,6 +1,6 @@
 import { a as resolveCodexPrivateLauncher, n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-Bq160Dhv.mjs";
-import { t as resolveCodexDoctorStartOptions } from "./doctor-start-options-8uIBXIzR.mjs";
+import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-BVeWgcK6.mjs";
+import { t as resolveCodexDoctorStartOptions } from "./doctor-start-options-CpcBuzLb.mjs";
 import { runUtf8CommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 import path from "node:path";
 import fs from "node:fs/promises";