@openclaw/codex 2026.10.10-beta.3 → 2026.10.10-beta.4

package/dist/.setup/{project-doc-thread-config-B0UI3f1D.mjs → project-doc-thread-config-Ds92xu17.mjs}

@@ -3,9 +3,9 @@ import { l as fingerprintCodexPolicy } from "./config-security-clxAZYWX.mjs";
 import { f as resolveCodexPluginsPolicy } from "./config-parsing-DsWSCPHO.mjs";
 import { u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DMFZkd3X.mjs";
 import { a as defaultCodexAppInventoryCache, i as CodexAppInventoryCache, o as serializeCodexAppInventoryError, s as codexAppIdentityKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { l as toCodexPluginOwnedAccountApp, s as readCodexPluginInventory, t as createCodexAppInventoryRequest } from "./plugin-inventory-DE9wcaeH.mjs";
-import "./config-BfrAlTMT.mjs";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-CXPWe-hl.mjs";
+import { l as toCodexPluginOwnedAccountApp, s as readCodexPluginInventory, t as createCodexAppInventoryRequest } from "./plugin-inventory-BVP15PmN.mjs";
+import "./config-BZYTxljj.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-Cj2k3W9n.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/plugin-app-approval-overrides.ts
 /** Projects ask approvals into the native session layer without changing saved settings. */

package/dist/.setup/{provider-Rt7awchu.mjs → provider-C1GuStnr.mjs}

@@ -11,7 +11,7 @@ function buildCodexMigrationProvider(params = {}) {
 		].join(" "),
 		supportedItemKinds: ["memory", "auth"],
 		async detect(ctx) {
-			const { discoverCodexSource, hasCodexSource } = await import("./source-DTo8pzXK.mjs").then((n) => n.a);
+			const { discoverCodexSource, hasCodexSource } = await import("./source-DQN8P65G.mjs").then((n) => n.a);
 			const memoryOnly = isOnlyMigrationKind(ctx, "memory");
 			const authOnly = isOnlyMigrationKind(ctx, "auth");
 			const source = await discoverCodexSource({
@@ -29,16 +29,16 @@ function buildCodexMigrationProvider(params = {}) {
 			};
 		},
 		async plan(ctx) {
-			const { buildCodexMigrationPlan } = await import("./plan-BUB3QGL7.mjs");
+			const { buildCodexMigrationPlan } = await import("./plan-C3H9W_2P.mjs");
 			return buildCodexMigrationPlan(ctx);
 		},
 		deferredApply: { retrySafe: true },
 		prepareApply(ctx) {
 			if (isOnlyMigrationKind(ctx, "memory") || isOnlyMigrationKind(ctx, "auth")) return;
-			return import("./apply-DVeFKzUL.mjs").then(({ prepareTargetCodexAppServer }) => prepareTargetCodexAppServer(ctx));
+			return import("./apply-DvEtGGBB.mjs").then(({ prepareTargetCodexAppServer }) => prepareTargetCodexAppServer(ctx));
 		},
 		async apply(ctx, plan) {
-			const { applyCodexMigrationPlan } = await import("./apply-DVeFKzUL.mjs");
+			const { applyCodexMigrationPlan } = await import("./apply-DvEtGGBB.mjs");
 			return await applyCodexMigrationPlan({
 				ctx,
 				plan,

package/dist/.setup/{provider-capabilities-C0laqfjE.mjs → provider-capabilities-DMfkFwZi.mjs}

@@ -1,4 +1,4 @@
-import { f as releaseLeasedSharedCodexAppServerClient } from "./shared-client-B8v6e5D0.mjs";
+import { f as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BelwlhWf.mjs";
 //#region extensions/codex/src/app-server/provider-capabilities.ts
 function resolveOverriddenProviderWebSearchSupport(modelProviderOverride) {
 	const provider = modelProviderOverride?.trim().toLowerCase();

package/dist/.setup/{request-DbU7VQMs.mjs → request-DTgD_jsY.mjs}

@@ -1,7 +1,7 @@
 import { i as CodexAppServerScopedRequestRejectedError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
 import { t as CODEX_CONTROL_METHODS } from "./capabilities-DAS-JX1z.mjs";
 import { i as withTimeout$1, r as withAbortableTimeout } from "./timeout-D0mEWSGG.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-registration";
 import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 import { areDiagnosticsEnabledForProcess } from "openclaw/plugin-sdk/diagnostic-runtime";
@@ -145,7 +145,7 @@ async function requestCodexAppServerClientJson(params) {
 	let phase = "prepare";
 	observeControl(params.controlObservation, phase);
 	try {
-		const { prepareCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-DneAfNye.mjs").then((n) => n.a);
+		const { prepareCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-CrzVgQUn.mjs").then((n) => n.a);
 		const sandboxGuard = await prepareCodexAppServerDirectSandboxBypassBlock(params);
 		try {
 			if (sandboxGuard.block) throw new Error(sandboxGuard.block);
@@ -180,7 +180,7 @@ async function requestCodexAppServerClientJson(params) {
 }
 async function requestCodexAppServerJson(params) {
 	observeControl(params.controlObservation, "prepare");
-	const { prepareCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-DneAfNye.mjs").then((n) => n.a);
+	const { prepareCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-CrzVgQUn.mjs").then((n) => n.a);
 	const sandboxGuard = await prepareCodexAppServerDirectSandboxBypassBlock(params);
 	try {
 		if (sandboxGuard.block) throw new Error(sandboxGuard.block);
@@ -288,8 +288,8 @@ async function withCodexAppServerJsonClient(params, run) {
 			timeoutMs,
 			timeoutMessage,
 			promise: (async () => {
-				const { prepareCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-DneAfNye.mjs").then((n) => n.a);
-				const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-B8v6e5D0.mjs").then((n) => n.m);
+				const { prepareCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-CrzVgQUn.mjs").then((n) => n.a);
+				const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-BelwlhWf.mjs").then((n) => n.m);
 				errorPhase = void 0;
 				setPhase("prepare");
 				throwIfAbandoned();

package/dist/.setup/{run-attempt-BFAgRiTd.mjs → run-attempt-DB4AY6QP.mjs}

@@ -1,15 +1,15 @@
 import { n as readCodexRuntimeModelId } from "./model-runtime-BdqzOMkU.mjs";
-import { g as createCodexNativeSubagentHistoryOwner } from "./native-subagent-pending-assignments-CTinVtjo.mjs";
+import { _ as createCodexNativeSubagentHistoryOwner } from "./native-subagent-pending-assignments-CX-LtYDX.mjs";
 import { n as flattenCodexDynamicToolFunctions, r as isJsonObject, t as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE } from "./protocol-CaPAVwe9.mjs";
-import { g as sessionBindingIdentity, i as matchesCodexNativeSubagentSubmissionBinding, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-C_THntMe.mjs";
-import { n as defineCodexBuildState } from "./build-state-DswWyGqI.mjs";
+import { g as sessionBindingIdentity, i as matchesCodexNativeSubagentSubmissionBinding, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-BpWF2Sus.mjs";
+import { n as defineCodexBuildState } from "./build-state-CpGXWSN4.mjs";
 import { c as withMcpElicitationsApprovalPolicy, d as readCodexRequirementsToml, n as hasCodexMcpToolApprovalOverrides, s as shouldAutoApproveCodexAppServerApprovals } from "./config-security-clxAZYWX.mjs";
 import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, f as resolveCodexPluginsPolicy, l as isCodexRemoteExecPlacementSandbox, u as isCodexSandboxExecServerEnabled } from "./config-parsing-DsWSCPHO.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { i as resolveCodexAppServerHomeScope, l as resolveCodexModelBackedReviewerPolicyContext, o as resolveCodexComputerUseConfig } from "./config-options-DMFZkd3X.mjs";
-import { D as retireSharedCodexAppServerClientIfCurrent, _ as observeAcquire, c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-aolg0chE.mjs";
-import { i as withCodexAppServerGitConfig } from "./transport-stdio-Bq160Dhv.mjs";
+import { D as retireSharedCodexAppServerClientIfCurrent, _ as observeAcquire, c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Do2ZQrNP.mjs";
+import { i as withCodexAppServerGitConfig } from "./transport-stdio-BVeWgcK6.mjs";
 import { o as formatCodexDisplayText } from "./command-formatters-B_7-QZ1c.mjs";
 import { a as codexPrewriteRejectionCause, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
 import { n as waitForPromiseOrAbort } from "./timeout-D0mEWSGG.mjs";
@@ -17,49 +17,49 @@ import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
 import { i as readCodexProviderRefusal, n as extractRawResponseItemText, o as readItem, r as readCodexErrorNotificationMessage, s as readNullableString } from "./event-projector-values-yf4us9Pf.mjs";
 import { i as readMirrorIdentity, n as attachCodexMirrorIdentity, t as attachCodexAssistantItemIds } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
 import { n as buildCodexAppServerRuntimeFingerprint, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
-import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection, t as assertCodexSessionRuntimeOwnership } from "./binding-connection-GTgUj9pi.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BfrAlTMT.mjs";
+import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection, t as assertCodexSessionRuntimeOwnership } from "./binding-connection-hJD5mFkM.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BZYTxljj.mjs";
 import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-7W0cgTXF.mjs";
 import { a as isCodexDurableCustomMessage, c as resolveCodexContextEngineProjectionMaxChars, i as fitCodexProjectedContextForTurnStart, l as resolveCodexContinuityProjectionMaxChars, n as CodexContextAttachmentError, o as neutralizeCodexExplicitMentionSigils, r as buildCodexContinuityCalibration, s as projectContextEngineAssemblyForCodex, t as CODEX_TURN_START_TEXT_INPUT_MAX_CHARS, u as resolveProjectionPromptBudgetTokens } from "./context-engine-projection-PIeLSnR-.mjs";
 import { a as buildCodexMirrorIdempotencyKey, i as buildCodexMirrorDedupeIdentity, s as hasCodexMirrorOrigin, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-BzUXnrvv.mjs";
 import { i as resolveCodexAppServerAuthProfileIdForAgent, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-auwzSwwy.mjs";
-import { $ as resolveCodexAppServerAuthAccountCacheKey, C as getCodexInferenceThread, F as prepareCodexWorkspaceReferences, G as readRecentCodexRateLimits, I as protectCodexAppServerLiveThread, O as ensureCodexAppServerClientRuntime, W as readCodexRateLimitsRevision, X as recordCodexTurnForkSettings, a as createIsolatedCodexAppServerClient, ct as CodexAppServerStartupError, et as resolveCodexAppServerPreparedAuthHandoff, f as releaseLeasedSharedCodexAppServerClient, l as readCodexAppServerClientDesktopGenerationFingerprint, lt as TURN_FINALIZE_DRAIN_ABORT_GRACE_MS, mt as withCodexStartupTimeout, o as getLeasedSharedCodexAppServerClient, p as retainSharedCodexAppServerClientIfCurrent, pt as resolveCodexStartupTimeoutMs, r as clearSharedCodexAppServerClientIfCurrentAndUnclaimed, s as getSharedCodexAppServerClient, ut as TURN_TERMINAL_SETTLEMENT_TIMEOUT_MS, v as CodexThreadClientReplacementError, w as getCodexInferenceThreadQualification } from "./shared-client-B8v6e5D0.mjs";
+import { C as getCodexInferenceThread, F as prepareCodexWorkspaceReferences, G as readRecentCodexRateLimits, I as protectCodexAppServerLiveThread, O as ensureCodexAppServerClientRuntime, W as readCodexRateLimitsRevision, Z as recordCodexTurnForkSettings, a as createIsolatedCodexAppServerClient, dt as TURN_TERMINAL_SETTLEMENT_TIMEOUT_MS, et as resolveCodexAppServerAuthAccountCacheKey, f as releaseLeasedSharedCodexAppServerClient, ht as withCodexStartupTimeout, l as readCodexAppServerClientDesktopGenerationFingerprint, lt as CodexAppServerStartupError, mt as resolveCodexStartupTimeoutMs, o as getLeasedSharedCodexAppServerClient, p as retainSharedCodexAppServerClientIfCurrent, r as clearSharedCodexAppServerClientIfCurrentAndUnclaimed, s as getSharedCodexAppServerClient, tt as resolveCodexAppServerPreparedAuthHandoff, ut as TURN_FINALIZE_DRAIN_ABORT_GRACE_MS, v as CodexThreadClientReplacementError, w as getCodexInferenceThreadQualification } from "./shared-client-BelwlhWf.mjs";
 import { a as isCodexResponsesOAuthRun, r as isCodexResponsesOAuth } from "./responses-oauth-CCV7aVYF.mjs";
-import { C as createCodexElicitationResponse, D as toCodexDynamicToolProtocolResponse, E as toCodexDynamicToolProgressResponse, P as resolveCodexAppServerClientInstanceId, T as resolveDynamicToolCallTimeoutMs, a as isCodexAppServerIndeterminateTransportError, b as readCodexTurnCompletedNotification, c as CodexServerRequestResolvedError, g as assertCodexTurnStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, j as readCodexAppServerWarningMessage, r as isCodexAppServerApprovalRequest, v as readCodexDynamicToolCallParams, w as handleDynamicToolCallWithTimeout } from "./client-CPPD2q0Z.mjs";
-import { s as CODEX_APP_SERVER_OPT_OUT_NOTIFICATION_METHODS } from "./client-initialize-CjgZcX61.mjs";
-import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, b as matchesCodexSnapshotTurn, i as CodexProjectionDiagnostics, n as getCodexAppServerTurnRouter, o as readCodexNotificationScope, s as readCodexNotificationThreadId, t as CODEX_APP_SERVER_NATIVE_TURN_WAIT_TIMEOUT_MS, x as shouldAdvancePersistableAssistantBarrier } from "./turn-router-CaEj5E0i.mjs";
-import { d as terminateCodexBackgroundTerminals, f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort, u as shouldRetireCodexStartupClient } from "./attempt-client-cleanup-BLp6z_DD.mjs";
-import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-830RLAJW.mjs";
+import { C as createCodexElicitationResponse, D as toCodexDynamicToolProtocolResponse, E as toCodexDynamicToolProgressResponse, P as resolveCodexAppServerClientInstanceId, T as resolveDynamicToolCallTimeoutMs, a as isCodexAppServerIndeterminateTransportError, b as readCodexTurnCompletedNotification, c as CodexServerRequestResolvedError, g as assertCodexTurnStartResponse, i as isCodexAppServerIndeterminateRequestCancellationError, j as readCodexAppServerWarningMessage, r as isCodexAppServerApprovalRequest, v as readCodexDynamicToolCallParams, w as handleDynamicToolCallWithTimeout } from "./client-Bxe8bl-K.mjs";
+import { s as CODEX_APP_SERVER_OPT_OUT_NOTIFICATION_METHODS } from "./client-initialize-CPNmLwhL.mjs";
+import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, b as matchesCodexSnapshotTurn, i as CodexProjectionDiagnostics, n as getCodexAppServerTurnRouter, o as readCodexNotificationScope, s as readCodexNotificationThreadId, t as CODEX_APP_SERVER_NATIVE_TURN_WAIT_TIMEOUT_MS, x as shouldAdvancePersistableAssistantBarrier } from "./turn-router-B62dF4CM.mjs";
+import { d as terminateCodexBackgroundTerminals, f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort, u as shouldRetireCodexStartupClient } from "./attempt-client-cleanup-Bj4T3tcX.mjs";
+import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-BY7Fm501.mjs";
 import { a as isRawFunctionToolOutputCompletionNotification, c as readRawResponseToolCallId, i as isCodexTurnAbortMarkerNotification, l as updateActiveTurnItemIds, o as isTerminalTurnStatus, r as completePendingOpenClawDynamicToolNotification, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-CBY0Hkga.mjs";
-import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-B0UI3f1D.mjs";
-import { B as resolveCodexDynamicToolsLoadingForRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, V as joinPresentSections, _ as buildDeveloperInstructions, b as codexDynamicToolsFingerprint, h as resolveCodexWebSearchPlan, k as stabilizeJsonValue, l as isCodexNativeDelegationDisabledForRun, v as areCodexDynamicToolFingerprintsCompatible, w as fingerprintJsonObject, x as codexLegacyDynamicToolsFingerprint } from "./thread-requests-BjawdIVV.mjs";
-import { i as resolveCodexSessionBinding, n as createCodexSessionGenerationSupersededError, t as clearCodexBindingForClient } from "./session-binding-BgsWcbdY.mjs";
+import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-Ds92xu17.mjs";
+import { B as resolveCodexDynamicToolsLoadingForRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, V as joinPresentSections, _ as buildDeveloperInstructions, b as codexDynamicToolsFingerprint, h as resolveCodexWebSearchPlan, k as stabilizeJsonValue, l as isCodexNativeDelegationDisabledForRun, v as areCodexDynamicToolFingerprintsCompatible, w as fingerprintJsonObject, x as codexLegacyDynamicToolsFingerprint } from "./thread-requests-6Dy8hyXF.mjs";
+import { i as resolveCodexSessionBinding, n as createCodexSessionGenerationSupersededError, t as clearCodexBindingForClient } from "./session-binding-Dg0B6Zua.mjs";
 import { i as resolveCodexAppServerThreadModelSelection } from "./thread-model-selection-DxposL4X.mjs";
-import { a as resolveCodexPromptError, i as refreshCodexUsageLimitPromptError, n as formatCodexTurnStartUsageLimitError, r as markCodexAuthProfileBlockedFromRateLimits, t as CodexUsageLimitPromptError } from "./usage-limit-error-B0x1eymI.mjs";
-import { c as withExclusiveCodexAppServerThread, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DJ8PPxRc.mjs";
+import { a as resolveCodexPromptError, i as refreshCodexUsageLimitPromptError, n as formatCodexTurnStartUsageLimitError, r as markCodexAuthProfileBlockedFromRateLimits, t as CodexUsageLimitPromptError } from "./usage-limit-error-A0XP58jR.mjs";
+import { c as withExclusiveCodexAppServerThread, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
-import { a as CodexToolTranscriptProjection, c as asCodexToolArguments, i as emitCodexAgentEvent, l as isCodexCommandBearingToolCall, o as CodexToolProgressProjection, r as CodexEventProjection, s as shouldEmitTranscriptToolProgress, t as codexNativeSubagentMonitorRuntime, u as resolveCodexToolProgressDetailMode } from "./native-subagent-monitor-D1pYkirc.mjs";
-import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-BkiVPLuc.mjs";
+import { a as CodexToolTranscriptProjection, c as asCodexToolArguments, i as emitCodexAgentEvent, l as isCodexCommandBearingToolCall, o as CodexToolProgressProjection, r as CodexEventProjection, s as shouldEmitTranscriptToolProgress, t as codexNativeSubagentMonitorRuntime, u as resolveCodexToolProgressDetailMode } from "./native-subagent-monitor-LJd5_D5F.mjs";
+import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-DEbTgtVQ.mjs";
 import { r as prepareCodexNativeExecutionPolicyForRun } from "./native-execution-policy-D09tLP-u.mjs";
-import { n as CodexThreadPolicyHandoffError, s as restoreCodexThreadInstructionsAfterCompaction } from "./thread-policy-UldER50x.mjs";
+import { n as CodexThreadPolicyHandoffError, s as restoreCodexThreadInstructionsAfterCompaction } from "./thread-policy-j-BAwvSk.mjs";
 import { t as attemptTerminal } from "./attempt-terminal-sZutF0WY.mjs";
 import { a as runCodexAgentEndHook, c as withCodexAppServerFastModeServiceTier, i as reportCodexBackgroundCleanupFailure, n as ensureCodexWorkspaceDirOnce, o as runCodexCleanupStep, r as estimateCodexAppServerProjectedTurnTokens, s as shouldKeepCodexSharedAbortOpen, t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-DN-ATDp9.mjs";
 import { t as CODEX_INFERENCE_GENERATION_KEY } from "./inference-metadata-CYFWLHVk.mjs";
-import "./inference-context-BPwyk-Op.mjs";
+import "./inference-context-DYpvCEF3.mjs";
 import { i as createAssistantReasoningMessage, n as createAssistantCommentaryMessage, r as createAssistantMessage, t as createAssistantAsyncDelivery } from "./event-projector-assistant-message-ChOAY7rW.mjs";
-import { a as resolveCodexExternalSandboxPolicyForOpenClawSandbox, c as shouldEnableCodexAppServerNativeToolSurface, i as resolveCodexAppServerHookChannelId, l as shouldRequireCodexSandboxExecServerEnvironment, o as resolveCodexMessageToolProvider, p as mapCodexAppServerRemoteWorkspacePath, r as resolveCodexAppServerExecutionCwd, s as resolveCodexSandboxEnvironmentSelection, t as buildDynamicTools, u as shouldWarnCodexDynamicToolBuildStageSummary } from "./dynamic-tool-build-DkJpWzXt.mjs";
-import { a as buildCodexNativeHookRelayDisabledConfig, d as scheduleCodexNativeHookRelayUnregister, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, n as CodexManagedHooksOnlyError, r as assertCodexNativeHookRelayAllowed, s as createCodexNativeHookRelay, t as CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS, u as resolveCodexNativeHookRelayTtlMs } from "./native-hook-relay-DbNYjwuC.mjs";
-import { a as prepareCodexPluginThreadConfigStartupProvider, c as buildLegacyScheduledCodexAppRecoveryPrompt, d as resolveScheduledCodexAppCreatorCaptureDecision, i as isContextEngineBindingCompatible, l as buildScheduledCodexAppServerConnectionIdentity, n as isCodexAppServerProfilerEnabled, o as resolveCodexPluginThreadConfigStartupPolicy, r as buildContextEngineBinding, s as assertScheduledCodexAppAuthorityRuntime, t as startOrResumeThread, u as captureScheduledCodexAppAuthority } from "./thread-lifecycle-run-DOC2IWpW.mjs";
+import { a as resolveCodexExternalSandboxPolicyForOpenClawSandbox, c as shouldEnableCodexAppServerNativeToolSurface, i as resolveCodexAppServerHookChannelId, l as shouldRequireCodexSandboxExecServerEnvironment, o as resolveCodexMessageToolProvider, p as mapCodexAppServerRemoteWorkspacePath, r as resolveCodexAppServerExecutionCwd, s as resolveCodexSandboxEnvironmentSelection, t as buildDynamicTools, u as shouldWarnCodexDynamicToolBuildStageSummary } from "./dynamic-tool-build-BzTaCmlT.mjs";
+import { a as buildCodexNativeHookRelayDisabledConfig, d as scheduleCodexNativeHookRelayUnregister, i as buildCodexNativeHookRelayConfig, l as resolveCodexNativeHookRelayEvents, n as CodexManagedHooksOnlyError, r as assertCodexNativeHookRelayAllowed, s as createCodexNativeHookRelay, t as CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS, u as resolveCodexNativeHookRelayTtlMs } from "./native-hook-relay-COcu2b4l.mjs";
+import { a as prepareCodexPluginThreadConfigStartupProvider, c as buildLegacyScheduledCodexAppRecoveryPrompt, d as resolveScheduledCodexAppCreatorCaptureDecision, i as isContextEngineBindingCompatible, l as buildScheduledCodexAppServerConnectionIdentity, n as isCodexAppServerProfilerEnabled, o as resolveCodexPluginThreadConfigStartupPolicy, r as buildContextEngineBinding, s as assertScheduledCodexAppAuthorityRuntime, t as startOrResumeThread, u as captureScheduledCodexAppAuthority } from "./thread-lifecycle-run-aBfXzIGf.mjs";
 import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy } from "./session-permission-policy-CD2MAWU8.mjs";
-import { o as hasCodexNativeToolCatalog, s as loadCodexNativeToolCatalog } from "./native-skill-isolation-Cja6Nv79.mjs";
-import { r as prepareCodexNativeMcpFormResourceContext, t as createCodexNativeMcpAppResultDetailsPreparer } from "./native-mcp-app-gkEJsgj2.mjs";
-import { _ as invalidateCodexComputerFrame, a as handleCodexAppServerApprovalRequest, c as createCodexNativePreToolUseFailureBuffer, f as buildTurnCollaborationMode, g as buildCodexUserInput, h as readCodexRetainedBackgroundCommands, i as createCodexDynamicToolDiagnostics, l as buildCodexHistoryProvenancePrefix, m as CodexNativeProcessAuthority, n as projectCodexExecutableDynamicTools, o as ensureCodexSandboxExecServerEnvironment, p as buildTurnStartParams, r as routeCodexAppServerElicitationRequest, s as releaseCodexSandboxExecServerEnvironment, t as createCodexDynamicToolBridge, u as buildCodexParentLocalInstructions, v as createCodexRemoteWorkspaceFileReader, y as CodexNativeToolLifecycleProjector } from "./dynamic-tools-UL4DHNTh.mjs";
-import { c as promptSnapshot, i as mirrorPromptAtTurnStartBestEffort, n as createCodexAppServerUserMessagePersistenceNotifier, o as buildCodexUserPromptMessage, s as buildResolvedCodexUserPromptMessage, t as codexTranscriptMirrorRuntime } from "./transcript-mirror-CEQJZlF3.mjs";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Cog6mm2i.mjs";
-import { a as getCodexContextFileDisplayBasename, i as getCodexContextFileBasename, n as CODEX_NATIVE_PROJECT_DOC_BASENAMES, o as isNonEmptyString, r as buildCodexWorkspaceBootstrapContext, s as normalizeCodexContextFilePath } from "./attempt-workspace-context-GYPLawX6.mjs";
+import { o as hasCodexNativeToolCatalog, s as loadCodexNativeToolCatalog } from "./native-skill-isolation-B8cWhSFy.mjs";
+import { r as prepareCodexNativeMcpFormResourceContext, t as createCodexNativeMcpAppResultDetailsPreparer } from "./native-mcp-app-CFyl3R2g.mjs";
+import { _ as invalidateCodexComputerFrame, a as handleCodexAppServerApprovalRequest, c as createCodexNativePreToolUseFailureBuffer, f as buildTurnCollaborationMode, g as buildCodexUserInput, h as readCodexRetainedBackgroundCommands, i as createCodexDynamicToolDiagnostics, l as buildCodexHistoryProvenancePrefix, m as CodexNativeProcessAuthority, n as projectCodexExecutableDynamicTools, o as ensureCodexSandboxExecServerEnvironment, p as buildTurnStartParams, r as routeCodexAppServerElicitationRequest, s as releaseCodexSandboxExecServerEnvironment, t as createCodexDynamicToolBridge, u as buildCodexParentLocalInstructions, v as createCodexRemoteWorkspaceFileReader, y as CodexNativeToolLifecycleProjector } from "./dynamic-tools-BALvjDwR.mjs";
+import { c as promptSnapshot, i as mirrorPromptAtTurnStartBestEffort, n as createCodexAppServerUserMessagePersistenceNotifier, o as buildCodexUserPromptMessage, s as buildResolvedCodexUserPromptMessage, t as codexTranscriptMirrorRuntime } from "./transcript-mirror-5w4Hx1kt.mjs";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-CFCEWj0w.mjs";
+import { a as getCodexContextFileDisplayBasename, i as getCodexContextFileBasename, n as CODEX_NATIVE_PROJECT_DOC_BASENAMES, o as isNonEmptyString, r as buildCodexWorkspaceBootstrapContext, s as normalizeCodexContextFilePath } from "./attempt-workspace-context-DxHd71bH.mjs";
 import { n as captureCodexSettledTurnFinalizationContext } from "./settled-turn-context-BPL6D3RO.mjs";
-import { t as resolveCodexProviderWebSearchSupport } from "./provider-capabilities-C0laqfjE.mjs";
-import { a as runCodexComputerUseLiveTest, i as createComputerUseRequest, t as ensureCodexComputerUse } from "./computer-use-BFfXSTZw.mjs";
+import { t as resolveCodexProviderWebSearchSupport } from "./provider-capabilities-DMfkFwZi.mjs";
+import { a as runCodexComputerUseLiveTest, i as createComputerUseRequest, t as ensureCodexComputerUse } from "./computer-use-C0qJq1rh.mjs";
 import { asOptionalRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString, readNonBlankString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
@@ -81,13 +81,14 @@ import { AgentHarnessPreflightError, CODEX_APP_SERVER_CONTEXT_ENGINE_HOST, FAST_
 import { loadExecApprovalsReadOnlyAsync } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { AgentHarnessProjectionSettlement, createAgentHarnessAttemptCancellation, createAgentHarnessAttemptDeadlineController, createAgentHarnessAttemptLifecycle, shouldIncludeAgentHarnessRuntimeContext } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";
 import { getSessionEntryAsync, prepareSessionEntryPatch, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
-import { appendSessionYieldContext, composeSessionTranscriptWriteAssertion, hasPromptImageInput } from "openclaw/plugin-sdk/session-transcript-runtime";
+import { appendSessionTranscriptMessageByIdentityStrict, appendSessionYieldContext, composeSessionTranscriptWriteAssertion, hasPromptImageInput } from "openclaw/plugin-sdk/session-transcript-runtime";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { acknowledgeInternalToolResult, createAgentHarnessToolExecutionRegistry } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
 import { createNativeSessionBindingScope, createPreparedNativeSessionBindingAuthority, retainNativeSessionGenerationAuthority } from "openclaw/plugin-sdk/agent-harness-session-runtime";
 import { captureSessionEntryCurrentCheckAsync } from "openclaw/plugin-sdk/session-binding-runtime";
 import { captureFinalCodexCronCreatorToolAllowlist, formatMcpCodexApprovalRemedy, materializeStaticMcpToolsForHarnessRun, resolveCodexMcpToolOverridesForAgent, resolveCodexTtsProvenanceTransfer } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { getAgentScopedMediaLocalRoots } from "openclaw/plugin-sdk/media-local-roots";
+import { isSilentReplyText } from "openclaw/plugin-sdk/reply-runtime";
 import { isSilentReplyPayloadText } from "openclaw/plugin-sdk/reply-chunking";
 import { generatedImageAssetFromBase64 } from "openclaw/plugin-sdk/image-generation";
 import { resolveGeneratedMediaMaxBytes } from "openclaw/plugin-sdk/media-generation-runtime";
@@ -1551,6 +1552,26 @@ var CodexProjectionSettlement = class extends AgentHarnessProjectionSettlement {
 };
 /** Owns per-turn projection state and builds results from the same state. */
 var CodexTurnProjection = class {
+	/** Materialize terminal native-tool gaps while the durable checkpoint is still open. */
+	prepareTerminalToolResultCheckpoint(toolTelemetry, options) {
+		const retainedCommands = /* @__PURE__ */ new Map();
+		if (!this.aborted && !this.options.runAbortSignal?.aborted && this.completedTurn?.status === "completed" && !this.promptError) {
+			const pending = this.nativeToolLifecycleProjector.pendingCommands();
+			for (const [id, processId] of options?.readRetainedNativeCommands?.() ?? []) if (pending.has(id) && (pending.get(id) === null || pending.get(id) === processId)) retainedCommands.set(id, processId);
+		}
+		this.nativeToolLifecycleProjector.finalizeActive(void 0, retainedCommands);
+		const rawAssistantTexts = toolTelemetry.finalSourceReplyDelivered ? [] : this.assistantProjection.collectAssistantTexts();
+		const hasDeliverableAssistantOnCompletedTurn = this.completedTurn?.status === "completed" && rawAssistantTexts.some((text) => text.trim().length > 0 && !isSilentReplyText(text));
+		const synthesized = this.toolTranscriptProjection.synthesizeMissingToolResults({
+			synthesize: !this.completedTurn || this.completedTurn.status !== "completed" || this.assistantProjection.hasAssistantItemTextForSynthesis(),
+			retainedCommands,
+			terminalDisposition: this.aborted ? "tool_error" : hasDeliverableAssistantOnCompletedTurn ? "diagnostic_only" : "prompt_error"
+		});
+		if (synthesized) {
+			this.synthesizedMissingToolResultError = synthesized;
+			this.promptErrorSource ??= "prompt";
+		}
+	}
 	constructor(params, threadId, turnId, options = {}) {
 		this.params = params;
 		this.threadId = threadId;
@@ -1599,7 +1620,8 @@ var CodexTurnProjection = class {
 	}
 	buildResult(toolTelemetry, options) {
 		this.eventProjection.flushPendingGuardianWarning();
-		const { params: runParams, turnId, completedTurn, aborted, contextTokens, contextTokensSource, completedCompactionCount, synthesizedMissingToolResultError: previousMissingToolResultError, promptError: initialPromptError, promptErrorSource: initialPromptErrorSource, providerRefusal } = this;
+		this.prepareTerminalToolResultCheckpoint(toolTelemetry, options);
+		const { params: runParams, turnId, completedTurn, aborted, contextTokens, contextTokensSource, completedCompactionCount, synthesizedMissingToolResultError, promptError: initialPromptError, promptErrorSource: initialPromptErrorSource, providerRefusal } = this;
 		const upstreamUserText = this.options.upstreamUserText;
 		const turnTainted = this.settlement.turnTainted;
 		const observedItemCount = (/* @__PURE__ */ new Set([...this.observedItemIds, ...this.completedItemIds])).size;
@@ -1607,12 +1629,6 @@ var CodexTurnProjection = class {
 		const completedItemCount = this.completedItemIds.size;
 		const guardianReviewCount = this.eventProjection.guardianReviewCount;
 		const yieldDetected = options?.yieldDetected;
-		const retainedCommands = /* @__PURE__ */ new Map();
-		if (!aborted && !this.options.runAbortSignal?.aborted && completedTurn?.status === "completed" && !initialPromptError) {
-			const pending = this.nativeToolLifecycleProjector.pendingCommands();
-			for (const [id, processId] of options?.readRetainedNativeCommands?.() ?? []) if (pending.has(id) && (pending.get(id) === null || pending.get(id) === processId)) retainedCommands.set(id, processId);
-		}
-		this.nativeToolLifecycleProjector.finalizeActive(void 0, retainedCommands);
 		const assistantTexts = toolTelemetry.finalSourceReplyDelivered ? [] : this.assistantProjection.collectAssistantTexts();
 		const asyncMessages = this.assistantProjection.collectAsyncMessages();
 		const commentaryMessages = this.assistantProjection.collectCommentaryMessages();
@@ -1623,20 +1639,8 @@ var CodexTurnProjection = class {
 			...usage,
 			contextUsage: { state: "unavailable" }
 		} : usage;
-		const hasAssistantItemText = this.assistantProjection.hasAssistantItemTextForSynthesis();
-		const legacyFailClosed = !completedTurn || completedTurn.status !== "completed" || hasAssistantItemText;
-		const hasDeliverableAssistantOnCompletedTurn = completedTurn?.status === "completed" && assistantTexts.some((text) => text.trim().length > 0);
-		const synthesizedMissingToolResultError = this.toolTranscriptProjection.synthesizeMissingToolResults({
-			synthesize: legacyFailClosed,
-			retainedCommands,
-			terminalDisposition: aborted ? "tool_error" : hasDeliverableAssistantOnCompletedTurn ? "diagnostic_only" : "prompt_error"
-		});
-		const storedMissingToolResultError = synthesizedMissingToolResultError ?? previousMissingToolResultError;
-		let promptErrorSource = initialPromptErrorSource;
-		if (synthesizedMissingToolResultError) {
-			this.synthesizedMissingToolResultError = synthesizedMissingToolResultError;
-			promptErrorSource = promptErrorSource ?? "prompt";
-		}
+		const storedMissingToolResultError = synthesizedMissingToolResultError;
+		const promptErrorSource = initialPromptErrorSource;
 		const assistantMessageOptions = {
 			tokenUsage: projectedUsage,
 			aborted,
@@ -1767,15 +1771,16 @@ var CodexAppServerEventProjector = class extends CodexTurnProjection {
 		return !this.projectionClosed && !this.aborted && !this.options.runAbortSignal?.aborted && this.completedTurn?.status === "completed" && !this.promptError ? this.nativeToolLifecycleProjector.pendingCommands() : /* @__PURE__ */ new Map();
 	}
 	/** Native completion owns the answer independently of unfinished host projection. */
-	recoverCompletedAnswer() {
+	recoverCompletedAnswer(toolTelemetry, options) {
 		const completed = this.settlement.completedAnswer;
 		if (!completed || this.aborted || this.promptError) return false;
-		this.closeCompactionProgress();
-		this.projectionController.abort();
-		this.transcriptCheckpoint.abandon();
 		this.completedTurn = completed.turn;
 		this.assistantProjection.recordItemCompleted(completed.answer);
 		this.assistantProjection.finalizeAnswerCandidate(completed.turn);
+		this.prepareTerminalToolResultCheckpoint(toolTelemetry, options);
+		this.closeCompactionProgress();
+		this.projectionController.abort();
+		this.transcriptCheckpoint.abandon();
 		return true;
 	}
 	getActiveMcpToolCall(serverName) {
@@ -3016,6 +3021,7 @@ async function cleanupCodexAttempt(resources, turnRuntime, lifecycle, requestRun
 	resourceState.releaseInferenceContext = void 0;
 	prompt.context.attemptTools.scheduledAppAuthoritySourceRef.current = void 0;
 	freezeRunTerminalOutcome();
+	if (!state.projectionClosed) activeTurn.activeProjector.prepareTerminalToolResultCheckpoint(prompt.context.attemptTools.toolBridge.telemetry);
 	const projectionClose = state.projectionClosed ? void 0 : activeTurn.activeProjector.closeProjection();
 	state.projectionClosed = true;
 	const checkpointCleanup = projectionClose ? runCleanupStep("codex-transcript-checkpoint", () => projectionClose) : void 0;
@@ -4411,6 +4417,7 @@ async function beginCodexAttemptSettlement(resources, turnRuntime, notifications
 	const { state: resourceState } = resources;
 	const { connection } = resources.prompt.context.runtime;
 	const { params, runAbortController, appServer } = connection;
+	const { toolBridge } = resources.prompt.context.attemptTools;
 	const { state, deadlines, settlementExpired } = turnRuntime;
 	const { drainNotificationQueue } = notifications;
 	const { activeProjector, activeTurnId } = activeTurn;
@@ -4464,6 +4471,7 @@ async function beginCodexAttemptSettlement(resources, turnRuntime, notifications
 							return /* @__PURE__ */ new Map();
 						}
 					};
+					state.readRetainedNativeCommands = readRetainedNativeCommands;
 				} catch (error) {
 					embeddedAgentLog.debug("could not confirm retained native commands", {
 						threadId: resourceState.thread.threadId,
@@ -4472,6 +4480,7 @@ async function beginCodexAttemptSettlement(resources, turnRuntime, notifications
 				}
 				await drainNotificationQueue();
 			}
+			activeProjector.prepareTerminalToolResultCheckpoint(toolBridge.telemetry, { readRetainedNativeCommands: () => readRetainedNativeCommands?.() ?? /* @__PURE__ */ new Map() });
 			await closeProjection();
 			await activeProjector.settlement.drain();
 		}),
@@ -4609,7 +4618,10 @@ async function finalizeCodexAttempt(resources, turnRuntime, lifecycle, notificat
 			]);
 			if (runAbortController.signal.aborted) await state.abortCleanup;
 		} finally {
-			if (!state.projectionClosed) await resources.runCleanupStep("codex-transcript-checkpoint", closeProjection);
+			if (!state.projectionClosed) {
+				activeProjector.prepareTerminalToolResultCheckpoint(toolBridge.telemetry, { readRetainedNativeCommands });
+				await resources.runCleanupStep("codex-transcript-checkpoint", closeProjection);
+			}
 		}
 		const result = activeProjector.buildResult(toolBridge.telemetry, {
 			yieldDetected: toolState.yieldDetected,
@@ -5767,14 +5779,6 @@ function createNativeSubagentAssignmentStore(params) {
 		await params.assertLifecycleCurrentAsync?.();
 		assertCurrent();
 	};
-	const mutate = (kind) => (assignment, assertSourceCurrent) => bindingStore.mutate(identity, {
-		kind,
-		owner,
-		assignment
-	}, () => {
-		assertCurrent();
-		assertSourceCurrent();
-	}, params.authority);
 	return {
 		assertCurrent,
 		assertCurrentAsync,
@@ -5783,8 +5787,59 @@ function createNativeSubagentAssignmentStore(params) {
 			await assertCurrentAsync();
 			return assignments;
 		},
-		record: mutate("record-native-subagent-assignment"),
-		consume: mutate("consume-native-subagent-assignment")
+		record: (assignment, assertSourceCurrent) => bindingStore.mutate(identity, {
+			kind: "record-native-subagent-assignment",
+			owner,
+			assignment
+		}, () => {
+			assertCurrent();
+			assertSourceCurrent();
+		}, params.authority),
+		consume: async (assignment, assertSourceCurrent, undelivered) => {
+			const assertRetirementCurrent = () => {
+				assertCurrent();
+				assertSourceCurrent();
+			};
+			const applied = await bindingStore.mutate(identity, {
+				kind: "consume-native-subagent-assignment",
+				owner,
+				assignment,
+				...undelivered ? { undelivered: true } : {}
+			}, assertRetirementCurrent, params.authority);
+			if (applied && undelivered) {
+				embeddedAgentLog.warn("Native subagent completion retired without delivery", {
+					childThreadId: assignment.childThreadId,
+					nativeTurnId: assignment.nativeTurnId,
+					status: undelivered.status,
+					childSessionKey: assignment.runId
+				});
+				try {
+					if (identity.kind !== "session" || !identity.sessionKey || !params.authority) throw new Error("Native completion has no parent transcript authority.");
+					const note = await appendSessionTranscriptMessageByIdentityStrict({
+						agentId: identity.agentId,
+						sessionId: owner.sessionId,
+						sessionKey: identity.sessionKey,
+						preparation: { source: params.authority.prepared.source },
+						updateMode: "inline",
+						message: {
+							role: "custom",
+							customType: "openclaw.system-note",
+							display: true,
+							content: `Native subagent ${assignment.childThreadId} finished with status ${undelivered.status}, but its completion could not be delivered. Automatic delivery has stopped. Inspect its native Codex thread history${assignment.nativeTurnId ? ` at turn ${assignment.nativeTurnId}` : ""}; child session key: ${assignment.runId}.`.slice(0, 2048),
+							timestamp: Date.now(),
+							idempotencyKey: `codex-undelivered:${owner.lifecycleRevision ?? owner.sessionId}:${assignment.childThreadId}:${assignment.nativeTurnId ?? "initial"}`
+						}
+					});
+					if (note.kind !== "result") throw new Error(`Native completion note was ${note.kind}.`);
+				} catch (error) {
+					embeddedAgentLog.warn("Could not persist native completion retirement note", {
+						childSessionKey: assignment.runId,
+						error: formatErrorMessage(error)
+					});
+				}
+			}
+			return applied;
+		}
 	};
 }
 function createNativeSubagentSubmissionStore(params) {
@@ -6896,7 +6951,7 @@ function createCodexAttemptServerRequestController(resources, turnRuntime, lifec
 //#region extensions/codex/src/app-server/attempt-runtime-artifact.ts
 async function verifyStartupArtifact(params) {
 	if (!params.request) return;
-	const { readCodexAppServerClientRuntimeArtifact, validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-CmLWeyJB.mjs");
+	const { readCodexAppServerClientRuntimeArtifact, validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-Bn_GvxjU.mjs");
 	const runtimeArtifact = readCodexAppServerClientRuntimeArtifact(params.client);
 	const expected = params.request.expected;
 	const matchesExpected = !expected || runtimeArtifact?.id === expected.id && runtimeArtifact.fingerprint === expected.fingerprint;
@@ -8594,7 +8649,7 @@ function createCodexAttemptTurnState(resources) {
 		onDeadlineChanged: params.onAttemptDeadlineChanged,
 		onTimeout: (timeout) => {
 			const pendingStage = state.pendingSettlementStage ?? projectorRef.current?.settlement.pendingStage ?? "notification_queue";
-			if (timeout.kind === "settlement" && projectorRef.current?.recoverCompletedAnswer()) {
+			if (timeout.kind === "settlement" && projectorRef.current?.recoverCompletedAnswer(prompt.context.attemptTools.toolBridge.telemetry, { readRetainedNativeCommands: state.readRetainedNativeCommands })) {
 				state.settlementWarning = {
 					pendingStage,
 					elapsedMs: timeout.elapsedMs,

package/dist/.setup/{runtime-artifact-CmLWeyJB.mjs → runtime-artifact-Bn_GvxjU.mjs}

@@ -1,7 +1,7 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { p as resolvePackagedCodexNativeCommand } from "./managed-binary-DbKvGXKl.mjs";
-import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-Bq160Dhv.mjs";
-import { captureCodexConfiguredConnection, finalizeCodexConfiguredConnection, isCodexConfiguredConnectionArtifact, validateCodexConfiguredConnectionCapture } from "./runtime-artifact-connection-DpWlZ02e.mjs";
+import { p as resolvePackagedCodexNativeCommand } from "./managed-binary-BwzkwiGo.mjs";
+import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-BVeWgcK6.mjs";
+import { captureCodexConfiguredConnection, finalizeCodexConfiguredConnection, isCodexConfiguredConnectionArtifact, validateCodexConfiguredConnectionCapture } from "./runtime-artifact-connection-DCwh9tgV.mjs";
 import { createHash } from "node:crypto";
 import { resolveWindowsExecutablePath } from "openclaw/plugin-sdk/windows-spawn";
 import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";

package/dist/.setup/{runtime-artifact-connection-DpWlZ02e.mjs → runtime-artifact-connection-DCwh9tgV.mjs}

@@ -1,6 +1,6 @@
 import { t as codexAppServerStartOptionsKey } from "./config-options-DMFZkd3X.mjs";
-import "./config-runtime-BZRizyuG.mjs";
-import { r as resolveCodexAppServerUnixSocketPath } from "./transport-websocket-0YqiI_MH.mjs";
+import "./config-runtime-CqCrHEAU.mjs";
+import { r as resolveCodexAppServerUnixSocketPath } from "./transport-websocket-2Y-cL8kD.mjs";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import path from "node:path";

package/dist/.setup/{sandbox-guard-DneAfNye.mjs → sandbox-guard-CrzVgQUn.mjs}

@@ -1,6 +1,6 @@
 import { l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-DsWSCPHO.mjs";
 import { n as prepareCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-D09tLP-u.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/sandbox-guard.ts
 var sandbox_guard_exports = /* @__PURE__ */ __exportAll({

package/dist/.setup/{session-binding-BgsWcbdY.mjs → session-binding-Dg0B6Zua.mjs}

@@ -1,9 +1,9 @@
-import { i as adoptCodexNativeSubagentSubmissions, n as mutateNativePendingAssignments, o as mutateCodexNativeSubagentSubmissions } from "./native-subagent-pending-assignments-CTinVtjo.mjs";
+import { a as adoptCodexNativeSubagentSubmissions, c as readCodexNativeSubagentSubmissions, l as codexNativeSubagentRunId, n as mutateNativePendingAssignments, o as matchesCodexNativeSubagentSubmissionOwner, s as mutateCodexNativeSubagentSubmissions } from "./native-subagent-pending-assignments-CX-LtYDX.mjs";
 import { a as readStoredCodexAppServerBinding, i as readCodexBindingTimestamp, n as matchesPendingSupervisionBranch, o as stripUndefinedBinding, r as readCodexAppServerThreadBinding, s as validateBindingForWrite } from "./session-binding-record-codec-DvmOI7g_.mjs";
-import { a as ownsStoredSessionGeneration, c as preserveNativeTaskImport, d as readCurrentCodexAppServerBindingAsync, f as readCurrentCodexAppServerBindings, g as sessionBindingIdentity, h as readPluginAppPolicyContext, i as matchesCodexNativeSubagentSubmissionBinding, l as preservedSessionGeneration, m as readCurrentNativePendingAssignments, n as assertCodexBindingMayBeReplaced, o as preserveCodexNativeSubagentSubmissions, p as readCurrentCodexNativeSubagentSubmissions, r as bindingStoreKey, s as preserveNativePendingAssignments, t as CodexSupervisionBindingReplacementError, u as readCurrentCodexAppServerBinding, v as storedSessionGeneration } from "./session-binding-record-C_THntMe.mjs";
+import { a as ownsStoredSessionGeneration, c as preserveNativeTaskImport, d as readCurrentCodexAppServerBindingAsync, f as readCurrentCodexAppServerBindings, g as sessionBindingIdentity, h as readPluginAppPolicyContext, i as matchesCodexNativeSubagentSubmissionBinding, l as preservedSessionGeneration, m as readCurrentNativePendingAssignments, n as assertCodexBindingMayBeReplaced, o as preserveCodexNativeSubagentSubmissions, p as readCurrentCodexNativeSubagentSubmissions, r as bindingStoreKey, s as preserveNativePendingAssignments, t as CodexSupervisionBindingReplacementError, u as readCurrentCodexAppServerBinding, v as storedSessionGeneration } from "./session-binding-record-BpWF2Sus.mjs";
 import { a as PHYSICAL_SESSION_RETIRE_TTL_MS, i as CODEX_APP_SERVER_BINDING_NAMESPACE, n as CODEX_APP_SERVER_BINDING_LEASE, r as CODEX_APP_SERVER_BINDING_MAX_ENTRIES, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-meta-Lkm5Lpf4.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-auwzSwwy.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import { AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -15,25 +15,51 @@ function mutateNativeSubagentBinding({ identity, current, mutation, assertCurren
 	if (!assertCurrent) throw new Error(`Codex native ${isAssignment ? "assignment" : "subagent submission"} mutation requires current authority.`);
 	assertCurrent();
 	if (current?.state !== "active" || !ownsStoredSessionGeneration(identity, current) || identity.kind === "session" && mutation.owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(current.binding, mutation.owner)) return { result: false };
-	const field = isAssignment ? "nativeSubagentAssignments" : "nativeSubagentSubmissions";
-	const changed = isAssignment ? mutateNativePendingAssignments({
-		current: current.nativeSubagentAssignments,
-		owner: mutation.owner,
-		assignment: mutation.assignment,
-		consume: mutation.kind === "consume-native-subagent-assignment"
-	}) : mutateCodexNativeSubagentSubmissions({
+	if (isAssignment) {
+		const changed = mutateNativePendingAssignments({
+			current: current.nativeSubagentAssignments,
+			owner: mutation.owner,
+			assignment: mutation.assignment,
+			consume: mutation.kind === "consume-native-subagent-assignment"
+		});
+		if (!changed.applied) return { result: mutation.kind === "consume-native-subagent-assignment" && mutation.undelivered === true && changed.absent === true };
+		const { nativeSubagentAssignments: _previous, ...bindingOwner } = current;
+		const retired = changed.consumed;
+		if (retired && mutation.kind === "consume-native-subagent-assignment" && mutation.undelivered) {
+			let submissions;
+			try {
+				submissions = readCodexNativeSubagentSubmissions(bindingOwner.nativeSubagentSubmissions);
+			} catch {}
+			if (submissions && matchesCodexNativeSubagentSubmissionOwner(submissions.owner, mutation.owner)) {
+				const receipts = submissions.receipts.filter((receipt) => receipt.childThreadId !== retired.childThreadId || receipt.submissionId !== retired.nativeTurnId && codexNativeSubagentRunId(receipt.childThreadId, receipt.submissionId) !== retired.runId);
+				delete bindingOwner.nativeSubagentSubmissions;
+				if (receipts.length) bindingOwner.nativeSubagentSubmissions = {
+					...submissions,
+					receipts
+				};
+			}
+		}
+		return {
+			result: true,
+			next: {
+				...bindingOwner,
+				...changed.next ? { nativeSubagentAssignments: changed.next } : {}
+			}
+		};
+	}
+	const changed = mutateCodexNativeSubagentSubmissions({
 		current: current.nativeSubagentSubmissions,
 		owner: mutation.owner,
 		receipt: mutation.receipt,
 		consume: mutation.kind === "consume-native-subagent-submission"
 	});
 	if (!changed.applied) return { result: false };
-	const { [field]: _previous, ...bindingOwner } = current;
+	const { nativeSubagentSubmissions: _previous, ...bindingOwner } = current;
 	return {
 		result: true,
 		next: {
 			...bindingOwner,
-			...changed.next ? { [field]: changed.next } : {}
+			...changed.next ? { nativeSubagentSubmissions: changed.next } : {}
 		}
 	};
 }

package/dist/.setup/{session-binding-record-C_THntMe.mjs → session-binding-record-BpWF2Sus.mjs}

@@ -1,6 +1,6 @@
-import { a as matchesCodexNativeSubagentSubmissionOwner, h as codexNativeSubagentHistoryConnectionFingerprint, r as readNativePendingAssignments, s as readCodexNativeSubagentSubmissions, t as matchesNativeAssignmentLifecycle } from "./native-subagent-pending-assignments-CTinVtjo.mjs";
+import { c as readCodexNativeSubagentSubmissions, g as codexNativeSubagentHistoryConnectionFingerprint, i as readNativePendingAssignments, o as matchesCodexNativeSubagentSubmissionOwner, t as matchesNativeAssignmentLifecycle } from "./native-subagent-pending-assignments-CX-LtYDX.mjs";
 import { a as readStoredCodexAppServerBinding, t as legacyAppPolicyEntrySchema } from "./session-binding-record-codec-DvmOI7g_.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-C9uEGpDX.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{session-binding-sidecars-BNSS6WL4.mjs → session-binding-sidecars-C9uEGpDX.mjs}

@@ -482,7 +482,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-BgsWcbdY.mjs").then((n) => n.a), import("./conversation-binding-data-khgW0n-o.mjs").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Dg0B6Zua.mjs").then((n) => n.a), import("./conversation-binding-data-CAKQCqTL.mjs").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = await createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),

package/dist/.setup/{session-cancellation-9l8N4EUL.mjs → session-cancellation-Bg94rN6N.mjs}

@@ -1,7 +1,7 @@
-import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-aolg0chE.mjs";
-import "./shared-client-B8v6e5D0.mjs";
-import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DJ8PPxRc.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-D1pYkirc.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-Do2ZQrNP.mjs";
+import "./shared-client-BelwlhWf.mjs";
+import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DxW6b6fR.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-LJd5_D5F.mjs";
 //#region extensions/codex/src/app-server/session-cancellation.ts
 /** Stop owns admitted descendants, without retiring the session or its native history. */
 async function withCodexSessionDescendantCancellation(bindingStore, params, run) {