@openclaw/codex 2026.10.2 → 2026.10.5-beta.2

package/dist/.setup/{effective-mcp-catalog-CIdbHp1t.mjs → effective-mcp-catalog-x3JVEcJp.mjs}

@@ -1,8 +1,8 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-BZB8RgcF.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BE1HXsNo.mjs";
-import { U as protectCodexAppServerLiveThread } from "./shared-client-5NUq43f3.mjs";
-import "./session-binding-Ce7BqiPN.mjs";
-import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-j10HhfTC.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-DU_0biMD.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-tENCQOub.mjs";
+import { U as protectCodexAppServerLiveThread } from "./shared-client-BjiqpbC5.mjs";
+import "./session-binding-JEHNMPsr.mjs";
+import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-DW41snf3.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts
@@ -35,9 +35,9 @@ function buildCodexEffectiveMcpCatalog(statuses, toolOverrides) {
 		const safeServerName = safeNames.get(status.name) ?? status.name;
 		const denialMap = toolOverrides?.mcpToolsDeny;
 		const deniedNames = new Set(denialMap && Object.hasOwn(denialMap, status.name) ? denialMap[status.name] : []);
-		const observedNames = /* @__PURE__ */ new Set();
-		for (const [toolName, raw] of Object.entries(status.tools).toSorted(([left], [right]) => left.localeCompare(right))) {
-			observedNames.add(toolName);
+		const observedNames = new Set(Object.keys(status.tools));
+		const toolEntries = [...Object.entries(status.tools).toSorted(([left], [right]) => left.localeCompare(right)), ...[...deniedNames].filter((name) => !observedNames.has(name)).toSorted().map((name) => [name, void 0])];
+		for (const [toolName, raw] of toolEntries) {
 			const deniedBySession = deniedNames.has(toolName) ? true : void 0;
 			const tool = catalogTool({
 				serverName: status.name,
@@ -48,19 +48,10 @@ function buildCodexEffectiveMcpCatalog(statuses, toolOverrides) {
 			});
 			(deniedBySession ? sessionDeniedTools : tools).push(tool);
 		}
-		for (const toolName of [...deniedNames].toSorted()) {
-			if (observedNames.has(toolName)) continue;
-			sessionDeniedTools.push(catalogTool({
-				serverName: status.name,
-				safeServerName,
-				toolName,
-				deniedBySession: true
-			}));
-		}
 		serverEntries.push([status.name, {
 			...projectCodexMcpServerMetadata(status),
 			safeServerName,
-			toolCount: observedNames.size + [...deniedNames].filter((name) => !observedNames.has(name)).length
+			toolCount: toolEntries.length
 		}]);
 	}
 	return {
@@ -116,7 +107,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 	if (!retained && params.prepareSession) {
 		const preparation = await params.prepareSession();
 		params.assertCurrent();
-		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-JFCtSkRp.mjs");
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-GTx-bRGN.mjs");
 		await prepareCodexMcpAppSession({
 			preparation,
 			bindingStore: options.bindingStore,
@@ -137,7 +128,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 		};
 		params.assertCurrent();
 		assertBinding();
-		const { createNativeMcpRuntime } = await import("./native-mcp-app-ChpyWmL-.mjs").then((n) => n.n);
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-CDrrBaTE.mjs").then((n) => n.n);
 		params.assertCurrent();
 		const runtime = createNativeMcpRuntime({
 			client: retained.client,

package/dist/.setup/{elicitation-input-r9axtppm.mjs → elicitation-input-DXG_qaXr.mjs}

@@ -4,34 +4,28 @@ import { agentHarnessStructuredInput } from "openclaw/plugin-sdk/agent-harness-r
 function compileCodexOrdinaryElicitation(params) {
 	const requestTurnId = readValue(params.snapshot, "turnId");
 	if (typeof requestTurnId === "string" && requestTurnId !== params.turnId) return { kind: "ignored" };
-	if (requestTurnId !== null && typeof requestTurnId !== "string") return {
+	return {
 		kind: "compiled",
-		input: {
+		input: compileInput()
+	};
+	function compileInput() {
+		if (requestTurnId !== null && typeof requestTurnId !== "string") return {
 			kind: "unsupported",
 			message: "OpenClaw declined an MCP elicitation with invalid turn correlation."
-		}
-	};
-	const mode = readCodexElicitationString(params.snapshot, "mode");
-	if (mode === "url") return {
-		kind: "compiled",
-		input: agentHarnessStructuredInput.compileUrl({
+		};
+		const mode = readCodexElicitationString(params.snapshot, "mode");
+		if (mode === "url") return agentHarnessStructuredInput.compileUrl({
 			url: readValue(params.snapshot, "url"),
 			elicitationId: readValue(params.snapshot, "elicitationId"),
 			message: readValue(params.snapshot, "message"),
 			fallbackMessage: "Codex provided a URL",
 			protocolName: "MCP"
-		})
-	};
-	if (mode !== "form" && mode !== "openai/form" && mode !== "openaiForm") return {
-		kind: "compiled",
-		input: {
+		});
+		if (mode !== "form" && mode !== "openai/form" && mode !== "openaiForm") return {
 			kind: "unsupported",
 			message: `OpenClaw does not support MCP elicitation mode ${JSON.stringify(mode ?? "unknown")}.`
-		}
-	};
-	return {
-		kind: "compiled",
-		input: agentHarnessStructuredInput.compileForm({
+		};
+		return agentHarnessStructuredInput.compileForm({
 			schema: readValue(params.snapshot, "requestedSchema"),
 			message: readCodexElicitationString(params.snapshot, "message"),
 			fallbackMessage: "Codex needs input",
@@ -45,8 +39,8 @@ function compileCodexOrdinaryElicitation(params) {
 				allowImagePicker: mode === "openai/form",
 				metadata: { secretPath: ["isSecret"] }
 			}
-		})
-	};
+		});
+	}
 }
 function readValue(record, key) {
 	return Object.hasOwn(record, key) ? record[key] : void 0;

package/dist/.setup/{ephemeral-turn-U4th15a6.mjs → ephemeral-turn-Dk0wWoqi.mjs}

@@ -1,7 +1,7 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { x as readCodexTurnCompletedNotification } from "./client-ChJtGEdJ.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-BOKSJmfw.mjs";
-import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-03R0I2dM.mjs";
+import { x as readCodexTurnCompletedNotification } from "./client-zrCKOu_E.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-D8DLkZgH.mjs";
+import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-BpKfdoTm.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";

package/dist/.setup/{event-projector-assistant-message-BwG5TUYW.mjs → event-projector-assistant-message-CLMKN4x-.mjs}

@@ -1,5 +1,5 @@
-import { t as codexProviderRefusalDiagnostics } from "./event-projector-values-DTqZHizf.mjs";
-import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-wh_-K3Vo.mjs";
+import { t as codexProviderRefusalDiagnostics } from "./event-projector-values-CLvG1Hil.mjs";
+import { t as resolveCodexLocalRuntimeAttribution } from "./local-runtime-attribution-CZz2DJ4q.mjs";
 import { createAgentHarnessAssistantMessage } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";
 //#region extensions/codex/src/app-server/event-projector-assistant-message.ts
 function createAssistantMessage(params, text, options) {

package/dist/.setup/{event-projector-usage-03R0I2dM.mjs → event-projector-usage-BpKfdoTm.mjs}

@@ -1,4 +1,5 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { n as extractRawResponseItemText } from "./event-projector-values-CLvG1Hil.mjs";
 import { asSafeIntegerInRange, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeUsage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/attempt-notifications.ts
@@ -20,17 +21,16 @@ function readNotificationItemId(notification) {
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return (item ? readStringField(item, "id") : void 0) ?? readStringField(notification.params, "itemId") ?? readStringField(notification.params, "id");
 }
-function isPendingOpenClawDynamicToolCompletionNotification(notification, pendingOpenClawDynamicToolCompletionIds) {
-	if (notification.method !== "item/completed" || !isJsonObject(notification.params)) return false;
+function completePendingOpenClawDynamicToolNotification(notification, pendingOpenClawDynamicToolCompletionIds) {
+	if (notification.method !== "item/completed" || !isJsonObject(notification.params)) return;
 	const itemId = readNotificationItemId(notification);
-	if (!itemId || !pendingOpenClawDynamicToolCompletionIds.has(itemId)) return false;
+	if (!itemId || !pendingOpenClawDynamicToolCompletionIds.has(itemId)) return;
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	const itemType = item ? readStringField(item, "type") : void 0;
-	return itemType === void 0 || itemType === "dynamicToolCall";
+	if (itemType === void 0 || itemType === "dynamicToolCall") pendingOpenClawDynamicToolCompletionIds.delete(itemId);
 }
 function isRawFunctionToolOutputCompletionNotification(notification) {
-	if (notification.method !== "rawResponseItem/completed" || !isJsonObject(notification.params)) return false;
-	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
+	const item = readCompletedRawItem(notification);
 	return item ? readStringField(item, "type") === "function_call_output" : false;
 }
 function isTerminalTurnStatus(status) {
@@ -38,26 +38,13 @@ function isTerminalTurnStatus(status) {
 }
 /** Detects Codex's interrupted-turn marker, not user-authored copies of it. */
 function isCodexTurnAbortMarkerNotification(notification, options = {}) {
-	if (notification.method !== "rawResponseItem/completed" || !isJsonObject(notification.params)) return false;
-	const item = notification.params.item;
-	const role = isJsonObject(item) ? readStringField(item, "role") : void 0;
-	if (!isJsonObject(item) || readStringField(item, "type") !== "message" || role !== "user" && role !== "developer") return false;
-	const text = extractRawResponseItemText(item).trim();
-	const currentPromptTexts = [options.currentPromptText, ...options.currentPromptTexts ?? []].filter((prompt) => typeof prompt === "string" && prompt.length > 0).map((prompt) => prompt.trim());
-	if (role === "user" && currentPromptTexts.includes(text)) return false;
+	const item = readCompletedRawItem(notification);
+	const role = item ? readStringField(item, "role") : void 0;
+	if (!item || readStringField(item, "type") !== "message" || role !== "user" && role !== "developer") return false;
+	const text = extractRawResponseItemText(item, "input_text") ?? "";
+	if (role === "user" && options.currentPromptText?.trim() === text) return false;
 	return text.startsWith(CODEX_TURN_ABORT_MARKER_START) && text.endsWith(CODEX_TURN_ABORT_MARKER_END);
 }
-function extractRawResponseItemText(item) {
-	const content = item.content;
-	if (!Array.isArray(content)) return "";
-	return content.flatMap((entry) => {
-		if (!isJsonObject(entry)) return [];
-		const type = readStringField(entry, "type");
-		if (type !== "input_text" && type !== "text") return [];
-		const text = readStringField(entry, "text");
-		return text ? [text] : [];
-	}).join("");
-}
 function readCodexNotificationItem(params) {
 	if (!isJsonObject(params) || !isJsonObject(params.item)) return;
 	const item = params.item;
@@ -65,8 +52,7 @@ function readCodexNotificationItem(params) {
 }
 /** Reads the stable call id from a model-emitted raw tool item. */
 function readRawResponseToolCallId(notification) {
-	if (notification.method !== "rawResponseItem/completed" || !isJsonObject(notification.params)) return;
-	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
+	const item = readCompletedRawItem(notification);
 	if (!item) return;
 	switch (readStringField(item, "type")) {
 		case "custom_tool_call":
@@ -78,16 +64,15 @@ function readRawResponseToolCallId(notification) {
 		default: return;
 	}
 }
+function readCompletedRawItem(notification) {
+	if (notification.method !== "rawResponseItem/completed" || !isJsonObject(notification.params)) return;
+	return isJsonObject(notification.params.item) ? notification.params.item : void 0;
+}
 //#endregion
 //#region extensions/codex/src/app-server/event-projector-usage.ts
 function readTokenCount(record, key) {
 	return asSafeIntegerInRange(record[key], { min: 0 });
 }
-function readCodexThreadTokenUsage(params) {
-	const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
-	const last = tokenUsage && isJsonObject(tokenUsage.last) ? tokenUsage.last : void 0;
-	return last ? normalizeCodexResponseTokenUsage(last) : void 0;
-}
 function readCodexThreadContextSnapshot(params) {
 	const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
 	const last = tokenUsage && isJsonObject(tokenUsage.last) ? tokenUsage.last : void 0;
@@ -152,7 +137,9 @@ var CodexUsageProjection = class {
 		this.contextUsage = { state: "unavailable" };
 	}
 	recordThread(params) {
-		const usage = readCodexThreadTokenUsage(params);
+		const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
+		const last = tokenUsage && isJsonObject(tokenUsage.last) ? tokenUsage.last : void 0;
+		const usage = last ? normalizeCodexResponseTokenUsage(last) : void 0;
 		this.threadUsage = usage ?? this.threadUsage;
 		if (!this.responseUsage && usage) this.contextUsage = usage.contextUsage;
 		return readCodexThreadContextSnapshot(params);
@@ -177,4 +164,4 @@ var CodexUsageProjection = class {
 	}
 };
 //#endregion
-export { isRawFunctionToolOutputCompletionNotification as a, readNotificationItemId as c, isPendingOpenClawDynamicToolCompletionNotification as i, readRawResponseToolCallId as l, readCodexThreadContextSnapshot as n, isTerminalTurnStatus as o, isCodexTurnAbortMarkerNotification as r, readCodexNotificationItem as s, CodexUsageProjection as t, updateActiveTurnItemIds as u };
+export { isRawFunctionToolOutputCompletionNotification as a, readRawResponseToolCallId as c, isCodexTurnAbortMarkerNotification as i, updateActiveTurnItemIds as l, readCodexThreadContextSnapshot as n, isTerminalTurnStatus as o, completePendingOpenClawDynamicToolNotification as r, readCodexNotificationItem as s, CodexUsageProjection as t };

package/dist/.setup/{event-projector-values-DTqZHizf.mjs → event-projector-values-CLvG1Hil.mjs}

@@ -55,8 +55,7 @@ function codexProviderRefusalDiagnostics(refusal, timestamp) {
 }
 function readNullableString(record, key) {
 	const value = record[key];
-	if (value === null) return null;
-	return typeof value === "string" ? value : void 0;
+	return value === null || typeof value === "string" ? value : void 0;
 }
 function readCodexErrorNotificationMessage(record) {
 	const error = record.error;
@@ -75,11 +74,11 @@ function readHookOutputEntries(value) {
 		}];
 	});
 }
-function extractRawAssistantText(item) {
+function extractRawResponseItemText(item, textType = "output_text") {
 	const parts = (Array.isArray(item.content) ? item.content : []).flatMap((entry) => {
 		if (!isJsonObject(entry)) return [];
 		const type = readStringField(entry, "type");
-		if (type !== "output_text" && type !== "text") return [];
+		if (type !== textType && type !== "text") return [];
 		const value = readStringField(entry, "text");
 		return value === void 0 ? [] : [value];
 	});
@@ -93,4 +92,4 @@ function readItem(value) {
 	return value;
 }
 //#endregion
-export { readHookOutputEntries as a, readCodexProviderRefusal as i, extractRawAssistantText as n, readItem as o, readCodexErrorNotificationMessage as r, readNullableString as s, codexProviderRefusalDiagnostics as t };
+export { readHookOutputEntries as a, readCodexProviderRefusal as i, extractRawResponseItemText as n, readItem as o, readCodexErrorNotificationMessage as r, readNullableString as s, codexProviderRefusalDiagnostics as t };

package/dist/.setup/history-rejection-B4nOXNXF.mjs

@@ -0,0 +1,13 @@
+//#region extensions/codex/src/app-server/history-rejection.ts
+/** Only an owning rejection site can supply a diagnostic; exception text is never evidence. */
+var CodexHistoryRejection = class extends Error {
+	constructor(reason) {
+		super(`Codex history rejected: ${reason}`);
+		this.reason = reason;
+	}
+};
+function codexHistoryRejectionReason(error) {
+	return error instanceof CodexHistoryRejection ? error.reason : "history_read_failed";
+}
+//#endregion
+export { codexHistoryRejectionReason as n, CodexHistoryRejection as t };

package/dist/.setup/{inference-context-D-9gWlTR.mjs → inference-context-DNlGwzwy.mjs}

@@ -1,4 +1,4 @@
-import { n as readCodexInferenceMetadata } from "./inference-metadata-CgIf7sOx.mjs";
+import { n as readCodexInferenceMetadata } from "./inference-metadata-DCvcG_N_.mjs";
 import { randomUUID } from "node:crypto";
 //#region extensions/codex/src/app-server/inference-context.ts
 const MAX_CONTEXT_BYTES = 262144;
@@ -66,18 +66,17 @@ function createCodexInferenceContext(assertClientCurrent) {
 			};
 			if (!registration || generation !== registration.generation) throw new Error("Codex inference has no current admitted parent generation");
 			registration.assertCurrent();
-			if (kind === "compaction") return {
-				body,
-				assertCurrent: registration.assertCurrent,
-				signal: registration.controller.signal
-			};
-			const instructions = body.instructions;
-			if (instructions !== void 0 && typeof instructions !== "string") throw new Error("Codex inference request has invalid top-level instructions");
-			return {
-				body: registration.text ? {
+			let preparedBody = body;
+			if (kind !== "compaction") {
+				const instructions = body.instructions;
+				if (instructions !== void 0 && typeof instructions !== "string") throw new Error("Codex inference request has invalid top-level instructions");
+				if (registration.text) preparedBody = {
 					...body,
 					instructions: instructions === void 0 ? registration.text : instructions + "\n\n" + registration.text
-				} : body,
+				};
+			}
+			return {
+				body: preparedBody,
 				assertCurrent: registration.assertCurrent,
 				signal: registration.controller.signal
 			};

package/dist/.setup/{inference-dispatch-B5UKEUyC.mjs → inference-dispatch-CO6tTs4q.mjs}

@@ -1,5 +1,5 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as readCodexInferenceMetadata } from "./inference-metadata-CgIf7sOx.mjs";
+import { n as readCodexInferenceMetadata } from "./inference-metadata-DCvcG_N_.mjs";
 import { promisify } from "node:util";
 import { isUtf8 } from "node:buffer";
 import { zstdCompress, zstdDecompress } from "node:zlib";
@@ -239,8 +239,9 @@ function createCodexInferenceModelBinding(params) {
 /** One preparation path binds both HTTP requests and reusable WebSocket frames. */
 function createCodexInferenceDispatch(params) {
 	const { context, assertCurrent } = params;
-	const prepare = async (bytes, sampling, path, headers, signal, transport) => {
+	const prepare = async (bytes, path, headers, signal, transport) => {
 		assertCurrent();
+		const sampling = path === "/responses";
 		let execution;
 		let released = false;
 		const release = () => {
@@ -297,13 +298,13 @@ function createCodexInferenceDispatch(params) {
 			throw error;
 		}
 	};
-	const prepareHttp = async (req, sampling, path, signal, release, retryable = false) => {
+	const prepareHttp = async (req, path, signal, release, retryable = false) => {
 		const wire = await readProxyBody(req, MAX_BODY_BYTES);
 		const encoding = req.headers["content-encoding"];
 		if (encoding && encoding !== "identity" && encoding !== "zstd") throw new Error(FAILURE);
 		const decoded = encoding === "zstd" ? await decompress(wire, { maxOutputLength: MAX_BODY_BYTES }) : wire;
 		signal.throwIfAborted();
-		const prepared = await prepare(decoded, sampling, path, req.headers, signal, "http");
+		const prepared = await prepare(decoded, path, req.headers, signal, "http");
 		try {
 			const body = prepared.bytes === decoded ? wire : encoding === "zstd" ? await compress(prepared.bytes) : prepared.bytes;
 			prepared.assertCurrent();

package/dist/.setup/{inference-metadata-CgIf7sOx.mjs → inference-metadata-DCvcG_N_.mjs}

@@ -16,24 +16,26 @@ function readCodexInferenceMetadata(body, headers, transport = "http", path) {
 	const httpHeaders = transport === "http" ? headers : void 0;
 	const compatibility = readNativeMetadata(httpHeaders?.["x-codex-turn-metadata"]);
 	if (!nested && !compatibility) throw new Error("Codex inference request is missing bounded native metadata");
-	const requestKind = reconcileMetadataStrings("request kind", nested?.request_kind, compatibility?.request_kind);
-	const generation = readId("parent generation", nested?.[CODEX_INFERENCE_GENERATION_KEY], compatibility?.[CODEX_INFERENCE_GENERATION_KEY]);
-	const nativeThreadId = readId("thread", nested?.thread_id, compatibility?.thread_id);
+	const nativeField = (key) => [nested?.[key], compatibility?.[key]];
+	const requestKind = reconcileMetadataStrings("request kind", ...nativeField("request_kind"));
+	const generation = readId("parent generation", ...nativeField(CODEX_INFERENCE_GENERATION_KEY));
+	const nativeThreadId = readId("thread", ...nativeField("thread_id"));
 	if (!nativeThreadId && (requestKind === "turn" || requestKind === "prewarm" && !(body.generate === false && generation === void 0))) throw new Error("Codex inference request has no native thread metadata");
+	const readTurnId = (field, key) => readId(field, flat?.[key], ...nativeField(key));
 	return Object.freeze({
-		sessionId: readId("session", flat?.session_id, nested?.session_id, compatibility?.session_id, httpHeaders?.["session-id"]),
+		sessionId: readId("session", flat?.session_id, ...nativeField("session_id"), httpHeaders?.["session-id"]),
 		threadId: readId("thread", flat?.thread_id, nativeThreadId, httpHeaders?.["thread-id"]),
-		turnId: readId("turn", flat?.turn_id, nested?.turn_id, compatibility?.turn_id),
-		parentThreadId: readId("parent thread", flat?.["x-codex-parent-thread-id"], nested?.parent_thread_id, compatibility?.parent_thread_id, httpHeaders?.["x-codex-parent-thread-id"]),
-		parentTurnId: readId("parent turn", flat?.parent_turn_id, nested?.parent_turn_id, compatibility?.parent_turn_id),
-		rootTurnId: readId("root turn", flat?.root_turn_id, nested?.root_turn_id, compatibility?.root_turn_id),
+		turnId: readTurnId("turn", "turn_id"),
+		parentThreadId: readId("parent thread", flat?.["x-codex-parent-thread-id"], ...nativeField("parent_thread_id"), httpHeaders?.["x-codex-parent-thread-id"]),
+		parentTurnId: readTurnId("parent turn", "parent_turn_id"),
+		rootTurnId: readTurnId("root turn", "root_turn_id"),
 		requestKind,
-		threadSource: reconcileMetadataStrings("thread source", nested?.thread_source, compatibility?.thread_source),
+		threadSource: reconcileMetadataStrings("thread source", ...nativeField("thread_source")),
 		subagent: reconcileMetadataStrings("subagent", flat?.["x-openai-subagent"], headers?.["x-openai-subagent"]),
-		subagentKind: reconcileMetadataStrings("subagent kind", nested?.subagent_kind, compatibility?.subagent_kind),
-		guardianClassifierSourceThreadId: readId("Guardian classifier source thread", nested?.guardian_classifier_source_thread_id, compatibility?.guardian_classifier_source_thread_id),
-		autoReviewEnabled: reconcileMetadataBooleans("automatic review", nested?.auto_review_enabled, compatibility?.auto_review_enabled),
-		nodeReplAutoReviewRequired: reconcileMetadataBooleans("model-required review", nested?.node_repl_auto_review_required, compatibility?.node_repl_auto_review_required),
+		subagentKind: reconcileMetadataStrings("subagent kind", ...nativeField("subagent_kind")),
+		guardianClassifierSourceThreadId: readId("Guardian classifier source thread", ...nativeField("guardian_classifier_source_thread_id")),
+		autoReviewEnabled: reconcileMetadataBooleans("automatic review", ...nativeField("auto_review_enabled")),
+		nodeReplAutoReviewRequired: reconcileMetadataBooleans("model-required review", ...nativeField("node_repl_auto_review_required")),
 		generation
 	});
 }
@@ -41,41 +43,34 @@ function readNativeMetadata(raw) {
 	if (raw === void 0) return;
 	const encoded = readStringValue(raw);
 	if (encoded === void 0 || Buffer.byteLength(encoded) > MAX_NATIVE_METADATA_BYTES) throw new Error("Codex inference request is missing bounded native metadata");
-	let value;
 	try {
-		value = JSON.parse(encoded);
-	} catch {
-		throw new Error("Codex inference request has invalid native metadata");
-	}
-	if (!isRecord(value)) throw new Error("Codex inference request has invalid native metadata");
-	return value;
-}
-function reconcileMetadataStrings(field, ...values) {
-	let result;
-	for (const value of values) {
-		if (value == null) continue;
-		const candidate = readStringValue(value);
-		if (candidate === void 0 || Buffer.byteLength(candidate) > MAX_METADATA_FIELD_BYTES) throw new Error(`Codex inference ${field} metadata is invalid or exceeds its limit`);
-		if (result !== void 0 && candidate !== result) throw new Error(`Codex inference ${field} metadata disagrees`);
-		result = candidate;
-	}
-	return result;
+		const value = JSON.parse(encoded);
+		if (isRecord(value)) return value;
+	} catch {}
+	throw new Error("Codex inference request has invalid native metadata");
 }
+const reconcileMetadataStrings = metadataReconciler((value) => {
+	const text = readStringValue(value);
+	return text !== void 0 && Buffer.byteLength(text) <= MAX_METADATA_FIELD_BYTES ? text : void 0;
+}, "invalid or exceeds its limit");
+const reconcileMetadataBooleans = metadataReconciler(asBoolean, "invalid");
 function readId(field, ...values) {
 	const value = reconcileMetadataStrings(field, ...values);
 	if (value !== void 0 && (!value || value.trim() !== value)) throw new Error(`Codex inference ${field} metadata has an invalid identity`);
 	return value;
 }
-function reconcileMetadataBooleans(field, ...values) {
-	let result;
-	for (const value of values) {
-		if (value == null) continue;
-		const candidate = asBoolean(value);
-		if (candidate === void 0) throw new Error(`Codex inference ${field} metadata is invalid`);
-		if (result !== void 0 && candidate !== result) throw new Error(`Codex inference ${field} metadata disagrees`);
-		result = candidate;
-	}
-	return result;
+function metadataReconciler(read, invalid) {
+	return (field, ...values) => {
+		let result;
+		for (const value of values) {
+			if (value == null) continue;
+			const candidate = read(value);
+			if (candidate === void 0) throw new Error(`Codex inference ${field} metadata is ${invalid}`);
+			if (result !== void 0 && candidate !== result) throw new Error(`Codex inference ${field} metadata disagrees`);
+			result = candidate;
+		}
+		return result;
+	};
 }
 //#endregion
 export { readCodexInferenceMetadata as n, CODEX_INFERENCE_GENERATION_KEY as t };

package/dist/.setup/{inference-proxy-DUO5E2QQ.mjs → inference-proxy-BDWV0djM.mjs}

@@ -1,7 +1,7 @@
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
-import { CODEX_INFERENCE_TRANSPORT_FAILURE, authorizationFailure, createCodexInferenceDispatch, isTerminalResponse, n as createUploadAdmission, readProxyBody, t as MAX_BODY_BYTES } from "./inference-dispatch-B5UKEUyC.mjs";
-import { t as createCodexInferenceContext } from "./inference-context-D-9gWlTR.mjs";
-import { createPermitPool } from "openclaw/plugin-sdk/concurrency-runtime";
+import { CODEX_INFERENCE_TRANSPORT_FAILURE, authorizationFailure, createCodexInferenceDispatch, isTerminalResponse, n as createUploadAdmission, readProxyBody, t as MAX_BODY_BYTES } from "./inference-dispatch-CO6tTs4q.mjs";
+import { t as createCodexInferenceContext } from "./inference-context-DNlGwzwy.mjs";
+import { createDeferred, createPermitPool } from "openclaw/plugin-sdk/concurrency-runtime";
 import { Writable } from "node:stream";
 import { WebSocket, WebSocketServer, rejectWebSocketUpgrade } from "openclaw/plugin-sdk/websocket-runtime";
 import { createServer } from "node:http";
@@ -159,8 +159,7 @@ async function createCodexInferenceProxy(params) {
 		for (const [key, value] of incoming.searchParams) target.searchParams.append(key, value);
 		return {
 			target,
-			path: incoming.pathname,
-			sampling: incoming.pathname === "/responses"
+			path: incoming.pathname
 		};
 	};
 	const { prepare, prepareHttp } = createCodexInferenceDispatch({
@@ -184,7 +183,7 @@ async function createCodexInferenceProxy(params) {
 		res.once("close", abort);
 		(async () => {
 			try {
-				const { target, sampling, path } = resolveTarget(req);
+				const { target, path } = resolveTarget(req);
 				if (req.method !== "POST") throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
 				resident = reserveResident(socket, signal, deadlineAtMs);
 				const admitted = resident && await resident.ready;
@@ -201,7 +200,7 @@ async function createCodexInferenceProxy(params) {
 					res.writeHead(503, OVERLOAD_HEADERS).end(OVERLOAD_BODY);
 					return;
 				}
-				upload = await prepareHttp(req, sampling, path, signal, releasePermit, Boolean(params.oauth));
+				upload = await prepareHttp(req, path, signal, releasePermit, Boolean(params.oauth));
 				const preparedUpload = upload;
 				let body = upload.body;
 				for (let attempt = 0; attempt < (params.oauth ? 2 : 1); attempt++) {
@@ -286,10 +285,7 @@ async function createCodexInferenceProxy(params) {
 			let local;
 			let proxyAgent;
 			let upstreamClosed = Promise.resolve();
-			let finishSetup = () => {};
-			const setupSettled = new Promise((resolve) => {
-				finishSetup = resolve;
-			});
+			const { promise: setupSettled, resolve: finishSetup } = createDeferred();
 			let resident = null;
 			const controller = new AbortController();
 			const deadlineAtMs = Date.now() + HANDSHAKE_TIMEOUT_MS;
@@ -328,9 +324,9 @@ async function createCodexInferenceProxy(params) {
 			const close = () => finish();
 			const failHandshake = () => finish(Date.now() >= deadlineAtMs ? 504 : 502);
 			try {
-				const { target, sampling, path } = resolveTarget(req);
+				const { target, path } = resolveTarget(req);
 				if (params.oauth) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
-				if (!sampling && path !== "/guardian" && path !== "/guardian-classifier") throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
+				if (path !== "/responses" && path !== "/guardian" && path !== "/guardian-classifier") throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
 				if (connections.size >= MAX_WEBSOCKETS) idleConnections.values().next().value?.();
 				if (connections.size >= MAX_WEBSOCKETS) {
 					rejectBusyUpgrade(socket);
@@ -472,7 +468,7 @@ async function createCodexInferenceProxy(params) {
 									let prepared;
 									try {
 										if (binary) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
-										prepared = await prepare(codexWebSocketDataToBuffer(data), sampling, path, req.headers, signal, "websocket");
+										prepared = await prepare(codexWebSocketDataToBuffer(data), path, req.headers, signal, "websocket");
 										prepared.assertCurrent();
 										const frame = prepared;
 										const onAbort = () => close();

package/dist/.setup/{isolated-completion-C6QKyyDS.mjs → isolated-completion-z0ii1a_V.mjs}

@@ -1,11 +1,11 @@
-import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
-import { i as resolveCodexAppServerHomeScope } from "./config-options-HG_Rr3W_.mjs";
-import "./config-0Gxk3_eq.mjs";
-import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-5NUq43f3.mjs";
-import { f as assertCodexPassiveTurnItems } from "./client-ChJtGEdJ.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-9YflG60n.mjs";
-import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-DklXNk3k.mjs";
-import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-BwG5TUYW.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
+import { i as resolveCodexAppServerHomeScope } from "./config-options-DDzeNQ8m.mjs";
+import "./config-C1YVVLEA.mjs";
+import { tt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-BjiqpbC5.mjs";
+import { f as assertCodexPassiveTurnItems } from "./client-zrCKOu_E.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DxtRqV8t.mjs";
+import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-BfDAo-qZ.mjs";
+import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CLMKN4x-.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts
 /** Runs prompt-only Codex inference on an ephemeral, ring-zero native thread. */
 async function runCodexIsolatedCompletion(params, options) {

package/dist/.setup/local-runtime-attribution-CZz2DJ4q.mjs

@@ -0,0 +1,15 @@
+import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
+//#region extensions/codex/src/app-server/local-runtime-attribution.ts
+const OPENAI_PROVIDER_ID = "openai";
+const OPENAI_RESPONSES_API = "openai-responses";
+const OPENAI_CODEX_RESPONSES_API = "openai-chatgpt-responses";
+function resolveCodexLocalRuntimeAttribution(params) {
+	const authProfileProvider = normalizeLowercaseStringOrEmpty(params.runtimePlan?.auth?.authProfileProviderForAuth);
+	const useCodexResponsesApi = normalizeLowercaseStringOrEmpty(params.runtimePlan?.observability.harnessId) === "codex" && authProfileProvider !== OPENAI_PROVIDER_ID && normalizeLowercaseStringOrEmpty(params.model.provider) === OPENAI_PROVIDER_ID && normalizeLowercaseStringOrEmpty(params.model.api) === OPENAI_RESPONSES_API;
+	return {
+		provider: useCodexResponsesApi ? OPENAI_PROVIDER_ID : params.provider,
+		api: useCodexResponsesApi ? OPENAI_CODEX_RESPONSES_API : params.model.api
+	};
+}
+//#endregion
+export { resolveCodexLocalRuntimeAttribution as t };