@openclaw/codex 2026.10.3 → 2026.10.4

package/dist/.setup/{account-usage-runtime-BsPb0Y3w.mjs → account-usage-runtime-DGtsKHNL.mjs}

@@ -1,6 +1,6 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-CMPy24F5.mjs";
-import { t as readCodexAppServerUsage } from "./request-Ddy7nOme.mjs";
+import { t as readCodexAppServerUsage } from "./request-CB7T766a.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { a as resolveCodexAppServerAuthProfileStore } from "./auth-profile-CgHQ8Vot.mjs";

package/dist/.setup/{apply-CMLZMIVH.mjs → apply-qD8iZNJY.mjs}

@@ -1,14 +1,14 @@
 import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
-import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-CeVZHm9H.mjs";
+import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-SXYawyhG.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BW8rd98k.mjs";
-import { r as requestCodexAppServerJson } from "./request-Ddy7nOme.mjs";
+import { r as requestCodexAppServerJson } from "./request-CB7T766a.mjs";
 import { l as CODEX_PLUGINS_MARKETPLACE_NAME, n as isOpenAiCuratedMarketplaceName } from "./plugin-inventory-Bf0_piTw.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-CgHQ8Vot.mjs";
-import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, o as clearSharedCodexAppServerClientIfCurrentAndWait, tt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-D2ivOIey.mjs";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, o as clearSharedCodexAppServerClientIfCurrentAndWait, tt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-r9NcV_GJ.mjs";
 import { t as ensureCodexPluginActivation } from "./plugin-activation-BcyBv8PG.mjs";
-import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-LJsaUrXA.mjs";
+import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-DpzgbuEW.mjs";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";

package/dist/.setup/{attempt-client-cleanup-hUrW3fmJ.mjs → attempt-client-cleanup-DNfVb5SC.mjs}

@@ -1,8 +1,8 @@
-import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-CeVZHm9H.mjs";
+import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-SXYawyhG.mjs";
 import { a as codexPrewriteRejectionCause, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-hmWM21RB.mjs";
-import { Y as unsubscribeCodexAppServerLiveThread, pt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-D2ivOIey.mjs";
-import { V as isCodexAppServerBrokenPipeError, c as isCodexAppServerRequestTimeoutError } from "./client-DIC12QQ_.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-CaGl9iS1.mjs";
+import { Y as unsubscribeCodexAppServerLiveThread, pt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-r9NcV_GJ.mjs";
+import { V as isCodexAppServerBrokenPipeError, c as isCodexAppServerRequestTimeoutError } from "./client-BM1XpAkE.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-DLqce1id.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { AgentHarnessPreflightError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{attempt-workspace-context-BRvpkEo_.mjs → attempt-workspace-context-BMS_Pzut.mjs}

@@ -1,5 +1,5 @@
 import { r as flattenCodexDynamicToolFunctions } from "./protocol-CANUwXJ3.mjs";
-import { ut as isMessageOnlyCodexSourceReply } from "./thread-requests-CKEQxo_5.mjs";
+import { ut as isMessageOnlyCodexSourceReply } from "./thread-requests-DMd-wcni.mjs";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import { buildAgentWorkspaceInstructionSnapshot, buildBootstrapContextForFiles, embeddedAgentLog, prepareAgentWorkspaceContext } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{auth-cache-key-CeVZHm9H.mjs → auth-cache-key-SXYawyhG.mjs}

@@ -1,4 +1,4 @@
-import { n as defineCodexBuildState } from "./build-state-DP9Coy_6.mjs";
+import { n as defineCodexBuildState } from "./build-state-BgEYwu09.mjs";
 import { u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-C1VFoVPf.mjs";
 import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-a0HDa2Mj.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/.setup/{bounded-turn-DVI5FRqE.mjs → bounded-turn-DUVJcTLW.mjs}

@@ -4,14 +4,14 @@ import { d as readCodexEffectiveConfig } from "./config-options-HG_Rr3W_.mjs";
 import { a as codexPrewriteRejectionCause } from "./rpc-error-hmWM21RB.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
-import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-D2ivOIey.mjs";
-import { _ as assertCodexTurnStartResponse, b as readCodexErrorNotification, g as assertCodexThreadStartResponse, w as createCodexElicitationResponse } from "./client-DIC12QQ_.mjs";
-import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-BVauXzx9.mjs";
-import { i as readModelListResult } from "./models-CR97NoEB.mjs";
-import { Ct as mergeCodexThreadConfigs, n as buildCodexRingZeroThreadConfigPatch, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames, z as attestCodexRestrictedToolSurfaceMcpServersDisabled } from "./thread-requests-CKEQxo_5.mjs";
-import { b as resolveCodexAppServerReasoningEffort } from "./thread-lifecycle-BSVWNPZt.mjs";
-import { a as resolveCodexPromptError } from "./usage-limit-error-B26Xp5eo.mjs";
+import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-r9NcV_GJ.mjs";
+import { _ as assertCodexTurnStartResponse, b as readCodexErrorNotification, g as assertCodexThreadStartResponse, w as createCodexElicitationResponse } from "./client-BM1XpAkE.mjs";
+import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-DNfVb5SC.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-DDfBiX1O.mjs";
+import { i as readModelListResult } from "./models-CQwYMFV4.mjs";
+import { Ct as mergeCodexThreadConfigs, n as buildCodexRingZeroThreadConfigPatch, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames, z as attestCodexRestrictedToolSurfaceMcpServersDisabled } from "./thread-requests-DMd-wcni.mjs";
+import { b as resolveCodexAppServerReasoningEffort } from "./thread-lifecycle-DGgqkt-m.mjs";
+import { a as resolveCodexPromptError } from "./usage-limit-error-BqQxVoI5.mjs";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import path from "node:path";
@@ -145,7 +145,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		assertCurrent: params.assertCurrent,
 		...params.signal ? { abandonSignal: params.signal } : {}
 	};
-	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-D2ivOIey.mjs").then((n) => n.v).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-r9NcV_GJ.mjs").then((n) => n.v).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		...clientOptions,
 		authProfileStore: params.authProfileStore
 	}));

package/dist/.setup/{build-state-DP9Coy_6.mjs → build-state-BgEYwu09.mjs}

@@ -1,5 +1,5 @@
 //#region extensions/codex/package.json
-var version = "2026.10.3";
+var version = "2026.10.4";
 //#endregion
 //#region extensions/codex/src/build-state.ts
 /**

package/dist/.setup/{client-DIC12QQ_.mjs → client-BM1XpAkE.mjs}

@@ -1,9 +1,9 @@
-import { a as readCodexCatalogDecodeRoute, c as isRpcResponse, i as listenCodexAppServerLines, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as createCodexAppServerMessageWriter, s as redactCodexAppServerLinePreview } from "./client-catalog-response-Bhc23x3Q.mjs";
+import { a as readCodexCatalogDecodeRoute, c as isRpcResponse, i as listenCodexAppServerLines, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as createCodexAppServerMessageWriter, s as redactCodexAppServerLinePreview } from "./client-catalog-response-CogGEXrN.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { c as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, s as CODEX_APP_SERVER_VERSION } from "./managed-binary-C1VFoVPf.mjs";
 import { a as closeCodexAppServerTransportAndWait, c as getCodexAppServerRegisteredTransportIdentity, i as closeCodexAppServerTransport, o as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-a0HDa2Mj.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, n as CodexAppServerLocalRequestCancellationError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, t as CODEX_APP_SERVER_OVERLOADED_ERROR_CODE } from "./rpc-error-hmWM21RB.mjs";
-import { f as recordCodexCatalogResponseSource, i as reuseCodexCatalogPreview, o as closeCodexCatalogClientSource, s as codexCatalogSourceForClient } from "./session-catalog-native-projection-Cpc9sZnx.mjs";
+import { f as recordCodexCatalogResponseSource, i as reuseCodexCatalogPreview, o as closeCodexCatalogClientSource, s as codexCatalogSourceForClient } from "./session-catalog-native-projection-Dqb6Se_0.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { codexCatalogPageWorkerEntrypoint } from "../catalog-page-worker-entrypoint.js";
 import { t as createWebSocketTransport } from "./transport-websocket-zqJ0Cmtn.mjs";

package/dist/.setup/{client-catalog-response-Bhc23x3Q.mjs → client-catalog-response-CogGEXrN.mjs}

@@ -1,5 +1,5 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-Cpc9sZnx.mjs";
+import { n as projectCodexCatalogNativeResponse, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-Dqb6Se_0.mjs";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{command-dispatch-Dc95dWpV.mjs → command-dispatch-C4Q9AmC-.mjs}

@@ -9,7 +9,7 @@ async function handleCodexCommand(ctx, options) {
 	};
 	const { resolvePluginConfig, ...subcommandOptions } = options;
 	try {
-		const { handleCodexSubcommand } = await import("./command-handlers-K365hYqd.mjs");
+		const { handleCodexSubcommand } = await import("./command-handlers-QRqHGuRy.mjs");
 		return await handleCodexSubcommand(commandContext, {
 			...subcommandOptions,
 			pluginConfig: resolvePluginConfig?.() ?? subcommandOptions.pluginConfig

package/dist/.setup/{command-handlers-K365hYqd.mjs → command-handlers-QRqHGuRy.mjs}

@@ -1,7 +1,7 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, r as bindingStoreKey } from "./session-binding-record-BZB8RgcF.mjs";
 import { m as isCodexFastServiceTier } from "./config-parsing-BQq-CHTF.mjs";
-import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-CeVZHm9H.mjs";
+import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-SXYawyhG.mjs";
 import { n as withCodexConversationThreadActivity } from "./thread-ownership-queue-Dp24d7-F.mjs";
 import { a as canMutateCodexHost, i as assertCodexHostOwnerCurrent, n as CODEX_HOST_INSPECTION_AUTH_ERROR, o as hasCodexAdminScope, r as CODEX_NATIVE_EXECUTION_AUTH_ERROR, t as CODEX_FULL_PERMISSIONS_AUTH_ERROR } from "./command-authorization-AikPDtcc.mjs";
 import { l as formatRelativeDuration, s as summarizeCodexAccountUsage } from "./rate-limits-CMPy24F5.mjs";
@@ -13,25 +13,25 @@ import { n as filterCodexMarketplacePlugins, r as parseCodexPluginMarketplaceId,
 import { o as formatCodexCliSessions } from "./node-cli-sessions-B5oNDkUS.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BW8rd98k.mjs";
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-C-08ez1w.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-Ddy7nOme.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-CB7T766a.mjs";
 import { a as pluginReadParams, l as CODEX_PLUGINS_MARKETPLACE_NAME, n as isOpenAiCuratedMarketplaceName, t as findCodexMarketplacePluginSummary } from "./plugin-inventory-Bf0_piTw.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-CgHQ8Vot.mjs";
-import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, tt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-D2ivOIey.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, h as assertCodexThreadResumeResponse, p as assertCodexThreadAcceptsDirectInput, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-DIC12QQ_.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
+import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, tt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-r9NcV_GJ.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, h as assertCodexThreadResumeResponse, p as assertCodexThreadAcceptsDirectInput, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-BM1XpAkE.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DNfVb5SC.mjs";
 import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-BoMwpuPN.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CR97NoEB.mjs";
+import { n as listAllCodexAppServerModels } from "./models-CQwYMFV4.mjs";
 import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-BcyBv8PG.mjs";
 import { o as createCodexSessionGenerationSupersededError, r as resolveCodexSessionBinding } from "./session-binding-Ce7BqiPN.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-Brc0nbdS.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-GlDZf8J7.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DQ1pRnpX.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B1z1lAmI.mjs";
 import { n as resolveCodexNativeSandboxBlock, t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-WqE8yPge.mjs";
 import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-DWnB7VMj.mjs";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-rt0M8Bom.mjs";
-import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-C207n84A.mjs";
-import { a as readCodexConversationActiveTurn, c as setCodexConversationModel, d as stopCodexConversationTurn, i as parseCodexPermissionsModeArg, l as setCodexConversationPermissions, n as formatPermissionsMode, r as parseCodexFastModeArg, s as setCodexConversationFastMode, u as steerCodexConversationTurn } from "./conversation-control-DMDuo_D6.mjs";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-vd2uWInc.mjs";
+import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-D4eDYz-4.mjs";
+import { a as readCodexConversationActiveTurn, c as setCodexConversationModel, d as stopCodexConversationTurn, i as parseCodexPermissionsModeArg, l as setCodexConversationPermissions, n as formatPermissionsMode, r as parseCodexFastModeArg, s as setCodexConversationFastMode, u as steerCodexConversationTurn } from "./conversation-control-Q0uIjYOy.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{command-rpc-C207n84A.mjs → command-rpc-D4eDYz-4.mjs}

@@ -1,17 +1,17 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-hmWM21RB.mjs";
 import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-kQntafj_.mjs";
-import { a as withCodexAppServerJsonClient, r as requestCodexAppServerJson } from "./request-Ddy7nOme.mjs";
+import { a as withCodexAppServerJsonClient, r as requestCodexAppServerJson } from "./request-CB7T766a.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-D2ivOIey.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, o as isCodexAppServerIndeterminateTransportError } from "./client-DIC12QQ_.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
+import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-r9NcV_GJ.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, o as isCodexAppServerIndeterminateTransportError } from "./client-BM1XpAkE.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-DNfVb5SC.mjs";
 import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-BoMwpuPN.mjs";
-import { r as listCodexAppServerModels } from "./models-CR97NoEB.mjs";
+import { r as listCodexAppServerModels } from "./models-CQwYMFV4.mjs";
 import { o as createCodexSessionGenerationSupersededError } from "./session-binding-Ce7BqiPN.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-BfkvLUZY.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-D27gNXZE.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { prepareAgentRuntimeAuth } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{compact-DNLigO9M.mjs → compact-B04KwAt_.mjs}

@@ -1,21 +1,21 @@
 import { n as readCodexRuntimeModelId } from "./model-runtime-BdqzOMkU.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { m as sessionBindingIdentity } from "./session-binding-record-BZB8RgcF.mjs";
-import { E as waitForCodexAppServerClientExit, S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CeVZHm9H.mjs";
+import { E as waitForCodexAppServerClientExit, S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-SXYawyhG.mjs";
 import { t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-meta-Lkm5Lpf4.mjs";
 import { i as CodexAppServerScopedRequestRejectedError, r as CodexAppServerRpcError } from "./rpc-error-hmWM21RB.mjs";
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-C-08ez1w.mjs";
-import { F as consumeCodexAppServerLiveThread, J as revertCodexAppServerLiveThreadInstructions, M as getCodexInferenceThreadQualification, W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, q as retainCodexAppServerLiveThread, s as createIsolatedCodexAppServerClient } from "./shared-client-D2ivOIey.mjs";
+import { F as consumeCodexAppServerLiveThread, J as revertCodexAppServerLiveThreadInstructions, M as getCodexInferenceThreadQualification, W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, q as retainCodexAppServerLiveThread, s as createIsolatedCodexAppServerClient } from "./shared-client-r9NcV_GJ.mjs";
 import "./responses-oauth-twnuTaAa.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-DIC12QQ_.mjs";
-import { o as readCodexNotificationThreadId, s as readCodexNotificationTurnId } from "./turn-router-CaGl9iS1.mjs";
-import { c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-BM1XpAkE.mjs";
+import { o as readCodexNotificationThreadId, s as readCodexNotificationTurnId } from "./turn-router-DLqce1id.mjs";
+import { c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DNfVb5SC.mjs";
 import { n as readCodexThreadContextSnapshot, s as readCodexNotificationItem } from "./event-projector-usage-03R0I2dM.mjs";
 import { r as resolveCodexSessionBinding } from "./session-binding-Ce7BqiPN.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-CkpiZfm0.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-Brc0nbdS.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-BfkvLUZY.mjs";
-import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-GlDZf8J7.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-BXClJlaW.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-DQ1pRnpX.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-D27gNXZE.mjs";
+import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B1z1lAmI.mjs";
 import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-WqE8yPge.mjs";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/.setup/{computer-use-rt0M8Bom.mjs → computer-use-vd2uWInc.mjs}

@@ -2,12 +2,12 @@ import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8
 import { o as resolveCodexComputerUseConfig } from "./config-options-HG_Rr3W_.mjs";
 import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, t as isManagedCodexDesktopCommand } from "./managed-binary-C1VFoVPf.mjs";
 import { n as describeControlFailure } from "./capabilities-kQntafj_.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-Ddy7nOme.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-CB7T766a.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
-import { O as acquireCodexNativeConfigFence, at as hasLegacyCodexComputerUseMcpPolicy, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, ct as ensureCodexComputerUseSharedPluginCache, d as readCodexAppServerClientDesktopGeneration, et as reconcileCodexComputerUseStartArtifacts, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, it as resolveClientManagedBundledMarketplacePath, lt as assertNotSymlink, ot as isLegacyCodexComputerUsePluginDisabled, p as readCodexAppServerClientProcessIdentity, rt as resolveBundledComputerUseMarketplacePath, st as resolveManagedCodexComputerUseConfig, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, y as waitForCodexAppServerClientDesktopGenerationDrain } from "./shared-client-D2ivOIey.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, i as isCodexAppServerConnectionClosedError, o as isCodexAppServerIndeterminateTransportError } from "./client-DIC12QQ_.mjs";
-import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
+import { O as acquireCodexNativeConfigFence, at as hasLegacyCodexComputerUseMcpPolicy, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, ct as ensureCodexComputerUseSharedPluginCache, d as readCodexAppServerClientDesktopGeneration, et as reconcileCodexComputerUseStartArtifacts, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, it as resolveClientManagedBundledMarketplacePath, lt as assertNotSymlink, ot as isLegacyCodexComputerUsePluginDisabled, p as readCodexAppServerClientProcessIdentity, rt as resolveBundledComputerUseMarketplacePath, st as resolveManagedCodexComputerUseConfig, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, y as waitForCodexAppServerClientDesktopGenerationDrain } from "./shared-client-r9NcV_GJ.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, i as isCodexAppServerConnectionClosedError, o as isCodexAppServerIndeterminateTransportError } from "./client-BM1XpAkE.mjs";
+import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DNfVb5SC.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{conversation-binding-BQ5GWV_6.mjs → conversation-binding-DFblW6uP.mjs}

@@ -3,25 +3,25 @@ import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } fro
 import { f as readCodexRequirementsToml } from "./config-security-KAPScztc.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
 import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-HG_Rr3W_.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CeVZHm9H.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-SXYawyhG.mjs";
 import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-DJ4ix-W5.mjs";
 import { o as isCodexAppServerOverloadError } from "./rpc-error-hmWM21RB.mjs";
 import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-B9a7HwUV.mjs";
 import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-0Gxk3_eq.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, K as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease } from "./shared-client-D2ivOIey.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-DIC12QQ_.mjs";
-import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-CaGl9iS1.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
-import { C as buildCodexProjectDocThreadConfig, Ct as mergeCodexThreadConfigs, _ as CODEX_NATIVE_PERSONALITY_NONE, y as resolveCodexAppServerRequestModelSelection, yt as buildDisabledAppsConfigPatch } from "./thread-requests-CKEQxo_5.mjs";
-import "./thread-lifecycle-BSVWNPZt.mjs";
+import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, K as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease } from "./shared-client-r9NcV_GJ.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-BM1XpAkE.mjs";
+import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-DLqce1id.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-DNfVb5SC.mjs";
+import { C as buildCodexProjectDocThreadConfig, Ct as mergeCodexThreadConfigs, _ as CODEX_NATIVE_PERSONALITY_NONE, y as resolveCodexAppServerRequestModelSelection, yt as buildDisabledAppsConfigPatch } from "./thread-requests-DMd-wcni.mjs";
+import "./thread-lifecycle-DGgqkt-m.mjs";
 import "./session-binding-Ce7BqiPN.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-BfkvLUZY.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-GlDZf8J7.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-D27gNXZE.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B1z1lAmI.mjs";
 import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-BxIUJ0Zd.mjs";
 import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-Bg4FZw1f.mjs";
-import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-DMDuo_D6.mjs";
+import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-Q0uIjYOy.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";

package/dist/.setup/{conversation-control-DMDuo_D6.mjs → conversation-control-Q0uIjYOy.mjs}

@@ -3,8 +3,8 @@ import { m as isCodexFastServiceTier } from "./config-parsing-BQq-CHTF.mjs";
 import { o as formatCodexDisplayText } from "./command-formatters-DV3DHhdr.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-requests-CKEQxo_5.mjs";
-import "./thread-lifecycle-BSVWNPZt.mjs";
+import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-requests-DMd-wcni.mjs";
+import "./thread-lifecycle-DGgqkt-m.mjs";
 import "./session-binding-Ce7BqiPN.mjs";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";

package/dist/.setup/{dynamic-tool-build-CdUp03dV.mjs → dynamic-tool-build-B_h3tzwt.mjs}

@@ -2,9 +2,9 @@ import { CODEX_NATIVE_TOOL_REQUIREMENTS } from "../native-tool-policy.js";
 import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-BQq-CHTF.mjs";
 import "./config-0Gxk3_eq.mjs";
 import { a as isCodexResponsesOAuthRun } from "./responses-oauth-twnuTaAa.mjs";
-import { ct as filterCodexDynamicToolsForDisabledNativeSurface, dt as isSystemAgentOnlyCodexDynamicToolAllowlist, ft as normalizeCodexDynamicToolName, lt as isForcedPrivateQaCodexRuntime, m as resolveCodexWebSearchPlan, st as filterCodexDynamicTools } from "./thread-requests-CKEQxo_5.mjs";
+import { ct as filterCodexDynamicToolsForDisabledNativeSurface, dt as isSystemAgentOnlyCodexDynamicToolAllowlist, ft as normalizeCodexDynamicToolName, lt as isForcedPrivateQaCodexRuntime, m as resolveCodexWebSearchPlan, st as filterCodexDynamicTools } from "./thread-requests-DMd-wcni.mjs";
 import { n as resolveCodexNativeExecutionPolicy, r as resolveCodexNodeExecToolOverrides } from "./native-execution-policy-ClzpdG3D.mjs";
-import { a as createGatewayProcessProjection, c as createSandboxProcessProjection, i as createGatewayExecProjection, l as isCodexDynamicToolExcluded, o as createNodeExecAliasDynamicTool, s as createSandboxExecProjection, u as placeDisabledNativeShellToolsInDirectNamespace } from "./shell-dynamic-tools-CkHxyESN.mjs";
+import { a as createGatewayProcessProjection, c as createSandboxProcessProjection, i as createGatewayExecProjection, l as isCodexDynamicToolExcluded, o as createNodeExecAliasDynamicTool, s as createSandboxExecProjection, u as placeDisabledNativeShellToolsInDirectNamespace } from "./shell-dynamic-tools-BQj1TbJN.mjs";
 import path from "node:path";
 import { createStageTimingTracker, formatStageTimings } from "openclaw/plugin-sdk/time-runtime";
 import { applyEmbeddedAttemptToolsAllow, buildAgentHookContextChannelFields, buildEmbeddedAttemptToolRunContext, embeddedAgentLog, filterProviderNormalizableTools, getPluginToolMeta, isHostScopedAgentToolActive, isSubagentSessionKey, normalizeAgentRuntimeTools, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{dynamic-tools-3hNi6oog.mjs → dynamic-tools-CKJE7KwQ.mjs}

@@ -3,13 +3,13 @@ import { o as formatCodexDisplayText } from "./command-formatters-DV3DHhdr.mjs";
 import { o as readItem } from "./event-projector-values-DTqZHizf.mjs";
 import { s as codexAppIdentityKey } from "./plugin-app-cache-key-BW8rd98k.mjs";
 import { r as invalidInlineImageText } from "./session-history-read-CNN8zwbD.mjs";
-import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-D2ivOIey.mjs";
-import { F as createFailedDynamicToolResponse, I as failedToolResult, P as resolveCodexToolAbortTerminalReason, l as CodexServerRequestResolvedError, w as createCodexElicitationResponse, x as readCodexTurnCompletedNotification } from "./client-DIC12QQ_.mjs";
+import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-r9NcV_GJ.mjs";
+import { F as createFailedDynamicToolResponse, I as failedToolResult, P as resolveCodexToolAbortTerminalReason, l as CodexServerRequestResolvedError, w as createCodexElicitationResponse, x as readCodexTurnCompletedNotification } from "./client-BM1XpAkE.mjs";
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
-import { _ as itemStatus, a as isCodexNotificationForTurn, b as shouldClearTerminalPresentationForNativeItem, c as auditNativeToolName, g as itemName, l as auditNativeToolTerminalStatus, o as readCodexNotificationThreadId, s as readCodexNotificationTurnId, u as auditNativeToolUnfinishedStatus } from "./turn-router-CaGl9iS1.mjs";
-import { M as emitCodexNativePreToolUseFailureDiagnostic } from "./thread-requests-CKEQxo_5.mjs";
-import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-D7LyYiO6.mjs";
-import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-CdUp03dV.mjs";
+import { _ as itemStatus, a as isCodexNotificationForTurn, b as shouldClearTerminalPresentationForNativeItem, c as auditNativeToolName, g as itemName, l as auditNativeToolTerminalStatus, o as readCodexNotificationThreadId, s as readCodexNotificationTurnId, u as auditNativeToolUnfinishedStatus } from "./turn-router-DLqce1id.mjs";
+import { M as emitCodexNativePreToolUseFailureDiagnostic } from "./thread-requests-DMd-wcni.mjs";
+import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-CP6xoxpH.mjs";
+import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-B_h3tzwt.mjs";
 import { createRequire } from "node:module";
 import { asNonArrayRecord, asOptionalRecord, filterStringEntries, isRecord, normalizeTrimmedStringList, readNonBlankString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";

package/dist/.setup/{effective-mcp-catalog-DHEOnIwA.mjs → effective-mcp-catalog-BV4S0LoQ.mjs}

@@ -1,6 +1,6 @@
 import { m as sessionBindingIdentity } from "./session-binding-record-BZB8RgcF.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CeVZHm9H.mjs";
-import { W as protectCodexAppServerLiveThread } from "./shared-client-D2ivOIey.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-SXYawyhG.mjs";
+import { W as protectCodexAppServerLiveThread } from "./shared-client-r9NcV_GJ.mjs";
 import "./session-binding-Ce7BqiPN.mjs";
 import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-j10HhfTC.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -116,7 +116,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 	if (!retained && params.prepareSession) {
 		const preparation = await params.prepareSession();
 		params.assertCurrent();
-		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-8CGBwfHK.mjs");
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-D_kcYuIo.mjs");
 		await prepareCodexMcpAppSession({
 			preparation,
 			bindingStore: options.bindingStore,
@@ -137,7 +137,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 		};
 		params.assertCurrent();
 		assertBinding();
-		const { createNativeMcpRuntime } = await import("./native-mcp-app-D4VcVFK7.mjs").then((n) => n.n);
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-BzA5ugfE.mjs").then((n) => n.n);
 		params.assertCurrent();
 		const runtime = createNativeMcpRuntime({
 			client: retained.client,

package/dist/.setup/{ephemeral-turn-BVauXzx9.mjs → ephemeral-turn-DDfBiX1O.mjs}

@@ -1,6 +1,6 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { x as readCodexTurnCompletedNotification } from "./client-DIC12QQ_.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-CaGl9iS1.mjs";
+import { x as readCodexTurnCompletedNotification } from "./client-BM1XpAkE.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-DLqce1id.mjs";
 import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-03R0I2dM.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{event-projector-assistant-message-CRadIRA4.mjs → event-projector-assistant-message-Brq4SDS4.mjs}

@@ -1,5 +1,5 @@
 import { t as codexProviderRefusalDiagnostics } from "./event-projector-values-DTqZHizf.mjs";
-import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-CkpiZfm0.mjs";
+import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-BXClJlaW.mjs";
 import { createAgentHarnessAssistantMessage } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";
 //#region extensions/codex/src/app-server/event-projector-assistant-message.ts
 function createAssistantMessage(params, text, options) {

package/dist/.setup/{isolated-completion-Dab4vUwO.mjs → isolated-completion-1vQHZQD6.mjs}

@@ -1,11 +1,11 @@
 import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
 import { i as resolveCodexAppServerHomeScope } from "./config-options-HG_Rr3W_.mjs";
 import "./config-0Gxk3_eq.mjs";
-import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-D2ivOIey.mjs";
-import { f as assertCodexPassiveTurnItems } from "./client-DIC12QQ_.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-DVI5FRqE.mjs";
+import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-r9NcV_GJ.mjs";
+import { f as assertCodexPassiveTurnItems } from "./client-BM1XpAkE.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DUVJcTLW.mjs";
 import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-DklXNk3k.mjs";
-import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CRadIRA4.mjs";
+import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-Brq4SDS4.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts
 /** Runs prompt-only Codex inference on an ephemeral, ring-zero native thread. */
 async function runCodexIsolatedCompletion(params, options) {

package/dist/.setup/{mcp-app-session-preparation-8CGBwfHK.mjs → mcp-app-session-preparation-D_kcYuIo.mjs}

@@ -6,12 +6,12 @@ import { n as buildCodexAppServerRuntimeFingerprint, r as buildCodexPluginAppCac
 import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-C-08ez1w.mjs";
 import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-0Gxk3_eq.mjs";
 import { r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-D2ivOIey.mjs";
-import { Ct as mergeCodexThreadConfigs, _t as buildCodexPluginThreadConfigInputFingerprint } from "./thread-requests-CKEQxo_5.mjs";
-import { s as startOrResumeThread } from "./thread-lifecycle-BSVWNPZt.mjs";
+import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-r9NcV_GJ.mjs";
+import { Ct as mergeCodexThreadConfigs, _t as buildCodexPluginThreadConfigInputFingerprint } from "./thread-requests-DMd-wcni.mjs";
+import { s as startOrResumeThread } from "./thread-lifecycle-DGgqkt-m.mjs";
 import { r as resolveCodexSessionBinding } from "./session-binding-Ce7BqiPN.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-GlDZf8J7.mjs";
-import { n as resolveCodexPluginThreadConfigStartupPolicy, t as createCodexPluginThreadConfigStartupProvider } from "./plugin-thread-config-deadline-DZw8qiVC.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B1z1lAmI.mjs";
+import { n as resolveCodexPluginThreadConfigStartupPolicy, t as createCodexPluginThreadConfigStartupProvider } from "./plugin-thread-config-deadline-DTyag3sC.mjs";
 import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-BxIUJ0Zd.mjs";
 import { z } from "zod";
 import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{model-catalog-CQXEzyxr.mjs → model-catalog-ghcKIhtW.mjs}

@@ -1,14 +1,14 @@
 import { t as buildCodexRuntimeModelParams } from "./model-runtime-BdqzOMkU.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-BQq-CHTF.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-CeVZHm9H.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-Ddy7nOme.mjs";
+import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-SXYawyhG.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-CB7T766a.mjs";
 import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-D2ivOIey.mjs";
+import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-r9NcV_GJ.mjs";
 import { i as isCodexResponsesOAuthCredential } from "./responses-oauth-twnuTaAa.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-DIC12QQ_.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CR97NoEB.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-BM1XpAkE.mjs";
+import { n as listAllCodexAppServerModels } from "./models-CQwYMFV4.mjs";
 import { probeCodexNativeAuth } from "./native-auth-Cjb9y7IZ.mjs";
 //#region extensions/codex/src/app-server/model-catalog.ts
 const INPUT_TYPES = /* @__PURE__ */ new Set([

package/dist/.setup/{models-CR97NoEB.mjs → models-CQwYMFV4.mjs}

@@ -1,4 +1,4 @@
-import { d as assertCodexModelListResponse } from "./client-DIC12QQ_.mjs";
+import { d as assertCodexModelListResponse } from "./client-BM1XpAkE.mjs";
 import { normalizeOptionalString, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 1e4;
@@ -32,8 +32,8 @@ async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
 	const timeoutMs = options.timeoutMs ?? 1e4;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-D2ivOIey.mjs").then((n) => n.v);
-	const { requestCodexAppServerClientJson } = await import("./request-Ddy7nOme.mjs").then((n) => n.i);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-r9NcV_GJ.mjs").then((n) => n.v);
+	const { requestCodexAppServerClientJson } = await import("./request-CB7T766a.mjs").then((n) => n.i);
 	const client = await (useSharedClient ? getLeasedSharedCodexAppServerClient : createIsolatedCodexAppServerClient)({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/.setup/{native-mcp-app-D4VcVFK7.mjs → native-mcp-app-BzA5ugfE.mjs}

@@ -1,7 +1,7 @@
-import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, n as captureCodexAppServerClientLifetime } from "./shared-client-D2ivOIey.mjs";
-import { B as getCodexAppServerClientInstanceId } from "./client-DIC12QQ_.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-CaGl9iS1.mjs";
-import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-D7LyYiO6.mjs";
+import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, n as captureCodexAppServerClientLifetime } from "./shared-client-r9NcV_GJ.mjs";
+import { B as getCodexAppServerClientInstanceId } from "./client-BM1XpAkE.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-DLqce1id.mjs";
+import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-CP6xoxpH.mjs";
 import { i as readCodexMcpToolUiVisibility, n as projectCodexMcpToolMetadata, r as readCodexMcpToolConnectorId, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-j10HhfTC.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { asOptionalRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/.setup/{native-subagent-monitor-CkpiZfm0.mjs → native-subagent-monitor-BXClJlaW.mjs}

@@ -1,14 +1,14 @@
 import { c as codexNativeSubagentRunId, d as readNativeSubagentThreadIds, f as readThreadParentThreadId, l as normalizeIdentifier, m as assertHistoryOwnerMatchesRegistration, p as readThreadSpawnSource, t as matchesNativeAssignmentLifecycle, u as readCodexNativeSubagentRunId } from "./native-subagent-pending-assignments-BDqhOdJp.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as defineCodexBuildState } from "./build-state-DP9Coy_6.mjs";
+import { n as defineCodexBuildState } from "./build-state-BgEYwu09.mjs";
 import { a as readHookOutputEntries, o as readItem, s as readNullableString } from "./event-projector-values-DTqZHizf.mjs";
 import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
 import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-BogBHKLk.mjs";
-import { P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, q as retainCodexAppServerLiveThread } from "./shared-client-D2ivOIey.mjs";
-import { L as readCodexAppServerWarningMessage } from "./client-DIC12QQ_.mjs";
-import { _ as itemStatus, c as auditNativeToolName, d as isMutatingNativeToolItem, f as isNonSuccessItemStatus, g as itemName, h as itemKind, l as auditNativeToolTerminalStatus, m as isSideEffectingNativeToolItem, p as isProjectedNativeToolItem, v as itemTitle, x as unknownItemStatus, y as matchesCodexSnapshotTurn } from "./turn-router-CaGl9iS1.mjs";
-import { s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-hUrW3fmJ.mjs";
-import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-D7LyYiO6.mjs";
+import { P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, q as retainCodexAppServerLiveThread } from "./shared-client-r9NcV_GJ.mjs";
+import { L as readCodexAppServerWarningMessage } from "./client-BM1XpAkE.mjs";
+import { _ as itemStatus, c as auditNativeToolName, d as isMutatingNativeToolItem, f as isNonSuccessItemStatus, g as itemName, h as itemKind, l as auditNativeToolTerminalStatus, m as isSideEffectingNativeToolItem, p as isProjectedNativeToolItem, v as itemTitle, x as unknownItemStatus, y as matchesCodexSnapshotTurn } from "./turn-router-DLqce1id.mjs";
+import { s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-DNfVb5SC.mjs";
+import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-CP6xoxpH.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { asFiniteNumber, asNonArrayRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeTrimmedStringList, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";

package/dist/.setup/{plan-LJsaUrXA.mjs → plan-DpzgbuEW.mjs}

@@ -1,7 +1,7 @@
 import { t as isOnlyMigrationKind } from "./scope-DOC1Xjc8.mjs";
 import { l as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-Bf0_piTw.mjs";
 import "./config-0Gxk3_eq.mjs";
-import { i as hasCodexSource, n as defaultCodexHome, o as readJsonObject, r as discoverCodexSource, s as sanitizeName, t as codexPluginMigrationSubscriptionWarning } from "./source-3uDpVdu3.mjs";
+import { i as hasCodexSource, n as defaultCodexHome, o as readJsonObject, r as discoverCodexSource, s as sanitizeName, t as codexPluginMigrationSubscriptionWarning } from "./source-DbDo__mI.mjs";
 import { asBoolean, asOptionalRecord, isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import { runCommandBuffered } from "openclaw/plugin-sdk/process-runtime";
@@ -96,7 +96,7 @@ async function readCodexCliCredentialsAsync(options) {
 	options.signal?.throwIfAborted();
 	if (!options.allowKeychainPrompt) return;
 	const home = await fs.realpath(options.codexHome).catch(() => path.resolve(options.codexHome));
-	const { CodexAppServerClient } = await import("./client-DIC12QQ_.mjs").then((n) => n.n);
+	const { CodexAppServerClient } = await import("./client-BM1XpAkE.mjs").then((n) => n.n);
 	const { resolveManagedCodexPackageEntrypoint, resolveManagedCodexNativeCommand } = await import("./managed-binary-C1VFoVPf.mjs").then((n) => n.n);
 	const launcher = resolveManagedCodexPackageEntrypoint(path.dirname(fileURLToPath(import.meta.url)));
 	const command = launcher ? resolveManagedCodexNativeCommand(launcher) : void 0;

package/dist/.setup/{plugin-approval-roundtrip-D7LyYiO6.mjs → plugin-approval-roundtrip-CP6xoxpH.mjs}

@@ -1,4 +1,4 @@
-import { mt as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-D2ivOIey.mjs";
+import { mt as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-r9NcV_GJ.mjs";
 import { isApprovalNotFoundError, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { racePromiseWithAbortSignal } from "openclaw/plugin-sdk/time-runtime";

package/dist/.setup/{plugin-thread-config-deadline-DZw8qiVC.mjs → plugin-thread-config-deadline-DTyag3sC.mjs}

@@ -3,9 +3,9 @@ import { r as withAbortableTimeout } from "./timeout-CXOfNoaX.mjs";
 import { a as defaultCodexAppInventoryCache } from "./plugin-app-cache-key-BW8rd98k.mjs";
 import { s as resolveRecoverableCodexPluginConfigKeys } from "./plugin-inventory-Bf0_piTw.mjs";
 import "./config-0Gxk3_eq.mjs";
-import { Tt as shouldBuildCodexPluginThreadConfig, gt as buildCodexPluginThreadConfig, vt as buildCodexPluginThreadConfigTimeoutFallback } from "./thread-requests-CKEQxo_5.mjs";
-import { m as readCurrentCodexScheduledAppPolicy, p as intersectCodexPluginThreadConfigWithScheduledAuthority } from "./thread-lifecycle-BSVWNPZt.mjs";
-import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-CdUp03dV.mjs";
+import { Tt as shouldBuildCodexPluginThreadConfig, gt as buildCodexPluginThreadConfig, vt as buildCodexPluginThreadConfigTimeoutFallback } from "./thread-requests-DMd-wcni.mjs";
+import { m as readCurrentCodexScheduledAppPolicy, p as intersectCodexPluginThreadConfigWithScheduledAuthority } from "./thread-lifecycle-DGgqkt-m.mjs";
+import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-B_h3tzwt.mjs";
 import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-DWnB7VMj.mjs";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/plugin-thread-config-deadline.ts