@openclaw/codex 2026.10.5-beta.4 → 2026.10.10-beta.1

package/dist/.setup/{conversation-binding-data-UgLuTSQT.mjs → conversation-binding-data-khgW0n-o.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonBlankString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import process from "node:process";
@@ -81,12 +81,14 @@ function readConversationSource(value) {
 	const sessionId = normalizeOptionalString(value?.sessionId);
 	const threadId = normalizeOptionalString(value?.threadId);
 	const sessionKey = normalizeOptionalString(value?.sessionKey);
+	const storePath = normalizeOptionalString(value?.storePath);
 	if (!agentId || !sessionId || !threadId) return;
 	return {
 		agentId,
 		sessionId,
 		threadId,
-		...sessionKey ? { sessionKey } : {}
+		...sessionKey ? { sessionKey } : {},
+		...storePath ? { storePath } : {}
 	};
 }
 /** Doctor/runtime v1 decoder key for shipped conversation bindings that stored a file locator. */

package/dist/.setup/{conversation-control-GXM3unE4.mjs → conversation-control-B2EpVZEb.mjs}

@@ -1,13 +1,13 @@
-import { r as bindingStoreKey } from "./session-binding-record-DU_0biMD.mjs";
+import { r as bindingStoreKey } from "./session-binding-record-C_THntMe.mjs";
 import { r as isCodexFastServiceTier } from "./config-utils-DN_YT7dE.mjs";
-import { o as formatCodexDisplayText } from "./command-formatters-xW9KpoSZ.mjs";
-import "./config-C1YVVLEA.mjs";
-import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import "./session-binding-JEHNMPsr.mjs";
-import { a as resolveCodexBindingModelProviderFallback, r as resolveCodexAppServerRequestModelSelection } from "./thread-model-selection-DcVebr8N.mjs";
+import { o as formatCodexDisplayText } from "./command-formatters-B_7-QZ1c.mjs";
+import "./config-BfrAlTMT.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-auwzSwwy.mjs";
+import "./session-binding-BgsWcbdY.mjs";
+import { a as resolveCodexBindingModelProviderFallback, r as resolveCodexAppServerRequestModelSelection } from "./thread-model-selection-DxposL4X.mjs";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
-import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
-import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";
+import { getSessionEntryAsync, prepareSessionEntryPatch, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility, prepareAuthProfileProvider } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/conversation-control.ts
 const CODEX_CONVERSATION_CONTROL_STATE = Symbol.for("openclaw.codex.conversationControl");
 function getActiveTurns() {
@@ -41,7 +41,12 @@ async function stopCodexConversationTurn(params) {
 		turnId: active.turnId
 	}, {
 		timeoutMs: active.requestTimeoutMs,
-		assertCurrent: params.assertCurrent
+		assertCurrent: params.assertCurrent,
+		withCurrent: async (write) => {
+			await params.assertCurrentAsync?.();
+			params.assertCurrent();
+			write();
+		}
 	});
 	return {
 		stopped: true,
@@ -73,7 +78,12 @@ async function steerCodexConversationTurn(params) {
 		}]
 	}, {
 		timeoutMs: active.requestTimeoutMs,
-		assertCurrent: params.assertCurrent
+		assertCurrent: params.assertCurrent,
+		withCurrent: async (write) => {
+			await params.assertCurrentAsync?.();
+			params.assertCurrent();
+			write();
+		}
 	});
 	return {
 		steered: true,
@@ -82,6 +92,7 @@ async function steerCodexConversationTurn(params) {
 }
 async function setCodexConversationModel(input) {
 	const params = { ...input };
+	await params.assertCurrentAsync?.();
 	const model = params.model.trim();
 	if (!model) return "Usage: /codex model <model>";
 	const lookup = buildCodexConversationAgentLookup(params);
@@ -89,7 +100,7 @@ async function setCodexConversationModel(input) {
 	const assertCommitAllowed = params.assertCommitAllowed ?? params.assertCurrent;
 	const binding = requirePreparedThreadBinding(params.binding);
 	if (binding.connectionScope === "supervision") throw new ModelSelectionLockedError();
-	const modelProvider = resolveThreadRequestModelProvider({
+	const modelProvider = await resolveThreadRequestModelProvider({
 		authProfileId: binding.authProfileId,
 		modelProvider: resolveCodexBindingModelProviderFallback({
 			bindingModel: binding.model,
@@ -98,13 +109,13 @@ async function setCodexConversationModel(input) {
 		}),
 		...lookup
 	});
-	const modelSelection = resolveCodexAppServerRequestModelSelection({
+	const modelSelection = await resolveCodexAppServerRequestModelSelection({
 		model,
 		modelProvider,
 		authProfileId: binding.authProfileId,
 		...lookup
 	});
-	const nextModelProvider = normalizeCodexAppServerBindingModelProvider({
+	const nextModelProvider = await normalizeCodexAppServerBindingModelProvider({
 		authProfileId: binding.authProfileId,
 		modelProvider: modelSelection.modelProvider,
 		...lookup
@@ -117,19 +128,32 @@ async function setCodexConversationModel(input) {
 	} } : {};
 	const identity = params.identity;
 	if (identity.kind === "session" && identity.sessionKey) {
-		if (!await patchSessionEntry({
+		if (!await prepareSessionEntryPatch({
 			agentId: identity.agentId,
 			storePath: params.storePath ?? resolveStorePath(params.config?.session?.store, { agentId: identity.agentId }),
 			sessionKey: identity.sessionKey,
 			requireWriteSuccess: true,
 			replaceEntry: true,
-			assertCommitAllowed,
-			update: (entry) => {
+			authority: params.assertCommitAllowed ? {
+				kind: "source",
+				source: params.assertCommitAllowed
+			} : {
+				kind: "host",
+				assertCurrent: params.assertCurrent
+			},
+			prepare: async (entry) => {
 				if (entry.sessionId !== identity.sessionId) throw new Error("Codex session changed while applying the model selection.");
+				const agentDir = params.agentDir ?? resolveAgentDir(params.config ?? {}, identity.agentId);
+				const profileId = entry.authProfileOverride?.trim();
+				const recordedProvider = profileId ? await prepareAuthProfileProvider({
+					agentDir,
+					profileId
+				}) : void 0;
 				applyModelOverrideWithAuthProfileCompatibility({
 					cfg: params.config ?? {},
-					agentDir: params.agentDir ?? resolveAgentDir(params.config ?? {}, identity.agentId),
+					agentDir,
 					entry,
+					recordedProvider,
 					currentProvider: binding.modelProvider ?? "openai",
 					selection: {
 						provider: nextModelProvider ?? "openai",
@@ -160,7 +184,7 @@ async function setCodexConversationPermissions(params) {
 	params.assertCurrent();
 	const storePath = params.storePath ?? resolveStorePath(params.config?.session?.store, { agentId: params.session.agentId });
 	if (!params.mode) {
-		const entry = getSessionEntry({
+		const entry = await getSessionEntryAsync({
 			agentId: params.session.agentId,
 			hydrateSkillPromptRefs: false,
 			readConsistency: "latest",
@@ -171,14 +195,20 @@ async function setCodexConversationPermissions(params) {
 		if (entry?.sessionId !== params.session.sessionId) throw new Error("Codex session changed while reading the permission mode.");
 		return `Codex permissions: ${formatPermissionsMode(entry.permissionMode)}.`;
 	}
-	if (!await patchSessionEntry({
+	if (!await prepareSessionEntryPatch({
 		agentId: params.session.agentId,
 		storePath,
 		sessionKey: params.session.sessionKey,
 		requireWriteSuccess: true,
 		replaceEntry: true,
-		assertCommitAllowed: params.assertCurrent,
-		update: (entry) => {
+		authority: params.sourceAuthority ? {
+			kind: "source",
+			source: params.sourceAuthority
+		} : {
+			kind: "host",
+			assertCurrent: params.assertCurrent
+		},
+		prepare: (entry) => {
 			if (entry.sessionId !== params.session.sessionId) throw new Error("Codex session changed while applying the permission mode.");
 			entry.permissionMode = params.mode === "yolo" ? "full" : "guarded";
 			return entry;
@@ -222,10 +252,10 @@ function buildCodexConversationAgentLookup(params) {
 		...params.config ? { config: params.config } : {}
 	};
 }
-function resolveThreadRequestModelProvider(params) {
+async function resolveThreadRequestModelProvider(params) {
 	const modelProvider = params.modelProvider?.trim();
 	if (!modelProvider || modelProvider.toLowerCase() === "codex") return;
-	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === "openai") return;
+	if (modelProvider.toLowerCase() === "openai" && await isCodexAppServerNativeAuthProfile(params)) return;
 	return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
 }
 //#endregion

package/dist/.setup/{cyber-failover-D4dgNfFf.mjs → cyber-failover-CqEZoQsj.mjs}

@@ -1,5 +1,5 @@
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
-import { t as attemptTerminal } from "./attempt-terminal-jO5IMj9K.mjs";
+import { t as attemptTerminal } from "./attempt-terminal-sZutF0WY.mjs";
 //#region extensions/codex/src/app-server/cyber-failover.ts
 /**
 * Automatic Daybreak escalation for OpenAI cyber-policy refusals.

package/dist/.setup/{cyber-failover-notice-ljgGGL0s.mjs → cyber-failover-notice-poL3Advd.mjs}

@@ -1,4 +1,4 @@
-import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-KN4oh-7O.mjs";
+import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-DN-ATDp9.mjs";
 //#region extensions/codex/src/app-server/cyber-failover-notice.ts
 async function emitCodexCyberNotice(params, notice) {
 	await emitCodexAppServerEvent(params, {

package/dist/.setup/{doctor-start-options-JjTAl-q_.mjs → doctor-start-options-8uIBXIzR.mjs}

@@ -1,8 +1,8 @@
 import { d as readCodexPluginConfig } from "./config-parsing-DsWSCPHO.mjs";
-import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-DDzeNQ8m.mjs";
-import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-BtIjV7yN.mjs";
-import "./config-C1YVVLEA.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
+import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-DMFZkd3X.mjs";
+import { a as isManagedCodexDesktopCommand, u as resolveManagedCodexAppServerStartOptions } from "./managed-binary-DbKvGXKl.mjs";
+import "./config-BfrAlTMT.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
 import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveDefaultModelForAgent } from "openclaw/plugin-sdk/agent-runtime";
 import { resolveEffectiveAgentRuntime } from "openclaw/plugin-sdk/command-auth-native";
@@ -48,7 +48,10 @@ async function resolveCodexDoctorStartOptions(params) {
 		managedCommandOrder: "package-only"
 	});
 	for (const candidate of candidates) {
-		const resolved = await resolveStartOptions(candidate, { pluginRoot: params.pluginRoot });
+		const resolved = await resolveStartOptions(candidate, {
+			pluginRoot: params.pluginRoot,
+			preferInstalled: false
+		});
 		if (!isDesktopCommand(resolved.command)) return {
 			status: "selected",
 			start: resolved