@openclaw/codex 2026.10.5-beta.4 → 2026.10.10-beta.2

package/dist/.setup/{source-DipMO9hL.mjs → source-63MLSmLJ.mjs}

@@ -1,8 +1,8 @@
-import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-Bo0kKABI.mjs";
-import { a as marketplaceRef, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-CYgdo14P.mjs";
-import "./config-C1YVVLEA.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-DRb-niJc.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-C6U8q2uz.mjs";
+import { a as marketplaceRef, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-DE9wcaeH.mjs";
+import "./config-BfrAlTMT.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { asNonArrayRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import os from "node:os";

package/dist/.setup/{thread-archive-guard-LKdwQKyr.mjs → thread-archive-guard-BWjSsA92.mjs}

@@ -1,4 +1,4 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { normalizeBoundedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/thread-archive-guard.ts
 const DESCENDANT_PAGE_LIMIT = 100;

package/dist/.setup/{thread-lifecycle-run-C_aYiYqk.mjs → thread-lifecycle-run-zCXYFW8W.mjs}

@@ -1,49 +1,53 @@
-import { i as isJsonObject, r as flattenCodexDynamicToolFunctions } from "./protocol-CANUwXJ3.mjs";
-import { n as matchesPendingSupervisionBranch } from "./session-binding-record-codec-BpH8u_G9.mjs";
-import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-DU_0biMD.mjs";
+import { n as flattenCodexDynamicToolFunctions, r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
+import { n as matchesPendingSupervisionBranch } from "./session-binding-record-codec-DvmOI7g_.mjs";
+import { g as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-C_THntMe.mjs";
 import { l as fingerprintCodexPolicy } from "./config-security-clxAZYWX.mjs";
 import { f as resolveCodexPluginsPolicy } from "./config-parsing-DsWSCPHO.mjs";
 import { n as resolveCodexAppServerLocalHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
-import { d as readCodexEffectiveConfig, s as assertCodexModelBackedReviewerEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DDzeNQ8m.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId, d as getCurrentSharedClientEntry } from "./auth-cache-key-f8ODJ_OX.mjs";
+import { d as readCodexEffectiveConfig, s as assertCodexModelBackedReviewerEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DMFZkd3X.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId, f as getCurrentSharedClientEntry } from "./auth-cache-key-BW1YeaIk.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-CeyYScUC.mjs";
-import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-C98SHchT.mjs";
+import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-DemqqaxE.mjs";
 import { t as codexCatalogHomeId } from "./session-catalog-home-id-vlih0B_g.mjs";
 import { r as withAbortableTimeout } from "./timeout-D0mEWSGG.mjs";
-import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DfKcoZCB.mjs";
-import { a as defaultCodexAppInventoryCache, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { n as readCodexSessionMeta } from "./session-catalog-provenance-CmsOE5mh.mjs";
-import { t as assertCodexSessionRuntimeOwnership } from "./binding-connection-B7HAAZSI.mjs";
-import { c as resolveRecoverableCodexPluginConfigKeys } from "./plugin-inventory-CYgdo14P.mjs";
-import "./config-C1YVVLEA.mjs";
-import { c as resolveCodexContextEngineProjectionMaxChars } from "./context-engine-projection-ps-yn_ci.mjs";
-import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-CgHQ8Vot.mjs";
-import { $ as createCodexEphemeralThreadPolicy, A as bindCodexInferenceThread, B as isCodexAppServerClientRuntimeLive, C as CodexThreadBindingConflictError, F as consumeCodexAppServerLiveThread, H as isCodexAppServerLiveThreadProtected, K as releaseCodexAppServerLiveThread, M as getCodexInferenceThreadQualification, N as prepareCodexInferenceThreadConfig, S as CodexAdoptedThreadActiveError, T as CodexThreadStartRequestError, V as isCodexAppServerLiveThreadClaimed, Y as unsubscribeCodexAppServerLiveThread, j as getCodexInferenceThread, k as assertCodexInferenceRouteConfig, n as captureCodexAppServerClientLifetime, w as CodexThreadClientReplacementError, z as hasCodexAppServerSiblingThreadWork } from "./shared-client-BCx1wbyA.mjs";
-import { C as resolveCodexThreadRolloutPath, F as getCodexAppServerClientInstanceId, L as resolveCodexAppServerClientInstanceId, S as readSupervisionResponseThreadId, c as isCodexAppServerRequestTimeoutError, g as assertCodexThreadStartResponse, m as assertCodexThreadForkResponse, p as assertCodexThreadAcceptsDirectInput, v as assertExactSupervisionModelSelection } from "./client-D93nbdB8.mjs";
-import { r as hasCodexAppServerSiblingRouteWork } from "./turn-router-DBVMToGo.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-zNuNTKVr.mjs";
-import { a as buildCodexPluginThreadConfigInputFingerprint, c as buildPluginAppPolicyContext, d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, l as disableUnlistedCodexApps, m as buildCodexAppApprovalOverrides, n as mergeCodexNativeProjectDocThreadConfig, o as buildCodexPluginThreadConfigTimeoutFallback, p as shouldBuildCodexPluginThreadConfig, r as buildCodexPluginAppsConfigPatchFromPolicyContext, u as isCodexPluginThreadBindingStale } from "./project-doc-thread-config-BVcvnps8.mjs";
-import { A as isTransientWebSearchRestriction, C as fingerprintEnvironmentSelection, D as readActiveCodexTurnIdsFromResume, E as legacyFingerprintUserMcpServersConfigPatch, I as isMessageOnlyCodexSourceReply, L as isSystemAgentOnlyCodexDynamicToolAllowlist, M as shouldRotateCodexAppServerBindingForRuntime, N as shouldRotateCodexGpt56MultiAgentBinding, O as shouldStartTransientNoToolThread, S as fingerprintCodexThreadConfig, T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, b as codexDynamicToolsFingerprint, c as codexThreadSandboxOrPermissions, d as readCodexManagedRequirementsFingerprint, f as resolveCodexThreadApprovalsReviewer, g as mergeCodexNativeShellEnvironment, h as resolveCodexWebSearchPlan, i as buildCodexRuntimeThreadConfigForRun, j as shouldRecheckRecoverablePluginBinding, n as buildCodexRingZeroThreadConfigPatch, o as buildThreadResumeParams, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, s as buildThreadStartParams, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames, v as areCodexDynamicToolFingerprintsCompatible, w as fingerprintJsonObject, x as codexLegacyDynamicToolsFingerprint, y as areUserMcpServersFingerprintsCompatible } from "./thread-requests-BgzJwJtS.mjs";
-import { i as resolveCodexSessionBinding, o as hashCodexAppServerBindingFingerprint } from "./session-binding-JEHNMPsr.mjs";
-import { i as resolveCodexAppServerThreadModelSelection, n as resolveCodexAppServerModelProvider } from "./thread-model-selection-DcVebr8N.mjs";
-import { c as withExclusiveCodexAppServerThread, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BoUd0i6L.mjs";
-import { a as refreshCodexThreadInstructions, i as assertCodexSupervisionThreadLineage, n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy, r as assertAdoptedCodexThreadResumeAllowed, t as CodexIncognitoPolicyChangeError } from "./thread-policy-B3wBRNph.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-D-3bsr1j.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-i-FVpyha.mjs";
+import { a as defaultCodexAppInventoryCache, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-DRb-niJc.mjs";
+import { n as readCodexSessionMeta } from "./session-catalog-provenance-Dg9s12z-.mjs";
+import { t as assertCodexSessionRuntimeOwnership } from "./binding-connection-GTgUj9pi.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
+import { c as resolveRecoverableCodexPluginConfigKeys } from "./plugin-inventory-DE9wcaeH.mjs";
+import "./config-BfrAlTMT.mjs";
+import { c as resolveCodexContextEngineProjectionMaxChars } from "./context-engine-projection-PIeLSnR-.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-auwzSwwy.mjs";
+import { C as getCodexInferenceThread, D as consumeCodexAppServerLiveThread, H as unsubscribeCodexAppServerLiveThread, K as createCodexEphemeralThreadPolicy, M as isCodexAppServerClientRuntimeLive, N as isCodexAppServerLiveThreadClaimed, P as isCodexAppServerLiveThreadProtected, R as readCodexLiveThreadEphemeralPolicy, S as bindCodexInferenceThread, T as prepareCodexInferenceThreadConfig, _ as CodexThreadBindingConflictError, g as CodexAdoptedThreadActiveError, j as hasCodexAppServerSiblingThreadWork, q as recordCodexThreadForkSettings, t as captureCodexAppServerClientLifetime, v as CodexThreadClientReplacementError, w as getCodexInferenceThreadQualification, x as assertCodexInferenceRouteConfig, y as CodexThreadStartRequestError, z as releaseCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
+import "./responses-oauth-CCV7aVYF.mjs";
+import { M as getCodexAppServerClientInstanceId, P as resolveCodexAppServerClientInstanceId, S as resolveCodexThreadRolloutPath, _ as assertExactSupervisionModelSelection, f as assertCodexThreadAcceptsDirectInput, h as assertCodexThreadStartResponse, p as assertCodexThreadForkResponse, s as isCodexAppServerRequestTimeoutError, x as readSupervisionResponseThreadId } from "./client--P8jwXvA.mjs";
+import { r as hasCodexAppServerSiblingRouteWork } from "./turn-router-BGj67FMK.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { n as listAllCodexAppServerModels } from "./models-CmOBxsKF.mjs";
+import { a as buildCodexPluginThreadConfigInputFingerprint, c as buildPluginAppPolicyContext, d as mergeCodexThreadConfigs, i as buildCodexPluginThreadConfig, l as disableUnlistedCodexApps, m as buildCodexAppApprovalOverrides, n as mergeCodexNativeProjectDocThreadConfig, o as buildCodexPluginThreadConfigTimeoutFallback, p as shouldBuildCodexPluginThreadConfig, r as buildCodexPluginAppsConfigPatchFromPolicyContext, u as isCodexPluginThreadBindingStale } from "./project-doc-thread-config-B0UI3f1D.mjs";
+import { A as isTransientWebSearchRestriction, C as fingerprintEnvironmentSelection, D as readActiveCodexTurnIdsFromResume, E as legacyFingerprintUserMcpServersConfigPatch, I as isMessageOnlyCodexSourceReply, L as isSystemAgentOnlyCodexDynamicToolAllowlist, M as shouldRotateCodexAppServerBindingForRuntime, N as shouldRotateCodexGpt56MultiAgentBinding, O as shouldStartTransientNoToolThread, S as fingerprintCodexThreadConfig, T as fingerprintUserMcpServersConfigPatch, _ as buildDeveloperInstructions, b as codexDynamicToolsFingerprint, c as codexThreadSandboxOrPermissions, d as readCodexManagedRequirementsFingerprint, f as resolveCodexThreadApprovalsReviewer, g as mergeCodexNativeShellEnvironment, h as resolveCodexWebSearchPlan, i as buildCodexRuntimeThreadConfigForRun, j as shouldRecheckRecoverablePluginBinding, n as buildCodexRingZeroThreadConfigPatch, o as buildThreadResumeParams, p as attestCodexRestrictedToolSurfaceMcpServersDisabled, s as buildThreadStartParams, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy, u as readCodexInheritedMcpServerNames, v as areCodexDynamicToolFingerprintsCompatible, w as fingerprintJsonObject, x as codexLegacyDynamicToolsFingerprint, y as areUserMcpServersFingerprintsCompatible } from "./thread-requests-BjawdIVV.mjs";
+import { i as resolveCodexSessionBinding, o as hashCodexAppServerBindingFingerprint } from "./session-binding-BgsWcbdY.mjs";
+import { i as resolveCodexAppServerThreadModelSelection, n as resolveCodexAppServerModelProvider } from "./thread-model-selection-DxposL4X.mjs";
+import { c as withExclusiveCodexAppServerThread, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Bmk5a2Gu.mjs";
+import { a as refreshCodexThreadInstructions, i as assertCodexSupervisionThreadLineage, n as CodexThreadPolicyHandoffError, o as refreshCodexThreadPolicy, r as assertAdoptedCodexThreadResumeAllowed, t as CodexIncognitoPolicyChangeError } from "./thread-policy-DYtvZ5Ay.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-vBShG3-o.mjs";
 import { r as readCodexMcpToolConnectorId } from "./mcp-tool-metadata-DW41snf3.mjs";
-import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-DcaPmBlE.mjs";
-import { n as CodexManagedHooksOnlyError, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-wq7jrNLk.mjs";
-import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-Bi8TAPwX.mjs";
-import { a as discardUnattestedCodexPluginThread, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, o as hasCodexNativeToolCatalog, r as attestCodexThreadToolSurface, s as loadCodexNativeToolCatalog, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-DSBeF-Yy.mjs";
+import { n as disableCodexPluginThreadConfig } from "./dynamic-tool-build-DOub3CB5.mjs";
+import { n as CodexManagedHooksOnlyError, r as assertCodexNativeHookRelayAllowed } from "./native-hook-relay-CocOW9YS.mjs";
+import { t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-BqC-a6Fb.mjs";
+import { a as discardUnattestedCodexPluginThread, i as checkCodexThreadAppAvailability, n as resolveCodexNativeSkillIsolation, o as hasCodexNativeToolCatalog, r as attestCodexThreadToolSurface, s as loadCodexNativeToolCatalog, t as applyCodexNativeSkillIsolation } from "./native-skill-isolation-DL4-PQa4.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import path from "node:path";
-import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";
 import { createStageTimingTracker, formatStageTimings, racePromiseWithAbortSignal } from "openclaw/plugin-sdk/time-runtime";
+import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";
 import { resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
 import { AgentHarnessPreflightError, embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, isHostScopedAgentToolActive } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { buildCodexUserMcpServersThreadConfigPatchForRun } from "openclaw/plugin-sdk/codex-mcp-projection";
+import { resolveModelServiceTierContextTokens } from "openclaw/plugin-sdk/provider-model-metadata";
 import { isDiagnosticFlagEnabled } from "openclaw/plugin-sdk/diagnostic-flags";
 //#region extensions/codex/src/app-server/scheduled-app-tool-policy.ts
 function normalizeAppToolApprovalMode(value) {
@@ -588,6 +592,40 @@ function isCodexAppServerProfilerEnabled(config, env = process.env) {
 	return PROFILER_FLAGS.some((flag) => isDiagnosticFlagEnabled(flag, config, env));
 }
 //#endregion
+//#region extensions/codex/src/app-server/service-tier.ts
+/** Validate an explicit Ultrafast selection against this turn's native model and client. */
+async function resolveCodexUltrafastServiceTier(params) {
+	if (!params.enabled || params.modelProvider !== "openai" && params.modelProvider !== "openclaw_token_sharing" || !params.model) return params.serviceTier;
+	params.signal.throwIfAborted();
+	params.assertCurrent();
+	const deadline = performance.now() + params.timeoutMs;
+	try {
+		const catalog = await listAllCodexAppServerModels({
+			includeHidden: true,
+			request: (request) => {
+				const timeoutMs = deadline - performance.now();
+				if (timeoutMs <= 0) throw new Error("Codex Ultrafast catalog deadline exceeded");
+				return requestCodexAppServerClientJson({
+					...request,
+					client: params.client,
+					signal: params.signal,
+					assertCurrent: params.assertCurrent,
+					timeoutMs,
+					config: params.config
+				});
+			}
+		});
+		params.signal.throwIfAborted();
+		params.assertCurrent();
+		return catalog.models.find((entry) => entry.model === params.model)?.serviceTiers?.includes("ultrafast") ? "ultrafast" : params.serviceTier;
+	} catch (error) {
+		params.signal.throwIfAborted();
+		params.assertCurrent();
+		if (error instanceof CodexAppServerScopedRequestRejectedError) throw error;
+		return params.serviceTier;
+	}
+}
+//#endregion
 //#region extensions/codex/src/app-server/thread-lifecycle-timing.ts
 function createCodexThreadLifecycleTimingTracker(options = {}) {
 	const log = options.log ?? embeddedAgentLog;
@@ -641,7 +679,7 @@ function assertCodexThreadInferenceAuthority(params, modelPolicyEnforced) {
 }
 /** Preserve the selected provider when only its physical thread must be replaced. */
 async function prepareCodexThreadRequestContext(params, options) {
-	const startModelSelection = resolveCodexAppServerThreadModelSelection({
+	const startModelSelection = await resolveCodexAppServerThreadModelSelection({
 		homeScope: params.appServer.start.homeScope,
 		provider: params.params.provider,
 		model: params.runtimeModelId ?? params.params.modelId,
@@ -652,6 +690,28 @@ async function prepareCodexThreadRequestContext(params, options) {
 		config: params.params.config
 	});
 	const startModelProvider = startModelSelection.modelProvider;
+	const nativeProvider = options.preflight.effectiveConfig.config.model_provider;
+	const fastMode = typeof params.params.fastMode === "function" ? params.params.fastMode() : params.params.fastMode;
+	const preservedNativeBinding = options.selectionBinding?.preserveNativeModel || options.selectionBinding?.connectionScope === "supervision" ? options.selectionBinding : void 0;
+	const admittedNativeThread = fastMode === "ultrafast" && preservedNativeBinding ? await assertAdoptedCodexThreadResumeAllowed(params, preservedNativeBinding.threadId, {
+		...options.preflight,
+		throwIfAborted: options.throwIfAborted
+	}, options.assertCurrent) : void 0;
+	const serviceTier = options.serviceTierAdmission ? options.serviceTierAdmission.tier : await resolveCodexUltrafastServiceTier({
+		enabled: fastMode === "ultrafast" && params.appServer.enableUltrafast !== false,
+		serviceTier: params.appServer.serviceTier === "ultrafast" ? "priority" : params.appServer.serviceTier,
+		model: admittedNativeThread?.model ?? preservedNativeBinding?.model ?? startModelSelection.model,
+		modelProvider: admittedNativeThread?.modelProvider ?? preservedNativeBinding?.modelProvider ?? startModelProvider ?? options.selectionBinding?.modelProvider ?? (typeof nativeProvider === "string" ? nativeProvider : params.params.provider === "codex" ? "openai" : params.params.provider),
+		client: params.client,
+		timeoutMs: Math.min(params.appServer.requestTimeoutMs, 2500),
+		signal: params.signal ?? new AbortController().signal,
+		assertCurrent: options.assertCurrent,
+		config: params.params.config
+	});
+	params.appServer = {
+		...params.appServer,
+		serviceTier
+	};
 	const source = params.params.hostCapabilities.retainSourceAuthority?.();
 	const modelPolicyEnforced = params.nativeModelAdmission === void 0 || options.preflight.nativeModelInputTools !== void 0;
 	let inference;
@@ -675,6 +735,15 @@ async function prepareCodexThreadRequestContext(params, options) {
 		source?.release();
 	}
 	params.config = inference?.config ?? options.config;
+	const contextTokenCap = resolveModelServiceTierContextTokens("openai", serviceTier ?? void 0);
+	if (contextTokenCap !== void 0) {
+		const configuredLimit = params.config?.model_auto_compact_token_limit ?? options.preflight.effectiveConfig.config.model_auto_compact_token_limit;
+		params.config = {
+			...params.config,
+			model_auto_compact_token_limit: typeof configuredLimit === "number" ? Math.min(configuredLimit, contextTokenCap) : contextTokenCap,
+			model_auto_compact_token_limit_scope: "total"
+		};
+	}
 	params.inferenceRoute = inference?.route;
 	params.inferenceProviderRoutes = inference?.providers;
 	params.assertCurrent = () => {
@@ -685,10 +754,12 @@ async function prepareCodexThreadRequestContext(params, options) {
 	params.assertCurrent();
 	return {
 		...options.preflight,
+		admittedNativeThread,
+		serviceTierAdmission: options.serviceTierAdmission ?? { tier: serviceTier },
 		bindingIdentity: options.bindingIdentity,
 		startModelSelection,
 		startModelProvider,
-		normalizeBindingModelProvider: (authProfileId, modelProvider) => normalizeCodexAppServerBindingModelProvider({
+		normalizeBindingModelProvider: async (authProfileId, modelProvider) => await normalizeCodexAppServerBindingModelProvider({
 			authProfileId,
 			modelProvider,
 			authProfileStore: params.params.authProfileStore,
@@ -696,7 +767,7 @@ async function prepareCodexThreadRequestContext(params, options) {
 			config: params.params.config
 		}),
 		assertInferenceConfig: (config, modelProvider) => assertCodexInferenceRouteConfig(params.client, params.inferenceRoute, config, modelProvider, params.inferenceProviderRoutes),
-		buildResumeParams: (binding, authProfileId, config) => buildThreadResumeParams(params.params, {
+		buildResumeParams: async (binding, authProfileId, config) => await buildThreadResumeParams(params.params, {
 			...params,
 			threadId: binding.threadId,
 			authProfileId,
@@ -718,7 +789,10 @@ async function publishCodexThreadInferenceBinding(params, binding, reusedConfigu
 		if (reusedConfiguration) {
 			if (getCodexInferenceThread(params.client, binding.threadId) !== params.inferenceRoute) throw new Error("Codex inference thread configuration changed before reuse");
 		} else bindCodexInferenceThread(params.client, binding.threadId, params.inferenceRoute, params.inferenceProviderRoutes);
-		return binding;
+		return {
+			...binding,
+			preparedServiceTier: params.appServer.serviceTier
+		};
 	};
 	return params.authority ? await params.authority.withCurrent(publish) : publish();
 }
@@ -912,7 +986,7 @@ async function resumeExistingCodexThread(params, context) {
 		const finalConfigPatch = context.prebuiltFinalConfigPatch ?? await prepareCodexThreadFinalConfigPatch(params, context.nativeModelInputTools, resumeBinding);
 		const pluginThreadConfig = context.prebuiltPluginThreadConfig ?? (params.pluginThreadConfig?.enabled ? await lifecycleTiming.measure("plugin-config-build", () => params.pluginThreadConfig?.build()) : void 0);
 		const resumeConfig = buildCodexThreadRequestConfig(params, context, pluginThreadConfig?.configPatch, finalConfigPatch.configPatch);
-		const resumeParams = lifecycleTiming.measureSync("thread-resume-params", () => context.buildResumeParams(resumeBinding, authProfileId, resumeConfig));
+		const resumeParams = await lifecycleTiming.measure("thread-resume-params", () => context.buildResumeParams(resumeBinding, authProfileId, resumeConfig));
 		const requestModelProvider = typeof resumeParams.modelProvider === "string" && resumeParams.modelProvider.trim() ? resumeParams.modelProvider : void 0;
 		throwIfAborted();
 		resumeReservation = params.reserveResumeThread?.(resumeBinding.threadId);
@@ -928,6 +1002,7 @@ async function resumeExistingCodexThread(params, context) {
 			}
 		}));
 		acceptedConfiguration = configuration;
+		recordCodexThreadForkSettings(params.client, resumeBinding.threadId, resumeParams);
 		assertCodexThreadAcceptsDirectInput(response.thread);
 		configuration.assertConfigured();
 		if (requestModelProvider && response.modelProvider !== requestModelProvider) throw new Error("Codex resumed a different model provider than the one selected for this turn");
@@ -969,7 +1044,7 @@ async function resumeExistingCodexThread(params, context) {
 			authProfileId,
 			model: resumeParams.model ?? response.model ?? params.params.modelId,
 			preserveNativeModel: resumeBinding.preserveNativeModel === true ? true : void 0,
-			modelProvider: normalizeBindingModelProvider(authProfileId, response.modelProvider ?? requestModelProvider ?? startModelProvider),
+			modelProvider: await normalizeBindingModelProvider(authProfileId, response.modelProvider ?? requestModelProvider ?? startModelProvider),
 			...buildCodexThreadBindingPolicy(params, context),
 			webSearchThreadConfigFingerprint,
 			mcpServersFingerprint: params.mcpServersFingerprintEvaluated === true ? params.mcpServersFingerprint : resumeBinding.mcpServersFingerprint,
@@ -1039,7 +1114,7 @@ async function startFreshCodexThread(params, context) {
 	const pluginThreadConfig = params.pluginThreadConfig?.enabled ? prebuiltPluginThreadConfig ?? await lifecycleTiming.measure("plugin-config-build", () => params.pluginThreadConfig?.build()) : void 0;
 	const finalConfigPatch = await prepareCodexThreadFinalConfigPatch(params, context.nativeModelInputTools);
 	const config = lifecycleTiming.measureSync("merge-thread-config", () => buildCodexThreadRequestConfig(params, context, pluginThreadConfig?.configPatch, finalConfigPatch.configPatch));
-	const startParams = lifecycleTiming.measureSync("thread-start-params", () => buildThreadStartParams(params.params, {
+	const startParams = await lifecycleTiming.measure("thread-start-params", async () => await buildThreadStartParams(params.params, {
 		...params,
 		config,
 		model: startModelSelection.model,
@@ -1071,6 +1146,7 @@ async function startFreshCodexThread(params, context) {
 		}
 	});
 	const response = assertCodexThreadStartResponse(threadStartResponse);
+	recordCodexThreadForkSettings(params.client, response.thread.id, startParams);
 	const provisionalAppIds = pluginThreadConfig?.provisionalAppIds;
 	const rejectUncommittedThread = async (cause) => {
 		if (!await discardUnattestedCodexPluginThread({
@@ -1100,7 +1176,7 @@ async function startFreshCodexThread(params, context) {
 		return await rejectUncommittedThread(error);
 	}
 	const rolloutPath = resolveCodexThreadRolloutPath(response.thread);
-	const modelProvider = resolveCodexAppServerModelProvider({
+	const modelProvider = await resolveCodexAppServerModelProvider({
 		homeScope: params.appServer.start.homeScope,
 		provider: params.params.provider,
 		authProfileId: params.params.authProfileId,
@@ -1108,7 +1184,7 @@ async function startFreshCodexThread(params, context) {
 		agentDir: params.params.agentDir,
 		config: params.params.config
 	});
-	const bindingModelProvider = normalizeBindingModelProvider(params.params.authProfileId, response.modelProvider ?? requestModelProvider ?? startModelProvider ?? modelProvider);
+	const bindingModelProvider = await normalizeBindingModelProvider(params.params.authProfileId, response.modelProvider ?? requestModelProvider ?? startModelProvider ?? modelProvider);
 	const nextMcpServersFingerprint = params.mcpServersFingerprintEvaluated === true ? params.mcpServersFingerprint : void 0;
 	const startedBinding = {
 		threadId: response.thread.id,
@@ -1164,7 +1240,10 @@ async function startFreshCodexThread(params, context) {
 	return {
 		...startedBinding,
 		modelProvider: response.modelProvider ?? requestModelProvider ?? startModelProvider ?? modelProvider,
-		liveThreadEphemeralPolicy: startParams.ephemeral ? createCodexEphemeralThreadPolicy(params) : void 0,
+		liveThreadEphemeralPolicy: startParams.ephemeral ? createCodexEphemeralThreadPolicy({
+			...params,
+			config: startParams.config
+		}, context.effectiveConfig.config) : void 0,
 		...!preserveExistingBinding ? { liveThreadConfigFingerprint: fingerprintCodexThreadConfig(startParams, params.params.authProfileId, dynamicToolsFingerprint, {
 			model: response.model,
 			modelProvider: bindingModelProvider ?? null
@@ -1216,7 +1295,10 @@ async function releaseCodexRetainedLiveThread(options) {
 /** Release follows the physical owner across connection rotation, never a copied thread id. */
 async function releaseCodexBoundLiveThread(options) {
 	const changedClient = options.ownerClientId && options.ownerClientId !== options.clientId;
-	const previous = changedClient ? await retainSharedCodexAppServerClientByInstanceId(options.ownerClientId) : void 0;
+	const previous = changedClient ? await retainSharedCodexAppServerClientByInstanceId(options.ownerClientId, {
+		signal: options.signal,
+		createAbortError: codexThreadLifecycleAbortError
+	}) : void 0;
 	if (changedClient && !previous) return false;
 	const client = previous?.client ?? options.client;
 	try {
@@ -1240,8 +1322,15 @@ async function releaseCodexBoundLiveThread(options) {
 async function tryReuseCodexLiveThread(options) {
 	const { params, binding, bindingIdentity, clientId, dynamicToolsFingerprint, environmentSelectionFingerprint, lifecycleTiming, ringZeroActive, restrictedToolSurface, startModelSelection, throwIfAborted } = options;
 	const incognito = isIncognitoSessionKey(params.params.sessionKey);
+	const creationPolicy = incognito ? readCodexLiveThreadEphemeralPolicy(params.client, binding.threadId) : void 0;
+	if (creationPolicy && options.admittedNativeThread?.status?.type !== "notLoaded") {
+		const effectivePolicy = createCodexEphemeralThreadPolicy(params, options.effectiveConfig.config);
+		if (creationPolicy.autoCompactTokenLimit !== effectivePolicy.autoCompactTokenLimit || creationPolicy.autoCompactTokenLimitScope !== effectivePolicy.autoCompactTokenLimitScope) throw new CodexIncognitoPolicyChangeError("compaction settings");
+	}
 	if (incognito && (binding.preserveNativeModel || binding.connectionScope === "supervision")) {
+		if (options.admittedNativeThread?.status?.type === "notLoaded") return { kind: "rotate" };
 		if (binding.clientId === clientId && binding.clientId && ((await options.buildLoadedPluginThreadConfig(binding))?.fingerprint ?? binding.pluginAppsFingerprint) === binding.pluginAppsFingerprint) {
+			if (!creationPolicy && params.appServer.serviceTier === "ultrafast") throw new CodexIncognitoPolicyChangeError("compaction settings");
 			await params.buildFinalConfigPatch?.({
 				action: "resume",
 				binding,
@@ -1280,16 +1369,15 @@ async function tryReuseCodexLiveThread(options) {
 		let failure;
 		try {
 			let pendingRetention;
-			if (retainSubscription) {
+			if (retainSubscription) try {
+				const currentBinding = await params.bindingStore.readAsync(bindingIdentity);
 				const retain = () => {
 					assertWarmOwner();
-					if (isSameCodexAppServerThreadOwner(params.bindingStore.read(bindingIdentity), binding)) pendingRetention = retainCodexAppServerBindingSubscription(params.client, binding.threadId, ownership);
+					if (isSameCodexAppServerThreadOwner(currentBinding, binding)) pendingRetention = retainCodexAppServerBindingSubscription(params.client, binding.threadId, ownership);
 				};
-				try {
-					if (params.authority) await params.authority.withCurrent(retain);
-					else retain();
-				} catch {}
-			}
+				if (params.authority) await params.authority.withCurrent(retain);
+				else retain();
+			} catch {}
 			if (pendingRetention) {
 				if (!await pendingRetention) failure = { cause: /* @__PURE__ */ new Error("Codex live thread ownership could not be returned to its session") };
 			} else await retainedThread.release(binding.threadId);
@@ -1307,10 +1395,12 @@ async function tryReuseCodexLiveThread(options) {
 		assertWarmOwner();
 		if (binding.preserveNativeModel || binding.connectionScope === "supervision") {
 			try {
-				nativeThread = await assertAdoptedCodexThreadResumeAllowed(params, binding.threadId, options, assertWarmOwner);
+				nativeThread = options.admittedNativeThread ?? await assertAdoptedCodexThreadResumeAllowed(params, binding.threadId, options, assertWarmOwner);
 			} catch (error) {
 				assertWarmOwner();
-				preserveSubscription = isSameCodexAppServerThreadOwner(params.bindingStore.read(bindingIdentity), binding);
+				const currentBinding = await params.bindingStore.readAsync(bindingIdentity);
+				assertWarmOwner();
+				preserveSubscription = isSameCodexAppServerThreadOwner(currentBinding, binding);
 				throw error;
 			}
 			assertWarmOwner();
@@ -1329,7 +1419,7 @@ async function tryReuseCodexLiveThread(options) {
 		const pluginAppsConfigPatch = pluginThreadConfig?.configPatch ?? (params.pluginThreadConfig?.enabled && binding.pluginAppPolicyContext ? buildCodexPluginAppsConfigPatchFromPolicyContext(binding.pluginAppPolicyContext) : void 0);
 		const resumeAuthProfileId = binding.connectionScope === "supervision" ? void 0 : params.params.authProfileId ?? binding.authProfileId;
 		const resumeConfig = buildCodexThreadRequestConfig(params, options, pluginAppsConfigPatch, prebuiltFinalConfigPatch.configPatch);
-		const resumeParams = lifecycleTiming.measureSync("warm-thread-resume-params", () => options.buildResumeParams(binding, resumeAuthProfileId, resumeConfig));
+		const resumeParams = await lifecycleTiming.measure("warm-thread-resume-params", () => options.buildResumeParams(binding, resumeAuthProfileId, resumeConfig));
 		options.assertInferenceConfig(resumeParams.config, resumeParams.modelProvider ?? (binding.preserveNativeModel ? nativeThread?.modelProvider?.trim() || binding.modelProvider : void 0));
 		const liveThreadConfigFingerprint = incognito ? retainedThread.configFingerprint : fingerprintCodexThreadConfig(resumeParams, resumeAuthProfileId, dynamicToolsFingerprint, binding);
 		const ephemeralPolicy = retainedThread.ephemeralPolicy;
@@ -1428,14 +1518,14 @@ async function tryReuseCodexLiveThread(options) {
 //#endregion
 //#region extensions/codex/src/app-server/thread-lifecycle-adoption.ts
 /** All bound preparation follows attach's native-queue-before-binding-lease order. */
-async function withCodexThreadLifecycleBinding(params, run) {
+async function withCodexThreadLifecycleBinding(params, run, onFailure) {
 	const identity = sessionBindingIdentity({
 		sessionId: params.params.sessionId,
 		sessionKey: params.params.sessionKey,
 		agentId: params.agentId ?? params.params.agentId,
 		config: params.params.config
 	});
-	const { binding: snapshot, authority } = await resolveCodexSessionBinding({
+	const { binding: snapshot, authority, release } = await resolveCodexSessionBinding({
 		reclaimStale: true,
 		authority: params.authority,
 		bindingStore: params.bindingStore,
@@ -1449,9 +1539,10 @@ async function withCodexThreadLifecycleBinding(params, run) {
 		signal: params.signal,
 		assertBinding: params.params.expectedSessionRuntimeOwnership ? (binding) => assertCodexSessionRuntimeOwnership(binding, params.params.expectedSessionRuntimeOwnership) : void 0
 	});
+	using _ = { [Symbol.dispose]: release };
 	const assertCurrent = authority.assertCurrent;
 	const runWithLease = () => params.bindingStore.withLease(identity, async () => {
-		const binding = params.bindingStore.read(identity);
+		const binding = await params.bindingStore.readAsync(identity);
 		assertCodexSessionRuntimeOwnership(binding, params.params.expectedSessionRuntimeOwnership);
 		if (binding?.threadId !== snapshot?.threadId || binding?.clientId !== snapshot?.clientId) throw new CodexThreadBindingConflictError(binding?.threadId ?? snapshot?.threadId ?? params.params.sessionId, "acquiring thread lifecycle ownership");
 		assertCurrent();
@@ -1460,12 +1551,17 @@ async function withCodexThreadLifecycleBinding(params, run) {
 		assertCurrent,
 		authority
 	});
-	return snapshot?.pendingResumeConfiguration ? await withExclusiveCodexAppServerThread({
-		bindingStore: params.bindingStore,
-		identity,
-		threadId: snapshot.threadId,
-		run: runWithLease
-	}) : snapshot ? await withCodexAppServerThreadMutation(snapshot.threadId, runWithLease) : await runWithLease();
+	try {
+		return snapshot?.pendingResumeConfiguration ? await withExclusiveCodexAppServerThread({
+			bindingStore: params.bindingStore,
+			identity,
+			threadId: snapshot.threadId,
+			run: runWithLease
+		}) : snapshot ? await withCodexAppServerThreadMutation(snapshot.threadId, runWithLease) : await runWithLease();
+	} catch (error) {
+		if (onFailure) return await onFailure(error);
+		throw error;
+	}
 }
 /** Completes manual attachment only under the native queue and exact binding lease. */
 async function resumePendingCodexThread(params, context) {
@@ -1622,7 +1718,7 @@ async function materializePendingSupervisionBranch(params) {
 			return await request();
 		} catch (error) {
 			if (error instanceof CodexAppServerRpcError) throw kind === "probe" ? error : new CodexThreadStartRequestError(error);
-			throw new CodexAppServerUnsafeSubscriptionError(kind === "probe" ? "Codex model test fork may have materialized without a response" : "Canonical Codex branch may have started without a response", { cause: error });
+			throw new CodexAppServerUnsafeSubscriptionError(kind === "probe" ? "Codex model test fork may have materialized without a response" : "Supervised Codex branch may have started without a response", { cause: error });
 		}
 	});
 	const attestRestrictedToolSurface = (threadId, config) => params.lifecycleTiming.measure("restricted-tool-surface-mcp-attestation", () => attestCodexRestrictedToolSurfaceMcpServersDisabled(params.client, threadId, config ?? void 0, params.signal));
@@ -1659,7 +1755,7 @@ async function materializePendingSupervisionBranch(params) {
 			});
 		} catch (error) {
 			try {
-				const current = params.bindingStore.read(params.bindingIdentity);
+				const current = await params.bindingStore.readAsync(params.bindingIdentity);
 				if (matchesPendingSupervisionState(current, pending)) cleanupExpected = pending;
 				else if (matchesPendingSupervisionState(current, expected)) cleanupExpected = expected;
 				else throw new CodexThreadBindingConflictError(pending.sourceThreadId, "verifying supervised Codex cleanup tracking");
@@ -1699,7 +1795,7 @@ async function materializePendingSupervisionBranch(params) {
 			...params.attempt,
 			modelId: nativeModel
 		};
-		const startParams = buildThreadStartParams(nativeAttempt, {
+		const startParams = await buildThreadStartParams(nativeAttempt, {
 			...params,
 			model: nativeModel,
 			modelProvider: nativeModelProvider
@@ -1714,7 +1810,7 @@ async function materializePendingSupervisionBranch(params) {
 			threadId: readSupervisionResponseThreadId(rawStartResponse),
 			sourceThreadId: pending.sourceThreadId,
 			otherThreadId: probeThreadId,
-			role: "canonical branch"
+			role: "supervised branch"
 		});
 		await trackPendingSupervisionArtifacts([finalThreadId]);
 		params.throwIfAborted();
@@ -1752,7 +1848,7 @@ async function materializePendingSupervisionBranch(params) {
 			params.throwIfAborted();
 		}
 		const historyCoveredThrough = (/* @__PURE__ */ new Date()).toISOString();
-		const bindingModelProvider = params.normalizeBindingModelProvider(params.attempt.authProfileId, nativeModelProvider);
+		const bindingModelProvider = await params.normalizeBindingModelProvider(params.attempt.authProfileId, nativeModelProvider);
 		let committed = false;
 		try {
 			committed = await params.bindingStore.mutate(params.bindingIdentity, {
@@ -1769,16 +1865,16 @@ async function materializePendingSupervisionBranch(params) {
 		} catch (error) {
 			let current;
 			try {
-				current = params.bindingStore.read(params.bindingIdentity);
+				current = await params.bindingStore.readAsync(params.bindingIdentity);
 			} catch (readError) {
 				provisionalCleanupSafe = false;
-				throw new CodexAppServerUnsafeSubscriptionError(`Canonical Codex branch binding could not be verified: ${finalThreadId}`, { cause: new AggregateError([error, readError]) });
+				throw new CodexAppServerUnsafeSubscriptionError(`Supervised Codex branch binding could not be verified: ${finalThreadId}`, { cause: new AggregateError([error, readError]) });
 			}
 			if (current?.threadId === finalThreadId && current.connectionScope === "supervision" && current.supervisionSourceThreadId === pending.sourceThreadId && current.appServerRuntimeFingerprint === connectionFingerprint && current.pendingSupervisionBranch === void 0 && current.model === nativeModel && current.modelProvider === bindingModelProvider && current.historyCoveredThrough === historyCoveredThrough) committed = true;
 			else {
 				if (!matchesPendingSupervisionState(current, pending)) {
 					provisionalCleanupSafe = false;
-					throw new CodexAppServerUnsafeSubscriptionError(`Canonical Codex branch binding changed while commit was uncertain: ${finalThreadId}`, { cause: error });
+					throw new CodexAppServerUnsafeSubscriptionError(`Supervised Codex branch binding changed while commit was uncertain: ${finalThreadId}`, { cause: error });
 				}
 				throw error;
 			}
@@ -1890,7 +1986,7 @@ async function startOrResumeThread(input) {
 	const incognito = isIncognitoSessionKey(input.params.sessionKey);
 	const clientId = resolveCodexAppServerClientInstanceId(input.client);
 	let cleanupWarmBinding;
-	const prep = withCodexThreadLifecycleBinding(input, async (bindingIdentity, saved, authority) => {
+	const prepare = async (bindingIdentity, saved, authority) => {
 		const assert = authority.assertCurrent;
 		const params = {
 			...input,
@@ -1912,7 +2008,7 @@ async function startOrResumeThread(input) {
 					assert();
 				}
 			});
-			if (!isDeepStrictEqual(params.dynamicTools, nativeCatalog)) throw new Error("Canonical Codex declarations changed after tool preparation; retry the turn on its preserved native thread.");
+			if (!isDeepStrictEqual(params.dynamicTools, nativeCatalog)) throw new Error("Saved Codex declarations changed after tool preparation; retry the turn on its preserved native thread.");
 		}
 		const preflight = await prepareCodexThreadLifecyclePreflight(params);
 		const callerConfig = params.config;
@@ -1921,6 +2017,7 @@ async function startOrResumeThread(input) {
 		const initialBoundThreadId = binding?.threadId;
 		const initialBoundClientId = binding?.clientId;
 		const throwIfAborted = () => throwIfCodexThreadLifecycleAborted(params.signal);
+		let serviceTierAdmission;
 		const prepareRequestContext = async () => {
 			const context = await prepareCodexThreadRequestContext(params, {
 				binding,
@@ -1929,9 +2026,11 @@ async function startOrResumeThread(input) {
 				clientId,
 				config: callerConfig,
 				preflight,
+				serviceTierAdmission,
 				assertCurrent: assert,
 				throwIfAborted
 			});
+			serviceTierAdmission = context.serviceTierAdmission;
 			params.refreshableInstructions = params.inferenceRoute ? void 0 : input.refreshableInstructions;
 			return context;
 		};
@@ -2191,17 +2290,15 @@ async function startOrResumeThread(input) {
 		});
 		if (replacementPredecessor && !preserveExistingBinding && configuredMcpOwnershipChanged) await releaseRetainedThread(replacementPredecessor.threadId, replacementPredecessor.clientId);
 		return publishCodexThreadInferenceBinding(params, started);
-	});
-	try {
-		return await prep;
-	} catch (error) {
+	};
+	return withCodexThreadLifecycleBinding(input, prepare, async (error) => {
 		if (cleanupWarmBinding) try {
 			await cleanupWarmBinding();
 		} catch (releaseError) {
 			throw new AggregateError([error, releaseError], "Codex warm thread preparation and subscription cleanup failed", { cause: releaseError });
 		}
 		throw error;
-	}
+	});
 }
 //#endregion
 export { prepareCodexPluginThreadConfigStartupProvider as a, buildLegacyScheduledCodexAppRecoveryPrompt as c, resolveScheduledCodexAppCreatorCaptureDecision as d, isContextEngineBindingCompatible as i, buildScheduledCodexAppServerConnectionIdentity as l, isCodexAppServerProfilerEnabled as n, resolveCodexPluginThreadConfigStartupPolicy as o, buildContextEngineBinding as r, assertScheduledCodexAppAuthorityRuntime as s, startOrResumeThread as t, captureScheduledCodexAppAuthority as u };

package/dist/.setup/{thread-model-selection-DcVebr8N.mjs → thread-model-selection-DxposL4X.mjs}

@@ -1,5 +1,5 @@
-import { t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import { i as isCodexResponsesOAuthCredential, t as CODEX_RESPONSES_OAUTH_PROVIDER } from "./responses-oauth-twnuTaAa.mjs";
+import { t as isCodexAppServerNativeAuthProfile } from "./auth-profile-auwzSwwy.mjs";
+import { i as isCodexResponsesOAuthCredential, t as CODEX_RESPONSES_OAUTH_PROVIDER } from "./responses-oauth-CCV7aVYF.mjs";
 //#region extensions/codex/src/app-server/thread-model-selection.ts
 const CODEX_NATIVE_PERSONALITY_NONE = "none";
 function resolveCodexBindingModelProviderFallback(params) {
@@ -11,9 +11,9 @@ function resolveCodexBindingModelProviderFallback(params) {
 	const slashIndex = currentModel?.indexOf("/") ?? -1;
 	return slashIndex > 0 && slashIndex < (currentModel?.length ?? 0) - 1 ? void 0 : params.bindingModelProvider;
 }
-function resolveCodexAppServerThreadModelSelection(params) {
+async function resolveCodexAppServerThreadModelSelection(params) {
 	const authProfileId = params.inheritBindingAuthProfile === false ? params.authProfileId : params.authProfileId ?? params.binding?.authProfileId;
-	const explicitModelProvider = resolveCodexAppServerModelProvider({
+	const explicitModelProvider = await resolveCodexAppServerModelProvider({
 		...params,
 		authProfileId
 	});
@@ -23,14 +23,14 @@ function resolveCodexAppServerThreadModelSelection(params) {
 		bindingModel: params.binding.model,
 		bindingModelProvider: params.binding.modelProvider
 	}) : void 0;
-	return resolveCodexAppServerRequestModelSelection({
+	return await resolveCodexAppServerRequestModelSelection({
 		...params,
 		model: params.requestModel ?? params.model,
 		modelProvider: explicitModelProvider ?? bindingModelProvider,
 		authProfileId
 	});
 }
-function resolveCodexAppServerRequestModelSelection(params) {
+async function resolveCodexAppServerRequestModelSelection(params) {
 	const model = params.model.trim();
 	const modelProvider = params.modelProvider?.trim();
 	if (modelProvider) return {
@@ -40,7 +40,7 @@ function resolveCodexAppServerRequestModelSelection(params) {
 	const slashIndex = model.indexOf("/");
 	if (slashIndex <= 0 || slashIndex >= model.length - 1) return { model };
 	const inferredProvider = model.slice(0, slashIndex);
-	const inferredModelProvider = resolveCodexAppServerModelProvider({
+	const inferredModelProvider = await resolveCodexAppServerModelProvider({
 		...params,
 		provider: inferredProvider
 	});
@@ -49,12 +49,12 @@ function resolveCodexAppServerRequestModelSelection(params) {
 		...inferredModelProvider ? { modelProvider: inferredModelProvider } : {}
 	};
 }
-function resolveCodexAppServerModelProvider(params) {
+async function resolveCodexAppServerModelProvider(params) {
 	const normalized = params.provider.trim();
 	const normalizedLower = normalized.toLowerCase();
 	if (normalizedLower === "openai" && params.authProfileId && isCodexResponsesOAuthCredential(params.authProfileStore?.profiles[params.authProfileId])) return CODEX_RESPONSES_OAUTH_PROVIDER;
 	if (!normalized || normalizedLower === "codex") return;
-	if (normalizedLower === "openai" && (params.homeScope === "user" || isCodexAppServerNativeAuthProfile(params))) return;
+	if (normalizedLower === "openai" && (params.homeScope === "user" || await isCodexAppServerNativeAuthProfile(params))) return;
 	return normalizedLower === "openai" ? "openai" : normalized;
 }
 //#endregion