@openclaw/codex 2026.10.5-beta.4 → 2026.10.10-beta.2

package/dist/.setup/{thread-ownership-BoUd0i6L.mjs → thread-ownership-Bmk5a2Gu.mjs}

@@ -1,8 +1,8 @@
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-f8ODJ_OX.mjs";
+import { T as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-BW1YeaIk.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-CeyYScUC.mjs";
-import { K as releaseCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, q as retainCodexAppServerLiveThread } from "./shared-client-BCx1wbyA.mjs";
-import { f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-zNuNTKVr.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { B as retainCodexAppServerLiveThread, N as isCodexAppServerLiveThreadClaimed, z as releaseCodexAppServerLiveThread } from "./shared-client-CkyTrNB8.mjs";
+import { f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { runWithAsyncWorkResources } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
 //#region extensions/codex/src/app-server/thread-ownership.ts
@@ -86,7 +86,7 @@ async function releaseCodexAppServerBindingSubscription(binding, options = {}) {
 		if (await releaseCodexAppServerLiveThread(clientLease.client, binding.threadId, options.assertCurrent, options.withCurrent)) return;
 		options.assertCurrent?.();
 		if (isCodexAppServerLiveThreadClaimed(clientLease.client, binding.threadId)) throw new Error(`Codex thread ${binding.threadId} has an active run; stop it before changing its owner.`);
-		if (!options.allowUntracked) return;
+		if (!options.allowUntracked && binding.conversationIncognito !== true) return;
 		if (!await unsubscribeCodexThreadBestEffort(clientLease.client, {
 			threadId: binding.threadId,
 			timeoutMs: 5e3,
@@ -103,10 +103,10 @@ async function releaseCodexAppServerBindingSubscription(binding, options = {}) {
 /** Clears and releases one exact conversation generation without touching its replacement. */
 async function retireCodexConversationThreadBinding(params) {
 	const assertCurrent = params.assertCurrent;
-	const expected = params.bindingStore.read(params.identity);
+	const expected = await params.bindingStore.readAsync(params.identity);
 	if (!expected || params.expectedThreadId && expected.threadId !== params.expectedThreadId) return false;
 	return await withCodexAppServerThreadMutation(expected.threadId, () => params.bindingStore.withLease(params.identity, async () => {
-		const current = params.bindingStore.read(params.identity);
+		const current = await params.bindingStore.readAsync(params.identity);
 		if (!current || !isSameCodexAppServerThreadOwner(current, expected) || params.expectedStartId && current?.conversationStartId !== params.expectedStartId) return false;
 		assertCurrent?.();
 		await releaseCodexAppServerBindingSubscription(current, {

package/dist/.setup/{thread-policy-B3wBRNph.mjs → thread-policy-DYtvZ5Ay.mjs}

@@ -1,13 +1,13 @@
-import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError } from "./rpc-error-C98SHchT.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-Bo0kKABI.mjs";
-import { S as CodexAdoptedThreadActiveError } from "./shared-client-BCx1wbyA.mjs";
-import { p as assertCodexThreadAcceptsDirectInput, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-D93nbdB8.mjs";
+import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError } from "./rpc-error-DemqqaxE.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
+import { g as CodexAdoptedThreadActiveError } from "./shared-client-CkyTrNB8.mjs";
+import { f as assertCodexThreadAcceptsDirectInput, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
 import { AgentHarnessPreflightError, embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/thread-policy.ts
 /** A refusal, not a failed native write: the ephemeral conversation must stay alive. */
 var CodexIncognitoPolicyChangeError = class extends AgentHarnessPreflightError {
-	constructor() {
-		super("Codex cannot change generic instructions in a live incognito conversation. No turn was sent and the conversation is preserved. Restore the previous instructions to continue it, or start a new incognito conversation for the changed policy.");
+	constructor(policy = "generic instructions") {
+		super(`Codex cannot change ${policy} in a live incognito conversation. No turn was sent and the conversation is preserved. Restore the previous settings to continue it, or start a new incognito conversation for the changed policy.`);
 		this.name = "CodexIncognitoPolicyChangeError";
 	}
 };

package/dist/.setup/{thread-requests-BgzJwJtS.mjs → thread-requests-BjawdIVV.mjs}

@@ -1,13 +1,12 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { t as appendCodexGitConfigParameters } from "./config-utils-DN_YT7dE.mjs";
-import { d as readCodexEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DDzeNQ8m.mjs";
-import { a as isCodexResponsesOAuthRun } from "./responses-oauth-twnuTaAa.mjs";
-import { d as mergeCodexThreadConfigs, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-BVcvnps8.mjs";
-import { o as hashCodexAppServerBindingFingerprint } from "./session-binding-JEHNMPsr.mjs";
-import { n as resolveCodexAppServerModelProvider, r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DcVebr8N.mjs";
+import { d as readCodexEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-DMFZkd3X.mjs";
+import { a as isCodexResponsesOAuthRun } from "./responses-oauth-CCV7aVYF.mjs";
+import { d as mergeCodexThreadConfigs, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-B0UI3f1D.mjs";
+import { o as hashCodexAppServerBindingFingerprint } from "./session-binding-BgsWcbdY.mjs";
+import { n as resolveCodexAppServerModelProvider, r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DxposL4X.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
-import * as crypto$1 from "node:crypto";
-import crypto from "node:crypto";
+import crypto, * as crypto$1 from "node:crypto";
 import path from "node:path";
 import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
@@ -30,6 +29,7 @@ const CODEX_NATIVE_TOOLS = /* @__PURE__ */ new Map([
 	["process", "shell"],
 	["update_plan", "always"],
 	["tool_call", "always"],
+	["dispatch_action", "always"],
 	["tool_describe", "always"],
 	["tool_search", "always"],
 	["get_goal", "goal"],
@@ -520,13 +520,13 @@ function buildCodexThreadConfiguration(params, options) {
 		}), options.refreshableInstructions)
 	};
 }
-function buildThreadStartParams(params, options) {
-	const resolvedModelProvider = resolveCodexAppServerModelProvider({
+async function buildThreadStartParams(params, options) {
+	const resolvedModelProvider = await resolveCodexAppServerModelProvider({
 		...params,
 		homeScope: options.appServer.start.homeScope
 	});
 	return {
-		...resolveCodexAppServerRequestModelSelection({
+		...await resolveCodexAppServerRequestModelSelection({
 			...params,
 			homeScope: options.appServer.start.homeScope,
 			model: options.model ?? params.modelId,
@@ -543,12 +543,12 @@ function buildThreadStartParams(params, options) {
 		...isIncognitoSessionKey(params.sessionKey) ? { ephemeral: true } : {}
 	};
 }
-function buildThreadResumeParams(params, options) {
-	const modelSelection = options.preserveNativeModel ? void 0 : resolveCodexAppServerRequestModelSelection({
+async function buildThreadResumeParams(params, options) {
+	const modelSelection = options.preserveNativeModel ? void 0 : await resolveCodexAppServerRequestModelSelection({
 		...params,
 		homeScope: options.appServer.start.homeScope,
 		model: options.model ?? params.modelId,
-		modelProvider: options.modelProvider ?? resolveCodexAppServerModelProvider({
+		modelProvider: options.modelProvider ?? await resolveCodexAppServerModelProvider({
 			...params,
 			homeScope: options.appServer.start.homeScope,
 			authProfileId: options.authProfileId ?? params.authProfileId

package/dist/.setup/{thread-resume-D-3bsr1j.mjs → thread-resume-vBShG3-o.mjs}

@@ -1,8 +1,8 @@
-import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-C98SHchT.mjs";
-import { r as publishCodexCatalogResume } from "./session-catalog-events-kR2Ot6nX.mjs";
-import { L as forgetCodexWorkspaceReferences, pt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-BCx1wbyA.mjs";
-import { h as assertCodexThreadResumeResponse, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-D93nbdB8.mjs";
-import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-zNuNTKVr.mjs";
+import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError, r as CodexAppServerRpcError } from "./rpc-error-DemqqaxE.mjs";
+import { r as publishCodexCatalogResume } from "./session-catalog-events-CEi6SuLQ.mjs";
+import { k as forgetCodexWorkspaceReferences, lt as isCodexAppServerStartupError } from "./shared-client-CkyTrNB8.mjs";
+import { m as assertCodexThreadResumeResponse, o as isCodexAppServerPrewriteRequestCancellationError } from "./client--P8jwXvA.mjs";
+import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/thread-resume.ts
 /** Owns Codex thread/resume subscription safety. */
@@ -20,7 +20,7 @@ async function resumeCodexAppServerThread(params) {
 		assertCodexThreadResumeSubscription(threadId, response.thread.id);
 		forgetCodexWorkspaceReferences(params.client, threadId);
 	} catch (error) {
-		if (isCodexAppServerStartSelectionChangedError(error) || isCodexAppServerStartupError(error) || error instanceof CodexAppServerScopedRequestRejectedError || isCodexAppServerPrewriteRequestCancellationError(error) || isCodexAppServerOverloadError(error)) throw error;
+		if (isCodexAppServerStartupError(error) || error instanceof CodexAppServerScopedRequestRejectedError || isCodexAppServerPrewriteRequestCancellationError(error) || isCodexAppServerOverloadError(error)) throw error;
 		if (error instanceof CodexAppServerRpcError) {
 			if (await unsubscribeCodexThreadBestEffort(params.client, {
 				threadId,

package/dist/.setup/{transcript-history-projection-DfKcoZCB.mjs → transcript-history-projection-i-FVpyha.mjs}

@@ -1,5 +1,5 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { i as readCodexProviderRefusal, t as codexProviderRefusalDiagnostics } from "./event-projector-values-CLvG1Hil.mjs";
+import { i as readCodexProviderRefusal, t as codexProviderRefusalDiagnostics } from "./event-projector-values-yf4us9Pf.mjs";
 import { n as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf8Prefix } from "openclaw/plugin-sdk/text-utility-runtime";

package/dist/.setup/{transcript-mirror-Bee2o6jj.mjs → transcript-mirror-CEQJZlF3.mjs}

@@ -1,13 +1,13 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
 import { a as readUpstreamUserText, i as readMirrorIdentity, n as attachCodexMirrorIdentity, o as takeCodexAssistantItemIds, r as attachUpstreamUserText } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
-import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DfKcoZCB.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-i-FVpyha.mjs";
 import { a as buildCodexMirrorIdempotencyKey, c as isMirroredAgentMessage, i as buildCodexMirrorDedupeIdentity, l as readCodexMirrorSourceFingerprint, n as attachCodexMirrorAttestation, o as fingerprintCodexMirrorSourceMessage, r as attachCodexMirrorRunId, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-BzUXnrvv.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, restorePreparedUserTurnOperationalMetaForRuntime, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { withCodexSessionTranscriptMirrorWrite } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
-import { createNativeSessionBindingAuthority } from "openclaw/plugin-sdk/agent-harness-session-runtime";
 import { composeSessionTranscriptWriteAssertion, publishSessionTranscriptUpdateByIdentity } from "openclaw/plugin-sdk/session-transcript-runtime";
+import { createNativeSessionBindingScope } from "openclaw/plugin-sdk/agent-harness-session-runtime";
 //#region extensions/codex/src/app-server/user-prompt-message.ts
 function buildFromPrepared(params, preparedUserMessage) {
 	const senderId = normalizeOptionalString(params.senderId);
@@ -102,7 +102,8 @@ async function mirror(params) {
 	assertWritable();
 	const result = await withCodexSessionTranscriptMirrorWrite({
 		...transcriptTarget,
-		config: params.config
+		config: params.config,
+		...params.assertCurrent || params.assertWriteCurrent ? { assertCurrent: assertWritable } : {}
 	}, async (transcript) => {
 		assertWritable();
 		const nextAssistantMirrorIdentitiesOwned = /* @__PURE__ */ new Set();
@@ -191,10 +192,6 @@ async function mirror(params) {
 			assertWritable();
 			const { lifecycleRevision, messageSeq, result: appended } = await transcript.appendMessageWithMessageSequence({
 				message: messageToAppend,
-				...params.assertCurrent || params.assertWriteCurrent ? { preparation: {
-					prepareMessage: async (preparedMessage) => preparedMessage,
-					source: assertWritable
-				} } : {},
 				idempotencyLookup: "scan",
 				cwd: params.cwd
 			});
@@ -399,7 +396,7 @@ async function mirrorPromptAtTurnStartBestEffort(params) {
 				return;
 			}
 			const mirrorResult = await mirror({
-				assertCurrent: createNativeSessionBindingAuthority([], params.params.hostCapabilities.assertActive).assertLegacyCurrent,
+				assertCurrent: createNativeSessionBindingScope(params.params.hostCapabilities.assertActive).assertLegacyCurrent,
 				agentId: params.agentId,
 				sessionKey: params.sessionKey,
 				sessionId: params.params.sessionId,

package/dist/.setup/{transport-stdio-CRWTkKOn.mjs → transport-stdio-Bq160Dhv.mjs}

@@ -1,6 +1,6 @@
 import { t as appendCodexGitConfigParameters } from "./config-utils-DN_YT7dE.mjs";
 import { r as normalizeCodexAppServerArgs } from "./launch-args-DbFCehO7.mjs";
-import { i as resolveManagedCodexNativeCommand } from "./managed-binary-BtIjV7yN.mjs";
+import { f as resolveManagedCodexNativeCommand } from "./managed-binary-DbKvGXKl.mjs";
 import { i as recordCodexAppServerSpawnFailure, r as getCodexAppServerSpawnFailure } from "./spawn-error-CL3n6MAa.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { stripVTControlCharacters } from "node:util";
@@ -10,7 +10,6 @@ import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "open
 import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 import { closeSync, constants, openSync, readSync } from "node:fs";
 import path from "node:path";
-import { readFile, readdir } from "node:fs/promises";
 import { once } from "node:events";
 import { KeyedAsyncQueue } from "openclaw/plugin-sdk/keyed-async-queue";
 import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
@@ -26,26 +25,45 @@ const PROCESS_COLUMNS = "pid=,ppid=,pgid=,stat=,lstart=";
 const MAX_PROCESS_CONTAINMENT_MS$1 = 2e3;
 const PROCESS_INSPECTION_MAX_BYTES = 8388608;
 const PROCFS_COMMAND_PERMISSION_EXIT = 77;
-const PROCFS_COMMAND_READER = `
+const PROCFS_READER = `
 const fs = require("node:fs");
-const [pid, maxBytes] = process.argv.slice(-2).map(Number);
-try {
-  const fd = fs.openSync("/proc/" + pid + "/cmdline", "r");
-  const buffer = Buffer.alloc(4096);
+const [target, limit] = process.argv.slice(-2);
+const maxBytes = Number(limit);
+const buffer = Buffer.alloc(4096);
+let bytes = 0;
+function read(file) {
+  const fd = fs.openSync(file, "r");
   const chunks = [];
-  let bytes = 0;
+  let size = 0;
   try {
     for (;;) {
       const count = fs.readSync(fd, buffer, 0, Math.min(buffer.length, maxBytes - bytes + 1), null);
       if (count === 0) break;
       bytes += count;
-      if (bytes > maxBytes) throw new Error("Command byte limit exceeded");
+      if (bytes > maxBytes) throw new Error("Process inspection byte limit exceeded");
       chunks.push(Buffer.from(buffer.subarray(0, count)));
+      size += count;
     }
   } finally {
     fs.closeSync(fd);
   }
-  process.stdout.end(Buffer.concat(chunks, bytes));
+  return Buffer.concat(chunks, size);
+}
+try {
+  if (target === "snapshot") {
+    const rows = [read("/proc/sys/kernel/random/boot_id").toString()];
+    for (const pid of fs.readdirSync("/proc")) {
+      if (!/^\\d+$/.test(pid)) continue;
+      try {
+        rows.push(pid, read("/proc/" + pid + "/stat").toString());
+      } catch (error) {
+        if (!["ENOENT", "ESRCH"].includes(error?.code)) throw error;
+      }
+    }
+    process.stdout.end(rows.join("\\0"));
+  } else {
+    process.stdout.end(read("/proc/" + target + "/cmdline"));
+  }
 } catch (error) {
   process.exitCode = ["EACCES", "EPERM", "ERR_ACCESS_DENIED"].includes(error?.code)
     ? ${PROCFS_COMMAND_PERMISSION_EXIT} : 1;
@@ -64,7 +82,7 @@ var ProcessInspectionError = class extends Error {
 	}
 };
 function remainingInspectionTime(deadline) {
-	const remainingMs = deadline - Date.now();
+	const remainingMs = Math.floor(deadline - performance.now());
 	if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
 	return remainingMs;
 }
@@ -76,7 +94,7 @@ function inspectionFailure(error) {
 function isMissingProcess(error) {
 	return error !== null && typeof error === "object" && "code" in error && (error.code === "ENOENT" || error.code === "ESRCH");
 }
-async function readCodexAppServerProcessSnapshot(deadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS$1, pids) {
+async function readCodexAppServerProcessSnapshot(deadline = performance.now() + MAX_PROCESS_CONTAINMENT_MS$1, pids) {
 	const selected = pids === void 0 ? void 0 : [.../* @__PURE__ */ new Set([process.pid, ...pids])];
 	const rows = await readProcesses(selected, deadline, selected !== void 0);
 	if (selected && !rows.some((row) => row.pid === process.pid)) throw new ProcessInspectionError("unavailable");
@@ -139,12 +157,12 @@ async function readProcessOutput(command, deadline) {
 			if (output instanceof ProcessInspectionError) reject(output);
 			else resolve(output);
 		};
-		const procfs = command.kind === "procfs-command";
+		const procfs = command.kind !== "ps";
 		const inspector = execFile(procfs ? process.execPath : "ps", procfs ? [
 			...process.versions.bun ? ["--no-env-file", "--config=/dev/null"] : [],
 			"-e",
-			PROCFS_COMMAND_READER,
-			String(command.pid),
+			PROCFS_READER,
+			command.kind === "procfs-command" ? String(command.pid) : "snapshot",
 			String(PROCESS_INSPECTION_MAX_BYTES)
 		] : command.args, {
 			encoding: "utf8",
@@ -156,7 +174,7 @@ async function readProcessOutput(command, deadline) {
 				TZ: "UTC"
 			}
 		}, (error, stdout) => {
-			settle(Date.now() >= deadline ? new ProcessInspectionError("deadline") : error ? procfs && error.code === PROCFS_COMMAND_PERMISSION_EXIT ? new ProcessInspectionError("permission") : inspectionFailure(error) : stdout);
+			settle(performance.now() >= deadline ? new ProcessInspectionError("deadline") : error ? procfs && error.code === PROCFS_COMMAND_PERMISSION_EXIT ? new ProcessInspectionError("permission") : inspectionFailure(error) : stdout);
 		});
 		const timer = setTimeout(() => {
 			settle(new ProcessInspectionError("deadline"));
@@ -202,34 +220,15 @@ function parseProcesses(output, selected) {
 }
 async function readLinuxProcesses(selected, deadline) {
 	if (selected !== void 0) return readSelectedLinuxProcesses(selected, deadline);
-	const remainingMs = remainingInspectionTime(deadline);
-	const options = {
-		encoding: "utf8",
-		signal: AbortSignal.timeout(remainingMs)
-	};
-	try {
-		const bootId = parseLinuxBootId(await readFile("/proc/sys/kernel/random/boot_id", options));
-		const pids = await readdir("/proc");
-		const rows = [];
-		let bytes = 0;
-		for (const entry of pids) {
-			if (!/^\d+$/.test(entry)) continue;
-			remainingInspectionTime(deadline);
-			const stat = await readFile(`/proc/${entry}/stat`, options).catch((error) => {
-				if (isMissingProcess(error)) return;
-				throw error;
-			});
-			if (stat === void 0) continue;
-			bytes += stat.length;
-			if (bytes > PROCESS_INSPECTION_MAX_BYTES) throw new ProcessInspectionError("unavailable");
-			const row = parseLinuxProcess(stat, entry, bootId, false);
-			if (row) rows.push(row);
-		}
-		remainingInspectionTime(deadline);
-		return rows;
-	} catch (error) {
-		throw inspectionFailure(error);
+	const [boot, ...fields] = (await readProcessOutput({ kind: "procfs-snapshot" }, deadline)).split("\0");
+	const bootId = parseLinuxBootId(boot ?? "");
+	const rows = [];
+	for (let index = 0; index < fields.length; index += 2) {
+		const row = parseLinuxProcess(fields[index + 1], fields[index], bootId, false);
+		if (row) rows.push(row);
 	}
+	remainingInspectionTime(deadline);
+	return rows;
 }
 function parseLinuxBootId(value) {
 	const bootId = value.trim();
@@ -238,7 +237,7 @@ function parseLinuxBootId(value) {
 }
 function parseLinuxProcess(stat, entry, bootId, selected) {
 	const commEnd = stat.lastIndexOf(")");
-	const fields = stat.slice(commEnd + 1).trim().split(/\s+/);
+	const fields = stat.slice(commEnd + 1).trim().split(/\s+/, 20);
 	const ppid = Number(fields[1]);
 	const pgid = Number(fields[2]);
 	const startTicks = fields[19];
@@ -311,7 +310,7 @@ const MAX_PROCESS_CONTAINMENT_MS = 2e3;
 const MAX_PROCESS_QUIESCE_PASSES = 16;
 /** Discharges the registered root obligation, including an already-obsolete PID. */
 async function terminateCodexAppServerOrphan(expected) {
-	const deadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS;
+	const deadline = performance.now() + MAX_PROCESS_CONTAINMENT_MS;
 	const initial = (await readCodexAppServerProcessSnapshot(deadline, [expected.pid])).find((row) => row.pid === expected.pid);
 	if (!initial || !hasSameIdentity(initial, expected) || isDeadProcessState(initial.state)) return true;
 	const result = await terminateCodexAppServerDescendants({
@@ -325,7 +324,7 @@ async function terminateCodexAppServerOrphan(expected) {
 			const current = await readCodexAppServerProcess(expected.pid, deadline).catch(() => void 0);
 			if (current && isSameLiveRoot(current, contained.root, true)) signalProcess(current.pgid === current.pid ? -current.pid : current.pid, "SIGKILL");
 		}
-		while (Date.now() < deadline) {
+		while (performance.now() < deadline) {
 			const snapshot = await readCodexAppServerProcessSnapshot(deadline, [expected.pid]).catch(() => void 0);
 			if (!snapshot?.some((row) => row.pid === process.pid)) return false;
 			const current = snapshot.find((row) => row.pid === expected.pid);
@@ -340,15 +339,15 @@ async function terminateCodexAppServerOrphan(expected) {
 		}
 		return false;
 	} finally {
-		if (contained && !gone) await signalSameProcess(contained.root, "SIGCONT", Date.now() + MAX_PROCESS_CONTAINMENT_MS, "root");
+		if (contained && !gone) await signalSameProcess(contained.root, "SIGCONT", performance.now() + MAX_PROCESS_CONTAINMENT_MS, "root");
 	}
 }
-async function terminateCodexAppServerDescendants(child, expected, deadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS) {
+async function terminateCodexAppServerDescendants(child, expected, deadline = performance.now() + MAX_PROCESS_CONTAINMENT_MS) {
 	const rootPid = child.pid;
 	if (child.exitCode != null || child.signalCode != null) return "exited";
 	if (process.platform === "win32" || !rootPid || !child.kill) return;
 	const snapshot = await readCodexAppServerProcessSnapshot(deadline).catch(() => void 0);
-	if (!snapshot || Date.now() >= deadline) return;
+	if (!snapshot || performance.now() >= deadline) return;
 	const root = snapshot.find((row) => row.pid === rootPid);
 	if (!expected && (!root || isDeadProcessState(root.state))) return "exited";
 	if (!root || !(expected ? isSameLiveProcess(root, expected) : root.ppid === process.pid) || isDeadProcessState(root.state)) return;
@@ -361,15 +360,15 @@ async function terminateCodexAppServerDescendants(child, expected, deadline = Da
 		const descendants = await quiesceDescendants(root, initialDescendants, stoppedDescendants, deadline);
 		if (!descendants) return;
 		for (const descendant of descendants.toReversed()) {
-			if (Date.now() >= deadline) return;
+			if (performance.now() >= deadline) return;
 			if (!isDeadProcessState(descendant.state)) {
-				if (!await signalSameProcess(descendant, "SIGKILL", deadline) || Date.now() >= deadline) return;
+				if (!await signalSameProcess(descendant, "SIGKILL", deadline) || performance.now() >= deadline) return;
 			}
 		}
 		const remaining = new Map(descendants.map((row) => [row.pid, row]));
 		while (remaining.size > 0) {
 			const terminationSnapshot = await readCodexAppServerProcessSnapshot(deadline, [root.pid, ...remaining.keys()]).catch(() => void 0);
-			if (!terminationSnapshot || Date.now() >= deadline) return;
+			if (!terminationSnapshot || performance.now() >= deadline) return;
 			const currentRoot = terminationSnapshot.find((row) => row.pid === root.pid);
 			if (!currentRoot || !isSameLiveRoot(currentRoot, root, true)) return;
 			const currentByPid = new Map(terminationSnapshot.map((row) => [row.pid, row]));
@@ -394,7 +393,7 @@ async function terminateCodexAppServerDescendants(child, expected, deadline = Da
 	} finally {
 		if (resumeRootOnUnwind) {
 			if (expected) {
-				const releaseDeadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS;
+				const releaseDeadline = performance.now() + MAX_PROCESS_CONTAINMENT_MS;
 				for (const descendant of stoppedDescendants.values()) await signalSameProcess(descendant, "SIGCONT", releaseDeadline);
 				await signalSameProcess(root, "SIGCONT", releaseDeadline, "root");
 			} else {
@@ -408,13 +407,13 @@ async function quiesceDescendants(root, initialDescendants, stopped, deadline) {
 	const provenByPid = new Map(initialDescendants.map((descendant) => [descendant.pid, descendant]));
 	const stopFailures = /* @__PURE__ */ new Map();
 	for (let pass = 0; pass < MAX_PROCESS_QUIESCE_PASSES; pass += 1) {
-		if (Date.now() >= deadline) return;
+		if (performance.now() >= deadline) return;
 		const snapshot = await readCodexAppServerProcessSnapshot(deadline).catch(() => void 0);
-		if (!snapshot || Date.now() >= deadline) return;
+		if (!snapshot || performance.now() >= deadline) return;
 		const currentRoot = snapshot.find((row) => row.pid === root.pid);
 		if (!currentRoot || !isSameLiveRoot(currentRoot, root)) return;
 		if (!isSameLiveRoot(currentRoot, root, true)) {
-			if (!await signalSameProcess(root, "SIGSTOP", deadline, "root") || Date.now() >= deadline) return;
+			if (!await signalSameProcess(root, "SIGSTOP", deadline, "root") || performance.now() >= deadline) return;
 			continue;
 		}
 		const snapshotByPid = new Map(snapshot.map((process) => [process.pid, process]));
@@ -439,10 +438,10 @@ async function quiesceDescendants(root, initialDescendants, stopped, deadline) {
 		if (provenByPid.size > MAX_CONTAINED_PROCESSES) return;
 		let allStopped = true;
 		for (const descendant of provenByPid.values()) {
-			if (Date.now() >= deadline) return;
+			if (performance.now() >= deadline) return;
 			if (isStoppedState(descendant.state)) continue;
 			const stopQueued = await signalSameProcess(descendant, "SIGSTOP", deadline);
-			if (Date.now() >= deadline) return;
+			if (performance.now() >= deadline) return;
 			if (stopQueued) {
 				stopFailures.delete(identityKey(descendant));
 				stopped.set(identityKey(descendant), descendant);
@@ -566,9 +565,9 @@ async function reapRegisteredCodexAppServerOrphans() {
 }
 async function sweepRegisteredCodexAppServerOrphans(store) {
 	const entries = await store.entries();
-	const deadline = Date.now() + PROCESS_REGISTRATION_INSPECTION_MS;
+	const deadline = performance.now() + PROCESS_REGISTRATION_INSPECTION_MS;
 	for (const entry of entries) {
-		if (Date.now() >= deadline) throw new Error("Codex orphan cleanup exceeded its startup budget. Retry to finish cleanup.");
+		if (performance.now() >= deadline) throw new Error("Codex orphan cleanup exceeded its startup budget. Retry to finish cleanup.");
 		const registration = registrationSchema.parse(entry.value);
 		const snapshot = await readCodexAppServerProcessSnapshot(deadline, [registration.parent.pid, registration.child.pid]);
 		const parent = snapshot.find((row) => row.pid === registration.parent.pid);
@@ -617,7 +616,7 @@ async function prepareCodexAppServerProcessRegistration() {
 		await once(child, "spawn");
 		if (!store) return;
 		if (!child.pid) throw new ProcessInspectionError("unavailable");
-		const deadline = Date.now() + PROCESS_REGISTRATION_INSPECTION_MS;
+		const deadline = performance.now() + PROCESS_REGISTRATION_INSPECTION_MS;
 		const snapshot = await readCodexAppServerProcessSnapshot(deadline, [child.pid]);
 		const parent = snapshot.find((row) => row.pid === process.pid);
 		const spawned = snapshot.find((row) => row.pid === child.pid);
@@ -893,7 +892,7 @@ async function createStdioTransport(options, baseEnv = process.env, assertCurren
 	const previousFailure = getCodexAppServerSpawnFailure(launchKey) ?? (nativeCommand ? getCodexAppServerSpawnFailure(nativeCommand) : void 0);
 	if (previousFailure) throw previousFailure;
 	const register = await prepareCodexAppServerProcessRegistration();
-	assertCurrent?.();
+	await assertCurrent?.();
 	embeddedAgentLog.debug("Codex app-server spawn", {
 		command: invocation.command,
 		launcher: options.command,
@@ -923,11 +922,11 @@ async function createStdioTransport(options, baseEnv = process.env, assertCurren
 		if (nativeCommand && invocation.resolution === "node-entrypoint") observeManagedCodexLauncherFailure(child, nativeCommand);
 		onSpawn?.(child);
 		await register(child);
-		assertCurrent?.();
+		await assertCurrent?.();
 		return child;
 	} catch (error) {
 		await closeCodexAppServerTransportAndWait(child, { drainStdio: true });
-		assertCurrent?.();
+		await assertCurrent?.();
 		throw child.startupFailure?.error ?? recordCodexAppServerSpawnFailure(error, invocation.command, launchKey);
 	}
 }

package/dist/.setup/{transport-websocket-DIyPfkHo.mjs → transport-websocket-0YqiI_MH.mjs}

@@ -1,5 +1,5 @@
 import { r as resolveCodexAppServerUserHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
-import "./config-C1YVVLEA.mjs";
+import "./config-BfrAlTMT.mjs";
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
 import path from "node:path";
 import { EventEmitter } from "node:events";

package/dist/.setup/{turn-router-DBVMToGo.mjs → turn-router-BGj67FMK.mjs}

@@ -1,6 +1,6 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { n as waitForPromiseOrAbort, t as abortReason } from "./timeout-D0mEWSGG.mjs";
-import { x as readCodexTurnCompletedNotification } from "./client-D93nbdB8.mjs";
+import { b as readCodexTurnCompletedNotification } from "./client--P8jwXvA.mjs";
 import { normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { AsyncResource } from "node:async_hooks";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";