@openclaw/codex 2026.10.5 → 2026.10.6

package/dist/.setup/{conversation-binding-BCoWi2Kn.mjs → conversation-binding-Dcv7_rs-.mjs}

@@ -1,27 +1,27 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-C2kDBZhx.mjs";
-import { d as readCodexRequirementsToml } from "./config-security-D0hAOQRI.mjs";
+import { d as readCodexRequirementsToml } from "./config-security-DpkGNy5T.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
-import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-nvYwVDyy.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-DvDLHVJe.mjs";
+import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-CZmH25Xq.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CXK7tmkb.mjs";
 import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-GRGSgAro.mjs";
-import { o as isCodexAppServerOverloadError } from "./rpc-error-C98SHchT.mjs";
+import { o as isCodexAppServerOverloadError, r as CodexAppServerRpcError, s as isCodexThreadReadMissingError } from "./rpc-error-C98SHchT.mjs";
 import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-DfKcoZCB.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-G4IGX6bK.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-B8agjie6.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-LQemoqTL.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
-import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, K as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease } from "./shared-client-wb1JBldZ.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-BpSxNz4F.mjs";
-import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-DdlzuFdm.mjs";
-import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-TScCVTsk.mjs";
-import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-B2ZD23A_.mjs";
+import { B as isCodexAppServerClientRuntimeLive, F as consumeCodexAppServerLiveThread, H as isCodexAppServerLiveThreadClaimed, R as hasCodexAppServerLiveThread, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, q as releaseCodexAppServerLiveThread } from "./shared-client-CNGDTv68.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, g as assertCodexThreadStartResponse, p as assertCodexThreadAcceptsDirectInput, u as CodexThreadDirectInputError } from "./client-Div-zqnz.mjs";
+import { a as isCodexNotificationForTurn, n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-BVww-ct8.mjs";
+import { d as mergeCodexThreadConfigs, s as buildDisabledAppsConfigPatch, t as buildCodexProjectDocThreadConfig } from "./project-doc-thread-config-D_sWbxFR.mjs";
 import "./session-binding-BDnNz-Co.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DcVebr8N.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-CTUs8Eyu.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-CD48Vab8.mjs";
-import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-BYI6mp5u.mjs";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-XTIa6h5k.mjs";
-import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control--OHH2dHA.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BBsOFzCM.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BqOca2Iy.mjs";
+import { i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-C7kYxPGd.mjs";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-V8zuN8q_.mjs";
+import { f as trackCodexConversationActiveTurn, o as resolveThreadRequestModelProvider, t as buildCodexConversationAgentLookup } from "./conversation-control-BtPxevoK.mjs";
 import { asOptionalRecord, normalizeOptionalString, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -268,7 +268,7 @@ async function bindThread(params, threadId) {
 function assertNativeConversationApprovalPolicySupported(runtime) {
 	if (runtime.approvalPolicy !== "never" && runtime.approvalsReviewer === "user") throw new Error(NATIVE_CONVERSATION_INTERACTIVE_APPROVALS_UNAVAILABLE);
 }
-async function prepareCodexConversationBinding(params, options = {}) {
+async function prepareCodexConversationBinding(params) {
 	const identity = {
 		kind: "conversation",
 		bindingId: params.data.bindingId
@@ -278,7 +278,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 		const current = params.bindingStore.read(identity);
 		if (current?.threadId !== snapshot?.threadId || current?.clientId !== snapshot?.clientId) throw new Error("Codex conversation binding changed before preparation.");
 		const requested = params.data.start && current?.conversationStartId !== params.data.start.id ? params.data.start : void 0;
-		if (current && !requested && !options.forceNew) return;
+		if (current && !requested) return;
 		const sourceIdentity = params.data.source ? sessionBindingIdentity({
 			agentId: params.data.source.agentId,
 			sessionId: params.data.source.sessionId,
@@ -310,7 +310,7 @@ async function prepareCodexConversationBinding(params, options = {}) {
 			agentId: params.data.source?.agentId ?? params.data.agentId
 		};
 		const threadId = requested?.threadId;
-		await bindThread(bindingParams, options.forceNew ? void 0 : threadId);
+		await bindThread(bindingParams, threadId);
 		const stored = params.bindingStore.read(identity);
 		if (!stored) throw new Error("Codex conversation binding disappeared while initializing its thread.");
 		if (sourceIdentity && params.data.source && !current?.conversationSourceTransferComplete) await params.bindingStore.withLease(sourceIdentity, async () => {
@@ -535,6 +535,12 @@ function readLocalMediaPath(value) {
 //#endregion
 //#region extensions/codex/src/conversation-binding.ts
 const DEFAULT_BOUND_TURN_TIMEOUT_MS = 12e5;
+var CodexConversationUnloadedThreadError = class extends Error {
+	constructor(threadId, cause) {
+		super(cause.message, { cause });
+		this.threadId = threadId;
+	}
+};
 async function runBoundTurn(params) {
 	const agentLookup = buildCodexConversationAgentLookup({
 		agentDir: params.data.agentDir,
@@ -546,6 +552,7 @@ async function runBoundTurn(params) {
 	};
 	const binding = params.bindingStore.read(identity);
 	if (!binding?.threadId) throw new Error("bound Codex conversation has no thread binding");
+	if (params.resumeThreadId && binding.threadId !== params.resumeThreadId) throw new Error("Codex conversation binding changed before recovery; review it before resending.");
 	return await withExclusiveCodexAppServerThread({
 		bindingStore: params.bindingStore,
 		identity,
@@ -576,6 +583,7 @@ async function runBoundTurn(params) {
 			const permissionProfile = runtime.networkProxy?.profileName;
 			const networkProxyConfigFingerprint = runtime.networkProxy?.configFingerprint;
 			const networkProxyBindingChanged = binding.networkProxyProfileName !== permissionProfile || binding.networkProxyConfigFingerprint !== networkProxyConfigFingerprint;
+			if (params.resumeThreadId && networkProxyBindingChanged) throw new Error("Codex conversation policy changed before recovery; rebind the conversation and resend your message.");
 			const serviceTier = binding.serviceTier ?? runtime.serviceTier;
 			let useStickyNetworkProfile = permissionProfile !== void 0 && !networkProxyBindingChanged;
 			assertNativeConversationApprovalPolicySupported(runtime);
@@ -625,7 +633,7 @@ async function runBoundTurn(params) {
 						ownsNativeSubscription = true;
 					}
 				}
-				if (networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !params.incognito && !liveThreadOwnership) {
+				if (params.resumeThreadId || networkProxyBindingChanged || binding.clientId !== client.getInstanceId() || isCodexAppServerClientRuntimeLive(client) && !params.incognito && !liveThreadOwnership) {
 					if (!networkProxyBindingChanged && binding.clientId === client.getInstanceId()) await assertResumeInputAllowed();
 					const result = await withLeasedCodexAppServerClientStartSelectionRetry({
 						lease: clientLease,
@@ -726,7 +734,10 @@ async function runBoundTurn(params) {
 					...modelSelection?.model ? { model: modelSelection.model } : {},
 					personality: CODEX_NATIVE_PERSONALITY_NONE,
 					...serviceTier ? { serviceTier } : {}
-				}, { timeoutMs: runtime.requestTimeoutMs })).turn.id;
+				}, { timeoutMs: runtime.requestTimeoutMs }).catch((error) => {
+					if (!params.incognito && error instanceof CodexAppServerRpcError && error.method === "turn/start" && error.code === -32600 && error.message === `thread not found: ${threadId}`) throw new CodexConversationUnloadedThreadError(threadId, error);
+					throw error;
+				})).turn.id;
 				activeTurnCleanup = trackCodexConversationActiveTurn({
 					identity,
 					client,
@@ -740,6 +751,7 @@ async function runBoundTurn(params) {
 				turnSucceeded = true;
 				return { text: replyText || "Codex completed without a text reply." };
 			} catch (error) {
+				if (params.resumeThreadId && isCodexThreadReadMissingError(error, threadId)) throw new Error("The bound Codex thread is unavailable. Your message was not submitted; rebind the conversation and resend it.", { cause: error });
 				if (isCodexAppServerOverloadError(error) && error.method === "thread/resume") throw error;
 				if (error instanceof CodexThreadDirectInputError) {
 					if (params.incognito && ownsNativeSubscription) {
@@ -808,15 +820,12 @@ async function runBoundTurnWithMissingThreadRecovery(params) {
 	try {
 		return await runBoundTurn(params);
 	} catch (error) {
-		if (!isCodexThreadNotFoundError(error)) throw error;
-		await prepareCodexConversationBinding(params, { forceNew: true });
-		return await runBoundTurn(params);
+		if (!(error instanceof CodexConversationUnloadedThreadError)) throw error;
+		return await runBoundTurn({
+			...params,
+			resumeThreadId: error.threadId
+		});
 	}
 }
-function isCodexThreadNotFoundError(error) {
-	if (isCodexAppServerOverloadError(error) || error instanceof CodexAppServerUnsafeSubscriptionError) return false;
-	const message = formatErrorMessage(error);
-	return /\bthread not found:/iu.test(message) || /\bbound Codex conversation has no thread binding\b/u.test(message);
-}
 //#endregion
 export { runBoundTurnWithMissingThreadRecovery };

package/dist/.setup/{conversation-control--OHH2dHA.mjs → conversation-control-BtPxevoK.mjs}

@@ -1,7 +1,7 @@
 import { r as bindingStoreKey } from "./session-binding-record-C2kDBZhx.mjs";
 import { m as isCodexFastServiceTier } from "./config-parsing-CVK2Q463.mjs";
 import { o as formatCodexDisplayText } from "./command-formatters-xW9KpoSZ.mjs";
-import "./config-G4IGX6bK.mjs";
+import "./config-LQemoqTL.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
 import "./session-binding-BDnNz-Co.mjs";
 import { a as resolveCodexBindingModelProviderFallback, r as resolveCodexAppServerRequestModelSelection } from "./thread-model-selection-DcVebr8N.mjs";

package/dist/.setup/{doctor-start-options-DedLaoqI.mjs → doctor-start-options-C28ek2hD.mjs}

@@ -1,8 +1,8 @@
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
-import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-nvYwVDyy.mjs";
+import { a as resolveCodexAppServerStartOptionsForAgent } from "./config-options-CZmH25Xq.mjs";
 import { r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-DwC9wxch.mjs";
-import "./config-G4IGX6bK.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-B8agjie6.mjs";
+import "./config-LQemoqTL.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveDefaultModelForAgent } from "openclaw/plugin-sdk/agent-runtime";
 import { resolveEffectiveAgentRuntime } from "openclaw/plugin-sdk/command-auth-native";

package/dist/.setup/{dynamic-tool-build-CoMf7IKx.mjs → dynamic-tool-build-DjbDZzOJ.mjs}

@@ -1,10 +1,10 @@
 import { CODEX_NATIVE_TOOL_REQUIREMENTS } from "../native-tool-policy.js";
 import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-CVK2Q463.mjs";
-import "./config-G4IGX6bK.mjs";
+import "./config-LQemoqTL.mjs";
 import { a as isCodexResponsesOAuthRun } from "./responses-oauth-twnuTaAa.mjs";
-import { F as isForcedPrivateQaCodexRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, R as normalizeCodexDynamicToolName, h as resolveCodexWebSearchPlan } from "./thread-requests-BqPhA4Gs.mjs";
+import { F as isForcedPrivateQaCodexRuntime, L as isSystemAgentOnlyCodexDynamicToolAllowlist, P as filterCodexDynamicTools, R as normalizeCodexDynamicToolName, h as resolveCodexWebSearchPlan } from "./thread-requests-DjyDmCo4.mjs";
 import { n as resolveCodexNativeExecutionPolicy, r as resolveCodexNodeExecToolOverrides } from "./native-execution-policy-MXEe7PB3.mjs";
-import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-BQ9UkpeG.mjs";
+import { _ as createGatewayProcessProjection, b as isCodexDynamicToolExcluded, g as createGatewayExecProjection, v as createNodeExecAliasDynamicTool, x as placeDisabledNativeShellToolsInDirectNamespace, y as createSandboxShellProjection } from "./native-hook-relay-BvwSj5bt.mjs";
 import path from "node:path";
 import { createStageTimingTracker, formatStageTimings } from "openclaw/plugin-sdk/time-runtime";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";

package/dist/.setup/{dynamic-tools-CKynHtxM.mjs → dynamic-tools-75qoSOch.mjs}

@@ -1,21 +1,21 @@
 import { i as isJsonObject, r as flattenCodexDynamicToolFunctions, t as CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE } from "./protocol-CANUwXJ3.mjs";
-import { n as codexSandboxPolicyForTurn } from "./config-options-nvYwVDyy.mjs";
+import { n as codexSandboxPolicyForTurn } from "./config-options-CZmH25Xq.mjs";
 import { o as formatCodexDisplayText } from "./command-formatters-xW9KpoSZ.mjs";
 import { o as readItem } from "./event-projector-values-CLvG1Hil.mjs";
 import { s as codexAppIdentityKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import "./config-G4IGX6bK.mjs";
+import "./config-LQemoqTL.mjs";
 import { r as invalidInlineImageText } from "./session-history-read-BI_2jRED.mjs";
 import { o as neutralizeCodexExplicitMentionSigils } from "./context-engine-projection-ps-yn_ci.mjs";
-import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-wb1JBldZ.mjs";
-import { A as createFailedDynamicToolResponse, j as failedToolResult, k as resolveCodexToolAbortTerminalReason, l as CodexServerRequestResolvedError, w as createCodexElicitationResponse, x as readCodexTurnCompletedNotification } from "./client-BpSxNz4F.mjs";
+import { G as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent } from "./shared-client-CNGDTv68.mjs";
+import { A as createFailedDynamicToolResponse, j as failedToolResult, k as resolveCodexToolAbortTerminalReason, l as CodexServerRequestResolvedError, w as createCodexElicitationResponse, x as readCodexTurnCompletedNotification } from "./client-Div-zqnz.mjs";
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
-import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, c as readCodexNotificationTurnId, d as auditNativeToolUnfinishedStatus, l as auditNativeToolName, s as readCodexNotificationThreadId, u as auditNativeToolTerminalStatus, v as itemStatus } from "./turn-router-DdlzuFdm.mjs";
+import { S as shouldClearTerminalPresentationForNativeItem, _ as itemName, a as isCodexNotificationForTurn, c as readCodexNotificationTurnId, d as auditNativeToolUnfinishedStatus, l as auditNativeToolName, s as readCodexNotificationThreadId, u as auditNativeToolTerminalStatus, v as itemStatus } from "./turn-router-DM0fRrYI.mjs";
 import { n as resolveCodexAppServerReasoningEffort, t as readCodexSupportedReasoningEfforts } from "./reasoning-effort-CS9kKWB9.mjs";
-import { V as joinPresentSections } from "./thread-requests-BqPhA4Gs.mjs";
+import { V as joinPresentSections } from "./thread-requests-DjyDmCo4.mjs";
 import { r as resolveCodexAppServerRequestModelSelection, t as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-model-selection-DcVebr8N.mjs";
-import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-HbFUm9Pp.mjs";
-import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-CoMf7IKx.mjs";
-import { c as emitCodexNativePreToolUseFailureDiagnostic } from "./native-hook-relay-BQ9UkpeG.mjs";
+import { a as requestPluginApprovalOutcome, c as truncateCodexApprovalDisplayText, i as requestPluginApproval, l as waitForPluginApprovalDecision, n as codexApprovalTimeoutText, o as sanitizeCodexApprovalVisibleText, r as mapExecDecisionToOutcome, s as stripDanglingCodexApprovalTerminalSequence, t as approvalRequestExplicitlyUnavailable } from "./plugin-approval-roundtrip-CXXXhuKi.mjs";
+import { d as isCodexPassThroughMediaSource, f as mapCodexAppServerLocalWorkspacePath, p as mapCodexAppServerRemoteWorkspacePath } from "./dynamic-tool-build-DjbDZzOJ.mjs";
+import { c as emitCodexNativePreToolUseFailureDiagnostic } from "./native-hook-relay-BvwSj5bt.mjs";
 import { createRequire } from "node:module";
 import { asNonArrayRecord, asOptionalRecord, filterStringEntries, isRecord, normalizeOptionalString, normalizeTrimmedStringList, readNonBlankString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
@@ -26,12 +26,12 @@ import { DEFAULT_MAX_LIVE_TOOL_RESULT_CHARS, estimateToolResultTextChars, resolv
 import path, { posix } from "node:path";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { createBoundedRemoteFileReader, isPathStrictlyInside, root } from "openclaw/plugin-sdk/file-access-runtime";
+import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 import { once } from "node:events";
 import { spawn } from "node:child_process";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { emitTrustedDiagnosticEvent, hasPendingInternalDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { buildHarnessVisibleReplyGuidance, buildTemporalContextText, captureToolAuthoredSourceReply, createAgentToolResultMiddlewareRunner, createCodexAppServerToolResultExtensionRunner, embeddedAgentLog, extractMessagingToolSend, extractMessagingToolSendResult, finalizeAgentToolAvailability, finalizeToolTerminalPresentation, formatApprovalDisplayPath, formatToolExecutionErrorMessage, getBeforeToolCallFailureDisposition, getChannelAgentToolMeta, getPluginToolMeta, getPluginToolSideEffectOwnerKey, hasNativeHookRelayInvocation, invokeNativeHookRelay, isDeliveredMessageToolOnlySourceReplyResult, isDeliveredMessagingToolResult, isDeliveredMessagingToolSendToCurrentSource, isMessagingTool, isReplaySafeToolCall, isToolResultError, isToolWrappedWithBeforeToolCallHook, projectPluginMessageDeliveryFact, projectRuntimeToolInputSchema, readEmbeddedMessageDeliveryFact, readToolOperatorHint, resolveNativeHookRelayDeferredToolApproval, resolveToolExecutionErrorKind, runAgentHarnessAfterToolCallHook, sanitizeToolResult, setBeforeToolCallDiagnosticsEnabled, wrapToolWithBeforeToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { sanitizeInlineImageDataUrl } from "openclaw/plugin-sdk/inline-image-data-url-runtime";

package/dist/.setup/{effective-mcp-catalog-DXGsGC1j.mjs → effective-mcp-catalog-Dz0J8iAj.mjs}

@@ -1,6 +1,6 @@
 import { m as sessionBindingIdentity } from "./session-binding-record-C2kDBZhx.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-DvDLHVJe.mjs";
-import { W as protectCodexAppServerLiveThread } from "./shared-client-wb1JBldZ.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CXK7tmkb.mjs";
+import { G as protectCodexAppServerLiveThread } from "./shared-client-CNGDTv68.mjs";
 import "./session-binding-BDnNz-Co.mjs";
 import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-_sawBkIh.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -107,7 +107,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 	if (!retained && params.prepareSession) {
 		const preparation = await params.prepareSession();
 		params.assertCurrent();
-		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-Cnmuh9RT.mjs");
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-C7LyxbAm.mjs");
 		await prepareCodexMcpAppSession({
 			preparation,
 			bindingStore: options.bindingStore,
@@ -128,7 +128,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 		};
 		params.assertCurrent();
 		assertBinding();
-		const { createNativeMcpRuntime } = await import("./native-mcp-app-DIheNk35.mjs").then((n) => n.n);
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-DDEtVQED.mjs").then((n) => n.n);
 		params.assertCurrent();
 		const runtime = createNativeMcpRuntime({
 			client: retained.client,

package/dist/.setup/{ephemeral-turn-C6aFeGFS.mjs → ephemeral-turn-K_d99r9P.mjs}

@@ -1,6 +1,6 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { x as readCodexTurnCompletedNotification } from "./client-BpSxNz4F.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-DdlzuFdm.mjs";
+import { x as readCodexTurnCompletedNotification } from "./client-Div-zqnz.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
 import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-BpKfdoTm.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{inference-proxy-BDWV0djM.mjs → inference-proxy-DSnaS-uS.mjs}

@@ -289,6 +289,7 @@ async function createCodexInferenceProxy(params) {
 			let resident = null;
 			const controller = new AbortController();
 			const deadlineAtMs = Date.now() + HANDSHAKE_TIMEOUT_MS;
+			const deadlineAtMonotonicMs = performance.now() + HANDSHAKE_TIMEOUT_MS;
 			let releasePermit = null;
 			let framePending = false;
 			let idleTimer;
@@ -322,7 +323,7 @@ async function createCodexInferenceProxy(params) {
 				});
 			};
 			const close = () => finish();
-			const failHandshake = () => finish(Date.now() >= deadlineAtMs ? 504 : 502);
+			const failHandshake = () => finish(performance.now() >= deadlineAtMonotonicMs ? 504 : 502);
 			try {
 				const { target, path } = resolveTarget(req);
 				if (params.oauth) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
@@ -352,12 +353,12 @@ async function createCodexInferenceProxy(params) {
 					rejectBusyUpgrade(socket);
 					return;
 				}
-				handshakeTimer = setTimeout(() => finish(504), Math.max(1, deadlineAtMs - Date.now()));
+				handshakeTimer = setTimeout(() => finish(504), Math.max(1, deadlineAtMonotonicMs - performance.now()));
 				handshakeTimer.unref();
 				const assertHandshakeCurrent = () => {
 					assertCurrent();
 					signal.throwIfAborted();
-					if (Date.now() >= deadlineAtMs) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
+					if (performance.now() >= deadlineAtMonotonicMs) throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
 				};
 				proxyAgent = createNodeProxyAgent({
 					mode: "env",
@@ -374,7 +375,7 @@ async function createCodexInferenceProxy(params) {
 					followRedirects: false,
 					perMessageDeflate: false,
 					maxPayload: MAX_BODY_BYTES,
-					handshakeTimeout: Math.max(1, deadlineAtMs - Date.now()),
+					handshakeTimeout: Math.max(1, deadlineAtMonotonicMs - performance.now()),
 					finishRequest(request) {
 						let socketClosed = Promise.resolve();
 						request.once("socket", (upstreamSocket) => {

package/dist/.setup/{isolated-completion-DVDn5GU5.mjs → isolated-completion-dNt4kRLw.mjs}

@@ -1,10 +1,10 @@
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
-import { i as resolveCodexAppServerHomeScope } from "./config-options-nvYwVDyy.mjs";
-import "./config-G4IGX6bK.mjs";
-import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-wb1JBldZ.mjs";
-import { f as assertCodexPassiveTurnItems } from "./client-BpSxNz4F.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-BpjZixcd.mjs";
-import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-Brj5qzz6.mjs";
+import { i as resolveCodexAppServerHomeScope } from "./config-options-CZmH25Xq.mjs";
+import "./config-LQemoqTL.mjs";
+import { rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CNGDTv68.mjs";
+import { f as assertCodexPassiveTurnItems } from "./client-Div-zqnz.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-vdpL2efh.mjs";
+import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-CIQJykuM.mjs";
 import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CLMKN4x-.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts
 /** Runs prompt-only Codex inference on an ephemeral, ring-zero native thread. */

package/dist/.setup/{mcp-app-session-preparation-Cnmuh9RT.mjs → mcp-app-session-preparation-C7LyxbAm.mjs}

@@ -1,17 +1,17 @@
 import { m as sessionBindingIdentity } from "./session-binding-record-C2kDBZhx.mjs";
-import { d as readCodexRequirementsToml } from "./config-security-D0hAOQRI.mjs";
+import { d as readCodexRequirementsToml } from "./config-security-DpkGNy5T.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { n as buildCodexAppServerRuntimeFingerprint, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-X1ZeEDz8.mjs";
-import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-G4IGX6bK.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-C0t9TBX_.mjs";
+import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-LQemoqTL.mjs";
 import { r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-wb1JBldZ.mjs";
-import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-B2ZD23A_.mjs";
+import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CNGDTv68.mjs";
+import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-D_sWbxFR.mjs";
 import { i as resolveCodexSessionBinding } from "./session-binding-BDnNz-Co.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-CTUs8Eyu.mjs";
-import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-DdwKMIae.mjs";
-import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-BYI6mp5u.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BBsOFzCM.mjs";
+import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-DjSfTw6v.mjs";
+import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-C7kYxPGd.mjs";
 import { z } from "zod";
 import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";

package/dist/.setup/{model-catalog-DRbHoUhG.mjs → model-catalog-BRJ7RMXY.mjs}

@@ -1,15 +1,15 @@
 import { t as buildCodexRuntimeModelParams } from "./model-runtime-BdqzOMkU.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-DvDLHVJe.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-DhbisYCc.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-B8agjie6.mjs";
+import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-CXK7tmkb.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-m-H-7FMu.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-wb1JBldZ.mjs";
+import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-CNGDTv68.mjs";
 import { i as isCodexResponsesOAuthCredential } from "./responses-oauth-twnuTaAa.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-BpSxNz4F.mjs";
-import { n as listAllCodexAppServerModels } from "./models-GBLXb27n.mjs";
-import { probeCodexNativeAuth } from "./native-auth-DWrRSl4Z.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-Div-zqnz.mjs";
+import { n as listAllCodexAppServerModels } from "./models-CusrgpiY.mjs";
+import { probeCodexNativeAuth } from "./native-auth-CveRfTpz.mjs";
 //#region extensions/codex/src/app-server/model-catalog.ts
 const INPUT_TYPES = /* @__PURE__ */ new Set([
 	"text",

package/dist/.setup/{models-GBLXb27n.mjs → models-CusrgpiY.mjs}

@@ -1,4 +1,4 @@
-import { d as assertCodexModelListResponse } from "./client-BpSxNz4F.mjs";
+import { d as assertCodexModelListResponse } from "./client-Div-zqnz.mjs";
 import { normalizeOptionalString, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 1e4;
@@ -29,8 +29,8 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
 	const timeoutMs = options.timeoutMs ?? 1e4;
-	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-wb1JBldZ.mjs").then((n) => n.v);
-	const { requestCodexAppServerClientJson } = await import("./request-DhbisYCc.mjs").then((n) => n.i);
+	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CNGDTv68.mjs").then((n) => n.v);
+	const { requestCodexAppServerClientJson } = await import("./request-m-H-7FMu.mjs").then((n) => n.i);
 	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/.setup/{native-auth-DWrRSl4Z.mjs → native-auth-CveRfTpz.mjs}

@@ -2,7 +2,7 @@ import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch, t as buildCodexLoginStatusArgs } from "./launch-args-DbFCehO7.mjs";
 import { r as resolveManagedCodexAppServerStartOptions } from "./managed-binary-DwC9wxch.mjs";
 import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-lgeKKHyw.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-B8agjie6.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { runUtf8CommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/codex/src/app-server/native-auth.ts

package/dist/.setup/{native-hook-relay-BQ9UkpeG.mjs → native-hook-relay-BvwSj5bt.mjs}

@@ -1,9 +1,9 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { l as fingerprintCodexPolicy } from "./config-security-D0hAOQRI.mjs";
-import { D as nativeHookRelayUnregisterQueue } from "./shared-client-wb1JBldZ.mjs";
-import { k as resolveCodexToolAbortTerminalReason } from "./client-BpSxNz4F.mjs";
-import { R as normalizeCodexDynamicToolName } from "./thread-requests-BqPhA4Gs.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-gqu3TQOv.mjs";
+import { l as fingerprintCodexPolicy } from "./config-security-DpkGNy5T.mjs";
+import { D as nativeHookRelayUnregisterQueue } from "./shared-client-CNGDTv68.mjs";
+import { k as resolveCodexToolAbortTerminalReason } from "./client-Div-zqnz.mjs";
+import { R as normalizeCodexDynamicToolName } from "./thread-requests-DjyDmCo4.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-CBYFkNsB.mjs";
 import { createHash } from "node:crypto";
 import { addTimerTimeoutGraceMs, finiteSecondsToTimerSafeMilliseconds } from "openclaw/plugin-sdk/number-runtime";
 import { escapeRegExp } from "openclaw/plugin-sdk/text-utility-runtime";

package/dist/.setup/{native-mcp-app-DIheNk35.mjs → native-mcp-app-DDEtVQED.mjs}

@@ -1,7 +1,7 @@
-import { W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, n as captureCodexAppServerClientLifetime } from "./shared-client-wb1JBldZ.mjs";
-import { F as getCodexAppServerClientInstanceId } from "./client-BpSxNz4F.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-DdlzuFdm.mjs";
-import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-HbFUm9Pp.mjs";
+import { G as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, n as captureCodexAppServerClientLifetime } from "./shared-client-CNGDTv68.mjs";
+import { F as getCodexAppServerClientInstanceId } from "./client-Div-zqnz.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
+import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-CXXXhuKi.mjs";
 import { i as readCodexMcpToolUiVisibility, n as projectCodexMcpToolMetadata, r as readCodexMcpToolConnectorId, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-_sawBkIh.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
 import { asOptionalRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/.setup/{native-skill-isolation-CxZRtiWZ.mjs → native-skill-isolation-Cx2AkUco.mjs}

@@ -1,9 +1,9 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { n as resolveCodexAppServerLocalHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { G as readCodexClientSessionMeta } from "./shared-client-wb1JBldZ.mjs";
-import { f as unsubscribeCodexThreadBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS } from "./attempt-client-cleanup-TScCVTsk.mjs";
-import { b as codexDynamicToolsFingerprint, p as attestCodexRestrictedToolSurfaceMcpServersDisabled } from "./thread-requests-BqPhA4Gs.mjs";
+import { K as readCodexClientSessionMeta } from "./shared-client-CNGDTv68.mjs";
+import { f as unsubscribeCodexThreadBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS } from "./attempt-client-cleanup-BVww-ct8.mjs";
+import { b as codexDynamicToolsFingerprint, p as attestCodexRestrictedToolSurfaceMcpServersDisabled } from "./thread-requests-DjyDmCo4.mjs";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";