@openclaw/codex 2026.10.5 → 2026.10.7

package/dist/.setup/{native-subagent-monitor-gqu3TQOv.mjs → native-subagent-monitor-CJaIve3h.mjs}

@@ -1,15 +1,15 @@
 import { c as codexNativeSubagentRunId, d as readNativeSubagentThreadIds, f as readThreadParentThreadId, l as normalizeIdentifier, m as assertHistoryOwnerMatchesRegistration, p as readThreadSpawnSource, t as matchesNativeAssignmentLifecycle, u as readCodexNativeSubagentRunId } from "./native-subagent-pending-assignments-DmVhedNs.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as defineCodexBuildState } from "./build-state-DfrctLQv.mjs";
+import { n as defineCodexBuildState } from "./build-state-B5mKL-in.mjs";
 import { a as readHookOutputEntries, o as readItem, s as readNullableString } from "./event-projector-values-CLvG1Hil.mjs";
 import { n as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-Ccd9MFRJ.mjs";
 import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-BO6i_pfk.mjs";
-import { P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, q as retainCodexAppServerLiveThread } from "./shared-client-wb1JBldZ.mjs";
-import { M as readCodexAppServerWarningMessage } from "./client-BpSxNz4F.mjs";
-import { C as unknownItemStatus, _ as itemName, b as matchesCodexSnapshotTurn, f as isMutatingNativeToolItem, g as itemKind, h as isSideEffectingNativeToolItem, l as auditNativeToolName, m as isProjectedNativeToolItem, p as isNonSuccessItemStatus, u as auditNativeToolTerminalStatus, v as itemStatus, y as itemTitle } from "./turn-router-DdlzuFdm.mjs";
-import { s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-TScCVTsk.mjs";
+import { J as retainCodexAppServerLiveThread, P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, U as isCodexAppServerLiveThreadProtected } from "./shared-client-AdQX0Tdq.mjs";
+import { M as readCodexAppServerWarningMessage } from "./client-BM97zH3z.mjs";
+import { C as unknownItemStatus, _ as itemName, b as matchesCodexSnapshotTurn, f as isMutatingNativeToolItem, g as itemKind, h as isSideEffectingNativeToolItem, l as auditNativeToolName, m as isProjectedNativeToolItem, p as isNonSuccessItemStatus, u as auditNativeToolTerminalStatus, v as itemStatus, y as itemTitle } from "./turn-router-DnfbVPvu.mjs";
+import { s as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-jWVRH043.mjs";
 import { t as projectCodexWebSearchItem } from "./web-search-item-CvokaZOo.mjs";
-import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-HbFUm9Pp.mjs";
+import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-x7UI_uqk.mjs";
 import { t as resolveCodexLocalRuntimeAttribution } from "./local-runtime-attribution-CZz2DJ4q.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
 import { asFiniteNumber, asNonArrayRecord, normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -626,6 +626,7 @@ var CodexNativeSubagentAssignmentInventory = class {
 		if (!store || !current || !owner.completionCustody?.isCurrent()) return;
 		const custody = owner.completionCustody.retain();
 		try {
+			await this.drain(state);
 			store.assertCurrent();
 			for (const assignment of store.read()) {
 				if (!matchesNativeAssignmentLifecycle(assignment.owner, current)) continue;
@@ -634,6 +635,7 @@ var CodexNativeSubagentAssignmentInventory = class {
 				store.assertCurrent();
 				if (!recovery || recovery.parentThreadId !== assignment.nativeParentThreadId) continue;
 				await this.dependencies.restore(state, assignment, recovery, custody);
+				await this.drain(state);
 			}
 		} catch (error) {
 			embeddedAgentLog.warn("Native pending assignments remain for reconciliation", { error: formatErrorMessage$1(error) });
@@ -1794,6 +1796,7 @@ function drainNativeChildModelAdmissions(state, owner, turnId, observeActivity,
 }
 //#endregion
 //#region extensions/codex/src/app-server/native-subagent-monitor-runtime.ts
+const TERMINAL_CHILD_RELEASE_RETRY_MS = 3e4;
 const defaultNativeSubagentMonitorRuntime = {
 	deliverAgentHarnessCompletion,
 	captureAgentHarnessCompletionCustody,
@@ -1806,10 +1809,37 @@ function createCodexNativeSubagentMonitorRuntime(Monitor) {
 		if (!monitor) {
 			const childThreadOwnership = /* @__PURE__ */ new Map();
 			const childThreadTransitions = new KeyedAsyncQueue();
-			const releaseOwnership = async (threadId, ownership) => {
-				if (!ownership) return;
-				await ownership.release(threadId);
-				if (childThreadOwnership.get(threadId) === ownership) childThreadOwnership.delete(threadId);
+			const clearReleaseRetry = (entry) => {
+				clearTimeout(entry.releaseRetryTimer);
+				entry.releaseRetryTimer = void 0;
+			};
+			const releaseOwnership = async (threadId, entry) => {
+				if (!entry || childThreadOwnership.get(threadId) !== entry) return;
+				await entry.ownership.release(threadId);
+				clearReleaseRetry(entry);
+				if (childThreadOwnership.get(threadId) === entry) childThreadOwnership.delete(threadId);
+			};
+			const scheduleReleaseRetry = (threadId, entry) => {
+				if (childThreadOwnership.get(threadId) !== entry || entry.releaseRetryTimer !== void 0) return;
+				const timer = setTimeout(() => {
+					childThreadTransitions.enqueue(threadId, async () => {
+						if (entry.releaseRetryTimer !== timer || childThreadOwnership.get(threadId) !== entry) return;
+						entry.releaseRetryTimer = void 0;
+						if (isCodexAppServerLiveThreadProtected(client, threadId)) {
+							scheduleReleaseRetry(threadId, entry);
+							return;
+						}
+						await releaseOwnership(threadId, entry);
+					}).catch((error) => {
+						embeddedAgentLog.warn("Failed to retry Codex native subagent thread release", {
+							childThreadId: threadId,
+							error: formatErrorMessage$1(error)
+						});
+						scheduleReleaseRetry(threadId, entry);
+					});
+				}, TERMINAL_CHILD_RELEASE_RETRY_MS);
+				entry.releaseRetryTimer = timer;
+				timer.unref?.();
 			};
 			monitor = new Monitor(client, runtime ?? defaultNativeSubagentMonitorRuntime, {
 				retainClient,
@@ -1822,11 +1852,20 @@ function createCodexNativeSubagentMonitorRuntime(Monitor) {
 				retainParentThread,
 				hasObservationBacking: (parentThreadId, childThreadId) => hasCodexAppServerLiveThread(client, parentThreadId) || hasCodexAppServerLiveThread(client, childThreadId),
 				claimChildThread: (threadId) => childThreadTransitions.enqueue(threadId, async () => {
+					const existing = childThreadOwnership.get(threadId);
+					if (existing?.releaseRetryTimer !== void 0) {
+						clearReleaseRetry(existing);
+						return existing.ownership;
+					}
 					let ownership;
 					let invalidated = false;
 					ownership = await claimCodexAppServerLiveThread(client, threadId, () => {
 						invalidated = true;
-						if (childThreadOwnership.get(threadId) === ownership) childThreadOwnership.delete(threadId);
+						const entry = childThreadOwnership.get(threadId);
+						if (entry && entry.ownership === ownership) {
+							clearReleaseRetry(entry);
+							childThreadOwnership.delete(threadId);
+						}
 						ownership = void 0;
 						childThreadTransitions.enqueue(threadId, async () => {
 							if (!hasCodexAppServerLiveThread(client, threadId)) monitor?.releasePendingModelInputs(threadId);
@@ -1837,23 +1876,27 @@ function createCodexNativeSubagentMonitorRuntime(Monitor) {
 							});
 						});
 					});
-					if (ownership && !invalidated) childThreadOwnership.set(threadId, ownership);
+					if (ownership && !invalidated) childThreadOwnership.set(threadId, { ownership });
 					return invalidated ? void 0 : ownership;
 				}),
 				retainChildThread: (threadId) => childThreadTransitions.enqueue(threadId, async () => {
-					const ownership = childThreadOwnership.get(threadId);
-					if (!ownership) return false;
+					const entry = childThreadOwnership.get(threadId);
+					if (!entry) return false;
 					let retained = false;
 					try {
-						retained = await retainCodexAppServerLiveThread(client, threadId, ownership.release);
+						retained = await retainCodexAppServerLiveThread(client, threadId, entry.ownership.release);
+						if (retained) clearReleaseRetry(entry);
 						return retained;
 					} finally {
-						if (!retained) await releaseOwnership(threadId, ownership);
+						if (!retained) await releaseOwnership(threadId, entry).catch((error) => {
+							scheduleReleaseRetry(threadId, entry);
+							throw error;
+						});
 					}
 				}),
 				releaseChildThread: (threadId) => childThreadTransitions.enqueue(threadId, () => releaseOwnership(threadId, childThreadOwnership.get(threadId))),
 				captureChildThreadForget: (threadId) => childThreadTransitions.enqueue(threadId, async () => {
-					return childThreadOwnership.get(threadId)?.forget;
+					return childThreadOwnership.get(threadId)?.ownership.forget;
 				})
 			});
 			monitors.set(client, monitor);
@@ -2046,7 +2089,6 @@ async function registerNativeSubagentParent(input, dependencies) {
 		state.owners.set(ownerKey, owner);
 		state.preparing = void 0;
 		dependencies.deliverDetached(state);
-		dependencies.submissions.restore(state, owner);
 	} catch (error) {
 		releaseRootModelBinding();
 		state.owners.delete(ownerKey);
@@ -2058,7 +2100,12 @@ async function registerNativeSubagentParent(input, dependencies) {
 		state.pendingRegistrations -= 1;
 		dependencies.prune(registeredState);
 	}
-	const ready = dependencies.assignments.restore(state, owner);
+	const ready = (async () => {
+		dependencies.submissions.restore(state, owner);
+		await dependencies.submissions.drain(registeredState);
+		await dependencies.assignments.restore(state, owner);
+		await dependencies.assignments.drain(registeredState);
+	})();
 	let registered = true;
 	let settlement;
 	return {

package/dist/.setup/{plan-DZWYASAx.mjs → plan-GqWF4XGA.mjs}

@@ -1,7 +1,7 @@
 import { t as isOnlyMigrationKind } from "./scope-DOC1Xjc8.mjs";
-import { u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-kLR7G02h.mjs";
-import "./config-G4IGX6bK.mjs";
-import { i as hasCodexSource, n as defaultCodexHome, o as readJsonObject, r as discoverCodexSource, s as sanitizeName, t as codexPluginMigrationSubscriptionWarning } from "./source-BjBw-zoV.mjs";
+import { u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-OhiCoyPH.mjs";
+import "./config-LQemoqTL.mjs";
+import { i as hasCodexSource, n as defaultCodexHome, o as readJsonObject, r as discoverCodexSource, s as sanitizeName, t as codexPluginMigrationSubscriptionWarning } from "./source-BszpKEvi.mjs";
 import { asBoolean, asOptionalRecord, isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import { runCommandBuffered } from "openclaw/plugin-sdk/process-runtime";
@@ -97,7 +97,7 @@ async function readCodexCliCredentialsAsync(options) {
 	options.signal?.throwIfAborted();
 	if (!options.allowKeychainPrompt) return;
 	const home = await fs.realpath(options.codexHome).catch(() => path.resolve(options.codexHome));
-	const { CodexAppServerClient } = await import("./client-BpSxNz4F.mjs").then((n) => n.n);
+	const { CodexAppServerClient } = await import("./client-BM97zH3z.mjs").then((n) => n.n);
 	const { resolveManagedCodexPackageEntrypoint, resolveManagedCodexNativeCommand } = await import("./managed-binary-DwC9wxch.mjs").then((n) => n.n);
 	const launcher = resolveManagedCodexPackageEntrypoint(path.dirname(fileURLToPath(import.meta.url)));
 	const command = launcher ? resolveManagedCodexNativeCommand(launcher) : void 0;

package/dist/.setup/{plugin-activation-CsW09DWl.mjs → plugin-activation-BgfNFH2L.mjs}

@@ -1,6 +1,6 @@
 import { r as CodexAppServerRpcError } from "./rpc-error-C98SHchT.mjs";
-import { i as listCodexPluginMetadata, n as findCodexMarketplacePluginSummary, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as createCodexAppInventoryRequest, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-kLR7G02h.mjs";
-import "./config-G4IGX6bK.mjs";
+import { i as listCodexPluginMetadata, n as findCodexMarketplacePluginSummary, o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as createCodexAppInventoryRequest, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-OhiCoyPH.mjs";
+import "./config-LQemoqTL.mjs";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/codex/src/app-server/plugin-activation.ts
 /** Activates legacy curated plugins without granting install authority to other marketplaces. */

package/dist/.setup/{plugin-approval-roundtrip-HbFUm9Pp.mjs → plugin-approval-roundtrip-x7UI_uqk.mjs}

@@ -1,4 +1,4 @@
-import { mt as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-wb1JBldZ.mjs";
+import { _t as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-AdQX0Tdq.mjs";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { isApprovalNotFoundError, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { racePromiseWithAbortSignal } from "openclaw/plugin-sdk/time-runtime";

package/dist/.setup/{plugin-inventory-kLR7G02h.mjs → plugin-inventory-OhiCoyPH.mjs}

@@ -1,5 +1,5 @@
 import { c as findCodexAppById } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import "./config-G4IGX6bK.mjs";
+import "./config-LQemoqTL.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/config-contracts.ts
 const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";

package/dist/.setup/{project-doc-thread-config-B2ZD23A_.mjs → project-doc-thread-config-D_sWbxFR.mjs}

@@ -1,11 +1,11 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { l as fingerprintCodexPolicy } from "./config-security-D0hAOQRI.mjs";
+import { l as fingerprintCodexPolicy } from "./config-security-DpkGNy5T.mjs";
 import { f as resolveCodexPluginsPolicy } from "./config-parsing-CVK2Q463.mjs";
-import { u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-nvYwVDyy.mjs";
+import { u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-CZmH25Xq.mjs";
 import { a as defaultCodexAppInventoryCache, i as CodexAppInventoryCache, o as serializeCodexAppInventoryError, s as codexAppIdentityKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { l as toCodexPluginOwnedAccountApp, s as readCodexPluginInventory, t as createCodexAppInventoryRequest } from "./plugin-inventory-kLR7G02h.mjs";
-import "./config-G4IGX6bK.mjs";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-CsW09DWl.mjs";
+import { l as toCodexPluginOwnedAccountApp, s as readCodexPluginInventory, t as createCodexAppInventoryRequest } from "./plugin-inventory-OhiCoyPH.mjs";
+import "./config-LQemoqTL.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-BgfNFH2L.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/plugin-app-approval-overrides.ts
 /** Projects ask approvals into the native session layer without changing saved settings. */

package/dist/.setup/{provider-BiUzaRth.mjs → provider-Bi9QCsg1.mjs}

@@ -11,7 +11,7 @@ function buildCodexMigrationProvider(params = {}) {
 		].join(" "),
 		supportedItemKinds: ["memory", "auth"],
 		async detect(ctx) {
-			const { discoverCodexSource, hasCodexSource } = await import("./source-BjBw-zoV.mjs").then((n) => n.a);
+			const { discoverCodexSource, hasCodexSource } = await import("./source-BszpKEvi.mjs").then((n) => n.a);
 			const memoryOnly = isOnlyMigrationKind(ctx, "memory");
 			const authOnly = isOnlyMigrationKind(ctx, "auth");
 			const source = await discoverCodexSource({
@@ -29,16 +29,16 @@ function buildCodexMigrationProvider(params = {}) {
 			};
 		},
 		async plan(ctx) {
-			const { buildCodexMigrationPlan } = await import("./plan-DZWYASAx.mjs");
+			const { buildCodexMigrationPlan } = await import("./plan-GqWF4XGA.mjs");
 			return buildCodexMigrationPlan(ctx);
 		},
 		deferredApply: { retrySafe: true },
 		prepareApply(ctx) {
 			if (isOnlyMigrationKind(ctx, "memory") || isOnlyMigrationKind(ctx, "auth")) return;
-			return import("./apply-QyZT5-na.mjs").then(({ prepareTargetCodexAppServer }) => prepareTargetCodexAppServer(ctx));
+			return import("./apply-BaBl0hiG.mjs").then(({ prepareTargetCodexAppServer }) => prepareTargetCodexAppServer(ctx));
 		},
 		async apply(ctx, plan) {
-			const { applyCodexMigrationPlan } = await import("./apply-QyZT5-na.mjs");
+			const { applyCodexMigrationPlan } = await import("./apply-BaBl0hiG.mjs");
 			return await applyCodexMigrationPlan({
 				ctx,
 				plan,

package/dist/.setup/{provider-capabilities-DOBUBt86.mjs → provider-capabilities-BCZeV7xZ.mjs}

@@ -1,4 +1,4 @@
-import { h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-wb1JBldZ.mjs";
+import { h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-AdQX0Tdq.mjs";
 //#region extensions/codex/src/app-server/provider-capabilities.ts
 function resolveOverriddenProviderWebSearchSupport(modelProviderOverride) {
 	const provider = modelProviderOverride?.trim().toLowerCase();

package/dist/.setup/{request-DhbisYCc.mjs → request-XC1RG34l.mjs}

@@ -3,8 +3,8 @@ import { t as CODEX_CONTROL_METHODS } from "./capabilities-DbOzOglY.mjs";
 import { i as withTimeout$1, r as withAbortableTimeout } from "./timeout-D0mEWSGG.mjs";
 import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
 import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-registration";
-import { areDiagnosticsEnabledForProcess } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { raceWithTimeout } from "openclaw/plugin-sdk/time-runtime";
+import { areDiagnosticsEnabledForProcess } from "openclaw/plugin-sdk/diagnostic-runtime";
 //#region extensions/codex/src/app-server/request-diagnostics.ts
 const DIAGNOSTIC_METHODS = /* @__PURE__ */ new Set([
 	...Object.values(CODEX_CONTROL_METHODS),
@@ -293,7 +293,7 @@ async function withCodexAppServerJsonClient(params, run) {
 			timeoutMessage,
 			promise: (async () => {
 				const { resolveCodexAppServerDirectSandboxBypassBlock } = await import("./sandbox-guard-Cf9XMRrg.mjs").then((n) => n.r);
-				const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, isCodexAppServerStartSelectionChangedError, releaseLeasedSharedCodexAppServerClient, retireSharedCodexAppServerClientIfCurrent } = await import("./shared-client-wb1JBldZ.mjs").then((n) => n.v);
+				const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, isCodexAppServerStartSelectionChangedError, releaseLeasedSharedCodexAppServerClient, retireSharedCodexAppServerClientIfCurrent } = await import("./shared-client-AdQX0Tdq.mjs").then((n) => n.v);
 				for (let attempt = 0; attempt < 2; attempt += 1) {
 					errorPhase = void 0;
 					setPhase("prepare");