@openclaw/codex 2026.10.6 → 2026.10.8

package/dist/.setup/{effective-mcp-catalog-Dz0J8iAj.mjs → effective-mcp-catalog-B_4Dtkdg.mjs}

@@ -1,7 +1,7 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-C2kDBZhx.mjs";
-import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CXK7tmkb.mjs";
-import { G as protectCodexAppServerLiveThread } from "./shared-client-CNGDTv68.mjs";
-import "./session-binding-BDnNz-Co.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-O62ZRFhy.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-8VTsPn2f.mjs";
+import { G as protectCodexAppServerLiveThread } from "./shared-client-Bo9MCCKj.mjs";
+import "./session-binding-_RE7vtVN.mjs";
 import { n as projectCodexMcpToolMetadata, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-_sawBkIh.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -107,7 +107,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 	if (!retained && params.prepareSession) {
 		const preparation = await params.prepareSession();
 		params.assertCurrent();
-		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-C7LyxbAm.mjs");
+		const { prepareCodexMcpAppSession } = await import("./mcp-app-session-preparation-DFvoViz9.mjs");
 		await prepareCodexMcpAppSession({
 			preparation,
 			bindingStore: options.bindingStore,
@@ -128,7 +128,7 @@ async function acquireCodexMcpAppRuntime(params, options) {
 		};
 		params.assertCurrent();
 		assertBinding();
-		const { createNativeMcpRuntime } = await import("./native-mcp-app-DDEtVQED.mjs").then((n) => n.n);
+		const { createNativeMcpRuntime } = await import("./native-mcp-app-ly1JuStw.mjs").then((n) => n.n);
 		params.assertCurrent();
 		const runtime = createNativeMcpRuntime({
 			client: retained.client,

package/dist/.setup/{ephemeral-turn-K_d99r9P.mjs → ephemeral-turn-B1Na_xCj.mjs}

@@ -1,6 +1,6 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { x as readCodexTurnCompletedNotification } from "./client-Div-zqnz.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
+import { x as readCodexTurnCompletedNotification } from "./client-BTWv2cJe.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-Ba0-h2NE.mjs";
 import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-BpKfdoTm.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";

package/dist/.setup/{inference-proxy-DSnaS-uS.mjs → inference-proxy-BZgN5W8m.mjs}

@@ -1,7 +1,7 @@
 import { t as codexWebSocketDataToBuffer } from "./websocket-data-XlRvt8Ys.mjs";
 import { CODEX_INFERENCE_TRANSPORT_FAILURE, authorizationFailure, createCodexInferenceDispatch, isTerminalResponse, n as createUploadAdmission, readProxyBody, t as MAX_BODY_BYTES } from "./inference-dispatch-CO6tTs4q.mjs";
 import { t as createCodexInferenceContext } from "./inference-context-DNlGwzwy.mjs";
-import { createDeferred, createPermitPool } from "openclaw/plugin-sdk/concurrency-runtime";
+import { createDeferred, createPermitPool, runInDetachedAsyncContext } from "openclaw/plugin-sdk/concurrency-runtime";
 import { Writable } from "node:stream";
 import { WebSocket, WebSocketServer, rejectWebSocketUpgrade } from "openclaw/plugin-sdk/websocket-runtime";
 import { createServer } from "node:http";
@@ -181,7 +181,7 @@ async function createCodexInferenceProxy(params) {
 		const abort = () => controller.abort();
 		req.once("aborted", abort);
 		res.once("close", abort);
-		(async () => {
+		runInDetachedAsyncContext(async () => {
 			try {
 				const { target, path } = resolveTarget(req);
 				if (req.method !== "POST") throw new Error(CODEX_INFERENCE_TRANSPORT_FAILURE);
@@ -274,7 +274,7 @@ async function createCodexInferenceProxy(params) {
 				upload?.releaseModelExecution();
 				resident?.finish();
 			}
-		})();
+		});
 	});
 	server.maxConnections = 128;
 	server.requestTimeout = REQUEST_TIMEOUT_MS;

package/dist/.setup/{isolated-completion-dNt4kRLw.mjs → isolated-completion-DGCmR0Q8.mjs}

@@ -1,10 +1,10 @@
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { i as resolveCodexAppServerHomeScope } from "./config-options-CZmH25Xq.mjs";
-import "./config-LQemoqTL.mjs";
-import { rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CNGDTv68.mjs";
-import { f as assertCodexPassiveTurnItems } from "./client-Div-zqnz.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-vdpL2efh.mjs";
-import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-CIQJykuM.mjs";
+import "./config-d0gOFYEk.mjs";
+import { at as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-Bo9MCCKj.mjs";
+import { f as assertCodexPassiveTurnItems } from "./client-BTWv2cJe.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DByEneJg.mjs";
+import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-BRNgfoRl.mjs";
 import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CLMKN4x-.mjs";
 //#region extensions/codex/src/app-server/isolated-completion.ts
 /** Runs prompt-only Codex inference on an ephemeral, ring-zero native thread. */

package/dist/.setup/{managed-binary-DwC9wxch.mjs → managed-binary-Boj8_lWV.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-CAHe3enw.mjs";
 import { createRequire } from "node:module";
 import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 import { constants, existsSync, realpathSync } from "node:fs";

package/dist/.setup/{mcp-app-session-preparation-C7LyxbAm.mjs → mcp-app-session-preparation-DFvoViz9.mjs}

@@ -1,16 +1,16 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-C2kDBZhx.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-O62ZRFhy.mjs";
 import { d as readCodexRequirementsToml } from "./config-security-DpkGNy5T.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { n as buildCodexAppServerRuntimeFingerprint, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-C0t9TBX_.mjs";
-import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-LQemoqTL.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-BIo1-hoT.mjs";
+import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-d0gOFYEk.mjs";
 import { r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CNGDTv68.mjs";
-import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-D_sWbxFR.mjs";
-import { i as resolveCodexSessionBinding } from "./session-binding-BDnNz-Co.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BBsOFzCM.mjs";
-import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-DjSfTw6v.mjs";
+import { I as ensureCodexAppServerClientRuntime, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-Bo9MCCKj.mjs";
+import { d as mergeCodexThreadConfigs } from "./project-doc-thread-config-BYFXSVGk.mjs";
+import { i as resolveCodexSessionBinding } from "./session-binding-_RE7vtVN.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-C5Hpc-Q1.mjs";
+import { a as prepareCodexPluginThreadConfigStartupProvider, o as resolveCodexPluginThreadConfigStartupPolicy, t as startOrResumeThread } from "./thread-lifecycle-run-avZbRAjm.mjs";
 import { n as applyCodexSessionPermissionPolicy } from "./session-permission-policy-C7kYxPGd.mjs";
 import { z } from "zod";
 import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{model-catalog-BRJ7RMXY.mjs → model-catalog-CCr0L7T4.mjs}

@@ -1,15 +1,15 @@
 import { t as buildCodexRuntimeModelParams } from "./model-runtime-BdqzOMkU.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-CXK7tmkb.mjs";
-import { a as withCodexAppServerJsonClient } from "./request-m-H-7FMu.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
+import { w as retireSharedCodexAppServerClientIfCurrent } from "./auth-cache-key-8VTsPn2f.mjs";
+import { a as withCodexAppServerJsonClient } from "./request-6bus8ebp.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BUH-IDVE.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CgHQ8Vot.mjs";
-import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-CNGDTv68.mjs";
+import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-Bo9MCCKj.mjs";
 import { i as isCodexResponsesOAuthCredential } from "./responses-oauth-twnuTaAa.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-Div-zqnz.mjs";
-import { n as listAllCodexAppServerModels } from "./models-CusrgpiY.mjs";
-import { probeCodexNativeAuth } from "./native-auth-CveRfTpz.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError } from "./client-BTWv2cJe.mjs";
+import { n as listAllCodexAppServerModels } from "./models-CPdqFOZS.mjs";
+import { probeCodexNativeAuth } from "./native-auth-TAGxZP-r.mjs";
 //#region extensions/codex/src/app-server/model-catalog.ts
 const INPUT_TYPES = /* @__PURE__ */ new Set([
 	"text",

package/dist/.setup/{models-CusrgpiY.mjs → models-CPdqFOZS.mjs}

@@ -1,4 +1,4 @@
-import { d as assertCodexModelListResponse } from "./client-Div-zqnz.mjs";
+import { d as assertCodexModelListResponse } from "./client-BTWv2cJe.mjs";
 import { normalizeOptionalString, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 1e4;
@@ -29,8 +29,8 @@ async function listAllCodexAppServerModels(options = {}) {
 async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
 	const timeoutMs = options.timeoutMs ?? 1e4;
-	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CNGDTv68.mjs").then((n) => n.v);
-	const { requestCodexAppServerClientJson } = await import("./request-m-H-7FMu.mjs").then((n) => n.i);
+	const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-Bo9MCCKj.mjs").then((n) => n.v);
+	const { requestCodexAppServerClientJson } = await import("./request-6bus8ebp.mjs").then((n) => n.i);
 	const client = await getLeasedSharedCodexAppServerClient({
 		startOptions: options.startOptions,
 		timeoutMs,

package/dist/.setup/native-assignment-repair-BjS4uyQr.mjs

@@ -0,0 +1,162 @@
+import { c as readCodexNativeSubagentSubmissions, g as codexNativeSubagentHistoryConnectionFingerprint, l as codexNativeSubagentRunId, r as normalizeNativePendingAssignments } from "./native-subagent-pending-assignments-BAOzwy85.mjs";
+import { a as readStoredCodexAppServerBinding } from "./session-binding-record-codec-CWQXr9os.mjs";
+import { i as CODEX_APP_SERVER_BINDING_NAMESPACE } from "./session-binding-meta-Lkm5Lpf4.mjs";
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { isDeepStrictEqual } from "node:util";
+//#region extensions/codex/src/migration/native-assignment-repair.ts
+async function normalizeRow(entry, params, warnings) {
+	const raw = asOptionalRecord(entry.value);
+	if (raw?.nativeSubagentAssignments === void 0) return;
+	const stored = readStoredCodexAppServerBinding(raw);
+	if (!stored) {
+		warnings.push(`Preserved Codex native assignments in ${entry.key}; the binding could not be decoded. Inspect it before retrying Doctor.`);
+		return;
+	}
+	if (stored.state !== "active") return;
+	let inventory;
+	try {
+		inventory = normalizeNativePendingAssignments(raw.nativeSubagentAssignments);
+	} catch {
+		warnings.push(`Preserved malformed Codex native assignments in ${entry.key}; inspect the binding before retrying Doctor.`);
+		return;
+	}
+	let assignments = inventory?.assignments ?? [];
+	const originalAssignments = assignments;
+	const identity = /^(session-key|session):([a-z0-9][a-z0-9_-]{0,63}):(.+)$/u.exec(entry.key);
+	const binding = asOptionalRecord(raw.binding);
+	const fingerprint = codexNativeSubagentHistoryConnectionFingerprint(stored.binding);
+	if (assignments.length > 0 && identity && stored.sessionId && binding && raw.retired === void 0 && (identity[1] === "session-key" ? /^[A-Za-z0-9_-]{43}$/u.test(identity[3]) : identity[3] === stored.sessionId) && binding.connectionScope === void 0 && binding.supervisionSourceThreadId === void 0 && binding.pendingSupervisionBranch === void 0 && (binding.authProfileId === void 0 || typeof binding.authProfileId === "string") && fingerprint && params.context.readSessionIdentityEvidenceBatch) try {
+		const agentId = identity[2];
+		const [evidence] = await params.context.readSessionIdentityEvidenceBatch([{
+			agentId,
+			sessionId: stored.sessionId
+		}]);
+		if (evidence?.state === "absent") assignments = [];
+		else if (evidence?.state === "current") {
+			const { getSessionEntryByIdAsync, resolveStorePath } = await import("openclaw/plugin-sdk/session-store-runtime");
+			const { bindingStoreKey } = await import("./session-binding-record-O62ZRFhy.mjs").then((n) => n.h);
+			const current = await getSessionEntryByIdAsync({
+				agentId,
+				sessionId: stored.sessionId,
+				env: params.env,
+				storePath: resolveStorePath(params.config.session?.store, {
+					agentId,
+					env: params.env
+				}),
+				readConsistency: "latest"
+			});
+			if (!current || current.entry.sessionId !== stored.sessionId || current.sessionKey !== evidence.sessionKey) throw new Error("Requester ownership is unresolved");
+			const currentKey = bindingStoreKey({
+				kind: "session",
+				agentId,
+				sessionId: current.entry.sessionId,
+				...identity[1] === "session-key" ? { sessionKey: current.sessionKey } : {}
+			});
+			let unknownLifecycle = false;
+			assignments = assignments.filter((assignment) => {
+				if (currentKey !== entry.key || assignment.owner.sessionId !== current.entry.sessionId || assignment.owner.connectionFingerprint !== fingerprint) return false;
+				if (!assignment.owner.lifecycleRevision || !current.entry.lifecycleRevision) {
+					unknownLifecycle = true;
+					return true;
+				}
+				return assignment.owner.lifecycleRevision === current.entry.lifecycleRevision;
+			});
+			if (unknownLifecycle) warnings.push(`Preserved Codex assignments with unknown lifecycle evidence in ${entry.key}.`);
+		} else warnings.push(`Preserved Codex assignments with unknown requester evidence in ${entry.key}.`);
+	} catch {
+		warnings.push(`Could not establish requester ownership for Codex native assignments in ${entry.key}; preserved them for a later Doctor repair.`);
+	}
+	else if (assignments.length > 0) warnings.push(`Preserved Codex native assignments in ${entry.key}; ownership inspection prerequisites are incomplete. Inspect the binding before retrying Doctor.`);
+	const next = assignments.length ? {
+		version: 1,
+		assignments
+	} : void 0;
+	if (isDeepStrictEqual(next, raw.nativeSubagentAssignments)) return;
+	const { nativeSubagentAssignments: _previous, ...value } = raw;
+	const retired = originalAssignments.filter((assignment) => !assignments.includes(assignment));
+	if (retired.length) try {
+		const submissions = readCodexNativeSubagentSubmissions(raw.nativeSubagentSubmissions);
+		if (submissions) {
+			const receipts = submissions.receipts.filter((receipt) => !retired.some((assignment) => isDeepStrictEqual(submissions.owner, assignment.owner) && submissions.owner.parentThreadId === assignment.nativeParentThreadId && receipt.childThreadId === assignment.childThreadId && (receipt.submissionId === assignment.nativeTurnId || codexNativeSubagentRunId(receipt.childThreadId, receipt.submissionId) === assignment.runId) && (!assignment.submission || isDeepStrictEqual(receipt, assignment.submission))));
+			if (receipts.length !== submissions.receipts.length) {
+				delete value.nativeSubagentSubmissions;
+				if (receipts.length) value.nativeSubagentSubmissions = {
+					...submissions,
+					receipts
+				};
+			}
+		}
+	} catch {
+		warnings.push(`Preserved uncertain native submission receipts in ${entry.key}; inspect them before retrying Doctor.`);
+	}
+	return {
+		entry,
+		value: {
+			...value,
+			...next ? { nativeSubagentAssignments: next } : {}
+		}
+	};
+}
+async function* inspect(params) {
+	const read = params.context.readPluginStateEntriesInKeyRange;
+	if (!read) return;
+	let after;
+	while (true) {
+		const rows = read(CODEX_APP_SERVER_BINDING_NAMESPACE, {
+			prefix: "",
+			after,
+			limit: 512
+		});
+		const replacements = [];
+		const warnings = [];
+		for (const entry of rows) {
+			const replacement = await normalizeRow(entry, params, warnings);
+			if (replacement) replacements.push(replacement);
+		}
+		if (replacements.length || warnings.length) yield {
+			replacements,
+			warnings
+		};
+		if (rows.length < 512) return;
+		after = rows.at(-1)?.key;
+	}
+}
+const codexNativeAssignmentRepair = {
+	id: "codex-native-assignment-repair",
+	label: "Codex native pending assignment repair",
+	doctorOnly: true,
+	phase: "after-session-repair",
+	collectBackupResources: () => [],
+	async detectLegacyState(params) {
+		for await (const _ of inspect(params)) return { preview: ["- Repair duplicate or obsolete Codex native pending assignments"] };
+		return null;
+	},
+	async migrateLegacyState(params) {
+		const changes = [];
+		const warnings = [];
+		const repair = params.context.repairPluginStateEntries;
+		if (!repair) return {
+			changes,
+			warnings: ["Codex native assignment repair requires locked SQLite maintenance ownership"],
+			warningDisposition: "recoverable"
+		};
+		for await (const inspected of inspect(params)) {
+			warnings.push(...inspected.warnings);
+			if (!inspected.replacements.length) continue;
+			try {
+				const result = await repair(CODEX_APP_SERVER_BINDING_NAMESPACE, inspected.replacements);
+				changes.push(...result.changes, `Repaired native pending assignments in ${inspected.replacements.length} Codex binding(s)`);
+				warnings.push(...result.warnings);
+			} catch {
+				warnings.push("Codex native assignment bindings could not be repaired; preserved them for a later openclaw doctor --fix pass.");
+			}
+		}
+		return {
+			changes,
+			warnings,
+			...warnings.length ? { warningDisposition: "recoverable" } : {}
+		};
+	}
+};
+//#endregion
+export { codexNativeAssignmentRepair };

package/dist/.setup/{native-auth-CveRfTpz.mjs → native-auth-TAGxZP-r.mjs}

@@ -1,8 +1,8 @@
 import { d as readCodexPluginConfig } from "./config-parsing-CVK2Q463.mjs";
 import { n as isCodexAppServerProxyLaunch, t as buildCodexLoginStatusArgs } from "./launch-args-DbFCehO7.mjs";
-import { r as resolveManagedCodexAppServerStartOptions } from "./managed-binary-DwC9wxch.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-lgeKKHyw.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DGB1-VbB.mjs";
+import { r as resolveManagedCodexAppServerStartOptions } from "./managed-binary-Boj8_lWV.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-BsXQmXll.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BUH-IDVE.mjs";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { runUtf8CommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/codex/src/app-server/native-auth.ts

package/dist/.setup/{native-hook-relay-BvwSj5bt.mjs → native-hook-relay-VHeLdZXU.mjs}

@@ -1,9 +1,9 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { l as fingerprintCodexPolicy } from "./config-security-DpkGNy5T.mjs";
-import { D as nativeHookRelayUnregisterQueue } from "./shared-client-CNGDTv68.mjs";
-import { k as resolveCodexToolAbortTerminalReason } from "./client-Div-zqnz.mjs";
-import { R as normalizeCodexDynamicToolName } from "./thread-requests-DjyDmCo4.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-CBYFkNsB.mjs";
+import { D as nativeHookRelayUnregisterQueue } from "./shared-client-Bo9MCCKj.mjs";
+import { k as resolveCodexToolAbortTerminalReason } from "./client-BTWv2cJe.mjs";
+import { R as normalizeCodexDynamicToolName } from "./thread-requests-pX9_RXpU.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-CuNglHrq.mjs";
 import { createHash } from "node:crypto";
 import { addTimerTimeoutGraceMs, finiteSecondsToTimerSafeMilliseconds } from "openclaw/plugin-sdk/number-runtime";
 import { escapeRegExp } from "openclaw/plugin-sdk/text-utility-runtime";

package/dist/.setup/{native-mcp-app-DDEtVQED.mjs → native-mcp-app-ly1JuStw.mjs}

@@ -1,9 +1,9 @@
-import { G as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, n as captureCodexAppServerClientLifetime } from "./shared-client-CNGDTv68.mjs";
-import { F as getCodexAppServerClientInstanceId } from "./client-Div-zqnz.mjs";
-import { n as getCodexAppServerTurnRouter } from "./turn-router-DM0fRrYI.mjs";
-import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-CXXXhuKi.mjs";
+import { G as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, n as captureCodexAppServerClientLifetime } from "./shared-client-Bo9MCCKj.mjs";
+import { F as getCodexAppServerClientInstanceId } from "./client-BTWv2cJe.mjs";
+import { n as getCodexAppServerTurnRouter } from "./turn-router-Ba0-h2NE.mjs";
+import { a as requestPluginApprovalOutcome } from "./plugin-approval-roundtrip-DIE4DZ9S.mjs";
 import { i as readCodexMcpToolUiVisibility, n as projectCodexMcpToolMetadata, r as readCodexMcpToolConnectorId, t as projectCodexMcpServerMetadata } from "./mcp-tool-metadata-_sawBkIh.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DijNZb31.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-CAHe3enw.mjs";
 import { asOptionalRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
 import { loadAgentHarnessMcpConfig, prepareHarnessNativeMcpAppPreview } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{native-skill-isolation-Cx2AkUco.mjs → native-skill-isolation--6M-3BWV.mjs}

@@ -1,9 +1,9 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { n as resolveCodexAppServerLocalHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-Bg9DbDI6.mjs";
-import { K as readCodexClientSessionMeta } from "./shared-client-CNGDTv68.mjs";
-import { f as unsubscribeCodexThreadBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS } from "./attempt-client-cleanup-BVww-ct8.mjs";
-import { b as codexDynamicToolsFingerprint, p as attestCodexRestrictedToolSurfaceMcpServersDisabled } from "./thread-requests-DjyDmCo4.mjs";
+import { K as readCodexClientSessionMeta } from "./shared-client-Bo9MCCKj.mjs";
+import { f as unsubscribeCodexThreadBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS } from "./attempt-client-cleanup-BmPBqnW3.mjs";
+import { b as codexDynamicToolsFingerprint, p as attestCodexRestrictedToolSurfaceMcpServersDisabled } from "./thread-requests-pX9_RXpU.mjs";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";