@openclaw/codex 2026.7.2-beta.3 → 2026.7.2-beta.4

package/dist/{thread-lifecycle-CQ_9mAa1.js → thread-lifecycle-cqrOlJkq.js}

@@ -1,7 +1,8 @@
-import { G as isCodexAppServerPrewriteRequestCancellationError, H as isCodexAppServerConnectionClosedError, R as CodexAppServerRpcError, X as flattenCodexDynamicToolFunctions, Z as isJsonObject, d as retireSharedCodexAppServerClientIfCurrent, n as clearSharedCodexAppServerClientIfCurrentAndUnclaimed, o as isCodexAppServerStartSelectionChangedError, t as clearSharedCodexAppServerClientIfCurrent, z as getCodexAppServerClientInstanceId } from "./shared-client-CSXLtCLE.js";
-import { T as resolveCodexPluginsPolicy, a as isCodexAppServerNativeAuthProfile, c as sessionBindingIdentity, d as CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME, h as codexSandboxPolicyForTurn, i as hashCodexAppServerBindingFingerprint, n as assertCodexBindingMayBeReplaced, o as normalizeCodexAppServerBindingModelProvider, s as reclaimCurrentCodexSessionGeneration, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./session-binding-Bmt20HfB.js";
-import { a as projectBoundedCodexThreadHistory, d as assertCodexThreadStartResponse, l as assertCodexThreadForkResponse, u as assertCodexThreadResumeResponse } from "./transcript-mirror-D9rTxx2P.js";
-import { a as serializeCodexAppInventoryError, i as defaultCodexAppInventoryCache, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-DJbhLYSK.js";
+import { G as isCodexAppServerPrewriteRequestCancellationError, H as isCodexAppServerConnectionClosedError, Q as isJsonObject, R as CodexAppServerRpcError, Z as flattenCodexDynamicToolFunctions, d as retireSharedCodexAppServerClientIfCurrent, n as clearSharedCodexAppServerClientIfCurrentAndUnclaimed, o as isCodexAppServerStartSelectionChangedError, q as resolveCodexAppServerClientInstanceId, t as clearSharedCodexAppServerClientIfCurrent, z as getCodexAppServerClientInstanceId } from "./shared-client-wmgNFNYp.js";
+import { E as resolveCodexPluginsPolicy, a as hashCodexAppServerBindingFingerprint, c as reclaimCurrentCodexSessionGeneration, d as CODEX_PLUGINS_MARKETPLACE_NAME, f as CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME, g as codexSandboxPolicyForTurn, i as createCodexSessionGenerationSupersededError, l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as isCodexAppServerNativeAuthProfile, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-ZSMX1omP.js";
+import { _ as assertCodexThreadStartResponse, a as projectBoundedCodexThreadHistory, g as assertCodexThreadResumeResponse, h as assertCodexThreadForkResponse } from "./transcript-mirror-2p7kl6e4.js";
+import { a as serializeCodexAppInventoryError, i as defaultCodexAppInventoryCache, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-CvzvmBRz.js";
+import { t as isIncognitoSessionKey } from "./incognito-session-ET_ufDH-.js";
 import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import * as crypto$1 from "node:crypto";
 import crypto from "node:crypto";
@@ -13,6 +14,82 @@ import { isDiagnosticFlagEnabled } from "openclaw/plugin-sdk/diagnostic-runtime"
 import { listRegisteredPluginAgentPromptGuidance } from "openclaw/plugin-sdk/plugin-runtime";
 import { GPT5_HEARTBEAT_PROMPT_OVERLAY } from "openclaw/plugin-sdk/provider-model-shared";
 import { INLINE_IMAGE_DATA_URL_PREFIX, sanitizeInlineImageDataUrl } from "openclaw/plugin-sdk/inline-image-data-url-runtime";
+//#region extensions/codex/src/app-server/event-projector-values.ts
+function readString(record, key) {
+	const value = record[key];
+	return typeof value === "string" ? value : void 0;
+}
+function normalizeNonEmptyString(value) {
+	if (typeof value !== "string") return;
+	return value.trim() || void 0;
+}
+function readNonEmptyString(record, key) {
+	return normalizeNonEmptyString(record[key]);
+}
+function readNonEmptyStringArray(record, key) {
+	const value = record[key];
+	if (!Array.isArray(value)) return [];
+	const entries = [];
+	for (const entry of value) {
+		const normalized = normalizeNonEmptyString(entry);
+		if (normalized) entries.push(normalized);
+	}
+	return entries;
+}
+function readNullableString(record, key) {
+	const value = record[key];
+	if (value === null) return null;
+	return typeof value === "string" ? value : void 0;
+}
+function readNumber(record, key) {
+	const value = record[key];
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function readNonNegativeInteger(record, key) {
+	const value = readNumber(record, key);
+	return value !== void 0 && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
+function readCodexErrorNotificationMessage(record) {
+	const error = record.error;
+	return isJsonObject(error) ? readString(error, "message") : void 0;
+}
+function readHookOutputEntries(value) {
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((entry) => {
+		if (!isJsonObject(entry)) return [];
+		const text = readString(entry, "text");
+		if (!text) return [];
+		const kind = readString(entry, "kind");
+		return [{
+			...kind ? { kind } : {},
+			text
+		}];
+	});
+}
+function splitPlanText(text) {
+	return text.split(/\r?\n/).map((line) => line.trim().replace(/^[-*]\s+/, "")).filter((line) => line.length > 0);
+}
+function extractRawAssistantText(item) {
+	return (Array.isArray(item.content) ? item.content : []).flatMap((entry) => {
+		if (!isJsonObject(entry)) return [];
+		const type = readString(entry, "type");
+		if (type !== "output_text" && type !== "text") return [];
+		const value = readString(entry, "text");
+		return value ? [value] : [];
+	}).join("").trim() || void 0;
+}
+function readItemString(item, key) {
+	const value = item[key];
+	return typeof value === "string" ? value : void 0;
+}
+function readItem(value) {
+	if (!isJsonObject(value)) return;
+	const type = typeof value.type === "string" ? value.type : void 0;
+	const id = typeof value.id === "string" ? value.id : void 0;
+	if (!type || !id) return;
+	return value;
+}
+//#endregion
 //#region extensions/codex/src/app-server/plugin-inventory.ts
 /**
 * Reads Codex plugin marketplace state and app inventory to decide which
@@ -864,13 +941,9 @@ function resolveCodexContextEngineProjectionMaxChars(params) {
 		reserveTokens: params.reserveTokens
 	}) * APPROX_RENDERED_CHARS_PER_TOKEN);
 }
-/** Reads Codex projection reserve tokens from compaction config. */
-function resolveCodexContextEngineProjectionReserveTokens(params) {
-	const compaction = asRecord(asRecord(asRecord(params.config)?.agents)?.defaults)?.compaction;
-	const configuredReserveTokens = toNonNegativeInt(asRecord(compaction)?.reserveTokens);
-	const configuredReserveTokensFloor = toNonNegativeInt(asRecord(compaction)?.reserveTokensFloor);
-	if (configuredReserveTokens !== void 0) return Math.max(configuredReserveTokens, configuredReserveTokensFloor ?? DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS);
-	if (configuredReserveTokensFloor !== void 0) return configuredReserveTokensFloor;
+/** Returns the fixed reserve used for Codex context-engine projections. */
+function resolveCodexContextEngineProjectionReserveTokens() {
+	return DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS;
 }
 /** Fits projected context prompts under Codex app-server turn/start text limits. */
 function fitCodexProjectedContextForTurnStart(params) {
@@ -918,13 +991,6 @@ function resolveProjectionPromptBudgetTokens(params) {
 	const effectiveReserveTokens = Math.min(requestedReserveTokens, Math.max(0, params.contextTokenBudget - minPromptBudget));
 	return Math.max(1, params.contextTokenBudget - effectiveReserveTokens);
 }
-function asRecord(value) {
-	return value && typeof value === "object" ? value : void 0;
-}
-function toNonNegativeInt(value) {
-	if (typeof value !== "number" || !Number.isFinite(value) || value < 0) return;
-	return Math.floor(value);
-}
 function dropDuplicateTrailingPrompt(messages, prompt) {
 	if (!prompt) return messages;
 	const trailing = messages.at(-1);
@@ -1086,7 +1152,7 @@ function buildContextEngineBinding(params, projection) {
 			contextTokenBudget: params.contextTokenBudget,
 			projectionMaxChars: resolveCodexContextEngineProjectionMaxChars({
 				contextTokenBudget: params.contextTokenBudget,
-				reserveTokens: resolveCodexContextEngineProjectionReserveTokens({ config: params.config })
+				reserveTokens: resolveCodexContextEngineProjectionReserveTokens()
 			})
 		}),
 		projection: projection ? buildContextEngineProjectionBinding(projection) : void 0
@@ -1866,7 +1932,8 @@ function buildThreadStartParams(params, options) {
 		...resolveCodexThreadEnvironmentSelection(options),
 		developerInstructions: options.developerInstructions ?? buildDeveloperInstructions(params, { dynamicTools: options.dynamicTools }),
 		dynamicTools: [...options.dynamicTools],
-		experimentalRawEvents: true
+		experimentalRawEvents: true,
+		...isIncognitoSessionKey(params.sessionKey) ? { ephemeral: true } : {}
 	};
 }
 function buildThreadResumeParams(params, options) {
@@ -2208,6 +2275,7 @@ async function resumeExistingCodexThread(params, context) {
 	}
 }
 async function startFreshCodexThread(params, context) {
+	const clientId = resolveCodexAppServerClientInstanceId(params.client);
 	const { bindingIdentity, startModelSelection, startModelProvider, userMcpServersConfigPatch, dynamicToolsFingerprint, dynamicToolsContainDeferred, webSearchThreadConfigFingerprint, userMcpServersFingerprint, ringZeroConfigFingerprint, ringZeroClientInstanceId, networkProxyConfigFingerprint, contextEngineBinding, environmentSelectionFingerprint, hostSystemAgentActive, ringZeroActive, ringZeroInheritedMcpServerNames, lifecycleTiming, normalizeBindingModelProvider, throwIfAborted, prebuiltPluginThreadConfig, preserveExistingBinding, rotatedContextEngineBinding } = context;
 	const pluginThreadConfig = params.pluginThreadConfig?.enabled ? prebuiltPluginThreadConfig ?? await lifecycleTiming.measure("plugin-config-build", () => params.pluginThreadConfig?.build()) : void 0;
 	const finalConfigPatch = params.buildFinalConfigPatch?.({ action: "start" }) ?? {
@@ -2261,6 +2329,7 @@ async function startFreshCodexThread(params, context) {
 			if: { kind: "absent" },
 			binding: {
 				threadId: response.thread.id,
+				...clientId ? { clientId } : {},
 				cwd: params.cwd,
 				authProfileId: params.params.authProfileId,
 				model: response.model ?? startParams.model ?? params.params.modelId,
@@ -2303,6 +2372,7 @@ async function startFreshCodexThread(params, context) {
 	});
 	return {
 		threadId: response.thread.id,
+		...clientId ? { clientId } : {},
 		cwd: params.cwd,
 		authProfileId: params.params.authProfileId,
 		model: response.model ?? startParams.model ?? params.params.modelId,
@@ -2625,7 +2695,7 @@ function buildPendingSupervisionProbeForkParams(params, pending) {
 		...params.appServer.serviceTier !== void 0 ? { serviceTier: params.appServer.serviceTier } : {},
 		config: runtimeConfig,
 		developerInstructions: params.developerInstructions ?? buildDeveloperInstructions(params.attempt, { dynamicTools: params.dynamicTools }),
-		ephemeral: false,
+		ephemeral: isIncognitoSessionKey(params.attempt.sessionKey),
 		threadSource: "appServer",
 		excludeTurns: true
 	};
@@ -2741,6 +2811,8 @@ async function archiveSupervisionArtifact(client, threadId) {
 //#endregion
 //#region extensions/codex/src/app-server/thread-lifecycle-run.ts
 async function startOrResumeThread(params) {
+	const incognito = isIncognitoSessionKey(params.params.sessionKey);
+	const clientId = resolveCodexAppServerClientInstanceId(params.client);
 	const bindingIdentity = sessionBindingIdentity({
 		sessionId: params.params.sessionId,
 		sessionKey: params.params.sessionKey,
@@ -2808,7 +2880,7 @@ async function startOrResumeThread(params) {
 				bindingStore: params.bindingStore,
 				identity: bindingIdentity,
 				config: params.params.config
-			}))) throw new Error(`Codex session generation is no longer current: ${bindingIdentity.sessionId}`);
+			}))) throw createCodexSessionGenerationSupersededError(bindingIdentity.sessionId);
 		}
 		if (binding?.pendingSupervisionBranch) {
 			const pendingBinding = binding;
@@ -2841,6 +2913,7 @@ async function startOrResumeThread(params) {
 				normalizeBindingModelProvider,
 				bindingPatch: {
 					cwd: params.cwd,
+					...clientId ? { clientId } : {},
 					authProfileId: void 0,
 					preserveNativeModel: true,
 					dynamicToolsFingerprint,
@@ -3034,6 +3107,28 @@ async function startOrResumeThread(params) {
 				embeddedAgentLog.debug("codex app-server dynamic tool catalog changed; starting a new thread", { threadId: binding.threadId });
 				await clearCurrentBinding("rotating a stale thread binding");
 			}
+		} else if (incognito) {
+			if (binding.clientId && binding.clientId === clientId) {
+				params.buildFinalConfigPatch?.({
+					action: "resume",
+					binding
+				});
+				throwIfAborted();
+				lifecycleTiming.mark("thread-ready");
+				lifecycleTiming.logSummary({
+					runId: params.params.runId,
+					sessionId: params.params.sessionId,
+					sessionKey: params.params.sessionKey,
+					threadId: binding.threadId,
+					action: "resumed"
+				});
+				return {
+					...binding,
+					lifecycle: { action: "resumed" }
+				};
+			}
+			await clearCurrentBinding("rotating an unavailable ephemeral thread binding");
+			binding = void 0;
 		} else {
 			const resumed = await resumeExistingCodexThread(params, {
 				binding,
@@ -3199,8 +3294,7 @@ function buildTurnStartParams(params, options) {
 			model: modelSelection.model,
 			turnScopedDeveloperInstructions: options.turnScopedDeveloperInstructions,
 			skillsCollaborationInstructions: options.skillsCollaborationInstructions,
-			memoryCollaborationInstructions: options.memoryCollaborationInstructions,
-			heartbeatCollaborationInstructions: options.heartbeatCollaborationInstructions
+			memoryCollaborationInstructions: options.memoryCollaborationInstructions
 		}) } : {}
 	};
 }
@@ -3218,7 +3312,7 @@ function buildTurnCollaborationMode(params, options = {}) {
 function buildTurnScopedCollaborationInstructions(params, options = {}) {
 	const contextInstructions = joinPresentSections(options.turnScopedDeveloperInstructions, options.memoryCollaborationInstructions, options.skillsCollaborationInstructions);
 	if (params.trigger === "cron") return joinPresentSections(buildCronCollaborationInstructions(), contextInstructions);
-	if (params.trigger === "heartbeat" && params.bootstrapContextRunKind !== "commitment-only") return joinPresentSections(buildHeartbeatCollaborationInstructions(), contextInstructions, options.heartbeatCollaborationInstructions);
+	if (params.trigger === "heartbeat" && params.bootstrapContextRunKind !== "commitment-only") return joinPresentSections(buildHeartbeatCollaborationInstructions(), contextInstructions);
 	if (contextInstructions?.trim()) return joinPresentSections(buildDefaultCollaborationInstructions(), contextInstructions);
 	return null;
 }
@@ -3256,4 +3350,4 @@ function joinPresentSections(...sections) {
 	return sections.filter((section) => Boolean(section?.trim())).join("\n\n");
 }
 //#endregion
-export { CodexAppServerUnsafeSubscriptionError as A, fitCodexProjectedContextForTurnStart as B, isForcedPrivateQaCodexRuntime as C, resolveCodexDynamicToolsLoadingForRuntime as D, resolveCodexDynamicToolsLoading as E, areCodexDynamicToolFingerprintsCompatible as F, buildCodexPluginThreadConfig as G, resolveCodexContextEngineProjectionMaxChars as H, codexDynamicToolsFingerprint as I, mergeCodexThreadConfigs as J, buildCodexPluginThreadConfigInputFingerprint as K, codexLegacyDynamicToolsFingerprint as L, interruptCodexTurnBestEffort as M, retireCodexAppServerClientAfterTimedOutTurn as N, CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS as O, unsubscribeCodexThreadBestEffort as P, resolveRecoverableCodexPluginConfigKeys as Q, buildContextEngineBinding as R, filterCodexDynamicToolsWithOpenClawShell as S, normalizeCodexDynamicToolName as T, resolveCodexContextEngineProjectionReserveTokens as U, projectContextEngineAssemblyForCodex as V, buildCodexPluginAppsConfigPatchFromPolicyContext as W, ensureCodexPluginActivation as X, shouldBuildCodexPluginThreadConfig as Y, pluginReadParams as Z, resolveCodexBindingModelProviderFallback as _, sanitizeCodexHistoryImagePayloads as a, isCodexAppServerProfilerEnabled as b, resumeCodexAppServerThread as c, resolveCodexWebSearchPlan as d, buildDeveloperInstructions as f, resolveCodexAppServerThreadModelSelection as g, resolveCodexAppServerRequestModelSelection as h, invalidInlineImageText as i, closeCodexStartupClientBestEffort as j, CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS as k, buildCodexRuntimeThreadConfig as l, resolveCodexAppServerModelProvider as m, buildTurnStartParams as n, sanitizeInlineImageDataUrl$1 as o, CODEX_NATIVE_PERSONALITY_NONE as p, buildCodexPluginThreadConfigTimeoutFallback as q, buildCodexUserInput as r, startOrResumeThread as s, buildTurnCollaborationMode as t, buildCodexNativeWebSearchThreadConfig as u, resolveReasoningEffort as v, isSystemAgentOnlyCodexDynamicToolAllowlist as w, filterCodexDynamicTools as x, readCodexSupportedReasoningEfforts as y, isContextEngineBindingCompatible as z };
+export { shouldBuildCodexPluginThreadConfig as $, resolveCodexDynamicToolsLoading as A, codexDynamicToolsFingerprint as B, readCodexSupportedReasoningEfforts as C, isForcedPrivateQaCodexRuntime as D, filterCodexDynamicToolsWithOpenClawShell as E, closeCodexStartupClientBestEffort as F, projectContextEngineAssemblyForCodex as G, buildContextEngineBinding as H, interruptCodexTurnBestEffort as I, buildCodexPluginAppsConfigPatchFromPolicyContext as J, resolveCodexContextEngineProjectionMaxChars as K, retireCodexAppServerClientAfterTimedOutTurn as L, CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS as M, CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS as N, isSystemAgentOnlyCodexDynamicToolAllowlist as O, CodexAppServerUnsafeSubscriptionError as P, mergeCodexThreadConfigs as Q, unsubscribeCodexThreadBestEffort as R, resolveReasoningEffort as S, filterCodexDynamicTools as T, isContextEngineBindingCompatible as U, codexLegacyDynamicToolsFingerprint as V, fitCodexProjectedContextForTurnStart as W, buildCodexPluginThreadConfigInputFingerprint as X, buildCodexPluginThreadConfig as Y, buildCodexPluginThreadConfigTimeoutFallback as Z, CODEX_NATIVE_PERSONALITY_NONE as _, sanitizeCodexHistoryImagePayloads as a, readCodexErrorNotificationMessage as at, resolveCodexAppServerThreadModelSelection as b, resumeCodexAppServerThread as c, readItemString as ct, buildCodexRingZeroThreadConfigPatch as d, readNonNegativeInteger as dt, ensureCodexPluginActivation as et, buildCodexRuntimeThreadConfig as f, readNullableString as ft, buildDeveloperInstructions as g, resolveCodexWebSearchPlan as h, splitPlanText as ht, invalidInlineImageText as i, normalizeNonEmptyString as it, resolveCodexDynamicToolsLoadingForRuntime as j, normalizeCodexDynamicToolName as k, assertCodexRingZeroHasNoManagedHooks as l, readNonEmptyString as lt, buildCodexNativeWebSearchThreadConfig as m, readString as mt, buildTurnStartParams as n, resolveRecoverableCodexPluginConfigKeys as nt, sanitizeInlineImageDataUrl$1 as o, readHookOutputEntries as ot, readCodexInheritedMcpServerNames as p, readNumber as pt, resolveCodexContextEngineProjectionReserveTokens as q, buildCodexUserInput as r, extractRawAssistantText as rt, startOrResumeThread as s, readItem as st, buildTurnCollaborationMode as t, pluginReadParams as tt, attestCodexRingZeroThreadHasNoMcpServers as u, readNonEmptyStringArray as ut, resolveCodexAppServerModelProvider as v, isCodexAppServerProfilerEnabled as w, resolveCodexBindingModelProviderFallback as x, resolveCodexAppServerRequestModelSelection as y, areCodexDynamicToolFingerprintsCompatible as z };