@openclaw/codex 2026.7.2-beta.5 → 2026.7.2-beta.7

package/dist/{protocol-validators-Dm4eXZmt.js → transcript-mirror-DzsdNCf5.js}

@@ -1,5 +1,10 @@
-import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { createHash } from "node:crypto";
+import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { Compile } from "typebox/compile";
+import { Buffer } from "node:buffer";
+import { withCodexSessionTranscriptMirrorWriteLock } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
+import { publishSessionTranscriptUpdateByIdentity } from "openclaw/plugin-sdk/session-transcript-runtime";
 //#region extensions/codex/src/app-server/protocol-generated/json/DynamicToolCallParams.json
 var DynamicToolCallParams_default = {
 	$schema: "http://json-schema.org/draft-07/schema#",
@@ -1043,6 +1048,11 @@ var ThreadResumeResponse_default = {
 					"description": "Identifier for this thread. Codex-generated thread IDs are UUIDv7.",
 					"type": "string"
 				},
+				"isPinned": {
+					"default": false,
+					"description": "Whether the thread has been pinned by the user.",
+					"type": "boolean"
+				},
 				"modelProvider": {
 					"description": "Model provider used for this thread (for example, 'openai').",
 					"type": "string"
@@ -1266,10 +1276,20 @@ var ThreadResumeResponse_default = {
 						"type": ["integer", "null"]
 					},
 					"id": { "type": "string" },
+					"pluginId": {
+						"default": null,
+						"description": "Trusted first-party plugin id when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"processId": {
 						"description": "Identifier for the underlying PTY process (when available).",
 						"type": ["string", "null"]
 					},
+					"scriptPath": {
+						"default": null,
+						"description": "Safe plugin-relative path when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"source": {
 						"allOf": [{ "$ref": "#/definitions/CommandExecutionSource" }],
 						"default": "agent"
@@ -2744,6 +2764,11 @@ var ThreadStartResponse_default = {
 					"description": "Identifier for this thread. Codex-generated thread IDs are UUIDv7.",
 					"type": "string"
 				},
+				"isPinned": {
+					"default": false,
+					"description": "Whether the thread has been pinned by the user.",
+					"type": "boolean"
+				},
 				"modelProvider": {
 					"description": "Model provider used for this thread (for example, 'openai').",
 					"type": "string"
@@ -2967,10 +2992,20 @@ var ThreadStartResponse_default = {
 						"type": ["integer", "null"]
 					},
 					"id": { "type": "string" },
+					"pluginId": {
+						"default": null,
+						"description": "Trusted first-party plugin id when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"processId": {
 						"description": "Identifier for the underlying PTY process (when available).",
 						"type": ["string", "null"]
 					},
+					"scriptPath": {
+						"default": null,
+						"description": "Safe plugin-relative path when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"source": {
 						"allOf": [{ "$ref": "#/definitions/CommandExecutionSource" }],
 						"default": "agent"
@@ -4279,10 +4314,20 @@ var TurnCompletedNotification_default = {
 						"type": ["integer", "null"]
 					},
 					"id": { "type": "string" },
+					"pluginId": {
+						"default": null,
+						"description": "Trusted first-party plugin id when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"processId": {
 						"description": "Identifier for the underlying PTY process (when available).",
 						"type": ["string", "null"]
 					},
+					"scriptPath": {
+						"default": null,
+						"description": "Safe plugin-relative path when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"source": {
 						"allOf": [{ "$ref": "#/definitions/CommandExecutionSource" }],
 						"default": "agent"
@@ -5499,10 +5544,20 @@ var TurnStartResponse_default = {
 						"type": ["integer", "null"]
 					},
 					"id": { "type": "string" },
+					"pluginId": {
+						"default": null,
+						"description": "Trusted first-party plugin id when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"processId": {
 						"description": "Identifier for the underlying PTY process (when available).",
 						"type": ["string", "null"]
 					},
+					"scriptPath": {
+						"default": null,
+						"description": "Safe plugin-relative path when this command resolves to one plugin script.",
+						"type": ["string", "null"]
+					},
 					"source": {
 						"allOf": [{ "$ref": "#/definitions/CommandExecutionSource" }],
 						"default": "agent"
@@ -6334,4 +6389,536 @@ function formatValidationErrors(validate, value) {
 	}).join("; ");
 }
 //#endregion
-export { assertCodexTurnStartResponse as a, readCodexModelListResponse as c, assertCodexThreadStartResponse as i, readCodexTurn as l, assertCodexThreadForkResponse as n, readCodexDynamicToolCallParams as o, assertCodexThreadResumeResponse as r, readCodexErrorNotification as s, assertCodexThreadForkParams as t, readCodexTurnCompletedNotification as u };
+//#region extensions/codex/src/app-server/upstream-prompt-provenance.ts
+const UPSTREAM_USER_TEXT_META_KEY = "upstreamUserText";
+const MIRROR_IDENTITY_META_KEY = "mirrorIdentity";
+function attachCodexMirrorIdentity(message, identity) {
+	const record = message;
+	const existing = record["__openclaw"];
+	const baseMeta = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
+	return {
+		...record,
+		__openclaw: {
+			...baseMeta,
+			[MIRROR_IDENTITY_META_KEY]: identity
+		}
+	};
+}
+function readMirrorIdentity(message) {
+	const meta = message["__openclaw"];
+	if (!meta || typeof meta !== "object" || Array.isArray(meta)) return;
+	const id = meta[MIRROR_IDENTITY_META_KEY];
+	return typeof id === "string" && id ? id : void 0;
+}
+function attachUpstreamUserText(message, text) {
+	const record = message;
+	const existing = record["__openclaw"];
+	const baseMeta = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
+	return {
+		...record,
+		__openclaw: {
+			...baseMeta,
+			[UPSTREAM_USER_TEXT_META_KEY]: text
+		}
+	};
+}
+function readUpstreamUserText(message) {
+	const meta = message?.["__openclaw"];
+	if (!meta || typeof meta !== "object" || Array.isArray(meta)) return;
+	const text = meta[UPSTREAM_USER_TEXT_META_KEY];
+	return typeof text === "string" && text ? text : void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/transcript-mirror-attestation.ts
+const MIRROR_ORIGIN_META_KEY = "mirrorOrigin";
+const MIRROR_SOURCE_FINGERPRINT_META_KEY = "mirrorSourceFingerprint";
+const CODEX_APP_SERVER_MIRROR_ORIGIN = "codex-app-server";
+function attachCodexMirrorAttestation(message, sourceFingerprint) {
+	const record = message;
+	const existing = record["__openclaw"];
+	const baseMeta = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
+	return {
+		...record,
+		__openclaw: {
+			...baseMeta,
+			[MIRROR_ORIGIN_META_KEY]: CODEX_APP_SERVER_MIRROR_ORIGIN,
+			...sourceFingerprint ? { [MIRROR_SOURCE_FINGERPRINT_META_KEY]: sourceFingerprint } : {}
+		}
+	};
+}
+function readCodexMirrorSourceFingerprint(message) {
+	const meta = message["__openclaw"];
+	if (!meta || typeof meta !== "object" || Array.isArray(meta)) return;
+	const value = meta[MIRROR_SOURCE_FINGERPRINT_META_KEY];
+	return typeof value === "string" && value ? value : void 0;
+}
+function serializeCodexMirrorSourceEvidence(message) {
+	const record = message;
+	return JSON.stringify({
+		role: message.role,
+		content: record.content,
+		...message.role === "user" ? { upstreamUserText: readUpstreamUserText(message) } : {},
+		...message.role === "toolResult" ? {
+			toolCallId: record.toolCallId,
+			toolName: record.toolName,
+			isError: record.isError === true
+		} : {}
+	});
+}
+function fingerprintCodexMirrorSourceMessage(message) {
+	return createHash("sha256").update(serializeCodexMirrorSourceEvidence(message)).digest("hex").slice(0, 32);
+}
+//#endregion
+//#region extensions/codex/src/app-server/user-prompt-message.ts
+function buildSenderLabel(params) {
+	const label = params.senderName ?? params.senderUsername ?? params.senderE164 ?? params.senderId;
+	if (!label) return;
+	return !params.senderId || label.includes(params.senderId) ? label : `${label} (${params.senderId})`;
+}
+function buildFromPrepared(params, preparedUserMessage) {
+	const senderId = normalizeOptionalString(params.senderId);
+	const senderName = normalizeOptionalString(params.senderName);
+	const senderUsername = normalizeOptionalString(params.senderUsername);
+	const senderE164 = normalizeOptionalString(params.senderE164);
+	const senderLabel = buildSenderLabel({
+		senderId,
+		senderName,
+		senderUsername,
+		senderE164
+	});
+	const sourceChannel = normalizeOptionalString(params.inputProvenance?.sourceChannel ?? params.messageChannel ?? params.messageProvider);
+	return {
+		role: "user",
+		timestamp: Date.now(),
+		...params.inputProvenance ? { provenance: params.inputProvenance } : {},
+		...sourceChannel ? { sourceChannel } : {},
+		...senderId ? { senderId } : {},
+		...senderName ? { senderName } : {},
+		...senderUsername ? { senderUsername } : {},
+		...senderE164 ? { senderE164 } : {},
+		...senderLabel ? { senderLabel } : {},
+		...preparedUserMessage ? preparedUserMessage : { content: params.prompt }
+	};
+}
+function buildCodexUserPromptMessage(params) {
+	return buildFromPrepared(params, params.userTurnTranscriptRecorder?.message);
+}
+function buildCodexUpstreamPromptMessage(params, identity, upstreamUserText) {
+	const message = attachCodexMirrorIdentity(buildCodexUserPromptMessage(params), identity);
+	return upstreamUserText ? attachUpstreamUserText(message, upstreamUserText) : message;
+}
+function promptSnapshot(params, turnId, upstreamUserText) {
+	return params.suppressNextUserMessagePersistence ? [] : [buildCodexUpstreamPromptMessage(params, `${turnId}:prompt`, upstreamUserText)];
+}
+async function buildResolvedCodexUserPromptMessage(params) {
+	return buildFromPrepared(params, await params.userTurnTranscriptRecorder?.resolveMessage() ?? params.userTurnTranscriptRecorder?.message);
+}
+//#endregion
+//#region extensions/codex/src/app-server/transcript-mirror.ts
+function isMirroredAgentMessage(message) {
+	return message.role === "user" || message.role === "assistant" || message.role === "toolResult";
+}
+const CODEX_HISTORY_IMPORT_MAX_MESSAGES = 200;
+const CODEX_HISTORY_IMPORT_MAX_BYTES = 512 * 1024;
+const CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES = 64 * 1024;
+const CODEX_HISTORY_TRUNCATION_SUFFIX = "\n\n[Message truncated during Codex history import.]";
+const CODEX_HISTORY_ASSISTANT_API = "openai-chatgpt-responses";
+const CODEX_HISTORY_ASSISTANT_PROVIDER = "openai";
+const CODEX_HISTORY_ASSISTANT_MODEL = "native-history";
+const CODEX_HISTORY_ZERO_USAGE = {
+	input: 0,
+	output: 0,
+	cacheRead: 0,
+	cacheWrite: 0,
+	totalTokens: 0,
+	cost: {
+		input: 0,
+		output: 0,
+		cacheRead: 0,
+		cacheWrite: 0,
+		total: 0
+	}
+};
+function isUtf8ContinuationByte(byte) {
+	return byte !== void 0 && (byte & 192) === 128;
+}
+function truncateUtf8Prefix(value, maxBytes) {
+	const bytes = Buffer.from(value);
+	if (bytes.byteLength <= maxBytes) return value;
+	let end = Math.max(0, maxBytes);
+	while (end > 0 && isUtf8ContinuationByte(bytes[end])) end -= 1;
+	return bytes.subarray(0, end).toString("utf8");
+}
+function normalizeImportedHistoryText(value) {
+	if (typeof value !== "string") return;
+	const text = value.trim();
+	if (!text) return;
+	if (Buffer.byteLength(text, "utf8") <= CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES) return text;
+	const suffixBytes = Buffer.byteLength(CODEX_HISTORY_TRUNCATION_SUFFIX, "utf8");
+	return `${truncateUtf8Prefix(text, Math.max(0, CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES - suffixBytes))}${CODEX_HISTORY_TRUNCATION_SUFFIX}`;
+}
+function projectCodexUserItemText(item) {
+	if (!Array.isArray(item.content)) return;
+	const parts = [];
+	for (const value of item.content) {
+		if (!value || typeof value !== "object" || Array.isArray(value)) continue;
+		const input = value;
+		if (input.type === "text") {
+			const text = normalizeImportedHistoryText(input.text);
+			if (text) parts.push(text);
+			continue;
+		}
+		if (input.type === "image" || input.type === "localImage") {
+			parts.push("[Image attachment]");
+			continue;
+		}
+		if (input.type === "skill" || input.type === "mention") {
+			const name = normalizeOptionalString(input.name);
+			if (name) parts.push(`${input.type === "skill" ? "$" : "@"}${name}`);
+		}
+	}
+	return normalizeImportedHistoryText(parts.join("\n"));
+}
+function selectTurnsThroughBoundary(thread, throughTurnId) {
+	if (throughTurnId === null) return [];
+	const turns = thread.turns ?? [];
+	const boundaryIndex = turns.findIndex((turn) => turn.id === throughTurnId);
+	if (boundaryIndex < 0) throw new Error(`Codex history boundary turn not found: ${throughTurnId}`);
+	const boundary = turns[boundaryIndex];
+	if (boundary?.status !== "completed" && boundary?.status !== "interrupted" && boundary?.status !== "failed") throw new Error(`Codex history boundary turn is not terminal: ${throughTurnId}`);
+	return turns.slice(0, boundaryIndex + 1);
+}
+function projectCodexThreadHistory(params) {
+	const projected = [];
+	const threadTimestamp = typeof params.thread.createdAt === "number" && Number.isFinite(params.thread.createdAt) ? params.thread.createdAt * 1e3 : params.importedAt;
+	let itemOffset = 0;
+	for (const turn of selectTurnsThroughBoundary(params.thread, params.throughTurnId)) for (const value of turn.items) {
+		const item = value;
+		const itemId = normalizeOptionalString(item.id);
+		const identity = `${turn.id}:${itemId ?? itemOffset}`;
+		const timestampSeconds = item.type === "agentMessage" ? turn.completedAt ?? turn.startedAt : turn.startedAt ?? turn.completedAt;
+		const timestamp = typeof timestampSeconds === "number" && Number.isFinite(timestampSeconds) ? timestampSeconds * 1e3 + itemOffset : threadTimestamp + itemOffset;
+		const text = item.type === "userMessage" ? projectCodexUserItemText(item) : item.type === "agentMessage" ? normalizeImportedHistoryText(item.text) : void 0;
+		const role = item.type === "userMessage" ? "user" : item.type === "agentMessage" ? "assistant" : void 0;
+		itemOffset += 1;
+		if (!text || !role) continue;
+		const message = role === "assistant" ? attachCodexMirrorIdentity({
+			role,
+			content: [{
+				type: "text",
+				text
+			}],
+			api: CODEX_HISTORY_ASSISTANT_API,
+			provider: normalizeOptionalString(params.modelProvider) ?? normalizeOptionalString(params.thread.modelProvider) ?? CODEX_HISTORY_ASSISTANT_PROVIDER,
+			model: CODEX_HISTORY_ASSISTANT_MODEL,
+			usage: CODEX_HISTORY_ZERO_USAGE,
+			stopReason: "stop",
+			timestamp
+		}, identity) : attachCodexMirrorIdentity({
+			role,
+			content: text,
+			timestamp
+		}, identity);
+		const phase = item.phase === "commentary" || item.phase === "final_answer" ? item.phase : void 0;
+		projected.push({
+			message,
+			responseItem: {
+				type: "message",
+				role,
+				content: [{
+					type: role === "assistant" ? "output_text" : "input_text",
+					text
+				}],
+				...role === "assistant" && phase ? { phase } : {}
+			},
+			textBytes: Buffer.byteLength(text, "utf8")
+		});
+	}
+	return projected;
+}
+function selectBoundedCodexHistoryTail(projected) {
+	const selected = [];
+	let selectedBytes = 0;
+	for (let index = projected.length - 1; index >= 0; index -= 1) {
+		const candidate = projected[index];
+		if (!candidate) continue;
+		if (selected.length >= CODEX_HISTORY_IMPORT_MAX_MESSAGES || selectedBytes + candidate.textBytes > CODEX_HISTORY_IMPORT_MAX_BYTES) break;
+		selected.push(candidate);
+		selectedBytes += candidate.textBytes;
+	}
+	return selected.toReversed();
+}
+/** Projects one terminal Codex history prefix into transcript and Responses API items. */
+function projectBoundedCodexThreadHistory(params) {
+	const projected = projectCodexThreadHistory({
+		thread: params.thread,
+		throughTurnId: params.throughTurnId,
+		importedAt: params.importedAt,
+		...params.modelProvider ? { modelProvider: params.modelProvider } : {}
+	});
+	const selected = selectBoundedCodexHistoryTail(projected);
+	return {
+		importedMessages: selected.length,
+		omittedMessages: projected.length - selected.length,
+		responseItems: selected.map(({ responseItem }) => responseItem),
+		transcriptMessages: selected.map(({ message }) => message)
+	};
+}
+/** Imports a bounded, user-visible Codex history tail into a new OpenClaw transcript. */
+async function importCodexThreadHistoryToTranscript(params) {
+	const projection = projectBoundedCodexThreadHistory({
+		thread: params.thread,
+		throughTurnId: params.throughTurnId,
+		importedAt: Date.now(),
+		...params.modelProvider ? { modelProvider: params.modelProvider } : {}
+	});
+	if (projection.transcriptMessages.length > 0) await mirror({
+		storePath: params.storePath,
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		...params.agentId ? { agentId: params.agentId } : {},
+		...params.cwd ? { cwd: params.cwd } : {},
+		...params.config ? { config: params.config } : {},
+		messages: projection.transcriptMessages,
+		idempotencyScope: `codex-app-server:${params.thread.id}:history`
+	});
+	return {
+		importedMessages: projection.importedMessages,
+		omittedMessages: projection.omittedMessages
+	};
+}
+async function mirrorBestEffort(params) {
+	try {
+		const messages = await resolveFinalCodexMirrorMessages({
+			params: params.params,
+			messagesSnapshot: params.result.messagesSnapshot,
+			turnId: params.turnId
+		});
+		const mirrorResult = await mirror({
+			agentId: params.agentId,
+			sessionKey: params.sessionKey,
+			sessionId: params.params.sessionId,
+			storePath: params.params.sessionTarget?.storePath,
+			cwd: params.cwd,
+			messages,
+			idempotencyScope: `codex-app-server:${params.threadId}`,
+			config: params.params.config
+		});
+		for (const message of mirrorResult.userMessagesPresent) try {
+			params.notifyUserMessagePersisted(message);
+		} catch (error) {
+			embeddedAgentLog.warn("failed to notify codex app-server user-message persistence", { error: formatErrorMessage(error) });
+		}
+		const expectedFingerprints = new Map(messages.flatMap((message) => {
+			if (!isMirroredAgentMessage(message)) return [];
+			const identity = readMirrorIdentity(message);
+			return identity ? [[identity, fingerprintCodexMirrorSourceMessage(message)]] : [];
+		}));
+		const mirroredMessages = mirrorResult.messagesPresent.filter((message) => {
+			const identity = readMirrorIdentity(message);
+			return identity !== void 0 && readCodexMirrorSourceFingerprint(message) === expectedFingerprints.get(identity);
+		});
+		const assistantMirrorIdentity = `${params.turnId}:assistant`;
+		const assistantTranscriptOwned = mirrorResult.assistantMirrorIdentitiesOwned.includes(assistantMirrorIdentity);
+		const assistantTranscriptIdempotencyKey = normalizeOptionalString((assistantTranscriptOwned ? mirroredMessages.find((message) => readMirrorIdentity(message) === assistantMirrorIdentity) : void 0)?.idempotencyKey);
+		return {
+			assistantTranscriptOwned,
+			...assistantTranscriptIdempotencyKey ? { assistantTranscriptIdempotencyKey } : {},
+			mirroredMessages
+		};
+	} catch (error) {
+		embeddedAgentLog.warn("failed to mirror codex app-server transcript", { error });
+		return {
+			assistantTranscriptOwned: false,
+			mirroredMessages: []
+		};
+	}
+}
+async function resolveFinalCodexMirrorMessages(params) {
+	if (params.params.suppressNextUserMessagePersistence || !params.params.userTurnTranscriptRecorder) return params.messagesSnapshot;
+	const promptSnapshot = params.messagesSnapshot.find((message) => message.role === "user");
+	const resolvedBase = attachCodexMirrorIdentity(await buildResolvedCodexUserPromptMessage(params.params), `${params.turnId}:prompt`);
+	const upstreamUserText = readUpstreamUserText(promptSnapshot);
+	const resolvedPrompt = upstreamUserText ? attachUpstreamUserText(resolvedBase, upstreamUserText) : resolvedBase;
+	const firstUserIndex = params.messagesSnapshot.findIndex((message) => message.role === "user");
+	if (firstUserIndex === -1) return [resolvedPrompt, ...params.messagesSnapshot];
+	const messages = params.messagesSnapshot.slice();
+	messages[firstUserIndex] = resolvedPrompt;
+	return messages;
+}
+function createCodexAppServerUserMessagePersistenceNotifier(runParams) {
+	let notified = false;
+	return (message) => {
+		if (notified) return;
+		notified = true;
+		runParams.userTurnTranscriptRecorder?.markRuntimePersisted(message);
+		try {
+			runParams.onUserMessagePersisted?.(message);
+		} catch (error) {
+			embeddedAgentLog.warn("codex app-server user persistence notification failed", { error: formatErrorMessage(error) });
+		}
+	};
+}
+async function mirrorPromptAtTurnStartBestEffort(params) {
+	if (params.params.suppressNextUserMessagePersistence) return;
+	try {
+		const mirrorPromise = (async () => {
+			const userPromptMessage = projectAgentHarnessTranscriptMessageForDisplay({
+				hidden: params.params.trigger === "memory",
+				message: attachUpstreamUserText(attachCodexMirrorIdentity(await buildResolvedCodexUserPromptMessage(params.params), `${params.turnId}:prompt`), params.upstreamUserText)
+			});
+			const mirrorResult = await mirror({
+				agentId: params.agentId,
+				sessionKey: params.sessionKey,
+				sessionId: params.params.sessionId,
+				storePath: params.params.sessionTarget?.storePath,
+				cwd: params.cwd,
+				messages: [userPromptMessage],
+				idempotencyScope: `codex-app-server:${params.threadId}`,
+				config: params.params.config
+			});
+			for (const message of mirrorResult.userMessagesPresent) params.notifyUserMessagePersisted(message);
+		})();
+		params.params.userTurnTranscriptRecorder?.markRuntimePersistencePending(mirrorPromise);
+		await mirrorPromise;
+	} catch (error) {
+		embeddedAgentLog.warn("failed to mirror codex app-server prompt at turn start", { error });
+	}
+}
+function fingerprintMirrorMessageContent(message) {
+	const payload = JSON.stringify({
+		role: message.role,
+		content: message.content
+	});
+	return createHash("sha256").update(payload).digest("hex").slice(0, 16);
+}
+function buildMirrorDedupeIdentity(message) {
+	const explicit = readMirrorIdentity(message);
+	if (explicit) return explicit;
+	return `${message.role}:${fingerprintMirrorMessageContent(message)}`;
+}
+async function mirror(params) {
+	const messages = params.messages.filter(isMirroredAgentMessage);
+	if (messages.length === 0) return {
+		assistantMirrorIdentitiesOwned: [],
+		messagesPresent: [],
+		userMessagesPresent: []
+	};
+	const candidates = messages.map((message) => {
+		const dedupeIdentity = buildMirrorDedupeIdentity(message);
+		const sourceFingerprint = fingerprintCodexMirrorSourceMessage(message);
+		return {
+			dedupeIdentity,
+			idempotencyKey: (message.role === "user" ? normalizeOptionalString(message.idempotencyKey) : void 0) ?? (params.idempotencyScope ? `${params.idempotencyScope}:${dedupeIdentity}` : void 0),
+			message,
+			sourceFingerprint
+		};
+	});
+	const candidateIdempotencyKeys = candidates.flatMap(({ idempotencyKey }) => idempotencyKey ? [idempotencyKey] : []);
+	const transcriptTarget = resolveCodexMirrorTranscriptTarget(params);
+	const { appendedUpdates, assistantMirrorIdentitiesOwned, messagesPresent, userMessagesPresent } = await withCodexSessionTranscriptMirrorWriteLock({
+		...transcriptTarget,
+		config: params.config
+	}, async (transcript) => {
+		const nextAppendedUpdates = [];
+		const nextAssistantMirrorIdentitiesOwned = /* @__PURE__ */ new Set();
+		const nextMessagesPresent = [];
+		const nextUserMessagesPresent = [];
+		const mirrorFacts = await transcript.readMessageFacts({ idempotencyKeys: candidateIdempotencyKeys });
+		for (const { dedupeIdentity, idempotencyKey, message, sourceFingerprint } of candidates) {
+			const transcriptMessage = {
+				...attachCodexMirrorAttestation(message, sourceFingerprint),
+				...idempotencyKey ? { idempotencyKey } : {}
+			};
+			if (idempotencyKey && mirrorFacts.existingIdempotencyKeys.has(idempotencyKey)) {
+				const persistedMessage = mirrorFacts.messagesByIdempotencyKey.get(idempotencyKey);
+				if (persistedMessage && isMirroredAgentMessage(persistedMessage)) {
+					nextMessagesPresent.push(persistedMessage);
+					if (persistedMessage.role === "user") nextUserMessagesPresent.push(persistedMessage);
+				}
+				if (message.role === "assistant") nextAssistantMirrorIdentitiesOwned.add(dedupeIdentity);
+				continue;
+			}
+			const nextMessage = params.skipBeforeMessageWriteHooks ? transcriptMessage : runAgentHarnessBeforeMessageWriteHook({
+				message: transcriptMessage,
+				agentId: params.agentId,
+				sessionKey: params.sessionKey
+			});
+			if (!nextMessage) {
+				if (message.role === "assistant") nextAssistantMirrorIdentitiesOwned.add(dedupeIdentity);
+				continue;
+			}
+			let messageToAppend = idempotencyKey ? {
+				...attachCodexMirrorAttestation(nextMessage, sourceFingerprint),
+				idempotencyKey
+			} : attachCodexMirrorAttestation(nextMessage, sourceFingerprint);
+			const mirrorIdentity = readMirrorIdentity(message);
+			if (mirrorIdentity) messageToAppend = attachCodexMirrorIdentity(messageToAppend, mirrorIdentity);
+			messageToAppend = projectAgentHarnessTranscriptMessageForDisplay({
+				hidden: message.display === false,
+				message: messageToAppend
+			});
+			const { messageSeq, result: appended } = await transcript.appendMessageWithMessageSequence({
+				message: messageToAppend,
+				idempotencyLookup: "scan",
+				cwd: params.cwd
+			});
+			if (!appended) continue;
+			const { messageId, message: appendedMessage } = appended;
+			if (isMirroredAgentMessage(appendedMessage)) {
+				nextMessagesPresent.push(appendedMessage);
+				if (idempotencyKey) mirrorFacts.messagesByIdempotencyKey.set(idempotencyKey, appendedMessage);
+			}
+			if (message.role === "assistant") nextAssistantMirrorIdentitiesOwned.add(dedupeIdentity);
+			if (appendedMessage.role === "user") nextUserMessagesPresent.push(appendedMessage);
+			if (appended.appended) nextAppendedUpdates.push({
+				messageId,
+				message: appendedMessage,
+				...messageSeq !== void 0 ? { messageSeq } : {}
+			});
+			if (idempotencyKey) mirrorFacts.existingIdempotencyKeys.add(idempotencyKey);
+		}
+		return {
+			appendedUpdates: nextAppendedUpdates,
+			assistantMirrorIdentitiesOwned: [...nextAssistantMirrorIdentitiesOwned],
+			messagesPresent: nextMessagesPresent,
+			userMessagesPresent: nextUserMessagesPresent
+		};
+	});
+	for (const update of appendedUpdates) try {
+		await publishSessionTranscriptUpdateByIdentity({
+			...transcriptTarget,
+			update: {
+				...params.agentId ? { agentId: params.agentId } : {},
+				message: update.message,
+				messageId: update.messageId,
+				...update.messageSeq !== void 0 ? { messageSeq: update.messageSeq } : {},
+				sessionKey: transcriptTarget.sessionKey
+			}
+		});
+	} catch (error) {
+		embeddedAgentLog.warn("failed to publish codex app-server transcript update", { error: formatErrorMessage(error) });
+	}
+	return {
+		assistantMirrorIdentitiesOwned,
+		messagesPresent,
+		userMessagesPresent
+	};
+}
+const codexTranscriptMirrorRuntime = {
+	mirror,
+	mirrorBestEffort
+};
+function resolveCodexMirrorTranscriptTarget(params) {
+	const sessionKey = params.sessionKey?.trim();
+	const storePath = params.storePath?.trim();
+	if (!sessionKey || !storePath) throw new Error("Codex transcript mirror requires a runtime session identity");
+	return {
+		...params.agentId ? { agentId: params.agentId } : {},
+		sessionId: params.sessionId,
+		sessionKey,
+		storePath
+	};
+}
+//#endregion
+export { readCodexTurnCompletedNotification as C, readCodexTurn as S, assertCodexThreadStartResponse as _, projectBoundedCodexThreadHistory as a, readCodexErrorNotification as b, fingerprintCodexMirrorSourceMessage as c, attachCodexMirrorIdentity as d, readMirrorIdentity as f, assertCodexThreadResumeResponse as g, assertCodexThreadForkResponse as h, mirrorPromptAtTurnStartBestEffort as i, readCodexMirrorSourceFingerprint as l, assertCodexThreadForkParams as m, createCodexAppServerUserMessagePersistenceNotifier as n, buildCodexUserPromptMessage as o, readUpstreamUserText as p, importCodexThreadHistoryToTranscript as r, promptSnapshot as s, codexTranscriptMirrorRuntime as t, serializeCodexMirrorSourceEvidence as u, assertCodexTurnStartResponse as v, readCodexModelListResponse as x, readCodexDynamicToolCallParams as y };

package/dist/{upstream-session-fork-_Vrz4WJr.js → upstream-session-fork-Dy4Xvuoj.js}

@@ -1,7 +1,7 @@
-import { l as sessionBindingIdentity } from "./session-binding-DlVQ-Pxs.js";
-import { n as assertCodexThreadForkResponse } from "./protocol-validators-Dm4eXZmt.js";
+import { d as sessionBindingIdentity } from "./session-binding-BXpo9ymA.js";
+import { h as assertCodexThreadForkResponse } from "./transcript-mirror-DzsdNCf5.js";
 import { t as isIncognitoSessionKey } from "./incognito-session-ET_ufDH-.js";
-import { i as createImportedCodexSession, n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-QE-m5QFG.js";
+import { i as createImportedCodexSession, n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-B6U7tLw5.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readVisibleSessionTranscriptMessageEntries } from "openclaw/plugin-sdk/session-transcript-runtime";
 import { deleteSessionUpstreamLink, upsertSessionUpstreamLink } from "openclaw/plugin-sdk/session-catalog";

package/dist/{usage-UpVbdX5G.js → usage-CQ6GhD5-.js}

@@ -1,6 +1,6 @@
-import { p as resolveCodexAppServerRuntimeOptions } from "./session-binding-DlVQ-Pxs.js";
-import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-S_PXs0ul.js";
-import { t as readCodexAppServerUsage } from "./request-CXpPennK.js";
+import { g as resolveCodexAppServerRuntimeOptions } from "./session-binding-BXpo9ymA.js";
+import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-CU-gVCCS.js";
+import { t as readCodexAppServerUsage } from "./request-qKh331yu.js";
 import { CODEX_APP_SERVER_AUTH_MARKER } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/usage.ts
 /** Handles the synthetic usage credential for a Codex-backed OpenAI route. */