@openclaw/codex 2026.7.2-beta.5 → 2026.8.1-beta.2

package/dist/{session-cli-CqZ0Fp2a.js → session-cli-7hgXZDV7.js}

@@ -1,4 +1,4 @@
-import { a as CODEX_LOCAL_SESSION_HOST_ID } from "./session-catalog-CP2oCcEb.js";
+import { a as CODEX_LOCAL_SESSION_HOST_ID } from "./session-catalog-xwNi_SDM.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";

package/dist/session-retirement-DoMMJFKm.js

@@ -0,0 +1,36 @@
+import { K as releaseCodexAppServerLiveThread, d as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-kIBbGjk4.js";
+import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMLXUfa8.js";
+import { t as isIncognitoSessionKey } from "./incognito-session-ET_ufDH-.js";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-DyTGmTUx.js";
+//#region extensions/codex/src/app-server/session-retirement.ts
+/** Retire binding and native subscription under the same generation/physical-client ownership fence. */
+async function retireCodexAppServerSessionGeneration(params) {
+	const retireGeneration = () => params.mode === "reset" ? params.bindingStore.resetSessionGeneration(params.identity) : params.bindingStore.retireSessionGeneration(params.identity);
+	const expectedBinding = await params.bindingStore.read(params.identity);
+	if (!expectedBinding) return await retireGeneration();
+	return await params.bindingStore.withLease(params.identity, async () => {
+		const binding = await params.bindingStore.read(params.identity);
+		if (binding?.threadId !== expectedBinding.threadId) return "conflict";
+		const result = await retireGeneration();
+		if (result !== "applied" || !binding?.clientId) return result;
+		const clientLease = retainSharedCodexAppServerClientByInstanceId(binding.clientId);
+		if (!clientLease) return result;
+		try {
+			codexNativeSubagentMonitorRuntime.retireParent(clientLease.client, binding.threadId);
+			if (!await releaseCodexAppServerLiveThread(clientLease.client, binding.threadId) && isIncognitoSessionKey(params.identity.sessionKey)) {
+				if (!await unsubscribeCodexThreadBestEffort(clientLease.client, {
+					threadId: binding.threadId,
+					timeoutMs: 5e3
+				})) {
+					await closeCodexStartupClientBestEffort(clientLease.client);
+					throw new CodexAppServerUnsafeSubscriptionError(`Codex retired session subscription could not be released: ${binding.threadId}`);
+				}
+			}
+		} finally {
+			clientLease.release();
+		}
+		return result;
+	});
+}
+//#endregion
+export { retireCodexAppServerSessionGeneration };

package/dist/{session-upstream-marker-QE-m5QFG.js → session-upstream-marker-CrIFX06J.js}

@@ -1,4 +1,4 @@
-import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-uKA-A4tB.js";
+import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-B9gGgnJS.js";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 //#region extensions/codex/src/app-server/session-history-import.ts
 /** Creates a session whose transcript is derived from one verified Codex thread snapshot. */

package/dist/{settled-turn-finalizer-CA_2QXIE.js → settled-turn-finalizer-BRWBO4MO.js}

@@ -1,6 +1,9 @@
-import { c as fingerprintCodexMirrorSourceMessage, d as attachCodexMirrorIdentity, f as readMirrorIdentity, l as readCodexMirrorSourceFingerprint, p as readUpstreamUserText, t as codexTranscriptMirrorRuntime } from "./transcript-mirror-uKA-A4tB.js";
-import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-FEbUXoYT.js";
-import { n as createAssistantMessage } from "./event-projector-assistant-message-DTgnPPVF.js";
+import { ct as isJsonObject } from "./shared-client-kIBbGjk4.js";
+import { i as readUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-ClRBije0.js";
+import { c as readCodexMirrorSourceFingerprint, s as fingerprintCodexMirrorSourceMessage, t as codexTranscriptMirrorRuntime } from "./transcript-mirror-B9gGgnJS.js";
+import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-qgZmzy_4.js";
+import { n as createAssistantMessage } from "./event-projector-assistant-message-BwxV4d6N.js";
+import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { Buffer } from "node:buffer";
 import { isSilentReplyText } from "openclaw/plugin-sdk/reply-runtime";
 //#region extensions/codex/src/app-server/settled-turn-projection.ts
@@ -9,12 +12,6 @@ const MAX_PROJECTION_BYTES = 512 * 1024;
 const MAX_TEXT_BYTES = 64 * 1024;
 const TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]{1,128}$/u;
 const TOOL_ERROR_STATUS_PREFIX = "[Tool result status: error]\n";
-function isRecord(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function readNonEmptyString(value) {
-	return typeof value === "string" ? value.trim() || void 0 : void 0;
-}
 function readBoundedText(value, label, maxBytes = MAX_TEXT_BYTES) {
 	if (typeof value !== "string" || !value.trim()) return;
 	if (Buffer.byteLength(value, "utf8") > maxBytes) throw new Error(`Codex settled-turn projection found oversized ${label}`);
@@ -29,12 +26,12 @@ function responseItemBytes(item) {
 	return Buffer.byteLength(JSON.stringify(item), "utf8");
 }
 function requireCallId(value) {
-	const callId = readNonEmptyString(value);
+	const callId = normalizeOptionalString(value);
 	if (!callId || callId.length > 256) throw new Error("Codex settled-turn projection found an invalid tool call id");
 	return callId;
 }
 function requireToolName(value) {
-	const name = readNonEmptyString(value);
+	const name = normalizeOptionalString(value);
 	if (!name || !TOOL_NAME_PATTERN.test(name)) throw new Error("Codex settled-turn projection found an invalid tool name");
 	return name;
 }
@@ -153,7 +150,7 @@ function projectToolResult(message) {
 	for (const value of message.content) {
 		if (!isRecord(value)) throw new Error("Codex settled-turn projection found malformed tool result content");
 		if (value.type === "image") {
-			const mimeType = readNonEmptyString(value.mimeType) ?? "unknown type";
+			const mimeType = normalizeOptionalString(value.mimeType) ?? "unknown type";
 			parts.push(`[Image tool result: ${mimeType}]`);
 			continue;
 		}
@@ -247,6 +244,7 @@ async function runCodexSettledTurnFinalization(operation, options) {
 			mode: "required",
 			id: attempt.modelId
 		},
+		modelProvider: "openai",
 		profile: attempt.authProfileId,
 		timeoutMs: attempt.runTimeoutOverrideMs ?? attempt.timeoutMs,
 		signal: attempt.abortSignal,
@@ -263,12 +261,35 @@ async function runCodexSettledTurnFinalization(operation, options) {
 		requiredModalities: ["text"],
 		isolation: "private-stdio",
 		historyItems,
-		requireNoExternalCapabilities: true
+		requireNoExternalCapabilities: true,
+		allowEmptyText: true
 	});
-	const unexpectedItem = bounded.items.find((item) => !FINALIZER_PASSIVE_ITEM_TYPES.has(item.type));
+	let promptEchoSeen = false;
+	let unexpectedItem;
+	for (const item of bounded.items) {
+		if (FINALIZER_PASSIVE_ITEM_TYPES.has(item.type)) continue;
+		if (item.type === "userMessage" && !promptEchoSeen) {
+			const content = Array.isArray(item.content) ? item.content : [];
+			const input = content[0];
+			if (content.length === 1 && isJsonObject(input) && input.type === "text" && input.text === attempt.prompt) {
+				promptEchoSeen = true;
+				continue;
+			}
+		}
+		unexpectedItem = item;
+		break;
+	}
 	if (unexpectedItem) throw new Error(`Codex settled-turn finalization returned unexpected native item: ${unexpectedItem.type}`);
 	const text = bounded.text.trim();
-	if (!text || isSilentReplyText(text)) throw new Error("Codex settled-turn finalization completed without a visible answer");
+	if (!text) return {
+		assistant: createAssistantMessage(attempt, "", {
+			tokenUsage: bounded.usage,
+			aborted: false,
+			promptError: null
+		}),
+		...bounded.usage ? { usage: bounded.usage } : {}
+	};
+	if (isSilentReplyText(text)) throw new Error("Codex settled-turn finalization completed without a visible answer");
 	const mirrorIdentity = `settled-finalizer:${attempt.runId}`;
 	const assistant = attachCodexMirrorIdentity(createAssistantMessage(attempt, text, {
 		tokenUsage: bounded.usage,