@openclaw/codex 2026.8.1-beta.2 → 2026.9.1-beta.1

package/dist/context-compaction-activity-BOeJf7yo.js

@@ -0,0 +1,58 @@
+import { embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { appendSessionTranscriptMessageByIdentity, publishSessionTranscriptUpdateByIdentity } from "openclaw/plugin-sdk/session-transcript-runtime";
+//#region extensions/codex/src/app-server/context-compaction-activity.ts
+const CONTEXT_COMPACTION_CUSTOM_TYPE = "openclaw.context-compaction";
+async function persistCodexContextCompactionActivity(params) {
+	const target = params.sessionTarget;
+	if (!target?.sessionId || !target.sessionKey || !target.storePath) return;
+	const activityId = `codex-context-compaction:${params.threadId}:${params.turnId}:${params.itemId}`;
+	const message = {
+		role: "custom",
+		customType: CONTEXT_COMPACTION_CUSTOM_TYPE,
+		content: "Context compacted",
+		display: true,
+		excludeFromContext: true,
+		details: {
+			kind: "context_compaction",
+			backend: "codex-app-server",
+			threadId: params.threadId,
+			turnId: params.turnId,
+			itemId: params.itemId,
+			...params.runId ? { runId: params.runId } : {}
+		},
+		...params.runId ? { __openclaw: { runId: params.runId } } : {},
+		timestamp: params.timestamp,
+		idempotencyKey: activityId
+	};
+	try {
+		const appended = await appendSessionTranscriptMessageByIdentity({
+			agentId: target.agentId,
+			sessionId: target.sessionId,
+			sessionKey: target.sessionKey,
+			storePath: target.storePath,
+			config: params.config,
+			cwd: params.cwd,
+			eventId: activityId,
+			message
+		});
+		if (!appended?.appended) return;
+		await publishSessionTranscriptUpdateByIdentity({
+			agentId: target.agentId,
+			sessionId: target.sessionId,
+			sessionKey: target.sessionKey,
+			storePath: target.storePath,
+			update: {
+				message: appended.message,
+				messageId: appended.messageId,
+				...params.runId ? { runId: params.runId } : {}
+			}
+		});
+	} catch (error) {
+		embeddedAgentLog.warn("failed to persist codex context compaction activity", {
+			error: formatErrorMessage(error),
+			itemId: params.itemId
+		});
+	}
+}
+//#endregion
+export { persistCodexContextCompactionActivity as t };

package/dist/doctor-contract-api.js

@@ -3,8 +3,10 @@ import { asNullableRecord, isRecord } from "openclaw/plugin-sdk/string-coerce-ru
 import fs from "node:fs/promises";
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
-import { canonicalPathFromExistingAncestor, isPathInside, pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { listAgentIds, resolveAgentDir, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-scope-runtime";
+import { pathExists } from "openclaw/plugin-sdk/security-runtime";
+import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
+import { canonicalPathFromExistingAncestor, isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
 import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 //#region extensions/codex/src/migration/session-binding-sidecars.ts
@@ -242,24 +244,23 @@ async function resolveLegacySessionFileLocator(sessionsDir, entry, sessionId) {
 	if (!isPathInside(canonicalBase, canonicalCandidate)) throw new Error("legacy session file locator escapes its session directory");
 	return candidate;
 }
-function resolveLegacyBindingOwnerAgentId(params) {
+function tryResolveLegacyBindingOwnerAgentId(params) {
 	if (params.sessionKey.trim().toLowerCase().startsWith("agent:")) return resolveSessionAgentIds({
 		sessionKey: params.sessionKey,
 		config: params.config
 	}).sessionAgentId;
 	const storeAgentId = params.storeAgentIds?.size === 1 ? [...params.storeAgentIds][0] : void 0;
-	return resolveSessionAgentIds({
-		sessionKey: params.sessionKey,
-		config: params.config,
-		...storeAgentId ? { agentId: storeAgentId } : {}
-	}).sessionAgentId;
-}
-function tryResolveLegacyBindingOwnerAgentId(params) {
-	try {
-		return resolveLegacyBindingOwnerAgentId(params);
+	const configuredAgentId = params.config.agents?.defaults?.systemAgent?.agentId?.trim();
+	const systemAgentId = !storeAgentId && configuredAgentId ? normalizeAgentId(configuredAgentId) : void 0;
+	const fallbackAgentIds = systemAgentId && listAgentIds(params.config).includes(systemAgentId) ? [void 0, systemAgentId] : [void 0];
+	for (const fallbackAgentId of fallbackAgentIds) try {
+		return resolveSessionAgentIds({
+			sessionKey: params.sessionKey,
+			config: params.config,
+			...storeAgentId ? { agentId: storeAgentId } : fallbackAgentId ? { fallbackAgentId } : {}
+		}).sessionAgentId;
 	} catch (error) {
-		if (error.code === "AGENT_SELECTION_REQUIRED") return;
-		throw error;
+		if (error.code !== "AGENT_SELECTION_REQUIRED") throw error;
 	}
 }
 function copyBindingForSession(stored, sessionId) {
@@ -292,7 +293,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-DPxIvMgE.js").then((n) => n.f), import("./conversation-binding-data-CW2GuupV.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Bcynfd-_.js").then((n) => n.f), import("./conversation-binding-data-CW2GuupV.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -536,8 +537,9 @@ function hasLegacyPluginDestructivePolicy(value) {
 	const plugins = asNullableRecord(codexPlugins.plugins);
 	return Object.values(plugins ?? {}).some((plugin) => asNullableRecord(plugin)?.allow_destructive_actions === "on-request");
 }
-function hasRetiredOnFailureApprovalPolicy(value) {
-	return asNullableRecord(value)?.approvalPolicy === "on-failure";
+function hasRetiredApprovalPolicy(value) {
+	const approvalPolicy = asNullableRecord(value)?.approvalPolicy;
+	return approvalPolicy === "on-failure" || approvalPolicy === "untrusted";
 }
 /** Legacy Codex config keys that doctor should report or repair. */
 const legacyConfigRules = [
@@ -570,8 +572,8 @@ const legacyConfigRules = [
 			"config",
 			"appServer"
 		],
-		message: "plugins.entries.codex.config.appServer.approvalPolicy=\"on-failure\" was retired by Codex 0.143; use \"on-request\". Run \"openclaw doctor --fix\".",
-		match: hasRetiredOnFailureApprovalPolicy
+		message: "plugins.entries.codex.config.appServer.approvalPolicy values \"on-failure\" and \"untrusted\" are retired; use \"on-request\". Run \"openclaw doctor --fix\".",
+		match: hasRetiredApprovalPolicy
 	}
 ];
 /**
@@ -583,7 +585,7 @@ function normalizeCompatibilityConfig({ cfg }) {
 	const rawAppServer = asNullableRecord(rawPluginConfig?.appServer);
 	const shouldRemoveDynamicToolsProfile = rawPluginConfig !== null && hasRetiredDynamicToolsProfile(rawPluginConfig);
 	const shouldRewriteDestructivePolicy = hasLegacyPluginDestructivePolicy(rawCodexPlugins);
-	const shouldRewriteApprovalPolicy = hasRetiredOnFailureApprovalPolicy(rawAppServer);
+	const shouldRewriteApprovalPolicy = hasRetiredApprovalPolicy(rawAppServer);
 	if (!rawPluginConfig || !shouldRemoveDynamicToolsProfile && !shouldRewriteDestructivePolicy && !shouldRewriteApprovalPolicy) return {
 		config: cfg,
 		changes: []
@@ -611,8 +613,8 @@ function normalizeCompatibilityConfig({ cfg }) {
 	}
 	if (shouldRewriteApprovalPolicy) {
 		const nextAppServer = asNullableRecord(nextPluginConfig.appServer);
-		if (nextAppServer?.approvalPolicy === "on-failure") nextAppServer.approvalPolicy = "on-request";
-		changes.push("Renamed plugins.entries.codex.config.appServer.approvalPolicy=\"on-failure\" to \"on-request\".");
+		if (nextAppServer?.approvalPolicy === "on-failure" || nextAppServer?.approvalPolicy === "untrusted") nextAppServer.approvalPolicy = "on-request";
+		changes.push("Renamed retired plugins.entries.codex.config.appServer.approvalPolicy to \"on-request\".");
 	}
 	return {
 		config: nextConfig,