@openclaw/codex 2026.8.1 → 2026.8.33

package/dist/{thread-ownership-CeYBqg_4.js → .setup/thread-ownership-B3vjUi0P.mjs}

@@ -1,5 +1,5 @@
-import { Ct as retainCodexAppServerLiveThread, St as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, bt as isCodexAppServerLiveThreadClaimed } from "./shared-client-kNkljY-R.js";
-import { a as closeCodexStartupClientBestEffort, f as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-CVPvp9dL.js";
+import { Ct as retainCodexAppServerLiveThread, St as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, bt as isCodexAppServerLiveThreadClaimed } from "./shared-client-DG1kAfGq.mjs";
+import { a as closeCodexStartupClientBestEffort, f as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-FBnDjmtX.mjs";
 import { isIncognitoSessionKey } from "openclaw/plugin-sdk/routing";
 import { KeyedAsyncQueue } from "openclaw/plugin-sdk/keyed-async-queue";
 //#region extensions/codex/src/app-server/thread-ownership.ts

package/dist/{thread-resume-DF54hagX.js → .setup/thread-resume-OMjvue9F.mjs}

@@ -1,8 +1,8 @@
-import { F as resolveCodexAppServerLocalHomeDir, I as resolveCodexAppServerUserHomeDir, P as resolveCodexAppServerHomeDir } from "./config-Cxw3Cl3k.js";
-import { $ as CodexAppServerRpcError, J as isCodexAppServerOverloadError, P as isCodexAppServerStartupError, Y as isCodexAppServerPrewriteRequestCancellationError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-kNkljY-R.js";
-import { o as assertCodexThreadResumeResponse } from "./protocol-validators-Bg5rpNxk.js";
-import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-CVPvp9dL.js";
-import { t as CodexAppServerScopedRequestRejectedError } from "./request-CCm4LaED.js";
+import { F as resolveCodexAppServerLocalHomeDir, I as resolveCodexAppServerUserHomeDir, P as resolveCodexAppServerHomeDir } from "./config-ClwHKKTN.mjs";
+import { $ as CodexAppServerRpcError, J as isCodexAppServerOverloadError, P as isCodexAppServerStartupError, Y as isCodexAppServerPrewriteRequestCancellationError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-DG1kAfGq.mjs";
+import { o as assertCodexThreadResumeResponse } from "./protocol-validators-Bg5rpNxk.mjs";
+import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-FBnDjmtX.mjs";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-fEUi95EK.mjs";
 import { createRequire } from "node:module";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readPluginPackageVersion } from "openclaw/plugin-sdk/extension-shared";
@@ -16,7 +16,7 @@ import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 * identity and safe to refresh in the background.
 */
 /** Default app inventory cache freshness window. */
-const CODEX_APP_INVENTORY_CACHE_TTL_MS = 3600 * 1e3;
+const CODEX_APP_INVENTORY_CACHE_TTL_MS = 36e5;
 const CODEX_APP_READ_BATCH_LIMIT = 100;
 const MAX_SERIALIZED_ERROR_MESSAGE_LENGTH = 500;
 /** In-memory app inventory cache with coalesced refreshes per key. */
@@ -337,7 +337,8 @@ function isSensitiveErrorDataKey(key) {
 * Builds stable Codex plugin/app inventory cache keys from app-server startup,
 * auth, account, and version inputs without storing secret material.
 */
-const CODEX_PLUGIN_VERSION = readPluginPackageVersion({ require: createRequire(import.meta.url) });
+const require = createRequire(import.meta.url);
+const CODEX_PLUGIN_VERSION = readPluginPackageVersion({ require });
 let catalogConnectionHomes = /* @__PURE__ */ new Map();
 function catalogConnectionHomeKey(fingerprint, agentDir) {
 	return `${agentDir ?? ""}\0${fingerprint}`;

package/dist/{transcript-mirror-CkEQIna-.js → .setup/transcript-mirror-DN-ed7Kf.mjs}

@@ -1,4 +1,4 @@
-import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-CFmsKwr9.js";
+import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { createHash } from "node:crypto";
@@ -8,8 +8,8 @@ import { publishSessionTranscriptUpdateByIdentity } from "openclaw/plugin-sdk/se
 import { Buffer } from "node:buffer";
 //#region extensions/codex/src/app-server/transcript-history-projection.ts
 const CODEX_HISTORY_IMPORT_MAX_MESSAGES = 200;
-const CODEX_HISTORY_IMPORT_MAX_BYTES = 512 * 1024;
-const CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES = 64 * 1024;
+const CODEX_HISTORY_IMPORT_MAX_BYTES = 524288;
+const CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES = 65536;
 const CODEX_HISTORY_TRUNCATION_SUFFIX = "\n\n[Message truncated during Codex history import.]";
 const CODEX_HISTORY_ASSISTANT_API = "openai-chatgpt-responses";
 const CODEX_HISTORY_ASSISTANT_PROVIDER = "openai";
@@ -34,7 +34,8 @@ function normalizeImportedHistoryText(value) {
 	if (!text) return;
 	if (Buffer.byteLength(text, "utf8") <= CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES) return text;
 	const suffixBytes = Buffer.byteLength(CODEX_HISTORY_TRUNCATION_SUFFIX, "utf8");
-	return `${truncateUtf8Prefix(text, Math.max(0, CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES - suffixBytes))}${CODEX_HISTORY_TRUNCATION_SUFFIX}`;
+	const contentLimitBytes = Math.max(0, CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES - suffixBytes);
+	return `${truncateUtf8Prefix(text, contentLimitBytes)}${CODEX_HISTORY_TRUNCATION_SUFFIX}`;
 }
 function projectCodexUserItemText(item) {
 	if (!Array.isArray(item.content)) return;
@@ -183,7 +184,8 @@ function applyCodexTranscriptTaint(message, state) {
 		state.tainted = false;
 		return message;
 	}
-	const metadata = asOptionalRecord(CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0);
+	const existing = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	const metadata = asOptionalRecord(existing);
 	state.tainted ||= metadata?.turnTainted === true || metadata?.resultContentSource === "network";
 	return message.role === "assistant" && state.tainted ? {
 		...message,
@@ -206,7 +208,8 @@ function attachCodexMirrorAttestation(message, sourceFingerprint) {
 	};
 }
 function attachCodexMirrorRunId(message, runId, terminal = false) {
-	const { runTerminal: _staleTerminal, ...current } = asOptionalRecord(CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0) ?? {};
+	const existing = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	const { runTerminal: _staleTerminal, ...current } = asOptionalRecord(existing) ?? {};
 	return {
 		...message,
 		[CODEX_META_KEY]: {
@@ -216,6 +219,10 @@ function attachCodexMirrorRunId(message, runId, terminal = false) {
 		}
 	};
 }
+function hasCodexMirrorOrigin(message) {
+	const meta = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	return asOptionalRecord(meta)?.[MIRROR_ORIGIN_META_KEY] === CODEX_APP_SERVER_MIRROR_ORIGIN;
+}
 function readCodexMirrorSourceFingerprint(message) {
 	const meta = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
 	if (!meta || typeof meta !== "object" || Array.isArray(meta)) return;
@@ -684,4 +691,4 @@ function resolveCodexMirrorTranscriptTarget(params) {
 	};
 }
 //#endregion
-export { buildCodexUserPromptMessage as a, fingerprintCodexMirrorSourceMessage as c, projectBoundedCodexThreadHistory as d, projectBoundedCodexVisibleSessionHistory as f, mirrorPromptAtTurnStartBestEffort as i, readCodexMirrorSourceFingerprint as l, createCodexAppServerUserMessagePersistenceNotifier as n, promptSnapshot as o, projectCodexUserItemText as p, importCodexThreadHistoryToTranscript as r, applyCodexTranscriptTaint as s, codexTranscriptMirrorRuntime as t, serializeCodexMirrorSourceEvidence as u };
+export { buildCodexUserPromptMessage as a, fingerprintCodexMirrorSourceMessage as c, serializeCodexMirrorSourceEvidence as d, projectBoundedCodexThreadHistory as f, mirrorPromptAtTurnStartBestEffort as i, hasCodexMirrorOrigin as l, projectCodexUserItemText as m, createCodexAppServerUserMessagePersistenceNotifier as n, promptSnapshot as o, projectBoundedCodexVisibleSessionHistory as p, importCodexThreadHistoryToTranscript as r, applyCodexTranscriptTaint as s, codexTranscriptMirrorRuntime as t, readCodexMirrorSourceFingerprint as u };

package/dist/{transport-stdio-C7-s9TLG.js → .setup/transport-stdio-Cu0xKDRo.mjs}

@@ -1,15 +1,16 @@
-import { t as normalizeCodexAppServerArgs } from "./launch-args-sXOAg0SX.js";
+import { t as normalizeCodexAppServerArgs } from "./launch-args-sXOAg0SX.mjs";
 import { readFile, readdir } from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { z } from "zod";
 import { execFile, spawn } from "node:child_process";
 import { once } from "node:events";
+import { setImmediate } from "node:timers/promises";
 import { finished } from "node:stream/promises";
 //#region extensions/codex/src/app-server/transport-process-snapshot.ts
 const PROCESS_COLUMNS = "pid=,ppid=,pgid=,stat=,lstart=";
 const MAX_PROCESS_CONTAINMENT_MS$1 = 2e3;
-const PROCESS_INSPECTION_MAX_BYTES = 8 * 1024 * 1024;
+const PROCESS_INSPECTION_MAX_BYTES = 8388608;
 var ProcessInspectionError = class extends Error {
 	constructor(reason) {
 		const detail = {
@@ -46,24 +47,35 @@ async function readCodexAppServerProcess(pid, deadline) {
 		String(pid)
 	], deadline)).find((row) => row.pid === pid);
 }
-async function readCodexAppServerProcessCommand(pid, deadline) {
+async function readCodexAppServerProcessCommand(observed, deadline) {
 	let output;
 	if (process.platform === "linux") {
-		const remainingMs = deadline - Date.now();
-		if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
-		try {
-			output = (await readFile(`/proc/${pid}/cmdline`, {
-				encoding: "utf8",
-				signal: AbortSignal.timeout(remainingMs)
-			})).split("\0").join(" ").trim();
-		} catch (error) {
-			throw inspectionFailure(error);
-		}
+		let pending = false;
+		do {
+			const remainingMs = deadline - Date.now();
+			if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
+			let command;
+			try {
+				command = await readFile(`/proc/${observed.pid}/cmdline`, {
+					encoding: "utf8",
+					signal: AbortSignal.timeout(remainingMs)
+				});
+			} catch (error) {
+				throw inspectionFailure(error);
+			}
+			if (!command || pending) {
+				const current = await readCodexAppServerProcess(observed.pid, deadline);
+				if (!current || current.startedAt !== observed.startedAt || current.ppid !== observed.ppid || current.pgid !== observed.pgid || current.state.startsWith("Z")) throw new ProcessInspectionError("unavailable");
+			}
+			output = command.split("\0").join(" ").trim();
+			pending = command.length === 0;
+			if (pending) await setImmediate();
+		} while (pending);
 	} else output = (await readProcessOutput([
 		"-o",
 		"command=",
 		"-p",
-		String(pid)
+		String(observed.pid)
 	], deadline)).split("\n")[0]?.trim() ?? "";
 	if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
 	if (!output) throw new ProcessInspectionError("unavailable");
@@ -253,13 +265,15 @@ async function containDescendants(child, expected, deadline = Date.now() + MAX_P
 			}
 		};
 	} finally {
-		if (resumeRootOnUnwind) if (expected) {
-			const releaseDeadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS;
-			for (const descendant of stoppedDescendants.values()) await signalSameProcess(descendant, "SIGCONT", releaseDeadline);
-			await signalSameRoot(root, "SIGCONT", releaseDeadline);
-		} else {
-			for (const descendant of stoppedDescendants.values()) signalProcess(descendant.pid, "SIGCONT");
-			resumeTransportRoot(child, root, true);
+		if (resumeRootOnUnwind) {
+			if (expected) {
+				const releaseDeadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS;
+				for (const descendant of stoppedDescendants.values()) await signalSameProcess(descendant, "SIGCONT", releaseDeadline);
+				await signalSameRoot(root, "SIGCONT", releaseDeadline);
+			} else {
+				for (const descendant of stoppedDescendants.values()) signalProcess(descendant.pid, "SIGCONT");
+				resumeTransportRoot(child, root, true);
+			}
 		}
 	}
 }
@@ -425,7 +439,7 @@ async function reapRegisteredCodexAppServerOrphans(requestedDeadline) {
 		if (registration.child.commandFingerprint !== void 0 && child?.startedAt === registration.child.startedAt && !child.state.startsWith("Z")) {
 			let command;
 			try {
-				command = await readCodexAppServerProcessCommand(registration.child.pid, deadline);
+				command = await readCodexAppServerProcessCommand(child, deadline);
 			} catch (error) {
 				if ((await readCodexAppServerProcessSnapshot(deadline, [registration.child.pid])).find((row) => row.pid === registration.child.pid)?.startedAt === registration.child.startedAt) throw error;
 			}
@@ -467,7 +481,7 @@ async function prepareCodexAppServerProcessRegistration() {
 		const parent = snapshot.find((row) => row.pid === process.pid);
 		const spawned = snapshot.find((row) => row.pid === child.pid);
 		if (!parent || !spawned || spawned.ppid !== process.pid) throw new Error("Cannot register the Codex child process: its direct-parent identity is unavailable. Retry.");
-		const command = await readCodexAppServerProcessCommand(spawned.pid, Date.now() + 2e3);
+		const command = await readCodexAppServerProcessCommand(spawned, Date.now() + 2e3);
 		if (child.exitCode !== null || child.signalCode !== null) throw new Error("Cannot register the Codex child process command: the child exited during inspection. Retry.");
 		const key = randomUUID();
 		store.register(key, {
@@ -622,13 +636,15 @@ const DEFAULT_SPAWN_RUNTIME = {
 /** Resolves the concrete command/argv/shell settings used to spawn Codex app-server. */
 function resolveCodexAppServerSpawnInvocation(options, runtime = DEFAULT_SPAWN_RUNTIME) {
 	if (options.commandSource === "managed") throw new Error("Managed Codex app-server start options must be resolved before spawn.");
-	const resolved = materializeWindowsSpawnProgram(resolveWindowsSpawnProgram({
+	const program = resolveWindowsSpawnProgram({
 		command: options.command,
 		platform: runtime.platform,
 		env: runtime.env,
 		execPath: runtime.execPath,
 		packageName: "@openai/codex"
-	}), normalizeCodexAppServerArgs(options.args));
+	});
+	const args = normalizeCodexAppServerArgs(options.args);
+	const resolved = materializeWindowsSpawnProgram(program, args);
 	return {
 		command: resolved.command,
 		args: resolved.argv,

package/dist/{upstream-prompt-provenance-CFmsKwr9.js → .setup/upstream-prompt-provenance-LphB8slG.mjs}

@@ -4,7 +4,8 @@ const UPSTREAM_USER_TEXT_META_KEY = "upstreamUserText";
 const MIRROR_IDENTITY_META_KEY = "mirrorIdentity";
 const CODEX_META_KEY = "__openclaw";
 function attachCodexMirrorIdentity(message, identity) {
-	const baseMeta = asOptionalRecord(CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0) ?? {};
+	const existing = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	const baseMeta = asOptionalRecord(existing) ?? {};
 	return {
 		...message,
 		__openclaw: {
@@ -14,13 +15,15 @@ function attachCodexMirrorIdentity(message, identity) {
 	};
 }
 function readMirrorIdentity(message) {
-	const record = asOptionalRecord(CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0);
+	const meta = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	const record = asOptionalRecord(meta);
 	if (!record) return;
 	const id = record[MIRROR_IDENTITY_META_KEY];
 	return typeof id === "string" && id ? id : void 0;
 }
 function attachUpstreamUserText(message, text) {
-	const baseMeta = asOptionalRecord(CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0) ?? {};
+	const existing = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	const baseMeta = asOptionalRecord(existing) ?? {};
 	return {
 		...message,
 		__openclaw: {
@@ -30,7 +33,8 @@ function attachUpstreamUserText(message, text) {
 	};
 }
 function readUpstreamUserText(message) {
-	const record = asOptionalRecord(message && CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0);
+	const meta = message && CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
+	const record = asOptionalRecord(meta);
 	if (!record) return;
 	const text = record[UPSTREAM_USER_TEXT_META_KEY];
 	return typeof text === "string" && text ? text : void 0;

package/dist/{upstream-session-fork-BACGlOFa.js → .setup/upstream-session-fork-DL7QQ1e_.mjs}

@@ -1,8 +1,8 @@
-import { d as sessionBindingIdentity } from "./session-binding-q2WSTVmC.js";
-import { a as assertCodexThreadForkResponse } from "./protocol-validators-Bg5rpNxk.js";
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-CFmsKwr9.js";
-import { c as fingerprintCodexMirrorSourceMessage, l as readCodexMirrorSourceFingerprint, p as projectCodexUserItemText } from "./transcript-mirror-CkEQIna-.js";
-import { i as createImportedCodexSession, n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-Bcy33kam.js";
+import { d as sessionBindingIdentity } from "./session-binding-Bd9dh1Er.mjs";
+import { a as assertCodexThreadForkResponse } from "./protocol-validators-Bg5rpNxk.mjs";
+import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
+import { c as fingerprintCodexMirrorSourceMessage, m as projectCodexUserItemText, u as readCodexMirrorSourceFingerprint } from "./transcript-mirror-DN-ed7Kf.mjs";
+import { i as createImportedCodexSession, n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-CIgMzZku.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readVisibleSessionTranscriptMessageEntries } from "openclaw/plugin-sdk/session-transcript-runtime";
 import { deleteSessionUpstreamLink, upsertSessionUpstreamLink } from "openclaw/plugin-sdk/session-catalog";
@@ -15,10 +15,7 @@ function failure(code, message) {
 		message
 	};
 }
-function asInputs(item) {
-	return Array.isArray(item.content) ? item.content : [];
-}
-function localMessageText(content) {
+function textOnlyMessage(content) {
 	if (typeof content === "string") return content;
 	if (!Array.isArray(content)) return;
 	const texts = [];
@@ -39,22 +36,19 @@ function resolveCodexUpstreamForkBoundaryFromTurns(params) {
 			if (item.type !== "userMessage") continue;
 			const isSteer = userMessagesInTurn > 0;
 			userMessagesInTurn += 1;
-			if (asInputs(item).some((input) => input.type !== "text")) return failure("drift-mismatch", "A message before the fork point contains images or attachments that cannot be verified across OpenClaw and Codex. Fork from a text-only span instead.");
-			const text = projectCodexUserItemText(item);
-			if (!text) continue;
+			const nativeText = textOnlyMessage(item.content);
+			if (nativeText === void 0) return failure("drift-mismatch", "A message before the fork point contains images or attachments that cannot be verified across OpenClaw and Codex. Fork from a text-only span instead.");
 			const local = params.localPrefix[localIndex];
+			const upstreamText = local && readUpstreamUserText(local.message);
+			const text = upstreamText ? nativeText : projectCodexUserItemText(item);
+			if (!text) continue;
 			const identity = local && readMirrorIdentity(local.message);
 			const matchesIdentity = identity === `${turn.id}:${item.id}` || !isSteer && identity === `${turn.id}:prompt`;
 			if (!matchedPrefix && !matchesIdentity) continue;
 			matchedPrefix = true;
-			const localText = localMessageText(local && "content" in local.message ? local.message.content : void 0);
-			const upstreamText = local && readUpstreamUserText(local.message);
+			const localText = textOnlyMessage(local && "content" in local.message ? local.message.content : void 0);
 			const upstreamPromptVerified = !upstreamText || local?.message.role === "user" && readCodexMirrorSourceFingerprint(local.message) === fingerprintCodexMirrorSourceMessage(local.message);
-			const expectedText = upstreamText ? projectCodexUserItemText({ content: [{
-				type: "text",
-				text: upstreamText
-			}] }) : localText;
-			if (!matchesIdentity || !upstreamPromptVerified || localText === void 0 || text !== expectedText) return failure("drift-mismatch", "The local conversation no longer matches the Codex thread. Refresh the session and try again.");
+			if (!matchesIdentity || !upstreamPromptVerified || localText === void 0 || text !== (upstreamText ?? localText)) return failure("drift-mismatch", "The local conversation no longer matches the Codex thread. Refresh the session and try again.");
 			if (localIndex < params.localPrefix.length - 1) {
 				localIndex += 1;
 				continue;
@@ -118,7 +112,7 @@ async function resolveCodexUpstreamForkBoundary(params) {
 		const target = localPrefix.at(-1)?.message;
 		return resolved.ok ? {
 			...resolved,
-			editorText: localMessageText(target && "content" in target ? target.content : void 0)
+			editorText: textOnlyMessage(target && "content" in target ? target.content : void 0)
 		} : resolved;
 	} catch {
 		return failure("upstream-unavailable", "The Codex thread could not be read. Check that Codex is available, then try again.");

package/dist/{usage-C2l8Mils.js → .setup/usage-dsPLHd8O.mjs}

@@ -1,6 +1,6 @@
-import { i as resolveCodexAppServerRuntimeOptions } from "./config-Cxw3Cl3k.js";
-import { n as readCodexAppServerUsage } from "./request-CCm4LaED.js";
-import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-hFtzt2Up.js";
+import { i as resolveCodexAppServerRuntimeOptions } from "./config-ClwHKKTN.mjs";
+import { n as readCodexAppServerUsage } from "./request-fEUi95EK.mjs";
+import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-CQUmEcUk.mjs";
 import { CODEX_APP_SERVER_AUTH_MARKER } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/usage.ts
 /** Handles the synthetic usage credential for a Codex-backed OpenAI route. */

package/dist/{web-search-provider.runtime-B2XgRdFv.js → .setup/web-search-provider.runtime-BRH3ahFN.mjs}

@@ -1,6 +1,6 @@
-import { Ht as isJsonObject } from "./shared-client-kNkljY-R.js";
-import { b as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-Ss-uwnC4.js";
-import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-rq5tiSXk.js";
+import { Ht as isJsonObject } from "./shared-client-DG1kAfGq.mjs";
+import { S as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-Cc6I-gbl.mjs";
+import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-kWYLbaDH.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
 //#region extensions/codex/src/web-search-provider.runtime.ts

package/dist/api.js

@@ -1,5 +1,5 @@
-import { a as resolveCodexAppServerStartOptionsForAgent, i as resolveCodexAppServerRuntimeOptions } from "./config-Cxw3Cl3k.js";
-import { a as CODEX_APP_SERVER_VERSION, n as resolveManagedCodexAppServerStartOptions, r as resolveManagedCodexNativeCommand, t as isManagedCodexDesktopCommand } from "./managed-binary-ZkGodW19.js";
+import { a as resolveCodexAppServerStartOptionsForAgent, i as resolveCodexAppServerRuntimeOptions } from "./.setup/config-ClwHKKTN.mjs";
+import { a as CODEX_APP_SERVER_VERSION, n as resolveManagedCodexAppServerStartOptions, r as resolveManagedCodexNativeCommand, t as isManagedCodexDesktopCommand } from "./.setup/managed-binary-DlGr2kYu.mjs";
 import path from "node:path";
 import { resolveDefaultModelForAgent } from "openclaw/plugin-sdk/agent-runtime";
 import { listAgentIds as listAgentIds$1, resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-scope-runtime";
@@ -9,7 +9,7 @@ import { resolveEffectiveAgentRuntime } from "openclaw/plugin-sdk/command-auth-n
 //#region extensions/codex/src/doctor.ts
 const CODEX_MANAGED_APP_SERVER_CHECK_ID = "codex/managed-app-server";
 const CODEX_VERSION_TIMEOUT_MS = 5e3;
-const CODEX_VERSION_MAX_BUFFER_BYTES = 64 * 1024;
+const CODEX_VERSION_MAX_BUFFER_BYTES = 65536;
 function managedCodexFinding(params) {
 	return {
 		checkId: CODEX_MANAGED_APP_SERVER_CHECK_ID,
@@ -116,7 +116,7 @@ function createCodexManagedAppServerHealthCheck(params) {
 				})];
 			}
 			const detectedVersion = parseCodexVersion(`${output.stdout}\n${output.stderr}`);
-			if (detectedVersion !== "0.151.0") return [managedCodexFinding({
+			if (detectedVersion !== "0.156.1") return [managedCodexFinding({
 				message: detectedVersion ? `Managed Codex app-server version mismatch: expected ${CODEX_APP_SERVER_VERSION}, detected ${detectedVersion}.` : `Managed Codex app-server did not report a parseable version; expected ${CODEX_APP_SERVER_VERSION}.`,
 				path: nativeCommand,
 				requirement: `the exact OpenClaw-pinned Codex version ${CODEX_APP_SERVER_VERSION}`,

package/dist/cli-metadata.js

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/codex/cli-metadata.ts
 function registerCodexCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./session-cli-BuDjm5Ou.js");
+		const { registerCodexSessionCli } = await import("./.setup/session-cli-mJePHTAs.mjs");
 		registerCodexSessionCli(program);
 	}, { descriptors: [{
 		name: "codex",

package/dist/doctor-contract-api.js

@@ -1,4 +1,4 @@
-import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
+import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./.setup/session-binding-meta-B7aEMU7g.mjs";
 import { asNullableRecord, asOptionalRecord, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -6,9 +6,9 @@ import { createHash } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { listAgentIds, resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
+import { setImmediate } from "node:timers/promises";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { canonicalPathFromExistingAncestor, isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
-import { setImmediate } from "node:timers/promises";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
 import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 //#region extensions/codex/src/migration/session-binding-orphans.ts
@@ -392,7 +392,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-q2WSTVmC.js").then((n) => n.f), import("./conversation-binding-data-CW2GuupV.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./.setup/session-binding-Bd9dh1Er.mjs").then((n) => n.f), import("./.setup/conversation-binding-data-CrcyZk6O.mjs").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -679,7 +679,8 @@ const legacyConfigRules = [
 * Removes retired Codex plugin config keys while preserving unrelated config.
 */
 function normalizeCompatibilityConfig({ cfg }) {
-	const rawPluginConfig = asNullableRecord(asNullableRecord(cfg.plugins?.entries?.codex)?.config);
+	const rawEntry = asNullableRecord(cfg.plugins?.entries?.codex);
+	const rawPluginConfig = asNullableRecord(rawEntry?.config);
 	const rawCodexPlugins = asNullableRecord(rawPluginConfig?.codexPlugins);
 	const rawAppServer = asNullableRecord(rawPluginConfig?.appServer);
 	const shouldRemoveDynamicToolsProfile = rawPluginConfig !== null && hasRetiredDynamicToolsProfile(rawPluginConfig);
@@ -690,7 +691,10 @@ function normalizeCompatibilityConfig({ cfg }) {
 		changes: []
 	};
 	const nextConfig = structuredClone(cfg);
-	const nextPluginConfig = asNullableRecord(asNullableRecord(asNullableRecord(asNullableRecord(nextConfig.plugins)?.entries)?.codex)?.config);
+	const nextPlugins = asNullableRecord(nextConfig.plugins);
+	const nextEntries = asNullableRecord(nextPlugins?.entries);
+	const nextEntry = asNullableRecord(nextEntries?.codex);
+	const nextPluginConfig = asNullableRecord(nextEntry?.config);
 	if (!nextPluginConfig) return {
 		config: cfg,
 		changes: []

package/dist/harness.js

@@ -1,2 +1,2 @@
-import { n as createCodexAppServerNativeCompaction, t as createCodexAppServerAgentHarness } from "./harness-DVfUQBlQ.js";
+import { n as createCodexAppServerNativeCompaction, t as createCodexAppServerAgentHarness } from "./.setup/harness-CawBdltH.mjs";
 export { createCodexAppServerAgentHarness, createCodexAppServerNativeCompaction };