@openclaw/codex 2026.9.1-beta.1 → 2026.9.2

package/dist/{native-subagent-monitor-4Mfq2HDs.js → native-subagent-monitor-B3bvQGcg.js}

@@ -1,21 +1,17 @@
-import { $ as releaseCodexAppServerLiveThread, et as retainCodexAppServerLiveThread, q as claimCodexAppServerLiveThread, vt as isJsonObject } from "./shared-client-DKz23hHY.js";
-import { A as shouldSynthesizeToolProgressForItem, B as readNullableString$1, C as isSideEffectingNativeToolItem, D as itemTitle, E as itemStatus, F as readItem, L as readNonEmptyString, M as normalizeOptionalString$1, P as readHookOutputEntries, R as readNonEmptyStringArray, S as isNonSuccessItemStatus, T as itemName, k as shouldRecordNativeToolTranscript, w as itemKind, x as isMutatingNativeToolItem, y as auditNativeToolTerminalStatus } from "./attempt-client-cleanup-bfsmcQ6m.js";
-import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-CFmsKwr9.js";
-import { n as sanitizeCodexHistoryImagePayloads } from "./image-payload-sanitizer-CnfoUPCE.js";
+import { B as isJsonObject } from "./config-CyapYSji.js";
+import { Ct as claimCodexAppServerLiveThread, Mt as retainCodexAppServerLiveThread, jt as releaseCodexAppServerLiveThread } from "./shared-client-CKhX2kFt.js";
+import { A as shouldRecordNativeToolTranscript, B as readNonEmptyStringArray, C as isSideEffectingNativeToolItem, D as itemTitle, E as itemStatus, H as readNullableString$1, I as readHookOutputEntries, L as readItem, N as normalizeOptionalString$1, S as isNonSuccessItemStatus, T as itemName, j as shouldSynthesizeToolProgressForItem, w as itemKind, x as isMutatingNativeToolItem, y as auditNativeToolTerminalStatus, z as readNonEmptyString } from "./attempt-client-cleanup-Bp1ZOnk2.js";
+import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
+import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-DWmMqiqW.js";
 import { t as resolveCodexLocalRuntimeAttribution } from "./local-runtime-attribution-B_2mnqhb.js";
-import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-bUm777tR.js";
+import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-aQVdyL5g.js";
 import { asFiniteNumber, asNonArrayRecord, normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
-import fs from "node:fs/promises";
-import path from "node:path";
 import { asDateTimestampMs } from "openclaw/plugin-sdk/number-runtime";
+import path from "node:path";
 import { TOOL_PROGRESS_OUTPUT_MAX_CHARS, embeddedAgentLog, emitAgentEvent, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs, runAgentHarnessAfterToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { getSessionEntry, parseSqliteSessionFileMarker, resolveTranscriptSessionKeyBySessionId } from "openclaw/plugin-sdk/session-store-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
-import { readCodexSessionTranscriptEventsBeforeAdmission } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
-import { readSessionTranscriptEvents } from "openclaw/plugin-sdk/session-transcript-runtime";
 import { KeyedAsyncQueue } from "openclaw/plugin-sdk/keyed-async-queue";
-import { buildSessionContext, migrateSessionEntries, parseSessionEntries } from "openclaw/plugin-sdk/agent-sessions";
 import { createAgentHarnessTaskRuntime, deliverAgentHarnessTaskCompletion, isDurableAgentHarnessCompletionDelivery } from "openclaw/plugin-sdk/agent-harness-task-runtime";
 //#region extensions/codex/src/app-server/event-projector-tool-output.ts
 const TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS = 1e4;
@@ -114,7 +110,8 @@ function appendBoundedToolTranscriptText(currentPrefix, delta, originalLength) {
 	};
 	const textBudget = TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS - notice.length;
 	const remaining = Math.max(0, textBudget - currentPrefix.length);
-	const rawPrefix = truncateUtf16Safe(remaining > 0 ? `${currentPrefix}${truncateUtf16Safe(delta, remaining)}` : currentPrefix, textBudget);
+	const prefix = remaining > 0 ? `${currentPrefix}${truncateUtf16Safe(delta, remaining)}` : currentPrefix;
+	const rawPrefix = truncateUtf16Safe(prefix, textBudget);
 	return {
 		text: `${rawPrefix}${notice}`,
 		rawPrefix
@@ -127,7 +124,8 @@ function truncateToolTranscriptText(text, originalLength = text.length) {
 	if (originalLength <= 1e4 && text.length <= 1e4) return text;
 	const notice = toolTranscriptTruncationNotice(originalLength);
 	if (notice.length >= 1e4) return notice.slice(1, 10001);
-	return `${truncateUtf16Safe(text, TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS - notice.length)}${notice}`;
+	const textBudget = TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS - notice.length;
+	return `${truncateUtf16Safe(text, textBudget)}${notice}`;
 }
 function formatToolSummary(toolName, meta) {
 	const trimmedMeta = meta?.trim();
@@ -570,7 +568,7 @@ var CodexToolProgressProjection = class {
 		const args = itemToolArgs(item);
 		if (!toolName || !shouldEmitTranscriptToolProgress(toolName, args)) return;
 		this.resultSummaryItemIds.add(item.id);
-		const meta = this.shouldEmitToolOutput() || !isCommandBearingToolItem(item, args) ? itemMeta(item, this.toolProgressDetailMode()) : void 0;
+		const meta = this.shouldIncludeFormattedMeta(isCommandBearingToolItem(item, args)) ? itemMeta(item, this.toolProgressDetailMode()) : void 0;
 		this.emitToolResultMessage({
 			itemId: item.id,
 			text: formatToolSummary(toolName, meta)
@@ -582,9 +580,10 @@ var CodexToolProgressProjection = class {
 		const toolName = itemName(item);
 		const output = itemOutputText(item, this.output.textByItem);
 		if (!toolName || !output || !shouldEmitTranscriptToolProgress(toolName, itemToolArgs(item))) return;
+		const meta = this.shouldIncludeFormattedMeta(isCommandBearingToolItem(item, itemToolArgs(item))) ? itemMeta(item, this.toolProgressDetailMode()) : void 0;
 		this.emitToolResultMessage({
 			itemId: item.id,
-			text: formatToolOutput(toolName, itemMeta(item, this.toolProgressDetailMode()), output),
+			text: formatToolOutput(toolName, meta, output),
 			finalOutput: true,
 			isError: isNonSuccessItemStatus(itemStatus(item))
 		});
@@ -643,6 +642,7 @@ var CodexToolProgressProjection = class {
 		try {
 			Promise.resolve(this.params.onToolResult?.({
 				text,
+				...(this.params.messageChannel || this.params.messageProvider) && { channelData: { openclawToolProgressId: params.itemId } },
 				...params.isError === true ? { isError: true } : {}
 			})).catch(() => {});
 		} catch {}
@@ -653,11 +653,15 @@ var CodexToolProgressProjection = class {
 	shouldEmitToolOutput() {
 		return typeof this.params.shouldEmitToolOutput === "function" ? this.params.shouldEmitToolOutput() : this.params.verboseLevel === "full";
 	}
+	shouldIncludeFormattedMeta(commandBearing) {
+		const channel = this.params.messageChannel ?? this.params.messageProvider;
+		return !commandBearing || !channel && this.shouldEmitToolOutput();
+	}
 	emitTranscriptToolCallProgress(params) {
 		if (!shouldEmitTranscriptToolProgress(params.name, params.arguments)) return;
 		this.transcriptProgressCallIds.add(params.id);
 		const args = normalizeToolTranscriptArguments(params.arguments);
-		const meta = this.shouldEmitToolOutput() || !isCodexCommandBearingToolCall(params.name, args) ? inferToolMetaFromArgs(params.name, args, { detailMode: this.toolProgressDetailMode() }) : void 0;
+		const meta = this.shouldIncludeFormattedMeta(isCodexCommandBearingToolCall(params.name, args)) ? inferToolMetaFromArgs(params.name, args, { detailMode: this.toolProgressDetailMode() }) : void 0;
 		if (!this.params.onToolResult || !this.shouldEmitToolResult() || this.resultSummaryItemIds.has(params.id) || this.resultOutputStreamedItemIds.has(params.id)) return;
 		this.resultSummaryItemIds.add(params.id);
 		this.emitToolResultMessage({
@@ -717,85 +721,6 @@ var CodexToolProgressProjection = class {
 	}
 };
 //#endregion
-//#region extensions/codex/src/app-server/session-history.ts
-/**
-* Reads OpenClaw session history for Codex transcript mirroring and sanitizes
-* image payloads before replaying messages into the app-server projector.
-*/
-function isMissingFileError(error) {
-	return Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
-}
-/** Returns sanitized session-context messages for a Codex mirrored session file. */
-async function readCodexMirroredSessionHistoryMessages(target, admission) {
-	try {
-		const entries = await readCodexMirroredSessionEntries(target, admission);
-		if (entries.length === 0) return [];
-		const firstEntry = entries[0];
-		if (firstEntry?.type !== "session") return [];
-		if (typeof firstEntry.id !== "string") return;
-		if (firstEntry.id !== target.sessionId) return [];
-		migrateSessionEntries(entries);
-		return sanitizeCodexHistoryImagePayloads(buildSessionContext(entries.filter((entry) => {
-			return entry !== null && typeof entry === "object" && !Array.isArray(entry) && entry.type !== "session";
-		})).messages, "codex mirrored history");
-	} catch (error) {
-		if (isMissingFileError(error)) return [];
-		return;
-	}
-}
-async function readCodexMirroredSessionEntries(target, admission) {
-	if (target.sessionTarget) {
-		const { agentId, sessionId, sessionKey, storePath } = target.sessionTarget;
-		if (!agentId || !sessionId || !sessionKey || !storePath || sessionId !== target.sessionId || target.agentId !== void 0 && agentId !== target.agentId || target.sessionKey !== void 0 && sessionKey !== target.sessionKey) return [];
-		const transcriptTarget = {
-			agentId,
-			sessionId,
-			sessionKey,
-			storePath
-		};
-		return await (admission ? readCodexSessionTranscriptEventsBeforeAdmission(transcriptTarget, admission) : readSessionTranscriptEvents(transcriptTarget));
-	}
-	const sqliteMarker = parseSqliteSessionFileMarker(target.sessionFile);
-	if (sqliteMarker) {
-		if (sqliteMarker.sessionId !== target.sessionId || target.agentId !== void 0 && sqliteMarker.agentId !== target.agentId) return [];
-		const sessionKey = resolveSqliteMarkerSessionKey(target, sqliteMarker);
-		if (!sessionKey) return [];
-		const transcriptTarget = {
-			agentId: sqliteMarker.agentId,
-			sessionId: sqliteMarker.sessionId,
-			sessionKey,
-			storePath: sqliteMarker.storePath
-		};
-		return await (admission ? readCodexSessionTranscriptEventsBeforeAdmission(transcriptTarget, admission) : readSessionTranscriptEvents(transcriptTarget));
-	}
-	if (admission) {
-		if (admission.sessionId !== target.sessionId || target.agentId !== void 0 && admission.agentId !== target.agentId || target.sessionKey !== void 0 && admission.sessionKey !== target.sessionKey) return [];
-		return await readCodexSessionTranscriptEventsBeforeAdmission({
-			agentId: admission.agentId,
-			sessionId: admission.sessionId,
-			sessionKey: admission.sessionKey,
-			storePath: admission.storePath
-		}, admission);
-	}
-	return parseSessionEntries(await fs.readFile(target.sessionFile, "utf-8"));
-}
-function resolveSqliteMarkerSessionKey(target, marker) {
-	const explicitSessionKey = target.sessionKey?.trim();
-	if (explicitSessionKey) {
-		const explicitEntry = getSessionEntry({
-			agentId: marker.agentId,
-			sessionKey: explicitSessionKey,
-			storePath: marker.storePath
-		});
-		if (explicitEntry) return explicitEntry.sessionId === marker.sessionId ? explicitSessionKey : void 0;
-	}
-	return resolveTranscriptSessionKeyBySessionId({
-		agentId: marker.agentId,
-		sessionId: marker.sessionId,
-		storePath: marker.storePath
-	});
-}
-//#endregion
 //#region extensions/codex/src/app-server/event-projector-tool-transcript.ts
 const ZERO_USAGE = {
 	input: 0,
@@ -866,6 +791,7 @@ var CodexToolTranscriptProjection = class {
 		this.nativeMcpAppResultDetailsAttempted = /* @__PURE__ */ new Set();
 		this.approvalReviewsByCallId = /* @__PURE__ */ new Map();
 		this.rawNativeToolOutputByCallId = /* @__PURE__ */ new Map();
+		this.pendingRawPatchOutputIds = /* @__PURE__ */ new Set();
 		this.codeModeNativePatchInputsByCallId = /* @__PURE__ */ new Map();
 	}
 	get transcriptMessages() {
@@ -969,14 +895,18 @@ var CodexToolTranscriptProjection = class {
 			} catch {
 				return;
 			}
-			if (args) this.recordToolCall({
-				id: callId,
-				name: "apply_patch",
-				arguments: args
-			});
+			if (args) {
+				this.pendingRawPatchOutputIds.add(callId);
+				this.recordToolCall({
+					id: callId,
+					name: "apply_patch",
+					arguments: args
+				});
+			}
 			return;
 		}
 		if (type !== "custom_tool_call_output" && type !== "function_call_output" || this.namesById.get(callId) !== "apply_patch" && !this.codeModeNativePatchInputsByCallId.has(callId)) return;
+		this.pendingRawPatchOutputIds.delete(callId);
 		const text = typeof item.output === "string" ? item.output : Array.isArray(item.output) ? collectDynamicToolContentText(item.output) : "";
 		if (!text.trim()) return;
 		const codeModePatchInput = this.codeModeNativePatchInputsByCallId.get(callId);
@@ -1018,21 +948,20 @@ var CodexToolTranscriptProjection = class {
 			isError: result.isError
 		}).content;
 	}
-	async recordNativeToolResultWithDetails(item) {
+	async prepareNativeToolResultDetails(item) {
 		const preparedDetails = await this.prepareNativeMcpAppResultDetails(item);
 		const approvalReviewState = item ? this.approvalReviewsByCallId.get(item.id) : void 0;
 		const reviewDetails = approvalReviewState ? {
 			approvalReviews: approvalReviewState.reviews,
 			approvalReviewOutcome: toolApprovalReviewOutcome(approvalReviewState)
 		} : void 0;
-		const details = reviewDetails ? isJsonObject(preparedDetails) ? {
+		return reviewDetails ? isJsonObject(preparedDetails) ? {
 			...preparedDetails,
 			...reviewDetails
 		} : {
 			...preparedDetails !== void 0 ? { toolDetails: preparedDetails } : {},
 			...reviewDetails
 		} : preparedDetails;
-		this.recordNativeToolResult(item, details);
 	}
 	async prepareNativeMcpAppResultDetails(item) {
 		if (!item || item.type !== "mcpToolCall" || itemStatus(item) === "running") return;
@@ -1155,26 +1084,34 @@ var CodexToolTranscriptProjection = class {
 		const missingCount = (/* @__PURE__ */ new Set([...missingTranscriptIds, ...missingTrajectoryIds])).size;
 		return missingCount === 1 ? MISSING_TOOL_RESULT_ERROR : `${MISSING_TOOL_RESULT_ERROR} missingToolResultCount=${missingCount}`;
 	}
-	async readMirroredSessionMessages() {
+	async readMirroredSessionMessages(signal) {
 		return await readCodexMirroredSessionHistoryMessages({
 			agentId: this.params.agentId,
 			sessionFile: this.params.sessionFile,
 			sessionId: this.params.sessionId,
-			sessionKey: this.params.sessionKey
-		}) ?? [];
+			sessionKey: this.params.sessionKey,
+			sessionTarget: this.params.sessionTarget
+		}, void 0, "native-evidence", signal) ?? [];
 	}
 	recordToolCall(params) {
 		if (!params.id || !params.name || this.callIds.has(params.id)) return;
 		this.callIds.add(params.id);
 		this.namesById.set(params.id, params.name);
 		this.progress.recordTranscriptCall(params);
-		this.messages.push(attachCodexMirrorIdentity(this.createToolCallMessage(params), `${this.turnId}:tool:${params.id}:call`));
+		const message = attachCodexMirrorIdentity(this.createToolCallMessage(params), `${this.turnId}:tool:${params.id}:call`);
+		this.messages.push(message);
+		this.options.checkpointMessage?.({ read: () => message });
 	}
 	recordToolResult(params) {
 		if (!params.id || !params.name || this.resultIds.has(params.id)) return;
 		this.resultIds.add(params.id);
 		this.progress.recordTranscriptResult(params);
-		this.messages.push(attachCodexMirrorIdentity(this.createToolResultMessage(params), `${this.turnId}:tool:${params.id}:result`));
+		const message = attachCodexMirrorIdentity(this.createToolResultMessage(params), `${this.turnId}:tool:${params.id}:result`);
+		this.messages.push(message);
+		this.options.checkpointMessage?.({
+			read: () => message,
+			ready: () => !this.pendingRawPatchOutputIds.has(params.id)
+		});
 	}
 	recordMissingToolError(missingTranscriptIds, missingTrajectoryIds) {
 		const firstMissingId = missingTranscriptIds.find((id) => Boolean(this.namesById.get(id))) ?? missingTrajectoryIds.find((id) => Boolean(this.trajectoryNamesById.get(id) ?? this.namesById.get(id)));
@@ -1288,6 +1225,7 @@ function normalizeApprovalReviewStatus(status) {
 	return status === "inProgress" ? "in_progress" : status === "timedOut" ? "timed_out" : status;
 }
 const GUARDIAN_TIMEOUT_WARNING = "Automatic approval review timed out while evaluating the requested approval.";
+const LOG_ONLY_CODEX_WARNING_PATTERNS = [/^Configured service tier `[^`\r\n]+` is not advertised as supported for model `[^`\r\n]+` and will be omitted from requests\.$/, /^Code Mode is enabled in configuration, but model `[^`\r\n]+` does not advertise Code Mode support\. This may degrade model performance\. Disable `features\.code_mode` and `features\.code_mode_only`, or select a model whose metadata enables Code Mode\.$/];
 function projectNormalizedToolItem(params) {
 	const { item } = params;
 	if (!item || !shouldSynthesizeToolProgressForItem(item)) return;
@@ -1429,7 +1367,8 @@ var CodexEventProjection = class {
 	}
 	handleWarning(params) {
 		const message = [readStringField(params, "summary") ?? readStringField(params, "message"), readStringField(params, "details")].filter(Boolean).join("\n");
-		if (message) this.emitAgentEvent({
+		if (LOG_ONLY_CODEX_WARNING_PATTERNS.some((pattern) => pattern.test(message))) embeddedAgentLog.warn(message);
+		else if (message) this.emitAgentEvent({
 			stream: "notice",
 			data: {
 				phase: "warning",
@@ -2347,19 +2286,21 @@ var Monitor = class {
 		if (childState && !childState.terminal) this.emitChildTaskActivity(notification, childState);
 		this.captureChildAssistantMessage(notification);
 		await this.handleChildTurnCompletion(notification);
-		if (notification.method === "thread/status/changed" && threadId && threadStatus) if (threadStatus !== "systemerror") {
-			if (childState) this.clearSystemErrorFallback(childState);
-		} else {
-			if (childState) {
-				this.resumeChild(childState, { scheduleRecovery: false });
-				this.setRecoveryFallback(childState, systemErrorFallbackCompletion(childState.childThreadId), this.now());
+		if (notification.method === "thread/status/changed" && threadId && threadStatus) {
+			if (threadStatus !== "systemerror") {
+				if (childState) this.clearSystemErrorFallback(childState);
+			} else {
+				if (childState) {
+					this.resumeChild(childState, { scheduleRecovery: false });
+					this.setRecoveryFallback(childState, systemErrorFallbackCompletion(childState.childThreadId), this.now());
+				}
+				this.reconcileChildThread(threadId).catch((error) => {
+					this.logRecoveryFailure(threadId, error);
+					return false;
+				}).then((reconciled) => {
+					if (!reconciled && childState && this.childStates.get(threadId) === childState) this.scheduleRecoveryPoll(childState);
+				});
 			}
-			this.reconcileChildThread(threadId).catch((error) => {
-				this.logRecoveryFailure(threadId, error);
-				return false;
-			}).then((reconciled) => {
-				if (!reconciled && childState && this.childStates.get(threadId) === childState) this.scheduleRecoveryPoll(childState);
-			});
 		}
 		await this.handleCompletionNotification(notification);
 	}
@@ -3379,4 +3320,4 @@ function unrefTimer(timer) {
 	if (typeof timer === "object" && timer && "unref" in timer) timer.unref();
 }
 //#endregion
-export { readCodexMirroredSessionHistoryMessages as a, inferCodexDynamicToolMeta as c, sanitizeCodexToolArguments as d, sanitizeCodexToolResponse as f, CodexToolTranscriptProjection as i, isCodexCommandBearingToolCall as l, CodexEventProjection as n, CodexToolProgressProjection as o, emitCodexAgentEvent as r, shouldEmitTranscriptToolProgress as s, codexNativeSubagentMonitorRuntime as t, resolveCodexToolProgressDetailMode as u };
+export { CodexToolProgressProjection as a, isCodexCommandBearingToolCall as c, sanitizeCodexToolResponse as d, CodexToolTranscriptProjection as i, resolveCodexToolProgressDetailMode as l, CodexEventProjection as n, shouldEmitTranscriptToolProgress as o, emitCodexAgentEvent as r, inferCodexDynamicToolMeta as s, codexNativeSubagentMonitorRuntime as t, sanitizeCodexToolArguments as u };

package/dist/{node-exec-server.runtime-BpWqJO1V.js → node-exec-server.runtime-nfbUOtUB.js}

@@ -1,15 +1,14 @@
-import { W as closeCodexAppServerTransportAndWait } from "./shared-client-DKz23hHY.js";
-import { n as resolveManagedCodexAppServerStartOptions, r as resolveManagedCodexNativeCommand, t as isManagedCodexDesktopCommand } from "./managed-binary-DFYK4DWq.js";
-import { t as createStdioTransport } from "./transport-stdio-DhoGy33Z.js";
+import { n as resolveManagedCodexAppServerStartOptions, r as resolveManagedCodexNativeCommand, t as isManagedCodexDesktopCommand } from "./managed-binary-DcpnJF9x.js";
+import { i as closeCodexAppServerTransportAndWait, t as createStdioTransport } from "./transport-stdio-CzTngV0j.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { killProcessTree } from "openclaw/plugin-sdk/process-runtime";
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import { resolvePreferredOpenClawTmpDir, withTempWorkspace } from "openclaw/plugin-sdk/temp-path";
-import { killProcessTree } from "openclaw/plugin-sdk/process-runtime";
 import { once } from "node:events";
 import { sanitizeEnvVars } from "openclaw/plugin-sdk/sandbox";
 //#region extensions/codex/src/node-exec-server.runtime.ts
-const MAX_CODEX_EXEC_SERVER_MESSAGE_BYTES = 64 * 1024 * 1024;
+const MAX_CODEX_EXEC_SERVER_MESSAGE_BYTES = 67108864;
 const CODEX_EXEC_SERVER_TERMINATION_GRACE_MS = 1e3;
 const CODEX_EXEC_SERVER_REAP_TIMEOUT_MS = 5e3;
 const NODE_EXEC_SERVER_PLATFORM_ENVIRONMENT = /^(?:SYSTEMROOT|WINDIR|COMSPEC|PATHEXT|TEMP|TMP|TMPDIR)$/iu;
@@ -125,7 +124,8 @@ async function runCodexNodeExecServer(params) {
 				customAllowedPatterns: [NODE_EXEC_SERVER_PLATFORM_ENVIRONMENT]
 			}).allowed;
 			if (io.signal.aborted) throw nodeExecServerAbortError(io.signal);
-			const child = createStdioTransport({
+			params.assertExecAuthorized();
+			const child = await createStdioTransport({
 				transport: "stdio",
 				command: native,
 				commandSource: "resolved-managed",
@@ -138,7 +138,10 @@ async function runCodexNodeExecServer(params) {
 					...process.platform === "win32" ? { USERPROFILE: dir } : {}
 				},
 				clearEnv: ["NODE_OPTIONS"]
-			}, baseEnv);
+			}, baseEnv, () => {
+				if (io.signal.aborted) throw nodeExecServerAbortError(io.signal);
+				params.assertExecAuthorized();
+			});
 			child.stdin.on("error", (error) => {
 				rejectDisconnected(error);
 			});

package/dist/{plugin-approval-roundtrip-bUm777tR.js → plugin-approval-roundtrip-aQVdyL5g.js}

@@ -1,10 +1,10 @@
-import { D as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-DKz23hHY.js";
+import { N as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-CKhX2kFt.js";
 import { isApprovalNotFoundError, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/codex/src/app-server/plugin-approval-roundtrip.ts
 const DEFAULT_CODEX_APPROVAL_TIMEOUT_MS = 12e4;
 const MAX_PLUGIN_APPROVAL_TITLE_LENGTH = 80;
-const MAX_PLUGIN_APPROVAL_DESCRIPTION_LENGTH = 256;
+const MAX_PLUGIN_APPROVAL_DESCRIPTION_LENGTH = 512;
 const ANSI_OSC_SEQUENCE_RE = new RegExp(String.raw`(?:\u001b]|\u009d)[^\u001b\u009c\u0007]*(?:\u0007|\u001b\\|\u009c)`, "g");
 const ANSI_CONTROL_SEQUENCE_RE = new RegExp(String.raw`(?:\u001b\[[0-?]*[ -/]*[@-~]|\u009b[0-?]*[ -/]*[@-~]|\u001b[@-Z\\-_])`, "g");
 const CONTROL_CHARACTER_RE = new RegExp(String.raw`[\u0000-\u001f\u007f-\u009f]+`, "g");
@@ -23,11 +23,16 @@ function codexApprovalTimeoutText(kind) {
 async function requestPluginApproval(params) {
 	const timeoutMs = DEFAULT_CODEX_APPROVAL_TIMEOUT_MS;
 	return params.hostCapabilities.requestApproval({
+		signal: params.signal,
 		title: truncateCodexApprovalDisplayText(params.title, MAX_PLUGIN_APPROVAL_TITLE_LENGTH),
 		description: truncateCodexApprovalDisplayText(params.description, MAX_PLUGIN_APPROVAL_DESCRIPTION_LENGTH),
 		severity: params.severity,
 		toolName: params.toolName,
 		toolCallId: params.toolCallId,
+		...params.mcpTool ? {
+			mcpTool: params.mcpTool,
+			isMcpToolApprovalActive: params.isMcpToolApprovalActive
+		} : {},
 		timeoutMs,
 		transportTimeoutMs: resolveCodexGatewayTimeoutWithGraceMs(timeoutMs),
 		...params.allowedDecisions ? { allowedDecisions: params.allowedDecisions } : {}
@@ -81,6 +86,28 @@ function mapExecDecisionToOutcome(decision) {
 		default: return "unavailable";
 	}
 }
+/** Runs one complete host approval request and maps transport failures to a closed outcome. */
+async function requestPluginApprovalOutcome(params) {
+	try {
+		const requestResult = await requestPluginApproval({
+			...params,
+			severity: "warning"
+		});
+		const approvalId = requestResult?.id;
+		if (!approvalId) return "unavailable";
+		const approvalResult = approvalRequestExplicitlyUnavailable(requestResult) ? void 0 : await waitForPluginApprovalDecision({
+			hostCapabilities: params.hostCapabilities,
+			approvalId,
+			signal: params.signal
+		});
+		if (params.signal?.aborted) return "cancelled";
+		if (approvalResult?.terminalReason === "timeout") return "timed-out";
+		const decision = approvalResult?.decision;
+		return mapExecDecisionToOutcome(decision === "allow-always" && params.allowedDecisions?.includes("allow-always") === false ? "allow-once" : decision);
+	} catch {
+		return params.signal?.aborted ? "cancelled" : "denied";
+	}
+}
 function truncateCodexApprovalDisplayText(value, maxLength) {
 	return value.length <= maxLength ? value : `${truncateUtf16Safe(value, maxLength - 3)}...`;
 }
@@ -92,4 +119,4 @@ function sanitizeCodexApprovalVisibleText(value, options = {}) {
 	return (options.stripDanglingTerminalSequence ? stripDanglingCodexApprovalTerminalSequence(terminalSafe) : terminalSafe).replace(INVISIBLE_FORMATTING_CONTROL_RE, " ").replace(CONTROL_CHARACTER_RE, " ").replace(/\s+/g, " ").trim();
 }
 //#endregion
-export { sanitizeCodexApprovalVisibleText as a, waitForPluginApprovalDecision as c, requestPluginApproval as i, codexApprovalTimeoutText as n, stripDanglingCodexApprovalTerminalSequence as o, mapExecDecisionToOutcome as r, truncateCodexApprovalDisplayText as s, approvalRequestExplicitlyUnavailable as t };
+export { requestPluginApprovalOutcome as a, truncateCodexApprovalDisplayText as c, requestPluginApproval as i, waitForPluginApprovalDecision as l, codexApprovalTimeoutText as n, sanitizeCodexApprovalVisibleText as o, mapExecDecisionToOutcome as r, stripDanglingCodexApprovalTerminalSequence as s, approvalRequestExplicitlyUnavailable as t };

package/dist/{plugin-marketplace-discovery-B9DvaAG-.js → plugin-marketplace-discovery-B7gHXJ3d.js}

@@ -1,12 +1,14 @@
-import { N as isCodexFastServiceTier } from "./config-giW8X0QA.js";
-import { o as getLeasedSharedCodexAppServerClient, p as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DKz23hHY.js";
-import { o as isCodexAppServerNativeAuthProfile, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-Bcynfd-_.js";
-import { B as resolveCodexAppServerRequestModelSelection, H as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-L7oEkTlq.js";
-import { r as formatCodexDisplayText } from "./command-formatters-DEsIufkt.js";
-import { n as resolveCodexBindingAppServerConnection } from "./binding-connection-BMvPX73o.js";
+import { n as isCodexFastServiceTier } from "./config-utils-C57JiJrU.js";
+import { t as bindingStoreKey } from "./session-binding-record-CyaXZvTe.js";
+import "./config-CyapYSji.js";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CKhX2kFt.js";
+import { a as isCodexAppServerNativeAuthProfile, o as normalizeCodexAppServerBindingModelProvider } from "./session-binding-4Ki04sW-.js";
+import { E as resolveCodexAppServerRequestModelSelection, O as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-DPK30jad.js";
+import { s as resolveCodexBindingAppServerConnection } from "./thread-policy-CTalhWFy.js";
+import { a as formatCodexDisplayText } from "./command-formatters-DSbGMXA0.js";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";
@@ -44,7 +46,7 @@ async function stopCodexConversationTurn(params) {
 		message: "No active Codex run to stop."
 	};
 	const lookup = buildBindingLookup(params);
-	const binding = await params.bindingStore.read(params.identity);
+	const binding = params.binding;
 	if (binding?.threadId !== active.threadId) return {
 		stopped: false,
 		message: "The active Codex run no longer matches this session binding."
@@ -65,7 +67,10 @@ async function stopCodexConversationTurn(params) {
 		await client.request("turn/interrupt", {
 			threadId: active.threadId,
 			turnId: active.turnId
-		}, { timeoutMs: runtime.requestTimeoutMs });
+		}, {
+			timeoutMs: runtime.requestTimeoutMs,
+			assertCurrent: params.assertCurrent
+		});
 	} finally {
 		if (!active.client) releaseLeasedSharedCodexAppServerClient(client);
 	}
@@ -86,7 +91,7 @@ async function steerCodexConversationTurn(params) {
 		message: "No active Codex run to steer."
 	};
 	const lookup = buildBindingLookup(params);
-	const binding = await params.bindingStore.read(params.identity);
+	const binding = params.binding;
 	if (binding?.threadId !== active.threadId) return {
 		steered: false,
 		message: "The active Codex run no longer matches this session binding."
@@ -112,7 +117,10 @@ async function steerCodexConversationTurn(params) {
 				text,
 				text_elements: []
 			}]
-		}, { timeoutMs: runtime.requestTimeoutMs });
+		}, {
+			timeoutMs: runtime.requestTimeoutMs,
+			assertCurrent: params.assertCurrent
+		});
 	} finally {
 		if (!active.client) releaseLeasedSharedCodexAppServerClient(client);
 	}
@@ -125,17 +133,19 @@ async function setCodexConversationModel(params) {
 	const model = params.model.trim();
 	if (!model) return "Usage: /codex model <model>";
 	const lookup = buildBindingLookup(params);
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
+	params.assertCurrent();
+	const binding = requirePreparedThreadBinding(params.binding);
 	if (binding.connectionScope === "supervision") throw new ModelSelectionLockedError();
+	const modelProvider = resolveConversationControlModelProvider({
+		authProfileId: binding.authProfileId,
+		bindingModel: binding.model,
+		bindingModelProvider: binding.modelProvider,
+		currentModel: model,
+		...lookup
+	});
 	const modelSelection = resolveCodexAppServerRequestModelSelection({
 		model,
-		modelProvider: resolveConversationControlModelProvider({
-			authProfileId: binding.authProfileId,
-			bindingModel: binding.model,
-			bindingModelProvider: binding.modelProvider,
-			currentModel: model,
-			...lookup
-		}),
+		modelProvider,
 		authProfileId: binding.authProfileId,
 		...lookup
 	});
@@ -154,10 +164,11 @@ async function setCodexConversationModel(params) {
 	if (identity.kind === "session" && identity.sessionKey) {
 		if (!await patchSessionEntry({
 			agentId: identity.agentId,
-			storePath: resolveStorePath(params.config?.session?.store, { agentId: identity.agentId }),
+			storePath: params.storePath ?? resolveStorePath(params.config?.session?.store, { agentId: identity.agentId }),
 			sessionKey: identity.sessionKey,
 			requireWriteSuccess: true,
 			replaceEntry: true,
+			assertCommitAllowed: params.assertCurrent,
 			update: (entry) => {
 				if (entry.sessionId !== identity.sessionId) throw new Error("Codex session changed while applying the model selection.");
 				applyModelOverrideWithAuthProfileCompatibility({
@@ -174,23 +185,25 @@ async function setCodexConversationModel(params) {
 				return entry;
 			}
 		})) throw new Error("Codex session changed while applying the model selection.");
-		if (modelChanged && binding.contextEngine?.projection) await patchThreadBinding(params.bindingStore, identity, binding.threadId, projectionPatch);
+		if (modelChanged && binding.contextEngine?.projection) await patchThreadBinding(params.bindingStore, identity, binding.threadId, projectionPatch, params.assertCurrent);
 	} else await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, {
 		model: nextModel,
 		modelProvider: nextModelProvider,
 		...projectionPatch
-	});
+	}, params.assertCurrent);
 	return `Codex model set to ${formatCodexDisplayText(nextModel)}.`;
 }
 async function setCodexConversationFastMode(params) {
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
+	params.assertCurrent();
+	const binding = requirePreparedThreadBinding(params.binding);
 	if (params.enabled == null) return `Codex fast mode: ${isCodexFastServiceTier(binding.serviceTier) ? "on" : "off"}.`;
 	const serviceTier = params.enabled ? "priority" : "flex";
-	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, { serviceTier });
+	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, { serviceTier }, params.assertCurrent);
 	return `Codex fast mode ${params.enabled ? "enabled" : "disabled"}.`;
 }
 async function setCodexConversationPermissions(params) {
-	const storePath = resolveStorePath(params.config?.session?.store, { agentId: params.session.agentId });
+	params.assertCurrent();
+	const storePath = params.storePath ?? resolveStorePath(params.config?.session?.store, { agentId: params.session.agentId });
 	if (!params.mode) {
 		const entry = getSessionEntry({
 			agentId: params.session.agentId,
@@ -199,6 +212,7 @@ async function setCodexConversationPermissions(params) {
 			sessionKey: params.session.sessionKey,
 			storePath
 		});
+		params.assertCurrent();
 		if (entry?.sessionId !== params.session.sessionId) throw new Error("Codex session changed while reading the permission mode.");
 		return `Codex permissions: ${formatPermissionsMode(entry.permissionMode)}.`;
 	}
@@ -208,13 +222,14 @@ async function setCodexConversationPermissions(params) {
 		sessionKey: params.session.sessionKey,
 		requireWriteSuccess: true,
 		replaceEntry: true,
+		assertCommitAllowed: params.assertCurrent,
 		update: (entry) => {
 			if (entry.sessionId !== params.session.sessionId) throw new Error("Codex session changed while applying the permission mode.");
 			entry.permissionMode = params.mode === "yolo" ? "full" : "guarded";
 			return entry;
 		}
 	})) throw new Error("Codex session changed while applying the permission mode.");
-	return `Codex permissions set to ${params.mode === "yolo" ? "full access" : "default"}.`;
+	return `Codex permissions set to ${params.mode === "yolo" ? "full access" : "guarded"}.`;
 }
 function parseCodexFastModeArg(arg) {
 	const normalized = arg?.trim().toLowerCase();
@@ -236,17 +251,16 @@ function parseCodexPermissionsModeArg(arg) {
 function formatPermissionsMode(mode) {
 	return mode === "full" ? "full access" : mode ?? "default";
 }
-async function requireThreadBinding(bindingStore, identity) {
-	const binding = await bindingStore.read(identity);
+function requirePreparedThreadBinding(binding) {
 	if (!binding?.threadId) throw new Error("No Codex thread is attached to this OpenClaw session yet.");
 	return binding;
 }
-async function patchThreadBinding(bindingStore, identity, threadId, patch) {
+async function patchThreadBinding(bindingStore, identity, threadId, patch, assertCurrent) {
 	if (!await bindingStore.mutate(identity, {
 		kind: "patch",
 		threadId,
 		patch
-	})) throw new Error("Codex thread binding changed while applying the control update.");
+	}, assertCurrent)) throw new Error("Codex thread binding changed while applying the control update.");
 }
 function buildBindingLookup(params) {
 	const agentDir = params.agentDir?.trim();

package/dist/{plugin-metadata-cache-CTCT3w5L.js → plugin-metadata-cache-BwCLTY_U.js}

@@ -1,8 +1,8 @@
-import { i as resolveCodexAppServerRuntimeOptions, o as resolveCodexComputerUseConfig } from "./config-giW8X0QA.js";
-import { L as isCodexAppServerConnectionClosedError, R as isCodexAppServerIndeterminateRequestCancellationError, S as acquireCodexNativeConfigFence, b as waitForCodexAppServerClientDesktopGenerationDrain, bt as assertNotSymlink, c as isCodexAppServerStartSelectionChangedError, d as readCodexAppServerClientProcessIdentity, l as readCodexAppServerClientDesktopGeneration, m as resolveCodexNativeConfigFenceKey, o as getLeasedSharedCodexAppServerClient, p as releaseLeasedSharedCodexAppServerClient, st as reconcileCodexComputerUseStartArtifacts, t as assertCodexAppServerClientStartSelectionCurrent, xt as resolveCodexAppServerHomeDir, yt as resolveCodexManagedBundledMarketplacePath, z as isCodexAppServerIndeterminateTransportError } from "./shared-client-DKz23hHY.js";
-import { l as resolveMacOSDesktopCodexBundledMarketplaceCandidates, s as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, t as isManagedCodexDesktopCommand } from "./managed-binary-DFYK4DWq.js";
-import { n as describeControlFailure } from "./capabilities-BRMh0aIq.js";
-import { r as requestCodexAppServerJson } from "./request-DXXGHko0.js";
+import { M as resolveCodexAppServerHomeDir, i as resolveCodexAppServerRuntimeOptions, o as resolveCodexComputerUseConfig } from "./config-CyapYSji.js";
+import { B as isCodexAppServerIndeterminateRequestCancellationError, D as acquireCodexNativeConfigFence, Jt as assertNotSymlink, S as waitForCodexAppServerClientDesktopGenerationDrain, V as isCodexAppServerIndeterminateTransportError, c as getLeasedSharedCodexAppServerClient, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, p as readCodexAppServerClientProcessIdentity, qt as resolveCodexManagedBundledMarketplacePath, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, z as isCodexAppServerConnectionClosedError, zt as reconcileCodexComputerUseStartArtifacts } from "./shared-client-CKhX2kFt.js";
+import { c as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, t as isManagedCodexDesktopCommand, u as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-DcpnJF9x.js";
+import { i as requestCodexAppServerJson } from "./request-C8H22rPi.js";
+import { n as describeControlFailure } from "./capabilities-B1mgvpP8.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { existsSync } from "node:fs";
@@ -721,7 +721,7 @@ function resolveComputerUseConfig(params) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/plugin-metadata-cache.ts
-const CODEX_PLUGIN_METADATA_CACHE_TTL_MS = 3600 * 1e3;
+const CODEX_PLUGIN_METADATA_CACHE_TTL_MS = 36e5;
 /** Process-local plugin metadata cache with coalesced loads per query. */
 var CodexPluginMetadataCache = class {
 	constructor(nowMs = Date.now) {