@openclaw/codex 2026.9.1 → 2026.9.2

package/dist/{managed-binary-4-Vjz5GH.js → managed-binary-DcpnJF9x.js}

@@ -1,9 +1,98 @@
 import { createRequire } from "node:module";
 import { access } from "node:fs/promises";
 import path from "node:path";
-import { constants, existsSync, readFileSync, realpathSync } from "node:fs";
-import { fileURLToPath } from "node:url";
+import { constants, existsSync, realpathSync } from "node:fs";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
+import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
+//#region extensions/codex/src/app-server/launch-args.ts
+const CODEX_VALUE_OPTIONS = /* @__PURE__ */ new Set([
+	"-m",
+	"--model",
+	"--local-provider",
+	"-p",
+	"--profile",
+	"-s",
+	"--sandbox",
+	"-a",
+	"--ask-for-approval",
+	"-C",
+	"--cd",
+	"--add-dir",
+	"--remote",
+	"--remote-auth-token-env",
+	"-c",
+	"--config",
+	"--enable",
+	"--disable",
+	"--listen",
+	"--code-mode-host",
+	"--ws-auth",
+	"--ws-token-file",
+	"--ws-token-sha256",
+	"--ws-shared-secret-file",
+	"--ws-issuer",
+	"--ws-audience",
+	"--ws-max-clock-skew-seconds"
+]);
+/** One tokenization owner for launch, turn policy, reviewer trust, and private turns. */
+function readCodexArgs(args) {
+	const tokens = [];
+	let nativeSubcommand = false;
+	let end = 0;
+	for (const [index, arg] of args.entries()) {
+		if (index < end) continue;
+		end = index + 1;
+		const attached = /^(--[^=]+)=([\s\S]*)$/u.exec(arg) ?? /^(-[cmpisaC])=?([\s\S]+)$/u.exec(arg);
+		const name = attached?.[1] ?? arg;
+		let value = attached?.[2];
+		if (name === "-i" || name === "--image") while (args[end]?.startsWith("-") === false) end += 1;
+		else if (!attached && CODEX_VALUE_OPTIONS.has(name)) {
+			value = args[end];
+			if (value !== void 0) end += 1;
+		}
+		tokens.push({
+			index,
+			end,
+			name,
+			value
+		});
+		if (name === "app-server") nativeSubcommand = true;
+		if (name === "--" && nativeSubcommand) break;
+	}
+	return tokens;
+}
+function readCodexAppServerConfigOptions(args) {
+	return readCodexArgs(args).filter(({ name }) => name === "-c" || name === "--config" || name === "-p" || name === "--profile");
+}
+/** The stdio proxy forwards to an external server; it does not own that runtime. */
+function isCodexAppServerProxyLaunch(args) {
+	const tokens = readCodexArgs(args);
+	const server = tokens.findLastIndex(({ name }) => name === "app-server");
+	return server >= 0 && tokens.slice(server + 1).find(({ name }) => !name.startsWith("-"))?.name === "proxy";
+}
+/** Keeps Codex overrides in one CLI scope without rewriting raw TOML or wrapper prefixes. */
+function normalizeCodexAppServerArgs(rawArgs, enforcedOverride) {
+	const tokens = readCodexArgs(rawArgs);
+	const subcommandIndex = tokens.findLast(({ name }) => name === "app-server")?.index ?? -1;
+	const prefix = subcommandIndex < 0 ? [...rawArgs] : rawArgs.slice(0, subcommandIndex);
+	const suffix = [];
+	if (subcommandIndex >= 0) for (const token of tokens) {
+		if (token.index <= subcommandIndex) continue;
+		if (token.name === "--") {
+			suffix.push(...rawArgs.slice(token.index));
+			break;
+		}
+		(token.name === "-c" || token.name === "--config" ? prefix : suffix).push(...rawArgs.slice(token.index, token.end));
+	}
+	if (enforcedOverride && !(prefix.at(-2) === "-c" && prefix.at(-1) === enforcedOverride)) prefix.push("-c", enforcedOverride);
+	const normalized = subcommandIndex < 0 ? prefix : [
+		...prefix,
+		"app-server",
+		...suffix
+	];
+	return normalized.length === rawArgs.length && normalized.every((arg, index) => arg === rawArgs[index]) ? rawArgs : normalized;
+}
+//#endregion
 //#region extensions/codex/src/app-server/desktop-app-paths.ts
 /** Shared path candidates for Codex's macOS desktop app bundle. */
 const MACOS_DESKTOP_CODEX_APP_PATH_CANDIDATES = [{
@@ -46,7 +135,7 @@ function resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath(params = {}
 * Version and package pins for the managed Codex app-server runtime.
 */
 /** Exact Codex app-server version shipped by the OpenClaw Codex bridge. */
-const CODEX_APP_SERVER_VERSION = "0.152.1";
+const CODEX_APP_SERVER_VERSION = "0.153.4";
 /** Inclusive runtime compatibility floor for external app-server binaries. */
 const MIN_SUPPORTED_CODEX_APP_SERVER_VERSION = "0.149.0";
 /** npm package name for the managed Codex app-server binary. */
@@ -57,18 +146,19 @@ const MANAGED_CODEX_APP_SERVER_PACKAGE = "@openai/codex";
 * Resolves the managed Codex app-server binary shipped with or installed beside
 * the Codex plugin before stdio startup.
 */
-const CODEX_PLUGIN_ROOT = resolveDefaultCodexPluginRoot(path.dirname(fileURLToPath(import.meta.url)));
-let registeredCodexPluginRoot;
+const registeredCodexPlugin = resolveGlobalSingleton(Symbol.for("openclaw.codexManagedPluginRoot"), () => ({}));
 /** Records the process-stable plugin root prepared by OpenClaw's plugin loader. */
 function setManagedCodexPluginRoot(pluginRoot) {
-	registeredCodexPluginRoot = pluginRoot;
+	registeredCodexPlugin.root = pluginRoot;
 }
 /** Rewrites managed stdio start options to point at an executable Codex binary path. */
 async function resolveManagedCodexAppServerStartOptions(startOptions, options = {}) {
 	if (startOptions.transport !== "stdio" || startOptions.commandSource !== "managed") return startOptions;
+	const pluginRoot = options.pluginRoot ?? registeredCodexPlugin.root;
+	if (!pluginRoot) throw new Error("Codex plugin root is unavailable. Load the Codex plugin before starting its managed app-server.");
 	const platform = options.platform ?? process.platform;
 	const commandPaths = await findManagedCodexAppServerCommandPaths({
-		candidateCommandPaths: resolveManagedCodexAppServerCommandCandidates(options.pluginRoot ?? registeredCodexPluginRoot ?? CODEX_PLUGIN_ROOT, platform, startOptions.managedCommandOrder ?? "package-first"),
+		candidateCommandPaths: resolveManagedCodexAppServerCommandCandidates(pluginRoot, platform, startOptions.managedCommandOrder ?? "package-first"),
 		pathExists: options.pathExists ?? commandPathExists,
 		platform
 	});
@@ -158,76 +248,18 @@ function resolvePackageJsonFromRoot(packageName, root) {
 	}
 }
 function resolveManagedCodexAppServerCommandCandidates(pluginRoot, platform, managedCommandOrder) {
-	const pathApi = pathForPlatform(platform);
-	const commandName = platform === "win32" ? "codex.cmd" : "codex";
-	const roots = resolveManagedCodexAppServerCandidateRoots(pluginRoot, platform);
-	const packageCommandPaths = [...roots.map((root) => pathApi.join(root, "node_modules", ".bin", commandName)), ...resolveManagedCodexPackageBinCandidates(roots, platform)];
-	const desktopCommandPaths = resolveDesktopCodexAppServerCommandCandidates(platform);
-	const orderedCommandPaths = managedCommandOrder === "desktop-first" ? [...desktopCommandPaths, ...packageCommandPaths] : [...packageCommandPaths, ...desktopCommandPaths];
-	return [...new Set(orderedCommandPaths)];
-}
-function resolveDesktopCodexAppServerCommandCandidates(platform) {
-	return resolveMacOSDesktopCodexAppServerCommandCandidates(platform);
-}
-function resolveDefaultCodexPluginRoot(moduleDir) {
-	const moduleBaseName = path.basename(moduleDir);
-	if (moduleBaseName === "dist" || moduleBaseName === "dist-runtime") return path.dirname(moduleDir);
-	return path.resolve(moduleDir, "..", "..");
-}
-function resolveManagedCodexAppServerCandidateRoots(pluginRoot, platform) {
-	const pathApi = pathForPlatform(platform);
-	const directRoots = [
-		pluginRoot,
-		pathApi.dirname(pluginRoot),
-		pathApi.dirname(pathApi.dirname(pluginRoot)),
-		isDistExtensionRoot(pluginRoot, platform) ? pathApi.dirname(pathApi.dirname(pathApi.dirname(pluginRoot))) : null
-	].filter((root) => Boolean(root));
-	return [.../* @__PURE__ */ new Set([...directRoots, ...resolveNearestNodeModulesProjectRoots(directRoots, platform)])];
-}
-function resolveNearestNodeModulesProjectRoots(roots, platform) {
-	const pathApi = pathForPlatform(platform);
-	const projectRoots = [];
-	for (const root of roots) {
-		let current = pathApi.resolve(root);
-		while (true) {
-			if (pathApi.basename(current) === "node_modules") {
-				projectRoots.push(pathApi.dirname(current));
-				break;
-			}
-			const parent = pathApi.dirname(current);
-			if (parent === current) break;
-			current = parent;
-		}
-	}
-	return projectRoots;
-}
-function resolveManagedCodexPackageBinCandidates(roots, platform) {
-	if (platform === "win32") return [];
-	const candidates = [];
-	for (const root of roots) {
-		const candidate = resolveManagedCodexPackageBinCandidate(root);
-		if (candidate) candidates.push(candidate);
-	}
-	return candidates;
+	const packageCommand = resolveManagedCodexPackageEntrypoint(pluginRoot);
+	const packageCommandPaths = packageCommand ? [packageCommand] : [];
+	const desktopCommandPaths = resolveMacOSDesktopCodexAppServerCommandCandidates(platform);
+	return managedCommandOrder === "desktop-first" ? [...desktopCommandPaths, ...packageCommandPaths] : [...packageCommandPaths, ...desktopCommandPaths];
 }
-function resolveManagedCodexPackageBinCandidate(root) {
+function resolveManagedCodexPackageEntrypoint(pluginRoot) {
 	try {
-		const packageJsonPath = createRequire(path.join(root, "package.json")).resolve(`${MANAGED_CODEX_APP_SERVER_PACKAGE}/package.json`);
-		const packageRoot = path.dirname(packageJsonPath);
-		const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf8"));
-		const packageBin = packageJson.bin && typeof packageJson.bin === "object" ? packageJson.bin : void 0;
-		const binPath = typeof packageJson.bin === "string" ? packageJson.bin : typeof packageBin?.codex === "string" ? packageBin.codex : null;
-		return binPath ? path.resolve(packageRoot, binPath) : null;
+		return createRequire(path.join(pluginRoot, "package.json")).resolve(`${MANAGED_CODEX_APP_SERVER_PACKAGE}/bin/codex.js`);
 	} catch {
-		return null;
+		return;
 	}
 }
-function isDistExtensionRoot(pluginRoot, platform) {
-	const pathApi = pathForPlatform(platform);
-	const extensionsDir = pathApi.dirname(pluginRoot);
-	const distDir = pathApi.dirname(extensionsDir);
-	return pathApi.basename(extensionsDir) === "extensions" && (pathApi.basename(distDir) === "dist" || pathApi.basename(distDir) === "dist-runtime");
-}
 function pathForPlatform(platform) {
 	return platform === "win32" ? path.win32 : path.posix;
 }
@@ -250,4 +282,4 @@ async function commandPathExists(filePath, platform) {
 	}
 }
 //#endregion
-export { setManagedCodexPluginRoot as a, resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath as c, resolveMacOSDesktopCodexComputerUseServiceAppCandidates as d, resolvePackagedCodexNativeCommand as i, resolveMacOSDesktopCodexAppPathCandidates as l, resolveManagedCodexAppServerStartOptions as n, CODEX_APP_SERVER_VERSION as o, resolveManagedCodexNativeCommand as r, MIN_SUPPORTED_CODEX_APP_SERVER_VERSION as s, isManagedCodexDesktopCommand as t, resolveMacOSDesktopCodexBundledMarketplaceCandidates as u };
+export { setManagedCodexPluginRoot as a, resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath as c, resolveMacOSDesktopCodexComputerUseServiceAppCandidates as d, isCodexAppServerProxyLaunch as f, resolvePackagedCodexNativeCommand as i, resolveMacOSDesktopCodexAppPathCandidates as l, readCodexAppServerConfigOptions as m, resolveManagedCodexAppServerStartOptions as n, CODEX_APP_SERVER_VERSION as o, normalizeCodexAppServerArgs as p, resolveManagedCodexNativeCommand as r, MIN_SUPPORTED_CODEX_APP_SERVER_VERSION as s, isManagedCodexDesktopCommand as t, resolveMacOSDesktopCodexBundledMarketplaceCandidates as u };

package/dist/media-understanding-provider.js

@@ -1,4 +1,4 @@
-import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-wzJrwKKe.js";
+import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-DxGJRYbY.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { validateJsonSchemaValue } from "openclaw/plugin-sdk/json-schema-runtime";
 //#region extensions/codex/media-understanding-provider.ts

package/dist/{model-catalog-CUM68Hkl.js → model-catalog-DT5vo6qo.js}

@@ -1,8 +1,8 @@
-import { r as buildCodexRuntimeModelParams } from "./harness-DXVZ5II5.js";
-import { $t as isJsonObject, r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-DxcfF9KX.js";
-import { E as readCodexPluginConfig, i as resolveCodexAppServerRuntimeOptions } from "./config-BhmfC1s6.js";
-import { t as listAllCodexAppServerModels } from "./models-sYnEc0gd.js";
-import { o as withCodexAppServerJsonClient } from "./request-DYAI5FQE.js";
+import { r as buildCodexRuntimeModelParams } from "./harness-Czh2Sdoc.js";
+import { B as isJsonObject, O as readCodexPluginConfig, i as resolveCodexAppServerRuntimeOptions } from "./config-CyapYSji.js";
+import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-CKhX2kFt.js";
+import { t as listAllCodexAppServerModels } from "./models-CcrgSMQR.js";
+import { o as withCodexAppServerJsonClient } from "./request-C8H22rPi.js";
 //#region extensions/codex/src/app-server/model-catalog.ts
 const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 2500;
 const INPUT_TYPES = /* @__PURE__ */ new Set([

package/dist/{models-sYnEc0gd.js → models-CcrgSMQR.js}

@@ -1,4 +1,4 @@
-import { Y as assertCodexModelListResponse } from "./shared-client-DxcfF9KX.js";
+import { X as assertCodexModelListResponse } from "./shared-client-CKhX2kFt.js";
 import { normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
 /**
@@ -37,8 +37,8 @@ async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
 	const timeoutMs = options.timeoutMs ?? 2500;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-DxcfF9KX.js").then((n) => n.x);
-	const { requestCodexAppServerClientJson } = await import("./request-DYAI5FQE.js").then((n) => n.a);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CKhX2kFt.js").then((n) => n.x);
+	const { requestCodexAppServerClientJson } = await import("./request-C8H22rPi.js").then((n) => n.a);
 	const client = await (useSharedClient ? getLeasedSharedCodexAppServerClient : createIsolatedCodexAppServerClient)({
 		startOptions: options.startOptions,
 		timeoutMs,
@@ -56,7 +56,7 @@ async function withCodexAppServerModelRequest(options, run) {
 		}));
 	} finally {
 		if (useSharedClient) releaseLeasedSharedCodexAppServerClient(client);
-		else client.close();
+		else await client.closeAndWait();
 	}
 }
 async function requestModelListPage(request, options) {

package/dist/{native-subagent-monitor-CnH147jH.js → native-subagent-monitor-B3bvQGcg.js}

@@ -1,12 +1,13 @@
-import { $t as isJsonObject, At as retainCodexAppServerLiveThread, kt as releaseCodexAppServerLiveThread, xt as claimCodexAppServerLiveThread } from "./shared-client-DxcfF9KX.js";
-import { A as shouldRecordNativeToolTranscript, C as isSideEffectingNativeToolItem, D as itemTitle, E as itemStatus, F as readHookOutputEntries, I as readItem, N as normalizeOptionalString$1, R as readNonEmptyString, S as isNonSuccessItemStatus, T as itemName, V as readNullableString$1, j as shouldSynthesizeToolProgressForItem, w as itemKind, x as isMutatingNativeToolItem, y as auditNativeToolTerminalStatus, z as readNonEmptyStringArray } from "./attempt-client-cleanup-DYHcRQAa.js";
+import { B as isJsonObject } from "./config-CyapYSji.js";
+import { Ct as claimCodexAppServerLiveThread, Mt as retainCodexAppServerLiveThread, jt as releaseCodexAppServerLiveThread } from "./shared-client-CKhX2kFt.js";
+import { A as shouldRecordNativeToolTranscript, B as readNonEmptyStringArray, C as isSideEffectingNativeToolItem, D as itemTitle, E as itemStatus, H as readNullableString$1, I as readHookOutputEntries, L as readItem, N as normalizeOptionalString$1, S as isNonSuccessItemStatus, T as itemName, j as shouldSynthesizeToolProgressForItem, w as itemKind, x as isMutatingNativeToolItem, y as auditNativeToolTerminalStatus, z as readNonEmptyString } from "./attempt-client-cleanup-Bp1ZOnk2.js";
 import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
+import { t as readCodexMirroredSessionHistoryMessages } from "./session-history-DWmMqiqW.js";
 import { t as resolveCodexLocalRuntimeAttribution } from "./local-runtime-attribution-B_2mnqhb.js";
-import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-CNe-Xrjx.js";
-import { n as readCodexMirroredSessionHistoryMessages } from "./session-history-C5J1AKzG.js";
+import { n as codexApprovalTimeoutText } from "./plugin-approval-roundtrip-aQVdyL5g.js";
 import { asFiniteNumber, asNonArrayRecord, normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
-import path from "node:path";
 import { asDateTimestampMs } from "openclaw/plugin-sdk/number-runtime";
+import path from "node:path";
 import { TOOL_PROGRESS_OUTPUT_MAX_CHARS, embeddedAgentLog, emitAgentEvent, formatErrorMessage, formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs, runAgentHarnessAfterToolCallHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
@@ -947,21 +948,20 @@ var CodexToolTranscriptProjection = class {
 			isError: result.isError
 		}).content;
 	}
-	async recordNativeToolResultWithDetails(item) {
+	async prepareNativeToolResultDetails(item) {
 		const preparedDetails = await this.prepareNativeMcpAppResultDetails(item);
 		const approvalReviewState = item ? this.approvalReviewsByCallId.get(item.id) : void 0;
 		const reviewDetails = approvalReviewState ? {
 			approvalReviews: approvalReviewState.reviews,
 			approvalReviewOutcome: toolApprovalReviewOutcome(approvalReviewState)
 		} : void 0;
-		const details = reviewDetails ? isJsonObject(preparedDetails) ? {
+		return reviewDetails ? isJsonObject(preparedDetails) ? {
 			...preparedDetails,
 			...reviewDetails
 		} : {
 			...preparedDetails !== void 0 ? { toolDetails: preparedDetails } : {},
 			...reviewDetails
 		} : preparedDetails;
-		this.recordNativeToolResult(item, details);
 	}
 	async prepareNativeMcpAppResultDetails(item) {
 		if (!item || item.type !== "mcpToolCall" || itemStatus(item) === "running") return;
@@ -1084,13 +1084,14 @@ var CodexToolTranscriptProjection = class {
 		const missingCount = (/* @__PURE__ */ new Set([...missingTranscriptIds, ...missingTrajectoryIds])).size;
 		return missingCount === 1 ? MISSING_TOOL_RESULT_ERROR : `${MISSING_TOOL_RESULT_ERROR} missingToolResultCount=${missingCount}`;
 	}
-	async readMirroredSessionMessages() {
+	async readMirroredSessionMessages(signal) {
 		return await readCodexMirroredSessionHistoryMessages({
 			agentId: this.params.agentId,
 			sessionFile: this.params.sessionFile,
 			sessionId: this.params.sessionId,
-			sessionKey: this.params.sessionKey
-		}) ?? [];
+			sessionKey: this.params.sessionKey,
+			sessionTarget: this.params.sessionTarget
+		}, void 0, "native-evidence", signal) ?? [];
 	}
 	recordToolCall(params) {
 		if (!params.id || !params.name || this.callIds.has(params.id)) return;

package/dist/{node-exec-server.runtime-CstNHCmC.js → node-exec-server.runtime-nfbUOtUB.js}

@@ -1,10 +1,10 @@
-import { n as resolveManagedCodexAppServerStartOptions, r as resolveManagedCodexNativeCommand, t as isManagedCodexDesktopCommand } from "./managed-binary-4-Vjz5GH.js";
-import { i as closeCodexAppServerTransportAndWait, t as createStdioTransport } from "./transport-stdio-CyPldczm.js";
+import { n as resolveManagedCodexAppServerStartOptions, r as resolveManagedCodexNativeCommand, t as isManagedCodexDesktopCommand } from "./managed-binary-DcpnJF9x.js";
+import { i as closeCodexAppServerTransportAndWait, t as createStdioTransport } from "./transport-stdio-CzTngV0j.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { killProcessTree } from "openclaw/plugin-sdk/process-runtime";
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import { resolvePreferredOpenClawTmpDir, withTempWorkspace } from "openclaw/plugin-sdk/temp-path";
-import { killProcessTree } from "openclaw/plugin-sdk/process-runtime";
 import { once } from "node:events";
 import { sanitizeEnvVars } from "openclaw/plugin-sdk/sandbox";
 //#region extensions/codex/src/node-exec-server.runtime.ts

package/dist/{plugin-approval-roundtrip-CNe-Xrjx.js → plugin-approval-roundtrip-aQVdyL5g.js}

@@ -1,4 +1,4 @@
-import { N as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-DxcfF9KX.js";
+import { N as resolveCodexGatewayTimeoutWithGraceMs } from "./shared-client-CKhX2kFt.js";
 import { isApprovalNotFoundError, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/codex/src/app-server/plugin-approval-roundtrip.ts

package/dist/{plugin-marketplace-discovery-CfFlKqDl.js → plugin-marketplace-discovery-B7gHXJ3d.js}

@@ -1,12 +1,14 @@
-import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DxcfF9KX.js";
-import { A as isCodexFastServiceTier } from "./config-BhmfC1s6.js";
-import { o as isCodexAppServerNativeAuthProfile, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-BHuTCRZQ.js";
-import { E as resolveCodexAppServerRequestModelSelection, O as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-DAcEJ_Om.js";
-import { a as formatCodexDisplayText } from "./command-formatters-CLHhEB1Q.js";
-import { n as resolveCodexBindingAppServerConnection } from "./binding-connection-E6uDsPlx.js";
+import { n as isCodexFastServiceTier } from "./config-utils-C57JiJrU.js";
+import { t as bindingStoreKey } from "./session-binding-record-CyaXZvTe.js";
+import "./config-CyapYSji.js";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CKhX2kFt.js";
+import { a as isCodexAppServerNativeAuthProfile, o as normalizeCodexAppServerBindingModelProvider } from "./session-binding-4Ki04sW-.js";
+import { E as resolveCodexAppServerRequestModelSelection, O as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-DPK30jad.js";
+import { s as resolveCodexBindingAppServerConnection } from "./thread-policy-CTalhWFy.js";
+import { a as formatCodexDisplayText } from "./command-formatters-DSbGMXA0.js";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";
@@ -44,7 +46,7 @@ async function stopCodexConversationTurn(params) {
 		message: "No active Codex run to stop."
 	};
 	const lookup = buildBindingLookup(params);
-	const binding = await params.bindingStore.read(params.identity);
+	const binding = params.binding;
 	if (binding?.threadId !== active.threadId) return {
 		stopped: false,
 		message: "The active Codex run no longer matches this session binding."
@@ -65,7 +67,10 @@ async function stopCodexConversationTurn(params) {
 		await client.request("turn/interrupt", {
 			threadId: active.threadId,
 			turnId: active.turnId
-		}, { timeoutMs: runtime.requestTimeoutMs });
+		}, {
+			timeoutMs: runtime.requestTimeoutMs,
+			assertCurrent: params.assertCurrent
+		});
 	} finally {
 		if (!active.client) releaseLeasedSharedCodexAppServerClient(client);
 	}
@@ -86,7 +91,7 @@ async function steerCodexConversationTurn(params) {
 		message: "No active Codex run to steer."
 	};
 	const lookup = buildBindingLookup(params);
-	const binding = await params.bindingStore.read(params.identity);
+	const binding = params.binding;
 	if (binding?.threadId !== active.threadId) return {
 		steered: false,
 		message: "The active Codex run no longer matches this session binding."
@@ -112,7 +117,10 @@ async function steerCodexConversationTurn(params) {
 				text,
 				text_elements: []
 			}]
-		}, { timeoutMs: runtime.requestTimeoutMs });
+		}, {
+			timeoutMs: runtime.requestTimeoutMs,
+			assertCurrent: params.assertCurrent
+		});
 	} finally {
 		if (!active.client) releaseLeasedSharedCodexAppServerClient(client);
 	}
@@ -125,7 +133,8 @@ async function setCodexConversationModel(params) {
 	const model = params.model.trim();
 	if (!model) return "Usage: /codex model <model>";
 	const lookup = buildBindingLookup(params);
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
+	params.assertCurrent();
+	const binding = requirePreparedThreadBinding(params.binding);
 	if (binding.connectionScope === "supervision") throw new ModelSelectionLockedError();
 	const modelProvider = resolveConversationControlModelProvider({
 		authProfileId: binding.authProfileId,
@@ -155,10 +164,11 @@ async function setCodexConversationModel(params) {
 	if (identity.kind === "session" && identity.sessionKey) {
 		if (!await patchSessionEntry({
 			agentId: identity.agentId,
-			storePath: resolveStorePath(params.config?.session?.store, { agentId: identity.agentId }),
+			storePath: params.storePath ?? resolveStorePath(params.config?.session?.store, { agentId: identity.agentId }),
 			sessionKey: identity.sessionKey,
 			requireWriteSuccess: true,
 			replaceEntry: true,
+			assertCommitAllowed: params.assertCurrent,
 			update: (entry) => {
 				if (entry.sessionId !== identity.sessionId) throw new Error("Codex session changed while applying the model selection.");
 				applyModelOverrideWithAuthProfileCompatibility({
@@ -175,23 +185,25 @@ async function setCodexConversationModel(params) {
 				return entry;
 			}
 		})) throw new Error("Codex session changed while applying the model selection.");
-		if (modelChanged && binding.contextEngine?.projection) await patchThreadBinding(params.bindingStore, identity, binding.threadId, projectionPatch);
+		if (modelChanged && binding.contextEngine?.projection) await patchThreadBinding(params.bindingStore, identity, binding.threadId, projectionPatch, params.assertCurrent);
 	} else await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, {
 		model: nextModel,
 		modelProvider: nextModelProvider,
 		...projectionPatch
-	});
+	}, params.assertCurrent);
 	return `Codex model set to ${formatCodexDisplayText(nextModel)}.`;
 }
 async function setCodexConversationFastMode(params) {
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
+	params.assertCurrent();
+	const binding = requirePreparedThreadBinding(params.binding);
 	if (params.enabled == null) return `Codex fast mode: ${isCodexFastServiceTier(binding.serviceTier) ? "on" : "off"}.`;
 	const serviceTier = params.enabled ? "priority" : "flex";
-	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, { serviceTier });
+	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, { serviceTier }, params.assertCurrent);
 	return `Codex fast mode ${params.enabled ? "enabled" : "disabled"}.`;
 }
 async function setCodexConversationPermissions(params) {
-	const storePath = resolveStorePath(params.config?.session?.store, { agentId: params.session.agentId });
+	params.assertCurrent();
+	const storePath = params.storePath ?? resolveStorePath(params.config?.session?.store, { agentId: params.session.agentId });
 	if (!params.mode) {
 		const entry = getSessionEntry({
 			agentId: params.session.agentId,
@@ -200,6 +212,7 @@ async function setCodexConversationPermissions(params) {
 			sessionKey: params.session.sessionKey,
 			storePath
 		});
+		params.assertCurrent();
 		if (entry?.sessionId !== params.session.sessionId) throw new Error("Codex session changed while reading the permission mode.");
 		return `Codex permissions: ${formatPermissionsMode(entry.permissionMode)}.`;
 	}
@@ -209,6 +222,7 @@ async function setCodexConversationPermissions(params) {
 		sessionKey: params.session.sessionKey,
 		requireWriteSuccess: true,
 		replaceEntry: true,
+		assertCommitAllowed: params.assertCurrent,
 		update: (entry) => {
 			if (entry.sessionId !== params.session.sessionId) throw new Error("Codex session changed while applying the permission mode.");
 			entry.permissionMode = params.mode === "yolo" ? "full" : "guarded";
@@ -237,17 +251,16 @@ function parseCodexPermissionsModeArg(arg) {
 function formatPermissionsMode(mode) {
 	return mode === "full" ? "full access" : mode ?? "default";
 }
-async function requireThreadBinding(bindingStore, identity) {
-	const binding = await bindingStore.read(identity);
+function requirePreparedThreadBinding(binding) {
 	if (!binding?.threadId) throw new Error("No Codex thread is attached to this OpenClaw session yet.");
 	return binding;
 }
-async function patchThreadBinding(bindingStore, identity, threadId, patch) {
+async function patchThreadBinding(bindingStore, identity, threadId, patch, assertCurrent) {
 	if (!await bindingStore.mutate(identity, {
 		kind: "patch",
 		threadId,
 		patch
-	})) throw new Error("Codex thread binding changed while applying the control update.");
+	}, assertCurrent)) throw new Error("Codex thread binding changed while applying the control update.");
 }
 function buildBindingLookup(params) {
 	const agentDir = params.agentDir?.trim();

package/dist/{plugin-metadata-cache-BFrPhb2c.js → plugin-metadata-cache-BwCLTY_U.js}

@@ -1,8 +1,8 @@
-import { B as isCodexAppServerIndeterminateRequestCancellationError, D as acquireCodexNativeConfigFence, Gt as resolveCodexManagedBundledMarketplacePath, Kt as assertNotSymlink, Lt as reconcileCodexComputerUseStartArtifacts, S as waitForCodexAppServerClientDesktopGenerationDrain, V as isCodexAppServerIndeterminateTransportError, c as getLeasedSharedCodexAppServerClient, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, p as readCodexAppServerClientProcessIdentity, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, z as isCodexAppServerConnectionClosedError } from "./shared-client-DxcfF9KX.js";
-import { F as resolveCodexAppServerHomeDir, i as resolveCodexAppServerRuntimeOptions, o as resolveCodexComputerUseConfig } from "./config-BhmfC1s6.js";
-import { c as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, t as isManagedCodexDesktopCommand, u as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-4-Vjz5GH.js";
-import { i as requestCodexAppServerJson } from "./request-DYAI5FQE.js";
-import { n as describeControlFailure } from "./capabilities-dIjNVCYH.js";
+import { M as resolveCodexAppServerHomeDir, i as resolveCodexAppServerRuntimeOptions, o as resolveCodexComputerUseConfig } from "./config-CyapYSji.js";
+import { B as isCodexAppServerIndeterminateRequestCancellationError, D as acquireCodexNativeConfigFence, Jt as assertNotSymlink, S as waitForCodexAppServerClientDesktopGenerationDrain, V as isCodexAppServerIndeterminateTransportError, c as getLeasedSharedCodexAppServerClient, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, p as readCodexAppServerClientProcessIdentity, qt as resolveCodexManagedBundledMarketplacePath, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, z as isCodexAppServerConnectionClosedError, zt as reconcileCodexComputerUseStartArtifacts } from "./shared-client-CKhX2kFt.js";
+import { c as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, t as isManagedCodexDesktopCommand, u as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-DcpnJF9x.js";
+import { i as requestCodexAppServerJson } from "./request-C8H22rPi.js";
+import { n as describeControlFailure } from "./capabilities-B1mgvpP8.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { existsSync } from "node:fs";

package/dist/{provider-capabilities-DW5p4k9w.js → provider-capabilities-BpG9Ltc5.js}

@@ -1,5 +1,5 @@
-import { h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DxcfF9KX.js";
-import { ut as normalizeCodexDynamicToolName } from "./thread-lifecycle-DAcEJ_Om.js";
+import { h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CKhX2kFt.js";
+import { ut as normalizeCodexDynamicToolName } from "./thread-lifecycle-DPK30jad.js";
 import { pinExecToolTarget } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { loadNodeExecAvailability } from "openclaw/plugin-sdk/node-selection-runtime";
 //#region extensions/codex/src/app-server/shell-dynamic-tools.ts

package/dist/{rate-limits-CawQJfUS.js → rate-limits-Fx_l4eNa.js}

@@ -1,4 +1,4 @@
-import { $t as isJsonObject } from "./shared-client-DxcfF9KX.js";
+import { B as isJsonObject } from "./config-CyapYSji.js";
 import { asBoolean, asFiniteNumber, normalizeOptionalString, parseStrictFiniteNumber } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { MAX_DATE_TIMESTAMP_MS, resolveExpiresAtMsFromEpochSeconds } from "openclaw/plugin-sdk/number-runtime";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";

package/dist/{request-DYAI5FQE.js → request-C8H22rPi.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { Nt as withTimeout, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, s as createIsolatedCodexAppServerClient, u as isCodexAppServerStartSelectionChangedError, y as retireSharedCodexAppServerClientIfCurrent } from "./shared-client-DxcfF9KX.js";
-import { w as isCodexRemoteExecPlacementSandbox } from "./config-BhmfC1s6.js";
+import { E as isCodexRemoteExecPlacementSandbox } from "./config-CyapYSji.js";
+import { Ft as withTimeout, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, s as createIsolatedCodexAppServerClient, u as isCodexAppServerStartSelectionChangedError, y as retireSharedCodexAppServerClientIfCurrent } from "./shared-client-CKhX2kFt.js";
 import { resolveAgentConfig, tryResolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { getSessionEntry } from "openclaw/plugin-sdk/session-store-runtime";
 import { normalizeAgentId, parseAgentSessionKey } from "openclaw/plugin-sdk/routing";