@openclaw/codex 2026.9.2 → 2026.9.3

package/dist/{transport-stdio-CzTngV0j.js → transport-stdio-BGjHoYLr.js}

@@ -1,13 +1,17 @@
-import { p as normalizeCodexAppServerArgs } from "./managed-binary-DcpnJF9x.js";
+import { n as normalizeCodexAppServerArgs } from "./launch-args-RXQwn8zV.js";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
-import { readFile, readdir } from "node:fs/promises";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
-import { execFile, spawn } from "node:child_process";
+import { readFile, readdir } from "node:fs/promises";
 import { once } from "node:events";
+import { execFile, spawn } from "node:child_process";
 import { setImmediate } from "node:timers/promises";
 import { finished } from "node:stream/promises";
 //#region extensions/codex/src/app-server/transport-process-snapshot.ts
+/** A zombie leader can still own running threads, reported by the ps-style l flag. */
+function isDeadProcessState(state) {
+	return state.startsWith("Z") && !state.includes("l");
+}
 const PROCESS_COLUMNS = "pid=,ppid=,pgid=,stat=,lstart=";
 const MAX_PROCESS_CONTAINMENT_MS$1 = 2e3;
 const PROCESS_INSPECTION_MAX_BYTES = 8388608;
@@ -178,13 +182,17 @@ async function readLinuxProcesses(selected, deadline) {
 			const pgid = Number(fields[2]);
 			const startTicks = fields[19];
 			if (commEnd < 0 || ![ppid, pgid].every(Number.isSafeInteger) || selected !== void 0 && (pgid <= 0 || ppid < 0) || !/^\d+$/.test(startTicks ?? "")) throw new ProcessInspectionError("unavailable");
-			if (pgid > 0) rows.push({
-				pid: Number(entry),
-				ppid,
-				pgid,
-				state: fields[0],
-				startedAt: `${bootId}:${startTicks}`
-			});
+			if (pgid > 0) {
+				const threads = Number(fields[17]);
+				if (!/^[1-9]\d*$/.test(fields[17] ?? "") || !Number.isSafeInteger(threads)) throw new ProcessInspectionError("unavailable");
+				rows.push({
+					pid: Number(entry),
+					ppid,
+					pgid,
+					state: `${fields[0]}${threads > 1 ? "l" : ""}`,
+					startedAt: `${bootId}:${startTicks}`
+				});
+			}
 		}
 		if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
 		return rows;
@@ -197,14 +205,10 @@ async function readLinuxProcesses(selected, deadline) {
 const MAX_CONTAINED_PROCESSES = 512;
 const MAX_PROCESS_CONTAINMENT_MS = 2e3;
 const MAX_PROCESS_QUIESCE_PASSES = 16;
-async function terminateCodexAppServerDescendants(child) {
-	const contained = await containDescendants(child);
-	return contained === "exited" ? contained : contained?.resume;
-}
-/** A durable spawn fact, never a command-line match, selects the orphan root. */
+/** Discharges the registered root obligation, including an already-obsolete PID. */
 async function terminateCodexAppServerOrphan(expected) {
 	const deadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS;
-	const result = await containDescendants({
+	const result = await terminateCodexAppServerDescendants({
 		pid: expected.pid,
 		kill: (signal) => signalProcess(expected.pid, signal ?? "SIGTERM")
 	}, expected, deadline);
@@ -219,7 +223,7 @@ async function terminateCodexAppServerOrphan(expected) {
 			const snapshot = await readCodexAppServerProcessSnapshot(deadline).catch(() => void 0);
 			if (!snapshot?.some((row) => row.pid === process.pid)) return false;
 			const current = snapshot.find((row) => row.pid === expected.pid);
-			if (!current || !hasSameIdentity(current, expected) || current.state.startsWith("Z")) {
+			if (!current || !hasSameIdentity(current, expected) || isDeadProcessState(current.state)) {
 				gone = true;
 				return true;
 			}
@@ -233,15 +237,15 @@ async function terminateCodexAppServerOrphan(expected) {
 		if (contained && !gone) await signalSameRoot(contained.root, "SIGCONT", Date.now() + MAX_PROCESS_CONTAINMENT_MS);
 	}
 }
-async function containDescendants(child, expected, deadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS) {
+async function terminateCodexAppServerDescendants(child, expected, deadline = Date.now() + MAX_PROCESS_CONTAINMENT_MS) {
 	const rootPid = child.pid;
 	if (hasExited(child)) return "exited";
 	if (process.platform === "win32" || !rootPid || !child.kill) return;
 	const snapshot = await readCodexAppServerProcessSnapshot(deadline).catch(() => void 0);
 	if (!snapshot || Date.now() >= deadline) return;
 	const root = snapshot.find((row) => row.pid === rootPid);
-	if (!expected && (!root || root.state.startsWith("Z"))) return "exited";
-	if (!root || !(expected ? isSameLiveProcess(root, expected) : root.ppid === process.pid) || root.state.startsWith("Z")) return;
+	if (!expected && (!root || isDeadProcessState(root.state))) return "exited";
+	if (!root || !(expected ? isSameLiveProcess(root, expected) : root.ppid === process.pid) || isDeadProcessState(root.state)) return;
 	const initialDescendants = collectDescendants(snapshot, [rootPid]);
 	if (initialDescendants.length > MAX_CONTAINED_PROCESSES) return;
 	const stoppedDescendants = /* @__PURE__ */ new Map();
@@ -252,10 +256,25 @@ async function containDescendants(child, expected, deadline = Date.now() + MAX_P
 		if (!descendants) return;
 		for (const descendant of descendants.toReversed()) {
 			if (Date.now() >= deadline) return;
-			if (!descendant.state.startsWith("Z")) {
+			if (!isDeadProcessState(descendant.state)) {
 				if (!await signalSameProcess(descendant, "SIGKILL", deadline) || Date.now() >= deadline) return;
 			}
 		}
+		const remaining = new Map(descendants.map((row) => [row.pid, row]));
+		while (remaining.size > 0) {
+			const terminationSnapshot = await readCodexAppServerProcessSnapshot(deadline, [root.pid, ...remaining.keys()]).catch(() => void 0);
+			if (!terminationSnapshot || Date.now() >= deadline) return;
+			const currentRoot = terminationSnapshot.find((row) => row.pid === root.pid);
+			if (!currentRoot || !isSameLiveRoot(currentRoot, root, true)) return;
+			const currentByPid = new Map(terminationSnapshot.map((row) => [row.pid, row]));
+			for (const [pid, retained] of remaining) {
+				const current = currentByPid.get(pid);
+				if (!current || !hasSameIdentity(current, retained) || isDeadProcessState(current.state)) remaining.delete(pid);
+			}
+			if (remaining.size > 0) await new Promise((resolve) => {
+				setTimeout(resolve, 20);
+			});
+		}
 		resumeRootOnUnwind = false;
 		let resumed = false;
 		return {
@@ -355,7 +374,7 @@ function collectDescendants(snapshot, rootPids) {
 	return descendants;
 }
 function isStoppedState(state) {
-	return state.startsWith("T") || state.startsWith("t") || state.startsWith("Z");
+	return state.startsWith("T") || state.startsWith("t") || isDeadProcessState(state);
 }
 function isQuiescedState(state) {
 	return isStoppedState(state) || isUninterruptibleState(state);
@@ -364,7 +383,7 @@ function isUninterruptibleState(state) {
 	return state.startsWith("D") || state.startsWith("U");
 }
 function isSameLiveProcess(current, expected) {
-	return current.pgid === expected.pgid && !current.state.startsWith("Z") && hasSameIdentity(current, expected);
+	return current.pgid === expected.pgid && !isDeadProcessState(current.state) && hasSameIdentity(current, expected);
 }
 function isSameLiveRoot(current, expected, requireStopped = false) {
 	return current.ppid === expected.ppid && (!requireStopped || isQuiescedState(current.state)) && isSameLiveProcess(current, expected);
@@ -437,9 +456,9 @@ async function reapRegisteredCodexAppServerOrphans() {
 		const registration = registrationSchema.parse(entry.value);
 		const snapshot = await readCodexAppServerProcessSnapshot(deadline, [registration.parent.pid, registration.child.pid]);
 		const parent = snapshot.find((row) => row.pid === registration.parent.pid);
-		if (parent?.startedAt === registration.parent.startedAt && !parent.state.startsWith("Z")) continue;
+		if (parent?.startedAt === registration.parent.startedAt && !isDeadProcessState(parent.state)) continue;
 		const child = snapshot.find((row) => row.pid === registration.child.pid);
-		if (registration.child.commandFingerprint !== void 0 && child?.startedAt === registration.child.startedAt && !child.state.startsWith("Z")) {
+		if (registration.child.commandFingerprint !== void 0 && child?.startedAt === registration.child.startedAt && !isDeadProcessState(child.state)) {
 			let command;
 			try {
 				command = await readCodexAppServerProcessCommand(child, deadline);
@@ -520,38 +539,43 @@ function closeCodexAppServerTransport(child, options = {}) {
 function beginCodexAppServerTransportClose(child, options) {
 	const current = CODEX_APP_SERVER_TRANSPORT_CLOSES.get(child);
 	if (current) return current;
+	let forced = false;
+	const forceKill = () => {
+		forced = true;
+		signalCodexAppServerTransport(child, "SIGKILL");
+	};
 	const closure = {
 		closing: (async () => {
-			if (hasCodexAppServerTransportExited(child)) return true;
+			if (hasCodexAppServerTransportExited(child)) return "natural";
 			if (process.platform === "win32" || !child.pid || !child.kill) {
-				finishCodexAppServerTransportClose(child, options);
-				return false;
+				finishCodexAppServerTransportClose(child, options, forceKill);
+				return "uncertain";
 			}
-			let resumeRoot;
+			let contained;
 			try {
-				const contained = await terminateCodexAppServerDescendants(child);
-				if (contained === "exited") return true;
-				resumeRoot = contained;
+				contained = await terminateCodexAppServerDescendants(child);
 			} catch {
-				resumeRoot = void 0;
+				contained = void 0;
 			}
+			if (contained === "exited") return "natural";
 			try {
-				finishCodexAppServerTransportClose(child, options, resumeRoot);
+				finishCodexAppServerTransportClose(child, options, forceKill, contained?.resume);
 			} catch {
-				signalCodexAppServerTransport(child, "SIGKILL");
+				forceKill();
 			}
-			return false;
+			return contained ? "contained" : "uncertain";
 		})(),
-		naturalExit: false
+		naturalExit: false,
+		wasForced: () => forced
 	};
 	CODEX_APP_SERVER_TRANSPORT_CLOSES.set(child, closure);
 	return closure;
 }
-function finishCodexAppServerTransportClose(child, options, resumeRoot) {
+function finishCodexAppServerTransportClose(child, options, killTransport, resumeRoot) {
 	const forceKillDelayMs = options.forceKillDelayMs ?? 1e3;
 	const forceKill = setTimeout(() => {
 		if (hasCodexAppServerTransportExited(child)) return;
-		signalCodexAppServerTransport(child, "SIGKILL");
+		killTransport();
 	}, Math.max(1, forceKillDelayMs));
 	forceKill.unref?.();
 	child.once("exit", () => {
@@ -572,18 +596,24 @@ function finishCodexAppServerTransportClose(child, options, resumeRoot) {
 	child.stderr.unref?.();
 	child.stdin.unref?.();
 }
-/** Closes a transport and waits briefly for an exit event. */
+/** Reports physical settlement separately from confirmed process cleanup. */
 async function closeCodexAppServerTransportAndWait(child, options = {}) {
 	const drained = options.drainStdio ? Promise.all([child.stdout, child.stderr].map((stream) => finished(stream, { cleanup: true }))).then(() => true, () => false) : void 0;
 	const closure = beginCodexAppServerTransportClose(child, options);
-	const naturalExit = await closure.closing;
+	const containment = await closure.closing;
 	const settled = await waitForCodexAppServerTransportExit(child, options.exitTimeoutMs ?? 2e3, drained);
-	closure.naturalExit = naturalExit && settled;
+	closure.naturalExit = containment === "natural" && settled;
 	if (options.drainStdio) {
 		child.stdout.destroy?.();
 		child.stderr.destroy?.();
 	}
-	return settled;
+	return settled ? {
+		exited: true,
+		cleanup: containment === "contained" && !closure.wasForced() && child.signalCode == null ? "closed" : "uncertain"
+	} : {
+		exited: false,
+		cleanup: "uncertain"
+	};
 }
 function hasCodexAppServerTransportExited(child) {
 	return child.exitCode !== null && child.exitCode !== void 0 ? true : child.signalCode !== null && child.signalCode !== void 0;

package/dist/{upstream-session-fork-1fwbNKzQ.js → upstream-session-fork-De-sLJ2r.js}

@@ -1,30 +1,38 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-CyaXZvTe.js";
-import { A as resolveOpenClawExecPolicyForCodexAppServer, B as isJsonObject, O as readCodexPluginConfig, p as assertCodexModelBackedReviewerEffectiveConfig, s as resolveCodexSupervisionAppServerRuntimeOptions, z as flattenCodexDynamicToolFunctions } from "./config-CyapYSji.js";
-import { Ct as claimCodexAppServerLiveThread, Et as hasCodexAppServerLiveThread, Q as assertCodexThreadAcceptsDirectInput, Xt as readCodexSessionMeta, et as assertCodexThreadForkResponse, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-CKhX2kFt.js";
-import "./session-binding-4Ki04sW-.js";
-import { i as buildCodexPluginAppCacheKey } from "./thread-resume-BLgqkUc1.js";
-import { $ as resolveCodexNativeSkillIsolation, C as buildDeveloperInstructions, Et as mergeCodexThreadConfigs, F as assertCodexNativeHookRelayAllowed, I as buildCodexNativeHookRelayConfig, Ot as shouldBuildCodexPluginThreadConfig, Q as applyCodexNativeSkillIsolation, R as buildCodexNativeHookRelayId, S as resolveCodexWebSearchPlan, St as buildCodexPluginThreadConfig, V as resolveCodexNativeHookRelayEvents, W as checkCodexThreadAppAvailability, Z as parseCodexNativeToolCatalog, it as fingerprintUserMcpServersConfigPatch, rt as fingerprintJsonObject, tt as codexDynamicToolsFingerprint, y as buildCodexThreadConfiguration } from "./thread-lifecycle-DPK30jad.js";
-import { o as withCodexAppServerThreadMutation } from "./thread-ownership-CbucAmmp.js";
-import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError } from "./thread-policy-CTalhWFy.js";
-import { l as projectCodexUserItemText } from "./transcript-mirror-_njEB84z.js";
-import { l as resolveCodexNativeExecutionPolicy, t as CodexAppServerScopedRequestRejectedError } from "./request-C8H22rPi.js";
+import { l as sessionBindingIdentity } from "./session-binding-record-CaZjYwNS.js";
+import { f as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-jnIFvwxD.js";
+import { a as flattenCodexDynamicToolFunctions, o as isJsonObject, x as readCodexPluginConfig } from "./protocol-CAAcVIKF.js";
+import { _ as assertCodexThreadAcceptsDirectInput, v as assertCodexThreadForkResponse } from "./client-BEKu4yDx.js";
+import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.js";
+import { n as readCodexSessionMeta } from "./session-catalog-provenance-DkJHo735.js";
 import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
-import { i as fingerprintCodexMirrorSourceMessage, o as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-Byl34PC-.js";
-import { n as prepareCodexSessionInitialization } from "./session-initialization-BCFVnLL4.js";
-import { i as createImportedCodexSession, n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-DReTpGz6.js";
-import { l as isCodexDynamicToolExcluded, n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-BpG9Ltc5.js";
-import { o as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-context-CSazkWns.js";
+import { a as projectCodexUserItemText } from "./session-catalog-home-id-D7-aLiNt.js";
+import { n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.js";
+import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-CdSQzWyX.js";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-CGvGOpeR.js";
+import { n as resolveOpenClawExecPolicyForCodexAppServer } from "./config-JDfTI4VI.js";
+import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
+import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-DibE0krH.js";
+import { L as hasCodexAppServerLiveThread, N as claimCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-CVhez2Uo.js";
+import { C as buildDeveloperInstructions, Dt as shouldBuildCodexPluginThreadConfig, F as assertCodexNativeHookRelayAllowed, I as buildCodexNativeHookRelayConfig, J as parseCodexNativeToolCatalog, Q as codexDynamicToolsFingerprint, R as buildCodexNativeHookRelayId, S as resolveCodexWebSearchPlan, Tt as mergeCodexThreadConfigs, V as resolveCodexNativeHookRelayEvents, W as checkCodexThreadAppAvailability, X as resolveCodexNativeSkillIsolation, Y as applyCodexNativeSkillIsolation, et as fingerprintJsonObject, tt as fingerprintUserMcpServersConfigPatch, xt as buildCodexPluginThreadConfig, y as buildCodexThreadConfiguration } from "./thread-lifecycle-D1pzRwHB.js";
+import "./session-binding-CKSepwIC.js";
+import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError } from "./thread-policy-D8kI7yAO.js";
+import "./thread-ownership-D6oASVRu.js";
+import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-umd0tgh4.js";
+import { l as isCodexDynamicToolExcluded, n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-W4tfK5Y5.js";
+import { o as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-context-AO4DSjE0.js";
+import { n as prepareCodexSessionInitialization } from "./session-initialization-Jo86C60I.js";
+import { createImportedCodexSession } from "./session-history-import-DFN7sWRU.js";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
-import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
-import { lstat } from "node:fs/promises";
 import path from "node:path";
-import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { lstat } from "node:fs/promises";
 import { constants, createZstdDecompress } from "node:zlib";
 import { root } from "openclaw/plugin-sdk/file-access-runtime";
 import { isDeepStrictEqual } from "node:util";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
+import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
+import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { buildCodexUserMcpServersThreadConfigPatchForRuntime, resolveCodexMcpToolOverridesForAgent } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { buildNativeHookRelayCommandPlan } from "openclaw/plugin-sdk/native-hook-relay-runtime";
 import { appendSessionTranscriptMessagesByIdentity, readVisibleSessionTranscriptMessageEntries } from "openclaw/plugin-sdk/session-transcript-runtime";

package/dist/{usage-i9fv5-4m.js → usage-CPPTmBvZ.js}

@@ -1,6 +1,7 @@
-import { i as resolveCodexAppServerRuntimeOptions } from "./config-CyapYSji.js";
-import { n as readCodexAppServerUsage } from "./request-C8H22rPi.js";
-import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-Fx_l4eNa.js";
+import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-Bqnx1N4z.js";
+import { n as readCodexAppServerUsage } from "./request-CGvGOpeR.js";
+import "./config-JDfTI4VI.js";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
 import { CODEX_APP_SERVER_AUTH_MARKER } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/usage.ts
 /** Handles the synthetic usage credential for a Codex-backed OpenAI route. */

package/dist/version-omm6IPI3.js

@@ -0,0 +1,12 @@
+//#region extensions/codex/src/app-server/version.ts
+/**
+* Version and package pins for the managed Codex app-server runtime.
+*/
+/** Exact Codex app-server version shipped by the OpenClaw Codex bridge. */
+const CODEX_APP_SERVER_VERSION = "0.153.4";
+/** Inclusive runtime compatibility floor for external app-server binaries. */
+const MIN_SUPPORTED_CODEX_APP_SERVER_VERSION = "0.149.0";
+/** npm package name for the managed Codex app-server binary. */
+const MANAGED_CODEX_APP_SERVER_PACKAGE = "@openai/codex";
+//#endregion
+export { MANAGED_CODEX_APP_SERVER_PACKAGE as n, MIN_SUPPORTED_CODEX_APP_SERVER_VERSION as r, CODEX_APP_SERVER_VERSION as t };

package/dist/{web-search-provider.runtime-DKQn67A7.js → web-search-provider.runtime-CSVgQL0w.js}

@@ -1,6 +1,6 @@
-import { B as isJsonObject } from "./config-CyapYSji.js";
-import { x as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-DPK30jad.js";
-import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-DxGJRYbY.js";
+import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
+import { x as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-D1pzRwHB.js";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-lRpmZHFv.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
 //#region extensions/codex/src/web-search-provider.runtime.ts

package/openclaw.plugin.json

@@ -19,7 +19,14 @@
   ],
   "doctorContract": {
     "configRepair": true,
-    "stateMigrations": true
+    "stateMigrations": [
+      { "id": "codex-app-server-sidecars-to-plugin-state" },
+      {
+        "id": "codex-app-server-orphaned-session-bindings",
+        "doctorOnly": true,
+        "phase": "after-session-repair"
+      }
+    ]
   },
   "doctorHealthChecks": true,
   "sessionRouteStateOwners": [
@@ -81,6 +88,20 @@
       "cliCommand": "plugins"
     }
   ],
+  "setup": {
+    "nativeSessionCatalog": {
+      "label": "Codex",
+      "legacyDefaultEnabled": true,
+      "description": "Existing native Codex conversations on this Gateway and eligible paired nodes.",
+      "nodeCommands": [
+        "codex.appServer.threads.list.v1",
+        "codex.appServer.thread.turns.list.v1",
+        "codex.sessionCatalog.transcript.read.v1",
+        "codex.terminal.resume.v1",
+        "codex.cli.sessions.list"
+      ]
+    }
+  },
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.9.2",
+  "version": "2026.9.3",
   "description": "OpenClaw Codex app-server harness and native session supervision plugin.",
   "repository": {
     "type": "git",
@@ -36,10 +36,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.9.2"
+      "pluginApi": ">=2026.9.3"
     },
     "build": {
-      "openclawVersion": "2026.9.2"
+      "openclawVersion": "2026.9.3"
     },
     "release": {
       "publishToClawHub": true,
@@ -59,7 +59,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.2"
+    "openclaw": ">=2026.9.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {