@openclaw/codex 2026.9.2 → 2026.9.3

package/dist/thread-policy-CTalhWFy.js

@@ -1,105 +0,0 @@
-import { O as readCodexPluginConfig, i as resolveCodexAppServerRuntimeOptions, s as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-CyapYSji.js";
-import { H as isCodexAppServerOverloadError, U as isCodexAppServerPrewriteRequestCancellationError } from "./shared-client-CKhX2kFt.js";
-import { n as buildCodexAppServerConnectionFingerprint, o as resolveCodexCatalogConnectionHome } from "./thread-resume-BLgqkUc1.js";
-import { r as requestCodexAppServerClientJson, t as CodexAppServerScopedRequestRejectedError } from "./request-C8H22rPi.js";
-import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-runtime";
-//#region extensions/codex/src/app-server/binding-connection.ts
-/** Prevents a prepared native session from becoming a fresh thread after its binding changes. */
-function assertCodexSessionRuntimeOwnership(binding, expected) {
-	if (!expected) return;
-	const auth = binding?.connectionScope === "supervision" ? "native" : "host";
-	const hostModelChanged = expected.auth === "host" && (!expected.modelRef || binding?.model !== expected.modelRef.model || binding?.modelProvider !== expected.modelRef.provider);
-	if (binding?.preserveNativeModel !== true || auth !== expected.auth || hostModelChanged) throw new AgentHarnessPreflightError("Codex native session ownership is missing or changed. Reattach the original native session or create a new chat with a concrete model; no replacement thread was started.");
-}
-/** Requires the native model pair after a supervised pending branch has materialized. */
-function requireCodexSupervisionModelSelection(binding) {
-	const model = binding.model?.trim();
-	const modelProvider = binding.modelProvider?.trim();
-	if (binding.connectionScope !== "supervision" || !model || !modelProvider) throw new Error("Codex supervised binding is missing its native model and provider; refusing request selection");
-	return {
-		model,
-		modelProvider
-	};
-}
-/** Resolves connection and auth ownership exclusively from the private thread binding. */
-function resolveCodexBindingAppServerConnection(params) {
-	const { binding, authProfileId, ...runtimeParams } = params;
-	const usesSupervisionConnection = binding?.connectionScope === "supervision";
-	if (usesSupervisionConnection && readCodexPluginConfig(runtimeParams.pluginConfig).supervision?.enabled !== true) throw new Error("Codex supervision is disabled; refusing to open a native user-home supervised session");
-	let appServer = (usesSupervisionConnection ? resolveCodexSupervisionAppServerRuntimeOptions : resolveCodexAppServerRuntimeOptions)(runtimeParams);
-	if (usesSupervisionConnection) {
-		const persistedFingerprint = binding.pendingSupervisionBranch?.connectionFingerprint ?? binding.appServerRuntimeFingerprint;
-		const catalogHome = persistedFingerprint ? resolveCodexCatalogConnectionHome(persistedFingerprint, runtimeParams.agentDir) : void 0;
-		if (catalogHome) appServer = {
-			...appServer,
-			start: {
-				...appServer.start,
-				homeScope: "user",
-				env: {
-					...appServer.start.env,
-					CODEX_HOME: catalogHome
-				}
-			}
-		};
-		const currentFingerprint = buildCodexAppServerConnectionFingerprint(appServer, runtimeParams.agentDir);
-		if (!persistedFingerprint || persistedFingerprint !== currentFingerprint) throw new Error("Codex supervision connection changed; refusing to operate on its bound native thread");
-	}
-	return {
-		appServer,
-		usesSupervisionConnection,
-		requestAuthProfileId: usesSupervisionConnection ? void 0 : authProfileId,
-		clientAuthProfileId: usesSupervisionConnection ? null : authProfileId
-	};
-}
-//#endregion
-//#region extensions/codex/src/app-server/thread-policy.ts
-/** A refusal, not a failed native write: the ephemeral conversation must stay alive. */
-var CodexIncognitoPolicyChangeError = class extends AgentHarnessPreflightError {
-	constructor() {
-		super("Codex cannot change generic instructions in a live incognito conversation. No turn was sent and the conversation is preserved. Restore the previous instructions to continue it, or start a new incognito conversation for the changed policy.");
-		this.name = "CodexIncognitoPolicyChangeError";
-	}
-};
-/** Never replay a handoff: native persistence can precede an unsuccessful RPC response. */
-var CodexThreadPolicyHandoffError = class extends AgentHarnessPreflightError {
-	constructor(outcome, cause) {
-		super(`Codex session policy handoff failed: ${cause instanceof Error ? cause.message : String(cause)}. The conversation is preserved; reconnect before retrying.`, { cause });
-		this.outcome = outcome;
-		this.name = "CodexThreadPolicyHandoffError";
-	}
-};
-/** The complete body remains generic configuration for compaction and native child inheritance. */
-async function refreshCodexThreadPolicy(params) {
-	const text = "The following is the complete current OpenClaw-supplied generic instruction policy. It replaces earlier OpenClaw-supplied generic policy, including OpenClaw-carried workspace text and sections now absent. Independently supplied native managed, guardian, security, collaboration, and project instructions retain their authority. User requests retain their own authority.\n\n" + (params.developerInstructions === "" ? "The current OpenClaw generic policy is empty; earlier OpenClaw generic policy is withdrawn." : params.developerInstructions);
-	let outcome = "unknown";
-	try {
-		await requestCodexAppServerClientJson({
-			...params,
-			method: "thread/inject_items",
-			requestParams: {
-				threadId: params.threadId,
-				items: [{
-					type: "message",
-					role: "developer",
-					content: [{
-						type: "input_text",
-						text
-					}]
-				}]
-			}
-		});
-		outcome = "acknowledged";
-		params.assertCurrent();
-		params.signal?.throwIfAborted();
-	} catch (cause) {
-		if (outcome !== "acknowledged" && (cause instanceof CodexAppServerScopedRequestRejectedError || isCodexAppServerPrewriteRequestCancellationError(cause) || isCodexAppServerOverloadError(cause))) outcome = "not-written";
-		throw new CodexThreadPolicyHandoffError(outcome, cause);
-	}
-}
-/** Native lineage classifies the exact bound thread; it never grants session authority. */
-function assertCodexSupervisionThreadLineage(binding, thread) {
-	if (binding.connectionScope !== "supervision" || binding.pendingSupervisionBranch) return;
-	if (thread.id !== binding.threadId || !binding.supervisionSourceThreadId || thread.forkedFromId !== null && (typeof thread.forkedFromId !== "string" || !thread.forkedFromId.trim() || thread.forkedFromId === thread.id)) throw new Error("Codex supervision lineage could not be verified; reconnect before continuing.");
-}
-//#endregion
-export { assertCodexSessionRuntimeOwnership as a, refreshCodexThreadPolicy as i, CodexThreadPolicyHandoffError as n, requireCodexSupervisionModelSelection as o, assertCodexSupervisionThreadLineage as r, resolveCodexBindingAppServerConnection as s, CodexIncognitoPolicyChangeError as t };

package/dist/{auth-binding-Ds_QVm-X.js → auth-binding-Co2Vfcf_.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { fingerprintResolvedAuthProfileCredential } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveApiKeyForProfile } from "openclaw/plugin-sdk/agent-runtime";
+import { fingerprintResolvedAuthProfileCredential } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveOpenAICodexAuthIdentity } from "openclaw/plugin-sdk/provider-auth";
 //#region extensions/codex/src/app-server/auth-binding.ts
 var auth_binding_exports = /* @__PURE__ */ __exportAll({