@openclaw/codex 2026.9.3 → 2026.9.4

package/dist/{shared-client-CVhez2Uo.js → shared-client-CscigXXL.js}

@@ -1,16 +1,16 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { t as codexBuildSymbol } from "./build-state-6RL6qohz.js";
+import { n as defineCodexBuildState, t as codexBuildSymbol } from "./build-state-BCmg9-5p.js";
 import { t as CODEX_APP_SERVER_AUTH_PROVIDER } from "./auth-profile-selection-DFu9e167.js";
-import { a as resolveCodexAppServerStartOptionsForAgent, o as resolveCodexComputerUseConfig, t as codexAppServerStartOptionsKey } from "./config-options-jnIFvwxD.js";
-import { c as resolveCodexAppServerLocalHomeDir, l as resolveCodexAppServerUserHomeDir, o as isJsonObject, s as resolveCodexAppServerHomeDir, u as withEphemeralCodexAuthStore } from "./protocol-CAAcVIKF.js";
+import { a as resolveCodexAppServerStartOptionsForAgent, g as readCodexEffectiveConfig, h as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES, o as resolveCodexComputerUseConfig, t as codexAppServerStartOptionsKey } from "./config-options-CXMq1T-C.js";
+import { c as resolveCodexAppServerLocalHomeDir, l as resolveCodexAppServerUserHomeDir, o as isJsonObject, s as resolveCodexAppServerHomeDir, u as withEphemeralCodexAuthStore } from "./protocol-5bh1G-H7.js";
 import { t as isCodexAppServerProxyLaunch } from "./launch-args-RXQwn8zV.js";
-import { f as isUnsupportedCodexAppServerVersionError, t as CodexAppServerClient } from "./client-BEKu4yDx.js";
-import { c as resolveMacOSDesktopCodexBundledMarketplaceCandidates, l as resolveMacOSDesktopCodexComputerUseServiceAppCandidates, n as resolveManagedCodexAppServerStartOptions, o as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, r as resolveManagedCodexNativeCommand, s as resolveMacOSDesktopCodexAppPathCandidates, t as isManagedCodexDesktopCommand } from "./managed-binary-DrjjRRUD.js";
-import { _ as isCodexDesktopGenerationCurrent, a as readCodexCliAuthFileApiKey, c as resolveCodexAppServerPreparedApiKeyCacheKey, d as createCodexAppServerStartupLifetime, f as getCurrentSharedClientEntry, i as fingerprintTokenAuthProfileCacheKey, l as closeRetiredSharedClientEntry, m as retireSharedCodexAppServerClientIfCurrent, n as CODEX_AUTH_JSON_FILENAME, o as readFirstNonEmptyEnv, p as getSharedCodexAppServerClientState, r as fingerprintApiKeyAuthProfileCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey, t as CODEX_APP_SERVER_API_KEY_ENV_VARS, u as closeRetiredSharedClientEntryIfIdle, v as waitForCodexDesktopGeneration } from "./auth-cache-key-Kq6oerr6.js";
+import { f as isUnsupportedCodexAppServerVersionError, t as CodexAppServerClient } from "./client-B57KWPQx.js";
+import { c as resolveMacOSDesktopCodexAppPathCandidates, i as resolveManagedCodexNativeCommand, l as resolveMacOSDesktopCodexBundledMarketplaceCandidates, r as resolveManagedCodexAppServerStartOptions, s as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, t as isManagedCodexDesktopCommand, u as resolveMacOSDesktopCodexComputerUseServiceAppCandidates } from "./managed-binary-D22rNEcR.js";
+import { _ as isCodexDesktopGenerationCurrent, a as readCodexCliAuthFileApiKey, c as resolveCodexAppServerPreparedApiKeyCacheKey, d as createCodexAppServerStartupLifetime, f as getCurrentSharedClientEntry, i as fingerprintTokenAuthProfileCacheKey, l as closeRetiredSharedClientEntry, m as retireSharedCodexAppServerClientIfCurrent, n as CODEX_AUTH_JSON_FILENAME, o as readFirstNonEmptyEnv, p as getSharedCodexAppServerClientState, r as fingerprintApiKeyAuthProfileCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey, t as CODEX_APP_SERVER_API_KEY_ENV_VARS, u as closeRetiredSharedClientEntryIfIdle, v as waitForCodexDesktopGeneration } from "./auth-cache-key-7orQae_j.js";
 import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-BGjHoYLr.js";
-import { n as readCodexSessionMeta } from "./session-catalog-provenance-DkJHo735.js";
 import { n as withTimeout } from "./timeout-BVw8aaM1.js";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
+import { n as readCodexSessionMeta } from "./session-catalog-provenance-D-dIfRAH.js";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-D0zGNIHu.js";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, r as resolveCodexAppServerAuthProfileId, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CwzO4_RG.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
@@ -22,10 +22,9 @@ import path from "node:path";
 import fs$1 from "node:fs/promises";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { isDeepStrictEqual } from "node:util";
-import { ensureAuthProfileStore, findPersistedAuthProfileCredential, loadAuthProfileStoreForSecretsRuntime, refreshOAuthCredentialForRuntime, resolveApiKeyForProfile, resolvePersistedAuthProfileOwnerAgentDir } from "openclaw/plugin-sdk/agent-runtime";
+import { ensureAuthProfileStore, findPersistedAuthProfileCredential, refreshOAuthCredentialForRuntime, resolveApiKeyForProfile, resolvePersistedAuthProfileOwnerAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { AgentHarnessPreflightError as AgentHarnessPreflightError$1, embeddedAgentLog as embeddedAgentLog$1, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
+import { isDeepStrictEqual } from "node:util";
 import { assertNoSymlinkParents } from "openclaw/plugin-sdk/security-runtime";
 import { hasUsableOAuthCredential, resolveOpenAICodexAuthIdentity } from "openclaw/plugin-sdk/provider-auth";
 //#region extensions/codex/src/app-server/computer-use-service-path.ts
@@ -1131,7 +1130,16 @@ async function applyCodexAppServerAuthProfile(params) {
 			assertCurrent: params.assertCurrent
 		});
 	}
-	if (loginParams) await params.client.request("account/login/start", loginParams, { assertCurrent: params.assertCurrent });
+	if (loginParams) {
+		await params.client.request("account/login/start", loginParams, { assertCurrent: params.assertCurrent });
+		if (loginParams.type === "chatgptAuthTokens") {
+			params.assertCurrent?.();
+			return {
+				accessFingerprint: fingerprintTokenAuthProfileCacheKey(loginParams.accessToken),
+				chatgptAccountId: loginParams.chatgptAccountId
+			};
+		}
+	}
 }
 /**
 * Native-home connections are verified, never logged into. Both directions of the
@@ -1178,6 +1186,8 @@ async function resolveCodexAppServerAuthProfileLoginParams(params) {
 }
 async function refreshCodexAppServerAuthTokens(params) {
 	const previousAccountId = params.previousAccountId?.trim();
+	const handoffAccountId = params.authHandoff?.chatgptAccountId.trim();
+	if (previousAccountId && handoffAccountId && previousAccountId !== handoffAccountId) throw new Error("ChatGPT workspace changed before Codex token refresh. Retry to start a client for the selected workspace.");
 	if (previousAccountId) {
 		const store = resolveCodexAppServerAuthProfileStore(params);
 		const profileId = resolveCodexAppServerAuthProfileId({
@@ -1195,6 +1205,7 @@ async function refreshCodexAppServerAuthTokens(params) {
 	});
 	if (!loginParams || loginParams.type !== "chatgptAuthTokens") throw new Error("Codex app-server ChatGPT token refresh requires an OAuth auth profile. Sign in with `openclaw models auth login --provider openai`, select that profile, then retry.");
 	if (previousAccountId && loginParams.chatgptAccountId !== previousAccountId) throw new Error("ChatGPT workspace changed during Codex token refresh. Retry to start a client for the selected workspace.");
+	if (params.authHandoff && loginParams.chatgptAccountId !== params.authHandoff.chatgptAccountId) throw new Error("ChatGPT workspace changed during Codex token refresh. Retry to start a client for the selected workspace.");
 	return {
 		accessToken: loginParams.accessToken,
 		chatgptAccountId: loginParams.chatgptAccountId,
@@ -1222,6 +1233,8 @@ async function resolveCodexAppServerAuthProfileLoginParamsInternal(params) {
 		store,
 		preferStoreCredential: Boolean(params.authProfileStore?.profiles[profileId]),
 		forceOAuthRefresh: params.forceOAuthRefresh === true,
+		authHandoff: params.authHandoff,
+		previousAccountId: params.previousAccountId,
 		config: params.config
 	});
 	if (!loginParams) throw new CodexAppServerAuthProfileUnavailableError(`Codex app-server auth profile "${profileId}" does not contain usable credentials. Repair or replace the selected OpenAI credential, then retry.`);
@@ -1268,6 +1281,8 @@ async function resolveLoginParamsForCredential(profileId, credential, params) {
 		store: params.store,
 		preferStoreCredential: params.preferStoreCredential,
 		forceRefresh: params.forceOAuthRefresh,
+		authHandoff: params.authHandoff,
+		previousAccountId: params.previousAccountId,
 		config: params.config
 	});
 	const accessToken = resolvedCredential.access?.trim();
@@ -1286,9 +1301,9 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 		store: params.store,
 		profileId,
 		persistedCredential,
-		suppliedCredential: credential,
-		config: params.config
+		suppliedCredential: credential
 	});
+	if (params.preferStoreCredential && params.store.runtimePersistedProfileIds?.includes(profileId) && (persistedCredential?.type !== "oauth" || !isCodexAppServerAuthProvider(persistedCredential.provider))) throw new CodexAppServerAuthProfileUnavailableError(`Codex app-server auth profile "${profileId}" is no longer available. Sign in again with OpenClaw, then retry.`);
 	const store = useScopedCredential ? params.store : resolveCodexAppServerAuthProfileStore({
 		agentDir: ownerAgentDir,
 		authProfileId: profileId,
@@ -1297,15 +1312,28 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 	const persistedOAuthCredential = !useScopedCredential && persistedCredential?.type === "oauth" && isCodexAppServerAuthProvider(persistedCredential.provider) ? persistedCredential : void 0;
 	const ownerCredential = store.profiles[profileId];
 	const overlaidOAuthCredential = ownerCredential?.type === "oauth" && isCodexAppServerAuthProvider(ownerCredential.provider) ? ownerCredential : void 0;
+	const currentCredential = useScopedCredential || !persistedOAuthCredential ? overlaidOAuthCredential : persistedOAuthCredential;
+	const reuseCompletedRotation = params.forceRefresh && (Boolean(persistedOAuthCredential) || params.preferStoreCredential) && shouldReuseCompletedCodexOAuthRotation({
+		credential: currentCredential,
+		authHandoff: params.authHandoff,
+		previousAccountId: params.previousAccountId
+	});
+	const selectedAccountId = currentCredential ? resolveOpenAICodexAuthIdentity(currentCredential).accountId?.trim() : void 0;
+	const callbackAccountId = params.authHandoff?.chatgptAccountId.trim() ?? params.previousAccountId?.trim() ?? void 0;
+	if (callbackAccountId && selectedAccountId && callbackAccountId !== selectedAccountId) throw new Error("ChatGPT workspace changed before Codex token refresh. Retry to start a client for the selected workspace.");
+	const expectedAccountId = callbackAccountId ?? selectedAccountId;
 	if (useScopedCredential && overlaidOAuthCredential) return await resolveScopedOAuthCredential({
 		store,
 		profileId,
 		credential: overlaidOAuthCredential,
-		forceRefresh: params.forceRefresh
+		forceRefresh: params.forceRefresh && !reuseCompletedRotation,
+		expectedAccountId
 	});
 	if (params.forceRefresh && !persistedOAuthCredential && overlaidOAuthCredential) {
+		if (reuseCompletedRotation) return overlaidOAuthCredential;
 		const refreshedRuntimeCredential = await refreshOAuthCredentialForRuntime({ credential: overlaidOAuthCredential });
 		if (!refreshedRuntimeCredential?.access?.trim()) throw new Error(`Codex app-server auth profile "${profileId}" could not refresh. Sign in again with OpenClaw, then retry.`);
+		assertCodexOAuthRefreshWorkspace(profileId, refreshedRuntimeCredential, expectedAccountId);
 		store.profiles[profileId] = refreshedRuntimeCredential;
 		return refreshedRuntimeCredential;
 	}
@@ -1313,23 +1341,30 @@ async function resolveOAuthCredentialForCodexAppServer(profileId, credential, pa
 		store,
 		profileId,
 		agentDir: ownerAgentDir,
-		forceRefresh: params.forceRefresh && Boolean(persistedOAuthCredential)
+		forceRefresh: params.forceRefresh && Boolean(persistedOAuthCredential) && !reuseCompletedRotation,
+		allowProfileFallback: false,
+		...expectedAccountId ? { validateOAuthCredential: (candidate) => assertCodexOAuthRefreshWorkspace(profileId, candidate, expectedAccountId) } : {}
 	});
-	const refreshed = useScopedCredential ? void 0 : loadAuthProfileStoreForSecretsRuntime(ownerAgentDir, { profileId }).profiles[profileId];
-	const refreshedOAuthCredential = refreshed?.type === "oauth" && isCodexAppServerAuthProvider(refreshed.provider) ? refreshed : void 0;
-	if (refreshedOAuthCredential && isDeepStrictEqual(params.store.profiles[profileId], credential)) params.store.profiles[profileId] = refreshedOAuthCredential;
-	const storedCredential = store.profiles[profileId];
-	const candidate = refreshedOAuthCredential ? refreshedOAuthCredential : storedCredential?.type === "oauth" && isCodexAppServerAuthProvider(storedCredential.provider) ? storedCredential : credential;
-	return resolved?.apiKey ? {
-		...candidate,
+	if (!resolved || resolved.credential?.type !== "oauth" || !isCodexAppServerAuthProvider(resolved.credential.provider) || !resolved.apiKey.trim()) throw new CodexAppServerAuthProfileUnavailableError(`Codex app-server auth profile "${profileId}" is no longer available. Sign in again with OpenClaw, then retry.`);
+	const candidate = {
+		...resolved.credential,
 		access: resolved.apiKey
-	} : candidate;
+	};
+	if (isDeepStrictEqual(params.store.profiles[profileId], credential)) params.store.profiles[profileId] = candidate;
+	return candidate;
+}
+function shouldReuseCompletedCodexOAuthRotation(params) {
+	const handoff = params.authHandoff;
+	const credential = params.credential;
+	if (!handoff || !credential || !hasUsableOAuthCredential(credential) || fingerprintTokenAuthProfileCacheKey(credential.access.trim()) === handoff.accessFingerprint) return false;
+	const accountId = resolveOpenAICodexAuthIdentity(credential).accountId?.trim();
+	const previousAccountId = params.previousAccountId?.trim();
+	return accountId === handoff.chatgptAccountId && (!previousAccountId || previousAccountId === handoff.chatgptAccountId);
 }
 function shouldUseScopedOAuthCredential(params) {
 	if (!params.store.runtimePersistedProfileIds?.includes(params.profileId)) return true;
 	const persisted = params.persistedCredential;
-	if (persisted?.type !== "oauth") return true;
-	if (resolveProviderIdForAuth(persisted.provider, { config: params.config }) !== resolveProviderIdForAuth(params.suppliedCredential.provider, { config: params.config })) return true;
+	if (persisted?.type !== "oauth" || !isCodexAppServerAuthProvider(persisted.provider)) return false;
 	return !isDeepStrictEqual(persisted, params.suppliedCredential) && !hasMatchingOAuthIdentity(persisted, params.suppliedCredential);
 }
 function hasMatchingOAuthIdentity(persisted, supplied) {
@@ -1342,7 +1377,11 @@ function hasMatchingOAuthIdentity(persisted, supplied) {
 }
 async function resolveScopedOAuthCredential(params) {
 	const existingRefresh = scopedOAuthRefreshQueues.get(params.store)?.get(params.profileId);
-	if (existingRefresh) return await existingRefresh;
+	if (existingRefresh) {
+		const refreshed = await existingRefresh;
+		assertCodexOAuthRefreshWorkspace(params.profileId, refreshed, params.expectedAccountId);
+		return refreshed;
+	}
 	if (!params.forceRefresh && hasUsableOAuthCredential(params.credential)) return params.credential;
 	const storeRefreshes = scopedOAuthRefreshQueues.get(params.store) ?? /* @__PURE__ */ new Map();
 	scopedOAuthRefreshQueues.set(params.store, storeRefreshes);
@@ -1352,6 +1391,7 @@ async function resolveScopedOAuthCredential(params) {
 		if (!params.forceRefresh && hasUsableOAuthCredential(credential)) return credential;
 		const refreshed = await refreshOAuthCredentialForRuntime({ credential });
 		if (!refreshed?.access?.trim()) throw new Error(`Codex app-server auth profile "${params.profileId}" could not refresh. Sign in again with OpenClaw, then retry.`);
+		assertCodexOAuthRefreshWorkspace(params.profileId, refreshed, params.expectedAccountId);
 		if (!isDeepStrictEqual(params.store.profiles[params.profileId], credential)) throw new Error(`Codex app-server auth profile "${params.profileId}" changed while refreshing. Retry with the newly selected OpenAI profile.`);
 		params.store.profiles[params.profileId] = refreshed;
 		return refreshed;
@@ -1363,6 +1403,11 @@ async function resolveScopedOAuthCredential(params) {
 		if (storeRefreshes.get(params.profileId) === refresh) storeRefreshes.delete(params.profileId);
 	}
 }
+function assertCodexOAuthRefreshWorkspace(profileId, credential, expectedAccountId) {
+	if (!expectedAccountId) return;
+	const loginParams = buildChatgptAuthTokensParams(profileId, credential, credential.access.trim());
+	if (loginParams.type !== "chatgptAuthTokens" || loginParams.chatgptAccountId !== expectedAccountId) throw new Error("ChatGPT workspace changed during Codex token refresh. Retry to start a client for the selected workspace.");
+}
 function isCodexAppServerAuthProvider(provider) {
 	return provider.trim().toLowerCase() === CODEX_APP_SERVER_AUTH_PROVIDER;
 }
@@ -1531,6 +1576,10 @@ function isCodexAppServerClientRuntimeLive(client) {
 	const runtime = configuredClients.get(client);
 	return runtime !== void 0 && !runtime.closed;
 }
+function recordCodexAppServerAuthHandoff(client, handoff) {
+	const runtime = configuredClients.get(client);
+	if (runtime && !runtime.closed && handoff) runtime.authHandoff = handoff;
+}
 /** Reference history is only trusted while this native subscription stays warm. */
 function forgetCodexWorkspaceReferences(client, threadId) {
 	configuredClients.get(client)?.workspaceReferences.delete(threadId);
@@ -1616,15 +1665,22 @@ function ensureCodexAppServerClientRuntime(client, context) {
 		if (request.method !== "account/chatgptAuthTokens/refresh") return;
 		if (runtime.context.authMode === "prepared-api-key") throw new Error("ChatGPT token refresh is unavailable for prepared Codex API-key auth.");
 		const previousAccountId = isJsonObject(request.params) && typeof request.params.previousAccountId === "string" ? request.params.previousAccountId.trim() || void 0 : void 0;
+		const authHandoff = runtime.authHandoff;
 		try {
 			const tokens = await withTimeout(refreshCodexAppServerAuthTokens({
 				agentDir: runtime.context.agentDir,
 				authProfileId: runtime.context.authProfileId,
+				...authHandoff ? { authHandoff } : {},
 				...previousAccountId ? { previousAccountId } : {},
 				...runtime.context.authProfileStore ? { authProfileStore: runtime.context.authProfileStore } : {},
 				config: runtime.context.config
 			}), CODEX_EXTERNAL_AUTH_REFRESH_TIMEOUT_MS, "Codex app-server ChatGPT token refresh timed out before its external-auth deadline. Retry the request; if it persists, sign in again with OpenClaw.");
 			if (previousAccountId && tokens.chatgptAccountId !== previousAccountId) throw new Error("ChatGPT workspace changed during Codex token refresh. Retry to start a client for the selected workspace.");
+			if (runtime.closed) throw new Error("Codex app-server client closed during ChatGPT token refresh.");
+			runtime.authHandoff = {
+				accessFingerprint: fingerprintTokenAuthProfileCacheKey(tokens.accessToken),
+				chatgptAccountId: tokens.chatgptAccountId
+			};
 			return { ...tokens };
 		} catch (error) {
 			runtime.context.onAuthRefreshFailure?.();
@@ -2005,6 +2061,146 @@ function resolveCodexGatewayTimeoutWithGraceMs(timeoutMs, graceMs = 1e4) {
 	return addTimerTimeoutGraceMs(timeout, grace) ?? timeout;
 }
 //#endregion
+//#region extensions/codex/src/app-server/inference-routing.ts
+const owners = defineCodexBuildState("openclaw.codexAppServerInferenceOwners", () => /* @__PURE__ */ new WeakMap())();
+const MAX_ROUTES = 8;
+const MAX_THREADS = 256;
+const NATIVE_OPENAI_UPSTREAMS = /* @__PURE__ */ new Set(["https://api.openai.com/v1", "https://chatgpt.com/backend-api/codex"]);
+/** Only managed native stdio startup calls this; locality or metadata cannot opt a client in. */
+function ownCodexInferenceClient(client) {
+	if (owners.has(client)) return;
+	const owner = {
+		closed: false,
+		routes: /* @__PURE__ */ new Map(),
+		threads: /* @__PURE__ */ new Map(),
+		handles: /* @__PURE__ */ new Set()
+	};
+	owners.set(client, owner);
+	const close = () => {
+		owner.closed = true;
+		owner.threads.clear();
+		owner.handles.clear();
+		for (const pending of owner.routes.values()) pending.then((route) => route.close(), () => {});
+		owner.routes.clear();
+	};
+	client.addCloseHandler(close);
+	client.addNotificationHandler((notification) => {
+		if (notification.method === "thread/closed" && isJsonObject(notification.params) && typeof notification.params.threadId === "string") owner.threads.delete(notification.params.threadId);
+		if (notification.method !== "account/updated" || !owner.authRoute) return;
+		const mode = isJsonObject(notification.params) ? notification.params.authMode : void 0;
+		if ((mode === "apiKey" ? "apiKey" : mode === "chatgpt" || mode === "chatgptAuthTokens" ? "chatgpt" : void 0) !== owner.authRoute) close();
+	});
+}
+async function prepareCodexInferenceRoute(params) {
+	const owner = owners.get(params.client);
+	if (!owner) return;
+	const assertClient = () => {
+		if (owner.closed || owners.get(params.client) !== owner) throw new Error("Codex inference route ownership changed; reconnect before retrying");
+	};
+	const assertCurrent = () => {
+		assertClient();
+		params.signal?.throwIfAborted();
+		params.assertCurrent();
+	};
+	assertCurrent();
+	const snapshot = params.effectiveConfig ?? await readCodexEffectiveConfig(params.client, params.cwd, { signal: params.signal });
+	assertCurrent();
+	if (snapshot.config.model_provider != null && snapshot.config.model_provider !== "openai") return;
+	if (isJsonObject(snapshot.config.features) && snapshot.config.features.respect_system_proxy === true) return;
+	const configured = snapshot.config.openai_base_url;
+	if (configured != null && typeof configured !== "string") throw new Error("Codex inference upstream configuration is invalid");
+	if (configured) {
+		let target;
+		try {
+			target = new URL(configured);
+		} catch {
+			return;
+		}
+		if (!NATIVE_OPENAI_UPSTREAMS.has(target.href.replace(/\/$/, ""))) return;
+	}
+	const origin = snapshot.origins?.openai_base_url;
+	if (origin && !CODEX_SESSION_OVERRIDABLE_LAYER_TYPES.has(origin.name.type)) return;
+	const account = await params.client.request("account/read", { refreshToken: false }, {
+		signal: params.signal,
+		assertCurrent
+	});
+	assertCurrent();
+	const type = isJsonObject(account.account) ? account.account.type : void 0;
+	if (type !== "apiKey" && type !== "chatgpt") return;
+	if (owner.authRoute && owner.authRoute !== type) throw new Error("Codex native account route changed; reconnect before retrying");
+	owner.authRoute = type;
+	const target = new URL(configured || (type === "apiKey" ? "https://api.openai.com/v1" : "https://chatgpt.com/backend-api/codex"));
+	const key = target.toString();
+	let pending = owner.routes.get(key);
+	if (!pending) {
+		if (owner.routes.size >= MAX_ROUTES) throw new Error("Codex inference route limit reached");
+		pending = import("./inference-proxy-HGXKUIre.js").then(({ createCodexInferenceProxy }) => {
+			assertClient();
+			return createCodexInferenceProxy({
+				upstream: target,
+				assertCurrent: assertClient
+			});
+		});
+		owner.routes.set(key, pending);
+	}
+	const route = await pending;
+	assertCurrent();
+	route.assertCurrent();
+	params.client.protectPrivateTransportSecret(new URL(route.baseUrl).pathname.split("/")[1] ?? "");
+	owner.handles.add(route);
+	return route;
+}
+/** Prepare a managed thread without changing an attached or unsupported native profile. */
+async function prepareCodexInferenceThreadConfig(params) {
+	const { binding } = params;
+	if (binding?.connectionScope === "supervision" || binding?.preserveNativeModel === true) return;
+	const route = await prepareCodexInferenceRoute(params);
+	if (!route) return;
+	if (binding?.clientId === params.clientId && !getCodexInferenceThread(params.client, binding.threadId)) {
+		const { thread } = await params.client.request("thread/read", {
+			threadId: binding.threadId,
+			includeTurns: false
+		}, {
+			signal: params.signal,
+			assertCurrent: params.assertCurrent
+		});
+		params.assertCurrent();
+		if (thread.id !== binding.threadId || thread.status?.type !== "notLoaded") throw new Error("Codex loaded thread has no owned inference route; reconnect before retrying");
+	}
+	if (params.config?.openai_base_url !== void 0 && params.config.openai_base_url !== route.upstream) throw new Error("Codex thread configuration conflicts with its trusted inference upstream");
+	return {
+		route,
+		config: {
+			...params.config,
+			openai_base_url: route.baseUrl
+		}
+	};
+}
+/** Validate the exact private handle and unchanged upstream, not a localhost string exception. */
+function assertCodexInferenceRouteConfig(client, route, config) {
+	if (!route) return;
+	const owner = owners.get(client);
+	if (!owner || owner.closed || !owner.handles.has(route) || config?.openai_base_url !== route.baseUrl) throw new Error("Codex parent-local inference route was overridden; no turn was sent");
+	route.assertCurrent();
+}
+function bindCodexInferenceThread(client, threadId, route) {
+	const owner = owners.get(client);
+	if (!owner && !route) return;
+	if (!owner || owner.closed) throw new Error("Codex inference client is closed");
+	if (!route) {
+		owner.threads.delete(threadId);
+		return;
+	}
+	route.assertCurrent();
+	if (!owner.threads.has(threadId) && owner.threads.size >= MAX_THREADS) throw new Error("Codex inference thread limit reached; reconnect before retrying");
+	owner.threads.set(threadId, route);
+}
+function getCodexInferenceThread(client, threadId) {
+	const owner = owners.get(client);
+	if (owner?.closed) throw new Error("Codex inference client is closed");
+	return owner?.threads.get(threadId);
+}
+//#endregion
 //#region extensions/codex/src/app-server/native-config-fence.ts
 const CODEX_NATIVE_CONFIG_FENCE_STATE = Symbol.for("openclaw.codexNativeConfigFenceState");
 function getFenceState() {
@@ -2609,7 +2805,7 @@ async function startInitializedCodexAppServerClient(params) {
 		} finally {
 			artifactDrain?.cancel();
 		}
-		const runtimeArtifactModule = params.runtimeArtifactMode ? await import("./runtime-artifact-T-NwqeSH.js") : void 0;
+		const runtimeArtifactModule = params.runtimeArtifactMode ? await import("./runtime-artifact-BJ0rXBZ_.js") : void 0;
 		const runtimeArtifactBeforeStart = runtimeArtifactModule ? await runtimeArtifactModule.captureCodexAppServerRuntimeArtifactBeforeStart({
 			startOptions,
 			spawnIdentity: resolveCodexAppServerSpawnIdentity(startOptions),
@@ -2671,7 +2867,7 @@ async function startInitializedCodexAppServerClient(params) {
 				onAuthRefreshFailure: () => retireSharedCodexAppServerClientIfCurrent(client)
 			});
 			assertStartupCurrent();
-			await waitForStartup(() => applyCodexAppServerAuthProfile({
+			const authHandoff = await waitForStartup(() => applyCodexAppServerAuthProfile({
 				client,
 				agentDir: params.agentDir,
 				authProfileId: params.authProfileId,
@@ -2682,6 +2878,8 @@ async function startInitializedCodexAppServerClient(params) {
 				assertCurrent: assertStartupCurrent,
 				...params.authProfileStore ? { authProfileStore: params.authProfileStore } : {}
 			}));
+			if (startOptions.transport === "stdio" && nativeCommandAtStart && !desktopGeneration && !isManagedCodexDesktopCommand(startOptions.command) && !isCodexAppServerProxyLaunch(startOptions.args)) ownCodexInferenceClient(client);
+			recordCodexAppServerAuthHandoff(client, authHandoff);
 			if (runtimeArtifactModule && runtimeArtifact) runtimeArtifactModule.bindCodexAppServerRuntimeArtifact(client, runtimeArtifact);
 			assertStartupCurrent();
 			const fenceKey = resolveCodexNativeConfigFenceKey({ client });
@@ -2908,4 +3106,4 @@ function retirePendingSharedClientEntryIfUnclaimed(entry) {
 	closeRetiredSharedClientEntry(entry);
 }
 //#endregion
-export { assertNotSymlink as $, resolveCodexGatewayTimeoutWithGraceMs as A, prepareCodexWorkspaceReferences as B, CodexThreadBindingConflictError as C, TURN_FINALIZE_DRAIN_ABORT_GRACE_MS as D, CodexAppServerStartupError as E, ensureCodexAppServerClientRuntime as F, unsubscribeCodexAppServerLiveThread as G, readCodexClientSessionMeta as H, forgetCodexWorkspaceReferences as I, rememberCodexRateLimitsRead as J, readCodexRateLimitsRevision as K, hasCodexAppServerLiveThread as L, withCodexStartupTimeout as M, claimCodexAppServerLiveThread as N, TURN_TERMINAL_SETTLEMENT_TIMEOUT_MS as O, consumeCodexAppServerLiveThread as P, resolveCodexManagedBundledMarketplacePath as Q, isCodexAppServerClientRuntimeLive as R, CodexAdoptedThreadActiveError as S, acquireCodexNativeConfigFence as T, releaseCodexAppServerLiveThread as U, protectCodexAppServerLiveThread as V, retainCodexAppServerLiveThread as W, resolveCodexAppServerAuthAccountCacheKey as X, reconcileCodexComputerUseStartArtifacts as Y, resolveCodexAppServerPreparedAuthHandoff as Z, retainSharedCodexAppServerClientByInstanceId as _, clearSharedCodexAppServerClientIfCurrentAndUnclaimed as a, waitForCodexAppServerClientDesktopGenerationDrain as b, getLeasedSharedCodexAppServerClient as c, readCodexAppServerClientDesktopGeneration as d, readCodexAppServerClientDesktopGenerationFingerprint as f, resolveCodexNativeConfigFenceKey as g, releaseLeasedSharedCodexAppServerClient as h, clearSharedCodexAppServerClientIfCurrent as i, resolveCodexStartupTimeoutMs as j, isCodexAppServerStartupError as k, getSharedCodexAppServerClient as l, releaseCodexAppServerClientLease as m, captureCodexAppServerClientLifetime as n, clearSharedCodexAppServerClientIfCurrentAndWait as o, readCodexAppServerClientProcessIdentity as p, readRecentCodexRateLimits as q, captureSharedCodexAppServerCatalogLifetime as r, createIsolatedCodexAppServerClient as s, assertCodexAppServerClientStartSelectionCurrent as t, isCodexAppServerStartSelectionChangedError as u, retainSharedCodexAppServerClientIfCurrent as v, CodexThreadStartRequestError as w, withLeasedCodexAppServerClientStartSelectionRetry as x, shared_client_exports as y, isCodexAppServerLiveThreadClaimed as z };
+export { reconcileCodexComputerUseStartArtifacts as $, CodexAppServerStartupError as A, forgetCodexWorkspaceReferences as B, CodexThreadBindingConflictError as C, bindCodexInferenceThread as D, assertCodexInferenceRouteConfig as E, resolveCodexStartupTimeoutMs as F, protectCodexAppServerLiveThread as G, isCodexAppServerClientRuntimeLive as H, withCodexStartupTimeout as I, retainCodexAppServerLiveThread as J, readCodexClientSessionMeta as K, claimCodexAppServerLiveThread as L, TURN_TERMINAL_SETTLEMENT_TIMEOUT_MS as M, isCodexAppServerStartupError as N, getCodexInferenceThread as O, resolveCodexGatewayTimeoutWithGraceMs as P, rememberCodexRateLimitsRead as Q, consumeCodexAppServerLiveThread as R, CodexAdoptedThreadActiveError as S, acquireCodexNativeConfigFence as T, isCodexAppServerLiveThreadClaimed as U, hasCodexAppServerLiveThread as V, prepareCodexWorkspaceReferences as W, readCodexRateLimitsRevision as X, unsubscribeCodexAppServerLiveThread as Y, readRecentCodexRateLimits as Z, retainSharedCodexAppServerClientByInstanceId as _, clearSharedCodexAppServerClientIfCurrentAndUnclaimed as a, waitForCodexAppServerClientDesktopGenerationDrain as b, getLeasedSharedCodexAppServerClient as c, readCodexAppServerClientDesktopGeneration as d, resolveCodexAppServerAuthAccountCacheKey as et, readCodexAppServerClientDesktopGenerationFingerprint as f, resolveCodexNativeConfigFenceKey as g, releaseLeasedSharedCodexAppServerClient as h, clearSharedCodexAppServerClientIfCurrent as i, TURN_FINALIZE_DRAIN_ABORT_GRACE_MS as j, prepareCodexInferenceThreadConfig as k, getSharedCodexAppServerClient as l, releaseCodexAppServerClientLease as m, captureCodexAppServerClientLifetime as n, resolveCodexManagedBundledMarketplacePath as nt, clearSharedCodexAppServerClientIfCurrentAndWait as o, readCodexAppServerClientProcessIdentity as p, releaseCodexAppServerLiveThread as q, captureSharedCodexAppServerCatalogLifetime as r, assertNotSymlink as rt, createIsolatedCodexAppServerClient as s, assertCodexAppServerClientStartSelectionCurrent as t, resolveCodexAppServerPreparedAuthHandoff as tt, isCodexAppServerStartSelectionChangedError as u, retainSharedCodexAppServerClientIfCurrent as v, CodexThreadStartRequestError as w, withLeasedCodexAppServerClientStartSelectionRetry as x, shared_client_exports as y, ensureCodexAppServerClientRuntime as z };

package/dist/{side-question-DLbr2vUU.js → side-question-BGMJQf4U.js}

@@ -1,27 +1,27 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-CaZjYwNS.js";
-import { b as readCodexRequirementsToml, c as hasCodexMcpToolApprovalOverrides, d as withMcpElicitationsApprovalPolicy, i as resolveCodexAppServerHomeScope, m as resolveCodexModelBackedReviewerPolicyContext, u as shouldAutoApproveCodexAppServerApprovals } from "./config-options-jnIFvwxD.js";
-import { b as isCodexSandboxExecServerEnabled, o as isJsonObject, v as isCodexPairedNodeRemoteExecPlacementSandbox, x as readCodexPluginConfig, y as isCodexRemoteExecPlacementSandbox } from "./protocol-CAAcVIKF.js";
-import { D as handleDynamicToolCallWithTimeout, E as createCodexElicitationResponse, L as resolveCodexToolAbortTerminalReason, S as readCodexDynamicToolCallParams, i as isCodexAppServerApprovalRequest, j as resolveDynamicToolCallTimeoutMs, s as isCodexAppServerIndeterminateRequestCancellationError, v as assertCodexThreadForkResponse, x as assertCodexTurnStartResponse } from "./client-BEKu4yDx.js";
-import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-Bqnx1N4z.js";
-import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-JDfTI4VI.js";
-import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection } from "./binding-connection-QqgcPCgk.js";
-import { F as ensureCodexAppServerClientRuntime, Z as resolveCodexAppServerPreparedAuthHandoff, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, q as readRecentCodexRateLimits, x as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-CVhez2Uo.js";
-import { d as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-D6cR54TV.js";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-DSwzP8YY.js";
-import { B as emitCodexNativePreToolUseFailureDiagnostic, E as resolveCodexAppServerRequestModelSelection, Et as refreshCodexPluginAppApprovalPolicy, I as buildCodexNativeHookRelayConfig, L as buildCodexNativeHookRelayDisabledConfig, N as CODEX_NATIVE_HOOK_RELAY_EVENTS, O as resolveCodexBindingModelProviderFallback, S as resolveCodexWebSearchPlan, T as resolveCodexAppServerModelProvider, Tt as mergeCodexThreadConfigs, a as readCodexSupportedReasoningEfforts, ct as resolveCodexDynamicToolsLoading, nt as filterCodexDynamicTools, o as resolveCodexAppServerReasoningEffort, t as buildCodexTemporalAdditionalContext, v as buildCodexRuntimeThreadConfig, w as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-D1pzRwHB.js";
-import { o as resolveCodexSessionBinding } from "./session-binding-CKSepwIC.js";
-import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError, r as assertCodexSupervisionThreadLineage } from "./thread-policy-D8kI7yAO.js";
-import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BcT66fWy.js";
-import { C as shouldRequireCodexSandboxExecServerEnvironment, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, c as ensureCodexSandboxExecServerEnvironment, d as CodexNativeToolLifecycleProjector, i as emitDynamicToolErrorDiagnostic, l as releaseCodexSandboxExecServerEnvironment, o as emitDynamicToolTerminalDiagnostic, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-D-JBoaLt.js";
-import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-W4tfK5Y5.js";
-import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-B22InTp_.js";
+import { l as sessionBindingIdentity } from "./session-binding-record-Bcvslnhf.js";
+import { b as readCodexRequirementsToml, c as hasCodexMcpToolApprovalOverrides, d as withMcpElicitationsApprovalPolicy, i as resolveCodexAppServerHomeScope, m as resolveCodexModelBackedReviewerPolicyContext, u as shouldAutoApproveCodexAppServerApprovals } from "./config-options-CXMq1T-C.js";
+import { b as isCodexSandboxExecServerEnabled, o as isJsonObject, v as isCodexPairedNodeRemoteExecPlacementSandbox, x as readCodexPluginConfig, y as isCodexRemoteExecPlacementSandbox } from "./protocol-5bh1G-H7.js";
+import { D as handleDynamicToolCallWithTimeout, E as createCodexElicitationResponse, L as resolveCodexToolAbortTerminalReason, S as readCodexDynamicToolCallParams, i as isCodexAppServerApprovalRequest, j as resolveDynamicToolCallTimeoutMs, s as isCodexAppServerIndeterminateRequestCancellationError, v as assertCodexThreadForkResponse, x as assertCodexTurnStartResponse } from "./client-B57KWPQx.js";
+import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-CBMmWBr9.js";
+import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-oIORaQ5T.js";
+import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection } from "./binding-connection-D3udKbIE.js";
+import { Z as readRecentCodexRateLimits, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, tt as resolveCodexAppServerPreparedAuthHandoff, x as withLeasedCodexAppServerClientStartSelectionRetry, z as ensureCodexAppServerClientRuntime } from "./shared-client-CscigXXL.js";
+import { d as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-D78_VmzO.js";
+import { C as resolveCodexWebSearchPlan, D as resolveCodexAppServerRequestModelSelection, Dt as refreshCodexPluginAppApprovalPolicy, E as resolveCodexAppServerModelProvider, Et as mergeCodexThreadConfigs, L as buildCodexNativeHookRelayConfig, P as CODEX_NATIVE_HOOK_RELAY_EVENTS, R as buildCodexNativeHookRelayDisabledConfig, T as CODEX_NATIVE_PERSONALITY_NONE, V as emitCodexNativePreToolUseFailureDiagnostic, k as resolveCodexBindingModelProviderFallback, lt as resolveCodexDynamicToolsLoading, n as buildCodexTemporalAdditionalContext, o as readCodexSupportedReasoningEfforts, rt as filterCodexDynamicTools, s as resolveCodexAppServerReasoningEffort, y as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-DXl1-I6b.js";
+import { o as resolveCodexSessionBinding } from "./session-binding-CI8UuilT.js";
+import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError, r as assertCodexSupervisionThreadLineage } from "./thread-policy-BuEQfE0g.js";
+import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BxgyoM8M.js";
+import { C as shouldRequireCodexSandboxExecServerEnvironment, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, c as ensureCodexSandboxExecServerEnvironment, d as CodexNativeToolLifecycleProjector, i as emitDynamicToolErrorDiagnostic, l as releaseCodexSandboxExecServerEnvironment, o as emitDynamicToolTerminalDiagnostic, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-CmN5RAip.js";
+import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-BvCUL69A.js";
+import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-BBmXA8Eg.js";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
-import { isDeepStrictEqual } from "node:util";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir as resolveAgentDir$2, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
+import { isDeepStrictEqual } from "node:util";
 import { loadCodexBundleMcpApprovalConfig, resolveCodexMcpToolOverridesForAgent } from "openclaw/plugin-sdk/codex-mcp-projection";
 //#region extensions/codex/src/app-server/side-question.ts
 const SIDE_QUESTION_COMPLETION_TIMEOUT_MS = 6e5;

package/dist/{source-Da-h6f7e.js → source-CElXU0Oy.js}

@@ -1,9 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { m as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-utils-C57JiJrU.js";
-import { r as buildCodexPluginAppCacheKey, s as defaultCodexAppInventoryCache } from "./plugin-app-cache-key-CdSQzWyX.js";
-import { o as withCodexAppServerJsonClient } from "./request-CGvGOpeR.js";
-import "./config-JDfTI4VI.js";
-import { i as pluginReadParams, n as isOpenAiCuratedMarketplace } from "./plugin-inventory-CoRCzWW4.js";
+import { c as CODEX_PLUGINS_MARKETPLACE_NAME, i as pluginReadParams, n as isOpenAiCuratedMarketplace } from "./plugin-inventory-oL4Na1ZG.js";
+import { r as buildCodexPluginAppCacheKey, s as defaultCodexAppInventoryCache } from "./plugin-app-cache-key-d0eKxy7b.js";
+import { o as withCodexAppServerJsonClient } from "./request-B7hEkBGq.js";
+import "./config-oIORaQ5T.js";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";
@@ -459,31 +458,32 @@ async function discoverCodexSource(options = {}) {
 	const authPath = path.join(codexHome, "auth.json");
 	const modelsCachePath = path.join(codexHome, "models_cache.json");
 	const hooksPath = path.join(codexHome, "hooks", "hooks.json");
-	const memoryFiles = await discoverCodexMemorySources(codexHome);
-	const codexSkills = options.memoryOnly ? [] : await discoverSkillDirs({
+	const skipAssets = options.memoryOnly === true || options.authOnly === true;
+	const memoryFiles = options.authOnly ? [] : await discoverCodexMemorySources(codexHome);
+	const codexSkills = skipAssets ? [] : await discoverSkillDirs({
 		root: codexSkillsDir,
 		sourceLabel: "Codex skill",
 		excludeSystem: true
 	});
-	const personalAgentSkills = options.memoryOnly ? [] : await discoverSkillDirs({
+	const personalAgentSkills = skipAssets ? [] : await discoverSkillDirs({
 		root: agentsSkillsDir,
 		sourceLabel: "personal AgentSkill"
 	});
-	const sourcePluginDiscovery = options.memoryOnly ? { plugins: [] } : await discoverInstalledCuratedPlugins(codexHome, options);
+	const sourcePluginDiscovery = skipAssets ? { plugins: [] } : await discoverInstalledCuratedPlugins(codexHome, options);
 	const sourcePluginNames = new Set(sourcePluginDiscovery.plugins.flatMap((plugin) => plugin.pluginName ? [plugin.pluginName] : []));
-	const cachedPlugins = (options.memoryOnly ? [] : await discoverPluginDirs(codexHome)).filter((plugin) => {
+	const cachedPlugins = (skipAssets ? [] : await discoverPluginDirs(codexHome)).filter((plugin) => {
 		const normalizedName = sanitizePluginName(plugin.name);
 		return !sourcePluginNames.has(normalizedName);
 	});
 	const plugins = [...sourcePluginDiscovery.plugins, ...cachedPlugins].toSorted((a, b) => a.source.localeCompare(b.source));
 	const archivePaths = [];
-	if (!options.memoryOnly && await exists(configPath)) archivePaths.push({
+	if (!skipAssets && await exists(configPath)) archivePaths.push({
 		id: "archive:config.toml",
 		path: configPath,
 		relativePath: "config.toml",
 		message: "Codex config is archived for manual review; it is not activated automatically"
 	});
-	if (!options.memoryOnly && await exists(hooksPath)) archivePaths.push({
+	if (!skipAssets && await exists(hooksPath)) archivePaths.push({
 		id: "archive:hooks/hooks.json",
 		path: hooksPath,
 		relativePath: "hooks/hooks.json",

package/dist/{thread-archive-guard-D1bP04Tf.js → thread-archive-guard-DfpBr-Sz.js}

@@ -1,4 +1,4 @@
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
+import { o as isJsonObject } from "./protocol-5bh1G-H7.js";
 import { normalizeBoundedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/thread-archive-guard.ts
 const DESCENDANT_PAGE_LIMIT = 100;