@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/.setup/binding-connection.runtime-CnRMC0ta.mjs

@@ -0,0 +1,48 @@
+import { g as resolveCodexAppServerLocalHomeDir } from "./config-security-BRQ2mgW9.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-BOxKP7db.mjs";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+//#region extensions/codex/src/app-server/binding-connection.runtime.ts
+/** Resolves connection and auth ownership exclusively from the private thread binding. */
+async function resolveCodexBindingAppServerConnection(params, discoverHomes) {
+	const { binding, authProfileId, assertCurrent, ...runtimeParams } = params;
+	assertCurrent?.();
+	const usesSupervisionConnection = binding?.connectionScope === "supervision";
+	if (usesSupervisionConnection && readCodexPluginConfig(runtimeParams.pluginConfig).supervision?.enabled !== true) throw new Error("Codex supervision is disabled; refusing to open a native user-home supervised session");
+	const resolveRuntimeOptions = usesSupervisionConnection ? resolveCodexSupervisionAppServerRuntimeOptions : resolveCodexAppServerRuntimeOptions;
+	let appServer = resolveRuntimeOptions(runtimeParams);
+	if (usesSupervisionConnection) {
+		const persistedFingerprint = binding.pendingSupervisionBranch?.connectionFingerprint ?? binding.appServerRuntimeFingerprint;
+		let currentFingerprint = buildCodexAppServerConnectionFingerprint(appServer, runtimeParams.agentDir);
+		if (persistedFingerprint && currentFingerprint !== persistedFingerprint && runtimeParams.agentDir) {
+			const home = (await discoverHomes?.(runtimeParams.agentDir))?.find((source) => source.appServer.start.transport === "stdio" && buildCodexAppServerConnectionFingerprint(source.appServer, source.agentDir) === persistedFingerprint);
+			if (home) {
+				home.assertCurrent();
+				assertCurrent?.();
+				appServer = resolveRuntimeOptions(runtimeParams);
+				appServer = {
+					...appServer,
+					start: {
+						...appServer.start,
+						homeScope: "user",
+						env: {
+							...appServer.start.env,
+							CODEX_HOME: resolveCodexAppServerLocalHomeDir(home.appServer.start, home.agentDir, runtimeParams.env)
+						}
+					}
+				};
+				currentFingerprint = buildCodexAppServerConnectionFingerprint(appServer, runtimeParams.agentDir);
+			}
+		}
+		if (!persistedFingerprint || persistedFingerprint !== currentFingerprint) throw new Error("Codex supervision connection changed; refusing to operate on its bound native thread");
+	}
+	assertCurrent?.();
+	return {
+		appServer,
+		usesSupervisionConnection,
+		requestAuthProfileId: usesSupervisionConnection ? void 0 : authProfileId,
+		clientAuthProfileId: usesSupervisionConnection ? null : authProfileId
+	};
+}
+//#endregion
+export { resolveCodexBindingAppServerConnection };

package/dist/{bounded-turn-lRpmZHFv.js → .setup/bounded-turn-BtlZcivC.mjs}

@@ -1,12 +1,13 @@
-import { r as readCodexAppServerConfigOptions } from "./launch-args-RXQwn8zV.js";
-import { C as readCodexErrorNotification, E as createCodexElicitationResponse, b as assertCodexThreadStartResponse, x as assertCodexTurnStartResponse } from "./client-BEKu4yDx.js";
-import "./config-JDfTI4VI.js";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
-import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort, o as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-D6cR54TV.js";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-DSwzP8YY.js";
-import { r as readModelListResult } from "./models-P9k2qAof.js";
-import { G as attestCodexRestrictedToolSurfaceMcpServersDisabled, Tt as mergeCodexThreadConfigs, _ as buildCodexRingZeroThreadConfigPatch, b as readCodexInheritedMcpServerNames, g as assertCodexManagedRequirementsDoNotOverrideToolPolicy, v as buildCodexRuntimeThreadConfig } from "./thread-lifecycle-D1pzRwHB.js";
+import { i as readCodexAppServerConfigOptions } from "./launch-args-DnMak49W.mjs";
+import { C as readCodexErrorNotification, E as createCodexElicitationResponse, b as assertCodexThreadStartResponse, x as assertCodexTurnStartResponse } from "./client-vXs2929Q.mjs";
+import "./config-CedDWjM-.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort, o as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-R1gA8Sn6.mjs";
+import { r as readModelListResult } from "./models-BDFgm_G-.mjs";
+import { Ot as mergeCodexThreadConfigs, S as readCodexInheritedMcpServerNames, b as buildCodexRuntimeThreadConfig, q as attestCodexRestrictedToolSurfaceMcpServersDisabled, v as assertCodexManagedRequirementsDoNotOverrideToolPolicy, y as buildCodexRingZeroThreadConfigPatch } from "./thread-lifecycle-Cik28qWn.mjs";
+import { a as resolveCodexPromptError } from "./usage-limit-error-C0ow7DOc.mjs";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -62,8 +63,8 @@ async function runBoundedCodexAppServerTurn(params) {
 async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, workspace, selectionAttempt = 0, timing) {
 	const totalTimeoutMs = timing?.timeoutMs ?? resolveTimerTimeoutMs(params.timeoutMs, 100, 100);
 	const timeoutError = new CodexBoundedTurnTimeoutError(params.taskLabel, totalTimeoutMs);
-	const deadline = timing?.deadline ?? Date.now() + totalTimeoutMs;
-	const timeoutMs = deadline - Date.now();
+	const deadline = timing?.deadline ?? performance.now() + totalTimeoutMs;
+	const timeoutMs = deadline - performance.now();
 	if (timeoutMs <= 0) throw timeoutError;
 	params.assertCurrent?.();
 	const agentDir = params.agentDir?.trim() || void 0;
@@ -79,7 +80,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		assertCurrent: params.assertCurrent,
 		...params.signal ? { abandonSignal: params.signal } : {}
 	};
-	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-CVhez2Uo.js").then((n) => n.y).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-BpTtuLQ5.mjs").then((n) => n.y).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		...clientOptions,
 		authProfileStore: params.authProfileStore
 	}));
@@ -102,7 +103,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 	const abortFromCaller = () => abortRun(params.signal?.reason ?? "aborted");
 	if (params.signal?.aborted) abortFromCaller();
 	else params.signal?.addEventListener("abort", abortFromCaller, { once: true });
-	const remainingRunMs = deadline - Date.now();
+	const remainingRunMs = deadline - performance.now();
 	if (remainingRunMs <= 0) abortRun(timeoutError);
 	const timeout = setTimeout(() => abortRun(timeoutError), Math.max(1, remainingRunMs));
 	timeout.unref?.();
@@ -164,7 +165,11 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 				signal: abortController.signal,
 				abortError: () => resolveCodexBoundedTurnAbortError(abortController.signal, params.taskLabel, timeoutError)
 			});
-			if (result.error || result.turn?.status === "failed") throw new Error((result.error ? readCodexErrorNotification(result.error)?.error.message : result.turn?.error?.message) ?? `codex app-server ${params.taskLabel} turn failed`);
+			if (result.error || result.turn?.status === "failed") {
+				const source = result.error ? readCodexErrorNotification(result.error)?.error : result.turn?.error;
+				const failure = source ? resolveCodexPromptError(source) : void 0;
+				throw failure instanceof Error ? failure : new Error(failure ?? `codex app-server ${params.taskLabel} turn failed`);
+			}
 			if (result.turn?.status !== "completed") throw new Error(`codex app-server ${params.taskLabel} turn ended with status ${result.turn?.status ?? "unknown"}`);
 			if (!result.text && !params.allowEmptyText) throw new Error(`Codex app-server ${params.taskLabel} turn returned no text.`);
 			params.assertCurrent?.();

package/dist/{build-state-6RL6qohz.js → .setup/build-state-Xx9ybZqa.mjs}

@@ -1,5 +1,5 @@
 //#region extensions/codex/package.json
-var version = "2026.9.3";
+var version = "2026.9.5";
 //#endregion
 //#region extensions/codex/src/build-state.ts
 /**

package/dist/{capabilities-BeqLPbtM.js → .setup/capabilities-_vXcZGSx.mjs}

@@ -1,4 +1,4 @@
-import { r as CodexAppServerRpcError } from "./session-catalog-provenance-DkJHo735.js";
+import { i as CodexAppServerRpcError } from "./timeout-DZF05XrR.mjs";
 //#region extensions/codex/src/app-server/capabilities.ts
 /**
 * Capability helpers for optional Codex app-server control-plane methods.