@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/{runtime-artifact-T-NwqeSH.js → .setup/runtime-artifact-Dy38Z5iU.mjs}

@@ -1,5 +1,5 @@
-import { i as resolvePackagedCodexNativeCommand } from "./managed-binary-DrjjRRUD.js";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-BGjHoYLr.js";
+import { a as resolvePackagedCodexNativeCommand } from "./managed-binary-DP6Rib3P.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Cmx94Oiy.mjs";
 import { createHash } from "node:crypto";
 import { resolveWindowsExecutablePath, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { constants } from "node:fs";

package/dist/{sandbox-guard-BcT66fWy.js → .setup/sandbox-guard-BBP-RbTf.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { y as isCodexRemoteExecPlacementSandbox } from "./protocol-CAAcVIKF.js";
-import { n as resolveCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-umd0tgh4.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-CcB9iPoq.mjs";
+import { n as resolveCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-YBMHSzC4.mjs";
 import { tryResolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
 import { resolveSandboxRuntimeStatus } from "openclaw/plugin-sdk/sandbox";
@@ -25,6 +25,7 @@ const DIRECT_METHOD_POLICIES = /* @__PURE__ */ new Map([
 	["config/read", "allowed-control-plane"],
 	["config/value/write", "allowed-control-plane"],
 	["environment/add", "allowed-control-plane"],
+	["experimentalFeature/list", "allowed-control-plane"],
 	["experimentalFeature/enablement/set", "allowed-control-plane"],
 	["feedback/upload", "allowed-control-plane"],
 	["hooks/list", "allowed-control-plane"],

package/dist/{session-binding-CKSepwIC.js → .setup/session-binding-_0W_fHRr.mjs}

@@ -1,14 +1,13 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { g as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-C57JiJrU.js";
-import { a as readCodexAppServerThreadBinding, c as readStoredCodexAppServerBinding, d as validateBindingForWrite, i as ownsStoredSessionGeneration, l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as readCodexBindingTimestamp, r as bindingStoreKey, s as readCurrentCodexAppServerBinding, t as CodexSupervisionBindingReplacementError, u as stripUndefinedBinding } from "./session-binding-record-CaZjYwNS.js";
-import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
-import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-CwzO4_RG.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { _ as mutateCodexNativeSubagentSubmissions, a as ownsStoredSessionGeneration, c as readCodexBindingTimestamp, d as readPluginAppPolicyContext, f as readStoredCodexAppServerBinding, g as adoptCodexNativeSubagentSubmissions, h as validateBindingForWrite, i as matchesCodexNativeSubagentSubmissionBinding, l as readCurrentCodexAppServerBinding, m as stripUndefinedBinding, n as assertCodexBindingMayBeReplaced, o as preserveCodexNativeSubagentSubmissions, p as sessionBindingIdentity, r as bindingStoreKey, s as readCodexAppServerThreadBinding, t as CodexSupervisionBindingReplacementError, u as readCurrentCodexNativeSubagentSubmissions } from "./session-binding-record-TH3xA0zj.mjs";
+import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-WqZtZfXN.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
-import { AsyncLocalStorage } from "node:async_hooks";
 //#region extensions/codex/src/app-server/session-binding.ts
 /** SQLite-backed Codex app-server thread bindings. */
 var session_binding_exports = /* @__PURE__ */ __exportAll({
@@ -159,11 +158,22 @@ function bindingLeaseLostError(key, cause) {
 function scopeCodexRunBindingStore(params) {
 	const mapSessionIdentity = (identity) => identity.agentId === params.logicalIdentity.agentId && identity.sessionId === params.logicalIdentity.sessionId && identity.sessionKey?.trim() === params.logicalIdentity.sessionKey?.trim() ? params.physicalIdentity : identity;
 	const mapIdentity = (identity) => identity.kind === "session" ? mapSessionIdentity(identity) : identity;
+	const mapHistoryOwner = (identity, owner) => {
+		const mapped = mapIdentity(identity);
+		return identity.kind === "session" && mapped.kind === "session" && owner.sessionId === identity.sessionId ? {
+			...owner,
+			sessionId: mapped.sessionId
+		} : owner;
+	};
 	return {
 		...params.bindingStore,
 		read: (identity) => params.bindingStore.read(mapIdentity(identity)),
+		readNativeSubagentSubmissions: (identity, owner) => params.bindingStore.readNativeSubagentSubmissions(mapIdentity(identity), mapHistoryOwner(identity, owner)),
 		hasOtherThreadOwner: (threadId, identity) => params.bindingStore.hasOtherThreadOwner(threadId, identity ? mapIdentity(identity) : void 0),
-		mutate: (identity, mutation, assertCurrent) => params.bindingStore.mutate(mapIdentity(identity), mutation, assertCurrent),
+		mutate: (identity, mutation, assertCurrent) => params.bindingStore.mutate(mapIdentity(identity), mutation.kind === "record-native-subagent-submission" || mutation.kind === "consume-native-subagent-submission" ? {
+			...mutation,
+			owner: mapHistoryOwner(identity, mutation.owner)
+		} : mutation, assertCurrent),
 		prepareSessionGenerationReclaim: (identity) => params.bindingStore.prepareSessionGenerationReclaim(mapSessionIdentity(identity)),
 		adoptSessionGeneration: (identity, expectedPreviousSessionId, assertCurrent) => params.bindingStore.adoptSessionGeneration(mapSessionIdentity(identity), expectedPreviousSessionId, assertCurrent),
 		resetSessionGeneration: (identity) => params.bindingStore.resetSessionGeneration(mapSessionIdentity(identity)),
@@ -436,6 +446,7 @@ function createCodexAppServerBindingStore(state) {
 	};
 	return {
 		read: (identity) => readCurrentCodexAppServerBinding(state, identity),
+		readNativeSubagentSubmissions: (identity, owner) => readCurrentCodexNativeSubagentSubmissions(state, identity, owner),
 		async hasOtherThreadOwner(threadId, currentIdentity) {
 			const currentKey = currentIdentity ? bindingStoreKey(currentIdentity) : void 0;
 			return state.entries().some(({ key, value }) => {
@@ -477,6 +488,26 @@ function createCodexAppServerBindingStore(state) {
 				const key = bindingStoreKey(identity);
 				const retainLegacyClear = mutation.kind === "clear" && key.startsWith("conversation:legacy-");
 				return await transactKey(key, (current, leaseToken) => {
+					if (mutation.kind === "record-native-subagent-submission" || mutation.kind === "consume-native-subagent-submission") {
+						if (!assertCurrent) throw new Error("Codex native subagent submission mutation requires current authority.");
+						assertCurrent();
+						if (current?.state !== "active" || !ownsStoredSessionGeneration(identity, current) || identity.kind === "session" && mutation.owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(current.binding, mutation.owner)) return { result: false };
+						const changed = mutateCodexNativeSubagentSubmissions({
+							current: current.nativeSubagentSubmissions,
+							owner: mutation.owner,
+							receipt: mutation.receipt,
+							consume: mutation.kind === "consume-native-subagent-submission"
+						});
+						if (!changed.applied) return { result: false };
+						const { nativeSubagentSubmissions: _previous, ...bindingOwner } = current;
+						return {
+							result: true,
+							next: {
+								...bindingOwner,
+								...changed.next ? { nativeSubagentSubmissions: changed.next } : {}
+							}
+						};
+					}
 					const ownsGeneration = ownsStoredSessionGeneration(identity, current);
 					const ownedLease = current?.lease && current.lease.token === leaseToken ? { lease: current.lease } : {};
 					if (mutation.kind === "reclaim-generation") {
@@ -539,12 +570,14 @@ function createCodexAppServerBindingStore(state) {
 						...mutation.patch,
 						threadId: mutation.threadId
 					});
+					const nativeSubagentSubmissions = active ? preserveCodexNativeSubagentSubmissions(active.binding, binding, active.nativeSubagentSubmissions) : void 0;
 					return {
 						result: true,
 						next: {
 							version: 1,
 							state: "active",
 							binding,
+							...nativeSubagentSubmissions !== void 0 ? { nativeSubagentSubmissions } : {},
 							...storedSessionGeneration(identity, current),
 							...ownedLease
 						}
@@ -562,11 +595,14 @@ function createCodexAppServerBindingStore(state) {
 					if (current?.state !== "active") return { result: "absent" };
 					if (current.sessionId === targetSessionId) return { result: "current" };
 					if (current.sessionId !== expectedSessionId) return { result: "conflict" };
+					const { nativeSubagentSubmissions, ...bindingOwner } = current;
+					const adoptedSubmissions = adoptCodexNativeSubagentSubmissions(nativeSubagentSubmissions);
 					return {
 						result: "adopted",
 						next: {
-							...current,
-							sessionId: targetSessionId
+							...bindingOwner,
+							sessionId: targetSessionId,
+							...adoptedSubmissions !== void 0 ? { nativeSubagentSubmissions: adoptedSubmissions } : {}
 						}
 					};
 				}, void 0, assertCurrent);
@@ -676,60 +712,6 @@ function preservedSessionGeneration(identity, current) {
 	if (current?.sessionId) return { sessionId: current.sessionId };
 	return storedSessionGeneration(identity, current);
 }
-function readPluginAppPolicyContext(value, bindingSchemaVersion) {
-	const record = asOptionalRecord(value);
-	if (!record || typeof record.fingerprint !== "string") return;
-	const apps = asOptionalRecord(record.apps);
-	if (!apps) return;
-	const parsedApps = {};
-	for (const [appId, rawEntry] of Object.entries(apps)) {
-		const entry = asOptionalRecord(rawEntry);
-		if (!entry) return;
-		const destructiveApprovalMode = readDestructiveApprovalMode(entry.destructiveApprovalMode, bindingSchemaVersion);
-		const mcpServerNamesValid = Array.isArray(entry.mcpServerNames) && entry.mcpServerNames.every((serverName) => typeof serverName === "string");
-		if (entry.source === "account") {
-			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
-			parsedApps[appId] = {
-				source: "account",
-				appName: entry.appName,
-				allowDestructiveActions: entry.allowDestructiveActions,
-				...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
-				...destructiveApprovalMode ? { destructiveApprovalMode } : {},
-				mcpServerNames: entry.mcpServerNames
-			};
-			continue;
-		}
-		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || typeof entry.marketplaceName !== "string" || !CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(entry.marketplaceName) || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
-		parsedApps[appId] = {
-			configKey: entry.configKey,
-			marketplaceName: entry.marketplaceName,
-			pluginName: entry.pluginName,
-			allowDestructiveActions: entry.allowDestructiveActions,
-			...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
-			...destructiveApprovalMode ? { destructiveApprovalMode } : {},
-			mcpServerNames: entry.mcpServerNames
-		};
-	}
-	const parsedPluginAppIds = {};
-	if (record.pluginAppIds !== void 0 && (!record.pluginAppIds || typeof record.pluginAppIds !== "object" || Array.isArray(record.pluginAppIds))) return;
-	if (record.pluginAppIds && typeof record.pluginAppIds === "object") for (const [configKey, appIds] of Object.entries(record.pluginAppIds)) {
-		if (!Array.isArray(appIds) || appIds.some((appId) => typeof appId !== "string")) return;
-		parsedPluginAppIds[configKey] = appIds;
-	}
-	return {
-		fingerprint: record.fingerprint,
-		apps: parsedApps,
-		pluginAppIds: parsedPluginAppIds
-	};
-}
-function readDestructiveApprovalMode(value, bindingSchemaVersion) {
-	if (value === void 0) return;
-	if (value === "allow" || value === "deny") return value;
-	if (value === "auto") return bindingSchemaVersion === 1 ? "allow" : "auto";
-	if (value === "ask" && bindingSchemaVersion === 2) return "ask";
-	if (value === "on-request" && bindingSchemaVersion === 1) return "auto";
-	return "invalid";
-}
 function sleep(ms) {
 	return new Promise((resolve) => {
 		setTimeout(resolve, ms);

package/dist/{session-binding-record-CaZjYwNS.js → .setup/session-binding-record-TH3xA0zj.mjs}

@@ -1,8 +1,115 @@
-import { g as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, i as normalizeCodexServiceTier } from "./config-utils-C57JiJrU.js";
+import { i as normalizeCodexServiceTier, m as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-DujwEnhg.mjs";
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { z } from "zod";
+//#region extensions/codex/src/app-server/native-subagent-history-owner.ts
+const nonBlankString = z.string().refine((value) => Boolean(value.trim()));
+const codexNativeSubagentHistoryOwnerSchema = z.object({
+	parentThreadId: nonBlankString,
+	sessionId: nonBlankString,
+	lifecycleRevision: nonBlankString.optional(),
+	connectionFingerprint: z.string().regex(/^[a-f0-9]{64}$/u)
+});
+/** Automatic recovery may follow native rotation only within the same host lifecycle and connection. */
+function matchesCodexNativeSubagentHistoryOwner(stored, current) {
+	return stored.connectionFingerprint === current.connectionFingerprint && stored.lifecycleRevision === current.lifecycleRevision && (stored.lifecycleRevision !== void 0 || stored.sessionId === current.sessionId);
+}
+function codexNativeSubagentHistoryConnectionFingerprint(binding) {
+	if (!binding.appServerRuntimeFingerprint) return;
+	return createHash("sha256").update(JSON.stringify([
+		binding.appServerRuntimeFingerprint,
+		binding.connectionScope ?? null,
+		binding.authProfileId ?? null
+	])).digest("hex");
+}
+function createCodexNativeSubagentHistoryOwner(params) {
+	const connectionFingerprint = codexNativeSubagentHistoryConnectionFingerprint(params.binding);
+	return connectionFingerprint ? {
+		parentThreadId: params.parentThreadId,
+		sessionId: params.sessionId,
+		...params.lifecycleRevision ? { lifecycleRevision: params.lifecycleRevision } : {},
+		connectionFingerprint
+	} : void 0;
+}
+function readCodexNativeSubagentHistoryOwner(detail) {
+	const value = asOptionalRecord(detail)?.nativeHistory;
+	if (value === void 0) return;
+	const owner = codexNativeSubagentHistoryOwnerSchema.safeParse(value);
+	if (!owner.success) throw new Error("Subagent history owner is invalid.");
+	const { lifecycleRevision, ...required } = owner.data;
+	return lifecycleRevision === void 0 ? required : {
+		...required,
+		lifecycleRevision
+	};
+}
+function assertHistoryOwnerMatchesRegistration(saved, current, parentThreadId, requireSaved = false) {
+	if (requireSaved && !saved) throw new Error("Subagent completion history owner is missing.");
+	if (saved && (!current || saved.parentThreadId !== parentThreadId || saved.connectionFingerprint !== current.connectionFingerprint || saved.sessionId !== current.sessionId || saved.lifecycleRevision !== current.lifecycleRevision)) throw new Error("Subagent completion history owner is contradictory.");
+}
+//#endregion
+//#region extensions/codex/src/app-server/native-subagent-submission.ts
+const identifier = z.string().refine((value) => Boolean(value.trim()));
+const submissionSchema = z.object({
+	parentTurnId: identifier,
+	callId: identifier,
+	childThreadId: identifier,
+	submissionId: identifier,
+	predecessorRunId: identifier,
+	predecessorNativeTurnId: identifier
+}).strict();
+const submissionsSchema = z.object({
+	version: z.literal(1),
+	owner: codexNativeSubagentHistoryOwnerSchema,
+	receipts: z.array(submissionSchema)
+}).strict().refine(({ receipts }) => new Set(receipts.map(({ parentTurnId, callId }) => JSON.stringify([parentTurnId, callId]))).size === receipts.length);
+function matchesCodexNativeSubagentSubmissionOwner(stored, current) {
+	return stored.parentThreadId === current.parentThreadId && matchesCodexNativeSubagentHistoryOwner(stored, current);
+}
+function readCodexNativeSubagentSubmissions(value) {
+	if (value === void 0) return;
+	const parsed = submissionsSchema.safeParse(value);
+	if (!parsed.success) throw new Error("Invalid Codex native subagent submission metadata.");
+	return parsed.data;
+}
+function mutateCodexNativeSubagentSubmissions(params) {
+	const current = readCodexNativeSubagentSubmissions(params.current);
+	const owner = codexNativeSubagentHistoryOwnerSchema.parse(params.owner);
+	const receipt = submissionSchema.parse(params.receipt);
+	if (current && !matchesCodexNativeSubagentSubmissionOwner(current.owner, owner)) return { applied: false };
+	const receipts = current?.receipts ?? [];
+	const existing = receipts.find((entry) => entry.parentTurnId === receipt.parentTurnId && entry.callId === receipt.callId);
+	if (existing && !isDeepStrictEqual(existing, receipt)) return { applied: false };
+	if (params.consume) {
+		if (!current) return { applied: false };
+		const remaining = receipts.filter((entry) => entry !== existing);
+		return {
+			applied: true,
+			...remaining.length ? { next: {
+				version: 1,
+				owner: current.owner,
+				receipts: remaining
+			} } : {}
+		};
+	}
+	return {
+		applied: true,
+		next: {
+			version: 1,
+			owner: current?.owner ?? owner,
+			receipts: existing ? receipts : [...receipts, receipt]
+		}
+	};
+}
+/** Physical adoption cannot establish continuity for an unstamped receipt. */
+function adoptCodexNativeSubagentSubmissions(value) {
+	if (value === void 0) return;
+	const parsed = submissionsSchema.safeParse(value);
+	return !parsed.success || parsed.data.owner.lifecycleRevision ? value : void 0;
+}
+//#endregion
 //#region extensions/codex/src/app-server/session-binding-record.ts
 /** Canonical binding codec and synchronous generation-aware reads; no lifecycle or auth loading. */
 /** Resolves the same agent scope OpenClaw uses for transcript/session ownership. */
@@ -180,7 +287,8 @@ const storedBindingSchema = z.discriminatedUnion("state", [z.object({
 	state: z.literal("active"),
 	binding: threadBindingSchema,
 	sessionId: storedSessionIdSchema,
-	lease: bindingLeaseSchema.optional().catch(void 0)
+	lease: bindingLeaseSchema.optional().catch(void 0),
+	nativeSubagentSubmissions: z.unknown().optional()
 }), z.object({
 	version: z.literal(1),
 	state: z.literal("cleared"),
@@ -242,6 +350,22 @@ function readCurrentCodexAppServerBinding(state, identity) {
 	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
 	return stored?.state === "active" && ownsStoredSessionGeneration(identity, stored) ? stored.binding : void 0;
 }
+function matchesCodexNativeSubagentSubmissionBinding(binding, owner) {
+	return binding.threadId === owner.parentThreadId && !binding.pendingSupervisionBranch && codexNativeSubagentHistoryConnectionFingerprint(binding) === owner.connectionFingerprint;
+}
+/** Unknown metadata stays opaque through ordinary binding writes. */
+function preserveCodexNativeSubagentSubmissions(currentBinding, nextBinding, value) {
+	return currentBinding.threadId === nextBinding.threadId && codexNativeSubagentHistoryConnectionFingerprint(currentBinding) === codexNativeSubagentHistoryConnectionFingerprint(nextBinding) && isDeepStrictEqual(currentBinding.pendingSupervisionBranch, nextBinding.pendingSupervisionBranch) ? value : void 0;
+}
+function readCurrentCodexNativeSubagentSubmissions(state, identity, owner) {
+	const key = bindingStoreKey(identity);
+	const raw = state.lookup(key);
+	const stored = readStoredCodexAppServerBinding(raw);
+	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
+	if (stored?.state !== "active" || !ownsStoredSessionGeneration(identity, stored) || identity.kind === "session" && owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(stored.binding, owner)) return [];
+	const submissions = readCodexNativeSubagentSubmissions(stored.nativeSubagentSubmissions);
+	return submissions && matchesCodexNativeSubagentSubmissionOwner(submissions.owner, owner) ? submissions.receipts : [];
+}
 var CodexSupervisionBindingReplacementError = class extends Error {
 	constructor(threadId, operation) {
 		super(`Refusing to replace supervised Codex thread ${threadId} while ${operation}; its native user-home connection and model ownership must be preserved`);
@@ -252,5 +376,59 @@ function assertCodexBindingMayBeReplaced(binding, operation, expected) {
 	if (expected) throw new AgentHarnessPreflightError(`Codex native model ownership prevents ${operation}. Continue or compact the original session in its native runtime, or create a new chat with a concrete model; the original binding was preserved.`);
 	if (binding?.connectionScope === "supervision") throw new CodexSupervisionBindingReplacementError(binding.threadId, operation);
 }
+function readPluginAppPolicyContext(value, bindingSchemaVersion) {
+	const record = asOptionalRecord(value);
+	if (!record || typeof record.fingerprint !== "string") return;
+	const apps = asOptionalRecord(record.apps);
+	if (!apps) return;
+	const parsedApps = {};
+	for (const [appId, rawEntry] of Object.entries(apps)) {
+		const entry = asOptionalRecord(rawEntry);
+		if (!entry) return;
+		const destructiveApprovalMode = readDestructiveApprovalMode(entry.destructiveApprovalMode, bindingSchemaVersion);
+		const mcpServerNames = Array.isArray(entry.mcpServerNames) && entry.mcpServerNames.every((serverName) => typeof serverName === "string") ? entry.mcpServerNames : void 0;
+		if (entry.source === "account") {
+			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNames) return;
+			parsedApps[appId] = {
+				source: "account",
+				appName: entry.appName,
+				allowDestructiveActions: entry.allowDestructiveActions,
+				...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
+				...destructiveApprovalMode ? { destructiveApprovalMode } : {},
+				mcpServerNames
+			};
+			continue;
+		}
+		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || typeof entry.marketplaceName !== "string" || !CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(entry.marketplaceName) || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNames) return;
+		parsedApps[appId] = {
+			configKey: entry.configKey,
+			marketplaceName: entry.marketplaceName,
+			pluginName: entry.pluginName,
+			allowDestructiveActions: entry.allowDestructiveActions,
+			...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
+			...destructiveApprovalMode ? { destructiveApprovalMode } : {},
+			mcpServerNames
+		};
+	}
+	const parsedPluginAppIds = {};
+	if (record.pluginAppIds !== void 0 && (!record.pluginAppIds || typeof record.pluginAppIds !== "object" || Array.isArray(record.pluginAppIds))) return;
+	if (record.pluginAppIds && typeof record.pluginAppIds === "object") for (const [configKey, appIds] of Object.entries(record.pluginAppIds)) {
+		if (!Array.isArray(appIds) || appIds.some((appId) => typeof appId !== "string")) return;
+		parsedPluginAppIds[configKey] = appIds;
+	}
+	return {
+		fingerprint: record.fingerprint,
+		apps: parsedApps,
+		pluginAppIds: parsedPluginAppIds
+	};
+}
+function readDestructiveApprovalMode(value, bindingSchemaVersion) {
+	if (value === void 0) return;
+	if (value === "allow" || value === "deny") return value;
+	if (value === "auto") return bindingSchemaVersion === 1 ? "allow" : "auto";
+	if (value === "ask" && bindingSchemaVersion === 2) return "ask";
+	if (value === "on-request" && bindingSchemaVersion === 1) return "auto";
+	return "invalid";
+}
 //#endregion
-export { readCodexAppServerThreadBinding as a, readStoredCodexAppServerBinding as c, validateBindingForWrite as d, ownsStoredSessionGeneration as i, sessionBindingIdentity as l, assertCodexBindingMayBeReplaced as n, readCodexBindingTimestamp as o, bindingStoreKey as r, readCurrentCodexAppServerBinding as s, CodexSupervisionBindingReplacementError as t, stripUndefinedBinding as u };
+export { readCodexNativeSubagentHistoryOwner as S, mutateCodexNativeSubagentSubmissions as _, ownsStoredSessionGeneration as a, createCodexNativeSubagentHistoryOwner as b, readCodexBindingTimestamp as c, readPluginAppPolicyContext as d, readStoredCodexAppServerBinding as f, adoptCodexNativeSubagentSubmissions as g, validateBindingForWrite as h, matchesCodexNativeSubagentSubmissionBinding as i, readCurrentCodexAppServerBinding as l, stripUndefinedBinding as m, assertCodexBindingMayBeReplaced as n, preserveCodexNativeSubagentSubmissions as o, sessionBindingIdentity as p, bindingStoreKey as r, readCodexAppServerThreadBinding as s, CodexSupervisionBindingReplacementError as t, readCurrentCodexNativeSubagentSubmissions as u, assertHistoryOwnerMatchesRegistration as v, matchesCodexNativeSubagentHistoryOwner as x, codexNativeSubagentHistoryConnectionFingerprint as y };