@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/{side-question-DLbr2vUU.js → .setup/side-question-DSCZyoBD.mjs}

@@ -1,40 +1,31 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-CaZjYwNS.js";
-import { b as readCodexRequirementsToml, c as hasCodexMcpToolApprovalOverrides, d as withMcpElicitationsApprovalPolicy, i as resolveCodexAppServerHomeScope, m as resolveCodexModelBackedReviewerPolicyContext, u as shouldAutoApproveCodexAppServerApprovals } from "./config-options-jnIFvwxD.js";
-import { b as isCodexSandboxExecServerEnabled, o as isJsonObject, v as isCodexPairedNodeRemoteExecPlacementSandbox, x as readCodexPluginConfig, y as isCodexRemoteExecPlacementSandbox } from "./protocol-CAAcVIKF.js";
-import { D as handleDynamicToolCallWithTimeout, E as createCodexElicitationResponse, L as resolveCodexToolAbortTerminalReason, S as readCodexDynamicToolCallParams, i as isCodexAppServerApprovalRequest, j as resolveDynamicToolCallTimeoutMs, s as isCodexAppServerIndeterminateRequestCancellationError, v as assertCodexThreadForkResponse, x as assertCodexTurnStartResponse } from "./client-BEKu4yDx.js";
-import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-Bqnx1N4z.js";
-import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-JDfTI4VI.js";
-import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection } from "./binding-connection-QqgcPCgk.js";
-import { F as ensureCodexAppServerClientRuntime, Z as resolveCodexAppServerPreparedAuthHandoff, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, q as readRecentCodexRateLimits, x as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-CVhez2Uo.js";
-import { d as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-D6cR54TV.js";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-DSwzP8YY.js";
-import { B as emitCodexNativePreToolUseFailureDiagnostic, E as resolveCodexAppServerRequestModelSelection, Et as refreshCodexPluginAppApprovalPolicy, I as buildCodexNativeHookRelayConfig, L as buildCodexNativeHookRelayDisabledConfig, N as CODEX_NATIVE_HOOK_RELAY_EVENTS, O as resolveCodexBindingModelProviderFallback, S as resolveCodexWebSearchPlan, T as resolveCodexAppServerModelProvider, Tt as mergeCodexThreadConfigs, a as readCodexSupportedReasoningEfforts, ct as resolveCodexDynamicToolsLoading, nt as filterCodexDynamicTools, o as resolveCodexAppServerReasoningEffort, t as buildCodexTemporalAdditionalContext, v as buildCodexRuntimeThreadConfig, w as CODEX_NATIVE_PERSONALITY_NONE } from "./thread-lifecycle-D1pzRwHB.js";
-import { o as resolveCodexSessionBinding } from "./session-binding-CKSepwIC.js";
-import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError, r as assertCodexSupervisionThreadLineage } from "./thread-policy-D8kI7yAO.js";
-import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BcT66fWy.js";
-import { C as shouldRequireCodexSandboxExecServerEnvironment, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, c as ensureCodexSandboxExecServerEnvironment, d as CodexNativeToolLifecycleProjector, i as emitDynamicToolErrorDiagnostic, l as releaseCodexSandboxExecServerEnvironment, o as emitDynamicToolTerminalDiagnostic, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-D-JBoaLt.js";
-import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-W4tfK5Y5.js";
-import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-B22InTp_.js";
+import { p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
+import { E as readCodexRequirementsToml, l as shouldAutoApproveCodexAppServerApprovals, m as isJsonObject, n as hasCodexMcpToolApprovalOverrides, u as withMcpElicitationsApprovalPolicy } from "./config-security-BRQ2mgW9.mjs";
+import { c as isCodexPairedNodeRemoteExecPlacementSandbox, d as readCodexPluginConfig, l as isCodexRemoteExecPlacementSandbox, u as isCodexSandboxExecServerEnabled } from "./config-parsing-CcB9iPoq.mjs";
+import { D as handleDynamicToolCallWithTimeout, E as createCodexElicitationResponse, L as resolveCodexToolAbortTerminalReason, S as readCodexDynamicToolCallParams, i as isCodexAppServerApprovalRequest, j as resolveDynamicToolCallTimeoutMs, s as isCodexAppServerIndeterminateRequestCancellationError, v as assertCodexThreadForkResponse, x as assertCodexTurnStartResponse } from "./client-vXs2929Q.mjs";
+import { i as resolveCodexAppServerHomeScope, l as resolveCodexModelBackedReviewerPolicyContext } from "./config-options-BsanJ8QG.mjs";
+import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-DOEGYRNs.mjs";
+import { i as resolveCodexBindingAppServerConnection, r as requireCodexSupervisionModelSelection } from "./binding-connection-Bm38niE8.mjs";
+import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-CedDWjM-.mjs";
+import { P as ensureCodexAppServerClientRuntime, Z as resolveCodexAppServerPreparedAuthHandoff, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, q as readRecentCodexRateLimits, x as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-BpTtuLQ5.mjs";
+import { f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-R1gA8Sn6.mjs";
+import { A as resolveCodexBindingModelProviderFallback, D as resolveCodexAppServerModelProvider, E as CODEX_NATIVE_PERSONALITY_NONE, F as CODEX_NATIVE_HOOK_RELAY_EVENTS, H as emitCodexNativePreToolUseFailureDiagnostic, O as resolveCodexAppServerRequestModelSelection, Ot as mergeCodexThreadConfigs, R as buildCodexNativeHookRelayConfig, b as buildCodexRuntimeThreadConfig, c as resolveCodexAppServerReasoningEffort, it as filterCodexDynamicTools, kt as refreshCodexPluginAppApprovalPolicy, o as buildCodexUserInput, r as buildCodexTemporalAdditionalContext, s as readCodexSupportedReasoningEfforts, ut as resolveCodexDynamicToolsLoading, w as resolveCodexWebSearchPlan, z as buildCodexNativeHookRelayDisabledConfig } from "./thread-lifecycle-Cik28qWn.mjs";
+import { o as resolveCodexSessionBinding } from "./session-binding-_0W_fHRr.mjs";
+import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError, r as assertCodexSupervisionThreadLineage } from "./thread-policy-Cjs4B8xf.mjs";
+import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BBP-RbTf.mjs";
+import { C as shouldRequireCodexSandboxExecServerEnvironment, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, c as ensureCodexSandboxExecServerEnvironment, d as CodexNativeToolLifecycleProjector, i as emitDynamicToolErrorDiagnostic, l as releaseCodexSandboxExecServerEnvironment, o as emitDynamicToolTerminalDiagnostic, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-D16lOp67.mjs";
+import { n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-B8J4Dy-O.mjs";
+import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-DhurXY0l.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
-import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { isDeepStrictEqual } from "node:util";
+import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
-import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir as resolveAgentDir$2, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, resolveAgentDir as resolveAgentDir$2, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, runAgentCleanupStep, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { loadCodexBundleMcpApprovalConfig, resolveCodexMcpToolOverridesForAgent } from "openclaw/plugin-sdk/codex-mcp-projection";
-//#region extensions/codex/src/app-server/side-question.ts
-const SIDE_QUESTION_COMPLETION_TIMEOUT_MS = 6e5;
-var CodexSideQuestionTimeoutError = class extends Error {
-	constructor(..._args) {
-		super(..._args);
-		this.name = "TimeoutError";
-	}
-};
-const CODEX_SIDE_NATIVE_HOOK_RELAY_MIN_TTL_MS = 18e5;
-const CODEX_SIDE_NATIVE_HOOK_RELAY_TTL_GRACE_MS = 3e5;
-const CODEX_SIDE_NATIVE_HOOK_RELAY_STARTUP_REQUEST_COUNT = 3;
-const CODEX_SIDE_NATIVE_HOOK_RELAY_EVENTS_WITH_APP_SERVER_APPROVALS = CODEX_NATIVE_HOOK_RELAY_EVENTS.filter((event) => event !== "permission_request");
+import { registerNativeHookRelayForBundledRuntime } from "openclaw/plugin-sdk/native-hook-relay-runtime";
+//#region extensions/codex/src/app-server/side-question-instructions.ts
 const SIDE_DEVELOPER_INSTRUCTIONS = `You are in a side conversation, not the main thread.
 
 This side conversation is for answering questions and lightweight, non-mutating exploration without disrupting the main thread. Do not present yourself as continuing the main thread's active task.
@@ -48,6 +39,19 @@ External tools may be available according to this thread's current permissions.
 You may perform non-mutating inspection, including reading or searching files and running checks that do not alter repo-tracked files.
 
 Do not modify files, source, git state, permissions, configuration, workspace state, or external state unless the user explicitly requests that mutation in this side conversation. Do not request escalated permissions or broader sandbox access unless the user explicitly requests a mutation that requires it. If the user explicitly requests a mutation, keep it minimal, local to the request, and avoid disrupting the main thread.`;
+//#endregion
+//#region extensions/codex/src/app-server/side-question.ts
+const SIDE_QUESTION_COMPLETION_TIMEOUT_MS = 6e5;
+var CodexSideQuestionTimeoutError = class extends Error {
+	constructor(..._args) {
+		super(..._args);
+		this.name = "TimeoutError";
+	}
+};
+const CODEX_SIDE_NATIVE_HOOK_RELAY_MIN_TTL_MS = 18e5;
+const CODEX_SIDE_NATIVE_HOOK_RELAY_TTL_GRACE_MS = 3e5;
+const CODEX_SIDE_NATIVE_HOOK_RELAY_STARTUP_REQUEST_COUNT = 3;
+const CODEX_SIDE_NATIVE_HOOK_RELAY_EVENTS_WITH_APP_SERVER_APPROVALS = CODEX_NATIVE_HOOK_RELAY_EVENTS.filter((event) => event !== "permission_request");
 async function runCodexAppServerSideQuestion(params, options) {
 	const bindingIdentity = sessionBindingIdentity({
 		sessionId: params.sessionId,
@@ -126,11 +130,12 @@ async function runCodexAppServerSideQuestion(params, options) {
 		bindingModel: binding.model,
 		nativeAuthProfile: usesSupervisionConnection || preparedNativeAuthProfile
 	});
-	const connection = resolveCodexBindingAppServerConnection({
+	const connection = await resolveCodexBindingAppServerConnection({
 		binding,
 		authProfileId,
 		pluginConfig,
 		execPolicy,
+		assertCurrent,
 		modelProvider: reviewerPolicyContext.modelProvider,
 		model: reviewerPolicyContext.model,
 		config: params.cfg,
@@ -222,6 +227,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 	if (nativeExecutionBlock) throw new Error(nativeExecutionBlock);
 	if (!nativeToolSurfaceEnabled) throw new Error("Codex-native /btw side-question mode is unavailable because the effective tool policy restricts Codex native tools for this session.");
 	const clientOptions = {
+		assertCurrent,
 		startOptions: appServer.start,
 		timeoutMs: appServer.requestTimeoutMs,
 		authRequirement: preparedRuntimeAuth.plan.modelRoute?.authRequirement,
@@ -342,7 +348,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 			} : {},
 			config: params.cfg
 		});
-		const handleServerRequest = async (request, _scope, requestSignal) => {
+		const handleServerRequest = async (request, _scope, requestSignal, setExecutionTimeoutMs) => {
 			const signal = AbortSignal.any([requestSignal, runAbortController.signal]);
 			if (signal.aborted) return;
 			if (!childThreadId || !turnId) return;
@@ -377,8 +383,10 @@ async function runCodexAppServerSideQuestion(params, options) {
 			if (!call || call.threadId !== childThreadId || call.turnId !== turnId) return;
 			const timeoutMs = resolveDynamicToolCallTimeoutMs({
 				call,
-				config: params.cfg
+				config: params.cfg,
+				toolBridge
 			});
+			setExecutionTimeoutMs?.(timeoutMs);
 			const toolStartedAt = Date.now();
 			const diagnosticContext = {
 				call,
@@ -459,6 +467,8 @@ async function runCodexAppServerSideQuestion(params, options) {
 				else pendingNativePreToolUseFailures.push(failure);
 			}
 		}) : void 0;
+		await nativeHookRelay?.prepareInvocation();
+		assertCurrent();
 		const nativeHookRelayConfig = nativeHookRelay ? buildCodexNativeHookRelayConfig({
 			relay: nativeHookRelay,
 			events: nativeHookRelayEvents,
@@ -579,11 +589,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 		});
 		const turnResponse = assertCodexTurnStartResponse(await client.request("turn/start", {
 			threadId: sideThreadId,
-			input: [{
-				type: "text",
-				text: params.question.trim(),
-				text_elements: []
-			}],
+			input: buildCodexUserInput(params.question.trim(), params.images),
 			additionalContext: buildCodexTemporalAdditionalContext(sideRunParams, { sessionStatusAvailable: toolBridge.availableTools.some((tool) => tool.name === "session_status") }),
 			...sandboxEnvironment ? {
 				cwd: sandboxEnvironment.cwd,
@@ -640,17 +646,15 @@ async function runCodexAppServerSideQuestion(params, options) {
 			codexErrorInfo: result.turn?.error?.codexErrorInfo ?? null
 		} }, readRecentCodexRateLimits(client));
 		if (result.turn?.status === "interrupted") throw new Error("Codex /btw side thread was interrupted.");
-		const trimmed = result.text;
 		assertCurrent();
-		if (!trimmed) throw new Error("Codex /btw completed without an answer.");
+		if (!result.text) throw new Error("Codex /btw completed without an answer.");
 		return {
-			text: trimmed,
+			text: result.text,
 			usage: result.usage
 		};
 	} finally {
 		try {
-			const runWasAbortedBeforeCleanup = runAbortController.signal.aborted;
-			nativeToolRunWasAbortedBeforeCleanup = runWasAbortedBeforeCleanup;
+			nativeToolRunWasAbortedBeforeCleanup = runAbortController.signal.aborted;
 			params.opts?.abortSignal?.removeEventListener("abort", abortFromUpstream);
 			if (!runAbortController.signal.aborted) runAbortController.abort("codex_side_question_finished");
 			await Promise.allSettled(activeDynamicToolCalls);
@@ -665,7 +669,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 				if (policyWriteUncertain && childClient) await retireUnsafeCodexTurnClientBestEffort(childClient, "side policy handoff");
 				collector?.route.release();
 				try {
-					nativeToolLifecycleProjector?.finalizeActive(runWasAbortedBeforeCleanup);
+					nativeToolLifecycleProjector?.finalizeActive(nativeToolRunWasAbortedBeforeCleanup);
 				} finally {
 					activateNativePreToolUseFailureFallback();
 				}
@@ -677,6 +681,15 @@ async function runCodexAppServerSideQuestion(params, options) {
 			} finally {
 				releaseCodexAppServerClientLease(clientLease);
 				nativeHookRelay?.unregister();
+				await runAgentCleanupStep({
+					runId: sideRunParams.runId,
+					sessionId: sideRunParams.sessionId,
+					step: "codex-side-native-hook-relay-release",
+					log: embeddedAgentLog,
+					cleanup: async () => {
+						await nativeHookRelay?.drain();
+					}
+				});
 			}
 		}
 	}
@@ -687,7 +700,7 @@ function resolveCodexSideNativeHookRelayEvents(params) {
 }
 function registerCodexSideNativeHookRelay(params) {
 	if (params.options.enabled === false) return;
-	return registerNativeHookRelay({
+	return registerNativeHookRelayForBundledRuntime({
 		provider: "codex",
 		...params.agentId ? { agentId: params.agentId } : {},
 		sessionId: params.sessionId,
@@ -797,11 +810,15 @@ async function createCodexSideToolBridge(input) {
 			send: async (payload) => {
 				await publishSideToolResult(payload);
 			},
-			...input.params.messageChannel ? { messageChannel: input.params.messageChannel } : {}
+			...messageToolProvider ? { messageChannel: messageToolProvider } : {}
 		} : void 0;
 		const allTools = createOpenClawCodingTools({
 			agentId: input.sessionAgentId,
 			requesterThinkingLevel: input.params.resolvedThinkLevel ?? "off",
+			requesterModel: input.params.runtimeModel ? {
+				provider: input.params.runtimeModel.provider,
+				model: input.params.runtimeModel.id
+			} : void 0,
 			sessionKey: sandboxSessionKey,
 			runSessionKey: input.params.sessionKey && input.params.sessionKey !== sandboxSessionKey ? input.params.sessionKey : void 0,
 			sessionId: input.params.sessionId,

package/dist/{source-Da-h6f7e.js → .setup/source-Bjp4UQij.mjs}

@@ -1,9 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { m as CODEX_PLUGINS_MARKETPLACE_NAME } from "./config-utils-C57JiJrU.js";
-import { r as buildCodexPluginAppCacheKey, s as defaultCodexAppInventoryCache } from "./plugin-app-cache-key-CdSQzWyX.js";
-import { o as withCodexAppServerJsonClient } from "./request-CGvGOpeR.js";
-import "./config-JDfTI4VI.js";
-import { i as pluginReadParams, n as isOpenAiCuratedMarketplace } from "./plugin-inventory-CoRCzWW4.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { c as CODEX_PLUGINS_MARKETPLACE_NAME, i as pluginReadParams, n as isOpenAiCuratedMarketplace } from "./plugin-inventory-DUle8DLz.mjs";
+import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BOxKP7db.mjs";
+import { o as withCodexAppServerJsonClient } from "./request-BioXJLYa.mjs";
+import "./config-CedDWjM-.mjs";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";
@@ -121,6 +120,7 @@ async function discoverCodexMemorySources(codexHome) {
 //#region extensions/codex/src/migration/source.ts
 var source_exports = /* @__PURE__ */ __exportAll({
 	codexPluginMigrationSubscriptionWarning: () => codexPluginMigrationSubscriptionWarning,
+	defaultCodexHome: () => defaultCodexHome,
 	discoverCodexSource: () => discoverCodexSource,
 	hasCodexSource: () => hasCodexSource
 });
@@ -459,31 +459,32 @@ async function discoverCodexSource(options = {}) {
 	const authPath = path.join(codexHome, "auth.json");
 	const modelsCachePath = path.join(codexHome, "models_cache.json");
 	const hooksPath = path.join(codexHome, "hooks", "hooks.json");
-	const memoryFiles = await discoverCodexMemorySources(codexHome);
-	const codexSkills = options.memoryOnly ? [] : await discoverSkillDirs({
+	const skipAssets = options.memoryOnly === true || options.authOnly === true;
+	const memoryFiles = options.authOnly ? [] : await discoverCodexMemorySources(codexHome);
+	const codexSkills = skipAssets ? [] : await discoverSkillDirs({
 		root: codexSkillsDir,
 		sourceLabel: "Codex skill",
 		excludeSystem: true
 	});
-	const personalAgentSkills = options.memoryOnly ? [] : await discoverSkillDirs({
+	const personalAgentSkills = skipAssets ? [] : await discoverSkillDirs({
 		root: agentsSkillsDir,
 		sourceLabel: "personal AgentSkill"
 	});
-	const sourcePluginDiscovery = options.memoryOnly ? { plugins: [] } : await discoverInstalledCuratedPlugins(codexHome, options);
+	const sourcePluginDiscovery = skipAssets ? { plugins: [] } : await discoverInstalledCuratedPlugins(codexHome, options);
 	const sourcePluginNames = new Set(sourcePluginDiscovery.plugins.flatMap((plugin) => plugin.pluginName ? [plugin.pluginName] : []));
-	const cachedPlugins = (options.memoryOnly ? [] : await discoverPluginDirs(codexHome)).filter((plugin) => {
+	const cachedPlugins = (skipAssets ? [] : await discoverPluginDirs(codexHome)).filter((plugin) => {
 		const normalizedName = sanitizePluginName(plugin.name);
 		return !sourcePluginNames.has(normalizedName);
 	});
 	const plugins = [...sourcePluginDiscovery.plugins, ...cachedPlugins].toSorted((a, b) => a.source.localeCompare(b.source));
 	const archivePaths = [];
-	if (!options.memoryOnly && await exists(configPath)) archivePaths.push({
+	if (!skipAssets && await exists(configPath)) archivePaths.push({
 		id: "archive:config.toml",
 		path: configPath,
 		relativePath: "config.toml",
 		message: "Codex config is archived for manual review; it is not activated automatically"
 	});
-	if (!options.memoryOnly && await exists(hooksPath)) archivePaths.push({
+	if (!skipAssets && await exists(hooksPath)) archivePaths.push({
 		id: "archive:hooks/hooks.json",
 		path: hooksPath,
 		relativePath: "hooks/hooks.json",
@@ -515,4 +516,4 @@ function sanitizePluginName(value) {
 	return value.trim().toLowerCase().replaceAll(/\s+/gu, "-");
 }
 //#endregion
-export { exists as a, sanitizeName as c, source_exports as i, discoverCodexSource as n, readJsonObject as o, hasCodexSource as r, resolveHomePath as s, codexPluginMigrationSubscriptionWarning as t };
+export { source_exports as a, resolveHomePath as c, hasCodexSource as i, sanitizeName as l, defaultCodexHome as n, exists as o, discoverCodexSource as r, readJsonObject as s, codexPluginMigrationSubscriptionWarning as t };

package/dist/{thread-archive-guard-D1bP04Tf.js → .setup/thread-archive-guard-jmecf6OJ.mjs}

@@ -1,4 +1,4 @@
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
+import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
 import { normalizeBoundedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/thread-archive-guard.ts
 const DESCENDANT_PAGE_LIMIT = 100;

package/dist/.setup/thread-history-page-BTx-4xsg.mjs

@@ -0,0 +1,83 @@
+import { A as parseTranscriptPage, M as readControlCursor, g as CatalogParamsError } from "./session-catalog-native-projection-ChV3cCtm.mjs";
+//#region extensions/codex/src/app-server/thread-history-page.ts
+const TURN_ITEM_CURSOR_PREFIX = "turn-item:";
+function encodeTurnItemCursor(turnCursor, itemId) {
+	return TURN_ITEM_CURSOR_PREFIX + Buffer.from(JSON.stringify([turnCursor, itemId])).toString("base64url");
+}
+function decodeTurnItemCursor(cursor) {
+	if (!cursor?.startsWith(TURN_ITEM_CURSOR_PREFIX)) return { turnCursor: cursor };
+	let value;
+	try {
+		value = JSON.parse(Buffer.from(cursor.slice(10), "base64url").toString());
+	} catch {
+		throw new CatalogParamsError("invalid Codex transcript item cursor");
+	}
+	if (!Array.isArray(value) || value.length !== 2 || typeof value[0] !== "string" || !value[0] || typeof value[1] !== "string" || !value[1]) throw new CatalogParamsError("invalid Codex transcript item cursor");
+	return {
+		turnCursor: value[0],
+		itemId: value[1]
+	};
+}
+/** Legacy stores expose only turn cursors; an item identity preserves paging across appends. */
+async function readLegacyCodexHistoryPage(readTurns, request, projection) {
+	const { turnCursor, itemId } = decodeTurnItemCursor(request.cursor);
+	const page = parseTranscriptPage(await readTurns({
+		threadId: request.threadId,
+		limit: 1,
+		sortDirection: "desc",
+		itemsView: "full",
+		...turnCursor ? { cursor: turnCursor } : {}
+	}));
+	const source = page.data.flatMap(({ items, ...turn }) => items.toReversed().map((item) => ({
+		turnId: turn.id,
+		item,
+		turn
+	})));
+	const anchorIndex = itemId ? source.findIndex(({ item }) => item.id === itemId) : -1;
+	if (itemId && anchorIndex < 0) throw new CatalogParamsError("Codex transcript changed; refresh the session before loading older items");
+	const remaining = source.slice(anchorIndex + 1);
+	const items = projection.project(remaining.slice(0, request.limit), request.limit);
+	const result = () => {
+		const lastSource = remaining[items.length - 1];
+		const partial = lastSource !== void 0 && items.length < remaining.length;
+		const nativeCursor = partial ? page.backwardsCursor : page.nextCursor;
+		const cursor = nativeCursor ? partial ? encodeTurnItemCursor(nativeCursor, lastSource.item.id) : nativeCursor : void 0;
+		if (partial && !cursor) throw new Error("Codex app-server did not provide a transcript continuation anchor");
+		return {
+			items,
+			...cursor ? { nextCursor: cursor } : {}
+		};
+	};
+	let bounded = result();
+	while (!projection.fits(bounded)) {
+		if (items.length <= 1) throw new Error("Codex transcript item exceeds the safe response size");
+		items.pop();
+		bounded = result();
+	}
+	return bounded;
+}
+/** Callers authorize the thread; this reader owns native cursor and response-size semantics. */
+async function readCodexThreadHistoryPage(control, thread, request, projection) {
+	if (thread.historyMode !== "paginated") return readLegacyCodexHistoryPage((params) => control.listTurnPage(params), request, projection);
+	let limit = request.limit;
+	for (;;) {
+		const page = await control.listItemPage({
+			threadId: request.threadId,
+			limit,
+			sortDirection: "desc",
+			...request.cursor ? { cursor: request.cursor } : {}
+		});
+		const nextCursor = readControlCursor(page.nextCursor, "transcript next response");
+		const items = projection.project(page.data, limit);
+		const result = {
+			items,
+			...nextCursor ? { nextCursor } : {}
+		};
+		const fittingCount = items.length - (projection.fits(result) ? 0 : 1);
+		if (fittingCount === page.data.length) return result;
+		if (fittingCount < 1) throw new Error("Codex transcript item exceeds the safe response size");
+		limit = fittingCount;
+	}
+}
+//#endregion
+export { readLegacyCodexHistoryPage as n, readCodexThreadHistoryPage as t };