@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/{thread-lifecycle-D1pzRwHB.js → .setup/thread-lifecycle-Cik28qWn.mjs}

@@ -1,48 +1,51 @@
-import { l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-CaZjYwNS.js";
-import { f as assertCodexModelBackedReviewerEffectiveConfig, g as readCodexEffectiveConfig, h as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES, n as codexSandboxPolicyForTurn } from "./config-options-jnIFvwxD.js";
-import { S as resolveCodexPluginsPolicy, a as flattenCodexDynamicToolFunctions, c as resolveCodexAppServerLocalHomeDir, o as isJsonObject, s as resolveCodexAppServerHomeDir } from "./protocol-CAAcVIKF.js";
-import { L as resolveCodexToolAbortTerminalReason, _ as assertCodexThreadAcceptsDirectInput, b as assertCodexThreadStartResponse, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError, p as resolveCodexAppServerClientInstanceId, r as getCodexAppServerClientInstanceId, v as assertCodexThreadForkResponse } from "./client-BEKu4yDx.js";
-import { i as markStartedCodexManagedThread } from "./managed-thread-store-D1t5jh3G.js";
-import { n as withCodexAppServerThreadMutation, t as isIncognitoSessionKey } from "./incognito-session-uhrBF6wJ.js";
-import { i as isCodexThreadReadMissingError, n as readCodexSessionMeta, r as CodexAppServerRpcError } from "./session-catalog-provenance-DkJHo735.js";
-import { n as codexCatalogHomeId, r as projectBoundedCodexThreadHistory } from "./session-catalog-home-id-D7-aLiNt.js";
-import { c as serializeCodexAppInventoryError, o as CodexAppInventoryCache, s as defaultCodexAppInventoryCache, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-CdSQzWyX.js";
-import { t as withAbortableTimeout } from "./timeout-BVw8aaM1.js";
-import "./config-JDfTI4VI.js";
-import { r as sanitizeInlineImageDataUrl, t as invalidInlineImageText } from "./image-payload-sanitizer-tupAr-2o.js";
-import { t as assertCodexSessionRuntimeOwnership } from "./binding-connection-QqgcPCgk.js";
-import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CwzO4_RG.js";
-import { C as CodexThreadBindingConflictError, G as unsubscribeCodexAppServerLiveThread, H as readCodexClientSessionMeta, P as consumeCodexAppServerLiveThread, R as isCodexAppServerClientRuntimeLive, S as CodexAdoptedThreadActiveError, U as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, n as captureCodexAppServerClientLifetime, w as CodexThreadStartRequestError, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, r as CodexAppServerUnsafeSubscriptionError, s as isCodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
-import { a as readCodexPluginInventory, o as resolveOwnedAppApprovalOverrideKeys } from "./plugin-inventory-CoRCzWW4.js";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-BQK-f5sV.js";
-import { o as resolveCodexSessionBinding, r as hashCodexAppServerBindingFingerprint } from "./session-binding-CKSepwIC.js";
-import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError, r as assertCodexSupervisionThreadLineage, t as CodexIncognitoPolicyChangeError } from "./thread-policy-D8kI7yAO.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
-import { r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread } from "./thread-ownership-D6oASVRu.js";
-import "./transcript-mirror-t5TOccct.js";
+import { a as readCodexPluginInventory, o as resolveOwnedAppApprovalOverrideKeys } from "./plugin-inventory-DUle8DLz.mjs";
+import { n as assertCodexBindingMayBeReplaced, p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
+import { g as resolveCodexAppServerLocalHomeDir, h as resolveCodexAppServerHomeDir, m as isJsonObject, p as flattenCodexDynamicToolFunctions } from "./config-security-BRQ2mgW9.mjs";
+import { f as resolveCodexPluginsPolicy } from "./config-parsing-CcB9iPoq.mjs";
+import { L as resolveCodexToolAbortTerminalReason, _ as assertCodexThreadAcceptsDirectInput, b as assertCodexThreadStartResponse, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError, p as resolveCodexAppServerClientInstanceId, r as getCodexAppServerClientInstanceId, v as assertCodexThreadForkResponse } from "./client-vXs2929Q.mjs";
+import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn, s as assertCodexModelBackedReviewerEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-BsanJ8QG.mjs";
+import { f as getCurrentSharedClientEntry } from "./auth-cache-key-QirmgiCo.mjs";
+import { i as markStartedCodexManagedThread } from "./managed-thread-store-BMqgThVL.mjs";
+import { n as withCodexAppServerThreadMutation, t as isIncognitoSessionKey } from "./incognito-session-uhrBF6wJ.mjs";
+import { a as isCodexThreadReadMissingError, i as CodexAppServerRpcError, t as withAbortableTimeout } from "./timeout-DZF05XrR.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DHNBDhCU.mjs";
+import { a as defaultCodexAppInventoryCache, i as CodexAppInventoryCache, o as serializeCodexAppInventoryError, s as codexAppIdentityKey, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-BOxKP7db.mjs";
+import { a as codexCatalogHomeId, c as readCodexSessionMeta } from "./session-catalog-events-jMcYfQyd.mjs";
+import { t as assertCodexSessionRuntimeOwnership } from "./binding-connection-Bm38niE8.mjs";
+import "./config-CedDWjM-.mjs";
+import { r as sanitizeInlineImageDataUrl, t as invalidInlineImageText } from "./image-payload-sanitizer-tupAr-2o.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-WqZtZfXN.mjs";
+import { C as CodexThreadBindingConflictError, E as nativeHookRelayUnregisterQueue, G as unsubscribeCodexAppServerLiveThread, H as readCodexClientSessionMeta, L as hasCodexAppServerSiblingThreadWork, N as consumeCodexAppServerLiveThread, O as assertCodexInferenceRouteConfig, R as isCodexAppServerClientRuntimeLive, S as CodexAdoptedThreadActiveError, T as CodexThreadStartRequestError, U as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, j as prepareCodexInferenceThreadConfig, k as bindCodexInferenceThread, n as captureCodexAppServerClientLifetime, w as CodexThreadClientReplacementError, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort, f as unsubscribeCodexThreadBestEffort, h as hasCodexAppServerSiblingRouteWork, l as retireUnsafeCodexTurnClientBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, r as CodexAppServerUnsafeSubscriptionError, s as isCodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-r8nq5Jzp.mjs";
+import { o as resolveCodexSessionBinding, r as hashCodexAppServerBindingFingerprint } from "./session-binding-_0W_fHRr.mjs";
+import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError, r as assertCodexSupervisionThreadLineage, t as CodexIncognitoPolicyChangeError } from "./thread-policy-Cjs4B8xf.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BkNpj9Pz.mjs";
+import { r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread } from "./thread-ownership-skomxnIt.mjs";
+import "./transcript-mirror-D4qp_leP.mjs";
 import { asOptionalRecord, isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import * as crypto$1 from "node:crypto";
 import crypto, { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { addTimerTimeoutGraceMs, finiteSecondsToTimerSafeMilliseconds } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";
 import os from "node:os";
 import fs from "node:fs/promises";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
+import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
+import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { createStageTimingTracker, formatStageTimings } from "openclaw/plugin-sdk/time-runtime";
 import { isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
-import { isDeepStrictEqual } from "node:util";
 import { resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
-import { AgentHarnessPreflightError, SKILL_WORKSHOP_TOOL_NAME, buildCredentialSafetyPrompt, buildDelegationGuidanceSection, buildHarnessVisibleReplyGuidance, buildSkillWorkshopPromptSection, buildTemporalContextText, buildUiPresentationPrompt, embeddedAgentLog, formatErrorMessage, isActiveHarnessContextEngine, isHostScopedAgentToolActive, isOpenClawRuntimeContextCustomMessage, resolveMainSessionDelegationMode } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
+import { AgentHarnessPreflightError, SKILL_WORKSHOP_TOOL_NAME, buildCredentialSafetyPrompt, buildDelegationGuidanceSection, buildHarnessVisibleReplyGuidance, buildSkillWorkshopPromptSection, buildTemporalContextText, buildUiPresentationPrompt, embeddedAgentLog, formatErrorMessage as formatErrorMessage$1, isActiveHarnessContextEngine, isHostScopedAgentToolActive, isOpenClawRuntimeContextCustomMessage, resolveMainSessionDelegationMode } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
 import { IMAGE_BLOCK_TOKENS } from "openclaw/plugin-sdk/agent-core";
 import { resolveRequiredHomeDir, resolveStateDir } from "openclaw/plugin-sdk/state-paths";
 import { buildCodexUserMcpServersThreadConfigPatchForRun } from "openclaw/plugin-sdk/codex-mcp-projection";
-import { registerRetainedNativeHookRelayForBundledRuntime } from "openclaw/plugin-sdk/native-hook-relay-runtime";
+import { registerNativeHookRelayForBundledRuntime } from "openclaw/plugin-sdk/native-hook-relay-runtime";
 import { isDiagnosticFlagEnabled } from "openclaw/plugin-sdk/diagnostic-flags";
 import { listRegisteredPluginAgentPromptGuidance } from "openclaw/plugin-sdk/plugin-runtime";
 import { buildHostnameAllowlistPolicyFromSuffixAllowlist } from "openclaw/plugin-sdk/ssrf-policy";
@@ -104,7 +107,7 @@ function collectCodexPluginOwnedAppIds(inventory) {
 	return Array.from(new Set(inventory.records.flatMap((record) => record.ownedAppIds).filter(Boolean))).toSorted();
 }
 function collectCodexReservedPluginAppIds(params) {
-	const reserved = new Set(params.inventory.records.flatMap((record) => record.appOwnership === "proven" ? record.ownedAppIds : []));
+	const reserved = new Set(params.inventory.records.flatMap((record) => record.appOwnership === "proven" ? record.ownedAppIds : []).map(codexAppIdentityKey));
 	const recordsByConfigKey = new Map(params.inventory.records.map((record) => [record.policy.configKey, record]));
 	const configuredOwnerNames = new Set(params.policy.pluginPolicies.flatMap((policy) => {
 		const record = recordsByConfigKey.get(policy.configKey);
@@ -115,7 +118,7 @@ function collectCodexReservedPluginAppIds(params) {
 			record?.summary.id
 		].filter((name) => Boolean(name)).map(normalizeCodexPluginOwnerName);
 	}));
-	for (const app of params.accountApps) if (app.pluginDisplayNames.some((name) => configuredOwnerNames.has(normalizeCodexPluginOwnerName(name)))) reserved.add(app.id);
+	for (const app of params.accountApps) if (app.pluginDisplayNames.some((name) => configuredOwnerNames.has(normalizeCodexPluginOwnerName(name)))) reserved.add(codexAppIdentityKey(app.id));
 	return reserved;
 }
 function normalizeCodexPluginOwnerName(name) {
@@ -197,8 +200,8 @@ async function readCodexConfigForAppAdmission(params) {
 function resolveCodexExplicitAppEnablement(layersHighestPrecedenceFirst, appId) {
 	for (const layer of layersHighestPrecedenceFirst) {
 		const apps = layer.apps;
-		const app = isJsonObject(apps) ? apps[appId] : void 0;
-		if (isJsonObject(app) && Object.hasOwn(app, "enabled")) return app.enabled === true;
+		const values = isJsonObject(apps) ? Object.entries(apps).filter(([id, app]) => codexAppIdentityKey(id) === codexAppIdentityKey(appId) && isJsonObject(app) && Object.hasOwn(app, "enabled")).map(([, app]) => isJsonObject(app) && app.enabled === true) : [];
+		if (values.length > 0) return values.every(Boolean);
 	}
 }
 function shouldForceRefreshCodexNotReadyPluginApps(params, policy, inventory) {
@@ -211,7 +214,7 @@ function shouldForceRefreshCodexNotReadyPluginApps(params, policy, inventory) {
 * Builds Codex thread config patches that expose only policy-approved apps
 * for native Codex turns.
 */
-const CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION = 6;
+const CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION = 7;
 const CODEX_PLUGIN_THREAD_CONFIG_FINGERPRINT_VERSION = 2;
 /** Returns true when plugin config exists and thread config may need app patches. */
 function shouldBuildCodexPluginThreadConfig(pluginConfig) {
@@ -417,7 +420,7 @@ async function buildCodexPluginThreadConfig(params) {
 		}
 	}
 	for (const app of unresolvedDisabledPluginOwnership ? [] : accountAppsResult.apps) {
-		if (pluginOwnedAppIds.has(app.id)) continue;
+		if (pluginOwnedAppIds.has(codexAppIdentityKey(app.id))) continue;
 		const admissionConfig = await getAdmissionConfig();
 		if (resolveCodexExplicitAppEnablement(admissionConfig.layers, app.id) === false) continue;
 		const accountApp = toCodexPluginOwnedAccountApp(app);
@@ -636,8 +639,34 @@ const CODEX_TURN_START_TEXT_INPUT_MAX_CHARS = 1 << 20;
 const DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS = 2e4;
 const MIN_PROMPT_BUDGET_RATIO = .5;
 const MIN_PROMPT_BUDGET_TOKENS = 8e3;
+const CODEX_CONTEXT_SENDER_FIELD_MAX_CHARS = 256;
+/**
+* This projection has no access to agent-core's private compaction helper, but
+* must keep the same attribution contract: a stable ID is identity; display
+* labels are optional metadata, never provenance on their own.
+*/
+function formatCodexContextSenderSuffix(message) {
+	if (message.role !== "user") return "";
+	const metadata = Reflect.get(message, "__openclaw");
+	if (!metadata || typeof metadata !== "object") return "";
+	const normalize = (value) => {
+		if (typeof value !== "string") return;
+		const normalized = value.replaceAll("\0", "").trim();
+		return normalized ? truncateUtf16Safe(normalized, CODEX_CONTEXT_SENDER_FIELD_MAX_CHARS) : void 0;
+	};
+	const record = metadata;
+	const id = normalize(record.senderId);
+	if (!id) return "";
+	const name = normalize(record.senderName);
+	const username = normalize(record.senderUsername);
+	return ` sender=${JSON.stringify({
+		id,
+		...name ? { name } : {},
+		...username ? { username } : {}
+	})}`;
+}
 function neutralizeCodexExplicitMentionSigils(text) {
-	return text.replace(/\$(?=[A-Za-z0-9_:-])/gu, "＄").replace(/\[@(?=[A-Za-z0-9_:-]+\]\()/gu, "[＠");
+	return text.replace(/\$(?=[A-Za-z0-9_:-])/gu, "＄").replace(/\[@(?=[A-Za-z0-9_:-]+\]\s*\()/gu, "[＠");
 }
 /** Hidden durable notes are context; transient runtime carriers are current-turn only. */
 function isCodexDurableCustomMessage(message) {
@@ -673,7 +702,11 @@ async function projectContextEngineAssemblyForCodex(params) {
 		...promptContextRange ? { promptContextRange } : {},
 		assembledMessages: params.assembledMessages,
 		prePromptMessageCount: params.originalHistoryMessages.length,
-		...context.images.length ? { images: context.images } : {}
+		...context.imageGroups.length && promptPrefix ? { imageGroups: context.imageGroups.map((group) => ({
+			images: group.images,
+			start: group.start + promptPrefix.length,
+			end: group.end + promptPrefix.length
+		})) } : {}
 	};
 }
 /** Resolves rendered context size from a token budget and reserve. */
@@ -717,32 +750,61 @@ function resolveCodexContinuityProjectionMaxChars(params) {
 }
 /** Fits projected context prompts under Codex app-server turn/start text limits. */
 function fitCodexProjectedContextForTurnStart(params) {
+	const slice = (start, end, budget = end - start) => {
+		const retained = truncateOlderContext(params.promptText.slice(start, end), budget);
+		return {
+			...retained,
+			sourceStart: start + retained.retainedStart,
+			sourceEnd: end
+		};
+	};
+	const finish = (...parts) => {
+		const imageGroups = [];
+		let offset = 0;
+		for (const part of parts) {
+			for (const group of params.imageGroups ?? []) if (group.start >= part.sourceStart && group.end <= part.sourceEnd) {
+				const shift = offset + part.prefixLength - part.sourceStart;
+				imageGroups.push({
+					...group,
+					start: group.start + shift,
+					end: group.end + shift
+				});
+			}
+			offset += part.text.length;
+		}
+		return {
+			promptText: parts.map((part) => part.text).join(""),
+			...imageGroups.length ? { imageGroups } : {}
+		};
+	};
 	const maxChars = typeof params.maxChars === "number" && Number.isFinite(params.maxChars) ? Math.max(0, Math.floor(params.maxChars)) : CODEX_TURN_START_TEXT_INPUT_MAX_CHARS;
-	if (params.promptText.length <= maxChars) return params.promptText;
+	if (params.promptText.length <= maxChars) return finish(slice(0, params.promptText.length));
 	const range = normalizeProjectedContextRange(params.contextRange, params.promptText.length);
 	if (!range) {
 		const preservedRange = normalizeProjectedContextRange(params.preservedRange, params.promptText.length);
-		if (!preservedRange) return params.promptText;
+		if (!preservedRange) return finish(slice(0, params.promptText.length));
 		const preservedText = params.promptText.slice(preservedRange.start, preservedRange.end);
-		if (!preservedText) return truncateOlderContext(params.promptText, maxChars);
-		if (preservedText.length >= maxChars) return truncateOlderContext(preservedText, maxChars);
-		return `${truncateOlderContext(params.promptText.slice(0, preservedRange.start), maxChars - preservedText.length)}${preservedText}`;
+		if (!preservedText) return finish(slice(0, params.promptText.length, maxChars));
+		if (preservedText.length >= maxChars) return finish(slice(preservedRange.start, preservedRange.end, maxChars));
+		return finish(slice(0, preservedRange.start, maxChars - preservedText.length), slice(preservedRange.start, preservedRange.end));
 	}
 	const beforeContext = params.promptText.slice(0, range.start);
-	const context = params.promptText.slice(range.start, range.end);
 	const afterContext = params.promptText.slice(range.end);
 	const requestRange = normalizeProjectedContextRange(params.requestRange, params.promptText.length);
 	if (requestRange && requestRange.start >= range.end && requestRange.end < params.promptText.length) {
 		const request = params.promptText.slice(requestRange.start, requestRange.end);
-		if (request.length >= maxChars) return truncateOlderContext(request, maxChars);
-		const fittedAppendedContext = truncateOlderContext(params.promptText.slice(requestRange.end), maxChars - request.length);
-		const fittedContext = truncateOlderContext(context, maxChars - request.length - fittedAppendedContext.length);
-		return `${truncateOlderContext(beforeContext, maxChars - fittedContext.length - request.length - fittedAppendedContext.length)}${fittedContext}${request}${fittedAppendedContext}`;
+		if (request.length >= maxChars) return finish(slice(requestRange.start, requestRange.end, maxChars));
+		const fittedAppendedContext = slice(requestRange.end, params.promptText.length, maxChars - request.length);
+		const contextBudget = maxChars - request.length - fittedAppendedContext.text.length;
+		const fittedContext = slice(range.start, range.end, contextBudget);
+		const beforeContextBudget = maxChars - fittedContext.text.length - request.length - fittedAppendedContext.text.length;
+		return finish(slice(0, range.start, beforeContextBudget), fittedContext, slice(requestRange.start, requestRange.end), fittedAppendedContext);
 	}
 	const contextBudget = maxChars - beforeContext.length - afterContext.length;
-	if (contextBudget > 0) return `${beforeContext}${truncateOlderContext(context, contextBudget)}${afterContext}`;
-	const afterContextText = truncateOlderContext(afterContext, maxChars);
-	return `${truncateOlderContext(context, maxChars - afterContextText.length)}${afterContextText}`;
+	if (contextBudget > 0) return finish(slice(0, range.start), slice(range.start, range.end, contextBudget), slice(range.end, params.promptText.length));
+	const afterContextText = slice(range.end, params.promptText.length, maxChars);
+	const contextBudgetAfterRequest = maxChars - afterContextText.text.length;
+	return finish(slice(range.start, range.end, contextBudgetAfterRequest), afterContextText);
 }
 function normalizeProjectedContextRange(range, textLength) {
 	if (!range) return;
@@ -763,7 +825,6 @@ function resolveProjectionPromptBudgetTokens(params) {
 }
 async function renderMessagesForCodexContext(messages, options) {
 	const tail = [];
-	const images = [];
 	let retainedImageChars = 0;
 	let totalChars = 0;
 	let retainedChars = 0;
@@ -784,19 +845,38 @@ async function renderMessagesForCodexContext(messages, options) {
 			imageChars > 0 && !imagesFit ? "[Attachment images omitted: context budget exceeded]" : void 0
 		].filter(Boolean).join("\n\n");
 		if (!text && acceptedImageChars === 0) continue;
-		const chunk = `[${message.role}]\n${text}${totalChars > 0 ? "\n\n" : ""}`;
+		const separator = totalChars > 0 ? "\n\n" : "";
+		const chunk = `[${message.role}${formatCodexContextSenderSuffix(message)}]\n${text}${separator}`;
 		totalChars += chunk.length;
 		if (remaining > 0) {
 			const retained = neutralizeCodexExplicitMentionSigils(chunk).slice(-(remaining - acceptedImageChars));
-			tail.push(retained);
+			tail.push({
+				text: retained,
+				separatorLength: separator.length,
+				...imagesFit && files?.images.length && retained.length === chunk.length ? { images: files.images } : {}
+			});
 			retainedChars += retained.length + acceptedImageChars;
 			retainedImageChars += acceptedImageChars;
-			if (imagesFit && files?.images.length) images.unshift(...files.images);
 		}
 	}
+	const ordered = tail.toReversed();
+	const fitted = truncateOlderContext(ordered.map((entry) => entry.text).join(""), options.maxRenderedContextChars - retainedImageChars, totalChars);
+	const imageGroups = [];
+	let offset = 0;
+	for (const entry of ordered) {
+		if (entry.images && offset >= fitted.retainedStart) {
+			const start = offset - fitted.retainedStart + fitted.prefixLength;
+			imageGroups.push({
+				start,
+				end: start + entry.text.length - entry.separatorLength,
+				images: entry.images
+			});
+		}
+		offset += entry.text.length;
+	}
 	return {
-		text: truncateOlderContext(tail.toReversed().join(""), options.maxRenderedContextChars - retainedImageChars, totalChars),
-		images
+		text: fitted.text,
+		imageGroups
 	};
 }
 function renderMessageBody(message, options) {
@@ -871,8 +951,12 @@ function summarizeToolInputShape(value, seen = /* @__PURE__ */ new WeakSet()) {
 	return `[${typeof value}]`;
 }
 function redactPreservedToolValue(key, value, seen = /* @__PURE__ */ new WeakSet()) {
-	if (typeof value === "string") return redactSensitiveFieldValue(key, redactToolPayloadText(value));
-	if (value === null || value === void 0 || typeof value === "number" || typeof value === "boolean") return value;
+	if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+		const text = String(value);
+		const redacted = redactSensitiveFieldValue(key, redactToolPayloadText(text));
+		return redacted === text ? value : redacted;
+	}
+	if (value === null || value === void 0) return value;
 	if (Array.isArray(value)) {
 		if (seen.has(value)) return "[Circular]";
 		seen.add(value);
@@ -910,15 +994,32 @@ function truncateText(text, maxChars) {
 	return `${truncated}\n[truncated ${text.length - truncated.length} chars]`;
 }
 function truncateOlderContext(text, maxChars, totalChars = text.length) {
-	if (totalChars <= maxChars) return text;
-	if (maxChars <= 0) return "";
+	if (totalChars <= maxChars) return {
+		text,
+		retainedStart: 0,
+		prefixLength: 0
+	};
+	if (maxChars <= 0) return {
+		text: "",
+		retainedStart: text.length,
+		prefixLength: 0
+	};
 	const buildMarker = (omittedChars) => `[truncated ${omittedChars} chars from older context]\n`;
 	let marker = buildMarker(totalChars - maxChars);
 	let tailChars = Math.max(0, maxChars - marker.length);
 	marker = buildMarker(totalChars - tailChars);
-	if (marker.length >= maxChars) return marker.slice(0, maxChars);
+	if (marker.length >= maxChars) return {
+		text: marker.slice(0, maxChars),
+		retainedStart: text.length,
+		prefixLength: maxChars
+	};
 	tailChars = maxChars - marker.length;
-	return `${marker}${sliceUtf16Safe(text, -tailChars).trimStart()}`;
+	const tail = sliceUtf16Safe(text, -tailChars).trimStart();
+	return {
+		text: `${marker}${tail}`,
+		retainedStart: text.length - tail.length,
+		prefixLength: marker.length
+	};
 }
 //#endregion
 //#region extensions/codex/src/app-server/thread-context-engine.ts
@@ -1575,30 +1676,6 @@ async function discardUnattestedCodexPluginThread(params) {
 	}
 }
 //#endregion
-//#region extensions/codex/src/app-server/native-hook-relay-state.ts
-const pending = /* @__PURE__ */ new Set();
-/** Owns delayed hook-relay cleanup across runtime scheduling and test teardown. */
-const nativeHookRelayUnregisterQueue = {
-	add(entry) {
-		pending.add(entry);
-	},
-	delete(entry) {
-		return pending.delete(entry);
-	},
-	flush() {
-		while (pending.size > 0) {
-			const entry = pending.values().next().value;
-			if (!entry) return;
-			clearTimeout(entry.timeout);
-			entry.unregister();
-		}
-	},
-	clear() {
-		for (const entry of pending) clearTimeout(entry.timeout);
-		pending.clear();
-	}
-};
-//#endregion
 //#region extensions/codex/src/app-server/native-hook-relay.ts
 /**
 * Bridges Codex native hook callbacks into OpenClaw's native hook relay so
@@ -1664,6 +1741,7 @@ function scheduleCodexNativeHookRelayUnregister(params) {
 		pending = void 0;
 		if (!nativeHookRelayUnregisterQueue.delete(current)) return;
 		params.relay.unregister();
+		nativeHookRelayUnregisterQueue.track(params.relay.drain());
 	};
 	const timeout = setTimeout(unregister, resolveCodexNativeHookRelayUnregisterGraceMs(params.hookTimeoutSec));
 	pending = {
@@ -1706,7 +1784,7 @@ function createCodexNativeHookRelay(params) {
 		for (const pending of pendingDirectChildAdmissions.values()) pending.reject(new Error(reason));
 		pendingDirectChildAdmissions.clear();
 	};
-	const relay = registerRetainedNativeHookRelayForBundledRuntime({
+	const relay = registerNativeHookRelayForBundledRuntime({
 		provider: "codex",
 		relayId: buildCodexNativeHookRelayId({
 			agentId: params.agentId,
@@ -1735,6 +1813,7 @@ function createCodexNativeHookRelay(params) {
 		}),
 		signal: params.signal,
 		runBeforeToolCall: params.hostCapabilities.runBeforeToolCall,
+		approvalHost: params.hostCapabilities,
 		assertActive: () => {
 			params.hostCapabilities.assertActive();
 			params.assertCurrent?.();
@@ -1743,20 +1822,32 @@ function createCodexNativeHookRelay(params) {
 			readClaim: readCodexNativeChildThreadId,
 			shouldRetainAfterForegroundClose: () => successfulYieldRetentionAuthorized && directChildClaims.size > 0,
 			allowPreToolUse: (childThreadId) => directChildClaims.has(childThreadId),
-			awaitForegroundAdmission: (childThreadId) => {
+			awaitForegroundAdmission: (childThreadId, signal) => {
 				if (foregroundClosed) return Promise.reject(/* @__PURE__ */ new Error("native hook relay foreground admission unavailable"));
 				const existingClaim = directChildClaims.get(childThreadId);
 				if (existingClaim) return Promise.resolve(assertClaim(childThreadId, existingClaim));
-				const existingPending = pendingDirectChildAdmissions.get(childThreadId);
-				if (existingPending) return existingPending.promise.then((claim) => assertClaim(childThreadId, claim));
-				if (pendingDirectChildAdmissions.size >= MAX_PENDING_DIRECT_CHILD_ADMISSIONS) return Promise.reject(/* @__PURE__ */ new Error("native hook relay foreground admission capacity reached"));
-				const { promise, resolve, reject } = createDeferred();
-				pendingDirectChildAdmissions.set(childThreadId, {
-					promise,
-					resolve,
-					reject
+				let pending = pendingDirectChildAdmissions.get(childThreadId);
+				if (!pending) {
+					if (pendingDirectChildAdmissions.size >= MAX_PENDING_DIRECT_CHILD_ADMISSIONS) return Promise.reject(/* @__PURE__ */ new Error("native hook relay foreground admission capacity reached"));
+					pending = {
+						...createDeferred(),
+						waiters: 0
+					};
+					pendingDirectChildAdmissions.set(childThreadId, pending);
+				}
+				const admission = pending;
+				admission.waiters++;
+				let onAbort;
+				return new Promise((resolve, reject) => {
+					admission.promise.then(resolve, reject);
+					onAbort = () => reject(toErrorObject(signal?.reason, "native hook relay admission aborted"));
+					signal?.addEventListener("abort", onAbort, { once: true });
+					if (signal?.aborted) onAbort();
+				}).then((claim) => assertClaim(childThreadId, claim)).finally(() => {
+					if (onAbort) signal?.removeEventListener("abort", onAbort);
+					admission.waiters--;
+					if (admission.waiters === 0 && pendingDirectChildAdmissions.get(childThreadId) === admission) pendingDirectChildAdmissions.delete(childThreadId);
 				});
-				return promise.then((claim) => assertClaim(childThreadId, claim));
 			},
 			onDispose: () => {
 				foregroundClosed = true;
@@ -1803,7 +1894,10 @@ function createCodexNativeHookRelay(params) {
 				released = true;
 				if (directChildClaims.get(threadId) !== claim) return;
 				directChildClaims.delete(threadId);
-				if (foregroundClosed && directChildClaims.size === 0) relay.unregister();
+				if (foregroundClosed && directChildClaims.size === 0) {
+					relay.unregister();
+					nativeHookRelayUnregisterQueue.track(relay.drain());
+				}
 			};
 		}
 	};
@@ -1952,6 +2046,23 @@ function isCodexAppServerProfilerEnabled(config, env = process.env) {
 	return PROFILER_FLAGS.some((flag) => isDiagnosticFlagEnabled(flag, config, env));
 }
 //#endregion
+//#region extensions/codex/src/app-server/project-doc-thread-config.ts
+const CODEX_NATIVE_PROJECT_DOC_MAX_BYTES = 131072;
+function buildCodexProjectDocThreadConfig(config, effectiveNativeConfig) {
+	const defaults = { project_doc_max_bytes: resolveCodexNativeProjectDocMaxBytes(effectiveNativeConfig) ?? CODEX_NATIVE_PROJECT_DOC_MAX_BYTES };
+	return mergeCodexThreadConfigs(defaults, config) ?? defaults;
+}
+function resolveCodexNativeProjectDocMaxBytes(effectiveNativeConfig) {
+	if (effectiveNativeConfig?.origins?.project_doc_max_bytes === void 0) return;
+	const authoredMaxBytes = effectiveNativeConfig.config.project_doc_max_bytes;
+	if (typeof authoredMaxBytes !== "number" || !Number.isSafeInteger(authoredMaxBytes) || authoredMaxBytes < 0) throw new Error("Codex config/read returned an invalid project_doc_max_bytes value");
+	return authoredMaxBytes;
+}
+function mergeCodexNativeProjectDocThreadConfig(config, effectiveNativeConfig) {
+	const authoredMaxBytes = resolveCodexNativeProjectDocMaxBytes(effectiveNativeConfig);
+	return authoredMaxBytes === void 0 ? config : mergeCodexThreadConfigs({ project_doc_max_bytes: authoredMaxBytes }, config);
+}
+//#endregion
 //#region extensions/codex/src/app-server/mcp-tool-metadata.ts
 /** Hosted app ownership is authoritative only on metadata supplied by Codex. */
 function readCodexMcpToolConnectorId(tool) {
@@ -1966,13 +2077,6 @@ function readCodexMcpToolUiVisibility(tool) {
 	return [...new Set(visibility.filter((value) => value === "app" || value === "model"))].toSorted();
 }
 //#endregion
-//#region extensions/codex/src/app-server/project-doc-thread-config.ts
-const CODEX_NATIVE_PROJECT_DOC_MAX_BYTES = 131072;
-function buildCodexProjectDocThreadConfig(config) {
-	const defaults = { project_doc_max_bytes: CODEX_NATIVE_PROJECT_DOC_MAX_BYTES };
-	return mergeCodexThreadConfigs(defaults, config) ?? defaults;
-}
-//#endregion
 //#region extensions/codex/src/app-server/thread-model-selection.ts
 const CODEX_NATIVE_PERSONALITY_NONE = "none";
 function resolveCodexBindingModelProviderFallback(params) {
@@ -2044,15 +2148,17 @@ function resolveCodexAppServerModelProvider(params) {
 //#region extensions/codex/src/app-server/thread-prompt.ts
 function buildDeveloperInstructions(params, options = {}) {
 	const deferredToolNames = /* @__PURE__ */ new Set();
-	let secretsToolName;
+	let screenToolName;
 	let showWidgetToolName;
 	let dashboardToolName;
 	let portalToolName;
+	let messageTool;
 	let hasSkillWorkshop = false;
 	let hasSessionsSpawn = false;
 	let hasSessionsYield = false;
 	let hasSubagentsList = false;
 	let hasSessionsSend = false;
+	let hasControlTools = false;
 	let hasSeenDirectNamespace = false;
 	for (const spec of options.dynamicTools ?? []) {
 		const isDirectNamespace = spec.type === "namespace" && !hasSeenDirectNamespace && spec.name.trim() === "openclaw_direct";
@@ -2061,15 +2167,20 @@ function buildDeveloperInstructions(params, options = {}) {
 			const name = tool.name.trim();
 			const qualifiedName = spec.type === "namespace" ? `${spec.name}.${name}` : name;
 			if (tool.deferLoading === true && name) deferredToolNames.add(name);
-			if (name === "secrets" && params.disableTools !== true) secretsToolName ??= qualifiedName;
+			if (name === "screen") screenToolName ??= qualifiedName;
 			if (name === "show_widget") showWidgetToolName ??= qualifiedName;
 			if (name === "dashboard") dashboardToolName ??= qualifiedName;
 			if (name === "portal") portalToolName ??= qualifiedName;
+			if (name === "message") messageTool ??= {
+				name: qualifiedName,
+				parameters: tool.inputSchema
+			};
 			hasSkillWorkshop ||= name === SKILL_WORKSHOP_TOOL_NAME;
 			hasSessionsSpawn ||= name === "sessions_spawn";
 			hasSessionsYield ||= isDirectNamespace && name === "sessions_yield";
 			hasSubagentsList ||= name === "subagents";
 			hasSessionsSend ||= name === "sessions_send";
+			hasControlTools ||= name === "openclaw" || name === "gateway";
 		}
 	}
 	const nativeCommandGuidance = listRegisteredPluginAgentPromptGuidance({
@@ -2100,12 +2211,15 @@ function buildDeveloperInstructions(params, options = {}) {
 			hasSessionsSend
 		}).join("\n") : void 0,
 		params.disableTools !== true && params.promptMode !== "minimal" && params.promptMode !== "none" ? buildUiPresentationPrompt({
+			screenToolName,
 			showWidgetToolName,
 			dashboardToolName,
-			portalToolName
+			portalToolName,
+			messageTool
 		}) : void 0,
-		buildCredentialSafetyPrompt(secretsToolName),
+		buildCredentialSafetyPrompt({ controlToolsAvailable: params.disableTools !== true && hasControlTools }),
 		nativeCommandGuidance,
+		params.gitCoauthorPrompt,
 		params.extraSystemPrompt
 	].filter((section) => typeof section === "string" && section.trim()).join("\n\n");
 }
@@ -2338,6 +2452,7 @@ function buildThreadStartParams(params, options) {
 		...(options.hostSystemAgentActive ?? isHostScopedAgentToolActive("openclaw")) && isSystemAgentOnlyCodexDynamicToolAllowlist(params.toolsAllow) ? { baseInstructions: "" } : {},
 		personality: CODEX_NATIVE_PERSONALITY_NONE,
 		serviceName: "OpenClaw",
+		threadSource: "openclaw",
 		...resolveCodexThreadEnvironmentSelection(options),
 		dynamicTools: [...options.dynamicTools],
 		experimentalRawEvents: true,
@@ -2445,7 +2560,7 @@ function buildRestrictedToolConfigPatch(inheritedMcpServerNames, scheduledAppAut
 	};
 }
 async function readCodexInheritedMcpServerNames(client, cwd, signal, effectiveConfig) {
-	const response = effectiveConfig ?? await readCodexEffectiveConfig(client, cwd, signal);
+	const response = effectiveConfig ?? await readCodexEffectiveConfig(client, cwd, { signal });
 	if (!Array.isArray(response.layers)) throw new Error("Codex config/read omitted effective config layers");
 	for (const layer of response.layers) {
 		if (!isJsonObject(layer) || !isJsonObject(layer.name) || typeof layer.name.type !== "string") throw new Error("Codex config/read returned invalid effective config layers");
@@ -2979,7 +3094,7 @@ async function prepareCodexThreadLifecyclePreflight(params) {
 		warn: (message) => embeddedAgentLog.warn(message),
 		onServerUnavailable: (serverName, error) => embeddedAgentLog.warn("skipping unavailable MCP OAuth server", {
 			serverName,
-			error: formatErrorMessage(error)
+			error: formatErrorMessage$1(error)
 		})
 	});
 	const nativeSkillIsolation = await lifecycleTiming.measure("native-skill-isolation", () => resolveCodexNativeSkillIsolation({
@@ -3004,7 +3119,8 @@ async function prepareCodexThreadLifecyclePreflight(params) {
 	const allowConfiguredManagedHooks = params.params.pluginHarnessToolPolicyRestricted === true && !ringZeroActive && !messageOnlySourceReply && params.params.scheduledRuntimeAuthority === void 0;
 	const imageGenerationDenied = params.params.pluginHarnessToolPolicySafeDeniedTools?.includes("image_generate") === true;
 	if (restrictedToolSurface && params.nativeCodeModeEnabled !== false) throw new Error("Codex restricted tool surfaces require native code mode to be disabled");
-	if ((restrictedToolSurface || params.nativeCodeModeEnabled !== false) && !effectiveConfig) effectiveConfig = await lifecycleTiming.measure("tool-policy-config-read", () => readCodexEffectiveConfig(params.client, params.cwd, params.signal));
+	if (!effectiveConfig) effectiveConfig = await lifecycleTiming.measure("effective-config-read", () => readCodexEffectiveConfig(params.client, params.cwd, { signal: params.signal }));
+	params.config = mergeCodexNativeProjectDocThreadConfig(params.config, effectiveConfig);
 	const restrictedToolSurfaceInheritedMcpServerNames = restrictedToolSurface ? await lifecycleTiming.measure("restricted-tool-surface-mcp-policy", () => readCodexInheritedMcpServerNames(params.client, params.cwd, params.signal, effectiveConfig)) : [];
 	if (restrictedToolSurface || imageGenerationDenied || params.nativeCodeModeEnabled !== false) await lifecycleTiming.measure("tool-policy-config-requirements-read", () => assertCodexManagedRequirementsDoNotOverrideToolPolicy(params.client, {
 		restrictedToolSurface,
@@ -3020,7 +3136,9 @@ async function prepareCodexThreadLifecyclePreflight(params) {
 		baseInstructions: "",
 		config: buildCodexRingZeroThreadConfigPatch(params.params, true, restrictedToolSurfaceInheritedMcpServerNames)
 	}) : void 0;
+	const ringZeroClientInstanceId = ringZeroActive ? getCodexAppServerClientInstanceId(params.client) : void 0;
 	return {
+		effectiveConfig,
 		contextEngineBinding,
 		dynamicToolsContainDeferred,
 		dynamicToolsFingerprint,
@@ -3033,7 +3151,7 @@ async function prepareCodexThreadLifecyclePreflight(params) {
 		nativeSkillIsolationFingerprint,
 		networkProxyConfigFingerprint,
 		ringZeroActive,
-		ringZeroClientInstanceId: ringZeroActive ? getCodexAppServerClientInstanceId(params.client) : void 0,
+		ringZeroClientInstanceId,
 		ringZeroConfigFingerprint,
 		restrictedToolSurface,
 		restrictedToolSurfaceInheritedMcpServerNames,
@@ -3063,8 +3181,14 @@ async function resumeExistingCodexThread(params, context) {
 		disposeConfiguration = configuration.dispose;
 		await context.releaseRetainedThread(configuration.assertCurrent);
 		configuration.assertCurrent();
+		const clientBoundThread = ringZeroClientInstanceId !== void 0 || resumeBinding.ringZeroClientInstanceId !== void 0 || resumeBinding.ringZeroConfigFingerprint !== void 0 || context.ringZeroActive;
+		const sharedEntry = getCurrentSharedClientEntry(params.client);
+		if (configuration.settledSystemError && !clientBoundThread && resumeBinding.connectionScope !== "supervision" && (!sharedEntry || sharedEntry.activeLeases <= 1 && sharedEntry.pendingAcquires === 0) && !hasCodexAppServerSiblingThreadWork(params.client, resumeBinding.threadId) && !hasCodexAppServerSiblingRouteWork(params.client, resumeBinding.threadId)) {
+			await abandonClient();
+			throw new CodexThreadClientReplacementError();
+		}
 		const authProfileId = resumeBinding.connectionScope === "supervision" ? void 0 : params.params.authProfileId ?? resumeBinding.authProfileId;
-		const finalConfigPatch = context.prebuiltFinalConfigPatch ?? params.buildFinalConfigPatch?.({
+		const finalConfigPatch = context.prebuiltFinalConfigPatch ?? await params.buildFinalConfigPatch?.({
 			action: "resume",
 			binding: resumeBinding
 		}) ?? {
@@ -3101,7 +3225,11 @@ async function resumeExistingCodexThread(params, context) {
 			abandonClient,
 			request: resumeParams,
 			signal: params.signal,
-			assertCurrent: configuration.assertCurrent
+			assertCurrent: () => {
+				configuration.assertCurrent();
+				assertCodexInferenceRouteConfig(params.client, params.inferenceRoute, resumeParams.config);
+				if (params.inferenceRoute && resumeParams.modelProvider != null && resumeParams.modelProvider !== "openai") throw new Error("Codex inference route requires the native OpenAI provider");
+			}
 		}));
 		acceptedConfiguration = configuration;
 		assertCodexThreadAcceptsDirectInput(response.thread);
@@ -3235,7 +3363,7 @@ async function startFreshCodexThread(params, context) {
 	const clientId = resolveCodexAppServerClientInstanceId(params.client);
 	const { bindingIdentity, startModelSelection, startModelProvider, userMcpServersConfigPatch, dynamicToolsFingerprint, dynamicToolsContainDeferred, webSearchThreadConfigFingerprint, nativeSkillIsolationFingerprint, userMcpServersFingerprint, ringZeroConfigFingerprint, ringZeroClientInstanceId, networkProxyConfigFingerprint, contextEngineBinding, environmentSelectionFingerprint, hostSystemAgentActive, restrictedToolSurface, restrictedToolSurfaceInheritedMcpServerNames, nativeSkillIsolation, lifecycleTiming, normalizeBindingModelProvider, throwIfAborted, prebuiltPluginThreadConfig, preserveExistingBinding, rotatedContextEngineBinding, replacementPredecessor } = context;
 	const pluginThreadConfig = params.pluginThreadConfig?.enabled ? prebuiltPluginThreadConfig ?? await lifecycleTiming.measure("plugin-config-build", () => params.pluginThreadConfig?.build()) : void 0;
-	const finalConfigPatch = params.buildFinalConfigPatch?.({ action: "start" }) ?? {
+	const finalConfigPatch = await params.buildFinalConfigPatch?.({ action: "start" }) ?? {
 		configPatch: params.finalConfigPatch,
 		nativeHookRelayGeneration: params.nativeHookRelayGeneration
 	};
@@ -3264,12 +3392,17 @@ async function startFreshCodexThread(params, context) {
 		params.params.hostCapabilities.assertActive();
 		params.assertCurrent?.();
 	};
+	const assertInferenceCurrent = () => {
+		assertCurrent();
+		assertCodexInferenceRouteConfig(params.client, params.inferenceRoute, startParams.config);
+		if (params.inferenceRoute && startParams.modelProvider != null && startParams.modelProvider !== "openai") throw new Error("Codex inference route requires the native OpenAI provider");
+	};
 	const threadStartResponse = await lifecycleTiming.measure("thread-start-request", async () => {
 		try {
 			assertCurrent();
 			return await params.client.request("thread/start", startParams, {
 				signal: params.signal,
-				assertCurrent
+				assertCurrent: assertInferenceCurrent
 			});
 		} catch (error) {
 			if (error instanceof CodexAppServerRpcError) throw new CodexThreadStartRequestError(error);
@@ -3465,7 +3598,7 @@ async function tryReuseCodexLiveThread(options) {
 	const incognito = isIncognitoSessionKey(params.params.sessionKey);
 	if (incognito && (binding.preserveNativeModel || binding.connectionScope === "supervision")) {
 		if (binding.clientId === clientId && binding.clientId && ((await options.buildLoadedPluginThreadConfig(binding))?.fingerprint ?? binding.pluginAppsFingerprint) === binding.pluginAppsFingerprint) {
-			params.buildFinalConfigPatch?.({
+			await params.buildFinalConfigPatch?.({
 				action: "resume",
 				binding
 			});
@@ -3501,7 +3634,7 @@ async function tryReuseCodexLiveThread(options) {
 		const pluginThreadConfig = await options.buildLoadedPluginThreadConfig(binding);
 		assertWarmOwner();
 		if (pluginThreadConfig && pluginThreadConfig.fingerprint !== binding.pluginAppsFingerprint) return { kind: "rotate" };
-		const prebuiltFinalConfigPatch = params.buildFinalConfigPatch?.({
+		const prebuiltFinalConfigPatch = await params.buildFinalConfigPatch?.({
 			action: "resume",
 			binding
 		}) ?? {
@@ -3736,7 +3869,8 @@ async function preparePendingCodexThreadResume(params, binding, dynamicToolsFing
 		return {
 			assertConfigured: observation.assertConfigured,
 			assertCurrent,
-			dispose
+			dispose,
+			settledSystemError: observation.settledSystemError
 		};
 	} catch (error) {
 		dispose();
@@ -3745,7 +3879,7 @@ async function preparePendingCodexThreadResume(params, binding, dynamicToolsFing
 }
 /** Observe teardown before release; a successful resume alone can acknowledge ignored overrides. */
 async function prepareCodexThreadResume(params, binding, context) {
-	const assertClient = captureCodexAppServerClientLifetime(params.client, binding.connectionScope === "supervision" ? "connection" : "native-process");
+	const assertClient = captureCodexAppServerClientLifetime(params.client, binding.connectionScope === "supervision" ? "connection" : "thread-configuration");
 	const assertCurrent = () => {
 		params.params.hostCapabilities.assertActive();
 		params.assertCurrent?.();
@@ -3771,11 +3905,13 @@ function isCodexThreadNonRunning(status) {
 }
 function observeCodexThreadConfiguration(params, thread, assertCurrent) {
 	if (!isCodexThreadNonRunning(thread.status)) throw new CodexAdoptedThreadActiveError();
+	const settledSystemError = thread.status.type === "systemError";
 	let unloaded = thread.status.type === "notLoaded";
 	return {
 		dispose: params.client.addNotificationHandler((notification) => {
 			if (notification.method === "thread/status/changed" && isJsonObject(notification.params) && notification.params.threadId === thread.id && isJsonObject(notification.params.status) && notification.params.status.type === "notLoaded") unloaded = true;
 		}),
+		settledSystemError,
 		assertConfigured: () => {
 			assertCurrent();
 			if (!unloaded) throw new Error("Codex did not confirm unloading its previous configuration. The thread is preserved; stop competing native work and reconnect before retrying.");
@@ -4135,7 +4271,7 @@ async function archiveSupervisionArtifact(client, threadId) {
 		await client.request("thread/archive", { threadId }, { timeoutMs: CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS });
 		return true;
 	} catch (error) {
-		const message = formatErrorMessage(error).toLowerCase();
+		const message = formatErrorMessage$1(error).toLowerCase();
 		if (message.includes("no rollout found for thread id") || message.includes("thread not found") || message.includes("already archived")) return true;
 		await unsubscribeCodexThreadBestEffort(client, {
 			threadId,
@@ -4174,6 +4310,23 @@ async function startOrResumeThread(input) {
 			if (!isDeepStrictEqual(params.dynamicTools, nativeCatalog)) throw new Error("Canonical Codex declarations changed after tool preparation; retry the turn on its preserved native thread.");
 		}
 		const preflight = await prepareCodexThreadLifecyclePreflight(params);
+		const inference = await prepareCodexInferenceThreadConfig({
+			...params,
+			binding: saved,
+			clientId,
+			effectiveConfig: preflight.effectiveConfig,
+			assertCurrent: assert
+		});
+		if (inference) {
+			params.config = inference.config;
+			params.inferenceRoute = inference.route;
+		}
+		const publishInferenceBinding = (readyBinding) => {
+			assert();
+			params.signal?.throwIfAborted();
+			bindCodexInferenceThread(params.client, readyBinding.threadId, inference?.route);
+			return readyBinding;
+		};
 		const { contextEngineBinding, dynamicToolsContainDeferred, dynamicToolsFingerprint, environmentSelectionFingerprint, hostSystemAgentActive, legacyDynamicToolsFingerprint, legacyUserMcpServersFingerprint, lifecycleTiming, nativeSkillIsolation, nativeSkillIsolationFingerprint, networkProxyConfigFingerprint, ringZeroActive, ringZeroClientInstanceId, ringZeroConfigFingerprint, restrictedToolSurface, restrictedToolSurfaceInheritedMcpServerNames, userMcpServersConfigPatch, userMcpServersFingerprint, webSearchThreadConfigFingerprint } = preflight;
 		let replacementPredecessor;
 		const initialBoundThreadId = binding?.threadId;
@@ -4199,7 +4352,7 @@ async function startOrResumeThread(input) {
 			await releaseRetainedThread(binding.threadId);
 			const pendingBinding = binding;
 			const pluginThreadConfig = params.pluginThreadConfig?.enabled ? await lifecycleTiming.measure("plugin-config-build", () => params.pluginThreadConfig?.build()) : void 0;
-			const finalConfigPatch = params.buildFinalConfigPatch?.({ action: "start" }) ?? {
+			const finalConfigPatch = await params.buildFinalConfigPatch?.({ action: "start" }) ?? {
 				configPatch: params.finalConfigPatch,
 				nativeHookRelayGeneration: params.nativeHookRelayGeneration
 			};
@@ -4293,13 +4446,13 @@ async function startOrResumeThread(input) {
 		const persistentWebSearchRestriction = params.webSearchAllowed === false && params.persistentWebSearchAllowed === false;
 		const transientNativeToolRestriction = params.nativeCodeModeEnabled === false && !persistentWebSearchRestriction;
 		const transientWebSearchRestriction = isTransientWebSearchRestriction(params);
-		if (binding?.pendingResumeConfiguration) return await resumePendingCodexThread(params, {
+		if (binding?.pendingResumeConfiguration) return publishInferenceBinding(await resumePendingCodexThread(params, {
 			...resolveRequestContext(),
 			binding,
 			clearCurrentBinding,
 			releaseRetainedThread: (threadId, assertCurrent) => releaseRetainedThread(threadId, initialBoundClientId, assertCurrent),
 			transientRestriction: transientDelegationRestriction || transientNativeToolRestriction || transientWebSearchRestriction
-		});
+		}));
 		if (binding?.threadId && !restrictedToolSurface && binding.nativeToolPolicyRestricted === true) await clearCurrentBinding("rotating a host-policy-restricted thread binding");
 		if (binding?.threadId && binding.nativeSkillIsolationFingerprint !== nativeSkillIsolationFingerprint) {
 			embeddedAgentLog.debug("codex app-server native skill isolation changed; starting a new thread", { threadId: binding.threadId });
@@ -4473,7 +4626,7 @@ async function startOrResumeThread(input) {
 					clientId,
 					buildLoadedPluginThreadConfig
 				});
-				if (warmReuse.kind === "ready") return warmReuse.binding;
+				if (warmReuse.kind === "ready") return publishInferenceBinding(warmReuse.binding);
 				if (incognito || warmReuse.kind === "rotate") {
 					throwIfAborted();
 					await clearCurrentBinding(incognito ? "rotating an unavailable ephemeral thread binding" : "rotating a stale plugin app binding");
@@ -4491,7 +4644,7 @@ async function startOrResumeThread(input) {
 							await releaseRetainedThread(resumeBinding.threadId, resumeBinding.clientId, assertCurrent);
 						}
 					});
-					if (resumed) return resumed;
+					if (resumed) return publishInferenceBinding(resumed);
 				}
 			}
 		}
@@ -4505,7 +4658,7 @@ async function startOrResumeThread(input) {
 			replacementPredecessor
 		});
 		if (replacementPredecessor) await releaseRetainedThread(replacementPredecessor.threadId, replacementPredecessor.clientId);
-		return started;
+		return publishInferenceBinding(started);
 	});
 }
 //#endregion
@@ -4527,10 +4680,7 @@ const LEGACY_PRO_MODEL_ID_RE = /^gpt-5\.[45]-pro$/u;
 const MODERN_GPT_5_MODEL_ID_RE = /^gpt-5\.(?:[3-9]|[1-9]\d)(?:$|-)/u;
 /** Read reasoning metadata after the Codex app-server route has been selected. */
 function readCodexSupportedReasoningEfforts(compat) {
-	if (!compat || typeof compat !== "object" || Array.isArray(compat)) return;
-	const efforts = compat.supportedReasoningEfforts;
-	if (!Array.isArray(efforts)) return;
-	return efforts.filter((effort) => typeof effort === "string");
+	return compat && "supportedReasoningEfforts" in compat ? compat.supportedReasoningEfforts : void 0;
 }
 function resolveSupportedReasoningEffort(params) {
 	const declared = new Set(params.supportedReasoningEfforts.map((effort) => effort.trim().toLowerCase()));
@@ -4543,23 +4693,40 @@ function resolveCodexAppServerReasoningEffort(params) {
 	if (params.thinkLevel === "ultra") return "ultra";
 	if (params.thinkLevel === "off") return params.supportedReasoningEfforts?.includes("none") ? "none" : null;
 	if (params.thinkLevel === "adaptive") return null;
-	if (params.supportedReasoningEfforts) return resolveSupportedReasoningEffort({
-		requested: params.thinkLevel,
-		supportedReasoningEfforts: params.supportedReasoningEfforts
-	}) ?? null;
 	const modelId = params.modelId.trim().toLowerCase();
-	if (LEGACY_PRO_MODEL_ID_RE.test(modelId)) return resolveSupportedReasoningEffort({
+	const supportedReasoningEfforts = params.supportedReasoningEfforts ?? (LEGACY_PRO_MODEL_ID_RE.test(modelId) ? LEGACY_PRO_REASONING_EFFORTS : void 0);
+	if (supportedReasoningEfforts) return resolveSupportedReasoningEffort({
 		requested: params.thinkLevel,
-		supportedReasoningEfforts: LEGACY_PRO_REASONING_EFFORTS
+		supportedReasoningEfforts
 	}) ?? null;
 	if (params.thinkLevel === "minimal" && MODERN_GPT_5_MODEL_ID_RE.test(modelId)) return "low";
-	if (params.thinkLevel === "minimal" || params.thinkLevel === "low" || params.thinkLevel === "medium" || params.thinkLevel === "high" || params.thinkLevel === "xhigh") return params.thinkLevel;
-	return null;
+	return params.thinkLevel === "max" ? null : params.thinkLevel;
 }
 //#endregion
 //#region extensions/codex/src/app-server/user-input.ts
+function prependHistoryProvenance(input, historyProvenancePrefix) {
+	if (!historyProvenancePrefix) return input;
+	const firstTextIndex = input.findIndex((item) => item.type === "text");
+	if (firstTextIndex === -1) return [{
+		type: "text",
+		text: historyProvenancePrefix,
+		text_elements: []
+	}, ...input];
+	return input.map((item, index) => index === firstTextIndex && item.type === "text" ? {
+		...item,
+		text: `${historyProvenancePrefix}${item.text}`
+	} : item);
+}
 /** Builds ordered Codex user input for both new turns and same-turn steering. */
-function buildCodexUserInput(text, images) {
+function buildCodexUserInput(text, images, contextImageGroups, historyProvenancePrefix) {
+	if (text !== void 0 && contextImageGroups?.length) {
+		let offset = 0;
+		return prependHistoryProvenance([...contextImageGroups.flatMap((group) => {
+			const parts = buildCodexUserInput(text.slice(offset, group.end), group.images);
+			offset = group.end;
+			return parts;
+		}), ...buildCodexUserInput(text.slice(offset), images)], historyProvenancePrefix);
+	}
 	const imageInputs = (images ?? []).map((image) => {
 		const imageUrl = sanitizeInlineImageDataUrl(`data:${image.mimeType};base64,${image.data}`);
 		return imageUrl ? {
@@ -4571,16 +4738,16 @@ function buildCodexUserInput(text, images) {
 			text_elements: []
 		};
 	});
-	return [...text === void 0 ? [] : [{
+	return prependHistoryProvenance([...text === void 0 ? [] : [{
 		type: "text",
 		text,
 		text_elements: []
-	}], ...imageInputs];
+	}], ...imageInputs], historyProvenancePrefix);
 }
 //#endregion
 //#region extensions/codex/src/app-server/turn-params.ts
 const CODEX_CURRENT_SENDER_FIELD_MAX_CHARS = 256;
-function buildCodexCurrentSenderContextValue(params) {
+function readCodexCurrentSender(params) {
 	const metadata = asOptionalRecord(asOptionalRecord(params.userTurnTranscriptRecorder?.message)?.["__openclaw"]);
 	const recorded = [
 		normalizeOptionalString(metadata?.["senderId"]),
@@ -4594,11 +4761,19 @@ function buildCodexCurrentSenderContextValue(params) {
 	];
 	if (!id && !name && !username) return;
 	const bound = (value) => truncateUtf16Safe(value, CODEX_CURRENT_SENDER_FIELD_MAX_CHARS);
-	return JSON.stringify({ sender: {
+	return {
 		...id ? { id: bound(id) } : {},
 		...name ? { name: bound(name) } : {},
 		...username ? { username: bound(username) } : {}
-	} });
+	};
+}
+function buildCodexCurrentSenderContextValue(params) {
+	const sender = readCodexCurrentSender(params);
+	return sender ? JSON.stringify({ sender }) : void 0;
+}
+function buildCodexHistoryProvenancePrefix(params) {
+	const sender = readCodexCurrentSender(params);
+	return sender?.id ? neutralizeCodexExplicitMentionSigils(`[OpenClaw conversation info: sender=${JSON.stringify(sender)}]\n`) : void 0;
 }
 function buildTurnStartParams(params, options) {
 	const modelSelection = options.preserveNativeTurnSettings ? void 0 : resolveCodexAppServerRequestModelSelection({
@@ -4615,6 +4790,7 @@ function buildTurnStartParams(params, options) {
 		skillsCollaborationInstructions: options.skillsCollaborationInstructions,
 		memoryCollaborationInstructions: options.memoryCollaborationInstructions
 	}) : void 0;
+	if (collaborationMode && options.parentLocalEgress) collaborationMode.settings.developer_instructions = null;
 	const useThreadPermissionProfile = options.appServer.networkProxy && !options.sandboxPolicy;
 	const currentSenderContext = params.trigger === "user" ? buildCodexCurrentSenderContextValue(params) : void 0;
 	let additionalContext = buildCodexTemporalAdditionalContext(params, { sessionStatusAvailable: options.sessionStatusAvailable === true });
@@ -4645,7 +4821,8 @@ function buildTurnStartParams(params, options) {
 	};
 	return {
 		threadId: options.threadId,
-		input: [...buildCodexUserInput(options.promptText ?? params.prompt, params.images), ...options.explicitSkillInputs ?? []],
+		...params.trigger ? { turnTrigger: params.trigger } : {},
+		input: [...buildCodexUserInput(options.promptText ?? params.prompt, params.images, options.contextImageGroups, options.historyProvenancePrefix ?? (params.trigger === "user" ? buildCodexHistoryProvenancePrefix(params) : void 0)), ...options.explicitSkillInputs ?? []],
 		...additionalContext ? { additionalContext } : {},
 		cwd: options.cwd,
 		...options.appServer.sessionRoot ? { runtimeWorkspaceRoots: [options.appServer.sessionRoot] } : {},
@@ -4688,11 +4865,14 @@ function buildTurnCollaborationMode(params, options = {}) {
 		}
 	};
 }
-function buildTurnScopedCollaborationInstructions(params, options = {}) {
+function buildCodexParentLocalInstructions(params, options = {}) {
 	const contextInstructions = joinPresentSections(options.turnScopedDeveloperInstructions, options.memoryCollaborationInstructions, options.skillsCollaborationInstructions);
 	if (params.trigger === "cron") return joinPresentSections(buildCronCollaborationInstructions(), contextInstructions);
-	if (contextInstructions?.trim()) return joinPresentSections(buildDefaultCollaborationInstructions(), contextInstructions);
-	return null;
+	return contextInstructions || null;
+}
+function buildTurnScopedCollaborationInstructions(params, options) {
+	const instructions = buildCodexParentLocalInstructions(params, options);
+	return instructions && params.trigger !== "cron" ? joinPresentSections(buildDefaultCollaborationInstructions(), instructions) : instructions;
 }
 function buildDefaultCollaborationInstructions() {
 	return [
@@ -4706,7 +4886,7 @@ function buildDefaultCollaborationInstructions() {
 		"",
 		"Use the `request_user_input` tool only when it is listed in the available tools for this turn.",
 		"",
-		"In Default mode, strongly prefer making reasonable assumptions and executing the user's request rather than stopping to ask questions. If you absolutely must ask a question because the answer cannot be discovered from local context and a reasonable assumption would be risky, ask the user directly with a concise plain-text question. Never write a multiple choice question as a textual assistant message."
+		"In Default mode, strongly prefer making reasonable assumptions and executing the user's request rather than stopping to ask questions. When a missing preference, constraint, or clarification warrants a question, use `request_user_input_async` if it is available and continue independent work. Answers arrive as ordinary user messages. A suggested or preselected answer is not consent; wait for explicit approval before dependent actions that require it. If neither question tool is available, ask a concise plain-text question. Never write a multiple choice question as a textual assistant message."
 	].join("\n");
 }
 function buildCronCollaborationInstructions() {
@@ -4721,4 +4901,4 @@ function joinPresentSections(...sections) {
 	return sections.filter((section) => Boolean(section?.trim())).join("\n\n");
 }
 //#endregion
-export { codexLegacyDynamicToolsFingerprint as $, readCodexMcpToolConnectorId as A, emitCodexNativePreToolUseFailureDiagnostic as B, buildDeveloperInstructions as C, buildCodexPluginThreadConfigTimeoutFallback as Ct, resolveCodexAppServerThreadModelSelection as D, shouldBuildCodexPluginThreadConfig as Dt, resolveCodexAppServerRequestModelSelection as E, refreshCodexPluginAppApprovalPolicy as Et, assertCodexNativeHookRelayAllowed as F, attestCodexRestrictedToolSurfaceMcpServersDisabled as G, resolveCodexNativeHookRelayTtlMs as H, buildCodexNativeHookRelayConfig as I, parseCodexNativeToolCatalog as J, hasCodexNativeToolCatalog as K, buildCodexNativeHookRelayDisabledConfig as L, isCodexAppServerProfilerEnabled as M, CODEX_NATIVE_HOOK_RELAY_EVENTS as N, resolveCodexBindingModelProviderFallback as O, CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS as P, codexDynamicToolsFingerprint as Q, buildCodexNativeHookRelayId as R, resolveCodexWebSearchPlan as S, buildCodexPluginThreadConfigInputFingerprint as St, resolveCodexAppServerModelProvider as T, mergeCodexThreadConfigs as Tt, scheduleCodexNativeHookRelayUnregister as U, resolveCodexNativeHookRelayEvents as V, checkCodexThreadAppAvailability as W, resolveCodexNativeSkillIsolation as X, applyCodexNativeSkillIsolation as Y, areCodexDynamicToolFingerprintsCompatible as Z, buildCodexRingZeroThreadConfigPatch as _, projectContextEngineAssemblyForCodex as _t, readCodexSupportedReasoningEfforts as a, isMessageOnlyCodexSourceReply as at, readCodexInheritedMcpServerNames as b, resolveCodexContinuityProjectionMaxChars as bt, assertScheduledCodexAppAuthorityRuntime as c, resolveCodexDynamicToolsLoading as ct, buildScheduledCodexAppServerConnectionIdentity as d, isContextEngineBindingCompatible as dt, fingerprintJsonObject as et, captureScheduledCodexAppAuthority as f, CodexContextAttachmentError as ft, assertCodexManagedRequirementsDoNotOverrideToolPolicy as g, neutralizeCodexExplicitMentionSigils as gt, resolveScheduledCodexAppCreatorCaptureDecision as h, isCodexDurableCustomMessage as ht, buildCodexUserInput as i, isForcedPrivateQaCodexRuntime as it, readCodexMcpToolUiVisibility as j, buildCodexProjectDocThreadConfig as k, buildLegacyScheduledCodexAppRecoveryPrompt as l, resolveCodexDynamicToolsLoadingForRuntime as lt, readCurrentCodexScheduledAppPolicy as m, fitCodexProjectedContextForTurnStart as mt, buildTurnCollaborationMode as n, filterCodexDynamicTools as nt, resolveCodexAppServerReasoningEffort as o, isSystemAgentOnlyCodexDynamicToolAllowlist as ot, intersectCodexPluginThreadConfigWithScheduledAuthority as p, buildCodexContinuityCalibration as pt, loadCodexNativeToolCatalog as q, buildTurnStartParams as r, filterCodexDynamicToolsForDisabledNativeSurface as rt, startOrResumeThread as s, normalizeCodexDynamicToolName as st, buildCodexTemporalAdditionalContext as t, fingerprintUserMcpServersConfigPatch as tt, buildScheduledCodexAppAuthorityInputFingerprint as u, buildContextEngineBinding as ut, buildCodexRuntimeThreadConfig as v, resolveCodexContextEngineProjectionMaxChars as vt, CODEX_NATIVE_PERSONALITY_NONE as w, buildDisabledAppsConfigPatch as wt, buildCodexNativeWebSearchThreadConfig as x, buildCodexPluginThreadConfig as xt, buildCodexThreadConfiguration as y, resolveCodexContextEngineProjectionReserveTokens as yt, createCodexNativeHookRelay as z };
+export { areCodexDynamicToolFingerprintsCompatible as $, resolveCodexBindingModelProviderFallback as A, shouldBuildCodexPluginThreadConfig as At, buildCodexNativeHookRelayId as B, buildCodexNativeWebSearchThreadConfig as C, resolveCodexContinuityProjectionMaxChars as Ct, resolveCodexAppServerModelProvider as D, buildDisabledAppsConfigPatch as Dt, CODEX_NATIVE_PERSONALITY_NONE as E, buildCodexPluginThreadConfigTimeoutFallback as Et, CODEX_NATIVE_HOOK_RELAY_EVENTS as F, scheduleCodexNativeHookRelayUnregister as G, emitCodexNativePreToolUseFailureDiagnostic as H, CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS as I, hasCodexNativeToolCatalog as J, checkCodexThreadAppAvailability as K, assertCodexNativeHookRelayAllowed as L, readCodexMcpToolUiVisibility as M, buildCodexProjectDocThreadConfig as N, resolveCodexAppServerRequestModelSelection as O, mergeCodexThreadConfigs as Ot, isCodexAppServerProfilerEnabled as P, resolveCodexNativeSkillIsolation as Q, buildCodexNativeHookRelayConfig as R, readCodexInheritedMcpServerNames as S, resolveCodexContextEngineProjectionReserveTokens as St, buildDeveloperInstructions as T, buildCodexPluginThreadConfigInputFingerprint as Tt, resolveCodexNativeHookRelayEvents as U, createCodexNativeHookRelay as V, resolveCodexNativeHookRelayTtlMs as W, parseCodexNativeToolCatalog as X, loadCodexNativeToolCatalog as Y, applyCodexNativeSkillIsolation as Z, resolveScheduledCodexAppCreatorCaptureDecision as _, fitCodexProjectedContextForTurnStart as _t, buildTurnStartParams as a, filterCodexDynamicToolsForDisabledNativeSurface as at, buildCodexRuntimeThreadConfig as b, projectContextEngineAssemblyForCodex as bt, resolveCodexAppServerReasoningEffort as c, isSystemAgentOnlyCodexDynamicToolAllowlist as ct, buildLegacyScheduledCodexAppRecoveryPrompt as d, resolveCodexDynamicToolsLoadingForRuntime as dt, codexDynamicToolsFingerprint as et, buildScheduledCodexAppAuthorityInputFingerprint as f, buildContextEngineBinding as ft, readCurrentCodexScheduledAppPolicy as g, buildCodexContinuityCalibration as gt, intersectCodexPluginThreadConfigWithScheduledAuthority as h, CodexContextAttachmentError as ht, buildTurnCollaborationMode as i, filterCodexDynamicTools as it, readCodexMcpToolConnectorId as j, resolveCodexAppServerThreadModelSelection as k, refreshCodexPluginAppApprovalPolicy as kt, startOrResumeThread as l, normalizeCodexDynamicToolName as lt, captureScheduledCodexAppAuthority as m, CODEX_TURN_START_TEXT_INPUT_MAX_CHARS as mt, buildCodexParentLocalInstructions as n, fingerprintJsonObject as nt, buildCodexUserInput as o, isForcedPrivateQaCodexRuntime as ot, buildScheduledCodexAppServerConnectionIdentity as p, isContextEngineBindingCompatible as pt, attestCodexRestrictedToolSurfaceMcpServersDisabled as q, buildCodexTemporalAdditionalContext as r, fingerprintUserMcpServersConfigPatch as rt, readCodexSupportedReasoningEfforts as s, isMessageOnlyCodexSourceReply as st, buildCodexHistoryProvenancePrefix as t, codexLegacyDynamicToolsFingerprint as tt, assertScheduledCodexAppAuthorityRuntime as u, resolveCodexDynamicToolsLoading as ut, assertCodexManagedRequirementsDoNotOverrideToolPolicy as v, isCodexDurableCustomMessage as vt, resolveCodexWebSearchPlan as w, buildCodexPluginThreadConfig as wt, buildCodexThreadConfiguration as x, resolveCodexContextEngineProjectionMaxChars as xt, buildCodexRingZeroThreadConfigPatch as y, neutralizeCodexExplicitMentionSigils as yt, buildCodexNativeHookRelayDisabledConfig as z };