@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/{thread-ownership-D6oASVRu.js → .setup/thread-ownership-skomxnIt.mjs}

@@ -1,7 +1,7 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.js";
-import { U as releaseCodexAppServerLiveThread, W as retainCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.mjs";
+import { U as releaseCodexAppServerLiveThread, W as retainCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort, f as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BpYKdTA0.mjs";
 //#region extensions/codex/src/app-server/thread-ownership.ts
 var thread_ownership_exports = /* @__PURE__ */ __exportAll({
 	isSameCodexAppServerThreadOwner: () => isSameCodexAppServerThreadOwner,

package/dist/{thread-policy-D8kI7yAO.js → .setup/thread-policy-Cjs4B8xf.mjs}

@@ -1,5 +1,5 @@
-import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-BEKu4yDx.js";
-import { r as requestCodexAppServerClientJson, t as CodexAppServerScopedRequestRejectedError } from "./request-CGvGOpeR.js";
+import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-vXs2929Q.mjs";
+import { r as requestCodexAppServerClientJson, t as CodexAppServerScopedRequestRejectedError } from "./request-BioXJLYa.mjs";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/thread-policy.ts
 /** A refusal, not a failed native write: the ephemeral conversation must stay alive. */
@@ -19,7 +19,7 @@ var CodexThreadPolicyHandoffError = class extends AgentHarnessPreflightError {
 };
 /** The complete body remains generic configuration for compaction and native child inheritance. */
 async function refreshCodexThreadPolicy(params) {
-	const text = "The following is the complete current OpenClaw-supplied generic instruction policy. It replaces earlier OpenClaw-supplied generic policy, including OpenClaw-carried workspace text and sections now absent. Independently supplied native managed, guardian, security, collaboration, and project instructions retain their authority. User requests retain their own authority.\n\n" + (params.developerInstructions === "" ? "The current OpenClaw generic policy is empty; earlier OpenClaw generic policy is withdrawn." : params.developerInstructions);
+	const text = "The following is the complete current OpenClaw-supplied generic instruction policy. It replaces earlier OpenClaw-supplied generic policy, including sections removed from that generic policy. Parent-local instructions supplied for the current inference request are outside this policy replacement. Independently supplied native managed, guardian, security, collaboration, and project instructions retain their authority. User requests retain their own authority.\n\n" + (params.developerInstructions === "" ? "The current OpenClaw generic policy is empty; earlier OpenClaw generic policy is withdrawn." : params.developerInstructions);
 	let outcome = "unknown";
 	try {
 		await requestCodexAppServerClientJson({

package/dist/{thread-resume-T5cveyxA.js → .setup/thread-resume-BkNpj9Pz.mjs}

@@ -1,8 +1,10 @@
-import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, y as assertCodexThreadResumeResponse } from "./client-BEKu4yDx.js";
-import { r as CodexAppServerRpcError } from "./session-catalog-provenance-DkJHo735.js";
-import { t as CodexAppServerScopedRequestRejectedError } from "./request-CGvGOpeR.js";
-import { I as forgetCodexWorkspaceReferences, k as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-CVhez2Uo.js";
-import { d as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
+import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, y as assertCodexThreadResumeResponse } from "./client-vXs2929Q.mjs";
+import { i as CodexAppServerRpcError } from "./timeout-DZF05XrR.mjs";
+import { r as publishCodexCatalogResume } from "./session-catalog-events-jMcYfQyd.mjs";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-BioXJLYa.mjs";
+import { F as forgetCodexWorkspaceReferences, rt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-BpTtuLQ5.mjs";
+import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/thread-resume.ts
 /** Owns Codex thread/resume subscription safety. */
 /** Resumes one thread, releasing or isolating every possible native subscription. */
@@ -46,6 +48,7 @@ async function resumeCodexAppServerThread(params) {
 		if (error instanceof CodexAppServerUnsafeSubscriptionError) throw error;
 		throw new CodexAppServerUnsafeSubscriptionError(error instanceof Error ? error.message : `Codex thread/resume outcome is indeterminate for ${threadId}`, { cause: error });
 	}
+	await publishCodexCatalogResume(params.client, response, sanitizeTerminalText);
 	return response;
 }
 //#endregion

package/dist/.setup/timeout-DZF05XrR.mjs

@@ -0,0 +1,63 @@
+import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { withTimeout } from "openclaw/plugin-sdk/time-runtime";
+//#region extensions/codex/src/app-server/rpc-error.ts
+const CODEX_APP_SERVER_OVERLOADED_ERROR_CODE = -32001;
+/** RPC error wrapper that preserves app-server error code and data. */
+var CodexAppServerRpcError = class extends Error {
+	constructor(error, method) {
+		super(formatCodexAppServerRpcErrorMessage(error, method));
+		this.name = "CodexAppServerRpcError";
+		this.code = error.code;
+		this.data = error.data;
+		this.method = method;
+	}
+};
+function isCodexThreadReadMissingError(error, threadId) {
+	return error instanceof CodexAppServerRpcError && error.method === "thread/read" && error.code === -32600 && error.message === `thread not loaded: ${threadId}`;
+}
+function formatCodexAppServerRpcErrorMessage(error, method) {
+	const message = error.message || `${method} failed`;
+	const detail = readCodexAppServerRpcReloginDetail(error.data);
+	return detail && !message.includes(detail) ? `${message}: ${detail}` : message;
+}
+function readCodexAppServerRpcReloginDetail(data) {
+	const record = isJsonObject(data) ? data : void 0;
+	const nested = isJsonObject(record?.error) ? record.error : record;
+	if (!nested) return;
+	const isRelogin = nested.action === "relogin" || nested.reason === "cloudRequirements" && nested.errorCode === "Auth";
+	const detail = typeof nested.detail === "string" ? nested.detail.trim() : "";
+	return isRelogin && detail ? detail : void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/timeout.ts
+/**
+* Thin Codex app-server timeout adapter around OpenClaw's shared timeout helper.
+*/
+function resolveAbortError(signal) {
+	return signal.reason instanceof Error ? signal.reason : new Error("Codex app-server operation aborted", { cause: signal.reason });
+}
+/** Awaits a promise with a Codex-specific timeout error message. */
+async function withTimeout$1(promise, timeoutMs, timeoutMessage, createError) {
+	return await withTimeout(promise, timeoutMs, {
+		message: timeoutMessage,
+		...createError ? { createError } : {}
+	});
+}
+/** Bounds an operation by both its owner lifecycle and one total wall-clock budget. */
+async function withAbortableTimeout(params) {
+	const signal = params.signal;
+	if (signal?.aborted) throw resolveAbortError(signal);
+	let removeAbortListener;
+	const operation = signal ? Promise.race([params.promise, new Promise((_, reject) => {
+		const onAbort = () => reject(resolveAbortError(signal));
+		signal.addEventListener("abort", onAbort, { once: true });
+		removeAbortListener = () => signal.removeEventListener("abort", onAbort);
+	})]) : params.promise;
+	try {
+		return await withTimeout$1(operation, params.timeoutMs, params.timeoutMessage, params.createTimeoutError);
+	} finally {
+		removeAbortListener?.();
+	}
+}
+//#endregion
+export { isCodexThreadReadMissingError as a, CodexAppServerRpcError as i, withTimeout$1 as n, CODEX_APP_SERVER_OVERLOADED_ERROR_CODE as r, withAbortableTimeout as t };

package/dist/{session-catalog-home-id-D7-aLiNt.js → .setup/transcript-history-projection-DHNBDhCU.mjs}

@@ -1,8 +1,7 @@
-import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
+import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
+import { c as itemName, l as itemStatus, t as auditNativeToolName } from "./event-projector-items-DyTQ_XqL.mjs";
+import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createHash } from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
 import { truncateUtf8Prefix } from "openclaw/plugin-sdk/text-utility-runtime";
 import { Buffer } from "node:buffer";
 //#region extensions/codex/src/app-server/transcript-history-projection.ts
@@ -72,7 +71,7 @@ function projectCodexThreadHistory(params) {
 	const projected = [];
 	const threadTimestamp = typeof params.thread.createdAt === "number" && Number.isFinite(params.thread.createdAt) ? params.thread.createdAt * 1e3 : params.importedAt;
 	let itemOffset = 0;
-	for (const turn of selectTurnsThroughBoundary(params.thread, params.throughTurnId)) for (const value of turn.items) {
+	for (const turn of params.turns) for (const value of turn.items) {
 		const item = value;
 		const itemId = normalizeOptionalString(item.id);
 		const identity = `${turn.id}:${itemId ?? itemOffset}`;
@@ -84,6 +83,7 @@ function projectCodexThreadHistory(params) {
 		if (!text || !role) continue;
 		const phase = item.phase === "commentary" || item.phase === "final_answer" ? item.phase : void 0;
 		const asyncDelivery = item.delivery === "async";
+		const questions = asyncDelivery ? readCodexAsyncQuestions(item.questions) : void 0;
 		const message = role === "assistant" ? attachCodexMirrorIdentity({
 			role,
 			content: [{
@@ -97,7 +97,10 @@ function projectCodexThreadHistory(params) {
 			stopReason: turn.status === "interrupted" ? "aborted" : turn.status === "failed" ? "error" : "stop",
 			...turn.status === "failed" && turn.error?.message ? { errorMessage: turn.error.message } : {},
 			...phase ? { phase } : {},
-			...asyncDelivery && itemId ? { openclawAsyncDelivery: { itemId } } : {},
+			...asyncDelivery && itemId ? { openclawAsyncDelivery: {
+				itemId,
+				...questions ? { questions } : {}
+			} } : {},
 			timestamp
 		}, identity) : attachCodexMirrorIdentity({
 			role,
@@ -136,7 +139,7 @@ function selectBoundedCodexHistoryTail(projected) {
 function projectBoundedCodexThreadHistory(params) {
 	const projected = projectCodexThreadHistory({
 		thread: params.thread,
-		throughTurnId: params.throughTurnId,
+		turns: selectTurnsThroughBoundary(params.thread, params.throughTurnId),
 		importedAt: params.importedAt,
 		...params.modelProvider ? { modelProvider: params.modelProvider } : {}
 	});
@@ -172,19 +175,69 @@ function projectBoundedCodexVisibleSessionHistory(entries) {
 	}
 	return selectBoundedCodexHistoryTail(projected).map(({ responseItem }) => responseItem);
 }
-//#endregion
-//#region extensions/codex/src/session-catalog-home-id.ts
-function canonicalCodexCatalogHome(value) {
-	const resolved = path.resolve(value);
-	try {
-		return fs.realpathSync.native(resolved);
-	} catch {
-		return resolved;
+/** Displays native items through the shared transcript roles, including an unfinished turn. */
+function projectCodexThreadHistoryItem(thread, entry, toolItems) {
+	const { item } = entry;
+	const timestamp = (entry.turn?.startedAt ?? thread.createdAt ?? 0) * 1e3;
+	if (item.type === "userMessage" || item.type === "agentMessage") return projectCodexThreadHistory({
+		thread,
+		turns: [{
+			...entry.turn,
+			id: entry.turnId,
+			items: [item]
+		}],
+		importedAt: timestamp
+	}).map(({ message }) => message);
+	const identity = `${entry.turnId}:${item.id}`;
+	const assistant = (content, toolUse = false) => attachCodexMirrorIdentity({
+		role: "assistant",
+		content,
+		api: CODEX_HISTORY_ASSISTANT_API,
+		provider: normalizeOptionalString(thread.modelProvider) ?? CODEX_HISTORY_ASSISTANT_PROVIDER,
+		model: CODEX_HISTORY_ASSISTANT_MODEL,
+		usage: CODEX_HISTORY_ZERO_USAGE,
+		stopReason: toolUse ? "toolUse" : "stop",
+		timestamp
+	}, identity);
+	if (item.type === "reasoning") {
+		const parts = Array.isArray(item.summary) && item.summary.length > 0 ? item.summary : item.content;
+		const thinking = normalizeImportedHistoryText(Array.isArray(parts) ? parts.filter((part) => typeof part === "string").join("\n") : item.text);
+		return thinking ? [assistant([{
+			type: "thinking",
+			thinking
+		}])] : [];
 	}
-}
-/** One canonical identity for catalog discovery and durable ownership rows. */
-function codexCatalogHomeId(codexHome) {
-	return createHash("sha256").update("openclaw:codex-session-catalog-home:v1\0").update(canonicalCodexCatalogHome(codexHome)).digest("hex");
+	if (item.type === "contextCompaction") return [assistant([{
+		type: "text",
+		text: "Context compacted."
+	}])];
+	const toolName = itemName(item) ?? auditNativeToolName(item);
+	if (!toolName) {
+		const text = normalizeImportedHistoryText(item.text ?? item.title);
+		return text ? [assistant([{
+			type: "text",
+			text
+		}])] : [];
+	}
+	const messages = [assistant([{
+		type: "toolCall",
+		id: item.id,
+		name: toolName,
+		arguments: toolItems.itemToolArgs(item) ?? {}
+	}], true)];
+	const status = itemStatus(item);
+	if (status !== "running") messages.push(attachCodexMirrorIdentity({
+		role: "toolResult",
+		toolCallId: item.id,
+		toolName,
+		content: [{
+			type: "text",
+			text: toolItems.itemTranscriptResultText(item) ?? status
+		}],
+		isError: status === "failed" || status === "blocked",
+		timestamp
+	}, `${identity}:result`));
+	return messages;
 }
 //#endregion
-export { projectCodexUserItemText as a, projectBoundedCodexVisibleSessionHistory as i, codexCatalogHomeId as n, projectBoundedCodexThreadHistory as r, canonicalCodexCatalogHome as t };
+export { projectCodexUserItemText as i, projectBoundedCodexVisibleSessionHistory as n, projectCodexThreadHistoryItem as r, projectBoundedCodexThreadHistory as t };

package/dist/{transcript-mirror-t5TOccct.js → .setup/transcript-mirror-D4qp_leP.mjs}

@@ -1,7 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
-import { r as projectBoundedCodexThreadHistory } from "./session-catalog-home-id-D7-aLiNt.js";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-DibE0krH.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
+import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DHNBDhCU.mjs";
+import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-CzM-94NC.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, restorePreparedUserTurnOperationalMetaForRuntime, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { withCodexSessionTranscriptMirrorWriteLock } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
@@ -187,6 +188,7 @@ async function mirrorPromptAtTurnStartBestEffort(params) {
 		const mirrorPromise = (async () => {
 			const userPromptMessage = projectAgentHarnessTranscriptMessageForDisplay({
 				hidden: params.params.trigger === "memory",
+				inputProvenance: params.params.inputProvenance,
 				message: attachUpstreamUserText(attachCodexMirrorIdentity(await buildResolvedCodexUserPromptMessage(params.params), `${params.turnId}:prompt`), params.upstreamUserText)
 			});
 			const recorder = params.params.userTurnTranscriptRecorder;
@@ -298,6 +300,7 @@ async function mirror(params) {
 				preparedUserMessage.content = structuredClone(preparedUserMessage.content);
 				preparedUserMessage["__openclaw"].humanMentions = structuredClone(preparedUserMessage["__openclaw"].humanMentions);
 			}
+			const asyncSourceText = message.role === "assistant" && message.openclawAsyncDelivery ? readMirroredAssistantText(message) : void 0;
 			const nextMessage = runAgentHarnessBeforeMessageWriteHook({
 				message: transcriptMessage,
 				agentId: params.agentId,
@@ -319,7 +322,13 @@ async function mirror(params) {
 			} : attachCodexMirrorAttestation(restoredMessage, sourceFingerprint);
 			if (mirrorIdentity) messageToAppend = attachCodexMirrorIdentity(messageToAppend, mirrorIdentity);
 			if (ownsRun && params.runId) messageToAppend = attachCodexMirrorRunId(messageToAppend, params.runId, ownsTerminal, terminalOwner?.settlementWarning);
-			if (message.role === "assistant" && message.openclawAsyncDelivery) messageToAppend = Object.assign(messageToAppend, { openclawAsyncDelivery: { itemId: message.openclawAsyncDelivery.itemId } });
+			if (message.role === "assistant" && message.openclawAsyncDelivery) {
+				const questions = isMirroredAgentMessage(messageToAppend) && readMirroredAssistantText(messageToAppend) === asyncSourceText ? readCodexAsyncQuestions(messageToAppend.openclawAsyncDelivery?.questions) : void 0;
+				messageToAppend = Object.assign(messageToAppend, { openclawAsyncDelivery: {
+					itemId: message.openclawAsyncDelivery.itemId,
+					...questions ? { questions } : {}
+				} });
+			}
 			messageToAppend = applyCodexTranscriptTaint(messageToAppend, taint);
 			messageToAppend = projectAgentHarnessTranscriptMessageForDisplay({
 				hidden: message.display === false,
@@ -460,4 +469,4 @@ function resolveCodexMirrorTranscriptTarget(params) {
 	};
 }
 //#endregion
-export { transcript_mirror_exports as a, mirrorPromptAtTurnStartBestEffort as i, createCodexAppServerUserMessagePersistenceNotifier as n, buildCodexUserPromptMessage as o, importCodexThreadHistoryToTranscript as r, promptSnapshot as s, codexTranscriptMirrorRuntime as t };
+export { transcript_mirror_exports as a, promptSnapshot as c, mirrorPromptAtTurnStartBestEffort as i, createCodexAppServerUserMessagePersistenceNotifier as n, buildCodexUserPromptMessage as o, importCodexThreadHistoryToTranscript as r, buildResolvedCodexUserPromptMessage as s, codexTranscriptMirrorRuntime as t };

package/dist/{transcript-mirror-attestation-DibE0krH.js → .setup/transcript-mirror-attestation-CzM-94NC.mjs}

@@ -1,4 +1,5 @@
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
+import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
+import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/transcript-mirror-attestation.ts
@@ -71,9 +72,11 @@ function readCodexMirrorSourceFingerprint(message) {
 }
 function serializeCodexMirrorSourceEvidence(message) {
 	const content = "content" in message ? message.content : void 0;
+	const questions = isMirroredAgentMessage(message) ? readCodexAsyncQuestions(message.openclawAsyncDelivery?.questions) : void 0;
 	return JSON.stringify({
 		role: message.role,
 		content,
+		...questions ? { questions } : {},
 		...message.role === "user" ? { upstreamUserText: readUpstreamUserText(message) } : {},
 		...message.role === "toolResult" ? {
 			toolCallId: message.toolCallId,

package/dist/{transport-stdio-BGjHoYLr.js → .setup/transport-stdio-Cmx94Oiy.mjs}

@@ -1,7 +1,9 @@
-import { n as normalizeCodexAppServerArgs } from "./launch-args-RXQwn8zV.js";
+import { r as normalizeCodexAppServerArgs } from "./launch-args-DnMak49W.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
+import { closeSync, constants, openSync, readSync } from "node:fs";
+import path from "node:path";
 import { readFile, readdir } from "node:fs/promises";
 import { once } from "node:events";
 import { execFile, spawn } from "node:child_process";
@@ -15,6 +17,32 @@ function isDeadProcessState(state) {
 const PROCESS_COLUMNS = "pid=,ppid=,pgid=,stat=,lstart=";
 const MAX_PROCESS_CONTAINMENT_MS$1 = 2e3;
 const PROCESS_INSPECTION_MAX_BYTES = 8388608;
+const PROCFS_COMMAND_PERMISSION_EXIT = 77;
+const PROCFS_COMMAND_READER = `
+const fs = require("node:fs");
+const [pid, maxBytes] = process.argv.slice(-2).map(Number);
+try {
+  const fd = fs.openSync("/proc/" + pid + "/cmdline", "r");
+  const buffer = Buffer.alloc(4096);
+  const chunks = [];
+  let bytes = 0;
+  try {
+    for (;;) {
+      const count = fs.readSync(fd, buffer, 0, Math.min(buffer.length, maxBytes - bytes + 1), null);
+      if (count === 0) break;
+      bytes += count;
+      if (bytes > maxBytes) throw new Error("Command byte limit exceeded");
+      chunks.push(Buffer.from(buffer.subarray(0, count)));
+    }
+  } finally {
+    fs.closeSync(fd);
+  }
+  process.stdout.end(Buffer.concat(chunks, bytes));
+} catch (error) {
+  process.exitCode = ["EACCES", "EPERM", "ERR_ACCESS_DENIED"].includes(error?.code)
+    ? ${PROCFS_COMMAND_PERMISSION_EXIT} : 1;
+}
+`;
 var ProcessInspectionError = class extends Error {
 	constructor(reason) {
 		const detail = {
@@ -56,17 +84,11 @@ async function readCodexAppServerProcessCommand(observed, deadline) {
 	if (process.platform === "linux") {
 		let pending = false;
 		do {
-			const remainingMs = deadline - Date.now();
-			if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
-			let command;
-			try {
-				command = await readFile(`/proc/${observed.pid}/cmdline`, {
-					encoding: "utf8",
-					signal: AbortSignal.timeout(remainingMs)
-				});
-			} catch (error) {
-				throw inspectionFailure(error);
-			}
+			if (deadline - Date.now() <= 0) throw new ProcessInspectionError("deadline");
+			const command = await readProcessOutput({
+				kind: "procfs-command",
+				pid: observed.pid
+			}, deadline);
 			if (!command || pending) {
 				const current = await readCodexAppServerProcess(observed.pid, deadline);
 				if (!current || current.startedAt !== observed.startedAt || current.ppid !== observed.ppid || current.pgid !== observed.pgid || current.state.startsWith("Z")) throw new ProcessInspectionError("unavailable");
@@ -75,20 +97,26 @@ async function readCodexAppServerProcessCommand(observed, deadline) {
 			pending = command.length === 0;
 			if (pending) await setImmediate();
 		} while (pending);
-	} else output = (await readProcessOutput([
-		"-o",
-		"command=",
-		"-p",
-		String(observed.pid)
-	], deadline)).split("\n")[0]?.trim() ?? "";
+	} else output = (await readProcessOutput({
+		kind: "ps",
+		args: [
+			"-o",
+			"command=",
+			"-p",
+			String(observed.pid)
+		]
+	}, deadline)).split("\n")[0]?.trim() ?? "";
 	if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
 	if (!output) throw new ProcessInspectionError("unavailable");
 	return output;
 }
 async function readProcesses(args, deadline, selected = false) {
-	return parseProcesses(await readProcessOutput(args, deadline), selected);
+	return parseProcesses(await readProcessOutput({
+		kind: "ps",
+		args
+	}, deadline), selected);
 }
-async function readProcessOutput(args, deadline) {
+async function readProcessOutput(command, deadline) {
 	const remainingMs = deadline - Date.now();
 	if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
 	return await new Promise((resolve, reject) => {
@@ -100,16 +128,24 @@ async function readProcessOutput(args, deadline) {
 			if (output instanceof ProcessInspectionError) reject(output);
 			else resolve(output);
 		};
-		const inspector = execFile("ps", args, {
+		const procfs = command.kind === "procfs-command";
+		const inspector = execFile(procfs ? process.execPath : "ps", procfs ? [
+			...process.versions.bun ? ["--no-env-file", "--config=/dev/null"] : [],
+			"-e",
+			PROCFS_COMMAND_READER,
+			String(command.pid),
+			String(PROCESS_INSPECTION_MAX_BYTES)
+		] : command.args, {
 			encoding: "utf8",
 			maxBuffer: PROCESS_INSPECTION_MAX_BYTES,
-			env: {
+			cwd: procfs ? "/" : void 0,
+			env: procfs ? {} : {
 				...process.env,
 				LC_ALL: "C",
 				TZ: "UTC"
 			}
 		}, (error, stdout) => {
-			settle(Date.now() >= deadline ? new ProcessInspectionError("deadline") : error ? inspectionFailure(error) : stdout);
+			settle(Date.now() >= deadline ? new ProcessInspectionError("deadline") : error ? procfs && error.code === PROCFS_COMMAND_PERMISSION_EXIT ? new ProcessInspectionError("permission") : inspectionFailure(error) : stdout);
 		});
 		const timer = setTimeout(() => {
 			settle(new ProcessInspectionError("deadline"));
@@ -154,6 +190,7 @@ function parseProcesses(output, selected) {
 	return rows;
 }
 async function readLinuxProcesses(selected, deadline) {
+	if (selected !== void 0) return readSelectedLinuxProcesses(selected, deadline);
 	const remainingMs = deadline - Date.now();
 	if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
 	const options = {
@@ -161,9 +198,8 @@ async function readLinuxProcesses(selected, deadline) {
 		signal: AbortSignal.timeout(remainingMs)
 	};
 	try {
-		const bootId = (await readFile("/proc/sys/kernel/random/boot_id", options)).trim();
-		if (!/^[a-f0-9-]{36}$/.test(bootId)) throw new ProcessInspectionError("unavailable");
-		const pids = selected === void 0 ? await readdir("/proc") : selected.map(String);
+		const bootId = parseLinuxBootId(await readFile("/proc/sys/kernel/random/boot_id", options));
+		const pids = await readdir("/proc");
 		const rows = [];
 		let bytes = 0;
 		for (const entry of pids) {
@@ -176,23 +212,81 @@ async function readLinuxProcesses(selected, deadline) {
 			if (stat === void 0) continue;
 			bytes += stat.length;
 			if (bytes > PROCESS_INSPECTION_MAX_BYTES) throw new ProcessInspectionError("unavailable");
-			const commEnd = stat.lastIndexOf(")");
-			const fields = stat.slice(commEnd + 1).trim().split(/\s+/);
-			const ppid = Number(fields[1]);
-			const pgid = Number(fields[2]);
-			const startTicks = fields[19];
-			if (commEnd < 0 || ![ppid, pgid].every(Number.isSafeInteger) || selected !== void 0 && (pgid <= 0 || ppid < 0) || !/^\d+$/.test(startTicks ?? "")) throw new ProcessInspectionError("unavailable");
-			if (pgid > 0) {
-				const threads = Number(fields[17]);
-				if (!/^[1-9]\d*$/.test(fields[17] ?? "") || !Number.isSafeInteger(threads)) throw new ProcessInspectionError("unavailable");
-				rows.push({
-					pid: Number(entry),
-					ppid,
-					pgid,
-					state: `${fields[0]}${threads > 1 ? "l" : ""}`,
-					startedAt: `${bootId}:${startTicks}`
-				});
+			const row = parseLinuxProcess(stat, entry, bootId, false);
+			if (row) rows.push(row);
+		}
+		if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+		return rows;
+	} catch (error) {
+		throw inspectionFailure(error);
+	}
+}
+function parseLinuxBootId(value) {
+	const bootId = value.trim();
+	if (!/^[a-f0-9-]{36}$/.test(bootId)) throw new ProcessInspectionError("unavailable");
+	return bootId;
+}
+function parseLinuxProcess(stat, entry, bootId, selected) {
+	const commEnd = stat.lastIndexOf(")");
+	const fields = stat.slice(commEnd + 1).trim().split(/\s+/);
+	const ppid = Number(fields[1]);
+	const pgid = Number(fields[2]);
+	const startTicks = fields[19];
+	if (commEnd < 0 || ![ppid, pgid].every(Number.isSafeInteger) || selected && (pgid <= 0 || ppid < 0) || !/^\d+$/.test(startTicks ?? "")) throw new ProcessInspectionError("unavailable");
+	if (pgid > 0) {
+		const threads = Number(fields[17]);
+		if (!/^[1-9]\d*$/.test(fields[17] ?? "") || !Number.isSafeInteger(threads)) throw new ProcessInspectionError("unavailable");
+		return {
+			pid: Number(entry),
+			ppid,
+			pgid,
+			state: `${fields[0]}${threads > 1 ? "l" : ""}`,
+			startedAt: `${bootId}:${startTicks}`
+		};
+	}
+}
+/** Known procfs identities must not queue behind unrelated libuv filesystem work. */
+function readSelectedProcFile(file, deadline, maxBytes = PROCESS_INSPECTION_MAX_BYTES) {
+	if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+	const fd = openSync(file, constants.O_RDONLY | constants.O_NONBLOCK);
+	const chunks = [];
+	const buffer = Buffer.alloc(Math.min(4096, maxBytes + 1));
+	let bytes = 0;
+	try {
+		for (;;) {
+			if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+			const count = readSync(fd, buffer, {
+				offset: 0,
+				length: Math.min(buffer.length, maxBytes - bytes + 1),
+				position: null
+			});
+			if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+			if (count === 0) return Buffer.concat(chunks, bytes);
+			bytes += count;
+			if (bytes > maxBytes) throw new ProcessInspectionError("unavailable");
+			chunks.push(Buffer.from(buffer.subarray(0, count)));
+		}
+	} finally {
+		closeSync(fd);
+	}
+}
+function readSelectedLinuxProcesses(selected, deadline) {
+	try {
+		const bootId = parseLinuxBootId(readSelectedProcFile("/proc/sys/kernel/random/boot_id", deadline).toString("utf8"));
+		const rows = [];
+		let bytes = 0;
+		for (const entry of selected.map(String)) {
+			if (!/^\d+$/.test(entry)) continue;
+			let stat;
+			try {
+				stat = readSelectedProcFile(`/proc/${entry}/stat`, deadline, PROCESS_INSPECTION_MAX_BYTES - bytes);
+			} catch (error) {
+				if (error && typeof error === "object" && "code" in error && (error.code === "ENOENT" || error.code === "ESRCH")) continue;
+				throw error;
 			}
+			bytes += stat.length;
+			const row = parseLinuxProcess(stat.toString("utf8"), entry, bootId, true);
+			if (row) rows.push(row);
 		}
 		if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
 		return rows;
@@ -665,7 +759,8 @@ const QA_PARENT_PID_ENV = "OPENCLAW_QA_PARENT_PID";
 const DEFAULT_SPAWN_RUNTIME = {
 	platform: process.platform,
 	env: process.env,
-	execPath: process.execPath
+	execPath: process.execPath,
+	isBun: typeof process.versions.bun === "string"
 };
 /** Resolves the concrete command/argv/shell settings used to spawn Codex app-server. */
 function resolveCodexAppServerSpawnInvocation(options, runtime = DEFAULT_SPAWN_RUNTIME) {
@@ -679,6 +774,15 @@ function resolveCodexAppServerSpawnInvocation(options, runtime = DEFAULT_SPAWN_R
 	});
 	const args = normalizeCodexAppServerArgs(options.args);
 	const resolved = materializeWindowsSpawnProgram(program, args);
+	if (runtime.isBun && options.commandSource === "resolved-managed" && resolved.resolution === "direct" && [
+		".cjs",
+		".js",
+		".mjs"
+	].includes(path.extname(resolved.command).toLowerCase())) return {
+		command: runtime.execPath,
+		args: [resolved.command, ...resolved.argv],
+		windowsHide: resolved.windowsHide
+	};
 	return {
 		command: resolved.command,
 		args: resolved.argv,
@@ -727,7 +831,8 @@ async function createStdioTransport(options, baseEnv = process.env, assertCurren
 	const invocation = resolveCodexAppServerSpawnInvocation(options, {
 		platform: process.platform,
 		env,
-		execPath: process.execPath
+		execPath: process.execPath,
+		isBun: typeof process.versions.bun === "string"
 	});
 	const register = await prepareCodexAppServerProcessRegistration();
 	assertCurrent?.();