@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/{command-rpc-BMqRQOFX.js → .setup/command-rpc-DHFpn4le.mjs}

@@ -1,16 +1,16 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-BeqLPbtM.js";
-import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-CGvGOpeR.js";
-import "./config-JDfTI4VI.js";
-import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
-import { n as prepareCodexAppServerAuthBinding } from "./auth-binding-Co2Vfcf_.js";
-import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-CwzO4_RG.js";
-import { Z as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-D6cR54TV.js";
-import { n as listCodexAppServerModels } from "./models-P9k2qAof.js";
-import { n as createCodexSessionGenerationSupersededError } from "./session-binding-CKSepwIC.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-_vXcZGSx.mjs";
+import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-BioXJLYa.mjs";
+import "./config-CedDWjM-.mjs";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-WqZtZfXN.mjs";
+import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-DhLWa_7K.mjs";
+import { Z as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { n as listCodexAppServerModels } from "./models-BDFgm_G-.mjs";
+import { n as createCodexSessionGenerationSupersededError } from "./session-binding-_0W_fHRr.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BkNpj9Pz.mjs";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { prepareAgentRuntimeAuth } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -20,16 +20,20 @@ import { resolveApiKeyForProvider } from "openclaw/plugin-sdk/provider-auth-runt
 //#region extensions/codex/src/command-rpc.ts
 var command_rpc_exports = /* @__PURE__ */ __exportAll({
 	codexControlRequest: () => codexControlRequest,
+	prepareCodexControlSessionAuth: () => prepareCodexControlSessionAuth,
 	readCodexStatusProbes: () => readCodexStatusProbes,
 	requestOptions: () => requestOptions,
 	safeCodexControlRequest: () => safeCodexControlRequest
 });
-async function prepareControlAuth(options, startOptions) {
-	if (!options.onResponse) return {
-		authProfileId: options.authProfileId ?? void 0,
-		clientOptions: { authProfileId: options.authProfileId }
-	};
-	if (!options.config || !options.sessionKey || !options.sessionId) throw new Error("Codex control subscription requires admitted session authority.");
+/** Selects the same prepared auth partition as an admitted session turn. */
+async function prepareCodexControlSessionAuth(options, startOptions) {
+	if (!options.config || !options.sessionKey || !options.sessionId) {
+		if (options.onResponse) throw new Error("Codex control subscription requires admitted session authority.");
+		return {
+			authProfileId: options.authProfileId ?? void 0,
+			clientOptions: { authProfileId: options.authProfileId }
+		};
+	}
 	const config = options.config;
 	const { sessionAgentId } = resolveSessionAgentIdsStrict({
 		config,
@@ -126,9 +130,15 @@ function requestOptions(pluginConfig, limit, config, agentDir) {
 	};
 }
 async function codexControlRequest(pluginConfig, method, requestParams, options = {}) {
+	try {
+		options.controlObservation?.phase("prepare");
+	} catch {}
 	const runtime = options.startOptions ? resolveCodexSupervisionAppServerRuntimeOptions({ pluginConfig }) : resolveCodexAppServerRuntimeOptions({ pluginConfig });
 	const startOptions = options.startOptions ?? runtime.start;
-	const auth = await prepareControlAuth(options, startOptions);
+	const auth = options.onResponse ? await prepareCodexControlSessionAuth(options, startOptions) : {
+		authProfileId: options.authProfileId ?? void 0,
+		clientOptions: { authProfileId: options.authProfileId }
+	};
 	const controlRequestOptions = {
 		timeoutMs: options.timeoutMs ?? runtime.requestTimeoutMs,
 		assertCurrent: options.assertCurrent,
@@ -138,6 +148,12 @@ async function codexControlRequest(pluginConfig, method, requestParams, options
 		sessionId: options.sessionId,
 		agentDir: options.agentDir,
 		isolated: options.isolated,
+		...options.catalogPreview && method === "thread/list" ? {
+			catalogPreview: true,
+			catalogPreviewCache: options.catalogPreviewCache,
+			catalogRows: options.catalogRows
+		} : {},
+		...options.controlObservation ? { controlObservation: options.controlObservation } : {},
 		...auth.clientOptions
 	};
 	if (options.onResponse || options.beforeRequest) return await withCodexAppServerJsonClient(controlRequestOptions, async (request, client, scope) => {
@@ -223,4 +239,4 @@ async function safeValue(read) {
 	}
 }
 //#endregion
-export { safeCodexControlRequest as a, requestOptions as i, command_rpc_exports as n, readCodexStatusProbes as r, codexControlRequest as t };
+export { requestOptions as a, readCodexStatusProbes as i, command_rpc_exports as n, safeCodexControlRequest as o, prepareCodexControlSessionAuth as r, codexControlRequest as t };

package/dist/{compact-CGJZ2rlb.js → .setup/compact-C3i3qlzj.mjs}

@@ -1,26 +1,24 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-CaZjYwNS.js";
-import { o as isJsonObject } from "./protocol-CAAcVIKF.js";
-import { u as isCodexAppServerPrewriteRequestCancellationError } from "./client-BEKu4yDx.js";
-import { n as withCodexAppServerThreadMutation, t as isIncognitoSessionKey } from "./incognito-session-uhrBF6wJ.js";
-import { r as CodexAppServerRpcError } from "./session-catalog-provenance-DkJHo735.js";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-QqgcPCgk.js";
-import { P as consumeCodexAppServerLiveThread, W as retainCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CVhez2Uo.js";
-import { _ as readCodexNotificationTurnId, a as closeCodexStartupClientBestEffort, c as isCodexNoActiveTurnInterruptError, d as unsubscribeCodexThreadBestEffort, g as readCodexNotificationThreadId, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
-import { s as readCodexNotificationItem } from "./attempt-notifications--H8zXR5-.js";
-import { n as readCodexThreadContextSnapshot } from "./event-projector-usage-CIyrYYid.js";
-import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-CKSepwIC.js";
-import { r as assertCodexSupervisionThreadLineage } from "./thread-policy-D8kI7yAO.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
-import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-D6oASVRu.js";
-import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.js";
-import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BcT66fWy.js";
+import { p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
+import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { u as isCodexAppServerPrewriteRequestCancellationError } from "./client-vXs2929Q.mjs";
+import { n as withCodexAppServerThreadMutation, t as isIncognitoSessionKey } from "./incognito-session-uhrBF6wJ.mjs";
+import { i as CodexAppServerRpcError } from "./timeout-DZF05XrR.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-Bm38niE8.mjs";
+import { N as consumeCodexAppServerLiveThread, W as retainCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort, b as readCodexNotificationTurnId, c as isCodexNoActiveTurnInterruptError, f as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError, y as readCodexNotificationThreadId } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { c as readCodexNotificationItem, n as readCodexThreadContextSnapshot } from "./event-projector-usage-C7Ntzs-f.mjs";
+import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-_0W_fHRr.mjs";
+import { r as assertCodexSupervisionThreadLineage } from "./thread-policy-Cjs4B8xf.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BkNpj9Pz.mjs";
+import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-skomxnIt.mjs";
+import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
+import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-BBP-RbTf.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { resolveAgentDir as resolveAgentDir$1 } from "openclaw/plugin-sdk/agent-runtime";
+import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { embeddedAgentLog, resolveCompactionTimeoutMs } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { AsyncLocalStorage } from "node:async_hooks";
 import { createDedupeCache } from "openclaw/plugin-sdk/dedupe-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 const warnedIgnoredCompactionOverrides = createDedupeCache({
@@ -237,28 +235,15 @@ function warnIfIgnoringOpenClawCompactionOverrides(params) {
 	});
 }
 function readIgnoredCompactionOverridePaths(params) {
-	const ignored = /* @__PURE__ */ new Set();
-	for (const entry of readCompactionOverrideEntries(params)) {
-		const localProvider = typeof entry.record.provider === "string" ? entry.record.provider.trim() : "";
-		if (typeof entry.record.model === "string" && entry.record.model.trim()) ignored.add(`${entry.path}.compaction.model`);
-		if (typeof entry.record.thinkingLevel === "string" && entry.record.thinkingLevel.trim()) ignored.add(`${entry.path}.compaction.thinkingLevel`);
-		if (localProvider) ignored.add(`${entry.path}.compaction.provider`);
-	}
-	return [...ignored];
-}
-function readCompactionOverrideEntries(params) {
-	const entries = [];
-	const defaultRecord = asOptionalRecord(params.config?.agents?.defaults?.compaction);
-	if (defaultRecord) entries.push({
-		path: "agents.defaults",
-		record: defaultRecord
+	const compaction = asOptionalRecord(params.config?.agents?.defaults?.compaction);
+	return [
+		"model",
+		"thinkingLevel",
+		"provider"
+	].flatMap((field) => {
+		const value = compaction?.[field];
+		return typeof value === "string" && value.trim() ? [`agents.defaults.compaction.${field}`] : [];
 	});
-	return entries;
-}
-function readAgentIdFromSessionKey(sessionKey) {
-	const parts = sessionKey?.trim().toLowerCase().split(":").filter(Boolean) ?? [];
-	if (parts.length < 3 || parts[0] !== "agent") return;
-	return parts[1]?.trim() || void 0;
 }
 async function compactCodexNativeThread(params, options) {
 	if (params.trigger !== "manual" && !options.allowNonManualNativeRequest) {
@@ -344,13 +329,13 @@ async function compactCodexNativeThread(params, options) {
 	let connection;
 	try {
 		const config = params.config ?? {};
-		const agentId = params.agentId ?? readAgentIdFromSessionKey(params.sessionKey) ?? resolveDefaultAgentId(config);
-		connection = resolveCodexBindingAppServerConnection({
+		connection = await resolveCodexBindingAppServerConnection({
 			binding,
 			authProfileId: requestedAuthProfileId ?? binding.authProfileId,
 			pluginConfig: options.pluginConfig,
 			config,
-			agentDir: resolveAgentDir$1(config, agentId)
+			assertCurrent,
+			agentDir: resolveAgentDir(config, bindingIdentity.agentId)
 		});
 	} catch (error) {
 		return {

package/dist/{config-JDfTI4VI.js → .setup/config-CedDWjM-.mjs}

@@ -1,7 +1,8 @@
-import { c as readExecAsk, f as readRecord, l as readExecSecurity } from "./config-utils-C57JiJrU.js";
-import { p as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-jnIFvwxD.js";
-import "./protocol-CAAcVIKF.js";
-import "./config-runtime-BWf6JLWG.js";
+import { c as readExecAsk, f as readRecord, l as readExecSecurity } from "./config-utils-DujwEnhg.mjs";
+import "./config-security-BRQ2mgW9.mjs";
+import "./config-parsing-CcB9iPoq.mjs";
+import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-BsanJ8QG.mjs";
+import "./config-runtime-CeAhl_h4.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";