@openclaw/codex 2026.9.3 → 2026.9.5

package/dist/{conversation-binding-CxOlHiix.js → .setup/conversation-binding-DhzrpTM6.mjs}

@@ -1,21 +1,21 @@
-import { l as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced } from "./session-binding-record-CaZjYwNS.js";
-import { b as readCodexRequirementsToml, n as codexSandboxPolicyForTurn } from "./config-options-jnIFvwxD.js";
-import { o as isJsonObject, x as readCodexPluginConfig } from "./protocol-CAAcVIKF.js";
-import { _ as assertCodexThreadAcceptsDirectInput, b as assertCodexThreadStartResponse, l as isCodexAppServerOverloadError, m as CodexThreadDirectInputError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-BEKu4yDx.js";
-import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-BiodpIzq.js";
-import { i as projectBoundedCodexVisibleSessionHistory } from "./session-catalog-home-id-D7-aLiNt.js";
-import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-JDfTI4VI.js";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BWf6JLWG.js";
-import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CwzO4_RG.js";
-import { L as hasCodexAppServerLiveThread, P as consumeCodexAppServerLiveThread, R as isCodexAppServerClientRuntimeLive, U as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, x as withLeasedCodexAppServerClientStartSelectionRetry, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-CVhez2Uo.js";
-import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, l as retireUnsafeCodexTurnClientBestEffort, o as interruptCodexTurnAndWaitBestEffort, p as getCodexAppServerTurnRouter, s as isCodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D6cR54TV.js";
-import { n as isAssistantCommentaryCompletionNotification } from "./attempt-notifications--H8zXR5-.js";
-import { E as resolveCodexAppServerRequestModelSelection, Tt as mergeCodexThreadConfigs, k as buildCodexProjectDocThreadConfig, w as CODEX_NATIVE_PERSONALITY_NONE, wt as buildDisabledAppsConfigPatch } from "./thread-lifecycle-D1pzRwHB.js";
-import "./session-binding-CKSepwIC.js";
-import { t as resumeCodexAppServerThread } from "./thread-resume-T5cveyxA.js";
-import { a as rollbackCodexAppServerBindingSubscription, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-D6oASVRu.js";
-import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-B22InTp_.js";
-import { u as trackCodexConversationActiveTurn } from "./conversation-control-CUCrSIQI.js";
+import { n as assertCodexBindingMayBeReplaced, p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
+import { E as readCodexRequirementsToml, m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { _ as assertCodexThreadAcceptsDirectInput, b as assertCodexThreadStartResponse, l as isCodexAppServerOverloadError, m as CodexThreadDirectInputError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-vXs2929Q.mjs";
+import { d as readCodexEffectiveConfig, n as codexSandboxPolicyForTurn } from "./config-options-BsanJ8QG.mjs";
+import { o as resolveCodexDefaultWorkspaceDir } from "./conversation-binding-data-CrcyZk6O.mjs";
+import { n as projectBoundedCodexVisibleSessionHistory } from "./transcript-history-projection-DHNBDhCU.mjs";
+import { n as resolveOpenClawExecPolicyForCodexAppServer, t as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-CedDWjM-.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-WqZtZfXN.mjs";
+import { I as hasCodexAppServerLiveThread, N as consumeCodexAppServerLiveThread, R as isCodexAppServerClientRuntimeLive, U as releaseCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, c as getLeasedSharedCodexAppServerClient, m as releaseCodexAppServerClientLease, x as withLeasedCodexAppServerClientStartSelectionRetry, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort, f as unsubscribeCodexThreadBestEffort, l as retireUnsafeCodexTurnClientBestEffort, m as getCodexAppServerTurnRouter, o as interruptCodexTurnAndWaitBestEffort, s as isCodexAppServerUnsafeSubscriptionError, v as isCodexNotificationForTurn } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { Dt as buildDisabledAppsConfigPatch, E as CODEX_NATIVE_PERSONALITY_NONE, N as buildCodexProjectDocThreadConfig, O as resolveCodexAppServerRequestModelSelection, Ot as mergeCodexThreadConfigs } from "./thread-lifecycle-Cik28qWn.mjs";
+import "./session-binding-_0W_fHRr.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BkNpj9Pz.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, s as withExclusiveCodexAppServerThread, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-skomxnIt.mjs";
+import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-DhurXY0l.mjs";
+import { u as trackCodexConversationActiveTurn } from "./conversation-control-DN53ns41.mjs";
 import { asOptionalRecord, normalizeOptionalString, normalizeSingleOrTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
@@ -157,7 +157,7 @@ async function resolveThreadBindingRuntime(params) {
 		clientOptions
 	};
 }
-function buildConversationThreadRequest(resolved, serviceTier) {
+function buildConversationThreadRequest(resolved, serviceTier, effectiveNativeConfig) {
 	return {
 		cwd: resolved.workspaceDir,
 		...resolved.model ? { model: resolved.model } : {},
@@ -166,13 +166,18 @@ function buildConversationThreadRequest(resolved, serviceTier) {
 		approvalPolicy: resolved.runtime.approvalPolicy,
 		approvalsReviewer: resolved.runtime.approvalsReviewer,
 		...resolved.runtime.sessionRoot ? { runtimeWorkspaceRoots: [resolved.runtime.sessionRoot] } : {},
-		...codexConversationSandboxOrPermissions(resolved.runtime, resolved.runtime.sandbox),
+		...codexConversationSandboxOrPermissions(resolved.runtime, resolved.runtime.sandbox, effectiveNativeConfig),
 		...serviceTier ? { serviceTier } : {}
 	};
 }
-function codexConversationSandboxOrPermissions(runtime, sandbox) {
+async function buildConversationThreadRequestForClient(client, resolved, serviceTier, requestOptions) {
+	const effectiveConfig = await readCodexEffectiveConfig(client, resolved.workspaceDir, requestOptions());
+	requestOptions();
+	return buildConversationThreadRequest(resolved, serviceTier, effectiveConfig);
+}
+function codexConversationSandboxOrPermissions(runtime, sandbox, effectiveNativeConfig) {
 	const networkProxy = runtime.networkProxy;
-	const config = buildCodexProjectDocThreadConfig(mergeCodexThreadConfigs(networkProxy?.configPatch, buildDisabledAppsConfigPatch()));
+	const config = buildCodexProjectDocThreadConfig(mergeCodexThreadConfigs(networkProxy?.configPatch, buildDisabledAppsConfigPatch()), effectiveNativeConfig);
 	return networkProxy ? { config } : {
 		sandbox,
 		config
@@ -233,7 +238,7 @@ async function bindThread(params, threadId) {
 			lease: clientLease,
 			options: resolved.clientOptions,
 			run: async (client, requestOptions) => {
-				const request = buildConversationThreadRequest(resolved, params.serviceTier ?? resolved.runtime.serviceTier);
+				const request = await buildConversationThreadRequestForClient(client, resolved, params.serviceTier ?? resolved.runtime.serviceTier, requestOptions);
 				let response;
 				if (threadId && !resolved.runtime.networkProxy) {
 					if (isCodexAppServerLiveThreadClaimed(client, threadId)) throw new Error(`Codex thread ${threadId} has an active run; stop it before binding its conversation.`);
@@ -457,8 +462,7 @@ function createCodexConversationTurnCollector(threadId) {
 			if (item?.type === "agentMessage") {
 				const itemId = normalizeOptionalString(item.id) ?? normalizeOptionalString(params.itemId) ?? "assistant";
 				assistantTextByItem.delete(itemId);
-				if (isAssistantCommentaryCompletionNotification(notification)) return;
-				const text = readTextString(item, "text");
+				const text = readAssistantReplyText(item);
 				if (text?.trim()) assistantTextByItem.set(itemId, text);
 			}
 			return;
@@ -475,7 +479,7 @@ function createCodexConversationTurnCollector(threadId) {
 					if (!isJsonObject(item) || item.type !== "agentMessage") continue;
 					const itemId = normalizeOptionalString(item.id) ?? `assistant-${assistantTextByItem.size + 1}`;
 					assistantTextByItem.delete(itemId);
-					const text = item.phase === "commentary" ? void 0 : readTextString(item, "text");
+					const text = readAssistantReplyText(item);
 					if (text?.trim()) assistantTextByItem.set(itemId, text);
 				}
 			}
@@ -502,6 +506,9 @@ function createCodexConversationTurnCollector(threadId) {
 		}
 	};
 }
+function readAssistantReplyText(item) {
+	return item.phase === "commentary" || item.delivery === "async" ? void 0 : readTextString(item, "text");
+}
 function readTextString(record, key) {
 	const value = record?.[key];
 	return typeof value === "string" && value.length > 0 ? value : void 0;
@@ -682,12 +689,15 @@ async function runBoundTurn(params) {
 					const response = assertCodexThreadStartResponse(await withLeasedCodexAppServerClientStartSelectionRetry({
 						lease: clientLease,
 						options: clientOptions,
-						run: async (requestClient, requestOptions) => await requestClient.request("thread/start", {
-							...buildConversationThreadRequest(threadRequestRuntime, serviceTier),
-							developerInstructions: CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS,
-							experimentalRawEvents: true,
-							...params.incognito ? { ephemeral: true } : {}
-						}, requestOptions()),
+						run: async (requestClient, requestOptions) => {
+							const threadRequest = await buildConversationThreadRequestForClient(requestClient, threadRequestRuntime, serviceTier, requestOptions);
+							return await requestClient.request("thread/start", {
+								...threadRequest,
+								developerInstructions: CODEX_CONVERSATION_THREAD_DEVELOPER_INSTRUCTIONS,
+								experimentalRawEvents: true,
+								...params.incognito ? { ephemeral: true } : {}
+							}, requestOptions());
+						},
 						onClientChange: (nextClient) => {
 							client = nextClient;
 						}
@@ -733,21 +743,24 @@ async function runBoundTurn(params) {
 					const response = await withLeasedCodexAppServerClientStartSelectionRetry({
 						lease: clientLease,
 						options: clientOptions,
-						run: async (requestClient, requestOptions) => await resumeCodexAppServerThread({
-							client: requestClient,
-							onSubscriptionReleased: () => {
-								isolatedSubscriptionClient = requestClient;
-							},
-							abandonClient: async () => {
-								await closeCodexStartupClientBestEffort(requestClient);
-								isolatedSubscriptionClient = requestClient;
-							},
-							request: {
-								threadId,
-								...buildConversationThreadRequest(threadRequestRuntime, serviceTier)
-							},
-							requestResume: (request) => requestClient.request("thread/resume", request, requestOptions())
-						}),
+						run: async (requestClient, requestOptions) => {
+							const threadRequest = await buildConversationThreadRequestForClient(requestClient, threadRequestRuntime, serviceTier, requestOptions);
+							return await resumeCodexAppServerThread({
+								client: requestClient,
+								onSubscriptionReleased: () => {
+									isolatedSubscriptionClient = requestClient;
+								},
+								abandonClient: async () => {
+									await closeCodexStartupClientBestEffort(requestClient);
+									isolatedSubscriptionClient = requestClient;
+								},
+								request: {
+									threadId,
+									...threadRequest
+								},
+								requestResume: (request) => requestClient.request("thread/resume", request, requestOptions())
+							});
+						},
 						onClientChange: (nextClient) => {
 							client = nextClient;
 						}

package/dist/{conversation-binding-data-BiodpIzq.js → .setup/conversation-binding-data-CrcyZk6O.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import process from "node:process";

package/dist/{conversation-control-CUCrSIQI.js → .setup/conversation-control-DN53ns41.mjs}

@@ -1,12 +1,12 @@
-import { n as isCodexFastServiceTier } from "./config-utils-C57JiJrU.js";
-import { r as bindingStoreKey } from "./session-binding-record-CaZjYwNS.js";
-import { a as formatCodexDisplayText } from "./command-formatters-DeTfrapr.js";
-import "./config-JDfTI4VI.js";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-QqgcPCgk.js";
-import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CwzO4_RG.js";
-import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CVhez2Uo.js";
-import { E as resolveCodexAppServerRequestModelSelection, O as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-D1pzRwHB.js";
-import "./session-binding-CKSepwIC.js";
+import { n as isCodexFastServiceTier } from "./config-utils-DujwEnhg.mjs";
+import { r as bindingStoreKey } from "./session-binding-record-TH3xA0zj.mjs";
+import { o as formatCodexDisplayText } from "./command-formatters-CGEkdawF.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-Bm38niE8.mjs";
+import "./config-CedDWjM-.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-WqZtZfXN.mjs";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BpTtuLQ5.mjs";
+import { A as resolveCodexBindingModelProviderFallback, O as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-Cik28qWn.mjs";
+import "./session-binding-_0W_fHRr.mjs";
 import { resolveAgentDir } from "openclaw/plugin-sdk/agent-runtime";
 import { getSessionEntry, patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { ModelSelectionLockedError, applyModelOverrideWithAuthProfileCompatibility } from "openclaw/plugin-sdk/model-session-runtime";
@@ -40,10 +40,12 @@ async function stopCodexConversationTurn(params) {
 		stopped: false,
 		message: "The active Codex run no longer matches this session binding."
 	};
-	const connection = resolveCodexBindingAppServerConnection({
+	const connection = await resolveCodexBindingAppServerConnection({
 		binding,
 		authProfileId: binding?.authProfileId,
-		pluginConfig: params.pluginConfig
+		pluginConfig: params.pluginConfig,
+		...lookup,
+		assertCurrent: params.assertCurrent
 	});
 	const runtime = connection.appServer;
 	const client = active.client ?? await getLeasedSharedCodexAppServerClient({
@@ -85,10 +87,12 @@ async function steerCodexConversationTurn(params) {
 		steered: false,
 		message: "The active Codex run no longer matches this session binding."
 	};
-	const connection = resolveCodexBindingAppServerConnection({
+	const connection = await resolveCodexBindingAppServerConnection({
 		binding,
 		authProfileId: binding?.authProfileId,
-		pluginConfig: params.pluginConfig
+		pluginConfig: params.pluginConfig,
+		...lookup,
+		assertCurrent: params.assertCurrent
 	});
 	const runtime = connection.appServer;
 	const client = active.client ?? await getLeasedSharedCodexAppServerClient({

package/dist/.setup/cyber-failover-DYwbmf1o.mjs

@@ -0,0 +1,123 @@
+import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { t as attemptTerminal } from "./attempt-terminal-gZrxQ35N.mjs";
+//#region extensions/codex/src/app-server/cyber-failover.ts
+/**
+* Automatic Daybreak escalation for OpenAI cyber-policy refusals.
+*
+* OpenAI refuses some defensive-cyber work on its general models and directs
+* approved workspaces to a Daybreak model instead. When a turn is refused, the
+* harness retries it once on the configured Daybreak model so the refused work
+* reaches the tier allowed to answer it. Only a refused turn is ever routed
+* there, and the retry never changes the session's stored model selection.
+*
+* Authorization stays server-owned. `model/list` advertises Daybreak to every
+* client, but an unentitled workspace still gets 401/403 on use, and each such
+* attempt costs the transport's full five-try reconnect ladder. Entitlement is
+* therefore only ever observed from an actual attempt, and a failure is
+* remembered per workspace so siblings do not each pay for it.
+*/
+const DEFAULT_CYBER_FAILOVER = {
+	mode: "auto",
+	model: "gpt-daybreak-blue-latest",
+	cooloffMs: 6e5
+};
+function resolveCodexCyberFailoverConfig(pluginConfig) {
+	const configured = readCodexPluginConfig(pluginConfig).appServer?.cyberFailover;
+	if (!configured) return DEFAULT_CYBER_FAILOVER;
+	return {
+		mode: configured.mode ?? DEFAULT_CYBER_FAILOVER.mode,
+		model: configured.model ?? DEFAULT_CYBER_FAILOVER.model,
+		cooloffMs: configured.cooloffMs ?? DEFAULT_CYBER_FAILOVER.cooloffMs
+	};
+}
+const unavailableTargets = /* @__PURE__ */ new Map();
+const MAX_UNAVAILABLE_TARGETS = 256;
+const inFlightProbes = /* @__PURE__ */ new Set();
+function targetKey(model, workspace) {
+	const normalized = model.trim().toLowerCase();
+	const slashIndex = normalized.lastIndexOf("/");
+	return [
+		workspace?.agentId?.trim().toLowerCase() ?? "",
+		workspace?.authProfileId?.trim().toLowerCase() ?? "",
+		slashIndex >= 0 ? normalized.slice(slashIndex + 1) : normalized
+	].join("\0");
+}
+/** Marks a workspace/target probe in flight; the returned handle releases it. */
+function reserveCodexCyberProbe(params) {
+	const key = targetKey(params.model, params.workspace);
+	inFlightProbes.add(key);
+	return () => {
+		inFlightProbes.delete(key);
+	};
+}
+/** Remembers that this workspace cannot use the target for `cooloffMs`. */
+function recordCodexCyberTargetUnavailable(params) {
+	if (params.cooloffMs <= 0) return;
+	const now = params.now ?? Date.now();
+	for (const [key, expiresAt] of unavailableTargets) if (expiresAt <= now) unavailableTargets.delete(key);
+	while (unavailableTargets.size >= MAX_UNAVAILABLE_TARGETS) {
+		const oldest = unavailableTargets.keys().next();
+		if (oldest.done) break;
+		unavailableTargets.delete(oldest.value);
+	}
+	unavailableTargets.set(targetKey(params.model, params.workspace), now + params.cooloffMs);
+}
+/** Decides whether a refused turn may be retried on Daybreak. */
+function planCodexCyberEscalation(params) {
+	const { config } = params;
+	if (config.mode !== "auto") return {
+		kind: "skip",
+		reason: "disabled"
+	};
+	if (!params.replaySafe) return {
+		kind: "skip",
+		reason: "not_replay_safe"
+	};
+	if (!config.model.trim()) return {
+		kind: "skip",
+		reason: "no_target"
+	};
+	const key = targetKey(config.model, params.workspace);
+	if (params.currentModel && targetKey(params.currentModel, params.workspace) === key) return {
+		kind: "skip",
+		reason: "already_daybreak"
+	};
+	const now = params.now ?? Date.now();
+	const expiresAt = unavailableTargets.get(key);
+	if (expiresAt !== void 0 && expiresAt <= now) unavailableTargets.delete(key);
+	else if (expiresAt !== void 0) return {
+		kind: "skip",
+		reason: "target_unavailable"
+	};
+	if (inFlightProbes.has(key)) return {
+		kind: "skip",
+		reason: "probe_in_flight"
+	};
+	return {
+		kind: "escalate",
+		model: config.model
+	};
+}
+const AUTHORIZATION_FAILURE_RE = /\b(401|403)\b|unauthorized|not authorized|forbidden/i;
+/** Everything the escalation decision needs from one attempt outcome. */
+function readCodexCyberAttemptVerdict(result) {
+	const message = result?.currentAttemptAssistant;
+	const refusals = message?.role === "assistant" ? message.diagnostics ?? [] : [];
+	const cyberRefused = result?.terminal.kind === "ok" && refusals.some((d) => d.type === "provider_refusal" && d.details?.category === "cyber" && d.details?.provider === "openai");
+	const promptError = result ? attemptTerminal.project(result.terminal).promptError : void 0;
+	const answered = !(promptError !== void 0 && promptError !== null) && message?.role === "assistant" && !refusals.some((d) => d.type === "provider_refusal") && message.stopReason !== "error" && message.stopReason !== "aborted";
+	const errorTexts = [
+		typeof promptError === "string" ? promptError : void 0,
+		promptError instanceof Error ? promptError.message : void 0,
+		result?.lastAssistant?.errorMessage,
+		message?.errorMessage
+	];
+	return {
+		cyberRefused,
+		replaySafe: result?.replayMetadata?.replaySafe === true && result.runtimeContinuationStarted !== true,
+		answered,
+		unavailable: errorTexts.some((t) => t !== void 0 && AUTHORIZATION_FAILURE_RE.test(t))
+	};
+}
+//#endregion
+export { planCodexCyberEscalation, readCodexCyberAttemptVerdict, recordCodexCyberTargetUnavailable, reserveCodexCyberProbe, resolveCodexCyberFailoverConfig };

package/dist/.setup/cyber-failover-notice-e9G3J9-e.mjs

@@ -0,0 +1,17 @@
+import { t as emitCodexAppServerEvent } from "./run-attempt-lifecycle-B7JbY4-F.mjs";
+//#region extensions/codex/src/app-server/cyber-failover-notice.ts
+async function emitCodexCyberNotice(params, notice) {
+	await emitCodexAppServerEvent(params, {
+		stream: "notice",
+		data: {
+			phase: "provider_policy",
+			category: "cyber",
+			state: notice.state,
+			provider: "openai",
+			...notice.model ? { model: notice.model } : {},
+			fallbackModel: notice.fallbackModel
+		}
+	});
+}
+//#endregion
+export { emitCodexCyberNotice };