@openclaw/codex 2026.9.33 → 2026.9.35

package/dist/.setup/{session-catalog-native-projection-LshItrMe.mjs → session-catalog-native-projection-CXTe4qQr.mjs}

@@ -1,8 +1,8 @@
-import { D as selectCodexCatalogPreviewInput, c as MAX_CWD_LENGTH, d as boundedCatalogString, k as truncateCodexCatalogPreview } from "./session-catalog-parsing-CPGaPYr-.mjs";
+import { D as selectCodexCatalogPreviewInput, c as MAX_CWD_LENGTH, d as boundedCatalogString, k as truncateCodexCatalogPreview } from "./session-catalog-parsing-CnEH565l.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as defineCodexBuildState } from "./build-state-E-CRUdgh.mjs";
-import { n as detachCodexCatalogString } from "./session-catalog-limits-DDxOsQeC.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { n as defineCodexBuildState } from "./build-state-B3lvV1Op.mjs";
+import { n as detachCodexCatalogString } from "./session-catalog-limits-bz5ZvjtY.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 //#region extensions/codex/src/session-catalog-source.ts
 function hasLiveCodexCatalogSource(sources) {
 	for (const source of sources) if (!source.closed) return true;

package/dist/.setup/{session-catalog-node-adoption-DgXvSGu0.mjs → session-catalog-node-adoption-BdS7zDuY.mjs}

@@ -1,4 +1,4 @@
-import { o as CatalogParamsError } from "./session-catalog-parsing-CPGaPYr-.mjs";
+import { o as CatalogParamsError } from "./session-catalog-parsing-CnEH565l.mjs";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { KeyedAsyncQueue } from "openclaw/plugin-sdk/keyed-async-queue";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
@@ -146,7 +146,7 @@ async function createOrReuseNodeAdoptedSession(params) {
 			},
 			afterCreate: async (entry) => {
 				const storePath = resolveStorePath(params.config.session?.store, { agentId: entry.agentId });
-				const { importCodexThreadHistoryToTranscript } = await import("./transcript-mirror-kxmCYsuF.mjs").then((n) => n.a);
+				const { importCodexThreadHistoryToTranscript } = await import("./transcript-mirror-BRNhyb1o.mjs").then((n) => n.a);
 				await importCodexThreadHistoryToTranscript({
 					thread: params.history.thread,
 					throughTurnId: params.history.throughTurnId,

package/dist/.setup/{session-catalog-node-continue-DjKXHBbi.mjs → session-catalog-node-continue-XFJG3JGh.mjs}

@@ -1,10 +1,10 @@
-import { A as unwrapNodeInvokePayload, b as parseTranscriptPage, d as boundedCatalogString, f as catalogError, g as isInteractiveThreadSource, h as filterCatalogPageByTitle, n as CODEX_APP_SERVER_THREADS_LIST_COMMAND, o as CatalogParamsError, r as CODEX_APP_SERVER_THREAD_TURNS_LIST_COMMAND, u as NODE_INVOKE_TIMEOUT_MS, v as parseCatalogPage } from "./session-catalog-parsing-CPGaPYr-.mjs";
-import { n as createCodexCliNodeConversationBindingData } from "./conversation-binding-data-C746z5Pn.mjs";
-import { r as CODEX_CLI_SESSION_SOURCE_UPGRADE_MESSAGE, t as CODEX_CLI_SESSION_RESUME_COMMAND } from "./node-cli-sessions-HC4W6FLI.mjs";
+import { A as unwrapNodeInvokePayload, b as parseTranscriptPage, d as boundedCatalogString, f as catalogError, g as isInteractiveThreadSource, h as filterCatalogPageByTitle, n as CODEX_APP_SERVER_THREADS_LIST_COMMAND, o as CatalogParamsError, r as CODEX_APP_SERVER_THREAD_TURNS_LIST_COMMAND, u as NODE_INVOKE_TIMEOUT_MS, v as parseCatalogPage } from "./session-catalog-parsing-CnEH565l.mjs";
+import { n as createCodexCliNodeConversationBindingData } from "./conversation-binding-data-DlsG-dQu.mjs";
+import { r as CODEX_CLI_SESSION_SOURCE_UPGRADE_MESSAGE, t as CODEX_CLI_SESSION_RESUME_COMMAND } from "./node-cli-sessions-BwhIYgCZ.mjs";
 import { i as withTimeout } from "./timeout-CXOfNoaX.mjs";
-import { t as lookupNodeCodexCatalogRecord } from "./session-catalog-node-lookup-CtAXI5W5.mjs";
+import { t as lookupNodeCodexCatalogRecord } from "./session-catalog-node-lookup-D9AP5D5o.mjs";
 import { t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.mjs";
-import { catalogSessionActions, createOrReuseNodeAdoptedSession, finalizeNodeAdoptedSession, findNodeAdoptedSessionEntry, nodeAdoptedSourceKey, nodeSessionMarker } from "./session-catalog-node-adoption-DgXvSGu0.mjs";
+import { catalogSessionActions, createOrReuseNodeAdoptedSession, finalizeNodeAdoptedSession, findNodeAdoptedSessionEntry, nodeAdoptedSourceKey, nodeSessionMarker } from "./session-catalog-node-adoption-BdS7zDuY.mjs";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { createSessionCatalogAdoptionCoordinator, publishSessionCatalogHost, sessionCatalogAdoptedSourceKey } from "openclaw/plugin-sdk/session-catalog";
 //#region extensions/codex/src/session-catalog-node-continue.ts

package/dist/.setup/{session-catalog-node-lookup-CtAXI5W5.mjs → session-catalog-node-lookup-D9AP5D5o.mjs}

@@ -1,5 +1,5 @@
-import { A as unwrapNodeInvokePayload, n as CODEX_APP_SERVER_THREADS_LIST_COMMAND, o as CatalogParamsError, u as NODE_INVOKE_TIMEOUT_MS, v as parseCatalogPage } from "./session-catalog-parsing-CPGaPYr-.mjs";
-import "./session-catalog-limits-DDxOsQeC.mjs";
+import { A as unwrapNodeInvokePayload, n as CODEX_APP_SERVER_THREADS_LIST_COMMAND, o as CatalogParamsError, u as NODE_INVOKE_TIMEOUT_MS, v as parseCatalogPage } from "./session-catalog-parsing-CnEH565l.mjs";
+import "./session-catalog-limits-bz5ZvjtY.mjs";
 import { i as withTimeout } from "./timeout-CXOfNoaX.mjs";
 //#region extensions/codex/src/session-catalog-node-lookup.ts
 async function lookupNodeCodexCatalogRecord(params) {

package/dist/.setup/{session-catalog-parsing-CPGaPYr-.mjs → session-catalog-parsing-CnEH565l.mjs}

@@ -1,5 +1,5 @@
 import "./protocol-CANUwXJ3.mjs";
-import { n as detachCodexCatalogString } from "./session-catalog-limits-DDxOsQeC.mjs";
+import { n as detachCodexCatalogString } from "./session-catalog-limits-bz5ZvjtY.mjs";
 import { asFiniteNumber, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 //#region extensions/codex/src/app-server/protocol-session-source.ts

package/dist/.setup/{session-catalog-projection-CCBFozaQ.mjs → session-catalog-projection-DcDKizZd.mjs}

@@ -1,8 +1,8 @@
-import { D as selectCodexCatalogPreviewInput, O as toCatalogSession, S as readControlCursor, d as boundedCatalogString, k as truncateCodexCatalogPreview } from "./session-catalog-parsing-CPGaPYr-.mjs";
-import { n as detachCodexCatalogString } from "./session-catalog-limits-DDxOsQeC.mjs";
-import { n as codexCatalogRowRecency } from "./session-catalog-index-order-BcQpHks3.mjs";
+import { D as selectCodexCatalogPreviewInput, O as toCatalogSession, S as readControlCursor, d as boundedCatalogString, k as truncateCodexCatalogPreview } from "./session-catalog-parsing-CnEH565l.mjs";
+import { n as detachCodexCatalogString } from "./session-catalog-limits-bz5ZvjtY.mjs";
+import { n as codexCatalogRowRecency } from "./session-catalog-index-order-DQhmgM3b.mjs";
 import { t as isOpenClawManagedCodexThread } from "./session-catalog-provenance-DoAvktcj.mjs";
-import { c as copyCodexCatalogSource, l as getCodexCatalogSource, p as setCodexCatalogSource, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-LshItrMe.mjs";
+import { c as copyCodexCatalogSource, l as getCodexCatalogSource, p as setCodexCatalogSource, r as projectCodexCatalogNativeThread } from "./session-catalog-native-projection-CXTe4qQr.mjs";
 import { asFiniteNumber, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/.setup/{session-cli-KhdG-_Aj.mjs → session-cli-C3GejWcm.mjs}

@@ -1,5 +1,5 @@
-import "./session-catalog-parsing-CPGaPYr-.mjs";
-import "./session-catalog-DFZmNlhW.mjs";
+import "./session-catalog-parsing-CnEH565l.mjs";
+import "./session-catalog-DMagZcW-.mjs";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";

package/dist/.setup/{session-history-import-WhX-X33a.mjs → session-history-import-tquj9DCz.mjs}

@@ -1,7 +1,7 @@
-import { v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import "./session-binding-DGCYAfvD.mjs";
-import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-kxmCYsuF.mjs";
-import { n as prepareCodexSessionInitialization } from "./session-initialization-6aveB9qb.mjs";
+import { v as sessionBindingIdentity } from "./session-binding-record-CUKpUKVm.mjs";
+import "./session-binding-Fn7Ekzuv.mjs";
+import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-BRNhyb1o.mjs";
+import { n as prepareCodexSessionInitialization } from "./session-initialization-DefAI1_5.mjs";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 //#region extensions/codex/src/app-server/session-history-import.ts
 /** Creates a session whose transcript is derived from one verified Codex thread snapshot. */

package/dist/.setup/{session-initialization-6aveB9qb.mjs → session-initialization-DefAI1_5.mjs}

@@ -1,5 +1,5 @@
-import { b as validateBindingForWrite } from "./session-binding-record-Oe9L-CNY.mjs";
-import "./session-binding-DGCYAfvD.mjs";
+import { b as validateBindingForWrite } from "./session-binding-record-CUKpUKVm.mjs";
+import "./session-binding-Fn7Ekzuv.mjs";
 import { createNativeSessionInitializationOwner } from "openclaw/plugin-sdk/agent-harness-session-runtime";
 //#region extensions/codex/src/app-server/session-initialization.ts
 const codexInitializations = createNativeSessionInitializationOwner({

package/dist/.setup/{session-permission-policy-Ci_fVX6y.mjs → session-permission-policy-7lM447LW.mjs}

@@ -1,5 +1,5 @@
 import { E as selectGuardianSandbox, _ as selectUserApprovalsReviewer, d as parseAllowedApprovalPoliciesFromCodexRequirements, f as parseAllowedApprovalsReviewersFromCodexRequirements, g as selectGuardianApprovalsReviewer, h as selectGuardianApprovalPolicy, i as resolveCodexAppServerNetworkProxy, p as parseAllowedSandboxModesFromCodexRequirements } from "./config-security-CE-FcGw9.mjs";
-import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-DKhXquav.mjs";
+import { n as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-DqmrqI23.mjs";
 import { hostname } from "node:os";
 import { isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
 //#region extensions/codex/src/app-server/app-server-policy.ts

package/dist/.setup/{session-retirement-ERjp2r4a.mjs → session-retirement-CQCMiDul.mjs}

@@ -1,11 +1,11 @@
-import { l as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-4LdC3gM4.mjs";
+import { u as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-BH_y_i8l.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-Dp24d7-F.mjs";
-import { t as isIncognitoSessionKey } from "./incognito-session-DWYapfwf.mjs";
-import { K as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed } from "./shared-client-zsK3DTPh.mjs";
-import { n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-D1aznv7C.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-DbNIloTJ.mjs";
-import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-B0xUCXOU.mjs";
-import { t as getCodexSessionInitializationRollback } from "./session-initialization-6aveB9qb.mjs";
+import { t as isIncognitoSessionKey } from "./incognito-session-C5ve_-63.mjs";
+import { K as releaseCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed } from "./shared-client-ZXKMsK6f.mjs";
+import { n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BVtNsTOE.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-g-ZDkvCr.mjs";
+import { t as isSameCodexAppServerThreadOwner } from "./thread-ownership-BT_SeSUp.mjs";
+import { t as getCodexSessionInitializationRollback } from "./session-initialization-DefAI1_5.mjs";
 //#region extensions/codex/src/app-server/session-retirement.ts
 async function releaseSessionSubscription(client, binding, sessionKey, assertCurrent) {
 	assertCurrent?.();

package/dist/.setup/{settled-turn-finalizer-DbS1Mwoq.mjs → settled-turn-finalizer-w92T5Rbb.mjs}

@@ -1,12 +1,12 @@
 import { r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
 import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-YSegaktH.mjs";
-import { nt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-zsK3DTPh.mjs";
-import { _ as assertCodexPassiveTurnItems } from "./client-6GbdZFc0.mjs";
-import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-DbNIloTJ.mjs";
-import { t as codexTranscriptMirrorRuntime } from "./transcript-mirror-kxmCYsuF.mjs";
-import { runBoundedCodexAppServerTurn } from "./bounded-turn-Ca4urQ25.mjs";
-import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-B8K_ylqk.mjs";
-import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-CAI4foF8.mjs";
+import { rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-ZXKMsK6f.mjs";
+import { _ as assertCodexPassiveTurnItems } from "./client-DcTISXe3.mjs";
+import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-g-ZDkvCr.mjs";
+import { t as codexTranscriptMirrorRuntime } from "./transcript-mirror-BRNhyb1o.mjs";
+import { runBoundedCodexAppServerTurn } from "./bounded-turn-DBwLoFDR.mjs";
+import { t as resolveCodexBoundedTurnIsolation } from "./bounded-turn-isolation-Ce-oOk-D.mjs";
+import { a as createAttributedCodexAssistantMessage } from "./event-projector-assistant-message-DXDX94zH.mjs";
 import { t as CodexSettledTurnContext } from "./settled-turn-context-D4yj4rxf.mjs";
 import { isSilentReplyText } from "openclaw/plugin-sdk/reply-runtime";
 //#region extensions/codex/src/app-server/settled-turn-finalizer.ts

package/dist/.setup/{shared-client-zsK3DTPh.mjs → shared-client-ZXKMsK6f.mjs}

@@ -1,23 +1,23 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as defineCodexBuildState, t as codexBuildSymbol } from "./build-state-E-CRUdgh.mjs";
+import { n as defineCodexBuildState, t as codexBuildSymbol } from "./build-state-B3lvV1Op.mjs";
 import { t as CODEX_APP_SERVER_AUTH_PROVIDER } from "./auth-profile-selection-DFu9e167.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { a as withEphemeralCodexAuthStore, i as withClearedEnvironmentVariables, n as resolveCodexAppServerLocalHomeDir, r as resolveCodexAppServerUserHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { a as resolveCodexAppServerStartOptionsForAgent, d as readCodexEffectiveConfig, o as resolveCodexComputerUseConfig, t as codexAppServerStartOptionsKey, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-CzyWLTJt.mjs";
-import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, f as resolveMacOSDesktopCodexComputerUseServiceAppCandidates, i as resolveManagedCodexNativeCommand, l as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand, u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-B6hQ1UKR.mjs";
-import { a as readCodexCliAuthFileApiKey, c as resolveCodexAppServerPreparedApiKeyCacheKey, d as waitForCodexDesktopGeneration, f as readCodexDesktopArtifactTreeFingerprint, i as fingerprintTokenAuthProfileCacheKey, n as CODEX_AUTH_JSON_FILENAME, o as readFirstNonEmptyEnv, r as fingerprintApiKeyAuthProfileCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey, t as CODEX_APP_SERVER_API_KEY_ENV_VARS, u as isCodexDesktopGenerationCurrent } from "./auth-cache-key-CWpIEtTm.mjs";
-import { a as notifyDesktopGenerationDrainChecks, c as retainSharedClientEntry, d as retireSharedCodexAppServerClientIfCurrent, m as waitForUnclaimedSharedClientStartup, n as getCurrentSharedClientEntry, o as ownCodexStartup, r as getSharedCodexAppServerClientState, s as releaseSharedClientEntry, t as createCodexAppServerStartupLifetime, u as retirePendingSharedClientEntryIfUnclaimed } from "./shared-client-lifecycle-4LdC3gM4.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-CbutOIEh.mjs";
+import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, f as resolveMacOSDesktopCodexComputerUseServiceAppCandidates, i as resolveManagedCodexNativeCommand, l as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand, u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-Ckgvm_4V.mjs";
+import { a as readCodexCliAuthFileApiKey, c as resolveCodexAppServerPreparedApiKeyCacheKey, d as waitForCodexDesktopGeneration, f as readCodexDesktopArtifactTreeFingerprint, i as fingerprintTokenAuthProfileCacheKey, n as CODEX_AUTH_JSON_FILENAME, o as readFirstNonEmptyEnv, r as fingerprintApiKeyAuthProfileCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey, t as CODEX_APP_SERVER_API_KEY_ENV_VARS, u as isCodexDesktopGenerationCurrent } from "./auth-cache-key-CskfconU.mjs";
+import { a as notifyDesktopGenerationDrainChecks, c as releaseSharedClientEntry, d as retirePendingSharedClientEntryIfUnclaimed, f as retireSharedCodexAppServerClientIfCurrent, h as waitForUnclaimedSharedClientStartup, l as retainSharedClientEntry, n as getCurrentSharedClientEntry, o as ownCodexStartup, r as getSharedCodexAppServerClientState, s as refreshSharedClientIdleRetirement, t as createCodexAppServerStartupLifetime } from "./shared-client-lifecycle-BH_y_i8l.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-DU8dIOCj.mjs";
 import { n as CodexAppServerAuthProfileUnavailableError, r as formatCodexAuthProfileUnavailableMessage } from "./auth-profile-recovery-BREezV0L.mjs";
 import { i as withTimeout } from "./timeout-CXOfNoaX.mjs";
 import { n as readCodexSessionMeta } from "./session-catalog-provenance-DoAvktcj.mjs";
-import { n as observeCodexCatalogClient } from "./session-catalog-events-DVLgp99B.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { n as observeCodexCatalogClient } from "./session-catalog-events-r59AxcQ4.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, r as resolveCodexAppServerAuthProfileId, t as isCodexAppServerNativeAuthProfile } from "./auth-profile-B0okYl2D.mjs";
 import { i as isCodexResponsesOAuthCredential, n as createCodexResponsesOAuth, o as resolveCodexResponsesOAuthProfileFingerprint, r as isCodexResponsesOAuth, t as CODEX_RESPONSES_OAUTH_PROVIDER } from "./responses-oauth-twnuTaAa.mjs";
-import { f as isUnsupportedCodexAppServerVersionError, t as CodexAppServerClient } from "./client-6GbdZFc0.mjs";
-import { n as isCodexWebSocketOpenFailure } from "./transport-websocket-BTBE-LD9.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { f as isUnsupportedCodexAppServerVersionError, t as CodexAppServerClient } from "./client-DcTISXe3.mjs";
+import { n as isCodexWebSocketOpenFailure } from "./transport-websocket-zu3jRPnu.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash, randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
@@ -1631,6 +1631,36 @@ function resolveExplicitChatgptAccountId(credential) {
 	}
 }
 //#endregion
+//#region extensions/codex/src/app-server/client-thread-closure.ts
+const MAX_CLOSED_THREAD_RECEIPTS = 256;
+const closureState = defineCodexBuildState("openclaw.codexAppServerClosedThreads", () => ({
+	closedThreadsByClient: /* @__PURE__ */ new WeakMap(),
+	observedClients: /* @__PURE__ */ new WeakSet()
+}))();
+function recordCodexAppServerThreadClosed(client, threadId) {
+	const receipts = closureState.closedThreadsByClient.get(client) ?? /* @__PURE__ */ new Set();
+	receipts.delete(threadId);
+	receipts.add(threadId);
+	while (receipts.size > MAX_CLOSED_THREAD_RECEIPTS) receipts.delete(receipts.values().next().value);
+	closureState.closedThreadsByClient.set(client, receipts);
+}
+function ensureCodexAppServerThreadClosureTracking(client) {
+	if (closureState.observedClients.has(client)) return;
+	closureState.observedClients.add(client);
+	client.addNotificationHandler((notification) => {
+		const params = notification.params;
+		const threadId = typeof params === "object" && params !== null && "threadId" in params ? params.threadId : void 0;
+		if (notification.method === "thread/closed" && typeof threadId === "string") recordCodexAppServerThreadClosed(client, threadId);
+	});
+	client.addCloseHandler(() => closureState.closedThreadsByClient.delete(client));
+}
+function clearCodexAppServerThreadClosed(client, threadId) {
+	closureState.closedThreadsByClient.get(client)?.delete(threadId);
+}
+function wasCodexAppServerThreadClosed(client, threadId) {
+	return closureState.closedThreadsByClient.get(client)?.has(threadId) === true;
+}
+//#endregion
 //#region extensions/codex/src/app-server/client-thread-owner.ts
 function createThreadOwnerToken(threadId, onInvalidated) {
 	const owner = {
@@ -1705,6 +1735,24 @@ function createCodexEphemeralThreadPolicy({ developerInstructions, skillsInstruc
 	};
 }
 //#endregion
+//#region extensions/codex/src/app-server/client-workspace-references.ts
+/** Record accepted input without clearing a compaction observed during turn/start. */
+function prepareCodexWorkspaceReference(runtime, threadId, reference) {
+	const digest = createHash("sha256").update(reference ?? "").digest("hex");
+	const previous = runtime?.workspaceReferences.get(threadId) ?? { needsReintroduction: true };
+	if (runtime && !runtime.closed) runtime.workspaceReferences.set(threadId, previous);
+	return {
+		include: previous.needsReintroduction || previous.digest !== digest,
+		accepted: () => {
+			if (!runtime || runtime.closed || runtime.workspaceReferences.get(threadId) !== previous) return;
+			runtime.workspaceReferences.set(threadId, {
+				digest,
+				needsReintroduction: false
+			});
+		}
+	};
+}
+//#endregion
 //#region extensions/codex/src/app-server/rate-limit-cache.ts
 const DEFAULT_CODEX_RATE_LIMIT_CACHE_MAX_AGE_MS = 6e5;
 const SPARSE_ACCOUNT_METADATA_KEYS = [
@@ -1829,20 +1877,7 @@ function forgetCodexWorkspaceReferences(client, threadId) {
 }
 /** Record accepted input without clearing a compaction observed during turn/start. */
 function prepareCodexWorkspaceReferences(client, threadId, reference) {
-	const runtime = configuredClients.get(client);
-	const digest = createHash("sha256").update(reference ?? "").digest("hex");
-	const previous = runtime?.workspaceReferences.get(threadId) ?? { needsReintroduction: true };
-	if (runtime && !runtime.closed) runtime.workspaceReferences.set(threadId, previous);
-	return {
-		include: previous.needsReintroduction || previous.digest !== digest,
-		accepted: () => {
-			if (!runtime || runtime.closed || runtime.workspaceReferences.get(threadId) !== previous) return;
-			runtime.workspaceReferences.set(threadId, {
-				digest,
-				needsReintroduction: false
-			});
-		}
-	};
+	return prepareCodexWorkspaceReference(configuredClients.get(client), threadId, reference);
 }
 /** Immutable declarations are data owned by this physical client, never retained executors. */
 async function readCodexClientSessionMeta(client, sessionsRoot, boundRolloutPath, threadId) {
@@ -1871,7 +1906,7 @@ async function readCodexClientSessionMeta(client, sessionsRoot, boundRolloutPath
 	return structuredClone(metadata);
 }
 /** Installs one auth-refresh handler and one rate-limit observer per physical client. */
-function ensureCodexAppServerClientRuntime(client, context) {
+function ensureCodexAppServerClientRuntime(client, context, onThreadOwnershipChange) {
 	const existing = configuredClients.get(client);
 	if (existing) {
 		if (existing.closed) return;
@@ -1883,6 +1918,7 @@ function ensureCodexAppServerClientRuntime(client, context) {
 	}
 	const runtime = {
 		context,
+		onThreadOwnershipChange,
 		closed: false,
 		retainedThreads: /* @__PURE__ */ new Map(),
 		claimedThreads: /* @__PURE__ */ new Map(),
@@ -1892,6 +1928,7 @@ function ensureCodexAppServerClientRuntime(client, context) {
 		workspaceReferences: /* @__PURE__ */ new Map()
 	};
 	configuredClients.set(client, runtime);
+	ensureCodexAppServerThreadClosureTracking(client);
 	client.addCloseHandler(() => {
 		runtime.closed = true;
 		if (runtime.evictionTimer) {
@@ -1953,17 +1990,16 @@ function ensureCodexAppServerClientRuntime(client, context) {
 				invalidateThreadOwnership(runtime, threadId);
 				runtime.sessionMetadata.delete(threadId);
 				runtime.workspaceReferences.delete(threadId);
-				scheduleRetainedThreadEviction(client, runtime);
+				updateThreadOwnership(client, runtime);
 			}
 		}
 	});
 }
-function scheduleRetainedThreadEviction(client, runtime) {
-	if (runtime.evictionTimer) {
-		clearTimeout(runtime.evictionTimer);
-		runtime.evictionTimer = void 0;
-	}
+function updateThreadOwnership(client, runtime) {
+	clearTimeout(runtime.evictionTimer);
+	runtime.evictionTimer = void 0;
 	if (runtime.closed) return;
+	runtime.onThreadOwnershipChange?.();
 	let expiresAt = Number.POSITIVE_INFINITY;
 	for (const [threadId, thread] of runtime.retainedThreads) if (!runtime.protectedThreads.has(threadId)) expiresAt = Math.min(expiresAt, thread.expiresAt);
 	if (!Number.isFinite(expiresAt)) return;
@@ -1990,7 +2026,6 @@ async function releaseRetainedThread(client, runtime, threadId, assertCurrent) {
 		olderThreadIds.add(candidateThreadId);
 	}
 	runtime.retainedThreads.delete(threadId);
-	scheduleRetainedThreadEviction(client, runtime);
 	const transition = {
 		retainedOwnerToken: retained.ownerToken,
 		completion: Promise.resolve().then(() => {
@@ -1999,6 +2034,7 @@ async function releaseRetainedThread(client, runtime, threadId, assertCurrent) {
 		})
 	};
 	runtime.releasingThreads.set(threadId, transition);
+	updateThreadOwnership(client, runtime);
 	try {
 		await transition.completion;
 		runtime.workspaceReferences.delete(threadId);
@@ -2015,13 +2051,13 @@ async function releaseRetainedThread(client, runtime, threadId, assertCurrent) {
 		throw error;
 	} finally {
 		if (runtime.releasingThreads.get(threadId) === transition) runtime.releasingThreads.delete(threadId);
-		scheduleRetainedThreadEviction(client, runtime);
+		updateThreadOwnership(client, runtime);
 	}
 }
 async function evictExpiredRetainedThreads(client, runtime) {
 	const now = Date.now();
 	for (const [threadId, thread] of runtime.retainedThreads) if (thread.expiresAt <= now && !runtime.protectedThreads.has(threadId)) await releaseRetainedThread(client, runtime, threadId);
-	scheduleRetainedThreadEviction(client, runtime);
+	updateThreadOwnership(client, runtime);
 }
 async function evictExcessIdleThreads(client, runtime) {
 	const idleThreads = () => [...runtime.retainedThreads].filter(([threadId, thread]) => thread.ephemeralPolicy === void 0 && !runtime.protectedThreads.has(threadId));
@@ -2044,6 +2080,7 @@ async function retainCodexAppServerLiveThread(client, threadId, releaseThread, c
 		return false;
 	}
 	const previousOwner = runtime.retainedThreads.get(threadId)?.ownerToken;
+	clearCodexAppServerThreadClosed(client, threadId);
 	runtime.retainedThreads.delete(threadId);
 	const retained = {
 		ownerToken,
@@ -2061,7 +2098,7 @@ async function retainCodexAppServerLiveThread(client, threadId, releaseThread, c
 		await evictExcessIdleThreads(client, runtime);
 	} catch (error) {
 		if (runtime.retainedThreads.get(threadId) === retained) runtime.retainedThreads.delete(threadId);
-		scheduleRetainedThreadEviction(client, runtime);
+		updateThreadOwnership(client, runtime);
 		embeddedAgentLog$1.warn("codex retained thread capacity eviction failed", {
 			threadId,
 			reason: formatErrorMessage$1(error)
@@ -2070,7 +2107,7 @@ async function retainCodexAppServerLiveThread(client, threadId, releaseThread, c
 	}
 	if (runtime.closed) return false;
 	if (claimed !== void 0 && runtime.claimedThreads.get(threadId) === claimed) runtime.claimedThreads.delete(threadId);
-	scheduleRetainedThreadEviction(client, runtime);
+	updateThreadOwnership(client, runtime);
 	return true;
 }
 /** Transfer one idle subscription to its next turn or compaction without touching sibling threads. */
@@ -2109,7 +2146,7 @@ function claimCodexAppServerThreadOwnership(client, runtime, threadId, retained,
 	runtime.claimedThreads.set(threadId, claimed);
 	previousClaim?.invalidate();
 	retained.ownerToken?.invalidate();
-	scheduleRetainedThreadEviction(client, runtime);
+	updateThreadOwnership(client, runtime);
 	const assertCurrent = () => {
 		if (claimed.invalidated || runtime.closed || runtime.claimedThreads.get(threadId) !== claimed) throw new Error(`Codex thread subscription ownership changed: ${threadId}`);
 	};
@@ -2150,6 +2187,7 @@ function claimCodexAppServerThreadOwnership(client, runtime, threadId, retained,
 			}
 		} finally {
 			if (runtime.releasingThreads.get(threadId) === transition) runtime.releasingThreads.delete(threadId);
+			updateThreadOwnership(client, runtime);
 		}
 	};
 	physicalThreadReleases.set(release, retained.release);
@@ -2163,7 +2201,7 @@ function claimCodexAppServerThreadOwnership(client, runtime, threadId, retained,
 		forget: () => {
 			if (forgetThreadOwnership(runtime, threadId, claimed)) {
 				runtime.workspaceReferences.delete(threadId);
-				scheduleRetainedThreadEviction(client, runtime);
+				updateThreadOwnership(client, runtime);
 			}
 		}
 	};
@@ -2173,6 +2211,11 @@ function revertCodexAppServerLiveThreadSkillsCatalog(client, threadId) {
 	const runtime = configuredClients.get(client);
 	if (runtime && !runtime.closed) revertRetainedThreadSkillsCatalog(runtime, threadId);
 }
+/** Native subscriptions, including ephemeral history and releases, pin their physical client. */
+function hasCodexAppServerThreadOwnership(client) {
+	const runtime = configuredClients.get(client);
+	return Boolean(runtime && !runtime.closed && (runtime.retainedThreads.size > 0 || runtime.claimedThreads.size > 0 || runtime.releasingThreads.size > 0 || runtime.protectedThreads.size > 0));
+}
 /** Distinguish active claimed ownership from an already-evicted idle subscription. */
 function hasCodexAppServerLiveThread(client, threadId) {
 	return hasThreadOwnership(configuredClients.get(client), threadId);
@@ -2216,20 +2259,24 @@ async function unsubscribeCodexAppServerLiveThread(client, threadId, timeoutMs,
 			physicalRelease
 		};
 		runtime.releasingThreads.set(threadId, transition);
+		updateThreadOwnership(client, runtime);
 	}
 	try {
 		await physicalRelease;
 		if (retained !== void 0 && runtime?.retainedThreads.get(threadId) === retained) {
 			runtime.retainedThreads.delete(threadId);
 			retained.ownerToken?.invalidate();
-			scheduleRetainedThreadEviction(client, runtime);
+			updateThreadOwnership(client, runtime);
 		}
 		if (claimed !== void 0 && runtime?.claimedThreads.get(threadId) === claimed) {
 			runtime.claimedThreads.delete(threadId);
 			claimed.invalidate();
 		}
 	} finally {
-		if (ownsTransition && runtime.releasingThreads.get(threadId) === transition) runtime.releasingThreads.delete(threadId);
+		if (ownsTransition && runtime.releasingThreads.get(threadId) === transition) {
+			runtime.releasingThreads.delete(threadId);
+			updateThreadOwnership(client, runtime);
+		}
 	}
 }
 /** Reset/end owns the exact thread; failed generation retirement must never release its successor. */
@@ -2242,7 +2289,7 @@ function protectCodexAppServerLiveThread(client, threadId) {
 	const runtime = configuredClients.get(client);
 	if (!runtime || runtime.closed) return () => void 0;
 	runtime.protectedThreads.set(threadId, (runtime.protectedThreads.get(threadId) ?? 0) + 1);
-	scheduleRetainedThreadEviction(client, runtime);
+	updateThreadOwnership(client, runtime);
 	let protectedThread = true;
 	return () => {
 		if (!protectedThread) return;
@@ -2258,7 +2305,7 @@ function protectCodexAppServerLiveThread(client, threadId) {
 				runtime.retainedThreads.set(threadId, retained);
 			}
 		} else runtime.protectedThreads.set(threadId, count - 1);
-		scheduleRetainedThreadEviction(client, runtime);
+		updateThreadOwnership(client, runtime);
 		evictExcessIdleThreads(client, runtime).catch((error) => {
 			embeddedAgentLog$1.warn("codex retained thread unpin eviction failed", {
 				threadId,
@@ -2521,7 +2568,7 @@ async function prepareCodexInferenceRoute(params) {
 		}
 		pending = Promise.all([
 			import("./inference-proxy-DhcXOgUE.mjs"),
-			import("./native-subagent-monitor-DbNIloTJ.mjs").then((n) => n.n),
+			import("./native-subagent-monitor-g-ZDkvCr.mjs").then((n) => n.n),
 			import("./inference-dispatch-CMZtjQyz.mjs")
 		]).then(([{ createCodexInferenceProxy }, native, { createCodexInferenceModelBinding }]) => {
 			assertClient();
@@ -3208,7 +3255,10 @@ function createSharedCodexAppServerClientStartup(params) {
 	}).then((client) => {
 		const state = getSharedCodexAppServerClientState();
 		params.entry.client = client;
+		params.entry.hasOwnedThreads = () => hasCodexAppServerThreadOwnership(client);
 		client.addCloseHandler((closedClient) => {
+			clearTimeout(params.entry.idleTimer);
+			params.entry.idleTimer = void 0;
 			const entry = getCurrentSharedClientEntry(closedClient);
 			if (entry) state.clients.delete(entry.key);
 		});
@@ -3312,7 +3362,7 @@ async function startInitializedCodexAppServerClientOnce(params) {
 		} finally {
 			artifactDrain?.cancel();
 		}
-		const runtimeArtifactModule = params.runtimeArtifactMode ? await import("./runtime-artifact-D7lCXdhV.mjs") : void 0;
+		const runtimeArtifactModule = params.runtimeArtifactMode ? await import("./runtime-artifact-Riq878B2.mjs") : void 0;
 		const runtimeArtifactBeforeStart = runtimeArtifactModule ? await runtimeArtifactModule.captureCodexAppServerRuntimeArtifactBeforeStart({
 			startOptions,
 			spawnIdentity: resolveCodexAppServerSpawnIdentity(startOptions),
@@ -3383,7 +3433,7 @@ async function startInitializedCodexAppServerClientOnce(params) {
 				...params.authProfileStore ? { authProfileStore: params.authProfileStore } : {},
 				config: params.config,
 				onAuthRefreshFailure: () => retireSharedCodexAppServerClientIfCurrent(client)
-			});
+			}, () => refreshSharedClientIdleRetirement(client));
 			assertStartupCurrent();
 			const authHandoff = await waitForStartup(() => applyCodexAppServerAuthProfile({
 				client,
@@ -3588,4 +3638,4 @@ function closeSharedClientEntryIfUnclaimed(entry) {
 	return Boolean(entry.client);
 }
 //#endregion
-export { createCodexEphemeralThreadPolicy as $, bindCodexInferenceThread as A, isCodexAppServerClientRuntimeLive as B, CodexThreadBindingConflictError as C, nativeHookRelayUnregisterQueue as D, isCodexContextRestartSelectionChangedError as E, consumeCodexAppServerLiveThread as F, readCodexClientSessionMeta as G, isCodexAppServerLiveThreadProtected as H, ensureCodexAppServerClientRuntime as I, revertCodexAppServerLiveThreadSkillsCatalog as J, releaseCodexAppServerLiveThread as K, forgetCodexWorkspaceReferences as L, getCodexInferenceThreadQualification as M, prepareCodexInferenceThreadConfig as N, acquireCodexNativeConfigFence as O, claimCodexAppServerLiveThread as P, rememberCodexRateLimitsRead as Q, hasCodexAppServerLiveThread as R, CodexAdoptedThreadActiveError as S, CodexThreadStartRequestError as T, prepareCodexWorkspaceReferences as U, isCodexAppServerLiveThreadClaimed as V, protectCodexAppServerLiveThread as W, readCodexRateLimitsRevision as X, unsubscribeCodexAppServerLiveThread as Y, readRecentCodexRateLimits as Z, retainSharedCodexAppServerClientIfCurrent as _, clearSharedCodexAppServerClientIfCurrentAndUnclaimed as a, hasLegacyCodexComputerUseMcpPolicy as at, withLeasedCodexAppServerClientStartSelectionRetry as b, getLeasedSharedCodexAppServerClient as c, ensureCodexComputerUseSharedPluginCache as ct, readCodexAppServerClientDesktopGeneration as d, TURN_FINALIZE_DRAIN_ABORT_GRACE_MS as dt, reconcileCodexComputerUseStartArtifacts as et, readCodexAppServerClientDesktopGenerationFingerprint as f, TURN_TERMINAL_SETTLEMENT_TIMEOUT_MS as ft, resolveCodexNativeConfigFenceKey as g, withCodexStartupTimeout as gt, releaseLeasedSharedCodexAppServerClient as h, resolveCodexStartupTimeoutMs as ht, clearSharedCodexAppServerClientIfCurrent as i, resolveClientManagedBundledMarketplacePath as it, getCodexInferenceThread as j, assertCodexInferenceRouteConfig as k, getSharedCodexAppServerClient as l, assertNotSymlink as lt, releaseCodexAppServerClientLease as m, resolveCodexGatewayTimeoutWithGraceMs as mt, captureCodexAppServerClientLifetime as n, resolveCodexAppServerPreparedAuthHandoff as nt, clearSharedCodexAppServerClientIfCurrentAndWait as o, isLegacyCodexComputerUsePluginDisabled as ot, readCodexAppServerClientProcessIdentity as p, isCodexAppServerStartupError as pt, retainCodexAppServerLiveThread as q, captureSharedCodexAppServerCatalogLifetime as r, resolveBundledComputerUseMarketplacePath as rt, createIsolatedCodexAppServerClient as s, resolveManagedCodexComputerUseConfig as st, assertCodexAppServerClientStartSelectionCurrent as t, resolveCodexAppServerAuthAccountCacheKey as tt, isCodexAppServerStartSelectionChangedError as u, CodexAppServerStartupError as ut, shared_client_exports as v, CodexThreadClientReplacementError as w, CODEX_APP_SERVER_CONTEXT_RESTART_SELECTION_CHANGED as x, waitForCodexAppServerClientDesktopGenerationDrain as y, hasCodexAppServerSiblingThreadWork as z };
+export { createCodexEphemeralThreadPolicy as $, bindCodexInferenceThread as A, isCodexAppServerClientRuntimeLive as B, CodexThreadBindingConflictError as C, nativeHookRelayUnregisterQueue as D, isCodexContextRestartSelectionChangedError as E, consumeCodexAppServerLiveThread as F, readCodexClientSessionMeta as G, isCodexAppServerLiveThreadProtected as H, ensureCodexAppServerClientRuntime as I, revertCodexAppServerLiveThreadSkillsCatalog as J, releaseCodexAppServerLiveThread as K, forgetCodexWorkspaceReferences as L, getCodexInferenceThreadQualification as M, prepareCodexInferenceThreadConfig as N, acquireCodexNativeConfigFence as O, claimCodexAppServerLiveThread as P, rememberCodexRateLimitsRead as Q, hasCodexAppServerLiveThread as R, CodexAdoptedThreadActiveError as S, CodexThreadStartRequestError as T, prepareCodexWorkspaceReferences as U, isCodexAppServerLiveThreadClaimed as V, protectCodexAppServerLiveThread as W, readCodexRateLimitsRevision as X, unsubscribeCodexAppServerLiveThread as Y, readRecentCodexRateLimits as Z, retainSharedCodexAppServerClientIfCurrent as _, withCodexStartupTimeout as _t, clearSharedCodexAppServerClientIfCurrentAndUnclaimed as a, resolveClientManagedBundledMarketplacePath as at, withLeasedCodexAppServerClientStartSelectionRetry as b, getLeasedSharedCodexAppServerClient as c, resolveManagedCodexComputerUseConfig as ct, readCodexAppServerClientDesktopGeneration as d, CodexAppServerStartupError as dt, wasCodexAppServerThreadClosed as et, readCodexAppServerClientDesktopGenerationFingerprint as f, TURN_FINALIZE_DRAIN_ABORT_GRACE_MS as ft, resolveCodexNativeConfigFenceKey as g, resolveCodexStartupTimeoutMs as gt, releaseLeasedSharedCodexAppServerClient as h, resolveCodexGatewayTimeoutWithGraceMs as ht, clearSharedCodexAppServerClientIfCurrent as i, resolveBundledComputerUseMarketplacePath as it, getCodexInferenceThread as j, assertCodexInferenceRouteConfig as k, getSharedCodexAppServerClient as l, ensureCodexComputerUseSharedPluginCache as lt, releaseCodexAppServerClientLease as m, isCodexAppServerStartupError as mt, captureCodexAppServerClientLifetime as n, resolveCodexAppServerAuthAccountCacheKey as nt, clearSharedCodexAppServerClientIfCurrentAndWait as o, hasLegacyCodexComputerUseMcpPolicy as ot, readCodexAppServerClientProcessIdentity as p, TURN_TERMINAL_SETTLEMENT_TIMEOUT_MS as pt, retainCodexAppServerLiveThread as q, captureSharedCodexAppServerCatalogLifetime as r, resolveCodexAppServerPreparedAuthHandoff as rt, createIsolatedCodexAppServerClient as s, isLegacyCodexComputerUsePluginDisabled as st, assertCodexAppServerClientStartSelectionCurrent as t, reconcileCodexComputerUseStartArtifacts as tt, isCodexAppServerStartSelectionChangedError as u, assertNotSymlink as ut, shared_client_exports as v, CodexThreadClientReplacementError as w, CODEX_APP_SERVER_CONTEXT_RESTART_SELECTION_CHANGED as x, waitForCodexAppServerClientDesktopGenerationDrain as y, hasCodexAppServerSiblingThreadWork as z };

package/dist/.setup/{shared-client-lifecycle-4LdC3gM4.mjs → shared-client-lifecycle-BH_y_i8l.mjs}

@@ -1,4 +1,4 @@
-import { n as defineCodexBuildState } from "./build-state-E-CRUdgh.mjs";
+import { n as defineCodexBuildState } from "./build-state-B3lvV1Op.mjs";
 //#region extensions/codex/src/app-server/shared-client-lifecycle.ts
 /** Client ownership and synchronous retirement, independent of startup/auth execution. */
 const createCodexAppServerStartupLifetime = () => ({
@@ -50,6 +50,7 @@ function retireSharedCodexAppServerClientIfCurrent(client, opts) {
 	const currentEntry = getCurrentSharedClientEntry(client);
 	const entry = currentEntry ?? state.entriesByClient.get(client);
 	if (!entry || entry.client !== client && !entry.closeError) return;
+	cancelSharedClientIdleRetirement(entry);
 	if (currentEntry) {
 		state.clients.delete(entry.key);
 		entry.closeWhenIdle = true;
@@ -84,6 +85,7 @@ function closeRetiredSharedClientEntry(entry) {
 	const client = entry.client;
 	if (!client) return false;
 	entry.client = void 0;
+	cancelSharedClientIdleRetirement(entry);
 	client.close();
 	return true;
 }
@@ -135,8 +137,27 @@ async function retainSharedCodexAppServerClientByInstanceId(clientId) {
 function notifyDesktopGenerationDrainChecks(state) {
 	for (const check of state.desktopGenerationDrainChecks) check();
 }
+const CODEX_APP_SERVER_CLIENT_IDLE_GRACE_MS = 3e4;
+function cancelSharedClientIdleRetirement(entry) {
+	clearTimeout(entry.idleTimer);
+	entry.idleTimer = void 0;
+}
+function refreshSharedClientIdleRetirement(client) {
+	const entry = getCurrentSharedClientEntry(client);
+	if (entry) scheduleSharedClientIdleRetirement(entry);
+}
+function scheduleSharedClientIdleRetirement(entry) {
+	cancelSharedClientIdleRetirement(entry);
+	if (entry.activeLeases > 0 || entry.pendingAcquires > 0 || !entry.client || entry.hasOwnedThreads?.() || getCurrentSharedClientEntry(entry.client) !== entry) return;
+	entry.idleTimer = setTimeout(() => {
+		entry.idleTimer = void 0;
+		if (entry.activeLeases === 0 && entry.pendingAcquires === 0 && !entry.hasOwnedThreads?.()) retireSharedCodexAppServerClientIfCurrent(entry.client);
+	}, CODEX_APP_SERVER_CLIENT_IDLE_GRACE_MS);
+	entry.idleTimer.unref?.();
+}
 function retainSharedClientEntry(entry, counter = "activeLeases") {
 	let released = false;
+	cancelSharedClientIdleRetirement(entry);
 	entry[counter] += 1;
 	return () => {
 		if (released) return;
@@ -147,7 +168,8 @@ function retainSharedClientEntry(entry, counter = "activeLeases") {
 function releaseSharedClientEntry(entry, counter) {
 	entry[counter] -= 1;
 	closeRetiredSharedClientEntryIfIdle(entry);
+	scheduleSharedClientIdleRetirement(entry);
 	notifyDesktopGenerationDrainChecks(getSharedCodexAppServerClientState());
 }
 //#endregion
-export { notifyDesktopGenerationDrainChecks as a, retainSharedClientEntry as c, retireSharedCodexAppServerClientIfCurrent as d, retireSharedCodexAppServerClientsBeforeDesktopGeneration as f, hasActiveSharedCodexAppServerWork as i, retainSharedCodexAppServerClientByInstanceId as l, waitForUnclaimedSharedClientStartup as m, getCurrentSharedClientEntry as n, ownCodexStartup as o, waitForCodexAppServerClientExit as p, getSharedCodexAppServerClientState as r, releaseSharedClientEntry as s, createCodexAppServerStartupLifetime as t, retirePendingSharedClientEntryIfUnclaimed as u };
+export { notifyDesktopGenerationDrainChecks as a, releaseSharedClientEntry as c, retirePendingSharedClientEntryIfUnclaimed as d, retireSharedCodexAppServerClientIfCurrent as f, waitForUnclaimedSharedClientStartup as h, hasActiveSharedCodexAppServerWork as i, retainSharedClientEntry as l, waitForCodexAppServerClientExit as m, getCurrentSharedClientEntry as n, ownCodexStartup as o, retireSharedCodexAppServerClientsBeforeDesktopGeneration as p, getSharedCodexAppServerClientState as r, refreshSharedClientIdleRetirement as s, createCodexAppServerStartupLifetime as t, retainSharedCodexAppServerClientByInstanceId as u };