@openclaw/codex 2026.9.34 → 2026.9.36

package/dist/.setup/{account-usage-runtime-CD8HYWaz.mjs → account-usage-runtime-BOmEegZv.mjs}

@@ -1,8 +1,8 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-B7-X2TgG.mjs";
-import { n as readCodexAppServerUsage } from "./request-DxKAfWyy.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { n as readCodexAppServerUsage } from "./request-DZKa6YSy.mjs";
+import "./config-DqmrqI23.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 import { a as resolveCodexAppServerAuthProfileStore } from "./auth-profile-B0okYl2D.mjs";
 import { isDeepStrictEqual } from "node:util";
 import { listAgentIds, resolveAgentDir } from "openclaw/plugin-sdk/agent-scope-runtime";

package/dist/.setup/{apply-DN-qPbcH.mjs → apply-DhLjXde1.mjs}

@@ -1,14 +1,14 @@
-import { n as isOpenAiCuratedMarketplace, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-Cky2XJUw.mjs";
+import { n as isOpenAiCuratedMarketplace, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-B4uqIw4J.mjs";
 import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
-import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Bs_3kRJD.mjs";
+import { s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-DWIq3Lzf.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BL9B5H0L.mjs";
-import { i as requestCodexAppServerJson } from "./request-DxKAfWyy.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { i as requestCodexAppServerJson } from "./request-DZKa6YSy.mjs";
+import "./config-DqmrqI23.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 import { i as resolveCodexAppServerAuthProfileIdForAgent } from "./auth-profile-B0okYl2D.mjs";
-import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, nt as resolveCodexAppServerAuthAccountCacheKey, o as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-tOOyadmg.mjs";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-cNHRfaxU.mjs";
-import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-DTyFfTkk.mjs";
+import { c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, nt as resolveCodexAppServerAuthAccountCacheKey, o as clearSharedCodexAppServerClientIfCurrentAndWait } from "./shared-client-B__jQti1.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-BaDnJKJd.mjs";
+import { CODEX_PLUGIN_CONFIG_PATH, buildCodexMigrationPlan, buildCodexPluginsConfigValue, hasCodexPluginConfigConflict, n as resolveCodexConfigPatchMode, readCodexPluginMigrationConfigEntry, t as createCodexAuthItemApplier } from "./plan-BB5rf7qh.mjs";
 import { uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import path from "node:path";

package/dist/.setup/{attempt-client-cleanup-93r-CLTi.mjs → attempt-client-cleanup-C9dwStbK.mjs}

@@ -1,16 +1,16 @@
+import { E as readCodexTurnCompletedNotification, a as isCodexAppServerBrokenPipeError, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError } from "./client-BdNoDUaQ.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { d as retireSharedCodexAppServerClientIfCurrent } from "./shared-client-lifecycle-CJ0lYVCW.mjs";
+import { f as retireSharedCodexAppServerClientIfCurrent } from "./shared-client-lifecycle-wN_lOZkB.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
 import { n as waitForPromiseOrAbort, t as abortReason } from "./timeout-CXOfNoaX.mjs";
-import { Y as unsubscribeCodexAppServerLiveThread, mt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-tOOyadmg.mjs";
-import { E as readCodexTurnCompletedNotification, a as isCodexAppServerBrokenPipeError, d as isCodexAppServerRequestTimeoutError, l as isCodexAppServerOverloadError } from "./client-CyquSiJ2.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { Y as unsubscribeCodexAppServerLiveThread, mt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-B__jQti1.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 import { normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { AsyncResource } from "node:async_hooks";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 import { AgentHarnessPreflightError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { redactSensitiveText } from "openclaw/plugin-sdk/logging-core";
+import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/event-projector-items.ts
 const itemStatuses = /* @__PURE__ */ new Map([
 	["completed", "completed"],

package/dist/.setup/{attempt-workspace-context-ejEuxrY1.mjs → attempt-workspace-context-DJrvhJDC.mjs}

@@ -1,5 +1,5 @@
 import { r as flattenCodexDynamicToolFunctions } from "./protocol-CANUwXJ3.mjs";
-import { lt as isMessageOnlyCodexSourceReply } from "./thread-requests-DmkmrGIt.mjs";
+import { lt as isMessageOnlyCodexSourceReply } from "./thread-requests-D-GTNAnZ.mjs";
 import path from "node:path";
 import { buildAgentWorkspaceInstructionSnapshot, buildBootstrapContextForFiles, embeddedAgentLog, prepareAgentWorkspaceContext } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveAgentWorkspaceMemoryRouting, shouldIncludeAgentHarnessRuntimeContext } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";

package/dist/.setup/{auth-binding-BLWz7stm.mjs → auth-binding-Bnaj0_iV.mjs}

@@ -1,5 +1,5 @@
 import { i as isCodexResponsesOAuthCredential, o as resolveCodexResponsesOAuthProfileFingerprint } from "./responses-oauth-twnuTaAa.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 import { resolveApiKeyForProfile } from "openclaw/plugin-sdk/agent-runtime";
 import { fingerprintResolvedAuthProfileCredential } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveOpenAICodexAuthIdentity } from "openclaw/plugin-sdk/provider-auth";

package/dist/.setup/{auth-cache-key-Bs_3kRJD.mjs → auth-cache-key-DWIq3Lzf.mjs}

@@ -1,6 +1,6 @@
-import { n as defineCodexBuildState } from "./build-state--SrHyc6r.mjs";
-import { u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-B6hQ1UKR.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-CbutOIEh.mjs";
+import { n as defineCodexBuildState } from "./build-state-CmeL24P5.mjs";
+import { u as resolveMacOSDesktopCodexAppPathCandidates } from "./managed-binary-Ckgvm_4V.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-DU8dIOCj.mjs";
 import { createHash } from "node:crypto";
 import fs, { constants, existsSync, watch } from "node:fs";
 import path from "node:path";

package/dist/.setup/{binding-connection-DTtN1KrX.mjs → binding-connection-DRPlnIgg.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 //#region extensions/codex/src/app-server/binding-connection.ts
@@ -44,7 +44,7 @@ function requireCodexSupervisionModelSelection(binding) {
 }
 /** Registration publishes the resolver; connection policy loads only for an actual request. */
 async function resolveCodexBindingAppServerConnection(params) {
-	return (await import("./binding-connection.runtime-6TpgD1M6.mjs")).resolveCodexBindingAppServerConnection(params, catalogHomes.tryGetRuntime());
+	return (await import("./binding-connection.runtime-DC3oUqo-.mjs")).resolveCodexBindingAppServerConnection(params, catalogHomes.tryGetRuntime());
 }
 //#endregion
 export { setCodexCatalogConnectionHomeResolver as a, resolveCodexBindingAppServerConnection as i, binding_connection_exports as n, requireCodexSupervisionModelSelection as r, assertCodexSessionRuntimeOwnership as t };

package/dist/.setup/{binding-connection.runtime-6TpgD1M6.mjs → binding-connection.runtime-DC3oUqo-.mjs}

@@ -1,7 +1,7 @@
 import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
 import { n as resolveCodexAppServerLocalHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-BL9B5H0L.mjs";
-import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 //#region extensions/codex/src/app-server/binding-connection.runtime.ts
 /** Resolves connection and auth ownership exclusively from the private thread binding. */
 async function resolveCodexBindingAppServerConnection(params, discoverHomes) {

package/dist/.setup/{bounded-turn-I8Vb-qq3.mjs → bounded-turn-Csc9Qvpm.mjs}

@@ -1,16 +1,16 @@
+import { S as assertCodexTurnStartResponse, T as readCodexErrorNotification, k as createCodexElicitationResponse, x as assertCodexThreadStartResponse } from "./client-BdNoDUaQ.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { a as resolveCodexPrivateLauncher, i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
 import { d as readCodexEffectiveConfig } from "./config-options-CzyWLTJt.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
-import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-tOOyadmg.mjs";
-import { S as assertCodexTurnStartResponse, T as readCodexErrorNotification, k as createCodexElicitationResponse, x as assertCodexThreadStartResponse } from "./client-CyquSiJ2.mjs";
-import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-93r-CLTi.mjs";
-import { t as CodexEphemeralTurn } from "./ephemeral-turn-ksZ9NfsS.mjs";
-import { i as readModelListResult } from "./models-BbEE4EWS.mjs";
-import { R as attestCodexRestrictedToolSurfaceMcpServersDisabled, St as mergeCodexThreadConfigs, l as readCodexInheritedMcpServerNames, n as buildCodexRingZeroThreadConfigPatch, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy } from "./thread-requests-DmkmrGIt.mjs";
-import { S as resolveCodexAppServerReasoningEffort } from "./thread-lifecycle-DcNw9n7E.mjs";
-import { a as resolveCodexPromptError } from "./usage-limit-error-BLnJh1mB.mjs";
+import "./config-DqmrqI23.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
+import { u as isCodexAppServerStartSelectionChangedError } from "./shared-client-B__jQti1.mjs";
+import { o as closeCodexStartupClientBestEffort, s as interruptCodexTurnAndWaitBestEffort, t as CODEX_APP_SERVER_INTERRUPT_TIMEOUT_MS } from "./attempt-client-cleanup-C9dwStbK.mjs";
+import { t as CodexEphemeralTurn } from "./ephemeral-turn-CIcaAzR4.mjs";
+import { i as readModelListResult } from "./models-DXVC1KpU.mjs";
+import { R as attestCodexRestrictedToolSurfaceMcpServersDisabled, St as mergeCodexThreadConfigs, l as readCodexInheritedMcpServerNames, n as buildCodexRingZeroThreadConfigPatch, r as buildCodexRuntimeThreadConfig, t as assertCodexManagedRequirementsDoNotOverrideToolPolicy } from "./thread-requests-D-GTNAnZ.mjs";
+import { S as resolveCodexAppServerReasoningEffort } from "./thread-lifecycle-Cw5Nsciw.mjs";
+import { a as resolveCodexPromptError } from "./usage-limit-error-CpasNGjp.mjs";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import path from "node:path";
@@ -144,7 +144,7 @@ async function runBoundedCodexAppServerTurnInWorkspace(params, appServer, worksp
 		assertCurrent: params.assertCurrent,
 		...params.signal ? { abandonSignal: params.signal } : {}
 	};
-	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-tOOyadmg.mjs").then((n) => n.v).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
+	const client = params.options.clientFactory ? await params.options.clientFactory(clientOptions) : await import("./shared-client-B__jQti1.mjs").then((n) => n.v).then(({ createIsolatedCodexAppServerClient }) => createIsolatedCodexAppServerClient({
 		...clientOptions,
 		authProfileStore: params.authProfileStore
 	}));

package/dist/.setup/{bounded-turn-isolation-B8K_ylqk.mjs → bounded-turn-isolation-Ce-oOk-D.mjs}

@@ -1,8 +1,8 @@
 import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
 import { i as resolveCodexAppServerHomeScope } from "./config-options-CzyWLTJt.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import "./config-DqmrqI23.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 //#region extensions/codex/src/app-server/bounded-turn-isolation.ts
 function resolveCodexBoundedTurnIsolation(options) {
 	const pluginConfig = readCodexPluginConfig(options.pluginConfig);

package/dist/.setup/{build-state--SrHyc6r.mjs → build-state-CmeL24P5.mjs}

@@ -1,5 +1,5 @@
 //#region extensions/codex/package.json
-var version = "2026.9.34";
+var version = "2026.9.36";
 //#endregion
 //#region extensions/codex/src/build-state.ts
 /**

package/dist/.setup/{client-CyquSiJ2.mjs → client-BdNoDUaQ.mjs}

@@ -1,13 +1,12 @@
-import { a as stringifyCodexAppServerMessage, c as isRpcResponse, i as readCodexCatalogDecodeRoute, n as projectCodexCatalogMessage, o as CodexAppServerMessageDecoder, r as listenCodexAppServerLines, s as redactCodexAppServerLinePreview } from "./client-catalog-response-B9pLl58Y.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { c as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, s as CODEX_APP_SERVER_VERSION } from "./managed-binary-B6hQ1UKR.mjs";
-import { a as closeCodexAppServerTransportAndWait, i as closeCodexAppServerTransport, o as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-CbutOIEh.mjs";
+import { c as MIN_SUPPORTED_CODEX_APP_SERVER_VERSION, s as CODEX_APP_SERVER_VERSION } from "./managed-binary-Ckgvm_4V.mjs";
+import { a as closeCodexAppServerTransportAndWait, i as closeCodexAppServerTransport, o as hasCodexAppServerNaturalExit, t as createStdioTransport } from "./transport-stdio-DU8dIOCj.mjs";
 import { n as CodexAppServerRpcError, t as CODEX_APP_SERVER_OVERLOADED_ERROR_CODE } from "./rpc-error-BlD2vuzn.mjs";
-import { f as recordCodexCatalogResponseSource, i as reuseCodexCatalogPreview, o as closeCodexCatalogClientSource, s as codexCatalogSourceForClient } from "./session-catalog-native-projection-DhId_sl8.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { f as recordCodexCatalogResponseSource, i as reuseCodexCatalogPreview, n as projectCodexCatalogNativeResponse, o as closeCodexCatalogClientSource, r as projectCodexCatalogNativeThread, s as codexCatalogSourceForClient } from "./session-catalog-native-projection-C_xvyztm.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 import { codexCatalogPageWorkerEntrypoint } from "../catalog-page-worker-entrypoint.js";
-import { t as createWebSocketTransport } from "./transport-websocket-BTBE-LD9.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { t as createWebSocketTransport } from "./transport-websocket-zu3jRPnu.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { normalizeJsonSchemaForTypeBox } from "openclaw/plugin-sdk/json-schema-runtime";
@@ -20,9 +19,271 @@ import { hasPendingInternalDiagnosticEvent } from "openclaw/plugin-sdk/diagnosti
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { OPENCLAW_VERSION, embeddedAgentLog, formatToolExecutionErrorMessage, normalizeQuestionTimeoutSeconds, resolveToolExecutionErrorKind } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { parse } from "semver";
+import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 import { AsyncWorkScope } from "openclaw/plugin-sdk/concurrency-runtime";
 import { copyInternalToolResultState, runWithAsyncWorkResources } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
 import { Compile } from "typebox/compile";
+//#region extensions/codex/src/app-server/protocol-json.ts
+function isRpcResponse(message) {
+	return message !== null && typeof message === "object" && "id" in message && (typeof message.id === "number" || typeof message.id === "string") && !("method" in message);
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-line-preview.ts
+const CODEX_APP_SERVER_PARSE_LOG_MAX = 500;
+function redactCodexAppServerLinePreview(value) {
+	const redacted = value.replace(/\s+/g, " ").trim().replace(/(Bearer\s+)[A-Za-z0-9._~+/-]+/gi, "$1<redacted>").replace(/("(?:api_?key|authorization|token|access_token|refresh_token)"\s*:\s*")([^"]+)(")/gi, "$1<redacted>$3").replace(/\b([a-z0-9_]*(?:api_?key|authorization|access_token|refresh_token|token))(\s*=\s*)(["']?)[^\s"']+(\3)/gi, "$1$2$3<redacted>$4");
+	return redacted.length > CODEX_APP_SERVER_PARSE_LOG_MAX ? `${truncateUtf16Safe(redacted, CODEX_APP_SERVER_PARSE_LOG_MAX)}...` : redacted;
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-message-decoder.ts
+const PARSE_BUFFER_MAX = 8388608;
+const PARSE_BUFFER_MAX_LINES = 1e3;
+const UNICODE_ESCAPE_QUAD = /^[\da-fA-F]{4}$/u;
+/** Recovers the raw newlines observed inside native JSON string values. */
+var CodexAppServerMessageDecoder = class {
+	constructor(reportError) {
+		this.reportError = reportError;
+	}
+	clear() {
+		this.pending = void 0;
+	}
+	get hasPending() {
+		return this.pending !== void 0;
+	}
+	parse(line) {
+		const rawLine = line.endsWith("\r") ? line.slice(0, -1) : line;
+		if (this.pending) return this.parseContinuation(rawLine, this.pending);
+		const trimmed = rawLine.trim();
+		if (!trimmed) return;
+		try {
+			return JSON.parse(trimmed);
+		} catch (error) {
+			if (isRecoverableParseFailure(trimmed, error)) {
+				const text = rawLine.trimStart();
+				this.pending = {
+					fragments: [text],
+					length: text.length,
+					inString: endsInsideJsonString(text)
+				};
+			} else this.reportError(trimmed, error, 1);
+		}
+	}
+	parseContinuation(line, pending) {
+		pending.fragments.push(line);
+		pending.length += 2 + line.length;
+		const withinBounds = pending.length <= PARSE_BUFFER_MAX && pending.fragments.length <= PARSE_BUFFER_MAX_LINES;
+		if (withinBounds && pending.inString && scanJsonString(line, 0) === line.length) return;
+		const candidate = pending.fragments.join("\\n");
+		this.pending = void 0;
+		try {
+			return JSON.parse(candidate);
+		} catch (error) {
+			if (withinBounds && isRecoverableParseFailure(candidate, error)) {
+				pending.inString = endsInsideJsonString(candidate);
+				this.pending = pending;
+			} else this.reportError(candidate, error, pending.fragments.length);
+		}
+	}
+};
+function isRecoverableParseFailure(value, error) {
+	if (!value.startsWith("{") && !value.startsWith("[")) return false;
+	const message = coerceErrorMessage(error);
+	return message.includes("Unterminated string") || message.includes("Unexpected end of JSON input");
+}
+function endsInsideJsonString(value) {
+	for (let index = 0; index < value.length; index++) {
+		if (value[index] !== "\"") continue;
+		const end = scanJsonString(value, index + 1);
+		if (end < 0) return false;
+		if (end === value.length) return true;
+		index = end;
+	}
+	return false;
+}
+/** Finds a closing quote; incomplete or invalid escapes require native parsing. */
+function scanJsonString(value, start) {
+	for (let index = start; index < value.length; index++) {
+		const character = value[index];
+		if (character === "\"") return index;
+		if (value.charCodeAt(index) < 32) return -1;
+		if (character !== "\\") continue;
+		const escape = value[++index];
+		if (escape === "u") {
+			if (!UNICODE_ESCAPE_QUAD.test(value.slice(index + 1, index + 5))) return -1;
+			index += 4;
+		} else if (!escape || !"\"\\/bfnrt".includes(escape)) return -1;
+	}
+	return value.length;
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-message-frames.ts
+const UNPAIRED_SURROGATE_RE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
+/** One byte reader owns framing and stops at an asynchronous page decode. */
+function listenCodexAppServerLines(input, onLine, onError) {
+	let fragments = [];
+	let length = 0;
+	let remainder;
+	let waiting = false;
+	let ended = false;
+	let closed = false;
+	const close = () => {
+		closed = true;
+		fragments = [];
+		remainder = void 0;
+		input.off("data", onData);
+		input.off("end", onEnd);
+		input.pause();
+	};
+	const deliver = (tail) => {
+		const line = fragments.length ? Buffer.concat([...fragments, tail], length + tail.length) : tail;
+		fragments = [];
+		length = 0;
+		const completion = onLine(line);
+		if (!completion) return true;
+		waiting = true;
+		input.pause();
+		completion.then(() => {
+			waiting = false;
+			if (!closed) {
+				drain();
+				if (!waiting && !ended && !closed) input.resume();
+			}
+		}).catch((error) => {
+			close();
+			onError(error);
+		});
+		return false;
+	};
+	const drain = () => {
+		try {
+			const chunk = remainder;
+			remainder = void 0;
+			if (chunk) {
+				let start = 0;
+				let end;
+				while ((end = chunk.indexOf(10, start)) !== -1) {
+					if (closed) return;
+					remainder = chunk.subarray(end + 1);
+					if (!deliver(chunk.subarray(start, end))) return;
+					remainder = void 0;
+					start = end + 1;
+				}
+				if (!closed && start < chunk.length) {
+					fragments.push(chunk.subarray(start));
+					length += chunk.length - start;
+				}
+			}
+			if (ended && !closed) {
+				if (length && !deliver(Buffer.alloc(0))) return;
+				close();
+			}
+		} catch (error) {
+			close();
+			onError(error);
+		}
+	};
+	const onData = (chunk) => {
+		remainder = chunk;
+		drain();
+	};
+	const onEnd = () => {
+		ended = true;
+		if (!waiting) drain();
+	};
+	input.on("data", onData);
+	input.once("end", onEnd);
+	return close;
+}
+function codexCatalogResponseRoute(id) {
+	return typeof id === "number" && Number.isSafeInteger(id) && id >= 2 ** 52 ? {
+		id,
+		kind: id % 2 === 1 ? "list" : "thread"
+	} : void 0;
+}
+/** Read bounded envelope keys and IDs; skip native payload strings as bytes. */
+function readCodexCatalogDecodeRoute(line) {
+	let depth = 0;
+	let route;
+	let response = false;
+	for (let index = 0; index < line.length; index++) {
+		const byte = line[index];
+		if (byte === 123 || byte === 91) depth++;
+		else if (byte === 125 || byte === 93) depth--;
+		else if (byte === 34) {
+			const start = index;
+			for (;;) {
+				index = line.indexOf(34, index + 1);
+				if (index < 0) return "unresolved";
+				let slash = index - 1;
+				while (line[slash] === 92) slash--;
+				if ((index - slash) % 2 === 1) break;
+			}
+			if (depth !== 1 || index - start > 64) continue;
+			let colon = index + 1;
+			while (line[colon] === 32 || line[colon] === 9 || line[colon] === 13) colon++;
+			if (line[colon] !== 58) continue;
+			const token = line.toString("utf8", start, index + 1);
+			let key = token.slice(1, -1);
+			if (token.includes("\\")) try {
+				key = JSON.parse(token);
+			} catch {
+				return "unresolved";
+			}
+			if (key === "method") return;
+			if (key === "result" || key === "error") {
+				response = true;
+				if (route) return route;
+			}
+			if (key !== "id") continue;
+			const match = /^\s*:\s*(\d+)(?=\s*[,}])/u.exec(line.toString("utf8", index + 1, Math.min(index + 100, line.length)));
+			if (!match) continue;
+			route = codexCatalogResponseRoute(Number(match[1]));
+			if (!route || response) return route;
+		}
+	}
+	return response || route ? "unresolved" : void 0;
+}
+function stringifyCodexAppServerMessage(message) {
+	return JSON.stringify(message, (_key, value) => typeof value === "string" ? value.replace(UNPAIRED_SURROGATE_RE, "") : value) ?? "null";
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-catalog-response.ts
+function projectCodexCatalogMessage(parsed, input, cachedPreview) {
+	const result = {
+		pending: false,
+		failures: []
+	};
+	if (!isJsonObject(parsed)) return result;
+	result.message = parsed;
+	if (!isRpcResponse(parsed)) return result;
+	const message = parsed;
+	const route = codexCatalogResponseRoute(message.id);
+	if (message.error || !route) return result;
+	const remainingRows = input.route === "unresolved" ? input.catalogRows?.has(route.id) ? input.catalogRows.get(route.id) : 0 : input.remainingRows;
+	try {
+		if (!isJsonObject(message.result)) throw new Error("Codex catalog response contains an invalid result");
+		if (route.kind === "list") {
+			const raw = message.result;
+			message.result = projectCodexCatalogNativeResponse(raw, sanitizeTerminalText, cachedPreview, remainingRows);
+			if (!cachedPreview) result.previewStates = Array.isArray(raw.data) ? raw.data.slice(0, Array.isArray(message.result.data) ? message.result.data.length : 0).map((row) => isJsonObject(row) && typeof row.preview === "string" ? Boolean(row.preview) : void 0) : [];
+		} else {
+			const thread = message.result.thread;
+			message.result = { thread: {
+				...projectCodexCatalogNativeThread(thread, sanitizeTerminalText),
+				...isJsonObject(thread) && typeof thread.cwd === "string" ? { cwd: thread.cwd } : {},
+				...isJsonObject(thread) && (thread.historyMode === "paginated" || thread.historyMode === "legacy") ? { historyMode: thread.historyMode } : {}
+			} };
+		}
+	} catch (error) {
+		delete result.message;
+		result.projectionError = {
+			id: route.id,
+			error: error instanceof Error ? error : new Error("Codex catalog projection failed", { cause: error })
+		};
+	}
+	return result;
+}
+//#endregion
 //#region extensions/codex/src/app-server/client-catalog-worker.ts
 const INLINE_CATALOG_MAX_BYTES = 65536;
 const CATALOG_WORKER_IDLE_MS = 6e4;

package/dist/.setup/{command-dispatch-BPLz7tlx.mjs → command-dispatch-9sYDmuIo.mjs}

@@ -9,7 +9,7 @@ async function handleCodexCommand(ctx, options) {
 	};
 	const { resolvePluginConfig, ...subcommandOptions } = options;
 	try {
-		const { handleCodexSubcommand } = await import("./command-handlers-95-WVrcl.mjs");
+		const { handleCodexSubcommand } = await import("./command-handlers-C-uyeN_H.mjs");
 		return await handleCodexSubcommand(commandContext, {
 			...subcommandOptions,
 			pluginConfig: resolvePluginConfig?.() ?? subcommandOptions.pluginConfig

package/dist/.setup/{command-handlers-95-WVrcl.mjs → command-handlers-C-uyeN_H.mjs}

@@ -1,36 +1,36 @@
 import { n as isCodexFastServiceTier } from "./config-utils-D0CXecki.mjs";
-import { o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as findCodexMarketplacePluginSummary, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-Cky2XJUw.mjs";
+import { o as pluginReadParams, r as isOpenAiCuratedMarketplaceName, t as findCodexMarketplacePluginSummary, u as CODEX_PLUGINS_MARKETPLACE_NAME } from "./plugin-inventory-B4uqIw4J.mjs";
+import { b as assertCodexThreadResumeResponse, s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-BdNoDUaQ.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-Bs_3kRJD.mjs";
+import { n as assertCodexBindingMayBeReplaced, r as bindingStoreKey, v as sessionBindingIdentity } from "./session-binding-record-CUKpUKVm.mjs";
+import { c as resolveCodexAppServerPreparedApiKeyCacheKey, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./auth-cache-key-DWIq3Lzf.mjs";
 import { n as withCodexConversationThreadActivity } from "./thread-ownership-queue-Dp24d7-F.mjs";
 import { a as CODEX_HOST_INSPECTION_AUTH_ERROR, c as canMutateCodexHost, i as CODEX_FULL_PERMISSIONS_AUTH_ERROR, l as hasCodexAdminScope, n as filterCodexMarketplacePlugins, o as CODEX_NATIVE_EXECUTION_AUTH_ERROR, r as parseCodexPluginMarketplaceId, s as assertCodexHostOwnerCurrent, t as discoverCodexMarketplacePlugins } from "./plugin-marketplace-discovery-D_dV9FXa.mjs";
 import { l as formatRelativeDuration, s as summarizeCodexAccountUsage } from "./rate-limits-B7-X2TgG.mjs";
 import { a as formatCodexAccountLine, c as formatCodexTextForDisplay, d as formatModels, f as formatSkills, i as formatAccount, l as formatComputerUseStatus, n as buildHelp, o as formatCodexDisplayText, p as formatThreads, r as escapeCodexChatText, s as formatCodexStatus, t as CODEX_RESUME_SAFE_THREAD_ID_PATTERN, u as formatList } from "./command-formatters-R3ckE3Co.mjs";
-import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-C746z5Pn.mjs";
+import { i as readCodexConversationBindingData, n as createCodexCliNodeConversationBindingData, o as resolveCodexDefaultWorkspaceDir, r as createCodexConversationBindingData } from "./conversation-binding-data-DlsG-dQu.mjs";
 import { t as isIncognitoSessionKey } from "./incognito-session-C5ve_-63.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
 import { t as CODEX_CONTROL_METHODS } from "./capabilities-B3WEZl4e.mjs";
-import { o as formatCodexCliSessions } from "./node-cli-sessions-HC4W6FLI.mjs";
+import { o as formatCodexCliSessions } from "./node-cli-sessions-BwhIYgCZ.mjs";
 import { a as defaultCodexAppInventoryCache, r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BL9B5H0L.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DTtN1KrX.mjs";
-import { o as withCodexAppServerJsonClient } from "./request-DxKAfWyy.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DRPlnIgg.mjs";
+import { o as withCodexAppServerJsonClient } from "./request-DZKa6YSy.mjs";
+import "./config-DqmrqI23.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, i as resolveCodexAppServerAuthProfileIdForAgent, n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-B0okYl2D.mjs";
-import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, nt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-tOOyadmg.mjs";
-import { b as assertCodexThreadResumeResponse, s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-CyquSiJ2.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-93r-CLTi.mjs";
-import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-BLWz7stm.mjs";
-import { n as listAllCodexAppServerModels } from "./models-BbEE4EWS.mjs";
-import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-cNHRfaxU.mjs";
-import { n as createCodexSessionGenerationSupersededError, o as resolveCodexSessionBinding } from "./session-binding-DGCYAfvD.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-TTAb-1yF.mjs";
-import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DDban_4i.mjs";
-import { n as resolveCodexNativeSandboxBlock, t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DjCz2eOw.mjs";
-import { i as readCodexComputerUseStatus, r as installCodexComputerUse, t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-Q4ZFn6UH.mjs";
-import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-BDfCWgc_.mjs";
-import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-BEotI-gH.mjs";
+import { F as consumeCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, c as getLeasedSharedCodexAppServerClient, h as releaseLeasedSharedCodexAppServerClient, nt as resolveCodexAppServerAuthAccountCacheKey } from "./shared-client-B__jQti1.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-C9dwStbK.mjs";
+import { n as fingerprintCodexAppServerAuthBinding } from "./auth-binding-Bnaj0_iV.mjs";
+import { n as listAllCodexAppServerModels } from "./models-DXVC1KpU.mjs";
+import { n as refreshCodexAppRuntimeState, r as refreshCodexPluginRuntimeState } from "./plugin-activation-BaDnJKJd.mjs";
+import { n as createCodexSessionGenerationSupersededError, o as resolveCodexSessionBinding } from "./session-binding-Fn7Ekzuv.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-BHr4QsDO.mjs";
+import { a as rollbackCodexAppServerBindingSubscription, c as withExclusiveCodexAppServerThread, i as retireCodexConversationThreadBinding, n as releaseCodexAppServerBindingSubscription, r as retainCodexAppServerBindingSubscription, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Cxb01Uwq.mjs";
+import { n as resolveCodexNativeSandboxBlock, t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-OIYEmTRF.mjs";
+import { i as readCodexComputerUseStatus, r as installCodexComputerUse, t as defaultCodexPluginMetadataCache } from "./plugin-metadata-cache-DuaAXtXC.mjs";
+import { a as requestOptions, i as readCodexStatusProbes, o as safeCodexControlRequest, r as prepareCodexControlSessionAuth, t as codexControlRequest } from "./command-rpc-BHE3OG7z.mjs";
+import { a as setCodexConversationFastMode, c as steerCodexConversationTurn, i as readCodexConversationActiveTurn, l as stopCodexConversationTurn, n as parseCodexFastModeArg, o as setCodexConversationModel, r as parseCodexPermissionsModeArg, s as setCodexConversationPermissions, t as formatPermissionsMode } from "./conversation-control-BWzVNh-v.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { isDeepStrictEqual } from "node:util";

package/dist/.setup/{command-rpc-BDfCWgc_.mjs → command-rpc-BHE3OG7z.mjs}

@@ -1,18 +1,18 @@
+import { c as isCodexAppServerIndeterminateTransportError, l as isCodexAppServerOverloadError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-BdNoDUaQ.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
 import { n as describeControlFailure, t as CODEX_CONTROL_METHODS } from "./capabilities-B3WEZl4e.mjs";
-import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-DxKAfWyy.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { i as requestCodexAppServerJson, o as withCodexAppServerJsonClient } from "./request-DZKa6YSy.mjs";
+import "./config-DqmrqI23.mjs";
+import { n as resolveCodexAppServerRuntimeOptions, r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-DDhvIeUC.mjs";
 import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-B0okYl2D.mjs";
-import { rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-tOOyadmg.mjs";
-import { c as isCodexAppServerIndeterminateTransportError, l as isCodexAppServerOverloadError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-CyquSiJ2.mjs";
-import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-93r-CLTi.mjs";
-import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-BLWz7stm.mjs";
-import { r as listCodexAppServerModels } from "./models-BbEE4EWS.mjs";
-import { n as createCodexSessionGenerationSupersededError } from "./session-binding-DGCYAfvD.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-eo3IhOhh.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-B__jQti1.mjs";
+import { o as closeCodexStartupClientBestEffort } from "./attempt-client-cleanup-C9dwStbK.mjs";
+import { r as prepareCodexAppServerAuthBinding } from "./auth-binding-Bnaj0_iV.mjs";
+import { r as listCodexAppServerModels } from "./models-DXVC1KpU.mjs";
+import { n as createCodexSessionGenerationSupersededError } from "./session-binding-Fn7Ekzuv.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BNdEFZpM.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BuEALwJY.mjs";
 import { resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { prepareAgentRuntimeAuth } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/.setup/{compact-5zzFlH-W.mjs → compact-DsrYq-_j.mjs}

@@ -1,22 +1,22 @@
 import { n as readCodexRuntimeModelId } from "./model-runtime-BdqzOMkU.mjs";
+import { s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-BdNoDUaQ.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
-import { l as retainSharedCodexAppServerClientByInstanceId, p as waitForCodexAppServerClientExit } from "./shared-client-lifecycle-CJ0lYVCW.mjs";
+import { v as sessionBindingIdentity } from "./session-binding-record-CUKpUKVm.mjs";
+import { m as waitForCodexAppServerClientExit, u as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-wN_lOZkB.mjs";
 import { t as isIncognitoSessionKey } from "./incognito-session-C5ve_-63.mjs";
 import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
-import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DTtN1KrX.mjs";
-import { F as consumeCodexAppServerLiveThread, J as revertCodexAppServerLiveThreadSkillsCatalog, M as getCodexInferenceThreadQualification, W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, q as retainCodexAppServerLiveThread, s as createIsolatedCodexAppServerClient } from "./shared-client-tOOyadmg.mjs";
+import { i as resolveCodexBindingAppServerConnection } from "./binding-connection-DRPlnIgg.mjs";
+import { F as consumeCodexAppServerLiveThread, J as revertCodexAppServerLiveThreadSkillsCatalog, M as getCodexInferenceThreadQualification, W as protectCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientIfCurrent, q as retainCodexAppServerLiveThread, s as createIsolatedCodexAppServerClient } from "./shared-client-B__jQti1.mjs";
 import "./responses-oauth-twnuTaAa.mjs";
-import { s as isCodexAppServerIndeterminateRequestCancellationError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-CyquSiJ2.mjs";
-import { b as readCodexNotificationTurnId, l as isCodexNoActiveTurnInterruptError, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError, y as readCodexNotificationThreadId } from "./attempt-client-cleanup-93r-CLTi.mjs";
+import { b as readCodexNotificationTurnId, l as isCodexNoActiveTurnInterruptError, o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError, y as readCodexNotificationThreadId } from "./attempt-client-cleanup-C9dwStbK.mjs";
 import { n as readCodexThreadContextSnapshot, s as readCodexNotificationItem } from "./event-projector-usage-03R0I2dM.mjs";
-import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-DGCYAfvD.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-B9aAqfnU.mjs";
-import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-TTAb-1yF.mjs";
-import { t as resumeCodexAppServerThread } from "./thread-resume-eo3IhOhh.mjs";
-import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-DDban_4i.mjs";
+import { o as resolveCodexSessionBinding, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-Fn7Ekzuv.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-GOGINNw0.mjs";
+import { i as assertCodexSupervisionThreadLineage } from "./thread-policy-BHr4QsDO.mjs";
+import { t as resumeCodexAppServerThread } from "./thread-resume-BNdEFZpM.mjs";
+import { s as withCodexAppServerThreadMutationHold, t as isSameCodexAppServerThreadOwner } from "./thread-ownership-Cxb01Uwq.mjs";
 import { t as persistCodexContextCompactionActivity } from "./context-compaction-activity-CMla5FPJ.mjs";
-import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-DjCz2eOw.mjs";
+import { t as resolveCodexNativeExecutionBlock } from "./sandbox-guard-OIYEmTRF.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { AsyncLocalStorage } from "node:async_hooks";