@openclaw/codex 2026.9.35 → 2026.9.36

package/dist/catalog-page.worker.js

@@ -1,5 +1,342 @@
-import { t as createCodexCatalogDecoder } from "./.setup/client-catalog-response-BcbsrQXY.mjs";
 import { serveWorkerTasks } from "openclaw/plugin-sdk/worker-task-server";
+import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
+import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
+import { coerceErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+//#region extensions/codex/src/app-server/protocol-json.ts
+function isRpcResponse(message) {
+	return message !== null && typeof message === "object" && "id" in message && (typeof message.id === "number" || typeof message.id === "string") && !("method" in message);
+}
+//#endregion
+//#region extensions/codex/src/app-server/protocol.ts
+function isJsonObject(value) {
+	return isRecord(value);
+}
+//#endregion
+//#region extensions/codex/src/session-catalog-limits.ts
+/** Preserve UTF-16 code units without retaining an oversized source string. */
+function detachCodexCatalogString(value) {
+	return Buffer.from(value, "utf16le").toString("utf16le");
+}
+const MAX_CWD_LENGTH = 4096;
+const MAX_SESSION_PREVIEW_LENGTH = 500;
+const SESSION_PREVIEW_PREFIX_LENGTH = 2048;
+function boundedCatalogString(value, maxLength, overflow = "omit") {
+	if (typeof value !== "string") return;
+	const normalized = value.trim();
+	if (!normalized) return;
+	if (normalized.length <= maxLength) return detachCodexCatalogString(normalized);
+	return overflow === "truncate" ? detachCodexCatalogString(truncateUtf16Safe(normalized, maxLength)) : void 0;
+}
+function catalogPreview(value, sanitize) {
+	if (typeof value !== "string") return;
+	return boundedCatalogString(sanitize(value.replace(/\s+/g, " ")), MAX_SESSION_PREVIEW_LENGTH, "truncate");
+}
+/** Select a bounded input only for the canonical terminal sanitizer. */
+function selectCodexCatalogPreviewInput(value) {
+	if (value.length <= SESSION_PREVIEW_PREFIX_LENGTH) return value;
+	const prefix = value.slice(0, SESSION_PREVIEW_PREFIX_LENGTH).replace(/\s+/g, " ").trim();
+	return prefix.length > MAX_SESSION_PREVIEW_LENGTH && !/\p{Cc}/u.test(prefix) ? prefix : value;
+}
+/** Detach the small preview from V8's potentially large sliced-string backing store. */
+function truncateCodexCatalogPreview(value, sanitize) {
+	return Buffer.from(catalogPreview(value, sanitize) ?? "", "utf8").toString("utf8");
+}
+//#endregion
+//#region extensions/codex/package.json
+var version = "2026.9.36";
+//#endregion
+//#region extensions/codex/src/build-state.ts
+/**
+* Duplicate module copies share one immutable published version's state.
+* In-process restarts retain old records and callbacks for their old owners.
+* Local rebuilds without a version bump deliberately share the same state.
+*/
+function codexBuildSymbol(name) {
+	return Symbol.for(`${name}@${version}`);
+}
+function defineCodexBuildState(name, create) {
+	const key = codexBuildSymbol(name);
+	const globalState = globalThis;
+	return () => globalState[key] ??= create();
+}
+//#endregion
+//#region extensions/codex/src/session-catalog-source.ts
+const getSources = defineCodexBuildState("openclaw.codexCatalogSources", () => ({
+	clients: /* @__PURE__ */ new WeakMap(),
+	values: /* @__PURE__ */ new WeakMap()
+}));
+defineCodexBuildState("openclaw.codexCatalogEphemeralObservers", () => /* @__PURE__ */ new WeakMap());
+function getCodexCatalogSource(value) {
+	return value !== null && typeof value === "object" ? getSources().values.get(value) : void 0;
+}
+function setCodexCatalogSource(value, source) {
+	if (source) getSources().values.set(value, source);
+	return value;
+}
+/** Source attribution survives projection without becoming serialized row data. */
+function copyCodexCatalogSource(from, to) {
+	return setCodexCatalogSource(to, getCodexCatalogSource(from));
+}
+const STRING_FIELDS = [
+	[
+		"name",
+		500,
+		"truncate"
+	],
+	[
+		"cwd",
+		MAX_CWD_LENGTH,
+		"omit"
+	],
+	[
+		"modelProvider",
+		500,
+		"truncate"
+	],
+	[
+		"cliVersion",
+		500,
+		"truncate"
+	]
+];
+/** Drop unused native fields before catalog-owned asynchronous work can retain them. */
+function projectCodexCatalogNativeThread(thread, sanitize, cachedPreview) {
+	if (!isJsonObject(thread)) throw new Error("Codex catalog response contains an invalid thread");
+	const id = boundedCatalogString(thread.id, 256);
+	if (!id) throw new Error("Codex catalog response contains an invalid thread id");
+	const row = {
+		id,
+		projectId: boundedCatalogString(thread.projectId, 256, "omit") ?? null
+	};
+	const sessionId = boundedCatalogString(thread.sessionId, 256, "omit");
+	if (sessionId) row.sessionId = sessionId;
+	if (thread.ephemeral === true) return copyCodexCatalogSource(thread, {
+		...row,
+		ephemeral: true
+	});
+	for (const [field, limit, overflow] of STRING_FIELDS) {
+		const value = thread[field];
+		const bounded = boundedCatalogString(value, limit, overflow);
+		if (value === null || bounded !== void 0) row[field] = bounded ?? null;
+	}
+	if (typeof thread.path === "string") {
+		if (thread.path.length > 4096) throw new Error("Codex catalog rollout path exceeds its length limit");
+		row.path = detachCodexCatalogString(thread.path);
+	} else if (thread.path === null) row.path = null;
+	if (typeof thread.originator === "string") row.originator = detachCodexCatalogString(thread.originator.slice(0, 500));
+	for (const field of [
+		"createdAt",
+		"updatedAt",
+		"recencyAt"
+	]) {
+		const value = thread[field];
+		if (value === null || typeof value === "number" && Number.isFinite(value)) row[field] = value;
+	}
+	const rawPreview = thread.preview;
+	const preview = reuseCodexCatalogPreview(row, typeof rawPreview === "string" ? Boolean(rawPreview) : void 0, cachedPreview);
+	if (preview !== void 0) row.preview = preview;
+	else if (typeof rawPreview === "string") row.preview = rawPreview ? truncateCodexCatalogPreview(selectCodexCatalogPreviewInput(rawPreview), sanitize) : "";
+	else if (rawPreview === null) row.preview = null;
+	const source = typeof thread.source === "string" ? detachCodexCatalogString(thread.source.slice(0, 500)) : void 0;
+	if (source === "cli" || source === "vscode" || source === "exec" || source === "appServer" || source === "unknown") row.source = source;
+	else if (isJsonObject(thread.source) && typeof thread.source.custom === "string" && thread.source.custom.length <= 500) row.source = { custom: detachCodexCatalogString(thread.source.custom) };
+	if (isJsonObject(thread.gitInfo)) {
+		const branch = boundedCatalogString(thread.gitInfo.branch, 500, "truncate");
+		if (branch !== void 0) row.gitInfo = { branch };
+	}
+	if (isJsonObject(thread.status)) {
+		const type = boundedCatalogString(thread.status.type, 64);
+		if (type === "active" || type === "idle" || type === "notLoaded" || type === "systemError") {
+			const activeFlags = type === "active" && Array.isArray(thread.status.activeFlags) ? thread.status.activeFlags.slice(0, 16).flatMap((flag) => {
+				const bounded = boundedCatalogString(flag, 128, "omit");
+				return bounded ? [bounded] : [];
+			}) : void 0;
+			row.status = type === "active" ? {
+				type,
+				...activeFlags ? { activeFlags } : {}
+			} : { type };
+		}
+	}
+	return copyCodexCatalogSource(thread, row);
+}
+/** Keep only the admitted prefix before an RPC promise retains its response. */
+function projectCodexCatalogNativeResponse(response, sanitize, cachedPreview, remainingRows = 64) {
+	if (!Array.isArray(response.data) || response.data.length > 64) throw new Error("Codex catalog response exceeds its native page limit");
+	const limit = Number.isFinite(remainingRows) ? Math.max(0, Math.min(64, Math.floor(remainingRows))) : 0;
+	const page = { data: response.data.slice(0, limit).map((thread) => projectCodexCatalogNativeThread(thread, sanitize, cachedPreview)) };
+	for (const field of ["nextCursor", "backwardsCursor"]) {
+		const value = response[field];
+		if (value === null) page[field] = null;
+		else if (value !== void 0) {
+			if (typeof value !== "string" || value.length > 4096) throw new Error("Codex catalog response contains an invalid cursor");
+			page[field] = detachCodexCatalogString(value);
+		}
+	}
+	return page;
+}
+/** Reuse resident text without transferring a cache or an unbounded native preview. */
+function reuseCodexCatalogPreview(thread, rawPreviewNonempty, cachedPreview) {
+	const preview = cachedPreview?.({
+		id: thread.id,
+		path: typeof thread.path === "string" ? thread.path : null,
+		updatedAt: typeof thread.updatedAt === "number" ? thread.updatedAt : null,
+		recencyAt: typeof thread.recencyAt === "number" ? thread.recencyAt : null
+	});
+	return preview !== void 0 && preview.length <= 500 && (rawPreviewNonempty === void 0 || rawPreviewNonempty === Boolean(preview)) ? preview : void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-line-preview.ts
+const CODEX_APP_SERVER_PARSE_LOG_MAX = 500;
+function redactCodexAppServerLinePreview(value) {
+	const redacted = value.replace(/\s+/g, " ").trim().replace(/(Bearer\s+)[A-Za-z0-9._~+/-]+/gi, "$1<redacted>").replace(/("(?:api_?key|authorization|token|access_token|refresh_token)"\s*:\s*")([^"]+)(")/gi, "$1<redacted>$3").replace(/\b([a-z0-9_]*(?:api_?key|authorization|access_token|refresh_token|token))(\s*=\s*)(["']?)[^\s"']+(\3)/gi, "$1$2$3<redacted>$4");
+	return redacted.length > CODEX_APP_SERVER_PARSE_LOG_MAX ? `${truncateUtf16Safe(redacted, CODEX_APP_SERVER_PARSE_LOG_MAX)}...` : redacted;
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-message-decoder.ts
+const PARSE_BUFFER_MAX = 8388608;
+const PARSE_BUFFER_MAX_LINES = 1e3;
+const UNICODE_ESCAPE_QUAD = /^[\da-fA-F]{4}$/u;
+/** Recovers the raw newlines observed inside native JSON string values. */
+var CodexAppServerMessageDecoder = class {
+	constructor(reportError) {
+		this.reportError = reportError;
+	}
+	clear() {
+		this.pending = void 0;
+	}
+	get hasPending() {
+		return this.pending !== void 0;
+	}
+	parse(line) {
+		const rawLine = line.endsWith("\r") ? line.slice(0, -1) : line;
+		if (this.pending) return this.parseContinuation(rawLine, this.pending);
+		const trimmed = rawLine.trim();
+		if (!trimmed) return;
+		try {
+			return JSON.parse(trimmed);
+		} catch (error) {
+			if (isRecoverableParseFailure(trimmed, error)) {
+				const text = rawLine.trimStart();
+				this.pending = {
+					fragments: [text],
+					length: text.length,
+					inString: endsInsideJsonString(text)
+				};
+			} else this.reportError(trimmed, error, 1);
+		}
+	}
+	parseContinuation(line, pending) {
+		pending.fragments.push(line);
+		pending.length += 2 + line.length;
+		const withinBounds = pending.length <= PARSE_BUFFER_MAX && pending.fragments.length <= PARSE_BUFFER_MAX_LINES;
+		if (withinBounds && pending.inString && scanJsonString(line, 0) === line.length) return;
+		const candidate = pending.fragments.join("\\n");
+		this.pending = void 0;
+		try {
+			return JSON.parse(candidate);
+		} catch (error) {
+			if (withinBounds && isRecoverableParseFailure(candidate, error)) {
+				pending.inString = endsInsideJsonString(candidate);
+				this.pending = pending;
+			} else this.reportError(candidate, error, pending.fragments.length);
+		}
+	}
+};
+function isRecoverableParseFailure(value, error) {
+	if (!value.startsWith("{") && !value.startsWith("[")) return false;
+	const message = coerceErrorMessage(error);
+	return message.includes("Unterminated string") || message.includes("Unexpected end of JSON input");
+}
+function endsInsideJsonString(value) {
+	for (let index = 0; index < value.length; index++) {
+		if (value[index] !== "\"") continue;
+		const end = scanJsonString(value, index + 1);
+		if (end < 0) return false;
+		if (end === value.length) return true;
+		index = end;
+	}
+	return false;
+}
+/** Finds a closing quote; incomplete or invalid escapes require native parsing. */
+function scanJsonString(value, start) {
+	for (let index = start; index < value.length; index++) {
+		const character = value[index];
+		if (character === "\"") return index;
+		if (value.charCodeAt(index) < 32) return -1;
+		if (character !== "\\") continue;
+		const escape = value[++index];
+		if (escape === "u") {
+			if (!UNICODE_ESCAPE_QUAD.test(value.slice(index + 1, index + 5))) return -1;
+			index += 4;
+		} else if (!escape || !"\"\\/bfnrt".includes(escape)) return -1;
+	}
+	return value.length;
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-message-frames.ts
+function codexCatalogResponseRoute(id) {
+	return typeof id === "number" && Number.isSafeInteger(id) && id >= 2 ** 52 ? {
+		id,
+		kind: id % 2 === 1 ? "list" : "thread"
+	} : void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/client-catalog-response.ts
+/** The worker retains recovery fragments, but never a completed native page. */
+function createCodexCatalogDecoder() {
+	let failures = [];
+	const decoder = new CodexAppServerMessageDecoder((value, error, fragmentCount) => {
+		failures.push({
+			value: redactCodexAppServerLinePreview(value),
+			error,
+			fragmentCount
+		});
+	});
+	return (input) => {
+		failures = [];
+		const result = projectCodexCatalogMessage(decoder.parse(Buffer.from(input.bytes.buffer, input.bytes.byteOffset, input.bytes.byteLength).toString("utf8")), input);
+		result.pending = decoder.hasPending;
+		result.failures = failures;
+		return result;
+	};
+}
+function projectCodexCatalogMessage(parsed, input, cachedPreview) {
+	const result = {
+		pending: false,
+		failures: []
+	};
+	if (!isJsonObject(parsed)) return result;
+	result.message = parsed;
+	if (!isRpcResponse(parsed)) return result;
+	const message = parsed;
+	const route = codexCatalogResponseRoute(message.id);
+	if (message.error || !route) return result;
+	const remainingRows = input.route === "unresolved" ? input.catalogRows?.has(route.id) ? input.catalogRows.get(route.id) : 0 : input.remainingRows;
+	try {
+		if (!isJsonObject(message.result)) throw new Error("Codex catalog response contains an invalid result");
+		if (route.kind === "list") {
+			const raw = message.result;
+			message.result = projectCodexCatalogNativeResponse(raw, sanitizeTerminalText, cachedPreview, remainingRows);
+			if (!cachedPreview) result.previewStates = Array.isArray(raw.data) ? raw.data.slice(0, Array.isArray(message.result.data) ? message.result.data.length : 0).map((row) => isJsonObject(row) && typeof row.preview === "string" ? Boolean(row.preview) : void 0) : [];
+		} else {
+			const thread = message.result.thread;
+			message.result = { thread: {
+				...projectCodexCatalogNativeThread(thread, sanitizeTerminalText),
+				...isJsonObject(thread) && typeof thread.cwd === "string" ? { cwd: thread.cwd } : {},
+				...isJsonObject(thread) && (thread.historyMode === "paginated" || thread.historyMode === "legacy") ? { historyMode: thread.historyMode } : {}
+			} };
+		}
+	} catch (error) {
+		delete result.message;
+		result.projectionError = {
+			id: route.id,
+			error: error instanceof Error ? error : new Error("Codex catalog projection failed", { cause: error })
+		};
+	}
+	return result;
+}
+//#endregion
 //#region extensions/codex/catalog-page.worker.ts
 const decode = createCodexCatalogDecoder();
 serveWorkerTasks((input) => {

package/dist/cli-metadata.js

@@ -2,7 +2,7 @@ import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 //#region extensions/codex/cli-metadata.ts
 function registerCodexCliMetadata(api) {
 	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./.setup/session-cli-C3GejWcm.mjs");
+		const { registerCodexSessionCli } = await import("./.setup/session-cli-B5RvT_Rs.mjs");
 		registerCodexSessionCli(program);
 	}, { descriptors: [{
 		name: "codex",

package/dist/harness.js

@@ -1,7 +1,7 @@
 import { CODEX_NATIVE_TOOL_REQUIREMENTS } from "./native-tool-policy.js";
 import { n as readCodexRuntimeModelId } from "./.setup/model-runtime-BdqzOMkU.mjs";
 import { v as sessionBindingIdentity } from "./.setup/session-binding-record-CUKpUKVm.mjs";
-import { t as codexBuildSymbol } from "./.setup/build-state-B3lvV1Op.mjs";
+import { t as codexBuildSymbol } from "./.setup/build-state-CmeL24P5.mjs";
 import { resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/codex/harness.ts
 const DEFAULT_CODEX_HARNESS_PROVIDER_IDS = /* @__PURE__ */ new Set(["codex", "openai"]);
@@ -108,7 +108,7 @@ function createCodexAppServerAgentHarness(options) {
 			executionEnvironment: "host-only",
 			upstreamKinds: ["codex-app-server"],
 			fork: async (params) => {
-				const { forkCodexUpstreamSession } = await import("./.setup/upstream-session-fork-2ipYynVl.mjs");
+				const { forkCodexUpstreamSession } = await import("./.setup/upstream-session-fork-D8rqW9ad.mjs");
 				return await forkCodexUpstreamSession(params, {
 					bindingStore: options.bindingStore,
 					controlFactory: sessionCatalogControlFactory,
@@ -130,18 +130,18 @@ function createCodexAppServerAgentHarness(options) {
 			return validateCodexAppServerRuntimeArtifact(binding, void 0, resolveCodexAppServerRuntimeOptions({ pluginConfig: resolveAttemptPluginConfig(options.resolveConfig?.()) }).start);
 		} },
 		fetchUsageSnapshot: async (ctx) => {
-			const { fetchCodexAppServerUsageSnapshot } = await import("./.setup/usage-BgB8DOas.mjs");
+			const { fetchCodexAppServerUsageSnapshot } = await import("./.setup/usage-D_W8Be4u.mjs");
 			return await fetchCodexAppServerUsageSnapshot(ctx, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		loadModelCatalog: async (params) => {
-			const { createCodexAppServerModelCatalog } = await import("./.setup/model-catalog-DxSrOSY0.mjs");
+			const { createCodexAppServerModelCatalog } = await import("./.setup/model-catalog-CbhJ0pMa.mjs");
 			if (disposed) return { entries: [] };
 			modelCatalog ??= createCodexAppServerModelCatalog(harnessRuntimeId);
 			return { entries: await modelCatalog.load(params, resolveAttemptPluginConfig(params.config)) };
 		},
 		readModelCatalogReadiness: (params) => modelCatalog?.read(params, resolveAttemptPluginConfig(params.config)),
 		loadMcpToolCatalog: async (params) => {
-			const { loadCodexEffectiveMcpCatalog } = await import("./.setup/effective-mcp-catalog-BFJCwjSI.mjs");
+			const { loadCodexEffectiveMcpCatalog } = await import("./.setup/effective-mcp-catalog-BYzIV1DD.mjs");
 			return await loadCodexEffectiveMcpCatalog(params, { bindingStore: options.bindingStore });
 		},
 		supports: (ctx) => {
@@ -184,7 +184,7 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./.setup/run-attempt-ypT0LYSD.mjs");
+			const { runCodexAppServerAttempt } = await import("./.setup/run-attempt-EMGdmQqt.mjs");
 			const { planCodexCyberEscalation, readCodexCyberAttemptVerdict, recordCodexCyberTargetUnavailable, reserveCodexCyberProbe, resolveCodexCyberFailoverConfig } = await import("./.setup/cyber-failover-XV0nNRZu.mjs");
 			const { emitCodexCyberNotice } = await import("./.setup/cyber-failover-notice-RNpGpTyP.mjs");
 			const pluginConfig = resolveAttemptPluginConfig(params.config);
@@ -250,7 +250,7 @@ function createCodexAppServerAgentHarness(options) {
 				const { runHostPreparedIsolatedCompletion } = await import("openclaw/plugin-sdk/simple-completion-runtime");
 				return runHostPreparedIsolatedCompletion(params);
 			}
-			const { runCodexIsolatedCompletion } = await import("./.setup/isolated-completion-GB52W-qA.mjs");
+			const { runCodexIsolatedCompletion } = await import("./.setup/isolated-completion-DLV0kBu2.mjs");
 			return runCodexIsolatedCompletion(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runIsolatedCompletion: async (params) => {
@@ -266,11 +266,11 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		finalizeSettledTurn: async (params) => {
-			const { runCodexSettledTurnFinalization } = await import("./.setup/settled-turn-finalizer-w92T5Rbb.mjs");
+			const { runCodexSettledTurnFinalization } = await import("./.setup/settled-turn-finalizer-BzVjkwgJ.mjs");
 			return runCodexSettledTurnFinalization(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./.setup/side-question-BBZJibHK.mjs");
+			const { runCodexAppServerSideQuestion } = await import("./.setup/side-question-B25zswMS.mjs");
 			return runCodexAppServerSideQuestion(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -281,25 +281,25 @@ function createCodexAppServerAgentHarness(options) {
 		},
 		compact: async (params) => {
 			const admittedParams = requireCodexCompactionCapabilities(params);
-			const { maybeCompactCodexAppServerSession } = await import("./.setup/compact-BNKuKa7o.mjs");
+			const { maybeCompactCodexAppServerSession } = await import("./.setup/compact-DsrYq-_j.mjs");
 			return maybeCompactCodexAppServerSession(admittedParams, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig
 			});
 		},
 		withSessionDeletion: async (params, run) => {
-			const { withCodexAppServerSessionDeletion } = await import("./.setup/session-retirement-CQCMiDul.mjs");
+			const { withCodexAppServerSessionDeletion } = await import("./.setup/session-retirement-Bdygfnxa.mjs");
 			params.assertCurrent();
 			return withCodexAppServerSessionDeletion(options.bindingStore, params, run);
 		},
 		withSessionContextReset: async (params, run) => {
-			const { withCodexAppServerSessionContextReset } = await import("./.setup/session-retirement-CQCMiDul.mjs");
+			const { withCodexAppServerSessionContextReset } = await import("./.setup/session-retirement-Bdygfnxa.mjs");
 			params.assertCurrent();
 			return withCodexAppServerSessionContextReset(options.bindingStore, params, run);
 		},
 		reset: async (params) => {
 			if (params.sessionId && params.reason !== "deleted") {
-				const [{ reclaimCurrentCodexSessionGeneration }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./.setup/session-binding-Fn7Ekzuv.mjs").then((n) => n.s), import("./.setup/session-retirement-CQCMiDul.mjs")]);
+				const [{ reclaimCurrentCodexSessionGeneration }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./.setup/session-binding-Fn7Ekzuv.mjs").then((n) => n.s), import("./.setup/session-retirement-Bdygfnxa.mjs")]);
 				const identity = sessionBindingIdentity({
 					agentId: params.agentId,
 					sessionId: params.sessionId,
@@ -332,7 +332,7 @@ function createCodexAppServerAgentHarness(options) {
 function createCodexAppServerNativeCompaction(options) {
 	return async (params) => {
 		const admittedParams = requireCodexCompactionCapabilities(params);
-		const { maybeCompactCodexAppServerSession } = await import("./.setup/compact-BNKuKa7o.mjs");
+		const { maybeCompactCodexAppServerSession } = await import("./.setup/compact-DsrYq-_j.mjs");
 		return maybeCompactCodexAppServerSession(admittedParams, {
 			bindingStore: options.bindingStore,
 			pluginConfig: options.resolvePluginConfig?.() ?? options.pluginConfig,

package/dist/index.js

@@ -2,7 +2,7 @@ import { registerCodexCliMetadata } from "./cli-metadata.js";
 import { j as CODEX_INTERACTIVE_THREAD_SOURCE_KINDS } from "./.setup/session-catalog-parsing-CnEH565l.mjs";
 import { i as isJsonObject } from "./.setup/protocol-CANUwXJ3.mjs";
 import { f as readCurrentCodexAppServerBinding, h as readCurrentNativePendingAssignments, m as readCurrentCodexNativeSubagentSubmissions, n as assertCodexBindingMayBeReplaced, p as readCurrentCodexAppServerBindings, v as sessionBindingIdentity } from "./.setup/session-binding-record-CUKpUKVm.mjs";
-import { n as defineCodexBuildState } from "./.setup/build-state-B3lvV1Op.mjs";
+import { n as defineCodexBuildState } from "./.setup/build-state-CmeL24P5.mjs";
 import { createCodexAppServerAgentHarness, createCodexAppServerNativeCompaction } from "./harness.js";
 import { buildCodexMediaUnderstandingProvider } from "./media-understanding-provider.js";
 import codexProviderDiscovery from "./provider-discovery.js";
@@ -11,10 +11,10 @@ import { t as assertCodexAppServerConnectionSecurity } from "./.setup/config-sec
 import { d as readCodexPluginConfig } from "./.setup/config-parsing-b088LyhT.mjs";
 import { r as createCodexAppServerConfig, t as codexAppServerStartOptionsKey } from "./.setup/config-options-CzyWLTJt.mjs";
 import { o as setManagedCodexPluginRoot } from "./.setup/managed-binary-Ckgvm_4V.mjs";
-import { l as createCodexDesktopGenerationService, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./.setup/auth-cache-key-CskfconU.mjs";
+import { l as createCodexDesktopGenerationService, s as resolveCodexAppServerFallbackApiKeyCacheKey } from "./.setup/auth-cache-key-DWIq3Lzf.mjs";
 import { n as CODEX_MANAGED_THREAD_NAMESPACE, r as createCodexManagedThreadStore, t as CODEX_MANAGED_THREAD_MAX_ENTRIES } from "./.setup/managed-thread-store-BMqgThVL.mjs";
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./.setup/session-binding-meta-B7aEMU7g.mjs";
-import { p as retireSharedCodexAppServerClientsBeforeDesktopGeneration } from "./.setup/shared-client-lifecycle-BH_y_i8l.mjs";
+import { p as retireSharedCodexAppServerClientsBeforeDesktopGeneration } from "./.setup/shared-client-lifecycle-wN_lOZkB.mjs";
 import { s as createCodexAppServerProcessReaperService } from "./.setup/transport-stdio-DU8dIOCj.mjs";
 import { n as codexNativeProfileRecoveryService } from "./.setup/auth-profile-health-oHizqgye.mjs";
 import { n as withCodexConversationThreadActivity } from "./.setup/thread-ownership-queue-Dp24d7-F.mjs";
@@ -22,14 +22,14 @@ import { c as canMutateCodexHost, n as filterCodexMarketplacePlugins, o as CODEX
 import { o as formatCodexDisplayText } from "./.setup/command-formatters-R3ckE3Co.mjs";
 import { a as readCodexConversationBindingDataRecord, i as readCodexConversationBindingData, o as resolveCodexDefaultWorkspaceDir } from "./.setup/conversation-binding-data-DlsG-dQu.mjs";
 import { t as isIncognitoSessionKey } from "./.setup/incognito-session-C5ve_-63.mjs";
-import { t as buildCodexMigrationProvider } from "./.setup/provider-DUotqBZ6.mjs";
+import { t as buildCodexMigrationProvider } from "./.setup/provider-BEDFjTWv.mjs";
 import { t as CODEX_CONTROL_METHODS } from "./.setup/capabilities-B3WEZl4e.mjs";
 import { t as assertCodexArchiveDescendantsUnowned } from "./.setup/thread-archive-guard-C9frICzX.mjs";
 import { a as createCodexCliSessionNodeInvokePolicies, c as resolveCodexCliSessionForBindingOnNode, i as createCodexCliSessionNodeHostCommands, l as resumeCodexCliSessionOnNode, s as listCodexCliSessionsOnNode } from "./.setup/node-cli-sessions-BwhIYgCZ.mjs";
 import { t as CODEX_CATALOG_MAX_ROWS } from "./.setup/session-catalog-limits-bz5ZvjtY.mjs";
 import { t as CODEX_CATALOG_STATE_NAMESPACE } from "./.setup/session-catalog-index-state-DhLoAnfy.mjs";
-import { i as createCodexSessionCatalogNodeHostCommands, n as createCodexSessionCatalogNodeInvokePolicies, r as createCodexSessionCatalogControl, t as codexSessionCatalogRuntime } from "./.setup/session-catalog-DMagZcW-.mjs";
-import { i as requestCodexAppServerJson } from "./.setup/request-CWERwKIL.mjs";
+import { i as createCodexSessionCatalogNodeHostCommands, n as createCodexSessionCatalogNodeInvokePolicies, r as createCodexSessionCatalogControl, t as codexSessionCatalogRuntime } from "./.setup/session-catalog-apN5C2Oz.mjs";
+import { i as requestCodexAppServerJson } from "./.setup/request-DZKa6YSy.mjs";
 import { t as createCodexWebSearchProviderBase } from "./.setup/web-search-provider.shared-BrZmlqyR.mjs";
 import { normalizePluginsConfig, resolveEffectiveEnableState, resolveLivePluginConfigObject, resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
@@ -46,7 +46,7 @@ import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/codex/src/account-usage.ts
 function registerCodexAccountUsage(api) {
 	api.registerGatewayMethod("codex.accountUsage", async (options) => {
-		const { handleCodexAccountUsage } = await import("./.setup/account-usage-runtime-BaJamBiM.mjs");
+		const { handleCodexAccountUsage } = await import("./.setup/account-usage-runtime-BOmEegZv.mjs");
 		await handleCodexAccountUsage(options);
 	}, { scope: "operator.admin" });
 }
@@ -74,8 +74,8 @@ function createCodexAppServerConnectionHealthService(options) {
 				return;
 			}
 			if (runtime.start.transport !== "websocket") return;
-			const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./.setup/shared-client-ZXKMsK6f.mjs").then((n) => n.v);
-			const { isUnsupportedCodexAppServerVersionError } = await import("./.setup/client-DcTISXe3.mjs").then((n) => n.n);
+			const { getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./.setup/shared-client-B__jQti1.mjs").then((n) => n.v);
+			const { isUnsupportedCodexAppServerVersionError } = await import("./.setup/client-BdNoDUaQ.mjs").then((n) => n.n);
 			if (signal.aborted) return;
 			let leasedClient;
 			try {
@@ -226,7 +226,7 @@ function createCodexCommand(options) {
 				...ctx,
 				gatewayClientScopes: ctx.gatewayClientScopes?.slice()
 			};
-			const { handleCodexCommand } = await import("./.setup/command-dispatch-MOoD3rsD.mjs");
+			const { handleCodexCommand } = await import("./.setup/command-dispatch-9sYDmuIo.mjs");
 			return handleCodexCommand(commandContext, options);
 		}
 	};
@@ -304,7 +304,7 @@ async function handleCodexConversationInboundClaim(event, ctx, options) {
 				});
 				if (nativeExecutionBlock) return { reply: { text: nativeExecutionBlock } };
 				const { getSessionBindingService } = await import("openclaw/plugin-sdk/conversation-binding-runtime");
-				const { runBoundTurnWithMissingThreadRecovery } = await import("./.setup/conversation-binding-CKYGEvcX.mjs");
+				const { runBoundTurnWithMissingThreadRecovery } = await import("./.setup/conversation-binding-CfIcWNVS.mjs");
 				const current = options.bindingStore.read(identity);
 				if (!isCurrentPublicBinding(publicBinding, getSessionBindingService()) || expected && (!current || current.threadId !== expected.threadId || current.conversationStartId !== expected.conversationStartId) || !expected && current && data.start?.id && current.conversationStartId !== data.start.id) return { reply: { text: "This Codex conversation was detached or changed before its message could run." } };
 				return await runBoundTurnWithMissingThreadRecovery({
@@ -338,7 +338,7 @@ async function handleCodexConversationBindingResolved(event, options) {
 	const binding = options.bindingStore.read(identity);
 	assertCodexBindingMayBeReplaced(binding, "clearing a denied conversation binding");
 	if (binding && (!data.start?.id || binding.conversationStartId === data.start.id)) await withCodexConversationThreadActivity(identity.bindingId, async () => {
-		const { retireCodexConversationThreadBinding } = await import("./.setup/thread-ownership-BT_SeSUp.mjs").then((n) => n.o);
+		const { retireCodexConversationThreadBinding } = await import("./.setup/thread-ownership-Cxb01Uwq.mjs").then((n) => n.o);
 		return retireCodexConversationThreadBinding({
 			bindingStore: options.bindingStore,
 			identity,
@@ -394,7 +394,7 @@ function createCodexPluginsTool(options) {
 				if (runtimeConfig() !== config || !isDeepStrictEqual(options.getPluginConfig(), pluginConfig) || !isDeepStrictEqual(codexBindingConnectionSelection(readBinding()), selection)) throw new Error("Codex plugin discovery ownership changed; retry the request.");
 			};
 			const workspaceDir = binding?.cwd?.trim() || options.context.workspaceDir?.trim() || resolveCodexDefaultWorkspaceDir(pluginConfig);
-			const request = options.request ?? (await import("./.setup/command-rpc-kf7Uq4L-.mjs").then((n) => n.n)).codexControlRequest;
+			const request = options.request ?? (await import("./.setup/command-rpc-BHE3OG7z.mjs").then((n) => n.n)).codexControlRequest;
 			const connection = await resolveCodexBindingAppServerConnection({
 				binding,
 				pluginConfig,
@@ -576,7 +576,7 @@ function createCodexThreadsTool(options) {
 			const mayReadRawTranscripts = supervision?.enabled !== true || supervision.allowRawTranscripts === true;
 			if ((action === "fork" || action === "rename" || action === "archive" || action === "unarchive") && supervision?.enabled === true && supervision.allowWriteControls !== true) throw new Error("Codex native thread mutations are disabled for this codex plugin supervision config.");
 			const run = async (archiveAdmission) => {
-				const request = options.request ?? (await import("./.setup/command-rpc-kf7Uq4L-.mjs").then((n) => n.n)).codexControlRequest;
+				const request = options.request ?? (await import("./.setup/command-rpc-BHE3OG7z.mjs").then((n) => n.n)).codexControlRequest;
 				const { isModelSelectionLocked, ModelSelectionLockedError } = await import("openclaw/plugin-sdk/model-session-runtime");
 				const { codexBindingConnectionSelection, resolveCodexBindingAppServerConnection } = await import("./.setup/binding-connection-DRPlnIgg.mjs").then((n) => n.n);
 				const { resolveCodexSupervisionAppServerRuntimeOptions } = await import("./.setup/config-runtime-DDhvIeUC.mjs").then((n) => n.t);
@@ -708,8 +708,8 @@ function createCodexThreadsTool(options) {
 				const usesSupervisionConnection = binding?.connectionScope === "supervision" || admissionPlugin.appServer?.homeScope !== "user" && supervision?.enabled === true;
 				if (attach && usesSupervisionConnection) throw new Error("Supervised Codex forks must stay detached; set attach=false.");
 				const forkOptions = await requestOptions();
-				const { retainCodexAppServerBindingSubscription, rollbackCodexAppServerBindingSubscription } = await import("./.setup/thread-ownership-BT_SeSUp.mjs").then((n) => n.o);
-				const { closeCodexStartupClientBestEffort } = await import("./.setup/attempt-client-cleanup-BVtNsTOE.mjs").then((n) => n.a);
+				const { retainCodexAppServerBindingSubscription, rollbackCodexAppServerBindingSubscription } = await import("./.setup/thread-ownership-Cxb01Uwq.mjs").then((n) => n.o);
+				const { closeCodexStartupClientBestEffort } = await import("./.setup/attempt-client-cleanup-C9dwStbK.mjs").then((n) => n.a);
 				if (attach) {
 					assertCodexBindingMayBeReplaced(binding, "attaching a different native fork");
 					assertThreadIdle(await request(admissionConfig, CODEX_CONTROL_METHODS.readThread, {
@@ -1669,7 +1669,7 @@ function createCodexSupervisionTools(options) {
 }
 //#endregion
 //#region extensions/codex/src/web-search-provider.ts
-const loadCodexWebSearchRuntime = createLazyRuntimeModule(() => import("./.setup/web-search-provider.runtime-BWbZnYAL.mjs"));
+const loadCodexWebSearchRuntime = createLazyRuntimeModule(() => import("./.setup/web-search-provider.runtime-CyRLuVOO.mjs"));
 const CodexWebSearchSchema = {
 	type: "object",
 	properties: { query: {
@@ -1935,7 +1935,7 @@ var codex_default = definePluginEntry({
 			if (endedSessionKey && nextSessionKey && nextSessionKey !== endedSessionKey) return;
 			if (event.nextSessionId?.trim() === event.sessionId.trim()) return;
 			const config = resolveCurrentConfig();
-			const [{ sessionBindingIdentity }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./.setup/session-binding-Fn7Ekzuv.mjs").then((n) => n.s), import("./.setup/session-retirement-CQCMiDul.mjs")]);
+			const [{ sessionBindingIdentity }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./.setup/session-binding-Fn7Ekzuv.mjs").then((n) => n.s), import("./.setup/session-retirement-Bdygfnxa.mjs")]);
 			await retireCodexAppServerSessionGeneration({
 				bindingStore,
 				identity: sessionBindingIdentity({

package/dist/media-understanding-provider.js

@@ -33,7 +33,7 @@ async function describeCodexImages(req, options) {
 	const model = req.model.trim();
 	if (!model) throw new Error("Codex image understanding requires model id.");
 	req.signal?.throwIfAborted();
-	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-DBwLoFDR.mjs");
+	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-Csc9Qvpm.mjs");
 	req.signal?.throwIfAborted();
 	const { text } = await runBoundedCodexAppServerTurn({
 		config: req.cfg,
@@ -73,7 +73,7 @@ async function extractCodexStructured(req, options) {
 	if (req.input.length === 0) throw new Error("Codex structured extraction requires at least one input.");
 	if (!req.input.some((entry) => entry.type === "image")) throw new Error("Codex structured extraction requires at least one image input.");
 	req.signal?.throwIfAborted();
-	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-DBwLoFDR.mjs");
+	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-Csc9Qvpm.mjs");
 	req.signal?.throwIfAborted();
 	const { text } = await runBoundedCodexAppServerTurn({
 		config: req.cfg,

package/dist/migration-provider-api.js

@@ -1 +1 @@
-export { t as buildMigrationProvider } from "./.setup/provider-DUotqBZ6.mjs";
+export { t as buildMigrationProvider } from "./.setup/provider-BEDFjTWv.mjs";