@openclaw/codex 2026.9.4 → 2026.9.5

package/dist/{thread-ownership-BsDRTsyp.js → .setup/thread-ownership-skomxnIt.mjs}

@@ -1,7 +1,7 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.js";
-import { J as retainCodexAppServerLiveThread, U as isCodexAppServerLiveThreadClaimed, _ as retainSharedCodexAppServerClientByInstanceId, q as releaseCodexAppServerLiveThread } from "./shared-client-CscigXXL.js";
-import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.mjs";
+import { U as releaseCodexAppServerLiveThread, W as retainCodexAppServerLiveThread, _ as retainSharedCodexAppServerClientByInstanceId, z as isCodexAppServerLiveThreadClaimed } from "./shared-client-BpTtuLQ5.mjs";
+import { a as closeCodexStartupClientBestEffort, f as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BpYKdTA0.mjs";
 //#region extensions/codex/src/app-server/thread-ownership.ts
 var thread_ownership_exports = /* @__PURE__ */ __exportAll({
 	isSameCodexAppServerThreadOwner: () => isSameCodexAppServerThreadOwner,

package/dist/{thread-policy-BuEQfE0g.js → .setup/thread-policy-Cjs4B8xf.mjs}

@@ -1,5 +1,5 @@
-import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-B57KWPQx.js";
-import { r as requestCodexAppServerClientJson, t as CodexAppServerScopedRequestRejectedError } from "./request-B7hEkBGq.js";
+import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-vXs2929Q.mjs";
+import { r as requestCodexAppServerClientJson, t as CodexAppServerScopedRequestRejectedError } from "./request-BioXJLYa.mjs";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/thread-policy.ts
 /** A refusal, not a failed native write: the ephemeral conversation must stay alive. */

package/dist/{thread-resume-DsDOZpFg.js → .setup/thread-resume-BkNpj9Pz.mjs}

@@ -1,8 +1,10 @@
-import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, y as assertCodexThreadResumeResponse } from "./client-B57KWPQx.js";
-import { t as CodexAppServerRpcError } from "./rpc-error-ttN_QjEm.js";
-import { t as CodexAppServerScopedRequestRejectedError } from "./request-B7hEkBGq.js";
-import { B as forgetCodexWorkspaceReferences, N as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-CscigXXL.js";
-import { d as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DKHzbwt5.js";
+import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, y as assertCodexThreadResumeResponse } from "./client-vXs2929Q.mjs";
+import { i as CodexAppServerRpcError } from "./timeout-DZF05XrR.mjs";
+import { r as publishCodexCatalogResume } from "./session-catalog-events-jMcYfQyd.mjs";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-BioXJLYa.mjs";
+import { F as forgetCodexWorkspaceReferences, rt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-BpTtuLQ5.mjs";
+import { f as unsubscribeCodexThreadBestEffort, i as assertCodexThreadResumeSubscription, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BpYKdTA0.mjs";
+import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/thread-resume.ts
 /** Owns Codex thread/resume subscription safety. */
 /** Resumes one thread, releasing or isolating every possible native subscription. */
@@ -46,6 +48,7 @@ async function resumeCodexAppServerThread(params) {
 		if (error instanceof CodexAppServerUnsafeSubscriptionError) throw error;
 		throw new CodexAppServerUnsafeSubscriptionError(error instanceof Error ? error.message : `Codex thread/resume outcome is indeterminate for ${threadId}`, { cause: error });
 	}
+	await publishCodexCatalogResume(params.client, response, sanitizeTerminalText);
 	return response;
 }
 //#endregion

package/dist/.setup/timeout-DZF05XrR.mjs

@@ -0,0 +1,63 @@
+import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { withTimeout } from "openclaw/plugin-sdk/time-runtime";
+//#region extensions/codex/src/app-server/rpc-error.ts
+const CODEX_APP_SERVER_OVERLOADED_ERROR_CODE = -32001;
+/** RPC error wrapper that preserves app-server error code and data. */
+var CodexAppServerRpcError = class extends Error {
+	constructor(error, method) {
+		super(formatCodexAppServerRpcErrorMessage(error, method));
+		this.name = "CodexAppServerRpcError";
+		this.code = error.code;
+		this.data = error.data;
+		this.method = method;
+	}
+};
+function isCodexThreadReadMissingError(error, threadId) {
+	return error instanceof CodexAppServerRpcError && error.method === "thread/read" && error.code === -32600 && error.message === `thread not loaded: ${threadId}`;
+}
+function formatCodexAppServerRpcErrorMessage(error, method) {
+	const message = error.message || `${method} failed`;
+	const detail = readCodexAppServerRpcReloginDetail(error.data);
+	return detail && !message.includes(detail) ? `${message}: ${detail}` : message;
+}
+function readCodexAppServerRpcReloginDetail(data) {
+	const record = isJsonObject(data) ? data : void 0;
+	const nested = isJsonObject(record?.error) ? record.error : record;
+	if (!nested) return;
+	const isRelogin = nested.action === "relogin" || nested.reason === "cloudRequirements" && nested.errorCode === "Auth";
+	const detail = typeof nested.detail === "string" ? nested.detail.trim() : "";
+	return isRelogin && detail ? detail : void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/timeout.ts
+/**
+* Thin Codex app-server timeout adapter around OpenClaw's shared timeout helper.
+*/
+function resolveAbortError(signal) {
+	return signal.reason instanceof Error ? signal.reason : new Error("Codex app-server operation aborted", { cause: signal.reason });
+}
+/** Awaits a promise with a Codex-specific timeout error message. */
+async function withTimeout$1(promise, timeoutMs, timeoutMessage, createError) {
+	return await withTimeout(promise, timeoutMs, {
+		message: timeoutMessage,
+		...createError ? { createError } : {}
+	});
+}
+/** Bounds an operation by both its owner lifecycle and one total wall-clock budget. */
+async function withAbortableTimeout(params) {
+	const signal = params.signal;
+	if (signal?.aborted) throw resolveAbortError(signal);
+	let removeAbortListener;
+	const operation = signal ? Promise.race([params.promise, new Promise((_, reject) => {
+		const onAbort = () => reject(resolveAbortError(signal));
+		signal.addEventListener("abort", onAbort, { once: true });
+		removeAbortListener = () => signal.removeEventListener("abort", onAbort);
+	})]) : params.promise;
+	try {
+		return await withTimeout$1(operation, params.timeoutMs, params.timeoutMessage, params.createTimeoutError);
+	} finally {
+		removeAbortListener?.();
+	}
+}
+//#endregion
+export { isCodexThreadReadMissingError as a, CodexAppServerRpcError as i, withTimeout$1 as n, CODEX_APP_SERVER_OVERLOADED_ERROR_CODE as r, withAbortableTimeout as t };

package/dist/{transcript-history-projection-v17wXgdK.js → .setup/transcript-history-projection-DHNBDhCU.mjs}

@@ -1,5 +1,6 @@
-import { c as itemName, l as itemStatus, t as auditNativeToolName } from "./event-projector-items-5VhsECCO.js";
-import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
+import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
+import { c as itemName, l as itemStatus, t as auditNativeToolName } from "./event-projector-items-DyTQ_XqL.mjs";
+import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf8Prefix } from "openclaw/plugin-sdk/text-utility-runtime";
 import { Buffer } from "node:buffer";
@@ -82,6 +83,7 @@ function projectCodexThreadHistory(params) {
 		if (!text || !role) continue;
 		const phase = item.phase === "commentary" || item.phase === "final_answer" ? item.phase : void 0;
 		const asyncDelivery = item.delivery === "async";
+		const questions = asyncDelivery ? readCodexAsyncQuestions(item.questions) : void 0;
 		const message = role === "assistant" ? attachCodexMirrorIdentity({
 			role,
 			content: [{
@@ -95,7 +97,10 @@ function projectCodexThreadHistory(params) {
 			stopReason: turn.status === "interrupted" ? "aborted" : turn.status === "failed" ? "error" : "stop",
 			...turn.status === "failed" && turn.error?.message ? { errorMessage: turn.error.message } : {},
 			...phase ? { phase } : {},
-			...asyncDelivery && itemId ? { openclawAsyncDelivery: { itemId } } : {},
+			...asyncDelivery && itemId ? { openclawAsyncDelivery: {
+				itemId,
+				...questions ? { questions } : {}
+			} } : {},
 			timestamp
 		}, identity) : attachCodexMirrorIdentity({
 			role,

package/dist/{transcript-mirror-C5CKgNy6.js → .setup/transcript-mirror-D4qp_leP.mjs}

@@ -1,7 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
-import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-v17wXgdK.js";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-DibE0krH.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
+import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DHNBDhCU.mjs";
+import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-CzM-94NC.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, restorePreparedUserTurnOperationalMetaForRuntime, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { withCodexSessionTranscriptMirrorWriteLock } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
@@ -187,6 +188,7 @@ async function mirrorPromptAtTurnStartBestEffort(params) {
 		const mirrorPromise = (async () => {
 			const userPromptMessage = projectAgentHarnessTranscriptMessageForDisplay({
 				hidden: params.params.trigger === "memory",
+				inputProvenance: params.params.inputProvenance,
 				message: attachUpstreamUserText(attachCodexMirrorIdentity(await buildResolvedCodexUserPromptMessage(params.params), `${params.turnId}:prompt`), params.upstreamUserText)
 			});
 			const recorder = params.params.userTurnTranscriptRecorder;
@@ -298,6 +300,7 @@ async function mirror(params) {
 				preparedUserMessage.content = structuredClone(preparedUserMessage.content);
 				preparedUserMessage["__openclaw"].humanMentions = structuredClone(preparedUserMessage["__openclaw"].humanMentions);
 			}
+			const asyncSourceText = message.role === "assistant" && message.openclawAsyncDelivery ? readMirroredAssistantText(message) : void 0;
 			const nextMessage = runAgentHarnessBeforeMessageWriteHook({
 				message: transcriptMessage,
 				agentId: params.agentId,
@@ -319,7 +322,13 @@ async function mirror(params) {
 			} : attachCodexMirrorAttestation(restoredMessage, sourceFingerprint);
 			if (mirrorIdentity) messageToAppend = attachCodexMirrorIdentity(messageToAppend, mirrorIdentity);
 			if (ownsRun && params.runId) messageToAppend = attachCodexMirrorRunId(messageToAppend, params.runId, ownsTerminal, terminalOwner?.settlementWarning);
-			if (message.role === "assistant" && message.openclawAsyncDelivery) messageToAppend = Object.assign(messageToAppend, { openclawAsyncDelivery: { itemId: message.openclawAsyncDelivery.itemId } });
+			if (message.role === "assistant" && message.openclawAsyncDelivery) {
+				const questions = isMirroredAgentMessage(messageToAppend) && readMirroredAssistantText(messageToAppend) === asyncSourceText ? readCodexAsyncQuestions(messageToAppend.openclawAsyncDelivery?.questions) : void 0;
+				messageToAppend = Object.assign(messageToAppend, { openclawAsyncDelivery: {
+					itemId: message.openclawAsyncDelivery.itemId,
+					...questions ? { questions } : {}
+				} });
+			}
 			messageToAppend = applyCodexTranscriptTaint(messageToAppend, taint);
 			messageToAppend = projectAgentHarnessTranscriptMessageForDisplay({
 				hidden: message.display === false,
@@ -460,4 +469,4 @@ function resolveCodexMirrorTranscriptTarget(params) {
 	};
 }
 //#endregion
-export { transcript_mirror_exports as a, mirrorPromptAtTurnStartBestEffort as i, createCodexAppServerUserMessagePersistenceNotifier as n, buildCodexUserPromptMessage as o, importCodexThreadHistoryToTranscript as r, promptSnapshot as s, codexTranscriptMirrorRuntime as t };
+export { transcript_mirror_exports as a, promptSnapshot as c, mirrorPromptAtTurnStartBestEffort as i, createCodexAppServerUserMessagePersistenceNotifier as n, buildCodexUserPromptMessage as o, importCodexThreadHistoryToTranscript as r, buildResolvedCodexUserPromptMessage as s, codexTranscriptMirrorRuntime as t };

package/dist/{transcript-mirror-attestation-DibE0krH.js → .setup/transcript-mirror-attestation-CzM-94NC.mjs}

@@ -1,4 +1,5 @@
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
+import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
+import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/transcript-mirror-attestation.ts
@@ -71,9 +72,11 @@ function readCodexMirrorSourceFingerprint(message) {
 }
 function serializeCodexMirrorSourceEvidence(message) {
 	const content = "content" in message ? message.content : void 0;
+	const questions = isMirroredAgentMessage(message) ? readCodexAsyncQuestions(message.openclawAsyncDelivery?.questions) : void 0;
 	return JSON.stringify({
 		role: message.role,
 		content,
+		...questions ? { questions } : {},
 		...message.role === "user" ? { upstreamUserText: readUpstreamUserText(message) } : {},
 		...message.role === "toolResult" ? {
 			toolCallId: message.toolCallId,

package/dist/{transport-stdio-BGjHoYLr.js → .setup/transport-stdio-Cmx94Oiy.mjs}

@@ -1,7 +1,9 @@
-import { n as normalizeCodexAppServerArgs } from "./launch-args-RXQwn8zV.js";
+import { r as normalizeCodexAppServerArgs } from "./launch-args-DnMak49W.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { z } from "zod";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
+import { closeSync, constants, openSync, readSync } from "node:fs";
+import path from "node:path";
 import { readFile, readdir } from "node:fs/promises";
 import { once } from "node:events";
 import { execFile, spawn } from "node:child_process";
@@ -15,6 +17,32 @@ function isDeadProcessState(state) {
 const PROCESS_COLUMNS = "pid=,ppid=,pgid=,stat=,lstart=";
 const MAX_PROCESS_CONTAINMENT_MS$1 = 2e3;
 const PROCESS_INSPECTION_MAX_BYTES = 8388608;
+const PROCFS_COMMAND_PERMISSION_EXIT = 77;
+const PROCFS_COMMAND_READER = `
+const fs = require("node:fs");
+const [pid, maxBytes] = process.argv.slice(-2).map(Number);
+try {
+  const fd = fs.openSync("/proc/" + pid + "/cmdline", "r");
+  const buffer = Buffer.alloc(4096);
+  const chunks = [];
+  let bytes = 0;
+  try {
+    for (;;) {
+      const count = fs.readSync(fd, buffer, 0, Math.min(buffer.length, maxBytes - bytes + 1), null);
+      if (count === 0) break;
+      bytes += count;
+      if (bytes > maxBytes) throw new Error("Command byte limit exceeded");
+      chunks.push(Buffer.from(buffer.subarray(0, count)));
+    }
+  } finally {
+    fs.closeSync(fd);
+  }
+  process.stdout.end(Buffer.concat(chunks, bytes));
+} catch (error) {
+  process.exitCode = ["EACCES", "EPERM", "ERR_ACCESS_DENIED"].includes(error?.code)
+    ? ${PROCFS_COMMAND_PERMISSION_EXIT} : 1;
+}
+`;
 var ProcessInspectionError = class extends Error {
 	constructor(reason) {
 		const detail = {
@@ -56,17 +84,11 @@ async function readCodexAppServerProcessCommand(observed, deadline) {
 	if (process.platform === "linux") {
 		let pending = false;
 		do {
-			const remainingMs = deadline - Date.now();
-			if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
-			let command;
-			try {
-				command = await readFile(`/proc/${observed.pid}/cmdline`, {
-					encoding: "utf8",
-					signal: AbortSignal.timeout(remainingMs)
-				});
-			} catch (error) {
-				throw inspectionFailure(error);
-			}
+			if (deadline - Date.now() <= 0) throw new ProcessInspectionError("deadline");
+			const command = await readProcessOutput({
+				kind: "procfs-command",
+				pid: observed.pid
+			}, deadline);
 			if (!command || pending) {
 				const current = await readCodexAppServerProcess(observed.pid, deadline);
 				if (!current || current.startedAt !== observed.startedAt || current.ppid !== observed.ppid || current.pgid !== observed.pgid || current.state.startsWith("Z")) throw new ProcessInspectionError("unavailable");
@@ -75,20 +97,26 @@ async function readCodexAppServerProcessCommand(observed, deadline) {
 			pending = command.length === 0;
 			if (pending) await setImmediate();
 		} while (pending);
-	} else output = (await readProcessOutput([
-		"-o",
-		"command=",
-		"-p",
-		String(observed.pid)
-	], deadline)).split("\n")[0]?.trim() ?? "";
+	} else output = (await readProcessOutput({
+		kind: "ps",
+		args: [
+			"-o",
+			"command=",
+			"-p",
+			String(observed.pid)
+		]
+	}, deadline)).split("\n")[0]?.trim() ?? "";
 	if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
 	if (!output) throw new ProcessInspectionError("unavailable");
 	return output;
 }
 async function readProcesses(args, deadline, selected = false) {
-	return parseProcesses(await readProcessOutput(args, deadline), selected);
+	return parseProcesses(await readProcessOutput({
+		kind: "ps",
+		args
+	}, deadline), selected);
 }
-async function readProcessOutput(args, deadline) {
+async function readProcessOutput(command, deadline) {
 	const remainingMs = deadline - Date.now();
 	if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
 	return await new Promise((resolve, reject) => {
@@ -100,16 +128,24 @@ async function readProcessOutput(args, deadline) {
 			if (output instanceof ProcessInspectionError) reject(output);
 			else resolve(output);
 		};
-		const inspector = execFile("ps", args, {
+		const procfs = command.kind === "procfs-command";
+		const inspector = execFile(procfs ? process.execPath : "ps", procfs ? [
+			...process.versions.bun ? ["--no-env-file", "--config=/dev/null"] : [],
+			"-e",
+			PROCFS_COMMAND_READER,
+			String(command.pid),
+			String(PROCESS_INSPECTION_MAX_BYTES)
+		] : command.args, {
 			encoding: "utf8",
 			maxBuffer: PROCESS_INSPECTION_MAX_BYTES,
-			env: {
+			cwd: procfs ? "/" : void 0,
+			env: procfs ? {} : {
 				...process.env,
 				LC_ALL: "C",
 				TZ: "UTC"
 			}
 		}, (error, stdout) => {
-			settle(Date.now() >= deadline ? new ProcessInspectionError("deadline") : error ? inspectionFailure(error) : stdout);
+			settle(Date.now() >= deadline ? new ProcessInspectionError("deadline") : error ? procfs && error.code === PROCFS_COMMAND_PERMISSION_EXIT ? new ProcessInspectionError("permission") : inspectionFailure(error) : stdout);
 		});
 		const timer = setTimeout(() => {
 			settle(new ProcessInspectionError("deadline"));
@@ -154,6 +190,7 @@ function parseProcesses(output, selected) {
 	return rows;
 }
 async function readLinuxProcesses(selected, deadline) {
+	if (selected !== void 0) return readSelectedLinuxProcesses(selected, deadline);
 	const remainingMs = deadline - Date.now();
 	if (remainingMs <= 0) throw new ProcessInspectionError("deadline");
 	const options = {
@@ -161,9 +198,8 @@ async function readLinuxProcesses(selected, deadline) {
 		signal: AbortSignal.timeout(remainingMs)
 	};
 	try {
-		const bootId = (await readFile("/proc/sys/kernel/random/boot_id", options)).trim();
-		if (!/^[a-f0-9-]{36}$/.test(bootId)) throw new ProcessInspectionError("unavailable");
-		const pids = selected === void 0 ? await readdir("/proc") : selected.map(String);
+		const bootId = parseLinuxBootId(await readFile("/proc/sys/kernel/random/boot_id", options));
+		const pids = await readdir("/proc");
 		const rows = [];
 		let bytes = 0;
 		for (const entry of pids) {
@@ -176,23 +212,81 @@ async function readLinuxProcesses(selected, deadline) {
 			if (stat === void 0) continue;
 			bytes += stat.length;
 			if (bytes > PROCESS_INSPECTION_MAX_BYTES) throw new ProcessInspectionError("unavailable");
-			const commEnd = stat.lastIndexOf(")");
-			const fields = stat.slice(commEnd + 1).trim().split(/\s+/);
-			const ppid = Number(fields[1]);
-			const pgid = Number(fields[2]);
-			const startTicks = fields[19];
-			if (commEnd < 0 || ![ppid, pgid].every(Number.isSafeInteger) || selected !== void 0 && (pgid <= 0 || ppid < 0) || !/^\d+$/.test(startTicks ?? "")) throw new ProcessInspectionError("unavailable");
-			if (pgid > 0) {
-				const threads = Number(fields[17]);
-				if (!/^[1-9]\d*$/.test(fields[17] ?? "") || !Number.isSafeInteger(threads)) throw new ProcessInspectionError("unavailable");
-				rows.push({
-					pid: Number(entry),
-					ppid,
-					pgid,
-					state: `${fields[0]}${threads > 1 ? "l" : ""}`,
-					startedAt: `${bootId}:${startTicks}`
-				});
+			const row = parseLinuxProcess(stat, entry, bootId, false);
+			if (row) rows.push(row);
+		}
+		if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+		return rows;
+	} catch (error) {
+		throw inspectionFailure(error);
+	}
+}
+function parseLinuxBootId(value) {
+	const bootId = value.trim();
+	if (!/^[a-f0-9-]{36}$/.test(bootId)) throw new ProcessInspectionError("unavailable");
+	return bootId;
+}
+function parseLinuxProcess(stat, entry, bootId, selected) {
+	const commEnd = stat.lastIndexOf(")");
+	const fields = stat.slice(commEnd + 1).trim().split(/\s+/);
+	const ppid = Number(fields[1]);
+	const pgid = Number(fields[2]);
+	const startTicks = fields[19];
+	if (commEnd < 0 || ![ppid, pgid].every(Number.isSafeInteger) || selected && (pgid <= 0 || ppid < 0) || !/^\d+$/.test(startTicks ?? "")) throw new ProcessInspectionError("unavailable");
+	if (pgid > 0) {
+		const threads = Number(fields[17]);
+		if (!/^[1-9]\d*$/.test(fields[17] ?? "") || !Number.isSafeInteger(threads)) throw new ProcessInspectionError("unavailable");
+		return {
+			pid: Number(entry),
+			ppid,
+			pgid,
+			state: `${fields[0]}${threads > 1 ? "l" : ""}`,
+			startedAt: `${bootId}:${startTicks}`
+		};
+	}
+}
+/** Known procfs identities must not queue behind unrelated libuv filesystem work. */
+function readSelectedProcFile(file, deadline, maxBytes = PROCESS_INSPECTION_MAX_BYTES) {
+	if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+	const fd = openSync(file, constants.O_RDONLY | constants.O_NONBLOCK);
+	const chunks = [];
+	const buffer = Buffer.alloc(Math.min(4096, maxBytes + 1));
+	let bytes = 0;
+	try {
+		for (;;) {
+			if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+			const count = readSync(fd, buffer, {
+				offset: 0,
+				length: Math.min(buffer.length, maxBytes - bytes + 1),
+				position: null
+			});
+			if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
+			if (count === 0) return Buffer.concat(chunks, bytes);
+			bytes += count;
+			if (bytes > maxBytes) throw new ProcessInspectionError("unavailable");
+			chunks.push(Buffer.from(buffer.subarray(0, count)));
+		}
+	} finally {
+		closeSync(fd);
+	}
+}
+function readSelectedLinuxProcesses(selected, deadline) {
+	try {
+		const bootId = parseLinuxBootId(readSelectedProcFile("/proc/sys/kernel/random/boot_id", deadline).toString("utf8"));
+		const rows = [];
+		let bytes = 0;
+		for (const entry of selected.map(String)) {
+			if (!/^\d+$/.test(entry)) continue;
+			let stat;
+			try {
+				stat = readSelectedProcFile(`/proc/${entry}/stat`, deadline, PROCESS_INSPECTION_MAX_BYTES - bytes);
+			} catch (error) {
+				if (error && typeof error === "object" && "code" in error && (error.code === "ENOENT" || error.code === "ESRCH")) continue;
+				throw error;
 			}
+			bytes += stat.length;
+			const row = parseLinuxProcess(stat.toString("utf8"), entry, bootId, true);
+			if (row) rows.push(row);
 		}
 		if (Date.now() >= deadline) throw new ProcessInspectionError("deadline");
 		return rows;
@@ -665,7 +759,8 @@ const QA_PARENT_PID_ENV = "OPENCLAW_QA_PARENT_PID";
 const DEFAULT_SPAWN_RUNTIME = {
 	platform: process.platform,
 	env: process.env,
-	execPath: process.execPath
+	execPath: process.execPath,
+	isBun: typeof process.versions.bun === "string"
 };
 /** Resolves the concrete command/argv/shell settings used to spawn Codex app-server. */
 function resolveCodexAppServerSpawnInvocation(options, runtime = DEFAULT_SPAWN_RUNTIME) {
@@ -679,6 +774,15 @@ function resolveCodexAppServerSpawnInvocation(options, runtime = DEFAULT_SPAWN_R
 	});
 	const args = normalizeCodexAppServerArgs(options.args);
 	const resolved = materializeWindowsSpawnProgram(program, args);
+	if (runtime.isBun && options.commandSource === "resolved-managed" && resolved.resolution === "direct" && [
+		".cjs",
+		".js",
+		".mjs"
+	].includes(path.extname(resolved.command).toLowerCase())) return {
+		command: runtime.execPath,
+		args: [resolved.command, ...resolved.argv],
+		windowsHide: resolved.windowsHide
+	};
 	return {
 		command: resolved.command,
 		args: resolved.argv,
@@ -727,7 +831,8 @@ async function createStdioTransport(options, baseEnv = process.env, assertCurren
 	const invocation = resolveCodexAppServerSpawnInvocation(options, {
 		platform: process.platform,
 		env,
-		execPath: process.execPath
+		execPath: process.execPath,
+		isBun: typeof process.versions.bun === "string"
 	});
 	const register = await prepareCodexAppServerProcessRegistration();
 	assertCurrent?.();

package/dist/{upstream-session-fork-BZerMte_.js → .setup/upstream-session-fork-D3UKxgVD.mjs}

@@ -1,29 +1,31 @@
-import { l as sessionBindingIdentity } from "./session-binding-record-Bcvslnhf.js";
-import { f as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-CXMq1T-C.js";
-import { a as flattenCodexDynamicToolFunctions, o as isJsonObject, x as readCodexPluginConfig } from "./protocol-5bh1G-H7.js";
-import { _ as assertCodexThreadAcceptsDirectInput, v as assertCodexThreadForkResponse } from "./client-B57KWPQx.js";
-import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.js";
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.js";
-import { i as projectCodexUserItemText } from "./transcript-history-projection-v17wXgdK.js";
-import { n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.js";
-import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-d0eKxy7b.js";
-import { n as readCodexSessionMeta } from "./session-catalog-provenance-D-dIfRAH.js";
-import { t as CodexAppServerScopedRequestRejectedError } from "./request-B7hEkBGq.js";
-import { n as resolveOpenClawExecPolicyForCodexAppServer } from "./config-oIORaQ5T.js";
-import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-D0zGNIHu.js";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-DibE0krH.js";
-import { L as claimCodexAppServerLiveThread, V as hasCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-CscigXXL.js";
-import { $ as codexDynamicToolsFingerprint, C as resolveCodexWebSearchPlan, Et as mergeCodexThreadConfigs, G as checkCodexThreadAppAvailability, H as resolveCodexNativeHookRelayEvents, I as assertCodexNativeHookRelayAllowed, L as buildCodexNativeHookRelayConfig, Ot as shouldBuildCodexPluginThreadConfig, St as buildCodexPluginThreadConfig, X as applyCodexNativeSkillIsolation, Y as parseCodexNativeToolCatalog, Z as resolveCodexNativeSkillIsolation, b as buildCodexThreadConfiguration, nt as fingerprintUserMcpServersConfigPatch, tt as fingerprintJsonObject, w as buildDeveloperInstructions, z as buildCodexNativeHookRelayId } from "./thread-lifecycle-DXl1-I6b.js";
-import "./session-binding-CI8UuilT.js";
-import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError } from "./thread-policy-BuEQfE0g.js";
-import "./thread-ownership-BsDRTsyp.js";
-import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-umd0tgh4.js";
-import { l as isCodexDynamicToolExcluded, n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-BvCUL69A.js";
-import { o as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-context-D44yeDII.js";
-import { n as prepareCodexSessionInitialization } from "./session-initialization-Ct0_Hzmg.js";
-import { createImportedCodexSession } from "./session-history-import-DwyijFI6.js";
+import { p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
+import { m as isJsonObject, p as flattenCodexDynamicToolFunctions } from "./config-security-BRQ2mgW9.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { _ as assertCodexThreadAcceptsDirectInput, v as assertCodexThreadForkResponse } from "./client-vXs2929Q.mjs";
+import { s as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-BsanJ8QG.mjs";
+import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.mjs";
+import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
+import { i as projectCodexUserItemText } from "./transcript-history-projection-DHNBDhCU.mjs";
+import { n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.mjs";
+import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BOxKP7db.mjs";
+import { c as readCodexSessionMeta } from "./session-catalog-events-jMcYfQyd.mjs";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-BioXJLYa.mjs";
+import { n as resolveOpenClawExecPolicyForCodexAppServer } from "./config-CedDWjM-.mjs";
+import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
+import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-CzM-94NC.mjs";
+import { I as hasCodexAppServerLiveThread, M as claimCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-BpTtuLQ5.mjs";
+import { At as shouldBuildCodexPluginThreadConfig, B as buildCodexNativeHookRelayId, K as checkCodexThreadAppAvailability, L as assertCodexNativeHookRelayAllowed, Ot as mergeCodexThreadConfigs, Q as resolveCodexNativeSkillIsolation, R as buildCodexNativeHookRelayConfig, T as buildDeveloperInstructions, U as resolveCodexNativeHookRelayEvents, X as parseCodexNativeToolCatalog, Z as applyCodexNativeSkillIsolation, et as codexDynamicToolsFingerprint, nt as fingerprintJsonObject, rt as fingerprintUserMcpServersConfigPatch, w as resolveCodexWebSearchPlan, wt as buildCodexPluginThreadConfig, x as buildCodexThreadConfiguration } from "./thread-lifecycle-Cik28qWn.mjs";
+import "./session-binding-_0W_fHRr.mjs";
+import { i as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError } from "./thread-policy-Cjs4B8xf.mjs";
+import "./thread-ownership-skomxnIt.mjs";
+import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-YBMHSzC4.mjs";
+import { l as isCodexDynamicToolExcluded, n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-B8J4Dy-O.mjs";
+import { o as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-context-VXVwTCfS.mjs";
+import { n as prepareCodexSessionInitialization } from "./session-initialization-DH1z6fXn.mjs";
+import { createImportedCodexSession } from "./session-history-import-JHXT5Xfi.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import path from "node:path";
 import { lstat } from "node:fs/promises";
 import { constants, createZstdDecompress } from "node:zlib";
@@ -31,7 +33,6 @@ import { root } from "openclaw/plugin-sdk/file-access-runtime";
 import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
 import { loadCodexBundleMcpThreadConfig } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
-import { isDeepStrictEqual } from "node:util";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { buildCodexUserMcpServersThreadConfigPatchForRuntime, resolveCodexMcpToolOverridesForAgent } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { buildNativeHookRelayCommandPlan } from "openclaw/plugin-sdk/native-hook-relay-runtime";
@@ -731,7 +732,7 @@ function readConnectionFingerprint(ref) {
 async function forkCodexUpstreamSession(params, options) {
 	try {
 		const sourceFingerprint = params.upstream.kind === "codex-app-server" ? readConnectionFingerprint(params.upstream.ref) : void 0;
-		const requestControl = sourceFingerprint ? options.controlFactory.forUpstream(params.source.agentId, sourceFingerprint) : void 0;
+		const requestControl = sourceFingerprint ? await options.controlFactory.forUpstream(params.source.agentId, sourceFingerprint) : void 0;
 		if (!sourceFingerprint || !requestControl) return {
 			status: "failed",
 			code: "upstream-unavailable",

package/dist/{usage-tCk-mg_x.js → .setup/usage-BOgBEKso.mjs}

@@ -1,7 +1,7 @@
-import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-CBMmWBr9.js";
-import { n as readCodexAppServerUsage } from "./request-B7hEkBGq.js";
-import "./config-oIORaQ5T.js";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-D0zGNIHu.js";
+import { t as buildCodexAppServerUsageSnapshot } from "./rate-limits-DOEGYRNs.mjs";
+import { n as readCodexAppServerUsage } from "./request-BioXJLYa.mjs";
+import "./config-CedDWjM-.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-CeAhl_h4.mjs";
 import { CODEX_APP_SERVER_AUTH_MARKER } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/usage.ts
 /** Handles the synthetic usage credential for a Codex-backed OpenAI route. */