@openclaw/codex 2026.9.4 → 2026.9.6

package/dist/{session-binding-record-Bcvslnhf.js → .setup/session-binding-record-BGoz8wOK.mjs}

@@ -1,8 +1,115 @@
-import { i as normalizeCodexServiceTier, m as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-DujwEnhg.js";
+import { i as normalizeCodexServiceTier, m as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-DujwEnhg.mjs";
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { z } from "zod";
+//#region extensions/codex/src/app-server/native-subagent-history-owner.ts
+const nonBlankString = z.string().refine((value) => Boolean(value.trim()));
+const codexNativeSubagentHistoryOwnerSchema = z.object({
+	parentThreadId: nonBlankString,
+	sessionId: nonBlankString,
+	lifecycleRevision: nonBlankString.optional(),
+	connectionFingerprint: z.string().regex(/^[a-f0-9]{64}$/u)
+});
+/** Automatic recovery may follow native rotation only within the same host lifecycle and connection. */
+function matchesCodexNativeSubagentHistoryOwner(stored, current) {
+	return stored.connectionFingerprint === current.connectionFingerprint && stored.lifecycleRevision === current.lifecycleRevision && (stored.lifecycleRevision !== void 0 || stored.sessionId === current.sessionId);
+}
+function codexNativeSubagentHistoryConnectionFingerprint(binding) {
+	if (!binding.appServerRuntimeFingerprint) return;
+	return createHash("sha256").update(JSON.stringify([
+		binding.appServerRuntimeFingerprint,
+		binding.connectionScope ?? null,
+		binding.authProfileId ?? null
+	])).digest("hex");
+}
+function createCodexNativeSubagentHistoryOwner(params) {
+	const connectionFingerprint = codexNativeSubagentHistoryConnectionFingerprint(params.binding);
+	return connectionFingerprint ? {
+		parentThreadId: params.parentThreadId,
+		sessionId: params.sessionId,
+		...params.lifecycleRevision ? { lifecycleRevision: params.lifecycleRevision } : {},
+		connectionFingerprint
+	} : void 0;
+}
+function readCodexNativeSubagentHistoryOwner(detail) {
+	const value = asOptionalRecord(detail)?.nativeHistory;
+	if (value === void 0) return;
+	const owner = codexNativeSubagentHistoryOwnerSchema.safeParse(value);
+	if (!owner.success) throw new Error("Subagent history owner is invalid.");
+	const { lifecycleRevision, ...required } = owner.data;
+	return lifecycleRevision === void 0 ? required : {
+		...required,
+		lifecycleRevision
+	};
+}
+function assertHistoryOwnerMatchesRegistration(saved, current, parentThreadId, requireSaved = false) {
+	if (requireSaved && !saved) throw new Error("Subagent completion history owner is missing.");
+	if (saved && (!current || saved.parentThreadId !== parentThreadId || saved.connectionFingerprint !== current.connectionFingerprint || saved.sessionId !== current.sessionId || saved.lifecycleRevision !== current.lifecycleRevision)) throw new Error("Subagent completion history owner is contradictory.");
+}
+//#endregion
+//#region extensions/codex/src/app-server/native-subagent-submission.ts
+const identifier = z.string().refine((value) => Boolean(value.trim()));
+const submissionSchema = z.object({
+	parentTurnId: identifier,
+	callId: identifier,
+	childThreadId: identifier,
+	submissionId: identifier,
+	predecessorRunId: identifier,
+	predecessorNativeTurnId: identifier
+}).strict();
+const submissionsSchema = z.object({
+	version: z.literal(1),
+	owner: codexNativeSubagentHistoryOwnerSchema,
+	receipts: z.array(submissionSchema)
+}).strict().refine(({ receipts }) => new Set(receipts.map(({ parentTurnId, callId }) => JSON.stringify([parentTurnId, callId]))).size === receipts.length);
+function matchesCodexNativeSubagentSubmissionOwner(stored, current) {
+	return stored.parentThreadId === current.parentThreadId && matchesCodexNativeSubagentHistoryOwner(stored, current);
+}
+function readCodexNativeSubagentSubmissions(value) {
+	if (value === void 0) return;
+	const parsed = submissionsSchema.safeParse(value);
+	if (!parsed.success) throw new Error("Invalid Codex native subagent submission metadata.");
+	return parsed.data;
+}
+function mutateCodexNativeSubagentSubmissions(params) {
+	const current = readCodexNativeSubagentSubmissions(params.current);
+	const owner = codexNativeSubagentHistoryOwnerSchema.parse(params.owner);
+	const receipt = submissionSchema.parse(params.receipt);
+	if (current && !matchesCodexNativeSubagentSubmissionOwner(current.owner, owner)) return { applied: false };
+	const receipts = current?.receipts ?? [];
+	const existing = receipts.find((entry) => entry.parentTurnId === receipt.parentTurnId && entry.callId === receipt.callId);
+	if (existing && !isDeepStrictEqual(existing, receipt)) return { applied: false };
+	if (params.consume) {
+		if (!current) return { applied: false };
+		const remaining = receipts.filter((entry) => entry !== existing);
+		return {
+			applied: true,
+			...remaining.length ? { next: {
+				version: 1,
+				owner: current.owner,
+				receipts: remaining
+			} } : {}
+		};
+	}
+	return {
+		applied: true,
+		next: {
+			version: 1,
+			owner: current?.owner ?? owner,
+			receipts: existing ? receipts : [...receipts, receipt]
+		}
+	};
+}
+/** Physical adoption cannot establish continuity for an unstamped receipt. */
+function adoptCodexNativeSubagentSubmissions(value) {
+	if (value === void 0) return;
+	const parsed = submissionsSchema.safeParse(value);
+	return !parsed.success || parsed.data.owner.lifecycleRevision ? value : void 0;
+}
+//#endregion
 //#region extensions/codex/src/app-server/session-binding-record.ts
 /** Canonical binding codec and synchronous generation-aware reads; no lifecycle or auth loading. */
 /** Resolves the same agent scope OpenClaw uses for transcript/session ownership. */
@@ -85,7 +192,7 @@ const threadBindingSchema = z.object({
 	connectionScope: z.literal("supervision").optional(),
 	supervisionSourceThreadId: z.string().trim().min(1).optional(),
 	authProfileId: optionalStringSchema,
-	agentWorkspaceDeveloperInstructions: optionalNonBlankStringSchema,
+	agentWorkspaceDeveloperInstructions: optionalStringSchema,
 	model: optionalStringSchema,
 	preserveNativeModel: z.literal(true).optional().catch(void 0),
 	pendingSupervisionBranch: pendingSupervisionBranchSchema.optional(),
@@ -180,7 +287,8 @@ const storedBindingSchema = z.discriminatedUnion("state", [z.object({
 	state: z.literal("active"),
 	binding: threadBindingSchema,
 	sessionId: storedSessionIdSchema,
-	lease: bindingLeaseSchema.optional().catch(void 0)
+	lease: bindingLeaseSchema.optional().catch(void 0),
+	nativeSubagentSubmissions: z.unknown().optional()
 }), z.object({
 	version: z.literal(1),
 	state: z.literal("cleared"),
@@ -237,11 +345,46 @@ function readCodexBindingTimestamp(value) {
 /** The same physical-generation check serves execution and read-only projections. */
 function readCurrentCodexAppServerBinding(state, identity) {
 	const key = bindingStoreKey(identity);
-	const raw = state.lookup(key);
+	return decodeCurrentCodexAppServerBinding(key, state.lookup(key), identity);
+}
+function decodeCurrentCodexAppServerBinding(key, raw, identity) {
 	const stored = readStoredCodexAppServerBinding(raw);
 	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
 	return stored?.state === "active" && ownsStoredSessionGeneration(identity, stored) ? stored.binding : void 0;
 }
+/** Consume synchronously so each list phase acquires fresh binding authority. */
+function* readCurrentCodexAppServerBindings(state, identities) {
+	let keys;
+	if (state.lookupMany && identities.length > 1 && identities.length <= 1e4) try {
+		keys = identities.map(bindingStoreKey);
+	} catch {}
+	if (!keys || !state.lookupMany) {
+		for (const identity of identities) yield readCurrentCodexAppServerBinding(state, identity);
+		return;
+	}
+	const values = state.lookupMany(keys);
+	for (let index = 0; index < identities.length; index++) {
+		const value = values[index];
+		if (!value.ok) throw value.error;
+		yield decodeCurrentCodexAppServerBinding(keys[index], value.value, identities[index]);
+	}
+}
+function matchesCodexNativeSubagentSubmissionBinding(binding, owner) {
+	return binding.threadId === owner.parentThreadId && !binding.pendingSupervisionBranch && codexNativeSubagentHistoryConnectionFingerprint(binding) === owner.connectionFingerprint;
+}
+/** Unknown metadata stays opaque through ordinary binding writes. */
+function preserveCodexNativeSubagentSubmissions(currentBinding, nextBinding, value) {
+	return currentBinding.threadId === nextBinding.threadId && codexNativeSubagentHistoryConnectionFingerprint(currentBinding) === codexNativeSubagentHistoryConnectionFingerprint(nextBinding) && isDeepStrictEqual(currentBinding.pendingSupervisionBranch, nextBinding.pendingSupervisionBranch) ? value : void 0;
+}
+function readCurrentCodexNativeSubagentSubmissions(state, identity, owner) {
+	const key = bindingStoreKey(identity);
+	const raw = state.lookup(key);
+	const stored = readStoredCodexAppServerBinding(raw);
+	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
+	if (stored?.state !== "active" || !ownsStoredSessionGeneration(identity, stored) || identity.kind === "session" && owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(stored.binding, owner)) return [];
+	const submissions = readCodexNativeSubagentSubmissions(stored.nativeSubagentSubmissions);
+	return submissions && matchesCodexNativeSubagentSubmissionOwner(submissions.owner, owner) ? submissions.receipts : [];
+}
 var CodexSupervisionBindingReplacementError = class extends Error {
 	constructor(threadId, operation) {
 		super(`Refusing to replace supervised Codex thread ${threadId} while ${operation}; its native user-home connection and model ownership must be preserved`);
@@ -252,5 +395,59 @@ function assertCodexBindingMayBeReplaced(binding, operation, expected) {
 	if (expected) throw new AgentHarnessPreflightError(`Codex native model ownership prevents ${operation}. Continue or compact the original session in its native runtime, or create a new chat with a concrete model; the original binding was preserved.`);
 	if (binding?.connectionScope === "supervision") throw new CodexSupervisionBindingReplacementError(binding.threadId, operation);
 }
+function readPluginAppPolicyContext(value, bindingSchemaVersion) {
+	const record = asOptionalRecord(value);
+	if (!record || typeof record.fingerprint !== "string") return;
+	const apps = asOptionalRecord(record.apps);
+	if (!apps) return;
+	const parsedApps = {};
+	for (const [appId, rawEntry] of Object.entries(apps)) {
+		const entry = asOptionalRecord(rawEntry);
+		if (!entry) return;
+		const destructiveApprovalMode = readDestructiveApprovalMode(entry.destructiveApprovalMode, bindingSchemaVersion);
+		const mcpServerNames = Array.isArray(entry.mcpServerNames) && entry.mcpServerNames.every((serverName) => typeof serverName === "string") ? entry.mcpServerNames : void 0;
+		if (entry.source === "account") {
+			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNames) return;
+			parsedApps[appId] = {
+				source: "account",
+				appName: entry.appName,
+				allowDestructiveActions: entry.allowDestructiveActions,
+				...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
+				...destructiveApprovalMode ? { destructiveApprovalMode } : {},
+				mcpServerNames
+			};
+			continue;
+		}
+		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || typeof entry.marketplaceName !== "string" || !CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(entry.marketplaceName) || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNames) return;
+		parsedApps[appId] = {
+			configKey: entry.configKey,
+			marketplaceName: entry.marketplaceName,
+			pluginName: entry.pluginName,
+			allowDestructiveActions: entry.allowDestructiveActions,
+			...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
+			...destructiveApprovalMode ? { destructiveApprovalMode } : {},
+			mcpServerNames
+		};
+	}
+	const parsedPluginAppIds = {};
+	if (record.pluginAppIds !== void 0 && (!record.pluginAppIds || typeof record.pluginAppIds !== "object" || Array.isArray(record.pluginAppIds))) return;
+	if (record.pluginAppIds && typeof record.pluginAppIds === "object") for (const [configKey, appIds] of Object.entries(record.pluginAppIds)) {
+		if (!Array.isArray(appIds) || appIds.some((appId) => typeof appId !== "string")) return;
+		parsedPluginAppIds[configKey] = appIds;
+	}
+	return {
+		fingerprint: record.fingerprint,
+		apps: parsedApps,
+		pluginAppIds: parsedPluginAppIds
+	};
+}
+function readDestructiveApprovalMode(value, bindingSchemaVersion) {
+	if (value === void 0) return;
+	if (value === "allow" || value === "deny") return value;
+	if (value === "auto") return bindingSchemaVersion === 1 ? "allow" : "auto";
+	if (value === "ask" && bindingSchemaVersion === 2) return "ask";
+	if (value === "on-request" && bindingSchemaVersion === 1) return "auto";
+	return "invalid";
+}
 //#endregion
-export { readCodexAppServerThreadBinding as a, readStoredCodexAppServerBinding as c, validateBindingForWrite as d, ownsStoredSessionGeneration as i, sessionBindingIdentity as l, assertCodexBindingMayBeReplaced as n, readCodexBindingTimestamp as o, bindingStoreKey as r, readCurrentCodexAppServerBinding as s, CodexSupervisionBindingReplacementError as t, stripUndefinedBinding as u };
+export { readCodexNativeSubagentHistoryOwner as C, matchesCodexNativeSubagentHistoryOwner as S, adoptCodexNativeSubagentSubmissions as _, ownsStoredSessionGeneration as a, codexNativeSubagentHistoryConnectionFingerprint as b, readCodexBindingTimestamp as c, readCurrentCodexNativeSubagentSubmissions as d, readPluginAppPolicyContext as f, validateBindingForWrite as g, stripUndefinedBinding as h, matchesCodexNativeSubagentSubmissionBinding as i, readCurrentCodexAppServerBinding as l, sessionBindingIdentity as m, assertCodexBindingMayBeReplaced as n, preserveCodexNativeSubagentSubmissions as o, readStoredCodexAppServerBinding as p, bindingStoreKey as r, readCodexAppServerThreadBinding as s, CodexSupervisionBindingReplacementError as t, readCurrentCodexAppServerBindings as u, mutateCodexNativeSubagentSubmissions as v, createCodexNativeSubagentHistoryOwner as x, assertHistoryOwnerMatchesRegistration as y };