@openclaw/codex 2026.9.5 → 2026.9.6

package/dist/.setup/{effective-mcp-catalog-K6kLCN8X.mjs → effective-mcp-catalog-CvnvnGIe.mjs}

@@ -1,6 +1,6 @@
-import { p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
-import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-BpTtuLQ5.mjs";
-import "./session-binding-_0W_fHRr.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-BGoz8wOK.mjs";
+import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-DA4VR4Eb.mjs";
+import "./session-binding-Cm0apEbd.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts

package/dist/.setup/{ephemeral-turn-R1gA8Sn6.mjs → ephemeral-turn-poidXgek.mjs}

@@ -1,7 +1,7 @@
-import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
-import { T as readCodexTurnCompletedNotification } from "./client-vXs2929Q.mjs";
-import { m as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-BpYKdTA0.mjs";
-import { c as readCodexNotificationItem, s as isTerminalTurnStatus, t as CodexUsageProjection } from "./event-projector-usage-C7Ntzs-f.mjs";
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { T as readCodexTurnCompletedNotification } from "./client-Cs08OXVQ.mjs";
+import { h as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-CEv1cKwF.mjs";
+import { c as readCodexNotificationItem, s as isTerminalTurnStatus, t as CodexUsageProjection } from "./event-projector-usage-CnBS8Wa3.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
@@ -36,8 +36,11 @@ var CodexEphemeralTurn = class {
 						if (firstDelta) await options.onAssistantMessageStart?.();
 					} else if (notification.method === "rawResponse/completed") this.usage.record(params);
 					else if (notification.method === "turn/completed") {
-						this.turn = readCodexTurnCompletedNotification(params)?.turn ?? this.turn;
-						this.completion.resolve();
+						const completed = readCodexTurnCompletedNotification(params);
+						if (completed) {
+							this.turn = completed.turn;
+							this.completion.resolve();
+						}
 					} else if (notification.method === "error") {
 						this.usage.invalidateContext();
 						if (params.willRetry !== true) {

package/dist/.setup/{event-projector-assistant-message-DNUR1s0A.mjs → event-projector-assistant-message-BsruvNrH.mjs}

@@ -1,3 +1,4 @@
+import { g as codexProviderRefusalDetails } from "./event-projector-items-C6L_5ZiT.mjs";
 import { t as resolveCodexLocalRuntimeAttribution } from "./local-runtime-attribution-B_2mnqhb.mjs";
 import { formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/event-projector-assistant-message.ts
@@ -49,10 +50,7 @@ function createAttributedCodexAssistantMessage(attribution, text, options) {
 		...refusal ? { diagnostics: [{
 			type: "provider_refusal",
 			timestamp: Date.now(),
-			details: {
-				provider: "openai",
-				category: refusal.category
-			}
+			details: codexProviderRefusalDetails(refusal)
 		}] } : {},
 		timestamp: Date.now()
 	};

package/dist/.setup/{event-projector-items-DyTQ_XqL.mjs → event-projector-items-C6L_5ZiT.mjs}

@@ -1,23 +1,51 @@
-import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { asFiniteNumber, normalizeOptionalString as normalizeOptionalString$1, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { Buffer } from "node:buffer";
 //#region extensions/codex/src/app-server/event-projector-values.ts
 const BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX = "This content was flagged for possible biological risk.";
+/** Decode app-server v2 findings with the Codex UI's UTF-8 limits; never truncate a steer. */
+function readCodexMisalignmentReview(value) {
+	if (!isJsonObject(value)) return;
+	const explanation = value.detailedExplanation;
+	if (typeof explanation !== "string" || !explanation.trim() || Buffer.byteLength(explanation, "utf8") > 65536) return;
+	const message = isJsonObject(value.steer) ? value.steer.message : void 0;
+	return {
+		explanation,
+		...typeof message === "string" && message.trim() && Buffer.byteLength(message, "utf8") <= 1024 ? { continuation: { message } } : {},
+		...typeof value.errorType === "string" && value.errorType.trim() ? { errorType: value.errorType } : {}
+	};
+}
 /** Project only Codex's explicit refusal contracts; other policy errors retain their own paths. */
-function readCodexProviderRefusal(message, codexErrorInfo) {
+function readCodexProviderRefusal(message, codexErrorInfo, options) {
 	if (!message) return;
 	if (codexErrorInfo === "cyberPolicy") return {
 		category: "cyber",
 		message
 	};
-	if (codexErrorInfo === "misalignmentPolicyViolation") return {
-		category: "misalignment",
-		message
-	};
+	if (codexErrorInfo === "misalignmentPolicyViolation") {
+		const review = readCodexMisalignmentReview(options?.misalignment);
+		return {
+			category: "misalignment",
+			message,
+			...review ? { review } : {},
+			...options?.nativeThreadId ? { nativeThreadId: options.nativeThreadId } : {},
+			...options?.nativeTurnId ? { nativeTurnId: options.nativeTurnId } : {}
+		};
+	}
 	return message.startsWith(BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX) ? {
 		category: "bio",
 		message
 	} : void 0;
 }
+function codexProviderRefusalDetails(refusal) {
+	return {
+		provider: "openai",
+		category: refusal.category,
+		...refusal.review ? { review: refusal.review } : {},
+		...refusal.nativeThreadId ? { nativeThreadId: refusal.nativeThreadId } : {},
+		...refusal.nativeTurnId ? { nativeTurnId: refusal.nativeTurnId } : {}
+	};
+}
 function readNonEmptyString(record, key) {
 	return normalizeOptionalString$1(record[key]);
 }
@@ -178,7 +206,13 @@ function shouldSynthesizeToolProgressForItem(item) {
 	}
 }
 function shouldRecordNativeToolTranscript(item) {
-	return shouldSynthesizeToolProgressForItem(item);
+	switch (item.type) {
+		case "commandExecution":
+		case "fileChange":
+		case "webSearch":
+		case "mcpToolCall": return true;
+		default: return false;
+	}
 }
 function isMutatingNativeToolItem(item) {
 	if (item.type === "commandExecution") return true;
@@ -197,4 +231,4 @@ function shouldClearTerminalPresentationForNativeItem(item) {
 	}
 }
 //#endregion
-export { readNonEmptyString as C, splitPlanText as D, readNullableString as E, readItemString as S, readNonNegativeInteger as T, normalizeOptionalString$1 as _, isNonSuccessItemStatus as a, readHookOutputEntries as b, itemName as c, matchesCodexSnapshotTurn as d, shouldClearTerminalPresentationForNativeItem as f, extractRawAssistantText as g, unknownItemStatus as h, isMutatingNativeToolItem as i, itemStatus as l, shouldSynthesizeToolProgressForItem as m, auditNativeToolTerminalStatus as n, isSideEffectingNativeToolItem as o, shouldRecordNativeToolTranscript as p, auditNativeToolUnfinishedStatus as r, itemKind as s, auditNativeToolName as t, itemTitle as u, readCodexErrorNotificationMessage as v, readNonEmptyStringArray as w, readItem as x, readCodexProviderRefusal as y };
+export { readItemString as C, readNullableString as D, readNonNegativeInteger as E, splitPlanText as O, readItem as S, readNonEmptyStringArray as T, extractRawAssistantText as _, isNonSuccessItemStatus as a, readCodexProviderRefusal as b, itemName as c, matchesCodexSnapshotTurn as d, shouldClearTerminalPresentationForNativeItem as f, codexProviderRefusalDetails as g, unknownItemStatus as h, isMutatingNativeToolItem as i, itemStatus as l, shouldSynthesizeToolProgressForItem as m, auditNativeToolTerminalStatus as n, isSideEffectingNativeToolItem as o, shouldRecordNativeToolTranscript as p, auditNativeToolUnfinishedStatus as r, itemKind as s, auditNativeToolName as t, itemTitle as u, normalizeOptionalString$1 as v, readNonEmptyString as w, readHookOutputEntries as x, readCodexErrorNotificationMessage as y };

package/dist/.setup/{event-projector-usage-C7Ntzs-f.mjs → event-projector-usage-CnBS8Wa3.mjs}

@@ -1,4 +1,4 @@
-import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { asSafeIntegerInRange, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeUsage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/attempt-notifications.ts

package/dist/.setup/{harness-rxaaoN-o.mjs → harness-a_MsE4-_.mjs}

@@ -1,6 +1,6 @@
 import { CODEX_NATIVE_TOOL_REQUIREMENTS } from "../native-tool-policy.js";
-import { p as sessionBindingIdentity } from "./session-binding-record-TH3xA0zj.mjs";
-import { t as codexBuildSymbol } from "./build-state-Xx9ybZqa.mjs";
+import { m as sessionBindingIdentity } from "./session-binding-record-BGoz8wOK.mjs";
+import { t as codexBuildSymbol } from "./build-state-C7EnDVgr.mjs";
 import { resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/model-runtime.ts
@@ -102,10 +102,11 @@ function createCodexAppServerAgentHarness(options) {
 				} } : {}
 			} : void 0;
 		},
-		...sessionCatalogControlFactory && sessionRuntime ? { sessionFork: {
+		...sessionCatalogControlFactory && sessionRuntime ? { sessionForkV2: {
+			executionEnvironment: "host-only",
 			upstreamKinds: ["codex-app-server"],
 			fork: async (params) => {
-				const { forkCodexUpstreamSession } = await import("./upstream-session-fork-D3UKxgVD.mjs");
+				const { forkCodexUpstreamSession } = await import("./upstream-session-fork-BUr4OUbC.mjs");
 				return await forkCodexUpstreamSession(params, {
 					bindingStore: options.bindingStore,
 					controlFactory: sessionCatalogControlFactory,
@@ -118,7 +119,7 @@ function createCodexAppServerAgentHarness(options) {
 		taskHistory: {
 			taskKinds: ["codex-native"],
 			read: async (params) => {
-				const { readCodexNativeSubagentHistory } = await import("./native-subagent-history-YXaL6dMd.mjs");
+				const { readCodexNativeSubagentHistory } = await import("./native-subagent-history-0nYYgo0k.mjs");
 				const assertCurrent = () => {
 					params.assertCurrent();
 					if (disposed) throw new Error("Agent harness is disposed");
@@ -137,22 +138,22 @@ function createCodexAppServerAgentHarness(options) {
 			return fingerprintCodexAppServerAuthBinding(params);
 		} },
 		runtimeArtifact: { validate: async (binding) => {
-			const { validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-Dy38Z5iU.mjs");
+			const { validateCodexAppServerRuntimeArtifact } = await import("./runtime-artifact-CLZ8udh-.mjs");
 			return validateCodexAppServerRuntimeArtifact(binding);
 		} },
 		fetchUsageSnapshot: async (ctx) => {
-			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-BOgBEKso.mjs");
+			const { fetchCodexAppServerUsageSnapshot } = await import("./usage-BML0r-ua.mjs");
 			return await fetchCodexAppServerUsageSnapshot(ctx, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		loadModelCatalog: async (params) => {
-			const { createCodexAppServerModelCatalog } = await import("./model-catalog-DkvUuBey.mjs");
+			const { createCodexAppServerModelCatalog } = await import("./model-catalog-CfXJf9Ay.mjs");
 			if (disposed) return [];
 			modelCatalog ??= createCodexAppServerModelCatalog(harnessRuntimeId);
 			return await modelCatalog.load(params, resolveAttemptPluginConfig(params.config));
 		},
 		readModelCatalogReadiness: (params) => modelCatalog?.read(params, resolveAttemptPluginConfig(params.config)),
 		loadMcpToolCatalog: async (params) => {
-			const { loadCodexEffectiveMcpCatalog } = await import("./effective-mcp-catalog-K6kLCN8X.mjs");
+			const { loadCodexEffectiveMcpCatalog } = await import("./effective-mcp-catalog-CvnvnGIe.mjs");
 			return await loadCodexEffectiveMcpCatalog(params, { bindingStore: options.bindingStore });
 		},
 		supports: (ctx) => {
@@ -195,7 +196,7 @@ function createCodexAppServerAgentHarness(options) {
 			};
 		},
 		runAttempt: async (params) => {
-			const { runCodexAppServerAttempt } = await import("./run-attempt-rlA07pUv.mjs");
+			const { runCodexAppServerAttempt } = await import("./run-attempt-BHu11r7h.mjs");
 			const { planCodexCyberEscalation, readCodexCyberAttemptVerdict, recordCodexCyberTargetUnavailable, reserveCodexCyberProbe, resolveCodexCyberFailoverConfig } = await import("./cyber-failover-DYwbmf1o.mjs");
 			const { emitCodexCyberNotice } = await import("./cyber-failover-notice-e9G3J9-e.mjs");
 			const pluginConfig = resolveAttemptPluginConfig(params.config);
@@ -261,7 +262,7 @@ function createCodexAppServerAgentHarness(options) {
 				const { runHostPreparedIsolatedCompletion } = await import("openclaw/plugin-sdk/simple-completion-runtime");
 				return runHostPreparedIsolatedCompletion(params);
 			}
-			const { runCodexIsolatedCompletion } = await import("./isolated-completion-B6srt48J.mjs");
+			const { runCodexIsolatedCompletion } = await import("./isolated-completion-BIZFhTNG.mjs");
 			return runCodexIsolatedCompletion(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runIsolatedCompletion: async (params) => {
@@ -277,11 +278,11 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		finalizeSettledTurn: async (params) => {
-			const { runCodexSettledTurnFinalization } = await import("./settled-turn-finalizer-CiY2bLFK.mjs");
+			const { runCodexSettledTurnFinalization } = await import("./settled-turn-finalizer-DiAi6Kx6.mjs");
 			return runCodexSettledTurnFinalization(params, { pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig });
 		},
 		runSideQuestion: async (params) => {
-			const { runCodexAppServerSideQuestion } = await import("./side-question-DSCZyoBD.mjs");
+			const { runCodexAppServerSideQuestion } = await import("./side-question-BJ1wSDcB.mjs");
 			return runCodexAppServerSideQuestion(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig,
@@ -291,20 +292,25 @@ function createCodexAppServerAgentHarness(options) {
 			});
 		},
 		compact: async (params) => {
-			const { maybeCompactCodexAppServerSession } = await import("./compact-C3i3qlzj.mjs");
+			const { maybeCompactCodexAppServerSession } = await import("./compact-Du5UvtxA.mjs");
 			return maybeCompactCodexAppServerSession(params, {
 				bindingStore: options.bindingStore,
 				pluginConfig: options?.resolvePluginConfig?.() ?? options?.pluginConfig
 			});
 		},
 		withSessionDeletion: async (params, run) => {
-			const { withCodexAppServerSessionDeletion } = await import("./session-retirement-CU87AOg9.mjs");
+			const { withCodexAppServerSessionDeletion } = await import("./session-retirement-BH-S6qkJ.mjs");
 			params.assertCurrent();
 			return withCodexAppServerSessionDeletion(options.bindingStore, params, run);
 		},
+		withSessionContextReset: async (params, run) => {
+			const { withCodexAppServerSessionContextReset } = await import("./session-retirement-BH-S6qkJ.mjs");
+			params.assertCurrent();
+			return withCodexAppServerSessionContextReset(options.bindingStore, params, run);
+		},
 		reset: async (params) => {
 			if (params.sessionId && params.reason !== "deleted") {
-				const [{ reclaimCurrentCodexSessionGeneration }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./session-binding-_0W_fHRr.mjs").then((n) => n.c), import("./session-retirement-CU87AOg9.mjs")]);
+				const [{ reclaimCurrentCodexSessionGeneration }, { retireCodexAppServerSessionGeneration }] = await Promise.all([import("./session-binding-Cm0apEbd.mjs").then((n) => n.s), import("./session-retirement-BH-S6qkJ.mjs")]);
 				const identity = sessionBindingIdentity({
 					agentId: params.agentId,
 					sessionId: params.sessionId,
@@ -336,7 +342,7 @@ function createCodexAppServerAgentHarness(options) {
 /** Creates the private native-compaction bridge registered in host-owned capability state. */
 function createCodexAppServerNativeCompaction(options) {
 	return async (params) => {
-		const { maybeCompactCodexAppServerSession } = await import("./compact-C3i3qlzj.mjs");
+		const { maybeCompactCodexAppServerSession } = await import("./compact-Du5UvtxA.mjs");
 		return maybeCompactCodexAppServerSession(params, {
 			bindingStore: options.bindingStore,
 			pluginConfig: options.resolvePluginConfig?.() ?? options.pluginConfig,

package/dist/.setup/{inference-context-fulhZuz8.mjs → inference-context-D96l9-ew.mjs}

@@ -1,4 +1,4 @@
-import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { randomUUID } from "node:crypto";
 //#region extensions/codex/src/app-server/inference-context.ts
 const MAX_CONTEXT_BYTES = 262144;