@openclaw/codex 2026.9.5 → 2026.9.6

package/dist/.setup/{runtime-artifact-Dy38Z5iU.mjs → runtime-artifact-CLZ8udh-.mjs}

@@ -1,11 +1,12 @@
-import { a as resolvePackagedCodexNativeCommand } from "./managed-binary-DP6Rib3P.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Cmx94Oiy.mjs";
+import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
+import { a as resolvePackagedCodexNativeCommand } from "./managed-binary-BnshlFag.mjs";
+import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-h2VHOskC.mjs";
 import { createHash } from "node:crypto";
-import { resolveWindowsExecutablePath, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
+import { resolveWindowsExecutablePath } from "openclaw/plugin-sdk/windows-spawn";
 import { constants } from "node:fs";
 import path from "node:path";
 import fs$1 from "node:fs/promises";
-import { isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
+import { isPathInside, sha256File } from "openclaw/plugin-sdk/file-access-runtime";
 //#region extensions/codex/src/app-server/runtime-artifact.ts
 /** Exact local runtime artifact identity for verified Codex setup turns. */
 const ARTIFACT_ID_PREFIX = "codex-app-server:v1:";
@@ -17,8 +18,6 @@ const MAX_ARTIFACT_DEPTH = 64;
 const MAX_ARTIFACT_ENTRIES = 32768;
 const MAX_ARTIFACT_FILES = 8192;
 const MAX_ARTIFACT_TOTAL_BYTES = 1024n * 1024n * 1024n;
-const READ_CHUNK_BYTES = 65536;
-const CODE_MODE_HOST_PATH_ENV = "CODEX_CODE_MODE_HOST_PATH";
 const SAFE_NODE_OPTIONS_BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
 	"--enable-network-family-autoselection",
 	"--network-family-autoselection",
@@ -74,24 +73,17 @@ async function readRegularFileFingerprint(params) {
 		if (!before.isFile()) throw new Error(`Codex runtime artifact contains a non-regular file: ${params.filePath}`);
 		if (params.budget.fileCount + 1 > MAX_ARTIFACT_FILES) throw new Error("Codex runtime artifact exceeds the bounded file count");
 		if (params.budget.totalBytes + before.size > MAX_ARTIFACT_TOTAL_BYTES) throw new Error("Codex runtime artifact exceeds the bounded content size");
-		const hash = createHash("sha256");
-		const buffer = Buffer.allocUnsafe(READ_CHUNK_BYTES);
-		let offset = 0n;
-		while (offset < before.size) {
-			throwIfAborted(params.signal);
-			const length = Number(before.size - offset < BigInt(buffer.length) ? before.size - offset : BigInt(buffer.length));
-			const { bytesRead } = await handle.read(buffer, 0, length, Number(offset));
-			if (bytesRead === 0) throw new Error(`Codex runtime artifact changed while reading: ${params.filePath}`);
-			hash.update(buffer.subarray(0, bytesRead));
-			offset += BigInt(bytesRead);
-		}
+		const hash = await sha256File(handle, {
+			maxBytes: Number(before.size),
+			signal: params.signal
+		});
 		const after = await handle.stat({ bigint: true });
 		const current = await fs$1.stat(params.filePath, { bigint: true });
-		if (!sameOpenedFile(before, after) || !sameOpenedFile(after, current)) throw new Error(`Codex runtime artifact changed while reading: ${params.filePath}`);
+		if (BigInt(hash.bytes) !== before.size || !sameOpenedFile(before, after) || !sameOpenedFile(after, current)) throw new Error(`Codex runtime artifact changed while reading: ${params.filePath}`);
 		params.budget.fileCount += 1;
 		params.budget.totalBytes += after.size;
 		return {
-			contentHash: hash.digest("hex"),
+			contentHash: hash.digest,
 			mode: String(after.mode),
 			size: String(after.size)
 		};
@@ -351,38 +343,29 @@ async function resolveOptionalRegularFile(filePath) {
 function isMissingPathError(error) {
 	return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
-function readEffectiveSpawnEnvironmentValue(env, name) {
-	if (process.platform !== "win32") return env[name];
-	const effectiveKey = Object.keys(env).toSorted(compareArtifactNames).find((key) => key.toUpperCase() === name.toUpperCase());
-	return effectiveKey ? env[effectiveKey] : void 0;
-}
 async function captureFilesystemDescriptor(params) {
 	throwIfAborted(params.signal);
 	if (params.startOptions.transport !== "stdio") throw new Error("Verified Codex inference requires a local stdio runtime artifact; WebSocket attestation is unsupported");
+	if (isCodexAppServerProxyLaunch(params.startOptions.args)) throw new Error("Verified Codex inference requires a local runtime artifact; app-server proxy attestation is unsupported");
 	const env = resolveCodexAppServerSpawnEnv(params.startOptions);
 	assertSafeNodeOptions(env);
+	const invocation = resolveCodexAppServerSpawnInvocation(params.startOptions, env);
 	const spawnCwd = path.resolve(params.startOptions.cwd ?? process.cwd());
 	const commandPath = await resolveCommandPath(params.startOptions.command, env, spawnCwd);
 	const commandRealPath = await fs$1.realpath(commandPath);
 	let nativeCommand = params.spawnIdentity.nativeCommand;
-	let nativeCandidate = commandRealPath;
 	let invocationPaths;
-	if (process.platform === "win32") {
-		const program = resolveWindowsSpawnProgram({
-			command: params.startOptions.command,
-			platform: process.platform,
-			env,
-			execPath: process.execPath,
-			packageName: "@openai/codex"
-		});
-		const entrypoint = program.leadingArgv[0];
-		if (program.resolution === "node-entrypoint" && entrypoint && !nativeCommand) nativeCommand = resolvePackagedCodexNativeCommand(await fs$1.realpath(entrypoint));
-		if (program.resolution === "node-entrypoint" && !nativeCommand) throw new Error("Codex runtime cannot attest a custom Node launcher without its native target");
-		nativeCandidate = program.command;
+	if (process.platform === "win32" || invocation.resolution === "node-entrypoint") {
+		const entrypoint = invocation.resolution === "node-entrypoint" ? invocation.argv[0] : void 0;
+		if (entrypoint && !nativeCommand) {
+			const entrypointPath = await resolveCommandPath(entrypoint, env, spawnCwd);
+			nativeCommand = resolvePackagedCodexNativeCommand(await fs$1.realpath(entrypointPath));
+		}
+		if (invocation.resolution === "node-entrypoint" && !nativeCommand) throw new Error("Codex runtime cannot attest a custom Node launcher without its native target");
 		const invocationCandidates = [
 			commandRealPath,
-			program.command,
-			...program.leadingArgv
+			invocation.command,
+			...entrypoint ? [entrypoint] : []
 		];
 		invocationPaths = [];
 		for (const candidate of invocationCandidates) {
@@ -400,13 +383,10 @@ async function captureFilesystemDescriptor(params) {
 	}
 	invocationPaths = [...new Set(invocationPaths)].toSorted(compareArtifactNames);
 	if (invocationPaths.length > MAX_ARTIFACT_INVOCATION_PATHS) throw new Error("Codex runtime launcher exceeds the bounded invocation file count");
-	const nativePath = await fs$1.realpath(await resolveCommandPath(nativeCommand ?? nativeCandidate, env, spawnCwd));
+	const nativePath = await fs$1.realpath(await resolveCommandPath(nativeCommand ?? invocation.command, env, spawnCwd));
 	const packageRoot = await resolvePackageRoot(nativePath);
-	const configuredCodeModeHost = readEffectiveSpawnEnvironmentValue(env, CODE_MODE_HOST_PATH_ENV)?.trim();
-	const adjacentCodeModeHost = path.join(path.dirname(nativePath), process.platform === "win32" ? "codex-code-mode-host.exe" : "codex-code-mode-host");
-	const codeModeHostCandidatePath = configuredCodeModeHost ? path.isAbsolute(configuredCodeModeHost) ? configuredCodeModeHost : path.resolve(spawnCwd, configuredCodeModeHost) : adjacentCodeModeHost;
+	const codeModeHostCandidatePath = path.join(path.dirname(nativePath), process.platform === "win32" ? "codex-code-mode-host.exe" : "codex-code-mode-host");
 	const codeModeHostPath = await resolveOptionalRegularFile(codeModeHostCandidatePath);
-	if (configuredCodeModeHost && !codeModeHostPath) throw new Error("Configured Codex code-mode host runtime artifact is unavailable");
 	const descriptor = {
 		version: 1,
 		commandPath,
@@ -438,7 +418,11 @@ function validateFilesystemDescriptorShape(descriptor) {
 		"config",
 		"env"
 	].includes(descriptor.commandSource)) throw new Error("Invalid Codex runtime command source");
-	if (descriptor.managedCommandOrder !== void 0 && descriptor.managedCommandOrder !== "package-first" && descriptor.managedCommandOrder !== "desktop-first") throw new Error("Invalid Codex managed command order");
+	if (descriptor.managedCommandOrder !== void 0 && ![
+		"package-first",
+		"package-only",
+		"desktop-first"
+	].includes(descriptor.managedCommandOrder)) throw new Error("Invalid Codex managed command order");
 	if (descriptor.managedCommandOrder !== void 0 && descriptor.commandSource !== "resolved-managed") throw new Error("Invalid Codex managed runtime descriptor");
 	const canonicalInvocationPaths = [...new Set(descriptor.invocationPaths)].toSorted(compareArtifactNames);
 	if (canonicalInvocationPaths.length !== descriptor.invocationPaths.length || canonicalInvocationPaths.some((entry, index) => entry !== descriptor.invocationPaths[index])) throw new Error("Invalid Codex runtime invocation descriptor");

package/dist/.setup/{sandbox-guard-BBP-RbTf.mjs → sandbox-guard-C2sRMOEY.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import { l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-CcB9iPoq.mjs";
-import { n as resolveCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-YBMHSzC4.mjs";
+import { n as resolveCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-umd0tgh4.mjs";
 import { tryResolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
 import { resolveSandboxRuntimeStatus } from "openclaw/plugin-sdk/sandbox";

package/dist/.setup/{session-binding-_0W_fHRr.mjs → session-binding-Cm0apEbd.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import { _ as mutateCodexNativeSubagentSubmissions, a as ownsStoredSessionGeneration, c as readCodexBindingTimestamp, d as readPluginAppPolicyContext, f as readStoredCodexAppServerBinding, g as adoptCodexNativeSubagentSubmissions, h as validateBindingForWrite, i as matchesCodexNativeSubagentSubmissionBinding, l as readCurrentCodexAppServerBinding, m as stripUndefinedBinding, n as assertCodexBindingMayBeReplaced, o as preserveCodexNativeSubagentSubmissions, p as sessionBindingIdentity, r as bindingStoreKey, s as readCodexAppServerThreadBinding, t as CodexSupervisionBindingReplacementError, u as readCurrentCodexNativeSubagentSubmissions } from "./session-binding-record-TH3xA0zj.mjs";
+import { _ as adoptCodexNativeSubagentSubmissions, a as ownsStoredSessionGeneration, c as readCodexBindingTimestamp, d as readCurrentCodexNativeSubagentSubmissions, f as readPluginAppPolicyContext, g as validateBindingForWrite, h as stripUndefinedBinding, i as matchesCodexNativeSubagentSubmissionBinding, l as readCurrentCodexAppServerBinding, m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as preserveCodexNativeSubagentSubmissions, p as readStoredCodexAppServerBinding, r as bindingStoreKey, s as readCodexAppServerThreadBinding, t as CodexSupervisionBindingReplacementError, u as readCurrentCodexAppServerBindings, v as mutateCodexNativeSubagentSubmissions } from "./session-binding-record-BGoz8wOK.mjs";
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.mjs";
 import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-WqZtZfXN.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -27,7 +27,6 @@ var session_binding_exports = /* @__PURE__ */ __exportAll({
 	reclaimCurrentCodexSessionGeneration: () => reclaimCurrentCodexSessionGeneration,
 	resolveCodexRunSessionBindingAuthority: () => resolveCodexRunSessionBindingAuthority,
 	resolveCodexSessionBinding: () => resolveCodexSessionBinding,
-	scopeCodexRunBindingStore: () => scopeCodexRunBindingStore,
 	sessionBindingIdentity: () => sessionBindingIdentity,
 	validateBindingForWrite: () => validateBindingForWrite
 });
@@ -154,35 +153,6 @@ function createStoredCodexAppServerBinding(value, options = {}) {
 function bindingLeaseLostError(key, cause) {
 	return new Error(`Lost Codex binding lease: ${key}`, cause === void 0 ? void 0 : { cause });
 }
-/** Carries one prepared run identity through callers that rederive it from public params. */
-function scopeCodexRunBindingStore(params) {
-	const mapSessionIdentity = (identity) => identity.agentId === params.logicalIdentity.agentId && identity.sessionId === params.logicalIdentity.sessionId && identity.sessionKey?.trim() === params.logicalIdentity.sessionKey?.trim() ? params.physicalIdentity : identity;
-	const mapIdentity = (identity) => identity.kind === "session" ? mapSessionIdentity(identity) : identity;
-	const mapHistoryOwner = (identity, owner) => {
-		const mapped = mapIdentity(identity);
-		return identity.kind === "session" && mapped.kind === "session" && owner.sessionId === identity.sessionId ? {
-			...owner,
-			sessionId: mapped.sessionId
-		} : owner;
-	};
-	return {
-		...params.bindingStore,
-		read: (identity) => params.bindingStore.read(mapIdentity(identity)),
-		readNativeSubagentSubmissions: (identity, owner) => params.bindingStore.readNativeSubagentSubmissions(mapIdentity(identity), mapHistoryOwner(identity, owner)),
-		hasOtherThreadOwner: (threadId, identity) => params.bindingStore.hasOtherThreadOwner(threadId, identity ? mapIdentity(identity) : void 0),
-		mutate: (identity, mutation, assertCurrent) => params.bindingStore.mutate(mapIdentity(identity), mutation.kind === "record-native-subagent-submission" || mutation.kind === "consume-native-subagent-submission" ? {
-			...mutation,
-			owner: mapHistoryOwner(identity, mutation.owner)
-		} : mutation, assertCurrent),
-		prepareSessionGenerationReclaim: (identity) => params.bindingStore.prepareSessionGenerationReclaim(mapSessionIdentity(identity)),
-		adoptSessionGeneration: (identity, expectedPreviousSessionId, assertCurrent) => params.bindingStore.adoptSessionGeneration(mapSessionIdentity(identity), expectedPreviousSessionId, assertCurrent),
-		resetSessionGeneration: (identity) => params.bindingStore.resetSessionGeneration(mapSessionIdentity(identity)),
-		retireSessionGeneration: (identity) => params.bindingStore.retireSessionGeneration(mapSessionIdentity(identity)),
-		withSessionDeletion: (identity, assertCurrent, run) => params.bindingStore.withSessionDeletion(mapSessionIdentity(identity), assertCurrent, run),
-		withThreadArchiveFence: (run) => params.bindingStore.withThreadArchiveFence(run),
-		withLease: (identity, run) => params.bindingStore.withLease(mapIdentity(identity), run)
-	};
-}
 async function reclaimPreparedCodexSessionGeneration(params, authority, assertCurrent = authority[3]) {
 	const plan = await params.bindingStore.prepareSessionGenerationReclaim(params.identity);
 	assertCurrent();
@@ -446,6 +416,7 @@ function createCodexAppServerBindingStore(state) {
 	};
 	return {
 		read: (identity) => readCurrentCodexAppServerBinding(state, identity),
+		...state.lookupMany ? { readMany: (identities) => readCurrentCodexAppServerBindings(state, identities) } : {},
 		readNativeSubagentSubmissions: (identity, owner) => readCurrentCodexNativeSubagentSubmissions(state, identity, owner),
 		async hasOtherThreadOwner(threadId, currentIdentity) {
 			const currentKey = currentIdentity ? bindingStoreKey(currentIdentity) : void 0;
@@ -718,4 +689,4 @@ function sleep(ms) {
 	});
 }
 //#endregion
-export { resolveCodexRunSessionBindingAuthority as a, session_binding_exports as c, reclaimCurrentCodexSessionGeneration as i, createCodexSessionGenerationSupersededError as n, resolveCodexSessionBinding as o, hashCodexAppServerBindingFingerprint as r, scopeCodexRunBindingStore as s, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t };
+export { resolveCodexRunSessionBindingAuthority as a, reclaimCurrentCodexSessionGeneration as i, createCodexSessionGenerationSupersededError as n, resolveCodexSessionBinding as o, hashCodexAppServerBindingFingerprint as r, session_binding_exports as s, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t };

package/dist/.setup/{session-binding-record-TH3xA0zj.mjs → session-binding-record-BGoz8wOK.mjs}

@@ -192,7 +192,7 @@ const threadBindingSchema = z.object({
 	connectionScope: z.literal("supervision").optional(),
 	supervisionSourceThreadId: z.string().trim().min(1).optional(),
 	authProfileId: optionalStringSchema,
-	agentWorkspaceDeveloperInstructions: optionalNonBlankStringSchema,
+	agentWorkspaceDeveloperInstructions: optionalStringSchema,
 	model: optionalStringSchema,
 	preserveNativeModel: z.literal(true).optional().catch(void 0),
 	pendingSupervisionBranch: pendingSupervisionBranchSchema.optional(),
@@ -345,11 +345,30 @@ function readCodexBindingTimestamp(value) {
 /** The same physical-generation check serves execution and read-only projections. */
 function readCurrentCodexAppServerBinding(state, identity) {
 	const key = bindingStoreKey(identity);
-	const raw = state.lookup(key);
+	return decodeCurrentCodexAppServerBinding(key, state.lookup(key), identity);
+}
+function decodeCurrentCodexAppServerBinding(key, raw, identity) {
 	const stored = readStoredCodexAppServerBinding(raw);
 	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
 	return stored?.state === "active" && ownsStoredSessionGeneration(identity, stored) ? stored.binding : void 0;
 }
+/** Consume synchronously so each list phase acquires fresh binding authority. */
+function* readCurrentCodexAppServerBindings(state, identities) {
+	let keys;
+	if (state.lookupMany && identities.length > 1 && identities.length <= 1e4) try {
+		keys = identities.map(bindingStoreKey);
+	} catch {}
+	if (!keys || !state.lookupMany) {
+		for (const identity of identities) yield readCurrentCodexAppServerBinding(state, identity);
+		return;
+	}
+	const values = state.lookupMany(keys);
+	for (let index = 0; index < identities.length; index++) {
+		const value = values[index];
+		if (!value.ok) throw value.error;
+		yield decodeCurrentCodexAppServerBinding(keys[index], value.value, identities[index]);
+	}
+}
 function matchesCodexNativeSubagentSubmissionBinding(binding, owner) {
 	return binding.threadId === owner.parentThreadId && !binding.pendingSupervisionBranch && codexNativeSubagentHistoryConnectionFingerprint(binding) === owner.connectionFingerprint;
 }
@@ -431,4 +450,4 @@ function readDestructiveApprovalMode(value, bindingSchemaVersion) {
 	return "invalid";
 }
 //#endregion
-export { readCodexNativeSubagentHistoryOwner as S, mutateCodexNativeSubagentSubmissions as _, ownsStoredSessionGeneration as a, createCodexNativeSubagentHistoryOwner as b, readCodexBindingTimestamp as c, readPluginAppPolicyContext as d, readStoredCodexAppServerBinding as f, adoptCodexNativeSubagentSubmissions as g, validateBindingForWrite as h, matchesCodexNativeSubagentSubmissionBinding as i, readCurrentCodexAppServerBinding as l, stripUndefinedBinding as m, assertCodexBindingMayBeReplaced as n, preserveCodexNativeSubagentSubmissions as o, sessionBindingIdentity as p, bindingStoreKey as r, readCodexAppServerThreadBinding as s, CodexSupervisionBindingReplacementError as t, readCurrentCodexNativeSubagentSubmissions as u, assertHistoryOwnerMatchesRegistration as v, matchesCodexNativeSubagentHistoryOwner as x, codexNativeSubagentHistoryConnectionFingerprint as y };
+export { readCodexNativeSubagentHistoryOwner as C, matchesCodexNativeSubagentHistoryOwner as S, adoptCodexNativeSubagentSubmissions as _, ownsStoredSessionGeneration as a, codexNativeSubagentHistoryConnectionFingerprint as b, readCodexBindingTimestamp as c, readCurrentCodexNativeSubagentSubmissions as d, readPluginAppPolicyContext as f, validateBindingForWrite as g, stripUndefinedBinding as h, matchesCodexNativeSubagentSubmissionBinding as i, readCurrentCodexAppServerBinding as l, sessionBindingIdentity as m, assertCodexBindingMayBeReplaced as n, preserveCodexNativeSubagentSubmissions as o, readStoredCodexAppServerBinding as p, bindingStoreKey as r, readCodexAppServerThreadBinding as s, CodexSupervisionBindingReplacementError as t, readCurrentCodexAppServerBindings as u, mutateCodexNativeSubagentSubmissions as v, createCodexNativeSubagentHistoryOwner as x, assertHistoryOwnerMatchesRegistration as y };

package/dist/.setup/{session-binding-sidecars-CKYEcfNn.mjs → session-binding-sidecars-BlB5EvIS.mjs}

@@ -5,11 +5,56 @@ import { listAgentIds, resolveAgentDir, resolveSessionAgentIdsStrict } from "ope
 import path from "node:path";
 import fs from "node:fs/promises";
 import { canonicalPathFromExistingAncestor, isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
-import { pathExists } from "openclaw/plugin-sdk/security-runtime";
+import { extractErrorCode } from "openclaw/plugin-sdk/error-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
+import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
 import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-paths";
+//#region extensions/codex/src/migration/session-binding-legacy-index.ts
+async function readLegacySessionIndex(storePath) {
+	let contents;
+	try {
+		contents = await fs.readFile(storePath, "utf8");
+	} catch (error) {
+		const code = extractErrorCode(error);
+		return code === "ENOENT" ? { entries: [] } : { failure: `session index ${storePath} could not be read${code ? ` (${code})` : ""}` };
+	}
+	let raw;
+	try {
+		raw = JSON.parse(contents);
+	} catch {
+		return { failure: `session index ${storePath} could not be read (invalid JSON)` };
+	}
+	if (!isRecord(raw)) return { failure: `session index ${storePath} has invalid entries` };
+	const entries = [];
+	for (const [sessionKey, value] of Object.entries(raw)) {
+		if (!isRecord(value)) return { failure: `session index ${storePath} has invalid entries` };
+		if (value.sessionId === void 0) continue;
+		const sessionId = typeof value.sessionId === "string" ? value.sessionId.trim() : "";
+		const sessionFile = value.sessionFile;
+		const lifecycleRevision = value.lifecycleRevision;
+		const agentHarnessId = value.agentHarnessId;
+		if (!isSafeLegacySessionId(value.sessionId) || sessionFile !== void 0 && typeof sessionFile !== "string" || lifecycleRevision !== void 0 && typeof lifecycleRevision !== "string" || agentHarnessId !== void 0 && typeof agentHarnessId !== "string") return { failure: `session index ${storePath} has invalid entries` };
+		entries.push({
+			sessionKey,
+			entry: {
+				sessionId,
+				...typeof sessionFile === "string" ? { sessionFile } : {},
+				...typeof lifecycleRevision === "string" ? { lifecycleRevision } : {},
+				...typeof agentHarnessId === "string" ? { agentHarnessId } : {},
+				...typeof value.updatedAt === "number" && Number.isFinite(value.updatedAt) && value.updatedAt >= 0 ? { updatedAt: value.updatedAt } : {}
+			}
+		});
+	}
+	return { entries };
+}
+function isSafeLegacySessionId(value) {
+	if (typeof value !== "string") return false;
+	const trimmed = value.trim();
+	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
+}
+//#endregion
 //#region extensions/codex/src/migration/session-binding-sidecars.ts
 const LEGACY_BINDING_SUFFIX = ".codex-app-server.json";
 const CODEX_AGENT_HARNESS_ID = "codex";
@@ -35,7 +80,7 @@ async function collectSessionSurfaces(params) {
 			agentIds: /* @__PURE__ */ new Set()
 		};
 		surface.scan ||= scan;
-		surface.storePaths.add(path.resolve(storePath));
+		if (!storePath.endsWith(".sqlite")) surface.storePaths.add(path.resolve(storePath));
 		if (agentId) surface.agentIds.add(agentId);
 		surfaces.set(canonicalRoot, surface);
 	};
@@ -96,43 +141,6 @@ async function collectLegacyBindingSources(params, options = {}) {
 		surfaces
 	};
 }
-async function readLegacySessionIndex(storePath) {
-	let contents;
-	try {
-		contents = await fs.readFile(storePath, "utf8");
-	} catch (error) {
-		const code = error.code;
-		return code === "ENOENT" ? { entries: [] } : { failure: `session index ${storePath} could not be read${code ? ` (${code})` : ""}` };
-	}
-	let raw;
-	try {
-		raw = JSON.parse(contents);
-	} catch {
-		return { failure: `session index ${storePath} could not be read (invalid JSON)` };
-	}
-	if (!isRecord(raw)) return { failure: `session index ${storePath} has invalid entries` };
-	const entries = [];
-	for (const [sessionKey, value] of Object.entries(raw)) {
-		if (!isRecord(value)) return { failure: `session index ${storePath} has invalid entries` };
-		if (value.sessionId === void 0) continue;
-		const sessionId = typeof value.sessionId === "string" ? value.sessionId.trim() : "";
-		const sessionFile = value.sessionFile;
-		const lifecycleRevision = value.lifecycleRevision;
-		const agentHarnessId = value.agentHarnessId;
-		if (!isSafeLegacySessionId(value.sessionId) || sessionFile !== void 0 && typeof sessionFile !== "string" || lifecycleRevision !== void 0 && typeof lifecycleRevision !== "string" || agentHarnessId !== void 0 && typeof agentHarnessId !== "string") return { failure: `session index ${storePath} has invalid entries` };
-		entries.push({
-			sessionKey,
-			entry: {
-				sessionId,
-				...typeof sessionFile === "string" ? { sessionFile } : {},
-				...typeof lifecycleRevision === "string" ? { lifecycleRevision } : {},
-				...typeof agentHarnessId === "string" ? { agentHarnessId } : {},
-				...typeof value.updatedAt === "number" && Number.isFinite(value.updatedAt) && value.updatedAt >= 0 ? { updatedAt: value.updatedAt } : {}
-			}
-		});
-	}
-	return { entries };
-}
 async function* iterateIndexedSidecars(surface) {
 	for (const storePath of surface.storePaths) {
 		const index = await readLegacySessionIndex(storePath);
@@ -292,7 +300,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-_0W_fHRr.mjs").then((n) => n.c), import("./conversation-binding-data-CrcyZk6O.mjs").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Cm0apEbd.mjs").then((n) => n.s), import("./conversation-binding-data-CrcyZk6O.mjs").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -491,11 +499,6 @@ async function readDirectoryEntries(directory) {
 		throw error;
 	}
 }
-function isSafeLegacySessionId(value) {
-	if (typeof value !== "string") return false;
-	const trimmed = value.trim();
-	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
-}
 async function detectLegacySessionBindingSidecars(params) {
 	const { sources } = await collectLegacyBindingSources(params, { firstOnly: true });
 	return sources.length > 0 ? { preview: [`- Codex app-server bindings: legacy sidecar -> plugin state (${CODEX_APP_SERVER_BINDING_NAMESPACE})`] } : null;