@openclaw/codex 2026.9.5 → 2026.9.7

package/dist/.setup/{session-binding-record-TH3xA0zj.mjs → session-binding-record-Oe9L-CNY.mjs}

@@ -1,115 +1,11 @@
-import { i as normalizeCodexServiceTier, m as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-DujwEnhg.mjs";
+import { d as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, r as normalizeCodexServiceTier } from "./config-utils-D0CXecki.mjs";
+import { a as matchesCodexNativeSubagentSubmissionOwner, h as codexNativeSubagentHistoryConnectionFingerprint, r as readNativePendingAssignments, s as readCodexNativeSubagentSubmissions, t as matchesNativeAssignmentLifecycle } from "./native-subagent-pending-assignments-DwkCzLvD.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { z } from "zod";
-//#region extensions/codex/src/app-server/native-subagent-history-owner.ts
-const nonBlankString = z.string().refine((value) => Boolean(value.trim()));
-const codexNativeSubagentHistoryOwnerSchema = z.object({
-	parentThreadId: nonBlankString,
-	sessionId: nonBlankString,
-	lifecycleRevision: nonBlankString.optional(),
-	connectionFingerprint: z.string().regex(/^[a-f0-9]{64}$/u)
-});
-/** Automatic recovery may follow native rotation only within the same host lifecycle and connection. */
-function matchesCodexNativeSubagentHistoryOwner(stored, current) {
-	return stored.connectionFingerprint === current.connectionFingerprint && stored.lifecycleRevision === current.lifecycleRevision && (stored.lifecycleRevision !== void 0 || stored.sessionId === current.sessionId);
-}
-function codexNativeSubagentHistoryConnectionFingerprint(binding) {
-	if (!binding.appServerRuntimeFingerprint) return;
-	return createHash("sha256").update(JSON.stringify([
-		binding.appServerRuntimeFingerprint,
-		binding.connectionScope ?? null,
-		binding.authProfileId ?? null
-	])).digest("hex");
-}
-function createCodexNativeSubagentHistoryOwner(params) {
-	const connectionFingerprint = codexNativeSubagentHistoryConnectionFingerprint(params.binding);
-	return connectionFingerprint ? {
-		parentThreadId: params.parentThreadId,
-		sessionId: params.sessionId,
-		...params.lifecycleRevision ? { lifecycleRevision: params.lifecycleRevision } : {},
-		connectionFingerprint
-	} : void 0;
-}
-function readCodexNativeSubagentHistoryOwner(detail) {
-	const value = asOptionalRecord(detail)?.nativeHistory;
-	if (value === void 0) return;
-	const owner = codexNativeSubagentHistoryOwnerSchema.safeParse(value);
-	if (!owner.success) throw new Error("Subagent history owner is invalid.");
-	const { lifecycleRevision, ...required } = owner.data;
-	return lifecycleRevision === void 0 ? required : {
-		...required,
-		lifecycleRevision
-	};
-}
-function assertHistoryOwnerMatchesRegistration(saved, current, parentThreadId, requireSaved = false) {
-	if (requireSaved && !saved) throw new Error("Subagent completion history owner is missing.");
-	if (saved && (!current || saved.parentThreadId !== parentThreadId || saved.connectionFingerprint !== current.connectionFingerprint || saved.sessionId !== current.sessionId || saved.lifecycleRevision !== current.lifecycleRevision)) throw new Error("Subagent completion history owner is contradictory.");
-}
-//#endregion
-//#region extensions/codex/src/app-server/native-subagent-submission.ts
-const identifier = z.string().refine((value) => Boolean(value.trim()));
-const submissionSchema = z.object({
-	parentTurnId: identifier,
-	callId: identifier,
-	childThreadId: identifier,
-	submissionId: identifier,
-	predecessorRunId: identifier,
-	predecessorNativeTurnId: identifier
-}).strict();
-const submissionsSchema = z.object({
-	version: z.literal(1),
-	owner: codexNativeSubagentHistoryOwnerSchema,
-	receipts: z.array(submissionSchema)
-}).strict().refine(({ receipts }) => new Set(receipts.map(({ parentTurnId, callId }) => JSON.stringify([parentTurnId, callId]))).size === receipts.length);
-function matchesCodexNativeSubagentSubmissionOwner(stored, current) {
-	return stored.parentThreadId === current.parentThreadId && matchesCodexNativeSubagentHistoryOwner(stored, current);
-}
-function readCodexNativeSubagentSubmissions(value) {
-	if (value === void 0) return;
-	const parsed = submissionsSchema.safeParse(value);
-	if (!parsed.success) throw new Error("Invalid Codex native subagent submission metadata.");
-	return parsed.data;
-}
-function mutateCodexNativeSubagentSubmissions(params) {
-	const current = readCodexNativeSubagentSubmissions(params.current);
-	const owner = codexNativeSubagentHistoryOwnerSchema.parse(params.owner);
-	const receipt = submissionSchema.parse(params.receipt);
-	if (current && !matchesCodexNativeSubagentSubmissionOwner(current.owner, owner)) return { applied: false };
-	const receipts = current?.receipts ?? [];
-	const existing = receipts.find((entry) => entry.parentTurnId === receipt.parentTurnId && entry.callId === receipt.callId);
-	if (existing && !isDeepStrictEqual(existing, receipt)) return { applied: false };
-	if (params.consume) {
-		if (!current) return { applied: false };
-		const remaining = receipts.filter((entry) => entry !== existing);
-		return {
-			applied: true,
-			...remaining.length ? { next: {
-				version: 1,
-				owner: current.owner,
-				receipts: remaining
-			} } : {}
-		};
-	}
-	return {
-		applied: true,
-		next: {
-			version: 1,
-			owner: current?.owner ?? owner,
-			receipts: existing ? receipts : [...receipts, receipt]
-		}
-	};
-}
-/** Physical adoption cannot establish continuity for an unstamped receipt. */
-function adoptCodexNativeSubagentSubmissions(value) {
-	if (value === void 0) return;
-	const parsed = submissionsSchema.safeParse(value);
-	return !parsed.success || parsed.data.owner.lifecycleRevision ? value : void 0;
-}
-//#endregion
 //#region extensions/codex/src/app-server/session-binding-record.ts
 /** Canonical binding codec and synchronous generation-aware reads; no lifecycle or auth loading. */
 /** Resolves the same agent scope OpenClaw uses for transcript/session ownership. */
@@ -184,6 +80,7 @@ const pluginAppPolicyContextSchema = z.object({
 	apps: z.record(z.string(), z.union([accountAppPolicyEntrySchema, pluginAppPolicyEntrySchema])),
 	pluginAppIds: z.record(z.string(), z.array(z.string())).default({})
 }).strict();
+const legacyAppPolicyEntrySchema = z.union([accountAppPolicyEntrySchema.strip(), pluginAppPolicyEntrySchema.strip()]);
 const threadBindingSchema = z.object({
 	threadId: z.string().refine((value) => Boolean(value.trim())),
 	clientId: optionalStringSchema,
@@ -192,7 +89,7 @@ const threadBindingSchema = z.object({
 	connectionScope: z.literal("supervision").optional(),
 	supervisionSourceThreadId: z.string().trim().min(1).optional(),
 	authProfileId: optionalStringSchema,
-	agentWorkspaceDeveloperInstructions: optionalNonBlankStringSchema,
+	agentWorkspaceDeveloperInstructions: optionalStringSchema,
 	model: optionalStringSchema,
 	preserveNativeModel: z.literal(true).optional().catch(void 0),
 	pendingSupervisionBranch: pendingSupervisionBranchSchema.optional(),
@@ -277,6 +174,12 @@ const threadBindingSchema = z.object({
 		message: "pending supervision bindings require supervision connection ownership"
 	});
 });
+function matchesPendingSupervisionBranch(binding, expected) {
+	const pending = binding?.pendingSupervisionBranch;
+	const cleanup = pending?.cleanupThreadIds ?? [];
+	const expectedCleanup = expected.cleanupThreadIds ?? [];
+	return binding?.threadId === expected.sourceThreadId && pending?.sourceThreadId === expected.sourceThreadId && pending.connectionFingerprint === expected.connectionFingerprint && pending.lastTurnId === expected.lastTurnId && cleanup.length === expectedCleanup.length && cleanup.every((threadId, index) => threadId === expectedCleanup[index]);
+}
 const bindingLeaseSchema = z.object({
 	token: z.string().refine((value) => Boolean(value.trim())),
 	expiresAt: z.number().finite()
@@ -288,13 +191,16 @@ const storedBindingSchema = z.discriminatedUnion("state", [z.object({
 	binding: threadBindingSchema,
 	sessionId: storedSessionIdSchema,
 	lease: bindingLeaseSchema.optional().catch(void 0),
-	nativeSubagentSubmissions: z.unknown().optional()
+	nativeSubagentSubmissions: z.unknown().optional(),
+	nativeSubagentAssignments: z.unknown().optional(),
+	nativeSubagentTaskImport: z.unknown().optional()
 }), z.object({
 	version: z.literal(1),
 	state: z.literal("cleared"),
 	sessionId: storedSessionIdSchema,
 	lease: bindingLeaseSchema.optional().catch(void 0),
-	retired: z.literal(true).optional().catch(void 0)
+	retired: z.literal(true).optional().catch(void 0),
+	nativeSubagentTaskImport: z.unknown().optional()
 })]);
 /** Stable plugin-state key for one current binding owner. */
 function bindingStoreKey(identity) {
@@ -345,11 +251,30 @@ function readCodexBindingTimestamp(value) {
 /** The same physical-generation check serves execution and read-only projections. */
 function readCurrentCodexAppServerBinding(state, identity) {
 	const key = bindingStoreKey(identity);
-	const raw = state.lookup(key);
+	return decodeCurrentCodexAppServerBinding(key, state.lookup(key), identity);
+}
+function decodeCurrentCodexAppServerBinding(key, raw, identity) {
 	const stored = readStoredCodexAppServerBinding(raw);
 	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
 	return stored?.state === "active" && ownsStoredSessionGeneration(identity, stored) ? stored.binding : void 0;
 }
+/** Consume synchronously so each list phase acquires fresh binding authority. */
+function* readCurrentCodexAppServerBindings(state, identities) {
+	let keys;
+	if (state.lookupMany && identities.length > 1 && identities.length <= 1e4) try {
+		keys = identities.map(bindingStoreKey);
+	} catch {}
+	if (!keys || !state.lookupMany) {
+		for (const identity of identities) yield readCurrentCodexAppServerBinding(state, identity);
+		return;
+	}
+	const values = state.lookupMany(keys);
+	for (let index = 0; index < identities.length; index++) {
+		const value = values[index];
+		if (!value.ok) throw value.error;
+		yield decodeCurrentCodexAppServerBinding(keys[index], value.value, identities[index]);
+	}
+}
 function matchesCodexNativeSubagentSubmissionBinding(binding, owner) {
 	return binding.threadId === owner.parentThreadId && !binding.pendingSupervisionBranch && codexNativeSubagentHistoryConnectionFingerprint(binding) === owner.connectionFingerprint;
 }
@@ -366,6 +291,21 @@ function readCurrentCodexNativeSubagentSubmissions(state, identity, owner) {
 	const submissions = readCodexNativeSubagentSubmissions(stored.nativeSubagentSubmissions);
 	return submissions && matchesCodexNativeSubagentSubmissionOwner(submissions.owner, owner) ? submissions.receipts : [];
 }
+function readCurrentNativePendingAssignments(state, identity, owner) {
+	const key = bindingStoreKey(identity);
+	const raw = state.lookup(key);
+	const stored = readStoredCodexAppServerBinding(raw);
+	if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
+	if (stored?.state !== "active" || !ownsStoredSessionGeneration(identity, stored) || identity.kind === "session" && owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(stored.binding, owner)) return [];
+	return (readNativePendingAssignments(stored.nativeSubagentAssignments)?.assignments ?? []).filter((entry) => matchesNativeAssignmentLifecycle(entry.owner, owner));
+}
+function preserveNativeTaskImport(current) {
+	return current?.nativeSubagentTaskImport !== void 0 ? { nativeSubagentTaskImport: current.nativeSubagentTaskImport } : {};
+}
+/** Preserve inventory through native rotation, never across a connection-policy change. */
+function preserveNativePendingAssignments(current, next, value) {
+	return codexNativeSubagentHistoryConnectionFingerprint(current) === codexNativeSubagentHistoryConnectionFingerprint(next) && isDeepStrictEqual(current.pendingSupervisionBranch, next.pendingSupervisionBranch) ? value : void 0;
+}
 var CodexSupervisionBindingReplacementError = class extends Error {
 	constructor(threadId, operation) {
 		super(`Refusing to replace supervised Codex thread ${threadId} while ${operation}; its native user-home connection and model ownership must be preserved`);
@@ -386,28 +326,29 @@ function readPluginAppPolicyContext(value, bindingSchemaVersion) {
 		const entry = asOptionalRecord(rawEntry);
 		if (!entry) return;
 		const destructiveApprovalMode = readDestructiveApprovalMode(entry.destructiveApprovalMode, bindingSchemaVersion);
-		const mcpServerNames = Array.isArray(entry.mcpServerNames) && entry.mcpServerNames.every((serverName) => typeof serverName === "string") ? entry.mcpServerNames : void 0;
-		if (entry.source === "account") {
-			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNames) return;
-			parsedApps[appId] = {
-				source: "account",
-				appName: entry.appName,
-				allowDestructiveActions: entry.allowDestructiveActions,
-				...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
-				...destructiveApprovalMode ? { destructiveApprovalMode } : {},
-				mcpServerNames
-			};
-			continue;
-		}
-		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || typeof entry.marketplaceName !== "string" || !CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(entry.marketplaceName) || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNames) return;
-		parsedApps[appId] = {
-			configKey: entry.configKey,
-			marketplaceName: entry.marketplaceName,
-			pluginName: entry.pluginName,
-			allowDestructiveActions: entry.allowDestructiveActions,
-			...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
+		if ("appId" in entry || destructiveApprovalMode === "invalid") return;
+		const parsed = legacyAppPolicyEntrySchema.safeParse({
+			...entry,
+			destructiveApprovalMode
+		});
+		if (!parsed.success) return;
+		const validated = parsed.data;
+		const policy = {
+			allowDestructiveActions: validated.allowDestructiveActions,
+			...validated.allowOpenWorld !== void 0 ? { allowOpenWorld: validated.allowOpenWorld } : {},
 			...destructiveApprovalMode ? { destructiveApprovalMode } : {},
-			mcpServerNames
+			mcpServerNames: validated.mcpServerNames
+		};
+		if (validated.source === "account") parsedApps[appId] = {
+			source: "account",
+			appName: validated.appName,
+			...policy
+		};
+		else parsedApps[appId] = {
+			configKey: validated.configKey,
+			marketplaceName: validated.marketplaceName,
+			pluginName: validated.pluginName,
+			...policy
 		};
 	}
 	const parsedPluginAppIds = {};
@@ -431,4 +372,4 @@ function readDestructiveApprovalMode(value, bindingSchemaVersion) {
 	return "invalid";
 }
 //#endregion
-export { readCodexNativeSubagentHistoryOwner as S, mutateCodexNativeSubagentSubmissions as _, ownsStoredSessionGeneration as a, createCodexNativeSubagentHistoryOwner as b, readCodexBindingTimestamp as c, readPluginAppPolicyContext as d, readStoredCodexAppServerBinding as f, adoptCodexNativeSubagentSubmissions as g, validateBindingForWrite as h, matchesCodexNativeSubagentSubmissionBinding as i, readCurrentCodexAppServerBinding as l, stripUndefinedBinding as m, assertCodexBindingMayBeReplaced as n, preserveCodexNativeSubagentSubmissions as o, sessionBindingIdentity as p, bindingStoreKey as r, readCodexAppServerThreadBinding as s, CodexSupervisionBindingReplacementError as t, readCurrentCodexNativeSubagentSubmissions as u, assertHistoryOwnerMatchesRegistration as v, matchesCodexNativeSubagentHistoryOwner as x, codexNativeSubagentHistoryConnectionFingerprint as y };
+export { readStoredCodexAppServerBinding as _, matchesPendingSupervisionBranch as a, validateBindingForWrite as b, preserveNativePendingAssignments as c, readCodexBindingTimestamp as d, readCurrentCodexAppServerBinding as f, readPluginAppPolicyContext as g, readCurrentNativePendingAssignments as h, matchesCodexNativeSubagentSubmissionBinding as i, preserveNativeTaskImport as l, readCurrentCodexNativeSubagentSubmissions as m, assertCodexBindingMayBeReplaced as n, ownsStoredSessionGeneration as o, readCurrentCodexAppServerBindings as p, bindingStoreKey as r, preserveCodexNativeSubagentSubmissions as s, CodexSupervisionBindingReplacementError as t, readCodexAppServerThreadBinding as u, sessionBindingIdentity as v, stripUndefinedBinding as y };

package/dist/.setup/{session-binding-sidecars-CKYEcfNn.mjs → session-binding-sidecars-jo6H8dFr.mjs}

@@ -1,15 +1,243 @@
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.mjs";
+import "node:module";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { isDeepStrictEqual } from "node:util";
 import { listAgentIds, resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import path from "node:path";
 import fs from "node:fs/promises";
+import { extractErrorCode } from "openclaw/plugin-sdk/error-runtime";
 import { canonicalPathFromExistingAncestor, isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
-import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
+import { pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
-import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-paths";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+//#endregion
+//#region packages/normalization-core/src/record-coerce.ts
+/** Type guard for non-array object records at browser-safe boundaries. */
+function isRecord$1(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/** Returns a non-array record or null. */
+function asNullableRecord$1(value) {
+	return isRecord$1(value) ? value : null;
+}
+//#endregion
+//#region src/config/channel-config-normalization.ts
+/** Applies one channel-specific doctor migration to every object-shaped account. */
+function normalizeChannelAccounts(params) {
+	const rawAccounts = asNullableRecord$1(params.entry.accounts);
+	if (!rawAccounts) return {
+		entry: params.entry,
+		changed: false
+	};
+	let changed = false;
+	const accounts = { ...rawAccounts };
+	for (const [accountId, value] of Object.entries(rawAccounts)) {
+		const account = asNullableRecord$1(value);
+		if (!account) continue;
+		const normalized = params.normalizeAccount({
+			account,
+			accountId,
+			pathPrefix: `${params.pathPrefix}.accounts.${accountId}`,
+			changes: params.changes
+		});
+		if (normalized.changed) {
+			accounts[accountId] = normalized.entry;
+			changed = true;
+		}
+	}
+	return changed ? {
+		entry: {
+			...params.entry,
+			accounts
+		},
+		changed: true
+	} : {
+		entry: params.entry,
+		changed: false
+	};
+}
+/** Applies the same channel-specific doctor migration at root and account scope. */
+function normalizeChannelConfigEntries(params) {
+	const changes = params.changes ?? [];
+	const channels = params.cfg.channels;
+	const entry = asNullableRecord$1(channels?.[params.channelId]);
+	if (!entry) return {
+		config: params.cfg,
+		changes
+	};
+	const channelPath = `channels.${params.channelId}`;
+	const root = params.normalizeEntry({
+		entry,
+		pathPrefix: channelPath,
+		changes
+	});
+	const accounts = normalizeChannelAccounts({
+		entry: root.entry,
+		pathPrefix: channelPath,
+		changes,
+		normalizeAccount: (accountParams) => params.normalizeEntry({
+			entry: accountParams.account,
+			accountId: accountParams.accountId,
+			pathPrefix: accountParams.pathPrefix,
+			changes: accountParams.changes
+		})
+	});
+	if (!root.changed && !accounts.changed) return {
+		config: params.cfg,
+		changes
+	};
+	return {
+		config: {
+			...params.cfg,
+			channels: {
+				...channels,
+				[params.channelId]: accounts.entry
+			}
+		},
+		changes
+	};
+}
+//#endregion
+//#region src/plugin-sdk/legacy-webhook-listener-migration.ts
+/** Preserve explicitly configured webhook listeners while moving ingress onto Gateway routes. */
+function createLegacyWebhookListenerDoctorContract(params) {
+	const portKey = params.portKey ?? "webhookPort";
+	const hostKey = params.hostKey === void 0 ? "webhookHost" : params.hostKey;
+	const source = (entry) => params.webhookKey ? asNullableRecord$1(entry[params.webhookKey]) : entry;
+	const hasLegacy = (value) => {
+		const entry = asNullableRecord$1(value);
+		const listener = entry && source(entry);
+		return Boolean(listener && (Object.hasOwn(listener, portKey) || hostKey && Object.hasOwn(listener, hostKey)));
+	};
+	const prefix = `channels.${params.channelKey}`;
+	return {
+		legacyConfigRules: [{
+			path: ["channels", params.channelKey],
+			message: `${prefix} webhook listeners moved to Gateway routes. Run "openclaw doctor --fix" to preserve explicitly configured listener settings as legacyWebhook.`,
+			match: (value) => {
+				const accounts = asNullableRecord$1(asNullableRecord$1(value)?.accounts);
+				return hasLegacy(value) || Object.values(accounts ?? {}).some(hasLegacy);
+			}
+		}],
+		normalizeCompatibilityConfig: ({ cfg }) => {
+			const root = asNullableRecord$1(asNullableRecord$1(cfg.channels)?.[params.channelKey]);
+			const inherited = root && source(root);
+			const canonicalRoot = asNullableRecord$1(root?.legacyWebhook);
+			return normalizeChannelConfigEntries({
+				cfg,
+				channelId: params.channelKey,
+				normalizeEntry: ({ entry, accountId, pathPrefix, changes }) => {
+					const listener = source(entry);
+					if (!listener || !hasLegacy(entry)) return {
+						entry,
+						changed: false
+					};
+					const next = { ...entry };
+					const port = Object.hasOwn(listener, portKey) ? listener[portKey] : (accountId ? canonicalRoot?.port ?? inherited?.[portKey] : void 0) ?? params.defaultPort;
+					const inheritedHost = accountId ? canonicalRoot ? canonicalRoot.host : (hostKey ? inherited?.[hostKey] : void 0) ?? params.defaultHost : params.defaultHost;
+					const host = hostKey ? listener[hostKey] ?? inheritedHost : inheritedHost;
+					const legacyPath = [pathPrefix, params.webhookKey].filter(Boolean).join(".");
+					if (Object.hasOwn(entry, "legacyWebhook")) changes.push(`Removed ${legacyPath} legacy listener keys; ${pathPrefix}.legacyWebhook is already configured.`);
+					else if (accountId && root?.legacyWebhook === false) changes.push(`Removed ${legacyPath} legacy listener keys; ${prefix}.legacyWebhook: false keeps this account's inherited listener disabled.`);
+					else {
+						next.legacyWebhook = {
+							port,
+							...host !== void 0 ? { host } : {}
+						};
+						changes.push(`Moved ${legacyPath} listener settings to ${pathPrefix}.legacyWebhook. Point the external callback or reverse proxy at the Gateway port and webhook path, verify delivery, then set legacyWebhook: false to disable legacy forwarding.`);
+					}
+					const updated = params.webhookKey ? { ...listener } : next;
+					delete updated[portKey];
+					if (hostKey) delete updated[hostKey];
+					if (params.webhookKey) {
+						if (Object.keys(updated).length) next[params.webhookKey] = updated;
+						else delete next[params.webhookKey];
+					}
+					return {
+						entry: next,
+						changed: true
+					};
+				}
+			});
+		}
+	};
+}
+//#endregion
+//#region \0openclaw:bundled-sdk:openclaw/plugin-sdk/runtime-doctor-migrations
+var runtime_doctor_migrations_exports = /* @__PURE__ */ __exportAll({ createLegacyWebhookListenerDoctorContract: () => createLegacyWebhookListenerDoctorContract });
+import * as import_openclaw_plugin_sdk_runtime_doctor_migrations from "openclaw/plugin-sdk/runtime-doctor-migrations";
+__reExport(runtime_doctor_migrations_exports, import_openclaw_plugin_sdk_runtime_doctor_migrations);
+//#endregion
+//#region extensions/codex/src/migration/session-binding-legacy-index.ts
+async function readLegacySessionIndex(storePath) {
+	let contents;
+	try {
+		contents = await fs.readFile(storePath, "utf8");
+	} catch (error) {
+		const code = extractErrorCode(error);
+		return code === "ENOENT" ? { entries: [] } : { failure: `session index ${storePath} could not be read${code ? ` (${code})` : ""}` };
+	}
+	let raw;
+	try {
+		raw = JSON.parse(contents);
+	} catch {
+		return { failure: `session index ${storePath} could not be read (invalid JSON)` };
+	}
+	if (!isRecord(raw)) return { failure: `session index ${storePath} has invalid entries` };
+	const entries = [];
+	for (const [sessionKey, value] of Object.entries(raw)) {
+		if (!isRecord(value)) return { failure: `session index ${storePath} has invalid entries` };
+		if (value.sessionId === void 0) continue;
+		const sessionId = typeof value.sessionId === "string" ? value.sessionId.trim() : "";
+		const sessionFile = value.sessionFile;
+		const lifecycleRevision = value.lifecycleRevision;
+		const agentHarnessId = value.agentHarnessId;
+		if (!isSafeLegacySessionId(value.sessionId) || sessionFile !== void 0 && typeof sessionFile !== "string" || lifecycleRevision !== void 0 && typeof lifecycleRevision !== "string" || agentHarnessId !== void 0 && typeof agentHarnessId !== "string") return { failure: `session index ${storePath} has invalid entries` };
+		entries.push({
+			sessionKey,
+			entry: {
+				sessionId,
+				...typeof sessionFile === "string" ? { sessionFile } : {},
+				...typeof lifecycleRevision === "string" ? { lifecycleRevision } : {},
+				...typeof agentHarnessId === "string" ? { agentHarnessId } : {},
+				...typeof value.updatedAt === "number" && Number.isFinite(value.updatedAt) && value.updatedAt >= 0 ? { updatedAt: value.updatedAt } : {}
+			}
+		});
+	}
+	return { entries };
+}
+function isSafeLegacySessionId(value) {
+	if (typeof value !== "string") return false;
+	const trimmed = value.trim();
+	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
+}
+//#endregion
 //#region extensions/codex/src/migration/session-binding-sidecars.ts
 const LEGACY_BINDING_SUFFIX = ".codex-app-server.json";
 const CODEX_AGENT_HARNESS_ID = "codex";
@@ -35,7 +263,7 @@ async function collectSessionSurfaces(params) {
 			agentIds: /* @__PURE__ */ new Set()
 		};
 		surface.scan ||= scan;
-		surface.storePaths.add(path.resolve(storePath));
+		if (!storePath.endsWith(".sqlite")) surface.storePaths.add(path.resolve(storePath));
 		if (agentId) surface.agentIds.add(agentId);
 		surfaces.set(canonicalRoot, surface);
 	};
@@ -96,43 +324,6 @@ async function collectLegacyBindingSources(params, options = {}) {
 		surfaces
 	};
 }
-async function readLegacySessionIndex(storePath) {
-	let contents;
-	try {
-		contents = await fs.readFile(storePath, "utf8");
-	} catch (error) {
-		const code = error.code;
-		return code === "ENOENT" ? { entries: [] } : { failure: `session index ${storePath} could not be read${code ? ` (${code})` : ""}` };
-	}
-	let raw;
-	try {
-		raw = JSON.parse(contents);
-	} catch {
-		return { failure: `session index ${storePath} could not be read (invalid JSON)` };
-	}
-	if (!isRecord(raw)) return { failure: `session index ${storePath} has invalid entries` };
-	const entries = [];
-	for (const [sessionKey, value] of Object.entries(raw)) {
-		if (!isRecord(value)) return { failure: `session index ${storePath} has invalid entries` };
-		if (value.sessionId === void 0) continue;
-		const sessionId = typeof value.sessionId === "string" ? value.sessionId.trim() : "";
-		const sessionFile = value.sessionFile;
-		const lifecycleRevision = value.lifecycleRevision;
-		const agentHarnessId = value.agentHarnessId;
-		if (!isSafeLegacySessionId(value.sessionId) || sessionFile !== void 0 && typeof sessionFile !== "string" || lifecycleRevision !== void 0 && typeof lifecycleRevision !== "string" || agentHarnessId !== void 0 && typeof agentHarnessId !== "string") return { failure: `session index ${storePath} has invalid entries` };
-		entries.push({
-			sessionKey,
-			entry: {
-				sessionId,
-				...typeof sessionFile === "string" ? { sessionFile } : {},
-				...typeof lifecycleRevision === "string" ? { lifecycleRevision } : {},
-				...typeof agentHarnessId === "string" ? { agentHarnessId } : {},
-				...typeof value.updatedAt === "number" && Number.isFinite(value.updatedAt) && value.updatedAt >= 0 ? { updatedAt: value.updatedAt } : {}
-			}
-		});
-	}
-	return { entries };
-}
 async function* iterateIndexedSidecars(surface) {
 	for (const storePath of surface.storePaths) {
 		const index = await readLegacySessionIndex(storePath);
@@ -146,7 +337,7 @@ async function* iterateIndexedSidecars(surface) {
 				continue;
 			}
 			const sidecarPath = `${transcriptPath}${LEGACY_BINDING_SUFFIX}`;
-			if (await legacyStateFileExists(sidecarPath)) yield sidecarPath;
+			if (await (0, runtime_doctor_migrations_exports.legacyStateFileExists)(sidecarPath)) yield sidecarPath;
 		}
 	}
 }
@@ -277,22 +468,17 @@ function copyBindingForSession(stored, sessionId) {
 }
 async function migrateSource(source, candidates, params, store) {
 	let importedKeys = 0;
-	const retain = (reason) => ({
+	const retain = (reason, level = "warning") => ({
 		archived: false,
 		importedKeys,
-		warning: `Left Codex binding sidecar in place because ${reason}: ${source.sidecarPath}`
-	});
-	const retainNotice = (reason) => ({
-		archived: false,
-		importedKeys,
-		notice: `Left Codex binding sidecar in place because ${reason}: ${source.sidecarPath}`
+		[level]: `Left Codex binding sidecar in place because ${reason}: ${source.sidecarPath}`
 	});
 	const owner = candidates.length === 1 ? candidates[0] : void 0;
 	try {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-_0W_fHRr.mjs").then((n) => n.c), import("./conversation-binding-data-CrcyZk6O.mjs").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-DGCYAfvD.mjs").then((n) => n.s), import("./conversation-binding-data-C746z5Pn.mjs").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -303,15 +489,16 @@ async function migrateSource(source, candidates, params, store) {
 			});
 			if (!baseStored) return retain("its binding is invalid");
 			if (candidates.length > 1) return retain(`${candidates.length} matching session owners make ownership ambiguous`);
-			if (owner?.agentHarnessId && owner.agentHarnessId !== CODEX_AGENT_HARNESS_ID) return retainNotice(`its session is owned by agent harness ${owner.agentHarnessId}`);
+			if (owner?.agentHarnessId && owner.agentHarnessId !== CODEX_AGENT_HARNESS_ID) return retain(`its session is owned by agent harness ${owner.agentHarnessId}`, "notice");
 			const readEvidence = params.context.readSessionIdentityEvidenceBatch;
 			const canonicalOwner = owner && readEvidence ? (await readEvidence([{
 				agentId: owner.agentId,
 				sessionId: owner.sessionId
 			}]))[0] : void 0;
 			const canCreateOwner = !readEvidence || canonicalOwner?.state === "unknown";
-			const sourceSessionFile = typeof raw.sessionFile === "string" && raw.sessionFile.trim() ? raw.sessionFile : source.transcriptPath;
-			const ownerSessionFile = typeof raw.sessionFile === "string" && raw.sessionFile.trim() ? raw.sessionFile : owner?.transcriptPath;
+			const storedSessionFile = typeof raw.sessionFile === "string" && raw.sessionFile.trim() ? raw.sessionFile : void 0;
+			const sourceSessionFile = storedSessionFile ?? source.transcriptPath;
+			const ownerSessionFile = storedSessionFile ?? owner?.transcriptPath;
 			const conversationKeys = [sourceSessionFile, ...ownerSessionFile && ownerSessionFile !== sourceSessionFile ? [ownerSessionFile] : []].map((sessionFile) => bindingStoreKey({
 				kind: "conversation",
 				bindingId: legacyCodexConversationBindingId(sessionFile)
@@ -398,11 +585,11 @@ async function migrateSource(source, candidates, params, store) {
 						});
 						if (hasExpected(await store.lookup(sessionEntry.key), sessionEntry.value)) return retain(`${ownershipWarning}; its stale session binding could not be retired`);
 					}
-					if (typeof ownershipResult === "string") return retainNotice(ownershipWarning);
+					if (typeof ownershipResult === "string") return retain(ownershipWarning, "notice");
 				} else for (const entry of entries) if (!hasExpected(await store.lookup(entry.key), entry.value)) return retain(`canonical plugin state changed at ${entry.key}`);
 			}
 			const archiveWarnings = [];
-			await archiveLegacyStateSource({
+			await (0, runtime_doctor_migrations_exports.archiveLegacyStateSource)({
 				filePath: source.sidecarPath,
 				label: "Codex app-server binding",
 				changes: [],
@@ -491,11 +678,6 @@ async function readDirectoryEntries(directory) {
 		throw error;
 	}
 }
-function isSafeLegacySessionId(value) {
-	if (typeof value !== "string") return false;
-	const trimmed = value.trim();
-	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
-}
 async function detectLegacySessionBindingSidecars(params) {
 	const { sources } = await collectLegacyBindingSources(params, { firstOnly: true });
 	return sources.length > 0 ? { preview: [`- Codex app-server bindings: legacy sidecar -> plugin state (${CODEX_APP_SERVER_BINDING_NAMESPACE})`] } : null;
@@ -540,4 +722,4 @@ async function migrateLegacySessionBindingSidecars(params) {
 	};
 }
 //#endregion
-export { detectLegacySessionBindingSidecars, migrateLegacySessionBindingSidecars };
+export { detectLegacySessionBindingSidecars, migrateLegacySessionBindingSidecars, __exportAll as t };