@openclaw/codex 2026.9.6 → 2026.9.8

package/dist/.setup/{effective-mcp-catalog-CvnvnGIe.mjs → effective-mcp-catalog-Bi6-SQ7i.mjs}

@@ -1,6 +1,7 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-BGoz8wOK.mjs";
-import { _ as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-DA4VR4Eb.mjs";
-import "./session-binding-Cm0apEbd.mjs";
+import { v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
+import { l as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-7xgtlo15.mjs";
+import "./shared-client-CJCTeFpQ.mjs";
+import "./session-binding-DGCYAfvD.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { assignMcpCatalogSafeServerNames } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/effective-mcp-catalog.ts
@@ -21,7 +22,6 @@ function catalogTool(params) {
 		...params.deniedBySession ? { deniedBySession: true } : {}
 	};
 }
-/** Converts Codex's thread-scoped status response into OpenClaw's MCP catalog shape. */
 function buildCodexEffectiveMcpCatalog(statuses, toolOverrides) {
 	const orderedStatuses = [...new Map(statuses.map((status) => [status.name, status])).values()].toSorted((left, right) => left.name.localeCompare(right.name));
 	const safeNames = assignMcpCatalogSafeServerNames(orderedStatuses.map((status) => status.name));
@@ -89,11 +89,6 @@ async function listCodexMcpServerStatuses(client, threadId) {
 	}
 	throw new Error("Codex mcpServerStatus/list exceeded the bounded page limit");
 }
-/** Loads the requested MCP inventory from the exact client/thread already selected for a run. */
-async function loadCodexEffectiveMcpCatalogFromThread(params) {
-	const allowedServerNames = new Set(params.mcpServerNames);
-	return buildCodexEffectiveMcpCatalog((await listCodexMcpServerStatuses(params.client, params.threadId)).filter((status) => allowedServerNames.has(status.name)), params.toolOverrides);
-}
 /** Loads MCP inventory from the bound Codex client while retaining its lease through all pages. */
 async function loadCodexEffectiveMcpCatalog(params, options) {
 	const binding = options.bindingStore.read(sessionBindingIdentity({
@@ -103,17 +98,13 @@ async function loadCodexEffectiveMcpCatalog(params, options) {
 		config: params.config
 	}));
 	if (!binding?.clientId) return;
-	const retained = retainSharedCodexAppServerClientByInstanceId(binding.clientId);
+	const retained = await retainSharedCodexAppServerClientByInstanceId(binding.clientId);
 	if (!retained) return;
 	try {
-		return await loadCodexEffectiveMcpCatalogFromThread({
-			client: retained.client,
-			threadId: binding.threadId,
-			mcpServerNames: params.mcpServerNames,
-			toolOverrides: params.toolOverrides
-		});
+		const allowedServerNames = new Set(params.mcpServerNames);
+		return buildCodexEffectiveMcpCatalog((await listCodexMcpServerStatuses(retained.client, binding.threadId)).filter((status) => allowedServerNames.has(status.name)), params.toolOverrides);
 	} finally {
-		retained.release();
+		await retained.release();
 	}
 }
 //#endregion

package/dist/.setup/{ephemeral-turn-poidXgek.mjs → ephemeral-turn-DiCS1ijR.mjs}

@@ -1,7 +1,7 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { T as readCodexTurnCompletedNotification } from "./client-Cs08OXVQ.mjs";
-import { h as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-CEv1cKwF.mjs";
-import { c as readCodexNotificationItem, s as isTerminalTurnStatus, t as CodexUsageProjection } from "./event-projector-usage-CnBS8Wa3.mjs";
+import { E as readCodexTurnCompletedNotification } from "./client-qyUBJlGZ.mjs";
+import { h as getCodexAppServerTurnRouter } from "./attempt-client-cleanup-B-S7ngS_.mjs";
+import { o as isTerminalTurnStatus, s as readCodexNotificationItem, t as CodexUsageProjection } from "./event-projector-usage-03R0I2dM.mjs";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { toStringifiedError } from "openclaw/plugin-sdk/error-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";

package/dist/.setup/event-projector-assistant-message-MV_1dj-3.mjs

@@ -0,0 +1,69 @@
+import { t as codexProviderRefusalDiagnostics } from "./event-projector-values-DJSz8BTk.mjs";
+import { o as resolveCodexLocalRuntimeAttribution } from "./native-subagent-monitor-BwkQXf9e.mjs";
+import { createAgentHarnessAssistantMessage } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";
+//#region extensions/codex/src/app-server/event-projector-assistant-message.ts
+function createAssistantMessage(params, text, options) {
+	return createAttributedCodexAssistantMessage({
+		...resolveCodexLocalRuntimeAttribution(params),
+		modelId: params.modelId
+	}, text, options);
+}
+/** Creates a Codex assistant row when a bounded call already owns attribution. */
+function createAttributedCodexAssistantMessage(attribution, text, options) {
+	const refusal = options.providerRefusal;
+	return createAgentHarnessAssistantMessage({
+		...attribution,
+		api: attribution.api ?? "openai-chatgpt-responses"
+	}, text, {
+		tokenUsage: options.tokenUsage,
+		aborted: options.aborted,
+		promptError: options.promptError,
+		errorMessage: refusal?.message,
+		...refusal ? codexProviderRefusalDiagnostics(refusal, Date.now()) : {}
+	});
+}
+function createAssistantCommentaryMessage(params, text, itemId, timestamp) {
+	return {
+		...createNonterminalAssistantMessage(params, [{
+			type: "text",
+			text
+		}], timestamp),
+		openclawStreamFallback: {
+			replacementText: text,
+			source: "segment",
+			itemId
+		}
+	};
+}
+function createAssistantAsyncMessage(params, text, itemId, timestamp, questions) {
+	return {
+		...createNonterminalAssistantMessage(params, [{
+			type: "text",
+			text
+		}], timestamp),
+		openclawAsyncDelivery: {
+			itemId,
+			...questions ? { questions } : {}
+		}
+	};
+}
+function createAssistantReasoningMessage(params, text) {
+	return createNonterminalAssistantMessage(params, [{
+		type: "thinking",
+		thinking: text
+	}]);
+}
+function createNonterminalAssistantMessage(params, content, timestamp) {
+	const attribution = resolveCodexLocalRuntimeAttribution(params);
+	return createAgentHarnessAssistantMessage({
+		...attribution,
+		api: attribution.api ?? "openai-chatgpt-responses",
+		modelId: params.modelId
+	}, "", {
+		content,
+		aborted: false,
+		timestamp
+	});
+}
+//#endregion
+export { createAttributedCodexAssistantMessage as a, createAssistantReasoningMessage as i, createAssistantCommentaryMessage as n, createAssistantMessage as r, createAssistantAsyncMessage as t };

package/dist/.setup/{event-projector-usage-CnBS8Wa3.mjs → event-projector-usage-03R0I2dM.mjs}

@@ -15,13 +15,11 @@ function updateActiveTurnItemIds(notification, activeItemIds) {
 	}
 	activeItemIds.delete(itemId);
 }
-/** Reads an item id from supported notification envelope shapes. */
 function readNotificationItemId(notification) {
 	if (!isJsonObject(notification.params)) return;
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return (item ? readStringField(item, "id") : void 0) ?? readStringField(notification.params, "itemId") ?? readStringField(notification.params, "id");
 }
-/** Detects completion for an OpenClaw dynamic tool result still awaited by Codex. */
 function isPendingOpenClawDynamicToolCompletionNotification(notification, pendingOpenClawDynamicToolCompletionIds) {
 	if (notification.method !== "item/completed" || !isJsonObject(notification.params)) return false;
 	const itemId = readNotificationItemId(notification);
@@ -35,7 +33,6 @@ function isRawFunctionToolOutputCompletionNotification(notification) {
 	const item = isJsonObject(notification.params.item) ? notification.params.item : void 0;
 	return item ? readStringField(item, "type") === "function_call_output" : false;
 }
-/** Returns true for terminal app-server thread status strings. */
 function isTerminalTurnStatus(status) {
 	return status === "completed" || status === "interrupted" || status === "failed";
 }
@@ -46,13 +43,9 @@ function isCodexTurnAbortMarkerNotification(notification, options = {}) {
 	const role = isJsonObject(item) ? readStringField(item, "role") : void 0;
 	if (!isJsonObject(item) || readStringField(item, "type") !== "message" || role !== "user" && role !== "developer") return false;
 	const text = extractRawResponseItemText(item).trim();
-	const currentPromptTexts = [options.currentPromptText, ...options.currentPromptTexts ?? []].filter(isNonEmptyString).map((prompt) => prompt.trim());
+	const currentPromptTexts = [options.currentPromptText, ...options.currentPromptTexts ?? []].filter((prompt) => typeof prompt === "string" && prompt.length > 0).map((prompt) => prompt.trim());
 	if (role === "user" && currentPromptTexts.includes(text)) return false;
-	return readCodexTurnAbortMarkerBody(text) !== void 0;
-}
-function readCodexTurnAbortMarkerBody(text) {
-	if (!text.startsWith(CODEX_TURN_ABORT_MARKER_START) || !text.endsWith(CODEX_TURN_ABORT_MARKER_END)) return;
-	return text.slice(14, -15).trim();
+	return text.startsWith(CODEX_TURN_ABORT_MARKER_START) && text.endsWith(CODEX_TURN_ABORT_MARKER_END);
 }
 function extractRawResponseItemText(item) {
 	const content = item.content;
@@ -65,7 +58,6 @@ function extractRawResponseItemText(item) {
 		return text ? [text] : [];
 	}).join("");
 }
-/** Reads a typed Codex item from notification params when id/type are present. */
 function readCodexNotificationItem(params) {
 	if (!isJsonObject(params) || !isJsonObject(params.item)) return;
 	const item = params.item;
@@ -86,20 +78,6 @@ function readRawResponseToolCallId(notification) {
 		default: return;
 	}
 }
-/** Maps Codex item types to the tool name shown in execution progress. */
-function codexExecutionToolName(item) {
-	if (item.type === "dynamicToolCall" && typeof item.tool === "string") return item.tool;
-	if (item.type === "mcpToolCall" && typeof item.tool === "string") {
-		const server = typeof item.server === "string" && item.server ? item.server : void 0;
-		return server ? `${server}.${item.tool}` : item.tool;
-	}
-	if (item.type === "commandExecution") return "bash";
-	if (item.type === "fileChange") return "apply_patch";
-	if (item.type === "webSearch") return "web_search";
-}
-function isNonEmptyString(value) {
-	return typeof value === "string" && value.length > 0;
-}
 //#endregion
 //#region extensions/codex/src/app-server/event-projector-usage.ts
 function readTokenCount(record, key) {
@@ -199,4 +177,4 @@ var CodexUsageProjection = class {
 	}
 };
 //#endregion
-export { isPendingOpenClawDynamicToolCompletionNotification as a, readCodexNotificationItem as c, updateActiveTurnItemIds as d, isCodexTurnAbortMarkerNotification as i, readNotificationItemId as l, readCodexThreadContextSnapshot as n, isRawFunctionToolOutputCompletionNotification as o, codexExecutionToolName as r, isTerminalTurnStatus as s, CodexUsageProjection as t, readRawResponseToolCallId as u };
+export { isRawFunctionToolOutputCompletionNotification as a, readNotificationItemId as c, isPendingOpenClawDynamicToolCompletionNotification as i, readRawResponseToolCallId as l, readCodexThreadContextSnapshot as n, isTerminalTurnStatus as o, isCodexTurnAbortMarkerNotification as r, readCodexNotificationItem as s, CodexUsageProjection as t, updateActiveTurnItemIds as u };

package/dist/.setup/event-projector-values-DJSz8BTk.mjs

@@ -0,0 +1,106 @@
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { asFiniteNumber, normalizeOptionalString as normalizeOptionalString$1, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { Buffer } from "node:buffer";
+//#region extensions/codex/src/app-server/event-projector-values.ts
+const BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX = "This content was flagged for possible biological risk.";
+/** Decode app-server v2 findings with the Codex UI's UTF-8 limits; never truncate a steer. */
+function readCodexMisalignmentReview(value) {
+	if (!isJsonObject(value)) return;
+	const explanation = value.detailedExplanation;
+	if (typeof explanation !== "string" || !explanation.trim() || Buffer.byteLength(explanation, "utf8") > 65536) return;
+	const message = isJsonObject(value.steer) ? value.steer.message : void 0;
+	return {
+		explanation,
+		...typeof message === "string" && message.trim() && Buffer.byteLength(message, "utf8") <= 1024 ? { continuation: { message } } : {},
+		...typeof value.errorType === "string" && value.errorType.trim() ? { errorType: value.errorType } : {}
+	};
+}
+/** Project only Codex's explicit refusal contracts; other policy errors retain their own paths. */
+function readCodexProviderRefusal(message, codexErrorInfo, options) {
+	if (!message) return;
+	if (codexErrorInfo === "cyberPolicy") return {
+		category: "cyber",
+		message
+	};
+	if (codexErrorInfo === "misalignmentPolicyViolation") {
+		const review = readCodexMisalignmentReview(options?.misalignment);
+		return {
+			category: "misalignment",
+			message,
+			...review ? { review } : {},
+			...options?.nativeThreadId ? { nativeThreadId: options.nativeThreadId } : {},
+			...options?.nativeTurnId ? { nativeTurnId: options.nativeTurnId } : {}
+		};
+	}
+	return message.startsWith(BIO_POLICY_SAFETY_ACCESS_BLOCK_PREFIX) ? {
+		category: "bio",
+		message
+	} : void 0;
+}
+function codexProviderRefusalDetails(refusal) {
+	return {
+		provider: "openai",
+		category: refusal.category,
+		...refusal.review ? { review: refusal.review } : {},
+		...refusal.nativeThreadId ? { nativeThreadId: refusal.nativeThreadId } : {},
+		...refusal.nativeTurnId ? { nativeTurnId: refusal.nativeTurnId } : {}
+	};
+}
+function codexProviderRefusalDiagnostics(refusal, timestamp) {
+	return refusal ? { diagnostics: [{
+		type: "provider_refusal",
+		timestamp,
+		details: codexProviderRefusalDetails(refusal)
+	}] } : {};
+}
+function readNonEmptyString(record, key) {
+	return normalizeOptionalString$1(record[key]);
+}
+function readNullableString(record, key) {
+	const value = record[key];
+	if (value === null) return null;
+	return typeof value === "string" ? value : void 0;
+}
+function readNonNegativeInteger(record, key) {
+	const value = asFiniteNumber(record[key]);
+	return value !== void 0 && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
+function readCodexErrorNotificationMessage(record) {
+	const error = record.error;
+	return isJsonObject(error) ? readStringField(error, "message") : void 0;
+}
+function readHookOutputEntries(value) {
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((entry) => {
+		if (!isJsonObject(entry)) return [];
+		const text = readStringField(entry, "text");
+		if (!text) return [];
+		const kind = readStringField(entry, "kind");
+		return [{
+			...kind ? { kind } : {},
+			text
+		}];
+	});
+}
+function splitPlanText(text) {
+	return text.split(/\r?\n/).map((line) => line.trim().replace(/^[-*]\s+/, "")).filter((line) => line.length > 0);
+}
+function extractRawAssistantText(item) {
+	const parts = (Array.isArray(item.content) ? item.content : []).flatMap((entry) => {
+		if (!isJsonObject(entry)) return [];
+		const type = readStringField(entry, "type");
+		if (type !== "output_text" && type !== "text") return [];
+		const value = readStringField(entry, "text");
+		return value === void 0 ? [] : [value];
+	});
+	return parts.length > 0 ? parts.join("").trim() : void 0;
+}
+function readItem(value) {
+	if (!isJsonObject(value)) return;
+	const type = typeof value.type === "string" ? value.type : void 0;
+	const id = typeof value.id === "string" ? value.id : void 0;
+	if (!type || !id) return;
+	return value;
+}
+//#endregion
+export { readCodexProviderRefusal as a, readNonEmptyString as c, splitPlanText as d, readCodexErrorNotificationMessage as i, readNonNegativeInteger as l, extractRawAssistantText as n, readHookOutputEntries as o, normalizeOptionalString$1 as r, readItem as s, codexProviderRefusalDiagnostics as t, readNullableString as u };

package/dist/.setup/incognito-session-DWYapfwf.mjs

@@ -0,0 +1,2 @@
+import { isIncognitoSessionKey as isIncognitoSessionKey$1 } from "openclaw/plugin-sdk/session-key-runtime";
+export { isIncognitoSessionKey$1 as t };

package/dist/.setup/{inference-context-D96l9-ew.mjs → inference-context-D-9gWlTR.mjs}

@@ -1,9 +1,8 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { n as readCodexInferenceMetadata } from "./inference-metadata-CgIf7sOx.mjs";
 import { randomUUID } from "node:crypto";
 //#region extensions/codex/src/app-server/inference-context.ts
 const MAX_CONTEXT_BYTES = 262144;
 const MAX_ACTIVE_ROOTS = 64;
-const CODEX_INFERENCE_GENERATION_KEY = "openclaw_inference_generation";
 /** One physical inference transport owns these confidential, nonpersistent snapshots. */
 function createCodexInferenceContext(assertClientCurrent) {
 	const roots = /* @__PURE__ */ new Map();
@@ -47,32 +46,31 @@ function createCodexInferenceContext(assertClientCurrent) {
 			};
 		},
 		/** Caller must authenticate its private transport before parsing any model request. */
-		prepare(body) {
+		prepare(body, preparedMetadata, requireAdmission = false) {
 			assertOpen();
-			const metadata = isJsonObject(body.client_metadata) ? body.client_metadata : void 0;
-			const raw = metadata?.["x-codex-turn-metadata"];
-			if (typeof raw !== "string" || Buffer.byteLength(raw) > 1048576) throw new Error("Codex inference request is missing bounded native metadata");
-			const value = JSON.parse(raw);
-			if (!isJsonObject(value)) throw new Error("Codex inference request has invalid native metadata");
-			const threadId = value.thread_id;
-			if (metadata?.thread_id != null && threadId != null && metadata.thread_id !== threadId) throw new Error("Codex inference thread metadata disagrees");
-			const child = Boolean(value.parent_thread_id || value.subagent_kind || metadata?.["x-openai-subagent"] || metadata?.["x-codex-parent-thread-id"]);
-			const kind = value.request_kind;
-			if (child || kind === "compaction" || kind === "memory") return {
+			const metadata = preparedMetadata ?? readCodexInferenceMetadata(body);
+			const child = Boolean(metadata.parentThreadId || metadata.subagentKind || metadata.subagent);
+			const kind = metadata.requestKind;
+			if (!requireAdmission && (child || kind === "compaction" || kind === "memory")) return {
 				body,
 				assertCurrent: assertOpen,
 				signal: void 0
 			};
-			if (kind !== "turn" && kind !== "prewarm") throw new Error("Codex inference request has an unsupported native purpose");
-			const registration = typeof threadId === "string" ? roots.get(threadId) : void 0;
-			const generation = value[CODEX_INFERENCE_GENERATION_KEY];
-			if (kind === "prewarm" && body.generate === false && generation == null) return {
+			if (child || kind !== "turn" && kind !== "prewarm" && !(requireAdmission && kind === "compaction")) throw new Error("Codex inference request has an unsupported native purpose");
+			const registration = metadata.threadId ? roots.get(metadata.threadId) : void 0;
+			const generation = metadata.generation;
+			if (!requireAdmission && kind === "prewarm" && body.generate === false && generation == null) return {
 				body,
 				assertCurrent: assertOpen,
 				signal: void 0
 			};
 			if (!registration || generation !== registration.generation) throw new Error("Codex inference has no current admitted parent generation");
 			registration.assertCurrent();
+			if (kind === "compaction") return {
+				body,
+				assertCurrent: registration.assertCurrent,
+				signal: registration.controller.signal
+			};
 			const instructions = body.instructions;
 			if (instructions !== void 0 && typeof instructions !== "string") throw new Error("Codex inference request has invalid top-level instructions");
 			return {
@@ -91,4 +89,4 @@ function createCodexInferenceContext(assertClientCurrent) {
 	};
 }
 //#endregion
-export { createCodexInferenceContext as n, CODEX_INFERENCE_GENERATION_KEY as t };
+export { createCodexInferenceContext as t };