@openclaw/codex 2026.9.6 → 2026.9.8

package/dist/.setup/{thread-resume-DIBXwOpE.mjs → thread-resume-GOry0AYh.mjs}

@@ -1,9 +1,9 @@
-import { r as publishCodexCatalogResume } from "./session-catalog-events-Bj6j94E_.mjs";
-import { o as CodexAppServerRpcError } from "./timeout-C910MdAB.mjs";
-import { t as CodexAppServerScopedRequestRejectedError } from "./request-D2L0zMrq.mjs";
-import { F as forgetCodexWorkspaceReferences, rt as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-DA4VR4Eb.mjs";
-import { b as assertCodexThreadResumeResponse, l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-Cs08OXVQ.mjs";
-import { i as assertCodexThreadResumeSubscription, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-CEv1cKwF.mjs";
+import { n as CodexAppServerRpcError } from "./rpc-error-BlD2vuzn.mjs";
+import { r as publishCodexCatalogResume } from "./session-catalog-events-BMCFMZw-.mjs";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-BZOfsSXW.mjs";
+import { L as forgetCodexWorkspaceReferences, ft as isCodexAppServerStartupError, u as isCodexAppServerStartSelectionChangedError } from "./shared-client-CJCTeFpQ.mjs";
+import { b as assertCodexThreadResumeResponse, l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError } from "./client-qyUBJlGZ.mjs";
+import { i as assertCodexThreadResumeSubscription, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-B-S7ngS_.mjs";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/codex/src/app-server/thread-resume.ts
 /** Owns Codex thread/resume subscription safety. */

package/dist/.setup/{timeout-C910MdAB.mjs → timeout-CXOfNoaX.mjs}

@@ -1,42 +1,8 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { withTimeout } from "openclaw/plugin-sdk/time-runtime";
-//#region extensions/codex/src/app-server/rpc-error.ts
-const CODEX_APP_SERVER_OVERLOADED_ERROR_CODE = -32001;
-/** RPC error wrapper that preserves app-server error code and data. */
-var CodexAppServerRpcError = class extends Error {
-	constructor(error, method) {
-		super(formatCodexAppServerRpcErrorMessage(error, method));
-		this.name = "CodexAppServerRpcError";
-		this.code = error.code;
-		this.data = error.data;
-		this.method = method;
-	}
-};
-function isCodexThreadReadMissingError(error, threadId) {
-	return error instanceof CodexAppServerRpcError && error.method === "thread/read" && error.code === -32600 && error.message === `thread not loaded: ${threadId}`;
-}
-function formatCodexAppServerRpcErrorMessage(error, method) {
-	const message = error.message || `${method} failed`;
-	const detail = readCodexAppServerRpcReloginDetail(error.data);
-	return detail && !message.includes(detail) ? `${message}: ${detail}` : message;
-}
-function readCodexAppServerRpcReloginDetail(data) {
-	const record = isJsonObject(data) ? data : void 0;
-	const nested = isJsonObject(record?.error) ? record.error : record;
-	if (!nested) return;
-	const isRelogin = nested.action === "relogin" || nested.reason === "cloudRequirements" && nested.errorCode === "Auth";
-	const detail = typeof nested.detail === "string" ? nested.detail.trim() : "";
-	return isRelogin && detail ? detail : void 0;
-}
-//#endregion
 //#region extensions/codex/src/app-server/timeout.ts
-/**
-* Thin Codex app-server timeout adapter around OpenClaw's shared timeout helper.
-*/
 function resolveAbortError(signal) {
 	return signal.reason instanceof Error ? signal.reason : new Error("Codex app-server operation aborted", { cause: signal.reason });
 }
-/** Awaits a promise with a Codex-specific timeout error message. */
 async function withTimeout$1(promise, timeoutMs, timeoutMessage, createError) {
 	return await withTimeout(promise, timeoutMs, {
 		message: timeoutMessage,
@@ -77,4 +43,4 @@ function abortReason(signal) {
 	return signal.reason instanceof Error ? signal.reason : new Error(String(signal.reason ?? "codex app-server thread route aborted"));
 }
 //#endregion
-export { CODEX_APP_SERVER_OVERLOADED_ERROR_CODE as a, withTimeout$1 as i, waitForPromiseOrAbort as n, CodexAppServerRpcError as o, withAbortableTimeout as r, isCodexThreadReadMissingError as s, abortReason as t };
+export { withTimeout$1 as i, waitForPromiseOrAbort as n, withAbortableTimeout as r, abortReason as t };

package/dist/.setup/{transcript-history-projection-ZZpkFkJ_.mjs → transcript-history-projection-DRSifI-1.mjs}

@@ -1,6 +1,6 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { b as readCodexProviderRefusal, c as itemName, g as codexProviderRefusalDetails, l as itemStatus, t as auditNativeToolName } from "./event-projector-items-C6L_5ZiT.mjs";
-import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
+import { a as readCodexProviderRefusal, t as codexProviderRefusalDiagnostics } from "./event-projector-values-DJSz8BTk.mjs";
+import { t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf8Prefix } from "openclaw/plugin-sdk/text-utility-runtime";
 import { Buffer } from "node:buffer";
@@ -9,9 +9,7 @@ const CODEX_HISTORY_IMPORT_MAX_MESSAGES = 200;
 const CODEX_HISTORY_IMPORT_MAX_BYTES = 524288;
 const CODEX_HISTORY_IMPORT_MAX_MESSAGE_BYTES = 65536;
 const CODEX_HISTORY_TRUNCATION_SUFFIX = "\n\n[Message truncated during Codex history import.]";
-const CODEX_HISTORY_ASSISTANT_API = "openai-chatgpt-responses";
 const CODEX_HISTORY_ASSISTANT_PROVIDER = "openai";
-const CODEX_HISTORY_ASSISTANT_MODEL = "native-history";
 const CODEX_HISTORY_ZERO_USAGE = {
 	input: 0,
 	output: 0,
@@ -26,6 +24,14 @@ const CODEX_HISTORY_ZERO_USAGE = {
 		total: 0
 	}
 };
+function historyAssistantFields(provider) {
+	return {
+		api: "openai-chatgpt-responses",
+		provider,
+		model: "native-history",
+		usage: CODEX_HISTORY_ZERO_USAGE
+	};
+}
 function projectCodexHistoryMessage(message, text) {
 	const phase = message.role === "assistant" && "phase" in message && (message.phase === "commentary" || message.phase === "final_answer") ? message.phase : void 0;
 	return {
@@ -85,6 +91,7 @@ function selectTurnsThroughBoundary(thread, throughTurnId) {
 }
 function projectCodexThreadHistory(params) {
 	const projected = [];
+	const assistantFields = historyAssistantFields(normalizeOptionalString(params.modelProvider) ?? normalizeOptionalString(params.thread.modelProvider) ?? CODEX_HISTORY_ASSISTANT_PROVIDER);
 	const threadTimestamp = typeof params.thread.createdAt === "number" && Number.isFinite(params.thread.createdAt) ? params.thread.createdAt * 1e3 : params.importedAt;
 	let itemOffset = 0;
 	for (const turn of params.turns) {
@@ -94,8 +101,7 @@ function projectCodexThreadHistory(params) {
 			nativeTurnId: turn.id
 		}) : void 0;
 		let hasAssistantMessage = false;
-		for (const value of turn.items) {
-			const item = value;
+		for (const item of turn.items) {
 			const itemId = normalizeOptionalString(item.id);
 			const identity = `${turn.id}:${itemId ?? itemOffset}`;
 			const timestampSeconds = item.type === "agentMessage" ? turn.completedAt ?? turn.startedAt : turn.startedAt ?? turn.completedAt;
@@ -115,17 +121,10 @@ function projectCodexThreadHistory(params) {
 					type: "text",
 					text
 				}],
-				api: CODEX_HISTORY_ASSISTANT_API,
-				provider: normalizeOptionalString(params.modelProvider) ?? normalizeOptionalString(params.thread.modelProvider) ?? CODEX_HISTORY_ASSISTANT_PROVIDER,
-				model: CODEX_HISTORY_ASSISTANT_MODEL,
-				usage: CODEX_HISTORY_ZERO_USAGE,
+				...assistantFields,
 				stopReason: turn.status === "interrupted" ? "aborted" : turn.status === "failed" ? "error" : "stop",
 				...turn.status === "failed" && turn.error?.message ? { errorMessage: turn.error.message } : {},
-				...refusal && terminalAssistant ? { diagnostics: [{
-					type: "provider_refusal",
-					timestamp,
-					details: codexProviderRefusalDetails(refusal)
-				}] } : {},
+				...codexProviderRefusalDiagnostics(terminalAssistant ? refusal : void 0, timestamp),
 				...phase ? { phase } : {},
 				...asyncDelivery && itemId ? { openclawAsyncDelivery: {
 					itemId,
@@ -145,17 +144,10 @@ function projectCodexThreadHistory(params) {
 			const message = attachCodexMirrorIdentity({
 				role: "assistant",
 				content: [],
-				api: CODEX_HISTORY_ASSISTANT_API,
-				provider: normalizeOptionalString(params.modelProvider) ?? normalizeOptionalString(params.thread.modelProvider) ?? CODEX_HISTORY_ASSISTANT_PROVIDER,
-				model: CODEX_HISTORY_ASSISTANT_MODEL,
-				usage: CODEX_HISTORY_ZERO_USAGE,
+				...assistantFields,
 				stopReason: "error",
 				errorMessage: text,
-				...refusal ? { diagnostics: [{
-					type: "provider_refusal",
-					timestamp,
-					details: codexProviderRefusalDetails(refusal)
-				}] } : {},
+				...codexProviderRefusalDiagnostics(refusal, timestamp),
 				timestamp
 			}, `${turn.id}:assistant`);
 			projected.push(projectCodexHistoryMessage(message, ""));
@@ -205,69 +197,5 @@ function projectBoundedCodexVisibleSessionHistory(entries) {
 	}
 	return selectBoundedCodexHistoryTail(projected).map(({ responseItem }) => responseItem);
 }
-/** Displays native items through the shared transcript roles, including an unfinished turn. */
-function projectCodexThreadHistoryItem(thread, entry, toolItems) {
-	const { item } = entry;
-	const timestamp = (entry.turn?.startedAt ?? thread.createdAt ?? 0) * 1e3;
-	if (item.type === "userMessage" || item.type === "agentMessage") return projectCodexThreadHistory({
-		thread,
-		turns: [{
-			...entry.turn,
-			id: entry.turnId,
-			items: [item]
-		}],
-		importedAt: timestamp
-	}).map(({ message }) => message);
-	const identity = `${entry.turnId}:${item.id}`;
-	const assistant = (content, toolUse = false) => attachCodexMirrorIdentity({
-		role: "assistant",
-		content,
-		api: CODEX_HISTORY_ASSISTANT_API,
-		provider: normalizeOptionalString(thread.modelProvider) ?? CODEX_HISTORY_ASSISTANT_PROVIDER,
-		model: CODEX_HISTORY_ASSISTANT_MODEL,
-		usage: CODEX_HISTORY_ZERO_USAGE,
-		stopReason: toolUse ? "toolUse" : "stop",
-		timestamp
-	}, identity);
-	if (item.type === "reasoning") {
-		const parts = Array.isArray(item.summary) && item.summary.length > 0 ? item.summary : item.content;
-		const thinking = normalizeImportedHistoryText(Array.isArray(parts) ? parts.filter((part) => typeof part === "string").join("\n") : item.text);
-		return thinking ? [assistant([{
-			type: "thinking",
-			thinking
-		}])] : [];
-	}
-	if (item.type === "contextCompaction") return [assistant([{
-		type: "text",
-		text: "Context compacted."
-	}])];
-	const toolName = itemName(item) ?? auditNativeToolName(item);
-	if (!toolName) {
-		const text = normalizeImportedHistoryText(item.text ?? item.title);
-		return text ? [assistant([{
-			type: "text",
-			text
-		}])] : [];
-	}
-	const messages = [assistant([{
-		type: "toolCall",
-		id: item.id,
-		name: toolName,
-		arguments: toolItems.itemToolArgs(item) ?? {}
-	}], true)];
-	const status = itemStatus(item);
-	if (status !== "running") messages.push(attachCodexMirrorIdentity({
-		role: "toolResult",
-		toolCallId: item.id,
-		toolName,
-		content: [{
-			type: "text",
-			text: toolItems.itemTranscriptResultText(item) ?? status
-		}],
-		isError: status === "failed" || status === "blocked",
-		timestamp
-	}, `${identity}:result`));
-	return messages;
-}
 //#endregion
-export { projectCodexUserItemText as i, projectBoundedCodexVisibleSessionHistory as n, projectCodexThreadHistoryItem as r, projectBoundedCodexThreadHistory as t };
+export { projectBoundedCodexVisibleSessionHistory as n, projectCodexUserItemText as r, projectBoundedCodexThreadHistory as t };

package/dist/.setup/{transcript-mirror-attestation-CzM-94NC.mjs → transcript-mirror-attestation-YSegaktH.mjs}

@@ -1,5 +1,5 @@
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
+import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/transcript-mirror-attestation.ts
@@ -37,7 +37,7 @@ function applyCodexTranscriptTaint(message, state) {
 }
 function attachCodexMirrorAttestation(message, sourceFingerprint) {
 	const existing = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
-	const baseMeta = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
+	const baseMeta = asOptionalRecord(existing) ?? {};
 	return {
 		...message,
 		[CODEX_META_KEY]: {
@@ -66,8 +66,7 @@ function hasCodexMirrorOrigin(message) {
 }
 function readCodexMirrorSourceFingerprint(message) {
 	const meta = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
-	if (!meta || typeof meta !== "object" || Array.isArray(meta)) return;
-	const value = meta[MIRROR_SOURCE_FINGERPRINT_META_KEY];
+	const value = asOptionalRecord(meta)?.[MIRROR_SOURCE_FINGERPRINT_META_KEY];
 	return typeof value === "string" && value ? value : void 0;
 }
 function serializeCodexMirrorSourceEvidence(message) {

package/dist/.setup/{transcript-mirror-BtHDBp1G.mjs → transcript-mirror-kxmCYsuF.mjs}

@@ -1,8 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import { t as readCodexAsyncQuestions } from "./async-questions-DdhOCwGi.mjs";
-import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
-import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-ZZpkFkJ_.mjs";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-CzM-94NC.mjs";
+import { i as readUpstreamUserText, n as attachUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
+import { t as projectBoundedCodexThreadHistory } from "./transcript-history-projection-DRSifI-1.mjs";
+import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint, i as buildCodexMirrorDedupeIdentity, n as attachCodexMirrorAttestation, r as attachCodexMirrorRunId, s as isMirroredAgentMessage, t as applyCodexTranscriptTaint } from "./transcript-mirror-attestation-YSegaktH.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { deliverAgentHarnessUserInputPrompt, embeddedAgentLog, formatErrorMessage, projectAgentHarnessTranscriptMessageForDisplay, restorePreparedUserTurnOperationalMetaForRuntime, runAgentHarnessBeforeMessageWriteHook } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { withCodexSessionTranscriptMirrorWriteLock } from "openclaw/plugin-sdk/codex-session-transcript-runtime";
@@ -229,12 +229,10 @@ function buildFromPrepared(params, preparedUserMessage) {
 function buildCodexUserPromptMessage(params) {
 	return buildFromPrepared(params, params.userTurnTranscriptRecorder?.message);
 }
-function buildCodexUpstreamPromptMessage(params, identity, upstreamUserText) {
-	const message = attachCodexMirrorIdentity(buildCodexUserPromptMessage(params), identity);
-	return upstreamUserText ? attachUpstreamUserText(message, upstreamUserText) : message;
-}
 function promptSnapshot(params, turnId, upstreamUserText) {
-	return params.suppressNextUserMessagePersistence ? [] : [buildCodexUpstreamPromptMessage(params, `${turnId}:prompt`, upstreamUserText)];
+	if (params.suppressNextUserMessagePersistence) return [];
+	const message = attachCodexMirrorIdentity(buildCodexUserPromptMessage(params), `${turnId}:prompt`);
+	return [upstreamUserText ? attachUpstreamUserText(message, upstreamUserText) : message];
 }
 async function buildResolvedCodexUserPromptMessage(params) {
 	return buildFromPrepared(params, await params.userTurnTranscriptRecorder?.resolveMessage() ?? params.userTurnTranscriptRecorder?.message);

package/dist/.setup/{transport-stdio-h2VHOskC.mjs → transport-stdio-Bdegpn2V.mjs}

@@ -1,5 +1,5 @@
 import { r as normalizeCodexAppServerArgs } from "./launch-args-DbFCehO7.mjs";
-import { i as resolveManagedCodexNativeCommand } from "./managed-binary-BnshlFag.mjs";
+import { i as resolveManagedCodexNativeCommand } from "./managed-binary-kiWRhNRE.mjs";
 import { i as recordCodexAppServerSpawnFailure, r as getCodexAppServerSpawnFailure } from "./spawn-error-CL3n6MAa.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import { stripVTControlCharacters } from "node:util";
@@ -716,12 +716,7 @@ function beginCodexAppServerTransportClose(child, options) {
 				finishCodexAppServerTransportClose(child, options, forceKill);
 				return "uncertain";
 			}
-			let contained;
-			try {
-				contained = await terminateCodexAppServerDescendants(child);
-			} catch {
-				contained = void 0;
-			}
+			const contained = await terminateCodexAppServerDescendants(child).catch(() => void 0);
 			if (contained === "exited") return "natural";
 			try {
 				finishCodexAppServerTransportClose(child, options, forceKill, contained?.resume);
@@ -782,7 +777,7 @@ async function closeCodexAppServerTransportAndWait(child, options = {}) {
 	};
 }
 function hasCodexAppServerTransportExited(child) {
-	return child.exitCode !== null && child.exitCode !== void 0 ? true : child.signalCode !== null && child.signalCode !== void 0;
+	return child.exitCode != null || child.signalCode != null;
 }
 async function waitForCodexAppServerTransportExit(child, timeoutMs, drained) {
 	return await new Promise((resolve) => {
@@ -857,7 +852,7 @@ function resolveCodexAppServerSpawnEnv(options, baseEnv = process.env, platform
 	const env = Object.create(null);
 	copySafeEnvironmentEntries(env, baseEnv);
 	copySafeEnvironmentEntries(env, options.env ?? {});
-	const keysToClear = normalizedEnvironmentKeys(options.clearEnv ?? []);
+	const keysToClear = (options.clearEnv ?? []).map((key) => key.trim()).filter(Boolean);
 	if (platform === "win32") {
 		const lowerCaseKeysToClear = new Set(keysToClear.map((key) => key.toLowerCase()));
 		for (const candidate of Object.keys(env)) if (lowerCaseKeysToClear.has(candidate.toLowerCase())) delete env[candidate];
@@ -869,18 +864,6 @@ function isCodexRuntimeInjectionEnvironmentKey(rawKey) {
 	const key = rawKey.toUpperCase();
 	return RUNTIME_INJECTION_ENVIRONMENT_KEYS.has(key) || key.startsWith("DYLD_");
 }
-/** Keeps QA-owned app-server processes inside the gateway process-group cleanup boundary. */
-function resolveCodexAppServerDetachedMode(env, platform = process.platform) {
-	return platform !== "win32" && !env[QA_PARENT_PID_ENV]?.trim();
-}
-function normalizedEnvironmentKeys(rawKeys) {
-	const keys = [];
-	for (const rawKey of rawKeys) {
-		const key = rawKey.trim();
-		if (key.length > 0) keys.push(key);
-	}
-	return keys;
-}
 function copySafeEnvironmentEntries(target, source) {
 	for (const [key, value] of Object.entries(source)) {
 		if (UNSAFE_ENVIRONMENT_KEYS.has(key)) continue;
@@ -915,7 +898,7 @@ async function createStdioTransport(options, baseEnv = process.env, assertCurren
 		child = spawn(invocation.command, invocation.argv, {
 			...options.cwd !== void 0 ? { cwd: options.cwd } : {},
 			env,
-			detached: resolveCodexAppServerDetachedMode(env),
+			detached: process.platform !== "win32" && !env[QA_PARENT_PID_ENV]?.trim(),
 			shell: invocation.shell,
 			stdio: [
 				"pipe",

package/dist/.setup/transport-websocket-BTBE-LD9.mjs

@@ -0,0 +1,211 @@
+import { r as resolveCodexAppServerUserHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
+import "./config-DKhXquav.mjs";
+import path from "node:path";
+import { EventEmitter } from "node:events";
+import net from "node:net";
+import { PassThrough, Writable } from "node:stream";
+import { StringDecoder } from "node:string_decoder";
+import { WebSocket } from "openclaw/plugin-sdk/websocket-runtime";
+//#region extensions/codex/src/app-server/transport-websocket.ts
+/**
+* Adapts a remote Codex app-server WebSocket endpoint to the shared stdio-like
+* transport interface.
+*/
+const WEBSOCKET_HANDSHAKE_TIMEOUT_MS = 1e4;
+const WEBSOCKET_PING_INTERVAL_MS = 2e4;
+const WEBSOCKET_PONG_TIMEOUT_MS = 2e4;
+const MAX_CONSECUTIVE_MISSED_WEBSOCKET_PONGS = 5;
+/** Only the transport can prove that its buffered initialize never reached a peer. */
+function isCodexWebSocketOpenFailure(error) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	while (current instanceof Error && !seen.has(current)) {
+		seen.add(current);
+		if ("code" in current && current.code === "CODEX_APP_SERVER_WEBSOCKET_OPEN_FAILED") return true;
+		current = current.cause;
+	}
+	return false;
+}
+/** Opens a WebSocket app-server transport and maps newline-delimited frames to stdout/stdin. */
+function createWebSocketTransport(options) {
+	if (!options.url) throw new Error("codex app-server websocket transport requires plugins.entries.codex.config.appServer.url");
+	const events = new EventEmitter();
+	const stdout = new PassThrough();
+	const stderr = new PassThrough();
+	const websocketOptions = {
+		headers: {
+			...options.headers,
+			...options.authToken ? { Authorization: `Bearer ${options.authToken}` } : {}
+		},
+		perMessageDeflate: false,
+		...options.transport === "websocket" ? { handshakeTimeout: WEBSOCKET_HANDSHAKE_TIMEOUT_MS } : {}
+	};
+	const unixSocketPath = resolveCodexAppServerUnixSocketPath(options);
+	const socket = unixSocketPath ? new WebSocket("ws://localhost/", {
+		...websocketOptions,
+		createConnection: () => connectCodexAppServerUnixSocket(unixSocketPath)
+	}) : new WebSocket(options.url, websocketOptions);
+	const pendingFrames = [];
+	const stdinDecoder = new StringDecoder("utf8");
+	let pendingLine = "";
+	let opened = false;
+	let killed = false;
+	let exitCode = null;
+	let pingTimeout;
+	let pongTimeout;
+	let expectedPong;
+	let consecutiveMissedPongs = 0;
+	let heartbeatSequence = 0;
+	const clearConnectionHealthTimers = () => {
+		if (pingTimeout) {
+			clearTimeout(pingTimeout);
+			pingTimeout = void 0;
+		}
+		if (pongTimeout) {
+			clearTimeout(pongTimeout);
+			pongTimeout = void 0;
+		}
+		expectedPong = void 0;
+	};
+	const sendHeartbeatPing = () => {
+		if (socket.readyState !== WebSocket.OPEN || pongTimeout) return;
+		const payload = Buffer.from(`openclaw-codex-${++heartbeatSequence}`);
+		expectedPong = payload;
+		pongTimeout = setTimeout(() => {
+			pongTimeout = void 0;
+			expectedPong = void 0;
+			consecutiveMissedPongs += 1;
+			if (consecutiveMissedPongs >= MAX_CONSECUTIVE_MISSED_WEBSOCKET_PONGS) {
+				socket.terminate();
+				return;
+			}
+			sendHeartbeatPing();
+		}, WEBSOCKET_PONG_TIMEOUT_MS);
+		pongTimeout.unref();
+		socket.ping(payload, void 0, (error) => {
+			if (error) socket.terminate();
+		});
+	};
+	const scheduleHeartbeatPing = () => {
+		if (options.transport !== "websocket" || socket.readyState !== WebSocket.OPEN || pingTimeout || pongTimeout) return;
+		pingTimeout = setTimeout(() => {
+			pingTimeout = void 0;
+			sendHeartbeatPing();
+		}, WEBSOCKET_PING_INTERVAL_MS);
+		pingTimeout.unref();
+	};
+	const recordConnectionActivity = () => {
+		consecutiveMissedPongs = 0;
+		if (pongTimeout) {
+			clearTimeout(pongTimeout);
+			pongTimeout = void 0;
+		}
+		expectedPong = void 0;
+		scheduleHeartbeatPing();
+	};
+	const sendFrame = (frame) => {
+		const trimmed = frame.trim();
+		if (!trimmed) return;
+		if (socket.readyState === WebSocket.OPEN) {
+			socket.send(trimmed);
+			return;
+		}
+		pendingFrames.push(trimmed);
+	};
+	socket.once("open", () => {
+		opened = true;
+		for (const frame of pendingFrames.splice(0)) socket.send(frame);
+		scheduleHeartbeatPing();
+	});
+	socket.on("pong", (payload) => {
+		if (expectedPong?.equals(payload)) recordConnectionActivity();
+	});
+	socket.once("error", (error) => {
+		clearConnectionHealthTimers();
+		const code = "code" in error ? error.code : void 0;
+		if (options.transport === "websocket" && !opened && (code === "ECONNREFUSED" || code === "ECONNRESET" || code === "ETIMEDOUT" || error.message === "Opening handshake has timed out")) {
+			events.emit("error", Object.assign(new Error(error.message, { cause: error }), { code: "CODEX_APP_SERVER_WEBSOCKET_OPEN_FAILED" }));
+			return;
+		}
+		events.emit("error", error);
+	});
+	socket.once("close", (code, reason) => {
+		clearConnectionHealthTimers();
+		killed = true;
+		exitCode = code;
+		events.emit("exit", code, reason.toString("utf8"));
+	});
+	socket.on("message", (data) => {
+		if (options.transport === "websocket") recordConnectionActivity();
+		const frame = websocketFrameToBuffer(data);
+		const writable = stdout.write(frame);
+		const delimited = frame.at(-1) === 10 || stdout.write(Buffer.from("\n"));
+		if (!writable || !delimited) socket.pause();
+	});
+	stdout.on("drain", () => {
+		if (socket.readyState === WebSocket.OPEN) socket.resume();
+	});
+	const stdin = new Writable({
+		write(chunk, _encoding, callback) {
+			pendingLine += stdinDecoder.write(chunk);
+			const lines = pendingLine.split("\n");
+			pendingLine = lines.pop() ?? "";
+			for (const frame of lines) sendFrame(frame);
+			callback();
+		},
+		final(callback) {
+			pendingLine += stdinDecoder.end();
+			if (pendingLine) sendFrame(pendingLine);
+			pendingLine = "";
+			callback();
+		}
+	});
+	const closeSocket = () => {
+		if (socket.readyState === WebSocket.CLOSED || socket.readyState === WebSocket.CLOSING) return;
+		socket.close();
+	};
+	stdin.once("finish", closeSocket);
+	stdin.once("close", closeSocket);
+	return {
+		maxFrameBytes: 16777216,
+		stdin,
+		stdout,
+		stderr,
+		get killed() {
+			return killed;
+		},
+		get exitCode() {
+			return exitCode;
+		},
+		kill: (signal) => {
+			killed = true;
+			clearConnectionHealthTimers();
+			if (signal === "SIGKILL") socket.terminate();
+			else socket.close();
+		},
+		once: (event, listener) => events.once(event, listener),
+		off: (event, listener) => events.off(event, listener)
+	};
+}
+/** Named local-only socket boundary for the egress classifier. */
+function connectCodexAppServerUnixSocket(socketPath) {
+	return net.createConnection(socketPath);
+}
+/** Resolves the canonical or explicitly configured Codex control socket. */
+function resolveCodexAppServerUnixSocketPath(options) {
+	if (options.transport !== "unix") {
+		if (options.url?.startsWith("unix://")) throw new Error("codex app-server unix URL requires unix transport");
+		return;
+	}
+	const url = options.url ?? "unix://";
+	if (!url.startsWith("unix://")) throw new Error("codex app-server unix transport requires a unix:// URL");
+	return url.slice(7) || path.join(resolveCodexAppServerUserHomeDir(options.env ?? process.env), "app-server-control", "app-server-control.sock");
+}
+function websocketFrameToBuffer(data) {
+	if (typeof data === "string") return Buffer.from(data);
+	if (Buffer.isBuffer(data)) return data;
+	if (Array.isArray(data)) return Buffer.concat(data);
+	return Buffer.from(data);
+}
+//#endregion
+export { isCodexWebSocketOpenFailure as n, resolveCodexAppServerUnixSocketPath as r, createWebSocketTransport as t };

package/dist/.setup/{upstream-prompt-provenance-LphB8slG.mjs → upstream-prompt-provenance-fXkKbPVC.mjs}

@@ -1,4 +1,4 @@
-import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asOptionalRecord, readNonEmptyStringPreservingWhitespace } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/upstream-prompt-provenance.ts
 const UPSTREAM_USER_TEXT_META_KEY = "upstreamUserText";
 const MIRROR_IDENTITY_META_KEY = "mirrorIdentity";
@@ -16,10 +16,7 @@ function attachCodexMirrorIdentity(message, identity) {
 }
 function readMirrorIdentity(message) {
 	const meta = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
-	const record = asOptionalRecord(meta);
-	if (!record) return;
-	const id = record[MIRROR_IDENTITY_META_KEY];
-	return typeof id === "string" && id ? id : void 0;
+	return readNonEmptyStringPreservingWhitespace(asOptionalRecord(meta)?.[MIRROR_IDENTITY_META_KEY]);
 }
 function attachUpstreamUserText(message, text) {
 	const existing = CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
@@ -34,10 +31,7 @@ function attachUpstreamUserText(message, text) {
 }
 function readUpstreamUserText(message) {
 	const meta = message && CODEX_META_KEY in message ? message[CODEX_META_KEY] : void 0;
-	const record = asOptionalRecord(meta);
-	if (!record) return;
-	const text = record[UPSTREAM_USER_TEXT_META_KEY];
-	return typeof text === "string" && text ? text : void 0;
+	return readNonEmptyStringPreservingWhitespace(asOptionalRecord(meta)?.[UPSTREAM_USER_TEXT_META_KEY]);
 }
 //#endregion
 export { readUpstreamUserText as i, attachUpstreamUserText as n, readMirrorIdentity as r, attachCodexMirrorIdentity as t };

package/dist/.setup/{upstream-session-fork-BUr4OUbC.mjs → upstream-session-fork-gkdRj2yH.mjs}

@@ -1,28 +1,28 @@
-import { m as sessionBindingIdentity } from "./session-binding-record-BGoz8wOK.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
 import { i as isJsonObject, r as flattenCodexDynamicToolFunctions } from "./protocol-CANUwXJ3.mjs";
-import { s as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-BvaRs51b.mjs";
-import { o as readCodexSessionMeta } from "./session-catalog-events-Bj6j94E_.mjs";
-import { n as withCodexAppServerThreadMutation } from "./incognito-session-uhrBF6wJ.mjs";
-import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-LphB8slG.mjs";
-import { i as projectCodexUserItemText } from "./transcript-history-projection-ZZpkFkJ_.mjs";
+import { v as sessionBindingIdentity } from "./session-binding-record-Oe9L-CNY.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
+import { s as assertCodexModelBackedReviewerEffectiveConfig } from "./config-options-CzyWLTJt.mjs";
+import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-Dp24d7-F.mjs";
+import { i as readUpstreamUserText, r as readMirrorIdentity } from "./upstream-prompt-provenance-fXkKbPVC.mjs";
+import { r as projectCodexUserItemText } from "./transcript-history-projection-DRSifI-1.mjs";
 import { n as codexUpstreamBaseline, t as codexLastTerminalTurnId } from "./session-upstream-marker-D15C9NHp.mjs";
-import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-B2CsSdnV.mjs";
-import { t as CodexAppServerScopedRequestRejectedError } from "./request-D2L0zMrq.mjs";
-import { n as resolveOpenClawExecPolicyForCodexAppServer } from "./config-BoTP_mrL.mjs";
-import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-C8Rw1m1m.mjs";
-import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-CzM-94NC.mjs";
-import { I as hasCodexAppServerLiveThread, M as claimCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-DA4VR4Eb.mjs";
-import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput, y as assertCodexThreadForkResponse } from "./client-Cs08OXVQ.mjs";
-import { B as parseCodexNativeToolCatalog, Ct as shouldBuildCodexPluginThreadConfig, E as buildCodexNativeHookRelayConfig, F as checkCodexThreadAppAvailability, H as resolveCodexNativeSkillIsolation, K as codexDynamicToolsFingerprint, O as buildCodexNativeHookRelayId, T as assertCodexNativeHookRelayAllowed, V as applyCodexNativeSkillIsolation, X as fingerprintJsonObject, Z as fingerprintUserMcpServersConfigPatch, a as buildCodexThreadConfiguration, j as resolveCodexNativeHookRelayEvents, m as buildDeveloperInstructions, mt as buildCodexPluginThreadConfig, p as resolveCodexWebSearchPlan, xt as mergeCodexThreadConfigs } from "./thread-requests-BLvGkP2R.mjs";
-import "./session-binding-Cm0apEbd.mjs";
-import { a as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError } from "./thread-policy-DGuQsuFC.mjs";
-import "./thread-ownership-DcTtAcXj.mjs";
-import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-umd0tgh4.mjs";
-import { d as isCodexDynamicToolExcluded, n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-BfE88FZ5.mjs";
-import { u as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-workspace-context-DUVEn_CS.mjs";
-import { n as prepareCodexSessionInitialization } from "./session-initialization-rcgbZiid.mjs";
-import { createImportedCodexSession } from "./session-history-import-D-3wAgOP.mjs";
+import { r as buildCodexPluginAppCacheKey } from "./plugin-app-cache-key-BL9B5H0L.mjs";
+import { n as readCodexSessionMeta } from "./session-catalog-provenance-DoAvktcj.mjs";
+import { t as CodexAppServerScopedRequestRejectedError } from "./request-BZOfsSXW.mjs";
+import { r as resolveOpenClawExecPolicyForCodexAppServer } from "./config-DKhXquav.mjs";
+import { r as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { a as fingerprintCodexMirrorSourceMessage, c as readCodexMirrorSourceFingerprint } from "./transcript-mirror-attestation-YSegaktH.mjs";
+import { P as claimCodexAppServerLiveThread, R as hasCodexAppServerLiveThread, f as readCodexAppServerClientDesktopGenerationFingerprint } from "./shared-client-CJCTeFpQ.mjs";
+import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput, y as assertCodexThreadForkResponse } from "./client-qyUBJlGZ.mjs";
+import { D as buildCodexNativeHookRelayConfig, E as assertCodexNativeHookRelayAllowed, H as applyCodexNativeSkillIsolation, I as checkCodexThreadAppAvailability, K as codexDynamicToolsFingerprint, M as resolveCodexNativeHookRelayEvents, St as mergeCodexThreadConfigs, U as resolveCodexNativeSkillIsolation, V as parseCodexNativeToolCatalog, X as fingerprintJsonObject, Z as fingerprintUserMcpServersConfigPatch, a as buildCodexThreadConfiguration, h as buildDeveloperInstructions, ht as buildCodexPluginThreadConfig, k as buildCodexNativeHookRelayId, p as resolveCodexWebSearchPlan, wt as shouldBuildCodexPluginThreadConfig } from "./thread-requests-OWGOiDaV.mjs";
+import "./session-binding-DGCYAfvD.mjs";
+import { a as refreshCodexThreadPolicy, n as CodexThreadPolicyHandoffError } from "./thread-policy-gNPzzpVp.mjs";
+import "./thread-ownership-B6pPt21M.mjs";
+import { n as resolveCodexNativeExecutionPolicy } from "./native-execution-policy-BxZJy5mP.mjs";
+import { l as prepareCodexWorkspaceDeveloperInstructions } from "./attempt-workspace-context-BJ5Z_olH.mjs";
+import { d as isCodexDynamicToolExcluded, n as resolveCodexProviderWebSearchSupportForClient } from "./provider-capabilities-DG5qbsUZ.mjs";
+import { n as prepareCodexSessionInitialization } from "./session-initialization-6aveB9qb.mjs";
+import { createImportedCodexSession } from "./session-history-import-WhX-X33a.mjs";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";