@openclaw/codex 2026.9.8 → 2026.10.1-beta.1

package/dist/.setup/{thread-ownership-B6pPt21M.mjs → thread-ownership-0aRHD9iK.mjs}

@@ -1,8 +1,8 @@
-import { l as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-lifecycle-7xgtlo15.mjs";
+import { S as retainSharedCodexAppServerClientByInstanceId } from "./auth-cache-key-CEd9QlIs.mjs";
 import { t as withCodexAppServerThreadMutation } from "./thread-ownership-queue-Dp24d7-F.mjs";
-import { G as releaseCodexAppServerLiveThread, K as retainCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed } from "./shared-client-CJCTeFpQ.mjs";
-import { o as closeCodexStartupClientBestEffort, p as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-B-S7ngS_.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { G as releaseCodexAppServerLiveThread, K as retainCodexAppServerLiveThread, V as isCodexAppServerLiveThreadClaimed } from "./shared-client-DJJ3ljH2.mjs";
+import { f as unsubscribeCodexThreadBestEffort, o as closeCodexStartupClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-yLjGwbwT.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { runWithAsyncWorkResources } from "openclaw/plugin-sdk/agent-harness-tool-runtime";
 //#region extensions/codex/src/app-server/thread-ownership.ts
@@ -55,11 +55,12 @@ async function withExclusiveCodexAppServerThread(params) {
 }
 /** Publishes one owned subscription with its persistent or ephemeral retention lifetime. */
 async function retainCodexAppServerBindingSubscription(client, threadId, ownership) {
-	return await retainCodexAppServerLiveThread(client, threadId, ownership?.release ?? (async (releasedThreadId, assertCurrent) => {
+	return await retainCodexAppServerLiveThread(client, threadId, ownership?.release ?? (async (releasedThreadId, assertCurrent, withCurrent) => {
 		if (!await unsubscribeCodexThreadBestEffort(client, {
 			threadId: releasedThreadId,
 			timeoutMs: 5e3,
-			assertCurrent
+			assertCurrent,
+			withCurrent
 		})) {
 			assertCurrent?.();
 			await closeCodexStartupClientBestEffort(client);
@@ -82,14 +83,15 @@ async function releaseCodexAppServerBindingSubscription(binding, options = {}) {
 	const clientLease = await retainSharedCodexAppServerClientByInstanceId(binding.clientId);
 	if (!clientLease) return;
 	try {
-		if (await releaseCodexAppServerLiveThread(clientLease.client, binding.threadId, options.assertCurrent)) return;
+		if (await releaseCodexAppServerLiveThread(clientLease.client, binding.threadId, options.assertCurrent, options.withCurrent)) return;
 		options.assertCurrent?.();
 		if (isCodexAppServerLiveThreadClaimed(clientLease.client, binding.threadId)) throw new Error(`Codex thread ${binding.threadId} has an active run; stop it before changing its owner.`);
 		if (!options.allowUntracked) return;
 		if (!await unsubscribeCodexThreadBestEffort(clientLease.client, {
 			threadId: binding.threadId,
 			timeoutMs: 5e3,
-			assertCurrent: options.assertCurrent
+			assertCurrent: options.assertCurrent,
+			withCurrent: options.withCurrent
 		})) {
 			await closeCodexStartupClientBestEffort(clientLease.client);
 			throw new CodexAppServerUnsafeSubscriptionError(`Codex retired thread subscription could not be released: ${binding.threadId}`);

package/dist/.setup/{thread-policy-gNPzzpVp.mjs → thread-policy-CXZV97TS.mjs}

@@ -1,6 +1,7 @@
-import { r as requestCodexAppServerClientJson, t as CodexAppServerScopedRequestRejectedError } from "./request-BZOfsSXW.mjs";
-import { S as CodexAdoptedThreadActiveError } from "./shared-client-CJCTeFpQ.mjs";
-import { l as isCodexAppServerOverloadError, u as isCodexAppServerPrewriteRequestCancellationError, v as assertCodexThreadAcceptsDirectInput } from "./client-qyUBJlGZ.mjs";
+import { i as CodexAppServerScopedRequestRejectedError, o as isCodexAppServerOverloadError } from "./rpc-error-hmWM21RB.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-BH3FvYUE.mjs";
+import { S as CodexAdoptedThreadActiveError } from "./shared-client-DJJ3ljH2.mjs";
+import { p as assertCodexThreadAcceptsDirectInput, s as isCodexAppServerPrewriteRequestCancellationError } from "./client-CBzEVDyb.mjs";
 import { AgentHarnessPreflightError, embeddedAgentLog, formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 //#region extensions/codex/src/app-server/thread-policy.ts
 /** A refusal, not a failed native write: the ephemeral conversation must stay alive. */
@@ -23,39 +24,37 @@ async function refreshCodexThreadPolicy(params) {
 	await injectCodexThreadDeveloperHandoff(params, "The following is the complete current OpenClaw-supplied generic instruction policy. It replaces earlier OpenClaw-supplied generic policy, including sections removed from that generic policy. Parent-local instructions supplied for the current inference request are outside this policy replacement. Independently supplied native managed, guardian, security, collaboration, and project instructions retain their authority. User requests retain their own authority.\n\n" + (params.developerInstructions === "" ? "The current OpenClaw generic policy is empty; earlier OpenClaw generic policy is withdrawn." : params.developerInstructions));
 }
 /**
-* Refreshes only the skill catalog on a live thread whose generic policy cannot
+* Refreshes skills, persona, and memory instructions on a live thread whose generic policy cannot
 * change (ephemeral threads have no resume source). The refresh is a client-authored
 * developer message, so it must be re-delivered after every compaction.
 */
-async function refreshCodexThreadSkillsCatalog(params) {
-	await injectCodexThreadDeveloperHandoff(params, "The following is the complete current OpenClaw skills catalog. It replaces the earlier OpenClaw skills catalog in this conversation.\n\n" + (params.skillsInstructions ?? "The current OpenClaw skills catalog is empty; the earlier catalog is withdrawn."));
+async function refreshCodexThreadInstructions(params) {
+	await injectCodexThreadDeveloperHandoff(params, "The following is the complete current OpenClaw refreshable thread instructions. It replaces earlier OpenClaw-supplied skills, persona, and memory instructions in this conversation.\n\n" + (params.refreshableInstructions ?? "The current OpenClaw refreshable thread instructions are empty; earlier OpenClaw-supplied skills, persona, and memory instructions are withdrawn."));
 }
 /**
 * Compaction rebuilds initial context from the thread's creation-time developer
-* instructions and drops client-authored developer messages unless
-* `retain_client_developer_messages` is enabled, which is off by default
-* (codex-rs/core/src/compact_remote_v2.rs). A catalog refreshed in place therefore
-* reverts to the creation-time catalog, while the host still records the refreshed
-* value as delivered and skips reinjection on later turns. Re-deliver the current
-* catalog after every compaction, including compaction inside an active turn.
+* instructions and can drop client-authored developer messages (including local
+* compaction regardless of `retain_client_developer_messages`). Restore the current
+* section for subsequent requests. The immediate native continuation can still
+* precede this handoff and see creation-time instructions.
 */
-async function restoreCodexThreadSkillsCatalogAfterCompaction(params) {
+async function restoreCodexThreadInstructionsAfterCompaction(params) {
 	const policy = params.ephemeralPolicy;
-	if (!policy || policy.skillsInstructions === policy.nativeSkillsInstructions) return policy;
+	if (!policy || policy.refreshableInstructions === policy.nativeRefreshableInstructions) return policy;
 	try {
-		await refreshCodexThreadSkillsCatalog({
+		await refreshCodexThreadInstructions({
 			...params,
-			skillsInstructions: policy.skillsInstructions
+			refreshableInstructions: policy.refreshableInstructions
 		});
 		return policy;
 	} catch (error) {
-		embeddedAgentLog.warn("failed to restore Codex skill catalog after compaction", {
+		embeddedAgentLog.warn("failed to restore Codex thread instructions after compaction", {
 			threadId: params.threadId,
 			error: formatErrorMessage(error)
 		});
 		return {
 			...policy,
-			skillsInstructions: policy.nativeSkillsInstructions
+			refreshableInstructions: policy.nativeRefreshableInstructions
 		};
 	}
 }
@@ -78,7 +77,8 @@ async function injectCodexThreadDeveloperHandoff(params, text) {
 			}
 		});
 		outcome = "acknowledged";
-		params.assertCurrent?.();
+		if (params.withCurrent) await params.withCurrent(() => params.assertCurrent?.());
+		else params.assertCurrent?.();
 		params.signal?.throwIfAborted();
 	} catch (cause) {
 		if (outcome !== "acknowledged" && (cause instanceof CodexAppServerScopedRequestRejectedError || isCodexAppServerPrewriteRequestCancellationError(cause) || isCodexAppServerOverloadError(cause))) outcome = "not-written";
@@ -97,7 +97,8 @@ async function assertAdoptedCodexThreadResumeAllowed(params, threadId, context,
 		includeTurns: false
 	}, {
 		signal: params.signal,
-		assertCurrent
+		assertCurrent,
+		withCurrent: params.authority?.withCurrent
 	}));
 	context.throwIfAborted();
 	if (thread.id !== threadId) throw new Error("Codex returned another thread during adoption status read");
@@ -106,4 +107,4 @@ async function assertAdoptedCodexThreadResumeAllowed(params, threadId, context,
 	return thread;
 }
 //#endregion
-export { refreshCodexThreadPolicy as a, assertCodexSupervisionThreadLineage as i, CodexThreadPolicyHandoffError as n, refreshCodexThreadSkillsCatalog as o, assertAdoptedCodexThreadResumeAllowed as r, restoreCodexThreadSkillsCatalogAfterCompaction as s, CodexIncognitoPolicyChangeError as t };
+export { refreshCodexThreadInstructions as a, assertCodexSupervisionThreadLineage as i, CodexThreadPolicyHandoffError as n, refreshCodexThreadPolicy as o, assertAdoptedCodexThreadResumeAllowed as r, restoreCodexThreadInstructionsAfterCompaction as s, CodexIncognitoPolicyChangeError as t };

package/dist/.setup/{thread-requests-OWGOiDaV.mjs → thread-requests-COrRJcZb.mjs}

@@ -1,20 +1,19 @@
-import { l as toCodexPluginOwnedAccountApp, s as readCodexPluginInventory } from "./plugin-inventory-Cky2XJUw.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { u as stringifyCodexPolicy } from "./config-security-CE-FcGw9.mjs";
-import { f as resolveCodexPluginsPolicy } from "./config-parsing-b088LyhT.mjs";
+import { u as fingerprintCodexPolicy } from "./config-security-KAPScztc.mjs";
+import { f as resolveCodexPluginsPolicy } from "./config-parsing-BQq-CHTF.mjs";
 import { n as resolveCodexAppServerLocalHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
-import { d as readCodexEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-CzyWLTJt.mjs";
-import { t as isIncognitoSessionKey } from "./incognito-session-DWYapfwf.mjs";
-import { a as defaultCodexAppInventoryCache, i as CodexAppInventoryCache, o as serializeCodexAppInventoryError, s as codexAppIdentityKey, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-BL9B5H0L.mjs";
-import "./config-DKhXquav.mjs";
-import { t as isCodexAppServerNativeAuthProfile } from "./auth-profile-B0okYl2D.mjs";
-import { D as nativeHookRelayUnregisterQueue, W as readCodexClientSessionMeta } from "./shared-client-CJCTeFpQ.mjs";
+import { d as readCodexEffectiveConfig, u as CODEX_SESSION_OVERRIDABLE_LAYER_TYPES } from "./config-options-HG_Rr3W_.mjs";
+import { a as defaultCodexAppInventoryCache, i as CodexAppInventoryCache, o as serializeCodexAppInventoryError, s as codexAppIdentityKey, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-BW8rd98k.mjs";
+import { c as toCodexPluginOwnedAccountApp, o as readCodexPluginInventory } from "./plugin-inventory-Bf0_piTw.mjs";
+import "./config-0Gxk3_eq.mjs";
+import { t as isCodexAppServerNativeAuthProfile } from "./auth-profile-CgHQ8Vot.mjs";
+import { D as nativeHookRelayUnregisterQueue, W as readCodexClientSessionMeta } from "./shared-client-DJJ3ljH2.mjs";
 import { a as isCodexResponsesOAuthRun, i as isCodexResponsesOAuthCredential, t as CODEX_RESPONSES_OAUTH_PROVIDER } from "./responses-oauth-twnuTaAa.mjs";
-import { B as resolveCodexToolAbortTerminalReason } from "./client-qyUBJlGZ.mjs";
-import { n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, p as unsubscribeCodexThreadBestEffort } from "./attempt-client-cleanup-B-S7ngS_.mjs";
-import { t as ensureCodexPluginActivation } from "./plugin-activation-cNHRfaxU.mjs";
-import { r as hashCodexAppServerBindingFingerprint } from "./session-binding-DGCYAfvD.mjs";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-BwkQXf9e.mjs";
+import { P as resolveCodexToolAbortTerminalReason } from "./client-CBzEVDyb.mjs";
+import { f as unsubscribeCodexThreadBestEffort, n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS } from "./attempt-client-cleanup-yLjGwbwT.mjs";
+import { t as ensureCodexPluginActivation } from "./plugin-activation-BcyBv8PG.mjs";
+import { a as hashCodexAppServerBindingFingerprint } from "./session-binding-Ce7BqiPN.mjs";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-CCEFO6qK.mjs";
 import { normalizeOptionalString, normalizeUniqueStringEntries, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import * as crypto$1 from "node:crypto";
 import crypto, { createHash } from "node:crypto";
@@ -24,8 +23,10 @@ import os from "node:os";
 import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
-import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { resolveRequiredHomeDir, resolveStateDir } from "openclaw/plugin-sdk/state-paths";
+import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";
+import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
+import { escapeRegExp } from "openclaw/plugin-sdk/text-utility-runtime";
 import { emitTrustedDiagnosticEvent } from "openclaw/plugin-sdk/diagnostic-runtime";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { SKILL_WORKSHOP_TOOL_NAME, buildCredentialSafetyPrompt, buildDelegationGuidanceSection, buildSkillWorkshopPromptSection, buildUiPresentationPrompt, embeddedAgentLog, isHostScopedAgentToolActive, resolveMainSessionDelegationMode } from "openclaw/plugin-sdk/agent-harness-runtime";
@@ -130,19 +131,17 @@ async function readCodexThreadAdmissibleAccountApps(params, appCache) {
 	};
 	const installedAppsById = new Map(snapshot.installedApps.map((app) => [app.id, app]));
 	return {
-		apps: snapshot.apps.filter((app) => resolveCodexInstalledAppThreadAdmission(toCodexPluginOwnedAccountApp(app, installedAppsById.get(app.id)), installedAppsById.get(app.id)) !== "blocked").toSorted((left, right) => left.id.localeCompare(right.id)),
+		apps: snapshot.apps.filter((app) => isCodexInstalledAppThreadAdmissible(installedAppsById.get(app.id))).toSorted((left, right) => left.id.localeCompare(right.id)),
 		installedApps: snapshot.installedApps
 	};
 }
-function resolveCodexPluginAppThreadAdmission(app, inventory) {
+function isCodexPluginAppThreadAdmissible(app, inventory) {
 	const snapshot = inventory.appInventory?.snapshot;
-	if (!snapshot) return "blocked";
-	return resolveCodexInstalledAppThreadAdmission(app, snapshot.installedApps.find((candidate) => candidate.id === app.id));
+	if (!app.accessible || app.needsAuth || !snapshot) return false;
+	return isCodexInstalledAppThreadAdmissible(snapshot.installedApps.find((candidate) => candidate.id === app.id));
 }
-function resolveCodexInstalledAppThreadAdmission(app, installed) {
-	if (!app.accessible || app.needsAuth || !installed) return "blocked";
-	if (installed.enabled && installed.callable) return "ready";
-	return !installed.enabled && !installed.callable ? "provisional" : "blocked";
+function isCodexInstalledAppThreadAdmissible(installed) {
+	return Boolean(installed && (installed.enabled && installed.callable || !installed.enabled && !installed.callable));
 }
 async function readCodexConfigForAppAdmission(params) {
 	try {
@@ -192,7 +191,7 @@ function shouldBuildCodexPluginThreadConfig(pluginConfig) {
 /** Fingerprints policy and app-cache identity before runtime inventory is read. */
 function buildCodexPluginThreadConfigInputFingerprint(params) {
 	const policy = resolveCodexPluginsPolicy(params.pluginConfig);
-	return fingerprintJson({
+	return fingerprintCodexPolicy({
 		version: CODEX_PLUGIN_THREAD_CONFIG_INPUT_FINGERPRINT_VERSION,
 		policy: policyFingerprint(policy),
 		appCacheKey: params.appCacheKey ?? null
@@ -334,7 +333,7 @@ async function buildCodexPluginThreadConfig(params) {
 		if (record.appOwnership !== "proven") continue;
 		pluginAppIds[record.policy.configKey] = [...record.ownedAppIds].toSorted();
 		for (const app of inventory.appInventory?.state === "missing" ? [] : record.apps) {
-			const admissionConfig = resolveCodexPluginAppThreadAdmission(app, inventory) === "blocked" ? void 0 : await getAdmissionConfig();
+			const admissionConfig = isCodexPluginAppThreadAdmissible(app, inventory) ? await getAdmissionConfig() : void 0;
 			if (!admissionConfig || resolveCodexExplicitAppEnablement(admissionConfig.layers, app.id) === false) {
 				diagnostics.push({
 					code: "app_not_ready",
@@ -378,7 +377,7 @@ async function buildCodexPluginThreadConfig(params) {
 		enabled: true,
 		configPatch,
 		...provisionalAppIds.size > 0 ? { provisionalAppIds: Array.from(provisionalAppIds).toSorted() } : {},
-		fingerprint: fingerprintJson({
+		fingerprint: fingerprintCodexPolicy({
 			version: CODEX_PLUGIN_THREAD_CONFIG_FINGERPRINT_VERSION,
 			inputFingerprint,
 			configPatch,
@@ -408,7 +407,7 @@ function emptyPluginThreadConfig(params) {
 	const policyContext = buildPluginAppPolicyContext({}, {});
 	return {
 		enabled: params.enabled,
-		fingerprint: fingerprintJson({
+		fingerprint: fingerprintCodexPolicy({
 			version: CODEX_PLUGIN_THREAD_CONFIG_FINGERPRINT_VERSION,
 			inputFingerprint: params.inputFingerprint,
 			configPatch: params.configPatch ?? null,
@@ -496,7 +495,7 @@ async function refreshCodexPluginAppApprovalPolicy(params) {
 }
 function buildPluginAppPolicyContext(apps, pluginAppIds) {
 	return {
-		fingerprint: fingerprintJson({
+		fingerprint: fingerprintCodexPolicy({
 			version: 2,
 			apps,
 			pluginAppIds
@@ -546,9 +545,6 @@ function mergeJsonObjects(left, right) {
 	}
 	return merged;
 }
-function fingerprintJson(value) {
-	return crypto.createHash("sha256").update(stringifyCodexPolicy(value)).digest("hex");
-}
 //#endregion
 //#region extensions/codex/src/app-server/dynamic-tool-profile.ts
 /** Tool names owned by Codex app-server and normally excluded from OpenClaw dynamic tools. */
@@ -740,12 +736,8 @@ function stabilizeJsonValue(value) {
 	if (!isJsonObject(value)) return value;
 	return Object.fromEntries(Object.entries(value).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, child]) => [key, stabilizeJsonValue(child)]));
 }
-function readActiveCodexTurnIds(thread) {
-	return (thread.turns ?? []).filter((turn) => turn.status === "inProgress").map((turn) => typeof turn.id === "string" ? turn.id : "").filter((turnId) => turnId.trim().length > 0);
-}
 function readActiveCodexTurnIdsFromResume(response) {
-	const pagedTurns = response.initialTurnsPage?.data;
-	return readActiveCodexTurnIds(Array.isArray(pagedTurns) ? { turns: pagedTurns } : response.thread);
+	return (response.initialTurnsPage?.data ?? response.thread.turns ?? []).filter((turn) => turn.status === "inProgress" && turn.id.trim().length > 0).map((turn) => turn.id);
 }
 const LEGACY_EMPTY_DYNAMIC_TOOLS_FINGERPRINT = codexLegacyDynamicToolsFingerprint([]);
 const EMPTY_DYNAMIC_TOOLS_FINGERPRINT = hashCodexAppServerBindingFingerprint(LEGACY_EMPTY_DYNAMIC_TOOLS_FINGERPRINT);
@@ -943,8 +935,11 @@ async function resolveUncachedCodexNativeSkillIsolation(params) {
 	}, { signal: params.signal });
 	const homes = [params.home?.trim() || process.env.HOME?.trim() || process.env.USERPROFILE?.trim() || os.homedir()];
 	if (process.platform === "win32") homes.push(params.userProfile?.trim() || os.homedir());
-	const personalSkills = await collectPersonalSkillRealPaths([...new Set(homes.map((home) => path.resolve(home)))], params.codexHome);
-	return { disabledUserSkillPaths: [...personalSkills.complete ? personalSkills.skillPaths : /* @__PURE__ */ new Set([...personalSkills.skillPaths, ...response.data.flatMap((entry) => entry.skills.filter((skill) => skill.scope === "user").map((skill) => skill.path))])].toSorted((left, right) => left.localeCompare(right)) };
+	const { complete, skillPaths } = await collectPersonalSkillRealPaths([...new Set(homes.map((home) => path.resolve(home)))], params.codexHome);
+	if (!complete) {
+		for (const entry of response.data) for (const skill of entry.skills) if (skill.scope === "user") skillPaths.add(skill.path);
+	}
+	return { disabledUserSkillPaths: [...skillPaths].toSorted((left, right) => left.localeCompare(right)) };
 }
 /** Applies path-exact session rules after caller config so isolated user skills stay disabled. */
 function applyCodexNativeSkillIsolation(config, isolation) {
@@ -1019,8 +1014,11 @@ async function loadCodexNativeToolCatalog(params) {
 	const actualHome = client.getRuntimeIdentity()?.codexHome;
 	if (!hasCodexNativeToolCatalog(binding) || !binding.dynamicToolsFingerprint || appServer.start.transport !== "stdio" && appServer.start.transport !== "unix" || appServer.remoteWorkspaceRoot || !actualHome || path.resolve(actualHome) !== path.resolve(home) || binding.appServerRuntimeFingerprint !== buildCodexAppServerConnectionFingerprint(appServer, agentDir)) throw new Error("Canonical Codex declarations require the original verified local binding and selected native connection; the thread is preserved.");
 	const metadata = await readCodexClientSessionMeta(client, path.join(home, "sessions"), binding.rolloutPath, binding.threadId);
-	assertCurrent();
-	return parseCodexNativeToolCatalog(metadata, binding.threadId, binding.dynamicToolsFingerprint);
+	const consume = () => {
+		assertCurrent();
+		return parseCodexNativeToolCatalog(metadata, binding.threadId, binding.dynamicToolsFingerprint);
+	};
+	return params.authority ? await params.authority.withCurrent(consume) : consume();
 }
 //#endregion
 //#region extensions/codex/src/app-server/thread-mcp-attestation.ts
@@ -1065,14 +1063,22 @@ async function attestCodexRestrictedToolSurfaceMcpServersDisabled(client, thread
 */
 /** Every admission path checks the same surface; its lifecycle owner keeps the claim fenced. */
 async function attestCodexThreadToolSurface(params) {
-	params.assertCurrent();
+	if (params.appIds.length === 0 && !params.restrictedToolSurface) {
+		params.signal?.throwIfAborted();
+		params.assertCurrent();
+		return;
+	}
+	if (params.withCurrent) await params.withCurrent(params.assertCurrent);
+	else params.assertCurrent();
 	if (params.appIds.length > 0) {
 		await params.lifecycleTiming.measure("plugin-app-attestation", () => checkCodexThreadAppAvailability(params));
-		params.assertCurrent();
+		if (params.withCurrent) await params.withCurrent(params.assertCurrent);
+		else params.assertCurrent();
 	}
 	if (params.restrictedToolSurface) {
 		await params.lifecycleTiming.measure("restricted-tool-surface-mcp-attestation", () => attestCodexRestrictedToolSurfaceMcpServersDisabled(params.client, params.threadId, params.threadConfig, params.signal, params.appIds.length > 0 ? ["codex_apps"] : []));
-		params.assertCurrent();
+		if (params.withCurrent) await params.withCurrent(params.assertCurrent);
+		else params.assertCurrent();
 	}
 }
 var CodexPluginThreadAppAttestationError = class extends Error {
@@ -1090,7 +1096,10 @@ async function checkCodexThreadAppAvailability(params) {
 		response = await params.client.request("app/installed", {
 			threadId: params.threadId,
 			forceRefresh: false
-		}, { signal: params.signal });
+		}, {
+			signal: params.signal,
+			withCurrent: params.withCurrent
+		});
 	} catch (error) {
 		params.signal?.throwIfAborted();
 		throw new CodexPluginThreadAppAttestationError(`Codex could not confirm admitted apps for thread ${params.threadId}`, { cause: error });
@@ -1147,6 +1156,7 @@ const CODEX_NATIVE_HOOK_RELAY_DEFAULT_TIMEOUT_SEC = 10;
 const CODEX_NATIVE_HOOK_RELAY_UNREGISTER_GRACE_MS = 1e4;
 const CODEX_NATIVE_HOOK_RELAY_UNREGISTER_EXTRA_GRACE_MS = 5e3;
 const MAX_PENDING_DIRECT_CHILD_ADMISSIONS = 32;
+const CODEX_NATIVE_SPAWN_HOOK_NAMES = ["spawn_agent", "Agent"];
 const CODEX_HOOK_MATCHER_NAMES_BY_TOOL_ID = {
 	exec: [
 		"Bash",
@@ -1158,7 +1168,7 @@ const CODEX_HOOK_MATCHER_NAMES_BY_TOOL_ID = {
 		"Write",
 		"Edit"
 	],
-	spawn_agent: ["spawn_agent", "Agent"]
+	spawn_agent: CODEX_NATIVE_SPAWN_HOOK_NAMES
 };
 var CodexManagedHooksOnlyError = class extends Error {
 	constructor() {
@@ -1182,22 +1192,7 @@ async function assertCodexNativeHookRelayAllowed(client, signal, timeoutMs) {
 }
 /** Defers relay unregister so late native hook subprocesses can still resolve. */
 function scheduleCodexNativeHookRelayUnregister(params) {
-	let pending;
-	const unregister = () => {
-		if (!pending) return;
-		const current = pending;
-		pending = void 0;
-		if (!nativeHookRelayUnregisterQueue.delete(current)) return;
-		params.relay.unregister();
-		nativeHookRelayUnregisterQueue.track(params.relay.drain());
-	};
-	const timeout = setTimeout(unregister, resolveCodexNativeHookRelayUnregisterGraceMs(params.hookTimeoutSec));
-	pending = {
-		timeout,
-		unregister
-	};
-	nativeHookRelayUnregisterQueue.add(pending);
-	timeout.unref();
+	nativeHookRelayUnregisterQueue.schedule(params.relay, resolveCodexNativeHookRelayUnregisterGraceMs(params.hookTimeoutSec));
 }
 function resolveCodexNativeHookRelayUnregisterGraceMs(hookTimeoutSec) {
 	const hookTimeoutMs = finiteSecondsToTimerSafeMilliseconds(normalizeHookTimeoutSec(hookTimeoutSec)) ?? 0;
@@ -1266,8 +1261,20 @@ function createCodexNativeHookRelay(params) {
 			toolNames: [...params.nativeProcessAuthority ? ["exec"] : [], ...params.nativeModelAdmission ? modelInputTools : []],
 			admit: async (invocation, assertAdmissionCurrent, preparation) => {
 				const payload = invocation.rawPayload;
-				if (params.nativeModelAdmission && invocation.toolName && modelInputTools.includes(invocation.toolName)) {
+				const toolName = CODEX_NATIVE_SPAWN_HOOK_NAMES.includes(invocation.toolName ?? "") ? "spawn_agent" : invocation.toolName;
+				if (params.nativeModelAdmission && toolName && modelInputTools.includes(toolName)) {
 					const admission = params.nativeModelAdmission;
+					if (toolName.endsWith("spawn_agent")) {
+						const assertSpawnAllowed = () => {
+							assertAdmissionCurrent();
+							if (!readCodexNativeChildThreadId(payload)) try {
+								params.hostCapabilities.assertNativeSubagentSpawnAllowed?.();
+							} catch (error) {
+								return `${toErrorObject(error, "Native spawn participant selection failed").message} Use sessions_spawn with the requester's requester_profile.id as user.`;
+							}
+						};
+						return assertSpawnAllowed;
+					}
 					const input = isJsonObject(payload) ? payload.tool_input : void 0;
 					const targetThreadId = isJsonObject(input) && typeof input.target === "string" ? input.target.trim() : void 0;
 					const threadId = readCodexNativeChildThreadId(payload) ?? admission.threadId();
@@ -1419,17 +1426,23 @@ function buildCodexNativeHookRelayId(params) {
 	hash.update(params.sessionKey?.trim() || params.sessionId);
 	return `codex-${hash.digest("hex").slice(0, 40)}`;
 }
-const CODEX_HOOK_EVENT_BY_NATIVE_EVENT = {
-	pre_tool_use: "PreToolUse",
-	post_tool_use: "PostToolUse",
-	permission_request: "PermissionRequest",
-	before_agent_finalize: "Stop"
-};
-const CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT = {
-	pre_tool_use: "pre_tool_use",
-	post_tool_use: "post_tool_use",
-	permission_request: "permission_request",
-	before_agent_finalize: "stop"
+const CODEX_HOOK_EVENTS = {
+	pre_tool_use: {
+		name: "PreToolUse",
+		keyLabel: "pre_tool_use"
+	},
+	post_tool_use: {
+		name: "PostToolUse",
+		keyLabel: "post_tool_use"
+	},
+	permission_request: {
+		name: "PermissionRequest",
+		keyLabel: "permission_request"
+	},
+	before_agent_finalize: {
+		name: "Stop",
+		keyLabel: "stop"
+	}
 };
 const CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS = ["/<session-flags>/config.toml", "<session-flags>/config.toml"];
 function buildCodexNativeHookRelayConfig(params) {
@@ -1438,12 +1451,12 @@ function buildCodexNativeHookRelayConfig(params) {
 	const config = { "features.hooks": true };
 	const hookState = {};
 	for (const event of CODEX_NATIVE_HOOK_RELAY_EVENTS) {
-		const codexEvent = CODEX_HOOK_EVENT_BY_NATIVE_EVENT[event];
+		const { name, keyLabel } = CODEX_HOOK_EVENTS[event];
 		const selected = selectedEvents.has(event);
 		const shouldRelay = params.relay.shouldRelayEvent(event);
 		if (!selected || !shouldRelay) {
-			if (selected || params.clearOmittedEvents) config[`hooks.${codexEvent}`] = [];
-			if (params.clearOmittedEvents) for (const sourcePath of CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS) hookState[`${sourcePath}:${CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT[event]}:0:0`] = { enabled: false };
+			if (selected || params.clearOmittedEvents) config[`hooks.${name}`] = [];
+			if (params.clearOmittedEvents) for (const sourcePath of CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS) hookState[`${sourcePath}:${keyLabel}:0:0`] = { enabled: false };
 			continue;
 		}
 		const timeout = normalizeHookTimeoutSec(params.hookTimeoutSec);
@@ -1459,15 +1472,15 @@ function buildCodexNativeHookRelayConfig(params) {
 				statusMessage: "OpenClaw native hook relay"
 			}]
 		};
-		config[`hooks.${codexEvent}`] = [group];
+		config[`hooks.${name}`] = [group];
 		const state = {
 			enabled: true,
-			trusted_hash: `sha256:${createHash("sha256").update(stringifyCodexPolicy({
-				event_name: CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT[event],
+			trusted_hash: `sha256:${fingerprintCodexPolicy({
+				event_name: keyLabel,
 				...group
-			})).digest("hex")}`
+			})}`
 		};
-		for (const sourcePath of CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS) hookState[`${sourcePath}:${CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT[event]}:0:0`] = state;
+		for (const sourcePath of CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS) hookState[`${sourcePath}:${keyLabel}:0:0`] = state;
 	}
 	config["hooks.state"] = hookState;
 	return config;
@@ -1503,7 +1516,7 @@ function buildCodexNativeToolMatcher(toolNames) {
 	}
 	const sortedNames = Array.from(nativeNames).toSorted();
 	if (!hasCustomToolName && sortedNames.every((toolName) => /^[A-Za-z0-9_]+$/.test(toolName))) return sortedNames.join("|");
-	return `(?i)^(?:${sortedNames.map((toolName) => toolName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})$`;
+	return `(?i)^(?:${sortedNames.map(escapeRegExp).join("|")})$`;
 }
 //#endregion
 //#region extensions/codex/src/app-server/project-doc-thread-config.ts
@@ -1723,12 +1736,6 @@ const CODEX_NATIVE_WEB_SEARCH_DISABLED_CONFIG = {
 	"features.standalone_web_search": false,
 	web_search: "disabled"
 };
-function hasManagedSearchProvider(config) {
-	return normalizeOptionalString(config?.tools?.web?.search?.provider) !== void 0;
-}
-function hasNativeDomainRestrictions(config) {
-	return normalizeUniqueTrimmedStringList(config?.tools?.web?.search?.openaiCodex?.allowedDomains).length > 0;
-}
 function buildCodexNativeWebSearchThreadConfig(config) {
 	const nativeConfig = config?.tools?.web?.search?.openaiCodex;
 	const threadConfig = {
@@ -1756,10 +1763,10 @@ function resolveCodexWebSearchPlan(params) {
 		threadConfig: CODEX_NATIVE_WEB_SEARCH_DISABLED_CONFIG
 	};
 	const nativeConfig = params.config?.tools?.web?.search?.openaiCodex;
-	const managedSearchExplicit = hasManagedSearchProvider(params.config) || nativeConfig?.enabled === false;
+	const managedSearchExplicit = normalizeOptionalString(params.config?.tools?.web?.search?.provider) !== void 0 || nativeConfig?.enabled === false;
 	const nativeProviderSupportsSearch = params.nativeProviderWebSearchSupport === void 0 || params.nativeProviderWebSearchSupport === "supported";
-	if (!(params.nativeToolSurfaceEnabled !== false && nativeProviderSupportsSearch && nativeConfig?.enabled !== false && !hasManagedSearchProvider(params.config))) {
-		if (!managedSearchExplicit && hasNativeDomainRestrictions(params.config)) return {
+	if (!(params.nativeToolSurfaceEnabled !== false && nativeProviderSupportsSearch && !managedSearchExplicit)) {
+		if (!managedSearchExplicit && normalizeUniqueTrimmedStringList(nativeConfig?.allowedDomains).length > 0) return {
 			kind: "disabled",
 			suppressManagedWebSearch: true,
 			threadConfig: CODEX_NATIVE_WEB_SEARCH_DISABLED_CONFIG
@@ -1873,7 +1880,7 @@ function buildCodexThreadConfiguration(params, options) {
 			...options,
 			directOnlyToolNamespaces: resolveDirectOnlyToolNamespaces(options.dynamicTools)
 		}),
-		developerInstructions: joinPresentSections(options.developerInstructions ?? buildDeveloperInstructions(params, { dynamicTools: options.dynamicTools }), options.skillsInstructions)
+		developerInstructions: joinPresentSections(options.developerInstructions ?? buildDeveloperInstructions(params, { dynamicTools: options.dynamicTools }), options.refreshableInstructions)
 	};
 }
 function buildThreadStartParams(params, options) {
@@ -1895,7 +1902,7 @@ function buildThreadStartParams(params, options) {
 		personality: CODEX_NATIVE_PERSONALITY_NONE,
 		serviceName: "OpenClaw",
 		threadSource: "openclaw",
-		...resolveCodexThreadEnvironmentSelection(options),
+		...resolveCodexThreadEnvironmentSelection(params.requireWorkspaceOnly === true ? { nativeCodeModeEnabled: false } : options),
 		dynamicTools: [...options.dynamicTools],
 		experimentalRawEvents: true,
 		...isIncognitoSessionKey(params.sessionKey) ? { ephemeral: true } : {}
@@ -1958,10 +1965,13 @@ function ensureDirectOnlyToolNamespaces(config, requiredNamespaces) {
 function resolveDirectOnlyToolNamespaces(dynamicTools) {
 	return (dynamicTools ?? []).filter((tool) => tool.type === "namespace" && tool.name === "openclaw_direct").map((tool) => tool.name);
 }
+function isCodexNativeDelegationDisabledForRun(params, hostSystemAgentActive = isHostScopedAgentToolActive("openclaw")) {
+	return isCodexResponsesOAuthRun(params) || params.delegationCapability === "report_only" || params.requireWorkspaceOnly === true || params.pluginHarnessToolPolicyRestricted === true || isMessageOnlyCodexSourceReply(params) || hostSystemAgentActive && isSystemAgentOnlyCodexDynamicToolAllowlist(params.toolsAllow);
+}
 function buildCodexRuntimeThreadConfigForRun(params, config, options = {}) {
 	const ringZeroActive = (options.hostSystemAgentActive ?? isHostScopedAgentToolActive("openclaw")) && isSystemAgentOnlyCodexDynamicToolAllowlist(params.toolsAllow);
 	const messageOnlySourceReply = isMessageOnlyCodexSourceReply(params);
-	const restrictedToolSurface = ringZeroActive || messageOnlySourceReply || params.pluginHarnessToolPolicyRestricted === true;
+	const restrictedToolSurface = ringZeroActive || messageOnlySourceReply || params.pluginHarnessToolPolicyRestricted === true || params.requireWorkspaceOnly === true;
 	const restrictedTurnDisablesProjectDocs = ringZeroActive || messageOnlySourceReply || params.pluginHarnessToolPolicyRestricted && params.disableTools;
 	const configMcpServers = config?.mcp_servers;
 	if (restrictedToolSurface && configMcpServers !== void 0 && !isJsonObject(configMcpServers)) throw new Error("Codex restricted tool surface received invalid thread mcp_servers config");
@@ -1975,8 +1985,7 @@ function buildCodexRuntimeThreadConfigForRun(params, config, options = {}) {
 	}).threadConfig;
 	const baseConfig = buildCodexRuntimeThreadConfig(mergeCodexThreadConfigs(config, webSearchConfig), options);
 	return applyCodexManagedShellEnvironment({
-		...mergeCodexThreadConfigs(baseConfig, options.appServer?.networkProxy?.configPatch, isCodexResponsesOAuthRun(params) ? {
-			...CODEX_DELEGATION_DISABLED_THREAD_CONFIG,
+		...mergeCodexThreadConfigs(baseConfig, options.appServer?.networkProxy?.configPatch, isCodexNativeDelegationDisabledForRun(params, options.hostSystemAgentActive) ? CODEX_DELEGATION_DISABLED_THREAD_CONFIG : void 0, isCodexResponsesOAuthRun(params) ? {
 			"features.apps": false,
 			"features.plugins": false,
 			"features.image_generation": false,
@@ -1985,7 +1994,7 @@ function buildCodexRuntimeThreadConfigForRun(params, config, options = {}) {
 			"orchestrator.skills.enabled": false,
 			"orchestrator.mcp.enabled": false,
 			"skills.bundled.enabled": false
-		} : void 0, params.pluginHarnessToolPolicySafeDeniedTools?.includes("image_generate") ? { "features.image_generation": false } : void 0, shouldDisableCodexToolSearchForModel(params.modelId) ? CODEX_TOOL_SEARCH_UNSUPPORTED_THREAD_CONFIG : void 0, params.delegationCapability === "report_only" ? CODEX_DELEGATION_DISABLED_THREAD_CONFIG : void 0, messageOnlySourceReply || params.pluginHarnessToolPolicyRestricted === true ? buildRestrictedToolConfigPatch(restrictedToolSurfaceMcpServerNames, Boolean(params.scheduledRuntimeAuthority) && !isCodexResponsesOAuthRun(params)) : buildCodexRingZeroThreadConfigPatch(params, options.hostSystemAgentActive, restrictedToolSurfaceMcpServerNames), restrictedTurnDisablesProjectDocs ? CODEX_NO_PROJECT_DOCS_CONFIG : void 0, params.authoredContextTokenCap === void 0 ? void 0 : { model_context_window: params.authoredContextTokenCap }) ?? baseConfig,
+		} : void 0, params.pluginHarnessToolPolicySafeDeniedTools?.includes("image_generate") ? { "features.image_generation": false } : void 0, shouldDisableCodexToolSearchForModel(params.modelId) ? CODEX_TOOL_SEARCH_UNSUPPORTED_THREAD_CONFIG : void 0, messageOnlySourceReply || params.pluginHarnessToolPolicyRestricted === true || params.requireWorkspaceOnly === true ? buildRestrictedToolConfigPatch(restrictedToolSurfaceMcpServerNames, Boolean(params.scheduledRuntimeAuthority) && !isCodexResponsesOAuthRun(params) && params.requireWorkspaceOnly !== true) : buildCodexRingZeroThreadConfigPatch(params, options.hostSystemAgentActive, restrictedToolSurfaceMcpServerNames), restrictedTurnDisablesProjectDocs ? CODEX_NO_PROJECT_DOCS_CONFIG : void 0, params.authoredContextTokenCap === void 0 ? void 0 : { model_context_window: params.authoredContextTokenCap }) ?? baseConfig,
 		...params.bootstrapContextMode === "lightweight" ? CODEX_NO_PROJECT_DOCS_CONFIG : {}
 	}, options.shellEnvironment, options.disableLoginShell, options.shellPathPrepend);
 }
@@ -2099,4 +2108,4 @@ function resolveCodexThreadEnvironmentSelection(options) {
 	return {};
 }
 //#endregion
-export { readActiveCodexTurnIdsFromResume as $, createCodexNativeHookRelay as A, loadCodexNativeToolCatalog as B, mergeCodexNativeProjectDocThreadConfig as C, refreshCodexPluginAppApprovalPolicy as Ct, buildCodexNativeHookRelayConfig as D, assertCodexNativeHookRelayAllowed as E, attestCodexThreadToolSurface as F, areUserMcpServersFingerprintsCompatible as G, applyCodexNativeSkillIsolation as H, checkCodexThreadAppAvailability as I, fingerprintCodexThreadConfig as J, codexDynamicToolsFingerprint as K, discardUnattestedCodexPluginThread as L, resolveCodexNativeHookRelayEvents as M, resolveCodexNativeHookRelayTtlMs as N, buildCodexNativeHookRelayDisabledConfig as O, scheduleCodexNativeHookRelayUnregister as P, legacyFingerprintUserMcpServersConfigPatch as Q, attestCodexRestrictedToolSurfaceMcpServersDisabled as R, buildCodexProjectDocThreadConfig as S, mergeCodexThreadConfigs as St, CodexManagedHooksOnlyError as T, buildCodexAppApprovalOverrides as Tt, resolveCodexNativeSkillIsolation as U, parseCodexNativeToolCatalog as V, areCodexDynamicToolFingerprintsCompatible as W, fingerprintJsonObject as X, fingerprintEnvironmentSelection as Y, fingerprintUserMcpServersConfigPatch as Z, resolveCodexAppServerModelProvider as _, buildCodexPluginThreadConfigTimeoutFallback as _t, buildCodexThreadConfiguration as a, shouldRotateCodexGpt56MultiAgentBinding as at, resolveCodexBindingModelProviderFallback as b, disableUnlistedCodexApps as bt, codexThreadSandboxOrPermissions as c, isForcedPrivateQaCodexRuntime as ct, resolveCodexThreadApprovalsReviewer as d, normalizeCodexDynamicToolName as dt, shouldStartTransientNoToolThread as et, buildCodexNativeWebSearchThreadConfig as f, resolveCodexDynamicToolsLoading as ft, CODEX_NATIVE_PERSONALITY_NONE as g, buildCodexPluginThreadConfigInputFingerprint as gt, buildDeveloperInstructions as h, buildCodexPluginThreadConfig as ht, buildCodexRuntimeThreadConfigForRun as i, shouldRotateCodexAppServerBindingForRuntime as it, emitCodexNativePreToolUseFailureDiagnostic as j, buildCodexNativeHookRelayId as k, readCodexInheritedMcpServerNames as l, isMessageOnlyCodexSourceReply as lt, mergeCodexNativeShellEnvironment as m, buildCodexPluginAppsConfigPatchFromPolicyContext as mt, buildCodexRingZeroThreadConfigPatch as n, isTransientWebSearchRestriction as nt, buildThreadResumeParams as o, filterCodexDynamicTools as ot, resolveCodexWebSearchPlan as p, resolveCodexDynamicToolsLoadingForRuntime as pt, codexLegacyDynamicToolsFingerprint as q, buildCodexRuntimeThreadConfig as r, shouldRecheckRecoverablePluginBinding as rt, buildThreadStartParams as s, filterCodexDynamicToolsForDisabledNativeSurface as st, assertCodexManagedRequirementsDoNotOverrideToolPolicy as t, stabilizeJsonValue as tt, readCodexManagedRequirementsFingerprint as u, isSystemAgentOnlyCodexDynamicToolAllowlist as ut, resolveCodexAppServerRequestModelSelection as v, buildDisabledAppsConfigPatch as vt, CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS as w, shouldBuildCodexPluginThreadConfig as wt, joinPresentSections as x, isCodexPluginThreadBindingStale as xt, resolveCodexAppServerThreadModelSelection as y, buildPluginAppPolicyContext as yt, hasCodexNativeToolCatalog as z };
+export { legacyFingerprintUserMcpServersConfigPatch as $, buildCodexNativeHookRelayId as A, hasCodexNativeToolCatalog as B, buildCodexProjectDocThreadConfig as C, mergeCodexThreadConfigs as Ct, assertCodexNativeHookRelayAllowed as D, CodexManagedHooksOnlyError as E, buildCodexAppApprovalOverrides as Et, scheduleCodexNativeHookRelayUnregister as F, areCodexDynamicToolFingerprintsCompatible as G, parseCodexNativeToolCatalog as H, attestCodexThreadToolSurface as I, codexLegacyDynamicToolsFingerprint as J, areUserMcpServersFingerprintsCompatible as K, checkCodexThreadAppAvailability as L, emitCodexNativePreToolUseFailureDiagnostic as M, resolveCodexNativeHookRelayEvents as N, buildCodexNativeHookRelayConfig as O, resolveCodexNativeHookRelayTtlMs as P, fingerprintUserMcpServersConfigPatch as Q, discardUnattestedCodexPluginThread as R, joinPresentSections as S, isCodexPluginThreadBindingStale as St, CODEX_NATIVE_HOOK_RELAY_TTL_GRACE_MS as T, shouldBuildCodexPluginThreadConfig as Tt, applyCodexNativeSkillIsolation as U, loadCodexNativeToolCatalog as V, resolveCodexNativeSkillIsolation as W, fingerprintEnvironmentSelection as X, fingerprintCodexThreadConfig as Y, fingerprintJsonObject as Z, CODEX_NATIVE_PERSONALITY_NONE as _, buildCodexPluginThreadConfigInputFingerprint as _t, buildCodexThreadConfiguration as a, shouldRotateCodexAppServerBindingForRuntime as at, resolveCodexAppServerThreadModelSelection as b, buildPluginAppPolicyContext as bt, codexThreadSandboxOrPermissions as c, filterCodexDynamicToolsForDisabledNativeSurface as ct, readCodexManagedRequirementsFingerprint as d, isSystemAgentOnlyCodexDynamicToolAllowlist as dt, readActiveCodexTurnIdsFromResume as et, resolveCodexThreadApprovalsReviewer as f, normalizeCodexDynamicToolName as ft, buildDeveloperInstructions as g, buildCodexPluginThreadConfig as gt, mergeCodexNativeShellEnvironment as h, buildCodexPluginAppsConfigPatchFromPolicyContext as ht, buildCodexRuntimeThreadConfigForRun as i, shouldRecheckRecoverablePluginBinding as it, createCodexNativeHookRelay as j, buildCodexNativeHookRelayDisabledConfig as k, isCodexNativeDelegationDisabledForRun as l, isForcedPrivateQaCodexRuntime as lt, resolveCodexWebSearchPlan as m, resolveCodexDynamicToolsLoadingForRuntime as mt, buildCodexRingZeroThreadConfigPatch as n, stabilizeJsonValue as nt, buildThreadResumeParams as o, shouldRotateCodexGpt56MultiAgentBinding as ot, buildCodexNativeWebSearchThreadConfig as p, resolveCodexDynamicToolsLoading as pt, codexDynamicToolsFingerprint as q, buildCodexRuntimeThreadConfig as r, isTransientWebSearchRestriction as rt, buildThreadStartParams as s, filterCodexDynamicTools as st, assertCodexManagedRequirementsDoNotOverrideToolPolicy as t, shouldStartTransientNoToolThread as tt, readCodexInheritedMcpServerNames as u, isMessageOnlyCodexSourceReply as ut, resolveCodexAppServerModelProvider as v, buildCodexPluginThreadConfigTimeoutFallback as vt, mergeCodexNativeProjectDocThreadConfig as w, refreshCodexPluginAppApprovalPolicy as wt, resolveCodexBindingModelProviderFallback as x, disableUnlistedCodexApps as xt, resolveCodexAppServerRequestModelSelection as y, buildDisabledAppsConfigPatch as yt, attestCodexRestrictedToolSurfaceMcpServersDisabled as z };