@openclaw/codex 2026.9.8 → 2026.10.1-beta.2

package/dist/.setup/{run-attempt-lifecycle-C-6O3Exn.mjs → run-attempt-lifecycle-BuZgVbDA.mjs}

@@ -1,7 +1,7 @@
 import { t as attemptTerminal } from "./attempt-terminal-gZrxQ35N.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
-import { awaitAgentEndSideEffects, embeddedAgentLog, runAgentEndSideEffects } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { awaitAgentEndSideEffects, embeddedAgentLog, formatErrorMessage, runAgentEndSideEffects } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { emitAgentHarnessAttemptEvent } from "openclaw/plugin-sdk/agent-harness-attempt-runtime";
 //#region extensions/codex/src/app-server/workspace-dir-cache.ts
 /** Process-local cache of Codex workspaces already created by the run loop. */
@@ -16,7 +16,8 @@ function shouldKeepCodexSharedAbortOpen(params) {
 }
 function withCodexAppServerFastModeServiceTier(appServer, params, configuredAppServer = appServer) {
 	const fastMode = typeof params.fastMode === "function" ? params.fastMode() : params.fastMode;
-	const serviceTier = fastMode === void 0 ? configuredAppServer.serviceTier : fastMode ? "priority" : void 0;
+	const configuredServiceTier = configuredAppServer.serviceTier === "ultrafast" ? "priority" : configuredAppServer.serviceTier;
+	const serviceTier = fastMode === void 0 ? configuredServiceTier : fastMode ? "priority" : null;
 	if (serviceTier === appServer.serviceTier) return appServer;
 	return {
 		...appServer,
@@ -53,5 +54,20 @@ async function runCodexAgentEndHook(params, hookParams) {
 	}
 	runAgentEndSideEffects(sideEffectParams);
 }
+function reportCodexBackgroundCleanupFailure(params, error) {
+	const message = formatErrorMessage(error);
+	embeddedAgentLog.warn("codex native background work remains unsettled", {
+		runId: params.runId,
+		sessionId: params.sessionId,
+		error: message
+	});
+	emitCodexAppServerEvent(params, {
+		stream: "codex_app_server.lifecycle",
+		data: {
+			phase: "background_cleanup_failed",
+			error: message
+		}
+	});
+}
 //#endregion
-export { shouldKeepCodexSharedAbortOpen as a, runCodexAgentEndHook as i, ensureCodexWorkspaceDirOnce as n, withCodexAppServerFastModeServiceTier as o, estimateCodexAppServerProjectedTurnTokens as r, emitCodexAppServerEvent as t };
+export { runCodexAgentEndHook as a, reportCodexBackgroundCleanupFailure as i, ensureCodexWorkspaceDirOnce as n, shouldKeepCodexSharedAbortOpen as o, estimateCodexAppServerProjectedTurnTokens as r, withCodexAppServerFastModeServiceTier as s, emitCodexAppServerEvent as t };

package/dist/.setup/{runtime-artifact-DDQ-HGXf.mjs → runtime-artifact-CUTOOnKw.mjs}

@@ -1,9 +1,10 @@
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { a as resolvePackagedCodexNativeCommand } from "./managed-binary-kiWRhNRE.mjs";
-import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-Bdegpn2V.mjs";
-import { captureCodexConfiguredConnection, finalizeCodexConfiguredConnection, isCodexConfiguredConnectionArtifact, validateCodexConfiguredConnectionCapture } from "./runtime-artifact-connection-D68qQn1m.mjs";
+import { a as resolvePackagedCodexNativeCommand } from "./managed-binary-C1VFoVPf.mjs";
+import { n as resolveCodexAppServerSpawnEnv, r as resolveCodexAppServerSpawnInvocation } from "./transport-stdio-a0HDa2Mj.mjs";
+import { captureCodexConfiguredConnection, finalizeCodexConfiguredConnection, isCodexConfiguredConnectionArtifact, validateCodexConfiguredConnectionCapture } from "./runtime-artifact-connection-CADz3_BY.mjs";
 import { createHash } from "node:crypto";
 import { resolveWindowsExecutablePath } from "openclaw/plugin-sdk/windows-spawn";
+import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 import { constants } from "node:fs";
 import path from "node:path";
 import fs$1 from "node:fs/promises";
@@ -47,9 +48,7 @@ const SAFE_NODE_OPTIONS_DNS_RESULT_ORDERS = /* @__PURE__ */ new Set([
 ]);
 const ARTIFACT_BINDINGS_SYMBOL = Symbol.for("openclaw.codexAppServerRuntimeArtifactBindings");
 function getRuntimeArtifactBindings() {
-	const globalState = globalThis;
-	globalState[ARTIFACT_BINDINGS_SYMBOL] ??= /* @__PURE__ */ new WeakMap();
-	return globalState[ARTIFACT_BINDINGS_SYMBOL];
+	return resolveGlobalSingleton(ARTIFACT_BINDINGS_SYMBOL, () => /* @__PURE__ */ new WeakMap());
 }
 function throwIfAborted(signal) {
 	if (!signal?.aborted) return;

package/dist/.setup/{runtime-artifact-connection-D68qQn1m.mjs → runtime-artifact-connection-CADz3_BY.mjs}

@@ -1,6 +1,7 @@
-import { t as codexAppServerStartOptionsKey } from "./config-options-CzyWLTJt.mjs";
-import "./config-runtime-C0NbLms1.mjs";
-import { r as resolveCodexAppServerUnixSocketPath } from "./transport-websocket-BTBE-LD9.mjs";
+import { t as codexAppServerStartOptionsKey } from "./config-options-HG_Rr3W_.mjs";
+import "./config-runtime-cUYrqu_a.mjs";
+import { r as resolveCodexAppServerUnixSocketPath } from "./transport-websocket-zqJ0Cmtn.mjs";
+import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import path from "node:path";
 //#region extensions/codex/src/app-server/runtime-artifact-connection.ts
@@ -64,7 +65,7 @@ function fingerprint(descriptor) {
 function decodeConnectionId(id) {
 	if (!isCodexConfiguredConnectionArtifact(id) || Buffer.byteLength(id) > 2048) throw new Error("Invalid Codex configured connection artifact");
 	const value = JSON.parse(Buffer.from(id.slice(31), "base64url").toString("utf8"));
-	if (!value || typeof value !== "object" || Array.isArray(value) || !("kind" in value) || value.kind !== "configured-connection" || !("transport" in value) || value.transport !== "websocket" && value.transport !== "unix" || !("selectionFingerprint" in value) || typeof value.selectionFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(value.selectionFingerprint) || !("runtimeIdentityFingerprint" in value) || typeof value.runtimeIdentityFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(value.runtimeIdentityFingerprint)) throw new Error("Invalid Codex configured connection descriptor");
+	if (!isRecord(value) || value.kind !== "configured-connection" || value.transport !== "websocket" && value.transport !== "unix" || typeof value.selectionFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(value.selectionFingerprint) || typeof value.runtimeIdentityFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(value.runtimeIdentityFingerprint)) throw new Error("Invalid Codex configured connection descriptor");
 	const descriptor = {
 		kind: value.kind,
 		transport: value.transport,

package/dist/.setup/{sandbox-guard-DjCz2eOw.mjs → sandbox-guard-WqE8yPge.mjs}

@@ -1,6 +1,6 @@
-import { l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-b088LyhT.mjs";
-import { n as resolveCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-BxZJy5mP.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { l as isCodexRemoteExecPlacementSandbox } from "./config-parsing-BQq-CHTF.mjs";
+import { n as resolveCodexNativeExecutionPolicy, t as formatCodexNativeNodeExecBlock } from "./native-execution-policy-ClzpdG3D.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { tryResolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";

package/dist/.setup/service-tier-normalization-Cei89SW6.mjs

@@ -0,0 +1,15 @@
+//#region extensions/codex/src/app-server/config-contracts.shared.ts
+const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
+//#endregion
+//#region extensions/codex/src/app-server/service-tier-normalization.ts
+function normalizeCodexServiceTier(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	if (!trimmed) return;
+	const normalized = trimmed.toLowerCase();
+	if (normalized === "fast" || normalized === "priority") return "priority";
+	if (normalized === "flex") return "flex";
+	return trimmed;
+}
+//#endregion
+export { CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as n, normalizeCodexServiceTier as t };

package/dist/.setup/{session-binding-DGCYAfvD.mjs → session-binding-Ce7BqiPN.mjs}

@@ -1,96 +1,59 @@
-import { i as adoptCodexNativeSubagentSubmissions, n as mutateNativePendingAssignments, o as mutateCodexNativeSubagentSubmissions } from "./native-subagent-pending-assignments-DwkCzLvD.mjs";
-import { _ as readStoredCodexAppServerBinding, a as matchesPendingSupervisionBranch, b as validateBindingForWrite, c as preserveNativePendingAssignments, d as readCodexBindingTimestamp, f as readCurrentCodexAppServerBinding, g as readPluginAppPolicyContext, h as readCurrentNativePendingAssignments, i as matchesCodexNativeSubagentSubmissionBinding, l as preserveNativeTaskImport, m as readCurrentCodexNativeSubagentSubmissions, n as assertCodexBindingMayBeReplaced, o as ownsStoredSessionGeneration, p as readCurrentCodexAppServerBindings, r as bindingStoreKey, s as preserveCodexNativeSubagentSubmissions, t as CodexSupervisionBindingReplacementError, u as readCodexAppServerThreadBinding, v as sessionBindingIdentity, y as stripUndefinedBinding } from "./session-binding-record-Oe9L-CNY.mjs";
-import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.mjs";
-import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-B0okYl2D.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { i as adoptCodexNativeSubagentSubmissions, n as mutateNativePendingAssignments, o as mutateCodexNativeSubagentSubmissions } from "./native-subagent-pending-assignments-BDqhOdJp.mjs";
+import { a as readStoredCodexAppServerBinding, i as readCodexBindingTimestamp, n as matchesPendingSupervisionBranch, o as stripUndefinedBinding, r as readCodexAppServerThreadBinding, s as validateBindingForWrite } from "./session-binding-record-codec-z4ZpDn6E.mjs";
+import { a as ownsStoredSessionGeneration, c as preserveNativeTaskImport, d as readCurrentCodexNativeSubagentSubmissions, f as readCurrentNativePendingAssignments, i as matchesCodexNativeSubagentSubmissionBinding, l as readCurrentCodexAppServerBinding, m as sessionBindingIdentity, n as assertCodexBindingMayBeReplaced, o as preserveCodexNativeSubagentSubmissions, p as readPluginAppPolicyContext, r as bindingStoreKey, s as preserveNativePendingAssignments, t as CodexSupervisionBindingReplacementError, u as readCurrentCodexAppServerBindings } from "./session-binding-record-BZB8RgcF.mjs";
+import { a as PHYSICAL_SESSION_RETIRE_TTL_MS, i as CODEX_APP_SERVER_BINDING_NAMESPACE, n as CODEX_APP_SERVER_BINDING_LEASE, r as CODEX_APP_SERVER_BINDING_MAX_ENTRIES, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-meta-Lkm5Lpf4.mjs";
+import { n as normalizeCodexAppServerBindingModelProvider } from "./auth-profile-CgHQ8Vot.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createHash } from "node:crypto";
 import { AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { captureNativeSessionGenerationAuthority, createNativeSessionBindingLifecycle, reclaimNativeSessionGeneration, resolveNativeSessionBinding } from "openclaw/plugin-sdk/agent-harness-session-runtime";
+import { combineNativeSessionBindingAuthority as combineCodexBindingAuthority, createNativeSessionBindingLifecycle, prepareNativeSessionGenerationAuthority, reclaimNativeSessionGenerationWithAuthority, resolveNativeSessionBindingWithAuthority } from "openclaw/plugin-sdk/agent-harness-session-runtime";
+//#region extensions/codex/src/app-server/session-binding-authority.ts
+/** Decides whether a run may share the durable stable-key binding owner. */
+async function resolveCodexRunSessionBindingAuthority(params) {
+	return (await prepareNativeSessionGenerationAuthority({
+		...params,
+		target: params.identity,
+		createSupersededError: createCodexSessionGenerationSupersededError
+	})).state;
+}
+/** Builds the terminal coordination error used when a newer OpenClaw session owns the binding. */
+function createCodexSessionGenerationSupersededError(sessionId) {
+	return new AgentHarnessSessionSupersededError(`Codex session generation is no longer current: ${sessionId}`);
+}
+//#endregion
 //#region extensions/codex/src/app-server/session-binding-native-mutations.ts
 /** The caller supplies the transaction's freshly parsed row and current-authority closure. */
 function mutateNativeSubagentBinding({ identity, current, mutation, assertCurrent }) {
-	if (mutation.kind === "record-native-subagent-assignment" || mutation.kind === "consume-native-subagent-assignment") {
-		if (!assertCurrent) throw new Error("Codex native assignment mutation requires current authority.");
-		assertCurrent();
-		if (current?.state !== "active" || !ownsStoredSessionGeneration(identity, current) || identity.kind === "session" && mutation.owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(current.binding, mutation.owner)) return { result: false };
-		const changed = mutateNativePendingAssignments({
-			current: current.nativeSubagentAssignments,
-			owner: mutation.owner,
-			assignment: mutation.assignment,
-			consume: mutation.kind === "consume-native-subagent-assignment"
-		});
-		if (!changed.applied) return { result: false };
-		const { nativeSubagentAssignments: _previous, ...bindingOwner } = current;
-		return {
-			result: true,
-			next: {
-				...bindingOwner,
-				...changed.next ? { nativeSubagentAssignments: changed.next } : {}
-			}
-		};
-	}
-	if (!assertCurrent) throw new Error("Codex native subagent submission mutation requires current authority.");
+	const isAssignment = mutation.kind === "record-native-subagent-assignment" || mutation.kind === "consume-native-subagent-assignment";
+	if (!assertCurrent) throw new Error(`Codex native ${isAssignment ? "assignment" : "subagent submission"} mutation requires current authority.`);
 	assertCurrent();
 	if (current?.state !== "active" || !ownsStoredSessionGeneration(identity, current) || identity.kind === "session" && mutation.owner.sessionId !== identity.sessionId || !matchesCodexNativeSubagentSubmissionBinding(current.binding, mutation.owner)) return { result: false };
-	const changed = mutateCodexNativeSubagentSubmissions({
+	const field = isAssignment ? "nativeSubagentAssignments" : "nativeSubagentSubmissions";
+	const changed = isAssignment ? mutateNativePendingAssignments({
+		current: current.nativeSubagentAssignments,
+		owner: mutation.owner,
+		assignment: mutation.assignment,
+		consume: mutation.kind === "consume-native-subagent-assignment"
+	}) : mutateCodexNativeSubagentSubmissions({
 		current: current.nativeSubagentSubmissions,
 		owner: mutation.owner,
 		receipt: mutation.receipt,
 		consume: mutation.kind === "consume-native-subagent-submission"
 	});
 	if (!changed.applied) return { result: false };
-	const { nativeSubagentSubmissions: _previous, ...bindingOwner } = current;
+	const { [field]: _previous, ...bindingOwner } = current;
 	return {
 		result: true,
 		next: {
 			...bindingOwner,
-			...changed.next ? { nativeSubagentSubmissions: changed.next } : {}
+			...changed.next ? { [field]: changed.next } : {}
 		}
 	};
 }
 //#endregion
-//#region extensions/codex/src/app-server/session-binding.ts
-/** SQLite-backed Codex app-server thread bindings. */
-var session_binding_exports = /* @__PURE__ */ __exportAll({
-	CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS: () => CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS,
-	CODEX_APP_SERVER_BINDING_MAX_ENTRIES: () => CODEX_APP_SERVER_BINDING_MAX_ENTRIES,
-	CODEX_APP_SERVER_BINDING_NAMESPACE: () => CODEX_APP_SERVER_BINDING_NAMESPACE,
-	CodexSupervisionBindingReplacementError: () => CodexSupervisionBindingReplacementError,
-	assertCodexBindingMayBeReplaced: () => assertCodexBindingMayBeReplaced,
-	bindingStoreKey: () => bindingStoreKey,
-	createCodexAppServerBindingStore: () => createCodexAppServerBindingStore,
-	createCodexSessionGenerationSupersededError: () => createCodexSessionGenerationSupersededError,
-	createStoredCodexAppServerBinding: () => createStoredCodexAppServerBinding,
-	hashCodexAppServerBindingFingerprint: () => hashCodexAppServerBindingFingerprint,
-	normalizeStoredCodexAppServerBindingFingerprints: () => normalizeStoredCodexAppServerBindingFingerprints,
-	readCodexAppServerThreadBinding: () => readCodexAppServerThreadBinding,
-	readStoredCodexAppServerBinding: () => readStoredCodexAppServerBinding,
-	reclaimCurrentCodexSessionGeneration: () => reclaimCurrentCodexSessionGeneration,
-	resolveCodexRunSessionBindingAuthority: () => resolveCodexRunSessionBindingAuthority,
-	resolveCodexSessionBinding: () => resolveCodexSessionBinding,
-	sessionBindingIdentity: () => sessionBindingIdentity,
-	validateBindingForWrite: () => validateBindingForWrite
-});
-const BINDING_LEASE_RETRY_INTERVAL_MS = 1e3;
+//#region extensions/codex/src/app-server/session-binding-codec.ts
 const BOUNDED_BINDING_FINGERPRINT_PATTERN = /^sha256:[a-f0-9]{64}$/i;
-const CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS = 6e4;
-const BINDING_LEASE_STALE_MS = 65e3;
-const BINDING_LEASE_WAIT_MS = 7e4;
-const BINDING_LEASE_RENEW_INTERVAL_MS = Math.floor(BINDING_LEASE_STALE_MS / 3);
-const PHYSICAL_SESSION_RETIRE_TTL_MS = BINDING_LEASE_WAIT_MS;
-/** Decides whether a run may share the durable stable-key binding owner. */
-function resolveCodexRunSessionBindingAuthority(params) {
-	return captureNativeSessionGenerationAuthority({
-		...params,
-		target: params.identity,
-		createSupersededError: createCodexSessionGenerationSupersededError
-	}).state;
-}
-/** Builds the terminal coordination error used when a newer OpenClaw session owns the binding. */
-function createCodexSessionGenerationSupersededError(sessionId) {
-	return new AgentHarnessSessionSupersededError(`Codex session generation is no longer current: ${sessionId}`);
-}
 function hashCodexAppServerBindingFingerprint(canonical) {
 	return `sha256:${createHash("sha256").update(canonical).digest("hex")}`;
 }
@@ -123,8 +86,8 @@ function createStoredCodexAppServerBinding(value, options = {}) {
 	const rawRecord = asOptionalRecord(value);
 	if (!rawRecord) return;
 	const record = normalizeLegacyBindingFingerprints(rawRecord);
-	if (record.schemaVersion !== 1 && record.schemaVersion !== 2) return;
-	const pluginAppPolicyContext = readPluginAppPolicyContext(record.pluginAppPolicyContext, record.schemaVersion);
+	if (record.schemaVersion !== 2) return;
+	const pluginAppPolicyContext = readPluginAppPolicyContext(record.pluginAppPolicyContext);
 	const historyCoveredThrough = readCodexBindingTimestamp(record.historyCoveredThrough) ?? readCodexBindingTimestamp(record.updatedAt) ?? readCodexBindingTimestamp(record.createdAt) ?? readCodexBindingTimestamp(options.now) ?? (/* @__PURE__ */ new Date()).toISOString();
 	const authProfileId = typeof record.authProfileId === "string" ? record.authProfileId : void 0;
 	const binding = readCodexAppServerThreadBinding({
@@ -144,12 +107,46 @@ function createStoredCodexAppServerBinding(value, options = {}) {
 		binding: stripUndefinedBinding(binding)
 	} : void 0;
 }
+//#endregion
+//#region extensions/codex/src/app-server/session-binding.ts
+/** SQLite-backed Codex app-server thread bindings. */
+var session_binding_exports = /* @__PURE__ */ __exportAll({
+	CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS: () => CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS,
+	CODEX_APP_SERVER_BINDING_MAX_ENTRIES: () => CODEX_APP_SERVER_BINDING_MAX_ENTRIES,
+	CODEX_APP_SERVER_BINDING_NAMESPACE: () => CODEX_APP_SERVER_BINDING_NAMESPACE,
+	CodexSupervisionBindingReplacementError: () => CodexSupervisionBindingReplacementError,
+	assertCodexBindingMayBeReplaced: () => assertCodexBindingMayBeReplaced,
+	bindingStoreKey: () => bindingStoreKey,
+	clearCodexBindingForClient: () => clearCodexBindingForClient,
+	combineCodexBindingAuthority: () => combineCodexBindingAuthority,
+	createCodexAppServerBindingStore: () => createCodexAppServerBindingStore,
+	createCodexSessionGenerationSupersededError: () => createCodexSessionGenerationSupersededError,
+	createStoredCodexAppServerBinding: () => createStoredCodexAppServerBinding,
+	hashCodexAppServerBindingFingerprint: () => hashCodexAppServerBindingFingerprint,
+	normalizeStoredCodexAppServerBindingFingerprints: () => normalizeStoredCodexAppServerBindingFingerprints,
+	readCodexAppServerThreadBinding: () => readCodexAppServerThreadBinding,
+	readStoredCodexAppServerBinding: () => readStoredCodexAppServerBinding,
+	reclaimCurrentCodexSessionGeneration: () => reclaimCurrentCodexSessionGeneration,
+	resolveCodexRunSessionBindingAuthority: () => resolveCodexRunSessionBindingAuthority,
+	resolveCodexSessionBinding: () => resolveCodexSessionBinding,
+	sessionBindingIdentity: () => sessionBindingIdentity,
+	validateBindingForWrite: () => validateBindingForWrite
+});
+/** Attempt cleanup may only clear the physical owner captured before its awaited work. */
+async function clearCodexBindingForClient(store, identity, thread, authority) {
+	if (!thread.clientId) return false;
+	return await store.mutate(identity, {
+		kind: "clear",
+		threadId: thread.threadId,
+		clientId: thread.clientId
+	}, authority.assertCurrent, authority);
+}
 function bindingLeaseLostError(key, cause) {
 	return new Error(`Lost Codex binding lease: ${key}`, cause === void 0 ? void 0 : { cause });
 }
 /** Lets the authoritative OpenClaw session generation claim a stale stable binding row. */
 async function reclaimCurrentCodexSessionGeneration(params) {
-	return await reclaimNativeSessionGeneration({
+	return await reclaimNativeSessionGenerationWithAuthority({
 		...params,
 		target: params.identity,
 		generation: codexSessionGenerationOperations(params.bindingStore, params.identity),
@@ -159,7 +156,7 @@ async function reclaimCurrentCodexSessionGeneration(params) {
 /** Resolve continuity before selecting native queues, catalogs, or connections. */
 async function resolveCodexSessionBinding(params) {
 	const identity = params.identity;
-	return await resolveNativeSessionBinding({
+	return await resolveNativeSessionBindingWithAuthority({
 		...params,
 		...identity.kind === "session" ? {
 			target: identity,
@@ -175,13 +172,9 @@ async function resolveCodexSessionBinding(params) {
 /** Creates the single binding facade owned by the Codex plugin runtime. */
 function createCodexAppServerBindingStore(state) {
 	const lifecycle = createNativeSessionBindingLifecycle(state, {
+		workerCodec: "codex",
 		readRecord: readStoredCodexAppServerBinding,
-		lease: {
-			staleMs: BINDING_LEASE_STALE_MS,
-			waitMs: BINDING_LEASE_WAIT_MS,
-			retryIntervalMs: BINDING_LEASE_RETRY_INTERVAL_MS,
-			renewIntervalMs: BINDING_LEASE_RENEW_INTERVAL_MS
-		},
+		lease: CODEX_APP_SERVER_BINDING_LEASE,
 		releaseTtlMs: (key, current) => current.nativeSubagentTaskImport !== void 0 || current.state === "active" || current.retired === true && !key.startsWith("session:") ? void 0 : current.retired === true ? PHYSICAL_SESSION_RETIRE_TTL_MS : 1,
 		onReleaseFailure: (key, error) => embeddedAgentLog.warn("failed to release codex app-server binding lease", {
 			key,
@@ -201,6 +194,7 @@ function createCodexAppServerBindingStore(state) {
 	});
 	const prepareLease = (identity, options = {}) => ({
 		assertCurrent: options.assertCurrent,
+		authority: options.authority,
 		prepareLease(current, lease) {
 			if (current?.state === "cleared" && current.retired === true && ownsStoredSessionGeneration(identity, current) && !options.allowRetired) return;
 			if (current?.state === "active") return {
@@ -245,7 +239,7 @@ function createCodexAppServerBindingStore(state) {
 	};
 	return {
 		read: (identity) => readCurrentCodexAppServerBinding(state, identity),
-		...state.lookupMany ? { readMany: (identities) => readCurrentCodexAppServerBindings(state, identities) } : {},
+		readMany: (identities) => readCurrentCodexAppServerBindings(state.asyncReads, identities),
 		readNativeSubagentAssignments: (identity, owner) => readCurrentNativePendingAssignments(state, identity, owner),
 		readNativeSubagentSubmissions: (identity, owner) => readCurrentCodexNativeSubagentSubmissions(state, identity, owner),
 		async hasOtherThreadOwner(threadId, currentIdentity) {
@@ -283,7 +277,7 @@ function createCodexAppServerBindingStore(state) {
 				expectedPreviousSessionId: currentSessionId
 			};
 		},
-		async mutate(identity, mutation, assertCurrent) {
+		async mutate(identity, mutation, assertCurrent, authority) {
 			return await lifecycle.withMutation(async () => {
 				const key = bindingStoreKey(identity);
 				const retainLegacyClear = mutation.kind === "clear" && key.startsWith("conversation:legacy-");
@@ -330,7 +324,7 @@ function createCodexAppServerBindingStore(state) {
 					const retiredGeneration = current?.state === "cleared" && current.retired === true && ownsGeneration;
 					const preservesSupervisionOwner = mutation.kind === "set" && active?.binding.connectionScope === "supervision" && isSameSupervisionOwner(active.binding, mutation.binding);
 					const replacesExpectedOrdinaryOwner = mutation.kind === "replace-thread" && active?.binding.threadId === mutation.expectedThreadId && active.binding.connectionScope !== "supervision" && mutation.binding.connectionScope !== "supervision" && mutation.binding.threadId !== mutation.expectedThreadId;
-					if (mutation.kind === "set" && (mutation.if?.kind === "absent" && storedActive || current !== void 0 && !ownsGeneration || retiredGeneration || active?.binding.connectionScope === "supervision" && !preservesSupervisionOwner) || mutation.kind === "patch" && active?.binding.threadId !== mutation.threadId || mutation.kind === "replace-thread" && !replacesExpectedOrdinaryOwner || (mutation.kind === "patch-pending-supervision-branch" || mutation.kind === "commit-pending-supervision-branch") && !matchesPendingSupervisionBranch(active?.binding, mutation.expected) || mutation.kind === "clear" && (!ownsGeneration || mutation.threadId !== void 0 && active?.binding.threadId !== mutation.threadId || active?.binding.connectionScope === "supervision")) return { result: false };
+					if ((mutation.kind === "patch" || mutation.kind === "clear") && Object.hasOwn(mutation, "clientId") && mutation.clientId !== active?.binding.clientId || mutation.kind === "set" && (mutation.if?.kind === "absent" && storedActive || current !== void 0 && !ownsGeneration || retiredGeneration || active?.binding.connectionScope === "supervision" && !preservesSupervisionOwner) || mutation.kind === "patch" && active?.binding.threadId !== mutation.threadId || mutation.kind === "replace-thread" && !replacesExpectedOrdinaryOwner || (mutation.kind === "patch-pending-supervision-branch" || mutation.kind === "commit-pending-supervision-branch") && !matchesPendingSupervisionBranch(active?.binding, mutation.expected) || mutation.kind === "clear" && (!ownsGeneration || mutation.threadId !== void 0 && active?.binding.threadId !== mutation.threadId || active?.binding.connectionScope === "supervision")) return { result: false };
 					if (mutation.kind === "clear" && retiredGeneration) return { result: true };
 					if (mutation.kind === "clear") return {
 						result: true,
@@ -343,22 +337,18 @@ function createCodexAppServerBindingStore(state) {
 						}
 					};
 					let binding;
-					if (mutation.kind === "set" || mutation.kind === "replace-thread") binding = validateBindingForWrite(mutation.binding);
-					else if (mutation.kind === "patch-pending-supervision-branch") binding = validateBindingForWrite({
+					if (mutation.kind === "set" || mutation.kind === "replace-thread") binding = mutation.binding;
+					else if (mutation.kind === "patch-pending-supervision-branch") binding = {
 						...active.binding,
 						pendingSupervisionBranch: mutation.pending
-					});
-					else if (mutation.kind === "commit-pending-supervision-branch") binding = validateBindingForWrite({
+					};
+					else binding = {
 						...active.binding,
 						...mutation.patch,
 						threadId: mutation.threadId,
-						pendingSupervisionBranch: void 0
-					});
-					else binding = validateBindingForWrite({
-						...active.binding,
-						...mutation.patch,
-						threadId: mutation.threadId
-					});
+						...mutation.kind === "commit-pending-supervision-branch" ? { pendingSupervisionBranch: void 0 } : {}
+					};
+					binding = validateBindingForWrite(binding);
 					const nativeSubagentSubmissions = active ? preserveCodexNativeSubagentSubmissions(active.binding, binding, active.nativeSubagentSubmissions) : void 0;
 					const nativeSubagentAssignments = active ? preserveNativePendingAssignments(active.binding, binding, active.nativeSubagentAssignments) : void 0;
 					return {
@@ -374,10 +364,10 @@ function createCodexAppServerBindingStore(state) {
 							...ownedLease
 						}
 					};
-				}, (next) => mutation.kind === "clear" && next.nativeSubagentTaskImport === void 0 && !retainLegacyClear && !lifecycle.hasLease(key) ? 1 : void 0, assertCurrent);
+				}, (next) => mutation.kind === "clear" && next.nativeSubagentTaskImport === void 0 && !retainLegacyClear && !lifecycle.hasLease(key) ? 1 : void 0, assertCurrent, authority);
 			});
 		},
-		async adoptSessionGeneration(identity, expectedPreviousSessionId, assertCurrent) {
+		async adoptSessionGeneration(identity, expectedPreviousSessionId, assertCurrent, authority) {
 			return await lifecycle.withMutation(async () => {
 				const key = bindingStoreKey(identity);
 				const expectedSessionId = expectedPreviousSessionId.trim();
@@ -397,7 +387,7 @@ function createCodexAppServerBindingStore(state) {
 							...adoptedSubmissions !== void 0 ? { nativeSubagentSubmissions: adoptedSubmissions } : {}
 						}
 					};
-				}, void 0, assertCurrent);
+				}, void 0, assertCurrent, authority);
 			});
 		},
 		resetSessionGeneration: (identity) => transitionSessionGeneration(identity, "reset"),
@@ -415,17 +405,17 @@ function createCodexAppServerBindingStore(state) {
 				}
 			}, (stored, mutation) => run(stored?.state === "active" ? stored.binding : void 0, mutation));
 		},
-		withLease: (identity, run) => lifecycle.withLease(bindingStoreKey(identity), run, prepareLease(identity))
+		withLease: (identity, run, options) => lifecycle.withLease(bindingStoreKey(identity), run, prepareLease(identity, options))
 	};
 }
 function codexSessionGenerationOperations(store, identity) {
 	return {
 		prepareReclaim: () => store.prepareSessionGenerationReclaim(identity),
-		adopt: (expectedPreviousSessionId, assertCurrent) => store.adoptSessionGeneration(identity, expectedPreviousSessionId, assertCurrent),
-		reclaim: (expectedPreviousSessionId, assertCurrent) => store.mutate(identity, {
+		adopt: (expectedPreviousSessionId, authority) => store.adoptSessionGeneration(identity, expectedPreviousSessionId, authority.assertCurrent, authority),
+		reclaim: (expectedPreviousSessionId, authority) => store.mutate(identity, {
 			kind: "reclaim-generation",
 			expectedPreviousSessionId
-		}, assertCurrent)
+		}, authority.assertCurrent, authority)
 	};
 }
 function isSameSupervisionOwner(current, replacement) {
@@ -440,4 +430,4 @@ function preservedSessionGeneration(identity, current) {
 	return storedSessionGeneration(identity, current);
 }
 //#endregion
-export { resolveCodexRunSessionBindingAuthority as a, reclaimCurrentCodexSessionGeneration as i, createCodexSessionGenerationSupersededError as n, resolveCodexSessionBinding as o, hashCodexAppServerBindingFingerprint as r, session_binding_exports as s, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t };
+export { hashCodexAppServerBindingFingerprint as a, session_binding_exports as i, reclaimCurrentCodexSessionGeneration as n, createCodexSessionGenerationSupersededError as o, resolveCodexSessionBinding as r, resolveCodexRunSessionBindingAuthority as s, clearCodexBindingForClient as t };

package/dist/.setup/session-binding-meta-Lkm5Lpf4.mjs

@@ -0,0 +1,15 @@
+//#region extensions/codex/src/app-server/session-binding-meta.ts
+/** Process-stable plugin-state metadata for Codex app-server bindings. */
+const CODEX_APP_SERVER_BINDING_NAMESPACE = "app-server-thread-bindings";
+const CODEX_APP_SERVER_BINDING_MAX_ENTRIES = 5e4;
+const CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS = 6e4;
+const staleMs = 65e3;
+const CODEX_APP_SERVER_BINDING_LEASE = {
+	staleMs,
+	waitMs: 7e4,
+	retryIntervalMs: 1e3,
+	renewIntervalMs: Math.floor(staleMs / 3)
+};
+const PHYSICAL_SESSION_RETIRE_TTL_MS = CODEX_APP_SERVER_BINDING_LEASE.waitMs;
+//#endregion
+export { PHYSICAL_SESSION_RETIRE_TTL_MS as a, CODEX_APP_SERVER_BINDING_NAMESPACE as i, CODEX_APP_SERVER_BINDING_LEASE as n, CODEX_APP_SERVER_BINDING_MAX_ENTRIES as r, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t };