@openclaw/codex 2026.9.8 → 2026.10.1-beta.2

package/dist/media-understanding-provider.js

@@ -33,7 +33,7 @@ async function describeCodexImages(req, options) {
 	const model = req.model.trim();
 	if (!model) throw new Error("Codex image understanding requires model id.");
 	req.signal?.throwIfAborted();
-	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-BNunZPtz.mjs");
+	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-pGsfXcmH.mjs");
 	req.signal?.throwIfAborted();
 	const { text } = await runBoundedCodexAppServerTurn({
 		config: req.cfg,
@@ -73,7 +73,7 @@ async function extractCodexStructured(req, options) {
 	if (req.input.length === 0) throw new Error("Codex structured extraction requires at least one input.");
 	if (!req.input.some((entry) => entry.type === "image")) throw new Error("Codex structured extraction requires at least one image input.");
 	req.signal?.throwIfAborted();
-	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-BNunZPtz.mjs");
+	const { runBoundedCodexAppServerTurn } = await import("./.setup/bounded-turn-pGsfXcmH.mjs");
 	req.signal?.throwIfAborted();
 	const { text } = await runBoundedCodexAppServerTurn({
 		config: req.cfg,

package/dist/migration-provider-api.js

@@ -1,2 +1,2 @@
-import { t as buildCodexMigrationProvider } from "./.setup/provider-D6F_7p1I.mjs";
+import { t as buildCodexMigrationProvider } from "./.setup/provider-BnwHVD_z.mjs";
 export { buildCodexMigrationProvider as buildMigrationProvider };

package/dist/native-session-binding-api.js

@@ -0,0 +1,2 @@
+import { a as readStoredCodexAppServerBinding } from "./.setup/session-binding-record-codec-z4ZpDn6E.mjs";
+export { readStoredCodexAppServerBinding as readNativeSessionBindingRecord };

package/dist/provider-discovery.js

@@ -5,7 +5,7 @@ const codexProviderDiscovery = {
 	auth: [],
 	prepareSyntheticAuth: async ({ config, provider, env, signal, pluginRoot }) => {
 		if (provider !== "codex") return;
-		const { probeCodexNativeAuth } = await import("./.setup/native-auth-CuG53tu4.mjs");
+		const { probeCodexNativeAuth } = await import("./.setup/native-auth-Cjb9y7IZ.mjs");
 		return await probeCodexNativeAuth({
 			config,
 			env,

package/dist/session-history-worker-runtime.js

@@ -1,6 +1,6 @@
-import { o as codexHistoryRejectionReason } from "./.setup/session-history-read-Ov3StuL4.mjs";
-import { t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-MnPKncqP.mjs";
-import { n as resolveCodexHistoryTarget } from "./.setup/session-history-D83lJWHG.mjs";
+import { a as codexHistoryRejectionReason, t as consumeCodexHistory } from "./.setup/session-history-read-CNN8zwbD.mjs";
+import { n as projectVerifiedSettledCodexMessages, t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-Cq_4DYgN.mjs";
+import { n as resolveCodexHistoryTarget } from "./.setup/session-history-BogBHKLk.mjs";
 import { WorkerTaskPool, resolveRuntimeWorkerArgv, resolveRuntimeWorkerUrl } from "openclaw/plugin-sdk/process-runtime";
 import { isIncognitoSessionKey } from "openclaw/plugin-sdk/session-key-runtime";
 import { fileURLToPath } from "node:url";
@@ -27,9 +27,38 @@ const historyReads = new WorkerTaskPool({
 	workerUrl: resolveCodexHistoryWorkerUrl(),
 	maxWorkers: 1
 });
-async function projectCodexSettledHistoryInWorker(target, signal) {
+async function projectCodexSettledHistoryInWorker(target, signal, contextReader) {
 	signal?.throwIfAborted();
+	if (contextReader && !target.sessionTarget) throw new Error("Actor history requires a captured sessionTarget");
 	const resolved = resolveCodexHistoryTarget(target);
+	if (contextReader) {
+		if (resolved.kind !== "sqlite") throw new Error("Actor history requires a complete matching sessionTarget");
+		let result;
+		try {
+			result = await contextReader(resolved.target, (messages, header) => {
+				signal?.throwIfAborted();
+				try {
+					return {
+						status: "ok",
+						value: consumeCodexHistory(messages, header, target.sessionId, (history) => projectVerifiedSettledCodexMessages(history, target))
+					};
+				} catch (error) {
+					return {
+						status: "rejected",
+						reason: codexHistoryRejectionReason(error)
+					};
+				}
+			});
+		} catch (error) {
+			if (error instanceof SessionTranscriptReadFenceError) result = {
+				status: "rejected",
+				reason: "snapshot_invalidated"
+			};
+			else throw error;
+		}
+		signal?.throwIfAborted();
+		return result;
+	}
 	const receipt = resolved.kind === "sqlite" ? captureCodexSessionTranscriptReadAdmission(resolved.target) : void 0;
 	const input = {
 		target: resolved,

package/dist/session-history.worker.js

@@ -1,2 +1,2 @@
-import { t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-MnPKncqP.mjs";
+import { t as runCodexHistoryWorkerInput } from "./.setup/session-history.worker-Cq_4DYgN.mjs";
 export { runCodexHistoryWorkerInput };

package/openclaw.plugin.json

@@ -597,7 +597,7 @@
           },
           "enableUltrafast": {
             "type": "boolean",
-            "default": false
+            "default": true
           },
           "cyberFailover": {
             "type": "object",
@@ -984,8 +984,8 @@
       "advanced": true
     },
     "appServer.enableUltrafast": {
-      "label": "Enable Ultrafast (for supported models)",
-      "help": "Use Ultrafast when the selected model advertises access; otherwise keep the current tier. Shared Fast off remains off.",
+      "label": "Allow explicit Ultrafast (for supported models)",
+      "help": "Allow Ultrafast only when the effective shared Fast-mode selection is explicitly ultrafast and the authenticated app-server catalog advertises it for the selected native model. Unset or true permits explicit selection; false hides Ultrafast for the Codex runtime in the picker, sends ordinary Fast (priority) for an explicit selection, and skips the Ultrafast catalog check. Fast, Auto, and unspecified selections never automatically upgrade. Standard and inactive Auto remain off.",
       "advanced": true
     },
     "appServer.networkProxy": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.9.8",
+  "version": "2026.10.1-beta.2",
   "description": "OpenClaw Codex app-server harness and native session supervision plugin.",
   "repository": {
     "type": "git",
@@ -8,8 +8,8 @@
   },
   "type": "module",
   "dependencies": {
-    "@openai/codex": "0.158.0",
-    "@openclaw/fs-safe": "0.21.1",
+    "@openai/codex": "0.160.0",
+    "@openclaw/fs-safe": "0.23.0",
     "semver": "7.8.5",
     "smol-toml": "1.8.0",
     "typebox": "1.3.34",
@@ -38,10 +38,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.9.8"
+      "pluginApi": ">=2026.10.1-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.9.8",
+      "openclawVersion": "2026.10.1-beta.2",
       "workerEntries": [
         "./catalog-page.worker.ts"
       ]
@@ -66,7 +66,7 @@
     "assets/activity.svg"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.8"
+    "openclaw": ">=2026.10.1-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/.setup/config-utils-D0CXecki.mjs

@@ -1,57 +0,0 @@
-import { asOptionalRecord as readRecord, normalizeOptionalString as readNonEmptyString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createHmac, randomBytes } from "node:crypto";
-import { splitCommandArgs } from "openclaw/plugin-sdk/process-runtime";
-import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
-//#region extensions/codex/src/app-server/config-contracts.shared.ts
-const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
-//#endregion
-//#region extensions/codex/src/app-server/config-utils.ts
-const START_OPTIONS_KEY_SECRET_SYMBOL = Symbol.for("openclaw.codexAppServerStartOptionsKeySecret");
-const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
-const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
-function normalizeCodexServiceTier(value) {
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	if (!trimmed) return;
-	const normalized = trimmed.toLowerCase();
-	if (normalized === "fast" || normalized === "priority") return "priority";
-	if (normalized === "flex") return "flex";
-	return trimmed;
-}
-function isCodexFastServiceTier(value) {
-	return normalizeCodexServiceTier(value) === "priority";
-}
-function normalizeHeaders(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key.trim(), normalizeResolvedSecretInputString({
-		value: child,
-		path: `plugins.entries.codex.config.appServer.headers.${key}`
-	})]).filter((entry) => Boolean(entry[0] && entry[1])));
-}
-function readExecSecurity(value) {
-	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
-}
-function readExecAsk(value) {
-	return value === "off" || value === "on-miss" || value === "always" ? value : void 0;
-}
-function readNumberEnv(value) {
-	const trimmed = value?.trim();
-	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
-	const parsed = Number(trimmed);
-	return Number.isFinite(parsed) ? parsed : void 0;
-}
-function resolveArgs(configArgs, envArgs) {
-	if (Array.isArray(configArgs)) return configArgs.map((entry) => readNonEmptyString(entry)).filter((entry) => entry !== void 0);
-	return splitCommandArgs(typeof configArgs === "string" ? configArgs : envArgs ?? "", { allowUnclosedQuotes: true });
-}
-function hashSecretForKey(value, label) {
-	if (!value) return null;
-	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
-}
-function getStartOptionsKeySecret() {
-	const globalState = globalThis;
-	globalState[START_OPTIONS_KEY_SECRET_SYMBOL] ??= randomBytes(32);
-	return globalState[START_OPTIONS_KEY_SECRET_SYMBOL];
-}
-//#endregion
-export { readExecAsk as a, readNumberEnv as c, CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as d, normalizeHeaders as i, readRecord as l, isCodexFastServiceTier as n, readExecSecurity as o, normalizeCodexServiceTier as r, readNonEmptyString as s, hashSecretForKey as t, resolveArgs as u };

package/dist/.setup/incognito-session-DWYapfwf.mjs

@@ -1,2 +0,0 @@
-import { isIncognitoSessionKey as isIncognitoSessionKey$1 } from "openclaw/plugin-sdk/session-key-runtime";
-export { isIncognitoSessionKey$1 as t };

package/dist/.setup/managed-thread-store-BMqgThVL.mjs

@@ -1,100 +0,0 @@
-import { createHash } from "node:crypto";
-import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-registration";
-import { z } from "zod";
-//#region extensions/codex/src/app-server/managed-thread-store.ts
-const CODEX_MANAGED_THREAD_NAMESPACE = "app-server-managed-threads";
-const CODEX_MANAGED_THREAD_MAX_ENTRIES = 2e4;
-const managedThreadSchema = z.object({
-	version: z.literal(1),
-	kind: z.literal("managed-thread"),
-	sourceHomeId: z.string().min(1),
-	threadId: z.string().min(1),
-	rolloutPath: z.string().min(1).optional()
-});
-async function markStartedCodexManagedThread(store, params) {
-	if (!store) return;
-	try {
-		await store.mark({
-			sourceHomeId: params.sourceHomeId,
-			threadId: params.threadId,
-			...params.rolloutPath ? { rolloutPath: params.rolloutPath } : {}
-		});
-	} catch (error) {
-		embeddedAgentLog.warn("failed to record Codex managed thread ownership", { error });
-	}
-}
-function managedThreadStoreKey(sourceHomeId, threadId) {
-	return `sha256:${createHash("sha256").update("openclaw:codex-managed-thread:v1\0").update(sourceHomeId).update("\0").update(threadId).digest("hex")}`;
-}
-/** Durable ownership index for Codex threads created by OpenClaw. */
-function createCodexManagedThreadStore(state) {
-	const byHome = /* @__PURE__ */ new Map();
-	const memberships = /* @__PURE__ */ new Map();
-	let hydration;
-	const remember = ({ sourceHomeId, threadId }) => {
-		const key = managedThreadStoreKey(sourceHomeId, threadId);
-		if (memberships.has(key)) return key;
-		memberships.set(key, {
-			sourceHomeId,
-			threadId
-		});
-		let ids = byHome.get(sourceHomeId);
-		if (!ids) {
-			ids = /* @__PURE__ */ new Set();
-			byHome.set(sourceHomeId, ids);
-		}
-		ids.add(threadId);
-		if (memberships.size > 2e4) {
-			const oldest = memberships.entries().next().value;
-			if (oldest) {
-				memberships.delete(oldest[0]);
-				const oldestHome = byHome.get(oldest[1].sourceHomeId);
-				oldestHome?.delete(oldest[1].threadId);
-				if (oldestHome?.size === 0) byHome.delete(oldest[1].sourceHomeId);
-			}
-		}
-		return key;
-	};
-	const snapshot = async () => {
-		hydration ??= state.entries().then((entries) => {
-			const marked = new Map(memberships);
-			memberships.clear();
-			byHome.clear();
-			for (const entry of entries.toSorted((a, b) => a.createdAt - b.createdAt)) {
-				const parsed = managedThreadSchema.safeParse(entry.value);
-				if (parsed.success) marked.delete(remember(parsed.data));
-			}
-			for (const membership of marked.values()) remember(membership);
-		}).catch((error) => {
-			hydration = void 0;
-			throw error;
-		});
-		await hydration;
-		return byHome;
-	};
-	return {
-		async has(sourceHomeId, threadId) {
-			return (await snapshot()).get(sourceHomeId)?.has(threadId) ?? false;
-		},
-		async mark(params) {
-			try {
-				const value = managedThreadSchema.parse({
-					version: 1,
-					kind: "managed-thread",
-					sourceHomeId: params.sourceHomeId.trim(),
-					threadId: params.threadId.trim(),
-					...params.rolloutPath?.trim() ? { rolloutPath: params.rolloutPath.trim() } : {}
-				});
-				await state.registerIfAbsent(managedThreadStoreKey(value.sourceHomeId, value.threadId), value);
-				remember(value);
-				return true;
-			} catch (error) {
-				embeddedAgentLog.warn("failed to record Codex managed thread ownership", { error });
-				return false;
-			}
-		},
-		snapshot
-	};
-}
-//#endregion
-export { markStartedCodexManagedThread as i, CODEX_MANAGED_THREAD_NAMESPACE as n, createCodexManagedThreadStore as r, CODEX_MANAGED_THREAD_MAX_ENTRIES as t };

package/dist/.setup/rpc-error-BlD2vuzn.mjs

@@ -1,31 +0,0 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-//#region extensions/codex/src/app-server/rpc-error.ts
-const CODEX_APP_SERVER_OVERLOADED_ERROR_CODE = -32001;
-/** RPC error wrapper that preserves app-server error code and data. */
-var CodexAppServerRpcError = class extends Error {
-	constructor(error, method) {
-		super(formatCodexAppServerRpcErrorMessage(error, method));
-		this.name = "CodexAppServerRpcError";
-		this.code = error.code;
-		this.data = error.data;
-		this.method = method;
-	}
-};
-function isCodexThreadReadMissingError(error, threadId) {
-	return error instanceof CodexAppServerRpcError && error.method === "thread/read" && error.code === -32600 && error.message === `thread not loaded: ${threadId}`;
-}
-function formatCodexAppServerRpcErrorMessage(error, method) {
-	const message = error.message || `${method} failed`;
-	const detail = readCodexAppServerRpcReloginDetail(error.data);
-	return detail && !message.includes(detail) ? `${message}: ${detail}` : message;
-}
-function readCodexAppServerRpcReloginDetail(data) {
-	const record = isJsonObject(data) ? data : void 0;
-	const nested = isJsonObject(record?.error) ? record.error : record;
-	if (!nested) return;
-	const isRelogin = nested.action === "relogin" || nested.reason === "cloudRequirements" && nested.errorCode === "Auth";
-	const detail = typeof nested.detail === "string" ? nested.detail.trim() : "";
-	return isRelogin && detail ? detail : void 0;
-}
-//#endregion
-export { CodexAppServerRpcError as n, isCodexThreadReadMissingError as r, CODEX_APP_SERVER_OVERLOADED_ERROR_CODE as t };

package/dist/.setup/session-binding-meta-B7aEMU7g.mjs

@@ -1,6 +0,0 @@
-//#region extensions/codex/src/app-server/session-binding-meta.ts
-/** Process-stable plugin-state metadata for Codex app-server bindings. */
-const CODEX_APP_SERVER_BINDING_NAMESPACE = "app-server-thread-bindings";
-const CODEX_APP_SERVER_BINDING_MAX_ENTRIES = 5e4;
-//#endregion
-export { CODEX_APP_SERVER_BINDING_NAMESPACE as n, CODEX_APP_SERVER_BINDING_MAX_ENTRIES as t };