@unblocklabs/unblock-codex-prompt 0.2.1 → 0.2.3

package/README.md

@@ -1,7 +1,7 @@
 # Unblock Codex Prompt
 
 A small, explicit prompt-management bridge for dedicated OpenClaw Mac agents.
-**Version 0.2.1.** The frozen bridge supports OpenClaw/Codex 2026.9.2 and newer
+**Version 0.2.3.** The frozen bridge supports OpenClaw/Codex 2026.9.2 and newer
 stable releases with a compatible context-assembly layout.
 
 ## What you control
@@ -29,18 +29,25 @@ files use private permissions. Missing identity documents are recorded as absent
 ## Compatibility
 
 - Frozen bridge: **OpenClaw and @openclaw/codex >=2026.9.2**. Reviewed layouts cover
-  2026.9.2, 2026.9.3, 2026.9.4 and 2026.9.8, including parent-local context and split
-  `dist/.setup/` bundles. Bundle names
+  2026.9.2, 2026.9.3, 2026.9.4, 2026.9.8, 2026.10.6 and 2026.10.8, including parent-local context,
+  refreshable instructions and split `dist/.setup/` bundles. Bundle names
   may change; fingerprints of the context-assembly functions must still match.
   Changed assembly is refused pending review, rather than patched blindly.
-- Managed local stdio Codex, agent-scoped home, no custom command/arguments.
+- Local stdio Codex with an OpenClaw agent-scoped home. Operator-selected
+  `appServer.command` and `appServer.args` are supported and left unchanged.
+  The launcher must honor OpenClaw's `CODEX_HOME` and must not override the
+  managed `model_instructions_file`; status cannot attest to launcher behavior.
 - One target agent per installation. Other agents use upstream behavior. Native
   children may inherit the parent's frozen context.
 
 This bridge uses two private upstream seams because public prompt hooks cannot
 fix the dropped-context path: one skill-catalog builder and guarded Codex context
-carriers. Newer builds also require parent-local suppression and removal of the
-separate thread-level skills append. The installer backs up and tracks every
+carriers. Older builds require parent-local suppression and removal of the
+separate thread-level skills append. The 2026.10.6/2026.10.8 recipe suppresses live
+persona, memory and OpenClaw skills at their producers, so initial threads, reuse,
+parent-local inference and compaction all receive the frozen context. Native
+AGENTS and operational context remain live; cron guidance and execution permissions
+are unchanged. The installer backs up and tracks every
 patched bundle; old single-file receipts remain restorable. Runtime module paths
 come from the loader's selected entry, never its temporary execution capture.
 It validates private seams and is not a promise of compatibility with unseen layouts.
@@ -54,7 +61,7 @@ Remote-node-only skills are not added; this is for dedicated local Mac agents.
 npm ci
 npm run preflight
 npm pack
-openclaw plugins install ./unblocklabs-unblock-codex-prompt-0.2.1.tgz --force --accept-capabilities
+openclaw plugins install ./unblocklabs-unblock-codex-prompt-0.2.3.tgz --force --accept-capabilities
 ```
 
 Include the plugin in `plugins.allow` if applicable, then configure:
@@ -137,6 +144,14 @@ possible higher-priority Codex config override. An upgrade replacing the adapter
 removes the guard; startup status is diagnostic, not a global inference gate.
 Restore before upgrading, then revalidate compatibility before reenrollment.
 
+If an upgrade already removed the old package generation, do not run restore
+against replacement files or rewrite receipt paths. Verify that every old target
+is absent and each retained original backup matches its receipt hash, privately
+archive the stale receipt, then install the reviewed adapter against the current
+inspected official package. Keep the frozen snapshot and operator-selected launcher intact
+unless a new snapshot was requested. A source update still requires idle activation
+and fresh-session verification; disk status alone does not prove adoption.
+
 ### Daily shared-prompt refresh
 
 No additional setting is needed beyond an enrolled `promptUrl`. The service checks

package/dist/adapter.js

@@ -5,7 +5,7 @@ import { readOptional, replaceFile, sha256 } from "./manager.js";
 import { openclawRoot } from "./compiler.js";
 import { assertSupportedVersion, MINIMUM_OPENCLAW } from "./compatibility.js";
 const MARKER = "// unblock-codex-prompt bridge v1";
-const BUNDLE_NAME = /^thread-(lifecycle|requests)-[\w-]+\.m?js$/u;
+const BUNDLE_NAME = /^(?:thread-(?:lifecycle|requests|policy)|dynamic-tools|attempt-workspace-context|run-attempt)-[\w-]+\.m?js$/u;
 const HASH = /^[a-f0-9]{64}$/u;
 // Reviewed context carriers, independent of release-specific bundle names.
 const CONTEXT_HASHES = {
@@ -16,6 +16,17 @@ const CONTEXT_HASHES = {
     legacyThread: "703a32a0b18eacd45a9fd3d68c04a13527bdbeaae50a11a6b76768b84b99a9ed",
     thread: "3aa4c414cb449cdb9167e6ed2df9397559176310ce7cff882652bd669ac8cee8",
 };
+// Identical context producers/carriers in the published 2026.10.6 and 2026.10.8 bundles.
+const REFRESHABLE_CONTEXT_HASHES = {
+    buildDeveloperInstructions: "4b4054cdd5ce65358508182d65e71a4c742b2e9debfa51eb65c5b4e26d1eb0bb",
+    buildCodexWorkspaceBootstrapContext: "91bb36eddcf16741957a775af106ab3226ec02dbbe2576b71675ea6db922c0b9",
+    renderCodexSkillsInstructions: "b3b53dccaa80cbd80070f69939909ed7947e5503ab128630a42ed6e255c56039",
+    prepareCodexAttemptContext: "5e38fc7a339ef241acfce3fa1dfae8d06d7f2c4106ee0e511108e680e262a67a",
+    buildCodexParentLocalInstructions: "d68a84359b515949483f5559f3ab4ef6b43f9b5005d5976f5e1559bb9a9f651b",
+    buildCodexThreadConfiguration: "e6994e63d7f408b82ea55a9e9c3e1a87967e13c168d6d72a50a4c16466cca093",
+    refreshCodexThreadInstructions: "23068afa77e3286acc06885b7440d6a1b44ede4c93a6e322fbbbcd6df8fb8777",
+    restoreCodexThreadInstructionsAfterCompaction: "86d6f792175cfbc604f5408016e00b77ed1f7fbefa33b0210d6fbf8d56a2c0a4",
+};
 function receiptPath(agentDir) { return join(agentDir, "codex-home", ".unblock-codex-prompt-adapter.json"); }
 function receiptFiles(receipt) { return receipt.schema === 1 ? [receipt] : receipt.files; }
 function backupPath(agentDir, file, legacy = false) {
@@ -57,6 +68,22 @@ function parseReceipt(source) {
     return value.schema === 1 ? { schema: 1, packageDir, ...files[0] } : { schema: 2, packageDir, files };
 }
 export async function readReceipt(agentDir) { return parseReceipt(await readOptional(receiptPath(agentDir))); }
+function bridgePrefix(agentDir, agentId, runtimePath) {
+    return `${MARKER}
+import { createRequire as unblockPromptCreateRequire } from "node:module";
+const unblockPromptRequire = unblockPromptCreateRequire(import.meta.url);
+function unblockFrozenPolicy(params) {
+  const plugins = params.config?.plugins;
+  const entry = plugins?.entries?.["unblock-codex-prompt"];
+  if (plugins?.enabled === false || entry?.enabled !== true || entry.config?.frozenContext !== true ||
+      (Array.isArray(plugins.allow) && !plugins.allow.includes("unblock-codex-prompt"))) return null;
+  const target = entry.config?.agentId ?? "main";
+  if (params.agentId !== target) return null;
+  if (target !== ${JSON.stringify(agentId)}) throw new Error("Frozen bridge target changed; restore and reinstall the adapter");
+  return unblockPromptRequire(${JSON.stringify(runtimePath)}).readFrozenPolicy(${JSON.stringify(agentDir)});
+}
+`;
+}
 export function patchAdapterSources(sources, agentDir, agentId, runtimePath) {
     if (sources.some(source => source.includes(MARKER)))
         throw new Error("Unsupported Codex adapter shape: already patched");
@@ -68,6 +95,9 @@ export function patchAdapterSources(sources, agentDir, agentId, runtimePath) {
             throw new Error("Unsupported Codex adapter shape: " + name);
         return matches[0];
     };
+    if (functions.some(fn => fn.node.id?.name === "buildCodexWorkspaceBootstrapContext")) {
+        return patchRefreshableAdapter(sources, find, bridgePrefix(agentDir, agentId, runtimePath));
+    }
     const developer = find("buildDeveloperInstructions");
     const collaboration = find("buildTurnScopedCollaborationInstructions");
     const parent = functions.some(fn => fn.node.id?.name === "buildCodexParentLocalInstructions") ? find("buildCodexParentLocalInstructions") : null;
@@ -89,20 +119,7 @@ export function patchAdapterSources(sources, agentDir, agentId, runtimePath) {
         (thread && thread.bundle !== developer.bundle) ||
         (split ? !thread || fingerprint(thread) !== CONTEXT_HASHES.thread : thread !== null && fingerprint(thread) !== CONTEXT_HASHES.legacyThread))
         throw new Error("Unsupported Codex context assembly; review the changed upstream functions before syncing");
-    const prefix = `${MARKER}
-import { createRequire as unblockPromptCreateRequire } from "node:module";
-const unblockPromptRequire = unblockPromptCreateRequire(import.meta.url);
-function unblockFrozenPolicy(params) {
-  const plugins = params.config?.plugins;
-  const entry = plugins?.entries?.["unblock-codex-prompt"];
-  if (plugins?.enabled === false || entry?.enabled !== true || entry.config?.frozenContext !== true ||
-      (Array.isArray(plugins.allow) && !plugins.allow.includes("unblock-codex-prompt"))) return null;
-  const target = entry.config?.agentId ?? "main";
-  if (params.agentId !== target) return null;
-  if (target !== ${JSON.stringify(agentId)}) throw new Error("Frozen bridge target changed; restore and reinstall the adapter");
-  return unblockPromptRequire(${JSON.stringify(runtimePath)}).readFrozenPolicy(${JSON.stringify(agentDir)});
-}
-`;
+    const prefix = bridgePrefix(agentDir, agentId, runtimePath);
     const insertions = [
         { fn: developer, text: '\n\tconst unblockPolicy = unblockFrozenPolicy(params);\n\tif (unblockPolicy !== null) return [unblockPolicy, params.gitCoauthorPrompt, params.extraSystemPrompt].filter(section => typeof section === "string" && section.trim()).join("\\n\\n");' },
         { fn: collaboration, text: '\n\tif (unblockFrozenPolicy(params) !== null) return params.trigger === "cron" ? buildCronCollaborationInstructions() : buildDefaultCollaborationInstructions();' },
@@ -119,6 +136,40 @@ function unblockFrozenPolicy(params) {
         return edits.length ? prefix + source : source;
     });
 }
+function patchRefreshableAdapter(sources, find, prefix) {
+    for (const [name, expected] of Object.entries(REFRESHABLE_CONTEXT_HASHES)) {
+        const { node, bundle } = find(name);
+        if (sha256(sources[bundle].slice(node.start, node.end)) !== expected) {
+            throw new Error("Unsupported Codex context assembly: " + name + "; review the changed upstream function before syncing");
+        }
+    }
+    const developer = find("buildDeveloperInstructions");
+    const skills = find("renderCodexSkillsInstructions");
+    const workspace = find("buildCodexWorkspaceBootstrapContext");
+    const originalWorkspace = sources[workspace.bundle].slice(workspace.node.start, workspace.node.end)
+        .replace("async function buildCodexWorkspaceBootstrapContext", "async function unblockOriginalWorkspaceContext");
+    // Suppress at the producers: initial, warm, fork, parent-local and post-compaction
+    // carriers all receive the same empty refreshable section. Native AGENTS stays live.
+    const wrapper = `async function buildCodexWorkspaceBootstrapContext(params) {
+  const policy = unblockFrozenPolicy(params.params);
+  const context = await unblockOriginalWorkspaceContext(params);
+  return policy === null ? context : { ...context, personaInstructions: undefined, sharedPersonaInstructions: undefined, memoryInstructions: undefined };
+}
+`;
+    const edits = [
+        { bundle: developer.bundle, start: developer.node.body.start + 1, end: developer.node.body.start + 1,
+            text: '\n\tconst unblockPolicy = unblockFrozenPolicy(params);\n\tif (unblockPolicy !== null) return [unblockPolicy, params.gitCoauthorPrompt, params.extraSystemPrompt].filter(section => typeof section === "string" && section.trim()).join("\\n\\n");' },
+        { bundle: skills.bundle, start: skills.node.body.start + 1, end: skills.node.body.start + 1,
+            text: '\n\tif (unblockFrozenPolicy(params.attempt) !== null) return;' },
+        { bundle: workspace.bundle, start: workspace.node.start, end: workspace.node.end, text: wrapper + originalWorkspace },
+    ];
+    return sources.map((source, bundle) => {
+        const selected = edits.filter(edit => edit.bundle === bundle).sort((a, b) => b.start - a.start);
+        for (const edit of selected)
+            source = source.slice(0, edit.start) + edit.text + source.slice(edit.end);
+        return selected.length ? prefix + source : source;
+    });
+}
 export async function prepareAdapter(agentDir, agentId, suppliedDir, runtimePath) {
     await openclawRoot();
     if (!isAbsolute(runtimePath) || await readOptional(runtimePath) === null)

package/dist/index.js

@@ -54,13 +54,11 @@ async function resolveTarget(config) {
         if (!appServer || typeof appServer !== "object" || Array.isArray(appServer))
             throw new Error("Invalid Codex appServer config");
         if (("transport" in appServer && appServer.transport !== "stdio") ||
-            ("homeScope" in appServer && appServer.homeScope !== "agent") ||
-            ("command" in appServer && appServer.command !== undefined)) {
-            throw new Error("Only OpenClaw-managed, agent-scoped local stdio Codex is supported");
-        }
-        if ("args" in appServer && appServer.args !== undefined) {
-            throw new Error("Custom Codex appServer.args may override the prompt; remove them or manage the prompt outside this plugin");
+            ("homeScope" in appServer && appServer.homeScope !== "agent")) {
+            throw new Error("Only agent-scoped local stdio Codex is supported");
         }
+        // OpenClaw owns launching Codex, including operator-selected binaries/args.
+        // We own this agent's prompt files, not its executable selection.
     }
     return { agentDir: resolveAgentDir(config, settings.agentId), settings, workspaceDir: resolveAgentWorkspaceDir(config, settings.agentId) };
 }

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "unblock-codex-prompt",
   "name": "Unblock Codex Prompt",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Maintain an agent-scoped Codex base prompt and its model_instructions_file pointer.",
   "activation": { "onStartup": true },
   "configSchema": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unblocklabs/unblock-codex-prompt",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Manage a shared Codex base prompt for an OpenClaw agent.",
   "type": "module",
   "main": "./dist/index.js",