@unblocklabs/unblock-codex-prompt 0.2.2 → 0.2.3

package/README.md

@@ -1,7 +1,7 @@
 # Unblock Codex Prompt
 
 A small, explicit prompt-management bridge for dedicated OpenClaw Mac agents.
-**Version 0.2.2.** The frozen bridge supports OpenClaw/Codex 2026.9.2 and newer
+**Version 0.2.3.** The frozen bridge supports OpenClaw/Codex 2026.9.2 and newer
 stable releases with a compatible context-assembly layout.
 
 ## What you control
@@ -29,8 +29,8 @@ files use private permissions. Missing identity documents are recorded as absent
 ## Compatibility
 
 - Frozen bridge: **OpenClaw and @openclaw/codex >=2026.9.2**. Reviewed layouts cover
-  2026.9.2, 2026.9.3, 2026.9.4 and 2026.9.8, including parent-local context and split
-  `dist/.setup/` bundles. Bundle names
+  2026.9.2, 2026.9.3, 2026.9.4, 2026.9.8, 2026.10.6 and 2026.10.8, including parent-local context,
+  refreshable instructions and split `dist/.setup/` bundles. Bundle names
   may change; fingerprints of the context-assembly functions must still match.
   Changed assembly is refused pending review, rather than patched blindly.
 - Local stdio Codex with an OpenClaw agent-scoped home. Operator-selected
@@ -42,8 +42,12 @@ files use private permissions. Missing identity documents are recorded as absent
 
 This bridge uses two private upstream seams because public prompt hooks cannot
 fix the dropped-context path: one skill-catalog builder and guarded Codex context
-carriers. Newer builds also require parent-local suppression and removal of the
-separate thread-level skills append. The installer backs up and tracks every
+carriers. Older builds require parent-local suppression and removal of the
+separate thread-level skills append. The 2026.10.6/2026.10.8 recipe suppresses live
+persona, memory and OpenClaw skills at their producers, so initial threads, reuse,
+parent-local inference and compaction all receive the frozen context. Native
+AGENTS and operational context remain live; cron guidance and execution permissions
+are unchanged. The installer backs up and tracks every
 patched bundle; old single-file receipts remain restorable. Runtime module paths
 come from the loader's selected entry, never its temporary execution capture.
 It validates private seams and is not a promise of compatibility with unseen layouts.
@@ -57,7 +61,7 @@ Remote-node-only skills are not added; this is for dedicated local Mac agents.
 npm ci
 npm run preflight
 npm pack
-openclaw plugins install ./unblocklabs-unblock-codex-prompt-0.2.2.tgz --force --accept-capabilities
+openclaw plugins install ./unblocklabs-unblock-codex-prompt-0.2.3.tgz --force --accept-capabilities
 ```
 
 Include the plugin in `plugins.allow` if applicable, then configure:
@@ -140,6 +144,14 @@ possible higher-priority Codex config override. An upgrade replacing the adapter
 removes the guard; startup status is diagnostic, not a global inference gate.
 Restore before upgrading, then revalidate compatibility before reenrollment.
 
+If an upgrade already removed the old package generation, do not run restore
+against replacement files or rewrite receipt paths. Verify that every old target
+is absent and each retained original backup matches its receipt hash, privately
+archive the stale receipt, then install the reviewed adapter against the current
+inspected official package. Keep the frozen snapshot and operator-selected launcher intact
+unless a new snapshot was requested. A source update still requires idle activation
+and fresh-session verification; disk status alone does not prove adoption.
+
 ### Daily shared-prompt refresh
 
 No additional setting is needed beyond an enrolled `promptUrl`. The service checks

package/dist/adapter.js

@@ -5,7 +5,7 @@ import { readOptional, replaceFile, sha256 } from "./manager.js";
 import { openclawRoot } from "./compiler.js";
 import { assertSupportedVersion, MINIMUM_OPENCLAW } from "./compatibility.js";
 const MARKER = "// unblock-codex-prompt bridge v1";
-const BUNDLE_NAME = /^thread-(lifecycle|requests)-[\w-]+\.m?js$/u;
+const BUNDLE_NAME = /^(?:thread-(?:lifecycle|requests|policy)|dynamic-tools|attempt-workspace-context|run-attempt)-[\w-]+\.m?js$/u;
 const HASH = /^[a-f0-9]{64}$/u;
 // Reviewed context carriers, independent of release-specific bundle names.
 const CONTEXT_HASHES = {
@@ -16,6 +16,17 @@ const CONTEXT_HASHES = {
     legacyThread: "703a32a0b18eacd45a9fd3d68c04a13527bdbeaae50a11a6b76768b84b99a9ed",
     thread: "3aa4c414cb449cdb9167e6ed2df9397559176310ce7cff882652bd669ac8cee8",
 };
+// Identical context producers/carriers in the published 2026.10.6 and 2026.10.8 bundles.
+const REFRESHABLE_CONTEXT_HASHES = {
+    buildDeveloperInstructions: "4b4054cdd5ce65358508182d65e71a4c742b2e9debfa51eb65c5b4e26d1eb0bb",
+    buildCodexWorkspaceBootstrapContext: "91bb36eddcf16741957a775af106ab3226ec02dbbe2576b71675ea6db922c0b9",
+    renderCodexSkillsInstructions: "b3b53dccaa80cbd80070f69939909ed7947e5503ab128630a42ed6e255c56039",
+    prepareCodexAttemptContext: "5e38fc7a339ef241acfce3fa1dfae8d06d7f2c4106ee0e511108e680e262a67a",
+    buildCodexParentLocalInstructions: "d68a84359b515949483f5559f3ab4ef6b43f9b5005d5976f5e1559bb9a9f651b",
+    buildCodexThreadConfiguration: "e6994e63d7f408b82ea55a9e9c3e1a87967e13c168d6d72a50a4c16466cca093",
+    refreshCodexThreadInstructions: "23068afa77e3286acc06885b7440d6a1b44ede4c93a6e322fbbbcd6df8fb8777",
+    restoreCodexThreadInstructionsAfterCompaction: "86d6f792175cfbc604f5408016e00b77ed1f7fbefa33b0210d6fbf8d56a2c0a4",
+};
 function receiptPath(agentDir) { return join(agentDir, "codex-home", ".unblock-codex-prompt-adapter.json"); }
 function receiptFiles(receipt) { return receipt.schema === 1 ? [receipt] : receipt.files; }
 function backupPath(agentDir, file, legacy = false) {
@@ -57,6 +68,22 @@ function parseReceipt(source) {
     return value.schema === 1 ? { schema: 1, packageDir, ...files[0] } : { schema: 2, packageDir, files };
 }
 export async function readReceipt(agentDir) { return parseReceipt(await readOptional(receiptPath(agentDir))); }
+function bridgePrefix(agentDir, agentId, runtimePath) {
+    return `${MARKER}
+import { createRequire as unblockPromptCreateRequire } from "node:module";
+const unblockPromptRequire = unblockPromptCreateRequire(import.meta.url);
+function unblockFrozenPolicy(params) {
+  const plugins = params.config?.plugins;
+  const entry = plugins?.entries?.["unblock-codex-prompt"];
+  if (plugins?.enabled === false || entry?.enabled !== true || entry.config?.frozenContext !== true ||
+      (Array.isArray(plugins.allow) && !plugins.allow.includes("unblock-codex-prompt"))) return null;
+  const target = entry.config?.agentId ?? "main";
+  if (params.agentId !== target) return null;
+  if (target !== ${JSON.stringify(agentId)}) throw new Error("Frozen bridge target changed; restore and reinstall the adapter");
+  return unblockPromptRequire(${JSON.stringify(runtimePath)}).readFrozenPolicy(${JSON.stringify(agentDir)});
+}
+`;
+}
 export function patchAdapterSources(sources, agentDir, agentId, runtimePath) {
     if (sources.some(source => source.includes(MARKER)))
         throw new Error("Unsupported Codex adapter shape: already patched");
@@ -68,6 +95,9 @@ export function patchAdapterSources(sources, agentDir, agentId, runtimePath) {
             throw new Error("Unsupported Codex adapter shape: " + name);
         return matches[0];
     };
+    if (functions.some(fn => fn.node.id?.name === "buildCodexWorkspaceBootstrapContext")) {
+        return patchRefreshableAdapter(sources, find, bridgePrefix(agentDir, agentId, runtimePath));
+    }
     const developer = find("buildDeveloperInstructions");
     const collaboration = find("buildTurnScopedCollaborationInstructions");
     const parent = functions.some(fn => fn.node.id?.name === "buildCodexParentLocalInstructions") ? find("buildCodexParentLocalInstructions") : null;
@@ -89,20 +119,7 @@ export function patchAdapterSources(sources, agentDir, agentId, runtimePath) {
         (thread && thread.bundle !== developer.bundle) ||
         (split ? !thread || fingerprint(thread) !== CONTEXT_HASHES.thread : thread !== null && fingerprint(thread) !== CONTEXT_HASHES.legacyThread))
         throw new Error("Unsupported Codex context assembly; review the changed upstream functions before syncing");
-    const prefix = `${MARKER}
-import { createRequire as unblockPromptCreateRequire } from "node:module";
-const unblockPromptRequire = unblockPromptCreateRequire(import.meta.url);
-function unblockFrozenPolicy(params) {
-  const plugins = params.config?.plugins;
-  const entry = plugins?.entries?.["unblock-codex-prompt"];
-  if (plugins?.enabled === false || entry?.enabled !== true || entry.config?.frozenContext !== true ||
-      (Array.isArray(plugins.allow) && !plugins.allow.includes("unblock-codex-prompt"))) return null;
-  const target = entry.config?.agentId ?? "main";
-  if (params.agentId !== target) return null;
-  if (target !== ${JSON.stringify(agentId)}) throw new Error("Frozen bridge target changed; restore and reinstall the adapter");
-  return unblockPromptRequire(${JSON.stringify(runtimePath)}).readFrozenPolicy(${JSON.stringify(agentDir)});
-}
-`;
+    const prefix = bridgePrefix(agentDir, agentId, runtimePath);
     const insertions = [
         { fn: developer, text: '\n\tconst unblockPolicy = unblockFrozenPolicy(params);\n\tif (unblockPolicy !== null) return [unblockPolicy, params.gitCoauthorPrompt, params.extraSystemPrompt].filter(section => typeof section === "string" && section.trim()).join("\\n\\n");' },
         { fn: collaboration, text: '\n\tif (unblockFrozenPolicy(params) !== null) return params.trigger === "cron" ? buildCronCollaborationInstructions() : buildDefaultCollaborationInstructions();' },
@@ -119,6 +136,40 @@ function unblockFrozenPolicy(params) {
         return edits.length ? prefix + source : source;
     });
 }
+function patchRefreshableAdapter(sources, find, prefix) {
+    for (const [name, expected] of Object.entries(REFRESHABLE_CONTEXT_HASHES)) {
+        const { node, bundle } = find(name);
+        if (sha256(sources[bundle].slice(node.start, node.end)) !== expected) {
+            throw new Error("Unsupported Codex context assembly: " + name + "; review the changed upstream function before syncing");
+        }
+    }
+    const developer = find("buildDeveloperInstructions");
+    const skills = find("renderCodexSkillsInstructions");
+    const workspace = find("buildCodexWorkspaceBootstrapContext");
+    const originalWorkspace = sources[workspace.bundle].slice(workspace.node.start, workspace.node.end)
+        .replace("async function buildCodexWorkspaceBootstrapContext", "async function unblockOriginalWorkspaceContext");
+    // Suppress at the producers: initial, warm, fork, parent-local and post-compaction
+    // carriers all receive the same empty refreshable section. Native AGENTS stays live.
+    const wrapper = `async function buildCodexWorkspaceBootstrapContext(params) {
+  const policy = unblockFrozenPolicy(params.params);
+  const context = await unblockOriginalWorkspaceContext(params);
+  return policy === null ? context : { ...context, personaInstructions: undefined, sharedPersonaInstructions: undefined, memoryInstructions: undefined };
+}
+`;
+    const edits = [
+        { bundle: developer.bundle, start: developer.node.body.start + 1, end: developer.node.body.start + 1,
+            text: '\n\tconst unblockPolicy = unblockFrozenPolicy(params);\n\tif (unblockPolicy !== null) return [unblockPolicy, params.gitCoauthorPrompt, params.extraSystemPrompt].filter(section => typeof section === "string" && section.trim()).join("\\n\\n");' },
+        { bundle: skills.bundle, start: skills.node.body.start + 1, end: skills.node.body.start + 1,
+            text: '\n\tif (unblockFrozenPolicy(params.attempt) !== null) return;' },
+        { bundle: workspace.bundle, start: workspace.node.start, end: workspace.node.end, text: wrapper + originalWorkspace },
+    ];
+    return sources.map((source, bundle) => {
+        const selected = edits.filter(edit => edit.bundle === bundle).sort((a, b) => b.start - a.start);
+        for (const edit of selected)
+            source = source.slice(0, edit.start) + edit.text + source.slice(edit.end);
+        return selected.length ? prefix + source : source;
+    });
+}
 export async function prepareAdapter(agentDir, agentId, suppliedDir, runtimePath) {
     await openclawRoot();
     if (!isAbsolute(runtimePath) || await readOptional(runtimePath) === null)

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "unblock-codex-prompt",
   "name": "Unblock Codex Prompt",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Maintain an agent-scoped Codex base prompt and its model_instructions_file pointer.",
   "activation": { "onStartup": true },
   "configSchema": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unblocklabs/unblock-codex-prompt",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Manage a shared Codex base prompt for an OpenClaw agent.",
   "type": "module",
   "main": "./dist/index.js",