@gaodefa/daocore 2026.5.25 → 2026.5.27

package/dist/vision-tools-Dp0JrLRi.js

@@ -0,0 +1,1409 @@
+import { i as emitTrustedDiagnosticEvent } from "./diagnostic-events-DPfGiEBK.js";
+import { _ as buildAgentHookContextChannelFields } from "./attempt.prompt-helpers-COc5m_TZ.js";
+import { u as runBeforeToolCallHook } from "./pi-tools.before-tool-call-D5yhQHUF.js";
+import { t as callGatewayTool } from "./gateway-DaBSZHXx.js";
+import { t as log } from "./logger-k-VzKT7P.js";
+import { t as formatApprovalDisplayPath } from "./approval-display-paths-BqRczx-P.js";
+import "./agent-harness-runtime-CkdXIMHI.js";
+import { n as hasNativeHookRelayInvocation, r as invokeNativeHookRelay } from "./native-hook-relay-sEEyLI6R.js";
+import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
+import { s as formatCodexDisplayText } from "./notification-correlation-qKY_sgga.js";
+import { createHash } from "node:crypto";
+//#region extensions/codex/src/app-server/plugin-approval-roundtrip.ts
+const DEFAULT_CODEX_APPROVAL_TIMEOUT_MS = 12e4;
+const MAX_PLUGIN_APPROVAL_TITLE_LENGTH = 80;
+const MAX_PLUGIN_APPROVAL_DESCRIPTION_LENGTH = 256;
+async function requestPluginApproval(params) {
+	const timeoutMs = DEFAULT_CODEX_APPROVAL_TIMEOUT_MS;
+	return callGatewayTool("plugin.approval.request", { timeoutMs: 13e4 }, {
+		pluginId: "daocore-codex-app-server",
+		title: truncateForGateway(params.title, MAX_PLUGIN_APPROVAL_TITLE_LENGTH),
+		description: truncateForGateway(params.description, MAX_PLUGIN_APPROVAL_DESCRIPTION_LENGTH),
+		severity: params.severity,
+		toolName: params.toolName,
+		toolCallId: params.toolCallId,
+		agentId: params.paramsForRun.agentId,
+		sessionKey: params.paramsForRun.sessionKey,
+		turnSourceChannel: params.paramsForRun.messageChannel ?? params.paramsForRun.messageProvider,
+		turnSourceTo: params.paramsForRun.currentChannelId,
+		turnSourceAccountId: params.paramsForRun.agentAccountId,
+		turnSourceThreadId: params.paramsForRun.currentThreadTs,
+		timeoutMs,
+		twoPhase: true
+	}, { expectFinal: false });
+}
+function approvalRequestExplicitlyUnavailable(result) {
+	if (result === null || result === void 0 || typeof result !== "object") return false;
+	let descriptor;
+	try {
+		descriptor = Object.getOwnPropertyDescriptor(result, "decision");
+	} catch {
+		return false;
+	}
+	return descriptor !== void 0 && "value" in descriptor && descriptor.value === null;
+}
+async function waitForPluginApprovalDecision(params) {
+	const waitPromise = callGatewayTool("plugin.approval.waitDecision", { timeoutMs: 13e4 }, { id: params.approvalId });
+	if (!params.signal) return (await waitPromise)?.decision;
+	let onAbort;
+	const abortPromise = new Promise((_, reject) => {
+		if (params.signal.aborted) {
+			reject(params.signal.reason);
+			return;
+		}
+		onAbort = () => reject(params.signal.reason);
+		params.signal.addEventListener("abort", onAbort, { once: true });
+	});
+	try {
+		return (await Promise.race([waitPromise, abortPromise]))?.decision;
+	} finally {
+		if (onAbort) params.signal.removeEventListener("abort", onAbort);
+	}
+}
+function mapExecDecisionToOutcome(decision) {
+	if (decision === "allow-once") return "approved-once";
+	if (decision === "allow-always") return "approved-session";
+	if (decision === null || decision === void 0) return "unavailable";
+	return "denied";
+}
+function truncateForGateway(value, maxLength) {
+	return value.length <= maxLength ? value : `${value.slice(0, Math.max(0, maxLength - 3))}...`;
+}
+//#endregion
+//#region extensions/codex/src/app-server/approval-bridge.ts
+const PERMISSION_DESCRIPTION_MAX_LENGTH = 700;
+const PERMISSION_SAMPLE_LIMIT = 2;
+const PERMISSION_VALUE_MAX_LENGTH = 48;
+const COMMAND_PREVIEW_WITH_DETAILS_MAX_LENGTH = 80;
+const APPROVAL_PREVIEW_SCAN_MAX_LENGTH = 4096;
+const APPROVAL_PREVIEW_OMITTED = "[preview truncated or unsafe content omitted]";
+const ANSI_OSC_SEQUENCE_RE$1 = new RegExp(String.raw`(?:\u001b]|\u009d)[^\u001b\u009c\u0007]*(?:\u0007|\u001b\\|\u009c)`, "g");
+const ANSI_CONTROL_SEQUENCE_RE$1 = new RegExp(String.raw`(?:\u001b\[[0-?]*[ -/]*[@-~]|\u009b[0-?]*[ -/]*[@-~]|\u001b[@-Z\\-_])`, "g");
+const CONTROL_CHARACTER_RE$1 = new RegExp(String.raw`[\u0000-\u001f\u007f-\u009f]+`, "g");
+const INVISIBLE_FORMATTING_CONTROL_RE$1 = new RegExp(String.raw`[\u00ad\u034f\u061c\u200b-\u200f\u202a-\u202e\u2060-\u206f\ufeff\ufe00-\ufe0f\u{e0100}-\u{e01ef}]`, "gu");
+const DANGLING_TERMINAL_SEQUENCE_SUFFIX_RE$1 = new RegExp(String.raw`(?:\u001b\][^\u001b\u009c\u0007]*|\u009d[^\u001b\u009c\u0007]*|\u001b\[[0-?]*[ -/]*|\u009b[0-?]*[ -/]*|\u001b)$`);
+async function handleCodexAppServerApprovalRequest(params) {
+	const requestParams = isJsonObject(params.requestParams) ? params.requestParams : void 0;
+	if (!matchesCurrentTurn(requestParams, params.threadId, params.turnId)) return;
+	if (!isSupportedAppServerApprovalMethod(params.method)) return unsupportedApprovalResponse();
+	const context = buildApprovalContext({
+		method: params.method,
+		requestParams,
+		paramsForRun: params.paramsForRun
+	});
+	try {
+		const policyOutcome = await runDaoCoreToolPolicyForApprovalRequest({
+			method: params.method,
+			requestParams,
+			paramsForRun: params.paramsForRun,
+			context,
+			nativeHookRelay: params.nativeHookRelay,
+			signal: params.signal
+		});
+		if (policyOutcome?.outcome === "denied") {
+			emitApprovalEvent(params.paramsForRun, {
+				phase: "resolved",
+				kind: context.kind,
+				status: "denied",
+				title: context.title,
+				...context.eventDetails,
+				...approvalEventScope(params.method, "denied"),
+				message: policyOutcome.reason
+			});
+			return buildApprovalResponse(params.method, context.requestParams, "denied");
+		}
+		const requestResult = await requestPluginApproval({
+			paramsForRun: params.paramsForRun,
+			title: context.title,
+			description: context.description,
+			severity: context.severity,
+			toolName: context.toolName,
+			toolCallId: context.itemId
+		});
+		const approvalId = requestResult?.id;
+		if (!approvalId) {
+			emitApprovalEvent(params.paramsForRun, {
+				phase: "resolved",
+				kind: context.kind,
+				status: "unavailable",
+				title: context.title,
+				...context.eventDetails,
+				...approvalEventScope(params.method, "denied"),
+				message: "Codex app-server approval route unavailable."
+			});
+			return buildApprovalResponse(params.method, context.requestParams, "denied");
+		}
+		emitApprovalEvent(params.paramsForRun, {
+			phase: "requested",
+			kind: context.kind,
+			status: "pending",
+			title: context.title,
+			approvalId,
+			approvalSlug: approvalId,
+			...context.eventDetails,
+			message: "Codex app-server approval requested."
+		});
+		const outcome = mapExecDecisionToOutcome(approvalRequestExplicitlyUnavailable(requestResult) ? null : await waitForPluginApprovalDecision({
+			approvalId,
+			signal: params.signal
+		}));
+		emitApprovalEvent(params.paramsForRun, {
+			phase: "resolved",
+			kind: context.kind,
+			status: outcome === "denied" ? "denied" : outcome === "unavailable" ? "unavailable" : outcome === "cancelled" ? "failed" : "approved",
+			title: context.title,
+			approvalId,
+			approvalSlug: approvalId,
+			...context.eventDetails,
+			...approvalEventScope(params.method, outcome),
+			message: approvalResolutionMessage(outcome)
+		});
+		return buildApprovalResponse(params.method, context.requestParams, outcome);
+	} catch (error) {
+		const cancelled = params.signal?.aborted === true;
+		emitApprovalEvent(params.paramsForRun, {
+			phase: "resolved",
+			kind: context.kind,
+			status: cancelled ? "failed" : "unavailable",
+			title: context.title,
+			...context.eventDetails,
+			...approvalEventScope(params.method, cancelled ? "cancelled" : "denied"),
+			message: cancelled ? "Codex app-server approval cancelled because the run stopped." : `Codex app-server approval route failed: ${formatCodexDisplayText(formatErrorMessage(error))}`
+		});
+		return buildApprovalResponse(params.method, context.requestParams, cancelled ? "cancelled" : "denied");
+	}
+}
+function buildApprovalResponse(method, requestParams, outcome) {
+	if (method === "item/commandExecution/requestApproval") return { decision: commandApprovalDecision(requestParams, outcome) };
+	if (method === "item/fileChange/requestApproval") return { decision: fileChangeApprovalDecision(outcome) };
+	if (method === "item/permissions/requestApproval") {
+		if (outcome === "approved-session" || outcome === "approved-once") return {
+			permissions: requestedPermissions(requestParams),
+			scope: outcome === "approved-session" ? "session" : "turn"
+		};
+		return {
+			permissions: {},
+			scope: "turn"
+		};
+	}
+	return unsupportedApprovalResponse();
+}
+function matchesCurrentTurn(requestParams, threadId, turnId) {
+	if (!requestParams) return false;
+	const requestThreadId = readString$1(requestParams, "threadId") ?? readString$1(requestParams, "conversationId");
+	const requestTurnId = readString$1(requestParams, "turnId");
+	return requestThreadId === threadId && requestTurnId === turnId;
+}
+function buildApprovalContext(params) {
+	const itemId = readString$1(params.requestParams, "itemId") ?? readString$1(params.requestParams, "callId") ?? readString$1(params.requestParams, "approvalId");
+	const commandDetailLines = params.method === "item/commandExecution/requestApproval" ? describeCommandApprovalDetails(params.requestParams) : [];
+	const commandPreview = sanitizeApprovalPreview(readDisplayCommandPreview(params.requestParams), commandDetailLines.length > 0 ? COMMAND_PREVIEW_WITH_DETAILS_MAX_LENGTH : 180);
+	const reasonPreview = sanitizeApprovalPreview(readStringPreview(params.requestParams, "reason"), 180);
+	const command = commandPreview.text;
+	const reason = reasonPreview.text;
+	const kind = approvalKindForMethod(params.method);
+	const permissionLines = params.method === "item/permissions/requestApproval" ? describeRequestedPermissions(params.requestParams) : [];
+	const title = kind === "exec" ? "Codex app-server command approval" : params.method === "item/permissions/requestApproval" ? "Codex app-server permission approval" : kind === "plugin" ? "Codex app-server file approval" : "Codex app-server approval";
+	const subject = permissionLines[0] ?? (command ? `Command: ${formatApprovalPreviewSubject(command, commandPreview.omitted)}` : commandPreview.omitted ? `Command: ${APPROVAL_PREVIEW_OMITTED}` : reason ? `Reason: ${formatApprovalPreviewSubject(reason, reasonPreview.omitted)}` : reasonPreview.omitted ? `Reason: ${APPROVAL_PREVIEW_OMITTED}` : `Request method: ${params.method}`);
+	return {
+		kind,
+		title,
+		description: permissionLines.length > 0 ? joinDescriptionLinesWithinLimit(permissionLines, PERMISSION_DESCRIPTION_MAX_LENGTH) : [
+			subject,
+			...commandDetailLines,
+			params.paramsForRun.sessionKey && `Session: ${params.paramsForRun.sessionKey}`
+		].filter(Boolean).join("\n"),
+		severity: kind === "exec" ? "warning" : "info",
+		toolName: kind === "exec" ? "codex_command_approval" : params.method === "item/permissions/requestApproval" ? "codex_permission_approval" : "codex_file_approval",
+		itemId,
+		requestParams: params.requestParams,
+		eventDetails: {
+			...itemId ? { itemId } : {},
+			...command ? { command } : {},
+			...commandPreview.omitted ? { commandPreviewOmitted: true } : {},
+			...reason ? { reason } : {},
+			...reasonPreview.omitted ? { reasonPreviewOmitted: true } : {}
+		}
+	};
+}
+async function runDaoCoreToolPolicyForApprovalRequest(params) {
+	const policyRequest = buildDaoCoreToolPolicyRequest(params.method, params.requestParams);
+	if (!policyRequest) return;
+	const cwd = readString$1(params.requestParams, "cwd") ?? params.paramsForRun.workspaceDir;
+	const nativeRelayOutcome = await runNativeRelayToolPolicyForApprovalRequest({
+		method: params.method,
+		requestParams: params.requestParams,
+		context: params.context,
+		policyRequest,
+		nativeHookRelay: params.nativeHookRelay,
+		cwd
+	});
+	if (nativeRelayOutcome?.blocked) return {
+		outcome: "denied",
+		reason: nativeRelayOutcome.reason
+	};
+	if (nativeRelayOutcome?.handled) return { outcome: "no-decision" };
+	const hookChannelId = buildAgentHookContextChannelFields({
+		sessionKey: params.paramsForRun.sessionKey,
+		messageChannel: params.paramsForRun.messageChannel,
+		messageProvider: params.paramsForRun.messageProvider,
+		currentChannelId: params.paramsForRun.currentChannelId,
+		messageTo: params.paramsForRun.messageTo
+	}).channelId;
+	const outcome = await runBeforeToolCallHook({
+		toolName: policyRequest.toolName,
+		params: policyRequest.params,
+		...params.context.itemId ? { toolCallId: params.context.itemId } : {},
+		approvalMode: "report",
+		signal: params.signal,
+		ctx: {
+			...params.paramsForRun.agentId ? { agentId: params.paramsForRun.agentId } : {},
+			...params.paramsForRun.config ? { config: params.paramsForRun.config } : {},
+			...cwd ? { cwd } : {},
+			...params.paramsForRun.sessionKey ? { sessionKey: params.paramsForRun.sessionKey } : {},
+			...params.paramsForRun.sessionId ? { sessionId: params.paramsForRun.sessionId } : {},
+			...params.paramsForRun.runId ? { runId: params.paramsForRun.runId } : {},
+			...hookChannelId ? { channelId: hookChannelId } : {}
+		}
+	});
+	if (outcome.blocked) return {
+		outcome: "denied",
+		reason: outcome.reason
+	};
+	if ("params" in outcome && toolPolicyParamsWereRewritten(policyRequest.params, outcome.params)) return {
+		outcome: "denied",
+		reason: "DaoCore tool policy rewrote Codex app-server approval params; refusing original request."
+	};
+}
+async function runNativeRelayToolPolicyForApprovalRequest(params) {
+	if (params.method !== "item/commandExecution/requestApproval" || !params.nativeHookRelay?.allowedEvents.includes("pre_tool_use")) return;
+	const payload = buildNativeRelayPreToolUsePayload({
+		requestParams: params.requestParams,
+		policyRequest: params.policyRequest,
+		context: params.context,
+		cwd: params.cwd
+	});
+	if (!payload) return;
+	if (hasNativeHookRelayInvocation({
+		relayId: params.nativeHookRelay.relayId,
+		event: "pre_tool_use",
+		toolUseId: params.context.itemId
+	})) return { handled: true };
+	try {
+		const decision = readNativeRelayPreToolUseDecision(await invokeNativeHookRelay({
+			provider: "codex",
+			relayId: params.nativeHookRelay.relayId,
+			event: "pre_tool_use",
+			rawPayload: payload
+		}));
+		if (decision.blocked) return {
+			handled: true,
+			blocked: true,
+			reason: decision.reason
+		};
+		return { handled: true };
+	} catch (error) {
+		return {
+			handled: true,
+			blocked: true,
+			reason: `DaoCore native hook relay unavailable for Codex app-server approval: ${formatCodexDisplayText(formatErrorMessage(error))}`
+		};
+	}
+}
+function buildNativeRelayPreToolUsePayload(params) {
+	const command = readString$1(params.policyRequest.params, "command");
+	if (!command) return;
+	const turnId = readString$1(params.requestParams, "turnId");
+	return {
+		hook_event_name: "PreToolUse",
+		daocore_approval_mode: "report",
+		tool_name: "exec_command",
+		...params.context.itemId ? { tool_use_id: params.context.itemId } : {},
+		...params.cwd ? { cwd: params.cwd } : {},
+		...turnId ? { turn_id: turnId } : {},
+		tool_input: {
+			...params.policyRequest.params,
+			command,
+			cmd: command
+		}
+	};
+}
+function readNativeRelayPreToolUseDecision(response) {
+	if (!response || response.exitCode !== 0) return {
+		blocked: true,
+		reason: sanitizeRelayDecisionReason(response?.stderr) || sanitizeRelayDecisionReason(response?.stdout) || "DaoCore native hook relay failed for Codex app-server approval."
+	};
+	const stdout = response.stdout?.trim();
+	if (!stdout) return { blocked: false };
+	const parsed = parseRelayJsonResponse(stdout);
+	const output = isJsonObject(parsed?.hookSpecificOutput) ? parsed.hookSpecificOutput : void 0;
+	if (output?.permissionDecision === "deny") return {
+		blocked: true,
+		reason: readString$1(output, "permissionDecisionReason") || "DaoCore native hook policy denied Codex app-server approval."
+	};
+	return {
+		blocked: true,
+		reason: output ? "DaoCore native hook relay returned a non-deny Codex app-server approval decision." : "DaoCore native hook relay returned an unreadable Codex app-server approval result."
+	};
+}
+function parseRelayJsonResponse(text) {
+	try {
+		const parsed = JSON.parse(text);
+		return isJsonObject(parsed) ? parsed : void 0;
+	} catch {
+		return;
+	}
+}
+function sanitizeRelayDecisionReason(value) {
+	return sanitizeApprovalPreview(value ? {
+		value,
+		clipped: false
+	} : void 0, 240).text;
+}
+function buildDaoCoreToolPolicyRequest(method, requestParams) {
+	if (method === "item/commandExecution/requestApproval") {
+		const command = readPolicyCommand(requestParams);
+		return {
+			toolName: "exec",
+			params: {
+				...command ? { command } : {},
+				...readString$1(requestParams, "cwd") ? { cwd: readString$1(requestParams, "cwd") } : {},
+				approval: requestParams ?? {}
+			}
+		};
+	}
+	if (method === "item/fileChange/requestApproval") return {
+		toolName: "apply_patch",
+		params: requestParams ?? {}
+	};
+	if (method === "item/permissions/requestApproval") return {
+		toolName: "codex_permission_approval",
+		params: requestParams ?? {}
+	};
+}
+function toolPolicyParamsWereRewritten(original, candidate) {
+	if (candidate === original) return false;
+	const originalText = stableJsonText(original);
+	const candidateText = stableJsonText(candidate);
+	return !candidateText || candidateText !== originalText;
+}
+function stableJsonText(value) {
+	if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean") return JSON.stringify(value);
+	if (Array.isArray(value)) {
+		const items = value.map((item) => stableJsonText(item));
+		return items.every((item) => item !== void 0) ? `[${items.join(",")}]` : void 0;
+	}
+	if (isPlainRecord(value)) {
+		const entries = Object.entries(value).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, item]) => {
+			const text = stableJsonText(item);
+			return text === void 0 ? void 0 : `${JSON.stringify(key)}:${text}`;
+		});
+		return entries.every((entry) => entry !== void 0) ? `{${entries.join(",")}}` : void 0;
+	}
+}
+function isPlainRecord(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function commandApprovalDecision(requestParams, outcome) {
+	if (outcome === "cancelled") return commandRejectionDecision(requestParams, "cancel");
+	if (outcome === "denied" || outcome === "unavailable") return commandRejectionDecision(requestParams, "decline");
+	if (outcome === "approved-session") {
+		if (hasAvailableDecision(requestParams, "acceptForSession")) return "acceptForSession";
+		const amendmentDecision = findAvailableCommandAmendmentDecision(requestParams);
+		if (amendmentDecision) return amendmentDecision;
+	}
+	return hasAvailableDecision(requestParams, "accept") ? "accept" : commandRejectionDecision(requestParams, "decline");
+}
+function fileChangeApprovalDecision(outcome) {
+	if (outcome === "cancelled") return "cancel";
+	if (outcome === "denied" || outcome === "unavailable") return "decline";
+	return outcome === "approved-session" ? "acceptForSession" : "accept";
+}
+function requestedPermissions(requestParams) {
+	const permissions = isJsonObject(requestParams?.permissions) ? requestParams.permissions : {};
+	const granted = {};
+	if (isJsonObject(permissions.network)) granted.network = permissions.network;
+	if (isJsonObject(permissions.fileSystem)) granted.fileSystem = permissions.fileSystem;
+	return granted;
+}
+function unsupportedApprovalResponse() {
+	return {
+		decision: "decline",
+		reason: "DaoCore codex app-server bridge does not grant native approvals yet."
+	};
+}
+function describeRequestedPermissions(requestParams) {
+	return describePermissionProfile(requestedPermissions(requestParams), "Permissions");
+}
+function describeCommandApprovalDetails(requestParams) {
+	const lines = [];
+	const additionalPermissions = isJsonObject(requestParams?.additionalPermissions) ? requestParams.additionalPermissions : void 0;
+	if (additionalPermissions) lines.push(...describePermissionProfile(additionalPermissions, "Additional permissions"));
+	const execpolicySummary = summarizeStringArray(requestParams?.proposedExecpolicyAmendment, "Proposed exec policy", sanitizePermissionScalar);
+	if (execpolicySummary) lines.push(execpolicySummary);
+	const networkAmendmentSummary = summarizeNetworkPolicyAmendments(requestParams?.proposedNetworkPolicyAmendments);
+	if (networkAmendmentSummary) lines.push(networkAmendmentSummary);
+	return lines;
+}
+function describePermissionProfile(permissions, label) {
+	const lines = [];
+	const kinds = [];
+	const risks = /* @__PURE__ */ new Set();
+	if (isJsonObject(permissions.network)) kinds.push("network");
+	if (isJsonObject(permissions.fileSystem)) kinds.push("fileSystem");
+	if (kinds.length > 0) lines.push(`${label}: ${kinds.join(", ")}`);
+	let networkSummary;
+	if (isJsonObject(permissions.network)) {
+		const summaries = [summarizeNetworkEnabledPermission(permissions.network, risks), summarizePermissionRecord(permissions.network, risks, [{
+			key: "allowHosts",
+			label: "allowHosts",
+			sanitize: sanitizePermissionHostValue,
+			risksFor: permissionHostRisks
+		}])].filter((summary) => Boolean(summary));
+		networkSummary = summaries.length > 0 ? summaries.join("; ") : void 0;
+	}
+	let fileSystemSummary;
+	if (isJsonObject(permissions.fileSystem)) {
+		const summaries = [summarizePermissionRecord(permissions.fileSystem, risks, [
+			{
+				key: "read",
+				label: "read",
+				sanitize: sanitizePermissionPathValue,
+				risksFor: permissionPathRisks
+			},
+			{
+				key: "write",
+				label: "write",
+				sanitize: sanitizePermissionPathValue,
+				risksFor: permissionPathRisks
+			},
+			{
+				key: "roots",
+				label: "roots",
+				sanitize: sanitizePermissionPathValue,
+				risksFor: permissionPathRisks
+			},
+			{
+				key: "readPaths",
+				label: "readPaths",
+				sanitize: sanitizePermissionPathValue,
+				risksFor: permissionPathRisks
+			},
+			{
+				key: "writePaths",
+				label: "writePaths",
+				sanitize: sanitizePermissionPathValue,
+				risksFor: permissionPathRisks
+			}
+		]), summarizeFileSystemEntries(permissions.fileSystem, risks)].filter((summary) => Boolean(summary));
+		fileSystemSummary = summaries.length > 0 ? summaries.join("; ") : void 0;
+	}
+	if (risks.size > 0) lines.push(`High-risk targets: ${[...risks].join(", ")}`);
+	if (networkSummary) lines.push(`Network ${networkSummary}`);
+	if (fileSystemSummary) lines.push(`File system ${fileSystemSummary}`);
+	return lines;
+}
+function summarizeNetworkEnabledPermission(permission, risks) {
+	const enabled = permission.enabled;
+	if (typeof enabled !== "boolean") return;
+	if (enabled) risks.add("network access");
+	return `enabled: ${enabled}`;
+}
+function summarizeFileSystemEntries(permission, risks) {
+	const entries = permission.entries;
+	if (!Array.isArray(entries)) return;
+	const samples = [];
+	let count = 0;
+	for (const entry of entries) {
+		const item = isJsonObject(entry) ? entry : void 0;
+		const path = typeof item?.path === "string" ? item.path.trim() : "";
+		const access = typeof item?.access === "string" ? item.access.trim() : "";
+		if (!path || !access) continue;
+		count += 1;
+		if (access !== "none") for (const risk of permissionPathRisks(path)) risks.add(risk);
+		if (samples.length < PERMISSION_SAMPLE_LIMIT) samples.push(`${sanitizePermissionScalar(access)} ${sanitizePermissionPathValue(path)}`);
+	}
+	if (count === 0) return;
+	const remaining = count - samples.length;
+	const remainderSuffix = remaining > 0 ? ` (+${remaining} more)` : "";
+	return `entries: ${samples.join(", ")}${remainderSuffix}`;
+}
+function summarizePermissionRecord(permission, risks, descriptors) {
+	const details = [];
+	for (const descriptor of descriptors) {
+		const summary = summarizePermissionArray(permission, descriptor, risks);
+		if (summary) details.push(summary);
+	}
+	return details.length > 0 ? details.join("; ") : void 0;
+}
+function summarizePermissionArray(record, descriptor, risks) {
+	const values = readStringArray(record, descriptor.key);
+	if (values.length === 0) return;
+	for (const value of values) for (const risk of descriptor.risksFor(value)) risks.add(risk);
+	const sampleValues = values.slice(0, PERMISSION_SAMPLE_LIMIT).map(descriptor.sanitize).filter(Boolean);
+	if (sampleValues.length === 0) return `${descriptor.label}: ${values.length}`;
+	const remaining = values.length - sampleValues.length;
+	const remainderSuffix = remaining > 0 ? ` (+${remaining} more)` : "";
+	return `${descriptor.label}: ${sampleValues.join(", ")}${remainderSuffix}`;
+}
+function summarizeStringArray(value, label, sanitize) {
+	if (!Array.isArray(value)) return;
+	const values = value.filter((entry) => typeof entry === "string").map((entry) => sanitize(entry)).filter(Boolean);
+	if (values.length === 0) return;
+	const samples = values.slice(0, PERMISSION_SAMPLE_LIMIT);
+	const remaining = values.length - samples.length;
+	const remainderSuffix = remaining > 0 ? ` (+${remaining} more)` : "";
+	return `${label}: ${samples.join(", ")}${remainderSuffix}`;
+}
+function summarizeNetworkPolicyAmendments(value) {
+	if (!Array.isArray(value)) return;
+	const samples = [];
+	let count = 0;
+	for (const entry of value) {
+		const amendment = isJsonObject(entry) ? entry : void 0;
+		const host = typeof amendment?.host === "string" ? amendment.host : "";
+		const action = typeof amendment?.action === "string" ? amendment.action : "";
+		if (!host || !action) continue;
+		count += 1;
+		if (samples.length < PERMISSION_SAMPLE_LIMIT) samples.push(`${sanitizePermissionScalar(action)} ${sanitizePermissionHostValue(host)}`);
+	}
+	if (count === 0) return;
+	const remaining = count - samples.length;
+	const remainderSuffix = remaining > 0 ? ` (+${remaining} more)` : "";
+	return `Proposed network policy: ${samples.join(", ")}${remainderSuffix}`;
+}
+function readStringArray(record, key) {
+	const value = record[key];
+	return Array.isArray(value) ? value.map((entry) => typeof entry === "string" ? entry.trim() : "").filter(Boolean) : [];
+}
+function sanitizePermissionHostValue(value) {
+	const withoutScheme = sanitizePermissionScalar(value).toLowerCase().replace(/^[a-z][a-z0-9+.-]*:\/\//, "");
+	const authority = withoutScheme.split(/[/?#]/, 1)[0] ?? withoutScheme;
+	return truncate(authority.includes("@") ? authority.slice(authority.lastIndexOf("@") + 1) : authority, PERMISSION_VALUE_MAX_LENGTH);
+}
+function sanitizePermissionPathValue(value) {
+	return truncate(formatApprovalDisplayPath(sanitizePermissionScalar(value)), PERMISSION_VALUE_MAX_LENGTH);
+}
+function sanitizePermissionScalar(value) {
+	return sanitizeVisibleScalar(value);
+}
+function permissionHostRisks(value) {
+	const normalized = value.trim().toLowerCase();
+	const risks = [];
+	if (normalized.includes("*")) {
+		risks.push("wildcard hosts");
+		if (isPrivateNetworkHostPattern(normalized)) risks.push("private-network wildcards");
+	}
+	return risks;
+}
+function permissionPathRisks(value) {
+	const normalized = sanitizePermissionScalar(value);
+	const risks = [];
+	if (normalized === "/" || normalized === "\\" || /^[A-Za-z]:[\\/]*$/.test(normalized)) risks.push("filesystem root");
+	return risks;
+}
+function isPrivateNetworkHostPattern(value) {
+	const wildcardStripped = value.toLowerCase().replace(/^\*\./, "");
+	if (wildcardStripped === "localhost" || wildcardStripped === "local" || wildcardStripped === "internal" || wildcardStripped === "lan" || wildcardStripped === "home" || wildcardStripped === "corp" || wildcardStripped === "private" || wildcardStripped.endsWith(".local") || wildcardStripped.endsWith(".internal") || wildcardStripped.endsWith(".lan") || wildcardStripped.endsWith(".home") || wildcardStripped.endsWith(".corp") || wildcardStripped.endsWith(".private")) return true;
+	if (wildcardStripped.startsWith("10.") || wildcardStripped.startsWith("127.") || wildcardStripped.startsWith("192.168.") || wildcardStripped.startsWith("169.254.")) return true;
+	return /^172\.(1[6-9]|2\d|3[0-1])\./.test(wildcardStripped);
+}
+function hasAvailableDecision(requestParams, decision) {
+	const available = requestParams?.availableDecisions;
+	if (!Array.isArray(available)) return true;
+	return available.includes(decision);
+}
+function findAvailableCommandAmendmentDecision(requestParams) {
+	const available = requestParams?.availableDecisions;
+	if (!Array.isArray(available)) return;
+	return available.find((entry) => isJsonObject(entry) && (isJsonObject(entry.acceptWithExecpolicyAmendment) || isJsonObject(entry.applyNetworkPolicyAmendment)));
+}
+function commandRejectionDecision(requestParams, preferred) {
+	const available = requestParams?.availableDecisions;
+	if (!Array.isArray(available)) return preferred;
+	if (available.includes(preferred)) return preferred;
+	const alternate = preferred === "decline" ? "cancel" : "decline";
+	if (available.includes(alternate)) return alternate;
+	return preferred;
+}
+function approvalResolutionMessage(outcome) {
+	if (outcome === "approved-session") return "Codex app-server approval granted for the session.";
+	if (outcome === "approved-once") return "Codex app-server approval granted for this turn.";
+	if (outcome === "cancelled") return "Codex app-server approval cancelled.";
+	if (outcome === "unavailable") return "Codex app-server approval unavailable.";
+	return "Codex app-server approval denied.";
+}
+function approvalScopeForOutcome(outcome) {
+	return outcome === "approved-session" ? "session" : "turn";
+}
+function approvalEventScope(method, outcome) {
+	return method === "item/permissions/requestApproval" ? { scope: approvalScopeForOutcome(outcome) } : {};
+}
+function approvalKindForMethod(method) {
+	if (method.includes("commandExecution") || method.includes("execCommand")) return "exec";
+	if (method.includes("fileChange") || method.includes("Patch") || method.includes("permissions")) return "plugin";
+	return "unknown";
+}
+function isSupportedAppServerApprovalMethod(method) {
+	return method === "item/commandExecution/requestApproval" || method === "item/fileChange/requestApproval" || method === "item/permissions/requestApproval";
+}
+function emitApprovalEvent(params, data) {
+	params.onAgentEvent?.({
+		stream: "approval",
+		data
+	});
+}
+function readDisplayCommandPreview(record) {
+	const actionCommand = readCommandActionsPreview(record);
+	if (actionCommand) return actionCommand;
+	return readCommandPreview(record);
+}
+function readPolicyCommand(record) {
+	const command = record?.command;
+	if (typeof command === "string") return command;
+	if (Array.isArray(command) && command.every((part) => typeof part === "string")) return command.join(" ");
+	const actionCommands = readCommandActions(record);
+	if (actionCommands.length > 0) return actionCommands.join(" && ");
+}
+function readCommandActions(record) {
+	const actions = record?.commandActions;
+	if (!Array.isArray(actions)) return [];
+	return actions.map((action) => isJsonObject(action) ? readString$1(action, "command") : void 0).filter((command) => Boolean(command));
+}
+function readCommandActionsPreview(record) {
+	let source;
+	for (const command of readCommandActions(record)) {
+		source = appendPreviewPart(source, command, " && ");
+		if (source.clipped) break;
+	}
+	return source;
+}
+function readCommandPreview(record) {
+	const command = record?.command;
+	if (typeof command === "string") return previewSource(command);
+	if (!Array.isArray(command)) return;
+	let source;
+	for (const part of command) {
+		if (typeof part !== "string") return;
+		source = appendPreviewPart(source, part, " ");
+		if (source.clipped) break;
+	}
+	return source;
+}
+function readStringPreview(record, key) {
+	const value = readString$1(record, key);
+	return value === void 0 ? void 0 : previewSource(value);
+}
+function readString$1(record, key) {
+	const value = record?.[key];
+	return typeof value === "string" ? value : void 0;
+}
+function truncate(value, maxLength) {
+	return value.length <= maxLength ? value : `${value.slice(0, Math.max(0, maxLength - 3))}...`;
+}
+function previewSource(value) {
+	return {
+		value: value.slice(0, APPROVAL_PREVIEW_SCAN_MAX_LENGTH),
+		clipped: value.length > APPROVAL_PREVIEW_SCAN_MAX_LENGTH
+	};
+}
+function appendPreviewPart(source, part, separator) {
+	const value = `${source?.value ? `${source.value}${separator}` : ""}${part}`;
+	const clipped = source?.clipped === true || value.length > APPROVAL_PREVIEW_SCAN_MAX_LENGTH;
+	return {
+		value: value.slice(0, APPROVAL_PREVIEW_SCAN_MAX_LENGTH),
+		clipped
+	};
+}
+function sanitizeApprovalPreview(source, maxLength) {
+	if (!source || !source.value) return { omitted: false };
+	const sanitized = sanitizeVisibleScalar(source.value.replace(DANGLING_TERMINAL_SEQUENCE_SUFFIX_RE$1, ""));
+	if (!sanitized) return { omitted: true };
+	return {
+		text: formatCodexDisplayText(truncate(sanitized, maxLength)),
+		omitted: source.clipped
+	};
+}
+function sanitizeVisibleScalar(value) {
+	return value.replace(ANSI_OSC_SEQUENCE_RE$1, "").replace(ANSI_CONTROL_SEQUENCE_RE$1, "").replace(INVISIBLE_FORMATTING_CONTROL_RE$1, " ").replace(CONTROL_CHARACTER_RE$1, " ").replace(/\s+/g, " ").trim();
+}
+function formatApprovalPreviewSubject(text, omitted) {
+	return omitted ? `${text} ${APPROVAL_PREVIEW_OMITTED}` : text;
+}
+function joinDescriptionLinesWithinLimit(lines, maxLength) {
+	let description = "";
+	for (const line of lines) {
+		const prefix = description ? "\n" : "";
+		const next = `${description}${prefix}${line}`;
+		if (next.length <= maxLength) {
+			description = next;
+			continue;
+		}
+		const remaining = maxLength - description.length - prefix.length;
+		if (remaining < 3) break;
+		description += `${prefix}${truncate(line, remaining)}`;
+		break;
+	}
+	return description;
+}
+function formatErrorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region extensions/codex/src/app-server/dynamic-tool-diagnostics.ts
+function emitDynamicToolStartedDiagnostic(params) {
+	emitTrustedDiagnosticEvent({
+		type: "tool.execution.started",
+		runId: params.runId,
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		toolName: params.call.tool,
+		toolCallId: params.call.callId
+	});
+}
+function emitDynamicToolErrorDiagnostic(params) {
+	emitTrustedDiagnosticEvent({
+		type: "tool.execution.error",
+		runId: params.runId,
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		toolName: params.call.tool,
+		toolCallId: params.call.callId,
+		durationMs: params.durationMs,
+		errorCategory: "codex_dynamic_tool_error"
+	});
+}
+function emitDynamicToolTerminalDiagnostic(params) {
+	const terminalType = params.response.diagnosticTerminalType ?? (params.response.success ? "completed" : "error");
+	if (terminalType === "completed") {
+		emitTrustedDiagnosticEvent({
+			type: "tool.execution.completed",
+			runId: params.runId,
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			toolName: params.call.tool,
+			toolCallId: params.call.callId,
+			durationMs: params.durationMs
+		});
+		return;
+	}
+	if (terminalType === "blocked") {
+		emitTrustedDiagnosticEvent({
+			type: "tool.execution.blocked",
+			runId: params.runId,
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			toolName: params.call.tool,
+			toolCallId: params.call.callId,
+			deniedReason: "plugin-before-tool-call",
+			reason: "Tool call blocked"
+		});
+		return;
+	}
+	emitDynamicToolErrorDiagnostic(params);
+}
+//#endregion
+//#region extensions/codex/src/app-server/elicitation-bridge.ts
+const MCP_TOOL_APPROVAL_KIND = "mcp_tool_call";
+const MCP_TOOL_APPROVAL_KIND_KEY = "codex_approval_kind";
+const MCP_TOOL_APPROVAL_CONNECTOR_NAME_KEY = "connector_name";
+const MCP_TOOL_APPROVAL_TOOL_TITLE_KEY = "tool_title";
+const MCP_TOOL_APPROVAL_TOOL_DESCRIPTION_KEY = "tool_description";
+const MCP_TOOL_APPROVAL_TOOL_PARAMS_DISPLAY_KEY = "tool_params_display";
+const MCP_TOOL_APPROVAL_SOURCE_KEY = "source";
+const MCP_TOOL_APPROVAL_CONNECTOR_SOURCE = "connector";
+const CODEX_APPS_SERVER_NAME = "codex_apps";
+const COMPUTER_USE_APPROVAL_TITLE = "Computer Use approval";
+const EMPTY_OBJECT_SCHEMA = {
+	type: "object",
+	properties: {}
+};
+const PLUGIN_APP_ID_META_KEYS = [
+	"app_id",
+	"appId",
+	"codex_app_id",
+	"codexAppId"
+];
+const PLUGIN_CONNECTOR_ID_META_KEYS = ["connector_id", "connectorId"];
+const PLUGIN_NAME_META_KEYS = [
+	"plugin_name",
+	"pluginName",
+	"codex_plugin_name",
+	"codexPluginName"
+];
+const PLUGIN_CONFIG_KEY_META_KEYS = [
+	"config_key",
+	"configKey",
+	"codex_config_key"
+];
+const PLUGIN_MARKETPLACE_NAME_META_KEYS = [
+	"marketplace_name",
+	"marketplaceName",
+	"codex_marketplace_name",
+	"codexMarketplaceName"
+];
+const MAX_DISPLAY_PARAM_ENTRIES = 8;
+const MAX_DISPLAY_PARAM_VALUE_LENGTH = 120;
+const MAX_DISPLAY_VALUE_ARRAY_ITEMS = 8;
+const MAX_DISPLAY_VALUE_OBJECT_KEYS = 8;
+const MAX_DISPLAY_VALUE_DEPTH = 3;
+const DISPLAY_TEXT_SCAN_MAX_LENGTH = 4096;
+const ANSI_OSC_SEQUENCE_RE = new RegExp(String.raw`(?:\u001b]|\u009d)[^\u001b\u009c\u0007]*(?:\u0007|\u001b\\|\u009c)`, "g");
+const ANSI_CONTROL_SEQUENCE_RE = new RegExp(String.raw`(?:\u001b\[[0-?]*[ -/]*[@-~]|\u009b[0-?]*[ -/]*[@-~]|\u001b[@-Z\\-_])`, "g");
+const CONTROL_CHARACTER_RE = new RegExp(String.raw`[\u0000-\u001f\u007f-\u009f]+`, "g");
+const INVISIBLE_FORMATTING_CONTROL_RE = new RegExp(String.raw`[\u00ad\u034f\u061c\u200b-\u200f\u202a-\u202e\u2060-\u206f\ufeff\ufe00-\ufe0f\u{e0100}-\u{e01ef}]`, "gu");
+const DANGLING_TERMINAL_SEQUENCE_SUFFIX_RE = new RegExp(String.raw`(?:\u001b\][^\u001b\u009c\u0007]*|\u009d[^\u001b\u009c\u0007]*|\u001b\[[0-?]*[ -/]*|\u009b[0-?]*[ -/]*|\u001b)$`);
+async function handleCodexAppServerElicitationRequest(params) {
+	const requestParams = isJsonObject(params.requestParams) ? params.requestParams : void 0;
+	if (!requestParams) return;
+	if (!matchesCurrentThread(requestParams, params.threadId)) return;
+	if (turnIdMismatches(requestParams, params.turnId)) return;
+	const pluginResolution = resolvePluginElicitation({
+		requestParams,
+		pluginAppPolicyContext: params.pluginAppPolicyContext
+	});
+	if (pluginResolution.kind !== "not_plugin") {
+		if (pluginResolution.kind === "decline") {
+			logPluginElicitationDecline(pluginResolution.reason, requestParams);
+			return declineElicitationResponse();
+		}
+		if (!hasExactTurnId(requestParams, params.turnId)) {
+			logPluginElicitationDecline("missing_active_turn", requestParams);
+			return declineElicitationResponse();
+		}
+		return buildPluginPolicyElicitationResponse(pluginResolution.entry, requestParams);
+	}
+	const approvalPrompt = readComputerUseApprovalElicitation(requestParams, params.computerUseMcpServerName) ?? readBridgeableApprovalElicitation(requestParams);
+	if (!approvalPrompt) return;
+	const outcome = await requestPluginApprovalOutcome({
+		paramsForRun: params.paramsForRun,
+		title: approvalPrompt.title,
+		description: approvalPrompt.description,
+		signal: params.signal
+	});
+	return buildElicitationResponse(approvalPrompt.requestedSchema, approvalPrompt.meta, outcome);
+}
+function matchesCurrentThread(requestParams, threadId) {
+	if (!requestParams) return false;
+	return readString(requestParams, "threadId") === threadId;
+}
+function turnIdMismatches(requestParams, turnId) {
+	const rawTurnId = requestParams?.turnId;
+	return rawTurnId !== null && rawTurnId !== void 0 && rawTurnId !== turnId;
+}
+function hasExactTurnId(requestParams, turnId) {
+	return requestParams?.turnId === turnId;
+}
+function resolvePluginElicitation(params) {
+	const requestParams = params.requestParams;
+	if (!requestParams) return { kind: "not_plugin" };
+	const meta = isJsonObject(requestParams["_meta"]) ? requestParams["_meta"] : {};
+	const context = params.pluginAppPolicyContext;
+	const entries = context ? Object.values(context.apps) : [];
+	const appId = readFirstString(meta, PLUGIN_APP_ID_META_KEYS) ?? readFirstString(requestParams, PLUGIN_APP_ID_META_KEYS);
+	const connectorId = readFirstString(meta, PLUGIN_CONNECTOR_ID_META_KEYS);
+	const isCodexConnectorApproval = isCodexConnectorApprovalElicitation(requestParams, meta);
+	if (isCodexConnectorApproval && appId && connectorId && appId !== connectorId) return {
+		kind: "decline",
+		reason: "app_id_connector_id_mismatch"
+	};
+	if (appId) {
+		if (!context) return {
+			kind: "decline",
+			reason: "missing_policy_context"
+		};
+		const entry = context.apps[appId];
+		return uniquePluginMatch(entry ? [entry] : [], "app_id");
+	}
+	if (isCodexConnectorApproval && connectorId) {
+		if (!context) return {
+			kind: "decline",
+			reason: "missing_policy_context"
+		};
+		const entry = context.apps[connectorId];
+		return uniquePluginMatch(entry ? [entry] : [], "connector_id");
+	}
+	const serverName = readString(requestParams, "serverName");
+	if (serverName && context) {
+		const matches = entries.filter((entry) => entry.mcpServerNames.includes(serverName));
+		if (matches.length > 0) return uniquePluginMatch(matches, "server_name");
+	}
+	const metadataResolution = resolvePluginStableMetadataMatch({
+		meta,
+		requestParams,
+		entries,
+		context
+	});
+	if (metadataResolution.kind !== "not_plugin") return metadataResolution;
+	if (context && hasDisplayNameOnlyPluginMatch(meta, entries)) return {
+		kind: "decline",
+		reason: "display_name_only"
+	};
+	return { kind: "not_plugin" };
+}
+function isCodexConnectorApprovalElicitation(requestParams, meta) {
+	return readString(requestParams, "serverName") === CODEX_APPS_SERVER_NAME && readString(meta, MCP_TOOL_APPROVAL_KIND_KEY) === MCP_TOOL_APPROVAL_KIND && readString(meta, MCP_TOOL_APPROVAL_SOURCE_KEY) === MCP_TOOL_APPROVAL_CONNECTOR_SOURCE;
+}
+function resolvePluginStableMetadataMatch(params) {
+	const pluginName = readFirstString(params.meta, PLUGIN_NAME_META_KEYS) ?? readFirstString(params.requestParams, PLUGIN_NAME_META_KEYS);
+	const configKey = readFirstString(params.meta, PLUGIN_CONFIG_KEY_META_KEYS) ?? readFirstString(params.requestParams, PLUGIN_CONFIG_KEY_META_KEYS);
+	const marketplaceName = readFirstString(params.meta, PLUGIN_MARKETPLACE_NAME_META_KEYS) ?? readFirstString(params.requestParams, PLUGIN_MARKETPLACE_NAME_META_KEYS);
+	if (!pluginName && !configKey) return { kind: "not_plugin" };
+	if (!params.context) return {
+		kind: "decline",
+		reason: "missing_policy_context"
+	};
+	return uniquePluginMatch(params.entries.filter((entry) => {
+		if (marketplaceName && entry.marketplaceName !== marketplaceName) return false;
+		if (pluginName && entry.pluginName !== pluginName) return false;
+		if (configKey && entry.configKey !== configKey) return false;
+		return true;
+	}), "metadata");
+}
+function uniquePluginMatch(matches, source) {
+	if (matches.length === 1 && matches[0]) return {
+		kind: "matched",
+		entry: matches[0]
+	};
+	return {
+		kind: "decline",
+		reason: matches.length === 0 ? `${source}_not_enabled` : `${source}_ambiguous`
+	};
+}
+function hasDisplayNameOnlyPluginMatch(meta, entries) {
+	const connectorName = readString(meta, MCP_TOOL_APPROVAL_CONNECTOR_NAME_KEY);
+	if (!connectorName) return false;
+	const normalized = normalizePluginIdentityText(connectorName);
+	return entries.some((entry) => normalizePluginIdentityText(entry.pluginName) === normalized || normalizePluginIdentityText(entry.configKey) === normalized);
+}
+function normalizePluginIdentityText(value) {
+	return value.toLowerCase().replace(/[^a-z0-9]+/g, "");
+}
+function buildPluginPolicyElicitationResponse(entry, requestParams) {
+	if (!entry.allowDestructiveActions) {
+		logPluginElicitationDecline("destructive_actions_disabled", requestParams);
+		return declineElicitationResponse();
+	}
+	if (readString(requestParams, "mode") !== "form" || !isJsonObject(requestParams.requestedSchema)) {
+		logPluginElicitationDecline("unsupported_schema", requestParams);
+		return declineElicitationResponse();
+	}
+	const meta = isJsonObject(requestParams["_meta"]) ? requestParams["_meta"] : {};
+	const response = buildElicitationResponse(requestParams.requestedSchema, meta, "approved-once");
+	if (isJsonObject(response) && response.action === "accept") return response;
+	logPluginElicitationDecline("unmappable_schema", requestParams);
+	return declineElicitationResponse();
+}
+function declineElicitationResponse() {
+	return {
+		action: "decline",
+		content: null,
+		_meta: null
+	};
+}
+function logPluginElicitationDecline(reason, requestParams) {
+	log.debug("codex plugin elicitation declined", {
+		reason,
+		serverName: readString(requestParams, "serverName"),
+		mode: readString(requestParams, "mode")
+	});
+}
+function readBridgeableApprovalElicitation(requestParams) {
+	if (!requestParams || readString(requestParams, "mode") !== "form" || !isJsonObject(requestParams["_meta"]) || requestParams["_meta"][MCP_TOOL_APPROVAL_KIND_KEY] !== MCP_TOOL_APPROVAL_KIND || !isJsonObject(requestParams.requestedSchema)) return;
+	const requestedSchema = requestParams.requestedSchema;
+	if (readString(requestedSchema, "type") !== "object" || !isJsonObject(requestedSchema.properties)) return;
+	const title = sanitizeDisplayText(readString(requestParams, "message") ?? "") || "Codex MCP tool approval";
+	return {
+		title,
+		description: buildApprovalDescription({
+			title,
+			meta: requestParams["_meta"],
+			requestedSchema,
+			serverName: sanitizeOptionalDisplayText(readString(requestParams, "serverName"))
+		}),
+		requestedSchema,
+		meta: requestParams["_meta"]
+	};
+}
+function readComputerUseApprovalElicitation(requestParams, expectedServerName) {
+	const serverName = readString(requestParams, "serverName");
+	if (!serverName || !expectedServerName || serverName !== expectedServerName || readString(requestParams, "mode") !== "form") return;
+	const requestedSchema = isJsonObject(requestParams?.requestedSchema) ? requestParams.requestedSchema : EMPTY_OBJECT_SCHEMA;
+	if (readString(requestedSchema, "type") !== "object" || !isJsonObject(requestedSchema.properties)) return;
+	const meta = isJsonObject(requestParams?.["_meta"]) ? requestParams["_meta"] : {};
+	const title = sanitizeDisplayText(readString(requestParams, "message") ?? "") || COMPUTER_USE_APPROVAL_TITLE;
+	return {
+		title,
+		description: buildApprovalDescription({
+			title,
+			meta,
+			requestedSchema,
+			serverName: sanitizeOptionalDisplayText(serverName)
+		}),
+		requestedSchema,
+		meta
+	};
+}
+function buildApprovalDescription(params) {
+	const connectorName = sanitizeOptionalDisplayText(readString(params.meta, MCP_TOOL_APPROVAL_CONNECTOR_NAME_KEY));
+	const toolTitle = sanitizeOptionalDisplayText(readString(params.meta, MCP_TOOL_APPROVAL_TOOL_TITLE_KEY));
+	const toolDescription = sanitizeOptionalDisplayText(readString(params.meta, MCP_TOOL_APPROVAL_TOOL_DESCRIPTION_KEY));
+	const summaryLines = [
+		connectorName && `App: ${connectorName}`,
+		toolTitle && `Tool: ${toolTitle}`,
+		params.serverName && `MCP server: ${params.serverName}`,
+		toolDescription
+	].filter((line) => Boolean(line));
+	const paramLines = readDisplayParamLines(params.meta);
+	const propertyLines = readPropertyDescriptionLines(params.requestedSchema);
+	return [
+		params.title,
+		summaryLines.join("\n"),
+		paramLines.length > 0 ? ["Parameters:", ...paramLines].join("\n") : "",
+		propertyLines.length > 0 ? ["Fields:", ...propertyLines].join("\n") : ""
+	].filter(Boolean).join("\n\n");
+}
+function readPropertyDescriptionLines(requestedSchema) {
+	const properties = isJsonObject(requestedSchema.properties) ? requestedSchema.properties : {};
+	return Object.entries(properties).map(([name, value]) => {
+		const schema = isJsonObject(value) ? value : void 0;
+		if (!schema) return;
+		const propTitle = sanitizeDisplayText(readString(schema, "title") ?? "") || sanitizeDisplayText(name) || "field";
+		const description = sanitizeOptionalDisplayText(readString(schema, "description"));
+		return description ? `- ${propTitle}: ${description}` : `- ${propTitle}`;
+	}).filter((line) => Boolean(line));
+}
+function readDisplayParamLines(meta) {
+	const displayParams = meta[MCP_TOOL_APPROVAL_TOOL_PARAMS_DISPLAY_KEY];
+	if (!Array.isArray(displayParams)) return [];
+	const lines = displayParams.slice(0, MAX_DISPLAY_PARAM_ENTRIES).map((entry) => {
+		const param = isJsonObject(entry) ? entry : void 0;
+		if (!param) return;
+		const name = sanitizeOptionalDisplayText(readString(param, "display_name")) ?? sanitizeOptionalDisplayText(readString(param, "name"));
+		if (!name) return;
+		return `- ${name}: ${formatDisplayParamValue(param.value)}`;
+	}).filter((line) => Boolean(line));
+	const remaining = displayParams.length - MAX_DISPLAY_PARAM_ENTRIES;
+	return remaining > 0 ? [...lines, `- Additional parameters: ${remaining} more`] : lines;
+}
+function formatDisplayParamValue(value) {
+	return truncateDisplayText(sanitizeDisplayText(typeof value === "string" ? value : formatDisplayJsonValue(value ?? null)), MAX_DISPLAY_PARAM_VALUE_LENGTH);
+}
+function formatDisplayJsonValue(value, depth = MAX_DISPLAY_VALUE_DEPTH) {
+	if (value === null) return "null";
+	if (typeof value === "string") return JSON.stringify(truncateDisplayText(sanitizeDisplayText(value), 80));
+	if (typeof value === "number" || typeof value === "boolean") return String(value);
+	if (Array.isArray(value)) {
+		if (depth <= 0) return "[truncated]";
+		const parts = [];
+		const limit = Math.min(value.length, MAX_DISPLAY_VALUE_ARRAY_ITEMS);
+		for (let i = 0; i < limit; i += 1) parts.push(formatDisplayJsonValue(value[i] ?? null, depth - 1));
+		if (value.length > MAX_DISPLAY_VALUE_ARRAY_ITEMS) parts.push("...");
+		return `[${parts.join(",")}]`;
+	}
+	if (typeof value === "object") {
+		if (depth <= 0) return "{truncated}";
+		const parts = [];
+		let count = 0;
+		let truncated = false;
+		for (const key in value) {
+			if (!Object.prototype.hasOwnProperty.call(value, key)) continue;
+			if (count >= MAX_DISPLAY_VALUE_OBJECT_KEYS) {
+				truncated = true;
+				break;
+			}
+			const safeKey = truncateDisplayText(sanitizeDisplayText(key), 80);
+			parts.push(`${JSON.stringify(safeKey)}:${formatDisplayJsonValue(value[key] ?? null, depth - 1)}`);
+			count += 1;
+		}
+		if (truncated) parts.push("...");
+		return `{${parts.join(",")}}`;
+	}
+	return "null";
+}
+function sanitizeOptionalDisplayText(value) {
+	return (value === void 0 ? "" : sanitizeDisplayText(value)) || void 0;
+}
+function sanitizeDisplayText(value) {
+	const scanned = value.slice(0, DISPLAY_TEXT_SCAN_MAX_LENGTH);
+	const clipped = value.length > DISPLAY_TEXT_SCAN_MAX_LENGTH;
+	const sanitized = scanned.replace(ANSI_OSC_SEQUENCE_RE, "").replace(ANSI_CONTROL_SEQUENCE_RE, "").replace(DANGLING_TERMINAL_SEQUENCE_SUFFIX_RE, "").replace(INVISIBLE_FORMATTING_CONTROL_RE, " ").replace(CONTROL_CHARACTER_RE, " ").replace(/\s+/g, " ").trim();
+	const escaped = sanitized ? formatCodexDisplayText(sanitized) : "";
+	return clipped && escaped ? `${escaped}...` : escaped;
+}
+function truncateDisplayText(value, maxLength) {
+	return value.length <= maxLength ? value : `${value.slice(0, Math.max(0, maxLength - 3))}...`;
+}
+async function requestPluginApprovalOutcome(params) {
+	try {
+		const requestResult = await requestPluginApproval({
+			paramsForRun: params.paramsForRun,
+			title: params.title,
+			description: params.description,
+			severity: "warning",
+			toolName: "codex_mcp_tool_approval"
+		});
+		const approvalId = requestResult?.id;
+		if (!approvalId) return "unavailable";
+		return mapExecDecisionToOutcome(approvalRequestExplicitlyUnavailable(requestResult) ? null : await waitForPluginApprovalDecision({
+			approvalId,
+			signal: params.signal
+		}));
+	} catch {
+		return params.signal?.aborted ? "cancelled" : "denied";
+	}
+}
+function buildElicitationResponse(requestedSchema, meta, outcome) {
+	if (outcome === "cancelled") return {
+		action: "cancel",
+		content: null,
+		_meta: null
+	};
+	if (outcome === "denied" || outcome === "unavailable") return {
+		action: "decline",
+		content: null,
+		_meta: null
+	};
+	const content = buildAcceptedContent(requestedSchema, meta, outcome);
+	if (!content) {
+		if (hasNoSchemaProperties(requestedSchema)) return {
+			action: "accept",
+			content: null,
+			_meta: buildAcceptedMeta(meta, outcome)
+		};
+		log.warn("codex MCP approval elicitation approved without a mappable response", {
+			approvalKind: meta[MCP_TOOL_APPROVAL_KIND_KEY],
+			fields: Object.keys(requestedSchema.properties ?? {}),
+			outcome
+		});
+		return {
+			action: "decline",
+			content: null,
+			_meta: null
+		};
+	}
+	return {
+		action: "accept",
+		content,
+		_meta: buildAcceptedMeta(meta, outcome)
+	};
+}
+function buildAcceptedContent(requestedSchema, meta, outcome) {
+	const properties = isJsonObject(requestedSchema.properties) ? requestedSchema.properties : void 0;
+	if (!properties) return;
+	const required = Array.isArray(requestedSchema.required) ? new Set(requestedSchema.required.filter((entry) => typeof entry === "string")) : /* @__PURE__ */ new Set();
+	const content = {};
+	let sawApprovalField = false;
+	for (const [name, value] of Object.entries(properties)) {
+		const schema = isJsonObject(value) ? value : void 0;
+		if (!schema) continue;
+		const property = {
+			name,
+			schema,
+			required: required.has(name)
+		};
+		const next = readApprovalFieldValue(property, outcome) ?? readPersistFieldValue(property, meta, outcome) ?? readFallbackFieldValue(property, outcome);
+		if (next === void 0) {
+			if (isApprovalField(property)) sawApprovalField = true;
+			if (property.required) return;
+			continue;
+		}
+		if (isApprovalField(property)) sawApprovalField = true;
+		content[name] = next;
+	}
+	return sawApprovalField ? content : void 0;
+}
+function readApprovalFieldValue(property, outcome) {
+	if (!isApprovalField(property)) return;
+	if (readString(property.schema, "type") === "boolean") return true;
+	const options = readEnumOptions(property.schema);
+	if (options.length === 0) return;
+	const sessionChoice = options.find((option) => isSessionApprovalOption(option));
+	const acceptChoice = options.find((option) => isPositiveApprovalOption(option));
+	if (outcome === "approved-session") return sessionChoice?.value ?? acceptChoice?.value;
+	return acceptChoice?.value ?? sessionChoice?.value;
+}
+function readPersistFieldValue(property, meta, outcome) {
+	if (!isPersistField(property) || outcome !== "approved-session") return;
+	const persistHints = readPersistHints(meta);
+	const options = readEnumOptions(property.schema);
+	if (options.length === 0) return;
+	const preferred = choosePersistHint(persistHints);
+	if (preferred) return options.find((option) => option.value === preferred || option.label === preferred)?.value;
+}
+function readDefaultValue(schema) {
+	return schema.default;
+}
+function readFallbackFieldValue(property, outcome) {
+	if (outcome === "approved-once" && isPersistField(property)) return;
+	return readDefaultValue(property.schema);
+}
+function isApprovalField(property) {
+	const haystack = propertyText(property).toLowerCase();
+	return /\b(approve|approval|allow|accept|decision)\b/.test(haystack);
+}
+function isPersistField(property) {
+	const haystack = propertyText(property).toLowerCase();
+	return /\b(persist|session|always|scope)\b/.test(haystack);
+}
+function propertyText(property) {
+	return [
+		property.name,
+		readString(property.schema, "title"),
+		readString(property.schema, "description")
+	].filter(Boolean).join(" ");
+}
+function readPersistHints(meta) {
+	const raw = meta.persist;
+	if (typeof raw === "string") return [raw];
+	if (Array.isArray(raw)) return raw.filter((entry) => typeof entry === "string");
+	return ["session", "always"];
+}
+function buildAcceptedMeta(meta, outcome) {
+	if (outcome !== "approved-session") return null;
+	const persist = choosePersistHint(readPersistHints(meta));
+	return persist ? { persist } : null;
+}
+function choosePersistHint(persistHints) {
+	if (persistHints.includes("always")) return "always";
+	if (persistHints.includes("session")) return "session";
+}
+function hasNoSchemaProperties(requestedSchema) {
+	const properties = isJsonObject(requestedSchema.properties) ? requestedSchema.properties : {};
+	return Object.keys(properties).length === 0;
+}
+function readEnumOptions(schema) {
+	if (Array.isArray(schema.enum)) {
+		const values = schema.enum.filter((entry) => typeof entry === "string");
+		const labels = Array.isArray(schema.enumNames) ? schema.enumNames.filter((entry) => typeof entry === "string") : [];
+		return values.map((value, index) => ({
+			value,
+			label: labels[index] ?? value
+		}));
+	}
+	if (Array.isArray(schema.oneOf)) return schema.oneOf.map((entry) => {
+		const option = isJsonObject(entry) ? entry : void 0;
+		const value = readString(option, "const");
+		if (!value) return;
+		return {
+			value,
+			label: readString(option, "title") ?? value
+		};
+	}).filter((entry) => Boolean(entry));
+	return [];
+}
+function isPositiveApprovalOption(option) {
+	const haystack = `${option.value} ${option.label}`.toLowerCase();
+	return /\b(allow|approve|accept|yes|continue|proceed|true)\b/.test(haystack);
+}
+function isSessionApprovalOption(option) {
+	const haystack = `${option.value} ${option.label}`.toLowerCase();
+	return /\b(session|always|persistent)\b/.test(haystack) && /\b(allow|approve|accept)\b/.test(haystack);
+}
+function readString(record, key) {
+	const value = record?.[key];
+	return typeof value === "string" && value.trim() ? value : void 0;
+}
+function readFirstString(record, keys) {
+	for (const key of keys) {
+		const value = readString(record, key);
+		if (value) return value;
+	}
+}
+//#endregion
+//#region extensions/codex/src/app-server/native-hook-relay.ts
+const CODEX_NATIVE_HOOK_RELAY_EVENTS = [
+	"pre_tool_use",
+	"post_tool_use",
+	"permission_request",
+	"before_agent_finalize"
+];
+const CODEX_HOOK_EVENT_BY_NATIVE_EVENT = {
+	pre_tool_use: "PreToolUse",
+	post_tool_use: "PostToolUse",
+	permission_request: "PermissionRequest",
+	before_agent_finalize: "Stop"
+};
+const CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT = {
+	pre_tool_use: "pre_tool_use",
+	post_tool_use: "post_tool_use",
+	permission_request: "permission_request",
+	before_agent_finalize: "stop"
+};
+const CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS = ["/<session-flags>/config.toml", "<session-flags>/config.toml"];
+function buildCodexNativeHookRelayConfig(params) {
+	const events = params.events?.length ? params.events : CODEX_NATIVE_HOOK_RELAY_EVENTS;
+	const selectedEvents = new Set(events);
+	const config = { "features.hooks": true };
+	const hookState = {};
+	for (const event of CODEX_NATIVE_HOOK_RELAY_EVENTS) {
+		const codexEvent = CODEX_HOOK_EVENT_BY_NATIVE_EVENT[event];
+		const selected = selectedEvents.has(event);
+		if (!selected || !params.relay.shouldRelayEvent(event)) {
+			if (selected || params.clearOmittedEvents) config[`hooks.${codexEvent}`] = [];
+			if (params.clearOmittedEvents) for (const sourcePath of CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS) hookState[`${sourcePath}:${CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT[event]}:0:0`] = { enabled: false };
+			continue;
+		}
+		const command = params.relay.commandForEvent(event);
+		const timeout = normalizeHookTimeoutSec(params.hookTimeoutSec);
+		config[`hooks.${codexEvent}`] = [{ hooks: [{
+			type: "command",
+			command,
+			timeout,
+			async: false,
+			statusMessage: "DaoCore native hook relay"
+		}] }];
+		const state = {
+			enabled: true,
+			trusted_hash: codexCommandHookTrustedHash({
+				event,
+				command,
+				timeout,
+				statusMessage: "DaoCore native hook relay"
+			})
+		};
+		for (const sourcePath of CODEX_SESSION_FLAGS_HOOK_SOURCE_PATHS) hookState[`${sourcePath}:${CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT[event]}:0:0`] = state;
+	}
+	config["hooks.state"] = hookState;
+	return config;
+}
+function buildCodexNativeHookRelayDisabledConfig() {
+	return {
+		"features.hooks": false,
+		"hooks.PreToolUse": [],
+		"hooks.PostToolUse": [],
+		"hooks.PermissionRequest": [],
+		"hooks.Stop": []
+	};
+}
+function normalizeHookTimeoutSec(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.ceil(value) : 5;
+}
+function codexCommandHookTrustedHash(params) {
+	const identity = {
+		event_name: CODEX_HOOK_KEY_LABEL_BY_NATIVE_EVENT[params.event],
+		hooks: [{
+			async: false,
+			command: params.command,
+			statusMessage: params.statusMessage,
+			timeout: params.timeout,
+			type: "command"
+		}]
+	};
+	return `sha256:${createHash("sha256").update(JSON.stringify(sortJsonValue(identity))).digest("hex")}`;
+}
+function sortJsonValue(value) {
+	if (!value || typeof value !== "object") return value;
+	if (Array.isArray(value)) return value.map(sortJsonValue);
+	const sorted = {};
+	for (const key of Object.keys(value).toSorted()) sorted[key] = sortJsonValue(value[key]);
+	return sorted;
+}
+//#endregion
+//#region extensions/codex/src/app-server/vision-tools.ts
+function filterToolsForVisionInputs(tools, params) {
+	if (!params.modelHasVision || !params.hasInboundImages) return tools;
+	return tools.filter((tool) => tool.name !== "image");
+}
+//#endregion
+export { handleCodexAppServerElicitationRequest as a, emitDynamicToolTerminalDiagnostic as c, buildCodexNativeHookRelayDisabledConfig as i, handleCodexAppServerApprovalRequest as l, CODEX_NATIVE_HOOK_RELAY_EVENTS as n, emitDynamicToolErrorDiagnostic as o, buildCodexNativeHookRelayConfig as r, emitDynamicToolStartedDiagnostic as s, filterToolsForVisionInputs as t };