@meetopenbot/codex 1.2.0 → 1.2.1

package/dist/index.js

@@ -1,44 +1,70 @@
-// index.ts
+// src/index.ts
+import { defineAgentPlugin } from "@meetopenbot/plugin-sdk";
+
+// src/config.ts
 import {
-  definePlugin,
-  shouldHandleInvoke,
-  agentOutput,
-  uiWidget,
-  toolTraceWidget,
-  buildDiffWidget,
-  diffFileFromWrite,
-  resolveRunDiffFiles,
-  snapshotWorkspace
+  trimmedString,
+  vendorModelId
 } from "@meetopenbot/plugin-sdk";
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-import {
-  Codex
-} from "@openai/codex-sdk";
-
-// cloud-mode.ts
-var isCloudMode = () => process.env.OPENBOT_CLOUD_MODE === "1";
-var defaultAuthMode = () => isCloudMode() ? "credits" : "byok";
-function resolveAuthMode(config) {
-  if (config.authMode === "byok" || config.authMode === "credits") {
-    return config.authMode;
+var SANDBOX_MODES = [
+  "read-only",
+  "workspace-write",
+  "danger-full-access"
+];
+var APPROVAL_MODES = [
+  "never",
+  "on-request",
+  "on-failure",
+  "untrusted"
+];
+var pluginConfigSchema = {
+  type: "object",
+  properties: {
+    sandboxMode: {
+      type: "string",
+      enum: [...SANDBOX_MODES],
+      description: "Filesystem sandbox: read-only | workspace-write | danger-full-access",
+      default: "workspace-write"
+    },
+    approvalPolicy: {
+      type: "string",
+      enum: [...APPROVAL_MODES],
+      description: "When to require approval: never | on-request | on-failure | untrusted",
+      default: "never"
+    }
   }
-  return defaultAuthMode();
+};
+function resolveCodexConfig(config) {
+  const sandboxRaw = trimmedString(config.sandboxMode);
+  const approvalRaw = trimmedString(config.approvalPolicy);
+  return {
+    model: vendorModelId(trimmedString(config.model)),
+    sandboxMode: sandboxRaw && SANDBOX_MODES.includes(sandboxRaw) ? sandboxRaw : "workspace-write",
+    approvalPolicy: approvalRaw && APPROVAL_MODES.includes(approvalRaw) ? approvalRaw : "never",
+    skipGitRepoCheck: true,
+    codexPathOverride: trimmedString(process.env.CODEX_PATH) ?? trimmedString(process.env.CODEX_CLI_PATH)
+  };
 }
 
-// credits-auth.ts
-var INTEGRATIONS_TOKEN_HEADER = "x-openbot-integrations-token";
-var CREDITS_API_KEY_PLACEHOLDER = "openbot-credits";
+// src/runtime.ts
+import {
+  isCloudMode,
+  llmAuthNotConfiguredMessage,
+  resolveByokApiKey
+} from "@meetopenbot/plugin-sdk";
+import { Codex } from "@openai/codex-sdk";
+
+// src/credits.ts
+import {
+  CREDITS_API_KEY_PLACEHOLDER,
+  CREDITS_NOT_CONFIGURED_MESSAGE,
+  INTEGRATIONS_TOKEN_HEADER,
+  creditsErrorMessage as mapCreditsError,
+  creditsProviderBaseUrl,
+  isAuthErrorMessage,
+  resolveCreditsAuthConfig
+} from "@meetopenbot/plugin-sdk";
 var CREDITS_PROVIDER_ID = "openbot_credits";
-function resolveCreditsAuthConfig() {
-  const baseUrl = process.env.OPENBOT_INTEGRATIONS_BASE_URL?.trim();
-  const token = process.env.OPENBOT_INTEGRATIONS_TOKEN?.trim();
-  if (!baseUrl || !token) return void 0;
-  return { baseUrl: baseUrl.replace(/\/$/, ""), token };
-}
-function creditsProviderBaseUrl(config) {
-  return `${config.baseUrl}/openai/v1`;
-}
 function buildCreditsCodexConfig(config) {
   return {
     model_provider: CREDITS_PROVIDER_ID,
@@ -56,387 +82,74 @@ function buildCreditsCodexConfig(config) {
     }
   };
 }
-function isCreditsErrorMessage(message) {
-  const lower = message.toLowerCase();
-  return lower.includes("insufficient_credits") || lower.includes("insufficient credits") || lower.includes("402");
-}
-function isAuthErrorMessage(message) {
-  const lower = message.toLowerCase();
-  return lower.includes("api key") || lower.includes("apikey") || lower.includes("401") || lower.includes("unauthorized") || lower.includes("authentication") || lower.includes("not logged in") || lower.includes("login");
-}
-function isIntegrationsProviderError(message) {
-  const lower = message.toLowerCase();
-  return lower.includes("provider api key not configured") || lower.includes("503") && lower.includes("provider");
-}
-var CREDITS_NOT_CONFIGURED_MESSAGE = "OpenBot Credits is not configured on this runtime. The cloud host must set OPENBOT_INTEGRATIONS_BASE_URL and OPENBOT_INTEGRATIONS_TOKEN (try redeploying the workspace).";
-var CREDITS_PROVIDER_UNAVAILABLE_MESSAGE = "OpenBot Credits could not reach OpenAI \u2014 the platform provider API key is not configured yet. Try again later or switch this agent to BYOK mode.";
-var CREDITS_AUTH_FAILED_MESSAGE = "Codex could not authenticate via OpenBot Credits. Check your workspace credit balance in settings, or switch this agent to BYOK mode.";
 function creditsErrorMessage(message) {
-  if (isIntegrationsProviderError(message)) {
-    return CREDITS_PROVIDER_UNAVAILABLE_MESSAGE;
-  }
-  if (isCreditsErrorMessage(message)) {
-    return "Insufficient workspace credits. Add credits in workspace settings or switch this agent to BYOK mode.";
-  }
-  if (isAuthErrorMessage(message)) return CREDITS_AUTH_FAILED_MESSAGE;
-  return void 0;
+  return mapCreditsError(message, { agentName: "Codex", providerLabel: "OpenAI" });
 }
 
-// index.ts
-var SANDBOX_MODES = [
-  "read-only",
-  "workspace-write",
-  "danger-full-access"
-];
-var APPROVAL_MODES = [
-  "never",
-  "on-request",
-  "on-failure",
-  "untrusted"
-];
-var LEGACY_SANDBOX = {
-  "workspace-read": "read-only",
-  "full-read": "read-only",
-  "full-write": "danger-full-access"
-};
-var LEGACY_APPROVAL = {
-  always: "on-request",
-  automatic: "on-request"
-};
-var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
-var asString = (value) => typeof value === "string" && value.trim() ? value.trim() : void 0;
-var readPersistedThreadId = (state) => {
-  const source = state.threadDetails?.state ?? state.channelDetails?.state;
-  const record = asRecord(source);
-  return asString(record.codexThreadId);
-};
-var persistThreadId = async (state, storage, codexThreadId) => {
-  if (!storage || !state.channelId) return;
-  const patch = { codexThreadId };
-  if (state.threadId) {
-    await storage.patchThreadState({
-      channelId: state.channelId,
-      threadId: state.threadId,
-      state: patch
-    });
-    return;
-  }
-  await storage.patchChannelState({ channelId: state.channelId, state: patch });
-};
-var parseSandboxMode = (value) => {
-  const raw = asString(value);
-  if (!raw) return "workspace-write";
-  if (SANDBOX_MODES.includes(raw)) return raw;
-  return LEGACY_SANDBOX[raw] ?? "workspace-write";
-};
-var parseApprovalPolicy = (value) => {
-  const raw = asString(value);
-  if (!raw) return "never";
-  if (APPROVAL_MODES.includes(raw)) return raw;
-  return LEGACY_APPROVAL[raw] ?? "never";
-};
-var parseModel = (value) => {
-  const raw = asString(value);
-  if (!raw) return void 0;
-  return raw.split("/").pop() || void 0;
-};
-var itemWidget = (item) => {
-  switch (item.type) {
-    case "command_execution":
-      return {
-        title: "Command",
-        body: [item.command, item.aggregated_output].filter(Boolean).join("\n\n")
-      };
-    case "file_change":
-      return {
-        title: "File change",
-        body: item.changes.map((change) => `${change.kind} ${change.path}`).join("\n")
-      };
-    case "mcp_tool_call":
-      return {
-        title: `${item.server}: ${item.tool}`,
-        body: item.error?.message ?? (item.result ? JSON.stringify(item.result, null, 2) : "")
-      };
-    case "web_search":
-      return { title: "Web search", body: item.query };
-    case "error":
-      return { title: "Error", body: item.message };
-    default:
-      return null;
-  }
-};
-var collectCodexChange = (path, kind, cwd, files) => {
-  if (kind === "add") {
-    try {
-      files.set(path, diffFileFromWrite(path, readFileSync(join(cwd, path), "utf8")));
-      return;
-    } catch {
-    }
+// src/session.ts
+import { threadSession } from "@meetopenbot/plugin-sdk";
+var codexSession = threadSession("codexThreadId");
+
+// src/runtime.ts
+async function runCodexTurn({
+  prompt,
+  handlerCtx,
+  context
+}) {
+  const byok = resolveByokApiKey("openai", ["CODEX_API_KEY"]);
+  const credits = !byok && isCloudMode() ? resolveCreditsAuthConfig() : void 0;
+  if (!byok && !credits) {
+    return llmAuthNotConfiguredMessage("OPENAI_API_KEY");
   }
-  files.set(path, {
-    path,
-    status: kind === "delete" ? "deleted" : kind === "add" ? "added" : "modified"
+  const config = resolveCodexConfig(context.config);
+  const client = new Codex({
+    apiKey: byok ?? credits?.token ?? CREDITS_API_KEY_PLACEHOLDER,
+    ...config.codexPathOverride && { codexPathOverride: config.codexPathOverride },
+    ...credits ? { config: buildCreditsCodexConfig(credits) } : {}
   });
-};
-var errorText = (error) => error instanceof Error ? error.message : "Codex request failed.";
-var buildApiKeyWidget = (agentId, threadId, reason) => uiWidget({
-  agentId,
-  threadId,
-  widget: {
-    kind: "form",
-    widgetId: `codex_api_key_request_${Date.now()}`,
-    title: "OpenAI API Key Required",
-    description: `Codex could not authenticate (${reason}). Provide an OpenAI API key to continue. You can get one from the OpenAI dashboard. The key is stored as a workspace variable on your machine and never leaves your local runtime.`,
-    fields: [
-      {
-        id: "apiKey",
-        label: "API Key",
-        type: "password",
-        placeholder: "sk-...",
-        required: true
-      }
-    ],
-    submitLabel: "Save API Key",
-    metadata: {
-      type: "api_key_request",
-      provider: "openai",
-      envVar: "OPENAI_API_KEY",
-      source: "codex"
+  const workingDirectory = handlerCtx.state.channelDetails?.cwd || process.cwd();
+  const threadOptions = {
+    workingDirectory,
+    skipGitRepoCheck: config.skipGitRepoCheck,
+    sandboxMode: config.sandboxMode,
+    approvalPolicy: config.approvalPolicy,
+    ...config.model && { model: config.model }
+  };
+  const savedId = codexSession.read(handlerCtx.state);
+  const thread = savedId ? client.resumeThread(savedId, threadOptions) : client.startThread(threadOptions);
+  const { events } = await thread.runStreamed(prompt, {
+    signal: context.abortSignal
+  });
+  let text = "";
+  for await (const chunk of events) {
+    if (chunk.type === "thread.started") {
+      await codexSession.write(handlerCtx.state, context.storage, chunk.thread_id);
+      continue;
+    }
+    if (chunk.type === "turn.failed") {
+      return creditsErrorMessage(chunk.error.message) ?? chunk.error.message;
+    }
+    if (chunk.type === "error") {
+      return creditsErrorMessage(chunk.message) ?? chunk.message;
+    }
+    if (chunk.type === "item.completed" && chunk.item.type === "agent_message" && chunk.item.text.trim()) {
+      text = chunk.item.text.trim();
     }
   }
-});
-var plugin = definePlugin({
-  id: "codex",
+  return text;
+}
+
+// src/index.ts
+var plugin = await defineAgentPlugin({
   name: "Codex",
   description: "OpenAI Codex agent. Uses the Codex SDK to read code, edit files, and run shell commands inside the channel's workspace.",
-  configSchema: {
-    type: "object",
-    properties: {
-      ...isCloudMode() ? {
-        authMode: {
-          type: "string",
-          description: "Credits \u2014 use your workspace credit balance via OpenBot. BYOK \u2014 bring your own OpenAI API key.",
-          enum: ["credits", "byok"],
-          default: "credits"
-        }
-      } : {},
-      model: {
-        type: "string",
-        description: "Codex model id (e.g. gpt-5.6). Leave empty to use the CLI default."
-      },
-      sandboxMode: {
-        type: "string",
-        enum: [...SANDBOX_MODES],
-        description: "Filesystem sandbox: read-only | workspace-write | danger-full-access",
-        default: "workspace-write"
-      },
-      approvalPolicy: {
-        type: "string",
-        enum: [...APPROVAL_MODES],
-        description: "When to require approval: never | on-request | on-failure | untrusted",
-        default: "never"
-      },
-      skipGitRepoCheck: {
-        type: "boolean",
-        description: "Skip the Codex git-repo check (needed for non-git channel workspaces)",
-        default: true
-      },
-      codexPathOverride: {
-        type: "string",
-        description: "Path to a local Codex CLI binary"
-      }
-    }
-  },
-  factory: (context) => {
-    const config = context.config;
-    const authMode = resolveAuthMode(config);
-    const codexPathOverride = asString(config.codexPathOverride) ?? process.env.CODEX_PATH ?? process.env.CODEX_CLI_PATH;
-    const model = parseModel(config.model);
-    const sandboxMode = parseSandboxMode(config.sandboxMode);
-    const approvalPolicy = parseApprovalPolicy(config.approvalPolicy);
-    const skipGitRepoCheck = config.skipGitRepoCheck !== false;
-    const createClient = () => {
-      if (authMode === "credits") {
-        const credits = resolveCreditsAuthConfig();
-        if (!credits) return CREDITS_NOT_CONFIGURED_MESSAGE;
-        return new Codex({
-          apiKey: credits.token || CREDITS_API_KEY_PLACEHOLDER,
-          ...codexPathOverride && { codexPathOverride },
-          config: buildCreditsCodexConfig(credits)
-        });
-      }
-      const apiKey = process.env.CODEX_API_KEY ?? process.env.OPENAI_API_KEY;
-      return new Codex({
-        ...asString(apiKey) && { apiKey: asString(apiKey) },
-        ...codexPathOverride && { codexPathOverride }
-      });
-    };
-    return (builder) => {
-      builder.on("agent:invoke", async function* (event, ctx) {
-        if (!shouldHandleInvoke(event, context.agentId)) return;
-        const content = asString(event.data?.content);
-        const openbotThreadId = event.meta?.threadId || ctx.state.threadId;
-        if (!content) {
-          yield agentOutput({
-            agentId: context.agentId,
-            content: "No content provided.",
-            threadId: openbotThreadId
-          });
-          return;
-        }
-        const clientOrError = createClient();
-        if (typeof clientOrError === "string") {
-          yield agentOutput({
-            agentId: context.agentId,
-            content: clientOrError,
-            threadId: openbotThreadId
-          });
-          return;
-        }
-        const workingDirectory = ctx.state.channelDetails?.cwd || process.cwd();
-        const threadOptions = {
-          workingDirectory,
-          skipGitRepoCheck,
-          sandboxMode,
-          approvalPolicy,
-          ...model && { model }
-        };
-        const savedId = readPersistedThreadId(ctx.state);
-        const thread = savedId ? clientOrError.resumeThread(savedId, threadOptions) : clientOrError.startThread(threadOptions);
-        const fail = function* (message) {
-          if (authMode === "credits") {
-            yield agentOutput({
-              agentId: context.agentId,
-              content: creditsErrorMessage(message) ?? `Error: ${message}`,
-              threadId: openbotThreadId
-            });
-            return;
-          }
-          if (isAuthErrorMessage(message)) {
-            yield buildApiKeyWidget(context.agentId, openbotThreadId, message);
-          }
-          yield agentOutput({
-            agentId: context.agentId,
-            content: `Error: ${message}`,
-            threadId: openbotThreadId
-          });
-        };
-        try {
-          const { events } = await thread.runStreamed(content, {
-            signal: context.abortSignal
-          });
-          const snapshot = snapshotWorkspace(workingDirectory);
-          const changedFiles = /* @__PURE__ */ new Map();
-          for await (const chunk of events) {
-            if (chunk.type === "thread.started") {
-              await persistThreadId(ctx.state, context.storage, chunk.thread_id);
-              continue;
-            }
-            if (chunk.type === "turn.failed") {
-              yield* fail(chunk.error.message);
-              return;
-            }
-            if (chunk.type === "error") {
-              yield* fail(chunk.message);
-              return;
-            }
-            if (chunk.type !== "item.started" && chunk.type !== "item.completed") continue;
-            if (chunk.item.type === "agent_message") {
-              if (chunk.type === "item.completed") {
-                yield agentOutput({
-                  agentId: context.agentId,
-                  content: chunk.item.text,
-                  threadId: openbotThreadId
-                });
-              }
-              continue;
-            }
-            if (chunk.type === "item.completed" && chunk.item.type === "file_change" && chunk.item.status === "completed") {
-              for (const change of chunk.item.changes) {
-                collectCodexChange(change.path, change.kind, workingDirectory, changedFiles);
-              }
-            }
-            const widget = itemWidget(chunk.item);
-            if (!widget) continue;
-            yield uiWidget({
-              agentId: context.agentId,
-              threadId: openbotThreadId,
-              widget: toolTraceWidget({
-                widgetId: `codex_${chunk.item.id}`,
-                groupId: "codex:tools",
-                title: widget.title,
-                body: widget.body,
-                state: chunk.type === "item.completed" && (chunk.item.type === "command_execution" && chunk.item.status === "failed" || chunk.item.type === "file_change" && chunk.item.status === "failed" || chunk.item.type === "mcp_tool_call" && chunk.item.status === "failed" || chunk.item.type === "error") ? "error" : chunk.type === "item.completed" ? "submitted" : void 0
-              })
-            });
-          }
-          const diff = buildDiffWidget({
-            widgetId: `codex-diff:${openbotThreadId ?? "run"}:${Date.now()}`,
-            files: resolveRunDiffFiles({
-              snapshot,
-              fallback: changedFiles.values()
-            })
-          });
-          if (diff) {
-            yield uiWidget({
-              agentId: context.agentId,
-              threadId: openbotThreadId,
-              widget: diff
-            });
-          }
-        } catch (error) {
-          yield* fail(errorText(error));
-        }
-      });
-      builder.on("client:ui:widget:response", async function* (event, ctx) {
-        const { metadata, values, widgetId } = event.data ?? {};
-        if (!metadata || metadata.type !== "api_key_request") return;
-        if (metadata.source !== "codex") return;
-        const apiKey = values?.apiKey;
-        if (typeof apiKey !== "string" || !apiKey) return;
-        const envVar = typeof metadata.envVar === "string" ? metadata.envVar : "OPENAI_API_KEY";
-        const storage = context.storage;
-        if (!storage) {
-          yield agentOutput({
-            agentId: context.agentId,
-            content: "[codex] no storage available; cannot persist API key.",
-            threadId: ctx.state.threadId
-          });
-          return;
-        }
-        try {
-          await storage.createVariable({ key: envVar, value: apiKey, secret: true });
-          process.env[envVar] = apiKey;
-          process.env.CODEX_API_KEY = apiKey;
-          yield uiWidget({
-            agentId: context.agentId,
-            widget: {
-              widgetId: widgetId ?? `codex_api_key_saved_${Date.now()}`,
-              kind: "message",
-              title: "API Key Saved",
-              body: `Saved ${envVar} as a workspace variable. You can now continue the conversation.`,
-              state: "submitted"
-            }
-          });
-          yield agentOutput({
-            agentId: context.agentId,
-            content: "Saved OpenAI API key to workspace variables. Re-send your last message to retry.",
-            threadId: ctx.state.threadId
-          });
-        } catch (error) {
-          const errorMessage = error instanceof Error ? error.message : String(error);
-          yield agentOutput({
-            agentId: context.agentId,
-            content: `[codex] failed to save API key: ${errorMessage}`,
-            threadId: ctx.state.threadId
-          });
-        }
-      });
-    };
-  }
+  models: { providers: ["openai"], default: "openai/gpt-5.6-luna" },
+  configSchema: pluginConfigSchema,
+  emptyPrompt: "Send a message to run Codex in this workspace.",
+  run: runCodexTurn
 });
-var plugin_codex_default = plugin;
+var src_default = plugin;
 export {
-  plugin_codex_default as default,
+  src_default as default,
   plugin
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meetopenbot/codex",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "type": "module",
   "description": "OpenAI Codex agent plugin for OpenBot",
   "main": "./dist/index.js",
@@ -19,7 +19,7 @@
   ],
   "dependencies": {
     "@openai/codex-sdk": "0.148.0",
-    "@meetopenbot/plugin-sdk": "^0.2.0"
+    "@meetopenbot/plugin-sdk": "^0.3.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",
@@ -28,8 +28,8 @@
   },
   "types": "./dist/index.d.ts",
   "scripts": {
-    "build": "esbuild index.ts --bundle --platform=node --format=esm --outfile=dist/index.js --external:@meetopenbot/plugin-sdk --external:@openai/codex-sdk --external:zod && node ../../scripts/write-plugin-declaration.mjs",
-    "dev": "esbuild index.ts --bundle --platform=node --format=esm --outfile=dist/index.js --external:@meetopenbot/plugin-sdk --external:@openai/codex-sdk --external:zod --watch",
-    "typecheck": "tsc --noEmit --allowImportingTsExtensions --module ESNext --moduleResolution Bundler --target ES2022 --skipLibCheck index.ts"
+    "build": "esbuild src/index.ts --bundle --platform=node --format=esm --outfile=dist/index.js --external:@meetopenbot/plugin-sdk --external:@openai/codex-sdk --external:zod && node ../../scripts/write-plugin-declaration.mjs",
+    "dev": "esbuild src/index.ts --bundle --platform=node --format=esm --outfile=dist/index.js --external:@meetopenbot/plugin-sdk --external:@openai/codex-sdk --external:zod --watch",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   }
 }