@nextclaw/nextclaw-ncp-runtime-plugin-codex-sdk 0.1.17 → 0.1.19

package/dist/index.js

@@ -12,6 +12,11 @@ import {
   buildCodexBridgeModelProviderId,
   resolveExternalModelProvider
 } from "./codex-model-provider.js";
+import {
+  CODEX_APPROVAL_POLICY,
+  mapAccessModeToSandboxMode,
+  resolveCodexAccessMode
+} from "./codex-access-mode.js";
 import { buildCodexInputBuilder } from "./codex-input-builder.js";
 import { ensureCodexOpenAiResponsesBridge } from "./codex-openai-responses-bridge.js";
 import { resolveCodexResponsesApiSupport } from "./codex-responses-capability.js";
@@ -223,6 +228,7 @@ const plugin = {
             config: nextConfig,
             pluginConfig
           });
+          const accessMode = resolveCodexAccessMode(pluginConfig);
           const thinkingLevel = readThinkingLevel(runtimeParams.sessionMetadata.preferred_thinking) ?? readThinkingLevel(runtimeParams.sessionMetadata.thinking) ?? void 0;
           return new CodexSdkNcpAgentRuntime({
             sessionId: runtimeParams.sessionId,
@@ -245,14 +251,14 @@ const plugin = {
             inputBuilder: buildCodexInputBuilder(executionOptions.workingDirectory),
             threadOptions: {
               model,
-              sandboxMode: readString(pluginConfig.sandboxMode),
+              sandboxMode: mapAccessModeToSandboxMode(accessMode),
               workingDirectory: executionOptions.workingDirectory,
               skipGitRepoCheck: executionOptions.skipGitRepoCheck,
               modelReasoningEffort: thinkingLevel,
               networkAccessEnabled: readBoolean(pluginConfig.networkAccessEnabled),
               webSearchMode: readString(pluginConfig.webSearchMode),
               webSearchEnabled: readBoolean(pluginConfig.webSearchEnabled),
-              approvalPolicy: readString(pluginConfig.approvalPolicy),
+              approvalPolicy: CODEX_APPROVAL_POLICY,
               additionalDirectories: readStringArray(pluginConfig.additionalDirectories)
             }
           });

package/openclaw.plugin.json

@@ -23,9 +23,10 @@
       "workingDirectory": {
         "type": "string"
       },
-      "sandboxMode": {
+      "accessMode": {
         "type": "string",
-        "enum": ["read-only", "workspace-write", "danger-full-access"]
+        "enum": ["read-only", "workspace-write", "full-access"],
+        "default": "full-access"
       },
       "skipGitRepoCheck": {
         "type": "boolean"
@@ -40,10 +41,6 @@
       "webSearchEnabled": {
         "type": "boolean"
       },
-      "approvalPolicy": {
-        "type": "string",
-        "enum": ["never", "on-request", "on-failure", "untrusted"]
-      },
       "codexPathOverride": {
         "type": "string"
       },
@@ -86,12 +83,9 @@
       "label": "Working Directory",
       "advanced": true
     },
-    "sandboxMode": {
-      "label": "Sandbox Mode",
-      "advanced": true
-    },
-    "approvalPolicy": {
-      "label": "Approval Policy",
+    "accessMode": {
+      "label": "Access Mode",
+      "help": "Product-facing permission model. Defaults to full-access; internally this is mapped to the Codex SDK sandbox/approval settings.",
       "advanced": true
     },
     "networkAccessEnabled": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/nextclaw-ncp-runtime-plugin-codex-sdk",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "private": false,
   "description": "NextClaw plugin that registers Codex SDK as an optional NCP runtime.",
   "type": "module",
@@ -21,7 +21,7 @@
     ]
   },
   "dependencies": {
-    "@nextclaw/core": "0.10.0",
+    "@nextclaw/core": "0.11.0",
     "@nextclaw/nextclaw-ncp-runtime-codex-sdk": "0.1.3",
     "@nextclaw/ncp-toolkit": "0.4.2",
     "@nextclaw/ncp": "0.3.2"