@nextclaw/nextclaw-ncp-runtime-plugin-codex-sdk 0.1.19 → 0.1.21

package/dist/codex-input-builder.js

@@ -2,6 +2,9 @@ import {
   buildRequestedSkillsUserPrompt,
   SkillsLoader
 } from "@nextclaw/core";
+import { mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 function readString(value) {
   if (typeof value !== "string") {
     return void 0;
@@ -17,25 +20,61 @@ function readRequestedSkills(metadata) {
   return raw.map((entry) => readString(entry)).filter((entry) => Boolean(entry)).slice(0, 8);
 }
 function readUserText(input) {
+  const message = readLatestUserMessage(input);
+  if (!message) {
+    return "";
+  }
+  return message.parts.filter((part) => part.type === "text").map((part) => part.text).join("").trim();
+}
+function readLatestUserMessage(input) {
   for (let index = input.messages.length - 1; index >= 0; index -= 1) {
     const message = input.messages[index];
     if (message?.role !== "user") {
       continue;
     }
-    const text = message.parts.filter((part) => part.type === "text").map((part) => part.text).join("").trim();
-    if (text) {
-      return text;
-    }
+    return message;
   }
-  return "";
+  return null;
+}
+function sanitizeFileName(name) {
+  const sanitized = name.trim().replace(/[^a-zA-Z0-9._-]+/g, "_");
+  return sanitized || "attachment";
+}
+function buildAttachmentPrompt(message) {
+  if (!message) {
+    return "";
+  }
+  const fileParts = message.parts.filter((part) => part.type === "file");
+  if (fileParts.length === 0) {
+    return "";
+  }
+  const tempDir = mkdtempSync(join(tmpdir(), "nextclaw-codex-files-"));
+  const lines = fileParts.map((part, index) => {
+    const rawName = readString(part.name) ?? `attachment-${index + 1}`;
+    const fileName = sanitizeFileName(rawName);
+    const mimeSegment = readString(part.mimeType) ? ` (${part.mimeType})` : "";
+    const contentBase64 = readString(part.contentBase64);
+    if (contentBase64) {
+      const filePath = join(tempDir, fileName);
+      writeFileSync(filePath, Buffer.from(contentBase64.replace(/\s+/g, ""), "base64"));
+      return `- ${fileName}${mimeSegment} -> local file: ${filePath}`;
+    }
+    if (readString(part.url)) {
+      return `- ${fileName}${mimeSegment} -> remote url: ${part.url}`;
+    }
+    return `- ${fileName}${mimeSegment}`;
+  });
+  return ["Attached files for this turn:", ...lines].join("\n");
 }
 function buildCodexInputBuilder(workspace) {
   const skillsLoader = new SkillsLoader(workspace);
   return async (input) => {
     const userText = readUserText(input);
+    const attachmentPrompt = buildAttachmentPrompt(readLatestUserMessage(input));
+    const promptBody = [userText || (attachmentPrompt ? "Please inspect the attached file(s) and respond." : ""), attachmentPrompt].filter(Boolean).join("\n\n");
     const metadata = input.metadata && typeof input.metadata === "object" && !Array.isArray(input.metadata) ? input.metadata : {};
     const requestedSkills = readRequestedSkills(metadata);
-    return buildRequestedSkillsUserPrompt(skillsLoader, requestedSkills, userText);
+    return buildRequestedSkillsUserPrompt(skillsLoader, requestedSkills, promptBody);
   };
 }
 export {

package/dist/index.js

@@ -12,11 +12,6 @@ import {
   buildCodexBridgeModelProviderId,
   resolveExternalModelProvider
 } from "./codex-model-provider.js";
-import {
-  CODEX_APPROVAL_POLICY,
-  mapAccessModeToSandboxMode,
-  resolveCodexAccessMode
-} from "./codex-access-mode.js";
 import { buildCodexInputBuilder } from "./codex-input-builder.js";
 import { ensureCodexOpenAiResponsesBridge } from "./codex-openai-responses-bridge.js";
 import { resolveCodexResponsesApiSupport } from "./codex-responses-capability.js";
@@ -228,7 +223,6 @@ const plugin = {
             config: nextConfig,
             pluginConfig
           });
-          const accessMode = resolveCodexAccessMode(pluginConfig);
           const thinkingLevel = readThinkingLevel(runtimeParams.sessionMetadata.preferred_thinking) ?? readThinkingLevel(runtimeParams.sessionMetadata.thinking) ?? void 0;
           return new CodexSdkNcpAgentRuntime({
             sessionId: runtimeParams.sessionId,
@@ -251,14 +245,14 @@ const plugin = {
             inputBuilder: buildCodexInputBuilder(executionOptions.workingDirectory),
             threadOptions: {
               model,
-              sandboxMode: mapAccessModeToSandboxMode(accessMode),
+              sandboxMode: readString(pluginConfig.sandboxMode),
               workingDirectory: executionOptions.workingDirectory,
               skipGitRepoCheck: executionOptions.skipGitRepoCheck,
               modelReasoningEffort: thinkingLevel,
               networkAccessEnabled: readBoolean(pluginConfig.networkAccessEnabled),
               webSearchMode: readString(pluginConfig.webSearchMode),
               webSearchEnabled: readBoolean(pluginConfig.webSearchEnabled),
-              approvalPolicy: CODEX_APPROVAL_POLICY,
+              approvalPolicy: readString(pluginConfig.approvalPolicy),
               additionalDirectories: readStringArray(pluginConfig.additionalDirectories)
             }
           });

package/openclaw.plugin.json

@@ -23,10 +23,9 @@
       "workingDirectory": {
         "type": "string"
       },
-      "accessMode": {
+      "sandboxMode": {
         "type": "string",
-        "enum": ["read-only", "workspace-write", "full-access"],
-        "default": "full-access"
+        "enum": ["read-only", "workspace-write", "danger-full-access"]
       },
       "skipGitRepoCheck": {
         "type": "boolean"
@@ -41,6 +40,10 @@
       "webSearchEnabled": {
         "type": "boolean"
       },
+      "approvalPolicy": {
+        "type": "string",
+        "enum": ["never", "on-request", "on-failure", "untrusted"]
+      },
       "codexPathOverride": {
         "type": "string"
       },
@@ -83,9 +86,12 @@
       "label": "Working Directory",
       "advanced": true
     },
-    "accessMode": {
-      "label": "Access Mode",
-      "help": "Product-facing permission model. Defaults to full-access; internally this is mapped to the Codex SDK sandbox/approval settings.",
+    "sandboxMode": {
+      "label": "Sandbox Mode",
+      "advanced": true
+    },
+    "approvalPolicy": {
+      "label": "Approval Policy",
       "advanced": true
     },
     "networkAccessEnabled": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/nextclaw-ncp-runtime-plugin-codex-sdk",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "private": false,
   "description": "NextClaw plugin that registers Codex SDK as an optional NCP runtime.",
   "type": "module",
@@ -23,8 +23,8 @@
   "dependencies": {
     "@nextclaw/core": "0.11.0",
     "@nextclaw/nextclaw-ncp-runtime-codex-sdk": "0.1.3",
-    "@nextclaw/ncp-toolkit": "0.4.2",
-    "@nextclaw/ncp": "0.3.2"
+    "@nextclaw/ncp": "0.3.2",
+    "@nextclaw/ncp-toolkit": "0.4.2"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",