@nextclaw/nextclaw-ncp-runtime-plugin-codex-sdk 0.1.21 → 0.1.23

package/openclaw.plugin.json

@@ -23,9 +23,10 @@
       "workingDirectory": {
         "type": "string"
       },
-      "sandboxMode": {
+      "accessMode": {
         "type": "string",
-        "enum": ["read-only", "workspace-write", "danger-full-access"]
+        "enum": ["read-only", "workspace-write", "full-access"],
+        "default": "full-access"
       },
       "skipGitRepoCheck": {
         "type": "boolean"
@@ -40,10 +41,6 @@
       "webSearchEnabled": {
         "type": "boolean"
       },
-      "approvalPolicy": {
-        "type": "string",
-        "enum": ["never", "on-request", "on-failure", "untrusted"]
-      },
       "codexPathOverride": {
         "type": "string"
       },
@@ -86,12 +83,9 @@
       "label": "Working Directory",
       "advanced": true
     },
-    "sandboxMode": {
-      "label": "Sandbox Mode",
-      "advanced": true
-    },
-    "approvalPolicy": {
-      "label": "Approval Policy",
+    "accessMode": {
+      "label": "Access Mode",
+      "help": "Product-facing permission model. Defaults to full-access; internally this is mapped to the Codex SDK sandbox/approval settings.",
       "advanced": true
     },
     "networkAccessEnabled": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/nextclaw-ncp-runtime-plugin-codex-sdk",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "private": false,
   "description": "NextClaw plugin that registers Codex SDK as an optional NCP runtime.",
   "type": "module",
@@ -21,10 +21,10 @@
     ]
   },
   "dependencies": {
-    "@nextclaw/core": "0.11.0",
-    "@nextclaw/nextclaw-ncp-runtime-codex-sdk": "0.1.3",
-    "@nextclaw/ncp": "0.3.2",
-    "@nextclaw/ncp-toolkit": "0.4.2"
+    "@nextclaw/core": "0.11.2",
+    "@nextclaw/ncp": "0.3.3",
+    "@nextclaw/ncp-toolkit": "0.4.3",
+    "@nextclaw/nextclaw-ncp-runtime-codex-sdk": "0.1.4"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",

package/dist/codex-input-builder.d.ts

@@ -1,5 +0,0 @@
-import { NcpAgentRunInput } from '@nextclaw/ncp';
-
-declare function buildCodexInputBuilder(workspace: string): (input: NcpAgentRunInput) => Promise<string>;
-
-export { buildCodexInputBuilder };

package/dist/codex-input-builder.js

@@ -1,82 +0,0 @@
-import {
-  buildRequestedSkillsUserPrompt,
-  SkillsLoader
-} from "@nextclaw/core";
-import { mkdtempSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-function readString(value) {
-  if (typeof value !== "string") {
-    return void 0;
-  }
-  const trimmed = value.trim();
-  return trimmed || void 0;
-}
-function readRequestedSkills(metadata) {
-  const raw = metadata.requested_skills ?? metadata.requestedSkills;
-  if (!Array.isArray(raw)) {
-    return [];
-  }
-  return raw.map((entry) => readString(entry)).filter((entry) => Boolean(entry)).slice(0, 8);
-}
-function readUserText(input) {
-  const message = readLatestUserMessage(input);
-  if (!message) {
-    return "";
-  }
-  return message.parts.filter((part) => part.type === "text").map((part) => part.text).join("").trim();
-}
-function readLatestUserMessage(input) {
-  for (let index = input.messages.length - 1; index >= 0; index -= 1) {
-    const message = input.messages[index];
-    if (message?.role !== "user") {
-      continue;
-    }
-    return message;
-  }
-  return null;
-}
-function sanitizeFileName(name) {
-  const sanitized = name.trim().replace(/[^a-zA-Z0-9._-]+/g, "_");
-  return sanitized || "attachment";
-}
-function buildAttachmentPrompt(message) {
-  if (!message) {
-    return "";
-  }
-  const fileParts = message.parts.filter((part) => part.type === "file");
-  if (fileParts.length === 0) {
-    return "";
-  }
-  const tempDir = mkdtempSync(join(tmpdir(), "nextclaw-codex-files-"));
-  const lines = fileParts.map((part, index) => {
-    const rawName = readString(part.name) ?? `attachment-${index + 1}`;
-    const fileName = sanitizeFileName(rawName);
-    const mimeSegment = readString(part.mimeType) ? ` (${part.mimeType})` : "";
-    const contentBase64 = readString(part.contentBase64);
-    if (contentBase64) {
-      const filePath = join(tempDir, fileName);
-      writeFileSync(filePath, Buffer.from(contentBase64.replace(/\s+/g, ""), "base64"));
-      return `- ${fileName}${mimeSegment} -> local file: ${filePath}`;
-    }
-    if (readString(part.url)) {
-      return `- ${fileName}${mimeSegment} -> remote url: ${part.url}`;
-    }
-    return `- ${fileName}${mimeSegment}`;
-  });
-  return ["Attached files for this turn:", ...lines].join("\n");
-}
-function buildCodexInputBuilder(workspace) {
-  const skillsLoader = new SkillsLoader(workspace);
-  return async (input) => {
-    const userText = readUserText(input);
-    const attachmentPrompt = buildAttachmentPrompt(readLatestUserMessage(input));
-    const promptBody = [userText || (attachmentPrompt ? "Please inspect the attached file(s) and respond." : ""), attachmentPrompt].filter(Boolean).join("\n\n");
-    const metadata = input.metadata && typeof input.metadata === "object" && !Array.isArray(input.metadata) ? input.metadata : {};
-    const requestedSkills = readRequestedSkills(metadata);
-    return buildRequestedSkillsUserPrompt(skillsLoader, requestedSkills, promptBody);
-  };
-}
-export {
-  buildCodexInputBuilder
-};

package/dist/codex-model-provider.d.ts

@@ -1,14 +0,0 @@
-declare function resolveExternalModelProvider(params: {
-    explicitModelProvider?: unknown;
-    providerName?: string | null;
-    providerDisplayName?: string | null;
-    pluginId: string;
-}): string;
-declare function buildUserFacingModelRoute(params: {
-    externalModelProvider: string;
-    providerLocalModel: string;
-    resolvedModel: string;
-}): string;
-declare function buildCodexBridgeModelProviderId(externalModelProvider: string): string;
-
-export { buildCodexBridgeModelProviderId, buildUserFacingModelRoute, resolveExternalModelProvider };

package/dist/codex-model-provider.js

@@ -1,46 +0,0 @@
-function readOptionalString(value) {
-  if (typeof value !== "string") {
-    return void 0;
-  }
-  const trimmed = value.trim();
-  return trimmed || void 0;
-}
-function isValidExternalModelProvider(value) {
-  return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value);
-}
-function resolveExternalModelProvider(params) {
-  const explicitModelProvider = readOptionalString(params.explicitModelProvider);
-  if (explicitModelProvider) {
-    return explicitModelProvider;
-  }
-  const providerName = readOptionalString(params.providerName);
-  if (providerName && !providerName.startsWith("custom-")) {
-    return providerName;
-  }
-  const providerDisplayName = readOptionalString(params.providerDisplayName);
-  if (providerDisplayName && isValidExternalModelProvider(providerDisplayName)) {
-    return providerDisplayName;
-  }
-  throw new Error(
-    `[codex] custom provider "${providerName ?? "unknown"}" requires an external model provider id. Set plugins.entries.${params.pluginId}.config.modelProvider or use a provider display name with only letters, numbers, ".", "_" or "-".`
-  );
-}
-function buildUserFacingModelRoute(params) {
-  const providerLocalModel = params.providerLocalModel.trim();
-  if (!providerLocalModel) {
-    return params.resolvedModel.trim();
-  }
-  return `${params.externalModelProvider}/${providerLocalModel}`;
-}
-function buildCodexBridgeModelProviderId(externalModelProvider) {
-  const normalized = externalModelProvider.trim();
-  if (!normalized) {
-    return "nextclaw-codex-bridge";
-  }
-  return `nextclaw-codex-bridge-${normalized}`;
-}
-export {
-  buildCodexBridgeModelProviderId,
-  buildUserFacingModelRoute,
-  resolveExternalModelProvider
-};

package/dist/codex-openai-responses-bridge-request.d.ts

@@ -1,11 +0,0 @@
-import { CodexOpenAiResponsesBridgeConfig, OpenAiChatCompletionResponse } from './codex-openai-responses-bridge-shared.js';
-
-declare function callOpenAiCompatibleUpstream(params: {
-    config: CodexOpenAiResponsesBridgeConfig;
-    body: Record<string, unknown>;
-}): Promise<{
-    model: string;
-    response: OpenAiChatCompletionResponse;
-}>;
-
-export { callOpenAiCompatibleUpstream };

package/dist/codex-openai-responses-bridge-request.js

@@ -1,334 +0,0 @@
-import {
-  readArray,
-  readBoolean,
-  readNumber,
-  readRecord,
-  readString,
-  withTrailingSlash
-} from "./codex-openai-responses-bridge-shared.js";
-function stripModelPrefix(model, prefixes) {
-  const normalizedModel = model.trim();
-  for (const prefix of prefixes) {
-    const normalizedPrefix = prefix.trim().toLowerCase();
-    if (!normalizedPrefix) {
-      continue;
-    }
-    const candidatePrefix = `${normalizedPrefix}/`;
-    if (normalizedModel.toLowerCase().startsWith(candidatePrefix)) {
-      return normalizedModel.slice(candidatePrefix.length);
-    }
-  }
-  return normalizedModel;
-}
-function resolveUpstreamModel(requestedModel, config) {
-  const prefixes = (config.modelPrefixes ?? []).filter((value) => value.trim().length > 0);
-  const model = stripModelPrefix(readString(requestedModel) ?? "", prefixes) || stripModelPrefix(config.defaultModel ?? "", prefixes);
-  if (!model) {
-    throw new Error("Codex bridge could not resolve an upstream model.");
-  }
-  return model;
-}
-function normalizeTextPart(value) {
-  const record = readRecord(value);
-  if (!record) {
-    return "";
-  }
-  const type = readString(record.type);
-  if (type !== "input_text" && type !== "output_text") {
-    return "";
-  }
-  return readString(record.text) ?? "";
-}
-function normalizeImageUrl(value) {
-  const record = readRecord(value);
-  if (!record || readString(record.type) !== "input_image") {
-    return null;
-  }
-  const source = readRecord(record.source);
-  if (!source) {
-    return null;
-  }
-  if (readString(source.type) === "url") {
-    return readString(source.url) ?? null;
-  }
-  if (readString(source.type) === "base64") {
-    const mediaType = readString(source.media_type) ?? "application/octet-stream";
-    const data = readString(source.data);
-    if (!data) {
-      return null;
-    }
-    return `data:${mediaType};base64,${data}`;
-  }
-  return null;
-}
-function normalizeToolOutput(value) {
-  if (typeof value === "string") {
-    return value;
-  }
-  if (Array.isArray(value)) {
-    const text = value.map((entry) => normalizeTextPart(entry)).filter(Boolean).join("");
-    if (text) {
-      return text;
-    }
-  }
-  try {
-    return JSON.stringify(value ?? "");
-  } catch {
-    return String(value ?? "");
-  }
-}
-function buildChatContent(content) {
-  if (typeof content === "string") {
-    return content;
-  }
-  if (!Array.isArray(content)) {
-    return null;
-  }
-  const chatContent = [];
-  for (const entry of content) {
-    const text = normalizeTextPart(entry);
-    if (text) {
-      chatContent.push({
-        type: "text",
-        text
-      });
-      continue;
-    }
-    const imageUrl = normalizeImageUrl(entry);
-    if (imageUrl) {
-      chatContent.push({
-        type: "image_url",
-        image_url: {
-          url: imageUrl
-        }
-      });
-    }
-  }
-  if (chatContent.length === 0) {
-    return null;
-  }
-  const textOnly = chatContent.every((entry) => entry.type === "text");
-  if (textOnly) {
-    return chatContent.map((entry) => readString(entry.text) ?? "").join("\n");
-  }
-  return chatContent;
-}
-function readAssistantMessageText(content) {
-  if (typeof content === "string") {
-    return content;
-  }
-  if (!Array.isArray(content)) {
-    return "";
-  }
-  return content.filter((entry) => entry.type === "text").map((entry) => readString(entry.text) ?? "").join("\n");
-}
-function appendMessageInputItem(params) {
-  const role = readString(params.item.role);
-  const content = buildChatContent(params.item.content);
-  if (role === "assistant") {
-    const text = readAssistantMessageText(content);
-    if (text.trim()) {
-      params.assistantTextParts.push(text);
-    }
-    return;
-  }
-  params.flushAssistant();
-  const normalizedRole = role === "developer" ? "system" : role;
-  if ((normalizedRole === "system" || normalizedRole === "user") && content !== null) {
-    params.messages.push({
-      role: normalizedRole,
-      content
-    });
-  }
-}
-function appendFunctionCallItem(params) {
-  const name = readString(params.item.name);
-  const argumentsText = readString(params.item.arguments) ?? "{}";
-  if (!name) {
-    return;
-  }
-  const callId = readString(params.item.call_id) ?? readString(params.item.id) ?? `call_${params.assistantToolCalls.length}`;
-  params.assistantToolCalls.push({
-    id: callId,
-    type: "function",
-    function: {
-      name,
-      arguments: argumentsText
-    }
-  });
-}
-function appendFunctionCallOutputItem(params) {
-  params.flushAssistant();
-  const callId = readString(params.item.call_id);
-  if (!callId) {
-    return;
-  }
-  params.messages.push({
-    role: "tool",
-    tool_call_id: callId,
-    content: normalizeToolOutput(params.item.output)
-  });
-}
-function buildOpenAiMessages(input, instructions) {
-  const messages = [];
-  const instructionText = readString(instructions);
-  if (instructionText) {
-    messages.push({
-      role: "system",
-      content: instructionText
-    });
-  }
-  if (typeof input === "string") {
-    return [
-      ...messages,
-      {
-        role: "user",
-        content: input
-      }
-    ];
-  }
-  const assistantTextParts = [];
-  const assistantToolCalls = [];
-  const flushAssistant = () => {
-    if (assistantTextParts.length === 0 && assistantToolCalls.length === 0) {
-      return;
-    }
-    messages.push({
-      role: "assistant",
-      content: assistantTextParts.join("\n").trim() || null,
-      ...assistantToolCalls.length > 0 ? {
-        tool_calls: structuredClone(assistantToolCalls)
-      } : {}
-    });
-    assistantTextParts.length = 0;
-    assistantToolCalls.length = 0;
-  };
-  for (const rawItem of readArray(input)) {
-    const item = readRecord(rawItem);
-    if (!item) {
-      continue;
-    }
-    const type = readString(item.type);
-    if (type === "message") {
-      appendMessageInputItem({
-        messages,
-        assistantTextParts,
-        assistantToolCalls,
-        item,
-        flushAssistant
-      });
-      continue;
-    }
-    if (type === "function_call") {
-      appendFunctionCallItem({
-        assistantToolCalls,
-        item
-      });
-      continue;
-    }
-    if (type === "function_call_output") {
-      appendFunctionCallOutputItem({
-        messages,
-        item,
-        flushAssistant
-      });
-    }
-  }
-  flushAssistant();
-  return messages;
-}
-function toOpenAiTools(value) {
-  const tools = [];
-  for (const entry of readArray(value)) {
-    const tool = readRecord(entry);
-    const type = readString(tool?.type);
-    const fn = readRecord(tool?.function);
-    const name = readString(fn?.name) ?? readString(tool?.name);
-    if (type !== "function" || !name) {
-      continue;
-    }
-    const description = (fn ? readString(fn.description) : void 0) ?? readString(tool?.description);
-    const parameters = (fn ? readRecord(fn.parameters) : void 0) ?? readRecord(tool?.parameters);
-    const strict = (fn ? readBoolean(fn.strict) : void 0) ?? readBoolean(tool?.strict);
-    tools.push({
-      type: "function",
-      function: {
-        name,
-        ...description ? { description } : {},
-        parameters: parameters ?? {
-          type: "object",
-          properties: {}
-        },
-        ...strict !== void 0 ? { strict } : {}
-      }
-    });
-  }
-  return tools.length > 0 ? tools : void 0;
-}
-function toOpenAiToolChoice(value) {
-  if (value === "auto" || value === "none" || value === "required") {
-    return value;
-  }
-  const record = readRecord(value);
-  const fn = readRecord(record?.function);
-  const name = readString(fn?.name) ?? readString(record?.name);
-  if (readString(record?.type) === "function" && name) {
-    return {
-      type: "function",
-      function: {
-        name
-      }
-    };
-  }
-  return void 0;
-}
-async function callOpenAiCompatibleUpstream(params) {
-  const model = resolveUpstreamModel(params.body.model, params.config);
-  const upstreamUrl = new URL(
-    "chat/completions",
-    withTrailingSlash(params.config.upstreamApiBase)
-  );
-  const tools = toOpenAiTools(params.body.tools);
-  const toolChoice = toOpenAiToolChoice(params.body.tool_choice);
-  const upstreamResponse = await fetch(upstreamUrl.toString(), {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      ...params.config.upstreamApiKey ? {
-        Authorization: `Bearer ${params.config.upstreamApiKey}`
-      } : {},
-      ...params.config.upstreamExtraHeaders ?? {}
-    },
-    body: JSON.stringify({
-      model,
-      messages: buildOpenAiMessages(params.body.input, params.body.instructions),
-      ...tools ? { tools } : {},
-      ...toolChoice ? { tool_choice: toolChoice } : {},
-      ...typeof params.body.max_output_tokens === "number" ? {
-        max_tokens: Math.max(
-          1,
-          Math.trunc(readNumber(params.body.max_output_tokens) ?? 1)
-        )
-      } : {}
-    })
-  });
-  const rawText = await upstreamResponse.text();
-  let parsed;
-  try {
-    parsed = JSON.parse(rawText);
-  } catch {
-    throw new Error(`Bridge upstream returned invalid JSON: ${rawText.slice(0, 240)}`);
-  }
-  if (!upstreamResponse.ok) {
-    throw new Error(
-      readString(parsed.error?.message) ?? rawText.slice(0, 240) ?? `HTTP ${upstreamResponse.status}`
-    );
-  }
-  return {
-    model,
-    response: parsed
-  };
-}
-export {
-  callOpenAiCompatibleUpstream
-};

package/dist/codex-openai-responses-bridge-shared.d.ts

@@ -1,47 +0,0 @@
-type CodexOpenAiResponsesBridgeConfig = {
-    upstreamApiBase: string;
-    upstreamApiKey?: string;
-    upstreamExtraHeaders?: Record<string, string>;
-    defaultModel?: string;
-    modelPrefixes?: string[];
-};
-type CodexOpenAiResponsesBridgeResult = {
-    baseUrl: string;
-};
-type BridgeEntry = {
-    promise: Promise<CodexOpenAiResponsesBridgeResult>;
-};
-type OpenResponsesItemRecord = Record<string, unknown>;
-type OpenAiChatCompletionChoiceMessage = {
-    content?: unknown;
-    tool_calls?: unknown;
-};
-type OpenAiChatCompletionResponse = {
-    choices?: Array<{
-        message?: OpenAiChatCompletionChoiceMessage;
-    }>;
-    usage?: {
-        prompt_tokens?: number;
-        completion_tokens?: number;
-        total_tokens?: number;
-    };
-    error?: {
-        message?: unknown;
-    };
-};
-type OpenResponsesOutputItem = Record<string, unknown>;
-type StreamSequenceState = {
-    value: number;
-};
-declare function readString(value: unknown): string | undefined;
-declare function readBoolean(value: unknown): boolean | undefined;
-declare function readNumber(value: unknown): number | undefined;
-declare function readRecord(value: unknown): Record<string, unknown> | undefined;
-declare function readArray(value: unknown): unknown[];
-declare function withTrailingSlash(value: string): string;
-declare function writeSseEvent(response: {
-    write: (chunk: string) => void;
-}, eventType: string, payload: Record<string, unknown>): void;
-declare function nextSequenceNumber(state: StreamSequenceState): number;
-
-export { type BridgeEntry, type CodexOpenAiResponsesBridgeConfig, type CodexOpenAiResponsesBridgeResult, type OpenAiChatCompletionChoiceMessage, type OpenAiChatCompletionResponse, type OpenResponsesItemRecord, type OpenResponsesOutputItem, type StreamSequenceState, nextSequenceNumber, readArray, readBoolean, readNumber, readRecord, readString, withTrailingSlash, writeSseEvent };

package/dist/codex-openai-responses-bridge-shared.js

@@ -1,50 +0,0 @@
-function readString(value) {
-  if (typeof value !== "string") {
-    return void 0;
-  }
-  const trimmed = value.trim();
-  return trimmed || void 0;
-}
-function readBoolean(value) {
-  return typeof value === "boolean" ? value : void 0;
-}
-function readNumber(value) {
-  if (typeof value !== "number" || !Number.isFinite(value)) {
-    return void 0;
-  }
-  return value;
-}
-function readRecord(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return void 0;
-  }
-  return value;
-}
-function readArray(value) {
-  return Array.isArray(value) ? value : [];
-}
-function withTrailingSlash(value) {
-  return value.endsWith("/") ? value : `${value}/`;
-}
-function writeSseEvent(response, eventType, payload) {
-  response.write(`event: ${eventType}
-`);
-  response.write(`data: ${JSON.stringify(payload)}
-
-`);
-}
-function nextSequenceNumber(state) {
-  const nextValue = state.value;
-  state.value += 1;
-  return nextValue;
-}
-export {
-  nextSequenceNumber,
-  readArray,
-  readBoolean,
-  readNumber,
-  readRecord,
-  readString,
-  withTrailingSlash,
-  writeSseEvent
-};

package/dist/codex-openai-responses-bridge-stream.d.ts

@@ -1,22 +0,0 @@
-import { ServerResponse } from 'node:http';
-import { OpenAiChatCompletionResponse, OpenResponsesOutputItem } from './codex-openai-responses-bridge-shared.js';
-
-declare function writeStreamError(response: ServerResponse, message: string): void;
-declare function buildBridgeResponsePayload(params: {
-    responseId: string;
-    model: string;
-    response: OpenAiChatCompletionResponse;
-}): {
-    outputItems: OpenResponsesOutputItem[];
-    usage: Record<string, unknown>;
-    responseResource: Record<string, unknown>;
-};
-declare function writeResponsesStream(params: {
-    response: ServerResponse;
-    responseId: string;
-    model: string;
-    outputItems: OpenResponsesOutputItem[];
-    responseResource: Record<string, unknown>;
-}): void;
-
-export { buildBridgeResponsePayload, writeResponsesStream, writeStreamError };