@openclaw/codex 2026.10.1-beta.2 → 2026.10.5-beta.1

package/dist/.setup/{config-0Gxk3_eq.mjs → config-C1YVVLEA.mjs}

@@ -1,88 +1,61 @@
-import "./config-security-KAPScztc.mjs";
-import { _ as readExecSecurity, b as readRecord, g as readExecAsk } from "./config-parsing-BQq-CHTF.mjs";
+import "./config-security-clxAZYWX.mjs";
+import { a as readExecAsk, l as readRecord, o as readExecSecurity } from "./config-utils-DN_YT7dE.mjs";
+import "./config-parsing-DsWSCPHO.mjs";
 import "./auth-start-options-BPIPeEX8.mjs";
-import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-HG_Rr3W_.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
+import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-DDzeNQ8m.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-exec-approvals.ts
-function resolveOpenClawExecPolicyFromConfig(params) {
+function resolveOpenClawExecPolicyForCodexAppServer(params) {
+	if (params.permissionMode === "full") return resolveOpenClawExecPolicy({ mode: "full" });
 	const globalExec = readRecord(params.config?.tools?.exec);
-	const globalPolicy = applyOpenClawExecPolicyLayer({
-		...resolveOpenClawExecPolicyForMode("full"),
-		touched: false
-	}, globalExec);
+	const globalPolicy = applyOpenClawExecPolicyLayer(resolveOpenClawExecPolicy({ mode: "full" }, false), globalExec);
 	const agentId = params.agentId?.trim();
-	return applyOpenClawExecPolicyLayer(globalPolicy, agentId ? readRecord(resolveAgentConfig(params.config ?? {}, agentId)?.tools?.exec) : void 0);
-}
-function resolveOpenClawExecPolicyForCodexAppServer(params) {
-	if (params.permissionMode === "full") return {
-		...resolveOpenClawExecPolicyForMode("full"),
-		touched: true
-	};
-	const overridePolicy = applyOpenClawExecPolicyLayer(resolveOpenClawExecPolicyFromConfig({
-		config: params.config,
-		agentId: params.agentId
-	}), params.execOverrides);
-	return applyOpenClawExecApprovalFloors(overridePolicy, params.approvals ? resolveExecApprovalsFromFile({
+	const overridePolicy = applyOpenClawExecPolicyLayer(applyOpenClawExecPolicyLayer(globalPolicy, agentId ? readRecord(resolveAgentConfig(params.config ?? {}, agentId)?.tools?.exec) : void 0), params.execOverrides);
+	const approvalFloors = params.approvals ? resolveExecApprovalsFromFile({
 		file: params.approvals,
 		agentId: params.agentId,
 		overrides: {
 			security: overridePolicy.security,
 			ask: overridePolicy.ask
 		}
-	}).agent : void 0);
+	}).agent : void 0;
+	if (!approvalFloors) return overridePolicy;
+	const nextSecurity = approvalFloors.security ? execPolicy.minSecurity(overridePolicy.security, approvalFloors.security) : overridePolicy.security;
+	const nextAsk = approvalFloors.ask ? execPolicy.maxAsk(overridePolicy.ask, approvalFloors.ask) : overridePolicy.ask;
+	if (nextSecurity === overridePolicy.security && nextAsk === overridePolicy.ask) return overridePolicy;
+	return resolveOpenClawExecPolicy({
+		security: nextSecurity,
+		ask: nextAsk
+	});
 }
 function applyOpenClawExecPolicyLayer(base, exec) {
 	if (!exec) return base;
 	const mode = readExecMode(exec.mode);
-	if (mode !== void 0) return {
-		...resolveOpenClawExecPolicyForMode(mode),
-		touched: true
-	};
+	if (mode !== void 0) return resolveOpenClawExecPolicy({ mode });
 	const security = readExecSecurity(exec.security);
 	const ask = readExecAsk(exec.ask);
 	if (security === void 0 && ask === void 0) return base;
-	const nextSecurity = security ?? base.security;
-	const nextAsk = ask ?? base.ask;
-	return {
-		mode: execPolicy.resolveExecModePolicy({
-			security: nextSecurity,
-			ask: nextAsk
-		}).mode,
-		security: nextSecurity,
-		ask: nextAsk,
-		touched: true
-	};
-}
-function applyOpenClawExecApprovalFloors(base, approvalFloors) {
-	if (!approvalFloors) return base;
-	const nextSecurity = approvalFloors.security ? execPolicy.minSecurity(base.security, approvalFloors.security) : base.security;
-	const nextAsk = approvalFloors.ask ? execPolicy.maxAsk(base.ask, approvalFloors.ask) : base.ask;
-	if (nextSecurity === base.security && nextAsk === base.ask) return base;
-	return {
-		mode: execPolicy.resolveExecModePolicy({
-			security: nextSecurity,
-			ask: nextAsk
-		}).mode,
-		security: nextSecurity,
-		ask: nextAsk,
-		touched: true
-	};
+	return resolveOpenClawExecPolicy({
+		security: security ?? base.security,
+		ask: ask ?? base.ask
+	});
 }
-function resolveOpenClawExecPolicyForMode(mode) {
-	const { security, ask } = execPolicy.resolveExecModePolicy({
-		mode,
-		security: "full",
-		ask: "off"
+function resolveOpenClawExecPolicy(policy, touched = true) {
+	const { mode, security, ask } = execPolicy.resolveExecModePolicy({
+		mode: policy.mode,
+		security: policy.security ?? "full",
+		ask: policy.ask ?? "off"
 	});
 	return {
 		mode,
 		security,
-		ask
+		ask,
+		touched
 	};
 }
 function readExecMode(value) {

package/dist/.setup/config-contracts.shared-D85SGEuq.mjs

@@ -0,0 +1,4 @@
+//#region extensions/codex/src/app-server/config-contracts.shared.ts
+const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
+//#endregion
+export { CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as t };

package/dist/.setup/{config-options-HG_Rr3W_.mjs → config-options-DDzeNQ8m.mjs}

@@ -1,7 +1,7 @@
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { t as normalizeCodexServiceTier } from "./service-tier-normalization-Cei89SW6.mjs";
-import { C as selectForcedPromptingSandbox, S as selectForcedDangerFullAccessSandbox, _ as resolveApprovalPolicy, a as resolveDefaultCodexAppServerPolicy, b as resolveEffectiveOpenClawExecModeForCodexAppServer, d as parseCodexRequirementsPolicy, f as readCodexRequirementsToml, g as assertCodexAppServerAllowedForOpenClawExecMode, i as resolveCodexAppServerNetworkProxy, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, s as resolveTransport, t as assertCodexAppServerConnectionSecurity, v as resolveApprovalsReviewer, x as resolveSandbox, y as resolveCodexPolicyModeForOpenClawExecMode } from "./config-security-KAPScztc.mjs";
-import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, b as readRecord, d as readCodexPluginConfig, h as normalizeHeaders, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, p as hashSecretForKey, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs, v as readNonEmptyString, x as resolveArgs, y as readNumberEnv } from "./config-parsing-BQq-CHTF.mjs";
+import { _ as resolveCodexPolicyModeForOpenClawExecMode, a as resolveDefaultCodexAppServerPolicy, b as selectForcedDangerFullAccessSandbox, d as readCodexRequirementsToml, g as resolveApprovalPolicy, h as assertCodexAppServerAllowedForOpenClawExecMode, i as resolveCodexAppServerNetworkProxy, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, t as assertCodexAppServerConnectionSecurity, u as parseCodexRequirementsPolicy, v as resolveEffectiveOpenClawExecModeForCodexAppServer, x as selectForcedPromptingSandbox, y as resolveSandbox } from "./config-security-clxAZYWX.mjs";
+import { c as readNumberEnv, i as normalizeHeaders, l as readRecord, n as hashSecretForKey, s as readNonEmptyString, u as resolveArgs } from "./config-utils-DN_YT7dE.mjs";
+import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-DsWSCPHO.mjs";
 import { i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
 import { r as resolveCodexAppServerUserHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { normalizeTrimmedStringList, parseBooleanValue } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -55,12 +55,16 @@ function canUseCodexModelBackedApprovalsReviewerForModel(params, resolveAuthProv
 	const explicitProvider = params.modelProvider?.trim().toLowerCase();
 	const inferredProvider = inferProviderFromModelRef(params.model);
 	if (explicitProvider && explicitProvider !== "codex" && explicitProvider !== "openai") return false;
-	return (inferredProvider ?? explicitProvider) === "openai" && isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId);
-}
-function isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId) {
+	if ((inferredProvider ?? explicitProvider) !== "openai") return false;
 	if (![params.env?.OPENAI_BASE_URL, params.env?.OPENAI_API_BASE].every(isNativeOpenAIBaseUrl)) return false;
 	if (!nativeCodexConfigIsTrustedForModelBackedReview(params)) return false;
-	return readConfiguredOpenAIProvidersForModelBackedReview(params.config, resolveAuthProviderId).every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
+	const config = params.config;
+	const providerRecords = readRecord(readRecord(readRecord(config)?.models)?.providers);
+	return Object.entries(providerRecords ?? {}).flatMap(([providerId, providerConfig]) => {
+		if (resolveAuthProviderId(providerId, { config }) !== "openai") return [];
+		const record = readRecord(providerConfig);
+		return record ? [record] : [];
+	}).every((provider) => configuredOpenAIProviderIsTrustedForModelBackedReview(provider, params.model));
 }
 function resolveCodexModelBackedReviewerPolicyContext(params) {
 	const provider = params.provider?.trim();
@@ -141,8 +145,7 @@ function readCodexAppServerConfigToml(params) {
 }
 function codexConfigEnablesNativeComputerUse(params) {
 	const configToml = readCodexAppServerConfigToml(params);
-	if (configToml === false) return true;
-	if (configToml === void 0) return false;
+	if (typeof configToml !== "string") return configToml === false;
 	let parsedConfig;
 	try {
 		parsedConfig = parse(configToml, { integersAsBigInt: true });
@@ -153,14 +156,7 @@ function codexConfigEnablesNativeComputerUse(params) {
 	if (rawPlugins === void 0) return false;
 	const plugins = readRecord(rawPlugins);
 	if (!plugins) return true;
-	for (const [pluginId, rawPluginConfig] of Object.entries(plugins)) {
-		if (!params.pluginNames.some((pluginName) => pluginId === pluginName || pluginId.startsWith(`${pluginName}@`))) continue;
-		const pluginConfig = readRecord(rawPluginConfig);
-		if (!pluginConfig) return true;
-		if (pluginConfig.enabled === false) continue;
-		return true;
-	}
-	return false;
+	return Object.entries(plugins).some(([pluginId, pluginConfig]) => params.pluginNames.some((pluginName) => pluginId === pluginName || pluginId.startsWith(`${pluginName}@`)) && readRecord(pluginConfig)?.enabled !== false);
 }
 function resolveCodexAppServerConfigPath(params) {
 	if (params.codexHome) return path.join(params.codexHome, CODEX_CONFIG_TOML_FILENAME);
@@ -171,17 +167,6 @@ function resolveCodexAppServerConfigPath(params) {
 function readErrorCode(error) {
 	return error && typeof error === "object" && "code" in error ? String(error.code) : void 0;
 }
-function readConfiguredOpenAIProvidersForModelBackedReview(config, resolveAuthProviderId) {
-	const providerRecords = readRecord(readRecord(readRecord(config)?.models)?.providers);
-	if (!providerRecords) return [];
-	const openAIProviders = [];
-	for (const [providerId, providerConfig] of Object.entries(providerRecords)) {
-		if (resolveAuthProviderId(providerId, { config }) !== "openai") continue;
-		const record = readRecord(providerConfig);
-		if (record) openAIProviders.push(record);
-	}
-	return openAIProviders;
-}
 function configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, modelInput) {
 	if (readRecord(openAIProvider.localService) || hasNonEmptyRecord(openAIProvider.headers) || hasNonEmptyRecord(openAIProvider.request) || typeof openAIProvider.authHeader === "boolean" || !isNativeOpenAIBaseUrl(openAIProvider.baseUrl)) return false;
 	const models = openAIProvider.models;
@@ -238,15 +223,18 @@ function inferProviderFromModelRef(model) {
 function resolveCodexAppServerHomeScope(params) {
 	const configured = params.appServer?.homeScope;
 	if (configured) return configured;
-	return params.connectionScope === "supervision" && resolveTransport(params.appServer?.transport) !== "websocket" ? "user" : "agent";
+	return params.connectionScope === "supervision" && params.appServer?.transport !== "websocket" ? "user" : "agent";
 }
 function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
-	function resolveCodexAppServerRuntimeOptions(params = {}) {
+	function resolveRuntimeOptions(params, connectionScope) {
 		const env = params.env ?? process.env;
 		const pluginConfig = readCodexPluginConfig(params.pluginConfig);
 		const config = pluginConfig.appServer ?? {};
-		const transport = resolveTransport(config.transport);
-		const homeScope = resolveCodexAppServerHomeScope({ appServer: config });
+		const transport = config.transport ?? "stdio";
+		const homeScope = resolveCodexAppServerHomeScope({
+			appServer: config,
+			connectionScope
+		});
 		if (transport !== "stdio" && pluginConfig.sessionCatalog?.homes?.length) throw new Error("plugins.entries.codex.config.sessionCatalog.homes requires appServer.transport=stdio");
 		const configCommand = readNonEmptyString(config.command);
 		const envCommand = readNonEmptyString(env.OPENCLAW_CODEX_APP_SERVER_BIN);
@@ -268,16 +256,12 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			transport,
 			url
 		});
-		const remoteAppsSubstrate = "preconfigured";
 		const remoteWorkspaceRoot = readNonEmptyString(config.remoteWorkspaceRoot);
-		const execMode = resolveEffectiveOpenClawExecModeForCodexAppServer({
-			execMode: params.execMode,
-			execPolicy: params.execPolicy
-		});
+		const execMode = resolveEffectiveOpenClawExecModeForCodexAppServer(params);
 		if (!params.sessionPermissionMode) assertCodexAppServerAllowedForOpenClawExecMode(execMode);
-		const explicitPolicyMode = resolvePolicyMode(config.mode) ?? resolvePolicyMode(env.OPENCLAW_CODEX_APP_SERVER_MODE);
-		const configuredSandbox = resolveSandbox(config.sandbox) ?? resolveSandbox(env.OPENCLAW_CODEX_APP_SERVER_SANDBOX);
-		const explicitApprovalsReviewer = resolveApprovalsReviewer(config.approvalsReviewer);
+		const explicitPolicyMode = config.mode ?? resolvePolicyMode(env.OPENCLAW_CODEX_APP_SERVER_MODE);
+		const configuredSandbox = config.sandbox ?? resolveSandbox(env.OPENCLAW_CODEX_APP_SERVER_SANDBOX);
+		const explicitApprovalsReviewer = config.approvalsReviewer;
 		const normalizedPolicyMode = resolveCodexPolicyModeForOpenClawExecMode(execMode);
 		const ignoreLegacyYoloPolicyMode = normalizedPolicyMode === "guardian" && explicitPolicyMode === "yolo";
 		const canUseModelBackedReviewer = canUseCodexModelBackedApprovalsReviewerForModel({
@@ -295,25 +279,19 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 		const forceDangerFullAccessSandbox = params.execPolicy?.touched === true && params.execPolicy.security === "full" && params.execPolicy.ask === "always";
 		const forcePerCommandApprovals = params.execPolicy?.ask === "always";
 		const requirementsToml = forcePerCommandApprovals ? readCodexRequirementsToml({
-			env,
-			requirementsToml: params.requirementsToml,
-			requirementsPath: params.requirementsPath,
-			readRequirementsFile: params.readRequirementsFile,
-			platform: params.platform
+			...params,
+			env
 		}) ?? null : params.requirementsToml;
 		if (forcePerCommandApprovals && requirementsToml && parseCodexRequirementsPolicy(requirementsToml).allowedApprovalPolicies?.has("untrusted") === false) throw new Error("tools.exec.ask=always requires Codex app-server per-command approvals");
 		const forceRuntimePolicy = forceUserReviewer || forceGuardianReviewer || forceDangerFullAccessSandbox;
 		const defaultPolicy = explicitPolicyMode && !forceRuntimePolicy && !ignoreLegacyYoloPolicyMode ? void 0 : resolveDefaultCodexAppServerPolicy({
+			...params,
 			transport,
 			env,
 			forceGuardian: normalizedPolicyMode === "guardian",
 			forceUserReviewer: forceUserReviewer || !canUseModelBackedReviewer,
 			execModeRequiringPromptingApprovals,
 			requirementsToml,
-			requirementsPath: params.requirementsPath,
-			readRequirementsFile: params.readRequirementsFile,
-			platform: params.platform,
-			hostName: params.hostName,
 			execModeRequiringUserReviewer: forceUserReviewer ? execMode : void 0
 		});
 		const preserveExplicitAutoSandbox = forceGuardianReviewer && configuredSandbox === "read-only";
@@ -330,7 +308,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			approvalsReviewer: defaultPolicy?.approvalsReviewer ?? (forceUserReviewer ? "user" : "auto_review")
 		} : void 0;
 		const policyMode = ignoreLegacyYoloPolicyMode ? normalizedPolicyMode : explicitPolicyMode ?? normalizedPolicyMode ?? defaultPolicy?.mode ?? "yolo";
-		const serviceTier = normalizeCodexServiceTier(config.serviceTier);
+		const serviceTier = config.serviceTier;
 		const resolvedSandbox = forcedPolicy?.sandbox ?? configuredSandbox ?? defaultPolicy?.sandbox ?? (policyMode === "guardian" ? "workspace-write" : "danger-full-access");
 		if (transport === "websocket" && !url) throw new Error("plugins.entries.codex.config.appServer.url is required when appServer.transport is websocket");
 		if (transport === "websocket" && homeScope === "user") throw new Error("plugins.entries.codex.config.appServer.homeScope=user requires appServer.transport=stdio or unix");
@@ -342,10 +320,9 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			authToken,
 			headers
 		});
-		const configApprovalPolicy = resolveApprovalPolicy(config.approvalPolicy);
+		const configApprovalPolicy = config.approvalPolicy;
 		const envApprovalPolicy = resolveApprovalPolicy(env.OPENCLAW_CODEX_APP_SERVER_APPROVAL_POLICY);
 		const approvalPolicy = configApprovalPolicy ?? envApprovalPolicy ?? defaultPolicy?.approvalPolicy ?? (policyMode === "guardian" ? "on-request" : "never");
-		const approvalPolicySource = configApprovalPolicy ? "config" : envApprovalPolicy ? "env" : defaultPolicy?.approvalPolicy ? "requirements" : "implicit";
 		const computerUseConfig = resolveCodexComputerUseConfig({
 			pluginConfig: params.pluginConfig,
 			env
@@ -372,13 +349,12 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 				...transport === "stdio" && clearEnv.length > 0 ? { clearEnv } : {}
 			},
 			connectionClass,
-			remoteAppsSubstrate,
 			...remoteWorkspaceRoot ? { remoteWorkspaceRoot } : {},
+			...config.nativeHookRelay ? { nativeHookRelay: config.nativeHookRelay } : {},
 			codeModeOnly: config.codeModeOnly === true,
 			loopDetectionPreToolUseRelay: config.loopDetectionPreToolUseRelay !== false,
 			requestTimeoutMs: resolvePositiveTimerTimeoutMs(config.requestTimeoutMs, 6e4),
 			approvalPolicy: forcedPolicy?.approvalPolicy ?? approvalPolicy,
-			approvalPolicySource,
 			sandbox: resolvedSandbox,
 			approvalsReviewer: forcedPolicy?.approvalsReviewer ?? explicitApprovalsReviewer ?? defaultPolicy?.approvalsReviewer ?? (policyMode === "guardian" ? "auto_review" : "user"),
 			...serviceTier ? { serviceTier } : {},
@@ -386,28 +362,9 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			...resolveCodexAppServerNetworkProxy(config.networkProxy, resolvedSandbox)
 		};
 	}
-	/** Resolves the passive supervision control connection without changing harness defaults. */
-	function resolveCodexSupervisionAppServerRuntimeOptions(params = {}) {
-		const pluginConfig = readCodexPluginConfig(params.pluginConfig);
-		const appServer = pluginConfig.appServer ?? {};
-		const homeScope = resolveCodexAppServerHomeScope({
-			appServer,
-			connectionScope: "supervision"
-		});
-		return resolveCodexAppServerRuntimeOptions({
-			...params,
-			pluginConfig: {
-				...pluginConfig,
-				appServer: {
-					...appServer,
-					homeScope
-				}
-			}
-		});
-	}
 	return {
-		resolveCodexAppServerRuntimeOptions,
-		resolveCodexSupervisionAppServerRuntimeOptions
+		resolveCodexAppServerRuntimeOptions: (params = {}) => resolveRuntimeOptions(params, "harness"),
+		resolveCodexSupervisionAppServerRuntimeOptions: (params = {}) => resolveRuntimeOptions(params, "supervision")
 	};
 }
 /**
@@ -437,22 +394,27 @@ function resolveCodexAppServerStartOptionsForAgent(params) {
 function resolveCodexComputerUseConfig(params = {}) {
 	const env = params.env ?? process.env;
 	const config = readCodexPluginConfig(params.pluginConfig).computerUse ?? {};
-	const marketplaceSource = readNonEmptyString(params.overrides?.marketplaceSource) ?? readNonEmptyString(config.marketplaceSource) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_SOURCE);
-	const marketplacePath = readNonEmptyString(params.overrides?.marketplacePath) ?? readNonEmptyString(config.marketplacePath) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_PATH);
-	const marketplaceName = readNonEmptyString(params.overrides?.marketplaceName) ?? readNonEmptyString(config.marketplaceName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_NAME);
-	const configuredPluginName = readNonEmptyString(params.overrides?.pluginName) ?? readNonEmptyString(config.pluginName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_NAME);
-	const configuredMcpServerName = readNonEmptyString(params.overrides?.mcpServerName) ?? readNonEmptyString(config.mcpServerName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MCP_SERVER_NAME);
-	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
-	const marketplaceDiscoveryTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
-	const liveTestTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
-	const toolCallTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
-	const healthCheckIntervalMinutes = normalizeComputerUseHealthCheckIntervalMinutes(params.overrides?.healthCheckIntervalMinutes ?? config.healthCheckIntervalMinutes ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES));
-	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
-	const pluginCacheMode = normalizeComputerUsePluginCacheMode(params.overrides?.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(config.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_CACHE_MODE) ?? "independent";
-	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
-	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
+	const option = (key) => params.overrides?.[key] ?? config[key];
+	const envOption = (key) => env[`OPENCLAW_CODEX_COMPUTER_USE_${key.replace(/[A-Z]/g, "_$&").toUpperCase()}`];
+	const stringOption = (key) => readNonEmptyString(params.overrides?.[key]) ?? readNonEmptyString(config[key]) ?? readNonEmptyString(envOption(key));
+	const booleanOption = (key) => option(key) ?? parseBooleanValue(envOption(key)) ?? false;
+	const timeoutOption = (key, fallback) => resolvePositiveTimerTimeoutMs(option(key) ?? readNumberEnv(envOption(key)), fallback);
+	const marketplaceSource = stringOption("marketplaceSource");
+	const marketplacePath = stringOption("marketplacePath");
+	const marketplaceName = stringOption("marketplaceName");
+	const configuredPluginName = stringOption("pluginName");
+	const configuredMcpServerName = stringOption("mcpServerName");
+	const autoInstall = booleanOption("autoInstall");
+	const marketplaceDiscoveryTimeoutMs = timeoutOption("marketplaceDiscoveryTimeoutMs", DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
+	const liveTestTimeoutMs = timeoutOption("liveTestTimeoutMs", DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
+	const toolCallTimeoutMs = timeoutOption("toolCallTimeoutMs", DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
+	const healthCheckIntervalMinutes = normalizeComputerUseHealthCheckIntervalMinutes(option("healthCheckIntervalMinutes") ?? readNumberEnv(envOption("healthCheckIntervalMinutes")));
+	const healthCheckEnabled = booleanOption("healthCheckEnabled");
+	const pluginCacheMode = normalizeComputerUsePluginCacheMode(params.overrides?.pluginCacheMode) ?? config.pluginCacheMode ?? normalizeComputerUsePluginCacheMode(envOption("pluginCacheMode")) ?? "independent";
+	const strictReadiness = booleanOption("strictReadiness");
+	const autoRepair = booleanOption("autoRepair");
 	return {
-		enabled: params.overrides?.enabled ?? config.enabled ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
+		enabled: option("enabled") ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
 		autoInstall,
 		marketplaceDiscoveryTimeoutMs,
 		liveTestTimeoutMs,

package/dist/.setup/{config-parsing-BQq-CHTF.mjs → config-parsing-DsWSCPHO.mjs}

@@ -1,45 +1,10 @@
-import { n as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, t as normalizeCodexServiceTier } from "./service-tier-normalization-Cei89SW6.mjs";
-import { asNullableRecord, asOptionalRecord as readRecord, normalizeOptionalString as readNonEmptyString, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createHmac, randomBytes } from "node:crypto";
+import { t as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-contracts.shared-D85SGEuq.mjs";
+import { t as normalizeCodexServiceTier } from "./service-tier-normalization-BPgw2Wdt.mjs";
+import "./config-utils-DN_YT7dE.mjs";
+import { asNullableRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
-import { buildSecretInputSchema, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
 import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
-import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
-import { splitCommandArgs } from "openclaw/plugin-sdk/process-runtime";
-//#region extensions/codex/src/app-server/config-utils.ts
-const START_OPTIONS_KEY_SECRET = resolveGlobalSingleton(Symbol.for("openclaw.codexAppServerStartOptionsKeySecret"), () => randomBytes(32));
-const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
-function isCodexFastServiceTier(value) {
-	return normalizeCodexServiceTier(value) === "priority";
-}
-function normalizeHeaders(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key.trim(), normalizeResolvedSecretInputString({
-		value: child,
-		path: `plugins.entries.codex.config.appServer.headers.${key}`
-	})]).filter((entry) => Boolean(entry[0] && entry[1])));
-}
-function readExecSecurity(value) {
-	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
-}
-function readExecAsk(value) {
-	return value === "off" || value === "on-miss" || value === "always" ? value : void 0;
-}
-function readNumberEnv(value) {
-	const trimmed = value?.trim();
-	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
-	const parsed = Number(trimmed);
-	return Number.isFinite(parsed) ? parsed : void 0;
-}
-function resolveArgs(configArgs, envArgs) {
-	if (Array.isArray(configArgs)) return normalizeTrimmedStringList(configArgs);
-	return splitCommandArgs(typeof configArgs === "string" ? configArgs : envArgs ?? "", { allowUnclosedQuotes: true });
-}
-function hashSecretForKey(value, label) {
-	if (!value) return null;
-	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
-}
-//#endregion
 //#region extensions/codex/src/app-server/session-discovery-config.ts
 const codexSessionCatalogHomeSchema = z.union([z.string().trim().min(1), z.object({
 	path: z.string().trim().min(1),
@@ -168,6 +133,13 @@ const codexPluginConfigSchema = z.strictObject({
 		headers: z.record(z.string(), SecretInputSchema).optional(),
 		clearEnv: z.array(z.string()).optional(),
 		remoteWorkspaceRoot: z.string().trim().min(1).optional(),
+		nativeHookRelay: z.strictObject({
+			url: z.string().url().refine((value) => {
+				const url = new URL(value);
+				return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+			}, "Native hook relay URL must use HTTPS without credentials, query, or fragment"),
+			credentialDirectory: z.string().trim().refine((value) => value.startsWith("/") && value !== "/" && !value.split("/").includes(".."), "Native hook relay credentials require an absolute private directory")
+		}).optional(),
 		codeModeOnly: z.boolean().optional(),
 		loopDetectionPreToolUseRelay: z.boolean().optional(),
 		requestTimeoutMs: z.number().positive().optional(),
@@ -195,6 +167,7 @@ function readCodexPluginConfig(value) {
 	if (appServer?.approvalPolicy === "untrusted") throw new Error("plugins.entries.codex.config.appServer.approvalPolicy=\"untrusted\" is retired; run \"openclaw doctor --fix\" to migrate it to \"on-request\".");
 	const parsed = codexPluginConfigSchema.safeParse(value);
 	if (!parsed.success) {
+		if (appServer?.nativeHookRelay !== void 0) throw new Error("Invalid plugins.entries.codex.config.appServer.nativeHookRelay configuration; remote hooks require an HTTPS URL and an absolute private credential directory.");
 		if (asNullableRecord(appServer?.networkProxy)?.enabled === true) {
 			const issuePath = parsed.error.issues[0]?.path ?? [];
 			const fieldDepth = issuePath[0] === "appServer" && issuePath[1] === "networkProxy" ? 3 : 2;
@@ -229,39 +202,30 @@ function assertCodexAppServerCommandHasNoInlineArgs(params) {
 }
 function resolveCodexPluginsPolicy(pluginConfig) {
 	const config = readCodexPluginConfig(pluginConfig).codexPlugins;
-	const configured = config !== void 0;
 	const enabled = config?.enabled === true;
-	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
 	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
 		if (!entry.marketplaceName || !entry.pluginName) return [];
-		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
 		return [{
 			configKey,
 			marketplaceName: entry.marketplaceName,
 			pluginName: entry.pluginName,
 			enabled: enabled && entry.enabled !== false,
-			allowDestructiveActions: entryDestructivePolicy.allowDestructiveActions,
-			destructiveApprovalMode: entryDestructivePolicy.destructiveApprovalMode
+			...resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true)
 		}];
 	}).toSorted((left, right) => left.configKey.localeCompare(right.configKey));
 	return {
-		configured,
+		configured: config !== void 0,
 		enabled,
 		allowAllPlugins: enabled && config?.allow_all_plugins === true,
-		allowDestructiveActions: destructivePolicy.allowDestructiveActions,
-		destructiveApprovalMode: destructivePolicy.destructiveApprovalMode,
+		...resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true),
 		pluginPolicies
 	};
 }
 function resolveCodexPluginDestructivePolicy(policy) {
-	if (policy === "auto" || policy === "ask") return {
-		allowDestructiveActions: true,
-		destructiveApprovalMode: policy
-	};
 	return {
-		allowDestructiveActions: policy,
-		destructiveApprovalMode: policy ? "allow" : "deny"
+		allowDestructiveActions: policy !== false,
+		destructiveApprovalMode: typeof policy === "string" ? policy : policy ? "allow" : "deny"
 	};
 }
 //#endregion
-export { readExecSecurity as _, DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME as a, readRecord as b, isCodexPairedNodeRemoteExecPlacementSandbox as c, readCodexPluginConfig as d, resolveCodexPluginsPolicy as f, readExecAsk as g, normalizeHeaders as h, DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME as i, isCodexRemoteExecPlacementSandbox as l, isCodexFastServiceTier as m, DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS as n, DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS as o, hashSecretForKey as p, DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS as r, assertCodexAppServerCommandHasNoInlineArgs as s, DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX as t, isCodexSandboxExecServerEnabled as u, readNonEmptyString as v, resolveArgs as x, readNumberEnv as y };
+export { DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME as a, isCodexPairedNodeRemoteExecPlacementSandbox as c, readCodexPluginConfig as d, resolveCodexPluginsPolicy as f, DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME as i, isCodexRemoteExecPlacementSandbox as l, DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS as n, DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS as o, DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS as r, assertCodexAppServerCommandHasNoInlineArgs as s, DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX as t, isCodexSandboxExecServerEnabled as u };

package/dist/.setup/{config-runtime-cUYrqu_a.mjs → config-runtime-DWzK-k0n.mjs}

@@ -1,5 +1,5 @@
-import { r as createCodexAppServerConfig } from "./config-options-HG_Rr3W_.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
+import { r as createCodexAppServerConfig } from "./config-options-DDzeNQ8m.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({