@openclaw/codex 2026.10.5-beta.3 → 2026.10.10-beta.1

package/dist/.setup/inference-context-DNlGwzwy.mjs

@@ -1,91 +0,0 @@
-import { n as readCodexInferenceMetadata } from "./inference-metadata-DCvcG_N_.mjs";
-import { randomUUID } from "node:crypto";
-//#region extensions/codex/src/app-server/inference-context.ts
-const MAX_CONTEXT_BYTES = 262144;
-const MAX_ACTIVE_ROOTS = 64;
-/** One physical inference transport owns these confidential, nonpersistent snapshots. */
-function createCodexInferenceContext(assertClientCurrent) {
-	const roots = /* @__PURE__ */ new Map();
-	let closed = false;
-	const assertOpen = () => {
-		if (closed) throw new Error("Codex parent-local inference transport is closed");
-		assertClientCurrent();
-	};
-	return {
-		register(params) {
-			assertOpen();
-			params.signal.throwIfAborted();
-			params.assertCurrent();
-			if (Buffer.byteLength(params.text) > MAX_CONTEXT_BYTES) throw new Error("Codex parent-local context exceeds the 256 KiB inference limit");
-			if (!roots.has(params.threadId) && roots.size >= MAX_ACTIVE_ROOTS) throw new Error("Codex parent-local inference root limit reached");
-			roots.get(params.threadId)?.release();
-			const controller = new AbortController();
-			const registration = {
-				generation: randomUUID(),
-				text: params.text,
-				controller,
-				assertCurrent: () => {
-					assertOpen();
-					controller.signal.throwIfAborted();
-					params.signal.throwIfAborted();
-					params.assertCurrent();
-					if (roots.get(params.threadId) !== registration) throw new Error("Codex parent-local inference generation was replaced");
-				},
-				release: () => {
-					if (roots.get(params.threadId) === registration) roots.delete(params.threadId);
-					registration.text = "";
-					controller.abort();
-					params.signal.removeEventListener("abort", registration.release);
-				}
-			};
-			roots.set(params.threadId, registration);
-			params.signal.addEventListener("abort", registration.release, { once: true });
-			return {
-				generation: registration.generation,
-				release: registration.release
-			};
-		},
-		/** Caller must authenticate its private transport before parsing any model request. */
-		prepare(body, preparedMetadata, requireAdmission = false) {
-			assertOpen();
-			const metadata = preparedMetadata ?? readCodexInferenceMetadata(body);
-			const child = Boolean(metadata.parentThreadId || metadata.subagentKind || metadata.subagent);
-			const kind = metadata.requestKind;
-			if (!requireAdmission && (child || kind === "compaction" || kind === "memory")) return {
-				body,
-				assertCurrent: assertOpen,
-				signal: void 0
-			};
-			if (child || kind !== "turn" && kind !== "prewarm" && !(requireAdmission && kind === "compaction")) throw new Error("Codex inference request has an unsupported native purpose");
-			const registration = metadata.threadId ? roots.get(metadata.threadId) : void 0;
-			const generation = metadata.generation;
-			if (!requireAdmission && kind === "prewarm" && body.generate === false && generation == null) return {
-				body,
-				assertCurrent: assertOpen,
-				signal: void 0
-			};
-			if (!registration || generation !== registration.generation) throw new Error("Codex inference has no current admitted parent generation");
-			registration.assertCurrent();
-			let preparedBody = body;
-			if (kind !== "compaction") {
-				const instructions = body.instructions;
-				if (instructions !== void 0 && typeof instructions !== "string") throw new Error("Codex inference request has invalid top-level instructions");
-				if (registration.text) preparedBody = {
-					...body,
-					instructions: instructions === void 0 ? registration.text : instructions + "\n\n" + registration.text
-				};
-			}
-			return {
-				body: preparedBody,
-				assertCurrent: registration.assertCurrent,
-				signal: registration.controller.signal
-			};
-		},
-		close() {
-			closed = true;
-			for (const registration of roots.values()) registration.release();
-		}
-	};
-}
-//#endregion
-export { createCodexInferenceContext as t };

package/dist/.setup/managed-binary-BtIjV7yN.mjs

@@ -1,175 +0,0 @@
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
-import { createRequire } from "node:module";
-import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
-import { constants, existsSync, realpathSync } from "node:fs";
-import path from "node:path";
-import { access } from "node:fs/promises";
-//#region extensions/codex/src/app-server/desktop-app-paths.ts
-/** Shared path candidates for Codex's macOS desktop app bundle. */
-const MACOS_DESKTOP_CODEX_APP_PATH_CANDIDATES = ["ChatGPT.app", "Codex.app"].flatMap((appName) => {
-	const appBundlePath = `/Applications/${appName}`;
-	const resources = `${appBundlePath}/Contents/Resources`;
-	const computerUseServiceAppPaths = [`${resources}/cua_node/lib/node_modules/@oai/sky/Codex Computer Use.app`, `${resources}/plugins/openai-bundled/plugins/computer-use/Codex Computer Use.app`];
-	if (appName === "Codex.app") computerUseServiceAppPaths.reverse();
-	const candidate = {
-		appName,
-		appBundlePath,
-		appServerCommandPath: `${resources}/codex`,
-		bundledMarketplacePath: `${resources}/plugins/openai-bundled`,
-		computerUseServiceAppPaths
-	};
-	return [{
-		...candidate,
-		appServerCommandPath: path.join(resources, "codex-cli", "CodexCLI.app", "Contents", "MacOS", "codex")
-	}, candidate];
-});
-function resolveMacOSDesktopCodexAppPathCandidates(platform = process.platform) {
-	return platform === "darwin" ? MACOS_DESKTOP_CODEX_APP_PATH_CANDIDATES : [];
-}
-function resolveMacOSDesktopCodexAppServerCommandCandidates(platform = process.platform) {
-	return resolveMacOSDesktopCodexAppPathCandidates(platform).map((candidate) => candidate.appServerCommandPath);
-}
-function resolveMacOSDesktopCodexBundledMarketplaceCandidates(platform = process.platform) {
-	return [...new Set(resolveMacOSDesktopCodexAppPathCandidates(platform).map((candidate) => candidate.bundledMarketplacePath))];
-}
-function resolveMacOSDesktopCodexComputerUseServiceAppCandidates(platform = process.platform, appServerCommand) {
-	if (platform !== "darwin") return [];
-	const candidates = resolveMacOSDesktopCodexAppPathCandidates(platform);
-	const matchingCandidate = appServerCommand ? candidates.find((candidate) => path.resolve(candidate.appServerCommandPath) === path.resolve(appServerCommand)) : void 0;
-	return [.../* @__PURE__ */ new Set([...matchingCandidate?.computerUseServiceAppPaths ?? [], ...candidates.flatMap((candidate) => candidate.computerUseServiceAppPaths)])];
-}
-function resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath(params = {}) {
-	const candidates = params.candidates ?? resolveMacOSDesktopCodexBundledMarketplaceCandidates(params.platform);
-	const pathExists = params.pathExists ?? existsSync;
-	return candidates.find((candidate) => pathExists(candidate));
-}
-//#endregion
-//#region extensions/codex/src/app-server/version.ts
-/** Exact Codex app-server version shipped by the OpenClaw Codex bridge. */
-const CODEX_APP_SERVER_VERSION = "0.160.0";
-/** Inclusive runtime compatibility floor for external app-server binaries. */
-const MIN_SUPPORTED_CODEX_APP_SERVER_VERSION = "0.149.0";
-const MANAGED_CODEX_APP_SERVER_PACKAGE = "@openai/codex";
-//#endregion
-//#region extensions/codex/src/app-server/managed-binary.ts
-/**
-* Resolves the managed Codex app-server binary shipped with or installed beside
-* the Codex plugin before stdio startup.
-*/
-var managed_binary_exports = /* @__PURE__ */ __exportAll({
-	isManagedCodexDesktopCommand: () => isManagedCodexDesktopCommand,
-	resolveManagedCodexAppServerStartOptions: () => resolveManagedCodexAppServerStartOptions,
-	resolveManagedCodexNativeCommand: () => resolveManagedCodexNativeCommand,
-	resolveManagedCodexPackageEntrypoint: () => resolveManagedCodexPackageEntrypoint,
-	resolvePackagedCodexNativeCommand: () => resolvePackagedCodexNativeCommand,
-	setManagedCodexPluginRoot: () => setManagedCodexPluginRoot
-});
-const NATIVE_TARGET_TRIPLES = /* @__PURE__ */ new Map([
-	["linux-x64", "x86_64-unknown-linux-musl"],
-	["linux-arm64", "aarch64-unknown-linux-musl"],
-	["darwin-x64", "x86_64-apple-darwin"],
-	["darwin-arm64", "aarch64-apple-darwin"],
-	["win32-x64", "x86_64-pc-windows-msvc"],
-	["win32-arm64", "aarch64-pc-windows-msvc"]
-]);
-const registeredCodexPlugin = resolveGlobalSingleton(Symbol.for("openclaw.codexManagedPluginRoot"), () => ({}));
-/** Records the process-stable plugin root prepared by OpenClaw's plugin loader. */
-function setManagedCodexPluginRoot(pluginRoot) {
-	registeredCodexPlugin.root = pluginRoot;
-}
-async function resolveManagedCodexAppServerStartOptions(startOptions, options = {}) {
-	if (startOptions.transport !== "stdio" || startOptions.commandSource !== "managed") return startOptions;
-	const pluginRoot = options.pluginRoot ?? registeredCodexPlugin.root;
-	if (!pluginRoot) throw new Error("Codex plugin root is unavailable. Load the Codex plugin before starting its managed app-server.");
-	const platform = options.platform ?? process.platform;
-	const candidateCommandPaths = resolveManagedCodexAppServerCommandCandidates(pluginRoot, platform, startOptions.managedCommandOrder ?? "package-first");
-	const pathExists = options.pathExists ?? commandPathExists;
-	const commandPaths = [];
-	for (const commandPath of candidateCommandPaths) if (await pathExists(commandPath, platform)) commandPaths.push(commandPath);
-	const [commandPath, ...managedFallbackCommandPaths] = commandPaths;
-	if (commandPath === void 0) throw new Error([
-		`Managed Codex app-server binary was not found for ${MANAGED_CODEX_APP_SERVER_PACKAGE}.`,
-		"Reinstall or update OpenClaw, or run pnpm install in a source checkout.",
-		"Set plugins.entries.codex.config.appServer.command or OPENCLAW_CODEX_APP_SERVER_BIN to use a custom Codex binary."
-	].join(" "));
-	return {
-		...startOptions,
-		command: commandPath,
-		commandSource: "resolved-managed",
-		...managedFallbackCommandPaths.length > 0 ? { managedFallbackCommandPaths } : {}
-	};
-}
-/** Resolves the native artifact behind a successful managed launcher selection. */
-function resolveManagedCodexNativeCommand(command, options = {}) {
-	const platform = options.platform ?? process.platform;
-	if (isManagedCodexDesktopCommand(command, platform)) return command;
-	const target = `${platform === "android" ? "linux" : platform}-${options.arch ?? process.arch}`;
-	const triple = NATIVE_TARGET_TRIPLES.get(target);
-	if (!triple) return;
-	const packageRoot = resolveManagedCodexPackageRootForCommand(command, platform);
-	if (!packageRoot) return;
-	const resolvePackageJson = options.resolvePackageJson ?? resolvePackageJsonFromRoot;
-	const pathExists = options.pathExists ?? existsSync;
-	const packageJsonPath = resolvePackageJson(`@openai/codex-${target}`, packageRoot) ?? resolvePackageJson("@openai/codex", packageRoot);
-	if (!packageJsonPath) return;
-	const candidate = path.join(path.dirname(packageJsonPath), "vendor", triple, "bin", platform === "win32" ? "codex.exe" : "codex");
-	return pathExists(candidate) ? candidate : void 0;
-}
-/** Recognizes only the official npm entrypoint, not arbitrary configured wrappers. */
-function resolvePackagedCodexNativeCommand(entrypoint) {
-	const packageRoot = path.dirname(path.dirname(entrypoint));
-	if (path.basename(packageRoot) !== "codex" || path.basename(path.dirname(packageRoot)) !== "@openai" || path.relative(packageRoot, entrypoint) !== path.join("bin", "codex.js")) return;
-	return resolveManagedCodexNativeCommand(entrypoint);
-}
-function isManagedCodexDesktopCommand(command, platform = process.platform) {
-	return platform === "darwin" && resolveMacOSDesktopCodexAppServerCommandCandidates(platform).includes(command);
-}
-function resolveManagedCodexPackageRootForCommand(command, platform) {
-	const pathApi = platform === "win32" ? path.win32 : path.posix;
-	const commandPaths = [command];
-	try {
-		commandPaths.unshift(realpathSync(command));
-	} catch {}
-	for (const commandPath of commandPaths) {
-		let current = pathApi.dirname(commandPath);
-		while (true) {
-			if (pathApi.basename(current) === "codex" && pathApi.basename(pathApi.dirname(current)) === "@openai") return current;
-			if (pathApi.basename(current) === ".bin") return pathApi.join(pathApi.dirname(current), "@openai", "codex");
-			const parent = pathApi.dirname(current);
-			if (parent === current) break;
-			current = parent;
-		}
-	}
-}
-function resolvePackageJsonFromRoot(packageName, root) {
-	try {
-		const manifestPath = realpathSync(path.join(root, "package.json"));
-		return createRequire(manifestPath).resolve(`${packageName}/package.json`);
-	} catch {
-		return;
-	}
-}
-function resolveManagedCodexAppServerCommandCandidates(pluginRoot, platform, managedCommandOrder) {
-	const packageCommand = resolveManagedCodexPackageEntrypoint(pluginRoot);
-	const packageCommandPaths = packageCommand ? [packageCommand] : [];
-	if (managedCommandOrder === "package-only") return packageCommandPaths;
-	const desktopCommandPaths = resolveMacOSDesktopCodexAppServerCommandCandidates(platform);
-	return managedCommandOrder === "desktop-first" ? [...desktopCommandPaths, ...packageCommandPaths] : [...packageCommandPaths, ...desktopCommandPaths];
-}
-function resolveManagedCodexPackageEntrypoint(pluginRoot) {
-	try {
-		return createRequire(path.join(pluginRoot, "package.json")).resolve(`${MANAGED_CODEX_APP_SERVER_PACKAGE}/bin/codex.js`);
-	} catch {
-		return;
-	}
-}
-async function commandPathExists(filePath, platform) {
-	try {
-		await access(filePath, platform === "win32" ? constants.F_OK : constants.X_OK);
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
-export { resolvePackagedCodexNativeCommand as a, MIN_SUPPORTED_CODEX_APP_SERVER_VERSION as c, resolveMacOSDesktopCodexBundledMarketplaceCandidates as d, resolveMacOSDesktopCodexComputerUseServiceAppCandidates as f, resolveManagedCodexNativeCommand as i, resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath as l, managed_binary_exports as n, setManagedCodexPluginRoot as o, resolveManagedCodexAppServerStartOptions as r, CODEX_APP_SERVER_VERSION as s, isManagedCodexDesktopCommand as t, resolveMacOSDesktopCodexAppPathCandidates as u };

package/dist/.setup/native-execution-policy-MXEe7PB3.mjs

@@ -1,75 +0,0 @@
-import { resolveAgentConfig, tryResolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
-import { normalizeAgentId, parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
-import { getSessionEntry } from "openclaw/plugin-sdk/session-store-runtime";
-import { resolveSandboxRuntimeStatus } from "openclaw/plugin-sdk/sandbox";
-//#region extensions/codex/src/app-server/native-execution-policy.ts
-/** Projects node execution ownership into the runtime tool factory options. */
-function resolveCodexNodeExecToolOverrides(policy) {
-	if (policy.effectiveExecHost !== "node") return;
-	const node = policy.node?.trim();
-	return {
-		host: "node",
-		...node ? { node } : {}
-	};
-}
-/** Resolves node/gateway/sandbox execution ownership from overrides, session, agent, and config. */
-function resolveCodexNativeExecutionPolicy(params) {
-	const config = params.config ?? {};
-	const sessionKey = params.sessionKey?.trim() || params.sessionId?.trim() || void 0;
-	const agentId = normalizeAgentIdOrDefault(params.agentId) ?? parseAgentIdFromSessionKey(sessionKey) ?? tryResolveDefaultAgentId(config);
-	const canReadSessionEntry = agentId && sessionKey && params.readRuntimeSessionEntry && (parseAgentIdFromSessionKey(sessionKey) ?? tryResolveDefaultAgentId(config)) === agentId;
-	let sessionEntry = params.sessionEntry ?? void 0;
-	if (sessionEntry === void 0 && canReadSessionEntry && sessionKey && agentId) try {
-		sessionEntry = getSessionEntry({
-			sessionKey,
-			agentId,
-			hydrateSkillPromptRefs: false
-		});
-	} catch {
-		sessionEntry = void 0;
-	}
-	const sandboxAgentId = parseAgentSessionKey(sessionKey)?.agentId ?? agentId;
-	const sandboxAvailable = params.sandboxAvailable ?? (sessionKey && sandboxAgentId ? resolveSandboxRuntimeStatus({
-		cfg: config,
-		sessionKey,
-		agentId: sandboxAgentId,
-		classificationAgentId: sandboxAgentId
-	}).sandboxed : false);
-	const agentExec = agentId ? resolveAgentConfig(config, agentId)?.tools?.exec : void 0;
-	const globalExec = config.tools?.exec;
-	const requestedExecHost = normalizeExecTarget(params.execOverrides?.host) ?? normalizeExecTarget(sessionEntry?.execHost) ?? normalizeExecTarget(agentExec?.host) ?? normalizeExecTarget(globalExec?.host) ?? "auto";
-	const effectiveExecHost = requestedExecHost === "auto" ? sandboxAvailable ? "sandbox" : "gateway" : requestedExecHost;
-	const node = params.execOverrides?.node ?? sessionEntry?.execNode ?? agentExec?.node ?? globalExec?.node;
-	return {
-		nativeToolSurfaceAllowed: effectiveExecHost !== "node",
-		requestedExecHost,
-		effectiveExecHost,
-		node,
-		...effectiveExecHost === "node" ? { blockReason: "OpenClaw exec host=node is active for this session. Codex app-server native execution cannot route shell, filesystem, MCP, or app-backed work through the selected OpenClaw node." } : {}
-	};
-}
-/** Formats the user-facing explanation shown when native tools are blocked by exec host=node. */
-function formatCodexNativeNodeExecBlock(params) {
-	return [
-		`Codex-native ${params.surface} is unavailable because OpenClaw exec host=node is active for this session.`,
-		params.reason ?? "Codex app-server native execution cannot route execution through the selected OpenClaw node.",
-		"Use a normal Codex harness turn so OpenClaw exec/process tools run on the node, or switch exec host to gateway for native Codex app-server execution."
-	].join(" ");
-}
-function parseAgentIdFromSessionKey(sessionKey) {
-	const raw = sessionKey?.trim();
-	if (!raw) return;
-	const parts = raw.toLowerCase().split(":").filter(Boolean);
-	if (parts.length < 3 || parts[0] !== "agent" || !parts[2]) return;
-	return normalizeAgentIdOrDefault(parts[1]);
-}
-function normalizeAgentIdOrDefault(value) {
-	const normalized = normalizeAgentId(value);
-	return normalized === "main" && !(value ?? "").trim() ? void 0 : normalized;
-}
-function normalizeExecTarget(value) {
-	const normalized = value?.trim().toLowerCase();
-	if (normalized === "auto" || normalized === "sandbox" || normalized === "gateway" || normalized === "node") return normalized;
-}
-//#endregion
-export { resolveCodexNativeExecutionPolicy as n, resolveCodexNodeExecToolOverrides as r, formatCodexNativeNodeExecBlock as t };

package/dist/.setup/protocol-CANUwXJ3.mjs

@@ -1,17 +0,0 @@
-import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-//#region extensions/codex/src/app-server/protocol.ts
-/** Namespace Codex keeps directly model-visible without exposing it to Code Mode guests. */
-const CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE = "openclaw_direct";
-function flattenCodexDynamicToolFunctions(tools) {
-	return (tools ?? []).flatMap((tool) => tool.type === "namespace" ? tool.tools : [tool]);
-}
-/** Asserts the experimental beforeTurnId request field before it crosses the app-server boundary. */
-function assertCodexThreadForkParams(value) {
-	if (!isRecord(value) || typeof value.threadId !== "string" || !value.threadId.trim() || value.beforeTurnId !== void 0 && value.beforeTurnId !== null && typeof value.beforeTurnId !== "string") throw new Error("Invalid Codex app-server thread/fork params");
-	return value;
-}
-function isJsonObject(value) {
-	return isRecord(value);
-}
-//#endregion
-export { isJsonObject as i, assertCodexThreadForkParams as n, flattenCodexDynamicToolFunctions as r, CODEX_OPENCLAW_DIRECT_DYNAMIC_TOOL_NAMESPACE as t };