@openclaw/codex 2026.10.5-beta.4 → 2026.10.10-beta.2

package/dist/.setup/{computer-use-DL2v3Kxq.mjs → computer-use-YUnu0JVx.mjs}

@@ -1,13 +1,12 @@
 import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
-import { o as resolveCodexComputerUseConfig } from "./config-options-DDzeNQ8m.mjs";
-import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, t as isManagedCodexDesktopCommand } from "./managed-binary-BtIjV7yN.mjs";
-import { n as describeControlFailure } from "./capabilities-DbOzOglY.mjs";
-import { n as requestCodexAppServerClientJson } from "./request-Bo0kKABI.mjs";
-import "./config-C1YVVLEA.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
-import { O as acquireCodexNativeConfigFence, at as hasLegacyCodexComputerUseMcpPolicy, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, ct as ensureCodexComputerUseSharedPluginCache, d as readCodexAppServerClientDesktopGeneration, et as reconcileCodexComputerUseStartArtifacts, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, it as resolveClientManagedBundledMarketplacePath, lt as assertNotSymlink, ot as isLegacyCodexComputerUsePluginDisabled, p as readCodexAppServerClientProcessIdentity, rt as resolveBundledComputerUseMarketplacePath, st as resolveManagedCodexComputerUseConfig, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, y as waitForCodexAppServerClientDesktopGenerationDrain } from "./shared-client-BCx1wbyA.mjs";
-import { a as isCodexAppServerIndeterminateRequestCancellationError, i as isCodexAppServerConnectionClosedError, o as isCodexAppServerIndeterminateTransportError } from "./client-D93nbdB8.mjs";
-import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-zNuNTKVr.mjs";
+import { o as resolveCodexComputerUseConfig } from "./config-options-DMFZkd3X.mjs";
+import { a as isManagedCodexDesktopCommand, b as resolveMacOSDesktopCodexBundledMarketplaceCandidates } from "./managed-binary-DbKvGXKl.mjs";
+import { n as describeControlFailure } from "./capabilities-DAS-JX1z.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-C6U8q2uz.mjs";
+import "./config-BfrAlTMT.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { $ as resolveBundledComputerUseMarketplacePath, X as reconcileCodexComputerUseStartArtifacts, at as assertNotSymlink, c as readCodexAppServerClientDesktopGeneration, et as resolveClientManagedBundledMarketplacePath, f as releaseLeasedSharedCodexAppServerClient, h as withCodexAppServerClientRequestScope, it as ensureCodexComputerUseSharedPluginCache, nt as isLegacyCodexComputerUsePluginDisabled, o as getLeasedSharedCodexAppServerClient, rt as resolveManagedCodexComputerUseConfig, tt as hasLegacyCodexComputerUseMcpPolicy, u as readCodexAppServerClientProcessIdentity } from "./shared-client-CkyTrNB8.mjs";
+import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-DMJWXGxM.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";
@@ -85,7 +84,7 @@ async function runCodexComputerUseLiveTest(params) {
 		} catch (error) {
 			cleanupError = toErrorObject(error, "Computer Use readiness cleanup failed");
 		}
-		if ("error" in outcome && (params.signal?.aborted || isCodexAppServerStartSelectionChangedError(outcome.error))) throw toErrorObject(outcome.error, "Computer Use live test failed");
+		if ("error" in outcome && params.signal?.aborted) throw toErrorObject(outcome.error, "Computer Use live test failed");
 		if (cleanupError) throw cleanupError;
 		if ("liveTest" in outcome) return {
 			liveTest: outcome.liveTest,
@@ -280,7 +279,7 @@ async function inspectCodexComputerUse(params) {
 		}
 		if (params.installMode === "none" && !params.refreshSharedCache) {
 			if (!lease.client) return await inspectCodexComputerUseWithoutFence(params);
-			return await withLeasedCodexAppServerClientStartSelectionRetry({
+			return await withCodexAppServerClientRequestScope({
 				lease,
 				options: {
 					...clientOptions,
@@ -316,48 +315,12 @@ async function inspectCodexComputerUse(params) {
 			...params,
 			client
 		}) : void 0;
-		if (explicitManagedInstall) {
-			await waitForCodexAppServerClientDesktopGenerationDrain({
-				client: explicitManagedInstall.client,
-				timeoutMs: remainingTimeoutMs(),
-				...params.signal ? { signal: params.signal } : {}
-			});
-			assertCodexAppServerClientStartSelectionCurrent({ client: explicitManagedInstall.client });
-		}
-		const inspectionParams = {
+		return await inspectCodexComputerUseWithoutFence({
 			...params,
 			...client ? { client } : {},
 			timeoutMs: remainingTimeoutMs(),
 			...explicitManagedInstall ? { explicitManagedInstall } : {}
-		};
-		const fenceKey = resolveCodexNativeConfigFenceKey({
-			client,
-			startOptions: resolvedRuntime.start,
-			agentDir: params.agentDir,
-			config: params.config
 		});
-		if (!fenceKey) return await inspectCodexComputerUseWithoutFence(inspectionParams);
-		const release = await acquireCodexNativeConfigFence(fenceKey, {
-			signal: params.signal,
-			timeoutMs: remainingTimeoutMs(),
-			timeoutMessage: "Codex Computer Use install timed out waiting for native config",
-			abortMessage: "Codex Computer Use install aborted waiting for native config"
-		});
-		let releaseFenceOnReturn = true;
-		try {
-			return await inspectCodexComputerUseWithoutFence({
-				...inspectionParams,
-				releaseNativeConfigFence: release
-			});
-		} catch (error) {
-			if (client && (isCodexAppServerIndeterminateRequestCancellationError(error) || isCodexAppServerIndeterminateTransportError(error) || isCodexAppServerConnectionClosedError(error))) {
-				releaseFenceOnReturn = false;
-				await client.closeAndRunAfterExit(release, "Computer Use config mutation");
-			}
-			throw error;
-		} finally {
-			if (releaseFenceOnReturn) release();
-		}
 	} finally {
 		if (lease.client) releaseLeasedSharedCodexAppServerClient(lease.client);
 	}
@@ -388,19 +351,13 @@ async function inspectCodexComputerUseWithoutFence(params) {
 	if (!marketplace.marketplace) return unavailableStatus(computerUseConfig, "marketplace_missing", marketplace.message ?? `No Codex marketplace containing ${computerUseConfig.pluginName} is registered. Configure computerUse.marketplaceSource or computerUse.marketplacePath, then run /codex computer-use install.`);
 	const pluginInspection = await ensureComputerUsePlugin(marketplace.marketplace, params.installMode !== "none");
 	if ("status" in pluginInspection) return pluginInspection.status;
-	if (params.refreshSharedCache && computerUseConfig !== params.computerUseConfig && managedCodexHome && managedMarketplacePath && params.agentDir && params.client) {
-		const client = params.client;
-		await ensureCodexComputerUseSharedPluginCache({
-			codexHome: managedCodexHome,
-			ownershipRoot: params.agentDir,
-			bundledMarketplacePath: managedMarketplacePath,
-			config: computerUseConfig,
-			assertCurrent: () => {
-				params.assertCurrent?.();
-				assertCodexAppServerClientStartSelectionCurrent({ client });
-			}
-		});
-	}
+	if (params.refreshSharedCache && computerUseConfig !== params.computerUseConfig && managedCodexHome && managedMarketplacePath && params.agentDir && params.client) await ensureCodexComputerUseSharedPluginCache({
+		codexHome: managedCodexHome,
+		ownershipRoot: params.agentDir,
+		bundledMarketplacePath: managedMarketplacePath,
+		config: computerUseConfig,
+		assertCurrent: params.assertCurrent
+	});
 	return await readComputerUseTools(pluginInspection.plugin, params.installMode !== "none");
 	async function ensureComputerUsePlugin(source, installPlugin) {
 		let plugin = await readComputerUsePlugin(request, source, computerUseConfig.pluginName);
@@ -423,7 +380,7 @@ async function inspectCodexComputerUseWithoutFence(params) {
 		return { plugin };
 	}
 	async function readComputerUseTools(plugin, installPlugin) {
-		const { client, signal, runLiveTest, releaseNativeConfigFence } = params;
+		const { client, signal, runLiveTest } = params;
 		let server = await readMcpServerStatus(request, computerUseConfig.mcpServerName);
 		let tools = Object.keys(server?.tools ?? {}).toSorted();
 		if ((!server || tools.length === 0) && installPlugin) {
@@ -446,7 +403,6 @@ async function inspectCodexComputerUseWithoutFence(params) {
 			message: "Computer Use is ready."
 		});
 		if (!runLiveTest) return status;
-		releaseNativeConfigFence?.();
 		const { liveTest, repair } = await runCodexComputerUseLiveTest({
 			request,
 			client,
@@ -464,7 +420,7 @@ async function inspectCodexComputerUseWithoutFence(params) {
 			warnings: [
 				...status.warnings,
 				...repair?.warnings ?? [],
-				...compatibilityStartupAllowed ? ["Computer Use live test failed, but compatibility startup remains enabled; set computerUse.strictReadiness to true to fail closed."] : []
+				...compatibilityStartupAllowed ? ["Computer Use live test failed, but compatibility startup remains enabled; set computerUse.strictReadiness to true to block startup after a failed live test."] : []
 			],
 			message: liveTest.ok ? "Computer Use is ready." : compatibilityStartupAllowed ? `${liveTest.message} Startup is allowed because computerUse.strictReadiness is false.` : liveTest.message
 		};
@@ -490,10 +446,7 @@ async function prepareExplicitManagedComputerUseInstall(params) {
 		ownsIsolatedCodexHome: true,
 		desktopGeneration: context.desktopGeneration,
 		forceCacheRefresh: true,
-		assertCurrent: () => {
-			params.assertCurrent?.();
-			assertCodexAppServerClientStartSelectionCurrent({ client: context.client });
-		}
+		assertCurrent: params.assertCurrent
 	});
 }
 async function resolveExplicitManagedComputerUseInstallContext(params) {

package/dist/.setup/{config-C1YVVLEA.mjs → config-BfrAlTMT.mjs}

@@ -2,9 +2,9 @@ import "./config-security-clxAZYWX.mjs";
 import { a as readExecAsk, l as readRecord, o as readExecSecurity } from "./config-utils-DN_YT7dE.mjs";
 import "./config-parsing-DsWSCPHO.mjs";
 import "./auth-start-options-BPIPeEX8.mjs";
-import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-DDzeNQ8m.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-DWzK-k0n.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-DMFZkd3X.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-BZRizyuG.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";

package/dist/.setup/{config-options-DDzeNQ8m.mjs → config-options-DMFZkd3X.mjs}

@@ -1,4 +1,4 @@
-import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { r as isJsonObject } from "./protocol-CaPAVwe9.mjs";
 import { _ as resolveCodexPolicyModeForOpenClawExecMode, a as resolveDefaultCodexAppServerPolicy, b as selectForcedDangerFullAccessSandbox, d as readCodexRequirementsToml, g as resolveApprovalPolicy, h as assertCodexAppServerAllowedForOpenClawExecMode, i as resolveCodexAppServerNetworkProxy, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, t as assertCodexAppServerConnectionSecurity, u as parseCodexRequirementsPolicy, v as resolveEffectiveOpenClawExecModeForCodexAppServer, x as selectForcedPromptingSandbox, y as resolveSandbox } from "./config-security-clxAZYWX.mjs";
 import { c as readNumberEnv, i as normalizeHeaders, l as readRecord, n as hashSecretForKey, s as readNonEmptyString, u as resolveArgs } from "./config-utils-DN_YT7dE.mjs";
 import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-DsWSCPHO.mjs";

package/dist/.setup/{config-runtime-DWzK-k0n.mjs → config-runtime-BZRizyuG.mjs}

@@ -1,5 +1,5 @@
-import { r as createCodexAppServerConfig } from "./config-options-DDzeNQ8m.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-DD-enC8w.mjs";
+import { r as createCodexAppServerConfig } from "./config-options-DMFZkd3X.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BNSS6WL4.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({

package/dist/.setup/{context-engine-projection-ps-yn_ci.mjs → context-engine-projection-PIeLSnR-.mjs}

@@ -1,13 +1,8 @@
-import { asFiniteNumber } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asFiniteNumber, asOptionalObjectRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { sliceUtf16Safe, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { isOpenClawRuntimeContextCustomMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { IMAGE_BLOCK_TOKENS } from "openclaw/plugin-sdk/agent-core";
-import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
 //#region extensions/codex/src/app-server/context-engine-projection.ts
-/**
-* Projects OpenClaw context-engine assemblies into Codex prompt text while
-* preserving safety boundaries and redacting tool payloads.
-*/
 /** Attachment preparation must not degrade to a prompt that silently loses the saved input. */
 var CodexContextAttachmentError = class extends Error {};
 const CONTEXT_HEADER = "OpenClaw assembled context for this turn:";
@@ -25,25 +20,18 @@ const DEFAULT_CODEX_PROJECTION_RESERVE_TOKENS = 2e4;
 const MIN_PROMPT_BUDGET_RATIO = .5;
 const MIN_PROMPT_BUDGET_TOKENS = 8e3;
 const CODEX_CONTEXT_SENDER_FIELD_MAX_CHARS = 256;
-/**
-* This projection has no access to agent-core's private compaction helper, but
-* must keep the same attribution contract: a stable ID is identity; display
-* labels are optional metadata, never provenance on their own.
-*/
 function formatCodexContextSenderSuffix(message) {
 	if (message.role !== "user") return "";
-	const metadata = Reflect.get(message, "__openclaw");
-	if (!metadata || typeof metadata !== "object") return "";
+	const metadata = asOptionalObjectRecord(Reflect.get(message, "__openclaw"));
 	const normalize = (value) => {
 		if (typeof value !== "string") return;
 		const normalized = value.replaceAll("\0", "").trim();
 		return normalized ? truncateUtf16Safe(normalized, CODEX_CONTEXT_SENDER_FIELD_MAX_CHARS) : void 0;
 	};
-	const record = metadata;
-	const id = normalize(record.senderId);
+	const id = normalize(metadata?.senderId);
 	if (!id) return "";
-	const name = normalize(record.senderName);
-	const username = normalize(record.senderUsername);
+	const name = normalize(metadata?.senderName);
+	const username = normalize(metadata?.senderUsername);
 	return ` sender=${JSON.stringify({
 		id,
 		...name ? { name } : {},
@@ -74,8 +62,10 @@ async function projectContextEngineAssemblyForCodex(params) {
 		"",
 		CONTEXT_OPEN
 	].join("\n") + "\n" : void 0;
-	const promptSuffix = boundedContext ? `\n${CONTEXT_CLOSE}\n\n${REQUEST_HEADER}\n${prompt}` : "";
-	const promptText = boundedContext ? `${promptPrefix}${boundedContext}${promptSuffix}` : prompt;
+	const currentUserSenderSuffix = params.currentUserMessage ? formatCodexContextSenderSuffix(params.currentUserMessage) : "";
+	const currentRequest = currentUserSenderSuffix ? `${neutralizeCodexExplicitMentionSigils(`[user${currentUserSenderSuffix}]`)}\n${prompt}` : prompt;
+	const promptSuffix = boundedContext ? `\n${CONTEXT_CLOSE}\n\n${REQUEST_HEADER}\n${currentRequest}` : "";
+	const promptText = boundedContext ? `${promptPrefix}${boundedContext}${promptSuffix}` : currentRequest;
 	const promptContextRange = promptPrefix && boundedContext ? {
 		start: promptPrefix.length,
 		end: promptPrefix.length + boundedContext.length
@@ -261,7 +251,7 @@ function renderMessageBody(message, options) {
 	const toolResultLabel = toolResult && message.toolCallId ? `tool result: ${message.toolCallId}` : "tool result";
 	if (toolResult && options.toolPayloadMode === "elide") return `${toolResultLabel} [content omitted]`;
 	const body = typeof message.content === "string" ? message.content.trim() : Array.isArray(message.content) ? message.content.map((part) => renderMessagePart(part, options, toolResult)).filter((value) => value.length > 0).join("\n").trim() : "[non-text content omitted]";
-	return toolResult ? redactToolPayloadText(`${toolResultLabel}${message.toolName ? ` (${message.toolName})` : ""}\n${body}`) : body;
+	return toolResult ? `${toolResultLabel}${message.toolName ? ` (${message.toolName})` : ""}\n${body}` : body;
 }
 function renderMessagePart(part, options, toolResultBody) {
 	if (!part || typeof part !== "object") return "";
@@ -290,7 +280,7 @@ function renderToolCallPayload(record) {
 function renderToolResultPayload(record) {
 	return {
 		...pickToolPayloadMetadata(record),
-		...Object.fromEntries(Object.entries(record).filter(([key]) => !TOOL_PAYLOAD_METADATA_KEYS.has(key)).map(([key, value]) => [key, projectToolPayloadValue(value, "content", key)]))
+		...Object.fromEntries(Object.entries(record).filter(([key]) => !TOOL_PAYLOAD_METADATA_KEYS.has(key)).map(([key, value]) => [key, projectToolPayloadValue(value, "content")]))
 	};
 }
 const TOOL_PAYLOAD_METADATA_KEYS = /* @__PURE__ */ new Set([
@@ -305,22 +295,18 @@ function pickToolPayloadMetadata(record) {
 	const payload = {};
 	for (const key of TOOL_PAYLOAD_METADATA_KEYS) {
 		const value = record[key];
-		if (typeof value === "string" && value.trim()) payload[key] = redactSensitiveFieldValue(key, value);
+		if (typeof value === "string" && value.trim()) payload[key] = value;
 	}
 	return payload;
 }
-function projectToolPayloadValue(value, mode, key = "", seen = /* @__PURE__ */ new WeakSet()) {
-	if (mode === "content" && (typeof value === "string" || typeof value === "number" || typeof value === "boolean")) {
-		const text = String(value);
-		const redacted = redactSensitiveFieldValue(key, redactToolPayloadText(text));
-		return redacted === text ? value : redacted;
-	}
+function projectToolPayloadValue(value, mode, seen = /* @__PURE__ */ new WeakSet()) {
+	if (mode === "content" && (typeof value === "string" || typeof value === "number" || typeof value === "boolean")) return value;
 	if (value === null || mode === "content" && value === void 0) return value;
 	if (value && typeof value === "object") {
 		if (seen.has(value)) return "[Circular]";
 		seen.add(value);
-		if (Array.isArray(value)) return value.map((entry) => projectToolPayloadValue(entry, mode, key, seen));
-		return Object.fromEntries(Object.entries(value).map(([childKey, child]) => [childKey, projectToolPayloadValue(child, mode, childKey, seen)]));
+		if (Array.isArray(value)) return value.map((entry) => projectToolPayloadValue(entry, mode, seen));
+		return Object.fromEntries(Object.entries(value).map(([childKey, child]) => [childKey, projectToolPayloadValue(child, mode, seen)]));
 	}
 	return `[${typeof value}]`;
 }