@openclaw/codex 2026.5.20 → 2026.5.22

package/dist/{node-cli-sessions-T1olB1SH.js → node-cli-sessions-yVCifOyG.js}

@@ -1,13 +1,14 @@
-import { a as isCodexFastServiceTier, c as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-DqIp6oTk.js";
+import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions, r as codexSandboxPolicyForTurn } from "./config-DDMrwfJl.js";
 import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { r as CODEX_CONTROL_METHODS } from "./request-BePR77QD.js";
-import { r as formatCodexDisplayText } from "./command-formatters-BVBnEgyA.js";
-import { i as getSharedCodexAppServerClient, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-DCxJx5QU.js";
-import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-DEiYHgJ_.js";
+import { i as readCodexAppServerBinding, n as isCodexAppServerNativeAuthProfile, o as writeCodexAppServerBinding, r as normalizeCodexAppServerBindingModelProvider, t as clearCodexAppServerBinding } from "./session-binding-Bw_mfIW2.js";
+import { r as CODEX_CONTROL_METHODS } from "./request-NklFaHM4.js";
+import { i as readCodexNotificationTurnId, r as readCodexNotificationThreadId, s as formatCodexDisplayText } from "./notification-correlation-qKY_sgga.js";
+import { i as getSharedCodexAppServerClient, u as resolveCodexAppServerAuthProfileIdForAgent } from "./shared-client-C_RbGxW8.js";
+import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
 import os from "node:os";
+import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { formatErrorMessage } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { spawn } from "node:child_process";
-import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -281,7 +282,7 @@ function createCodexConversationTurnCollector(threadId) {
 	};
 	const handleNotification = (notification) => {
 		const params = isJsonObject(notification.params) ? notification.params : void 0;
-		if (!params || readString(params, "threadId") !== threadId) return;
+		if (!params || readCodexNotificationThreadId(params) !== threadId) return;
 		if (!turnId) {
 			const pendingTurnId = readNotificationTurnId(params);
 			if (pendingTurnId) {
@@ -354,14 +355,14 @@ function createCodexConversationTurnCollector(threadId) {
 	};
 }
 function isNotificationForTurn(params, threadId, turnId) {
-	if (readString(params, "threadId") !== threadId) return false;
+	if (readCodexNotificationThreadId(params) !== threadId) return false;
 	if (!turnId) return true;
 	const directTurnId = readString(params, "turnId");
 	if (directTurnId) return directTurnId === turnId;
 	return readString(isJsonObject(params.turn) ? params.turn : void 0, "id") === turnId;
 }
 function readNotificationTurnId(params) {
-	return readString(params, "turnId") ?? readString(readRecord(params.turn), "id");
+	return readCodexNotificationTurnId(params);
 }
 function readRecord(value) {
 	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
@@ -506,6 +507,19 @@ async function handleCodexConversationInboundClaim(event, ctx, options = {}) {
 	if (event.commandAuthorized !== true) return { handled: true };
 	const prompt = event.bodyForAgent?.trim() || event.content?.trim() || "";
 	if (!prompt) return { handled: true };
+	const nativeExecutionBlock = data.kind === "codex-cli-node-session" ? resolveCodexNativeSandboxBlock({
+		config: options.config,
+		sessionKey: event.sessionKey ?? ctx.sessionKey,
+		surface: "Codex CLI node conversation binding"
+	}) : resolveCodexNativeExecutionBlock({
+		config: options.config,
+		sessionKey: event.sessionKey ?? ctx.sessionKey,
+		surface: "Codex app-server conversation binding"
+	});
+	if (nativeExecutionBlock) return {
+		handled: true,
+		reply: { text: nativeExecutionBlock }
+	};
 	if (data.kind === "codex-cli-node-session") {
 		const resume = options.resumeCodexCliSessionOnNode;
 		if (!resume) return {

package/dist/{command-formatters-BVBnEgyA.js → notification-correlation-qKY_sgga.js}

@@ -88,7 +88,7 @@ function summarizeRateLimitSnapshot(snapshot, nowMs) {
 		const window = readRateLimitWindow(snapshot, key);
 		return window ? [formatRateLimitWindow(key, window, nowMs)] : [];
 	});
-	const reachedType = readString$1(snapshot, "rateLimitReachedType") ?? readString$1(snapshot, "rate_limit_reached_type");
+	const reachedType = readString$2(snapshot, "rateLimitReachedType") ?? readString$2(snapshot, "rate_limit_reached_type");
 	const suffix = reachedType ? ` (${formatReachedType(reachedType)})` : "";
 	if (windows.length > 0) return `${label}: ${windows.join(" · ")}${suffix}`;
 	if (reachedType) return `${label}: ${formatReachedType(reachedType)}`;
@@ -149,7 +149,7 @@ function readRateLimitWindow(snapshot, key) {
 	};
 }
 function snapshotHasDisplayableData(snapshot) {
-	if (readString$1(snapshot, "rateLimitReachedType") ?? readString$1(snapshot, "rate_limit_reached_type")) return true;
+	if (readString$2(snapshot, "rateLimitReachedType") ?? readString$2(snapshot, "rate_limit_reached_type")) return true;
 	return readWindowEntries(snapshot).some((entry) => entry.window.usedPercent !== void 0 || entry.window.resetsAtMs > 0);
 }
 function readOptionalNumberField(record, ...keys) {
@@ -178,7 +178,7 @@ function formatAccountResetTime(resetsAtMs, nowMs) {
 	return `${formatCalendarResetTime(resetsAtMs, nowMs)} (in ${formatRelativeDuration(resetsAtMs - nowMs)})`;
 }
 function snapshotHasLimitBlock(snapshot) {
-	return Boolean(readString$1(snapshot, "rateLimitReachedType") ?? readString$1(snapshot, "rate_limit_reached_type") ?? readWindowEntries(snapshot).some((entry) => entry.window.usedPercent !== void 0 && entry.window.usedPercent >= 100));
+	return Boolean(readString$2(snapshot, "rateLimitReachedType") ?? readString$2(snapshot, "rate_limit_reached_type") ?? readWindowEntries(snapshot).some((entry) => entry.window.usedPercent !== void 0 && entry.window.usedPercent >= 100));
 }
 function isCodexLimitSnapshot(snapshot) {
 	const id = readNullableString(snapshot, "limitId") ?? readNullableString(snapshot, "limit_id");
@@ -280,12 +280,12 @@ function extractCodexRetryHint(message) {
 	if (tryAgainAt?.[1]) return tryAgainAt[1].trim();
 	return /\btry again\s+((?:tomorrow|in\s+[^.!?\n]+)[^.!?\n]*)(?:[.!?]|$)/iu.exec(message)?.[1]?.trim();
 }
-function readString$1(record, key) {
+function readString$2(record, key) {
 	const value = record[key];
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 function readNullableString(record, key) {
-	return readString$1(record, key) ?? void 0;
+	return readString$2(record, key) ?? void 0;
 }
 function readNumber(record, key) {
 	const value = record[key];
@@ -318,12 +318,12 @@ function formatThreads(response) {
 	if (threads.length === 0) return "No Codex threads returned.";
 	return ["Codex threads:", ...threads.slice(0, 10).map((thread) => {
 		const record = isJsonObject(thread) ? thread : {};
-		const id = readString(record, "threadId") ?? readString(record, "id") ?? "<unknown>";
-		const title = readString(record, "title") ?? readString(record, "name") ?? readString(record, "summary");
+		const id = readString$1(record, "threadId") ?? readString$1(record, "id") ?? "<unknown>";
+		const title = readString$1(record, "title") ?? readString$1(record, "name") ?? readString$1(record, "summary");
 		const details = [
-			readString(record, "model"),
-			readString(record, "cwd"),
-			readString(record, "updatedAt") ?? readString(record, "lastUpdatedAt")
+			readString$1(record, "model"),
+			readString$1(record, "cwd"),
+			readString$1(record, "updatedAt") ?? readString$1(record, "lastUpdatedAt")
 		].filter((value) => Boolean(value));
 		return `- ${formatCodexDisplayText(id)}${title ? ` - ${formatCodexDisplayText(title)}` : ""}${details.length > 0 ? ` (${details.map(formatCodexDisplayText).join(", ")})` : ""}\n  Resume: ${formatCodexResumeHint(id)}`;
 	})].join("\n");
@@ -370,7 +370,7 @@ function formatList(response, label) {
 	if (entries.length === 0) return `${label}: none returned.`;
 	return [`${label}:`, ...entries.slice(0, 25).map((entry) => {
 		const record = isJsonObject(entry) ? entry : {};
-		return `- ${formatCodexDisplayText(readString(record, "name") ?? readString(record, "id") ?? JSON.stringify(entry))}`;
+		return `- ${formatCodexDisplayText(readString$1(record, "name") ?? readString$1(record, "id") ?? JSON.stringify(entry))}`;
 	})].join("\n");
 }
 const CODEX_RESUME_SAFE_THREAD_ID_PATTERN = /^[A-Za-z0-9._:-]+$/;
@@ -455,8 +455,8 @@ function buildHelp() {
 function summarizeAccount(value) {
 	if (!isJsonObject(value)) return "unavailable";
 	const account = isJsonObject(value.account) ? value.account : value;
-	if (readString(account, "type") === "amazonBedrock") return "Amazon Bedrock";
-	return readString(account, "email") ?? readString(account, "accountEmail") ?? readString(account, "planType") ?? readString(account, "id") ?? "available";
+	if (readString$1(account, "type") === "amazonBedrock") return "Amazon Bedrock";
+	return readString$1(account, "email") ?? readString$1(account, "accountEmail") ?? readString$1(account, "planType") ?? readString$1(account, "id") ?? "available";
 }
 function summarizeArrayLike(value) {
 	const entries = extractArray(value);
@@ -489,7 +489,7 @@ function summarizeRateLimits(value) {
 }
 function isMeaningfulRateLimitSnapshot(value) {
 	if (!isJsonObject(value)) return false;
-	if (readString(value, "rateLimitReachedType") ?? readString(value, "rate_limit_reached_type")) return true;
+	if (readString$1(value, "rateLimitReachedType") ?? readString$1(value, "rate_limit_reached_type")) return true;
 	return ["primary", "secondary"].some((key) => {
 		const window = value[key];
 		return isJsonObject(window) && Object.values(window).some((entry) => entry != null);
@@ -512,9 +512,60 @@ function extractArray(value) {
 	}
 	return [];
 }
+function readString$1(record, key) {
+	const value = record[key];
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/notification-correlation.ts
+function isCodexNotificationForTurn(value, threadId, turnId) {
+	if (!isJsonObject(value)) return false;
+	return readCodexNotificationThreadId(value) === threadId && readCodexNotificationTurnId(value) === turnId;
+}
+function readCodexNotificationThreadId(record) {
+	return readNestedTurnThreadId(record) ?? readString(record, "threadId");
+}
+function readCodexNotificationTurnId(record) {
+	return readNestedTurnId(record) ?? readString(record, "turnId");
+}
+function describeCodexNotificationCorrelation(notification, active) {
+	const params = isJsonObject(notification.params) ? notification.params : void 0;
+	const turn = params && isJsonObject(params.turn) ? params.turn : void 0;
+	const threadId = params ? readString(params, "threadId") : void 0;
+	const turnId = params ? readString(params, "turnId") : void 0;
+	const nestedTurnThreadId = turn ? readString(turn, "threadId") : void 0;
+	const nestedTurnId = turn ? readString(turn, "id") : void 0;
+	const resolvedThreadId = params ? readCodexNotificationThreadId(params) : void 0;
+	const resolvedTurnId = params ? readCodexNotificationTurnId(params) : void 0;
+	const matchesActiveThread = resolvedThreadId === active.threadId;
+	const matchesActiveTurn = active.turnId ? matchesActiveThread && resolvedTurnId === active.turnId : void 0;
+	const items = turn?.items;
+	return {
+		method: notification.method,
+		...params ? { paramsKeys: Object.keys(params).toSorted() } : {},
+		activeThreadId: active.threadId,
+		...active.turnId ? { activeTurnId: active.turnId } : {},
+		...threadId ? { threadId } : {},
+		...turnId ? { turnId } : {},
+		...nestedTurnThreadId ? { nestedTurnThreadId } : {},
+		...nestedTurnId ? { nestedTurnId } : {},
+		...turn ? { turnStatus: readString(turn, "status") } : {},
+		...Array.isArray(items) ? { turnItemCount: items.length } : {},
+		matchesActiveThread,
+		...matchesActiveTurn === void 0 ? {} : { matchesActiveTurn }
+	};
+}
+function readNestedTurnId(record) {
+	const turn = record.turn;
+	return isJsonObject(turn) ? readString(turn, "id") : void 0;
+}
+function readNestedTurnThreadId(record) {
+	const turn = record.turn;
+	return isJsonObject(turn) ? readString(turn, "threadId") : void 0;
+}
 function readString(record, key) {
 	const value = record[key];
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 //#endregion
-export { formatComputerUseStatus as a, formatThreads as c, resolveCodexUsageLimitResetAtMs as d, shouldRefreshCodexRateLimitsForUsageLimitMessage as f, formatCodexStatus as i, readString as l, formatAccount as n, formatList as o, summarizeCodexAccountUsage as p, formatCodexDisplayText as r, formatModels as s, buildHelp as t, formatCodexUsageLimitErrorMessage as u };
+export { summarizeCodexAccountUsage as _, buildHelp as a, formatCodexStatus as c, formatModels as d, formatThreads as f, shouldRefreshCodexRateLimitsForUsageLimitMessage as g, resolveCodexUsageLimitResetAtMs as h, readCodexNotificationTurnId as i, formatComputerUseStatus as l, formatCodexUsageLimitErrorMessage as m, isCodexNotificationForTurn as n, formatAccount as o, readString$1 as p, readCodexNotificationThreadId as r, formatCodexDisplayText as s, describeCodexNotificationCorrelation as t, formatList as u };

package/dist/provider.js

@@ -1,9 +1,9 @@
 import { CODEX_APP_SERVER_AUTH_MARKER, CODEX_BASE_URL, CODEX_PROVIDER_ID, FALLBACK_CODEX_MODELS, buildCodexModelDefinition, buildCodexProviderConfig } from "./provider-catalog.js";
-import { c as resolveCodexAppServerRuntimeOptions, s as readCodexPluginConfig } from "./config-DqIp6oTk.js";
+import { c as readCodexPluginConfig, l as resolveCodexAppServerRuntimeOptions } from "./config-DDMrwfJl.js";
 import { resolveCodexSystemPromptContribution } from "./prompt-overlay.js";
 import { resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
-import { createSubsystemLogger } from "openclaw/plugin-sdk/core";
 import { normalizeModelCompat } from "openclaw/plugin-sdk/provider-model-shared";
+import { createSubsystemLogger } from "openclaw/plugin-sdk/core";
 //#region extensions/codex/provider.ts
 const DEFAULT_DISCOVERY_TIMEOUT_MS = 2500;
 const LIVE_DISCOVERY_ENV = "OPENCLAW_CODEX_DISCOVERY_LIVE";
@@ -123,7 +123,7 @@ async function listModelsBestEffort(params) {
 	}
 }
 async function listCodexAppServerModelsLazy(options) {
-	const { listCodexAppServerModels } = await import("./models-C8MdOXGD.js").then((n) => n.r);
+	const { listCodexAppServerModels } = await import("./models-B_uo1pf5.js").then((n) => n.r);
 	return listCodexAppServerModels(options);
 }
 function normalizeTimeoutMs(value) {

package/dist/{request-BePR77QD.js → request-NklFaHM4.js}

@@ -1,6 +1,7 @@
-import { n as CodexAppServerRpcError } from "./client-Ab4Fw77C.js";
-import { f as resolveCodexAppServerHomeDir, i as getSharedCodexAppServerClient, o as withTimeout, r as createIsolatedCodexAppServerClient } from "./shared-client-DCxJx5QU.js";
-import { i as buildCodexAppInventoryCacheKey } from "./plugin-activation-BkQkPLOY.js";
+import { n as CodexAppServerRpcError } from "./client-D3SUwPFl.js";
+import { y as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-4Ul7RoW4.js";
+import { f as resolveCodexAppServerHomeDir, i as getSharedCodexAppServerClient, o as withTimeout, r as createIsolatedCodexAppServerClient } from "./shared-client-C_RbGxW8.js";
+import { t as resolveCodexAppServerDirectSandboxBypassBlock } from "./sandbox-guard-CTnEWuor.js";
 import { createHash } from "node:crypto";
 //#region extensions/codex/src/app-server/capabilities.ts
 const CODEX_CONTROL_METHODS = {
@@ -66,6 +67,14 @@ function fingerprintCodexPluginAppCacheCredentials(startOptions) {
 //#endregion
 //#region extensions/codex/src/app-server/request.ts
 async function requestCodexAppServerJson(params) {
+	const sandboxBlock = resolveCodexAppServerDirectSandboxBypassBlock({
+		method: params.method,
+		requestParams: params.requestParams,
+		config: params.config,
+		sessionKey: params.sessionKey,
+		sessionId: params.sessionId
+	});
+	if (sandboxBlock) throw new Error(sandboxBlock);
 	const timeoutMs = params.timeoutMs ?? 6e4;
 	return await withTimeout((async () => {
 		const client = await (params.isolated ? createIsolatedCodexAppServerClient : getSharedCodexAppServerClient)({