@openclaw/codex 2026.5.24-beta.2 → 2026.5.25-beta.1

package/dist/{client-1sSy4p3z.js → client-SrtuTTVa.js}

@@ -1,5 +1,4 @@
-import { l as resolveCodexAppServerRuntimeOptions } from "./config-DDMrwfJl.js";
-import { n as isRpcResponse } from "./protocol-oeJQu4rs.js";
+import { l as resolveCodexAppServerRuntimeOptions } from "./config-D6TUuyo2.js";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { OPENCLAW_VERSION, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { createInterface } from "node:readline";
@@ -7,6 +6,14 @@ import { spawn } from "node:child_process";
 import { EventEmitter } from "node:events";
 import { PassThrough, Writable } from "node:stream";
 import WebSocket from "ws";
+//#region extensions/codex/src/app-server/protocol.ts
+function isJsonObject$1(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function isRpcResponse(message) {
+	return "id" in message && !("method" in message);
+}
+//#endregion
 //#region extensions/codex/src/app-server/transport-stdio.ts
 const UNSAFE_ENVIRONMENT_KEYS = new Set([
 	"__proto__",
@@ -648,4 +655,4 @@ function formatExitValue(value) {
 	return "unknown";
 }
 //#endregion
-export { isCodexAppServerConnectionClosedError as a, resolveCodexAppServerSpawnEnv as c, isCodexAppServerApprovalRequest as i, CodexAppServerRpcError as n, MANAGED_CODEX_APP_SERVER_PACKAGE as o, compareCodexAppServerVersions as r, MIN_CODEX_SANDBOX_EXEC_SERVER_APP_SERVER_VERSION as s, CodexAppServerClient as t };
+export { isCodexAppServerConnectionClosedError as a, resolveCodexAppServerSpawnEnv as c, isCodexAppServerApprovalRequest as i, isJsonObject$1 as l, CodexAppServerRpcError as n, MANAGED_CODEX_APP_SERVER_PACKAGE as o, compareCodexAppServerVersions as r, MIN_CODEX_SANDBOX_EXEC_SERVER_APP_SERVER_VERSION as s, CodexAppServerClient as t };

package/dist/{client-factory-Bk6i4FnW.js → client-factory-A7DQkSLq.js}

@@ -1,5 +1,5 @@
 //#region extensions/codex/src/app-server/client-factory.ts
-const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-CFCUGEVs.js").then((n) => n.a).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
+const defaultCodexAppServerClientFactory = (startOptions, authProfileId, agentDir, config) => import("./shared-client-CZP1DjaN.js").then((n) => n.a).then(({ getSharedCodexAppServerClient }) => getSharedCodexAppServerClient({
 	startOptions,
 	authProfileId,
 	agentDir,

package/dist/{command-handlers-CcTABuem.js → command-handlers-CLtPT37L.js}

@@ -1,14 +1,15 @@
-import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions } from "./config-DDMrwfJl.js";
-import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-DtGLkqMP.js";
-import { t as isJsonObject } from "./protocol-oeJQu4rs.js";
-import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-Bw_mfIW2.js";
-import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-D93E78SA.js";
-import { _ as summarizeCodexAccountUsage, a as buildHelp, c as formatCodexStatus, d as formatModels, f as formatThreads, l as formatComputerUseStatus, o as formatAccount, p as readString$1, s as formatCodexDisplayText, u as formatList } from "./notification-correlation-qKY_sgga.js";
+import { a as isCodexFastServiceTier, l as resolveCodexAppServerRuntimeOptions } from "./config-D6TUuyo2.js";
+import { n as listCodexAppServerModels, t as listAllCodexAppServerModels } from "./models-CC2IusQs.js";
+import { l as isJsonObject } from "./client-SrtuTTVa.js";
+import { i as readCodexAppServerBinding, o as writeCodexAppServerBinding, t as clearCodexAppServerBinding } from "./session-binding-CwNOIDP2.js";
+import { i as describeControlFailure, r as CODEX_CONTROL_METHODS, t as requestCodexAppServerJson } from "./request-BO0z3vA8.js";
+import { _ as summarizeCodexAccountUsage, a as buildHelp, c as formatCodexStatus, d as formatModels, f as formatThreads, l as formatComputerUseStatus, o as formatAccount, p as readString$1, s as formatCodexDisplayText, u as formatList } from "./notification-correlation-D7tJW3FW.js";
 import { n as resolveCodexNativeExecutionBlock, r as resolveCodexNativeSandboxBlock } from "./sandbox-guard-CTnEWuor.js";
-import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, l as startCodexConversationThread, m as setCodexConversationFastMode, p as readCodexConversationActiveTurn, r as formatCodexCliSessions, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./node-cli-sessions-9CAqnIaA.js";
-import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-Hdq1WgTA.js";
+import { _ as steerCodexConversationTurn, b as readCodexConversationBindingData, d as parseCodexFastModeArg, f as parseCodexPermissionsModeArg, g as setCodexConversationPermissions, h as setCodexConversationModel, m as setCodexConversationFastMode, o as formatCodexCliSessions, p as readCodexConversationActiveTurn, r as startCodexConversationThread, u as formatPermissionsMode, v as stopCodexConversationTurn, x as resolveCodexDefaultWorkspaceDir, y as createCodexCliNodeConversationBindingData } from "./conversation-binding-B-GevkEb.js";
+import { n as installCodexComputerUse, r as readCodexComputerUseStatus } from "./computer-use-CVfE2Vfb.js";
 import { n as rememberCodexRateLimits } from "./rate-limit-cache-N66I-Rd7.js";
 import crypto from "node:crypto";
+import { normalizeOptionalString, normalizeUniqueStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { ensureAuthProfileStore, findNormalizedProviderValue, resolveAgentDir, resolveAuthProfileEligibility, resolveAuthProfileOrder, resolveDefaultAgentDir, resolveProfileUnusableUntilForDisplay, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/command-account.ts
 const OPENAI_PROVIDER_ID = "openai";
@@ -74,7 +75,7 @@ async function readCodexAccountAuthOverview(params) {
 function resolveDisplayAuthOrder(params) {
 	const codexOrder = resolveOrder(params.store.order, OPENAI_CODEX_PROVIDER_ID) ?? resolveOrder(params.config?.auth?.order, OPENAI_CODEX_PROVIDER_ID);
 	if (codexOrder && codexOrder.length > 0) return {
-		order: dedupe(codexOrder),
+		order: normalizeUniqueStringEntries(codexOrder),
 		explicit: true
 	};
 	return {
@@ -302,17 +303,6 @@ function formatRelativeReset(untilMs, nowMs) {
 	const days = Math.ceil(durationMs / dayMs);
 	return `in ${days} ${days === 1 ? "day" : "days"}`;
 }
-function dedupe(values) {
-	const seen = /* @__PURE__ */ new Set();
-	const result = [];
-	for (const value of values) {
-		const trimmed = value.trim();
-		if (!trimmed || seen.has(trimmed)) continue;
-		seen.add(trimmed);
-		result.push(trimmed);
-	}
-	return result;
-}
 //#endregion
 //#region extensions/codex/src/command-plugins-management.ts
 const POLICY_REFRESH_HINT = "New Codex conversations pick this up automatically. Use /new or /reset to refresh the current one.";
@@ -1607,8 +1597,5 @@ function normalizeComputerUseStringOverrides(overrides) {
 	if (mcpServerName) normalized.mcpServerName = mcpServerName;
 	return normalized;
 }
-function normalizeOptionalString(value) {
-	return value?.trim() || void 0;
-}
 //#endregion
 export { handleCodexSubcommand };

package/dist/compact-acCua7zr.js

@@ -0,0 +1,155 @@
+import { t as defaultCodexAppServerClientFactory } from "./client-factory-A7DQkSLq.js";
+import { l as resolveCodexAppServerRuntimeOptions } from "./config-D6TUuyo2.js";
+import { i as readCodexAppServerBinding } from "./session-binding-CwNOIDP2.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-CTnEWuor.js";
+import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
+//#region extensions/codex/src/app-server/compact.ts
+const warnedIgnoredCompactionOverrides = /* @__PURE__ */ new Set();
+async function maybeCompactCodexAppServerSession(params, options = {}) {
+	warnIfIgnoringOpenClawCompactionOverrides(params);
+	return compactCodexNativeThread(params, options);
+}
+function warnIfIgnoringOpenClawCompactionOverrides(params) {
+	const ignoredConfig = readIgnoredCompactionOverridePaths(params);
+	if (ignoredConfig.length === 0) return;
+	const warningKey = ignoredConfig.join("\0");
+	if (warnedIgnoredCompactionOverrides.has(warningKey)) return;
+	warnedIgnoredCompactionOverrides.add(warningKey);
+	embeddedAgentLog.warn("ignoring OpenClaw compaction overrides for Codex app-server compaction; Codex uses native server-side compaction", {
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		ignoredConfig
+	});
+}
+function readIgnoredCompactionOverridePaths(params) {
+	const ignored = /* @__PURE__ */ new Set();
+	for (const entry of readCompactionOverrideEntries(params)) {
+		const localProvider = typeof entry.record.provider === "string" ? entry.record.provider.trim() : "";
+		const inheritedProvider = !localProvider && typeof entry.inheritedRecord?.provider === "string" ? entry.inheritedRecord.provider.trim() : "";
+		const providerPath = localProvider ? `${entry.path}.compaction.provider` : inheritedProvider && entry.inheritedPath ? `${entry.inheritedPath}.compaction.provider` : void 0;
+		if (typeof entry.record.model === "string" && entry.record.model.trim()) ignored.add(`${entry.path}.compaction.model`);
+		if (providerPath) ignored.add(providerPath);
+	}
+	return [...ignored];
+}
+function readCompactionOverrideEntries(params) {
+	const entries = [];
+	const defaultCompaction = asOptionalRecord(asOptionalRecord(params.config?.agents)?.defaults)?.compaction;
+	const defaultRecord = asOptionalRecord(defaultCompaction);
+	if (defaultRecord) entries.push({
+		path: "agents.defaults",
+		record: defaultRecord
+	});
+	const agentId = readAgentIdFromSessionKey(params.sessionKey ?? params.sandboxSessionKey);
+	if (!agentId) return entries;
+	const agentCompaction = asOptionalRecord((Array.isArray(params.config?.agents?.list) ? params.config.agents.list : []).find((agent) => {
+		return (typeof agent?.id === "string" ? agent.id.trim().toLowerCase() : "") === agentId;
+	}))?.compaction;
+	const agentRecord = asOptionalRecord(agentCompaction);
+	if (agentRecord) entries.push({
+		path: `agents.list.${agentId}`,
+		record: agentRecord,
+		inheritedRecord: defaultRecord,
+		inheritedPath: "agents.defaults"
+	});
+	return entries;
+}
+function readAgentIdFromSessionKey(sessionKey) {
+	const parts = sessionKey?.trim().toLowerCase().split(":").filter(Boolean) ?? [];
+	if (parts.length < 3 || parts[0] !== "agent") return;
+	return parts[1]?.trim() || void 0;
+}
+async function compactCodexNativeThread(params, options = {}) {
+	const nativeExecutionBlock = resolveCodexNativeExecutionBlock({
+		config: params.config,
+		sessionKey: params.sandboxSessionKey ?? params.sessionKey,
+		sessionId: params.sessionId,
+		surface: "native compaction"
+	});
+	if (nativeExecutionBlock) return {
+		ok: false,
+		compacted: false,
+		reason: nativeExecutionBlock
+	};
+	const appServer = resolveCodexAppServerRuntimeOptions({ pluginConfig: options.pluginConfig });
+	const binding = await readCodexAppServerBinding(params.sessionFile, { config: params.config });
+	if (!binding?.threadId) return failedCodexThreadBindingCompactionResult(params, {
+		reason: "no codex app-server thread binding",
+		recovery: "missing_thread_binding"
+	});
+	const requestedAuthProfileId = params.authProfileId?.trim() || void 0;
+	if (requestedAuthProfileId && binding.authProfileId && binding.authProfileId !== requestedAuthProfileId) return {
+		ok: false,
+		compacted: false,
+		reason: "auth profile mismatch for session binding"
+	};
+	const client = await (options.clientFactory ?? defaultCodexAppServerClientFactory)(appServer.start, requestedAuthProfileId ?? binding.authProfileId, params.agentDir, params.config);
+	try {
+		await client.request("thread/compact/start", { threadId: binding.threadId });
+		embeddedAgentLog.info("started codex app-server compaction", {
+			sessionId: params.sessionId,
+			threadId: binding.threadId
+		});
+	} catch (error) {
+		if (isCodexThreadNotFoundError(error)) return failedCodexThreadBindingCompactionResult(params, {
+			threadId: binding.threadId,
+			reason: formatCompactionError(error),
+			recovery: "stale_thread_binding"
+		});
+		embeddedAgentLog.warn("codex app-server compaction failed", {
+			sessionId: params.sessionId,
+			sessionKey: params.sessionKey,
+			threadId: binding.threadId,
+			reason: formatCompactionError(error)
+		});
+		return {
+			ok: false,
+			compacted: false,
+			reason: formatCompactionError(error)
+		};
+	}
+	const resultDetails = {
+		backend: "codex-app-server",
+		threadId: binding.threadId,
+		signal: "thread/compact/start",
+		pending: true
+	};
+	return {
+		ok: true,
+		compacted: false,
+		result: {
+			summary: "",
+			firstKeptEntryId: "",
+			tokensBefore: params.currentTokenCount ?? 0,
+			details: resultDetails
+		}
+	};
+}
+function failedCodexThreadBindingCompactionResult(params, recovery) {
+	embeddedAgentLog.warn("codex app-server compaction could not use thread binding", {
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		threadId: recovery.threadId,
+		reason: recovery.reason,
+		recovery: recovery.recovery
+	});
+	return {
+		ok: false,
+		compacted: false,
+		reason: recovery.reason,
+		failure: {
+			reason: recovery.recovery,
+			rawError: recovery.reason
+		}
+	};
+}
+function isCodexThreadNotFoundError(error) {
+	return formatCompactionError(error).toLowerCase().includes("thread not found");
+}
+function formatCompactionError(error) {
+	if (error instanceof Error) return error.message;
+	return String(error);
+}
+//#endregion
+export { maybeCompactCodexAppServerSession };

package/dist/{computer-use-Hdq1WgTA.js → computer-use-CVfE2Vfb.js}

@@ -1,5 +1,5 @@
-import { l as resolveCodexAppServerRuntimeOptions, u as resolveCodexComputerUseConfig } from "./config-DDMrwfJl.js";
-import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-D93E78SA.js";
+import { l as resolveCodexAppServerRuntimeOptions, u as resolveCodexComputerUseConfig } from "./config-D6TUuyo2.js";
+import { i as describeControlFailure, t as requestCodexAppServerJson } from "./request-BO0z3vA8.js";
 import { existsSync } from "node:fs";
 //#region extensions/codex/src/app-server/computer-use.ts
 var CodexComputerUseSetupError = class extends Error {

package/dist/{config-DDMrwfJl.js → config-D6TUuyo2.js}

@@ -1,6 +1,7 @@
 import { createHmac, randomBytes } from "node:crypto";
 import { readFileSync } from "node:fs";
 import { hostname } from "node:os";
+import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
 import { z } from "zod";
 //#region extensions/codex/src/app-server/config.ts
@@ -9,6 +10,9 @@ const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
 const UNIX_CODEX_REQUIREMENTS_PATH = "/etc/codex/requirements.toml";
 const WINDOWS_CODEX_REQUIREMENTS_SUFFIX = "\\OpenAI\\Codex\\requirements.toml";
 const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
+function shouldAutoApproveCodexAppServerApprovals(appServer) {
+	return appServer.approvalPolicy === "never" && appServer.sandbox === "danger-full-access";
+}
 const DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME = "computer-use";
 const DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME = "computer-use";
 const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
@@ -457,8 +461,7 @@ function normalizeHeaders(value) {
 	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key.trim(), readNonEmptyString(child)]).filter((entry) => Boolean(entry[0] && entry[1])));
 }
 function normalizeStringList(value) {
-	if (!Array.isArray(value)) return [];
-	return value.map((entry) => readNonEmptyString(entry)).filter((entry) => entry !== void 0);
+	return normalizeTrimmedStringList(value);
 }
 function readBooleanEnv(value) {
 	if (value === void 0) return;
@@ -526,4 +529,4 @@ function splitShellWords(value) {
 	return words;
 }
 //#endregion
-export { isCodexFastServiceTier as a, readCodexPluginConfig as c, resolveCodexPluginsPolicy as d, withMcpElicitationsApprovalPolicy as f, isCodexAppServerApprovalPolicyAllowedByRequirements as i, resolveCodexAppServerRuntimeOptions as l, codexAppServerStartOptionsKey as n, isCodexSandboxExecServerEnabled as o, codexSandboxPolicyForTurn as r, normalizeCodexServiceTier as s, CODEX_PLUGINS_MARKETPLACE_NAME as t, resolveCodexComputerUseConfig as u };
+export { isCodexFastServiceTier as a, readCodexPluginConfig as c, resolveCodexPluginsPolicy as d, shouldAutoApproveCodexAppServerApprovals as f, isCodexAppServerApprovalPolicyAllowedByRequirements as i, resolveCodexAppServerRuntimeOptions as l, codexAppServerStartOptionsKey as n, isCodexSandboxExecServerEnabled as o, withMcpElicitationsApprovalPolicy as p, codexSandboxPolicyForTurn as r, normalizeCodexServiceTier as s, CODEX_PLUGINS_MARKETPLACE_NAME as t, resolveCodexComputerUseConfig as u };