@openclaw/codex 2026.6.8 → 2026.6.9-beta.1

package/dist/web-search-contract-api.js

@@ -0,0 +1,10 @@
+import { t as createCodexWebSearchProviderBase } from "./web-search-provider.shared-BrZmlqyR.js";
+//#region extensions/codex/web-search-contract-api.ts
+function createCodexWebSearchProvider() {
+	return {
+		...createCodexWebSearchProviderBase(),
+		createTool: () => null
+	};
+}
+//#endregion
+export { createCodexWebSearchProvider };

package/dist/web-search-provider.runtime-DrpQ8Cyd.js

@@ -0,0 +1,74 @@
+import { n as isJsonObject } from "./protocol-dh-ETiNd.js";
+import { g as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-CbJqqnEw.js";
+import { n as runBoundedCodexAppServerTurn } from "./media-understanding-provider-CiwPkR58.js";
+import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
+//#region extensions/codex/src/web-search-provider.runtime.ts
+async function executeCodexWebSearchProviderTool(ctx, args, executionContext, options) {
+	const query = readStringParam(args, "query", { required: true });
+	const start = Date.now();
+	const result = await runBoundedCodexAppServerTurn({
+		config: ctx.config,
+		model: { mode: "live-default" },
+		timeoutMs: resolveSearchTimeoutSeconds(ctx.searchConfig) * 1e3,
+		signal: executionContext?.signal,
+		agentDir: ctx.agentDir,
+		options,
+		taskLabel: "hosted search",
+		developerInstructions: "You are OpenClaw's bounded web-search worker. You must use Codex hosted web_search to answer the user's search query. Return a concise grounded answer with source URLs. Do not call other tools, edit files, or ask follow-up questions.",
+		input: [{
+			type: "text",
+			text: query,
+			text_elements: []
+		}],
+		requiredModalities: ["text"],
+		isolation: "private-stdio",
+		threadConfig: buildCodexNativeWebSearchThreadConfig(ctx.config)
+	});
+	const searches = result.items.filter((item) => item.type === "webSearch").map(summarizeCodexWebSearchItem);
+	if (searches.length === 0) throw new Error("Codex hosted search completed without invoking web search.");
+	return {
+		query,
+		provider: "codex",
+		model: result.model,
+		tookMs: Date.now() - start,
+		externalContent: {
+			untrusted: true,
+			source: "web_search",
+			provider: "codex",
+			wrapped: true
+		},
+		content: wrapWebContent(result.text, "web_search"),
+		searches
+	};
+}
+function summarizeCodexWebSearchItem(item) {
+	const action = isJsonObject(item.action) ? item.action : void 0;
+	const actionType = readNonEmptyString(action, "type");
+	const queries = actionType === "search" ? readNonEmptyStringArray(action, "queries") : [];
+	const query = normalizeNonEmptyString(item.query) ?? (actionType === "search" ? readNonEmptyString(action, "query") : void 0) ?? queries[0];
+	const url = readNonEmptyString(action, "url");
+	const pattern = readNonEmptyString(action, "pattern");
+	return {
+		...query ? { query } : {},
+		...queries.length > 0 ? { queries } : {},
+		...actionType && actionType !== "search" ? { action: actionType } : {},
+		...url ? { url } : {},
+		...pattern ? { pattern } : {}
+	};
+}
+function readNonEmptyString(record, key) {
+	return record ? normalizeNonEmptyString(record[key]) : void 0;
+}
+function readNonEmptyStringArray(record, key) {
+	const value = record?.[key];
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((entry) => {
+		const normalized = normalizeNonEmptyString(entry);
+		return normalized ? [normalized] : [];
+	});
+}
+function normalizeNonEmptyString(value) {
+	return typeof value === "string" ? value.trim() || void 0 : void 0;
+}
+//#endregion
+export { executeCodexWebSearchProviderTool };

package/dist/web-search-provider.shared-BrZmlqyR.js

@@ -0,0 +1,32 @@
+import { createWebSearchProviderContractFields } from "openclaw/plugin-sdk/provider-web-search-contract";
+//#region extensions/codex/src/web-search-provider.shared.ts
+function createCodexWebSearchProviderBase() {
+	return {
+		id: "codex",
+		label: "Codex Hosted Search",
+		hint: "Grounded answers through your Codex app-server account",
+		onboardingScopes: ["text-inference"],
+		requiresCredential: false,
+		envVars: [],
+		placeholder: "(uses Codex sign-in)",
+		signupUrl: "https://chatgpt.com/codex",
+		docsUrl: "https://docs.openclaw.ai/tools/web",
+		autoDetectOrder: 900,
+		credentialPath: "",
+		...createWebSearchProviderContractFields({
+			credentialPath: "",
+			searchCredential: { type: "none" },
+			selectionPluginId: "codex"
+		}),
+		runSetup: async (ctx) => {
+			await ctx.prompter.note([
+				"Codex Hosted Search uses the bundled Codex app-server and your Codex/OpenAI sign-in.",
+				"If needed, sign in with: openclaw models auth login --provider openai",
+				"Verify the app-server account with /codex status."
+			].join("\n"), "Codex Hosted Search");
+			return ctx.config;
+		}
+	};
+}
+//#endregion
+export { createCodexWebSearchProviderBase as t };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.8",
+  "version": "2026.6.9-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/codex",
-      "version": "2026.6.8",
+      "version": "2026.6.9-beta.1",
       "dependencies": {
         "@openai/codex": "0.139.0",
         "typebox": "1.1.39",

package/openclaw.plugin.json

@@ -5,7 +5,8 @@
   "providers": ["codex"],
   "contracts": {
     "mediaUnderstandingProviders": ["codex"],
-    "migrationProviders": ["codex"]
+    "migrationProviders": ["codex"],
+    "webSearchProviders": ["codex"]
   },
   "mediaUnderstandingProviderMetadata": {
     "codex": {
@@ -100,7 +101,7 @@
             "default": false
           },
           "allow_destructive_actions": {
-            "type": "boolean",
+            "oneOf": [{ "type": "boolean" }, { "const": "auto" }],
             "default": true
           },
           "plugins": {
@@ -120,7 +121,7 @@
                   "type": "string"
                 },
                 "allow_destructive_actions": {
-                  "type": "boolean"
+                  "oneOf": [{ "type": "boolean" }, { "const": "auto" }]
                 }
               }
             }
@@ -160,6 +161,9 @@
             "type": "array",
             "items": { "type": "string" }
           },
+          "remoteWorkspaceRoot": {
+            "type": "string"
+          },
           "codeModeOnly": {
             "type": "boolean",
             "default": false
@@ -192,6 +196,47 @@
             "enum": ["user", "auto_review", "guardian_subagent"]
           },
           "serviceTier": { "type": ["string", "null"] },
+          "networkProxy": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "enabled": {
+                "type": "boolean",
+                "default": false
+              },
+              "profileName": { "type": "string" },
+              "baseProfile": {
+                "type": "string",
+                "enum": ["read-only", "workspace"]
+              },
+              "mode": {
+                "type": "string",
+                "enum": ["limited", "full"]
+              },
+              "domains": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string",
+                  "enum": ["allow", "deny"]
+                }
+              },
+              "unixSockets": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string",
+                  "enum": ["allow", "none"]
+                }
+              },
+              "proxyUrl": { "type": "string" },
+              "socksUrl": { "type": "string" },
+              "enableSocks5": { "type": "boolean" },
+              "enableSocks5Udp": { "type": "boolean" },
+              "allowUpstreamProxy": { "type": "boolean" },
+              "allowLocalBinding": { "type": "boolean" },
+              "dangerouslyAllowNonLoopbackProxy": { "type": "boolean" },
+              "dangerouslyAllowAllUnixSockets": { "type": "boolean" }
+            }
+          },
           "defaultWorkspaceDir": {
             "type": "string"
           },
@@ -290,7 +335,7 @@
     },
     "codexPlugins.allow_destructive_actions": {
       "label": "Allow Destructive Plugin Actions",
-      "help": "Default policy for plugin app write or destructive action elicitations. Defaults to true.",
+      "help": "Default policy for plugin app write or destructive action elicitations. Use true to accept safe schemas without prompting, false to decline, or auto to ask through plugin approvals.",
       "advanced": true
     },
     "codexPlugins.plugins": {
@@ -344,6 +389,11 @@
       "help": "Environment variable names removed from the spawned stdio app-server process after overrides are applied.",
       "advanced": true
     },
+    "appServer.remoteWorkspaceRoot": {
+      "label": "Remote Workspace Root",
+      "help": "Remote Codex app-server workspace root used to project OpenClaw cwd suffixes before starting Codex threads.",
+      "advanced": true
+    },
     "appServer.codeModeOnly": {
       "label": "Code Mode Only",
       "help": "Expose Codex's code-mode-only tool surface. OpenClaw dynamic tools remain available through Codex nested tool calls.",
@@ -384,6 +434,81 @@
       "help": "Optional Codex app-server service tier. Use priority, flex, or null. Legacy fast is accepted as priority.",
       "advanced": true
     },
+    "appServer.networkProxy": {
+      "label": "Network Proxy",
+      "help": "Enable Codex permissions-profile networking for app-server commands.",
+      "advanced": true
+    },
+    "appServer.networkProxy.enabled": {
+      "label": "Network Proxy Enabled",
+      "help": "When enabled, OpenClaw defines a Codex permissions profile and selects it with default_permissions instead of sandbox fields.",
+      "advanced": true
+    },
+    "appServer.networkProxy.profileName": {
+      "label": "Network Proxy Profile",
+      "help": "Optional stable Codex permissions profile name. Leave unset to use a generated openclaw-network fingerprint name.",
+      "advanced": true
+    },
+    "appServer.networkProxy.baseProfile": {
+      "label": "Network Proxy Base",
+      "help": "Filesystem access used by the generated profile. Defaults to read-only for read-only sandboxes and workspace otherwise.",
+      "advanced": true
+    },
+    "appServer.networkProxy.domains": {
+      "label": "Network Domains",
+      "help": "Domain allow and deny rules for Codex sandboxed networking.",
+      "advanced": true
+    },
+    "appServer.networkProxy.unixSockets": {
+      "label": "Unix Sockets",
+      "help": "Unix socket allow and none rules for Codex sandboxed networking.",
+      "advanced": true
+    },
+    "appServer.networkProxy.proxyUrl": {
+      "label": "HTTP Proxy URL",
+      "help": "HTTP listener URL used by Codex sandboxed networking.",
+      "advanced": true
+    },
+    "appServer.networkProxy.socksUrl": {
+      "label": "SOCKS Proxy URL",
+      "help": "SOCKS listener URL used by Codex sandboxed networking.",
+      "advanced": true
+    },
+    "appServer.networkProxy.enableSocks5": {
+      "label": "Enable SOCKS5",
+      "help": "Expose SOCKS5 support for the generated Codex permissions profile.",
+      "advanced": true
+    },
+    "appServer.networkProxy.enableSocks5Udp": {
+      "label": "Enable SOCKS5 UDP",
+      "help": "Allow UDP over the SOCKS5 listener when SOCKS5 is enabled.",
+      "advanced": true
+    },
+    "appServer.networkProxy.allowUpstreamProxy": {
+      "label": "Allow Upstream Proxy",
+      "help": "Allow Codex sandboxed networking to chain through inherited HTTP(S)_PROXY or ALL_PROXY settings.",
+      "advanced": true
+    },
+    "appServer.networkProxy.allowLocalBinding": {
+      "label": "Allow Local Binding",
+      "help": "Permit broader local and private-network access through Codex sandboxed networking.",
+      "advanced": true
+    },
+    "appServer.networkProxy.mode": {
+      "label": "Network Mode",
+      "help": "Codex sandboxed networking mode for subprocess traffic.",
+      "advanced": true
+    },
+    "appServer.networkProxy.dangerouslyAllowNonLoopbackProxy": {
+      "label": "Allow Non-Loopback Proxy",
+      "help": "Permit non-loopback bind addresses for Codex sandboxed networking listeners.",
+      "advanced": true
+    },
+    "appServer.networkProxy.dangerouslyAllowAllUnixSockets": {
+      "label": "Allow All Unix Sockets",
+      "help": "Bypass Codex's Unix socket allowlist for tightly controlled environments.",
+      "advanced": true
+    },
     "appServer.defaultWorkspaceDir": {
       "label": "Default Workspace",
       "help": "Workspace used by /codex bind when --cwd is omitted.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.6.8",
+  "version": "2026.6.9-beta.1",
   "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
   "repository": {
     "type": "git",
@@ -34,10 +34,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.6.8"
+      "pluginApi": ">=2026.6.9-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.6.8"
+      "openclawVersion": "2026.6.9-beta.1"
     },
     "release": {
       "publishToClawHub": true,
@@ -55,7 +55,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.6.8"
+    "openclaw": ">=2026.6.9-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {