@openclaw/codex 2026.7.1-beta.6 → 2026.7.2-beta.1

package/dist/{config-CYEDnLJ2.js → config-c48K5HP9.js}

@@ -9,7 +9,15 @@ import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { buildSecretInputSchema, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
+import { parse } from "smol-toml";
 import { z } from "zod";
+//#region extensions/codex/src/app-server/session-discovery-config.ts
+const codexSessionCatalogConfigSchema = z.object({ enabled: z.boolean().optional() }).strict();
+const codexDiscoveryConfigSchema = z.object({
+	enabled: z.boolean().optional(),
+	timeoutMs: z.number().positive().optional()
+}).strict();
+//#endregion
 //#region extensions/codex/src/app-server/config.ts
 const START_OPTIONS_KEY_SECRET_SYMBOL = Symbol.for("openclaw.codexAppServerStartOptionsKeySecret");
 const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
@@ -19,14 +27,22 @@ const CODEX_APP_SERVER_HOME_DIRNAME = "codex-home";
 const CODEX_CONFIG_TOML_FILENAME = "config.toml";
 const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
 const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
+const CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME = "workspace-directory";
 function shouldAutoApproveCodexAppServerApprovals(appServer) {
 	return appServer.networkProxy === void 0 && appServer.approvalPolicy === "never" && appServer.sandbox === "danger-full-access";
 }
 const DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME = "computer-use";
 const DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME = "computer-use";
 const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
+const DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS = 6e4;
+const DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS = 6e4;
+const DEFAULT_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES = 60;
 const DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX = "openclaw-network";
-const codexAppServerTransportSchema = z.enum(["stdio", "websocket"]);
+const codexAppServerTransportSchema = z.enum([
+	"stdio",
+	"websocket",
+	"unix"
+]);
 const codexAppServerHomeScopeSchema = z.enum(["agent", "user"]);
 const SecretInputSchema = buildSecretInputSchema();
 const codexAppServerPolicyModeSchema = z.enum(["yolo", "guardian"]);
@@ -46,6 +62,13 @@ const codexAppServerApprovalsReviewerSchema = z.enum([
 	"guardian_subagent"
 ]);
 const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
+const codexComputerUseHealthIntervalSchema = z.union([
+	z.literal(30),
+	z.literal(60),
+	z.literal(120),
+	z.literal(240)
+]);
+const codexComputerUsePluginCacheModeSchema = z.enum(["shared", "independent"]);
 const codexPluginDestructivePolicySchema = z.union([
 	z.boolean(),
 	z.literal("auto"),
@@ -74,7 +97,7 @@ const codexAppServerNetworkProxySchema = z.object({
 }).strict();
 const codexPluginEntryConfigSchema = z.object({
 	enabled: z.boolean().optional(),
-	marketplaceName: z.literal(CODEX_PLUGINS_MARKETPLACE_NAME).optional(),
+	marketplaceName: z.enum([CODEX_PLUGINS_MARKETPLACE_NAME, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME]).optional(),
 	pluginName: z.string().trim().min(1).optional(),
 	allow_destructive_actions: codexPluginDestructivePolicySchema.optional()
 }).strict();
@@ -84,17 +107,42 @@ const codexPluginsConfigSchema = z.object({
 	allow_destructive_actions: codexPluginDestructivePolicySchema.optional(),
 	plugins: z.record(z.string(), codexPluginEntryConfigSchema).optional()
 }).strict();
+const codexSupervisionEndpointSchema = z.union([z.object({
+	id: z.string().optional(),
+	label: z.string().optional(),
+	transport: z.literal("stdio-proxy").optional(),
+	command: z.string().optional(),
+	args: z.array(z.string()).optional(),
+	cwd: z.string().optional()
+}).strict(), z.object({
+	id: z.string().optional(),
+	label: z.string().optional(),
+	transport: z.literal("websocket"),
+	url: z.string(),
+	authTokenEnv: z.string().optional()
+}).strict()]);
+const codexSupervisionConfigSchema = z.object({
+	enabled: z.boolean().optional(),
+	endpoints: z.array(codexSupervisionEndpointSchema).optional(),
+	allowRawTranscripts: z.boolean().optional(),
+	allowWriteControls: z.boolean().optional()
+}).strict();
 const codexPluginConfigSchema = z.object({
 	codexDynamicToolsLoading: codexDynamicToolsLoadingSchema.optional(),
 	codexDynamicToolsExclude: z.array(z.string()).optional(),
-	discovery: z.object({
-		enabled: z.boolean().optional(),
-		timeoutMs: z.number().positive().optional()
-	}).strict().optional(),
+	sessionCatalog: codexSessionCatalogConfigSchema.optional(),
+	discovery: codexDiscoveryConfigSchema.optional(),
 	computerUse: z.object({
 		enabled: z.boolean().optional(),
 		autoInstall: z.boolean().optional(),
 		marketplaceDiscoveryTimeoutMs: z.number().positive().optional(),
+		liveTestTimeoutMs: z.number().positive().optional(),
+		toolCallTimeoutMs: z.number().positive().optional(),
+		healthCheckEnabled: z.boolean().optional(),
+		healthCheckIntervalMinutes: codexComputerUseHealthIntervalSchema.optional(),
+		pluginCacheMode: codexComputerUsePluginCacheModeSchema.optional(),
+		strictReadiness: z.boolean().optional(),
+		autoRepair: z.boolean().optional(),
 		marketplaceSource: z.string().optional(),
 		marketplacePath: z.string().optional(),
 		marketplaceName: z.string().optional(),
@@ -102,6 +150,7 @@ const codexPluginConfigSchema = z.object({
 		mcpServerName: z.string().optional()
 	}).strict().optional(),
 	codexPlugins: z.unknown().optional(),
+	supervision: codexSupervisionConfigSchema.optional(),
 	appServer: z.object({
 		mode: codexAppServerPolicyModeSchema.optional(),
 		transport: codexAppServerTransportSchema.optional(),
@@ -153,11 +202,11 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 	const enabled = config?.enabled === true;
 	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
 	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
-		if (entry.marketplaceName !== "openai-curated" || !entry.pluginName) return [];
+		if (!isCodexPluginMarketplaceName(entry.marketplaceName) || !entry.pluginName) return [];
 		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
 		return [{
 			configKey,
-			marketplaceName: CODEX_PLUGINS_MARKETPLACE_NAME,
+			marketplaceName: entry.marketplaceName,
 			pluginName: entry.pluginName,
 			enabled: enabled && entry.enabled !== false,
 			allowDestructiveActions: entryDestructivePolicy.allowDestructiveActions,
@@ -173,6 +222,9 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 		pluginPolicies
 	};
 }
+function isCodexPluginMarketplaceName(value) {
+	return value === "openai-curated" || value === "workspace-directory";
+}
 function resolveCodexPluginDestructivePolicy(policy) {
 	if (policy === "auto" || policy === "ask") return {
 		allowDestructiveActions: true,
@@ -187,7 +239,7 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 	const env = params.env ?? process.env;
 	const config = readCodexPluginConfig(params.pluginConfig).appServer ?? {};
 	const transport = resolveTransport(config.transport);
-	const homeScope = config.homeScope === "user" ? "user" : "agent";
+	const homeScope = config.homeScope ?? "agent";
 	const configCommand = readNonEmptyString(config.command);
 	const envCommand = readNonEmptyString(env.OPENCLAW_CODEX_APP_SERVER_BIN);
 	const command = configCommand ?? envCommand ?? "codex";
@@ -203,7 +255,7 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 		value: config.authToken,
 		path: "plugins.entries.codex.config.appServer.authToken"
 	});
-	const url = readNonEmptyString(config.url);
+	const url = readNonEmptyString(config.url) ?? (transport === "unix" ? "unix://" : void 0);
 	const connectionClass = inferCodexAppServerConnectionClass({
 		transport,
 		url
@@ -264,9 +316,12 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 	const serviceTier = normalizeCodexServiceTier(config.serviceTier);
 	const resolvedSandbox = forcedPolicy?.sandbox ?? configuredSandbox ?? defaultPolicy?.sandbox ?? (policyMode === "guardian" ? "workspace-write" : "danger-full-access");
 	if (transport === "websocket" && !url) throw new Error("plugins.entries.codex.config.appServer.url is required when appServer.transport is websocket");
-	if (transport === "websocket" && homeScope === "user") throw new Error("plugins.entries.codex.config.appServer.homeScope=user requires appServer.transport=stdio");
-	assertCodexAppServerConnectionClassConfig({
-		connectionClass,
+	if (transport === "websocket" && homeScope === "user") throw new Error("plugins.entries.codex.config.appServer.homeScope=user requires appServer.transport=stdio or unix");
+	if (transport === "unix" && homeScope !== "user") throw new Error("plugins.entries.codex.config.appServer.transport=unix requires appServer.homeScope=user");
+	if (transport === "unix" && !url?.startsWith("unix://")) throw new Error("plugins.entries.codex.config.appServer.url must use unix:// when appServer.transport is unix");
+	assertCodexAppServerConnectionSecurity({
+		transport,
+		url,
 		authToken,
 		headers
 	});
@@ -274,12 +329,21 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 	const envApprovalPolicy = resolveApprovalPolicy(env.OPENCLAW_CODEX_APP_SERVER_APPROVAL_POLICY);
 	const approvalPolicy = configApprovalPolicy ?? envApprovalPolicy ?? defaultPolicy?.approvalPolicy ?? (policyMode === "guardian" ? "on-request" : "never");
 	const approvalPolicySource = configApprovalPolicy ? "config" : envApprovalPolicy ? "env" : defaultPolicy?.approvalPolicy ? "requirements" : "implicit";
+	const computerUseConfig = resolveCodexComputerUseConfig({
+		pluginConfig: params.pluginConfig,
+		env
+	});
+	const managedCommandOrder = params.managedCommandOrder ?? (homeScope === "user" || computerUseConfig.enabled ? "desktop-first" : "package-first");
+	const includeManagedCommandOrder = commandSource === "managed" && (managedCommandOrder === "desktop-first" || params.managedCommandOrder === "package-first");
+	const managedComputerUsePluginNames = [.../* @__PURE__ */ new Set([DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, computerUseConfig.pluginName])];
 	return {
 		start: {
 			transport,
 			homeScope,
 			command,
 			commandSource,
+			...includeManagedCommandOrder ? { managedCommandOrder } : {},
+			...commandSource === "managed" ? { managedComputerUsePluginNames } : {},
 			args: args.length > 0 ? args : [
 				"app-server",
 				"--listen",
@@ -305,6 +369,28 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 		...resolveCodexAppServerNetworkProxy(config.networkProxy, resolvedSandbox)
 	};
 }
+/**
+* Rechecks Codex-owned plugin state at the final spawn boundary, where the
+* effective agent home is known, so Computer Use keeps the desktop app's TCC ownership.
+*/
+function resolveCodexAppServerStartOptionsForAgent(params) {
+	const startOptions = params.startOptions;
+	if (startOptions.transport !== "stdio" || startOptions.commandSource !== "managed" || startOptions.managedCommandOrder !== void 0) return startOptions;
+	if (startOptions.homeScope === "user") return {
+		...startOptions,
+		managedCommandOrder: "desktop-first"
+	};
+	return codexConfigEnablesNativeComputerUse({
+		agentDir: params.agentDir,
+		codexConfigToml: params.codexConfigToml,
+		env: params.env,
+		homeScope: "agent",
+		pluginNames: startOptions.managedComputerUsePluginNames ?? [DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME]
+	}) ? {
+		...startOptions,
+		managedCommandOrder: "desktop-first"
+	} : startOptions;
+}
 function isCodexAppServerApprovalPolicyAllowedByRequirements(policy, params = {}) {
 	const content = readCodexRequirementsToml(params);
 	if (content === void 0) return true;
@@ -359,32 +445,58 @@ function resolveCodexComputerUseConfig(params = {}) {
 	const marketplaceSource = readNonEmptyString(params.overrides?.marketplaceSource) ?? readNonEmptyString(config.marketplaceSource) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_SOURCE);
 	const marketplacePath = readNonEmptyString(params.overrides?.marketplacePath) ?? readNonEmptyString(config.marketplacePath) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_PATH);
 	const marketplaceName = readNonEmptyString(params.overrides?.marketplaceName) ?? readNonEmptyString(config.marketplaceName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_NAME);
+	const configuredPluginName = readNonEmptyString(params.overrides?.pluginName) ?? readNonEmptyString(config.pluginName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_NAME);
+	const configuredMcpServerName = readNonEmptyString(params.overrides?.mcpServerName) ?? readNonEmptyString(config.mcpServerName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MCP_SERVER_NAME);
 	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
 	const marketplaceDiscoveryTimeoutMs = normalizePositiveNumber(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
+	const liveTestTimeoutMs = normalizePositiveNumber(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
+	const toolCallTimeoutMs = normalizePositiveNumber(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
+	const healthCheckIntervalMinutes = normalizeComputerUseHealthCheckIntervalMinutes(params.overrides?.healthCheckIntervalMinutes ?? config.healthCheckIntervalMinutes ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES));
+	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
+	const pluginCacheMode = normalizeComputerUsePluginCacheMode(params.overrides?.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(config.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_CACHE_MODE) ?? "independent";
+	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
+	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
 	return {
-		enabled: params.overrides?.enabled ?? config.enabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName),
+		enabled: params.overrides?.enabled ?? config.enabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
 		autoInstall,
 		marketplaceDiscoveryTimeoutMs,
-		pluginName: readNonEmptyString(params.overrides?.pluginName) ?? readNonEmptyString(config.pluginName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_NAME) ?? DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME,
-		mcpServerName: readNonEmptyString(params.overrides?.mcpServerName) ?? readNonEmptyString(config.mcpServerName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MCP_SERVER_NAME) ?? DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME,
+		liveTestTimeoutMs,
+		toolCallTimeoutMs,
+		healthCheckEnabled,
+		healthCheckIntervalMinutes,
+		pluginCacheMode,
+		strictReadiness,
+		autoRepair,
+		pluginName: configuredPluginName ?? DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME,
+		mcpServerName: configuredMcpServerName ?? DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME,
 		...marketplaceSource ? { marketplaceSource } : {},
 		...marketplacePath ? { marketplacePath } : {},
 		...marketplaceName ? { marketplaceName } : {}
 	};
 }
+function normalizeComputerUseHealthCheckIntervalMinutes(value) {
+	return value === 30 || value === 60 || value === 120 || value === 240 ? value : DEFAULT_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES;
+}
+function normalizeComputerUsePluginCacheMode(value) {
+	return value === "shared" || value === "independent" ? value : null;
+}
 function codexAppServerStartOptionsKey(options, params = {}) {
 	return JSON.stringify({
 		transport: options.transport,
 		command: options.command,
 		commandSource: options.commandSource ?? null,
+		managedCommandOrder: options.managedCommandOrder ?? "package-first",
+		managedComputerUsePluginNames: [...options.managedComputerUsePluginNames ?? []].toSorted(),
 		managedFallbackCommandPaths: [...options.managedFallbackCommandPaths ?? []],
 		args: options.args,
+		cwd: options.cwd ?? null,
 		url: options.url ?? null,
 		authToken: hashSecretForKey(options.authToken, "authToken"),
 		headers: Object.entries(options.headers).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `header:${key}`)]),
 		env: Object.entries(options.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `env:${key}`)]),
 		clearEnv: [...options.clearEnv ?? []].toSorted(),
 		authProfileId: params.authProfileId ?? null,
+		authBindingFingerprint: params.authBindingFingerprint ?? null,
 		agentDir: params.agentDir ?? null,
 		fallbackApiKeyCacheKey: params.fallbackApiKeyCacheKey ?? null
 	});
@@ -403,6 +515,23 @@ function codexSandboxPolicyForTurn(mode, cwd) {
 		excludeSlashTmp: false
 	};
 }
+/** Resolves the passive supervision control connection without changing harness defaults. */
+function resolveCodexSupervisionAppServerRuntimeOptions(params = {}) {
+	const pluginConfig = readCodexPluginConfig(params.pluginConfig);
+	const appServer = pluginConfig.appServer ?? {};
+	const transport = resolveTransport(appServer.transport);
+	const homeScope = appServer.homeScope ?? (transport === "websocket" ? "agent" : "user");
+	return resolveCodexAppServerRuntimeOptions({
+		...params,
+		pluginConfig: {
+			...pluginConfig,
+			appServer: {
+				...appServer,
+				homeScope
+			}
+		}
+	});
+}
 function resolveCodexAppServerNetworkProxy(config, sandbox) {
 	if (config?.enabled !== true) return {};
 	const fileSystemMode = config.baseProfile === "read-only" || !config.baseProfile && sandbox === "read-only" ? "read" : "write";
@@ -484,7 +613,7 @@ function withMcpElicitationsApprovalPolicy(policy) {
 	} };
 }
 function resolveTransport(value) {
-	return value === "websocket" ? "websocket" : "stdio";
+	return value === "websocket" || value === "unix" ? value : "stdio";
 }
 function normalizeRemoteWorkspaceRoot(value) {
 	return readNonEmptyString(value);
@@ -499,6 +628,14 @@ function assertCodexAppServerConnectionClassConfig(params) {
 		headers: params.headers
 	})) throw new Error("remote Codex app-server WebSocket URLs require appServer.authToken or an Authorization header");
 }
+/** Applies the canonical remote-auth boundary to any Codex AppServer transport. */
+function assertCodexAppServerConnectionSecurity(params) {
+	assertCodexAppServerConnectionClassConfig({
+		connectionClass: inferCodexAppServerConnectionClass(params),
+		authToken: params.authToken,
+		headers: params.headers
+	});
+}
 function isLoopbackWebSocketUrl(value) {
 	let parsed;
 	try {
@@ -603,12 +740,18 @@ function parseTopLevelRequirementsStringArray(content, key) {
 	return parseRequirementsStringArray(stripTomlLineComments(content).slice(0, firstTomlTableOffset(content)), key);
 }
 function parseTomlStringValue(content, key) {
-	const match = parseTomlStringAssignment(content, tomlDottedKeyPattern(key));
-	return match ? match[1] ?? match[2] ?? "" : void 0;
+	return parseTomlStringAssignmentValue(content, tomlDottedKeyPattern(key));
 }
 function parseInlineOpenAIModelProviderBaseUrl(content) {
-	const match = parseTomlStringAssignment(content, `${tomlKeyPattern("model_providers")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("openai")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("base_url")}`);
-	return match ? match[1] ?? match[2] ?? "" : void 0;
+	return parseTomlStringAssignmentValue(content, `${tomlKeyPattern("model_providers")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("openai")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("base_url")}`);
+}
+function parseTomlStringAssignmentValue(content, keyPattern) {
+	const assignment = content.match(new RegExp(`(?:^|\\n)\\s*${keyPattern}\\s*=\\s*([^\\r\\n]*)`));
+	if (!assignment) return;
+	const rawValue = assignment[1]?.trimStart() ?? "";
+	if (rawValue.startsWith("\"\"\"") || rawValue.startsWith("'''")) return false;
+	const match = parseTomlStringAssignment(content, keyPattern);
+	return match ? match[1] ?? match[2] ?? "" : false;
 }
 function parseTomlStringAssignment(content, keyPattern) {
 	return content.match(new RegExp(`(?:^|\\n)\\s*${keyPattern}\\s*=\\s*(?:"([^"\\\\]*(?:\\\\.[^"\\\\]*)*)"|'([^']*)')`));
@@ -759,14 +902,19 @@ function readCodexBaseUrlOverridesForModelBackedReview(params) {
 	};
 	const topLevelContent = stripTomlLineComments(configToml).slice(0, firstTomlTableOffset(configToml));
 	const modelProviderOpenAISection = parseTomlTableSection(configToml, "model_providers.openai");
+	const openAIBaseUrl = parseTomlStringValue(topLevelContent, "openai_base_url");
+	const chatGPTBaseUrl = parseTomlStringValue(topLevelContent, "chatgpt_base_url");
+	const openAI = [
+		openAIBaseUrl,
+		parseTomlStringValue(topLevelContent, "model_providers.openai.base_url"),
+		parseInlineOpenAIModelProviderBaseUrl(topLevelContent),
+		modelProviderOpenAISection ? parseTomlStringValue(modelProviderOpenAISection, "base_url") : void 0
+	];
+	const chatGPT = [chatGPTBaseUrl];
+	if ([...openAI, ...chatGPT].includes(false)) return false;
 	return {
-		openAI: [
-			parseTomlStringValue(topLevelContent, "openai_base_url"),
-			parseTomlStringValue(topLevelContent, "model_providers.openai.base_url"),
-			parseInlineOpenAIModelProviderBaseUrl(topLevelContent),
-			modelProviderOpenAISection ? parseTomlStringValue(modelProviderOpenAISection, "base_url") : void 0
-		].filter((entry) => entry !== void 0),
-		chatGPT: [parseTomlStringValue(topLevelContent, "chatgpt_base_url")].filter((entry) => entry !== void 0)
+		openAI: openAI.filter((entry) => typeof entry === "string"),
+		chatGPT: chatGPT.filter((entry) => typeof entry === "string")
 	};
 }
 function readCodexAppServerConfigToml(params) {
@@ -779,6 +927,29 @@ function readCodexAppServerConfigToml(params) {
 		return readErrorCode(error) === "ENOENT" ? void 0 : false;
 	}
 }
+function codexConfigEnablesNativeComputerUse(params) {
+	const configToml = readCodexAppServerConfigToml(params);
+	if (configToml === false) return true;
+	if (configToml === void 0) return false;
+	let parsedConfig;
+	try {
+		parsedConfig = parse(configToml, { integersAsBigInt: true });
+	} catch {
+		return true;
+	}
+	const rawPlugins = parsedConfig.plugins;
+	if (rawPlugins === void 0) return false;
+	const plugins = readRecord(rawPlugins);
+	if (!plugins) return true;
+	for (const [pluginId, rawPluginConfig] of Object.entries(plugins)) {
+		if (!params.pluginNames.some((pluginName) => pluginId === pluginName || pluginId.startsWith(`${pluginName}@`))) continue;
+		const pluginConfig = readRecord(rawPluginConfig);
+		if (!pluginConfig) return true;
+		if (pluginConfig.enabled === false) continue;
+		return true;
+	}
+	return false;
+}
 function resolveCodexAppServerConfigPath(params) {
 	if (params.homeScope === "user") return path.join(resolveCodexAppServerUserHomeDir(params.env), CODEX_CONFIG_TOML_FILENAME);
 	const agentDir = readNonEmptyString(params.agentDir);
@@ -1135,4 +1306,4 @@ function splitShellWords(value) {
 	return words;
 }
 //#endregion
-export { shouldAutoApproveCodexAppServerApprovals as _, isCodexAppServerApprovalPolicyAllowedByRequirements as a, isTrustedCodexModelBackedOpenAIProvider as c, resolveCodexAppServerRuntimeOptions as d, resolveCodexAppServerUserHomeDir as f, resolveOpenClawExecPolicyForCodexAppServer as g, resolveCodexPluginsPolicy as h, codexSandboxPolicyForTurn as i, normalizeCodexServiceTier as l, resolveCodexModelBackedReviewerPolicyContext as m, canUseCodexModelBackedApprovalsReviewerForModel as n, isCodexFastServiceTier as o, resolveCodexComputerUseConfig as p, codexAppServerStartOptionsKey as r, isCodexSandboxExecServerEnabled as s, CODEX_PLUGINS_MARKETPLACE_NAME as t, readCodexPluginConfig as u, withMcpElicitationsApprovalPolicy as v };
+export { resolveCodexPluginsPolicy as _, codexAppServerStartOptionsKey as a, shouldAutoApproveCodexAppServerApprovals as b, isCodexFastServiceTier as c, readCodexPluginConfig as d, resolveCodexAppServerRuntimeOptions as f, resolveCodexModelBackedReviewerPolicyContext as g, resolveCodexComputerUseConfig as h, canUseCodexModelBackedApprovalsReviewerForModel as i, isCodexSandboxExecServerEnabled as l, resolveCodexAppServerUserHomeDir as m, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME as n, codexSandboxPolicyForTurn as o, resolveCodexAppServerStartOptionsForAgent as p, assertCodexAppServerConnectionSecurity as r, isCodexAppServerApprovalPolicyAllowedByRequirements as s, CODEX_PLUGINS_MARKETPLACE_NAME as t, normalizeCodexServiceTier as u, resolveCodexSupervisionAppServerRuntimeOptions as v, withMcpElicitationsApprovalPolicy as x, resolveOpenClawExecPolicyForCodexAppServer as y };