@openclaw/codex 2026.7.2-beta.3 → 2026.7.2-beta.5

package/dist/{compact-Kgy26gIM.js → compact-dEN49UH6.js}

@@ -1,10 +1,10 @@
-import { R as CodexAppServerRpcError, Z as isJsonObject, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient } from "./shared-client-CSXLtCLE.js";
-import { _ as readCodexNotificationItem } from "./attempt-notifications-Ecjyzufe.js";
-import { c as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-Bmt20HfB.js";
+import { V as isJsonObject, _ as CodexAppServerRpcError, a as getLeasedSharedCodexAppServerClient, l as releaseLeasedSharedCodexAppServerClient } from "./shared-client-BVKE40c-.js";
+import { l as sessionBindingIdentity, t as CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS } from "./session-binding-DlVQ-Pxs.js";
+import { _ as readCodexNotificationItem } from "./attempt-notifications-CMR2_fmR.js";
 import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-C8DVQ_Bq.js";
-import { resolveAgentDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
+import { a as resolveCodexBindingAppServerConnection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-Bj_Ak_jI.js";
 import { embeddedAgentLog, resolveCompactionTimeoutMs } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { resolveAgentDir as resolveAgentDir$1, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
 //#region extensions/codex/src/app-server/compact.ts
 /**
 * Native Codex app-server compaction bridge for bound OpenClaw sessions.
@@ -261,6 +261,7 @@ function readIgnoredCompactionOverridePaths(params) {
 		const inheritedProvider = !localProvider && typeof entry.inheritedRecord?.provider === "string" ? entry.inheritedRecord.provider.trim() : "";
 		const providerPath = localProvider ? `${entry.path}.compaction.provider` : inheritedProvider && entry.inheritedPath ? `${entry.inheritedPath}.compaction.provider` : void 0;
 		if (typeof entry.record.model === "string" && entry.record.model.trim()) ignored.add(`${entry.path}.compaction.model`);
+		if (typeof entry.record.thinkingLevel === "string" && entry.record.thinkingLevel.trim()) ignored.add(`${entry.path}.compaction.thinkingLevel`);
 		if (providerPath) ignored.add(providerPath);
 	}
 	return [...ignored];
@@ -352,7 +353,7 @@ async function compactCodexNativeThread(params, options) {
 			authProfileId: requestedAuthProfileId ?? binding.authProfileId,
 			pluginConfig: options.pluginConfig,
 			config,
-			agentDir: resolveAgentDir(config, agentId)
+			agentDir: resolveAgentDir$1(config, agentId)
 		});
 	} catch (error) {
 		return {
@@ -370,7 +371,7 @@ async function compactCodexNativeThread(params, options) {
 	const shouldReleaseDefaultLease = !options.clientFactory;
 	const clientFactory = options.clientFactory ?? getLeasedSharedCodexAppServerClient;
 	const runtimeAuthPlan = params.runtimeAuthPlan ?? params.runtimePlan?.auth;
-	const usesPreparedApiKey = !usesSupervisionConnection && runtimeAuthPlan?.modelRoute?.authRequirement === "api-key";
+	const usesPreparedApiKey = !usesSupervisionConnection && appServer.start.homeScope !== "user" && runtimeAuthPlan?.modelRoute?.authRequirement === "api-key";
 	const preparedApiKey = usesPreparedApiKey ? params.resolvedApiKey?.trim() : void 0;
 	if (usesPreparedApiKey && !preparedApiKey) return {
 		ok: false,

package/dist/{computer-use-C7x4ZaqR.js → computer-use-BjGylO-E.js}

@@ -1,7 +1,7 @@
-import { E as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, H as isCodexAppServerConnectionClosedError, U as isCodexAppServerIndeterminateRequestCancellationError, W as isCodexAppServerIndeterminateTransportError, a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, h as acquireCodexNativeConfigFence, l as resolveCodexNativeConfigFenceKey } from "./shared-client-CSXLtCLE.js";
-import { C as resolveCodexComputerUseConfig, b as resolveCodexAppServerRuntimeOptions } from "./session-binding-Bmt20HfB.js";
-import { f as describeControlFailure } from "./command-formatters-NCTL7A2q.js";
-import { r as requestCodexAppServerJson } from "./request-9yf9pZjf.js";
+import { C as isCodexAppServerIndeterminateTransportError, H as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, S as isCodexAppServerIndeterminateRequestCancellationError, a as getLeasedSharedCodexAppServerClient, g as acquireCodexNativeConfigFence, l as releaseLeasedSharedCodexAppServerClient, u as resolveCodexNativeConfigFenceKey, x as isCodexAppServerConnectionClosedError } from "./shared-client-BVKE40c-.js";
+import { h as resolveCodexComputerUseConfig, p as resolveCodexAppServerRuntimeOptions } from "./session-binding-DlVQ-Pxs.js";
+import { n as describeControlFailure } from "./capabilities-BHRSI6Cn.js";
+import { r as requestCodexAppServerJson } from "./request-CXpPennK.js";
 import { existsSync } from "node:fs";
 import { runExec } from "openclaw/plugin-sdk/process-runtime";
 //#region extensions/codex/src/app-server/computer-use.ts
@@ -113,6 +113,7 @@ async function inspectCodexComputerUse(params) {
 			if (!runtime) throw new Error("Computer Use install could not resolve its app-server runtime");
 			client = await getLeasedSharedCodexAppServerClient({
 				startOptions: runtime.start,
+				pluginConfig: params.pluginConfig,
 				timeoutMs: params.timeoutMs ?? runtime.requestTimeoutMs,
 				config: params.config,
 				agentDir: params.agentDir,
@@ -213,9 +214,11 @@ async function ensureComputerUsePlugin(params) {
 }
 async function readComputerUseTools(params) {
 	let server = await readMcpServerStatus(params.request, params.config.mcpServerName);
-	if (!server && params.installPlugin) {
+	let tools = Object.keys(server?.tools ?? {}).toSorted();
+	if ((!server || tools.length === 0) && params.installPlugin) {
 		await reloadMcpServers(params.request);
 		server = await readMcpServerStatus(params.request, params.config.mcpServerName);
+		tools = Object.keys(server?.tools ?? {}).toSorted();
 	}
 	if (!server) return statusFromPlugin({
 		config: params.config,
@@ -224,10 +227,17 @@ async function readComputerUseTools(params) {
 		reason: "mcp_missing",
 		message: `Computer Use is installed, but the ${params.config.mcpServerName} MCP server is not available.`
 	});
+	if (tools.length === 0) return statusFromPlugin({
+		config: params.config,
+		plugin: params.plugin,
+		tools,
+		reason: "mcp_missing",
+		message: `Computer Use is installed, but the ${params.config.mcpServerName} MCP server exposes no tools.`
+	});
 	const status = statusFromPlugin({
 		config: params.config,
 		plugin: params.plugin,
-		tools: Object.keys(server.tools).toSorted(),
+		tools,
 		reason: "ready",
 		message: "Computer Use is ready."
 	});

package/dist/{conversation-control-B0s3aIjT.js → conversation-control-DE7d9DOj.js}

@@ -1,8 +1,9 @@
-import { a as getLeasedSharedCodexAppServerClient, c as releaseLeasedSharedCodexAppServerClient, p as withLeasedCodexAppServerClientStartSelectionRetry, s as releaseCodexAppServerClientLease } from "./shared-client-CSXLtCLE.js";
-import { _ as isCodexFastServiceTier, a as isCodexAppServerNativeAuthProfile, b as resolveCodexAppServerRuntimeOptions, o as normalizeCodexAppServerBindingModelProvider, r as bindingStoreKey, w as resolveCodexModelBackedReviewerPolicyContext } from "./session-binding-Bmt20HfB.js";
-import { _ as resolveCodexBindingModelProviderFallback, h as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-CQ_9mAa1.js";
-import { d as CODEX_CONTROL_METHODS, r as formatCodexDisplayText } from "./command-formatters-NCTL7A2q.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-C8DVQ_Bq.js";
+import { a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, l as releaseLeasedSharedCodexAppServerClient, m as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-BVKE40c-.js";
+import { O as isCodexFastServiceTier, S as resolveCodexModelBackedReviewerPolicyContext, o as isCodexAppServerNativeAuthProfile, p as resolveCodexAppServerRuntimeOptions, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-DlVQ-Pxs.js";
+import { x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-DRg_FdzC.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-BHRSI6Cn.js";
+import { r as formatCodexDisplayText } from "./command-formatters-ico4ZFnk.js";
+import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-Bj_Ak_jI.js";
 import { ModelSelectionLockedError } from "openclaw/plugin-sdk/model-session-runtime";
 //#region extensions/codex/src/command-authorization.ts
 const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";

package/dist/doctor-contract-api.js

@@ -3,37 +3,11 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { listAgentIds, resolveAgentDir, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";
 import { isDeepStrictEqual } from "node:util";
+import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { patchSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+import { canonicalPathFromExistingAncestor, isPathInside, pathExists } from "openclaw/plugin-sdk/security-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
-//#region extensions/codex/src/migration/session-binding-sidecar-archive.ts
-async function pathExists$1(filePath) {
-	try {
-		await fs.access(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-}
-async function firstFreeArchivePath(sourcePath) {
-	for (let index = 2;; index++) {
-		const candidate = `${sourcePath}.migrated.${index}`;
-		if (!await pathExists$1(candidate)) return candidate;
-	}
-}
-async function archiveBindingSidecar(sourcePath) {
-	const archivePath = `${sourcePath}.migrated`;
-	if (!await pathExists$1(archivePath)) {
-		await fs.rename(sourcePath, archivePath);
-		return;
-	}
-	const [sourceBytes, archiveBytes] = await Promise.all([fs.readFile(sourcePath), fs.readFile(archivePath)]);
-	if (sourceBytes.equals(archiveBytes)) {
-		await fs.rm(sourcePath, { force: true });
-		return;
-	}
-	await fs.rename(sourcePath, await firstFreeArchivePath(sourcePath));
-}
-//#endregion
+import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor";
 //#region extensions/codex/src/migration/session-binding-sidecars.ts
 const LEGACY_BINDING_SUFFIX = ".codex-app-server.json";
 const CODEX_AGENT_HARNESS_ID = "codex";
@@ -49,9 +23,9 @@ const LEGACY_BINDING_LOCK_OPTIONS = {
 };
 async function collectSessionSurfaces(params) {
 	const surfaces = /* @__PURE__ */ new Map();
-	const stateRoot = await canonicalizePath(params.stateDir);
+	const stateRoot = await canonicalPathFromExistingAncestor(params.stateDir);
 	const add = async (root, storePath, agentId, scan) => {
-		const canonicalRoot = await canonicalizePath(root);
+		const canonicalRoot = await canonicalPathFromExistingAncestor(root);
 		const surface = surfaces.get(canonicalRoot) ?? {
 			root: canonicalRoot,
 			scan: false,
@@ -81,7 +55,7 @@ async function collectSessionSurfaces(params) {
 			env: params.env
 		});
 		const root = path.dirname(storePath);
-		await add(root, storePath, agentId, isPathWithin(stateRoot, await canonicalizePath(root)));
+		await add(root, storePath, agentId, isPathInside(stateRoot, await canonicalPathFromExistingAncestor(root)));
 	}
 	const legacyRoot = path.join(params.stateDir, "sessions");
 	const defaultAgentId = resolveSessionAgentIds({ config: params.config }).defaultAgentId;
@@ -92,7 +66,7 @@ async function collectLegacyBindingSources(params, options = {}) {
 	const surfaces = await collectSessionSurfaces(params);
 	const sources = /* @__PURE__ */ new Map();
 	const addSource = async (sidecarPath, surface) => {
-		const canonicalSidecar = await canonicalizePath(sidecarPath);
+		const canonicalSidecar = await canonicalPathFromExistingAncestor(sidecarPath);
 		const source = sources.get(canonicalSidecar) ?? {
 			sidecarPath: canonicalSidecar,
 			transcriptPath: sidecarPath.slice(0, -22),
@@ -167,7 +141,7 @@ async function* iterateIndexedSidecars(surface) {
 				continue;
 			}
 			const sidecarPath = `${transcriptPath}${LEGACY_BINDING_SUFFIX}`;
-			if (await isRegularFile(sidecarPath)) yield sidecarPath;
+			if (await legacyStateFileExists(sidecarPath)) yield sidecarPath;
 		}
 	}
 }
@@ -190,7 +164,7 @@ async function* walkSidecars(root) {
 	}
 }
 async function collectBindingOwners(sources, surfaces, params) {
-	const sourcePaths = new Set(await Promise.all(sources.map((source) => canonicalizePath(source.transcriptPath))));
+	const sourcePaths = new Set(await Promise.all(sources.map((source) => canonicalPathFromExistingAncestor(source.transcriptPath))));
 	const owners = /* @__PURE__ */ new Map();
 	const storePaths = new Set(surfaces.flatMap((surface) => [...surface.storePaths]));
 	const storeAgentIds = /* @__PURE__ */ new Map();
@@ -201,7 +175,7 @@ async function collectBindingOwners(sources, surfaces, params) {
 	}
 	const failures = [];
 	for (const storePath of storePaths) {
-		const canonicalStorePath = await canonicalizePath(storePath);
+		const canonicalStorePath = await canonicalPathFromExistingAncestor(storePath);
 		const index = await readLegacySessionIndex(storePath);
 		if ("failure" in index) {
 			failures.push(index.failure);
@@ -219,7 +193,7 @@ async function collectBindingOwners(sources, surfaces, params) {
 			let canonicalLegacyTranscriptPath;
 			try {
 				legacyTranscriptPath = await resolveLegacySessionFileLocator(sessionsDir, entry, sessionId);
-				canonicalLegacyTranscriptPath = await canonicalizePath(legacyTranscriptPath);
+				canonicalLegacyTranscriptPath = await canonicalPathFromExistingAncestor(legacyTranscriptPath);
 			} catch {
 				failures.push(`session index ${storePath} has an invalid locator for ${sessionKey}`);
 				continue;
@@ -256,8 +230,8 @@ async function resolveLegacySessionFileLocator(sessionsDir, entry, sessionId) {
 	const sessionFile = entry.sessionFile?.trim();
 	if (!sessionFile) return fallback;
 	const candidate = path.resolve(base, sessionFile);
-	const [canonicalBase, canonicalCandidate] = await Promise.all([canonicalizePathForContainment(base), canonicalizePathForContainment(candidate)]);
-	if (!isPathWithin(canonicalBase, canonicalCandidate)) throw new Error("legacy session file locator escapes its session directory");
+	const [canonicalBase, canonicalCandidate] = await Promise.all([canonicalPathFromExistingAncestor(base), canonicalPathFromExistingAncestor(candidate)]);
+	if (!isPathInside(canonicalBase, canonicalCandidate)) throw new Error("legacy session file locator escapes its session directory");
 	return candidate;
 }
 function resolveLegacyBindingOwnerAgentId(params) {
@@ -302,7 +276,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Bmt20HfB.js").then((n) => n.l), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-DlVQ-Pxs.js").then((n) => n.u), import("./conversation-binding-data-BHRpYbX3.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -402,7 +376,14 @@ async function migrateSource(source, candidates, params, store) {
 				}
 				for (const entry of entries) if (!hasExpected(await store.lookup(entry.key), entry.value)) return retain(`canonical plugin state changed at ${entry.key}`);
 			}
-			await archiveBindingSidecar(source.sidecarPath);
+			const archiveWarnings = [];
+			await archiveLegacyStateSource({
+				filePath: source.sidecarPath,
+				label: "Codex app-server binding",
+				changes: [],
+				warnings: archiveWarnings
+			});
+			if (archiveWarnings.length > 0 && await pathExists(source.sidecarPath)) return retain(archiveWarnings.join("; "));
 			return {
 				archived: true,
 				importedKeys
@@ -427,7 +408,7 @@ async function recordSessionOwner(owner, env) {
 	} catch {
 		return "its session owner changed before Codex ownership could be recorded";
 	}
-	if (await canonicalizePath(currentTranscriptPath) !== await canonicalizePath(owner.transcriptPath) || currentOwner.entry.lifecycleRevision !== owner.lifecycleRevision) return "its session owner changed before Codex ownership could be recorded";
+	if (await canonicalPathFromExistingAncestor(currentTranscriptPath) !== await canonicalPathFromExistingAncestor(owner.transcriptPath) || currentOwner.entry.lifecycleRevision !== owner.lifecycleRevision) return "its session owner changed before Codex ownership could be recorded";
 	const legacyHarnessId = currentOwner.entry.agentHarnessId?.trim();
 	if (currentOwner.entry.agentHarnessId !== void 0 && !legacyHarnessId) return "its session owner changed before Codex ownership could be recorded";
 	if (legacyHarnessId && legacyHarnessId !== CODEX_AGENT_HARNESS_ID) return `its session is owned by agent harness ${legacyHarnessId}`;
@@ -474,54 +455,11 @@ async function readDirectoryEntries(directory) {
 		throw error;
 	}
 }
-async function isRegularFile(filePath) {
-	try {
-		return (await fs.stat(filePath)).isFile();
-	} catch {
-		return false;
-	}
-}
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function isSafeLegacySessionId(value) {
 	if (typeof value !== "string") return false;
 	const trimmed = value.trim();
 	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
 }
-function isPathWithin(root, candidate) {
-	const relative = path.relative(root, candidate);
-	return relative === "" || relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
-}
-async function canonicalizePath(filePath) {
-	try {
-		return await fs.realpath(filePath);
-	} catch {
-		return path.resolve(filePath);
-	}
-}
-async function canonicalizePathForContainment(filePath) {
-	const resolved = path.resolve(filePath);
-	const suffix = [];
-	let probe = resolved;
-	while (true) try {
-		const realProbe = await fs.realpath(probe);
-		return suffix.length === 0 ? realProbe : path.join(realProbe, ...suffix.toReversed());
-	} catch {
-		const parent = path.dirname(probe);
-		if (parent === probe) return resolved;
-		suffix.push(path.basename(probe));
-		probe = parent;
-	}
-}
-async function pathExists(filePath) {
-	try {
-		await fs.access(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-}
 const stateMigrations = [{
 	id: "codex-app-server-sidecars-to-plugin-state",
 	label: "Codex app-server thread bindings",
@@ -554,7 +492,7 @@ const stateMigrations = [{
 		let migrated = 0;
 		let partialImports = 0;
 		for (const source of sources) {
-			const result = await migrateSource(source, ownerCollection.owners.get(await canonicalizePath(source.transcriptPath)) ?? [], params, store);
+			const result = await migrateSource(source, ownerCollection.owners.get(await canonicalPathFromExistingAncestor(source.transcriptPath)) ?? [], params, store);
 			if (result.warning) warnings.push(result.warning);
 			if (result.notice) notices.push(result.notice);
 			if (result.archived) migrated++;