@openclaw/codex 2026.7.2-beta.4 → 2026.7.2-beta.7

package/dist/{runtime-artifact-C2ITXdhM.js → runtime-artifact-CmtG_t1L.js}

@@ -28,6 +28,32 @@ const RUNTIME_INJECTION_ENV_KEYS = /* @__PURE__ */ new Set([
 	"DYLD_INSERT_LIBRARIES",
 	"DYLD_LIBRARY_PATH"
 ]);
+const SAFE_NODE_OPTIONS_BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
+	"--enable-network-family-autoselection",
+	"--network-family-autoselection",
+	"--no-deprecation",
+	"--no-network-family-autoselection",
+	"--no-warnings",
+	"--pending-deprecation",
+	"--throw-deprecation",
+	"--trace-deprecation",
+	"--trace-warnings",
+	"--use-bundled-ca",
+	"--use-env-proxy",
+	"--use-openssl-ca",
+	"--use-system-ca"
+]);
+const SAFE_NODE_OPTIONS_NUMERIC_FLAGS = /* @__PURE__ */ new Set([
+	"--max-old-space-size",
+	"--max-semi-space-size",
+	"--network-family-autoselection-attempt-timeout",
+	"--stack-trace-limit"
+]);
+const SAFE_NODE_OPTIONS_DNS_RESULT_ORDERS = /* @__PURE__ */ new Set([
+	"ipv4first",
+	"ipv6first",
+	"verbatim"
+]);
 const ARTIFACT_BINDINGS_SYMBOL = Symbol.for("openclaw.codexAppServerRuntimeArtifactBindings");
 function getRuntimeArtifactBindings() {
 	const globalState = globalThis;
@@ -116,40 +142,80 @@ function assertNoRuntimeInjectionEnvironment(env) {
 	for (const [rawKey, value] of Object.entries(env)) {
 		const key = rawKey.toUpperCase();
 		if (!value?.trim()) continue;
-		if (key === "NODE_OPTIONS" && isSafeNodeOptions(value)) continue;
-		if (key === "NODE_OPTIONS") throw new Error(`Codex runtime artifact cannot attest injected runtime environment: ${key}`);
+		if (key === "NODE_OPTIONS") {
+			const result = attestNodeOptions(value);
+			if (result.ok) continue;
+			if (result.option) throw new Error(`Codex runtime artifact cannot attest NODE_OPTIONS option ${result.option}`);
+			throw new Error("Codex runtime artifact cannot safely parse NODE_OPTIONS");
+		}
 		if (RUNTIME_INJECTION_ENV_KEYS.has(key) || key.startsWith("DYLD_")) throw new Error(`Codex runtime artifact cannot attest injected runtime environment: ${key}`);
 	}
 }
-function isSafeNodeOptions(value) {
-	const tokens = value.trim().split(/\s+/u);
-	const valueFlags = /* @__PURE__ */ new Set([
-		"--max-old-space-size",
-		"--max_old_space_size",
-		"--max-semi-space-size",
-		"--max_semi_space_size",
-		"--stack-trace-limit"
-	]);
-	const booleanFlags = /* @__PURE__ */ new Set([
-		"--no-deprecation",
-		"--no-warnings",
-		"--pending-deprecation",
-		"--throw-deprecation",
-		"--trace-deprecation",
-		"--trace-warnings"
-	]);
+function parseNodeOptions(value) {
+	const tokens = [];
+	let inQuotes = false;
+	let startsNewToken = true;
+	for (let index = 0; index < value.length; index += 1) {
+		let character = value[index];
+		if (character === "\\" && inQuotes) {
+			index += 1;
+			if (index >= value.length) return;
+			character = value[index];
+		} else if (character === " " && !inQuotes) {
+			startsNewToken = true;
+			continue;
+		} else if (character === "\"") {
+			inQuotes = !inQuotes;
+			continue;
+		}
+		if (startsNewToken) {
+			tokens.push(character);
+			startsNewToken = false;
+		} else tokens[tokens.length - 1] += character;
+	}
+	return inQuotes ? void 0 : tokens;
+}
+function normalizedNodeOptionName(token) {
+	const equalsIndex = token.indexOf("=");
+	const name = (equalsIndex === -1 ? token : token.slice(0, equalsIndex)).replaceAll("_", "-");
+	return /^--[a-z][a-z0-9-]{0,63}$/u.test(name) ? name : void 0;
+}
+function attestNodeOptions(value) {
+	const tokens = parseNodeOptions(value);
+	if (!tokens || tokens.length === 0) return { ok: false };
 	for (let index = 0; index < tokens.length; index += 1) {
 		const token = tokens[index];
-		if (booleanFlags.has(token)) continue;
 		const equalsIndex = token.indexOf("=");
-		const flag = equalsIndex === -1 ? token : token.slice(0, equalsIndex);
+		const flag = normalizedNodeOptionName(token);
+		if (!flag) return { ok: false };
 		const inlineValue = equalsIndex === -1 ? void 0 : token.slice(equalsIndex + 1);
+		if (SAFE_NODE_OPTIONS_BOOLEAN_FLAGS.has(flag)) {
+			if (inlineValue === void 0) continue;
+			return {
+				ok: false,
+				option: flag
+			};
+		}
 		if (flag === "--disable-warning" && inlineValue && /^[A-Za-z][A-Za-z0-9_.:-]{0,63}$/u.test(inlineValue)) continue;
-		if (!valueFlags.has(flag)) return false;
+		if (flag === "--dns-result-order") {
+			const order = inlineValue ?? tokens[++index];
+			if (order && SAFE_NODE_OPTIONS_DNS_RESULT_ORDERS.has(order)) continue;
+			return {
+				ok: false,
+				option: flag
+			};
+		}
+		if (!SAFE_NODE_OPTIONS_NUMERIC_FLAGS.has(flag)) return {
+			ok: false,
+			option: flag
+		};
 		const numericValue = inlineValue ?? tokens[++index];
-		if (!numericValue || !/^\d+$/u.test(numericValue)) return false;
+		if (!numericValue || !/^\d+$/u.test(numericValue)) return {
+			ok: false,
+			option: flag
+		};
 	}
-	return tokens.length > 0;
+	return { ok: true };
 }
 async function hashSelectedArtifactFiles(descriptor, signal) {
 	throwIfAborted(signal);

package/dist/{sandbox-guard-D1Wky__S.js → sandbox-guard-NuhpXmPB.js}

@@ -142,7 +142,10 @@ function readRuntimeSessionEntryBestEffort(params) {
 const DIRECT_METHOD_POLICIES = /* @__PURE__ */ new Map([
 	["account/rateLimits/read", "allowed-control-plane"],
 	["account/read", "allowed-control-plane"],
+	["app/installed", "allowed-control-plane"],
 	["app/list", "allowed-control-plane"],
+	["app/read", "allowed-control-plane"],
+	["config/batchWrite", "allowed-control-plane"],
 	["config/mcpServer/reload", "allowed-control-plane"],
 	["config/read", "allowed-control-plane"],
 	["config/value/write", "allowed-control-plane"],
@@ -155,6 +158,7 @@ const DIRECT_METHOD_POLICIES = /* @__PURE__ */ new Map([
 	["mcpServerStatus/list", "allowed-control-plane"],
 	["model/list", "allowed-control-plane"],
 	["plugin/install", "allowed-control-plane"],
+	["plugin/installed", "allowed-control-plane"],
 	["plugin/list", "allowed-control-plane"],
 	["plugin/read", "allowed-control-plane"],
 	["skills/list", "allowed-control-plane"],