@openclaw/codex 2026.7.2-beta.5 → 2026.7.33

package/dist/session-binding-DlVQ-Pxs.js

@@ -1,2161 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
-import path from "node:path";
-import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
-import { AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
-import { ensureAuthProfileStore, resolveDefaultAgentDir, resolveProviderIdForAuth, resolveSessionAgentIds as resolveSessionAgentIds$1 } from "openclaw/plugin-sdk/agent-runtime";
-import { readFileSync } from "node:fs";
-import { homedir, hostname } from "node:os";
-import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";
-import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
-import { buildSecretInputSchema, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
-import { z } from "zod";
-import { parse } from "smol-toml";
-import { AsyncLocalStorage } from "node:async_hooks";
-import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
-//#region extensions/codex/src/app-server/config-contracts.ts
-const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
-const CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME = "workspace-directory";
-//#endregion
-//#region extensions/codex/src/app-server/config-utils.ts
-const START_OPTIONS_KEY_SECRET_SYMBOL = Symbol.for("openclaw.codexAppServerStartOptionsKeySecret");
-const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
-const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
-function readRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
-function normalizeCodexServiceTier(value) {
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	if (!trimmed) return;
-	const normalized = trimmed.toLowerCase();
-	if (normalized === "fast" || normalized === "priority") return "priority";
-	if (normalized === "flex") return "flex";
-	return trimmed;
-}
-function isCodexFastServiceTier(value) {
-	return normalizeCodexServiceTier(value) === "priority";
-}
-function normalizePositiveNumber(value, fallback) {
-	return resolvePositiveTimerTimeoutMs(value, fallback);
-}
-function normalizeHeaders(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
-	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key.trim(), normalizeCodexAppServerSecretInput({
-		value: child,
-		path: `plugins.entries.codex.config.appServer.headers.${key}`
-	})]).filter((entry) => Boolean(entry[0] && entry[1])));
-}
-function normalizeCodexAppServerSecretInput(params) {
-	return normalizeResolvedSecretInputString(params);
-}
-function normalizeStringList(value) {
-	return normalizeTrimmedStringList(value);
-}
-function readBooleanEnv(value) {
-	if (value === void 0) return;
-	const normalized = value.trim().toLowerCase();
-	if ([
-		"1",
-		"true",
-		"yes",
-		"on"
-	].includes(normalized)) return true;
-	if ([
-		"0",
-		"false",
-		"no",
-		"off"
-	].includes(normalized)) return false;
-}
-function readExecSecurity(value) {
-	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
-}
-function readExecAsk(value) {
-	return value === "off" || value === "on-miss" || value === "always" ? value : void 0;
-}
-function readNumberEnv(value) {
-	const trimmed = value?.trim();
-	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
-	const parsed = Number(trimmed);
-	return Number.isFinite(parsed) ? parsed : void 0;
-}
-function resolveArgs(configArgs, envArgs) {
-	if (Array.isArray(configArgs)) return configArgs.map((entry) => readNonEmptyString(entry)).filter((entry) => entry !== void 0);
-	if (typeof configArgs === "string") return splitShellWords(configArgs);
-	return splitShellWords(envArgs ?? "");
-}
-function readNonEmptyString(value) {
-	if (typeof value !== "string") return;
-	return value.trim() || void 0;
-}
-function hashSecretForKey(value, label) {
-	if (!value) return null;
-	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
-}
-function getStartOptionsKeySecret() {
-	const globalState = globalThis;
-	globalState[START_OPTIONS_KEY_SECRET_SYMBOL] ??= randomBytes(32);
-	return globalState[START_OPTIONS_KEY_SECRET_SYMBOL];
-}
-function splitShellWords(value) {
-	const words = [];
-	let current = "";
-	let quote = null;
-	for (const char of value) {
-		if (quote) {
-			if (char === quote) quote = null;
-			else current += char;
-			continue;
-		}
-		if (char === "\"" || char === "'") {
-			quote = char;
-			continue;
-		}
-		if (/\s/.test(char)) {
-			if (current) {
-				words.push(current);
-				current = "";
-			}
-			continue;
-		}
-		current += char;
-	}
-	if (current) words.push(current);
-	return words;
-}
-//#endregion
-//#region extensions/codex/src/app-server/config-exec-policy.ts
-function selectForcedPromptingSandbox(params) {
-	if (params.configuredSandbox === "read-only" || params.defaultSandbox === "read-only") return "read-only";
-	return params.defaultSandbox ?? "workspace-write";
-}
-function selectForcedDangerFullAccessSandbox(params) {
-	if (params.configuredSandbox === "read-only") return "read-only";
-	if (params.defaultPolicy?.dangerFullAccessAllowed === false) {
-		if (params.openClawSandboxActive) return params.defaultPolicy.sandbox ?? "workspace-write";
-		throw new Error("legacy full exec security with ask requires Codex app-server danger-full-access");
-	}
-	return "danger-full-access";
-}
-function selectGuardianSandbox(allowedSandboxModes) {
-	if (allowedSandboxModes === void 0 || allowedSandboxModes.has("workspace-write")) return "workspace-write";
-	if (allowedSandboxModes.has("read-only")) return "read-only";
-	if (allowedSandboxModes.has("danger-full-access")) return "danger-full-access";
-	return "workspace-write";
-}
-function resolveApprovalPolicy(value) {
-	if (value === "on-failure") return "on-request";
-	return value === "on-request" || value === "untrusted" || value === "never" ? value : void 0;
-}
-function resolveSandbox(value) {
-	return value === "read-only" || value === "workspace-write" || value === "danger-full-access" ? value : void 0;
-}
-function resolveApprovalsReviewer(value) {
-	return value === "auto_review" || value === "guardian_subagent" || value === "user" ? value : void 0;
-}
-function resolveOpenClawExecPolicyFromConfig(params) {
-	const root = readRecord(params.config);
-	const globalExec = readRecord(readRecord(root?.tools)?.exec);
-	const globalPolicy = applyOpenClawExecPolicyLayer(createDefaultOpenClawExecPolicy(), globalExec);
-	const agentId = params.agentId?.trim();
-	if (!agentId) return globalPolicy;
-	const agents = readRecord(root?.agents);
-	const agentList = Array.isArray(agents?.list) ? agents.list : [];
-	const normalizedAgentId = normalizeAgentId(agentId);
-	return applyOpenClawExecPolicyLayer(globalPolicy, readRecord(readRecord(readRecord(agentList.find((entry) => {
-		const id = readRecord(entry)?.id;
-		return typeof id === "string" && normalizeAgentId(id) === normalizedAgentId;
-	}))?.tools)?.exec));
-}
-function resolveOpenClawExecPolicyForCodexAppServer(params) {
-	const overridePolicy = applyOpenClawExecPolicyLayer(resolveOpenClawExecPolicyFromConfig({
-		config: params.config,
-		agentId: params.agentId
-	}), params.execOverrides);
-	return applyOpenClawExecApprovalFloors(overridePolicy, resolveOpenClawExecApprovalFloorsForCodexAppServer({
-		approvals: params.approvals,
-		agentId: params.agentId,
-		policy: overridePolicy
-	}));
-}
-function resolveEffectiveOpenClawExecModeForCodexAppServer(params) {
-	if (params.execPolicy?.touched === true) return params.execPolicy.mode;
-	return params.execMode;
-}
-function resolveCodexPolicyModeForOpenClawExecMode(mode) {
-	if (!mode || mode === "full") return;
-	return "guardian";
-}
-function assertCodexAppServerAllowedForOpenClawExecMode(mode) {
-	if (mode === "deny" || mode === "allowlist") throw new Error(`Codex app-server local execution is not available when tools.exec.mode=${mode}`);
-}
-function createDefaultOpenClawExecPolicy() {
-	return {
-		security: "full",
-		ask: "off",
-		touched: false
-	};
-}
-function applyOpenClawExecPolicyLayer(base, exec) {
-	if (!exec) return base;
-	const mode = readExecMode(exec.mode);
-	if (mode !== void 0) return {
-		...resolveOpenClawExecPolicyForMode(mode),
-		touched: true
-	};
-	const security = readExecSecurity(exec.security);
-	const ask = readExecAsk(exec.ask);
-	if (security === void 0 && ask === void 0) return base;
-	const nextSecurity = security ?? base.security;
-	const nextAsk = ask ?? base.ask;
-	return {
-		mode: resolveOpenClawExecModeFromPolicy({
-			security: nextSecurity,
-			ask: nextAsk
-		}),
-		security: nextSecurity,
-		ask: nextAsk,
-		touched: true
-	};
-}
-function resolveOpenClawExecApprovalFloorsForCodexAppServer(params) {
-	if (!params.approvals) return;
-	return resolveExecApprovalsFromFile({
-		file: params.approvals,
-		agentId: params.agentId,
-		overrides: {
-			security: params.policy.security,
-			ask: params.policy.ask
-		}
-	}).agent;
-}
-function applyOpenClawExecApprovalFloors(base, approvalFloors) {
-	if (!approvalFloors) return base;
-	const nextSecurity = approvalFloors.security ? minOpenClawExecSecurity(base.security, approvalFloors.security) : base.security;
-	const nextAsk = approvalFloors.ask ? maxOpenClawExecAsk(base.ask, approvalFloors.ask) : base.ask;
-	if (nextSecurity === base.security && nextAsk === base.ask) return base;
-	return {
-		mode: resolveOpenClawExecModeFromPolicy({
-			security: nextSecurity,
-			ask: nextAsk
-		}),
-		security: nextSecurity,
-		ask: nextAsk,
-		touched: true
-	};
-}
-function resolveOpenClawExecPolicyForMode(mode) {
-	switch (mode) {
-		case "deny": return {
-			mode,
-			security: "deny",
-			ask: "off"
-		};
-		case "allowlist": return {
-			mode,
-			security: "allowlist",
-			ask: "off"
-		};
-		case "ask":
-		case "auto": return {
-			mode,
-			security: "allowlist",
-			ask: "on-miss"
-		};
-		case "full": return {
-			mode,
-			security: "full",
-			ask: "off"
-		};
-	}
-	return mode;
-}
-function resolveOpenClawExecModeFromPolicy(params) {
-	if (params.security === "deny") return "deny";
-	if (params.security === "allowlist" && params.ask === "off") return "allowlist";
-	if (params.security === "full" && params.ask !== "always") return "full";
-	return "ask";
-}
-function minOpenClawExecSecurity(left, right) {
-	const order = {
-		deny: 0,
-		allowlist: 1,
-		full: 2
-	};
-	return order[left] <= order[right] ? left : right;
-}
-function maxOpenClawExecAsk(left, right) {
-	const order = {
-		off: 0,
-		"on-miss": 1,
-		always: 2
-	};
-	return order[left] >= order[right] ? left : right;
-}
-function readExecMode(value) {
-	return value === "deny" || value === "allowlist" || value === "ask" || value === "auto" || value === "full" ? value : void 0;
-}
-//#endregion
-//#region extensions/codex/src/app-server/session-discovery-config.ts
-const codexSessionCatalogConfigSchema = z.object({ enabled: z.boolean().optional() }).strict();
-const codexDiscoveryConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	timeoutMs: z.number().positive().optional()
-}).strict();
-//#endregion
-//#region extensions/codex/src/app-server/config-parsing.ts
-const DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME = "computer-use";
-const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
-const DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS = 6e4;
-const DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS = 6e4;
-const DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX = "openclaw-network";
-const codexAppServerTransportSchema = z.enum([
-	"stdio",
-	"websocket",
-	"unix"
-]);
-const codexAppServerHomeScopeSchema = z.enum(["agent", "user"]);
-const SecretInputSchema = buildSecretInputSchema();
-const codexAppServerPolicyModeSchema = z.enum(["yolo", "guardian"]);
-const codexAppServerApprovalPolicySchema = z.preprocess((value) => value === "on-failure" ? "on-request" : value, z.enum([
-	"never",
-	"on-request",
-	"untrusted"
-]));
-const codexAppServerSandboxSchema = z.enum([
-	"read-only",
-	"workspace-write",
-	"danger-full-access"
-]);
-const codexAppServerApprovalsReviewerSchema = z.enum([
-	"user",
-	"auto_review",
-	"guardian_subagent"
-]);
-const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
-const codexComputerUseHealthIntervalSchema = z.union([
-	z.literal(30),
-	z.literal(60),
-	z.literal(120),
-	z.literal(240)
-]);
-const codexComputerUsePluginCacheModeSchema = z.enum(["shared", "independent"]);
-const codexPluginDestructivePolicySchema = z.union([
-	z.boolean(),
-	z.literal("auto"),
-	z.literal("ask")
-]);
-const codexAppServerServiceTierSchema = z.preprocess((value) => value === null ? null : normalizeCodexServiceTier(value), z.string().trim().min(1).nullable().optional()).optional();
-const codexAppServerExperimentalSchema = z.object({ sandboxExecServer: z.boolean().optional() }).strict();
-const codexAppServerRemoteWorkspaceRootSchema = z.string().trim().min(1);
-const codexAppServerNetworkProxyDomainPermissionSchema = z.enum(["allow", "deny"]);
-const codexAppServerNetworkProxyUnixSocketPermissionSchema = z.enum(["allow", "none"]);
-const codexAppServerNetworkProxySchema = z.object({
-	enabled: z.boolean().optional(),
-	profileName: z.string().trim().min(1).optional(),
-	baseProfile: z.enum(["read-only", "workspace"]).optional(),
-	mode: z.enum(["limited", "full"]).optional(),
-	domains: z.record(z.string(), codexAppServerNetworkProxyDomainPermissionSchema).optional(),
-	unixSockets: z.record(z.string(), codexAppServerNetworkProxyUnixSocketPermissionSchema).optional(),
-	proxyUrl: z.string().trim().min(1).optional(),
-	socksUrl: z.string().trim().min(1).optional(),
-	enableSocks5: z.boolean().optional(),
-	enableSocks5Udp: z.boolean().optional(),
-	allowUpstreamProxy: z.boolean().optional(),
-	allowLocalBinding: z.boolean().optional(),
-	dangerouslyAllowNonLoopbackProxy: z.boolean().optional(),
-	dangerouslyAllowAllUnixSockets: z.boolean().optional()
-}).strict();
-const codexPluginEntryConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	marketplaceName: z.enum([CODEX_PLUGINS_MARKETPLACE_NAME, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME]).optional(),
-	pluginName: z.string().trim().min(1).optional(),
-	allow_destructive_actions: codexPluginDestructivePolicySchema.optional()
-}).strict();
-const codexPluginsConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	allow_all_plugins: z.boolean().optional(),
-	allow_destructive_actions: codexPluginDestructivePolicySchema.optional(),
-	plugins: z.record(z.string(), codexPluginEntryConfigSchema).optional()
-}).strict();
-const codexSupervisionEndpointSchema = z.union([z.object({
-	id: z.string().optional(),
-	label: z.string().optional(),
-	transport: z.literal("stdio-proxy").optional(),
-	command: z.string().optional(),
-	args: z.array(z.string()).optional(),
-	cwd: z.string().optional()
-}).strict(), z.object({
-	id: z.string().optional(),
-	label: z.string().optional(),
-	transport: z.literal("websocket"),
-	url: z.string(),
-	authTokenEnv: z.string().optional()
-}).strict()]);
-const codexSupervisionConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	endpoints: z.array(codexSupervisionEndpointSchema).optional(),
-	allowRawTranscripts: z.boolean().optional(),
-	allowWriteControls: z.boolean().optional()
-}).strict();
-const codexPluginConfigSchema = z.object({
-	codexDynamicToolsLoading: codexDynamicToolsLoadingSchema.optional(),
-	codexDynamicToolsExclude: z.array(z.string()).optional(),
-	sessionCatalog: codexSessionCatalogConfigSchema.optional(),
-	discovery: codexDiscoveryConfigSchema.optional(),
-	computerUse: z.object({
-		enabled: z.boolean().optional(),
-		autoInstall: z.boolean().optional(),
-		marketplaceDiscoveryTimeoutMs: z.number().positive().optional(),
-		liveTestTimeoutMs: z.number().positive().optional(),
-		toolCallTimeoutMs: z.number().positive().optional(),
-		healthCheckEnabled: z.boolean().optional(),
-		healthCheckIntervalMinutes: codexComputerUseHealthIntervalSchema.optional(),
-		pluginCacheMode: codexComputerUsePluginCacheModeSchema.optional(),
-		strictReadiness: z.boolean().optional(),
-		autoRepair: z.boolean().optional(),
-		marketplaceSource: z.string().optional(),
-		marketplacePath: z.string().optional(),
-		marketplaceName: z.string().optional(),
-		pluginName: z.string().optional(),
-		mcpServerName: z.string().optional()
-	}).strict().optional(),
-	codexPlugins: z.unknown().optional(),
-	supervision: codexSupervisionConfigSchema.optional(),
-	appServer: z.object({
-		mode: codexAppServerPolicyModeSchema.optional(),
-		transport: codexAppServerTransportSchema.optional(),
-		homeScope: codexAppServerHomeScopeSchema.optional(),
-		command: z.string().optional(),
-		args: z.union([z.array(z.string()), z.string()]).optional(),
-		url: z.string().optional(),
-		authToken: SecretInputSchema.optional(),
-		headers: z.record(z.string(), SecretInputSchema).optional(),
-		clearEnv: z.array(z.string()).optional(),
-		remoteWorkspaceRoot: codexAppServerRemoteWorkspaceRootSchema.optional(),
-		codeModeOnly: z.boolean().optional(),
-		loopDetectionPreToolUseRelay: z.boolean().optional(),
-		requestTimeoutMs: z.number().positive().optional(),
-		turnCompletionIdleTimeoutMs: z.number().positive().optional(),
-		turnAssistantCompletionIdleTimeoutMs: z.number().positive().optional(),
-		postToolRawAssistantCompletionIdleTimeoutMs: z.number().positive().optional(),
-		approvalPolicy: codexAppServerApprovalPolicySchema.optional(),
-		sandbox: codexAppServerSandboxSchema.optional(),
-		approvalsReviewer: codexAppServerApprovalsReviewerSchema.optional(),
-		serviceTier: codexAppServerServiceTierSchema,
-		networkProxy: codexAppServerNetworkProxySchema.optional(),
-		defaultWorkspaceDir: z.string().optional(),
-		experimental: codexAppServerExperimentalSchema.optional()
-	}).strict().optional()
-}).strict();
-function readCodexPluginConfig(value) {
-	const parsed = codexPluginConfigSchema.safeParse(value);
-	if (!parsed.success) return {};
-	const { codexPlugins: rawCodexPlugins, ...config } = parsed.data;
-	const plugins = codexPluginsConfigSchema.safeParse(rawCodexPlugins);
-	if (!plugins.success) return config;
-	return {
-		...config,
-		...plugins.data ? { codexPlugins: plugins.data } : {}
-	};
-}
-function isCodexSandboxExecServerEnabled(pluginConfig) {
-	return readCodexPluginConfig(pluginConfig).appServer?.experimental?.sandboxExecServer === true;
-}
-function assertCodexAppServerCommandHasNoInlineArgs(params) {
-	const inlineArgs = detectWindowsSpawnCommandInlineArgs(params.command);
-	if (!inlineArgs) return;
-	const sourceLabel = params.source === "env" ? "OPENCLAW_CODEX_APP_SERVER_BIN" : "plugins.entries.codex.config.appServer.command";
-	const argsLabel = params.source === "env" ? "OPENCLAW_CODEX_APP_SERVER_ARGS" : "plugins.entries.codex.config.appServer.args";
-	throw new Error(`${sourceLabel} must be only the Codex app-server executable path; "${inlineArgs.executable}" was configured with inline arguments "${inlineArgs.arguments}". Move those arguments to ${argsLabel}, or remove the override to use the managed Codex startup path.`);
-}
-function resolveCodexPluginsPolicy(pluginConfig) {
-	const config = readCodexPluginConfig(pluginConfig).codexPlugins;
-	const configured = config !== void 0;
-	const enabled = config?.enabled === true;
-	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
-	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
-		if (!isCodexPluginMarketplaceName(entry.marketplaceName) || !entry.pluginName) return [];
-		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
-		return [{
-			configKey,
-			marketplaceName: entry.marketplaceName,
-			pluginName: entry.pluginName,
-			enabled: enabled && entry.enabled !== false,
-			allowDestructiveActions: entryDestructivePolicy.allowDestructiveActions,
-			destructiveApprovalMode: entryDestructivePolicy.destructiveApprovalMode
-		}];
-	}).toSorted((left, right) => left.configKey.localeCompare(right.configKey));
-	return {
-		configured,
-		enabled,
-		allowAllPlugins: enabled && config?.allow_all_plugins === true,
-		allowDestructiveActions: destructivePolicy.allowDestructiveActions,
-		destructiveApprovalMode: destructivePolicy.destructiveApprovalMode,
-		pluginPolicies
-	};
-}
-function isCodexPluginMarketplaceName(value) {
-	return value === "openai-curated" || value === "workspace-directory";
-}
-function resolveCodexPluginDestructivePolicy(policy) {
-	if (policy === "auto" || policy === "ask") return {
-		allowDestructiveActions: true,
-		destructiveApprovalMode: policy
-	};
-	return {
-		allowDestructiveActions: policy,
-		destructiveApprovalMode: policy ? "allow" : "deny"
-	};
-}
-//#endregion
-//#region extensions/codex/src/app-server/config-requirements.ts
-const UNIX_CODEX_REQUIREMENTS_PATH = "/etc/codex/requirements.toml";
-const WINDOWS_CODEX_REQUIREMENTS_SUFFIX = "\\OpenAI\\Codex\\requirements.toml";
-function isCodexAppServerApprovalPolicyAllowedByRequirements(policy, params = {}) {
-	const content = readCodexRequirementsToml(params);
-	if (content === void 0) return true;
-	const allowedApprovalPolicies = parseAllowedApprovalPoliciesFromCodexRequirements(content);
-	return allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has(policy);
-}
-function readCodexRequirementsToml(params) {
-	if (params.requirementsToml !== void 0) return params.requirementsToml ?? void 0;
-	const requirementsPath = readNonEmptyString(params.requirementsPath) ?? resolveCodexRequirementsPath(params.env ?? process.env, params.platform ?? process.platform);
-	try {
-		if (params.readRequirementsFile) return params.readRequirementsFile(requirementsPath);
-		return readFileSync(requirementsPath, "utf8");
-	} catch {
-		return;
-	}
-}
-function resolveCodexRequirementsPath(env, platform) {
-	if (platform === "win32") return `${(readNonEmptyString(env.ProgramData) ?? "C:\\ProgramData").replace(/[\\/]+$/, "")}${WINDOWS_CODEX_REQUIREMENTS_SUFFIX}`;
-	return UNIX_CODEX_REQUIREMENTS_PATH;
-}
-function parseAllowedSandboxModesFromCodexRequirements(content, hostName) {
-	const remoteSandboxModes = parseMatchingRemoteSandboxModesFromCodexRequirements(content, hostName);
-	if (remoteSandboxModes !== void 0) return remoteSandboxModes;
-	return parseRequirementsSandboxModes(parseTopLevelRequirementsStringArray(content, "allowed_sandbox_modes"));
-}
-function parseAllowedApprovalPoliciesFromCodexRequirements(content) {
-	const values = parseTopLevelRequirementsStringArray(content, "allowed_approval_policies");
-	if (values === void 0) return;
-	const normalizedPolicies = values.map((entry) => normalizeRequirementsApprovalPolicy(entry)).filter((entry) => entry !== void 0);
-	return normalizedPolicies.length > 0 ? new Set(normalizedPolicies) : void 0;
-}
-function parseAllowedApprovalsReviewersFromCodexRequirements(content) {
-	const values = parseTopLevelRequirementsStringArray(content, "allowed_approvals_reviewers");
-	if (values === void 0) return;
-	const normalizedReviewers = values.map((entry) => normalizeRequirementsApprovalsReviewer(entry)).filter((entry) => entry !== void 0);
-	return normalizedReviewers.length > 0 ? new Set(normalizedReviewers) : void 0;
-}
-function parseMatchingRemoteSandboxModesFromCodexRequirements(content, hostName) {
-	const normalizedHostName = normalizeRequirementsHostName(hostName);
-	if (normalizedHostName === void 0) return;
-	for (const section of parseTomlArrayTableSections(content, "remote_sandbox_config")) {
-		const patterns = parseRequirementsStringArray(section, "hostname_patterns");
-		if (!patterns || !requirementsHostNameMatchesAnyPattern(normalizedHostName, patterns)) continue;
-		return parseRequirementsSandboxModes(parseRequirementsStringArray(section, "allowed_sandbox_modes"));
-	}
-}
-function parseRequirementsSandboxModes(values) {
-	if (values === void 0) return;
-	const normalizedModes = values.map((entry) => normalizeRequirementsSandboxMode(entry)).filter((entry) => entry !== void 0);
-	return normalizedModes.length > 0 ? new Set(normalizedModes) : void 0;
-}
-function parseTopLevelRequirementsStringArray(content, key) {
-	return parseRequirementsStringArray(stripTomlLineComments(content).slice(0, firstTomlTableOffset(content)), key);
-}
-function parseTomlStringValue(content, key) {
-	return parseTomlStringAssignmentValue(content, tomlDottedKeyPattern(key));
-}
-function parseInlineOpenAIModelProviderBaseUrl(content) {
-	return parseTomlStringAssignmentValue(content, `${tomlKeyPattern("model_providers")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("openai")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("base_url")}`);
-}
-function parseTomlStringAssignmentValue(content, keyPattern) {
-	const assignment = content.match(new RegExp(`(?:^|\\n)\\s*${keyPattern}\\s*=\\s*([^\\r\\n]*)`));
-	if (!assignment) return;
-	const rawValue = assignment[1]?.trimStart() ?? "";
-	if (rawValue.startsWith("\"\"\"") || rawValue.startsWith("'''")) return false;
-	const match = parseTomlStringAssignment(content, keyPattern);
-	return match ? match[1] ?? match[2] ?? "" : false;
-}
-function parseTomlStringAssignment(content, keyPattern) {
-	return content.match(new RegExp(`(?:^|\\n)\\s*${keyPattern}\\s*=\\s*(?:"([^"\\\\]*(?:\\\\.[^"\\\\]*)*)"|'([^']*)')`));
-}
-function tomlDottedKeyPattern(key) {
-	return key.split(".").map(tomlKeyPattern).join("\\s*\\.\\s*");
-}
-function tomlKeyPattern(key) {
-	const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	return `(?:"${escaped}"|'${escaped}'|${escaped})`;
-}
-function parseRequirementsStringArray(content, key) {
-	const match = content.match(new RegExp(`(?:^|\\n)\\s*${key}\\s*=\\s*\\[([\\s\\S]*?)\\]`));
-	if (!match) return;
-	const arrayBody = match[1] ?? "";
-	const stringMatches = [...arrayBody.matchAll(/"([^"\\]*(?:\\.[^"\\]*)*)"|'([^']*)'/g)];
-	if (stringMatches.length === 0 && arrayBody.trim().length > 0) return;
-	return stringMatches.map((entry) => entry[1] ?? entry[2] ?? "");
-}
-function parseTomlTableSection(content, table) {
-	const strippedContent = stripTomlLineComments(content);
-	const tablePattern = tomlDottedKeyPattern(table);
-	const match = new RegExp(`^\\s*\\[\\s*${tablePattern}\\s*\\]\\s*$`, "m").exec(strippedContent);
-	if (!match) return;
-	const sectionStart = match.index + match[0].length;
-	const rest = strippedContent.slice(sectionStart);
-	const nextTableOffset = rest.search(/^\s*\[/m);
-	return nextTableOffset === -1 ? rest : rest.slice(0, nextTableOffset);
-}
-function parseTomlArrayTableSections(content, table) {
-	const strippedContent = stripTomlLineComments(content);
-	const escapedTable = table.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	const headerPattern = new RegExp(`^\\s*\\[\\[\\s*${escapedTable}\\s*\\]\\]\\s*$`, "gm");
-	const sections = [];
-	for (let match = headerPattern.exec(strippedContent); match; match = headerPattern.exec(strippedContent)) {
-		const sectionStart = headerPattern.lastIndex;
-		const rest = strippedContent.slice(sectionStart);
-		const nextTableOffset = rest.search(/^\s*\[/m);
-		sections.push(nextTableOffset === -1 ? rest : rest.slice(0, nextTableOffset));
-	}
-	return sections;
-}
-function firstTomlTableOffset(content) {
-	return content.match(/^\s*\[[^\]\n]/m)?.index ?? content.length;
-}
-function stripTomlLineComments(value) {
-	let output = "";
-	let quote;
-	let escaped = false;
-	for (let index = 0; index < value.length; index += 1) {
-		const char = value[index] ?? "";
-		if (quote) {
-			output += char;
-			if (quote === "\"" && escaped) {
-				escaped = false;
-				continue;
-			}
-			if (quote === "\"" && char === "\\") {
-				escaped = true;
-				continue;
-			}
-			if (char === quote) quote = void 0;
-			continue;
-		}
-		if (char === "\"" || char === "'") {
-			quote = char;
-			output += char;
-			continue;
-		}
-		if (char === "#") {
-			while (index < value.length && value[index] !== "\n") index += 1;
-			if (value[index] === "\n") output += "\n";
-			continue;
-		}
-		output += char;
-	}
-	return output;
-}
-function normalizeRequirementsSandboxMode(value) {
-	const compact = value.replace(/[\s_-]/g, "").toLowerCase();
-	if (compact === "readonly") return "read-only";
-	if (compact === "workspacewrite") return "workspace-write";
-	if (compact === "dangerfullaccess") return "danger-full-access";
-}
-function normalizeRequirementsHostName(value) {
-	const normalized = value.trim().replace(/\.+$/g, "").toLowerCase();
-	return normalized.length > 0 ? normalized : void 0;
-}
-function requirementsHostNameMatchesAnyPattern(hostName, patterns) {
-	return patterns.some((pattern) => {
-		const normalizedPattern = normalizeRequirementsHostName(pattern);
-		return normalizedPattern !== void 0 && globPatternMatches(hostName, normalizedPattern);
-	});
-}
-function globPatternMatches(value, pattern) {
-	let regex = "^";
-	for (const char of pattern) if (char === "*") regex += ".*";
-	else if (char === "?") regex += ".";
-	else regex += char.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	regex += "$";
-	return new RegExp(regex).test(value);
-}
-function normalizeRequirementsApprovalPolicy(value) {
-	const normalized = value.trim().toLowerCase();
-	if (normalized === "on-failure") return "on-request";
-	return resolveApprovalPolicy(normalized);
-}
-function normalizeRequirementsApprovalsReviewer(value) {
-	return resolveApprovalsReviewer(value.trim().toLowerCase());
-}
-function selectGuardianApprovalPolicy(allowedApprovalPolicies, execModeRequiringPromptingApprovals) {
-	if (allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has("on-request")) return "on-request";
-	if (execModeRequiringPromptingApprovals) throw new Error(`tools.exec.mode=${execModeRequiringPromptingApprovals} requires Codex app-server prompting approvals`);
-	if (allowedApprovalPolicies.has("untrusted")) return "untrusted";
-	if (allowedApprovalPolicies.has("never")) return "never";
-	return "on-request";
-}
-function selectGuardianApprovalsReviewer(allowedApprovalsReviewers, execModeRequiringAutoReviewer) {
-	if (allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("auto_review")) return "auto_review";
-	if (allowedApprovalsReviewers.has("guardian_subagent")) return "guardian_subagent";
-	if (execModeRequiringAutoReviewer) throw new Error(`tools.exec.mode=${execModeRequiringAutoReviewer} requires Codex app-server auto approvals`);
-	if (allowedApprovalsReviewers.has("user")) return "user";
-	return "auto_review";
-}
-function selectUserApprovalsReviewer(allowedApprovalsReviewers, execModeRequiringUserReviewer) {
-	if (allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("user")) return "user";
-	throw new Error(`tools.exec.mode=${execModeRequiringUserReviewer ?? "ask"} requires Codex app-server user approvals`);
-}
-//#endregion
-//#region extensions/codex/src/app-server/config-reviewer.ts
-const CODEX_APP_SERVER_HOME_DIRNAME = "codex-home";
-const CODEX_CONFIG_TOML_FILENAME = "config.toml";
-function canUseCodexModelBackedApprovalsReviewerForModel(params) {
-	const explicitProvider = params.modelProvider?.trim().toLowerCase();
-	const inferredProvider = inferProviderFromModelRef(params.model);
-	if (explicitProvider && explicitProvider !== "codex") return isTrustedCodexModelBackedApprovalsReviewerProvider(explicitProvider, params) && (inferredProvider === void 0 || isTrustedCodexModelBackedApprovalsReviewerProvider(inferredProvider, params));
-	if (inferredProvider !== void 0) return isTrustedCodexModelBackedApprovalsReviewerProvider(inferredProvider, params);
-	return isTrustedCodexModelBackedApprovalsReviewerProvider(explicitProvider, params);
-}
-function isTrustedCodexModelBackedOpenAIProvider(params) {
-	if (!openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(params.env)) return false;
-	const codexBaseUrlOverrides = readCodexBaseUrlOverridesForModelBackedReview(params);
-	if (codexBaseUrlOverrides === false || !codexBaseUrlOverrides.openAI.every(isNativeOpenAIBaseUrl) || !codexBaseUrlOverrides.chatGPT.every(isNativeChatGPTBaseUrl)) return false;
-	const openAIProviders = readConfiguredOpenAIProvidersForModelBackedReview(params.config);
-	if (openAIProviders.length === 0) return true;
-	return openAIProviders.every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
-}
-function resolveCodexModelBackedReviewerPolicyContext(params) {
-	const provider = params.provider?.trim();
-	if (provider && provider.toLowerCase() !== "codex") return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(provider),
-		model: params.model
-	};
-	const bindingModelProvider = params.bindingModelProvider?.trim();
-	const currentModel = params.model?.trim();
-	const bindingModel = params.bindingModel?.trim();
-	if (bindingModelProvider && currentModel && bindingModel && currentModel === bindingModel) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(bindingModelProvider),
-		model: params.model ?? params.bindingModel
-	};
-	const currentModelProvider = inferProviderFromModelRef(params.model);
-	if (currentModelProvider) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(currentModelProvider),
-		model: params.model
-	};
-	if (bindingModelProvider) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(bindingModelProvider),
-		model: params.model ?? params.bindingModel
-	};
-	return {
-		modelProvider: params.nativeAuthProfile === true ? "openai" : void 0,
-		model: params.model ?? params.bindingModel
-	};
-}
-function isCodexModelBackedApprovalsReviewerProvider(provider) {
-	return provider?.trim().toLowerCase() === "openai";
-}
-function isTrustedCodexModelBackedApprovalsReviewerProvider(provider, params) {
-	return isCodexModelBackedApprovalsReviewerProvider(provider) && isTrustedCodexModelBackedOpenAIProvider({
-		config: params.config,
-		env: params.env,
-		model: params.model,
-		agentDir: params.agentDir,
-		codexConfigToml: params.codexConfigToml,
-		homeScope: params.homeScope
-	});
-}
-function readCodexBaseUrlOverridesForModelBackedReview(params) {
-	const configToml = readCodexAppServerConfigToml(params);
-	if (configToml === false) return false;
-	if (configToml === void 0) return {
-		openAI: [],
-		chatGPT: []
-	};
-	const topLevelContent = stripTomlLineComments(configToml).slice(0, firstTomlTableOffset(configToml));
-	const modelProviderOpenAISection = parseTomlTableSection(configToml, "model_providers.openai");
-	const openAIBaseUrl = parseTomlStringValue(topLevelContent, "openai_base_url");
-	const chatGPTBaseUrl = parseTomlStringValue(topLevelContent, "chatgpt_base_url");
-	const openAI = [
-		openAIBaseUrl,
-		parseTomlStringValue(topLevelContent, "model_providers.openai.base_url"),
-		parseInlineOpenAIModelProviderBaseUrl(topLevelContent),
-		modelProviderOpenAISection ? parseTomlStringValue(modelProviderOpenAISection, "base_url") : void 0
-	];
-	const chatGPT = [chatGPTBaseUrl];
-	if ([...openAI, ...chatGPT].includes(false)) return false;
-	return {
-		openAI: openAI.filter((entry) => typeof entry === "string"),
-		chatGPT: chatGPT.filter((entry) => typeof entry === "string")
-	};
-}
-function readCodexAppServerConfigToml(params) {
-	if (params.codexConfigToml !== void 0) return params.codexConfigToml ?? void 0;
-	const configPath = resolveCodexAppServerConfigPath(params);
-	if (!configPath) return;
-	try {
-		return readFileSync(configPath, "utf8");
-	} catch (error) {
-		return readErrorCode(error) === "ENOENT" ? void 0 : false;
-	}
-}
-function codexConfigEnablesNativeComputerUse(params) {
-	const configToml = readCodexAppServerConfigToml(params);
-	if (configToml === false) return true;
-	if (configToml === void 0) return false;
-	let parsedConfig;
-	try {
-		parsedConfig = parse(configToml, { integersAsBigInt: true });
-	} catch {
-		return true;
-	}
-	const rawPlugins = parsedConfig.plugins;
-	if (rawPlugins === void 0) return false;
-	const plugins = readRecord(rawPlugins);
-	if (!plugins) return true;
-	for (const [pluginId, rawPluginConfig] of Object.entries(plugins)) {
-		if (!params.pluginNames.some((pluginName) => pluginId === pluginName || pluginId.startsWith(`${pluginName}@`))) continue;
-		const pluginConfig = readRecord(rawPluginConfig);
-		if (!pluginConfig) return true;
-		if (pluginConfig.enabled === false) continue;
-		return true;
-	}
-	return false;
-}
-function resolveCodexAppServerConfigPath(params) {
-	if (params.homeScope === "user") return path.join(resolveCodexAppServerUserHomeDir(params.env), CODEX_CONFIG_TOML_FILENAME);
-	const agentDir = readNonEmptyString(params.agentDir);
-	const codexHome = agentDir ? path.join(path.resolve(agentDir), CODEX_APP_SERVER_HOME_DIRNAME) : void 0;
-	return codexHome ? path.join(codexHome, CODEX_CONFIG_TOML_FILENAME) : void 0;
-}
-/** Resolves the native user Codex home used by Desktop and the CLI. */
-function resolveCodexAppServerUserHomeDir(env = process.env, homedir$1 = homedir) {
-	const configured = readNonEmptyString(env.CODEX_HOME);
-	return path.resolve(configured ?? path.join(homedir$1(), ".codex"));
-}
-function readErrorCode(error) {
-	return error && typeof error === "object" && "code" in error ? String(error.code) : void 0;
-}
-function readConfiguredOpenAIProvidersForModelBackedReview(config) {
-	const providerRecords = readRecord(readRecord(readRecord(config)?.models)?.providers);
-	if (!providerRecords) return [];
-	const openAIProviders = [];
-	for (const [providerId, providerConfig] of Object.entries(providerRecords)) {
-		if (resolveProviderIdForAuth(providerId, { config }) !== "openai") continue;
-		const record = readRecord(providerConfig);
-		if (record) openAIProviders.push(record);
-	}
-	return openAIProviders;
-}
-function configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, modelInput) {
-	if (readRecord(openAIProvider.localService) || hasNonEmptyRecord(openAIProvider.headers) || hasNonEmptyRecord(openAIProvider.request) || typeof openAIProvider.authHeader === "boolean" || !isNativeOpenAIBaseUrl(openAIProvider.baseUrl)) return false;
-	const models = openAIProvider.models;
-	if (!Array.isArray(models)) return true;
-	const modelId = normalizeOpenAIModelBackedReviewerModelId(modelInput);
-	if (!modelId) return false;
-	for (const entry of models) {
-		const model = readRecord(entry);
-		if (typeof model?.id !== "string" || !matchesConfiguredOpenAIModelId(modelId, model.id)) continue;
-		if (hasNonEmptyRecord(model.headers) || hasNonEmptyRecord(model.request) || !isNativeOpenAIBaseUrl(model.baseUrl)) return false;
-	}
-	return true;
-}
-function normalizeOpenAIModelBackedReviewerModelId(modelInput) {
-	const normalized = modelInput?.trim() ?? "";
-	const authProfileIndex = normalized.indexOf("@");
-	const withoutAuthProfile = authProfileIndex > 0 ? normalized.slice(0, authProfileIndex) : normalized;
-	const slashIndex = withoutAuthProfile.indexOf("/");
-	return slashIndex > 0 ? withoutAuthProfile.slice(slashIndex + 1).trim() : withoutAuthProfile;
-}
-function matchesConfiguredOpenAIModelId(modelId, configuredModelId) {
-	const configured = normalizeOpenAIModelBackedReviewerModelId(configuredModelId);
-	return Boolean(configured) && (modelId === configured || modelId.startsWith(`${configured}@`));
-}
-function hasNonEmptyRecord(value) {
-	const record = readRecord(value);
-	return record !== void 0 && Object.keys(record).length > 0;
-}
-function isNativeOpenAIBaseUrl(value) {
-	if (typeof value !== "string" || !value.trim()) return true;
-	try {
-		const url = new URL(value);
-		return url.protocol === "https:" && url.hostname.toLowerCase() === "api.openai.com";
-	} catch {
-		return false;
-	}
-}
-function openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(env) {
-	return [env?.OPENAI_BASE_URL, env?.OPENAI_API_BASE].every(isNativeOpenAIBaseUrl);
-}
-function isNativeChatGPTBaseUrl(value) {
-	if (typeof value !== "string" || !value.trim()) return true;
-	try {
-		const url = new URL(value);
-		return url.protocol === "https:" && url.hostname.toLowerCase() === "chatgpt.com";
-	} catch {
-		return false;
-	}
-}
-function normalizeCodexModelBackedReviewerPolicyProvider(provider) {
-	return provider.toLowerCase() === "openai" ? "openai" : provider;
-}
-function inferProviderFromModelRef(model) {
-	const normalized = model?.trim().toLowerCase();
-	const slashIndex = normalized?.indexOf("/") ?? -1;
-	return slashIndex > 0 ? normalized?.slice(0, slashIndex) : void 0;
-}
-//#endregion
-//#region extensions/codex/src/app-server/config-security.ts
-function shouldAutoApproveCodexAppServerApprovals(appServer) {
-	return appServer.networkProxy === void 0 && appServer.approvalPolicy === "never" && appServer.sandbox === "danger-full-access";
-}
-function resolveCodexAppServerNetworkProxy(config, sandbox) {
-	if (config?.enabled !== true) return {};
-	const fileSystemMode = config.baseProfile === "read-only" || !config.baseProfile && sandbox === "read-only" ? "read" : "write";
-	const networkConfig = removeUndefinedJsonFields({
-		enabled: true,
-		mode: config.mode,
-		domains: normalizeNetworkProxyPermissionMap(config.domains),
-		unix_sockets: normalizeNetworkProxyPermissionMap(config.unixSockets),
-		proxy_url: readNonEmptyString(config.proxyUrl),
-		socks_url: readNonEmptyString(config.socksUrl),
-		enable_socks5: config.enableSocks5,
-		enable_socks5_udp: config.enableSocks5Udp,
-		allow_upstream_proxy: config.allowUpstreamProxy,
-		allow_local_binding: config.allowLocalBinding,
-		dangerously_allow_non_loopback_proxy: config.dangerouslyAllowNonLoopbackProxy,
-		dangerously_allow_all_unix_sockets: config.dangerouslyAllowAllUnixSockets
-	});
-	const profile = {
-		filesystem: {
-			":minimal": "read",
-			":project_roots": { ".": fileSystemMode }
-		},
-		network: networkConfig
-	};
-	const profileName = resolveNetworkProxyPermissionProfileName(config, profile);
-	const configPatch = {
-		"features.network_proxy.enabled": true,
-		default_permissions: profileName,
-		permissions: { [profileName]: profile }
-	};
-	return { networkProxy: {
-		profileName,
-		configFingerprint: fingerprintCodexAppServerNetworkProxyConfigPatch(configPatch),
-		configPatch
-	} };
-}
-function resolveNetworkProxyPermissionProfileName(config, profile) {
-	const explicitProfileName = readNonEmptyString(config.profileName);
-	if (explicitProfileName) return explicitProfileName;
-	return `${DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX}-${createHash("sha256").update(stableStringifyJson({
-		version: 1,
-		profile
-	})).digest("hex").slice(0, 16)}`;
-}
-function fingerprintCodexAppServerNetworkProxyConfigPatch(configPatch) {
-	return createHash("sha256").update(stableStringifyJson(configPatch)).digest("hex");
-}
-function normalizeNetworkProxyPermissionMap(value) {
-	const entries = Object.entries(value ?? {}).map(([key, permission]) => [key.trim(), permission]).filter(([key]) => key.length > 0);
-	return entries.length > 0 ? Object.fromEntries(entries) : void 0;
-}
-function removeUndefinedJsonFields(value) {
-	return Object.fromEntries(Object.entries(value).filter((entry) => entry[1] !== void 0));
-}
-function stableStringifyJson(value) {
-	if (Array.isArray(value)) return `[${value.map((item) => stableStringifyJson(item)).join(",")}]`;
-	if (value && typeof value === "object") return `{${Object.entries(value).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableStringifyJson(item)}`).join(",")}}`;
-	return JSON.stringify(value);
-}
-function withMcpElicitationsApprovalPolicy(policy) {
-	if (typeof policy !== "string") return { granular: {
-		...policy.granular,
-		mcp_elicitations: true
-	} };
-	if (policy === "never") return { granular: {
-		mcp_elicitations: true,
-		rules: false,
-		sandbox_approval: false,
-		request_permissions: false,
-		skill_approval: false
-	} };
-	return { granular: {
-		mcp_elicitations: true,
-		rules: true,
-		sandbox_approval: true,
-		request_permissions: true,
-		skill_approval: true
-	} };
-}
-function resolveTransport(value) {
-	return value === "websocket" || value === "unix" ? value : "stdio";
-}
-function normalizeRemoteWorkspaceRoot(value) {
-	return readNonEmptyString(value);
-}
-function inferCodexAppServerConnectionClass(params) {
-	if (params.transport !== "websocket") return "local-loopback";
-	return params.url && isLoopbackWebSocketUrl(params.url) ? "local-loopback" : "remote";
-}
-function assertCodexAppServerConnectionClassConfig(params) {
-	if (params.connectionClass === "remote" && !hasIdentityBearingWebSocketAuth({
-		authToken: params.authToken,
-		headers: params.headers
-	})) throw new Error("remote Codex app-server WebSocket URLs require appServer.authToken or an Authorization header");
-}
-/** Applies the canonical remote-auth boundary to any Codex AppServer transport. */
-function assertCodexAppServerConnectionSecurity(params) {
-	assertCodexAppServerConnectionClassConfig({
-		connectionClass: inferCodexAppServerConnectionClass(params),
-		authToken: params.authToken,
-		headers: params.headers
-	});
-}
-function isLoopbackWebSocketUrl(value) {
-	let parsed;
-	try {
-		parsed = new URL(value);
-	} catch {
-		return false;
-	}
-	if (parsed.protocol !== "ws:" && parsed.protocol !== "wss:") return false;
-	const host = parsed.hostname.toLowerCase();
-	return host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]" || host.startsWith("127.");
-}
-function hasIdentityBearingWebSocketAuth(params) {
-	if (readNonEmptyString(params.authToken)) return true;
-	return Object.entries(params.headers).some(([key, value]) => key.trim().toLowerCase() === "authorization" && Boolean(readNonEmptyString(value)));
-}
-function resolvePolicyMode(value) {
-	return value === "guardian" || value === "yolo" ? value : void 0;
-}
-function resolveDefaultCodexAppServerPolicy(params) {
-	if (params.transport !== "stdio") return {
-		mode: "yolo",
-		dangerFullAccessAllowed: true
-	};
-	const content = readCodexRequirementsToml(params);
-	if (content === void 0) {
-		if (!params.forceGuardian) return {
-			mode: "yolo",
-			dangerFullAccessAllowed: true
-		};
-		return {
-			mode: "guardian",
-			dangerFullAccessAllowed: true,
-			approvalPolicy: selectGuardianApprovalPolicy(void 0, params.execModeRequiringPromptingApprovals),
-			approvalsReviewer: params.forceUserReviewer ? selectUserApprovalsReviewer(void 0, params.execModeRequiringUserReviewer) : selectGuardianApprovalsReviewer(void 0, params.execModeRequiringPromptingApprovals === "auto" ? "auto" : void 0),
-			sandbox: selectGuardianSandbox(void 0)
-		};
-	}
-	const allowedSandboxModes = parseAllowedSandboxModesFromCodexRequirements(content, readNonEmptyString(params.hostName) ?? hostname());
-	const allowedApprovalPolicies = parseAllowedApprovalPoliciesFromCodexRequirements(content);
-	const allowedApprovalsReviewers = parseAllowedApprovalsReviewersFromCodexRequirements(content);
-	const yoloSandboxAllowed = allowedSandboxModes === void 0 || allowedSandboxModes.has("danger-full-access");
-	const yoloApprovalAllowed = allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has("never");
-	const yoloReviewerAllowed = allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("user");
-	if (!params.forceGuardian && yoloSandboxAllowed && yoloApprovalAllowed && yoloReviewerAllowed) return {
-		mode: "yolo",
-		dangerFullAccessAllowed: true
-	};
-	return {
-		mode: "guardian",
-		dangerFullAccessAllowed: yoloSandboxAllowed,
-		approvalPolicy: selectGuardianApprovalPolicy(allowedApprovalPolicies, params.execModeRequiringPromptingApprovals),
-		approvalsReviewer: params.forceUserReviewer ? selectUserApprovalsReviewer(allowedApprovalsReviewers, params.execModeRequiringUserReviewer) : selectGuardianApprovalsReviewer(allowedApprovalsReviewers, params.execModeRequiringPromptingApprovals === "auto" ? "auto" : void 0),
-		sandbox: selectGuardianSandbox(allowedSandboxModes)
-	};
-}
-//#endregion
-//#region extensions/codex/src/app-server/config-runtime.ts
-function resolveCodexAppServerRuntimeOptions(params = {}) {
-	const env = params.env ?? process.env;
-	const config = readCodexPluginConfig(params.pluginConfig).appServer ?? {};
-	const transport = resolveTransport(config.transport);
-	const homeScope = config.homeScope ?? "agent";
-	const configCommand = readNonEmptyString(config.command);
-	const envCommand = readNonEmptyString(env.OPENCLAW_CODEX_APP_SERVER_BIN);
-	const command = configCommand ?? envCommand ?? "codex";
-	const commandSource = configCommand ? "config" : envCommand ? "env" : "managed";
-	if (commandSource === "config" || commandSource === "env") assertCodexAppServerCommandHasNoInlineArgs({
-		command,
-		source: commandSource
-	});
-	const args = resolveArgs(config.args, env.OPENCLAW_CODEX_APP_SERVER_ARGS);
-	const headers = normalizeHeaders(config.headers);
-	const clearEnv = normalizeStringList(config.clearEnv);
-	const authToken = normalizeCodexAppServerSecretInput({
-		value: config.authToken,
-		path: "plugins.entries.codex.config.appServer.authToken"
-	});
-	const url = readNonEmptyString(config.url) ?? (transport === "unix" ? "unix://" : void 0);
-	const connectionClass = inferCodexAppServerConnectionClass({
-		transport,
-		url
-	});
-	const remoteAppsSubstrate = "preconfigured";
-	const remoteWorkspaceRoot = normalizeRemoteWorkspaceRoot(config.remoteWorkspaceRoot);
-	const execMode = resolveEffectiveOpenClawExecModeForCodexAppServer({
-		execMode: params.execMode,
-		execPolicy: params.execPolicy
-	});
-	assertCodexAppServerAllowedForOpenClawExecMode(execMode);
-	const explicitPolicyMode = resolvePolicyMode(config.mode) ?? resolvePolicyMode(env.OPENCLAW_CODEX_APP_SERVER_MODE);
-	const configuredSandbox = resolveSandbox(config.sandbox) ?? resolveSandbox(env.OPENCLAW_CODEX_APP_SERVER_SANDBOX);
-	const explicitApprovalsReviewer = resolveApprovalsReviewer(config.approvalsReviewer);
-	const normalizedPolicyMode = resolveCodexPolicyModeForOpenClawExecMode(execMode);
-	const ignoreLegacyYoloPolicyMode = normalizedPolicyMode === "guardian" && explicitPolicyMode === "yolo";
-	const canUseModelBackedReviewer = canUseCodexModelBackedApprovalsReviewerForModel({
-		modelProvider: params.modelProvider,
-		model: params.model,
-		config: params.config,
-		env,
-		agentDir: params.agentDir,
-		codexConfigToml: params.codexConfigToml,
-		homeScope
-	});
-	const forceUserReviewer = !canUseModelBackedReviewer && (explicitApprovalsReviewer === "auto_review" || explicitApprovalsReviewer === "guardian_subagent" || explicitPolicyMode === "guardian" && explicitApprovalsReviewer !== "user") || execMode !== void 0 && execMode !== "full" && (execMode !== "auto" || !canUseModelBackedReviewer);
-	const forceGuardianReviewer = execMode === "auto" && canUseModelBackedReviewer;
-	const execModeRequiringPromptingApprovals = execMode === "auto" || execMode === "ask" ? execMode : forceUserReviewer ? "ask" : void 0;
-	const forceDangerFullAccessSandbox = params.execPolicy?.touched === true && params.execPolicy.security === "full" && params.execPolicy.ask === "always";
-	const forceRuntimePolicy = forceUserReviewer || forceGuardianReviewer || forceDangerFullAccessSandbox;
-	const defaultPolicy = explicitPolicyMode && !forceRuntimePolicy && !ignoreLegacyYoloPolicyMode ? void 0 : resolveDefaultCodexAppServerPolicy({
-		transport,
-		env,
-		forceGuardian: normalizedPolicyMode === "guardian",
-		forceUserReviewer: forceUserReviewer || !canUseModelBackedReviewer,
-		execModeRequiringPromptingApprovals,
-		requirementsToml: params.requirementsToml,
-		requirementsPath: params.requirementsPath,
-		readRequirementsFile: params.readRequirementsFile,
-		platform: params.platform,
-		hostName: params.hostName,
-		execModeRequiringUserReviewer: forceUserReviewer ? execMode : void 0
-	});
-	const preserveExplicitAutoSandbox = forceGuardianReviewer && configuredSandbox === "read-only";
-	const forcedPolicy = forceRuntimePolicy ? {
-		approvalPolicy: defaultPolicy?.approvalPolicy ?? "on-request",
-		sandbox: preserveExplicitAutoSandbox ? void 0 : forceDangerFullAccessSandbox ? selectForcedDangerFullAccessSandbox({
-			configuredSandbox,
-			defaultPolicy,
-			openClawSandboxActive: Boolean(params.openClawSandboxActive)
-		}) : selectForcedPromptingSandbox({
-			configuredSandbox,
-			defaultSandbox: defaultPolicy?.sandbox
-		}),
-		approvalsReviewer: defaultPolicy?.approvalsReviewer ?? (forceUserReviewer ? "user" : "auto_review")
-	} : void 0;
-	const policyMode = ignoreLegacyYoloPolicyMode ? normalizedPolicyMode : explicitPolicyMode ?? normalizedPolicyMode ?? defaultPolicy?.mode ?? "yolo";
-	const serviceTier = normalizeCodexServiceTier(config.serviceTier);
-	const resolvedSandbox = forcedPolicy?.sandbox ?? configuredSandbox ?? defaultPolicy?.sandbox ?? (policyMode === "guardian" ? "workspace-write" : "danger-full-access");
-	if (transport === "websocket" && !url) throw new Error("plugins.entries.codex.config.appServer.url is required when appServer.transport is websocket");
-	if (transport === "websocket" && homeScope === "user") throw new Error("plugins.entries.codex.config.appServer.homeScope=user requires appServer.transport=stdio or unix");
-	if (transport === "unix" && homeScope !== "user") throw new Error("plugins.entries.codex.config.appServer.transport=unix requires appServer.homeScope=user");
-	if (transport === "unix" && !url?.startsWith("unix://")) throw new Error("plugins.entries.codex.config.appServer.url must use unix:// when appServer.transport is unix");
-	assertCodexAppServerConnectionSecurity({
-		transport,
-		url,
-		authToken,
-		headers
-	});
-	const configApprovalPolicy = resolveApprovalPolicy(config.approvalPolicy);
-	const envApprovalPolicy = resolveApprovalPolicy(env.OPENCLAW_CODEX_APP_SERVER_APPROVAL_POLICY);
-	const approvalPolicy = configApprovalPolicy ?? envApprovalPolicy ?? defaultPolicy?.approvalPolicy ?? (policyMode === "guardian" ? "on-request" : "never");
-	const approvalPolicySource = configApprovalPolicy ? "config" : envApprovalPolicy ? "env" : defaultPolicy?.approvalPolicy ? "requirements" : "implicit";
-	const computerUseConfig = resolveCodexComputerUseConfig({
-		pluginConfig: params.pluginConfig,
-		env
-	});
-	const managedCommandOrder = params.managedCommandOrder ?? (homeScope === "user" || computerUseConfig.enabled ? "desktop-first" : "package-first");
-	const includeManagedCommandOrder = commandSource === "managed" && (managedCommandOrder === "desktop-first" || params.managedCommandOrder === "package-first");
-	const managedComputerUsePluginNames = [.../* @__PURE__ */ new Set([DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, computerUseConfig.pluginName])];
-	return {
-		start: {
-			transport,
-			homeScope,
-			command,
-			commandSource,
-			...includeManagedCommandOrder ? { managedCommandOrder } : {},
-			...commandSource === "managed" ? { managedComputerUsePluginNames } : {},
-			args: args.length > 0 ? args : [
-				"app-server",
-				"--listen",
-				"stdio://"
-			],
-			...url ? { url } : {},
-			...authToken ? { authToken } : {},
-			headers,
-			...transport === "stdio" && clearEnv.length > 0 ? { clearEnv } : {}
-		},
-		connectionClass,
-		remoteAppsSubstrate,
-		...remoteWorkspaceRoot ? { remoteWorkspaceRoot } : {},
-		codeModeOnly: config.codeModeOnly === true,
-		loopDetectionPreToolUseRelay: config.loopDetectionPreToolUseRelay !== false,
-		requestTimeoutMs: normalizePositiveNumber(config.requestTimeoutMs, 6e4),
-		turnCompletionIdleTimeoutMs: normalizePositiveNumber(config.turnCompletionIdleTimeoutMs, 6e4),
-		turnAssistantCompletionIdleTimeoutMs: normalizePositiveNumber(config.turnAssistantCompletionIdleTimeoutMs, 1e4),
-		...config.postToolRawAssistantCompletionIdleTimeoutMs !== void 0 ? { postToolRawAssistantCompletionIdleTimeoutMs: normalizePositiveNumber(config.postToolRawAssistantCompletionIdleTimeoutMs, 6e4) } : {},
-		approvalPolicy: forcedPolicy?.approvalPolicy ?? approvalPolicy,
-		approvalPolicySource,
-		sandbox: resolvedSandbox,
-		approvalsReviewer: forcedPolicy?.approvalsReviewer ?? explicitApprovalsReviewer ?? defaultPolicy?.approvalsReviewer ?? (policyMode === "guardian" ? "auto_review" : "user"),
-		...serviceTier ? { serviceTier } : {},
-		...resolveCodexAppServerNetworkProxy(config.networkProxy, resolvedSandbox)
-	};
-}
-/**
-* Rechecks Codex-owned plugin state at the final spawn boundary, where the
-* effective agent home is known, so Computer Use keeps the desktop app's TCC ownership.
-*/
-function resolveCodexAppServerStartOptionsForAgent(params) {
-	const startOptions = params.startOptions;
-	if (startOptions.transport !== "stdio" || startOptions.commandSource !== "managed" || startOptions.managedCommandOrder !== void 0) return startOptions;
-	if (startOptions.homeScope === "user") return {
-		...startOptions,
-		managedCommandOrder: "desktop-first"
-	};
-	return codexConfigEnablesNativeComputerUse({
-		agentDir: params.agentDir,
-		codexConfigToml: params.codexConfigToml,
-		env: params.env,
-		homeScope: "agent",
-		pluginNames: startOptions.managedComputerUsePluginNames ?? ["computer-use"]
-	}) ? {
-		...startOptions,
-		managedCommandOrder: "desktop-first"
-	} : startOptions;
-}
-function resolveCodexComputerUseConfig(params = {}) {
-	const env = params.env ?? process.env;
-	const config = readCodexPluginConfig(params.pluginConfig).computerUse ?? {};
-	const marketplaceSource = readNonEmptyString(params.overrides?.marketplaceSource) ?? readNonEmptyString(config.marketplaceSource) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_SOURCE);
-	const marketplacePath = readNonEmptyString(params.overrides?.marketplacePath) ?? readNonEmptyString(config.marketplacePath) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_PATH);
-	const marketplaceName = readNonEmptyString(params.overrides?.marketplaceName) ?? readNonEmptyString(config.marketplaceName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_NAME);
-	const configuredPluginName = readNonEmptyString(params.overrides?.pluginName) ?? readNonEmptyString(config.pluginName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_NAME);
-	const configuredMcpServerName = readNonEmptyString(params.overrides?.mcpServerName) ?? readNonEmptyString(config.mcpServerName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MCP_SERVER_NAME);
-	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
-	const marketplaceDiscoveryTimeoutMs = normalizePositiveNumber(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
-	const liveTestTimeoutMs = normalizePositiveNumber(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
-	const toolCallTimeoutMs = normalizePositiveNumber(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
-	const healthCheckIntervalMinutes = normalizeComputerUseHealthCheckIntervalMinutes(params.overrides?.healthCheckIntervalMinutes ?? config.healthCheckIntervalMinutes ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES));
-	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
-	const pluginCacheMode = normalizeComputerUsePluginCacheMode(params.overrides?.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(config.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_CACHE_MODE) ?? "independent";
-	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
-	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
-	return {
-		enabled: params.overrides?.enabled ?? config.enabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
-		autoInstall,
-		marketplaceDiscoveryTimeoutMs,
-		liveTestTimeoutMs,
-		toolCallTimeoutMs,
-		healthCheckEnabled,
-		healthCheckIntervalMinutes,
-		pluginCacheMode,
-		strictReadiness,
-		autoRepair,
-		pluginName: configuredPluginName ?? "computer-use",
-		mcpServerName: configuredMcpServerName ?? "computer-use",
-		...marketplaceSource ? { marketplaceSource } : {},
-		...marketplacePath ? { marketplacePath } : {},
-		...marketplaceName ? { marketplaceName } : {}
-	};
-}
-function normalizeComputerUseHealthCheckIntervalMinutes(value) {
-	return value === 30 || value === 60 || value === 120 || value === 240 ? value : 60;
-}
-function normalizeComputerUsePluginCacheMode(value) {
-	return value === "shared" || value === "independent" ? value : null;
-}
-function codexAppServerStartOptionsKey(options, params = {}) {
-	return JSON.stringify({
-		transport: options.transport,
-		command: options.command,
-		commandSource: options.commandSource ?? null,
-		managedCommandOrder: options.managedCommandOrder ?? "package-first",
-		managedComputerUsePluginNames: [...options.managedComputerUsePluginNames ?? []].toSorted(),
-		managedFallbackCommandPaths: [...options.managedFallbackCommandPaths ?? []],
-		args: options.args,
-		cwd: options.cwd ?? null,
-		url: options.url ?? null,
-		authToken: hashSecretForKey(options.authToken, "authToken"),
-		headers: Object.entries(options.headers).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `header:${key}`)]),
-		env: Object.entries(options.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `env:${key}`)]),
-		clearEnv: [...options.clearEnv ?? []].toSorted(),
-		authProfileId: params.authProfileId ?? null,
-		authBindingFingerprint: params.authBindingFingerprint ?? null,
-		agentDir: params.agentDir ?? null,
-		fallbackApiKeyCacheKey: params.fallbackApiKeyCacheKey ?? null
-	});
-}
-function codexSandboxPolicyForTurn(mode, cwd, nativeArgs = []) {
-	if (mode === "danger-full-access") return { type: "dangerFullAccess" };
-	if (mode === "read-only") return {
-		type: "readOnly",
-		networkAccess: false
-	};
-	let excludeTmpdirEnvVar = false;
-	let excludeSlashTmp = false;
-	for (let index = 0; index < nativeArgs.length; index += 1) {
-		const arg = nativeArgs[index];
-		const override = arg === "-c" || arg === "--config" ? nativeArgs[++index] : arg?.startsWith("--config=") ? arg.slice(9) : void 0;
-		if (!override) continue;
-		const separator = override.indexOf("=");
-		if (separator < 0) continue;
-		const key = override.slice(0, separator).trim();
-		const value = override.slice(separator + 1).trim();
-		if (value !== "true" && value !== "false") continue;
-		if (key === "sandbox_workspace_write.exclude_tmpdir_env_var") excludeTmpdirEnvVar = value === "true";
-		else if (key === "sandbox_workspace_write.exclude_slash_tmp") excludeSlashTmp = value === "true";
-	}
-	return {
-		type: "workspaceWrite",
-		writableRoots: [cwd],
-		networkAccess: false,
-		excludeTmpdirEnvVar,
-		excludeSlashTmp
-	};
-}
-/** Resolves the passive supervision control connection without changing harness defaults. */
-function resolveCodexSupervisionAppServerRuntimeOptions(params = {}) {
-	const pluginConfig = readCodexPluginConfig(params.pluginConfig);
-	const appServer = pluginConfig.appServer ?? {};
-	const transport = resolveTransport(appServer.transport);
-	const homeScope = appServer.homeScope ?? (transport === "websocket" ? "agent" : "user");
-	return resolveCodexAppServerRuntimeOptions({
-		...params,
-		pluginConfig: {
-			...pluginConfig,
-			appServer: {
-				...appServer,
-				homeScope
-			}
-		}
-	});
-}
-//#endregion
-//#region extensions/codex/src/app-server/session-binding.ts
-/** SQLite-backed Codex app-server thread bindings. */
-var session_binding_exports = /* @__PURE__ */ __exportAll({
-	CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS: () => CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS,
-	CODEX_APP_SERVER_BINDING_MAX_ENTRIES: () => CODEX_APP_SERVER_BINDING_MAX_ENTRIES,
-	CODEX_APP_SERVER_BINDING_NAMESPACE: () => CODEX_APP_SERVER_BINDING_NAMESPACE,
-	CodexSupervisionBindingReplacementError: () => CodexSupervisionBindingReplacementError,
-	assertCodexBindingMayBeReplaced: () => assertCodexBindingMayBeReplaced,
-	bindingStoreKey: () => bindingStoreKey,
-	createCodexAppServerBindingStore: () => createCodexAppServerBindingStore,
-	createCodexSessionGenerationSupersededError: () => createCodexSessionGenerationSupersededError,
-	createStoredCodexAppServerBinding: () => createStoredCodexAppServerBinding,
-	hashCodexAppServerBindingFingerprint: () => hashCodexAppServerBindingFingerprint,
-	isCodexAppServerNativeAuthProfile: () => isCodexAppServerNativeAuthProfile,
-	normalizeCodexAppServerBindingModelProvider: () => normalizeCodexAppServerBindingModelProvider,
-	normalizeStoredCodexAppServerBindingFingerprints: () => normalizeStoredCodexAppServerBindingFingerprints,
-	readCodexAppServerThreadBinding: () => readCodexAppServerThreadBinding,
-	readStoredCodexAppServerBinding: () => readStoredCodexAppServerBinding,
-	reclaimCurrentCodexSessionGeneration: () => reclaimCurrentCodexSessionGeneration,
-	resolveCodexAppServerBindingModelProvider: () => resolveCodexAppServerBindingModelProvider,
-	sessionBindingIdentity: () => sessionBindingIdentity
-});
-const CODEX_APP_SERVER_NATIVE_AUTH_PROVIDER = "openai";
-const PUBLIC_OPENAI_MODEL_PROVIDER = "openai";
-const BINDING_LEASE_RETRY_INTERVAL_MS = 1e3;
-const BOUNDED_BINDING_FINGERPRINT_PATTERN = /^sha256:[a-f0-9]{64}$/i;
-const CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS = 6e4;
-const BINDING_LEASE_STALE_MS = 65e3;
-const BINDING_LEASE_WAIT_MS = 7e4;
-const BINDING_LEASE_RENEW_INTERVAL_MS = Math.floor(BINDING_LEASE_STALE_MS / 3);
-const PHYSICAL_SESSION_RETIRE_TTL_MS = BINDING_LEASE_WAIT_MS;
-/** Resolves the same agent scope OpenClaw uses for transcript/session ownership. */
-function sessionBindingIdentity(params) {
-	const { sessionAgentId } = resolveSessionAgentIds$1(params);
-	const sessionKey = params.sessionKey?.trim();
-	return {
-		kind: "session",
-		agentId: sessionAgentId,
-		sessionId: params.sessionId,
-		...sessionKey ? { sessionKey } : {}
-	};
-}
-/** Builds the terminal coordination error used when a newer OpenClaw session owns the binding. */
-function createCodexSessionGenerationSupersededError(sessionId) {
-	return new AgentHarnessSessionSupersededError(`Codex session generation is no longer current: ${sessionId}`);
-}
-const optionalStringSchema = z.string().optional().catch(void 0);
-const optionalBooleanSchema = z.boolean().optional().catch(void 0);
-const optionalNonBlankStringSchema = z.string().refine((value) => Boolean(value.trim())).optional().catch(void 0);
-const optionalTimestampSchema = z.string().refine((value) => Number.isFinite(Date.parse(value))).optional().catch(void 0);
-const pendingSupervisionBranchSchema = z.object({
-	sourceThreadId: z.string().trim().min(1),
-	connectionFingerprint: z.string().trim().min(1).optional(),
-	lastTurnId: z.string().trim().min(1).optional(),
-	cleanupThreadIds: z.array(z.string().trim().min(1)).max(2).optional()
-}).strict().superRefine((pending, context) => {
-	const cleanupThreadIds = pending.cleanupThreadIds ?? [];
-	if (new Set(cleanupThreadIds).size !== cleanupThreadIds.length) context.addIssue({
-		code: "custom",
-		message: "pending supervision cleanup thread ids must be unique"
-	});
-	if (cleanupThreadIds.includes(pending.sourceThreadId)) context.addIssue({
-		code: "custom",
-		message: "pending supervision cleanup cannot target its source"
-	});
-});
-const contextEngineProjectionSchema = z.object({
-	schemaVersion: z.literal(1),
-	mode: z.literal("thread_bootstrap"),
-	epoch: z.string().refine((value) => Boolean(value.trim())),
-	fingerprint: optionalStringSchema
-}).strict();
-const contextEngineSchema = z.object({
-	schemaVersion: z.literal(1),
-	engineId: z.string(),
-	policyFingerprint: z.string(),
-	projection: contextEngineProjectionSchema.optional().catch(void 0)
-}).strict();
-const destructiveApprovalModeSchema = z.enum([
-	"allow",
-	"deny",
-	"auto",
-	"ask"
-]).optional().catch(void 0);
-const accountAppPolicyEntrySchema = z.object({
-	source: z.literal("account"),
-	appName: z.string(),
-	allowDestructiveActions: z.boolean(),
-	destructiveApprovalMode: destructiveApprovalModeSchema,
-	mcpServerNames: z.array(z.string())
-}).strict();
-const pluginAppPolicyEntrySchema = z.object({
-	source: z.literal("plugin").optional(),
-	configKey: z.string(),
-	marketplaceName: z.enum([CODEX_PLUGINS_MARKETPLACE_NAME, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME]),
-	pluginName: z.string(),
-	allowDestructiveActions: z.boolean(),
-	destructiveApprovalMode: destructiveApprovalModeSchema,
-	mcpServerNames: z.array(z.string())
-}).strict();
-const pluginAppPolicyContextSchema = z.object({
-	fingerprint: z.string(),
-	apps: z.record(z.string(), z.union([accountAppPolicyEntrySchema, pluginAppPolicyEntrySchema])),
-	pluginAppIds: z.record(z.string(), z.array(z.string())).default({})
-}).strict();
-const threadBindingSchema = z.object({
-	threadId: z.string().refine((value) => Boolean(value.trim())),
-	clientId: optionalStringSchema,
-	cwd: z.string(),
-	connectionScope: z.literal("supervision").optional(),
-	supervisionSourceThreadId: z.string().trim().min(1).optional(),
-	authProfileId: optionalStringSchema,
-	model: optionalStringSchema,
-	preserveNativeModel: z.literal(true).optional().catch(void 0),
-	pendingSupervisionBranch: pendingSupervisionBranchSchema.optional(),
-	modelProvider: z.string().transform((value) => value.trim()).pipe(z.string().min(1)).optional().catch(void 0),
-	approvalPolicy: z.preprocess((value) => value === "on-failure" ? "on-request" : value, z.enum([
-		"never",
-		"on-request",
-		"untrusted"
-	]).optional()).catch(void 0),
-	sandbox: z.enum([
-		"read-only",
-		"workspace-write",
-		"danger-full-access"
-	]).optional().catch(void 0),
-	serviceTier: z.preprocess(normalizeCodexServiceTier, z.custom((value) => typeof value === "string").optional()).optional().catch(void 0),
-	networkProxyProfileName: optionalStringSchema,
-	networkProxyConfigFingerprint: optionalStringSchema,
-	dynamicToolsFingerprint: optionalStringSchema,
-	dynamicToolsContainDeferred: optionalBooleanSchema,
-	webSearchThreadConfigFingerprint: optionalStringSchema,
-	userMcpServersFingerprint: optionalStringSchema,
-	mcpServersFingerprint: optionalStringSchema,
-	ringZeroConfigFingerprint: optionalStringSchema,
-	ringZeroClientInstanceId: optionalStringSchema,
-	nativeHookRelayGeneration: optionalNonBlankStringSchema,
-	appServerRuntimeFingerprint: optionalStringSchema,
-	pluginAppsFingerprint: optionalStringSchema,
-	pluginAppsInputFingerprint: optionalStringSchema,
-	pluginAppPolicyContext: pluginAppPolicyContextSchema.optional().catch(void 0),
-	contextEngine: contextEngineSchema.optional().catch(void 0),
-	environmentSelectionFingerprint: optionalStringSchema,
-	conversationStartId: optionalStringSchema,
-	conversationSourceTransferComplete: z.literal(true).optional().catch(void 0),
-	historyCoveredThrough: optionalTimestampSchema
-}).superRefine((binding, context) => {
-	if (binding.connectionScope === "supervision") {
-		if (!binding.supervisionSourceThreadId) context.addIssue({
-			code: "custom",
-			message: "supervision connection ownership requires its native source thread id"
-		});
-		if (binding.preserveNativeModel !== true) context.addIssue({
-			code: "custom",
-			message: "supervision connection ownership requires native model ownership"
-		});
-		if (binding.conversationSourceTransferComplete !== true) context.addIssue({
-			code: "custom",
-			message: "supervision connection ownership requires a completed source transfer"
-		});
-		if (!binding.pendingSupervisionBranch && (!binding.model?.trim() || !binding.modelProvider)) context.addIssue({
-			code: "custom",
-			message: "materialized supervision bindings require a native model and provider"
-		});
-	}
-	if (binding.supervisionSourceThreadId && binding.connectionScope !== "supervision") context.addIssue({
-		code: "custom",
-		message: "a supervision source thread id requires supervision connection ownership"
-	});
-	if (!binding.pendingSupervisionBranch) return;
-	if (binding.threadId !== binding.pendingSupervisionBranch.sourceThreadId) context.addIssue({
-		code: "custom",
-		message: "pending supervision source must match the provisional thread binding"
-	});
-	if (binding.supervisionSourceThreadId !== binding.pendingSupervisionBranch.sourceThreadId) context.addIssue({
-		code: "custom",
-		message: "pending supervision source must match its durable source identity"
-	});
-	if (binding.preserveNativeModel !== true) context.addIssue({
-		code: "custom",
-		message: "pending supervision bindings must defer model selection to Codex App Server"
-	});
-	if (binding.connectionScope !== "supervision") context.addIssue({
-		code: "custom",
-		message: "pending supervision bindings require supervision connection ownership"
-	});
-});
-var CodexSupervisionBindingReplacementError = class extends Error {
-	constructor(threadId, operation) {
-		super(`Refusing to replace supervised Codex thread ${threadId} while ${operation}; its native user-home connection and model ownership must be preserved`);
-		this.name = "CodexSupervisionBindingReplacementError";
-	}
-};
-function assertCodexBindingMayBeReplaced(binding, operation) {
-	if (binding?.connectionScope === "supervision") throw new CodexSupervisionBindingReplacementError(binding.threadId, operation);
-}
-const bindingLeaseSchema = z.object({
-	token: z.string().refine((value) => Boolean(value.trim())),
-	expiresAt: z.number().finite()
-});
-const storedSessionIdSchema = z.string().transform((value) => value.trim()).pipe(z.string().min(1)).optional().catch(void 0);
-const storedBindingSchema = z.discriminatedUnion("state", [z.object({
-	version: z.literal(1),
-	state: z.literal("active"),
-	binding: threadBindingSchema,
-	sessionId: storedSessionIdSchema,
-	lease: bindingLeaseSchema.optional().catch(void 0)
-}), z.object({
-	version: z.literal(1),
-	state: z.literal("cleared"),
-	sessionId: storedSessionIdSchema,
-	lease: bindingLeaseSchema.optional().catch(void 0),
-	retired: z.literal(true).optional().catch(void 0)
-})]);
-function hashCodexAppServerBindingFingerprint(canonical) {
-	return `sha256:${createHash("sha256").update(canonical).digest("hex")}`;
-}
-function normalizeLegacyBindingFingerprint(value) {
-	if (typeof value !== "string" || value === "" || value === "[]" || BOUNDED_BINDING_FINGERPRINT_PATTERN.test(value)) return value;
-	return hashCodexAppServerBindingFingerprint(value);
-}
-function normalizeLegacyBindingFingerprints(record) {
-	let normalized = record;
-	for (const key of ["dynamicToolsFingerprint", "userMcpServersFingerprint"]) {
-		const value = record[key];
-		const next = normalizeLegacyBindingFingerprint(value);
-		if (next === value) continue;
-		if (normalized === record) normalized = { ...record };
-		normalized[key] = next;
-	}
-	return normalized;
-}
-function normalizeStoredCodexAppServerBindingFingerprints(value) {
-	const stored = readStoredCodexAppServerBinding(value);
-	if (!stored || stored.state !== "active") return stored;
-	const binding = normalizeLegacyBindingFingerprints(stored.binding);
-	return binding === stored.binding ? stored : readStoredCodexAppServerBinding({
-		...stored,
-		binding
-	});
-}
-/** Encodes a migrated sidecar binding as one canonical plugin-state row. */
-function createStoredCodexAppServerBinding(value, options = {}) {
-	const rawRecord = asRecord(value);
-	if (!rawRecord) return;
-	const record = normalizeLegacyBindingFingerprints(rawRecord);
-	if (record.schemaVersion !== 1 && record.schemaVersion !== 2) return;
-	const pluginAppPolicyContext = readPluginAppPolicyContext(record.pluginAppPolicyContext, record.schemaVersion);
-	const historyCoveredThrough = readTimestamp(record.historyCoveredThrough) ?? readTimestamp(record.updatedAt) ?? readTimestamp(record.createdAt) ?? readTimestamp(options.now) ?? (/* @__PURE__ */ new Date()).toISOString();
-	const authProfileId = typeof record.authProfileId === "string" ? record.authProfileId : void 0;
-	const binding = readCodexAppServerThreadBinding({
-		...record,
-		modelProvider: normalizeCodexAppServerBindingModelProvider({
-			...options.lookup,
-			authProfileId,
-			modelProvider: typeof record.modelProvider === "string" ? record.modelProvider : void 0
-		}),
-		cwd: typeof record.cwd === "string" ? record.cwd : "",
-		pluginAppPolicyContext,
-		historyCoveredThrough
-	});
-	return binding ? {
-		version: 1,
-		state: "active",
-		binding: stripUndefinedBinding(binding)
-	} : void 0;
-}
-function bindingLeaseLostError(key, cause) {
-	return new Error(`Lost Codex binding lease: ${key}`, cause === void 0 ? void 0 : { cause });
-}
-/** Lets the authoritative OpenClaw session generation claim a stale stable binding row. */
-async function reclaimCurrentCodexSessionGeneration(params) {
-	const sessionKey = params.identity.sessionKey?.trim();
-	if (!sessionKey) return true;
-	const plan = await params.bindingStore.prepareSessionGenerationReclaim(params.identity);
-	if (plan.kind === "resolved") return plan.result;
-	try {
-		const storePath = resolveStorePath(params.config?.session?.store, { agentId: params.identity.agentId });
-		if (getSessionEntry({
-			agentId: params.identity.agentId,
-			hydrateSkillPromptRefs: false,
-			readConsistency: "latest",
-			sessionKey,
-			storePath
-		})?.sessionId !== params.identity.sessionId) return false;
-	} catch {
-		return false;
-	}
-	return await params.bindingStore.mutate(params.identity, {
-		kind: "reclaim-generation",
-		expectedPreviousSessionId: plan.expectedPreviousSessionId
-	});
-}
-/** Creates the single binding facade owned by the Codex plugin runtime. */
-function createCodexAppServerBindingStore(state) {
-	const update = state.update?.bind(state);
-	if (!update) throw new Error("Codex app-server bindings require atomic plugin-state updates");
-	const leaseContext = new AsyncLocalStorage();
-	const archiveContext = new AsyncLocalStorage();
-	let activeBindingMutations = 0;
-	let pendingArchives = 0;
-	let archiveTail = Promise.resolve();
-	let bindingMutationsDrained = [];
-	const waitForBindingMutations = async () => {
-		if (activeBindingMutations === 0) return;
-		await new Promise((resolve) => {
-			bindingMutationsDrained.push(resolve);
-		});
-	};
-	const runBindingMutation = async (run) => {
-		if (archiveContext.getStore() === true) return await run();
-		if (pendingArchives > 0) throw new Error("Codex binding mutation blocked while a native archive is in progress; retry");
-		activeBindingMutations += 1;
-		try {
-			return await run();
-		} finally {
-			activeBindingMutations -= 1;
-			if (activeBindingMutations === 0) {
-				const drained = bindingMutationsDrained;
-				bindingMutationsDrained = [];
-				for (const resolve of drained) resolve();
-			}
-		}
-	};
-	const renewLease = (key, owner) => {
-		if (owner.failure) return;
-		try {
-			let renewed = false;
-			const stored = update(key, (raw) => {
-				const current = readStoredCodexAppServerBinding(raw);
-				if (raw !== void 0 && !current) throw new Error(`Invalid Codex app-server binding row: ${key}`);
-				const lease = current?.lease;
-				const now = Date.now();
-				if (!lease || lease.token !== owner.token || lease.expiresAt <= now) return;
-				renewed = true;
-				return {
-					...current,
-					lease: {
-						token: owner.token,
-						expiresAt: now + BINDING_LEASE_STALE_MS
-					}
-				};
-			});
-			if (!renewed || !stored) owner.failure = bindingLeaseLostError(key);
-		} catch (error) {
-			owner.failure = bindingLeaseLostError(key, error);
-		}
-	};
-	const transactKey = async (key, apply, ttlMs) => {
-		const deadline = Date.now() + BINDING_LEASE_WAIT_MS;
-		while (true) {
-			let busy = false;
-			let leaseLost = false;
-			let result;
-			const ownedLease = leaseContext.getStore()?.get(key);
-			if (ownedLease?.failure) throw ownedLease.failure;
-			const ownedToken = ownedLease?.token;
-			update(key, (raw) => {
-				const current = readStoredCodexAppServerBinding(raw);
-				if (raw !== void 0 && !current) throw new Error(`Invalid Codex app-server binding row: ${key}`);
-				const activeLease = current?.lease;
-				const now = Date.now();
-				if (ownedToken && (!activeLease || activeLease.token !== ownedToken || activeLease.expiresAt <= now)) {
-					leaseLost = true;
-					return;
-				}
-				if (activeLease && activeLease.token !== ownedToken && activeLease.expiresAt > now) {
-					busy = true;
-					return;
-				}
-				const applied = apply(current, ownedToken);
-				result = applied.result;
-				return applied.next;
-			}, ttlMs == null ? void 0 : { ttlMs });
-			if (leaseLost) {
-				const failure = bindingLeaseLostError(key);
-				if (ownedLease) ownedLease.failure = failure;
-				throw failure;
-			}
-			if (!busy) return result;
-			if (Date.now() >= deadline) throw new Error(`Timed out waiting for Codex binding lease: ${key}`);
-			await sleep(BINDING_LEASE_RETRY_INTERVAL_MS);
-		}
-	};
-	return {
-		async read(identity) {
-			const key = bindingStoreKey(identity);
-			const raw = state.lookup(key);
-			const stored = readStoredCodexAppServerBinding(raw);
-			if (raw !== void 0 && !stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
-			return stored?.state === "active" && ownsStoredSessionGeneration(identity, stored) ? stored.binding : void 0;
-		},
-		async hasOtherThreadOwner(threadId, currentIdentity) {
-			const currentKey = currentIdentity ? bindingStoreKey(currentIdentity) : void 0;
-			return state.entries().some(({ key, value }) => {
-				const stored = readStoredCodexAppServerBinding(value);
-				if (!stored) throw new Error(`Invalid Codex app-server binding row: ${key}`);
-				const isCurrentOwner = currentIdentity !== void 0 && key === currentKey && (currentIdentity.kind === "conversation" || stored.sessionId === currentIdentity.sessionId.trim());
-				if (stored.state !== "active" || stored.binding.threadId !== threadId || isCurrentOwner) return false;
-				return true;
-			});
-		},
-		async prepareSessionGenerationReclaim(identity) {
-			const key = bindingStoreKey(identity);
-			const raw = state.lookup(key);
-			const current = readStoredCodexAppServerBinding(raw);
-			if (raw !== void 0 && !current) throw new Error(`Invalid Codex app-server binding row: ${key}`);
-			if (!current) return {
-				kind: "resolved",
-				result: true
-			};
-			const currentSessionId = current.sessionId;
-			if (!currentSessionId) return {
-				kind: "resolved",
-				result: current.state !== "cleared" || current.retired !== true
-			};
-			if (currentSessionId === identity.sessionId) return current.state === "cleared" && current.retired === true ? {
-				kind: "verify",
-				expectedPreviousSessionId: currentSessionId
-			} : {
-				kind: "resolved",
-				result: true
-			};
-			return {
-				kind: "verify",
-				expectedPreviousSessionId: currentSessionId
-			};
-		},
-		async mutate(identity, mutation) {
-			return await runBindingMutation(async () => {
-				const key = bindingStoreKey(identity);
-				const retainLegacyClear = mutation.kind === "clear" && key.startsWith("conversation:legacy-");
-				return await transactKey(key, (current, leaseToken) => {
-					const ownsGeneration = ownsStoredSessionGeneration(identity, current);
-					const ownedLease = current?.lease && current.lease.token === leaseToken ? { lease: current.lease } : {};
-					if (mutation.kind === "reclaim-generation") {
-						if (identity.kind !== "session" || !identity.sessionKey?.trim()) return { result: false };
-						if (!current) return { result: true };
-						if (ownsGeneration) {
-							if (current.state === "cleared" && current.retired === true && current.sessionId === mutation.expectedPreviousSessionId) return {
-								result: true,
-								next: {
-									version: 1,
-									state: "cleared",
-									sessionId: identity.sessionId,
-									...ownedLease
-								}
-							};
-							return { result: current.state !== "cleared" || current.retired !== true };
-						}
-						if (current.sessionId !== mutation.expectedPreviousSessionId) return { result: false };
-						if (current.state === "active" && current.binding.connectionScope === "supervision") return { result: false };
-						return {
-							result: true,
-							next: {
-								version: 1,
-								state: "cleared",
-								sessionId: identity.sessionId,
-								...ownedLease
-							}
-						};
-					}
-					const storedActive = current?.state === "active" ? current : void 0;
-					const active = ownsGeneration ? storedActive : void 0;
-					const retiredGeneration = current?.state === "cleared" && current.retired === true && ownsGeneration;
-					const preservesSupervisionOwner = mutation.kind === "set" && active?.binding.connectionScope === "supervision" && isSameSupervisionOwner(active.binding, mutation.binding);
-					const clearsPendingSupervisionOwner = mutation.kind === "clear" && active?.binding.connectionScope === "supervision" && matchesPendingSupervisionClear(active.binding, mutation.threadId, mutation.expectedPendingSupervisionBranch);
-					if (mutation.kind === "set" && (mutation.if?.kind === "absent" && storedActive || current !== void 0 && !ownsGeneration || retiredGeneration || active?.binding.connectionScope === "supervision" && !preservesSupervisionOwner) || mutation.kind === "patch" && active?.binding.threadId !== mutation.threadId || (mutation.kind === "patch-pending-supervision-branch" || mutation.kind === "commit-pending-supervision-branch") && !matchesPendingSupervisionBranch(active?.binding, mutation.expected) || mutation.kind === "clear" && (mutation.threadId !== void 0 && active?.binding.threadId !== mutation.threadId || !ownsGeneration || active?.binding.connectionScope === "supervision" && !clearsPendingSupervisionOwner)) return { result: false };
-					if (mutation.kind === "clear" && retiredGeneration) return { result: true };
-					if (mutation.kind === "clear") return {
-						result: true,
-						next: {
-							version: 1,
-							state: "cleared",
-							...storedSessionGeneration(identity, current),
-							...ownedLease
-						}
-					};
-					let binding;
-					if (mutation.kind === "set") binding = validateBindingForWrite(mutation.binding);
-					else if (mutation.kind === "patch-pending-supervision-branch") binding = validateBindingForWrite({
-						...active.binding,
-						pendingSupervisionBranch: mutation.pending
-					});
-					else if (mutation.kind === "commit-pending-supervision-branch") binding = validateBindingForWrite({
-						...active.binding,
-						...mutation.patch,
-						threadId: mutation.threadId,
-						pendingSupervisionBranch: void 0
-					});
-					else binding = validateBindingForWrite({
-						...active.binding,
-						...mutation.patch,
-						threadId: mutation.threadId
-					});
-					return {
-						result: true,
-						next: {
-							version: 1,
-							state: "active",
-							binding,
-							...storedSessionGeneration(identity, current),
-							...ownedLease
-						}
-					};
-				}, mutation.kind === "clear" && !retainLegacyClear && !leaseContext.getStore()?.has(key) ? 1 : void 0);
-			});
-		},
-		async adoptSessionGeneration(identity, expectedPreviousSessionId) {
-			return await runBindingMutation(async () => {
-				const key = bindingStoreKey(identity);
-				const expectedSessionId = expectedPreviousSessionId.trim();
-				const targetSessionId = identity.sessionId.trim();
-				if (!expectedSessionId) throw new Error("Codex session generation adoption requires the previous session id");
-				return await transactKey(key, (current) => {
-					if (current?.state !== "active") return { result: "absent" };
-					if (current.sessionId === targetSessionId) return { result: "current" };
-					if (current.sessionId !== expectedSessionId) return { result: "conflict" };
-					return {
-						result: "adopted",
-						next: {
-							...current,
-							sessionId: targetSessionId
-						}
-					};
-				});
-			});
-		},
-		async resetSessionGeneration(identity) {
-			return await runBindingMutation(async () => {
-				const key = bindingStoreKey(identity);
-				return await transactKey(key, (current, leaseToken) => {
-					if (!current) return { result: "absent" };
-					if (!ownsStoredSessionGeneration(identity, current)) return { result: "conflict" };
-					if (current.state === "cleared" && current.retired === true) return { result: "conflict" };
-					return {
-						result: "applied",
-						next: {
-							version: 1,
-							state: "cleared",
-							...storedSessionGeneration(identity, current),
-							...current.lease && current.lease.token === leaseToken ? { lease: current.lease } : {}
-						}
-					};
-				}, leaseContext.getStore()?.has(key) ? void 0 : 1);
-			});
-		},
-		async retireSessionGeneration(identity) {
-			return await runBindingMutation(async () => {
-				const key = bindingStoreKey(identity);
-				return await transactKey(key, (current, leaseToken) => {
-					if (!current) return { result: "absent" };
-					if (!ownsStoredSessionGeneration(identity, current)) return { result: "conflict" };
-					if (current.state === "cleared" && current.retired === true) return { result: "applied" };
-					return {
-						result: "applied",
-						next: {
-							version: 1,
-							state: "cleared",
-							retired: true,
-							...storedSessionGeneration(identity, current),
-							...current.lease && current.lease.token === leaseToken ? { lease: current.lease } : {}
-						}
-					};
-				}, identity.sessionKey?.trim() ? void 0 : PHYSICAL_SESSION_RETIRE_TTL_MS);
-			});
-		},
-		async withThreadArchiveFence(run) {
-			pendingArchives += 1;
-			const operation = archiveTail.then(async () => {
-				await waitForBindingMutations();
-				return await archiveContext.run(true, run);
-			});
-			archiveTail = operation.then(() => void 0, () => void 0);
-			try {
-				return await operation;
-			} finally {
-				pendingArchives -= 1;
-			}
-		},
-		async withLease(identity, run) {
-			const key = bindingStoreKey(identity);
-			const owned = leaseContext.getStore();
-			const existingOwner = owned?.get(key);
-			if (existingOwner) {
-				const failureBeforeRun = existingOwner.failure;
-				if (failureBeforeRun) throw failureBeforeRun;
-				const result = await run();
-				const failureAfterRun = existingOwner.failure;
-				if (failureAfterRun) throw failureAfterRun;
-				return result;
-			}
-			const token = randomUUID();
-			if (!await transactKey(key, (current) => {
-				if (current?.state === "cleared" && current.retired === true && ownsStoredSessionGeneration(identity, current)) return { result: false };
-				const lease = {
-					token,
-					expiresAt: Date.now() + BINDING_LEASE_STALE_MS
-				};
-				if (current?.state === "active") return {
-					result: true,
-					next: {
-						...current,
-						...preservedSessionGeneration(identity, current),
-						lease
-					}
-				};
-				if (current?.state === "cleared" && current.retired === true) return {
-					result: true,
-					next: {
-						...current,
-						lease
-					}
-				};
-				return {
-					result: true,
-					next: {
-						version: 1,
-						state: "cleared",
-						...preservedSessionGeneration(identity, current),
-						lease
-					}
-				};
-			})) throw new Error(`Codex binding generation was retired: ${key}`);
-			const owner = { token };
-			const nested = new Map(owned);
-			nested.set(key, owner);
-			const heartbeat = setInterval(() => renewLease(key, owner), BINDING_LEASE_RENEW_INTERVAL_MS);
-			heartbeat.unref();
-			try {
-				const result = await leaseContext.run(nested, run);
-				if (owner.failure) throw owner.failure;
-				return result;
-			} finally {
-				clearInterval(heartbeat);
-				try {
-					const removeOwnedLease = (raw, matches) => {
-						const current = readStoredCodexAppServerBinding(raw);
-						if (!current || !matches(current) || current.lease?.token !== token) return;
-						const { lease: _lease, ...released } = current;
-						return released;
-					};
-					if (!update(key, (raw) => removeOwnedLease(raw, (current) => current.state === "active"))) {
-						if (!update(key, (raw) => removeOwnedLease(raw, (current) => current.state === "cleared" && current.retired === true), key.startsWith("session:") ? { ttlMs: PHYSICAL_SESSION_RETIRE_TTL_MS } : void 0)) update(key, (raw) => removeOwnedLease(raw, (current) => current.state === "cleared"), { ttlMs: 1 });
-					}
-				} catch (error) {
-					embeddedAgentLog.warn("failed to release codex app-server binding lease", {
-						key,
-						error
-					});
-				}
-			}
-		}
-	};
-}
-function matchesPendingSupervisionBranch(binding, expected) {
-	const pending = binding?.pendingSupervisionBranch;
-	if (!pending || binding?.threadId !== expected.sourceThreadId) return false;
-	if (pending.sourceThreadId !== expected.sourceThreadId || pending.connectionFingerprint !== expected.connectionFingerprint || pending.lastTurnId !== expected.lastTurnId) return false;
-	const currentCleanup = pending.cleanupThreadIds ?? [];
-	const expectedCleanup = expected.cleanupThreadIds ?? [];
-	return currentCleanup.length === expectedCleanup.length && currentCleanup.every((threadId, index) => threadId === expectedCleanup[index]);
-}
-function isSameSupervisionOwner(current, replacement) {
-	return replacement.connectionScope === "supervision" && replacement.threadId === current.threadId && replacement.supervisionSourceThreadId === current.supervisionSourceThreadId;
-}
-function matchesPendingSupervisionClear(binding, threadId, expected) {
-	if (!expected) return false;
-	const sourceThreadId = expected.sourceThreadId;
-	return threadId === sourceThreadId && binding.supervisionSourceThreadId === sourceThreadId && matchesPendingSupervisionBranch(binding, expected);
-}
-/** Stable plugin-state key for one current binding owner. */
-function bindingStoreKey(identity) {
-	if (identity.kind === "session") {
-		const rawAgentId = identity.agentId.trim();
-		const sessionId = identity.sessionId.trim();
-		if (!rawAgentId) throw new Error("Codex app-server binding requires an agent id");
-		if (!sessionId) throw new Error("Codex app-server binding requires a session id");
-		const agentId = resolveSessionAgentIds$1({ agentId: rawAgentId }).sessionAgentId;
-		const sessionKey = identity.sessionKey?.trim();
-		if (sessionKey) return `session-key:${agentId}:${createHash("sha256").update(sessionKey).digest("base64url")}`;
-		return `session:${agentId}:${sessionId}`;
-	}
-	const bindingId = identity.bindingId.trim();
-	if (!bindingId) throw new Error("Codex app-server conversation binding requires a binding id");
-	return `conversation:${bindingId}`;
-}
-function readStoredCodexAppServerBinding(value) {
-	const result = storedBindingSchema.safeParse(value);
-	return result.success ? stripUndefinedValue(result.data) : void 0;
-}
-function storedSessionGeneration(identity, current) {
-	if (identity.kind === "session") return { sessionId: identity.sessionId };
-	return current?.sessionId ? { sessionId: current.sessionId } : {};
-}
-function preservedSessionGeneration(identity, current) {
-	if (current?.sessionId) return { sessionId: current.sessionId };
-	return storedSessionGeneration(identity, current);
-}
-function ownsStoredSessionGeneration(identity, current) {
-	return identity.kind !== "session" || !current?.sessionId || current.sessionId === identity.sessionId;
-}
-function validateBindingForWrite(binding) {
-	const validated = readCodexAppServerThreadBinding(binding);
-	if (!validated) throw new Error("Invalid Codex app-server thread binding");
-	return stripUndefinedBinding(validated);
-}
-/** Parses stored or shipped sidecar data into the current domain value. */
-function readCodexAppServerThreadBinding(value) {
-	const result = threadBindingSchema.safeParse(value);
-	if (!result.success) return;
-	return result.data;
-}
-function stripUndefinedBinding(binding) {
-	return stripUndefinedValue(binding);
-}
-function stripUndefinedValue(value) {
-	if (Array.isArray(value)) return value.map(stripUndefinedValue);
-	if (!value || typeof value !== "object") return value;
-	return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== void 0).map(([key, entry]) => [key, stripUndefinedValue(entry)]));
-}
-function asRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
-function readTimestamp(value) {
-	return optionalTimestampSchema.parse(value);
-}
-function readPluginAppPolicyContext(value, bindingSchemaVersion) {
-	const record = asRecord(value);
-	if (!record || typeof record.fingerprint !== "string") return;
-	const apps = asRecord(record.apps);
-	if (!apps) return;
-	const parsedApps = {};
-	for (const [appId, rawEntry] of Object.entries(apps)) {
-		const entry = asRecord(rawEntry);
-		if (!entry) return;
-		const destructiveApprovalMode = readDestructiveApprovalMode(entry.destructiveApprovalMode, bindingSchemaVersion);
-		const mcpServerNamesValid = Array.isArray(entry.mcpServerNames) && entry.mcpServerNames.every((serverName) => typeof serverName === "string");
-		if (entry.source === "account") {
-			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
-			parsedApps[appId] = {
-				source: "account",
-				appName: entry.appName,
-				allowDestructiveActions: entry.allowDestructiveActions,
-				...destructiveApprovalMode ? { destructiveApprovalMode } : {},
-				mcpServerNames: entry.mcpServerNames
-			};
-			continue;
-		}
-		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || entry.marketplaceName !== "openai-curated" && entry.marketplaceName !== "workspace-directory" || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
-		parsedApps[appId] = {
-			configKey: entry.configKey,
-			marketplaceName: entry.marketplaceName,
-			pluginName: entry.pluginName,
-			allowDestructiveActions: entry.allowDestructiveActions,
-			...destructiveApprovalMode ? { destructiveApprovalMode } : {},
-			mcpServerNames: entry.mcpServerNames
-		};
-	}
-	const parsedPluginAppIds = {};
-	if (record.pluginAppIds !== void 0 && (!record.pluginAppIds || typeof record.pluginAppIds !== "object" || Array.isArray(record.pluginAppIds))) return;
-	if (record.pluginAppIds && typeof record.pluginAppIds === "object") for (const [configKey, appIds] of Object.entries(record.pluginAppIds)) {
-		if (!Array.isArray(appIds) || appIds.some((appId) => typeof appId !== "string")) return;
-		parsedPluginAppIds[configKey] = appIds;
-	}
-	return {
-		fingerprint: record.fingerprint,
-		apps: parsedApps,
-		pluginAppIds: parsedPluginAppIds
-	};
-}
-function readDestructiveApprovalMode(value, bindingSchemaVersion) {
-	if (value === void 0) return;
-	if (value === "allow" || value === "deny") return value;
-	if (value === "auto") return bindingSchemaVersion === 1 ? "allow" : "auto";
-	if (value === "ask" && bindingSchemaVersion === 2) return "ask";
-	if (value === "on-request" && bindingSchemaVersion === 1) return "auto";
-	return "invalid";
-}
-function sleep(ms) {
-	return new Promise((resolve) => {
-		setTimeout(resolve, ms);
-	});
-}
-/** Returns true when an auth profile uses native Codex/OpenAI app-server auth. */
-function isCodexAppServerNativeAuthProfile(lookup) {
-	const authProfileId = lookup.authProfileId?.trim();
-	if (!authProfileId) return false;
-	try {
-		const credential = (lookup.authProfileStore ?? ensureAuthProfileStore(lookup.agentDir?.trim() || resolveDefaultAgentDir(lookup.config ?? {}), {
-			allowKeychainPrompt: false,
-			config: lookup.config,
-			externalCliProviderIds: [CODEX_APP_SERVER_NATIVE_AUTH_PROVIDER],
-			externalCliProfileIds: [authProfileId]
-		})).profiles[authProfileId];
-		if (!credential || credential.type === "api_key") return false;
-		const provider = credential.provider?.trim();
-		return Boolean(provider && resolveProviderIdForAuth(provider, { config: lookup.config }) === CODEX_APP_SERVER_NATIVE_AUTH_PROVIDER);
-	} catch (error) {
-		embeddedAgentLog.debug("failed to resolve codex app-server auth profile provider", {
-			authProfileId,
-			error
-		});
-		return false;
-	}
-}
-/** Hides redundant OpenAI provider attribution for native Codex auth bindings. */
-function normalizeCodexAppServerBindingModelProvider(params) {
-	const modelProvider = params.modelProvider?.trim();
-	if (!modelProvider) return;
-	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === PUBLIC_OPENAI_MODEL_PROVIDER) return;
-	return modelProvider;
-}
-/** Restores the sole provider intentionally omitted from canonical binding rows. */
-function resolveCodexAppServerBindingModelProvider(params) {
-	return params.modelProvider?.trim() || (isCodexAppServerNativeAuthProfile(params) ? PUBLIC_OPENAI_MODEL_PROVIDER : void 0);
-}
-//#endregion
-export { CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME as A, isCodexAppServerApprovalPolicyAllowedByRequirements as C, resolveOpenClawExecPolicyForCodexAppServer as D, resolveCodexPluginsPolicy as E, isCodexFastServiceTier as O, resolveCodexModelBackedReviewerPolicyContext as S, readCodexPluginConfig as T, assertCodexAppServerConnectionSecurity as _, hashCodexAppServerBindingFingerprint as a, canUseCodexModelBackedApprovalsReviewerForModel as b, reclaimCurrentCodexSessionGeneration as c, codexAppServerStartOptionsKey as d, codexSandboxPolicyForTurn as f, resolveCodexSupervisionAppServerRuntimeOptions as g, resolveCodexComputerUseConfig as h, createCodexSessionGenerationSupersededError as i, CODEX_PLUGINS_MARKETPLACE_NAME as k, sessionBindingIdentity as l, resolveCodexAppServerStartOptionsForAgent as m, assertCodexBindingMayBeReplaced as n, isCodexAppServerNativeAuthProfile as o, resolveCodexAppServerRuntimeOptions as p, bindingStoreKey as r, normalizeCodexAppServerBindingModelProvider as s, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t, session_binding_exports as u, shouldAutoApproveCodexAppServerApprovals as v, isCodexSandboxExecServerEnabled as w, resolveCodexAppServerUserHomeDir as x, withMcpElicitationsApprovalPolicy as y };