@openclaw/codex 2026.7.2-beta.5 → 2026.8.1-beta.2

package/dist/{session-binding-DlVQ-Pxs.js → session-binding-DPxIvMgE.js}

@@ -1,32 +1,26 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
+import { asOptionalRecord, asOptionalRecord as readRecord, normalizeOptionalString as readNonEmptyString, normalizeTrimmedStringList, parseBooleanValue } from "openclaw/plugin-sdk/string-coerce-runtime";
 import path from "node:path";
 import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
-import { AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { AgentHarnessPreflightError, AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
-import { ensureAuthProfileStore, resolveDefaultAgentDir, resolveProviderIdForAuth, resolveSessionAgentIds as resolveSessionAgentIds$1 } from "openclaw/plugin-sdk/agent-runtime";
 import { readFileSync } from "node:fs";
 import { homedir, hostname } from "node:os";
+import { ensureAuthProfileStore, resolveDefaultAgentDir, resolveProviderIdForAuth, resolveSessionAgentIds as resolveSessionAgentIds$1 } from "openclaw/plugin-sdk/agent-runtime";
+import { parse } from "smol-toml";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
 import { buildSecretInputSchema, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
 import { z } from "zod";
-import { parse } from "smol-toml";
+import { isLoopbackHost } from "openclaw/plugin-sdk/ssrf-runtime";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { getSessionEntry, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
-//#region extensions/codex/src/app-server/config-contracts.ts
-const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
-const CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME = "workspace-directory";
-//#endregion
 //#region extensions/codex/src/app-server/config-utils.ts
 const START_OPTIONS_KEY_SECRET_SYMBOL = Symbol.for("openclaw.codexAppServerStartOptionsKeySecret");
 const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
 const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
-function readRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
 function normalizeCodexServiceTier(value) {
 	if (typeof value !== "string") return;
 	const trimmed = value.trim();
@@ -52,24 +46,8 @@ function normalizeHeaders(value) {
 function normalizeCodexAppServerSecretInput(params) {
 	return normalizeResolvedSecretInputString(params);
 }
-function normalizeStringList(value) {
-	return normalizeTrimmedStringList(value);
-}
 function readBooleanEnv(value) {
-	if (value === void 0) return;
-	const normalized = value.trim().toLowerCase();
-	if ([
-		"1",
-		"true",
-		"yes",
-		"on"
-	].includes(normalized)) return true;
-	if ([
-		"0",
-		"false",
-		"no",
-		"off"
-	].includes(normalized)) return false;
+	return parseBooleanValue(value);
 }
 function readExecSecurity(value) {
 	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
@@ -88,10 +66,6 @@ function resolveArgs(configArgs, envArgs) {
 	if (typeof configArgs === "string") return splitShellWords(configArgs);
 	return splitShellWords(envArgs ?? "");
 }
-function readNonEmptyString(value) {
-	if (typeof value !== "string") return;
-	return value.trim() || void 0;
-}
 function hashSecretForKey(value, label) {
 	if (!value) return null;
 	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
@@ -191,7 +165,7 @@ function resolveCodexPolicyModeForOpenClawExecMode(mode) {
 	return "guardian";
 }
 function assertCodexAppServerAllowedForOpenClawExecMode(mode) {
-	if (mode === "deny" || mode === "allowlist") throw new Error(`Codex app-server local execution is not available when tools.exec.mode=${mode}`);
+	if (mode === "deny" || mode === "allowlist") throw new AgentHarnessPreflightError(`Codex app-server local execution is unavailable because effective tools.exec.mode=${mode}. Execution-host approvals are authoritative. For gateway turns, inspect them with \`openclaw approvals get --gateway\` and update that same target with \`openclaw approvals set --gateway --stdin\`; for local \`agent exec\`, omit \`--gateway\`. Intentionally align that host policy before retrying.`, { scope: "harness" });
 }
 function createDefaultOpenClawExecPolicy() {
 	return {
@@ -300,219 +274,6 @@ function readExecMode(value) {
 	return value === "deny" || value === "allowlist" || value === "ask" || value === "auto" || value === "full" ? value : void 0;
 }
 //#endregion
-//#region extensions/codex/src/app-server/session-discovery-config.ts
-const codexSessionCatalogConfigSchema = z.object({ enabled: z.boolean().optional() }).strict();
-const codexDiscoveryConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	timeoutMs: z.number().positive().optional()
-}).strict();
-//#endregion
-//#region extensions/codex/src/app-server/config-parsing.ts
-const DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME = "computer-use";
-const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
-const DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS = 6e4;
-const DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS = 6e4;
-const DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX = "openclaw-network";
-const codexAppServerTransportSchema = z.enum([
-	"stdio",
-	"websocket",
-	"unix"
-]);
-const codexAppServerHomeScopeSchema = z.enum(["agent", "user"]);
-const SecretInputSchema = buildSecretInputSchema();
-const codexAppServerPolicyModeSchema = z.enum(["yolo", "guardian"]);
-const codexAppServerApprovalPolicySchema = z.preprocess((value) => value === "on-failure" ? "on-request" : value, z.enum([
-	"never",
-	"on-request",
-	"untrusted"
-]));
-const codexAppServerSandboxSchema = z.enum([
-	"read-only",
-	"workspace-write",
-	"danger-full-access"
-]);
-const codexAppServerApprovalsReviewerSchema = z.enum([
-	"user",
-	"auto_review",
-	"guardian_subagent"
-]);
-const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
-const codexComputerUseHealthIntervalSchema = z.union([
-	z.literal(30),
-	z.literal(60),
-	z.literal(120),
-	z.literal(240)
-]);
-const codexComputerUsePluginCacheModeSchema = z.enum(["shared", "independent"]);
-const codexPluginDestructivePolicySchema = z.union([
-	z.boolean(),
-	z.literal("auto"),
-	z.literal("ask")
-]);
-const codexAppServerServiceTierSchema = z.preprocess((value) => value === null ? null : normalizeCodexServiceTier(value), z.string().trim().min(1).nullable().optional()).optional();
-const codexAppServerExperimentalSchema = z.object({ sandboxExecServer: z.boolean().optional() }).strict();
-const codexAppServerRemoteWorkspaceRootSchema = z.string().trim().min(1);
-const codexAppServerNetworkProxyDomainPermissionSchema = z.enum(["allow", "deny"]);
-const codexAppServerNetworkProxyUnixSocketPermissionSchema = z.enum(["allow", "none"]);
-const codexAppServerNetworkProxySchema = z.object({
-	enabled: z.boolean().optional(),
-	profileName: z.string().trim().min(1).optional(),
-	baseProfile: z.enum(["read-only", "workspace"]).optional(),
-	mode: z.enum(["limited", "full"]).optional(),
-	domains: z.record(z.string(), codexAppServerNetworkProxyDomainPermissionSchema).optional(),
-	unixSockets: z.record(z.string(), codexAppServerNetworkProxyUnixSocketPermissionSchema).optional(),
-	proxyUrl: z.string().trim().min(1).optional(),
-	socksUrl: z.string().trim().min(1).optional(),
-	enableSocks5: z.boolean().optional(),
-	enableSocks5Udp: z.boolean().optional(),
-	allowUpstreamProxy: z.boolean().optional(),
-	allowLocalBinding: z.boolean().optional(),
-	dangerouslyAllowNonLoopbackProxy: z.boolean().optional(),
-	dangerouslyAllowAllUnixSockets: z.boolean().optional()
-}).strict();
-const codexPluginEntryConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	marketplaceName: z.enum([CODEX_PLUGINS_MARKETPLACE_NAME, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME]).optional(),
-	pluginName: z.string().trim().min(1).optional(),
-	allow_destructive_actions: codexPluginDestructivePolicySchema.optional()
-}).strict();
-const codexPluginsConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	allow_all_plugins: z.boolean().optional(),
-	allow_destructive_actions: codexPluginDestructivePolicySchema.optional(),
-	plugins: z.record(z.string(), codexPluginEntryConfigSchema).optional()
-}).strict();
-const codexSupervisionEndpointSchema = z.union([z.object({
-	id: z.string().optional(),
-	label: z.string().optional(),
-	transport: z.literal("stdio-proxy").optional(),
-	command: z.string().optional(),
-	args: z.array(z.string()).optional(),
-	cwd: z.string().optional()
-}).strict(), z.object({
-	id: z.string().optional(),
-	label: z.string().optional(),
-	transport: z.literal("websocket"),
-	url: z.string(),
-	authTokenEnv: z.string().optional()
-}).strict()]);
-const codexSupervisionConfigSchema = z.object({
-	enabled: z.boolean().optional(),
-	endpoints: z.array(codexSupervisionEndpointSchema).optional(),
-	allowRawTranscripts: z.boolean().optional(),
-	allowWriteControls: z.boolean().optional()
-}).strict();
-const codexPluginConfigSchema = z.object({
-	codexDynamicToolsLoading: codexDynamicToolsLoadingSchema.optional(),
-	codexDynamicToolsExclude: z.array(z.string()).optional(),
-	sessionCatalog: codexSessionCatalogConfigSchema.optional(),
-	discovery: codexDiscoveryConfigSchema.optional(),
-	computerUse: z.object({
-		enabled: z.boolean().optional(),
-		autoInstall: z.boolean().optional(),
-		marketplaceDiscoveryTimeoutMs: z.number().positive().optional(),
-		liveTestTimeoutMs: z.number().positive().optional(),
-		toolCallTimeoutMs: z.number().positive().optional(),
-		healthCheckEnabled: z.boolean().optional(),
-		healthCheckIntervalMinutes: codexComputerUseHealthIntervalSchema.optional(),
-		pluginCacheMode: codexComputerUsePluginCacheModeSchema.optional(),
-		strictReadiness: z.boolean().optional(),
-		autoRepair: z.boolean().optional(),
-		marketplaceSource: z.string().optional(),
-		marketplacePath: z.string().optional(),
-		marketplaceName: z.string().optional(),
-		pluginName: z.string().optional(),
-		mcpServerName: z.string().optional()
-	}).strict().optional(),
-	codexPlugins: z.unknown().optional(),
-	supervision: codexSupervisionConfigSchema.optional(),
-	appServer: z.object({
-		mode: codexAppServerPolicyModeSchema.optional(),
-		transport: codexAppServerTransportSchema.optional(),
-		homeScope: codexAppServerHomeScopeSchema.optional(),
-		command: z.string().optional(),
-		args: z.union([z.array(z.string()), z.string()]).optional(),
-		url: z.string().optional(),
-		authToken: SecretInputSchema.optional(),
-		headers: z.record(z.string(), SecretInputSchema).optional(),
-		clearEnv: z.array(z.string()).optional(),
-		remoteWorkspaceRoot: codexAppServerRemoteWorkspaceRootSchema.optional(),
-		codeModeOnly: z.boolean().optional(),
-		loopDetectionPreToolUseRelay: z.boolean().optional(),
-		requestTimeoutMs: z.number().positive().optional(),
-		turnCompletionIdleTimeoutMs: z.number().positive().optional(),
-		turnAssistantCompletionIdleTimeoutMs: z.number().positive().optional(),
-		postToolRawAssistantCompletionIdleTimeoutMs: z.number().positive().optional(),
-		approvalPolicy: codexAppServerApprovalPolicySchema.optional(),
-		sandbox: codexAppServerSandboxSchema.optional(),
-		approvalsReviewer: codexAppServerApprovalsReviewerSchema.optional(),
-		serviceTier: codexAppServerServiceTierSchema,
-		networkProxy: codexAppServerNetworkProxySchema.optional(),
-		defaultWorkspaceDir: z.string().optional(),
-		experimental: codexAppServerExperimentalSchema.optional()
-	}).strict().optional()
-}).strict();
-function readCodexPluginConfig(value) {
-	const parsed = codexPluginConfigSchema.safeParse(value);
-	if (!parsed.success) return {};
-	const { codexPlugins: rawCodexPlugins, ...config } = parsed.data;
-	const plugins = codexPluginsConfigSchema.safeParse(rawCodexPlugins);
-	if (!plugins.success) return config;
-	return {
-		...config,
-		...plugins.data ? { codexPlugins: plugins.data } : {}
-	};
-}
-function isCodexSandboxExecServerEnabled(pluginConfig) {
-	return readCodexPluginConfig(pluginConfig).appServer?.experimental?.sandboxExecServer === true;
-}
-function assertCodexAppServerCommandHasNoInlineArgs(params) {
-	const inlineArgs = detectWindowsSpawnCommandInlineArgs(params.command);
-	if (!inlineArgs) return;
-	const sourceLabel = params.source === "env" ? "OPENCLAW_CODEX_APP_SERVER_BIN" : "plugins.entries.codex.config.appServer.command";
-	const argsLabel = params.source === "env" ? "OPENCLAW_CODEX_APP_SERVER_ARGS" : "plugins.entries.codex.config.appServer.args";
-	throw new Error(`${sourceLabel} must be only the Codex app-server executable path; "${inlineArgs.executable}" was configured with inline arguments "${inlineArgs.arguments}". Move those arguments to ${argsLabel}, or remove the override to use the managed Codex startup path.`);
-}
-function resolveCodexPluginsPolicy(pluginConfig) {
-	const config = readCodexPluginConfig(pluginConfig).codexPlugins;
-	const configured = config !== void 0;
-	const enabled = config?.enabled === true;
-	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
-	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
-		if (!isCodexPluginMarketplaceName(entry.marketplaceName) || !entry.pluginName) return [];
-		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
-		return [{
-			configKey,
-			marketplaceName: entry.marketplaceName,
-			pluginName: entry.pluginName,
-			enabled: enabled && entry.enabled !== false,
-			allowDestructiveActions: entryDestructivePolicy.allowDestructiveActions,
-			destructiveApprovalMode: entryDestructivePolicy.destructiveApprovalMode
-		}];
-	}).toSorted((left, right) => left.configKey.localeCompare(right.configKey));
-	return {
-		configured,
-		enabled,
-		allowAllPlugins: enabled && config?.allow_all_plugins === true,
-		allowDestructiveActions: destructivePolicy.allowDestructiveActions,
-		destructiveApprovalMode: destructivePolicy.destructiveApprovalMode,
-		pluginPolicies
-	};
-}
-function isCodexPluginMarketplaceName(value) {
-	return value === "openai-curated" || value === "workspace-directory";
-}
-function resolveCodexPluginDestructivePolicy(policy) {
-	if (policy === "auto" || policy === "ask") return {
-		allowDestructiveActions: true,
-		destructiveApprovalMode: policy
-	};
-	return {
-		allowDestructiveActions: policy,
-		destructiveApprovalMode: policy ? "allow" : "deny"
-	};
-}
-//#endregion
 //#region extensions/codex/src/app-server/config-requirements.ts
 const UNIX_CODEX_REQUIREMENTS_PATH = "/etc/codex/requirements.toml";
 const WINDOWS_CODEX_REQUIREMENTS_SUFFIX = "\\OpenAI\\Codex\\requirements.toml";
@@ -910,6 +671,227 @@ function inferProviderFromModelRef(model) {
 	return slashIndex > 0 ? normalized?.slice(0, slashIndex) : void 0;
 }
 //#endregion
+//#region extensions/codex/src/app-server/config-contracts.ts
+const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
+const CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME = "workspace-directory";
+const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
+//#endregion
+//#region extensions/codex/src/app-server/session-discovery-config.ts
+const codexSessionCatalogConfigSchema = z.object({ enabled: z.boolean().optional() }).strict();
+const codexDiscoveryConfigSchema = z.object({
+	enabled: z.boolean().optional(),
+	timeoutMs: z.number().positive().optional()
+}).strict();
+//#endregion
+//#region extensions/codex/src/app-server/config-parsing.ts
+const DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME = "computer-use";
+const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
+const DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS = 6e4;
+const DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS = 6e4;
+const DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX = "openclaw-network";
+const codexAppServerTransportSchema = z.enum([
+	"stdio",
+	"websocket",
+	"unix"
+]);
+const codexAppServerHomeScopeSchema = z.enum(["agent", "user"]);
+const SecretInputSchema = buildSecretInputSchema();
+const codexAppServerPolicyModeSchema = z.enum(["yolo", "guardian"]);
+const codexAppServerApprovalPolicySchema = z.preprocess((value) => value === "on-failure" ? "on-request" : value, z.enum([
+	"never",
+	"on-request",
+	"untrusted"
+]));
+const codexAppServerSandboxSchema = z.enum([
+	"read-only",
+	"workspace-write",
+	"danger-full-access"
+]);
+const codexAppServerApprovalsReviewerSchema = z.enum([
+	"user",
+	"auto_review",
+	"guardian_subagent"
+]);
+const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
+const codexComputerUseHealthIntervalSchema = z.union([
+	z.literal(30),
+	z.literal(60),
+	z.literal(120),
+	z.literal(240)
+]);
+const codexComputerUsePluginCacheModeSchema = z.enum(["shared", "independent"]);
+const codexPluginDestructivePolicySchema = z.union([
+	z.boolean(),
+	z.literal("auto"),
+	z.literal("ask")
+]);
+const codexAppServerServiceTierSchema = z.preprocess((value) => value === null ? null : normalizeCodexServiceTier(value), z.string().trim().min(1).nullable().optional()).optional();
+const codexAppServerExperimentalSchema = z.object({ sandboxExecServer: z.boolean().optional() }).strict();
+const codexAppServerRemoteWorkspaceRootSchema = z.string().trim().min(1);
+const codexAppServerNetworkProxyDomainPermissionSchema = z.enum(["allow", "deny"]);
+const codexAppServerNetworkProxyUnixSocketPermissionSchema = z.enum(["allow", "none"]);
+const codexAppServerNetworkProxySchema = z.object({
+	enabled: z.boolean().optional(),
+	profileName: z.string().trim().min(1).optional(),
+	baseProfile: z.enum(["read-only", "workspace"]).optional(),
+	mode: z.enum(["limited", "full"]).optional(),
+	domains: z.record(z.string(), codexAppServerNetworkProxyDomainPermissionSchema).optional(),
+	unixSockets: z.record(z.string(), codexAppServerNetworkProxyUnixSocketPermissionSchema).optional(),
+	proxyUrl: z.string().trim().min(1).optional(),
+	socksUrl: z.string().trim().min(1).optional(),
+	enableSocks5: z.boolean().optional(),
+	enableSocks5Udp: z.boolean().optional(),
+	allowUpstreamProxy: z.boolean().optional(),
+	allowLocalBinding: z.boolean().optional(),
+	dangerouslyAllowNonLoopbackProxy: z.boolean().optional(),
+	dangerouslyAllowAllUnixSockets: z.boolean().optional()
+}).strict();
+const codexPluginEntryConfigSchema = z.object({
+	enabled: z.boolean().optional(),
+	marketplaceName: z.string().regex(CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN).optional(),
+	pluginName: z.string().trim().min(1).optional(),
+	allow_destructive_actions: codexPluginDestructivePolicySchema.optional()
+}).strict();
+const codexPluginsConfigSchema = z.object({
+	enabled: z.boolean().optional(),
+	allow_all_plugins: z.boolean().optional(),
+	allow_destructive_actions: codexPluginDestructivePolicySchema.optional(),
+	plugins: z.record(z.string(), codexPluginEntryConfigSchema).optional()
+}).strict();
+const codexSupervisionEndpointSchema = z.union([z.object({
+	id: z.string().optional(),
+	label: z.string().optional(),
+	transport: z.literal("stdio-proxy").optional(),
+	command: z.string().optional(),
+	args: z.array(z.string()).optional(),
+	cwd: z.string().optional()
+}).strict(), z.object({
+	id: z.string().optional(),
+	label: z.string().optional(),
+	transport: z.literal("websocket"),
+	url: z.string(),
+	authTokenEnv: z.string().optional()
+}).strict()]);
+const codexSupervisionConfigSchema = z.object({
+	enabled: z.boolean().optional(),
+	endpoints: z.array(codexSupervisionEndpointSchema).optional(),
+	allowRawTranscripts: z.boolean().optional(),
+	allowWriteControls: z.boolean().optional()
+}).strict();
+const codexPluginConfigSchema = z.object({
+	codexDynamicToolsLoading: codexDynamicToolsLoadingSchema.optional(),
+	codexDynamicToolsExclude: z.array(z.string()).optional(),
+	sessionCatalog: codexSessionCatalogConfigSchema.optional(),
+	discovery: codexDiscoveryConfigSchema.optional(),
+	computerUse: z.object({
+		enabled: z.boolean().optional(),
+		autoInstall: z.boolean().optional(),
+		marketplaceDiscoveryTimeoutMs: z.number().positive().optional(),
+		liveTestTimeoutMs: z.number().positive().optional(),
+		toolCallTimeoutMs: z.number().positive().optional(),
+		healthCheckEnabled: z.boolean().optional(),
+		healthCheckIntervalMinutes: codexComputerUseHealthIntervalSchema.optional(),
+		pluginCacheMode: codexComputerUsePluginCacheModeSchema.optional(),
+		strictReadiness: z.boolean().optional(),
+		autoRepair: z.boolean().optional(),
+		marketplaceSource: z.string().optional(),
+		marketplacePath: z.string().optional(),
+		marketplaceName: z.string().optional(),
+		pluginName: z.string().optional(),
+		mcpServerName: z.string().optional()
+	}).strict().optional(),
+	codexPlugins: z.unknown().optional(),
+	supervision: codexSupervisionConfigSchema.optional(),
+	appServer: z.object({
+		mode: codexAppServerPolicyModeSchema.optional(),
+		transport: codexAppServerTransportSchema.optional(),
+		homeScope: codexAppServerHomeScopeSchema.optional(),
+		command: z.string().optional(),
+		args: z.union([z.array(z.string()), z.string()]).optional(),
+		url: z.string().optional(),
+		authToken: SecretInputSchema.optional(),
+		headers: z.record(z.string(), SecretInputSchema).optional(),
+		clearEnv: z.array(z.string()).optional(),
+		remoteWorkspaceRoot: codexAppServerRemoteWorkspaceRootSchema.optional(),
+		codeModeOnly: z.boolean().optional(),
+		loopDetectionPreToolUseRelay: z.boolean().optional(),
+		requestTimeoutMs: z.number().positive().optional(),
+		turnCompletionIdleTimeoutMs: z.number().positive().optional(),
+		turnAssistantCompletionIdleTimeoutMs: z.number().positive().optional(),
+		postToolRawAssistantCompletionIdleTimeoutMs: z.number().positive().optional(),
+		approvalPolicy: codexAppServerApprovalPolicySchema.optional(),
+		sandbox: codexAppServerSandboxSchema.optional(),
+		approvalsReviewer: codexAppServerApprovalsReviewerSchema.optional(),
+		serviceTier: codexAppServerServiceTierSchema,
+		networkProxy: codexAppServerNetworkProxySchema.optional(),
+		defaultWorkspaceDir: z.string().optional(),
+		experimental: codexAppServerExperimentalSchema.optional()
+	}).strict().optional()
+}).strict();
+function readCodexPluginConfig(value) {
+	const parsed = codexPluginConfigSchema.safeParse(value);
+	if (!parsed.success) return {};
+	const { codexPlugins: rawCodexPlugins, ...config } = parsed.data;
+	const plugins = codexPluginsConfigSchema.safeParse(rawCodexPlugins);
+	if (!plugins.success) return config;
+	return {
+		...config,
+		...plugins.data ? { codexPlugins: plugins.data } : {}
+	};
+}
+function isCodexSandboxExecServerEnabled(pluginConfig, sandbox) {
+	return isCodexRemoteExecPlacementSandbox(sandbox) || readCodexPluginConfig(pluginConfig).appServer?.experimental?.sandboxExecServer === true;
+}
+function isCodexRemoteExecPlacementSandbox(sandbox) {
+	return typeof sandbox === "object" && sandbox !== null && "placementExecutionMode" in sandbox && sandbox.placementExecutionMode === "remote-exec";
+}
+function assertCodexAppServerCommandHasNoInlineArgs(params) {
+	const inlineArgs = detectWindowsSpawnCommandInlineArgs(params.command);
+	if (!inlineArgs) return;
+	const sourceLabel = params.source === "env" ? "OPENCLAW_CODEX_APP_SERVER_BIN" : "plugins.entries.codex.config.appServer.command";
+	const argsLabel = params.source === "env" ? "OPENCLAW_CODEX_APP_SERVER_ARGS" : "plugins.entries.codex.config.appServer.args";
+	throw new Error(`${sourceLabel} must be only the Codex app-server executable path; "${inlineArgs.executable}" was configured with inline arguments "${inlineArgs.arguments}". Move those arguments to ${argsLabel}, or remove the override to use the managed Codex startup path.`);
+}
+function resolveCodexPluginsPolicy(pluginConfig) {
+	const config = readCodexPluginConfig(pluginConfig).codexPlugins;
+	const configured = config !== void 0;
+	const enabled = config?.enabled === true;
+	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
+	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
+		if (!isCodexPluginMarketplaceName(entry.marketplaceName) || !entry.pluginName) return [];
+		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
+		return [{
+			configKey,
+			marketplaceName: entry.marketplaceName,
+			pluginName: entry.pluginName,
+			enabled: enabled && entry.enabled !== false,
+			allowDestructiveActions: entryDestructivePolicy.allowDestructiveActions,
+			destructiveApprovalMode: entryDestructivePolicy.destructiveApprovalMode
+		}];
+	}).toSorted((left, right) => left.configKey.localeCompare(right.configKey));
+	return {
+		configured,
+		enabled,
+		allowAllPlugins: enabled && config?.allow_all_plugins === true,
+		allowDestructiveActions: destructivePolicy.allowDestructiveActions,
+		destructiveApprovalMode: destructivePolicy.destructiveApprovalMode,
+		pluginPolicies
+	};
+}
+function isCodexPluginMarketplaceName(value) {
+	return typeof value === "string" && CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(value);
+}
+function resolveCodexPluginDestructivePolicy(policy) {
+	if (policy === "auto" || policy === "ask") return {
+		allowDestructiveActions: true,
+		destructiveApprovalMode: policy
+	};
+	return {
+		allowDestructiveActions: policy,
+		destructiveApprovalMode: policy ? "allow" : "deny"
+	};
+}
+//#endregion
 //#region extensions/codex/src/app-server/config-security.ts
 function shouldAutoApproveCodexAppServerApprovals(appServer) {
 	return appServer.networkProxy === void 0 && appServer.approvalPolicy === "never" && appServer.sandbox === "danger-full-access";
@@ -1025,8 +1007,7 @@ function isLoopbackWebSocketUrl(value) {
 		return false;
 	}
 	if (parsed.protocol !== "ws:" && parsed.protocol !== "wss:") return false;
-	const host = parsed.hostname.toLowerCase();
-	return host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]" || host.startsWith("127.");
+	return isLoopbackHost(parsed.hostname);
 }
 function hasIdentityBearingWebSocketAuth(params) {
 	if (readNonEmptyString(params.authToken)) return true;
@@ -1074,11 +1055,23 @@ function resolveDefaultCodexAppServerPolicy(params) {
 }
 //#endregion
 //#region extensions/codex/src/app-server/config-runtime.ts
+/**
+* Sole owner of the app-server home-scope decision. Ordinary harness connections
+* default to the isolated agent home; the supervision connection owns the operator's
+* native Codex home on local transports. Auth handoffs must read the scope from here
+* (or from resolved start options) because a prepared login on a native home rewrites
+* the account Codex CLI and Desktop share.
+*/
+function resolveCodexAppServerHomeScope(params) {
+	const configured = params.appServer?.homeScope;
+	if (configured) return configured;
+	return params.connectionScope === "supervision" && resolveTransport(params.appServer?.transport) !== "websocket" ? "user" : "agent";
+}
 function resolveCodexAppServerRuntimeOptions(params = {}) {
 	const env = params.env ?? process.env;
 	const config = readCodexPluginConfig(params.pluginConfig).appServer ?? {};
 	const transport = resolveTransport(config.transport);
-	const homeScope = config.homeScope ?? "agent";
+	const homeScope = resolveCodexAppServerHomeScope({ appServer: config });
 	const configCommand = readNonEmptyString(config.command);
 	const envCommand = readNonEmptyString(env.OPENCLAW_CODEX_APP_SERVER_BIN);
 	const command = configCommand ?? envCommand ?? "codex";
@@ -1089,7 +1082,7 @@ function resolveCodexAppServerRuntimeOptions(params = {}) {
 	});
 	const args = resolveArgs(config.args, env.OPENCLAW_CODEX_APP_SERVER_ARGS);
 	const headers = normalizeHeaders(config.headers);
-	const clearEnv = normalizeStringList(config.clearEnv);
+	const clearEnv = normalizeTrimmedStringList(config.clearEnv);
 	const authToken = normalizeCodexAppServerSecretInput({
 		value: config.authToken,
 		path: "plugins.entries.codex.config.appServer.authToken"
@@ -1326,8 +1319,10 @@ function codexSandboxPolicyForTurn(mode, cwd, nativeArgs = []) {
 function resolveCodexSupervisionAppServerRuntimeOptions(params = {}) {
 	const pluginConfig = readCodexPluginConfig(params.pluginConfig);
 	const appServer = pluginConfig.appServer ?? {};
-	const transport = resolveTransport(appServer.transport);
-	const homeScope = appServer.homeScope ?? (transport === "websocket" ? "agent" : "user");
+	const homeScope = resolveCodexAppServerHomeScope({
+		appServer,
+		connectionScope: "supervision"
+	});
 	return resolveCodexAppServerRuntimeOptions({
 		...params,
 		pluginConfig: {
@@ -1359,7 +1354,8 @@ var session_binding_exports = /* @__PURE__ */ __exportAll({
 	readCodexAppServerThreadBinding: () => readCodexAppServerThreadBinding,
 	readStoredCodexAppServerBinding: () => readStoredCodexAppServerBinding,
 	reclaimCurrentCodexSessionGeneration: () => reclaimCurrentCodexSessionGeneration,
-	resolveCodexAppServerBindingModelProvider: () => resolveCodexAppServerBindingModelProvider,
+	resolveCodexRunSessionBindingAuthority: () => resolveCodexRunSessionBindingAuthority,
+	scopeCodexRunBindingStore: () => scopeCodexRunBindingStore,
 	sessionBindingIdentity: () => sessionBindingIdentity
 });
 const CODEX_APP_SERVER_NATIVE_AUTH_PROVIDER = "openai";
@@ -1382,6 +1378,25 @@ function sessionBindingIdentity(params) {
 		...sessionKey ? { sessionKey } : {}
 	};
 }
+/** Decides whether a run may share the durable stable-key binding owner. */
+function resolveCodexRunSessionBindingAuthority(params) {
+	const sessionKey = params.identity.sessionKey?.trim();
+	if (!sessionKey) return "ephemeral";
+	try {
+		const storePath = params.storePath?.trim() || resolveStorePath(params.config?.session?.store, { agentId: params.identity.agentId });
+		const entry = getSessionEntry({
+			agentId: params.identity.agentId,
+			hydrateSkillPromptRefs: false,
+			readConsistency: "latest",
+			sessionKey,
+			storePath
+		});
+		if (!entry) return "ephemeral";
+		return entry.sessionId === params.identity.sessionId ? "current" : "superseded";
+	} catch {
+		return "superseded";
+	}
+}
 /** Builds the terminal coordination error used when a newer OpenClaw session owns the binding. */
 function createCodexSessionGenerationSupersededError(sessionId) {
 	return new AgentHarnessSessionSupersededError(`Codex session generation is no longer current: ${sessionId}`);
@@ -1428,15 +1443,17 @@ const accountAppPolicyEntrySchema = z.object({
 	source: z.literal("account"),
 	appName: z.string(),
 	allowDestructiveActions: z.boolean(),
+	allowOpenWorld: z.boolean().optional(),
 	destructiveApprovalMode: destructiveApprovalModeSchema,
 	mcpServerNames: z.array(z.string())
 }).strict();
 const pluginAppPolicyEntrySchema = z.object({
 	source: z.literal("plugin").optional(),
 	configKey: z.string(),
-	marketplaceName: z.enum([CODEX_PLUGINS_MARKETPLACE_NAME, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME]),
+	marketplaceName: z.string().regex(CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN),
 	pluginName: z.string(),
 	allowDestructiveActions: z.boolean(),
+	allowOpenWorld: z.boolean().optional(),
 	destructiveApprovalMode: destructiveApprovalModeSchema,
 	mcpServerNames: z.array(z.string())
 }).strict();
@@ -1449,6 +1466,7 @@ const threadBindingSchema = z.object({
 	threadId: z.string().refine((value) => Boolean(value.trim())),
 	clientId: optionalStringSchema,
 	cwd: z.string(),
+	rolloutPath: optionalNonBlankStringSchema,
 	connectionScope: z.literal("supervision").optional(),
 	supervisionSourceThreadId: z.string().trim().min(1).optional(),
 	authProfileId: optionalStringSchema,
@@ -1472,10 +1490,14 @@ const threadBindingSchema = z.object({
 	dynamicToolsFingerprint: optionalStringSchema,
 	dynamicToolsContainDeferred: optionalBooleanSchema,
 	webSearchThreadConfigFingerprint: optionalStringSchema,
+	nativeSkillIsolationFingerprint: optionalStringSchema,
 	userMcpServersFingerprint: optionalStringSchema,
 	mcpServersFingerprint: optionalStringSchema,
+	configuredMcpOwnershipVersion: z.literal(1).optional().catch(void 0),
 	ringZeroConfigFingerprint: optionalStringSchema,
 	ringZeroClientInstanceId: optionalStringSchema,
+	/** Durable fact preventing a later unrestricted turn from widening this thread. */
+	nativeToolPolicyRestricted: z.literal(true).optional().catch(void 0),
 	nativeHookRelayGeneration: optionalNonBlankStringSchema,
 	appServerRuntimeFingerprint: optionalStringSchema,
 	pluginAppsFingerprint: optionalStringSchema,
@@ -1583,7 +1605,7 @@ function normalizeStoredCodexAppServerBindingFingerprints(value) {
 }
 /** Encodes a migrated sidecar binding as one canonical plugin-state row. */
 function createStoredCodexAppServerBinding(value, options = {}) {
-	const rawRecord = asRecord(value);
+	const rawRecord = asOptionalRecord(value);
 	if (!rawRecord) return;
 	const record = normalizeLegacyBindingFingerprints(rawRecord);
 	if (record.schemaVersion !== 1 && record.schemaVersion !== 2) return;
@@ -1610,6 +1632,22 @@ function createStoredCodexAppServerBinding(value, options = {}) {
 function bindingLeaseLostError(key, cause) {
 	return new Error(`Lost Codex binding lease: ${key}`, cause === void 0 ? void 0 : { cause });
 }
+/** Carries one prepared run identity through callers that rederive it from public params. */
+function scopeCodexRunBindingStore(params) {
+	const mapSessionIdentity = (identity) => identity.agentId === params.logicalIdentity.agentId && identity.sessionId === params.logicalIdentity.sessionId && identity.sessionKey?.trim() === params.logicalIdentity.sessionKey?.trim() ? params.physicalIdentity : identity;
+	const mapIdentity = (identity) => identity.kind === "session" ? mapSessionIdentity(identity) : identity;
+	return {
+		read: (identity) => params.bindingStore.read(mapIdentity(identity)),
+		hasOtherThreadOwner: (threadId, identity) => params.bindingStore.hasOtherThreadOwner(threadId, identity ? mapIdentity(identity) : void 0),
+		mutate: (identity, mutation) => params.bindingStore.mutate(mapIdentity(identity), mutation),
+		prepareSessionGenerationReclaim: (identity) => params.bindingStore.prepareSessionGenerationReclaim(mapSessionIdentity(identity)),
+		adoptSessionGeneration: (identity, expectedPreviousSessionId) => params.bindingStore.adoptSessionGeneration(mapSessionIdentity(identity), expectedPreviousSessionId),
+		resetSessionGeneration: (identity) => params.bindingStore.resetSessionGeneration(mapSessionIdentity(identity)),
+		retireSessionGeneration: (identity) => params.bindingStore.retireSessionGeneration(mapSessionIdentity(identity)),
+		withThreadArchiveFence: (run) => params.bindingStore.withThreadArchiveFence(run),
+		withLease: (identity, run) => params.bindingStore.withLease(mapIdentity(identity), run)
+	};
+}
 /** Lets the authoritative OpenClaw session generation claim a stale stable binding row. */
 async function reclaimCurrentCodexSessionGeneration(params) {
 	const sessionKey = params.identity.sessionKey?.trim();
@@ -1617,7 +1655,7 @@ async function reclaimCurrentCodexSessionGeneration(params) {
 	const plan = await params.bindingStore.prepareSessionGenerationReclaim(params.identity);
 	if (plan.kind === "resolved") return plan.result;
 	try {
-		const storePath = resolveStorePath(params.config?.session?.store, { agentId: params.identity.agentId });
+		const storePath = params.storePath?.trim() || resolveStorePath(params.config?.session?.store, { agentId: params.identity.agentId });
 		if (getSessionEntry({
 			agentId: params.identity.agentId,
 			hydrateSkillPromptRefs: false,
@@ -1807,7 +1845,8 @@ function createCodexAppServerBindingStore(state) {
 					const retiredGeneration = current?.state === "cleared" && current.retired === true && ownsGeneration;
 					const preservesSupervisionOwner = mutation.kind === "set" && active?.binding.connectionScope === "supervision" && isSameSupervisionOwner(active.binding, mutation.binding);
 					const clearsPendingSupervisionOwner = mutation.kind === "clear" && active?.binding.connectionScope === "supervision" && matchesPendingSupervisionClear(active.binding, mutation.threadId, mutation.expectedPendingSupervisionBranch);
-					if (mutation.kind === "set" && (mutation.if?.kind === "absent" && storedActive || current !== void 0 && !ownsGeneration || retiredGeneration || active?.binding.connectionScope === "supervision" && !preservesSupervisionOwner) || mutation.kind === "patch" && active?.binding.threadId !== mutation.threadId || (mutation.kind === "patch-pending-supervision-branch" || mutation.kind === "commit-pending-supervision-branch") && !matchesPendingSupervisionBranch(active?.binding, mutation.expected) || mutation.kind === "clear" && (mutation.threadId !== void 0 && active?.binding.threadId !== mutation.threadId || !ownsGeneration || active?.binding.connectionScope === "supervision" && !clearsPendingSupervisionOwner)) return { result: false };
+					const replacesExpectedOrdinaryOwner = mutation.kind === "replace-thread" && active?.binding.threadId === mutation.expectedThreadId && active.binding.connectionScope !== "supervision" && mutation.binding.connectionScope !== "supervision" && mutation.binding.threadId !== mutation.expectedThreadId;
+					if (mutation.kind === "set" && (mutation.if?.kind === "absent" && storedActive || current !== void 0 && !ownsGeneration || retiredGeneration || active?.binding.connectionScope === "supervision" && !preservesSupervisionOwner) || mutation.kind === "patch" && active?.binding.threadId !== mutation.threadId || mutation.kind === "replace-thread" && !replacesExpectedOrdinaryOwner || (mutation.kind === "patch-pending-supervision-branch" || mutation.kind === "commit-pending-supervision-branch") && !matchesPendingSupervisionBranch(active?.binding, mutation.expected) || mutation.kind === "clear" && (mutation.threadId !== void 0 && active?.binding.threadId !== mutation.threadId || !ownsGeneration || active?.binding.connectionScope === "supervision" && !clearsPendingSupervisionOwner)) return { result: false };
 					if (mutation.kind === "clear" && retiredGeneration) return { result: true };
 					if (mutation.kind === "clear") return {
 						result: true,
@@ -1819,7 +1858,7 @@ function createCodexAppServerBindingStore(state) {
 						}
 					};
 					let binding;
-					if (mutation.kind === "set") binding = validateBindingForWrite(mutation.binding);
+					if (mutation.kind === "set" || mutation.kind === "replace-thread") binding = validateBindingForWrite(mutation.binding);
 					else if (mutation.kind === "patch-pending-supervision-branch") binding = validateBindingForWrite({
 						...active.binding,
 						pendingSupervisionBranch: mutation.pending
@@ -2061,40 +2100,39 @@ function stripUndefinedValue(value) {
 	if (!value || typeof value !== "object") return value;
 	return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== void 0).map(([key, entry]) => [key, stripUndefinedValue(entry)]));
 }
-function asRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
 function readTimestamp(value) {
 	return optionalTimestampSchema.parse(value);
 }
 function readPluginAppPolicyContext(value, bindingSchemaVersion) {
-	const record = asRecord(value);
+	const record = asOptionalRecord(value);
 	if (!record || typeof record.fingerprint !== "string") return;
-	const apps = asRecord(record.apps);
+	const apps = asOptionalRecord(record.apps);
 	if (!apps) return;
 	const parsedApps = {};
 	for (const [appId, rawEntry] of Object.entries(apps)) {
-		const entry = asRecord(rawEntry);
+		const entry = asOptionalRecord(rawEntry);
 		if (!entry) return;
 		const destructiveApprovalMode = readDestructiveApprovalMode(entry.destructiveApprovalMode, bindingSchemaVersion);
 		const mcpServerNamesValid = Array.isArray(entry.mcpServerNames) && entry.mcpServerNames.every((serverName) => typeof serverName === "string");
 		if (entry.source === "account") {
-			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
+			if ("appId" in entry || typeof entry.appName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
 			parsedApps[appId] = {
 				source: "account",
 				appName: entry.appName,
 				allowDestructiveActions: entry.allowDestructiveActions,
+				...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
 				...destructiveApprovalMode ? { destructiveApprovalMode } : {},
 				mcpServerNames: entry.mcpServerNames
 			};
 			continue;
 		}
-		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || entry.marketplaceName !== "openai-curated" && entry.marketplaceName !== "workspace-directory" || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
+		if ("appId" in entry || entry.source !== void 0 && entry.source !== "plugin" || typeof entry.configKey !== "string" || typeof entry.marketplaceName !== "string" || !CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(entry.marketplaceName) || typeof entry.pluginName !== "string" || typeof entry.allowDestructiveActions !== "boolean" || entry.allowOpenWorld !== void 0 && typeof entry.allowOpenWorld !== "boolean" || destructiveApprovalMode === "invalid" || !mcpServerNamesValid) return;
 		parsedApps[appId] = {
 			configKey: entry.configKey,
 			marketplaceName: entry.marketplaceName,
 			pluginName: entry.pluginName,
 			allowDestructiveActions: entry.allowDestructiveActions,
+			...typeof entry.allowOpenWorld === "boolean" ? { allowOpenWorld: entry.allowOpenWorld } : {},
 			...destructiveApprovalMode ? { destructiveApprovalMode } : {},
 			mcpServerNames: entry.mcpServerNames
 		};
@@ -2153,9 +2191,5 @@ function normalizeCodexAppServerBindingModelProvider(params) {
 	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === PUBLIC_OPENAI_MODEL_PROVIDER) return;
 	return modelProvider;
 }
-/** Restores the sole provider intentionally omitted from canonical binding rows. */
-function resolveCodexAppServerBindingModelProvider(params) {
-	return params.modelProvider?.trim() || (isCodexAppServerNativeAuthProfile(params) ? PUBLIC_OPENAI_MODEL_PROVIDER : void 0);
-}
 //#endregion
-export { CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME as A, isCodexAppServerApprovalPolicyAllowedByRequirements as C, resolveOpenClawExecPolicyForCodexAppServer as D, resolveCodexPluginsPolicy as E, isCodexFastServiceTier as O, resolveCodexModelBackedReviewerPolicyContext as S, readCodexPluginConfig as T, assertCodexAppServerConnectionSecurity as _, hashCodexAppServerBindingFingerprint as a, canUseCodexModelBackedApprovalsReviewerForModel as b, reclaimCurrentCodexSessionGeneration as c, codexAppServerStartOptionsKey as d, codexSandboxPolicyForTurn as f, resolveCodexSupervisionAppServerRuntimeOptions as g, resolveCodexComputerUseConfig as h, createCodexSessionGenerationSupersededError as i, CODEX_PLUGINS_MARKETPLACE_NAME as k, sessionBindingIdentity as l, resolveCodexAppServerStartOptionsForAgent as m, assertCodexBindingMayBeReplaced as n, isCodexAppServerNativeAuthProfile as o, resolveCodexAppServerRuntimeOptions as p, bindingStoreKey as r, normalizeCodexAppServerBindingModelProvider as s, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t, session_binding_exports as u, shouldAutoApproveCodexAppServerApprovals as v, isCodexSandboxExecServerEnabled as w, resolveCodexAppServerUserHomeDir as x, withMcpElicitationsApprovalPolicy as y };
+export { resolveCodexAppServerUserHomeDir as A, isCodexRemoteExecPlacementSandbox as C, CODEX_PLUGINS_MARKETPLACE_NAME as D, resolveCodexPluginsPolicy as E, isCodexAppServerApprovalPolicyAllowedByRequirements as M, resolveOpenClawExecPolicyForCodexAppServer as N, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME as O, isCodexFastServiceTier as P, withMcpElicitationsApprovalPolicy as S, readCodexPluginConfig as T, resolveCodexAppServerStartOptionsForAgent as _, hashCodexAppServerBindingFingerprint as a, assertCodexAppServerConnectionSecurity as b, reclaimCurrentCodexSessionGeneration as c, sessionBindingIdentity as d, session_binding_exports as f, resolveCodexAppServerRuntimeOptions as g, resolveCodexAppServerHomeScope as h, createCodexSessionGenerationSupersededError as i, resolveCodexModelBackedReviewerPolicyContext as j, canUseCodexModelBackedApprovalsReviewerForModel as k, resolveCodexRunSessionBindingAuthority as l, codexSandboxPolicyForTurn as m, assertCodexBindingMayBeReplaced as n, isCodexAppServerNativeAuthProfile as o, codexAppServerStartOptionsKey as p, bindingStoreKey as r, normalizeCodexAppServerBindingModelProvider as s, CODEX_APP_SERVER_BINDING_GUARDED_REQUEST_TIMEOUT_MS as t, scopeCodexRunBindingStore as u, resolveCodexComputerUseConfig as v, isCodexSandboxExecServerEnabled as w, shouldAutoApproveCodexAppServerApprovals as x, resolveCodexSupervisionAppServerRuntimeOptions as y };