@openclaw/codex 2026.7.2-beta.5 → 2026.8.1-beta.2

package/dist/{side-question-CO12sHxo.js → side-question-9HAL26l9.js}

@@ -1,12 +1,14 @@
-import { D as ensureCodexAppServerClientRuntime, I as resolveCodexAppServerPreparedAuthHandoff, V as isJsonObject, a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, k as readRecentCodexRateLimits, m as withLeasedCodexAppServerClientStartSelectionRetry, y as isCodexAppServerApprovalRequest } from "./shared-client-BVKE40c-.js";
-import { D as resolveOpenClawExecPolicyForCodexAppServer, S as resolveCodexModelBackedReviewerPolicyContext, T as readCodexPluginConfig, b as canUseCodexModelBackedApprovalsReviewerForModel, l as sessionBindingIdentity, v as shouldAutoApproveCodexAppServerApprovals } from "./session-binding-DlVQ-Pxs.js";
-import { A as resolveCodexDynamicToolsLoading, C as readCodexSupportedReasoningEfforts, G as mergeCodexThreadConfigs, S as resolveReasoningEffort, T as filterCodexDynamicTools, V as buildCodexPluginAppsConfigPatchFromPolicyContext, _ as CODEX_NATIVE_PERSONALITY_NONE, f as buildCodexRuntimeThreadConfig, h as resolveCodexWebSearchPlan, v as resolveCodexAppServerModelProvider, x as resolveCodexBindingModelProviderFallback, y as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-DRg_FdzC.js";
-import { a as assertCodexTurnStartResponse, l as readCodexTurn, n as assertCodexThreadForkResponse, o as readCodexDynamicToolCallParams } from "./protocol-validators-Dm4eXZmt.js";
-import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-S_PXs0ul.js";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-BmDgseo_.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-D1Wky__S.js";
-import { a as resolveCodexBindingAppServerConnection, i as requireCodexSupervisionModelSelection, n as readCodexNotificationThreadId, r as readCodexNotificationTurnId } from "./notification-correlation-Bj_Ak_jI.js";
-import { C as CodexNativeToolLifecycleProjector, D as buildCodexNativeHookRelayDisabledConfig, E as buildCodexNativeHookRelayConfig, L as resolveDynamicToolCallTimeoutMs, N as handleDynamicToolCallWithTimeout, S as filterToolsForVisionInputs, U as resolveCodexToolAbortTerminalReason, _ as resolveCodexMessageToolProvider, a as emitDynamicToolStartedDiagnostic, c as resolveCodexProviderWebSearchSupportForClient, i as emitDynamicToolErrorDiagnostic, k as emitCodexNativePreToolUseFailureDiagnostic, n as handleCodexAppServerApprovalRequest, o as emitDynamicToolTerminalDiagnostic, r as handleCodexAppServerElicitationRequest, t as createCodexDynamicToolBridge, w as CODEX_NATIVE_HOOK_RELAY_EVENTS, y as shouldEnableCodexAppServerNativeToolSurface } from "./dynamic-tools-LIt9ojep.js";
+import { C as isCodexRemoteExecPlacementSandbox, N as resolveOpenClawExecPolicyForCodexAppServer, T as readCodexPluginConfig, d as sessionBindingIdentity, h as resolveCodexAppServerHomeScope, j as resolveCodexModelBackedReviewerPolicyContext, k as canUseCodexModelBackedApprovalsReviewerForModel, w as isCodexSandboxExecServerEnabled, x as shouldAutoApproveCodexAppServerApprovals } from "./session-binding-DPxIvMgE.js";
+import { A as isCodexAppServerApprovalRequest, H as ensureCodexAppServerClientRuntime, N as isCodexAppServerIndeterminateRequestCancellationError, X as readRecentCodexRateLimits, a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, ct as isJsonObject, h as withLeasedCodexAppServerClientStartSelectionRetry, rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-kIBbGjk4.js";
+import { d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, s as isCodexAlreadyTerminalInterruptError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-DMLXUfa8.js";
+import { l as readCodexTurn, o as assertCodexTurnStartResponse, r as assertCodexThreadForkResponse, s as readCodexDynamicToolCallParams } from "./protocol-validators-B4F7L8Rf.js";
+import { R as buildCodexPluginAppsConfigPatchFromPolicyContext, W as mergeCodexThreadConfigs, b as readCodexSupportedReasoningEfforts, f as resolveCodexWebSearchPlan, g as resolveCodexAppServerRequestModelSelection, h as resolveCodexAppServerModelProvider, k as resolveCodexDynamicToolsLoading, l as buildCodexRuntimeThreadConfig, m as CODEX_NATIVE_PERSONALITY_NONE, v as resolveCodexBindingModelProviderFallback, w as filterCodexDynamicTools, y as resolveReasoningEffort } from "./thread-lifecycle-Bu1BTDXr.js";
+import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-DZXmOL8-.js";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-zcBDc1JU.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-Cmwc9eIk.js";
+import { n as resolveCodexBindingAppServerConnection, t as requireCodexSupervisionModelSelection } from "./binding-connection-I5Bo-AsX.js";
+import { A as buildCodexNativeHookRelayDisabledConfig, B as resolveDynamicToolCallTimeoutMs, D as CODEX_NATIVE_HOOK_RELAY_EVENTS, E as CodexNativeToolLifecycleProjector, I as handleDynamicToolCallWithTimeout, K as resolveCodexToolAbortTerminalReason, M as emitCodexNativePreToolUseFailureDiagnostic, S as shouldRequireCodexSandboxExecServerEnvironment, a as emitDynamicToolStartedDiagnostic, b as resolveCodexSandboxEnvironmentSelection, d as releaseCodexSandboxExecServerEnvironment, i as emitDynamicToolErrorDiagnostic, k as buildCodexNativeHookRelayConfig, l as resolveCodexProviderWebSearchSupportForClient, o as emitDynamicToolTerminalDiagnostic, r as handleCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, u as ensureCodexSandboxExecServerEnvironment, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, w as filterToolsForVisionInputs, x as shouldEnableCodexAppServerNativeToolSurface, y as resolveCodexMessageToolProvider } from "./dynamic-tools-BVdyWkUD.js";
+import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { randomUUID } from "node:crypto";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
@@ -78,7 +80,8 @@ async function runCodexAppServerSideQuestion(params, options) {
 		authProfileId: preparedRuntimeAuth.plan.forwardedAuthProfileId,
 		authProfileStore: preparedRuntimeAuth.authProfileStore,
 		agentDir: params.agentDir,
-		...pluginConfig.appServer?.homeScope ? { homeScope: pluginConfig.appServer.homeScope } : {},
+		homeScope: resolveCodexAppServerHomeScope({ appServer: pluginConfig.appServer }),
+		requirePreparedAuth: isCodexRemoteExecPlacementSandbox(params.sandbox),
 		config: params.cfg,
 		subscriptionProfileRequiredError: "Prepared Codex subscription route requires a scoped native OAuth or token profile.",
 		subscriptionProfileUnusableError: `Prepared Codex auth profile "${preparedRuntimeAuth.plan.forwardedAuthProfileId}" is unusable.`
@@ -145,16 +148,25 @@ async function runCodexAppServerSideQuestion(params, options) {
 	const sideRunParams = buildSideRunAttemptParams(effectiveParams, {
 		cwd,
 		authProfileId,
-		runId
+		runId,
+		timeoutMs: appServer.requestTimeoutMs
+	});
+	const sandboxExecServerEnabled = isCodexSandboxExecServerEnabled(pluginConfig, params.sandbox);
+	const nativeToolSurfaceEnabled = shouldEnableCodexAppServerNativeToolSurface(sideRunParams, params.sandbox ?? void 0, { sandboxExecServerEnabled });
+	const sandboxEnvironmentRequired = shouldRequireCodexSandboxExecServerEnvironment({
+		sandbox: params.sandbox ?? void 0,
+		nativeToolSurfaceEnabled,
+		sandboxExecServerEnabled
 	});
 	const nativeExecutionBlock = resolveCodexNativeExecutionBlock({
 		config: sideRunParams.config,
 		sessionKey: sideRunParams.sandboxSessionKey?.trim() || sideRunParams.sessionKey,
 		sessionId: sideRunParams.sessionId,
+		sandbox: params.sandbox,
+		sandboxEnvironmentSelected: sandboxEnvironmentRequired,
 		surface: "/btw side-question mode"
 	});
 	if (nativeExecutionBlock) throw new Error(nativeExecutionBlock);
-	const nativeToolSurfaceEnabled = shouldEnableCodexAppServerNativeToolSurface(sideRunParams);
 	if (!nativeToolSurfaceEnabled) throw new Error("Codex-native /btw side-question mode is unavailable because the effective tool policy restricts Codex native tools for this session.");
 	const clientOptions = {
 		startOptions: appServer.start,
@@ -211,9 +223,31 @@ async function runCodexAppServerSideQuestion(params, options) {
 	else params.opts?.abortSignal?.addEventListener("abort", abortFromUpstream, { once: true });
 	let childThreadId;
 	let turnId;
+	let sandboxEnvironment;
+	let sandboxEnvironmentClient;
 	let removeRequestHandler;
 	let nativeHookRelay;
 	const activeDynamicToolCalls = /* @__PURE__ */ new Set();
+	const releaseSandboxEnvironment = async () => {
+		if (!sandboxEnvironment) return;
+		sandboxEnvironment = void 0;
+		sandboxEnvironmentClient = void 0;
+		await releaseCodexSandboxExecServerEnvironment(params.sandbox);
+	};
+	const ensureSandboxEnvironment = async (targetClient) => {
+		if (!sandboxEnvironmentRequired || sandboxEnvironmentClient === targetClient) return;
+		await releaseSandboxEnvironment();
+		const environment = await ensureCodexSandboxExecServerEnvironment({
+			client: targetClient,
+			sandbox: params.sandbox ?? null,
+			appServerStartOptions: appServer.start,
+			timeoutMs: appServer.requestTimeoutMs,
+			signal: runAbortController.signal
+		});
+		if (!environment) throw new Error("Codex app-server did not register an OpenClaw sandbox exec-server environment.");
+		sandboxEnvironment = environment;
+		sandboxEnvironmentClient = targetClient;
+	};
 	try {
 		const modelScopedAppServer = resolveCodexAppServerForModelProvider({
 			appServer,
@@ -367,6 +401,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 			completionTimeoutMs: Math.max(appServer.turnCompletionIdleTimeoutMs, SIDE_QUESTION_COMPLETION_TIMEOUT_MS),
 			loopDetectionPreToolUseRelay: appServer.loopDetectionPreToolUseRelay,
 			signal: runAbortController.signal,
+			hostCapabilities: sideRunParams.hostCapabilities,
 			onPreToolUseFailure: (failure) => {
 				if (nativePreToolUseFailureFallbackActive) emitNativePreToolUseFailure(failure);
 				else if (nativeToolLifecycleProjector) nativeToolLifecycleProjector.recordPreToolUseFailure(failure, nativeToolRunWasAbortedBeforeCleanup);
@@ -389,20 +424,24 @@ async function runCodexAppServerSideQuestion(params, options) {
 			lease: clientLease,
 			options: clientOptions,
 			signal: params.opts?.abortSignal,
-			run: async (forkClient, requestOptions) => await forkCodexSideThread(forkClient, {
-				threadId: binding.threadId,
-				model: modelSelection.model,
-				...modelSelection.modelProvider ? { modelProvider: modelSelection.modelProvider } : {},
-				cwd,
-				approvalPolicy,
-				approvalsReviewer: modelScopedAppServer.approvalsReviewer,
-				...modelScopedAppServer.networkProxy ? {} : { sandbox },
-				...serviceTier ? { serviceTier } : {},
-				config: threadConfig,
-				developerInstructions: SIDE_DEVELOPER_INSTRUCTIONS,
-				ephemeral: true,
-				threadSource: "user"
-			}, requestOptions),
+			run: async (forkClient, requestOptions) => {
+				await ensureSandboxEnvironment(forkClient);
+				const executionCwd = sandboxEnvironment?.cwd ?? cwd;
+				return await forkCodexSideThread(forkClient, {
+					threadId: binding.threadId,
+					model: modelSelection.model,
+					...modelSelection.modelProvider ? { modelProvider: modelSelection.modelProvider } : {},
+					cwd: executionCwd,
+					approvalPolicy,
+					approvalsReviewer: modelScopedAppServer.approvalsReviewer,
+					...sandboxEnvironment || modelScopedAppServer.networkProxy ? {} : { sandbox },
+					...serviceTier ? { serviceTier } : {},
+					config: threadConfig,
+					developerInstructions: SIDE_DEVELOPER_INSTRUCTIONS,
+					ephemeral: true,
+					threadSource: "user"
+				}, requestOptions);
+			},
 			onClientChange: rebindClientHandlers
 		}));
 		childThreadId = forkResponse.thread.id;
@@ -422,7 +461,11 @@ async function runCodexAppServerSideQuestion(params, options) {
 				text: params.question.trim(),
 				text_elements: []
 			}],
-			cwd,
+			...sandboxEnvironment ? {
+				cwd: sandboxEnvironment.cwd,
+				sandboxPolicy: resolveCodexExternalSandboxPolicyForOpenClawSandbox(params.sandbox ?? void 0),
+				environments: resolveCodexSandboxEnvironmentSelection(sandboxEnvironment, nativeToolSurfaceEnabled)
+			} : { cwd },
 			model: modelSelection.model,
 			...usesSupervisionConnection ? {} : { personality: CODEX_NATIVE_PERSONALITY_NONE },
 			...serviceTier ? { serviceTier } : {},
@@ -440,6 +483,9 @@ async function runCodexAppServerSideQuestion(params, options) {
 		}, {
 			timeoutMs: appServer.requestTimeoutMs,
 			signal: params.opts?.abortSignal
+		}).catch((error) => {
+			if (isCodexAppServerIndeterminateRequestCancellationError(error)) turnId = "";
+			throw error;
 		})).turn.id;
 		collector.setTurn(childThreadId, turnId);
 		nativeToolLifecycleProjector = new CodexNativeToolLifecycleProjector({
@@ -488,8 +534,12 @@ async function runCodexAppServerSideQuestion(params, options) {
 			}
 		} finally {
 			flushPendingNativePreToolUseFailures();
-			releaseCodexAppServerClientLease(clientLease);
-			nativeHookRelay?.unregister();
+			try {
+				await releaseSandboxEnvironment();
+			} finally {
+				releaseCodexAppServerClientLease(clientLease);
+				nativeHookRelay?.unregister();
+			}
 		}
 	}
 }
@@ -515,6 +565,8 @@ function registerCodexSideNativeHookRelay(params) {
 			completionTimeoutMs: params.completionTimeoutMs
 		}),
 		signal: params.signal,
+		runBeforeToolCall: params.hostCapabilities.runBeforeToolCall,
+		assertActive: params.hostCapabilities.assertActive,
 		onPreToolUseFailure: params.onPreToolUseFailure,
 		command: { timeoutMs: params.options.gatewayTimeoutMs }
 	});
@@ -535,6 +587,8 @@ function buildSideRunAttemptParams(params, options) {
 			id: params.model,
 			provider: params.provider
 		},
+		prompt: params.question,
+		timeoutMs: options.timeoutMs,
 		sessionId: params.sessionId,
 		sessionFile: params.sessionFile,
 		sessionKey: params.sessionKey,
@@ -575,7 +629,9 @@ function buildSideRunAttemptParams(params, options) {
 			if (event.stream === "approval") params.opts?.onApprovalEvent?.(event.data);
 		},
 		onBlockReply: params.opts?.onBlockReply,
-		onPartialReply: params.opts?.onPartialReply
+		onPartialReply: params.opts?.onPartialReply,
+		hostCapabilities: params.hostCapabilities,
+		sandbox: params.sandbox
 	};
 }
 async function createCodexSideToolBridge(input) {
@@ -588,7 +644,7 @@ async function createCodexSideToolBridge(input) {
 	if (supportsModelTools(runtimeModel)) {
 		const createOpenClawCodingTools = (await import("openclaw/plugin-sdk/agent-harness")).createOpenClawCodingTools;
 		const sandboxSessionKey = input.params.sandboxSessionKey?.trim() || input.params.sessionKey?.trim() || input.params.sessionId || input.sessionAgentId;
-		const sandbox = await resolveSandboxContext({
+		const sandbox = input.params.sandbox !== void 0 ? input.params.sandbox : await resolveSandboxContext({
 			config: input.params.cfg,
 			sessionKey: sandboxSessionKey,
 			workspaceDir: input.cwd
@@ -660,7 +716,7 @@ async function createCodexSideToolBridge(input) {
 		config: input.params.cfg,
 		webSearchAllowed: false
 	}) : requestedWebSearchPlan;
-	const exposedTools = tools.filter((tool) => tool.name !== "web_search" && tool.name !== "computer");
+	const exposedTools = input.params.hostCapabilities.bindToolSurface(tools.filter((tool) => tool.name !== "web_search" && tool.name !== "computer"), { cwd: input.cwd });
 	const hookChannelFields = buildAgentHookContextChannelFields({
 		sessionKey: input.params.sessionKey,
 		messageChannel: input.params.messageChannel,
@@ -716,19 +772,22 @@ function sideBoundaryPromptItem() {
 }
 async function cleanupCodexSideThread(client, params) {
 	if (!params.threadId) return;
-	if (params.interrupt && params.turnId) try {
+	if (params.interrupt && params.turnId !== void 0) try {
 		await client.request("turn/interrupt", {
 			threadId: params.threadId,
 			turnId: params.turnId
 		}, { timeoutMs: params.timeoutMs });
 	} catch (error) {
-		embeddedAgentLog.debug("codex /btw side thread interrupt cleanup failed", { error });
-	}
-	try {
-		await client.request("thread/unsubscribe", { threadId: params.threadId }, { timeoutMs: params.timeoutMs });
-	} catch (error) {
-		embeddedAgentLog.debug("codex /btw side thread unsubscribe cleanup failed", { error });
+		if (!isCodexAlreadyTerminalInterruptError(error)) {
+			embeddedAgentLog.debug("codex /btw side thread interrupt cleanup failed", { error });
+			await retireUnsafeCodexTurnClientBestEffort(client, "side turn interrupt");
+			return;
+		}
 	}
+	if (!await unsubscribeCodexThreadBestEffort(client, {
+		threadId: params.threadId,
+		timeoutMs: params.timeoutMs
+	})) await retireUnsafeCodexTurnClientBestEffort(client, "side thread unsubscribe");
 }
 var CodexSideQuestionCollector = class {
 	constructor(params, readRecentRateLimits) {
@@ -753,7 +812,7 @@ var CodexSideQuestionCollector = class {
 			this.pendingNotifications.push(notification);
 			return;
 		}
-		if (!isNotificationForTurn(params, this.threadId, this.turnId)) return;
+		if (!isCodexNotificationForTurn(params, this.threadId, this.turnId)) return;
 		if (notification.method === "item/agentMessage/delta") {
 			this.appendAssistantDelta(params);
 			return;
@@ -802,7 +861,7 @@ var CodexSideQuestionCollector = class {
 		});
 	}
 	async appendAssistantDelta(params) {
-		const delta = readString(params, "delta") ?? "";
+		const delta = readStringField(params, "delta") ?? "";
 		if (!delta) return;
 		if (!this.assistantStarted) {
 			this.assistantStarted = true;
@@ -845,23 +904,13 @@ var CodexSideQuestionCollector = class {
 function collectAssistantText(turn) {
 	return (turn.items ?? []).filter((item) => item.type === "agentMessage" && typeof item.text === "string").map((item) => item.text.trim()).filter(Boolean).at(-1) ?? "";
 }
-function isNotificationForTurn(params, threadId, turnId) {
-	return readCodexNotificationThreadId(params) === threadId && readNotificationTurnId(params) === turnId;
-}
-function readNotificationTurnId(record) {
-	return readCodexNotificationTurnId(record);
-}
-function readString(record, key) {
-	const value = record[key];
-	return typeof value === "string" ? value : void 0;
-}
 function formatCodexErrorMessage(params, rateLimits) {
 	const error = isJsonObject(params.error) ? params.error : void 0;
 	const message = formatCodexUsageLimitErrorMessage({
-		message: error ? readString(error, "message") : void 0,
+		message: error ? readStringField(error, "message") : void 0,
 		codexErrorInfo: error?.codexErrorInfo,
 		rateLimits
-	}) ?? (error ? readString(error, "message") ?? readString(error, "error") : void 0) ?? readString(params, "message") ?? "Codex /btw side thread failed.";
+	}) ?? (error ? readStringField(error, "message") ?? readStringField(error, "error") : void 0) ?? readStringField(params, "message") ?? "Codex /btw side thread failed.";
 	return new Error(formatErrorMessage(message));
 }
 //#endregion