@openclaw/codex 2026.7.2-beta.5 → 2026.8.1-beta.2

package/dist/realtime-voice-api-BPcA1uN9.js

@@ -1,494 +0,0 @@
-import { a as getLeasedSharedCodexAppServerClient, l as releaseLeasedSharedCodexAppServerClient, o as getSharedCodexAppServerClient } from "./shared-client-BVKE40c-.js";
-import { T as readCodexPluginConfig, p as resolveCodexAppServerRuntimeOptions } from "./session-binding-DlVQ-Pxs.js";
-import { n as CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS, u as unsubscribeCodexThreadBestEffort } from "./attempt-client-cleanup-Ia52yRWc.js";
-import { i as assertCodexThreadStartResponse } from "./protocol-validators-Dm4eXZmt.js";
-import { randomBytes } from "node:crypto";
-import { resolveAgentDir, resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
-import { readRequestBodyWithLimit } from "openclaw/plugin-sdk/webhook-request-guards";
-//#region extensions/codex/src/realtime-browser-session.ts
-const CODEX_REALTIME_OFFER_PATH = "/plugins/codex/realtime/calls";
-const CODEX_REALTIME_PENDING_TTL_MS = 6e4;
-const CODEX_REALTIME_SESSION_TTL_MS = 30 * 6e4;
-const CODEX_REALTIME_MAX_SESSIONS = 8;
-const CODEX_REALTIME_MAX_SDP_BYTES = 256 * 1024;
-const CODEX_REALTIME_START_TIMEOUT_MS = 6e4;
-const CODEX_REALTIME_PROBE_COOLDOWN_MS = 1e3;
-function createResponseDeliveryWaiter(res, onDelivered) {
-	let settle;
-	const result = new Promise((resolve) => {
-		settle = (delivered) => {
-			res.removeListener("finish", onFinish);
-			res.removeListener("close", onClose);
-			resolve(delivered);
-		};
-	});
-	const onFinish = () => {
-		onDelivered();
-		settle(true);
-	};
-	const onClose = () => settle(false);
-	res.once("finish", onFinish);
-	res.once("close", onClose);
-	return {
-		result,
-		cancel: () => settle(false)
-	};
-}
-function respondText(res, statusCode, body) {
-	res.statusCode = statusCode;
-	res.setHeader("cache-control", "no-store");
-	res.setHeader("content-type", "text/plain; charset=utf-8");
-	res.setHeader("x-content-type-options", "nosniff");
-	res.end(body);
-}
-function resolveConfiguredControlUiOrigin(req, cfg) {
-	const rawOrigin = typeof req.headers.origin === "string" ? req.headers.origin.trim() : "";
-	if (!rawOrigin) return;
-	let origin;
-	try {
-		const parsed = new URL(rawOrigin);
-		if (parsed.origin !== rawOrigin || parsed.username || parsed.password) return;
-		origin = parsed.origin;
-	} catch {
-		return;
-	}
-	return (cfg?.gateway?.controlUi?.allowedOrigins ?? []).some((candidate) => {
-		const normalized = candidate.trim().toLowerCase();
-		return normalized === "*" || normalized === origin;
-	}) ? origin : void 0;
-}
-function applyRealtimeOfferCorsHeaders(req, res, cfg) {
-	if (!req.headers.origin) return true;
-	const origin = resolveConfiguredControlUiOrigin(req, cfg);
-	if (!origin) return false;
-	res.setHeader("Access-Control-Allow-Origin", origin);
-	res.setHeader("Vary", "Origin");
-	return true;
-}
-function readBearerToken(req) {
-	return ((req.headers.authorization?.trim())?.match(/^Bearer\s+([^\s]+)$/i))?.[1];
-}
-function readNotificationParams(value) {
-	return value && typeof value === "object" ? value : {};
-}
-function buildCodexRealtimeThreadStartParams(params) {
-	return {
-		cwd: params.cwd,
-		ephemeral: true,
-		approvalPolicy: "never",
-		sandbox: "read-only",
-		config: { "features.realtime_conversation": true }
-	};
-}
-function buildCodexRealtimeStartParams(params) {
-	const initialItems = [...params.developerInstructions ? [{
-		role: "developer",
-		text: params.developerInstructions
-	}] : [], ...params.initialItems ?? []];
-	return {
-		threadId: params.threadId,
-		outputModality: "audio",
-		transport: {
-			type: "webrtc",
-			sdp: params.sdp
-		},
-		version: "v3",
-		includeStartupContext: true,
-		...params.voice ? { voice: params.voice } : {},
-		...initialItems.length > 0 ? { initialItems } : {}
-	};
-}
-function waitForRealtimeSdpAnswer(answerPromise, signal) {
-	return new Promise((resolve, reject) => {
-		let settled = false;
-		const finish = (result) => {
-			if (settled) return;
-			settled = true;
-			clearTimeout(timeout);
-			signal.removeEventListener("abort", onAbort);
-			if ("answer" in result) resolve(result.answer);
-			else reject(result.error);
-		};
-		const onAbort = () => finish({ error: signal.reason instanceof Error ? signal.reason : /* @__PURE__ */ new Error("Codex realtime session stopped during startup") });
-		const timeout = setTimeout(() => finish({ error: /* @__PURE__ */ new Error("Codex realtime SDP answer timed out") }), CODEX_REALTIME_START_TIMEOUT_MS);
-		timeout.unref?.();
-		signal.addEventListener("abort", onAbort, { once: true });
-		if (signal.aborted) {
-			onAbort();
-			return;
-		}
-		answerPromise.then((answer) => finish({ answer }), (error) => finish({ error: error instanceof Error ? error : /* @__PURE__ */ new Error("Codex realtime failed") }));
-	});
-}
-function createCodexRealtimeBrowserSessionBroker(params) {
-	const pendingOffers = /* @__PURE__ */ new Map();
-	const reservations = /* @__PURE__ */ new Set();
-	const activeSessions = /* @__PURE__ */ new Set();
-	const inFlightHandlers = /* @__PURE__ */ new Set();
-	const readyClients = /* @__PURE__ */ new Set();
-	const shutdownController = new AbortController();
-	let cleanedUp = false;
-	let probePromise;
-	let nextProbeAt = 0;
-	const closeSession = async (session) => {
-		if (!activeSessions.delete(session)) return;
-		clearTimeout(session.timer);
-		reservations.delete(session.reservationToken);
-		session.disposeNotificationHandler();
-		try {
-			await session.client.request("thread/realtime/stop", { threadId: session.threadId }, { timeoutMs: 2e3 });
-		} catch {}
-		await unsubscribeCodexThreadBestEffort(session.client, {
-			threadId: session.threadId,
-			timeoutMs: CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS
-		});
-		releaseLeasedSharedCodexAppServerClient(session.client);
-	};
-	const resolveSubscriptionClientOptions = (request) => {
-		const pluginConfig = readCodexPluginConfig(params.getPluginConfig());
-		const agentDir = request.agentId && request.cfg ? resolveAgentDir(request.cfg, request.agentId) : void 0;
-		return {
-			startOptions: resolveCodexAppServerRuntimeOptions({
-				pluginConfig,
-				config: request.cfg,
-				agentDir
-			}).start,
-			pluginConfig,
-			config: request.cfg,
-			agentDir,
-			authRequirement: "subscription",
-			timeoutMs: CODEX_REALTIME_START_TIMEOUT_MS
-		};
-	};
-	const ensureSubscriptionRuntime = async (request) => {
-		const client = await getSharedCodexAppServerClient({
-			...resolveSubscriptionClientOptions(request),
-			abandonSignal: shutdownController.signal
-		});
-		if (!readyClients.has(client)) {
-			readyClients.add(client);
-			client.addCloseHandler((closedClient) => {
-				readyClients.delete(closedClient);
-				Promise.allSettled([...activeSessions].filter((session) => session.client === closedClient).map((session) => closeSession(session)));
-				nextProbeAt = 0;
-				requestProbe();
-			});
-		}
-	};
-	const runProbe = () => {
-		if (probePromise) return probePromise;
-		const cfg = params.getConfig();
-		nextProbeAt = Date.now() + CODEX_REALTIME_PROBE_COOLDOWN_MS;
-		const running = ensureSubscriptionRuntime({
-			cfg,
-			...cfg ? { agentId: resolveDefaultAgentId(cfg) } : {}
-		}).finally(() => {
-			if (probePromise === running) probePromise = void 0;
-		});
-		probePromise = running;
-		return running;
-	};
-	function requestProbe() {
-		if (cleanedUp || shutdownController.signal.aborted || probePromise || Date.now() < nextProbeAt) return;
-		runProbe().catch(() => void 0);
-	}
-	const warmup = async () => {
-		await runProbe();
-	};
-	const prunePendingOffers = () => {
-		const now = Date.now();
-		for (const [token, offer] of pendingOffers) if (offer.expiresAt <= now) {
-			pendingOffers.delete(token);
-			reservations.delete(token);
-		}
-	};
-	const broker = {
-		capabilities: {
-			transports: ["webrtc"],
-			handlesAgentConsult: true,
-			supportsToolCalls: false,
-			supportsVideoFrames: false
-		},
-		isConfigured: () => {
-			if (cleanedUp || shutdownController.signal.aborted) return false;
-			if (readyClients.size > 0) return true;
-			requestProbe();
-			return false;
-		},
-		createBrowserSession: async (request) => {
-			if (cleanedUp || shutdownController.signal.aborted) throw new Error("Codex OAuth realtime is stopping; restart Gateway and try again");
-			await ensureSubscriptionRuntime(request);
-			if (cleanedUp || shutdownController.signal.aborted) throw new Error("Codex OAuth realtime is stopping; restart Gateway and try again");
-			prunePendingOffers();
-			if (reservations.size >= CODEX_REALTIME_MAX_SESSIONS) throw new Error("Too many concurrent Codex OAuth realtime sessions; try again in a minute");
-			const token = randomBytes(32).toString("base64url");
-			const expiresAt = Date.now() + CODEX_REALTIME_PENDING_TTL_MS;
-			reservations.add(token);
-			pendingOffers.set(token, {
-				expiresAt,
-				request
-			});
-			const voice = request.voice?.trim() || void 0;
-			return {
-				provider: "openai",
-				transport: "webrtc",
-				clientSecret: token,
-				offerUrl: CODEX_REALTIME_OFFER_PATH,
-				...voice ? { voice } : {},
-				expiresAt
-			};
-		},
-		cancelBrowserSession: (session) => {
-			if (session.transport !== "webrtc") return;
-			pendingOffers.delete(session.clientSecret);
-			reservations.delete(session.clientSecret);
-		}
-	};
-	const handleOffer = async (req, res) => {
-		const corsAllowed = applyRealtimeOfferCorsHeaders(req, res, params.getConfig());
-		if (req.method === "OPTIONS") {
-			if (!corsAllowed) {
-				respondText(res, 403, "Origin not allowed");
-				return true;
-			}
-			res.statusCode = 204;
-			res.setHeader("cache-control", "no-store");
-			res.setHeader("Access-Control-Allow-Methods", "POST, OPTIONS");
-			res.setHeader("Access-Control-Allow-Headers", "Authorization, Content-Type");
-			res.setHeader("Vary", "Origin, Access-Control-Request-Method, Access-Control-Request-Headers");
-			if (req.headers["access-control-request-private-network"] === "true") res.setHeader("Access-Control-Allow-Private-Network", "true");
-			res.setHeader("Access-Control-Max-Age", "600");
-			res.end();
-			return true;
-		}
-		if (req.method !== "POST") {
-			respondText(res, 405, "Method not allowed");
-			return true;
-		}
-		if (!req.headers["content-type"]?.toLowerCase().startsWith("application/sdp")) {
-			respondText(res, 415, "Expected application/sdp");
-			return true;
-		}
-		prunePendingOffers();
-		const token = readBearerToken(req);
-		const offer = token ? pendingOffers.get(token) : void 0;
-		if (!token || !offer || offer.expiresAt <= Date.now()) {
-			respondText(res, 401, "Invalid or expired realtime session token");
-			return true;
-		}
-		pendingOffers.delete(token);
-		const requestController = new AbortController();
-		const abortFromBrowser = () => {
-			requestController.abort(/* @__PURE__ */ new Error("Browser realtime offer request closed"));
-		};
-		req.once("aborted", abortFromBrowser);
-		res.once("close", abortFromBrowser);
-		const detachBrowserAbort = () => {
-			req.removeListener("aborted", abortFromBrowser);
-			res.removeListener("close", abortFromBrowser);
-		};
-		const lifecycleSignal = AbortSignal.any([shutdownController.signal, requestController.signal]);
-		let client;
-		let session;
-		let threadId;
-		let reservationTransferred = false;
-		let responseDeliveryWaiter;
-		try {
-			const sdp = await readRequestBodyWithLimit(req, {
-				maxBytes: CODEX_REALTIME_MAX_SDP_BYTES,
-				timeoutMs: 15e3
-			});
-			if (!sdp.trim()) {
-				respondText(res, 400, "SDP offer is required");
-				return true;
-			}
-			if (lifecycleSignal.aborted) throw new Error("Codex realtime session stopped during startup");
-			client = await getLeasedSharedCodexAppServerClient({
-				...resolveSubscriptionClientOptions(offer.request),
-				abandonSignal: lifecycleSignal
-			});
-			threadId = assertCodexThreadStartResponse(await client.request("thread/start", buildCodexRealtimeThreadStartParams({ cwd: offer.request.workspaceDir ?? process.cwd() }), {
-				timeoutMs: CODEX_REALTIME_START_TIMEOUT_MS,
-				signal: lifecycleSignal
-			})).thread.id;
-			if (lifecycleSignal.aborted) throw new Error("Codex realtime session stopped during startup");
-			let resolveSdp;
-			let rejectSdp;
-			const answerPromise = new Promise((resolve, reject) => {
-				resolveSdp = resolve;
-				rejectSdp = reject;
-			});
-			const startupController = new AbortController();
-			const startupSignal = AbortSignal.any([lifecycleSignal, startupController.signal]);
-			let startupComplete = false;
-			const stopStartup = (error) => {
-				if (!startupController.signal.aborted) startupController.abort(error);
-			};
-			const closeAfterStartup = () => {
-				if (startupComplete && session) closeSession(session);
-			};
-			const disposeNotificationHandler = client.addNotificationHandler((notification) => {
-				const notificationParams = readNotificationParams(notification.params);
-				if (notificationParams.threadId !== threadId) return;
-				if (notification.method === "thread/realtime/sdp") {
-					if (typeof notificationParams.sdp === "string" && notificationParams.sdp.trim()) resolveSdp(notificationParams.sdp);
-					else rejectSdp(/* @__PURE__ */ new Error("Codex returned an empty realtime SDP answer"));
-					return;
-				}
-				if (notification.method === "thread/realtime/error") {
-					const error = new Error(typeof notificationParams.message === "string" ? notificationParams.message : "Codex realtime session failed");
-					rejectSdp(error);
-					stopStartup(error);
-					closeAfterStartup();
-					return;
-				}
-				if (notification.method === "thread/realtime/closed") {
-					const error = /* @__PURE__ */ new Error("Codex realtime session closed before returning an SDP answer");
-					rejectSdp(error);
-					stopStartup(error);
-					closeAfterStartup();
-				}
-			});
-			const timer = setTimeout(() => {
-				if (session) closeSession(session);
-			}, CODEX_REALTIME_SESSION_TTL_MS);
-			timer.unref?.();
-			session = {
-				client,
-				reservationToken: token,
-				threadId,
-				timer,
-				disposeNotificationHandler
-			};
-			reservationTransferred = true;
-			activeSessions.add(session);
-			const answerResultPromise = waitForRealtimeSdpAnswer(answerPromise, startupSignal).then((answer) => ({
-				ok: true,
-				answer
-			}), (error) => ({
-				ok: false,
-				error: error instanceof Error ? error : /* @__PURE__ */ new Error("Codex realtime session failed")
-			}));
-			try {
-				await client.request("thread/realtime/start", buildCodexRealtimeStartParams({
-					threadId,
-					sdp,
-					developerInstructions: offer.request.instructions?.trim() || void 0,
-					voice: offer.request.voice?.trim() || void 0,
-					initialItems: offer.request.initialItems
-				}), {
-					timeoutMs: CODEX_REALTIME_START_TIMEOUT_MS,
-					signal: startupSignal
-				});
-			} catch (error) {
-				if (startupController.signal.aborted) {
-					const answerResult = await answerResultPromise;
-					if (!answerResult.ok) throw answerResult.error;
-					throw startupController.signal.reason instanceof Error ? startupController.signal.reason : /* @__PURE__ */ new Error("Codex realtime session stopped during startup");
-				}
-				stopStartup(error instanceof Error ? error : /* @__PURE__ */ new Error("Codex realtime session failed to start"));
-				throw error;
-			}
-			const answerResult = await answerResultPromise;
-			if (!answerResult.ok) throw answerResult.error;
-			if (startupSignal.aborted) throw startupSignal.reason instanceof Error ? startupSignal.reason : /* @__PURE__ */ new Error("Codex realtime session stopped during startup");
-			startupComplete = true;
-			responseDeliveryWaiter = createResponseDeliveryWaiter(res, detachBrowserAbort);
-			res.statusCode = 200;
-			res.setHeader("cache-control", "no-store");
-			res.setHeader("content-type", "application/sdp");
-			res.setHeader("x-content-type-options", "nosniff");
-			res.end(answerResult.answer);
-			const delivered = await responseDeliveryWaiter.result;
-			responseDeliveryWaiter = void 0;
-			if (!delivered || lifecycleSignal.aborted) await closeSession(session);
-			return true;
-		} catch (error) {
-			if (session) await closeSession(session);
-			else if (client) {
-				if (threadId) await unsubscribeCodexThreadBestEffort(client, {
-					threadId,
-					timeoutMs: CODEX_APP_SERVER_UNSUBSCRIBE_TIMEOUT_MS
-				});
-				releaseLeasedSharedCodexAppServerClient(client);
-			}
-			if (requestController.signal.aborted) return true;
-			respondText(res, 502, error instanceof Error ? error.message : "Codex realtime session failed");
-			return true;
-		} finally {
-			responseDeliveryWaiter?.cancel();
-			detachBrowserAbort();
-			if (!reservationTransferred) reservations.delete(token);
-		}
-	};
-	const trackedHandleOffer = (req, res) => {
-		const handling = handleOffer(req, res);
-		inFlightHandlers.add(handling);
-		return handling.finally(() => {
-			inFlightHandlers.delete(handling);
-		});
-	};
-	const handler = trackedHandleOffer;
-	const cleanup = async () => {
-		if (cleanedUp) return;
-		cleanedUp = true;
-		shutdownController.abort();
-		pendingOffers.clear();
-		await Promise.all([...activeSessions].map((session) => closeSession(session)));
-		await Promise.allSettled(inFlightHandlers);
-		reservations.clear();
-	};
-	return {
-		broker,
-		handler,
-		warmup,
-		cleanup
-	};
-}
-//#endregion
-//#region extensions/codex/realtime-voice-api.ts
-/**
-* Bundled Codex realtime integration shared with the bundled OpenAI provider.
-*
-* This artifact keeps the HTTP offer route and the provider fallback on one
-* process-owned runtime without adding a general Plugin SDK registration API.
-*/
-const CODEX_REALTIME_GLOBAL_STATE = Symbol.for("openclaw.codex.realtime-voice.v1");
-function getGlobalState() {
-	const root = globalThis;
-	const state = root[CODEX_REALTIME_GLOBAL_STATE] ??= {
-		version: 1,
-		sources: /* @__PURE__ */ new Map()
-	};
-	state.sources ??= /* @__PURE__ */ new Map();
-	return state;
-}
-function configureCodexRealtimeBrowserSession(params) {
-	const state = getGlobalState();
-	const leaseId = Symbol("codex-realtime-registration");
-	state.sources.set(leaseId, params);
-	if (state.runtime) return createRuntimeLease(state, state.runtime, leaseId);
-	const resolveCurrentSource = () => Array.from(state.sources.values()).at(-1);
-	const created = createCodexRealtimeBrowserSessionBroker({
-		getConfig: () => resolveCurrentSource()?.getConfig(),
-		getPluginConfig: () => resolveCurrentSource()?.getPluginConfig()
-	});
-	state.runtime = created;
-	return createRuntimeLease(state, created, leaseId);
-}
-function createRuntimeLease(state, runtime, leaseId) {
-	let released = false;
-	return {
-		...runtime,
-		cleanup: async () => {
-			if (released) return;
-			released = true;
-			state.sources.delete(leaseId);
-			if (state.runtime !== runtime || state.sources.size > 0) return;
-			state.runtime = void 0;
-			await runtime.cleanup();
-		}
-	};
-}
-//#endregion
-export { CODEX_REALTIME_OFFER_PATH as n, configureCodexRealtimeBrowserSession as t };

package/dist/realtime-voice-api.js

@@ -1,2 +0,0 @@
-import { n as CODEX_REALTIME_OFFER_PATH, t as configureCodexRealtimeBrowserSession } from "./realtime-voice-api-BPcA1uN9.js";
-export { CODEX_REALTIME_OFFER_PATH, configureCodexRealtimeBrowserSession };