@openclaw/codex 2026.7.2-beta.7 → 2026.7.33

package/dist/.setup/plugin-app-cache-key-DR8jV9oS.mjs

@@ -0,0 +1,99 @@
+import { K as buildCodexAppInventoryCacheKey } from "./thread-lifecycle-u6CZdOOH.mjs";
+import { u as CodexAppServerRpcError, x as resolveCodexAppServerHomeDir } from "./shared-client-B2KmLPRw.mjs";
+import { createRequire } from "node:module";
+import { createHash } from "node:crypto";
+import { OPENCLAW_VERSION } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { readPluginPackageVersion } from "openclaw/plugin-sdk/extension-shared";
+//#region extensions/codex/src/app-server/capabilities.ts
+/**
+* Capability helpers for optional Codex app-server control-plane methods.
+*/
+/** Known app-server methods used by OpenClaw control surfaces. */
+const CODEX_CONTROL_METHODS = {
+	account: "account/read",
+	compact: "thread/compact/start",
+	feedback: "feedback/upload",
+	forkThread: "thread/fork",
+	listMcpServers: "mcpServerStatus/list",
+	listSkills: "skills/list",
+	listThreads: "thread/list",
+	readThread: "thread/read",
+	rateLimits: "account/rateLimits/read",
+	archiveThread: "thread/archive",
+	renameThread: "thread/name/set",
+	resumeThread: "thread/resume",
+	review: "review/start",
+	unarchiveThread: "thread/unarchive"
+};
+/** Formats unsupported control calls differently from ordinary RPC failures. */
+function describeControlFailure(error) {
+	if (isUnsupportedControlError(error)) return "unsupported by this Codex app-server";
+	return error instanceof Error ? error.message : String(error);
+}
+function isUnsupportedControlError(error) {
+	return error instanceof CodexAppServerRpcError && error.code === -32601;
+}
+//#endregion
+//#region extensions/codex/src/app-server/plugin-app-cache-key.ts
+/**
+* Builds stable Codex plugin/app inventory cache keys from app-server startup,
+* auth, account, and version inputs without storing secret material.
+*/
+const require = createRequire(import.meta.url);
+const CODEX_PLUGIN_VERSION = readPluginPackageVersion({ require });
+/** Builds the full app inventory cache key for Codex plugin/app discovery. */
+function buildCodexPluginAppCacheKey(params) {
+	return buildCodexAppInventoryCacheKey({
+		codexHome: params.runtimeIdentity?.codexHome ?? resolveCodexPluginAppCacheCodexHome(params.appServer, params.agentDir),
+		endpoint: resolveCodexPluginAppCacheEndpoint(params.appServer),
+		authProfileId: params.authProfileId,
+		accountId: params.accountId,
+		envApiKeyFingerprint: params.envApiKeyFingerprint,
+		appServerVersion: params.appServerVersion ?? params.runtimeIdentity?.serverVersion,
+		runtimeIdentity: params.runtimeIdentity
+	}, OPENCLAW_VERSION, CODEX_PLUGIN_VERSION);
+}
+/** Builds a durable thread-binding fingerprint for one initialized app-server runtime. */
+function buildCodexAppServerRuntimeFingerprint(params) {
+	return JSON.stringify({
+		endpoint: resolveCodexPluginAppCacheEndpoint(params.appServer),
+		connectionClass: params.appServer.connectionClass,
+		remoteWorkspaceRoot: params.appServer.remoteWorkspaceRoot ?? null,
+		appServerVersion: params.appServerVersion ?? params.runtimeIdentity?.serverVersion ?? null,
+		runtimeIdentity: params.runtimeIdentity ?? null
+	});
+}
+/** Serializes app-server endpoint identity, including credential fingerprints. */
+function resolveCodexPluginAppCacheEndpoint(appServer) {
+	return JSON.stringify({
+		transport: appServer.start.transport,
+		command: appServer.start.command,
+		args: appServer.start.args,
+		url: appServer.start.url ?? null,
+		credentialFingerprint: fingerprintCodexPluginAppCacheCredentials(appServer.start)
+	});
+}
+/** Resolves the CODEX_HOME value that scopes local app-server inventory. */
+function resolveCodexPluginAppCacheCodexHome(appServer, agentDir) {
+	const configuredCodexHome = appServer.start.env?.CODEX_HOME?.trim();
+	if (configuredCodexHome) return configuredCodexHome;
+	return appServer.start.transport === "stdio" && agentDir ? resolveCodexAppServerHomeDir(agentDir) : void 0;
+}
+function fingerprintCodexPluginAppCacheCredentials(startOptions) {
+	const authToken = startOptions.authToken ?? "";
+	const headers = Object.entries(startOptions.headers).map(([key, value]) => [key.toLowerCase(), value]).toSorted(([left], [right]) => left.localeCompare(right));
+	if (!authToken && headers.length === 0) return null;
+	const hash = createHash("sha256");
+	hash.update("openclaw:codex:plugin-app-cache-credentials:v1");
+	hash.update("\0");
+	hash.update(authToken);
+	for (const [key, value] of headers) {
+		hash.update("\0");
+		hash.update(key);
+		hash.update("\0");
+		hash.update(value);
+	}
+	return `sha256:${hash.digest("hex")}`;
+}
+//#endregion
+export { describeControlFailure as i, buildCodexPluginAppCacheKey as n, CODEX_CONTROL_METHODS as r, buildCodexAppServerRuntimeFingerprint as t };

package/dist/.setup/protocol-2POPqAY4.mjs

@@ -0,0 +1,13 @@
+//#region extensions/codex/src/app-server/protocol.ts
+function flattenCodexDynamicToolFunctions(tools) {
+	return (tools ?? []).flatMap((tool) => tool.type === "namespace" ? tool.tools : [tool]);
+}
+const CODEX_INTERACTIVE_THREAD_SOURCE_KINDS = ["cli", "vscode"];
+function isJsonObject(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function isRpcResponse(message) {
+	return "id" in message && !("method" in message);
+}
+//#endregion
+export { isRpcResponse as i, flattenCodexDynamicToolFunctions as n, isJsonObject as r, CODEX_INTERACTIVE_THREAD_SOURCE_KINDS as t };