@openclaw/codex 2026.7.2-beta.7 → 2026.7.34

package/dist/app-server-policy-BSaO2JIT.js

@@ -1,49 +0,0 @@
-import { C as canUseCodexModelBackedApprovalsReviewerForModel } from "./session-binding-BXpo9ymA.js";
-//#region extensions/codex/src/app-server/app-server-policy.ts
-/**
-* Policy promotion for Codex app-server runs that can safely use OpenClaw tool
-* approvals.
-*/
-/**
-* Promotes implicit `never` approval policy to `untrusted` only when runtime
-* requirements allow OpenClaw to handle tool approvals.
-*/
-function resolveCodexAppServerForOpenClawToolPolicy(params) {
-	if (!params.shouldPromote || !params.canUseUntrustedApprovalPolicy || params.appServer.approvalPolicy !== "never") return params.appServer;
-	const explicitMode = params.execPolicy?.mode === "full" || params.pluginConfig.appServer?.mode !== void 0 || isCodexAppServerPolicyMode(params.env.OPENCLAW_CODEX_APP_SERVER_MODE);
-	const explicitApprovalPolicy = params.pluginConfig.appServer?.approvalPolicy !== void 0 || isConfiguredCodexAppServerApprovalPolicy(params.env.OPENCLAW_CODEX_APP_SERVER_APPROVAL_POLICY) || params.appServer.approvalPolicySource === "requirements";
-	if (explicitMode || explicitApprovalPolicy) return params.appServer;
-	return {
-		...params.appServer,
-		approvalPolicy: "untrusted"
-	};
-}
-function resolveCodexAppServerForModelProvider(params) {
-	const explicitProvider = normalizeModelBackedReviewerProvider(params.provider);
-	if (!isCodexModelBackedApprovalsReviewer(params.appServer.approvalsReviewer) || canUseCodexModelBackedApprovalsReviewerForModel({
-		modelProvider: explicitProvider,
-		model: params.model,
-		config: params.config,
-		env: params.env,
-		agentDir: params.agentDir,
-		codexConfigToml: params.codexConfigToml
-	})) return params.appServer;
-	return {
-		...params.appServer,
-		approvalsReviewer: "user"
-	};
-}
-function isCodexAppServerPolicyMode(value) {
-	return value === "guardian" || value === "yolo";
-}
-function isConfiguredCodexAppServerApprovalPolicy(value) {
-	return value === "never" || value === "on-request" || value === "on-failure" || value === "untrusted";
-}
-function isCodexModelBackedApprovalsReviewer(value) {
-	return value === "auto_review" || value === "guardian_subagent";
-}
-function normalizeModelBackedReviewerProvider(provider) {
-	return provider?.trim().toLowerCase() || void 0;
-}
-//#endregion
-export { resolveCodexAppServerForOpenClawToolPolicy as n, resolveCodexAppServerForModelProvider as t };

package/dist/auth-binding-B4FfbcCg.js

@@ -1,62 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { fingerprintResolvedAuthProfileCredential } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { resolveApiKeyForProfile } from "openclaw/plugin-sdk/agent-runtime";
-//#region extensions/codex/src/app-server/auth-binding.ts
-var auth_binding_exports = /* @__PURE__ */ __exportAll({
-	fingerprintCodexAppServerAuthBinding: () => fingerprintCodexAppServerAuthBinding,
-	prepareCodexAppServerAuthBinding: () => prepareCodexAppServerAuthBinding
-});
-function withMaterializedCredential(params) {
-	const store = structuredClone(params.store);
-	if (params.credential.type === "api_key") {
-		const { keyRef: _keyRef, ...credential } = params.credential;
-		store.profiles[params.profileId] = {
-			...credential,
-			key: params.value
-		};
-	} else if (params.credential.type === "token") {
-		const { tokenRef: _tokenRef, ...credential } = params.credential;
-		store.profiles[params.profileId] = {
-			...credential,
-			token: params.value
-		};
-	}
-	return store;
-}
-/** Resolves one forwarded profile once so attestation and execution share exact material. */
-async function prepareCodexAppServerAuthBinding(params) {
-	const credential = params.authProfileStore.profiles[params.authProfileId];
-	if (!credential || credential.type === "oauth") return;
-	const resolved = await resolveApiKeyForProfile({
-		cfg: params.config,
-		store: params.authProfileStore,
-		profileId: params.authProfileId,
-		agentDir: params.agentDir
-	});
-	if (!resolved?.apiKey) throw new Error(`Codex could not resolve auth profile "${params.authProfileId}".`);
-	const fingerprint = fingerprintResolvedAuthProfileCredential({
-		profileId: params.authProfileId,
-		credential,
-		resolvedAuth: {
-			apiKey: resolved.apiKey,
-			profileId: params.authProfileId,
-			source: `profile:${params.authProfileId}`,
-			mode: credential.type === "api_key" ? "api-key" : "token"
-		}
-	});
-	if (!fingerprint) throw new Error(`Codex could not attest auth profile "${params.authProfileId}".`);
-	return {
-		fingerprint,
-		authProfileStore: withMaterializedCredential({
-			store: params.authProfileStore,
-			profileId: params.authProfileId,
-			credential,
-			value: resolved.apiKey
-		})
-	};
-}
-async function fingerprintCodexAppServerAuthBinding(params) {
-	return (await prepareCodexAppServerAuthBinding(params))?.fingerprint;
-}
-//#endregion
-export { prepareCodexAppServerAuthBinding as n, auth_binding_exports as t };

package/dist/capabilities-BFDTVYr4.js

@@ -1,36 +0,0 @@
-import { v as CodexAppServerRpcError } from "./shared-client-DTbvH-XV.js";
-//#region extensions/codex/src/app-server/capabilities.ts
-/**
-* Capability helpers for optional Codex app-server control-plane methods.
-*/
-/** Known app-server methods used by OpenClaw control surfaces. */
-const CODEX_CONTROL_METHODS = {
-	account: "account/read",
-	compact: "thread/compact/start",
-	feedback: "feedback/upload",
-	forkThread: "thread/fork",
-	listMcpServers: "mcpServerStatus/list",
-	listSkills: "skills/list",
-	listThreads: "thread/list",
-	listThreadTurns: "thread/turns/list",
-	readThread: "thread/read",
-	rateLimits: "account/rateLimits/read",
-	archiveThread: "thread/archive",
-	renameThread: "thread/name/set",
-	resumeThread: "thread/resume",
-	review: "review/start",
-	unarchiveThread: "thread/unarchive",
-	getThreadGoal: "thread/goal/get",
-	setThreadGoal: "thread/goal/set",
-	clearThreadGoal: "thread/goal/clear"
-};
-/** Formats unsupported control calls differently from ordinary RPC failures. */
-function describeControlFailure(error) {
-	if (isUnsupportedControlError(error)) return "unsupported by this Codex app-server";
-	return error instanceof Error ? error.message : String(error);
-}
-function isUnsupportedControlError(error) {
-	return error instanceof CodexAppServerRpcError && error.code === -32601;
-}
-//#endregion
-export { describeControlFailure as n, CODEX_CONTROL_METHODS as t };

package/dist/cli-metadata.js

@@ -1,20 +0,0 @@
-import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
-//#region extensions/codex/cli-metadata.ts
-function registerCodexCliMetadata(api) {
-	api.registerCli(async ({ program }) => {
-		const { registerCodexSessionCli } = await import("./session-cli-2PZaFLRh.js");
-		registerCodexSessionCli(program);
-	}, { descriptors: [{
-		name: "codex",
-		description: "Inspect and branch from Codex sessions through the Gateway",
-		hasSubcommands: true
-	}] });
-}
-var cli_metadata_default = definePluginEntry({
-	id: "codex",
-	name: "Codex",
-	description: "Codex app-server harness and native session supervision.",
-	register: registerCodexCliMetadata
-});
-//#endregion
-export { cli_metadata_default as default, registerCodexCliMetadata };