@openclaw/codex 2026.7.2-beta.7 → 2026.8.1-beta.2

package/dist/{web-search-provider.runtime-CCFhg2z5.js → web-search-provider.runtime-DRw2Vl42.js}

@@ -1,6 +1,7 @@
-import { W as isJsonObject } from "./shared-client-DTbvH-XV.js";
-import { h as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-DF53ogiA.js";
-import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-D2ZAgZVz.js";
+import { ct as isJsonObject } from "./shared-client-kIBbGjk4.js";
+import { d as buildCodexNativeWebSearchThreadConfig } from "./thread-lifecycle-Bu1BTDXr.js";
+import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-qgZmzy_4.js";
+import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readStringParam, resolveSearchTimeoutSeconds, wrapWebContent } from "openclaw/plugin-sdk/provider-web-search";
 //#region extensions/codex/src/web-search-provider.runtime.ts
 async function executeCodexWebSearchProviderTool(ctx, args, executionContext, options) {
@@ -9,6 +10,7 @@ async function executeCodexWebSearchProviderTool(ctx, args, executionContext, op
 	const result = await runBoundedCodexAppServerTurn({
 		config: ctx.config,
 		model: { mode: "live-default" },
+		modelProvider: "openai",
 		timeoutMs: resolveSearchTimeoutSeconds(ctx.searchConfig) * 1e3,
 		signal: executionContext?.signal,
 		agentDir: ctx.agentDir,
@@ -45,7 +47,7 @@ function summarizeCodexWebSearchItem(item) {
 	const action = isJsonObject(item.action) ? item.action : void 0;
 	const actionType = readNonEmptyString(action, "type");
 	const queries = actionType === "search" ? readNonEmptyStringArray(action, "queries") : [];
-	const query = normalizeNonEmptyString(item.query) ?? (actionType === "search" ? readNonEmptyString(action, "query") : void 0) ?? queries[0];
+	const query = normalizeOptionalString(item.query) ?? (actionType === "search" ? readNonEmptyString(action, "query") : void 0) ?? queries[0];
 	const url = readNonEmptyString(action, "url");
 	const pattern = readNonEmptyString(action, "pattern");
 	return {
@@ -57,18 +59,15 @@ function summarizeCodexWebSearchItem(item) {
 	};
 }
 function readNonEmptyString(record, key) {
-	return record ? normalizeNonEmptyString(record[key]) : void 0;
+	return record ? normalizeOptionalString(record[key]) : void 0;
 }
 function readNonEmptyStringArray(record, key) {
 	const value = record?.[key];
 	if (!Array.isArray(value)) return [];
 	return value.flatMap((entry) => {
-		const normalized = normalizeNonEmptyString(entry);
+		const normalized = normalizeOptionalString(entry);
 		return normalized ? [normalized] : [];
 	});
 }
-function normalizeNonEmptyString(value) {
-	return typeof value === "string" ? value.trim() || void 0 : void 0;
-}
 //#endregion
 export { executeCodexWebSearchProviderTool };

package/openclaw.plugin.json

@@ -1,5 +1,19 @@
 {
   "id": "codex",
+  "doctorContract": {
+    "configRepair": true,
+    "stateMigrations": true
+  },
+  "sessionRouteStateOwners": [
+    {
+      "id": "codex",
+      "label": "Codex",
+      "providerIds": ["codex", "codex-cli", "openai-codex"],
+      "runtimeIds": ["codex", "codex-cli"],
+      "cliSessionKeys": ["codex-cli"],
+      "authProfilePrefixes": ["codex:", "codex-cli:", "openai-codex:"]
+    }
+  ],
   "name": "Codex",
   "description": "Codex app-server harness and native session catalog.",
   "contracts": {
@@ -7,6 +21,7 @@
     "migrationProviders": ["codex"],
     "tools": [
       "codex_threads",
+      "codex_plugins",
       "codex_endpoint_probe",
       "codex_sessions_list",
       "codex_session_read",
@@ -28,6 +43,7 @@
     "onAgentHarnesses": ["codex"],
     "onCommands": ["codex"],
     "onConfigPaths": [
+      "plugins.entries.codex.config.appServer.transport",
       "plugins.entries.codex.config.sessionCatalog.enabled",
       "plugins.entries.codex.config.supervision.enabled"
     ]
@@ -167,7 +183,7 @@
                 },
                 "marketplaceName": {
                   "type": "string",
-                  "enum": ["openai-curated", "workspace-directory"]
+                  "pattern": "^[A-Za-z0-9_-]+$"
                 },
                 "pluginName": {
                   "type": "string"
@@ -235,8 +251,7 @@
           },
           "homeScope": {
             "type": "string",
-            "enum": ["agent", "user"],
-            "default": "agent"
+            "enum": ["agent", "user"]
           },
           "command": { "type": "string" },
           "args": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.7.2-beta.7",
+  "version": "2026.8.1-beta.2",
   "description": "OpenClaw Codex app-server harness and native session supervision plugin.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "dependencies": {
-    "@openai/codex": "0.146.0",
+    "@openai/codex": "0.147.0",
     "smol-toml": "1.7.1",
     "typebox": "1.3.6",
     "ws": "8.21.1",
@@ -35,10 +35,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.7"
+      "pluginApi": ">=2026.8.1-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.7"
+      "openclawVersion": "2026.8.1-beta.2"
     },
     "release": {
       "publishToClawHub": true,
@@ -58,7 +58,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.7"
+    "openclaw": ">=2026.8.1-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/conversation-control-xsIeXbo4.js

@@ -1,287 +0,0 @@
-import { a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, h as withLeasedCodexAppServerClientStartSelectionRetry, l as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DTbvH-XV.js";
-import { T as resolveCodexModelBackedReviewerPolicyContext, g as resolveCodexAppServerRuntimeOptions, j as isCodexFastServiceTier, o as isCodexAppServerNativeAuthProfile, r as bindingStoreKey, s as normalizeCodexAppServerBindingModelProvider } from "./session-binding-BXpo9ymA.js";
-import { S as resolveCodexBindingModelProviderFallback, b as resolveCodexAppServerRequestModelSelection } from "./thread-lifecycle-DF53ogiA.js";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-BFDTVYr4.js";
-import { r as formatCodexDisplayText } from "./command-formatters-C336eRVS.js";
-import { a as resolveCodexBindingAppServerConnection } from "./notification-correlation-CU6_AnOb.js";
-import { ModelSelectionLockedError } from "openclaw/plugin-sdk/model-session-runtime";
-//#region extensions/codex/src/command-authorization.ts
-const CODEX_NATIVE_EXECUTION_AUTH_ERROR = "Only an owner or operator.admin can control Codex native execution.";
-function canMutateCodexHost(ctx) {
-	return ctx.senderIsOwner === true || ctx.gatewayClientScopes?.includes("operator.admin") === true;
-}
-//#endregion
-//#region extensions/codex/src/conversation-control.ts
-const CODEX_CONVERSATION_CONTROL_STATE = Symbol.for("openclaw.codex.conversationControl");
-function getActiveTurns() {
-	const globalState = globalThis;
-	globalState[CODEX_CONVERSATION_CONTROL_STATE] ??= /* @__PURE__ */ new Map();
-	return globalState[CODEX_CONVERSATION_CONTROL_STATE];
-}
-function trackCodexConversationActiveTurn(active) {
-	const activeTurns = getActiveTurns();
-	const key = bindingStoreKey(active.identity);
-	activeTurns.set(key, active);
-	return () => {
-		if (activeTurns.get(key)?.turnId === active.turnId) activeTurns.delete(key);
-	};
-}
-function readCodexConversationActiveTurn(identity) {
-	return getActiveTurns().get(bindingStoreKey(identity));
-}
-async function stopCodexConversationTurn(params) {
-	const active = readCodexConversationActiveTurn(params.identity);
-	if (!active) return {
-		stopped: false,
-		message: "No active Codex run to stop."
-	};
-	const lookup = buildBindingLookup(params);
-	const binding = await params.bindingStore.read(params.identity);
-	if (binding?.threadId !== active.threadId) return {
-		stopped: false,
-		message: "The active Codex run no longer matches this session binding."
-	};
-	const connection = resolveCodexBindingAppServerConnection({
-		binding,
-		authProfileId: binding?.authProfileId,
-		pluginConfig: params.pluginConfig
-	});
-	const runtime = connection.appServer;
-	const client = active.client ?? await getLeasedSharedCodexAppServerClient({
-		startOptions: runtime.start,
-		timeoutMs: runtime.requestTimeoutMs,
-		authProfileId: connection.clientAuthProfileId,
-		...lookup
-	});
-	try {
-		await client.request("turn/interrupt", {
-			threadId: active.threadId,
-			turnId: active.turnId
-		}, { timeoutMs: runtime.requestTimeoutMs });
-	} finally {
-		if (!active.client) releaseLeasedSharedCodexAppServerClient(client);
-	}
-	return {
-		stopped: true,
-		message: "Codex stop requested."
-	};
-}
-async function steerCodexConversationTurn(params) {
-	const active = readCodexConversationActiveTurn(params.identity);
-	const text = params.message.trim();
-	if (!text) return {
-		steered: false,
-		message: "Usage: /codex steer <message>"
-	};
-	if (!active) return {
-		steered: false,
-		message: "No active Codex run to steer."
-	};
-	const lookup = buildBindingLookup(params);
-	const binding = await params.bindingStore.read(params.identity);
-	if (binding?.threadId !== active.threadId) return {
-		steered: false,
-		message: "The active Codex run no longer matches this session binding."
-	};
-	const connection = resolveCodexBindingAppServerConnection({
-		binding,
-		authProfileId: binding?.authProfileId,
-		pluginConfig: params.pluginConfig
-	});
-	const runtime = connection.appServer;
-	const client = active.client ?? await getLeasedSharedCodexAppServerClient({
-		startOptions: runtime.start,
-		timeoutMs: runtime.requestTimeoutMs,
-		authProfileId: connection.clientAuthProfileId,
-		...lookup
-	});
-	try {
-		await client.request("turn/steer", {
-			threadId: active.threadId,
-			expectedTurnId: active.turnId,
-			input: [{
-				type: "text",
-				text,
-				text_elements: []
-			}]
-		}, { timeoutMs: runtime.requestTimeoutMs });
-	} finally {
-		if (!active.client) releaseLeasedSharedCodexAppServerClient(client);
-	}
-	return {
-		steered: true,
-		message: "Sent steer message to Codex."
-	};
-}
-async function setCodexConversationModel(params) {
-	const model = params.model.trim();
-	if (!model) return "Usage: /codex model <model>";
-	const lookup = buildBindingLookup(params);
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
-	if (binding.connectionScope === "supervision") throw new ModelSelectionLockedError();
-	const reviewerPolicyContext = resolveCodexModelBackedReviewerPolicyContext({
-		provider: "codex",
-		model,
-		bindingModelProvider: binding.modelProvider,
-		bindingModel: binding.model,
-		nativeAuthProfile: isCodexAppServerNativeAuthProfile({
-			authProfileId: binding.authProfileId,
-			...lookup
-		})
-	});
-	const runtime = resolveCodexAppServerRuntimeOptions({
-		pluginConfig: params.pluginConfig,
-		modelProvider: reviewerPolicyContext.modelProvider,
-		model: reviewerPolicyContext.model,
-		config: params.config,
-		agentDir: params.agentDir
-	});
-	const modelSelection = resolveCodexAppServerRequestModelSelection({
-		model,
-		modelProvider: resolveConversationControlModelProvider({
-			authProfileId: binding.authProfileId,
-			bindingModel: binding.model,
-			bindingModelProvider: binding.modelProvider,
-			currentModel: model,
-			...lookup
-		}),
-		authProfileId: binding.authProfileId,
-		...lookup
-	});
-	const resumed = await resumeThreadWithOverrides({
-		runtime,
-		threadId: binding.threadId,
-		authProfileId: binding.authProfileId,
-		...lookup,
-		model: modelSelection.model,
-		modelProvider: modelSelection.modelProvider
-	});
-	const response = resumed.response;
-	const nextModel = response.model ?? modelSelection.model;
-	const nextModelProvider = normalizeCodexAppServerBindingModelProvider({
-		authProfileId: binding.authProfileId,
-		modelProvider: response.modelProvider ?? modelSelection.modelProvider,
-		...lookup
-	});
-	const modelChanged = nextModel !== binding.model || nextModelProvider !== binding.modelProvider;
-	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, {
-		clientId: resumed.clientId,
-		cwd: response.thread.cwd ?? binding.cwd,
-		model: nextModel,
-		modelProvider: nextModelProvider,
-		...modelChanged && binding.contextEngine?.projection ? { contextEngine: {
-			...binding.contextEngine,
-			projection: void 0
-		} } : {},
-		approvalPolicy: binding.approvalPolicy,
-		sandbox: binding.sandbox,
-		serviceTier: binding.serviceTier ?? runtime.serviceTier ?? void 0
-	});
-	return `Codex model set to ${formatCodexDisplayText(response.model ?? model)}.`;
-}
-async function setCodexConversationFastMode(params) {
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
-	if (params.enabled == null) return `Codex fast mode: ${isCodexFastServiceTier(binding.serviceTier) ? "on" : "off"}.`;
-	const serviceTier = params.enabled ? "priority" : "flex";
-	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, { serviceTier });
-	return `Codex fast mode ${params.enabled ? "enabled" : "disabled"}.`;
-}
-async function setCodexConversationPermissions(params) {
-	const binding = await requireThreadBinding(params.bindingStore, params.identity);
-	if (!params.mode) return `Codex permissions: ${formatPermissionsMode(binding)}.`;
-	const policy = permissionsForMode(params.mode);
-	await patchThreadBinding(params.bindingStore, params.identity, binding.threadId, {
-		approvalPolicy: policy.approvalPolicy,
-		sandbox: policy.sandbox
-	});
-	return `Codex permissions set to ${params.mode === "yolo" ? "full access" : "default"}.`;
-}
-function parseCodexFastModeArg(arg) {
-	const normalized = arg?.trim().toLowerCase();
-	if (!normalized || normalized === "status") return;
-	if (normalized === "on" || normalized === "true" || normalized === "fast") return true;
-	if (normalized === "off" || normalized === "false" || normalized === "flex") return false;
-}
-function parseCodexPermissionsModeArg(arg) {
-	const normalized = arg?.trim().toLowerCase();
-	if (!normalized || normalized === "status") return;
-	if (normalized === "yolo" || normalized === "full" || normalized === "full-access") return "yolo";
-	if (normalized === "default" || normalized === "guardian") return "default";
-}
-function formatPermissionsMode(binding) {
-	return binding.approvalPolicy === "never" && binding.sandbox === "danger-full-access" ? "full access" : "default";
-}
-async function requireThreadBinding(bindingStore, identity) {
-	const binding = await bindingStore.read(identity);
-	if (!binding?.threadId) throw new Error("No Codex thread is attached to this OpenClaw session yet.");
-	return binding;
-}
-async function patchThreadBinding(bindingStore, identity, threadId, patch) {
-	if (!await bindingStore.mutate(identity, {
-		kind: "patch",
-		threadId,
-		patch
-	})) throw new Error("Codex thread binding changed while applying the control update.");
-}
-async function resumeThreadWithOverrides(params) {
-	const runtime = params.runtime;
-	const clientOptions = {
-		startOptions: runtime.start,
-		timeoutMs: runtime.requestTimeoutMs,
-		authProfileId: params.authProfileId,
-		...buildBindingLookup(params)
-	};
-	let client = await getLeasedSharedCodexAppServerClient(clientOptions);
-	const clientLease = { client };
-	try {
-		return {
-			response: await withLeasedCodexAppServerClientStartSelectionRetry({
-				lease: clientLease,
-				options: clientOptions,
-				run: async (requestClient, requestOptions) => await requestClient.request(CODEX_CONTROL_METHODS.resumeThread, {
-					threadId: params.threadId,
-					...params.model ? { model: params.model } : {},
-					...params.modelProvider ? { modelProvider: params.modelProvider } : {},
-					approvalPolicy: params.approvalPolicy ?? runtime.approvalPolicy,
-					sandbox: params.sandbox ?? runtime.sandbox,
-					approvalsReviewer: runtime.approvalsReviewer,
-					...params.serviceTier ? { serviceTier: params.serviceTier } : {}
-				}, requestOptions),
-				onClientChange: (nextClient) => {
-					client = nextClient;
-				}
-			}),
-			clientId: client.getInstanceId()
-		};
-	} finally {
-		releaseCodexAppServerClientLease(clientLease);
-	}
-}
-function buildBindingLookup(params) {
-	const agentDir = params.agentDir?.trim();
-	return {
-		...agentDir ? { agentDir } : {},
-		...params.config ? { config: params.config } : {}
-	};
-}
-function resolveConversationControlModelProvider(params) {
-	const modelProvider = resolveCodexBindingModelProviderFallback({
-		currentModel: params.currentModel,
-		bindingModel: params.bindingModel,
-		bindingModelProvider: params.bindingModelProvider
-	})?.trim();
-	if (!modelProvider || modelProvider.toLowerCase() === "codex") return;
-	if (isCodexAppServerNativeAuthProfile(params) && modelProvider.toLowerCase() === "openai") return;
-	return modelProvider.toLowerCase() === "openai" ? "openai" : modelProvider;
-}
-function permissionsForMode(mode) {
-	return mode === "yolo" ? {
-		approvalPolicy: "never",
-		sandbox: "danger-full-access"
-	} : {
-		approvalPolicy: "on-request",
-		sandbox: "workspace-write"
-	};
-}
-//#endregion
-export { setCodexConversationFastMode as a, steerCodexConversationTurn as c, CODEX_NATIVE_EXECUTION_AUTH_ERROR as d, canMutateCodexHost as f, readCodexConversationActiveTurn as i, stopCodexConversationTurn as l, parseCodexFastModeArg as n, setCodexConversationModel as o, parseCodexPermissionsModeArg as r, setCodexConversationPermissions as s, formatPermissionsMode as t, trackCodexConversationActiveTurn as u };

package/dist/event-projector-usage-Xp4AlR2k.js

@@ -1,86 +0,0 @@
-import { W as isJsonObject } from "./shared-client-DTbvH-XV.js";
-import { at as readNonNegativeInteger, ct as readString, st as readNumber } from "./thread-lifecycle-DF53ogiA.js";
-import { normalizeUsage } from "openclaw/plugin-sdk/agent-harness-runtime";
-//#region extensions/codex/src/app-server/event-projector-usage.ts
-function readTokenCount(record, key) {
-	const value = readNonNegativeInteger(record, key);
-	return value !== void 0 && Number.isSafeInteger(value) ? value : void 0;
-}
-function readCodexThreadTokenUsage(params) {
-	const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
-	const last = tokenUsage && isJsonObject(tokenUsage.last) ? tokenUsage.last : void 0;
-	return last ? normalizeCodexThreadTokenUsage(last) : void 0;
-}
-function readCodexThreadContextSnapshot(params) {
-	const tokenUsage = isJsonObject(params.tokenUsage) ? params.tokenUsage : void 0;
-	const last = tokenUsage && isJsonObject(tokenUsage.last) ? tokenUsage.last : void 0;
-	const modelContextWindow = tokenUsage ? readTokenCount(tokenUsage, "modelContextWindow") : void 0;
-	const promptTokens = last ? readTokenCount(last, "inputTokens") : void 0;
-	return {
-		...modelContextWindow && modelContextWindow > 0 ? { modelContextWindow } : {},
-		...promptTokens !== void 0 ? { promptTokens } : {}
-	};
-}
-function projectCodexThreadUsageUpdate(params, currentUsage, applyUsage, emitContext) {
-	applyUsage(readCodexThreadTokenUsage(params) ?? currentUsage);
-	const context = readCodexThreadContextSnapshot(params);
-	if (context.modelContextWindow !== void 0 || context.promptTokens !== void 0) emitContext(context);
-}
-function normalizeCodexThreadTokenUsage(record) {
-	const inputTokens = readNumber(record, "inputTokens");
-	const cacheRead = readNumber(record, "cachedInputTokens");
-	const usage = normalizeUsage({
-		input: inputTokens !== void 0 && cacheRead !== void 0 ? Math.max(0, inputTokens - cacheRead) : inputTokens,
-		output: readNumber(record, "outputTokens"),
-		cacheRead,
-		total: readNumber(record, "totalTokens")
-	});
-	return usage ? {
-		...usage,
-		contextUsage: { state: "unavailable" }
-	} : void 0;
-}
-function normalizeCodexResponseTokenUsage(record) {
-	const totalTokens = readTokenCount(record, "totalTokens");
-	const inputTokens = readTokenCount(record, "inputTokens");
-	const cacheRead = readTokenCount(record, "cachedInputTokens");
-	const output = readTokenCount(record, "outputTokens");
-	const reasoningOutput = readTokenCount(record, "reasoningOutputTokens");
-	const cacheWrite = record.cacheWriteInputTokens === void 0 ? 0 : readTokenCount(record, "cacheWriteInputTokens");
-	if (totalTokens === void 0 || inputTokens === void 0 || cacheRead === void 0 || cacheWrite === void 0 || output === void 0 || reasoningOutput === void 0 || cacheRead + cacheWrite > inputTokens || totalTokens !== inputTokens + output) return;
-	const usage = normalizeUsage({
-		input: inputTokens - cacheRead - cacheWrite,
-		output,
-		cacheRead,
-		cacheWrite,
-		total: totalTokens
-	});
-	if (!usage) return;
-	return {
-		...usage,
-		contextUsage: {
-			state: "available",
-			promptTokens: inputTokens,
-			totalTokens
-		}
-	};
-}
-var CodexResponseCompletionProjection = class {
-	constructor() {
-		this.responseIds = /* @__PURE__ */ new Set();
-	}
-	get modelIterations() {
-		return this.responseIds.size;
-	}
-	clear() {
-		this.usage = void 0;
-	}
-	record(params) {
-		const responseId = readString(params, "responseId");
-		if (responseId) this.responseIds.add(responseId);
-		const usage = isJsonObject(params.usage) ? params.usage : void 0;
-		this.usage = usage ? normalizeCodexResponseTokenUsage(usage) : void 0;
-	}
-};
-//#endregion
-export { normalizeCodexResponseTokenUsage as n, projectCodexThreadUsageUpdate as r, CodexResponseCompletionProjection as t };