@openclaw/codex 2026.8.1-beta.2 → 2026.8.1-beta.3

package/dist/{side-question-9HAL26l9.js → side-question-DbXkJZzg.js}

@@ -1,13 +1,14 @@
-import { C as isCodexRemoteExecPlacementSandbox, N as resolveOpenClawExecPolicyForCodexAppServer, T as readCodexPluginConfig, d as sessionBindingIdentity, h as resolveCodexAppServerHomeScope, j as resolveCodexModelBackedReviewerPolicyContext, k as canUseCodexModelBackedApprovalsReviewerForModel, w as isCodexSandboxExecServerEnabled, x as shouldAutoApproveCodexAppServerApprovals } from "./session-binding-DPxIvMgE.js";
-import { A as isCodexAppServerApprovalRequest, H as ensureCodexAppServerClientRuntime, N as isCodexAppServerIndeterminateRequestCancellationError, X as readRecentCodexRateLimits, a as getLeasedSharedCodexAppServerClient, c as releaseCodexAppServerClientLease, ct as isJsonObject, h as withLeasedCodexAppServerClientStartSelectionRetry, rt as resolveCodexAppServerPreparedAuthHandoff } from "./shared-client-kIBbGjk4.js";
-import { d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, s as isCodexAlreadyTerminalInterruptError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-DMLXUfa8.js";
-import { l as readCodexTurn, o as assertCodexTurnStartResponse, r as assertCodexThreadForkResponse, s as readCodexDynamicToolCallParams } from "./protocol-validators-B4F7L8Rf.js";
-import { R as buildCodexPluginAppsConfigPatchFromPolicyContext, W as mergeCodexThreadConfigs, b as readCodexSupportedReasoningEfforts, f as resolveCodexWebSearchPlan, g as resolveCodexAppServerRequestModelSelection, h as resolveCodexAppServerModelProvider, k as resolveCodexDynamicToolsLoading, l as buildCodexRuntimeThreadConfig, m as CODEX_NATIVE_PERSONALITY_NONE, v as resolveCodexBindingModelProviderFallback, w as filterCodexDynamicTools, y as resolveReasoningEffort } from "./thread-lifecycle-Bu1BTDXr.js";
-import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-DZXmOL8-.js";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-zcBDc1JU.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-Cmwc9eIk.js";
-import { n as resolveCodexBindingAppServerConnection, t as requireCodexSupervisionModelSelection } from "./binding-connection-I5Bo-AsX.js";
-import { A as buildCodexNativeHookRelayDisabledConfig, B as resolveDynamicToolCallTimeoutMs, D as CODEX_NATIVE_HOOK_RELAY_EVENTS, E as CodexNativeToolLifecycleProjector, I as handleDynamicToolCallWithTimeout, K as resolveCodexToolAbortTerminalReason, M as emitCodexNativePreToolUseFailureDiagnostic, S as shouldRequireCodexSandboxExecServerEnvironment, a as emitDynamicToolStartedDiagnostic, b as resolveCodexSandboxEnvironmentSelection, d as releaseCodexSandboxExecServerEnvironment, i as emitDynamicToolErrorDiagnostic, k as buildCodexNativeHookRelayConfig, l as resolveCodexProviderWebSearchSupportForClient, o as emitDynamicToolTerminalDiagnostic, r as handleCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, u as ensureCodexSandboxExecServerEnvironment, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, w as filterToolsForVisionInputs, x as shouldEnableCodexAppServerNativeToolSurface, y as resolveCodexMessageToolProvider } from "./dynamic-tools-BVdyWkUD.js";
+import { A as resolveOpenClawExecPolicyForCodexAppServer, S as resolveCodexModelBackedReviewerPolicyContext, b as canUseCodexModelBackedApprovalsReviewerForModel, f as isCodexPairedNodeRemoteExecPlacementSandbox, h as readCodexPluginConfig, m as isCodexSandboxExecServerEnabled, p as isCodexRemoteExecPlacementSandbox, r as resolveCodexAppServerHomeScope, u as shouldAutoApproveCodexAppServerApprovals } from "./config-CpNeo5AE.js";
+import { A as isCodexAppServerApprovalRequest, N as isCodexAppServerIndeterminateRequestCancellationError, Q as readRecentCodexRateLimits, V as createCodexElicitationResponse, W as ensureCodexAppServerClientRuntime, a as getLeasedSharedCodexAppServerClient, at as resolveCodexAppServerPreparedAuthHandoff, c as releaseCodexAppServerClientLease, h as withLeasedCodexAppServerClientStartSelectionRetry, ut as isJsonObject } from "./shared-client-Dw-rzii0.js";
+import { d as sessionBindingIdentity } from "./session-binding-BTrLf9Qm.js";
+import { d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, s as isCodexAlreadyTerminalInterruptError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-URjUlCHg.js";
+import { l as readCodexTurn, o as assertCodexTurnStartResponse, r as assertCodexThreadForkResponse, s as readCodexDynamicToolCallParams } from "./protocol-validators-VAVyEnDp.js";
+import { G as buildCodexPluginAppsConfigPatchFromPolicyContext, O as filterCodexDynamicTools, P as resolveCodexDynamicToolsLoading, Z as mergeCodexThreadConfigs, _ as resolveCodexAppServerRequestModelSelection, b as resolveReasoningEffort, f as resolveCodexWebSearchPlan, g as resolveCodexAppServerModelProvider, h as CODEX_NATIVE_PERSONALITY_NONE, l as buildCodexRuntimeThreadConfig, x as readCodexSupportedReasoningEfforts, y as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-DKdrnTMX.js";
+import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-BI1dMHDG.js";
+import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-bg5QPSVP.js";
+import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C1qEeZ5C.js";
+import { n as resolveCodexBindingAppServerConnection, t as requireCodexSupervisionModelSelection } from "./binding-connection-DAvZwp96.js";
+import { A as buildCodexNativeHookRelayConfig, C as shouldRequireCodexSandboxExecServerEnvironment, D as CodexNativeToolLifecycleProjector, L as handleDynamicToolCallWithTimeout, N as emitCodexNativePreToolUseFailureDiagnostic, O as CODEX_NATIVE_HOOK_RELAY_EVENTS, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, V as resolveDynamicToolCallTimeoutMs, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, d as releaseCodexSandboxExecServerEnvironment, i as emitDynamicToolErrorDiagnostic, j as buildCodexNativeHookRelayDisabledConfig, l as resolveCodexProviderWebSearchSupportForClient, o as emitDynamicToolTerminalDiagnostic, q as resolveCodexToolAbortTerminalReason, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, u as ensureCodexSandboxExecServerEnvironment, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-fJZhl4CE.js";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { randomUUID } from "node:crypto";
@@ -56,6 +57,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 		config: params.cfg
 	}));
 	if (!binding?.threadId) throw new Error("Codex /btw needs an active Codex thread. Send a normal message first, then try /btw again.");
+	if (isCodexPairedNodeRemoteExecPlacementSandbox(params.sandbox)) throw new Error("Normal Codex turns are supported on paired devices, but /btw is not yet bound to the active placement.");
 	const pluginConfig = readCodexPluginConfig(options.pluginConfig);
 	const { sessionAgentId } = resolveSessionAgentIds({
 		sessionKey: params.sessionKey,
@@ -99,7 +101,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 		bindingModelProvider: binding.modelProvider
 	});
 	const modelSelection = resolveCodexAppServerRequestModelSelection({
-		model: supervisionModelSelection?.model ?? params.model,
+		model: supervisionModelSelection?.model ?? options.runtimeModelId ?? params.model,
 		modelProvider,
 		authProfileId,
 		authProfileStore: preparedRuntimeAuth.authProfileStore,
@@ -152,7 +154,10 @@ async function runCodexAppServerSideQuestion(params, options) {
 		timeoutMs: appServer.requestTimeoutMs
 	});
 	const sandboxExecServerEnabled = isCodexSandboxExecServerEnabled(pluginConfig, params.sandbox);
-	const nativeToolSurfaceEnabled = shouldEnableCodexAppServerNativeToolSurface(sideRunParams, params.sandbox ?? void 0, { sandboxExecServerEnabled });
+	const nativeToolSurfaceEnabled = shouldEnableCodexAppServerNativeToolSurface(sideRunParams, params.sandbox ?? void 0, {
+		agentId: sideRunParams.agentId,
+		sandboxExecServerEnabled
+	});
 	const sandboxEnvironmentRequired = shouldRequireCodexSandboxExecServerEnvironment({
 		sandbox: params.sandbox ?? void 0,
 		nativeToolSurfaceEnabled,
@@ -162,6 +167,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 		config: sideRunParams.config,
 		sessionKey: sideRunParams.sandboxSessionKey?.trim() || sideRunParams.sessionKey,
 		sessionId: sideRunParams.sessionId,
+		agentId: sideRunParams.agentId,
 		sandbox: params.sandbox,
 		sandboxEnvironmentSelected: sandboxEnvironmentRequired,
 		surface: "/btw side-question mode"
@@ -230,9 +236,10 @@ async function runCodexAppServerSideQuestion(params, options) {
 	const activeDynamicToolCalls = /* @__PURE__ */ new Set();
 	const releaseSandboxEnvironment = async () => {
 		if (!sandboxEnvironment) return;
+		const environment = sandboxEnvironment;
 		sandboxEnvironment = void 0;
 		sandboxEnvironmentClient = void 0;
-		await releaseCodexSandboxExecServerEnvironment(params.sandbox);
+		await releaseCodexSandboxExecServerEnvironment(params.sandbox, environment);
 	};
 	const ensureSandboxEnvironment = async (targetClient) => {
 		if (!sandboxEnvironmentRequired || sandboxEnvironmentClient === targetClient) return;
@@ -240,9 +247,15 @@ async function runCodexAppServerSideQuestion(params, options) {
 		const environment = await ensureCodexSandboxExecServerEnvironment({
 			client: targetClient,
 			sandbox: params.sandbox ?? null,
+			runtime: options.runtime,
 			appServerStartOptions: appServer.start,
 			timeoutMs: appServer.requestTimeoutMs,
-			signal: runAbortController.signal
+			signal: runAbortController.signal,
+			onExecutionDisconnect: (error) => {
+				collector.reject(error);
+				embeddedAgentLog.warn(error.message);
+				runAbortController.abort("client_closed");
+			}
 		});
 		if (!environment) throw new Error("Codex app-server did not register an OpenClaw sandbox exec-server environment.");
 		sandboxEnvironment = environment;
@@ -295,14 +308,17 @@ async function runCodexAppServerSideQuestion(params, options) {
 		});
 		const registerRequestHandler = (targetClient) => targetClient.addRequestHandler(async (request) => {
 			if (!childThreadId || !turnId) return;
-			if (request.method === "mcpServer/elicitation/request") return handleCodexAppServerElicitationRequest({
-				requestParams: request.params,
-				paramsForRun: sideRunParams,
-				threadId: childThreadId,
-				turnId,
-				pluginAppPolicyContext: binding.pluginAppPolicyContext,
-				signal: runAbortController.signal
-			});
+			if (request.method === "mcpServer/elicitation/request") {
+				const approvalResult = await routeCodexAppServerElicitationRequest({
+					requestParams: request.params,
+					paramsForRun: sideRunParams,
+					threadId: childThreadId,
+					turnId,
+					pluginAppPolicyContext: binding.pluginAppPolicyContext,
+					signal: runAbortController.signal
+				});
+				return approvalResult.kind === "handled" ? approvalResult.response : createCodexElicitationResponse("decline", null, { message: "OpenClaw Codex side questions do not support interactive MCP input." });
+			}
 			if (request.method === "item/tool/requestUserInput") return isSideUserInputRequest(request.params, childThreadId, turnId) ? emptySideUserInputResponse() : void 0;
 			if (isCodexAppServerApprovalRequest(request.method)) return handleCodexAppServerApprovalRequest({
 				method: request.method,
@@ -412,8 +428,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 			relay: nativeHookRelay,
 			events: nativeHookRelayEvents,
 			hookTimeoutSec: options.nativeHookRelay?.hookTimeoutSec,
-			clearOmittedEvents: true,
-			loopDetectionPreToolUseRelay: appServer.loopDetectionPreToolUseRelay
+			clearOmittedEvents: true
 		}) : options.nativeHookRelay?.enabled === false ? buildCodexNativeHookRelayDisabledConfig() : void 0;
 		const runtimeThreadConfig = buildCodexRuntimeThreadConfig(webSearchPlan.threadConfig, {
 			nativeCodeModeEnabled: nativeToolSurfaceEnabled,
@@ -423,7 +438,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 		const forkResponse = assertCodexThreadForkResponse(await withLeasedCodexAppServerClientStartSelectionRetry({
 			lease: clientLease,
 			options: clientOptions,
-			signal: params.opts?.abortSignal,
+			signal: runAbortController.signal,
 			run: async (forkClient, requestOptions) => {
 				await ensureSandboxEnvironment(forkClient);
 				const executionCwd = sandboxEnvironment?.cwd ?? cwd;
@@ -451,7 +466,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 			items: [sideBoundaryPromptItem()]
 		}, {
 			timeoutMs: appServer.requestTimeoutMs,
-			signal: params.opts?.abortSignal
+			signal: runAbortController.signal
 		});
 		const effort = usesSupervisionConnection ? void 0 : resolveReasoningEffort(params.resolvedThinkLevel ?? "off", modelSelection.model, readCodexSupportedReasoningEfforts(params.runtimeModel?.compat));
 		turnId = assertCodexTurnStartResponse(await client.request("turn/start", {
@@ -482,7 +497,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 			}
 		}, {
 			timeoutMs: appServer.requestTimeoutMs,
-			signal: params.opts?.abortSignal
+			signal: runAbortController.signal
 		}).catch((error) => {
 			if (isCodexAppServerIndeterminateRequestCancellationError(error)) turnId = "";
 			throw error;
@@ -499,7 +514,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 		let text;
 		try {
 			text = await collector.wait({
-				signal: params.opts?.abortSignal,
+				signal: runAbortController.signal,
 				timeoutMs: Math.max(appServer.turnCompletionIdleTimeoutMs, SIDE_QUESTION_COMPLETION_TIMEOUT_MS)
 			});
 		} catch (error) {
@@ -622,6 +637,7 @@ function buildSideRunAttemptParams(params, options) {
 		authStorage: params.preparedRuntimeAuth.authStorage,
 		authProfileStore: params.preparedRuntimeAuth.authProfileStore,
 		modelRegistry: params.preparedRuntimeAuth.modelRegistry,
+		preparedModelRuntime: params.preparedModelRuntime,
 		...params.preparedRuntimeAuth.resolvedApiKey ? { resolvedApiKey: params.preparedRuntimeAuth.resolvedApiKey } : {},
 		runId: options.runId,
 		abortSignal: params.opts?.abortSignal,
@@ -641,6 +657,7 @@ async function createCodexSideToolBridge(input) {
 	};
 	const messageToolProvider = resolveCodexMessageToolProvider(input.params);
 	let tools = [];
+	const webFetchHostnameAllowlistRef = {};
 	if (supportsModelTools(runtimeModel)) {
 		const createOpenClawCodingTools = (await import("openclaw/plugin-sdk/agent-harness")).createOpenClawCodingTools;
 		const sandboxSessionKey = input.params.sandboxSessionKey?.trim() || input.params.sessionKey?.trim() || input.params.sessionId || input.sessionAgentId;
@@ -649,7 +666,8 @@ async function createCodexSideToolBridge(input) {
 			sessionKey: sandboxSessionKey,
 			workspaceDir: input.cwd
 		});
-		tools = filterToolsForVisionInputs(filterCodexDynamicTools(createOpenClawCodingTools({
+		const toolConstructionPlan = resolveCodexNodePlacementToolConstructionPlan(sandbox, input.nativeToolSurfaceEnabled);
+		tools = filterCodexVisionTools(filterCodexDynamicTools(createOpenClawCodingTools({
 			agentId: input.sessionAgentId,
 			sessionKey: sandboxSessionKey,
 			runSessionKey: input.params.sessionKey && input.params.sessionKey !== sandboxSessionKey ? input.params.sessionKey : void 0,
@@ -662,6 +680,7 @@ async function createCodexSideToolBridge(input) {
 				resolvedWorkspace: input.params.workspaceDir ?? input.cwd
 			}),
 			config: input.params.cfg,
+			preparedModelRuntime: input.params.preparedModelRuntime,
 			abortSignal: input.signal,
 			modelProvider: runtimeModel.provider,
 			modelId: input.params.model,
@@ -670,6 +689,7 @@ async function createCodexSideToolBridge(input) {
 			modelContextWindowTokens: runtimeModel.contextWindow,
 			modelAuthMode: resolveModelAuthMode(runtimeModel.provider, input.params.cfg, void 0, { workspaceDir: input.cwd }),
 			suppressManagedWebSearch: false,
+			webFetchHostnameAllowlistRef,
 			...input.params.messageProvider || input.params.messageChannel ? {
 				messageProvider: messageToolProvider,
 				toolPolicyMessageProvider: input.params.messageProvider ?? input.params.messageChannel
@@ -698,12 +718,13 @@ async function createCodexSideToolBridge(input) {
 				currentChannelId: input.params.currentChannelId
 			}).channelId,
 			sandbox,
+			...toolConstructionPlan ? { toolConstructionPlan } : {},
 			emitBeforeToolCallDiagnostics: false,
 			modelHasVision: runtimeModel.input?.includes("image") ?? false,
 			requireExplicitMessageTarget: true
 		}), input.pluginConfig), {
 			modelHasVision: runtimeModel.input?.includes("image") ?? false,
-			hasInboundImages: false
+			nativeImageInspectionEnabled: input.nativeToolSurfaceEnabled
 		});
 	}
 	const requestedWebSearchPlan = resolveCodexWebSearchPlan({
@@ -712,6 +733,7 @@ async function createCodexSideToolBridge(input) {
 		nativeProviderWebSearchSupport: input.nativeProviderWebSearchSupport,
 		webSearchAllowed: tools.some((tool) => tool.name === "web_search")
 	});
+	webFetchHostnameAllowlistRef.value = requestedWebSearchPlan.webFetchHostnameAllowlist;
 	const webSearchPlan = requestedWebSearchPlan.kind === "managed" ? resolveCodexWebSearchPlan({
 		config: input.params.cfg,
 		webSearchAllowed: false