@openclaw/codex 2026.8.1-beta.3 → 2026.8.1

package/dist/{side-question-DbXkJZzg.js → side-question-GwD73tX6.js}

@@ -1,17 +1,19 @@
-import { A as resolveOpenClawExecPolicyForCodexAppServer, S as resolveCodexModelBackedReviewerPolicyContext, b as canUseCodexModelBackedApprovalsReviewerForModel, f as isCodexPairedNodeRemoteExecPlacementSandbox, h as readCodexPluginConfig, m as isCodexSandboxExecServerEnabled, p as isCodexRemoteExecPlacementSandbox, r as resolveCodexAppServerHomeScope, u as shouldAutoApproveCodexAppServerApprovals } from "./config-CpNeo5AE.js";
-import { A as isCodexAppServerApprovalRequest, N as isCodexAppServerIndeterminateRequestCancellationError, Q as readRecentCodexRateLimits, V as createCodexElicitationResponse, W as ensureCodexAppServerClientRuntime, a as getLeasedSharedCodexAppServerClient, at as resolveCodexAppServerPreparedAuthHandoff, c as releaseCodexAppServerClientLease, h as withLeasedCodexAppServerClientStartSelectionRetry, ut as isJsonObject } from "./shared-client-Dw-rzii0.js";
-import { d as sessionBindingIdentity } from "./session-binding-BTrLf9Qm.js";
-import { d as unsubscribeCodexThreadBestEffort, h as isCodexNotificationForTurn, s as isCodexAlreadyTerminalInterruptError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-URjUlCHg.js";
-import { l as readCodexTurn, o as assertCodexTurnStartResponse, r as assertCodexThreadForkResponse, s as readCodexDynamicToolCallParams } from "./protocol-validators-VAVyEnDp.js";
-import { G as buildCodexPluginAppsConfigPatchFromPolicyContext, O as filterCodexDynamicTools, P as resolveCodexDynamicToolsLoading, Z as mergeCodexThreadConfigs, _ as resolveCodexAppServerRequestModelSelection, b as resolveReasoningEffort, f as resolveCodexWebSearchPlan, g as resolveCodexAppServerModelProvider, h as CODEX_NATIVE_PERSONALITY_NONE, l as buildCodexRuntimeThreadConfig, x as readCodexSupportedReasoningEfforts, y as resolveCodexBindingModelProviderFallback } from "./thread-lifecycle-DKdrnTMX.js";
-import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-BI1dMHDG.js";
-import { t as resolveCodexAppServerForModelProvider } from "./app-server-policy-bg5QPSVP.js";
-import { n as resolveCodexNativeExecutionBlock } from "./sandbox-guard-C1qEeZ5C.js";
-import { n as resolveCodexBindingAppServerConnection, t as requireCodexSupervisionModelSelection } from "./binding-connection-DAvZwp96.js";
-import { A as buildCodexNativeHookRelayConfig, C as shouldRequireCodexSandboxExecServerEnvironment, D as CodexNativeToolLifecycleProjector, L as handleDynamicToolCallWithTimeout, N as emitCodexNativePreToolUseFailureDiagnostic, O as CODEX_NATIVE_HOOK_RELAY_EVENTS, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, V as resolveDynamicToolCallTimeoutMs, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, d as releaseCodexSandboxExecServerEnvironment, i as emitDynamicToolErrorDiagnostic, j as buildCodexNativeHookRelayDisabledConfig, l as resolveCodexProviderWebSearchSupportForClient, o as emitDynamicToolTerminalDiagnostic, q as resolveCodexToolAbortTerminalReason, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, u as ensureCodexSandboxExecServerEnvironment, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-fJZhl4CE.js";
+import { C as isCodexRemoteExecPlacementSandbox, D as resolveOpenClawExecPolicyForCodexAppServer, S as isCodexPairedNodeRemoteExecPlacementSandbox, T as readCodexPluginConfig, m as resolveCodexModelBackedReviewerPolicyContext, p as canUseCodexModelBackedApprovalsReviewerForModel, r as resolveCodexAppServerHomeScope, u as shouldAutoApproveCodexAppServerApprovals, v as readCodexRequirementsToml, w as isCodexSandboxExecServerEnabled } from "./config-Cxw3Cl3k.js";
+import { C as withLeasedCodexAppServerClientStartSelectionRetry, Ht as isJsonObject, K as isCodexAppServerIndeterminateRequestCancellationError, Lt as resolveCodexAppServerPreparedAuthHandoff, Ot as readRecentCodexRateLimits, U as isCodexAppServerApprovalRequest, _t as ensureCodexAppServerClientRuntime, at as resolveDynamicToolCallTimeoutMs, c as getLeasedSharedCodexAppServerClient, dt as resolveCodexToolAbortTerminalReason, et as createCodexElicitationResponse, m as releaseCodexAppServerClientLease, tt as handleDynamicToolCallWithTimeout } from "./shared-client-kNkljY-R.js";
+import { d as sessionBindingIdentity } from "./session-binding-q2WSTVmC.js";
+import { a as assertCodexThreadForkResponse, c as assertCodexTurnStartResponse, d as readCodexTurn, l as readCodexDynamicToolCallParams } from "./protocol-validators-Bg5rpNxk.js";
+import { f as unsubscribeCodexThreadBestEffort, g as isCodexNotificationForTurn, s as isCodexAlreadyTerminalInterruptError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-CVPvp9dL.js";
+import { A as readCodexSupportedReasoningEfforts, E as resolveCodexAppServerRequestModelSelection, L as filterCodexDynamicTools, O as resolveCodexBindingModelProviderFallback, T as resolveCodexAppServerModelProvider, U as resolveCodexDynamicToolsLoading, c as buildCodexNativeHookRelayConfig, d as emitCodexNativePreToolUseFailureDiagnostic, et as buildCodexPluginAppsConfigPatchFromPolicyContext, k as resolveReasoningEffort, l as buildCodexNativeHookRelayDisabledConfig, o as CODEX_NATIVE_HOOK_RELAY_EVENTS, ot as mergeCodexThreadConfigs, v as buildCodexRuntimeThreadConfig, w as CODEX_NATIVE_PERSONALITY_NONE, x as resolveCodexWebSearchPlan } from "./thread-lifecycle-Ss-uwnC4.js";
+import { s as resolveCodexNativeExecutionBlock } from "./request-CCm4LaED.js";
+import { n as formatCodexUsageLimitErrorMessage } from "./rate-limits-hFtzt2Up.js";
+import { a as resolveCodexAppServerForModelProvider, i as resolveCodexSessionPermissionCwd, n as applyCodexSessionPermissionPolicy, r as resolveCodexEffectiveSessionPermissionPolicy, t as CODEX_SESSION_PERMISSION_EXEC_MODES } from "./session-permission-policy-gLm40Vtq.js";
+import { n as resolveCodexBindingAppServerConnection, t as requireCodexSupervisionModelSelection } from "./binding-connection-CCQFs8lf.js";
+import { C as shouldRequireCodexSandboxExecServerEnvironment, D as CodexNativeToolLifecycleProjector, S as shouldEnableCodexAppServerNativeToolSurface, T as filterCodexVisionTools, a as emitDynamicToolStartedDiagnostic, b as resolveCodexNodePlacementToolConstructionPlan, d as releaseCodexSandboxExecServerEnvironment, i as emitDynamicToolErrorDiagnostic, l as resolveCodexProviderWebSearchSupportForClient, o as emitDynamicToolTerminalDiagnostic, r as routeCodexAppServerElicitationRequest, s as handleCodexAppServerApprovalRequest, t as createCodexDynamicToolBridge, u as ensureCodexSandboxExecServerEnvironment, v as resolveCodexExternalSandboxPolicyForOpenClawSandbox, x as resolveCodexSandboxEnvironmentSelection, y as resolveCodexMessageToolProvider } from "./dynamic-tools-BFoUcRdx.js";
 import { readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, resolveSessionAgentIds, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
+import { buildAgentHookContextChannelFields, embeddedAgentLog, formatErrorMessage, registerNativeHookRelay, resolveAgentDir, resolveAttemptSpawnWorkspaceDir, resolveModelAuthMode, resolveSandboxContext, supportsModelTools } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { randomUUID } from "node:crypto";
+import { resolveAgentWorkspaceDir } from "openclaw/plugin-sdk/agent-runtime";
+import { resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { loadExecApprovals } from "openclaw/plugin-sdk/exec-approvals-runtime";
 //#region extensions/codex/src/app-server/side-question.ts
 const SIDE_QUESTION_COMPLETION_TIMEOUT_MS = 6e5;
@@ -57,15 +59,18 @@ async function runCodexAppServerSideQuestion(params, options) {
 		config: params.cfg
 	}));
 	if (!binding?.threadId) throw new Error("Codex /btw needs an active Codex thread. Send a normal message first, then try /btw again.");
-	if (isCodexPairedNodeRemoteExecPlacementSandbox(params.sandbox)) throw new Error("Normal Codex turns are supported on paired devices, but /btw is not yet bound to the active placement.");
+	if (isCodexPairedNodeRemoteExecPlacementSandbox(params.sandbox)) throw new Error("Normal Codex turns are supported on nodes, but /btw is not yet bound to the active placement.");
 	const pluginConfig = readCodexPluginConfig(options.pluginConfig);
-	const { sessionAgentId } = resolveSessionAgentIds({
+	const { sessionAgentId } = resolveSessionAgentIdsStrict({
 		sessionKey: params.sessionKey,
 		config: params.cfg,
 		agentId: params.agentId
 	});
+	const agentWorkspaceDir = params.workspaceDir?.trim() || resolveAgentWorkspaceDir(params.cfg, sessionAgentId);
 	const execPolicy = resolveOpenClawExecPolicyForCodexAppServer({
-		approvals: loadExecApprovals(),
+		permissionMode: params.sessionEntry.permissionMode,
+		execOverrides: params.sessionEntry.permissionMode ? { mode: CODEX_SESSION_PERMISSION_EXEC_MODES[params.sessionEntry.permissionMode] } : void 0,
+		approvals: params.sessionEntry.permissionMode === "full" ? void 0 : loadExecApprovals(),
 		config: params.cfg,
 		agentId: sessionAgentId
 	});
@@ -125,8 +130,41 @@ async function runCodexAppServerSideQuestion(params, options) {
 		config: params.cfg,
 		agentDir: params.agentDir
 	});
-	const appServer = connection.appServer;
-	const cwd = binding.cwd || params.workspaceDir || process.cwd();
+	const reviewerContext = {
+		modelProvider: reviewerPolicyContext.modelProvider,
+		model: reviewerPolicyContext.model,
+		config: params.cfg,
+		env: process.env,
+		agentDir: params.agentDir
+	};
+	const appServer = resolveCodexAppServerForModelProvider({
+		appServer: applyCodexSessionPermissionPolicy({
+			appServer: connection.appServer,
+			permissionMode: params.sessionEntry.permissionMode,
+			sessionRoot: params.sessionEntry.sessionRoot,
+			defaultRoot: agentWorkspaceDir,
+			pluginConfig,
+			canUseAutoReview: canUseCodexModelBackedApprovalsReviewerForModel(reviewerContext),
+			requirementsToml: readCodexRequirementsToml({}),
+			policyLocked: usesSupervisionConnection,
+			execMode: execPolicy.mode
+		}),
+		...reviewerContext,
+		provider: reviewerContext.modelProvider
+	});
+	const sessionPermissionPolicy = resolveCodexEffectiveSessionPermissionPolicy({
+		appServer,
+		permissionMode: params.sessionEntry.permissionMode,
+		sessionRoot: params.sessionEntry.sessionRoot,
+		defaultRoot: agentWorkspaceDir
+	});
+	const cwd = resolveCodexSessionPermissionCwd({
+		permissionMode: params.sessionEntry.permissionMode,
+		sessionRoot: params.sessionEntry.sessionRoot,
+		defaultRoot: agentWorkspaceDir,
+		requestedCwd: binding.cwd,
+		fallbackCwd: agentWorkspaceDir
+	});
 	const runId = params.opts?.runId ?? randomUUID();
 	const effectiveParams = supervisionModelSelection ? {
 		...params,
@@ -153,6 +191,9 @@ async function runCodexAppServerSideQuestion(params, options) {
 		runId,
 		timeoutMs: appServer.requestTimeoutMs
 	});
+	sideRunParams.permissionMode = sessionPermissionPolicy?.mode;
+	sideRunParams.sessionRoot = sessionPermissionPolicy?.root;
+	sideRunParams.execOverrides = sessionPermissionPolicy && { mode: sessionPermissionPolicy.execMode };
 	const sandboxExecServerEnabled = isCodexSandboxExecServerEnabled(pluginConfig, params.sandbox);
 	const nativeToolSurfaceEnabled = shouldEnableCodexAppServerNativeToolSurface(sideRunParams, params.sandbox ?? void 0, {
 		agentId: sideRunParams.agentId,
@@ -262,23 +303,8 @@ async function runCodexAppServerSideQuestion(params, options) {
 		sandboxEnvironmentClient = targetClient;
 	};
 	try {
-		const modelScopedAppServer = resolveCodexAppServerForModelProvider({
-			appServer,
-			provider: reviewerPolicyContext.modelProvider,
-			model: reviewerPolicyContext.model,
-			config: params.cfg,
-			env: process.env,
-			agentDir: params.agentDir
-		});
-		const useModelScopedPolicy = !canUseCodexModelBackedApprovalsReviewerForModel({
-			modelProvider: reviewerPolicyContext.modelProvider,
-			model: reviewerPolicyContext.model,
-			config: params.cfg,
-			env: process.env,
-			agentDir: params.agentDir
-		});
-		const approvalPolicy = useModelScopedPolicy ? modelScopedAppServer.approvalPolicy : binding.approvalPolicy ?? modelScopedAppServer.approvalPolicy;
-		const sandbox = useModelScopedPolicy ? modelScopedAppServer.sandbox : binding.sandbox ?? modelScopedAppServer.sandbox;
+		const approvalPolicy = appServer.approvalPolicy;
+		const sandbox = appServer.sandbox;
 		const { toolBridge, webSearchPlan } = await createCodexSideToolBridge({
 			params: effectiveParams,
 			cwd,
@@ -294,6 +320,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 				modelProviderOverride: modelSelection.modelProvider,
 				signal: runAbortController.signal
 			}) : "unsupported",
+			sessionPermissionPolicy,
 			runId,
 			signal: runAbortController.signal
 		});
@@ -329,7 +356,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 				nativeHookRelay,
 				autoApprove: shouldAutoApproveCodexAppServerApprovals({
 					approvalPolicy,
-					networkProxy: modelScopedAppServer.networkProxy,
+					networkProxy: appServer.networkProxy,
 					sandbox
 				}),
 				signal: runAbortController.signal,
@@ -434,7 +461,7 @@ async function runCodexAppServerSideQuestion(params, options) {
 			nativeCodeModeEnabled: nativeToolSurfaceEnabled,
 			nativeCodeModeOnlyEnabled: appServer.codeModeOnly
 		});
-		const threadConfig = mergeCodexThreadConfigs(nativeHookRelayConfig, runtimeThreadConfig, binding.pluginAppPolicyContext ? buildCodexPluginAppsConfigPatchFromPolicyContext(binding.pluginAppPolicyContext) : void 0, modelScopedAppServer.networkProxy?.configPatch) ?? runtimeThreadConfig;
+		const threadConfig = mergeCodexThreadConfigs(nativeHookRelayConfig, runtimeThreadConfig, binding.pluginAppPolicyContext ? buildCodexPluginAppsConfigPatchFromPolicyContext(binding.pluginAppPolicyContext) : void 0, appServer.networkProxy?.configPatch) ?? runtimeThreadConfig;
 		const forkResponse = assertCodexThreadForkResponse(await withLeasedCodexAppServerClientStartSelectionRetry({
 			lease: clientLease,
 			options: clientOptions,
@@ -447,15 +474,16 @@ async function runCodexAppServerSideQuestion(params, options) {
 					model: modelSelection.model,
 					...modelSelection.modelProvider ? { modelProvider: modelSelection.modelProvider } : {},
 					cwd: executionCwd,
+					...sessionPermissionPolicy ? { runtimeWorkspaceRoots: [sessionPermissionPolicy.root] } : {},
 					approvalPolicy,
-					approvalsReviewer: modelScopedAppServer.approvalsReviewer,
-					...sandboxEnvironment || modelScopedAppServer.networkProxy ? {} : { sandbox },
+					approvalsReviewer: appServer.approvalsReviewer,
+					...sandboxEnvironment || appServer.networkProxy ? {} : { sandbox },
 					...serviceTier ? { serviceTier } : {},
 					config: threadConfig,
 					developerInstructions: SIDE_DEVELOPER_INSTRUCTIONS,
 					ephemeral: true,
 					threadSource: "user"
-				}, requestOptions);
+				}, requestOptions());
 			},
 			onClientChange: rebindClientHandlers
 		}));
@@ -672,6 +700,8 @@ async function createCodexSideToolBridge(input) {
 			sessionKey: sandboxSessionKey,
 			runSessionKey: input.params.sessionKey && input.params.sessionKey !== sandboxSessionKey ? input.params.sessionKey : void 0,
 			sessionId: input.params.sessionId,
+			exec: input.sessionPermissionPolicy && { mode: input.sessionPermissionPolicy.execMode },
+			sessionPermissionPolicy: input.sessionPermissionPolicy,
 			runId: input.runId,
 			agentDir: input.params.agentDir ?? resolveAgentDir(input.params.cfg ?? {}, input.sessionAgentId),
 			workspaceDir: input.cwd,