@openclaw/codex 2026.8.1-beta.3 → 2026.9.1-beta.1

package/dist/{sandbox-guard-C1qEeZ5C.js → sandbox-guard-kuWTn9C5.js}

@@ -1,4 +1,4 @@
-import { p as isCodexRemoteExecPlacementSandbox } from "./config-CpNeo5AE.js";
+import { p as isCodexRemoteExecPlacementSandbox } from "./config-giW8X0QA.js";
 import { resolveAgentConfig, tryResolveDefaultAgentId } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { getSessionEntry } from "openclaw/plugin-sdk/session-store-runtime";
 import { normalizeAgentId, parseAgentSessionKey } from "openclaw/plugin-sdk/routing";

package/dist/{session-binding-BTrLf9Qm.js → session-binding-Bcynfd-_.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { N as normalizeCodexServiceTier, y as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-CpNeo5AE.js";
+import { P as normalizeCodexServiceTier, y as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-giW8X0QA.js";
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
 import { asOptionalRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { AgentHarnessSessionSupersededError, embeddedAgentLog } from "openclaw/plugin-sdk/agent-harness-runtime";

package/dist/{session-catalog-ezP_UcRM.js → session-catalog-DaLKVtpH.js}

@@ -1,16 +1,16 @@
-import { h as readCodexPluginConfig, s as resolveCodexSupervisionAppServerRuntimeOptions, x as resolveCodexAppServerUserHomeDir } from "./config-CpNeo5AE.js";
-import { B as CodexAppServerRpcError, R as resolveCodexAppServerClientInstanceId, _ as withTimeout, a as getLeasedSharedCodexAppServerClient, ft as resolveCodexAppServerHomeDir, l as releaseLeasedSharedCodexAppServerClient, ot as CODEX_INTERACTIVE_CUSTOM_THREAD_SOURCES, pt as resolveCodexAppServerLocalHomeDir, st as CODEX_INTERACTIVE_THREAD_SOURCE_KINDS, ut as isJsonObject } from "./shared-client-Dw-rzii0.js";
-import { c as reclaimCurrentCodexSessionGeneration, d as sessionBindingIdentity } from "./session-binding-BTrLf9Qm.js";
-import { n as assertCodexThreadForkParams } from "./protocol-validators-VAVyEnDp.js";
-import { i as replaceCodexCatalogConnectionHomes, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-DMNQ8Zi8.js";
+import { S as resolveCodexAppServerUserHomeDir, h as readCodexPluginConfig, s as resolveCodexSupervisionAppServerRuntimeOptions } from "./config-giW8X0QA.js";
+import { G as CodexAppServerRpcError, St as resolveCodexAppServerLocalHomeDir, U as resolveCodexAppServerClientInstanceId, ht as CODEX_INTERACTIVE_THREAD_SOURCE_KINDS, mt as CODEX_INTERACTIVE_CUSTOM_THREAD_SOURCES, o as getLeasedSharedCodexAppServerClient, p as releaseLeasedSharedCodexAppServerClient, rt as withTimeout, vt as isJsonObject, xt as resolveCodexAppServerHomeDir } from "./shared-client-DKz23hHY.js";
+import { c as reclaimCurrentCodexSessionGeneration, d as sessionBindingIdentity } from "./session-binding-Bcynfd-_.js";
+import { n as assertCodexThreadForkParams } from "./protocol-validators-VeJxxJ0U.js";
+import { i as replaceCodexCatalogConnectionHomes, t as buildCodexAppServerConnectionFingerprint } from "./plugin-app-cache-key-C1CAdfcP.js";
 import { n as codexCatalogHomeId, t as canonicalCodexCatalogHome } from "./session-catalog-home-id-BNwAJ9D7.js";
-import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-BU0_LKAL.js";
-import { t as CODEX_CONTROL_METHODS } from "./capabilities-CH3K57v4.js";
-import { r as formatCodexDisplayText } from "./command-formatters-D0nZ3qtd.js";
+import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-DsCMWBca.js";
+import { t as CODEX_CONTROL_METHODS } from "./capabilities-BRMh0aIq.js";
+import { r as formatCodexDisplayText } from "./command-formatters-DEsIufkt.js";
 import { n as createCodexCliNodeConversationBindingData } from "./conversation-binding-data-CW2GuupV.js";
-import { n as requestCodexAppServerClientJson } from "./request-DSK0W6YI.js";
-import { t as codexControlRequest } from "./command-rpc-xUIIonsO.js";
-import { i as createImportedCodexSession, n as codexUpstreamBaseline, r as codexUpstreamContinueResult, t as codexLastTerminalTurnId } from "./session-upstream-marker-D_2npHlA.js";
+import { n as requestCodexAppServerClientJson } from "./request-DXXGHko0.js";
+import { t as codexControlRequest } from "./command-rpc-CCeCkf_v.js";
+import { i as createImportedCodexSession, n as codexUpstreamBaseline, r as codexUpstreamContinueResult, t as codexLastTerminalTurnId } from "./session-upstream-marker-BIkusb95.js";
 import { asFiniteNumber, isRecord, normalizeBoundedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -19,7 +19,6 @@ import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 import fsSync from "node:fs";
 import os from "node:os";
 import { listAgentIds, resolveAgentDir, resolveAllowedModelRef, resolveDefaultAgentDir, resolveDefaultAgentId, resolveDefaultModelForAgent, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-runtime";
-import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { runCommandBuffered } from "openclaw/plugin-sdk/process-runtime";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
@@ -31,6 +30,7 @@ import { root } from "openclaw/plugin-sdk/file-access-runtime";
 import process$1 from "node:process";
 import { createSessionCatalogAdoptionCoordinator, listSessionCatalogEntries, sessionCatalogAdoptedSessionKey, sessionCatalogAdoptedSourceKey } from "openclaw/plugin-sdk/session-catalog";
 import { decodeNodePtyResumeParams, resolveNodeHostExecutable, runNodePtyCommand } from "openclaw/plugin-sdk/node-host";
+import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { createZstdDecompress } from "node:zlib";
 //#region extensions/codex/src/jsonl-lines.ts
 const JSONL_STREAM_THRESHOLD_BYTES = 4 * 1024 * 1024;
@@ -821,7 +821,7 @@ function filterCatalogPageByTitle(page, searchTerm) {
 	if (!searchTerm) return page;
 	return {
 		...page,
-		sessions: page.sessions.filter((session) => session.name?.toLocaleLowerCase().includes(searchTerm.toLocaleLowerCase()))
+		sessions: page.sessions.filter((session) => (session.name ?? session.fallbackName)?.toLocaleLowerCase().includes(searchTerm.toLocaleLowerCase()))
 	};
 }
 function unwrapNodeInvokePayload(value) {
@@ -1720,6 +1720,7 @@ async function readNodeCodexHistory(params) {
 		id: params.record.threadId,
 		createdAt: params.record.createdAt ?? 0,
 		modelProvider: params.record.modelProvider ?? "openai",
+		projectId: null,
 		turns: page.data.toReversed()
 	};
 	return {
@@ -1783,7 +1784,7 @@ async function continueNodeCodexSessionInner(params) {
 			detachHint: "Start a new chat to leave the paired-node Codex session.",
 			data: createCodexCliNodeConversationBindingData({
 				nodeId,
-				sessionId: record.sessionId?.trim() || params.threadId,
+				sessionId: params.threadId,
 				agentId: adopted.agentId,
 				cwd: record.cwd
 			})
@@ -1802,7 +1803,7 @@ async function continueNodeCodexSession(params) {
 	const agentId = resolveSessionAgentIds({
 		config: params.config,
 		agentId: params.agentId
-	}).defaultAgentId;
+	}).sessionAgentId;
 	const sourceKey = sessionCatalogAdoptedSourceKey(`node:${nodeId}`, params.threadId);
 	const operationKey = sessionCatalogAdoptedSourceKey(agentId, sourceKey);
 	return await continueNodeAdoption({
@@ -2558,7 +2559,7 @@ function createCodexSessionCatalogControlFromRequests(params) {
 						continue;
 					}
 					const session = toCatalogSession(thread, false);
-					if (session && (!search || session.name?.toLocaleLowerCase().includes(search))) sessions.push(session);
+					if (session && (!search || (session.name ?? session.fallbackName)?.toLocaleLowerCase().includes(search))) sessions.push(session);
 				}
 				nextCursor = readControlCursor(response.nextCursor, "next response");
 				if (!nextCursor || sessions.length >= limit) break;

package/dist/{session-cli-B1hKvfkI.js → session-cli-DMc4oS2w.js}

@@ -1,4 +1,4 @@
-import "./session-catalog-ezP_UcRM.js";
+import "./session-catalog-DaLKVtpH.js";
 import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { sanitizeTerminalText } from "openclaw/plugin-sdk/text-chunking";

package/dist/session-permission-policy-BrNH1bjy.js

@@ -0,0 +1,160 @@
+import { A as selectUserApprovalsReviewer, E as parseAllowedSandboxModesFromCodexRequirements, M as selectGuardianSandbox, O as selectGuardianApprovalPolicy, T as parseAllowedApprovalsReviewersFromCodexRequirements, k as selectGuardianApprovalsReviewer, l as resolveCodexAppServerNetworkProxy, w as parseAllowedApprovalPoliciesFromCodexRequirements, x as canUseCodexModelBackedApprovalsReviewerForModel } from "./config-giW8X0QA.js";
+import { hostname } from "node:os";
+import { isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
+//#region extensions/codex/src/app-server/app-server-policy.ts
+function resolveCodexAppServerForModelProvider(params) {
+	const explicitProvider = normalizeModelBackedReviewerProvider(params.provider);
+	if (!isCodexModelBackedApprovalsReviewer(params.appServer.approvalsReviewer) || canUseCodexModelBackedApprovalsReviewerForModel({
+		modelProvider: explicitProvider,
+		model: params.model,
+		config: params.config,
+		env: {
+			...params.env ?? process.env,
+			...params.appServer.start.env
+		},
+		agentDir: params.agentDir,
+		codexConfigToml: params.codexConfigToml,
+		homeScope: params.appServer.start.homeScope,
+		codexArgs: params.appServer.start.args
+	})) return params.appServer;
+	return {
+		...params.appServer,
+		approvalsReviewer: "user"
+	};
+}
+function isCodexModelBackedApprovalsReviewer(value) {
+	return value === "auto_review" || value === "guardian_subagent";
+}
+function normalizeModelBackedReviewerProvider(provider) {
+	return provider?.trim().toLowerCase() || void 0;
+}
+//#endregion
+//#region extensions/codex/src/app-server/session-permission-policy.ts
+const CODEX_SESSION_PERMISSION_EXEC_MODES = {
+	"read-only": "deny",
+	guarded: "ask",
+	workspace: "auto",
+	full: "full"
+};
+function tupleForMode(mode, canUseAutoReview) {
+	switch (mode) {
+		case "read-only": return {
+			sandbox: "read-only",
+			approvalPolicy: "on-request",
+			approvalsReviewer: "user"
+		};
+		case "guarded": return {
+			sandbox: "workspace-write",
+			approvalPolicy: "on-request",
+			approvalsReviewer: "user"
+		};
+		case "workspace": return {
+			sandbox: "workspace-write",
+			approvalPolicy: "on-request",
+			approvalsReviewer: canUseAutoReview ? "auto_review" : "user"
+		};
+		case "full": return {
+			sandbox: "danger-full-access",
+			approvalPolicy: "never",
+			approvalsReviewer: "user"
+		};
+	}
+	return mode;
+}
+function requirementsAllowTuple(tuple, allowed) {
+	return (allowed.sandboxes === void 0 || allowed.sandboxes.has(tuple.sandbox)) && (allowed.approvalPolicies === void 0 || allowed.approvalPolicies.has(tuple.approvalPolicy)) && (allowed.reviewers === void 0 || allowed.reviewers.has(tuple.approvalsReviewer));
+}
+function tightenTupleForExecMode(tuple, execMode, requiresPerCommandApproval) {
+	switch (execMode) {
+		case "deny":
+		case "allowlist": return {
+			sandbox: "read-only",
+			approvalPolicy: "on-request",
+			approvalsReviewer: "user"
+		};
+		case "ask": return {
+			...tuple,
+			approvalPolicy: requiresPerCommandApproval ? "untrusted" : "on-request",
+			approvalsReviewer: "user"
+		};
+		case "auto":
+		case "full":
+		case void 0: return tuple;
+	}
+	return execMode;
+}
+function clampSessionPermissionTuple(params) {
+	if (!params.requirementsToml) return params.requested;
+	const allowed = {
+		sandboxes: parseAllowedSandboxModesFromCodexRequirements(params.requirementsToml, params.hostName ?? hostname()),
+		approvalPolicies: parseAllowedApprovalPoliciesFromCodexRequirements(params.requirementsToml),
+		reviewers: parseAllowedApprovalsReviewersFromCodexRequirements(params.requirementsToml)
+	};
+	if (requirementsAllowTuple(params.requested, allowed)) return params.requested;
+	if (params.requested.approvalPolicy === "untrusted" && allowed.approvalPolicies?.has("untrusted") === false) throw new Error("tools.exec.ask=always requires Codex app-server per-command approvals");
+	const userReviewRequired = params.mode === "read-only" || params.mode === "guarded" || params.mode === "workspace" && !params.canUseAutoReview;
+	const sandboxAuthority = {
+		"read-only": 0,
+		"workspace-write": 1,
+		"danger-full-access": 2
+	};
+	const allowedSandboxes = new Set([
+		"read-only",
+		"workspace-write",
+		"danger-full-access"
+	].filter((sandbox) => sandboxAuthority[sandbox] <= sandboxAuthority[params.requested.sandbox] && (allowed.sandboxes === void 0 || allowed.sandboxes.has(sandbox))));
+	if (allowedSandboxes.size === 0) throw new Error(`Codex session permission mode=${params.mode} cannot satisfy managed sandbox requirements without widening access`);
+	return {
+		sandbox: selectGuardianSandbox(allowedSandboxes),
+		approvalPolicy: params.requested.approvalPolicy === "untrusted" ? "untrusted" : selectGuardianApprovalPolicy(allowed.approvalPolicies, userReviewRequired ? "ask" : "auto"),
+		approvalsReviewer: userReviewRequired ? selectUserApprovalsReviewer(allowed.reviewers) : selectGuardianApprovalsReviewer(allowed.reviewers, "auto")
+	};
+}
+/** Applies one complete session-mode tuple without mixing requirements-clamped fields. */
+function applyCodexSessionPermissionPolicy(params) {
+	if (!params.permissionMode) return params.appServer;
+	const sessionRoot = params.sessionRoot?.trim() || params.defaultRoot;
+	if (params.policyLocked) return {
+		...params.appServer,
+		sessionRoot
+	};
+	const requested = tightenTupleForExecMode(tupleForMode(params.permissionMode, params.canUseAutoReview), params.execMode, params.appServer.approvalPolicy === "untrusted");
+	const tuple = params.appServer.start.transport === "stdio" ? clampSessionPermissionTuple({
+		mode: params.permissionMode,
+		requested,
+		requirementsToml: params.requirementsToml,
+		hostName: params.hostName,
+		canUseAutoReview: params.canUseAutoReview
+	}) : requested;
+	const networkProxy = params.appServer.networkProxy ? resolveCodexAppServerNetworkProxy(params.pluginConfig.appServer?.networkProxy, tuple.sandbox).networkProxy : void 0;
+	const resolved = {
+		...params.appServer,
+		...tuple,
+		sessionRoot
+	};
+	if (networkProxy) resolved.networkProxy = networkProxy;
+	else delete resolved.networkProxy;
+	return resolved;
+}
+function resolveCodexEffectiveSessionPermissionPolicy(params) {
+	if (!params.permissionMode) return;
+	const root = params.sessionRoot?.trim() || params.defaultRoot;
+	const { sandbox, approvalPolicy, approvalsReviewer } = params.appServer;
+	const fullAccess = params.permissionMode === "full" && sandbox === "danger-full-access" && approvalPolicy === "never";
+	const guardianReview = params.permissionMode !== "guarded" && sandbox === "workspace-write" && approvalPolicy === "on-request" && approvalsReviewer !== "user";
+	const mode = params.permissionMode === "read-only" || sandbox === "read-only" ? "read-only" : fullAccess ? "full" : guardianReview ? "workspace" : "guarded";
+	return {
+		mode,
+		root,
+		execMode: CODEX_SESSION_PERMISSION_EXEC_MODES[mode]
+	};
+}
+/** Keeps relative execution inside the prepared root without filesystem rediscovery. */
+function resolveCodexSessionPermissionCwd(params) {
+	if (!params.permissionMode) return params.requestedCwd ?? params.fallbackCwd;
+	const sessionRoot = params.sessionRoot?.trim() || params.defaultRoot;
+	const requestedCwd = params.requestedCwd?.trim();
+	return requestedCwd && isPathInside(sessionRoot, requestedCwd) ? requestedCwd : sessionRoot;
+}
+//#endregion
+export { resolveCodexAppServerForModelProvider as a, resolveCodexSessionPermissionCwd as i, applyCodexSessionPermissionPolicy as n, resolveCodexEffectiveSessionPermissionPolicy as r, CODEX_SESSION_PERMISSION_EXEC_MODES as t };

package/dist/{session-retirement-CE4iMiLh.js → session-retirement-CcNC3YSY.js}

@@ -1,7 +1,7 @@
-import { J as releaseCodexAppServerLiveThread, d as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-Dw-rzii0.js";
-import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-URjUlCHg.js";
+import { $ as releaseCodexAppServerLiveThread, h as retainSharedCodexAppServerClientByInstanceId } from "./shared-client-DKz23hHY.js";
+import { a as closeCodexStartupClientBestEffort, d as unsubscribeCodexThreadBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-bfsmcQ6m.js";
 import { t as isIncognitoSessionKey } from "./incognito-session-ET_ufDH-.js";
-import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-GGq3RnOo.js";
+import { t as codexNativeSubagentMonitorRuntime } from "./native-subagent-monitor-4Mfq2HDs.js";
 //#region extensions/codex/src/app-server/session-retirement.ts
 /** Retire binding and native subscription under the same generation/physical-client ownership fence. */
 async function retireCodexAppServerSessionGeneration(params) {

package/dist/{session-upstream-marker-D_2npHlA.js → session-upstream-marker-BIkusb95.js}

@@ -1,4 +1,4 @@
-import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-BU0_LKAL.js";
+import { r as importCodexThreadHistoryToTranscript } from "./transcript-mirror-DsCMWBca.js";
 import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 //#region extensions/codex/src/app-server/session-history-import.ts
 /** Creates a session whose transcript is derived from one verified Codex thread snapshot. */

package/dist/{settled-turn-finalizer-Dx1onIqg.js → settled-turn-finalizer-Dc3ApjU4.js}

@@ -1,8 +1,8 @@
-import { ut as isJsonObject } from "./shared-client-Dw-rzii0.js";
+import { vt as isJsonObject } from "./shared-client-DKz23hHY.js";
 import { i as readUpstreamUserText, r as readMirrorIdentity, t as attachCodexMirrorIdentity } from "./upstream-prompt-provenance-CFmsKwr9.js";
-import { c as readCodexMirrorSourceFingerprint, s as fingerprintCodexMirrorSourceMessage, t as codexTranscriptMirrorRuntime } from "./transcript-mirror-BU0_LKAL.js";
-import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-4BjrZEwW.js";
-import { n as createAssistantMessage } from "./event-projector-assistant-message-BwxV4d6N.js";
+import { c as readCodexMirrorSourceFingerprint, s as fingerprintCodexMirrorSourceMessage, t as codexTranscriptMirrorRuntime } from "./transcript-mirror-DsCMWBca.js";
+import { t as runBoundedCodexAppServerTurn } from "./bounded-turn-B7iBUcuP.js";
+import { r as createAssistantMessage } from "./event-projector-assistant-message-C5-Ds8mA.js";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { Buffer } from "node:buffer";
 import { isSilentReplyText } from "openclaw/plugin-sdk/reply-runtime";