@openclaw/codex 2026.9.1-beta.1 → 2026.9.2

package/dist/config-utils-C57JiJrU.js

@@ -0,0 +1,69 @@
+import { asOptionalRecord as readRecord, normalizeOptionalString as readNonEmptyString, parseBooleanValue } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { createHmac, randomBytes } from "node:crypto";
+import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
+import { splitCommandArgs } from "openclaw/plugin-sdk/process-runtime";
+import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
+//#region extensions/codex/src/app-server/config-contracts.ts
+const CODEX_PLUGINS_MARKETPLACE_NAME = "openai-curated";
+const CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME = "workspace-directory";
+const CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN = /^[A-Za-z0-9_-]+$/;
+//#endregion
+//#region extensions/codex/src/app-server/config-utils.ts
+const START_OPTIONS_KEY_SECRET_SYMBOL = Symbol.for("openclaw.codexAppServerStartOptionsKeySecret");
+const START_OPTIONS_KEY_SECRET = getStartOptionsKeySecret();
+const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
+function normalizeCodexServiceTier(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	if (!trimmed) return;
+	const normalized = trimmed.toLowerCase();
+	if (normalized === "fast" || normalized === "priority") return "priority";
+	if (normalized === "flex") return "flex";
+	return trimmed;
+}
+function isCodexFastServiceTier(value) {
+	return normalizeCodexServiceTier(value) === "priority";
+}
+function normalizePositiveNumber(value, fallback) {
+	return resolvePositiveTimerTimeoutMs(value, fallback);
+}
+function normalizeHeaders(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key.trim(), normalizeCodexAppServerSecretInput({
+		value: child,
+		path: `plugins.entries.codex.config.appServer.headers.${key}`
+	})]).filter((entry) => Boolean(entry[0] && entry[1])));
+}
+function normalizeCodexAppServerSecretInput(params) {
+	return normalizeResolvedSecretInputString(params);
+}
+function readBooleanEnv(value) {
+	return parseBooleanValue(value);
+}
+function readExecSecurity(value) {
+	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
+}
+function readExecAsk(value) {
+	return value === "off" || value === "on-miss" || value === "always" ? value : void 0;
+}
+function readNumberEnv(value) {
+	const trimmed = value?.trim();
+	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
+	const parsed = Number(trimmed);
+	return Number.isFinite(parsed) ? parsed : void 0;
+}
+function resolveArgs(configArgs, envArgs) {
+	if (Array.isArray(configArgs)) return configArgs.map((entry) => readNonEmptyString(entry)).filter((entry) => entry !== void 0);
+	return splitCommandArgs(typeof configArgs === "string" ? configArgs : envArgs ?? "", { allowUnclosedQuotes: true });
+}
+function hashSecretForKey(value, label) {
+	if (!value) return null;
+	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
+}
+function getStartOptionsKeySecret() {
+	const globalState = globalThis;
+	globalState[START_OPTIONS_KEY_SECRET_SYMBOL] ??= randomBytes(32);
+	return globalState[START_OPTIONS_KEY_SECRET_SYMBOL];
+}
+//#endregion
+export { normalizeHeaders as a, readExecAsk as c, readNumberEnv as d, readRecord as f, CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN as g, CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME as h, normalizeCodexServiceTier as i, readExecSecurity as l, CODEX_PLUGINS_MARKETPLACE_NAME as m, isCodexFastServiceTier as n, normalizePositiveNumber as o, resolveArgs as p, normalizeCodexAppServerSecretInput as r, readBooleanEnv as s, hashSecretForKey as t, readNonEmptyString as u };

package/dist/{context-compaction-activity-BOeJf7yo.js → context-compaction-activity-CMla5FPJ.js}

@@ -20,7 +20,10 @@ async function persistCodexContextCompactionActivity(params) {
 			itemId: params.itemId,
 			...params.runId ? { runId: params.runId } : {}
 		},
-		...params.runId ? { __openclaw: { runId: params.runId } } : {},
+		__openclaw: {
+			itemId: params.itemId,
+			...params.runId ? { runId: params.runId } : {}
+		},
 		timestamp: params.timestamp,
 		idempotencyKey: activityId
 	};

package/dist/{conversation-binding-data-CW2GuupV.js → conversation-binding-data-BiodpIzq.js}

@@ -94,7 +94,8 @@ function legacyCodexConversationBindingId(sessionFile) {
 	return `legacy-${createHash("sha256").update(sessionFile).digest("base64url")}`;
 }
 function resolveCodexDefaultWorkspaceDir(pluginConfig) {
-	return normalizeOptionalString(asOptionalRecord(asOptionalRecord(pluginConfig)?.appServer)?.defaultWorkspaceDir) ?? process.cwd();
+	const appServer = asOptionalRecord(asOptionalRecord(pluginConfig)?.appServer);
+	return normalizeOptionalString(appServer?.defaultWorkspaceDir) ?? process.cwd();
 }
 function readConversationStart(value) {
 	const read = (key) => {

package/dist/doctor-contract-api.js

@@ -1,14 +1,114 @@
 import { n as CODEX_APP_SERVER_BINDING_NAMESPACE, t as CODEX_APP_SERVER_BINDING_MAX_ENTRIES } from "./session-binding-meta-B7aEMU7g.js";
-import { asNullableRecord, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { asNullableRecord, asOptionalRecord, isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { createHash } from "node:crypto";
+import { listAgentIds, resolveAgentDir, resolveSessionAgentIdsStrict } from "openclaw/plugin-sdk/agent-scope-runtime";
 import fs from "node:fs/promises";
 import path from "node:path";
+import { canonicalPathFromExistingAncestor, isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
 import { isDeepStrictEqual } from "node:util";
-import { listAgentIds, resolveAgentDir, resolveSessionAgentIds } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
+import { setImmediate } from "node:timers/promises";
 import { normalizeAgentId } from "openclaw/plugin-sdk/routing";
-import { canonicalPathFromExistingAncestor, isPathInside } from "openclaw/plugin-sdk/file-access-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
 import { archiveLegacyStateSource, legacyStateFileExists } from "openclaw/plugin-sdk/runtime-doctor-migrations";
+import { resolveStorePath } from "openclaw/plugin-sdk/session-store-paths";
+//#region extensions/codex/src/migration/session-binding-orphans.ts
+const PAGE_SIZE = 512;
+const KEY_PREFIXES = ["session-key:", "session:"];
+function readBindingCandidate(row, prefix) {
+	const identity = /^([a-z0-9][a-z0-9_-]{0,63}):(.+)$/u.exec(row.key.slice(prefix.length));
+	if (!identity) return;
+	const agentId = identity[1];
+	const keyIdentity = identity[2];
+	const stored = asOptionalRecord(row.value);
+	const sessionId = typeof stored?.sessionId === "string" ? stored.sessionId.trim() : "";
+	const stable = prefix === "session-key:";
+	if (!stored || stored.version !== 1 || !sessionId || (stable ? !/^[A-Za-z0-9_-]{43}$/u.test(keyIdentity) : sessionId !== keyIdentity)) return;
+	if (stored.state === "cleared") {
+		if (stored.binding !== void 0 || stored.retired !== void 0 && stored.retired !== true) return;
+	} else if (stored.state === "active") {
+		const binding = asOptionalRecord(stored.binding);
+		if (!binding || typeof binding.threadId !== "string" || !binding.threadId.trim() || typeof binding.cwd !== "string" || binding.connectionScope !== void 0 || binding.supervisionSourceThreadId !== void 0 || binding.pendingSupervisionBranch !== void 0 || stored.retired !== void 0) return;
+	} else return;
+	if (stored.lease !== void 0) {
+		const lease = asOptionalRecord(stored.lease);
+		if (!lease || typeof lease.token !== "string" || !lease.token.trim() || typeof lease.expiresAt !== "number" || !Number.isFinite(lease.expiresAt) || lease.expiresAt > Date.now()) return;
+	}
+	return {
+		row,
+		agentId,
+		sessionId,
+		stable
+	};
+}
+async function* iterateOrphanBindingPages({ context }) {
+	const readPage = context.readPluginStateEntriesInKeyRange;
+	const readEvidence = context.readSessionIdentityEvidenceBatch;
+	if (!readPage || !readEvidence) return;
+	for (const prefix of KEY_PREFIXES) {
+		let after;
+		while (true) {
+			const rows = readPage(CODEX_APP_SERVER_BINDING_NAMESPACE, {
+				prefix,
+				...after ? { after } : {},
+				limit: PAGE_SIZE
+			});
+			if (rows.length === 0) break;
+			after = rows.at(-1)?.key;
+			const candidates = rows.flatMap((row) => {
+				const candidate = readBindingCandidate(row, prefix);
+				return candidate ? [candidate] : [];
+			});
+			if (candidates.length > 0) {
+				const identities = new Map(candidates.map(({ agentId, sessionId }) => [`${agentId}\0${sessionId}`, {
+					agentId,
+					sessionId
+				}]));
+				const evidence = new Map((await readEvidence([...identities.values()])).map((owner) => [`${owner.agentId}\0${owner.sessionId}`, owner]));
+				const stale = candidates.filter(({ row, agentId, sessionId, stable }) => {
+					const owner = evidence.get(`${agentId}\0${sessionId}`);
+					if (!owner || owner.state === "unknown") return false;
+					if (owner.state !== "current") return true;
+					if (!stable) return false;
+					const digest = createHash("sha256").update(owner.sessionKey).digest("base64url");
+					return row.key !== `session-key:${agentId}:${digest}`;
+				}).map(({ row }) => row);
+				if (stale.length > 0) yield stale;
+			}
+			if (rows.length < PAGE_SIZE) break;
+			await setImmediate();
+		}
+	}
+}
+const codexOrphanedSessionBindingMigration = {
+	id: "codex-app-server-orphaned-session-bindings",
+	label: "Codex app-server orphaned session bindings",
+	doctorOnly: true,
+	phase: "after-session-repair",
+	async detectLegacyState(params) {
+		for await (const _ of iterateOrphanBindingPages(params)) return { preview: ["- Codex app-server bindings: remove orphaned session ownership"] };
+		return null;
+	},
+	async migrateLegacyState(params) {
+		const remove = params.context.deletePluginStateEntriesIfUnchanged;
+		if (!remove) return {
+			changes: [],
+			warnings: ["Codex session binding repair requires locked SQLite maintenance ownership"]
+		};
+		let deleted = 0;
+		let changed = 0;
+		for await (const rows of iterateOrphanBindingPages(params)) {
+			const result = remove(CODEX_APP_SERVER_BINDING_NAMESPACE, rows);
+			deleted += result.deleted;
+			changed += result.changed;
+		}
+		return {
+			changes: deleted > 0 ? [`Removed ${deleted} orphaned Codex app-server session binding(s)`] : [],
+			warnings: changed > 0 ? [`Preserved ${changed} Codex app-server session binding(s) changed during repair`] : []
+		};
+	}
+};
+//#endregion
 //#region extensions/codex/src/migration/session-binding-sidecars.ts
 const LEGACY_BINDING_SUFFIX = ".codex-app-server.json";
 const CODEX_AGENT_HARNESS_ID = "codex";
@@ -23,7 +123,6 @@ const LEGACY_BINDING_LOCK_OPTIONS = {
 	stale: 12e4
 };
 async function collectSessionSurfaces(params) {
-	const { resolveStorePath } = await import("openclaw/plugin-sdk/session-store-runtime");
 	const surfaces = /* @__PURE__ */ new Map();
 	const stateRoot = await canonicalPathFromExistingAncestor(params.stateDir);
 	const add = async (root, storePath, agentId, scan) => {
@@ -43,7 +142,7 @@ async function collectSessionSurfaces(params) {
 	const agentsDir = path.join(params.stateDir, "agents");
 	for (const entry of await readDirectoryEntries(agentsDir)) {
 		if (!entry.isDirectory() || entry.isSymbolicLink()) continue;
-		const agentId = resolveSessionAgentIds({
+		const agentId = resolveSessionAgentIdsStrict({
 			agentId: entry.name,
 			config: params.config
 		}).sessionAgentId;
@@ -169,7 +268,6 @@ async function* walkSidecars(root) {
 	}
 }
 async function collectBindingOwners(sources, surfaces, params) {
-	const { resolveStorePath } = await import("openclaw/plugin-sdk/session-store-runtime");
 	const sourcePaths = new Set(await Promise.all(sources.map((source) => canonicalPathFromExistingAncestor(source.transcriptPath))));
 	const owners = /* @__PURE__ */ new Map();
 	const storePaths = new Set(surfaces.flatMap((surface) => [...surface.storePaths]));
@@ -245,7 +343,7 @@ async function resolveLegacySessionFileLocator(sessionsDir, entry, sessionId) {
 	return candidate;
 }
 function tryResolveLegacyBindingOwnerAgentId(params) {
-	if (params.sessionKey.trim().toLowerCase().startsWith("agent:")) return resolveSessionAgentIds({
+	if (params.sessionKey.trim().toLowerCase().startsWith("agent:")) return resolveSessionAgentIdsStrict({
 		sessionKey: params.sessionKey,
 		config: params.config
 	}).sessionAgentId;
@@ -254,7 +352,7 @@ function tryResolveLegacyBindingOwnerAgentId(params) {
 	const systemAgentId = !storeAgentId && configuredAgentId ? normalizeAgentId(configuredAgentId) : void 0;
 	const fallbackAgentIds = systemAgentId && listAgentIds(params.config).includes(systemAgentId) ? [void 0, systemAgentId] : [void 0];
 	for (const fallbackAgentId of fallbackAgentIds) try {
-		return resolveSessionAgentIds({
+		return resolveSessionAgentIdsStrict({
 			sessionKey: params.sessionKey,
 			config: params.config,
 			...storeAgentId ? { agentId: storeAgentId } : fallbackAgentId ? { fallbackAgentId } : {}
@@ -293,7 +391,7 @@ async function migrateSource(source, candidates, params, store) {
 		return await withFileLock(source.sidecarPath, LEGACY_BINDING_LOCK_OPTIONS, async () => {
 			const [contents, stat] = await Promise.all([fs.readFile(source.sidecarPath, "utf8"), fs.stat(source.sidecarPath)]);
 			const raw = JSON.parse(contents);
-			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-Bcynfd-_.js").then((n) => n.f), import("./conversation-binding-data-CW2GuupV.js").then((n) => n.t)]);
+			const [{ bindingStoreKey, createStoredCodexAppServerBinding, normalizeStoredCodexAppServerBindingFingerprints, readStoredCodexAppServerBinding }, { legacyCodexConversationBindingId }] = await Promise.all([import("./session-binding-4Ki04sW-.js").then((n) => n.d), import("./conversation-binding-data-BiodpIzq.js").then((n) => n.t)]);
 			const agentId = owner?.agentId ?? (source.agentIds.size === 1 ? [...source.agentIds][0] : void 0);
 			const baseStored = createStoredCodexAppServerBinding(raw, {
 				now: stat.mtime.toISOString(),
@@ -478,7 +576,7 @@ function isSafeLegacySessionId(value) {
 	const trimmed = value.trim();
 	return trimmed.length > 0 && trimmed.length <= 255 && /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(trimmed);
 }
-const stateMigrations = [{
+const stateMigrations$1 = [{
 	id: "codex-app-server-sidecars-to-plugin-state",
 	label: "Codex app-server thread bindings",
 	async detectLegacyState(params) {
@@ -541,6 +639,15 @@ function hasRetiredApprovalPolicy(value) {
 	const approvalPolicy = asNullableRecord(value)?.approvalPolicy;
 	return approvalPolicy === "on-failure" || approvalPolicy === "untrusted";
 }
+const RETIRED_TURN_IDLE_TIMEOUT_KEYS = [
+	"turnCompletionIdleTimeoutMs",
+	"turnAssistantCompletionIdleTimeoutMs",
+	"postToolRawAssistantCompletionIdleTimeoutMs"
+];
+function hasRetiredTurnIdleTimeout(value) {
+	const appServer = asNullableRecord(value);
+	return appServer !== null && RETIRED_TURN_IDLE_TIMEOUT_KEYS.some((key) => Object.hasOwn(appServer, key));
+}
 /** Legacy Codex config keys that doctor should report or repair. */
 const legacyConfigRules = [
 	{
@@ -574,24 +681,40 @@ const legacyConfigRules = [
 		],
 		message: "plugins.entries.codex.config.appServer.approvalPolicy values \"on-failure\" and \"untrusted\" are retired; use \"on-request\". Run \"openclaw doctor --fix\".",
 		match: hasRetiredApprovalPolicy
+	},
+	{
+		path: [
+			"plugins",
+			"entries",
+			"codex",
+			"config",
+			"appServer"
+		],
+		message: "Codex app-server turn idle timeouts are retired; native Codex owns provider liveness and turn completion. The existing agents.defaults.timeoutSeconds run limit remains unchanged. Run \"openclaw doctor --fix\" to remove the old settings.",
+		match: hasRetiredTurnIdleTimeout
 	}
 ];
 /**
 * Removes retired Codex plugin config keys while preserving unrelated config.
 */
 function normalizeCompatibilityConfig({ cfg }) {
-	const rawPluginConfig = asNullableRecord(asNullableRecord(cfg.plugins?.entries?.codex)?.config);
+	const rawEntry = asNullableRecord(cfg.plugins?.entries?.codex);
+	const rawPluginConfig = asNullableRecord(rawEntry?.config);
 	const rawCodexPlugins = asNullableRecord(rawPluginConfig?.codexPlugins);
 	const rawAppServer = asNullableRecord(rawPluginConfig?.appServer);
 	const shouldRemoveDynamicToolsProfile = rawPluginConfig !== null && hasRetiredDynamicToolsProfile(rawPluginConfig);
 	const shouldRewriteDestructivePolicy = hasLegacyPluginDestructivePolicy(rawCodexPlugins);
 	const shouldRewriteApprovalPolicy = hasRetiredApprovalPolicy(rawAppServer);
-	if (!rawPluginConfig || !shouldRemoveDynamicToolsProfile && !shouldRewriteDestructivePolicy && !shouldRewriteApprovalPolicy) return {
+	const shouldRemoveTurnIdleTimeouts = hasRetiredTurnIdleTimeout(rawAppServer);
+	if (!rawPluginConfig || !shouldRemoveDynamicToolsProfile && !shouldRewriteDestructivePolicy && !shouldRewriteApprovalPolicy && !shouldRemoveTurnIdleTimeouts) return {
 		config: cfg,
 		changes: []
 	};
 	const nextConfig = structuredClone(cfg);
-	const nextPluginConfig = asNullableRecord(asNullableRecord(asNullableRecord(asNullableRecord(nextConfig.plugins)?.entries)?.codex)?.config);
+	const nextPlugins = asNullableRecord(nextConfig.plugins);
+	const nextEntries = asNullableRecord(nextPlugins?.entries);
+	const nextEntry = asNullableRecord(nextEntries?.codex);
+	const nextPluginConfig = asNullableRecord(nextEntry?.config);
 	if (!nextPluginConfig) return {
 		config: cfg,
 		changes: []
@@ -611,8 +734,14 @@ function normalizeCompatibilityConfig({ cfg }) {
 		}
 		changes.push("Renamed plugins.entries.codex.config.codexPlugins allow_destructive_actions=\"on-request\" values to \"auto\".");
 	}
+	const nextAppServer = asNullableRecord(nextPluginConfig.appServer);
+	if (nextAppServer && shouldRemoveTurnIdleTimeouts) {
+		for (const key of RETIRED_TURN_IDLE_TIMEOUT_KEYS) if (Object.hasOwn(nextAppServer, key)) {
+			delete nextAppServer[key];
+			changes.push(`Removed retired plugins.entries.codex.config.appServer.${key}; native Codex owns provider liveness and turn completion. agents.defaults.timeoutSeconds was not changed.`);
+		}
+	}
 	if (shouldRewriteApprovalPolicy) {
-		const nextAppServer = asNullableRecord(nextPluginConfig.appServer);
 		if (nextAppServer?.approvalPolicy === "on-failure" || nextAppServer?.approvalPolicy === "untrusted") nextAppServer.approvalPolicy = "on-request";
 		changes.push("Renamed retired plugins.entries.codex.config.appServer.approvalPolicy to \"on-request\".");
 	}
@@ -621,5 +750,6 @@ function normalizeCompatibilityConfig({ cfg }) {
 		changes
 	};
 }
+const stateMigrations = [...stateMigrations$1, codexOrphanedSessionBindingMigration];
 //#endregion
 export { legacyConfigRules, normalizeCompatibilityConfig, stateMigrations };