@openclaw/codex 2026.9.4 → 2026.9.6

package/dist/{config-options-CXMq1T-C.js → .setup/config-options-BvaRs51b.mjs}

@@ -1,250 +1,12 @@
-import { a as normalizeHeaders, d as readNumberEnv, f as readRecord, i as normalizeCodexServiceTier, o as normalizePositiveNumber, p as resolveArgs, r as normalizeCodexAppServerSecretInput, s as readBooleanEnv, t as hashSecretForKey, u as readNonEmptyString } from "./config-utils-DujwEnhg.js";
-import { _ as assertCodexAppServerCommandHasNoInlineArgs, d as DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX, f as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, g as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, h as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, l as resolveCodexAppServerUserHomeDir, o as isJsonObject, p as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as resolveCodexAppServerHomeDir, x as readCodexPluginConfig } from "./protocol-5bh1G-H7.js";
-import { r as readCodexAppServerConfigOptions } from "./launch-args-RXQwn8zV.js";
+import { a as normalizeHeaders, d as readNumberEnv, f as readRecord, i as normalizeCodexServiceTier, o as normalizePositiveNumber, p as resolveArgs, r as normalizeCodexAppServerSecretInput, s as readBooleanEnv, t as hashSecretForKey, u as readNonEmptyString } from "./config-utils-DujwEnhg.mjs";
+import { A as selectForcedPromptingSandbox, C as assertCodexAppServerAllowedForOpenClawExecMode, D as resolveEffectiveOpenClawExecModeForCodexAppServer, E as resolveCodexPolicyModeForOpenClawExecMode, O as resolveSandbox, T as resolveApprovalsReviewer, a as resolveCodexAppServerNetworkProxy, c as resolveTransport, d as resolveCodexAppServerHomeDir, g as parseAllowedApprovalPoliciesFromCodexRequirements, i as normalizeRemoteWorkspaceRoot, k as selectForcedDangerFullAccessSandbox, o as resolveDefaultCodexAppServerPolicy, p as resolveCodexAppServerUserHomeDir, r as inferCodexAppServerConnectionClass, s as resolvePolicyMode, t as assertCodexAppServerConnectionSecurity, w as resolveApprovalPolicy, y as readCodexRequirementsToml } from "./config-security-BEReZ6go.mjs";
+import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-CcB9iPoq.mjs";
+import { i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
 import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createHash } from "node:crypto";
-import { AgentHarnessPreflightError } from "openclaw/plugin-sdk/agent-harness-registration";
 import { parse } from "smol-toml";
 import { readFileSync } from "node:fs";
 import path from "node:path";
-import { hostname } from "node:os";
-import { isLoopbackHost } from "openclaw/plugin-sdk/request-url";
-//#region extensions/codex/src/app-server/config-exec-policy.ts
-function selectForcedPromptingSandbox(params) {
-	if (params.configuredSandbox === "read-only" || params.defaultSandbox === "read-only") return "read-only";
-	return params.defaultSandbox ?? "workspace-write";
-}
-function selectForcedDangerFullAccessSandbox(params) {
-	if (params.configuredSandbox === "read-only") return "read-only";
-	if (params.defaultPolicy?.dangerFullAccessAllowed === false) {
-		if (params.openClawSandboxActive) return params.defaultPolicy.sandbox ?? "workspace-write";
-		throw new Error("legacy full exec security with ask requires Codex app-server danger-full-access");
-	}
-	return "danger-full-access";
-}
-function selectGuardianSandbox(allowedSandboxModes) {
-	if (allowedSandboxModes === void 0 || allowedSandboxModes.has("workspace-write")) return "workspace-write";
-	if (allowedSandboxModes.has("read-only")) return "read-only";
-	if (allowedSandboxModes.has("danger-full-access")) return "danger-full-access";
-	return "workspace-write";
-}
-function resolveApprovalPolicy(value) {
-	if (value === "untrusted") throw new Error("Codex app-server approval policy \"untrusted\" is retired; run \"openclaw doctor --fix\" and use \"on-request\".");
-	if (value === "on-failure") return "on-request";
-	return value === "on-request" || value === "never" ? value : void 0;
-}
-function resolveSandbox(value) {
-	return value === "read-only" || value === "workspace-write" || value === "danger-full-access" ? value : void 0;
-}
-function resolveApprovalsReviewer(value) {
-	return value === "auto_review" || value === "guardian_subagent" || value === "user" ? value : void 0;
-}
-function resolveEffectiveOpenClawExecModeForCodexAppServer(params) {
-	if (params.execPolicy?.touched === true) return params.execPolicy.mode;
-	return params.execMode;
-}
-function resolveCodexPolicyModeForOpenClawExecMode(mode) {
-	if (!mode || mode === "full") return;
-	return "guardian";
-}
-function assertCodexAppServerAllowedForOpenClawExecMode(mode) {
-	if (mode === "deny" || mode === "allowlist") throw new AgentHarnessPreflightError(`Codex app-server local execution is unavailable because effective tools.exec.mode=${mode}. Execution-host approvals are authoritative. For gateway turns, inspect them with \`openclaw approvals get --gateway\` and update that same target with \`openclaw approvals set --gateway --stdin\`; for local \`agent exec\`, omit \`--gateway\`. Intentionally align that host policy before retrying.`, { scope: "harness" });
-}
-//#endregion
-//#region extensions/codex/src/app-server/config-requirements.ts
-const UNIX_CODEX_REQUIREMENTS_PATH = "/etc/codex/requirements.toml";
-const WINDOWS_CODEX_REQUIREMENTS_SUFFIX = "\\OpenAI\\Codex\\requirements.toml";
-function readCodexRequirementsToml(params) {
-	if (params.requirementsToml !== void 0) return params.requirementsToml ?? void 0;
-	const requirementsPath = readNonEmptyString(params.requirementsPath) ?? resolveCodexRequirementsPath(params.env ?? process.env, params.platform ?? process.platform);
-	try {
-		if (params.readRequirementsFile) return params.readRequirementsFile(requirementsPath);
-		return readFileSync(requirementsPath, "utf8");
-	} catch {
-		return;
-	}
-}
-function resolveCodexRequirementsPath(env, platform) {
-	if (platform === "win32") return `${(readNonEmptyString(env.ProgramData) ?? "C:\\ProgramData").replace(/[\\/]+$/, "")}${WINDOWS_CODEX_REQUIREMENTS_SUFFIX}`;
-	return UNIX_CODEX_REQUIREMENTS_PATH;
-}
-function parseAllowedSandboxModesFromCodexRequirements(content, hostName) {
-	const remoteSandboxModes = parseMatchingRemoteSandboxModesFromCodexRequirements(content, hostName);
-	if (remoteSandboxModes !== void 0) return remoteSandboxModes;
-	return parseRequirementsSandboxModes(parseTopLevelRequirementsStringArray(content, "allowed_sandbox_modes"));
-}
-function parseAllowedApprovalPoliciesFromCodexRequirements(content) {
-	const values = parseTopLevelRequirementsStringArray(content, "allowed_approval_policies");
-	if (values === void 0) return;
-	const normalizedPolicies = values.map((entry) => normalizeRequirementsApprovalPolicy(entry)).filter((entry) => entry !== void 0);
-	return normalizedPolicies.length > 0 ? new Set(normalizedPolicies) : void 0;
-}
-function parseAllowedApprovalsReviewersFromCodexRequirements(content) {
-	const values = parseTopLevelRequirementsStringArray(content, "allowed_approvals_reviewers");
-	if (values === void 0) return;
-	const normalizedReviewers = values.map((entry) => normalizeRequirementsApprovalsReviewer(entry)).filter((entry) => entry !== void 0);
-	return normalizedReviewers.length > 0 ? new Set(normalizedReviewers) : void 0;
-}
-function parseMatchingRemoteSandboxModesFromCodexRequirements(content, hostName) {
-	const normalizedHostName = normalizeRequirementsHostName(hostName);
-	if (normalizedHostName === void 0) return;
-	for (const section of parseTomlArrayTableSections(content, "remote_sandbox_config")) {
-		const patterns = parseRequirementsStringArray(section, "hostname_patterns");
-		if (!patterns || !requirementsHostNameMatchesAnyPattern(normalizedHostName, patterns)) continue;
-		return parseRequirementsSandboxModes(parseRequirementsStringArray(section, "allowed_sandbox_modes"));
-	}
-}
-function parseRequirementsSandboxModes(values) {
-	if (values === void 0) return;
-	const normalizedModes = values.map((entry) => normalizeRequirementsSandboxMode(entry)).filter((entry) => entry !== void 0);
-	return normalizedModes.length > 0 ? new Set(normalizedModes) : void 0;
-}
-function parseTopLevelRequirementsStringArray(content, key) {
-	return parseRequirementsStringArray(stripTomlLineComments(content).slice(0, firstTomlTableOffset(content)), key);
-}
-function parseTomlStringValue(content, key) {
-	return parseTomlStringAssignmentValue(content, tomlDottedKeyPattern(key));
-}
-function parseInlineOpenAIModelProviderBaseUrl(content) {
-	return parseTomlStringAssignmentValue(content, `${tomlKeyPattern("model_providers")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("openai")}\\s*=\\s*\\{[\\s\\S]*?${tomlKeyPattern("base_url")}`);
-}
-function parseTomlStringAssignmentValue(content, keyPattern) {
-	const assignment = content.match(new RegExp(`(?:^|\\n)\\s*${keyPattern}\\s*=\\s*([^\\r\\n]*)`));
-	if (!assignment) return;
-	const rawValue = assignment[1]?.trimStart() ?? "";
-	if (rawValue.startsWith("\"\"\"") || rawValue.startsWith("'''")) return false;
-	const match = parseTomlStringAssignment(content, keyPattern);
-	return match ? match[1] ?? match[2] ?? "" : false;
-}
-function parseTomlStringAssignment(content, keyPattern) {
-	return content.match(new RegExp(`(?:^|\\n)\\s*${keyPattern}\\s*=\\s*(?:"([^"\\\\]*(?:\\\\.[^"\\\\]*)*)"|'([^']*)')`));
-}
-function tomlDottedKeyPattern(key) {
-	return key.split(".").map(tomlKeyPattern).join("\\s*\\.\\s*");
-}
-function tomlKeyPattern(key) {
-	const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	return `(?:"${escaped}"|'${escaped}'|${escaped})`;
-}
-function parseRequirementsStringArray(content, key) {
-	const match = content.match(new RegExp(`(?:^|\\n)\\s*${key}\\s*=\\s*\\[([\\s\\S]*?)\\]`));
-	if (!match) return;
-	const arrayBody = match[1] ?? "";
-	const stringMatches = [...arrayBody.matchAll(/"([^"\\]*(?:\\.[^"\\]*)*)"|'([^']*)'/g)];
-	if (stringMatches.length === 0 && arrayBody.trim().length > 0) return;
-	return stringMatches.map((entry) => entry[1] ?? entry[2] ?? "");
-}
-function parseTomlTableSection(content, table) {
-	const strippedContent = stripTomlLineComments(content);
-	const tablePattern = tomlDottedKeyPattern(table);
-	const match = new RegExp(`^\\s*\\[\\s*${tablePattern}\\s*\\]\\s*$`, "m").exec(strippedContent);
-	if (!match) return;
-	const sectionStart = match.index + match[0].length;
-	const rest = strippedContent.slice(sectionStart);
-	const nextTableOffset = rest.search(/^\s*\[/m);
-	return nextTableOffset === -1 ? rest : rest.slice(0, nextTableOffset);
-}
-function parseTomlArrayTableSections(content, table) {
-	const strippedContent = stripTomlLineComments(content);
-	const escapedTable = table.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	const headerPattern = new RegExp(`^\\s*\\[\\[\\s*${escapedTable}\\s*\\]\\]\\s*$`, "gm");
-	const sections = [];
-	for (let match = headerPattern.exec(strippedContent); match; match = headerPattern.exec(strippedContent)) {
-		const sectionStart = headerPattern.lastIndex;
-		const rest = strippedContent.slice(sectionStart);
-		const nextTableOffset = rest.search(/^\s*\[/m);
-		sections.push(nextTableOffset === -1 ? rest : rest.slice(0, nextTableOffset));
-	}
-	return sections;
-}
-function firstTomlTableOffset(content) {
-	return content.match(/^\s*\[[^\]\n]/m)?.index ?? content.length;
-}
-function stripTomlLineComments(value) {
-	let output = "";
-	let quote;
-	let escaped = false;
-	for (let index = 0; index < value.length; index += 1) {
-		const char = value[index] ?? "";
-		if (quote) {
-			output += char;
-			if (quote === "\"" && escaped) {
-				escaped = false;
-				continue;
-			}
-			if (quote === "\"" && char === "\\") {
-				escaped = true;
-				continue;
-			}
-			if (char === quote) quote = void 0;
-			continue;
-		}
-		if (char === "\"" || char === "'") {
-			quote = char;
-			output += char;
-			continue;
-		}
-		if (char === "#") {
-			while (index < value.length && value[index] !== "\n") index += 1;
-			if (value[index] === "\n") output += "\n";
-			continue;
-		}
-		output += char;
-	}
-	return output;
-}
-function normalizeRequirementsSandboxMode(value) {
-	const compact = value.replace(/[\s_-]/g, "").toLowerCase();
-	if (compact === "readonly") return "read-only";
-	if (compact === "workspacewrite") return "workspace-write";
-	if (compact === "dangerfullaccess") return "danger-full-access";
-}
-function normalizeRequirementsHostName(value) {
-	const normalized = value.trim().replace(/\.+$/g, "").toLowerCase();
-	return normalized.length > 0 ? normalized : void 0;
-}
-function requirementsHostNameMatchesAnyPattern(hostName, patterns) {
-	return patterns.some((pattern) => {
-		const normalizedPattern = normalizeRequirementsHostName(pattern);
-		return normalizedPattern !== void 0 && globPatternMatches(hostName, normalizedPattern);
-	});
-}
-function globPatternMatches(value, pattern) {
-	let regex = "^";
-	for (const char of pattern) if (char === "*") regex += ".*";
-	else if (char === "?") regex += ".";
-	else regex += char.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	regex += "$";
-	return new RegExp(regex).test(value);
-}
-function normalizeRequirementsApprovalPolicy(value) {
-	const normalized = value.trim().toLowerCase();
-	if (normalized === "on-failure") return "on-request";
-	if (normalized === "untrusted") return normalized;
-	return resolveApprovalPolicy(normalized);
-}
-function normalizeRequirementsApprovalsReviewer(value) {
-	return resolveApprovalsReviewer(value.trim().toLowerCase());
-}
-function selectGuardianApprovalPolicy(allowedApprovalPolicies, execModeRequiringPromptingApprovals) {
-	if (allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has("on-request")) return "on-request";
-	if (allowedApprovalPolicies.has("untrusted")) return "untrusted";
-	if (execModeRequiringPromptingApprovals) throw new Error(`tools.exec.mode=${execModeRequiringPromptingApprovals} requires Codex app-server prompting approvals`);
-	if (allowedApprovalPolicies.has("never")) return "never";
-	return "on-request";
-}
-function selectGuardianApprovalsReviewer(allowedApprovalsReviewers, execModeRequiringAutoReviewer) {
-	if (allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("auto_review")) return "auto_review";
-	if (allowedApprovalsReviewers.has("guardian_subagent")) return "guardian_subagent";
-	if (execModeRequiringAutoReviewer) throw new Error(`tools.exec.mode=${execModeRequiringAutoReviewer} requires Codex app-server auto approvals`);
-	if (allowedApprovalsReviewers.has("user")) return "user";
-	return "auto_review";
-}
-function selectUserApprovalsReviewer(allowedApprovalsReviewers, execModeRequiringUserReviewer) {
-	if (allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("user")) return "user";
-	throw new Error(`tools.exec.mode=${execModeRequiringUserReviewer ?? "ask"} requires Codex app-server user approvals`);
-}
-//#endregion
 //#region extensions/codex/src/app-server/config-layer-policy.ts
 const CODEX_SESSION_OVERRIDABLE_LAYER_TYPES = /* @__PURE__ */ new Set([
 	"packagedDefaults",
@@ -267,18 +29,21 @@ async function readCodexEffectiveConfig(client, cwd, options) {
 //#endregion
 //#region extensions/codex/src/app-server/config-reviewer-policy.ts
 const CODEX_CONFIG_TOML_FILENAME = "config.toml";
+const CODEX_CLI_WHITESPACE = /^\p{White_Space}+|\p{White_Space}+$/gu;
 /** Cloud/system config can redirect reviews after local home/profile checks have passed. */
 async function assertCodexModelBackedReviewerEffectiveConfig(params) {
 	if (params.approvalsReviewer !== "auto_review" && params.approvalsReviewer !== "guardian_subagent") return;
 	const response = await readCodexEffectiveConfig(params.client, params.cwd, { signal: params.signal });
-	const effectiveConfig = response.config;
-	const modelProvider = effectiveConfig.model_provider;
-	const providers = effectiveConfig.model_providers;
+	if (!isTrustedCodexReviewerConfig(response.config)) throw new Error("Codex model-backed approval reviewer requires the running server to use a trusted OpenAI endpoint");
+	return response;
+}
+function isTrustedCodexReviewerConfig(config) {
+	const modelProvider = config.model_provider;
+	const providers = config.model_providers;
 	const providerRecords = providers == null ? void 0 : readRecord(providers);
 	const provider = providerRecords?.openai;
 	const openAIProvider = provider == null ? void 0 : readRecord(provider);
-	if (modelProvider != null && modelProvider !== "openai" || providers != null && !providerRecords || provider != null && !openAIProvider || !isTrustedOptionalReviewerEndpoint(effectiveConfig.openai_base_url, isNativeOpenAIBaseUrl) || !isTrustedOptionalReviewerEndpoint(effectiveConfig.chatgpt_base_url, isNativeChatGPTBaseUrl) || !isTrustedOptionalReviewerEndpoint(openAIProvider?.base_url, isNativeOpenAIBaseUrl)) throw new Error("Codex model-backed approval reviewer requires the running server to use a trusted OpenAI endpoint");
-	return response;
+	return (modelProvider == null || modelProvider === "openai") && (providers == null || providerRecords !== void 0) && (provider == null || openAIProvider !== void 0) && isTrustedOptionalReviewerEndpoint(config.openai_base_url, isNativeOpenAIBaseUrl) && isTrustedOptionalReviewerEndpoint(config.chatgpt_base_url, isNativeChatGPTBaseUrl) && isTrustedOptionalReviewerEndpoint(openAIProvider?.base_url, isNativeOpenAIBaseUrl);
 }
 function isTrustedOptionalReviewerEndpoint(value, isTrusted) {
 	return value == null || typeof value === "string" && isTrusted(value);
@@ -291,8 +56,7 @@ function canUseCodexModelBackedApprovalsReviewerForModel(params, resolveAuthProv
 }
 function isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId) {
 	if (!openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(params.env)) return false;
-	const codexBaseUrlOverrides = readCodexBaseUrlOverridesForModelBackedReview(params);
-	if (codexBaseUrlOverrides === false || !codexBaseUrlOverrides.openAI.every(isNativeOpenAIBaseUrl) || !codexBaseUrlOverrides.chatGPT.every(isNativeChatGPTBaseUrl)) return false;
+	if (!nativeCodexConfigIsTrustedForModelBackedReview(params)) return false;
 	const openAIProviders = readConfiguredOpenAIProvidersForModelBackedReview(params.config, resolveAuthProviderId);
 	if (openAIProviders.length === 0) return true;
 	return openAIProviders.every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
@@ -324,28 +88,17 @@ function resolveCodexModelBackedReviewerPolicyContext(params) {
 		model: params.model ?? params.bindingModel
 	};
 }
-function readCodexBaseUrlOverridesForModelBackedReview(params) {
+function nativeCodexConfigIsTrustedForModelBackedReview(params) {
 	const configToml = readCodexAppServerConfigToml(params);
 	if (configToml === false) return false;
-	const configTomls = configToml === void 0 ? [] : [configToml];
 	const nativeOverrides = readNativeCodexReviewerConfigOverrides(params);
 	if (nativeOverrides === false) return false;
-	configTomls.push(...nativeOverrides);
-	const openAI = [];
-	const chatGPT = [];
-	for (const content of configTomls) {
-		const topLevelContent = stripTomlLineComments(content).slice(0, firstTomlTableOffset(content));
-		const modelProviderOpenAISection = parseTomlTableSection(content, "model_providers.openai");
-		const modelProvider = parseTomlStringValue(topLevelContent, "model_provider");
-		if (modelProvider === false || modelProvider && modelProvider !== "openai") return false;
-		openAI.push(parseTomlStringValue(topLevelContent, "openai_base_url"), parseTomlStringValue(topLevelContent, "model_providers.openai.base_url"), parseInlineOpenAIModelProviderBaseUrl(topLevelContent), modelProviderOpenAISection ? parseTomlStringValue(modelProviderOpenAISection, "base_url") : void 0);
-		chatGPT.push(parseTomlStringValue(topLevelContent, "chatgpt_base_url"));
+	if (configToml !== void 0) try {
+		nativeOverrides.unshift(parse(configToml, { integersAsBigInt: true }));
+	} catch {
+		return false;
 	}
-	if ([...openAI, ...chatGPT].includes(false)) return false;
-	return {
-		openAI: openAI.filter((entry) => typeof entry === "string"),
-		chatGPT: chatGPT.filter((entry) => typeof entry === "string")
-	};
+	return nativeOverrides.every(isTrustedCodexReviewerConfig);
 }
 function readNativeCodexReviewerConfigOverrides(params) {
 	if (params.codexArgs?.some((arg) => !arg)) return false;
@@ -354,20 +107,39 @@ function readNativeCodexReviewerConfigOverrides(params) {
 	for (const { name, value } of readCodexAppServerConfigOptions(params.codexArgs ?? [])) {
 		if (!value) return false;
 		if (name === "--profile" || name === "-p") profile = value;
-		else overrides.push(`${value}\n`);
+		else {
+			const override = parseNativeCodexReviewerConfigOverride(value);
+			if (override === false) return false;
+			overrides.push(override);
+		}
 	}
 	if (profile) {
 		if (path.basename(profile) !== profile || profile === "." || profile === "..") return false;
 		const configPath = resolveCodexAppServerConfigPath(params);
 		if (!configPath) return false;
 		try {
-			overrides.unshift(readFileSync(path.join(path.dirname(configPath), `${profile}.config.toml`), "utf8"));
+			overrides.unshift(parse(readFileSync(path.join(path.dirname(configPath), `${profile}.config.toml`), "utf8"), { integersAsBigInt: true }));
 		} catch (error) {
 			if (readErrorCode(error) !== "ENOENT") return false;
 		}
 	}
 	return overrides;
 }
+function parseNativeCodexReviewerConfigOverride(override) {
+	const separator = override.indexOf("=");
+	if (separator < 0) return false;
+	const key = override.slice(0, separator).replace(CODEX_CLI_WHITESPACE, "");
+	if (!key) return false;
+	const raw = override.slice(separator + 1).replace(CODEX_CLI_WHITESPACE, "");
+	let value;
+	try {
+		value = parse(`_x_ = ${raw}`, { integersAsBigInt: true })["_x_"];
+	} catch {
+		value = raw.replace(/^["']+|["']+$/g, "");
+	}
+	for (const segment of key.split(".").toReversed()) value = { [segment]: value };
+	return readRecord(value) ?? false;
+}
 function readCodexAppServerConfigToml(params) {
 	if (params.codexConfigToml !== void 0) return params.codexConfigToml ?? void 0;
 	const configPath = resolveCodexAppServerConfigPath(params);
@@ -402,6 +174,7 @@ function codexConfigEnablesNativeComputerUse(params) {
 	return false;
 }
 function resolveCodexAppServerConfigPath(params) {
+	if (params.codexHome) return path.join(params.codexHome, CODEX_CONFIG_TOML_FILENAME);
 	if (params.homeScope === "user") return path.join(resolveCodexAppServerUserHomeDir(params.env), CODEX_CONFIG_TOML_FILENAME);
 	const agentDir = readNonEmptyString(params.agentDir);
 	return agentDir ? path.join(resolveCodexAppServerHomeDir(agentDir), CODEX_CONFIG_TOML_FILENAME) : void 0;
@@ -478,180 +251,6 @@ function inferProviderFromModelRef(model) {
 	return slashIndex > 0 ? normalized?.slice(0, slashIndex) : void 0;
 }
 //#endregion
-//#region extensions/codex/src/app-server/config-security.ts
-function shouldAutoApproveCodexAppServerApprovals(appServer) {
-	return appServer.networkProxy === void 0 && appServer.approvalPolicy === "never" && appServer.sandbox === "danger-full-access";
-}
-function resolveCodexAppServerNetworkProxy(config, sandbox) {
-	if (config?.enabled !== true) return {};
-	const fileSystemMode = config.baseProfile === "read-only" || !config.baseProfile && sandbox === "read-only" ? "read" : "write";
-	const networkConfig = removeUndefinedJsonFields({
-		enabled: true,
-		mode: config.mode,
-		domains: normalizeNetworkProxyPermissionMap(config.domains),
-		unix_sockets: normalizeNetworkProxyPermissionMap(config.unixSockets),
-		proxy_url: readNonEmptyString(config.proxyUrl),
-		socks_url: readNonEmptyString(config.socksUrl),
-		enable_socks5: config.enableSocks5,
-		enable_socks5_udp: config.enableSocks5Udp,
-		allow_upstream_proxy: config.allowUpstreamProxy,
-		allow_local_binding: config.allowLocalBinding,
-		dangerously_allow_non_loopback_proxy: config.dangerouslyAllowNonLoopbackProxy,
-		dangerously_allow_all_unix_sockets: config.dangerouslyAllowAllUnixSockets
-	});
-	const profile = {
-		filesystem: {
-			":minimal": "read",
-			":project_roots": { ".": fileSystemMode }
-		},
-		network: networkConfig
-	};
-	const profileName = resolveNetworkProxyPermissionProfileName(config, profile);
-	const configPatch = {
-		"features.network_proxy.enabled": true,
-		default_permissions: profileName,
-		permissions: { [profileName]: profile }
-	};
-	return { networkProxy: {
-		profileName,
-		configFingerprint: fingerprintCodexAppServerNetworkProxyConfigPatch(configPatch),
-		configPatch
-	} };
-}
-function resolveNetworkProxyPermissionProfileName(config, profile) {
-	const explicitProfileName = readNonEmptyString(config.profileName);
-	if (explicitProfileName) return explicitProfileName;
-	const suffix = createHash("sha256").update(stableStringifyJson({
-		version: 1,
-		profile
-	})).digest("hex").slice(0, 16);
-	return `${DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX}-${suffix}`;
-}
-function fingerprintCodexAppServerNetworkProxyConfigPatch(configPatch) {
-	return createHash("sha256").update(stableStringifyJson(configPatch)).digest("hex");
-}
-function normalizeNetworkProxyPermissionMap(value) {
-	const entries = Object.entries(value ?? {}).map(([key, permission]) => [key.trim(), permission]).filter(([key]) => key.length > 0);
-	return entries.length > 0 ? Object.fromEntries(entries) : void 0;
-}
-function removeUndefinedJsonFields(value) {
-	return Object.fromEntries(Object.entries(value).filter((entry) => entry[1] !== void 0));
-}
-function stableStringifyJson(value) {
-	if (Array.isArray(value)) return `[${value.map((item) => stableStringifyJson(item)).join(",")}]`;
-	if (value && typeof value === "object") return `{${Object.entries(value).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableStringifyJson(item)}`).join(",")}}`;
-	return JSON.stringify(value);
-}
-/** Explicit MCP prompting must bypass Codex's unconditional Never-policy approval. */
-function hasCodexMcpToolApprovalOverrides(servers, serverNames, projectedMcpServers) {
-	const modes = new Map(Object.entries(projectedMcpServers ?? {}).map(([name, server]) => [name, server.default_tools_approval_mode]));
-	for (const name of serverNames ?? Object.keys(servers ?? {})) {
-		const server = servers?.[name];
-		const mode = server?.codex?.defaultToolsApprovalMode;
-		if (mode !== void 0 && (serverNames !== void 0 || server?.enabled !== false)) modes.set(name, mode);
-	}
-	return [...modes.values()].some((mode) => mode === "auto" || mode === "prompt");
-}
-function withMcpElicitationsApprovalPolicy(policy) {
-	if (policy === "untrusted") return policy;
-	if (typeof policy !== "string") return { granular: {
-		...policy.granular,
-		mcp_elicitations: true
-	} };
-	if (policy === "never") return { granular: {
-		mcp_elicitations: true,
-		rules: false,
-		sandbox_approval: false,
-		request_permissions: false,
-		skill_approval: false
-	} };
-	return { granular: {
-		mcp_elicitations: true,
-		rules: true,
-		sandbox_approval: true,
-		request_permissions: true,
-		skill_approval: true
-	} };
-}
-function resolveTransport(value) {
-	return value === "websocket" || value === "unix" ? value : "stdio";
-}
-function normalizeRemoteWorkspaceRoot(value) {
-	return readNonEmptyString(value);
-}
-function inferCodexAppServerConnectionClass(params) {
-	if (params.transport !== "websocket") return "local-loopback";
-	return params.url && isLoopbackWebSocketUrl(params.url) ? "local-loopback" : "remote";
-}
-function assertCodexAppServerConnectionClassConfig(params) {
-	if (params.connectionClass === "remote" && !hasIdentityBearingWebSocketAuth({
-		authToken: params.authToken,
-		headers: params.headers
-	})) throw new Error("remote Codex app-server WebSocket URLs require appServer.authToken or an Authorization header");
-}
-/** Applies the canonical remote-auth boundary to any Codex AppServer transport. */
-function assertCodexAppServerConnectionSecurity(params) {
-	assertCodexAppServerConnectionClassConfig({
-		connectionClass: inferCodexAppServerConnectionClass(params),
-		authToken: params.authToken,
-		headers: params.headers
-	});
-}
-function isLoopbackWebSocketUrl(value) {
-	let parsed;
-	try {
-		parsed = new URL(value);
-	} catch {
-		return false;
-	}
-	if (parsed.protocol !== "ws:" && parsed.protocol !== "wss:") return false;
-	return isLoopbackHost(parsed.hostname);
-}
-function hasIdentityBearingWebSocketAuth(params) {
-	if (readNonEmptyString(params.authToken)) return true;
-	return Object.entries(params.headers).some(([key, value]) => key.trim().toLowerCase() === "authorization" && Boolean(readNonEmptyString(value)));
-}
-function resolvePolicyMode(value) {
-	return value === "guardian" || value === "yolo" ? value : void 0;
-}
-function resolveDefaultCodexAppServerPolicy(params) {
-	if (params.transport !== "stdio") return {
-		mode: "yolo",
-		dangerFullAccessAllowed: true
-	};
-	const content = readCodexRequirementsToml(params);
-	if (content === void 0) {
-		if (!params.forceGuardian) return {
-			mode: "yolo",
-			dangerFullAccessAllowed: true
-		};
-		return {
-			mode: "guardian",
-			dangerFullAccessAllowed: true,
-			approvalPolicy: selectGuardianApprovalPolicy(void 0, params.execModeRequiringPromptingApprovals),
-			approvalsReviewer: params.forceUserReviewer ? selectUserApprovalsReviewer(void 0, params.execModeRequiringUserReviewer) : selectGuardianApprovalsReviewer(void 0, params.execModeRequiringPromptingApprovals === "auto" ? "auto" : void 0),
-			sandbox: selectGuardianSandbox(void 0)
-		};
-	}
-	const allowedSandboxModes = parseAllowedSandboxModesFromCodexRequirements(content, readNonEmptyString(params.hostName) ?? hostname());
-	const allowedApprovalPolicies = parseAllowedApprovalPoliciesFromCodexRequirements(content);
-	const allowedApprovalsReviewers = parseAllowedApprovalsReviewersFromCodexRequirements(content);
-	const yoloSandboxAllowed = allowedSandboxModes === void 0 || allowedSandboxModes.has("danger-full-access");
-	const yoloApprovalAllowed = allowedApprovalPolicies === void 0 || allowedApprovalPolicies.has("never") && !allowedApprovalPolicies.has("untrusted");
-	const yoloReviewerAllowed = allowedApprovalsReviewers === void 0 || allowedApprovalsReviewers.has("user");
-	if (!params.forceGuardian && yoloSandboxAllowed && yoloApprovalAllowed && yoloReviewerAllowed) return {
-		mode: "yolo",
-		dangerFullAccessAllowed: true
-	};
-	return {
-		mode: "guardian",
-		dangerFullAccessAllowed: yoloSandboxAllowed,
-		approvalPolicy: selectGuardianApprovalPolicy(allowedApprovalPolicies, params.execModeRequiringPromptingApprovals),
-		approvalsReviewer: params.forceUserReviewer ? selectUserApprovalsReviewer(allowedApprovalsReviewers, params.execModeRequiringUserReviewer) : selectGuardianApprovalsReviewer(allowedApprovalsReviewers, params.execModeRequiringPromptingApprovals === "auto" ? "auto" : void 0),
-		sandbox: selectGuardianSandbox(allowedSandboxModes)
-	};
-}
-//#endregion
 //#region extensions/codex/src/app-server/config-options.ts
 /**
 * Sole owner of the app-server home-scope decision. Ordinary harness connections
@@ -776,7 +375,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			env
 		});
 		const managedCommandOrder = params.managedCommandOrder ?? (homeScope === "user" || computerUseConfig.enabled ? "desktop-first" : "package-first");
-		const includeManagedCommandOrder = commandSource === "managed" && (managedCommandOrder === "desktop-first" || params.managedCommandOrder === "package-first");
+		const includeManagedCommandOrder = commandSource === "managed" && (managedCommandOrder === "desktop-first" || params.managedCommandOrder !== void 0);
 		const managedComputerUsePluginNames = [.../* @__PURE__ */ new Set([DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, computerUseConfig.pluginName])];
 		return {
 			start: {
@@ -845,8 +444,10 @@ function resolveCodexAppServerStartOptionsForAgent(params) {
 		...startOptions,
 		managedCommandOrder: "desktop-first"
 	};
+	if (!params.agentDir) throw new Error("Agent-scoped Codex requires an OpenClaw agent directory");
 	return codexConfigEnablesNativeComputerUse({
 		agentDir: params.agentDir,
+		codexHome: startOptions.codexHome,
 		codexConfigToml: params.codexConfigToml,
 		env: params.env,
 		homeScope: "agent",
@@ -910,7 +511,10 @@ function codexAppServerStartOptionsKey(options, params = {}) {
 		url: options.url ?? null,
 		authToken: hashSecretForKey(options.authToken, "authToken"),
 		headers: Object.entries(options.headers).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `header:${key}`)]),
-		env: Object.entries(options.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `env:${key}`)]),
+		env: Object.entries({
+			...options.env,
+			...options.codexHome ? { CODEX_HOME: options.codexHome } : {}
+		}).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `env:${key}`)]),
 		clearEnv: [...options.clearEnv ?? []].toSorted(),
 		authProfileId: params.authProfileId ?? null,
 		authBindingFingerprint: params.authBindingFingerprint ?? null,
@@ -952,4 +556,4 @@ function codexSandboxPolicyForTurn(mode, cwd, nativeArgs = []) {
 	};
 }
 //#endregion
-export { selectUserApprovalsReviewer as C, selectGuardianApprovalsReviewer as S, parseAllowedApprovalPoliciesFromCodexRequirements as _, resolveCodexAppServerStartOptionsForAgent as a, readCodexRequirementsToml as b, hasCodexMcpToolApprovalOverrides as c, withMcpElicitationsApprovalPolicy as d, assertCodexModelBackedReviewerEffectiveConfig as f, readCodexEffectiveConfig as g, CODEX_SESSION_OVERRIDABLE_LAYER_TYPES as h, resolveCodexAppServerHomeScope as i, resolveCodexAppServerNetworkProxy as l, resolveCodexModelBackedReviewerPolicyContext as m, codexSandboxPolicyForTurn as n, resolveCodexComputerUseConfig as o, canUseCodexModelBackedApprovalsReviewerForModel as p, createCodexAppServerConfig as r, assertCodexAppServerConnectionSecurity as s, codexAppServerStartOptionsKey as t, shouldAutoApproveCodexAppServerApprovals as u, parseAllowedApprovalsReviewersFromCodexRequirements as v, selectGuardianSandbox as w, selectGuardianApprovalPolicy as x, parseAllowedSandboxModesFromCodexRequirements as y };
+export { resolveCodexAppServerStartOptionsForAgent as a, canUseCodexModelBackedApprovalsReviewerForModel as c, readCodexEffectiveConfig as d, resolveCodexAppServerHomeScope as i, resolveCodexModelBackedReviewerPolicyContext as l, codexSandboxPolicyForTurn as n, resolveCodexComputerUseConfig as o, createCodexAppServerConfig as r, assertCodexModelBackedReviewerEffectiveConfig as s, codexAppServerStartOptionsKey as t, CODEX_SESSION_OVERRIDABLE_LAYER_TYPES as u };