@openclaw/codex 2026.9.5 → 2026.9.7

package/dist/.setup/native-subagent-task-ids-DsuOonKv.mjs

@@ -1,411 +0,0 @@
-import { m as isJsonObject } from "./config-security-BRQ2mgW9.mjs";
-import { C as readNonEmptyString, _ as normalizeOptionalString$1, c as itemName, l as itemStatus, m as shouldSynthesizeToolProgressForItem, w as readNonEmptyStringArray } from "./event-projector-items-DyTQ_XqL.mjs";
-import { asNonArrayRecord, normalizeOptionalString, readStringField } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { formatToolAggregate, formatToolProgressOutput, inferToolMetaFromArgs } from "openclaw/plugin-sdk/agent-harness-runtime";
-import { redactSensitiveFieldValue, redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
-//#region extensions/codex/src/app-server/event-projector-tool-output.ts
-const TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS = 1e4;
-const TOOL_PROGRESS_ECHO_PREFIX_MIN_CHARS = 1024;
-const TOOL_OUTPUT_TRUNCATION_NOTICE_PREFIX = "...(OpenClaw truncated Codex native tool output";
-var ToolOutputAccumulator = class {
-	constructor() {
-		this.prefixByItem = /* @__PURE__ */ new Map();
-		this.originalLengthByItem = /* @__PURE__ */ new Map();
-		this.trimStateByItem = /* @__PURE__ */ new Map();
-		this.truncatedItemIds = /* @__PURE__ */ new Set();
-		this.textByItem = /* @__PURE__ */ new Map();
-	}
-	append(itemId, delta) {
-		const originalLength = (this.originalLengthByItem.get(itemId) ?? this.textByItem.get(itemId)?.length ?? 0) + delta.length;
-		this.originalLengthByItem.set(itemId, originalLength);
-		const normalizedLength = updateToolOutputTrimState(this.trimStateByItem, itemId, delta);
-		const next = appendBoundedToolTranscriptText(this.prefixByItem.get(itemId) ?? this.textByItem.get(itemId) ?? "", this.truncatedItemIds.has(itemId) ? "" : delta, originalLength);
-		this.prefixByItem.set(itemId, next.rawPrefix);
-		this.textByItem.set(itemId, next.text);
-		if (originalLength > 1e4) this.truncatedItemIds.add(itemId);
-		return {
-			text: next.text,
-			originalLength,
-			normalizedLength,
-			rawPrefix: next.rawPrefix
-		};
-	}
-};
-function updateToolOutputTrimState(trimStateByItem, itemId, delta) {
-	const state = trimStateByItem.get(itemId) ?? {
-		totalLength: 0,
-		leadingWhitespaceLength: 0,
-		trailingWhitespaceLength: 0,
-		sawNonWhitespace: false
-	};
-	state.totalLength += delta.length;
-	const firstNonWhitespace = delta.search(/\S/u);
-	if (firstNonWhitespace === -1) {
-		if (!state.sawNonWhitespace) state.leadingWhitespaceLength += delta.length;
-		state.trailingWhitespaceLength += delta.length;
-		trimStateByItem.set(itemId, state);
-		return state.sawNonWhitespace ? state.totalLength - state.leadingWhitespaceLength - state.trailingWhitespaceLength : 0;
-	}
-	if (!state.sawNonWhitespace) {
-		state.leadingWhitespaceLength += firstNonWhitespace;
-		state.sawNonWhitespace = true;
-	}
-	state.trailingWhitespaceLength = delta.match(/\s*$/u)?.[0].length ?? 0;
-	trimStateByItem.set(itemId, state);
-	return state.totalLength - state.leadingWhitespaceLength - state.trailingWhitespaceLength;
-}
-function toolOutputRawEchoSignature(text) {
-	const trimmed = text.trim();
-	if (!trimmed) return;
-	return {
-		rawLength: trimmed.length,
-		rawPrefix: trimmed.slice(0, TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS)
-	};
-}
-function normalizeToolTranscriptArguments(value) {
-	return asNonArrayRecord(value);
-}
-function collectDynamicToolContentText(contentItems) {
-	if (!Array.isArray(contentItems)) return "";
-	return contentItems.flatMap((entry) => {
-		if (!isJsonObject(entry)) return [];
-		const text = readStringField(entry, "text");
-		return text ? [text] : [];
-	}).join("\n");
-}
-function appendBoundedToolTranscriptText(currentPrefix, delta, originalLength) {
-	if (originalLength <= 1e4) {
-		const rawPrefix = currentPrefix + delta;
-		return {
-			text: rawPrefix,
-			rawPrefix
-		};
-	}
-	const notice = toolTranscriptTruncationNotice(originalLength);
-	if (notice.length >= 1e4) return {
-		text: notice.slice(0, TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS),
-		rawPrefix: ""
-	};
-	const textBudget = TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS - notice.length;
-	const remaining = Math.max(0, textBudget - currentPrefix.length);
-	const prefix = remaining > 0 ? `${currentPrefix}${truncateUtf16Safe(delta, remaining)}` : currentPrefix;
-	const rawPrefix = truncateUtf16Safe(prefix, textBudget);
-	return {
-		text: `${rawPrefix}${notice}`,
-		rawPrefix
-	};
-}
-function toolTranscriptTruncationNotice(originalLength) {
-	return `\n${`${TOOL_OUTPUT_TRUNCATION_NOTICE_PREFIX}: original ${originalLength} chars, showing ${TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS}; rerun with narrower args.)`}`;
-}
-function truncateToolTranscriptText(text, originalLength = text.length) {
-	if (originalLength <= 1e4 && text.length <= 1e4) return text;
-	const notice = toolTranscriptTruncationNotice(originalLength);
-	if (notice.length >= 1e4) return notice.slice(1, 10001);
-	const textBudget = TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS - notice.length;
-	return `${truncateUtf16Safe(text, textBudget)}${notice}`;
-}
-function formatToolSummary(toolName, meta) {
-	const trimmedMeta = meta?.trim();
-	return formatToolAggregate(toolName, trimmedMeta ? [trimmedMeta] : void 0, { markdown: true });
-}
-function formatToolOutput(toolName, meta, output) {
-	const formattedOutput = formatToolProgressOutput(output);
-	if (!formattedOutput) return formatToolSummary(toolName, meta);
-	const fence = markdownFenceForText(formattedOutput);
-	return `${formatToolSummary(toolName, meta)}\n${fence}txt\n${formattedOutput}\n${fence}`;
-}
-function markdownFenceForText(text) {
-	return "`".repeat(Math.max(3, longestBacktickRun(text) + 1));
-}
-function longestBacktickRun(value) {
-	let longest = 0;
-	let current = 0;
-	for (const char of value) {
-		if (char === "`") {
-			current += 1;
-			longest = Math.max(longest, current);
-			continue;
-		}
-		current = 0;
-	}
-	return longest;
-}
-//#endregion
-//#region extensions/codex/src/app-server/tool-progress-normalization.ts
-/**
-* Normalizes and sanitizes Codex dynamic-tool progress payloads before they are
-* emitted into OpenClaw events or logs.
-*/
-/** Maps OpenClaw tool-progress config to the mode used by Codex progress metadata. */
-function resolveCodexToolProgressDetailMode(value) {
-	return value === "raw" ? "raw" : "explain";
-}
-function isCodexCommandBearingToolCall(name, args) {
-	const normalizedName = name?.trim().toLowerCase();
-	return normalizedName === "exec" || normalizedName === "bash" || normalizedName === "shell" || typeof args?.command === "string" && args.command.trim().length > 0;
-}
-/** Recursively redacts sensitive strings and handles circular values in event payloads. */
-function sanitizeCodexAgentEventValue(value, seen = /* @__PURE__ */ new WeakSet()) {
-	if (typeof value === "string") return redactToolPayloadText(value);
-	if (Array.isArray(value)) {
-		if (seen.has(value)) return "[Circular]";
-		seen.add(value);
-		return value.map((entry) => sanitizeCodexAgentEventValue(entry, seen));
-	}
-	if (value && typeof value === "object") {
-		if (seen.has(value)) return "[Circular]";
-		seen.add(value);
-		const out = {};
-		for (const [key, child] of Object.entries(value)) out[key] = typeof child === "string" ? redactSensitiveFieldValue(key, child) : sanitizeCodexAgentEventValue(child, seen);
-		return out;
-	}
-	return value;
-}
-/** Sanitizes a record-shaped Codex agent event payload. */
-function sanitizeCodexAgentEventRecord(value) {
-	return sanitizeCodexAgentEventValue(value);
-}
-/** Sanitizes dynamic-tool arguments before diagnostic/event emission. */
-function sanitizeCodexToolArguments(value) {
-	if (!isJsonObject(value)) return;
-	return sanitizeCodexAgentEventRecord(value);
-}
-/** Sanitizes a Codex dynamic-tool response before diagnostic/event emission. */
-function sanitizeCodexToolResponse(response) {
-	return sanitizeCodexAgentEventRecord({ ...response });
-}
-/** Infers compact human-readable tool metadata from Codex dynamic-tool arguments. */
-function inferCodexDynamicToolMeta(call, detailMode) {
-	return inferToolMetaFromArgs(call.tool, call.arguments, { detailMode });
-}
-//#endregion
-//#region extensions/codex/src/app-server/event-projector-tool-items.ts
-function isNativePostToolUseRelayItem(item) {
-	switch (item.type) {
-		case "commandExecution":
-		case "fileChange":
-		case "mcpToolCall": return true;
-		default: return false;
-	}
-}
-function shouldSuppressChannelProgressForItem(item) {
-	if (shouldSynthesizeToolProgressForItem(item)) return true;
-	return item.type === "dynamicToolCall";
-}
-function itemToolArgs(item) {
-	if (item.type === "commandExecution") return sanitizeCodexAgentEventRecord({
-		command: item.command,
-		...typeof item.cwd === "string" ? { cwd: item.cwd } : {}
-	});
-	if (item.type === "fileChange") return sanitizeCodexAgentEventRecord({ changes: itemFileChangesForTranscript(item) });
-	if (item.type === "webSearch") return webSearchToolArgs(item);
-	if (item.type === "dynamicToolCall" || item.type === "mcpToolCall") return sanitizeCodexToolArguments(item.arguments);
-}
-function isCommandBearingToolItem(item, args) {
-	if (item.type === "commandExecution") return true;
-	return typeof args?.command === "string" && args.command.trim().length > 0;
-}
-function webSearchToolArgs(item) {
-	const action = isJsonObject(item.action) ? item.action : void 0;
-	const actionType = action ? readNonEmptyString(action, "type") : void 0;
-	const queries = action && actionType === "search" ? readNonEmptyStringArray(action, "queries") : [];
-	const query = normalizeOptionalString$1(item.query) ?? (action && actionType === "search" ? readNonEmptyString(action, "query") : void 0) ?? queries[0];
-	const url = action ? readNonEmptyString(action, "url") : void 0;
-	const pattern = action ? readNonEmptyString(action, "pattern") : void 0;
-	const args = {};
-	if (query) args.query = query;
-	if (queries.length > 0) args.queries = queries;
-	if (actionType && actionType !== "search") args.action = actionType;
-	if (url) args.url = url;
-	if (pattern) args.pattern = pattern;
-	if (!query && !url && !pattern) args.queryUnavailable = true;
-	return sanitizeCodexAgentEventRecord(args);
-}
-function itemToolResult(item) {
-	if (item.type === "commandExecution") return { result: sanitizeCodexAgentEventRecord({
-		status: item.status,
-		exitCode: item.exitCode,
-		durationMs: item.durationMs
-	}) };
-	if (item.type === "fileChange") return { result: sanitizeCodexAgentEventRecord({
-		status: item.status,
-		changes: itemFileChanges(item)
-	}) };
-	if (item.type === "mcpToolCall") return { result: sanitizeCodexAgentEventRecord({
-		status: item.status,
-		durationMs: item.durationMs,
-		...item.error ? { error: item.error } : {},
-		...item.result ? { result: item.result } : {}
-	}) };
-	if (item.type === "webSearch") return { result: webSearchToolResult(item) };
-	return {};
-}
-function webSearchToolResult(item) {
-	return sanitizeCodexAgentEventRecord({
-		status: itemStatus(item),
-		...typeof item.durationMs === "number" ? { durationMs: item.durationMs } : {},
-		...webSearchToolArgs(item)
-	});
-}
-function itemFileChangeRecords(item) {
-	const changes = item.changes;
-	return Array.isArray(changes) ? changes.filter(isJsonObject) : [];
-}
-function itemFileChanges(item) {
-	return itemFileChangeRecords(item).flatMap((change) => {
-		const path = normalizeOptionalString$1(change.path);
-		if (!path || change.kind === void 0) return [];
-		return [{
-			path,
-			kind: change.kind
-		}];
-	});
-}
-function fileChangeKindType(kind) {
-	if (typeof kind === "string") return kind;
-	return isJsonObject(kind) ? normalizeOptionalString$1(kind.type) : void 0;
-}
-function countFileContentLines(content) {
-	if (!content) return 0;
-	const lines = content.replace(/\r\n/g, "\n").replace(/\r/g, "\n").split("\n");
-	if (lines.length > 1 && lines.at(-1) === "") lines.pop();
-	return lines.length;
-}
-function fileChangeDiffStat(diff, kind) {
-	const kindType = fileChangeKindType(kind);
-	if (kindType === "add") return {
-		added: countFileContentLines(diff),
-		removed: 0
-	};
-	if (kindType === "delete") return {
-		added: 0,
-		removed: countFileContentLines(diff)
-	};
-	let added = 0;
-	let removed = 0;
-	let inHunk = false;
-	for (const line of diff.replace(/\r\n/g, "\n").replace(/\r/g, "\n").split("\n")) {
-		if (line.startsWith("@@")) {
-			inHunk = true;
-			continue;
-		}
-		if (!inHunk) continue;
-		if (line.startsWith("+")) added += 1;
-		else if (line.startsWith("-")) removed += 1;
-	}
-	return {
-		added,
-		removed
-	};
-}
-function truncateFileChangeDiffAtLineBoundary(diff, maxChars) {
-	if (diff.length <= maxChars) return { diff };
-	if (maxChars <= 0) return { diffTruncated: true };
-	const boundary = diff.lastIndexOf("\n", maxChars - 1);
-	return boundary >= 0 ? {
-		diff: diff.slice(0, boundary + 1),
-		diffTruncated: true
-	} : { diffTruncated: true };
-}
-function itemFileChangesForTranscript(item) {
-	let remainingDiffChars = 1e4;
-	return itemFileChangeRecords(item).flatMap((change) => {
-		const path = normalizeOptionalString$1(change.path);
-		if (!path || change.kind === void 0) return [];
-		const result = {
-			path,
-			kind: change.kind
-		};
-		if (typeof change.diff !== "string") return [result];
-		result.stat = fileChangeDiffStat(change.diff, change.kind);
-		const bounded = truncateFileChangeDiffAtLineBoundary(change.diff, remainingDiffChars);
-		if (bounded.diff !== void 0) {
-			result.diff = bounded.diff;
-			remainingDiffChars -= bounded.diff.length;
-		}
-		if (bounded.diffTruncated) result.diffTruncated = true;
-		return [result];
-	});
-}
-function itemToolError(item, status, outputTextByItem) {
-	if (status === "blocked") return "codex native tool blocked";
-	if (status !== "failed") return;
-	return itemOutputText(item, outputTextByItem) ?? "codex native tool failed";
-}
-function itemMeta(item, detailMode = "explain") {
-	if (item.type === "commandExecution" && typeof item.command === "string") return inferToolMetaFromArgs("exec", {
-		command: item.command,
-		cwd: typeof item.cwd === "string" ? item.cwd : void 0
-	}, { detailMode });
-	if (item.type === "webSearch") return inferToolMetaFromArgs("web_search", webSearchToolArgs(item), { detailMode });
-	const toolName = itemName(item);
-	if ((item.type === "dynamicToolCall" || item.type === "mcpToolCall") && toolName) return inferToolMetaFromArgs(toolName, item.arguments, { detailMode });
-}
-function itemOutputText(item, outputTextByItem) {
-	if (item.type === "commandExecution") {
-		const output = item.aggregatedOutput?.trim() || outputTextByItem?.get(item.id)?.trim();
-		return output ? truncateToolTranscriptText(output) : void 0;
-	}
-	if (item.type === "dynamicToolCall") {
-		const output = collectDynamicToolContentText(item.contentItems).trim();
-		return output ? truncateToolTranscriptText(output) : void 0;
-	}
-	if (item.type === "mcpToolCall") {
-		const output = item.error ? stringifyJsonValue(item.error) : item.result ? stringifyJsonValue(item.result) : void 0;
-		return output ? truncateToolTranscriptText(output) : void 0;
-	}
-}
-function itemTranscriptResultText(item, outputTextByItem) {
-	const output = itemOutputText(item, outputTextByItem);
-	if (output) return output;
-	const result = itemToolResult(item).result;
-	const resultText = result ? stringifyJsonValue(result) : void 0;
-	return resultText ? truncateToolTranscriptText(resultText) : itemStatus(item);
-}
-function stringifyJsonValue(value) {
-	try {
-		return JSON.stringify(value, null, 2);
-	} catch {
-		return;
-	}
-}
-//#endregion
-//#region extensions/codex/src/app-server/native-subagent-task-ids.ts
-/** Task runtime namespace for Codex native subagent task rows. */
-const CODEX_NATIVE_SUBAGENT_RUNTIME = "subagent";
-/** Task kind used to distinguish native Codex subagents from other subagent runtimes. */
-const CODEX_NATIVE_SUBAGENT_TASK_KIND = "codex-native";
-/** Run id prefix for task rows keyed by Codex child thread ids. */
-const CODEX_NATIVE_SUBAGENT_RUN_ID_PREFIX = "codex-thread:";
-/** Initial tasks keep their shipped locator; later assignments belong to a native turn. */
-function codexNativeSubagentRunId(threadId, turnId) {
-	return `${CODEX_NATIVE_SUBAGENT_RUN_ID_PREFIX}${threadId.trim()}${turnId ? `:turn:${turnId}` : ""}`;
-}
-function readCodexNativeSubagentRunId(runId) {
-	if (!runId?.startsWith("codex-thread:")) return;
-	const [threadId, turnId] = runId.slice(13).split(":turn:");
-	return threadId?.trim() ? {
-		threadId,
-		...turnId ? { turnId } : {}
-	} : void 0;
-}
-function readNativeTaskAssignment(task) {
-	const runId = task.runId;
-	const identity = readCodexNativeSubagentRunId(runId);
-	if (!runId || !identity) return;
-	const storedTurnId = isJsonObject(task.detail) ? normalizeOptionalString(readStringField(task.detail, "nativeTurnId")) : void 0;
-	return {
-		runId,
-		childThreadId: identity.threadId,
-		nativeTurnId: storedTurnId ?? identity.turnId,
-		initialTurnId: identity.turnId
-	};
-}
-function readNativeSubagentThreadIds(value) {
-	if (!Array.isArray(value)) return [];
-	return value.filter((entry) => typeof entry === "string" && entry.trim() !== "");
-}
-//#endregion
-export { truncateToolTranscriptText as A, TOOL_TRANSCRIPT_OUTPUT_MAX_CHARS as C, formatToolSummary as D, formatToolOutput as E, normalizeToolTranscriptArguments as O, TOOL_PROGRESS_ECHO_PREFIX_MIN_CHARS as S, collectDynamicToolContentText as T, inferCodexDynamicToolMeta as _, readCodexNativeSubagentRunId as a, sanitizeCodexToolArguments as b, isCommandBearingToolItem as c, itemOutputText as d, itemToolArgs as f, shouldSuppressChannelProgressForItem as g, itemTranscriptResultText as h, codexNativeSubagentRunId as i, toolOutputRawEchoSignature as k, isNativePostToolUseRelayItem as l, itemToolResult as m, CODEX_NATIVE_SUBAGENT_RUN_ID_PREFIX as n, readNativeSubagentThreadIds as o, itemToolError as p, CODEX_NATIVE_SUBAGENT_TASK_KIND as r, readNativeTaskAssignment as s, CODEX_NATIVE_SUBAGENT_RUNTIME as t, itemMeta as u, isCodexCommandBearingToolCall as v, ToolOutputAccumulator as w, sanitizeCodexToolResponse as x, resolveCodexToolProgressDetailMode as y };

package/dist/.setup/node-exec-server.runtime-BaViBKNz.mjs

@@ -1,226 +0,0 @@
-import { i as resolveManagedCodexNativeCommand, r as resolveManagedCodexAppServerStartOptions, t as isManagedCodexDesktopCommand } from "./managed-binary-DP6Rib3P.mjs";
-import { i as closeCodexAppServerTransportAndWait, t as createStdioTransport } from "./transport-stdio-Cmx94Oiy.mjs";
-import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { stripVTControlCharacters } from "node:util";
-import { killProcessTree } from "openclaw/plugin-sdk/process-runtime";
-import path from "node:path";
-import { mkdir } from "node:fs/promises";
-import { once } from "node:events";
-import { resolvePreferredOpenClawTmpDir, withTempWorkspace } from "openclaw/plugin-sdk/temp-path";
-import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
-import { StringDecoder } from "node:string_decoder";
-import { sanitizeEnvVars } from "openclaw/plugin-sdk/sandbox";
-//#region extensions/codex/src/node-exec-server.runtime.ts
-const MAX_CODEX_EXEC_SERVER_MESSAGE_BYTES = 67108864;
-const MAX_CODEX_EXEC_SERVER_STDERR_BYTES = 4096;
-const CODEX_EXEC_SERVER_READY_LINE = "codex_exec_server::server::transport: codex-exec-server listening on stdio";
-const CODEX_EXEC_SERVER_TERMINATION_GRACE_MS = 1e3;
-const CODEX_EXEC_SERVER_REAP_TIMEOUT_MS = 5e3;
-const NODE_EXEC_SERVER_PLATFORM_ENVIRONMENT = /^(?:SYSTEMROOT|WINDIR|COMSPEC|PATHEXT|TEMP|TMP|TMPDIR)$/iu;
-function validateNodeExecServerMessage(message) {
-	if (message.byteLength === 0 || message.byteLength > MAX_CODEX_EXEC_SERVER_MESSAGE_BYTES) throw new Error("Codex exec-server JSON-RPC message exceeds its 64 MiB limit.");
-	const encoded = Buffer.from(message.buffer, message.byteOffset, message.byteLength);
-	if (encoded.includes(10) || encoded.includes(13)) throw new Error("Codex exec-server JSON-RPC frames must contain exactly one message.");
-	let decoded;
-	try {
-		const text = new TextDecoder("utf-8", { fatal: true }).decode(encoded);
-		decoded = JSON.parse(text);
-	} catch {
-		throw new Error("Codex exec-server received malformed UTF-8 or JSON-RPC.");
-	}
-	if (!isRecord(decoded) || decoded.jsonrpc !== void 0 && decoded.jsonrpc !== "2.0" || typeof decoded.method !== "string" && !("id" in decoded && ("result" in decoded || "error" in decoded))) throw new Error("Codex exec-server received an invalid JSON-RPC message.");
-	return encoded;
-}
-function nodeExecServerAbortError(signal) {
-	return signal.reason instanceof Error ? signal.reason : /* @__PURE__ */ new Error("Codex node exec-server connection closed.");
-}
-function writeNodeExecServerMessage(child, message, signal) {
-	if (signal.aborted) throw nodeExecServerAbortError(signal);
-	const payload = Buffer.concat([message, Buffer.from("\n")]);
-	if (!child.stdin.write(payload)) return once(child.stdin, "drain", { signal }).then(() => void 0);
-}
-async function relayNodeExecServerOutput(child, send) {
-	let fragments = [];
-	let pendingBytes = 0;
-	for await (const rawChunk of child.stdout) {
-		const chunk = Buffer.isBuffer(rawChunk) ? rawChunk : Buffer.from(rawChunk);
-		let offset = 0;
-		while (offset < chunk.byteLength) {
-			const newline = chunk.indexOf(10, offset);
-			const fragment = chunk.subarray(offset, newline === -1 ? chunk.byteLength : newline);
-			const nextLength = pendingBytes + fragment.byteLength;
-			if (nextLength > 67108865) throw new Error("Codex exec-server stdout message exceeds its 64 MiB limit.");
-			if (fragment.byteLength > 0) fragments.push(fragment);
-			pendingBytes = nextLength;
-			if (newline === -1) {
-				if (pendingBytes > MAX_CODEX_EXEC_SERVER_MESSAGE_BYTES && fragment[fragment.byteLength - 1] !== 13) throw new Error("Codex exec-server stdout message exceeds its 64 MiB limit.");
-				break;
-			}
-			const trailing = fragments.at(-1);
-			if (trailing?.[trailing.byteLength - 1] === 13) {
-				pendingBytes -= 1;
-				if (trailing.byteLength === 1) fragments.pop();
-				else fragments[fragments.length - 1] = trailing.subarray(0, trailing.byteLength - 1);
-			}
-			const message = validateNodeExecServerMessage(fragments.length === 1 ? fragments[0] : Buffer.concat(fragments, pendingBytes));
-			fragments = [];
-			pendingBytes = 0;
-			await send(message);
-			offset = newline + 1;
-		}
-	}
-	if (pendingBytes > 0) throw new Error("Codex exec-server stdout ended with an unterminated JSON-RPC message.");
-}
-function createNodeExecServerProcessOwner(child, closed) {
-	let termination;
-	return { terminate: () => termination ??= (async () => {
-		if (process.platform === "win32" && child.pid) killProcessTree(child.pid, { graceMs: CODEX_EXEC_SERVER_TERMINATION_GRACE_MS });
-		const { exited } = await closeCodexAppServerTransportAndWait(child, {
-			forceKillDelayMs: CODEX_EXEC_SERVER_TERMINATION_GRACE_MS,
-			exitTimeoutMs: CODEX_EXEC_SERVER_REAP_TIMEOUT_MS
-		});
-		if (!exited) throw new Error("Codex node exec-server process tree did not terminate.");
-		await closed;
-	})() };
-}
-/** Runs the one-connection paired-node exec-server after lightweight command admission. */
-async function runCodexNodeExecServer(params) {
-	const { io } = params;
-	const frames = io.frames;
-	if (!frames) throw new Error("Codex node exec-server requires duplex frames.");
-	const cwd = params.workspaceDir;
-	let writes;
-	let rejectDisconnected;
-	const disconnected = new Promise((_resolve, reject) => {
-		rejectDisconnected = reject;
-	});
-	disconnected.catch(() => {});
-	const onAbort = () => {
-		const error = nodeExecServerAbortError(io.signal);
-		rejectDisconnected(error);
-	};
-	io.signal.addEventListener("abort", onAbort, { once: true });
-	try {
-		if (io.signal.aborted) throw nodeExecServerAbortError(io.signal);
-		return await withTempWorkspace({
-			rootDir: resolvePreferredOpenClawTmpDir(),
-			prefix: "codex-node-exec-server-"
-		}, async ({ dir }) => {
-			const codexHome = path.join(dir, ".codex");
-			await mkdir(codexHome, {
-				recursive: true,
-				mode: 448
-			});
-			const resolved = await resolveManagedCodexAppServerStartOptions({
-				transport: "stdio",
-				command: "codex",
-				commandSource: "managed",
-				managedCommandOrder: "package-first",
-				args: [
-					"exec-server",
-					"--listen",
-					"stdio"
-				],
-				headers: {}
-			});
-			const native = resolveManagedCodexNativeCommand(resolved.command);
-			if (!native || isManagedCodexDesktopCommand(resolved.command)) throw new Error("Codex node exec-server requires the pinned managed package binary.");
-			const baseEnv = sanitizeEnvVars(process.env, {
-				strictMode: true,
-				customAllowedPatterns: [NODE_EXEC_SERVER_PLATFORM_ENVIRONMENT]
-			}).allowed;
-			if (io.signal.aborted) throw nodeExecServerAbortError(io.signal);
-			params.assertExecAuthorized();
-			const nativeReady = createDeferred();
-			const exit = createDeferred();
-			let stderr = Buffer.alloc(0);
-			let startupSettled = false;
-			let pendingLine = "";
-			const decoder = new StringDecoder("utf8");
-			const child = await createStdioTransport({
-				transport: "stdio",
-				command: native,
-				commandSource: "resolved-managed",
-				args: resolved.args,
-				headers: {},
-				cwd,
-				env: {
-					HOME: params.homeDir ?? dir,
-					CODEX_HOME: codexHome,
-					RUST_LOG: "error,opentelemetry_sdk=off,opentelemetry_otlp=off,codex_exec_server::server::transport=info",
-					...process.platform === "win32" ? { USERPROFILE: params.homeDir ?? dir } : {}
-				},
-				clearEnv: ["NODE_OPTIONS"]
-			}, baseEnv, () => {
-				if (io.signal.aborted) throw nodeExecServerAbortError(io.signal);
-				params.assertExecAuthorized();
-			}, (spawned) => {
-				spawned.once("close", (code, signal) => exit.resolve({
-					code,
-					signal
-				}));
-				spawned.once("error", rejectDisconnected);
-				spawned.stdin.on("error", rejectDisconnected);
-				spawned.stderr.on("data", (chunk) => {
-					const next = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-					stderr = Buffer.concat([stderr, next.subarray(-4096)]).subarray(-4096);
-					if (startupSettled) return;
-					const lines = (pendingLine + decoder.write(next)).split("\n");
-					pendingLine = lines.pop();
-					for (const line of [...lines, pendingLine]) if (Buffer.byteLength(line, "utf8") > MAX_CODEX_EXEC_SERVER_STDERR_BYTES) {
-						startupSettled = true;
-						pendingLine = "";
-						rejectDisconnected(/* @__PURE__ */ new Error("Codex node startup diagnostic line exceeded 4 KiB."));
-						return;
-					}
-					if (lines.some((line) => stripVTControlCharacters(line).trimEnd().endsWith(CODEX_EXEC_SERVER_READY_LINE))) {
-						startupSettled = true;
-						pendingLine = "";
-						nativeReady.resolve();
-					}
-				});
-			});
-			const closed = exit.promise;
-			const stopped = closed.then((outcome) => {
-				const diagnostic = stderr.toString("utf8").trim();
-				throw new Error(`Codex node exec-server exited (code ${outcome.code ?? "none"}, signal ${outcome.signal ?? "none"})${diagnostic ? `: ${diagnostic}` : "."}`);
-			});
-			const owner = createNodeExecServerProcessOwner(child, closed);
-			params.activeProcesses.add(owner.terminate);
-			const output = relayNodeExecServerOutput(child, frames.send.bind(frames));
-			output.catch((error) => {
-				rejectDisconnected(error instanceof Error ? error : new Error(String(error)));
-			});
-			try {
-				await Promise.race([
-					nativeReady.promise,
-					stopped,
-					disconnected
-				]);
-				if (io.signal.aborted) throw nodeExecServerAbortError(io.signal);
-				if (child.exitCode !== null || child.signalCode !== null) await stopped;
-				params.assertExecAuthorized();
-				params.onFrameReceiver((message) => {
-					const encoded = validateNodeExecServerMessage(message);
-					const operation = writes ? writes.then(() => writeNodeExecServerMessage(child, encoded, io.signal)) : writeNodeExecServerMessage(child, encoded, io.signal);
-					if (!operation) return;
-					const observed = operation.catch(() => {});
-					writes = observed;
-					observed.then(() => {
-						if (writes === observed) writes = void 0;
-					});
-					return operation;
-				});
-				return await Promise.race([stopped, disconnected]);
-			} finally {
-				await owner.terminate();
-				params.activeProcesses.delete(owner.terminate);
-				await Promise.allSettled([output, ...writes ? [writes] : []]);
-			}
-		});
-	} finally {
-		io.signal.removeEventListener("abort", onAbort);
-	}
-}
-//#endregion
-export { runCodexNodeExecServer };