@openclaw/codex 2026.9.5 → 2026.9.7

package/dist/.setup/{config-CedDWjM-.mjs → config-DKhXquav.mjs}

@@ -1,8 +1,10 @@
-import { c as readExecAsk, f as readRecord, l as readExecSecurity } from "./config-utils-DujwEnhg.mjs";
-import "./config-security-BRQ2mgW9.mjs";
-import "./config-parsing-CcB9iPoq.mjs";
-import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-BsanJ8QG.mjs";
-import "./config-runtime-CeAhl_h4.mjs";
+import { a as readExecAsk, l as readRecord, o as readExecSecurity } from "./config-utils-D0CXecki.mjs";
+import "./config-security-CE-FcGw9.mjs";
+import "./config-parsing-b088LyhT.mjs";
+import "./auth-start-options-BPIPeEX8.mjs";
+import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-CzyWLTJt.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";
@@ -10,7 +12,10 @@ import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-alia
 //#region extensions/codex/src/app-server/config-exec-approvals.ts
 function resolveOpenClawExecPolicyFromConfig(params) {
 	const globalExec = readRecord(params.config?.tools?.exec);
-	const globalPolicy = applyOpenClawExecPolicyLayer(createDefaultOpenClawExecPolicy(), globalExec);
+	const globalPolicy = applyOpenClawExecPolicyLayer({
+		...resolveOpenClawExecPolicyForMode("full"),
+		touched: false
+	}, globalExec);
 	const agentId = params.agentId?.trim();
 	return applyOpenClawExecPolicyLayer(globalPolicy, agentId ? readRecord(resolveAgentConfig(params.config ?? {}, agentId)?.tools?.exec) : void 0);
 }
@@ -23,17 +28,14 @@ function resolveOpenClawExecPolicyForCodexAppServer(params) {
 		config: params.config,
 		agentId: params.agentId
 	}), params.execOverrides);
-	return applyOpenClawExecApprovalFloors(overridePolicy, resolveOpenClawExecApprovalFloorsForCodexAppServer({
-		approvals: params.approvals,
+	return applyOpenClawExecApprovalFloors(overridePolicy, params.approvals ? resolveExecApprovalsFromFile({
+		file: params.approvals,
 		agentId: params.agentId,
-		policy: overridePolicy
-	}));
-}
-function createDefaultOpenClawExecPolicy() {
-	return {
-		...resolveOpenClawExecPolicyForMode("full"),
-		touched: false
-	};
+		overrides: {
+			security: overridePolicy.security,
+			ask: overridePolicy.ask
+		}
+	}).agent : void 0);
 }
 function applyOpenClawExecPolicyLayer(base, exec) {
 	if (!exec) return base;
@@ -57,17 +59,6 @@ function applyOpenClawExecPolicyLayer(base, exec) {
 		touched: true
 	};
 }
-function resolveOpenClawExecApprovalFloorsForCodexAppServer(params) {
-	if (!params.approvals) return;
-	return resolveExecApprovalsFromFile({
-		file: params.approvals,
-		agentId: params.agentId,
-		overrides: {
-			security: params.policy.security,
-			ask: params.policy.ask
-		}
-	}).agent;
-}
 function applyOpenClawExecApprovalFloors(base, approvalFloors) {
 	if (!approvalFloors) return base;
 	const nextSecurity = approvalFloors.security ? execPolicy.minSecurity(base.security, approvalFloors.security) : base.security;
@@ -104,4 +95,11 @@ function canUseCodexModelBackedApprovalsReviewerForModel(params) {
 	return canUseCodexModelBackedApprovalsReviewerForModel$1(params, resolveProviderIdForAuth);
 }
 //#endregion
-export { resolveOpenClawExecPolicyForCodexAppServer as n, canUseCodexModelBackedApprovalsReviewerForModel as t };
+//#region extensions/codex/src/app-server/config.ts
+var config_exports = /* @__PURE__ */ __exportAll({
+	CODEX_PLUGINS_MARKETPLACE_NAME: () => CODEX_PLUGINS_MARKETPLACE_NAME,
+	CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME: () => CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME,
+	resolveCodexAppServerRuntimeOptions: () => resolveCodexAppServerRuntimeOptions
+});
+//#endregion
+export { canUseCodexModelBackedApprovalsReviewerForModel as n, resolveOpenClawExecPolicyForCodexAppServer as r, config_exports as t };

package/dist/.setup/{config-options-BsanJ8QG.mjs → config-options-CzyWLTJt.mjs}

@@ -1,8 +1,12 @@
-import { a as normalizeHeaders, d as readNumberEnv, f as readRecord, i as normalizeCodexServiceTier, o as normalizePositiveNumber, p as resolveArgs, r as normalizeCodexAppServerSecretInput, s as readBooleanEnv, t as hashSecretForKey, u as readNonEmptyString } from "./config-utils-DujwEnhg.mjs";
-import { A as stripTomlLineComments, C as parseInlineOpenAIModelProviderBaseUrl, E as readCodexRequirementsToml, F as resolveEffectiveOpenClawExecModeForCodexAppServer, I as resolveSandbox, L as selectForcedDangerFullAccessSandbox, M as resolveApprovalPolicy, N as resolveApprovalsReviewer, P as resolveCodexPolicyModeForOpenClawExecMode, R as selectForcedPromptingSandbox, T as parseTomlTableSection, _ as resolveCodexAppServerUserHomeDir, a as resolveCodexAppServerNetworkProxy, b as parseAllowedApprovalPoliciesFromCodexRequirements, c as resolveTransport, h as resolveCodexAppServerHomeDir, i as normalizeRemoteWorkspaceRoot, j as assertCodexAppServerAllowedForOpenClawExecMode, m as isJsonObject, o as resolveDefaultCodexAppServerPolicy, r as inferCodexAppServerConnectionClass, s as resolvePolicyMode, t as assertCodexAppServerConnectionSecurity, w as parseTomlStringValue, y as firstTomlTableOffset } from "./config-security-BRQ2mgW9.mjs";
-import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-CcB9iPoq.mjs";
-import { i as readCodexAppServerConfigOptions } from "./launch-args-DnMak49W.mjs";
-import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { c as readNumberEnv, i as normalizeHeaders, l as readRecord, r as normalizeCodexServiceTier, s as readNonEmptyString, t as hashSecretForKey, u as resolveArgs } from "./config-utils-D0CXecki.mjs";
+import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
+import { C as resolveSandbox, S as resolveEffectiveOpenClawExecModeForCodexAppServer, T as selectForcedPromptingSandbox, a as resolveDefaultCodexAppServerPolicy, b as resolveApprovalsReviewer, d as parseAllowedApprovalPoliciesFromCodexRequirements, i as resolveCodexAppServerNetworkProxy, m as readCodexRequirementsToml, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, s as resolveTransport, t as assertCodexAppServerConnectionSecurity, v as assertCodexAppServerAllowedForOpenClawExecMode, w as selectForcedDangerFullAccessSandbox, x as resolveCodexPolicyModeForOpenClawExecMode, y as resolveApprovalPolicy } from "./config-security-CE-FcGw9.mjs";
+import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-b088LyhT.mjs";
+import { i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
+import { r as resolveCodexAppServerUserHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
+import { normalizeTrimmedStringList, parseBooleanValue } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import { readFileSync } from "node:fs";
 import path from "node:path";
@@ -28,18 +32,21 @@ async function readCodexEffectiveConfig(client, cwd, options) {
 //#endregion
 //#region extensions/codex/src/app-server/config-reviewer-policy.ts
 const CODEX_CONFIG_TOML_FILENAME = "config.toml";
+const CODEX_CLI_WHITESPACE = /^\p{White_Space}+|\p{White_Space}+$/gu;
 /** Cloud/system config can redirect reviews after local home/profile checks have passed. */
 async function assertCodexModelBackedReviewerEffectiveConfig(params) {
 	if (params.approvalsReviewer !== "auto_review" && params.approvalsReviewer !== "guardian_subagent") return;
 	const response = await readCodexEffectiveConfig(params.client, params.cwd, { signal: params.signal });
-	const effectiveConfig = response.config;
-	const modelProvider = effectiveConfig.model_provider;
-	const providers = effectiveConfig.model_providers;
+	if (!isTrustedCodexReviewerConfig(response.config)) throw new Error("Codex model-backed approval reviewer requires the running server to use a trusted OpenAI endpoint");
+	return response;
+}
+function isTrustedCodexReviewerConfig(config) {
+	const modelProvider = config.model_provider;
+	const providers = config.model_providers;
 	const providerRecords = providers == null ? void 0 : readRecord(providers);
 	const provider = providerRecords?.openai;
 	const openAIProvider = provider == null ? void 0 : readRecord(provider);
-	if (modelProvider != null && modelProvider !== "openai" || providers != null && !providerRecords || provider != null && !openAIProvider || !isTrustedOptionalReviewerEndpoint(effectiveConfig.openai_base_url, isNativeOpenAIBaseUrl) || !isTrustedOptionalReviewerEndpoint(effectiveConfig.chatgpt_base_url, isNativeChatGPTBaseUrl) || !isTrustedOptionalReviewerEndpoint(openAIProvider?.base_url, isNativeOpenAIBaseUrl)) throw new Error("Codex model-backed approval reviewer requires the running server to use a trusted OpenAI endpoint");
-	return response;
+	return (modelProvider == null || modelProvider === "openai") && (providers == null || providerRecords !== void 0) && (provider == null || openAIProvider !== void 0) && isTrustedOptionalReviewerEndpoint(config.openai_base_url, isNativeOpenAIBaseUrl) && isTrustedOptionalReviewerEndpoint(config.chatgpt_base_url, isNativeChatGPTBaseUrl) && isTrustedOptionalReviewerEndpoint(openAIProvider?.base_url, isNativeOpenAIBaseUrl);
 }
 function isTrustedOptionalReviewerEndpoint(value, isTrusted) {
 	return value == null || typeof value === "string" && isTrusted(value);
@@ -51,12 +58,9 @@ function canUseCodexModelBackedApprovalsReviewerForModel(params, resolveAuthProv
 	return (inferredProvider ?? explicitProvider) === "openai" && isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId);
 }
 function isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId) {
-	if (!openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(params.env)) return false;
-	const codexBaseUrlOverrides = readCodexBaseUrlOverridesForModelBackedReview(params);
-	if (codexBaseUrlOverrides === false || !codexBaseUrlOverrides.openAI.every(isNativeOpenAIBaseUrl) || !codexBaseUrlOverrides.chatGPT.every(isNativeChatGPTBaseUrl)) return false;
-	const openAIProviders = readConfiguredOpenAIProvidersForModelBackedReview(params.config, resolveAuthProviderId);
-	if (openAIProviders.length === 0) return true;
-	return openAIProviders.every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
+	if (![params.env?.OPENAI_BASE_URL, params.env?.OPENAI_API_BASE].every(isNativeOpenAIBaseUrl)) return false;
+	if (!nativeCodexConfigIsTrustedForModelBackedReview(params)) return false;
+	return readConfiguredOpenAIProvidersForModelBackedReview(params.config, resolveAuthProviderId).every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
 }
 function resolveCodexModelBackedReviewerPolicyContext(params) {
 	const provider = params.provider?.trim();
@@ -67,46 +71,23 @@ function resolveCodexModelBackedReviewerPolicyContext(params) {
 	const bindingModelProvider = params.bindingModelProvider?.trim();
 	const currentModel = params.model?.trim();
 	const bindingModel = params.bindingModel?.trim();
-	if (bindingModelProvider && currentModel && bindingModel && currentModel === bindingModel) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(bindingModelProvider),
-		model: params.model ?? params.bindingModel
-	};
-	const currentModelProvider = inferProviderFromModelRef(params.model);
-	if (currentModelProvider) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(currentModelProvider),
-		model: params.model
-	};
-	if (bindingModelProvider) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(bindingModelProvider),
-		model: params.model ?? params.bindingModel
-	};
+	const modelProvider = bindingModelProvider && currentModel && bindingModel && currentModel === bindingModel ? bindingModelProvider : (inferProviderFromModelRef(params.model) ?? bindingModelProvider) || (params.nativeAuthProfile === true ? "openai" : void 0);
 	return {
-		modelProvider: params.nativeAuthProfile === true ? "openai" : void 0,
+		modelProvider: modelProvider ? normalizeCodexModelBackedReviewerPolicyProvider(modelProvider) : void 0,
 		model: params.model ?? params.bindingModel
 	};
 }
-function readCodexBaseUrlOverridesForModelBackedReview(params) {
+function nativeCodexConfigIsTrustedForModelBackedReview(params) {
 	const configToml = readCodexAppServerConfigToml(params);
 	if (configToml === false) return false;
-	const configTomls = configToml === void 0 ? [] : [configToml];
 	const nativeOverrides = readNativeCodexReviewerConfigOverrides(params);
 	if (nativeOverrides === false) return false;
-	configTomls.push(...nativeOverrides);
-	const openAI = [];
-	const chatGPT = [];
-	for (const content of configTomls) {
-		const topLevelContent = stripTomlLineComments(content).slice(0, firstTomlTableOffset(content));
-		const modelProviderOpenAISection = parseTomlTableSection(content, "model_providers.openai");
-		const modelProvider = parseTomlStringValue(topLevelContent, "model_provider");
-		if (modelProvider === false || modelProvider && modelProvider !== "openai") return false;
-		openAI.push(parseTomlStringValue(topLevelContent, "openai_base_url"), parseTomlStringValue(topLevelContent, "model_providers.openai.base_url"), parseInlineOpenAIModelProviderBaseUrl(topLevelContent), modelProviderOpenAISection ? parseTomlStringValue(modelProviderOpenAISection, "base_url") : void 0);
-		chatGPT.push(parseTomlStringValue(topLevelContent, "chatgpt_base_url"));
+	if (configToml !== void 0) try {
+		nativeOverrides.unshift(parse(configToml, { integersAsBigInt: true }));
+	} catch {
+		return false;
 	}
-	if ([...openAI, ...chatGPT].includes(false)) return false;
-	return {
-		openAI: openAI.filter((entry) => typeof entry === "string"),
-		chatGPT: chatGPT.filter((entry) => typeof entry === "string")
-	};
+	return nativeOverrides.every(isTrustedCodexReviewerConfig);
 }
 function readNativeCodexReviewerConfigOverrides(params) {
 	if (params.codexArgs?.some((arg) => !arg)) return false;
@@ -115,20 +96,39 @@ function readNativeCodexReviewerConfigOverrides(params) {
 	for (const { name, value } of readCodexAppServerConfigOptions(params.codexArgs ?? [])) {
 		if (!value) return false;
 		if (name === "--profile" || name === "-p") profile = value;
-		else overrides.push(`${value}\n`);
+		else {
+			const override = parseNativeCodexReviewerConfigOverride(value);
+			if (override === false) return false;
+			overrides.push(override);
+		}
 	}
 	if (profile) {
 		if (path.basename(profile) !== profile || profile === "." || profile === "..") return false;
 		const configPath = resolveCodexAppServerConfigPath(params);
 		if (!configPath) return false;
 		try {
-			overrides.unshift(readFileSync(path.join(path.dirname(configPath), `${profile}.config.toml`), "utf8"));
+			overrides.unshift(parse(readFileSync(path.join(path.dirname(configPath), `${profile}.config.toml`), "utf8"), { integersAsBigInt: true }));
 		} catch (error) {
 			if (readErrorCode(error) !== "ENOENT") return false;
 		}
 	}
 	return overrides;
 }
+function parseNativeCodexReviewerConfigOverride(override) {
+	const separator = override.indexOf("=");
+	if (separator < 0) return false;
+	const key = override.slice(0, separator).replace(CODEX_CLI_WHITESPACE, "");
+	if (!key) return false;
+	const raw = override.slice(separator + 1).replace(CODEX_CLI_WHITESPACE, "");
+	let value;
+	try {
+		value = parse(`_x_ = ${raw}`, { integersAsBigInt: true })["_x_"];
+	} catch {
+		value = raw.replace(/^["']+|["']+$/g, "");
+	}
+	for (const segment of key.split(".").toReversed()) value = { [segment]: value };
+	return readRecord(value) ?? false;
+}
 function readCodexAppServerConfigToml(params) {
 	if (params.codexConfigToml !== void 0) return params.codexConfigToml ?? void 0;
 	const configPath = resolveCodexAppServerConfigPath(params);
@@ -163,6 +163,7 @@ function codexConfigEnablesNativeComputerUse(params) {
 	return false;
 }
 function resolveCodexAppServerConfigPath(params) {
+	if (params.codexHome) return path.join(params.codexHome, CODEX_CONFIG_TOML_FILENAME);
 	if (params.homeScope === "user") return path.join(resolveCodexAppServerUserHomeDir(params.env), CODEX_CONFIG_TOML_FILENAME);
 	const agentDir = readNonEmptyString(params.agentDir);
 	return agentDir ? path.join(resolveCodexAppServerHomeDir(agentDir), CODEX_CONFIG_TOML_FILENAME) : void 0;
@@ -218,9 +219,6 @@ function isNativeOpenAIBaseUrl(value) {
 		return false;
 	}
 }
-function openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(env) {
-	return [env?.OPENAI_BASE_URL, env?.OPENAI_API_BASE].every(isNativeOpenAIBaseUrl);
-}
 function isNativeChatGPTBaseUrl(value) {
 	if (typeof value !== "string" || !value.trim()) return true;
 	try {
@@ -271,7 +269,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 		const args = resolveArgs(config.args, env.OPENCLAW_CODEX_APP_SERVER_ARGS);
 		const headers = normalizeHeaders(config.headers);
 		const clearEnv = normalizeTrimmedStringList(config.clearEnv);
-		const authToken = normalizeCodexAppServerSecretInput({
+		const authToken = normalizeResolvedSecretInputString({
 			value: config.authToken,
 			path: "plugins.entries.codex.config.appServer.authToken"
 		});
@@ -281,7 +279,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			url
 		});
 		const remoteAppsSubstrate = "preconfigured";
-		const remoteWorkspaceRoot = normalizeRemoteWorkspaceRoot(config.remoteWorkspaceRoot);
+		const remoteWorkspaceRoot = readNonEmptyString(config.remoteWorkspaceRoot);
 		const execMode = resolveEffectiveOpenClawExecModeForCodexAppServer({
 			execMode: params.execMode,
 			execPolicy: params.execPolicy
@@ -363,7 +361,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			env
 		});
 		const managedCommandOrder = params.managedCommandOrder ?? (homeScope === "user" || computerUseConfig.enabled ? "desktop-first" : "package-first");
-		const includeManagedCommandOrder = commandSource === "managed" && (managedCommandOrder === "desktop-first" || params.managedCommandOrder === "package-first");
+		const includeManagedCommandOrder = commandSource === "managed" && (managedCommandOrder === "desktop-first" || params.managedCommandOrder !== void 0);
 		const managedComputerUsePluginNames = [.../* @__PURE__ */ new Set([DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, computerUseConfig.pluginName])];
 		return {
 			start: {
@@ -388,12 +386,13 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			...remoteWorkspaceRoot ? { remoteWorkspaceRoot } : {},
 			codeModeOnly: config.codeModeOnly === true,
 			loopDetectionPreToolUseRelay: config.loopDetectionPreToolUseRelay !== false,
-			requestTimeoutMs: normalizePositiveNumber(config.requestTimeoutMs, 6e4),
+			requestTimeoutMs: resolvePositiveTimerTimeoutMs(config.requestTimeoutMs, 6e4),
 			approvalPolicy: forcedPolicy?.approvalPolicy ?? approvalPolicy,
 			approvalPolicySource,
 			sandbox: resolvedSandbox,
 			approvalsReviewer: forcedPolicy?.approvalsReviewer ?? explicitApprovalsReviewer ?? defaultPolicy?.approvalsReviewer ?? (policyMode === "guardian" ? "auto_review" : "user"),
 			...serviceTier ? { serviceTier } : {},
+			enableUltrafast: config.enableUltrafast === true,
 			...resolveCodexAppServerNetworkProxy(config.networkProxy, resolvedSandbox)
 		};
 	}
@@ -435,6 +434,7 @@ function resolveCodexAppServerStartOptionsForAgent(params) {
 	if (!params.agentDir) throw new Error("Agent-scoped Codex requires an OpenClaw agent directory");
 	return codexConfigEnablesNativeComputerUse({
 		agentDir: params.agentDir,
+		codexHome: startOptions.codexHome,
 		codexConfigToml: params.codexConfigToml,
 		env: params.env,
 		homeScope: "agent",
@@ -452,17 +452,17 @@ function resolveCodexComputerUseConfig(params = {}) {
 	const marketplaceName = readNonEmptyString(params.overrides?.marketplaceName) ?? readNonEmptyString(config.marketplaceName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_NAME);
 	const configuredPluginName = readNonEmptyString(params.overrides?.pluginName) ?? readNonEmptyString(config.pluginName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_NAME);
 	const configuredMcpServerName = readNonEmptyString(params.overrides?.mcpServerName) ?? readNonEmptyString(config.mcpServerName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MCP_SERVER_NAME);
-	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
-	const marketplaceDiscoveryTimeoutMs = normalizePositiveNumber(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
-	const liveTestTimeoutMs = normalizePositiveNumber(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
-	const toolCallTimeoutMs = normalizePositiveNumber(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
+	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
+	const marketplaceDiscoveryTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
+	const liveTestTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
+	const toolCallTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
 	const healthCheckIntervalMinutes = normalizeComputerUseHealthCheckIntervalMinutes(params.overrides?.healthCheckIntervalMinutes ?? config.healthCheckIntervalMinutes ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES));
-	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
+	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
 	const pluginCacheMode = normalizeComputerUsePluginCacheMode(params.overrides?.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(config.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_CACHE_MODE) ?? "independent";
-	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
-	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
+	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
+	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
 	return {
-		enabled: params.overrides?.enabled ?? config.enabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
+		enabled: params.overrides?.enabled ?? config.enabled ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
 		autoInstall,
 		marketplaceDiscoveryTimeoutMs,
 		liveTestTimeoutMs,
@@ -498,7 +498,10 @@ function codexAppServerStartOptionsKey(options, params = {}) {
 		url: options.url ?? null,
 		authToken: hashSecretForKey(options.authToken, "authToken"),
 		headers: Object.entries(options.headers).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `header:${key}`)]),
-		env: Object.entries(options.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `env:${key}`)]),
+		env: Object.entries({
+			...options.env,
+			...options.codexHome ? { CODEX_HOME: options.codexHome } : {}
+		}).toSorted(([left], [right]) => left.localeCompare(right)).map(([key, value]) => [key, hashSecretForKey(value, `env:${key}`)]),
 		clearEnv: [...options.clearEnv ?? []].toSorted(),
 		authProfileId: params.authProfileId ?? null,
 		authBindingFingerprint: params.authBindingFingerprint ?? null,

package/dist/.setup/{config-parsing-CcB9iPoq.mjs → config-parsing-b088LyhT.mjs}

@@ -1,4 +1,4 @@
-import { i as normalizeCodexServiceTier, m as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-DujwEnhg.mjs";
+import { d as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, r as normalizeCodexServiceTier } from "./config-utils-D0CXecki.mjs";
 import { asNullableRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
 import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
@@ -24,55 +24,33 @@ const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
 const DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS = 6e4;
 const DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS = 6e4;
 const DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX = "openclaw-network";
-const codexAppServerTransportSchema = z.enum([
-	"stdio",
-	"websocket",
-	"unix"
-]);
-const codexAppServerHomeScopeSchema = z.enum(["agent", "user"]);
 const SecretInputSchema = buildSecretInputSchema();
-const codexAppServerPolicyModeSchema = z.enum(["yolo", "guardian"]);
 const codexAppServerApprovalPolicySchema = z.preprocess((value) => value === "on-failure" ? "on-request" : value, z.enum(["never", "on-request"]));
-const codexAppServerSandboxSchema = z.enum([
-	"read-only",
-	"workspace-write",
-	"danger-full-access"
-]);
-const codexAppServerApprovalsReviewerSchema = z.enum([
-	"user",
-	"auto_review",
-	"guardian_subagent"
-]);
-const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
 const codexComputerUseHealthIntervalSchema = z.union([
 	z.literal(30),
 	z.literal(60),
 	z.literal(120),
 	z.literal(240)
 ]);
-const codexComputerUsePluginCacheModeSchema = z.enum(["shared", "independent"]);
 const codexPluginDestructivePolicySchema = z.union([
 	z.boolean(),
 	z.literal("auto"),
 	z.literal("ask")
 ]);
 const codexAppServerServiceTierSchema = z.preprocess((value) => value === null ? null : normalizeCodexServiceTier(value), z.string().trim().min(1).nullable().optional()).optional();
-const codexAppServerCyberFailoverSchema = z.object({
+const codexAppServerCyberFailoverSchema = z.strictObject({
 	mode: z.enum(["auto", "off"]).optional(),
 	model: z.string().trim().min(1).optional(),
 	cooloffMs: z.number().positive().optional()
-}).strict();
-const codexAppServerExperimentalSchema = z.object({ sandboxExecServer: z.boolean().optional() }).strict();
-const codexAppServerRemoteWorkspaceRootSchema = z.string().trim().min(1);
-const codexAppServerNetworkProxyDomainPermissionSchema = z.enum(["allow", "deny"]);
-const codexAppServerNetworkProxyUnixSocketPermissionSchema = z.enum(["allow", "none"]);
-const codexAppServerNetworkProxySchema = z.object({
+});
+const codexAppServerExperimentalSchema = z.strictObject({ sandboxExecServer: z.boolean().optional() });
+const codexAppServerNetworkProxySchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	profileName: z.string().trim().min(1).optional(),
 	baseProfile: z.enum(["read-only", "workspace"]).optional(),
 	mode: z.enum(["limited", "full"]).optional(),
-	domains: z.record(z.string(), codexAppServerNetworkProxyDomainPermissionSchema).optional(),
-	unixSockets: z.record(z.string(), codexAppServerNetworkProxyUnixSocketPermissionSchema).optional(),
+	domains: z.record(z.string(), z.enum(["allow", "deny"])).optional(),
+	unixSockets: z.record(z.string(), z.enum(["allow", "none"])).optional(),
 	proxyUrl: z.string().trim().min(1).optional(),
 	socksUrl: z.string().trim().min(1).optional(),
 	enableSocks5: z.boolean().optional(),
@@ -81,45 +59,45 @@ const codexAppServerNetworkProxySchema = z.object({
 	allowLocalBinding: z.boolean().optional(),
 	dangerouslyAllowNonLoopbackProxy: z.boolean().optional(),
 	dangerouslyAllowAllUnixSockets: z.boolean().optional()
-}).strict();
-const codexPluginEntryConfigSchema = z.object({
+});
+const codexPluginEntryConfigSchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	marketplaceName: z.string().regex(CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN).optional(),
 	pluginName: z.string().trim().min(1).optional(),
 	allow_destructive_actions: codexPluginDestructivePolicySchema.optional()
-}).strict();
-const codexPluginsConfigSchema = z.object({
+});
+const codexPluginsConfigSchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	allow_all_plugins: z.boolean().optional(),
 	allow_destructive_actions: codexPluginDestructivePolicySchema.optional(),
 	plugins: z.record(z.string(), codexPluginEntryConfigSchema).optional()
-}).strict();
-const codexSupervisionEndpointSchema = z.union([z.object({
+});
+const codexSupervisionEndpointSchema = z.union([z.strictObject({
 	id: z.string().optional(),
 	label: z.string().optional(),
 	transport: z.literal("stdio-proxy").optional(),
 	command: z.string().optional(),
 	args: z.array(z.string()).optional(),
 	cwd: z.string().optional()
-}).strict(), z.object({
+}), z.strictObject({
 	id: z.string().optional(),
 	label: z.string().optional(),
 	transport: z.literal("websocket"),
 	url: z.string(),
 	authTokenEnv: z.string().optional()
-}).strict()]);
-const codexSupervisionConfigSchema = z.object({
+})]);
+const codexSupervisionConfigSchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	endpoints: z.array(codexSupervisionEndpointSchema).optional(),
 	allowRawTranscripts: z.boolean().optional(),
 	allowWriteControls: z.boolean().optional()
-}).strict();
-const codexPluginConfigSchema = z.object({
-	codexDynamicToolsLoading: codexDynamicToolsLoadingSchema.optional(),
+});
+const codexPluginConfigSchema = z.strictObject({
+	codexDynamicToolsLoading: z.enum(["searchable", "direct"]).optional(),
 	codexDynamicToolsExclude: z.array(z.string()).optional(),
 	sessionCatalog: codexSessionCatalogConfigSchema.optional(),
 	discovery: codexDiscoveryConfigSchema.optional(),
-	computerUse: z.object({
+	computerUse: z.strictObject({
 		enabled: z.boolean().optional(),
 		autoInstall: z.boolean().optional(),
 		marketplaceDiscoveryTimeoutMs: z.number().positive().optional(),
@@ -127,7 +105,7 @@ const codexPluginConfigSchema = z.object({
 		toolCallTimeoutMs: z.number().positive().optional(),
 		healthCheckEnabled: z.boolean().optional(),
 		healthCheckIntervalMinutes: codexComputerUseHealthIntervalSchema.optional(),
-		pluginCacheMode: codexComputerUsePluginCacheModeSchema.optional(),
+		pluginCacheMode: z.enum(["shared", "independent"]).optional(),
 		strictReadiness: z.boolean().optional(),
 		autoRepair: z.boolean().optional(),
 		marketplaceSource: z.string().optional(),
@@ -135,43 +113,65 @@ const codexPluginConfigSchema = z.object({
 		marketplaceName: z.string().optional(),
 		pluginName: z.string().optional(),
 		mcpServerName: z.string().optional()
-	}).strict().optional(),
+	}).optional(),
 	codexPlugins: z.unknown().optional(),
 	supervision: codexSupervisionConfigSchema.optional(),
-	appServer: z.object({
-		mode: codexAppServerPolicyModeSchema.optional(),
-		transport: codexAppServerTransportSchema.optional(),
-		homeScope: codexAppServerHomeScopeSchema.optional(),
+	appServer: z.strictObject({
+		mode: z.enum(["yolo", "guardian"]).optional(),
+		transport: z.enum([
+			"stdio",
+			"websocket",
+			"unix"
+		]).optional(),
+		homeScope: z.enum(["agent", "user"]).optional(),
 		command: z.string().optional(),
 		args: z.union([z.array(z.string()), z.string()]).optional(),
 		url: z.string().optional(),
 		authToken: SecretInputSchema.optional(),
 		headers: z.record(z.string(), SecretInputSchema).optional(),
 		clearEnv: z.array(z.string()).optional(),
-		remoteWorkspaceRoot: codexAppServerRemoteWorkspaceRootSchema.optional(),
+		remoteWorkspaceRoot: z.string().trim().min(1).optional(),
 		codeModeOnly: z.boolean().optional(),
 		loopDetectionPreToolUseRelay: z.boolean().optional(),
 		requestTimeoutMs: z.number().positive().optional(),
 		approvalPolicy: codexAppServerApprovalPolicySchema.optional(),
-		sandbox: codexAppServerSandboxSchema.optional(),
-		approvalsReviewer: codexAppServerApprovalsReviewerSchema.optional(),
+		sandbox: z.enum([
+			"read-only",
+			"workspace-write",
+			"danger-full-access"
+		]).optional(),
+		approvalsReviewer: z.enum([
+			"user",
+			"auto_review",
+			"guardian_subagent"
+		]).optional(),
 		serviceTier: codexAppServerServiceTierSchema,
+		enableUltrafast: z.boolean().optional(),
 		cyberFailover: codexAppServerCyberFailoverSchema.optional(),
 		networkProxy: codexAppServerNetworkProxySchema.optional(),
 		defaultWorkspaceDir: z.string().optional(),
 		experimental: codexAppServerExperimentalSchema.optional()
-	}).strict().optional()
-}).strict();
+	}).optional()
+});
 function readCodexPluginConfig(value) {
-	if (asNullableRecord(asNullableRecord(value)?.appServer)?.approvalPolicy === "untrusted") throw new Error("plugins.entries.codex.config.appServer.approvalPolicy=\"untrusted\" is retired; run \"openclaw doctor --fix\" to migrate it to \"on-request\".");
+	const appServer = asNullableRecord(asNullableRecord(value)?.appServer);
+	if (appServer?.approvalPolicy === "untrusted") throw new Error("plugins.entries.codex.config.appServer.approvalPolicy=\"untrusted\" is retired; run \"openclaw doctor --fix\" to migrate it to \"on-request\".");
 	const parsed = codexPluginConfigSchema.safeParse(value);
-	if (!parsed.success) return {};
+	if (!parsed.success) {
+		if (asNullableRecord(appServer?.networkProxy)?.enabled === true) {
+			const issuePath = parsed.error.issues[0]?.path ?? [];
+			const fieldDepth = issuePath[0] === "appServer" && issuePath[1] === "networkProxy" ? 3 : 2;
+			const fieldPath = ["plugins.entries.codex.config", ...issuePath.slice(0, fieldDepth)].join(".");
+			throw new Error(`Invalid ${fieldPath}; fix this field before starting Codex with network restrictions. Run "openclaw doctor --fix" for supported repairs.`);
+		}
+		return {};
+	}
 	const { codexPlugins: rawCodexPlugins, ...config } = parsed.data;
 	const plugins = codexPluginsConfigSchema.safeParse(rawCodexPlugins);
 	if (!plugins.success) return config;
 	return {
 		...config,
-		...plugins.data ? { codexPlugins: plugins.data } : {}
+		codexPlugins: plugins.data
 	};
 }
 function isCodexSandboxExecServerEnabled(pluginConfig, sandbox) {
@@ -196,7 +196,7 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 	const enabled = config?.enabled === true;
 	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
 	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
-		if (!isCodexPluginMarketplaceName(entry.marketplaceName) || !entry.pluginName) return [];
+		if (!entry.marketplaceName || !entry.pluginName) return [];
 		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
 		return [{
 			configKey,
@@ -216,9 +216,6 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 		pluginPolicies
 	};
 }
-function isCodexPluginMarketplaceName(value) {
-	return typeof value === "string" && CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(value);
-}
 function resolveCodexPluginDestructivePolicy(policy) {
 	if (policy === "auto" || policy === "ask") return {
 		allowDestructiveActions: true,

package/dist/.setup/{config-runtime-CeAhl_h4.mjs → config-runtime-C0NbLms1.mjs}

@@ -1,5 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import { r as createCodexAppServerConfig } from "./config-options-BsanJ8QG.mjs";
+import { r as createCodexAppServerConfig } from "./config-options-CzyWLTJt.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({