@openclaw/codex 2026.9.6 → 2026.9.7

package/dist/.setup/{plugin-metadata-cache-Ctmo83k_.mjs → plugin-metadata-cache-DsjsL1dr.mjs}

@@ -1,16 +1,15 @@
-import { d as resolveCodexAppServerHomeDir } from "./config-security-BEReZ6go.mjs";
-import { o as resolveCodexComputerUseConfig } from "./config-options-BvaRs51b.mjs";
-import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, l as resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath, t as isManagedCodexDesktopCommand } from "./managed-binary-BnshlFag.mjs";
-import { n as describeControlFailure } from "./capabilities-CDXOOFdZ.mjs";
-import { r as requestCodexAppServerClientJson } from "./request-D2L0zMrq.mjs";
-import "./config-BoTP_mrL.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C8Rw1m1m.mjs";
-import { $ as assertNotSymlink, D as acquireCodexNativeConfigFence, Q as resolveCodexManagedBundledMarketplacePath, Y as reconcileCodexComputerUseStartArtifacts, b as waitForCodexAppServerClientDesktopGenerationDrain, c as getLeasedSharedCodexAppServerClient, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, p as readCodexAppServerClientProcessIdentity, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, x as withLeasedCodexAppServerClientStartSelectionRetry } from "./shared-client-DA4VR4Eb.mjs";
-import { c as isCodexAppServerIndeterminateTransportError, o as isCodexAppServerConnectionClosedError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-Cs08OXVQ.mjs";
-import { r as CodexAppServerUnsafeSubscriptionError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-CEv1cKwF.mjs";
-import { existsSync } from "node:fs";
+import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
+import { o as resolveCodexComputerUseConfig } from "./config-options-CzyWLTJt.mjs";
+import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, t as isManagedCodexDesktopCommand } from "./managed-binary-kiWRhNRE.mjs";
+import { n as describeControlFailure } from "./capabilities-B3WEZl4e.mjs";
+import { r as requestCodexAppServerClientJson } from "./request-BHZ1nz8d.mjs";
+import "./config-DKhXquav.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { $ as reconcileCodexComputerUseStartArtifacts, O as acquireCodexNativeConfigFence, at as isLegacyCodexComputerUsePluginDisabled, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, ct as assertNotSymlink, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, it as hasLegacyCodexComputerUseMcpPolicy, nt as resolveBundledComputerUseMarketplacePath, ot as resolveManagedCodexComputerUseConfig, p as readCodexAppServerClientProcessIdentity, rt as resolveClientManagedBundledMarketplacePath, st as ensureCodexComputerUseSharedPluginCache, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, y as waitForCodexAppServerClientDesktopGenerationDrain } from "./shared-client-DqyTMYug.mjs";
+import { c as isCodexAppServerIndeterminateTransportError, o as isCodexAppServerConnectionClosedError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-N0JpgSzF.mjs";
+import { r as CodexAppServerUnsafeSubscriptionError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-DOP-cW5j.mjs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/codex/src/app-server/computer-use-readiness.ts
 /** Computer Use readiness probes and their native subscription lifecycle. */
@@ -162,11 +161,38 @@ function skippedLiveTestStatus(config, message) {
 	};
 }
 //#endregion
+//#region extensions/codex/src/app-server/computer-use-status.ts
+function unavailableStatus(config, reason, message) {
+	const disabled = reason === "disabled";
+	return {
+		enabled: !disabled,
+		ready: false,
+		reason,
+		installed: reason === "plugin_disabled" ? null : false,
+		pluginEnabled: false,
+		mcpServerAvailable: false,
+		pluginName: config.pluginName,
+		mcpServerName: config.mcpServerName,
+		...!disabled && config.marketplaceName ? { marketplaceName: config.marketplaceName } : {},
+		...!disabled && config.marketplacePath ? { marketplacePath: config.marketplacePath } : {},
+		tools: [],
+		installation: {
+			status: disabled ? "disabled" : reason === "plugin_disabled" ? "unchecked" : reason === "marketplace_missing" ? "marketplace_missing" : "not_installed",
+			ok: false,
+			message
+		},
+		exposure: {
+			status: "skipped",
+			ok: false,
+			message: disabled ? "MCP exposure was not checked because Computer Use is disabled." : "MCP exposure was not checked because Computer Use installation is not ready."
+		},
+		liveTest: skippedLiveTestStatus(config, disabled ? "Computer Use live test was not run because Computer Use is disabled." : "Computer Use live test was not run because installation is not ready."),
+		warnings: [],
+		message
+	};
+}
+//#endregion
 //#region extensions/codex/src/app-server/computer-use.ts
-/**
-* Computer Use plugin/MCP readiness checks and optional install flow for Codex
-* app-server sessions.
-*/
 var CodexComputerUseSetupError = class extends Error {
 	constructor(status) {
 		super(status.message);
@@ -186,13 +212,13 @@ const COMPUTER_USE_MARKETPLACE_NAME_PRIORITY = [
 /** Reads Computer Use readiness without installing or mutating app-server state. */
 async function readCodexComputerUseStatus(params = {}) {
 	const config = resolveComputerUseConfig(params);
-	if (!config.enabled) return disabledStatus(config);
+	if (!config.enabled) return unavailableStatus(config, "disabled", "Computer Use is disabled.");
 	try {
 		return await inspectCodexComputerUse({
 			...params,
 			computerUseConfig: config,
 			runLiveTest: true,
-			installPlugin: false
+			installMode: "none"
 		});
 	} catch (error) {
 		return unavailableStatus(config, "check_failed", `Computer Use check failed: ${describeControlFailure(error)}`);
@@ -204,12 +230,13 @@ async function readCodexComputerUseStatus(params = {}) {
 */
 async function ensureCodexComputerUse(params = {}) {
 	const config = resolveComputerUseConfig(params);
-	if (!config.enabled) return disabledStatus(config);
+	if (!config.enabled) return unavailableStatus(config, "disabled", "Computer Use is disabled.");
 	const status = await inspectCodexComputerUse({
 		...params,
 		computerUseConfig: config,
 		runLiveTest: config.strictReadiness,
-		installPlugin: false
+		installMode: "none",
+		refreshSharedCache: config.autoInstall
 	});
 	if (status.ready) return status;
 	if (config.autoInstall) {
@@ -219,13 +246,13 @@ async function ensureCodexComputerUse(params = {}) {
 			...params,
 			computerUseConfig: config,
 			runLiveTest: config.strictReadiness,
-			installPlugin: true
+			installMode: "automatic",
+			refreshSharedCache: true
 		});
 		if (!installedStatus.ready) throw new CodexComputerUseSetupError(installedStatus);
 		return installedStatus;
 	}
-	if (!status.ready) throw new CodexComputerUseSetupError(status);
-	return status;
+	throw new CodexComputerUseSetupError(status);
 }
 /** Forces Computer Use plugin installation and returns the ready status. */
 async function installCodexComputerUse(params = {}) {
@@ -242,7 +269,7 @@ async function installCodexComputerUse(params = {}) {
 		...params,
 		computerUseConfig: config,
 		runLiveTest: true,
-		installPlugin: true
+		installMode: "explicit"
 	});
 	if (!status.ready) throw new CodexComputerUseSetupError(status);
 	return status;
@@ -273,7 +300,7 @@ async function inspectCodexComputerUse(params) {
 			});
 			lease.client = client;
 		}
-		if (!params.installPlugin) {
+		if (params.installMode === "none" && !params.refreshSharedCache) {
 			if (!lease.client) return await inspectCodexComputerUseWithoutFence(params);
 			return await withLeasedCodexAppServerClientStartSelectionRetry({
 				lease,
@@ -340,18 +367,16 @@ async function inspectCodexComputerUse(params) {
 		});
 		let releaseFenceOnReturn = true;
 		try {
-			try {
-				return await inspectCodexComputerUseWithoutFence({
-					...inspectionParams,
-					releaseNativeConfigFence: release
-				});
-			} catch (error) {
-				if (client && (isCodexAppServerIndeterminateRequestCancellationError(error) || isCodexAppServerIndeterminateTransportError(error) || isCodexAppServerConnectionClosedError(error))) {
-					releaseFenceOnReturn = false;
-					await client.closeAndRunAfterExit(release, "Computer Use config mutation");
-				}
-				throw error;
+			return await inspectCodexComputerUseWithoutFence({
+				...inspectionParams,
+				releaseNativeConfigFence: release
+			});
+		} catch (error) {
+			if (client && (isCodexAppServerIndeterminateRequestCancellationError(error) || isCodexAppServerIndeterminateTransportError(error) || isCodexAppServerConnectionClosedError(error))) {
+				releaseFenceOnReturn = false;
+				await client.closeAndRunAfterExit(release, "Computer Use config mutation");
 			}
+			throw error;
 		} finally {
 			if (releaseFenceOnReturn) release();
 		}
@@ -361,38 +386,59 @@ async function inspectCodexComputerUse(params) {
 }
 async function inspectCodexComputerUseWithoutFence(params) {
 	const request = createComputerUseRequest(params);
-	if (params.installPlugin) {
+	if (params.installMode !== "none") {
 		if (!resolveCodexComputerUseConfig({ pluginConfig: params.pluginConfig }).autoInstall) await prepareExplicitManagedComputerUseInstall(params);
-		await request("experimentalFeature/enablement/set", { enablement: { plugins: true } });
 	}
-	const managedMarketplacePath = await resolveClientManagedBundledMarketplacePath(params.client, params.agentDir);
+	const managedMarketplacePath = await resolveClientManagedBundledMarketplacePath(params.client?.getRuntimeIdentity()?.codexHome, params.agentDir);
 	const managedCodexHome = managedMarketplacePath ? params.client?.getRuntimeIdentity()?.codexHome : void 0;
-	if (params.installPlugin && managedCodexHome) await assertNotSymlink(path.join(managedCodexHome, "config.toml"), "Codex config");
+	let computerUseConfig = await resolveManagedCodexComputerUseConfig(params.computerUseConfig, managedMarketplacePath);
+	const nativeDisableStatus = computerUseConfig !== params.computerUseConfig && params.installMode !== "explicit" ? unavailableStatus(params.computerUseConfig, "plugin_disabled", "Computer Use is disabled by native plugin policy. Run /codex computer-use install for explicit recovery, or enable computer-use@openai-bundled in native Codex config for automatic replacement.") : void 0;
+	if (computerUseConfig !== params.computerUseConfig) {
+		const nativeConfig = await request("config/read", { includeLayers: false });
+		if (nativeDisableStatus && isLegacyCodexComputerUsePluginDisabled(nativeConfig.config)) return nativeDisableStatus;
+		if (hasLegacyCodexComputerUseMcpPolicy(nativeConfig.config)) computerUseConfig = params.computerUseConfig;
+	}
+	if (params.installMode !== "none") await request("experimentalFeature/enablement/set", { enablement: { plugins: true } });
+	if (params.installMode !== "none" && managedCodexHome) await assertNotSymlink(path.join(managedCodexHome, "config.toml"), "Codex config");
 	const marketplace = await resolveMarketplaceRef({
 		request,
-		config: params.computerUseConfig,
-		allowAdd: params.installPlugin,
+		config: computerUseConfig,
+		allowAdd: params.installMode !== "none",
 		signal: params.signal,
 		defaultBundledMarketplacePath: params.defaultBundledMarketplacePath ?? managedMarketplacePath,
 		defaultBundledMarketplacePathCandidates: params.defaultBundledMarketplacePathCandidates,
 		managedCodexHome
 	});
-	if (!marketplace.marketplace) return unavailableStatus(params.computerUseConfig, "marketplace_missing", marketplace.message ?? `No Codex marketplace containing ${params.computerUseConfig.pluginName} is registered. Configure computerUse.marketplaceSource or computerUse.marketplacePath, then run /codex computer-use install.`);
+	if (!marketplace.marketplace) return unavailableStatus(computerUseConfig, "marketplace_missing", marketplace.message ?? `No Codex marketplace containing ${computerUseConfig.pluginName} is registered. Configure computerUse.marketplaceSource or computerUse.marketplacePath, then run /codex computer-use install.`);
 	const pluginInspection = await ensureComputerUsePlugin({
 		request,
-		config: params.computerUseConfig,
+		config: computerUseConfig,
 		marketplace: marketplace.marketplace,
-		installPlugin: params.installPlugin
+		nativeDisableStatus,
+		installPlugin: params.installMode !== "none"
 	});
 	if (!pluginInspection.ok) return pluginInspection.status;
+	if (params.refreshSharedCache && computerUseConfig !== params.computerUseConfig && managedCodexHome && managedMarketplacePath && params.agentDir && params.client) {
+		const client = params.client;
+		await ensureCodexComputerUseSharedPluginCache({
+			codexHome: managedCodexHome,
+			ownershipRoot: params.agentDir,
+			bundledMarketplacePath: managedMarketplacePath,
+			config: computerUseConfig,
+			assertCurrent: () => {
+				params.assertCurrent?.();
+				assertCodexAppServerClientStartSelectionCurrent({ client });
+			}
+		});
+	}
 	return await readComputerUseTools({
 		request,
 		client: params.client,
 		signal: params.signal,
-		config: params.computerUseConfig,
+		config: computerUseConfig,
 		plugin: pluginInspection.plugin,
 		runLiveTest: params.runLiveTest,
-		installPlugin: params.installPlugin,
+		installPlugin: params.installMode !== "none",
 		releaseNativeConfigFence: params.releaseNativeConfigFence
 	});
 }
@@ -431,7 +477,7 @@ async function resolveExplicitManagedComputerUseInstallContext(params) {
 	const desktopGeneration = readCodexAppServerClientDesktopGeneration(params.client);
 	if (!desktopGeneration) throw new Error("Codex Computer Use install requires a desktop-generation-bound client; reconnect and retry.");
 	const expectedHome = resolveCodexAppServerHomeDir(params.agentDir);
-	const [actualRealHome, expectedRealHome] = await Promise.all([fs$1.realpath(codexHome).catch(() => void 0), fs$1.realpath(expectedHome).catch(() => void 0)]);
+	const [actualRealHome, expectedRealHome] = await Promise.all([fs.realpath(codexHome).catch(() => void 0), fs.realpath(expectedHome).catch(() => void 0)]);
 	if (!actualRealHome || actualRealHome !== expectedRealHome) return;
 	return {
 		client: params.client,
@@ -441,29 +487,18 @@ async function resolveExplicitManagedComputerUseInstallContext(params) {
 		desktopGeneration
 	};
 }
-async function resolveClientManagedBundledMarketplacePath(client, agentDir) {
-	const codexHome = client?.getRuntimeIdentity()?.codexHome;
-	if (!codexHome || !agentDir) return;
-	const [actualRealHome, expectedRealHome] = await Promise.all([fs$1.realpath(codexHome).catch(() => void 0), fs$1.realpath(resolveCodexAppServerHomeDir(agentDir)).catch(() => void 0)]);
-	if (!actualRealHome || actualRealHome !== expectedRealHome) return;
-	const managedPath = resolveCodexManagedBundledMarketplacePath(codexHome);
-	return existsSync(managedPath) ? managedPath : void 0;
-}
 async function ensureComputerUsePlugin(params) {
 	let plugin = await readComputerUsePlugin(params.request, params.marketplace, params.config.pluginName);
-	if (!plugin.summary.installed || !plugin.summary.enabled) {
-		if (!params.installPlugin) return {
+	if (params.nativeDisableStatus) {
+		const nativeConfig = await params.request("config/read", { includeLayers: false });
+		if (isLegacyCodexComputerUsePluginDisabled(nativeConfig.config)) return {
 			ok: false,
-			status: statusFromPlugin({
-				config: params.config,
-				plugin,
-				tools: [],
-				reason: pluginSetupReason(plugin),
-				message: pluginSetupMessage(params.config, plugin)
-			})
+			status: params.nativeDisableStatus
 		};
+	}
+	if (params.installPlugin && (!plugin.summary.installed || !plugin.summary.enabled)) {
 		await params.request("plugin/install", pluginRequestParams(params.marketplace, params.config.pluginName));
-		await reloadMcpServers(params.request);
+		await params.request("config/mcpServer/reload", void 0);
 		plugin = await readComputerUsePlugin(params.request, params.marketplace, params.config.pluginName);
 	}
 	if (!plugin.summary.installed || !plugin.summary.enabled) return {
@@ -472,8 +507,8 @@ async function ensureComputerUsePlugin(params) {
 			config: params.config,
 			plugin,
 			tools: [],
-			reason: pluginSetupReason(plugin),
-			message: pluginSetupMessage(params.config, plugin)
+			reason: plugin.summary.installed ? "plugin_disabled" : "plugin_not_installed",
+			message: plugin.summary.installed ? `Computer Use is installed, but the ${params.config.pluginName} plugin is disabled. Run /codex computer-use install or enable computerUse.autoInstall to re-enable it.` : "Computer Use is available but not installed. Run /codex computer-use install or enable computerUse.autoInstall."
 		})
 	};
 	return {
@@ -485,7 +520,7 @@ async function readComputerUseTools(params) {
 	let server = await readMcpServerStatus(params.request, params.config.mcpServerName);
 	let tools = Object.keys(server?.tools ?? {}).toSorted();
 	if ((!server || tools.length === 0) && params.installPlugin) {
-		await reloadMcpServers(params.request);
+		await params.request("config/mcpServer/reload", void 0);
 		server = await readMcpServerStatus(params.request, params.config.mcpServerName);
 		tools = Object.keys(server?.tools ?? {}).toSorted();
 	}
@@ -605,11 +640,6 @@ function blockUnsafeAutoInstallStatus(config) {
 function shouldAddBundledComputerUseMarketplace(params) {
 	return params.allowAdd && !params.config.marketplaceSource && !params.config.marketplacePath && !params.config.marketplaceName && Boolean(resolveBundledComputerUseMarketplacePath(params));
 }
-function resolveBundledComputerUseMarketplacePath(params) {
-	if (params.defaultBundledMarketplacePath) return existsSync(params.defaultBundledMarketplacePath) ? params.defaultBundledMarketplacePath : void 0;
-	if (!params.defaultBundledMarketplacePathCandidates) return;
-	return resolveFirstExistingMacOSDesktopCodexBundledMarketplacePath({ candidates: params.defaultBundledMarketplacePathCandidates });
-}
 function findComputerUseMarketplaces(listed, pluginName) {
 	return listed.marketplaces.flatMap((marketplace) => {
 		const plugin = marketplace.plugins.find((candidate) => candidate.name === pluginName || candidate.id === pluginName || candidate.id === `${pluginName}@${marketplace.name}`);
@@ -674,9 +704,6 @@ async function readMcpServerStatus(request, serverName) {
 		cursor = response.nextCursor;
 	} while (cursor);
 }
-async function reloadMcpServers(request) {
-	await request("config/mcpServer/reload", void 0);
-}
 function pluginRequestParams(marketplace, pluginName) {
 	return marketplace.kind === "local" ? {
 		marketplacePath: marketplace.path,
@@ -686,13 +713,6 @@ function pluginRequestParams(marketplace, pluginName) {
 		pluginName: marketplace.remotePluginId
 	};
 }
-function pluginSetupReason(plugin) {
-	return plugin.summary.installed ? "plugin_disabled" : "plugin_not_installed";
-}
-function pluginSetupMessage(config, plugin) {
-	if (!plugin.summary.installed) return "Computer Use is available but not installed. Run /codex computer-use install or enable computerUse.autoInstall.";
-	return `Computer Use is installed, but the ${config.pluginName} plugin is disabled. Run /codex computer-use install or enable computerUse.autoInstall to re-enable it.`;
-}
 function statusFromPlugin(params) {
 	return {
 		enabled: true,
@@ -709,99 +729,26 @@ function statusFromPlugin(params) {
 		installation: installationStatusFromPlugin(params.plugin, params.message),
 		exposure: exposureStatusFromTools(params.config, params.tools),
 		liveTest: skippedLiveTestStatus(params.config, "Computer Use live test was not run."),
-		warnings: pluginWarnings(params.plugin),
+		warnings: params.plugin.summary.source?.type === "remote" ? ["Computer Use plugin is resolved from a remote marketplace; live local bundles are preferred."] : [],
 		message: params.message
 	};
 }
-function disabledStatus(config) {
-	return {
-		enabled: false,
-		ready: false,
-		reason: "disabled",
-		installed: false,
-		pluginEnabled: false,
-		mcpServerAvailable: false,
-		pluginName: config.pluginName,
-		mcpServerName: config.mcpServerName,
-		tools: [],
-		installation: {
-			status: "disabled",
-			ok: false,
-			message: "Computer Use is disabled."
-		},
-		exposure: {
-			status: "skipped",
-			ok: false,
-			message: "MCP exposure was not checked because Computer Use is disabled."
-		},
-		liveTest: skippedLiveTestStatus(config, "Computer Use live test was not run because Computer Use is disabled."),
-		warnings: [],
-		message: "Computer Use is disabled."
-	};
-}
-function unavailableStatus(config, reason, message) {
-	return {
-		enabled: true,
-		ready: false,
-		reason,
-		installed: false,
-		pluginEnabled: false,
-		mcpServerAvailable: false,
-		pluginName: config.pluginName,
-		mcpServerName: config.mcpServerName,
-		...config.marketplaceName ? { marketplaceName: config.marketplaceName } : {},
-		...config.marketplacePath ? { marketplacePath: config.marketplacePath } : {},
-		tools: [],
-		installation: {
-			status: reason === "marketplace_missing" ? "marketplace_missing" : "not_installed",
-			ok: false,
-			message
-		},
-		exposure: {
-			status: "skipped",
-			ok: false,
-			message: "MCP exposure was not checked because Computer Use installation is not ready."
-		},
-		liveTest: skippedLiveTestStatus(config, "Computer Use live test was not run because installation is not ready."),
-		warnings: [],
-		message
-	};
-}
 function installationStatusFromPlugin(plugin, message) {
-	if (!plugin.summary.installed) return {
-		status: "not_installed",
-		ok: false,
-		message
-	};
-	if (!plugin.summary.enabled) return {
-		status: "installed_disabled",
-		ok: false,
-		message
-	};
+	const installed = plugin.summary.installed && plugin.summary.enabled;
 	return {
-		status: "installed",
-		ok: true,
-		message: "Computer Use plugin is installed and enabled."
+		status: !plugin.summary.installed ? "not_installed" : installed ? "installed" : "installed_disabled",
+		ok: installed,
+		message: installed ? "Computer Use plugin is installed and enabled." : message
 	};
 }
 function exposureStatusFromTools(config, tools) {
-	if (tools.length === 0) return {
-		status: "missing",
-		ok: false,
-		message: `Computer Use MCP server ${config.mcpServerName} is not exposed.`
-	};
+	const available = tools.length > 0;
 	return {
-		status: "available",
-		ok: true,
-		message: `Computer Use MCP server ${config.mcpServerName} exposes ${tools.length} tools.`
+		status: available ? "available" : "missing",
+		ok: available,
+		message: available ? `Computer Use MCP server ${config.mcpServerName} exposes ${tools.length} tools.` : `Computer Use MCP server ${config.mcpServerName} is not exposed.`
 	};
 }
-function pluginWarnings(plugin) {
-	const warnings = [];
-	const source = plugin.summary.source;
-	if (source && typeof source === "object" && "type" in source && source.type === "remote") warnings.push("Computer Use plugin is resolved from a remote marketplace; live local bundles are preferred.");
-	return warnings;
-}
 function resolveComputerUseConfig(params) {
 	const overrides = params.forceEnable ? {
 		...params.overrides,
@@ -815,7 +762,6 @@ function resolveComputerUseConfig(params) {
 //#endregion
 //#region extensions/codex/src/app-server/plugin-metadata-cache.ts
 const CODEX_PLUGIN_METADATA_CACHE_TTL_MS = 36e5;
-/** Process-local plugin metadata cache with coalesced loads per query. */
 var CodexPluginMetadataCache = class {
 	constructor(nowMs = Date.now) {
 		this.nowMs = nowMs;
@@ -824,7 +770,6 @@ var CodexPluginMetadataCache = class {
 		this.generations = /* @__PURE__ */ new Map();
 		this.clearGeneration = 0;
 	}
-	/** Returns a fresh cached snapshot without issuing a request. */
 	read(appCacheKey, queryKind, requestParams, catalogScope) {
 		const entryKey = buildMetadataCacheEntryKey(appCacheKey, queryKind, requestParams, catalogScope);
 		const entry = this.entries.get(entryKey);
@@ -857,7 +802,7 @@ var CodexPluginMetadataCache = class {
 				queryKind: params.queryKind,
 				response
 			};
-			if (generation === (this.generations.get(params.appCacheKey) ?? 0) && clearGeneration === this.clearGeneration && !hasMarketplaceLoadErrors(response) && (params.cacheable?.(response) ?? true)) this.entries.set(entryKey, {
+			if (generation === (this.generations.get(params.appCacheKey) ?? 0) && clearGeneration === this.clearGeneration && response.marketplaceLoadErrors.length === 0 && (params.cacheable?.(response) ?? true)) this.entries.set(entryKey, {
 				snapshot,
 				expiresAtMs: this.nowMs() + CODEX_PLUGIN_METADATA_CACHE_TTL_MS
 			});
@@ -873,7 +818,6 @@ var CodexPluginMetadataCache = class {
 			if (this.inFlight.get(entryKey)?.promise === promise) this.inFlight.delete(entryKey);
 		}
 	}
-	/** Invalidates all plugin metadata queries for one app-server runtime. */
 	invalidate(appCacheKey) {
 		this.generations.set(appCacheKey, (this.generations.get(appCacheKey) ?? 0) + 1);
 		for (const [entryKey, entry] of this.entries) if (entry.snapshot.appCacheKey === appCacheKey) this.entries.delete(entryKey);
@@ -887,11 +831,7 @@ var CodexPluginMetadataCache = class {
 		this.inFlight.clear();
 	}
 };
-/** Shared plugin metadata cache used by Codex app-server runtime paths. */
 const defaultCodexPluginMetadataCache = new CodexPluginMetadataCache();
-function hasMarketplaceLoadErrors(response) {
-	return response.marketplaceLoadErrors.length > 0;
-}
 function buildMetadataCacheEntryKey(appCacheKey, queryKind, requestParams, catalogScope) {
 	if (queryKind !== "installed") {
 		const listParams = requestParams;
@@ -913,4 +853,4 @@ function buildMetadataCacheEntryKey(appCacheKey, queryKind, requestParams, catal
 	]);
 }
 //#endregion
-export { runCodexComputerUseLiveTest as a, readCodexComputerUseStatus as i, ensureCodexComputerUse as n, installCodexComputerUse as r, defaultCodexPluginMetadataCache as t };
+export { createComputerUseRequest as a, readCodexComputerUseStatus as i, ensureCodexComputerUse as n, runCodexComputerUseLiveTest as o, installCodexComputerUse as r, defaultCodexPluginMetadataCache as t };

package/dist/.setup/{provider-BOsxQHOM.mjs → provider-DH8NSzGt.mjs}

@@ -1,10 +1,5 @@
+import { t as isOnlyMigrationKind } from "./scope-DOC1Xjc8.mjs";
 //#region extensions/codex/src/migration/provider.ts
-function isMemoryOnlyMigration(ctx) {
-	return Boolean(ctx.itemKinds && ctx.itemKinds.length > 0 && ctx.itemKinds.every((kind) => kind === "memory"));
-}
-function isAuthOnlyMigration(ctx) {
-	return Boolean(ctx.itemKinds && ctx.itemKinds.length > 0 && ctx.itemKinds.every((kind) => kind === "auth"));
-}
 function buildCodexMigrationProvider(params = {}) {
 	return {
 		id: "codex",
@@ -16,13 +11,15 @@ function buildCodexMigrationProvider(params = {}) {
 		].join(" "),
 		supportedItemKinds: ["memory", "auth"],
 		async detect(ctx) {
-			const { discoverCodexSource, hasCodexSource } = await import("./source-CUzJq5WN.mjs").then((n) => n.a);
+			const { discoverCodexSource, hasCodexSource } = await import("./source-CS_7GFJZ.mjs").then((n) => n.a);
+			const memoryOnly = isOnlyMigrationKind(ctx, "memory");
+			const authOnly = isOnlyMigrationKind(ctx, "auth");
 			const source = await discoverCodexSource({
 				input: ctx.source,
-				memoryOnly: isMemoryOnlyMigration(ctx),
-				authOnly: isAuthOnlyMigration(ctx)
+				memoryOnly,
+				authOnly
 			});
-			const found = isMemoryOnlyMigration(ctx) ? source.memoryFiles.length > 0 : isAuthOnlyMigration(ctx) ? Boolean(source.authPath) : hasCodexSource(source);
+			const found = memoryOnly ? source.memoryFiles.length > 0 : authOnly ? Boolean(source.authPath) : hasCodexSource(source);
 			return {
 				found,
 				source: source.root,
@@ -32,16 +29,16 @@ function buildCodexMigrationProvider(params = {}) {
 			};
 		},
 		async plan(ctx) {
-			const { buildCodexMigrationPlan } = await import("./plan-CN3VwfNU.mjs");
+			const { buildCodexMigrationPlan } = await import("./plan-Y-QIvrKB.mjs");
 			return buildCodexMigrationPlan(ctx);
 		},
 		deferredApply: { retrySafe: true },
 		prepareApply(ctx) {
-			if (isMemoryOnlyMigration(ctx) || isAuthOnlyMigration(ctx)) return;
-			return import("./apply-DDOi8uNx.mjs").then(({ prepareTargetCodexAppServer }) => prepareTargetCodexAppServer(ctx));
+			if (isOnlyMigrationKind(ctx, "memory") || isOnlyMigrationKind(ctx, "auth")) return;
+			return import("./apply-D3GcSoSa.mjs").then(({ prepareTargetCodexAppServer }) => prepareTargetCodexAppServer(ctx));
 		},
 		async apply(ctx, plan) {
-			const { applyCodexMigrationPlan } = await import("./apply-DDOi8uNx.mjs");
+			const { applyCodexMigrationPlan } = await import("./apply-D3GcSoSa.mjs");
 			return await applyCodexMigrationPlan({
 				ctx,
 				plan,

package/dist/.setup/{provider-capabilities-BfE88FZ5.mjs → provider-capabilities-CAxoF-X1.mjs}

@@ -1,5 +1,5 @@
-import { h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DA4VR4Eb.mjs";
-import { ut as normalizeCodexDynamicToolName } from "./thread-requests-BLvGkP2R.mjs";
+import { h as releaseLeasedSharedCodexAppServerClient } from "./shared-client-DqyTMYug.mjs";
+import { dt as normalizeCodexDynamicToolName } from "./thread-requests-B_bRnMGN.mjs";
 import { pinExecToolTarget } from "openclaw/plugin-sdk/codex-mcp-projection";
 import { loadNodeExecAvailability } from "openclaw/plugin-sdk/node-selection-runtime";
 //#region extensions/codex/src/app-server/shell-dynamic-tools.ts
@@ -7,7 +7,6 @@ const CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME = "node_exec";
 const CODEX_GATEWAY_EXEC_DYNAMIC_TOOL_NAME = "gateway_exec";
 const CODEX_GATEWAY_PROCESS_DYNAMIC_TOOL_NAME = "gateway_process";
 const PROCESS_FOLLOWUP_TEXT = "Use process (list/poll/log/write/send-keys/submit/paste/kill/clear/remove) for follow-up.";
-/** Returns true when plugin config explicitly removes any named dynamic tool. */
 function isCodexDynamicToolExcluded(config, names) {
 	const normalizedNames = new Set(names.map((name) => normalizeCodexDynamicToolName(name)));
 	return (config.codexDynamicToolsExclude ?? []).some((name) => normalizedNames.has(normalizeCodexDynamicToolName(name)));
@@ -21,18 +20,11 @@ async function createNodeExecAliasDynamicTool(execTool, node, discoverySignal, a
 		host: "node",
 		...pinnedNode ? { node: pinnedNode } : {}
 	});
-	const execute = async (toolCallId, args, signal, onUpdate) => {
-		const result = await pinnedTool.execute(toolCallId, args, signal, onUpdate);
-		return {
-			...result,
-			content: result.content.map((item) => item.type === "text" ? Object.assign({}, item, { text: item.text.replace(PROCESS_FOLLOWUP_TEXT, "Remote-node background follow-up is unavailable. Wait for the command to complete.") }) : item)
-		};
-	};
 	return {
 		...pinnedTool,
 		name: CODEX_NODE_EXEC_DYNAMIC_TOOL_NAME,
 		description: pinnedNode ? "Run a shell command to completion on the OpenClaw configured remote node for this session. This tool always uses OpenClaw host=node internally and follows the existing node exec approval and allowlist policy. Remote-node background follow-up is unavailable. Use Codex's native shell for local app-server work when it is available." : "Run a shell command to completion on an OpenClaw remote node. The sole connected node that can execute commands is selected automatically; select by name or id when several can. This tool always uses OpenClaw host=node internally and follows the existing node exec approval and allowlist policy. Remote-node background follow-up is unavailable. Use Codex's native shell for local app-server work when it is available.",
-		execute
+		execute: withProcessFollowupText(pinnedTool, "Remote-node background follow-up is unavailable. Wait for the command to complete.")
 	};
 }
 function createGatewayExecProjection(createProjection, execTool, params) {
@@ -56,13 +48,16 @@ function createSandboxExecProjection(execTool) {
 		...execTool,
 		name: "sandbox_exec",
 		description: "Run a shell command through OpenClaw's configured sandbox backend for this session. Use when OpenClaw sandboxing is active or when a command must execute in the sandbox backend, such as an SSH-backed sandbox or Docker container-path bind layout. Use Codex's native shell only when no OpenClaw sandbox is active and native Code Mode is available.",
-		execute: async (toolCallId, args, signal, onUpdate) => {
-			const result = await execTool.execute(toolCallId, args, signal, onUpdate);
-			return {
-				...result,
-				content: result.content.map((item) => item.type === "text" ? Object.assign({}, item, { text: item.text.replace(PROCESS_FOLLOWUP_TEXT, "Use sandbox_process (list/poll/log/write/send-keys/submit/paste/kill/clear/remove) for follow-up.") }) : item)
-			};
-		}
+		execute: withProcessFollowupText(execTool, "Use sandbox_process (list/poll/log/write/send-keys/submit/paste/kill/clear/remove) for follow-up.")
+	};
+}
+function withProcessFollowupText(tool, followupText) {
+	return async (toolCallId, args, signal, onUpdate) => {
+		const result = await tool.execute(toolCallId, args, signal, onUpdate);
+		return {
+			...result,
+			content: result.content.map((item) => item.type === "text" ? Object.assign({}, item, { text: item.text.replace(PROCESS_FOLLOWUP_TEXT, followupText) }) : item)
+		};
 	};
 }
 function createSandboxProcessProjection(processTool) {