@openclaw/codex 2026.9.6 → 2026.9.7

package/dist/.setup/{config-BoTP_mrL.mjs → config-DKhXquav.mjs}

@@ -1,8 +1,10 @@
-import { c as readExecAsk, f as readRecord, l as readExecSecurity } from "./config-utils-DujwEnhg.mjs";
-import "./config-security-BEReZ6go.mjs";
-import "./config-parsing-CcB9iPoq.mjs";
-import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-BvaRs51b.mjs";
-import "./config-runtime-C8Rw1m1m.mjs";
+import { a as readExecAsk, l as readRecord, o as readExecSecurity } from "./config-utils-D0CXecki.mjs";
+import "./config-security-CE-FcGw9.mjs";
+import "./config-parsing-b088LyhT.mjs";
+import "./auth-start-options-BPIPeEX8.mjs";
+import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-CzyWLTJt.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";
@@ -10,7 +12,10 @@ import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-alia
 //#region extensions/codex/src/app-server/config-exec-approvals.ts
 function resolveOpenClawExecPolicyFromConfig(params) {
 	const globalExec = readRecord(params.config?.tools?.exec);
-	const globalPolicy = applyOpenClawExecPolicyLayer(createDefaultOpenClawExecPolicy(), globalExec);
+	const globalPolicy = applyOpenClawExecPolicyLayer({
+		...resolveOpenClawExecPolicyForMode("full"),
+		touched: false
+	}, globalExec);
 	const agentId = params.agentId?.trim();
 	return applyOpenClawExecPolicyLayer(globalPolicy, agentId ? readRecord(resolveAgentConfig(params.config ?? {}, agentId)?.tools?.exec) : void 0);
 }
@@ -23,17 +28,14 @@ function resolveOpenClawExecPolicyForCodexAppServer(params) {
 		config: params.config,
 		agentId: params.agentId
 	}), params.execOverrides);
-	return applyOpenClawExecApprovalFloors(overridePolicy, resolveOpenClawExecApprovalFloorsForCodexAppServer({
-		approvals: params.approvals,
+	return applyOpenClawExecApprovalFloors(overridePolicy, params.approvals ? resolveExecApprovalsFromFile({
+		file: params.approvals,
 		agentId: params.agentId,
-		policy: overridePolicy
-	}));
-}
-function createDefaultOpenClawExecPolicy() {
-	return {
-		...resolveOpenClawExecPolicyForMode("full"),
-		touched: false
-	};
+		overrides: {
+			security: overridePolicy.security,
+			ask: overridePolicy.ask
+		}
+	}).agent : void 0);
 }
 function applyOpenClawExecPolicyLayer(base, exec) {
 	if (!exec) return base;
@@ -57,17 +59,6 @@ function applyOpenClawExecPolicyLayer(base, exec) {
 		touched: true
 	};
 }
-function resolveOpenClawExecApprovalFloorsForCodexAppServer(params) {
-	if (!params.approvals) return;
-	return resolveExecApprovalsFromFile({
-		file: params.approvals,
-		agentId: params.agentId,
-		overrides: {
-			security: params.policy.security,
-			ask: params.policy.ask
-		}
-	}).agent;
-}
 function applyOpenClawExecApprovalFloors(base, approvalFloors) {
 	if (!approvalFloors) return base;
 	const nextSecurity = approvalFloors.security ? execPolicy.minSecurity(base.security, approvalFloors.security) : base.security;
@@ -104,4 +95,11 @@ function canUseCodexModelBackedApprovalsReviewerForModel(params) {
 	return canUseCodexModelBackedApprovalsReviewerForModel$1(params, resolveProviderIdForAuth);
 }
 //#endregion
-export { resolveOpenClawExecPolicyForCodexAppServer as n, canUseCodexModelBackedApprovalsReviewerForModel as t };
+//#region extensions/codex/src/app-server/config.ts
+var config_exports = /* @__PURE__ */ __exportAll({
+	CODEX_PLUGINS_MARKETPLACE_NAME: () => CODEX_PLUGINS_MARKETPLACE_NAME,
+	CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME: () => CODEX_PLUGINS_WORKSPACE_MARKETPLACE_NAME,
+	resolveCodexAppServerRuntimeOptions: () => resolveCodexAppServerRuntimeOptions
+});
+//#endregion
+export { canUseCodexModelBackedApprovalsReviewerForModel as n, resolveOpenClawExecPolicyForCodexAppServer as r, config_exports as t };

package/dist/.setup/{config-options-BvaRs51b.mjs → config-options-CzyWLTJt.mjs}

@@ -1,9 +1,12 @@
-import { a as normalizeHeaders, d as readNumberEnv, f as readRecord, i as normalizeCodexServiceTier, o as normalizePositiveNumber, p as resolveArgs, r as normalizeCodexAppServerSecretInput, s as readBooleanEnv, t as hashSecretForKey, u as readNonEmptyString } from "./config-utils-DujwEnhg.mjs";
-import { A as selectForcedPromptingSandbox, C as assertCodexAppServerAllowedForOpenClawExecMode, D as resolveEffectiveOpenClawExecModeForCodexAppServer, E as resolveCodexPolicyModeForOpenClawExecMode, O as resolveSandbox, T as resolveApprovalsReviewer, a as resolveCodexAppServerNetworkProxy, c as resolveTransport, d as resolveCodexAppServerHomeDir, g as parseAllowedApprovalPoliciesFromCodexRequirements, i as normalizeRemoteWorkspaceRoot, k as selectForcedDangerFullAccessSandbox, o as resolveDefaultCodexAppServerPolicy, p as resolveCodexAppServerUserHomeDir, r as inferCodexAppServerConnectionClass, s as resolvePolicyMode, t as assertCodexAppServerConnectionSecurity, w as resolveApprovalPolicy, y as readCodexRequirementsToml } from "./config-security-BEReZ6go.mjs";
-import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-CcB9iPoq.mjs";
-import { i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
+import { c as readNumberEnv, i as normalizeHeaders, l as readRecord, r as normalizeCodexServiceTier, s as readNonEmptyString, t as hashSecretForKey, u as resolveArgs } from "./config-utils-D0CXecki.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { C as resolveSandbox, S as resolveEffectiveOpenClawExecModeForCodexAppServer, T as selectForcedPromptingSandbox, a as resolveDefaultCodexAppServerPolicy, b as resolveApprovalsReviewer, d as parseAllowedApprovalPoliciesFromCodexRequirements, i as resolveCodexAppServerNetworkProxy, m as readCodexRequirementsToml, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, s as resolveTransport, t as assertCodexAppServerConnectionSecurity, v as assertCodexAppServerAllowedForOpenClawExecMode, w as selectForcedDangerFullAccessSandbox, x as resolveCodexPolicyModeForOpenClawExecMode, y as resolveApprovalPolicy } from "./config-security-CE-FcGw9.mjs";
+import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-b088LyhT.mjs";
+import { i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
+import { r as resolveCodexAppServerUserHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
+import { normalizeTrimmedStringList, parseBooleanValue } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { parse } from "smol-toml";
 import { readFileSync } from "node:fs";
 import path from "node:path";
@@ -55,11 +58,9 @@ function canUseCodexModelBackedApprovalsReviewerForModel(params, resolveAuthProv
 	return (inferredProvider ?? explicitProvider) === "openai" && isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId);
 }
 function isTrustedCodexModelBackedOpenAIProvider(params, resolveAuthProviderId) {
-	if (!openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(params.env)) return false;
+	if (![params.env?.OPENAI_BASE_URL, params.env?.OPENAI_API_BASE].every(isNativeOpenAIBaseUrl)) return false;
 	if (!nativeCodexConfigIsTrustedForModelBackedReview(params)) return false;
-	const openAIProviders = readConfiguredOpenAIProvidersForModelBackedReview(params.config, resolveAuthProviderId);
-	if (openAIProviders.length === 0) return true;
-	return openAIProviders.every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
+	return readConfiguredOpenAIProvidersForModelBackedReview(params.config, resolveAuthProviderId).every((openAIProvider) => configuredOpenAIProviderIsTrustedForModelBackedReview(openAIProvider, params.model));
 }
 function resolveCodexModelBackedReviewerPolicyContext(params) {
 	const provider = params.provider?.trim();
@@ -70,21 +71,9 @@ function resolveCodexModelBackedReviewerPolicyContext(params) {
 	const bindingModelProvider = params.bindingModelProvider?.trim();
 	const currentModel = params.model?.trim();
 	const bindingModel = params.bindingModel?.trim();
-	if (bindingModelProvider && currentModel && bindingModel && currentModel === bindingModel) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(bindingModelProvider),
-		model: params.model ?? params.bindingModel
-	};
-	const currentModelProvider = inferProviderFromModelRef(params.model);
-	if (currentModelProvider) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(currentModelProvider),
-		model: params.model
-	};
-	if (bindingModelProvider) return {
-		modelProvider: normalizeCodexModelBackedReviewerPolicyProvider(bindingModelProvider),
-		model: params.model ?? params.bindingModel
-	};
+	const modelProvider = bindingModelProvider && currentModel && bindingModel && currentModel === bindingModel ? bindingModelProvider : (inferProviderFromModelRef(params.model) ?? bindingModelProvider) || (params.nativeAuthProfile === true ? "openai" : void 0);
 	return {
-		modelProvider: params.nativeAuthProfile === true ? "openai" : void 0,
+		modelProvider: modelProvider ? normalizeCodexModelBackedReviewerPolicyProvider(modelProvider) : void 0,
 		model: params.model ?? params.bindingModel
 	};
 }
@@ -230,9 +219,6 @@ function isNativeOpenAIBaseUrl(value) {
 		return false;
 	}
 }
-function openAIBaseUrlEnvOverridesAreTrustedForModelBackedReview(env) {
-	return [env?.OPENAI_BASE_URL, env?.OPENAI_API_BASE].every(isNativeOpenAIBaseUrl);
-}
 function isNativeChatGPTBaseUrl(value) {
 	if (typeof value !== "string" || !value.trim()) return true;
 	try {
@@ -283,7 +269,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 		const args = resolveArgs(config.args, env.OPENCLAW_CODEX_APP_SERVER_ARGS);
 		const headers = normalizeHeaders(config.headers);
 		const clearEnv = normalizeTrimmedStringList(config.clearEnv);
-		const authToken = normalizeCodexAppServerSecretInput({
+		const authToken = normalizeResolvedSecretInputString({
 			value: config.authToken,
 			path: "plugins.entries.codex.config.appServer.authToken"
 		});
@@ -293,7 +279,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			url
 		});
 		const remoteAppsSubstrate = "preconfigured";
-		const remoteWorkspaceRoot = normalizeRemoteWorkspaceRoot(config.remoteWorkspaceRoot);
+		const remoteWorkspaceRoot = readNonEmptyString(config.remoteWorkspaceRoot);
 		const execMode = resolveEffectiveOpenClawExecModeForCodexAppServer({
 			execMode: params.execMode,
 			execPolicy: params.execPolicy
@@ -400,12 +386,13 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			...remoteWorkspaceRoot ? { remoteWorkspaceRoot } : {},
 			codeModeOnly: config.codeModeOnly === true,
 			loopDetectionPreToolUseRelay: config.loopDetectionPreToolUseRelay !== false,
-			requestTimeoutMs: normalizePositiveNumber(config.requestTimeoutMs, 6e4),
+			requestTimeoutMs: resolvePositiveTimerTimeoutMs(config.requestTimeoutMs, 6e4),
 			approvalPolicy: forcedPolicy?.approvalPolicy ?? approvalPolicy,
 			approvalPolicySource,
 			sandbox: resolvedSandbox,
 			approvalsReviewer: forcedPolicy?.approvalsReviewer ?? explicitApprovalsReviewer ?? defaultPolicy?.approvalsReviewer ?? (policyMode === "guardian" ? "auto_review" : "user"),
 			...serviceTier ? { serviceTier } : {},
+			enableUltrafast: config.enableUltrafast === true,
 			...resolveCodexAppServerNetworkProxy(config.networkProxy, resolvedSandbox)
 		};
 	}
@@ -465,17 +452,17 @@ function resolveCodexComputerUseConfig(params = {}) {
 	const marketplaceName = readNonEmptyString(params.overrides?.marketplaceName) ?? readNonEmptyString(config.marketplaceName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_NAME);
 	const configuredPluginName = readNonEmptyString(params.overrides?.pluginName) ?? readNonEmptyString(config.pluginName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_NAME);
 	const configuredMcpServerName = readNonEmptyString(params.overrides?.mcpServerName) ?? readNonEmptyString(config.mcpServerName) ?? readNonEmptyString(env.OPENCLAW_CODEX_COMPUTER_USE_MCP_SERVER_NAME);
-	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
-	const marketplaceDiscoveryTimeoutMs = normalizePositiveNumber(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
-	const liveTestTimeoutMs = normalizePositiveNumber(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
-	const toolCallTimeoutMs = normalizePositiveNumber(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
+	const autoInstall = params.overrides?.autoInstall ?? config.autoInstall ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_INSTALL) ?? false;
+	const marketplaceDiscoveryTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.marketplaceDiscoveryTimeoutMs ?? config.marketplaceDiscoveryTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS);
+	const liveTestTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.liveTestTimeoutMs ?? config.liveTestTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS);
+	const toolCallTimeoutMs = resolvePositiveTimerTimeoutMs(params.overrides?.toolCallTimeoutMs ?? config.toolCallTimeoutMs ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS), DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS);
 	const healthCheckIntervalMinutes = normalizeComputerUseHealthCheckIntervalMinutes(params.overrides?.healthCheckIntervalMinutes ?? config.healthCheckIntervalMinutes ?? readNumberEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_INTERVAL_MINUTES));
-	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
+	const healthCheckEnabled = params.overrides?.healthCheckEnabled ?? config.healthCheckEnabled ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_HEALTH_CHECK_ENABLED) ?? false;
 	const pluginCacheMode = normalizeComputerUsePluginCacheMode(params.overrides?.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(config.pluginCacheMode) ?? normalizeComputerUsePluginCacheMode(env.OPENCLAW_CODEX_COMPUTER_USE_PLUGIN_CACHE_MODE) ?? "independent";
-	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
-	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
+	const strictReadiness = params.overrides?.strictReadiness ?? config.strictReadiness ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_STRICT_READINESS) ?? false;
+	const autoRepair = params.overrides?.autoRepair ?? config.autoRepair ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE_AUTO_REPAIR) ?? false;
 	return {
-		enabled: params.overrides?.enabled ?? config.enabled ?? readBooleanEnv(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
+		enabled: params.overrides?.enabled ?? config.enabled ?? parseBooleanValue(env.OPENCLAW_CODEX_COMPUTER_USE) ?? Boolean(autoInstall || marketplaceSource || marketplacePath || marketplaceName || configuredPluginName || configuredMcpServerName),
 		autoInstall,
 		marketplaceDiscoveryTimeoutMs,
 		liveTestTimeoutMs,

package/dist/.setup/{config-parsing-CcB9iPoq.mjs → config-parsing-b088LyhT.mjs}

@@ -1,4 +1,4 @@
-import { i as normalizeCodexServiceTier, m as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN } from "./config-utils-DujwEnhg.mjs";
+import { d as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, r as normalizeCodexServiceTier } from "./config-utils-D0CXecki.mjs";
 import { asNullableRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { z } from "zod";
 import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
@@ -24,55 +24,33 @@ const DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS = 6e4;
 const DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS = 6e4;
 const DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS = 6e4;
 const DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX = "openclaw-network";
-const codexAppServerTransportSchema = z.enum([
-	"stdio",
-	"websocket",
-	"unix"
-]);
-const codexAppServerHomeScopeSchema = z.enum(["agent", "user"]);
 const SecretInputSchema = buildSecretInputSchema();
-const codexAppServerPolicyModeSchema = z.enum(["yolo", "guardian"]);
 const codexAppServerApprovalPolicySchema = z.preprocess((value) => value === "on-failure" ? "on-request" : value, z.enum(["never", "on-request"]));
-const codexAppServerSandboxSchema = z.enum([
-	"read-only",
-	"workspace-write",
-	"danger-full-access"
-]);
-const codexAppServerApprovalsReviewerSchema = z.enum([
-	"user",
-	"auto_review",
-	"guardian_subagent"
-]);
-const codexDynamicToolsLoadingSchema = z.enum(["searchable", "direct"]);
 const codexComputerUseHealthIntervalSchema = z.union([
 	z.literal(30),
 	z.literal(60),
 	z.literal(120),
 	z.literal(240)
 ]);
-const codexComputerUsePluginCacheModeSchema = z.enum(["shared", "independent"]);
 const codexPluginDestructivePolicySchema = z.union([
 	z.boolean(),
 	z.literal("auto"),
 	z.literal("ask")
 ]);
 const codexAppServerServiceTierSchema = z.preprocess((value) => value === null ? null : normalizeCodexServiceTier(value), z.string().trim().min(1).nullable().optional()).optional();
-const codexAppServerCyberFailoverSchema = z.object({
+const codexAppServerCyberFailoverSchema = z.strictObject({
 	mode: z.enum(["auto", "off"]).optional(),
 	model: z.string().trim().min(1).optional(),
 	cooloffMs: z.number().positive().optional()
-}).strict();
-const codexAppServerExperimentalSchema = z.object({ sandboxExecServer: z.boolean().optional() }).strict();
-const codexAppServerRemoteWorkspaceRootSchema = z.string().trim().min(1);
-const codexAppServerNetworkProxyDomainPermissionSchema = z.enum(["allow", "deny"]);
-const codexAppServerNetworkProxyUnixSocketPermissionSchema = z.enum(["allow", "none"]);
-const codexAppServerNetworkProxySchema = z.object({
+});
+const codexAppServerExperimentalSchema = z.strictObject({ sandboxExecServer: z.boolean().optional() });
+const codexAppServerNetworkProxySchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	profileName: z.string().trim().min(1).optional(),
 	baseProfile: z.enum(["read-only", "workspace"]).optional(),
 	mode: z.enum(["limited", "full"]).optional(),
-	domains: z.record(z.string(), codexAppServerNetworkProxyDomainPermissionSchema).optional(),
-	unixSockets: z.record(z.string(), codexAppServerNetworkProxyUnixSocketPermissionSchema).optional(),
+	domains: z.record(z.string(), z.enum(["allow", "deny"])).optional(),
+	unixSockets: z.record(z.string(), z.enum(["allow", "none"])).optional(),
 	proxyUrl: z.string().trim().min(1).optional(),
 	socksUrl: z.string().trim().min(1).optional(),
 	enableSocks5: z.boolean().optional(),
@@ -81,45 +59,45 @@ const codexAppServerNetworkProxySchema = z.object({
 	allowLocalBinding: z.boolean().optional(),
 	dangerouslyAllowNonLoopbackProxy: z.boolean().optional(),
 	dangerouslyAllowAllUnixSockets: z.boolean().optional()
-}).strict();
-const codexPluginEntryConfigSchema = z.object({
+});
+const codexPluginEntryConfigSchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	marketplaceName: z.string().regex(CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN).optional(),
 	pluginName: z.string().trim().min(1).optional(),
 	allow_destructive_actions: codexPluginDestructivePolicySchema.optional()
-}).strict();
-const codexPluginsConfigSchema = z.object({
+});
+const codexPluginsConfigSchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	allow_all_plugins: z.boolean().optional(),
 	allow_destructive_actions: codexPluginDestructivePolicySchema.optional(),
 	plugins: z.record(z.string(), codexPluginEntryConfigSchema).optional()
-}).strict();
-const codexSupervisionEndpointSchema = z.union([z.object({
+});
+const codexSupervisionEndpointSchema = z.union([z.strictObject({
 	id: z.string().optional(),
 	label: z.string().optional(),
 	transport: z.literal("stdio-proxy").optional(),
 	command: z.string().optional(),
 	args: z.array(z.string()).optional(),
 	cwd: z.string().optional()
-}).strict(), z.object({
+}), z.strictObject({
 	id: z.string().optional(),
 	label: z.string().optional(),
 	transport: z.literal("websocket"),
 	url: z.string(),
 	authTokenEnv: z.string().optional()
-}).strict()]);
-const codexSupervisionConfigSchema = z.object({
+})]);
+const codexSupervisionConfigSchema = z.strictObject({
 	enabled: z.boolean().optional(),
 	endpoints: z.array(codexSupervisionEndpointSchema).optional(),
 	allowRawTranscripts: z.boolean().optional(),
 	allowWriteControls: z.boolean().optional()
-}).strict();
-const codexPluginConfigSchema = z.object({
-	codexDynamicToolsLoading: codexDynamicToolsLoadingSchema.optional(),
+});
+const codexPluginConfigSchema = z.strictObject({
+	codexDynamicToolsLoading: z.enum(["searchable", "direct"]).optional(),
 	codexDynamicToolsExclude: z.array(z.string()).optional(),
 	sessionCatalog: codexSessionCatalogConfigSchema.optional(),
 	discovery: codexDiscoveryConfigSchema.optional(),
-	computerUse: z.object({
+	computerUse: z.strictObject({
 		enabled: z.boolean().optional(),
 		autoInstall: z.boolean().optional(),
 		marketplaceDiscoveryTimeoutMs: z.number().positive().optional(),
@@ -127,7 +105,7 @@ const codexPluginConfigSchema = z.object({
 		toolCallTimeoutMs: z.number().positive().optional(),
 		healthCheckEnabled: z.boolean().optional(),
 		healthCheckIntervalMinutes: codexComputerUseHealthIntervalSchema.optional(),
-		pluginCacheMode: codexComputerUsePluginCacheModeSchema.optional(),
+		pluginCacheMode: z.enum(["shared", "independent"]).optional(),
 		strictReadiness: z.boolean().optional(),
 		autoRepair: z.boolean().optional(),
 		marketplaceSource: z.string().optional(),
@@ -135,43 +113,65 @@ const codexPluginConfigSchema = z.object({
 		marketplaceName: z.string().optional(),
 		pluginName: z.string().optional(),
 		mcpServerName: z.string().optional()
-	}).strict().optional(),
+	}).optional(),
 	codexPlugins: z.unknown().optional(),
 	supervision: codexSupervisionConfigSchema.optional(),
-	appServer: z.object({
-		mode: codexAppServerPolicyModeSchema.optional(),
-		transport: codexAppServerTransportSchema.optional(),
-		homeScope: codexAppServerHomeScopeSchema.optional(),
+	appServer: z.strictObject({
+		mode: z.enum(["yolo", "guardian"]).optional(),
+		transport: z.enum([
+			"stdio",
+			"websocket",
+			"unix"
+		]).optional(),
+		homeScope: z.enum(["agent", "user"]).optional(),
 		command: z.string().optional(),
 		args: z.union([z.array(z.string()), z.string()]).optional(),
 		url: z.string().optional(),
 		authToken: SecretInputSchema.optional(),
 		headers: z.record(z.string(), SecretInputSchema).optional(),
 		clearEnv: z.array(z.string()).optional(),
-		remoteWorkspaceRoot: codexAppServerRemoteWorkspaceRootSchema.optional(),
+		remoteWorkspaceRoot: z.string().trim().min(1).optional(),
 		codeModeOnly: z.boolean().optional(),
 		loopDetectionPreToolUseRelay: z.boolean().optional(),
 		requestTimeoutMs: z.number().positive().optional(),
 		approvalPolicy: codexAppServerApprovalPolicySchema.optional(),
-		sandbox: codexAppServerSandboxSchema.optional(),
-		approvalsReviewer: codexAppServerApprovalsReviewerSchema.optional(),
+		sandbox: z.enum([
+			"read-only",
+			"workspace-write",
+			"danger-full-access"
+		]).optional(),
+		approvalsReviewer: z.enum([
+			"user",
+			"auto_review",
+			"guardian_subagent"
+		]).optional(),
 		serviceTier: codexAppServerServiceTierSchema,
+		enableUltrafast: z.boolean().optional(),
 		cyberFailover: codexAppServerCyberFailoverSchema.optional(),
 		networkProxy: codexAppServerNetworkProxySchema.optional(),
 		defaultWorkspaceDir: z.string().optional(),
 		experimental: codexAppServerExperimentalSchema.optional()
-	}).strict().optional()
-}).strict();
+	}).optional()
+});
 function readCodexPluginConfig(value) {
-	if (asNullableRecord(asNullableRecord(value)?.appServer)?.approvalPolicy === "untrusted") throw new Error("plugins.entries.codex.config.appServer.approvalPolicy=\"untrusted\" is retired; run \"openclaw doctor --fix\" to migrate it to \"on-request\".");
+	const appServer = asNullableRecord(asNullableRecord(value)?.appServer);
+	if (appServer?.approvalPolicy === "untrusted") throw new Error("plugins.entries.codex.config.appServer.approvalPolicy=\"untrusted\" is retired; run \"openclaw doctor --fix\" to migrate it to \"on-request\".");
 	const parsed = codexPluginConfigSchema.safeParse(value);
-	if (!parsed.success) return {};
+	if (!parsed.success) {
+		if (asNullableRecord(appServer?.networkProxy)?.enabled === true) {
+			const issuePath = parsed.error.issues[0]?.path ?? [];
+			const fieldDepth = issuePath[0] === "appServer" && issuePath[1] === "networkProxy" ? 3 : 2;
+			const fieldPath = ["plugins.entries.codex.config", ...issuePath.slice(0, fieldDepth)].join(".");
+			throw new Error(`Invalid ${fieldPath}; fix this field before starting Codex with network restrictions. Run "openclaw doctor --fix" for supported repairs.`);
+		}
+		return {};
+	}
 	const { codexPlugins: rawCodexPlugins, ...config } = parsed.data;
 	const plugins = codexPluginsConfigSchema.safeParse(rawCodexPlugins);
 	if (!plugins.success) return config;
 	return {
 		...config,
-		...plugins.data ? { codexPlugins: plugins.data } : {}
+		codexPlugins: plugins.data
 	};
 }
 function isCodexSandboxExecServerEnabled(pluginConfig, sandbox) {
@@ -196,7 +196,7 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 	const enabled = config?.enabled === true;
 	const destructivePolicy = resolveCodexPluginDestructivePolicy(config?.allow_destructive_actions ?? true);
 	const pluginPolicies = Object.entries(config?.plugins ?? {}).flatMap(([configKey, entry]) => {
-		if (!isCodexPluginMarketplaceName(entry.marketplaceName) || !entry.pluginName) return [];
+		if (!entry.marketplaceName || !entry.pluginName) return [];
 		const entryDestructivePolicy = resolveCodexPluginDestructivePolicy(entry.allow_destructive_actions ?? config?.allow_destructive_actions ?? true);
 		return [{
 			configKey,
@@ -216,9 +216,6 @@ function resolveCodexPluginsPolicy(pluginConfig) {
 		pluginPolicies
 	};
 }
-function isCodexPluginMarketplaceName(value) {
-	return typeof value === "string" && CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN.test(value);
-}
 function resolveCodexPluginDestructivePolicy(policy) {
 	if (policy === "auto" || policy === "ask") return {
 		allowDestructiveActions: true,

package/dist/.setup/{config-runtime-C8Rw1m1m.mjs → config-runtime-C0NbLms1.mjs}

@@ -1,5 +1,5 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import { r as createCodexAppServerConfig } from "./config-options-BvaRs51b.mjs";
+import { r as createCodexAppServerConfig } from "./config-options-CzyWLTJt.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({