@openclaw/codex 2026.9.6 → 2026.9.8

package/dist/.setup/{model-catalog-CfXJf9Ay.mjs → model-catalog-DiC0Tkha.mjs}

@@ -1,14 +1,14 @@
-import { r as buildCodexRuntimeModelParams } from "./harness-a_MsE4-_.mjs";
-import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { t as buildCodexRuntimeModelParams } from "./model-runtime-BdqzOMkU.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
 import { n as isCodexAppServerProxyLaunch } from "./launch-args-DbFCehO7.mjs";
-import { o as withCodexAppServerJsonClient } from "./request-D2L0zMrq.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C8Rw1m1m.mjs";
-import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-WqZtZfXN.mjs";
-import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-DA4VR4Eb.mjs";
-import { t as listAllCodexAppServerModels } from "./models-KnqBv0hE.mjs";
-import { probeCodexNativeAuth } from "./native-auth-rWbGbMn3.mjs";
+import { o as withCodexAppServerJsonClient } from "./request-BZOfsSXW.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
+import { a as resolveCodexAppServerAuthProfileStore, r as resolveCodexAppServerAuthProfileId } from "./auth-profile-B0okYl2D.mjs";
+import { r as captureSharedCodexAppServerCatalogLifetime } from "./shared-client-CJCTeFpQ.mjs";
+import { i as isCodexResponsesOAuthCredential } from "./responses-oauth-twnuTaAa.mjs";
+import { n as listAllCodexAppServerModels } from "./models-DfLmPV0k.mjs";
+import { probeCodexNativeAuth } from "./native-auth-CuG53tu4.mjs";
 //#region extensions/codex/src/app-server/model-catalog.ts
-const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 2500;
 const INPUT_TYPES = /* @__PURE__ */ new Set([
 	"text",
 	"image",
@@ -81,11 +81,12 @@ function createCodexAppServerModelCatalog(runtime) {
 				store: authProfileStore,
 				config: params.config
 			}) : void 0;
+			if (isCodexResponsesOAuthCredential(authProfileStore?.profiles[authProfileId ?? ""])) return [];
 			const usesNativeHome = ownsLocalProcess && options.start.homeScope === "user";
 			const native = usesNativeHome ? await probeCodexNativeAuth({ pluginConfig }) : void 0;
 			if (usesNativeHome && !native || disposed || observations.get(key) !== observation) return [];
 			const { start } = options;
-			const timeoutMs = discovery?.timeoutMs ?? DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS;
+			const timeoutMs = discovery?.timeoutMs ?? 1e4;
 			const result = await withCodexAppServerJsonClient({
 				startOptions: start,
 				config: params.config,

package/dist/.setup/model-runtime-BdqzOMkU.mjs

@@ -0,0 +1,11 @@
+import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+//#region extensions/codex/src/app-server/model-runtime.ts
+const CODEX_APP_SERVER_RUNTIME_MODEL_PARAM = "codexAppServerRuntimeModel";
+function buildCodexRuntimeModelParams(catalogId, runtimeModelId) {
+	return catalogId === runtimeModelId ? void 0 : { [CODEX_APP_SERVER_RUNTIME_MODEL_PARAM]: runtimeModelId };
+}
+function readCodexRuntimeModelId(model, fallbackId) {
+	return normalizeOptionalString(model?.params?.[CODEX_APP_SERVER_RUNTIME_MODEL_PARAM]) ?? model?.id ?? fallbackId;
+}
+//#endregion
+export { readCodexRuntimeModelId as n, buildCodexRuntimeModelParams as t };

package/dist/.setup/{models-KnqBv0hE.mjs → models-DfLmPV0k.mjs}

@@ -1,15 +1,10 @@
-import { g as assertCodexModelListResponse } from "./client-Cs08OXVQ.mjs";
-import { normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { g as assertCodexModelListResponse } from "./client-qyUBJlGZ.mjs";
+import { normalizeOptionalString, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/codex/src/app-server/models.ts
-/**
-* Lists and normalizes models exposed by the Codex app-server `model/list`
-* endpoint, including pagination and shared-client lease handling.
-*/
-/** Lists one Codex app-server model page using the configured auth/client options. */
+const DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS = 1e4;
 async function listCodexAppServerModels(options = {}) {
 	return await withCodexAppServerModelRequest(options, async (request) => requestModelListPage(request, options));
 }
-/** Walks Codex app-server model pages until exhaustion or the max-page guard. */
 async function listAllCodexAppServerModels(options = {}) {
 	const maxPages = normalizeMaxPages(options.maxPages);
 	return await withCodexAppServerModelRequest(options, async (request) => {
@@ -35,10 +30,10 @@ async function listAllCodexAppServerModels(options = {}) {
 }
 async function withCodexAppServerModelRequest(options, run) {
 	if (options.request) return await run(options.request);
-	const timeoutMs = options.timeoutMs ?? 2500;
+	const timeoutMs = options.timeoutMs ?? 1e4;
 	const useSharedClient = options.sharedClient !== false;
-	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-DA4VR4Eb.mjs").then((n) => n.y);
-	const { requestCodexAppServerClientJson } = await import("./request-D2L0zMrq.mjs").then((n) => n.a);
+	const { createIsolatedCodexAppServerClient, getLeasedSharedCodexAppServerClient, releaseLeasedSharedCodexAppServerClient } = await import("./shared-client-CJCTeFpQ.mjs").then((n) => n.v);
+	const { requestCodexAppServerClientJson } = await import("./request-BZOfsSXW.mjs").then((n) => n.a);
 	const client = await (useSharedClient ? getLeasedSharedCodexAppServerClient : createIsolatedCodexAppServerClient)({
 		startOptions: options.startOptions,
 		timeoutMs,
@@ -69,7 +64,6 @@ async function requestModelListPage(request, options) {
 		}
 	}));
 }
-/** Parses a raw Codex app-server model/list response into OpenClaw's normalized shape. */
 function readModelListResult(value) {
 	const response = assertCodexModelListResponse(value);
 	const models = response.data.map((entry) => readCodexModel(entry));
@@ -91,17 +85,14 @@ function readCodexModel(value) {
 		hidden: value.hidden,
 		isDefault: value.isDefault,
 		inputModalities: value.inputModalities,
-		supportedReasoningEfforts: readReasoningEfforts(value.supportedReasoningEfforts),
+		serviceTiers: normalizeUniqueTrimmedStringList((value.serviceTiers ?? []).map((tier) => tier.id)),
+		supportedReasoningEfforts: normalizeUniqueTrimmedStringList(value.supportedReasoningEfforts.map((entry) => entry.reasoningEffort)),
 		...normalizeOptionalString(value.defaultReasoningEffort) ? { defaultReasoningEffort: normalizeOptionalString(value.defaultReasoningEffort) } : {},
 		...value.multiAgentVersion !== void 0 ? { multiAgentVersion: value.multiAgentVersion } : {}
 	};
 }
-function readReasoningEfforts(value) {
-	const efforts = value.map((entry) => normalizeOptionalString(entry.reasoningEffort)).filter((entry) => entry !== void 0);
-	return uniqueStrings(efforts);
-}
 function normalizeMaxPages(value) {
 	return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : 20;
 }
 //#endregion
-export { listCodexAppServerModels as n, readModelListResult as r, listAllCodexAppServerModels as t };
+export { readModelListResult as i, listAllCodexAppServerModels as n, listCodexAppServerModels as r, DEFAULT_MODEL_DISCOVERY_TIMEOUT_MS as t };

package/dist/.setup/{native-auth-rWbGbMn3.mjs → native-auth-CuG53tu4.mjs}

@@ -1,8 +1,8 @@
-import { d as readCodexPluginConfig } from "./config-parsing-CcB9iPoq.mjs";
+import { d as readCodexPluginConfig } from "./config-parsing-b088LyhT.mjs";
 import { n as isCodexAppServerProxyLaunch, t as buildCodexLoginStatusArgs } from "./launch-args-DbFCehO7.mjs";
-import { r as resolveManagedCodexAppServerStartOptions } from "./managed-binary-BnshlFag.mjs";
-import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-h2VHOskC.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C8Rw1m1m.mjs";
+import { r as resolveManagedCodexAppServerStartOptions } from "./managed-binary-kiWRhNRE.mjs";
+import { n as resolveCodexAppServerSpawnEnv } from "./transport-stdio-Bdegpn2V.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
 import { runUtf8CommandWithTimeout } from "openclaw/plugin-sdk/process-runtime";
 import { materializeWindowsSpawnProgram, resolveWindowsSpawnProgram } from "openclaw/plugin-sdk/windows-spawn";
 //#region extensions/codex/src/app-server/native-auth.ts

package/dist/.setup/{native-execution-policy-umd0tgh4.mjs → native-execution-policy-BxZJy5mP.mjs}

@@ -37,29 +37,17 @@ function resolveCodexNativeExecutionPolicy(params) {
 		agentId: sandboxAgentId,
 		classificationAgentId: sandboxAgentId
 	}).sandboxed : false);
-	const agentExec = agentId ? resolvePolicyAgentExec({
-		config,
-		agentId
-	}) : void 0;
+	const agentExec = agentId ? resolveAgentConfig(config, agentId)?.tools?.exec : void 0;
 	const globalExec = config.tools?.exec;
 	const requestedExecHost = normalizeExecTarget(params.execOverrides?.host) ?? normalizeExecTarget(sessionEntry?.execHost) ?? normalizeExecTarget(agentExec?.host) ?? normalizeExecTarget(globalExec?.host) ?? "auto";
-	const effectiveExecHost = resolveEffectiveExecHost({
-		requestedExecHost,
-		sandboxAvailable
-	});
+	const effectiveExecHost = requestedExecHost === "auto" ? sandboxAvailable ? "sandbox" : "gateway" : requestedExecHost;
 	const node = params.execOverrides?.node ?? sessionEntry?.execNode ?? agentExec?.node ?? globalExec?.node;
-	if (effectiveExecHost !== "node") return {
-		nativeToolSurfaceAllowed: true,
-		requestedExecHost,
-		effectiveExecHost,
-		node
-	};
 	return {
-		nativeToolSurfaceAllowed: false,
+		nativeToolSurfaceAllowed: effectiveExecHost !== "node",
 		requestedExecHost,
 		effectiveExecHost,
 		node,
-		blockReason: "OpenClaw exec host=node is active for this session. Codex app-server native execution cannot route shell, filesystem, MCP, or app-backed work through the selected OpenClaw node."
+		...effectiveExecHost === "node" ? { blockReason: "OpenClaw exec host=node is active for this session. Codex app-server native execution cannot route shell, filesystem, MCP, or app-backed work through the selected OpenClaw node." } : {}
 	};
 }
 /** Formats the user-facing explanation shown when native tools are blocked by exec host=node. */
@@ -77,9 +65,6 @@ function resolvePolicyAgentId(params) {
 	if (sessionAgentId) return sessionAgentId;
 	return tryResolveDefaultAgentId(params.config);
 }
-function resolvePolicyAgentExec(params) {
-	return resolveAgentConfig(params.config, params.agentId)?.tools?.exec;
-}
 function parseAgentIdFromSessionKey(sessionKey) {
 	const raw = sessionKey?.trim();
 	if (!raw) return;
@@ -92,15 +77,9 @@ function shouldReadRuntimeSessionEntry(params) {
 	const explicitAgentId = normalizeAgentIdOrDefault(params.agentId);
 	if (!explicitAgentId) return true;
 	const sessionAgentId = parseAgentIdFromSessionKey(params.sessionKey);
-	if (!sessionAgentId) return isDefaultAgentSessionKeyForAgent({
-		config: params.config,
-		agentId: explicitAgentId
-	});
+	if (!sessionAgentId) return normalizeAgentId(explicitAgentId) === tryResolveDefaultAgentId(params.config);
 	return sessionAgentId === explicitAgentId;
 }
-function isDefaultAgentSessionKeyForAgent(params) {
-	return normalizeAgentId(params.agentId) === tryResolveDefaultAgentId(params.config);
-}
 function normalizeAgentIdOrDefault(value) {
 	const normalized = normalizeAgentId(value);
 	return normalized === "main" && !(value ?? "").trim() ? void 0 : normalized;
@@ -109,10 +88,6 @@ function normalizeExecTarget(value) {
 	const normalized = value?.trim().toLowerCase();
 	if (normalized === "auto" || normalized === "sandbox" || normalized === "gateway" || normalized === "node") return normalized;
 }
-function resolveEffectiveExecHost(params) {
-	if (params.requestedExecHost === "auto") return params.sandboxAvailable ? "sandbox" : "gateway";
-	return params.requestedExecHost;
-}
 function readRuntimeSessionEntryBestEffort(params) {
 	try {
 		return getSessionEntry({