@openclaw/codex 2026.9.8 → 2026.10.1-beta.2

package/dist/.setup/{plugin-metadata-cache-BRwtRct9.mjs → computer-use-BBN9y326.mjs}

@@ -1,16 +1,17 @@
 import { t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
-import { o as resolveCodexComputerUseConfig } from "./config-options-CzyWLTJt.mjs";
-import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, t as isManagedCodexDesktopCommand } from "./managed-binary-kiWRhNRE.mjs";
-import { n as describeControlFailure } from "./capabilities-B3WEZl4e.mjs";
-import { r as requestCodexAppServerClientJson } from "./request-BZOfsSXW.mjs";
-import "./config-DKhXquav.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
-import { $ as reconcileCodexComputerUseStartArtifacts, O as acquireCodexNativeConfigFence, at as isLegacyCodexComputerUsePluginDisabled, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, ct as assertNotSymlink, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, it as hasLegacyCodexComputerUseMcpPolicy, nt as resolveBundledComputerUseMarketplacePath, ot as resolveManagedCodexComputerUseConfig, p as readCodexAppServerClientProcessIdentity, rt as resolveClientManagedBundledMarketplacePath, st as ensureCodexComputerUseSharedPluginCache, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, y as waitForCodexAppServerClientDesktopGenerationDrain } from "./shared-client-CJCTeFpQ.mjs";
-import { c as isCodexAppServerIndeterminateTransportError, o as isCodexAppServerConnectionClosedError, s as isCodexAppServerIndeterminateRequestCancellationError } from "./client-qyUBJlGZ.mjs";
-import { r as CodexAppServerUnsafeSubscriptionError, u as retireUnsafeCodexTurnClientBestEffort } from "./attempt-client-cleanup-B-S7ngS_.mjs";
+import { o as resolveCodexComputerUseConfig } from "./config-options-HG_Rr3W_.mjs";
+import { d as resolveMacOSDesktopCodexBundledMarketplaceCandidates, t as isManagedCodexDesktopCommand } from "./managed-binary-C1VFoVPf.mjs";
+import { n as describeControlFailure } from "./capabilities-kQntafj_.mjs";
+import { n as requestCodexAppServerClientJson } from "./request-jSbhc1sg.mjs";
+import "./config-0Gxk3_eq.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
+import { $ as reconcileCodexComputerUseStartArtifacts, O as acquireCodexNativeConfigFence, at as isLegacyCodexComputerUsePluginDisabled, b as withLeasedCodexAppServerClientStartSelectionRetry, c as getLeasedSharedCodexAppServerClient, ct as assertNotSymlink, d as readCodexAppServerClientDesktopGeneration, g as resolveCodexNativeConfigFenceKey, h as releaseLeasedSharedCodexAppServerClient, it as hasLegacyCodexComputerUseMcpPolicy, nt as resolveBundledComputerUseMarketplacePath, ot as resolveManagedCodexComputerUseConfig, p as readCodexAppServerClientProcessIdentity, rt as resolveClientManagedBundledMarketplacePath, st as ensureCodexComputerUseSharedPluginCache, t as assertCodexAppServerClientStartSelectionCurrent, u as isCodexAppServerStartSelectionChangedError, y as waitForCodexAppServerClientDesktopGenerationDrain } from "./shared-client-qhyYWbew.mjs";
+import { a as isCodexAppServerIndeterminateRequestCancellationError, i as isCodexAppServerConnectionClosedError, o as isCodexAppServerIndeterminateTransportError } from "./client-C8lgBOoO.mjs";
+import { l as retireUnsafeCodexTurnClientBestEffort, r as CodexAppServerUnsafeSubscriptionError } from "./attempt-client-cleanup-BH0hW2xU.mjs";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { toErrorObject } from "openclaw/plugin-sdk/error-runtime";
+import { sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 //#region extensions/codex/src/app-server/computer-use-readiness.ts
 /** Computer Use readiness probes and their native subscription lifecycle. */
 function createComputerUseRequest(params) {
@@ -41,6 +42,18 @@ async function runCodexComputerUseLiveTest(params) {
 	let lastError;
 	let repair;
 	const probe = resolveComputerUseLiveTestProbe(params.tools);
+	const liveTestStatus = (attempts, error) => ({
+		status: error === void 0 ? "passed" : "failed",
+		ok: error === void 0,
+		attempted: true,
+		attempts,
+		timeoutMs: params.config.liveTestTimeoutMs,
+		retried: attempts > 1,
+		repaired: Boolean(repair?.attempted && repair.warnings.length === 0),
+		durationMs: Math.max(0, Date.now() - startedAt),
+		message: error === void 0 ? "Computer Use live test passed." : `Computer Use live test failed after ${attempts} attempts: ${error}`,
+		...error === void 0 ? {} : { error }
+	});
 	for (let attempt = 0; attempt <= COMPUTER_USE_LIVE_TEST_RETRY_COUNT; attempt += 1) {
 		let threadId;
 		let outcome;
@@ -58,17 +71,7 @@ async function runCodexComputerUseLiveTest(params) {
 			}, { timeoutMs: params.config.toolCallTimeoutMs })).isError === true) throw new Error(`Computer Use readiness tool ${params.config.mcpServerName}.${probe.tool} returned an error result`);
 			outcome = {
 				ok: true,
-				liveTest: {
-					status: "passed",
-					ok: true,
-					attempted: true,
-					attempts: attempt + 1,
-					timeoutMs: params.config.liveTestTimeoutMs,
-					retried: attempt > 0,
-					repaired: Boolean(repair?.attempted && repair.warnings.length === 0),
-					durationMs: Math.max(0, Date.now() - startedAt),
-					message: "Computer Use live test passed."
-				}
+				liveTest: liveTestStatus(attempt + 1)
 			};
 		} catch (error) {
 			outcome = {
@@ -91,20 +94,8 @@ async function runCodexComputerUseLiveTest(params) {
 		lastError = outcome.error;
 		if (attempt < COMPUTER_USE_LIVE_TEST_RETRY_COUNT && params.config.autoRepair) repair = await repairComputerUseMcpRuntime(params.request, params.config);
 	}
-	const errorMessage = describeControlFailure(lastError);
 	return {
-		liveTest: {
-			status: "failed",
-			ok: false,
-			attempted: true,
-			attempts: 2,
-			timeoutMs: params.config.liveTestTimeoutMs,
-			retried: true,
-			repaired: Boolean(repair?.attempted && repair.warnings.length === 0),
-			durationMs: Math.max(0, Date.now() - startedAt),
-			message: `Computer Use live test failed after 2 attempts: ${errorMessage}`,
-			error: errorMessage
-		},
+		liveTest: liveTestStatus(2, describeControlFailure(lastError)),
 		...repair ? { repair } : {}
 	};
 }
@@ -240,8 +231,7 @@ async function ensureCodexComputerUse(params = {}) {
 	});
 	if (status.ready) return status;
 	if (config.autoInstall) {
-		const blockedAutoInstallStatus = blockUnsafeAutoInstallStatus(config);
-		if (blockedAutoInstallStatus) throw new CodexComputerUseSetupError(blockedAutoInstallStatus);
+		if (config.marketplaceSource) throw new CodexComputerUseSetupError(unavailableStatus(config, "auto_install_blocked", "Computer Use auto-install only uses marketplaces Codex app-server has already discovered. Run /codex computer-use install to install from a configured marketplace source."));
 		const installedStatus = await inspectCodexComputerUse({
 			...params,
 			computerUseConfig: config,
@@ -280,8 +270,8 @@ async function inspectCodexComputerUse(params) {
 		managedCommandOrder: "desktop-first"
 	});
 	const operationTimeoutMs = params.timeoutMs ?? resolvedRuntime.requestTimeoutMs;
-	const deadline = operationTimeoutMs > 0 ? Date.now() + operationTimeoutMs : void 0;
-	const remainingTimeoutMs = () => deadline === void 0 ? operationTimeoutMs : Math.max(1, deadline - Date.now());
+	const deadline = operationTimeoutMs > 0 ? performance.now() + operationTimeoutMs : void 0;
+	const remainingTimeoutMs = () => deadline === void 0 ? operationTimeoutMs : Math.max(1, deadline - performance.now());
 	const clientOptions = {
 		startOptions: resolvedRuntime.start,
 		pluginConfig: params.pluginConfig,
@@ -524,19 +514,12 @@ async function readComputerUseTools(params) {
 		server = await readMcpServerStatus(params.request, params.config.mcpServerName);
 		tools = Object.keys(server?.tools ?? {}).toSorted();
 	}
-	if (!server) return statusFromPlugin({
-		config: params.config,
-		plugin: params.plugin,
-		tools: [],
-		reason: "mcp_missing",
-		message: `Computer Use is installed, but the ${params.config.mcpServerName} MCP server is not available.`
-	});
-	if (tools.length === 0) return statusFromPlugin({
+	if (!server || tools.length === 0) return statusFromPlugin({
 		config: params.config,
 		plugin: params.plugin,
 		tools,
 		reason: "mcp_missing",
-		message: `Computer Use is installed, but the ${params.config.mcpServerName} MCP server exposes no tools.`
+		message: server ? `Computer Use is installed, but the ${params.config.mcpServerName} MCP server exposes no tools.` : `Computer Use is installed, but the ${params.config.mcpServerName} MCP server is not available.`
 	});
 	const status = statusFromPlugin({
 		config: params.config,
@@ -585,7 +568,8 @@ async function resolveMarketplaceRef(params) {
 	} };
 	let candidates = await listComputerUseMarketplaceCandidates(params.request, params.config);
 	const bundledMarketplacePath = resolveBundledComputerUseMarketplacePath(params);
-	if (candidates.length === 0 && bundledMarketplacePath && shouldAddBundledComputerUseMarketplace(params)) {
+	const discoverDefaultMarketplace = params.allowAdd && !params.config.marketplaceSource && !params.config.marketplacePath && !params.config.marketplaceName;
+	if (candidates.length === 0 && bundledMarketplacePath && discoverDefaultMarketplace) {
 		if (params.managedCodexHome) await migrateLegacyBundledMarketplaceSource({
 			request: params.request,
 			bundledMarketplacePath,
@@ -596,7 +580,7 @@ async function resolveMarketplaceRef(params) {
 		preferredMarketplaceName ??= added.marketplaceName;
 		candidates = await listComputerUseMarketplaceCandidates(params.request, params.config);
 	}
-	const waitUntil = marketplaceDiscoveryWaitUntil(params);
+	const waitUntil = discoverDefaultMarketplace ? Date.now() + params.config.marketplaceDiscoveryTimeoutMs : 0;
 	if (candidates.length === 0 && waitUntil > Date.now() && await codexNativePluginsDisabled(params.request)) return { message: "Codex native plugin support is disabled (features.plugins = false). Enable it in the Codex config, then run /codex computer-use install." };
 	while (candidates.length === 0) {
 		if (Date.now() >= waitUntil) break;
@@ -633,13 +617,6 @@ async function listComputerUseMarketplaceCandidates(request, config) {
 async function codexNativePluginsDisabled(request) {
 	return (await request("experimentalFeature/list", {})).data.find(({ name }) => name === "plugins")?.enabled === false;
 }
-function blockUnsafeAutoInstallStatus(config) {
-	if (!config.marketplaceSource) return;
-	return unavailableStatus(config, "auto_install_blocked", "Computer Use auto-install only uses marketplaces Codex app-server has already discovered. Run /codex computer-use install to install from a configured marketplace source.");
-}
-function shouldAddBundledComputerUseMarketplace(params) {
-	return params.allowAdd && !params.config.marketplaceSource && !params.config.marketplacePath && !params.config.marketplaceName && Boolean(resolveBundledComputerUseMarketplacePath(params));
-}
 function findComputerUseMarketplaces(listed, pluginName) {
 	return listed.marketplaces.flatMap((marketplace) => {
 		const plugin = marketplace.plugins.find((candidate) => candidate.name === pluginName || candidate.id === pluginName || candidate.id === `${pluginName}@${marketplace.name}`);
@@ -654,7 +631,6 @@ function findComputerUseMarketplaces(listed, pluginName) {
 		return [{
 			kind: "remote",
 			name: marketplace.name,
-			remoteMarketplaceName: marketplace.name,
 			remotePluginId
 		}];
 	});
@@ -665,28 +641,13 @@ function chooseKnownComputerUseMarketplace(candidates) {
 		if (candidate) return candidate;
 	}
 }
-function marketplaceDiscoveryWaitUntil(params) {
-	if (params.allowAdd && !params.config.marketplaceSource && !params.config.marketplacePath && !params.config.marketplaceName) return Date.now() + params.config.marketplaceDiscoveryTimeoutMs;
-	return 0;
-}
 async function delay(ms, signal) {
-	if (signal?.aborted) throw abortError(signal);
-	await new Promise((resolve, reject) => {
-		const onAbort = () => {
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", onAbort);
-			reject(abortError(signal));
-		};
-		const timer = setTimeout(() => {
-			signal?.removeEventListener("abort", onAbort);
-			resolve();
-		}, ms);
-		signal?.addEventListener("abort", onAbort, { once: true });
-	});
-}
-function abortError(signal) {
-	const reason = signal?.reason;
-	return reason instanceof Error ? reason : /* @__PURE__ */ new Error("Computer Use setup was aborted.");
+	try {
+		await sleepWithAbort(Math.max(1, ms), signal);
+	} catch (error) {
+		if (!signal?.aborted) throw error;
+		throw signal.reason instanceof Error ? signal.reason : /* @__PURE__ */ new Error("Computer Use setup was aborted.");
+	}
 }
 async function readComputerUsePlugin(request, marketplace, pluginName) {
 	return (await request("plugin/read", pluginRequestParams(marketplace, pluginName))).plugin;
@@ -709,44 +670,39 @@ function pluginRequestParams(marketplace, pluginName) {
 		marketplacePath: marketplace.path,
 		pluginName
 	} : {
-		remoteMarketplaceName: marketplace.remoteMarketplaceName,
+		remoteMarketplaceName: marketplace.name,
 		pluginName: marketplace.remotePluginId
 	};
 }
 function statusFromPlugin(params) {
-	return {
-		enabled: true,
-		ready: params.plugin.summary.installed && params.plugin.summary.enabled && params.tools.length > 0,
-		reason: params.reason,
-		installed: params.plugin.summary.installed,
-		pluginEnabled: params.plugin.summary.enabled,
-		mcpServerAvailable: params.tools.length > 0,
-		pluginName: params.config.pluginName,
-		mcpServerName: params.config.mcpServerName,
-		marketplaceName: params.plugin.marketplaceName,
-		...params.plugin.marketplacePath ? { marketplacePath: params.plugin.marketplacePath } : {},
-		tools: params.tools,
-		installation: installationStatusFromPlugin(params.plugin, params.message),
-		exposure: exposureStatusFromTools(params.config, params.tools),
-		liveTest: skippedLiveTestStatus(params.config, "Computer Use live test was not run."),
-		warnings: params.plugin.summary.source?.type === "remote" ? ["Computer Use plugin is resolved from a remote marketplace; live local bundles are preferred."] : [],
-		message: params.message
-	};
-}
-function installationStatusFromPlugin(plugin, message) {
+	const { config, plugin, tools, reason, message } = params;
 	const installed = plugin.summary.installed && plugin.summary.enabled;
-	return {
-		status: !plugin.summary.installed ? "not_installed" : installed ? "installed" : "installed_disabled",
-		ok: installed,
-		message: installed ? "Computer Use plugin is installed and enabled." : message
-	};
-}
-function exposureStatusFromTools(config, tools) {
 	const available = tools.length > 0;
 	return {
-		status: available ? "available" : "missing",
-		ok: available,
-		message: available ? `Computer Use MCP server ${config.mcpServerName} exposes ${tools.length} tools.` : `Computer Use MCP server ${config.mcpServerName} is not exposed.`
+		enabled: true,
+		ready: installed && available,
+		reason,
+		installed: plugin.summary.installed,
+		pluginEnabled: plugin.summary.enabled,
+		mcpServerAvailable: available,
+		pluginName: config.pluginName,
+		mcpServerName: config.mcpServerName,
+		marketplaceName: plugin.marketplaceName,
+		...plugin.marketplacePath ? { marketplacePath: plugin.marketplacePath } : {},
+		tools,
+		installation: {
+			status: !plugin.summary.installed ? "not_installed" : installed ? "installed" : "installed_disabled",
+			ok: installed,
+			message: installed ? "Computer Use plugin is installed and enabled." : message
+		},
+		exposure: {
+			status: available ? "available" : "missing",
+			ok: available,
+			message: available ? `Computer Use MCP server ${config.mcpServerName} exposes ${tools.length} tools.` : `Computer Use MCP server ${config.mcpServerName} is not exposed.`
+		},
+		liveTest: skippedLiveTestStatus(config, "Computer Use live test was not run."),
+		warnings: plugin.summary.source?.type === "remote" ? ["Computer Use plugin is resolved from a remote marketplace; live local bundles are preferred."] : [],
+		message
 	};
 }
 function resolveComputerUseConfig(params) {
@@ -760,97 +716,4 @@ function resolveComputerUseConfig(params) {
 	});
 }
 //#endregion
-//#region extensions/codex/src/app-server/plugin-metadata-cache.ts
-const CODEX_PLUGIN_METADATA_CACHE_TTL_MS = 36e5;
-var CodexPluginMetadataCache = class {
-	constructor(nowMs = Date.now) {
-		this.nowMs = nowMs;
-		this.entries = /* @__PURE__ */ new Map();
-		this.inFlight = /* @__PURE__ */ new Map();
-		this.generations = /* @__PURE__ */ new Map();
-		this.clearGeneration = 0;
-	}
-	read(appCacheKey, queryKind, requestParams, catalogScope) {
-		const entryKey = buildMetadataCacheEntryKey(appCacheKey, queryKind, requestParams, catalogScope);
-		const entry = this.entries.get(entryKey);
-		if (!entry) return;
-		if (entry.expiresAtMs <= this.nowMs()) {
-			this.entries.delete(entryKey);
-			return;
-		}
-		return entry.snapshot;
-	}
-	/** Returns a fresh snapshot or coalesces one catalog or installed-plugin request. */
-	async load(params) {
-		const entryKey = buildMetadataCacheEntryKey(params.appCacheKey, params.queryKind, params.requestParams, params.catalogScope);
-		const cached = this.read(params.appCacheKey, params.queryKind, params.requestParams, params.catalogScope);
-		if (cached) return cached;
-		const pending = this.inFlight.get(entryKey);
-		if (pending) try {
-			return await pending.promise;
-		} catch {
-			if (this.inFlight.get(entryKey) === pending) this.inFlight.delete(entryKey);
-			return await this.load(params);
-		}
-		const generation = this.generations.get(params.appCacheKey) ?? 0;
-		const clearGeneration = this.clearGeneration;
-		const promise = (async () => {
-			const method = params.queryKind === "installed" ? "plugin/installed" : "plugin/list";
-			const response = await params.request(method, params.requestParams);
-			const snapshot = {
-				appCacheKey: params.appCacheKey,
-				queryKind: params.queryKind,
-				response
-			};
-			if (generation === (this.generations.get(params.appCacheKey) ?? 0) && clearGeneration === this.clearGeneration && response.marketplaceLoadErrors.length === 0 && (params.cacheable?.(response) ?? true)) this.entries.set(entryKey, {
-				snapshot,
-				expiresAtMs: this.nowMs() + CODEX_PLUGIN_METADATA_CACHE_TTL_MS
-			});
-			return snapshot;
-		})();
-		this.inFlight.set(entryKey, {
-			appCacheKey: params.appCacheKey,
-			promise
-		});
-		try {
-			return await promise;
-		} finally {
-			if (this.inFlight.get(entryKey)?.promise === promise) this.inFlight.delete(entryKey);
-		}
-	}
-	invalidate(appCacheKey) {
-		this.generations.set(appCacheKey, (this.generations.get(appCacheKey) ?? 0) + 1);
-		for (const [entryKey, entry] of this.entries) if (entry.snapshot.appCacheKey === appCacheKey) this.entries.delete(entryKey);
-		for (const [entryKey, pending] of this.inFlight) if (pending.appCacheKey === appCacheKey) this.inFlight.delete(entryKey);
-	}
-	/** Clears snapshots and prevents late in-flight loads from repopulating them. */
-	clear() {
-		this.clearGeneration += 1;
-		this.generations.clear();
-		this.entries.clear();
-		this.inFlight.clear();
-	}
-};
-const defaultCodexPluginMetadataCache = new CodexPluginMetadataCache();
-function buildMetadataCacheEntryKey(appCacheKey, queryKind, requestParams, catalogScope) {
-	if (queryKind !== "installed") {
-		const listParams = requestParams;
-		const entry = [
-			appCacheKey,
-			queryKind,
-			listParams?.cwds ?? [],
-			Array.from(new Set(listParams?.marketplaceKinds ?? [])).toSorted(),
-			...catalogScope ? [catalogScope] : []
-		];
-		return JSON.stringify(entry);
-	}
-	const installedParams = requestParams;
-	return JSON.stringify([
-		appCacheKey,
-		queryKind,
-		installedParams?.cwds ?? [],
-		Array.from(new Set(installedParams?.installSuggestionPluginNames ?? [])).toSorted()
-	]);
-}
-//#endregion
-export { createComputerUseRequest as a, readCodexComputerUseStatus as i, ensureCodexComputerUse as n, runCodexComputerUseLiveTest as o, installCodexComputerUse as r, defaultCodexPluginMetadataCache as t };
+export { runCodexComputerUseLiveTest as a, createComputerUseRequest as i, installCodexComputerUse as n, readCodexComputerUseStatus as r, ensureCodexComputerUse as t };

package/dist/.setup/{config-DKhXquav.mjs → config-0Gxk3_eq.mjs}

@@ -1,10 +1,9 @@
-import { a as readExecAsk, l as readRecord, o as readExecSecurity } from "./config-utils-D0CXecki.mjs";
-import "./config-security-CE-FcGw9.mjs";
-import "./config-parsing-b088LyhT.mjs";
+import "./config-security-KAPScztc.mjs";
+import { _ as readExecSecurity, b as readRecord, g as readExecAsk } from "./config-parsing-BQq-CHTF.mjs";
 import "./auth-start-options-BPIPeEX8.mjs";
-import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-CzyWLTJt.mjs";
-import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-C0NbLms1.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { c as canUseCodexModelBackedApprovalsReviewerForModel$1 } from "./config-options-HG_Rr3W_.mjs";
+import { n as resolveCodexAppServerRuntimeOptions } from "./config-runtime-cUYrqu_a.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { resolveAgentConfig } from "openclaw/plugin-sdk/agent-scope-runtime";
 import { execPolicy } from "openclaw/plugin-sdk/agent-harness-runtime";
 import { resolveExecApprovalsFromFile } from "openclaw/plugin-sdk/exec-approvals-runtime";

package/dist/.setup/{config-options-CzyWLTJt.mjs → config-options-HG_Rr3W_.mjs}

@@ -1,12 +1,12 @@
-import { c as readNumberEnv, i as normalizeHeaders, l as readRecord, r as normalizeCodexServiceTier, s as readNonEmptyString, t as hashSecretForKey, u as resolveArgs } from "./config-utils-D0CXecki.mjs";
 import { i as isJsonObject } from "./protocol-CANUwXJ3.mjs";
-import { C as resolveSandbox, S as resolveEffectiveOpenClawExecModeForCodexAppServer, T as selectForcedPromptingSandbox, a as resolveDefaultCodexAppServerPolicy, b as resolveApprovalsReviewer, d as parseAllowedApprovalPoliciesFromCodexRequirements, i as resolveCodexAppServerNetworkProxy, m as readCodexRequirementsToml, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, s as resolveTransport, t as assertCodexAppServerConnectionSecurity, v as assertCodexAppServerAllowedForOpenClawExecMode, w as selectForcedDangerFullAccessSandbox, x as resolveCodexPolicyModeForOpenClawExecMode, y as resolveApprovalPolicy } from "./config-security-CE-FcGw9.mjs";
-import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, d as readCodexPluginConfig, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs } from "./config-parsing-b088LyhT.mjs";
+import { t as normalizeCodexServiceTier } from "./service-tier-normalization-Cei89SW6.mjs";
+import { C as selectForcedPromptingSandbox, S as selectForcedDangerFullAccessSandbox, _ as resolveApprovalPolicy, a as resolveDefaultCodexAppServerPolicy, b as resolveEffectiveOpenClawExecModeForCodexAppServer, d as parseCodexRequirementsPolicy, f as readCodexRequirementsToml, g as assertCodexAppServerAllowedForOpenClawExecMode, i as resolveCodexAppServerNetworkProxy, o as resolvePolicyMode, r as inferCodexAppServerConnectionClass, s as resolveTransport, t as assertCodexAppServerConnectionSecurity, v as resolveApprovalsReviewer, x as resolveSandbox, y as resolveCodexPolicyModeForOpenClawExecMode } from "./config-security-KAPScztc.mjs";
+import { a as DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME, b as readRecord, d as readCodexPluginConfig, h as normalizeHeaders, n as DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS, o as DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS, p as hashSecretForKey, r as DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS, s as assertCodexAppServerCommandHasNoInlineArgs, v as readNonEmptyString, x as resolveArgs, y as readNumberEnv } from "./config-parsing-BQq-CHTF.mjs";
 import { i as readCodexAppServerConfigOptions } from "./launch-args-DbFCehO7.mjs";
 import { r as resolveCodexAppServerUserHomeDir, t as resolveCodexAppServerHomeDir } from "./auth-start-options-BPIPeEX8.mjs";
 import { normalizeTrimmedStringList, parseBooleanValue } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
+import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { parse } from "smol-toml";
 import { readFileSync } from "node:fs";
 import path from "node:path";
@@ -46,10 +46,10 @@ function isTrustedCodexReviewerConfig(config) {
 	const providerRecords = providers == null ? void 0 : readRecord(providers);
 	const provider = providerRecords?.openai;
 	const openAIProvider = provider == null ? void 0 : readRecord(provider);
-	return (modelProvider == null || modelProvider === "openai") && (providers == null || providerRecords !== void 0) && (provider == null || openAIProvider !== void 0) && isTrustedOptionalReviewerEndpoint(config.openai_base_url, isNativeOpenAIBaseUrl) && isTrustedOptionalReviewerEndpoint(config.chatgpt_base_url, isNativeChatGPTBaseUrl) && isTrustedOptionalReviewerEndpoint(openAIProvider?.base_url, isNativeOpenAIBaseUrl);
+	return (modelProvider == null || modelProvider === "openai") && (providers == null || providerRecords !== void 0) && (provider == null || openAIProvider !== void 0) && isTrustedOptionalReviewerEndpoint(config.openai_base_url, "api.openai.com") && isTrustedOptionalReviewerEndpoint(config.chatgpt_base_url, "chatgpt.com") && isTrustedOptionalReviewerEndpoint(openAIProvider?.base_url, "api.openai.com");
 }
-function isTrustedOptionalReviewerEndpoint(value, isTrusted) {
-	return value == null || typeof value === "string" && isTrusted(value);
+function isTrustedOptionalReviewerEndpoint(value, hostname) {
+	return value == null || typeof value === "string" && isNativeReviewerBaseUrl(value, hostname);
 }
 function canUseCodexModelBackedApprovalsReviewerForModel(params, resolveAuthProviderId) {
 	const explicitProvider = params.modelProvider?.trim().toLowerCase();
@@ -211,22 +211,12 @@ function hasNonEmptyRecord(value) {
 	return record !== void 0 && Object.keys(record).length > 0;
 }
 function isNativeOpenAIBaseUrl(value) {
-	if (typeof value !== "string" || !value.trim()) return true;
-	try {
-		const url = new URL(value);
-		return url.protocol === "https:" && url.hostname.toLowerCase() === "api.openai.com";
-	} catch {
-		return false;
-	}
+	return isNativeReviewerBaseUrl(value, "api.openai.com");
 }
-function isNativeChatGPTBaseUrl(value) {
+function isNativeReviewerBaseUrl(value, hostname) {
 	if (typeof value !== "string" || !value.trim()) return true;
-	try {
-		const url = new URL(value);
-		return url.protocol === "https:" && url.hostname.toLowerCase() === "chatgpt.com";
-	} catch {
-		return false;
-	}
+	const url = URL.parse(value);
+	return url?.protocol === "https:" && url.hostname.toLowerCase() === hostname;
 }
 function normalizeCodexModelBackedReviewerPolicyProvider(provider) {
 	return provider.toLowerCase() === "openai" ? "openai" : provider;
@@ -311,7 +301,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			readRequirementsFile: params.readRequirementsFile,
 			platform: params.platform
 		}) ?? null : params.requirementsToml;
-		if (forcePerCommandApprovals && requirementsToml && parseAllowedApprovalPoliciesFromCodexRequirements(requirementsToml)?.has("untrusted") === false) throw new Error("tools.exec.ask=always requires Codex app-server per-command approvals");
+		if (forcePerCommandApprovals && requirementsToml && parseCodexRequirementsPolicy(requirementsToml).allowedApprovalPolicies?.has("untrusted") === false) throw new Error("tools.exec.ask=always requires Codex app-server per-command approvals");
 		const forceRuntimePolicy = forceUserReviewer || forceGuardianReviewer || forceDangerFullAccessSandbox;
 		const defaultPolicy = explicitPolicyMode && !forceRuntimePolicy && !ignoreLegacyYoloPolicyMode ? void 0 : resolveDefaultCodexAppServerPolicy({
 			transport,
@@ -392,7 +382,7 @@ function createCodexAppServerConfig({ resolveProviderIdForAuth }) {
 			sandbox: resolvedSandbox,
 			approvalsReviewer: forcedPolicy?.approvalsReviewer ?? explicitApprovalsReviewer ?? defaultPolicy?.approvalsReviewer ?? (policyMode === "guardian" ? "auto_review" : "user"),
 			...serviceTier ? { serviceTier } : {},
-			enableUltrafast: config.enableUltrafast === true,
+			enableUltrafast: config.enableUltrafast !== false,
 			...resolveCodexAppServerNetworkProxy(config.networkProxy, resolvedSandbox)
 		};
 	}

package/dist/.setup/{config-parsing-b088LyhT.mjs → config-parsing-BQq-CHTF.mjs}

@@ -1,8 +1,45 @@
-import { d as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, r as normalizeCodexServiceTier } from "./config-utils-D0CXecki.mjs";
-import { asNullableRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { n as CODEX_PLUGIN_MARKETPLACE_NAME_PATTERN, t as normalizeCodexServiceTier } from "./service-tier-normalization-Cei89SW6.mjs";
+import { asNullableRecord, asOptionalRecord as readRecord, normalizeOptionalString as readNonEmptyString, normalizeTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { createHmac, randomBytes } from "node:crypto";
 import { z } from "zod";
-import { buildSecretInputSchema } from "openclaw/plugin-sdk/secret-input";
+import { buildSecretInputSchema, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { detectWindowsSpawnCommandInlineArgs } from "openclaw/plugin-sdk/windows-spawn";
+import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
+import { splitCommandArgs } from "openclaw/plugin-sdk/process-runtime";
+//#region extensions/codex/src/app-server/config-utils.ts
+const START_OPTIONS_KEY_SECRET = resolveGlobalSingleton(Symbol.for("openclaw.codexAppServerStartOptionsKeySecret"), () => randomBytes(32));
+const PLAIN_DECIMAL_NUMBER_RE = /^[+-]?(?:(?:\d+\.?\d*)|(?:\.\d+))$/;
+function isCodexFastServiceTier(value) {
+	return normalizeCodexServiceTier(value) === "priority";
+}
+function normalizeHeaders(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key.trim(), normalizeResolvedSecretInputString({
+		value: child,
+		path: `plugins.entries.codex.config.appServer.headers.${key}`
+	})]).filter((entry) => Boolean(entry[0] && entry[1])));
+}
+function readExecSecurity(value) {
+	return value === "deny" || value === "allowlist" || value === "full" ? value : void 0;
+}
+function readExecAsk(value) {
+	return value === "off" || value === "on-miss" || value === "always" ? value : void 0;
+}
+function readNumberEnv(value) {
+	const trimmed = value?.trim();
+	if (!trimmed || !PLAIN_DECIMAL_NUMBER_RE.test(trimmed)) return;
+	const parsed = Number(trimmed);
+	return Number.isFinite(parsed) ? parsed : void 0;
+}
+function resolveArgs(configArgs, envArgs) {
+	if (Array.isArray(configArgs)) return normalizeTrimmedStringList(configArgs);
+	return splitCommandArgs(typeof configArgs === "string" ? configArgs : envArgs ?? "", { allowUnclosedQuotes: true });
+}
+function hashSecretForKey(value, label) {
+	if (!value) return null;
+	return createHmac("sha256", START_OPTIONS_KEY_SECRET).update(label).update("\0").update(value).digest("hex");
+}
+//#endregion
 //#region extensions/codex/src/app-server/session-discovery-config.ts
 const codexSessionCatalogHomeSchema = z.union([z.string().trim().min(1), z.object({
 	path: z.string().trim().min(1),
@@ -227,4 +264,4 @@ function resolveCodexPluginDestructivePolicy(policy) {
 	};
 }
 //#endregion
-export { DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME as a, isCodexPairedNodeRemoteExecPlacementSandbox as c, readCodexPluginConfig as d, resolveCodexPluginsPolicy as f, DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME as i, isCodexRemoteExecPlacementSandbox as l, DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS as n, DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS as o, DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS as r, assertCodexAppServerCommandHasNoInlineArgs as s, DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX as t, isCodexSandboxExecServerEnabled as u };
+export { readExecSecurity as _, DEFAULT_CODEX_COMPUTER_USE_PLUGIN_NAME as a, readRecord as b, isCodexPairedNodeRemoteExecPlacementSandbox as c, readCodexPluginConfig as d, resolveCodexPluginsPolicy as f, readExecAsk as g, normalizeHeaders as h, DEFAULT_CODEX_COMPUTER_USE_MCP_SERVER_NAME as i, isCodexRemoteExecPlacementSandbox as l, isCodexFastServiceTier as m, DEFAULT_CODEX_COMPUTER_USE_LIVE_TEST_TIMEOUT_MS as n, DEFAULT_CODEX_COMPUTER_USE_TOOL_CALL_TIMEOUT_MS as o, hashSecretForKey as p, DEFAULT_CODEX_COMPUTER_USE_MARKETPLACE_DISCOVERY_TIMEOUT_MS as r, assertCodexAppServerCommandHasNoInlineArgs as s, DEFAULT_CODEX_APP_SERVER_NETWORK_PROXY_PROFILE_PREFIX as t, isCodexSandboxExecServerEnabled as u, readNonEmptyString as v, resolveArgs as x, readNumberEnv as y };

package/dist/.setup/{config-runtime-C0NbLms1.mjs → config-runtime-cUYrqu_a.mjs}

@@ -1,5 +1,5 @@
-import { r as createCodexAppServerConfig } from "./config-options-CzyWLTJt.mjs";
-import { t as __exportAll } from "./session-binding-sidecars-jo6H8dFr.mjs";
+import { r as createCodexAppServerConfig } from "./config-options-HG_Rr3W_.mjs";
+import { t as __exportAll } from "./session-binding-sidecars-BrdV95Fg.mjs";
 import { resolveProviderIdForAuth } from "openclaw/plugin-sdk/provider-auth-aliases";
 //#region extensions/codex/src/app-server/config-runtime.ts
 var config_runtime_exports = /* @__PURE__ */ __exportAll({