Greptile Summary

This PR fixes a version-parsing bug in readCodexVersionFromUserAgent() where user agents with a multi-word originator such as Codex Desktop/0.118.0 were silently rejected because the old regex required the originator to be a no-whitespace token. The fix widens [^/\s]+ to [^/]+ and adds a post-version boundary assertion ((?:[\s(]|$)), incidentally also closing a gap where malformed versions like 0.118.0abc would previously have been accepted and returned as "0.118.0".

Confidence Score: 5/5

Safe to merge — minimal, targeted regex fix with comprehensive tests for both the new positive case and new negative edge cases.

All findings are P2 or lower. The regex change is correct, backward-compatible, and more spec-compliant than the old version. New tests cover the fixed case and the previously unguarded boundary condition.

No files require special attention.

_{Reviews (1): Last reviewed commit: "Codex: parse Desktop app-server user age..." | Re-trigger Greptile}

Not a direct match, but possibly related. I filed #64744 for a silent hang in the same codex harness initialize() path on v2026.4.10 (macOS, codex-cli 0.118.0 & 0.120.0).

Symptoms are adjacent but different:

Both point at the same underlying fragility: CodexAppServerClient.initialize() at dist/harness-uOoDA-Wv.js:380 calls this.request("initialize", ...) without any timeoutMs, so the request() timeout branch at line 419 is skipped. Any failure on the response side — parser throw (your case), request/response id mismatch, silent stdout drop, unhandled rejection — becomes an infinite hang with no diagnostic output.

Your fix (correcting the parser) resolves one concrete cause. A companion change that also passes a bounded timeoutMs into the initialize request would turn all remaining latent failure modes into actionable initialize timed out errors instead of silent hangs. Happy to open a follow-up PR for that if it's useful.

In my case I've verified the underlying handshake works: manual (echo '{"jsonrpc":"2.0","id":1,"method":"initialize",...}'; sleep 2) | codex app-server --listen stdio:// returns a clean response with a well-formed userAgent (openclaw/0.118.0 (Mac OS 26.4.0; arm64) ...). So whatever is breaking is specific to how OpenClaw wires up the spawned subprocess's stdio or response correlation — which is exactly the place where a missing timeout turns a minor bug into an invisible one.

Details + full repro in #64744.

Landed via temp rebase onto main.

• Gate: pnpm test extensions/codex/src/app-server/client.test.ts extensions/codex/src/app-server/shared-client.test.ts extensions/codex/src/app-server/models.test.ts extensions/codex/src/app-server/transport-websocket.test.ts; pnpm test src/agents/tools/pdf-tool.model-config.test.ts src/agents/tools/pdf-tool.helpers.test.ts; pnpm check; pnpm build; GitHub checks green.
• Land commits: 728295c046, 99dfc1b616, 892baf2e81
• Merge commit: 892baf2e81

Thanks @cyrusaf!