feat(codex): add OpenAI-compatible transform option

Add a UI toggle for providers to route through the builtin OpenAI bridge.\n\nWhen enabled, the provider base_url points to /bridge/openai/<provider>/v1 and Codex auth token is fixed to 'codexmate'; upstream base URL and API key are stored in ~/.codex/codexmate-openai-bridge.json.

Author: ymkiux

cli.js

@@ -83,6 +83,10 @@ const {
 const {
     createBuiltinClaudeProxyRuntimeController
 } = require('./cli/claude-proxy');
+const {
+    createOpenaiBridgeHttpHandler,
+    upsertOpenaiBridgeProvider
+} = require('./cli/openai-bridge');
 const {
     createOpenclawConfigController
 } = require('./cli/openclaw-config');
@@ -160,6 +164,7 @@ const CURRENT_MODELS_FILE = path.join(CONFIG_DIR, 'provider-current-models.json'
 const INIT_MARK_FILE = path.join(CONFIG_DIR, 'codexmate-init.json');
 const BUILTIN_PROXY_SETTINGS_FILE = path.join(CONFIG_DIR, 'codexmate-proxy.json');
 const BUILTIN_CLAUDE_PROXY_SETTINGS_FILE = path.join(CONFIG_DIR, 'codexmate-claude-proxy.json');
+const OPENAI_BRIDGE_SETTINGS_FILE = path.join(CONFIG_DIR, 'codexmate-openai-bridge.json');
 const CODEX_SESSIONS_DIR = path.join(CONFIG_DIR, 'sessions');
 const SESSION_TRASH_DIR = path.join(CONFIG_DIR, 'codexmate-session-trash');
 const SESSION_TRASH_FILES_DIR = path.join(SESSION_TRASH_DIR, 'files');
@@ -261,6 +266,14 @@ const CLI_INSTALL_TARGETS = Object.freeze([
 const HTTP_KEEP_ALIVE_AGENT = new http.Agent({ keepAlive: true });
 const HTTPS_KEEP_ALIVE_AGENT = new https.Agent({ keepAlive: true });
 
+const openaiBridgeHandler = createOpenaiBridgeHttpHandler({
+    settingsFile: OPENAI_BRIDGE_SETTINGS_FILE,
+    expectedToken: 'codexmate',
+    maxBodySize: MAX_API_BODY_SIZE,
+    httpAgent: HTTP_KEEP_ALIVE_AGENT,
+    httpsAgent: HTTPS_KEEP_ALIVE_AGENT
+});
+
 function resolveWebPort() {
     const raw = process.env.CODEXMATE_PORT;
     if (!raw) return DEFAULT_WEB_PORT;
@@ -1824,6 +1837,7 @@ function addProviderToConfig(params = {}) {
     const name = typeof params.name === 'string' ? params.name.trim() : '';
     const url = typeof params.url === 'string' ? params.url.trim() : '';
     const key = typeof params.key === 'string' ? params.key.trim() : '';
+    const useTransform = !!params.useTransform;
     const allowManaged = !!params.allowManaged;
     const normalizedUrl = normalizeBaseUrl(url);
 
@@ -1876,15 +1890,35 @@ function addProviderToConfig(params = {}) {
 
     const lineEnding = content.includes('\r\n') ? '\r\n' : '\n';
     const safeName = escapeTomlBasicString(name);
-    const safeUrl = escapeTomlBasicString(normalizedUrl);
-    const safeKey = escapeTomlBasicString(key);
+    let baseUrlForConfig = normalizedUrl;
+    let authKeyForConfig = key;
+    const extraLines = [];
+
+    if (useTransform) {
+        const saveRes = upsertOpenaiBridgeProvider(OPENAI_BRIDGE_SETTINGS_FILE, name, normalizedUrl, key);
+        if (saveRes && saveRes.error) {
+            return { error: String(saveRes.error) };
+        }
+        const port = resolveWebPort();
+        // 通过 URL 构造避免出现重复 /（例如 /bridge/openai//v1）
+        baseUrlForConfig = new URL(
+            `/bridge/openai/${encodeURIComponent(name)}/v1`,
+            `http://${DEFAULT_WEB_OPEN_HOST}:${port}`
+        ).toString().replace(/\/+$/g, '');
+        authKeyForConfig = 'codexmate';
+        extraLines.push(`codexmate_bridge = "openai"`);
+    }
+
+    const safeUrl = escapeTomlBasicString(baseUrlForConfig);
+    const safeKey = escapeTomlBasicString(authKeyForConfig);
     const block = [
         buildModelProviderTableHeader(name),
         `name = "${safeName}"`,
         `base_url = "${safeUrl}"`,
         `wire_api = "responses"`,
         `requires_openai_auth = false`,
         `preferred_auth_method = "${safeKey}"`,
+        ...extraLines,
         `request_max_retries = 4`,
         `stream_max_retries = 10`,
         `stream_idle_timeout_ms = 300000`
@@ -8163,6 +8197,9 @@ function createWebServer({ htmlPath, assetsDir, webDir, host, port, openBrowser
 
     const server = http.createServer((req, res) => {
         const requestPath = (req.url || '/').split('?')[0];
+        if (typeof openaiBridgeHandler === 'function' && openaiBridgeHandler(req, res)) {
+            return;
+        }
         if (requestPath === '/api/import-skills-zip') {
             void handleImportSkillsZipUpload(req, res);
             return;