}): CodexNativeExecutionPolicy {

const config = params.config ?? {};

const sessionKey = params.sessionKey?.trim() || params.sessionId?.trim() || undefined;

const agentId = resolvePolicyAgentId({ config, sessionKey, agentId: params.agentId });

const canReadSessionEntry =

params.readRuntimeSessionEntry &&

shouldReadRuntimeSessionEntry({ config, sessionKey, agentId: params.agentId });

const sessionEntry =

params.sessionEntry ??

(params.readRuntimeSessionEntry && sessionKey

? readRuntimeSessionEntryBestEffort(sessionKey)

(canReadSessionEntry && sessionKey

? readRuntimeSessionEntryBestEffort({ sessionKey, agentId })

: undefined);

const sandboxAvailable =

params.sandboxAvailable ??

sessionKey,

}).sandboxed

: false);

const agentId = resolvePolicyAgentId({ config, sessionKey, agentId: params.agentId });

const agentExec = resolvePolicyAgentExec({ config, agentId });

const globalExec = config.tools?.exec;

const requestedExecHost =

return sessionAgentId;

}

const agents = listAgentEntries(params.config);

const defaultEntry = agents.find((entry) => entry?.default) ?? agents[0];

return normalizeAgentId(defaultEntry?.id);

return resolveDefaultPolicyAgentId(agents);

}

function resolvePolicyAgentExec(params: {

return normalizeAgentIdOrDefault(parts[1]);

}

function shouldReadRuntimeSessionEntry(params: {

config: OpenClawConfig;

sessionKey?: string;

agentId?: string;

}): boolean {

if (!params.sessionKey) {

return false;

}

const explicitAgentId = normalizeAgentIdOrDefault(params.agentId);

if (!explicitAgentId) {

return true;

}

const sessionAgentId = parseAgentIdFromSessionKey(params.sessionKey);

if (!sessionAgentId) {

return isDefaultAgentSessionKeyForAgent({ config: params.config, agentId: explicitAgentId });

}

return sessionAgentId === explicitAgentId;

}

function isDefaultAgentSessionKeyForAgent(params: {

config: OpenClawConfig;

agentId: string;

}): boolean {

return (

normalizeAgentId(params.agentId) ===

resolveDefaultPolicyAgentId(listAgentEntries(params.config))

);

}

function resolveDefaultPolicyAgentId(agents: AgentEntry[]): string {

const defaultEntry = agents.find((entry) => entry?.default) ?? agents[0];

return normalizeAgentId(defaultEntry?.id);

}

function normalizeAgentIdOrDefault(value?: string | null): string | undefined {

const normalized = normalizeAgentId(value);

return normalized === DEFAULT_AGENT_ID && !(value ?? "").trim() ? undefined : normalized;

return params.requestedExecHost;

}

function readRuntimeSessionEntryBestEffort(sessionKey: string): SessionEntry | undefined {

function readRuntimeSessionEntryBestEffort(params: {

sessionKey: string;

agentId: string;

}): SessionEntry | undefined {

try {

return getSessionEntry({ sessionKey, hydrateSkillPromptRefs: false });

return getSessionEntry({

sessionKey: params.sessionKey,

agentId: params.agentId,

hydrateSkillPromptRefs: false,

});

} catch {

return undefined;

}