惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

T
The Exploit Database - CXSecurity.com
F
Fortinet All Blogs
U
Unit 42
F
Full Disclosure
雷峰网
雷峰网
博客园 - 司徒正美
云风的 BLOG
云风的 BLOG
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
T
Tailwind CSS Blog
The Cloudflare Blog
Last Week in AI
Last Week in AI
罗磊的独立博客
D
DataBreaches.Net
C
Check Point Blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
O
OpenAI News
C
CXSECURITY Database RSS Feed - CXSecurity.com
aimingoo的专栏
aimingoo的专栏
S
Security @ Cisco Blogs
大猫的无限游戏
大猫的无限游戏
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
S
SegmentFault 最新的问题
NISL@THU
NISL@THU
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Hacker News
The Hacker News
Webroot Blog
Webroot Blog
Security Latest
Security Latest
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Google DeepMind News
Google DeepMind News
酷 壳 – CoolShell
酷 壳 – CoolShell
N
News | PayPal Newsroom
P
Proofpoint News Feed
B
Blog RSS Feed
MongoDB | Blog
MongoDB | Blog
C
Cybersecurity and Infrastructure Security Agency CISA
N
News and Events Feed by Topic
Google Online Security Blog
Google Online Security Blog
H
Help Net Security
Spread Privacy
Spread Privacy
T
Threat Research - Cisco Blogs
GbyAI
GbyAI
I
Intezer
Application and Cybersecurity Blog
Application and Cybersecurity Blog
M
MIT News - Artificial intelligence
Vercel News
Vercel News
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
IT之家
IT之家
MyScale Blog
MyScale Blog
腾讯CDC

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311 test: trim remaining hotspot tests · openclaw/openclaw@6ba8626 test: narrow hotspot mocks · openclaw/openclaw@dbc8179 test: isolate gemini embedding request helpers · openclaw/openclaw@cd330f5 test: trim memory and mcp hotspots · openclaw/openclaw@fd48dfa test: slim provider registry mocks · openclaw/openclaw@2e08c77 test: harden Parallels update smoke · openclaw/openclaw@1a98090 feat: default Anthropic to Opus 4.7 · openclaw/openclaw@628b454 fix: harden node-host shell payload mutability checks · openclaw/openclaw@75c551e fix: land node-host approval binding for native binaries (#66731) (th… · openclaw/openclaw@29919bb CI: add daily schedule to CodeQL workflow (#67645) · openclaw/openclaw@69d25f5 fix(gateway): capture config hash after plugin auto-enable to prevent… · openclaw/openclaw@8c11210 fix: repair sanitized replay tool results before send (#67620) (thank… · openclaw/openclaw@c3c7a99 fix: restrict HTML timeout short-circuit to transient statuses · openclaw/openclaw@de129a6 fix: keep TUI watchdog bound to active run (#67401) (thanks @xantorres) · openclaw/openclaw@3525273 Gateway/skills: dedupe skills prefix-match + drop dead fallback on log · openclaw/openclaw@d7f489f Extensions/lmstudio: back off inference preload after consecutive fai… · openclaw/openclaw@b555214 TUI/streaming: add watchdog that resets the activity indicator after … · openclaw/openclaw@f44ab20 Agents/tool-loop: enable unknown-tool stream guard by default · openclaw/openclaw@36ed367 Gateway/skills: invalidate session skills snapshot on config write · openclaw/openclaw@b23d59a fix: classify HTML provider error pages correctly (#67642) (thanks @s… · openclaw/openclaw@e588e90 fix(skills): remove unused model-usage import (#67641) · openclaw/openclaw@55f05df docs(changelog): credit codex fix superseded PRs · openclaw/openclaw@e485f24 fix(openai-codex): normalize stale transport metadata in resolution a… · openclaw/openclaw@90801ba CI: pin Docker-related GitHub Actions (#67632) · openclaw/openclaw@f697b01 Android: modernize WebView and discovery API usage (#67627) · openclaw/openclaw@44a6e50 fix(deps): bump hono to 4.12.14 and @hono/node-server to 1.19.14 (GHS… · openclaw/openclaw@fbccc18 fix(deps): bump dompurify to 3.4.0 (#67614) · openclaw/openclaw@2c2dc00 CI: add explicit permissions to all workflow jobs (fixes code-scannin… · openclaw/openclaw@01b7516 fix: register bundled TTS providers and route overrides correctly (#6… · openclaw/openclaw@6ea3cdd fix: align host tilde paths with OS home (#62804) (thanks @stainlu) · openclaw/openclaw@ecfaf64 fix: flush creds queue before reconnect socket open (#67464) (thanks … · openclaw/openclaw@405c63f fix: strip standalone <function> tool call tags from visible text (#6… · openclaw/openclaw@78df859 fix(agents): preserve cli session metadata before transcript persist … · openclaw/openclaw@898fd04 docs(changelog): move cli transcript entry · openclaw/openclaw@c1817c6 fix(agents): normalize cli transcript api field · openclaw/openclaw@3a3fae0 docs(changelog): note cli transcript persistence · openclaw/openclaw@6c343f1 fix(agents): persist cli transcript turns · openclaw/openclaw@b8ef507 fix(msteams): harden security-sensitive flows (#65841) · openclaw/openclaw@c56b56e [Dashboard] Fix exec approval modal overflow for long command content… · openclaw/openclaw@053c5b0 Docs: remove QA changelog entry · openclaw/openclaw@7fd5771 QA: fix private runtime source loading (#67428) · openclaw/openclaw@d5933af docs(gateway): correct protocol.md schema path, hello-ok example, aut… · openclaw/openclaw@489404d CI: pin Node 22 runners to 22.18.0 · openclaw/openclaw@4ffa621 models.authStatus: normalize provider ids + tighten env-backed escape… · openclaw/openclaw@f2fdb9d Update CHANGELOG.md · openclaw/openclaw@7694a92 test(parallels): clean up npm update guard jobs · openclaw/openclaw@045ea7b Plugins: prefer scanDir override paths · openclaw/openclaw@b2974da fix(dreaming): default storage.mode to "separate" so phase blocks sto… · openclaw/openclaw@8c392f0 fix(memory-core): skip dreaming transcript ingestion via session stor… · openclaw/openclaw@a1b01f0 fix: dedupe replayed exec.finished node events (#67281) · openclaw/openclaw@5dcf526
docs(codex): add computer use guide · openclaw/openclaw@39a2d1d
steipete · 2026-04-28 · via Recent Commits to openclaw:main

@@ -0,0 +1,186 @@

1+

---

2+

summary: "Set up Codex Computer Use for Codex-mode OpenClaw agents"

3+

title: "Codex Computer Use"

4+

read_when:

5+

- You want Codex-mode OpenClaw agents to use Codex Computer Use

6+

- You are configuring computerUse for the bundled Codex plugin

7+

- You are troubleshooting /codex computer-use status or install

8+

---

9+10+

Computer Use is a Codex-native MCP plugin for local desktop control. OpenClaw

11+

does not vendor the desktop app, execute desktop actions itself, or bypass

12+

Codex permissions. The bundled `codex` plugin only prepares Codex app-server:

13+

it enables Codex plugin support, finds or installs the configured Codex

14+

Computer Use plugin, checks that the `computer-use` MCP server is available, and

15+

then lets Codex own the native MCP tool calls during Codex-mode turns.

16+17+

Use this page when OpenClaw is already using the native Codex harness. For the

18+

runtime setup itself, see [Codex harness](/plugins/codex-harness).

19+20+

## Quick setup

21+22+

Set `plugins.entries.codex.config.computerUse` when Codex-mode turns must have

23+

Computer Use available before a thread starts:

24+25+

```json5

26+

{

27+

plugins: {

28+

entries: {

29+

codex: {

30+

enabled: true,

31+

config: {

32+

computerUse: {

33+

autoInstall: true,

34+

},

35+

},

36+

},

37+

},

38+

},

39+

agents: {

40+

defaults: {

41+

model: "openai/gpt-5.5",

42+

embeddedHarness: {

43+

runtime: "codex",

44+

},

45+

},

46+

},

47+

}

48+

```

49+50+

With this config, OpenClaw checks Codex app-server before each Codex-mode turn.

51+

If Computer Use is missing but Codex app-server has already discovered an

52+

installable marketplace, OpenClaw asks Codex app-server to install or re-enable

53+

the plugin and reload MCP servers. If setup still cannot make the MCP server

54+

available, the turn fails before the thread starts.

55+56+

## Commands

57+58+

Use the `/codex computer-use` commands from any chat surface where the `codex`

59+

plugin command surface is available:

60+61+

```text

62+

/codex computer-use status

63+

/codex computer-use install

64+

/codex computer-use install --source <marketplace-source>

65+

/codex computer-use install --marketplace-path <path>

66+

/codex computer-use install --marketplace <name>

67+

```

68+69+

`status` is read-only. It does not add marketplace sources, install plugins, or

70+

enable Codex plugin support.

71+72+

`install` enables Codex app-server plugin support, optionally adds a configured

73+

marketplace source, installs or re-enables the configured plugin through Codex

74+

app-server, reloads MCP servers, and verifies that the MCP server exposes tools.

75+76+

## Marketplace choices

77+78+

OpenClaw uses the same app-server API that Codex itself exposes. The

79+

marketplace fields choose where Codex should find `computer-use`.

80+81+

| Field | Use when | Install support |

82+

| -------------------- | --------------------------------------------------------------- | -------------------------------------------------------- |

83+

| No marketplace field | You want Codex app-server to use marketplaces it already knows. | Yes, when app-server returns a local marketplace. |

84+

| `marketplaceSource` | You have a Codex marketplace source app-server can add. | Yes, for explicit `/codex computer-use install`. |

85+

| `marketplacePath` | You already know the local marketplace file path on the host. | Yes, for explicit install and turn-start auto-install. |

86+

| `marketplaceName` | You want to select one already registered marketplace by name. | Yes only when the selected marketplace has a local path. |

87+88+

Fresh Codex homes may need a short moment to seed their official marketplaces.

89+

During install, OpenClaw polls `plugin/list` for up to

90+

`marketplaceDiscoveryTimeoutMs` milliseconds. The default is 60 seconds.

91+92+

If multiple known marketplaces contain Computer Use, OpenClaw prefers

93+

`openai-bundled`, then `openai-curated`, then `local`. Unknown ambiguous matches

94+

fail closed and ask you to set `marketplaceName` or `marketplacePath`.

95+96+

## Remote catalog limit

97+98+

Codex app-server can list and read remote-only catalog entries, but it does not

99+

currently support remote `plugin/install`. That means `marketplaceName` can

100+

select a remote-only marketplace for status checks, but installs and re-enables

101+

still need a local marketplace via `marketplaceSource` or `marketplacePath`.

102+103+

If status says the plugin is available in a remote Codex marketplace but remote

104+

install is unsupported, run install with a local source or path:

105+106+

```text

107+

/codex computer-use install --source <marketplace-source>

108+

/codex computer-use install --marketplace-path <path>

109+

```

110+111+

## Configuration reference

112+113+

| Field | Default | Meaning |

114+

| ------------------------------- | -------------- | ------------------------------------------------------------------------------ |

115+

| `enabled` | inferred | Require Computer Use. Defaults to true when another Computer Use field is set. |

116+

| `autoInstall` | false | Install or re-enable from already discovered marketplaces at turn start. |

117+

| `marketplaceDiscoveryTimeoutMs` | 60000 | How long install waits for Codex app-server marketplace discovery. |

118+

| `marketplaceSource` | unset | Source string passed to Codex app-server `marketplace/add`. |

119+

| `marketplacePath` | unset | Local Codex marketplace file path containing the plugin. |

120+

| `marketplaceName` | unset | Registered Codex marketplace name to select. |

121+

| `pluginName` | `computer-use` | Codex marketplace plugin name. |

122+

| `mcpServerName` | `computer-use` | MCP server name exposed by the installed plugin. |

123+124+

Turn-start auto-install intentionally refuses configured `marketplaceSource`

125+

values. Adding a new source is an explicit setup operation, so use

126+

`/codex computer-use install --source <marketplace-source>` once, then let

127+

`autoInstall` handle future re-enables from discovered local marketplaces.

128+129+

## What OpenClaw checks

130+131+

OpenClaw reports a stable setup reason internally and formats the user-facing

132+

status for chat:

133+134+

| Reason | Meaning | Next step |

135+

| ---------------------------- | ------------------------------------------------------ | --------------------------------------------- |

136+

| `disabled` | `computerUse.enabled` resolved to false. | Set `enabled` or another Computer Use field. |

137+

| `marketplace_missing` | No matching marketplace was available. | Configure source, path, or marketplace name. |

138+

| `plugin_not_installed` | Marketplace exists, but the plugin is not installed. | Run install or enable `autoInstall`. |

139+

| `plugin_disabled` | Plugin is installed but disabled in Codex config. | Run install to re-enable it. |

140+

| `remote_install_unsupported` | Selected marketplace is remote-only. | Use `marketplaceSource` or `marketplacePath`. |

141+

| `mcp_missing` | Plugin is enabled, but the MCP server is unavailable. | Check Codex Computer Use and OS permissions. |

142+

| `ready` | Plugin and MCP tools are available. | Start the Codex-mode turn. |

143+

| `check_failed` | A Codex app-server request failed during status check. | Check app-server connectivity and logs. |

144+

| `auto_install_blocked` | Turn-start setup would need to add a new source. | Run explicit install first. |

145+146+

The chat output includes the plugin state, MCP server state, marketplace, tools

147+

when available, and the specific message for the failing setup step.

148+149+

## macOS permissions

150+151+

Computer Use is macOS-specific. The Codex-owned MCP server may need local OS

152+

permissions before it can inspect or control apps. If OpenClaw says Computer Use

153+

is installed but the MCP server is unavailable, verify the Codex-side Computer

154+

Use setup first:

155+156+

- Codex app-server is running on the same host where desktop control should

157+

happen.

158+

- The Computer Use plugin is enabled in Codex config.

159+

- The `computer-use` MCP server appears in Codex app-server MCP status.

160+

- macOS has granted the required permissions for the desktop-control app.

161+

- The current host session can access the desktop being controlled.

162+163+

OpenClaw intentionally fails closed when `computerUse.enabled` is true. A

164+

Codex-mode turn should not silently proceed without the native desktop tools

165+

that the config required.

166+167+

## Troubleshooting

168+169+

**Status says not installed.** Run `/codex computer-use install`. If the

170+

marketplace is not discovered, pass `--source` or `--marketplace-path`.

171+172+

**Status says installed but disabled.** Run `/codex computer-use install` again.

173+

Codex app-server install writes the plugin config back to enabled.

174+175+

**Status says remote install is unsupported.** Use a local marketplace source or

176+

path. Remote-only catalog entries can be inspected but not installed through the

177+

current app-server API.

178+179+

**Status says the MCP server is unavailable.** Re-run install once so MCP

180+

servers reload. If it remains unavailable, fix the Codex Computer Use app,

181+

Codex app-server MCP status, or macOS permissions.

182+183+

**Turn-start auto-install refuses a source.** This is intentional. Add the

184+

source with explicit `/codex computer-use install --source <marketplace-source>`

185+

first, then future turn-start auto-install can use the discovered local

186+

marketplace.