@@ -508,22 +508,47 @@ For an already-running app-server, use WebSocket transport:
508508}
509509```
510510511+Stdio app-server launches inherit OpenClaw's process environment by default.
512+When the Gateway needs `OPENAI_API_KEY` for embeddings or direct OpenAI models
513+but Codex should use the local ChatGPT login, clear that variable only for the
514+Codex child:
515+516+```json5
517+{
518+ plugins: {
519+ entries: {
520+ codex: {
521+ enabled: true,
522+ config: {
523+ appServer: {
524+ clearEnv: ["OPENAI_API_KEY"],
525+ },
526+ },
527+ },
528+ },
529+ },
530+}
531+```
532+533+`appServer.clearEnv` only affects the spawned Codex app-server child process.
534+511535Supported `appServer` fields:
512536513-| Field | Default | Meaning |
514-| ------------------- | ---------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
515-| `transport` | `"stdio"` | `"stdio"` spawns Codex; `"websocket"` connects to `url`. |
516-| `command` | managed Codex binary | Executable for stdio transport. Leave unset to use the managed binary; set it only for an explicit override. |
517-| `args` | `["app-server", "--listen", "stdio://"]` | Arguments for stdio transport. |
518-| `url` | unset | WebSocket app-server URL. |
519-| `authToken` | unset | Bearer token for WebSocket transport. |
520-| `headers` | `{}` | Extra WebSocket headers. |
521-| `requestTimeoutMs` | `60000` | Timeout for app-server control-plane calls. |
522-| `mode` | `"yolo"` | Preset for YOLO or guardian-reviewed execution. |
523-| `approvalPolicy` | `"never"` | Native Codex approval policy sent to thread start/resume/turn. |
524-| `sandbox` | `"danger-full-access"` | Native Codex sandbox mode sent to thread start/resume. |
525-| `approvalsReviewer` | `"user"` | Use `"auto_review"` to let Codex review native approval prompts. `guardian_subagent` remains a legacy alias. |
526-| `serviceTier` | unset | Optional Codex app-server service tier: `"fast"`, `"flex"`, or `null`. Invalid legacy values are ignored. |
537+| Field | Default | Meaning |
538+| ------------------- | ---------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
539+| `transport` | `"stdio"` | `"stdio"` spawns Codex; `"websocket"` connects to `url`. |
540+| `command` | managed Codex binary | Executable for stdio transport. Leave unset to use the managed binary; set it only for an explicit override. |
541+| `args` | `["app-server", "--listen", "stdio://"]` | Arguments for stdio transport. |
542+| `url` | unset | WebSocket app-server URL. |
543+| `authToken` | unset | Bearer token for WebSocket transport. |
544+| `headers` | `{}` | Extra WebSocket headers. |
545+| `clearEnv` | `[]` | Environment variable names removed from the spawned stdio app-server process after OpenClaw builds its inherited environment. |
546+| `requestTimeoutMs` | `60000` | Timeout for app-server control-plane calls. |
547+| `mode` | `"yolo"` | Preset for YOLO or guardian-reviewed execution. |
548+| `approvalPolicy` | `"never"` | Native Codex approval policy sent to thread start/resume/turn. |
549+| `sandbox` | `"danger-full-access"` | Native Codex sandbox mode sent to thread start/resume. |
550+| `approvalsReviewer` | `"user"` | Use `"auto_review"` to let Codex review native approval prompts. `guardian_subagent` remains a legacy alias. |
551+| `serviceTier` | unset | Optional Codex app-server service tier: `"fast"`, `"flex"`, or `null`. Invalid legacy values are ignored. |
527552528553Environment overrides remain available for local testing:
529554此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。