Supported `appServer` fields:

| Field | Default | Meaning |

| -------------------------------- | ------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

| `transport` | `"stdio"` | `"stdio"` spawns Codex; `"websocket"` connects to `url`. |

| `command` | managed Codex binary | Executable for stdio transport. Leave unset to use the managed binary. |

| `args` | `["app-server", "--listen", "stdio://"]` | Arguments for stdio transport. |

| `url` | unset | WebSocket app-server URL. |

| `authToken` | unset | Bearer token for WebSocket transport. |

| `headers` | `{}` | Extra WebSocket headers. |

| `clearEnv` | `[]` | Extra environment variable names removed from the spawned stdio app-server process after OpenClaw builds its inherited environment. |

| `requestTimeoutMs` | `60000` | Timeout for app-server control-plane calls. |

| `turnCompletionIdleTimeoutMs` | `60000` | Quiet window after Codex accepts a turn or after a turn-scoped app-server request while OpenClaw waits for `turn/completed`. |

| `mode` | `"yolo"` unless local Codex requirements disallow YOLO | Preset for YOLO or guardian-reviewed execution. |

| `approvalPolicy` | `"never"` or an allowed guardian approval policy | Native Codex approval policy sent to thread start, resume, and turn. |

| `sandbox` | `"danger-full-access"` or an allowed guardian sandbox | Native Codex sandbox mode sent to thread start and resume when OpenClaw sandboxing is inactive. Active OpenClaw sandboxes disable native Code Mode instead of relying on Codex host-side sandboxing. |

| `approvalsReviewer` | `"user"` or an allowed guardian reviewer | Use `"auto_review"` to let Codex review native approval prompts when allowed. |

| `defaultWorkspaceDir` | current process directory | Workspace used by `/codex bind` when `--cwd` is omitted. |

| `serviceTier` | unset | Optional Codex app-server service tier. `"priority"` enables fast-mode routing, `"flex"` requests flex processing, and `null` clears the override. Legacy `"fast"` is accepted as `"priority"`. |

| `experimental.sandboxExecServer` | `false` | Preview opt-in that registers an OpenClaw sandbox-backed Codex environment with Codex app-server 0.132.0 or newer so native Codex execution can run inside the active OpenClaw sandbox. |

| Field | Default | Meaning |

| --------------------------------------------- | ------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |

| `transport` | `"stdio"` | `"stdio"` spawns Codex; `"websocket"` connects to `url`. |

| `command` | managed Codex binary | Executable for stdio transport. Leave unset to use the managed binary. |

| `args` | `["app-server", "--listen", "stdio://"]` | Arguments for stdio transport. |

| `url` | unset | WebSocket app-server URL. |

| `authToken` | unset | Bearer token for WebSocket transport. |

| `headers` | `{}` | Extra WebSocket headers. |

| `clearEnv` | `[]` | Extra environment variable names removed from the spawned stdio app-server process after OpenClaw builds its inherited environment. |

| `requestTimeoutMs` | `60000` | Timeout for app-server control-plane calls. |

| `turnCompletionIdleTimeoutMs` | `60000` | Quiet window after Codex accepts a turn or after a turn-scoped app-server request while OpenClaw waits for `turn/completed`. |

| `postToolRawAssistantCompletionIdleTimeoutMs` | unset | Completion-idle guard used after a tool handoff when Codex emits raw assistant completion or progress but does not send `turn/completed`. Defaults to the assistant completion idle timeout when unset. Use this for trusted or heavy workloads where post-tool synthesis can legitimately stay quiet longer than the final assistant release budget. |

| `mode` | `"yolo"` unless local Codex requirements disallow YOLO | Preset for YOLO or guardian-reviewed execution. |

| `approvalPolicy` | `"never"` or an allowed guardian approval policy | Native Codex approval policy sent to thread start, resume, and turn. |

| `sandbox` | `"danger-full-access"` or an allowed guardian sandbox | Native Codex sandbox mode sent to thread start and resume. Active OpenClaw sandboxes narrow `danger-full-access` turns to Codex `workspace-write`; the turn network flag follows OpenClaw sandbox egress. |

| `approvalsReviewer` | `"user"` or an allowed guardian reviewer | Use `"auto_review"` to let Codex review native approval prompts when allowed. |

| `defaultWorkspaceDir` | current process directory | Workspace used by `/codex bind` when `--cwd` is omitted. |

| `serviceTier` | unset | Optional Codex app-server service tier. `"priority"` enables fast-mode routing, `"flex"` requests flex processing, and `null` clears the override. Legacy `"fast"` is accepted as `"priority"`. |

| `experimental.sandboxExecServer` | `false` | Preview opt-in that registers an OpenClaw sandbox-backed Codex environment with Codex app-server 0.132.0 or newer so native Codex execution can run inside the active OpenClaw sandbox. |

The plugin blocks older or unversioned app-server handshakes. Codex app-server

must report stable version `0.125.0` or newer.

assistant `rawResponseItem/completed` items arm the assistant-output release: if

Codex then goes quiet without `turn/completed`, OpenClaw best-effort interrupts

the native turn and releases the session lane. Post-tool raw assistant progress

keeps waiting for `turn/completed` or the terminal watchdog. Timeout diagnostics

include the last app-server notification method and, for raw assistant response

items, the item type, role, id, and a bounded assistant text preview.

keeps waiting for `turn/completed` while a completion-idle guard stays armed; the

guard uses `appServer.postToolRawAssistantCompletionIdleTimeoutMs` when

configured and falls back to the assistant completion idle timeout otherwise.

Timeout diagnostics include the last app-server notification method and, for raw

assistant response items, the item type, role, id, and a bounded assistant text

preview.

## Model discovery