
























@@ -166,18 +166,23 @@ login instead of inherited child-process env. WebSocket app-server connections
166166do not receive Gateway env API-key fallback; use an explicit auth profile or the
167167remote app-server's own account.
168168169-Stdio app-server launches inherit OpenClaw's process environment by default, but
170-OpenClaw owns the Codex app-server account bridge and sets both `CODEX_HOME` and
171-`HOME` to per-agent directories under that agent's OpenClaw state. Codex's own
172-skill loader reads `$CODEX_HOME/skills` and `$HOME/.agents/skills`, so both
173-values are isolated for local app-server launches. That keeps Codex-native
174-skills, plugins, config, accounts, and thread state scoped to the OpenClaw agent
175-instead of leaking in from the operator's personal Codex CLI home.
169+Stdio app-server launches inherit OpenClaw's process environment by default.
170+OpenClaw owns the Codex app-server account bridge and sets `CODEX_HOME` to a
171+per-agent directory under that agent's OpenClaw state. That keeps Codex config,
172+accounts, plugin cache/data, and thread state scoped to the OpenClaw agent
173+instead of leaking in from the operator's personal `~/.codex` home.
174+175+OpenClaw does not rewrite `HOME` for normal local app-server launches. Codex-run
176+subprocesses such as `openclaw`, `gh`, `git`, cloud CLIs, and shell commands see
177+the normal process home and can find user-home config and tokens. Codex may also
178+discover `$HOME/.agents/skills` and `$HOME/.agents/plugins/marketplace.json`;
179+that `.agents` discovery is intentionally shared with the operator home and is
180+separate from isolated `~/.codex` state.
176181177182OpenClaw plugins and OpenClaw skill snapshots still flow through OpenClaw's own
178-plugin registry and skill loader. Personal Codex CLI assets do not. If you have
179-useful Codex CLI skills or plugins that should become part of an OpenClaw agent,
180-inventory them explicitly:
183+plugin registry and skill loader. Personal Codex `~/.codex` assets do not. If
184+you have useful Codex CLI skills or plugins from a Codex home that should become
185+part of an OpenClaw agent, inventory them explicitly:
181186182187```bash
183188openclaw migrate codex --dry-run
@@ -205,8 +210,9 @@ If a deployment needs additional environment isolation, add those variables to
205210```
206211207212`appServer.clearEnv` only affects the spawned Codex app-server child process.
208-`CODEX_HOME` and `HOME` remain reserved for OpenClaw's per-agent Codex
209-isolation on local launches.
213+OpenClaw removes `CODEX_HOME` and `HOME` from this list during local launch
214+normalization: `CODEX_HOME` stays per-agent, and `HOME` stays inherited so
215+subprocesses can use normal user-home state.
210216211217## Dynamic tools
212218此内容由惯性聚合(RSS阅读器)自动聚合整理,仅供阅读参考。 原文来自 — 版权归原作者所有。