@@ -85,23 +85,23 @@ For an already-running app-server, use WebSocket transport:
85858686Supported `appServer` fields:
878788-| Field | Default | Meaning |
89-| ----------------------------- | ------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
90-| `transport` | `"stdio"` | `"stdio"` spawns Codex; `"websocket"` connects to `url`. |
91-| `command` | managed Codex binary | Executable for stdio transport. Leave unset to use the managed binary. |
92-| `args` | `["app-server", "--listen", "stdio://"]` | Arguments for stdio transport. |
93-| `url` | unset | WebSocket app-server URL. |
94-| `authToken` | unset | Bearer token for WebSocket transport. |
95-| `headers` | `{}` | Extra WebSocket headers. |
96-| `clearEnv` | `[]` | Extra environment variable names removed from the spawned stdio app-server process after OpenClaw builds its inherited environment. |
97-| `requestTimeoutMs` | `60000` | Timeout for app-server control-plane calls. |
98-| `turnCompletionIdleTimeoutMs` | `60000` | Quiet window after Codex accepts a turn or after a turn-scoped app-server request while OpenClaw waits for `turn/completed`. |
99-| `mode` | `"yolo"` unless local Codex requirements disallow YOLO | Preset for YOLO or guardian-reviewed execution. |
100-| `approvalPolicy` | `"never"` or an allowed guardian approval policy | Native Codex approval policy sent to thread start, resume, and turn. |
101-| `sandbox` | `"danger-full-access"` or an allowed guardian sandbox | Native Codex sandbox mode sent to thread start and resume. |
102-| `approvalsReviewer` | `"user"` or an allowed guardian reviewer | Use `"auto_review"` to let Codex review native approval prompts when allowed. |
103-| `defaultWorkspaceDir` | current process directory | Workspace used by `/codex bind` when `--cwd` is omitted. |
104-| `serviceTier` | unset | Optional Codex app-server service tier. `"priority"` enables fast-mode routing, `"flex"` requests flex processing, and `null` clears the override. Legacy `"fast"` is accepted as `"priority"`. |
88+| Field | Default | Meaning |
89+| ----------------------------- | ------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
90+| `transport` | `"stdio"` | `"stdio"` spawns Codex; `"websocket"` connects to `url`. |
91+| `command` | managed Codex binary | Executable for stdio transport. Leave unset to use the managed binary. |
92+| `args` | `["app-server", "--listen", "stdio://"]` | Arguments for stdio transport. |
93+| `url` | unset | WebSocket app-server URL. |
94+| `authToken` | unset | Bearer token for WebSocket transport. |
95+| `headers` | `{}` | Extra WebSocket headers. |
96+| `clearEnv` | `[]` | Extra environment variable names removed from the spawned stdio app-server process after OpenClaw builds its inherited environment. |
97+| `requestTimeoutMs` | `60000` | Timeout for app-server control-plane calls. |
98+| `turnCompletionIdleTimeoutMs` | `60000` | Quiet window after Codex accepts a turn or after a turn-scoped app-server request while OpenClaw waits for `turn/completed`. |
99+| `mode` | `"yolo"` unless local Codex requirements disallow YOLO | Preset for YOLO or guardian-reviewed execution. |
100+| `approvalPolicy` | `"never"` or an allowed guardian approval policy | Native Codex approval policy sent to thread start, resume, and turn. |
101+| `sandbox` | `"danger-full-access"` or an allowed guardian sandbox | Native Codex sandbox mode sent to thread start and resume. Active OpenClaw sandboxes narrow `danger-full-access` turns to Codex `workspace-write`; the turn network flag follows OpenClaw sandbox egress. |
102+| `approvalsReviewer` | `"user"` or an allowed guardian reviewer | Use `"auto_review"` to let Codex review native approval prompts when allowed. |
103+| `defaultWorkspaceDir` | current process directory | Workspace used by `/codex bind` when `--cwd` is omitted. |
104+| `serviceTier` | unset | Optional Codex app-server service tier. `"priority"` enables fast-mode routing, `"flex"` requests flex processing, and `null` clears the override. Legacy `"fast"` is accepted as `"priority"`. |
105105106106The plugin blocks older or unversioned app-server handshakes. Codex app-server
107107must report stable version `0.125.0` or newer.
@@ -146,6 +146,14 @@ values are allowed. Individual policy fields override `mode`. The older
146146`guardian_subagent` reviewer value is still accepted as a compatibility alias,
147147but new configs should use `auto_review`.
148148149+When an OpenClaw sandbox is active, the local Codex app-server process still
150+runs on the Gateway host. OpenClaw therefore keeps Codex's own filesystem
151+sandbox for native code-mode turns. `danger-full-access` turns are narrowed to
152+Codex `workspace-write`, and `workspace-write` turn `networkAccess` is derived
153+from the OpenClaw sandbox egress setting: Docker `network: "none"` stays
154+offline, while `network: "bridge"` or a custom Docker network permits outbound
155+access.
156+149157## Auth and environment isolation
150158151159Auth is selected in this order:
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。