Peter Steinberger
42aaf0c98a
Prefer Codex native workspace tools ( #75308 )
...
Summary:
- The PR adds Codex dynamic-tool profile config defaulting to `native-first`, filters duplicate workspace/process/planning tools from Codex app-server thread payloads, keeps managed `web_search`, updates docs/manifest/config baselines/changelog, and adds regression tests.
ClawSweeper fixups:
- Included follow-up commit: test(codex): pin native-first tool catalog
- Included follow-up commit: chore(config): refresh generated schema baseline
- Included follow-up commit: chore: add codex native-first changelog
- Included follow-up commit: chore: move native-first changelog entry
- Included follow-up commit: chore: refresh config baseline after rebase
Validation:
- ClawSweeper review passed for head 30e5cecfb730e5cecfb7https://github.com/openclaw/openclaw/pull/75308#issuecomment-4356919781
Co-authored-by: Peter Steinberger <steipete@gmail.com >
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-05-01 11:36:17 +00:00
pashpashpash
027ea5f08b
Isolate Codex app-server state per agent ( #74556 )
...
* fix(codex): isolate app-server home per agent
* fix(codex): isolate native Codex assets per agent
* fix(channels): mark inbound system events untrusted
* fix(doctor): warn on personal Codex agent skills
* test(doctor): cover personal Codex agent skills warning
* fix(codex): forward auth profiles to harness runs
* fix(codex): preserve auto auth for harness runs
* fix(codex): auto-select harness auth profiles
* test(codex): type harness auth mock
* feat(codex): select migrated skills
* fix(codex): satisfy migration selection lint
* docs: add codex isolation changelog
2026-05-01 04:49:02 +09:00
Shakker
00d2c34889
perf: mark provider plugins startup lazy
2026-04-28 04:33:47 +01:00
pashpashpash
aeb007e4e5
fix(codex): expose app-server env controls
2026-04-28 00:46:15 +01:00
pash-openai
67ffa3df8b
Add Codex Computer Use setup for Codex mode ( #71842 )
...
* Add Codex Computer Use setup
* Tighten Codex Computer Use setup checks
* Handle fresh Codex Computer Use marketplace setup
* Fix channel setup manifest fixture
* Match Codex Computer Use marketplace loading
* Harden plugin manifest test fixtures
* Isolate auth choice legacy manifest test
* Update aggregate shard test expectation
* Improve Codex Computer Use first-run setup
* Harden Codex Computer Use auto-install
* Fix plugin auto-enable test fixture roots
2026-04-26 13:21:56 -07:00
pash-openai
edb618c6c4
Manage the Codex app-server binary in OpenClaw ( #71808 )
...
* Manage Codex app-server binary
* Use plugin deps for Codex app-server binary
* Stabilize media model registry test
* Exclude checkpoint transcripts from memory ingestion
2026-04-25 16:51:14 -07:00
Peter Steinberger
69566e43cb
feat(codex): add app-server protocol bridge
2026-04-24 04:24:08 +01:00
Peter Steinberger
cec3482175
fix: support codex app-server image understanding
2026-04-24 01:43:30 +01:00
Peter Steinberger
feecc53b6b
test: stabilize codex harness probes
2026-04-23 19:06:19 +01:00
Peter Steinberger
20b05f220e
fix: expose codex provider catalog
2026-04-23 05:35:17 +01:00
Peter Steinberger
fa43cbfcba
fix: drop invalid Codex app-server service tiers
2026-04-23 01:24:25 +01:00
pashpashpash
ff02563c7c
feat(codex): add guardian app-server mode ( #70090 )
...
Reworks the Codex app-server Guardian change into the final landing shape:
- keep YOLO as the default local app-server mode
- add explicit `appServer.mode: "guardian"`
- remove the legacy `OPENCLAW_CODEX_APP_SERVER_GUARDIAN` shortcut
- document Guardian configuration and behavior
- add Guardian event projection and Docker live probes for approved/ask-back decisions
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-04-23 00:25:43 +01:00
pashpashpash
abf940db61
fix(codex): unchain app-server defaults ( #70082 )
2026-04-22 17:53:49 +09:00
Sanjay Santhanam
081da17090
fix(codex): exclude codex-app-server synthetic apiKey from secrets audit ( #69581 )
...
* fix(codex): exclude codex-app-server synthetic apiKey from secrets audit
The Codex extension uses the literal string "codex-app-server" as a
hardcoded placeholder apiKey in provider.ts, since the real
authentication is managed by the app-server transport itself.
The secrets audit currently reports this as a real plaintext leak
(PLAINTEXT_FOUND), producing a false positive for any user who has
configured the Codex harness.
Declare it as a plugin-owned non-secret marker in the Codex plugin
manifest, so it flows through the standard
`listKnownNonSecretApiKeyMarkers()` path alongside `ollama-local`,
`lmstudio-local`, `gcp-vertex-credentials`, and `minimax-oauth`.
Also extends the existing `model auth markers` unit tests to lock
in the behavior.
Fixes #69511
* ci: retrigger checks (no-op)
2026-04-21 21:38:26 +10:00
Lucenx9
d04f7e7ce7
fix(codex): default app-server approvals to on-request
2026-04-21 01:06:36 +01:00
duqaXxX
69ba924b53
fix(codex): activate harness plugin for forced runtime
2026-04-16 09:06:45 -07:00
Peter Steinberger
3b65e2302a
refactor(codex): split app-server lifecycle seams
2026-04-10 23:07:25 +01:00
Peter Steinberger
31a0b7bd42
feat: add Codex app-server controls
2026-04-10 22:19:00 +01:00
Peter Steinberger
84098a2267
fix: keep Codex harness opt-in by default
2026-04-10 21:22:16 +01:00
Peter Steinberger
106256d896
fix: address Codex harness review regressions
2026-04-10 21:22:16 +01:00
Peter Steinberger
dd26e8c44d
feat: add Codex app-server harness extension
2026-04-10 21:22:16 +01:00
