mirror of
https://github.com/openclaw/openclaw.git
synced 2026-06-06 05:51:15 +08:00
revert(codex): revert first-party marketplace allowlist
Reverts openclaw/openclaw#82219.
This commit is contained in:
Kevin Lin
@@ -218,17 +218,6 @@ Target-side auth-required installs are reported on the affected plugin item with
|
||||
Their explicit config entries are written disabled until you reauthorize and
|
||||
enable them. Other install failures are item-scoped `error` results.
|
||||
|
||||
The native Codex plugin config also accepts first-party `openai-bundled` and
|
||||
`openai-primary-runtime` marketplace identities, but migration does not
|
||||
auto-discover or install them from source state.
|
||||
|
||||
OpenAI-side app/plugin availability still comes from the signed-in Codex
|
||||
account and workspace app controls. See
|
||||
[Using Codex with your ChatGPT plan](https://help.openai.com/en/articles/11369540-using-codex-with-your-chatgpt-plan)
|
||||
for OpenAI's account and workspace-control overview, then use
|
||||
[Native Codex plugins](/plugins/codex-native-plugins#manual-first-party-marketplace-entries)
|
||||
for manual first-party marketplace entries.
|
||||
|
||||
If Codex app-server plugin inventory is unavailable during planning, migration
|
||||
falls back to cached bundle advisory items instead of failing the whole
|
||||
migration.
|
||||
|
||||
@@ -316,10 +316,7 @@ conversation bindings, or any non-Codex harness.
|
||||
migrated plugin entry when global `codexPlugins.enabled` is also true.
|
||||
Default: `true` for explicit entries.
|
||||
- `plugins.entries.codex.config.codexPlugins.plugins.<key>.marketplaceName`:
|
||||
stable marketplace identity. V1 supports `"openai-curated"`,
|
||||
`"openai-bundled"`, and `"openai-primary-runtime"`. See
|
||||
[Native Codex plugins](/plugins/codex-native-plugins#manual-first-party-marketplace-entries)
|
||||
for manual bundled and primary-runtime examples.
|
||||
stable marketplace identity. V1 only supports `"openai-curated"`.
|
||||
- `plugins.entries.codex.config.codexPlugins.plugins.<key>.pluginName`: stable
|
||||
Codex plugin identity from migration, for example `"google-calendar"`.
|
||||
- `plugins.entries.codex.config.codexPlugins.plugins.<key>.allow_destructive_actions`:
|
||||
|
||||
@@ -38,14 +38,14 @@ All Codex harness settings live under `plugins.entries.codex.config`.
|
||||
|
||||
Supported top-level fields:
|
||||
|
||||
| Field | Default | Meaning |
|
||||
| -------------------------- | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------ |
|
||||
| `discovery` | enabled | Model discovery settings for Codex app-server `model/list`. |
|
||||
| `appServer` | managed stdio app-server | Transport, command, auth, approval, sandbox, and timeout settings. |
|
||||
| `codexDynamicToolsLoading` | `"searchable"` | Use `"direct"` to put OpenClaw dynamic tools directly in the initial Codex tool context. |
|
||||
| `codexDynamicToolsExclude` | `[]` | Additional OpenClaw dynamic tool names to omit from Codex app-server turns. |
|
||||
| `codexPlugins` | disabled | Native Codex plugin/app support for configured first-party Codex plugins. See [Native Codex plugins](/plugins/codex-native-plugins). |
|
||||
| `computerUse` | disabled | Codex Computer Use setup. See [Codex Computer Use](/plugins/codex-computer-use). |
|
||||
| Field | Default | Meaning |
|
||||
| -------------------------- | ------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| `discovery` | enabled | Model discovery settings for Codex app-server `model/list`. |
|
||||
| `appServer` | managed stdio app-server | Transport, command, auth, approval, sandbox, and timeout settings. |
|
||||
| `codexDynamicToolsLoading` | `"searchable"` | Use `"direct"` to put OpenClaw dynamic tools directly in the initial Codex tool context. |
|
||||
| `codexDynamicToolsExclude` | `[]` | Additional OpenClaw dynamic tool names to omit from Codex app-server turns. |
|
||||
| `codexPlugins` | disabled | Native Codex plugin/app support for migrated source-installed curated plugins. See [Native Codex plugins](/plugins/codex-native-plugins). |
|
||||
| `computerUse` | disabled | Codex Computer Use setup. See [Codex Computer Use](/plugins/codex-computer-use). |
|
||||
|
||||
## App-server transport
|
||||
|
||||
|
||||
@@ -526,7 +526,7 @@ Supported top-level Codex plugin fields:
|
||||
| -------------------------- | -------------- | ---------------------------------------------------------------------------------------- |
|
||||
| `codexDynamicToolsLoading` | `"searchable"` | Use `"direct"` to put OpenClaw dynamic tools directly in the initial Codex tool context. |
|
||||
| `codexDynamicToolsExclude` | `[]` | Additional OpenClaw dynamic tool names to omit from Codex app-server turns. |
|
||||
| `codexPlugins` | disabled | Native Codex plugin/app support for configured first-party Codex plugins. |
|
||||
| `codexPlugins` | disabled | Native Codex plugin/app support for migrated source-installed curated plugins. |
|
||||
|
||||
Supported `appServer` fields:
|
||||
|
||||
|
||||
@@ -3,7 +3,7 @@ summary: "Configure migrated native Codex plugins for Codex-mode OpenClaw agents
|
||||
title: "Native Codex plugins"
|
||||
read_when:
|
||||
- You want Codex-mode OpenClaw agents to use native Codex plugins
|
||||
- You are configuring first-party Codex plugin marketplaces
|
||||
- You are migrating source-installed openai-curated Codex plugins
|
||||
- You are troubleshooting codexPlugins, app inventory, destructive actions, or plugin app diagnostics
|
||||
---
|
||||
|
||||
@@ -22,9 +22,7 @@ Use this page after the base [Codex harness](/plugins/codex-harness) is working.
|
||||
- The selected OpenClaw agent runtime must be the native Codex harness.
|
||||
- `plugins.entries.codex.enabled` must be true.
|
||||
- `plugins.entries.codex.config.codexPlugins.enabled` must be true.
|
||||
- V1 supports first-party Codex plugin marketplaces: `openai-curated`,
|
||||
`openai-bundled`, and `openai-primary-runtime`.
|
||||
- Migration only auto-discovers `openai-curated` plugins that it observed as
|
||||
- V1 supports only `openai-curated` plugins that migration observed as
|
||||
source-installed in the source Codex home.
|
||||
- The target Codex app-server must be able to see the expected marketplace,
|
||||
plugin, and app inventory.
|
||||
@@ -58,11 +56,9 @@ Apply the migration when the plan looks right:
|
||||
openclaw migrate apply codex --yes
|
||||
```
|
||||
|
||||
Migration writes explicit `codexPlugins` entries for eligible curated plugins
|
||||
and calls Codex app-server `plugin/install` for selected plugins. Explicit
|
||||
config may also reference Codex's bundled and primary-runtime first-party
|
||||
marketplaces when the target app-server inventory exposes those plugin apps. A
|
||||
typical migrated config looks like this:
|
||||
Migration writes explicit `codexPlugins` entries for eligible plugins and calls
|
||||
Codex app-server `plugin/install` for selected plugins. A typical migrated
|
||||
config looks like this:
|
||||
|
||||
```json5
|
||||
{
|
||||
@@ -93,49 +89,6 @@ After changing `codexPlugins`, new Codex conversations pick up the updated app
|
||||
set automatically. Use `/new` or `/reset` to refresh the current conversation.
|
||||
A gateway restart is not required for plugin enable or disable changes.
|
||||
|
||||
## Manual first-party marketplace entries
|
||||
|
||||
Migration writes `openai-curated` entries for eligible source-installed plugins.
|
||||
For first-party plugins that live in Codex's bundled or primary-runtime
|
||||
marketplaces, add explicit entries after confirming the target Codex app-server
|
||||
inventory exposes that marketplace and plugin.
|
||||
|
||||
Use the same config shape for every first-party marketplace:
|
||||
|
||||
```json5
|
||||
{
|
||||
plugins: {
|
||||
entries: {
|
||||
codex: {
|
||||
enabled: true,
|
||||
config: {
|
||||
codexPlugins: {
|
||||
enabled: true,
|
||||
plugins: {
|
||||
chrome: {
|
||||
enabled: true,
|
||||
marketplaceName: "openai-bundled",
|
||||
pluginName: "chrome",
|
||||
},
|
||||
documents: {
|
||||
enabled: true,
|
||||
marketplaceName: "openai-primary-runtime",
|
||||
pluginName: "documents",
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
```
|
||||
|
||||
The key under `plugins` is OpenClaw's local config key. `pluginName` and
|
||||
`marketplaceName` must match the Codex app-server inventory exactly. If the
|
||||
plugin is not listed in `/codex plugins list` or Codex app diagnostics, OpenClaw
|
||||
keeps the entry configured but cannot expose its apps to Codex turns.
|
||||
|
||||
## Manage plugins from chat
|
||||
|
||||
Use `/codex plugins` when you want to inspect or change configured native Codex
|
||||
@@ -197,10 +150,8 @@ up the updated app set.
|
||||
|
||||
V1 is intentionally narrow:
|
||||
|
||||
- Runtime config accepts `openai-curated`, `openai-bundled`, and
|
||||
`openai-primary-runtime` plugin identities.
|
||||
- Only `openai-curated` plugins that were already installed in the source Codex
|
||||
app-server inventory are migration-eligible for automatic migration.
|
||||
app-server inventory are migration-eligible.
|
||||
- App-backed source plugins must pass the migration-time subscription gate.
|
||||
`--verify-plugin-apps` adds the source app-inventory gate. Subscription-gated
|
||||
accounts plus, in verification mode, inaccessible, disabled, missing source
|
||||
@@ -213,9 +164,7 @@ V1 is intentionally narrow:
|
||||
- There is no `plugins["*"]` wildcard and no config key that grants arbitrary
|
||||
install authority.
|
||||
- Unsupported marketplaces, cached plugin bundles, hooks, and Codex config files
|
||||
are preserved in the migration report for manual review. Bundled and
|
||||
primary-runtime first-party plugins can still be added manually through
|
||||
explicit `codexPlugins` config.
|
||||
are preserved in the migration report for manual review.
|
||||
|
||||
## App inventory and ownership
|
||||
|
||||
@@ -303,10 +252,8 @@ app-server auth or rerun with `--verify-plugin-apps` if you want source app
|
||||
inventory to decide eligibility when account lookup fails.
|
||||
|
||||
**`marketplace_missing` or `plugin_missing`:** the target Codex app-server
|
||||
cannot see the expected first-party marketplace or plugin. Rerun migration
|
||||
against the target runtime, inspect Codex app-server plugin status, or confirm
|
||||
the explicit `marketplaceName` is one of `openai-curated`, `openai-bundled`, or
|
||||
`openai-primary-runtime`.
|
||||
cannot see the expected `openai-curated` marketplace or plugin. Rerun migration
|
||||
against the target runtime or inspect Codex app-server plugin status.
|
||||
|
||||
**`app_inventory_missing` or `app_inventory_stale`:** app readiness came from an
|
||||
empty or stale cache. OpenClaw schedules an async refresh and excludes plugin
|
||||
|
||||
Reference in New Issue
Block a user