fix: explain and control native session discovery (#107162)

* fix: make native session discovery configurable

* refactor: split native session discovery helpers

* chore: keep release notes in PR body

* fix: refresh generated session protocol models

* test(ui): avoid shared lazy-element mock race
This commit is contained in:
Peter Steinberger
2026-07-14 00:18:18 -07:00
committed by GitHub
parent ad17f451d8
commit 644d4c3d23
24 changed files with 489 additions and 86 deletions
+8 -7
View File
@@ -46,12 +46,13 @@ Top-level fields:
| `codexDynamicToolsExclude` | `[]` | Additional OpenClaw dynamic tool names to omit from Codex app-server turns. |
| `codexPlugins` | disabled | Native Codex plugin/app support, including opt-in access to connected account apps. See [Native Codex plugins](/plugins/codex-native-plugins). |
| `computerUse` | disabled | Codex Computer Use setup. See [Codex Computer Use](/plugins/codex-computer-use). |
| `supervision` | disabled | Non-archived native-session catalog, local branch continuation, and agent-tool policy. See [Codex supervision](/plugins/codex-supervision). |
| `sessionCatalog` | enabled | Native Codex session discovery for the sidebar. Set `enabled: false` to disable discovery without disabling the provider or harness. |
| `supervision` | disabled | Agent-facing native-session transcript and write-control policy. See [Codex supervision](/plugins/codex-supervision). |
## Supervision
Supervision lists non-archived Codex sessions from the Gateway computer and
opted-in paired nodes. Enable it independently from the agent harness:
Native session discovery lists non-archived Codex sessions from the Gateway
computer and opted-in paired nodes by default. Disable only that catalog with:
```json5
{
@@ -60,8 +61,8 @@ opted-in paired nodes. Enable it independently from the agent harness:
codex: {
enabled: true,
config: {
supervision: {
enabled: true,
sessionCatalog: {
enabled: false,
},
},
},
@@ -70,11 +71,11 @@ opted-in paired nodes. Enable it independently from the agent harness:
}
```
`supervision` fields:
`supervision` separately controls agent-facing tools:
| Field | Default | Meaning |
| --------------------- | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `enabled` | `false` | Advertise the local session catalog and, on the Gateway, aggregate opted-in paired-node catalogs for the Codex Sessions page. |
| `enabled` | `false` | Enable agent-facing Codex supervision tools. This does not control the authenticated operator session catalog. |
| `endpoints` | built-in local endpoint | Compatibility and advanced endpoint targets for the retained Codex supervision agent and standalone MCP tools. The human catalog and branch flow ignore these targets and use the supervision App Server resolved from `appServer`. |
| `allowRawTranscripts` | `false` | With supervision enabled, allow autonomous agent or standalone MCP transcript reads and transcript-derived list fields. `codex_threads` metadata-only reads remain available. Does not control authenticated Control UI continuation. |
| `allowWriteControls` | `false` | With supervision enabled, allow autonomous `codex_threads` fork, rename, archive, and unarchive mutations plus standalone MCP send, steer, and interrupt operations. Does not bypass other binding, host, status, or confirmation checks. |