title: Codex plugin cold install

scenario:
  id: codex-plugin-cold-install
  surface: runtime
  runtimePairLane: core
  runtimeParityUsage:
    expectation: not-applicable
    reason: Packaged CLI/plugin-lifecycle proof only; no assistant turn runs.
  coverage:
    primary:
      - plugins.lifecycle-hot-install
  objective: Verify a package-installed OpenClaw in a clean Docker home downloads the official Codex runtime on demand during OpenAI onboarding and records a loadable managed install.
  successCriteria:
    - The prepared OpenClaw tarball and clean home contain neither @openclaw/codex nor @openai/codex before onboarding.
    - Non-interactive OpenAI onboarding emits exactly one successful JSON terminal document and downloads @openclaw/codex into the managed npm root.
    - The canonical SQLite plugin index records the npm install while openclaw.json contains no legacy plugins.installs record.
    - The installed @openai/codex entrypoint executes its native Codex binary, reports a Codex CLI version, and the Codex plugin loads with the codex agent harness.
  docsRefs:
    - docs/cli/plugins.md
    - docs/plugins/install-overrides.md
  codeRefs:
    - src/commands/codex-runtime-plugin-install.ts
    - src/plugins/installed-plugin-index-records.ts
    - scripts/e2e/codex-on-demand-docker.sh
    - scripts/e2e/lib/codex-on-demand/assertions.mjs
  execution:
    kind: script
    path: test/e2e/qa-lab/runtime/docker-e2e-lane.ts
    summary: Runs the package-backed codex-on-demand Docker lane and verifies canonical install records, managed dependencies, plugin loading, and the terminal onboarding result.
    timeoutMs: 1800000
    args:
      - --lane
      - codex-on-demand