openclaw/openclaw · error · Error

Codex restricted tool surface cannot override config layer $

Error message

Codex restricted tool surface cannot override config layer ${layer.name.type}

What it means

Error "Codex restricted tool surface cannot override config layer ${layer.name.type}" thrown in openclaw/openclaw.

Source

Thrown at extensions/codex/src/app-server/thread-requests.ts:488

      includeLayers: true,
    },
    { signal },
  );
  if (!isJsonObject(response) || !isJsonObject(response.config)) {
    throw new Error("Codex config/read returned an invalid effective config");
  }
  if (!Array.isArray(response.layers)) {
    throw new Error("Codex config/read omitted effective config layers");
  }
  for (const layer of response.layers) {
    if (!isJsonObject(layer) || !isJsonObject(layer.name) || typeof layer.name.type !== "string") {
      throw new Error("Codex config/read returned invalid effective config layers");
    }
    if (
      layer.name.type === "legacyManagedConfigTomlFromFile" ||
      layer.name.type === "legacyManagedConfigTomlFromMdm"
    ) {
      throw new Error(
        `Codex restricted tool surface cannot override config layer ${layer.name.type}`,
      );
    }
    if (!CODEX_RING_ZERO_OVERRIDABLE_LAYER_TYPES.has(layer.name.type)) {
      throw new Error(
        `Codex restricted tool surface does not recognize config layer ${layer.name.type}`,
      );
    }
  }
  const configuredServers = response.config.mcp_servers;
  if (configuredServers === undefined) {
    return [];
  }
  if (!isJsonObject(configuredServers)) {
    throw new Error("Codex config/read returned invalid mcp_servers");
  }
  return Object.keys(configuredServers).toSorted();
}

View on GitHub (pinned to 01804a7531)

When it happens

Trigger: Thrown at extensions/codex/src/app-server/thread-requests.ts:488 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of openclaw/openclaw@01804a7531 (2026-08-12). Data as JSON: /api/errors/c67dc1054873e228. Report an issue: GitHub.