重构主控编排与运行时预热链路，统一工作区提示词/专家调度协议并补齐 wiki 记忆注入与写回闭环。

同时收敛启动与运维脚本默认行为（含 wiki worker）、更新 Admin 可观测性与相关测试，降低首轮时延并提高运行稳定性。

Made-with: Cursor

openclaw/scripts/prepare-codex-ci-config.ts

@@ -0,0 +1,51 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+
+function tomlString(value: string): string {
+  return JSON.stringify(value);
+}
+
+export function buildCiSafeCodexConfig(params: {
+  projectPath: string;
+  approvalPolicy?: string;
+  sandboxMode?: string;
+}): string {
+  if (!params.projectPath || typeof params.projectPath !== "string") {
+    throw new Error("projectPath is required.");
+  }
+  const resolvedProjectPath = path.resolve(params.projectPath);
+  const approvalPolicy = params.approvalPolicy ?? "never";
+  const sandboxMode = params.sandboxMode ?? "workspace-write";
+  return [
+    "# Generated for Codex CI runs.",
+    "# Keep the checked-out repo trusted while avoiding maintainer-local",
+    "# provider/profile overrides that do not exist on CI runners.",
+    `approval_policy = ${tomlString(approvalPolicy)}`,
+    `sandbox_mode = ${tomlString(sandboxMode)}`,
+    "",
+    `[projects.${tomlString(resolvedProjectPath)}]`,
+    'trust_level = "trusted"',
+    "",
+  ].join("\n");
+}
+
+export async function writeCiSafeCodexConfig(params: {
+  outputPath: string;
+  projectPath: string;
+  approvalPolicy?: string;
+  sandboxMode?: string;
+}): Promise<string> {
+  if (!params.outputPath || typeof params.outputPath !== "string") {
+    throw new Error("outputPath is required.");
+  }
+  const rendered = buildCiSafeCodexConfig(params);
+  await fs.mkdir(path.dirname(params.outputPath), { recursive: true });
+  await fs.writeFile(params.outputPath, rendered, "utf-8");
+  return rendered;
+}
+
+if (path.basename(process.argv[1] ?? "") === "prepare-codex-ci-config.ts") {
+  const outputPath = process.argv[2];
+  const projectPath = process.argv[3] ?? process.cwd();
+  await writeCiSafeCodexConfig({ outputPath, projectPath });
+}