Load skill interface metadata in the host loader (#36903)

## What changed

- Move skill interface validation and asset-path resolution into `codex-skills` so both skill loaders share the same behavior.
- Populate host-loaded skills with validated display metadata, prompts, brand colors, and local icons from `agents/openai.yaml`.
- Allow plugin skills to reference icons under the plugin's shared `assets` directory while rejecting absolute paths and paths that escape permitted asset roots.

## Testing

- Add resolver tests for valid, invalid, local, and plugin-shared interface assets.
- Add host loader coverage for interface fields and asset-path restrictions.

GitOrigin-RevId: 3f316191752eeebd15d11ac0bee82201574320ec
This commit is contained in:
felixxia-oai
2026-08-04 14:45:42 +00:00
committed by copyberry
parent f93109615f
commit 49b0aebd6f
10 changed files with 634 additions and 456 deletions

1
codex-rs/Cargo.lock generated
View File

@@ -4092,6 +4092,7 @@ dependencies = [
"serde",
"serde_yaml",
"thiserror 2.0.18",
"tracing",
]
[[package]]