Abhinav 0f21cb3413 Enforce managed authentication backend settings (#39043) ...

## What changed

- Add `cli_auth_credentials_store` and `chatgpt_base_url` as exact managed requirements loaded from local requirements configuration.
- Apply these requirements to runtime and bootstrap authentication configuration, overriding user-configured values.
- Expose the managed values through `configRequirements/read` and reject attempts to change them through config write APIs.
- Ignore these local-only authentication requirements in cloud-managed requirement layers.

## Testing

- Cover requirement loading and composition, runtime and bootstrap overrides, app-server responses, and read-only config writes.

GitOrigin-RevId: 8ea9c096386072036ca5441f3d48af8707988a65

2026-08-17 18:35:54 +00:00

..

AccountLoginCompletedNotification.json

Expose onboarding hints in login completion notifications (#36635)

2026-08-02 21:01:04 +00:00

AccountRateLimitsUpdatedNotification.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

AccountUpdatedNotification.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

AgentMessageDeltaNotification.json

…

AppListUpdatedNotification.json

Remove first-party type from app metadata (#34844)

2026-07-22 23:45:45 +00:00

AppsInstalledParams.json

Add an API for reading installed app runtime state (#33843)

2026-07-17 15:23:35 +00:00

AppsInstalledResponse.json

Add an API for reading installed app runtime state (#33843)

2026-07-17 15:23:35 +00:00

AppsListParams.json

…

AppsListResponse.json

Remove first-party type from app metadata (#34844)

2026-07-22 23:45:45 +00:00

AppsReadParams.json

Use thread configuration for app/read (#37891)

2026-08-10 22:39:29 +00:00

AppsReadResponse.json

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

CancelLoginAccountParams.json

…

CancelLoginAccountResponse.json

…

CommandExecOutputDeltaNotification.json

…

CommandExecParams.json

app-server: use profile ids in v2 permission params (#23360)

2026-05-18 17:28:50 -07:00

CommandExecResizeParams.json

…

CommandExecResizeResponse.json

…

CommandExecResponse.json

…

CommandExecTerminateParams.json

…

CommandExecTerminateResponse.json

…

CommandExecutionOutputDeltaNotification.json

…

CommandExecWriteParams.json

…

CommandExecWriteResponse.json

…

ConfigBatchWriteParams.json

Keep session defaults static during config batch writes (#34940)

2026-07-23 13:11:16 +00:00

ConfigReadParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

ConfigReadResponse.json

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

ConfigRequirementsReadResponse.json

Enforce managed authentication backend settings (#39043)

2026-08-17 18:35:54 +00:00

ConfigValueWriteParams.json

…

ConfigWarningNotification.json

…

ConfigWriteResponse.json

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

ConsumeAccountRateLimitResetCreditParams.json

[app-server] Include reset-credit details in rate limits (#30395)

2026-07-06 12:54:06 -07:00

ConsumeAccountRateLimitResetCreditResponse.json

feat(app-server): expose rate-limit reset credits (#28143)

2026-06-15 21:54:01 +00:00

ContextCompactedNotification.json

…

DeprecationNoticeNotification.json

…

EnvironmentConnectionNotification.json

Report selected environment connection transitions (#33251)

2026-07-15 05:21:13 +00:00

ErrorNotification.json

Surface misalignment policy violations as typed errors (#38682)

2026-08-15 01:34:33 +00:00

ExperimentalFeatureEnablementSetParams.json

…

ExperimentalFeatureEnablementSetResponse.json

…

ExperimentalFeatureListParams.json

feat(app-server): add optional thread_id to experimentalFeature/list (#23335)

2026-05-18 12:12:14 -07:00

ExperimentalFeatureListResponse.json

…

ExternalAgentConfigDetectParams.json

Make external session detection limits configurable (#34449)

2026-07-21 02:55:11 +00:00

ExternalAgentConfigDetectResponse.json

Expose connector candidates in external agent detection (#36218)

2026-07-30 20:58:06 +00:00

ExternalAgentConfigImportCompletedNotification.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportHistoriesReadResponse.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportHistoryRecordParams.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportHistoryRecordResponse.json

Record externally completed agent config imports (#34981)

2026-07-23 17:55:22 +00:00

ExternalAgentConfigImportParams.json

Record externally completed agent config imports (#34981)

2026-07-23 17:55:22 +00:00

ExternalAgentConfigImportProgressNotification.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportResponse.json

[codex] Add external agent import result accounting (#28008)

2026-06-15 13:25:42 -07:00

FeedbackUploadParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

FeedbackUploadResponse.json

…

FileChangeOutputDeltaNotification.json

…

FileChangePatchUpdatedNotification.json

…

FsChangedNotification.json

…

FsCopyParams.json

…

FsCopyResponse.json

…

FsCreateDirectoryParams.json

…

FsCreateDirectoryResponse.json

…

FsGetMetadataParams.json

…

FsGetMetadataResponse.json

…

FsReadDirectoryParams.json

…

FsReadDirectoryResponse.json

…

FsReadFileParams.json

…

FsReadFileResponse.json

…

FsRemoveParams.json

…

FsRemoveResponse.json

…

FsUnwatchParams.json

…

FsUnwatchResponse.json

…

FsWatchParams.json

…

FsWatchResponse.json

…

FsWriteFileParams.json

…

FsWriteFileResponse.json

…

GetAccountParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

GetAccountRateLimitsResponse.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

GetAccountResponse.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

GetAccountTokenUsageResponse.json

Show estimated thread usage in /status (#38281)

2026-08-13 00:30:08 +00:00

GetWorkspaceMessagesResponse.json

Add workspace messages app-server API (#29001)

2026-06-22 04:25:07 -07:00

GuardianWarningNotification.json

…

HookCompletedNotification.json

Add MCP tool handler support to the hooks engine (#38705)

2026-08-15 05:53:54 +00:00

HooksListParams.json

…

HooksListResponse.json

Add MCP tool handler support to the hooks engine (#38705)

2026-08-15 05:53:54 +00:00

HookStartedNotification.json

Add MCP tool handler support to the hooks engine (#38705)

2026-08-15 05:53:54 +00:00

ItemCompletedNotification.json

Expose image generation usage-limit failures (#38024)

2026-08-11 15:40:52 +00:00

ItemGuardianApprovalReviewCompletedNotification.json

Preserve special filesystem subpaths as wire strings (#33107)

2026-07-14 16:40:13 +00:00

ItemGuardianApprovalReviewStartedNotification.json

Preserve special filesystem subpaths as wire strings (#33107)

2026-07-14 16:40:13 +00:00

ItemStartedNotification.json

Expose image generation usage-limit failures (#38024)

2026-08-11 15:40:52 +00:00

ListMcpServerStatusParams.json

Use thread config for TUI MCP inventory (#24532)

2026-05-26 07:44:04 -07:00

ListMcpServerStatusResponse.json

Expose plugin ownership in MCP server status (#37850)

2026-08-10 17:14:51 +00:00

LoginAccountParams.json

feat: add managed Bedrock login API (#31327)

2026-07-09 17:05:37 -07:00

LoginAccountResponse.json

feat: add managed Bedrock login API (#31327)

2026-07-09 17:05:37 -07:00

LogoutAccountResponse.json

…

MarketplaceAddParams.json

…

MarketplaceAddResponse.json

…

MarketplaceRemoveParams.json

…

MarketplaceRemoveResponse.json

…

MarketplaceUpgradeParams.json

…

MarketplaceUpgradeResponse.json

…

McpResourceReadParams.json

…

McpResourceReadResponse.json

…

McpServerOauthLoginCompletedNotification.json

Support OAuth for HTTP MCP servers from selected executor plugins (#28529)

2026-06-25 10:31:17 +01:00

McpServerOauthLoginParams.json

Add CIMD support to MCP OAuth registration (#38089)

2026-08-12 00:01:01 +00:00

McpServerOauthLoginResponse.json

…

McpServerRefreshResponse.json

…

McpServerStatusUpdatedNotification.json

[codex] Surface MCP reauthentication-required startup failures (#29877)

2026-06-25 21:50:36 +00:00

McpServerToolCallParams.json

…

McpServerToolCallResponse.json

…

McpToolCallProgressNotification.json

…

ModelListParams.json

…

ModelListResponse.json

Expose model upgrade retirement times (#38449)

2026-08-13 22:59:54 +00:00

ModelProviderCapabilitiesReadParams.json

…

ModelProviderCapabilitiesReadResponse.json

…

ModelReroutedNotification.json

…

ModelSafetyBufferingUpdatedNotification.json

Propagate safety buffering treatment metadata (#29473)

2026-06-22 19:51:03 -07:00

ModelVerificationNotification.json

…

NullableGetAccountTokenUsageParams.json

Show estimated thread usage in /status (#38281)

2026-08-13 00:30:08 +00:00

PermissionProfileListParams.json

feat: add permission profile list api (#23412)

2026-05-20 02:42:56 +00:00

PermissionProfileListResponse.json

permission profiles: expose availability to clients (#26678)

2026-06-22 13:48:09 -07:00

PlanDeltaNotification.json

…

PluginInstalledParams.json

[codex] Add installed-plugin mention API (#22448)

2026-05-18 03:11:54 -07:00

PluginInstalledResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginInstallParams.json

Forward install attempt IDs for remote plugins (#37773)

2026-08-10 03:28:19 +00:00

PluginInstallResponse.json

[codex] Propagate plugin app categories (#27420)

2026-06-11 10:34:41 -07:00

PluginListParams.json

Accept forceRefetch in plugin list requests (#34573)

2026-07-21 16:30:17 +00:00

PluginListResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginReadParams.json

…

PluginReadResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginShareCheckoutParams.json

feat: Add plugin share checkout (#22435)

2026-05-13 00:50:29 -07:00

PluginShareCheckoutResponse.json

feat: Add plugin share checkout (#22435)

2026-05-13 00:50:29 -07:00

PluginShareDeleteParams.json

…

PluginShareDeleteResponse.json

…

PluginShareListParams.json

…

PluginShareListResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginShareSaveParams.json

feat: Add role-aware plugin share context APIs (#21867)

2026-05-08 20:46:39 -07:00

PluginShareSaveResponse.json

Expose workspace plugin publish capability (#35254)

2026-07-24 22:14:12 +00:00

PluginShareUpdateTargetsParams.json

Allow publishing plugins through share updates (#33908)

2026-07-17 21:29:51 +00:00

PluginShareUpdateTargetsResponse.json

feat: Add role-aware plugin share context APIs (#21867)

2026-05-08 20:46:39 -07:00

PluginSkillReadParams.json

Add remote plugin skill read API (#20150)

2026-05-01 00:16:25 -07:00

PluginSkillReadResponse.json

Add remote plugin skill read API (#20150)

2026-05-01 00:16:25 -07:00

PluginUninstallParams.json

…

PluginUninstallResponse.json

…

ProcessExitedNotification.json

[codex] Add unsandboxed process exec API (#19040)

2026-05-04 16:43:58 -07:00

ProcessOutputDeltaNotification.json

[codex] Add unsandboxed process exec API (#19040)

2026-05-04 16:43:58 -07:00

ProjectChangedNotification.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

RawResponseCompletedNotification.json

Add cache-write tokens to the raw response schema (#33500)

2026-07-16 04:45:05 +00:00

RawResponseItemCompletedNotification.json

Support plaintext collaboration tool messages (#35845)

2026-07-28 23:49:37 +00:00

ReasoningSummaryPartAddedNotification.json

…

ReasoningSummaryTextDeltaNotification.json

…

ReasoningTextDeltaNotification.json

…

RemoteControlStatusChangedNotification.json

feat(app-server): update remote control APIs for better UX (#22877)

2026-05-15 14:33:24 -07:00

ReviewStartParams.json

…

ReviewStartResponse.json

Surface misalignment policy violations as typed errors (#38682)

2026-08-15 01:34:33 +00:00

SendAddCreditsNudgeEmailParams.json

…

SendAddCreditsNudgeEmailResponse.json

…

ServerRequestResolvedNotification.json

…

SkillsChangedNotification.json

…

SkillsConfigWriteParams.json

…

SkillsConfigWriteResponse.json

…

SkillsExtraRootsSetParams.json

Add runtime extra skill roots API (#24977)

2026-05-28 21:14:34 -07:00

SkillsExtraRootsSetResponse.json

Add runtime extra skill roots API (#24977)

2026-05-28 21:14:34 -07:00

SkillsListParams.json

Remove skills list extra roots (#21485)

2026-05-07 20:56:42 -07:00

SkillsListResponse.json

Expose remote skill icon URLs through app server (#35012)

2026-07-23 21:06:37 +00:00

TerminalInteractionNotification.json

…

ThreadApproveGuardianDeniedActionParams.json

…

ThreadApproveGuardianDeniedActionResponse.json

…

ThreadArchivedNotification.json

…

ThreadArchiveParams.json

…

ThreadArchiveResponse.json

…

ThreadClosedNotification.json

…

ThreadCompactStartParams.json

…

ThreadCompactStartResponse.json

…

ThreadDeletedNotification.json

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

ThreadDeleteParams.json

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

ThreadDeleteResponse.json

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

ThreadForkParams.json

Preserve namespaces on custom tool calls (#30302)

2026-06-27 09:54:56 -07:00

ThreadForkResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadGoalClearedNotification.json

…

ThreadGoalClearParams.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalClearResponse.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalGetParams.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalGetResponse.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalSetParams.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalSetResponse.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalUpdatedNotification.json

goal: pause continuation loops on usage limits and blockers (#23094)

2026-05-18 11:28:53 -07:00

ThreadInjectItemsParams.json

…

ThreadInjectItemsResponse.json

…

ThreadListParams.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadListResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadLoadedListParams.json

…

ThreadLoadedListResponse.json

…

ThreadMetadataUpdateParams.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadMetadataUpdateResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadNameUpdatedNotification.json

…

ThreadProjectUpdatedNotification.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadQueueChangedNotification.json

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

ThreadReadParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

ThreadReadResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadRealtimeClosedNotification.json

…

ThreadRealtimeErrorNotification.json

…

ThreadRealtimeItemAddedNotification.json

…

ThreadRealtimeOutputAudioDeltaNotification.json

…

ThreadRealtimeSdpNotification.json

…

ThreadRealtimeStartedNotification.json

Add Frameless Bidi support for realtime conversations (#33261)

2026-07-15 05:59:37 +00:00

ThreadRealtimeTranscriptDeltaNotification.json

…

ThreadRealtimeTranscriptDoneNotification.json

…

ThreadResumeParams.json

Support plaintext collaboration tool messages (#35845)

2026-07-28 23:49:37 +00:00

ThreadResumeResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadRevertedNotification.json

Add app-server support for reverting paginated threads (#38440)

2026-08-13 21:45:02 +00:00

ThreadRollbackParams.json

chore(app-server): mark thread/rollback as deprecated (#29928)

2026-06-25 17:15:46 +00:00

ThreadRollbackResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadSectionCreateParams.json

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

ThreadSectionCreateResponse.json

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

ThreadSectionDeleteParams.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionDeleteResponse.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionListParams.json

Add persisted sections for organizing threads (#35722)

2026-07-28 05:26:16 +00:00

ThreadSectionListResponse.json

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

ThreadSectionMoveParams.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadSectionMoveResponse.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadSectionUpdateParams.json

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

ThreadSectionUpdateResponse.json

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

ThreadSetNameParams.json

…

ThreadSetNameResponse.json

…

ThreadSettingsUpdatedNotification.json

[codex] Add configurable multi-agent mode hint text (#30493)

2026-07-02 18:44:34 -07:00

ThreadShellCommandParams.json

…

ThreadShellCommandResponse.json

…

ThreadStartedNotification.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadStartParams.json

Scope runtime workspace roots to execution environments (#32952)

2026-07-14 04:41:08 +00:00

ThreadStartResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadStatusChangedNotification.json

…

ThreadTokenUsageUpdatedNotification.json

Track prompt cache write token usage (#33454)

2026-07-16 00:22:53 +00:00

ThreadUnarchivedNotification.json

…

ThreadUnarchiveParams.json

…

ThreadUnarchiveResponse.json

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

ThreadUnsubscribeParams.json

…

ThreadUnsubscribeResponse.json

…

TurnCompletedNotification.json

Surface misalignment policy violations as typed errors (#38682)

2026-08-15 01:34:33 +00:00

TurnDiffUpdatedNotification.json

…

TurnInterruptParams.json

…

TurnInterruptResponse.json

…

TurnModerationMetadataNotification.json

[codex] Forward turn moderation metadata through app-server (#25710)

2026-06-05 02:41:06 -07:00

TurnPlanUpdatedNotification.json

…

TurnStartedNotification.json

Surface misalignment policy violations as typed errors (#38682)

2026-08-15 01:34:33 +00:00

TurnStartParams.json

Add audio variants to user input protocols (#33923)

2026-07-17 23:14:37 +00:00

TurnStartResponse.json

Surface misalignment policy violations as typed errors (#38682)

2026-08-15 01:34:33 +00:00

TurnSteerParams.json

Add audio variants to user input protocols (#33923)

2026-07-17 23:14:37 +00:00

TurnSteerResponse.json

…

WarningNotification.json

…

WindowsSandboxReadinessResponse.json

Add Windows sandbox readiness RPC (#20708)

2026-05-05 09:58:23 -07:00

WindowsSandboxSetupCompletedNotification.json

…

WindowsSandboxSetupStartParams.json

…

WindowsSandboxSetupStartResponse.json

…

WindowsWorldWritableWarningNotification.json

…