charlesgong-openai 97c82c0900 Restrict plugin migration to home scope (#39663) ...

## Why

Plugin imports persist user-global enabled state. Repository-controlled settings
must not be allowed to select executable plugin content for installation.

## What changed

- Detect plugin migrations only from home-scoped external agent settings.
- Reject plugin imports with a non-empty project `cwd` before loading Codex
  configuration, while continuing to treat an empty `cwd` as home scope.

## Testing

- Cover repository-scoped detection with remote, installed, and project-relative
  marketplaces.
- Verify that forged project-scoped imports fail without writing `config.toml`.

GitOrigin-RevId: 53cb46ae049cb49283187312d475d40cf42e35ab

2026-08-20 08:24:18 +00:00

..

detect

Restrict plugin migration to home scope (#39663)

2026-08-20 08:24:18 +00:00

service_tests

Restrict plugin migration to home scope (#39663)

2026-08-20 08:24:18 +00:00

sessions

Add async delivery metadata to agent messages (#39312)

2026-08-18 23:05:52 +00:00

source

Stop migrating Cursor sandbox settings (#39325)

2026-08-19 01:06:12 +00:00

config_values.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

hooks_cla.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

hooks_common.rs

Skip redirected external-agent migration destinations (#39221)

2026-08-18 16:05:51 +00:00

hooks_cur_tests.rs

Add Cursor support to setup import (#33426)

2026-07-15 21:03:49 +00:00

hooks_cur.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

lib_tests.rs

Add SessionEnd hooks for thread teardown (#33895)

2026-07-17 19:58:56 +00:00

lib.rs

Detect connectors used in external agent sessions (#36336)

2026-07-31 14:35:55 +00:00

mcp.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

memory_import_tests.rs

Preserve scope and provenance for imported agent memory (#33683)

2026-07-16 20:08:37 +00:00

memory_import.rs

Preserve scope and provenance for imported agent memory (#33683)

2026-07-16 20:08:37 +00:00

memory_tests.rs

Add external agent memory migration (#33444)

2026-07-15 22:49:52 +00:00

memory.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

migration_source.rs

Stop migrating Cursor sandbox settings (#39325)

2026-08-19 01:06:12 +00:00

model.rs

Preserve working directories when importing external sessions (#36964)

2026-08-04 19:57:33 +00:00

plugins.rs

Restrict plugin migration to home scope (#39663)

2026-08-20 08:24:18 +00:00

reporting.rs

Report detailed session import error types (#33863)

2026-07-17 16:14:36 +00:00

rewrite_tests.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

rewrite.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

scope_tests.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

scope.rs

Skip redirected external-agent migration destinations (#39221)

2026-08-18 16:05:51 +00:00

service_tests.rs

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

service.rs

Stop migrating Cursor sandbox settings (#39325)

2026-08-19 01:06:12 +00:00

source_cla.rs

Infer the bundled Claude Code plugin marketplace (#34979)

2026-07-23 17:51:12 +00:00

source_cur_tests.rs

Stop migrating Cursor sandbox settings (#39325)

2026-08-19 01:06:12 +00:00

source_cur.rs

Move external agent migration into its crate (#33456)

2026-07-16 00:34:36 +00:00

subagents.rs

Skip redirected external-agent migration destinations (#39221)

2026-08-18 16:05:51 +00:00

utils.rs

Avoid overwriting symlinked migration targets (#36051)

2026-07-30 00:50:02 +00:00