codex

mirror of https://github.com/openai/codex.git synced 2026-09-17 12:23:33 +00:00

Files

Jiwon Kim 108e6a6dbe Replace Sites migration state with a runtime compatibility guard (#46108 )

## Why

Older Desktop clients can still provide bundled Sites to an independently updated SSH app-server. A cached remote Sites install must take precedence, even when disabled, while a missing remote bundle must preserve the bundled fallback.

## What changed

- Remove persisted bundled-plugin exclusions, Sites migration checks, and the migration wait when loading local plugin configuration.
- Suppress `sites@openai-bundled` during plugin loading when the remote global catalog is active and a cached remote Sites install is available.
- Remove exclusion-based catalog filtering and read/install guards, and simplify `install_plugin` to accept `ConfigLayerStack`.

## Testing

Expand the agent-turn Sites test to cover enabled remote precedence, disabled remote suppression of bundled Sites, and fallback when the remote bundle is missing.

GitOrigin-RevId: e2758596e5493ccee051cdfbf6b4afbe4f98948c

2026-09-17 04:23:45 +00:00

account_thread_usage.rs

Show estimated thread usage in /status (#38281 )

2026-08-13 00:30:08 +00:00

account.rs

Expose selected workspace routing in app-server account reads (#45529 )

2026-09-14 22:31:32 +00:00

analytics.rs

Attribute command and plugin analytics to the invoking model (#45445 )

2026-09-14 15:30:22 +00:00

app_installed.rs

Propagate Apps tool refreshes to existing threads (#43900 )

2026-09-08 19:56:25 +00:00

app_list.rs

Support managed AWS access keys for Amazon Bedrock (#40481 )

2026-08-24 21:39:48 +00:00

app_read.rs

Use thread configuration for app/read (#37891 )

2026-08-10 22:39:29 +00:00

attestation.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

auto_env.rs

test: add delayed exec-server transport (#31427 )

2026-07-09 00:17:38 +00:00

bedrock_setup.rs

Add AWS credential export commands for Amazon Bedrock (#44028 )

2026-09-09 03:17:48 +00:00

client_metadata.rs

Replace Guardian tickets with parent response IDs (#43002 )

2026-09-05 13:02:49 +00:00

code_mode_host.rs

Block goals after repeated execution host failures (#41454 )

2026-08-29 03:04:26 +00:00

collaboration_mode_list.rs

test: migrate TestAppServer callers to builder (#31451 )

2026-07-08 00:15:49 +00:00

command_exec.rs

Preserve managed deny-read rules across permission updates (#40004 )

2026-08-21 20:15:23 +00:00

compaction.rs

Always use streamed remote compaction for supported providers (#44255 )

2026-09-09 18:04:04 +00:00

config_model_provider_requirements_tests.rs

Enforce managed model provider selection and definitions (#44650 )

2026-09-10 21:41:39 +00:00

config_requirements_application.rs

Expose managed application network requirements (#42417 )

2026-09-03 02:09:10 +00:00

config_requirements_browser_use_tests.rs

Expose managed WebMCP policy through the app server (#42823 )

2026-09-04 18:30:26 +00:00

config_requirements_exec_tests.rs

Test approved command execution with managed unified exec disabled (#44814 )

2026-09-11 12:37:04 +00:00

config_requirements_in_app_browser.rs

Expose managed WebMCP policy through the app server (#42823 )

2026-09-04 18:30:26 +00:00

config_requirements_login.rs

Expose selected workspace routing in app-server account reads (#45529 )

2026-09-14 22:31:32 +00:00

config_rpc.rs

Add per-app tool exposure configuration (#46035 )

2026-09-16 21:50:07 +00:00

connection_handling_stdio_tests.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523 )

2026-09-10 13:02:57 +00:00

connection_handling_websocket_unix.rs

Preserve the app-server shutdown signal future across loop iterations (#45849 )

2026-09-16 03:30:44 +00:00

connection_handling_websocket.rs

Replace Windows app-server shutdown files with socket requests (#43308 )

2026-09-07 00:00:23 +00:00

curated_mcp_sync.rs

Require synchronous review for sensitive MCP actions (#41094 )

2026-08-27 08:44:54 +00:00

current_time.rs

Tag current time reminders in model context (#38443 )

2026-08-13 21:53:52 +00:00

cyber_access_program.rs

Allow setting daybreakEnabled when starting a thread (#45513 )

2026-09-14 20:57:48 +00:00

daemon_update_recovery.rs

Continue interrupted work after managed daemon restarts (#45820 )

2026-09-16 00:54:58 +00:00

daybreak_access.rs

Attach verified access context to eligible plugin MCP calls (#41005 )

2026-08-27 00:02:26 +00:00

dynamic_tools.rs

Refactor image content to use a shared ImageReference type (#45543 )

2026-09-14 23:25:09 +00:00

environment_add.rs

Report selected environment connection transitions (#33251 )

2026-07-15 05:21:13 +00:00

environment_info.rs

Cache executor metadata from initialization (#40343 )

2026-08-24 06:43:07 +00:00

environment_status.rs

Expose environment status through app-server (#32920 )

2026-07-14 01:49:16 +00:00

exec_server_test_support.rs

[app-server] expose environment info RPC (#30291 )

2026-06-27 19:34:10 +00:00

executor_mcp.rs

Cache executor metadata from initialization (#40343 )

2026-08-24 06:43:07 +00:00

executor_skills.rs

Suppress warnings when skill descriptions are shortened (#46070 )

2026-09-17 01:28:24 +00:00

experimental_api.rs

Add turn-scoped settings updates to the app server (#40656 )

2026-08-25 17:55:50 +00:00

experimental_feature_list.rs

Remove the workspace settings gate for apps and plugins (#38994 )

2026-08-17 12:26:59 +00:00

external_agent_config.rs

Expose thread originators through the app-server API (#42458 )

2026-09-03 06:02:25 +00:00

external_agent_import_sync.rs

Sync updates to imported external agent sessions (#36356 )

2026-07-31 16:17:44 +00:00

feedback.rs

Make diagnostic report uploads resilient to slow networks (#42096 )

2026-09-01 16:49:16 +00:00

fs.rs

test: migrate TestAppServer callers to builder (#31451 )

2026-07-08 00:15:49 +00:00

git_attribution.rs

Remove the deprecated thread/rollback API (#44915 )

2026-09-11 21:32:04 +00:00

guardian_action_budget_tests.rs

Preserve complete actions in Guardian approval reviews (#44569 )

2026-09-10 16:01:02 +00:00

guardian_code_mode_tests.rs

Make Code Mode wrappers transparent to Guardian model policies (#45915 )

2026-09-16 10:11:26 +00:00

guardian_policy_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

guardian_sync_session_tests.rs

Refresh global instructions at model-request boundaries (#44675 )

2026-09-10 23:46:33 +00:00

guardian_v2_history_tests.rs

Preserve Guardian authorization evidence across checkpoint migration (#45782 )

2026-09-15 20:08:36 +00:00

guardian_v2_model_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

guardian_v2.rs

Centralize model-message resolution and rendering in codex-prompts (#46026 )

2026-09-16 21:01:13 +00:00

history_notes_extension.rs

Reject token-budget history notes for unsupported starting models (#44883 )

2026-09-11 17:55:03 +00:00

hooks_list.rs

Refresh session hooks after external plugin updates (#42990 )

2026-09-05 12:08:18 +00:00

host_skills.rs

Refresh host skill catalogs through world state (#33425 )

2026-07-15 20:59:21 +00:00

imagegen_extension.rs

Support image references by file ID in inputs and tool outputs (#45794 )

2026-09-15 21:19:08 +00:00

initialize.rs

Negotiate MCP extensions per app-server session (#36910 )

2026-08-04 15:23:43 +00:00

luna_reserve.rs

Extend rate limit reads with usage capabilities (#42358 )

2026-09-02 21:01:04 +00:00

marketplace_add.rs

Handle @ in local marketplace paths (#34959 )

2026-07-23 15:32:36 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683 )

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149 )

2026-09-01 22:37:26 +00:00

mcp_event_stream.rs

Add app-server MCP event streaming (#39761 )

2026-08-20 17:49:35 +00:00

mcp_protocol_default.rs

Give hosted Codex Apps an independent MCP protocol opt-in (#44318 )

2026-09-09 22:22:08 +00:00

mcp_resource_origin.rs

Scope MCP resource reads by connector (#39244 )

2026-08-18 18:01:39 +00:00

mcp_resource.rs

Preserve runtime workspace roots across thread resume (#43848 )

2026-09-08 16:24:38 +00:00

mcp_server_elicitation.rs

Enforce managed provider requirements on existing app-server threads (#44944 )

2026-09-12 00:12:26 +00:00

mcp_server_status.rs

Expose advertised MCP server capabilities in status responses (#44826 )

2026-09-11 13:55:24 +00:00

mcp_tool.rs

Preserve MCP App UI metadata in tool-call events and history (#45805 )

2026-09-15 22:52:56 +00:00

memory_read.rs

Add dedicated memory v2 consolidation and read prompts (#43813 )

2026-09-08 12:58:11 +00:00

memory_reset.rs

Add memory dual writing and v2 readiness reporting (#43827 )

2026-09-08 14:23:23 +00:00

misalignment_policy.rs

Expose resumable misalignment details through app server (#40952 )

2026-08-26 18:42:44 +00:00

mod.rs

Add an experimental rollout compression endpoint (#46020 )

2026-09-16 20:39:18 +00:00

model_auto_review.rs

Restore permission profiles when resuming threads (#39153 )

2026-08-18 06:22:04 +00:00

model_list.rs

Expose available access programs in model discovery (#44893 )

2026-09-11 19:13:04 +00:00

model_provider_capabilities_read.rs

Add an Amazon Bedrock Runtime provider (#38470 )

2026-08-14 01:23:59 +00:00

model_provider_enforcement_tests.rs

Use a dedicated mock server in the provider enforcement test (#45517 )

2026-09-14 21:21:21 +00:00

multi_agent_v2_developer_instructions.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

otel.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

output_schema.rs

Simplify app-server integration test setup (#34786 )

2026-07-22 16:30:12 +00:00

permission_profile_list.rs

Resolve permission profiles with explicit execution-host path context (#44676 )

2026-09-11 00:03:40 +00:00

plan_item.rs

Simplify app-server integration test setup (#34786 )

2026-07-22 16:30:12 +00:00

plugin_install.rs

Filter plugin-install test analytics by event type (#45515 )

2026-09-14 21:03:49 +00:00

plugin_list.rs

Replace Sites migration state with a runtime compatibility guard (#46108 )

2026-09-17 04:23:45 +00:00

plugin_read.rs

Apply app routing policy to unauthenticated plugin reads (#41230 )

2026-08-28 00:07:32 +00:00

plugin_reconcile.rs

Add plugin reconciliation app-server API (#41949 )

2026-09-01 00:50:11 +00:00

plugin_search.rs

Replace Sites migration state with a runtime compatibility guard (#46108 )

2026-09-17 04:23:45 +00:00

plugin_share.rs

Expose selected workspace routing in app-server account reads (#45529 )

2026-09-14 22:31:32 +00:00

plugin_uninstall.rs

Run plugin app-server tests in automatic environments (#38189 )

2026-08-12 13:33:01 +00:00

process_exec.rs

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

projects.rs

Persist Daybreak preferences in thread metadata (#42854 )

2026-09-04 21:17:25 +00:00

rate_limit_reset_credits.rs

Expose selected workspace routing in app-server account reads (#45529 )

2026-09-14 22:31:32 +00:00

rate_limits_identity_tests.rs

Load analytics reports with server plans and account identity checks (#45762 )

2026-09-15 19:00:56 +00:00

rate_limits.rs

Add Luna Reserve usage fallback to the TUI (#42372 )

2026-09-02 21:50:51 +00:00

realtime_conversation.rs

Enforce managed residency when constructing API providers (#46011 )

2026-09-16 19:46:52 +00:00

recommended_plugins.rs

Hydrate recommended plugin metadata on selection (#39143 )

2026-08-18 05:42:39 +00:00

remote_control_auth.rs

Bind remote-control sessions to their authentication owner (#44341 )

2026-09-09 23:59:14 +00:00

remote_control.rs

Enforce managed provider requirements on existing app-server threads (#44944 )

2026-09-12 00:12:26 +00:00

remote_thread_store.rs

Add app-server APIs for stored thread attachments (#44564 )

2026-09-10 15:52:09 +00:00

request_permissions.rs

Preserve target-native cwd in permission approval requests (#42314 )

2026-09-02 17:27:50 +00:00

request_user_input.rs

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

request_validation.rs

Refactor image content to use a shared ImageReference type (#45543 )

2026-09-14 23:25:09 +00:00

residency.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

review.rs

Enforce managed provider requirements on existing app-server threads (#44944 )

2026-09-12 00:12:26 +00:00

rollout_compress_tests.rs

Add an experimental rollout compression endpoint (#46020 )

2026-09-16 20:39:18 +00:00

rollout_migration.rs

Start rollout migration after runtime feature enablement (#40668 )

2026-08-25 18:14:32 +00:00

safety_check_downgrade.rs

Retire the personality feature flag and document deprecated settings (#45809 )

2026-09-15 23:39:40 +00:00

selected_capability_stack.rs

Honor explicit plugin mentions during MCP startup (#42406 )

2026-09-03 01:33:32 +00:00

selected_environment.rs

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

server_diagnostics.rs

Keep app-server thread RPCs active until delegated work completes (#43950 )

2026-09-09 00:25:02 +00:00

session_end.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523 )

2026-09-10 13:02:57 +00:00

skills_list.rs

Allow setting daybreakEnabled when starting a thread (#45513 )

2026-09-14 20:57:48 +00:00

sleep.rs

Add opt-in nonfatal handling for clock read failures (#45825 )

2026-09-16 01:16:35 +00:00

thread_archive.rs

Shut down resumed descendants when archiving thread trees (#40179 )

2026-08-23 03:25:56 +00:00

thread_attachments.rs

Add app-server APIs for stored thread attachments (#44564 )

2026-09-10 15:52:09 +00:00

thread_delete.rs

Add thread attachment operations with coordinated deletion (#44350 )

2026-09-10 00:30:27 +00:00

thread_environments.rs

Expose loaded thread environments in app-server responses (#42386 )

2026-09-02 23:41:14 +00:00

thread_fork_multi_agent_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

thread_fork.rs

Copy current thread attachments into non-ephemeral forks (#45579 )

2026-09-15 02:33:27 +00:00

thread_goal_empty_responses.rs

Block goals after three empty automatic continuation turns (#44320 )

2026-09-09 22:27:37 +00:00

thread_inject_items.rs

Preserve tool output truncation budgets across resume and fork (#44248 )

2026-09-09 17:55:00 +00:00

thread_list.rs

Expose thread originators through the app-server API (#42458 )

2026-09-03 06:02:25 +00:00

thread_loaded_list.rs

Simplify app-server integration test setup (#34786 )

2026-07-22 16:30:12 +00:00

thread_memory_mode_set.rs

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

thread_metadata_update.rs

Persist Daybreak preferences in thread metadata (#42854 )

2026-09-04 21:17:25 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404 )

2026-05-12 18:40:53 -07:00

thread_queue.rs

Expose model settings in app-server thread metadata (#42151 )

2026-09-01 22:56:18 +00:00

thread_read.rs

Support image references by file ID in inputs and tool outputs (#45794 )

2026-09-15 21:19:08 +00:00

thread_resume.rs

Retire the personality feature flag and document deprecated settings (#45809 )

2026-09-15 23:39:40 +00:00

thread_revert.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

thread_sections.rs

Add appearance metadata to thread sections (#37898 )

2026-08-10 23:32:42 +00:00

thread_settings_update.rs

Preserve session config when switching thread permission profiles (#45981 )

2026-09-16 16:46:34 +00:00

thread_shell_command.rs

Support configurable timeouts for thread shell commands (#41384 )

2026-08-28 18:07:40 +00:00

thread_start.rs

Expose thread originators through the app-server API (#42458 )

2026-09-03 06:02:25 +00:00

thread_status.rs

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

thread_timeline.rs

Preserve root turn attribution in turn-start events (#44611 )

2026-09-10 18:24:13 +00:00

thread_unarchive.rs

Preserve runtime workspace roots across thread resume (#43848 )

2026-09-08 16:24:38 +00:00

thread_unsubscribe.rs

Make the app-server thread unload delay configurable (#42320 )

2026-09-02 18:18:54 +00:00

turn_cost_otel.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

turn_interrupt.rs

Standardize shell execution on unified exec (#39757 )

2026-08-20 17:46:05 +00:00

turn_settings_update.rs

Remove retired model entries while preserving migration prompts (#44250 )

2026-09-09 17:56:33 +00:00

turn_start_zsh_fork.rs

Standardize shell execution on unified exec (#39772 )

2026-08-20 18:29:35 +00:00

turn_start.rs

Enable app tool result metadata with analytics controls (#46010 )

2026-09-16 19:32:16 +00:00

turn_steer.rs

Standardize shell execution on unified exec (#39757 )

2026-08-20 17:46:05 +00:00

user_verification_mcp.rs

Allow hosted Apps MCP contributions to override the protocol mode (#46019 )

2026-09-16 20:32:52 +00:00

user_verification.rs

Add cancellation for native user-verification RPCs (#43925 )

2026-09-08 21:48:53 +00:00

view_image.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

web_search.rs

Allow custom providers to opt into standalone web search (#34846 )

2026-07-23 00:02:15 +00:00

windows_sandbox_setup.rs

test: migrate TestAppServer callers to builder (#31451 )

2026-07-08 00:15:49 +00:00

workspace_routing.rs

Expose selected workspace routing in app-server account reads (#45529 )

2026-09-14 22:31:32 +00:00