charlesgong-openai 97c82c0900 Restrict plugin migration to home scope (#39663) ...

## Why

Plugin imports persist user-global enabled state. Repository-controlled settings
must not be allowed to select executable plugin content for installation.

## What changed

- Detect plugin migrations only from home-scoped external agent settings.
- Reject plugin imports with a non-empty project `cwd` before loading Codex
  configuration, while continuing to treat an empty `cwd` as home scope.

## Testing

- Cover repository-scoped detection with remote, installed, and project-relative
  marketplaces.
- Verify that forged project-scoped imports fail without writing `config.toml`.

GitOrigin-RevId: 53cb46ae049cb49283187312d475d40cf42e35ab

2026-08-20 08:24:18 +00:00

..

src

Restrict plugin migration to home scope (#39663)

2026-08-20 08:24:18 +00:00

BUILD.bazel

Support detect and import MCP, Subagents, hooks, commands from external (#19949)

2026-04-29 00:45:24 +00:00

Cargo.toml

Read plugin authentication state from AuthManager (#39087)

2026-08-17 22:26:27 +00:00