mirror of
https://github.com/openai/codex.git
synced 2026-10-22 17:58:46 +00:00
## Why Authentication can change between model steps. Refresh cloud catalogs before the next step so plugin acceptance and skill instructions reflect the current auth scope, including plugins that are no longer available. ## What changed - Add a `refresh_catalog_for_step` lifecycle hook and rebuild MCP when plugin catalogs change. - Reuse successful discovery within a turn and auth scope, serialize concurrent refreshes, and allow retries after failures or cancellation. Limit cloud skill discovery warnings to once per turn. - Skip cloud discovery during prewarm and other context-only captures, and check hosted plugins even when no executor roots are selected. ## Testing Add regression coverage for mid-turn auth rotation and plugin removal, serialized refreshes and retries, stale discovery results, and prewarm boundaries. GitOrigin-RevId: 355681e84dc765e8dc1a04608779d95c706c2188