Max Stoiber 0a451911c3 Address direct MCP egress review feedback ...

App-server callers can supply arbitrary MCP request metadata. The direct egress policy covered the snake_case connector identity fields but omitted the camelCase variants used by app-server surfaces, allowing those reserved identities to bypass the boundary. Strip the three canonical camelCase variants and document the filtering contract for app-server clients.\n\nCover the policy at the real MCP wire boundary: configured direct servers keep benign caller metadata and negotiated sandbox state while dropping thread, turn, trace, plugin, and connector identity; hosted Codex Apps calls continue to receive authoritative thread and turn metadata.

2026-07-07 09:26:46 -07:00

..

common

Revert "[core] Support interleaved response items" (#31261)

2026-07-06 10:09:54 -07:00

remote_env_windows

app-server: cover selected environments in integration tests (#29992)

2026-07-07 00:42:43 +00:00

suite

Address direct MCP egress review feedback

2026-07-07 09:26:46 -07:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_headers.rs

core: route Responses API through system proxy (#31335)

2026-07-07 03:49:53 +00:00