Felipe Coury 637c3227b3 Avoid executing PATH helpers before workspace trust (#42324) ...

## Why

Automatic startup work and `codex doctor` can run before a workspace is
trusted. A repository-controlled `PATH` must not be able to make those flows
execute workspace-provided helpers.

## What changed

- Resolve helpers used by automatic startup from trusted system installation
  directories, and give plugin-sync Git subprocesses a sanitized environment.
- Make terminal detection environment-only and have doctor inspect executable
  locations without running them. Fetch update metadata with the HTTP client
  instead of `curl`.
- Fall back conservatively when trusted terminal helpers are unavailable,
  including for tmux keyboard enhancement flags.

## Testing

Add black-box coverage with hostile workspace `PATH` entries for startup,
interactive tmux startup, support log collection, doctor, and curated plugin
sync. Add unit coverage for trusted executable resolution and bounded update
HTTP responses.

GitOrigin-RevId: 3b8995eb422b60ed53b0386951de59e8f9bfc542

2026-09-02 18:34:27 +00:00

..

command_migration

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

marketplace_add

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace_policy

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

marketplace_upgrade

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

remote

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

startup_sync

Honor system proxy settings for remote plugins (#34509)

2026-07-21 10:05:06 +00:00

agent_plugin_manifest_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

agent_plugin_manifest.rs

Support Agent Plugins manifests (#35105)

2026-07-24 05:59:16 +00:00

agent_plugin_mcp_overlay.rs

Forward local env vars to Agent Plugin MCP servers (#40363)

2026-08-24 08:43:25 +00:00

app_mcp_routing_tests.rs

[codex] Centralize plugin auth capability filtering (#27902)

2026-06-16 00:13:27 +00:00

app_mcp_routing.rs

auth: move domain mode below app wire types (#29721)

2026-06-24 03:10:20 +00:00

artifact_operation_tests.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

artifact_operation.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

bundled_plugin_exclusions.rs

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

command_migration_tests.rs

Migrate plugin commands into skills on install (#33411)

2026-07-15 19:51:37 +00:00

command_migration.rs

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

discoverable_tests.rs

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

discoverable.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00

error_subtype.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

executor_hooks_tests.rs

Treat bundled cleanup hooks as built-ins (#42110)

2026-09-01 18:02:27 +00:00

executor_hooks.rs

Treat bundled cleanup hooks as built-ins (#42110)

2026-09-01 18:02:27 +00:00

git_policy.rs

Isolate automatic plugin Git operations (#39520)

2026-08-19 17:34:00 +00:00

http_client_selector.rs

Respect system proxies during plugin startup sync (#34506)

2026-07-21 09:46:00 +00:00

installed_marketplaces.rs

Honor layered configuration when loading plugins (#40954)

2026-08-26 19:02:02 +00:00

lib.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

loaded_cache_metrics.rs

Instrument the loaded plugin cache (#41231)

2026-08-28 00:17:08 +00:00

loader_tests.rs

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

loader.rs

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

manager_tests.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

manager.rs

Refresh plugin skills after out-of-process version changes (#42284)

2026-09-02 14:14:44 +00:00

manifest.rs

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

marketplace_add.rs

[plugins] Enforce marketplace source admission requirements (#29753)

2026-06-23 20:13:11 -07:00

marketplace_context.rs

Honor per-repository plugin configuration in catalog requests (#41208)

2026-08-27 21:10:10 +00:00

marketplace_policy_tests.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

marketplace_policy.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

marketplace_upgrade_tests.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

marketplace.rs

Add Cursor support to setup import (#33426)

2026-07-15 21:03:49 +00:00

npm_source_tests.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

npm_source.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

plugin_bundle_archive_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_bundle_archive.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_metrics_sidecar_tests.rs

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

plugin_metrics_sidecar.rs

Remove private executor directory creation (#39736)

2026-08-20 16:22:45 +00:00

plugin_metrics.rs

Add manifest-defined metrics for trusted plugin scripts (#38238)

2026-08-12 19:09:48 +00:00

provider_tests.rs

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

provider.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

recommended_plugin_install.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote_bundle.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_legacy.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_mutations_tests.rs

Centralize remote plugin mutations in PluginsManager (#42114)

2026-09-01 18:35:00 +00:00

remote_mutations.rs

Centralize remote plugin mutations in PluginsManager (#42114)

2026-09-01 18:35:00 +00:00

remote_plugin_id_resolver.rs

Propagate remote plugin IDs to skill metadata (#35261)

2026-07-24 23:36:11 +00:00

remote_tests.rs

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

remote.rs

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

script_attribution_tests.rs

Require approval for commands with dynamic shell words (#39159)

2026-08-18 07:26:21 +00:00

script_attribution.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

skill_snapshots.rs

Unify plugin skill loading with the host skill service (#37444)

2026-08-07 13:54:24 +00:00

startup_sync_tests.rs

Avoid executing PATH helpers before workspace trust (#42324)

2026-09-02 18:34:27 +00:00

startup_sync.rs

Avoid executing PATH helpers before workspace trust (#42324)

2026-09-02 18:34:27 +00:00

store_tests.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

store.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

test_support.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

toggles.rs

Extract plugin loading and marketplace logic into codex-core-plugins (#18070)

2026-04-15 23:13:17 -07:00

tool_suggest_metadata.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00