willwang-openai 633ab199cf Enforce marketplace source policy for curated plugins (#41953) ...

## Why

Marketplace source restrictions should cover curated plugins backed by the OpenAI plugins repository, not only user-configured marketplaces.

## What changed

- Validate both local curated catalogs against the existing OpenAI plugins Git source allowlist.
- Apply that policy to catalog discovery, installation, cached plugin and skill loading, and startup repository sync.
- Keep bundled and remote installed plugins independent of the curated Git source policy.

## Testing

Added coverage for exact and shorthand Git allowlist entries, host patterns, blocked and invalid rules, curated catalog variants, plugin skills, startup sync, and remote installed plugins.

GitOrigin-RevId: 04617acb4a93040c70a13759eb4ce872877ba211

2026-09-01 01:37:15 +00:00

..

command_migration

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

marketplace_add

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace_policy

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

marketplace_upgrade

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

remote

Refresh runtimes for remote plugin state changes (#41396)

2026-08-28 19:12:34 +00:00

startup_sync

Honor system proxy settings for remote plugins (#34509)

2026-07-21 10:05:06 +00:00

agent_plugin_manifest_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

agent_plugin_manifest.rs

Support Agent Plugins manifests (#35105)

2026-07-24 05:59:16 +00:00

agent_plugin_mcp_overlay.rs

Forward local env vars to Agent Plugin MCP servers (#40363)

2026-08-24 08:43:25 +00:00

app_mcp_routing_tests.rs

[codex] Centralize plugin auth capability filtering (#27902)

2026-06-16 00:13:27 +00:00

app_mcp_routing.rs

auth: move domain mode below app wire types (#29721)

2026-06-24 03:10:20 +00:00

artifact_operation_tests.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

artifact_operation.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

command_migration_tests.rs

Migrate plugin commands into skills on install (#33411)

2026-07-15 19:51:37 +00:00

command_migration.rs

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

discoverable_tests.rs

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

discoverable.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00

error_subtype.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

executor_hooks_tests.rs

Support app targets in executor plugin hooks (#41456)

2026-08-29 03:14:35 +00:00

executor_hooks.rs

Support app targets in executor plugin hooks (#41456)

2026-08-29 03:14:35 +00:00

git_policy.rs

Isolate automatic plugin Git operations (#39520)

2026-08-19 17:34:00 +00:00

http_client_selector.rs

Respect system proxies during plugin startup sync (#34506)

2026-07-21 09:46:00 +00:00

installed_marketplaces.rs

Honor layered configuration when loading plugins (#40954)

2026-08-26 19:02:02 +00:00

lib.rs

Instrument the loaded plugin cache (#41231)

2026-08-28 00:17:08 +00:00

loaded_cache_metrics.rs

Instrument the loaded plugin cache (#41231)

2026-08-28 00:17:08 +00:00

loader_tests.rs

Honor layered configuration when loading plugins (#40954)

2026-08-26 19:02:02 +00:00

loader.rs

Support per-tool MCP output limits (#41421)

2026-08-28 21:40:23 +00:00

manager_tests.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

manager.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

manifest.rs

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

marketplace_add.rs

[plugins] Enforce marketplace source admission requirements (#29753)

2026-06-23 20:13:11 -07:00

marketplace_context.rs

Honor per-repository plugin configuration in catalog requests (#41208)

2026-08-27 21:10:10 +00:00

marketplace_policy_tests.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

marketplace_policy.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

marketplace_upgrade_tests.rs

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace_upgrade.rs

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace.rs

Add Cursor support to setup import (#33426)

2026-07-15 21:03:49 +00:00

npm_source_tests.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

npm_source.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

plugin_bundle_archive_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_bundle_archive.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_metrics_sidecar_tests.rs

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

plugin_metrics_sidecar.rs

Remove private executor directory creation (#39736)

2026-08-20 16:22:45 +00:00

plugin_metrics.rs

Add manifest-defined metrics for trusted plugin scripts (#38238)

2026-08-12 19:09:48 +00:00

provider_tests.rs

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

provider.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

recommended_plugin_install.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote_bundle.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_legacy.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_plugin_id_resolver.rs

Propagate remote plugin IDs to skill metadata (#35261)

2026-07-24 23:36:11 +00:00

remote_tests.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote.rs

Refresh runtimes for remote plugin state changes (#41396)

2026-08-28 19:12:34 +00:00

script_attribution_tests.rs

Require approval for commands with dynamic shell words (#39159)

2026-08-18 07:26:21 +00:00

script_attribution.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

skill_snapshots.rs

Unify plugin skill loading with the host skill service (#37444)

2026-08-07 13:54:24 +00:00

startup_sync_tests.rs

Test plugin sync isolation from repository Git config (#39585)

2026-08-20 04:59:20 +00:00

startup_sync.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

store_tests.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

store.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

test_support.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

toggles.rs

…

tool_suggest_metadata.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00