mirror of https://github.com/openai/codex.git synced 2026-09-01 14:39:21 +00:00

Files

sayan-oai fde2156057 Enforce environment MCP policies (#39335 )

## What changed

- Add environment-provided MCP restrictions for configured and plugin-provided servers.
- Disable attachment-scoped servers while their environment configuration is pending, failed, or unselected, while preserving selected-plugin access and the controller-owned Apps server.
- Apply the resolved policy to runtime startup, model tool exposure, telemetry, OAuth flows, and skill dependency installation.

## Testing

- Cover policy filtering for configured and plugin servers, environment state transitions, Apps ownership, and managed OAuth rejection.

GitOrigin-RevId: 7ca5d4dda14068e758497f88835d5cba685e159e

2026-08-19 01:26:16 +00:00

src

Enforce environment MCP policies (#39335 )

2026-08-19 01:26:16 +00:00

BUILD.bazel

…

Cargo.toml

Enforce environment-specific command policies (#38942 )

2026-08-17 04:37:50 +00:00

README.md

…

README.md

codex-protocol

This crate defines the "types" for the protocol used by Codex CLI, which includes both "internal types" for communication between codex-core and codex-tui, as well as "external types" used with codex app-server.

This crate should have minimal dependencies.

Ideally, we should avoid "material business logic" in this crate, as we can always introduce Ext-style traits to add functionality to types in other crates.