Kyle Brown 84fa68b429 Attribute command executions to trusted plugin scripts (#35020) ...

## What changed

- Resolve shell and unified-exec commands against the trusted plugin roots loaded for each turn.
- Add optional `pluginId` and safe plugin-relative `scriptPath` fields to command execution items and legacy execution events, and propagate them through app-server notifications.
- Include the attribution in command execution analytics while rejecting absolute, unsafe, and unattributed script paths.

## Testing

- Cover attribution for cached curated and remote plugin scripts from command execution through core and app-server events.
- Verify analytics serialization and unsafe-path filtering.

GitOrigin-RevId: 02fac3a233284ccfc6642fa502a95f1881dba83d

2026-07-23 22:31:53 +00:00

..

account.rs

Enable git attribution across Codex entry points (#34819)

2026-07-22 20:23:35 +00:00

analytics.rs

[codex] Attribute app-server analytics by thread originator (#29935)

2026-06-25 18:15:48 -07:00

app_installed.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

app_list.rs

Remove first-party type from app metadata (#34844)

2026-07-22 23:45:45 +00:00

app_read.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

attestation.rs

test: migrate app-server v2 starts to auto env (#31614)

2026-07-08 14:13:59 -07:00

auto_env.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

client_metadata.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

collaboration_mode_list.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

command_exec.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

compaction.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

config_rpc.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

connection_handling_websocket_unix.rs

[codex] Add user input client ids (#24653)

2026-05-28 14:54:39 -07:00

connection_handling_websocket.rs

Emit exec-policy warnings for freshly loaded thread config (#31253)

2026-07-06 10:17:15 -07:00

current_time.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

dynamic_tools.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

environment_add.rs

Report selected environment connection transitions (#33251)

2026-07-15 05:21:13 +00:00

environment_info.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

environment_status.rs

Expose environment status through app-server (#32920)

2026-07-14 01:49:16 +00:00

exec_server_test_support.rs

[app-server] expose environment info RPC (#30291)

2026-06-27 19:34:10 +00:00

executor_mcp.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

executor_skills.rs

test: migrate app-server v2 starts to auto env (#31614)

2026-07-08 14:13:59 -07:00

experimental_api.rs

Support configurable realtime BEM channel prefixes (#34816)

2026-07-22 19:43:35 +00:00

experimental_feature_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

external_agent_config.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

fs.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

git_attribution.rs

Enable git attribution across Codex entry points (#34819)

2026-07-22 20:23:35 +00:00

hooks_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

host_skills.rs

Refresh host skill catalogs through world state (#33425)

2026-07-15 20:59:21 +00:00

imagegen_extension.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

initialize.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

marketplace_add.rs

Handle @ in local marketplace paths (#34959)

2026-07-23 15:32:36 +00:00

marketplace_remove.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

marketplace_upgrade.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

mcp_resource.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

mcp_server_elicitation.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

mcp_server_status.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

mcp_tool.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

memory_reset.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

mod.rs

Enable git attribution across Codex entry points (#34819)

2026-07-22 20:23:35 +00:00

model_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

model_provider_capabilities_read.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

output_schema.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

permission_profile_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plan_item.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plugin_install.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

plugin_list.rs

Use the API plugin marketplace for Amazon Bedrock (#34931)

2026-07-23 11:32:47 +00:00

plugin_read.rs

Expose remote skill icon URLs through app server (#35012)

2026-07-23 21:06:37 +00:00

plugin_share.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plugin_uninstall.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

process_exec.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

rate_limit_reset_credits.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

rate_limits.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

realtime_conversation.rs

Support configurable realtime BEM channel prefixes (#34816)

2026-07-22 19:43:35 +00:00

recommended_plugins.rs

test: migrate app-server v2 starts to auto env (#31614)

2026-07-08 14:13:59 -07:00

remote_control.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

remote_thread_store.rs

Add persisted thread pinning to the app server (#34840)

2026-07-22 22:54:28 +00:00

request_permissions.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

request_user_input.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

request_validation.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

review.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

safety_check_downgrade.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

selected_capability_stack.rs

Add batched executor capability discovery (#33852)

2026-07-17 15:45:48 +00:00

selected_environment.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

session_end.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

skills_list.rs

Keep session defaults static during config batch writes (#34940)

2026-07-23 13:11:16 +00:00

sleep.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_archive.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_delete.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_fork.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_inject_items.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_list.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_loaded_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_memory_mode_set.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_metadata_update.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404)

2026-05-12 18:40:53 -07:00

thread_read.rs

Support incremental replay of updated thread items (#35013)

2026-07-23 21:17:45 +00:00

thread_resume.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_rollback.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_settings_update.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_shell_command.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_start.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_status.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_unarchive.rs

Add persisted thread pinning to the app server (#34840)

2026-07-22 22:54:28 +00:00

thread_unsubscribe.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_interrupt.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_start_zsh_fork.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_start.rs

Attribute command executions to trusted plugin scripts (#35020)

2026-07-23 22:31:53 +00:00

turn_steer.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

web_search.rs

Allow custom providers to opt into standalone web search (#34846)

2026-07-23 00:02:15 +00:00

windows_sandbox_setup.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00