codex

mirror of https://github.com/openai/codex.git synced 2026-11-10 21:00:47 +00:00

Files

T

jacobzhou-oai 56b82e676c Enforce Agent Plugin runtime boundaries (#37027 )

## What changed

- Track Agent Plugin manifests through plugin, skill, and MCP loading so their capabilities use format-specific behavior without changing legacy plugins.
- Discover only direct-child skills, exclude app and hook capabilities, isolate MCP data, and reject MCP configuration files that are non-regular or resolve outside the plugin root.
- Bound model-visible skill instructions, plugin instructions, MCP descriptions, schemas, individual tools, and the aggregate Agent Plugin MCP tool set.
- Stop MCP and OAuth redirects when Agent Plugins send configured or authorization headers, while retaining existing redirect behavior for legacy MCP servers.

## Testing

- Add coverage for capability filtering, skill discovery, isolated MCP data and reserved-path expansion, unsafe MCP configuration files, context limits, and redirect handling.

GitOrigin-RevId: c9af66b051269f3226628ca280a58d32c808c38f

2026-08-05 04:54:33 +00:00

app

Enforce Agent Plugin runtime boundaries (#37027 )

2026-08-05 04:54:33 +00:00

app_server_session

Harden paginated history handling in the TUI (#36951 )

2026-08-04 19:18:03 +00:00

bin

…

bottom_pane

Enforce Agent Plugin runtime boundaries (#37027 )

2026-08-05 04:54:33 +00:00

chatwidget

Enforce Agent Plugin runtime boundaries (#37027 )

2026-08-05 04:54:33 +00:00

exec_cell

Keep streamed command output bounded in the TUI (#34359 )

2026-07-20 14:44:25 +00:00

external_agent_config_migration

Avoid querying terminal size on every TUI redraw (#36482 )

2026-08-01 14:33:12 +00:00

history_cell

Distinguish unknown MCP authentication status (#36045 )

2026-07-29 23:24:43 +00:00

ide_context

Prefer the Codex home socket for Unix IDE context (#32302 )

2026-07-11 01:15:48 +00:00

inline_visualization

Render inline visualization links in the TUI (#33925 )

2026-07-17 23:19:12 +00:00

keymap

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap_setup

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

markdown_render

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

notifications

…

onboarding

Prompt before trusting local project directories (#36960 )

2026-08-04 19:48:21 +00:00

pets

Route pet asset downloads through the shared HTTP client (#36008 )

2026-07-29 18:40:38 +00:00

public_widgets

…

render

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

resume_picker

Load local session pickers from the state DB first (#36378 )

2026-07-31 18:58:32 +00:00

snapshots

Paginate TUI transcript history (#36950 )

2026-08-04 19:12:46 +00:00

status

Support Enterprise automation account plans (#36228 )

2026-07-30 21:49:53 +00:00

streaming

Track inline visualization directives during streaming (#34346 )

2026-07-20 13:50:06 +00:00

tui

Avoid requesting key-release events in Ghostty (#36834 )

2026-08-04 03:49:53 +00:00

additional_dirs.rs

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

app_backtrack.rs

Paginate TUI transcript history (#36950 )

2026-08-04 19:12:46 +00:00

app_command.rs

Remove the unused TUI shutdown app command (#34553 )

2026-07-21 14:25:18 +00:00

app_event_sender.rs

Keep interrupted prompts in conversation history (#33198 )

2026-07-15 01:07:29 +00:00

app_event.rs

Harden paginated history handling in the TUI (#36951 )

2026-08-04 19:18:03 +00:00

app_info.rs

Remove first-party type from app metadata (#34844 )

2026-07-22 23:45:45 +00:00

app_server_approval_conversions.rs

Use ApiPathString in app-server filesystem permission paths (#28367 )

2026-06-15 19:25:54 -07:00

app_server_session.rs

Harden paginated history handling in the TUI (#36951 )

2026-08-04 19:18:03 +00:00

app.rs

Harden paginated history handling in the TUI (#36951 )

2026-08-04 19:18:03 +00:00

approval_events.rs

Scope command approvals by execution environment (#28738 )

2026-06-17 19:52:43 +02:00

ascii_animation.rs

…

auto_review_denials.rs

Preserve plugin attribution across command approvals (#35029 )

2026-07-23 23:13:59 +00:00

branch_summary.rs

Reject implicitly discovered bare Git repositories (#36924 )

2026-08-04 16:53:33 +00:00

chatwidget.rs

Paginate transcript history in the TUI (#36948 )

2026-08-04 18:59:32 +00:00

cli.rs

Add process-scoped PSP routing for ChatGPT requests (#36986 )

2026-08-04 22:23:40 +00:00

clipboard_copy.rs

…

clipboard_paste.rs

Allow paste in searchable selection menus (#25400 )

2026-06-01 18:01:52 +02:00

collaboration_modes.rs

…

color.rs

…

config_update_tests.rs

Surface TUI config write error causes (#26537 )

2026-06-05 08:32:07 -07:00

config_update.rs

Surface TUI config write error causes (#26537 )

2026-06-05 08:32:07 -07:00

custom_terminal.rs

Avoid querying terminal size on every TUI redraw (#36482 )

2026-08-01 14:33:12 +00:00

cwd_prompt.rs

Avoid querying terminal size on every TUI redraw (#36482 )

2026-08-01 14:33:12 +00:00

debug_config.rs

Clarify config layer iteration APIs (#36774 )

2026-08-03 17:29:42 +00:00

diff_model.rs

…

diff_render.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

exec_command.rs

…

external_editor.rs

…

file_search.rs

…

frames.rs

…

get_git_diff.rs

Reject implicitly discovered bare Git repositories (#36924 )

2026-08-04 16:53:33 +00:00

git_action_directives.rs

Render code comment directives in TUI replay (#26554 )

2026-06-05 08:34:34 -07:00

goal_display.rs

Show blocked goals as stalled in the TUI (#35886 )

2026-07-29 03:50:00 +00:00

goal_files.rs

[3 of 3] Support images in TUI goals (#27510 )

2026-06-12 17:14:27 -07:00

hooks_rpc.rs

…

ide_context.rs

…

inline_visualization_tests.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

inline_visualization.rs

Render streamed Markdown incrementally (#34045 )

2026-07-18 18:00:51 +00:00

insert_history.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

key_hint.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap_setup.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

lib.rs

Add process-scoped PSP routing for ChatGPT requests (#36986 )

2026-08-04 22:23:40 +00:00

line_truncation_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

line_truncation.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

live_wrap.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

local_chatgpt_auth.rs

auth: move domain mode below app wire types (#29721 )

2026-06-24 03:10:20 +00:00

main.rs

Add process-scoped PSP routing for ChatGPT requests (#36986 )

2026-08-04 22:23:40 +00:00

managed_new_thread_defaults_tests.rs

[codex] Use managed defaults for TUI threads (#30147 )

2026-06-26 19:27:31 +00:00

managed_new_thread_defaults.rs

[codex] Use managed defaults for TUI threads (#30147 )

2026-06-26 19:27:31 +00:00

markdown_render_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

markdown_render.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

markdown_stream.rs

Use the Markdown collector as the streaming source of truth (#34197 )

2026-07-19 16:50:54 +00:00

markdown_text_merge.rs

fix(tui): linkify complete bare URLs with tildes (#27088 )

2026-06-08 17:02:36 -07:00

markdown.rs

Render streamed Markdown incrementally (#34045 )

2026-07-18 18:00:51 +00:00

mention_codec.rs

Improve composer completion target resolution (#32628 )

2026-07-12 19:18:37 +00:00

model_catalog.rs

…

model_migration.rs

Avoid querying terminal size on every TUI redraw (#36482 )

2026-08-01 14:33:12 +00:00

motion.rs

…

multi_agents.rs

Preserve sub-agent liveness in the agent picker (#33921 )

2026-07-17 23:07:40 +00:00

npm_registry.rs

…

oss_selection.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

pager_overlay.rs

Paginate TUI transcript history (#36950 )

2026-08-04 19:12:46 +00:00

permission_compat.rs

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

resize_reflow_cap.rs

…

resume_picker.rs

Improve paginated TUI history loading (#36949 )

2026-08-04 19:05:45 +00:00

selection_list.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

service_tier_resolution.rs

Honor client-resolved service tier defaults (#23537 )

2026-05-20 15:57:50 -07:00

session_archive_commands_tests.rs

Prefer SQLite names for local session archive commands (#36808 )

2026-08-03 23:05:35 +00:00

session_archive_commands.rs

Add process-scoped PSP routing for ChatGPT requests (#36986 )

2026-08-04 22:23:40 +00:00

session_log.rs

Allow naming sessions with /new and /clear (#34605 )

2026-07-21 20:13:08 +00:00

session_resume.rs

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

session_state.rs

core: load AGENTS.md from foreign environments (#28958 )

2026-06-18 15:06:23 -07:00

shimmer.rs

…

skills_helpers.rs

Use app-server skill metadata directly in the TUI (#34368 )

2026-07-20 15:44:37 +00:00

slash_command.rs

Allow naming forked chats from the TUI (#36036 )

2026-07-29 22:24:39 +00:00

startup_error.rs

fix: Auto-recover from corrupted sqlite databases (#26859 )

2026-06-10 11:24:29 -07:00

startup_hooks_review.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

status_indicator_widget.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

style.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

table_detect.rs

…

terminal_hyperlinks.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

terminal_palette.rs

Preserve TUI input when terminal focus returns (#35649 )

2026-07-27 17:59:06 +00:00

terminal_probe.rs

fix(tui): restore TUI after suspend (#28342 )

2026-06-16 09:09:24 -07:00

terminal_title.rs

…

terminal_visualization_instructions.rs

[codex] Gate terminal visualization instructions in TUI (#26013 )

2026-06-05 17:23:45 -07:00

test_backend.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

test_support.rs

Remove TUI legacy core test_support dependencies (#27484 )

2026-06-10 17:55:49 -07:00

text_formatting.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

theme_picker.rs

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

thread_transcript.rs

Improve paginated TUI history loading (#36949 )

2026-08-04 19:05:45 +00:00

token_usage.rs

…

tooltips.rs

Use the shared HTTP client for announcement tips (#35825 )

2026-07-28 20:12:13 +00:00

transcript_reflow.rs

Improve paginated TUI history loading (#36949 )

2026-08-04 19:05:45 +00:00

tui.rs

Avoid querying terminal size on every TUI redraw (#36482 )

2026-08-01 14:33:12 +00:00

ui_consts.rs

[tui] Truncate hook context in conversation history (#31252 )

2026-07-06 16:33:13 -04:00

update_action.rs

Detect Codex installs managed by pnpm (#31503 )

2026-07-08 12:17:58 -04:00

update_prompt.rs

Avoid querying terminal size on every TUI redraw (#36482 )

2026-08-01 14:33:12 +00:00

update_versions.rs

…

updates_cache_tests.rs

Persist update dismissal without cache (#27783 )

2026-06-12 09:26:08 -07:00

updates_cache.rs

Persist update dismissal without cache (#27783 )

2026-06-12 09:26:08 -07:00

updates.rs

Use the shared HTTP client for TUI network checks (#35821 )

2026-07-28 19:58:25 +00:00

version.rs

…

width.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

windows_sandbox.rs

Remove TUI legacy Windows sandbox dependency (#27490 )

2026-06-11 09:23:08 -07:00

workspace_command.rs

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

workspace_messages_tests.rs

Add workspace messages app-server API (#29001 )

2026-06-22 04:25:07 -07:00

workspace_messages.rs

Add workspace messages app-server API (#29001 )

2026-06-22 04:25:07 -07:00

wrapping.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00