jacobzhou-oai 56b82e676c Enforce Agent Plugin runtime boundaries (#37027) ...

## What changed

- Track Agent Plugin manifests through plugin, skill, and MCP loading so their capabilities use format-specific behavior without changing legacy plugins.
- Discover only direct-child skills, exclude app and hook capabilities, isolate MCP data, and reject MCP configuration files that are non-regular or resolve outside the plugin root.
- Bound model-visible skill instructions, plugin instructions, MCP descriptions, schemas, individual tools, and the aggregate Agent Plugin MCP tool set.
- Stop MCP and OAuth redirects when Agent Plugins send configured or authorization headers, while retaining existing redirect behavior for legacy MCP servers.

## Testing

- Add coverage for capability filtering, skill discovery, isolated MCP data and reserved-path expansion, unsafe MCP configuration files, context limits, and redirect handling.

GitOrigin-RevId: c9af66b051269f3226628ca280a58d32c808c38f

2026-08-05 04:54:33 +00:00

..

bin

Route exec-server HTTP through configured proxy policy (#35023)

2026-07-23 22:39:28 +00:00

external_agent_migration

Improve connector detection for migrated sessions (#36977)

2026-08-04 21:45:28 +00:00

request_processors

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

app_server_tracing.rs

Reduce app-server JSON serialization overhead (#34761)

2026-07-22 14:16:51 +00:00

attestation.rs

fix(app-server): speed up shutdown (#23578)

2026-05-20 17:30:19 +00:00

auth_mode.rs

[codex] Add externally provided Codex auth (#31274)

2026-07-07 17:43:19 -07:00

bespoke_event_handling.rs

Redact secrets from app-server command execution items (#36893)

2026-08-04 13:16:58 +00:00

code_mode_host_tests.rs

Support remote code-mode hosts in app-server (#35098)

2026-07-24 04:37:01 +00:00

code_mode_host.rs

Support remote code-mode hosts in app-server (#35098)

2026-07-24 04:37:01 +00:00

command_exec.rs

Reduce response serialization and rollout scan overhead (#36006)

2026-07-29 18:29:26 +00:00

config_layer.rs

config: own layer provenance types (#29722)

2026-06-24 04:03:04 +00:00

config_manager_service_tests.rs

Add process-scoped PSP routing for ChatGPT requests (#36986)

2026-08-04 22:23:40 +00:00

config_manager_service.rs

Clarify config layer iteration APIs (#36774)

2026-08-03 17:29:42 +00:00

config_manager.rs

Add process-scoped PSP routing for ChatGPT requests (#36986)

2026-08-04 22:23:40 +00:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

effective_plugin_change_tests.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

effective_plugin_change.rs

Refresh MCP runtimes across thread startup (#35204)

2026-07-24 15:06:02 +00:00

error_code.rs

feat(app-server, threadstore): Thread pagination APIs and ThreadStore contract (#21566)

2026-05-07 15:44:43 -07:00

extensions.rs

Route extension warnings to app-server threads (#35168)

2026-07-24 12:28:29 +00:00

external_auth.rs

refactor: unify external auth resolution (#31421)

2026-07-07 17:05:05 -07:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process.rs

Add process-scoped PSP routing for ChatGPT requests (#36986)

2026-08-04 22:23:40 +00:00

lib.rs

Add process-scoped PSP routing for ChatGPT requests (#36986)

2026-08-04 22:23:40 +00:00

main_tests.rs

Add process-scoped PSP routing for ChatGPT requests (#36986)

2026-08-04 22:23:40 +00:00

main.rs

Add process-scoped PSP routing for ChatGPT requests (#36986)

2026-08-04 22:23:40 +00:00

mcp_refresh.rs

Refresh MCP config independently across threads (#35216)

2026-07-24 16:53:11 +00:00

message_processor_tracing_tests.rs

Increase the app-server tracing test stack size (#36030)

2026-07-29 21:21:15 +00:00

message_processor.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

models_refresh_worker_tests.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models_refresh_worker.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

outgoing_message.rs

Expose onboarding hints in login completion notifications (#36635)

2026-08-02 21:01:04 +00:00

request_processors.rs

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

request_serialization.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

skills_watcher.rs

Move the host skills service into the skills extension (#36921)

2026-08-04 16:28:46 +00:00

thread_state.rs

Route extension warnings to app-server threads (#35168)

2026-07-24 12:28:29 +00:00

thread_status.rs

Report direct input capability for listed subagents (#35944)

2026-07-29 12:13:14 +00:00

transport_tests.rs

Timestamp app-server notifications at emission (#32905)

2026-07-14 00:38:04 +00:00

transport.rs

Exit the stdio app-server when its connection closes (#36035)

2026-07-29 22:00:20 +00:00