mirror of
https://github.com/openai/codex.git
synced 2026-10-24 18:18:41 +00:00
sayan-oai
fde2156057
## What changed - Add environment-provided MCP restrictions for configured and plugin-provided servers. - Disable attachment-scoped servers while their environment configuration is pending, failed, or unselected, while preserving selected-plugin access and the controller-owned Apps server. - Apply the resolved policy to runtime startup, model tool exposure, telemetry, OAuth flows, and skill dependency installation. ## Testing - Cover policy filtering for configured and plugin servers, environment state transitions, Apps ownership, and managed OAuth rejection. GitOrigin-RevId: 7ca5d4dda14068e758497f88835d5cba685e159e
50 lines
1.7 KiB
Rust
50 lines
1.7 KiB
Rust
use super::*;
|
|
use codex_config::McpServerTransportConfig;
|
|
use codex_core::config::ConfigBuilder;
|
|
use codex_extension_api::ExtensionData;
|
|
use codex_extension_api::ExtensionDataInit;
|
|
use pretty_assertions::assert_eq;
|
|
|
|
#[tokio::test]
|
|
async fn hosted_plugin_runtime_forwards_thread_originator() -> Result<(), Box<dyn std::error::Error>>
|
|
{
|
|
let codex_home = tempfile::tempdir()?;
|
|
let config = ConfigBuilder::default()
|
|
.codex_home(codex_home.path().to_path_buf())
|
|
.fallback_cwd(Some(codex_home.path().to_path_buf()))
|
|
.cli_overrides(vec![
|
|
("features.apps".to_string(), true.into()),
|
|
("chatgpt_base_url".to_string(), "https://chatgpt.com".into()),
|
|
])
|
|
.build()
|
|
.await?;
|
|
let thread_init = ExtensionDataInit::new();
|
|
let thread_store = ExtensionData::new("thread");
|
|
|
|
let contributions = HostedPluginRuntimeExtension
|
|
.contribute(McpServerContributionContext::for_step(
|
|
&config,
|
|
&thread_init,
|
|
&thread_store,
|
|
"codex_work_desktop",
|
|
/*ready_selected_capability_roots*/ &[],
|
|
/*executor_capability_discovery*/ None,
|
|
))
|
|
.await;
|
|
let [McpServerContribution::HostedApps { config: server }] = contributions.as_slice() else {
|
|
panic!("hosted plugin runtime should contribute one server");
|
|
};
|
|
let McpServerTransportConfig::StreamableHttp { http_headers, .. } = &server.transport else {
|
|
panic!("hosted plugin runtime should use streamable HTTP");
|
|
};
|
|
|
|
assert_eq!(
|
|
http_headers
|
|
.as_ref()
|
|
.and_then(|headers| headers.get("originator")),
|
|
Some(&"codex_work_desktop".to_string())
|
|
);
|
|
|
|
Ok(())
|
|
}
|