Nick Steele af0d68a236 Restrict enterprise MCP auth and fail closed on config refresh (#49260) ...

## Why

Configuration reloads must honor current managed restrictions without granting new enterprise MCP authority to existing sessions or overwriting newer configuration with stale snapshots.

## What changed

- Allow enterprise managed authentication only for configured MCP servers. Remove plugin `ema_auth` overlays from the schema and disable servers that still use them.
- Refresh ordinary MCP settings while preserving session settings and initially admitted enterprise registrations. Disable enterprise MCP when its registration changes, policy revokes access, or configuration loading or resolution fails; require a new session to restore enterprise authority.
- Publish refreshes only when their captured configuration is still current, with bounded retries in app-server reloads. Preserve updated managed restrictions even when a refresh is rejected.
- Finish processing other thread refreshes before `config/mcpServer/reload` reports a rejection, and document that an error can accompany partially applied changes.

## Testing

Add regression coverage for stale refreshes, bounded retries, managed-policy revocation, persistent enterprise disablement, ordinary MCP transport changes, and rejection of plugin enterprise authentication. Verify that denied enterprise servers receive no requests.

GitOrigin-RevId: 34429cd339c1ec152a2ee8697cb29f0cff5d9e5f

2026-09-29 13:08:37 +00:00

..

command_migration

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

manifest

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

marketplace_add

Suppress Windows console windows for background subprocesses (#49164)

2026-09-29 04:38:37 +00:00

marketplace_policy

Honor the configured product SKU in remote plugin requests (#47116)

2026-09-21 22:30:43 +00:00

marketplace_upgrade

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

remote

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

startup_sync

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

agent_plugin_manifest_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

agent_plugin_manifest.rs

Expose declared onboarding skills in plugin details (#46544)

2026-09-19 00:55:08 +00:00

agent_plugin_mcp_overlay.rs

Forward local env vars to Agent Plugin MCP servers (#40363)

2026-08-24 08:43:25 +00:00

app_mcp_routing_tests.rs

[codex] Centralize plugin auth capability filtering (#27902)

2026-06-16 00:13:27 +00:00

app_mcp_routing.rs

auth: move domain mode below app wire types (#29721)

2026-06-24 03:10:20 +00:00

artifact_operation_tests.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

artifact_operation.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

catalog.rs

Separate plugin catalog listing from package resolution (#46567)

2026-09-19 01:49:01 +00:00

command_migration_tests.rs

Migrate plugin commands into skills on install (#33411)

2026-07-15 19:51:37 +00:00

command_migration.rs

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

discoverable_tests.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

discoverable.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00

error_subtype.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

executor_hooks_tests.rs

Allow browser app cleanup hooks on interrupt (#46029)

2026-09-16 21:15:09 +00:00

executor_hooks.rs

Treat bundled cleanup hooks as built-ins (#42110)

2026-09-01 18:02:27 +00:00

executor_provider_tests.rs

Separate plugin catalog listing from package resolution (#46567)

2026-09-19 01:49:01 +00:00

executor_provider.rs

Separate plugin catalog listing from package resolution (#46567)

2026-09-19 01:49:01 +00:00

git_policy.rs

Suppress Windows console windows for background subprocesses (#49164)

2026-09-29 04:38:37 +00:00

http_client_selector.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

installed_marketplaces.rs

Honor layered configuration when loading plugins (#40954)

2026-08-26 19:02:02 +00:00

lib.rs

Separate plugin catalog listing from package resolution (#46567)

2026-09-19 01:49:01 +00:00

loaded_cache_metrics.rs

Instrument the loaded plugin cache (#41231)

2026-08-28 00:17:08 +00:00

loader_tests.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

loader.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

manager_tests.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

manager.rs

Reuse the HTTP connection pool for remote plugin requests (#49100)

2026-09-28 23:33:10 +00:00

manifest.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

marketplace_add.rs

[plugins] Enforce marketplace source admission requirements (#29753)

2026-06-23 20:13:11 -07:00

marketplace_context.rs

Honor per-repository plugin configuration in catalog requests (#41208)

2026-08-27 21:10:10 +00:00

marketplace_policy_tests.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

marketplace_policy.rs

Enforce marketplace source policy for curated plugins (#41953)

2026-09-01 01:37:15 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

marketplace_upgrade_tests.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

marketplace.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

npm_source_tests.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

npm_source.rs

Suppress Windows console windows for background subprocesses (#49164)

2026-09-29 04:38:37 +00:00

plugin_bundle_archive_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_bundle_archive.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_measurement_catalog.rs

Add authenticated remote plugin measurement references (#46542)

2026-09-19 00:53:17 +00:00

plugin_measurement_references_tests.rs

Add authenticated remote plugin measurement references (#46542)

2026-09-19 00:53:17 +00:00

plugin_measurement_references.rs

Add authenticated remote plugin measurement references (#46542)

2026-09-19 00:53:17 +00:00

plugin_metrics_sidecar_tests.rs

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

plugin_metrics_sidecar.rs

Remove private executor directory creation (#39736)

2026-08-20 16:22:45 +00:00

plugin_metrics.rs

Add manifest-defined metrics for trusted plugin scripts (#38238)

2026-08-12 19:09:48 +00:00

plugins_config_input_tests.rs

Reuse the HTTP connection pool for remote plugin requests (#49100)

2026-09-28 23:33:10 +00:00

provider.rs

Separate plugin catalog listing from package resolution (#46567)

2026-09-19 01:49:01 +00:00

recommended_plugin_install.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote_bundle.rs

Add authenticated remote plugin measurement references (#46542)

2026-09-19 00:53:17 +00:00

remote_legacy.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_metadata_cache_tests.rs

Preserve plugin caches across display metadata refreshes (#46309)

2026-09-17 21:35:44 +00:00

remote_metadata_tests.rs

Remove plugin extension metadata from discovery and summaries (#48035)

2026-09-25 08:25:37 +00:00

remote_metadata.rs

Preserve plugin caches across display metadata refreshes (#46309)

2026-09-17 21:35:44 +00:00

remote_mutations_tests.rs

Centralize remote plugin mutations in PluginsManager (#42114)

2026-09-01 18:35:00 +00:00

remote_mutations.rs

Centralize remote plugin mutations in PluginsManager (#42114)

2026-09-01 18:35:00 +00:00

remote_plugin_id_resolver.rs

Propagate remote plugin IDs to skill metadata (#35261)

2026-07-24 23:36:11 +00:00

remote_tests.rs

Remove plugin extension metadata from discovery and summaries (#48035)

2026-09-25 08:25:37 +00:00

remote.rs

Remove plugin extension metadata from discovery and summaries (#48035)

2026-09-25 08:25:37 +00:00

script_attribution_tests.rs

Bind executor plugin measurements to the trusted plugin version (#46528)

2026-09-19 00:14:07 +00:00

script_attribution.rs

Add authenticated remote plugin measurement references (#46542)

2026-09-19 00:53:17 +00:00

skill_snapshots.rs

Unify plugin skill loading with the host skill service (#37444)

2026-08-07 13:54:24 +00:00

startup_sync_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

startup_sync.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

store_tests.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

store.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

test_support.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

toggles.rs

Extract plugin loading and marketplace logic into codex-core-plugins (#18070)

2026-04-15 23:13:17 -07:00

tool_suggest_metadata.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00