openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-04 15:08:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
7e0dce91dfdaa031e0036fa33bcb994a8043d5a8
codex/codex-rs
History
felixxia-oai 7e0dce91df [codex] Centralize plugin auth capability filtering (#27902) 
## Summary

This is the first step in making plugin auth routing consistent. The
rule should not live as one-off checks in every place that loads or
displays plugin capabilities.

This PR introduces a small resolver for the auth-level policy: given a
plugin's declared apps, MCP servers, current auth mode, and active
state, return the capabilities that are actually usable in that context.

## Why

Product rule:
- SiWC auth can use app connectors, so app declarations stay available.
- API-key/direct auth cannot use app connectors, so app declarations are
removed.
- When an active plugin has both an app and an MCP server with the same
name, the app route wins for Codex-backed auth and the conflicting MCP
server is hidden.

Putting that rule in `capabilities.rs` gives the rest of the stack one
place to ask instead of duplicating auth checks in loader, manager,
marketplace, and details code.

## Validation

- `cargo fmt`
- `cargo test -p codex-core-plugins`
2026-06-16 00:13:27 +00:00
..
.cargo
Ignore proc-macro-error2 advisory (#26974)
2026-06-08 11:39:08 +02:00
.config
[codex] Speed up local nextest runs (#26479)
2026-06-09 12:48:04 -07:00
.github/workflows
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
agent-graph-store
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
agent-identity
Load cloud requirements for agent identity (#19708)
2026-04-28 12:35:00 -07:00
analytics
[codex-analytics] Analytics Capture to File in Debug Builds (#27093)
2026-06-15 16:32:38 -07:00
ansi-escape
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
app-server
Add realtime speech append control (#27917)
2026-06-15 16:15:58 -07:00
app-server-client
[codex] Add external agent import result accounting (#28008)
2026-06-15 13:25:42 -07:00
app-server-daemon
feat(app-server): persist remote-control desired state (#27445)
2026-06-11 21:28:52 -07:00
app-server-protocol
Add realtime speech append control (#27917)
2026-06-15 16:15:58 -07:00
app-server-test-client
Expose explicit dynamic tool namespaces in thread start (#27371)
2026-06-15 15:35:57 +00:00
app-server-transport
feat(app-server): enforce managed remote control disable (#27961)
2026-06-12 20:10:12 -07:00
apply-patch
[codex] make PathUri::from_abs_path infallible (#27976)
2026-06-12 16:58:42 -07:00
arg0
Add hidden Windows sandbox wrapper entrypoint (#28358)
2026-06-15 21:30:32 +00:00
async-utils
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
aws-auth
feat: enable AWS login credentials for Bedrock auth (#21623)
2026-05-08 04:07:59 +00:00
backend-client
feat(app-server): expose rate-limit reset credits (#28143)
2026-06-15 21:54:01 +00:00
bwrap
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
chatgpt
[codex] Preserve plugin apps in connector listings (#27602)
2026-06-15 13:50:08 +01:00
cli
Add hidden Windows sandbox wrapper entrypoint (#28358)
2026-06-15 21:30:32 +00:00
cloud-config
feat: use encrypted local secrets for CLI auth (#27539)
2026-06-12 21:23:50 +00:00
cloud-tasks
feat: use encrypted local secrets for CLI auth (#27539)
2026-06-12 21:23:50 +00:00
cloud-tasks-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
cloud-tasks-mock-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
code-mode
[code-mode] Reject remote image URLs from output helpers (#27732)
2026-06-12 02:49:17 -07:00
code-mode-host
code-mode standalone: extract protocol and add host crate (#27724)
2026-06-11 22:37:26 -07:00
code-mode-protocol
[code-mode] Reject remote image URLs from output helpers (#27732)
2026-06-12 02:49:17 -07:00
codex-api
[codex] Fix missing response item metadata in tests (#28415)
2026-06-16 00:08:39 +00:00
codex-backend-openapi-models
feat: show enterprise monthly credit limits in status (#24812)
2026-06-01 21:25:42 -07:00
codex-client
reuse encoded Responses request bodies (#28327)
2026-06-15 19:11:26 +02:00
codex-experimental-api-macros
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
codex-home
[codex] Load user instructions through an injected provider (#27101)
2026-06-11 19:28:47 +00:00
codex-mcp
[mcp] Increase default tool timeout to 300 seconds (#28234)
2026-06-15 16:07:01 -04:00
collaboration-mode-templates
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
config
feat(app-server): enforce managed remote control disable (#27961)
2026-06-12 20:10:12 -07:00
connectors
[codex] Reuse Apps policy evaluation across MCP tool exposure (#27813)
2026-06-15 15:24:33 -07:00
context-fragments
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
core
[codex] Fix missing response item metadata in tests (#28415)
2026-06-16 00:08:39 +00:00
core-api
exec-server: add Noise relay transport (#26242)
2026-06-15 16:39:41 -07:00
core-plugins
[codex] Centralize plugin auth capability filtering (#27902)
2026-06-16 00:13:27 +00:00
core-skills
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
docs
protocol: remove submission-side serde from Op (#26674)
2026-06-05 15:41:13 -07:00
exec
feat(app-server): filter threads by parent (#26662)
2026-06-14 00:14:26 -07:00
exec-server
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
execpolicy
deps: update starlark to 0.14.2 (#24820)
2026-06-07 17:35:33 -07:00
execpolicy-legacy
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
ext
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
external-agent-migration
external-agent-migration: avoid mixed MCP transport configs (#26435)
2026-06-04 14:16:03 -04:00
external-agent-sessions
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
features
Remove terminal resize reflow flag gates (#27794)
2026-06-15 08:23:02 -07:00
feedback
Attach Windows sandbox log to feedback reports (#24623)
2026-05-26 15:59:25 -07:00
file-search
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
file-system
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
file-watcher
Fix fs/watch debounce batching (#24716)
2026-05-28 23:09:55 -07:00
git-utils
[codex] make PathUri::from_abs_path infallible (#27976)
2026-06-12 16:58:42 -07:00
hooks
Respect blocking PostToolUse hooks in code mode (#28365)
2026-06-15 15:12:26 -07:00
install-context
cli: add package path from install context (#26189)
2026-06-03 19:08:19 -07:00
keyring-store
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
linux-sandbox
[codex] Allow socketpair in proxy-routed Linux sandbox (#26625)
2026-06-05 09:34:36 -07:00
lmstudio
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
login
Support staging OAuth client ID overrides (#28257)
2026-06-15 10:56:53 -07:00
mcp-server
[codex] Load user instructions through an injected provider (#27101)
2026-06-11 19:28:47 +00:00
memories
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
message-history
Optimize unbounded byte scans with memchr (#26265)
2026-06-04 09:53:08 -04:00
model-provider
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
model-provider-info
[codex-rs] support v2 personal access tokens (#25731)
2026-06-05 17:36:18 -07:00
models-manager
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
network-proxy
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
ollama
Optimize unbounded byte scans with memchr (#26265)
2026-06-04 09:53:08 -04:00
otel
[codex] Add second-based OTEL duration histograms (#27058)
2026-06-15 17:10:52 -07:00
plugin
Discover stdio MCP servers from selected executor plugins (#27870)
2026-06-15 11:52:05 +02:00
process-hardening
fix(process-hardening): preserve macos malloc diagnostics (#24479)
2026-05-25 17:26:10 -03:00
prompts
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
protocol
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
realtime-webrtc
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
response-debug-context
Add safety check notification and error handling (#19055)
2026-04-22 22:24:12 -07:00
responses-api-proxy
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
rmcp-client
[codex] Carry exec-server cwd as PathUri (#28032)
2026-06-13 20:56:42 +00:00
rollout
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
rollout-trace
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
sandboxing
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
scripts
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
secrets
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
shell-command
[codex] simplify memory read metrics (#28164)
2026-06-15 08:28:02 -07:00
shell-escalation
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
skills
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
state
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
stdio-to-uds
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
terminal-detection
feat(cli): add codex doctor diagnostics (#22336)
2026-05-13 21:23:19 +00:00
test-binary-support
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
thread-manager-sample
realtime: add AVAS architecture override (#27720)
2026-06-12 18:11:13 +00:00
thread-store
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
tools
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
tui
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
uds
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
utils
Use aws-lc-rs for rustls crypto provider (#27706)
2026-06-15 11:32:13 -07:00
v8-poc
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
vendor
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
windows-sandbox-rs
Add hidden Windows sandbox wrapper entrypoint (#28358)
2026-06-15 21:30:32 +00:00
.gitignore
…
BUILD.bazel
Remove js_repl feature (#19410)
2026-04-24 17:49:29 -07:00
Cargo.lock
Use PathUri in filesystem permission paths for exec-server (#28165)
2026-06-15 23:55:23 +00:00
Cargo.toml
exec-server: add Noise relay transport (#26242)
2026-06-15 16:39:41 -07:00
clippy.toml
chore: document intentional await-holding cases (#18423)
2026-04-20 22:41:54 -07:00
config.md
…
default.nix
fix(nix): include libcap dependency on linux builds (#12415)
2026-02-20 19:32:15 -08:00
deny.toml
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
README.md
Simplify Codex CLI README (#26313)
2026-06-04 09:16:03 -07:00
rust-toolchain.toml
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink