Kyle Brown 84fa68b429 Attribute command executions to trusted plugin scripts (#35020) ...

## What changed

- Resolve shell and unified-exec commands against the trusted plugin roots loaded for each turn.
- Add optional `pluginId` and safe plugin-relative `scriptPath` fields to command execution items and legacy execution events, and propagate them through app-server notifications.
- Include the attribution in command execution analytics while rejecting absolute, unsafe, and unattributed script paths.

## Testing

- Cover attribution for cached curated and remote plugin scripts from command execution through core and app-server events.
- Verify analytics serialization and unsafe-path filtering.

GitOrigin-RevId: 02fac3a233284ccfc6642fa502a95f1881dba83d

2026-07-23 22:31:53 +00:00

..

src

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

tests

Attribute command executions to trusted plugin scripts (#35020)

2026-07-23 22:31:53 +00:00

BUILD.bazel

[codex] Shard exec Bazel integration test (#19862)

2026-04-27 21:22:53 +00:00

Cargo.toml

Move cloud requirements crate to cloud config (#24621)

2026-06-01 16:43:52 -07:00