Matthew Zeng b9858217d8 Support app settings in plugin configuration (#58428) ...

## What changed

Allow connector-wide app settings under `plugins.<plugin>.apps.<connector>` for plugins enabled by configuration. Merge these settings field by field, giving earlier plugin names precedence and applying explicit top-level `apps` fields last. Ignore nested `_default` settings.

Expose the merged app settings and their field origins through the config API. Keep app policy changes from invalidating the loaded-plugin cache.

## Testing

Add coverage for plugin enablement, merge precedence, field origins, config API output, cache reuse, and disabling an app through plugin configuration during explicit plugin mentions.

GitOrigin-RevId: a275319815915dc618ee606b10e0844248dbccb5

2026-10-30 20:39:47 +00:00

..

loader

Centralize TOML config deserialization (#58198)

2026-10-30 00:36:00 +00:00

requirements_layers

Support managed network requirements under permissions.network (#58182)

2026-10-29 22:36:06 +00:00

thread_config

Allow providers to opt into Cyber access programs (#58190)

2026-10-29 23:24:52 +00:00

application_requirements_tests.rs

Add managed Desktop workspace storage requirements (#55965)

2026-10-21 19:06:57 +00:00

application_requirements.rs

Add managed Desktop workspace storage requirements (#55965)

2026-10-21 19:06:57 +00:00

application_storage_requirements_tests.rs

Add managed Desktop workspace storage requirements (#55965)

2026-10-21 19:06:57 +00:00

application_storage_requirements.rs

Add managed Desktop workspace storage requirements (#55965)

2026-10-21 19:06:57 +00:00

auth_policy.rs

…

bedrock_runtime_tests.rs

Add AWS credential export commands for Amazon Bedrock (#44028)

2026-09-09 03:17:48 +00:00

browser_computer_use_requirements_tests.rs

Add browser extension request headers to config requirements (#51194)

2026-10-05 22:52:14 +00:00

browser_computer_use_requirements.rs

Add browser extension request headers to config requirements (#51194)

2026-10-05 22:52:14 +00:00

browser_use_tests.rs

…

browser_use.rs

…

cloud_config_bundle_tests.rs

Enforce Fast and Ultra Fast policies independently (#51253)

2026-10-06 03:35:55 +00:00

cloud_config_bundle.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

cloud_config_layers_tests.rs

…

cloud_config_layers.rs

…

codex_home_symlink.rs

…

computer_use_tests.rs

…

computer_use.rs

…

config_layer_source.rs

…

config_requirements.rs

Support managed network requirements under permissions.network (#58182)

2026-10-29 22:36:06 +00:00

config_server.rs

Add managed configuration loaders for custom config servers (#56314)

2026-10-23 00:54:06 +00:00

config_toml.rs

Centralize TOML config deserialization (#58198)

2026-10-30 00:36:00 +00:00

constraint.rs

…

diagnostics.rs

…

filesystem_constraints.rs

Resolve filesystem denials with explicit path context (#44669)

2026-09-10 23:08:23 +00:00

fingerprint_tests.rs

Simplify configuration fingerprint canonicalization (#49295)

2026-09-29 16:10:27 +00:00

fingerprint.rs

Simplify configuration fingerprint canonicalization (#49295)

2026-09-29 16:10:27 +00:00

guardian_tests.rs

Centralize Guardian policy resolution in config and protocol (#45957)

2026-09-16 14:56:47 +00:00

guardian.rs

Centralize Guardian policy resolution in config and protocol (#45957)

2026-09-16 14:56:47 +00:00

hook_config.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

hooks_tests.rs

Add observation-only model request lifecycle hooks (#55144)

2026-10-18 22:43:56 +00:00

host_name.rs

…

in_app_browser_requirements_tests.rs

…

in_app_browser_requirements.rs

…

key_aliases.rs

Skip unrelated subtrees during config alias normalization (#50354)

2026-10-02 16:37:30 +00:00

lib.rs

Support managed OpenTelemetry configuration requirements (#57649)

2026-10-28 05:11:45 +00:00

marketplace_edit.rs

…

mcp_edit.rs

…

mcp_ema_cancellation.rs

Preserve enterprise MCP authorization across runtime refreshes (#55696)

2026-10-20 23:03:56 +00:00

mcp_ema_tests.rs

Support confidential OAuth clients for enterprise-managed MCP auth (#56001)

2026-10-21 22:30:35 +00:00

mcp_ema.rs

Support confidential OAuth clients for enterprise-managed MCP auth (#56001)

2026-10-21 22:30:35 +00:00

mcp_requirements_tests.rs

Make MCP and Code Mode input schema budgets configurable (#47936)

2026-09-24 20:39:37 +00:00

mcp_requirements.rs

…

mcp_types_tests.rs

Make MCP and Code Mode input schema budgets configurable (#47936)

2026-09-24 20:39:37 +00:00

mcp_types.rs

Preserve MCP disable reasons across runtime overlays (#56266)

2026-10-22 21:11:21 +00:00

merge_tests.rs

Add runtime assertion authentication modes and an auth provider (#55636)

2026-10-20 17:29:40 +00:00

merge.rs

Add runtime assertion authentication modes and an auth provider (#55636)

2026-10-20 17:29:40 +00:00

model_provider_defaults.rs

Allow configuring GCP project and location in provider settings (#56560)

2026-10-23 18:50:54 +00:00

model_provider_requirements_tests.rs

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

model_provider_requirements.rs

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

overrides.rs

…

path_context_tests.rs

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

path_context.rs

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

permissions_toml_tests.rs

Add scoped request-body secret substitution to MITM hooks (#57174)

2026-10-26 18:14:26 +00:00

permissions_toml.rs

Add scoped request-body secret substitution to MITM hooks (#57174)

2026-10-26 18:14:26 +00:00

plugin_edit.rs

…

profile_toml.rs

Defer unknown TUI config fields to the shared strict-config policy (#54766)

2026-10-17 02:27:35 +00:00

project_root_markers.rs

…

project_trust_tests.rs

Make project trust lookup paths explicit and defer root resolution (#47924)

2026-09-24 19:44:50 +00:00

project_trust.rs

Make project trust lookup paths explicit and defer root resolution (#47924)

2026-09-24 19:44:50 +00:00

requirements_exec_policy.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

schema.rs

Add Guardian V3 feature configuration (#56459)

2026-10-23 12:16:36 +00:00

shell_environment_policy_tests.rs

…

shell_environment_policy.rs

…

skills_config_tests.rs

Use PathUri for skill identity and path matching (#51482)

2026-10-06 21:29:35 +00:00

skills_config.rs

Use PathUri for skill identity and path matching (#51482)

2026-10-06 21:29:35 +00:00

state_tests.rs

Handle credential provider source remapping across config layers (#44241)

2026-09-09 17:45:17 +00:00

state.rs

Support managed network requirements under permissions.network (#58182)

2026-10-29 22:36:06 +00:00

strict_config_tests.rs

Support managed network requirements under permissions.network (#58182)

2026-10-29 22:36:06 +00:00

strict_config.rs

Centralize TOML config deserialization (#58198)

2026-10-30 00:36:00 +00:00

test_support_tests.rs

…

test_support.rs

…

thread_config.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

tui_effects.rs

Add independent controls for TUI visual effects (#46832)

2026-09-20 16:16:46 +00:00

tui_keymap_chord_tests.rs

Preserve validation errors for invalid TUI keybindings (#49910)

2026-10-01 06:59:13 +00:00

tui_keymap.rs

Wire keyboard selection into transcript overlays (#57223)

2026-10-26 20:09:54 +00:00

tui_mouse_scroll.rs

Make transcript mouse scroll speed configurable (#50209)

2026-10-02 06:50:10 +00:00

tui_rendering.rs

Render TUI Markdown lists with Unicode bullets and checkboxes (#47322)

2026-09-22 16:34:07 +00:00

types_tests.rs

Add remote plugin metadata to plugin configuration (#54424)

2026-10-15 21:44:12 +00:00

types.rs

Support app settings in plugin configuration (#58428)

2026-10-30 20:39:47 +00:00