mirror of
https://github.com/openai/codex.git
synced 2026-10-18 17:18:52 +00:00
Ahmed Ibrahim
58ae3ba611
## Why Third-party exposure settings can eagerly expose tool schemas or exclude tools from `exec`. Keeping eligible tools deferred lets MCP catalogs change between turns without changing the model's eager tool prefix. ## What changed Add the disabled-by-default `code_mode_only_strict_3p_tools` feature, applied only when the effective model tool mode is Code Mode Only. - Defer eligible MCP, app, and client-supplied dynamic tools while keeping them discoverable and callable through `exec`. - Override `deferLoading`, MCP/app `omit_tools_from`, and direct-only or excluded namespace settings. Log conflicts without adding prompt warnings. - Preserve disabled, app-only, policy-denied, and over-budget tool restrictions. Keep built-in tool exposure unchanged, including when a dynamic tool has the same name. ## Testing Add unit and integration coverage for exposure overrides, effective model modes, tool eligibility, and app discovery and dispatch. Add an MCP refresh scenario that verifies the eager tool prefix stays unchanged as tools are added, replaced, and removed while `exec` tracks the current catalog. GitOrigin-RevId: a6a8e401214119bb02ea4711473c8fa3ec85c81a