mirror of
https://github.com/openai/codex.git
synced 2026-09-08 15:50:34 +00:00
## What changed - Add a bounded developer context fragment identifying the MCP server or connector and the user-owned configuration that declared it. - Emit the fragment only when the effective entry matches the user configuration or an active plugin declaration resolves inside the Codex home directory. - Keep tool descriptions, outputs, and unrelated tools untrusted, and reject unsupported sources or paths that escape through symlinks. ## Testing - Cover user-configured servers and connectors, plugin-provided capabilities, token truncation, symlink escapes, and app-server request integration. GitOrigin-RevId: 0bfe2a2f3a48334d1d5faad692b5d36452febb68