mirror of
https://github.com/openai/codex.git
synced 2026-09-04 15:08:45 +00:00
## Why Executor plugin manifests are unsigned, so cleanup hooks must remain limited to explicitly trusted plugin identities and MCP targets. ## What changed - Allow the bundled Browser, Chrome, Chrome Dev, and Chrome Internal plugins to run the existing `Stop` hook for `node_repl.turn_ended`. - Continue allowing the bundled Computer Use plugin and rejecting unlisted or lookalike marketplace identities. ## Testing - Extend manifest-filtering coverage for unlisted bundled plugins and marketplace name variants. GitOrigin-RevId: 1ad5d679a1530994df5a9628c2117ce509fec9ad