codex

mirror of https://github.com/openai/codex.git synced 2026-11-05 20:10:33 +00:00

Files

T

sayan-oai 9fcaeb7335 Use MCP owner permissions for Guardian reviews and score reuse (#59489 )

## Why

An MCP server can belong to a different environment from the turn's primary environment. An early Guardian score based on the issuing context must not bypass review when the server owner's permissions differ.

## What changed

- Capture the owning environment's permissions when preparing an MCP call and retain them for server-initiated approvals tied to that still-running call.
- Use the captured permissions consistently in Guardian review prompts and permission context.
- Require a fresh synchronous review when the captured owner permissions do not match the early score's authorization.

## Testing

Extend regression coverage for MCP score reuse across environments and for follow-up approvals from a local MCP server during a remote-primary turn. Assert that reviews use the owner's denied paths and require a fresh review when permissions differ.

GitOrigin-RevId: eb5eeb1259732c57f39765c38e34148fa0787dae

2026-11-04 20:37:39 +00:00

agent

Expose and persist turn lineage across the app server (#51415 )

2026-10-06 16:56:39 +00:00

agent-message-board

Move agent message board host integration to app-server (#59162 )

2026-11-03 13:38:59 +00:00

connectors

Rename plugin MCP and app extension APIs (#46564 )

2026-09-19 01:45:51 +00:00

extension-api

Carry per-input extension data to user message completion callbacks (#59455 )