feat: Use short SHA versions for curated plugin cache entries (#19095)

Curated plugin cache entries now use an 8-character SHA prefix, instead
of the full SHA, as the cache folder version number.

codex-rs/core-plugins/src/loader.rs

@@ -42,6 +42,7 @@ const DEFAULT_SKILLS_DIR_NAME: &str = "skills";
 const DEFAULT_MCP_CONFIG_FILE: &str = ".mcp.json";
 const DEFAULT_APP_CONFIG_FILE: &str = ".app.json";
 const CONFIG_TOML_FILE: &str = "config.toml";
+const CURATED_PLUGIN_CACHE_VERSION_SHA_PREFIX_LEN: usize = 8;
 
 #[derive(Clone, Copy, PartialEq, Eq)]
 enum NonCuratedCacheRefreshMode {
@@ -144,6 +145,7 @@ pub fn refresh_curated_plugin_cache(
     plugin_version: &str,
     configured_curated_plugin_ids: &[PluginId],
 ) -> Result<bool, String> {
+    let cache_plugin_version = curated_plugin_cache_version(plugin_version);
     let store = PluginStore::try_new(codex_home.to_path_buf()).map_err(|err| err.to_string())?;
     let curated_marketplace_path = AbsolutePathBuf::try_from(
         codex_home
@@ -181,7 +183,8 @@ pub fn refresh_curated_plugin_cache(
 
     let mut cache_refreshed = false;
     for plugin_id in configured_curated_plugin_ids {
-        if store.active_plugin_version(plugin_id).as_deref() == Some(plugin_version) {
+        if store.active_plugin_version(plugin_id).as_deref() == Some(cache_plugin_version.as_str())
+        {
             continue;
         }
 
@@ -195,7 +198,7 @@ pub fn refresh_curated_plugin_cache(
         };
 
         store
-            .install_with_version(source_path, plugin_id.clone(), plugin_version.to_string())
+            .install_with_version(source_path, plugin_id.clone(), cache_plugin_version.clone())
             .map_err(|err| {
                 format!(
                     "failed to refresh curated plugin cache for {}: {err}",
@@ -208,6 +211,14 @@ pub fn refresh_curated_plugin_cache(
     Ok(cache_refreshed)
 }
 
+pub fn curated_plugin_cache_version(plugin_version: &str) -> String {
+    if is_full_git_sha(plugin_version) {
+        plugin_version[..CURATED_PLUGIN_CACHE_VERSION_SHA_PREFIX_LEN].to_string()
+    } else {
+        plugin_version.to_string()
+    }
+}
+
 pub fn refresh_non_curated_plugin_cache(
     codex_home: &Path,
     additional_roots: &[AbsolutePathBuf],
@@ -328,6 +339,10 @@ fn configured_plugins_from_stack(
     configured_plugins_from_user_config_value(&user_layer.config)
 }
 
+fn is_full_git_sha(value: &str) -> bool {
+    value.len() == 40 && value.chars().all(|ch| ch.is_ascii_hexdigit())
+}
+
 fn configured_plugins_from_user_config_value(
     user_config: &toml::Value,
 ) -> HashMap<String, PluginConfig> {
@@ -1079,6 +1094,23 @@ mod tests {
         );
     }
 
+    #[test]
+    fn curated_plugin_cache_version_shortens_full_git_sha() {
+        assert_eq!(
+            curated_plugin_cache_version("0123456789abcdef0123456789abcdef01234567"),
+            "01234567"
+        );
+    }
+
+    #[test]
+    fn curated_plugin_cache_version_preserves_non_git_sha_versions() {
+        assert_eq!(
+            curated_plugin_cache_version("export-backup"),
+            "export-backup"
+        );
+        assert_eq!(curated_plugin_cache_version("0123456"), "0123456");
+    }
+
     #[test]
     fn materialize_git_subdir_uses_sparse_checkout() {
         let codex_home = tempfile::tempdir().expect("create codex home");