xl-openai 9dbdb4e2c0 [plugins] Enforce marketplace source policy at runtime (#29691) ...

## Summary

- project effective marketplace/plugin config through the enterprise
source policy so blocked installed plugins become inactive
- filter plugin list/read/discovery and CLI marketplace source/snapshot
reporting using the same policy
- enforce source admission for background marketplace cache refreshes
- continue refreshing/upgrading independent marketplaces and plugins
when one entry fails, returning per-entry errors
- include policy-projected plugin state in cache and refresh keys so
requirement changes invalidate stale results

## Stack

This is PR 2 of 2 and is based on #29690. Review the admission model and
source matcher in #29690 first; this PR contains only runtime
enforcement.

## Test plan

- `just test -p codex-core-plugins` (287 tests)
- `just test -p codex-cli
plugin_list_ignores_implicit_system_marketplace_roots_without_manifests`
- `cargo check -p codex-cli -p codex-app-server --tests`

9dbdb4e2c0 · 2026-06-27 15:22:05 -07:00

History

..

src

[plugins] Enforce marketplace source policy at runtime (#29691)

2026-06-27 15:22:05 -07:00

tests

[plugins] Enforce marketplace source policy at runtime (#29691)

2026-06-27 15:22:05 -07:00

BUILD.bazel

[codex] Move release platform rules into bazel package (#27321)

2026-06-10 19:45:29 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

app-server: structure and test JSON shutdown logs (#30314)

2026-06-26 18:19:56 -07:00