xl-openai 044c1420a1 [codex] Limit app-based plugin suggestions to remote catalogs (#27988) ...

## Summary

- Keep local plugin suggestions bounded to fallback and explicitly
configured plugins.
- Preserve app-overlap recommendations for remote plugins using cached
catalog metadata.
- Remove the WSL-specific local discovery exception and move
manager-owned discovery tests into `codex-core-plugins`.

## Why

Local curated marketplaces were allowlisted before plugin detail
loading, so every uninstalled candidate could be deep-read before its
app IDs were checked. That caused per-turn reads of candidate plugin
manifests, skills, app configs, hooks, and MCP configs, which is
especially expensive on slow disks.

Remote discovery does not need those local candidate reads because app
IDs are already available in the cached remote catalog. Installed local
plugins are still loaded when needed to determine the user's installed
app IDs.

## Validation

- `just fmt`
- `just test -p codex-core-plugins discoverable::tests` (13 passed)
- `just test -p codex-core plugins::discoverable::tests` (4 passed)
- `just bazel-lock-update`
- `just bazel-lock-check`
- `git diff --check`

044c1420a1 · 2026-06-12 17:51:09 -07:00

History

..

src

[codex] Limit app-based plugin suggestions to remote catalogs (#27988)

2026-06-12 17:51:09 -07:00

BUILD.bazel

Extract plugin loading and marketplace logic into codex-core-plugins (#18070)

2026-04-15 23:13:17 -07:00

Cargo.toml

[codex] Limit app-based plugin suggestions to remote catalogs (#27988)

2026-06-12 17:51:09 -07:00