xl-openai 67b805fc11 [codex] Validate plugin skill base names (#25782) ...

## Summary

- Validate skill base name length before plugin namespacing.
- Bound the composed `plugin:skill` qualified name to 128 characters.
- Keep plugin skill runtime names in the existing `plugin:skill` form.
- Add regression tests for the max qualified-name boundary and rejection
path.

## Root Cause

Plugin skills are represented as `plugin_name:skill_name`, but the
loader previously applied the 64-character skill name limit after adding
the plugin namespace. Moving that check to the base name fixes valid
plugin skills with longer namespaces, and the separate 128-character
qualified-name limit keeps model-visible skill names bounded.

## Validation

- `just fmt`
- `just test -p codex-core-skills plugin_skill_name_length_limit`
- `git diff --check`

67b805fc11 · 2026-06-02 06:33:02 +00:00

History

..

src

[codex] Validate plugin skill base names (#25782)

2026-06-02 06:33:02 +00:00

BUILD.bazel

Extract codex-core-skills crate (#15749)

2026-03-25 12:57:42 -07:00

Cargo.toml

refactor: route Codex auth through AuthProvider (#18811)

2026-04-23 17:14:02 -07:00