joeflorencio-openai 8a556296f0 Add cloud-managed config layer support (#24620) ...

## Summary

PR 3 of 5 in the cloud-managed config client stack.

Adds enterprise-managed cloud config as a first-class config layer
source. The layer metadata is preserved through config loading,
diagnostics, debug output, hook attribution, and app-server protocol
surfaces.

## Details

- Enterprise-managed config becomes a normal config layer source with
backend-supplied `id` and display `name` attached for provenance.
- These layers are designed to behave like non-file managed config: they
can surface syntax/type diagnostics by layer name even though there is
no physical config file.
- Relative path settings are resolved from a stored config base so
cloud-delivered config remains consistent with existing MDM-delivered
config semantics.
- Hook attribution distinguishes config-delivered hooks from
requirements-delivered hooks via `HookSource::CloudManagedConfig`.
- This remains pull-based and snapshot-oriented; the PR adds layer
identity/diagnostics, not dynamic reload behavior.

## Validation

Validated through the targeted stack checks after rebasing onto current
`main`:

- Rust crate tests for
config/hooks/cloud-config/backend-client/app-server-protocol
- Filtered `codex-core` and `codex-app-server` `cloud_config_bundle`
tests
- Python generated-file contract test
- `cargo shear --deny-warnings`
- Targeted `argument-comment-lint` for config/hooks

8a556296f0 · 2026-05-31 15:54:31 -07:00

History

..

schema/generated

Tighten hook output event schemas (#24962)

2026-05-28 15:55:40 -07:00

src

Add cloud-managed config layer support (#24620)

2026-05-31 15:54:31 -07:00

BUILD.bazel

start of hooks engine (#13276)

2026-03-10 04:11:31 +00:00

Cargo.toml

Spill large hook outputs from context (#21069)

2026-05-05 05:03:18 +00:00