xl-openai

Add dynamic HTTP header helpers for MCP servers (#38245) ## What changed - Add `http_headers_helper` configuration for local streamable HTTP MCP servers. The configured shell command runs once per connection and returns a JSON object of headers that is cached across requests. - Apply helper headers to MCP startup and OAuth flows while restricting them to the server origin, stopping redirects, rejecting reserved or duplicate headers, and enforcing output and execution limits. - Reject helpers for remote or managed-disabled servers, use the local environment working directory, and redact helper commands from `codex mcp list` and `codex mcp get` output. ## Testing - Cover configuration validation, helper lifecycle and output parsing, origin isolation, OAuth discovery and token refresh, managed requirements, environment selection, and CLI redaction. GitOrigin-RevId: 84e0e26ce75520b0869d37c72b1678e033bd6818

Refresh MCP HTTP helper headers after authorization failures (#41400) ## What changed - Re-run the HTTP headers helper after a same-origin `POST` receives a `401` or `403`, and retry the request once when the effective headers changed. - Share refreshes across concurrent rejected requests, retain the previous headers when refresh fails, and keep the retry within the original timeout. - Allow helpers to supply `Authorization` while preserving explicit OAuth or bearer credentials, OAuth insufficient-scope challenges, and redirect safety checks. ## Testing - Cover rotating helper headers for MCP tool calls and same-origin OAuth token refreshes. - Cover concurrent rejections, failed and unchanged refreshes, retry limits, timeouts, and redirects. GitOrigin-RevId: c662edefdb1cd2876d9d02545a72d5bd6739864f

Preserve discovery paths for symlinked skills (#37144) ## Why Symlinked skills have a canonical `SKILL.md` path that can differ from the path under the configured skill root. A catalog entry that advertises the discovery path must still select the canonical skill. ## What changed - Track each loaded skill's discovery path alongside its canonical identity. - Render discovery paths in the skill catalog and accept either form for structured selections and linked skill mentions. - Preserve enabled-state checks, deduplication, and product filtering when resolving discovery paths. ## Testing Added loader, catalog, mention-resolution, and end-to-end turn coverage for skills discovered through directory symlinks. GitOrigin-RevId: bae539b766cc3782c7c121a4276c337699cbb509

Validate identifiers in plugin creator workflows (#39131) ## Why Plugin and marketplace names can flow into generated install commands, so the plugin creator must reject names outside the supported identifier syntax before using them or changing files. ## What changed - Centralize validation for plugin names, including dotted names, and marketplace names. - Apply validation when reading marketplaces, validating manifests, updating cachebusters, and scaffolding plugins. - Validate existing marketplace state before scaffold writes so invalid or duplicate entries leave plugin and marketplace files unchanged. ## Testing Add regression tests for accepted identifiers, unsafe and malformed names, dotted plugin names, and failure paths that must not modify files. GitOrigin-RevId: 9db68c2313a1539c5ab44d777966e33b460ceb71

Load cloud-managed servers in MCP CLI commands (#36031) ## What changed - Load the cloud configuration bundle before `codex mcp list`, `get`, `login`, and `logout` so those commands can resolve enterprise-managed MCP servers. - Keep `codex mcp add` and `remove` scoped to user configuration, preventing managed server definitions from being copied into or deleted from `config.toml`. ## Testing - Add CLI integration coverage for listing and inspecting a managed server, completing its OAuth login and logout flow, and preserving user configuration during add and remove operations. GitOrigin-RevId: 9b64d70535aaba11303c42e44b9ad751c8745445

Reduce skill catalog prompts with path aliases (#41011) ## Why Repeated skill locator roots can make catalog prompts larger even when the catalog fits within its metadata budget. ## What changed Evaluate aliased catalogs regardless of budget pressure and select them when they preserve skill inclusion and description content while reducing prompt size. Apply the same selection to combined host, executor, and orchestrator catalogs. ## Testing Add coverage for alias selection in full host-only catalogs and update skill, symlink, and orchestrator resource tests to expect shortened locators and their root mappings. GitOrigin-RevId: ccedd3f3f6c7efaa1e5177a2d8c3d81d59239f52

Harden skill installation against unsafe symlinks (#39608) ## What changed - Require selected skill paths to resolve within the cloned repository and reject symlinked path components. - Reject special files and symlinks that escape the selected skill or resolve to anything other than a regular file. - Add regression tests showing that escaping symlinks are rejected while links to regular files within the skill are installed as file contents. GitOrigin-RevId: d4c3f09fb630dea96b34ea5552de571b36f1ceca