68dbf92281
fix(plugins): scope Codex relay with tool matchers ( #109603 )
...
* fix(plugins): scope Codex relay matchers
Co-authored-by: Masato Naka <masatonaka1989@gmail.com >
* fix(plugins): reject sparse tool hook matchers
* test(plugins): cover mixed relay matcher scopes
* fix(plugins): fail closed on invalid policy matchers
* test(plugins): prove composed relay policy scope
* fix(plugins): keep matcher scope internal
* fix(plugins): satisfy matcher static checks
* fix(plugins): enforce canonical tool hook matchers
* fix(codex): project native hook matcher aliases
* fix(plugins): scope Codex relay with tool matchers
* chore: keep release changelog maintainer-owned
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-07-30 01:39:08 +08:00
98e3f729bc
refactor: remove dead plugin loader exports ( #105937 )
...
* refactor(plugins): trim activation and contract exports
* test(plugins): restore fixture cleanup
* refactor(plugins): trim install and loader exports
* test(plugins): fully reset loader caches
* refactor(plugins): trim metadata and catalog exports
* test(plugins): preserve catalog trust coverage
* refactor(plugins): trim provider and plugin exports
* refactor(plugins): trim runtime and tool exports
* test(plugins): update dead-export consumers
* test(plugins): remove empty dead-export suites
* refactor(plugins): align exports with split registry
* refactor(plugins): trim drifted loader exports
* style(plugins): format test fixtures
* refactor(scripts): use supported plugin APIs
* refactor(plugins): finish dead export cleanup
* chore(deadcode): refresh export baseline
* test(cli): mock production memory state
* chore(deadcode): sync latest export baseline
* fix(tests): keep plugin fixtures inside core
* chore(deadcode): refresh rebased export baseline
* chore(deadcode): sync current ratchets
* fix(plugins): retain reserved slot invariant
* fix(plugins): preserve dead-export invariants
* test(plugins): use neutral catalog query fixture
* test(plugins): satisfy catalog lint
* test(plugins): preserve integrity drift coverage
* fix(ci): register skill experience live proof
2026-07-13 01:29:33 -07:00
a45c0999ce
refactor(plugins): require initialized registry collections ( #100990 )
...
* refactor(plugins): require initialized registry collections
* test(plugins): keep empty registry imports lightweight
2026-07-06 10:25:22 -07:00
4cb94cc2cf
fix: keep trusted policies with hook registry ( #94545 )
...
* fix: keep trusted policies with hook registry
* fix: compose trusted policies with live hooks
* fix: preserve trusted policy order
* test: update hook runner mock
* fix: keep hook policy registry internal
2026-06-22 10:15:24 +10:00
6a2b1b2198
docs: document plugin metadata helpers
2026-06-04 04:14:06 -04:00
bbff951880
docs: document plugin index policy helpers
2026-06-03 20:04:38 -04:00
be967545c5
fix(plugins): fail closed on trusted policy errors
...
Fail closed when bundled trusted tool policy registry, registration, owner id, evaluation, or decision reads fail, so malformed trusted-policy state cannot crash diagnostics or accidentally allow a tool call.
Route before-tool-call diagnostics through guarded trusted-policy readers and keep healthy no-op policy behavior unchanged.
Add focused host-hook contract and before-tool-call e2e coverage for the new fail-closed paths.
PR: #88394
2026-05-31 22:57:38 -04:00
1e1e45b72b
fix(code-mode): align outer exec hook params
2026-05-22 09:46:27 +01:00
e4bae42d63
feat(plugin-sdk): derive tool target paths for hooks
...
Summary:
- derive apply_patch target paths for before_tool_call and trusted policy events
- route native Codex PreToolUse cwd/sandbox path facts through the host parser
- document the additive derivedPaths hook field and refresh the SDK API baseline
Verification:
- pnpm test src/agents/apply-patch-paths.test.ts src/plugins/host-tool-param-parsers.test.ts src/agents/pi-tools.before-tool-call.e2e.test.ts src/agents/harness/native-hook-relay.test.ts src/plugins/contracts/host-hooks.contract.test.ts
- pnpm check:test-types
- pnpm lint:core
- pnpm plugin-sdk:api:gen
- pnpm plugin-sdk:api:check
- pnpm run check:no-conflict-markers
- pnpm exec oxfmt --check --threads=1 CHANGELOG.md docs/plugins/hooks.md docs/.generated/plugin-sdk-api-baseline.sha256 src/agents/apply-patch-paths.test.ts src/agents/apply-patch-paths.ts src/agents/harness/native-hook-relay.test.ts src/agents/harness/native-hook-relay.ts src/agents/pi-tools.before-tool-call.e2e.test.ts src/agents/pi-tools.before-tool-call.ts src/agents/pi-tools.ts src/auto-reply/reply/dispatch-from-config.test.ts src/plugins/contracts/host-hooks.contract.test.ts src/plugins/hook-types.ts src/plugins/host-tool-param-parsers.test.ts src/plugins/host-tool-param-parsers.ts src/plugins/trusted-tool-policy.ts
- git diff --check origin/main...HEAD && git diff --check
- pnpm build
Co-authored-by: Eva <eva@100yen.org >
Co-authored-by: Josh Lehman <josh@martian.engineering >
2026-05-09 03:31:42 -04:00
cb38535875
[plugin sdk] Project session extension slots ( #75609 )
...
Merged via squash.
Prepared head SHA: d9b670a867239388517+100yenadmin@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-05-04 08:04:27 -07:00
1adaa28dc8
[plugin sdk] Add generic plugin host-hook contracts ( #72287 )
...
Merged via squash.
Prepared head SHA: 68e5f2ce19239388517+100yenadmin@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-27 17:07:02 -07:00
Naka Masato