Naka Masato 68dbf92281 fix(plugins): scope Codex relay with tool matchers (#109603) ...

* fix(plugins): scope Codex relay matchers

Co-authored-by: Masato Naka <masatonaka1989@gmail.com>

* fix(plugins): reject sparse tool hook matchers

* test(plugins): cover mixed relay matcher scopes

* fix(plugins): fail closed on invalid policy matchers

* test(plugins): prove composed relay policy scope

* fix(plugins): keep matcher scope internal

* fix(plugins): satisfy matcher static checks

* fix(plugins): enforce canonical tool hook matchers

* fix(codex): project native hook matcher aliases

* fix(plugins): scope Codex relay with tool matchers

* chore: keep release changelog maintainer-owned

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>

2026-07-30 01:39:08 +08:00

..

reference

feat: add Fish Audio S2.1 and local MLX speech (#115790)

2026-07-29 05:15:33 -04:00

adding-capabilities.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

admin-http-rpc.md

fix(gateway): admit plugin HTTP work during suspension (#104112)

2026-07-10 22:34:57 -07:00

agent-tools.md

…

architecture-internals.md

refactor: replace context-engine retry proxy with declared params (#115872)

2026-07-29 08:37:08 -04:00

architecture.md

feat: auto-collect durable meeting transcripts (#113122)

2026-07-23 11:41:08 -07:00

beam.md

feat(plugins): mirror local coding sessions to a remote Beam receiver (#114735)

2026-07-27 17:31:34 -04:00

building-extensions.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

building-plugins.md

docs(plugins): link setup-input deprecations to the migration pattern and document reader sweeps (#112692)

2026-07-22 11:04:19 -07:00

bundles.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

cli-backend-plugins.md

fix(cron): preserve scheduled caps across CLI and worker upgrades

2026-07-24 01:24:03 -05:00

codex-computer-use.md

fix(codex): restore connected apps for token-authenticated runs (#115075)

2026-07-29 06:21:25 -04:00

codex-harness-reference.md

fix(codex): restore connected apps for token-authenticated runs (#115075)

2026-07-29 06:21:25 -04:00

codex-harness-runtime.md

fix(codex): restore connected apps for token-authenticated runs (#115075)

2026-07-29 06:21:25 -04:00

codex-harness.md

fix(codex): restore connected apps for token-authenticated runs (#115075)

2026-07-29 06:21:25 -04:00

codex-native-plugins.md

feat(codex): support the openai-api-curated marketplace wire name (#115955)

2026-07-29 11:07:16 -04:00

codex-supervision.md

improve: stream native sessions as hosts finish (#110211)

2026-07-17 23:59:57 +01:00

community.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

compatibility.md

refactor(prompt): use plain inbound context labels and drop system-tag sanitizer (#112000)

2026-07-27 11:27:53 +10:00

copilot.md

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

dependency-resolution.md

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

google-meet.md

refactor(meetings): close manual action state (#114247)

2026-07-26 23:25:19 -04:00

hooks.md

fix(plugins): scope Codex relay with tool matchers (#109603)

2026-07-30 01:39:08 +08:00

install-overrides.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

llama-cpp.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

logbook.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

manage-plugins.md

fix(plugins): keep bulk updates on the beta channel (#115083)

2026-07-29 12:04:38 +08:00

manifest.md

feat(plugins): match shared models across vendor-namespaced catalog ids (#115210)

2026-07-28 10:22:23 -04:00

meeting-plugins.md

refactor(meetings): close manual action state (#114247)

2026-07-26 23:25:19 -04:00

memory-lancedb.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

memory-wiki.md

fix(ui): rename the Memory Palace browser to Memory Wiki and document it (#115954)

2026-07-29 12:51:37 -04:00

message-presentation.md

refactor: remove dead tooling and deprecated exports (#112915)

2026-07-23 01:28:11 -04:00

oc-path.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

onepassword.md

fix(onepassword): make SecretRef setup production-safe

2026-07-25 06:03:30 -05:00

plugin-inventory.md

feat: add Fish Audio S2.1 and local MLX speech (#115790)

2026-07-29 05:15:33 -04:00

plugin-permission-requests.md

fix(plugins): enforce hook security invariants (#115701)

2026-07-29 16:10:34 +08:00

reference.md

feat: add Fish Audio S2.1 and local MLX speech (#115790)

2026-07-29 05:15:33 -04:00

sdk-agent-harness.md

fix(plugins): scope Codex relay with tool matchers (#109603)

2026-07-30 01:39:08 +08:00

sdk-channel-inbound.md

fix(channels): harden record session override

2026-07-26 23:15:06 -05:00

sdk-channel-ingress.md

feat(channels): add unified implicit mention policy (#108829)

2026-07-16 17:16:01 -07:00

sdk-channel-message.md

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

sdk-channel-outbound.md

fix(nostr): report unavailable ingress when queue open fails (#115313)

2026-07-28 13:34:23 -04:00

sdk-channel-plugins.md

refactor(model-picker): centralize session apply contracts (#114739)

2026-07-27 16:58:23 -04:00

sdk-channel-turn.md

…

sdk-entrypoints.md

refactor(fs): adopt fs-safe 0.5 core primitives (#113705)

2026-07-28 03:41:47 -04:00

sdk-migration.md

refactor(fs): adopt fs-safe 0.5 core primitives (#113705)

2026-07-28 03:41:47 -04:00

sdk-overview.md

refactor: replace context-engine retry proxy with declared params (#115872)

2026-07-29 08:37:08 -04:00

sdk-provider-plugins.md

refactor(providers): collapse live model discovery onto shared projection hook (#113903)

2026-07-25 16:17:27 -07:00

sdk-runtime.md

fix(nodes): cancel paired local inference when callers disconnect (#115624)

2026-07-29 02:00:22 -04:00

sdk-setup.md

feat(channels): add channel-owned setup contracts (#112176)

2026-07-22 19:57:42 -04:00

sdk-subpaths.md

feat(talk): support GPT-Live realtime voice over ChatGPT OAuth (#115226)

2026-07-28 15:05:55 -04:00

sdk-testing.md

test(telegram): consolidate bot test harness (#113571)

2026-07-25 05:28:26 -07:00

teams-meetings.md

feat: auto-collect durable meeting transcripts (#113122)

2026-07-23 11:41:08 -07:00

tool-plugins.md

docs(plugins): link setup-input deprecations to the migration pattern and document reader sweeps (#112692)

2026-07-22 11:04:19 -07:00

vault.md

Add Vault SecretRef plugin (#89255)

2026-07-09 05:30:12 -05:00

voice-call.md

fix(voice-call): pin Twilio webhook verification to the configured public path (#112800)

2026-07-30 01:08:38 +08:00

webhooks.md

fix(webhooks): keep routes cold when SecretRefs are unavailable (#109715)

2026-07-16 23:56:59 -07:00

workboard.md

feat(dashboard): workboard:mini aggregates all boards when boardId is unset (#112484)

2026-07-21 20:32:33 -07:00

zalouser.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

zoom-meetings.md

feat: auto-collect durable meeting transcripts (#113122)

2026-07-23 11:41:08 -07:00