You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@magpie.apache.org by po...@apache.org on 2026/10/16 06:18:59 UTC
(magpie) branch feat/security-welcome-guide updated (affd7bdb -> 48ec3d9f)
This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a change to branch feat/security-welcome-guide
in repository https://gitbox.apache.org/repos/asf/magpie.git
discard affd7bdb feat(setup): first-run welcome guides, general and for the security skills
add a3d9b717 feat(codex): add native guards and vetted operation rules (#1649)
add 72bf3a6d feat(setup): first-run welcome guides, general and for the security skills
add 48ec3d9f fix(setup): keep welcome guides from disrupting setup checks
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (affd7bdb)
\
N -- N -- N refs/heads/feat/security-welcome-guide (48ec3d9f)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.agents/plugins/marketplace.json | 22 ++++
.codex/config.toml | 14 ++
.github/workflows/codeql.yml | 8 ++
.pre-commit-config.yaml | 2 +-
docs/adapters/codex.md | 123 ++++++++++++++---
docs/labels-and-capabilities.md | 2 +-
docs/setup/marketplace.md | 15 +--
docs/vendor-neutrality.md | 4 +-
.../tools/agent-guard/src/agent_guard/__init__.py | 25 ++++
.../skills/isolated-setup-verify/SKILL.md | 4 +-
plugins/magpie-setup/skills/setup/config.md | 2 +-
plugins/magpie-setup/skills/setup/install.md | 9 ++
.../skills/setup/setup_preflight/core.py | 6 +-
.../setup/setup_preflight/isolated_fingerprint.py | 2 +-
.../skills/setup/setup_preflight/welcome.py | 4 +-
plugins/magpie-setup/skills/setup/upgrade.md | 6 +-
.../magpie-vetted-ops/.claude-plugin/plugin.json | 15 +--
plugins/magpie-vetted-ops/hooks/hooks.json | 16 +++
plugins/magpie-vetted-ops/tools/vetted-ops | 1 -
.../magpie-vetted-ops/tools}/vetted-ops/README.md | 32 +++--
.../tools}/vetted-ops/hooks/link-stable-path.sh | 0
.../tools}/vetted-ops/pyproject.toml | 1 +
.../tools}/vetted-ops/src/vetted_ops/__init__.py | 0
.../vetted-ops/src/vetted_ops/body_field_format.py | 0
.../tools}/vetted-ops/src/vetted_ops/cli.py | 0
.../tools/vetted-ops/src/vetted_ops/codex.py | 66 ++++++++++
.../tools}/vetted-ops/src/vetted_ops/config.py | 0
.../tools}/vetted-ops/src/vetted_ops/ops.py | 0
.../vetted-ops/src/vetted_ops/ops_code_review.py | 0
.../vetted-ops/src/vetted_ops/ops_quick_merge.py | 0
.../vetted-ops/src/vetted_ops/ops_stack_review.py | 0
.../vetted-ops/src/vetted_ops/ops_stale_sweep.py | 0
.../tools}/vetted-ops/src/vetted_ops/procedures.py | 0
.../src/vetted_ops/queries/cr-open.graphql | 0
.../src/vetted_ops/queries/cr-pr-stack.graphql | 0
.../src/vetted_ops/queries/cr-pr.graphql | 0
.../queries/main-recent-failures.graphql | 0
.../src/vetted_ops/queries/pr-by-head.graphql | 0
.../src/vetted_ops/queries/pr-express-one.graphql | 0
.../vetted_ops/queries/pr-express-ready.graphql | 0
.../src/vetted_ops/queries/pr-liveness.graphql | 0
.../vetted_ops/queries/pr-review-decision.graphql | 0
.../vetted_ops/queries/pr-review-threads.graphql | 0
.../src/vetted_ops/queries/pr-stale-one.graphql | 0
.../src/vetted_ops/queries/pr-stale-search.graphql | 0
.../queries/pr-stats-closed-page.graphql | 0
.../queries/pr-stats-closed-search.graphql | 0
.../src/vetted_ops/queries/pr-stats-open.graphql | 0
.../src/vetted_ops/queries/pr-triage-one.graphql | 0
.../vetted_ops/queries/pr-triage-preflight.graphql | 0
.../vetted_ops/queries/pr-triage-search.graphql | 0
.../src/vetted_ops/queries/stack-of-pr.graphql | 0
.../src/vetted_ops/queries/stack-scan.graphql | 0
.../vetted-ops/src/vetted_ops/rollup_format.py | 0
.../vetted-ops/src/vetted_ops/tracker_backends.py | 0
tools/agent-guard/README.md | 17 ++-
tools/agent-guard/src/agent_guard/__init__.py | 25 ++++
tools/agent-guard/tests/test_codex.py | 143 ++++++++++++++++++++
tools/dev/check-family-plugins.py | 107 +++++++++++++--
tools/dev/tests/test_check_family_plugins.py | 101 +++++++++++++-
tools/sandbox-lint/README.md | 8 ++
tools/sandbox-lint/src/sandbox_lint/__init__.py | 17 ++-
tools/sandbox-lint/src/sandbox_lint/codex.py | 82 +++++++++++-
tools/sandbox-lint/tests/test_codex.py | 145 +++++++++++++++++++++
tools/setup-preflight/tests/test_welcome.py | 21 +++
tools/skill-evals/README.md | 2 +-
.../evals/setup-isolated-setup-verify/README.md | 3 +-
.../fixtures/case-1-untrusted/expected.json | 9 ++
.../fixtures/case-1-untrusted/report.md | 4 +
.../fixtures/case-2-unsafe-write/expected.json | 9 ++
.../fixtures/case-2-unsafe-write/report.md | 4 +
.../fixtures/case-3-no-guard/expected.json | 9 ++
.../fixtures/case-3-no-guard/report.md | 4 +
.../codex-native/fixtures/output-spec.md | 11 ++
.../fixtures/step-config.json | 5 +-
.../codex-native}/fixtures/user-prompt-template.md | 4 +-
.../setup/preflight-floor/fixtures/output-spec.md | 5 +
tools/spec-loop/.last-sync | 2 +-
tools/spec-loop/specs/adoption-and-setup.md | 3 +
tools/spec-loop/specs/codex-runtime.md | 42 +++++-
tools/spec-loop/specs/vetted-command-surface.md | 18 +++
tools/vetted-ops/README.md | 14 ++
tools/vetted-ops/pyproject.toml | 1 +
tools/vetted-ops/src/vetted_ops/codex.py | 66 ++++++++++
tools/vetted-ops/tests/test_codex.py | 97 ++++++++++++++
85 files changed, 1261 insertions(+), 96 deletions(-)
create mode 100644 plugins/magpie-vetted-ops/hooks/hooks.json
delete mode 120000 plugins/magpie-vetted-ops/tools/vetted-ops
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/README.md (94%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/hooks/link-stable-path.sh (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/pyproject.toml (98%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/__init__.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/body_field_format.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/cli.py (100%)
create mode 100644 plugins/magpie-vetted-ops/tools/vetted-ops/src/vetted_ops/codex.py
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/config.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/ops.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/ops_code_review.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/ops_quick_merge.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/ops_stack_review.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/ops_stale_sweep.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/procedures.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/cr-open.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/cr-pr-stack.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/cr-pr.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/main-recent-failures.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-by-head.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-express-one.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-express-ready.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-liveness.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-review-decision.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-review-threads.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-stale-one.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-stale-search.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-stats-closed-page.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-stats-closed-search.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-stats-open.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-triage-one.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-triage-preflight.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/pr-triage-search.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/stack-of-pr.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/queries/stack-scan.graphql (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/rollup_format.py (100%)
copy {tools => plugins/magpie-vetted-ops/tools}/vetted-ops/src/vetted_ops/tracker_backends.py (100%)
create mode 100644 tools/agent-guard/tests/test_codex.py
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/case-1-untrusted/expected.json
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/case-1-untrusted/report.md
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/case-2-unsafe-write/expected.json
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/case-2-unsafe-write/report.md
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/case-3-no-guard/expected.json
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/case-3-no-guard/report.md
create mode 100644 tools/skill-evals/evals/setup-isolated-setup-verify/codex-native/fixtures/output-spec.md
copy tools/skill-evals/evals/setup-isolated-setup-verify/{runtime-routing => codex-native}/fixtures/step-config.json (65%)
copy tools/skill-evals/evals/{contributor-candidate-screen/step-4-write-report => setup-isolated-setup-verify/codex-native}/fixtures/user-prompt-template.md (60%)
create mode 100644 tools/vetted-ops/src/vetted_ops/codex.py
create mode 100644 tools/vetted-ops/tests/test_codex.py