feat: bring workspace tools and skill refresh to the Codex plugin

HK
16d ago
+1657-247

Why

Bring the Claude plugin's workspace tool and skill workflows to Codex, with host-native discovery and model-free CLI routing.

Root cause

Not a defect: feature parity work. Review also found account-isolation gaps in cached skill replacement; these are fixed with authenticated account digests and cleanup before parsing or copying.

What changed

  • Enable workspace tools through normal MCP and CLI modes, with context-aware routing and a read-only analyst skill.
  • Mirror sanitized workspace skills into .agents/skills, preserving user skills and removing stale or foreign account copies.
  • Refresh asynchronously at startup and after turns when stale, with bounded manual refresh and single-flight locking.
  • Add an opt-in direct-query guard. The experimental plugin and its offline packager have been removed.

Spec

Specification integration is not enabled for this project. Acceptance is covered by the repository regression tests for routing, guard behavior, executable resolution, skill isolation and refresh lifecycle.

Deployment readiness

Requires a companion Altimate CLI supporting workspace tools and workspace refresh. No database migrations or production changes. Legacy unattributed cached copies are removed and rebuilt from an authenticated v2 snapshot.

Tenant/user impact

Linked workspace users gain local skill discovery and background refresh. Credentials are hashed locally for account attribution; raw keys are neither copied into skills nor logged. User-owned skills are preserved. ALTIMATE_CODEX_SKILL_SYNC=0 disables sync.

How tested / E2E

  • 42 Python tests passed, including account changes, malformed manifests, failed replacement, locks, refresh lifecycle.
  • Resolver and warehouse-guard shell suites passed.
  • Native Codex app-server plugin/read and skills/list recognized plugin skills, Stop hook, MCP registration and a sanitized mirrored fixture skill.
  • Independent Codex review completed before publication. Subsequent bot review fixes include portable query detection, symlink-source cleanup, executable manual refresh and helper mode updates. An unreadable skill is intentionally removed rather than retained without a valid snapshot.
  • Live cloud refresh and warehouse queries: not run; installed companion CLI lacks required capabilities. Service connectivity remains unverified.
  • No visual UI changes.