All pull requests

Pull requests

• 🤖 fix: the bash tool card shows why a hook blocked the call

  #6211·ThomasK33 opened Oct 12, 2026Member·

  ·
  1

  9

• 🤖 feat: non-blocking ask_user_question in exec mode

  #6209·ammar-agent opened Oct 12, 2026Collaborator·

  ·
  62

• 🤖 feat: plugin hooks get their MCP servers' structured settings

  #6174·ThomasK33 opened Oct 11, 2026Member·3/3·

  ·
  40

• 🤖 feat: edit OpenAI structured MCP settings in the workspace MCP dialog

  #6173·ThomasK33 opened Oct 11, 2026Member·2/3·

  ·
  61

• 🤖 feat: read and update OpenAI structured MCP settings

  #6172·ThomasK33 opened Oct 11, 2026Member·1/3·

  ·
  43

• 🤖 fix: refuse plugin component paths that resolve into the plugin's .git

  #6163·ThomasK33 opened Oct 11, 2026Member·

  ·
  1

  5

• 🤖 feat: a plugin hook's systemMessage reaches the user as a toast, never the model

  #6157·ThomasK33 opened Oct 11, 2026Member·13/13·

  ·
  23

• 🤖 fix: the first UserPromptSubmit after a restart waits for the plugin's MCP server

  #6156·ThomasK33 opened Oct 11, 2026Member·12/13·

  ·
  23

• 🤖 feat: run trusted Codex plugin hooks in workspaces (per-call trust gate)

  #6155·ThomasK33 opened Oct 11, 2026Member·11/13·

  ·
  49

• 🤖 feat: run trusted Codex mcp_tool hooks on UserPromptSubmit and Stop

  #6154·ThomasK33 opened Oct 11, 2026Member·10/13·

  ·
  39

• 🤖 fix: Codex hooks match Xum tools by their Codex names (Bash, mcp__server__tool)

  #6153·ThomasK33 opened Oct 11, 2026Member·9/13·

  ·
  27

• 🤖 feat: run trusted Codex mcp_tool hooks on PreToolUse and PostToolUse

  #6152·ThomasK33 opened Oct 11, 2026Member·8/13·

  ·
  82

• 🤖 feat: review and trust plugin hooks in Settings; consent preview lists them

  #6151·ThomasK33 opened Oct 11, 2026Member·7/13·

  ·
  38

• 🤖 feat: trust store for Codex-format plugin hooks (trust per hash)

  #6150·ThomasK33 opened Oct 11, 2026Member·6/13·

  ·
  46

• 🤖 feat: parse Codex-format plugin hooks (hooks.json) with a hash per hook

  #6149·ThomasK33 opened Oct 11, 2026Member·5/13·

  ·
  39

• 🤖 feat: turn.stop prompt hook point (Codex Stop, continue up to 3 times)

  #6148·ThomasK33 opened Oct 11, 2026Member·4/13·

  ·
  1

  32

• 🤖 fix: an on-send compaction follow-up runs the prompt hooks only once

  #6147·ThomasK33 opened Oct 11, 2026Member·3/13·

  ·
  30

• 🤖 feat: message.send hooks can add context to their user message

  #6146·ThomasK33 opened Oct 11, 2026Member·2/13·

  ·
  45

• 🤖 feat: message.send prompt hook point (block a send, no consumer yet)

  #6145·ThomasK33 opened Oct 11, 2026Member·1/13·

  ·
  45

• 🤖 feat: revoke MCP Apps view domains; read openai/widgetCSP

  #6138·ThomasK33 opened Oct 11, 2026Member·10/10·

  ·
  46

• 🤖 feat: per-server consent for MCP Apps view domains

  #6137·ThomasK33 opened Oct 11, 2026Member·9/10·

  ·
  52

• 🤖 feat: window.openai shim for MCP Apps views

  #6136·ThomasK33 opened Oct 11, 2026Member·8/10·

  ·
  49

• 🤖 feat: MCP Apps ui/request-display-mode (inline, fullscreen)

  #6135·ThomasK33 opened Oct 11, 2026Member·7/10·

  ·
  38

• 🤖 feat: Artifacts shows only files the agent created

  #6134·ThomasK33 opened Oct 11, 2026Member·6/10·

  ·
  30

• 🤖 feat: MCP App view tabs on phones and in the palette

  #6133·ThomasK33 opened Oct 11, 2026Member·5/10·

  ·
  26