From a6d8a7a538f89ee4572794251fd78831ad392d64 Mon Sep 17 00:00:00 2001 From: Soyeon Park Date: Thu, 27 Aug 2026 14:34:53 -0700 Subject: [PATCH 1/2] test(plugin): accept a detached MCP payload --- .../mcp-app/tests/test_compact_artifact_server.mjs | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/plugins/codex-security/mcp-app/tests/test_compact_artifact_server.mjs b/plugins/codex-security/mcp-app/tests/test_compact_artifact_server.mjs index 810ea0b44..d1af7e3da 100644 --- a/plugins/codex-security/mcp-app/tests/test_compact_artifact_server.mjs +++ b/plugins/codex-security/mcp-app/tests/test_compact_artifact_server.mjs @@ -14,10 +14,9 @@ const applicationRoot = path.resolve( ".." ); const pluginRoot = path.resolve(applicationRoot, ".."); -const bundledPluginRoot = path.resolve( - applicationRoot, - "../../../sdk/typescript/_bundled_plugin" -); +const bundledPluginRoot = process.env.CODEX_SECURITY_TEST_PLUGIN_ROOT + ? path.resolve(process.env.CODEX_SECURITY_TEST_PLUGIN_ROOT) + : path.resolve(applicationRoot, "../../../sdk/typescript/_bundled_plugin"); const temporaryRoot = await mkdtemp(path.join(tmpdir(), "codex-security-artifact-mcp-")); try { From 5a823e7402a34b0ca732f17e68fa92a77547f1ce Mon Sep 17 00:00:00 2001 From: Soyeon Park Date: Thu, 27 Aug 2026 14:40:20 -0700 Subject: [PATCH 2/2] test(plugin): run smoke against detached payload --- .../codex-security/mcp-app/tests/test_mcp_app_smoke.mjs | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/plugins/codex-security/mcp-app/tests/test_mcp_app_smoke.mjs b/plugins/codex-security/mcp-app/tests/test_mcp_app_smoke.mjs index d64d6ab51..b954b7100 100644 --- a/plugins/codex-security/mcp-app/tests/test_mcp_app_smoke.mjs +++ b/plugins/codex-security/mcp-app/tests/test_mcp_app_smoke.mjs @@ -18,10 +18,9 @@ const sourcePluginRoot = path.resolve( path.dirname(fileURLToPath(import.meta.url)), "../..", ); -const pluginRoot = path.resolve( - sourcePluginRoot, - "../../sdk/typescript/_bundled_plugin", -); +const pluginRoot = process.env.CODEX_SECURITY_TEST_PLUGIN_ROOT + ? path.resolve(process.env.CODEX_SECURITY_TEST_PLUGIN_ROOT) + : path.resolve(sourcePluginRoot, "../../sdk/typescript/_bundled_plugin"); const mcpAppRoot = path.join(sourcePluginRoot, "mcp-app"); const pluginManifest = JSON.parse( await readFile(path.join(pluginRoot, ".codex-plugin", "plugin.json"), "utf8"),