Abhitej John c85a2d8d9f Fix dotnet-msbuild Codex plugin install by externalizing mcpServers (#740) ...

* Fix dotnet-msbuild Codex plugin install by externalizing mcpServers

Move the inline mcpServers configuration to a separate .mcp.json file
inside .codex-plugin/, and update .codex-plugin/plugin.json to reference
it via a relative path string. This matches the Codex plugin spec which
requires mcpServers to be a path reference to a .mcp.json file rather
than an embedded object.

The root plugin.json retains the inline mcpServers format for the
skill-validator. Both validator methods (FindPluginMcpServers and
ExternalDependencyChecker.CheckPlugin) are updated to also handle the
Codex string path format for forward compatibility.

Fixes #738

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review: validate mcpServers path and log parse errors

- Reject rooted paths and paths with '..' segments to prevent directory
  traversal when resolving mcpServers string references.
- Log parse errors in ResolveMcpFile to stderr (consistent with
  plugin.json parse error handling) instead of silently swallowing.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-09 17:07:14 -07:00

392 B

Raw Permalink Blame History

View Raw