From 8980dc63793073d0084e22e18aad3d2c657e12bd Mon Sep 17 00:00:00 2001 From: yizheng Date: Fri, 3 Jul 2026 14:51:51 +0800 Subject: [PATCH 1/3] feat(sec-core): add codex plugin install for source code build Signed-off-by: yizheng --- .../workflows/sec-core-source-code-build.yaml | 8 ++++++++ src/agent-sec-core/Makefile | 17 ++++++++++++----- 2 files changed, 20 insertions(+), 5 deletions(-) diff --git a/.github/workflows/sec-core-source-code-build.yaml b/.github/workflows/sec-core-source-code-build.yaml index 388327829..caed054a8 100644 --- a/.github/workflows/sec-core-source-code-build.yaml +++ b/.github/workflows/sec-core-source-code-build.yaml @@ -69,6 +69,14 @@ jobs: ls ~/.local/lib/anolisa/sec-core/hermes-plugin/src/ ls ~/.local/lib/anolisa/sec-core/hermes-plugin/src/plugin.yaml ls ~/.local/lib/anolisa/sec-core/hermes-plugin/scripts/deploy.sh + echo "=== Codex Plugin ===" + ls ~/.local/lib/anolisa/sec-core/codex-plugin/ + ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/hooks/ + ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/hooks/code_scanner_hook.py + ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/hooks/skill_ledger_hook.py + ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/.codex-plugin/plugin.json + ls ~/.local/lib/anolisa/sec-core/codex-plugin/install.sh + ls ~/.local/lib/anolisa/sec-core/codex-plugin/.agents/plugins/marketplace.json echo "=== CLI venv ===" ls ~/.local/lib/anolisa/sec-core/venv/bin/agent-sec-cli - name: Run E2E tests diff --git a/src/agent-sec-core/Makefile b/src/agent-sec-core/Makefile index ac1851ec2..8e2e27091 100644 --- a/src/agent-sec-core/Makefile +++ b/src/agent-sec-core/Makefile @@ -278,6 +278,7 @@ ifeq ($(INSTALL_PROFILE),user) SKILLDIR ?= $(HOME)/.copilot-shell/skills OPENCLAW_PLUGIN_DIR ?= $(LIBDIR)/openclaw-plugin HERMES_PLUGIN_DIR ?= $(LIBDIR)/hermes-plugin + CODEX_PLUGIN_DIR ?= $(LIBDIR)/codex-plugin else PREFIX ?= /usr/local ANOLISA_DATADIR ?= /usr/share/anolisa @@ -285,6 +286,7 @@ else SKILLDIR ?= $(ANOLISA_DATADIR)/skills OPENCLAW_PLUGIN_DIR ?= $(LIBDIR)/openclaw-plugin HERMES_PLUGIN_DIR ?= $(LIBDIR)/hermes-plugin + CODEX_PLUGIN_DIR ?= $(LIBDIR)/codex-plugin endif ADAPTER_DIR ?= $(ANOLISA_DATADIR)/adapters/sec-core @@ -376,9 +378,9 @@ install-hermes-plugin: ## Install hermes-plugin to target directory chmod 0755 $(DESTDIR)$(HERMES_PLUGIN_DIR)/scripts/*.sh .PHONY: install-codex-plugin -install-codex-plugin: ## Install codex-plugin hooks to RPM target - install -d -m 0755 $(DESTDIR)$(RPM_CODEX_PLUGIN_DIR) - cp -rp $(BUILD_DIR)/codex-plugin/. $(DESTDIR)$(RPM_CODEX_PLUGIN_DIR)/ +install-codex-plugin: ## Install codex-plugin hooks and install script + install -d -m 0755 $(DESTDIR)$(CODEX_PLUGIN_DIR) + cp -rp $(BUILD_DIR)/codex-plugin/. $(DESTDIR)$(CODEX_PLUGIN_DIR)/ .PHONY: install-cosh-hook install-cosh-hook: ## Install cosh hooks (linux-sandbox + extension) @@ -415,11 +417,12 @@ install-systemd-user: ## Install agent-sec-core systemd user service install -p -m 0644 $(SYSTEMD_USER_UNIT_SOURCE) $(DESTDIR)$(SYSTEMD_USER_UNIT_DIR)/agent-sec-core.service .PHONY: install-all -install-all: install-cli-venv install-cosh-hook install-openclaw-plugin install-hermes-plugin install-skills install-adapter-manifest ## Install all (user source build) +install-all: install-cli-venv install-cosh-hook install-codex-plugin install-openclaw-plugin install-hermes-plugin install-skills install-adapter-manifest ## Install all (user source build) .PHONY: install-all-for-rpmbuild install-all-for-rpmbuild: OPENCLAW_PLUGIN_DIR := $(RPM_OPENCLAW_PLUGIN_DIR) install-all-for-rpmbuild: HERMES_PLUGIN_DIR := $(RPM_HERMES_PLUGIN_DIR) +install-all-for-rpmbuild: CODEX_PLUGIN_DIR := $(RPM_CODEX_PLUGIN_DIR) install-all-for-rpmbuild: install-cli-site install-cosh-hook install-codex-plugin install-openclaw-plugin install-hermes-plugin install-skills install-adapter-manifest install-component-manifest install-systemd-user ## Install all (RPM build) # ============================================================================= @@ -453,6 +456,10 @@ uninstall-openclaw-plugin: ## Remove openclaw plugin uninstall-hermes-plugin: ## Remove hermes plugin rm -rf $(DESTDIR)$(HERMES_PLUGIN_DIR) +.PHONY: uninstall-codex-plugin +uninstall-codex-plugin: ## Remove codex plugin + rm -rf $(DESTDIR)$(CODEX_PLUGIN_DIR) + .PHONY: uninstall-skills uninstall-skills: ## Remove sec-core's own skill subdirs from SKILLDIR @for d in skills/*/; do \ @@ -470,7 +477,7 @@ uninstall-component-manifest: ## Remove component manifest rm -rf $(DESTDIR)$(COMPONENT_DIR) .PHONY: uninstall -uninstall: uninstall-cli-venv uninstall-cosh-hook uninstall-openclaw-plugin uninstall-hermes-plugin uninstall-skills uninstall-adapter-manifest ## Uninstall everything install-all installed +uninstall: uninstall-cli-venv uninstall-cosh-hook uninstall-codex-plugin uninstall-openclaw-plugin uninstall-hermes-plugin uninstall-skills uninstall-adapter-manifest ## Uninstall everything install-all installed .PHONY: help help: ## Show this help message From 34399a509ac5cb26835e1e8afd9f1d1e5e3dc7e9 Mon Sep 17 00:00:00 2001 From: yizheng Date: Fri, 3 Jul 2026 16:22:44 +0800 Subject: [PATCH 2/3] fix(sec-core): add install.sh execute privilege Signed-off-by: yizheng --- .github/workflows/sec-core-source-code-build.yaml | 3 +++ src/agent-sec-core/Makefile | 1 + 2 files changed, 4 insertions(+) diff --git a/.github/workflows/sec-core-source-code-build.yaml b/.github/workflows/sec-core-source-code-build.yaml index caed054a8..331a5bc25 100644 --- a/.github/workflows/sec-core-source-code-build.yaml +++ b/.github/workflows/sec-core-source-code-build.yaml @@ -65,10 +65,12 @@ jobs: ls ~/.local/lib/anolisa/sec-core/openclaw-plugin/ ls ~/.local/lib/anolisa/sec-core/openclaw-plugin/dist/ ls ~/.local/lib/anolisa/sec-core/openclaw-plugin/scripts/ + test -x ~/.local/lib/anolisa/sec-core/openclaw-plugin/scripts/deploy.sh echo "=== Hermes Plugin ===" ls ~/.local/lib/anolisa/sec-core/hermes-plugin/src/ ls ~/.local/lib/anolisa/sec-core/hermes-plugin/src/plugin.yaml ls ~/.local/lib/anolisa/sec-core/hermes-plugin/scripts/deploy.sh + test -x ~/.local/lib/anolisa/sec-core/hermes-plugin/scripts/deploy.sh echo "=== Codex Plugin ===" ls ~/.local/lib/anolisa/sec-core/codex-plugin/ ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/hooks/ @@ -76,6 +78,7 @@ jobs: ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/hooks/skill_ledger_hook.py ls ~/.local/lib/anolisa/sec-core/codex-plugin/hooks-plugin/.codex-plugin/plugin.json ls ~/.local/lib/anolisa/sec-core/codex-plugin/install.sh + test -x ~/.local/lib/anolisa/sec-core/codex-plugin/install.sh ls ~/.local/lib/anolisa/sec-core/codex-plugin/.agents/plugins/marketplace.json echo "=== CLI venv ===" ls ~/.local/lib/anolisa/sec-core/venv/bin/agent-sec-cli diff --git a/src/agent-sec-core/Makefile b/src/agent-sec-core/Makefile index 8e2e27091..bf6206a2c 100644 --- a/src/agent-sec-core/Makefile +++ b/src/agent-sec-core/Makefile @@ -381,6 +381,7 @@ install-hermes-plugin: ## Install hermes-plugin to target directory install-codex-plugin: ## Install codex-plugin hooks and install script install -d -m 0755 $(DESTDIR)$(CODEX_PLUGIN_DIR) cp -rp $(BUILD_DIR)/codex-plugin/. $(DESTDIR)$(CODEX_PLUGIN_DIR)/ + chmod 0755 $(DESTDIR)$(CODEX_PLUGIN_DIR)/install.sh .PHONY: install-cosh-hook install-cosh-hook: ## Install cosh hooks (linux-sandbox + extension) From 34f9c0c8cc7d5b73f8177a8893f277c7bbaad2fb Mon Sep 17 00:00:00 2001 From: yizheng Date: Mon, 6 Jul 2026 10:22:44 +0800 Subject: [PATCH 3/3] ci(sec-core): add daemon verify in source-code-build-ci Signed-off-by: yizheng --- .github/workflows/sec-core-source-code-build.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/sec-core-source-code-build.yaml b/.github/workflows/sec-core-source-code-build.yaml index 331a5bc25..0cb4f16c1 100644 --- a/.github/workflows/sec-core-source-code-build.yaml +++ b/.github/workflows/sec-core-source-code-build.yaml @@ -52,6 +52,8 @@ jobs: run: | agent-sec-cli --version agent-sec-cli --help + - name: Verify daemon + run: agent-sec-daemon --help - name: Verify sandbox run: linux-sandbox --help - name: Verify deployment