chore(release): codex 1.1.6 (source)

Author: rldyourmnd

scripts/install_system_codex.sh

@@ -588,6 +588,8 @@ def is_rldyour_plugin_header(header_path: list[str]) -> bool:
 def is_managed_header(header: str, header_path: list[str]) -> bool:
     if header in managed_headers:
         return True
+    if len(header_path) >= 2 and header_path[0] == "mcp_servers" and header_path[1] in mcp_servers:
+        return True
     return (
         len(header_path) >= 2
         and header_path[0] == "profiles"

scripts/smoke_codex_hooks_migration.sh

@@ -156,6 +156,19 @@ memories = true
 
 [profiles."rldyour-safe".features]
 terminal_resize_reflow = false
+EOF
+      ;;
+    mcp_secret_placeholder_upgrade)
+      cat >"$config_path" <<'EOF'
+[mcp_servers.github]
+command = "github-mcp-server"
+args = ["stdio", "--toolsets", "context,repos"]
+
+[mcp_servers.github.env]
+GITHUB_PERSONAL_ACCESS_TOKEN = "${GITHUB_PERSONAL_ACCESS_TOKEN}"
+
+[mcp_servers.github.tools.old]
+approval_mode = "approve"
 EOF
       ;;
     *)
@@ -255,6 +268,17 @@ if case_name == "memories_legacy":
         raise SystemExit(f"{case_name}: memories legacy alias was not migrated: {memories!r}")
     if "no_memories_if_mcp_or_web_search" in memories:
         raise SystemExit(f"{case_name}: memories legacy alias was not removed: {memories!r}")
+if case_name == "mcp_secret_placeholder_upgrade":
+    github = (data.get("mcp_servers") or {}).get("github") or {}
+    if "env" in github:
+        raise SystemExit(f"{case_name}: stale github env table was not removed: {github!r}")
+    if github.get("env_vars") != ["GITHUB_PERSONAL_ACCESS_TOKEN"]:
+        raise SystemExit(f"{case_name}: github token was not forwarded through env_vars: {github!r}")
+    if "${GITHUB_PERSONAL_ACCESS_TOKEN}" in text:
+        raise SystemExit(f"{case_name}: literal GitHub token placeholder remains in config")
+    tools = github.get("tools") or {}
+    if "old" in tools:
+        raise SystemExit(f"{case_name}: stale managed github tool approval remains: {tools!r}")
 PY
 
   printf 'ok      %s\n' "$case_name"
@@ -283,6 +307,7 @@ cases=(
   memories_legacy
   features_legacy_landlock
   profiles_nested_legacy
+  mcp_secret_placeholder_upgrade
 )
 
 for case_name in "${cases[@]}"; do