feat: surface codex app server governance summaries

tests/fixtures/codex-app-server-runtime.mjs

@@ -266,6 +266,121 @@ rl.on("line", (line) => {
     return;
   }
 
+  if (message.method === "account/read") {
+    send({
+      id: message.id,
+      result: {
+        account: {
+          type: "chatgpt",
+          email: "private-user@example.com",
+          planType: "pro",
+          accessToken: "sk-secret-should-not-leak",
+        },
+        requiresOpenaiAuth: true,
+      },
+    });
+    return;
+  }
+
+  if (message.method === "account/rateLimits/read") {
+    send({
+      id: message.id,
+      result: {
+        rateLimits: {
+          limitId: "codex",
+          limitName: "Primary Codex",
+          primary: { usedPercent: 25, windowDurationMins: 15, resetsAt: 1730947200 },
+          secondary: null,
+          rateLimitReachedType: null,
+        },
+        rateLimitsByLimitId: {
+          codex: {
+            limitId: "codex",
+            primary: { usedPercent: 25, windowDurationMins: 15, resetsAt: 1730947200 },
+            rateLimitReachedType: null,
+          },
+          codex_other: {
+            limitId: "codex_other",
+            limitName: "codex_other",
+            primary: { usedPercent: 42, windowDurationMins: 60, resetsAt: 1730950800 },
+            rateLimitReachedType: null,
+          },
+        },
+      },
+    });
+    return;
+  }
+
+  if (message.method === "config/read") {
+    send({
+      id: message.id,
+      result: {
+        config: {
+          api_key: "sk-secret-should-not-leak",
+          model: "gpt-5.4",
+          apps: {
+            _default: {
+              enabled: true,
+              destructive_enabled: false,
+              open_world_enabled: false,
+            },
+            google_drive: {
+              enabled: true,
+              destructive_enabled: false,
+              default_tools_approval_mode: "prompt",
+            },
+            secret_app: {
+              enabled: false,
+              token: "sk-secret-should-not-leak",
+            },
+          },
+        },
+      },
+    });
+    return;
+  }
+
+  if (message.method === "configRequirements/read") {
+    send({
+      id: message.id,
+      result: {
+        managed: true,
+        requirements: [
+          { keyPath: "apps._default.destructive_enabled", status: "blocked", sourcePath: "/Users/kris/.codex/config.toml" },
+          { keyPath: "sandbox_mode", status: "ok" },
+        ],
+        warnings: [{ message: "policy reads /Users/kris/.ssh/id_ed25519" }],
+      },
+    });
+    return;
+  }
+
+  if (message.method === "externalAgentConfig/detect") {
+    send({
+      id: message.id,
+      result: {
+        items: [
+          {
+            itemType: "AGENTS_MD",
+            description: "Import /Users/kris/code/boss/CLAUDE.md to /Users/kris/code/boss/AGENTS.md.",
+            cwd: "/Users/kris/code/boss",
+          },
+          {
+            itemType: "SKILLS",
+            description: "Copy skill folders from /Users/kris/.claude/skills to /Users/kris/.agents/skills.",
+            cwd: null,
+          },
+          {
+            itemType: "MCP_SERVER_CONFIG",
+            description: "Migrate server config with token sk-secret-should-not-leak",
+            cwd: "/Users/kris/code/boss",
+          },
+        ],
+      },
+    });
+    return;
+  }
+
   if (message.method === "thread/resume") {
     send({
       id: message.id,