feat: surface codex app server governance summaries

tests/local-agent-codex-app-server-runner.test.mjs

@@ -36,6 +36,33 @@ test("codex app-server discovery includes governance and MCP summaries without l
   assert.equal(metadata.mcpServers[0].name, "github");
   assert.equal(metadata.mcpServers[0].toolCount, 2);
   assert.equal(metadata.mcpServers[0].authStatus, "oAuth");
+  assert.deepEqual(metadata.accountSummary, {
+    signedIn: true,
+    authMode: "chatgpt",
+    planType: "pro",
+    requiresOpenaiAuth: true,
+  });
+  assert.equal(metadata.rateLimitSummary.bucketCount, 2);
+  assert.equal(metadata.rateLimitSummary.maxUsedPercent, 42);
+  assert.equal(metadata.rateLimitSummary.reached, false);
+  assert.deepEqual(metadata.appConfigSummary, {
+    appCount: 2,
+    enabledAppCount: 1,
+    defaultEnabled: true,
+    destructiveEnabled: false,
+    openWorldEnabled: false,
+  });
+  assert.deepEqual(metadata.configRequirements, {
+    managed: true,
+    requirementCount: 2,
+    warningCount: 1,
+  });
+  assert.deepEqual(metadata.externalAgentMigration, {
+    itemCount: 3,
+    homeItemCount: 1,
+    projectItemCount: 2,
+    itemTypes: ["AGENTS_MD", "MCP_SERVER_CONFIG", "SKILLS"],
+  });
 
   const serialized = JSON.stringify(metadata);
   assert.equal(serialized.includes("sk-secret-should-not-leak"), false);
@@ -43,6 +70,9 @@ test("codex app-server discovery includes governance and MCP summaries without l
   assert.equal(serialized.includes("id_ed25519"), false);
   assert.equal(serialized.includes("filesystem"), false);
   assert.equal(serialized.includes("resources"), false);
+  assert.equal(serialized.includes("private-user@example.com"), false);
+  assert.equal(serialized.includes("CLAUDE.md"), false);
+  assert.equal(serialized.includes("AGENTS.md"), false);
 });
 
 function encodeWsTextFrame(value) {