fix(codex): add safe plugin registration repair

src-tauri/src/commands/codex_plugin.rs

@@ -0,0 +1,16 @@
+use crate::services::codex_plugin_registry::RepairableCodexPlugin;
+
+/// Detect enabled Codex plugins whose cached manifest is not registered in the
+/// personal marketplace. Detection is read-only and never enables a plugin.
+#[tauri::command]
+pub fn detect_codex_plugin_registration() -> Result<Vec<RepairableCodexPlugin>, String> {
+    crate::services::codex_plugin_registry::detect_codex_plugin_registration()
+}
+
+/// Repair one user-confirmed Codex plugin marketplace entry.
+#[tauri::command]
+pub fn repair_codex_plugin_registration(
+    plugin_id: String,
+) -> Result<RepairableCodexPlugin, String> {
+    crate::services::codex_plugin_registry::repair_codex_plugin_registration(&plugin_id)
+}

src-tauri/src/commands/mod.rs

@@ -3,6 +3,7 @@
 mod auth;
 mod balance;
 mod codex_oauth;
+mod codex_plugin;
 mod coding_plan;
 mod config;
 mod copilot;
@@ -42,6 +43,7 @@ mod workspace;
 pub use auth::*;
 pub use balance::*;
 pub use codex_oauth::*;
+pub use codex_plugin::*;
 pub use coding_plan::*;
 pub use config::*;
 pub use copilot::*;

src-tauri/src/lib.rs

@@ -1538,6 +1538,8 @@ pub fn run() {
             commands::read_claude_plugin_config,
             commands::apply_claude_plugin_config,
             commands::is_claude_plugin_applied,
+            commands::detect_codex_plugin_registration,
+            commands::repair_codex_plugin_registration,
             commands::apply_claude_onboarding_skip,
             commands::clear_claude_onboarding_skip,
             // Claude MCP management