Skip to content

fix(codex): shrink the SessionStart gateway banner to one line #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
johnnyfish wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(codex): shrink the SessionStart gateway banner to one line #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 1 addition & 5 deletions plugins/codex/hooks/session-start.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,11 +133,7 @@ function printSetupRequired() {
}
function printActiveMessage() {
process.stdout.write(
[
"OneCLI Gateway active. Call external APIs directly (plain `curl`/`gh`); requests are routed through the gateway and credentials are injected automatically. Never add Authorization headers.",
"On errors: `connect_url` \u2192 show it to the user and retry after they connect; `blocked_by_policy` \u2192 report the rule, do not circumvent; `rate_limited` \u2192 wait `retry_after_secs`. Details: onecli-gateway skill.",
""
].join("\n")
"OneCLI Gateway active \u2014 call external APIs directly with plain curl/gh (no auth headers); load the onecli-gateway skill for details.\n"
);
}
async function main() {
Expand Down
19 changes: 9 additions & 10 deletions src/codex/session-start.mts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,17 +60,16 @@ function printSetupRequired(): void {
}

function printActiveMessage(): void {
// Codex renders this context verbatim in the thread, so keep it terse.
// Detailed behavior (manual sourcing, error shapes) lives in the
// onecli-gateway skill. Do NOT suggest sourcing env.sh here: agents that
// prefix commands themselves bypass the PreToolUse auto-allow rewrite and
// trigger avoidable approval prompts.
// Codex renders hook output verbatim in the thread and has no silent
// model-only channel (unlike Claude's additionalContext), so this line is
// unavoidably user-visible. Keep it to ONE terse line: signal the gateway
// is active and point at the onecli-gateway skill, which carries the full
// rules (no auth headers, curl-not-MCP, error shapes) and is loaded on this
// cue. Do NOT restate those rules here or suggest sourcing env.sh (agents
// that prefix commands bypass the PreToolUse auto-allow and hit avoidable
// approval prompts).
process.stdout.write(
[
"OneCLI Gateway active. Call external APIs directly (plain `curl`/`gh`); requests are routed through the gateway and credentials are injected automatically. Never add Authorization headers.",
"On errors: `connect_url` → show it to the user and retry after they connect; `blocked_by_policy` → report the rule, do not circumvent; `rate_limited` → wait `retry_after_secs`. Details: onecli-gateway skill.",
"",
].join("\n")
"OneCLI Gateway active — call external APIs directly with plain curl/gh (no auth headers); load the onecli-gateway skill for details.\n"
);
}

Expand Down