codex-notify 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d3b7dc4b1f9edda880bd5f39324dbb56c70812bc9ebe1d37578d0915e4313a47
-  data.tar.gz: fb7e1ee08765f2a617d56c5d4fa2151fe8816b305051928ba5f197c3f66df2d9
+  metadata.gz: a9f20095aeedc816a39f3c4cafe9fffeabb35b56783d0e4c35ccc6362c3320b7
+  data.tar.gz: e8ce3c1e7a9035451d705fef8c8d6a3a2f28bcb4a90df0cfe3c58dce086368d1
 SHA512:
-  metadata.gz: fd8a7f1b1af5e6c08f954544718b0e340edbc6433eab906678c48079950ac9df2a1d893f7d0e1092f724637b93fa3a22ff250309974640b66f07cd6c602649b6
-  data.tar.gz: a6c35b4741731a1f6694df415d89d1fccd51ed228ce0eaa8651ec896fcf51607144ab8d545035d10660e27a178035825c3c6c5ebff8e5d0669953eb226e290c8
+  metadata.gz: b74d3ea07ae06575e8e95f3cffba1b7add24f8565f7ff768ee0a75b5ba72b49a621a78262bca324a9452fa20a61ac3f1876d50d194b2d4ebfe44ec418a9cbd99
+  data.tar.gz: 8f70b6c4e10bba04b8077cacae2fd14779e563af69f8f1c5a369edae7a324b1453c33fb94011c99e2c961ba8913c89e9f3910a536f13efb8ad8c9ea59400c94b

data/CHANGELOG.md

@@ -3,6 +3,27 @@
 All notable changes to codex-notify are documented in this file. Releases from
 1.0.0 onward follow [Semantic Versioning](https://semver.org/).
 
+## [1.0.1] - 2026-10-28
+
+### Fixed
+
+- Suppress known internal Codex task-title and Composer Predictions requests
+  and their responses in Hook normal mode and log-tail mode, reducing internal
+  activity sent to Slack while preserving ordinary prompts and quoted text.
+- Preserve existing Hook conversation threads when suppressing these internal
+  requests, and resume notifications on the next ordinary user prompt.
+- Carry initial internal-prompt suppression to the first identified log
+  session, including when the request is not repeated in the log.
+
+### Development and security
+
+- Add dependency audits before CI tests and package verification, daily and
+  manually triggered audits, and GitHub Dependency Review on pull requests.
+- Audit locked gems and the recorded Bundler version, require fresh advisory
+  data, and prevent project advisory ignores from hiding known vulnerabilities.
+- Update the preferred development Ruby and CI/release jobs to Ruby 4.0.7.
+  Ruby 3.4 or newer remains supported; no configuration migration is required.
+
 ## [1.0.0] - 2026-08-13
 
 ### Added
@@ -47,4 +68,5 @@ All notable changes to codex-notify are documented in this file. Releases from
   `command -v codex-notify-hook`, then review and trust the changed Hook
   definition in Codex.
 
+[1.0.1]: https://github.com/koichiro/codex-notify/releases/tag/v1.0.1
 [1.0.0]: https://github.com/koichiro/codex-notify/releases/tag/v1.0.0

data/README.md

@@ -675,6 +675,41 @@ Notes:
 
 Hook mode does not require `--no-alt-screen`, because it does not depend on session-log tailing.
 
+### Internal title-generation and composer-prediction notifications
+
+Hook normal mode and log-tail mode suppress the known Codex task-title request
+and subsequent events from that internal session (Hook: the final response;
+log-tail: responses and tool events). Detection requires the complete known
+instruction envelope followed by `User prompt:` and a non-empty prompt. Ordinary
+title requests, JSON responses containing `title`, and instructions quoted with
+an introduction, block quote, or code fence remain eligible for notification.
+An exact copy of the internal request is indistinguishable from that request;
+changed or unknown internal templates are not suppressed automatically.
+
+Hook normal mode and log-tail mode also suppress the known Codex Composer
+Predictions request, which generates a suggested next user message, and
+subsequent internal responses.
+Detection requires the complete known instruction template, including its JSON
+schema, with whitespace normalized. Ordinary requests for suggestions, responses
+containing `suggestion`, and templates quoted with an introduction, block quote,
+or code fence remain eligible for notification. Changed or unknown prediction
+templates are not suppressed automatically, and an exact copy is
+indistinguishable from the internal request.
+
+Hook suppression persists across invocations and resume events. The next regular
+prompt clears it; startup/clear events retain their existing reset behavior.
+Suppressing title generation or composer prediction preserves an existing
+conversation thread. Hook debug mode retains its existing diagnostic visibility, including these internal
+requests and responses. Log-tail suppression lasts for the current monitor run
+and applies even with tool notifications enabled; the monitoring-start message
+is unchanged. An internal initial prompt supplied with `--prompt` also suppresses
+responses after the first log session ID becomes available, until an ordinary
+user event in that session clears suppression. Starting a monitor after the
+internal prompt cannot classify its response from JSON shape alone.
+
+This filter limits unnecessary outbound content. Existing secret redaction
+still applies immediately before Slack API calls.
+
 ## Development
 
 Install development dependencies in a source checkout:
@@ -695,7 +730,9 @@ are checkout development commands.
 
 The test suite uses `minitest`, runs through `rake`, and enforces 90% line coverage for files under `lib/`.
 
-Ruby 3.4 or newer is supported. CI covers the minimum supported 3.4 series and the 4.0 series used by the project's `.ruby-version`.
+Ruby 3.4 or newer is supported. The preferred development version in
+`.ruby-version` is Ruby 4.0.7. CI covers the minimum supported 3.4 series and
+Ruby 4.0.7; release jobs also use Ruby 4.0.7.
 
 Run either executable from a source checkout through Bundler:
 
@@ -709,6 +746,42 @@ These commands run the checkout code. In contrast, unqualified
 Ruby environment. Checkout Bundler and `.ruby-version` behavior is not a
 runtime requirement of the installed commands.
 
+### Dependency security checks
+
+Dependabot checks Bundler and GitHub Actions updates weekly. CI also runs a
+dependency audit on every push and pull request before tests and package
+verification. The audit checks all gems in `Gemfile.lock`, including development
+and transitive dependencies, plus the Bundler version recorded under
+`BUNDLED WITH`, against a freshly updated Ruby Advisory Database:
+
+```bash
+bundle exec ruby script/dependency_audit.rb
+```
+
+The same audit runs daily at 09:17 Japan time (00:17 UTC) on the default branch
+and can be started manually from Actions → Dependency audit → Run workflow.
+Scheduled runs begin after the workflow is merged into the default branch.
+Known vulnerabilities, insecure gem sources, and advisory database update
+failures fail the audit rather than being ignored. Local audits require network
+access; the test suite itself remains offline. The audit script requires an
+existing advisory database to be a Git repository and refresh successfully.
+Unlike stock `bundle-audit check --update`, which may warn and continue with
+stale data when the database is not a Git repository, this script fails in that
+case. A missing database is downloaded before scanning. A missing `BUNDLED WITH`
+version also fails the audit instead of silently skipping Bundler. Advisory
+`ignore` entries in a project's `.bundler-audit.yml` do not suppress findings
+for locked gems or Bundler in this audit.
+
+Pull requests additionally run GitHub's Dependency Review Action against the
+GitHub Advisory Database, which also powers Dependabot alerts. Newly introduced
+known vulnerabilities of low severity or higher fail the review for runtime,
+development, and unknown dependency scopes. Results appear in Actions logs and
+job summaries. These checks supplement Dependabot; they do not change repository
+alert or automatic security-update settings. Dependency Review requires the
+repository's Dependency graph to be enabled under Settings → Advanced Security;
+enabling Dependabot alerts also enables the graph. To require successful checks
+before merging, configure branch protection or repository rulesets separately.
+
 ### Gem packaging
 
 The gem version is defined once as `CodexNotify::VERSION`. The initial package

data/lib/codex_notify/hook_runner.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require_relative 'hook_config'
+require_relative 'internal_task'
 require_relative 'hook_store'
 require_relative 'hook_formatter'
 require_relative 'hook_thread_publisher'
@@ -89,6 +90,12 @@ module CodexNotify
     def handle_user_prompt_submit(event)
       prompt = event.prompt
       session_id = event.session_id
+      reason = InternalTask.suppression_reason(prompt) if normal?
+      if reason
+        @store.suppress_session(session_id, reason, preserve_thread: true)
+        return
+      end
+
       if normal? && internal_ambient_suggestions_prompt?(prompt)
         @store.suppress_session(session_id, 'internal_ambient_suggestions')
         return

data/lib/codex_notify/hook_store.rb

@@ -28,11 +28,13 @@ module CodexNotify
       end
     end
 
-    def suppress_session(session_id, reason)
+    def suppress_session(session_id, reason, preserve_thread: false)
       update_state do |data|
         key = session_id.to_s
-        data['threads'].delete(key)
-        data['generations'][key] = data['generations'].fetch(key, 0).to_i + 1
+        unless preserve_thread
+          data['threads'].delete(key)
+          data['generations'][key] = data['generations'].fetch(key, 0).to_i + 1
+        end
         data['suppressed_sessions'][key] = {
           'reason' => reason.to_s,
           'suppressed_at' => Time.now.utc.iso8601

data/lib/codex_notify/internal_task.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module CodexNotify
+  module InternalTask
+    module_function
+
+    # Match the complete known envelope, not title-related words or JSON output.
+    TITLE_INSTRUCTIONS = <<~TEXT.split.join(' ').freeze
+      You are a helpful assistant. You will be presented with a user prompt, and your job is to provide a short title for a task that will be created from that prompt.
+      The task usually has to do with coding work, such as fixing a bug, changing a feature, or answering a question about a codebase.
+      Generate a concise UI title of at most 36 characters.
+      Use a single line of plain text only.
+      Do not include quotes, markdown, formatting characters, or trailing punctuation.
+      If the prompt includes a ticket reference, include it verbatim.
+      Prefer an imperative verb when the user is asking for a change.
+      Do not answer the user or attempt the task.
+    TEXT
+
+    COMPOSER_PREDICTION_INSTRUCTIONS = <<~TEXT.split.join(' ').freeze
+      This is an app-generated request for a suggested next user message. The user did not write this message.
+
+      Your suggestion will appear in the user's empty message composer. They can accept it, edit it, or ignore it; it will not be sent automatically.
+
+      Predict the single message this user is most likely to type next from the visible conversation. Use the whole conversation to understand their current intent and the latest exchange. Choose the action and specific object that best continue that intent, rather than a generally useful follow-up. Express its core naturally in the user's voice, keeping the requirements needed to retain its meaning. Choose the strongest grounded move even if several continuations are possible; uncertainty about exact wording or incidental details is not a reason to return null. Use null only when the conversation offers no grounded next move at all.
+
+      Set suggestion to exactly one natural user message, one line, at most 240 characters, or null. No alternatives or explanation.
+
+      Return only JSON matching this schema: {"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"suggestion":{"type":["string","null"]}},"required":["suggestion"],"additionalProperties":false}.
+    TEXT
+
+    def suppression_reason(prompt)
+      return 'internal_title_generation' if title_prompt?(prompt)
+      return 'internal_composer_prediction' if composer_prediction_prompt?(prompt)
+
+      nil
+    end
+
+    def composer_prediction_prompt?(prompt)
+      prompt.to_s.split.join(' ') == COMPOSER_PREDICTION_INSTRUCTIONS
+    end
+
+    def title_prompt?(prompt)
+      instructions, separator, user_prompt = prompt.to_s.strip.partition(/\r?\n\s*User prompt:\s*\r?\n/)
+      !separator.empty? && !user_prompt.strip.empty? && instructions.split.join(' ') == TITLE_INSTRUCTIONS
+    end
+  end
+end

data/lib/codex_notify/stream_processor.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'json'
+require_relative 'internal_task'
 
 module CodexNotify
   module StreamProcessor
@@ -8,6 +9,13 @@ module CodexNotify
 
     def process_codex_log_stream(stream, token:, channel:, root_message:, initial_prompt: nil, user_name: 'user', include_tools: false,
                                  throttle_sec: 0.0, post_func:, sleep_func: Kernel.method(:sleep), publisher: nil)
+      suppressed_sessions = {}
+      if InternalTask.suppression_reason(initial_prompt)
+        suppressed_sessions['__default__'] = true
+        initial_prompt = nil
+      end
+      stream = visible_log_events(stream, suppressed_sessions)
+
       if publisher
         return process_durable_stream(
           stream, root_message:, initial_prompt:, user_name:, include_tools:, publisher:
@@ -43,15 +51,7 @@ module CodexNotify
         thread_ts_by_session['__default__'] = post_root.call(message)
       end
 
-      stream.each do |raw|
-        line = raw.strip
-        next if line.empty?
-
-        event = JSON.parse(line)
-        session_id = CodexNotify::LogEventParser.extract_session_id(event) || '__default__'
-        extracted_events = CodexNotify::LogEventParser.extract_events(event)
-        next if extracted_events.empty?
-
+      stream.each do |session_id, extracted_events|
         extracted_events.each do |kind, text, part_type|
           next if text.empty?
           next if part_type == 'tool' && !include_tools
@@ -78,8 +78,6 @@ module CodexNotify
 
           post_message.call(message, thread_ts)
         end
-      rescue JSON::ParserError
-        next
       end
 
       0
@@ -97,15 +95,7 @@ module CodexNotify
         return 1 unless drain_succeeded?(publisher)
       end
 
-      stream.each do |raw|
-        line = raw.strip
-        next if line.empty?
-
-        event = JSON.parse(line)
-        session_id = CodexNotify::LogEventParser.extract_session_id(event) || '__default__'
-        extracted_events = CodexNotify::LogEventParser.extract_events(event)
-        next if extracted_events.empty?
-
+      stream.each do |session_id, extracted_events|
         extracted_events.each do |kind, body, part_type|
           next if body.empty?
           next if part_type == 'tool' && !include_tools
@@ -126,13 +116,35 @@ module CodexNotify
           end
           return 1 unless drain_succeeded?(publisher)
         end
-      rescue JSON::ParserError
-        next
       end
 
       0
     end
 
+    def visible_log_events(stream, suppressed_sessions)
+      Enumerator.new do |output|
+        current_session = '__default__'
+        stream.each do |raw|
+          begin
+            event = JSON.parse(raw)
+          rescue JSON::ParserError
+            next
+          end
+          session_id = LogEventParser.extract_session_id(event)
+          if session_id && current_session == '__default__' && suppressed_sessions.key?('__default__')
+            # Bind anonymous suppression to the first session, not every later ID.
+            suppressed_sessions[session_id] = suppressed_sessions.delete('__default__')
+          end
+          current_session = session_id || current_session
+          events = LogEventParser.extract_events(event).reject do |kind, text, _type|
+            suppressed_sessions[current_session] = InternalTask.suppression_reason(text) if kind == 'user'
+            suppressed_sessions[current_session]
+          end
+          output << [session_id || '__default__', events] unless events.empty?
+        end
+      end
+    end
+
     def drain_succeeded?(publisher)
       result = publisher.drain
       result.failed.empty? && result.needs_review.empty?

data/lib/codex_notify/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module CodexNotify
-  VERSION = '1.0.0'
+  VERSION = '1.0.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: codex-notify
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Koichiro Ohba
@@ -56,6 +56,7 @@ files:
 - lib/codex_notify/hook_runner.rb
 - lib/codex_notify/hook_store.rb
 - lib/codex_notify/hook_thread_publisher.rb
+- lib/codex_notify/internal_task.rb
 - lib/codex_notify/log_event_parser.rb
 - lib/codex_notify/message_formatter.rb
 - lib/codex_notify/outbox_commands.rb
@@ -71,9 +72,9 @@ homepage: https://github.com/koichiro/codex-notify
 licenses:
 - MIT
 metadata:
-  source_code_uri: https://github.com/koichiro/codex-notify/tree/v1.0.0
+  source_code_uri: https://github.com/koichiro/codex-notify/tree/v1.0.1
   bug_tracker_uri: https://github.com/koichiro/codex-notify/issues
-  changelog_uri: https://github.com/koichiro/codex-notify/blob/v1.0.0/CHANGELOG.md
+  changelog_uri: https://github.com/koichiro/codex-notify/blob/v1.0.1/CHANGELOG.md
   documentation_uri: https://github.com/koichiro/codex-notify#readme
   rubygems_mfa_required: 'true'
 rdoc_options: []
@@ -90,7 +91,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.16
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Send compact Codex activity notifications to Slack
 test_files: []