@bitkyc08/opencodex 2.6.21 → 2.6.22

package/README.ko.md

@@ -202,7 +202,7 @@ ocx login <xai|anthropic|kimi> # OAuth 로그인
 ocx logout <provider>          # 저장된 로그인 정보 삭제
 ocx gui                        # 웹 대시보드 열기
 ocx codex-shim install         # codex 실행 시 `ocx ensure` 실행
-ocx service <install|start|stop|status|uninstall>   # 백그라운드 서비스 (launchd/systemd/schtasks)
+ocx service [install|start|stop|status|uninstall]   # 백그라운드 서비스 설치/갱신/시작
 ocx update [--tag preview]     # opencodex 업데이트; preview 설치는 @preview 유지
 ```
 
@@ -210,7 +210,7 @@ ocx update [--tag preview]     # opencodex 업데이트; preview 설치는 @prev
 
 opencodex에는 프록시를 자동 시작하는 두 가지 방법이 있습니다:
 
-| | `ocx service install` | `ocx codex-shim install` |
+| | `ocx service` / `ocx service install` | `ocx codex-shim install` |
 |---|---|---|
 | **방식** | OS 서비스 관리자 (launchd / systemd / schtasks) | `codex` 스크립트 런처를 래핑하며 실제 `codex.exe`는 건드리지 않음 |
 | **시점** | 로그인 후 항상 실행 | 온디맨드 — `codex` 실행 시 `ocx ensure` 실행 |

package/README.md

@@ -186,7 +186,7 @@ next Codex session. opencodex keeps two separate behaviors:
 | Kimi (Moonshot) | `openai-chat` | oauth / key |
 | Google Gemini | `google` | key |
 | Azure OpenAI | `azure-openai` | key |
-| Cursor (experimental) | `cursor` | dashboard/local config; live transport + native exec |
+| Cursor (experimental) | `cursor` | dashboard/local config; live transport; unsafe native local exec is opt-in |
 | Ollama Cloud + 17-provider catalog | `openai-chat` | key |
 | Ollama / vLLM / LM Studio (local) | `openai-chat` | key (usually blank) |
 | Any OpenAI-compatible endpoint | `openai-chat` | key |
@@ -195,11 +195,14 @@ Plus DeepSeek, Groq, OpenRouter, Together, Fireworks, Cerebras, Mistral, Hugging
 
 Cursor support is a staged experimental bridge: it appears in `ocx init` and the dashboard Add
 Provider picker as a local config with Cursor's static public model catalog. Live
-HTTP/2 transport is enabled when a Cursor access token is configured, and Cursor native
-read/write/delete/ls/grep/shell/fetch requests are handled by opencodex. MCP, screen recording,
-and computer-use are exposed through executor hooks; when no local executor is configured,
-opencodex returns typed no-executor results instead of policy-blocking the request. Cursor OAuth
-and live model discovery remain separate future phases.
+HTTP/2 transport is enabled when a Cursor access token is configured. Cursor server-driven native
+read/write/delete/ls/grep/shell/fetch execution is disabled by default because it bypasses Codex's
+approval and sandbox path; set `unsafeAllowNativeLocalExec: true` only for trusted local
+experiments. The older `allowNativeLocalExec` spelling is accepted as a deprecated transition
+alias.
+MCP, screen recording, and computer-use are exposed through executor hooks; when no local executor
+is configured, opencodex returns typed no-executor results instead of policy-blocking the request.
+Cursor OAuth and live model discovery are enabled for the experimental Cursor adapter.
 
 ## CLI
 
@@ -213,10 +216,10 @@ ocx ensure                     # start if needed + refresh Codex config/cache
 ocx sync                       # refresh models + re-inject into Codex
 ocx codex-shim install         # run `ocx ensure` whenever `codex` is launched
 ocx status                     # is the proxy running?
-ocx login <xai|anthropic|kimi> # OAuth login
+ocx login <provider>          # OAuth login (xai, anthropic, kimi, cursor, ...)
 ocx logout <provider>          # remove a stored login
 ocx gui                        # open the web dashboard
-ocx service <install|start|stop|status|uninstall>   # background service (launchd/systemd/schtasks)
+ocx service [install|start|stop|status|uninstall]   # install/update/start background service
 ocx update [--tag preview]     # update opencodex; preview installs stay on @preview
 ```
 
@@ -224,7 +227,7 @@ ocx update [--tag preview]     # update opencodex; preview installs stay on @pre
 
 opencodex has two ways to auto-start the proxy:
 
-| | `ocx service install` | `ocx codex-shim install` |
+| | `ocx service` / `ocx service install` | `ocx codex-shim install` |
 |---|---|---|
 | **How** | OS service manager (launchd / systemd / schtasks) | Wraps script launchers for `codex`; real `codex.exe` is left untouched |
 | **When** | Always running after login | On-demand — runs `ocx ensure` when `codex` is launched |

package/README.zh-CN.md

@@ -197,7 +197,7 @@ ocx login <xai|anthropic|kimi> # OAuth 登录
 ocx logout <provider>          # 移除已保存的登录
 ocx gui                        # 打开 Web 仪表盘
 ocx codex-shim install         # 运行 codex 时自动启动代理
-ocx service <install|start|stop|status|uninstall>   # 后台服务（launchd/systemd/schtasks）
+ocx service [install|start|stop|status|uninstall]   # 安装/更新/启动后台服务
 ocx update [--tag preview]     # 更新 opencodex；preview 安装保持 @preview
 ```
 
@@ -205,7 +205,7 @@ ocx update [--tag preview]     # 更新 opencodex；preview 安装保持 @previe
 
 opencodex 提供两种自动启动代理的方式：
 
-| | `ocx service install` | `ocx codex-shim install` |
+| | `ocx service` / `ocx service install` | `ocx codex-shim install` |
 |---|---|---|
 | **方式** | OS 服务管理器（launchd / systemd / schtasks） | 包装 `codex` 脚本启动器；不会改动真实 `codex.exe` |
 | **时机** | 登录后始终运行 | 按需 — 仅在运行 `codex` 时启动 |