memoryrouter-codex 1.8.0 → 1.8.2

package/README.md

@@ -34,7 +34,7 @@ MemoryRouter is the **cross-machine, cross-tool, team-shareable, and auditable**
 - Node.js 18 or newer.
 - **Codex 0.145.0 or newer** for the complete lifecycle-hook integration. Version 0.146.0 was tested directly.
 - Local Codex CLI, ChatGPT desktop app's local Codex host, and Codex IDE extension share `config.toml` MCP configuration.
-- Hooks must be trusted once: Codex app **Settings > Hooks**, or `/hooks` in the CLI. OAuth (`mcp_tool`) hooks need a Codex build with MCP tool hooks (the current app and CLI 0.166 have them).
+- Hooks must be trusted once: in the Codex app open a **New chat**, click the hooks icon next to **Ask for approval** in the message box, then **Allow all**; in the CLI, `/hooks`. OAuth (`mcp_tool`) hooks need a Codex build with MCP tool hooks (the current app and CLI 0.166 have them).
 - Project `.codex` config is loaded only for trusted projects.
 - ChatGPT web does **not** read a laptop's `~/.codex/config.toml` or local hooks. Use MemoryRouter's hosted plugin/connector surface there.
 - Codex cloud environments do not automatically inherit host-local user config or secrets. A project-scope install can travel with a repository, but the environment still needs Node, project trust, package/network availability for the stdio fallback, and `MEMORYROUTER_API_KEY` for hooks.
@@ -48,9 +48,9 @@ There is no dependency on the obsolete `experimental_use_rmcp_client` setting in
 1. Add the server in the app: **Settings > Plugins > Add > Add MCP server**, Type **Streamable HTTP**, Name `memoryrouter`, URL `https://mcp.memoryrouter.ai/mcp`, **Save**, then **Authenticate** and sign in (or create an account) in the browser tab that opens.
 2. In a Codex chat, paste:
 
-   > Run `npx -y memoryrouter-codex@latest init` with network access, then tell me to trust the MemoryRouter hooks in Settings > Hooks.
+   > Run `npx -y memoryrouter-codex@latest init` with network access, then tell me to trust the MemoryRouter hooks.
 
-   Then trust the three MemoryRouter hooks in **Settings > Hooks** and open a **New chat**.
+   Approve the internet access Codex asks for. Then open a **New chat**, click the hooks icon next to **Ask for approval** in the message box, and choose **Allow all** for the three MemoryRouter hooks (Recalling MemoryRouter context, Searching MemoryRouter, Saving to MemoryRouter).
 
 `init` keeps the server the app added (and its sign-in), adds the three `mcp_tool` hooks to `~/.codex/hooks.json` and the MemoryRouter guidance to `~/.codex/AGENTS.md`. The Codex CLI and IDE extension on the same Mac share all of it.
 

package/bin/cli.cjs

@@ -134,7 +134,7 @@ async function main() {
       process.stdout.write('\nAutomatic memory: before every prompt Codex searches your vault and adds what it finds as context; after every turn it saves your message and its final response (never tool calls, tool output or intermediate steps). No API key needed.\n');
       process.stdout.write('\nNext:\n');
       if (!result.adoptedServer) process.stdout.write('  1. Sign in: Codex app Settings > Plugins > memoryrouter > Authenticate (or run: codex mcp login memoryrouter)\n');
-      process.stdout.write(`  ${result.adoptedServer ? '1' : '2'}. Trust the MemoryRouter hooks once: Codex app Settings > Hooks (or /hooks in the CLI)\n`);
+      process.stdout.write(`  ${result.adoptedServer ? '1' : '2'}. Trust the MemoryRouter hooks once: Codex app: open a New chat, click the hooks icon next to "Ask for approval", Allow all (CLI: /hooks)\n`);
       process.stdout.write(`  ${result.adoptedServer ? '2' : '3'}. Start a New chat\n`);
     } else if (result.auth === 'oauth') {
       const pick = binding && binding.vault ? ` and select the vault ${vaultLabel(binding)} (the one your hooks use)` : '';

package/lib/installer.cjs

@@ -117,10 +117,19 @@ function init(options = {}) {
     agentsFile: options.agents === false ? null : layout.agentsFile,
     runtimeDir: layout.runtimeDir,
   };
-  const manifestDir = path.join(dataHome(options.env), 'installations');
-  fs.mkdirSync(manifestDir, { recursive: true, mode: 0o700 });
-  const manifestName = Buffer.from(`${layout.scope}:${layout.root}`).toString('base64url');
-  fs.writeFileSync(path.join(manifestDir, `${manifestName}.json`), `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o600 });
+  // The manifest is bookkeeping only (nothing reads it to run hooks). Inside
+  // the Codex app's sandbox, writes outside CODEX_HOME need an extra approval,
+  // so a blocked write must never fail an otherwise complete install.
+  let manifestWritten = true;
+  try {
+    const manifestDir = path.join(dataHome(options.env), 'installations');
+    fs.mkdirSync(manifestDir, { recursive: true, mode: 0o700 });
+    const manifestName = Buffer.from(`${layout.scope}:${layout.root}`).toString('base64url');
+    fs.writeFileSync(path.join(manifestDir, `${manifestName}.json`), `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o600 });
+  } catch (error) {
+    if (options.apiKey) throw error;
+    manifestWritten = false;
+  }
   return {
     layout,
     auth,
@@ -128,6 +137,7 @@ function init(options = {}) {
     serverName,
     adoptedServer,
     results,
+    manifestWritten,
     automaticMemory: options.hooks !== false && (hookMode === 'mcp' || Boolean(options.apiKey || getApiKey(env, loadConfig(options.env)))),
     keySource: options.apiKey ? 'codex-config' : apiKeySource(env, loadConfig(options.env)),
   };
@@ -223,7 +233,7 @@ async function doctor(options = {}) {
     ? Object.values(mcpManagedGroups()).flat().flatMap(group => group.hooks || []).length
     : Object.values(managedGroups(layout.runtimeDir, layout.scope)).flat().flatMap(group => group.hooks || []).length;
   addCheck(checks, 'hooks', owned.length === expectedOwned ? 'pass' : 'error', owned.length
-    ? `${owned.length} of ${expectedOwned} managed lifecycle hooks found${mcpHooks.length ? ' (over the signed-in MCP connection, no API key needed)' : ''}. Trust them once in Codex: app Settings > Hooks, or /hooks in the CLI.`
+    ? `${owned.length} of ${expectedOwned} managed lifecycle hooks found${mcpHooks.length ? ' (over the signed-in MCP connection, no API key needed)' : ''}. Trust them once: Codex app New chat > hooks icon by "Ask for approval" > Allow all; CLI: /hooks.`
     : 'Managed lifecycle hooks are missing or hooks.json is invalid.');
   addCheck(checks, 'agents', agentsText.includes(AGENTS_START) ? 'pass' : 'warn', agentsText.includes(AGENTS_START) ? 'Managed AGENTS.md guidance is present.' : 'Managed AGENTS.md guidance is missing.');
 

package/lib/managed.cjs

@@ -151,9 +151,9 @@ function uninstallToml(file) {
 
 function agentsBlock(options = {}) {
   const automatic = options.hookMode === 'mcp'
-    ? '- Automatic hooks (over the signed-in MemoryRouter connection) search the vault before each prompt and add what they find as context, then save each completed turn: the user\'s message and your final response only, never tool calls, tool output or intermediate steps.\n'
+    ? '- Automatic hooks (over the signed-in MemoryRouter connection) search the vault before each prompt and add what they find as context ("MemoryRouter recalled this for the current message"), then save each completed turn: the user\'s message and your final response only, never tool calls, tool output or intermediate steps.\n'
     : '- Automatic hooks search the vault before each prompt and save each completed turn (the user\'s message and your final response only) when a MemoryRouter API key is configured.\n';
-  return `## MemoryRouter memory\n\n- MemoryRouter is the durable cross-machine, cross-tool, and team/auditable memory layer. Codex native Memories may remain enabled as the local personal recall layer.\n${automatic}- For explicit recall, search MemoryRouter before answering questions about prior decisions, preferences, incidents, or unfinished work. Depending on auth mode, the tool is named \`search_memories\` or \`memory_search\`.\n- Store only concise, durable decisions, preferences, facts, and incident outcomes. Depending on auth mode, use \`store_memory\` or \`memory_store\`. Do not duplicate a completed turn that hooks already captured.\n- Keep and cite returned \`mrh_...\` handles when a specific memory must be referenced later.\n- Project scope is derived from the canonical git remote when available, so worktrees and machines share identity without uploading local paths. It is the same project memory Claude Code uses through memoryrouter-claude, so decisions made in either agent are available in both.\n- If MemoryRouter is offline, continue the task without memory; never block work on recall or capture.`;
+  return `## MemoryRouter memory\n\n- MemoryRouter is the durable cross-machine, cross-tool, and team/auditable memory layer. Codex native Memories may remain enabled as the local personal recall layer.\n${automatic}- If the recalled context already answers the question, answer from it directly; do not search again. Call MemoryRouter search only when nothing relevant was recalled or you need more detail about prior decisions, preferences, incidents, or unfinished work. Depending on auth mode, the tool is named \`search_memories\` or \`memory_search\`.\n- Store only concise, durable decisions, preferences, facts, and incident outcomes. Depending on auth mode, use \`store_memory\` or \`memory_store\`. Do not duplicate a completed turn that hooks already captured.\n- Keep and cite returned \`mrh_...\` handles when a specific memory must be referenced later.\n- Project scope is derived from the canonical git remote when available, so worktrees and machines share identity without uploading local paths. It is the same project memory Claude Code uses through memoryrouter-claude, so decisions made in either agent are available in both.\n- If MemoryRouter is offline, continue the task without memory; never block work on recall or capture.`;
 }
 
 function installAgents(file, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memoryrouter-codex",
-  "version": "1.8.0",
+  "version": "1.8.2",
   "description": "Automatic MemoryRouter memory for OpenAI Codex: one vault shared by every session, repo and tool, including Claude Code",
   "license": "MIT",
   "type": "commonjs",

package/runtime/constants.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-const INTEGRATION_VERSION = '1.8.0';
+const INTEGRATION_VERSION = '1.8.2';
 const RUNTIME_SCHEMA_VERSION = 1;
 const API_BASE = 'https://api.memoryrouter.ai';
 const MCP_ENDPOINT = 'https://mcp.memoryrouter.ai/mcp';