oh-my-customcodex 0.4.9 → 0.4.11

package/dist/cli/index.js

@@ -3091,7 +3091,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "0.4.9",
+    version: "0.4.11",
     description: "Batteries-included agent harness on top of GPT Codex + OMX",
     type: "module",
     bin: {

package/dist/index.js

@@ -2180,7 +2180,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "0.4.9",
+  version: "0.4.11",
   description: "Batteries-included agent harness on top of GPT Codex + OMX",
   type: "module",
   bin: {

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "0.4.9",
+  "version": "0.4.11",
   "description": "Batteries-included agent harness on top of GPT Codex + OMX",
   "type": "module",
   "bin": {

package/templates/.claude/agents/mgr-gitnerd.md

@@ -19,6 +19,10 @@ tools:
 permissionMode: bypassPermissions
 ---
 
+## Mandatory Sensitive Compatibility Paths
+
+When a task targets `.claude/**`, `templates/.claude/**`, or other Claude-compatibility mirrors, do not call Write/Edit directly on those paths in unattended automation. Produce the artifact body in `/tmp`, then apply it through the repo-approved sensitive-path script/artifact protocol so Codex-native `.codex/**` work remains autonomous and reviewable.
+
 You are a Git operations specialist following GitHub flow best practices.
 
 ## Capabilities

package/templates/.claude/agents/wiki-curator.md

@@ -14,6 +14,10 @@ memory: project
 permissionMode: bypassPermissions
 ---
 
+## Mandatory Sensitive Compatibility Paths
+
+When a task targets `.claude/**`, `templates/.claude/**`, or other Claude-compatibility mirrors, do not call Write/Edit directly on those paths in unattended automation. Produce the artifact body in `/tmp`, then apply it through the repo-approved sensitive-path script/artifact protocol so Codex-native `.codex/**` work remains autonomous and reviewable.
+
 # Wiki Curator
 
 Dedicated agent for wiki file operations. All wiki/ directory writes go through this agent per R010 delegation rules.

package/templates/.claude/hooks/hooks.json

@@ -499,6 +499,16 @@
           }
         ],
         "description": "Advisory reminder to sync skill counts in 6 locations when a SKILL.md is created/modified (R021)"
+      },
+      {
+        "matcher": "tool == \"Task\" || tool == \"Agent\"",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash .codex/hooks/scripts/auto-dev-token-tracker.sh"
+          }
+        ],
+        "description": "Advisory auto-dev token spend tracking by phase"
       }
     ],
     "Stop": [
@@ -512,6 +522,16 @@
         ],
         "description": "Final console.log audit and session diagnostics before session ends"
       },
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash .codex/hooks/scripts/auto-dev-token-summary.sh"
+          }
+        ],
+        "description": "Print advisory auto-dev token spend summary when available"
+      },
       {
         "matcher": "*",
         "hooks": [

package/templates/.claude/hooks/scripts/auto-dev-token-summary.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# auto-dev token spend summary.
+# Trigger: Stop event.
+# Protocol: stdin pass-through, stderr advisory summary, exit 0.
+
+input=$(cat 2>/dev/null || true)
+trap 'printf "%s" "$input"' EXIT
+
+LOG_FILE="${AUTO_DEV_SPEND_LOG:-/tmp/auto-dev-spend-${PPID}.json}"
+[ -s "$LOG_FILE" ] || exit 0
+
+command -v jq >/dev/null 2>&1 || exit 0
+
+summary=$(jq -s -r '
+  group_by(.phase)
+  | map({
+      phase: .[0].phase,
+      calls: length,
+      tokens_in: (map(.tokens_in) | add),
+      tokens_out: (map(.tokens_out) | add),
+      total: (map(.tokens_in + .tokens_out) | add)
+    })
+  | sort_by(-.total)
+' "$LOG_FILE" 2>/dev/null) || exit 0
+
+[ -z "$summary" ] && exit 0
+[ "$summary" = "[]" ] && exit 0
+
+totals=$(printf "%s" "$summary" | jq -r '
+  {
+    total_calls: (map(.calls) | add),
+    total_in: (map(.tokens_in) | add),
+    total_out: (map(.tokens_out) | add),
+    grand: (map(.total) | add)
+  }
+')
+total_calls=$(printf "%s" "$totals" | jq -r '.total_calls')
+total_in=$(printf "%s" "$totals" | jq -r '.total_in')
+total_out=$(printf "%s" "$totals" | jq -r '.total_out')
+grand=$(printf "%s" "$totals" | jq -r '.grand')
+
+{
+  echo ""
+  echo "=== [auto-dev Token Spend Summary] advisory ==="
+  echo "Source: $LOG_FILE | heuristic: bytes / 4"
+  echo ""
+  printf "| %-32s | %5s | %10s | %10s | %10s |\n" "Phase" "Calls" "Tokens In" "Tokens Out" "Total"
+  printf "| %-32s | %5s | %10s | %10s | %10s |\n" "--------------------------------" "-----" "----------" "----------" "----------"
+  printf "%s" "$summary" | jq -r '.[] | "\(.phase)\t\(.calls)\t\(.tokens_in)\t\(.tokens_out)\t\(.total)"' | \
+    while IFS=$'\t' read -r phase calls tin tout tot; do
+      phase_trunc=$(printf "%s" "$phase" | head -c 32)
+      printf "| %-32s | %5s | %10s | %10s | %10s |\n" "$phase_trunc" "$calls" "$tin" "$tout" "$tot"
+    done
+  printf "| %-32s | %5s | %10s | %10s | %10s |\n" "TOTAL" "$total_calls" "$total_in" "$total_out" "$grand"
+  echo ""
+  echo "Note: Estimates only. Prefer exact runtime usage events when available."
+  echo "================================================"
+  echo ""
+} >&2
+
+exit 0

package/templates/.claude/hooks/scripts/auto-dev-token-tracker.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# auto-dev token spend tracker.
+# Trigger: PostToolUse on Agent/Task during auto-dev pipeline.
+# Protocol: stdin JSON -> append JSONL estimate -> stdout pass-through, exit 0.
+
+input=$(cat)
+trap 'printf "%s" "$input"' EXIT
+
+PIPELINE_STATE="${AUTO_DEV_PIPELINE_STATE:-/tmp/.codex-pipeline-auto-dev-${PPID}.json}"
+[ -f "$PIPELINE_STATE" ] || exit 0
+
+command -v jq >/dev/null 2>&1 || exit 0
+
+LOG_FILE="${AUTO_DEV_SPEND_LOG:-/tmp/auto-dev-spend-${PPID}.json}"
+
+agent_type=$(printf "%s" "$input" | jq -r '.tool_input.subagent_type // .tool_input.agent_type // "unknown"' 2>/dev/null || echo "unknown")
+description=$(printf "%s" "$input" | jq -r '.tool_input.description // ""' 2>/dev/null || echo "")
+prompt_text=$(printf "%s" "$input" | jq -r '.tool_input.prompt // .tool_input.message // ""' 2>/dev/null || echo "")
+output_text=$(printf "%s" "$input" | jq -r '.tool_output.output // .tool_output // ""' 2>/dev/null || echo "")
+
+phase=$(jq -r '.current_phase // .phase // "unknown"' "$PIPELINE_STATE" 2>/dev/null || echo "unknown")
+if [ "$phase" = "unknown" ] || [ "$phase" = "null" ]; then
+  phase=$(printf "%s" "$description" | grep -oE '^\[[0-9]+\][^|]*' | head -c 40 || true)
+  [ -z "$phase" ] && phase=$(printf "%s" "$description" | head -c 30)
+  [ -z "$phase" ] && phase="unknown"
+fi
+
+in_bytes=$(printf "%s" "$prompt_text" | wc -c | tr -d ' ')
+out_bytes=$(printf "%s" "$output_text" | wc -c | tr -d ' ')
+tokens_in=$((in_bytes / 4))
+tokens_out=$((out_bytes / 4))
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+entry=$(jq -n -c \
+  --arg ts "$ts" \
+  --arg phase "$phase" \
+  --arg agent "$agent_type" \
+  --argjson tin "$tokens_in" \
+  --argjson tout "$tokens_out" \
+  '{ts: $ts, phase: $phase, agent: $agent, tokens_in: $tin, tokens_out: $tout}' 2>/dev/null) || exit 0
+
+printf "%s\n" "$entry" >> "$LOG_FILE" 2>/dev/null || true
+
+exit 0

package/templates/.claude/skills/codex-exec/SKILL.md

@@ -31,7 +31,7 @@ Execute OpenAI Codex CLI prompts in non-interactive mode and return structured r
 ```
 1. Pre-checks
    - Verify `codex` binary is installed (which codex || npx codex --version)
-   - Verify authentication (OPENAI_API_KEY or logged in)
+   - Verify authentication (`OPENAI_API_KEY`, `CODEX_API_KEY`, or stored `codex login` / ChatGPT login)
 2. Build command
    - Base: codex exec --ephemeral "<prompt>"
    - Apply options: --json, --model, --full-auto, -C <dir>
@@ -132,7 +132,7 @@ Works with the orchestrator pattern:
 codex-exec requires the Codex CLI binary to be installed and authenticated. The skill is only usable when:
 
 1. `codex` binary is found in PATH (`which codex` succeeds)
-2. Authentication is valid (OPENAI_API_KEY set or `codex` logged in)
+2. Authentication is valid (`OPENAI_API_KEY`, `CODEX_API_KEY`, or stored auth from `codex login --api-key` / ChatGPT login)
 
 If either check fails, this skill cannot be used. Fall back to Claude agents for the task.
 
@@ -158,7 +158,7 @@ Orchestrator delegates generation task
 
 When the orchestrator or intent-detection detects a research/information gathering request (routing_rule in agent-triggers.yaml):
 
-1. **Check Codex availability**: Verify `codex` binary and `OPENAI_API_KEY`
+1. **Check Codex availability**: Verify `codex` binary plus `OPENAI_API_KEY`, `CODEX_API_KEY`, or stored `codex login` auth
 2. **If available**: Execute with xhigh reasoning effort for thorough research
 3. **If unavailable**: Fall back to Claude's WebFetch/WebSearch
 

package/templates/.claude/skills/codex-exec/scripts/codex-wrapper.cjs

@@ -128,9 +128,11 @@ function validateEnvironment() {
     }
   }
 
-  // Note: OPENAI_API_KEY is optional if codex has its own stored auth (via `codex auth`)
-  if (!process.env.OPENAI_API_KEY) {
-    console.error('[codex-wrapper] Note: OPENAI_API_KEY not set, relying on codex built-in auth');
+  // OPENAI_API_KEY/CODEX_API_KEY are optional when codex has stored auth from `codex login`.
+  if (!process.env.OPENAI_API_KEY && !process.env.CODEX_API_KEY) {
+    console.error(
+      '[codex-wrapper] Note: no OPENAI_API_KEY/CODEX_API_KEY set, relying on stored codex login or ChatGPT auth'
+    );
   }
 
   return {
@@ -204,6 +206,7 @@ function executeCodex(binary, args, timeout, workingDir = null) {
     const spawnOptions = {
       cwd: workingDir || process.cwd(),
       env: process.env,
+      stdio: ['ignore', 'pipe', 'pipe'],
     };
 
     const child = spawn(binary, args, spawnOptions);

package/templates/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.4.9",
-  "lastUpdated": "2026-04-27T05:25:00.000Z",
+  "version": "0.4.11",
+  "lastUpdated": "2026-04-28T00:01:33.302Z",
   "components": [
     {
       "name": "rules",