opencode-codex-security 0.1.1 → 0.1.2

package/src/security-panel.tsx

@@ -2,7 +2,7 @@ import { createMemo, createSignal, createEffect, on, For, Show, onCleanup } from
 import { createStore, reconcile } from 'solid-js/store';
 import { asState, type ScanState } from './types';
 import type { ScanInputs, ScanPlan } from './core/scan-plan';
-import { describePlan, latestAvailableDraft } from './plan-view';
+import { describeInferenceRoute, describePlan, latestAvailableDraft } from './plan-view';
 import {
   elapsedLabel,
   findingText,
@@ -507,7 +507,7 @@ export function SecurityPanel(props: {
                         >
                           {busy() === 'prepare' ? 'Preparing preview…' : 'Review scan'}
                         </button>
-                        <span class="gs-muted gs-small">Nothing is sent to OpenAI yet.</span>
+                        <span class="gs-muted gs-small">No source has been sent yet.</span>
                       </div>
                     </form>
                   }
@@ -564,8 +564,9 @@ export function SecurityPanel(props: {
                           fallback={
                             <>
                               <p>
-                                Repository source and listed context will be sent to OpenAI. Results
-                                are stored locally.
+                                Repository source and listed context will be sent to{}
+                                {describeInferenceRoute(plan().settings)}. Results are stored
+                                locally.
                               </p>
                               <p>
                                 Estimated cost stop:{' '}
@@ -991,7 +992,7 @@ export function SecurityPanel(props: {
         <footer class="gs-footer">
           {fixture()
             ? 'Fixture engine · not a security assessment'
-            : 'Codex Security · local results, OpenAI inference'}
+            : 'Codex Security · local results, configured inference'}
           <Show when={catalog().runs.length}>
             {' '}
             · Up to {catalog().maxConcurrent} concurrent scans per project

package/src/security-tui-operations.tsx

@@ -1,4 +1,5 @@
 /** @jsxImportSource @opentui/solid */
+import { describeInferenceRoute } from './plan-view';
 import type { Plugin } from '@opencode/plugin/tui';
 type Context = Plugin.Context;
 type Commands = NonNullable<ReturnType<Parameters<Context['keymap']['layer']>[0]>['commands']>;
@@ -66,7 +67,7 @@ export function createTuiOperations(
   const approve = async (op: SecurityOperationState) => {
     const confirmed = await ctx.ui.dialog.confirm({
       title: op.kind === 'policy' ? 'Review policy generation' : 'Review source validation',
-      message: `Repository: ${op.repository}\n${op.plan.path ? 'Component: ' + op.plan.path + '\n' : ''}Context: ${op.plan.contextFiles.map((file) => file.path).join(', ') || 'No additional documents'}\n\n${op.plan.mock ? 'Mock operation: no model calls or uploads.' : `Repository source, the selected finding if any, and listed context go to OpenAI.\n${op.plan.costNotice}`}\n\n${op.kind === 'policy' ? 'Returns a draft only. Existing files stay unchanged.' : 'Static source assessment only. No exploit execution or patch application.'}\n\nModel: ${op.plan.settings.codex.model} · ${op.plan.settings.codex.reasoningEffort} reasoning`,
+      message: `Repository: ${op.repository}\n${op.plan.path ? 'Component: ' + op.plan.path + '\n' : ''}Context: ${op.plan.contextFiles.map((file) => file.path).join(', ') || 'No additional documents'}\n\n${op.plan.mock ? 'Mock operation: no model calls or uploads.' : `Repository source, the selected finding if any, and listed context go to ${describeInferenceRoute(op.plan.settings)}.\n${op.plan.costNotice}`}\n\n${op.kind === 'policy' ? 'Returns a draft only. Existing files stay unchanged.' : 'Static source assessment only. No exploit execution or patch application.'}\n\nModel: ${op.plan.settings.codex.model} · ${op.plan.settings.codex.reasoningEffort} reasoning`,
       label: {
         confirm: op.plan.mock
           ? 'Start mock operation'
@@ -218,7 +219,7 @@ export function createTuiOperations(
             title: 'Answer security questions',
             description:
               question.questions.map((q, index) => `${index + 1}. ${q}`).join('\n') +
-              '\n\nAnswer each question or state what is unknown. Your answer will be sent to OpenAI for this operation; do not include secrets.',
+              `\n\nAnswer each question or state what is unknown. Your answer will be sent to the already-approved route: ${describeInferenceRoute(op.plan.settings)}. Do not include secrets.`,
           });
           if (!answer?.trim() || stopped) return;
           await client.operationAnswer(

package/src/tui.tsx

@@ -6,6 +6,7 @@ import { asState, type ScanList } from './types';
 import type { ScanInputs, ScanPlan } from './core/scan-plan';
 import {
   describePlan,
+  describeInferenceRoute,
   isAbsoluteLocalDirectory,
   latestAvailableDraft,
   withScanMode,
@@ -137,8 +138,8 @@ export default Plugin.define({
                     }
                   >
                     <text>
-                      Repository source and listed context will be sent to OpenAI. Results stay
-                      local.
+                      Repository source and listed context will be sent to{}
+                      {describeInferenceRoute(plan.settings)}. Results stay local.
                     </text>
                     <text>
                       Estimated stop: USD {plan.settings.scan.maxCostUsd} for this scan. Not a hard