opencrater 0.1.7 → 0.1.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/cli.js +4 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -13,3 +13,13 @@ One card at session edges (SessionStart / Stop), rendered by the same fail-silen
|
|
|
13
13
|
Opt out anytime: `npx opencrater off` or `OPENCRATER_DISABLE=1`.
|
|
14
14
|
|
|
15
15
|
Apache-2.0 · [opencrater.to](https://opencrater.to)
|
|
16
|
+
|
|
17
|
+
## One-time trust prompts
|
|
18
|
+
|
|
19
|
+
- **VS Code**: the first ⌘-click on a sponsor link shows an "open external
|
|
20
|
+
website?" dialog — choose **Configure Trusted Domains → trust
|
|
21
|
+
api.opencrater.to** and it never asks again. (Dismissing with ✕ or
|
|
22
|
+
`npx opencrater x` never opens anything — it's handled locally.)
|
|
23
|
+
- **Codex**: asks once to trust newly installed hooks on its next launch —
|
|
24
|
+
approve to enable cards. This is Codex's own security model.
|
|
25
|
+
|
package/cli.js
CHANGED
|
@@ -264,6 +264,10 @@ if (cmd === "on" || cmd === "enable") {
|
|
|
264
264
|
console.log("Ads are personalized to what you're working on via anonymized keywords");
|
|
265
265
|
console.log("(never raw prompts, paths, or secrets).");
|
|
266
266
|
console.log("Turn off anytime: npx opencrater off (or OPENCRATER_DISABLE=1)");
|
|
267
|
+
console.log("");
|
|
268
|
+
console.log("VS Code tip: the first time you ⌘-click a sponsor link, choose");
|
|
269
|
+
console.log("'Configure Trusted Domains' → trust api.opencrater.to and the");
|
|
270
|
+
console.log("confirmation dialog never appears again.");
|
|
267
271
|
} else if (cmd === "off" || cmd === "disable") {
|
|
268
272
|
const a = disableIn(CLAUDE_SETTINGS);
|
|
269
273
|
const b = disableIn(CODEX_HOOKS);
|