skalpel 2.0.19 → 2.0.20

package/dist/cli/index.js

@@ -1721,6 +1721,7 @@ function unconfigureAgent(agent) {
 import fs10 from "fs";
 import path11 from "path";
 import os8 from "os";
+import crypto from "crypto";
 var BEGIN_MARKER = "# BEGIN SKALPEL PROXY - do not edit manually";
 var END_MARKER = "# END SKALPEL PROXY";
 var PS_BEGIN_MARKER = "# BEGIN SKALPEL PROXY - do not edit manually";
@@ -1745,11 +1746,18 @@ function getPowerShellProfilePath() {
   if (fs10.existsSync(wpProfile)) return wpProfile;
   return psProfile;
 }
+function randomPlaceholder() {
+  return `sk-codex-skalpel-${crypto.randomBytes(8).toString("hex")}`;
+}
 function generateUnixBlock(proxyConfig) {
   return [
     BEGIN_MARKER,
     `export ANTHROPIC_BASE_URL="http://localhost:${proxyConfig.anthropicPort}"`,
     `export OPENAI_BASE_URL="http://localhost:${proxyConfig.openaiPort}"`,
+    // `:-` only evaluates the default when OPENAI_API_KEY is unset or empty,
+    // so a user-provided key always wins. Bash, zsh, and POSIX sh all
+    // support this syntax.
+    `export OPENAI_API_KEY="\${OPENAI_API_KEY:-${randomPlaceholder()}}"`,
     END_MARKER
   ].join("\n");
 }
@@ -1758,6 +1766,9 @@ function generatePowerShellBlock(proxyConfig) {
     PS_BEGIN_MARKER,
     `$env:ANTHROPIC_BASE_URL = "http://localhost:${proxyConfig.anthropicPort}"`,
     `$env:OPENAI_BASE_URL = "http://localhost:${proxyConfig.openaiPort}"`,
+    // Conditional assignment — only set when the user hasn't already
+    // exported OPENAI_API_KEY in their session or parent profile.
+    `if (-not $env:OPENAI_API_KEY) { $env:OPENAI_API_KEY = "${randomPlaceholder()}" }`,
     PS_END_MARKER
   ].join("\n");
 }
@@ -2326,12 +2337,10 @@ async function runWizard(options) {
       print11("");
       const codexConfigured = agentsToConfigure.some((a) => a.name === "codex");
       if (codexConfigured) {
-        print11("  [!] Codex auth: recommended -> run 'codex login' first to enable ChatGPT plan billing.");
-        print11("         The OPENAI_API_KEY env var (placeholder OK) is still required for Codex startup");
-        print11("         but is ignored by Skalpel when OAuth is present.");
-        if (!process.env.OPENAI_API_KEY) {
-          print11("         example:  export OPENAI_API_KEY=sk-codex-placeholder-skalpel");
-        }
+        print11("  [!] Codex auth: recommended -> run 'codex login' to enable ChatGPT plan billing.");
+        print11("         Without OAuth, Skalpel uses the OPENAI_API_KEY env var; if not already set,");
+        print11("         Skalpel exports a placeholder so Codex starts. A real sk-... key is only");
+        print11("         needed if you have no ChatGPT plan and want pay-as-you-go API billing.");
         print11("");
       }
     }