CC Safety Net now ships a native Codex plugin, so Codex runs the same destructive-command and secret-access checks before a tool call as the other supported agents.
Added
- Added a native Codex plugin: the package now ships a Codex plugin manifest and a
PreToolUsehook definition that runs CC Safety Net before Codex executes a tool. (#100) - Added the
hook --codex(-cx) flag so the CLI can be wired into Codex as aPreToolUsehook directly. (#100)
Changed
- Codex hook decisions are now recorded with
codexas the agent in the audit log instead of relying on transcript-path detection, socc-safety-net logs --agent codexreliably shows them. (#100)