Computer Custom

Computer Custom wraps local Computer Use for Codex and guards Computer Use calls in Claude Code. It adds configurable policy gates while keeping official bundled runtime files out of this repository.

What Is Included

• TypeScript policy wrapper for Codex sky calls.
• Claude Code PreToolUse guard using same policy classifier.
• Public-safe multi-provider plugin output under dist/computer-custom.
• Local upstream sync script that stores hashes and an ignored local snapshot.
• Default policy config for protected paths, hard blocks, confirmations, and redacted audit entries.

What Is Not Included

This repository does not redistribute OpenAI bundled plugin files or assets. The installed Codex environment must already include the official Computer Use plugin.

Development

npm install
npm run sync:upstream
npm run build
npm test
npm run scan:public

Install From Marketplace

codex plugin add computer-custom@0langas-plugins

Restart Codex after install or update so plugin cache reloads.

Codex Confirmation Flow

Read-only inspection passes without confirmation. Destructive, publishing, installer, and security-tool input requires exact phrase I UNDERSTAND.

Current Codex runtime lacks inline elicitation. First risky call stops before input and records pending action. Ask user for exact phrase; after user supplies it, run:

computerCustomAuthorizePending("I UNDERSTAND")

Retry unchanged action within 60 seconds. Authorization works once and cannot approve different action. Never synthesize phrase for user.

Security and antivirus windows can be inspected read-only. Input requires confirmation. Requests to disable, bypass, or evade security remain hard-blocked.

Privacy

Audit entries are local process memory only by default and redact common secret keys and token-like values.

Terms

Use this plugin only for authorized local automation. Provider/runtime restrictions still apply where enforced.