Harden Codex rewrite, echo force spelling, soften bake prose, drop link underline

Guard the Codex parallel_tool_calls rewrite with a non-JSON passthrough, echo the typed force spelling in grant-mismatch notices, soften bake-only telemetry prose to match use_skill reporting, and remove the markdown link underline the click-only transcript cannot back with hover.

Author: TheGreatAxios

docs/PLUGINS.md

@@ -326,9 +326,10 @@ shape.
   `skill_search` / `use_skill` when they only set `user-invocable: false`
   (`git-rebase`, `linear-issue-workflow`, `style`, `philosophy`,
   `native-integration`, `typescript`, `ponytail`, `opsh`). Background libs
-  such as `git-worktrees` set both flags. Bake-only bodies such as
-  `idiot-proof` and `native-runtime` also set both flags (baked into workers;
-  not a slash and not listed for `use_skill`). The slash command is a direct
+  such as `git-worktrees` set both flags. Bodies that stay out of discovery
+  such as `idiot-proof` and `native-runtime` also set both flags (not a slash,
+  and hidden from the skill listing — though an explicit `use_skill` load by
+  name still resolves). The slash command is a direct
   user entry point on top.
 - **First-party catalog.** `plugins/corbits-skills/` (id `corbits-skills`,
   kind `command`, `defaultEnabled: true`) is the bundled skill catalog. Origin

docs/TELEMETRY.md

@@ -86,7 +86,8 @@ skill out of slash synthesis, not out of name reporting: eleven bundled
 skills carry the flag — eight stay listed and loadable (`git-rebase`,
 `linear-issue-workflow`, `opsh`, `philosophy`, `style`, `typescript`,
 `native-integration`, `ponytail`), `git-worktrees` resolves by explicit name
-only, and two stay hidden bake-only (`idiot-proof`, `native-runtime`). Of
+only, and two stay hidden from discovery (`idiot-proof`, `native-runtime`):
+still loadable by explicit name, but every load reports `custom`. Of
 the eleven, seven are reported by name and four stay `custom` (pinned;
 conservative under-reporting, never a leak). Unknown,
 project-local, and plugin-authored skill names are never transmitted —

src/permission/gate.ts

@@ -151,16 +151,22 @@ function segmentGuard(
 // notice can name the operative reason: a force flag, or a destination the
 // containment authority did not approve. Returns undefined for anything else.
 // Display-only refinement — the guard decision itself is unchanged.
-function worktreeMismatchKind(
-  segment: string,
-): "force" | "destination" | "worktree" | undefined {
+type WorktreeMismatch =
+  | { kind: "force"; flag: string }
+  | { kind: "destination" }
+  | { kind: "worktree" };
+
+function worktreeMismatchKind(segment: string): WorktreeMismatch | undefined {
   const tokens = tokenize(segment);
   if (tokens[0] !== "git" || tokens[1] !== "worktree") return undefined;
   if (tokens[2] !== "add" && tokens[2] !== "remove") return undefined;
-  if (tokens.slice(3).some(isWorktreeForceFlag)) return "force";
+  const flag = tokens.slice(3).find(isWorktreeForceFlag);
+  if (flag !== undefined) return { kind: "force", flag };
   // `add` takes a destination for the new worktree; `remove` names an
   // existing worktree, so only `add` gets the destination noun.
-  return tokens[2] === "remove" ? "worktree" : "destination";
+  return tokens[2] === "remove"
+    ? { kind: "worktree" }
+    : { kind: "destination" };
 }
 
 // Explains a grant mismatch: a standing grant covers the segment, but the
@@ -174,13 +180,13 @@ function grantMismatchNotice(
     return "A standing grant matches this command, but it references a sensitive path, so it still needs approval.";
   }
   const worktreeKind = worktreeMismatchKind(segment);
-  if (worktreeKind === "force") {
-    return "A standing grant matches this command, but it uses --force, so it still needs approval.";
+  if (worktreeKind?.kind === "force") {
+    return `A standing grant matches this command, but it uses ${worktreeKind.flag}, so it still needs approval.`;
   }
-  if (worktreeKind === "destination") {
+  if (worktreeKind?.kind === "destination") {
     return "A standing grant matches this command, but the worktree destination is outside the approved locations, so it still needs approval.";
   }
-  if (worktreeKind === "worktree") {
+  if (worktreeKind?.kind === "worktree") {
     return "A standing grant matches this command, but the worktree is outside the approved locations, so it still needs approval.";
   }
   return "A standing grant matches this command, but it targets a path outside the workspace, so it still needs approval.";

src/provider/codex-responses.ts

@@ -55,12 +55,19 @@ function withHostReasoningEffort(adapter: ProviderAdapter): ProviderAdapter {
 // (HTTP 200 on POST /codex/responses, echoed true in response.created). The
 // packaged adapter still pins false, so the host rewrites the field on the
 // wire; the reactor already fans out a multi-call batch concurrently.
-function withParallelToolCalls(adapter: ProviderAdapter): ProviderAdapter {
+export function withParallelToolCalls(
+  adapter: ProviderAdapter,
+): ProviderAdapter {
   return {
     ...adapter,
     buildRequest: (messages, model, options) => {
       const request = adapter.buildRequest(messages, model, options);
-      const body = JSON.parse(request.body) as Record<string, unknown>;
+      let body: Record<string, unknown>;
+      try {
+        body = JSON.parse(request.body) as Record<string, unknown>;
+      } catch {
+        return request;
+      }
       body["parallel_tool_calls"] = true;
       return { ...request, body: JSON.stringify(body) };
     },

src/telemetry/classify.ts

@@ -80,8 +80,10 @@ const BUILT_IN_AGENT_NAMES: ReadonlySet<string> = new Set([
 // eleven bundled skills carry it — eight stay listed and loadable
 // (git-rebase, linear-issue-workflow, opsh, philosophy, style, typescript,
 // native-integration, ponytail), `git-worktrees` resolves by explicit name
-// only, and two stay hidden bake-only (idiot-proof, native-runtime), which
-// are baked into agent prompts rather than invoked as skills. Of the eleven,
+// only, and two stay hidden from listings (idiot-proof, native-runtime):
+// `disable-model-invocation` keeps them out of discovery, but an explicit
+// `use_skill` / `resolveSkillBody` load still resolves — and reports `custom`.
+// Of the eleven,
 // seven are reported by name and four stay `custom` (pinned; conservative
 // under-reporting, never a leak). Project- or plugin-authored skills are
 // never reported by name.

src/tui/stream.ts

@@ -953,9 +953,9 @@ const MARKDOWN_STYLES = {
   "markup.raw": { fg: UI.inFlight },
   "markup.list": { fg: UI.inFlightBright },
   "markup.quote": { fg: UI.textDim, italic: true },
-  "markup.link": { fg: UI.inFlightBright, underline: true },
+  "markup.link": { fg: UI.inFlightBright },
   "markup.link.label": { fg: UI.inFlightBright },
-  "markup.link.url": { fg: UI.inFlightBright, underline: true },
+  "markup.link.url": { fg: UI.inFlightBright },
   keyword: { fg: UI.inFlightBright },
   string: { fg: UI.done },
   number: { fg: UI.done },