Abhinav 392e94e9ea add --dangerously-bypass-hook-trust CLI flag (#21768) ...

# Why

Hook trust happens through the TUI in `/hooks` so it can block
non-interactive use cases. This flag will allow users that are using
codex headlessly to bypass hooks when they want to.

# What

This adds one invocation-scoped escape hatch.

- the CLI flag sets a runtime-only `bypass_hook_trust` override; there
is no durable `config.toml` setting
- hook discovery still respects normal enablement, so explicitly
disabled hooks remain disabled
- we show a `--dangerously-bypass-hook-trust is enabled. Enabled hooks
may run without review for this invocation.` message on startup so
accidental use is visible in both interactive and exec flows

This keeps “enabled” and “trusted” as separate concepts in the normal
path, while giving CI/E2E callers a stable way to opt into the
exceptional path when they already control the hook set.

392e94e9ea · 2026-05-13 07:13:57 +00:00

History

..

command_runner.rs

Discover hooks bundled with plugins (#19705)

2026-04-28 14:17:18 -07:00

discovery.rs

add --dangerously-bypass-hook-trust CLI flag (#21768)

2026-05-13 07:13:57 +00:00

dispatcher.rs

Support PreToolUse updatedInput rewrites (#20527)

2026-05-11 22:27:24 -04:00

mod_tests.rs

add --dangerously-bypass-hook-trust CLI flag (#21768)

2026-05-13 07:13:57 +00:00

mod.rs

add --dangerously-bypass-hook-trust CLI flag (#21768)

2026-05-13 07:13:57 +00:00

output_parser.rs

Support PreToolUse updatedInput rewrites (#20527)

2026-05-11 22:27:24 -04:00

schema_loader.rs

Add compact lifecycle hooks (started by vincentkoc - external contrib) (#19905)

2026-05-06 18:08:31 -07:00