@emseepea/testing 0.23.4 → 0.23.6

package/README.md

@@ -109,15 +109,23 @@ EMSEEPEA_CODEX_MODEL=gpt-5.5 emseepea-test --provider codex-local eval
 
 `codex-local` uses the existing Codex CLI sign-in without copying it.
 `codex-ci` requires `OPENAI_API_KEY` from the CI secret store. Both providers
-support Codex CLI 0.162.0 or later, run `codex exec --json`, resume the actual
+record the installed CLI version as provenance, run `codex exec --json`, resume the actual
 Codex session for follow-ups, ignore user configuration, and pre-approve only
 the discovered tools from the test server.
 
+CLI eligibility is established by the invocation and event contracts rather
+than a version cutoff. An unsupported invocation or invalid, incomplete or
+forbidden event still fails qualification.
+
 An isolated command policy denies shell launches and spawned shell environments
 inherit no provider credentials. The runner also disables Codex account apps,
 plugins, remote plugins, multi-agent execution, web search, shell tools, and
 unified execution for each one-shot and resumed native invocation.
 
+The isolated model process preserves configured proxy and certificate-trust
+settings so authentication works on managed networks. These transport settings
+do not enable shell tools or inherit unrelated service credentials.
+
 The invocation configuration sets the default account-app state to disabled,
 omits account-app instructions, and disables Codex app, plugin, and tool
 suggestion features.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emseepea/testing",
-  "version": "0.23.4",
+  "version": "0.23.6",
   "description": "MCP integration and semantic testing helpers",
   "license": "MIT",
   "repository": {

package/semantic/provider.mjs

@@ -6,7 +6,6 @@ import { scriptedElicitations } from "./elicitation.mjs";
 
 const claudeModel = "claude-sonnet-4-6";
 const mcpServerName = "emseepea_eval";
-const minimumCodexCliVersion = "0.162.0";
 const codexEmptyDiscoveryTools = new Map([
   ["list_mcp_resources", "resources"],
   ["list_mcp_resource_templates", "resourceTemplates"],
@@ -44,9 +43,6 @@ export async function modelVersion(provider = "claude-local") {
   const result = await runProcess(command, ["--version"], { env: modelEnvironment({}) });
   const version = result.stdout.trim().match(/(?:codex-cli\s+)?(\d+\.\d+\.\d+)\b/)?.[1];
   if (result.code !== 0 || !version) throw new Error(`Could not verify ${codex ? "Codex" : "Claude"} CLI version`);
-  if (codex && compareVersions(version, minimumCodexCliVersion) < 0) {
-    throw new Error(`Codex CLI ${version} is unsupported; use ${minimumCodexCliVersion} or later`);
-  }
   return version;
 }
 
@@ -677,16 +673,6 @@ function classifyCodexFailure(stderr) {
   return "unknown";
 }
 
-function compareVersions(left, right) {
-  const a = left.split(".").map(Number);
-  const b = right.split(".").map(Number);
-  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
-    const difference = (a[index] ?? 0) - (b[index] ?? 0);
-    if (difference !== 0) return difference;
-  }
-  return 0;
-}
-
 function codexEvidenceError(message, category) {
   return Object.assign(new Error(message), {
     providerFailureCategory: codexFailureCategories.has(category) ? category : "unknown",
@@ -726,7 +712,13 @@ function forbiddenItemError(items) {
 }
 
 function modelEnvironment(extra) {
+  const transport = Object.fromEntries([
+    "HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY", "NO_PROXY",
+    "http_proxy", "https_proxy", "all_proxy", "no_proxy",
+    "SSL_CERT_FILE", "SSL_CERT_DIR", "NODE_EXTRA_CA_CERTS",
+  ].map((name) => [name, process.env[name]]));
   return Object.fromEntries(Object.entries({
+    ...transport,
     CI: "true",
     ENABLE_TOOL_SEARCH: "false",
     LANG: process.env.LANG ?? "C.UTF-8",