oh-my-codex 0.18.10 → 0.18.11

package/dist/cli/__tests__/explore.test.js

@@ -1,376 +1,63 @@
 import { describe, it } from 'node:test';
 import assert from 'node:assert/strict';
-import { createHash } from 'node:crypto';
-import { chmodSync, existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { chmod, mkdtemp, readFile, rm, mkdir, symlink, writeFile } from 'node:fs/promises';
-import { createServer } from 'node:http';
-import { dirname, join } from 'node:path';
+import { chmod, mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
 import { tmpdir } from 'node:os';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-import { buildExploreHarnessArgs, buildExplorePromptWithWikiContext, exploreCommand, EXPLORE_DEPRECATION_NOTICE, EXPLORE_USAGE, loadExplorePrompt, packagedExploreHarnessBinaryName, parseExploreArgs, repoBuiltExploreHarnessCommand, resolveExploreHarnessCommand, resolveExploreHarnessCommandWithHydration, resolveExploreEnv, resolveExploreSparkShellRoute, resolvePackagedExploreHarnessCommand, } from '../explore.js';
-import { writePage, WIKI_SCHEMA_VERSION } from '../../wiki/index.js';
-import { withPackagedExploreHarnessHidden, withPackagedExploreHarnessLock } from './packaged-explore-harness-lock.js';
-function runOmx(cwd, argv, envOverrides = {}) {
-    const testDir = dirname(fileURLToPath(import.meta.url));
-    const repoRoot = join(testDir, '..', '..', '..');
-    const omxBin = join(repoRoot, 'dist', 'cli', 'omx.js');
-    const nodeWrapper = join(cwd, '.omx-test-node.sh');
-    if (!existsSync(nodeWrapper)) {
-        writeFileSync(nodeWrapper, '#!/bin/sh\nexec node "$@"\n');
-        chmodSync(nodeWrapper, 0o755);
-    }
-    const r = spawnSync(nodeWrapper, [omxBin, ...argv], {
-        cwd,
-        encoding: 'utf-8',
-        env: { ...process.env, CODEX_HOME: '', ...envOverrides },
-    });
-    return { status: r.status, stdout: r.stdout || '', stderr: r.stderr || '', error: r.error?.message };
-}
-function normalizeDarwinTmpPath(value) {
-    return process.platform === 'darwin' ? value.replaceAll('/private/var/', '/var/') : value;
-}
-function shouldSkipForSpawnPermissions(err) {
-    return typeof err === 'string' && /(EPERM|EACCES)/i.test(err);
-}
-async function runExploreCommandForTest(cwd, argv, envOverrides = {}) {
-    const stdoutChunks = [];
-    const stderrChunks = [];
-    const originalStdout = process.stdout.write.bind(process.stdout);
-    const originalStderr = process.stderr.write.bind(process.stderr);
-    const originalExitCode = process.exitCode;
-    const previousEnv = new Map();
-    for (const [key, value] of Object.entries(envOverrides)) {
-        previousEnv.set(key, process.env[key]);
-        process.env[key] = value;
-    }
-    process.stdout.write = ((chunk) => {
-        stdoutChunks.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf-8'));
-        return true;
-    });
-    process.stderr.write = ((chunk) => {
-        stderrChunks.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf-8'));
-        return true;
-    });
-    const originalCwd = process.cwd();
-    process.exitCode = 0;
+import { assertBuiltinExploreHarnessSupported, exploreCommand, EXPLORE_DEPRECATION_MESSAGE, EXPLORE_HELP, getBuiltinExploreHarnessUnsupportedReason, packagedExploreHarnessBinaryName, resolvePackagedExploreHarnessCommand, } from '../explore.js';
+async function captureExploreCommand(args) {
+    const originalLog = console.log;
+    let stdout = '';
+    console.log = (...parts) => {
+        stdout += `${parts.map((part) => String(part)).join(' ')}\n`;
+    };
     try {
-        process.chdir(cwd);
-        await exploreCommand(argv);
+        await exploreCommand(args);
+        return { stdout, threw: false };
     }
-    finally {
-        process.chdir(originalCwd);
-        for (const [key, value] of previousEnv.entries()) {
-            if (value === undefined)
-                delete process.env[key];
-            else
-                process.env[key] = value;
-        }
-        process.stdout.write = originalStdout;
-        process.stderr.write = originalStderr;
+    catch (error) {
+        return { stdout, threw: true, error: error instanceof Error ? error.message : String(error) };
     }
-    const exitCode = process.exitCode ?? 0;
-    process.exitCode = originalExitCode;
-    return { stdout: stdoutChunks.join(''), stderr: stderrChunks.join(''), exitCode };
-}
-async function createExploreTestPath(wd) {
-    const binDir = join(wd, 'test-bin');
-    await mkdir(binDir, { recursive: true });
-    const rgPath = join(binDir, process.platform === 'win32' ? 'rg.cmd' : 'rg');
-    const lines = process.platform === 'win32'
-        ? ['@echo off', 'echo ripgrep 14.0.0', '']
-        : ['#!/bin/sh', 'echo "ripgrep 14.0.0"', ''];
-    await writeFile(rgPath, lines.join(process.platform === 'win32' ? '\r\n' : '\n'));
-    if (process.platform !== 'win32') {
-        await chmod(rgPath, 0o755);
+    finally {
+        console.log = originalLog;
     }
-    return `${binDir}${process.platform === 'win32' ? ';' : ':'}${process.env.PATH || ''}`;
-}
-async function writeEnvNodeCodexStub(wd, capturePath) {
-    const stub = join(wd, 'codex-stub.sh');
-    const argvPath = join(wd, 'codex-argv.txt');
-    const allowedStdoutPath = join(wd, 'allowed.stdout.txt');
-    const allowedStderrPath = join(wd, 'allowed.stderr.txt');
-    const blockedStdoutPath = join(wd, 'blocked.stdout.txt');
-    const blockedStderrPath = join(wd, 'blocked.stderr.txt');
-    await writeFile(stub, `#!/bin/sh
-set -eu
-output_path=''
-: > ${JSON.stringify(argvPath)}
-while [ "$#" -gt 0 ]; do
-  printf '%s\n' "$1" >> ${JSON.stringify(argvPath)}
-  if [ "$1" = "-o" ] && [ "$#" -ge 2 ]; then
-    output_path="$2"
-    shift 2
-    continue
-  fi
-  shift
-done
-
-if [ -z "$output_path" ]; then
-  printf 'missing -o output path\n' >&2
-  exit 1
-fi
-
-bash -lc 'rg --version' > ${JSON.stringify(allowedStdoutPath)} 2> ${JSON.stringify(allowedStderrPath)}
-allowed_status=$?
-set +e
-bash -lc 'node --version' > ${JSON.stringify(blockedStdoutPath)} 2> ${JSON.stringify(blockedStderrPath)}
-blocked_status=$?
-set -e
-
-{
-  printf 'PATH=%s\n' "$PATH"
-  printf 'SHELL=%s\n' "\${SHELL:-}"
-  printf 'ALLOWED_STATUS=%s\n' "$allowed_status"
-  printf 'BLOCKED_STATUS=%s\n' "$blocked_status"
-  printf -- '--ARGV--\n'
-  cat ${JSON.stringify(argvPath)}
-  printf -- '--ALLOWED_STDOUT--\n'
-  cat ${JSON.stringify(allowedStdoutPath)}
-  printf -- '--ALLOWED_STDERR--\n'
-  cat ${JSON.stringify(allowedStderrPath)}
-  printf -- '--BLOCKED_STDOUT--\n'
-  cat ${JSON.stringify(blockedStdoutPath)}
-  printf -- '--BLOCKED_STDERR--\n'
-  cat ${JSON.stringify(blockedStderrPath)}
-} > ${JSON.stringify(capturePath)}
-
-printf '# Answer\nHarness completed\n' > "$output_path"
-`);
-    await chmod(stub, 0o755);
-    return stub;
-}
-async function writePosixPackageManagerCodexShim(wd, capturePath) {
-    const packageRoot = join(wd, 'node_modules', '@openai', 'codex');
-    const binDir = join(wd, 'node_modules', '.bin');
-    const entrypointPath = join(packageRoot, 'bin', 'codex.js');
-    const shimPath = join(binDir, 'codex');
-    await mkdir(join(packageRoot, 'bin'), { recursive: true });
-    await mkdir(binDir, { recursive: true });
-    await writeFile(entrypointPath, `const fs = require('node:fs');
-const path = require('node:path');
-
-const args = process.argv.slice(2);
-let outputPath = '';
-for (let i = 0; i < args.length; i += 1) {
-  const value = args[i];
-  if (value === '-o' && i + 1 < args.length) {
-    outputPath = args[i + 1];
-    i += 1;
-  }
-}
-if (!outputPath) {
-  process.stderr.write('missing -o output path\\n');
-  process.exit(1);
 }
-
-const payload = [
-  'ARGV0=' + process.argv[0],
-  'ARGV1=' + process.argv[1],
-  'PATH=' + (process.env.PATH || ''),
-  'SHELL=' + (process.env.SHELL || ''),
-].join('\\n') + '\\n';
-fs.writeFileSync(${JSON.stringify(capturePath)}, payload);
-fs.writeFileSync(outputPath, '# Answer\\nHarness completed\\n');
-`);
-    await writeFile(shimPath, `#!/bin/sh
-basedir=$(dirname "$0")
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node" "$basedir/../@openai/codex/bin/codex.js" "$@"
-fi
-exec node "$basedir/../@openai/codex/bin/codex.js" "$@"
-`);
-    await chmod(shimPath, 0o755);
-    return shimPath;
-}
-async function writeScenarioCodexStub(wd, body) {
-    const stub = join(wd, 'codex-scenario-stub.sh');
-    await writeFile(stub, `#!/bin/sh
-set -eu
-output_path=''
-model=''
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    -o)
-      output_path="$2"
-      shift 2
-      ;;
-    -m)
-      model="$2"
-      shift 2
-      ;;
-    *)
-      shift
-      ;;
-  esac
-done
-if [ -z "$output_path" ]; then
-  printf 'missing -o output path\n' >&2
-  exit 1
-fi
-if [ -z "$model" ]; then
-  printf 'missing -m model\n' >&2
-  exit 1
-fi
-${body}
-`);
-    await chmod(stub, 0o755);
-    return stub;
-}
-async function writeExploreHarnessScenarioStub(wd, body) {
-    const stub = join(wd, 'explore-scenario-stub.sh');
-    await writeFile(stub, `#!/bin/sh
-set -eu
-${body}
-`);
-    await chmod(stub, 0o755);
-    return stub;
-}
-describe('parseExploreArgs', () => {
-    it('parses --prompt form', () => {
-        assert.deepEqual(parseExploreArgs(['--prompt', 'find', 'auth']), { prompt: 'find auth' });
-    });
-    it('parses --prompt= form', () => {
-        assert.deepEqual(parseExploreArgs(['--prompt=find auth']), { prompt: 'find auth' });
-    });
-    it('parses --prompt-file form', () => {
-        assert.deepEqual(parseExploreArgs(['--prompt-file', 'prompt.md']), { promptFile: 'prompt.md' });
-    });
-    it('throws on missing prompt', () => {
-        assert.throws(() => parseExploreArgs([]), new RegExp(EXPLORE_USAGE.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
-    });
-    it('throws on unknown flag', () => {
-        assert.throws(() => parseExploreArgs(['--bogus']), /Unknown argument/);
-    });
-    it('rejects positional prompt text with a corrective --prompt hint', () => {
-        assert.throws(() => parseExploreArgs(['find package.json']), /Positional prompt text is not supported\. Use: omx explore --prompt "find package\.json"/);
-        assert.throws(() => parseExploreArgs(['find', 'package.json']), /Positional prompt text is not supported\. Use: omx explore --prompt "find package\.json"/);
-    });
-    it('rejects duplicate prompt sources', () => {
-        assert.throws(() => parseExploreArgs(['--prompt', 'find auth', '--prompt-file', 'prompt.md']), /Choose exactly one/);
-    });
-    it('rejects missing prompt-file value', () => {
-        assert.throws(() => parseExploreArgs(['--prompt-file']), /Missing path after --prompt-file/);
-    });
-    it('rejects missing prompt value', () => {
-        assert.throws(() => parseExploreArgs(['--prompt']), /Missing text after --prompt/);
+describe('exploreCommand (hard-deprecated tombstone)', () => {
+    it('prints migration help for --help without throwing', async () => {
+        const result = await captureExploreCommand(['--help']);
+        assert.equal(result.threw, false);
+        assert.match(result.stdout, /Hard-deprecated legacy command surface/);
+        assert.match(result.stdout, /all fail intentionally/);
+        assert.match(result.stdout, /omx sparkshell/);
+    });
+    it('throws the deprecation message for bare invocation', async () => {
+        const result = await captureExploreCommand([]);
+        assert.equal(result.threw, true);
+        assert.match(result.error ?? '', /hard-deprecated and the direct command surface has been removed/);
+    });
+    it('throws the deprecation message for legacy --prompt usage', async () => {
+        const result = await captureExploreCommand(['--prompt', 'find package.json']);
+        assert.equal(result.threw, true);
+        assert.match(result.error ?? '', new RegExp(EXPLORE_DEPRECATION_MESSAGE.slice(0, 24)));
+    });
+    it('exposes deprecation help text', () => {
+        assert.match(EXPLORE_HELP, /Migration:/);
+        assert.match(EXPLORE_HELP, /normal Codex repository inspection tools\/subagents/);
     });
 });
-describe('exploreCommand help', () => {
-    it('prints explore-specific usage for --help', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-help-'));
-        try {
-            const result = await runExploreCommandForTest(wd, ['--help']);
-            assert.equal(result.exitCode, 0);
-            assert.match(result.stdout, /Usage: omx explore --prompt "<prompt>"/);
-            assert.match(result.stdout, /omx explore --prompt-file <file>/);
-            assert.match(result.stdout, /Never use positional prompt text/i);
-            assert.match(result.stdout, /DEPRECATED: `omx explore` is deprecated/i);
-            assert.equal(result.stderr, '');
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
+describe('getBuiltinExploreHarnessUnsupportedReason', () => {
+    it('returns undefined on non-Windows platforms', () => {
+        assert.equal(getBuiltinExploreHarnessUnsupportedReason('linux', {}), undefined);
     });
-});
-describe('loadExplorePrompt', () => {
-    it('reads prompt file content', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-prompt-'));
-        try {
-            const promptPath = join(wd, 'prompt.md');
-            await writeFile(promptPath, '  find symbol refs  \n');
-            assert.equal(await loadExplorePrompt({ promptFile: promptPath }), 'find symbol refs');
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
+    it('reports a reason on Windows without an override', () => {
+        const reason = getBuiltinExploreHarnessUnsupportedReason('win32', {});
+        assert.match(reason ?? '', /not ready on Windows/);
     });
-});
-describe('buildExplorePromptWithWikiContext', () => {
-    it('injects wiki matches into the explore prompt when local wiki pages exist', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-wiki-'));
-        try {
-            writePage(wd, {
-                filename: 'runtime.md',
-                frontmatter: {
-                    title: 'Runtime Architecture',
-                    tags: ['runtime', 'hooks'],
-                    created: '2026-01-01T00:00:00.000Z',
-                    updated: '2026-01-01T00:00:00.000Z',
-                    sources: ['test'],
-                    links: [],
-                    category: 'architecture',
-                    confidence: 'high',
-                    schemaVersion: WIKI_SCHEMA_VERSION,
-                },
-                content: '\n# Runtime Architecture\n\nSessionStart uses native hooks and session-end uses runtime cleanup.\n',
-            });
-            const prompt = buildExplorePromptWithWikiContext('how does session-start work', wd);
-            assert.match(prompt, /\[OMX Wiki Context\]/);
-            assert.match(prompt, /Runtime Architecture/);
-            assert.match(prompt, /prefer repository-backed facts/i);
-            assert.match(prompt, /Wiki mismatch/);
-            assert.match(prompt, /Original Explore Prompt/);
-            assert.equal(existsSync(join(wd, 'omx_wiki', 'log.md')), false);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
+    it('returns undefined on Windows when OMX_EXPLORE_BIN is set', () => {
+        assert.equal(getBuiltinExploreHarnessUnsupportedReason('win32', { OMX_EXPLORE_BIN: '/tmp/harness' }), undefined);
     });
-    it('does not mutate wiki logs when building read-only wiki context', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-wiki-log-'));
-        try {
-            writePage(wd, {
-                filename: 'runtime.md',
-                frontmatter: {
-                    title: 'Runtime Architecture',
-                    tags: ['runtime', 'hooks'],
-                    created: '2026-01-01T00:00:00.000Z',
-                    updated: '2026-01-01T00:00:00.000Z',
-                    sources: ['test'],
-                    links: [],
-                    category: 'architecture',
-                    confidence: 'high',
-                    schemaVersion: WIKI_SCHEMA_VERSION,
-                },
-                content: '\n# Runtime Architecture\n\nSessionStart uses native hooks and session-end uses runtime cleanup.\n',
-            });
-            buildExplorePromptWithWikiContext('session-start lifecycle', wd);
-            const logPath = join(wd, 'omx_wiki', 'log.md');
-            assert.equal(existsSync(logPath), false);
-            // sanity: direct query callers still log by default
-            const { queryWiki } = await import('../../wiki/index.js');
-            queryWiki(wd, 'session-start lifecycle');
-            assert.equal(existsSync(logPath), true);
-            assert.match(readFileSync(logPath, 'utf8'), /Query "session-start lifecycle"/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('warns when wiki pages are missing or too weak', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-no-wiki-'));
-        try {
-            const prompt = buildExplorePromptWithWikiContext('find auth', wd);
-            assert.match(prompt, /\[OMX Wiki Status\]/);
-            assert.match(prompt, /build an initial project wiki/i);
-            assert.match(prompt, /Original Explore Prompt/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('warns when the wiki directory is missing entirely', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-missing-wiki-'));
-        try {
-            const prompt = buildExplorePromptWithWikiContext('find auth', wd);
-            assert.match(prompt, /Wiki evidence is weak or missing/i);
-            assert.match(prompt, /build an initial project wiki/i);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
+    it('assert helper throws only on unsupported platforms', () => {
+        assert.doesNotThrow(() => assertBuiltinExploreHarnessSupported('linux', {}));
+        assert.throws(() => assertBuiltinExploreHarnessSupported('win32', {}), /not ready on Windows/);
     });
 });
 describe('resolvePackagedExploreHarnessCommand', () => {
@@ -414,819 +101,4 @@ describe('resolvePackagedExploreHarnessCommand', () => {
         }
     });
 });
-describe('resolveExploreHarnessCommand', () => {
-    it('uses env override when provided', () => {
-        const resolved = resolveExploreHarnessCommand('/repo', { OMX_EXPLORE_BIN: '/tmp/omx-explore-stub' });
-        assert.deepEqual(resolved, { command: '/tmp/omx-explore-stub', args: [] });
-    });
-    it('prefers a packaged native harness binary when present', async () => {
-        await withPackagedExploreHarnessLock(async () => {
-            const wd = await mkdtemp(join(tmpdir(), 'omx-explore-native-'));
-            try {
-                const binDir = join(wd, 'bin');
-                await mkdir(binDir, { recursive: true });
-                await writeFile(join(wd, 'package.json'), '{}\n');
-                await writeFile(join(binDir, 'omx-explore-harness.meta.json'), JSON.stringify({
-                    binaryName: packagedExploreHarnessBinaryName(),
-                    platform: process.platform,
-                    arch: process.arch,
-                }));
-                const nativePath = join(binDir, packagedExploreHarnessBinaryName());
-                await writeFile(nativePath, '#!/bin/sh\necho native\n');
-                await chmod(nativePath, 0o755);
-                const resolved = resolveExploreHarnessCommand(wd, {});
-                assert.deepEqual(resolved, { command: nativePath, args: [] });
-            }
-            finally {
-                await rm(wd, { recursive: true, force: true });
-            }
-        });
-    });
-    it('uses an existing repo-built native harness before cargo fallback', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-target-'));
-        try {
-            const targetDir = join(wd, 'target', 'release');
-            await mkdir(targetDir, { recursive: true });
-            await writeFile(join(wd, 'package.json'), '{}\n');
-            await writeFile(join(targetDir, packagedExploreHarnessBinaryName()), '#!/bin/sh\nexit 0\n');
-            await chmod(join(targetDir, packagedExploreHarnessBinaryName()), 0o755);
-            await mkdir(join(wd, 'crates', 'omx-explore'), { recursive: true });
-            await writeFile(join(wd, 'crates', 'omx-explore', 'Cargo.toml'), '[package]\nname="omx-explore-harness"\nversion="0.0.0"\n');
-            const repoBuilt = repoBuiltExploreHarnessCommand(wd);
-            assert.deepEqual(repoBuilt, { command: join(targetDir, packagedExploreHarnessBinaryName()), args: [] });
-            const resolved = resolveExploreHarnessCommand(wd, {});
-            assert.deepEqual(resolved, { command: join(targetDir, packagedExploreHarnessBinaryName()), args: [] });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('builds cargo fallback command otherwise', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-fallback-'));
-        try {
-            const crateDir = join(wd, 'crates', 'omx-explore');
-            await mkdir(crateDir, { recursive: true });
-            await writeFile(join(wd, 'package.json'), '{}\n');
-            await writeFile(join(crateDir, 'Cargo.toml'), '[package]\nname = "omx-explore-harness"\nversion = "0.0.0"\n');
-            const cacheDir = join(wd, 'native-cache');
-            const resolved = resolveExploreHarnessCommand(wd, { OMX_NATIVE_CACHE_DIR: cacheDir });
-            assert.equal(resolved.command, 'cargo');
-            assert.ok(resolved.args.includes('--manifest-path'));
-            assert.ok(resolved.args.includes(join(wd, 'crates', 'omx-explore', 'Cargo.toml')));
-            assert.ok(resolved.args.includes('--target-dir'));
-            assert.ok(resolved.args.includes(join(cacheDir, 'cargo-target', 'omx-explore-harness')));
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('hydrates a native harness for packaged installs before attempting cargo fallback', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-hydrated-'));
-        try {
-            const assetRoot = join(wd, 'assets');
-            const cacheDir = join(wd, 'cache');
-            const stagingDir = join(wd, 'staging');
-            await mkdir(assetRoot, { recursive: true });
-            await mkdir(stagingDir, { recursive: true });
-            await writeFile(join(wd, 'package.json'), JSON.stringify({
-                version: '0.8.15',
-                repository: { url: 'git+https://github.com/Yeachan-Heo/oh-my-codex.git' },
-            }));
-            // Published packages intentionally ship src/scripts for postinstall, but
-            // that must not make them look like writable source checkouts.
-            await mkdir(join(wd, 'src', 'scripts'), { recursive: true });
-            await writeFile(join(wd, 'src', 'scripts', 'postinstall-bootstrap.js'), '');
-            await mkdir(join(wd, 'crates', 'omx-explore'), { recursive: true });
-            await writeFile(join(wd, 'crates', 'omx-explore', 'Cargo.toml'), '[package]\nname=\"omx-explore-harness\"\nversion=\"0.8.15\"\n');
-            const binaryPath = join(stagingDir, packagedExploreHarnessBinaryName());
-            await writeFile(binaryPath, '#!/bin/sh\necho hydrated-explore\n');
-            await chmod(binaryPath, 0o755);
-            const archiveName = `omx-explore-harness-${process.platform}-${process.arch}.tar.gz`;
-            const archivePath = join(assetRoot, archiveName);
-            const archive = spawnSync('tar', ['-czf', archivePath, '-C', stagingDir, packagedExploreHarnessBinaryName()], { encoding: 'utf-8' });
-            assert.equal(archive.status, 0, archive.stderr || archive.stdout);
-            const archiveBuffer = await readFile(archivePath);
-            const checksum = createHash('sha256').update(archiveBuffer).digest('hex');
-            const server = await new Promise((resolve) => {
-                const srv = createServer(async (req, res) => {
-                    const url = new URL(req.url || '/', 'http://127.0.0.1');
-                    const filePath = join(assetRoot, url.pathname.replace(/^\//, ''));
-                    try {
-                        res.writeHead(200);
-                        res.end(await readFile(filePath));
-                    }
-                    catch {
-                        res.writeHead(404);
-                        res.end('missing');
-                    }
-                });
-                srv.listen(0, '127.0.0.1', () => {
-                    const address = srv.address();
-                    if (!address || typeof address === 'string')
-                        throw new Error('bad address');
-                    resolve({
-                        baseUrl: `http://127.0.0.1:${address.port}`,
-                        close: () => new Promise((done, reject) => srv.close((err) => err ? reject(err) : done())),
-                    });
-                });
-            });
-            try {
-                await writeFile(join(assetRoot, 'native-release-manifest.json'), JSON.stringify({
-                    version: '0.8.15',
-                    assets: [{
-                            product: 'omx-explore-harness',
-                            version: '0.8.15',
-                            platform: process.platform,
-                            arch: process.arch,
-                            archive: archiveName,
-                            binary: 'omx-explore-harness',
-                            binary_path: 'omx-explore-harness',
-                            sha256: checksum,
-                            size: archiveBuffer.length,
-                            download_url: `${server.baseUrl}/${archiveName}`,
-                        }],
-                }, null, 2));
-                const resolved = await resolveExploreHarnessCommandWithHydration(wd, {
-                    OMX_NATIVE_MANIFEST_URL: `${server.baseUrl}/native-release-manifest.json`,
-                    OMX_NATIVE_CACHE_DIR: cacheDir,
-                });
-                assert.notEqual(resolved.command, 'cargo');
-                assert.match(resolved.command, /cache/);
-            }
-            finally {
-                await server.close();
-            }
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('reports a clean fallback error when the native manifest is unavailable for packaged installs', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-missing-manifest-'));
-        try {
-            await writeFile(join(wd, 'package.json'), JSON.stringify({
-                version: '0.8.15',
-                repository: { url: 'git+https://github.com/Yeachan-Heo/oh-my-codex.git' },
-            }));
-            const server = await new Promise((resolve) => {
-                const srv = createServer((_req, res) => {
-                    res.writeHead(404);
-                    res.end('missing');
-                });
-                srv.listen(0, '127.0.0.1', () => {
-                    const address = srv.address();
-                    if (!address || typeof address === 'string')
-                        throw new Error('bad address');
-                    resolve({
-                        baseUrl: `http://127.0.0.1:${address.port}`,
-                        close: () => new Promise((done, reject) => srv.close((err) => err ? reject(err) : done())),
-                    });
-                });
-            });
-            try {
-                await assert.rejects(() => resolveExploreHarnessCommandWithHydration(wd, {
-                    OMX_NATIVE_MANIFEST_URL: `${server.baseUrl}/native-release-manifest.json`,
-                    OMX_NATIVE_CACHE_DIR: join(wd, 'cache'),
-                }), /no compatible native harness is available/);
-            }
-            finally {
-                await server.close();
-            }
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-});
-describe('buildExploreHarnessArgs', () => {
-    it('includes cwd, prompt, prompt contract, and constrained model settings', () => {
-        const wd = join(tmpdir(), 'omx-explore-arg-test');
-        const isolatedCodexHome = join(tmpdir(), `omx-explore-defaults-${process.pid}-${Date.now()}`);
-        const savedEnv = new Map();
-        for (const key of [
-            'CODEX_HOME',
-            'OMX_DEFAULT_FRONTIER_MODEL',
-            'OMX_DEFAULT_STANDARD_MODEL',
-            'OMX_DEFAULT_SPARK_MODEL',
-            'OMX_SPARK_MODEL',
-        ]) {
-            savedEnv.set(key, process.env[key]);
-            delete process.env[key];
-        }
-        try {
-            const args = buildExploreHarnessArgs('find auth', wd, {
-                CODEX_HOME: isolatedCodexHome,
-                OMX_EXPLORE_SPARK_MODEL: 'spark-model',
-            }, '/pkg');
-            assert.deepEqual(args.slice(0, 3), ['--cwd', wd, '--prompt']);
-            assert.match(args[3] || '', /Original Explore Prompt/);
-            assert.match(args[3] || '', /find auth/);
-            assert.deepEqual(args.slice(4), [
-                '--prompt-file',
-                '/pkg/prompts/explore-harness.md',
-                '--instructions-file',
-                '/pkg/templates/model-instructions/explore-lightweight-AGENTS.md',
-                '--model-spark',
-                'spark-model',
-                '--model-fallback',
-                'gpt-5.5',
-            ]);
-        }
-        finally {
-            for (const [key, value] of savedEnv.entries()) {
-                if (value === undefined)
-                    delete process.env[key];
-                else
-                    process.env[key] = value;
-            }
-        }
-    });
-    it('honors configured env overrides for fallback model and instructions file', async () => {
-        const codexHome = await mkdtemp(join(tmpdir(), 'omx-explore-config-env-'));
-        await writeFile(join(codexHome, '.omx-config.json'), JSON.stringify({
-            env: {
-                OMX_DEFAULT_STANDARD_MODEL: 'standard-local',
-                OMX_DEFAULT_SPARK_MODEL: 'spark-local',
-                OMX_EXPLORE_MODEL_INSTRUCTIONS_FILE: '/config/explore-instructions.md',
-            },
-        }));
-        try {
-            const wd = join(tmpdir(), 'omx-explore-arg-test');
-            const args = buildExploreHarnessArgs('find auth', wd, {
-                CODEX_HOME: codexHome,
-            }, '/pkg');
-            assert.deepEqual(args.slice(4), [
-                '--prompt-file',
-                '/pkg/prompts/explore-harness.md',
-                '--instructions-file',
-                '/config/explore-instructions.md',
-                '--model-spark',
-                'spark-local',
-                '--model-fallback',
-                'standard-local',
-            ]);
-        }
-        finally {
-            await rm(codexHome, { recursive: true, force: true });
-        }
-    });
-    it('applies persisted project CODEX_HOME fallback before reading explore config overrides', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-project-codex-home-'));
-        const badHome = join(wd, 'home-as-file');
-        await writeFile(badHome, 'not-a-directory');
-        await mkdir(join(wd, '.omx'), { recursive: true });
-        await writeFile(join(wd, '.omx', 'setup-scope.json'), JSON.stringify({ scope: 'project' }));
-        await mkdir(join(wd, '.codex'), { recursive: true });
-        await writeFile(join(wd, '.codex', '.omx-config.json'), JSON.stringify({
-            env: {
-                OMX_DEFAULT_STANDARD_MODEL: 'standard-project',
-                OMX_DEFAULT_SPARK_MODEL: 'spark-project',
-            },
-        }));
-        try {
-            const env = resolveExploreEnv(wd, { HOME: badHome });
-            assert.equal(env.CODEX_HOME, join(wd, '.codex'));
-            const args = buildExploreHarnessArgs('find auth', wd, env, '/pkg');
-            assert.deepEqual(args.slice(4), [
-                '--prompt-file',
-                '/pkg/prompts/explore-harness.md',
-                '--instructions-file',
-                '/pkg/templates/model-instructions/explore-lightweight-AGENTS.md',
-                '--model-spark',
-                'spark-project',
-                '--model-fallback',
-                'standard-project',
-            ]);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-});
-describe('resolveExploreSparkShellRoute', () => {
-    it('keeps natural-language exploration prompts on the direct harness path', () => {
-        assert.equal(resolveExploreSparkShellRoute('which files define team routing'), undefined);
-        assert.equal(resolveExploreSparkShellRoute('map the relationship between hooks and tmux helpers'), undefined);
-    });
-    it('routes qualifying read-only git commands to sparkshell', () => {
-        assert.deepEqual(resolveExploreSparkShellRoute('git log --oneline'), {
-            argv: ['git', 'log', '--oneline'],
-            reason: 'long-output',
-        });
-        assert.deepEqual(resolveExploreSparkShellRoute('run git diff --stat'), {
-            argv: ['git', 'diff', '--stat'],
-            reason: 'long-output',
-        });
-    });
-    it('rejects non-read-only or shell-unsafe commands for sparkshell routing', () => {
-        assert.equal(resolveExploreSparkShellRoute('git commit -m test'), undefined);
-        assert.equal(resolveExploreSparkShellRoute('npm test'), undefined);
-        assert.equal(resolveExploreSparkShellRoute('git log | head'), undefined);
-        assert.equal(resolveExploreSparkShellRoute('find /tmp -maxdepth 1'), undefined);
-    });
-});
-describe('exploreCommand', () => {
-    it('answers simple text lookups with the local fast-path before spawning Codex-backed harnesses', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-local-fast-path-'));
-        try {
-            await mkdir(join(wd, 'src'), { recursive: true });
-            await writeFile(join(wd, 'src', 'auth.ts'), 'export const token = "local-only";\n');
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf harness-should-not-run\n');
-            await chmod(harnessStub, 0o755);
-            const result = await runExploreCommandForTest(wd, ['--prompt', 'search for local-only'], {
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            assert.equal(result.exitCode, 0);
-            assert.match(result.stdout, /local fast-path used \(text lookup\)/);
-            assert.match(result.stdout, /src\/auth\.ts:1/);
-            assert.equal(result.stderr, `${EXPLORE_DEPRECATION_NOTICE}\n`);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('answers explicit file-read prompts with bounded file content instead of metadata only', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-local-file-read-'));
-        try {
-            await writeFile(join(wd, 'README.md'), '# Demo README\n\nThis content must be visible.\n');
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf harness-should-not-run\n');
-            await chmod(harnessStub, 0o755);
-            const result = await runExploreCommandForTest(wd, ['--prompt', 'read README.md'], {
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            assert.equal(result.exitCode, 0);
-            assert.match(result.stdout, /local fast-path used \(file lookup\)/);
-            assert.match(result.stdout, /README\.md \(\d+ bytes; showing up to/);
-            assert.match(result.stdout, /# Demo README/);
-            assert.match(result.stdout, /This content must be visible\./);
-            assert.doesNotMatch(result.stdout.trim(), /^.*README\.md \(\d+ bytes\)$/);
-            assert.equal(result.stderr, `${EXPLORE_DEPRECATION_NOTICE}\n`);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('marks explicit file-read fast-path output when file content is truncated', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-local-file-truncated-'));
-        try {
-            await writeFile(join(wd, 'README.md'), `# Demo README\n${'x'.repeat(20_000)}\n`);
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf harness-should-not-run\n');
-            await chmod(harnessStub, 0o755);
-            const result = await runExploreCommandForTest(wd, ['--prompt', 'show README.md'], {
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            assert.equal(result.exitCode, 0);
-            assert.match(result.stdout, /# Demo README/);
-            assert.match(result.stdout, /\[truncated: file exceeds local fast-path limit/);
-            assert.equal(result.stderr, `${EXPLORE_DEPRECATION_NOTICE}\n`);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('does not follow symlinks in explicit file-read local fast-path lookups', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-local-symlink-'));
-        const outside = await mkdtemp(join(tmpdir(), 'omx-explore-local-outside-'));
-        try {
-            await writeFile(join(outside, 'secret.txt'), 'outside-secret-should-not-print\n');
-            await symlink(join(outside, 'secret.txt'), join(wd, 'leak.txt'));
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf "harness-fallback\\n"\n');
-            await chmod(harnessStub, 0o755);
-            const result = await runExploreCommandForTest(wd, ['--prompt', 'read leak.txt'], {
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            assert.equal(result.exitCode, 0);
-            assert.match(result.stdout, /harness-fallback/);
-            assert.doesNotMatch(result.stdout, /outside-secret-should-not-print/);
-            assert.doesNotMatch(result.stdout, /local fast-path used/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-            await rm(outside, { recursive: true, force: true });
-        }
-    });
-    it('does not read oversized files during text-search local fast-path lookups', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-local-large-text-'));
-        try {
-            await writeFile(join(wd, 'large.txt'), `${'x'.repeat(20_000)}\nlarge-only-needle\n`);
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf "harness-fallback\\n"\n');
-            await chmod(harnessStub, 0o755);
-            const result = await runExploreCommandForTest(wd, ['--prompt', 'search for large-only-needle'], {
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            assert.equal(result.exitCode, 0);
-            assert.match(result.stdout, /harness-fallback/);
-            assert.doesNotMatch(result.stdout, /local fast-path used \(text lookup\)/);
-            assert.equal(result.stderr, `${EXPLORE_DEPRECATION_NOTICE}\n`);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('times out Codex-backed harness process trees with an explicit runaway error', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-timeout-'));
-        try {
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf "started\\n"\nsleep 5\n');
-            await chmod(harnessStub, 0o755);
-            await assert.rejects(() => runExploreCommandForTest(wd, ['--prompt', 'map the runtime timeout behavior'], {
-                OMX_EXPLORE_BIN: harnessStub,
-                OMX_EXPLORE_TIMEOUT_MS: '50',
-            }), /harness timed out after 50ms; terminated the process tree/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('emits verbose telemetry when explore uses the sparkshell backend', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-sparkshell-telemetry-'));
-        try {
-            const sparkshellStub = join(wd, 'sparkshell-stub.sh');
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(sparkshellStub, `#!/bin/sh\nprintf '# Answer\\n- telemetry route\\n'\n`);
-            await writeFile(harnessStub, '#!/bin/sh\nprintf harness-should-not-run\n');
-            await chmod(sparkshellStub, 0o755);
-            await chmod(harnessStub, 0o755);
-            const result = runOmx(wd, ['explore', '--verbose', '--prompt', 'git log --oneline'], {
-                OMX_SPARKSHELL_BIN: sparkshellStub,
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            if (shouldSkipForSpawnPermissions(result.error))
-                return;
-            assert.equal(result.status, 0, result.stderr || result.stdout);
-            assert.match(result.stderr, /backend=sparkshell reason=long-output/);
-            assert.match(result.stdout, /telemetry route/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('routes qualifying read-only shell commands through sparkshell instead of the direct harness', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-sparkshell-route-'));
-        try {
-            const sparkshellStub = join(wd, 'sparkshell-stub.sh');
-            const harnessStub = join(wd, 'explore-stub.sh');
-            const capturePath = join(wd, 'sparkshell-capture.txt');
-            await writeFile(sparkshellStub, `#!/bin/sh\nprintf '%s\n' "$@" > ${JSON.stringify(capturePath)}\nprintf '# Answer\n- routed via sparkshell\n'\n`);
-            await writeFile(harnessStub, '#!/bin/sh\nprintf harness-should-not-run\n');
-            await chmod(sparkshellStub, 0o755);
-            await chmod(harnessStub, 0o755);
-            const result = runOmx(wd, ['explore', '--prompt', 'git log --oneline'], {
-                OMX_SPARKSHELL_BIN: sparkshellStub,
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            if (shouldSkipForSpawnPermissions(result.error))
-                return;
-            assert.equal(result.status, 0, result.stderr || result.stdout);
-            assert.equal(result.stdout, '# Answer\n- routed via sparkshell\n');
-            assert.equal(result.stderr, `${EXPLORE_DEPRECATION_NOTICE}\n`);
-            const captured = (await readFile(capturePath, 'utf-8')).trim().split('\n');
-            assert.deepEqual(captured, ['git', 'log', '--oneline']);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('falls back to the explore harness when sparkshell backend is unavailable', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-sparkshell-fallback-'));
-        try {
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(harnessStub, '#!/bin/sh\nprintf "%s\\n" "# Answer" "- fallback harness recovered the lookup"\n');
-            await chmod(harnessStub, 0o755);
-            const result = runOmx(wd, ['explore', '--prompt', 'git log --oneline'], {
-                OMX_SPARKSHELL_BIN: join(wd, 'missing-sparkshell'),
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            if (shouldSkipForSpawnPermissions(result.error))
-                return;
-            assert.equal(result.status, 0, result.stderr || result.stdout);
-            assert.match(result.stderr, /sparkshell backend unavailable/);
-            assert.match(result.stderr, /Falling back to the explore harness/);
-            assert.match(result.stdout, /fallback harness recovered the lookup/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('falls back to the explore harness when sparkshell is GLIBC-incompatible', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-sparkshell-glibc-'));
-        try {
-            const sparkshellStub = join(wd, 'sparkshell-stub.sh');
-            const harnessStub = join(wd, 'explore-stub.sh');
-            await writeFile(sparkshellStub, "#!/bin/sh\necho \"omx-sparkshell: /lib/x86_64-linux-gnu/libc.so.6: version \\`GLIBC_2.39' not found\" 1>&2\nexit 1\n");
-            await writeFile(harnessStub, '#!/bin/sh\nprintf "%s\\n" "# Answer" "- fallback harness recovered the lookup"\n');
-            await chmod(sparkshellStub, 0o755);
-            await chmod(harnessStub, 0o755);
-            const result = runOmx(wd, ['explore', '--prompt', 'git log --oneline'], {
-                OMX_SPARKSHELL_BIN: sparkshellStub,
-                OMX_EXPLORE_BIN: harnessStub,
-            });
-            if (shouldSkipForSpawnPermissions(result.error))
-                return;
-            assert.equal(result.status, 0, result.stderr || result.stdout);
-            assert.match(result.stderr, /GLIBC symbols/i);
-            assert.match(result.stderr, /Falling back to the explore harness/);
-            assert.match(result.stdout, /fallback harness recovered the lookup/);
-            assert.doesNotMatch(result.stderr, /version `GLIBC_2\.39' not found/);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('passes prompt to harness and preserves markdown stdout', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-cmd-'));
-        try {
-            const stub = join(wd, 'explore-stub.sh');
-            const capturePath = join(wd, 'capture.txt');
-            await writeFile(stub, `#!/bin/sh\nprintf '%s\n' \"$@\" > ${JSON.stringify(capturePath)}\nprintf '# Files\\n- demo\\n'\n`);
-            await chmod(stub, 0o755);
-            const stdoutChunks = [];
-            const stderrChunks = [];
-            const originalStdout = process.stdout.write.bind(process.stdout);
-            const originalStderr = process.stderr.write.bind(process.stderr);
-            process.stdout.write = ((chunk) => {
-                stdoutChunks.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf-8'));
-                return true;
-            });
-            process.stderr.write = ((chunk) => {
-                stderrChunks.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf-8'));
-                return true;
-            });
-            const originalEnv = process.env.OMX_EXPLORE_BIN;
-            process.env.OMX_EXPLORE_BIN = stub;
-            const originalCwd = process.cwd();
-            process.chdir(wd);
-            try {
-                await exploreCommand(['--prompt', 'find', 'auth']);
-            }
-            finally {
-                process.chdir(originalCwd);
-                if (originalEnv === undefined)
-                    delete process.env.OMX_EXPLORE_BIN;
-                else
-                    process.env.OMX_EXPLORE_BIN = originalEnv;
-                process.stdout.write = originalStdout;
-                process.stderr.write = originalStderr;
-            }
-            assert.equal(stderrChunks.join(''), `${EXPLORE_DEPRECATION_NOTICE}\n`);
-            assert.equal(stdoutChunks.join(''), '# Files\n- demo\n');
-            const captured = (await readFile(capturePath, 'utf-8')).trim().split('\n');
-            assert.ok(captured.includes('--prompt'));
-            assert.ok(captured.includes('find auth'));
-            assert.ok(captured.includes('--model-spark'));
-            assert.ok(captured.includes('--model-fallback'));
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('works end-to-end through omx explore', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-e2e-'));
-        try {
-            const stub = join(wd, 'explore-stub.sh');
-            await writeFile(stub, '#!/bin/sh\nprintf "# Answer\\nReady to proceed\\n"\n');
-            await chmod(stub, 0o755);
-            const result = runOmx(wd, ['explore', '--prompt', 'find auth'], { OMX_EXPLORE_BIN: stub });
-            if (shouldSkipForSpawnPermissions(result.error))
-                return;
-            assert.equal(result.status, 0, result.stderr || result.stdout);
-            assert.equal(result.stdout, '# Answer\nReady to proceed\n');
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('passes project-local CODEX_HOME to the harness when persisted setup scope is project', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-project-codex-home-e2e-'));
-        try {
-            const stub = join(wd, 'explore-stub.sh');
-            const capturePath = join(wd, 'capture.txt');
-            const badHome = join(wd, 'home-as-file');
-            await writeFile(badHome, 'not-a-directory');
-            await mkdir(join(wd, '.omx'), { recursive: true });
-            await writeFile(join(wd, '.omx', 'setup-scope.json'), JSON.stringify({ scope: 'project' }));
-            await writeFile(stub, `#!/bin/sh\nprintf 'CODEX_HOME=%s\\n' \"$CODEX_HOME\" > ${JSON.stringify(capturePath)}\nprintf '# Answer\\nReady to proceed\\n'\n`);
-            await chmod(stub, 0o755);
-            const result = runOmx(wd, ['explore', '--prompt', 'find auth'], {
-                HOME: badHome,
-                OMX_EXPLORE_BIN: stub,
-            });
-            if (shouldSkipForSpawnPermissions(result.error))
-                return;
-            assert.equal(result.status, 0, result.stderr || result.stdout);
-            assert.equal(result.stdout, '# Answer\nReady to proceed\n');
-            assert.equal(normalizeDarwinTmpPath(await readFile(capturePath, 'utf-8')), `CODEX_HOME=${normalizeDarwinTmpPath(join(wd, '.codex'))}\n`);
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('launches an env-node codex binary while keeping model shell commands allowlisted', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-harness-e2e-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const capturePath = join(wd, 'capture.json');
-                const codexStub = await writeEnvNodeCodexStub(wd, capturePath);
-                const testPath = await createExploreTestPath(wd);
-                const result = runOmx(wd, ['explore', '--prompt', 'find buildTmuxPaneCommand'], {
-                    OMX_EXPLORE_CODEX_BIN: codexStub,
-                    PATH: testPath,
-                });
-                if (shouldSkipForSpawnPermissions(result.error))
-                    return;
-                assert.equal(result.status, 0, result.stderr || result.stdout);
-                assert.equal(result.stdout, '# Answer\nHarness completed\n');
-                const captured = await readFile(capturePath, 'utf-8');
-                assert.match(captured, /PATH=.*omx-explore-allowlist-/);
-                assert.match(captured, /SHELL=.*omx-explore-allowlist-.*\/bin\/bash$/m);
-                assert.match(captured, /ALLOWED_STATUS=0/);
-                assert.match(captured, /BLOCKED_STATUS=(?!0)\d+/);
-                assert.match(captured, /--ARGV--[\s\S]*\nexec\n/);
-                assert.match(captured, /model_instructions_file=.*explore-lightweight-AGENTS\.md/);
-                assert.match(captured, /--ALLOWED_STDOUT--[\s\S]*ripgrep/i);
-                assert.match(captured, /--BLOCKED_STDERR--[\s\S]*not on the omx explore allowlist/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('bypasses a POSIX package-manager codex shim without broadening the allowlisted PATH', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-harness-posix-shim-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const capturePath = join(wd, 'capture.txt');
-                const codexShim = await writePosixPackageManagerCodexShim(wd, capturePath);
-                const testPath = await createExploreTestPath(wd);
-                const result = runOmx(wd, ['explore', '--prompt', 'find buildTmuxPaneCommand'], {
-                    OMX_EXPLORE_CODEX_BIN: codexShim,
-                    PATH: testPath,
-                });
-                if (shouldSkipForSpawnPermissions(result.error))
-                    return;
-                assert.equal(result.status, 0, result.stderr || result.stdout);
-                assert.equal(result.stdout, '# Answer\nHarness completed\n');
-                const captured = await readFile(capturePath, 'utf-8');
-                assert.match(captured, /ARGV0=.*\/node$/m);
-                assert.match(captured, /ARGV1=.*node_modules\/@openai\/codex\/bin\/codex\.js$/m);
-                assert.match(captured, /PATH=.*omx-explore-allowlist-/);
-                assert.doesNotMatch(captured, /PATH=.*node_modules\/\.bin/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('supports --prompt-file end-to-end with the harness', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-harness-prompt-file-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const capturePath = join(wd, 'capture.json');
-                const codexStub = await writeEnvNodeCodexStub(wd, capturePath);
-                const testPath = await createExploreTestPath(wd);
-                const promptPath = join(wd, 'prompt.md');
-                await writeFile(promptPath, 'find prompt-file support\n');
-                const result = runOmx(wd, ['explore', '--prompt-file', promptPath], {
-                    OMX_EXPLORE_CODEX_BIN: codexStub,
-                    PATH: testPath,
-                });
-                if (shouldSkipForSpawnPermissions(result.error))
-                    return;
-                assert.equal(result.status, 0, result.stderr || result.stdout);
-                assert.equal(result.stdout, '# Answer\nHarness completed\n');
-                const captured = await readFile(capturePath, 'utf-8');
-                assert.match(captured, /--ARGV--[\s\S]*find prompt-file support/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('preserves must-preserve facts in a long noisy summary fixture', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-fidelity-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const harnessStub = await writeExploreHarnessScenarioStub(wd, `
-printf '%s\n' '# Answer' '## Critical facts' '- MUST: summary mode stayed read-only' '- MUST: blocked command stayed node --version' '- MUST: next command is omx team status <team-name>' '' '## Noise'
-i=0
-while [ "$i" -lt 80 ]; do
-  printf '%s\n' "- distractor line $i"
-  i=$((i + 1))
-done
-exit 0
-`);
-                const result = await runExploreCommandForTest(wd, ['--prompt', 'surface the critical facts'], {
-                    OMX_EXPLORE_BIN: harnessStub,
-                });
-                assert.equal(result.exitCode, 0, result.stderr || result.stdout);
-                assert.match(result.stdout, /MUST: summary mode stayed read-only/);
-                assert.match(result.stdout, /MUST: blocked command stayed node --version/);
-                assert.match(result.stdout, /MUST: next command is omx team status <team-name>/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('preserves buried critical facts in adversarial noisy output', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-adversarial-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const harnessStub = await writeExploreHarnessScenarioStub(wd, `
-printf '# Answer\n'
-i=0
-while [ "$i" -lt 40 ]; do
-  printf '%s\n' "- noise before signal $i"
-  i=$((i + 1))
-done
-printf '%s\n' '- MUST: fallback route remained available'
-i=0
-while [ "$i" -lt 40 ]; do
-  printf '%s\n' "- noise after signal $i"
-  i=$((i + 1))
-done
-printf '%s\n' '- MUST: stderr guidance stayed actionable'
-printf '%s\n' '- MUST: semantic facts survive compression'
-exit 0
-`);
-                const result = await runExploreCommandForTest(wd, ['--prompt', 'extract buried signals'], {
-                    OMX_EXPLORE_BIN: harnessStub,
-                });
-                assert.equal(result.exitCode, 0, result.stderr || result.stdout);
-                assert.match(result.stdout, /MUST: fallback route remained available/);
-                assert.match(result.stdout, /MUST: stderr guidance stayed actionable/);
-                assert.match(result.stdout, /MUST: semantic facts survive compression/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('falls back after spark failure with explicit output notice and actionable stderr guidance', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-fallback-success-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const harnessStub = await writeExploreHarnessScenarioStub(wd, `
-printf '[omx explore] fallback-attempt=model from=\`%s\` to=\`gpt-5.5\` reason=spark_attempt_failed exit=17. Cost/behavior boundary changed if fallback succeeds; stdout fallback notice is emitted only after successful fallback output.\n' "\${OMX_EXPLORE_SPARK_MODEL:-spark-test-model}" >&2
-printf '[omx explore] spark model \`%s\` unavailable or failed (exit 17). Falling back to \`gpt-5.5\`.\n' "\${OMX_EXPLORE_SPARK_MODEL:-spark-test-model}" >&2
-printf '[omx explore] spark stderr: spark timed out; retry with the frontier fallback\n' >&2
-printf '%s\n' '## OMX Explore fallback' '- fallback: model' '- from: \`spark-test-model\`' '- to: \`gpt-5.5\`' '- reason: spark attempt failed with exit 17' '- boundary: cost/behavior may differ from the low-cost spark path' '' '# Answer' '- recovered with fallback model' '- MUST: actionable recovery path remained available'
-`);
-                const result = await runExploreCommandForTest(wd, ['--prompt', 'validate fallback recovery'], {
-                    OMX_EXPLORE_BIN: harnessStub,
-                    OMX_EXPLORE_SPARK_MODEL: 'spark-test-model',
-                });
-                assert.equal(result.exitCode, 0, result.stderr || result.stdout);
-                assert.match(result.stderr, /fallback-attempt=model from=`spark-test-model` to=`gpt-5\.5` reason=spark_attempt_failed exit=17/);
-                assert.match(result.stderr, /stdout fallback notice is emitted only after successful fallback output/);
-                assert.match(result.stderr, /spark model `spark-test-model` unavailable or failed \(exit 17\)/);
-                assert.match(result.stderr, /spark stderr: spark timed out; retry with the frontier fallback/);
-                assert.match(result.stdout, /## OMX Explore fallback/);
-                assert.match(result.stdout, /fallback: model/);
-                assert.match(result.stdout, /from: `spark-test-model`/);
-                assert.match(result.stdout, /to: `gpt-5\.5`/);
-                assert.match(result.stdout, /cost\/behavior may differ from the low-cost spark path/);
-                assert.match(result.stdout, /recovered with fallback model/);
-                assert.match(result.stdout, /MUST: actionable recovery path remained available/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-    it('reports both failed attempts with codes and final actionable stderr end-to-end', async () => {
-        const wd = await mkdtemp(join(tmpdir(), 'omx-explore-fallback-failure-'));
-        try {
-            await withPackagedExploreHarnessHidden(async () => {
-                const harnessStub = await writeExploreHarnessScenarioStub(wd, `
-printf '[omx explore] fallback-attempt=model from=\`%s\` to=\`gpt-5.5\` reason=spark_attempt_failed exit=23. Cost/behavior boundary changed if fallback succeeds; stdout fallback notice is emitted only after successful fallback output.\n' "\${OMX_EXPLORE_SPARK_MODEL:-spark-test-model}" >&2
-printf '[omx explore] spark model \`%s\` unavailable or failed (exit 23). Falling back to \`gpt-5.5\`.\n' "\${OMX_EXPLORE_SPARK_MODEL:-spark-test-model}" >&2
-printf '[omx explore] spark stderr: spark backend unavailable; install the fallback runtime\n' >&2
-printf '[omx explore] both spark (\`%s\`) and fallback (\`gpt-5.5\`) attempts failed (codes 23 / 29). Last stderr: fallback backend unavailable; set OMX_EXPLORE_BIN to a working harness\n' "\${OMX_EXPLORE_SPARK_MODEL:-spark-test-model}" >&2
-exit 1
-`);
-                const result = await runExploreCommandForTest(wd, ['--prompt', 'validate failure guidance'], {
-                    OMX_EXPLORE_BIN: harnessStub,
-                    OMX_EXPLORE_SPARK_MODEL: 'spark-test-model',
-                });
-                assert.equal(result.exitCode, 1, result.stderr || result.stdout);
-                assert.match(result.stderr, /fallback-attempt=model from=`spark-test-model` to=`gpt-5\.5` reason=spark_attempt_failed exit=23/);
-                assert.match(result.stderr, /stdout fallback notice is emitted only after successful fallback output/);
-                assert.doesNotMatch(result.stderr, /output includes a fallback notice/);
-                assert.doesNotMatch(result.stdout, /## OMX Explore fallback/);
-                assert.match(result.stderr, /spark model `spark-test-model` unavailable or failed \(exit 23\)/);
-                assert.match(result.stderr, /spark stderr: spark backend unavailable; install the fallback runtime/);
-                assert.match(result.stderr, /both spark \(`spark-test-model`\) and fallback \(`gpt-5\.5`\) attempts failed \(codes 23 \/ 29\)\. Last stderr: fallback backend unavailable; set OMX_EXPLORE_BIN to a working harness/);
-            });
-        }
-        finally {
-            await rm(wd, { recursive: true, force: true });
-        }
-    });
-});
 //# sourceMappingURL=explore.test.js.map