oh-my-codex 0.20.2 → 0.20.3

package/dist/scripts/__tests__/role-intent-durable-recovery-3181.test.js

@@ -1,174 +1,54 @@
 import assert from 'node:assert/strict';
 import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
 import { describe, it } from 'node:test';
-import { ralplanCommand } from '../../cli/ralplan.js';
-import { readSubagentTrackingState, subagentTrackingPath } from '../../subagents/tracker.js';
-import { dispatchCodexNativeHook } from '../codex-native-hook.js';
-async function invoke(cwd, args) {
-    const stdout = [];
-    const stderr = [];
-    const previous = process.exitCode;
+import { bindPendingRoleIntentUnderLock, readSubagentTrackingState, readSubagentTrackingStateStrict, recordPendingRoleIntent, subagentTrackingPath, } from '../../subagents/tracker.js';
+const ARCHITECT_TOKEN = 'abcdef0123456789abcdef0123456789';
+const CRITIC_TOKEN = '00112233445566778899aabbccddeeff';
+async function withCwd(fn) {
+    const cwd = await mkdtemp(join(tmpdir(), 'omx-3194-'));
     try {
-        process.exitCode = undefined;
-        await ralplanCommand(args, { cwd: () => cwd, stdout: (l) => stdout.push(l), stderr: (l) => stderr.push(l) });
-        return { json: JSON.parse(stdout.join('\n')), exitCode: process.exitCode };
+        await fn(cwd);
     }
     finally {
-        process.exitCode = previous;
+        await rm(cwd, { recursive: true, force: true });
     }
 }
-function roleIntentArgs(role, parentThread) {
-    return ['role-intent', 'write', '--role', role, '--parent-thread', parentThread, '--json'];
-}
-async function withFreshEnv(fn) {
-    const prior = { OMX_SESSION_ID: process.env.OMX_SESSION_ID, CODEX_SESSION_ID: process.env.CODEX_SESSION_ID, SESSION_ID: process.env.SESSION_ID };
-    delete process.env.OMX_SESSION_ID;
-    delete process.env.CODEX_SESSION_ID;
-    delete process.env.SESSION_ID;
-    try {
-        await fn();
-    }
-    finally {
-        for (const key of ['OMX_SESSION_ID', 'CODEX_SESSION_ID', 'SESSION_ID']) {
-            if (prior[key] === undefined)
-                delete process.env[key];
-            else
-                process.env[key] = prior[key];
-        }
-    }
-}
-// Both plugin and legacy delivery drive the same native hook + CLI + tracker recovery path.
-// Leader attestation is established only on the strictly-gated fresh leader PreToolUse
-// entry point (the role-intent command's own PreToolUse fires before it executes); both
-// deliveries route through it, so durable recovery is proven identically for each.
-const DELIVERIES = [
-    { label: 'plugin (PreToolUse-seeded)', event: 'PreToolUse' },
-    { label: 'legacy (PreToolUse-seeded)', event: 'PreToolUse' },
-];
-async function seedAuthenticatedLeader(cwd, sessionId, event) {
-    if (event === 'SessionStart') {
-        await dispatchCodexNativeHook({ hook_event_name: 'SessionStart', cwd, session_id: sessionId }, { cwd, sessionOwnerPid: process.pid });
-    }
-    else {
-        await dispatchCodexNativeHook({
-            hook_event_name: 'PreToolUse',
-            cwd,
-            session_id: sessionId,
-            thread_id: sessionId,
-            tool_name: 'Bash',
-            tool_use_id: 'tool-first',
-            tool_input: { command: 'omx ralplan role-intent write --role architect --parent-thread "$CODEX_THREAD_ID" --json' },
-        }, { cwd, sessionOwnerPid: process.pid });
-    }
-}
-describe('#3181 durable bootstrap-order recovery', () => {
-    for (const { label, event } of DELIVERIES) {
-        it(`${label}: same-session resume recovers the exact adapted Architect intent/receipt/spawn_task_name before any spawn`, async () => {
-            const cwd = await mkdtemp(join(tmpdir(), 'omx-3181-recover-'));
-            await withFreshEnv(async () => {
-                try {
-                    const sessionId = `codex-native-${event}`;
-                    await seedAuthenticatedLeader(cwd, sessionId, event);
-                    // Durably record the Architect intent (before any worker spawn).
-                    const first = (await invoke(cwd, roleIntentArgs('architect', sessionId))).json;
-                    assert.equal(first.ok, true);
-                    assert.equal(first.intent.role, 'architect');
-                    const token = first.intent.correlation_token;
-                    const spawnTaskName = first.spawn_task_name;
-                    // Crash/restart-before-first-spawn: durable state persists on disk. On the SAME
-                    // canonical session, the resumed leader re-runs role-intent and MUST recover the
-                    // exact intent/receipt/spawn_task_name — never a fresh unrelated intent.
-                    const resumed = (await invoke(cwd, roleIntentArgs('architect', sessionId))).json;
-                    assert.equal(resumed.intent.correlation_token, token, 'exact correlation token must be recovered');
-                    assert.equal(resumed.spawn_task_name, spawnTaskName, 'exact spawn_task_name must be recovered');
-                    const state = await readSubagentTrackingState(cwd);
-                    assert.equal(state.pending_role_intents.length, 1, 'no unrelated replacement intent may be created');
-                    assert.equal(state.pending_role_intents[0]?.role, 'architect');
-                    // Ordering invariant: while the Architect intent is still live (pre-spawn), a Critic
-                    // request for the same leader must NOT reorder/replace it — single_flight_conflict.
-                    const critic = (await invoke(cwd, roleIntentArgs('critic', sessionId))).json;
-                    assert.deepEqual(critic, { ok: false, reason: 'single_flight_conflict' });
-                    assert.equal((await readSubagentTrackingState(cwd)).pending_role_intents.length, 1);
-                }
-                finally {
-                    await rm(cwd, { recursive: true, force: true });
-                }
+describe('#3194 pending role-intent durability', () => {
+    it('keeps Architect before Critic as distinct single-flight intents and preserves binding integrity', async () => {
+        await withCwd(async (cwd) => {
+            const architect = recordPendingRoleIntent(cwd, {
+                role: 'architect', sessionId: 'synthetic-session', parentThreadId: 'synthetic-parent', correlationToken: ARCHITECT_TOKEN, nowMs: 0,
             });
-        });
-    }
-    it('idempotent retry after crash-during-recovery converges to one intent/receipt', async () => {
-        const cwd = await mkdtemp(join(tmpdir(), 'omx-3181-recover-retry-'));
-        await withFreshEnv(async () => {
-            try {
-                const sessionId = 'codex-native-retry';
-                await seedAuthenticatedLeader(cwd, sessionId, 'PreToolUse');
-                const receipts = [];
-                for (let i = 0; i < 3; i += 1) {
-                    const r = (await invoke(cwd, roleIntentArgs('architect', sessionId))).json;
-                    receipts.push(r.intent.correlation_token);
-                }
-                assert.equal(new Set(receipts).size, 1, 'every retry recovers the same receipt');
-                assert.equal((await readSubagentTrackingState(cwd)).pending_role_intents.length, 1);
-            }
-            finally {
-                await rm(cwd, { recursive: true, force: true });
-            }
-        });
-    });
-    it('foreign-session resume fails closed and never adopts the foreign leader', async () => {
-        const cwd = await mkdtemp(join(tmpdir(), 'omx-3181-recover-foreign-'));
-        const prior = process.env.OMX_SESSION_ID;
-        try {
-            delete process.env.CODEX_SESSION_ID;
-            delete process.env.SESSION_ID;
-            // Real leader session A is authenticated and has a durable intent.
-            await withFreshEnv(async () => {
-                await seedAuthenticatedLeader(cwd, 'codex-native-A', 'PreToolUse');
-                const r = (await invoke(cwd, roleIntentArgs('architect', 'codex-native-A'))).json;
-                assert.equal(r.ok, true);
+            assert.equal(architect.ok, true);
+            const critic = recordPendingRoleIntent(cwd, {
+                role: 'critic', sessionId: 'synthetic-session', parentThreadId: 'synthetic-parent', correlationToken: CRITIC_TOKEN, nowMs: 0,
             });
-            // A foreign process selects session A by environment while the usable pointer is A's
-            // session.json — but resumes from a DIFFERENT workspace is simulated by pointing the
-            // env at A while attempting to bind a foreign leader thread.
-            process.env.OMX_SESSION_ID = 'codex-native-A';
-            const foreign = (await invoke(cwd, roleIntentArgs('architect', 'attacker-thread'))).json;
-            assert.equal(foreign.ok, false);
-            assert.equal(foreign.reason, 'native_anchor_mismatch');
-        }
-        finally {
-            if (prior === undefined)
-                delete process.env.OMX_SESSION_ID;
-            else
-                process.env.OMX_SESSION_ID = prior;
-            await rm(cwd, { recursive: true, force: true });
-        }
+            assert.deepEqual(critic, { ok: false, reason: 'single_flight_conflict' });
+            const binding = bindPendingRoleIntentUnderLock(cwd, {
+                sessionId: 'synthetic-session', parentThreadId: 'synthetic-parent', correlationToken: ARCHITECT_TOKEN, nowMs: 1,
+            }, (state) => state);
+            assert.equal(binding?.role, 'architect');
+            assert.equal(binding?.alreadyBound, false);
+            const retry = bindPendingRoleIntentUnderLock(cwd, {
+                sessionId: 'synthetic-session', parentThreadId: 'synthetic-parent', correlationToken: ARCHITECT_TOKEN, nowMs: 2,
+            }, () => { throw new Error('an existing binding must not invoke the callback'); });
+            assert.equal(retry?.alreadyBound, true);
+            const state = await readSubagentTrackingState(cwd);
+            assert.equal(state.pending_role_intents.length, 1);
+            assert.equal(state.pending_role_intents[0]?.binding_state, 'bound');
+            assert.equal(state.pending_role_intents[0]?.correlation_token, ARCHITECT_TOKEN);
+        });
     });
-    it('malformed/corrupt durable tracker on resume fails closed (native_anchor_unavailable) and never overwrites the evidence', async () => {
-        const cwd = await mkdtemp(join(tmpdir(), 'omx-3181-recover-malformed-'));
-        await withFreshEnv(async () => {
-            try {
-                const sessionId = 'codex-native-malformed';
-                await seedAuthenticatedLeader(cwd, sessionId, 'PreToolUse');
-                (await invoke(cwd, roleIntentArgs('architect', sessionId))).json;
-                // Corrupt the durable tracker. Per FR-20 the malformed evidence must not be trusted:
-                // the CLI strict-reads it and fails closed rather than reading it as empty and
-                // overwriting it via the legacy path (which would erase leader/subagent evidence).
-                const corrupt = '{ corrupt tracker not valid json';
-                await mkdir(join(cwd, '.omx', 'state'), { recursive: true });
-                await writeFile(subagentTrackingPath(cwd), corrupt);
-                // A spoofed parent AND the real native leader both fail closed on a corrupt tracker.
-                const spoofed = (await invoke(cwd, roleIntentArgs('architect', 'attacker-thread'))).json;
-                assert.deepEqual(spoofed, { ok: false, reason: 'native_anchor_unavailable' }, 'spoof on a corrupt tracker fails closed');
-                const nativeLeader = (await invoke(cwd, roleIntentArgs('architect', sessionId))).json;
-                assert.deepEqual(nativeLeader, { ok: false, reason: 'native_anchor_unavailable' }, 'even the native leader fails closed on a corrupt tracker');
-                // The corrupt tracker is never overwritten (evidence preserved, not silently reset).
-                assert.equal(await readFile(subagentTrackingPath(cwd), 'utf-8'), corrupt, 'corrupt tracker must not be overwritten');
-            }
-            finally {
-                await rm(cwd, { recursive: true, force: true });
-            }
+    it('strictly rejects corrupt durable tracker bytes without mutation', async () => {
+        await withCwd(async (cwd) => {
+            const path = subagentTrackingPath(cwd);
+            const corrupt = '{ synthetic corrupt tracker';
+            await mkdir(dirname(path), { recursive: true });
+            await writeFile(path, corrupt);
+            assert.deepEqual(await readSubagentTrackingStateStrict(cwd), { ok: false });
+            assert.equal(await readFile(path, 'utf8'), corrupt);
         });
     });
 });

package/dist/scripts/__tests__/role-intent-durable-recovery-3181.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"role-intent-durable-recovery-3181.test.js","sourceRoot":"","sources":["../../../src/scripts/__tests__/role-intent-durable-recovery-3181.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAalE,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,IAAc;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC7B,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7G,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,YAAoB;IACxD,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,EAAuB;IACjD,MAAM,KAAK,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;IACjJ,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAClC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,CAAU,EAAE,CAAC;YAChF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;gBACjD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,uFAAuF;AACvF,wFAAwF;AACxF,mFAAmF;AACnF,MAAM,UAAU,GAAmE;IACjF,EAAE,KAAK,EAAE,4BAA4B,EAAE,KAAK,EAAE,YAAY,EAAE;IAC5D,EAAE,KAAK,EAAE,4BAA4B,EAAE,KAAK,EAAE,YAAY,EAAE;CAC7D,CAAC;AAEF,KAAK,UAAU,uBAAuB,CAAC,GAAW,EAAE,SAAiB,EAAE,KAAoC;IACzG,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,MAAM,uBAAuB,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxI,CAAC;SAAM,CAAC;QACN,MAAM,uBAAuB,CAC3B;YACE,eAAe,EAAE,YAAY;YAC7B,GAAG;YACH,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,YAAY;YACzB,UAAU,EAAE,EAAE,OAAO,EAAE,0FAA0F,EAAE;SACpH,EACD,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,EAAE,CACtC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,CAAC;QAC1C,EAAE,CAAC,GAAG,KAAK,4GAA4G,EAAE,KAAK,IAAI,EAAE;YAClI,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAC/D,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,gBAAgB,KAAK,EAAE,CAAC;oBAC1C,MAAM,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;oBAErD,iEAAiE;oBACjE,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAe,CAAC;oBAC1F,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;oBAC7B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC;oBAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,CAAC;oBAE5C,gFAAgF;oBAChF,iFAAiF;oBACjF,yEAAyE;oBACzE,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAe,CAAC;oBAC5F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,2CAA2C,CAAC,CAAC;oBACnG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,aAAa,EAAE,yCAAyC,CAAC,CAAC;oBAEhG,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;oBACnD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,EAAE,gDAAgD,CAAC,CAAC;oBACrG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;oBAE/D,qFAAqF;oBACrF,oFAAoF;oBACpF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAwC,CAAC;oBACjH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;oBAC1E,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtF,CAAC;wBAAS,CAAC;oBACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACrE,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,oBAAoB,CAAC;gBACvC,MAAM,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;gBAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAe,CAAC;oBACtF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,uCAAuC,CAAC,CAAC;gBACjF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtF,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAC9B,mEAAmE;YACnE,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;gBAC5B,MAAM,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;gBACnE,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAe,CAAC;gBAC7F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,qFAAqF;YACrF,qFAAqF;YACrF,6DAA6D;YAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,gBAAgB,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAwC,CAAC;YAC7H,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;;gBACtD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;YACxC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wHAAwH,EAAE,KAAK,IAAI,EAAE;QACtI,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;QACzE,MAAM,YAAY,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,wBAAwB,CAAC;gBAC3C,MAAM,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;gBAC5D,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAe,CAAC;gBAC5E,qFAAqF;gBACrF,+EAA+E;gBAC/E,mFAAmF;gBACnF,MAAM,OAAO,GAAG,kCAAkC,CAAC;gBACnD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,SAAS,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;gBAEpD,qFAAqF;gBACrF,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAwC,CAAC;gBAC7H,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,yCAAyC,CAAC,CAAC;gBACzH,MAAM,YAAY,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAwC,CAAC;gBAC1H,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,0DAA0D,CAAC,CAAC;gBAE/I,qFAAqF;gBACrF,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,yCAAyC,CAAC,CAAC;YACvH,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"role-intent-durable-recovery-3181.test.js","sourceRoot":"","sources":["../../../src/scripts/__tests__/role-intent-durable-recovery-3181.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,+BAA+B,EAC/B,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD,KAAK,UAAU,OAAO,CAAC,EAAkC;IACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACrF,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,EAAE;gBAC7C,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;aACnI,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,EAAE;gBAC1C,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;aAC7H,CAAC,CAAC;YACH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,8BAA8B,CAAC,GAAG,EAAE;gBAClD,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;aAChH,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,8BAA8B,CAAC,GAAG,EAAE;gBAChD,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;aAChH,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,MAAM,CAAC,SAAS,CAAC,MAAM,+BAA+B,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scripts/__tests__/smoke-packed-install.test.js

@@ -1,12 +1,13 @@
 // @ts-nocheck
 import assert from 'node:assert/strict';
-import { access, chmod, mkdtemp, mkdir, rm, symlink, writeFile } from 'node:fs/promises';
+import { access, chmod, mkdtemp, mkdir, readFile, rm, symlink, writeFile } from 'node:fs/promises';
 import { EventEmitter } from 'node:events';
 import { tmpdir } from 'node:os';
 import { delimiter, join } from 'node:path';
 import { PassThrough } from 'node:stream';
 import { test } from 'node:test';
-import { ensureRepoDependencies, hasUsableNodeModules, buildPackedRegressionEnvironment, CODEX_APP_SERVER_TIMEOUTS, CodexAppServer, CodexExecutableNotFoundError, MANAGED_CODEX_HOOK_EVENTS, PACKED_INSTALL_NATIVE_HOOK_SMOKE_EVENTS, PACKED_INSTALL_NATIVE_HOOK_REGRESSION_PROMPTS, PACKED_INSTALL_SMOKE_CORE_COMMANDS, appendForeignHookGroups, appendDisplayOrderStableForeignHookGroups, buildNativeHookSmokePayload, createCodexBatchWriteEnvelope, createCodexHooksListEnvelope, createCodexInitializeEnvelope, foreignHookGroupSnapshot, generatedHookTrustState, parseNpmPackJsonOutput, parseCodexHooksListResult, probeCodexVersion, resolveGitCommonDir, resolveReusableNodeModulesSource, validateHookStdout, assertCodexBatchWriteResult, assertGeneratedTrustMatchesCodex, managedCodexHooksByEvent, } from '../smoke-packed-install.js';
+import { assertInstalledPluginSurface, assertInstalledReasoningDeclarationContract, assertInstalledReasoningRuntimeContract, assertInstalledRootReasoningHelp, assertInstalledRootReasoningRejection, assertInstalledTeamSkillContract, assertPackedInstallFileMetadata, buildNativeHookSmokePayload, ensureRepoDependencies, hasUsableNodeModules, buildPackedRegressionEnvironment, CODEX_APP_SERVER_TIMEOUTS, CodexAppServer, CodexExecutableNotFoundError, MANAGED_CODEX_HOOK_EVENTS, PACKED_INSTALL_NATIVE_HOOK_SMOKE_EVENTS, PACKED_INSTALL_NATIVE_HOOK_REGRESSION_PROMPTS, PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE, PACKED_INSTALL_SMOKE_CORE_COMMANDS, appendForeignHookGroups, appendDisplayOrderStableForeignHookGroups, createCodexBatchWriteEnvelope, createCodexHooksListEnvelope, createCodexInitializeEnvelope, foreignHookGroupSnapshot, generatedHookTrustState, isForbiddenPackedInstallArtifact, PACKED_INSTALL_FORBIDDEN_ARTIFACT_PATHS, PACKED_INSTALL_REQUIRED_ARTIFACT_PATHS, PACKED_INSTALL_PLUGIN_MCP_TARGETS, parseFakeCodexLaunches, parseNpmPackJsonOutput, parseCodexHooksListResult, probeCodexVersion, resolveGitCommonDir, resolveReusableNodeModulesSource, validateHookStdout, assertCodexBatchWriteResult, assertGeneratedTrustMatchesCodex, managedCodexHooksByEvent, } from '../smoke-packed-install.js';
+import { parseNativeSubagentResultDisposition } from '../../leader/contract.js';
 function createFakeCodexAppServer(onRequest) {
     const child = Object.assign(new EventEmitter(), {
         stdin: new PassThrough(),
@@ -28,6 +29,36 @@ test('packed install smoke retains narrow boot commands and adds the isolated li
     assert.equal(PACKED_INSTALL_SMOKE_CORE_COMMANDS.some((argv) => argv.includes('api')), true);
     assert.equal(PACKED_INSTALL_SMOKE_CORE_COMMANDS.some((argv) => argv.includes('sparkshell')), true);
 });
+test('packed 0.144.5 fixture is sanitized, pointer-free, and kept separate from the 0.142.5 lifecycle pin', () => {
+    assert.deepEqual(PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE, {
+        hook_event_name: 'PreToolUse',
+        session_id: 'packed-01445-session',
+        turn_id: 'packed-01445-turn',
+        tool_name: 'Bash',
+        tool_use_id: 'packed-01445-tool',
+        tool_input: { command: 'omx ralplan role-intent write --role architect --parent-thread "$CODEX_THREAD_ID" --json' },
+    });
+    assert.equal(Object.hasOwn(PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE, 'tracker'), false);
+    assert.equal(Object.hasOwn(PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE, 'session_pointer'), false);
+    assert.equal(Object.hasOwn(PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE, 'cwd'), false);
+    assert.equal(Object.hasOwn(PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE, 'thread_id'), false);
+    assert.equal(PACKED_CODEX_01445_NO_POINTER_NO_TRACKER_FIXTURE.session_id.includes('-'), true);
+});
+test('packed plugin collaboration success stays authoritative over unrelated child prose', () => {
+    const packedResponse = JSON.stringify({
+        success: true,
+        status: 'completed',
+        output: 'Packed/plugin child succeeded; an optional adapter was unavailable, unsupported, and not found.',
+    });
+    for (const toolName of [
+        'collaboration.spawn_agent',
+        'collaboration.list_agents',
+        'collaboration.followup_task',
+        'collaboration.wait_agent',
+    ]) {
+        assert.equal(parseNativeSubagentResultDisposition(toolName, packedResponse).kind, 'success', toolName);
+    }
+});
 test('packed lifecycle keeps the pinned newline-delimited Codex app-server envelopes literal', () => {
     assert.deepEqual(createCodexInitializeEnvelope('omx-hook-trust-regression'), {
         id: 1,
@@ -662,6 +693,16 @@ test('display-order-stable foreign fixture preserves pre-approved group and hand
         { event: 'PreToolUse', groupIndex: 1, handlerIndex: 2 },
     ]);
 });
+test('packed install smoke probes every advertised plugin MCP target', () => {
+    assert.deepEqual(PACKED_INSTALL_PLUGIN_MCP_TARGETS, [
+        ['omx_state', 'state', 'omx-state'],
+        ['omx_memory', 'memory', 'omx-memory'],
+        ['omx_code_intel', 'code-intel', 'omx-code-intel'],
+        ['omx_trace', 'trace', 'omx-trace'],
+        ['omx_wiki', 'wiki', 'omx-wiki'],
+        ['omx_hermes', 'hermes', 'omx-hermes'],
+    ]);
+});
 test('packed install smoke covers every installed native hook event with minimal payloads', () => {
     assert.deepEqual(PACKED_INSTALL_NATIVE_HOOK_SMOKE_EVENTS, [
         'SessionStart',
@@ -881,6 +922,27 @@ test('packed install native hook stdout validation enforces event output contrac
     }
     assert.throws(() => validateHookStdout('UserPromptSubmit', '{not json'), /native hook UserPromptSubmit emitted invalid JSON stdout/);
 });
+test('fake Codex launch capture preserves argv and runtime side-effect evidence', () => {
+    const capture = `${JSON.stringify({
+        argv: ['--', '--spark'],
+        cwd: '/tmp/omx-packed-launch',
+        hasResumeSqlite: true,
+        OMX_NOTIFY_TEMP_CONTRACT: null,
+        OMX_TEAM_WORKER_LAUNCH_ARGS: null,
+    })}\n`;
+    assert.deepEqual(parseFakeCodexLaunches(capture), [{
+            argv: ['--', '--spark'],
+            cwd: '/tmp/omx-packed-launch',
+            hasResumeSqlite: true,
+            OMX_NOTIFY_TEMP_CONTRACT: null,
+            OMX_TEAM_WORKER_LAUNCH_ARGS: null,
+        }]);
+    assert.throws(() => parseFakeCodexLaunches(`${JSON.stringify({
+        argv: ['--spark'],
+        cwd: '/tmp/omx-packed-launch',
+        OMX_NOTIFY_TEMP_CONTRACT: null,
+    })}\n`), /fake Codex capture did not contain a valid launch record/);
+});
 test('parseNpmPackJsonOutput ignores prepack logs before npm pack JSON', () => {
     const parsed = parseNpmPackJsonOutput([
         '[sync-plugin-mirror] synced 29 canonical skill directories and plugin metadata',
@@ -893,6 +955,196 @@ test('parseNpmPackJsonOutput ignores prepack logs before npm pack JSON', () => {
     ].join('\n'));
     assert.deepEqual(parsed, [{ filename: 'oh-my-codex-0.15.0.tgz' }]);
 });
+test('packed install metadata requires runtime, declarations, Team skills, and plugin assets only', () => {
+    const files = PACKED_INSTALL_REQUIRED_ARTIFACT_PATHS.map((path) => ({ path }));
+    assert.doesNotThrow(() => assertPackedInstallFileMetadata(files));
+    assert.equal(PACKED_INSTALL_REQUIRED_ARTIFACT_PATHS.some((path) => path.startsWith('docs/')), false, 'repository documentation must not become an npm package requirement');
+    assert.throws(() => assertPackedInstallFileMetadata(files.slice(1)), /npm pack is missing required artifact: dist\/config\/models\.js/);
+    assert.throws(() => assertPackedInstallFileMetadata([...files, { path: 'docs/reference/omx-config-schema-routing.md' }]), /npm pack includes forbidden workspace artifact: docs\/reference\/omx-config-schema-routing\.md/);
+    for (const path of [
+        '.gjc/session/plan.md',
+        'docs/reference/page.md',
+        '.omx/state/team.json',
+        'artifact.tgz',
+        'tmp/smoke-output.txt',
+        'temp/smoke-output.json',
+        'scratch.tmp',
+    ]) {
+        assert.equal(isForbiddenPackedInstallArtifact(path), true, `expected ${path} to be rejected`);
+    }
+    for (const prefix of PACKED_INSTALL_FORBIDDEN_ARTIFACT_PATHS) {
+        assert.equal(isForbiddenPackedInstallArtifact(`${prefix}probe`), true);
+    }
+    assert.equal(isForbiddenPackedInstallArtifact('templates/AGENTS.md'), false);
+    assert.equal(isForbiddenPackedInstallArtifact('dist/notifications/__tests__/temp-mode.test.d.ts'), false);
+});
+test('packed install helpers enforce root rejection and no config mutation', () => {
+    const help = 'Usage: omx reasoning <low|medium|high|xhigh>\n  --xhigh\n';
+    assert.doesNotThrow(() => assertInstalledRootReasoningHelp(help));
+    assert.throws(() => assertInstalledRootReasoningHelp(`${help}  --max\n`), /must not advertise --max/);
+    const maxStderr = [
+        'Reasoning mode "max" is not supported by "omx reasoning".',
+        'Per-agent "max" is configured with agentReasoning; direct -c model_reasoning_effort=... is passed to Codex and remains capability-dependent.',
+        'Invalid reasoning mode "max". Expected one of: low, medium, high, xhigh.',
+        'Usage: omx reasoning <low|medium|high|xhigh>',
+    ].join('\n');
+    assert.doesNotThrow(() => assertInstalledRootReasoningRejection('max', { status: 1, stdout: '', stderr: maxStderr }, undefined, undefined));
+    assert.throws(() => assertInstalledRootReasoningRejection('max', { status: 1, stdout: '', stderr: maxStderr }, undefined, 'created'), /must not create or mutate config\.toml/);
+    const ultraStderr = [
+        'Reasoning mode "ultra" is not supported by OMX root or per-agent reasoning and is not an alias for "max".',
+        'Direct -c model_reasoning_effort=... remains opaque Codex passthrough.',
+        'Invalid reasoning mode "ultra". Expected one of: low, medium, high, xhigh.',
+        'Usage: omx reasoning <low|medium|high|xhigh>',
+    ].join('\n');
+    assert.doesNotThrow(() => assertInstalledRootReasoningRejection('ultra', { status: 1, stdout: '', stderr: ultraStderr }, 'model = "preserve"\n', 'model = "preserve"\n'));
+});
+test('packed install helpers freeze installed runtime and declaration reasoning contracts', () => {
+    const models = {
+        CANONICAL_REASONING_EFFORTS: ['low', 'medium', 'high', 'xhigh'],
+        AMBIGUOUS_UNSUPPORTED_REASONING_EFFORTS: ['max', 'ultra'],
+        PER_AGENT_REASONING_EFFORTS: ['low', 'medium', 'high', 'xhigh', 'max'],
+        ROOT_REASONING_EFFORTS: ['low', 'medium', 'high', 'xhigh'],
+        ROOT_UNSUPPORTED_REASONING_EFFORTS: ['max', 'ultra'],
+        isAmbiguousUnsupportedReasoningEffort: (value) => value.toLowerCase() === 'max' || value.toLowerCase() === 'ultra',
+        isUnsupportedRootReasoningEffort: (value) => value.toLowerCase() === 'max' || value.toLowerCase() === 'ultra',
+        normalizeUnsupportedRootReasoningEffort: (value) => {
+            const normalized = value.trim().toLowerCase();
+            return normalized === 'max' || normalized === 'ultra' ? normalized : undefined;
+        },
+    };
+    assert.doesNotThrow(() => assertInstalledReasoningRuntimeContract(models));
+    const modelsDeclaration = [
+        'export declare const CANONICAL_REASONING_EFFORTS: readonly ["low", "medium", "high", "xhigh"];',
+        'export type ConfiguredAgentReasoningEffort = (typeof CANONICAL_REASONING_EFFORTS)[number];',
+        'export declare const AMBIGUOUS_UNSUPPORTED_REASONING_EFFORTS: readonly ["max", "ultra"];',
+        'export declare const PER_AGENT_REASONING_EFFORTS: readonly ["low", "medium", "high", "xhigh", "max"];',
+        'export type PerAgentReasoningEffort = (typeof PER_AGENT_REASONING_EFFORTS)[number];',
+        'export declare const ROOT_REASONING_EFFORTS: readonly ["low", "medium", "high", "xhigh"];',
+        'export type RootReasoningEffort = (typeof ROOT_REASONING_EFFORTS)[number];',
+        'export declare const ROOT_UNSUPPORTED_REASONING_EFFORTS: readonly ["max", "ultra"];',
+        'export declare function isUnsupportedRootReasoningEffort(value: string): boolean;',
+        'export declare function normalizeUnsupportedRootReasoningEffort(value: string): RootUnsupportedReasoningEffort | undefined;',
+    ].join('\n');
+    const definitionsDeclaration = [
+        'export interface AgentDefinition {',
+        "  reasoningEffort: 'low' | 'medium' | 'high' | 'xhigh';",
+        '}',
+    ].join('\n');
+    assert.doesNotThrow(() => assertInstalledReasoningDeclarationContract({
+        models: modelsDeclaration,
+        definitions: definitionsDeclaration,
+        nativeConfig: 'export interface GeneratedNativeAgentConfig {\n  reasoningEffort?: PerAgentReasoningEffort;\n}',
+        team: 'export type TeamReasoningEffort = PerAgentReasoningEffort;',
+    }));
+    assert.throws(() => assertInstalledReasoningDeclarationContract({
+        models: modelsDeclaration.replace(': boolean;', ': value is RootUnsupportedReasoningEffort;'),
+        definitions: definitionsDeclaration,
+        nativeConfig: 'reasoningEffort?: PerAgentReasoningEffort;',
+        team: 'export type TeamReasoningEffort = PerAgentReasoningEffort;',
+    }), /plain boolean, not a type predicate/);
+});
+test('packed install contract requires canonical/plugin Team skill parity and text', async () => {
+    const canonical = await readFile(join(process.cwd(), 'skills/team/SKILL.md'));
+    const pluginMirror = await readFile(join(process.cwd(), 'plugins/oh-my-codex/skills/team/SKILL.md'));
+    assert.doesNotThrow(() => assertInstalledTeamSkillContract(canonical, pluginMirror));
+});
+test('packed install plugin assertions enforce the packaged plugin contract', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'omx-packed-plugin-surface-'));
+    try {
+        const pluginRoot = join(root, 'plugins/oh-my-codex');
+        const pluginManifestPath = join(pluginRoot, '.codex-plugin/plugin.json');
+        const mcpManifestPath = join(pluginRoot, '.mcp.json');
+        const appManifestPath = join(pluginRoot, '.app.json');
+        const hooksManifestPath = join(pluginRoot, 'hooks/hooks.json');
+        const hookLauncherPath = join(pluginRoot, 'hooks/codex-native-hook.mjs');
+        const hookCommand = 'node "${PLUGIN_ROOT}/hooks/codex-native-hook.mjs"';
+        await mkdir(join(pluginRoot, '.codex-plugin'), { recursive: true });
+        await mkdir(join(pluginRoot, 'hooks'), { recursive: true });
+        const writeValidPluginSurface = async () => {
+            await writeFile(pluginManifestPath, JSON.stringify({
+                name: 'oh-my-codex',
+                version: '0.0.0-test',
+                skills: './skills/',
+                mcpServers: './.mcp.json',
+                apps: './.app.json',
+                hooks: './hooks/hooks.json',
+                interface: {
+                    displayName: 'OMX',
+                    shortDescription: 'Test plugin',
+                    longDescription: 'Structurally valid plugin test fixture.',
+                    developerName: 'Test',
+                    category: 'Developer Tools',
+                },
+            }));
+            await writeFile(mcpManifestPath, JSON.stringify({
+                mcpServers: Object.fromEntries([
+                    ['omx_state', 'state'],
+                    ['omx_memory', 'memory'],
+                    ['omx_code_intel', 'code-intel'],
+                    ['omx_trace', 'trace'],
+                    ['omx_wiki', 'wiki'],
+                    ['omx_hermes', 'hermes'],
+                ].map(([name, service]) => [name, {
+                        command: 'omx',
+                        args: ['mcp-serve', service],
+                        enabled: false,
+                    }])),
+            }));
+            await writeFile(appManifestPath, JSON.stringify({ apps: {} }));
+            await writeFile(hooksManifestPath, JSON.stringify({
+                hooks: Object.fromEntries(PACKED_INSTALL_NATIVE_HOOK_SMOKE_EVENTS.map((eventName) => [eventName, [{
+                            hooks: [{ type: 'command', command: hookCommand }],
+                        }]])),
+            }));
+            await writeFile(hookLauncherPath, [
+                '#!/usr/bin/env node',
+                "import { spawn } from 'node:child_process';",
+                "import { join } from 'node:path';",
+                "const OMX_PLUGIN_HOOK_LAUNCHER_CONTRACT_MARKER = 'omx-plugin-hook-launcher:v1';",
+                "const hookDir = new URL('.', import.meta.url).pathname;",
+                'function readPinnedLauncher() {',
+                "  const launcherPath = join(hookDir, 'omx-command.json');",
+                '  return { command: process.execPath, argsPrefix: [], launcherPath };',
+                '}',
+                'const input = Buffer.from(\'\');',
+                'const { command, argsPrefix } = readPinnedLauncher();',
+                "const child = spawn(command, [...argsPrefix, 'codex-native-hook']);",
+                'child.stdin.end(input);',
+                '',
+            ].join('\n'));
+        };
+        await writeValidPluginSurface();
+        assert.doesNotThrow(() => assertInstalledPluginSurface(root));
+        await writeValidPluginSurface();
+        await writeFile(hookLauncherPath, [
+            '#!/usr/bin/env node',
+            "const OMX_PLUGIN_HOOK_LAUNCHER_CONTRACT_MARKER = 'omx-plugin-hook-launcher:v1';",
+            'process.stdout.write(OMX_PLUGIN_HOOK_LAUNCHER_CONTRACT_MARKER);',
+            '',
+        ].join('\n'));
+        assert.throws(() => assertInstalledPluginSurface(root), /must read its pinned omx-command\.json delegate configuration/);
+        await writeFile(pluginManifestPath, '{}');
+        assert.throws(() => assertInstalledPluginSurface(root), /plugin\.json\.name/);
+        await writeValidPluginSurface();
+        await writeFile(mcpManifestPath, JSON.stringify({ mcpServers: {} }));
+        assert.throws(() => assertInstalledPluginSurface(root), /omx_state/);
+        await writeValidPluginSurface();
+        await writeFile(appManifestPath, JSON.stringify({ apps: [] }));
+        assert.throws(() => assertInstalledPluginSurface(root), /\.app\.json\.apps/);
+        await writeValidPluginSurface();
+        await writeFile(hooksManifestPath, JSON.stringify({ hooks: {} }));
+        assert.throws(() => assertInstalledPluginSurface(root), /hook event is missing: SessionStart/);
+        await writeValidPluginSurface();
+        await writeFile(hookLauncherPath, 'export {};\n');
+        assert.throws(() => assertInstalledPluginSurface(root), /must start with a Node shebang/);
+        await writeValidPluginSurface();
+        await writeFile(mcpManifestPath, '{not-json');
+        assert.throws(() => assertInstalledPluginSurface(root), /plugin manifest is not parseable JSON/);
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
 test('resolveGitCommonDir resolves relative git common dir output against the repo root', () => {
     const commonDir = resolveGitCommonDir('/tmp/worktree', () => ({
         status: 0,