oh-my-codex 0.20.2 → 0.20.5

package/dist/hooks/__tests__/issue-3293-autopilot-handoff.test.js

@@ -0,0 +1,172 @@
+import assert from "node:assert/strict";
+import { existsSync, readFileSync } from "node:fs";
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { describe, it } from "node:test";
+import { DEEP_INTERVIEW_HANDOFF_REJECT_DETAILS, evaluateDeepInterviewRalplanHandoffCommand, } from "../../scripts/codex-native-hook.js";
+const PROJECT_ROOT = join(dirname(new URL(import.meta.url).pathname), "../../..");
+const HANDOFF_MARKER = "<!-- OMX:AUTOPILOT:DEEP-INTERVIEW-RALPLAN-HANDOFF:v1 -->";
+const SESSION_ID = "issue-3293-session";
+function handoffPayload(cwd) {
+    return {
+        mode: "autopilot",
+        active: true,
+        current_phase: "ralplan",
+        session_id: SESSION_ID,
+        workingDirectory: cwd,
+        state: {
+            deep_interview_gate: {
+                status: "complete",
+                rationale: "The requirements are complete.",
+                handoff_summary: "The interview is ready for planning.",
+            },
+            handoff_artifacts: {
+                deep_interview: ".omx/specs/deep-interview-handoff.md",
+            },
+        },
+    };
+}
+function handoffCommand(payload) {
+    return `omx state write --input '${JSON.stringify(payload)}' --json`;
+}
+function documentedHandoffCommand() {
+    const skill = readFileSync(join(PROJECT_ROOT, "skills/autopilot/SKILL.md"), "utf-8");
+    const markerOffset = skill.indexOf(HANDOFF_MARKER);
+    assert.notEqual(markerOffset, -1, "the stable handoff marker must be documented");
+    const fence = skill.slice(markerOffset).match(/^<!--[\s\S]*?-->\n```bash\n([\s\S]*?)\n```/);
+    assert.ok(fence?.[1], "the marker must immediately precede an executable bash fence");
+    return fence[1];
+}
+async function withFixture(action) {
+    const cwd = await mkdtemp(join(tmpdir(), "omx-issue-3293-handoff-"));
+    try {
+        await mkdir(join(cwd, ".omx", "specs"), { recursive: true });
+        await writeFile(join(cwd, ".omx", "specs", "deep-interview-handoff.md"), "# Clarified requirements\n");
+        await action(cwd);
+    }
+    finally {
+        await rm(cwd, { recursive: true, force: true });
+    }
+}
+function assertValueFreeDiagnostic(reason, cwd) {
+    const detail = DEEP_INTERVIEW_HANDOFF_REJECT_DETAILS[reason];
+    assert.ok(detail.length > 0);
+    assert.equal(detail.includes(cwd), false);
+    assert.equal(detail.includes(SESSION_ID), false);
+    assert.equal(detail.includes("deep-interview-handoff.md"), false);
+}
+describe("issue #3293 Autopilot deep-interview handoff", () => {
+    it("admits the exact stable-marked documented handoff command", async () => {
+        await withFixture(async (cwd) => {
+            const command = documentedHandoffCommand();
+            const result = evaluateDeepInterviewRalplanHandoffCommand(cwd, command, SESSION_ID);
+            assert.deepEqual(result, { allowed: true });
+            assert.match(command, /"current_phase":"ralplan"/);
+        });
+    });
+    const rejectionCases = [
+        {
+            name: "reports session_id_missing",
+            reason: "session_id_missing",
+            command: (cwd) => {
+                const payload = handoffPayload(cwd);
+                delete payload.session_id;
+                return handoffCommand(payload);
+            },
+        },
+        {
+            name: "reports session_id_mismatch",
+            reason: "session_id_mismatch",
+            command: (cwd) => handoffCommand({ ...handoffPayload(cwd), session_id: "other-session" }),
+        },
+        {
+            name: "reports session_alias_conflict",
+            reason: "session_alias_conflict",
+            command: (cwd) => handoffCommand({ ...handoffPayload(cwd), codex_session_id: "other-session" }),
+        },
+        {
+            name: "reports working_directory_missing",
+            reason: "working_directory_missing",
+            command: (cwd) => {
+                const payload = handoffPayload(cwd);
+                delete payload.workingDirectory;
+                return handoffCommand(payload);
+            },
+        },
+        {
+            name: "reports working_directory_mismatch",
+            reason: "working_directory_mismatch",
+            command: (cwd) => handoffCommand({ ...handoffPayload(cwd), workingDirectory: join(cwd, "other") }),
+        },
+        {
+            name: "reports gate_incomplete",
+            reason: "gate_incomplete",
+            command: (cwd) => handoffCommand({ ...handoffPayload(cwd), state: {} }),
+        },
+        {
+            name: "reports durable_evidence_missing",
+            reason: "durable_evidence_missing",
+            command: (cwd) => handoffCommand(handoffPayload(cwd)),
+        },
+        {
+            name: "reports unsafe_transport",
+            reason: "unsafe_transport",
+            command: (cwd) => `${handoffCommand(handoffPayload(cwd))} $(printf unsafe)`,
+        },
+        {
+            name: "reports artifact_target_not_allowed",
+            reason: "artifact_target_not_allowed",
+            command: (cwd) => `${handoffCommand(handoffPayload(cwd))} > .omx/specs/allowed.md 2> forbidden.txt`,
+        },
+    ];
+    for (const testCase of rejectionCases) {
+        it(testCase.name, async () => {
+            if (testCase.reason === "durable_evidence_missing") {
+                const cwd = await mkdtemp(join(tmpdir(), "omx-issue-3293-no-evidence-"));
+                try {
+                    const result = evaluateDeepInterviewRalplanHandoffCommand(cwd, testCase.command(cwd), SESSION_ID);
+                    assert.equal(result.allowed, false);
+                    assert.equal(result.reason, testCase.reason);
+                    assertValueFreeDiagnostic(testCase.reason, cwd);
+                }
+                finally {
+                    await rm(cwd, { recursive: true, force: true });
+                }
+                return;
+            }
+            await withFixture(async (cwd) => {
+                const result = evaluateDeepInterviewRalplanHandoffCommand(cwd, testCase.command(cwd), SESSION_ID);
+                assert.equal(result.allowed, false);
+                assert.equal(result.reason, testCase.reason);
+                assertValueFreeDiagnostic(testCase.reason, cwd);
+            });
+        });
+    }
+    it("preserves boolean admission parity for representative accepted and rejected commands", async () => {
+        await withFixture(async (cwd) => {
+            const accepted = handoffCommand(handoffPayload(cwd));
+            const rejected = handoffCommand({ ...handoffPayload(cwd), session_id: "other-session" });
+            assert.equal(evaluateDeepInterviewRalplanHandoffCommand(cwd, accepted, SESSION_ID).allowed, true);
+            assert.equal(evaluateDeepInterviewRalplanHandoffCommand(cwd, rejected, SESSION_ID).allowed, false);
+            const documentedCommand = documentedHandoffCommand();
+            assert.deepEqual(evaluateDeepInterviewRalplanHandoffCommand(cwd, documentedCommand, SESSION_ID), { allowed: true });
+            const unexpectedExpansion = documentedCommand.replace("${PWD:?working directory required}", "${UNTRUSTED_WORKING_DIRECTORY}");
+            assert.deepEqual(evaluateDeepInterviewRalplanHandoffCommand(cwd, unexpectedExpansion, SESSION_ID), {
+                allowed: false,
+                reason: "unsafe_transport",
+            });
+            assert.deepEqual(evaluateDeepInterviewRalplanHandoffCommand(cwd, handoffCommand({
+                ...handoffPayload(cwd),
+                unexpected: true,
+            }), SESSION_ID), {
+                allowed: false,
+                reason: "unsafe_transport",
+            });
+        });
+    });
+    it("keeps the plugin Autopilot skill mirror byte-identical", { skip: existsSync(join(PROJECT_ROOT, "dist", "scripts", "sync-plugin-mirror.js")) ? false : "requires the built sync-plugin mirror runner" }, () => {
+        assert.equal(readFileSync(join(PROJECT_ROOT, "plugins/oh-my-codex/skills/autopilot/SKILL.md"), "utf-8"), readFileSync(join(PROJECT_ROOT, "skills/autopilot/SKILL.md"), "utf-8"));
+    });
+});
+//# sourceMappingURL=issue-3293-autopilot-handoff.test.js.map

package/dist/hooks/__tests__/issue-3293-autopilot-handoff.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-3293-autopilot-handoff.test.js","sourceRoot":"","sources":["../../../src/hooks/__tests__/issue-3293-autopilot-handoff.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,0CAA0C,GAE3C,MAAM,oCAAoC,CAAC;AAE5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;AAClF,MAAM,cAAc,GAAG,0DAA0D,CAAC;AAClF,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,UAAU;QACtB,gBAAgB,EAAE,GAAG;QACrB,KAAK,EAAE;YACL,mBAAmB,EAAE;gBACnB,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,gCAAgC;gBAC3C,eAAe,EAAE,sCAAsC;aACxD;YACD,iBAAiB,EAAE;gBACjB,cAAc,EAAE,sCAAsC;aACvD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC;IACtD,OAAO,4BAA4B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;AACvE,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,2BAA2B,CAAC,EAAE,OAAO,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,8CAA8C,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5F,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,8DAA8D,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAsC;IAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,CAAC,EAAE,4BAA4B,CAAC,CAAC;QACvG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAwC,EAAE,GAAW;IACtF,MAAM,MAAM,GAAG,qCAAqC,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,0CAA0C,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACpF,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAIf;QACH;YACE,IAAI,EAAE,4BAA4B;YAClC,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,OAAO,CAAC,UAAU,CAAC;gBAC1B,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;SACF;QACD;YACE,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;SAC1F;QACD;YACE,IAAI,EAAE,gCAAgC;YACtC,MAAM,EAAE,wBAAwB;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;SAChG;QACD;YACE,IAAI,EAAE,mCAAmC;YACzC,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,OAAO,CAAC,gBAAgB,CAAC;gBAChC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;SACF;QACD;YACE,IAAI,EAAE,oCAAoC;YAC1C,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;SACnG;QACD;YACE,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;SACxE;QACD;YACE,IAAI,EAAE,kCAAkC;YACxC,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;SACtD;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,mBAAmB;SAC5E;QACD;YACE,IAAI,EAAE,qCAAqC;YAC3C,MAAM,EAAE,6BAA6B;YACrC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,2CAA2C;SACpG;KACF,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;gBACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;gBACzE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,0CAA0C,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;oBAClG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC7C,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAClD,CAAC;wBAAS,CAAC;oBACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC9B,MAAM,MAAM,GAAG,0CAA0C,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;gBAClG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7C,yBAAyB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YACzF,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClG,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnG,MAAM,iBAAiB,GAAG,wBAAwB,EAAE,CAAC;YACrD,MAAM,CAAC,SAAS,CAAC,0CAA0C,CAAC,GAAG,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,OAAO,CACnD,oCAAoC,EACpC,gCAAgC,CACjC,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,0CAA0C,CAAC,GAAG,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE;gBACjG,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,SAAS,CAAC,0CAA0C,CAAC,GAAG,EAAE,cAAc,CAAC;gBAC9E,GAAG,cAAc,CAAC,GAAG,CAAC;gBACtB,UAAU,EAAE,IAAI;aACjB,CAAC,EAAE,UAAU,CAAC,EAAE;gBACf,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CACA,wDAAwD,EACxD,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,8CAA8C,EAAE,EAC7I,GAAG,EAAE;QACH,MAAM,CAAC,KAAK,CACV,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,+CAA+C,CAAC,EAAE,OAAO,CAAC,EAC1F,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,2BAA2B,CAAC,EAAE,OAAO,CAAC,CACvE,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/hooks/__tests__/keyword-detector.test.js

@@ -5,8 +5,10 @@ import { mkdtemp, mkdir, readFile, rm, symlink, writeFile } from 'node:fs/promis
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { detectKeywords, detectPrimaryKeyword, classifyKeywordInput, KEYWORD_INERT_DIAGNOSTIC_ORDER, recordSkillActivation, DEEP_INTERVIEW_STATE_FILE, DEEP_INTERVIEW_BLOCKED_APPROVAL_INPUTS, DEEP_INTERVIEW_INPUT_LOCK_MESSAGE, persistDeepInterviewModeState, } from '../keyword-detector.js';
-import { SKILL_ACTIVE_STATE_FILE } from '../../state/skill-active.js';
+import { readSkillActiveState, SKILL_ACTIVE_STATE_FILE } from '../../state/skill-active.js';
 import { isUnderspecifiedForExecution, applyRalplanGate } from '../keyword-detector.js';
+import { neutralizeOwnedRoutingRalplan } from '../../ralplan/documented-leader-preflight.js';
+import { readActiveWorkflowModes } from '../../state/workflow-transition.js';
 import { EXPLICIT_SKILL_ALIASES, getExplicitSkillDefinition, KEYWORD_TRIGGER_DEFINITIONS, } from '../keyword-registry.js';
 import { evaluateResolvedPromptTurn } from '../prompt-session-provenance.js';
 async function withIsolatedHome(prefix, run) {
@@ -27,6 +29,12 @@ async function withIsolatedHome(prefix, run) {
 const AUTOPILOT_TEST_NOW = '2026-05-30T00:00:00.000Z';
 const AUTOPILOT_TEST_STARTED_AT = '2026-05-29T00:00:00.000Z';
 const AUTOPILOT_TEST_UPDATED_AT = '2026-05-29T00:10:00.000Z';
+const availableAutopilotReceiptVerifier = {
+    getRalplanHostConsensusReceiptVerifierCapability: () => 'available',
+};
+function recordSkillActivationWithAvailableAutopilotReceipt(input) {
+    return recordSkillActivation(input, availableAutopilotReceiptVerifier);
+}
 async function writeActiveAutopilotSkillState(stateDir, sessionId, phase = 'ralplan') {
     await mkdir(join(stateDir, 'sessions', sessionId), { recursive: true });
     await writeFile(join(stateDir, 'sessions', sessionId, SKILL_ACTIVE_STATE_FILE), JSON.stringify({
@@ -45,7 +53,7 @@ async function readAutopilotModeState(stateDir, sessionId) {
     return JSON.parse(await readFile(join(stateDir, 'sessions', sessionId, 'autopilot-state.json'), 'utf-8'));
 }
 async function continueAutopilotTestState(stateDir, cwd, sessionId, suffix, text = 'continue') {
-    await recordSkillActivation({
+    await recordSkillActivationWithAvailableAutopilotReceipt({
         stateDir,
         sourceCwd: cwd,
         text,
@@ -1794,6 +1802,61 @@ describe('keyword detector skill-active-state lifecycle', () => {
             await rm(root, { recursive: true, force: true });
         }
     });
+    it('fails fresh native Autopilot before deep-interview when receipt verification is unavailable', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-autopilot-preflight-'));
+        const stateDir = join(cwd, '.omx', 'state');
+        try {
+            const result = await recordSkillActivation({
+                stateDir,
+                sourceCwd: cwd,
+                text: '$autopilot implement the task',
+                sessionId: 'sess-autopilot-preflight',
+                nowIso: '2026-07-23T00:00:00.000Z',
+            });
+            assert.equal(result?.active, false);
+            assert.equal(result?.phase, 'failed');
+            assert.equal(result?.error, 'documented_host_consensus_receipt_unavailable');
+            assert.deepEqual(result?.active_skills, []);
+            const modeState = JSON.parse(await readFile(join(stateDir, 'sessions', 'sess-autopilot-preflight', 'autopilot-state.json'), 'utf-8'));
+            assert.equal(modeState.active, false);
+            assert.equal(modeState.current_phase, 'failed');
+            assert.equal(modeState.error, 'documented_host_consensus_receipt_unavailable');
+            assert.equal(existsSync(join(stateDir, 'sessions', 'sess-autopilot-preflight', 'deep-interview-state.json')), false);
+            assert.equal(existsSync(join(stateDir, 'sessions', 'sess-autopilot-preflight', 'ultragoal-state.json')), false);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('byte-preserves an active native Autopilot session when receipt verification is unavailable', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-active-autopilot-preflight-'));
+        const stateDir = join(cwd, '.omx', 'state');
+        const sessionId = 'sess-active-autopilot-preflight';
+        const sessionDir = join(stateDir, 'sessions', sessionId);
+        const statePath = join(sessionDir, SKILL_ACTIVE_STATE_FILE);
+        const modePath = join(sessionDir, 'autopilot-state.json');
+        const rawState = '{"version":1,"active":true,"skill":"autopilot","keyword":"$autopilot","phase":"ralplan","activated_at":"2026-07-22T00:00:00.000Z","updated_at":"2026-07-22T00:00:00.000Z","source":"keyword-detector","session_id":"sess-active-autopilot-preflight","metadata":{"preserve":true},"active_skills":[{"skill":"autopilot","active":true,"phase":"ralplan","session_id":"sess-active-autopilot-preflight"}]}\n';
+        const rawMode = '{"active":true,"mode":"autopilot","current_phase":"ralplan","session_id":"sess-active-autopilot-preflight","metadata":{"preserve":true},"handoff_artifacts":{"ralplan":{"path":".omx/plans/existing.md"}}}\n';
+        try {
+            await mkdir(sessionDir, { recursive: true });
+            await writeFile(statePath, rawState);
+            await writeFile(modePath, rawMode);
+            const result = await recordSkillActivation({
+                stateDir,
+                sourceCwd: cwd,
+                text: '$autopilot continue',
+                sessionId,
+                nowIso: '2026-07-23T00:00:00.000Z',
+            });
+            assert.equal(result?.active, true);
+            assert.equal(result?.phase, 'ralplan');
+            assert.equal(await readFile(statePath, 'utf-8'), rawState);
+            assert.equal(await readFile(modePath, 'utf-8'), rawMode);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
     it('writes skill-active-state.json with deep-interview phase when autopilot keyword activates', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-state-'));
         const stateDir = join(cwd, '.omx', 'state');
@@ -1802,7 +1865,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
         try {
             process.env.CODEX_HOME = codexHome;
             await mkdir(stateDir, { recursive: true });
-            const result = await recordSkillActivation({
+            const result = await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: 'please run $autopilot and keep going',
                 sessionId: 'sess-1',
@@ -1895,7 +1958,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
             await mkdir(stateDir, { recursive: true });
             // Activate Autopilot: seeds autopilot-state.json at current_phase=deep-interview
             // with deep_interview_gate.status="required" (gate not satisfied).
-            const activated = await recordSkillActivation({
+            const activated = await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: 'please run $autopilot',
                 sessionId: 'sess-gate',
@@ -1938,7 +2001,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
         const stateDir = join(cwd, '.omx', 'state');
         try {
             await mkdir(stateDir, { recursive: true });
-            await recordSkillActivation({
+            await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: 'please run $autopilot',
                 sessionId: 'sess-skip',
@@ -2066,7 +2129,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
                 models: { autopilot: 'o4-mini' },
                 agentModels: { planner: 'gpt-5.6-sol-planner' },
             }));
-            await recordSkillActivation({
+            await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 sourceCwd: cwd,
                 text: '$autopilot implement issue #2918',
@@ -2137,7 +2200,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
                 context_snapshot_path: '.omx/context/../../escape.md',
                 state: { handoff_artifacts: { deep_interview: null } },
             }, null, 2));
-            const result = await recordSkillActivation({
+            const result = await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: 'continue',
                 sessionId,
@@ -2327,7 +2390,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
             mock.method(console, 'warn', (...args) => {
                 warnings.push(args);
             });
-            await recordSkillActivation({
+            await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 sourceCwd: cwd,
                 text: '$autopilot symlink escape',
@@ -2351,7 +2414,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
         const stateDir = join(cwd, '.omx', 'state');
         try {
             await mkdir(stateDir, { recursive: true });
-            await recordSkillActivation({
+            await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 sourceCwd: cwd,
                 text: '$autopilot same task',
@@ -2360,7 +2423,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
                 turnId: 'turn-collision-a',
                 nowIso: '2026-05-30T00:00:00.000Z',
             });
-            await recordSkillActivation({
+            await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 sourceCwd: cwd,
                 text: '$autopilot same task',
@@ -2619,6 +2682,54 @@ describe('keyword detector skill-active-state lifecycle', () => {
             await rm(cwd, { recursive: true, force: true });
         }
     });
+    it('preserves an active Autopilot mode when canonical skill state is missing', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-autopilot-mode-drift-'));
+        const stateDir = join(cwd, '.omx', 'state');
+        const sessionId = 'sess-autopilot-mode-drift';
+        const modePath = join(stateDir, 'sessions', sessionId, 'autopilot-state.json');
+        try {
+            await mkdir(join(stateDir, 'sessions', sessionId), { recursive: true });
+            const rawMode = '{"active":true,"mode":"autopilot","current_phase":"ralplan","session_id":"sess-autopilot-mode-drift","marker":"preserve-active-mode","metadata":{"nested":{"keep":true}}}\n';
+            await writeFile(modePath, rawMode);
+            const result = await recordSkillActivation({
+                stateDir,
+                text: '$autopilot continue',
+                sessionId,
+                nowIso: '2026-07-23T00:00:00.000Z',
+            });
+            assert.equal(result?.skill, 'autopilot');
+            assert.equal(result?.phase, 'ralplan');
+            assert.equal(await readFile(modePath, 'utf-8'), rawMode);
+            assert.equal(existsSync(join(stateDir, 'sessions', sessionId, SKILL_ACTIVE_STATE_FILE)), false);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('preserves active standalone Ralplan state bytes when fresh Autopilot preflight is unavailable', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-ralplan-autopilot-preflight-'));
+        const stateDir = join(cwd, '.omx', 'state');
+        const sessionId = 'sess-ralplan-autopilot-preflight';
+        const statePath = join(stateDir, 'sessions', sessionId, SKILL_ACTIVE_STATE_FILE);
+        const rawState = '{"version":1,"active":true,"skill":"ralplan","keyword":"$ralplan","phase":"planning","session_id":"sess-ralplan-autopilot-preflight","active_skills":[{"skill":"ralplan","phase":"planning","active":true,"session_id":"sess-ralplan-autopilot-preflight"}]}';
+        try {
+            await mkdir(join(stateDir, 'sessions', sessionId), { recursive: true });
+            await writeFile(statePath, rawState);
+            const denied = await recordSkillActivation({
+                stateDir,
+                text: '$autopilot do it too',
+                sessionId,
+                nowIso: '2026-07-23T00:00:00.000Z',
+            });
+            assert.equal(denied?.skill, 'ralplan');
+            assert.equal(denied?.transition_error, 'documented_host_consensus_receipt_unavailable');
+            assert.equal(await readFile(statePath, 'utf-8'), rawState);
+            assert.equal(existsSync(join(stateDir, 'sessions', sessionId, 'autopilot-state.json')), false);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
     it('denies prompt-submit overlaps against the current session-visible canonical state', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-state-session-visible-'));
         const stateDir = join(cwd, '.omx', 'state');
@@ -2842,6 +2953,35 @@ describe('keyword detector skill-active-state lifecycle', () => {
             await rm(cwd, { recursive: true, force: true });
         }
     });
+    it('does not reactivate a neutralized routing-only Ralplan seed on plain continuation', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-neutralized-ralplan-'));
+        const stateDir = join(cwd, '.omx', 'state');
+        const sessionId = 'sess-neutralized';
+        const previousSessionId = process.env.OMX_SESSION_ID;
+        try {
+            process.env.OMX_SESSION_ID = sessionId;
+            await mkdir(stateDir, { recursive: true });
+            await writeFile(join(stateDir, 'session.json'), JSON.stringify({ session_id: sessionId, cwd, state_root: stateDir }));
+            assert.ok(await recordSkillActivation({ stateDir, sourceCwd: cwd, text: '$ralplan tighten the plan', sessionId, nowIso: '2026-02-25T00:00:00.000Z' }));
+            const sessionDir = join(stateDir, 'sessions', sessionId);
+            const ralplanPath = join(sessionDir, 'ralplan-state.json');
+            const skillPath = join(sessionDir, SKILL_ACTIVE_STATE_FILE);
+            const [ralplanBefore, skillBefore] = await Promise.all([readFile(ralplanPath), readFile(skillPath)]);
+            assert.equal(await neutralizeOwnedRoutingRalplan(cwd), true);
+            assert.deepEqual(await readActiveWorkflowModes(cwd, sessionId), []);
+            assert.equal(await recordSkillActivation({ stateDir, sourceCwd: cwd, text: 'continue', sessionId, nowIso: '2026-02-25T00:00:01.000Z' }), null);
+            assert.deepEqual(await readFile(ralplanPath), ralplanBefore);
+            assert.deepEqual(await readFile(skillPath), skillBefore);
+            assert.equal((await readSkillActiveState(skillPath))?.active, false);
+        }
+        finally {
+            if (previousSessionId === undefined)
+                delete process.env.OMX_SESSION_ID;
+            else
+                process.env.OMX_SESSION_ID = previousSessionId;
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
     it('auto-completes deep-interview during allowlisted forward handoff', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-handoff-'));
         const stateDir = join(cwd, '.omx', 'state');
@@ -3167,7 +3307,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
             await rm(cwd, { recursive: true, force: true });
         }
     });
-    it('emits terminal ralplan state before explicit ultragoal execution handoff', async () => {
+    it('keeps a locally approved ralplan active when the host consensus receipt verifier is unavailable', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-ralplan-ultragoal-handoff-'));
         const stateDir = join(cwd, '.omx', 'state');
         try {
@@ -3187,6 +3327,7 @@ describe('keyword detector skill-active-state lifecycle', () => {
                 current_phase: 'complete',
                 planning_complete: true,
                 ralplan_consensus_gate: {
+                    documented_host_consensus_receipt: { issuer: 'official-host', verdict: 'approve' },
                     complete: true,
                     sequence: ['architect-review', 'critic-review'],
                     ralplan_architect_review: { agent_role: 'architect', verdict: 'approve', approved: true },
@@ -3200,19 +3341,13 @@ describe('keyword detector skill-active-state lifecycle', () => {
                 sessionId: 'sess-ralplan-ultragoal',
                 nowIso: '2026-04-10T00:20:00.000Z',
             });
-            assert.equal(result?.transition_error, undefined);
-            assert.equal(result?.skill, 'ultragoal');
-            assert.equal(result?.transition_message, 'mode transiting: ralplan -> ultragoal');
-            assert.deepEqual(result?.active_skills?.map((entry) => entry.skill), ['ultragoal']);
+            assert.notEqual(result?.skill, 'ultragoal');
+            assert.notEqual(result?.transition_message, 'mode transiting: ralplan -> ultragoal');
             const ralplan = JSON.parse(await readFile(join(stateDir, 'sessions', 'sess-ralplan-ultragoal', 'ralplan-state.json'), 'utf-8'));
-            assert.equal(ralplan.active, false);
-            assert.equal(ralplan.current_phase, 'completed');
-            assert.equal(ralplan.auto_completed_reason, 'mode transiting: ralplan -> ultragoal');
-            assert.ok(ralplan.completed_at);
-            const ultragoal = JSON.parse(await readFile(join(stateDir, 'sessions', 'sess-ralplan-ultragoal', 'ultragoal-state.json'), 'utf-8'));
-            assert.equal(ultragoal.active, true);
-            assert.equal(ultragoal.mode, 'ultragoal');
-            assert.equal(ultragoal.current_phase, 'planning');
+            assert.equal(ralplan.active, true);
+            assert.equal(ralplan.current_phase, 'complete');
+            assert.notEqual(ralplan.auto_completed_reason, 'mode transiting: ralplan -> ultragoal');
+            assert.equal(existsSync(join(stateDir, 'sessions', 'sess-ralplan-ultragoal', 'ultragoal-state.json')), false);
         }
         finally {
             await rm(cwd, { recursive: true, force: true });
@@ -4008,7 +4143,7 @@ deepMaxRounds = 21
             await rm(cwd, { recursive: true, force: true });
         }
     });
-    it('emits a warning when skill-active-state persistence fails', async () => {
+    it('warns when fresh Autopilot preflight persistence fails', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-state-persist-fail-'));
         const warnings = [];
         mock.method(console, 'warn', (...args) => {
@@ -4024,6 +4159,7 @@ deepMaxRounds = 21
             });
             assert.ok(result);
             assert.equal(result.skill, 'autopilot');
+            assert.equal(result.phase, 'failed');
             assert.equal(warnings.length, 1);
             assert.match(String(warnings[0][0]), /failed to persist keyword activation state/);
         }
@@ -4047,7 +4183,7 @@ deepMaxRounds = 21
                 updated_at: '2026-02-25T00:10:00.000Z',
                 source: 'keyword-detector',
             }));
-            const result = await recordSkillActivation({
+            const result = await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: 'autopilot keep going',
                 nowIso: '2026-02-26T00:00:00.000Z',
@@ -4090,7 +4226,7 @@ deepMaxRounds = 21
             }));
             await mkdir(join(cwd, '.omx', 'context'), { recursive: true });
             await writeFile(join(cwd, '.omx', 'context', 'existing.md'), '# existing context');
-            const result = await recordSkillActivation({
+            const result = await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: 'autopilot keep going',
                 sessionId: 'sess-autopilot',
@@ -4276,7 +4412,7 @@ deepMaxRounds = 21
             }, null, 2));
             await mkdir(join(cwd, '.omx', 'context'), { recursive: true });
             await writeFile(join(cwd, '.omx', 'context', 'autopilot.md'), '# autopilot context');
-            const result = await recordSkillActivation({
+            const result = await recordSkillActivationWithAvailableAutopilotReceipt({
                 stateDir,
                 text: '\\ keep going now',
                 sessionId: 'sess-autopilot-bare',
@@ -4697,7 +4833,7 @@ describe('applyRalplanGate', () => {
             await rm(cwd, { recursive: true, force: true });
         }
     });
-    it('does not re-enter ralplan for a short approved team follow-up with durable consensus', async () => {
+    it('keeps short approved team follow-ups gated without an official host consensus receipt', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-gate-followup-ko-'));
         try {
             const plansDir = join(cwd, '.omx', 'plans');
@@ -4712,13 +4848,14 @@ describe('applyRalplanGate', () => {
                 ralplan_consensus_gate: {
                     complete: true,
                     sequence: ['architect-review', 'critic-review'],
-                    ralplan_architect_review: { agent_role: 'architect', verdict: 'approve', iteration: 1 },
-                    ralplan_critic_review: { agent_role: 'critic', verdict: 'approve', iteration: 1 },
+                    ralplan_architect_review: { agent_role: 'architect', verdict: 'approve', iteration: 1, sequence_index: 1 },
+                    ralplan_critic_review: { agent_role: 'critic', verdict: 'approve', iteration: 1, sequence_index: 2 },
                 },
             }));
             const result = applyRalplanGate(['team'], 'team으로 해줘', { cwd });
-            assert.equal(result.gateApplied, false);
-            assert.deepEqual(result.keywords, ['team']);
+            assert.equal(result.gateApplied, true);
+            assert.deepEqual(result.keywords, ['ralplan']);
+            assert.equal(result.blockedReason, 'documented_host_consensus_receipt_unavailable');
         }
         finally {
             await rm(cwd, { recursive: true, force: true });
@@ -4756,12 +4893,13 @@ describe('applyRalplanGate', () => {
             const result = applyRalplanGate(['team'], 'team', { cwd, requireNativeSubagents: true });
             assert.equal(result.gateApplied, true);
             assert.deepEqual(result.keywords, ['ralplan']);
+            assert.equal(result.blockedReason, 'documented_host_consensus_receipt_unavailable');
         }
         finally {
             await rm(cwd, { recursive: true, force: true });
         }
     });
-    it('does not re-enter ralplan for a short approved ralph follow-up with durable consensus', async () => {
+    it('keeps short approved ralph follow-ups gated without an official host consensus receipt', async () => {
         const cwd = await mkdtemp(join(tmpdir(), 'omx-keyword-gate-followup-ralph-'));
         try {
             const plansDir = join(cwd, '.omx', 'plans');
@@ -4776,13 +4914,14 @@ describe('applyRalplanGate', () => {
                 ralplan_consensus_gate: {
                     complete: true,
                     sequence: ['architect-review', 'critic-review'],
-                    ralplan_architect_review: { agent_role: 'architect', verdict: 'approve', iteration: 1 },
-                    ralplan_critic_review: { agent_role: 'critic', verdict: 'approve', iteration: 1 },
+                    ralplan_architect_review: { agent_role: 'architect', verdict: 'approve', iteration: 1, sequence_index: 1 },
+                    ralplan_critic_review: { agent_role: 'critic', verdict: 'approve', iteration: 1, sequence_index: 2 },
                 },
             }));
             const result = applyRalplanGate(['ralph'], 'ralph please', { cwd, priorSkill: 'ralplan' });
-            assert.equal(result.gateApplied, false);
-            assert.deepEqual(result.keywords, ['ralph']);
+            assert.equal(result.gateApplied, true);
+            assert.deepEqual(result.keywords, ['ralplan']);
+            assert.equal(result.blockedReason, 'documented_host_consensus_receipt_unavailable');
         }
         finally {
             await rm(cwd, { recursive: true, force: true });