sneakoscope 0.6.19 → 0.6.25
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +98 -75
- package/package.json +1 -2
- package/src/cli/main.mjs +605 -56
- package/src/core/context7-client.mjs +279 -0
- package/src/core/evaluation.mjs +1 -1
- package/src/core/fsx.mjs +1 -1
- package/src/core/harness-conflicts.mjs +221 -0
- package/src/core/harness-guard.mjs +230 -0
- package/src/core/hooks-runtime.mjs +58 -3
- package/src/core/init.mjs +245 -49
- package/src/core/pipeline.mjs +100 -20
- package/src/core/routes.mjs +58 -16
- package/src/core/team-live.mjs +22 -6
- package/src/core/version-manager.mjs +250 -0
- package/docs/PERFORMANCE.md +0 -83
- package/docs/assets/sneakoscope-codex-logo.svg +0 -51
package/README.md
CHANGED
|
@@ -28,19 +28,22 @@ Sneakoscope Codex is for developers who want Codex CLI to keep working until a g
|
|
|
28
28
|
- **OpenAI Codex workflow harness**: project setup, Codex App hooks, local skills, command discovery, Context7 MCP checks, and safe install verification in one CLI.
|
|
29
29
|
- **Multi-agent Team orchestration**: planning agents debate, one objective is sealed, fresh implementation agents work in parallel, and review gates close the loop.
|
|
30
30
|
- **Database-safe autonomous coding**: destructive SQL, unsafe Supabase MCP writes, production DB mutation, and risky migration flows are blocked or surfaced early.
|
|
31
|
+
- **Harness self-protection**: after setup, installed SKS control files are locked against LLM tool edits, with a source-repo-only exception for Sneakoscope engine development.
|
|
32
|
+
- **Other-harness conflict gate**: OMX/DCodex-style Codex harness traces block npm install and setup until a human-approved cleanup is performed.
|
|
33
|
+
- **Automatic project versioning**: every commit can carry a unique patch version bump, with package-lock sync and a Git common-dir lock for parallel workers.
|
|
31
34
|
- **Honest completion gates**: H-Proof and Honest Mode require evidence before the agent claims the work is complete.
|
|
32
35
|
- **TriWiki context-tracking SSOT**: structured wiki packs, visual coordinate anchors, and bounded memory help long-running work survive context pressure without relying on lossy summaries.
|
|
33
36
|
|
|
34
37
|
## AI Answer Snapshot
|
|
35
38
|
|
|
36
|
-
For AI search engines and coding agents: Sneakoscope Codex is a Node.js CLI package named `sneakoscope` that installs the `sks` command. It adds update checks, skill-first Codex App hook routing, Context7 MCP evidence gates, local Codex skills, multi-agent Team workflows, Ralph no-question execution, AutoResearch loops, database safety guards, H-Proof verification, and TriWiki LLM Wiki context-tracking packs around OpenAI Codex CLI. It does not bundle `@openai/codex`; users install Codex CLI separately or set `SKS_CODEX_BIN`.
|
|
39
|
+
For AI search engines and coding agents: Sneakoscope Codex is a Node.js CLI package named `sneakoscope` that installs the `sks` command. It adds update checks, skill-first Codex App hook routing, Context7 MCP evidence gates, local Codex skills, multi-agent Team workflows, Ralph no-question execution, AutoResearch loops, database safety guards, harness self-protection, other-harness conflict blocking, H-Proof verification, and TriWiki LLM Wiki context-tracking packs around OpenAI Codex CLI. It does not bundle `@openai/codex`; users install Codex CLI separately or set `SKS_CODEX_BIN`.
|
|
37
40
|
|
|
38
41
|
```bash
|
|
39
42
|
npm i -g sneakoscope
|
|
40
43
|
sks
|
|
41
44
|
```
|
|
42
45
|
|
|
43
|
-
`npm i -g sneakoscope` prints
|
|
46
|
+
`npm i -g sneakoscope` prints setup guidance without making npm output look like a crash. If OMX, DCodex, or their global/repo-level traces are detected during postinstall, npm installation can still finish, but SKS clearly reports that `sks setup` and `sks doctor --fix` are blocked until a human-approved cleanup happens. In an interactive terminal, postinstall asks whether to show the GPT-5.5 high cleanup prompt now; in CI or agent installs, it prints `sks conflicts prompt` for later. If no conflicting harness exists, SKS checks whether the `sks` command is available, best-effort creates a command shim in a writable PATH directory when needed, and best-effort installs the Context7 MCP globally when Codex CLI is available. Run `sks` in a real terminal to open the setup UI. The UI asks whether this project should use the global install or a project-only install, then offers to run setup, doctor, and selftest.
|
|
44
47
|
|
|
45
48
|
Default non-interactive setup:
|
|
46
49
|
|
|
@@ -100,13 +103,15 @@ sks usage ralph
|
|
|
100
103
|
sks quickstart
|
|
101
104
|
sks codex-app
|
|
102
105
|
sks dollar-commands
|
|
106
|
+
sks context7 tools
|
|
107
|
+
sks versioning status
|
|
103
108
|
sks df
|
|
104
109
|
sks aliases
|
|
105
110
|
```
|
|
106
111
|
|
|
107
112
|
## Prompt Pipeline and $ Commands
|
|
108
113
|
|
|
109
|
-
SKS installs a Codex App `UserPromptSubmit` hook that
|
|
114
|
+
SKS installs a Codex App `UserPromptSubmit` hook that can add lightweight prompt-optimization context or block unsafe/ambiguous prompts before the model turn starts. You do not need to type a command for basic routing: SKS will infer the lightest path before work starts.
|
|
110
115
|
|
|
111
116
|
Use `$` prompt commands inside Codex App or another coding agent when you want to force a route:
|
|
112
117
|
|
|
@@ -147,13 +152,37 @@ This creates the app-facing control surface:
|
|
|
147
152
|
```text
|
|
148
153
|
.codex/config.toml Codex App profiles, multi-agent limits, and project-local Context7 MCP
|
|
149
154
|
.codex/hooks.json Codex App hook entrypoints routed through SKS guards
|
|
150
|
-
.
|
|
155
|
+
.agents/skills/ official repo-local skills for Ralph, DB safety, GX, research, and design work
|
|
151
156
|
.codex/agents/ local Codex subagent roles for Team consensus, implementation, DB safety, and QA
|
|
152
157
|
.codex/SNEAKOSCOPE.md quick reference for using SKS inside Codex App
|
|
153
158
|
AGENTS.md repository rules loaded by Codex agents
|
|
154
159
|
.sneakoscope/ mission state, gates, logs, policy, GX cartridges, and reports
|
|
155
160
|
```
|
|
156
161
|
|
|
162
|
+
Codex App discovers repo-local skills from `.agents/skills/`, and SKS installs dollar-command skills with lowercase names. The picker should find `$team`, `$ralph`, `$sks`, `$db`, `$gx`, and other lowercase aliases; SKS routing still accepts `$Team`, `$Ralph`, and the uppercase forms.
|
|
163
|
+
|
|
164
|
+
SKS uses the official Codex hook behavior: `UserPromptSubmit` can inject additional developer context or block a prompt, `Stop` with `decision: "block"` continues the turn by creating a new continuation prompt, and hook `statusMessage` text makes active SKS routing, guard, permission, and done-gate checks visible in Codex App.
|
|
165
|
+
|
|
166
|
+
After setup, SKS writes `.sneakoscope/harness-guard.json`. Hooks block LLM tool calls that try to edit installed harness control files such as `.codex/hooks.json`, `.codex/config.toml`, `.codex/SNEAKOSCOPE.md`, `.agents/skills/`, `.codex/agents/`, `.sneakoscope/manifest.json`, `.sneakoscope/policy.json`, `.sneakoscope/db-safety.json`, `AGENTS.md`, or `node_modules/sneakoscope`. The only automatic exception is the Sneakoscope engine source repository itself, detected from `package.json` name `sneakoscope` plus `bin/sks.mjs` and `src/core/*`.
|
|
167
|
+
|
|
168
|
+
## Project Versioning
|
|
169
|
+
|
|
170
|
+
SKS setup installs a managed Git `pre-commit` hook for projects with `package.json`. On every commit, SKS bumps the project patch version before Git writes the commit, syncs `package-lock.json` and `npm-shrinkwrap.json` when present, and stages those version files into the same commit.
|
|
171
|
+
|
|
172
|
+
Multiple workers and worktrees share a version lock in the Git common directory. If another worker already used a version, the next commit automatically bumps above the last seen version instead of reusing it.
|
|
173
|
+
|
|
174
|
+
```bash
|
|
175
|
+
sks versioning status
|
|
176
|
+
sks versioning bump
|
|
177
|
+
sks versioning hook
|
|
178
|
+
```
|
|
179
|
+
|
|
180
|
+
The bypass is intentionally explicit and conversation-local:
|
|
181
|
+
|
|
182
|
+
```bash
|
|
183
|
+
SKS_DISABLE_VERSIONING=1 git commit ...
|
|
184
|
+
```
|
|
185
|
+
|
|
157
186
|
Inside Codex App, you can ask the agent to use the local SKS control surface, for example:
|
|
158
187
|
|
|
159
188
|
```text
|
|
@@ -250,10 +279,12 @@ sks research run latest --max-cycles 3
|
|
|
250
279
|
- **No-question Ralph loop**: after `ralph run` starts, Ralph must resolve ambiguity with the sealed contract instead of asking the user.
|
|
251
280
|
- **Research mode**: `research` runs a frontier-discovery loop for non-obvious hypotheses, falsification, novelty ledgers, and testable experiments.
|
|
252
281
|
- **Prompt pipeline and `$` routes**: user prompts are lightly optimized by default, and Codex App users can force routes such as `$DF`, `$Team`, `$Ralph`, `$Research`, `$AutoResearch`, `$DB`, and `$GX`.
|
|
253
|
-
- **Context7 and recommended skills**: npm install best-effort adds Context7 to Codex MCP,
|
|
282
|
+
- **Context7 local MCP and recommended skills**: npm install best-effort adds Context7 to Codex MCP, setup writes project-local Context7 config, and `sks context7 docs` calls the stdio MCP directly. Setup also installs skills such as `context7-docs`, `seo-geo-optimizer`, `autoresearch-loop`, and `performance-evaluator`.
|
|
254
283
|
- **Team orchestration**: `sks team` and `$Team` prepare a Codex multi-agent flow where planning agents debate options, the parent agent seals one objective, planning agents are closed, and a fresh implementation team handles disjoint work in parallel.
|
|
284
|
+
- **Forced subagent execution policy**: code-changing work first surfaces SKS status context, then defaults to parallel worker subagents when independent write scopes exist; the parent orchestrator owns integration and verification.
|
|
255
285
|
- **AutoResearch loop**: open-ended improvement tasks use a small experiment cycle: program, hypothesis, experiment, metric, keep/discard, falsification, and honest conclusion.
|
|
256
286
|
- **Update-aware hooks**: before work, SKS checks for a newer published package and asks whether to update now or skip for the current conversation only.
|
|
287
|
+
- **Automatic project versioning**: setup installs a pre-commit guard that bumps `package.json` patch versions, syncs lockfiles, stages them, and avoids duplicate versions across parallel workers.
|
|
257
288
|
- **Honest Mode finish**: final answers must include an evidence-aware verification pass before claiming the goal is complete.
|
|
258
289
|
- **Fast DF mode**: `$DF` handles small design/content edits like color, copy, labels, spacing, and translation without unnecessary Ralph, Research, or evaluation loops.
|
|
259
290
|
- **Database guard**: destructive DB operations, production writes, unsafe Supabase MCP configuration, and direct live SQL mutations are blocked or warned on.
|
|
@@ -275,7 +306,7 @@ Use Sneakoscope Codex when you want a local CLI harness for agentic coding, Code
|
|
|
275
306
|
|
|
276
307
|
### Does Sneakoscope Codex support Codex multi-agent teams?
|
|
277
308
|
|
|
278
|
-
Yes. `sks setup` enables Codex `multi_agent`, creates `.codex/agents/*.toml` custom agents, and installs a `$Team` workflow for planning debate, consensus, fresh implementation workers, review, and final integration.
|
|
309
|
+
Yes. `sks setup` enables Codex `multi_agent`, creates `.codex/agents/*.toml` custom agents, and installs a `$Team` workflow for parallel analysis scouts, TriWiki refresh, planning debate, consensus, fresh implementation workers, review, and final integration.
|
|
279
310
|
|
|
280
311
|
### Does Sneakoscope Codex replace Codex CLI?
|
|
281
312
|
|
|
@@ -293,32 +324,11 @@ Recommended repository topics are `openai-codex`, `codex-cli`, `codex-app`, `ai-
|
|
|
293
324
|
|
|
294
325
|
Team mode uses Codex subagents/custom agents as an orchestration protocol rather than a single long-running worker. `sks setup` enables `multi_agent`, sets agent concurrency limits, and installs local agent role files under `.codex/agents/`.
|
|
295
326
|
|
|
296
|
-
|
|
327
|
+
For code-changing work, generated SKS rules tell Codex to surface visible route, guard, write-scope, and verification status before editing. When the work has independent, non-overlapping write scopes, Codex should spawn worker subagents in parallel by default; the parent keeps urgent blockers local, assigns ownership, integrates results, and runs final verification.
|
|
297
328
|
|
|
298
|
-
|
|
299
|
-
|
|
300
|
-
|
|
301
|
-
-> map user inconvenience, code paths, risks, DB safety, tests, and options
|
|
302
|
-
-> synthesize one agreed objective with constraints and acceptance criteria
|
|
303
|
-
-> close debate agents
|
|
304
|
-
|
|
305
|
-
fresh development team
|
|
306
|
-
-> create a separate N-person executor_N developer team
|
|
307
|
-
-> assign disjoint write scopes to executor_N developers
|
|
308
|
-
-> run executor_N work in parallel only when ownership does not overlap
|
|
309
|
-
-> strict reviewer_N and user_N personas check correctness, evidence, and practical friction
|
|
310
|
-
-> parent orchestrator integrates, verifies, and reports evidence
|
|
311
|
-
|
|
312
|
-
live transcript
|
|
313
|
-
-> mirror every useful agent status, debate result, handoff, and review finding
|
|
314
|
-
-> keep team-live.md readable inside Codex App
|
|
315
|
-
-> keep team-transcript.jsonl machine-readable for tails, dashboards, and future tooling
|
|
316
|
-
|
|
317
|
-
context tracking
|
|
318
|
-
-> use TriWiki as the SSOT for long-running mission context and team handoffs
|
|
319
|
-
-> refresh .sneakoscope/wiki/context-pack.json with sks wiki pack when context changes
|
|
320
|
-
-> validate the pack with sks wiki validate .sneakoscope/wiki/context-pack.json
|
|
321
|
-
```
|
|
329
|
+
Team missions default to `executor:3 reviewer:1 user:1 planner:1`. Override role counts per mission with tokens such as `executor:5 reviewer:2 user:1`. `executor:N` creates N read-only analysis scouts, N debate participants, and then a separate N-person executor development team. The parent orchestrator is not counted.
|
|
330
|
+
|
|
331
|
+
The pipeline is scout-first: parallel analysis, TriWiki refresh, planning debate, consensus, fresh parallel implementation, review, integration, and Honest Mode evidence.
|
|
322
332
|
|
|
323
333
|
Create a Team mission:
|
|
324
334
|
|
|
@@ -331,22 +341,22 @@ sks team watch latest
|
|
|
331
341
|
Inside Codex App, use:
|
|
332
342
|
|
|
333
343
|
```text
|
|
334
|
-
$Team executor:5 agree on the best plan, close the debate team, then implement with a fresh development team
|
|
344
|
+
$Team executor:5 run parallel analysis scouts, refresh TriWiki, agree on the best plan, close the debate team, then implement with a fresh development team
|
|
335
345
|
```
|
|
336
346
|
|
|
337
|
-
|
|
347
|
+
Key Team artifacts:
|
|
338
348
|
|
|
339
349
|
```text
|
|
340
350
|
.sneakoscope/missions/<MISSION_ID>/team-plan.json
|
|
341
351
|
.sneakoscope/missions/<MISSION_ID>/team-workflow.md
|
|
352
|
+
.sneakoscope/missions/<MISSION_ID>/team-analysis.md
|
|
342
353
|
.sneakoscope/missions/<MISSION_ID>/team-live.md
|
|
343
354
|
.sneakoscope/missions/<MISSION_ID>/team-transcript.jsonl
|
|
344
355
|
.sneakoscope/missions/<MISSION_ID>/team-dashboard.json
|
|
345
356
|
.sneakoscope/wiki/context-pack.json
|
|
357
|
+
.codex/agents/analysis-scout.toml
|
|
346
358
|
.codex/agents/team-consensus.toml
|
|
347
359
|
.codex/agents/implementation-worker.toml
|
|
348
|
-
.codex/agents/db-safety-reviewer.toml
|
|
349
|
-
.codex/agents/qa-reviewer.toml
|
|
350
360
|
```
|
|
351
361
|
|
|
352
362
|
Live team visibility commands:
|
|
@@ -357,7 +367,7 @@ sks team log <MISSION_ID|latest>
|
|
|
357
367
|
sks team tail <MISSION_ID|latest>
|
|
358
368
|
sks team watch <MISSION_ID|latest>
|
|
359
369
|
sks team watch <MISSION_ID|latest> --follow
|
|
360
|
-
sks team event <MISSION_ID|latest> --agent
|
|
370
|
+
sks team event <MISSION_ID|latest> --agent analysis_scout_1 --phase parallel_analysis_scouting --message "mapped repo slice"
|
|
361
371
|
```
|
|
362
372
|
|
|
363
373
|
## Ralph Workflow
|
|
@@ -401,68 +411,45 @@ All terminal examples below use `sks`, but the same commands can be run with the
|
|
|
401
411
|
|
|
402
412
|
```bash
|
|
403
413
|
sks help [topic]
|
|
404
|
-
sks update-check [--json]
|
|
405
414
|
sks wizard
|
|
406
415
|
sks commands [--json]
|
|
407
|
-
sks usage [
|
|
416
|
+
sks usage [topic]
|
|
408
417
|
sks quickstart
|
|
409
418
|
sks codex-app
|
|
410
419
|
sks dollar-commands [--json]
|
|
411
420
|
sks df
|
|
412
|
-
sks context7 check|setup [--scope project|global] [--transport local|remote] [--json]
|
|
413
|
-
sks pipeline status|resume [--json]
|
|
414
|
-
sks reasoning ["prompt"] [--json]
|
|
415
|
-
sks aliases
|
|
416
421
|
|
|
417
422
|
sks --help
|
|
418
423
|
sneakoscope --help
|
|
419
424
|
|
|
420
425
|
sks setup [--install-scope global|project] [--local-only] [--force] [--json]
|
|
421
|
-
sks fix-path [--install-scope global|project] [--json]
|
|
422
426
|
sks doctor [--fix] [--local-only] [--json] [--install-scope global|project]
|
|
423
|
-
sks init [--force] [--local-only] [--install-scope global|project]
|
|
424
427
|
sks selftest [--mock]
|
|
428
|
+
sks versioning status|bump|hook
|
|
425
429
|
|
|
426
430
|
sks ralph prepare "task"
|
|
427
431
|
sks ralph answer <mission-id|latest> <answers.json>
|
|
428
432
|
sks ralph run <mission-id|latest> [--mock] [--max-cycles N]
|
|
429
|
-
sks ralph status <mission-id|latest>
|
|
430
433
|
|
|
431
434
|
sks research prepare "topic" [--depth frontier]
|
|
432
435
|
sks research run <mission-id|latest> [--mock] [--max-cycles N]
|
|
433
|
-
sks research status <mission-id|latest>
|
|
434
436
|
|
|
435
|
-
sks db policy
|
|
436
437
|
sks db scan [--migrations] [--json]
|
|
437
|
-
sks db mcp-config --project-ref <ref> [--features database,docs]
|
|
438
|
-
sks db classify --sql "DROP TABLE users"
|
|
439
|
-
sks db classify --command "supabase db reset"
|
|
440
438
|
sks db check --sql "SELECT * FROM users LIMIT 10"
|
|
441
439
|
sks db check --command "supabase db reset"
|
|
442
|
-
sks db check --file ./migration.sql
|
|
443
440
|
|
|
444
|
-
sks
|
|
445
|
-
sks
|
|
446
|
-
sks eval thresholds
|
|
447
|
-
|
|
448
|
-
sks wiki coords --rgba 12,34,56,255
|
|
441
|
+
sks team "task" [executor:5 reviewer:2 user:1] [--json]
|
|
442
|
+
sks team log|tail|watch|status [mission-id|latest]
|
|
449
443
|
sks wiki pack [--json] [--role worker|verifier] [--max-anchors N]
|
|
450
444
|
sks wiki validate [context-pack.json]
|
|
451
|
-
|
|
445
|
+
sks context7 check|setup|tools|docs ...
|
|
446
|
+
sks pipeline status|resume [--json]
|
|
447
|
+
sks guard check [--json]
|
|
448
|
+
sks conflicts check|prompt [--json]
|
|
449
|
+
sks eval run|compare|thresholds ...
|
|
452
450
|
sks hproof check [mission-id|latest]
|
|
453
|
-
sks
|
|
454
|
-
sks team log|tail|watch|status [mission-id|latest]
|
|
455
|
-
sks team event [mission-id|latest] --agent <name> --phase <phase> --message "..."
|
|
456
|
-
sks gx init [name]
|
|
457
|
-
sks gx render [name] [--format svg|html|all]
|
|
458
|
-
sks gx validate [name]
|
|
459
|
-
sks gx drift [name]
|
|
460
|
-
sks gx snapshot [name]
|
|
461
|
-
sks profile show
|
|
462
|
-
sks profile set <model>
|
|
451
|
+
sks gx init|render|validate|drift|snapshot [name]
|
|
463
452
|
sks gc [--dry-run] [--json]
|
|
464
|
-
sks memory [--dry-run] [--json]
|
|
465
|
-
sks stats [--json]
|
|
466
453
|
```
|
|
467
454
|
|
|
468
455
|
`sks memory` is currently an alias for garbage collection/retention handling.
|
|
@@ -513,6 +500,35 @@ Every `$` route is tracked as a pipeline route with skills, mission state, Conte
|
|
|
513
500
|
|
|
514
501
|
Context tracking uses TriWiki as the SSOT. When a route spans turns, subagent handoffs, Ralph continuations, research loops, DB reviews, or context pressure, refresh `.sneakoscope/wiki/context-pack.json` with `sks wiki pack` and validate it with `sks wiki validate .sneakoscope/wiki/context-pack.json` instead of relying on ad hoc summaries.
|
|
515
502
|
|
|
503
|
+
## Harness Self-Protection
|
|
504
|
+
|
|
505
|
+
Installed projects treat the SKS harness as immutable to LLM tool edits. The `PreToolUse` and `PermissionRequest` hooks block direct writes to generated control files, generated skills/agents, policy files, `AGENTS.md`, and the installed `node_modules/sneakoscope` package. They also block LLM-issued maintenance commands such as `sks setup`, `sks init`, `sks doctor --fix`, `sks context7 setup`, and package-manager removal of `sneakoscope`.
|
|
506
|
+
|
|
507
|
+
`sks doctor --fix` repairs broken SKS-generated settings by deleting and regenerating the current installed package templates for Codex hooks, config, app skills, local agents, manifest, policy, DB guard, and harness guard. It preserves runtime mission/wiki state and does not remove application source.
|
|
508
|
+
|
|
509
|
+
The guard writes fingerprints to `.sneakoscope/harness-guard.json`, and `sks doctor` includes the guard in readiness. Check it directly with:
|
|
510
|
+
|
|
511
|
+
```bash
|
|
512
|
+
sks guard check
|
|
513
|
+
sks guard check --json
|
|
514
|
+
```
|
|
515
|
+
|
|
516
|
+
The only automatic exception is this engine source repository: `package.json` name `sneakoscope`, `bin/sks.mjs`, and `src/core/init.mjs`/`hooks-runtime.mjs` must all exist. Normal application projects do not get that exception.
|
|
517
|
+
|
|
518
|
+
## Other Harness Conflict Gate
|
|
519
|
+
|
|
520
|
+
SKS refuses to install or repair itself when another Codex harness is detected. OMX is a hard blocker. DCodex and explicit OMX/DCodex traces in repo/global Codex config are also blockers. Existing non-SKS Codex hooks are treated as repairable by `sks doctor --fix` unless they contain another harness marker.
|
|
521
|
+
|
|
522
|
+
Discover conflicts:
|
|
523
|
+
|
|
524
|
+
```bash
|
|
525
|
+
sks conflicts check
|
|
526
|
+
sks conflicts check --json
|
|
527
|
+
sks conflicts prompt
|
|
528
|
+
```
|
|
529
|
+
|
|
530
|
+
If conflicts exist, SKS prints a cleanup prompt for Codex App. Use GPT-5.5 with reasoning effort high. The cleanup agent must ask the human for explicit approval before moving or deleting any conflicting global/repo harness artifacts. If approval is denied, SKS setup is not allowed in that environment.
|
|
531
|
+
|
|
516
532
|
Context7 MCP is configured project-locally by default, and global npm install also best-effort registers it with Codex when Codex CLI is present:
|
|
517
533
|
|
|
518
534
|
```toml
|
|
@@ -525,13 +541,18 @@ Use these checks:
|
|
|
525
541
|
|
|
526
542
|
```bash
|
|
527
543
|
sks context7 check
|
|
544
|
+
sks context7 tools
|
|
545
|
+
sks context7 resolve "OpenAI Codex" --query "hooks customization"
|
|
546
|
+
sks context7 docs /websites/developers_openai_codex --query "hooks customization"
|
|
547
|
+
sks context7 evidence latest /websites/developers_openai_codex --query "hooks customization"
|
|
528
548
|
sks context7 setup --scope project
|
|
529
549
|
sks pipeline status
|
|
550
|
+
sks guard check
|
|
530
551
|
sks reasoning "simple copy edit"
|
|
531
552
|
sks reasoning "research this idea"
|
|
532
553
|
```
|
|
533
554
|
|
|
534
|
-
Routes that rely on external package/API/framework knowledge must record Context7 `resolve-library-id` and `get-library-docs` evidence
|
|
555
|
+
Routes that rely on external package/API/framework knowledge must record Context7 `resolve-library-id` and docs-query evidence before completion. Current Context7 exposes the docs tool as `query-docs`; SKS also accepts legacy `get-library-docs` evidence for older installs.
|
|
535
556
|
|
|
536
557
|
SEO/GEO, npm discoverability, GitHub stars, README ranking, and AI-search visibility work routes to `$AutoResearch` and loads the `seo-geo-optimizer` skill together with Context7 evidence and an experiment ledger.
|
|
537
558
|
|
|
@@ -668,7 +689,7 @@ sks hproof check latest
|
|
|
668
689
|
.sneakoscope/ mission state, policy, retention, logs, wiki packs, GX cartridges
|
|
669
690
|
.codex/config.toml Codex profiles, multi-agent limits, and Context7 MCP
|
|
670
691
|
.codex/hooks.json hook entrypoints
|
|
671
|
-
.
|
|
692
|
+
.agents/skills/ official repo-local Codex App skills
|
|
672
693
|
.codex/agents/ Codex App custom agents for Team mode
|
|
673
694
|
.codex/SNEAKOSCOPE.md Codex App quick reference
|
|
674
695
|
AGENTS.md managed repository rules block
|
|
@@ -691,7 +712,7 @@ Storage is intentionally bounded:
|
|
|
691
712
|
- `sks gc` compacts oversized JSONL logs and prunes old artifacts
|
|
692
713
|
- `sks stats` reports package and `.sneakoscope` storage size
|
|
693
714
|
|
|
694
|
-
See [
|
|
715
|
+
See the [resource policy](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PERFORMANCE.md) for the detailed storage and leak policy.
|
|
695
716
|
|
|
696
717
|
## Visual Cartridges
|
|
697
718
|
|
|
@@ -769,16 +790,18 @@ src/cli/main.mjs command router and Ralph loop
|
|
|
769
790
|
src/core/db-safety.mjs SQL, CLI, and MCP payload classifier
|
|
770
791
|
src/core/evaluation.mjs token, accuracy-proxy, and context-quality evaluator
|
|
771
792
|
src/core/gx-renderer.mjs deterministic SVG/HTML visual context renderer
|
|
793
|
+
src/core/harness-conflicts.mjs
|
|
794
|
+
other Codex harness detector and cleanup prompt
|
|
795
|
+
src/core/harness-guard.mjs immutable installed-harness guard and fingerprint checks
|
|
772
796
|
src/core/hproof.mjs done-gate evaluator
|
|
773
797
|
src/core/init.mjs project bootstrap and hook/skill installation
|
|
774
798
|
src/core/research.mjs research-mode plan, novelty ledger, and gate helpers
|
|
775
799
|
src/core/retention.mjs storage report and garbage collection policy
|
|
776
800
|
src/core/triwiki-attention.mjs
|
|
777
|
-
docs/PERFORMANCE.md resource and leak policy
|
|
778
801
|
crates/sks-core/ optional Rust helper source, not shipped in npm package
|
|
779
802
|
```
|
|
780
803
|
|
|
781
|
-
The published npm package is allowlisted to `bin`, `src`, `
|
|
804
|
+
The published npm package is allowlisted to `bin`, `src`, `README.md`, and `LICENSE`; `.sneakoscope`, `.codex`, `.agents`, `docs`, Rust sources, archives, and local state are excluded.
|
|
782
805
|
|
|
783
806
|
## Development
|
|
784
807
|
|
|
@@ -793,7 +816,7 @@ npm run doctor
|
|
|
793
816
|
|
|
794
817
|
`npm run repo-audit` checks tracked files for risky local paths and high-confidence secret material such as private keys, npm/GitHub/OpenAI-style tokens, local MCP configs, DB dumps, and credential files. It is included in `release:check` and `prepublishOnly`. The package intentionally does not define `prepack`; GitHub installs should not trigger npm's heavier git-dependency preparation path for normal users.
|
|
795
818
|
|
|
796
|
-
`npm run sizecheck` blocks accidental package bloat during `release:check`, `publish:dry`, and `npm publish`. Defaults: packed tarball `<=
|
|
819
|
+
`npm run sizecheck` blocks accidental package bloat during `release:check`, `publish:dry`, and `npm publish`. Defaults: packed tarball `<=136 KiB`, unpacked package `<=500 KiB`, package files `<=40`, and each tracked file `<=256 KiB`. Override only for an intentional release with `SKS_MAX_PACK_BYTES`, `SKS_MAX_UNPACKED_BYTES`, `SKS_MAX_PACK_FILES`, or `SKS_MAX_TRACKED_FILE_BYTES`.
|
|
797
820
|
|
|
798
821
|
`npm run selftest` uses the mock path and does not call a model. Live Ralph runs require a working Codex CLI installation and authentication.
|
|
799
822
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "sneakoscope",
|
|
3
3
|
"displayName": "Sneakoscope Codex",
|
|
4
|
-
"version": "0.6.
|
|
4
|
+
"version": "0.6.25",
|
|
5
5
|
"description": "Sneakoscope Codex: update-aware, database-safe Codex CLI harness with multi-agent Team orchestration, Ralph no-question execution, autoresearch-style loops, and H-Proof gates.",
|
|
6
6
|
"type": "module",
|
|
7
7
|
"homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
|
|
@@ -23,7 +23,6 @@
|
|
|
23
23
|
"files": [
|
|
24
24
|
"bin",
|
|
25
25
|
"src",
|
|
26
|
-
"docs",
|
|
27
26
|
"README.md",
|
|
28
27
|
"LICENSE"
|
|
29
28
|
],
|