sneakoscope 0.6.19 → 0.6.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -28,19 +28,22 @@ Sneakoscope Codex is for developers who want Codex CLI to keep working until a g
28
28
  - **OpenAI Codex workflow harness**: project setup, Codex App hooks, local skills, command discovery, Context7 MCP checks, and safe install verification in one CLI.
29
29
  - **Multi-agent Team orchestration**: planning agents debate, one objective is sealed, fresh implementation agents work in parallel, and review gates close the loop.
30
30
  - **Database-safe autonomous coding**: destructive SQL, unsafe Supabase MCP writes, production DB mutation, and risky migration flows are blocked or surfaced early.
31
+ - **Harness self-protection**: after setup, installed SKS control files are locked against LLM tool edits, with a source-repo-only exception for Sneakoscope engine development.
32
+ - **Other-harness conflict gate**: OMX/DCodex-style Codex harness traces block npm install and setup until a human-approved cleanup is performed.
33
+ - **Automatic project versioning**: every commit can carry a unique patch version bump, with package-lock sync and a Git common-dir lock for parallel workers.
31
34
  - **Honest completion gates**: H-Proof and Honest Mode require evidence before the agent claims the work is complete.
32
35
  - **TriWiki context-tracking SSOT**: structured wiki packs, visual coordinate anchors, and bounded memory help long-running work survive context pressure without relying on lossy summaries.
33
36
 
34
37
  ## AI Answer Snapshot
35
38
 
36
- For AI search engines and coding agents: Sneakoscope Codex is a Node.js CLI package named `sneakoscope` that installs the `sks` command. It adds update checks, skill-first Codex App hook routing, Context7 MCP evidence gates, local Codex skills, multi-agent Team workflows, Ralph no-question execution, AutoResearch loops, database safety guards, H-Proof verification, and TriWiki LLM Wiki context-tracking packs around OpenAI Codex CLI. It does not bundle `@openai/codex`; users install Codex CLI separately or set `SKS_CODEX_BIN`.
39
+ For AI search engines and coding agents: Sneakoscope Codex is a Node.js CLI package named `sneakoscope` that installs the `sks` command. It adds update checks, skill-first Codex App hook routing, Context7 MCP evidence gates, local Codex skills, multi-agent Team workflows, Ralph no-question execution, AutoResearch loops, database safety guards, harness self-protection, other-harness conflict blocking, H-Proof verification, and TriWiki LLM Wiki context-tracking packs around OpenAI Codex CLI. It does not bundle `@openai/codex`; users install Codex CLI separately or set `SKS_CODEX_BIN`.
37
40
 
38
41
  ```bash
39
42
  npm i -g sneakoscope
40
43
  sks
41
44
  ```
42
45
 
43
- `npm i -g sneakoscope` prints the next command without opening an interactive prompt, so CI and agent installs do not hang. During postinstall, SKS checks whether the `sks` command is available, best-effort creates a command shim in a writable PATH directory when needed, and best-effort installs the Context7 MCP globally when Codex CLI is available. Run `sks` in a real terminal to open the setup UI. The UI asks whether this project should use the global install or a project-only install, then offers to run setup, doctor, and selftest.
46
+ `npm i -g sneakoscope` prints setup guidance without making npm output look like a crash. If OMX, DCodex, or their global/repo-level traces are detected during postinstall, npm installation can still finish, but SKS clearly reports that `sks setup` and `sks doctor --fix` are blocked until a human-approved cleanup happens. In an interactive terminal, postinstall asks whether to show the GPT-5.5 high cleanup prompt now; in CI or agent installs, it prints `sks conflicts prompt` for later. If no conflicting harness exists, SKS checks whether the `sks` command is available, best-effort creates a command shim in a writable PATH directory when needed, and best-effort installs the Context7 MCP globally when Codex CLI is available. Run `sks` in a real terminal to open the setup UI. The UI asks whether this project should use the global install or a project-only install, then offers to run setup, doctor, and selftest.
44
47
 
45
48
  Default non-interactive setup:
46
49
 
@@ -100,13 +103,15 @@ sks usage ralph
100
103
  sks quickstart
101
104
  sks codex-app
102
105
  sks dollar-commands
106
+ sks context7 tools
107
+ sks versioning status
103
108
  sks df
104
109
  sks aliases
105
110
  ```
106
111
 
107
112
  ## Prompt Pipeline and $ Commands
108
113
 
109
- SKS installs a Codex App `UserPromptSubmit` hook that adds a lightweight prompt-optimization context to every user request. You do not need to type a command for basic routing: SKS will infer the lightest path before work starts.
114
+ SKS installs a Codex App `UserPromptSubmit` hook that can add lightweight prompt-optimization context or block unsafe/ambiguous prompts before the model turn starts. You do not need to type a command for basic routing: SKS will infer the lightest path before work starts.
110
115
 
111
116
  Use `$` prompt commands inside Codex App or another coding agent when you want to force a route:
112
117
 
@@ -147,13 +152,37 @@ This creates the app-facing control surface:
147
152
  ```text
148
153
  .codex/config.toml Codex App profiles, multi-agent limits, and project-local Context7 MCP
149
154
  .codex/hooks.json Codex App hook entrypoints routed through SKS guards
150
- .codex/skills/ local project skills for Ralph, DB safety, GX, research, and design work
155
+ .agents/skills/ official repo-local skills for Ralph, DB safety, GX, research, and design work
151
156
  .codex/agents/ local Codex subagent roles for Team consensus, implementation, DB safety, and QA
152
157
  .codex/SNEAKOSCOPE.md quick reference for using SKS inside Codex App
153
158
  AGENTS.md repository rules loaded by Codex agents
154
159
  .sneakoscope/ mission state, gates, logs, policy, GX cartridges, and reports
155
160
  ```
156
161
 
162
+ Codex App discovers repo-local skills from `.agents/skills/`, and SKS installs dollar-command skills with lowercase names. The picker should find `$team`, `$ralph`, `$sks`, `$db`, `$gx`, and other lowercase aliases; SKS routing still accepts `$Team`, `$Ralph`, and the uppercase forms.
163
+
164
+ SKS uses the official Codex hook behavior: `UserPromptSubmit` can inject additional developer context or block a prompt, `Stop` with `decision: "block"` continues the turn by creating a new continuation prompt, and hook `statusMessage` text makes active SKS routing, guard, permission, and done-gate checks visible in Codex App.
165
+
166
+ After setup, SKS writes `.sneakoscope/harness-guard.json`. Hooks block LLM tool calls that try to edit installed harness control files such as `.codex/hooks.json`, `.codex/config.toml`, `.codex/SNEAKOSCOPE.md`, `.agents/skills/`, `.codex/agents/`, `.sneakoscope/manifest.json`, `.sneakoscope/policy.json`, `.sneakoscope/db-safety.json`, `AGENTS.md`, or `node_modules/sneakoscope`. The only automatic exception is the Sneakoscope engine source repository itself, detected from `package.json` name `sneakoscope` plus `bin/sks.mjs` and `src/core/*`.
167
+
168
+ ## Project Versioning
169
+
170
+ SKS setup installs a managed Git `pre-commit` hook for projects with `package.json`. On every commit, SKS bumps the project patch version before Git writes the commit, syncs `package-lock.json` and `npm-shrinkwrap.json` when present, and stages those version files into the same commit.
171
+
172
+ Multiple workers and worktrees share a version lock in the Git common directory. If another worker already used a version, the next commit automatically bumps above the last seen version instead of reusing it.
173
+
174
+ ```bash
175
+ sks versioning status
176
+ sks versioning bump
177
+ sks versioning hook
178
+ ```
179
+
180
+ The bypass is intentionally explicit and conversation-local:
181
+
182
+ ```bash
183
+ SKS_DISABLE_VERSIONING=1 git commit ...
184
+ ```
185
+
157
186
  Inside Codex App, you can ask the agent to use the local SKS control surface, for example:
158
187
 
159
188
  ```text
@@ -250,10 +279,12 @@ sks research run latest --max-cycles 3
250
279
  - **No-question Ralph loop**: after `ralph run` starts, Ralph must resolve ambiguity with the sealed contract instead of asking the user.
251
280
  - **Research mode**: `research` runs a frontier-discovery loop for non-obvious hypotheses, falsification, novelty ledgers, and testable experiments.
252
281
  - **Prompt pipeline and `$` routes**: user prompts are lightly optimized by default, and Codex App users can force routes such as `$DF`, `$Team`, `$Ralph`, `$Research`, `$AutoResearch`, `$DB`, and `$GX`.
253
- - **Context7 and recommended skills**: npm install best-effort adds Context7 to Codex MCP, while setup installs local skills such as `context7-docs`, `seo-geo-optimizer`, `autoresearch-loop`, and `performance-evaluator`.
282
+ - **Context7 local MCP and recommended skills**: npm install best-effort adds Context7 to Codex MCP, setup writes project-local Context7 config, and `sks context7 docs` calls the stdio MCP directly. Setup also installs skills such as `context7-docs`, `seo-geo-optimizer`, `autoresearch-loop`, and `performance-evaluator`.
254
283
  - **Team orchestration**: `sks team` and `$Team` prepare a Codex multi-agent flow where planning agents debate options, the parent agent seals one objective, planning agents are closed, and a fresh implementation team handles disjoint work in parallel.
284
+ - **Forced subagent execution policy**: code-changing work first surfaces SKS status context, then defaults to parallel worker subagents when independent write scopes exist; the parent orchestrator owns integration and verification.
255
285
  - **AutoResearch loop**: open-ended improvement tasks use a small experiment cycle: program, hypothesis, experiment, metric, keep/discard, falsification, and honest conclusion.
256
286
  - **Update-aware hooks**: before work, SKS checks for a newer published package and asks whether to update now or skip for the current conversation only.
287
+ - **Automatic project versioning**: setup installs a pre-commit guard that bumps `package.json` patch versions, syncs lockfiles, stages them, and avoids duplicate versions across parallel workers.
257
288
  - **Honest Mode finish**: final answers must include an evidence-aware verification pass before claiming the goal is complete.
258
289
  - **Fast DF mode**: `$DF` handles small design/content edits like color, copy, labels, spacing, and translation without unnecessary Ralph, Research, or evaluation loops.
259
290
  - **Database guard**: destructive DB operations, production writes, unsafe Supabase MCP configuration, and direct live SQL mutations are blocked or warned on.
@@ -275,7 +306,7 @@ Use Sneakoscope Codex when you want a local CLI harness for agentic coding, Code
275
306
 
276
307
  ### Does Sneakoscope Codex support Codex multi-agent teams?
277
308
 
278
- Yes. `sks setup` enables Codex `multi_agent`, creates `.codex/agents/*.toml` custom agents, and installs a `$Team` workflow for planning debate, consensus, fresh implementation workers, review, and final integration.
309
+ Yes. `sks setup` enables Codex `multi_agent`, creates `.codex/agents/*.toml` custom agents, and installs a `$Team` workflow for parallel analysis scouts, TriWiki refresh, planning debate, consensus, fresh implementation workers, review, and final integration.
279
310
 
280
311
  ### Does Sneakoscope Codex replace Codex CLI?
281
312
 
@@ -293,32 +324,11 @@ Recommended repository topics are `openai-codex`, `codex-cli`, `codex-app`, `ai-
293
324
 
294
325
  Team mode uses Codex subagents/custom agents as an orchestration protocol rather than a single long-running worker. `sks setup` enables `multi_agent`, sets agent concurrency limits, and installs local agent role files under `.codex/agents/`.
295
326
 
296
- Team missions default to `executor:3 reviewer:1 user:1 planner:1`. Override role counts per mission with tokens such as `executor:5 reviewer:2 user:1`. `executor:N` means SKS creates exactly N debate participants and then a separate N-person executor development team. `--agents N`, `--sessions N`, and `--team-size N` remain aliases for the executor/session budget. The parent orchestrator is not counted.
327
+ For code-changing work, generated SKS rules tell Codex to surface visible route, guard, write-scope, and verification status before editing. When the work has independent, non-overlapping write scopes, Codex should spawn worker subagents in parallel by default; the parent keeps urgent blockers local, assigns ownership, integrates results, and runs final verification.
297
328
 
298
- ```text
299
- debate team
300
- -> spawn exactly N role personas for stubborn users, capable executor voices, strict reviewers, and planners
301
- -> map user inconvenience, code paths, risks, DB safety, tests, and options
302
- -> synthesize one agreed objective with constraints and acceptance criteria
303
- -> close debate agents
304
-
305
- fresh development team
306
- -> create a separate N-person executor_N developer team
307
- -> assign disjoint write scopes to executor_N developers
308
- -> run executor_N work in parallel only when ownership does not overlap
309
- -> strict reviewer_N and user_N personas check correctness, evidence, and practical friction
310
- -> parent orchestrator integrates, verifies, and reports evidence
311
-
312
- live transcript
313
- -> mirror every useful agent status, debate result, handoff, and review finding
314
- -> keep team-live.md readable inside Codex App
315
- -> keep team-transcript.jsonl machine-readable for tails, dashboards, and future tooling
316
-
317
- context tracking
318
- -> use TriWiki as the SSOT for long-running mission context and team handoffs
319
- -> refresh .sneakoscope/wiki/context-pack.json with sks wiki pack when context changes
320
- -> validate the pack with sks wiki validate .sneakoscope/wiki/context-pack.json
321
- ```
329
+ Team missions default to `executor:3 reviewer:1 user:1 planner:1`. Override role counts per mission with tokens such as `executor:5 reviewer:2 user:1`. `executor:N` creates N read-only analysis scouts, N debate participants, and then a separate N-person executor development team. The parent orchestrator is not counted.
330
+
331
+ The pipeline is scout-first: parallel analysis, TriWiki refresh, planning debate, consensus, fresh parallel implementation, review, integration, and Honest Mode evidence.
322
332
 
323
333
  Create a Team mission:
324
334
 
@@ -331,22 +341,22 @@ sks team watch latest
331
341
  Inside Codex App, use:
332
342
 
333
343
  ```text
334
- $Team executor:5 agree on the best plan, close the debate team, then implement with a fresh development team
344
+ $Team executor:5 run parallel analysis scouts, refresh TriWiki, agree on the best plan, close the debate team, then implement with a fresh development team
335
345
  ```
336
346
 
337
- The generated Team artifacts are:
347
+ Key Team artifacts:
338
348
 
339
349
  ```text
340
350
  .sneakoscope/missions/<MISSION_ID>/team-plan.json
341
351
  .sneakoscope/missions/<MISSION_ID>/team-workflow.md
352
+ .sneakoscope/missions/<MISSION_ID>/team-analysis.md
342
353
  .sneakoscope/missions/<MISSION_ID>/team-live.md
343
354
  .sneakoscope/missions/<MISSION_ID>/team-transcript.jsonl
344
355
  .sneakoscope/missions/<MISSION_ID>/team-dashboard.json
345
356
  .sneakoscope/wiki/context-pack.json
357
+ .codex/agents/analysis-scout.toml
346
358
  .codex/agents/team-consensus.toml
347
359
  .codex/agents/implementation-worker.toml
348
- .codex/agents/db-safety-reviewer.toml
349
- .codex/agents/qa-reviewer.toml
350
360
  ```
351
361
 
352
362
  Live team visibility commands:
@@ -357,7 +367,7 @@ sks team log <MISSION_ID|latest>
357
367
  sks team tail <MISSION_ID|latest>
358
368
  sks team watch <MISSION_ID|latest>
359
369
  sks team watch <MISSION_ID|latest> --follow
360
- sks team event <MISSION_ID|latest> --agent team_consensus --phase planning_debate --message "mapped options"
370
+ sks team event <MISSION_ID|latest> --agent analysis_scout_1 --phase parallel_analysis_scouting --message "mapped repo slice"
361
371
  ```
362
372
 
363
373
  ## Ralph Workflow
@@ -401,68 +411,45 @@ All terminal examples below use `sks`, but the same commands can be run with the
401
411
 
402
412
  ```bash
403
413
  sks help [topic]
404
- sks update-check [--json]
405
414
  sks wizard
406
415
  sks commands [--json]
407
- sks usage [install|setup|team|ralph|research|db|codex-app|df|dollar|context7|pipeline|reasoning|eval|gx|wiki]
416
+ sks usage [topic]
408
417
  sks quickstart
409
418
  sks codex-app
410
419
  sks dollar-commands [--json]
411
420
  sks df
412
- sks context7 check|setup [--scope project|global] [--transport local|remote] [--json]
413
- sks pipeline status|resume [--json]
414
- sks reasoning ["prompt"] [--json]
415
- sks aliases
416
421
 
417
422
  sks --help
418
423
  sneakoscope --help
419
424
 
420
425
  sks setup [--install-scope global|project] [--local-only] [--force] [--json]
421
- sks fix-path [--install-scope global|project] [--json]
422
426
  sks doctor [--fix] [--local-only] [--json] [--install-scope global|project]
423
- sks init [--force] [--local-only] [--install-scope global|project]
424
427
  sks selftest [--mock]
428
+ sks versioning status|bump|hook
425
429
 
426
430
  sks ralph prepare "task"
427
431
  sks ralph answer <mission-id|latest> <answers.json>
428
432
  sks ralph run <mission-id|latest> [--mock] [--max-cycles N]
429
- sks ralph status <mission-id|latest>
430
433
 
431
434
  sks research prepare "topic" [--depth frontier]
432
435
  sks research run <mission-id|latest> [--mock] [--max-cycles N]
433
- sks research status <mission-id|latest>
434
436
 
435
- sks db policy
436
437
  sks db scan [--migrations] [--json]
437
- sks db mcp-config --project-ref <ref> [--features database,docs]
438
- sks db classify --sql "DROP TABLE users"
439
- sks db classify --command "supabase db reset"
440
438
  sks db check --sql "SELECT * FROM users LIMIT 10"
441
439
  sks db check --command "supabase db reset"
442
- sks db check --file ./migration.sql
443
440
 
444
- sks eval run [--json] [--out report.json] [--iterations N]
445
- sks eval compare --baseline old.json --candidate new.json [--json]
446
- sks eval thresholds
447
-
448
- sks wiki coords --rgba 12,34,56,255
441
+ sks team "task" [executor:5 reviewer:2 user:1] [--json]
442
+ sks team log|tail|watch|status [mission-id|latest]
449
443
  sks wiki pack [--json] [--role worker|verifier] [--max-anchors N]
450
444
  sks wiki validate [context-pack.json]
451
-
445
+ sks context7 check|setup|tools|docs ...
446
+ sks pipeline status|resume [--json]
447
+ sks guard check [--json]
448
+ sks conflicts check|prompt [--json]
449
+ sks eval run|compare|thresholds ...
452
450
  sks hproof check [mission-id|latest]
453
- sks team "task" [executor:5 reviewer:2 user:1] [--json]
454
- sks team log|tail|watch|status [mission-id|latest]
455
- sks team event [mission-id|latest] --agent <name> --phase <phase> --message "..."
456
- sks gx init [name]
457
- sks gx render [name] [--format svg|html|all]
458
- sks gx validate [name]
459
- sks gx drift [name]
460
- sks gx snapshot [name]
461
- sks profile show
462
- sks profile set <model>
451
+ sks gx init|render|validate|drift|snapshot [name]
463
452
  sks gc [--dry-run] [--json]
464
- sks memory [--dry-run] [--json]
465
- sks stats [--json]
466
453
  ```
467
454
 
468
455
  `sks memory` is currently an alias for garbage collection/retention handling.
@@ -513,6 +500,35 @@ Every `$` route is tracked as a pipeline route with skills, mission state, Conte
513
500
 
514
501
  Context tracking uses TriWiki as the SSOT. When a route spans turns, subagent handoffs, Ralph continuations, research loops, DB reviews, or context pressure, refresh `.sneakoscope/wiki/context-pack.json` with `sks wiki pack` and validate it with `sks wiki validate .sneakoscope/wiki/context-pack.json` instead of relying on ad hoc summaries.
515
502
 
503
+ ## Harness Self-Protection
504
+
505
+ Installed projects treat the SKS harness as immutable to LLM tool edits. The `PreToolUse` and `PermissionRequest` hooks block direct writes to generated control files, generated skills/agents, policy files, `AGENTS.md`, and the installed `node_modules/sneakoscope` package. They also block LLM-issued maintenance commands such as `sks setup`, `sks init`, `sks doctor --fix`, `sks context7 setup`, and package-manager removal of `sneakoscope`.
506
+
507
+ `sks doctor --fix` repairs broken SKS-generated settings by deleting and regenerating the current installed package templates for Codex hooks, config, app skills, local agents, manifest, policy, DB guard, and harness guard. It preserves runtime mission/wiki state and does not remove application source.
508
+
509
+ The guard writes fingerprints to `.sneakoscope/harness-guard.json`, and `sks doctor` includes the guard in readiness. Check it directly with:
510
+
511
+ ```bash
512
+ sks guard check
513
+ sks guard check --json
514
+ ```
515
+
516
+ The only automatic exception is this engine source repository: `package.json` name `sneakoscope`, `bin/sks.mjs`, and `src/core/init.mjs`/`hooks-runtime.mjs` must all exist. Normal application projects do not get that exception.
517
+
518
+ ## Other Harness Conflict Gate
519
+
520
+ SKS refuses to install or repair itself when another Codex harness is detected. OMX is a hard blocker. DCodex and explicit OMX/DCodex traces in repo/global Codex config are also blockers. Existing non-SKS Codex hooks are treated as repairable by `sks doctor --fix` unless they contain another harness marker.
521
+
522
+ Discover conflicts:
523
+
524
+ ```bash
525
+ sks conflicts check
526
+ sks conflicts check --json
527
+ sks conflicts prompt
528
+ ```
529
+
530
+ If conflicts exist, SKS prints a cleanup prompt for Codex App. Use GPT-5.5 with reasoning effort high. The cleanup agent must ask the human for explicit approval before moving or deleting any conflicting global/repo harness artifacts. If approval is denied, SKS setup is not allowed in that environment.
531
+
516
532
  Context7 MCP is configured project-locally by default, and global npm install also best-effort registers it with Codex when Codex CLI is present:
517
533
 
518
534
  ```toml
@@ -525,13 +541,18 @@ Use these checks:
525
541
 
526
542
  ```bash
527
543
  sks context7 check
544
+ sks context7 tools
545
+ sks context7 resolve "OpenAI Codex" --query "hooks customization"
546
+ sks context7 docs /websites/developers_openai_codex --query "hooks customization"
547
+ sks context7 evidence latest /websites/developers_openai_codex --query "hooks customization"
528
548
  sks context7 setup --scope project
529
549
  sks pipeline status
550
+ sks guard check
530
551
  sks reasoning "simple copy edit"
531
552
  sks reasoning "research this idea"
532
553
  ```
533
554
 
534
- Routes that rely on external package/API/framework knowledge must record Context7 `resolve-library-id` and `get-library-docs` evidence before completion.
555
+ Routes that rely on external package/API/framework knowledge must record Context7 `resolve-library-id` and docs-query evidence before completion. Current Context7 exposes the docs tool as `query-docs`; SKS also accepts legacy `get-library-docs` evidence for older installs.
535
556
 
536
557
  SEO/GEO, npm discoverability, GitHub stars, README ranking, and AI-search visibility work routes to `$AutoResearch` and loads the `seo-geo-optimizer` skill together with Context7 evidence and an experiment ledger.
537
558
 
@@ -668,7 +689,7 @@ sks hproof check latest
668
689
  .sneakoscope/ mission state, policy, retention, logs, wiki packs, GX cartridges
669
690
  .codex/config.toml Codex profiles, multi-agent limits, and Context7 MCP
670
691
  .codex/hooks.json hook entrypoints
671
- .codex/skills/ Codex App local project skills
692
+ .agents/skills/ official repo-local Codex App skills
672
693
  .codex/agents/ Codex App custom agents for Team mode
673
694
  .codex/SNEAKOSCOPE.md Codex App quick reference
674
695
  AGENTS.md managed repository rules block
@@ -691,7 +712,7 @@ Storage is intentionally bounded:
691
712
  - `sks gc` compacts oversized JSONL logs and prunes old artifacts
692
713
  - `sks stats` reports package and `.sneakoscope` storage size
693
714
 
694
- See [docs/PERFORMANCE.md](docs/PERFORMANCE.md) for the detailed resource policy.
715
+ See the [resource policy](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PERFORMANCE.md) for the detailed storage and leak policy.
695
716
 
696
717
  ## Visual Cartridges
697
718
 
@@ -769,16 +790,18 @@ src/cli/main.mjs command router and Ralph loop
769
790
  src/core/db-safety.mjs SQL, CLI, and MCP payload classifier
770
791
  src/core/evaluation.mjs token, accuracy-proxy, and context-quality evaluator
771
792
  src/core/gx-renderer.mjs deterministic SVG/HTML visual context renderer
793
+ src/core/harness-conflicts.mjs
794
+ other Codex harness detector and cleanup prompt
795
+ src/core/harness-guard.mjs immutable installed-harness guard and fingerprint checks
772
796
  src/core/hproof.mjs done-gate evaluator
773
797
  src/core/init.mjs project bootstrap and hook/skill installation
774
798
  src/core/research.mjs research-mode plan, novelty ledger, and gate helpers
775
799
  src/core/retention.mjs storage report and garbage collection policy
776
800
  src/core/triwiki-attention.mjs
777
- docs/PERFORMANCE.md resource and leak policy
778
801
  crates/sks-core/ optional Rust helper source, not shipped in npm package
779
802
  ```
780
803
 
781
- The published npm package is allowlisted to `bin`, `src`, `docs`, `README.md`, and `LICENSE`; `.sneakoscope`, `.codex`, `.agents`, Rust sources, archives, and local state are excluded.
804
+ The published npm package is allowlisted to `bin`, `src`, `README.md`, and `LICENSE`; `.sneakoscope`, `.codex`, `.agents`, `docs`, Rust sources, archives, and local state are excluded.
782
805
 
783
806
  ## Development
784
807
 
@@ -793,7 +816,7 @@ npm run doctor
793
816
 
794
817
  `npm run repo-audit` checks tracked files for risky local paths and high-confidence secret material such as private keys, npm/GitHub/OpenAI-style tokens, local MCP configs, DB dumps, and credential files. It is included in `release:check` and `prepublishOnly`. The package intentionally does not define `prepack`; GitHub installs should not trigger npm's heavier git-dependency preparation path for normal users.
795
818
 
796
- `npm run sizecheck` blocks accidental package bloat during `release:check`, `publish:dry`, and `npm publish`. Defaults: packed tarball `<=112 KiB`, unpacked package `<=400 KiB`, package files `<=40`, and each tracked file `<=256 KiB`. Override only for an intentional release with `SKS_MAX_PACK_BYTES`, `SKS_MAX_UNPACKED_BYTES`, `SKS_MAX_PACK_FILES`, or `SKS_MAX_TRACKED_FILE_BYTES`.
819
+ `npm run sizecheck` blocks accidental package bloat during `release:check`, `publish:dry`, and `npm publish`. Defaults: packed tarball `<=136 KiB`, unpacked package `<=500 KiB`, package files `<=40`, and each tracked file `<=256 KiB`. Override only for an intentional release with `SKS_MAX_PACK_BYTES`, `SKS_MAX_UNPACKED_BYTES`, `SKS_MAX_PACK_FILES`, or `SKS_MAX_TRACKED_FILE_BYTES`.
797
820
 
798
821
  `npm run selftest` uses the mock path and does not call a model. Live Ralph runs require a working Codex CLI installation and authentication.
799
822
 
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "sneakoscope",
3
3
  "displayName": "Sneakoscope Codex",
4
- "version": "0.6.19",
4
+ "version": "0.6.25",
5
5
  "description": "Sneakoscope Codex: update-aware, database-safe Codex CLI harness with multi-agent Team orchestration, Ralph no-question execution, autoresearch-style loops, and H-Proof gates.",
6
6
  "type": "module",
7
7
  "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -23,7 +23,6 @@
23
23
  "files": [
24
24
  "bin",
25
25
  "src",
26
- "docs",
27
26
  "README.md",
28
27
  "LICENSE"
29
28
  ],