sneakoscope 0.7.44 → 0.7.46

package/README.md

@@ -43,7 +43,7 @@ sks selftest --mock
 | Area | What it does |
 | --- | --- |
 | CLI runtime | Bare `sks` opens or reuses the default tmux Codex CLI workspace. `sks tmux open` remains the explicit form for session/workspace flags, and `sks --mad` launches the explicit full-access high-reasoning profile. |
-| Codex App commands | Installs generated skills so `$Team`, `$From-Chat-IMG`, `$DFix`, `$QA-LOOP`, `$PPT`, `$Goal`, `$DB`, `$Wiki`, `$Help`, and related routes are visible in prompt workflows. |
+| Codex App commands | Installs generated skills so `$Team`, `$From-Chat-IMG`, `$DFix`, `$QA-LOOP`, `$PPT`, `$Goal`, `$DB`, `$Wiki`, `$Help`, and related routes are visible in prompt workflows. `sks codex-app remote-control` wraps Codex CLI 0.130.0+ headless remote control without falling back to older app-server internals. |
 | OpenClaw agents | Generates an OpenClaw skill package so OpenClaw agents can attach `sneakoscope-codex`, enable the `shell` tool, and discover/use SKS commands from the target repo root. |
 | Pipeline plans | Writes `pipeline-plan.json` for stateful routes so the runtime lane, kept stages, skipped stages, verification commands, and no-unrequested-fallback invariant are visible with `sks pipeline plan`. |
 | Team orchestration | Runs substantial work through score-based ambiguity handling, scouts, TriWiki refresh, debate, runtime task graphs, worker inboxes, implementation, review, cleanup, reflection, and Honest Mode; narrow work should use Proof Field evidence to skip unrelated pipeline work instead of expanding Team. |
@@ -183,10 +183,11 @@ Bare `sks` asks this before opening Codex when codex-lb is not configured:
 Authenticate and route Codex through codex-lb? [y/N]
 ```
 
-Answering `y` asks for the hosted domain and API key, writes `~/.codex/config.toml`, stores the key in `~/.codex/sks-codex-lb.env` with mode `0600`, syncs Codex CLI API-key auth through `codex login --with-api-key`, and sources that env file before launching Codex in tmux. When codex-lb is configured from this prompt, SKS opens a fresh tmux session for that launch so the new key is loaded by the Codex process immediately. The generated provider config follows the codex-lb README's Codex CLI API-key setup:
+Answering `y` asks for the hosted domain and API key, writes `~/.codex/config.toml`, stores the key in `~/.codex/sks-codex-lb.env` with mode `0600`, syncs Codex CLI API-key auth through `codex login --with-api-key`, and sources that env file before launching Codex in tmux. When codex-lb is configured from this prompt, SKS opens a fresh tmux session for that launch so the new key is loaded by the Codex process immediately. SKS keeps Codex App Fast mode visible and defaulted by writing `service_tier = "fast"`, `[features].fast_mode = true`, and the `sks-fast-high` profile while removing only legacy top-level `model` and `model_reasoning_effort` locks; route-specific reasoning stays in named profiles or explicit tmux launch args. The generated provider config follows the codex-lb README's Codex CLI API-key setup:
 
 ```toml
 model_provider = "codex-lb"
+service_tier = "fast"
 
 [model_providers.codex-lb]
 name = "OpenAI"
@@ -299,9 +300,18 @@ After installing, run:
 ```sh
 sks bootstrap
 sks codex-app check
+sks codex-app remote-control --status
 sks dollar-commands
 ```
 
+For headless remotely controllable Codex App/server sessions on Codex CLI 0.130.0 or newer, run:
+
+```sh
+sks codex-app remote-control -- --help
+```
+
+`sks codex-app check` reports whether the installed Codex CLI is new enough. Codex CLI 0.130.0+ app-server/remote-control threads can pick up config changes live; older CLI/TUI sessions should still be restarted after `.codex/config.toml` or MCP/plugin changes.
+
 Then open Codex App and use prompt commands directly in the chat. Examples:
 
 ```text

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "0.7.44",
+  "version": "0.7.46",
   "description": "Sneakoscope Codex: database-safe Codex CLI/App harness with Team, Goal, AutoResearch, TriWiki, and Honest Mode.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",

package/src/cli/codex-app-command.mjs

@@ -0,0 +1,67 @@
+import { spawn } from 'node:child_process';
+import { codexRemoteControlStatus, formatCodexRemoteControlStatus } from '../core/codex-app.mjs';
+
+export async function codexAppRemoteControlCommand(args = [], opts = {}) {
+  const controlArgs = argsBeforeSeparator(args);
+  if (controlArgs.includes('--help') || controlArgs.includes('-h')) {
+    console.log(remoteControlHelp());
+    return;
+  }
+
+  const status = await codexRemoteControlStatus();
+  if (controlArgs.includes('--json')) {
+    console.log(JSON.stringify(status, null, 2));
+    if (!status.ok) process.exitCode = 1;
+    return;
+  }
+
+  if (controlArgs.includes('--status') || controlArgs.includes('--check') || controlArgs.includes('--dry-run')) {
+    console.log(formatCodexRemoteControlStatus(status));
+    if (!status.ok) process.exitCode = 1;
+    return;
+  }
+
+  if (!status.ok) {
+    console.error(formatCodexRemoteControlStatus(status));
+    process.exitCode = 1;
+    return;
+  }
+
+  const passthrough = stripSeparator(args);
+  const spawnFn = opts.spawn || spawn;
+  const code = await spawnInherited(spawnFn, status.codex_cli.bin, ['remote-control', ...passthrough], {
+    cwd: process.cwd(),
+    env: process.env
+  });
+  if (code) process.exitCode = code;
+}
+
+function remoteControlHelp() {
+  return [
+    'Usage: sks codex-app remote-control [--status|--check|--dry-run|--json] [-- <codex remote-control args>]',
+    '',
+    'Starts Codex CLI 0.130.0+ remote-control, the headless remotely controllable app-server entrypoint.',
+    'SKS only wraps the first-party command and refuses older Codex CLI versions instead of falling back to app-server internals.'
+  ].join('\n');
+}
+
+function stripSeparator(args = []) {
+  const index = args.indexOf('--');
+  return index >= 0 ? args.slice(index + 1) : args;
+}
+
+function argsBeforeSeparator(args = []) {
+  const index = args.indexOf('--');
+  return index >= 0 ? args.slice(0, index) : args;
+}
+
+function spawnInherited(spawnFn, command, args, opts) {
+  return new Promise((resolve) => {
+    const child = spawnFn(command, args, { ...opts, stdio: 'inherit' });
+    child.on('error', (err) => {
+      console.error(`codex remote-control failed to start: ${err.message}`);
+      resolve(1);
+    });
+    child.on('close', (code) => resolve(code || 0));
+  });
+}

package/src/cli/install-helpers.mjs

@@ -30,6 +30,11 @@ export async function postinstall({ bootstrap }) {
   else if (context7Install.status === 'codex_missing') console.log('Context7 MCP: Codex CLI missing. Install @openai/codex or set SKS_CODEX_BIN, then run `sks context7 setup --scope global` or `sks setup` in a project.');
   else if (context7Install.status === 'skipped') console.log(`Context7 MCP: skipped (${context7Install.reason}).`);
   else if (context7Install.status === 'failed') console.log(`Context7 MCP: auto setup failed. Run \`sks context7 setup --scope global\` or \`sks setup\`. ${context7Install.error || ''}`.trim());
+  const fastModeRepair = await ensureGlobalCodexFastModeDuringInstall();
+  if (fastModeRepair.status === 'updated') console.log(`Codex App Fast mode: restored in ${fastModeRepair.config_path}.`);
+  else if (fastModeRepair.status === 'present') console.log('Codex App Fast mode: config already compatible.');
+  else if (fastModeRepair.status === 'skipped') console.log(`Codex App Fast mode: skipped (${fastModeRepair.reason}).`);
+  else if (fastModeRepair.status === 'failed') console.log(`Codex App Fast mode: auto repair failed. Run \`sks setup\`. ${fastModeRepair.error || ''}`.trim());
   const globalSkills = await ensureGlobalCodexSkillsDuringInstall();
   if (globalSkills.status === 'installed') console.log(`Codex App global $ skills: installed in ${globalSkills.root} (${globalSkills.installed_count} skills).`);
   else if (globalSkills.status === 'partial') console.log(`Codex App global $ skills: partial in ${globalSkills.root}; missing ${globalSkills.missing_skills.join(', ')}. Run \`sks doctor --fix\`.`);
@@ -138,7 +143,7 @@ export async function configureCodexLb(opts = {}) {
   if (!apiKey) return { ok: false, status: 'missing_api_key', config_path: configPath, env_path: envPath };
   await ensureDir(path.dirname(configPath));
   const current = await readText(configPath, '');
-  const next = upsertCodexLbConfig(current, baseUrl);
+  const next = normalizeCodexFastModeUiConfig(upsertCodexLbConfig(current, baseUrl));
   await writeTextAtomic(configPath, next);
   await writeTextAtomic(envPath, `export CODEX_LB_API_KEY=${shellSingleQuote(apiKey)}\n`);
   await fsp.chmod(envPath, 0o600).catch(() => {});
@@ -225,6 +230,102 @@ function upsertCodexLbConfig(text = '', baseUrl) {
   return `${next.trim()}\n`;
 }
 
+export async function ensureGlobalCodexFastModeDuringInstall(opts = {}) {
+  if (process.env.SKS_SKIP_CODEX_FAST_MODE_REPAIR === '1') return { status: 'skipped', reason: 'SKS_SKIP_CODEX_FAST_MODE_REPAIR=1' };
+  const home = opts.home || process.env.HOME || os.homedir();
+  const configPath = opts.configPath || codexLbConfigPath(home);
+  try {
+    await ensureDir(path.dirname(configPath));
+    const current = await readText(configPath, '');
+    const next = normalizeCodexFastModeUiConfig(current);
+    if (next === ensureTrailingNewline(current)) return { status: 'present', config_path: configPath };
+    await writeTextAtomic(configPath, next);
+    return { status: 'updated', config_path: configPath };
+  } catch (err) {
+    return { status: 'failed', config_path: configPath, error: err.message };
+  }
+}
+
+export function normalizeCodexFastModeUiConfig(text = '') {
+  let next = removeLegacyTopLevelCodexModeLocks(text);
+  next = removeTomlTableKey(next, 'notice', 'fast_default_opt_out');
+  next = upsertTopLevelTomlString(next, 'service_tier', 'fast');
+  next = upsertTomlTableKey(next, 'features', 'fast_mode = true');
+  next = upsertTomlTableKey(next, 'features', 'fast_mode_ui = true');
+  next = upsertTomlTableKey(next, 'user.fast_mode', 'visible = true');
+  next = upsertTomlTableKey(next, 'user.fast_mode', 'enabled = true');
+  next = upsertTomlTableKey(next, 'user.fast_mode', 'default_profile = "sks-fast-high"');
+  next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'model = "gpt-5.5"');
+  next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'service_tier = "fast"');
+  next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'approval_policy = "on-request"');
+  next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'sandbox_mode = "workspace-write"');
+  next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'model_reasoning_effort = "high"');
+  return ensureTrailingNewline(next);
+}
+
+function removeLegacyTopLevelCodexModeLocks(text = '') {
+  const legacy = {
+    model: new Set(['gpt-5.5']),
+    model_reasoning_effort: new Set(['high'])
+  };
+  const lines = String(text || '').split('\n');
+  const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
+  const end = firstTable === -1 ? lines.length : firstTable;
+  return lines.filter((line, index) => {
+    if (index >= end) return true;
+    const match = line.match(/^\s*([A-Za-z0-9_.-]+)\s*=\s*"([^"]*)"\s*(?:#.*)?$/);
+    if (!match) return true;
+    return !legacy[match[1]]?.has(match[2]);
+  }).join('\n').replace(/^\n+/, '').replace(/\n{3,}/g, '\n\n');
+}
+
+function removeTomlTableKey(text, table, key) {
+  const lines = String(text || '').trimEnd().split('\n');
+  if (lines.length === 1 && lines[0] === '') return '';
+  const header = `[${table}]`;
+  const start = lines.findIndex((x) => x.trim() === header);
+  if (start === -1) return String(text || '');
+  let end = lines.length;
+  for (let i = start + 1; i < lines.length; i += 1) {
+    if (/^\s*\[.+\]\s*$/.test(lines[i])) {
+      end = i;
+      break;
+    }
+  }
+  const keyPattern = new RegExp(`^\\s*${key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*=`);
+  return lines.filter((line, index) => index <= start || index >= end || !keyPattern.test(line)).join('\n').replace(/\n{3,}/g, '\n\n');
+}
+
+function upsertTomlTableKey(text, table, line) {
+  const key = String(line).split('=')[0].trim();
+  const lines = String(text || '').trimEnd().split('\n');
+  if (lines.length === 1 && lines[0] === '') lines.length = 0;
+  const header = `[${table}]`;
+  const start = lines.findIndex((x) => x.trim() === header);
+  if (start === -1) return [...lines, ...(lines.length ? [''] : []), header, line].join('\n').replace(/\n{3,}/g, '\n\n');
+  let end = lines.length;
+  for (let i = start + 1; i < lines.length; i++) {
+    if (/^\s*\[.+\]\s*$/.test(lines[i])) {
+      end = i;
+      break;
+    }
+  }
+  const keyRe = new RegExp(`^\\s*${escapeRegExp(key)}\\s*=`);
+  for (let i = start + 1; i < end; i++) {
+    if (keyRe.test(lines[i])) {
+      lines[i] = line;
+      return lines.join('\n').replace(/\n{3,}/g, '\n\n');
+    }
+  }
+  lines.splice(end, 0, line);
+  return lines.join('\n').replace(/\n{3,}/g, '\n\n');
+}
+
+function ensureTrailingNewline(text = '') {
+  const value = String(text || '').trimEnd();
+  return value ? `${value}\n` : '';
+}
+
 function upsertTopLevelTomlString(text, key, value) {
   const line = `${key} = "${value}"`;
   const lines = String(text || '').split('\n');