sneakoscope 0.9.15 → 0.9.16

package/README.md

@@ -2,11 +2,11 @@
 
 Fast legacy-free proof-first Codex trust layer with image-based Voxel TriWiki.
 
-Sneakoscope Codex (`sks`) is a Codex CLI/App harness that makes repeatable Codex work auditable. `0.9.15` runs through split command modules, automatically seals serious routes with Completion Proof, binds visual/UI claims to Image Voxel TriWiki anchors and relations, and release-gates hooks, codex-lb, executable fixtures, Rust parity, and DB safety evidence.
+Sneakoscope Codex (`sks`) is a Codex CLI/App harness that makes repeatable Codex work auditable. `0.9.16` runs through split command modules, automatically seals serious routes with Completion Proof, binds visual/UI claims to Image Voxel TriWiki anchors and relations, and release-gates hooks, codex-lb, executable fixtures, Rust parity, and DB safety evidence.
 
-## 0.9.15 Current Release
+## 0.9.16 Current Release
 
-`0.9.15` preserves the 0.9.14 legacy-free trust layer and fixes global npm postinstall auto-bootstrap.
+`0.9.16` preserves the 0.9.14 legacy-free trust layer, keeps the 0.9.15 postinstall bootstrap fix, and installs the Codex App `$Commit` / `$Commit-And-Push` skills during setup and doctor repair.
 
 `0.9.14` turned SKS into a legacy-free proof-first trust layer for Codex work:
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "0.9.15"
+version = "0.9.16"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "0.9.15"
+version = "0.9.16"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 0.9.15"),
+        Some("--version") => println!("sks-rs 0.9.16"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "0.9.15",
+  "version": "0.9.16",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",

package/src/commands/doctor.mjs

@@ -5,11 +5,23 @@ import { getCodexInfo } from '../core/codex-adapter.mjs';
 import { rustInfo } from '../core/rust-accelerator.mjs';
 import { codexAppIntegrationStatus } from '../core/codex-app.mjs';
 import { codexLbMetrics, readCodexLbCircuit } from '../core/codex-lb-circuit.mjs';
+import { ensureGlobalCodexSkillsDuringInstall } from '../cli/install-helpers.mjs';
+import { normalizeInstallScope } from '../core/init.mjs';
 
 export async function run(_command, args = []) {
+  let repair = null;
   if (flag(args, '--fix')) {
     const { setupCommand } = await import('../core/commands/basic-cli.mjs');
-    await setupCommand(['--force', '--local-only']);
+    const installScope = installScopeFromArgs(args);
+    const setupArgs = ['--force', '--install-scope', installScope];
+    if (flag(args, '--local-only')) setupArgs.push('--local-only');
+    await setupCommand(setupArgs);
+    repair = {
+      install_scope: installScope,
+      global_skills: installScope === 'global' && !flag(args, '--local-only')
+        ? await ensureGlobalCodexSkillsDuringInstall({ force: true })
+        : { status: 'skipped', reason: 'project or local-only repair' }
+    };
   }
   const root = await projectRoot();
   const codex = await getCodexInfo().catch((err) => ({ available: false, error: err.message }));
@@ -27,7 +39,8 @@ export async function run(_command, args = []) {
     codex_app: codexApp,
     codex_lb: codexLb,
     sneakoscope: { ok: await exists(`${root}/.sneakoscope`) },
-    package: { bytes: pkgBytes, human: formatBytes(pkgBytes) }
+    package: { bytes: pkgBytes, human: formatBytes(pkgBytes) },
+    repair
   };
   if (flag(args, '--json')) {
     printJson(result);
@@ -44,3 +57,10 @@ export async function run(_command, args = []) {
   console.log(`Ready:     ${result.ok ? 'yes' : 'no'}`);
   if (!result.ok) process.exitCode = 1;
 }
+
+function installScopeFromArgs(args = []) {
+  if (flag(args, '--project')) return 'project';
+  if (flag(args, '--global')) return 'global';
+  const index = args.indexOf('--install-scope');
+  return normalizeInstallScope(index >= 0 && args[index + 1] ? args[index + 1] : 'global');
+}

package/src/commands/hook.mjs

@@ -1,8 +1,6 @@
-import { hookMain } from '../core/hooks-runtime.mjs';
-import { printJson } from '../cli/output.mjs';
+import { emitHook } from '../core/hooks-runtime.mjs';
 
 export async function run(_command, args = []) {
   const [name = 'user-prompt-submit'] = args;
-  const result = await hookMain(name);
-  return printJson(result);
+  return emitHook(name);
 }

package/src/core/fsx.mjs

@@ -5,7 +5,7 @@ import os from 'node:os';
 import crypto from 'node:crypto';
 import { spawn } from 'node:child_process';
 
-export const PACKAGE_VERSION = '0.9.15';
+export const PACKAGE_VERSION = '0.9.16';
 export const DEFAULT_PROCESS_TAIL_BYTES = 256 * 1024;
 export const DEFAULT_PROCESS_TIMEOUT_MS = 30 * 60 * 1000;
 

package/src/core/hooks-runtime.mjs

@@ -1158,8 +1158,11 @@ function normalizeHookResult(name, result = {}) {
 
   if (eventName === 'PreToolUse') {
     if (out.decision === 'block' || out.permissionDecision === 'deny' || out.decision === 'deny') {
-      normalized.decision = 'block';
-      normalized.reason = reason;
+      normalized.hookSpecificOutput = {
+        hookEventName: 'PreToolUse',
+        permissionDecision: 'deny',
+        permissionDecisionReason: reason
+      };
     }
     return normalized;
   }

package/src/core/init.mjs

@@ -909,6 +909,8 @@ export async function installSkills(root) {
     'computer-use-fast': `---\nname: computer-use-fast\ndescription: Alias for the maximum-speed $Computer-Use/$CU Codex Computer Use lane.\n---\n\nUse the same rules as computer-use: skip Team debate, QA-LOOP clarification, upfront TriWiki refresh, Context7, subagents, and reflection unless explicitly requested. Use Codex Computer Use directly; never substitute Playwright, Chrome MCP, Browser Use, Selenium, Puppeteer, or other browser automation for UI/browser evidence. At the end only, refresh/pack TriWiki, validate it, then provide a concise completion summary plus Honest Mode.\n`,
     'cu': `---\nname: cu\ndescription: Short alias for the maximum-speed $Computer-Use Codex Computer Use lane.\n---\n\nUse the same rules as computer-use. This is a speed lane for focused UI/browser/visual tasks that require Codex Computer Use evidence, with TriWiki refresh/validate and Honest Mode deferred to final closeout.\n`,
     'goal': `---\nname: goal\ndescription: Fast $Goal/$goal bridge overlay for Codex native persisted /goal workflows.\n---\n\nUse when the user invokes $Goal/$goal or asks to persist a workflow with Codex native /goal continuation. Prepare with sks goal create or the $Goal route, write only the lightweight bridge artifacts, then use native Codex /goal create, pause, resume, and clear controls where available. Goal does not replace Team, QA, DB, or other SKS execution routes; continue implementation through the selected route and use Context7 only when external API/library docs are involved. Do not recreate the old no-question loop.\n`,
+    'commit': `---\nname: commit\ndescription: Simple git-only route for $Commit requests that stage current changes and create one commit without the full SKS pipeline.\n---\n\nUse only when the user invokes $Commit or explicitly asks to commit the current repository changes without pushing. Keep this route lightweight: inspect git status and the relevant diff summary, avoid Team/pipeline/TriWiki route work unless separately requested, stage the intended current changes, and create one git commit. The commit message must summarize the actual work and include exactly one trailer: Co-authored-by: Codex <noreply@openai.com>. Do not push. If there are no changes, report that no commit was created. Finish with a concise result and a one-line Honest Mode covering the commit hash and any unverified items.\n`,
+    'commit-and-push': `---\nname: commit-and-push\ndescription: Simple git-only route for $Commit-And-Push requests that stage current changes, create one commit, and push without the full SKS pipeline.\n---\n\nUse only when the user invokes $Commit-And-Push or explicitly asks to commit and push the current repository changes. Keep this route lightweight: inspect git status and the relevant diff summary, avoid Team/pipeline/TriWiki route work unless separately requested, stage the intended current changes, create one git commit, then push the current branch. The commit message must summarize the actual work and include exactly one trailer: Co-authored-by: Codex <noreply@openai.com>. If there are no changes, do not create an empty commit unless the user explicitly asks for one. Finish with a concise result and a one-line Honest Mode covering the commit hash, pushed branch, and any unverified items.\n`,
     'research': `---\nname: research\ndescription: Dollar-command route for $Research or $research frontier discovery workflows.\n---\n\nUse when the user invokes $Research/$research or asks for research, hypotheses, new mechanisms, falsification, or testable predictions. Prefer sks research prepare and sks research run. Research is not an implementation route: do not edit repository source, docs, package metadata, generated skills, or harness files; write only route-local mission artifacts under .sneakoscope/missions/<mission-id>/. Run the genius-lens scout council with named persona-inspired cognitive roles: Einstein Scout, Feynman Scout, Turing Scout, von Neumann Scout, and Skeptic Scout. These are lenses only; do not impersonate the historical people. Every Research scout ledger row must include display_name, persona, persona_boundary, effort=xhigh, reasoning_effort=xhigh, service_tier when available, one literal "Eureka!" idea, falsifiers, cheap_probes, and challenge_or_response before synthesis. This is not a fixed three-cycle route: repeat source gathering, Eureka ideas, evidence-bound debate, falsification, and synthesis pressure until every scout records final agreement, or until the explicit max-cycle safety cap pauses with an unpassed gate. Create research-source-skill.md as a route-local Skill Creator artifact, then maximize layered public web/source search across latest papers, official/government or leading-institution data, standards/primary docs, current news, public discourse, developer/practitioner sources, traditional background sources, and counterevidence before synthesis. Record research-source-skill.md, source-ledger.json, scout-ledger.json, debate-ledger.json, novelty-ledger.json, falsification-ledger.json, research-report.md, research-paper.md, genius-opinion-summary.md, and research-gate.json. debate-ledger.json must include consensus_iterations, unanimous_consensus, and per-scout agreements; research-gate.json cannot pass until unanimous_consensus=true with every scout agreement recorded. Context7 is optional and only needed when the research topic depends on external package/API/framework docs; do not use it as the default research evidence layer. Normal Research may take one or two hours when needed; favor real source collection, cross-layer comparison, falsification, and a concise paper manuscript over speed. Do not use --mock except for selftests or dry harness checks; if live source execution is unavailable, record a blocker and keep the gate unpassed. Do not use for ordinary code edits.\n`,
     'autoresearch': `---\nname: autoresearch\ndescription: Dollar-command route for $AutoResearch or $autoresearch iterative experiment loops.\n---\n\nUse for $AutoResearch, iterative improvement, SEO/GEO, ranking, workflow, benchmark, or experiments. Define program, hypothesis, experiment, metric, keep/discard, falsification, next step, and Honest Mode. Load seo-geo-optimizer for README/npm/GitHub/schema/AI-search work.\n`,
     'db': `---\nname: db\ndescription: Dollar-command route for $DB or $db database and Supabase safety checks.\n---\n\nUse when the user invokes $DB/$db or the task touches SQL, Supabase, Postgres, migrations, Prisma, Drizzle, Knex, MCP database tools, or production data. Run or follow sks db policy, sks db scan, sks db classify, and sks db check. Destructive database operations remain forbidden.\n`,

package/src/core/version.mjs

@@ -1 +1 @@
-export const PACKAGE_VERSION = '0.9.15';
+export const PACKAGE_VERSION = '0.9.16';