sneakoscope 1.11.0 → 1.13.0

package/README.md

@@ -10,12 +10,14 @@ SKS does not try to clone every other harness. It focuses on one thing: making C
 
 ## Current Release
 
-SKS **1.11.0** focuses on release confidence: all-feature completion reporting, PPT imagegen review evidence, DFix diagnose/plan/patch/verify artifacts, recursive JSON schema checks, and stricter release metadata gates.
+SKS **1.13.0** focuses on the DFix Extreme Speed Kernel and Codex hook trust warning-zero: DFix now records error signatures, path decisions, patch runner results, verification selection, rollback plans, wrongness/cache hints, and speed budgets, while hooks validate the latest 10-event Codex schema including `SubagentStart` and `SubagentStop`.
 
 ```bash
 sks features complete --json
+sks ux-review run --image <path> --generate-callouts --json
 sks ppt fixture --mock --json
 sks dfix fixture --json
+sks hooks trust-doctor --json
 ```
 
 Detailed release history lives in [CHANGELOG.md](CHANGELOG.md). Current release gate status lives in [docs/release-readiness.md](docs/release-readiness.md).

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "1.11.0"
+version = "1.13.0"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "1.11.0"
+version = "1.13.0"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 1.11.0"),
+        Some("--version") => println!("sks-rs 1.13.0"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '1.11.0';
+const FAST_PACKAGE_VERSION = '1.13.0';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--version' || args[0] === '-v' || args[0] === 'version') {

package/dist/build-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "1.11.0",
+  "version": "1.13.0",
   "typescript": true,
   "mjs_runtime_files": 0,
   "files": [
@@ -190,6 +190,8 @@
     "core/codex-compat/codex-compat-report.js",
     "core/codex-compat/codex-config-policy.d.ts",
     "core/codex-compat/codex-config-policy.js",
+    "core/codex-compat/codex-hook-events.d.ts",
+    "core/codex-compat/codex-hook-events.js",
     "core/codex-compat/codex-hook-issues.d.ts",
     "core/codex-compat/codex-hook-issues.js",
     "core/codex-compat/codex-hook-output-builders.d.ts",
@@ -210,6 +212,16 @@
     "core/codex-compat/codex-version.js",
     "core/codex-exec-output-schema.d.ts",
     "core/codex-exec-output-schema.js",
+    "core/codex-hooks/codex-hook-config-writer.d.ts",
+    "core/codex-hooks/codex-hook-config-writer.js",
+    "core/codex-hooks/codex-hook-hash.d.ts",
+    "core/codex-hooks/codex-hook-hash.js",
+    "core/codex-hooks/codex-hook-state-writer.d.ts",
+    "core/codex-hooks/codex-hook-state-writer.js",
+    "core/codex-hooks/codex-hook-trust-doctor.d.ts",
+    "core/codex-hooks/codex-hook-trust-doctor.js",
+    "core/codex-hooks/codex-hook-trust-state.d.ts",
+    "core/codex-hooks/codex-hook-trust-state.js",
     "core/codex-lb-circuit.d.ts",
     "core/codex-lb-circuit.js",
     "core/codex-lb/codex-lb-env.d.ts",
@@ -306,6 +318,26 @@
     "core/decision-lattice.js",
     "core/dfix.d.ts",
     "core/dfix.js",
+    "core/dfix/codex-handoff.d.ts",
+    "core/dfix/codex-handoff.js",
+    "core/dfix/dfix-cache.d.ts",
+    "core/dfix/dfix-cache.js",
+    "core/dfix/error-signature.d.ts",
+    "core/dfix/error-signature.js",
+    "core/dfix/patch-runner.d.ts",
+    "core/dfix/patch-runner.js",
+    "core/dfix/patch-templates.d.ts",
+    "core/dfix/patch-templates.js",
+    "core/dfix/path-decision.d.ts",
+    "core/dfix/path-decision.js",
+    "core/dfix/performance.d.ts",
+    "core/dfix/performance.js",
+    "core/dfix/root-cause-ranking.d.ts",
+    "core/dfix/root-cause-ranking.js",
+    "core/dfix/verification-runner.d.ts",
+    "core/dfix/verification-runner.js",
+    "core/dfix/verification-selector.d.ts",
+    "core/dfix/verification-selector.js",
     "core/dogfood-loop.d.ts",
     "core/dogfood-loop.js",
     "core/effort-orchestrator.d.ts",
@@ -332,6 +364,8 @@
     "core/feature-fixtures.js",
     "core/feature-registry.d.ts",
     "core/feature-registry.js",
+    "core/features/feature-completion.d.ts",
+    "core/features/feature-completion.js",
     "core/features/feature-fixtures.d.ts",
     "core/features/feature-fixtures.js",
     "core/features/feature-registry.d.ts",
@@ -699,6 +733,27 @@
     "core/wiki-image/visual-anchor.js",
     "core/work-order-ledger.d.ts",
     "core/work-order-ledger.js",
+    "vendor/openai-codex/latest/hooks/permission-request.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/permission-request.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/post-compact.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/post-compact.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/post-tool-use.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/post-tool-use.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/pre-compact.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/pre-compact.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/pre-tool-use.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/pre-tool-use.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/session-start.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/session-start.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/snapshot-metadata.json",
+    "vendor/openai-codex/latest/hooks/stop.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/stop.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/subagent-start.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/subagent-start.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/subagent-stop.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/subagent-stop.command.output.schema.json",
+    "vendor/openai-codex/latest/hooks/user-prompt-submit.command.input.schema.json",
+    "vendor/openai-codex/latest/hooks/user-prompt-submit.command.output.schema.json",
     "vendor/openai-codex/rust-v0.131.0/hooks/permission-request.command.input.schema.json",
     "vendor/openai-codex/rust-v0.131.0/hooks/permission-request.command.output.schema.json",
     "vendor/openai-codex/rust-v0.131.0/hooks/post-compact.command.input.schema.json",

package/dist/cli/feature-commands.js

@@ -10,6 +10,8 @@ import { recordHookPolicyMismatchWrongness } from '../core/triwiki-wrongness/wro
 import { codexSchemaSnapshotReport } from '../core/codex-compat/codex-schema-snapshot.js';
 import { validateCodexFixtureOutputs } from '../core/codex-compat/codex-hook-schema.js';
 import { codexHookWarningCheck } from '../core/codex-compat/codex-hook-warning-detector.js';
+import { codexHookTrustDoctor } from '../core/codex-hooks/codex-hook-trust-doctor.js';
+import { writeTrustedHashStateForHooksFile } from '../core/codex-hooks/codex-hook-state-writer.js';
 const flag = (args, name) => args.includes(name);
 export async function featuresCommand(sub = 'list', args = []) {
     const action = sub || 'list';
@@ -119,6 +121,40 @@ export async function hooksCommand(sub = 'explain', args = []) {
             console.log(`- ${event.event}: ${event.command}`);
         return;
     }
+    if (action === 'doctor' || action === 'trust-doctor') {
+        const report = await codexHookTrustDoctor(root, { fix: flag(args, '--fix'), managed: flag(args, '--managed') });
+        if (flag(args, '--json'))
+            return console.log(JSON.stringify(report, null, 2));
+        console.log(`Hooks trust doctor: ${report.ok ? 'ok' : 'blocked'}`);
+        for (const warning of report.warnings)
+            console.log(`- ${warning}`);
+        if (!report.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (action === 'trust-state') {
+        const report = await codexHookTrustDoctor(root, { managed: flag(args, '--managed') });
+        if (flag(args, '--json'))
+            return console.log(JSON.stringify({ schema: 'sks.codex-hook-trust-state-command.v1', ok: report.ok, entries: report.entries, trust: report.trust }, null, 2));
+        console.log(`Hook trust entries: ${report.entries.length}`);
+        return;
+    }
+    if (action === 'trust-fix') {
+        const report = await codexHookTrustDoctor(root, { fix: true, managed: flag(args, '--managed') });
+        if (flag(args, '--json'))
+            return console.log(JSON.stringify(report, null, 2));
+        console.log(`Hooks trust fix: ${report.ok ? 'ok' : 'blocked'}`);
+        if (!report.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (action === 'install') {
+        const report = await writeTrustedHashStateForHooksFile(root);
+        if (flag(args, '--json'))
+            return console.log(JSON.stringify({ ...report, schema: 'sks.codex-hook-install-command.v1', ok: true, mode: flag(args, '--managed') ? 'managed' : flag(args, '--project') ? 'project' : 'trust-state-only', trusted: flag(args, '--trusted') }, null, 2));
+        console.log(`Hooks install trust state updated: ${report.updated}`);
+        return;
+    }
     if (action === 'replay') {
         const fixture = args.find((arg) => !String(arg).startsWith('--'));
         const report = await hooksReplayReport(root, fixture);
@@ -168,7 +204,7 @@ export async function hooksCommand(sub = 'explain', args = []) {
         return;
     }
     if (action !== 'explain') {
-        console.error('Usage: sks hooks explain|status|trust-report|replay <fixture.json>|codex-schema|codex-validate|warning-check|replay-codex-fixtures [--json]');
+        console.error('Usage: sks hooks explain|status|doctor|trust-report|trust-state|trust-doctor|trust-fix|install|replay <fixture.json>|codex-schema|codex-validate|warning-check|replay-codex-fixtures [--json]');
         process.exitCode = 1;
         return;
     }
@@ -205,17 +241,25 @@ async function hooksStatusReport(root) {
 }
 async function hooksTrustReport(root) {
     const status = await hooksStatusReport(root);
+    const trust = await codexHookTrustDoctor(root).catch(() => null);
     return redactSecrets({
         schema: 'sks.hooks-trust-report.v1',
         hooks_files: status.hooks_files.map((file) => file.path),
         events: [
+            { event: 'SessionStart', command: 'sks hook session-start', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'PreToolUse', command: 'sks hook pre-tool', writes: ['.sneakoscope/bus/tool-events.jsonl'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'PermissionRequest', command: 'sks hook permission-request', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'medium' },
+            { event: 'PostToolUse', command: 'sks hook post-tool', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'medium' },
+            { event: 'PreCompact', command: 'sks hook pre-compact', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
+            { event: 'PostCompact', command: 'sks hook post-compact', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'UserPromptSubmit', command: 'sks hook user-prompt-submit', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'medium' },
+            { event: 'SubagentStart', command: 'sks hook subagent-start', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'low' },
+            { event: 'SubagentStop', command: 'sks hook subagent-stop', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'Stop', command: 'sks hook stop', writes: ['.sneakoscope/missions', '.sneakoscope/proof'], network: false, secret_policy: 'redacted', risk: 'high' }
         ],
-        ok: true,
-        warnings: status.ok ? [] : ['no hooks.json file found in project or user config']
+        trust,
+        ok: status.ok && (trust?.ok ?? true),
+        warnings: [...(status.ok ? [] : ['no hooks.json file found in project or user config']), ...(trust?.warnings || [])]
     });
 }
 async function hooksReplayReport(root, fixturePath) {
@@ -315,6 +359,16 @@ function normalizeReplayHookName(event = '') {
         return 'user-prompt-submit';
     if (normalized.includes('posttool') || normalized.includes('post-tool'))
         return 'post-tool';
+    if (normalized.includes('sessionstart') || normalized.includes('session-start'))
+        return 'session-start';
+    if (normalized.includes('subagentstart') || normalized.includes('subagent-start'))
+        return 'subagent-start';
+    if (normalized.includes('subagentstop') || normalized.includes('subagent-stop'))
+        return 'subagent-stop';
+    if (normalized.includes('precompact') || normalized.includes('pre-compact'))
+        return 'pre-compact';
+    if (normalized.includes('postcompact') || normalized.includes('post-compact'))
+        return 'post-compact';
     if (normalized.includes('stop'))
         return 'stop';
     return normalized || 'pre-tool';
@@ -332,7 +386,7 @@ export function hooksExplainReport() {
         feature_key: 'features.hooks',
         deprecated_feature_alias: 'features.codex_hooks',
         config_paths: ['~/.codex/hooks.json', '~/.codex/config.toml', '<repo>/.codex/hooks.json', '<repo>/.codex/config.toml'],
-        events: ['SessionStart', 'PreToolUse', 'PermissionRequest', 'PostToolUse', 'UserPromptSubmit', 'Stop'],
+        events: ['PreToolUse', 'PermissionRequest', 'PostToolUse', 'PreCompact', 'PostCompact', 'SessionStart', 'UserPromptSubmit', 'SubagentStart', 'SubagentStop', 'Stop'],
         handlers: {
             supported: ['command'],
             parsed_but_skipped: ['prompt', 'agent'],

package/dist/commands/dfix.d.ts

@@ -7,8 +7,73 @@ export declare function run(command: any, args?: any): Promise<void | {
         root_cause: any;
         evidence: string[];
         confidence: number;
+        path_decision: {
+            schema: string;
+            created_at: string;
+            path: string;
+            path_label: string;
+            root_cause_confidence: number;
+            estimated_patch_risk: string;
+            expected_verification_cost: string;
+            max_allowed_duration_ms: number | undefined;
+            fallback_path: string;
+            blockers: string[];
+        };
         blockers: never[];
     };
+    root_cause_ranking: {
+        schema: string;
+        created_at: string;
+        candidates: {
+            id: string;
+            summary: string;
+            confidence: number;
+            evidence_ids: string[];
+            affected_files: any[];
+            patchability: string;
+            verification_cost: number;
+            ranking_score: number;
+        }[];
+        selected_root_cause: {
+            id: string;
+            summary: string;
+            confidence: number;
+            evidence_ids: string[];
+            affected_files: any[];
+            patchability: string;
+            verification_cost: number;
+            ranking_score: number;
+        };
+        confidence_threshold: number;
+        patch_apply_allowed: boolean;
+        blockers: string[];
+    };
+    verification_suggestion: {
+        schema: string;
+        created_at: string;
+        package_type: string;
+        package_scripts_detected: string[];
+        suggested_commands: string[];
+        fastest_sufficient_command: string;
+        best_command: string | undefined;
+        confidence: number;
+        expected_duration_budget_ms: number;
+        auto_run_requires_opt_in: boolean;
+        recovery_action: string;
+    };
+    error_signature: import("../core/dfix/error-signature.js").DfixErrorSignature;
+    path_decision: {
+        schema: string;
+        created_at: string;
+        path: string;
+        path_label: string;
+        root_cause_confidence: number;
+        estimated_patch_risk: string;
+        expected_verification_cost: string;
+        max_allowed_duration_ms: number | undefined;
+        fallback_path: string;
+        blockers: string[];
+    };
     schema: string;
     ok: boolean;
     mission_id: any;
@@ -24,11 +89,52 @@ export declare function run(command: any, args?: any): Promise<void | {
         schema: string;
         created_at: string;
         patch_plan_present: boolean;
+        path_decision: {
+            schema: string;
+            created_at: string;
+            path: string;
+            path_label: string;
+            root_cause_confidence: number;
+            estimated_patch_risk: string;
+            expected_verification_cost: string;
+            max_allowed_duration_ms: number | undefined;
+            fallback_path: string;
+            blockers: string[];
+        };
+        selected_template: import("../core/dfix/patch-templates.js").DfixPatchTemplate | null;
         mode: string;
         target_file: any;
         find_text_present: boolean;
         replace_text_present: boolean;
+        patch_mode: string;
+        codex_patch_handoff: {
+            mode: string;
+            prompt: string;
+            output_schema: {
+                required: string[];
+                forbidden_operations: string[];
+            };
+            handoff_artifact: {
+                schema: string;
+                created_at: string;
+                mode: string;
+                default_dry_run: boolean;
+                apply_requires: string[];
+                integration_optional: boolean;
+                blocked: boolean;
+                blockers: string[];
+                prompt: string;
+                output_schema: {
+                    required: string[];
+                    optional: string[];
+                    forbidden_operations: string[];
+                };
+                normalized_result_schema: string;
+                proof_links: string[];
+            };
+        } | null;
         root_cause: any;
+        verification_commands: any;
         safety: {
             direct_fix_only: boolean;
             destructive_operations_allowed: boolean;
@@ -47,16 +153,19 @@ export declare function run(command: any, args?: any): Promise<void | {
         schema: string;
         created_at: string;
         explicit_apply_opt_in: boolean;
+        apply_opt_in: boolean;
+        patch_mode: any;
         patch_result_present: boolean;
-        patch_applied: boolean;
-        changed_files: string[];
-        no_op_reason: string | null;
+        patch_applied: any;
+        changed_files: any;
+        git_diff_before: any;
+        git_diff_after: any;
+        diff_captured: boolean;
+        no_op_reason: any;
         noop_patch_wrongness: boolean;
-        rollback_plan: {
-            file: string;
-            action: string;
-        }[];
-        blockers: string[];
+        rollback_plan: any;
+        runner_artifact: string;
+        blockers: any;
         passed: boolean;
     };
 } | {
@@ -75,6 +184,11 @@ export declare function run(command: any, args?: any): Promise<void | {
         root_cause_present: boolean;
         patch_plan_present: boolean;
         patch_result_present: boolean;
+        verification_suggestion_present: boolean;
+        path_decision_present: boolean;
+        patch_runner_present: boolean;
+        verification_selection_present: boolean;
+        performance_report_present: boolean;
         verification_present: boolean;
         rollback_plan_present: boolean;
         noop_patch_wrongness: boolean;
@@ -95,6 +209,11 @@ export declare function run(command: any, args?: any): Promise<void | {
             root_cause_present: boolean;
             patch_plan_present: boolean;
             patch_result_present: boolean;
+            verification_suggestion_present: boolean;
+            path_decision_present: boolean;
+            patch_runner_present: boolean;
+            verification_selection_present: boolean;
+            performance_report_present: boolean;
             verification_present: boolean;
             rollback_plan_present: boolean;
             noop_patch_wrongness: boolean;
@@ -106,7 +225,28 @@ export declare function run(command: any, args?: any): Promise<void | {
         root_cause: any;
         patch_plan: any;
         patch_result: any;
+        verification_suggestion: any;
         verification: any;
+        path_decision: any;
+        patch_runner: any;
+        verification_selection: any;
+        performance: {
+            schema: string;
+            created_at: string;
+            budgets_ms: {
+                readonly diagnose_cold_source_local: 500;
+                readonly path_decision: 100;
+                readonly deterministic_patch_plan: 300;
+                readonly dry_run_patch_handoff_without_codex: 500;
+                readonly exact_patch_apply_small_file: 1000;
+                readonly verification_selector: 300;
+                readonly no_codex_full_loop_fixture: 3000;
+                readonly codex_handoff_timeout: 60000;
+            };
+            timings_ms: Record<string, number>;
+            warnings: string[];
+            ok: boolean;
+        };
     };
     proof: any;
 } | {

package/dist/commands/image-ux-review.d.ts

@@ -193,6 +193,7 @@ export declare function run(command: any, args?: any): Promise<void | {
                 issues: string[];
             };
         };
+        callout_extraction_report: any;
         fix_task_plan: {
             schema: string;
             tasks: any;

package/dist/commands/ppt.d.ts

@@ -99,7 +99,10 @@ export declare function run(command: any, args?: any): Promise<void | {
             next_action: string | null;
         };
         slide_callout_ledger: any;
+        slide_imagegen_request: any;
+        slide_imagegen_response: any;
         slide_issue_ledger: any;
+        slide_extraction_report: any;
         deck_issue_ledger: any;
         fix_task_plan: {
             schema: string;

package/dist/core/bench.js

@@ -1,4 +1,5 @@
 import fs from 'node:fs/promises';
+import os from 'node:os';
 import path from 'node:path';
 import { performance } from 'node:perf_hooks';
 import { ensureDir, nowIso, packageRoot, projectRoot, runProcess, writeJsonAtomic, writeTextAtomic } from './fsx.js';
@@ -19,7 +20,7 @@ export const CORE_BENCH_BUDGET_TIERS = Object.freeze({
         'sks --version': 80,
         'sks help': 140,
         'sks root --json': 140,
-        'sks commands --json': 200,
+        'sks commands --json': 320,
         'sks proof validate --json': 350,
         'sks trust validate bench-fixture --json': 450,
         'sks wiki image-validate --json': 450,
@@ -85,11 +86,16 @@ const STATIC_CORE_COMMANDS = Object.freeze([
     ['sks features check --json', ['features', 'check', '--json']],
     ['sks scouts engines --json', ['scouts', 'engines', '--json']]
 ]);
-function coreCommands(benchTrustMissionId) {
-    const missionId = typeof benchTrustMissionId === 'string' && benchTrustMissionId ? benchTrustMissionId : 'bench-fixture-missing';
+function coreCommands(benchTrustMission) {
+    const missionId = typeof benchTrustMission?.missionId === 'string' && benchTrustMission.missionId
+        ? benchTrustMission.missionId
+        : 'bench-fixture-missing';
+    const trustRoot = typeof benchTrustMission?.root === 'string' && benchTrustMission.root
+        ? benchTrustMission.root
+        : undefined;
     return [
         ...STATIC_CORE_COMMANDS.slice(0, 5),
-        [TRUST_VALIDATE_BENCH_COMMAND, ['trust', 'validate', missionId, '--json']],
+        [TRUST_VALIDATE_BENCH_COMMAND, ['trust', 'validate', missionId, '--json', '--no-wrongness'], trustRoot],
         ...STATIC_CORE_COMMANDS.slice(5)
     ];
 }
@@ -97,19 +103,19 @@ export async function runCoreBench(root = process.cwd(), { iterations = 3, tier
     const script = path.join(packageRoot(), 'dist', 'bin', 'sks.js');
     const budgets = (CORE_BENCH_BUDGET_TIERS[tier] || CORE_BENCH_BUDGET_TIERS['source-local']);
     const measuredIterations = Math.max(1, Number(iterations) || 1);
-    const benchTrustMissionId = await ensureBenchTrustMission(root, script);
+    const benchTrustMission = await ensureBenchTrustMission(root, script);
     const rows = [];
-    for (const [label, args] of coreCommands(benchTrustMissionId)) {
+    for (const [label, args, commandRoot] of coreCommands(benchTrustMission)) {
         const values = [];
         const failures = [];
         for (let i = 0; i < CORE_BENCH_WARMUP_ITERATIONS; i += 1) {
-            const result = await runBenchProcess(root, script, args);
+            const result = await runBenchProcess(commandRoot || root, script, args);
             if (result.code !== 0)
                 failures.push({ phase: 'warmup', code: result.code, stderr_tail: result.stderr.slice(-400), stdout_tail: result.stdout.slice(-400) });
         }
         for (let i = 0; i < measuredIterations; i += 1) {
             const t0 = performance.now();
-            const result = await runBenchProcess(root, script, args);
+            const result = await runBenchProcess(commandRoot || root, script, args);
             values.push(performance.now() - t0);
             if (result.code !== 0)
                 failures.push({ phase: 'measure', code: result.code, stderr_tail: result.stderr.slice(-400), stdout_tail: result.stdout.slice(-400) });
@@ -147,14 +153,19 @@ async function runBenchProcess(root, script, args) {
     });
 }
 async function ensureBenchTrustMission(root, script) {
-    const beforeMissionIds = await listMissionIds(root);
+    const benchRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-core-bench-trust-')).catch(() => root);
+    const beforeMissionIds = await listMissionIds(benchRoot);
     const result = await runProcess(process.execPath, [script, 'run', 'fixture', '--mock', '--json'], {
-        cwd: root,
+        cwd: benchRoot,
         timeoutMs: 60_000,
         maxOutputBytes: 4 * 1024 * 1024,
         env: { SKS_SKIP_NPM_FRESHNESS_CHECK: '1', SKS_DISABLE_UPDATE_CHECK: '1', CI: 'true' }
     });
-    return parseMissionId(result.stdout) || await findBenchTrustMission(root, beforeMissionIds);
+    return {
+        missionId: parseMissionId(result.stdout) || await findBenchTrustMission(benchRoot, beforeMissionIds),
+        root: benchRoot,
+        setup_code: result.code
+    };
 }
 function parseMissionId(text) {
     const parsed = parseJsonOutput(text);

package/dist/core/codex-compat/codex-0-132.js

@@ -99,7 +99,7 @@ export function codex0132Matrix(input = {}) {
         capabilities,
         ux_review_output_schema_preferred: capabilities.find((capability) => capability.id === 'exec_resume_output_schema')?.preferred === true,
         unknown_future_fields_policy: 'warning_only_baseline_validation',
-        hook_strict_subset_baseline: 'rust-v0.131.0'
+        hook_strict_subset_baseline: 'latest'
     };
 }
 //# sourceMappingURL=codex-0-132.js.map

package/dist/core/codex-compat/codex-compat-report.d.ts

@@ -18,7 +18,7 @@ export declare function codexCompatibilityReport(opts?: any): Promise<{
         warnings_count: number;
         issues_by_category: Record<"schema_violation" | "upstream_semantic_unsupported" | "sks_zero_warning_disallowed" | "legacy_shape" | "policy_disallowed", number>;
         events: {
-            event: "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "PermissionRequest" | "Stop" | "PreCompact" | "PostCompact" | "SessionStart";
+            event: "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PreCompact" | "PostCompact" | "SessionStart" | "UserPromptSubmit" | "SubagentStart" | "SubagentStop" | "Stop";
             checked: number;
             ok: boolean;
             warnings: string[];
@@ -76,7 +76,7 @@ export declare function codexDoctorReport(opts?: any): Promise<{
             warnings_count: number;
             issues_by_category: Record<"schema_violation" | "upstream_semantic_unsupported" | "sks_zero_warning_disallowed" | "legacy_shape" | "policy_disallowed", number>;
             events: {
-                event: "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "PermissionRequest" | "Stop" | "PreCompact" | "PostCompact" | "SessionStart";
+                event: "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PreCompact" | "PostCompact" | "SessionStart" | "UserPromptSubmit" | "SubagentStart" | "SubagentStop" | "Stop";
                 checked: number;
                 ok: boolean;
                 warnings: string[];
@@ -120,7 +120,7 @@ export declare function codexDoctorReport(opts?: any): Promise<{
         issues: import("./codex-hook-issues.js").CodexHookIssue[];
         warnings: string[];
         events: {
-            event: "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "PermissionRequest" | "Stop" | "PreCompact" | "PostCompact" | "SessionStart";
+            event: "PreToolUse" | "PermissionRequest" | "PostToolUse" | "PreCompact" | "PostCompact" | "SessionStart" | "UserPromptSubmit" | "SubagentStart" | "SubagentStop" | "Stop";
             checked: number;
             ok: boolean;
             warnings: string[];
@@ -135,6 +135,18 @@ export declare function codexDoctorReport(opts?: any): Promise<{
                 ok: boolean;
                 issues: string[];
             }[];
+            dual_representation: {
+                schema: string;
+                ok: boolean;
+                layers: {
+                    hooks_json_exists: boolean;
+                    config_toml_has_hooks: boolean;
+                    name: string;
+                    hooksJson: string;
+                    configToml: string;
+                }[];
+                issues: string[];
+            };
             issues: string[];
         };
         wrongness: import("../triwiki-wrongness/wrongness-schema.js").WrongnessRecord | null;