sneakoscope 1.18.13 → 1.19.0

package/README.md

@@ -16,7 +16,7 @@ Set up this agent project with Sneakoscope Codex. Use [[mandarange/Sneakoscope-C
 
 ## Current Release
 
-SKS **1.18.13** is the Zellij-only interactive runtime release: actual Codex CLI config-load truth, fake Codex EPERM fixtures, doctor readiness matrix proof, `sks mad repair-config`, safer project-local config splitting, Codex 0.135 compatibility gates, and official Fast mode CLI override proof are wired into release checks. Doctor now refuses Ready yes without Codex config-load evidence, MAD blocks launch before unreadable config can crash Codex, and interactive MAD/lane UI requires Zellij with no removed-runtime fallback.
+SKS **1.19.0** is the MAD Zellij dependency repair release: bootstrap/deps repair and `sks --mad --yes` now install or repair required CLI tooling, including Zellij on macOS/Homebrew, before opening the interactive runtime. npm postinstall still bootstraps and reports missing tools, but it does not silently mutate Homebrew/npm global tools unless `SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS=1` is set. MAD and Team layouts now use Zellij's documented background-layout launch form, and launch failures surface labeled Zellij stderr/stdout tails instead of only `zellij_command_failed`.
 
 ```bash
 sks mad-sks plan --target-root <path> --json
@@ -243,7 +243,7 @@ Install Zellij from [zellij.dev](https://zellij.dev/documentation/installation.h
 brew install zellij
 ```
 
-The default `sks` runtime checks npm for newer `sneakoscope` and `@openai/codex` versions before opening the interactive runtime. `sks --mad` also checks dependencies, requires Zellij for interactive MAD/lane UI, and prints only the session, gate, attach, and blocker details needed to act.
+The default `sks` runtime checks npm for newer `sneakoscope` and `@openai/codex` versions before opening the interactive runtime. `npm i -g sneakoscope` runs a safe bootstrap/readiness pass; use `sks bootstrap --yes`, `sks deps check --yes`, or `sks --mad --yes` to install or repair Codex CLI/Zellij when Homebrew is available. `sks --mad` requires Zellij for interactive MAD/lane UI and prints the session, gate, attach command, blockers, and labeled Zellij stderr/stdout details needed to act.
 
 ## Installation
 
@@ -314,7 +314,7 @@ sks --version
 
 ```sh
 sks bootstrap
-sks deps check
+sks deps check --yes
 sks codex-app check
 sks doctor --fix
 sks fix-path
@@ -344,17 +344,24 @@ sks
 
 Bare `sks` can also prompt for codex-lb auth; SKS stores the base URL/key in `~/.codex/sks-codex-lb.env`, writes the codex-lb Codex CLI / IDE Extension provider block into `~/.codex/config.toml` for Codex App routing, loads the provider env key for interactive launches, and syncs the macOS user launch environment so the Codex App can see `CODEX_LB_API_KEY` after restart. If the provider block disappears but the stored env file is still recoverable, bare `sks`, npm postinstall upgrades, `sks doctor --fix`, and `sks codex-lb repair` restore it with `env_key = "CODEX_LB_API_KEY"`, `supports_websockets = true`, and `requires_openai_auth = false`; imagegen checks may record this provider as configured codex-lb routing, but it is not accepted as official Codex App `$imagegen` evidence. If an older SKS release left the codex-lb dashboard key only in the shared Codex `auth.json` login cache, SKS migrates that key back into `~/.codex/sks-codex-lb.env` when a codex-lb provider or env base URL is already recoverable. It does not rewrite the shared Codex `auth.json` login cache by default; set `SKS_CODEX_LB_SYNC_CODEX_LOGIN=1` only if you intentionally want the old API-key login-cache behavior. When codex-lb is active, SKS opens a fresh `sks-codex-lb-*` Zellij session and sweeps older detached codex-lb sessions for the same repo before launch so stale Responses API chains are not reused. Configured launch paths run a response-chain health check. `previous_response_not_found` is treated as a stateless-LB warning and keeps codex-lb active. Hard failures are surfaced to the user; SKS only bypasses codex-lb when the user chooses OAuth fallback or `SKS_CODEX_LB_AUTOBYPASS=1` is set.
 
-If codex-lb provider auth drifts after launch/reinstall, run `sks doctor --fix` or `sks codex-lb repair`; to replace it, run `sks codex-lb reconfigure --host <domain> --api-key <key>`.
+If codex-lb provider auth drifts after launch/reinstall, run `sks doctor --fix` or `sks codex-lb repair`. To **swap only the API key** at any time (without re-typing the host — it reuses the stored base URL), run:
+
+```sh
+sks codex-lb set-key --api-key-stdin   # or: sks codex-lb set-key --api-key "sk-clb-..."
+```
 
-### Switching back to ChatGPT OAuth (releasing codex-lb)
+(To also change the host, use `sks codex-lb reconfigure --host <domain> --api-key <key>`.)
 
-If you want to hand control back to your official ChatGPT account login after codex-lb has been reconciled, use `sks codex-lb release`:
+### Switching auth mode: codex-lb ↔ ChatGPT OAuth
+
+Switch between the codex-lb API key and your ChatGPT OAuth login at any time with intent-named commands:
 
 ```sh
-sks codex-lb release
+sks codex-lb use-oauth      # hand control back to ChatGPT OAuth
+sks codex-lb use-codex-lb   # switch back to the codex-lb API key
 ```
 
-This restores `~/.codex/auth.chatgpt-backup.json` (written by the 0.9.3 auto-reconcile) to `~/.codex/auth.json` and unsets `model_provider = "codex-lb"` so Codex CLI/App falls back to ChatGPT OAuth. To re-engage codex-lb afterward, run `sks codex-lb repair`.
+`use-oauth` restores `~/.codex/auth.chatgpt-backup.json` (written by auto-reconcile) to `~/.codex/auth.json` and unsets `model_provider = "codex-lb"` so Codex CLI/App falls back to ChatGPT OAuth; if no saved OAuth login exists it points you to `codex login`. `use-codex-lb` re-selects and re-syncs codex-lb. (The older verbs `sks codex-lb release` / `repair` remain as aliases.)
 
 Flags:
 
@@ -423,6 +430,25 @@ Manual fan-out syntax:
 
 Effort is assigned per agent. Simple read-only/docs slices can run low, ordinary tooling and lease mapping use medium, safety/DB/schema/release lanes use high, and frontier/forensic research can escalate to xhigh. If a lease conflict, schema failure, proof blocker, DB risk, or release risk appears, the parent can escalate that lane while keeping unrelated lanes cheaper and faster.
 
+### Naruto Shadow Clone Swarm (`$Naruto`)
+
+`$Naruto` (影分身 / Kage Bunshin no Jutsu) is a high-scale mode of the native agent kernel for broad fan-out work — codebase-wide sweeps, parallel drafting, large audits. It lifts the standard 20-agent ceiling to **up to 100 clone sessions** (only for this route; every other route keeps the 20 cap).
+
+```sh
+sks naruto run "sweep the codebase for TODO comments and summarize"
+sks naruto run "draft a unit test for every module" --clones 100
+sks naruto run "demo" --clones 24 --backend fake --json   # fast, no Codex calls
+sks naruto status
+```
+
+Aliases: `$ShadowClone`, `$Kagebunshin`, and the CLI flag `sks --naruto`.
+
+- **System-aware concurrency:** `--clones N` is the total work fan-out, but `$Naruto` never spawns the whole count at once. Live concurrency is throttled to a host-safe number derived from CPU cores and free memory (heavier cap for real `codex-exec` workers, tighter packing for in-process `fake`). So `--clones 100` on a small host still processes all 100 work units while only running a safe handful at a time; the run reports when it throttles. Override with `SKS_NARUTO_MAX_CONCURRENCY=<n>`.
+- **Dynamic per-clone effort (like Team):** truly simple / no-tool work runs at `low`, any tool use lifts a clone to `medium` (never high/xhigh), and every clone runs in fast service tier.
+- **Safe parallel writes:** clones coordinate through the same lease-based patch-swarm (merge coordinator + conflict rebase + transaction journal) as Team.
+
+See [docs/naruto.md](docs/naruto.md) for the full reference.
+
 ### QA, Computer Use, Goal, Research, DB, Wiki, GX
 
 ```sh
@@ -584,7 +610,7 @@ First install:
 ```sh
 npm i -g sneakoscope
 sks bootstrap
-sks deps check
+sks deps check --yes
 sks codex-app check
 sks selftest --mock
 ```
@@ -699,7 +725,7 @@ npm run release:check
 npm run publish:dry
 ```
 
-`release:check` runs the 1.18.13 Zellij-only closure DAG, writes a source digest stamp under `.sneakoscope/reports/`, then refreshes release readiness so publish commands can verify the same stamp. The DAG preserves the 1.18 baseline gates and adds patch swarm runtime truth, transaction journaling, serial conflict rebase, strict strategy-to-patch proof, rollback command proof, Native CLI Session Swarm 5/10/20-process proof, Real Worker Backend Router proof, Codex child overlap proof, model-authored patch-envelope separation, Zellij layout/pane/screen proof, no-subagent-scaling proof, Fast mode default/worker/Codex/MAD propagation proof, Appshots attachment provenance, MCP runtime overlap evidence, Codex 0.134/0.135 runner truth, task graph expansion, schema-bound follow-up work, actual Agent/Team/Research/QA route blackboxes, scheduler proof hardening, Source Intelligence propagation, and Goal mode propagation checks. Broader live gates remain explicit scripts such as `release:real-check`; real Codex patch smoke, real Codex parallel worker proof, and real Zellij proof are optional unless their `SKS_REQUIRE_REAL_*` or `SKS_REQUIRE_ZELLIJ=1` environment variables are set. Generate the human-readable registry with `sks features inventory --write-docs`. Plain `npm publish` uses the `latest` dist-tag. npm's `prepublishOnly` verifies the fresh release stamp instead of rerunning the full gate, and `prepack` only rebuilds `dist`; publish no longer repeats the expensive release suite during packaging. `npm run publish:dry` remains the explicit dry-run helper.
+`release:check` runs the 1.19.0 Zellij dependency-repair closure DAG, writes a source digest stamp under `.sneakoscope/reports/`, then refreshes release readiness so publish commands can verify the same stamp. The DAG preserves the 1.18 baseline gates and adds patch swarm runtime truth, transaction journaling, serial conflict rebase, strict strategy-to-patch proof, rollback command proof, Native CLI Session Swarm 5/10/20-process proof, Real Worker Backend Router proof, Codex child overlap proof, model-authored patch-envelope separation, Zellij layout/pane/screen proof, no-subagent-scaling proof, Fast mode default/worker/Codex/MAD propagation proof, Appshots attachment provenance, MCP runtime overlap evidence, Codex 0.134/0.135 runner truth, task graph expansion, schema-bound follow-up work, actual Agent/Team/Research/QA route blackboxes, scheduler proof hardening, Source Intelligence propagation, and Goal mode propagation checks. Broader live gates remain explicit scripts such as `release:real-check`; real Codex patch smoke, real Codex parallel worker proof, and real Zellij proof are optional unless their `SKS_REQUIRE_REAL_*` or `SKS_REQUIRE_ZELLIJ=1` environment variables are set. Generate the human-readable registry with `sks features inventory --write-docs`. Plain `npm publish` uses the `latest` dist-tag. npm's `prepublishOnly` verifies the fresh release stamp instead of rerunning the full gate, and `prepack` only rebuilds `dist`; publish no longer repeats the expensive release suite during packaging. `npm run publish:dry` remains the explicit dry-run helper.
 
 Version bumps are manual. Run `sks versioning bump` only when preparing release metadata; SKS will not create `.git/hooks/pre-commit` or auto-bump during ordinary commits.
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "1.18.13"
+version = "1.19.0"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "1.18.13"
+version = "1.19.0"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 1.18.13"),
+        Some("--version") => println!("sks-rs 1.19.0"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/.sks-build-stamp.json

@@ -1,8 +1,8 @@
 {
   "schema": "sks.dist-build-stamp.v1",
   "package_name": "sneakoscope",
-  "package_version": "1.18.13",
-  "source_digest": "6474b08fceec48bfd4915e09945f17e3ac1ccb4c9e01918d6a533f1a3d6bb30e",
-  "source_file_count": 1677,
-  "built_at_source_time": 1780041475580
+  "package_version": "1.19.0",
+  "source_digest": "5eecdb85fa4e3cd359035b49803cd3e9ea0174810596807caf55b2507fb33d18",
+  "source_file_count": 1690,
+  "built_at_source_time": 1780116105711
 }

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '1.18.13';
+const FAST_PACKAGE_VERSION = '1.19.0';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--agent' && args[1] === 'worker') {

package/dist/build-manifest.json

@@ -1,16 +1,16 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "1.18.13",
-  "package_version": "1.18.13",
+  "version": "1.19.0",
+  "package_version": "1.19.0",
   "typescript": true,
   "mjs_runtime_files": 0,
-  "compiled_file_count": 972,
-  "compiled_js_count": 486,
-  "compiled_dts_count": 486,
-  "source_digest": "6474b08fceec48bfd4915e09945f17e3ac1ccb4c9e01918d6a533f1a3d6bb30e",
-  "source_file_count": 1677,
-  "source_files_hash": "fb8f5ab51d8a8c9809fa26ee6688932a083f83741916a19c2b331dad0d4b69e7",
-  "source_list_hash": "fb8f5ab51d8a8c9809fa26ee6688932a083f83741916a19c2b331dad0d4b69e7",
+  "compiled_file_count": 974,
+  "compiled_js_count": 487,
+  "compiled_dts_count": 487,
+  "source_digest": "5eecdb85fa4e3cd359035b49803cd3e9ea0174810596807caf55b2507fb33d18",
+  "source_file_count": 1690,
+  "source_files_hash": "c2267339884b83e1bfed20e6979b80f8a7abc07a05860d74c249d7684cb1c92d",
+  "source_list_hash": "c2267339884b83e1bfed20e6979b80f8a7abc07a05860d74c249d7684cb1c92d",
   "src_mjs_runtime_files": 0,
   "dist_stamp_schema": "sks.dist-build-stamp.v1",
   "files": [
@@ -456,6 +456,8 @@
     "core/commands/image-ux-review-command.js",
     "core/commands/mad-sks-command.d.ts",
     "core/commands/mad-sks-command.js",
+    "core/commands/naruto-command.d.ts",
+    "core/commands/naruto-command.js",
     "core/commands/paths-command.d.ts",
     "core/commands/paths-command.js",
     "core/commands/perf-command.d.ts",

package/dist/cli/command-registry.d.ts

@@ -62,6 +62,7 @@ export declare const COMMANDS: {
     dfix: CommandEntry;
     team: CommandEntry;
     agent: CommandEntry;
+    naruto: CommandEntry;
     'qa-loop': CommandEntry;
     research: CommandEntry;
     autoresearch: CommandEntry;
@@ -148,6 +149,7 @@ export declare const TYPED_COMMANDS: {
     dfix: CommandEntry;
     team: CommandEntry;
     agent: CommandEntry;
+    naruto: CommandEntry;
     'qa-loop': CommandEntry;
     research: CommandEntry;
     autoresearch: CommandEntry;
@@ -201,6 +203,7 @@ export declare const COMMAND_ALIASES: {
     readonly '--MAD': "mad";
     readonly '--mad-sks': "mad-sks";
     readonly '--agent': "agent";
+    readonly '--naruto': "naruto";
 };
 export type CommandName = Extract<keyof typeof COMMANDS, string>;
 export declare function commandNames(): CommandName[];

package/dist/cli/command-registry.js

@@ -115,6 +115,7 @@ export const COMMANDS = {
     dfix: entry('stable', 'Run DFix diagnose/plan/patch/verify loop', 'dist/core/commands/dfix-command.js', commandArgsCommand(() => import('../core/commands/dfix-command.js'), 'dfixCommand', 'dist/core/commands/dfix-command.js')),
     team: entry('beta', 'Create and observe Team missions', 'dist/core/commands/team-command.js', argsCommand(() => import('../core/commands/team-command.js'), 'team', 'dist/core/commands/team-command.js')),
     agent: entry('beta', 'Run native multi-session agent missions', 'dist/core/commands/agent-command.js', argsCommand(() => import('../core/commands/agent-command.js'), 'agentCommand', 'dist/core/commands/agent-command.js')),
+    naruto: entry('labs', 'Run $Naruto shadow-clone swarm (up to 100 parallel sessions)', 'dist/core/commands/naruto-command.js', argsCommand(() => import('../core/commands/naruto-command.js'), 'narutoCommand', 'dist/core/commands/naruto-command.js')),
     'qa-loop': entry('beta', 'Run QA loop missions', 'dist/core/commands/qa-loop-command.js', subcommand(() => import('../core/commands/qa-loop-command.js'), 'qaLoopCommand', 'dist/core/commands/qa-loop-command.js')),
     research: entry('labs', 'Run research missions', 'dist/core/commands/research-command.js', subcommand(() => import('../core/commands/research-command.js'), 'researchCommand', 'dist/core/commands/research-command.js')),
     autoresearch: entry('labs', 'Alias for research/autoresearch route', 'dist/core/commands/autoresearch-command.js', subcommand(() => import('../core/commands/autoresearch-command.js'), 'autoresearchCommand', 'dist/core/commands/autoresearch-command.js', 'status')),
@@ -168,7 +169,8 @@ export const COMMAND_ALIASES = {
     '--mad': 'mad',
     '--MAD': 'mad',
     '--mad-sks': 'mad-sks',
-    '--agent': 'agent'
+    '--agent': 'agent',
+    '--naruto': 'naruto'
 };
 export function commandNames() {
     return Object.keys(COMMANDS).sort();

package/dist/cli/install-helpers.d.ts

@@ -64,6 +64,7 @@ export type ConfigureCodexLbResult = {
     config_path?: string;
     env_path?: string;
     metadata_path?: string;
+    backup_path?: string | null;
     base_url?: string;
     env_key?: string;
     keychain?: Record<string, unknown>;
@@ -80,7 +81,7 @@ export type ConfigureCodexLbResult = {
     repair?: CodexLbAuthInstallResult;
 } & Partial<CodexLbStatusSnapshot>;
 export type CodexLbLaunchPromptResult = ConfigureCodexLbResult;
-export declare function postinstall({ bootstrap }: any): Promise<void>;
+export declare function postinstall({ bootstrap, args }: any): Promise<void>;
 export declare function postinstallBootstrapDecision(root: any): Promise<{
     run: boolean;
     reason: string;
@@ -283,23 +284,72 @@ export declare function maybePromptCodexLbSetupForLaunch(args?: any, opts?: any)
     auth_summary: string;
     status: string;
 }>;
+export declare function upsertCodexLbConfig(text: any | undefined, baseUrl: any, selectDefault?: boolean): string;
 export declare function ensureGlobalCodexFastModeDuringInstall(opts?: any): Promise<{
     status: string;
     reason: string;
     config_path?: never;
+    backup_path?: never;
+    parse_smoke?: never;
     error?: never;
 } | {
     status: string;
     config_path: any;
+    backup_path: string | null;
+    parse_smoke: {
+        ok: boolean;
+        unterminated_multiline_string: boolean;
+        invalid_table_header: string | null;
+    };
+    reason?: never;
+    error?: never;
+} | {
+    status: string;
+    config_path: any;
+    reason?: never;
+    backup_path?: never;
+    parse_smoke?: never;
+    error?: never;
+} | {
+    status: string;
+    config_path: any;
+    parse_smoke: {
+        ok: boolean;
+        unterminated_multiline_string: boolean;
+        invalid_table_header: string | null;
+    };
+    reason?: never;
+    backup_path?: never;
+    error?: never;
+} | {
+    status: string;
+    config_path: any;
+    backup_path: string | null;
     reason?: never;
+    parse_smoke?: never;
     error?: never;
 } | {
     status: string;
     config_path: any;
     error: any;
     reason?: never;
+    backup_path?: never;
+    parse_smoke?: never;
 }>;
 export declare function normalizeCodexFastModeUiConfig(text?: any): string;
+export declare function safeWriteCodexConfigToml(configPath: string, current: string, next: string, tag?: string): Promise<{
+    ok: boolean;
+    status: string;
+    config_path: string;
+    backup_path: string | null;
+    changed?: never;
+} | {
+    ok: boolean;
+    status: string;
+    config_path: string;
+    backup_path: string | null;
+    changed: boolean;
+}>;
 export declare function ensureSksCommandDuringInstall(opts?: any): Promise<SksPostinstallShimResult>;
 export declare function selftestSksShimRepair(): Promise<{
     ok: boolean;
@@ -346,6 +396,7 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         bin?: never;
         version?: never;
         error?: never;
+        command?: never;
         hint?: never;
     } | {
         status: string;
@@ -353,6 +404,7 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         version: string | null;
         reason?: never;
         error?: never;
+        command?: never;
         hint?: never;
     } | {
         status: string;
@@ -360,6 +412,15 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         reason?: never;
         bin?: never;
         version?: never;
+        command?: never;
+        hint?: never;
+    } | {
+        status: string;
+        command: string;
+        error: string;
+        reason?: never;
+        bin?: never;
+        version?: never;
         hint?: never;
     } | {
         status: string;
@@ -368,6 +429,7 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         hint: string | null;
         reason?: never;
         error?: never;
+        command?: never;
     };
     zellij: {
         ok: boolean;
@@ -401,15 +463,87 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
             reason: string;
         };
         install_hint: string | null;
-        error: string | null;
+        error: any;
+    };
+}>;
+export declare function ensureMadLaunchDependencies(args?: any): Promise<{
+    ready: boolean;
+    actions: {
+        target: string;
+        status: string;
+        command: any;
+        error: any;
+        repair: {
+            target: string;
+            status: string;
+            bin: "zellij";
+            version: string | null;
+            command?: never;
+            error?: never;
+        } | {
+            target: string;
+            status: string;
+            command: string;
+            error: string | null;
+            bin?: never;
+            version?: never;
+        } | {
+            target: string;
+            status: string;
+            command: string;
+            bin: "zellij";
+            version: string | null;
+            error?: never;
+        } | {
+            target: string;
+            status: string;
+            reason: string;
+        };
+    }[];
+    status: {
+        zellij: {
+            ok: boolean;
+            status: "blocked" | "ok" | "missing" | "too_old";
+            version: string | null;
+            min_version: string;
+            repair: {
+                target: string;
+                status: string;
+                bin: "zellij";
+                version: string | null;
+                command?: never;
+                error?: never;
+            } | {
+                target: string;
+                status: string;
+                command: string;
+                error: string | null;
+                bin?: never;
+                version?: never;
+            } | {
+                target: string;
+                status: string;
+                command: string;
+                bin: "zellij";
+                version: string | null;
+                error?: never;
+            } | {
+                target: string;
+                status: string;
+                reason: string;
+            };
+            install_hint: string | null;
+        };
     };
 }>;
-export declare function ensureCodexCliTool({ skip }?: any): Promise<{
+export declare function formatMadLaunchDependencyAction(action?: any): string;
+export declare function ensureCodexCliTool({ skip, args }?: any): Promise<{
     status: string;
     reason: string;
     bin?: never;
     version?: never;
     error?: never;
+    command?: never;
     hint?: never;
 } | {
     status: string;
@@ -417,6 +551,7 @@ export declare function ensureCodexCliTool({ skip }?: any): Promise<{
     version: string | null;
     reason?: never;
     error?: never;
+    command?: never;
     hint?: never;
 } | {
     status: string;
@@ -424,6 +559,15 @@ export declare function ensureCodexCliTool({ skip }?: any): Promise<{
     reason?: never;
     bin?: never;
     version?: never;
+    command?: never;
+    hint?: never;
+} | {
+    status: string;
+    command: string;
+    error: string;
+    reason?: never;
+    bin?: never;
+    version?: never;
     hint?: never;
 } | {
     status: string;
@@ -432,6 +576,7 @@ export declare function ensureCodexCliTool({ skip }?: any): Promise<{
     hint: string | null;
     reason?: never;
     error?: never;
+    command?: never;
 }>;
 export declare function ensureZellijCliTool(args?: any, opts?: any): Promise<{
     target: string;