sneakoscope 2.0.13 → 2.0.15

package/dist/scripts/appshots-triwiki-voxel-check.js

@@ -1,46 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
-const mod = await importDist('core/source-intelligence/appshots-evidence.js');
-const fixture = writeAppshotFixture('voxel');
-const evidence = mod.buildAppshotsEvidence({
-    root,
-    prompt: 'visual Appshots voxel',
-    sourcePaths: [fixture.rel],
-    sourceMetadata: [fixture.metadata],
-    operatorActionRecorded: true
-});
-const report = { schema: 'sks.appshots-triwiki-voxel-check.v1', ok: evidence.triwiki_voxel_ready, evidence };
-const out = path.join(root, '.sneakoscope', 'reports', 'appshots-triwiki-voxel.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-assertGate(evidence.triwiki_voxel_ready === true, 'Appshots visual source must be TriWiki/Voxel ready', report);
-assertGate(evidence.accepted_source_paths.length === 1, 'Appshots TriWiki/Voxel evidence must use verified accepted sources', report);
-emitGate('appshots:triwiki-voxel', { source_count: evidence.source_count });
-function writeAppshotFixture(name) {
-    const dir = path.join(root, '.sneakoscope', 'reports', 'appshots-fixtures');
-    fs.mkdirSync(dir, { recursive: true });
-    const file = path.join(dir, `${name}.redacted-appshot.json`);
-    fs.writeFileSync(file, `${JSON.stringify({ fixture: true, redacted: true, text: '[redacted appshot fixture]' })}\n`);
-    const rel = path.relative(root, file).split(path.sep).join('/');
-    return {
-        rel,
-        metadata: {
-            path: rel,
-            source_type: 'codex_appshot',
-            origin: 'fixture',
-            operator_attached: true,
-            frontmost_window: true,
-            redacted: true,
-            local_only: true,
-            fixture: true,
-            thread_id: 'thread-fixture-voxel',
-            attachment_id: 'attachment-fixture-voxel',
-            source_app: 'Codex',
-            source_window: 'Fixture Appshot'
-        }
-    };
-}
-//# sourceMappingURL=appshots-triwiki-voxel-check.js.map

package/dist/scripts/architecture-guard-check.js

@@ -1,55 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-const issues = [];
-function read(rel) {
-    return fs.readFileSync(path.join(root, rel), 'utf8');
-}
-function readJson(rel) {
-    return JSON.parse(read(rel));
-}
-function assertIncludes(rel, needle, message = `${rel} missing ${needle}`) {
-    if (!read(rel).includes(needle))
-        issues.push(message);
-}
-function assertScript(name, expected) {
-    const actual = String(pkg.scripts?.[name] || '');
-    if (!actual.includes(expected))
-        issues.push(`package script ${name} must include ${expected}`);
-}
-const pkg = readJson('package.json');
-assertScript('architecture:guard', 'node ./dist/scripts/architecture-guard-check.js');
-assertIncludes('src/core/safety/ssot-guard.ts', 'solid_principles');
-assertIncludes('src/core/safety/ssot-guard.ts', 'single_responsibility');
-assertIncludes('src/core/safety/ssot-guard.ts', 'open_closed');
-assertIncludes('src/core/safety/ssot-guard.ts', 'liskov_substitution');
-assertIncludes('src/core/safety/ssot-guard.ts', 'interface_segregation');
-assertIncludes('src/core/safety/ssot-guard.ts', 'dependency_inversion');
-assertIncludes('src/core/pipeline-internals/runtime-core.ts', "'ssot_guard'");
-assertIncludes('src/core/pipeline-internals/runtime-core.ts', 'buildSsotGuard');
-assertIncludes('src/core/pipeline-internals/runtime-core.ts', 'ssotGuardPolicyText');
-assertIncludes('src/core/pipeline-internals/runtime-gates.ts', 'validateSsotGuardArtifact');
-assertIncludes('src/core/pipeline-internals/runtime-gates.ts', "'ssot_guard'");
-assertIncludes('src/core/commands/team-command.ts', 'SSOT_GUARD_ARTIFACT');
-assertIncludes('src/scripts/release-parallel-check.ts', "task('architecture:guard'");
-assertIncludes('src/core/release/gate-manifest.ts', "'architecture:guard'");
-assertIncludes('src/core/release/gate-manifest.ts', "'architecture:'");
-assertIncludes('docs/architecture-ts-rust-boundary.md', '`architecture:guard`');
-assertIncludes('docs/architecture-ts-rust-boundary.md', 'SOLID');
-const report = {
-    schema: 'sks.architecture-guard-check.v1',
-    ok: issues.length === 0,
-    gate: 'architecture:guard',
-    guarantees: ['ssot', 'solid'],
-    issues
-};
-const reportDir = path.join(root, '.sneakoscope', 'reports');
-fs.mkdirSync(reportDir, { recursive: true });
-fs.writeFileSync(path.join(reportDir, 'architecture-guard.json'), `${JSON.stringify(report, null, 2)}\n`);
-console.log(JSON.stringify(report, null, 2));
-if (!report.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=architecture-guard-check.js.map

package/dist/scripts/changelog-check.js

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-const changelogPath = path.join(root, 'CHANGELOG.md');
-const packagePath = path.join(root, 'package.json');
-function fail(message) {
-    console.error(`Changelog check failed: ${message}`);
-    process.exit(2);
-}
-function escapeRegExp(value) {
-    return String(value).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-function sectionFor(text, headingRe) {
-    const match = headingRe.exec(text);
-    if (!match)
-        return null;
-    const start = match.index + match[0].length;
-    const rest = text.slice(start);
-    const next = rest.search(/^##\s+/m);
-    return next >= 0 ? rest.slice(0, next) : rest;
-}
-function hasReleaseEntry(section) {
-    return /^###\s+(Added|Changed|Fixed|Docs|Internal|Security|Removed)\s*$/m.test(section)
-        && /^\s*-\s+\S/m.test(section);
-}
-const pkg = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
-const version = pkg.version;
-if (!version)
-    fail('package.json has no version.');
-if (!fs.existsSync(changelogPath))
-    fail('CHANGELOG.md is missing.');
-const text = fs.readFileSync(changelogPath, 'utf8');
-if (!/^#\s+Changelog\s*$/m.test(text))
-    fail('CHANGELOG.md must start with a Changelog title.');
-if (!/^##\s+\[Unreleased\]\s*$/m.test(text))
-    fail('CHANGELOG.md must include an [Unreleased] section.');
-const versionHeading = new RegExp(`^##\\s+\\[${escapeRegExp(version)}\\]\\s+-\\s+\\d{4}-\\d{2}-\\d{2}\\s*$`, 'm');
-const versionSection = sectionFor(text, versionHeading);
-if (!versionSection)
-    fail(`CHANGELOG.md is missing a [${version}] - YYYY-MM-DD section.`);
-if (!hasReleaseEntry(versionSection))
-    fail(`CHANGELOG.md [${version}] section must include at least one categorized bullet.`);
-console.log(`Changelog check passed: ${version}`);
-//# sourceMappingURL=changelog-check.js.map

package/dist/scripts/codex-0-133-official-compat-report.js

@@ -1,53 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { codex0133Matrix, CODEX_0_133_RELEASE_EVIDENCE } from '../core/codex-compat/codex-0-133.js';
-const versionRun = spawnSync('codex', ['--version'], { encoding: 'utf8' });
-const resumeHelp = spawnSync('codex', ['exec', 'resume', '--help'], { encoding: 'utf8', maxBuffer: 256 * 1024 });
-const execHelp = spawnSync('codex', ['exec', '--help'], { encoding: 'utf8', maxBuffer: 256 * 1024 });
-const matrix = codex0133Matrix({
-    version: `${versionRun.stdout || ''}${versionRun.stderr || ''}`,
-    available: versionRun.status === 0,
-    execResumeHelp: resumeHelp.stdout || resumeHelp.stderr || '',
-    execHelp: execHelp.stdout || execHelp.stderr || ''
-});
-const topics = [
-    'goals_default_enabled',
-    'remote_control_foreground_app_server',
-    'permission_profiles_requirements',
-    'plugin_discovery_marketplaces',
-    'extension_lifecycle_events',
-    'exec_resume_output_schema'
-];
-const rows = topics.map((topic) => {
-    const cap = matrix.capabilities.find((item) => item.id === topic);
-    return {
-        topic,
-        result: cap?.status || 'missing',
-        official_source_checked: true,
-        release_readiness_row_added: true,
-        notes: cap?.notes || ['capability row missing']
-    };
-});
-const blockers = rows.filter((row) => row.result === 'missing').map((row) => `missing:${row.topic}`);
-const report = {
-    schema: 'sks.codex-0-133-official-compat.v1',
-    ok: blockers.length === 0,
-    status: versionRun.status === 0 ? 'checked' : 'integration_optional',
-    release_source_url: CODEX_0_133_RELEASE_EVIDENCE.tag_url,
-    release_tag: CODEX_0_133_RELEASE_EVIDENCE.tag,
-    source_delta: rows,
-    structured_output_inheritance: rows.find((row) => row.topic === 'exec_resume_output_schema')?.result || 'missing',
-    local_codex_version: `${versionRun.stdout || versionRun.stderr || ''}`.trim() || null,
-    matrix,
-    blockers
-};
-const out = path.join(process.cwd(), '.sneakoscope', 'reports', 'codex-0-133-official-compat.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-console.log(JSON.stringify(report, null, 2));
-if (!report.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=codex-0-133-official-compat-report.js.map

package/dist/scripts/codex-0-134-official-compat-report.js

@@ -1,110 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import https from 'node:https';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
-const mod = await importDist('core/codex/codex-0-134-compat.js');
-const versionRun = spawnSync('codex', ['--version'], { encoding: 'utf8' });
-const execHelp = spawnSync('codex', ['exec', '--help'], { encoding: 'utf8', maxBuffer: 256 * 1024 });
-const mcpHelp = spawnSync('codex', ['mcp', '--help'], { encoding: 'utf8', maxBuffer: 256 * 1024 });
-const searchHelp = spawnSync('codex', ['search', '--help'], { encoding: 'utf8', maxBuffer: 256 * 1024 });
-const release = await fetchJson('https://api.github.com/repos/openai/codex/releases/tags/rust-v0.134.0');
-const releaseBody = String(release.json?.body || '');
-const matrix = mod.codex0134Matrix({
-    version: `${versionRun.stdout || ''}${versionRun.stderr || ''}`,
-    available: versionRun.status === 0,
-    execHelp: `${execHelp.stdout || ''}${execHelp.stderr || ''}`,
-    mcpHelp: `${mcpHelp.stdout || ''}${mcpHelp.stderr || ''}`,
-    historyHelp: `${searchHelp.stdout || ''}${searchHelp.stderr || ''}`,
-    historyCommandAvailable: searchHelp.status === 0 && /^\s*Usage:\s+codex\s+search\b/m.test(`${searchHelp.stdout || ''}${searchHelp.stderr || ''}`),
-    schemaPolicyText: '$ref $defs readOnlyHint'
-});
-const topics = {
-    local_conversation_history_search: ['search across local conversation history', 'case-insensitive content matches'],
-    profile_primary_selector: ['--profile', 'primary profile selector'],
-    mcp_per_server_environment: ['per-server environment targeting'],
-    mcp_streamable_http_oauth: ['OAuth options', 'streamable HTTP servers'],
-    connector_schema_refs_defs_compaction: ['$ref', '$defs', 'compacting oversized schemas'],
-    mcp_readonly_parallel_hint: ['readOnlyHint'],
-    hook_subagent_context: ['subagent identity in hook inputs'],
-    managed_network_proxy_env: ['managed network proxy environment']
-};
-const rows = Object.entries(topics).map(([topic, needles]) => {
-    const capability = matrix.capabilities.find((item) => item.id === topic);
-    const missingOfficialNeedles = release.ok === true ? needles.filter((needle) => !releaseBody.includes(needle)) : [];
-    return {
-        topic,
-        result: capability?.status || 'missing',
-        official_source_checked: release.ok === true,
-        official_release_needles: needles,
-        official_release_missing: missingOfficialNeedles,
-        release_readiness_row_added: true,
-        notes: capability?.notes || ['capability row missing']
-    };
-});
-const blockers = [
-    ...rows.filter((row) => row.result === 'missing').map((row) => `missing:${row.topic}`),
-    ...rows.filter((row) => row.official_release_missing.length > 0).map((row) => `official_release_topic_missing:${row.topic}:${row.official_release_missing.join('|')}`)
-];
-const warnings = [
-    ...(release.ok ? [] : [`official_release_fetch_unavailable:${release.error || release.statusCode || 'unknown'}`])
-];
-const report = {
-    schema: 'sks.codex-0-134-official-compat.v1',
-    ok: blockers.length === 0 && matrix.ok === true,
-    status: versionRun.status === 0 ? 'checked' : 'integration_optional',
-    release_source_url: mod.CODEX_0_134_RELEASE_EVIDENCE.tag_url,
-    release_tag: mod.CODEX_0_134_RELEASE_EVIDENCE.tag,
-    release_date: release.json?.published_at || mod.CODEX_0_134_RELEASE_EVIDENCE.release_date,
-    official_source: {
-        api_url: 'https://api.github.com/repos/openai/codex/releases/tags/rust-v0.134.0',
-        ok: release.ok,
-        status_code: release.statusCode || null,
-        tag_name: release.json?.tag_name || null,
-        html_url: release.json?.html_url || mod.CODEX_0_134_RELEASE_EVIDENCE.tag_url
-    },
-    source_delta: rows,
-    local_codex_version: `${versionRun.stdout || versionRun.stderr || ''}`.trim() || null,
-    matrix,
-    blockers: [...blockers, ...(matrix.blockers || [])],
-    warnings
-};
-const out = path.join(root, '.sneakoscope', 'reports', 'codex-0-134-official-compat.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-console.log(JSON.stringify(report, null, 2));
-assertGate(report.ok, 'Codex 0.134 official compatibility report has blockers', report);
-emitGate('codex:0.134-official-compat', { topics: rows.length, version: report.local_codex_version });
-function fetchJson(url) {
-    return new Promise((resolve) => {
-        const req = https.get(url, {
-            headers: {
-                'User-Agent': 'sneakoscope-release-check',
-                Accept: 'application/vnd.github+json'
-            },
-            timeout: 20000
-        }, (res) => {
-            let body = '';
-            res.setEncoding('utf8');
-            res.on('data', (chunk) => { body += chunk; });
-            res.on('end', () => {
-                try {
-                    const json = JSON.parse(body);
-                    resolve({ ok: res.statusCode >= 200 && res.statusCode < 300, statusCode: res.statusCode, json });
-                }
-                catch (err) {
-                    resolve({ ok: false, statusCode: res.statusCode, error: err.message, body: body.slice(0, 1000) });
-                }
-            });
-        });
-        req.on('timeout', () => {
-            req.destroy(new Error('timeout'));
-        });
-        req.on('error', (err) => {
-            resolve({ ok: false, error: err.message });
-        });
-    });
-}
-//# sourceMappingURL=codex-0-134-official-compat-report.js.map

package/dist/scripts/codex-0-134-runner-truth-check.js

@@ -1,66 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
-const runner = await importDist('core/agents/agent-runner-codex-exec.js');
-const compat = await importDist('core/codex/codex-0-134-compat.js');
-const history = await importDist('core/source-intelligence/codex-history-search.js');
-const agentRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-codex-0134-runner-'));
-const agent = { id: 'agent-0134', session_id: 'session-0134', persona_id: 'verifier', session_artifact_dir: 'sessions/agent-0134' };
-const command = runner.buildCodexExecAgentArgs(agent, 'runner truth fixture', { profile: 'sks-fast-high', resultFile: path.join(agentRoot, 'result.json') });
-const result = await runner.runCodexExecAgent(agent, { id: 'slice-0134', description: 'runner truth fixture' }, {
-    agentRoot,
-    cwd: root,
-    dryRun: true,
-    profile: 'sks-fast-high',
-    resultFile: path.join(agentRoot, 'result.json'),
-    env: {
-        HTTPS_PROXY: 'http://user:secret@example.test:8080',
-        NO_PROXY: 'localhost,127.0.0.1'
-    }
-});
-const processReportPath = path.join(agentRoot, 'sessions/agent-0134/agent-process-report.json');
-const processReport = JSON.parse(fs.readFileSync(processReportPath, 'utf8'));
-const codexHome = path.join(agentRoot, 'codex-home');
-fs.mkdirSync(path.join(codexHome, 'sessions'), { recursive: true });
-fs.writeFileSync(path.join(codexHome, 'sessions', 'history.jsonl'), '{"message":"Codex 0.134 runner truth history"}\n');
-const historyReport = await history.searchCodexHistory({ codexHome, query: 'runner truth', maxFiles: 5, maxResults: 3 });
-const matrix = compat.codex0134Matrix({
-    version: 'codex-cli 0.134.0',
-    available: true,
-    execHelp: 'Usage: codex exec --profile <PROFILE>',
-    mcpHelp: 'Usage: codex mcp --env KEY --oauth streamable',
-    historyHelp: 'Usage: codex search history',
-    historyCommandAvailable: true,
-    schemaPolicyText: '$ref $defs readOnlyHint'
-});
-const require0134 = process.env.SKS_REQUIRE_CODEX_0_134 === '1';
-const blockers = [
-    ...(command.args.includes('--profile') ? [] : ['codex_profile_arg_missing']),
-    ...(command.args.includes('--ignore-user-config') ? ['codex_profile_combined_with_ignore_user_config'] : []),
-    ...(processReport.profile === 'sks-fast-high' ? [] : ['codex_process_report_profile_missing']),
-    ...(Array.isArray(processReport.managed_proxy_env_keys) && processReport.managed_proxy_env_keys.includes('HTTPS_PROXY') ? [] : ['codex_managed_proxy_keys_missing']),
-    ...(JSON.stringify(processReport).includes('secret') ? ['codex_process_report_leaked_proxy_secret'] : []),
-    ...(historyReport.ok === true && historyReport.results.length === 1 ? [] : ['codex_history_search_evidence_missing']),
-    ...(matrix.ok === true ? [] : ['codex_0_134_matrix_not_ok']),
-    ...(require0134 && matrix.ok !== true ? ['codex_0_134_required_mode_blocked'] : [])
-];
-const report = {
-    schema: 'sks.codex-0.134-runner-truth-check.v1',
-    ok: blockers.length === 0,
-    required_mode: require0134,
-    command_args: command.args,
-    process_report: processReport,
-    history_report: historyReport,
-    matrix,
-    runner_result_status: result.status,
-    blockers
-};
-const out = path.join(root, '.sneakoscope', 'reports', 'codex-0-134-runner-truth.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-assertGate(report.ok === true, 'Codex 0.134 runner truth has blockers', report);
-emitGate('codex:0.134-runner-truth', { profile: processReport.profile, history_results: historyReport.results.length });
-//# sourceMappingURL=codex-0-134-runner-truth-check.js.map

package/dist/scripts/codex-0-135-compat-check.js

@@ -1,57 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { ensureDistFresh, root } from './lib/ensure-dist-fresh.js';
-const freshness = ensureDistFresh({ rebuild: true });
-if (!freshness.ok)
-    fail('dist_not_fresh', { freshness });
-const mod = await import(pathToFileURL(path.join(root, 'dist', 'core', 'codex', 'codex-0-135-compat.js')).href);
-const evidence = await mod.collectCodex0135LocalEvidence();
-const matrix = mod.codex0135Matrix({
-    version: evidence.versionText,
-    available: evidence.available,
-    doctorText: evidence.doctorText,
-    permissionsText: evidence.permissionsText,
-    execHelp: evidence.execHelp,
-    resumeHelp: evidence.resumeHelp,
-    requireReal: process.argv.includes('--require-real')
-});
-const report = { ...matrix, local_evidence: evidence };
-await fs.mkdir(path.join(root, '.sneakoscope', 'reports'), { recursive: true });
-await fs.writeFile(path.join(root, '.sneakoscope', 'reports', 'codex-0.135-compat.json'), `${JSON.stringify(report, null, 2)}\n`);
-await fs.writeFile(path.join(root, '.sneakoscope', 'reports', 'codex-plugin-inventory.json'), `${JSON.stringify(await collectPluginInventory(), null, 2)}\n`);
-emit(report);
-function emit(report) { console.log(JSON.stringify(report, null, 2)); if (!report.ok)
-    process.exitCode = 1; }
-function fail(blocker, detail) { emit({ schema: 'sks.codex-0.135-compat-check.v1', ok: false, blockers: [blocker], detail }); process.exit(1); }
-async function collectPluginInventory() {
-    const codexHome = process.env.CODEX_HOME || path.join(process.env.HOME || '', '.codex');
-    const candidates = [
-        path.join(root, '.codex', 'plugins'),
-        path.join(codexHome, 'plugins'),
-        path.join(codexHome, 'plugins', 'cache')
-    ];
-    const entries = [];
-    for (const dir of candidates) {
-        const stat = await fs.stat(dir).catch(() => null);
-        if (!stat?.isDirectory())
-            continue;
-        for (const name of await fs.readdir(dir).catch(() => [])) {
-            if (!name || name.startsWith('.'))
-                continue;
-            entries.push({ source: dir, name });
-        }
-    }
-    return {
-        schema: 'sks.codex-plugin-inventory.v1',
-        generated_at: new Date().toISOString(),
-        ok: true,
-        state_owner: 'codex_app_server_or_codex_home',
-        project_config_policy: 'project .codex/config.toml must not store TUI/plugin runtime state',
-        sources_checked: candidates,
-        plugins: entries.sort((a, b) => `${a.source}/${a.name}`.localeCompare(`${b.source}/${b.name}`))
-    };
-}
-//# sourceMappingURL=codex-0-135-compat-check.js.map

package/dist/scripts/codex-0-136-compat-check.js

@@ -1,30 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { ensureDistFresh, root } from './lib/ensure-dist-fresh.js';
-const freshness = ensureDistFresh({ rebuild: true });
-if (!freshness.ok)
-    fail('dist_not_fresh', { freshness });
-const mod = await import(pathToFileURL(path.join(root, 'dist', 'core', 'codex', 'codex-0-136-compat.js')).href);
-const evidence = await mod.collectCodex0136LocalEvidence();
-const matrix = mod.codex0136Matrix({
-    version: evidence.versionText,
-    available: evidence.available,
-    doctorText: evidence.doctorText,
-    archiveHelp: evidence.archiveHelp,
-    unarchiveHelp: evidence.unarchiveHelp,
-    appServerHelp: evidence.appServerHelp,
-    sandboxSetupHelp: evidence.sandboxSetupHelp,
-    remoteControlHelp: evidence.remoteControlHelp,
-    requireReal: process.argv.includes('--require-real')
-});
-const report = { ...matrix, local_evidence: evidence };
-await fs.mkdir(path.join(root, '.sneakoscope', 'reports'), { recursive: true });
-await fs.writeFile(path.join(root, '.sneakoscope', 'reports', 'codex-0.136-compat.json'), `${JSON.stringify(report, null, 2)}\n`);
-emit(report);
-function emit(report) { console.log(JSON.stringify(report, null, 2)); if (!report.ok)
-    process.exitCode = 1; }
-function fail(blocker, detail) { emit({ schema: 'sks.codex-0.136-compat-check.v1', ok: false, blockers: [blocker], detail }); process.exit(1); }
-//# sourceMappingURL=codex-0-136-compat-check.js.map

package/dist/scripts/codex-0-137-compat-check.js

@@ -1,27 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { ensureDistFresh, root } from './lib/ensure-dist-fresh.js';
-const freshness = ensureDistFresh({ rebuild: true });
-if (!freshness.ok)
-    fail('dist_not_fresh', { freshness });
-const mod = await import(pathToFileURL(path.join(root, 'dist', 'core', 'codex', 'codex-0-137-compat.js')).href);
-const evidence = await mod.collectCodex0137LocalEvidence();
-const matrix = mod.codex0137Matrix({
-    version: evidence.versionText,
-    available: evidence.available,
-    pluginListText: evidence.pluginListText,
-    debugModelsText: evidence.debugModelsText,
-    doctorText: evidence.doctorText,
-    requireReal: process.argv.includes('--require-real') || process.env.SKS_REQUIRE_CODEX_0137 === '1'
-});
-const report = { ...matrix, local_evidence: evidence };
-await fs.mkdir(path.join(root, '.sneakoscope', 'reports'), { recursive: true });
-await fs.writeFile(path.join(root, '.sneakoscope', 'reports', 'codex-0.137-compat.json'), `${JSON.stringify(report, null, 2)}\n`);
-emit(report);
-function emit(report) { console.log(JSON.stringify(report, null, 2)); if (!report.ok)
-    process.exitCode = 1; }
-function fail(blocker, detail) { emit({ schema: 'sks.codex-0.137-compat-check.v1', ok: false, blockers: [blocker], detail }); process.exit(1); }
-//# sourceMappingURL=codex-0-137-compat-check.js.map

package/dist/scripts/codex-app-fast-ui-preservation-check.js

@@ -1,32 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { evaluateCodexAppFastUiPreservation } from '../core/codex-app/codex-app-fast-ui-preservation.js';
-import { snapshotCodexAppUiState } from '../core/codex-app/codex-app-ui-state-snapshot.js';
-const tmp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-fast-ui-preservation-'));
-const codexHome = path.join(tmp, 'home', '.codex');
-await fs.mkdir(path.join(tmp, '.codex'), { recursive: true });
-await fs.mkdir(codexHome, { recursive: true });
-await fs.writeFile(path.join(tmp, '.codex', 'config.toml'), 'sandbox_mode = "workspace-write"\n');
-await fs.writeFile(path.join(codexHome, 'config.toml'), '[features]\nfast_mode = true\n');
-await fs.writeFile(path.join(codexHome, 'auth.json'), '{"access_token":"secret-should-not-leak","account_id":"acct_fixture"}\n');
-const before = await snapshotCodexAppUiState(tmp, { codexHome });
-const after = await snapshotCodexAppUiState(tmp, { codexHome });
-const clean = await evaluateCodexAppFastUiPreservation(tmp, { before, after, codexHome });
-const badRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-fast-ui-preservation-bad-'));
-await fs.mkdir(path.join(badRoot, '.codex'), { recursive: true });
-await fs.mkdir(path.join(badRoot, 'home', '.codex'), { recursive: true });
-await fs.writeFile(path.join(badRoot, '.codex', 'config.toml'), 'model_provider = "codex-lb"\n');
-await fs.writeFile(path.join(badRoot, 'home', '.codex', 'config.toml'), '');
-const bad = await evaluateCodexAppFastUiPreservation(badRoot, { codexHome: path.join(badRoot, 'home', '.codex') });
-const serialized = JSON.stringify({ clean, bad });
-const secretSafe = !serialized.includes('secret-should-not-leak');
-const ok = clean.ok && !bad.ok && bad.project_local_forbidden_keys.includes('model_provider') && secretSafe;
-emit({ schema: 'sks.codex-app-fast-ui-preservation-check.v1', ok, clean, bad, secret_safe: secretSafe, blockers: ok ? [] : ['codex_app_fast_ui_preservation_check_failed'] });
-function emit(report) {
-    console.log(JSON.stringify(report, null, 2));
-    if (!report.ok)
-        process.exitCode = 1;
-}
-//# sourceMappingURL=codex-app-fast-ui-preservation-check.js.map

package/dist/scripts/codex-app-provider-badge-check.js

@@ -1,37 +0,0 @@
-#!/usr/bin/env node
-import { buildCodexAppProviderBadgeStatus } from '../core/codex-app/codex-app-provider-badge.js';
-const providerContext = {
-    schema: 'sks.provider-context.v1',
-    generated_at: new Date().toISOString(),
-    provider: 'codex-lb',
-    auth_mode: 'codex_lb_key',
-    route: '$Agent',
-    service_tier: 'fast',
-    source: 'codex_lb',
-    confidence: 'high',
-    conflict: false,
-    warnings: [],
-    signals: {
-        openai_api_key_present: false,
-        codex_lb_key_present: true,
-        codex_lb_explicit: true,
-        codex_app_auth_present: false,
-        model_provider: 'codex-lb'
-    }
-};
-const unsupported = await buildCodexAppProviderBadgeStatus(process.cwd(), { providerContext, officialCapability: false });
-const supported = await buildCodexAppProviderBadgeStatus(process.cwd(), { providerContext, officialCapability: true });
-const ok = unsupported.ok
-    && supported.ok
-    && unsupported.native_app_badge_supported === false
-    && unsupported.private_app_mutation === false
-    && unsupported.fallback_surfaces.includes('doctor --json')
-    && supported.native_app_badge_status === 'available'
-    && unsupported.badge_text === 'Provider: codex-lb · Fast';
-emit({ schema: 'sks.codex-app-provider-badge-check.v1', ok, unsupported, supported, blockers: ok ? [] : ['codex_app_provider_badge_check_failed'] });
-function emit(report) {
-    console.log(JSON.stringify(report, null, 2));
-    if (!report.ok)
-        process.exitCode = 1;
-}
-//# sourceMappingURL=codex-app-provider-badge-check.js.map

package/dist/scripts/codex-app-ui-clobber-guard-check.js

@@ -1,22 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { codexAppUiMutationAllowed, evaluateCodexAppUiClobberGuard } from '../core/codex-app/codex-app-ui-clobber-guard.js';
-const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-ui-clobber-guard-'));
-await fs.mkdir(path.join(root, '.codex'), { recursive: true });
-await fs.writeFile(path.join(root, '.codex', 'config.toml'), 'sandbox_mode = "workspace-write"\n');
-await fs.writeFile(path.join(root, 'package.json'), '{"scripts":{"postinstall":"node ./dist/bin/sks.js postinstall"}}\n');
-const clean = await evaluateCodexAppUiClobberGuard(root);
-await fs.writeFile(path.join(root, '.codex', 'config.toml'), 'model_provider = "codex-lb"\n');
-const badProject = await evaluateCodexAppUiClobberGuard(root);
-const defaultDenied = !codexAppUiMutationAllowed({ kind: 'codex_app_ui_state', scope: 'default' });
-const repairAllowed = codexAppUiMutationAllowed({ kind: 'codex_app_ui_state', scope: 'codex-app-ui-repair', backupPath: path.join(root, 'backup.bak') });
-const ok = clean.ok && !badProject.ok && defaultDenied && repairAllowed;
-emit({ schema: 'sks.codex-app-ui-clobber-guard-check.v1', ok, clean, bad_project: badProject, default_denied: defaultDenied, repair_allowed: repairAllowed, blockers: ok ? [] : ['codex_app_ui_clobber_guard_check_failed'] });
-function emit(report) {
-    console.log(JSON.stringify(report, null, 2));
-    if (!report.ok)
-        process.exitCode = 1;
-}
-//# sourceMappingURL=codex-app-ui-clobber-guard-check.js.map