sneakoscope 3.1.5 → 3.1.7

package/dist/core/codex-native/codex-native-harness-compat.js

@@ -0,0 +1,54 @@
+import { buildCodexNativeFeatureMatrix } from './codex-native-feature-broker.js';
+export async function buildCodexAppHarnessMatrixFromNative(input) {
+    const matrix = await buildCodexNativeFeatureMatrix(input);
+    return codexAppHarnessMatrixFromNative(matrix);
+}
+export function codexAppHarnessMatrixFromNative(matrix) {
+    const hookApproval = probeRecord(matrix.probes.hook_approval);
+    const agentType = probeRecord(matrix.probes.agent_type);
+    const hookState = typeof hookApproval.approval_state === 'string' ? hookApproval.approval_state : 'unknown';
+    return {
+        schema: 'sks.codex-app-harness-matrix.v1',
+        generated_at: matrix.generated_at,
+        ok: matrix.ok,
+        codex_cli: {
+            available: matrix.codex_cli.available,
+            version: matrix.codex_cli.version
+        },
+        app_features: {
+            plugin_json: matrix.features.plugin_json.ok,
+            marketplace_add: matrix.features.plugin_marketplace.ok,
+            marketplace_upgrade: matrix.features.plugin_marketplace.ok,
+            startup_review_detectable: hookState !== 'unknown',
+            hook_approval_state_detectable: hookState !== 'unknown',
+            hook_approval_state: hookState === 'approved'
+                || hookState === 'pending_review'
+                || hookState === 'modified_requires_reapproval'
+                || hookState === 'not_installed'
+                ? hookState
+                : 'unknown',
+            skill_picker_ready: matrix.features.skill_picker.ok,
+            agent_type_supported: matrix.features.agent_type.ok,
+            mcp_inventory_ready: matrix.features.mcp_inventory.ok,
+            app_handoff_ready: matrix.features.app_handoff.ok,
+            image_path_exposure_ready: matrix.features.image_path_exposure.ok
+        },
+        sks_integrations: {
+            dollar_skills_synced: matrix.features.skill_sync.ok,
+            agent_roles_synced: matrix.features.agent_roles.ok,
+            hooks_synced: hookState === 'approved',
+            init_deep_available: matrix.features.project_memory.ok,
+            loop_mesh_app_profile_available: true
+        },
+        probes: {
+            hook_approval: hookApproval,
+            agent_type: agentType
+        },
+        blockers: matrix.blockers,
+        warnings: matrix.warnings
+    };
+}
+function probeRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+//# sourceMappingURL=codex-native-harness-compat.js.map

package/dist/core/{codex-app/lazycodex-interop-policy.js → codex-native/codex-native-interop-policy.js}

@@ -1,38 +1,36 @@
-import fs from 'node:fs/promises';
 import path from 'node:path';
 import os from 'node:os';
+import fs from 'node:fs/promises';
 import { nowIso, writeJsonAtomic } from '../fsx.js';
 import { buildCodexPluginInventory } from '../codex-plugins/codex-plugin-json.js';
-export async function buildLazyCodexInteropPolicy(input) {
+const RESERVED_EXTERNAL_ROUTE_SKILLS = ['ulw-loop', 'ulw-plan', 'start-work'];
+export async function buildCodexNativeInteropPolicy(input) {
     const root = path.resolve(input.root);
     const inventory = normalizeInventory(input.inventory || await buildCodexPluginInventory().catch((err) => ({ plugins: [], blockers: [messageOf(err)] })));
     const codexHome = input.codexHome || process.env.CODEX_HOME || path.join(os.homedir(), '.codex');
     const skillNames = await discoverSkillNames([path.join(root, '.agents', 'skills'), path.join(codexHome, 'skills')]);
-    const pluginIds = (inventory.plugins || []).map((plugin) => `${plugin.id || ''} ${plugin.name || ''}`.toLowerCase());
-    const lazycodexInstalled = pluginIds.some((id) => id.includes('omo') || id.includes('lazycodex'))
-        || ['ulw-loop', 'ulw-plan', 'start-work'].some((name) => skillNames.includes(name));
-    const collisions = ['ulw-loop', 'ulw-plan', 'start-work'].filter((name) => skillNames.includes(name));
+    const pluginIds = (inventory.plugins || []).map((plugin) => `${plugin.id || ''} ${plugin.name || ''}`.toLowerCase()).filter(Boolean);
+    const preservedSkillNames = RESERVED_EXTERNAL_ROUTE_SKILLS.filter((name) => skillNames.includes(name));
     const report = {
-        schema: 'sks.lazycodex-interop-policy.v1',
+        schema: 'sks.codex-native-interop-policy.v1',
         generated_at: nowIso(),
         ok: true,
         mode: input.mode || 'coexist',
-        lazycodex_detected: lazycodexInstalled,
         detection: {
             plugin_inventory_ids: pluginIds,
             skill_names: skillNames,
-            collisions
+            preserved_skill_names: preservedSkillNames
         },
         policy: {
-            clobber_lazycodex_skills: false,
             clobber_user_skills: false,
-            default_mode: 'coexist',
-            explicit_handoff_required: true
+            clobber_external_route_assets: false,
+            explicit_handoff_required: true,
+            artifact_names_brand_neutral: true
         },
-        actions: collisions.map((name) => `preserve_existing_skill:${name}`),
+        actions: preservedSkillNames.map((name) => `preserve_existing_skill:${name}`),
         blockers: []
     };
-    await writeJsonAtomic(path.join(root, '.sneakoscope', 'reports', 'lazycodex-interop-policy.json'), report).catch(() => undefined);
+    await writeJsonAtomic(path.join(root, '.sneakoscope', 'reports', 'codex-native-interop-policy.json'), report).catch(() => undefined);
     return report;
 }
 function normalizeInventory(value) {
@@ -57,4 +55,4 @@ async function discoverSkillNames(roots) {
     }
     return [...names].sort();
 }
-//# sourceMappingURL=lazycodex-interop-policy.js.map
+//# sourceMappingURL=codex-native-interop-policy.js.map

package/dist/core/codex-native/codex-native-invocation-router.js

@@ -0,0 +1,112 @@
+import path from 'node:path';
+import { nowIso, writeJsonAtomic } from '../fsx.js';
+import { buildCodexNativeFeatureMatrix } from './codex-native-feature-broker.js';
+export async function resolveCodexNativeInvocationPlan(input) {
+    const root = path.resolve(input.root || process.cwd());
+    const matrix = input.matrix || await buildCodexNativeFeatureMatrix({
+        root,
+        missionDir: input.missionId ? path.join(root, '.sneakoscope', 'missions', input.missionId) : null
+    });
+    const plan = planFor(matrix, input.route, input.desiredCapability);
+    if (input.missionId) {
+        const filename = `codex-native-invocation-plan.${routeSlug(input.route)}.${capabilitySlug(input.desiredCapability)}.json`;
+        await writeJsonAtomic(path.join(root, '.sneakoscope', 'missions', input.missionId, filename), plan).catch(() => undefined);
+    }
+    await writeJsonAtomic(path.join(root, '.sneakoscope', 'reports', 'codex-native-invocation-plan.json'), plan).catch(() => undefined);
+    return plan;
+}
+function planFor(matrix, route, capability) {
+    const blockers = [];
+    const warnings = [];
+    let selected = 'sks-managed-artifact';
+    const artifacts = ['.sneakoscope/reports/codex-native-feature-matrix.json'];
+    const proofPolicy = ['record selected strategy and blockers before counting route evidence'];
+    if (capability === 'agent-role') {
+        if (matrix.invocation_defaults.loop_worker_role_strategy === 'agent_type') {
+            selected = 'codex-app-native';
+            proofPolicy.push('include native agent_type payload in worker proof');
+        }
+        else {
+            selected = 'message-role-fallback';
+            warnings.push('agent_type unavailable; message-role fallback active');
+            proofPolicy.push('include message-role fallback in worker proof');
+        }
+    }
+    else if (capability === 'visual-review') {
+        if (matrix.invocation_defaults.hook_evidence_policy === 'unknown-do-not-count')
+            warnings.push('hook-derived evidence will not count');
+        selected = matrix.invocation_defaults.qa_visual_review_strategy === 'app-handoff' ? 'codex-app-native' : 'sks-managed-artifact';
+        if (matrix.invocation_defaults.qa_visual_review_strategy === 'blocked') {
+            selected = 'blocked';
+            blockers.push('qa_visual_review_unavailable');
+        }
+        proofPolicy.push('do not pass visual review without accepted artifact or app handoff confirmation');
+    }
+    else if (capability === 'plugin-source' || capability === 'mcp-source') {
+        if (matrix.features.mcp_inventory.ok) {
+            selected = 'codex-app-native';
+            artifacts.push('.sneakoscope/mcp-plugin-server-candidates.json');
+            proofPolicy.push('treat remote MCP servers as candidates only until explicitly enabled');
+        }
+        else if (matrix.features.code_mode_web_search.ok) {
+            selected = 'codex-cli-headless';
+            warnings.push('plugin inventory unavailable; code/web source fallback selected');
+        }
+        else {
+            selected = 'sks-managed-artifact';
+            warnings.push('plugin inventory unavailable; local/source-ledger fallback selected');
+        }
+    }
+    else if (capability === 'web-search') {
+        selected = matrix.features.code_mode_web_search.ok ? 'codex-cli-headless' : 'sks-managed-artifact';
+        if (!matrix.features.code_mode_web_search.ok)
+            warnings.push('code-mode web search not verified');
+    }
+    else if (capability === 'image-followup') {
+        selected = matrix.features.image_path_exposure.ok ? 'codex-app-native' : 'sks-managed-artifact';
+        proofPolicy.push(matrix.features.image_path_exposure.ok ? 'include model-visible image path' : 'use saved artifact path contract');
+    }
+    else if (capability === 'hook-evidence') {
+        if (matrix.invocation_defaults.hook_evidence_policy !== 'approved-only') {
+            selected = 'blocked';
+            blockers.push('hook_approval_not_approved');
+            warnings.push('hook-derived proof cannot count');
+        }
+        else {
+            selected = 'codex-app-native';
+        }
+        proofPolicy.push('approved hooks only; unknown hook state does not count');
+    }
+    else if (capability === 'project-memory') {
+        selected = matrix.features.project_memory.ok ? 'sks-managed-artifact' : 'blocked';
+        if (!matrix.features.project_memory.ok)
+            blockers.push('project_memory_unavailable');
+        proofPolicy.push('project memory is guidance only and never expands write scope');
+    }
+    return {
+        schema: 'sks.codex-native-invocation-plan.v1',
+        generated_at: nowIso(),
+        ok: blockers.length === 0,
+        route,
+        desired_capability: capability,
+        selected_strategy: selected,
+        required_artifacts: artifacts,
+        proof_policy: proofPolicy,
+        env: {
+            SKS_CODEX_NATIVE_STRATEGY: selected,
+            SKS_CODEX_NATIVE_FEATURE_MATRIX: '.sneakoscope/reports/codex-native-feature-matrix.json',
+            SKS_CODEX_NATIVE_AGENT_ROLE_STRATEGY: matrix.invocation_defaults.loop_worker_role_strategy,
+            SKS_CODEX_NATIVE_HOOK_EVIDENCE_POLICY: matrix.invocation_defaults.hook_evidence_policy
+        },
+        blockers,
+        warnings,
+        feature_matrix_artifact: '.sneakoscope/reports/codex-native-feature-matrix.json'
+    };
+}
+function routeSlug(route) {
+    return route.replace(/^\$/, '').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+}
+function capabilitySlug(capability) {
+    return capability.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+}
+//# sourceMappingURL=codex-native-invocation-router.js.map

package/dist/core/codex-native/codex-native-pattern-analysis.js

@@ -0,0 +1,68 @@
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { nowIso, writeJsonAtomic, writeTextAtomic } from '../fsx.js';
+import { analyzeCodexNativeReferenceSource, renderCodexNativeReferenceMarkdown } from './codex-native-reference-source.js';
+const PATTERN_ROWS = [
+    row('no-global-optional-tooling', 'Optional tooling stays non-global by default', 'adapt', ['src/core/zellij/zellij-self-heal.ts'], ['Keep optional repair/install paths explicit and proof-backed.']),
+    row('plugin-lifecycle-state-separation', 'Plugin install and approval are separate states', 'adopt', ['src/core/codex-native/codex-native-feature-broker.ts'], ['Do not count installed tools as approved evidence.']),
+    row('hook-approval-gating', 'Hook approval gates counted evidence', 'adopt', ['src/core/codex-app/codex-hook-lifecycle.ts'], ['Unknown or pending hook approval does not count as proof.']),
+    row('skill-picker-route-bridge', 'SKS route skills bridge command picker usage', 'adapt', ['src/core/codex-app/codex-skill-sync.ts'], ['Managed skills expose route purpose, command, proof path, and failure recovery.']),
+    row('native-agent-role-probe', 'Native agent role payload is probed before use', 'adopt', ['src/core/codex-app/codex-agent-type-probe.ts'], ['Use agent_type only when the probe supports it.']),
+    row('message-role-fallback', 'Message-role fallback is explicit', 'adopt', ['src/core/codex-native/codex-native-invocation-router.ts'], ['Fallback remains valid but must be recorded in proof.']),
+    row('directory-local-memory', 'Directory-local memory is guidance', 'adapt', ['src/core/codex-app/codex-init-deep.ts', 'src/core/loops/loop-planner.ts'], ['Memory hints never widen owner scope.']),
+    row('plan-work-proof-separation', 'Plan, work, and proof stay separate', 'adopt', ['src/core/loops', 'src/core/naruto'], ['Route artifacts separate planning, execution, and verification.']),
+    row('continuation-enforcer', 'Continuation is stateful and bounded', 'adapt', ['src/core/loops/loop-continuation-enforcer.ts'], ['Use runtime proof when hook approval is not approved.']),
+    row('doctor-harness-matrix', 'Doctor merges readiness into one story', 'adopt', ['src/commands/doctor.ts'], ['Doctor should show Zellij, Codex Native, Loop, QA, and Research together.']),
+    row('mcp-tool-candidate-inventory', 'MCP plugin servers are candidates', 'adapt', ['src/core/mcp/mcp-plugin-inventory.ts'], ['Candidate-only inventory prevents accidental destructive auto-enable.']),
+    row('non-clobber-managed-assets', 'Managed assets avoid clobbering user files', 'adopt', ['src/core/codex-app/codex-skill-sync.ts', 'src/core/codex-app/codex-agent-role-sync.ts'], ['Skip unmarked user assets and include checksums for managed content.'])
+];
+export async function buildCodexNativePatternAnalysis(input) {
+    const root = path.resolve(input.root);
+    const evidence = input.evidence || await analyzeCodexNativeReferenceSource({ root, sourceDir: input.sourceDir || null, writeReport: true }).catch(() => null);
+    const evidenceByPattern = new Map();
+    const confidenceByPattern = new Map();
+    for (const item of evidence?.evidence || []) {
+        const list = evidenceByPattern.get(item.pattern_id) || [];
+        list.push(item.snippet_hash);
+        evidenceByPattern.set(item.pattern_id, list);
+        confidenceByPattern.set(item.pattern_id, strongerConfidence(confidenceByPattern.get(item.pattern_id), item.confidence));
+    }
+    return {
+        schema: 'sks.codex-native-pattern-analysis.v1',
+        generated_at: nowIso(),
+        source_kind: 'external-reference-source',
+        source_ref: evidence?.source_ref || neutralSourceRef(input.sourceDir || '.sneakoscope/cache/codex-native-reference'),
+        source_sha: evidence?.source_sha || null,
+        source_url_hash: evidence?.source_url_hash || null,
+        cache_report_path: evidence?.cache_report_path || null,
+        patterns: PATTERN_ROWS.map((pattern) => {
+            const hashes = evidenceByPattern.get(pattern.id) || [];
+            return {
+                ...pattern,
+                confidence: confidenceByPattern.get(pattern.id) || (hashes.length ? 'medium' : evidence ? 'low' : 'low'),
+                evidence_hashes: hashes
+            };
+        }),
+        blockers: evidence?.blockers || ['source_snapshot_missing'],
+        warnings: evidence?.warnings || ['reference_evidence_unavailable']
+    };
+}
+function neutralSourceRef(value) {
+    return `source:${createHash('sha256').update(value).digest('hex').slice(0, 16)}`;
+}
+function strongerConfidence(current, next) {
+    const rank = { low: 0, medium: 1, high: 2 };
+    return current && rank[current] >= rank[next] ? current : next;
+}
+export async function writeCodexNativePatternAnalysis(root, input = {}) {
+    const evidence = await analyzeCodexNativeReferenceSource({ root, sourceDir: input.sourceDir || null, writeReport: true }).catch(() => null);
+    const report = await buildCodexNativePatternAnalysis({ root, evidence, sourceDir: input.sourceDir || null });
+    await writeJsonAtomic(path.join(root, '.sneakoscope', 'reports', 'codex-native-pattern-analysis.json'), report);
+    if (evidence)
+        await writeTextAtomic(path.join(root, 'docs', 'codex-native-patterns.md'), renderCodexNativeReferenceMarkdown(evidence)).catch(() => undefined);
+    return report;
+}
+function row(id, title, adoption, sks_target_modules, implementation_notes) {
+    return { id, title, adoption, sks_target_modules, implementation_notes };
+}
+//# sourceMappingURL=codex-native-pattern-analysis.js.map

package/dist/core/codex-native/codex-native-reference-cache.js

@@ -0,0 +1,98 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { exists, nowIso, runProcess, sha256, writeJsonAtomic } from '../fsx.js';
+export async function ensureCodexNativeReferenceSnapshot(input) {
+    const root = path.resolve(input.root);
+    const cacheDir = path.join(root, '.sneakoscope', 'cache', 'codex-native-reference');
+    const reportPath = path.join(root, '.sneakoscope', 'reports', 'codex-native-reference-cache.json');
+    const sourceUrl = input.sourceUrl ?? process.env.SKS_CODEX_NATIVE_REFERENCE_SOURCE_URL ?? null;
+    const sourceRef = input.ref || process.env.SKS_CODEX_NATIVE_REFERENCE_REF || 'HEAD';
+    const offline = input.offline === true || process.env.SKS_CODEX_NATIVE_REFERENCE_OFFLINE === '1' || !sourceUrl;
+    const blockers = [];
+    const warnings = [];
+    let refreshed = false;
+    if (!offline && sourceUrl) {
+        const parent = path.dirname(cacheDir);
+        await fs.mkdir(parent, { recursive: true });
+        const gitDir = path.join(cacheDir, '.git');
+        const timeoutMs = input.timeoutMs || 60_000;
+        if (!(await exists(gitDir))) {
+            if (await exists(cacheDir))
+                await fs.rm(cacheDir, { recursive: true, force: true });
+            const cloneArgs = [
+                'clone',
+                '--depth',
+                '1',
+                '--filter=blob:none',
+                ...(sourceRef === 'HEAD' ? [] : ['--branch', sourceRef]),
+                sourceUrl,
+                cacheDir
+            ];
+            const cloned = await runProcess('git', cloneArgs, {
+                timeoutMs,
+                maxOutputBytes: 128 * 1024
+            }).catch((err) => ({ code: 1, stderr: messageOf(err), stdout: '' }));
+            if (cloned.code === 0)
+                refreshed = true;
+            else
+                blockers.push('source_snapshot_fetch_failed');
+        }
+        else if (input.refresh === true) {
+            const fetched = await runProcess('git', ['fetch', '--depth', '1', 'origin', sourceRef], {
+                cwd: cacheDir,
+                timeoutMs,
+                maxOutputBytes: 128 * 1024
+            }).catch((err) => ({ code: 1, stderr: messageOf(err), stdout: '' }));
+            if (fetched.code === 0) {
+                await runProcess('git', ['checkout', 'FETCH_HEAD'], { cwd: cacheDir, timeoutMs, maxOutputBytes: 64 * 1024 }).catch(() => null);
+                refreshed = true;
+            }
+            else {
+                blockers.push('source_snapshot_refresh_failed');
+            }
+        }
+    }
+    else {
+        warnings.push(sourceUrl ? 'reference_cache_offline_mode' : 'reference_source_url_missing_offline_cache_only');
+    }
+    const cacheExists = await hasTextFiles(cacheDir);
+    if (!cacheExists)
+        blockers.push('source_snapshot_missing');
+    const report = {
+        schema: 'sks.codex-native-reference-cache.v1',
+        generated_at: nowIso(),
+        ok: blockers.length === 0,
+        cache_dir: path.relative(root, cacheDir),
+        source_url_hash: sourceUrl ? sha256(sourceUrl) : null,
+        source_ref: sourceRef,
+        source_sha: await gitSha(cacheDir),
+        refreshed,
+        offline,
+        blockers: [...new Set(blockers)],
+        warnings: [...new Set(warnings)]
+    };
+    await writeJsonAtomic(reportPath, report).catch(() => undefined);
+    return report;
+}
+async function hasTextFiles(dir) {
+    const rows = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+    for (const row of rows) {
+        if (row.name === '.git' || row.name === 'node_modules' || row.name === 'dist')
+            continue;
+        const full = path.join(dir, row.name);
+        if (row.isFile() && /\.(md|txt|json|toml|ya?ml|js|ts|mjs|cjs)$/i.test(row.name))
+            return true;
+        if (row.isDirectory() && await hasTextFiles(full))
+            return true;
+    }
+    return false;
+}
+async function gitSha(sourceDir) {
+    const run = await runProcess('git', ['rev-parse', 'HEAD'], { cwd: sourceDir, timeoutMs: 5000, maxOutputBytes: 4096 }).catch(() => null);
+    const sha = run?.code === 0 ? `${run.stdout || ''}`.trim() : '';
+    return /^[0-9a-f]{40}$/i.test(sha) ? sha : null;
+}
+function messageOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=codex-native-reference-cache.js.map

package/dist/core/codex-native/codex-native-reference-evidence.js

@@ -0,0 +1,2 @@
+export { analyzeCodexNativeReferenceSource, extractCodexNativeEvidence, renderCodexNativeReferenceMarkdown } from './codex-native-reference-source.js';
+//# sourceMappingURL=codex-native-reference-evidence.js.map

package/dist/core/codex-native/codex-native-reference-source.js

@@ -0,0 +1,149 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { nowIso, writeJsonAtomic, writeTextAtomic } from '../fsx.js';
+import { ensureCodexNativeReferenceSnapshot } from './codex-native-reference-cache.js';
+const PATTERNS = [
+    { id: 'no-global-optional-tooling', claim: 'optional tooling avoids mandatory global install', re: /\bnpx\b|no[- ]global|global install/i },
+    { id: 'plugin-lifecycle-state-separation', claim: 'plugin install state is separated from approval/readiness', re: /\bplugin\b.+\b(install|enable|marketplace|lifecycle)\b/i },
+    { id: 'hook-approval-gating', claim: 'hook approval is a separate counted evidence gate', re: /\bhook\b.+\b(approval|approve|review|trusted|trust)\b/i },
+    { id: 'skill-picker-route-bridge', claim: 'route skills are exposed through command picker style bridges', re: /\b(skill|command picker|slash command|\$[A-Za-z-]+)\b/i },
+    { id: 'native-agent-role-probe', claim: 'native agent role support is probed before use', re: /\bagent_type\b|agent role|spawn_agent/i },
+    { id: 'message-role-fallback', claim: 'message-role fallback is used when native role payload is unavailable', re: /message[- ]role|fallback/i },
+    { id: 'directory-local-memory', claim: 'directory-local memory is injected as context', re: /AGENTS\.md|directory[- ]local|project memory/i },
+    { id: 'plan-work-proof-separation', claim: 'planning, work, and proof are separated', re: /\b(plan|work|proof)\b/i },
+    { id: 'continuation-enforcer', claim: 'continuation is enforced through loop state', re: /continuation|resume|stop hook/i },
+    { id: 'doctor-harness-matrix', claim: 'doctor merges feature probes into one readiness matrix', re: /doctor|health|matrix|readiness/i },
+    { id: 'mcp-tool-candidate-inventory', claim: 'MCP tools are candidates until approved', re: /\bMCP\b|tool candidate|server candidate/i },
+    { id: 'non-clobber-managed-assets', claim: 'managed assets preserve user-authored content', re: /non[- ]clobber|managed|preserve user|checksum/i }
+];
+export async function analyzeCodexNativeReferenceSource(input) {
+    const root = path.resolve(input.root);
+    const cacheInput = input.sourceRef ? { root, ref: input.sourceRef } : { root };
+    const cache = input.sourceDir
+        ? null
+        : await ensureCodexNativeReferenceSnapshot(cacheInput).catch((err) => ({
+            schema: 'sks.codex-native-reference-cache.v1',
+            generated_at: nowIso(),
+            ok: false,
+            cache_dir: '.sneakoscope/cache/codex-native-reference',
+            source_url_hash: null,
+            source_ref: input.sourceRef || 'HEAD',
+            source_sha: null,
+            refreshed: false,
+            offline: true,
+            blockers: [messageOf(err)],
+            warnings: ['reference_cache_exception']
+        }));
+    const sourceDir = input.sourceDir
+        ? path.resolve(input.sourceDir)
+        : path.join(root, cache?.cache_dir || '.sneakoscope/cache/codex-native-reference');
+    const confidence = input.sourceDir ? 'high' : cache?.ok ? cache.refreshed ? 'high' : 'medium' : 'low';
+    const files = await listTextFiles(sourceDir);
+    const evidence = [];
+    const blockers = [];
+    for (const file of files) {
+        const rel = path.relative(sourceDir, file).split(path.sep).join('/');
+        const text = await fs.readFile(file, 'utf8').catch(() => '');
+        if (text)
+            evidence.push(...extractCodexNativeEvidence(rel, text).map((row) => ({ ...row, confidence })));
+    }
+    if (!files.length || !evidence.length)
+        blockers.push('source_snapshot_missing');
+    const report = {
+        schema: 'sks.codex-native-reference-evidence.v1',
+        generated_at: nowIso(),
+        source_kind: 'external-reference-source',
+        source_ref: neutralSourceRef(input, cache, sourceDir),
+        source_sha: cache?.source_sha || await gitSha(sourceDir),
+        source_url_hash: cache?.source_url_hash || null,
+        cache_report_path: cache ? '.sneakoscope/reports/codex-native-reference-cache.json' : null,
+        cache,
+        evidence,
+        blockers: [...new Set([...blockers, ...(cache?.blockers || [])])],
+        warnings: [...new Set([...(cache?.warnings || []), ...(blockers.length ? ['reference_evidence_incomplete'] : [])])]
+    };
+    if (input.writeReport !== false) {
+        await writeJsonAtomic(path.join(root, '.sneakoscope', 'reports', 'codex-native-reference-evidence.json'), report).catch(() => undefined);
+        await writeTextAtomic(path.join(root, 'docs', 'codex-native-patterns.md'), renderCodexNativeReferenceMarkdown(report)).catch(() => undefined);
+    }
+    return report;
+}
+export function extractCodexNativeEvidence(file, text) {
+    const lines = text.split(/\r?\n/);
+    const rows = [];
+    for (const pattern of PATTERNS) {
+        const index = lines.findIndex((line) => pattern.re.test(line));
+        if (index < 0)
+            continue;
+        const snippet = lines.slice(Math.max(0, index - 1), Math.min(lines.length, index + 2)).join('\n').slice(0, 500);
+        rows.push({
+            pattern_id: pattern.id,
+            file,
+            line_range: [index + 1, index + 1],
+            snippet_hash: createHash('sha256').update(snippet).digest('hex'),
+            claim_id: pattern.claim,
+            confidence: 'high'
+        });
+    }
+    return rows;
+}
+export function renderCodexNativeReferenceMarkdown(report) {
+    const rows = report.evidence.map((row) => `| ${row.pattern_id} | ${row.file} | ${row.line_range?.join('-') || '-'} | ${row.snippet_hash.slice(0, 16)} | ${row.confidence} |`).join('\n');
+    return [
+        '# SKS Codex Native Patterns',
+        '',
+        'This document records reference-derived Codex-native patterns in SKS-owned vocabulary. It stores line anchors and snippet hashes only.',
+        '',
+        `Generated at: \`${report.generated_at}\``,
+        `Source kind: \`${report.source_kind}\``,
+        `Source URL hash: \`${report.source_url_hash || 'none'}\``,
+        `Source SHA: \`${report.source_sha || 'none'}\``,
+        '',
+        '| Pattern | File | Lines | Snippet Hash | Confidence |',
+        '|---|---|---:|---|---|',
+        rows || '| none | - | - | - | low |',
+        ''
+    ].join('\n');
+}
+function neutralSourceRef(input, cache, sourceDir) {
+    if (cache)
+        return `cache:${createHash('sha256').update(`${cache.cache_dir}:${cache.source_ref}:${cache.source_sha || ''}`).digest('hex').slice(0, 16)}`;
+    if (input.sourceRef)
+        return `explicit:${createHash('sha256').update(input.sourceRef).digest('hex').slice(0, 16)}`;
+    return `explicit-source-dir:${createHash('sha256').update(sourceDir).digest('hex').slice(0, 16)}`;
+}
+async function listTextFiles(dir) {
+    const out = [];
+    await walk(dir, out, 500);
+    return out;
+}
+async function walk(dir, out, maxFiles) {
+    if (out.length >= maxFiles)
+        return;
+    const rows = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
+    for (const row of rows) {
+        if (out.length >= maxFiles)
+            return;
+        const full = path.join(dir, row.name);
+        if (row.isDirectory()) {
+            if (['.git', 'node_modules', 'dist'].includes(row.name))
+                continue;
+            await walk(full, out, maxFiles);
+        }
+        else if (row.isFile() && /\.(md|txt|json|toml|ya?ml|js|ts|mjs|cjs)$/i.test(row.name)) {
+            out.push(full);
+        }
+    }
+}
+async function gitSha(sourceDir) {
+    const head = await fs.readFile(path.join(sourceDir, '.git', 'HEAD'), 'utf8').catch(() => '');
+    const ref = head.match(/^ref:\s*(.+)$/m)?.[1];
+    if (ref)
+        return (await fs.readFile(path.join(sourceDir, '.git', ref), 'utf8').catch(() => '')).trim() || null;
+    return /^[0-9a-f]{40}$/i.test(head.trim()) ? head.trim() : null;
+}
+function messageOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=codex-native-reference-source.js.map

package/dist/core/codex-native/codex-native-rename-map.js

@@ -0,0 +1,25 @@
+export const CODEX_NATIVE_RENAME_RULES = [
+    { from_hash: 'external-analysis', to: 'codex-native:pattern-analysis', surface: 'gate' },
+    { from_hash: 'external-evidence', to: 'codex-native:reference-evidence', surface: 'gate' },
+    { from_hash: 'external-interop', to: 'codex-native:interop-policy', surface: 'gate' },
+    { from_hash: 'app-harness', to: 'codex-native:harness-matrix', surface: 'gate' },
+    { from_hash: 'skill-sync', to: 'codex-native:skill-sync', surface: 'gate' },
+    { from_hash: 'agent-role-sync', to: 'codex-native:agent-role-sync', surface: 'gate' },
+    { from_hash: 'hook-lifecycle', to: 'codex-native:hook-lifecycle', surface: 'gate' },
+    { from_hash: 'execution-profile', to: 'codex-native:execution-profile', surface: 'gate' },
+    { from_hash: 'feature-broker', to: 'codex-native:feature-broker', surface: 'gate' },
+    { from_hash: 'invocation-router', to: 'codex-native:invocation-router', surface: 'gate' },
+    { from_hash: 'pattern-schema', to: 'sks.codex-native-pattern-analysis.v1', surface: 'schema' },
+    { from_hash: 'evidence-schema', to: 'sks.codex-native-reference-evidence.v1', surface: 'schema' },
+    { from_hash: 'matrix-schema', to: 'sks.codex-native-feature-matrix.v1', surface: 'schema' },
+    { from_hash: 'plan-schema', to: 'sks.codex-native-invocation-plan.v1', surface: 'schema' },
+    { from_hash: 'pattern-report', to: '.sneakoscope/reports/codex-native-pattern-analysis.json', surface: 'artifact' },
+    { from_hash: 'evidence-report', to: '.sneakoscope/reports/codex-native-reference-evidence.json', surface: 'artifact' },
+    { from_hash: 'matrix-report', to: '.sneakoscope/reports/codex-native-feature-matrix.json', surface: 'artifact' },
+    { from_hash: 'plan-report', to: '.sneakoscope/reports/codex-native-invocation-plan.json', surface: 'artifact' },
+    { from_hash: 'patterns-doc', to: 'docs/codex-native-patterns.md', surface: 'docs' }
+];
+export function codexNativeRenameTargets() {
+    return CODEX_NATIVE_RENAME_RULES.map((rule) => rule.to);
+}
+//# sourceMappingURL=codex-native-rename-map.js.map