sneakoscope 4.0.13 → 4.0.14

package/dist/scripts/check-pipeline-runtime.js

@@ -1,25 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-const root = process.cwd();
-const file = path.join(root, 'src', 'core', 'pipeline-runtime.ts');
-const failures = [];
-if (fs.existsSync(file)) {
-    const text = fs.readFileSync(file, 'utf8');
-    const lines = text.split(/\r?\n/).length;
-    if (lines > 300)
-        failures.push(`src/core/pipeline-runtime.ts: line count ${lines} > 300`);
-    if (!/pipeline-internals\/runtime-core\.js/.test(text))
-        failures.push('src/core/pipeline-runtime.ts: expected compatibility re-export facade');
-    if (/from ['"].*\\b(team|qa|research|ppt|image-ux-review|db|gx)\\b/i.test(text))
-        failures.push('src/core/pipeline-runtime.ts: imports route implementation modules directly');
-}
-if (failures.length) {
-    console.error('Pipeline runtime check failed:');
-    for (const failure of failures)
-        console.error(`- ${failure}`);
-    process.exit(1);
-}
-console.log('Pipeline runtime check passed');
-//# sourceMappingURL=check-pipeline-runtime.js.map

package/dist/scripts/check-publish-tag.js

@@ -1,30 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
-const version = String(pkg.version || '');
-const isPrerelease = version.includes('-');
-const publishLifecycle = process.env.npm_lifecycle_event === 'prepublishOnly';
-const npmTag = process.env.npm_config_tag || process.env.NPM_CONFIG_TAG || '';
-const publishConfigTag = pkg.publishConfig?.tag || '';
-const configuredTag = publishLifecycle && (!npmTag || npmTag === 'latest')
-    ? (publishConfigTag || npmTag || 'latest')
-    : (npmTag || publishConfigTag || 'latest');
-const expectedTag = isPrerelease ? 'rc' : 'latest';
-if (configuredTag !== expectedTag) {
-    if (isPrerelease) {
-        console.error(`Prerelease ${pkg.name}@${version} must be published with the rc dist-tag.`);
-        console.error('Set package.json publishConfig.tag to rc or pass `--tag rc` to npm publish.');
-    }
-    else {
-        console.error(`Stable release ${pkg.name}@${version} must be published with the latest dist-tag.`);
-        console.error('Remove prerelease tag config and use plain `npm publish`.');
-    }
-    console.error(`Current npm tag config: ${configuredTag || 'missing'}`);
-    process.exit(2);
-}
-console.log(`Publish tag check passed: ${pkg.name}@${version} -> ${configuredTag}`);
-//# sourceMappingURL=check-publish-tag.js.map

package/dist/scripts/check-route-modularity.js

@@ -1,82 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-const root = process.cwd();
-const failures = [];
-const routeCli = path.join(root, 'src', 'core', 'commands', 'route-cli.mjs');
-if (fs.existsSync(routeCli))
-    failures.push('src/core/commands/route-cli.mjs must not exist in runtime source');
-for (const file of listFiles(path.join(root, 'src', 'commands'), '.mjs')) {
-    const text = fs.readFileSync(file, 'utf8');
-    if (text.includes('route-cli.mjs'))
-        failures.push(`${rel(file)} imports route-cli.mjs`);
-}
-const requiredModules = [
-    'team-command.mjs',
-    'qa-loop-command.mjs',
-    'research-command.mjs',
-    'autoresearch-command.mjs',
-    'ppt-command.mjs',
-    'image-ux-review-command.mjs',
-    'computer-use-command.mjs',
-    'db-command.mjs',
-    'wiki-command.mjs',
-    'gx-command.mjs',
-    'goal-command.mjs',
-    'pipeline-command.mjs',
-    'recallpulse-command.mjs',
-    'hproof-command.mjs',
-    'validate-artifacts-command.mjs'
-];
-for (const name of requiredModules) {
-    if (!commandModuleExists(name))
-        failures.push(`missing ${name}`);
-}
-const disallowedImports = {
-    'qa-loop-command.mjs': ['research-command', 'ppt-command', 'team-command', 'gx-command'],
-    'research-command.mjs': ['qa-loop-command', 'ppt-command', 'team-command', 'gx-command'],
-    'db-command.mjs': ['image-ux-review-command', 'ppt-command', 'computer-use-command'],
-    'wiki-command.mjs': ['team-command', 'research-command', 'qa-loop-command', 'ppt-command']
-};
-for (const [name, needles] of Object.entries(disallowedImports)) {
-    const file = commandModulePath(name);
-    if (!fs.existsSync(file))
-        continue;
-    const text = fs.readFileSync(file, 'utf8');
-    for (const needle of needles) {
-        if (text.includes(needle))
-            failures.push(`${name} imports unrelated ${needle}`);
-    }
-}
-if (failures.length) {
-    console.error('Route modularity check failed:');
-    for (const failure of failures)
-        console.error(`- ${failure}`);
-    process.exit(1);
-}
-console.log('Route modularity check passed');
-function listFiles(dir, ext) {
-    const out = [];
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-        const file = path.join(dir, entry.name);
-        if (entry.isDirectory())
-            out.push(...listFiles(file, ext));
-        else if (entry.name.endsWith(ext))
-            out.push(file);
-    }
-    return out;
-}
-function rel(file) {
-    return path.relative(root, file).split(path.sep).join('/');
-}
-function commandModulePath(name) {
-    const base = path.join(root, 'src', 'core', 'commands');
-    const mjs = path.join(base, name);
-    const ts = path.join(base, name.replace(/\.mjs$/, '.ts'));
-    return fs.existsSync(mjs) ? mjs : ts;
-}
-function commandModuleExists(name) {
-    return fs.existsSync(commandModulePath(name));
-}
-//# sourceMappingURL=check-route-modularity.js.map

package/dist/scripts/check-runtime-schemas.js

@@ -1,87 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { spawnSync } from 'node:child_process';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import fs from 'node:fs';
-const root = process.cwd();
-const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], {
-    cwd: root,
-    encoding: 'utf8',
-    stdio: 'pipe'
-});
-const issues = [];
-if (tsc.status !== 0)
-    issues.push(`typecheck:${tsc.stderr || tsc.stdout}`.trim());
-let validatorsOk = false;
-try {
-    const proof = await import(pathToFileURL(path.join(root, 'dist', 'core', 'proof', 'proof-schema.js')));
-    const evidence = await import(pathToFileURL(path.join(root, 'dist', 'core', 'evidence', 'evidence-schema.js')));
-    const voxel = await import(pathToFileURL(path.join(root, 'dist', 'core', 'wiki-image', 'image-voxel-schema.js')));
-    validatorsOk = proof.isCompletionProof({
-        schema: 'sks.completion-proof.v1',
-        mission_id: null,
-        route: '$Team',
-        status: 'verified_partial',
-        evidence: {},
-        claims: [],
-        unverified: [],
-        blockers: []
-    }) && evidence.isEvidenceRecord({
-        schema: 'sks.evidence.v1',
-        id: 'EV-TEST',
-        mission_id: null,
-        kind: 'test',
-        source: 'real',
-        path: null,
-        sha256: null,
-        freshness: 'fresh',
-        trust: 'high',
-        redacted: true,
-        issues: []
-    }) && voxel.isImageVoxelLedger({
-        schema: 'sks.image-voxel-ledger.v1',
-        images: [],
-        anchors: [],
-        relations: []
-    });
-}
-catch (err) {
-    issues.push(`validator_import:${err.message}`);
-}
-if (!validatorsOk)
-    issues.push('validator_smoke_failed');
-const codexSchemaDir = path.join(root, 'schemas', 'codex');
-for (const file of [
-    'ux-review-callout-extraction.schema.json',
-    'image-ux-issue-ledger.schema.json',
-    'completion-proof.schema.json',
-    'wrongness-record.schema.json',
-    'agent-result.schema.json',
-    'computer-use-live-evidence.schema.json',
-    'ppt-slide-issue-ledger.schema.json',
-    'dfix-diagnosis.schema.json',
-    'dfix-patch-plan.schema.json',
-    'dfix-verification.schema.json',
-    'all-feature-completion.schema.json',
-    'non-recursive-pipeline-report.schema.json'
-]) {
-    const full = path.join(codexSchemaDir, file);
-    if (!fs.existsSync(full)) {
-        issues.push(`codex_schema_missing:${file}`);
-        continue;
-    }
-    try {
-        const parsed = JSON.parse(fs.readFileSync(full, 'utf8'));
-        if (parsed.type !== 'object')
-            issues.push(`codex_schema_root_type:${file}`);
-    }
-    catch (err) {
-        issues.push(`codex_schema_invalid_json:${file}:${err.message}`);
-    }
-}
-const result = { schema: 'sks.runtime-schema-check.v1', ok: issues.length === 0, validators_ok: validatorsOk, issues };
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=check-runtime-schemas.js.map

package/dist/scripts/check-source-runtime.js

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import './runtime-no-src-mjs-check.js';
-//# sourceMappingURL=check-source-runtime.js.map

package/dist/scripts/check-ts-contracts.js

@@ -1,69 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-const root = process.cwd();
-const requiredFiles = [
-    'src/cli/command-registry.ts',
-    'src/core/trust-kernel/trust-kernel-schema.ts',
-    'src/core/trust-kernel/route-contract.ts',
-    'src/core/trust-kernel/completion-contract.ts',
-    'src/core/evidence/evidence-schema.ts',
-    'src/core/proof/proof-schema.ts',
-    'src/core/proof/validation.ts',
-    'src/core/wiki-image/image-voxel-schema.ts',
-    'src/core/agents/agent-schema.ts',
-    'src/core/features/feature-fixtures.ts'
-];
-const suppressFreeBootstrap = [
-    'src/cli/main.ts',
-    'src/cli/router.ts',
-    'src/core/fsx.ts',
-    'src/core/commands/run-command.ts'
-];
-const issues = [];
-for (const rel of suppressFreeBootstrap) {
-    const file = path.join(root, rel);
-    if (!fs.existsSync(file)) {
-        issues.push(`${rel}:missing`);
-        continue;
-    }
-    const text = fs.readFileSync(file, 'utf8');
-    if (/@ts-nocheck\b/.test(text))
-        issues.push(`${rel}:ts_nocheck`);
-    if (/@ts-ignore\b/.test(text))
-        issues.push(`${rel}:ts_ignore`);
-}
-for (const rel of requiredFiles) {
-    const file = path.join(root, rel);
-    if (!fs.existsSync(file)) {
-        issues.push(`${rel}:missing`);
-        continue;
-    }
-    const text = fs.readFileSync(file, 'utf8');
-    if (/\bany\b/.test(text))
-        issues.push(`${rel}:any_token`);
-    if (!/\bexport\b/.test(text))
-        issues.push(`${rel}:exports_missing`);
-}
-const runtimeRegistry = await import(pathToFileURL(path.join(root, 'dist', 'cli', 'command-registry.js')));
-const runtimeCommands = Object.keys(runtimeRegistry.COMMANDS || {}).sort();
-const typedText = fs.readFileSync(path.join(root, 'src', 'cli', 'command-registry.ts'), 'utf8');
-for (const name of ['help', 'version', 'commands', 'run', 'team', 'agent', 'trust', 'proof', 'db', 'git', 'wiki', 'bench', 'features']) {
-    if (!runtimeCommands.includes(name))
-        issues.push(`typed_registry_runtime_missing:${name}`);
-    if (!new RegExp(`\\b${name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*:`).test(typedText))
-        issues.push(`typed_registry_ts_missing:${name}`);
-}
-const result = {
-    schema: 'sks.ts-contract-check.v1',
-    ok: issues.length === 0,
-    checked_files: requiredFiles.length,
-    runtime_command_count: runtimeCommands.length,
-    issues
-};
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=check-ts-contracts.js.map

package/dist/scripts/check-ts-suppressions.js

@@ -1,58 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-/**
- * Fail if runtime TypeScript uses forbidden suppressions (@ts-nocheck, @ts-ignore)
- * or @ts-expect-error without an SKS-annotated rationale.
- *
- * Allowed: generated src/generated/** waivers — must include @ts-expect-error SKS-GEN:
- */
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-const srcRoot = path.join(root, 'src');
-const failures = [];
-function scanFile(abs, rel) {
-    const txt = fs.readFileSync(abs, 'utf8');
-    const lines = txt.split(/\r?\n/);
-    const relPosix = rel.split(path.sep).join('/');
-    const inGenerated = relPosix.startsWith('generated/');
-    lines.forEach((line, idx) => {
-        const trimmed = line.trim();
-        const lineNo = idx + 1;
-        if (trimmed.includes('@ts-nocheck'))
-            failures.push({ file: rel, line: lineNo, rule: '@ts-nocheck' });
-        if (trimmed.includes('@ts-ignore'))
-            failures.push({ file: rel, line: lineNo, rule: '@ts-ignore' });
-        if (/@ts-expect-error\b/.test(line)) {
-            if (inGenerated) {
-                if (!/@ts-expect-error\s+SKS-GEN:/.test(trimmed))
-                    failures.push({ file: rel, line: lineNo, rule: '@ts-expect-error missing SKS-GEN reason' });
-                return;
-            }
-            if (!/@ts-expect-error\s+SKS-/.test(trimmed))
-                failures.push({ file: rel, line: lineNo, rule: '@ts-expect-error missing SKS- reason prefix' });
-        }
-    });
-}
-function walk(dir, relDir = '') {
-    for (const ent of fs.readdirSync(dir, { withFileTypes: true })) {
-        const abs = path.join(dir, ent.name);
-        const rel = relDir ? `${relDir}/${ent.name}` : ent.name;
-        if (ent.isDirectory())
-            walk(abs, rel);
-        else if (ent.isFile() && ent.name.endsWith('.ts'))
-            scanFile(abs, rel);
-    }
-}
-if (fs.existsSync(srcRoot))
-    walk(srcRoot);
-const result = {
-    schema: 'sks.ts-suppression-check.v1',
-    ok: failures.length === 0,
-    failures,
-};
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=check-ts-suppressions.js.map

package/dist/scripts/clean-dist.js

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fsp from 'node:fs/promises';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-await fsp.rm(path.join(root, 'dist'), { recursive: true, force: true });
-//# sourceMappingURL=clean-dist.js.map

package/dist/scripts/codex-0140-feature-gate-lib.js

@@ -1,14 +0,0 @@
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
-import { detectCodex0140Capability } from '../core/codex-control/codex-0140-capability.js';
-export async function runCodex0140FeatureGate(gate, feature) {
-    process.env.SKS_CODEX_0140_FAKE = '1';
-    process.env.SKS_CODEX_VERSION_FAKE = 'codex-cli 0.140.0';
-    process.env.SKS_CODEX_0140_PROBE = '1';
-    const cap = await detectCodex0140Capability({ codexBin: 'codex' });
-    assertGate(cap.ok === true && cap.supports_0140 === true, `${gate} requires passing Codex 0.140 capability fixture`, cap);
-    const state = cap.feature_states[feature];
-    assertGate(cap.features[feature] === true && state?.supported === true, `${gate} requires feature ${feature}`, cap);
-    assertGate(state.certainty !== 'assumed_by_version' && state.certainty !== 'unverified' && state.certainty !== 'failed', `${gate} requires probed feature certainty for ${feature}`, state);
-    emitGate(gate, { feature, schema: cap.schema, certainty: state.certainty });
-}
-//# sourceMappingURL=codex-0140-feature-gate-lib.js.map

package/dist/scripts/codex-config-eperm-fixture.js

@@ -1,32 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { spawnSync } from 'node:child_process';
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-const root = process.cwd();
-const fixture = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-eperm-fixture-'));
-await fs.mkdir(path.join(fixture, '.codex'), { recursive: true });
-await fs.writeFile(path.join(fixture, '.codex', 'config.toml'), 'sandbox_mode = "workspace-write"\n');
-const result = spawnSync(process.execPath, [
-    path.join(root, 'dist', 'scripts', 'codex-config-load-probe.js'),
-    '--root',
-    fixture,
-    '--config',
-    path.join(fixture, '.codex', 'config.toml'),
-    '--codex-bin',
-    path.join(root, 'dist', 'scripts', 'fixtures', 'fake-codex-config-loader.js'),
-    '--json'
-], {
-    cwd: root,
-    env: { ...process.env, SKS_FAKE_CODEX_CONFIG_EPERM: '1' },
-    encoding: 'utf8'
-});
-const report = JSON.parse(result.stdout || '{}');
-const ok = result.status !== 0
-    && report.checks?.find((row) => row.name === 'node_read')?.ok === true
-    && report.blockers?.includes('codex_cli_config_eperm');
-console.log(JSON.stringify({ schema: 'sks.codex-config-eperm-fixture.v1', ok, report }, null, 2));
-if (!ok)
-    process.exitCode = 1;
-//# sourceMappingURL=codex-config-eperm-fixture.js.map

package/dist/scripts/codex-lb-missing-env-regression.js

@@ -1,40 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { runProcess } from '../core/fsx.js';
-const rawPattern = new RegExp(['Missing environment variable:', '\\s*`?CODEX_LB_API_KEY`?'].join(''), 'i');
-const home = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-codex-lb-missing-env-'));
-const entry = path.resolve('dist/bin/sks.js');
-const scenarios = [
-    ['status', ['codex-lb', 'status', '--json']],
-    ['doctor', ['codex-lb', 'doctor', '--deep', '--json']],
-    ['health', ['codex-lb', 'health', '--json']],
-    ['postinstall', ['postinstall']]
-];
-const results = [];
-for (const [name, args] of scenarios) {
-    const run = await runProcess(process.execPath, [entry, ...args], {
-        env: { ...process.env, HOME: home, CI: 'true', CODEX_LB_API_KEY: '', CODEX_LB_BASE_URL: '', SKS_POSTINSTALL_NO_BOOTSTRAP: '1' },
-        timeoutMs: 20_000,
-        maxOutputBytes: 256 * 1024
-    });
-    const text = `${run.stdout}\n${run.stderr}`;
-    results.push({
-        name,
-        code: run.code,
-        raw_missing_env: rawPattern.test(text),
-        has_setup_guidance: name === 'postinstall' ? true : /setup_needed|Run: sks codex-lb setup|missing_env_key|codex-lb auth/i.test(text)
-    });
-}
-const ok = results.every((row) => row.raw_missing_env === false && row.has_setup_guidance);
-console.log(JSON.stringify({
-    schema: 'sks.codex-lb-missing-env-regression.v1',
-    ok,
-    home,
-    results
-}, null, 2));
-if (!ok)
-    process.exitCode = 1;
-//# sourceMappingURL=codex-lb-missing-env-regression.js.map

package/dist/scripts/codex-native-runtime-e2e-fixture.js

@@ -1,75 +0,0 @@
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-export async function createCodexNativeRuntimeFixture(input) {
-    const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-codex-native-e2e-'));
-    const missionId = `M-check-${Date.now().toString(36)}`;
-    const home = path.join(root, 'home');
-    const codexHome = path.join(root, 'codex-home');
-    await fs.mkdir(home, { recursive: true });
-    await fs.mkdir(codexHome, { recursive: true });
-    await fs.mkdir(path.join(root, '.sneakoscope', 'reports'), { recursive: true });
-    await fs.mkdir(path.join(root, '.sneakoscope', 'missions', missionId), { recursive: true });
-    await fs.mkdir(path.join(root, 'src', 'core', 'loops'), { recursive: true });
-    await fs.mkdir(path.join(root, 'src', 'core', 'qa'), { recursive: true });
-    await fs.mkdir(path.join(root, 'src', 'core', 'research'), { recursive: true });
-    await fs.mkdir(path.join(root, 'docs'), { recursive: true });
-    await fs.writeFile(path.join(root, 'package.json'), '{"name":"fixture","version":"3.1.7","scripts":{}}\n', 'utf8');
-    await fs.writeFile(path.join(root, 'src', 'core', 'loops', 'fixture.ts'), 'export const loopFixture = true\n', 'utf8');
-    await fs.writeFile(path.join(root, 'src', 'core', 'qa', 'fixture.ts'), 'export const qaFixture = true\n', 'utf8');
-    await fs.writeFile(path.join(root, 'src', 'core', 'research', 'fixture.ts'), 'export const researchFixture = true\n', 'utf8');
-    await fs.writeFile(path.join(root, 'docs', 'fixture.md'), '# Fixture\n', 'utf8');
-    return {
-        root,
-        missionId,
-        matrixPath: path.join(root, '.sneakoscope', 'reports', 'codex-native-feature-matrix.json'),
-        env: {
-            ...process.env,
-            HOME: home,
-            USERPROFILE: home,
-            CODEX_HOME: codexHome,
-            CODEX_BIN: 'codex',
-            SKS_CODEX_0138_FAKE: '1',
-            SKS_CODEX_0138_PROBE: '1',
-            SKS_CODEX_0139_FAKE: '1',
-            SKS_CODEX_0139_PROBE: '1',
-            SKS_CODEX_PLUGIN_JSON_FAKE: '1',
-            SKS_CODEX_HOOK_APPROVAL_FIXTURE: input.hook,
-            SKS_CODEX_AGENT_TYPE_FIXTURE: input.agentType,
-            SKS_CODEX_0138_FAKE_APP_HANDOFF_FAIL: input.appHandoff ? '0' : '1',
-            SKS_CODEX_0138_FAKE_IMAGE_PATH_FAIL: input.imagePathExposure ? '0' : '1',
-            SKS_CODEX_0138_FAKE_PLUGIN_JSON_FAIL: '0',
-            SKS_CODEX_PLUGIN_JSON_FAKE_NO_MCP: input.mcpCandidates ? '0' : '1',
-            SKS_CODEX_0139_FAKE_WEB_SEARCH_FAIL: input.codeModeWebSearch ? '0' : '1',
-            SKS_CODEX_0139_FAKE_MARKETPLACE_FAIL: '0',
-            SKS_CODEX_0139_FAKE_PROFILE_ALIAS_FAIL: '0',
-            SKS_CODEX_0139_FAKE_INTERRUPT_FAIL: '0',
-            SKS_CODEX_0139_FAKE_RICH_SCHEMA_FAIL: '0',
-            SKS_CODEX_0139_FAKE_DOCTOR_ENV_FAIL: '0',
-            SKS_LOOP_RUNTIME_FIXTURE: '1',
-            SKS_TEST_RUNTIME_FIXTURE_ALLOWED: '1'
-        }
-    };
-}
-export async function withFixtureEnv(fixture, fn) {
-    const previous = new Map();
-    for (const [key, value] of Object.entries(fixture.env)) {
-        previous.set(key, process.env[key]);
-        if (value === undefined)
-            delete process.env[key];
-        else
-            process.env[key] = value;
-    }
-    try {
-        return await fn();
-    }
-    finally {
-        for (const [key, value] of previous) {
-            if (value === undefined)
-                delete process.env[key];
-            else
-                process.env[key] = value;
-        }
-    }
-}
-//# sourceMappingURL=codex-native-runtime-e2e-fixture.js.map

package/dist/scripts/codex-project-config-policy-merge-regression.js

@@ -1,92 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-// Regression coverage for the machine-local config mover (codex-project-config-policy):
-//  1. Moved top-level keys (e.g. notify=[...], model_provider) must land BEFORE any
-//     [table] header in the user config, otherwise TOML parses them as members of the
-//     trailing table (the `invalid type: sequence, expected a string` corruption).
-//  2. Splitting the global CODEX_HOME config against itself must be a no-op.
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { ensureDistFresh, root as repoRoot } from './lib/ensure-dist-fresh.js';
-const freshness = ensureDistFresh({ rebuild: true });
-if (!freshness.ok)
-    fail('dist_not_fresh', { freshness });
-const mod = await import(pathToFileURL(path.join(repoRoot, 'dist', 'core', 'codex', 'codex-project-config-policy.js')).href);
-const results = [];
-// --- Case 1: trailing table in user config must not capture moved top-level keys ---
-{
-    const fixture = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-config-merge-'));
-    const codexHome = path.join(fixture, 'home', '.codex');
-    await fs.mkdir(codexHome, { recursive: true });
-    // Pre-existing user config whose last block is an env table requiring string values.
-    await fs.writeFile(path.join(codexHome, 'config.toml'), [
-        '[mcp_servers.xai-grok]',
-        'command = "npx"',
-        '',
-        '[mcp_servers.xai-grok.env]',
-        'XAI_API_KEY = "xai-existing"',
-        ''
-    ].join('\n'));
-    // Project config carrying machine-local top-level keys, including an array (notify).
-    await fs.mkdir(path.join(fixture, '.codex'), { recursive: true });
-    await fs.writeFile(path.join(fixture, '.codex', 'config.toml'), [
-        'model_provider = "codex-lb"',
-        'notify = ["notify-send", "SKS"]',
-        'sandbox_mode = "workspace-write"',
-        ''
-    ].join('\n'));
-    await mod.splitCodexProjectConfigPolicy(fixture, { apply: true, codexHome, writeReport: false });
-    const user = await fs.readFile(path.join(codexHome, 'config.toml'), 'utf8');
-    const lines = user.split('\n');
-    const firstTableIdx = lines.findIndex((l) => /^\s*\[/.test(l));
-    const idxOf = (re) => lines.findIndex((l) => re.test(l));
-    const modelIdx = idxOf(/^\s*model_provider\s*=/);
-    const notifyIdx = idxOf(/^\s*notify\s*=/);
-    const ok = modelIdx >= 0 &&
-        notifyIdx >= 0 &&
-        firstTableIdx >= 0 &&
-        modelIdx < firstTableIdx &&
-        notifyIdx < firstTableIdx &&
-        /XAI_API_KEY = "xai-existing"/.test(user) &&
-        // The env table must NOT have absorbed the moved keys.
-        /\[mcp_servers\.xai-grok\.env\][\s\S]*$/.test(user);
-    results.push({ case: 'moved_keys_before_tables', ok, model_idx: modelIdx, notify_idx: notifyIdx, first_table_idx: firstTableIdx, user });
-}
-// --- Case 2: splitting CODEX_HOME config against itself is a no-op ---
-{
-    const fixture = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-config-home-'));
-    const codexHome = path.join(fixture, '.codex');
-    await fs.mkdir(codexHome, { recursive: true });
-    const homeConfig = path.join(codexHome, 'config.toml');
-    const homeText = [
-        'model_provider = "codex-lb"',
-        'notify = ["notify-send", "SKS"]',
-        '',
-        '[mcp_servers.xai-grok.env]',
-        'XAI_API_KEY = "xai-existing"',
-        ''
-    ].join('\n');
-    await fs.writeFile(homeConfig, homeText);
-    const report = await mod.splitCodexProjectConfigPolicy(fixture, {
-        apply: true,
-        codexHome,
-        configPath: homeConfig,
-        writeReport: false
-    });
-    const after = await fs.readFile(homeConfig, 'utf8');
-    const ok = report.changed === false &&
-        report.status === 'project_config_is_codex_home_noop' &&
-        after === homeText;
-    results.push({ case: 'codex_home_self_split_noop', ok, status: report.status, changed: report.changed, unchanged: after === homeText });
-}
-const ok = results.every((r) => r.ok);
-console.log(JSON.stringify({ schema: 'sks.codex-project-config-policy-merge-regression.v1', ok, results }, null, 2));
-if (!ok)
-    process.exitCode = 1;
-function fail(blocker, detail) {
-    console.log(JSON.stringify({ schema: 'sks.codex-project-config-policy-merge-regression.v1', ok: false, blocker, detail }, null, 2));
-    process.exit(1);
-}
-//# sourceMappingURL=codex-project-config-policy-merge-regression.js.map