sneakoscope 4.7.0 → 4.7.1

package/dist/cli/install-helpers.js

@@ -1666,14 +1666,12 @@ export function normalizeCodexFastModeUiConfig(text = '', opts = {}) {
     return normalizeCodexFastModeUiConfigOnce(normalizeCodexFastModeUiConfigOnce(text, opts), opts);
 }
 function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
-    // Preserve user-owned top-level scalars (model / service_tier / model_reasoning_effort):
-    // SKS only supplies a default when the user has not chosen one, and never strips the
-    // user's own reasoning effort. SKS continues to manage its own namespaced tables below
-    // ([features], [profiles.sks-*], [user.fast_mode], [plugins]).
+    // Keep model and reasoning selection out of top-level config so Codex Desktop can
+    // expose its native model/speed selectors. SKS-owned defaults live in profiles below.
     let next = String(text || '');
+    next = removeLegacyTopLevelCodexModeLocks(next);
     next = removeTomlTableKey(next, 'notice', 'fast_default_opt_out');
     next = removeTomlTableKey(next, 'features', 'codex_hooks');
-    next = upsertTopLevelTomlStringIfAbsent(next, 'model', 'gpt-5.5');
     if (opts.forceFastMode === true) {
         next = upsertTopLevelTomlString(next, 'service_tier', 'fast');
     }
@@ -1739,7 +1737,7 @@ function removeLegacyTopLevelCodexModeLocks(text = '') {
     return lines.filter((line, index) => {
         if (index >= end)
             return true;
-        return !/^\s*model_reasoning_effort\s*=/.test(line);
+        return !/^\s*(?:model|model_reasoning_effort)\s*=/.test(line);
     }).join('\n').replace(/^\n+/, '').replace(/\n{3,}/g, '\n\n');
 }
 function removeTopLevelTomlKeyIfValue(text = '', key = '', value = '') {
@@ -3118,8 +3116,8 @@ export async function selftestCodexLb(tmp) {
     });
     if (brokenChain.ok || brokenChain.status !== 'previous_response_not_found' || brokenChain.chain_unhealthy !== true)
         throw new Error('selftest: codex-lb response chain health check did not detect previous_response_not_found');
-    if (!/^model = "gpt-5\.5"/m.test(codexLbConfig) || !codexLbConfig.includes('hooks = true') || hasDeprecatedCodexHooksFeatureFlag(codexLbConfig) || !codexLbConfig.includes('remote_control = true') || !codexLbConfig.includes('multi_agent = true') || !codexLbConfig.includes('fast_mode = true') || !codexLbConfig.includes('fast_mode_ui = true') || !codexLbConfig.includes('codex_git_commit = true') || !codexLbConfig.includes('computer_use = true') || !codexLbConfig.includes('browser_use = true') || !codexLbConfig.includes('browser_use_external = true') || !codexLbConfig.includes('guardian_approval = true') || !codexLbConfig.includes('tool_suggest = true') || !codexLbConfig.includes('apps = true') || !codexLbConfig.includes('plugins = true') || !codexLbConfig.includes('[plugins."latex@openai-bundled"]') || !codexLbConfig.includes('[plugins."documents@openai-primary-runtime"]') || !codexLbConfig.includes('[user.fast_mode]') || !codexLbConfig.includes('visible = true') || !codexLbConfig.includes('enabled = true') || !/\[profiles\.custom\][\s\S]*?model_reasoning_effort = "low"/.test(codexLbConfig) || !/\[profiles\.sks-fast-high\][\s\S]*?service_tier = "fast"/.test(codexLbConfig) || codexLbConfig.includes('fast_default_opt_out = true') || hasTopLevelCodexModeLock(codexLbConfig))
-        throw new Error('selftest: codex-lb setup did not preserve Codex App feature flags, default plugins, profile-scoped reasoning effort, explicit Fast profile, Codex Git commit generation, force GPT-5.5, or migrate the hooks feature flag');
+    if (!codexLbConfig.includes('hooks = true') || hasDeprecatedCodexHooksFeatureFlag(codexLbConfig) || !codexLbConfig.includes('remote_control = true') || !codexLbConfig.includes('multi_agent = true') || !codexLbConfig.includes('fast_mode = true') || !codexLbConfig.includes('fast_mode_ui = true') || !codexLbConfig.includes('codex_git_commit = true') || !codexLbConfig.includes('computer_use = true') || !codexLbConfig.includes('browser_use = true') || !codexLbConfig.includes('browser_use_external = true') || !codexLbConfig.includes('guardian_approval = true') || !codexLbConfig.includes('tool_suggest = true') || !codexLbConfig.includes('apps = true') || !codexLbConfig.includes('plugins = true') || !codexLbConfig.includes('[plugins."latex@openai-bundled"]') || !codexLbConfig.includes('[plugins."documents@openai-primary-runtime"]') || !codexLbConfig.includes('[user.fast_mode]') || !codexLbConfig.includes('visible = true') || !codexLbConfig.includes('enabled = true') || !/\[profiles\.custom\][\s\S]*?model_reasoning_effort = "low"/.test(codexLbConfig) || !/\[profiles\.sks-fast-high\][\s\S]*?service_tier = "fast"/.test(codexLbConfig) || codexLbConfig.includes('fast_default_opt_out = true') || hasTopLevelCodexModeLock(codexLbConfig))
+        throw new Error('selftest: codex-lb setup did not preserve Codex App feature flags, default plugins, profile-scoped reasoning effort, explicit Fast profile, Codex Git commit generation, or migrate the hooks feature flag');
     if (!hasCodexUnstableFeatureWarningSuppression(codexLbConfig))
         throw new Error('selftest: codex-lb setup did not suppress Codex unstable feature warning');
     const codexLbLaunch = `source ${path.join(tmp, '.codex', 'sks-codex-lb.env')} && codex '--model' 'gpt-5.5'`;
@@ -3135,7 +3133,7 @@ function hasTopLevelCodexModeLock(text = '') {
     const lines = String(text || '').split('\n');
     const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
     const top = (firstTable === -1 ? lines : lines.slice(0, firstTable)).join('\n');
-    return /(^|\n)\s*model_reasoning_effort\s*=/.test(top);
+    return /(^|\n)\s*(?:model|model_reasoning_effort)\s*=/.test(top);
 }
 function hasDeprecatedCodexHooksFeatureFlag(text = '') {
     const lines = String(text || '').split('\n');

package/dist/commands/doctor.js

@@ -56,7 +56,7 @@ async function runDoctor(args = [], root, doctorFix) {
     const actualCodexProbeRequested = flag(args, '--actual-codex') || flag(args, '--require-actual-codex') || Boolean(codexBin);
     const actualCodexProbeEnabled = deepDiagnostics || actualCodexProbeRequested;
     const requireActualCodexProbe = flag(args, '--require-actual-codex') || (deepDiagnostics && doctorFix);
-    const shouldEvaluateCodexAppUiRepair = deepDiagnostics || flag(args, '--repair-codex-app-ui');
+    const shouldEvaluateCodexAppUiRepair = doctorFix || deepDiagnostics || flag(args, '--repair-codex-app-ui');
     const shouldRunZellijRepair = deepDiagnostics || flag(args, '--repair-zellij') || flag(args, '--install-homebrew') || process.env.SKS_REQUIRE_ZELLIJ === '1';
     const nativeCapabilityDiagnosticsRequested = deepDiagnostics || flag(args, '--repair-native-capabilities');
     const doctorPhaseIds = doctorPhaseIdsForProfile(doctorProfile);

package/dist/core/codex-app/codex-app-fast-ui-repair.js

@@ -4,7 +4,8 @@ import { ensureDir, nowIso, readText, sha256, writeJsonAtomic, writeTextAtomic }
 import { codexHome, scanProjectLocalForbiddenKeys, snapshotCodexAppUiState } from './codex-app-ui-state-snapshot.js';
 import { assertCodexAppUiMutationAllowed } from './codex-app-ui-clobber-guard.js';
 export const CODEX_APP_FAST_UI_REPAIR_SCHEMA = 'sks.codex-app-fast-ui-repair.v1';
-const FAST_UI_TOP_LEVEL_RE = /^\s*service_tier\s*=/;
+const FAST_UI_TOP_LEVEL_RE = /^\s*(?:model|model_reasoning_effort|service_tier)\s*=/;
+const CODEX_APP_MODE_LOCK_TOP_LEVEL_RE = /^\s*(?:model|model_reasoning_effort)\s*=/;
 const FAST_UI_FEATURE_LINE_RE = /^\s*fast_mode\s*=/;
 const FAST_UI_USER_TABLE_LINE_RE = /^\s*(enabled|visible|locked|hidden|disabled)\s*=/;
 const SKS_CAUSED_RE = /(?:SKS|Sneakoscope|codex-lb|sks-mad|sks fast)/i;
@@ -125,10 +126,11 @@ function stripProjectLocalForbiddenKeys(text) {
 }
 function stripSksCausedHostOwnedLines(text) {
     return stripMatchingLines(text, (line, table, previous, next) => {
+        const isCodexAppModeLock = !table && CODEX_APP_MODE_LOCK_TOP_LEVEL_RE.test(line);
         const isFastUiLine = FAST_UI_TOP_LEVEL_RE.test(line)
             || (table === 'features' && FAST_UI_FEATURE_LINE_RE.test(line))
             || (table === 'user.fast_mode' && FAST_UI_USER_TABLE_LINE_RE.test(line));
-        return isFastUiLine && (SKS_CAUSED_RE.test(line) || SKS_CAUSED_RE.test(previous) || SKS_CAUSED_RE.test(next));
+        return isCodexAppModeLock || (isFastUiLine && (SKS_CAUSED_RE.test(line) || SKS_CAUSED_RE.test(previous) || SKS_CAUSED_RE.test(next)));
     });
 }
 function stripMatchingLines(text, shouldRemove) {

package/dist/core/codex-app/codex-app-ui-state-snapshot.js

@@ -4,6 +4,8 @@ import path from 'node:path';
 import { exists, nowIso, readText, sha256, writeJsonAtomic } from '../fsx.js';
 export const CODEX_APP_UI_STATE_SNAPSHOT_SCHEMA = 'sks.codex-app-ui-state-snapshot.v1';
 export const PROJECT_LOCAL_FORBIDDEN_CODEX_KEYS = [
+    'model',
+    'model_reasoning_effort',
     'openai_base_url',
     'chatgpt_base_url',
     'apps_mcp_product_sku',
@@ -15,7 +17,7 @@ export const PROJECT_LOCAL_FORBIDDEN_CODEX_KEYS = [
     'experimental_realtime_ws_base_url',
     'otel'
 ];
-const HOST_OWNED_KEY_RE = /^(?:openai_base_url|chatgpt_base_url|apps_mcp_product_sku|model_provider|model_providers(?:\.|$)|notify|profile|profiles(?:\.|$)|experimental_realtime_ws_base_url|otel(?:\.|$)|features\.fast_mode|service_tier|user\.fast_mode(?:\.|$))/;
+const HOST_OWNED_KEY_RE = /^(?:model|model_reasoning_effort|openai_base_url|chatgpt_base_url|apps_mcp_product_sku|model_provider|model_providers(?:\.|$)|notify|profile|profiles(?:\.|$)|experimental_realtime_ws_base_url|otel(?:\.|$)|features\.fast_mode|service_tier|user\.fast_mode(?:\.|$))/;
 const SECRET_KEY_RE = /(?:key|token|secret|password|credential|cookie|authorization|bearer|refresh|access)/i;
 export function codexHome(input) {
     return path.resolve(String(input?.codexHome || process.env.CODEX_HOME || path.join(os.homedir(), '.codex')));
@@ -35,11 +37,16 @@ export async function snapshotCodexAppUiState(root = process.cwd(), input = {})
     const providerSignals = hostOwnedSignals
         .filter((signal) => signal.provider_related)
         .map((signal) => `${signal.key_path}=${signal.value_preview}`);
-    const fastSelectorLocked = hostOwnedSignals.some((signal) => {
+    const baseConfigHostOwnedSignals = files
+        .filter((file) => !isProfileConfigSnapshotPath(file.path))
+        .flatMap((file) => file.signals.filter((signal) => signal.host_owned));
+    const fastSelectorLocked = baseConfigHostOwnedSignals.some((signal) => {
         if (signal.key_path === 'features.fast_mode' && signal.value_preview === 'false')
             return true;
         if (signal.key_path.startsWith('user.fast_mode') && /hidden|fixed|disabled|false/i.test(signal.value_preview))
             return true;
+        if (signal.key_path === 'model' || signal.key_path === 'model_reasoning_effort')
+            return true;
         if (signal.key_path === 'service_tier' && signal.sks_related)
             return true;
         return false;
@@ -120,7 +127,7 @@ export function scanTomlSignals(text) {
             value_hash: sha256(value),
             line: index + 1,
             host_owned: HOST_OWNED_KEY_RE.test(keyPath),
-            fast_ui_related: /(?:fast_mode|service_tier)/i.test(keyPath) || /(?:fast|priority|default)/i.test(value),
+            fast_ui_related: /(?:fast_mode|service_tier|model_reasoning_effort|^model$)/i.test(keyPath) || /(?:fast|priority|default)/i.test(value),
             provider_related: /(?:provider|base_url|auth|profile|openai|chatgpt|codex-lb)/i.test(lowerPath),
             sks_related: /(?:sks|sneakoscope|codex-lb)/i.test(lineText)
         });
@@ -176,6 +183,10 @@ async function profileConfigFiles(home) {
         return [];
     }
 }
+function isProfileConfigSnapshotPath(file) {
+    const base = path.basename(file);
+    return /^profile-.+\.config\.toml$/.test(base) || /^[A-Za-z0-9_-]+\.config\.toml$/.test(base);
+}
 async function readAuthMetadata(file) {
     const text = await readText(file, null);
     if (text == null)

package/dist/core/codex-app.js

@@ -798,6 +798,8 @@ async function codexFastModeConfigStatus(opts = {}) {
         if (!config.text)
             continue;
         const topLevel = topLevelToml(config.text);
+        if (/(^|\n)\s*model\s*=/.test(topLevel))
+            blockers.push(`${config.scope}:top_level_model`);
         if (/(^|\n)\s*model_reasoning_effort\s*=/.test(topLevel))
             blockers.push(`${config.scope}:top_level_model_reasoning_effort`);
         if (/(^|\n)\s*fast_default_opt_out\s*=\s*true\s*(?:#.*)?(?=\n|$)/.test(tomlTable(config.text, 'notice')))

package/dist/core/init.js

@@ -69,8 +69,7 @@ export function hasTopLevelCodexModeLock(text = '') {
     const lines = String(text || '').split('\n');
     const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
     const top = (firstTable === -1 ? lines : lines.slice(0, firstTable)).join('\n');
-    const model = top.match(/^model\s*=\s*"([^"]+)"/m)?.[1];
-    return (Boolean(model) && model !== 'gpt-5.5') || /^model_reasoning_effort\s*=/m.test(top);
+    return /^model\s*=/.test(top) || /^model_reasoning_effort\s*=/m.test(top);
 }
 export function hasDeprecatedCodexHooksFeatureFlag(text = '') {
     const lines = String(text || '').split('\n');
@@ -590,10 +589,8 @@ export async function initProject(root, opts = {}) {
         let next = removeLegacyTopLevelCodexModeLocks(String(existingContent || '').trimEnd());
         next = removeTomlTableKey(next, 'notice', 'fast_default_opt_out');
         next = removeTomlTableKey(next, 'features', 'codex_hooks');
-        // User-overridable top-level keys: seed defaults only when ABSENT so an
-        // upgrade never clobbers a user's chosen model/service_tier. model_reasoning_effort
-        // is intentionally left untouched at the top level.
-        next = upsertTopLevelTomlStringIfAbsent(next, 'model', 'gpt-5.5');
+        // Model/reasoning defaults live in profiles. Leaving them out of top-level config
+        // keeps Codex Desktop's native model and speed selectors available.
         next = upsertTopLevelTomlBooleanIfAbsent(next, 'suppress_unstable_features_warning', true);
         // Codex App feature flags: SET-IF-ABSENT only (see note above).
         for (const flag of MANAGED_CODEX_FEATURE_FLAGS) {
@@ -704,7 +701,7 @@ export async function initProject(root, opts = {}) {
         return lines.filter((line, index) => {
             if (index >= end)
                 return true;
-            return !/^\s*model_reasoning_effort\s*=/.test(line);
+            return !/^\s*(?:model|model_reasoning_effort)\s*=/.test(line);
         }).join('\n').replace(/^\n+/, '').replace(/\n{3,}/g, '\n\n');
     }
     function removeTopLevelTomlKeyIfValue(text = '', key = '', value = '') {

package/dist/scripts/doctor-fixes-codex-app-fast-ui-check.js

@@ -7,8 +7,8 @@ const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-doctor-fast-ui-'));
 const codexHome = path.join(root, 'home', '.codex');
 await fs.mkdir(path.join(root, '.codex'), { recursive: true });
 await fs.mkdir(codexHome, { recursive: true });
-await fs.writeFile(path.join(root, '.codex', 'config.toml'), 'model_provider = "codex-lb"\n');
-await fs.writeFile(path.join(codexHome, 'config.toml'), '# SKS forced fast UI during legacy install\nmodel_provider = "codex-lb"\nservice_tier = "fast"\n[features]\nfast_mode = false # user disabled, must remain untouched\n\n[profiles.sks-fast-high]\nmodel = "gpt-5.5"\nservice_tier = "fast"\n\n[model_providers.codex-lb]\nname = "OpenAI"\nbase_url = "https://lb.example.test/backend-api/codex"\nwire_api = "responses"\nenv_key = "CODEX_LB_API_KEY"\nsupports_websockets = true\nrequires_openai_auth = false\n');
+await fs.writeFile(path.join(root, '.codex', 'config.toml'), 'model = "gpt-5.5"\nmodel_reasoning_effort = "medium"\nmodel_provider = "codex-lb"\n');
+await fs.writeFile(path.join(codexHome, 'config.toml'), '# SKS forced fast UI during legacy install\nmodel = "z-ai/glm-5.2"\nmodel_reasoning_effort = "xhigh"\nmodel_provider = "codex-lb"\nservice_tier = "fast"\n[features]\nfast_mode = false # user disabled, must remain untouched\n\n[profiles.sks-fast-high]\nmodel = "gpt-5.5"\nservice_tier = "fast"\n\n[model_providers.codex-lb]\nname = "OpenAI"\nbase_url = "https://lb.example.test/backend-api/codex"\nwire_api = "responses"\nenv_key = "CODEX_LB_API_KEY"\nsupports_websockets = true\nrequires_openai_auth = false\n');
 const plan = await repairCodexAppFastUi(root, { codexHome, apply: false });
 const repaired = await repairCodexAppFastUi(root, { codexHome, apply: true });
 const projectAfter = await fs.readFile(path.join(root, '.codex', 'config.toml'), 'utf8');
@@ -26,6 +26,10 @@ const ok = plan.fast_selector === 'manual_action_required'
     && repaired.fast_selector === 'repaired'
     && repaired.safe_auto_apply === true
     && backups.length >= 2
+    && !/^model\s*=/m.test(projectAfter.split(/\n\s*\[/)[0] || '')
+    && !/^model_reasoning_effort\s*=/m.test(projectAfter.split(/\n\s*\[/)[0] || '')
+    && !/^model\s*=/m.test(homeTopLevel)
+    && !/^model_reasoning_effort\s*=/m.test(homeTopLevel)
     && !/model_provider\s*=/.test(projectAfter)
     && !/service_tier\s*=/.test(homeTopLevel)
     && /fast_mode = false/.test(homeAfter)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "4.7.0",
+  "version": "4.7.1",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",