sneakoscope 4.7.0 → 4.7.3

package/dist/scripts/codex-lb-fast-mode-truth-check.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { run } from '../commands/codex-lb.js';
+const calls = [];
+const home = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-codex-lb-fast-truth-'));
+await fs.mkdir(path.join(home, '.codex'), { recursive: true });
+await fs.writeFile(path.join(home, '.codex', 'config.toml'), [
+    'model_provider = "codex-lb"',
+    'service_tier = "fast"',
+    '',
+    '[model_providers.codex-lb]',
+    'name = "openai"',
+    'base_url = "https://lb.example.test/backend-api/codex"',
+    'wire_api = "responses"',
+    'env_key = "CODEX_LB_API_KEY"',
+    'supports_websockets = true',
+    'requires_openai_auth = true',
+    ''
+].join('\n'));
+await fs.writeFile(path.join(home, '.codex', 'auth.json'), `${JSON.stringify({ auth_mode: 'apikey', OPENAI_API_KEY: 'sk-fixture' })}\n`);
+await fs.writeFile(path.join(home, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\nexport CODEX_LB_API_KEY='sk-fixture'\n");
+const chain = await runFastCheck({
+    HOME: home,
+    CODEX_LB_API_KEY: 'sk-fixture',
+    CODEX_LB_BASE_URL: 'https://lb.example.test/backend-api/codex'
+});
+const requestedOnly = await runFastCheck({
+    HOME: home,
+    CODEX_LB_API_KEY: 'sk-fixture',
+    CODEX_LB_BASE_URL: 'https://lb.example.test/backend-api/codex',
+    SKS_TEST_FAST_ACTUAL_DEFAULT: '1'
+});
+const ok = chain.ok === true
+    && chain.status === 'fast_verified'
+    && calls[0]?.body?.service_tier === 'priority'
+    && requestedOnly.ok === false
+    && requestedOnly.status === 'fast_requested_but_actual_unverified'
+    && requestedOnly.blockers.includes('codex_lb_actual_fast_service_tier_unverified');
+console.log(JSON.stringify({
+    schema: 'sks.codex-lb-fast-mode-truth-check.v1',
+    ok,
+    priority_request_sent: calls[0]?.body?.service_tier === 'priority',
+    verified_case: chain,
+    requested_only_case: requestedOnly,
+    blockers: ok ? [] : ['codex_lb_fast_mode_truth_check_failed']
+}, null, 2));
+if (!ok)
+    process.exitCode = 1;
+async function runFastCheck(env) {
+    const originalFetch = globalThis.fetch;
+    const originalEnv = { ...process.env };
+    const outputs = [];
+    const originalWrite = process.stdout.write.bind(process.stdout);
+    const originalExitCode = process.exitCode;
+    try {
+        Object.assign(process.env, env);
+        process.exitCode = 0;
+        globalThis.fetch = async (_url, init) => {
+            const body = JSON.parse(String(init.body || '{}'));
+            calls.push({ body });
+            const id = calls.length % 2 === 1 ? 'resp_fast_1' : 'resp_fast_2';
+            const actual = env.SKS_TEST_FAST_ACTUAL_DEFAULT === '1' ? 'default' : 'priority';
+            return new Response(JSON.stringify({
+                id,
+                requestedServiceTier: 'priority',
+                actualServiceTier: actual,
+                serviceTier: actual
+            }), { status: 200, headers: { 'content-type': 'application/json' } });
+        };
+        process.stdout.write = (chunk) => {
+            outputs.push(String(chunk));
+            return true;
+        };
+        await run(null, ['fast-check', '--json']);
+        return JSON.parse(outputs.join('') || '{}');
+    }
+    finally {
+        globalThis.fetch = originalFetch;
+        process.stdout.write = originalWrite;
+        process.exitCode = originalExitCode;
+        for (const key of Object.keys(process.env)) {
+            if (!(key in originalEnv))
+                delete process.env[key];
+        }
+        Object.assign(process.env, originalEnv);
+    }
+}
+//# sourceMappingURL=codex-lb-fast-mode-truth-check.js.map

package/dist/scripts/codex-lb-setup-truthfulness-check.js

@@ -46,9 +46,14 @@ async function runSetup(name, args, input = 'sk-clb-test\n') {
 }
 {
     const row = await runSetup('no-env', ['--no-env-file']);
+    const actions = row.json.applied_actions?.map((action) => action.type) || [];
     results.push({
         name: 'no_env_file',
-        ok: row.code === 0 && row.json.ok === true && !(await exists(row.envPath))
+        ok: row.code === 0
+            && row.json.status === 'process_env'
+            && row.json.persistence?.applied_modes?.includes('process_only_ephemeral')
+            && !actions.includes('write_env_file')
+            && !(await exists(row.envPath))
     });
 }
 {

package/dist/scripts/doctor-fixes-codex-app-fast-ui-check.js

@@ -7,8 +7,8 @@ const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-doctor-fast-ui-'));
 const codexHome = path.join(root, 'home', '.codex');
 await fs.mkdir(path.join(root, '.codex'), { recursive: true });
 await fs.mkdir(codexHome, { recursive: true });
-await fs.writeFile(path.join(root, '.codex', 'config.toml'), 'model_provider = "codex-lb"\n');
-await fs.writeFile(path.join(codexHome, 'config.toml'), '# SKS forced fast UI during legacy install\nmodel_provider = "codex-lb"\nservice_tier = "fast"\n[features]\nfast_mode = false # user disabled, must remain untouched\n\n[profiles.sks-fast-high]\nmodel = "gpt-5.5"\nservice_tier = "fast"\n\n[model_providers.codex-lb]\nname = "OpenAI"\nbase_url = "https://lb.example.test/backend-api/codex"\nwire_api = "responses"\nenv_key = "CODEX_LB_API_KEY"\nsupports_websockets = true\nrequires_openai_auth = false\n');
+await fs.writeFile(path.join(root, '.codex', 'config.toml'), 'model = "gpt-5.5"\nmodel_reasoning_effort = "medium"\nmodel_provider = "codex-lb"\n');
+await fs.writeFile(path.join(codexHome, 'config.toml'), '# SKS forced fast UI during legacy install\nmodel = "z-ai/glm-5.2"\nmodel_reasoning_effort = "xhigh"\nmodel_provider = "codex-lb"\nservice_tier = "fast"\n[features]\nfast_mode = false # user disabled, must remain untouched\n\n[profiles.sks-fast-high]\nmodel = "gpt-5.5"\nservice_tier = "fast"\n\n[model_providers.codex-lb]\nname = "openai"\nbase_url = "https://lb.example.test/backend-api/codex"\nwire_api = "responses"\nenv_key = "CODEX_LB_API_KEY"\nsupports_websockets = true\nrequires_openai_auth = true\n');
 const plan = await repairCodexAppFastUi(root, { codexHome, apply: false });
 const repaired = await repairCodexAppFastUi(root, { codexHome, apply: true });
 const projectAfter = await fs.readFile(path.join(root, '.codex', 'config.toml'), 'utf8');
@@ -22,10 +22,18 @@ await fs.mkdir(unsafeCodexHome, { recursive: true });
 await fs.writeFile(path.join(unsafeCodexHome, 'config.toml'), 'service_tier = "standard"\n');
 const unsafePlan = await repairCodexAppFastUi(unsafeRoot, { codexHome: unsafeCodexHome, apply: false });
 const ok = plan.fast_selector === 'manual_action_required'
+    && plan.provider_selector === 'manual_action_required'
+    && plan.provider_actions.includes('sks codex-app set-openrouter-key --api-key-stdin')
+    && plan.provider_actions.includes('sks codex-lb setup --host <domain> --api-key-stdin --yes')
     && plan.safe_auto_apply === true
     && repaired.fast_selector === 'repaired'
+    && repaired.provider_selector === 'manual_action_required'
     && repaired.safe_auto_apply === true
     && backups.length >= 2
+    && !/^model\s*=/m.test(projectAfter.split(/\n\s*\[/)[0] || '')
+    && !/^model_reasoning_effort\s*=/m.test(projectAfter.split(/\n\s*\[/)[0] || '')
+    && !/^model\s*=/m.test(homeTopLevel)
+    && !/^model_reasoning_effort\s*=/m.test(homeTopLevel)
     && !/model_provider\s*=/.test(projectAfter)
     && !/service_tier\s*=/.test(homeTopLevel)
     && /fast_mode = false/.test(homeAfter)

package/dist/scripts/gpt-image-2-real-file-smoke.js

@@ -92,7 +92,7 @@ function authState() {
         };
     }
     const codexLb = readCodexLbAuth();
-    if (codexLb.selected && codexLb.provider_configured && codexLb.requires_openai_auth === false && codexLb.key && codexLb.base_url) {
+    if (codexLb.selected && codexLb.provider_configured && codexLb.requires_openai_auth === true && codexLb.key && codexLb.base_url) {
         return {
             ok: true,
             provider: 'openai_responses_image_generation',
@@ -102,7 +102,7 @@ function authState() {
             codex_lb: {
                 selected: true,
                 provider_configured: true,
-                requires_openai_auth: false,
+                requires_openai_auth: true,
                 base_url: codexLb.base_url,
                 env_key: codexLb.env_key,
                 env_path: codexLb.env_path,

package/dist/scripts/provider-context-config-toml-check.js

@@ -10,11 +10,11 @@ const codexLbConfig = [
     'model_provider = "codex-lb"',
     '',
     '[model_providers.codex-lb]',
-    'name = "OpenAI"',
+    'name = "openai"',
     'base_url = "https://lb.example.test"',
     'wire_api = "responses"',
     'env_key = "CODEX_LB_API_KEY"',
-    'requires_openai_auth = false',
+    'requires_openai_auth = true',
     ''
 ].join('\n');
 await fs.writeFile(path.join(codexHome, 'config.toml'), codexLbConfig);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "4.7.0",
+  "version": "4.7.3",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -114,6 +114,7 @@
     "codex-app:fast-ui-preservation": "node ./dist/scripts/codex-app-fast-ui-preservation-check.js",
     "codex-app:ui-clobber-guard": "node ./dist/scripts/codex-app-ui-clobber-guard-check.js",
     "doctor:fixes-codex-app-fast-ui": "node ./dist/scripts/doctor-fixes-codex-app-fast-ui-check.js",
+    "codex-app:provider-model-ui": "node ./dist/scripts/codex-app-provider-model-ui-check.js",
     "mad-sks:app-ui-no-mutation": "node ./dist/scripts/mad-sks-app-ui-no-mutation-check.js",
     "provider:badge-context": "node ./dist/scripts/provider-badge-context-check.js",
     "provider:context-config-toml": "node ./dist/scripts/provider-context-config-toml-check.js",
@@ -303,6 +304,7 @@
     "codex-lb:setup-truthfulness": "node ./dist/scripts/codex-lb-setup-truthfulness-check.js",
     "codex-lb:persistence-truth": "node ./dist/scripts/codex-lb-persistence-truth-check.js",
     "codex-lb:missing-env-regression": "node ./dist/scripts/codex-lb-missing-env-regression.js",
+    "codex-lb:fast-mode-truth": "node ./dist/scripts/codex-lb-fast-mode-truth-check.js",
     "computer-use:policy-check": "node ./dist/scripts/computer-use-policy-check.js",
     "computer-use:visual-route-fixture": "node ./dist/scripts/computer-use-visual-route-fixture-check.js",
     "computer-use:live-optional": "node ./dist/scripts/computer-use-live-optional-check.js",