sneakoscope 6.1.0 → 6.2.0

package/dist/cli/install-helpers.js

@@ -17,6 +17,7 @@ import { cleanupMacLaunchSecretEnvironment } from '../core/codex-app/sks-menubar
 import { recordCodexLbHealthEvent } from '../core/codex-lb-circuit.js';
 import { loadCodexLbEnv, writeCodexLbKeychain, codexLbMetadataPath } from '../core/codex-lb/codex-lb-env.js';
 import { codexLbToolCatalogPath, ensureCodexLbToolCatalog } from '../core/codex-lb/codex-lb-tool-catalog.js';
+import { codexLbToolOutputRecoveryNotChecked, codexLbToolOutputRecoveryNotSelected, codexLbToolOutputRecoveryOverrideAcknowledged, probeCodexLbToolOutputRecovery } from '../core/codex-lb/codex-lb-tool-output-recovery.js';
 import { GLM_CODEX_CONFIG_PROFILE_ID, GLM_CODEX_CONFIG_PROVIDER_ID, GLM_CODEX_CONFIG_REASONING_PROFILES } from '../core/providers/glm/glm-52-profile.js';
 import { GLM_52_OPENROUTER_MODEL } from '../core/providers/glm/glm-52-settings.js';
 import { buildCodexLbSetupPlan, codexLbPersistenceSummary, installCodexLbShellProfileSnippet, selectedCodexLbPersistenceModes } from '../core/codex-lb/codex-lb-setup.js';
@@ -24,6 +25,8 @@ import { extractTomlTable, writeCodexConfigGuarded } from '../core/codex/codex-c
 import { ensureGlobalCodexFastModeDuringInstall, ensureTrailingNewline, normalizeCodexFastModeUiConfig, removeTopLevelTomlKeyIfValue, safeWriteCodexConfigToml, upsertTopLevelTomlString, upsertTomlTable } from '../core/codex-runtime/codex-desktop-config-policy.js';
 import { runPostinstallGlobalDoctorAndMarkPending } from '../core/update/update-migration-state.js';
 import { repairCodexImagegen } from '../core/doctor/imagegen-repair.js';
+import { canAskYesNo, compareVersions, hasCodexUnstableFeatureWarningSuppression, hasDeprecatedCodexHooksFeatureFlag, hasTopLevelCodexModeLock, isProjectSetupCandidate } from './install-tool-helpers.js';
+export { checkContext7, ensureCodexCliTool, ensureMadLaunchDependencies, ensureRelatedCliTools, ensureZellijCliTool, formatMadLaunchDependencyAction, maybePromptCodexUpdateForLaunch, maybePromptSksUpdateForLaunch, shouldAutoApproveInstall } from './install-tool-helpers.js';
 export { codexFastModeDesktopStatus, ensureGlobalCodexFastModeDuringInstall, normalizeCodexFastModeUiConfig, safeWriteCodexConfigToml } from '../core/codex-runtime/codex-desktop-config-policy.js';
 const CODEX_LB_PROVIDER_NAME = 'openai';
 const CODEX_LB_PROVIDER_ENV_KEY = 'CODEX_LB_API_KEY';
@@ -515,6 +518,26 @@ export async function configureCodexLb(opts = {}) {
         return { ok: false, status: 'invalid_host_or_base_url', config_path: configPath, env_path: envPath, error: 'host_or_base_url_contains_whitespace_or_control_character' };
     if (!apiKey)
         return { ok: false, status: 'missing_api_key', config_path: configPath, env_path: envPath };
+    const toolOutputRecovery = await probeCodexLbToolOutputRecovery({
+        baseUrl,
+        ...(typeof opts.toolOutputRecoveryFetch === 'function' ? { fetchImpl: opts.toolOutputRecoveryFetch } : {}),
+        timeoutMs: Number(opts.toolOutputRecoveryTimeoutMs || 4_000),
+        allowUnverified: opts.allowUnverifiedToolOutputRecovery === true
+            || codexLbToolOutputRecoveryOverrideAcknowledged({ env: opts.env || process.env })
+    });
+    if (!toolOutputRecovery.ok) {
+        return {
+            ok: false,
+            status: 'tool_output_recovery_blocked',
+            plan: plan,
+            config_path: configPath,
+            env_path: envPath,
+            base_url: baseUrl,
+            tool_output_recovery: toolOutputRecovery,
+            drift: toolOutputRecovery.blockers,
+            warnings: toolOutputRecovery.warnings
+        };
+    }
     const insecureLocalWarning = /^http:\/\//i.test(baseUrl) && !/^http:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::|\/|$)/i.test(baseUrl) && !opts.allowInsecureHttp
         ? ['codex-lb base URL uses http outside localhost; prefer https or pass an explicit allow flag in the calling surface.']
         : [];
@@ -628,6 +651,7 @@ export async function configureCodexLb(opts = {}) {
         codex_environment: codexEnvironment,
         codex_login: codexLogin,
         tool_catalog: toolCatalog,
+        tool_output_recovery: toolOutputRecovery,
         error: authReconcile.error || codexEnvironment.error || codexLogin.error || null
     };
 }
@@ -667,8 +691,22 @@ export async function codexLbStatus(opts = {}) {
         status: 'inspect_failed',
         error: err.message
     }));
+    const providerReady = providerContractOk && envKeyConfigured && Boolean(baseUrl) && authMode.codex_app_usable;
+    const probeToolOutputRecovery = opts.probeToolOutputRecovery === true;
+    const toolOutputRecovery = !selected
+        ? codexLbToolOutputRecoveryNotSelected()
+        : !probeToolOutputRecovery
+            ? codexLbToolOutputRecoveryNotChecked(true)
+            : await probeCodexLbToolOutputRecovery({
+                baseUrl,
+                ...(typeof opts.toolOutputRecoveryFetch === 'function' ? { fetchImpl: opts.toolOutputRecoveryFetch } : {}),
+                timeoutMs: Number(opts.toolOutputRecoveryTimeoutMs || 4_000),
+                allowUnverified: opts.allowUnverifiedToolOutputRecovery === true
+                    || codexLbToolOutputRecoveryOverrideAcknowledged({ env: opts.env || process.env })
+            });
     return {
-        ok: providerContractOk && envKeyConfigured && Boolean(baseUrl) && authMode.codex_app_usable,
+        ok: providerReady && (!selected || !probeToolOutputRecovery || toolOutputRecovery.ok),
+        provider_ready: providerReady,
         config_path: configPath,
         env_path: envPath,
         provider_configured: providerConfigured,
@@ -699,7 +737,8 @@ export async function codexLbStatus(opts = {}) {
         auth_usable_for_codex_app: authMode.codex_app_usable || codexAppUsableWithCodexLb,
         auth_summary: codexAppUsableWithCodexLb ? `codex-lb provider uses ${authMode.mode} OpenAI-style auth through Codex App` : authMode.summary,
         fast_mode: fastMode,
-        launch_environment: launchEnvironment
+        launch_environment: launchEnvironment,
+        tool_output_recovery: toolOutputRecovery
     };
 }
 export function formatCodexLbStatusText(status = {}, opts = {}) {
@@ -714,6 +753,14 @@ export function formatCodexLbStatusText(status = {}, opts = {}) {
         `Provider OpenAI Auth: ${status.provider_requires_openai_auth ? 'required' : 'not required/drifted'} (${status.provider_name || 'missing'})`,
         `Codex App auth: ${status.auth_usable_for_codex_app ? 'ok' : 'needs sign-in/repair'} (${status.auth_mode || 'unknown'})`
     ];
+    if (status.tool_output_recovery?.status && status.tool_output_recovery.status !== 'not_selected') {
+        const recovery = status.tool_output_recovery;
+        lines.push(`Interrupted tool-output recovery: ${recovery.ok ? 'ready' : 'blocked'} (${recovery.observed_version || recovery.status}; minimum ${recovery.minimum_version})`);
+        if (!recovery.ok) {
+            for (const action of recovery.operator_actions || [])
+                lines.push(`  action: ${action}`);
+        }
+    }
     if (status.auth_summary)
         lines.push(`Auth detail: ${status.auth_summary}`);
     if (status.fast_mode) {
@@ -1088,17 +1135,39 @@ function tomlTableString(text = '', table, key) {
     return block.match(new RegExp(`(^|\\n)\\s*${escapeRegExp(key)}\\s*=\\s*"([^"]+)"\\s*(?:#.*)?(?=\\n|$)`))?.[2] || '';
 }
 export async function repairCodexLbAuth(opts = {}) {
-    let status = await codexLbStatus(opts);
+    let status = await codexLbStatus({
+        ...opts,
+        probeToolOutputRecovery: true,
+        allowUnverifiedToolOutputRecovery: opts.allowUnverifiedToolOutputRecovery === true
+    });
     let configRepaired = false;
     let legacyAuthMigrated = false;
     let legacyAuthPath = null;
+    const toolOutputRecovery = status.base_url
+        ? await probeCodexLbToolOutputRecovery({
+            baseUrl: status.base_url,
+            ...(typeof opts.toolOutputRecoveryFetch === 'function' ? { fetchImpl: opts.toolOutputRecoveryFetch } : {}),
+            timeoutMs: Number(opts.toolOutputRecoveryTimeoutMs || 4_000),
+            allowUnverified: opts.allowUnverifiedToolOutputRecovery === true
+                || codexLbToolOutputRecoveryOverrideAcknowledged({ env: opts.env || process.env })
+        })
+        : status.tool_output_recovery;
+    if (status.base_url && toolOutputRecovery?.ok !== true) {
+        return {
+            ok: false,
+            status: 'tool_output_recovery_blocked',
+            codex_lb: status,
+            tool_output_recovery: toolOutputRecovery,
+            error: toolOutputRecovery?.blockers?.join(', ') || 'codex-lb interrupted tool-output recovery is unverified'
+        };
+    }
     const currentConfig = await readText(status.config_path, '');
     if (!status.env_key_configured && status.base_url && (status.provider_configured || status.selected || status.env_base_url_configured)) {
         const legacyAuth = await restoreCodexLbEnvFromSharedLogin(status, opts);
         if (legacyAuth.ok) {
             legacyAuthMigrated = true;
             legacyAuthPath = legacyAuth.auth_path;
-            status = await codexLbStatus(opts);
+            status = await codexLbStatus({ ...opts, probeToolOutputRecovery: true });
         }
     }
     if (status.env_key_configured && status.base_url && (!status.provider_contract_ok || !status.selected || legacyAuthMigrated || hasTopLevelCodexModeLock(currentConfig) || (opts.forceCodexLbApiKeyAuth === true && !status.ok))) {
@@ -1109,7 +1178,7 @@ export async function repairCodexLbAuth(opts = {}) {
         });
         const safeWrite = await safeWriteCodexConfigToml(status.config_path, currentConfig, next, 'codex-lb-repair');
         configRepaired = safeWrite.ok && safeWrite.changed === true;
-        status = await codexLbStatus(opts);
+        status = await codexLbStatus({ ...opts, probeToolOutputRecovery: true });
     }
     const canRepairAuthMode = opts.forceCodexLbApiKeyAuth === true && status.provider_contract_ok && status.env_key_configured && Boolean(status.base_url);
     if (!status.ok && !canRepairAuthMode) {
@@ -1135,7 +1204,7 @@ export async function repairCodexLbAuth(opts = {}) {
     const codexLogin = forceCodexLbApiKeyAuth
         ? { ok: ['apikey_forced', 'apikey_auth_active'].includes(authReconcile.status), status: authReconcile.status, ...(authReconcile.reason ? { reason: authReconcile.reason } : {}), error: authReconcile.error || null }
         : await maybeSyncCodexLbSharedLogin(apiKey, { ...opts, home: opts.home || process.env.HOME || os.homedir(), force: true });
-    const finalStatus = await codexLbStatus(opts);
+    const finalStatus = await codexLbStatus({ ...opts, probeToolOutputRecovery: true });
     const ok = Boolean(codexEnvironment.ok && codexLogin.ok && (toolCatalog.required === false || toolCatalog.ok === true));
     return {
         ok,
@@ -1666,7 +1735,24 @@ async function rollbackCodexAuthRestore(input) {
 export async function maybePromptCodexLbSetupForLaunch(args = [], opts = {}) {
     if (args.includes('--json') || args.includes('--skip-codex-lb') || process.env.SKS_SKIP_CODEX_LB_PROMPT === '1')
         return { status: 'skipped' };
-    let status = await codexLbStatus(opts);
+    const allowUnverifiedToolOutputRecovery = opts.allowUnverifiedToolOutputRecovery === true
+        || codexLbToolOutputRecoveryOverrideAcknowledged({ args, env: opts.env || process.env });
+    let status = await codexLbStatus({
+        ...opts,
+        probeToolOutputRecovery: true,
+        allowUnverifiedToolOutputRecovery
+    });
+    if (status.selected && status.tool_output_recovery?.ok !== true) {
+        return {
+            status: 'tool_output_recovery_blocked',
+            ok: false,
+            codex_lb: status,
+            tool_output_recovery: status.tool_output_recovery,
+            blockers: status.tool_output_recovery.blockers,
+            operator_actions: status.tool_output_recovery.operator_actions,
+            bypass_codex_lb: false
+        };
+    }
     if (status.env_key_configured && status.base_url && !status.selected && status.auth_mode === 'chatgpt_oauth') {
         return { status: 'continued_to_codex', ok: false, chain_health: null, codex_lb: status, reason: 'chatgpt_oauth_active_codex_lb_unselected' };
     }
@@ -1678,8 +1764,20 @@ export async function maybePromptCodexLbSetupForLaunch(args = [], opts = {}) {
             if (/^(n|no|아니|아니요|ㄴ)$/i.test(restore))
                 return { status: 'continued_to_codex', codex_lb: status };
         }
-        const repaired = await repairCodexLbAuth(opts);
-        status = await codexLbStatus(opts);
+        const repaired = await repairCodexLbAuth({ ...opts, allowUnverifiedToolOutputRecovery });
+        status = await codexLbStatus({ ...opts, probeToolOutputRecovery: true, allowUnverifiedToolOutputRecovery });
+        if (status.selected && status.tool_output_recovery?.ok !== true) {
+            return {
+                status: 'tool_output_recovery_blocked',
+                ok: false,
+                repair: repaired,
+                codex_lb: status,
+                tool_output_recovery: status.tool_output_recovery,
+                blockers: status.tool_output_recovery.blockers,
+                operator_actions: status.tool_output_recovery.operator_actions,
+                bypass_codex_lb: false
+            };
+        }
         if (!status.ok)
             return { status: 'repair_failed', ok: false, repair: repaired, codex_lb: status };
         if (!repaired.ok && repaired.error && promptedRestore)
@@ -1746,7 +1844,7 @@ export async function maybePromptCodexLbSetupForLaunch(args = [], opts = {}) {
         return { status: 'continued_to_codex' };
     const host = (await askPostinstallQuestion('codex-lb host domain [http://127.0.0.1:2455]: ')).trim() || 'http://127.0.0.1:2455';
     const apiKey = (await askPostinstallQuestion('codex-lb API key: ')).trim();
-    const configured = await configureCodexLb({ ...opts, host, apiKey });
+    const configured = await configureCodexLb({ ...opts, host, apiKey, allowUnverifiedToolOutputRecovery });
     if (configured.ok)
         console.log(`codex-lb configured: ${configured.base_url}`);
     else
@@ -1822,9 +1920,14 @@ async function inspectCodexLbMacLaunchEnvironment(baseUrl = '', opts = {}) {
         const result = await runProcess(launchctl, ['getenv', key], { timeoutMs: 3000, maxOutputBytes: 8192 });
         return result.code === 0 ? String(result.stdout || '').trim() : '';
     };
-    const currentBaseUrl = await readVar('CODEX_LB_BASE_URL');
-    const currentApiKey = await readVar('CODEX_LB_API_KEY');
-    const currentOpenRouterKey = await readVar('OPENROUTER_API_KEY');
+    // launchctl can stall behind the same launchd/TCC boundary for every key.
+    // These reads are independent, so keep the worst case to one timeout window
+    // instead of three serial windows on `sks --mad` preflight.
+    const [currentBaseUrl, currentApiKey, currentOpenRouterKey] = await Promise.all([
+        readVar('CODEX_LB_BASE_URL'),
+        readVar('CODEX_LB_API_KEY'),
+        readVar('OPENROUTER_API_KEY')
+    ]);
     const baseMatches = !baseUrl || currentBaseUrl === String(baseUrl || '').trim();
     const basePresent = Boolean(currentBaseUrl);
     const keyPresent = Boolean(currentApiKey);
@@ -2342,273 +2445,6 @@ export async function ensureCodexImagegenDuringInstall(opts = {}) {
         return { status: 'recovered', report };
     return { status: 'blocked', blockers: report.blockers || ['codex_imagegen_unavailable'], report };
 }
-export async function ensureRelatedCliTools(args = []) {
-    const skip = args.includes('--skip-cli-tools') || process.env.SKS_SKIP_CLI_TOOLS === '1';
-    const codex = await ensureCodexCliTool({ skip, args });
-    const zellijRepair = skip ? { status: 'skipped', reason: 'SKS_SKIP_CLI_TOOLS=1 or --skip-cli-tools' } : await ensureZellijCliTool(args);
-    const zellij = await checkZellijCapability({ require: false, writeReport: false });
-    return {
-        codex,
-        zellij: {
-            ok: zellij.status === 'ok',
-            bin: zellij.bin,
-            version: zellij.version,
-            min_version: zellij.min_version,
-            current_session: false,
-            repair: zellijRepair,
-            install_hint: zellij.status === 'ok' ? null : zellijInstallHint(),
-            error: zellijRepair.error || zellij.blockers[0] || zellij.warnings[0] || null
-        }
-    };
-}
-export async function ensureMadLaunchDependencies(args = []) {
-    const skip = args.includes('--skip-cli-tools') || process.env.SKS_SKIP_CLI_TOOLS === '1';
-    const zellijRepair = skip ? { target: 'zellij', status: 'skipped', reason: 'SKS_SKIP_CLI_TOOLS=1 or --skip-cli-tools' } : await ensureZellijCliTool(args);
-    const zellij = await checkZellijCapability({ require: false, writeReport: false });
-    const ready = zellij.status === 'ok';
-    return {
-        ready,
-        actions: ready ? [] : [{
-                target: 'zellij',
-                status: zellijRepair.status,
-                command: zellijRepair.command || zellijInstallHint(),
-                error: zellijRepair.error || zellij.blockers[0] || zellij.warnings[0] || null,
-                repair: zellijRepair
-            }],
-        status: {
-            zellij: {
-                ok: ready,
-                status: zellij.status,
-                version: zellij.version,
-                min_version: zellij.min_version,
-                repair: zellijRepair,
-                install_hint: ready ? null : zellijInstallHint()
-            }
-        }
-    };
-}
-export function formatMadLaunchDependencyAction(action = {}) {
-    const command = action.command ? ` Run: ${action.command}.` : '';
-    const error = action.error ? ` ${action.error}` : '';
-    return `${action.target || 'dependency'} ${action.status || 'blocked'}.${command}${error}`.trim();
-}
-export async function ensureCodexCliTool({ skip = false, args = [] } = {}) {
-    if (skip)
-        return { status: 'skipped', reason: 'SKS_SKIP_CLI_TOOLS=1 or --skip-cli-tools' };
-    const before = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    if (before.bin)
-        return { status: 'present', bin: before.bin, version: before.version || null };
-    const npmBin = await which('npm');
-    if (!npmBin)
-        return { status: 'failed', error: 'npm not found on PATH; install Codex CLI manually with npm i -g @openai/codex@latest.' };
-    const command = 'npm i -g @openai/codex@latest';
-    if (args.includes('--dry-run'))
-        return { status: 'dry_run', command, error: 'Codex CLI not found on PATH.' };
-    if (!await confirmInstallYesDefault(`Codex CLI is missing. Install latest Codex CLI with ${command}?`, args)) {
-        return { status: 'needs_approval', command, error: 'Codex CLI not found on PATH.' };
-    }
-    // Global package install is a confirmation-required mutation: route it through
-    // the mutation guard so it is scope-checked and recorded in the ledger. The
-    // user already approved via confirmInstallYesDefault above (confirmed:true).
-    const installRoot = globalSksRoot();
-    const installContract = createRequestedScopeContract({
-        route: 'install', userRequest: command, projectRoot: installRoot, overrides: { package_install: true }
-    });
-    const install = await guardedPackageInstall(guardContextForRoute(installRoot, installContract, command), '@openai/codex@latest', { confirmed: true, command: npmBin, args: ['i', '-g', '@openai/codex@latest'], timeoutMs: 120000 }).catch((err) => ({ code: 1, stdout: '', stderr: err.message }));
-    if (install.code !== 0) {
-        return { status: 'failed', error: `${install.stderr || install.stdout || 'npm i -g @openai/codex@latest failed'}`.trim() };
-    }
-    const after = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    return {
-        status: after.bin ? 'installed' : 'installed_not_on_path',
-        bin: after.bin || null,
-        version: after.version || null,
-        hint: after.bin ? null : 'npm completed, but codex is not on PATH. Restart the shell or set SKS_CODEX_BIN.'
-    };
-}
-export async function ensureZellijCliTool(args = [], opts = {}) {
-    const before = await checkZellijCapability({ require: false, writeReport: false });
-    if (before.status === 'ok')
-        return { target: 'zellij', status: 'present', bin: before.bin, version: before.version || null };
-    const command = zellijInstallHint();
-    if (process.platform !== 'darwin')
-        return { target: 'zellij', status: 'manual_required', command, error: before.blockers[0] || before.warnings[0] || 'zellij not found' };
-    const brew = await which('brew').catch(() => null);
-    if (!brew)
-        return { target: 'zellij', status: 'manual_required', command: 'Install Homebrew, then run: brew install zellij', error: before.blockers[0] || before.warnings[0] || 'zellij not found' };
-    const repairCommand = command;
-    if (args.includes('--dry-run') || opts.dryRun)
-        return { target: 'zellij', status: 'dry_run', command: repairCommand, error: before.blockers[0] || before.warnings[0] || null };
-    const hasInstalledZellij = Boolean(before.version);
-    const question = hasInstalledZellij
-        ? `Homebrew Zellij ${before.version || 'unknown'} is not ready. Upgrade to latest Zellij with ${repairCommand}?`
-        : `Zellij is missing. Install latest Zellij with ${repairCommand}?`;
-    if (!await confirmInstallYesDefault(question, args))
-        return { target: 'zellij', status: 'needs_approval', command: repairCommand, error: before.blockers[0] || before.warnings[0] || null };
-    const brewArgs = hasInstalledZellij ? ['upgrade', 'zellij'] : ['install', 'zellij'];
-    const zellijRoot = globalSksRoot();
-    const zellijContract = createRequestedScopeContract({
-        route: 'install', userRequest: repairCommand, projectRoot: zellijRoot, overrides: { package_install: true, zellij_install: true }
-    });
-    const install = await guardedPackageInstall(guardContextForRoute(zellijRoot, zellijContract, repairCommand), 'zellij', { confirmed: true, command: brew, args: brewArgs, timeoutMs: 180000 }).catch((err) => ({ code: 1, stdout: '', stderr: err.message }));
-    if (install.code !== 0)
-        return { target: 'zellij', status: 'failed', command: repairCommand, error: `${install.stderr || install.stdout || repairCommand + ' failed'}`.trim() };
-    const after = await checkZellijCapability({ require: false, writeReport: false });
-    if (after.status !== 'ok')
-        return { target: 'zellij', status: 'installed_not_ready', command: repairCommand, error: after.blockers[0] || after.warnings[0] || 'zellij installed but not ready' };
-    return { target: 'zellij', status: hasInstalledZellij ? 'upgraded' : 'installed', command: repairCommand, bin: after.bin, version: after.version || null };
-}
-function zellijInstallHint() {
-    return process.platform === 'darwin' ? 'brew install zellij' : 'Install Zellij from https://zellij.dev/documentation/installation.html';
-}
-async function confirmInstallYesDefault(question, args = []) {
-    if (hasFlag(args, '--from-postinstall') && process.env.SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS !== '1')
-        return false;
-    if (shouldAutoApproveInstall(args))
-        return true;
-    if (!canAskYesNo())
-        return false;
-    const answer = (await askPostinstallQuestion(`${question} [Y/n] `)).trim();
-    return answer === '' || /^(y|yes|예|네|응)$/i.test(answer);
-}
-export async function maybePromptCodexUpdateForLaunch(args = [], opts = {}) {
-    if (hasFlag(args, '--json') || hasFlag(args, '--skip-cli-tools') || hasFlag(args, '--skip-codex-update') || process.env.SKS_SKIP_CODEX_UPDATE === '1')
-        return { status: 'skipped' };
-    const latest = await npmPackageVersion('@openai/codex');
-    const codex = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    const current = codexCliVersionNumber(codex.version);
-    const command = 'npm i -g @openai/codex@latest';
-    const label = opts.label || 'Zellij launch';
-    const missing = !codex.bin;
-    const updateAvailable = Boolean(latest.version && current && compareVersions(latest.version, current) > 0);
-    if (!missing && !updateAvailable)
-        return { status: 'current', latest: latest.version || null, current, bin: codex.bin || null, error: latest.error || null };
-    const prompt = missing
-        ? `Codex CLI missing. Install @openai/codex${latest.version ? ` ${latest.version}` : '@latest'} before ${label}? [Y/n] `
-        : `Codex CLI ${current} -> ${latest.version} update before ${label}? [Y/n] `;
-    if (shouldAutoApproveInstall(args))
-        return installCodexLatest(command, latest.version, current);
-    if (!canAskYesNo()) {
-        const reason = missing ? 'Codex CLI missing' : `Codex CLI update available: ${current} -> ${latest.version}`;
-        console.log(`${reason}. Run: ${command}`);
-        return { status: missing ? 'missing' : 'available', latest: latest.version || null, current, command, bin: codex.bin || null };
-    }
-    const answer = (await askPostinstallQuestion(prompt)).trim();
-    const yes = answer === '' || /^(y|yes|예|네|응)$/i.test(answer);
-    if (!yes)
-        return { status: 'skipped_by_user', latest: latest.version || null, current, command, bin: codex.bin || null };
-    return installCodexLatest(command, latest.version, current);
-}
-export async function maybePromptSksUpdateForLaunch(args = [], opts = {}) {
-    void args;
-    void opts;
-    return {
-        status: 'skipped',
-        reason: 'manual_update_commands_only',
-        current: PACKAGE_VERSION,
-        latest: null,
-        command: null
-    };
-}
-export function shouldAutoApproveInstall(args = [], env = process.env) {
-    if (hasFlag(args, '--from-postinstall') && env.SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS !== '1')
-        return false;
-    if (hasFlag(args, '--from-postinstall') && env.SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS === '1')
-        return true;
-    return hasFlag(args, '--yes') || hasFlag(args, '-y') || isAgentRuntime(env);
-}
-function canAskYesNo() {
-    return Boolean(input.isTTY && output.isTTY && process.env.CI !== 'true');
-}
-function hasFlag(args = [], name) {
-    return args.includes(name);
-}
-function isAgentRuntime(env = process.env) {
-    return [
-        'SKS_OPENCLAW',
-        'OPENCLAW',
-        'OPENCLAW_AGENT',
-        'OPENCLAW_RUN_ID',
-        'OPENCLAW_SESSION_ID',
-        'SKS_HERMES',
-        'HERMES_AGENT',
-        'HERMES_RUN_ID',
-        'HERMES_SESSION_ID'
-    ]
-        .some((key) => /^(1|true|yes|y)$/i.test(String(env[key] || '').trim()));
-}
-async function installCodexLatest(command, latestVersion, previousVersion = null) {
-    const npm = await which('npm').catch(() => null);
-    if (!npm)
-        return { status: 'failed', latest: latestVersion || null, previous: previousVersion || null, command, error: 'npm not found on PATH' };
-    const install = await runProcess(npm, ['i', '-g', '@openai/codex@latest'], { timeoutMs: 180000, maxOutputBytes: 128 * 1024 }).catch((err) => ({ code: 1, stdout: '', stderr: err.message }));
-    if (install.code !== 0)
-        return { status: 'failed', latest: latestVersion || null, previous: previousVersion || null, command, error: `${install.stderr || install.stdout || command + ' failed'}`.trim() };
-    const after = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    const afterVersion = codexCliVersionNumber(after.version);
-    if (!after.bin)
-        return { status: 'updated_not_reflected', latest: latestVersion || null, previous: previousVersion || null, version: afterVersion || null, command, error: 'npm completed, but codex is not on PATH. Restart the shell or set SKS_CODEX_BIN.' };
-    if (latestVersion && afterVersion && compareVersions(afterVersion, latestVersion) < 0) {
-        return { status: 'updated_not_reflected', latest: latestVersion, previous: previousVersion || null, version: afterVersion, bin: after.bin, command, error: `npm completed, but PATH still resolves Codex CLI ${afterVersion}; expected ${latestVersion}.` };
-    }
-    console.log(`Codex CLI ready: ${previousVersion || 'missing'} -> ${after.version || after.bin}`);
-    return { status: previousVersion ? 'updated' : 'installed', latest: latestVersion || null, previous: previousVersion || null, version: afterVersion || null, raw_version: after.version || null, bin: after.bin || null, command };
-}
-function codexCliVersionNumber(versionText = '') {
-    const match = String(versionText || '').match(/(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)/);
-    return match ? match[1] : null;
-}
-async function npmPackageVersion(name) {
-    const envName = `SKS_NPM_VIEW_${String(name || '').replace(/[^A-Za-z0-9]+/g, '_').toUpperCase()}_VERSION`;
-    if (process.env[envName])
-        return { version: process.env[envName] };
-    const npm = await which('npm').catch(() => null);
-    if (!npm)
-        return { error: 'npm not found' };
-    const result = await runProcess(npm, ['view', name, 'version'], { timeoutMs: 5000, maxOutputBytes: 4096 });
-    if (result.code !== 0)
-        return { error: `${result.stderr || result.stdout || 'npm view failed'}`.trim() };
-    return { version: result.stdout.trim().split(/\s+/).pop() };
-}
-function compareVersions(a, b) {
-    const pa = String(a || '').split(/[.-]/).map((x) => Number.parseInt(x, 10) || 0);
-    const pb = String(b || '').split(/[.-]/).map((x) => Number.parseInt(x, 10) || 0);
-    for (let i = 0; i < Math.max(pa.length, pb.length, 3); i++) {
-        if ((pa[i] || 0) > (pb[i] || 0))
-            return 1;
-        if ((pa[i] || 0) < (pb[i] || 0))
-            return -1;
-    }
-    return 0;
-}
-async function isProjectSetupCandidate(root) {
-    const markers = ['package.json', '.git', 'AGENTS.md', '.codex', '.sneakoscope'];
-    for (const marker of markers) {
-        if (await exists(path.join(root, marker)))
-            return true;
-    }
-    return false;
-}
-export async function checkContext7(root) {
-    const projectPath = path.join(root, '.codex', 'config.toml');
-    const globalPath = path.join(process.env.HOME || '', '.codex', 'config.toml');
-    const projectText = await safeReadText(projectPath);
-    const globalText = await safeReadText(globalPath);
-    const codex = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    let list = { checked: false, ok: false, stdout: '', stderr: '' };
-    if (codex.bin) {
-        const out = await runProcess(codex.bin, ['mcp', 'list'], { timeoutMs: 8000, maxOutputBytes: 32 * 1024 }).catch((err) => ({ code: 1, stderr: err.message, stdout: '' }));
-        list = { checked: true, ok: out.code === 0 && /context7/i.test(`${out.stdout}\n${out.stderr}`), stdout: out.stdout || '', stderr: out.stderr || '' };
-    }
-    const result = {
-        ok: false,
-        project: { path: projectPath, ok: hasContext7ConfigText(projectText) },
-        global: { path: globalPath, ok: hasContext7ConfigText(globalText) },
-        codex_mcp_list: list
-    };
-    result.ok = result.project.ok || result.codex_mcp_list.ok || (result.global.ok && !list.checked);
-    return result;
-}
 export async function ensureProjectContext7Config(root, transport = 'local') {
     const configPath = path.join(root, '.codex', 'config.toml');
     await ensureDir(path.dirname(configPath));
@@ -3234,30 +3070,4 @@ export async function selftestCodexLb(tmp) {
     if (!madLaunchSource.includes('const lb = await deps.maybePromptCodexLbSetupForLaunch(args)') || !madLaunchSource.includes("const launchLb = lb.status === 'present'") || !madLaunchSource.includes('codexLbImmediateLaunchOpts(cleanArgs, launchLb') || !madLaunchSource.includes('bypass_codex_lb') || !madLaunchSource.includes('model_provider="openai"') || !madLaunchSource.includes('codexLbFreshSession: true'))
         throw new Error('selftest: MAD launch does not sync codex-lb auth and fresh-session launch options');
 }
-function hasTopLevelCodexModeLock(text = '') {
-    const lines = String(text || '').split('\n');
-    const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
-    const top = (firstTable === -1 ? lines : lines.slice(0, firstTable)).join('\n');
-    return /(^|\n)\s*model_reasoning_effort\s*=/.test(top);
-}
-function hasDeprecatedCodexHooksFeatureFlag(text = '') {
-    const lines = String(text || '').split('\n');
-    const start = lines.findIndex((line) => line.trim() === '[features]');
-    if (start === -1)
-        return false;
-    let end = lines.length;
-    for (let i = start + 1; i < lines.length; i += 1) {
-        const line = lines[i];
-        if (line === undefined)
-            continue;
-        if (/^\s*\[.+\]\s*$/.test(line)) {
-            end = i;
-            break;
-        }
-    }
-    return lines.slice(start + 1, end).some((line) => /^\s*codex_hooks\s*=/.test(line));
-}
-function hasCodexUnstableFeatureWarningSuppression(text = '') {
-    return /(^|\n)\s*suppress_unstable_features_warning\s*=\s*true\s*(?:#.*)?(?=\n|$)/.test(String(text || ''));
-}
 //# sourceMappingURL=install-helpers.js.map