sneakoscope 7.1.0 → 7.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (534) hide show
  1. package/README.md +9 -1
  2. package/config/architecture-budgets.v1.json +1 -8
  3. package/crates/sks-core/Cargo.lock +225 -1
  4. package/crates/sks-core/Cargo.toml +8 -1
  5. package/crates/sks-core/src/main.rs +7 -1
  6. package/crates/sks-core/src/search/files.rs +114 -0
  7. package/crates/sks-core/src/search/mod.rs +274 -0
  8. package/crates/sks-core/src/search/text.rs +175 -0
  9. package/dist/bin/sks-dispatch.js +4 -3
  10. package/dist/cli/command-manifest-lite.js +177 -6
  11. package/dist/cli/command-registry.js +42 -8
  12. package/dist/cli/help.js +30 -0
  13. package/dist/cli/install-helpers-codex-lb-config.js +9 -6
  14. package/dist/cli/install-helpers-codex-lb-selftest-chain.js +1 -1
  15. package/dist/cli/install-helpers-install-support.js +1 -1
  16. package/dist/cli/install-helpers.js +19 -9
  17. package/dist/cli/router.js +16 -3
  18. package/dist/commands/codex-app.js +40 -5
  19. package/dist/commands/doctor-profile.js +78 -0
  20. package/dist/commands/doctor.js +29 -69
  21. package/dist/commands/search.js +4 -0
  22. package/dist/config/skills-manifest.json +53 -60
  23. package/dist/core/agent-bridge/agent-manifest.js +22 -26
  24. package/dist/core/agent-bridge/host-capability-policy.js +109 -8
  25. package/dist/core/agent-bridge/host-capability-runtime.js +178 -50
  26. package/dist/core/agent-guidance/directive-registry.js +123 -0
  27. package/dist/core/agents/agent-effort-policy.js +45 -6
  28. package/dist/core/agents/agent-worker-pipeline.js +1 -3
  29. package/dist/core/agents/native-worker-backend-router.js +43 -19
  30. package/dist/core/auto-review.js +1 -3
  31. package/dist/core/code-structure.js +282 -19
  32. package/dist/core/codex/codex-config-guard.js +14 -4
  33. package/dist/core/codex/codex-config-toml.js +1 -3
  34. package/dist/core/codex-app/codex-agent-role-sync.js +1 -3
  35. package/dist/core/codex-app/codex-app-fast-ui-repair.js +14 -1
  36. package/dist/core/codex-app/codex-app-types.js +2 -3
  37. package/dist/core/codex-app/codex-desktop-routing-ownership.js +91 -0
  38. package/dist/core/codex-app/codex-hook-approval-probe.js +1 -3
  39. package/dist/core/codex-app/codex-hook-lifecycle.js +1 -3
  40. package/dist/core/codex-app/codex-init-deep.js +22 -10
  41. package/dist/core/codex-app/codex-model-catalog.js +384 -0
  42. package/dist/core/codex-app/codex-models-cache.js +160 -0
  43. package/dist/core/codex-app/desktop-routing-snapshot.js +233 -0
  44. package/dist/core/codex-app/glm-profile-installer.js +1 -3
  45. package/dist/core/codex-app/mcp-manager.js +1 -3
  46. package/dist/core/codex-app/menubar/constants.js +3 -0
  47. package/dist/core/codex-app/menubar/installer.js +11 -1
  48. package/dist/core/codex-app/multi-provider-router-support.js +202 -0
  49. package/dist/core/codex-app/multi-provider-router.js +379 -0
  50. package/dist/core/codex-app/openrouter-activate.js +189 -26
  51. package/dist/core/codex-app/openrouter-base-instructions.js +1 -0
  52. package/dist/core/codex-app/openrouter-model-catalog.js +217 -0
  53. package/dist/core/codex-app/role-model-catalog-priority.js +61 -0
  54. package/dist/core/codex-app.js +30 -6
  55. package/dist/core/codex-compat/codex-hook-semantic-validator.js +1 -3
  56. package/dist/core/codex-control/codex-app-server-v2-client.js +39 -2
  57. package/dist/core/codex-lb/codex-lb-env.js +1 -3
  58. package/dist/core/codex-lb/codex-lb-tool-catalog.js +6 -1
  59. package/dist/core/codex-native/codex-native-feature-broker.js +2 -6
  60. package/dist/core/codex-native/codex-native-interop-policy.js +1 -3
  61. package/dist/core/codex-native/codex-native-reference-cache.js +1 -3
  62. package/dist/core/codex-native/codex-native-reference-source.js +1 -3
  63. package/dist/core/codex-native/codex-native-repair-transaction.js +1 -3
  64. package/dist/core/codex-native/core-skill-manifest.js +3 -2
  65. package/dist/core/codex-native/native-capability-repair-matrix.js +1 -3
  66. package/dist/core/codex-plugins/codex-plugin-repair.js +1 -3
  67. package/dist/core/codex-runtime/codex-desktop-config-policy.js +4 -4
  68. package/dist/core/commands/agent-bridge-command.js +24 -3
  69. package/dist/core/commands/image-ux-review-command.js +5 -11
  70. package/dist/core/commands/menubar-command.js +1 -1
  71. package/dist/core/commands/naruto-command.js +40 -13
  72. package/dist/core/commands/pipeline-command.js +5 -2
  73. package/dist/core/commands/release-command.js +63 -1
  74. package/dist/core/commands/remote-command.js +18 -0
  75. package/dist/core/commands/search-command.js +151 -0
  76. package/dist/core/commands/telegram-command.js +251 -108
  77. package/dist/core/commands/uninstall-command.js +1 -1
  78. package/dist/core/config/secret-preservation.js +1 -3
  79. package/dist/core/context7-client.js +2 -1
  80. package/dist/core/db-review.js +704 -0
  81. package/dist/core/db-safety.js +17 -23
  82. package/dist/core/doctor/browser-use-repair.js +1 -3
  83. package/dist/core/doctor/codex-startup-config-repair.js +1 -3
  84. package/dist/core/doctor/computer-use-repair.js +1 -3
  85. package/dist/core/doctor/context7-mcp-repair.js +1 -3
  86. package/dist/core/doctor/current-project-guidance.js +1 -3
  87. package/dist/core/doctor/doctor-codex-startup-repair.js +1 -3
  88. package/dist/core/doctor/doctor-dirty-planner.js +2 -2
  89. package/dist/core/doctor/doctor-native-capability-repair.js +1 -3
  90. package/dist/core/doctor/doctor-transaction.js +1 -3
  91. package/dist/core/doctor/imagegen-repair.js +1 -3
  92. package/dist/core/doctor/legacy-global-hook-cleanup.js +1 -3
  93. package/dist/core/doctor/mcp-transport-collision-repair.js +1 -3
  94. package/dist/core/doctor/retired-managed-residue-private.js +1 -3
  95. package/dist/core/doctor/supabase-mcp-repair.js +1 -3
  96. package/dist/core/engineering-sanity-review.js +186 -0
  97. package/dist/core/errors/message.js +3 -0
  98. package/dist/core/evidence/evidence-schema.js +1 -3
  99. package/dist/core/feature-fixtures.js +1 -0
  100. package/dist/core/feature-registry.js +1 -3
  101. package/dist/core/fsx.js +13 -0
  102. package/dist/core/git-hygiene/shared-memory-publish.js +1 -3
  103. package/dist/core/git-hygiene/validators.js +1 -3
  104. package/dist/core/harness-guard.js +21 -3
  105. package/dist/core/hooks-runtime/hook-context.js +2 -2
  106. package/dist/core/image-ux-review/imagegen-adapter.js +52 -56
  107. package/dist/core/image-ux-review/real-callout-extractor.js +6 -1
  108. package/dist/core/image-ux-review.js +3 -5
  109. package/dist/core/imagegen/codex-lb-imagegen-target.js +70 -0
  110. package/dist/core/imagegen/imagegen-capability.js +11 -11
  111. package/dist/core/imagegen/imagegen-evidence.js +32 -0
  112. package/dist/core/init/skills.js +9 -11
  113. package/dist/core/init.js +4 -6
  114. package/dist/core/json/records.js +9 -0
  115. package/dist/core/json-schema-validator.js +1 -3
  116. package/dist/core/lean-engineering-policy.js +54 -0
  117. package/dist/core/loops/loop-continuation-enforcer.js +1 -3
  118. package/dist/core/mad-sks/sql-plane/mcp-executor.js +2 -1
  119. package/dist/core/mad-sks/sql-plane/policy.js +2 -1
  120. package/dist/core/managed-assets/managed-assets-manifest.js +4 -3
  121. package/dist/core/mcp-config/codex-cli-adapter.js +1 -3
  122. package/dist/core/mcp-config/config-reader.js +2 -3
  123. package/dist/core/mcp-config/guarded-patch.js +1 -1
  124. package/dist/core/mcp-config/health-check.js +2 -1
  125. package/dist/core/mcp-config/mutation.js +1 -1
  126. package/dist/core/mcp-config/restore.js +1 -1
  127. package/dist/core/mcp-config/secret-policy.js +1 -3
  128. package/dist/core/migration/migration-transaction-journal.js +3 -3
  129. package/dist/core/naruto/naruto-concurrency-governor.js +2 -2
  130. package/dist/core/perf/import-graph-budget.js +91 -1
  131. package/dist/core/pipeline/pipeline-plan-writer.js +1 -1
  132. package/dist/core/pipeline-internals/runtime-core.js +121 -23
  133. package/dist/core/pipeline-internals/runtime-gates.js +193 -4
  134. package/dist/core/pipeline.js +1 -1
  135. package/dist/core/ppt-review/slide-imagegen-review.js +7 -7
  136. package/dist/core/ppt.js +3 -3
  137. package/dist/core/product-design-app-server.js +2 -1
  138. package/dist/core/proof/fake-real-proof-policy.js +1 -3
  139. package/dist/core/proof/root-cause-policy.js +1 -3
  140. package/dist/core/proof/validation.js +1 -3
  141. package/dist/core/provider/model-router.js +4 -0
  142. package/dist/core/provider/provider-context.js +1 -3
  143. package/dist/core/providers/openrouter/openrouter-account.js +1 -3
  144. package/dist/core/quality/helper-dedup.js +0 -0
  145. package/dist/core/recallpulse.js +1 -1
  146. package/dist/core/release/file-ownership.js +26 -17
  147. package/dist/core/release/macos-menubar-proof.js +59 -1
  148. package/dist/core/release/main-push-guard.js +288 -24
  149. package/dist/core/release/main-push-receipt.js +10 -45
  150. package/dist/core/release/package-size-budget.js +1 -1
  151. package/dist/core/release/release-gate-contract.js +2 -0
  152. package/dist/core/release/release-pack-receipt.js +1 -1
  153. package/dist/core/release/release-proof-io.js +33 -0
  154. package/dist/core/release/release-upgrade-baseline.js +9 -0
  155. package/dist/core/release/runtime-script-pack-closure.js +153 -4
  156. package/dist/core/release/stage-publish.js +194 -0
  157. package/dist/core/remote/index.js +2 -0
  158. package/dist/core/remote/local-worker-client.js +35 -0
  159. package/dist/core/remote/machine-registry.js +18 -13
  160. package/dist/core/remote/owner-proof.js +1 -3
  161. package/dist/core/remote/protocol.js +1 -3
  162. package/dist/core/remote/readiness.js +1 -3
  163. package/dist/core/remote/session-binding.js +153 -0
  164. package/dist/core/remote/session-index.js +1 -3
  165. package/dist/core/remote/types.js +1 -0
  166. package/dist/core/remote/worker.js +228 -14
  167. package/dist/core/responses-stream.js +151 -0
  168. package/dist/core/routes/dollar-manifest-lite.js +1 -1
  169. package/dist/core/routes.js +8 -8
  170. package/dist/core/rust-accelerator.js +12 -2
  171. package/dist/core/safety/ssot-guard.js +1 -3
  172. package/dist/core/search/benchmark.js +358 -0
  173. package/dist/core/search/cache.js +65 -0
  174. package/dist/core/search/context.js +144 -0
  175. package/dist/core/search/doctor.js +74 -0
  176. package/dist/core/search/files.js +192 -0
  177. package/dist/core/search/index.js +5 -0
  178. package/dist/core/search/ipc.js +64 -0
  179. package/dist/core/search/provider.js +142 -0
  180. package/dist/core/search/rust-bridge.js +24 -0
  181. package/dist/core/search/structure.js +230 -0
  182. package/dist/core/search/symbol.js +272 -0
  183. package/dist/core/search/text.js +146 -0
  184. package/dist/core/search/types.js +22 -0
  185. package/dist/core/search/typescript-ls.js +215 -0
  186. package/dist/core/search-visibility/discovery.js +1 -3
  187. package/dist/core/skill-forge.js +1 -1
  188. package/dist/core/stop-gate/gate-evaluator.js +3 -3
  189. package/dist/core/stop-gate/stop-gate-check.js +1 -3
  190. package/dist/core/structured-output-adapter.js +62 -2
  191. package/dist/core/subagents/agent-catalog.js +56 -43
  192. package/dist/core/subagents/model-policy.js +17 -7
  193. package/dist/core/subagents/naruto-proof-projection.js +2 -6
  194. package/dist/core/subagents/official-subagent-config.js +1 -3
  195. package/dist/core/subagents/official-subagent-preparation.js +73 -10
  196. package/dist/core/subagents/official-subagent-prompt.js +85 -18
  197. package/dist/core/subagents/official-subagent-runner.js +10 -5
  198. package/dist/core/subagents/role-model-preferences.js +202 -44
  199. package/dist/core/subagents/subagent-evidence.js +1 -3
  200. package/dist/core/subagents/thread-budget.js +1 -1
  201. package/dist/core/subagents/triwiki-attention.js +1 -5
  202. package/dist/core/telegram/config.js +29 -12
  203. package/dist/core/telegram/hub.js +8 -2
  204. package/dist/core/telegram/index.js +2 -0
  205. package/dist/core/telegram/messages.js +8 -2
  206. package/dist/core/telegram/runtime-projection.js +8 -5
  207. package/dist/core/telegram/runtime.js +19 -9
  208. package/dist/core/telegram/service.js +181 -0
  209. package/dist/core/telegram/setup.js +220 -0
  210. package/dist/core/text/regex.js +3 -0
  211. package/dist/core/text/strings.js +6 -0
  212. package/dist/core/triwiki-wrongness/image-wrongness.js +1 -3
  213. package/dist/core/triwiki-wrongness/wrongness-ledger.js +1 -3
  214. package/dist/core/triwiki-wrongness/wrongness-proof-linker.js +1 -3
  215. package/dist/core/triwiki-wrongness/wrongness-retrieval.js +1 -3
  216. package/dist/core/triwiki-wrongness/wrongness-schema.js +1 -3
  217. package/dist/core/triwiki-wrongness/wrongness-trust-policy.js +1 -3
  218. package/dist/core/trust-kernel/completion-contract.js +1 -3
  219. package/dist/core/trust-kernel/route-contract.js +1 -3
  220. package/dist/core/update/update-migration-state.js +1 -3
  221. package/dist/core/update-check.js +20 -6
  222. package/dist/core/verification/diff-quality.js +3 -4
  223. package/dist/core/verification/impact-scan.js +36 -89
  224. package/dist/core/verification/mistake-rule-compiler.js +17 -4
  225. package/dist/core/version-manager.js +3 -20
  226. package/dist/core/version.js +1 -1
  227. package/dist/native/sks-menubar/Sources/ControlCenterWindowController.swift +23 -3
  228. package/dist/native/sks-menubar/Sources/ControlKit.swift +102 -0
  229. package/dist/native/sks-menubar/Sources/DiagnosticsViewController.swift +23 -11
  230. package/dist/native/sks-menubar/Sources/MCPServersViewController.swift +7 -3
  231. package/dist/native/sks-menubar/Sources/OperationCoordinator.swift +17 -1
  232. package/dist/native/sks-menubar/Sources/OverviewViewController.swift +22 -15
  233. package/dist/native/sks-menubar/Sources/ProcessClient.swift +15 -5
  234. package/dist/native/sks-menubar/Sources/ProvidersMultiProvider.swift +324 -0
  235. package/dist/native/sks-menubar/Sources/ProvidersOpenRouter.swift +154 -214
  236. package/dist/native/sks-menubar/Sources/ProvidersRoleModels.swift +252 -0
  237. package/dist/native/sks-menubar/Sources/ProvidersViewController.swift +77 -71
  238. package/dist/native/sks-menubar/Sources/RemoteTelegramViewController.swift +167 -51
  239. package/dist/native/sks-menubar/Sources/SettingsViewController.swift +14 -5
  240. package/dist/native/sks-menubar/Sources/SidebarItem.swift +15 -1
  241. package/dist/native/sks-menubar/Sources/StatusItemController.swift +2 -2
  242. package/dist/native/sks-menubar/Sources/UpdatesViewController.swift +16 -12
  243. package/dist/scripts/agent-guidance-dedup-check.js +23 -0
  244. package/dist/scripts/agent-message-bus-reader-check.js +1 -1
  245. package/dist/scripts/all-feature-deep-completion-check.js +1 -1
  246. package/dist/scripts/appshots-thread-attachment-discovery-check.js +1 -1
  247. package/dist/scripts/architecture-guard-check.js +1 -2
  248. package/dist/scripts/certificate-sla-check.js +1 -1
  249. package/dist/scripts/cli-output-consistency-check.js +1 -1
  250. package/dist/scripts/codex-0-134-runner-truth-check.js +1 -1
  251. package/dist/scripts/codex-0138-capability-artifact-check.js +1 -1
  252. package/dist/scripts/codex-0138-capability-check.js +1 -1
  253. package/dist/scripts/codex-0138-doctor-check.js +1 -1
  254. package/dist/scripts/codex-0138-feature-probes-check.js +1 -1
  255. package/dist/scripts/codex-0144-app-server-v2-check.js +1 -1
  256. package/dist/scripts/codex-0144-binary-identity-check.js +1 -1
  257. package/dist/scripts/codex-0144-capability-check.js +1 -1
  258. package/dist/scripts/codex-0144-core-real-probes-check.js +1 -1
  259. package/dist/scripts/codex-0144-manifest-check.js +1 -1
  260. package/dist/scripts/codex-0144-policy-check.js +1 -1
  261. package/dist/scripts/codex-0144-thread-store-check.js +1 -1
  262. package/dist/scripts/codex-agent-role-rich-content-check.js +2 -2
  263. package/dist/scripts/codex-agent-role-sync-check.js +2 -2
  264. package/dist/scripts/codex-agent-type-routing-check.js +2 -2
  265. package/dist/scripts/codex-app-execution-profile-check.js +2 -2
  266. package/dist/scripts/codex-app-handoff-check.js +1 -1
  267. package/dist/scripts/codex-app-handoff-launch-check.js +1 -1
  268. package/dist/scripts/codex-control-tool-output-continuity-audit-check.js +1 -1
  269. package/dist/scripts/codex-lb-fast-ui-preservation-check.js +1 -3
  270. package/dist/scripts/codex-native-feature-broker-blackbox.js +2 -2
  271. package/dist/scripts/codex-native-feature-broker-check.js +2 -2
  272. package/dist/scripts/{sks-3-1-6-directive-check-lib.js → codex-native-gate-lib.js} +5 -5
  273. package/dist/scripts/codex-native-harness-compat-check.js +2 -2
  274. package/dist/scripts/codex-native-hook-lifecycle-proof-check.js +2 -2
  275. package/dist/scripts/codex-plugin-app-template-policy-check.js +1 -1
  276. package/dist/scripts/codex-sdk-backend-router-check.js +1 -1
  277. package/dist/scripts/codex-sdk-capability-check.js +1 -1
  278. package/dist/scripts/context7-evidence-dedupe-check.js +1 -1
  279. package/dist/scripts/core-skill-card-schema-check.js +1 -1
  280. package/dist/scripts/core-skill-deployment-snapshot-check.js +1 -1
  281. package/dist/scripts/core-skill-heldout-validation-check.js +1 -1
  282. package/dist/scripts/core-skill-no-inference-optimizer-check.js +1 -1
  283. package/dist/scripts/core-skill-patch-check.js +1 -1
  284. package/dist/scripts/core-skill-route-runtime-integration-check.js +1 -1
  285. package/dist/scripts/current-command-surface-check.js +1 -1
  286. package/dist/scripts/current-surface-update-e2e-check.js +4 -1
  287. package/dist/scripts/current-upgrade-matrix-check.js +1 -1
  288. package/dist/scripts/dfix-fixture-check.js +1 -1
  289. package/dist/scripts/dfix-patch-handoff-check.js +1 -1
  290. package/dist/scripts/dfix-verification-check.js +1 -1
  291. package/dist/scripts/dfix-verification-recommendation-check.js +1 -1
  292. package/dist/scripts/docs-truthfulness-check.js +16 -3
  293. package/dist/scripts/doctor-codex-app-harness-check.js +2 -2
  294. package/dist/scripts/evidence-flagship-coverage-check.js +1 -1
  295. package/dist/scripts/{sks-1-18-gate-lib.js → gate-lib.js} +1 -1
  296. package/dist/scripts/gate-policy-audit-check.js +4 -1
  297. package/dist/scripts/git-worktree-checkpoint-check.js +1 -1
  298. package/dist/scripts/git-worktree-cross-rebase-check.js +1 -1
  299. package/dist/scripts/git-worktree-diff-envelope-check.js +1 -1
  300. package/dist/scripts/git-worktree-dirty-lock-check.js +1 -1
  301. package/dist/scripts/git-worktree-dirty-main-detection-check.js +1 -1
  302. package/dist/scripts/git-worktree-integration-primary-check.js +1 -1
  303. package/dist/scripts/git-worktree-manifest-append-check.js +1 -1
  304. package/dist/scripts/git-worktree-untracked-diff-check.js +1 -1
  305. package/dist/scripts/harness-benchmark-check.js +1 -1
  306. package/dist/scripts/helper-dedup-check.js +62 -0
  307. package/dist/scripts/hook-latency-budget-check.js +1 -1
  308. package/dist/scripts/image-artifact-path-contract-check.js +1 -1
  309. package/dist/scripts/imagegen-real-smoke-check.js +2 -5
  310. package/dist/scripts/installed-package-smoke-check.js +1 -1
  311. package/dist/scripts/legacy-gate-inventory-check.js +1 -1
  312. package/dist/scripts/legacy-gate-purge-check.js +1 -1
  313. package/dist/scripts/legacy-strong-inventory-check.js +1 -1
  314. package/dist/scripts/lib/codex-sdk-gate-lib.js +1 -1
  315. package/dist/scripts/mad-sks-launch-sql-plane-boundary-check.js +1 -1
  316. package/dist/scripts/mad-sks-sql-plane-capability-check.js +1 -1
  317. package/dist/scripts/mad-sks-sql-plane-lifecycle-hook-decision-check.js +1 -1
  318. package/dist/scripts/mad-sks-sql-plane-result-lifecycle-check.js +1 -1
  319. package/dist/scripts/managed-config-merge-check.js +1 -1
  320. package/dist/scripts/mcp-plugin-inventory-check.js +1 -1
  321. package/dist/scripts/model-call-concurrency-check.js +1 -1
  322. package/dist/scripts/mutation-callsite-coverage-check.js +1 -1
  323. package/dist/scripts/naruto-ssot-gate-aliases-check.js +1 -1
  324. package/dist/scripts/naruto-ssot-pipeline-default-check.js +1 -1
  325. package/dist/scripts/naruto-ssot-route-normalization-check.js +1 -1
  326. package/dist/scripts/naruto-ssot-routing-check.js +1 -1
  327. package/dist/scripts/naruto-worktree-coding-blackbox.js +1 -1
  328. package/dist/scripts/native-capability-repair-matrix-check.js +1 -1
  329. package/dist/scripts/native-image-generation-repair-check.js +1 -1
  330. package/dist/scripts/official-subagent-workflow-check.js +3 -3
  331. package/dist/scripts/package-published-contract-check.js +37 -4
  332. package/dist/scripts/packlist-performance-check.js +17 -1
  333. package/dist/scripts/pipeline-codex-native-doctor-mad-routing-real-blackbox.js +1 -3
  334. package/dist/scripts/ppt-real-export-adapter-check.js +1 -1
  335. package/dist/scripts/ppt-real-imagegen-wiring-check.js +1 -1
  336. package/dist/scripts/ppt-reexport-rereview-check.js +1 -1
  337. package/dist/scripts/prepublish-fast-check.js +1 -1
  338. package/dist/scripts/probe-memoization-check.js +2 -2
  339. package/dist/scripts/prompt-placeholder-guard-check.js +1 -1
  340. package/dist/scripts/qa-loop-app-handoff-capability-check.js +1 -1
  341. package/dist/scripts/qa-loop-app-handoff-check.js +1 -1
  342. package/dist/scripts/qa-loop-app-handoff-cli-check.js +1 -1
  343. package/dist/scripts/qa-loop-app-handoff-confirmation-check.js +1 -1
  344. package/dist/scripts/qa-loop-app-handoff-gate-lifecycle-check.js +1 -1
  345. package/dist/scripts/qa-loop-app-handoff-launch-check.js +1 -1
  346. package/dist/scripts/qa-loop-app-handoff-status-lifecycle-check.js +1 -1
  347. package/dist/scripts/qa-loop-budget-policy-check.js +1 -1
  348. package/dist/scripts/qa-loop-effort-escalation-check.js +1 -1
  349. package/dist/scripts/qa-loop-execution-profile-routing-check.js +2 -2
  350. package/dist/scripts/qa-loop-image-path-exposure-check.js +1 -1
  351. package/dist/scripts/qa-loop-image-path-prompt-injection-check.js +1 -1
  352. package/dist/scripts/{sks-1-12-real-execution-check-lib.js → real-execution-check-lib.js} +1 -1
  353. package/dist/scripts/release-affected-selector-check.js +1 -1
  354. package/dist/scripts/release-aggressive-resource-governor-check.js +1 -1
  355. package/dist/scripts/release-cache-glob-hashing-check.js +1 -1
  356. package/dist/scripts/release-cache-input-classifier-check.js +1 -1
  357. package/dist/scripts/release-cache-neutralization-report-check.js +1 -1
  358. package/dist/scripts/release-cache-version-neutral-fixture-check.js +1 -1
  359. package/dist/scripts/release-dynamic-presets-check.js +2 -2
  360. package/dist/scripts/release-full-parallelism-blackbox.js +1 -1
  361. package/dist/scripts/release-gate-batch-runner-check.js +1 -1
  362. package/dist/scripts/release-gate-budget-check.js +1 -1
  363. package/dist/scripts/release-gate-dag-runner-check.js +1 -1
  364. package/dist/scripts/release-latency-slo-check.js +1 -1
  365. package/dist/scripts/release-metadata-check.js +256 -2
  366. package/dist/scripts/release-parallel-speed-budget-check.js +1 -1
  367. package/dist/scripts/release-proof-truth-check.js +1 -1
  368. package/dist/scripts/release-provenance-check.js +4 -2
  369. package/dist/scripts/release-runtime-truth-matrix-check.js +1 -1
  370. package/dist/scripts/research-blueprint-densifier-check.js +1 -1
  371. package/dist/scripts/research-claim-builder-check.js +1 -1
  372. package/dist/scripts/research-complete-package-fixture-check.js +1 -1
  373. package/dist/scripts/research-execution-profile-routing-check.js +2 -2
  374. package/dist/scripts/research-final-reviewer-blackbox.js +1 -1
  375. package/dist/scripts/{sks-3-1-4-directive-check-lib.js → runtime-domain-gate-lib.js} +2 -2
  376. package/dist/scripts/runtime-proof-summary-check.js +1 -1
  377. package/dist/scripts/runtime-script-pack-closure-check.js +7 -1
  378. package/dist/scripts/scheduler-batch-dispatch-check.js +1 -1
  379. package/dist/scripts/scheduler-parallel-proof-consistency-check.js +1 -1
  380. package/dist/scripts/scheduler-utilization-integral-check.js +1 -1
  381. package/dist/scripts/search-visibility-gate-lib.js +1 -1
  382. package/dist/scripts/secret-preservation-check.js +1 -1
  383. package/dist/scripts/seo-geo-geo-disambiguation-check.js +1 -1
  384. package/dist/scripts/seo-geo-skill-rich-content-check.js +1 -1
  385. package/dist/scripts/side-effect-runtime-report-check.js +1 -1
  386. package/dist/scripts/{sks-3-1-8-check-lib.js → skill-fixture-check-lib.js} +1 -1
  387. package/dist/scripts/skill-name-canonicalizer-check.js +1 -1
  388. package/dist/scripts/skills-manifest-continuity-check.js +1 -1
  389. package/dist/scripts/sks-uninstall-regression-check.js +1 -1
  390. package/dist/scripts/sksd-daemon-check.js +1 -1
  391. package/dist/scripts/super-search-provider-interface-check.js +1 -1
  392. package/dist/scripts/triwiki-cache-key-check.js +1 -1
  393. package/dist/scripts/triwiki-proof-bank-blackbox.js +2 -2
  394. package/dist/scripts/triwiki-proof-bank-check.js +1 -1
  395. package/dist/scripts/triwiki-proof-card-check.js +1 -1
  396. package/dist/scripts/type-surface-codex-app-check.js +2 -2
  397. package/dist/scripts/{sks-3-1-5-directive-check-lib.js → typed-routing-gate-lib.js} +2 -2
  398. package/dist/scripts/ultra-router-auto-router-check.js +1 -1
  399. package/dist/scripts/ux-review-extract-wires-real-extractor-check.js +1 -1
  400. package/dist/scripts/ux-review-patch-diff-recheck-check.js +1 -1
  401. package/dist/scripts/ux-review-run-wires-imagegen-check.js +9 -2
  402. package/package.json +5 -7
  403. package/release-gates.v2.json +66 -11
  404. package/runtime-required-scripts.json +138 -14
  405. package/config/bench-baseline.json +0 -7
  406. package/dist/core/codex-app/sks-menubar.js +0 -1
  407. package/dist/core/release/release-closure-contract.js +0 -30
  408. package/dist/core/release/release-closure-helpers.js +0 -293
  409. package/dist/core/release/release-closure-validation.js +0 -284
  410. package/dist/core/release/release-closure.js +0 -163
  411. package/dist/scripts/build-dist.js +0 -124
  412. package/dist/scripts/build-once-runner-check.js +0 -6
  413. package/dist/scripts/canonical-test-runner.js +0 -234
  414. package/dist/scripts/changelog-check.js +0 -45
  415. package/dist/scripts/check-architecture.js +0 -295
  416. package/dist/scripts/check-cli-entrypoint.js +0 -41
  417. package/dist/scripts/check-command-module-budget.js +0 -77
  418. package/dist/scripts/check-feature-quality.js +0 -51
  419. package/dist/scripts/check-legacy-free.js +0 -64
  420. package/dist/scripts/check-pipeline-budget.js +0 -49
  421. package/dist/scripts/check-pipeline-runtime.js +0 -16
  422. package/dist/scripts/check-publish-tag.js +0 -56
  423. package/dist/scripts/check-route-modularity.js +0 -72
  424. package/dist/scripts/codex-0140-capability-check.js +0 -14
  425. package/dist/scripts/codex-0140-feature-probes-check.js +0 -23
  426. package/dist/scripts/codex-permission-profiles-check.js +0 -34
  427. package/dist/scripts/codex-project-config-policy-splitter-check.js +0 -49
  428. package/dist/scripts/competitor-scorecard-check.js +0 -24
  429. package/dist/scripts/core-skill-no-drift-check.js +0 -23
  430. package/dist/scripts/db-route-materialization-check.js +0 -32
  431. package/dist/scripts/doctor-context7-mcp-repair-blackbox.js +0 -15
  432. package/dist/scripts/doctor-fastpath-check.js +0 -25
  433. package/dist/scripts/doctor-fix-production-blackbox.js +0 -35
  434. package/dist/scripts/doctor-idempotence-check.js +0 -6
  435. package/dist/scripts/doctor-ops-semantics-check.js +0 -83
  436. package/dist/scripts/doctor-startup-config-repair-blackbox.js +0 -18
  437. package/dist/scripts/doctor-supabase-mcp-repair-blackbox.js +0 -13
  438. package/dist/scripts/ensure-bin-executable.js +0 -16
  439. package/dist/scripts/fsx-hotpath-check.js +0 -9
  440. package/dist/scripts/high-risk-contracts-check.js +0 -183
  441. package/dist/scripts/hook-latency-quantum-check.js +0 -120
  442. package/dist/scripts/import-graph-budget-check.js +0 -9
  443. package/dist/scripts/mcp-tool-naming-parity-check.js +0 -14
  444. package/dist/scripts/naruto-codex-e2e-check.js +0 -105
  445. package/dist/scripts/naruto-write-e2e-check.js +0 -31
  446. package/dist/scripts/native-capability-postcheck-check.js +0 -16
  447. package/dist/scripts/ops-diagnostics-bundle-check.js +0 -11
  448. package/dist/scripts/parallel-production-smoke-check.js +0 -20
  449. package/dist/scripts/perf-budget-check.js +0 -12
  450. package/dist/scripts/project-skill-dedupe-blackbox.js +0 -62
  451. package/dist/scripts/release-dag-full-coverage-check.js +0 -98
  452. package/dist/scripts/release-dist-freshness-check.js +0 -6
  453. package/dist/scripts/release-file-ownership-check.js +0 -35
  454. package/dist/scripts/release-gate-script-parity-check.js +0 -148
  455. package/dist/scripts/release-macos-menubar-proof.js +0 -167
  456. package/dist/scripts/release-main-push-guard.js +0 -37
  457. package/dist/scripts/release-main-push-receipt.js +0 -43
  458. package/dist/scripts/release-metadata-1-19-check.js +0 -257
  459. package/dist/scripts/release-version-truth-check.js +0 -138
  460. package/dist/scripts/retention-apply-smoke-check.js +0 -19
  461. package/dist/scripts/retention-budget-check.js +0 -6
  462. package/dist/scripts/retention-dry-run-check.js +0 -8
  463. package/dist/scripts/rollback-recovery-smoke-check.js +0 -70
  464. package/dist/scripts/route-intent-regression-check.js +0 -42
  465. package/dist/scripts/runtime-current-terminal-check.js +0 -108
  466. package/dist/scripts/runtime-dist-parity-check.js +0 -76
  467. package/dist/scripts/runtime-no-src-mjs-check.js +0 -30
  468. package/dist/scripts/runtime-ts-rust-boundary-check.js +0 -58
  469. package/dist/scripts/runtime-ts-source-of-truth-check.js +0 -53
  470. package/dist/scripts/secret-preservation-guard-check.js +0 -36
  471. package/dist/scripts/seo-marketing-truthfulness-check.js +0 -98
  472. package/dist/scripts/seo-metadata-sync-check.js +0 -60
  473. package/dist/scripts/sizecheck.js +0 -148
  474. package/dist/scripts/sks-menubar-install-check.js +0 -333
  475. package/dist/scripts/supabase-secret-preservation-blackbox.js +0 -28
  476. package/dist/scripts/super-search-live-smoke-check.js +0 -115
  477. package/dist/scripts/super-search-local-http-smoke-check.js +0 -16
  478. package/dist/scripts/super-search-offline-contract-check.js +0 -43
  479. package/dist/scripts/update-fastpath-check.js +0 -28
  480. package/dist/scripts/update-preserves-supabase-keys-blackbox.js +0 -26
  481. package/dist/scripts/upgrade-migration-matrix-check.js +0 -351
  482. package/dist/scripts/write-build-manifest.js +0 -70
  483. package/dist/scripts/zellij-capability-check.js +0 -13
  484. package/dist/scripts/zellij-developer-controls-check.js +0 -16
  485. package/dist/scripts/zellij-doctor-readiness-check.js +0 -49
  486. package/dist/scripts/zellij-dynamic-pane-lifecycle-check.js +0 -19
  487. package/dist/scripts/zellij-fake-adapter-check.js +0 -31
  488. package/dist/scripts/zellij-first-slot-down-stack-check.js +0 -20
  489. package/dist/scripts/zellij-first-slot-down-stack-real-check.js +0 -348
  490. package/dist/scripts/zellij-homebrew-policy-check.js +0 -3
  491. package/dist/scripts/zellij-initial-main-only-blackbox.js +0 -21
  492. package/dist/scripts/zellij-lane-renderer-check.js +0 -78
  493. package/dist/scripts/zellij-launch-command-truth-check.js +0 -62
  494. package/dist/scripts/zellij-layout-valid-check.js +0 -120
  495. package/dist/scripts/zellij-pane-creation-lock-metrics-check.js +0 -10
  496. package/dist/scripts/zellij-pane-lock-concurrency-blackbox.js +0 -78
  497. package/dist/scripts/zellij-pane-lock-does-not-block-worker-check.js +0 -12
  498. package/dist/scripts/zellij-pane-lock-open-worker-integration-blackbox.js +0 -134
  499. package/dist/scripts/zellij-qa-app-handoff-status-check.js +0 -7
  500. package/dist/scripts/zellij-right-column-geometry-proof.js +0 -158
  501. package/dist/scripts/zellij-right-column-headless-overflow-check.js +0 -20
  502. package/dist/scripts/zellij-right-column-manager-check.js +0 -24
  503. package/dist/scripts/zellij-self-heal-check.js +0 -3
  504. package/dist/scripts/zellij-self-heal-dry-run-check.js +0 -3
  505. package/dist/scripts/zellij-self-heal-status-contract-check.js +0 -3
  506. package/dist/scripts/zellij-self-heal-typed-blackbox.js +0 -3
  507. package/dist/scripts/zellij-slot-column-anchor-check.js +0 -65
  508. package/dist/scripts/zellij-slot-column-anchor-telemetry-check.js +0 -8
  509. package/dist/scripts/zellij-slot-only-ui-check.js +0 -29
  510. package/dist/scripts/zellij-slot-pane-renderer-check.js +0 -149
  511. package/dist/scripts/zellij-slot-pane-stale-detection-check.js +0 -65
  512. package/dist/scripts/zellij-slot-pane-telemetry-renderer-check.js +0 -11
  513. package/dist/scripts/zellij-slot-renderer-proof-semantics-check.js +0 -58
  514. package/dist/scripts/zellij-slot-telemetry-check.js +0 -38
  515. package/dist/scripts/zellij-slot-telemetry-incremental-check.js +0 -46
  516. package/dist/scripts/zellij-slot-telemetry-live-flush-check.js +0 -55
  517. package/dist/scripts/zellij-slot-telemetry-performance-check.js +0 -32
  518. package/dist/scripts/zellij-slot-telemetry-real-blackbox.js +0 -19
  519. package/dist/scripts/zellij-slot-telemetry-renderer-check.js +0 -11
  520. package/dist/scripts/zellij-slot-telemetry-runtime-check.js +0 -23
  521. package/dist/scripts/zellij-spawn-on-demand-layout-check.js +0 -45
  522. package/dist/scripts/zellij-stacked-capability-routing-check.js +0 -9
  523. package/dist/scripts/zellij-stacked-fallback-integration-blackbox.js +0 -78
  524. package/dist/scripts/zellij-stacked-version-matrix-check.js +0 -29
  525. package/dist/scripts/zellij-stacked-version-parser-check.js +0 -19
  526. package/dist/scripts/zellij-ui-design-check.js +0 -92
  527. package/dist/scripts/zellij-update-missing-self-heal-check.js +0 -3
  528. package/dist/scripts/zellij-update-prompt-matrix-check.js +0 -16
  529. package/dist/scripts/zellij-update-prompt-mode-check.js +0 -18
  530. package/dist/scripts/zellij-update-prompt-safety-check.js +0 -8
  531. package/dist/scripts/zellij-worker-pane-manager-check.js +0 -108
  532. package/dist/scripts/zellij-worker-pane-manager-single-owner-check.js +0 -47
  533. package/dist/scripts/zellij-worker-pane-real-ui-blackbox.js +0 -199
  534. /package/dist/scripts/{sks-1-11-gate-lib.js → sks-cli-gate-lib.js} +0 -0
@@ -1,8 +1,11 @@
1
1
  import fs from 'node:fs/promises';
2
2
  import path from 'node:path';
3
+ import { CANONICAL_DIRECTIVES } from '../agent-guidance/directive-registry.js';
3
4
  import { ensureDir, nowIso, writeJsonAtomic, writeTextAtomic } from '../fsx.js';
4
5
  import { guardContextForRoute, guardedRm } from '../safety/mutation-guard.js';
5
6
  import { createRequestedScopeContract } from '../safety/requested-scope-contract.js';
7
+ import { escapeRegExp } from '../text/regex.js';
8
+ import { messageOf } from '../errors/message.js';
6
9
  export async function runCodexInitDeep(input = {}) {
7
10
  const root = path.resolve(input.root || process.cwd());
8
11
  const dirs = await scoreDirectories(root);
@@ -107,9 +110,6 @@ function initDeepBackupPath(root, agentsPath, beforeHash) {
107
110
  function backupBaseName(root, agentsPath) {
108
111
  return path.relative(root, agentsPath).replace(/[\\/]+/g, '__');
109
112
  }
110
- function escapeRegExp(value) {
111
- return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
112
- }
113
113
  function hashText(text) {
114
114
  let hash = 2166136261;
115
115
  for (let index = 0; index < text.length; index += 1) {
@@ -207,12 +207,27 @@ async function walk(dir, root, counts, depth = 0) {
207
207
  }
208
208
  }
209
209
  }
210
+ export function renderInitDeepAgentGuidance(rows) {
211
+ return [
212
+ { path: 'ROOT', text: renderSharedAgentDirectives() },
213
+ ...rows.map((row) => ({ path: row.dir, text: renderDirectoryAgentsBlock(row) }))
214
+ ];
215
+ }
216
+ export function renderSharedAgentDirectives() {
217
+ return [
218
+ '## Shared directives',
219
+ '',
220
+ ...CANONICAL_DIRECTIVES.map((entry) => `- ${entry.statement}`)
221
+ ].join('\n');
222
+ }
210
223
  function renderGeneratedAgents(rows) {
211
224
  return [
212
225
  '# SKS Init-Deep Generated Context',
213
226
  '',
214
227
  'This file is generated under `.sneakoscope/context` so user-authored `AGENTS.md` files are preserved.',
215
228
  '',
229
+ renderSharedAgentDirectives(),
230
+ '',
216
231
  ...rows.flatMap((row) => [
217
232
  `## ${row.dir}`,
218
233
  '',
@@ -224,15 +239,15 @@ function renderGeneratedAgents(rows) {
224
239
  ].join('\n');
225
240
  }
226
241
  function renderDirectoryAgentsBlock(row) {
242
+ const risky = CANONICAL_DIRECTIVES.find((entry) => entry.id === 'hydrate')
243
+ .subsumes.some((pattern) => pattern.test(row.guidance));
227
244
  return [
228
245
  `# SKS Init-Deep Local Guidance: ${row.dir}`,
229
246
  '',
230
247
  `- Files observed: ${row.file_count}`,
231
248
  `- Languages: ${row.languages.join(', ') || 'unknown'}`,
232
- `- Guidance: ${row.guidance}`,
233
- '- Preserve user-authored content outside this managed block.',
234
- '- Hydrate TriWiki/current source before risky edits in this directory.'
235
- ].join('\n');
249
+ risky ? '- Risk: high' : ''
250
+ ].filter(Boolean).join('\n');
236
251
  }
237
252
  function extractManagedSection(text, markerName) {
238
253
  const begin = `<!-- BEGIN ${markerName} -->`;
@@ -243,6 +258,3 @@ function extractManagedSection(text, markerName) {
243
258
  return '';
244
259
  return text.slice(beginIdx + begin.length, endIdx).trim();
245
260
  }
246
- function messageOf(err) {
247
- return err instanceof Error ? err.message : String(err);
248
- }
@@ -0,0 +1,384 @@
1
+ import fs from 'node:fs/promises';
2
+ import os from 'node:os';
3
+ import path from 'node:path';
4
+ import { escapeRegExp } from '../text/regex.js';
5
+ import { isRecord } from '../json/records.js';
6
+ import { uniqueStrings } from '../text/strings.js';
7
+ export const CODEX_MODEL_CATALOG_MAX_BYTES = 16 * 1024 * 1024;
8
+ export const CODEX_MODEL_CATALOG_MAX_MODELS = 512;
9
+ export function codexHomePath(input = {}) {
10
+ const env = input.env || process.env;
11
+ const home = input.home || env.HOME || os.homedir();
12
+ return path.resolve(env.CODEX_HOME || path.join(home, '.codex'));
13
+ }
14
+ export function codexUserConfigPath(input = {}) {
15
+ return path.join(codexHomePath(input), 'config.toml');
16
+ }
17
+ export function defaultOpenCodexCatalogPath(input = {}) {
18
+ return path.join(codexHomePath(input), 'opencodex-catalog.json');
19
+ }
20
+ export function sksOpenRouterCatalogPath(input = {}) {
21
+ return path.join(codexHomePath(input), 'sks-openrouter-catalog.json');
22
+ }
23
+ export async function readConfiguredCodexModelCatalog(input = {}) {
24
+ return (await readConfiguredCodexModelRoutingContext(input)).catalog;
25
+ }
26
+ export async function readConfiguredCodexModelRoutingContext(input = {}) {
27
+ const configPath = input.configPath || codexUserConfigPath(input);
28
+ let config = '';
29
+ try {
30
+ config = await fs.readFile(configPath, 'utf8');
31
+ }
32
+ catch (err) {
33
+ if (err?.code !== 'ENOENT') {
34
+ return {
35
+ schema: 'sks.codex-model-routing-context.v1',
36
+ config_path: configPath,
37
+ selected_provider: null,
38
+ selected_model: null,
39
+ catalog: emptyCatalogResult(null, false, ['codex_model_catalog_config_unreadable'])
40
+ };
41
+ }
42
+ }
43
+ const configuredPath = readTopLevelTomlString(config, 'model_catalog_json');
44
+ const catalog = configuredPath
45
+ ? await readCodexModelCatalogFile({
46
+ filePath: expandCatalogPath(configuredPath, { ...input, configPath }),
47
+ configured: true
48
+ })
49
+ : emptyCatalogResult(null, false, []);
50
+ return {
51
+ schema: 'sks.codex-model-routing-context.v1',
52
+ config_path: configPath,
53
+ selected_provider: readTopLevelTomlString(config, 'model_provider'),
54
+ selected_model: readTopLevelTomlString(config, 'model'),
55
+ catalog
56
+ };
57
+ }
58
+ export async function readCodexModelCatalogFile(input) {
59
+ const filePath = path.resolve(String(input.filePath || ''));
60
+ if (!String(input.filePath || '').trim()) {
61
+ return emptyCatalogResult(null, Boolean(input.configured), ['codex_model_catalog_path_missing']);
62
+ }
63
+ let stat;
64
+ try {
65
+ stat = await fs.lstat(filePath);
66
+ }
67
+ catch (err) {
68
+ const code = err?.code;
69
+ return emptyCatalogResult(filePath, Boolean(input.configured), [
70
+ code === 'ENOENT' ? 'codex_model_catalog_missing' : 'codex_model_catalog_unreadable'
71
+ ]);
72
+ }
73
+ const fileBlockers = secureCatalogFileBlockers(stat);
74
+ if (fileBlockers.length)
75
+ return emptyCatalogResult(filePath, Boolean(input.configured), fileBlockers);
76
+ let parsed;
77
+ try {
78
+ parsed = JSON.parse(await fs.readFile(filePath, 'utf8'));
79
+ }
80
+ catch {
81
+ return emptyCatalogResult(filePath, Boolean(input.configured), ['codex_model_catalog_invalid_json']);
82
+ }
83
+ const rawRows = catalogRows(parsed);
84
+ if (!rawRows) {
85
+ return emptyCatalogResult(filePath, Boolean(input.configured), ['codex_model_catalog_shape_invalid']);
86
+ }
87
+ const totalModelCount = rawRows.length;
88
+ const normalized = rawRows
89
+ .slice(0, CODEX_MODEL_CATALOG_MAX_MODELS)
90
+ .map((row, index) => normalizeCatalogModel(row, index));
91
+ const models = normalized
92
+ .map((row) => row.model)
93
+ .filter((row) => row !== null);
94
+ const duplicateModels = duplicateModelIds(models);
95
+ const blockers = uniqueStrings([
96
+ ...(totalModelCount > CODEX_MODEL_CATALOG_MAX_MODELS
97
+ ? [`codex_model_catalog_model_limit_exceeded:${totalModelCount}:${CODEX_MODEL_CATALOG_MAX_MODELS}`]
98
+ : []),
99
+ ...normalized.flatMap((row) => row.blockers),
100
+ ...duplicateModels.map((model) => `codex_model_catalog_duplicate_model:${model}`),
101
+ ...(models.length ? [] : ['codex_model_catalog_empty'])
102
+ ]);
103
+ return {
104
+ schema: 'sks.codex-model-catalog-read.v1',
105
+ ok: blockers.length === 0,
106
+ configured: Boolean(input.configured),
107
+ path: filePath,
108
+ model_count: models.length,
109
+ total_model_count: totalModelCount,
110
+ truncated: totalModelCount > CODEX_MODEL_CATALOG_MAX_MODELS,
111
+ models,
112
+ blockers,
113
+ warnings: []
114
+ };
115
+ }
116
+ export function normalizeCodexModelId(value) {
117
+ const model = String(value || '').trim();
118
+ if (!model || model.length > 240)
119
+ return null;
120
+ return /^[A-Za-z0-9][A-Za-z0-9._:/+\-]*$/.test(model) ? model : null;
121
+ }
122
+ export function normalizeCodexReasoningEffort(value) {
123
+ const effort = String(value || '').trim().toLowerCase();
124
+ if (!effort || effort.length > 32)
125
+ return null;
126
+ return /^[a-z0-9][a-z0-9_-]*$/.test(effort) ? effort : null;
127
+ }
128
+ export function inferProviderFromModel(model) {
129
+ const normalized = normalizeCodexModelId(model) || '';
130
+ const slash = normalized.indexOf('/');
131
+ return slash > 0 ? normalized.slice(0, slash) : 'openai';
132
+ }
133
+ export function readTopLevelTomlString(text, key) {
134
+ const lines = String(text || '').split('\n');
135
+ const firstTable = lines.findIndex((line) => /^\s*\[.+\]\s*$/.test(line));
136
+ const rootEnd = firstTable === -1 ? lines.length : firstTable;
137
+ const pattern = new RegExp(`^\\s*${escapeRegExp(key)}\\s*=\\s*"((?:\\\\.|[^"])*)"\\s*(?:#.*)?$`);
138
+ for (let index = 0; index < rootEnd; index += 1) {
139
+ const match = lines[index]?.match(pattern);
140
+ if (!match)
141
+ continue;
142
+ return decodeTomlBasicString(match[1] || '');
143
+ }
144
+ return null;
145
+ }
146
+ function expandCatalogPath(value, input) {
147
+ const env = input.env || process.env;
148
+ const home = input.home || env.HOME || os.homedir();
149
+ const trimmed = String(value || '').trim();
150
+ if (trimmed === '~')
151
+ return path.resolve(home);
152
+ if (trimmed.startsWith('~/'))
153
+ return path.resolve(home, trimmed.slice(2));
154
+ if (path.isAbsolute(trimmed))
155
+ return path.resolve(trimmed);
156
+ return path.resolve(input.configPath ? path.dirname(input.configPath) : codexHomePath({ home, env }), trimmed);
157
+ }
158
+ function catalogRows(value) {
159
+ if (!isRecord(value) || !Array.isArray(value.models))
160
+ return null;
161
+ return value.models;
162
+ }
163
+ function normalizeCatalogModel(value, index) {
164
+ if (!isRecord(value)) {
165
+ return { model: null, blockers: [`codex_model_catalog_row_invalid:${index}:object`] };
166
+ }
167
+ const blockers = validateCatalogModelInfo(value, index);
168
+ const visibility = String(value.visibility || '').trim().toLowerCase();
169
+ const model = normalizeCodexModelId(value.slug);
170
+ const efforts = normalizeReasoningEfforts(value.supported_reasoning_levels);
171
+ const defaultReasoning = value.default_reasoning_level === undefined || value.default_reasoning_level === null
172
+ ? null
173
+ : normalizeCodexReasoningEffort(value.default_reasoning_level);
174
+ const provider = normalizeProvider(value.provider) || inferProviderFromModel(model);
175
+ const multiAgentVersion = normalizeMultiAgentVersion(value.multi_agent_version);
176
+ if (blockers.length || !model || !provider || visibility === 'hide' || value.supported_in_api !== true) {
177
+ return { model: null, blockers };
178
+ }
179
+ return {
180
+ model: {
181
+ model,
182
+ provider,
183
+ display_name: String(value.display_name).trim(),
184
+ reasoning_efforts: efforts,
185
+ default_reasoning_effort: defaultReasoning && efforts.includes(defaultReasoning) ? defaultReasoning : null,
186
+ supported_in_api: true,
187
+ multi_agent_version: multiAgentVersion
188
+ },
189
+ blockers
190
+ };
191
+ }
192
+ export function catalogModelRowBlockers(value, index = 0) {
193
+ if (!isRecord(value))
194
+ return [`codex_model_catalog_row_invalid:${index}:object`];
195
+ return validateCatalogModelInfo(value, index);
196
+ }
197
+ function validateCatalogModelInfo(value, index) {
198
+ const blockers = [];
199
+ const required = [
200
+ ['slug', 'string'],
201
+ ['display_name', 'string'],
202
+ ['supported_reasoning_levels', 'array'],
203
+ ['shell_type', 'string'],
204
+ ['visibility', 'string'],
205
+ ['supported_in_api', 'boolean'],
206
+ ['priority', 'number'],
207
+ ['base_instructions', 'string'],
208
+ ['support_verbosity', 'boolean'],
209
+ ['truncation_policy', 'object'],
210
+ ['supports_parallel_tool_calls', 'boolean'],
211
+ ['experimental_supported_tools', 'array']
212
+ ];
213
+ for (const [field, expected] of required) {
214
+ if (!Object.prototype.hasOwnProperty.call(value, field)) {
215
+ blockers.push(`codex_model_catalog_required_field_missing:${index}:${field}`);
216
+ }
217
+ else if (valueType(value[field]) !== expected) {
218
+ blockers.push(`codex_model_catalog_field_type_invalid:${index}:${field}`);
219
+ }
220
+ }
221
+ const reasoningSummaryFields = ['supports_reasoning_summaries', 'supports_reasoning_summary_parameter']
222
+ .filter((field) => Object.prototype.hasOwnProperty.call(value, field));
223
+ if (!reasoningSummaryFields.length) {
224
+ blockers.push(`codex_model_catalog_required_field_missing:${index}:supports_reasoning_summaries`);
225
+ }
226
+ else {
227
+ for (const field of reasoningSummaryFields) {
228
+ if (valueType(value[field]) !== 'boolean') {
229
+ blockers.push(`codex_model_catalog_field_type_invalid:${index}:${field}`);
230
+ }
231
+ }
232
+ }
233
+ if (!normalizeCodexModelId(value.slug))
234
+ blockers.push(`codex_model_catalog_field_invalid:${index}:slug`);
235
+ if (typeof value.display_name === 'string' && !value.display_name.trim()) {
236
+ blockers.push(`codex_model_catalog_field_empty:${index}:display_name`);
237
+ }
238
+ if (typeof value.shell_type === 'string'
239
+ && !['default', 'local', 'unified_exec', 'disabled', 'shell_command'].includes(value.shell_type)) {
240
+ blockers.push(`codex_model_catalog_field_invalid:${index}:shell_type`);
241
+ }
242
+ if (typeof value.visibility === 'string' && !['list', 'hide', 'none'].includes(value.visibility)) {
243
+ blockers.push(`codex_model_catalog_field_invalid:${index}:visibility`);
244
+ }
245
+ if (typeof value.priority === 'number' && !Number.isFinite(value.priority)) {
246
+ blockers.push(`codex_model_catalog_field_invalid:${index}:priority`);
247
+ }
248
+ if (Array.isArray(value.supported_reasoning_levels)) {
249
+ for (const entry of value.supported_reasoning_levels) {
250
+ if (!isRecord(entry) || !normalizeCodexReasoningEffort(entry.effort)) {
251
+ blockers.push(`codex_model_catalog_reasoning_level_invalid:${index}`);
252
+ break;
253
+ }
254
+ }
255
+ }
256
+ const defaultReasoning = value.default_reasoning_level === undefined || value.default_reasoning_level === null
257
+ ? null
258
+ : normalizeCodexReasoningEffort(value.default_reasoning_level);
259
+ const efforts = normalizeReasoningEfforts(value.supported_reasoning_levels);
260
+ if (value.default_reasoning_level !== undefined
261
+ && value.default_reasoning_level !== null
262
+ && !defaultReasoning) {
263
+ blockers.push(`codex_model_catalog_field_invalid:${index}:default_reasoning_level`);
264
+ }
265
+ else if (defaultReasoning && !efforts.includes(defaultReasoning)) {
266
+ blockers.push(`codex_model_catalog_default_reasoning_not_supported:${index}`);
267
+ }
268
+ if (isRecord(value.truncation_policy)) {
269
+ if (!['bytes', 'tokens'].includes(String(value.truncation_policy.mode || ''))) {
270
+ blockers.push(`codex_model_catalog_truncation_policy_invalid:${index}:mode`);
271
+ }
272
+ if (typeof value.truncation_policy.limit !== 'number'
273
+ || !Number.isFinite(value.truncation_policy.limit)
274
+ || value.truncation_policy.limit <= 0) {
275
+ blockers.push(`codex_model_catalog_truncation_policy_invalid:${index}:limit`);
276
+ }
277
+ }
278
+ if (Array.isArray(value.experimental_supported_tools)
279
+ && value.experimental_supported_tools.some((entry) => typeof entry !== 'string')) {
280
+ blockers.push(`codex_model_catalog_field_invalid:${index}:experimental_supported_tools`);
281
+ }
282
+ if (value.provider !== undefined && !normalizeProvider(value.provider)) {
283
+ blockers.push(`codex_model_catalog_field_invalid:${index}:provider`);
284
+ }
285
+ if (value.multi_agent_version !== undefined
286
+ && value.multi_agent_version !== null
287
+ && !normalizeMultiAgentVersion(value.multi_agent_version)) {
288
+ blockers.push(`codex_model_catalog_field_invalid:${index}:multi_agent_version`);
289
+ }
290
+ return uniqueStrings(blockers);
291
+ }
292
+ function normalizeReasoningEfforts(value) {
293
+ if (!Array.isArray(value))
294
+ return [];
295
+ const seen = new Set();
296
+ const efforts = [];
297
+ for (const entry of value) {
298
+ const raw = isRecord(entry)
299
+ ? entry.effort || entry.reasoning_effort || entry.reasoningEffort || entry.id
300
+ : entry;
301
+ const effort = normalizeCodexReasoningEffort(raw);
302
+ if (!effort || seen.has(effort))
303
+ continue;
304
+ seen.add(effort);
305
+ efforts.push(effort);
306
+ }
307
+ return efforts;
308
+ }
309
+ function normalizeProvider(value) {
310
+ const provider = String(value || '').trim().toLowerCase();
311
+ if (!provider || provider.length > 80)
312
+ return null;
313
+ return /^[a-z0-9][a-z0-9._-]*$/.test(provider) ? provider : null;
314
+ }
315
+ function normalizeMultiAgentVersion(value) {
316
+ const normalized = String(value || '').trim().toLowerCase();
317
+ return normalized === 'v1' || normalized === 'v2' || normalized === 'disabled'
318
+ ? normalized
319
+ : null;
320
+ }
321
+ function secureCatalogFileBlockers(stat) {
322
+ const blockers = [];
323
+ if (!stat.isFile() || stat.isSymbolicLink())
324
+ blockers.push('codex_model_catalog_not_regular_file');
325
+ if (stat.size > CODEX_MODEL_CATALOG_MAX_BYTES)
326
+ blockers.push('codex_model_catalog_too_large');
327
+ const expectedUid = typeof process.getuid === 'function' ? process.getuid() : null;
328
+ if (expectedUid !== null && stat.uid !== expectedUid)
329
+ blockers.push('codex_model_catalog_owner_mismatch');
330
+ if (process.platform !== 'win32') {
331
+ const mode = Number(stat.mode) & 0o777;
332
+ if ((mode & 0o077) !== 0 || (mode & 0o400) === 0 || (mode & 0o100) !== 0) {
333
+ blockers.push(`codex_model_catalog_mode_insecure:${mode.toString(8).padStart(3, '0')}`);
334
+ }
335
+ }
336
+ return blockers;
337
+ }
338
+ function duplicateModelIds(models) {
339
+ const seen = new Set();
340
+ const duplicates = new Set();
341
+ for (const model of models) {
342
+ if (seen.has(model.model))
343
+ duplicates.add(model.model);
344
+ seen.add(model.model);
345
+ }
346
+ return [...duplicates].sort();
347
+ }
348
+ function valueType(value) {
349
+ if (value === null)
350
+ return 'null';
351
+ if (Array.isArray(value))
352
+ return 'array';
353
+ if (typeof value === 'object')
354
+ return 'object';
355
+ if (typeof value === 'string')
356
+ return 'string';
357
+ if (typeof value === 'number')
358
+ return 'number';
359
+ if (typeof value === 'boolean')
360
+ return 'boolean';
361
+ return 'undefined';
362
+ }
363
+ function emptyCatalogResult(filePath, configured, blockers) {
364
+ return {
365
+ schema: 'sks.codex-model-catalog-read.v1',
366
+ ok: blockers.length === 0,
367
+ configured,
368
+ path: filePath,
369
+ model_count: 0,
370
+ total_model_count: 0,
371
+ truncated: false,
372
+ models: [],
373
+ blockers,
374
+ warnings: []
375
+ };
376
+ }
377
+ function decodeTomlBasicString(value) {
378
+ try {
379
+ return JSON.parse(`"${value}"`);
380
+ }
381
+ catch {
382
+ return value;
383
+ }
384
+ }
@@ -0,0 +1,160 @@
1
+ import fs from 'node:fs/promises';
2
+ import path from 'node:path';
3
+ import { writeTextAtomic } from '../fsx.js';
4
+ import { codexHomePath } from './codex-model-catalog.js';
5
+ export const CODEX_MODELS_CACHE_STALE_FETCHED_AT = '2000-01-01T00:00:00Z';
6
+ export const CODEX_MODELS_CACHE_FILENAME = 'models_cache.json';
7
+ export function codexModelsCachePath(input = {}) {
8
+ return path.join(codexHomePath(input), CODEX_MODELS_CACHE_FILENAME);
9
+ }
10
+ function modelSlug(value) {
11
+ if (!value || typeof value !== 'object' || Array.isArray(value))
12
+ return '';
13
+ const row = value;
14
+ for (const key of ['slug', 'model', 'id']) {
15
+ const raw = row[key];
16
+ if (typeof raw === 'string' && raw.trim())
17
+ return raw.trim();
18
+ }
19
+ return '';
20
+ }
21
+ function mergeModelsBySlug(existingModels, catalogModels) {
22
+ const bySlug = new Map();
23
+ const unkeyed = [];
24
+ for (const row of existingModels) {
25
+ const slug = modelSlug(row);
26
+ if (slug)
27
+ bySlug.set(slug, row);
28
+ else
29
+ unkeyed.push(row);
30
+ }
31
+ for (const row of catalogModels) {
32
+ const slug = modelSlug(row);
33
+ if (slug)
34
+ bySlug.set(slug, row);
35
+ else
36
+ unkeyed.push(row);
37
+ }
38
+ return [...bySlug.values(), ...unkeyed];
39
+ }
40
+ export async function invalidateCodexModelsCache(input = {}) {
41
+ const cachePath = codexModelsCachePath(input);
42
+ const warnings = [];
43
+ const blockers = [];
44
+ const seedMode = input.seedMode || 'merge';
45
+ let existing = null;
46
+ try {
47
+ const raw = await fs.readFile(cachePath, 'utf8');
48
+ try {
49
+ const parsed = JSON.parse(raw);
50
+ if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
51
+ existing = parsed;
52
+ else
53
+ warnings.push('codex_models_cache_previous_shape_invalid');
54
+ }
55
+ catch {
56
+ warnings.push('codex_models_cache_previous_invalid_json');
57
+ }
58
+ }
59
+ catch (err) {
60
+ if (err?.code !== 'ENOENT') {
61
+ return {
62
+ schema: 'sks.codex-models-cache-invalidate.v1',
63
+ ok: false,
64
+ status: 'failed',
65
+ path: cachePath,
66
+ models_cache_invalidated: false,
67
+ restart_recommended: true,
68
+ model_count: 0,
69
+ warnings,
70
+ blockers: [`codex_models_cache_unreadable:${err?.code || 'unknown'}`]
71
+ };
72
+ }
73
+ }
74
+ let models = Array.isArray(existing?.models) ? [...existing.models] : [];
75
+ let seededFromCatalog = false;
76
+ const catalogPath = String(input.catalogPath || '').trim();
77
+ if (catalogPath && seedMode !== 'none') {
78
+ try {
79
+ const catalogRaw = await fs.readFile(catalogPath, 'utf8');
80
+ const catalog = JSON.parse(catalogRaw);
81
+ const catalogModels = Array.isArray(catalog?.models)
82
+ ? catalog.models
83
+ : Array.isArray(catalog)
84
+ ? catalog
85
+ : null;
86
+ if (Array.isArray(catalogModels)) {
87
+ models = seedMode === 'replace'
88
+ ? catalogModels
89
+ : mergeModelsBySlug(models, catalogModels);
90
+ seededFromCatalog = true;
91
+ }
92
+ else {
93
+ warnings.push('codex_models_cache_catalog_shape_invalid');
94
+ }
95
+ }
96
+ catch (err) {
97
+ if (err?.code === 'ENOENT')
98
+ warnings.push('codex_models_cache_catalog_missing');
99
+ else
100
+ warnings.push('codex_models_cache_catalog_unreadable');
101
+ }
102
+ }
103
+ if (!existing && models.length === 0) {
104
+ return {
105
+ schema: 'sks.codex-models-cache-invalidate.v1',
106
+ ok: true,
107
+ status: 'missing',
108
+ path: cachePath,
109
+ models_cache_invalidated: false,
110
+ restart_recommended: true,
111
+ model_count: 0,
112
+ warnings,
113
+ blockers
114
+ };
115
+ }
116
+ const existingClient = typeof existing?.client_version === 'string' ? existing.client_version.trim() : '';
117
+ const clientVersion = existingClient && existingClient !== '0.0.0'
118
+ ? existingClient
119
+ : '0.146.0';
120
+ const wrapper = {
121
+ fetched_at: CODEX_MODELS_CACHE_STALE_FETCHED_AT,
122
+ client_version: clientVersion,
123
+ models
124
+ };
125
+ try {
126
+ await writeTextAtomic(cachePath, `${JSON.stringify(wrapper, null, 2)}\n`, { mode: 0o600 });
127
+ }
128
+ catch (err) {
129
+ return {
130
+ schema: 'sks.codex-models-cache-invalidate.v1',
131
+ ok: false,
132
+ status: existing ? 'malformed_preserved' : 'failed',
133
+ path: cachePath,
134
+ models_cache_invalidated: false,
135
+ restart_recommended: true,
136
+ model_count: models.length,
137
+ warnings,
138
+ blockers: [`codex_models_cache_write_failed:${err?.code || err?.message || 'unknown'}`]
139
+ };
140
+ }
141
+ return {
142
+ schema: 'sks.codex-models-cache-invalidate.v1',
143
+ ok: true,
144
+ status: seededFromCatalog ? 'seeded_from_catalog' : 'invalidated',
145
+ path: cachePath,
146
+ models_cache_invalidated: true,
147
+ restart_recommended: true,
148
+ model_count: models.length,
149
+ warnings,
150
+ blockers
151
+ };
152
+ }
153
+ export function desktopPickerStatusFromCache(input) {
154
+ const cache = input.cache;
155
+ return {
156
+ catalog_ok: input.catalogOk,
157
+ models_cache_invalidated: cache?.models_cache_invalidated === true,
158
+ restart_recommended: cache?.restart_recommended === true || input.restartAppRequested === true
159
+ };
160
+ }