sneakoscope 7.3.0 → 7.6.0

package/dist/core/imagegen/codex-lb-imagegen-target.js

@@ -6,13 +6,19 @@ export const CODEX_LB_IMAGEGEN_TARGET_SCHEMA = 'sks.codex-lb-imagegen-target.v1'
 export async function resolveCodexLbImagegenTarget(opts = {}) {
     const env = opts.env || process.env;
     const home = opts.home || env.HOME || os.homedir();
+    const codexHome = opts.codexHome || env.CODEX_HOME || path.join(home, '.codex');
     const configText = typeof opts.configText === 'string'
         ? opts.configText
-        : await readText(path.join(home, '.codex', 'config.toml'), '').catch(() => '');
+        : await readText(path.join(codexHome, 'config.toml'), '').catch(() => '');
     const selected = topLevelTomlString(configText, 'model_provider') === 'codex-lb';
-    const loaded = await loadCodexLbEnv({ home, processEnv: env }).catch(() => null);
-    const catalogModels = await readCatalogModels(configText, home);
-    const explicit = String(opts.explicitModel || env.SKS_IMAGEGEN_RESPONSES_MODEL || env.OPENAI_MODEL || '').trim();
+    const loaded = await loadCodexLbEnv({
+        home,
+        processEnv: {},
+        envPath: path.join(codexHome, 'sks-codex-lb.env'),
+        metadataPath: path.join(codexHome, 'sks-codex-lb.json')
+    }).catch(() => null);
+    const catalogModels = await readCatalogModels(configText, home, codexHome);
+    const explicit = String(opts.explicitModel || env.SKS_IMAGEGEN_RESPONSES_MODEL || '').trim();
     const configuredModel = topLevelTomlString(configText, 'model');
     const { model, model_source } = explicit
         ? { model: explicit, model_source: 'explicit' }
@@ -46,16 +52,17 @@ function codexLbImagegenBlocker(state) {
         return 'codex_lb_imagegen_model_unresolved';
     return null;
 }
-async function readCatalogModels(configText, home) {
+async function readCatalogModels(configText, home, codexHome) {
     const configured = topLevelTomlString(configText, 'model_catalog_json');
     const candidates = [
-        configured ? path.resolve(configured.replace(/^~(?=\/|$)/, home)) : '',
-        path.join(home, '.codex', 'sks-codex-lb-tool-catalog.json')
+        configured ? resolveCatalogPath(configured, home, codexHome) : '',
+        path.join(codexHome, 'sks-codex-lb-tool-catalog.json')
     ].filter(Boolean);
     for (const file of candidates) {
         const payload = await readJson(file, null).catch(() => null);
         const rows = Array.isArray(payload?.models) ? payload.models : Array.isArray(payload?.data) ? payload.data : [];
         const slugs = rows
+            .filter((row) => row?.supported_in_api !== false && !hiddenCatalogRow(row))
             .map((row) => String(row?.slug || row?.id || row?.model || '').trim())
             .filter(Boolean);
         if (slugs.length)
@@ -63,6 +70,13 @@ async function readCatalogModels(configText, home) {
     }
     return [];
 }
+function resolveCatalogPath(configured, home, codexHome) {
+    const expanded = configured.replace(/^~(?=\/|$)/, home);
+    return path.isAbsolute(expanded) ? expanded : path.resolve(codexHome, expanded);
+}
+function hiddenCatalogRow(row) {
+    return ['hide', 'hidden', 'internal', 'none', 'unavailable'].includes(String(row?.visibility || '').trim().toLowerCase());
+}
 function topLevelTomlString(text, key) {
     const topLevel = String(text || '').split(/\n\s*\[/)[0] || '';
     const re = new RegExp(`(^|\\n)\\s*${key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*=\\s*"([^"]*)"\\s*(?:#.*)?(?=\\n|$)`);

package/dist/core/imagegen/imagegen-capability.js

@@ -1,6 +1,6 @@
 import os from 'node:os';
 import path from 'node:path';
-import { codexLbEnvPath, loadCodexLbEnv, parseShellEnvValue } from '../codex-lb/codex-lb-env.js';
+import { loadCodexLbEnv, parseShellEnvValue } from '../codex-lb/codex-lb-env.js';
 import { nowIso, readText, runProcess, which } from '../fsx.js';
 import { redactSecrets, redactString } from '../secret-redaction.js';
 import { evaluateImagegenAuthReadiness } from './imagegen-auth-readiness.js';
@@ -97,7 +97,8 @@ export async function detectImagegenCapability(opts = {}) {
 }
 async function detectCodexLbImagegenAuth(opts = {}, env = process.env) {
     const home = opts.home || env.HOME || process.env.HOME || os.homedir();
-    const configPath = opts.configPath || path.join(home, '.codex', 'config.toml');
+    const codexHome = opts.codexHome || env.CODEX_HOME || path.join(home, '.codex');
+    const configPath = opts.configPath || path.join(codexHome, 'config.toml');
     const configText = typeof opts.configText === 'string'
         ? opts.configText
         : await readText(configPath, '').catch(() => '');
@@ -107,11 +108,16 @@ async function detectCodexLbImagegenAuth(opts = {}, env = process.env) {
     const requiresOpenAiAuth = tomlBoolean(block, 'requires_openai_auth');
     const envKey = tomlString(block, 'env_key');
     const baseUrl = tomlString(block, 'base_url') || String(env.CODEX_LB_BASE_URL || '').trim();
-    const envPath = opts.codexLbEnvPath || codexLbEnvPath(home);
+    const envPath = opts.codexLbEnvPath || path.join(codexHome, 'sks-codex-lb.env');
     const injectedEnvText = typeof opts.codexLbEnvText === 'string' ? opts.codexLbEnvText : null;
     const keyFromInjectedFile = injectedEnvText !== null && envKey ? parseShellEnvValue(injectedEnvText, envKey) : '';
     const loaded = injectedEnvText === null
-        ? await loadCodexLbEnv({ home, processEnv: env, envPath }).catch(() => null)
+        ? await loadCodexLbEnv({
+            home,
+            processEnv: {},
+            envPath,
+            metadataPath: path.join(codexHome, 'sks-codex-lb.json')
+        }).catch(() => null)
         : null;
     const apiKeyPresent = Boolean(opts.codexLbApiKey || keyFromInjectedFile || loaded?.secret_api_key);
     const apiKeySource = opts.codexLbApiKey

package/dist/core/imagegen/require-imagegen.js

@@ -1,15 +1,27 @@
 import { detectImagegenCapability } from './imagegen-capability.js';
 import { repairCodexImagegen } from '../doctor/imagegen-repair.js';
 export async function requireCodexImagegen(root, opts = {}) {
-    const capability = await detectImagegenCapability({
-        codexBin: opts.codexBin || undefined,
+    const capabilityOpts = {
         timeoutMs: opts.timeoutMs || 5000
-    }).catch((err) => ({
+    };
+    if (opts.codexBin !== undefined && opts.codexBin !== null)
+        capabilityOpts.codexBin = opts.codexBin;
+    if (opts.home !== undefined)
+        capabilityOpts.home = opts.home;
+    if (opts.codexHome !== undefined)
+        capabilityOpts.codexHome = opts.codexHome;
+    if (opts.env !== undefined)
+        capabilityOpts.env = opts.env;
+    if (opts.configText !== undefined)
+        capabilityOpts.configText = opts.configText;
+    if (opts.codexLbEnvText !== undefined)
+        capabilityOpts.codexLbEnvText = opts.codexLbEnvText;
+    const capability = await detectImagegenCapability(capabilityOpts).catch((err) => ({
         ok: false,
         core_ready: false,
         blockers: [err instanceof Error ? err.message : String(err)]
     }));
-    const capabilityReadyBeforeRepair = capability.core_ready === true;
+    const capabilityReadyBeforeRepair = imagegenPreflightReady(capability);
     const repair = opts.autoRepair === true && !capabilityReadyBeforeRepair
         ? await repairCodexImagegen({
             root,
@@ -25,7 +37,10 @@ export async function requireCodexImagegen(root, opts = {}) {
     const finalCapability = repair
         ? repair.after || capability
         : capability;
-    const capabilityReady = finalCapability.core_ready === true || repair?.capability_ready === true;
+    const capabilityReady = imagegenPreflightReady(finalCapability) || repair?.capability_ready === true;
+    const preflightProvider = finalCapability.core_ready === true
+        ? 'codex_app_builtin'
+        : codexLbImagegenReady(finalCapability) ? 'codex_lb' : null;
     const currentTaskToolManifestVerified = repair?.current_task_tool_manifest_verified === true;
     const generatedOutputVerified = finalCapability.real_output_verified_by_capability_check === true
         || repair?.real_generation_verified === true;
@@ -55,6 +70,7 @@ export async function requireCodexImagegen(root, opts = {}) {
         preflight_ready: preflightReady,
         preflight_only: true,
         preflight_does_not_satisfy_generated_output_proof: true,
+        preflight_provider: preflightProvider,
         capability_ready: capabilityReady,
         route_ready: routeReady,
         current_task_tool_manifest_verified: currentTaskToolManifestVerified,
@@ -80,3 +96,11 @@ export async function requireCodexImagegen(root, opts = {}) {
         blockers
     };
 }
+function imagegenPreflightReady(capability) {
+    return capability?.core_ready === true || codexLbImagegenReady(capability);
+}
+function codexLbImagegenReady(capability) {
+    return capability?.codex_lb?.selected === true
+        && capability?.codex_lb?.available === true
+        && capability?.codex_lb?.blocker == null;
+}

package/dist/core/init/skills.js

@@ -12,7 +12,7 @@ import { reconcileRetiredAgentRoleResidue } from '../agents/agent-role-config.js
 import { ensureConfinedDirectory, inspectConfinedPath, moveConfinedPath, publicPathError, removeConfinedDirectoryIfEmpty, removeManagedPathVerified, uniqueConfinedPath } from '../managed-path-safety.js';
 import { collectNestedProjectRoots } from '../doctor/current-project-guidance-nested.js';
 import { coreEngineeringDirectiveReferenceText, engineeringSanityPolicyText } from '../lean-engineering-policy.js';
-import { AWESOME_DESIGN_MD_REFERENCE, CODEX_APP_IMAGE_GENERATION_DOC_URL, CODEX_COMPUTER_USE_ONLY_POLICY, CODEX_IMAGEGEN_EVIDENCE_SOURCE, CODEX_IMAGEGEN_REQUIRED_POLICY, CODEX_WEB_VERIFICATION_POLICY, DEFAULT_CODEX_APP_PLUGINS, DESIGN_SYSTEM_SSOT, DOLLAR_COMMANDS, DOLLAR_SKILL_NAMES, FROM_CHAT_IMG_CHECKLIST_ARTIFACT, FROM_CHAT_IMG_COVERAGE_ARTIFACT, FROM_CHAT_IMG_QA_LOOP_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_SESSIONS, GETDESIGN_REFERENCE, IMAGEGEN_SOCIAL_SOURCE_POLICY, LEGACY_DOLLAR_SKILL_NAMES, OPENAI_CHATGPT_IMAGES_2_DOC_URL, OPENAI_GPT_IMAGE_2_MODEL_DOC_URL, OPENAI_IMAGE_GENERATION_DOC_URL, PPT_CONDITIONAL_SKILL_ALLOWLIST, PPT_PIPELINE_MCP_ALLOWLIST, PPT_PIPELINE_SKILL_ALLOWLIST, RECOMMENDED_SKILLS, RESERVED_CODEX_PLUGIN_SKILL_NAMES, SOLUTION_SCOUT_SKILL_NAME, chatCaptureIntakeText, context7ConfigToml, getdesignReferencePolicyText, imageUxReviewPipelinePolicyText, outcomeRubricPolicyText, pptPipelineAllowlistPolicyText, productDesignPluginPolicyText, speedLanePolicyText, stackCurrentDocsPolicyText, triwikiContextTrackingText, triwikiStagePolicyText } from '../routes.js';
+import { AWESOME_DESIGN_MD_REFERENCE, CODEX_APP_IMAGE_GENERATION_DOC_URL, CODEX_COMPUTER_USE_ONLY_POLICY, CODEX_IMAGEGEN_EVIDENCE_SOURCE, CODEX_IMAGEGEN_REQUIRED_POLICY, CODEX_WEB_VERIFICATION_POLICY, DEFAULT_CODEX_APP_PLUGINS, DESIGN_SYSTEM_SSOT, DOLLAR_COMMANDS, DOLLAR_SKILL_NAMES, FROM_CHAT_IMG_CHECKLIST_ARTIFACT, FROM_CHAT_IMG_COVERAGE_ARTIFACT, FROM_CHAT_IMG_QA_LOOP_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_SESSIONS, GETDESIGN_REFERENCE, IMAGEGEN_SOCIAL_SOURCE_POLICY, LEGACY_DOLLAR_SKILL_NAMES, OPENAI_CHATGPT_IMAGES_2_DOC_URL, OPENAI_GPT_IMAGE_2_MODEL_DOC_URL, OPENAI_IMAGE_GENERATION_DOC_URL, PPT_CONDITIONAL_SKILL_ALLOWLIST, PPT_PIPELINE_MCP_ALLOWLIST, PPT_PIPELINE_SKILL_ALLOWLIST, RECOMMENDED_SKILLS, RESERVED_CODEX_PLUGIN_SKILL_NAMES, SOLUTION_SCOUT_SKILL_NAME, chatCaptureIntakeText, context7ConfigToml, getdesignReferencePolicyText, outcomeRubricPolicyText, pptPipelineAllowlistPolicyText, productDesignPluginPolicyText, speedLanePolicyText, stackCurrentDocsPolicyText, triwikiContextTrackingText, triwikiStagePolicyText } from '../routes.js';
 import { prefixKnownSksDollarReferences, sksPrefixedSkillName } from '../routes/dollar-prefix.js';
 import { escapeRegExp } from '../text/regex.js';
 const SKS_SKILL_MANIFEST_FILE = '.sks-generated.json';
@@ -21,6 +21,12 @@ const GENERATED_PRUNE_POLICY = 'remove_previous_sks_generated_paths_absent_from_
 const REFLECTION_MEMORY_PATH = '.sneakoscope/memory/q2_facts/post-route-reflection.md';
 const MANAGED_SKILL_MARKER_RE = /BEGIN SKS (?:IMMUTABLE CORE|MANAGED) SKILL/;
 const FORGE_SKILL_MARKER_RE = /BEGIN SKS FORGE SKILL/;
+const RETIRED_PUBLIC_IMAGE_UX_REVIEW_SKILL_ALIASES = [
+    'sks-ux-review',
+    'sks-visual-review',
+    'sks-ui-ux-review'
+];
+const RETIRED_PUBLIC_IMAGE_UX_REVIEW_SKILL_ALIAS_SET = new Set(RETIRED_PUBLIC_IMAGE_UX_REVIEW_SKILL_ALIASES);
 export const REMOVED_SKS_SKILL_NAMES = [
     'old-workflow',
     'team-legacy',
@@ -85,7 +91,6 @@ function reflectionInstructionText(commandPrefix = 'sks') {
 async function installOfficialSkills(root) {
     const quarantinedUserCollisions = [];
     const quarantinedManifestCollisions = await prepareReservedSkillManifestsForWrite(root);
-    const imageUxReviewSkill = (name) => `---\nname: ${name}\ndescription: $Image-UX-Review/$UX-Review imagegen/gpt-image-2 annotated UI/UX review loop.\n---\n\nUse only for $Image-UX-Review, $UX-Review, $visual-review, or $ui-ux-review UI/UX review requests. ${imageUxReviewPipelinePolicyText()} Route start must check Codex App imagegen capability and run the SKS imagegen repair loop once; if $imagegen/gpt-image-2 is still unavailable, stop with codex_imagegen_unavailable instead of doing text-only review or direct API substitution. Core loop: capture or attach source UI screenshots, then invoke Codex App $imagegen with gpt-image-2 to create a new generated annotated review image from each source screenshot, then analyze the generated review image with vision/OCR into image-ux-issue-ledger.json, then apply only requested safe fixes and recheck changed screens. Text-only screenshot critique cannot satisfy full verification; missing generated annotated review images keep full image-ux-review-gate.json verification blocked, but may close verified_partial/reference-only when source screenshots plus hashes, docs evidence, source Image Voxel anchors, and Honest Mode evidence exist. For live web/browser/webapp capture use Codex Chrome Extension first and halt if it is not installed/enabled; use Codex Computer Use only for native Mac/non-web app screens. Required artifacts: image-ux-review-policy.json, image-ux-screen-inventory.json, image-ux-generated-review-ledger.json, image-ux-issue-ledger.json, image-ux-iteration-report.json, image-ux-review-gate.json. Finish with reflection and Honest Mode.\n`;
     const canonicalMadSksSqlPlanePolicy = madSksSqlPlanePolicyText()
         .replace(/^---[\s\S]*?---\s*/, '')
         .trim();
@@ -96,8 +101,8 @@ async function installOfficialSkills(root) {
         'plan': `---\nname: plan\ndescription: Plan scaffold only - writes a fixed-template .sneakoscope/plans/<slug>.md, never touches code. Not project-specific decision-complete planning. 예: $Plan "결제 모듈 리팩터"\n---\n\nUse when the user invokes $Plan or asks for a plan-only frontdoor. Produce a concrete plan artifact under .sneakoscope/plans/<slug>.md with goal, scope, files to inspect, implementation steps, acceptance checks, and rollback notes. Do not edit product/source files, generated harness files, package metadata, or docs beyond the plan artifact. Keep implementation_allowed=false and hand off execution to $Work only after the user or route explicitly moves from planning to work. Finish with what is planned, what remains unimplemented, and Honest Mode.\n`,
         'work': `---\nname: work\ndescription: Execute the latest plan with evidence-gated completion. 예: $Work\n---\n\nUse when the user invokes $Work or asks to execute the latest SKS plan. Resolve the newest .sneakoscope/plans/*.md, route execution through Naruto evidence gates, keep leases and verification artifacts current, and do not claim completion without machine evidence or explicit blocker evidence. If no plan exists, block with a clear next action: run $Plan first or provide a task.\n`,
         'review': `---\nname: review\ndescription: Parallel diff review with machine-evidence first findings. 예: $Review 또는 sks review --staged\n---\n\nUse when the user asks for $Review or sks review. Review the selected diff read-only unless --fix is explicitly supplied. Machine evidence such as TypeScript, lint, tests, conflict markers, or secret scans outranks LLM findings and must be tagged evidence: machine; judgment-only findings must be tagged evidence: llm. --fix may attempt at most one machine-evidence fix pass and must re-run verification once. Do not mutate code for LLM-only opinions.\n`,
-        'fast-mode': `---\nname: fast-mode\ndescription: Dollar-command route for $Fast-Mode, $Fast-On, and $Fast-Off global Codex Desktop Fast mode toggles.\n---\n\nUse when the user invokes $Fast-Mode, $Fast-On, $Fast-Off, or asks to turn SKS Fast mode on/off. Prefer \`sks fast-mode on|off|status|clear --json\`. By default on/off updates the global Codex Desktop config so GPT 5.5 Fast persists and also keeps .sneakoscope/state/fast-mode.json in sync for SKS workers. Use \`--project\` only when the user explicitly wants project-local worker preference without touching global Codex config. Explicit runtime flags still win: \`--fast\`, \`--no-fast\`, and \`--service-tier standard|fast\` override the saved preference for that run. Finish with a short status and Honest Mode; do not start Naruto or broad implementation for a toggle-only request.\n`,
-        'fast-on': `---\nname: fast-on\ndescription: Alias for $Fast-On global Codex Desktop GPT 5.5 Fast enablement.\n---\n\nUse the same rules as fast-mode. Run or instruct \`sks fast-mode on --json\`, then report Global (desktop), Project (sks workers), state file, and the fact that explicit per-run flags still override the saved preference.\n`,
+        'fast-mode': `---\nname: fast-mode\ndescription: Dollar-command route for $Fast-Mode, $Fast-On, and $Fast-Off global Codex Desktop Fast mode toggles.\n---\n\nUse when the user invokes $Fast-Mode, $Fast-On, $Fast-Off, or asks to turn SKS Fast mode on/off. Prefer \`sks fast-mode on|off|status|clear --json\`. By default on/off updates the global Codex Desktop config so GPT-5.6 Fast (official service_tier) persists and also keeps .sneakoscope/state/fast-mode.json in sync for SKS workers. Use \`--project\` only when the user explicitly wants project-local worker preference without touching global Codex config. Explicit runtime flags still win: \`--fast\`, \`--no-fast\`, and \`--service-tier standard|fast\` override the saved preference for that run. Finish with a short status and Honest Mode; do not start Naruto or broad implementation for a toggle-only request.\n`,
+        'fast-on': `---\nname: fast-on\ndescription: Alias for $Fast-On global Codex Desktop GPT-5.6 Fast enablement.\n---\n\nUse the same rules as fast-mode. Run or instruct \`sks fast-mode on --json\`, then report Global (desktop), Project (sks workers), state file, and the fact that explicit per-run flags still override the saved preference.\n`,
         'fast-off': `---\nname: fast-off\ndescription: Alias for $Fast-Off global Codex Desktop Fast mode disablement.\n---\n\nUse the same rules as fast-mode. Run or instruct \`sks fast-mode off --json\`, then report Global (desktop), Project (sks workers), state file, and the fact that explicit per-run flags still override the saved preference.\n`,
         'with-local-llm-on': `---\nname: with-local-llm-on\ndescription: Dollar-command route for $with-local-llm-on local Ollama worker enablement.\n---\n\nUse when the user invokes $with-local-llm-on or asks to enable the optional local Ollama worker backend. Prefer \`sks with-local-llm on --json\`. The command writes the machine-local config at \`~/.sneakoscope/local-model.json\`. Default off means SKS stays GPT-only until this command enables local workers. Enabled mode only lets policy-eligible simple code patch-envelope or read-only collection worker slices use Ollama; GPT/Codex still owns strategy, planning, design, review, verification, safety, and integration. \`--no-ollama\` and \`SKS_OLLAMA_WORKERS=0\` still force local workers off for a run. Finish with a short status and Honest Mode; do not start Naruto for a toggle-only request.\n`,
         'with-local-llm-off': `---\nname: with-local-llm-off\ndescription: Dollar-command route for $with-local-llm-off local Ollama worker disablement.\n---\n\nUse when the user invokes $with-local-llm-off or asks to disable the optional local Ollama worker backend. Prefer \`sks with-local-llm off --json\`. The command writes the machine-local config at \`~/.sneakoscope/local-model.json\`. Disabled mode keeps SKS GPT-only by default. Strategy, planning, design, review, verification, safety, and integration remain GPT/Codex-owned regardless of this toggle. Finish with a short status and Honest Mode; do not start Naruto for a toggle-only request.\n`,
@@ -119,7 +124,7 @@ async function installOfficialSkills(root) {
         'help': `---\nname: help\ndescription: Dollar-command route for $Help or $help explaining installed SKS commands and workflows.\n---\n\nUse when the user invokes $Help/$help or asks what commands exist. Prefer concise output from sks commands, sks usage <topic>, sks quickstart, sks aliases, and sks codex-app.\n`,
         'prompt-pipeline': `---\nname: prompt-pipeline\ndescription: Default SKS prompt routing for execution requests; Answer and DFix remain lightweight.\n---\n\nClassify only the route and the constraints that change execution. Answer handles real information requests; DFix handles tiny copy/config/docs/labels/spacing/translation/mechanical edits; general code-changing work uses Naruto with Codex official subagents. Preserve the literal user request; TriWiki may enrich it but never replace an explicit requirement. ${coreEngineeringDirectiveReferenceText()} ${engineeringSanityPolicyText()} For code work, identify the requested outcome, actual code/data flow, exact write scope, acceptance criteria, and the smallest meaningful verification. Load route-specific Design, PPT, image, browser, research, DB, release, or Context7 rules only when that route or external contract requires them. Materialize pipeline-plan.json with route, scopes, verification, and blockers, then finish the requested work instead of stopping at the plan.\n`,
         [SOLUTION_SCOUT_SKILL_NAME]: `---\nname: ${SOLUTION_SCOUT_SKILL_NAME}\ndescription: Optional source scout for fixes that materially depend on external precedent.\n---\n\nUse only when the user asks for similar cases or when a package, API, platform, or externally documented behavior makes outside precedent materially useful. Search with the concrete symptom and current stack, prefer primary sources, and keep the local code path authoritative. Do not add this step to ordinary local bugfixes. If external evidence is unavailable, record that gap instead of inventing a workaround.\n`,
-        'reasoning-router': `---\nname: reasoning-router\ndescription: Temporary SKS reasoning-effort routing for every command and pipeline route.\n---\n\nmedium: simple copy/color/discovery/setup/mechanical edits. high: logic, safety, architecture, DB, orchestration, refactor, multi-file work. xhigh: research, AutoResearch, falsification, benchmarks, SEO/GEO, open-ended discovery, and From-Chat-IMG image work-order analysis. Routing is temporary; return to default after the gate. Inspect with sks reasoning and sks pipeline status.\n`,
+        'reasoning-router': `---\nname: reasoning-router\ndescription: Temporary SKS reasoning-effort routing for every command and pipeline route on the GPT-5.6 family.\n---\n\nGPT-5.6 efforts: none/low/medium/high/xhigh/max. Route medium for simple copy/color/discovery/setup/mechanical edits; high for logic, safety, architecture, DB, orchestration, refactor, multi-file work; xhigh for research, AutoResearch, falsification, benchmarks, SEO/GEO, open-ended discovery, and From-Chat-IMG analysis; max only for hardest quality-first judgment. Prefer gpt-5.6-luna / terra / sol role defaults over legacy model aliases. Routing is temporary; return to default after the gate. Inspect with sks reasoning and sks pipeline status.\n`,
         'pipeline-runner': `---\nname: pipeline-runner\ndescription: Execute SKS routes with bounded state, evidence, reflection, and Honest Mode.\n---\n\nEvery $ command selects a route. Use current.json, mission artifacts, and pipeline-plan.json as bounded execution state; load only the selected route skill. ${coreEngineeringDirectiveReferenceText()} ${engineeringSanityPolicyText()} Codex native /goal is the only persisted goal owner. Use official Codex subagents only when the route requires independent slices, keep parent-owned integration, use bounded TriWiki context, fetch current external docs only when relevant, record real blockers, refresh and validate evidence, run reflection for full routes, and finish with a completion summary plus Honest Mode.\n`,
         'context7-docs': `---\nname: context7-docs\ndescription: Enforce Context7 MCP documentation evidence for SKS routes that depend on external libraries, frameworks, APIs, MCPs, package managers, DB SDKs, or generated docs.\n---\n\nWhen required, resolve-library-id, then query-docs for the resolved id. Legacy get-library-docs evidence is accepted. Prefer sks context7 tools/resolve/docs/evidence and finish only after both evidence stages exist. Check setup with sks context7 check.\n`,
         'super-search': `---\nname: super-search\ndescription: Dollar-command route for $Super-Search provider-independent source intelligence.\n---\n\nUse when the user invokes $Super-Search or asks for Super-Search source intelligence, source acquisition, X-search-style collection, URL acquisition, source normalization, claim ledgers, or citation proof. Prefer \`sks super-search doctor --json\` for readiness and \`sks super-search run "<query>" --mode balanced --json\` for provider-independent source proof; use \`sks super-search x "<query>" --json\` for X-search intent and \`sks super-search fetch "<url>" --json\` for URL acquisition. Context7 is required only when the query depends on current package/API/framework/MCP/generated documentation behavior. Provider-specific credentials are optional and must not be required for route readiness. Evidence/artifacts remain under \`.sneakoscope/missions/<super-search-* or route mission>/super-search/\`: intent.json, axes.json, query-variants.json, provider-plan.json, source-ledger.json, lead-ledger.json, claim-ledger.json, attempt-ledger.json, synthesis.md, super-search-proof.json, super-search-gate.json, and super-search-result.json. Do not turn weak discovery into supported claims; finish with an Honest Mode summary of verified sources, blockers, and unverified external coverage.\n`,
@@ -136,10 +141,6 @@ async function installOfficialSkills(root) {
         'gx-visual-validate': `---\nname: gx-visual-validate\ndescription: Validate render metadata against vgraph.json and beta.json.\n---\n\nRun sks gx validate and drift; fail stale or incomplete hashes, nodes, edges, invariants, or anchors.\n`,
         'turbo-context-pack': `---\nname: turbo-context-pack\ndescription: Build ultra-low-token context packet with Q4 bits, Q3 tags, top-K claims, and minimal evidence.\n---\n\nDefault to Q4/Q3 plus TriWiki RGBA anchors and attention.use_first. Add Q2/Q1 only when needed or when attention.hydrate_first says source hydration is required. Keep id, hash, path, and coordinate tuple for hydration.\n`,
         'performance-evaluator': `---\nname: performance-evaluator\ndescription: Evaluate SKS performance, evidence-backed token usage, serialized-size proxies, accuracy-proxy, context-compression, or workflow improvements.\n---\n\nUse sks eval run/compare before claims. Treat serialized_size_bytes as a deterministic non-token proxy. Claim token savings only when actual baseline and candidate token counts include an evidence source; otherwise report token savings as not measured. Report accuracy_delta/proxy, required_recall, support, and meaningful_improvement without substituting proxy size for token evidence.\n`,
-        'image-ux-review': imageUxReviewSkill('image-ux-review'),
-        'ux-review': imageUxReviewSkill('ux-review'),
-        'visual-review': imageUxReviewSkill('visual-review'),
-        'ui-ux-review': imageUxReviewSkill('ui-ux-review'),
         'imagegen': `---\nname: imagegen\ndescription: Required bridge to Codex App built-in image generation for logos, image assets, raster visuals, and image edits.\n---\n\nUse for generated or edited image assets: logo, product image, illustration, sprite, mockup, texture, cutout, or bitmap. Prefer the official Codex App built-in image generation feature documented at ${CODEX_APP_IMAGE_GENERATION_DOC_URL}: ask naturally or invoke \`$imagegen\`. SKS route code checks capability before image-dependent routes, attempts doctor imagegen repair once, and reports codex_imagegen_unavailable if Codex App $imagegen still is not ready. For newest-model requests, make the prompt explicit: "Use ChatGPT Images 2.0 / GPT Image 2.0 with gpt-image-2." Useful official references are ${OPENAI_CHATGPT_IMAGES_2_DOC_URL}, ${OPENAI_GPT_IMAGE_2_MODEL_DOC_URL}, and ${OPENAI_IMAGE_GENERATION_DOC_URL}. Codex App image generation counts against Codex usage limits. Capability detection is not output proof; full SKS evidence requires a real selected raster output path or generated review image artifact. Direct OpenAI API fallback is non-Codex evidence and does not satisfy SKS route evidence unless a separate non-Codex API task is explicitly requested. ${IMAGEGEN_SOCIAL_SOURCE_POLICY} ${CODEX_IMAGEGEN_REQUIRED_POLICY} Do not substitute placeholder SVG/HTML/CSS for requested raster assets; follow design.md when relevant.\n`,
         'imagegen-source-scout': `---\nname: imagegen-source-scout\ndescription: Source scout for current GPT Image 2.0/gpt-image-2 prompt guidance, official docs, and X/social workflow signals.\n---\n\nUse when the user asks for the latest imagegen docs, ChatGPT Images 2.0 / GPT Image 2.0 / gpt-image-2 behavior, X/social reactions, prompt examples, or community workflow hints before creating an image prompt or SKS imagegen policy. Source order: official OpenAI announcement (${OPENAI_CHATGPT_IMAGES_2_DOC_URL}), Codex App image generation docs (${CODEX_APP_IMAGE_GENERATION_DOC_URL}), gpt-image-2 model docs (${OPENAI_GPT_IMAGE_2_MODEL_DOC_URL}), OpenAI Image Generation API docs (${OPENAI_IMAGE_GENERATION_DOC_URL}), then public X/social/community search for prompt-quality heuristics only. ${IMAGEGEN_SOCIAL_SOURCE_POLICY} If social or web search is unavailable, record that social coverage is unverified and continue from official docs. Output a compact evidence split: official capability/evidence rules, prompt heuristics, social/workflow signals, and blockers. Do not generate images itself; pair this with the imagegen skill for actual raster output.\n`,
         'getdesign-reference': `---\nname: getdesign-reference\ndescription: Use getdesign.md official design reference as an input to the design.md SSOT for UI/UX, presentation, and HTML/PDF systems.\n---\n\nUse when creating or improving design.md, UI/UX design systems, deck-like HTML artifacts, presentation PDFs, or brand-inspired visual systems. design.md is the only design decision SSOT; reference ${GETDESIGN_REFERENCE.url}, ${GETDESIGN_REFERENCE.docs_url}, and ${AWESOME_DESIGN_MD_REFERENCE.url} only as source inputs to synthesize or update that SSOT or a route-local style-token artifact. Prefer the official Codex skill if available with \`${GETDESIGN_REFERENCE.codex_skill_install}\`. If the skill CLI is unavailable, use this generated skill plus official docs/API/CLI/SDK references and curated DESIGN.md examples as inputs. Do not claim getdesign MCP is configured unless a current official MCP surface is actually installed.\n`,
@@ -907,7 +908,9 @@ function buildFallbackSkillsManifest() {
         ...RECOMMENDED_SKILLS.map((name) => canonicalSkillNameFromValue(name)),
         ...DOLLAR_COMMANDS.map((command) => canonicalSkillNameFromValue(String(command.command || '').replace(/^\$/, ''))),
         ...buildSksCoreSkillManifest().skills.map((skill) => skill.canonical_name)
-    ].filter((name) => Boolean(name) && !REMOVED_SKS_SKILL_NAME_SET.has(String(name))));
+    ].filter((name) => Boolean(name)
+        && !REMOVED_SKS_SKILL_NAME_SET.has(String(name))
+        && !RETIRED_PUBLIC_IMAGE_UX_REVIEW_SKILL_ALIAS_SET.has(String(name))));
     return {
         schema: PACKAGED_SKILLS_MANIFEST_SCHEMA,
         package_version: PACKAGE_VERSION,
@@ -1161,7 +1164,7 @@ function isGeneratedSksPluginCollisionSkill(text, name) {
     return /Maximum-speed \$Computer-Use\/\$CU lane|Codex App pipeline activation:|Sneakoscope generated|Dollar-command route generated by SKS/i.test(s);
 }
 function enrichSkillContent(name, content) {
-    if (!['sks', 'answer', 'wiki', 'qa-loop', 'ppt', 'image-ux-review', 'ux-review', 'visual-review', 'ui-ux-review', 'computer-use-fast', 'cu', 'goal', 'research', 'autoresearch', 'db', 'gx', 'reflection', 'prompt-pipeline', 'pipeline-runner', 'context7-docs', 'turbo-context-pack', 'hproof-evidence-bind'].includes(name))
+    if (!['sks', 'answer', 'wiki', 'qa-loop', 'ppt', 'image-ux-review', 'computer-use-fast', 'cu', 'goal', 'research', 'autoresearch', 'db', 'gx', 'reflection', 'prompt-pipeline', 'pipeline-runner', 'context7-docs', 'turbo-context-pack', 'hproof-evidence-bind'].includes(name))
         return content;
     const text = String(content || '').trimEnd();
     const activation = pipelineActivationText(name);
@@ -1179,7 +1182,7 @@ Context tracking:
 `;
 }
 function pipelineActivationText(name) {
-    const stateful = new Set(['sks', 'qa-loop', 'ppt', 'image-ux-review', 'ux-review', 'visual-review', 'ui-ux-review', 'computer-use-fast', 'cu', 'goal', 'research', 'autoresearch', 'db', 'gx', 'prompt-pipeline', 'pipeline-runner']);
+    const stateful = new Set(['sks', 'qa-loop', 'ppt', 'image-ux-review', 'computer-use-fast', 'cu', 'goal', 'research', 'autoresearch', 'db', 'gx', 'prompt-pipeline', 'pipeline-runner']);
     if (!stateful.has(name))
         return '';
     return `Codex App pipeline activation:
@@ -1229,6 +1232,7 @@ async function removeGeneratedAgentSkillAliases(root, skillNames) {
     const current = new Set(skillNames);
     const obsolete = [
         ...SKS_SKILL_NAMES_TO_CLEAN_UP,
+        ...RETIRED_PUBLIC_IMAGE_UX_REVIEW_SKILL_ALIASES,
         'qaloop',
         'wiki-refresh',
         'wikirefresh',
@@ -1242,7 +1246,7 @@ async function removeGeneratedAgentSkillAliases(root, skillNames) {
         if (current.has(name))
             continue;
         const dir = path.join(root, '.agents', 'skills', name);
-        const action = await cleanupGeneratedSkillResidue(root, dir, name, (text) => isGeneratedSksAgentSkill(text, name), 'generated-agent-skill-user-content-collision');
+        const action = await cleanupGeneratedSkillResidue(root, dir, name, (text) => isGeneratedSksAgentSkill(text, name) || isRetiredGeneratedImageUxReviewAlias(text, name), 'generated-agent-skill-user-content-collision');
         if (action === 'removed')
             removed.push(path.relative(root, dir));
         if (action === 'quarantined')
@@ -1282,6 +1286,14 @@ function isGeneratedSksAgentSkill(text, name) {
         return false;
     return /Sneakoscope generated|Fallback Codex App picker alias|Codex App picker alias for|Dollar-command route generated by SKS/i.test(s);
 }
+function isRetiredGeneratedImageUxReviewAlias(text, name) {
+    if (!RETIRED_PUBLIC_IMAGE_UX_REVIEW_SKILL_ALIAS_SET.has(String(name)))
+        return false;
+    const s = String(text || '');
+    return MANAGED_SKILL_MARKER_RE.test(s)
+        && new RegExp(`^name:\\s*${escapeRegExp(name)}\\s*$`, 'm').test(s)
+        && /imagegen\/gpt-image-2 annotated UI\/UX review loop/i.test(s);
+}
 function isGeneratedSksLegacySkill(text, name) {
     if (typeof text !== 'string')
         return false;

package/dist/core/init.js

@@ -695,7 +695,7 @@ export async function initProject(root, opts = {}) {
         next = shouldSelectCodexLb
             ? upsertTopLevelTomlString(next, 'model_provider', 'codex-lb')
             : removeTopLevelTomlKeyIfValue(next, 'model_provider', 'codex-lb');
-        next = upsertTomlTable(next, 'model_providers.codex-lb', `[model_providers.codex-lb]\nname = "openai"\nbase_url = "${baseUrl}"\nwire_api = "responses"\nenv_key = "CODEX_LB_API_KEY"\nsupports_websockets = true\nrequires_openai_auth = true`);
+        next = upsertTomlTable(next, 'model_providers.codex-lb', `[model_providers.codex-lb]\nname = "codex-lb"\nbase_url = "${baseUrl}"\nwire_api = "responses"\nenv_key = "CODEX_LB_API_KEY"\nsupports_websockets = true\nrequires_openai_auth = false`);
         return `${next.trim()}\n`;
     }
     function parseCodexLbEnvKey(text = '') {

package/dist/core/install/installed-package-smoke.js

@@ -30,8 +30,31 @@ export async function runInstalledPackageSmoke(root, options = {}) {
     const npmCache = path.join(tmp, 'npm-cache');
     const installPrefix = path.join(tmp, 'prefix');
     const packDestination = path.join(tmp, 'pack');
-    await Promise.all([home, codexHome, npmCache, installPrefix, packDestination, path.join(home, '.tmp')]
+    const globalRoot = path.join(tmp, 'global-sks');
+    const installCwd = path.join(tmp, 'install-cwd');
+    const runtimeTmp = path.join(tmp, 'runtime-tmp');
+    const stubBin = path.join(tmp, 'bin');
+    const launchctlLog = path.join(tmp, 'launchctl-calls.log');
+    const launchctlStub = path.join(stubBin, process.platform === 'win32' ? 'launchctl.cmd' : 'launchctl');
+    const npmUserConfig = path.join(tmp, 'npmrc');
+    const npmGlobalConfig = path.join(tmp, 'npm-globalrc');
+    await Promise.all([home, codexHome, npmCache, installPrefix, packDestination, globalRoot, installCwd, runtimeTmp, stubBin, path.join(home, '.tmp')]
         .map((dir) => fs.mkdir(dir, { recursive: true })));
+    await Promise.all([
+        fs.writeFile(launchctlLog, ''),
+        fs.writeFile(launchctlStub, launchctlStubSource()),
+        fs.writeFile(npmUserConfig, ''),
+        fs.writeFile(npmGlobalConfig, '')
+    ]);
+    await fs.chmod(launchctlStub, 0o700).catch(() => { });
+    const externalRoots = [
+        { label: 'home', root: home },
+        { label: 'codex-home', root: codexHome },
+        { label: 'global-sks', root: globalRoot },
+        { label: 'install-cwd', root: installCwd },
+        { label: 'runtime-tmp', root: runtimeTmp }
+    ];
+    const externalBeforeInstall = await snapshotTrees(externalRoots);
     const blockers = [];
     const commands = [];
     let tarball = null;
@@ -40,6 +63,14 @@ export async function runInstalledPackageSmoke(root, options = {}) {
     let packedVersion = null;
     let expectedSha256 = normalizeSha256(options.expectedSha256);
     let receiptPath = null;
+    let postinstallDefault = {
+        scripts_enabled: true,
+        external_snapshot_match: false,
+        external_findings: [],
+        launchctl_calls: [],
+        package_local_stamp_present: false,
+        opt_in_guidance_present: false
+    };
     if (options.expectedSha256 && !expectedSha256)
         blockers.push('expected_sha256_invalid');
     if (options.receipt && !options.tarball)
@@ -85,12 +116,66 @@ export async function runInstalledPackageSmoke(root, options = {}) {
         }
     }
     if (tarball && blockers.length === 0) {
-        const install = await runJsonCommand(tmp, [
-            'npm', 'install', '--global', '--prefix', installPrefix, '--ignore-scripts', '--no-audit', '--no-fund', tarball
-        ], { home, codexHome, npmCache });
+        const install = await runJsonCommand(installCwd, [
+            'npm', 'install', '--global', '--prefix', installPrefix, '--foreground-scripts', '--no-audit', '--no-fund', tarball
+        ], {
+            home,
+            codexHome,
+            npmCache,
+            env: {
+                HOME: home,
+                USERPROFILE: home,
+                CODEX_HOME: codexHome,
+                XDG_CONFIG_HOME: path.join(home, '.config'),
+                XDG_CACHE_HOME: path.join(home, '.cache'),
+                XDG_DATA_HOME: path.join(home, '.local', 'share'),
+                INIT_CWD: installCwd,
+                TMPDIR: runtimeTmp,
+                PATH: `${stubBin}${path.delimiter}${String(process.env.PATH || '')}`,
+                NODE_DISABLE_COMPILE_CACHE: '1',
+                NODE_COMPILE_CACHE: '',
+                SKS_GLOBAL_ROOT: globalRoot,
+                SKS_MENUBAR_LAUNCHCTL: launchctlStub,
+                SKS_INSTALLED_SMOKE_LAUNCHCTL_LOG: launchctlLog,
+                SKS_POSTINSTALL_BOOTSTRAP: '',
+                SKS_POSTINSTALL_NO_BOOTSTRAP: '',
+                SKS_POSTINSTALL_PROMPT: '',
+                npm_config_userconfig: npmUserConfig,
+                NPM_CONFIG_USERCONFIG: npmUserConfig,
+                npm_config_globalconfig: npmGlobalConfig,
+                NPM_CONFIG_GLOBALCONFIG: npmGlobalConfig,
+                npm_config_ignore_scripts: 'false',
+                NPM_CONFIG_IGNORE_SCRIPTS: 'false',
+                NO_UPDATE_NOTIFIER: '1'
+            }
+        });
         commands.push(summarizeInstalledSmokeCommand(install.command, 'install'));
         if (install.exit_code !== 0)
             blockers.push('npm_install_tarball_failed');
+        const externalAfterInstall = await snapshotTrees(externalRoots);
+        const externalFindings = diffTreeSnapshots(externalBeforeInstall, externalAfterInstall);
+        const launchctlCalls = await nonEmptyLines(launchctlLog);
+        const packageLocalStamp = path.join(installedPackageRoot(installPrefix), 'dist', '.sks-build-stamp.json');
+        const packageLocalStampPresent = await regularFileExists(packageLocalStamp);
+        const installOutput = `${install.stdout}\n${install.command.stderr_tail}`;
+        const optInGuidancePresent = /Automatic bootstrap was not run/.test(installOutput)
+            && /SKS_POSTINSTALL_BOOTSTRAP=1/.test(installOutput);
+        postinstallDefault = {
+            scripts_enabled: true,
+            external_snapshot_match: externalFindings.length === 0,
+            external_findings: externalFindings,
+            launchctl_calls: launchctlCalls,
+            package_local_stamp_present: packageLocalStampPresent,
+            opt_in_guidance_present: optInGuidancePresent
+        };
+        if (externalFindings.length)
+            blockers.push(...externalFindings.map((finding) => `postinstall_default_external_mutation:${finding}`));
+        if (launchctlCalls.length)
+            blockers.push('postinstall_default_launchctl_called');
+        if (!packageLocalStampPresent)
+            blockers.push('postinstall_package_local_stamp_missing');
+        if (!optInGuidancePresent)
+            blockers.push('postinstall_default_opt_in_guidance_missing');
     }
     const bin = process.platform === 'win32'
         ? path.join(installPrefix, 'sks.cmd')
@@ -187,6 +272,7 @@ export async function runInstalledPackageSmoke(root, options = {}) {
             required_dollar_commands: [...INSTALLED_REQUIRED_DOLLAR_COMMANDS],
             closure
         },
+        postinstall_default: postinstallDefault,
         forbidden_findings: forbiddenFindings,
         blockers: [...new Set(blockers)]
     };
@@ -253,6 +339,7 @@ async function runJsonCommand(cwd, argv, opts) {
         env.npm_config_cache = opts.npmCache;
         env.NPM_CONFIG_CACHE = opts.npmCache;
     }
+    Object.assign(env, opts.env || {});
     const res = await runProcess(command || 'node', args, {
         cwd,
         timeoutMs: 120_000,
@@ -275,6 +362,72 @@ async function runJsonCommand(cwd, argv, opts) {
         }
     };
 }
+async function snapshotTrees(roots) {
+    const snapshot = new Map();
+    for (const entry of roots)
+        await walkSnapshot(entry.root, entry.root, entry.label, snapshot);
+    return snapshot;
+}
+async function walkSnapshot(root, current, label, snapshot) {
+    const entries = await fs.readdir(current, { withFileTypes: true }).catch(() => []);
+    entries.sort((a, b) => a.name.localeCompare(b.name));
+    for (const entry of entries) {
+        const absolute = path.join(current, entry.name);
+        const relative = path.relative(root, absolute) || '.';
+        const key = `${label}:${relative}`;
+        const stat = await fs.lstat(absolute);
+        const mode = (stat.mode & 0o777).toString(8).padStart(3, '0');
+        if (entry.isDirectory()) {
+            snapshot.set(key, `directory:${mode}`);
+            await walkSnapshot(root, absolute, label, snapshot);
+        }
+        else if (entry.isFile()) {
+            const bytes = await fs.readFile(absolute);
+            snapshot.set(key, `file:${mode}:${bytes.length}:${crypto.createHash('sha256').update(bytes).digest('hex')}`);
+        }
+        else if (entry.isSymbolicLink()) {
+            snapshot.set(key, `symlink:${mode}:${await fs.readlink(absolute)}`);
+        }
+        else {
+            snapshot.set(key, `other:${mode}:${stat.size}`);
+        }
+    }
+}
+function diffTreeSnapshots(before, after) {
+    const findings = [];
+    const keys = [...new Set([...before.keys(), ...after.keys()])].sort();
+    for (const key of keys) {
+        if (!before.has(key))
+            findings.push(`added:${key}`);
+        else if (!after.has(key))
+            findings.push(`removed:${key}`);
+        else if (before.get(key) !== after.get(key))
+            findings.push(`changed:${key}`);
+    }
+    return findings;
+}
+async function nonEmptyLines(file) {
+    const value = await fs.readFile(file, 'utf8').catch(() => '');
+    return value.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+}
+async function regularFileExists(file) {
+    const stat = await fs.lstat(file).catch(() => null);
+    return Boolean(stat?.isFile() && !stat.isSymbolicLink());
+}
+function installedPackageRoot(prefix) {
+    return process.platform === 'win32'
+        ? path.join(prefix, 'node_modules', 'sneakoscope')
+        : path.join(prefix, 'lib', 'node_modules', 'sneakoscope');
+}
+function launchctlStubSource() {
+    if (process.platform === 'win32') {
+        return '@echo %*>>\"%SKS_INSTALLED_SMOKE_LAUNCHCTL_LOG%\"\r\n@exit /b 0\r\n';
+    }
+    return `#!/bin/sh
+printf '%s\n' "$*" >> "$SKS_INSTALLED_SMOKE_LAUNCHCTL_LOG"
+exit 0
+`;
+}
 export function validateInstalledPublicSurface(commandManifest, dollarManifest) {
     const commands = Array.isArray(commandManifest?.commands)
         ? commandManifest.commands.map((row) => String(row?.name || '')) : [];

package/dist/core/managed-assets/managed-assets-manifest.js

@@ -454,7 +454,8 @@ export const MANAGED_SKILLS = Object.freeze([
     'dfix',
     'image-ux-review',
     'computer-use',
-    'init-deep'
+    'init-deep',
+    'align'
 ].map((id) => ({ id, required_for: ['codex-native-runtime'] })));
 export const MANAGED_HOOKS = Object.freeze([
     { id: 'version-guard', required_for: ['managed-state-current'], risk: 'managed-write' },

package/dist/core/managed-path-safety.js

@@ -1,5 +1,6 @@
 import fsp from 'node:fs/promises';
 import path from 'node:path';
+import { errorCodeOf } from './errors/message.js';
 export class ManagedPathSafetyError extends Error {
     code;
     target;
@@ -73,7 +74,7 @@ export async function ensureConfinedDirectory(boundary, directory) {
                 await fsp.mkdir(current);
             }
             catch (error) {
-                if (errorCode(error) !== 'EEXIST')
+                if (errorCodeOf(error) !== 'EEXIST')
                     throw error;
             }
             stat = await lstatOrNull(current);
@@ -111,7 +112,7 @@ export async function walkConfinedEntries(boundary, root) {
             children = await fsp.readdir(current, { withFileTypes: true, encoding: 'utf8' });
         }
         catch (error) {
-            errors.push(`${errorCode(error) || 'managed_path_readdir_failed'}:${current}`);
+            errors.push(`${errorCodeOf(error) || 'managed_path_readdir_failed'}:${current}`);
             return;
         }
         children.sort((left, right) => left.name.localeCompare(right.name));
@@ -222,7 +223,7 @@ export async function removeEmptyTreeVerified(boundary, root) {
             children = await fsp.readdir(current, { withFileTypes: true, encoding: 'utf8' });
         }
         catch (error) {
-            errors.push(`${errorCode(error) || 'managed_path_readdir_failed'}:${current}`);
+            errors.push(`${errorCodeOf(error) || 'managed_path_readdir_failed'}:${current}`);
             remainingPaths.push(current);
             return;
         }
@@ -239,7 +240,7 @@ export async function removeEmptyTreeVerified(boundary, root) {
             after = await fsp.readdir(current);
         }
         catch (error) {
-            errors.push(`${errorCode(error) || 'managed_path_readdir_failed'}:${current}`);
+            errors.push(`${errorCodeOf(error) || 'managed_path_readdir_failed'}:${current}`);
             remainingPaths.push(current);
             return;
         }
@@ -251,7 +252,7 @@ export async function removeEmptyTreeVerified(boundary, root) {
             await fsp.rmdir(current);
         }
         catch (error) {
-            errors.push(`${errorCode(error) || 'managed_path_rmdir_failed'}:${current}`);
+            errors.push(`${errorCodeOf(error) || 'managed_path_rmdir_failed'}:${current}`);
             remainingPaths.push(current);
             return;
         }
@@ -270,18 +271,15 @@ export async function lstatConfinedOrNull(boundary, target) {
 export function publicPathError(error, fallback) {
     if (error instanceof ManagedPathSafetyError)
         return `${error.code}:${error.target}`;
-    return `${errorCode(error) || 'managed_path_operation_failed'}:${fallback}`;
+    return `${errorCodeOf(error) || 'managed_path_operation_failed'}:${fallback}`;
 }
 async function lstatOrNull(target) {
     try {
         return await fsp.lstat(target);
     }
     catch (error) {
-        if (errorCode(error) === 'ENOENT')
+        if (errorCodeOf(error) === 'ENOENT')
             return null;
         throw error;
     }
 }
-function errorCode(error) {
-    return error && typeof error === 'object' && 'code' in error ? String(error.code) : '';
-}

package/dist/core/mcp-config/backup.js

@@ -1,6 +1,7 @@
 import crypto from 'node:crypto';
 import fsp from 'node:fs/promises';
 import path from 'node:path';
+import { errorCodeOf } from '../errors/message.js';
 import { nowIso, sha256, writeTextAtomic } from '../fsx.js';
 import { MCP_BACKUP_SCHEMA } from './types.js';
 export async function createMcpBackup(ref, before, operation, server) {
@@ -86,7 +87,7 @@ async function assertSafeBackupDirectory(directory, codexHome) {
     if (relative.startsWith('..') || path.isAbsolute(relative))
         throw new Error('mcp_backup_path_escape');
     for (const candidate of [path.join(codexHome, 'backups'), directory]) {
-        const stat = await fsp.lstat(candidate).catch((error) => errorCode(error) === 'ENOENT' ? null : Promise.reject(error));
+        const stat = await fsp.lstat(candidate).catch((error) => errorCodeOf(error) === 'ENOENT' ? null : Promise.reject(error));
         if (stat?.isSymbolicLink() || (stat && !stat.isDirectory()))
             throw new Error('mcp_backup_directory_invalid');
         if (stat) {
@@ -97,6 +98,3 @@ async function assertSafeBackupDirectory(directory, codexHome) {
         }
     }
 }
-function errorCode(error) {
-    return error && typeof error === 'object' && 'code' in error ? String(error.code) : '';
-}