sneakoscope 8.1.2 → 8.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (261) hide show
  1. package/README.md +96 -58
  2. package/crates/sks-core/Cargo.lock +1 -1
  3. package/crates/sks-core/Cargo.toml +1 -1
  4. package/dist/bin/fast-inline.js +5 -51
  5. package/dist/cli/command-manifest-lite.js +2 -1
  6. package/dist/cli/command-registry.js +2 -1
  7. package/dist/cli/global-mode-router.js +1 -1
  8. package/dist/cli/install-helpers-codex-lb-config.js +112 -914
  9. package/dist/cli/install-helpers-codex-lb-shared.js +3 -44
  10. package/dist/cli/install-helpers-install-support.js +4 -20
  11. package/dist/cli/install-helpers.js +36 -2716
  12. package/dist/cli/router.js +9 -9
  13. package/dist/commands/bridge-command-output.js +111 -0
  14. package/dist/commands/bridge.js +320 -0
  15. package/dist/commands/codex-app.js +39 -123
  16. package/dist/commands/doctor-helpers.js +380 -0
  17. package/dist/commands/doctor-profile.js +3 -0
  18. package/dist/commands/doctor.js +114 -873
  19. package/dist/commands/mad-sks.js +0 -4
  20. package/dist/config/skills-manifest.json +1 -1
  21. package/dist/core/agents/agent-effort-policy.js +11 -21
  22. package/dist/core/agents/agent-recursion-guard.js +26 -0
  23. package/dist/core/agents/agent-runner-codex-exec.js +7 -9
  24. package/dist/core/architecture-hardening/contracts/contracts.js +225 -161
  25. package/dist/core/architecture-hardening/state/state-service.js +49 -13
  26. package/dist/core/auto-review.js +15 -9
  27. package/dist/core/codex/codex-config-guard.js +8 -0
  28. package/dist/core/codex-adapter.js +8 -10
  29. package/dist/core/codex-app/codex-app-fast-ui-repair.js +7 -29
  30. package/dist/core/codex-app/codex-app-launcher.js +10 -12
  31. package/dist/core/codex-app/codex-app-restart.js +10 -12
  32. package/dist/core/codex-app/menubar/constants.js +2 -5
  33. package/dist/core/codex-app/menubar/global-install.js +3 -2
  34. package/dist/core/codex-app/menubar/installer/result.js +23 -0
  35. package/dist/core/codex-app/menubar/installer/runtime.js +28 -0
  36. package/dist/core/codex-app/menubar/installer.js +5 -96
  37. package/dist/core/codex-app/menubar/migration.js +1 -42
  38. package/dist/core/codex-app/openrouter-provider.js +0 -78
  39. package/dist/core/codex-app.js +97 -360
  40. package/dist/core/codex-control/codex-app-server-runtime-env.js +8 -28
  41. package/dist/core/codex-control/codex-current-image-path-real-probe.js +2 -3
  42. package/dist/core/codex-control/codex-current-web-search-probe.js +2 -3
  43. package/dist/core/codex-control/codex-sdk-adapter.js +5 -48
  44. package/dist/core/codex-control/codex-task-runner.js +16 -60
  45. package/dist/core/codex-control/desktop-bridge-launch-guard.js +227 -0
  46. package/dist/core/codex-exec-output-schema.js +11 -13
  47. package/dist/core/codex-lb/bridge-contracts.js +2 -0
  48. package/dist/core/codex-lb/bridge-runtime-validation/capability.js +104 -0
  49. package/dist/core/codex-lb/bridge-runtime-validation/catalog.js +52 -0
  50. package/dist/core/codex-lb/bridge-runtime-validation/shared.js +109 -0
  51. package/dist/core/codex-lb/bridge-runtime-validation/status.js +250 -0
  52. package/dist/core/codex-lb/bridge-runtime-validation.js +106 -0
  53. package/dist/core/codex-lb/capability-runner.js +505 -201
  54. package/dist/core/codex-lb/codex-lb-env.js +179 -12
  55. package/dist/core/codex-lb/combined-catalog/builder.js +86 -0
  56. package/dist/core/codex-lb/combined-catalog/contracts.js +5 -0
  57. package/dist/core/codex-lb/combined-catalog/normalize.js +170 -0
  58. package/dist/core/codex-lb/combined-catalog/persistence.js +207 -0
  59. package/dist/core/codex-lb/combined-catalog/shared.js +12 -0
  60. package/dist/core/codex-lb/combined-catalog/storage.js +171 -0
  61. package/dist/core/codex-lb/combined-catalog.js +12 -0
  62. package/dist/core/codex-lb/desktop-bridge/client.js +4 -1
  63. package/dist/core/codex-lb/desktop-bridge/header-policy.js +48 -63
  64. package/dist/core/codex-lb/desktop-bridge/http-forward.js +115 -83
  65. package/dist/core/codex-lb/desktop-bridge/launchd.js +20 -13
  66. package/dist/core/codex-lb/desktop-bridge/location-rewrite.js +4 -1
  67. package/dist/core/codex-lb/desktop-bridge/security.js +381 -267
  68. package/dist/core/codex-lb/desktop-bridge/server.js +148 -19
  69. package/dist/core/codex-lb/desktop-bridge/state.js +56 -70
  70. package/dist/core/codex-lb/desktop-bridge/types.js +6 -1
  71. package/dist/core/codex-lb/desktop-bridge/websocket-forward.js +281 -106
  72. package/dist/core/codex-lb/desktop-bridge-migration/historical-config.js +245 -0
  73. package/dist/core/codex-lb/desktop-bridge-migration/historical-toml.js +56 -0
  74. package/dist/core/codex-lb/desktop-bridge-migration/metadata.js +73 -0
  75. package/dist/core/codex-lb/desktop-bridge-migration/receipt.js +52 -0
  76. package/dist/core/codex-lb/desktop-bridge-migration/retired-runtime-cleanup.js +106 -0
  77. package/dist/core/codex-lb/desktop-bridge-migration/types.js +1 -0
  78. package/dist/core/codex-lb/desktop-bridge-migration.js +238 -0
  79. package/dist/core/codex-lb/desktop-controller-v3/catalog.js +257 -0
  80. package/dist/core/codex-lb/desktop-controller-v3/diagnostics.js +62 -0
  81. package/dist/core/codex-lb/desktop-controller-v3/lifecycle-commands.js +203 -0
  82. package/dist/core/codex-lb/desktop-controller-v3/live-probes.js +293 -0
  83. package/dist/core/codex-lb/desktop-controller-v3/preflight-probes.js +144 -0
  84. package/dist/core/codex-lb/desktop-controller-v3/provider-commands.js +182 -0
  85. package/dist/core/codex-lb/desktop-controller-v3/shared.js +279 -0
  86. package/dist/core/codex-lb/desktop-controller-v3/status.js +269 -0
  87. package/dist/core/codex-lb/desktop-controller-v3/types.js +1 -0
  88. package/dist/core/codex-lb/desktop-controller-v3/verification.js +89 -0
  89. package/dist/core/codex-lb/desktop-controller-v3.js +67 -0
  90. package/dist/core/codex-lb/desktop-controller.js +2 -1730
  91. package/dist/core/codex-lb/desktop-service.js +462 -627
  92. package/dist/core/codex-lb/migration-receipt.js +560 -118
  93. package/dist/core/codex-lb/probes/auxiliary-surfaces-probe.js +37 -53
  94. package/dist/core/codex-lb/probes/bridge-probe.js +125 -64
  95. package/dist/core/codex-lb/probes/catalog-probe.js +36 -136
  96. package/dist/core/codex-lb/probes/computer-use-probe.js +63 -39
  97. package/dist/core/codex-lb/probes/image-generation-probe.js +98 -41
  98. package/dist/core/codex-lb/probes/probe-evidence.js +32 -33
  99. package/dist/core/codex-lb/probes/voice-realtime-probe.js +69 -43
  100. package/dist/core/codex-lb/provider-credentials/configuration.js +127 -0
  101. package/dist/core/codex-lb/provider-credentials/locks.js +11 -0
  102. package/dist/core/codex-lb/provider-credentials/private-snapshot.js +28 -0
  103. package/dist/core/codex-lb/provider-credentials/removal.js +33 -0
  104. package/dist/core/codex-lb/provider-credentials/resolution.js +59 -0
  105. package/dist/core/codex-lb/provider-credentials/runtime.js +55 -0
  106. package/dist/core/codex-lb/provider-credentials/types.js +1 -0
  107. package/dist/core/codex-lb/provider-credentials/validation-store.js +137 -0
  108. package/dist/core/codex-lb/provider-credentials.js +5 -0
  109. package/dist/core/codex-lb/provider-registry.js +323 -0
  110. package/dist/core/codex-lb/provider-route-policy.js +118 -0
  111. package/dist/core/codex-lb/request-route-resolver.js +172 -0
  112. package/dist/core/codex-lb/route-index.js +148 -0
  113. package/dist/core/codex-lb/trusted-deep-evidence.js +158 -286
  114. package/dist/core/commands/basic-cli.js +1 -1
  115. package/dist/core/commands/check-command.js +3 -10
  116. package/dist/core/commands/gate-result-contract.js +10 -14
  117. package/dist/core/commands/intent-normalization/normalizer.js +1 -1
  118. package/dist/core/commands/mad-sks-command.js +2 -6
  119. package/dist/core/commands/release-command.js +11 -1
  120. package/dist/core/commands/telegram-command.js +46 -6
  121. package/dist/core/doctor/doctor-readiness-matrix.js +9 -7
  122. package/dist/core/doctor/skill-legacy-surface.js +5 -5
  123. package/dist/core/evidence/v2/evidence-key.js +30 -3
  124. package/dist/core/feature-fixtures.js +8 -1
  125. package/dist/core/feature-registry.js +3 -2
  126. package/dist/core/hooks-runtime/stop-finalization.js +11 -1
  127. package/dist/core/hooks-runtime/subagent-context.js +15 -1
  128. package/dist/core/hooks-runtime/subagent-skill-availability-contract.js +1 -1
  129. package/dist/core/hooks-runtime/tool-output-quarantine.js +1 -1
  130. package/dist/core/hooks-runtime.js +73 -87
  131. package/dist/core/image-ux-review/imagegen-adapter.js +108 -94
  132. package/dist/core/image-ux-review/real-callout-extractor.js +144 -14
  133. package/dist/core/imagegen/desktop-bridge-imagegen-target.js +77 -0
  134. package/dist/core/imagegen/imagegen-capability.js +43 -151
  135. package/dist/core/init/skills/filesystem.js +89 -0
  136. package/dist/core/init/skills/inventory.js +97 -0
  137. package/dist/core/init/skills/manifest.js +151 -0
  138. package/dist/core/init/skills.js +5 -325
  139. package/dist/core/init.js +0 -63
  140. package/dist/core/install/installed-package-smoke.js +1 -1
  141. package/dist/core/managed-assets/managed-assets-manifest.js +0 -1
  142. package/dist/core/policy/latest-version-guidance.js +15 -2
  143. package/dist/core/preflight/parallel-preflight-engine.js +27 -51
  144. package/dist/core/provider/provider-badge.js +9 -4
  145. package/dist/core/provider/provider-context.js +57 -107
  146. package/dist/core/providers/openrouter/openrouter-account.js +3 -1
  147. package/dist/core/providers/openrouter/openrouter-secret-store.js +91 -22
  148. package/dist/core/release/desktop-bridge-release-evidence.js +457 -0
  149. package/dist/core/release/gate-manifest.js +0 -1
  150. package/dist/core/release/main-push-guard.js +13 -0
  151. package/dist/core/release/main-push-receipt.js +11 -0
  152. package/dist/core/release/physical-release-gates.js +664 -61
  153. package/dist/core/release/publish-preflight.js +3 -3
  154. package/dist/core/release/release-gate-batch-runner.js +19 -6
  155. package/dist/core/release/release-gate-dag.js +33 -6
  156. package/dist/core/release/release-gate-node.js +1 -3
  157. package/dist/core/release/release-gate-output-contract.js +55 -0
  158. package/dist/core/release/release-pack-contract.js +1 -1
  159. package/dist/core/release/release-pack-receipt.js +209 -8
  160. package/dist/core/release/release-real-contract.js +1 -1
  161. package/dist/core/release/stage-publish.js +106 -28
  162. package/dist/core/retention/temp-lease.js +204 -0
  163. package/dist/core/retention.js +18 -195
  164. package/dist/core/routes.js +1 -2
  165. package/dist/core/safety/intent-contract/intent-contract.js +3 -3
  166. package/dist/core/subagents/naruto-host-credentials.js +6 -1
  167. package/dist/core/subagents/official-subagent-config.js +27 -9
  168. package/dist/core/subagents/official-subagent-runner.js +14 -31
  169. package/dist/core/subagents/wave-lifecycle.js +36 -8
  170. package/dist/core/subagents/wave-parent-guidance.js +2 -1
  171. package/dist/core/telegram/doctor.js +2 -2
  172. package/dist/core/telegram/liveness.js +10 -4
  173. package/dist/core/triwiki/context-graph/compiler/index.js +18 -18
  174. package/dist/core/update/update-migration-state/fast-mode-config.js +172 -0
  175. package/dist/core/update/update-migration-state/session-state-split.js +247 -0
  176. package/dist/core/update/update-migration-state/simple-stages.js +46 -0
  177. package/dist/core/update/update-migration-state.js +4 -481
  178. package/dist/core/version.js +1 -1
  179. package/dist/native/sks-menubar/Sources/OperationCoordinator.swift +28 -4
  180. package/dist/native/sks-menubar/Sources/OperationModels.swift +112 -2
  181. package/dist/native/sks-menubar/Sources/ProviderRouteExplanation.swift +21 -0
  182. package/dist/native/sks-menubar/Sources/ProvidersBridgeCatalog.swift +140 -0
  183. package/dist/native/sks-menubar/Sources/ProvidersOpenRouter.swift +107 -470
  184. package/dist/native/sks-menubar/Sources/ProvidersReliability.swift +27 -197
  185. package/dist/native/sks-menubar/Sources/ProvidersRoutingTruth.swift +335 -269
  186. package/dist/native/sks-menubar/Sources/ProvidersViewController.swift +233 -437
  187. package/dist/native/sks-menubar/Sources/RemoteCodingViewController.swift +16 -7
  188. package/dist/native/sks-menubar/Sources/SecureProcessEnvelope.swift +39 -9
  189. package/dist/native/sks-menubar/Sources/TelegramSupport.swift +56 -0
  190. package/dist/scripts/canonical-test-runner.js +7 -1
  191. package/dist/scripts/check-runtime-schemas.js +7 -2
  192. package/dist/scripts/codex-sdk-real-smoke-check.js +3 -1
  193. package/dist/scripts/desktop-bridge-capabilities-check.js +123 -0
  194. package/dist/scripts/{codex-lb-desktop-bridge-latency-check.js → desktop-bridge-latency-check.js} +61 -16
  195. package/dist/scripts/desktop-bridge-real-evidence-check.js +64 -0
  196. package/dist/scripts/{codex-lb-desktop-bridge-check.js → desktop-bridge-transport-check.js} +92 -155
  197. package/dist/scripts/desktop-bridge-transport-client.js +116 -0
  198. package/dist/scripts/desktop-bridge-unification-check.js +276 -0
  199. package/dist/scripts/doctor-fixes-codex-app-fast-ui-check.js +12 -8
  200. package/dist/scripts/gate-policy-audit-check.js +52 -2
  201. package/dist/scripts/provider-badge-context-check.js +55 -12
  202. package/dist/scripts/publish-preflight.js +1 -2
  203. package/dist/scripts/release-affected-selector-check.js +1 -2
  204. package/dist/scripts/release-aggressive-resource-governor-check.js +1 -1
  205. package/dist/scripts/release-cache-glob-hashing-check.js +1 -0
  206. package/dist/scripts/release-cache-version-neutral-fixture-check.js +1 -0
  207. package/dist/scripts/release-full-parallelism-blackbox.js +1 -1
  208. package/dist/scripts/release-gate-batch-runner-check.js +9 -0
  209. package/dist/scripts/release-gate-dag-runner-check.js +6 -0
  210. package/dist/scripts/release-gate-dag-runner.js +4 -2
  211. package/dist/scripts/release-metadata-check.js +16 -3
  212. package/dist/scripts/release-pack-receipt.js +29 -6
  213. package/dist/scripts/release-physical-gates-check.js +39 -0
  214. package/dist/scripts/release-real-check.js +7 -5
  215. package/package.json +6 -8
  216. package/release-gates.v2.json +156 -157
  217. package/runtime-required-scripts.json +11 -11
  218. package/schemas/codex/desktop-bridge-status-v3.schema.json +286 -0
  219. package/schemas/codex/desktop-capabilities-v3.schema.json +198 -0
  220. package/schemas/release/release-gate-node.schema.json +2 -3
  221. package/dist/cli/codex-lb-setup-warning-output.js +0 -17
  222. package/dist/cli/install-helpers-codex-lb-chain.js +0 -529
  223. package/dist/commands/codex-lb.js +0 -1232
  224. package/dist/core/architecture-hardening/migration/migration.js +0 -111
  225. package/dist/core/codex-app/auxiliary-oauth-policy.js +0 -36
  226. package/dist/core/codex-app/catalog-compat/catalog-service.js +0 -104
  227. package/dist/core/codex-app/child-policy/child-policy.js +0 -35
  228. package/dist/core/codex-app/desktop-routing-snapshot.js +0 -233
  229. package/dist/core/codex-app/glm-model-profile.js +0 -1
  230. package/dist/core/codex-app/glm-profile-installer.js +0 -191
  231. package/dist/core/codex-app/glm-profile-schema.js +0 -42
  232. package/dist/core/codex-app/multi-provider-router.js +0 -391
  233. package/dist/core/codex-app/openrouter-activate.js +0 -405
  234. package/dist/core/codex-app/openrouter-model-catalog.js +0 -217
  235. package/dist/core/codex-app/provider-child-policy.js +0 -64
  236. package/dist/core/codex-app/provider-mode.js +0 -91
  237. package/dist/core/codex-app/provider-session-policy.js +0 -85
  238. package/dist/core/codex-app/session-policy/session-pinning.js +0 -68
  239. package/dist/core/codex-control/codex-lb-launch-recovery.js +0 -319
  240. package/dist/core/codex-lb/codex-lb-setup.js +0 -293
  241. package/dist/core/codex-lb/codex-lb-tool-catalog.js +0 -456
  242. package/dist/core/codex-lb/codex-lb-tool-output-recovery.js +0 -290
  243. package/dist/core/codex-lb/desktop-center-credentials.js +0 -1083
  244. package/dist/core/codex-lb/desktop-mode.js +0 -32
  245. package/dist/core/codex-lb/desktop-real-evidence.js +0 -168
  246. package/dist/core/codex-lb/legacy-migration.js +0 -576
  247. package/dist/core/codex-lb/native-openai-transport/transport.js +0 -68
  248. package/dist/core/codex-lb/provider-routing/provider-router.js +0 -58
  249. package/dist/core/codex-lb/routing-truth.js +0 -327
  250. package/dist/core/imagegen/codex-lb-imagegen-target.js +0 -92
  251. package/dist/native/sks-menubar/Sources/ProvidersConnectTest.swift +0 -118
  252. package/dist/native/sks-menubar/Sources/ProvidersFastMode.swift +0 -17
  253. package/dist/native/sks-menubar/Sources/ProvidersMultiProvider.swift +0 -331
  254. package/dist/native/sks-menubar/Sources/ProvidersRoleModels.swift +0 -260
  255. package/dist/scripts/codex-lb-catalog-passthrough-check.js +0 -120
  256. package/dist/scripts/codex-lb-desktop-auth-invariant-check.js +0 -169
  257. package/dist/scripts/codex-lb-desktop-capabilities-check.js +0 -287
  258. package/dist/scripts/codex-lb-desktop-real-evidence-check.js +0 -123
  259. package/dist/scripts/codex-lb-fast-mode-truth-check.js +0 -114
  260. package/dist/scripts/codex-lb-fast-ui-preservation-check.js +0 -152
  261. package/dist/scripts/codex-lb-gpt56-fast-profile-check.js +0 -231
@@ -1,60 +1,44 @@
1
- import { probeEvidence } from './probe-evidence.js';
2
- const KNOWN_EVENT_TYPES = new Set([
3
- 'web_search_call',
4
- 'file_search_call',
5
- 'code_interpreter_call',
6
- 'mcp_list_tools',
7
- 'mcp_approval_request',
8
- 'response.completed',
9
- 'response.failed'
10
- ]);
11
- export function runAuxiliarySurfacesProbe(input) {
12
- const attempted = input.attempted === true || Boolean(input.inputEvents?.length);
13
- const inputBytes = stableEventBytes(input.inputEvents || []);
14
- const outputBytes = stableEventBytes(input.outputEvents || []);
15
- const eventsPreserved = inputBytes === outputBytes;
16
- const unknownEventTypes = (input.inputEvents || [])
17
- .map(eventType)
18
- .filter((type) => Boolean(type && !KNOWN_EVENT_TYPES.has(type)));
19
- const blockers = [
20
- ...(input.blockers || []),
21
- ...(attempted && !eventsPreserved ? ['auxiliary_event_payload_changed'] : []),
22
- ...(attempted && input.requestBodyHashPreserved === false ? ['auxiliary_request_body_hash_changed'] : []),
23
- ...(input.level === 'deep' && attempted && input.sessionAffinityPreserved !== true
24
- ? ['auxiliary_session_affinity_unverified']
25
- : [])
26
- ];
27
- return probeEvidence({
28
- advertised: input.routesAdvertised === true,
29
- attempted,
30
- verified: input.level === 'deep'
31
- && eventsPreserved
32
- && input.requestBodyHashPreserved === true
33
- && input.sessionAffinityPreserved === true,
34
- fixture: input.fixture,
35
- source: input.level === 'deep' ? 'deep_probe' : attempted ? 'transport' : 'manifest',
36
- unsupported: input.routesAdvertised === false && !attempted,
37
- blockers,
38
- warnings: unknownEventTypes.length > 0 ? ['unknown_event_type_observed'] : [],
1
+ import { capabilityProbeResultV3 } from './probe-evidence.js';
2
+ export function runAuxiliarySurfacesProbeV3(input) {
3
+ if (input.requestedLevel !== 'deep' || input.attempted !== true || input.fixture === true) {
4
+ return capabilityProbeResultV3({
5
+ ...input,
6
+ capability: 'auxiliary_surfaces',
7
+ scope: `provider:${input.providerId}`,
8
+ stage: 'preflight',
9
+ state: 'not_attempted',
10
+ source: input.advertised ? 'manifest' : 'config',
11
+ warnings: input.fixture ? ['auxiliary_fixture_not_live_evidence'] : [],
12
+ recoveryAction: 'run_deep_verification',
13
+ evidence: { advertised: input.advertised === true, fixture: input.fixture === true }
14
+ });
15
+ }
16
+ const blocker = input.eventPayloadsPreserved !== true
17
+ ? 'auxiliary_event_payload_changed'
18
+ : input.requestBodyHashPreserved !== true
19
+ ? 'auxiliary_request_body_hash_changed'
20
+ : input.ownerAffinityPreserved !== true
21
+ ? 'auxiliary_session_affinity_unverified'
22
+ : null;
23
+ return capabilityProbeResultV3({
24
+ ...input,
25
+ capability: 'auxiliary_surfaces',
26
+ scope: `provider:${input.providerId}`,
27
+ stage: blocker ? 'feature_response' : 'complete',
28
+ state: blocker ? 'blocked' : 'verified',
29
+ terminal: Boolean(blocker),
30
+ rootCause: blocker,
31
+ blockers: blocker ? [blocker] : [],
32
+ retryable: Boolean(blocker),
33
+ recoveryAction: blocker ? 'run_deep_verification' : null,
34
+ source: 'deep_probe',
39
35
  evidence: {
40
- event_payloads_preserved: eventsPreserved,
41
- unknown_event_types: [...new Set(unknownEventTypes)],
42
- unknown_event_count: unknownEventTypes.length,
36
+ event_payloads_preserved: input.eventPayloadsPreserved === true,
43
37
  request_body_hash_preserved: input.requestBodyHashPreserved === true,
44
- session_affinity_preserved: input.sessionAffinityPreserved === true,
45
- fixture: input.fixture === true
38
+ owner_affinity_preserved: input.ownerAffinityPreserved === true
46
39
  }
47
- }, input.checkedAt);
40
+ });
48
41
  }
49
42
  export function passthroughCodexDesktopEvent(event) {
50
43
  return event;
51
44
  }
52
- function stableEventBytes(events) {
53
- return events.map((event) => JSON.stringify(event)).join('\n');
54
- }
55
- function eventType(event) {
56
- if (!event || typeof event !== 'object' || Array.isArray(event))
57
- return null;
58
- const type = event.type;
59
- return typeof type === 'string' && type.trim() ? type.trim() : null;
60
- }
@@ -1,72 +1,133 @@
1
- import { probeEvidence } from './probe-evidence.js';
2
- export function runBridgeProbe(input) {
3
- if (input.mode !== 'desktop-native-bridge') {
4
- return probeEvidence({
5
- skipped: true,
6
- source: 'config',
7
- evidence: {
8
- required: false,
9
- mode: input.mode,
10
- reason: 'local_bridge_not_selected'
11
- }
12
- }, input.checkedAt);
13
- }
14
- const manifestSchema = String(input.manifest?.schema_version || '');
15
- const manifestAvailable = manifestSchema === 'codex-lb.desktop-capabilities.v1';
16
- const verified = input.transportAttempted === true
17
- && input.httpRoundTrip === true
18
- && input.websocketRoundTrip === true;
19
- const blockers = [
20
- ...(input.blockers || []),
21
- ...(input.level !== 'shallow' && input.transportAttempted === true && input.httpRoundTrip !== true
22
- ? ['desktop_bridge_http_transport_failed']
23
- : []),
24
- ...(input.level !== 'shallow' && input.transportAttempted === true && input.websocketRoundTrip !== true
25
- ? ['desktop_bridge_websocket_transport_failed']
26
- : [])
27
- ];
28
- return probeEvidence({
29
- configured: input.configured,
30
- advertised: manifestAvailable,
31
- attempted: input.transportAttempted,
32
- verified,
33
- fixture: input.fixture,
34
- source: verified ? 'transport' : manifestAvailable ? 'manifest' : 'config',
35
- blockers,
36
- warnings: input.processRunning && !input.transportAttempted
37
- ? ['bridge_process_running_without_transport_evidence']
38
- : [],
1
+ import { capabilityProbeResultV3 } from './probe-evidence.js';
2
+ export function runBridgeProbeV3(input) {
3
+ const runtime = capabilityProbeResultV3({
4
+ ...input,
5
+ capability: 'runtime',
6
+ scope: 'bridge',
7
+ stage: input.processRunning ? 'process' : 'preflight',
8
+ state: input.configured && input.processRunning ? 'verified' : 'not_attempted',
9
+ source: 'config',
10
+ recoveryAction: input.processRunning ? null : 'repair_bridge_service',
39
11
  evidence: {
40
- mode: input.mode,
41
12
  configured: input.configured === true,
42
13
  process_running: input.processRunning === true,
43
- capability_manifest_seen: manifestAvailable,
44
- http_round_trip: input.httpRoundTrip === true,
45
- websocket_round_trip: input.websocketRoundTrip === true
14
+ transport_verified: false
46
15
  }
47
- }, input.checkedAt);
16
+ });
17
+ if (input.requestedLevel === 'shallow') {
18
+ return [
19
+ runtime,
20
+ notAttemptedBridgeTransport(input, 'http_health'),
21
+ notAttemptedBridgeTransport(input, 'websocket_transport')
22
+ ];
23
+ }
24
+ const http = input.httpProbe
25
+ ? capabilityProbeResultV3({
26
+ ...input,
27
+ capability: 'http_health',
28
+ scope: 'bridge',
29
+ stage: mapHttpStage(input.httpProbe.terminal_stage),
30
+ state: input.httpProbe.state,
31
+ terminal: Boolean(input.httpProbe.root_cause),
32
+ rootCause: input.httpProbe.root_cause,
33
+ blockers: input.httpProbe.blockers,
34
+ warnings: input.httpProbe.warnings,
35
+ retryable: input.httpProbe.state === 'blocked' || input.httpProbe.state === 'failed',
36
+ recoveryAction: recoveryFor(input.httpProbe.root_cause),
37
+ source: 'transport',
38
+ evidence: {
39
+ structured_probe_schema: input.httpProbe.schema,
40
+ terminal_stage: input.httpProbe.terminal_stage,
41
+ status_code: input.httpProbe.status_code,
42
+ latency_ms: input.httpProbe.latency_ms
43
+ }
44
+ })
45
+ : notAttemptedBridgeTransport(input, 'http_health');
46
+ const websocket = input.websocketProbe
47
+ ? websocketCapabilityResult(input, input.websocketProbe)
48
+ : notAttemptedBridgeTransport(input, 'websocket_transport');
49
+ if (input.processRunning && !input.httpProbe && !input.websocketProbe) {
50
+ runtime.warnings.push('bridge_process_running_without_transport_evidence');
51
+ }
52
+ return [runtime, http, websocket];
48
53
  }
49
- export function gatewayAuthTransportEvidence(input) {
50
- const transport = input.transport || 'unknown';
51
- const preferredBearer = transport === 'authorization-bearer-compat'
52
- || transport === 'authorization-bearer';
53
- const customHeader = transport === 'x-codex-lb-api-key';
54
- return probeEvidence({
55
- configured: input.configured,
56
- attempted: input.observed,
57
- verified: input.observed === true && (preferredBearer || customHeader),
58
- fixture: input.fixture,
59
- source: input.observed ? 'transport' : 'config',
60
- blockers: [...(input.blockers || [])],
61
- warnings: customHeader ? ['custom_x_codex_lb_api_key_transport_active'] : [],
54
+ function websocketCapabilityResult(input, probe) {
55
+ const complete = probe.upgrade_verified
56
+ && probe.protocol_verified
57
+ && probe.frame_round_trip_verified
58
+ && probe.clean_close_verified;
59
+ const inconsistentVerified = probe.state === 'verified' && !complete;
60
+ return capabilityProbeResultV3({
61
+ ...input,
62
+ capability: 'websocket_transport',
63
+ scope: 'bridge',
64
+ stage: mapWebSocketStage(probe.terminal_stage),
65
+ state: inconsistentVerified ? 'degraded' : probe.state,
66
+ terminal: Boolean(probe.root_cause),
67
+ rootCause: probe.root_cause,
68
+ blockers: probe.blockers,
69
+ warnings: [
70
+ ...probe.warnings,
71
+ ...(inconsistentVerified ? ['websocket_structured_result_incomplete'] : [])
72
+ ],
73
+ retryable: probe.state === 'blocked' || probe.state === 'failed',
74
+ recoveryAction: recoveryFor(probe.root_cause),
75
+ source: 'transport',
62
76
  evidence: {
63
- configured_gateway_auth_transport: transport,
64
- preferred_custom_header: customHeader,
65
- preferred_authorization_bearer: preferredBearer,
66
- standard_authorization_bearer: transport === 'authorization-bearer',
67
- legacy_authorization_bearer_compatibility: false,
68
- silent_fallback: false,
69
- observed: input.observed === true
77
+ structured_probe_schema: probe.schema,
78
+ terminal_stage: probe.terminal_stage,
79
+ status_code: probe.status_code,
80
+ negotiated_protocol: probe.negotiated_protocol,
81
+ upgrade_verified: probe.upgrade_verified,
82
+ protocol_verified: probe.protocol_verified,
83
+ frame_round_trip_verified: probe.frame_round_trip_verified,
84
+ clean_close_verified: probe.clean_close_verified,
85
+ latency_ms: probe.latency_ms
70
86
  }
71
- }, input.checkedAt);
87
+ });
88
+ }
89
+ function notAttemptedBridgeTransport(input, capability) {
90
+ return capabilityProbeResultV3({
91
+ ...input,
92
+ capability,
93
+ scope: 'bridge',
94
+ stage: 'preflight',
95
+ state: 'not_attempted',
96
+ source: 'config',
97
+ recoveryAction: input.requestedLevel === 'shallow' ? null : 'retry_transport_probe',
98
+ evidence: { reason: input.requestedLevel === 'shallow' ? 'transport_not_requested' : 'transport_probe_not_run' }
99
+ });
100
+ }
101
+ function mapHttpStage(stage) {
102
+ if (stage === 'tcp_connect')
103
+ return 'tcp_connect';
104
+ if (stage === 'http_health')
105
+ return 'http_health';
106
+ return 'complete';
107
+ }
108
+ function mapWebSocketStage(stage) {
109
+ if (stage === 'tcp_connect')
110
+ return 'tcp_connect';
111
+ if (stage === 'websocket_upgrade')
112
+ return 'websocket_upgrade';
113
+ if (stage === 'frame_round_trip')
114
+ return 'frame_round_trip';
115
+ if (stage === 'clean_close')
116
+ return 'clean_close';
117
+ if (stage === 'complete')
118
+ return 'complete';
119
+ return 'websocket_protocol';
120
+ }
121
+ function recoveryFor(rootCause) {
122
+ if (!rootCause)
123
+ return null;
124
+ if (rootCause === 'desktop_bridge_not_running')
125
+ return 'repair_bridge_service';
126
+ if (rootCause === 'desktop_bridge_tcp_connect_failed')
127
+ return 'restart_bridge_and_retry';
128
+ if (rootCause === 'desktop_bridge_websocket_upgrade_failed')
129
+ return 'inspect_bridge_logs_and_retry_transport';
130
+ if (rootCause === 'desktop_bridge_websocket_protocol_mismatch')
131
+ return 'update_bridge_or_codex_protocol';
132
+ return 'retry_transport_probe';
72
133
  }
@@ -1,139 +1,39 @@
1
- import { normalizeCodexLbToolCatalog, shouldBindLocalModelCatalog } from '../codex-lb-tool-catalog.js';
2
- import { uniqueValues as unique } from '../../text/strings.js';
3
- import { probeEvidence } from './probe-evidence.js';
4
- export function runCatalogProbe(input) {
5
- const manifestModels = manifestFlag(input.manifest, 'routes', 'models');
6
- const hasCatalogPayload = Boolean(input.catalog);
7
- const normalized = hasCatalogPayload ? normalizeCodexLbToolCatalog(input.catalog) : null;
8
- const rows = normalized?.catalog?.models || [];
9
- const advertisedSpeedTiers = unique(rows.flatMap((row) => tierNames(row?.additional_speed_tiers)));
10
- const advertisedServiceTiers = unique(rows.flatMap((row) => tierNames(row?.service_tiers)));
11
- const fastAdvertised = advertisedSpeedTiers.some((tier) => tier === 'fast' || tier === 'priority')
12
- || advertisedServiceTiers.includes('priority');
13
- const nativeReplacementBound = input.mode === 'desktop-native-bridge' && input.localCatalogBound === true;
14
- const catalogBlockers = [
15
- ...(input.blockers || []),
16
- ...(nativeReplacementBound ? ['native_bridge_local_catalog_replacement_forbidden'] : []),
17
- ...(normalized && !normalized.ok ? normalized.blockers : []),
18
- ...(input.level !== 'shallow' && !hasCatalogPayload && manifestModels !== true
19
- ? ['codex_lb_model_catalog_unavailable']
20
- : [])
21
- ];
22
- const catalog = probeEvidence({
23
- configured: input.localCatalogBound === true,
24
- advertised: manifestModels === true,
25
- attempted: hasCatalogPayload,
26
- verified: normalized?.ok === true,
27
- fixture: input.fixture,
28
- source: hasCatalogPayload ? 'transport' : manifestModels === true ? 'manifest' : 'config',
29
- blockers: catalogBlockers,
1
+ import { capabilityProbeResultV3, uniqueStrings } from './probe-evidence.js';
2
+ export function runCatalogProbeV3(input) {
3
+ const state = input.catalog.state === 'verified'
4
+ ? 'verified'
5
+ : input.catalog.state === 'degraded'
6
+ ? 'degraded'
7
+ : input.catalog.state === 'failed'
8
+ ? 'blocked'
9
+ : input.catalog.state === 'stale'
10
+ ? 'stale'
11
+ : input.catalog.state === 'syncing'
12
+ ? 'running'
13
+ : 'not_attempted';
14
+ const rootCause = state === 'blocked'
15
+ ? uniqueStrings(input.catalog.blockers)[0] || 'catalog_sync_failed'
16
+ : null;
17
+ return capabilityProbeResultV3({
18
+ ...input,
19
+ capability: 'catalog_sync',
20
+ scope: `provider:${input.catalog.provider_id}`,
21
+ stage: state === 'verified' ? 'complete' : 'catalog_sync',
22
+ state,
23
+ terminal: state === 'blocked',
24
+ rootCause,
25
+ blockers: input.catalog.blockers,
26
+ warnings: input.catalog.warnings,
27
+ retryable: state === 'blocked' || state === 'stale',
28
+ recoveryAction: input.catalog.recovery_action,
29
+ source: 'transport',
30
30
  evidence: {
31
- contract: normalized?.contract || null,
32
- model_count: normalized?.model_count || 0,
33
- unknown_fields_preserved: normalized?.contract === 'codex-model-catalog-pass-through.v2',
34
- local_catalog_binding_allowed: shouldBindLocalModelCatalog(input.mode),
35
- local_catalog_bound: input.localCatalogBound === true,
36
- manifest_models_route: manifestModels
31
+ lifecycle_schema: input.catalog.schema,
32
+ source: input.catalog.source,
33
+ generation: input.catalog.generation,
34
+ digest: input.catalog.digest,
35
+ model_count: input.catalog.model_count,
36
+ expires_at: input.catalog.expires_at
37
37
  }
38
- }, input.checkedAt);
39
- const cliPlane = input.mode === 'cli-provider';
40
- const cliPickerVerified = cliPlane
41
- && input.level !== 'shallow'
42
- && normalized?.ok === true
43
- && rows.length > 0;
44
- const pickerVerified = cliPickerVerified || (input.level === 'deep'
45
- && input.pickerControlVisible === true
46
- && Boolean(input.pickerSelectedModel));
47
- const modelPicker = probeEvidence({
48
- advertised: Boolean(normalized?.ok),
49
- attempted: input.level === 'deep' || cliPickerVerified,
50
- verified: pickerVerified,
51
- fixture: input.fixture,
52
- source: cliPlane
53
- ? hasCatalogPayload ? 'transport' : 'manifest'
54
- : input.level === 'deep' ? 'desktop_ui' : hasCatalogPayload ? 'transport' : 'manifest',
55
- blockers: [
56
- ...(input.blockers || []),
57
- ...(!cliPlane && input.level === 'deep' && input.pickerControlVisible === false
58
- ? ['codex_desktop_model_picker_not_visible']
59
- : [])
60
- ],
61
- warnings: !cliPlane && input.level !== 'deep' && normalized?.ok
62
- ? ['desktop_model_picker_not_deep_verified']
63
- : [],
64
- evidence: {
65
- catalog_advertised: normalized?.ok === true,
66
- desktop_picker_verified: pickerVerified,
67
- picker_control_visible: input.pickerControlVisible ?? null,
68
- picker_selected_model: input.pickerSelectedModel || null
69
- }
70
- }, input.checkedAt);
71
- const configuredTier = normalizeTier(input.configuredServiceTier);
72
- const requestTier = normalizeTier(input.requestServiceTier);
73
- const responseTier = normalizeTier(input.responseActualServiceTier);
74
- const fastConfigured = configuredTier === 'fast';
75
- const fastRequested = requestTier === 'fast' || requestTier === 'priority';
76
- const fastEffective = responseTier === 'priority' || responseTier === 'fast';
77
- const fastVerified = (cliPlane ? cliPickerVerified : pickerVerified)
78
- && fastAdvertised && fastRequested && fastEffective;
79
- const fastBlockers = [
80
- ...(input.blockers || []),
81
- ...(!cliPlane && input.level === 'deep' && input.pickerControlVisible === false ? ['fast_picker_control_not_visible'] : []),
82
- ...(input.level === 'deep' && fastRequested && !fastEffective ? ['fast_service_tier_not_effective'] : []),
83
- ...(cliPlane && input.level !== 'shallow' && fastRequested && hasCatalogPayload && !fastEffective
84
- ? ['fast_service_tier_not_effective']
85
- : [])
86
- ];
87
- const fastMode = probeEvidence({
88
- configured: fastConfigured,
89
- advertised: fastAdvertised,
90
- attempted: Boolean(input.requestServiceTier || input.responseActualServiceTier),
91
- verified: fastVerified,
92
- fixture: input.fixture,
93
- unsupported: Boolean(hasCatalogPayload && normalized?.ok && !fastAdvertised),
94
- source: fastVerified
95
- ? cliPlane ? 'transport' : 'deep_probe'
96
- : input.requestServiceTier || input.responseActualServiceTier
97
- ? 'transport'
98
- : fastAdvertised
99
- ? 'manifest'
100
- : 'config',
101
- blockers: fastBlockers,
102
- warnings: fastConfigured && !fastAdvertised ? ['fast_configured_but_not_catalog_advertised'] : [],
103
- evidence: {
104
- configured_service_tier: configuredTier,
105
- advertised_additional_speed_tiers: advertisedSpeedTiers,
106
- advertised_service_tiers: advertisedServiceTiers,
107
- picker_control_visible: input.pickerControlVisible ?? null,
108
- request_service_tier: requestTier,
109
- request_priority_mapping: fastRequested ? 'priority' : null,
110
- response_actual_service_tier: responseTier,
111
- configured: fastConfigured,
112
- advertised: fastAdvertised,
113
- effective: fastEffective
114
- }
115
- }, input.checkedAt);
116
- return { catalog, model_picker: modelPicker, fast_mode: fastMode };
117
- }
118
- function manifestFlag(manifest, section, key) {
119
- const row = manifest?.[section];
120
- if (!row || typeof row !== 'object' || Array.isArray(row))
121
- return null;
122
- const value = row[key];
123
- return typeof value === 'boolean' ? value : null;
124
- }
125
- function tierNames(value) {
126
- if (!Array.isArray(value))
127
- return [];
128
- return value.map((entry) => normalizeTier(typeof entry === 'string'
129
- ? entry
130
- : entry && typeof entry === 'object'
131
- ? entry.id ?? entry.name
132
- ?? entry.service_tier
133
- ?? entry.tier
134
- : null)).filter((entry) => Boolean(entry));
135
- }
136
- function normalizeTier(value) {
137
- const tier = String(value || '').trim().toLowerCase();
138
- return tier || null;
38
+ });
139
39
  }
@@ -1,42 +1,44 @@
1
- import { probeEvidence } from './probe-evidence.js';
2
- export function runComputerUseProbe(input) {
3
- const callEventSeen = (input.events || []).some(isComputerCallEvent);
4
- const attempted = input.attempted === true || Boolean(input.events?.length);
5
- const blockers = [
6
- ...(input.blockers || []),
7
- ...(attempted && input.toolAdvertised === false ? ['computer_tool_not_advertised'] : []),
8
- ...(attempted && !callEventSeen ? ['computer_call_event_filtered'] : []),
9
- ...(input.level === 'deep' && attempted && input.localExecutorCompleted !== true ? ['computer_executor_unavailable'] : []),
10
- ...(input.level === 'deep' && attempted && input.outputSubmitted !== true ? ['computer_output_rejected'] : []),
11
- ...(input.level === 'deep' && attempted && input.sessionAffinityPreserved !== true ? ['computer_session_affinity_lost'] : []),
12
- ...(input.level === 'deep' && attempted && input.followUpCompleted !== true ? ['computer_follow_up_incomplete'] : [])
13
- ];
14
- return probeEvidence({
15
- advertised: input.toolAdvertised === true,
16
- attempted,
17
- verified: input.level === 'deep'
18
- && callEventSeen
19
- && input.localExecutorCompleted === true
20
- && input.outputSubmitted === true
21
- && input.followUpCompleted === true
22
- && input.sessionAffinityPreserved === true,
23
- fixture: input.fixture,
24
- source: input.level === 'deep' ? 'deep_probe' : attempted ? 'transport' : 'manifest',
25
- unsupported: input.toolAdvertised === false && !attempted,
26
- blockers,
27
- warnings: callEventSeen && input.level !== 'deep'
28
- ? ['computer_call_transport_seen_without_real_executor_loop']
29
- : [],
30
- evidence: {
31
- tool_advertised: input.toolAdvertised === true,
32
- call_event_seen: callEventSeen,
33
- local_executor_completed: input.localExecutorCompleted === true,
34
- output_submitted: input.outputSubmitted === true,
35
- follow_up_completed: input.followUpCompleted === true,
36
- session_affinity_preserved: input.sessionAffinityPreserved === true,
37
- fixture: input.fixture === true
38
- }
39
- }, input.checkedAt);
1
+ import { capabilityProbeResultV3 } from './probe-evidence.js';
2
+ export function runComputerUseProbeV3(input) {
3
+ if (input.requestedLevel !== 'deep' || input.attempted !== true || input.fixture === true) {
4
+ return capabilityProbeResultV3({
5
+ ...input,
6
+ capability: 'computer_use',
7
+ scope: `provider:${input.providerId}`,
8
+ stage: 'preflight',
9
+ state: 'not_attempted',
10
+ source: input.advertised ? 'manifest' : 'config',
11
+ warnings: input.fixture ? ['computer_fixture_not_live_evidence'] : [],
12
+ recoveryAction: 'run_deep_verification',
13
+ evidence: { advertised: input.advertised === true, fixture: input.fixture === true }
14
+ });
15
+ }
16
+ const failure = firstComputerFailure(input);
17
+ if (failure) {
18
+ return capabilityProbeResultV3({
19
+ ...input,
20
+ capability: 'computer_use',
21
+ scope: `provider:${input.providerId}`,
22
+ stage: failure.stage,
23
+ state: 'blocked',
24
+ terminal: true,
25
+ rootCause: failure.blocker,
26
+ blockers: [failure.blocker],
27
+ retryable: true,
28
+ recoveryAction: 'run_deep_verification',
29
+ source: 'deep_probe',
30
+ evidence: computerEvidence(input)
31
+ });
32
+ }
33
+ return capabilityProbeResultV3({
34
+ ...input,
35
+ capability: 'computer_use',
36
+ scope: `provider:${input.providerId}`,
37
+ stage: 'complete',
38
+ state: 'verified',
39
+ source: 'deep_probe',
40
+ evidence: computerEvidence(input)
41
+ });
40
42
  }
41
43
  export function isComputerCallEvent(value) {
42
44
  if (!value || typeof value !== 'object' || Array.isArray(value))
@@ -48,3 +50,25 @@ export function isComputerCallEvent(value) {
48
50
  return Boolean(item && typeof item === 'object' && !Array.isArray(item)
49
51
  && /computer_call/i.test(String(item.type || '')));
50
52
  }
53
+ function firstComputerFailure(input) {
54
+ if (input.callEventSeen !== true)
55
+ return { stage: 'feature_response', blocker: 'computer_call_event_filtered' };
56
+ if (input.localExecutorCompleted !== true)
57
+ return { stage: 'feature_response', blocker: 'computer_executor_unavailable' };
58
+ if (input.outputSubmitted !== true)
59
+ return { stage: 'feature_request', blocker: 'computer_output_rejected' };
60
+ if (input.followUpCompleted !== true)
61
+ return { stage: 'feature_response', blocker: 'computer_follow_up_incomplete' };
62
+ if (input.sessionAffinityPreserved !== true)
63
+ return { stage: 'feature_response', blocker: 'computer_session_affinity_lost' };
64
+ return null;
65
+ }
66
+ function computerEvidence(input) {
67
+ return {
68
+ call_event_seen: input.callEventSeen === true,
69
+ local_executor_completed: input.localExecutorCompleted === true,
70
+ output_submitted: input.outputSubmitted === true,
71
+ follow_up_completed: input.followUpCompleted === true,
72
+ session_affinity_preserved: input.sessionAffinityPreserved === true
73
+ };
74
+ }