sneakoscope 8.1.2 → 8.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (261) hide show
  1. package/README.md +96 -58
  2. package/crates/sks-core/Cargo.lock +1 -1
  3. package/crates/sks-core/Cargo.toml +1 -1
  4. package/dist/bin/fast-inline.js +5 -51
  5. package/dist/cli/command-manifest-lite.js +2 -1
  6. package/dist/cli/command-registry.js +2 -1
  7. package/dist/cli/global-mode-router.js +1 -1
  8. package/dist/cli/install-helpers-codex-lb-config.js +112 -914
  9. package/dist/cli/install-helpers-codex-lb-shared.js +3 -44
  10. package/dist/cli/install-helpers-install-support.js +4 -20
  11. package/dist/cli/install-helpers.js +36 -2716
  12. package/dist/cli/router.js +9 -9
  13. package/dist/commands/bridge-command-output.js +111 -0
  14. package/dist/commands/bridge.js +320 -0
  15. package/dist/commands/codex-app.js +39 -123
  16. package/dist/commands/doctor-helpers.js +380 -0
  17. package/dist/commands/doctor-profile.js +3 -0
  18. package/dist/commands/doctor.js +114 -873
  19. package/dist/commands/mad-sks.js +0 -4
  20. package/dist/config/skills-manifest.json +1 -1
  21. package/dist/core/agents/agent-effort-policy.js +11 -21
  22. package/dist/core/agents/agent-recursion-guard.js +26 -0
  23. package/dist/core/agents/agent-runner-codex-exec.js +7 -9
  24. package/dist/core/architecture-hardening/contracts/contracts.js +225 -161
  25. package/dist/core/architecture-hardening/state/state-service.js +49 -13
  26. package/dist/core/auto-review.js +15 -9
  27. package/dist/core/codex/codex-config-guard.js +8 -0
  28. package/dist/core/codex-adapter.js +8 -10
  29. package/dist/core/codex-app/codex-app-fast-ui-repair.js +7 -29
  30. package/dist/core/codex-app/codex-app-launcher.js +10 -12
  31. package/dist/core/codex-app/codex-app-restart.js +10 -12
  32. package/dist/core/codex-app/menubar/constants.js +2 -5
  33. package/dist/core/codex-app/menubar/global-install.js +3 -2
  34. package/dist/core/codex-app/menubar/installer/result.js +23 -0
  35. package/dist/core/codex-app/menubar/installer/runtime.js +28 -0
  36. package/dist/core/codex-app/menubar/installer.js +5 -96
  37. package/dist/core/codex-app/menubar/migration.js +1 -42
  38. package/dist/core/codex-app/openrouter-provider.js +0 -78
  39. package/dist/core/codex-app.js +97 -360
  40. package/dist/core/codex-control/codex-app-server-runtime-env.js +8 -28
  41. package/dist/core/codex-control/codex-current-image-path-real-probe.js +2 -3
  42. package/dist/core/codex-control/codex-current-web-search-probe.js +2 -3
  43. package/dist/core/codex-control/codex-sdk-adapter.js +5 -48
  44. package/dist/core/codex-control/codex-task-runner.js +16 -60
  45. package/dist/core/codex-control/desktop-bridge-launch-guard.js +227 -0
  46. package/dist/core/codex-exec-output-schema.js +11 -13
  47. package/dist/core/codex-lb/bridge-contracts.js +2 -0
  48. package/dist/core/codex-lb/bridge-runtime-validation/capability.js +104 -0
  49. package/dist/core/codex-lb/bridge-runtime-validation/catalog.js +52 -0
  50. package/dist/core/codex-lb/bridge-runtime-validation/shared.js +109 -0
  51. package/dist/core/codex-lb/bridge-runtime-validation/status.js +250 -0
  52. package/dist/core/codex-lb/bridge-runtime-validation.js +106 -0
  53. package/dist/core/codex-lb/capability-runner.js +505 -201
  54. package/dist/core/codex-lb/codex-lb-env.js +179 -12
  55. package/dist/core/codex-lb/combined-catalog/builder.js +86 -0
  56. package/dist/core/codex-lb/combined-catalog/contracts.js +5 -0
  57. package/dist/core/codex-lb/combined-catalog/normalize.js +170 -0
  58. package/dist/core/codex-lb/combined-catalog/persistence.js +207 -0
  59. package/dist/core/codex-lb/combined-catalog/shared.js +12 -0
  60. package/dist/core/codex-lb/combined-catalog/storage.js +171 -0
  61. package/dist/core/codex-lb/combined-catalog.js +12 -0
  62. package/dist/core/codex-lb/desktop-bridge/client.js +4 -1
  63. package/dist/core/codex-lb/desktop-bridge/header-policy.js +48 -63
  64. package/dist/core/codex-lb/desktop-bridge/http-forward.js +115 -83
  65. package/dist/core/codex-lb/desktop-bridge/launchd.js +20 -13
  66. package/dist/core/codex-lb/desktop-bridge/location-rewrite.js +4 -1
  67. package/dist/core/codex-lb/desktop-bridge/security.js +381 -267
  68. package/dist/core/codex-lb/desktop-bridge/server.js +148 -19
  69. package/dist/core/codex-lb/desktop-bridge/state.js +56 -70
  70. package/dist/core/codex-lb/desktop-bridge/types.js +6 -1
  71. package/dist/core/codex-lb/desktop-bridge/websocket-forward.js +281 -106
  72. package/dist/core/codex-lb/desktop-bridge-migration/historical-config.js +245 -0
  73. package/dist/core/codex-lb/desktop-bridge-migration/historical-toml.js +56 -0
  74. package/dist/core/codex-lb/desktop-bridge-migration/metadata.js +73 -0
  75. package/dist/core/codex-lb/desktop-bridge-migration/receipt.js +52 -0
  76. package/dist/core/codex-lb/desktop-bridge-migration/retired-runtime-cleanup.js +106 -0
  77. package/dist/core/codex-lb/desktop-bridge-migration/types.js +1 -0
  78. package/dist/core/codex-lb/desktop-bridge-migration.js +238 -0
  79. package/dist/core/codex-lb/desktop-controller-v3/catalog.js +257 -0
  80. package/dist/core/codex-lb/desktop-controller-v3/diagnostics.js +62 -0
  81. package/dist/core/codex-lb/desktop-controller-v3/lifecycle-commands.js +203 -0
  82. package/dist/core/codex-lb/desktop-controller-v3/live-probes.js +293 -0
  83. package/dist/core/codex-lb/desktop-controller-v3/preflight-probes.js +144 -0
  84. package/dist/core/codex-lb/desktop-controller-v3/provider-commands.js +182 -0
  85. package/dist/core/codex-lb/desktop-controller-v3/shared.js +279 -0
  86. package/dist/core/codex-lb/desktop-controller-v3/status.js +269 -0
  87. package/dist/core/codex-lb/desktop-controller-v3/types.js +1 -0
  88. package/dist/core/codex-lb/desktop-controller-v3/verification.js +89 -0
  89. package/dist/core/codex-lb/desktop-controller-v3.js +67 -0
  90. package/dist/core/codex-lb/desktop-controller.js +2 -1730
  91. package/dist/core/codex-lb/desktop-service.js +462 -627
  92. package/dist/core/codex-lb/migration-receipt.js +560 -118
  93. package/dist/core/codex-lb/probes/auxiliary-surfaces-probe.js +37 -53
  94. package/dist/core/codex-lb/probes/bridge-probe.js +125 -64
  95. package/dist/core/codex-lb/probes/catalog-probe.js +36 -136
  96. package/dist/core/codex-lb/probes/computer-use-probe.js +63 -39
  97. package/dist/core/codex-lb/probes/image-generation-probe.js +98 -41
  98. package/dist/core/codex-lb/probes/probe-evidence.js +32 -33
  99. package/dist/core/codex-lb/probes/voice-realtime-probe.js +69 -43
  100. package/dist/core/codex-lb/provider-credentials/configuration.js +127 -0
  101. package/dist/core/codex-lb/provider-credentials/locks.js +11 -0
  102. package/dist/core/codex-lb/provider-credentials/private-snapshot.js +28 -0
  103. package/dist/core/codex-lb/provider-credentials/removal.js +33 -0
  104. package/dist/core/codex-lb/provider-credentials/resolution.js +59 -0
  105. package/dist/core/codex-lb/provider-credentials/runtime.js +55 -0
  106. package/dist/core/codex-lb/provider-credentials/types.js +1 -0
  107. package/dist/core/codex-lb/provider-credentials/validation-store.js +137 -0
  108. package/dist/core/codex-lb/provider-credentials.js +5 -0
  109. package/dist/core/codex-lb/provider-registry.js +323 -0
  110. package/dist/core/codex-lb/provider-route-policy.js +118 -0
  111. package/dist/core/codex-lb/request-route-resolver.js +172 -0
  112. package/dist/core/codex-lb/route-index.js +148 -0
  113. package/dist/core/codex-lb/trusted-deep-evidence.js +158 -286
  114. package/dist/core/commands/basic-cli.js +1 -1
  115. package/dist/core/commands/check-command.js +3 -10
  116. package/dist/core/commands/gate-result-contract.js +10 -14
  117. package/dist/core/commands/intent-normalization/normalizer.js +1 -1
  118. package/dist/core/commands/mad-sks-command.js +2 -6
  119. package/dist/core/commands/release-command.js +11 -1
  120. package/dist/core/commands/telegram-command.js +46 -6
  121. package/dist/core/doctor/doctor-readiness-matrix.js +9 -7
  122. package/dist/core/doctor/skill-legacy-surface.js +5 -5
  123. package/dist/core/evidence/v2/evidence-key.js +30 -3
  124. package/dist/core/feature-fixtures.js +8 -1
  125. package/dist/core/feature-registry.js +3 -2
  126. package/dist/core/hooks-runtime/stop-finalization.js +11 -1
  127. package/dist/core/hooks-runtime/subagent-context.js +15 -1
  128. package/dist/core/hooks-runtime/subagent-skill-availability-contract.js +1 -1
  129. package/dist/core/hooks-runtime/tool-output-quarantine.js +1 -1
  130. package/dist/core/hooks-runtime.js +73 -87
  131. package/dist/core/image-ux-review/imagegen-adapter.js +108 -94
  132. package/dist/core/image-ux-review/real-callout-extractor.js +144 -14
  133. package/dist/core/imagegen/desktop-bridge-imagegen-target.js +77 -0
  134. package/dist/core/imagegen/imagegen-capability.js +43 -151
  135. package/dist/core/init/skills/filesystem.js +89 -0
  136. package/dist/core/init/skills/inventory.js +97 -0
  137. package/dist/core/init/skills/manifest.js +151 -0
  138. package/dist/core/init/skills.js +5 -325
  139. package/dist/core/init.js +0 -63
  140. package/dist/core/install/installed-package-smoke.js +1 -1
  141. package/dist/core/managed-assets/managed-assets-manifest.js +0 -1
  142. package/dist/core/policy/latest-version-guidance.js +15 -2
  143. package/dist/core/preflight/parallel-preflight-engine.js +27 -51
  144. package/dist/core/provider/provider-badge.js +9 -4
  145. package/dist/core/provider/provider-context.js +57 -107
  146. package/dist/core/providers/openrouter/openrouter-account.js +3 -1
  147. package/dist/core/providers/openrouter/openrouter-secret-store.js +91 -22
  148. package/dist/core/release/desktop-bridge-release-evidence.js +457 -0
  149. package/dist/core/release/gate-manifest.js +0 -1
  150. package/dist/core/release/main-push-guard.js +13 -0
  151. package/dist/core/release/main-push-receipt.js +11 -0
  152. package/dist/core/release/physical-release-gates.js +664 -61
  153. package/dist/core/release/publish-preflight.js +3 -3
  154. package/dist/core/release/release-gate-batch-runner.js +19 -6
  155. package/dist/core/release/release-gate-dag.js +33 -6
  156. package/dist/core/release/release-gate-node.js +1 -3
  157. package/dist/core/release/release-gate-output-contract.js +55 -0
  158. package/dist/core/release/release-pack-contract.js +1 -1
  159. package/dist/core/release/release-pack-receipt.js +209 -8
  160. package/dist/core/release/release-real-contract.js +1 -1
  161. package/dist/core/release/stage-publish.js +106 -28
  162. package/dist/core/retention/temp-lease.js +204 -0
  163. package/dist/core/retention.js +18 -195
  164. package/dist/core/routes.js +1 -2
  165. package/dist/core/safety/intent-contract/intent-contract.js +3 -3
  166. package/dist/core/subagents/naruto-host-credentials.js +6 -1
  167. package/dist/core/subagents/official-subagent-config.js +27 -9
  168. package/dist/core/subagents/official-subagent-runner.js +14 -31
  169. package/dist/core/subagents/wave-lifecycle.js +36 -8
  170. package/dist/core/subagents/wave-parent-guidance.js +2 -1
  171. package/dist/core/telegram/doctor.js +2 -2
  172. package/dist/core/telegram/liveness.js +10 -4
  173. package/dist/core/triwiki/context-graph/compiler/index.js +18 -18
  174. package/dist/core/update/update-migration-state/fast-mode-config.js +172 -0
  175. package/dist/core/update/update-migration-state/session-state-split.js +247 -0
  176. package/dist/core/update/update-migration-state/simple-stages.js +46 -0
  177. package/dist/core/update/update-migration-state.js +4 -481
  178. package/dist/core/version.js +1 -1
  179. package/dist/native/sks-menubar/Sources/OperationCoordinator.swift +28 -4
  180. package/dist/native/sks-menubar/Sources/OperationModels.swift +112 -2
  181. package/dist/native/sks-menubar/Sources/ProviderRouteExplanation.swift +21 -0
  182. package/dist/native/sks-menubar/Sources/ProvidersBridgeCatalog.swift +140 -0
  183. package/dist/native/sks-menubar/Sources/ProvidersOpenRouter.swift +107 -470
  184. package/dist/native/sks-menubar/Sources/ProvidersReliability.swift +27 -197
  185. package/dist/native/sks-menubar/Sources/ProvidersRoutingTruth.swift +335 -269
  186. package/dist/native/sks-menubar/Sources/ProvidersViewController.swift +233 -437
  187. package/dist/native/sks-menubar/Sources/RemoteCodingViewController.swift +16 -7
  188. package/dist/native/sks-menubar/Sources/SecureProcessEnvelope.swift +39 -9
  189. package/dist/native/sks-menubar/Sources/TelegramSupport.swift +56 -0
  190. package/dist/scripts/canonical-test-runner.js +7 -1
  191. package/dist/scripts/check-runtime-schemas.js +7 -2
  192. package/dist/scripts/codex-sdk-real-smoke-check.js +3 -1
  193. package/dist/scripts/desktop-bridge-capabilities-check.js +123 -0
  194. package/dist/scripts/{codex-lb-desktop-bridge-latency-check.js → desktop-bridge-latency-check.js} +61 -16
  195. package/dist/scripts/desktop-bridge-real-evidence-check.js +64 -0
  196. package/dist/scripts/{codex-lb-desktop-bridge-check.js → desktop-bridge-transport-check.js} +92 -155
  197. package/dist/scripts/desktop-bridge-transport-client.js +116 -0
  198. package/dist/scripts/desktop-bridge-unification-check.js +276 -0
  199. package/dist/scripts/doctor-fixes-codex-app-fast-ui-check.js +12 -8
  200. package/dist/scripts/gate-policy-audit-check.js +52 -2
  201. package/dist/scripts/provider-badge-context-check.js +55 -12
  202. package/dist/scripts/publish-preflight.js +1 -2
  203. package/dist/scripts/release-affected-selector-check.js +1 -2
  204. package/dist/scripts/release-aggressive-resource-governor-check.js +1 -1
  205. package/dist/scripts/release-cache-glob-hashing-check.js +1 -0
  206. package/dist/scripts/release-cache-version-neutral-fixture-check.js +1 -0
  207. package/dist/scripts/release-full-parallelism-blackbox.js +1 -1
  208. package/dist/scripts/release-gate-batch-runner-check.js +9 -0
  209. package/dist/scripts/release-gate-dag-runner-check.js +6 -0
  210. package/dist/scripts/release-gate-dag-runner.js +4 -2
  211. package/dist/scripts/release-metadata-check.js +16 -3
  212. package/dist/scripts/release-pack-receipt.js +29 -6
  213. package/dist/scripts/release-physical-gates-check.js +39 -0
  214. package/dist/scripts/release-real-check.js +7 -5
  215. package/package.json +6 -8
  216. package/release-gates.v2.json +156 -157
  217. package/runtime-required-scripts.json +11 -11
  218. package/schemas/codex/desktop-bridge-status-v3.schema.json +286 -0
  219. package/schemas/codex/desktop-capabilities-v3.schema.json +198 -0
  220. package/schemas/release/release-gate-node.schema.json +2 -3
  221. package/dist/cli/codex-lb-setup-warning-output.js +0 -17
  222. package/dist/cli/install-helpers-codex-lb-chain.js +0 -529
  223. package/dist/commands/codex-lb.js +0 -1232
  224. package/dist/core/architecture-hardening/migration/migration.js +0 -111
  225. package/dist/core/codex-app/auxiliary-oauth-policy.js +0 -36
  226. package/dist/core/codex-app/catalog-compat/catalog-service.js +0 -104
  227. package/dist/core/codex-app/child-policy/child-policy.js +0 -35
  228. package/dist/core/codex-app/desktop-routing-snapshot.js +0 -233
  229. package/dist/core/codex-app/glm-model-profile.js +0 -1
  230. package/dist/core/codex-app/glm-profile-installer.js +0 -191
  231. package/dist/core/codex-app/glm-profile-schema.js +0 -42
  232. package/dist/core/codex-app/multi-provider-router.js +0 -391
  233. package/dist/core/codex-app/openrouter-activate.js +0 -405
  234. package/dist/core/codex-app/openrouter-model-catalog.js +0 -217
  235. package/dist/core/codex-app/provider-child-policy.js +0 -64
  236. package/dist/core/codex-app/provider-mode.js +0 -91
  237. package/dist/core/codex-app/provider-session-policy.js +0 -85
  238. package/dist/core/codex-app/session-policy/session-pinning.js +0 -68
  239. package/dist/core/codex-control/codex-lb-launch-recovery.js +0 -319
  240. package/dist/core/codex-lb/codex-lb-setup.js +0 -293
  241. package/dist/core/codex-lb/codex-lb-tool-catalog.js +0 -456
  242. package/dist/core/codex-lb/codex-lb-tool-output-recovery.js +0 -290
  243. package/dist/core/codex-lb/desktop-center-credentials.js +0 -1083
  244. package/dist/core/codex-lb/desktop-mode.js +0 -32
  245. package/dist/core/codex-lb/desktop-real-evidence.js +0 -168
  246. package/dist/core/codex-lb/legacy-migration.js +0 -576
  247. package/dist/core/codex-lb/native-openai-transport/transport.js +0 -68
  248. package/dist/core/codex-lb/provider-routing/provider-router.js +0 -58
  249. package/dist/core/codex-lb/routing-truth.js +0 -327
  250. package/dist/core/imagegen/codex-lb-imagegen-target.js +0 -92
  251. package/dist/native/sks-menubar/Sources/ProvidersConnectTest.swift +0 -118
  252. package/dist/native/sks-menubar/Sources/ProvidersFastMode.swift +0 -17
  253. package/dist/native/sks-menubar/Sources/ProvidersMultiProvider.swift +0 -331
  254. package/dist/native/sks-menubar/Sources/ProvidersRoleModels.swift +0 -260
  255. package/dist/scripts/codex-lb-catalog-passthrough-check.js +0 -120
  256. package/dist/scripts/codex-lb-desktop-auth-invariant-check.js +0 -169
  257. package/dist/scripts/codex-lb-desktop-capabilities-check.js +0 -287
  258. package/dist/scripts/codex-lb-desktop-real-evidence-check.js +0 -123
  259. package/dist/scripts/codex-lb-fast-mode-truth-check.js +0 -114
  260. package/dist/scripts/codex-lb-fast-ui-preservation-check.js +0 -152
  261. package/dist/scripts/codex-lb-gpt56-fast-profile-check.js +0 -231
@@ -13,35 +13,35 @@
13
13
  "reason": "installed doctor and repair paths probe whether Codex can load the managed project config"
14
14
  },
15
15
  {
16
- "path": "dist/scripts/codex-lb-catalog-passthrough-check.js",
16
+ "path": "dist/scripts/desktop-bridge-unification-check.js",
17
17
  "category": "installed_runtime",
18
- "reason": "the installed public release gate DAG verifies catalog v2 pass-through against the packaged runtime"
18
+ "reason": "the installed public release gate DAG hermetically verifies Desktop Bridge credential coexistence, migration idempotency, rollback isolation, retired CLI routing, and no-fallback policy"
19
19
  },
20
20
  {
21
- "path": "dist/scripts/codex-lb-desktop-auth-invariant-check.js",
22
- "category": "installed_runtime",
23
- "reason": "the installed public release gate DAG verifies Desktop OAuth byte preservation and guarded rollback behavior"
24
- },
25
- {
26
- "path": "dist/scripts/codex-lb-desktop-bridge-check.js",
21
+ "path": "dist/scripts/desktop-bridge-transport-check.js",
27
22
  "category": "installed_runtime",
28
23
  "reason": "the installed public release gate DAG verifies the packaged localhost Desktop bridge transports and redaction"
29
24
  },
30
25
  {
31
- "path": "dist/scripts/codex-lb-desktop-bridge-latency-check.js",
26
+ "path": "dist/scripts/desktop-bridge-latency-check.js",
32
27
  "category": "installed_runtime",
33
28
  "reason": "the installed public release gate DAG enforces localhost-only Desktop bridge HTTP and SSE latency budgets"
34
29
  },
35
30
  {
36
- "path": "dist/scripts/codex-lb-desktop-capabilities-check.js",
31
+ "path": "dist/scripts/desktop-bridge-capabilities-check.js",
37
32
  "category": "installed_runtime",
38
33
  "reason": "the installed public release gate DAG verifies capability evidence state boundaries in the packaged runtime"
39
34
  },
40
35
  {
41
- "path": "dist/scripts/codex-lb-desktop-real-evidence-check.js",
36
+ "path": "dist/scripts/desktop-bridge-real-evidence-check.js",
42
37
  "category": "installed_runtime",
43
38
  "reason": "the installed full release proof fails closed unless trusted real Codex Desktop evidence covers native features, lifecycle recovery, and the remote other-Mac runtime"
44
39
  },
40
+ {
41
+ "path": "dist/scripts/release-physical-gates-check.js",
42
+ "category": "installed_package_verification",
43
+ "reason": "the installed full release proof validates macOS-captured, source-bound physical receipts including both Desktop Bridge providers, OAuth preservation, native UI, WebSocket, and production deep artifacts"
44
+ },
45
45
  {
46
46
  "path": "dist/scripts/lib/ensure-dist-fresh.js",
47
47
  "category": "installed_repair",
@@ -0,0 +1,286 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://sneakoscope.dev/schemas/codex/desktop-bridge-status-v3.schema.json",
4
+ "title": "SKS Desktop Bridge Status v3",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schema", "checked_at", "correlation_id", "management", "service",
9
+ "http_probe", "websocket_probe", "native_identity", "providers", "routing",
10
+ "catalog_sync", "capabilities", "readiness", "recovery_actions"
11
+ ],
12
+ "properties": {
13
+ "schema": { "const": "sks.desktop-bridge-status.v3" },
14
+ "checked_at": { "$ref": "#/$defs/dateTime" },
15
+ "correlation_id": { "$ref": "#/$defs/nonEmptyString" },
16
+ "management": { "$ref": "#/$defs/management" },
17
+ "service": { "$ref": "#/$defs/service" },
18
+ "http_probe": {
19
+ "anyOf": [
20
+ { "$ref": "#/$defs/httpProbe" },
21
+ { "type": "null" }
22
+ ]
23
+ },
24
+ "websocket_probe": {
25
+ "anyOf": [
26
+ { "$ref": "#/$defs/webSocketProbe" },
27
+ { "type": "null" }
28
+ ]
29
+ },
30
+ "native_identity": { "$ref": "#/$defs/nativeIdentity" },
31
+ "providers": {
32
+ "type": "object",
33
+ "additionalProperties": false,
34
+ "required": ["codex-lb", "openrouter"],
35
+ "properties": {
36
+ "codex-lb": { "$ref": "#/$defs/providerProfile" },
37
+ "openrouter": { "$ref": "#/$defs/providerProfile" }
38
+ }
39
+ },
40
+ "routing": { "$ref": "#/$defs/routing" },
41
+ "catalog_sync": {
42
+ "$ref": "desktop-capabilities-v3.schema.json#/$defs/combinedCatalog"
43
+ },
44
+ "capabilities": {
45
+ "anyOf": [
46
+ { "$ref": "desktop-capabilities-v3.schema.json" },
47
+ { "type": "null" }
48
+ ]
49
+ },
50
+ "readiness": { "$ref": "#/$defs/readiness" },
51
+ "recovery_actions": { "$ref": "#/$defs/stringArray" }
52
+ },
53
+ "$defs": {
54
+ "nonEmptyString": { "type": "string", "minLength": 1 },
55
+ "dateTime": { "type": "string", "format": "date-time" },
56
+ "nullableDateTime": {
57
+ "anyOf": [
58
+ { "$ref": "#/$defs/dateTime" },
59
+ { "type": "null" }
60
+ ]
61
+ },
62
+ "stringArray": {
63
+ "type": "array",
64
+ "items": { "type": "string" }
65
+ },
66
+ "runtimeState": {
67
+ "enum": ["not_installed", "starting", "ready", "degraded", "blocked", "stopped", "stale"]
68
+ },
69
+ "probeState": {
70
+ "enum": ["not_attempted", "running", "verified", "degraded", "blocked", "failed", "unsupported", "stale"]
71
+ },
72
+ "management": {
73
+ "oneOf": [
74
+ {
75
+ "type": "object",
76
+ "additionalProperties": false,
77
+ "required": ["managed", "runtime", "state", "reason"],
78
+ "properties": {
79
+ "managed": { "const": true },
80
+ "runtime": { "const": "desktop-bridge" },
81
+ "state": { "$ref": "#/$defs/runtimeState" },
82
+ "reason": { "type": "null" }
83
+ }
84
+ },
85
+ {
86
+ "type": "object",
87
+ "additionalProperties": false,
88
+ "required": ["managed", "runtime", "state", "reason"],
89
+ "properties": {
90
+ "managed": { "const": false },
91
+ "runtime": { "type": "null" },
92
+ "state": { "enum": ["not_installed", "stopped"] },
93
+ "reason": { "enum": ["uninstalled", "rollback_complete", "never_configured"] }
94
+ }
95
+ }
96
+ ]
97
+ },
98
+ "service": {
99
+ "type": "object",
100
+ "additionalProperties": false,
101
+ "required": ["state", "installed", "loaded", "running", "loopback_origin", "pid", "checked_at", "blockers", "warnings"],
102
+ "properties": {
103
+ "state": { "$ref": "#/$defs/runtimeState" },
104
+ "installed": { "type": "boolean" },
105
+ "loaded": { "type": "boolean" },
106
+ "running": { "type": "boolean" },
107
+ "loopback_origin": { "type": ["string", "null"] },
108
+ "pid": { "type": ["integer", "null"], "minimum": 0 },
109
+ "checked_at": { "$ref": "#/$defs/dateTime" },
110
+ "blockers": { "$ref": "#/$defs/stringArray" },
111
+ "warnings": { "$ref": "#/$defs/stringArray" }
112
+ }
113
+ },
114
+ "httpProbe": {
115
+ "type": "object",
116
+ "additionalProperties": false,
117
+ "required": ["schema", "state", "terminal_stage", "root_cause", "status_code", "latency_ms", "blockers", "warnings"],
118
+ "properties": {
119
+ "schema": { "const": "sks.desktop-bridge-http-probe.v1" },
120
+ "state": { "enum": ["verified", "blocked", "failed", "unsupported"] },
121
+ "terminal_stage": { "enum": ["tcp_connect", "http_health", "complete"] },
122
+ "root_cause": { "type": ["string", "null"] },
123
+ "status_code": { "type": ["integer", "null"] },
124
+ "latency_ms": { "type": ["number", "null"], "minimum": 0 },
125
+ "blockers": { "$ref": "#/$defs/stringArray" },
126
+ "warnings": { "$ref": "#/$defs/stringArray" }
127
+ }
128
+ },
129
+ "webSocketProbe": {
130
+ "type": "object",
131
+ "additionalProperties": false,
132
+ "required": [
133
+ "schema", "state", "terminal_stage", "root_cause", "status_code",
134
+ "negotiated_protocol", "upgrade_verified", "protocol_verified",
135
+ "frame_round_trip_verified", "clean_close_verified", "latency_ms",
136
+ "blockers", "warnings"
137
+ ],
138
+ "properties": {
139
+ "schema": { "const": "sks.desktop-bridge-websocket-probe.v2" },
140
+ "state": { "enum": ["not_attempted", "verified", "degraded", "blocked", "failed", "unsupported"] },
141
+ "terminal_stage": { "enum": ["tcp_connect", "websocket_upgrade", "websocket_protocol", "frame_round_trip", "clean_close", "complete"] },
142
+ "root_cause": { "type": ["string", "null"] },
143
+ "status_code": { "type": ["integer", "null"] },
144
+ "negotiated_protocol": { "type": ["string", "null"] },
145
+ "upgrade_verified": { "type": "boolean" },
146
+ "protocol_verified": { "type": "boolean" },
147
+ "frame_round_trip_verified": { "type": "boolean" },
148
+ "clean_close_verified": { "type": "boolean" },
149
+ "latency_ms": { "type": ["number", "null"], "minimum": 0 },
150
+ "blockers": { "$ref": "#/$defs/stringArray" },
151
+ "warnings": { "$ref": "#/$defs/stringArray" }
152
+ }
153
+ },
154
+ "nativeIdentity": {
155
+ "type": "object",
156
+ "additionalProperties": false,
157
+ "required": ["state", "configured", "semantic_identity_preserved", "checked_at", "blockers", "warnings"],
158
+ "properties": {
159
+ "state": { "$ref": "#/$defs/probeState" },
160
+ "configured": { "type": "boolean" },
161
+ "semantic_identity_preserved": { "type": ["boolean", "null"] },
162
+ "checked_at": { "$ref": "#/$defs/nullableDateTime" },
163
+ "blockers": { "$ref": "#/$defs/stringArray" },
164
+ "warnings": { "$ref": "#/$defs/stringArray" }
165
+ }
166
+ },
167
+ "providerProfile": {
168
+ "type": "object",
169
+ "additionalProperties": false,
170
+ "required": ["schema", "provider_id", "enabled", "credential", "endpoint", "catalog", "capabilities"],
171
+ "properties": {
172
+ "schema": { "const": "sks.bridge-provider-profile-status.v1" },
173
+ "provider_id": { "enum": ["codex-lb", "openrouter"] },
174
+ "enabled": { "type": "boolean" },
175
+ "credential": {
176
+ "type": "object",
177
+ "additionalProperties": false,
178
+ "required": ["state", "source", "fingerprint", "checked_at", "blockers", "warnings"],
179
+ "properties": {
180
+ "state": { "enum": ["not_configured", "configured_unverified", "validating", "ready", "rejected", "unavailable", "stale"] },
181
+ "source": { "type": ["string", "null"] },
182
+ "fingerprint": { "type": ["string", "null"] },
183
+ "checked_at": { "$ref": "#/$defs/nullableDateTime" },
184
+ "blockers": { "$ref": "#/$defs/stringArray" },
185
+ "warnings": { "$ref": "#/$defs/stringArray" }
186
+ }
187
+ },
188
+ "endpoint": {
189
+ "type": "object",
190
+ "additionalProperties": false,
191
+ "required": ["configured", "origin_redacted", "auth_transport"],
192
+ "properties": {
193
+ "configured": { "type": "boolean" },
194
+ "origin_redacted": { "type": ["string", "null"] },
195
+ "auth_transport": { "enum": ["authorization-bearer", "x-codex-lb-api-key", "openrouter-bearer", null] }
196
+ }
197
+ },
198
+ "catalog": { "$ref": "desktop-capabilities-v3.schema.json#/$defs/catalogState" },
199
+ "capabilities": { "$ref": "desktop-capabilities-v3.schema.json#/$defs/scopeSummary" }
200
+ }
201
+ },
202
+ "routeTarget": {
203
+ "type": "object",
204
+ "additionalProperties": false,
205
+ "required": ["provider_id", "upstream_model"],
206
+ "properties": {
207
+ "provider_id": { "enum": ["codex-lb", "openrouter"] },
208
+ "upstream_model": { "$ref": "#/$defs/nonEmptyString" }
209
+ }
210
+ },
211
+ "routingPolicy": {
212
+ "type": "object",
213
+ "additionalProperties": false,
214
+ "required": ["schema", "default_provider_id", "fallback", "model_routes", "catalog_generation", "policy_generation", "changed_at"],
215
+ "properties": {
216
+ "schema": { "const": "sks.bridge-routing-policy.v1" },
217
+ "default_provider_id": { "enum": ["codex-lb", "openrouter", null] },
218
+ "fallback": { "const": "none" },
219
+ "model_routes": {
220
+ "type": "object",
221
+ "additionalProperties": { "$ref": "#/$defs/routeTarget" }
222
+ },
223
+ "catalog_generation": { "$ref": "#/$defs/nonEmptyString" },
224
+ "policy_generation": { "$ref": "#/$defs/nonEmptyString" },
225
+ "changed_at": { "$ref": "#/$defs/dateTime" }
226
+ }
227
+ },
228
+ "sessionPin": {
229
+ "type": "object",
230
+ "additionalProperties": false,
231
+ "required": ["thread_id", "provider_id", "public_model", "upstream_model", "catalog_generation", "route_policy_generation", "created_at"],
232
+ "properties": {
233
+ "thread_id": { "$ref": "#/$defs/nonEmptyString" },
234
+ "provider_id": { "enum": ["codex-lb", "openrouter"] },
235
+ "public_model": { "$ref": "#/$defs/nonEmptyString" },
236
+ "upstream_model": { "$ref": "#/$defs/nonEmptyString" },
237
+ "catalog_generation": { "$ref": "#/$defs/nonEmptyString" },
238
+ "route_policy_generation": { "$ref": "#/$defs/nonEmptyString" },
239
+ "created_at": { "$ref": "#/$defs/dateTime" }
240
+ }
241
+ },
242
+ "routing": {
243
+ "type": "object",
244
+ "additionalProperties": false,
245
+ "required": ["policy", "selected_model", "selected_route", "session_pin", "fallback", "blockers", "warnings"],
246
+ "properties": {
247
+ "policy": {
248
+ "anyOf": [
249
+ { "$ref": "#/$defs/routingPolicy" },
250
+ { "type": "null" }
251
+ ]
252
+ },
253
+ "selected_model": { "type": ["string", "null"] },
254
+ "selected_route": {
255
+ "anyOf": [
256
+ { "$ref": "#/$defs/routeTarget" },
257
+ { "type": "null" }
258
+ ]
259
+ },
260
+ "session_pin": {
261
+ "anyOf": [
262
+ { "$ref": "#/$defs/sessionPin" },
263
+ { "type": "null" }
264
+ ]
265
+ },
266
+ "fallback": { "const": "none" },
267
+ "blockers": { "$ref": "#/$defs/stringArray" },
268
+ "warnings": { "$ref": "#/$defs/stringArray" }
269
+ }
270
+ },
271
+ "readiness": {
272
+ "type": "object",
273
+ "additionalProperties": false,
274
+ "required": ["ready", "state", "bridge_ready", "active_routes_ready", "combined_catalog_ready", "blockers", "warnings"],
275
+ "properties": {
276
+ "ready": { "type": "boolean" },
277
+ "state": { "enum": ["ready", "awaiting_provider", "degraded", "blocked", "unmanaged"] },
278
+ "bridge_ready": { "type": "boolean" },
279
+ "active_routes_ready": { "type": "boolean" },
280
+ "combined_catalog_ready": { "type": "boolean" },
281
+ "blockers": { "$ref": "#/$defs/stringArray" },
282
+ "warnings": { "$ref": "#/$defs/stringArray" }
283
+ }
284
+ }
285
+ }
286
+ }
@@ -0,0 +1,198 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://sneakoscope.dev/schemas/codex/desktop-capabilities-v3.schema.json",
4
+ "title": "SKS Desktop Capability Report v3",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schema", "report_id", "correlation_id", "session_id", "requested_level",
9
+ "checked_at", "catalog_generation", "execution", "bridge", "native_identity",
10
+ "providers", "combined_catalog", "summary", "catalog_sync"
11
+ ],
12
+ "properties": {
13
+ "schema": { "const": "sks.desktop-capabilities.v3" },
14
+ "report_id": { "$ref": "#/$defs/nonEmptyString" },
15
+ "correlation_id": { "$ref": "#/$defs/nonEmptyString" },
16
+ "session_id": { "$ref": "#/$defs/nonEmptyString" },
17
+ "requested_level": { "$ref": "#/$defs/requestedLevel" },
18
+ "checked_at": { "$ref": "#/$defs/dateTime" },
19
+ "catalog_generation": { "type": ["string", "null"] },
20
+ "execution": { "$ref": "#/$defs/execution" },
21
+ "bridge": { "$ref": "#/$defs/scopeSummary" },
22
+ "native_identity": { "$ref": "#/$defs/scopeSummary" },
23
+ "providers": {
24
+ "type": "object",
25
+ "additionalProperties": false,
26
+ "required": ["codex-lb", "openrouter"],
27
+ "properties": {
28
+ "codex-lb": { "$ref": "#/$defs/scopeSummary" },
29
+ "openrouter": { "$ref": "#/$defs/scopeSummary" }
30
+ }
31
+ },
32
+ "combined_catalog": { "$ref": "#/$defs/scopeSummary" },
33
+ "summary": {
34
+ "type": "object",
35
+ "additionalProperties": false,
36
+ "required": [
37
+ "bridge_ready", "active_routes_ready", "level_satisfied",
38
+ "transport_level_satisfied", "deep_level_satisfied", "full_feature_verified",
39
+ "inactive_provider_failures", "blockers", "warnings"
40
+ ],
41
+ "properties": {
42
+ "bridge_ready": { "type": "boolean" },
43
+ "active_routes_ready": { "type": "boolean" },
44
+ "level_satisfied": { "type": "boolean" },
45
+ "transport_level_satisfied": { "type": "boolean" },
46
+ "deep_level_satisfied": { "type": "boolean" },
47
+ "full_feature_verified": { "type": "boolean" },
48
+ "inactive_provider_failures": { "$ref": "#/$defs/stringArray" },
49
+ "blockers": { "$ref": "#/$defs/stringArray" },
50
+ "warnings": { "$ref": "#/$defs/stringArray" }
51
+ }
52
+ },
53
+ "catalog_sync": { "$ref": "#/$defs/combinedCatalog" }
54
+ },
55
+ "$defs": {
56
+ "nonEmptyString": { "type": "string", "minLength": 1 },
57
+ "dateTime": { "type": "string", "format": "date-time" },
58
+ "nullableDateTime": {
59
+ "anyOf": [
60
+ { "$ref": "#/$defs/dateTime" },
61
+ { "type": "null" }
62
+ ]
63
+ },
64
+ "stringArray": {
65
+ "type": "array",
66
+ "items": { "type": "string" }
67
+ },
68
+ "requestedLevel": {
69
+ "enum": ["shallow", "transport", "deep"]
70
+ },
71
+ "probeState": {
72
+ "enum": ["not_attempted", "running", "verified", "degraded", "blocked", "failed", "unsupported", "stale"]
73
+ },
74
+ "probeStage": {
75
+ "enum": [
76
+ "preflight", "process", "tcp_connect", "http_health", "websocket_upgrade",
77
+ "websocket_protocol", "frame_round_trip", "clean_close", "provider_auth",
78
+ "catalog_sync", "model_route", "feature_request", "feature_response",
79
+ "artifact_validation", "complete"
80
+ ]
81
+ },
82
+ "scope": {
83
+ "enum": ["bridge", "native-identity", "provider:codex-lb", "provider:openrouter", "catalog:combined"]
84
+ },
85
+ "execution": {
86
+ "type": "object",
87
+ "additionalProperties": false,
88
+ "required": ["ok", "status", "blockers"],
89
+ "properties": {
90
+ "ok": { "type": "boolean" },
91
+ "status": { "enum": ["completed", "partial", "failed"] },
92
+ "blockers": { "$ref": "#/$defs/stringArray" }
93
+ }
94
+ },
95
+ "probe": {
96
+ "type": "object",
97
+ "additionalProperties": false,
98
+ "required": [
99
+ "schema", "capability", "scope", "requested_level", "stage", "state",
100
+ "checked_at", "report_id", "correlation_id", "session_id", "attempt_id",
101
+ "terminal", "root_cause", "blockers", "warnings", "retryable",
102
+ "recovery_action", "source", "evidence"
103
+ ],
104
+ "properties": {
105
+ "schema": { "const": "sks.capability-probe.v3" },
106
+ "capability": { "$ref": "#/$defs/nonEmptyString" },
107
+ "scope": { "$ref": "#/$defs/scope" },
108
+ "requested_level": { "$ref": "#/$defs/requestedLevel" },
109
+ "stage": { "$ref": "#/$defs/probeStage" },
110
+ "state": { "$ref": "#/$defs/probeState" },
111
+ "checked_at": { "$ref": "#/$defs/dateTime" },
112
+ "report_id": { "$ref": "#/$defs/nonEmptyString" },
113
+ "correlation_id": { "$ref": "#/$defs/nonEmptyString" },
114
+ "session_id": { "$ref": "#/$defs/nonEmptyString" },
115
+ "attempt_id": { "type": "integer", "minimum": 0 },
116
+ "terminal": { "type": "boolean" },
117
+ "root_cause": { "type": ["string", "null"] },
118
+ "blockers": { "$ref": "#/$defs/stringArray" },
119
+ "warnings": { "$ref": "#/$defs/stringArray" },
120
+ "retryable": { "type": "boolean" },
121
+ "recovery_action": { "type": ["string", "null"] },
122
+ "source": { "enum": ["config", "manifest", "transport", "desktop_ui", "deep_probe", "artifact"] },
123
+ "evidence": { "type": "object" }
124
+ }
125
+ },
126
+ "scopeSummary": {
127
+ "type": "object",
128
+ "additionalProperties": false,
129
+ "required": ["schema", "scope", "state", "checked_at", "capabilities", "blockers", "warnings"],
130
+ "properties": {
131
+ "schema": { "const": "sks.scope-capability-summary.v1" },
132
+ "scope": { "$ref": "#/$defs/scope" },
133
+ "state": { "$ref": "#/$defs/probeState" },
134
+ "checked_at": { "$ref": "#/$defs/dateTime" },
135
+ "capabilities": {
136
+ "type": "object",
137
+ "additionalProperties": { "$ref": "#/$defs/probe" }
138
+ },
139
+ "blockers": { "$ref": "#/$defs/stringArray" },
140
+ "warnings": { "$ref": "#/$defs/stringArray" }
141
+ }
142
+ },
143
+ "catalogState": {
144
+ "type": "object",
145
+ "additionalProperties": false,
146
+ "required": [
147
+ "schema", "provider_id", "state", "source", "generation", "digest",
148
+ "model_count", "checked_at", "expires_at", "blockers", "warnings",
149
+ "recovery_action"
150
+ ],
151
+ "properties": {
152
+ "schema": { "const": "sks.catalog-sync-state.v2" },
153
+ "provider_id": { "enum": ["codex-lb", "openrouter"] },
154
+ "state": { "enum": ["not_started", "syncing", "verified", "degraded", "failed", "stale"] },
155
+ "source": { "enum": ["gateway", "openrouter", null] },
156
+ "generation": { "type": ["string", "null"] },
157
+ "digest": { "type": ["string", "null"] },
158
+ "model_count": { "type": ["integer", "null"], "minimum": 0 },
159
+ "checked_at": { "$ref": "#/$defs/nullableDateTime" },
160
+ "expires_at": { "$ref": "#/$defs/nullableDateTime" },
161
+ "blockers": { "$ref": "#/$defs/stringArray" },
162
+ "warnings": { "$ref": "#/$defs/stringArray" },
163
+ "recovery_action": { "type": ["string", "null"] }
164
+ }
165
+ },
166
+ "combinedCatalog": {
167
+ "type": "object",
168
+ "additionalProperties": false,
169
+ "required": [
170
+ "schema", "state", "generation", "digest", "model_count", "route_count",
171
+ "conflict_count", "checked_at", "providers", "blockers", "warnings",
172
+ "recovery_action"
173
+ ],
174
+ "properties": {
175
+ "schema": { "const": "sks.combined-catalog-sync.v1" },
176
+ "state": { "enum": ["not_started", "syncing", "verified", "degraded", "failed", "stale"] },
177
+ "generation": { "type": ["string", "null"] },
178
+ "digest": { "type": ["string", "null"] },
179
+ "model_count": { "type": ["integer", "null"], "minimum": 0 },
180
+ "route_count": { "type": ["integer", "null"], "minimum": 0 },
181
+ "conflict_count": { "type": "integer", "minimum": 0 },
182
+ "checked_at": { "$ref": "#/$defs/nullableDateTime" },
183
+ "providers": {
184
+ "type": "object",
185
+ "additionalProperties": false,
186
+ "required": ["codex-lb", "openrouter"],
187
+ "properties": {
188
+ "codex-lb": { "$ref": "#/$defs/catalogState" },
189
+ "openrouter": { "$ref": "#/$defs/catalogState" }
190
+ }
191
+ },
192
+ "blockers": { "$ref": "#/$defs/stringArray" },
193
+ "warnings": { "$ref": "#/$defs/stringArray" },
194
+ "recovery_action": { "type": ["string", "null"] }
195
+ }
196
+ }
197
+ }
198
+ }
@@ -9,7 +9,7 @@
9
9
  "type": "array",
10
10
  "items": {
11
11
  "type": "object",
12
- "required": ["id", "command", "deps", "resource", "side_effect", "timeout_ms", "cache", "isolation", "preset"],
12
+ "required": ["id", "command", "deps", "resource", "side_effect", "timeout_ms", "output_contract", "cache", "isolation", "preset"],
13
13
  "properties": {
14
14
  "id": { "type": "string", "minLength": 1 },
15
15
  "command": { "type": "string", "minLength": 1 },
@@ -23,8 +23,7 @@
23
23
  },
24
24
  "side_effect": { "enum": ["hermetic", "real-env"] },
25
25
  "timeout_ms": { "type": "integer", "minimum": 1 },
26
- "output_contract": { "const": "sks.gate-result.v1" },
27
- "contract_note": { "type": "string", "minLength": 1 },
26
+ "output_contract": { "const": "sks.gate-result.v2" },
28
27
  "cache": {
29
28
  "type": "object",
30
29
  "required": ["enabled", "inputs"],
@@ -1,17 +0,0 @@
1
- const CODEX_LB_SETUP_WARNING_MESSAGES = {
2
- legacy_keychain_removed_rotate_provider_key_if_not_already_rotated: 'The retired macOS Keychain item was removed. Rotate the provider API key if it has not already been rotated.',
3
- legacy_keychain_cleanup_indeterminate_rotate_provider_key: 'Legacy macOS Keychain cleanup could not be proved. Rotate the provider API key before continuing to use it.'
4
- };
5
- export function formatCodexLbSetupWarnings(result) {
6
- const warningCodes = [
7
- ...(Array.isArray(result?.warnings) ? result.warnings : []),
8
- result?.persistence?.warning
9
- ]
10
- .map((value) => String(value || '').trim())
11
- .filter(Boolean);
12
- return [...new Set(warningCodes)].map((warning) => `warning: ${CODEX_LB_SETUP_WARNING_MESSAGES[warning] || warning}`);
13
- }
14
- export function printCodexLbSetupWarnings(result, write = console.error) {
15
- for (const warning of formatCodexLbSetupWarnings(result))
16
- write(warning);
17
- }