sneakoscope 8.2.0 → 8.3.0

package/dist/scripts/codex-current-capability-check.js

@@ -4,14 +4,16 @@ import { CODEX_CURRENT_FEATURE_KEYS, detectCodexCurrentCapability, writeCodexCur
 const requireReal = process.argv.includes('--require-real') || process.env.SKS_REQUIRE_CODEX_CURRENT === '1';
 if (!requireReal)
     process.env.SKS_CODEX_CURRENT_FAKE = '1';
-const cap = await detectCodexCurrentCapability({ requireReal });
-assertGate(cap.ok === true, 'Current Codex 0.146.0 capability probe must pass', cap);
-assertGate(Object.keys(cap.feature_states).length === CODEX_CURRENT_FEATURE_KEYS.length, 'Current Codex 0.146.0 feature count mismatch', cap);
-assertGate(Object.values(cap.feature_states).every((state) => String(state.certainty) !== 'assumed_by_version'), 'Current Codex 0.146.0 capability must not use assumed_by_version evidence', cap);
+const artifact = requireReal
+    ? await writeCodexCurrentCapabilityArtifacts(process.cwd(), { requireReal: true })
+    : null;
+const cap = artifact?.report || await detectCodexCurrentCapability({ requireReal });
+assertGate(cap.ok === true, 'Current package-derived Codex capability probe must pass', cap);
+assertGate(Object.keys(cap.feature_states).length === CODEX_CURRENT_FEATURE_KEYS.length, 'Current Codex feature count mismatch', cap);
+assertGate(Object.values(cap.feature_states).every((state) => String(state.certainty) !== 'assumed_by_version'), 'Current Codex capability must not use assumed_by_version evidence', cap);
 if (requireReal) {
-    assertGate(cap.probe_mode === 'real-schema', 'Current Codex 0.146.0 require-real must use generated schema evidence', cap);
-    assertGate(cap.release_authorizing === true, 'Current Codex 0.146.0 require-real must be release-authorizing', cap);
-    await writeCodexCurrentCapabilityArtifacts(process.cwd(), { requireReal: true });
+    assertGate(cap.probe_mode === 'real-schema', 'Current Codex require-real must use generated schema evidence', cap);
+    assertGate(cap.release_authorizing === true, 'Current Codex require-real must be release-authorizing', cap);
 }
 emitGate('codex:current:capability', {
     features: CODEX_CURRENT_FEATURE_KEYS.length,

package/dist/scripts/codex-current-dependency-check.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { assertGate, emitGate, readJson } from './gate-lib.js';
+import { CURRENT_CODEX_RUNTIME_CONTRACT, codexSdkDependencyVersion } from '../core/codex-compat/codex-runtime-contract.js';
+const pkg = readJson('package.json');
+const lock = readJson('package-lock.json');
+const expected = codexSdkDependencyVersion();
+const lockSdk = lock.packages?.['node_modules/@openai/codex-sdk']?.version;
+const lockCli = lock.packages?.['node_modules/@openai/codex']?.version;
+const lockRootVersion = lock.packages?.['']?.version || lock.version;
+const packageFiles = Array.isArray(pkg.files) ? pkg.files.map(String) : [];
+assertGate(pkg.dependencies?.['@openai/codex-sdk'] === expected, 'package.json must pin @openai/codex-sdk to one exact semver', { expected });
+assertGate(lockSdk === expected, 'package-lock must resolve @openai/codex-sdk to the package.json pin', { expected, lockSdk });
+assertGate(lockCli === expected, 'package-lock must resolve @openai/codex to the SDK dependency version', { expected, lockCli });
+assertGate(pkg.version === lockRootVersion, 'package version must match package-lock root version', { version: pkg.version, lockRootVersion });
+assertGate(!packageFiles.some((entry) => entry.startsWith('config/codex-releases/')), 'package must not ship a second version-specific Codex release manifest', { packageFiles });
+assertGate(!packageFiles.some((entry) => entry.startsWith('schemas/codex/app-server-')), 'package must generate the current App Server schema from the resolved runtime instead of shipping a versioned snapshot', { packageFiles });
+emitGate('codex:current:dependency-graph', {
+    dependency_source: CURRENT_CODEX_RUNTIME_CONTRACT.dependencySource,
+    sdk_version: expected,
+    target_tag: CURRENT_CODEX_RUNTIME_CONTRACT.targetTag
+});

package/dist/scripts/docs-truthfulness-check.js

@@ -19,13 +19,13 @@ const files = [
     'docs/release-readiness.md'
 ];
 const required = {
-    'README.md': ['CHANGELOG.md', 'docs/release-readiness.md', 'gpt-image-2', 'Telegram Bot API', '`sks telegram pair`'],
+    'README.md': ['CHANGELOG.md', 'docs/release-readiness.md', 'gpt-image-2', 'https://paseo.sh/', 'paseo run --provider codex'],
     'CHANGELOG.md': ['1.14.0', 'DFix Extreme Speed Kernel', 'hook trust doctor', 'warning-zero'],
     'docs/computer-use-evidence.md': ['sks.computer-use-live-evidence.v1', 'probe_only', 'live_capture_blocked', 'local-only', 'Codex Chrome Extension'],
     'docs/codex-lb.md': ['durable_env_file', 'durable_keychain', 'shell_profile', 'process_only_ephemeral', 'base URL only'],
-    'docs/codex-cli-compat.md': ['rust-v0.146.0', 'minimumSupportedVersion', '0.146.0', 'SubagentStart', 'sks_zero_warning_disallowed', 'strict subset'],
-    'docs/codex-app.md': ['rust-v0.146.0', 'App Server v2', 'Codex Chrome Extension', 'gpt-image-2'],
-    'docs/official-docs-compat.md': ['official-docs-compat-report.js', 'rust-v0.146.0', 'gpt-image-2', 'input_fidelity', 'additionalProperties:false'],
+    'docs/codex-cli-compat.md': ['package.json', 'runtime-generated', 'SubagentStart', 'sks_zero_warning_disallowed', 'strict subset'],
+    'docs/codex-app.md': ['package.json', 'App Server v2', 'Codex Chrome Extension', 'gpt-image-2'],
+    'docs/official-docs-compat.md': ['official-docs-compat-report.js', 'runtime-generated', 'gpt-image-2', 'input_fidelity', 'additionalProperties:false'],
     'docs/hooks-pat.md': ['SubagentStop', 'strict subset', 'zero-warning'],
     'docs/goal-to-loop-migration.md': ['only persisted goal owner', 'creates no SKS mission', '--legacy-goal-runtime', 'fail with an instruction'],
     'docs/known-gaps.md': ['No P0', 'P1'],
@@ -91,21 +91,6 @@ for (const file of files) {
         forbidden: forbiddenMatches
     });
 }
-const readmeText = fs.readFileSync(path.join(root, 'README.md'), 'utf8');
-const telegramOnboardingSteps = [
-    'sks telegram setup --token-stdin',
-    'sks menubar restart',
-    'sks telegram pair --json',
-    '/sks status {}'
-];
-const telegramOnboardingIndexes = telegramOnboardingSteps.map((step) => readmeText.indexOf(step));
-const telegramOnboardingOrdered = telegramOnboardingIndexes.every((index, position) => index >= 0 && (position === 0 || index > telegramOnboardingIndexes[position - 1]));
-results.push({
-    file: 'README.md#telegram-onboarding-order',
-    ok: telegramOnboardingOrdered,
-    missing: telegramOnboardingOrdered ? [] : telegramOnboardingSteps,
-    forbidden: []
-});
 for (const file of currentDollarSurfaceFiles) {
     const full = path.join(root, file);
     const text = fs.existsSync(full) ? fs.readFileSync(full, 'utf8') : '';

package/dist/scripts/fast-codex-service-tier-proof-check.js

@@ -28,7 +28,6 @@ fs.writeFileSync(path.join(reportDir, 'worker-process-report.json'), `${JSON.str
 const proof = await fastMode.writeFastModePropagationProof(temp, { policy: fastMode.resolveFastModePolicy({ fastMode: true }) });
 const ok = args.includes('-c')
     && args.includes('service_tier=fast')
-    && !args.includes('--full-auto')
     && !args.includes('--dangerously-bypass-approvals-and-sandbox')
     && proof.ok === true;
 console.log(JSON.stringify({ schema: 'sks.fast-codex-service-tier-proof-check.v1', ok, args, proof }, null, 2));

package/dist/scripts/install-surface-ssot-check.js

@@ -24,7 +24,7 @@ if (pluginVersion && packageVersion && pluginVersion !== packageVersion) {
     blockers.push(`marketplace_plugin_version_mismatch:${pluginVersion}!=${packageVersion}`);
 }
 else if (!pluginVersion) {
-    notes.push('marketplace_plugin_version_absent');
+    blockers.push('marketplace_plugin_version_absent');
 }
 else {
     notes.push(`marketplace_plugin_version_matches:${pluginVersion}`);
@@ -78,7 +78,7 @@ else {
 const report = {
     schema: 'sks.install-surface-ssot-check.v1',
     ok: blockers.length === 0,
-    install_ssot: 'npm:sneakoscope@latest',
+    install_ssot: 'package.json#version',
     package_version: packageVersion || null,
     plugin_version: pluginVersion || null,
     path_sks_version: pathVersion || null,

package/dist/scripts/latest-version-guidance-check.js

@@ -5,7 +5,7 @@ import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const { scanLatestVersionGuidance, latestVersionGuidanceReport } = await importDist('core/policy/latest-version-guidance.js');
 const DOC_EXEMPT_RE = /(?:^|\/)(?:CHANGELOG|RECALLPULSE_[^/]*|known-gaps|release-proof-truth)\.md$|compat|codex-0|migration|legacy-upgrade|sks-4-migration|-tasks\.md$/i;
 const SOURCE_EXEMPT = new Set([
-    'src/core/codex-compat/codex-release-manifest.ts',
+    'src/core/codex-compat/codex-runtime-contract.ts',
     'src/core/release/npm-stage-tarball-verifier-support.ts'
 ]);
 const SOURCE_EXEMPT_DIR_RE = /^src\/(?:scripts|vendor|generated)\//;

package/dist/scripts/packlist-performance-check.js

@@ -62,7 +62,6 @@ const packProof = writeNpmPackProof(root, info, packMs);
 const runtimeManifest = JSON.parse(fs.readFileSync(path.join(root, 'runtime-required-scripts.json'), 'utf8'));
 const runtimeScriptClosure = analyzeRuntimeScriptPackClosure(root);
 const customerPayloadForbidden = [
-    'dist/core/telegram/controller.js',
     'dist/core/agents/agent-cleanup-executor.js',
     'dist/core/release/npm-stage-tarball-verifier.js',
     'dist/core/release/npm-stage-tarball-verifier-support.js'

package/dist/scripts/release-metadata-check.js

@@ -43,6 +43,7 @@ const requiredPackageScripts = [
     'typecheck',
     'release:check',
     'release:metadata',
+    'release:version-truth',
     'release:check:affected',
     'release:check:fast',
     'release:check:confidence',
@@ -61,7 +62,7 @@ const requiredPackageScripts = [
 ];
 const requiredReleaseGates = [
     'architecture:guard',
-    'codex:current:manifest',
+    'codex:current:dependency-graph',
     'codex:current:binary-identity',
     'codex:current:policy',
     'codex:current:app-server-v2',
@@ -70,6 +71,7 @@ const requiredReleaseGates = [
     'commands:current-surface-only',
     'config:managed-merge',
     'docs:truthfulness',
+    'install-surface:ssot',
     'latest-version:guidance',
     'migration:current-surface-e2e',
     'migration:upgrade-safety',
@@ -83,6 +85,7 @@ const requiredReleaseGates = [
     'release:latency-slo',
     'release:proof-truth',
     'release:provenance',
+    'release:version-truth',
     'policy:gate-audit',
     'safety:mutation-callsite-coverage',
     'schema:check',

package/dist/scripts/release-version-truth-check.js

@@ -0,0 +1,149 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { assertGate, emitGate, root } from './gate-lib.js';
+const pkg = readJson('package.json');
+const expected = String(pkg.version || '');
+const mismatches = [];
+const warnings = [];
+let checked = 0;
+checkJson('package.json', 'version', pkg.version);
+const lock = readJson('package-lock.json');
+checkJson('package-lock.json', 'version', lock.version);
+checkJson('package-lock.json', 'packages[""].version', lock.packages?.['']?.version);
+const plugin = readJson('plugins/sks/.codex-plugin/plugin.json');
+checkJson('plugins/sks/.codex-plugin/plugin.json', 'version', plugin.version);
+checkRegex('src/core/version.ts', /PACKAGE_VERSION\s*=\s*['"]([^'"]+)['"]/, 'PACKAGE_VERSION');
+checkReExportOrRegex('src/core/fsx.ts', /PACKAGE_VERSION\s*}\s*from\s*['"]\.\/version(?:\.js)?['"]/, /PACKAGE_VERSION\s*=\s*['"]([^'"]+)['"]/, 'PACKAGE_VERSION');
+checkReExportOrRegex('src/bin/sks.ts', /PACKAGE_VERSION\s*}\s*from\s*['"]\.\.\/core\/version(?:\.js)?['"]/, /FAST_PACKAGE_VERSION\s*=\s*['"]([^'"]+)['"]/, 'FAST_PACKAGE_VERSION');
+checkRegex('crates/sks-core/Cargo.toml', /^version\s*=\s*"([^"]+)"/m, 'package.version');
+checkCargoLock('crates/sks-core/Cargo.lock', 'sks-core');
+const dist = readJson('dist/build-manifest.json', null);
+checkJson('dist/build-manifest.json', 'package_version', dist?.package_version);
+checkJson('dist/build-manifest.json', 'version', dist?.version);
+checkChangelog();
+checkReadme();
+checkReleaseMetadataScript();
+checkCargoMetadata();
+const ok = mismatches.length === 0;
+const report = {
+    schema: 'sks.release-version-truth.v1',
+    ok,
+    expected,
+    checked,
+    mismatches,
+    warnings,
+    generated_at: new Date().toISOString()
+};
+const out = path.join(root, '.sneakoscope', 'reports', 'release-version-truth.json');
+fs.mkdirSync(path.dirname(out), { recursive: true });
+fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
+assertGate(ok, 'release version truth mismatch', { expected, mismatches });
+emitGate('release:version-truth', { version: expected, checked, warnings: warnings.length });
+function checkJson(file, field, actual) {
+    checked += 1;
+    if (actual !== expected)
+        mismatch(file, field, actual);
+}
+function checkRegex(file, re, field) {
+    checked += 1;
+    const text = readText(file);
+    const match = text.match(re);
+    if (!match)
+        mismatch(file, field, null);
+    else if (match[1] !== expected)
+        mismatch(file, field, match[1]);
+}
+function checkReExportOrRegex(file, reExportRe, literalRe, field) {
+    const text = readText(file);
+    if (reExportRe.test(text)) {
+        checked += 1;
+        return;
+    }
+    checkRegex(file, literalRe, field);
+}
+function checkCargoLock(file, name) {
+    checked += 1;
+    const text = readText(file);
+    const block = text.split(/\n\[\[package\]\]\n/).find((part) => new RegExp(`name\\s*=\\s*"${escapeRe(name)}"`).test(part));
+    const match = block?.match(/version\s*=\s*"([^"]+)"/);
+    if (!match)
+        mismatch(file, `${name}.version`, null);
+    else if (match[1] !== expected)
+        mismatch(file, `${name}.version`, match[1]);
+}
+function checkChangelog() {
+    checked += 1;
+    const text = readText('CHANGELOG.md');
+    const latest = latestVersionedChangelogSection(text);
+    if (latest !== expected)
+        mismatch('CHANGELOG.md', 'latest release section', latest);
+}
+function checkReadme() {
+    checked += 1;
+    const text = readText('README.md');
+    const displayed = text.match(/\*\*SKS ([0-9]+\.[0-9]+\.[0-9]+)\*\*/)?.[1] || null;
+    if (!displayed)
+        mismatch('README.md', 'displayed current version', null);
+    else if (displayed !== expected)
+        mismatch('README.md', 'displayed current version', displayed);
+}
+function checkReleaseMetadataScript() {
+    checked += 1;
+    const script = String(pkg.scripts?.['release:metadata'] || '');
+    if (!script.includes('dist/scripts/release-metadata-check.js')) {
+        mismatch('package.json', 'scripts.release:metadata', script || null, 'node ./dist/scripts/release-metadata-check.js');
+    }
+}
+function checkCargoMetadata() {
+    checked += 1;
+    const res = spawnSync('cargo', ['metadata', '--no-deps', '--manifest-path', path.join(root, 'crates/sks-core/Cargo.toml'), '--format-version', '1'], {
+        cwd: root,
+        encoding: 'utf8',
+        timeout: 30000
+    });
+    if (res.status !== 0) {
+        warnings.push({ file: 'crates/sks-core/Cargo.toml', message: 'cargo metadata unavailable', stderr_tail: tail(res.stderr) });
+        return;
+    }
+    try {
+        const metadata = JSON.parse(res.stdout);
+        const crate = metadata.packages?.find((row) => row.name === 'sks-core');
+        if (crate?.version !== expected)
+            mismatch('cargo metadata', 'sks-core.version', crate?.version || null);
+    }
+    catch (err) {
+        warnings.push({ file: 'cargo metadata', message: `unparseable:${err instanceof Error ? err.message : String(err)}` });
+    }
+}
+function mismatch(file, field, actual, wanted = expected) {
+    mismatches.push({ file, field, expected: wanted, actual: actual ?? null });
+}
+function readJson(rel, fallback) {
+    try {
+        return JSON.parse(readText(rel));
+    }
+    catch (err) {
+        if (arguments.length > 1)
+            return fallback;
+        throw err;
+    }
+}
+function readText(rel) {
+    return fs.readFileSync(path.join(root, rel), 'utf8');
+}
+function escapeRe(value) {
+    return String(value).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function latestVersionedChangelogSection(text) {
+    for (const match of text.matchAll(/^## \[([^\]]+)\]/gm)) {
+        if (/^[0-9]+\.[0-9]+\.[0-9]+$/.test(match[1]))
+            return match[1];
+    }
+    return null;
+}
+function tail(value, limit = 1000) {
+    const text = String(value || '');
+    return text.length > limit ? text.slice(-limit) : text;
+}

package/dist/vendor/openai-codex/latest/hooks/permission-request.command.input.schema.json

@@ -10,6 +10,12 @@
     }
   },
   "properties": {
+    "agent_id": {
+      "type": "string"
+    },
+    "agent_type": {
+      "type": "string"
+    },
     "cwd": {
       "type": "string"
     },

package/dist/vendor/openai-codex/latest/hooks/permission-request.command.output.schema.json

@@ -2,21 +2,6 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "additionalProperties": false,
   "definitions": {
-    "HookEventNameWire": {
-      "enum": [
-        "PreToolUse",
-        "PermissionRequest",
-        "PostToolUse",
-        "PreCompact",
-        "PostCompact",
-        "SessionStart",
-        "UserPromptSubmit",
-        "SubagentStart",
-        "SubagentStop",
-        "Stop"
-      ],
-      "type": "string"
-    },
     "PermissionRequestBehaviorWire": {
       "enum": [
         "allow",
@@ -65,7 +50,8 @@
           "default": null
         },
         "hookEventName": {
-          "$ref": "#/definitions/HookEventNameWire"
+          "const": "PermissionRequest",
+          "type": "string"
         }
       },
       "required": [

package/dist/vendor/openai-codex/latest/hooks/post-compact.command.input.schema.json

@@ -10,6 +10,12 @@
     }
   },
   "properties": {
+    "agent_id": {
+      "type": "string"
+    },
+    "agent_type": {
+      "type": "string"
+    },
     "cwd": {
       "type": "string"
     },

package/dist/vendor/openai-codex/latest/hooks/post-tool-use.command.input.schema.json

@@ -10,6 +10,12 @@
     }
   },
   "properties": {
+    "agent_id": {
+      "type": "string"
+    },
+    "agent_type": {
+      "type": "string"
+    },
     "cwd": {
       "type": "string"
     },

package/dist/vendor/openai-codex/latest/hooks/post-tool-use.command.output.schema.json

@@ -8,21 +8,6 @@
       ],
       "type": "string"
     },
-    "HookEventNameWire": {
-      "enum": [
-        "PreToolUse",
-        "PermissionRequest",
-        "PostToolUse",
-        "PreCompact",
-        "PostCompact",
-        "SessionStart",
-        "UserPromptSubmit",
-        "SubagentStart",
-        "SubagentStop",
-        "Stop"
-      ],
-      "type": "string"
-    },
     "PostToolUseHookSpecificOutputWire": {
       "additionalProperties": false,
       "properties": {
@@ -31,7 +16,8 @@
           "type": "string"
         },
         "hookEventName": {
-          "$ref": "#/definitions/HookEventNameWire"
+          "const": "PostToolUse",
+          "type": "string"
         },
         "updatedMCPToolOutput": {
           "default": null

package/dist/vendor/openai-codex/latest/hooks/pre-compact.command.input.schema.json

@@ -10,6 +10,12 @@
     }
   },
   "properties": {
+    "agent_id": {
+      "type": "string"
+    },
+    "agent_type": {
+      "type": "string"
+    },
     "cwd": {
       "type": "string"
     },

package/dist/vendor/openai-codex/latest/hooks/pre-tool-use.command.input.schema.json

@@ -10,6 +10,12 @@
     }
   },
   "properties": {
+    "agent_id": {
+      "type": "string"
+    },
+    "agent_type": {
+      "type": "string"
+    },
     "cwd": {
       "type": "string"
     },

package/dist/vendor/openai-codex/latest/hooks/pre-tool-use.command.output.schema.json

@@ -2,21 +2,6 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "additionalProperties": false,
   "definitions": {
-    "HookEventNameWire": {
-      "enum": [
-        "PreToolUse",
-        "PermissionRequest",
-        "PostToolUse",
-        "PreCompact",
-        "PostCompact",
-        "SessionStart",
-        "UserPromptSubmit",
-        "SubagentStart",
-        "SubagentStop",
-        "Stop"
-      ],
-      "type": "string"
-    },
     "PreToolUseDecisionWire": {
       "enum": [
         "approve",
@@ -32,7 +17,8 @@
           "type": "string"
         },
         "hookEventName": {
-          "$ref": "#/definitions/HookEventNameWire"
+          "const": "PreToolUse",
+          "type": "string"
         },
         "permissionDecision": {
           "allOf": [

package/dist/vendor/openai-codex/latest/hooks/session-start.command.output.schema.json

@@ -2,21 +2,6 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "additionalProperties": false,
   "definitions": {
-    "HookEventNameWire": {
-      "enum": [
-        "PreToolUse",
-        "PermissionRequest",
-        "PostToolUse",
-        "PreCompact",
-        "PostCompact",
-        "SessionStart",
-        "UserPromptSubmit",
-        "SubagentStart",
-        "SubagentStop",
-        "Stop"
-      ],
-      "type": "string"
-    },
     "SessionStartHookSpecificOutputWire": {
       "additionalProperties": false,
       "properties": {
@@ -25,7 +10,8 @@
           "type": "string"
         },
         "hookEventName": {
-          "$ref": "#/definitions/HookEventNameWire"
+          "const": "SessionStart",
+          "type": "string"
         }
       },
       "required": [

package/dist/vendor/openai-codex/latest/hooks/snapshot-metadata.json

@@ -3,9 +3,10 @@
   "upstream": "openai/codex",
   "upstream_url": "https://github.com/openai/codex",
   "tag": "latest",
-  "commit": "791b69dd53703e928cbbda4ca41cfc795b7397b0",
-  "codex_version": "main-2026-05-21",
-  "captured_at": "2026-05-21T11:46:38Z",
+  "source_tag": "rust-v0.147.0",
+  "commit": "be6e8eac029b183056b7e4402879f15d2c85f61b",
+  "codex_version": "0.147.0",
+  "captured_at": "2026-08-07T05:18:28Z",
   "schema_files_count": 20,
   "events": [
     "PreToolUse",
@@ -21,7 +22,8 @@
   ],
   "source_path": "codex-rs/hooks/schema/generated",
   "notes": [
-    "Captured from upstream OpenAI Codex HEAD using vendored generated hook schema fixtures.",
-    "SubagentStart and SubagentStop are release-blocking events for SKS 1.14.1 hook compatibility."
+    "Captured from the current package-tracked upstream OpenAI Codex release using generated hook schema fixtures.",
+    "The latest directory is version-neutral; source_tag and commit preserve capture provenance.",
+    "SubagentStart and SubagentStop are release-blocking events for SKS hook compatibility."
   ]
 }

package/dist/vendor/openai-codex/latest/hooks/subagent-start.command.output.schema.json

@@ -2,22 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "additionalProperties": false,
   "definitions": {
-    "HookEventNameWire": {
-      "enum": [
-        "PreToolUse",
-        "PermissionRequest",
-        "PostToolUse",
-        "PreCompact",
-        "PostCompact",
-        "SessionStart",
-        "UserPromptSubmit",
-        "SubagentStart",
-        "SubagentStop",
-        "Stop"
-      ],
-      "type": "string"
-    },
-    "SessionStartHookSpecificOutputWire": {
+    "SubagentStartHookSpecificOutputWire": {
       "additionalProperties": false,
       "properties": {
         "additionalContext": {
@@ -25,7 +10,8 @@
           "type": "string"
         },
         "hookEventName": {
-          "$ref": "#/definitions/HookEventNameWire"
+          "const": "SubagentStart",
+          "type": "string"
         }
       },
       "required": [
@@ -42,7 +28,7 @@
     "hookSpecificOutput": {
       "allOf": [
         {
-          "$ref": "#/definitions/SessionStartHookSpecificOutputWire"
+          "$ref": "#/definitions/SubagentStartHookSpecificOutputWire"
         }
       ],
       "default": null

package/dist/vendor/openai-codex/latest/hooks/user-prompt-submit.command.input.schema.json

@@ -10,6 +10,12 @@
     }
   },
   "properties": {
+    "agent_id": {
+      "type": "string"
+    },
+    "agent_type": {
+      "type": "string"
+    },
     "cwd": {
       "type": "string"
     },

package/dist/vendor/openai-codex/latest/hooks/user-prompt-submit.command.output.schema.json

@@ -8,21 +8,6 @@
       ],
       "type": "string"
     },
-    "HookEventNameWire": {
-      "enum": [
-        "PreToolUse",
-        "PermissionRequest",
-        "PostToolUse",
-        "PreCompact",
-        "PostCompact",
-        "SessionStart",
-        "UserPromptSubmit",
-        "SubagentStart",
-        "SubagentStop",
-        "Stop"
-      ],
-      "type": "string"
-    },
     "UserPromptSubmitHookSpecificOutputWire": {
       "additionalProperties": false,
       "properties": {
@@ -31,7 +16,8 @@
           "type": "string"
         },
         "hookEventName": {
-          "$ref": "#/definitions/HookEventNameWire"
+          "const": "UserPromptSubmit",
+          "type": "string"
         }
       },
       "required": [