sneakoscope 9.2.2 → 9.2.3

package/README.md

@@ -22,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-This README documents package **SKS 9.2.2** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
+This README documents package **SKS 9.2.3** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
 
 Use the official latest stable SKS and Codex CLI releases. The Codex compatibility SSOT is always the **current latest stable** host; capability probes measure what that host can actually do. Product docs do not crown a fixed `0.x.y` string as SSOT (release pins and schema directories are measured artifacts for the current package, not a permanent product version claim). Menu Bar / Center induce updates to the latest stable build. Run `sks update-check` for what is installed and read the capability report for what is supported. Install SSOT is npm `sneakoscope@latest`; PATH `sks` and Menu Bar stamped generation must match that version or gates fail. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it (Codex official multi-agent wrap-only; SKS does not reimplement a parallel runtime). Local code search is mode-separated (`sks search files|text|structure|symbol|context`); `context` is answered by the compiled TriWiki Context Graph (`context-graph.json` is exhaustive authority; `context-pack.json` and managed `AGENTS.md` are bounded projections) — see [docs/architecture/context-graph.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/architecture/context-graph.md) and [docs/PRODUCT-CONTRACT.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PRODUCT-CONTRACT.md). See [CHANGELOG.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/CHANGELOG.md).
 

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "9.2.2"
+version = "9.2.3"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "9.2.2"
+version = "9.2.3"
 edition = "2021"
 
 [dependencies]

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "9.2.2",
+  "package_version": "9.2.3",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/codex-control/codex-current-core-native-exec.js

@@ -0,0 +1,25 @@
+export const CODEX_CURRENT_CORE_NATIVE_EXEC_ARGS = [
+    '--ignore-user-config',
+    '-c',
+    'model_provider="openai"',
+    '-c',
+    'forced_login_method="chatgpt"',
+    '-c',
+    'mcp_servers={}'
+];
+export const CODEX_CURRENT_CORE_NATIVE_LOOPBACK_ENV_KEYS = [
+    'OPENAI_BASE_URL',
+    'CHATGPT_BASE_URL',
+    'OPENAI_API_BASE',
+    'CODEX_API_BASE',
+    'CODEX_BASE_URL'
+];
+export function nativeCodexCurrentCoreProbeEnv(source = process.env) {
+    const env = { ...source };
+    for (const key of CODEX_CURRENT_CORE_NATIVE_LOOPBACK_ENV_KEYS)
+        delete env[key];
+    return env;
+}
+export function withNativeCodexCurrentCoreExecArgs(extraArgs = []) {
+    return [...CODEX_CURRENT_CORE_NATIVE_EXEC_ARGS, ...extraArgs];
+}

package/dist/core/codex-control/codex-current-image-path-real-probe.js

@@ -5,6 +5,7 @@ import { ensureDir, runProcess, writeBinaryAtomic } from '../fsx.js';
 import { buildImageArtifactPathContract } from '../image/image-artifact-path-contract.js';
 import { codexCurrentCoreProbeTail, skippedCodexCurrentCoreProbe } from './codex-current-core-real-probes.js';
 import { prepareCodexAppServerRuntimeEnv } from './codex-app-server-runtime-env.js';
+import { nativeCodexCurrentCoreProbeEnv, withNativeCodexCurrentCoreExecArgs } from './codex-current-core-native-exec.js';
 const ONE_BY_ONE_PNG = Buffer.from('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVR4nGP4//8/AAX+Av4N70a4AAAAAElFTkSuQmCC', 'base64');
 export async function runCodexCurrentCoreImageReferencedPathRealProbe(input) {
     const started = Date.now();
@@ -54,9 +55,9 @@ export async function runCodexCurrentCoreImageReferencedPathRealProbe(input) {
         `Return compact JSON {"referenced_path":"${inputB.replace(/\\/g, '\\\\')}","saw_image":true}.`,
         'Do not edit files and do not reference any other image path.'
     ].join(' ');
-    const extraArgs = ['-c', 'mcp_servers={}', '--image', inputB, '--skip-git-repo-check', '--ephemeral'];
+    const extraArgs = withNativeCodexCurrentCoreExecArgs(['--image', inputB, '--skip-git-repo-check', '--ephemeral']);
     const args = buildCodexExecArgs({ root: tempDir, prompt, outputFile, json: true, extraArgs });
-    const runtimeEnv = await prepareCodexAppServerRuntimeEnv({ env: input.env || process.env });
+    const runtimeEnv = await prepareCodexAppServerRuntimeEnv({ env: nativeCodexCurrentCoreProbeEnv(input.env || process.env) });
     const result = await runCodexExec({
         root: tempDir,
         recoveryRoot: input.root,
@@ -97,6 +98,8 @@ export async function runCodexCurrentCoreImageReferencedPathRealProbe(input) {
             process_exited_successfully: processExitedSuccessfully,
             process_warning: processExitedSuccessfully ? null : 'Codex emitted the referenced path evidence before process timeout/nonzero exit.',
             output_file: outputFile,
+            native_codex_only: true,
+            ignored_user_config: true,
             desktop_bridge_launch_guard: result.desktop_bridge_launch_guard || null,
             contract_blockers: contract.blockers
         },

package/dist/core/codex-control/codex-current-web-search-probe.js

@@ -4,6 +4,7 @@ import { buildCodexExecArgs, findCodexBinary, runCodexExec } from '../codex-adap
 import { ensureDir, runProcess, writeJsonAtomic, writeTextAtomic } from '../fsx.js';
 import { codexCurrentCoreProbeTail, skippedCodexCurrentCoreProbe } from './codex-current-core-real-probes.js';
 import { prepareCodexAppServerRuntimeEnv } from './codex-app-server-runtime-env.js';
+import { nativeCodexCurrentCoreProbeEnv, withNativeCodexCurrentCoreExecArgs } from './codex-current-core-native-exec.js';
 export async function runCodexCurrentCoreWebSearchRealProbe(input) {
     const started = Date.now();
     if (!input.allowNetwork) {
@@ -18,15 +19,16 @@ export async function runCodexCurrentCoreWebSearchRealProbe(input) {
     await writeTextAtomic(path.join(tempDir, 'README.md'), 'Temporary current Codex web-search real probe workspace.\n');
     const outputFile = path.join(tempDir, 'last-message.txt');
     const prompt = 'In code mode, use standalone web search to find the title of https://example.com. Return JSON {"used_web_search":true,"answer":"...","sources":[...]}.';
-    const args = buildCodexExecArgs({ root: tempDir, prompt, outputFile, json: true, extraArgs: ['-c', 'mcp_servers={}'] });
-    const runtimeEnv = await prepareCodexAppServerRuntimeEnv({ env: input.env || process.env });
+    const extraArgs = withNativeCodexCurrentCoreExecArgs();
+    const args = buildCodexExecArgs({ root: tempDir, prompt, outputFile, json: true, extraArgs });
+    const runtimeEnv = await prepareCodexAppServerRuntimeEnv({ env: nativeCodexCurrentCoreProbeEnv(input.env || process.env) });
     const result = await runCodexExec({
         root: tempDir,
         recoveryRoot: input.root,
         prompt,
         outputFile,
         json: true,
-        extraArgs: ['-c', 'mcp_servers={}'],
+        extraArgs,
         timeoutMs: input.timeoutMs || 120000,
         maxBufferBytes: 512 * 1024,
         stdoutFile: path.join(tempDir, 'codex.stdout.log'),
@@ -75,6 +77,8 @@ export async function runCodexCurrentCoreWebSearchRealProbe(input) {
             process_exited_successfully: processExitedSuccessfully,
             process_warning: processExitedSuccessfully ? null : 'Codex emitted web-search evidence before process timeout/nonzero exit.',
             output_file: outputFile,
+            native_codex_only: true,
+            ignored_user_config: true,
             desktop_bridge_launch_guard: result.desktop_bridge_launch_guard || null
         },
         blockers: ok ? [] : [

package/dist/core/codex-lb/bridge-runtime-validation/shared.js

@@ -1,4 +1,6 @@
-export const PROVIDERS = ['codex-lb', 'openrouter'];
+import { BRIDGE_OFFICIAL_ROUTE_ID, BRIDGE_PROVIDER_IDS } from '../bridge-contracts.js';
+export const PROVIDERS = BRIDGE_PROVIDER_IDS;
+export const ROUTE_TARGET_IDS = [...BRIDGE_PROVIDER_IDS, BRIDGE_OFFICIAL_ROUTE_ID];
 export const LEVELS = new Set(['shallow', 'transport', 'deep']);
 export const PROBE_STATES = new Set([
     'not_attempted', 'running', 'verified', 'degraded', 'blocked', 'failed',

package/dist/core/codex-lb/bridge-runtime-validation/status.js

@@ -1,6 +1,6 @@
 import { validateScope } from './capability.js';
 import { validateCatalogState } from './catalog.js';
-import { PROBE_STATES, PROVIDERS, booleanValue, enumValue, escapePath, exact, iso, literal, nonEmptyString, nullableInteger, nullableIso, nullableNumber, nullableString, object, stringArray } from './shared.js';
+import { PROBE_STATES, PROVIDERS, ROUTE_TARGET_IDS, booleanValue, enumValue, escapePath, exact, iso, literal, nonEmptyString, nullableInteger, nullableIso, nullableNumber, nullableString, object, stringArray } from './shared.js';
 export function validateManagement(value, path, issues) {
     const row = object(value, path, issues);
     if (!row)
@@ -225,7 +225,7 @@ function validateRouteTarget(value, path, issues) {
     if (!row)
         return;
     exact(row, path, ['provider_id', 'upstream_model'], issues);
-    enumValue(row.provider_id, new Set(PROVIDERS), `${path}.provider_id`, issues);
+    enumValue(row.provider_id, new Set(ROUTE_TARGET_IDS), `${path}.provider_id`, issues);
     nonEmptyString(row.upstream_model, `${path}.upstream_model`, issues);
 }
 export function validateReadiness(value, path, issues) {

package/dist/core/version-manager.js

@@ -363,6 +363,7 @@ async function syncSourcePackageVersion(root, version) {
                 .replace(/^For \d+\.\d+\.\d+, a selected codex-lb/m, `For ${version}, a selected codex-lb`)
                 .replace(/^The \d+\.\d+\.\d+ SKS menu bar/m, `The ${version} SKS menu bar`)
                 .replace(/the \d+\.\d+\.\d+ to \d+\.\d+\.\d+ upgrade smoke/g, `the ${RELEASE_UPGRADE_BASELINE_VERSION} to ${version} upgrade smoke`)
+                .replace(/to \d+\.\d+\.\d+ upgrade smoke/g, `to ${version} upgrade smoke`)
                 .replace(/under the \d+\.\d+\.\d+ release evidence root/g, `under the ${version} release evidence root`)
                 .replace(/^Do not cut \d+\.\d+\.\d+ while/m, `Do not cut ${version} while`)
                 .replace(/must agree on \d+\.\d+\.\d+\./g, `must agree on ${version}.`)
@@ -376,6 +377,13 @@ async function syncSourcePackageVersion(root, version) {
         {
             rel: 'docs/release-proof-truth.md',
             replace: (text) => text
+                .replace(/^# Release Proof Truth — \d+\.\d+\.\d+\s*$/m, `# Release Proof Truth — ${version}`)
+                .replace(/^(## Current assertion\n\n)\d+\.\d+\.\d+ is \*\*SOURCE TAG CONDITIONAL/m, `$1${version} is **SOURCE TAG CONDITIONAL`)
+                .replace(/^New \d+\.\d+\.\d+ claims:/m, `New ${version} claims:`)
+                .replace(/treated as \d+\.\d+\.\d+ evidence\./, `treated as ${version} evidence.`)
+                .replace(/All checked version authorities report \d+\.\d+\.\d+/, `All checked version authorities report ${version}`)
+                .replace(/The reported \d+\.\d+\.\d+ package is ready to publish/, `The reported ${version} package is ready to publish`)
+                .replace(/`release:version-truth` 15 surfaces at \d+\.\d+\.\d+/, `\`release:version-truth\` 15 surfaces at ${version}`)
                 .replace(/^SKS \d+\.\d+\.\d+ release proof truth/m, `SKS ${version} release proof truth`)
                 .replace(/^SKS \d+\.\d+\.\d+ must not claim/m, `SKS ${version} must not claim`)
                 .replace(/; \d+\.\d+\.\d+ proof must additionally show/g, `; ${version} proof must additionally show`)

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '9.2.2';
+export const PACKAGE_VERSION = '9.2.3';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "9.2.2",
+  "version": "9.2.3",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",

package/schemas/codex/desktop-bridge-status-v3.schema.json

@@ -204,7 +204,10 @@
       "additionalProperties": false,
       "required": ["provider_id", "upstream_model"],
       "properties": {
-        "provider_id": { "enum": ["codex-lb", "openrouter"] },
+        "provider_id": {
+          "enum": ["codex-lb", "openrouter", "openai"],
+          "description": "Registry providers plus the official ChatGPT identity route. openai is the canonical official id (OpenCodex OPENAI_CODEX_PROVIDER_ID), not a provider profile."
+        },
         "upstream_model": { "$ref": "#/$defs/nonEmptyString" }
       }
     },