trace-to-skill 0.1.36 → 0.1.38

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/README.md +9 -3
  2. package/dist/src/benchmark.js +12 -0
  3. package/dist/src/benchmark.js.map +1 -1
  4. package/dist/src/rules.js +39 -0
  5. package/dist/src/rules.js.map +1 -1
  6. package/dist/src/types.d.ts +1 -1
  7. package/docs/BENCHMARK.md +2 -0
  8. package/docs/DISCOVERY.md +3 -1
  9. package/docs/FAILURE_TAXONOMY.md +12 -0
  10. package/docs/SCORECARD.md +3 -1
  11. package/docs/USE_CASES.md +24 -4
  12. package/fixtures/quota-mismatch.md +35 -0
  13. package/fixtures/sandbox-permission.md +31 -0
  14. package/llms.txt +7 -1
  15. package/package.json +7 -1
  16. package/schemas/analysis-result.schema.json +3 -0
package/README.md CHANGED
@@ -44,6 +44,8 @@ Use it when you need to:
44
44
  - **Protect agent context:** run `trace-to-skill guard-github-event "$GITHUB_EVENT_PATH"` before feeding issue, PR, comment, discussion, check-run, or commit text into an agent.
45
45
  - **Share failed traces safely:** run `trace-to-skill redact ./runs --output redacted-runs` before publishing anonymized failure fixtures.
46
46
  - **Triage stuck Codex sessions:** run `trace-to-skill analyze ./runs` to catch context compaction failures such as compact stream disconnects, `context_length_exceeded`, and schema mismatches.
47
+ - **Diagnose sandbox blockers:** run `trace-to-skill analyze ./runs` on Codex traces that fail with sandbox setup refresh, `os error 740`, ACL, ownership, or approval-mode permission errors.
48
+ - **Package quota bugs cleanly:** run `trace-to-skill analyze ./runs` on Codex traces where `/status` or the usage page shows remaining quota but the client returns `You've hit your usage limit`.
47
49
 
48
50
  For copy-paste workflows, see [docs/USE_CASES.md](https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/USE_CASES.md). For crawler-friendly metadata, see [docs/DISCOVERY.md](https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/docs/DISCOVERY.md) and [llms.txt](https://github.com/grnbtqdbyx-create/trace-to-skill/blob/main/llms.txt).
49
51
 
@@ -61,6 +63,8 @@ Open-source maintainers do not need more AI-generated noise. They need agents th
61
63
  - Did the proposed rule actually improve the next run?
62
64
  - Can this be reported in a PR without leaking secrets?
63
65
  - Did a long Codex session fail during context compaction?
66
+ - Did Codex sandbox setup or workspace permissions block every tool call?
67
+ - Did quota accounting, account switching, or reset timing contradict the runtime usage-limit error?
64
68
 
65
69
  ## Example Output
66
70
 
@@ -124,6 +128,8 @@ Trace analysis detects run-level failures:
124
128
  | Hidden Unicode | Invisible instruction or code-review manipulation |
125
129
  | Prompt injection | Untrusted issue, PR, log, or web text asks the agent to ignore policy or leak secrets |
126
130
  | Context compaction | Codex compact task fails, disconnects, loops, or hits `context_length_exceeded` |
131
+ | Sandbox permission | Codex sandbox setup, approval mode, ACL, or workspace ownership blocks tool execution |
132
+ | Quota mismatch | Codex usage dashboard, `/status`, account state, or reset timing contradicts a usage-limit block |
127
133
  | MCP risk | Tool permissions and trust boundaries are unclear |
128
134
 
129
135
  ## Installation
@@ -312,7 +318,7 @@ jobs:
312
318
  issues: write
313
319
  steps:
314
320
  - uses: actions/checkout@v5
315
- - uses: grnbtqdbyx-create/trace-to-skill@v0.1.36
321
+ - uses: grnbtqdbyx-create/trace-to-skill@v0.1.38
316
322
  with:
317
323
  mode: all
318
324
  doctor-threshold: "85"
@@ -361,7 +367,7 @@ Composite action usage:
361
367
 
362
368
  ```yaml
363
369
  - id: trace-to-skill
364
- uses: grnbtqdbyx-create/trace-to-skill@v0.1.36
370
+ uses: grnbtqdbyx-create/trace-to-skill@v0.1.38
365
371
  with:
366
372
  mode: all
367
373
  doctor-threshold: "85"
@@ -403,7 +409,7 @@ Action outputs:
403
409
 
404
410
  By default, generated reports are also appended to the GitHub Actions Job Summary. Set `job-summary: "false"` to disable that UI output.
405
411
 
406
- Tagged Action releases build and run the CLI from `$GITHUB_ACTION_PATH`, so a workflow pinned to a release tag such as `@v0.1.36` executes that release's checked-out source instead of pulling the default branch at runtime.
412
+ Tagged Action releases build and run the CLI from `$GITHUB_ACTION_PATH`, so a workflow pinned to a release tag such as `@v0.1.38` executes that release's checked-out source instead of pulling the default branch at runtime.
407
413
 
408
414
  ## Codex Skill
409
415
 
package/dist/src/benchmark.js CHANGED
@@ -29,6 +29,18 @@ const BENCHMARK_CASES = [
29
29
  fixture: "fixtures/context-compaction.md",
30
30
  expectedKinds: ["context_compaction", "weak_evidence"]
31
31
  },
32
+ {
33
+ id: "sandbox-permission",
34
+ title: "Codex sandbox permission failure",
35
+ fixture: "fixtures/sandbox-permission.md",
36
+ expectedKinds: ["sandbox_permission", "weak_evidence"]
37
+ },
38
+ {
39
+ id: "quota-mismatch",
40
+ title: "Codex quota mismatch",
41
+ fixture: "fixtures/quota-mismatch.md",
42
+ expectedKinds: ["quota_mismatch", "weak_evidence"]
43
+ },
32
44
  {
33
45
  id: "mcp-risk",
34
46
  title: "MCP config with secret exposure",
package/dist/src/benchmark.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"benchmark.js","sourceRoot":"","sources":["../../src/benchmark.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA8B9C,MAAM,eAAe,GAA8B;IACjD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,sBAAsB;QAC/B,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,UAAU,EAAE,mBAAmB,CAAC;QACzG,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,4BAA4B;QACnC,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,CAAC;QACxE,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,gCAAgC;QACzC,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;QAC9C,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;QACnC,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EAAE,4BAA4B;QACrC,aAAa,EAAE,CAAC,qBAAqB,CAAC;KACvC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAE3B,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAErG,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,gBAAgB;YAChB,aAAa;YACb,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,MAAM,KAAK,GAAG;QACZ,4BAA4B;QAC5B,EAAE;QACF,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI;QAChD,EAAE;QACF,8OAA8O;QAC9O,EAAE;QACF,4EAA4E;QAC5E,gDAAgD;KACjD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,IAAI,CAAC,KAAK,EAAE;YACjB,KAAK,IAAI,CAAC,OAAO,IAAI;YACrB,GAAG,IAAI,CAAC,KAAK,EAAE;YACf,GAAG,IAAI,CAAC,QAAQ,EAAE;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACnG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;SAClC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iBAAiB,EACjB,EAAE,EACF,SAAS,EACT,0BAA0B,EAC1B,wCAAwC,EACxC,KAAK,EACL,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CACjB,UAAmC,EACnC,aAA4B,EAC5B,QAAgB,EAChB,gBAAwB;IAExB,IAAI,UAAU,CAAC,YAAY,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC"}
1
+ {"version":3,"file":"benchmark.js","sourceRoot":"","sources":["../../src/benchmark.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA8B9C,MAAM,eAAe,GAA8B;IACjD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,sBAAsB;QAC/B,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,UAAU,EAAE,mBAAmB,CAAC;QACzG,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,4BAA4B;QACnC,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,eAAe,CAAC;QACxE,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,gCAAgC;QACzC,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,gCAAgC;QACzC,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,4BAA4B;QACrC,aAAa,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;KACnD;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,wBAAwB;QACjC,aAAa,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;QAC9C,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,8BAA8B;QACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;QACnC,eAAe,EAAE,IAAI;KACtB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,qCAAqC;QAC5C,OAAO,EAAE,4BAA4B;QACrC,aAAa,EAAE,CAAC,qBAAqB,CAAC;KACvC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAE3B,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAErG,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,gBAAgB;YAChB,aAAa;YACb,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,MAAM,KAAK,GAAG;QACZ,4BAA4B;QAC5B,EAAE;QACF,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI;QAChD,EAAE;QACF,8OAA8O;QAC9O,EAAE;QACF,4EAA4E;QAC5E,gDAAgD;KACjD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,IAAI,CAAC,KAAK,EAAE;YACjB,KAAK,IAAI,CAAC,OAAO,IAAI;YACrB,GAAG,IAAI,CAAC,KAAK,EAAE;YACf,GAAG,IAAI,CAAC,QAAQ,EAAE;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACnG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;SAClC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iBAAiB,EACjB,EAAE,EACF,SAAS,EACT,0BAA0B,EAC1B,wCAAwC,EACxC,KAAK,EACL,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CACjB,UAAmC,EACnC,aAA4B,EAC5B,QAAgB,EAChB,gBAAwB;IAExB,IAAI,UAAU,CAAC,YAAY,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,UAAU,CAAC,eAAe,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC"}
package/dist/src/rules.js CHANGED
@@ -117,6 +117,45 @@ const RULES = [
117
117
  ],
118
118
  suggestedRule: "When Codex compaction fails, capture the compact error, model/app version, thread state, and whether the session is recoverable before continuing or reporting success."
119
119
  },
120
+ {
121
+ kind: "sandbox_permission",
122
+ severity: "high",
123
+ title: "Codex sandbox or permission failure",
124
+ why: "Sandbox setup, approval-mode, and workspace permission failures can block every tool call or leave the worktree in a broken ownership state.",
125
+ patterns: [
126
+ /\bwindows sandbox\b.{0,140}\b(setup refresh|spawn setup refresh|failed|error)\b/i,
127
+ /\bsandbox setup refresh failed\b/i,
128
+ /\bsetup refresh failed with status exit code:\s*1\b/i,
129
+ /\bos error 740\b/i,
130
+ /\bCreateProcess(?:AsUserW|WithLogonW)? failed\b/i,
131
+ /\bCreateRestrictedToken failed\b/i,
132
+ /\bCodexSandbox(?:Offline|Online)\b/i,
133
+ /\b(SetNamedSecurityInfoW failed|ACL|access denied)\b/i,
134
+ /\bworkspace-write\b.{0,140}\b(permission|ownership|ACL|write failures|read-only|on-request|downgraded)\b/i,
135
+ /\bapproval_policy\b.{0,80}\b(never|on-request)\b.{0,140}\b(still asks|requires approvals|approval|denied)\b/i,
136
+ /\bFull Access\b.{0,140}\b(downgraded|on-request|workspace-write|read-only)\b/i,
137
+ /\bsandbox_mode\b.{0,80}\b(danger-full-access|workspace-write)\b.{0,140}\b(approval|denied|read-only|permission)\b/i
138
+ ],
139
+ suggestedRule: "When Codex sandbox or permission setup fails, capture the OS, Codex version, sandbox_mode, approval_policy, exact stderr, workspace ownership/ACL evidence, and whether a clean directory can run a simple command plus apply_patch."
140
+ },
141
+ {
142
+ kind: "quota_mismatch",
143
+ severity: "high",
144
+ title: "Codex quota or usage-limit mismatch",
145
+ why: "Quota mismatch reports block paid users and are hard to triage unless the trace preserves account, plan, client, model, status output, dashboard state, and the exact limit response.",
146
+ patterns: [
147
+ /\bYou've hit your usage limit\b/i,
148
+ /\busage limit\b.{0,160}\b(remaining|left|despite|but|shows|dashboard|\/status)\b/i,
149
+ /\b(rate[- ]?limit|usage|quota)\b.{0,160}\b(incorrectly shared|shared across|wrong account|different accounts?|account switch|cached across accounts?)\b/i,
150
+ /\b(5h|five-hour|weekly|daily)\b.{0,80}\b(quota|limit)\b.{0,160}\b(same rate|decrease|consumed|deducted|parallel|simultaneously)\b/i,
151
+ /\b(5h|five-hour|weekly|daily)?\s*(quota|limit)?\b.{0,80}\b\d{1,3}%\s+left\b.{0,120}\b(resets|remaining|usage|quota|limit)\b/i,
152
+ /\bquota\b.{0,80}\b(disappeared|diss?appeared|missing|halved|mismatch|incorrect|glitch|moved by a few days)\b/i,
153
+ /\b\/status\b.{0,160}\b(0%|remaining|left|weekly|5h limit)\b/i,
154
+ /\bchatgpt\.com\/codex\/settings\/usage\b/i,
155
+ /\b429\b.{0,120}\b(Too Many Requests|rate limit|usage limit)\b/i
156
+ ],
157
+ suggestedRule: "When reporting Codex quota mismatches, include the subscription plan, account/workspace, client and version, model, /status output before and after the failed prompt, usage dashboard state, reset times, feedback/thread ID, and whether logout/login or another machine changes the result."
158
+ },
120
159
  {
121
160
  kind: "mcp_risk",
122
161
  severity: "high",
package/dist/src/rules.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAYA,MAAM,KAAK,GAAqB;IAC9B;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,6CAA6C;YAC7C,iFAAiF;SAClF;QACD,aAAa,EACX,sIAAsI;QACxI,cAAc,EAAE,gCAAgC;KACjD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,sIAAsI;QAC3I,QAAQ,EAAE;YACR,mGAAmG;SACpG;QACD,aAAa,EACX,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE;YACR,0FAA0F;YAC1F,yDAAyD;SAC1D;QACD,aAAa,EACX,8IAA8I;KACjJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,8HAA8H;QACnI,QAAQ,EAAE;YACR,yGAAyG;SAC1G;QACD,aAAa,EACX,2IAA2I;KAC9I;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,6CAA6C;QACpD,GAAG,EAAE,sHAAsH;QAC3H,QAAQ,EAAE;YACR,qGAAqG;YACrG,uCAAuC;SACxC;QACD,aAAa,EACX,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,gCAAgC;YAChC,uCAAuC;YACvC,yCAAyC;YACzC,kBAAkB;SACnB;QACD,aAAa,EACX,gIAAgI;KACnI;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oGAAoG;QACzG,QAAQ,EAAE;YACR,wEAAwE;YACxE,6EAA6E;SAC9E;QACD,aAAa,EACX,mHAAmH;KACtH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gHAAgH;QACrH,QAAQ,EAAE;YACR,sDAAsD;SACvD;QACD,aAAa,EACX,uIAAuI;KAC1I;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,GAAG,EAAE,sKAAsK;QAC3K,QAAQ,EAAE;YACR,oJAAoJ;YACpJ,iHAAiH;YACjH,iHAAiH;YACjH,kGAAkG;SACnG;QACD,aAAa,EACX,iLAAiL;QACnL,cAAc,EAAE,wBAAwB;KACzC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gLAAgL;QACrL,QAAQ,EAAE;YACR,wCAAwC;YACxC,oCAAoC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,wFAAwF;YACxF,oGAAoG;YACpG,yBAAyB;SAC1B;QACD,aAAa,EACX,yKAAyK;KAC5K;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,0GAA0G;QAC/G,QAAQ,EAAE;YACR,+GAA+G;YAC/G,gBAAgB;SACjB;QACD,aAAa,EACX,uIAAuI;KAC1I;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,eAAe,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE,2HAA2H;YAChI,QAAQ,EAAE,YAAY;YACtB,aAAa,EACX,0IAA0I;SAC7I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2CAA2C;YAClD,GAAG,EAAE,0JAA0J;YAC/J,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EACX,+IAA+I;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAC1G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,4CAA4C;YACnD,GAAG,EAAE,uIAAuI;YAC5I,QAAQ,EAAE,mBAAmB;YAC7B,aAAa,EACX,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC3B,CAAC,6BAA6B,CAAC,MAAM,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,EAC7D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,0BAA0B;YACjC,GAAG,EAAE,6GAA6G;YAClH,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;YAC5B,aAAa,EACX,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAoB;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACxI,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhG,IAAI,mBAAmB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,EAAE;SAC3D,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAE1I,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,OAAO,EAAE;SAChD,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,EAAE;SAC7C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,sGAAsG,CAAC,CAAC;IAE7K,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,SAAS,yBAAyB,CAAC,MAAoB,EAAE,OAAe;IACtE,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK;oBACL,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjD,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpG,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,WAAW,IAAI,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,OAAO,GAAG;iBACrJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,CAAC,YAAY,EAAE,oEAAoE,CAAC;QACpF,CAAC,OAAO,EAAE,+CAA+C,CAAC;QAC1D,CAAC,SAAS,EAAE,8CAA8C,CAAC;QAC3D,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC/D,CAAC,UAAU,EAAE,4CAA4C,CAAC;QAC1D,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,IAAoB;IAC3D,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,eAAuB;IACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAoB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,wKAAwK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7L,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB,EAAE,QAAoB;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC,QAAQ,CAAC,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;SACtE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;SAC5D,OAAO,CAAC,gFAAgF,EAAE,gBAAgB,CAAC,CAAC;AACjH,CAAC"}
1
+ {"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAYA,MAAM,KAAK,GAAqB;IAC9B;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,6CAA6C;YAC7C,iFAAiF;SAClF;QACD,aAAa,EACX,sIAAsI;QACxI,cAAc,EAAE,gCAAgC;KACjD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,sIAAsI;QAC3I,QAAQ,EAAE;YACR,mGAAmG;SACpG;QACD,aAAa,EACX,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,2FAA2F;QAChG,QAAQ,EAAE;YACR,0FAA0F;YAC1F,yDAAyD;SAC1D;QACD,aAAa,EACX,8IAA8I;KACjJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,8HAA8H;QACnI,QAAQ,EAAE;YACR,yGAAyG;SAC1G;QACD,aAAa,EACX,2IAA2I;KAC9I;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,6CAA6C;QACpD,GAAG,EAAE,sHAAsH;QAC3H,QAAQ,EAAE;YACR,qGAAqG;YACrG,uCAAuC;SACxC;QACD,aAAa,EACX,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,GAAG,EAAE,wGAAwG;QAC7G,QAAQ,EAAE;YACR,gCAAgC;YAChC,uCAAuC;YACvC,yCAAyC;YACzC,kBAAkB;SACnB;QACD,aAAa,EACX,gIAAgI;KACnI;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,oGAAoG;QACzG,QAAQ,EAAE;YACR,wEAAwE;YACxE,6EAA6E;SAC9E;QACD,aAAa,EACX,mHAAmH;KACtH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gHAAgH;QACrH,QAAQ,EAAE;YACR,sDAAsD;SACvD;QACD,aAAa,EACX,uIAAuI;KAC1I;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,GAAG,EAAE,sKAAsK;QAC3K,QAAQ,EAAE;YACR,oJAAoJ;YACpJ,iHAAiH;YACjH,iHAAiH;YACjH,kGAAkG;SACnG;QACD,aAAa,EACX,iLAAiL;QACnL,cAAc,EAAE,wBAAwB;KACzC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,gLAAgL;QACrL,QAAQ,EAAE;YACR,wCAAwC;YACxC,oCAAoC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,wFAAwF;YACxF,oGAAoG;YACpG,yBAAyB;SAC1B;QACD,aAAa,EACX,yKAAyK;KAC5K;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,8IAA8I;QACnJ,QAAQ,EAAE;YACR,kFAAkF;YAClF,mCAAmC;YACnC,sDAAsD;YACtD,mBAAmB;YACnB,kDAAkD;YAClD,mCAAmC;YACnC,qCAAqC;YACrC,uDAAuD;YACvD,2GAA2G;YAC3G,8GAA8G;YAC9G,+EAA+E;YAC/E,oHAAoH;SACrH;QACD,aAAa,EACX,sOAAsO;KACzO;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,uLAAuL;QAC5L,QAAQ,EAAE;YACR,kCAAkC;YAClC,mFAAmF;YACnF,0JAA0J;YAC1J,oIAAoI;YACpI,8HAA8H;YAC9H,+GAA+G;YAC/G,8DAA8D;YAC9D,2CAA2C;YAC3C,gEAAgE;SACjE;QACD,aAAa,EACX,gSAAgS;KACnS;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,0GAA0G;QAC/G,QAAQ,EAAE;YACR,+GAA+G;YAC/G,gBAAgB;SACjB;QACD,aAAa,EACX,uIAAuI;KAC1I;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,eAAe,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE,2HAA2H;YAChI,QAAQ,EAAE,YAAY;YACtB,aAAa,EACX,0IAA0I;SAC7I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2CAA2C;YAClD,GAAG,EAAE,0JAA0J;YAC/J,QAAQ,EAAE,iBAAiB;YAC3B,aAAa,EACX,+IAA+I;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;QAC1G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,4CAA4C;YACnD,GAAG,EAAE,uIAAuI;YAC5I,QAAQ,EAAE,mBAAmB;YAC7B,aAAa,EACX,mLAAmL;SACtL,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC3B,CAAC,6BAA6B,CAAC,MAAM,CAAC;QACtC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,EAC7D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,0BAA0B;YACjC,GAAG,EAAE,6GAA6G;YAClH,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;YAC5B,aAAa,EACX,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAoB;IAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,kEAAkE,CAAC,CAAC;IACxI,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhG,IAAI,mBAAmB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,EAAE;SAC3D,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IAE1I,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,wBAAwB,IAAI,CAAC,OAAO,EAAE;SAChD,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,qBAAqB,IAAI,CAAC,OAAO,EAAE;SAC7C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,0GAA0G,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,gBAAgB,EAAE,sGAAsG,CAAC,CAAC;IAE7K,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;QACL,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,sBAAsB,IAAI,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AASD,SAAS,yBAAyB,CAAC,MAAoB,EAAE,OAAe;IACtE,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK;oBACL,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjD,MAAM,wBAAwB,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpG,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;oBACnC,OAAO,EAAE,WAAW,IAAI,mBAAmB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,OAAO,GAAG;iBACrJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,CAAC,YAAY,EAAE,oEAAoE,CAAC;QACpF,CAAC,OAAO,EAAE,+CAA+C,CAAC;QAC1D,CAAC,SAAS,EAAE,8CAA8C,CAAC;QAC3D,CAAC,SAAS,EAAE,kDAAkD,CAAC;QAC/D,CAAC,UAAU,EAAE,4CAA4C,CAAC;QAC1D,CAAC,WAAW,EAAE,2BAA2B,CAAC;KAC3C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,MAAoB,EAAE,IAAoB;IAC3D,MAAM,QAAQ,GAAe,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB,EAAE,eAAuB;IACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAoB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,wKAAwK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7L,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7H,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,IAAoB,EAAE,QAAoB;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO;QACL,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;KACZ,CAAC,QAAQ,CAAC,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK;SACT,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,kCAAkC,EAAE,yBAAyB,CAAC;SACtE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;SAC5D,OAAO,CAAC,gFAAgF,EAAE,gBAAgB,CAAC,CAAC;AACjH,CAAC"}
package/dist/src/types.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  export type Severity = "low" | "medium" | "high" | "critical";
2
- export type FindingKind = "premature_completion" | "tests_not_run" | "test_failure" | "ignored_instruction" | "hallucinated_file" | "over_editing" | "unsafe_command" | "secret_exposure" | "hidden_unicode" | "prompt_injection" | "context_compaction" | "mcp_risk" | "weak_evidence";
2
+ export type FindingKind = "premature_completion" | "tests_not_run" | "test_failure" | "ignored_instruction" | "hallucinated_file" | "over_editing" | "unsafe_command" | "secret_exposure" | "hidden_unicode" | "prompt_injection" | "context_compaction" | "sandbox_permission" | "quota_mismatch" | "mcp_risk" | "weak_evidence";
3
3
  export interface TraceInput {
4
4
  path: string;
5
5
  content: string;
package/docs/BENCHMARK.md CHANGED
@@ -10,6 +10,8 @@ This benchmark runs the public fixture pack that ships with the repository and p
10
10
  | Failed workflow with missing validation | `fixtures/failed-run.md` | 18 | 5 | 1 | `hallucinated_file`, `mcp_risk`, `premature_completion`, `test_failure`, `tests_not_run` | pass |
11
11
  | Codex JSONL failed session | `fixtures/codex-session.jsonl` | 50 | 3 | 1 | `premature_completion`, `test_failure`, `weak_evidence` | pass |
12
12
  | Codex context compaction failure | `fixtures/context-compaction.md` | 75 | 2 | 0 | `context_compaction`, `weak_evidence` | pass |
13
+ | Codex sandbox permission failure | `fixtures/sandbox-permission.md` | 75 | 2 | 0 | `sandbox_permission`, `weak_evidence` | pass |
14
+ | Codex quota mismatch | `fixtures/quota-mismatch.md` | 75 | 2 | 0 | `quota_mismatch`, `weak_evidence` | pass |
13
15
  | MCP config with secret exposure | `fixtures/mcp-risk.json` | 59 | 2 | 1 | `mcp_risk`, `secret_exposure` | pass |
14
16
  | Untrusted PR comment prompt injection | `fixtures/prompt-injection.md` | 50 | 3 | 1 | `premature_completion`, `prompt_injection`, `weak_evidence` | pass |
15
17
  | Conflicting agent instruction files | `fixtures/instruction-drift` | 84 | 1 | 0 | `ignored_instruction` | pass |
package/docs/DISCOVERY.md CHANGED
@@ -20,6 +20,8 @@ This page is written for maintainers, search engines, package indexes, and AI re
20
20
  - Codex or Claude Code claims a task is done without validation evidence.
21
21
  - A coding agent repeats the same test/build/lint failure.
22
22
  - A long Codex thread fails during context compaction with stream disconnects, `context_length_exceeded`, endless auto-compaction, or `unknown variant auto` errors.
23
+ - Codex cannot start tools because sandbox setup refresh, Windows `os error 740`, ACL, ownership, or approval-mode permission failures block execution.
24
+ - Codex reports `You've hit your usage limit` even though `/status` or the usage dashboard shows quota left, or quota appears shared across accounts.
23
25
  - A repository has conflicting `AGENTS.md`, `CLAUDE.md`, Cursor, Copilot, or Gemini instructions.
24
26
  - A monorepo has nested `AGENTS.md` files, `@file.md` instruction includes, or invalid instruction-file encoding that makes Codex load the wrong policy.
25
27
  - A workflow wants to feed GitHub issue, PR, comment, discussion, check-run, or commit text into an agent but needs prompt-injection checks first.
@@ -67,7 +69,7 @@ npx trace-to-skill suggest ./runs --target agents-md
67
69
 
68
70
  ## Related Keywords
69
71
 
70
- Codex, OpenAI Codex, Codex CLI, AGENTS.md, SKILL.md, Claude Code, Cursor, Copilot coding agent, Gemini CLI, MCP, Model Context Protocol, prompt injection, agent evals, AI code review, open-source maintainers, trace redaction, SARIF, GitHub Actions.
72
+ Codex, OpenAI Codex, Codex CLI, Codex sandbox, Windows sandbox, Codex quota, usage limit, rate limits, AGENTS.md, SKILL.md, Claude Code, Cursor, Copilot coding agent, Gemini CLI, MCP, Model Context Protocol, prompt injection, agent evals, AI code review, open-source maintainers, trace redaction, SARIF, GitHub Actions.
71
73
 
72
74
  ## Non-Goals
73
75
 
package/docs/FAILURE_TAXONOMY.md CHANGED
@@ -18,6 +18,18 @@ A test, build, typecheck, lint, or smoke command failed. The agent should contin
18
18
 
19
19
  Codex context compaction failed, disconnected, looped, or hit `context_length_exceeded`. The fix is to capture the compact error, model/app version, thread state, and recovery state before continuing or reporting the session as healthy.
20
20
 
21
+ ## Sandbox Permission
22
+
23
+ Codex sandbox setup, approval mode, ACL, or workspace ownership failed before tools could run reliably. Common signals include Windows sandbox setup refresh errors, `os error 740`, `CodexSandboxOffline` ownership drift, access denied, and Full Access sessions downgraded to workspace-write or on-request behavior.
24
+
25
+ The fix is to capture the OS, Codex version, `sandbox_mode`, `approval_policy`, exact stderr, workspace ownership/ACL evidence, and whether a clean directory can run a simple command plus `apply_patch`.
26
+
27
+ ## Quota Mismatch
28
+
29
+ Codex reports a usage-limit block even though another surface shows remaining quota, or quota state appears to be shared across accounts, consumed in parallel across 5h and weekly windows, or reset at an impossible time.
30
+
31
+ The fix is to capture the subscription plan, account or workspace, client and version, model, `/status` output before and after the failed prompt, usage dashboard state, reset times, feedback/thread ID, and whether logout/login or another machine changes the result.
32
+
21
33
  ## Hallucinated File
22
34
 
23
35
  The trace references a missing path, missing module, or nonexistent file. The fix is usually a repository navigation rule.
package/docs/SCORECARD.md CHANGED
@@ -9,7 +9,7 @@ Status: **pass**
9
9
  | Failed doctor checks | 0 |
10
10
  | Critical findings | 0 |
11
11
  | Built-in benchmark | pass |
12
- | Benchmark cases | 7 |
12
+ | Benchmark cases | 9 |
13
13
 
14
14
  ## Doctor Summary
15
15
 
@@ -27,6 +27,8 @@ This benchmark runs the public fixture pack that ships with the repository and p
27
27
  | Failed workflow with missing validation | `fixtures/failed-run.md` | 18 | 5 | 1 | `hallucinated_file`, `mcp_risk`, `premature_completion`, `test_failure`, `tests_not_run` | pass |
28
28
  | Codex JSONL failed session | `fixtures/codex-session.jsonl` | 50 | 3 | 1 | `premature_completion`, `test_failure`, `weak_evidence` | pass |
29
29
  | Codex context compaction failure | `fixtures/context-compaction.md` | 75 | 2 | 0 | `context_compaction`, `weak_evidence` | pass |
30
+ | Codex sandbox permission failure | `fixtures/sandbox-permission.md` | 75 | 2 | 0 | `sandbox_permission`, `weak_evidence` | pass |
31
+ | Codex quota mismatch | `fixtures/quota-mismatch.md` | 75 | 2 | 0 | `quota_mismatch`, `weak_evidence` | pass |
30
32
  | MCP config with secret exposure | `fixtures/mcp-risk.json` | 59 | 2 | 1 | `mcp_risk`, `secret_exposure` | pass |
31
33
  | Untrusted PR comment prompt injection | `fixtures/prompt-injection.md` | 50 | 3 | 1 | `premature_completion`, `prompt_injection`, `weak_evidence` | pass |
32
34
  | Conflicting agent instruction files | `fixtures/instruction-drift` | 84 | 1 | 0 | `ignored_instruction` | pass |
package/docs/USE_CASES.md CHANGED
@@ -21,7 +21,7 @@ What it proves:
21
21
  Recommended CI surface:
22
22
 
23
23
  ```yaml
24
- - uses: grnbtqdbyx-create/trace-to-skill@v0.1.36
24
+ - uses: grnbtqdbyx-create/trace-to-skill@v0.1.38
25
25
  with:
26
26
  mode: all
27
27
  doctor-threshold: "85"
@@ -51,7 +51,27 @@ This checks:
51
51
 
52
52
  The goal is not to ban powerful tools. The goal is to make trust boundaries visible before an agent acts.
53
53
 
54
- ## 3. GitHub Context Guard
54
+ ## 3. Sandbox And Permission Failure Triage
55
+
56
+ Use this when Codex cannot start tools, apply patches, or write to the workspace because sandbox setup or permissions fail.
57
+
58
+ ```bash
59
+ npx trace-to-skill analyze ./runs --format json
60
+ ```
61
+
62
+ This catches signals such as Windows sandbox setup refresh failures, `os error 740`, `CodexSandboxOffline` ownership drift, ACL denial, approval-policy mismatch, and Full Access sessions behaving like workspace-write or on-request mode.
63
+
64
+ ## 4. Quota And Usage-Limit Evidence
65
+
66
+ Use this when Codex blocks a prompt with a usage-limit message but another surface still shows remaining quota.
67
+
68
+ ```bash
69
+ npx trace-to-skill analyze ./runs --format json
70
+ ```
71
+
72
+ This catches traces where `/status` or the usage page shows remaining 5h or weekly quota, accounts appear to share limits unexpectedly, a Team account inherits a Plus account's limit state, or quota reset times jump after logout/login.
73
+
74
+ ## 5. GitHub Context Guard
55
75
 
56
76
  Use this before an agent reads untrusted GitHub text.
57
77
 
@@ -68,7 +88,7 @@ Use it when:
68
88
  - a bot asks Codex to triage untrusted user reports
69
89
  - logs or comments might contain instructions like "ignore previous instructions" or "print secrets"
70
90
 
71
- ## 4. Failed Agent Run To Reviewable Rule
91
+ ## 6. Failed Agent Run To Reviewable Rule
72
92
 
73
93
  Use this when a coding agent made a repeated workflow mistake.
74
94
 
@@ -86,7 +106,7 @@ Recommended maintainer loop:
86
106
  4. Copy only evidence-backed rules into the real policy file.
87
107
  5. Run `eval` or `scorecard` in CI so the same failure does not silently return.
88
108
 
89
- ## 5. Privacy-Preserving Adoption
109
+ ## 7. Privacy-Preserving Adoption
90
110
 
91
111
  Use this when you want public evidence without leaking private traces.
92
112
 
package/fixtures/quota-mismatch.md ADDED
@@ -0,0 +1,35 @@
1
+ # Codex quota mismatch fixture
2
+
3
+ ## Usage page and status disagree with runtime error
4
+
5
+ The usage dashboard and `/status` both showed quota remaining before the prompt:
6
+
7
+ ```text
8
+ Account: user@example.com (Plus)
9
+ Model: gpt-5.3-codex
10
+ 5h limit: 94% left (resets 13:26)
11
+ Weekly limit: 21% left (resets Feb 25th, 2026 8:07 PM)
12
+ Visit https://chatgpt.com/codex/settings/usage for up-to-date information on rate limits and credits
13
+ ```
14
+
15
+ Immediately after sending `ping`, Codex returned:
16
+
17
+ ```text
18
+ You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at 1:36 PM.
19
+ ```
20
+
21
+ After the failed prompt, `/status` flipped to `0%` weekly remaining.
22
+
23
+ ## Account-scoping suspicion
24
+
25
+ The same user switched from a Plus account to a Team account and the Team workspace inherited the same 5-hour limit reached message. The reporter suspected browser session caching or shared authentication/session state.
26
+
27
+ ## Independent quota windows
28
+
29
+ Another trace showed 5h quota and weekly quota being consumed at the same rate:
30
+
31
+ ```text
32
+ The weekly and daily limits seem to be consumed at the same rate, and I can't understand why.
33
+ ```
34
+
35
+ A later report said quota disappeared completely, weekly quota was halved, and the reset date moved by a few days until logout/login made it look normal again.
package/fixtures/sandbox-permission.md ADDED
@@ -0,0 +1,31 @@
1
+ # Codex sandbox permission failure fixture
2
+
3
+ ## Failed shell command
4
+
5
+ The session could not start a simple command:
6
+
7
+ ```text
8
+ execution error: Io(Custom { kind: Other, error: "windows sandbox: setup refresh failed with status exit code: 1" })
9
+ ```
10
+
11
+ Another run failed earlier in the tool startup path:
12
+
13
+ ```text
14
+ node_repl kernel exited unexpectedly
15
+ kernel_stderr_tail: "windows sandbox failed: spawn setup refresh"
16
+ os error 740
17
+ ```
18
+
19
+ ## Workspace ownership drift
20
+
21
+ After switching from Full Access to workspace-write, the project directory owner changed to `CodexSandboxOffline`.
22
+ Subsequent patch attempts failed with access denied and ACL errors, even after returning approval_policy to never.
23
+
24
+ Maintainer note:
25
+
26
+ ```text
27
+ sandbox_mode = "workspace-write"
28
+ approval_policy = "on-request"
29
+ Full Access thread downgraded to workspace-write and write failures persisted.
30
+ CreateProcessWithLogonW failed while setup refresh tried to launch the helper.
31
+ ```
package/llms.txt CHANGED
@@ -15,6 +15,8 @@ Runtime: Node.js 20+
15
15
  - agents claiming completion without test/build proof
16
16
  - failed tests hidden behind optimistic summaries
17
17
  - Codex context compaction failures such as remote compact stream disconnects, `context_length_exceeded`, stuck automatic compaction, and `unknown variant auto`
18
+ - Codex sandbox and permission failures such as setup refresh errors, `os error 740`, `CodexSandboxOffline` ownership drift, ACL denial, and approval-mode downgrades
19
+ - Codex quota and usage-limit mismatches where `/status` or the usage page shows remaining quota, accounts share limits unexpectedly, or 5h and weekly quotas move together
18
20
  - hallucinated files and broad over-editing
19
21
  - conflicting `AGENTS.md`, `CLAUDE.md`, Cursor, Copilot, or Gemini instructions
20
22
  - stale path references, missing `@file.md` includes, nested `AGENTS.md` visibility gaps, invalid UTF-8, and oversized instruction files that can make Codex follow wrong or truncated guidance
@@ -59,7 +61,7 @@ npx trace-to-skill init --comment --sarif
59
61
  ## GitHub Action
60
62
 
61
63
  ```yaml
62
- - uses: grnbtqdbyx-create/trace-to-skill@v0.1.36
64
+ - uses: grnbtqdbyx-create/trace-to-skill@v0.1.38
63
65
  with:
64
66
  mode: all
65
67
  doctor-threshold: "85"
@@ -87,3 +89,7 @@ npx trace-to-skill init --comment --sarif
87
89
  - privacy-preserving redaction for AI agent traces
88
90
  - GitHub Action for AI coding-agent eval gates
89
91
  - Codex OSS maintainer automation evidence
92
+ - Codex sandbox setup refresh failed
93
+ - Windows sandbox permission failure for Codex CLI
94
+ - Codex usage limit despite remaining quota
95
+ - Codex quota mismatch and rate limit debugging
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "trace-to-skill",
3
- "version": "0.1.36",
3
+ "version": "0.1.38",
4
4
  "description": "Turn failed AI coding-agent runs into reusable AGENTS.md rules, SKILL.md files, and eval evidence.",
5
5
  "type": "module",
6
6
  "main": "dist/src/index.js",
@@ -60,6 +60,12 @@
60
60
  "prompt-injection",
61
61
  "context-compaction",
62
62
  "codex-compaction",
63
+ "sandbox-permission",
64
+ "codex-sandbox",
65
+ "windows-sandbox",
66
+ "quota-mismatch",
67
+ "codex-rate-limits",
68
+ "usage-limit",
63
69
  "evals",
64
70
  "open-source-maintainers",
65
71
  "self-improvement",
package/schemas/analysis-result.schema.json CHANGED
@@ -67,6 +67,9 @@
67
67
  "secret_exposure",
68
68
  "hidden_unicode",
69
69
  "prompt_injection",
70
+ "context_compaction",
71
+ "sandbox_permission",
72
+ "quota_mismatch",
70
73
  "mcp_risk",
71
74
  "weak_evidence"
72
75
  ]