omnilane 0.11.0 → 0.12.0

package/CHANGELOG.md

@@ -6,6 +6,60 @@ semantic version tags.
 
 ## [Unreleased]
 
+## [0.12.0] - 2026-08-03
+
+### Changed
+
+- `hardest-coding` now runs GPT-5.6 Sol at `xhigh` instead of `max`. On
+  Artificial Analysis's per-effort Coding Index, Sol at xhigh scores ahead of
+  Sol at max and of every Claude tier, at roughly a third less cost per task:
+  past xhigh, more effort buys overthinking on this workload rather than
+  accuracy. The lane's Claude candidate is unchanged.
+- `fast-agentic` now runs GPT-5.6 Luna first, with Gemini 3.6 Flash as the
+  second candidate. Luna leads Flash on AA's Agentic Index by a wide margin,
+  and OpenAI's 2026-07-30 reprice left it costing a fraction as much per task.
+  Flash keeps only a throughput advantage, so put it back in front locally if
+  your loops are latency-bound. Both models accept image input, so the lane's
+  multimodal checks are unaffected either way.
+- Lane comments in `routing.yaml` no longer carry benchmark scores, prices or
+  throughput figures. They state why a lane is ordered the way it is, which
+  stays true for months; the figures, each with the date it was retrieved, now
+  live only in `docs/model-capabilities-2026-07.md`. A number going stale
+  should not require a routing-table edit. This refresh found a Coding Agent
+  Index figure that had survived two re-bases inside a comment while the docs
+  forbade quoting that index at all.
+
+### Added
+
+- **`--mode sysops`**, a third dispatch mode: `work` minus the vendor sandbox,
+  for service operations the sandbox denies (`launchctl` and similar). Codex
+  runs it with `-s danger-full-access`; every other vendor treats it as plain
+  `work`. It hands the worker full access to the machine, so it is an explicit
+  per-dispatch flag and cannot be set as a lane default — an invalid `--mode`
+  still exits 2 rather than falling through to a write-enabled branch. Codex
+  under `work` or `sysops` continues to require a git-repo `--workdir`.
+- `routing.local.yaml.example` ships a **value profile**: the same vendors one
+  effort notch cheaper, trading about one Intelligence Index point for 30-40%
+  off the cost per task, plus a clearly-marked riskier tier for models on the
+  cost/intelligence frontier that hallucinate heavily.
+- `docs/model-capabilities-2026-07.md` documents AA's two Capability Indices —
+  Coding Index (Terminal-Bench v2.1 + SciCode) and Agentic Index (GDPval-AA v2
+  + τ³-Banking) — with the composition, weights and the caveat that neither
+  carries a version label, so a re-base would arrive silently.
+
+### Fixed
+
+- Corrected the pricing table for OpenAI's 2026-07-30 reprice: GPT-5.6 Terra is
+  $2/$12 and Luna is $0.20/$1.20; Sol is unchanged. Subscription quotas are
+  unchanged but Terra and Luna now consume fewer credits.
+- Replaced the Intelligence Index table, which quoted a 2026-07-24 article, with
+  values retrieved from AA on 2026-08-02. AA re-measures, and most rows had
+  moved 10-20% on cost per task in the interim.
+- Documented that AA's **Coding Index is not the Coding Agent Index**. They
+  share no components, and their numbers collide: Claude Opus 5 reads 77.98 on
+  the former, right on top of the 77/78 figures circulating for the latter's
+  v1.3.
+
 ## [0.11.0] - 2026-07-27
 
 No routing changes. The Live Board is now readable in five languages.
@@ -475,7 +529,8 @@ work to the wrong model, and records the evidence behind the shipped defaults.
 - Initial shared routing table, cross-vendor dispatcher, runners, installer,
   and baseline lint fixes.
 
-[Unreleased]: https://github.com/Seraphim0916/omnilane/compare/v0.11.0...HEAD
+[Unreleased]: https://github.com/Seraphim0916/omnilane/compare/v0.12.0...HEAD
+[0.12.0]: https://github.com/Seraphim0916/omnilane/compare/v0.11.0...v0.12.0
 [0.11.0]: https://github.com/Seraphim0916/omnilane/compare/v0.10.4...v0.11.0
 [0.10.4]: https://github.com/Seraphim0916/omnilane/compare/v0.10.3...v0.10.4
 [0.10.3]: https://github.com/Seraphim0916/omnilane/compare/v0.10.2...v0.10.3

package/README.ja.md

@@ -112,7 +112,7 @@ flowchart LR
 
 | レーン | 第一候補 | バックアップ | 用途 |
 |---|---|---|---|
-| 🔥 hardest-coding | GPT-5.6 Sol (max) | Claude Opus 5 (xhigh) | 最難関の実装、根本原因デバッグ、正確性が要の変更 |
+| 🔥 hardest-coding | GPT-5.6 Sol (xhigh) | Claude Opus 5 (xhigh) | 最難関の実装、根本原因デバッグ、正確性が要の変更 |
 | 🏗️ bulk-mechanical | GPT-5.6 Terra (max) | Claude Sonnet 5 (high) | リファクタ、移行、テスト、大規模スイープ |
 | 🧹 triage | GPT-5.6 Luna (medium) | Gemini 3.6 Flash (Low) | 大量の一次スクリーニング |
 | ⚖️ hard-judgment | Claude Opus 5 (xhigh) | GPT-5.6 Sol (max) | アーキテクチャ裁定、深い推論、セカンドオピニオン |
@@ -120,7 +120,7 @@ flowchart LR
 | 💬 consult | 明示指定したベンダー/モデル | —(フォールバックなし) | 自然言語で直接相談。`--vendor` を必ず維持 |
 | 🎨 ui-draft | GPT-5.6 Sol (xhigh) | Claude Opus 5 (high) | デザインシステム/参考画像がある場合の UI ドラフト |
 | 📚 long-context | Gemini 3.1 Pro (High) | Claude Opus 5 (high) | 100 万トークン級の走査と検索。複数箇所をまたぐ統合には Claude 候補を、高速反復ループは Flash を優先 |
-| ⚡ fast-agentic | Gemini 3.6 Flash (High) | GPT-5.6 Luna (high) | 高速なマルチステップ agentic ループ、マルチモーダル確認 |
+| ⚡ fast-agentic | GPT-5.6 Luna (max) | Gemini 3.6 Flash (High) | 高速なマルチステップ agentic ループ、マルチモーダル確認 |
 | 📡 live-search | Grok 4.5 | —(off) | リアルタイム X/ウェブ検索とソーシャル文脈 |
 | 🚰 coding-overflow | Grok 4.5 | Kimi K3 → Qwen3 Coder Plus → OpenCode | Codex クォータ逼迫時の中級コーディング逃し弁 |
 | 🗳️ arbitrate | off(オプトイン) | — | 内蔵オピニオンパネル(重大な判断用)——デフォルト無効。`routing.local.yaml` で有効化;投票者×ラウンドごとに 1 コール消費 |
@@ -291,7 +291,7 @@ omnilane ui status                             # Live UI の稼働状態を表
 omnilane ui url                                # 現在の認証済みローカル URL を表示
 omnilane ui stop                               # Live UI を停止
 omnilane doctor [--json]                       # ルーティングとローカル実行環境を読み取り専用で診断
-dispatch.sh [--background] [--dry-run] [--mode advise|work] [--workdir DIR]
+dispatch.sh [--background] [--dry-run] [--mode advise|work|sysops] [--workdir DIR]
             [--vendor V] [--model M] [--effort E] [--timeout SEC] [--job-timeout SEC]
             LANE "TASK"                              # "-" で stdin から読む
 dispatch.sh [--json] --list [--json]
@@ -326,6 +326,12 @@ configure.sh set|get|unset|list|diff LANE [SPEC]    # routing.local.yaml を非
   workspace-write、Claude は編集自動承認、Gemini は accept-edits モード。
   `openrouter` vendor は work モードを明確に拒否します——編集はエージェント型
   CLI ベンダーへ。
+- **sysops** — `work` からベンダーのサンドボックスを外したモード。サンドボックスが
+  拒否するサービス操作(`launchctl` など)向けです。Codex は
+  `-s danger-full-access` で実行し、他のベンダーは通常の `work` として扱います。
+  マシン全体へのアクセスをワーカーに与えることになるため、ディスパッチごとに
+  明示指定する必要があり、レーンの既定値には決してできません。`work` が
+  サンドボックス拒否で失敗するのを実際に確認した場合にのみ使ってください。
 
 ## 🔒 安全機構
 
@@ -478,6 +484,10 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # 解決済みプラン、
 依頼した場合のみです。ディスパッチの既定は読み取り専用の `advise` で、ベンダーごとに
 実装されています(読み取り専用サンドボックス、plan モード、あるいは読み取り専用の
 ツールセット)。編集には `--mode work` と明示的な `--workdir` の両方が必要です。
+第三のモード `--mode sysops` は `work` からベンダーのサンドボックスを外したもので、
+サンドボックスが拒否するサービス操作(`launchctl` など)向けです。codex は
+`-s danger-full-access` で実行し、他のベンダーは `work` として扱います。
+ディスパッチごとの明示指定のみで、レーンの既定値にはなりません。
 ワーカー自身は再ディスパッチできません——深度ガードが終了コード 86 で入れ子の
 ファンアウトを拒否するため、一つのコマンドがエージェントの連鎖に膨らんでクォータを
 食い潰すことはありません。
@@ -506,6 +516,27 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # 解決済みプラン、
 
 ## 📜 リリース履歴
 
+## v0.12.0 の新機能
+
+- **`hardest-coding` の Sol を `max` から `xhigh` へ** — AA の努力度別 Coding Index
+  では、Sol の xhigh が自身の max も Claude の全ティアも上回り、コストは約 3 分の 1
+  少ない。この種の作業では xhigh を超えた努力度は正確さではなく考えすぎを買う。
+- **`fast-agentic` の第一候補が GPT-5.6 Luna に**、Gemini 3.6 Flash は第二候補へ。
+  Luna は AA の Agentic Index で Flash を大きく上回り、2026-07-30 の値下げ後は
+  タスクあたりコストがごく僅か。Flash に残る優位はスループットのみ — レイテンシ律速の
+  ループならローカル設定で先頭に戻すこと。
+- **レーンのコメントから数値を排除。** `routing.yaml` は各順序の「理由」だけを述べ、
+  スコア・価格・スループットは取得日とともに `docs/model-capabilities-2026-07.md` に
+  集約。数値が古くなってもルーティング表の編集は不要になった。
+- **value プロファイル**を `routing.local.yaml.example` に追加 — Intelligence Index
+  約 1 ポイントと引き換えに、タスクあたりコストを 30〜40% 削減。
+- **`--mode sysops` を追加** — ベンダーのサンドボックスを外した `work`。サンドボックスが
+  拒否するサービス操作向けです。ワーカーにマシン全体へのアクセスを与えるため、
+  ディスパッチごとの指定のみで、レーンの既定値にはできません。
+- **価格とベンチマークを更新**(2026-07-30 の OpenAI 値下げ反映)。あわせて AA の
+  Coding Index が Coding Agent Index **ではない**ことを明記 — 構成要素は全く別物だが
+  数値が近接する。
+
 ## v0.11.0 の新機能
 
 - **Live Board が 5 言語で読めます** — 英語・日本語・韓国語・繁体字中国語・簡体字

package/README.ko.md

@@ -110,7 +110,7 @@ flowchart LR
 
 | 레인 | 1순위 모델 | 백업 | 용도 |
 |---|---|---|---|
-| 🔥 hardest-coding | GPT-5.6 Sol (max) | Claude Opus 5 (xhigh) | 가장 어려운 구현, 근본 원인 디버깅, 정확성이 핵심인 수정 |
+| 🔥 hardest-coding | GPT-5.6 Sol (xhigh) | Claude Opus 5 (xhigh) | 가장 어려운 구현, 근본 원인 디버깅, 정확성이 핵심인 수정 |
 | 🏗️ bulk-mechanical | GPT-5.6 Terra (max) | Claude Sonnet 5 (high) | 리팩터링, 마이그레이션, 테스트, 대량 스윕 |
 | 🧹 triage | GPT-5.6 Luna (medium) | Gemini 3.6 Flash (Low) | 대량 1차 선별 |
 | ⚖️ hard-judgment | Claude Opus 5 (xhigh) | GPT-5.6 Sol (max) | 아키텍처 중재, 깊은 추론, 세컨드 오피니언 |
@@ -118,7 +118,7 @@ flowchart LR
 | 💬 consult | 명시적으로 지정한 벤더/모델 | —(폴백 없음) | 자연어 직접 상담. `--vendor` 를 반드시 유지 |
 | 🎨 ui-draft | GPT-5.6 Sol (xhigh) | Claude Opus 5 (high) | 디자인 시스템/참고 이미지가 있을 때의 UI 초안 |
 | 📚 long-context | Gemini 3.1 Pro (High) | Claude Opus 5 (high) | 100만 토큰급 훑기와 검색. 여러 곳을 잇는 다중 홉 통합은 Claude 후보를, 빠른 반복 루프는 Flash 우선 |
-| ⚡ fast-agentic | Gemini 3.6 Flash (High) | GPT-5.6 Luna (high) | 빠른 멀티스텝 agentic 루프, 멀티모달 확인 |
+| ⚡ fast-agentic | GPT-5.6 Luna (max) | Gemini 3.6 Flash (High) | 빠른 멀티스텝 agentic 루프, 멀티모달 확인 |
 | 📡 live-search | Grok 4.5 | —(off) | 실시간 X/웹 검색과 소셜 맥락 |
 | 🚰 coding-overflow | Grok 4.5 | Kimi K3 → Qwen3 Coder Plus → OpenCode | Codex 쿼터 소진 시 중급 코딩 안전 밸브 |
 | 🗳️ arbitrate | off(옵트인) | — | 내장 의견 패널(중대한 결정용)——기본 비활성. `routing.local.yaml` 에서 활성화;투표자×라운드마다 1콜 소모 |
@@ -283,7 +283,7 @@ omnilane ui status                             # Live UI 실행 상태 표시
 omnilane ui url                                # 현재 인증된 로컬 URL 표시
 omnilane ui stop                               # Live UI 중지
 omnilane doctor [--json]                       # 라우팅과 로컬 실행 환경을 읽기 전용으로 진단
-dispatch.sh [--background] [--dry-run] [--mode advise|work] [--workdir DIR]
+dispatch.sh [--background] [--dry-run] [--mode advise|work|sysops] [--workdir DIR]
             [--vendor V] [--model M] [--effort E] [--timeout SEC] [--job-timeout SEC]
             LANE "TASK"                              # "-" 는 stdin 에서 읽기
 dispatch.sh [--json] --list [--json]
@@ -316,6 +316,11 @@ CLI 를 사용할 수 없음, `5` 1라운드 성공 투표자 부족, `6` 2라
   workspace-write, Claude 는 편집 자동 승인, Gemini 는 accept-edits 모드.
   `openrouter` vendor 는 work 모드를 명확한 오류로 거부합니다——파일 편집은
   에이전트형 CLI 벤더로 보내세요.
+- **sysops** — `work` 에서 벤더 샌드박스를 뺀 모드. 샌드박스가 거부하는 서비스
+  작업(`launchctl` 등)을 위한 것입니다. Codex 는 `-s danger-full-access` 로
+  실행하고, 다른 벤더는 일반 `work` 로 취급합니다. 워커에게 머신 전체 접근 권한을
+  주는 셈이므로 디스패치마다 명시적으로 지정해야 하며 레인 기본값이 될 수 없습니다.
+  `work` 가 샌드박스 거부로 실패하는 것을 직접 확인한 경우에만 쓰세요.
 
 ## 🔒 안전 장치
 
@@ -463,7 +468,11 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # 완전히 해석된 계
 
 요청했을 때만 가능합니다. 디스패치의 기본값은 읽기 전용 `advise` 이며 벤더별로
 구현되어 있습니다(읽기 전용 샌드박스, plan 모드, 또는 읽기 전용 도구 집합).
-수정하려면 `--mode work` 와 명시적인 `--workdir` 가 모두 필요합니다. 워커는 다시
+수정하려면 `--mode work` 와 명시적인 `--workdir` 가 모두 필요합니다. 세 번째 모드인
+`--mode sysops` 는 `work` 에서 벤더 샌드박스를 뺀 것으로, 샌드박스가 거부하는 서비스
+작업(`launchctl` 등)을 위한 것입니다. codex 는 `-s danger-full-access` 로 실행하고
+다른 벤더는 `work` 로 취급하며, 디스패치마다 명시해야 할 뿐 레인 기본값이 될 수
+없습니다. 워커는 다시
 디스패치할 수도 없습니다——깊이 가드가 종료 코드 86 으로 중첩 팬아웃을 거부하므로,
 명령 하나가 에이전트 연쇄로 번져 할당량을 태우는 일은 없습니다.
 
@@ -490,6 +499,27 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # 완전히 해석된 계
 
 ## 📜 릴리스 기록
 
+## v0.12.0 새 기능
+
+- **`hardest-coding`의 Sol을 `max`에서 `xhigh`로** — AA의 노력 수준별 Coding Index
+  에서 Sol의 xhigh가 자신의 max와 모든 Claude 티어를 앞서면서 비용은 약 3분의 1
+  적다. 이 작업에서 xhigh를 넘는 노력은 정확도가 아니라 과잉 사고를 산다.
+- **`fast-agentic`의 1순위가 GPT-5.6 Luna로**, Gemini 3.6 Flash는 2순위. Luna는 AA
+  Agentic Index에서 Flash를 크게 앞서고, 2026-07-30 가격 인하 후 태스크당 비용이
+  극히 낮다. Flash에 남은 우위는 처리량뿐 — 레이턴시가 병목인 루프라면 로컬 설정에서
+  다시 앞에 두면 된다.
+- **레인 주석에서 수치 제거.** `routing.yaml`은 각 순서가 성립하는 "이유"만 서술하고,
+  점수·가격·처리량은 조회 날짜와 함께 `docs/model-capabilities-2026-07.md`에만 둔다.
+  수치가 낡아도 라우팅 표를 고칠 필요가 없다.
+- **value 프로파일** 추가(`routing.local.yaml.example`) — Intelligence Index 약 1점을
+  내주고 태스크당 비용을 30~40% 절감.
+- **`--mode sysops` 추가** — 벤더 샌드박스를 뺀 `work`. 샌드박스가 거부하는 서비스
+  작업을 위한 것입니다. 워커에게 머신 전체 접근 권한을 주므로 디스패치별 지정만
+  가능하며 레인 기본값이 될 수 없습니다.
+- **가격·벤치마크 갱신**(2026-07-30 OpenAI 인하 반영). 그리고 AA의 Coding Index는
+  Coding Agent Index가 **아니라는** 점을 문서화 — 구성 요소가 전혀 다른데 수치가
+  겹친다.
+
 ## v0.11.0 새 기능
 
 - **Live Board 를 5 개 언어로 읽을 수 있습니다** — 영어, 일본어, 한국어, 번체 중국어,

package/README.md

@@ -115,7 +115,7 @@ actually resolves.
 
 | Lane | First choice | Backup | When |
 |---|---|---|---|
-| 🔥 hardest-coding | GPT-5.6 Sol (max) | Claude Opus 5 (xhigh) | Hardest implementation, deep root-cause debug, correctness-critical edits |
+| 🔥 hardest-coding | GPT-5.6 Sol (xhigh) | Claude Opus 5 (xhigh) | Hardest implementation, deep root-cause debug, correctness-critical edits |
 | 🏗️ bulk-mechanical | GPT-5.6 Terra (max) | Claude Sonnet 5 (high) | Refactors, migrations, tests, review sweeps — mechanical endurance |
 | 🧹 triage | GPT-5.6 Luna (medium) | Gemini 3.6 Flash (Low) | High-volume scans, first-pass filtering |
 | ⚖️ hard-judgment | Claude Opus 5 (xhigh) | GPT-5.6 Sol (max) | Architecture arbitration, deep reasoning, second opinions |
@@ -123,7 +123,7 @@ actually resolves.
 | 💬 consult | Explicit named vendor/model | — (no fallback) | Direct natural-language consultation; always keep `--vendor` |
 | 🎨 ui-draft | GPT-5.6 Sol (xhigh) | Claude Opus 5 (high) | UI drafts only WITH a design system / reference images |
 | 📚 long-context | Gemini 3.1 Pro (High) | Claude Opus 5 (high) | 1M-token sweeps and retrieval; for multi-hop synthesis prefer the Claude candidate, and Flash for fast repeated loops |
-| ⚡ fast-agentic | Gemini 3.6 Flash (High) | GPT-5.6 Luna (high) | Fast multi-step agentic loops, multimodal checks |
+| ⚡ fast-agentic | GPT-5.6 Luna (max) | Gemini 3.6 Flash (High) | Fast multi-step agentic loops, multimodal checks |
 | 📡 live-search | Grok 4.5 | — (off) | Realtime X/web search and social context |
 | 🚰 coding-overflow | Grok 4.5 | Kimi K3 → Qwen3 Coder Plus → OpenCode | Codex-quota relief valve for mid-tier coding |
 | 🗳️ arbitrate | off (opt-in vote panel) | — | Built-in opinion panel for big calls — disabled by default; enable it in `routing.local.yaml`, one call per voter per round |
@@ -300,7 +300,7 @@ omnilane ui status                             # report whether the Live UI is r
 omnilane ui url                                # print the current authenticated local URL
 omnilane ui stop                               # stop the Live UI
 omnilane doctor [--json]                       # read-only routing and runtime health report
-dispatch.sh [--background] [--dry-run] [--mode advise|work] [--workdir DIR]
+dispatch.sh [--background] [--dry-run] [--mode advise|work|sysops] [--workdir DIR]
             [--vendor V] [--model M] [--effort E] [--timeout SEC] [--job-timeout SEC]
             LANE "TASK"                              # "-" reads task from stdin
 dispatch.sh [--json] --list [--json]
@@ -349,6 +349,12 @@ code passes through.
   Codex gets a workspace-write sandbox; Claude auto-accepts edits; Gemini runs
   in accept-edits mode. The `openrouter` vendor refuses work mode with a clear
   error — route edits to an agentic CLI vendor instead.
+- **sysops** — `work` minus the vendor sandbox, for service operations the
+  sandbox denies (`launchctl` and friends). Codex runs it with
+  `-s danger-full-access`; every other vendor treats it as plain `work`. This
+  hands the worker full access to the machine, so it is an explicit
+  per-dispatch opt-in and can never be a lane default. Reach for it only when
+  you have watched `work` fail on a sandbox denial.
 
 ## 🔒 Safety rails
 
@@ -508,7 +514,11 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # fully resolved plan, no p
 
 Only if you ask for it. Dispatch defaults to `advise`, a read-only mode enforced
 per vendor (read-only sandbox, plan mode, or read-only tool set depending on the
-CLI). Editing requires both `--mode work` and an explicit `--workdir`. Workers
+CLI). Editing requires both `--mode work` and an explicit `--workdir`. A third
+mode, `--mode sysops`, is `work` minus the vendor sandbox — for service
+operations the sandbox denies (e.g. `launchctl`); codex runs it with
+`-s danger-full-access`, other vendors treat it as `work`, and it is an
+explicit per-dispatch opt-in, never a lane default. Workers
 also cannot dispatch again — the depth guard refuses nested fan-out with exit 86,
 so one command can never spiral into a chain of agents spending your quota.
 
@@ -537,6 +547,30 @@ working notes, including per-benchmark caveats, live in
 
 ## 📜 Release history
 
+## What's new in v0.12.0
+
+- **`hardest-coding` drops Sol from `max` to `xhigh`** — on AA's per-effort
+  Coding Index, Sol at xhigh outscores Sol at max and every Claude tier while
+  costing about a third less. Past xhigh, effort buys overthinking rather than
+  accuracy on this workload.
+- **`fast-agentic` leads with GPT-5.6 Luna**, Gemini 3.6 Flash second. Luna
+  leads Flash on AA's Agentic Index by a wide margin and, after OpenAI's
+  2026-07-30 reprice, costs a fraction as much per task. Flash keeps only a
+  throughput edge — put it back in front locally if your loops are
+  latency-bound.
+- **Lane comments no longer carry numbers.** `routing.yaml` now states why each
+  ordering holds; every score, price and throughput figure lives in
+  `docs/model-capabilities-2026-07.md` with its retrieval date, so a stale
+  figure never requires a routing-table edit.
+- **A value profile** in `routing.local.yaml.example` trades about one
+  Intelligence Index point for 30-40% off the cost per task.
+- **New `--mode sysops`** — `work` without the vendor sandbox, for service
+  operations the sandbox denies. It gives the worker full machine access, so it
+  is a per-dispatch flag only and can never be a lane default.
+- **Refreshed pricing and benchmark data** for the 2026-07-30 OpenAI reprice,
+  and documented that AA's Coding Index is *not* the Coding Agent Index — they
+  share no components and their numbers collide.
+
 ## What's new in v0.11.0
 
 - **The Live Board reads in five languages** — English, Japanese, Korean,

package/README.zh-CN.md

@@ -103,7 +103,7 @@ flowchart LR
 
 | 通道 | 首选模型 | 备选模型 | 用途 |
 |---|---|---|---|
-| 🔥 hardest-coding | GPT-5.6 Sol (max) | Claude Opus 5 (xhigh) | 最难的实现、深度调试、正确性攸关的修改 |
+| 🔥 hardest-coding | GPT-5.6 Sol (xhigh) | Claude Opus 5 (xhigh) | 最难的实现、深度调试、正确性攸关的修改 |
 | 🏗️ bulk-mechanical | GPT-5.6 Terra (max) | Claude Sonnet 5 (high) | 重构、迁移、测试、大面积扫描——机械耐力活 |
 | 🧹 triage | GPT-5.6 Luna (medium) | Gemini 3.6 Flash (Low) | 高量初筛、第一轮过滤 |
 | ⚖️ hard-judgment | Claude Opus 5 (xhigh) | GPT-5.6 Sol (max) | 架构仲裁、深度推理、第二意见 |
@@ -111,7 +111,7 @@ flowchart LR
 | 💬 consult | 明确指定的厂商/模型 | —(不降级) | 自然语言直接咨询;必须保留 `--vendor` |
 | 🎨 ui-draft | GPT-5.6 Sol (xhigh) | Claude Opus 5 (high) | 有设计规范/参考图时的 UI 出稿;开放式视觉品味交给 taste-final |
 | 📚 long-context | Gemini 3.1 Pro (High) | Claude Opus 5 (high) | 百万 token 扫读与检索;要跨段落多跳整合请改用 Claude 候选,高速重复循环仍优先 Flash |
-| ⚡ fast-agentic | Gemini 3.6 Flash (High) | GPT-5.6 Luna (high) | 快速多步骤 agentic 循环、多模态检查 |
+| ⚡ fast-agentic | GPT-5.6 Luna (max) | Gemini 3.6 Flash (High) | 快速多步骤 agentic 循环、多模态检查 |
 | 📡 live-search | Grok 4.5 | —(off) | 实时 X/网络搜索与社群脉络 |
 | 🚰 coding-overflow | Grok 4.5 | Kimi K3 → Qwen3 Coder Plus → OpenCode | Codex 额度吃紧时的中量级编码溢流道;事实性声明须另行查证 |
 | 🗳️ arbitrate | off(可选评审团) | — | 内置意见评审团,重大决定用——默认关闭,要用在 `routing.local.yaml` 打开;每评审每轮烧一次额度 |
@@ -266,7 +266,7 @@ omnilane ui status                             # 查看 Live UI 是否正在运
 omnilane ui url                                # 输出当前通过认证的本地链接
 omnilane ui stop                               # 停止 Live UI
 omnilane doctor [--json]                       # 只读检查路由与本地运行环境
-dispatch.sh [--background] [--dry-run] [--mode advise|work] [--workdir 目录]
+dispatch.sh [--background] [--dry-run] [--mode advise|work|sysops] [--workdir 目录]
             [--vendor V] [--model M] [--effort E] [--timeout SEC] [--job-timeout SEC]
             通道 "任务"                              # "-" 表示从 stdin 读任务
 dispatch.sh [--json] --list [--json]
@@ -298,6 +298,11 @@ configure.sh set|get|unset|list|diff LANE [SPEC]    # 非交互编辑/查看 rou
 - **work** — 允许改文件,仅限你指定的 `--workdir`。Codex 给
   workspace-write 沙箱;Claude 自动接受编辑;Gemini 跑 accept-edits 模式。
   `openrouter` vendor 会明确拒绝 work 模式——改文件请走代理式 CLI vendor。
+- **sysops** — 等于 `work` 拿掉 vendor 沙箱,用于沙箱会挡掉的服务操作
+  (`launchctl` 之类)。Codex 以 `-s danger-full-access` 执行;其他 vendor
+  一律当成普通 `work`。这等于把整台机器的访问权交给工作端,因此只能逐次
+  明确指定,永远不能设成 lane 默认值。只有在你亲眼看到 `work` 因沙箱拒绝而
+  失败时才动用它。
 
 ## 🔒 内置安全机制
 
@@ -438,7 +443,10 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # 完整解析后的计划,
 
 除非你明说要它改。派工默认是 `advise` 只读模式,而且是逐厂商实现的(只读沙箱、
 plan 模式,或只给只读工具集)。要改文件必须同时给 `--mode work` 和明确的
-`--workdir`。工作端也不能再往外派——深度守卫会用退出码 86 拒绝嵌套派工,一道
+`--workdir`。第三种模式 `--mode sysops` 等于 `work` 拿掉 vendor 沙箱,用于沙箱会
+挡掉的服务操作(例如 `launchctl`);codex 以 `-s danger-full-access` 执行,其他
+vendor 一律当成 `work`,而且它只能逐次明确指定,永远不是 lane 默认值。
+工作端也不能再往外派——深度守卫会用退出码 86 拒绝嵌套派工,一道
 命令不可能失控变成一整串 AI 烧你的额度。
 
 </details>
@@ -465,6 +473,24 @@ plan 模式,或只给只读工具集)。要改文件必须同时给 `--mode work
 
 ## 📜 版本历程
 
+## v0.12.0 新功能
+
+- **`hardest-coding` 的 Sol 从 `max` 降到 `xhigh`**——在 AA 分档位的 Coding Index
+  上,Sol 的 xhigh 不但胜过自己的 max,也胜过所有 Claude 档位,成本还少约三分之一。
+  这类工作超过 xhigh 之后,多加的 effort 买到的是过度思考,不是正确率。
+- **`fast-agentic` 改由 GPT-5.6 Luna 领头**,Gemini 3.6 Flash 退居第二。Luna 在 AA
+  的 Agentic Index 上大幅领先 Flash,而且 2026-07-30 降价后每任务成本只剩零头。
+  Flash 只剩吞吐量优势——若你的循环受延迟限制,可在本机覆写把它调回第一。
+- **lane 注释不再放数字。**`routing.yaml` 只说明每条排序「为什么」成立;所有分数、
+  价格与吞吐量连同取数日期,一律放在 `docs/model-capabilities-2026-07.md`。数字过期
+  不再需要动路由表。
+- **新增 value profile**(在 `routing.local.yaml.example`):用约一个 Intelligence
+  Index 分数,换每任务成本降三到四成。
+- **新增 `--mode sysops`**——等于 `work` 拿掉 vendor 沙箱,用于沙箱会挡掉的服务操作。
+  它会把整台机器的访问权交给工作端,因此只能逐次指定,永远不能设成 lane 默认值。
+- **价格与基准数据刷新**至 2026-07-30 OpenAI 降价后的版本,并记录 AA 的 Coding Index
+  **不是** Coding Agent Index——两者成分完全不同,数值却会撞在一起。
+
 ## v0.11.0 新功能
 
 - **Live Board 提供五种语言** —— 英文、日文、韩文、繁体中文与简体中文。首次加载依

package/README.zh-TW.md

@@ -103,7 +103,7 @@ flowchart LR
 
 | 通道 | 首選模型 | 備選模型 | 用途 |
 |---|---|---|---|
-| 🔥 hardest-coding | GPT-5.6 Sol (max) | Claude Opus 5 (xhigh) | 最難的實作、深度除錯、正確性攸關的修改 |
+| 🔥 hardest-coding | GPT-5.6 Sol (xhigh) | Claude Opus 5 (xhigh) | 最難的實作、深度除錯、正確性攸關的修改 |
 | 🏗️ bulk-mechanical | GPT-5.6 Terra (max) | Claude Sonnet 5 (high) | 重構、搬遷、測試、大面積掃描——機械耐力活 |
 | 🧹 triage | GPT-5.6 Luna (medium) | Gemini 3.6 Flash (Low) | 高量初篩、第一輪過濾 |
 | ⚖️ hard-judgment | Claude Opus 5 (xhigh) | GPT-5.6 Sol (max) | 架構仲裁、深度推理、第二意見 |
@@ -111,7 +111,7 @@ flowchart LR
 | 💬 consult | 明確點名的廠商/模型 | —(不降級) | 自然語言直接諮詢;必須保留 `--vendor` |
 | 🎨 ui-draft | GPT-5.6 Sol (xhigh) | Claude Opus 5 (high) | 有設計規範/參考圖時的 UI 出稿;開放式視覺品味交給 taste-final |
 | 📚 long-context | Gemini 3.1 Pro (High) | Claude Opus 5 (high) | 百萬 token 掃讀與檢索;要跨段落多跳整合請改用 Claude 候選,高速重複迴圈仍優先 Flash |
-| ⚡ fast-agentic | Gemini 3.6 Flash (High) | GPT-5.6 Luna (high) | 快速多步驟 agentic 迴圈、多模態檢查 |
+| ⚡ fast-agentic | GPT-5.6 Luna (max) | Gemini 3.6 Flash (High) | 快速多步驟 agentic 迴圈、多模態檢查 |
 | 📡 live-search | Grok 4.5 | —(off) | 即時 X/網路搜尋與社群脈絡 |
 | 🚰 coding-overflow | Grok 4.5 | Kimi K3 → Qwen3 Coder Plus → OpenCode | Codex 額度吃緊時的中量級編碼溢流道;事實性宣稱須另行查證 |
 | 🗳️ arbitrate | off(選配評審團) | — | 內建意見評審團,重大決定用——預設關閉,要用在 `routing.local.yaml` 開;每評審每輪燒一次額度 |
@@ -267,7 +267,7 @@ omnilane ui status                             # 查看 Live UI 是否運作中
 omnilane ui url                                # 印出目前通過驗證的本機網址
 omnilane ui stop                               # 停止 Live UI
 omnilane doctor [--json]                       # 唯讀檢查路由與本機執行環境
-dispatch.sh [--background] [--dry-run] [--mode advise|work] [--workdir 目錄]
+dispatch.sh [--background] [--dry-run] [--mode advise|work|sysops] [--workdir 目錄]
             [--vendor V] [--model M] [--effort E] [--timeout SEC] [--job-timeout SEC]
             通道 "任務"                              # "-" 表示從 stdin 讀任務
 dispatch.sh [--json] --list [--json]
@@ -311,6 +311,11 @@ codex/claude/grok/gemini 自選 1-4 個評審。開了之後,同一個問題丟
 - **work** — 允許改檔案,僅限你指定的 `--workdir`。Codex 給
   workspace-write 沙箱;Claude 自動接受編輯;Gemini 跑 accept-edits 模式。
   `openrouter` vendor 會明確拒絕 work 模式——改檔請走代理式 CLI vendor。
+- **sysops** — 等於 `work` 拿掉 vendor 沙箱,用於沙箱會擋掉的服務操作
+  (`launchctl` 之類)。Codex 以 `-s danger-full-access` 執行;其他 vendor
+  一律當成一般 `work`。這等於把整台機器的存取權交給工作端,因此只能逐次
+  明確指定,永遠不能設成 lane 預設。只有在你親眼看到 `work` 因沙箱拒絕而
+  失敗時才動用它。
 
 ## 🔒 內建安全機制
 
@@ -451,7 +456,10 @@ scripts/dispatch.sh --dry-run hardest-coding "…"   # 完整解析後的計畫,
 
 除非你明講要它改。派工預設是 `advise` 唯讀模式,而且是逐廠商實作的(唯讀沙箱、
 plan 模式,或只給唯讀工具集)。要改檔必須同時給 `--mode work` 和明確的
-`--workdir`。工作端也不能再往外派——深度守衛會用退出碼 86 拒絕巢狀派工,一道
+`--workdir`。第三種模式 `--mode sysops` 等於 `work` 拿掉 vendor 沙箱,用於沙箱會
+擋掉的服務操作(例如 `launchctl`);codex 以 `-s danger-full-access` 執行,其他
+vendor 一律當成 `work`,而且它只能逐次明確指定,永遠不是 lane 預設。
+工作端也不能再往外派——深度守衛會用退出碼 86 拒絕巢狀派工,一道
 指令不可能失控變成一整串 AI 燒你的額度。
 
 </details>
@@ -475,6 +483,24 @@ plan 模式,或只給唯讀工具集)。要改檔必須同時給 `--mode work`
 
 ## 📜 版本歷程
 
+## v0.12.0 新功能
+
+- **`hardest-coding` 的 Sol 從 `max` 降到 `xhigh`**——在 AA 分檔位的 Coding Index
+  上,Sol 的 xhigh 不但勝過自己的 max,也勝過所有 Claude 檔位,成本還少約三分之一。
+  這種工作超過 xhigh 之後,多加的 effort 買到的是過度思考,不是正確率。
+- **`fast-agentic` 改由 GPT-5.6 Luna 領頭**,Gemini 3.6 Flash 退居第二。Luna 在 AA
+  的 Agentic Index 上大幅領先 Flash,而且 2026-07-30 砍價後每任務成本只剩零頭。
+  Flash 只剩吞吐量優勢——若你的迴圈受延遲限制,可在本機覆寫把它調回第一。
+- **lane 註解不再放數字。**`routing.yaml` 只說明每條排序「為什麼」成立;所有分數、
+  價格與吞吐量連同取數日期,一律住在 `docs/model-capabilities-2026-07.md`。數字過期
+  不再需要動路由表。
+- **新增 value profile**(在 `routing.local.yaml.example`):用約一個 Intelligence
+  Index 分數,換每任務成本降三到四成。
+- **新增 `--mode sysops`**——等於 `work` 拿掉 vendor 沙箱,用於沙箱會擋掉的服務操作。
+  它會把整台機器的存取權交給工作端,因此只能逐次指定,永遠不能設成 lane 預設。
+- **價格與基準數據刷新**至 2026-07-30 OpenAI 砍價後的版本,並記錄 AA 的 Coding Index
+  **不是** Coding Agent Index——兩者成分完全不同,數值卻會撞在一起。
+
 ## v0.11.0 新功能
 
 - **Live Board 提供五種語言** —— 英文、日文、韓文、繁體中文與簡體中文。首次載入依

package/VERSION

@@ -1 +1 @@
-0.11.0
+0.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnilane",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "One routing table, every harness — classify subtasks into lanes and dispatch each lane to the best vendor's agentic CLI (Codex, Claude, Gemini, Grok) using your existing subscription logins.",
   "bin": {
     "omnilane": "bin/omnilane"

package/routing.local.yaml.example

@@ -39,3 +39,24 @@
 # hardest-coding:  claude claude-opus-5 xhigh
 # bulk-mechanical: gemini "Gemini 3.6 Flash (High)" -
 # triage:          gemini "Gemini 3.6 Flash (Low)" -
+
+# Profile: value — same vendors, one effort notch cheaper. Each reasoning lane
+# below gives up about one Artificial Analysis Intelligence Index point to save
+# 30-40% of the cost per task; the fast-agentic line gives up nothing but
+# throughput. Figures are in docs/model-capabilities-2026-07.md (AA leaderboard,
+# retrieved 2026-08-02, post the 2026-07-30 OpenAI reprice). Take this when you
+# pay per token and the work is not correctness-critical; the shipped defaults
+# buy that point back.
+# hardest-coding:  codex gpt-5.6-sol xhigh     # 57.7 pts @ $1.17 vs max 58.9 @ $1.86
+# hard-judgment:   claude claude-opus-5 high   # 58.9 pts @ $1.23 vs xhigh 60.1 @ $1.80
+# taste-final:     claude claude-opus-5 high   # already the value tier — unchanged
+# fast-agentic:    codex gpt-5.6-luna max      # 51.2 pts @ $0.07 vs Gemini 3.6 Flash 50.1 @ $0.56; costs 25% throughput
+# ui-draft:        claude claude-opus-5 high
+# bulk-mechanical is already the value pick at Terra (max), 55.0 pts @ $0.73 — leave it.
+#
+# Cheaper still, and correspondingly riskier — these two are the current
+# Intelligence-vs-cost Pareto frontier but both are heavy hallucinators
+# (Grok 4.5 54%, DeepSeek V4 Flash 0731 84%), so route only work whose output
+# is mechanical rather than factual, and verify anything they assert:
+# bulk-mechanical: grok grok-4.5 -             # 53.8 pts @ $0.44, but 500K context, not 1M
+# triage:          deepseek deepseek-v4-flash - # 49.9 pts @ $0.03, ~60% under post-cut Luna (advise-only: cannot edit files)

package/routing.yaml

@@ -7,9 +7,12 @@
 #   Fallback chain: the first candidate whose vendor CLI is installed wins, so the
 #   same table degrades gracefully when you only subscribe to one or two vendors.
 # Override any line in ~/.omnilane/routing.local.yaml (same format; local wins).
-# Provenance (audited 2026-07-12, re-audited 2026-07-25 vs official model cards;
-# Gemini Flash candidates moved 3.5 -> 3.6 on 2026-07-22; Claude Opus defaults moved
-# 4.8 -> 5 after the 2026-07-24 release — see docs/model-capabilities-2026-07.md):
+# Every benchmark score, price and throughput figure behind these orderings lives in
+# docs/model-capabilities-2026-07.md, with the date it was retrieved. The comments below
+# deliberately carry no numbers: they state WHY a lane is ordered the way it is, which
+# stays true for months, while the numbers move every few weeks. Change an ordering and
+# you update the doc; a figure going stale should never need a routing-table edit.
+# (Audited 2026-07-12; re-audited 2026-07-25, 2026-08-02 and 2026-08-03.)
 # defaults follow Artificial Analysis data, 2026-07
 # snapshot. Verified against AA site records + vendor pricing pages: Intelligence &
 # Coding indexes and 7:2:1 blended prices all match (AA field price1mBlended7To2To1);
@@ -17,28 +20,27 @@
 # standard short-context API tier — on subscription CLIs treat $ as relative ranking.
 # Your own job outcomes (~/.omnilane/jobs/) outrank these priors; edit lanes to match.
 
-hardest-coding:  codex gpt-5.6-sol max | claude claude-opus-5 xhigh  # Opus 5 xhigh is joint-first on AA Coding Agent Index (2026-07-24) and is Anthropic's documented starting point for coding/agentic work; max shows diminishing returns and can overthink. Keep Sol first for the established Codex harness lane.
-bulk-mechanical: codex gpt-5.6-terra max | claude claude-sonnet-5 high | gemini "Gemini 3.6 Flash (High)" -  # AA Coding Agent Index v1.1: Terra 77.4 ~= Fable 77.2 at a fraction of the cost
-triage:          codex gpt-5.6-luna medium | gemini "Gemini 3.6 Flash (Low)" - | claude claude-haiku-4-5 -  # high-volume scans
-hard-judgment:   claude claude-opus-5 xhigh | codex gpt-5.6-sol max   # AA Intelligence Index 2026-07-24: Opus 5 61, Sol max 59; Opus leads AA agentic knowledge-work benchmarks. xhigh per Anthropic guidance (high is the documented floor for intelligence-sensitive work; max is for correctness-over-cost only) — raise to max locally via `omnilane configure set` if your workload needs it.
+hardest-coding:  codex gpt-5.6-sol xhigh | claude claude-opus-5 xhigh  # ordered on coding capability specifically, not general intelligence. Sol dropped from max to xhigh on 2026-08-03: on AA's per-effort Coding Index, Sol at xhigh outscores both Sol at max and every Claude tier, at a third less cost — max buys overthinking here, not accuracy. xhigh is also Anthropic's documented starting point for coding/agentic work. Keep Sol first for the established Codex harness lane.
+bulk-mechanical: codex gpt-5.6-terra max | claude claude-sonnet-5 high | gemini "Gemini 3.6 Flash (High)" -  # ordered on endurance per dollar: Terra leads Sonnet 5 on both intelligence and cost per task
+triage:          codex gpt-5.6-luna medium | gemini "Gemini 3.6 Flash (Low)" - | claude claude-haiku-4-5 -  # high-volume scans, ordered on cost per task: Luna is the cheapest model at its intelligence tier by a wide margin
+hard-judgment:   claude claude-opus-5 xhigh | codex gpt-5.6-sol max   # ordered on agentic knowledge work, where Opus 5 leads Sol on AA's benchmarks. xhigh per Anthropic guidance (high is the documented floor for intelligence-sensitive work; max is for correctness-over-cost only) — raise to max locally via `omnilane configure set` if your workload needs it.
 taste-final:     claude claude-opus-5 high | codex gpt-5.6-sol max    # user-facing prose, prompt/doc polish, Chinese phrasing, style arbitration
 consult:         codex gpt-5.6-sol max | claude claude-opus-5 high | grok grok-4.5 - | gemini "Gemini 3.1 Pro (High)" -  # direct named-model consultation; use --vendor to prevent fallback
 ui-draft:        codex gpt-5.6-sol xhigh | claude claude-opus-5 high  # only with a design system / reference images; open-ended visual taste -> taste-final
 long-context:    gemini "Gemini 3.1 Pro (High)" - | claude claude-opus-5 high | codex gpt-5.6-sol high  # all have 1M context; Gemini leads single-needle retrieval at full length and is the cheapest way to sweep volume, Flash for fast loops. For multi-hop synthesis across a large corpus prefer the claude candidate: published multi-needle scores at 1M favour Claude by a wide margin (see docs/model-capabilities-2026-07.md)
-fast-agentic:    gemini "Gemini 3.6 Flash (High)" - | codex gpt-5.6-luna high  # speed + agentic tool loops; 3.6 Flash (released 2026-07-21): AA Intelligence 50, #1 output speed 303.6 tok/s, -17% output tokens vs 3.5 Flash per Google
+fast-agentic:    codex gpt-5.6-luna max | gemini "Gemini 3.6 Flash (High)" -  # fast multi-step tool loops. Reordered 2026-08-03: Luna leads Flash on agentic benchmarks AND costs a fraction as much per task, so Flash's remaining edge is raw throughput alone. Keep Flash first only if your loops are latency-bound. Both take image input, so the lane's multimodal checks are unaffected
 live-search:     grok grok-4.5 - | off          # native X/web search lane; no real substitute
-coding-overflow: grok grok-4.5 - | kimi kimi-k3 - | qwen qwen3-coder-plus - | opencode - - | off  # codex-quota relief valve: mid-tier coding; Grok 4.5 (GA 2026-07-16) Terminal-Bench 83.3 / SWE-Bench Pro 64.7, but AA hallucination 54% — verify factual claims. qwen3-coder-plus = 2025-09-23 snapshot alias (Qwen 3.6 Plus exists; re-evaluate before swapping). kimi/qwen model fields are CLI aliases — adjust to your login. opencode "-" model = its own configured default.
+coding-overflow: grok grok-4.5 - | kimi kimi-k3 - | qwen qwen3-coder-plus - | opencode - - | off  # codex-quota relief valve: mid-tier coding; Grok 4.5 is a capable mid-tier coder but AA measures a high hallucination rate — verify every factual claim it ships. qwen3-coder-plus = 2025-09-23 snapshot alias (Qwen 3.6 Plus exists; re-evaluate before swapping). kimi/qwen model fields are CLI aliases — adjust to your login. opencode "-" model = its own configured default.
 arbitrate:       off - -                        # opinion panel is OPT-IN: it costs one call per voter per round.
                                                 # Enable: `arbitrate: vote codex,claude,grok -` (any 1-4 of codex/claude/grok/gemini)
                                                 # Debate round (each voter rebuts the others): set the effort field to 2.
                                                 # Custom gate: `arbitrate: exec /path/to/script -`
 # Claude Fable 5 (claude-fable-5) is deliberately absent from the defaults: the top Claude tier
-# is usually the MAIN LOOP itself, not a dispatched worker, and it prices at twice Opus 5
-# ($10/$50 vs $5/$25). This is a cost / guardrail / main-loop policy choice, NOT a capability
-# verdict — AA calls Opus 5 (61) and Fable 5 (60) "effectively tied" on the Intelligence Index
-# (2026-07-24) and Epoch AI ranks them the other way, but Opus 5 leads AA-Briefcase by 146 Elo
-# and GDPval-AA v2 by 114 Elo at 20% lower cost per task. Fable 5 does keep the lead on factual
-# breadth (AA-Omniscience), so name it explicitly for recall-heavy consults. If you want
+# is usually the MAIN LOOP itself, not a dispatched worker, and it prices at twice Opus 5.
+# This is a cost / guardrail / main-loop policy choice, NOT a capability verdict — AA and
+# Epoch AI disagree on which of the two leads general intelligence and call it effectively a
+# tie, while Opus 5 leads clearly on agentic knowledge work at a lower cost per task. Fable 5
+# does keep the lead on factual breadth, so name it explicitly for recall-heavy consults. If you want
 # to route to it anyway, pick it in the configurator or set e.g.
 #   taste-final: claude claude-fable-5 high
 # in ~/.omnilane/routing.local.yaml.

package/scripts/dispatch.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 # omnilane dispatch — one routing table, any harness.
 #
 # Usage:
-#   dispatch.sh [--background] [--dry-run] [--mode advise|work] [--workdir DIR]
+#   dispatch.sh [--background] [--dry-run] [--mode advise|work|sysops] [--workdir DIR]
 #               [--vendor V] [--model M] [--effort E] [--timeout SECONDS]
 #               [--job-timeout SECONDS] LANE "TASK TEXT"
 #   dispatch.sh [--json] --list [--json]
@@ -50,7 +50,11 @@ flags:
   --background           run in the background and print the JOB_ID
   --dry-run              print the fully resolved dispatch plan and stop
                          before any provider call or job state
-  --mode advise|work     advise (read-only, default) or work (may edit files)
+  --mode advise|work|sysops
+                         advise (read-only, default), work (may edit files),
+                         or sysops (work without the vendor sandbox, for
+                         service operations like launchctl — codex only;
+                         other vendors treat it as work)
   --workdir DIR          working directory handed to the vendor CLI
   --vendor V             pin one configured vendor (codex|claude|grok|gemini|kimi|qwen|opencode|openrouter|deepseek|zai|mistral|groq|cerebras)
   --model M              override the routed model
@@ -124,7 +128,7 @@ print_dry_run_plan() {
   local background=no task_source=argument write_worktree=no job_timeout=disabled
   [[ "$BACKGROUND" -eq 1 ]] && background=yes
   [[ "$TASK" == "-" ]] && task_source=stdin
-  [[ "$MODE" == "work" ]] && write_worktree=yes
+  [[ "$MODE" == "work" || "$MODE" == "sysops" ]] && write_worktree=yes
   [[ -n "$JOB_TIMEOUT" ]] && job_timeout="$JOB_TIMEOUT"
   printf 'dry_run=yes\n'
   print_dry_run_value lane "$LANE"
@@ -487,7 +491,7 @@ LANE="$1"
 TASK="$2"
 [[ "$LANE" =~ ^[a-z][a-z0-9-]*$ ]] || { echo "omnilane: invalid lane name" >&2; exit 2; }
 # A typo like --mode advice must not fall through to the write-enabled branch.
-[[ "$MODE" == "advise" || "$MODE" == "work" ]] || { echo "omnilane: invalid --mode (advise|work)" >&2; exit 2; }
+[[ "$MODE" == "advise" || "$MODE" == "work" || "$MODE" == "sysops" ]] || { echo "omnilane: invalid --mode (advise|work|sysops)" >&2; exit 2; }
 if [[ -n "$OVERRIDE_VENDOR" ]] &&
    ! [[ "$OVERRIDE_VENDOR" =~ ^(${OMNILANE_OVERRIDE_VENDOR_ALT})$ ]]; then
   echo "omnilane: invalid vendor (${OMNILANE_OVERRIDE_VENDOR_ALT})" >&2
@@ -567,7 +571,7 @@ fi
 [[ -n "$JOB_TIMEOUT" ]] || JOB_TIMEOUT="${OMNILANE_JOB_TIMEOUT:-}"
 CODEX_NONGIT_WORK=0
 CODEX_NONGIT_AUTO_JOB_TIMEOUT=0
-if [[ "$VENDOR" == "codex" && "$MODE" == "work" ]]; then
+if [[ "$VENDOR" == "codex" && ( "$MODE" == "work" || "$MODE" == "sysops" ) ]]; then
   # The target directory is authoritative. Caller-supplied GIT_* state must not
   # redirect or corrupt discovery, so probe with a minimal clean environment.
   GIT_WORKTREE_STATE="$(env -i PATH="$PATH" HOME="${HOME:-}" \

package/scripts/runners/run-codex.sh

@@ -3,6 +3,9 @@ set -euo pipefail
 # omnilane runner: OpenAI Codex CLI
 # Usage: run-codex.sh MODE WORKDIR MODEL EFFORT PROMPT_FILE OUTPUT_FILE
 #   MODE = advise (read-only, ephemeral) | work (may edit files in WORKDIR)
+#          | sysops (work minus the Seatbelt sandbox: service operations like
+#            launchctl are denied under workspace-write, so sysops runs with
+#            -s danger-full-access; explicit per-dispatch opt-in only)
 
 source "$(dirname "${BASH_SOURCE[0]}")/../lib/common.sh"
 
@@ -17,6 +20,8 @@ ARGS=(exec -m "$MODEL" -o "${OUTPUT_FILE}.tmp" --skip-git-repo-check)
 [[ -n "$EFFORT" && "$EFFORT" != "-" ]] && ARGS+=(-c "model_reasoning_effort=\"$EFFORT\"")
 if [[ "$MODE" == "advise" ]]; then
   ARGS+=(--ephemeral -s read-only)
+elif [[ "$MODE" == "sysops" ]]; then
+  ARGS+=(-s danger-full-access)
 else
   ARGS+=(-s workspace-write)
 fi