sneakoscope 1.18.14 → 1.20.2

package/README.md

@@ -16,7 +16,13 @@ Set up this agent project with Sneakoscope Codex. Use [[mandarange/Sneakoscope-C
 
 ## Current Release
 
-SKS **1.18.14** is the Zellij-only interactive runtime release: actual Codex CLI config-load truth, fake Codex EPERM fixtures, doctor readiness matrix proof, `sks mad repair-config`, safer project-local config splitting, Codex 0.135 compatibility gates, and official Fast mode CLI override proof are wired into release checks. Doctor now refuses Ready yes without Codex config-load evidence, MAD blocks launch before unreadable config can crash Codex, and interactive MAD/lane UI requires Zellij with no removed-runtime fallback.
+SKS **1.20.2** is a stabilization patch that closes the enforcement/integration/execution layers on top of the 1.20.1 infrastructure: a **Mutation Guard** routes genuinely-risky global/config/permission/package mutations through the Requested-Scope Contract + Mutation Ledger (`safety:mutation-callsite-coverage` fails any unguarded, unallowlisted risky call site); `release:check:dynamic:execute` turns the change-aware planner into a real **caching gate runner** (schema v2, real/heavy gates deferred to `release:real-check`, dynamic-only cannot authorize publish); the **Core Skill** deployed snapshot is now read by the route runtime and recorded in `agent-proof-evidence.json` (`selected_core_skill`), with promotions written to the mutation ledger; and `sks doctor` exposes an explicit **`zellij_readiness`** block (`zellij:doctor-readiness`). See `docs/dynamic-release-pipeline.md`.
+
+SKS **1.20.1** introduces the **SKS Core Skill Engine** — a SkillOpt-style self-evolving skill layer — while locking the harness into a deploy-ready stable build. Skills are the agent's *external, versioned state* (Core Skill Cards): an optimizer proposes **bounded** add/delete/replace edits to a single skill document under a **textual edit budget**, edits are accepted **only on strict held-out improvement**, rejected edits are buffered so they are never retried, and the **deployed snapshot is immutable**. Critically, the optimizer runs only in training/evaluation — the **deployment/inference path reads the deployed snapshot and never makes an extra model call**, and a skill patch can never mutate code/config/package/global files.
+
+1.20.1 also adds a **Requested-Scope Contract + Mutation Ledger** so SKS performs **no side effect the user did not request** (deny-by-default; global/destructive mutations require explicit `--yes`/env opt-in and a backup or no-op reason), and a **dynamic, risk-based release pipeline** (`release:gate-planner` builds `release-gates.json`; `release:check:dynamic` runs only P0 always-on gates plus gates whose files changed; `release:gate-budget` reports the slowest gates) so unrelated heavy gates are skipped during incremental checks while publish never skips a required gate.
+
+It carries forward the 1.19.x hardening unchanged: legacy 1.18.x/1.19.x→1.20.1 **zero-break upgrade** (user `model`/`service_tier`/`model_reasoning_effort` and user-disabled Codex App flags never overwritten; existing skill cards preserved), the **migration transaction journal** (`.sneakoscope/reports/migration-1.20.1-journal.jsonl`), **Zellij launch-command truth** + real-session **heartbeat-timeout blocker** + the redesigned **Zellij lane UI**, **packlist/publish-performance** gates, a **postinstall safe-side-effects** gate, and the **TS source-of-truth / Rust optional-accelerator** boundary (publish never compiles Rust). `sks zellij status`/`repair` inspects the Zellij runtime without auto-installing anything.
 
 ```bash
 sks mad-sks plan --target-root <path> --json
@@ -243,7 +249,7 @@ Install Zellij from [zellij.dev](https://zellij.dev/documentation/installation.h
 brew install zellij
 ```
 
-The default `sks` runtime checks npm for newer `sneakoscope` and `@openai/codex` versions before opening the interactive runtime. `sks --mad` also checks dependencies, requires Zellij for interactive MAD/lane UI, and prints only the session, gate, attach, and blocker details needed to act.
+The default `sks` runtime checks npm for newer `sneakoscope` and `@openai/codex` versions before opening the interactive runtime. `npm i -g sneakoscope` runs a safe bootstrap/readiness pass; use `sks bootstrap --yes`, `sks deps check --yes`, or `sks --mad --yes` to install or repair Codex CLI/Zellij when Homebrew is available. `sks --mad` requires Zellij for interactive MAD/lane UI and prints the session, gate, attach command, blockers, and labeled Zellij stderr/stdout details needed to act.
 
 ## Installation
 
@@ -314,7 +320,7 @@ sks --version
 
 ```sh
 sks bootstrap
-sks deps check
+sks deps check --yes
 sks codex-app check
 sks doctor --fix
 sks fix-path
@@ -344,17 +350,24 @@ sks
 
 Bare `sks` can also prompt for codex-lb auth; SKS stores the base URL/key in `~/.codex/sks-codex-lb.env`, writes the codex-lb Codex CLI / IDE Extension provider block into `~/.codex/config.toml` for Codex App routing, loads the provider env key for interactive launches, and syncs the macOS user launch environment so the Codex App can see `CODEX_LB_API_KEY` after restart. If the provider block disappears but the stored env file is still recoverable, bare `sks`, npm postinstall upgrades, `sks doctor --fix`, and `sks codex-lb repair` restore it with `env_key = "CODEX_LB_API_KEY"`, `supports_websockets = true`, and `requires_openai_auth = false`; imagegen checks may record this provider as configured codex-lb routing, but it is not accepted as official Codex App `$imagegen` evidence. If an older SKS release left the codex-lb dashboard key only in the shared Codex `auth.json` login cache, SKS migrates that key back into `~/.codex/sks-codex-lb.env` when a codex-lb provider or env base URL is already recoverable. It does not rewrite the shared Codex `auth.json` login cache by default; set `SKS_CODEX_LB_SYNC_CODEX_LOGIN=1` only if you intentionally want the old API-key login-cache behavior. When codex-lb is active, SKS opens a fresh `sks-codex-lb-*` Zellij session and sweeps older detached codex-lb sessions for the same repo before launch so stale Responses API chains are not reused. Configured launch paths run a response-chain health check. `previous_response_not_found` is treated as a stateless-LB warning and keeps codex-lb active. Hard failures are surfaced to the user; SKS only bypasses codex-lb when the user chooses OAuth fallback or `SKS_CODEX_LB_AUTOBYPASS=1` is set.
 
-If codex-lb provider auth drifts after launch/reinstall, run `sks doctor --fix` or `sks codex-lb repair`; to replace it, run `sks codex-lb reconfigure --host <domain> --api-key <key>`.
+If codex-lb provider auth drifts after launch/reinstall, run `sks doctor --fix` or `sks codex-lb repair`. To **swap only the API key** at any time (without re-typing the host — it reuses the stored base URL), run:
 
-### Switching back to ChatGPT OAuth (releasing codex-lb)
+```sh
+sks codex-lb set-key --api-key-stdin   # or: sks codex-lb set-key --api-key "sk-clb-..."
+```
+
+(To also change the host, use `sks codex-lb reconfigure --host <domain> --api-key <key>`.)
 
-If you want to hand control back to your official ChatGPT account login after codex-lb has been reconciled, use `sks codex-lb release`:
+### Switching auth mode: codex-lb ↔ ChatGPT OAuth
+
+Switch between the codex-lb API key and your ChatGPT OAuth login at any time with intent-named commands:
 
 ```sh
-sks codex-lb release
+sks codex-lb use-oauth      # hand control back to ChatGPT OAuth
+sks codex-lb use-codex-lb   # switch back to the codex-lb API key
 ```
 
-This restores `~/.codex/auth.chatgpt-backup.json` (written by the 0.9.3 auto-reconcile) to `~/.codex/auth.json` and unsets `model_provider = "codex-lb"` so Codex CLI/App falls back to ChatGPT OAuth. To re-engage codex-lb afterward, run `sks codex-lb repair`.
+`use-oauth` restores `~/.codex/auth.chatgpt-backup.json` (written by auto-reconcile) to `~/.codex/auth.json` and unsets `model_provider = "codex-lb"` so Codex CLI/App falls back to ChatGPT OAuth; if no saved OAuth login exists it points you to `codex login`. `use-codex-lb` re-selects and re-syncs codex-lb. (The older verbs `sks codex-lb release` / `repair` remain as aliases.)
 
 Flags:
 
@@ -423,6 +436,25 @@ Manual fan-out syntax:
 
 Effort is assigned per agent. Simple read-only/docs slices can run low, ordinary tooling and lease mapping use medium, safety/DB/schema/release lanes use high, and frontier/forensic research can escalate to xhigh. If a lease conflict, schema failure, proof blocker, DB risk, or release risk appears, the parent can escalate that lane while keeping unrelated lanes cheaper and faster.
 
+### Naruto Shadow Clone Swarm (`$Naruto`)
+
+`$Naruto` (影分身 / Kage Bunshin no Jutsu) is a high-scale mode of the native agent kernel for broad fan-out work — codebase-wide sweeps, parallel drafting, large audits. It lifts the standard 20-agent ceiling to **up to 100 clone sessions** (only for this route; every other route keeps the 20 cap).
+
+```sh
+sks naruto run "sweep the codebase for TODO comments and summarize"
+sks naruto run "draft a unit test for every module" --clones 100
+sks naruto run "demo" --clones 24 --backend fake --json   # fast, no Codex calls
+sks naruto status
+```
+
+Aliases: `$ShadowClone`, `$Kagebunshin`, and the CLI flag `sks --naruto`.
+
+- **System-aware concurrency:** `--clones N` is the total work fan-out, but `$Naruto` never spawns the whole count at once. Live concurrency is throttled to a host-safe number derived from CPU cores and free memory (heavier cap for real `codex-exec` workers, tighter packing for in-process `fake`). So `--clones 100` on a small host still processes all 100 work units while only running a safe handful at a time; the run reports when it throttles. Override with `SKS_NARUTO_MAX_CONCURRENCY=<n>`.
+- **Dynamic per-clone effort (like Team):** truly simple / no-tool work runs at `low`, any tool use lifts a clone to `medium` (never high/xhigh), and every clone runs in fast service tier.
+- **Safe parallel writes:** clones coordinate through the same lease-based patch-swarm (merge coordinator + conflict rebase + transaction journal) as Team.
+
+See [docs/naruto.md](docs/naruto.md) for the full reference.
+
 ### QA, Computer Use, Goal, Research, DB, Wiki, GX
 
 ```sh
@@ -584,7 +616,7 @@ First install:
 ```sh
 npm i -g sneakoscope
 sks bootstrap
-sks deps check
+sks deps check --yes
 sks codex-app check
 sks selftest --mock
 ```
@@ -699,7 +731,7 @@ npm run release:check
 npm run publish:dry
 ```
 
-`release:check` runs the 1.18.14 Zellij-only closure DAG, writes a source digest stamp under `.sneakoscope/reports/`, then refreshes release readiness so publish commands can verify the same stamp. The DAG preserves the 1.18 baseline gates and adds patch swarm runtime truth, transaction journaling, serial conflict rebase, strict strategy-to-patch proof, rollback command proof, Native CLI Session Swarm 5/10/20-process proof, Real Worker Backend Router proof, Codex child overlap proof, model-authored patch-envelope separation, Zellij layout/pane/screen proof, no-subagent-scaling proof, Fast mode default/worker/Codex/MAD propagation proof, Appshots attachment provenance, MCP runtime overlap evidence, Codex 0.134/0.135 runner truth, task graph expansion, schema-bound follow-up work, actual Agent/Team/Research/QA route blackboxes, scheduler proof hardening, Source Intelligence propagation, and Goal mode propagation checks. Broader live gates remain explicit scripts such as `release:real-check`; real Codex patch smoke, real Codex parallel worker proof, and real Zellij proof are optional unless their `SKS_REQUIRE_REAL_*` or `SKS_REQUIRE_ZELLIJ=1` environment variables are set. Generate the human-readable registry with `sks features inventory --write-docs`. Plain `npm publish` uses the `latest` dist-tag. npm's `prepublishOnly` verifies the fresh release stamp instead of rerunning the full gate, and `prepack` only rebuilds `dist`; publish no longer repeats the expensive release suite during packaging. `npm run publish:dry` remains the explicit dry-run helper.
+`release:check` runs the 1.19.0 Zellij dependency-repair closure DAG, writes a source digest stamp under `.sneakoscope/reports/`, then refreshes release readiness so publish commands can verify the same stamp. The DAG preserves the 1.18 baseline gates and adds patch swarm runtime truth, transaction journaling, serial conflict rebase, strict strategy-to-patch proof, rollback command proof, Native CLI Session Swarm 5/10/20-process proof, Real Worker Backend Router proof, Codex child overlap proof, model-authored patch-envelope separation, Zellij layout/pane/screen proof, no-subagent-scaling proof, Fast mode default/worker/Codex/MAD propagation proof, Appshots attachment provenance, MCP runtime overlap evidence, Codex 0.134/0.135 runner truth, task graph expansion, schema-bound follow-up work, actual Agent/Team/Research/QA route blackboxes, scheduler proof hardening, Source Intelligence propagation, and Goal mode propagation checks. Broader live gates remain explicit scripts such as `release:real-check`; real Codex patch smoke, real Codex parallel worker proof, and real Zellij proof are optional unless their `SKS_REQUIRE_REAL_*` or `SKS_REQUIRE_ZELLIJ=1` environment variables are set. Generate the human-readable registry with `sks features inventory --write-docs`. Plain `npm publish` uses the `latest` dist-tag. npm's `prepublishOnly` verifies the fresh release stamp instead of rerunning the full gate, and `prepack` only rebuilds `dist`; publish no longer repeats the expensive release suite during packaging. `npm run publish:dry` remains the explicit dry-run helper.
 
 Version bumps are manual. Run `sks versioning bump` only when preparing release metadata; SKS will not create `.git/hooks/pre-commit` or auto-bump during ordinary commits.
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "1.18.14"
+version = "1.20.2"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "1.18.14"
+version = "1.20.2"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 1.18.14"),
+        Some("--version") => println!("sks-rs 1.20.2"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/.sks-build-stamp.json

@@ -1,8 +1,8 @@
 {
   "schema": "sks.dist-build-stamp.v1",
   "package_name": "sneakoscope",
-  "package_version": "1.18.14",
-  "source_digest": "b13a96880fa5b57ba4b3649ac5bedbcca941d871f92f9a4bf396ab20fd9c8b4b",
-  "source_file_count": 1679,
-  "built_at_source_time": 1780051095178
+  "package_version": "1.20.2",
+  "source_digest": "d1ccddca4a2c7be54d3129554ea90f8d07efb093592c1e269399fa0e5b92d3ba",
+  "source_file_count": 1740,
+  "built_at_source_time": 1780235613612
 }

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '1.18.14';
+const FAST_PACKAGE_VERSION = '1.20.2';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--agent' && args[1] === 'worker') {

package/dist/build-manifest.json

@@ -1,16 +1,16 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "1.18.14",
-  "package_version": "1.18.14",
+  "version": "1.20.2",
+  "package_version": "1.20.2",
   "typescript": true,
-  "mjs_runtime_files": 1,
-  "compiled_file_count": 972,
-  "compiled_js_count": 486,
-  "compiled_dts_count": 486,
-  "source_digest": "b13a96880fa5b57ba4b3649ac5bedbcca941d871f92f9a4bf396ab20fd9c8b4b",
-  "source_file_count": 1679,
-  "source_files_hash": "737317372a19030a70f432942ce650900c05270a2a1d1c49281d135a1b15e66c",
-  "source_list_hash": "737317372a19030a70f432942ce650900c05270a2a1d1c49281d135a1b15e66c",
+  "mjs_runtime_files": 0,
+  "compiled_file_count": 1016,
+  "compiled_js_count": 508,
+  "compiled_dts_count": 508,
+  "source_digest": "d1ccddca4a2c7be54d3129554ea90f8d07efb093592c1e269399fa0e5b92d3ba",
+  "source_file_count": 1740,
+  "source_files_hash": "7484278e30e61755c2158548e697943af09e5a59de7c6b60018a0ac57848c6ec",
+  "source_list_hash": "7484278e30e61755c2158548e697943af09e5a59de7c6b60018a0ac57848c6ec",
   "src_mjs_runtime_files": 0,
   "dist_stamp_schema": "sks.dist-build-stamp.v1",
   "files": [
@@ -186,6 +186,8 @@
     "commands/wiki.js",
     "commands/zellij-lane.d.ts",
     "commands/zellij-lane.js",
+    "commands/zellij.d.ts",
+    "commands/zellij.js",
     "core/agents/agent-central-ledger.d.ts",
     "core/agents/agent-central-ledger.js",
     "core/agents/agent-cleanup-executor.d.ts",
@@ -456,6 +458,8 @@
     "core/commands/image-ux-review-command.js",
     "core/commands/mad-sks-command.d.ts",
     "core/commands/mad-sks-command.js",
+    "core/commands/naruto-command.d.ts",
+    "core/commands/naruto-command.js",
     "core/commands/paths-command.d.ts",
     "core/commands/paths-command.js",
     "core/commands/perf-command.d.ts",
@@ -614,6 +618,8 @@
     "core/image-ux-review.js",
     "core/image-ux-review/callout-extraction.d.ts",
     "core/image-ux-review/callout-extraction.js",
+    "core/image-ux-review/codex-app-generated-image-discovery.d.ts",
+    "core/image-ux-review/codex-app-generated-image-discovery.js",
     "core/image-ux-review/fix-loop.d.ts",
     "core/image-ux-review/fix-loop.js",
     "core/image-ux-review/fix-task-planner.d.ts",
@@ -628,6 +634,8 @@
     "core/image-ux-review/recapture.js",
     "core/imagegen/gpt-image-2-request-validator.d.ts",
     "core/imagegen/gpt-image-2-request-validator.js",
+    "core/imagegen/imagegen-auth-readiness.d.ts",
+    "core/imagegen/imagegen-auth-readiness.js",
     "core/imagegen/imagegen-capability.d.ts",
     "core/imagegen/imagegen-capability.js",
     "core/init.d.ts",
@@ -688,6 +696,8 @@
     "core/memory-governor.js",
     "core/memory-summary.d.ts",
     "core/memory-summary.js",
+    "core/migration/migration-transaction-journal.d.ts",
+    "core/migration/migration-transaction-journal.js",
     "core/mission.d.ts",
     "core/mission.js",
     "core/mistake-memory.d.ts",
@@ -827,6 +837,10 @@
     "core/recallpulse.js",
     "core/release-parallel-full-coverage.d.ts",
     "core/release-parallel-full-coverage.js",
+    "core/release/gate-cache.d.ts",
+    "core/release/gate-cache.js",
+    "core/release/gate-manifest.d.ts",
+    "core/release/gate-manifest.js",
     "core/reporting/markdown-table.d.ts",
     "core/reporting/markdown-table.js",
     "core/research.d.ts",
@@ -839,12 +853,40 @@
     "core/routes.js",
     "core/rust-accelerator.d.ts",
     "core/rust-accelerator.js",
+    "core/safety/mutation-guard.d.ts",
+    "core/safety/mutation-guard.js",
+    "core/safety/mutation-ledger.d.ts",
+    "core/safety/mutation-ledger.js",
+    "core/safety/requested-scope-contract.d.ts",
+    "core/safety/requested-scope-contract.js",
     "core/secret-redaction.d.ts",
     "core/secret-redaction.js",
     "core/session/project-namespace.d.ts",
     "core/session/project-namespace.js",
     "core/skill-forge.d.ts",
     "core/skill-forge.js",
+    "core/skills/core-rollout-trace.d.ts",
+    "core/skills/core-rollout-trace.js",
+    "core/skills/core-skill-card.d.ts",
+    "core/skills/core-skill-card.js",
+    "core/skills/core-skill-deployment.d.ts",
+    "core/skills/core-skill-deployment.js",
+    "core/skills/core-skill-epoch.d.ts",
+    "core/skills/core-skill-epoch.js",
+    "core/skills/core-skill-patch-apply.d.ts",
+    "core/skills/core-skill-patch-apply.js",
+    "core/skills/core-skill-patch.d.ts",
+    "core/skills/core-skill-patch.js",
+    "core/skills/core-skill-runtime.d.ts",
+    "core/skills/core-skill-runtime.js",
+    "core/skills/core-skill-scorer.d.ts",
+    "core/skills/core-skill-scorer.js",
+    "core/skills/core-skill-types.d.ts",
+    "core/skills/core-skill-types.js",
+    "core/skills/core-skill-validation.d.ts",
+    "core/skills/core-skill-validation.js",
+    "core/skills/rejected-skill-patch-buffer.d.ts",
+    "core/skills/rejected-skill-patch-buffer.js",
     "core/source-intelligence/appshots-evidence.d.ts",
     "core/source-intelligence/appshots-evidence.js",
     "core/source-intelligence/codex-history-search.d.ts",
@@ -873,6 +915,8 @@
     "core/team-review-policy.js",
     "core/triwiki-attention.d.ts",
     "core/triwiki-attention.js",
+    "core/triwiki-runtime.d.ts",
+    "core/triwiki-runtime.js",
     "core/triwiki-wrongness/avoidance-rules.d.ts",
     "core/triwiki-wrongness/avoidance-rules.js",
     "core/triwiki-wrongness/image-wrongness.d.ts",
@@ -985,7 +1029,6 @@
     "core/zellij/zellij-pane-proof.js",
     "core/zellij/zellij-screen-proof.d.ts",
     "core/zellij/zellij-screen-proof.js",
-    "scripts/codex-config-load-probe.mjs",
     "scripts/release-parallel-check.d.ts",
     "scripts/release-parallel-check.js",
     "vendor/openai-codex/latest/hooks/permission-request.command.input.schema.json",

package/dist/cli/command-registry.d.ts

@@ -50,6 +50,7 @@ export declare const COMMANDS: {
     hermes: CommandEntry;
     tmux: CommandEntry;
     'zellij-lane': CommandEntry;
+    zellij: CommandEntry;
     mad: CommandEntry;
     'mad-sks': CommandEntry;
     'auto-review': CommandEntry;
@@ -62,6 +63,7 @@ export declare const COMMANDS: {
     dfix: CommandEntry;
     team: CommandEntry;
     agent: CommandEntry;
+    naruto: CommandEntry;
     'qa-loop': CommandEntry;
     research: CommandEntry;
     autoresearch: CommandEntry;
@@ -136,6 +138,7 @@ export declare const TYPED_COMMANDS: {
     hermes: CommandEntry;
     tmux: CommandEntry;
     'zellij-lane': CommandEntry;
+    zellij: CommandEntry;
     mad: CommandEntry;
     'mad-sks': CommandEntry;
     'auto-review': CommandEntry;
@@ -148,6 +151,7 @@ export declare const TYPED_COMMANDS: {
     dfix: CommandEntry;
     team: CommandEntry;
     agent: CommandEntry;
+    naruto: CommandEntry;
     'qa-loop': CommandEntry;
     research: CommandEntry;
     autoresearch: CommandEntry;
@@ -201,6 +205,7 @@ export declare const COMMAND_ALIASES: {
     readonly '--MAD': "mad";
     readonly '--mad-sks': "mad-sks";
     readonly '--agent': "agent";
+    readonly '--naruto': "naruto";
 };
 export type CommandName = Extract<keyof typeof COMMANDS, string>;
 export declare function commandNames(): CommandName[];

package/dist/cli/command-registry.js

@@ -103,6 +103,7 @@ export const COMMANDS = {
     hermes: entry('labs', 'Create Hermes Agent skill package', 'dist/commands/hermes.js', directCommand(() => import('../commands/hermes.js'), 'dist/commands/hermes.js')),
     tmux: entry('beta', 'Show removed-runtime migration notice', 'dist/commands/tmux.js', directCommand(() => import('../commands/tmux.js'), 'dist/commands/tmux.js')),
     'zellij-lane': entry('beta', 'Render a Zellij lane frame for SKS sessions', 'dist/commands/zellij-lane.js', directCommand(() => import('../commands/zellij-lane.js'), 'dist/commands/zellij-lane.js')),
+    zellij: entry('beta', 'Inspect Zellij runtime status and explain repair (no auto-install)', 'dist/commands/zellij.js', directCommand(() => import('../commands/zellij.js'), 'dist/commands/zellij.js')),
     mad: entry('beta', 'MAD-SKS Zellij permission launcher', 'dist/commands/mad-sks.js', directCommand(() => import('../commands/mad-sks.js'), 'dist/commands/mad-sks.js')),
     'mad-sks': entry('beta', 'MAD-SKS scoped permission modifier', 'dist/commands/mad-sks.js', directCommand(() => import('../commands/mad-sks.js'), 'dist/commands/mad-sks.js')),
     'auto-review': entry('beta', 'Manage auto-review profile', 'dist/commands/auto-review.js', directCommand(() => import('../commands/auto-review.js'), 'dist/commands/auto-review.js')),
@@ -115,6 +116,7 @@ export const COMMANDS = {
     dfix: entry('stable', 'Run DFix diagnose/plan/patch/verify loop', 'dist/core/commands/dfix-command.js', commandArgsCommand(() => import('../core/commands/dfix-command.js'), 'dfixCommand', 'dist/core/commands/dfix-command.js')),
     team: entry('beta', 'Create and observe Team missions', 'dist/core/commands/team-command.js', argsCommand(() => import('../core/commands/team-command.js'), 'team', 'dist/core/commands/team-command.js')),
     agent: entry('beta', 'Run native multi-session agent missions', 'dist/core/commands/agent-command.js', argsCommand(() => import('../core/commands/agent-command.js'), 'agentCommand', 'dist/core/commands/agent-command.js')),
+    naruto: entry('labs', 'Run $Naruto shadow-clone swarm (up to 100 parallel sessions)', 'dist/core/commands/naruto-command.js', argsCommand(() => import('../core/commands/naruto-command.js'), 'narutoCommand', 'dist/core/commands/naruto-command.js')),
     'qa-loop': entry('beta', 'Run QA loop missions', 'dist/core/commands/qa-loop-command.js', subcommand(() => import('../core/commands/qa-loop-command.js'), 'qaLoopCommand', 'dist/core/commands/qa-loop-command.js')),
     research: entry('labs', 'Run research missions', 'dist/core/commands/research-command.js', subcommand(() => import('../core/commands/research-command.js'), 'researchCommand', 'dist/core/commands/research-command.js')),
     autoresearch: entry('labs', 'Alias for research/autoresearch route', 'dist/core/commands/autoresearch-command.js', subcommand(() => import('../core/commands/autoresearch-command.js'), 'autoresearchCommand', 'dist/core/commands/autoresearch-command.js', 'status')),
@@ -168,7 +170,8 @@ export const COMMAND_ALIASES = {
     '--mad': 'mad',
     '--MAD': 'mad',
     '--mad-sks': 'mad-sks',
-    '--agent': 'agent'
+    '--agent': 'agent',
+    '--naruto': 'naruto'
 };
 export function commandNames() {
     return Object.keys(COMMANDS).sort();

package/dist/cli/install-helpers.d.ts

@@ -64,6 +64,7 @@ export type ConfigureCodexLbResult = {
     config_path?: string;
     env_path?: string;
     metadata_path?: string;
+    backup_path?: string | null;
     base_url?: string;
     env_key?: string;
     keychain?: Record<string, unknown>;
@@ -80,7 +81,7 @@ export type ConfigureCodexLbResult = {
     repair?: CodexLbAuthInstallResult;
 } & Partial<CodexLbStatusSnapshot>;
 export type CodexLbLaunchPromptResult = ConfigureCodexLbResult;
-export declare function postinstall({ bootstrap }: any): Promise<void>;
+export declare function postinstall({ bootstrap, args }: any): Promise<void>;
 export declare function postinstallBootstrapDecision(root: any): Promise<{
     run: boolean;
     reason: string;
@@ -283,23 +284,72 @@ export declare function maybePromptCodexLbSetupForLaunch(args?: any, opts?: any)
     auth_summary: string;
     status: string;
 }>;
+export declare function upsertCodexLbConfig(text: any | undefined, baseUrl: any, selectDefault?: boolean): string;
 export declare function ensureGlobalCodexFastModeDuringInstall(opts?: any): Promise<{
     status: string;
     reason: string;
     config_path?: never;
+    backup_path?: never;
+    parse_smoke?: never;
     error?: never;
 } | {
     status: string;
     config_path: any;
+    backup_path: string | null;
+    parse_smoke: {
+        ok: boolean;
+        unterminated_multiline_string: boolean;
+        invalid_table_header: string | null;
+    };
+    reason?: never;
+    error?: never;
+} | {
+    status: string;
+    config_path: any;
+    reason?: never;
+    backup_path?: never;
+    parse_smoke?: never;
+    error?: never;
+} | {
+    status: string;
+    config_path: any;
+    parse_smoke: {
+        ok: boolean;
+        unterminated_multiline_string: boolean;
+        invalid_table_header: string | null;
+    };
+    reason?: never;
+    backup_path?: never;
+    error?: never;
+} | {
+    status: string;
+    config_path: any;
+    backup_path: string | null;
     reason?: never;
+    parse_smoke?: never;
     error?: never;
 } | {
     status: string;
     config_path: any;
     error: any;
     reason?: never;
+    backup_path?: never;
+    parse_smoke?: never;
 }>;
 export declare function normalizeCodexFastModeUiConfig(text?: any): string;
+export declare function safeWriteCodexConfigToml(configPath: string, current: string, next: string, tag?: string): Promise<{
+    ok: boolean;
+    status: string;
+    config_path: string;
+    backup_path: string | null;
+    changed?: never;
+} | {
+    ok: boolean;
+    status: string;
+    config_path: string;
+    backup_path: string | null;
+    changed: boolean;
+}>;
 export declare function ensureSksCommandDuringInstall(opts?: any): Promise<SksPostinstallShimResult>;
 export declare function selftestSksShimRepair(): Promise<{
     ok: boolean;
@@ -346,6 +396,7 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         bin?: never;
         version?: never;
         error?: never;
+        command?: never;
         hint?: never;
     } | {
         status: string;
@@ -353,6 +404,7 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         version: string | null;
         reason?: never;
         error?: never;
+        command?: never;
         hint?: never;
     } | {
         status: string;
@@ -360,6 +412,15 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         reason?: never;
         bin?: never;
         version?: never;
+        command?: never;
+        hint?: never;
+    } | {
+        status: string;
+        command: string;
+        error: string;
+        reason?: never;
+        bin?: never;
+        version?: never;
         hint?: never;
     } | {
         status: string;
@@ -368,6 +429,7 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
         hint: string | null;
         reason?: never;
         error?: never;
+        command?: never;
     };
     zellij: {
         ok: boolean;
@@ -401,15 +463,87 @@ export declare function ensureRelatedCliTools(args?: any): Promise<{
             reason: string;
         };
         install_hint: string | null;
-        error: string | null;
+        error: any;
+    };
+}>;
+export declare function ensureMadLaunchDependencies(args?: any): Promise<{
+    ready: boolean;
+    actions: {
+        target: string;
+        status: string;
+        command: any;
+        error: any;
+        repair: {
+            target: string;
+            status: string;
+            bin: "zellij";
+            version: string | null;
+            command?: never;
+            error?: never;
+        } | {
+            target: string;
+            status: string;
+            command: string;
+            error: string | null;
+            bin?: never;
+            version?: never;
+        } | {
+            target: string;
+            status: string;
+            command: string;
+            bin: "zellij";
+            version: string | null;
+            error?: never;
+        } | {
+            target: string;
+            status: string;
+            reason: string;
+        };
+    }[];
+    status: {
+        zellij: {
+            ok: boolean;
+            status: "blocked" | "ok" | "missing" | "too_old";
+            version: string | null;
+            min_version: string;
+            repair: {
+                target: string;
+                status: string;
+                bin: "zellij";
+                version: string | null;
+                command?: never;
+                error?: never;
+            } | {
+                target: string;
+                status: string;
+                command: string;
+                error: string | null;
+                bin?: never;
+                version?: never;
+            } | {
+                target: string;
+                status: string;
+                command: string;
+                bin: "zellij";
+                version: string | null;
+                error?: never;
+            } | {
+                target: string;
+                status: string;
+                reason: string;
+            };
+            install_hint: string | null;
+        };
     };
 }>;
-export declare function ensureCodexCliTool({ skip }?: any): Promise<{
+export declare function formatMadLaunchDependencyAction(action?: any): string;
+export declare function ensureCodexCliTool({ skip, args }?: any): Promise<{
     status: string;
     reason: string;
     bin?: never;
     version?: never;
     error?: never;
+    command?: never;
     hint?: never;
 } | {
     status: string;
@@ -417,6 +551,7 @@ export declare function ensureCodexCliTool({ skip }?: any): Promise<{
     version: string | null;
     reason?: never;
     error?: never;
+    command?: never;
     hint?: never;
 } | {
     status: string;
@@ -424,6 +559,15 @@ export declare function ensureCodexCliTool({ skip }?: any): Promise<{
     reason?: never;
     bin?: never;
     version?: never;
+    command?: never;
+    hint?: never;
+} | {
+    status: string;
+    command: string;
+    error: string;
+    reason?: never;
+    bin?: never;
+    version?: never;
     hint?: never;
 } | {
     status: string;
@@ -432,6 +576,7 @@ export declare function ensureCodexCliTool({ skip }?: any): Promise<{
     hint: string | null;
     reason?: never;
     error?: never;
+    command?: never;
 }>;
 export declare function ensureZellijCliTool(args?: any, opts?: any): Promise<{
     target: string;