sneakoscope 1.21.6 → 1.21.9

package/README.md

@@ -16,40 +16,31 @@ Set up this agent project with Sneakoscope Codex. Use [[mandarange/Sneakoscope-C
 
 ## Current Release
 
-SKS **1.21.6** promotes OpenAI Codex CLI `rust-v0.136.0` as the current compatibility baseline. The release matrix tracks 0.136 session archive/unarchive, app-server `--stdio`, resumed-turn/status behavior, `CODEX_API_KEY` remote registration, short-lived remote-control tokens, elevated Windows sandbox setup, feature-gated image-generation extension support, ChatGPT auth refresh handling, command-safety hardening, sandbox cleanup, Bedrock region fallback, and rmcp 1.7.0 compatibility.
+SKS **1.21.9** is a Codex SDK Control Plane runtime patch. Native workers now use `@openai/codex-sdk` for thread/run/stream/schema execution while Zellij remains pane-level visual proof.
 
-This release also tightens the day-to-day operator path:
+What changed:
 
-- Zellij lane panes now surface the native worker session they are following, including per-slot worker status and stdout/stderr/heartbeat tails.
-- Native terminal drag-copy is the default in SKS-launched Zellij sessions; hover-pane mouse routing is opt-in with `SKS_ZELLIJ_MOUSE_MODE=1`.
-- Update prompts compare npm latest against an effective installed version that includes source, PATH, and global npm package metadata, so completed global updates stop being re-offered.
-- `sks doctor --fix` can remove duplicate global `sks`/`sneakoscope` npm installs while exempting the Sneakoscope source checkout.
+- `codex-sdk` is the default native agent backend for Team, QA, Research, Naruto, MAD-SKS, and direct agent runs.
+- Raw `codex exec` execution is removed from runtime fallback paths; explicit legacy requests are blocked with `legacy_codex_exec_runtime_removed`.
+- SDK runs write `codex-control-proof.json`, `codex-thread-registry.json`, `codex-sdk-events.jsonl`, and schema-validated worker results.
+- Zellij proof now links `pane_id`, `slot_id`, `generation_index`, `session_id`, and `sdk_thread_id`.
+- Release gates include `codex-sdk:*` capability, routing, structured output, event ledger, sandbox, thread registry, Zellij binding, pipeline, and smoke checks.
 
-It carries forward the 0.135-era routing/readiness fixes: mixed frustration plus explicit implementation prompts still route to `$Team`, bare `context7 mcp` no longer implies `$DB`, Git Actions readiness uses the `codex remote-control` command/version capability, and repeated substantive prompts prepare fresh Team/Research-style native sessions. Zellij lane, Naruto, terminal scrollback, MAD cockpit, Goal bridge, and Fast profile fixes remain in place.
-
-SKS **1.20.4** is a targeted `sks --mad` / codex-lb Zellij usability patch: when a background MAD Zellij session launches successfully, SKS now prints the exact `Attach with: ZELLIJ_SOCKET_DIR=... zellij attach ...` command so operators can enter the fresh session without manually reconstructing the socket namespace.
-
-SKS **1.20.3** added the macOS Zellij launch fallback and project-local Fast mode control. SKS supplies a short per-user `ZELLIJ_SOCKET_DIR` by default, caps generated session names safely, records `*_command_with_env` attach commands, and classifies `IPC socket path is too long` as `zellij_socket_path_too_long` instead of a generic launch failure. It also adds `sks fast-mode on|off|status|clear`, `$Fast-On`, `$Fast-Off`, and `$Fast-Mode`; saved project preferences are used only when no explicit `--fast`, `--no-fast`, or `--service-tier` flag is present. In 1.21.3 and newer, the explicit `on` action also restores Codex App/CLI Fast mode defaults in `~/.codex/config.toml` when they were disabled.
-
-It carries forward the **1.20.2** stabilization layer: **Mutation Guard** routes genuinely-risky global/config/permission/package mutations through the Requested-Scope Contract + Mutation Ledger (`safety:mutation-callsite-coverage` fails any unguarded, unallowlisted risky call site); `release:check:dynamic:execute` is the real **caching gate runner** (schema v2, real/heavy gates deferred to `release:real-check`, dynamic-only cannot authorize publish); the **Core Skill** deployed snapshot is read by the route runtime and recorded in `agent-proof-evidence.json` (`selected_core_skill`), with promotions written to the mutation ledger; and `sks doctor` exposes an explicit **`zellij_readiness`** block (`zellij:doctor-readiness`). See `docs/dynamic-release-pipeline.md`.
-
-SKS **1.20.1** introduces the **SKS Core Skill Engine** — a SkillOpt-style self-evolving skill layer — while locking the harness into a deploy-ready stable build. Skills are the agent's *external, versioned state* (Core Skill Cards): an optimizer proposes **bounded** add/delete/replace edits to a single skill document under a **textual edit budget**, edits are accepted **only on strict held-out improvement**, rejected edits are buffered so they are never retried, and the **deployed snapshot is immutable**. Critically, the optimizer runs only in training/evaluation — the **deployment/inference path reads the deployed snapshot and never makes an extra model call**, and a skill patch can never mutate code/config/package/global files.
-
-1.20.1 also adds a **Requested-Scope Contract + Mutation Ledger** so SKS performs **no side effect the user did not request** (deny-by-default; global/destructive mutations require explicit `--yes`/env opt-in and a backup or no-op reason), and a **dynamic, risk-based release pipeline** (`release:gate-planner` builds `release-gates.json`; `release:check:dynamic` runs only P0 always-on gates plus gates whose files changed; `release:gate-budget` reports the slowest gates) so unrelated heavy gates are skipped during incremental checks while publish never skips a required gate.
-
-It carries forward the 1.19.x hardening unchanged: legacy 1.18.x/1.19.x→1.20.1 **zero-break upgrade** (user `model`/`service_tier`/`model_reasoning_effort` and user-disabled Codex App flags never overwritten; existing skill cards preserved), the **migration transaction journal** (`.sneakoscope/reports/migration-1.20.1-journal.jsonl`), **Zellij launch-command truth** + real-session **heartbeat-timeout blocker** + the redesigned **Zellij lane UI**, **packlist/publish-performance** gates, a **postinstall safe-side-effects** gate, and the **TS source-of-truth / Rust optional-accelerator** boundary (publish never compiles Rust). `sks zellij status`/`repair` inspects the Zellij runtime without auto-installing anything.
-
-Core release checks:
+Quick checks:
 
 ```bash
-npm run codex:0.136-compat
-npm run zellij:lane-renderer
-npm run mad-sks:zellij-launch
-npm run release:readiness
-npm run release:check
+npm run typecheck
+npm run build
+npm run codex-sdk:capability
+npm run codex-sdk:backend-router
+npm run codex-sdk:structured-output
+npm run codex-sdk:event-stream-ledger
+npm run codex-sdk:thread-registry
+npm run codex-sdk:zellij-pane-binding
+npm run codex-sdk:all-pipelines
 ```
 
-Detailed release history lives in [CHANGELOG.md](CHANGELOG.md); every version-facing change should be recorded there before release. Current release gate status lives in [docs/release-readiness.md](docs/release-readiness.md).
+Broader release checks still live behind `npm run release:check`. Detailed release history is in [CHANGELOG.md](CHANGELOG.md), and release readiness is tracked in [docs/release-readiness.md](docs/release-readiness.md).
 
 ## Parallelism, UX, And Integrations
 
@@ -60,9 +51,9 @@ Detailed release history lives in [CHANGELOG.md](CHANGELOG.md); every version-fa
   SKS_NARUTO_MAX_CONCURRENCY=48 sks naruto run "sweep the test suite" --clones 48
   ```
 
-- **Zellij scrollback and copy.** SKS launches Codex panes with `--no-alt-screen`, so the terminal keeps the conversation transcript in scrollback. Zellij `mouse_mode` is off by default so normal mouse-drag text selection works for copy. Set `SKS_ZELLIJ_MOUSE_MODE=1` only when you prefer Zellij hover-pane wheel routing; in that mode some terminals require Shift-drag for native selection.
+- **Zellij scrollback and copy.** SKS launches Codex panes with `--no-alt-screen`, so the terminal keeps the conversation transcript in scrollback. Zellij `mouse_mode` is on by default so trackpad/wheel gestures scroll the conversation pane instead of recalling prompt history in the focused Codex input. Copy still uses `copy_command=pbcopy` and `copy_on_select=true`; hold Shift for terminal-native selection, or set `SKS_ZELLIJ_MOUSE_MODE=0` if you intentionally prefer native drag selection over hover-pane scrolling.
 
-- **Live MAD / Naruto cockpit lanes.** `sks --mad` starts a same-mission native agent swarm and opens the right-pane cockpit against that ledger. Lane panes follow per-slot worker artifacts such as `worker.stdout.log`, `worker.stderr.log`, and `worker-heartbeat.jsonl`, so fan-out work shows as live worker status instead of a static "Workers idle" panel. Tune MAD fan-out with `--mad-agents`, `--mad-swarm-work-items`, and `--mad-swarm-backend`; use `--no-mad-swarm` only when you intentionally want the old UI-only launch. Each Zellij lane has per-slot SKS state, a nonblocking JSONL command bus, dynamic pane-id reconciliation from `zellij action list-panes --json --all`, and `nice`/dispatch-throttle metadata. If a lane's own mission ledger is idle, the renderer can mirror the most-recent active agent mission; disable that follow behavior with `SKS_LANE_FOLLOW_ACTIVE_MISSION=0`.
+- **MAD / Naruto Zellij worker panes.** `sks --mad` and Naruto-style fan-out keep the main Zellij session lean at launch, then open named worker panes on demand as scheduler slots are reserved. Each worker pane is bound to a slot generation, writes `worker.stdout.log`, `worker.stderr.log`, `worker-heartbeat.jsonl`, `worker-result.json`, and `zellij-worker-pane.json`, then drains when the generation completes. Tune MAD fan-out with `--mad-agents`, `--mad-swarm-work-items`, and `--mad-swarm-backend`; use `--no-mad-swarm` only when you intentionally want the UI-only launch.
 
 - **Image generation under codex-lb.** `gpt-image-2` routes through the same Codex `/responses` backend the load balancer already proxies, so `$imagegen` works when you are authenticated only through codex-lb (no direct `OPENAI_API_KEY`). The official Codex App `$imagegen` surface stays primary; the codex-lb/OpenAI API path is the fallback. Opt out with `SKS_IMAGEGEN_ALLOW_CODEX_LB_API_FALLBACK=0`.
 
@@ -379,7 +370,7 @@ Team missions keep at least five QA/reviewer lanes active, record live events, c
 ```sh
 sks agent run "map the risky files" --mock --json
 sks agent run "wide release audit" --route '$Release-Review' --agents 10 --concurrency 5 --mock --json
-sks agent run "real one-agent smoke" --backend codex-exec --real --agents 1 --concurrency 1 --json
+sks agent run "real one-agent smoke" --backend codex-sdk --real --agents 1 --concurrency 1 --json
 ```
 
 Defaults are intentionally bounded but not subagent-limited: 5 agents by default, maximum 20 native CLI worker sessions, and a separate `--concurrency` cap. When enough work exists, `--agents 10 --concurrency 10` and `--agents 20 --concurrency 20` must create 10 or 20 independent child processes using `node dist/bin/sks.js --agent worker --intake <worker-intake.json> --json`. The parent orchestrator writes `agents/agent-roster.json`, `agents/agent-effort-policy.json`, `agents/agent-task-board.json`, `agents/agent-leases.json`, `agents/agent-no-overlap-proof.json`, `agents/agent-native-cli-session-swarm.json`, `agents/native-cli-session-proof.json`, `agents/no-subagent-scaling-policy.json`, `agents/fast-mode-propagation-proof.json`, `agents/agent-cleanup.json`, and `agents/agent-proof-evidence.json` under the mission.
@@ -407,7 +398,7 @@ sks naruto status
 
 Aliases: `$ShadowClone`, `$Kagebunshin`, and the CLI flag `sks --naruto`.
 
-- **System-aware concurrency:** `--clones N` is the total work fan-out, but `$Naruto` never spawns the whole count at once. Live concurrency is throttled to a host-safe number derived from CPU cores and free memory (heavier cap for real `codex-exec` workers, tighter packing for in-process `fake`). So `--clones 100` on a small host still processes all 100 work units while only running a safe handful at a time; the run reports when it throttles. Override with `SKS_NARUTO_MAX_CONCURRENCY=<n>`.
+- **System-aware concurrency:** `--clones N` is the total work fan-out, but `$Naruto` never spawns the whole count at once. Live concurrency is throttled to a host-safe number derived from CPU cores and free memory (heavier cap for real `codex-sdk` workers, tighter packing for in-process `fake`). So `--clones 100` on a small host still processes all 100 work units while only running a safe handful at a time; the run reports when it throttles. Override with `SKS_NARUTO_MAX_CONCURRENCY=<n>`.
 - **Dynamic per-clone effort (like Team):** truly simple / no-tool work runs at `low`, any tool use lifts a clone to `medium` (never high/xhigh), and every clone runs in fast service tier.
 - **Safe parallel writes:** clones coordinate through the same lease-based patch-swarm (merge coordinator + conflict rebase + transaction journal) as Team.
 
@@ -649,7 +640,7 @@ sks team open-zellij latest
 sks zellij status
 ```
 
-Normal mouse-drag copy is the default because SKS launches Zellij with `mouse_mode=false`. Conversation scrollback is still preserved by Codex `--no-alt-screen`. If you prefer Zellij hover-pane wheel routing, launch with `SKS_ZELLIJ_MOUSE_MODE=1`; use Shift-drag if your terminal then captures selection differently. Right lanes are renderer panes that follow SKS worker artifacts, so live native-agent output is shown from per-slot `worker.stdout.log`, `worker.stderr.log`, and `worker-heartbeat.jsonl`.
+Conversation scrollback is preserved by Codex `--no-alt-screen`, and SKS launches Zellij with `mouse_mode=true` by default so trackpad/wheel gestures route to pane scrollback instead of the focused prompt input history. Copy still uses Zellij clipboard integration (`copy_command=pbcopy`, `copy_on_select=true`); hold Shift for terminal-native selection, or launch with `SKS_ZELLIJ_MOUSE_MODE=0` if native drag selection matters more than hover-pane scrolling. Right lanes are renderer panes that follow SKS worker artifacts, so live native-agent output is shown from per-slot `worker.stdout.log`, `worker.stderr.log`, and `worker-heartbeat.jsonl`.
 
 ### Codex App tools are missing
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "1.21.6"
+version = "1.21.9"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "1.21.6"
+version = "1.21.9"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 1.21.6"),
+        Some("--version") => println!("sks-rs 1.21.9"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/.sks-build-stamp.json

@@ -1,8 +1,8 @@
 {
   "schema": "sks.dist-build-stamp.v1",
   "package_name": "sneakoscope",
-  "package_version": "1.21.6",
-  "source_digest": "3577af7555600bd9748b9c3252bf18a727db23c92740e7a06dc778b467aa1495",
-  "source_file_count": 1771,
-  "built_at_source_time": 1780391165608
+  "package_version": "1.21.9",
+  "source_digest": "0a7c45e094cebad43f33cd668d95ecb34e6f7bb1a9be44273bef378fe95f185b",
+  "source_file_count": 1814,
+  "built_at_source_time": 1780472815535
 }

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '1.21.6';
+const FAST_PACKAGE_VERSION = '1.21.9';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--agent' && args[1] === 'worker') {

package/dist/build-manifest.json

@@ -1,16 +1,16 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "1.21.6",
-  "package_version": "1.21.6",
+  "version": "1.21.9",
+  "package_version": "1.21.9",
   "typescript": true,
   "mjs_runtime_files": 0,
-  "compiled_file_count": 1032,
-  "compiled_js_count": 516,
-  "compiled_dts_count": 516,
-  "source_digest": "3577af7555600bd9748b9c3252bf18a727db23c92740e7a06dc778b467aa1495",
-  "source_file_count": 1771,
-  "source_files_hash": "1f79c92a7165654f5ae190c1719e7e8ec89337ed8f265c7a68242ef613848f19",
-  "source_list_hash": "1f79c92a7165654f5ae190c1719e7e8ec89337ed8f265c7a68242ef613848f19",
+  "compiled_file_count": 1064,
+  "compiled_js_count": 532,
+  "compiled_dts_count": 532,
+  "source_digest": "0a7c45e094cebad43f33cd668d95ecb34e6f7bb1a9be44273bef378fe95f185b",
+  "source_file_count": 1814,
+  "source_files_hash": "09146fd82f71e159dc8e5d331df3d0e893c1d9aa001024aaf877946eff6f657e",
+  "source_list_hash": "09146fd82f71e159dc8e5d331df3d0e893c1d9aa001024aaf877946eff6f657e",
   "src_mjs_runtime_files": 0,
   "dist_stamp_schema": "sks.dist-build-stamp.v1",
   "files": [
@@ -268,6 +268,8 @@
     "core/agents/agent-session-generation.js",
     "core/agents/agent-session-rows.d.ts",
     "core/agents/agent-session-rows.js",
+    "core/agents/agent-slot-pane-binding-proof.d.ts",
+    "core/agents/agent-slot-pane-binding-proof.js",
     "core/agents/agent-task-graph.d.ts",
     "core/agents/agent-task-graph.js",
     "core/agents/agent-task-slicer.d.ts",
@@ -322,6 +324,8 @@
     "core/agents/work-partition/semantic-domain-graph.js",
     "core/agents/work-partition/task-slicer.d.ts",
     "core/agents/work-partition/task-slicer.js",
+    "core/agents/worker-pane-communication-contract.d.ts",
+    "core/agents/worker-pane-communication-contract.js",
     "core/agents/zellij-lane-supervisor.d.ts",
     "core/agents/zellij-lane-supervisor.js",
     "core/agents/zellij-right-lane-cockpit.d.ts",
@@ -366,6 +370,32 @@
     "core/codex-compat/codex-version-policy.js",
     "core/codex-compat/codex-version.d.ts",
     "core/codex-compat/codex-version.js",
+    "core/codex-control/codex-control-plane.d.ts",
+    "core/codex-control/codex-control-plane.js",
+    "core/codex-control/codex-control-proof.d.ts",
+    "core/codex-control/codex-control-proof.js",
+    "core/codex-control/codex-event-translator.d.ts",
+    "core/codex-control/codex-event-translator.js",
+    "core/codex-control/codex-fake-sdk-adapter.d.ts",
+    "core/codex-control/codex-fake-sdk-adapter.js",
+    "core/codex-control/codex-output-schemas.d.ts",
+    "core/codex-control/codex-output-schemas.js",
+    "core/codex-control/codex-sdk-adapter.d.ts",
+    "core/codex-control/codex-sdk-adapter.js",
+    "core/codex-control/codex-sdk-capability.d.ts",
+    "core/codex-control/codex-sdk-capability.js",
+    "core/codex-control/codex-sdk-config-policy.d.ts",
+    "core/codex-control/codex-sdk-config-policy.js",
+    "core/codex-control/codex-sdk-env-policy.d.ts",
+    "core/codex-control/codex-sdk-env-policy.js",
+    "core/codex-control/codex-sdk-sandbox-policy.d.ts",
+    "core/codex-control/codex-sdk-sandbox-policy.js",
+    "core/codex-control/codex-task-runner.d.ts",
+    "core/codex-control/codex-task-runner.js",
+    "core/codex-control/codex-thread-registry.d.ts",
+    "core/codex-control/codex-thread-registry.js",
+    "core/codex-control/schemas/agent-worker-result.schema.d.ts",
+    "core/codex-control/schemas/agent-worker-result.schema.js",
     "core/codex-exec-output-schema.d.ts",
     "core/codex-exec-output-schema.js",
     "core/codex-hooks/codex-hook-actual-discovery.d.ts",
@@ -1045,6 +1075,8 @@
     "core/zellij/zellij-pane-proof.js",
     "core/zellij/zellij-screen-proof.d.ts",
     "core/zellij/zellij-screen-proof.js",
+    "core/zellij/zellij-worker-pane-manager.d.ts",
+    "core/zellij/zellij-worker-pane-manager.js",
     "scripts/release-parallel-check.d.ts",
     "scripts/release-parallel-check.js",
     "vendor/openai-codex/latest/hooks/permission-request.command.input.schema.json",