sneakoscope 10.3.0 → 10.3.1

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.3.0**. Install the latest stable release from npm.
+Current package: **SKS 10.3.1**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.3.0"
+version = "10.3.1"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.3.0"
+version = "10.3.1"
 edition = "2021"
 
 [dependencies]

package/dist/cli/install-helpers-codex-lb-config.js

@@ -4,6 +4,14 @@ import { escapeRegExp } from '../core/text/regex.js';
 export const DESKTOP_BRIDGE_MANAGED_MARKER = '# sks-desktop-bridge-managed';
 export const DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER = '# sks-desktop-bridge-managed-base-url';
 export const DESKTOP_BRIDGE_MANAGED_MODEL_CATALOG_MARKER = '# sks-desktop-bridge-managed-model-catalog';
+export function bindCodexClientProvider(text, provider) {
+    const selected = topLevelTomlString(text, 'model_provider');
+    if (selected && selected !== 'openai' && selected !== 'codex-lb')
+        return text;
+    if (selected === provider)
+        return text;
+    return upsertTopLevelTomlString(String(text || ''), 'model_provider', provider);
+}
 export function upsertDesktopBridgeManagedConfig(text, input) {
     const bridgeBaseUrl = normalizeManagedBridgeBaseUrl(input.bridgeBaseUrl);
     const combinedCatalogPath = String(input.combinedCatalogPath || '').trim();
@@ -16,7 +24,8 @@ export function upsertDesktopBridgeManagedConfig(text, input) {
     const orphanCleanup = removeDesktopBridgeOrphanManagedMarkers(String(text || ''));
     let next = orphanCleanup.text;
     const selectedProvider = topLevelTomlString(next, 'model_provider');
-    if (selectedProvider && (selectedProvider !== 'openai'
+    const managedProvider = selectedProvider === 'codex-lb' || selectedProvider === 'openai';
+    if (selectedProvider && (!managedProvider
         || !topLevelHasLine(next, DESKTOP_BRIDGE_MANAGED_MARKER))) {
         throw new Error('historical_user_owned_config_conflict:model_provider');
     }
@@ -30,8 +39,9 @@ export function upsertDesktopBridgeManagedConfig(text, input) {
     if (existingCatalog && !catalogOwned) {
         throw new Error('historical_user_owned_config_conflict:model_catalog_json');
     }
+    const keepCodexLb = selectedProvider === 'codex-lb';
     next = removeManagedBridgeTopLevelBindings(next);
-    next = upsertTopLevelTomlString(next, 'model_provider', 'openai');
+    next = upsertTopLevelTomlString(next, 'model_provider', keepCodexLb ? 'codex-lb' : 'openai');
     next = addTopLevelMarkerBeforeKey(next, 'model_provider', DESKTOP_BRIDGE_MANAGED_MARKER);
     next = upsertTopLevelTomlString(next, 'openai_base_url', bridgeBaseUrl);
     next = addTopLevelMarkerBeforeKey(next, 'openai_base_url', DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER);
@@ -45,7 +55,7 @@ export function removeDesktopBridgeManagedConfig(text) {
     const baseUrl = topLevelTomlString(next, 'openai_base_url');
     const catalog = topLevelTomlString(next, 'model_catalog_json');
     const owned = [
-        [DESKTOP_BRIDGE_MANAGED_MARKER, 'model_provider', selectedProvider === 'openai'],
+        [DESKTOP_BRIDGE_MANAGED_MARKER, 'model_provider', selectedProvider === 'openai' || selectedProvider === 'codex-lb'],
         [DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER, 'openai_base_url', Boolean(baseUrl)],
         [DESKTOP_BRIDGE_MANAGED_MODEL_CATALOG_MARKER, 'model_catalog_json', Boolean(catalog)]
     ];
@@ -67,7 +77,7 @@ export function removeDesktopBridgeOrphanManagedMarkers(text) {
     const source = String(text || '');
     const selectedProvider = topLevelTomlString(source, 'model_provider');
     const markerTargets = [
-        [DESKTOP_BRIDGE_MANAGED_MARKER, selectedProvider === 'openai'],
+        [DESKTOP_BRIDGE_MANAGED_MARKER, selectedProvider === 'openai' || selectedProvider === 'codex-lb'],
         [DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER, Boolean(topLevelTomlString(source, 'openai_base_url'))],
         [DESKTOP_BRIDGE_MANAGED_MODEL_CATALOG_MARKER, Boolean(topLevelTomlString(source, 'model_catalog_json'))]
     ];

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.3.0",
+  "package_version": "10.3.1",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/codex-lb/desktop-controller-v3/provider-commands.js

@@ -1,3 +1,6 @@
+import { bindCodexClientProvider } from '../../../cli/install-helpers-codex-lb-config.js';
+import { safeWriteCodexConfigToml } from '../../codex-runtime/codex-desktop-config-policy.js';
+import { readText } from '../../fsx.js';
 import { testOpenRouterConnection } from '../../providers/openrouter/openrouter-account.js';
 import { openRouterSecretPaths } from '../../providers/openrouter/openrouter-secret-store.js';
 import { codexLbEnvPath, codexLbMetadataPath, readCodexLbModelCatalog } from '../codex-lb-env.js';
@@ -108,6 +111,12 @@ export async function setProviderState(providerId, enabled, operation, options)
             });
         }
     }
+    if (providerId === 'codex-lb') {
+        const current = await readText(paths.configPath, '');
+        const next = bindCodexClientProvider(current, enabled ? 'codex-lb' : 'openai');
+        if (next !== current)
+            await safeWriteCodexConfigToml(paths.configPath, current, next, 'codex-lb-client-provider');
+    }
     const status = await desktopBridgeStatusV3(options);
     return commandResult(operation, true, status, { provider_id: providerId, enabled }, [], options);
 }

package/dist/core/decisions/integration.js

@@ -128,6 +128,41 @@ async function decideOfficialSubagentPreparationInner(input, started) {
     overrides?.observe?.({ mode: config.mode, eligible: true, compiled, receipt });
     return result;
 }
+export async function consultJevTurnModel(input) {
+    const overrides = activeOverrides();
+    const env = input.env || process.env;
+    const config = overrides?.config ?? await readDecisionConfig(env);
+    if (!jevEnabled(config))
+        return { called: false, model: null, reason: 'off' };
+    const resolved = await resolveOpenRouterApiKey({ env });
+    if (!resolved.key)
+        return { called: false, model: null, reason: 'missing_key' };
+    const prompt = String(input.prompt || '').trim();
+    if (!prompt)
+        return { called: false, model: null, reason: 'empty_prompt' };
+    const bundle = buildDecisionBundle({
+        projectId: sha256(input.root).slice(0, 32),
+        workflowRunId: 'turn',
+        workflowRevision: 'turn',
+        sourceDigest: 'turn',
+        graphDigest: null,
+        goal: prompt,
+        routingCandidates: [{ id: 'turn', summary: prompt.slice(0, 240) }]
+    });
+    const transport = await requestOpenRouterDecision(bundle, {
+        env,
+        deadlineMs: DESIGN_DEFAULTS.deadlineMs,
+        ...(overrides?.fetchImpl ? { fetchImpl: overrides.fetchImpl } : {})
+    });
+    if (!transport.ok)
+        return { called: true, model: null, reason: transport.reason };
+    const compiled = compileDecision(bundle, transport.response);
+    if (compiled.kind !== 'apply')
+        return { called: true, model: null, reason: compiled.reason };
+    const selected = assembleRoutingSelection(compiled.effects.flatMap((effect) => (effect.kind === 'select_routing' ? [{ roleId: effect.roleId, model: effect.model }] : [])));
+    const model = selected?.models.turn || null;
+    return { called: true, model, reason: model ? 'applied' : 'keep_baseline' };
+}
 export function effectAlreadyConsumed(identity) {
     return appliedEffects.has(identity);
 }

package/dist/core/hooks-runtime.js

@@ -22,6 +22,7 @@ import { codePackFreshnessNote } from './hooks-runtime/code-pack-freshness-prefl
 import { claimHookInvocation } from './hooks-runtime/hook-invocation-dedupe.js';
 import { armLightTurnStopBypass, clearLightTurnStopBypass, consumeLightTurnStopBypass, hasMatchingLightTurnStopBypass } from './hooks-runtime/light-turn.js';
 import { evaluateHookNarutoDecisionGate, looksLikeActiveContinuationPrompt } from './hooks-runtime/naruto-decision-gate.js';
+import { consultJevTurnModel } from './decisions/integration.js';
 import { ensureOfficialSubagentArtifactDirConfined, inspectActiveOfficialSubagentWorkflow, recordOfficialSubagentLifecycleCaptureFailure, officialSubagentArtifactDir, recordAndRefreshSubagentEvidence, refreshOfficialSubagentCompletionArtifacts } from './hooks-runtime/official-subagent-lifecycle.js';
 import { finalizationRepeatDecision } from './hooks-runtime/stop-repeat-guard.js';
 import { armCodexGitActionStopBypass, consumeCodexGitActionStopBypass, consumeLightRouteStop, hasCompletionSummary, hasDfixLightCompletion, hasHonestMode, hasHonestModeUnresolvedGap, honestModeLoopbackBudgetExhausted, recordHonestModeLoopback, recordHonestModeTerminalUnverified, resolveHonestModeLoopback, shouldLoopBackAfterHonestMode, successfulAppNarutoStopNeedsVisibleSummary } from './hooks-runtime/stop-finalization.js';
@@ -120,7 +121,8 @@ export async function evaluateHookPayload(name, payload = {}, opts = {}) {
     const withNarutoDecision = (result) => ({ ...result, sksNarutoDecision });
     if (name === 'user-prompt-submit') {
         const result = await hookUserPrompt(root, state, payload, noQuestion, sessionKey);
-        const withSkillContext = await attachAuthoritativeSksSkillContext(root, state, payload, result);
+        const withJev = await attachJevTurnRouting(root, payload, result);
+        const withSkillContext = await attachAuthoritativeSksSkillContext(root, state, payload, withJev);
         return withNarutoDecision(attachOfficialSubagentSpawnCompatibilityContext(state, payload, withSkillContext));
     }
     if (name === 'session-start' || name === 'pre-compact' || name === 'post-compact') {
@@ -233,6 +235,28 @@ async function hookSubagentStart(root, state, payload = {}, sessionKey = null) {
     const additionalContext = [coreEngineeringDirectiveReferenceText(), resourceGuard, routingContext, active, skillContext].filter(Boolean).join('\n\n');
     return { continue: true, additionalContext, ...(skillBlockers.length ? { silent: true } : {}) };
 }
+async function attachJevTurnRouting(root, payload, result) {
+    if (!result || result.decision === 'block')
+        return result;
+    const prompt = stripVisibleDecisionAnswerBlocks(extractUserPrompt(payload));
+    if (!String(prompt || '').trim())
+        return result;
+    const decision = await consultJevTurnModel({ root, prompt }).catch(() => null);
+    if (!decision?.called)
+        return result;
+    const line = decision.model
+        ? `Jev sealed this turn to ${decision.model}. Use that sealed model and do not reclassify it.`
+        : '';
+    if (!line)
+        return { ...result, jev_turn: decision };
+    const additionalContext = [result.additionalContext, line].filter(Boolean).join('\n\n');
+    return {
+        ...result,
+        additionalContext,
+        jev_turn: decision,
+        ...(result.systemMessage ? { systemMessage: visibleHookMessage('user-prompt-submit', additionalContext) } : {})
+    };
+}
 async function hookUserPrompt(root, state, payload, noQuestion, sessionKey = null) {
     await clearLightTurnStopBypass(root, { sessionKey }).catch(() => undefined);
     const submittedPrompt = stripVisibleDecisionAnswerBlocks(extractUserPrompt(payload));

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '10.3.0';
+export const PACKAGE_VERSION = '10.3.1';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "10.3.0",
+  "version": "10.3.1",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",