sneakoscope 10.3.10 → 10.5.0

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.3.10**. Install the latest stable release from npm.
+Current package: **SKS 10.5.0**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 
@@ -170,9 +170,16 @@ sidecars, and the Jev choices.
 
 ## Naruto workflow
 
-The parent orchestrates: it decomposes the task, spawns a child for each
-disjoint slice, waits, and owns integration and final verification. It does not
-implement slices itself. The SKS PreToolUse hook denies parent source edits
+Naruto is for work you ask to split, not the default for implementation. A bug
+fix, a test, a refactor or config change, or a review is the main agent's own
+job, the way Codex works by default: no mission, no subagent plan, no parent edit
+gate. Naruto runs when you invoke `$sks-naruto`, pass `--agents N`, or ask for
+subagents or parallel work in so many words, and, with Jev mode on, when Jev
+judges that the task splits into independent parts (single is its default).
+
+Inside Naruto the parent orchestrates: it decomposes the task, spawns a child for
+each disjoint slice, waits, and owns integration and final verification. It does
+not implement slices itself. The SKS PreToolUse hook denies parent source edits
 until the first child starts and while children are still running. Children
 receive bounded tasks and do not spawn children.
 
@@ -187,7 +194,7 @@ soon as Codex lists it:
 | Exploration, large-context reads, and direct tool operation | context | medium | `gpt-6.1-sol` |
 | Planning, review, debugging, and focused judgment | deep | max | `gpt-6-astra` |
 
-With Jev mode on, Jev picks the tier for every spawn, every gated parent edit,
+With Jev mode on, Jev picks the tier for every spawn that names no managed role (a managed role runs the tier pinned in its role file), every gated parent edit,
 the plan, and the context, so the parent spends no time on those choices. It
 also picks the pipeline for each prompt; an explicit SKS dollar command always
 wins. A stored role-model preference on a current model wins in both modes.

package/config/skills-hash-ledger.v1.json

@@ -335,14 +335,14 @@
     {
       "canonical_name": "sks-naruto",
       "trusted_sha256": [
+        "26528b6b7d063c7cf0b5b9e996947d504cbc7ef4af976e480b5df3e6c7fcbac9",
+        "5ac4c3ea1d4478f12f55df3c3d6c4ab272a40f731de8aa659aee08cb8e517a8b",
         "c88999663811a50d096b7cbb696fbea5b8f72707bcbf4a232bb07fe3a10cb2a6",
         "b2eb207b2773ab1995ee6e113ba6f3b64de43389e76aef4a0f06d4845ff86223",
         "65e19a5d16f486b13541048c239e828f8039bfc6e38bafd7949d9c936fe4b5b2",
         "da43debf97f0b4a1583d8202a7306aca97ac97865accf9bca8f41d75c84a1cb9",
         "b981bea4183376c6c0204941ad6c2e78782e2cdea4f8d25cc85630c609faaf95",
         "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
-        "a1219f6dbad9c8c185953125ef0b8dccf081aa01efb8e8acaa543c6214ac049c",
-        "d0d5968e78ac25e1d3e588735de1ddbcf149cfb3165edebca5dec1ed7c7a5c46",
         "49b5e3dcc1b537b49c2cf09e5b875cb16acb05c622b22798e265e64dacd8ac90"
       ]
     },
@@ -388,6 +388,7 @@
     {
       "canonical_name": "sks-prompt-pipeline",
       "trusted_sha256": [
+        "01b0d58e26d4493442041d1cd51b4a25ac15014be79b065a59520e21ef69a4b1",
         "5e423981384fc3825c74327c4ca0fe09905a0dc81a533676c7e76ebb385348fc",
         "f82a103e7962e416961add515d7b3e65df89848dec1fbb9319bd49d7f1dac982",
         "93fd938dccd65d9b4d1dd140b60e1baedc627e7fcc54f9afd95eb2e44efd1143",
@@ -407,6 +408,7 @@
     {
       "canonical_name": "sks-reasoning-router",
       "trusted_sha256": [
+        "2ec66071b1c021e8c2ddd8f1ecefd16502c8325adab2c3c804a9e8d4123b1a8d",
         "b0f458caa1c3bd7bb7241a09b80fce5700aeb99b340e84c08a9b2b66bc875ba7",
         "41e14e8d5b93d743096664869ee68c41c86e911b0bbc165bdcd10e4a45faa4b6",
         "03d68436e568b3cee2bffc6ca58819019ca406f7b648ef4704e3465c7c83c114",

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.3.10"
+version = "10.5.0"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.3.10"
+version = "10.5.0"
 edition = "2021"
 
 [dependencies]

package/dist/bin/fast-inline.js

@@ -84,8 +84,7 @@ async function doctorJsonFastInline(input = {}) {
         arg_warnings: [],
         node: { ok: true, version: process.version },
         runtime_readiness: {
-            hook_evidence_policy: 'unknown-do-not-count',
-            agent_role_strategy: 'message-role'
+            hook_evidence_policy: 'unknown-do-not-count'
         },
         codex: { bin: null, version: null, available: null, skipped: true, reason: 'fast_readonly_json' },
         repair: {

package/dist/cli/codex-app-command.js

@@ -38,7 +38,7 @@ function remoteControlHelp() {
         'Usage: sks codex-app remote-control [--status|--check|--dry-run|--json] [-- <codex remote-control args>]',
         '',
         'Starts Codex CLI remote-control, the headless remotely controllable app-server entrypoint.',
-        'SKS only wraps the first-party command and refuses older Codex CLI versions instead of falling back to app-server internals.'
+        'SKS only wraps the first-party command and refuses to run when the Codex CLI is missing instead of falling back to app-server internals.'
     ].join('\n');
 }
 function stripSeparator(args = []) {

package/dist/cli/feature-commands.js

@@ -280,8 +280,6 @@ async function hooksTrustReport(root) {
             { event: 'PreToolUse', command: 'sks hook pre-tool', writes: ['.sneakoscope/bus/tool-events.jsonl'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'PermissionRequest', command: 'sks hook permission-request', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'PostToolUse', command: 'sks hook post-tool', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'medium' },
-            { event: 'PreCompact', command: 'sks hook pre-compact', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
-            { event: 'PostCompact', command: 'sks hook post-compact', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'UserPromptSubmit', command: 'sks hook user-prompt-submit', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'SubagentStart', command: 'sks hook subagent-start', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'SubagentStop', command: 'sks hook subagent-stop', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'low' },
@@ -433,8 +431,7 @@ export function hooksExplainReport() {
             'directory_rule_policy',
             'db_safety_policy',
             'visual_claim_source_policy',
-            'proof_required_policy',
-            'codex_lb_health_policy'
+            'proof_required_policy'
         ],
         sources: [
             { title: 'OpenAI Codex Hooks', url: 'https://developers.openai.com/codex/hooks' },

package/dist/cli/global-mode-router.js

@@ -19,13 +19,6 @@ const RETIRED_GLOBAL_EXECUTION_OPTION_NAMES = new Set([
     '--require-tmux-smoke',
     '--glm'
 ]);
-export function detectGlobalMode(args = []) {
-    void args;
-    return null;
-}
-export function stripGlobalModeFlags(args) {
-    return args.filter((arg) => arg !== '--mad' && arg !== '--glm');
-}
 export function findRetiredGlobalExecutionArgumentErrors(args = []) {
     const errors = [];
     for (const value of args) {
@@ -37,12 +30,3 @@ export function findRetiredGlobalExecutionArgumentErrors(args = []) {
     }
     return [...new Set(errors)];
 }
-export function glmWithoutMadResult() {
-    return {
-        ok: false,
-        status: 'blocked',
-        mode: 'glm',
-        reason: 'glm_mad_removed',
-        hint: 'use sks bridge provider configure|validate|enable, sks bridge catalog sync, and sks bridge route set-default'
-    };
-}

package/dist/commands/codex-native.js

@@ -10,8 +10,6 @@ import { syncCodexSksSkills } from '../core/codex-app/codex-skill-sync.js';
 import { buildCodexNativeFeatureMatrix } from '../core/codex-native/codex-native-feature-broker.js';
 import { resolveCodexNativeInvocationPlan } from '../core/codex-native/codex-native-invocation-router.js';
 import { buildCodexNativeInteropPolicy } from '../core/codex-native/codex-native-interop-policy.js';
-import { analyzeCodexNativeReferenceSource } from '../core/codex-native/codex-native-reference-evidence.js';
-import { writeCodexNativePatternAnalysis } from '../core/codex-native/codex-native-pattern-analysis.js';
 import { repairCodexNativeManagedAssets } from '../core/codex-native/codex-native-repair-transaction.js';
 export async function run(_command, args = []) {
     const root = await sksRoot();
@@ -34,17 +32,13 @@ export async function run(_command, args = []) {
         return printCodexNativeResult(args, await resolveCodexAppExecutionProfile({ root }));
     if (action === 'interop-policy')
         return printCodexNativeResult(args, await buildCodexNativeInteropPolicy({ root }));
-    if (action === 'reference-evidence')
-        return printCodexNativeResult(args, await analyzeCodexNativeReferenceSource({ root, writeReport: true }));
-    if (action === 'pattern-analysis')
-        return printCodexNativeResult(args, await writeCodexNativePatternAnalysis(root));
     if (action === 'route' || action === 'invocation-plan') {
         const route = readOption(args, '--route', '$Loop');
         const desiredCapability = readOption(args, '--capability', 'agent-role');
         const missionId = readOption(args, '--mission', null);
         return printCodexNativeResult(args, await resolveCodexNativeInvocationPlan({ root, missionId, route, desiredCapability }));
     }
-    console.error('Usage: sks codex-native status|feature-broker|harness-compat|skill-sync|agent-role-sync|init-deep|hook-lifecycle|execution-profile|interop-policy|reference-evidence|pattern-analysis|invocation-plan [--json]');
+    console.error('Usage: sks codex-native status|feature-broker|harness-compat|skill-sync|agent-role-sync|init-deep|hook-lifecycle|execution-profile|interop-policy|invocation-plan [--json]');
     process.exitCode = 1;
 }
 async function maybeRepairThenReadOnlyMatrix(args = [], root, matrixFn) {

package/dist/commands/codex.js

@@ -1,4 +1,4 @@
-import { flag, readOption } from '../cli/args.js';
+import { flag } from '../cli/args.js';
 import { printJson } from '../cli/output.js';
 import { codexCompatibilityReport, codexDoctorReport } from '../core/codex-compat/codex-compat-report.js';
 import { codexVersionReport } from '../core/codex-compat/codex-version.js';
@@ -9,11 +9,10 @@ import { codexCliUpdateConsoleLines, inspectCodexCliUpdate, updateCodexCliNow }
 export async function run(_command, args = []) {
     const action = args[0] || 'compatibility';
     if (action === 'compatibility' || action === 'compat') {
-        const requiredBaseline = readOption(args, '--require', null);
-        const result = await codexCompatibilityReport({ requiredBaseline, require: requiredBaseline });
+        const result = await codexCompatibilityReport();
         if (flag(args, '--json'))
             return printJson(result);
-        console.log(`Codex compatibility: ${result.ok ? result.status : 'blocked'} (${result.required_baseline})`);
+        console.log(`Codex compatibility: ${result.ok ? result.status : 'blocked'} (minimum ${result.min_version})`);
         for (const warning of result.warnings || [])
             console.log(`- ${warning}`);
         if (!result.ok)
@@ -60,10 +59,10 @@ export async function run(_command, args = []) {
         return;
     }
     if (action === 'current' || action === CURRENT_CODEX_RUNTIME_CONTRACT.targetTag) {
-        const result = await detectCodexCurrentCapability({ requireReal: flag(args, '--require-real') });
+        const result = await detectCodexCurrentCapability();
         if (flag(args, '--json'))
             return printJson(result);
-        console.log(`Codex ${CURRENT_CODEX_RUNTIME_CONTRACT.requiredCliVersion} compatibility: ${result.ok ? 'ok' : 'blocked'} (${result.probe_mode})`);
+        console.log(`Codex ${CURRENT_CODEX_RUNTIME_CONTRACT.minVersion} compatibility: ${result.ok ? 'ok' : 'blocked'} (${result.probe_mode})`);
         for (const blocker of result.blockers || [])
             console.log(`- blocker: ${blocker}`);
         for (const warning of result.warnings || [])

package/dist/commands/doctor-console.js

@@ -32,7 +32,6 @@ export function renderDoctorConsoleReport(result, extras) {
     const codexCurrentAppDoctor = codexCurrentAppSection.doctor || {};
     const pluginPolicy = codexCurrentAppSection.plugin_app_template_policy;
     const desktopBridge = result.desktop_bridge || {};
-    const permissionProfiles = result.codex_permission_profiles || {};
     const configRepair = repair.codex_config;
     const migrationJournal = repair.migration_journal;
     const sksUpdate = repair.sks_update;
@@ -91,7 +90,6 @@ export function renderDoctorConsoleReport(result, extras) {
     const featureMatrixSkipped = codexNativeFeatureMatrix.skipped === true;
     line('SKS Runtime Readiness:');
     line(`  Codex Native: ${skippedOr(featureMatrixSkipped, String(runtimeReadiness.codex_native))}`);
-    line(`  Loop Mesh: ${skippedOr(featureMatrixSkipped, String(runtimeReadiness.loop_mesh))}`);
     line(`  QA Visual: ${skippedOr(featureMatrixSkipped, String(runtimeReadiness.qa_visual))}`);
     line(`  Research Sources: ${skippedOr(featureMatrixSkipped, String(runtimeReadiness.research_sources))}`);
     line(`  Image Follow-up: ${skippedOr(featureMatrixSkipped, String(runtimeReadiness.image_followup))}`);
@@ -149,7 +147,6 @@ export function renderDoctorConsoleReport(result, extras) {
     line(`  hook approval: ${skippedOr(harnessSkipped, appFeatures.hook_approval_state_detectable ? 'ok' : 'unknown')}`);
     line(`  skills: ${skippedOr(harnessSkipped, sksIntegrations.dollar_skills_synced ? 'ok' : 'degraded')}`);
     line(`  agent roles: ${skippedOr(harnessSkipped, sksIntegrations.agent_roles_synced ? 'ok' : 'degraded')}`);
-    line(`  native agent_type: ${skippedOr(harnessSkipped, appFeatures.agent_type_supported ? 'ok' : 'fallback message-role')}`);
     line(`  init-deep memory: ${skippedOr(harnessSkipped, sksIntegrations.init_deep_available ? 'available' : 'missing')}`);
     line(`  loop mesh app profile: ${skippedOr(harnessSkipped, sksIntegrations.loop_mesh_app_profile_available ? 'available' : 'missing')}`);
     line('Codex App UI:');
@@ -218,16 +215,10 @@ export function renderDoctorConsoleReport(result, extras) {
     const currentAppSkipped = extras.codexCurrentAppCapability?.skipped === true;
     line('Codex current compatibility:');
     line(`  target: ${CURRENT_CODEX_RUNTIME_CONTRACT.targetTag}`);
+    line(`  minimum: ${CURRENT_CODEX_RUNTIME_CONTRACT.minVersion}`);
     line(`  runtime: ${codex.version || 'unknown'}`);
-    line(`  multi-agent mode: ${skippedOr(featureMatrixSkipped, codexNativeFeatureMatrix.features?.multi_agent_mode?.ok ? 'verified' : 'unverified')}`);
-    line(`  rollout budget: ${skippedOr(featureMatrixSkipped, codexNativeFeatureMatrix.features?.rollout_budget?.ok ? 'verified' : 'unverified')}`);
-    line(`  indexed search: ${skippedOr(featureMatrixSkipped, codexNativeFeatureMatrix.features?.indexed_web_search?.ok ? 'verified' : 'unverified')}`);
-    line(`  current time: ${skippedOr(featureMatrixSkipped, codexNativeFeatureMatrix.features?.current_time_read?.ok ? 'verified' : 'unverified')}`);
     line('Current Codex app features:');
     line(`  /app handoff: ${skippedOr(currentAppSkipped, codexCurrentApp.supports_app_handoff ? 'ok' : 'unavailable')}`);
-    line(`  plugin JSON: ${skippedOr(currentAppSkipped, codexCurrentApp.supports_plugin_json ? 'ok' : 'unavailable')}`);
-    line(`  image path exposure: ${skippedOr(currentAppSkipped, codexCurrentApp.supports_image_path_exposure ? 'ok' : 'unavailable')}`);
-    line(`  OAuth MCP pre-refresh: ${skippedOr(currentAppSkipped, codexCurrentApp.supports_oauth_mcp_prerefresh ? 'ok' : 'unavailable')}`);
     const pluginInventorySkipped = extras.pluginInventory?.skipped === true;
     const pluginReport = extras.pluginInventory?.report;
     const plugins = pluginReport?.plugins || [];
@@ -254,7 +245,6 @@ export function renderDoctorConsoleReport(result, extras) {
     if (!desktopBridge.ok)
         for (const action of desktopBridge.recovery_actions || [])
             line(`  action: ${action}`);
-    line(`Permissions: config profile and permission profile are tracked separately (${permissionProfiles.codex_config_profile_field}, ${permissionProfiles.codex_permission_profile_field})`);
     line('Ready:');
     line(`  cli_ready: ${ready.cli_ready ? 'yes' : 'no'}`);
     line(`  mad_ready: ${ready.mad_ready ? 'yes' : 'no'}`);

package/dist/commands/doctor-helpers.js

@@ -7,9 +7,6 @@ import { restartLaunchAgent } from '../core/codex-app/menubar/launch-agent.js';
 export function buildRuntimeReadiness(matrix) {
     const defaults = matrix?.invocation_defaults || {};
     const hookPolicy = defaults.hook_evidence_policy || 'unknown-do-not-count';
-    const agentStrategy = defaults.loop_worker_role_strategy || 'message-role';
-    const multiAgentMode = defaults.multi_agent_mode || 'none';
-    const rolloutBudget = defaults.rollout_budget_strategy || 'sks-local-only';
     const researchSource = defaults.research_source_strategy || 'local-files';
     const codexNative = matrix?.ok === true ? 'ok' : matrix?.codex_cli?.available ? 'degraded' : 'blocked';
     const repairActions = [];
@@ -26,22 +23,12 @@ export function buildRuntimeReadiness(matrix) {
     return {
         schema: 'sks.runtime-readiness-story.v1',
         codex_native: codexNative,
-        loop_mesh: agentStrategy === 'agent_type' ? 'ok' : 'fallback',
         qa_visual: defaults.qa_visual_review_strategy || 'blocked',
         research_sources: researchSource,
         image_followup: defaults.image_followup_strategy || 'blocked',
         hook_evidence_policy: hookPolicy,
-        agent_role_strategy: agentStrategy,
-        multi_agent_mode: multiAgentMode,
-        rollout_budget_strategy: rolloutBudget,
-        current_time_source: defaults.current_time_source || 'external-clock',
-        overload_retry_policy: defaults.overload_retry_policy || 'generic',
         notes: [
-            ...(hookPolicy !== 'approved-only' ? ['hook-derived evidence will not count'] : []),
-            ...(agentStrategy !== 'agent_type' ? ['message-role fallback active'] : []),
-            ...(multiAgentMode === 'proactive' ? ['Proactive multi-agent mode is available for Naruto-style routes'] : []),
-            ...(rolloutBudget === 'codex-current-shared' ? ['Shared rollout budgeting is available for route proof'] : []),
-            ...(researchSource === 'indexed-web-search' ? ['Indexed web search is selected for source-intelligence routes'] : [])
+            ...(hookPolicy !== 'approved-only' ? ['hook-derived evidence will not count'] : [])
         ],
         repair_actions: [...new Set(repairActions)]
     };
@@ -69,16 +56,11 @@ export function fallbackCodexNativeFeatureMatrix(codex, blockers = [], warnings
         codex_cli: { available: Boolean(codex?.bin || codex?.available), version: codex?.version || null, bin: codex?.bin || null },
         features: {},
         invocation_defaults: {
-            loop_worker_role_strategy: 'message-role',
-            multi_agent_mode: 'none',
-            rollout_budget_strategy: 'sks-local-only',
             qa_visual_review_strategy: 'route-gated',
             research_source_strategy: 'local-files',
             image_followup_strategy: 'artifact-path',
             hook_evidence_policy: 'unknown-do-not-count',
-            skill_bridge_strategy: 'cli-only',
-            current_time_source: 'external-clock',
-            overload_retry_policy: 'generic'
+            skill_bridge_strategy: 'cli-only'
         },
         blockers,
         warnings

package/dist/commands/doctor.js

@@ -11,7 +11,6 @@ import { desktopBridgeStatusV3 } from '../core/codex-lb/desktop-controller-v3.js
 import { readDesktopBridgeUnreachableUpstreamEvidence, repairDoctorDesktopBridgeCatalog } from '../core/doctor/desktop-bridge-catalog-repair.js';
 import { inspectCodexConfigReadability } from '../core/codex/codex-config-readability.js';
 import { inspectOAuthCallbackPortConflict, oauthCallbackDoctorGuidance } from '../core/codex/oauth-callback-port-diagnostic.js';
-import { inventoryCodexPermissionProfiles } from '../core/codex/codex-permission-profiles.js';
 import { resolveProviderContext } from '../core/provider/provider-context.js';
 import { writeCodexCurrentAppCapabilityArtifacts } from '../core/codex-control/codex-current-app-capability.js';
 import { writeCodexPluginInventoryArtifacts, pluginAppTemplatePolicy } from '../core/codex-plugins/codex-plugin-json.js';
@@ -513,7 +512,6 @@ async function runDoctorJsonFastPath(args = [], root) {
         doctor_fix_postcheck: null,
         postcheck: null,
         agent_role_config: { schema: 'sks.agent-role-config-repair.v1', ok: true, apply: false, skipped: true, blockers: [] },
-        codex_permission_profiles: { skipped: true, reason: 'doctor_json_fast_path_optional_diagnostics_skipped' },
         command_aliases: { schema: 'sks.command-alias-cleanup.v1', ok: true, skipped: true, reason: 'doctor_json_fast_path_no_write' },
         sks_temp_sweep: { ok: true, skipped: true, action_count: 0, reason: 'doctor_without_fix', error: null },
         imagegen: { ok: false, auth_readiness: null, codex_app_builtin_available: false },
@@ -683,7 +681,6 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         generated_at: new Date().toISOString(),
         fix: doctorFix,
         configs: [],
-        agent_role_files: { sanitized: [], created: [], blockers: [err?.message || String(err)] },
         actions: [],
         manual_actions: [],
         blockers: [err?.message || String(err)],
@@ -1114,7 +1111,6 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
             processEnv: process.env
         }, { desktopBridgeStatusImpl: deps.desktopBridgeStatusImpl })
         : desktopBridgeBeforeFix;
-    const permissionProfiles = await inventoryCodexPermissionProfiles(root, { writeReport: true });
     const startupRoleRepair = startupConfigRepair?.role_repair;
     const agentRoleConfigRepair = doctorFix && startupRoleRepair
         ? startupRoleRepair
@@ -1559,7 +1555,6 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         } : null,
         agent_role_config: agentRoleConfigRepair,
         official_subagent_config: officialSubagentConfig,
-        codex_permission_profiles: permissionProfiles,
         command_aliases: commandAliasCleanup,
         sks_temp_sweep: {
             ok: sksTempSweep.ok !== false,

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.3.10",
+  "package_version": "10.5.0",
   "skills": [
     {
       "canonical_name": "sks",
@@ -404,15 +404,15 @@
     {
       "canonical_name": "sks-naruto",
       "type": "core",
-      "content_sha256": "c88999663811a50d096b7cbb696fbea5b8f72707bcbf4a232bb07fe3a10cb2a6",
+      "content_sha256": "26528b6b7d063c7cf0b5b9e996947d504cbc7ef4af976e480b5df3e6c7fcbac9",
       "hash_history": [
+        "5ac4c3ea1d4478f12f55df3c3d6c4ab272a40f731de8aa659aee08cb8e517a8b",
+        "c88999663811a50d096b7cbb696fbea5b8f72707bcbf4a232bb07fe3a10cb2a6",
         "b2eb207b2773ab1995ee6e113ba6f3b64de43389e76aef4a0f06d4845ff86223",
         "65e19a5d16f486b13541048c239e828f8039bfc6e38bafd7949d9c936fe4b5b2",
         "da43debf97f0b4a1583d8202a7306aca97ac97865accf9bca8f41d75c84a1cb9",
         "b981bea4183376c6c0204941ad6c2e78782e2cdea4f8d25cc85630c609faaf95",
         "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
-        "a1219f6dbad9c8c185953125ef0b8dccf081aa01efb8e8acaa543c6214ac049c",
-        "d0d5968e78ac25e1d3e588735de1ddbcf149cfb3165edebca5dec1ed7c7a5c46",
         "49b5e3dcc1b537b49c2cf09e5b875cb16acb05c622b22798e265e64dacd8ac90"
       ],
       "deprecated_aliases": []
@@ -467,8 +467,9 @@
     {
       "canonical_name": "sks-prompt-pipeline",
       "type": "official",
-      "content_sha256": "5e423981384fc3825c74327c4ca0fe09905a0dc81a533676c7e76ebb385348fc",
+      "content_sha256": "01b0d58e26d4493442041d1cd51b4a25ac15014be79b065a59520e21ef69a4b1",
       "hash_history": [
+        "5e423981384fc3825c74327c4ca0fe09905a0dc81a533676c7e76ebb385348fc",
         "f82a103e7962e416961add515d7b3e65df89848dec1fbb9319bd49d7f1dac982",
         "93fd938dccd65d9b4d1dd140b60e1baedc627e7fcc54f9afd95eb2e44efd1143",
         "033bb114ec1fac3f8c312f698b1861ed4c2ce6f65c06f4f1a872c4b101b74b92",
@@ -490,8 +491,9 @@
     {
       "canonical_name": "sks-reasoning-router",
       "type": "official",
-      "content_sha256": "b0f458caa1c3bd7bb7241a09b80fce5700aeb99b340e84c08a9b2b66bc875ba7",
+      "content_sha256": "2ec66071b1c021e8c2ddd8f1ecefd16502c8325adab2c3c804a9e8d4123b1a8d",
       "hash_history": [
+        "b0f458caa1c3bd7bb7241a09b80fce5700aeb99b340e84c08a9b2b66bc875ba7",
         "41e14e8d5b93d743096664869ee68c41c86e911b0bbc165bdcd10e4a45faa4b6",
         "03d68436e568b3cee2bffc6ca58819019ca406f7b648ef4704e3465c7c83c114",
         "647f730520a1c7dc89c2642f5b8502624c65a861ae41aecf1fb137db40fd0611",

package/dist/core/agents/agent-effort-policy.js

@@ -131,7 +131,7 @@ export function buildAgentEffortPolicy(roster = {}) {
         agent_count: roster.agent_count || decisions.length,
         concurrency: roster.concurrency || decisions.length,
         decisions,
-        rule: 'Every child uses the newest model of the tier its work needs: fast for tiny mechanical work, balanced for instructed implementation, context for reads and tool execution, and deep for focused judgment. With Jev mode on, Jev picks the tier for each spawn. The parent keeps its user-selected model, reasoning effort, and service tier; stored role preferences may override role defaults.'
+        rule: 'Every child uses the newest model of the tier its work needs: fast for tiny mechanical work, balanced for instructed implementation, context for reads and tool execution, and deep for focused judgment. With Jev mode on, Jev picks the tier for each spawn that names no managed role; a managed role runs the tier pinned in its role file. The parent keeps its user-selected model, reasoning effort, and service tier; stored role preferences may override role defaults.'
     };
 }
 export function reasoningProfileName(effort) {

package/dist/core/agents/native-cli-worker-runtime.js

@@ -6,7 +6,6 @@ import { fastModeEnv } from './fast-mode-policy.js';
 import { validateAgentWorkerResult } from './agent-worker-pipeline.js';
 import { appendParallelRuntimeEvent } from './parallel-runtime-proof.js';
 import { appendAgentMessage } from './agent-message-bus.js';
-import { markLoopWorkerInterrupted, registerLoopActiveWorker } from '../loops/loop-interrupt-registry.js';
 export const NATIVE_CLI_WORKER_RUNTIME_SCHEMA = 'sks.native-cli-worker-runtime.v3';
 export const NATIVE_CLI_WORKER_DEFAULT_TIMEOUT_MS = 60 * 60 * 1000;
 export const NATIVE_CLI_WORKER_TIMEOUT_BLOCKER = 'native_cli_worker_timeout';
@@ -140,16 +139,8 @@ class NativeCliWorkerRuntimeRecorder {
             this.active.add(child.pid);
         this.maxObserved = Math.max(this.maxObserved, this.active.size);
         let exit;
-        let loopHandle = null;
         try {
             await this.record(record);
-            loopHandle = await registerLoopWorkerHandle({
-                root: ctx.opts.projectRoot || this.input.projectRoot || ctx.opts.cwd || packageRoot(),
-                env: ctx.opts.env || {},
-                agentId: String(ctx.agent.id || ctx.agent.session_id || 'agent'),
-                sessionId: ctx.agent.session_id || null,
-                pid: child.pid || null
-            });
             await appendParallelRuntimeEvent(this.root, this.input.missionId, {
                 event_type: 'worker_process_spawned',
                 slot_id: ctx.agent.slot_id || ctx.agent.id || null,
@@ -184,9 +175,6 @@ class NativeCliWorkerRuntimeRecorder {
         const timeoutBlockers = supervisor.timedOut ? [NATIVE_CLI_WORKER_TIMEOUT_BLOCKER] : [];
         if (supervisor.timedOut)
             record.status = 'failed';
-        if (loopHandle) {
-            await markLoopWorkerInterrupted(ctx.opts.projectRoot || this.input.projectRoot || ctx.opts.cwd || packageRoot(), loopHandle.mission_id, loopHandle.worker_id, record.status === 'closed' ? 'completed' : 'failed').catch(() => undefined);
-        }
         const parsed = await readJson(path.join(this.root, resultRel), null).catch(() => null);
         if (!parsed) {
             record.blockers = [...timeoutBlockers, 'native_cli_worker_result_missing'];
@@ -385,19 +373,3 @@ function changedFilesFromWorkerResult(result) {
     ]);
     return [...new Set([...direct, ...envelopeFiles].map((file) => String(file || '').replace(/\\/g, '/').replace(/^\.\/+/, '')).filter(Boolean))];
 }
-async function registerLoopWorkerHandle(input) {
-    const missionId = String(input.env.SKS_MISSION_ID || input.env.SKS_PARENT_MISSION_ID || '').trim();
-    const loopId = String(input.env.SKS_LOOP_ID || '').trim();
-    const phase = String(input.env.SKS_LOOP_PHASE || '').trim();
-    if (!missionId || !loopId || (phase !== 'maker' && phase !== 'checker'))
-        return null;
-    return registerLoopActiveWorker(input.root, {
-        mission_id: missionId,
-        loop_id: loopId,
-        phase,
-        worker_id: input.agentId,
-        session_id: input.sessionId,
-        pid: input.pid,
-        interrupt_supported: Boolean(input.pid || input.sessionId)
-    }).catch(() => null);
-}

package/dist/core/agents/native-worker-backend-router.js

@@ -7,7 +7,7 @@ import { normalizeAgentPatchEnvelope } from './agent-patch-schema.js';
 import { runCodexTask } from '../codex-control/codex-control-plane.js';
 import { CODEX_AGENT_WORKER_RESULT_SCHEMA_ID, codexAgentWorkerResultSchema } from '../codex-control/schemas/agent-worker-result.schema.js';
 import { leanEngineeringCompactText, leanPolicyReference } from '../lean-engineering-policy.js';
-import { readCodexLbModelCatalog, readLbHealth } from '../codex-lb/codex-lb-env.js';
+import { readCodexLbModelCatalog } from '../codex-lb/codex-lb-env.js';
 import { categoryForWorkerRole, isNarutoTierModel, modelRouteReason, routeModel } from '../provider/model-router.js';
 import { codexTimeoutClassForRoute } from '../codex-control/codex-reliability-shield.js';
 import { decideSubagentModel } from '../subagents/model-policy.js';
@@ -235,7 +235,6 @@ export async function resolveWorkerModelRouting(input, deps = {}) {
     if (allowlist.mode === 'openrouter_only') {
         return resolveOpenRouterOnlyWorkerRouting(input, deps, { allowlist, category, env, taskKindText, riskText });
     }
-    const lbHealth = Object.prototype.hasOwnProperty.call(deps, 'lbHealth') ? deps.lbHealth : await readLbHealth().catch(() => null);
     const lbCatalog = narutoOnly
         ? Object.prototype.hasOwnProperty.call(deps, 'lbCatalog')
             ? deps.lbCatalog
@@ -273,7 +272,6 @@ export async function resolveWorkerModelRouting(input, deps = {}) {
     const taskPolicy = decideSubagentModel({ title: taskKindText, description: riskText, role: input.agent?.role });
     const routed = narutoOnly
         ? await routeModel(category, {
-            lbHealth,
             narutoOnly: true,
             taskText: taskKindText,
             riskText,
@@ -301,14 +299,9 @@ export async function resolveWorkerModelRouting(input, deps = {}) {
         category,
         choice: routed,
         explicit: Boolean(explicitModel),
-        lb_health: lbHealth,
         lb_catalog: lbCatalog,
         blockers: [...new Set(blockers)],
-        reason: modelRouteReason(category, routed, {
-            explicit: Boolean(explicitModel),
-            quotaLow: lbHealth?.quota_low === true,
-            degraded: lbHealth?.degraded_models || []
-        })
+        reason: modelRouteReason(category, routed, { explicit: Boolean(explicitModel) })
     };
 }
 async function resolveOpenRouterOnlyWorkerRouting(input, deps, ctx) {
@@ -348,7 +341,6 @@ async function resolveOpenRouterOnlyWorkerRouting(input, deps, ctx) {
         category,
         choice: routed,
         explicit: Boolean(explicitModel),
-        lb_health: Object.prototype.hasOwnProperty.call(deps, 'lbHealth') ? deps.lbHealth : null,
         lb_catalog: null,
         blockers: [...new Set(blockers)],
         reason: `${category}->${choiceModel || 'blocked'}@${routed.reasoning} (openrouter only list: ${why})`

package/dist/core/auto-review.js

@@ -3,6 +3,7 @@ import path from 'node:path';
 import { createHash } from 'node:crypto';
 import { ensureDir, exists, readText, writeTextAtomic } from './fsx.js';
 import { writeCodexConfigGuarded } from './codex/codex-config-guard.js';
+import { CODEX_FAST_SERVICE_TIER_ID } from './codex/codex-service-tier.js';
 import { inspectConfinedPath, removeManagedPathVerified } from './managed-path-safety.js';
 import { RETIRED_AUTO_REVIEW_POLICY_TEXTS, RETIRED_SKS_CONFIG_PROFILE_NAMES } from './doctor/retired-auto-review-config.js';
 import { escapeRegExp } from './text/regex.js';
@@ -217,7 +218,7 @@ export function buildMadHighLaunchProfileNoWrite(opts = {}) {
             '--ask-for-approval',
             'never',
             '-c',
-            'service_tier=fast',
+            `service_tier=${CODEX_FAST_SERVICE_TIER_ID}`,
             '-c',
             'model_reasoning_effort=xhigh'
         ],
@@ -254,7 +255,7 @@ export async function ensureMadHighProfileForSetupOrRepair(opts = {}) {
         config_path: configPath,
         profile_config_path: path.join(path.dirname(configPath), `${MAD_HIGH_PROFILE}.config.toml`),
         profile_name: MAD_HIGH_PROFILE,
-        launch_args: ['--profile', MAD_HIGH_PROFILE, '--sandbox', 'danger-full-access', '--ask-for-approval', 'never', '-c', 'service_tier=fast', '-c', 'model_reasoning_effort=xhigh'],
+        launch_args: ['--profile', MAD_HIGH_PROFILE, '--sandbox', 'danger-full-access', '--ask-for-approval', 'never', '-c', `service_tier=${CODEX_FAST_SERVICE_TIER_ID}`, '-c', 'model_reasoning_effort=xhigh'],
         sandbox_mode: 'danger-full-access',
         approval_policy: 'never',
         approvals_reviewer: AUTO_REVIEW_REVIEWER,

package/dist/core/code-structure.js

@@ -582,7 +582,6 @@ function isLeanOwnedTypeSafetyPath(file) {
         'src/core/agents/native-worker-backend-router.ts',
         'src/scripts/check-architecture.ts',
         'src/scripts/check-command-module-budget.ts',
-        'src/scripts/check-pipeline-budget.ts',
         'src/scripts/check-route-modularity.ts',
         'src/scripts/check-publish-tag.ts',
         'src/scripts/gpt-final-arbiter-check.ts',

package/dist/core/codex/codex-cli-syntax-builder.js

@@ -1,3 +1,4 @@
+import { codexServiceTierId } from './codex-service-tier.js';
 export function buildCodexExecArgs(opts) {
     if (opts.danger && !opts.allowDanger) {
         throw new Error('codex exec danger mode requires explicit allowDanger=true');
@@ -30,7 +31,7 @@ export function buildCodexExecArgs(opts) {
         args.push('--sandbox', opts.sandbox);
     const serviceTier = normalizeCodexServiceTier(opts.serviceTier);
     if (serviceTier)
-        args.push('-c', `service_tier=${serviceTier}`);
+        args.push('-c', `service_tier=${codexServiceTierId(serviceTier)}`);
     args.push(opts.prompt);
     return args;
 }