sneakoscope 10.3.7 → 10.3.9

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.3.7**. Install the latest stable release from npm.
+Current package: **SKS 10.3.9**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 
@@ -29,7 +29,10 @@ npm exec --yes --package=sneakoscope@latest -- sneakoscope install --yes
 The installer resolves the latest release, installs it globally, runs setup and
 Doctor, and checks that `sks` on your PATH points to the installed version.
 
-To set up a project, run this from its root, then open it in Codex:
+SKS turns on in every project you open in Codex. Its hooks live in the
+user-level `~/.codex/hooks.json`, and `sks update` keeps them installed and
+trusted. To add a project's own SKS files (TriWiki context, ignore rules), run
+this from its root:
 
 ```sh
 sks bootstrap --yes
@@ -43,7 +46,7 @@ sks bootstrap --yes
 | Project context | TriWiki indexes repository code and supplies bounded context that can be checked against source. |
 | Verification | Tests, diagnostics, and release evidence support completion claims. Security and data-integrity checks stay in place. |
 | Native controls | SKS Center brings connections, updates, MCP servers, and diagnostics together on macOS. |
-| Consistent setup | `sks update` installs the latest release, runs Doctor, and reconciles SKS-managed files and legacy assets. |
+| Consistent setup | `sks update` installs the latest release, runs Doctor, turns SKS hooks on for every Codex project, and reconciles SKS-managed files and legacy assets. |
 
 The default `essential` profile avoids repetitive completion rituals. `strict`
 adds stronger completion requirements. See [Essential Trust](docs/essential-trust.md).
@@ -101,7 +104,8 @@ home directory; set `SKS_POSTINSTALL_MENUBAR=1` to force the build in a script,
 | Page | Use it to |
 | --- | --- |
 | Overview | Check local health and find the next action. |
-| Connections | Connect Codex-LB or OpenRouter, choose authentication priority, and manage exposed models. |
+| Connections | Connect Codex-LB or OpenRouter, choose Prefer Codex-LB or OpenRouter Only, and manage exposed models. |
+| Subagent Models | Keep the OpenRouter models subagents may use in OpenRouter Only Mode, with the criteria Jev routes by. |
 | Updates | Check and update SKS and Codex CLI, with operation progress and recovery details. |
 | MCP Servers | Manage server configuration, health checks, and authentication. |
 | Image Generation | Keep Codex's default image generation, or route it through the Desktop Bridge to an OpenRouter image model you pick. |
@@ -123,184 +127,11 @@ connection first for eligible models. The switch distinguishes a saved preferenc
 from connection readiness: **on but unavailable** means setup needs attention.
 Turning it off restores the configured official-model routing preference.
 
-The same controls are available from the CLI:
-
-```sh
-sks bridge auth-priority status --json
-sks bridge auth-priority on --json
-sks bridge auth-priority off --json
-sks bridge status --json
-sks bridge route explain gpt-6-astra --json
-```
-
-Enter credentials through the native connection dialog or the CLI's
-`--api-key-stdin` option. See the [provider guide](docs/codex-lb.md) for
-configuration, transport checks, and recovery commands.
-
-## Image generation
-
-SKS image routes (image generation, UX-Review callouts, PPT assets, slide
-reviews) follow one image mode. By default they use Codex's own image
-generation. Turn on a custom image model on the **Image Generation** page to
-send every SKS image through the Desktop Bridge to an OpenRouter image model
-you pick. SKS pins no image model and records which model made each image.
-
-```sh
-sks imagegen status --json
-sks imagegen models --json
-sks imagegen enable --model black-forest-labs/flux.2-klein-4b
-sks imagegen generate --prompt "App icon, flat, blue" --out icon.png
-sks imagegen disable
-```
-
-See [Image generation](docs/image-generation.md) for both modes, evidence
-sidecars, and the Jev choices.
-
-## Naruto workflow
-
-The parent orchestrates: it decomposes the task, spawns a child for each
-disjoint slice, waits, and owns integration and final verification. It does not
-implement slices itself. The SKS PreToolUse hook denies parent source edits
-until the first child starts and while children are still running. Children
-receive bounded tasks and do not spawn children.
-
-No model family is pinned. Every child runs the newest model of the tier its
-work needs, read from the Codex models cache, so a new model family is used as
-soon as Codex lists it:
-
-| Work | Tier | Effort | Today |
-| --- | --- | --- | --- |
-| Tiny mechanical tasks | fast | low | `gpt-6-luna` |
-| Instructed implementation | balanced | low | `gpt-6-sol` |
-| Exploration, large-context reads, and direct tool operation | context | medium | `gpt-6-sol` |
-| Planning, review, debugging, and focused judgment | deep | max | `gpt-6-astra` |
-
-With Jev mode on, Jev picks the tier for every spawn, every gated parent edit,
-the plan, and the context, so the parent spends no time on those choices. It
-also picks the pipeline for each prompt; an explicit SKS `<div align="center">
-
-<img src="docs/assets/sks-logo.svg" alt="Sneakoscope Codex logo" width="120" height="120" />
-
-# Sneakoscope Codex
-
-**Plan, build, and verify with Codex.**
-
-[![npm version](https://img.shields.io/npm/v/sneakoscope?color=cb3837&logo=npm)](https://www.npmjs.com/package/sneakoscope)
-[![node](https://img.shields.io/badge/node-%3E%3D20.11-339933?logo=node.js&logoColor=white)](#requirements)
-[![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
-
-</div>
-
-<!-- BEGIN SKS SEARCH VISIBILITY MARKETING -->
-Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
-<!-- END SKS SEARCH VISIBILITY MARKETING -->
-
-Current package: **SKS 10.3.7**. Install the latest stable release from npm.
-
-[Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
-
-## Install in one command
-
-```sh
-npm exec --yes --package=sneakoscope@latest -- sneakoscope install --yes
-```
-
-The installer resolves the latest release, installs it globally, runs setup and
-Doctor, and checks that `sks` on your PATH points to the installed version.
-
-To set up a project, run this from its root, then open it in Codex:
-
-```sh
-sks bootstrap --yes
-```
-
-## What SKS adds
-
-| Capability | What you get |
-| --- | --- |
-| Focused execution | Answers and tiny edits stay lightweight; implementation work runs through official Codex subagents while the parent orchestrates and integrates. |
-| Project context | TriWiki indexes repository code and supplies bounded context that can be checked against source. |
-| Verification | Tests, diagnostics, and release evidence support completion claims. Security and data-integrity checks stay in place. |
-| Native controls | SKS Center brings connections, updates, MCP servers, and diagnostics together on macOS. |
-| Consistent setup | `sks update` installs the latest release, runs Doctor, and reconciles SKS-managed files and legacy assets. |
-
-The default `essential` profile avoids repetitive completion rituals. `strict`
-adds stronger completion requirements. See [Essential Trust](docs/essential-trust.md).
-
-With Codex-LB connected, `sks agent-bridge async --prompt "Check SKS status while
-explaining what the check covers" --tools status --json` runs native Astra Async
-tool calling with selected read-only SKS tools, using WebSocket first and safe
-HTTP fallback. See [Astra guidance](docs/astra-guidance.md)
-for setup boundaries and reported execution evidence.
-
-## Everyday commands
-
-SKS enables experimental Astra context management by default during setup and
-repair. Turn it off in **SKS Center → Settings → Astra context management**, or
-use `sks codex-app context-management off`. Updates preserve an explicit opt-out.
-Start a new task after changing the setting. Availability depends on a supported
-Codex client and eligible ChatGPT sign-in; API-key and custom-provider sessions
-may not activate it. See [OpenAI's context management guidance](https://learn.chatgpt.com/docs/models#experimental-context-management).
-
-Use these inside a Codex conversation:
-
-| Command | Purpose |
-| --- | --- |
-| `$sks-plan "task"` | Create a plan without editing product code. |
-| `$sks-work` | Execute the latest plan. |
-| `$sks-naruto "task"` | Run an official subagent workflow. |
-| `$sks-review` | Review the current changes. |
-| `$sks-help` | Explore available SKS workflows. |
-
-Use these in your terminal:
-
-```sh
-sks --help
-sks status --json
-sks review --staged
-sks doctor --json
-sks update-check
-sks update
-```
-
-`sks update` runs setup reconciliation even when the package is already current.
-It preserves user-authored configuration and cleans up recognized SKS-owned
-legacy assets. If a check needs attention, follow its reported recovery action
-in your terminal.
-
-## SKS Center (macOS)
-
-Open **SKS Control Center** from the SKS menu bar.
-The Menu Bar app (with the Control Center) is built from source on macOS when you run
-`npm i -g sneakoscope` interactively in a terminal, and by `sks install`, `sks doctor --fix`,
-`sks update`, or `sks menubar install`. Dependency, CI, and piped installs never touch your
-home directory; set `SKS_POSTINSTALL_MENUBAR=1` to force the build in a script, or
-`SKS_POSTINSTALL_NO_MENUBAR=1` to skip it.
-
-| Page | Use it to |
-| --- | --- |
-| Overview | Check local health and find the next action. |
-| Connections | Connect Codex-LB or OpenRouter, choose authentication priority, and manage exposed models. |
-| Updates | Check and update SKS and Codex CLI, with operation progress and recovery details. |
-| MCP Servers | Manage server configuration, health checks, and authentication. |
-| Image Generation | Keep Codex's default image generation, or route it through the Desktop Bridge to an OpenRouter image model you pick. |
-| Diagnostics | Inspect issues and run targeted checks. |
-| Settings | Configure lifecycle behavior, notifications, and advanced options. |
-| Remote Coding | Find the independent [Paseo companion](https://paseo.sh/docs) and its setup guidance. |
-
-Connection controls appear first. Model catalogs, bridge diagnostics, and
-advanced settings expand when you need them.
-
-## Desktop Bridge
-
-One local bridge manages routing for independent **Codex-LB** and **OpenRouter**
-profiles. ChatGPT sign-in remains owned by Codex. Provider choices and existing
-session pins remain authoritative; unavailable routes are reported explicitly.
-
-In **Connections**, turn on **Prefer Codex-LB** to use the saved Codex-LB
-connection first for eligible models. The switch distinguishes a saved preference
-from connection readiness: **on but unavailable** means setup needs attention.
-Turning it off restores the configured official-model routing preference.
+Turn on **OpenRouter Only** instead to run the main thread and every subagent on
+OpenRouter models. The two switches are mutually exclusive: turning one on turns
+the other off. Subagents may use only the models on the **Subagent Models** page,
+and with Jev mode on, Jev picks one for each child from the criteria you wrote.
+See [OpenRouter Only Mode](docs/openrouter-only-mode.md).
 
 The same controls are available from the CLI:
 
@@ -308,6 +139,8 @@ The same controls are available from the CLI:
 sks bridge auth-priority status --json
 sks bridge auth-priority on --json
 sks bridge auth-priority off --json
+sks bridge openrouter-only on --json
+sks bridge subagent-models list --json
 sks bridge status --json
 sks bridge route explain gpt-6-astra --json
 ```
@@ -356,7 +189,7 @@ soon as Codex lists it:
 
 With Jev mode on, Jev picks the tier for every spawn, every gated parent edit,
 the plan, and the context, so the parent spends no time on those choices. It
- command always
+also picks the pipeline for each prompt; an explicit SKS dollar command always
 wins. A stored role-model preference on a current model wins in both modes.
 
 An active Codex task keeps the user's selected main model, effort, and service
@@ -393,6 +226,7 @@ freshness semantics.
 - [Astra guidance](docs/astra-guidance.md) — how SKS applies the official model recommendations.
 - [Agent Bridge](docs/AGENT-BRIDGE.md) — integrate through the CLI or MCP interface.
 - [Codex-LB priority](docs/codex-lb-priority.md) — how Codex App WebSockets follow the Center priority setting.
+- [OpenRouter Only Mode](docs/openrouter-only-mode.md) — run everything on OpenRouter with a subagent model list Jev routes by.
 - [Release readiness](docs/release-readiness.md) — build, verify, and publish a release.
 - [Release evidence](docs/release-proof-truth.md) — what each verification result proves.
 - [Changelog](CHANGELOG.md) — changes by version.

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.3.7"
+version = "10.3.9"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.3.7"
+version = "10.3.9"
 edition = "2021"
 
 [dependencies]

package/dist/bin/sks-dispatch.js

@@ -29,7 +29,7 @@ async function runSks(args) {
     }
     else if (args[0] === 'hook' && args[1] && (await import('../core/verification-profile.js')).hookDaemonEnabled()) {
         const { hookDaemonInline } = await import('../core/daemon/sksd-hook-dispatch.js');
-        await hookDaemonInline(args[1]);
+        await hookDaemonInline(args[1], args.slice(2));
     }
     else if (args.length === 3 && args[0] === 'naruto' && args[1] === 'help' && args[2] === '--json') {
         const { narutoHelpJsonFastInline } = await import('./fast-inline.js');

package/dist/cli/command-registry.js

@@ -338,7 +338,6 @@ const COMMANDS_WITH_LEGACY_CONTRACT_OVERRIDES = applyCommandContractOverrides(CO
     }
 });
 export const COMMANDS = applyCommandManifestContract(COMMANDS_WITH_LEGACY_CONTRACT_OVERRIDES);
-export const TYPED_COMMANDS = COMMANDS;
 export const LEGACY_COMMAND_ALIASES = {};
 export const COMMAND_ALIASES = {
     ...LEGACY_COMMAND_ALIASES,
@@ -356,11 +355,3 @@ export const COMMAND_ALIASES = {
 export function commandNames() {
     return Object.keys(COMMANDS).sort();
 }
-export function typedCommandNames() {
-    return commandNames();
-}
-export function assertCommandModule(value) {
-    if (!value || typeof value !== 'object' || typeof value.run !== 'function') {
-        throw new Error('Command module must expose run(command, args)');
-    }
-}

package/dist/cli/feature-commands.js

@@ -11,8 +11,8 @@ import { codexSchemaSnapshotReport } from '../core/codex-compat/codex-schema-sna
 import { validateCodexFixtureOutputs } from '../core/codex-compat/codex-hook-schema.js';
 import { codexHookWarningCheck } from '../core/codex-compat/codex-hook-warning-detector.js';
 import { codexHookTrustDoctor } from '../core/codex-hooks/codex-hook-trust-doctor.js';
-import { writeTrustedHashStateForHooksFile } from '../core/codex-hooks/codex-hook-state-writer.js';
-import { installManagedCodexHooks } from '../core/codex-hooks/codex-hook-managed-install.js';
+import { activateSksCodexHooks } from '../core/codex-hooks/codex-project-hooks.js';
+import { globalHookPaths, readGlobalSksHookState } from '../core/codex-hooks/codex-global-hooks.js';
 import { writeCodexHookOfficialParityReport } from '../core/codex-hooks/codex-hook-official-parity.js';
 const flag = (args, name) => args.includes(name);
 export async function featuresCommand(sub = 'list', args = []) {
@@ -111,7 +111,7 @@ export async function hooksCommand(sub = 'explain', args = []) {
         const report = await hooksStatusReport(root);
         if (flag(args, '--json'))
             return console.log(JSON.stringify(report, null, 2));
-        console.log(`Hooks: ${report.ok ? 'ok' : 'missing'}`);
+        console.log(`Hooks: ${report.ok ? 'active for every project' : 'not active (run: sks doctor --fix)'}`);
         for (const file of report.hooks_files)
             console.log(`- ${file.path}: ${file.exists ? 'present' : 'missing'}`);
         return;
@@ -153,63 +153,27 @@ export async function hooksCommand(sub = 'explain', args = []) {
             process.exitCode = 1;
         return;
     }
-    if (action === 'repair') {
-        if (flag(args, '--trusted')) {
-            const parity = await writeCodexHookOfficialParityReport(root);
-            if (!parity.official_hash_available) {
-                const blocked = {
-                    schema: 'sks.codex-hooks-repair.v1',
-                    ok: false,
-                    mode: 'trusted',
-                    status: 'blocked',
-                    blocker: 'official_hash_oracle_unavailable',
-                    next_command: 'sks hooks repair --managed --json',
-                    parity
-                };
-                if (flag(args, '--json'))
-                    return console.log(JSON.stringify(blocked, null, 2));
-                console.log('Hooks trusted repair blocked: official hash oracle unavailable. Run `sks hooks repair --managed --json`.');
-                process.exitCode = 1;
-                return;
-            }
-        }
-        const projectReport = await installManagedCodexHooks(root);
-        const userReport = await installManagedCodexHooks(root, {
-            requirementsPath: path.join(os.homedir(), '.codex', 'requirements.toml'),
-            managedDir: path.join(os.homedir(), '.codex', 'managed-hooks')
-        });
+    if (action === 'repair' || action === 'install') {
+        const activation = await activateSksCodexHooks({ root });
         const actual = await codexHookTrustDoctor(root, { actual: true });
         const result = {
-            schema: 'sks.codex-hooks-repair.v1',
-            ok: Boolean(projectReport.ok && userReport.ok && actual.ok),
-            mode: 'managed',
+            schema: action === 'repair' ? 'sks.codex-hooks-repair.v2' : 'sks.codex-hooks-install.v2',
+            ok: activation.ok && activation.active,
+            mode: 'user_level',
             root,
-            project_install: projectReport,
-            user_install: userReport,
+            activation,
             actual_trust: actual.trust,
-            managed_dirs: actual.managed_dirs || [],
-            blockers: actual.blockers || [],
-            next_command: 'sks hooks trust-doctor --actual --json',
-            actions: ['project_requirements_toml_managed_install', 'user_requirements_toml_managed_install']
+            blockers: activation.blockers,
+            warnings: activation.warnings,
+            next_command: 'sks hooks status --json'
         };
         if (flag(args, '--json'))
             return console.log(JSON.stringify(result, null, 2));
-        console.log(`Hooks managed repair: ${result.ok ? 'ok' : 'blocked'}`);
+        console.log(`SKS Codex hooks: ${result.ok ? 'active for every project' : 'blocked'}${result.blockers.length ? ` (${result.blockers.join(', ')})` : ''}`);
         if (!result.ok)
             process.exitCode = 1;
         return;
     }
-    if (action === 'install') {
-        const report = flag(args, '--managed')
-            ? await installManagedCodexHooks(root)
-            : await writeTrustedHashStateForHooksFile(root, undefined, undefined, { allowSksHashFallback: flag(args, '--trusted'), reason: 'Use --managed unless you intentionally accept SKS-only trusted_hash fallback with --trusted.' });
-        if (flag(args, '--json'))
-            return console.log(JSON.stringify({ ...report, schema: flag(args, '--managed') ? 'sks.codex-hooks-managed-install.v1' : 'sks.codex-hook-install-command.v2', mode: flag(args, '--managed') ? 'managed' : flag(args, '--project') ? 'project' : 'trust-state-only', trusted: flag(args, '--trusted') }, null, 2));
-        console.log(flag(args, '--managed') ? `Hooks managed install: ${report.ok ? 'ok' : 'blocked'}` : `Hooks install trust state: ${report.ok ? 'ok' : 'blocked'}`);
-        if (!report.ok)
-            process.exitCode = 1;
-        return;
-    }
     if (action === 'actual-parity' || action === 'official-parity' || (action === 'parity' && flag(args, '--official'))) {
         const report = await writeCodexHookOfficialParityReport(root);
         if (flag(args, '--json'))
@@ -289,8 +253,9 @@ export async function hooksCommand(sub = 'explain', args = []) {
         console.log(`- ${source.title}: ${source.url}`);
 }
 async function hooksStatusReport(root) {
+    const global = await readGlobalSksHookState();
     const files = [
-        path.join(os.homedir(), '.codex', 'hooks.json'),
+        globalHookPaths().hooksPath,
         path.join(root, '.codex', 'hooks.json')
     ];
     const hooksFiles = [];
@@ -298,9 +263,10 @@ async function hooksStatusReport(root) {
         hooksFiles.push({ path: file, exists: await exists(file) });
     }
     return {
-        schema: 'sks.hooks-status.v1',
+        schema: 'sks.hooks-status.v2',
         hooks_files: hooksFiles,
-        ok: hooksFiles.some((file) => file.exists)
+        global,
+        ok: global.active
     };
 }
 async function hooksTrustReport(root) {

package/dist/cli/global-mode-router.js

@@ -1,4 +1,3 @@
-const RESERVED_COMMANDS = new Set(['help', '--help', '-h', 'version', '--version', '-v']);
 const RETIRED_NARUTO_OPTION = ['--', 'naruto'].join('');
 const RETIRED_AGENT_OPTION = ['--', 'agent'].join('');
 const RETIRED_CLONES_OPTION = ['--', 'clones'].join('');

package/dist/cli/install-helpers-codex-lb-shared.js

@@ -3,9 +3,6 @@ import os from 'node:os';
 export function codexLbConfigPath(home = process.env.HOME || os.homedir()) {
     return path.join(String(home), '.codex', 'config.toml');
 }
-export function codexLbEnvPath(home = process.env.HOME || os.homedir()) {
-    return path.join(String(home), '.codex', 'sks-codex-lb.env');
-}
 export function codexAuthPath(home = process.env.HOME || os.homedir()) {
     return path.join(String(home), '.codex', 'auth.json');
 }

package/dist/cli/install-helpers-install-support.js

@@ -1,7 +1,7 @@
 import path from 'node:path';
 import os from 'node:os';
 import fsp from 'node:fs/promises';
-import { ensureDir, exists, packageRoot, PACKAGE_VERSION, runProcess, tmpdir, writeTextAtomic } from '../core/fsx.js';
+import { ensureDir, exists, packageRoot, PACKAGE_VERSION, runProcess, writeTextAtomic } from '../core/fsx.js';
 import { EMPTY_CODEX_INFO, getCodexInfo } from '../core/codex-adapter.js';
 import { installGlobalSkills } from '../core/init.js';
 import { context7ConfigToml, DOLLAR_SKILL_NAMES, GETDESIGN_REFERENCE, hasContext7ConfigText, RECOMMENDED_SKILLS } from '../core/routes.js';
@@ -51,25 +51,6 @@ export async function ensureSksCommandDuringInstall(opts = {}) {
         return { status: 'created_not_on_path', command: createdFallback };
     return { status: 'failed', error: lastError };
 }
-export async function selftestSksShimRepair() {
-    const staleShimTmp = tmpdir();
-    const staleBin = path.join(staleShimTmp, 'old-prefix', 'bin');
-    const stalePkg = path.join(staleShimTmp, 'old-prefix', 'lib', 'node_modules', 'sneakoscope');
-    const staleEntrypoint = path.join(stalePkg, 'dist', 'bin', 'sks.js');
-    await ensureDir(path.dirname(staleEntrypoint));
-    await ensureDir(staleBin);
-    await writeTextAtomic(path.join(stalePkg, 'package.json'), JSON.stringify({ name: 'sneakoscope', version: '0.0.1' }, null, 2));
-    await writeTextAtomic(staleEntrypoint, '#!/usr/bin/env node\nconsole.log("sneakoscope 0.0.1");\n');
-    await fsp.chmod(staleEntrypoint, 0o755).catch(() => { });
-    await fsp.symlink(staleEntrypoint, path.join(staleBin, 'sks'));
-    const repair = await ensureSksCommandDuringInstall({ force: true, pathEnv: staleBin, home: path.join(staleShimTmp, 'home') });
-    if (repair.status !== 'repaired')
-        throw new Error(`selftest: stale global sks shim was not repaired (${repair.status})`);
-    const run = await runProcess(path.join(staleBin, 'sks'), ['--version'], { timeoutMs: 10000, maxOutputBytes: 16 * 1024 });
-    if (run.code !== 0 || !String(run.stdout || '').includes(PACKAGE_VERSION))
-        throw new Error('selftest: repaired stale sks shim does not run current package version');
-    return { ok: true, repaired: repair.repaired || [] };
-}
 async function reconcileSksPathShimsDuringInstall(opts = {}) {
     if (process.env.SKS_SKIP_POSTINSTALL_SHIM_REPAIR === '1' && !opts.force)
         return { status: 'skipped', reason: 'SKS_SKIP_POSTINSTALL_SHIM_REPAIR=1' };

package/dist/cli/install-helpers.js

@@ -237,7 +237,7 @@ async function runPostinstallBootstrap(root, bootstrap, selectedDecision) {
         process.chdir(previousCwd);
     }
 }
-export { checkContext7, ensureCodexCliTool, ensureRelatedCliTools, maybePromptCodexUpdateForLaunch, maybePromptSksUpdateForLaunch, shouldAutoApproveInstall } from './install-tool-helpers.js';
+export { checkContext7, ensureCodexCliTool, ensureRelatedCliTools, maybePromptSksUpdateForLaunch, shouldAutoApproveInstall } from './install-tool-helpers.js';
 export { codexFastModeDesktopStatus, ensureGlobalCodexFastModeDuringInstall, normalizeCodexFastModeUiConfig, safeWriteCodexConfigToml } from '../core/codex-runtime/codex-desktop-config-policy.js';
-export { checkRequiredSkills, context7GlobalMcpStatus, ensureCodexImagegenDuringInstall, ensureGlobalCodexSkillsDuringInstall, ensureProjectContext7Config, ensureSksCommandDuringInstall, globalCodexSkillsRoot, selftestSksShimRepair } from './install-helpers-install-support.js';
-export { codexLbConfigPath, codexLbEnvPath } from './install-helpers-codex-lb-shared.js';
+export { checkRequiredSkills, context7GlobalMcpStatus, ensureCodexImagegenDuringInstall, ensureGlobalCodexSkillsDuringInstall, ensureProjectContext7Config, ensureSksCommandDuringInstall, globalCodexSkillsRoot } from './install-helpers-install-support.js';
+export { codexLbConfigPath } from './install-helpers-codex-lb-shared.js';

package/dist/cli/install-tool-helpers.js

@@ -42,33 +42,6 @@ export async function ensureCodexCliTool({ skip = false, args = [] } = {}) {
         hint: after.bin ? null : 'npm completed, but codex is not on PATH. Restart the shell or set SKS_CODEX_BIN.'
     };
 }
-export async function maybePromptCodexUpdateForLaunch(args = [], opts = {}) {
-    if (hasFlag(args, '--json') || hasFlag(args, '--skip-cli-tools') || hasFlag(args, '--skip-codex-update') || process.env.SKS_SKIP_CODEX_UPDATE === '1')
-        return { status: 'skipped' };
-    const latest = await npmPackageVersion('@openai/codex');
-    const codex = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    const current = codexCliVersionNumber(codex.version);
-    const command = 'npm i -g @openai/codex@latest';
-    const label = opts.label || 'Codex launch';
-    const missing = !codex.bin;
-    const updateAvailable = Boolean(latest.version && current && compareVersions(latest.version, current) > 0);
-    if (!missing && !updateAvailable)
-        return { status: 'current', latest: latest.version || null, current, bin: codex.bin || null, error: latest.error || null };
-    const prompt = missing
-        ? `Codex CLI missing. Install @openai/codex${latest.version ? ` ${latest.version}` : '@latest'} before ${label}? [Y/n] `
-        : `Codex CLI ${current} -> ${latest.version} update before ${label}? [Y/n] `;
-    if (shouldAutoApproveInstall(args))
-        return installCodexLatest(command, latest.version, current);
-    if (!canAskYesNo()) {
-        const reason = missing ? 'Codex CLI missing' : `Codex CLI update available: ${current} -> ${latest.version}`;
-        console.log(`${reason}. Run: ${command}`);
-        return { status: missing ? 'missing' : 'available', latest: latest.version || null, current, command, bin: codex.bin || null };
-    }
-    const answer = (await askQuestion(prompt)).trim();
-    if (!(answer === '' || /^(y|yes|예|네|응)$/i.test(answer)))
-        return { status: 'skipped_by_user', latest: latest.version || null, current, command, bin: codex.bin || null };
-    return installCodexLatest(command, latest.version, current);
-}
 export async function maybePromptSksUpdateForLaunch(args = [], opts = {}) {
     void args;
     void opts;
@@ -102,23 +75,6 @@ export async function isProjectSetupCandidate(root) {
     }
     return false;
 }
-export function hasTopLevelCodexModeLock(text = '') {
-    const lines = String(text || '').split('\n');
-    const firstTable = lines.findIndex((line) => /^\s*\[.+\]\s*$/.test(line));
-    const top = (firstTable === -1 ? lines : lines.slice(0, firstTable)).join('\n');
-    return /(^|\n)\s*model_reasoning_effort\s*=/.test(top);
-}
-export function hasDeprecatedCodexHooksFeatureFlag(text = '') {
-    const lines = String(text || '').split('\n');
-    const start = lines.findIndex((line) => line.trim() === '[features]');
-    if (start === -1)
-        return false;
-    const end = lines.findIndex((line, index) => index > start && /^\s*\[.+\]\s*$/.test(line));
-    return lines.slice(start + 1, end === -1 ? lines.length : end).some((line) => /^\s*codex_hooks\s*=/.test(line));
-}
-export function hasCodexUnstableFeatureWarningSuppression(text = '') {
-    return /(^|\n)\s*suppress_unstable_features_warning\s*=\s*true\s*(?:#.*)?(?=\n|$)/.test(String(text || ''));
-}
 export async function checkContext7(root) {
     const projectPath = path.join(root, '.codex', 'config.toml');
     const globalPath = path.join(process.env.HOME || '', '.codex', 'config.toml');
@@ -164,38 +120,6 @@ function isAgentRuntime(env = process.env) {
     return ['SKS_OPENCLAW', 'OPENCLAW', 'OPENCLAW_AGENT', 'OPENCLAW_RUN_ID', 'OPENCLAW_SESSION_ID', 'SKS_HERMES', 'HERMES_AGENT', 'HERMES_RUN_ID', 'HERMES_SESSION_ID']
         .some((key) => /^(1|true|yes|y)$/i.test(String(env[key] || '').trim()));
 }
-async function installCodexLatest(command, latestVersion, previousVersion = null) {
-    const npm = await which('npm').catch(() => null);
-    if (!npm)
-        return { status: 'failed', latest: latestVersion || null, previous: previousVersion || null, command, error: 'npm not found on PATH' };
-    const install = await runProcess(npm, ['i', '-g', '@openai/codex@latest'], { timeoutMs: 180000, maxOutputBytes: 128 * 1024 }).catch((err) => ({ code: 1, stdout: '', stderr: err.message }));
-    if (install.code !== 0)
-        return { status: 'failed', latest: latestVersion || null, previous: previousVersion || null, command, error: `${install.stderr || install.stdout || command + ' failed'}`.trim() };
-    const after = await getCodexInfo().catch(() => EMPTY_CODEX_INFO);
-    const afterVersion = codexCliVersionNumber(after.version);
-    if (!after.bin)
-        return { status: 'updated_not_reflected', latest: latestVersion || null, previous: previousVersion || null, version: afterVersion || null, command, error: 'npm completed, but codex is not on PATH. Restart the shell or set SKS_CODEX_BIN.' };
-    if (latestVersion && afterVersion && compareVersions(afterVersion, latestVersion) < 0) {
-        return { status: 'updated_not_reflected', latest: latestVersion, previous: previousVersion || null, version: afterVersion, bin: after.bin, command, error: `npm completed, but PATH still resolves Codex CLI ${afterVersion}; expected ${latestVersion}.` };
-    }
-    console.log(`Codex CLI ready: ${previousVersion || 'missing'} -> ${after.version || after.bin}`);
-    return { status: previousVersion ? 'updated' : 'installed', latest: latestVersion || null, previous: previousVersion || null, version: afterVersion || null, raw_version: after.version || null, bin: after.bin || null, command };
-}
-function codexCliVersionNumber(versionText = '') {
-    return String(versionText || '').match(/(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)/)?.[1] || null;
-}
-async function npmPackageVersion(name) {
-    const envName = `SKS_NPM_VIEW_${String(name || '').replace(/[^A-Za-z0-9]+/g, '_').toUpperCase()}_VERSION`;
-    if (process.env[envName])
-        return { version: process.env[envName] };
-    const npm = await which('npm').catch(() => null);
-    if (!npm)
-        return { error: 'npm not found' };
-    const result = await runProcess(npm, ['view', name, 'version'], { timeoutMs: 5000, maxOutputBytes: 4096 });
-    if (result.code !== 0)
-        return { error: `${result.stderr || result.stdout || 'npm view failed'}`.trim() };
-    return { version: result.stdout.trim().split(/\s+/).pop() };
-}
 async function safeReadText(file) {
     try {
         return await fsp.readFile(file, 'utf8');

package/dist/cli/router.js

@@ -6,9 +6,6 @@ import { helpResult, isHelpRequest, renderManifestHelp } from './help.js';
 import { findRetiredGlobalExecutionArgumentErrors } from './global-mode-router.js';
 import { normalizeIntentCommand, } from '../core/commands/intent-normalization/normalizer.js';
 const routerIntentStorage = new AsyncLocalStorage();
-export function currentRouterIntentContract() {
-    return routerIntentStorage.getStore() || null;
-}
 export function prepareRouterExecutionIntent(argv, inheritance = {}) {
     const effectiveArgv = argv.length ? [...argv] : ['doctor'];
     const rawCommand = effectiveArgv[0]?.startsWith('$')