sneakoscope 10.3.7 → 10.3.9

package/dist/commands/bridge.js

@@ -5,6 +5,7 @@ import { serveDesktopBridge } from '../core/codex-lb/desktop-service.js';
 import { BridgeCliError, errorOutput, mergeMetadata, ordinaryOutput, sanitizeBridgeValue, textSummary, verificationOutput } from './bridge-command-output.js';
 const CONTROLLER_FACADE_EXPORT = 'executeDesktopBridgeCommand';
 const MAX_STDIN_SECRET_BYTES = 64 * 1024;
+const MAX_STDIN_JSON_BYTES = 64 * 1024;
 const DEFAULT_IO = {
     readStdin,
     stdout: (text) => process.stdout.write(text),
@@ -18,6 +19,9 @@ export function usage(command = 'bridge') {
         `Usage: sks ${command} status [--json]`,
         `       sks ${command} ensure|repair [--json]`,
         `       sks ${command} auth-priority status|on|off [--json]`,
+        `       sks ${command} openrouter-only status|on|off [--no-restart] [--json]`,
+        `       sks ${command} subagent-models list [--json]`,
+        `       sks ${command} subagent-models set --stdin [--no-restart] [--json]`,
         `       sks ${command} verify --level shallow|transport|deep [--strict|--require-ready] [--json]`,
         `       sks ${command} provider list [--json]`,
         `       sks ${command} provider configure codex-lb --host <host> --api-key-stdin [--json]`,
@@ -34,7 +38,9 @@ export function usage(command = 'bridge') {
         `       sks ${command} unmanage --confirm [--json]`,
         `       sks ${command} rollback <receipt-id> --confirm [--json]`,
         '',
-        'Provider secrets are accepted only through --api-key-stdin. Readiness changes the exit code only with --strict or --require-ready.'
+        'Provider secrets are accepted only through --api-key-stdin. Readiness changes the exit code only with --strict or --require-ready.',
+        'OpenRouter Only Mode and Codex-LB authentication priority are mutually exclusive; turning one on turns the other off.',
+        'subagent-models set reads {"subagent_models":[{"model","criteria","reasoning_effort","default"}]} (max 16) from stdin.'
     ].join('\n');
 }
 export async function run(_command, args = []) {
@@ -120,6 +126,39 @@ async function parseInvocation(args, io) {
                 ? { operation: 'auth-priority.status' }
                 : { operation: 'auth-priority.set', enabled: action === 'on' }, label: 'Codex-LB authentication priority' };
     }
+    if (area === 'openrouter-only' && target === undefined && (action === 'status' || action === 'on' || action === 'off')) {
+        if (action === 'status') {
+            allowOnly(parsed, ['--json'], []);
+            return { ...base, request: { operation: 'openrouter-only.status' }, label: 'OpenRouter Only Mode' };
+        }
+        allowOnly(parsed, ['--json', '--no-restart'], []);
+        return {
+            ...base,
+            request: { operation: 'openrouter-only.set', enabled: action === 'on', no_restart: parsed.flags.has('--no-restart') },
+            label: 'OpenRouter Only Mode'
+        };
+    }
+    if (area === 'subagent-models' && target === undefined) {
+        if (action === 'list') {
+            allowOnly(parsed, ['--json'], []);
+            return { ...base, request: { operation: 'subagent-models.list' }, label: 'Subagent model list' };
+        }
+        if (action === 'set') {
+            allowOnly(parsed, ['--json', '--stdin', '--no-restart'], []);
+            if (!parsed.flags.has('--stdin')) {
+                throw new BridgeCliError('bridge_subagent_models_stdin_required', 'retry_with_stdin');
+            }
+            return {
+                ...base,
+                request: {
+                    operation: 'subagent-models.set',
+                    subagent_models: subagentModelsFromStdin(await io.readStdin()),
+                    no_restart: parsed.flags.has('--no-restart')
+                },
+                label: 'Subagent model list update'
+            };
+        }
+    }
     if (area === 'status' && action === undefined) {
         allowOnly(parsed, ['--json'], []);
         return { ...base, request: { operation: 'status' }, label: 'Desktop Bridge status' };
@@ -318,6 +357,27 @@ function parseArgs(args) {
     }
     return { positionals, flags, values };
 }
+function subagentModelsFromStdin(text) {
+    const raw = String(text || '').trim();
+    if (!raw)
+        throw new BridgeCliError('bridge_subagent_models_stdin_empty', 'retry_with_stdin');
+    if (Buffer.byteLength(raw, 'utf8') > MAX_STDIN_JSON_BYTES) {
+        throw new BridgeCliError('bridge_subagent_models_stdin_too_large', 'retry_with_stdin');
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new BridgeCliError('bridge_subagent_models_stdin_invalid_json', 'retry_with_stdin');
+    }
+    const models = parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+        ? parsed.subagent_models
+        : undefined;
+    if (!Array.isArray(models))
+        throw new BridgeCliError('bridge_subagent_models_stdin_invalid', 'retry_with_stdin');
+    return models;
+}
 function rejectSecretArgv(args) {
     for (const arg of args) {
         const option = String(arg).split('=', 1)[0]?.toLowerCase() || '';

package/dist/commands/codex-app.js

@@ -38,7 +38,10 @@ export async function run(_command, args = []) {
         }
         console.log(`Codex 1M Context: ${result.enabled ? 'enabled' : 'disabled'}`);
         console.log(`Config: ${result.config_path}`);
-        console.log(`Model: ${result.model || 'not set'} (documented for ${result.expected_model})`);
+        const window = result.model_window;
+        console.log(`Model: ${result.model || 'not set'}${window.effective_window ? ` · window ${window.effective_window} (default ${window.default_window ?? 'unknown'}, max ${window.max_window ?? 'uncapped'})` : ' · window unknown'}`);
+        if (result.larger_window_models.length)
+            console.log(`Models with a larger window: ${result.larger_window_models.join(', ')}`);
         for (const [key, target] of Object.entries(result.target)) {
             const state = result.keys[key];
             const detail = state?.present ? `${state.value ?? 'unparsed'}${state.managed ? ' (SKS-managed)' : ''}` : 'not set';

package/dist/commands/decision.js

@@ -1,4 +1,4 @@
-import { runDecisionCommand, usage, UsageError } from '../core/decisions/cli.js';
+import { runDecisionCommand } from '../core/decisions/cli.js';
 export { UsageError, parseDecisionArgs, runDecisionCommand, usage } from '../core/decisions/cli.js';
 export async function run(_command, args = []) {
     const code = await runDecisionCommand(args);

package/dist/commands/doctor-helpers.js

@@ -1,5 +1,5 @@
 import { flag } from '../cli/args.js';
-import { projectRoot, exists, nowIso } from '../core/fsx.js';
+import { projectRoot, nowIso } from '../core/fsx.js';
 import { normalizeInstallScope } from '../core/init.js';
 import { appendMigrationEvents, hashConfigText } from '../core/migration/migration-transaction-journal.js';
 import { inspectSksMenuBarStatus, sksMenuBarPaths, sksMenuBarRestartDeferred } from '../core/codex-app/menubar/index.js';
@@ -205,25 +205,6 @@ export async function writeFixMigrationJournal(root, preFix, configRepair, setup
         return null;
     return appendMigrationEvents(root, events);
 }
-async function backupProjectConfigBeforeFix() {
-    try {
-        const fsp = await import('node:fs/promises');
-        const path = await import('node:path');
-        const root = await projectRoot();
-        if (!root)
-            return null;
-        const configPath = path.join(root, '.codex', 'config.toml');
-        if (!(await exists(configPath)))
-            return null;
-        const text = await fsp.readFile(configPath, 'utf8');
-        const backupPath = `${configPath}.doctor-pre-fix-${Date.now().toString(36)}.bak`;
-        await fsp.writeFile(backupPath, text);
-        return backupPath;
-    }
-    catch {
-        return null;
-    }
-}
 export function installScopeFromArgs(args = []) {
     if (flag(args, '--project'))
         return 'project';

package/dist/commands/doctor.js

@@ -1,6 +1,6 @@
 import os from 'node:os';
 import path from 'node:path';
-import { projectRoot, exists, formatBytes, nowIso, readText, writeJsonAtomic } from '../core/fsx.js';
+import { projectRoot, exists, formatBytes, nowIso, writeJsonAtomic } from '../core/fsx.js';
 import { flag } from '../cli/args.js';
 import { printJson } from '../cli/output.js';
 import { ui as cliUi } from '../cli/cli-theme.js';
@@ -25,11 +25,10 @@ import { isUpdateMigrationReceiptCurrent, projectUpdateMigrationReceiptPath, wri
 import { inspectSksMenuBarStatus, installSksMenuBar, sksMenuBarRestartDeferred } from '../core/codex-app/menubar/index.js';
 import { sweepSksTempDirs } from '../core/retention.js';
 import { detectImagegenCapability } from '../core/imagegen/imagegen-capability.js';
-import { CURRENT_CODEX_RUNTIME_CONTRACT } from '../core/codex-compat/codex-runtime-contract.js';
 import { formatHarnessConflictReport, scanHarnessConflicts } from '../core/harness-conflicts.js';
 import { doctorArgWarnings as baseDoctorArgWarnings, doctorGlobalOnlySelection, doctorMenuBarInstallPolicy, doctorPhaseIdsForProfile, doctorProfileFromArgs, doctorProfileRequiresDesktopBridgeReadiness } from './doctor-profile.js';
 import { renderDoctorConsoleReport } from './doctor-console.js';
-import { buildCodexAppUiDiagnosticFailure, buildRuntimeReadiness, captureCodexConfigSnapshot, deferredNativeRepair, doctorDedupeStatus, doctorSkillStatus, fallbackCodexNativeFeatureMatrix, formatCodexDoctorConsoleStatus, installScopeFromArgs, isMigrationUserOwnedProjectConfigBlocker, mergeObservedCodexStartupWarnings, nativeCapabilityStatus, readOption, rebootstrapSksMenuBarLaunchdForDoctorFix, sksMenuBarRunningVersionConsoleLines, uniqueNativeManualActions, writeFixMigrationJournal, writeJsonReportFile } from './doctor-helpers.js';
+import { buildCodexAppUiDiagnosticFailure, buildRuntimeReadiness, captureCodexConfigSnapshot, deferredNativeRepair, fallbackCodexNativeFeatureMatrix, formatCodexDoctorConsoleStatus, installScopeFromArgs, isMigrationUserOwnedProjectConfigBlocker, mergeObservedCodexStartupWarnings, readOption, rebootstrapSksMenuBarLaunchdForDoctorFix, sksMenuBarRunningVersionConsoleLines, writeFixMigrationJournal, writeJsonReportFile } from './doctor-helpers.js';
 export { doctorMenuBarInstallPolicy, doctorProfileFromArgs, doctorProfileRequiresDesktopBridgeReadiness } from './doctor-profile.js';
 export { buildCodexAppUiDiagnosticFailure, buildRuntimeReadiness, formatCodexDoctorConsoleStatus, rebootstrapSksMenuBarLaunchdForDoctorFix, sksMenuBarRunningVersionConsoleLines };
 export function doctorArgWarnings(args = []) {
@@ -582,7 +581,6 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
     const requireActualCodexProbe = flag(args, '--require-actual-codex') || (deepDiagnostics && doctorFix);
     const shouldEvaluateCodexAppUiRepair = doctorFix || deepDiagnostics || flag(args, '--repair-codex-app-ui');
     const nativeCapabilityDiagnosticsRequested = deepDiagnostics || flag(args, '--repair-native-capabilities');
-    const requireLegacyGlobalHookCleanup = doctorFix && doctorProfile === 'migration';
     const migrationReceiptOwnsReconcile = doctorFix && doctorProfile === 'migration';
     const doctorPhaseIds = doctorPhaseIdsForProfile(doctorProfile);
     const { runDoctorCommandAliasCleanup } = await import('../core/doctor/command-alias-cleanup.js');
@@ -654,8 +652,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         fix: nativeCapabilityDiagnosticsRequested && doctorFix,
         yes: flag(args, '--yes') || flag(args, '-y'),
         flags: args.map((arg) => String(arg)),
-        skipNativeCapabilities: !nativeCapabilityDiagnosticsRequested,
-        requireLegacyGlobalHookCleanup
+        skipNativeCapabilities: !nativeCapabilityDiagnosticsRequested
     }).catch((err) => ({
         schema: 'sks.doctor-native-capability-repair.v1',
         ok: false,
@@ -665,19 +662,13 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         core_skills: null,
         skill_dedupe: null,
         native_capabilities: null,
-        legacy_global_hooks: {
-            ok: false,
-            blockers: [`cleanup_failed_before_report:${err?.message || String(err)}`],
-            warnings: []
-        },
+        sks_codex_hooks: null,
         secret_preservation_guard: '.sneakoscope/reports/secret-preservation-guard.json',
         core_blockers: [err?.message || String(err)],
         route_blockers: {},
         optional_manual_required: [],
         optional_warnings: [],
-        required_blockers: requireLegacyGlobalHookCleanup
-            ? [`legacy_global_hooks:cleanup_failed_before_report:${err?.message || String(err)}`]
-            : [],
+        required_blockers: [],
         blockers: [err?.message || String(err)]
     }));
     const configProbeOpts = {
@@ -901,13 +892,11 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
     const hookTrustRepair = doctorFix
         && !migrationReceiptOwnsReconcile
         && doctorPhaseIds.includes('hook_trust_repair')
-        ? await (await import('../core/codex-hooks/codex-hook-trust-doctor.js')).codexHookTrustDoctor(root, { fix: true, managed: true, actual: true }).catch((err) => ({
-            schema: 'sks.codex-hook-trust-doctor.v2',
+        ? await (await import('../core/codex-hooks/codex-project-hooks.js')).activateSksCodexHooks({ root }).catch((err) => ({
+            schema: 'sks.codex-hook-activation.v1',
             ok: false,
-            actual: true,
             blockers: [`hook_trust_repair_failed:${err?.message || String(err)}`],
-            warnings: [],
-            repair_actions: ['sks codex trust-doctor --fix --managed --actual']
+            warnings: []
         }))
         : null;
     const doctorFixTransaction = doctorFix
@@ -1014,7 +1003,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                         warnings: hookTrustRepair?.warnings || [],
                         rollback_evidence: migrationReceiptOwnsReconcile
                             ? 'project_migration_receipt_owns_hook_trust_refresh'
-                            : hookTrustRepair?.fixed?.managed_hook_file || 'codex_hook_trust_repair_idempotent'
+                            : hookTrustRepair?.global?.hooks_path || 'codex_hook_trust_repair_idempotent'
                     })
                 },
                 {
@@ -1384,7 +1373,6 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         doctor_fix_postcheck: doctorFixPostcheck,
         command_aliases: migrationReceiptOwnsReconcile ? commandAliasCleanupBeforeReceipt : undefined,
         doctor_native_capability: doctorNativeCapabilityRepair,
-        require_legacy_global_hook_cleanup: requireLegacyGlobalHookCleanup,
         require_legacy_generation_convergence: doctorFix && !migrationReceiptOwnsReconcile,
         skills: skillsReconcile,
         agent_role_config: agentRoleConfigRepair,

package/dist/commands/hook.js

@@ -1,5 +1,6 @@
 import { emitHook } from '../core/hooks-runtime.js';
+import { hookLayerFromArgs } from '../core/hooks-runtime/hook-layer.js';
 export async function run(_command, args = []) {
-    const [name = 'user-prompt-submit'] = args;
-    return emitHook(name);
+    const [name = 'user-prompt-submit', ...rest] = args;
+    return emitHook(name, { layer: hookLayerFromArgs(rest) });
 }

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.3.7",
+  "package_version": "10.3.9",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/agent-bridge/host-capability-runtime.js

@@ -212,9 +212,6 @@ export function sanitizeHostCapabilityPostToolUse(payload) {
         artifacts
     };
 }
-export function mergeHostCapabilityPreToolObservation(input) {
-    return authorizeAndMergeHostCapabilityPreToolObservation(input).observations;
-}
 export function authorizeAndMergeHostCapabilityPreToolObservation(input) {
     const current = normalizeHostCapabilityHookObservations(input.current, input.binding)
         || emptyHookObservations(input.binding);

package/dist/core/agents/agent-codex-cockpit.js

@@ -22,7 +22,6 @@ export async function buildAgentCodexCockpitState(missionDir, opts = {}) {
     const roster = await readJson(path.join(root, 'agent-roster.json'), null);
     const leases = await readJson(path.join(root, 'agent-leases.json'), null);
     const proof = await readJson(path.join(root, 'agent-proof-evidence.json'), null);
-    const consensus = await readJson(path.join(root, 'agent-consensus.json'), null);
     const cleanup = await readJson(path.join(root, 'agent-cleanup.json'), null);
     const janitor = await readJson(path.join(root, 'agent-janitor-report.json'), null);
     const namespace = await readJson(path.join(missionDir, 'project-session-namespace.json'), null);

package/dist/core/agents/agent-orchestrator.js

@@ -13,7 +13,7 @@ import { writeAgentProofEvidence } from './agent-proof-evidence.js';
 import { selectRouteSkill, skillProofRecord } from '../skills/core-skill-runtime.js';
 import { routeSkillId } from '../skills/core-skill-card.js';
 import { loadTriWikiRuntimeContext, writeTriWikiContextArtifact } from '../triwiki-runtime.js';
-import { DEFAULT_AGENT_CONCURRENCY, MAX_AGENT_COUNT, normalizeAgentBackend } from './agent-schema.js';
+import { MAX_AGENT_COUNT, normalizeAgentBackend } from './agent-schema.js';
 import { PersistentAgentPatchQueueStore } from './agent-patch-queue-store.js';
 import { applyAgentPatchQueueEntry, rollbackAgentPatchApply } from './agent-patch-apply-worker.js';
 import { coordinateAgentPatchMerge, writeAgentMergeCoordinatorArtifacts } from './agent-merge-coordinator.js';

package/dist/core/agents/agent-patch-transaction-journal.js

@@ -1,6 +1,5 @@
-import fs from 'node:fs/promises';
 import path from 'node:path';
-import { appendJsonl, exists, nowIso, readText, sha256, writeJsonAtomic } from '../fsx.js';
+import { appendJsonl, nowIso, readText, writeJsonAtomic } from '../fsx.js';
 export const AGENT_PATCH_TRANSACTION_JOURNAL_SCHEMA = 'sks.agent-patch-transaction-journal.v1';
 export const AGENT_PATCH_TRANSACTION_JOURNAL_ARTIFACT = 'agent-patch-transaction-journal.jsonl';
 export const AGENT_PATCH_TRANSACTION_JOURNAL_SUMMARY_ARTIFACT = 'agent-patch-transaction-journal-summary.json';
@@ -95,17 +94,3 @@ export async function summarizeAgentPatchTransactionJournal(artifactDir) {
         blockers
     };
 }
-export async function hashFilesForJournal(root, files) {
-    const out = {};
-    for (const file of [...new Set(files.map(normalizeRelPath).filter(Boolean))].sort()) {
-        const absolute = path.resolve(root, file);
-        if (!absolute.startsWith(path.resolve(root) + path.sep))
-            continue;
-        out[file] = await exists(absolute) ? sha256(await fs.readFile(absolute)) : 'missing';
-    }
-    return out;
-}
-function normalizeRelPath(value) {
-    const normalized = path.posix.normalize(String(value || '').replace(/\\/g, '/').replace(/^\.\/+/, ''));
-    return normalized === '.' ? '' : normalized;
-}

package/dist/core/agents/agent-plan.js

@@ -7,7 +7,6 @@ const OFFICIAL_SUBAGENT_ROUTE_KEYS = new Set([
     'work', '$work'
 ]);
 const EXPLICIT_SUBAGENT_RE = /\$(Naruto|Work)\b/i;
-const PARALLELIZABLE_RE = /\b(parallel|subagents?|fan out|one agent per|independent|disjoint|multiple files|all files)\b|병렬|하위\s*에이전트|서브\s*에이전트|독립|분리된|여러\s*파일|모든\s*파일|분담/i;
 function routeKey(route) {
     return String(route?.id || route?.command || route?.name || route || '').trim().toLowerCase();
 }
@@ -101,9 +100,6 @@ function capacityOptions(options) {
         ['marginalUsefulThroughputPositive', options.marginalUsefulThroughputPositive]
     ].filter(([, value]) => value !== undefined));
 }
-export function explicitlyParallelizable(prompt) {
-    return PARALLELIZABLE_RE.test(String(prompt || ''));
-}
 function taskProfile(value, task) {
     return isTaskProfile(value) ? value : classifyTaskProfile(task);
 }