sneakoscope 10.4.0 → 10.5.1

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.4.0**. Install the latest stable release from npm.
+Current package: **SKS 10.5.1**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 
@@ -170,9 +170,16 @@ sidecars, and the Jev choices.
 
 ## Naruto workflow
 
-The parent orchestrates: it decomposes the task, spawns a child for each
-disjoint slice, waits, and owns integration and final verification. It does not
-implement slices itself. The SKS PreToolUse hook denies parent source edits
+Naruto is for work you ask to split, not the default for implementation. A bug
+fix, a test, a refactor or config change, or a review is the main agent's own
+job, the way Codex works by default: no mission, no subagent plan, no parent edit
+gate. Naruto runs when you invoke `$sks-naruto`, pass `--agents N`, or ask for
+subagents or parallel work in so many words, and, with Jev mode on, when Jev
+judges that the task splits into independent parts (single is its default).
+
+Inside Naruto the parent orchestrates: it decomposes the task, spawns a child for
+each disjoint slice, waits, and owns integration and final verification. It does
+not implement slices itself. The SKS PreToolUse hook denies parent source edits
 until the first child starts and while children are still running. Children
 receive bounded tasks and do not spawn children.
 

package/config/skills-hash-ledger.v1.json

@@ -335,6 +335,7 @@
     {
       "canonical_name": "sks-naruto",
       "trusted_sha256": [
+        "26528b6b7d063c7cf0b5b9e996947d504cbc7ef4af976e480b5df3e6c7fcbac9",
         "5ac4c3ea1d4478f12f55df3c3d6c4ab272a40f731de8aa659aee08cb8e517a8b",
         "c88999663811a50d096b7cbb696fbea5b8f72707bcbf4a232bb07fe3a10cb2a6",
         "b2eb207b2773ab1995ee6e113ba6f3b64de43389e76aef4a0f06d4845ff86223",
@@ -342,7 +343,6 @@
         "da43debf97f0b4a1583d8202a7306aca97ac97865accf9bca8f41d75c84a1cb9",
         "b981bea4183376c6c0204941ad6c2e78782e2cdea4f8d25cc85630c609faaf95",
         "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
-        "a1219f6dbad9c8c185953125ef0b8dccf081aa01efb8e8acaa543c6214ac049c",
         "49b5e3dcc1b537b49c2cf09e5b875cb16acb05c622b22798e265e64dacd8ac90"
       ]
     },
@@ -388,6 +388,7 @@
     {
       "canonical_name": "sks-prompt-pipeline",
       "trusted_sha256": [
+        "01b0d58e26d4493442041d1cd51b4a25ac15014be79b065a59520e21ef69a4b1",
         "5e423981384fc3825c74327c4ca0fe09905a0dc81a533676c7e76ebb385348fc",
         "f82a103e7962e416961add515d7b3e65df89848dec1fbb9319bd49d7f1dac982",
         "93fd938dccd65d9b4d1dd140b60e1baedc627e7fcc54f9afd95eb2e44efd1143",

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.4.0"
+version = "10.5.1"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.4.0"
+version = "10.5.1"
 edition = "2021"
 
 [dependencies]

package/dist/cli/feature-commands.js

@@ -280,8 +280,6 @@ async function hooksTrustReport(root) {
             { event: 'PreToolUse', command: 'sks hook pre-tool', writes: ['.sneakoscope/bus/tool-events.jsonl'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'PermissionRequest', command: 'sks hook permission-request', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'PostToolUse', command: 'sks hook post-tool', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'medium' },
-            { event: 'PreCompact', command: 'sks hook pre-compact', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
-            { event: 'PostCompact', command: 'sks hook post-compact', writes: ['.sneakoscope/state'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'UserPromptSubmit', command: 'sks hook user-prompt-submit', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'medium' },
             { event: 'SubagentStart', command: 'sks hook subagent-start', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'low' },
             { event: 'SubagentStop', command: 'sks hook subagent-stop', writes: ['.sneakoscope/missions'], network: false, secret_policy: 'redacted', risk: 'low' },

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.4.0",
+  "package_version": "10.5.1",
   "skills": [
     {
       "canonical_name": "sks",
@@ -404,15 +404,15 @@
     {
       "canonical_name": "sks-naruto",
       "type": "core",
-      "content_sha256": "5ac4c3ea1d4478f12f55df3c3d6c4ab272a40f731de8aa659aee08cb8e517a8b",
+      "content_sha256": "26528b6b7d063c7cf0b5b9e996947d504cbc7ef4af976e480b5df3e6c7fcbac9",
       "hash_history": [
+        "5ac4c3ea1d4478f12f55df3c3d6c4ab272a40f731de8aa659aee08cb8e517a8b",
         "c88999663811a50d096b7cbb696fbea5b8f72707bcbf4a232bb07fe3a10cb2a6",
         "b2eb207b2773ab1995ee6e113ba6f3b64de43389e76aef4a0f06d4845ff86223",
         "65e19a5d16f486b13541048c239e828f8039bfc6e38bafd7949d9c936fe4b5b2",
         "da43debf97f0b4a1583d8202a7306aca97ac97865accf9bca8f41d75c84a1cb9",
         "b981bea4183376c6c0204941ad6c2e78782e2cdea4f8d25cc85630c609faaf95",
         "5df9c9678eb68fd79ceb998ae7a52dd54dc92336ad5169e8a01acca89f76bd60",
-        "a1219f6dbad9c8c185953125ef0b8dccf081aa01efb8e8acaa543c6214ac049c",
         "49b5e3dcc1b537b49c2cf09e5b875cb16acb05c622b22798e265e64dacd8ac90"
       ],
       "deprecated_aliases": []
@@ -467,8 +467,9 @@
     {
       "canonical_name": "sks-prompt-pipeline",
       "type": "official",
-      "content_sha256": "5e423981384fc3825c74327c4ca0fe09905a0dc81a533676c7e76ebb385348fc",
+      "content_sha256": "01b0d58e26d4493442041d1cd51b4a25ac15014be79b065a59520e21ef69a4b1",
       "hash_history": [
+        "5e423981384fc3825c74327c4ca0fe09905a0dc81a533676c7e76ebb385348fc",
         "f82a103e7962e416961add515d7b3e65df89848dec1fbb9319bd49d7f1dac982",
         "93fd938dccd65d9b4d1dd140b60e1baedc627e7fcc54f9afd95eb2e44efd1143",
         "033bb114ec1fac3f8c312f698b1861ed4c2ce6f65c06f4f1a872c4b101b74b92",

package/dist/core/agents/native-cli-worker-runtime.js

@@ -6,7 +6,6 @@ import { fastModeEnv } from './fast-mode-policy.js';
 import { validateAgentWorkerResult } from './agent-worker-pipeline.js';
 import { appendParallelRuntimeEvent } from './parallel-runtime-proof.js';
 import { appendAgentMessage } from './agent-message-bus.js';
-import { markLoopWorkerInterrupted, registerLoopActiveWorker } from '../loops/loop-interrupt-registry.js';
 export const NATIVE_CLI_WORKER_RUNTIME_SCHEMA = 'sks.native-cli-worker-runtime.v3';
 export const NATIVE_CLI_WORKER_DEFAULT_TIMEOUT_MS = 60 * 60 * 1000;
 export const NATIVE_CLI_WORKER_TIMEOUT_BLOCKER = 'native_cli_worker_timeout';
@@ -140,16 +139,8 @@ class NativeCliWorkerRuntimeRecorder {
             this.active.add(child.pid);
         this.maxObserved = Math.max(this.maxObserved, this.active.size);
         let exit;
-        let loopHandle = null;
         try {
             await this.record(record);
-            loopHandle = await registerLoopWorkerHandle({
-                root: ctx.opts.projectRoot || this.input.projectRoot || ctx.opts.cwd || packageRoot(),
-                env: ctx.opts.env || {},
-                agentId: String(ctx.agent.id || ctx.agent.session_id || 'agent'),
-                sessionId: ctx.agent.session_id || null,
-                pid: child.pid || null
-            });
             await appendParallelRuntimeEvent(this.root, this.input.missionId, {
                 event_type: 'worker_process_spawned',
                 slot_id: ctx.agent.slot_id || ctx.agent.id || null,
@@ -184,9 +175,6 @@ class NativeCliWorkerRuntimeRecorder {
         const timeoutBlockers = supervisor.timedOut ? [NATIVE_CLI_WORKER_TIMEOUT_BLOCKER] : [];
         if (supervisor.timedOut)
             record.status = 'failed';
-        if (loopHandle) {
-            await markLoopWorkerInterrupted(ctx.opts.projectRoot || this.input.projectRoot || ctx.opts.cwd || packageRoot(), loopHandle.mission_id, loopHandle.worker_id, record.status === 'closed' ? 'completed' : 'failed').catch(() => undefined);
-        }
         const parsed = await readJson(path.join(this.root, resultRel), null).catch(() => null);
         if (!parsed) {
             record.blockers = [...timeoutBlockers, 'native_cli_worker_result_missing'];
@@ -385,19 +373,3 @@ function changedFilesFromWorkerResult(result) {
     ]);
     return [...new Set([...direct, ...envelopeFiles].map((file) => String(file || '').replace(/\\/g, '/').replace(/^\.\/+/, '')).filter(Boolean))];
 }
-async function registerLoopWorkerHandle(input) {
-    const missionId = String(input.env.SKS_MISSION_ID || input.env.SKS_PARENT_MISSION_ID || '').trim();
-    const loopId = String(input.env.SKS_LOOP_ID || '').trim();
-    const phase = String(input.env.SKS_LOOP_PHASE || '').trim();
-    if (!missionId || !loopId || (phase !== 'maker' && phase !== 'checker'))
-        return null;
-    return registerLoopActiveWorker(input.root, {
-        mission_id: missionId,
-        loop_id: loopId,
-        phase,
-        worker_id: input.agentId,
-        session_id: input.sessionId,
-        pid: input.pid,
-        interrupt_supported: Boolean(input.pid || input.sessionId)
-    }).catch(() => null);
-}

package/dist/core/auto-review.js

@@ -3,6 +3,7 @@ import path from 'node:path';
 import { createHash } from 'node:crypto';
 import { ensureDir, exists, readText, writeTextAtomic } from './fsx.js';
 import { writeCodexConfigGuarded } from './codex/codex-config-guard.js';
+import { CODEX_FAST_SERVICE_TIER_ID } from './codex/codex-service-tier.js';
 import { inspectConfinedPath, removeManagedPathVerified } from './managed-path-safety.js';
 import { RETIRED_AUTO_REVIEW_POLICY_TEXTS, RETIRED_SKS_CONFIG_PROFILE_NAMES } from './doctor/retired-auto-review-config.js';
 import { escapeRegExp } from './text/regex.js';
@@ -217,7 +218,7 @@ export function buildMadHighLaunchProfileNoWrite(opts = {}) {
             '--ask-for-approval',
             'never',
             '-c',
-            'service_tier=fast',
+            `service_tier=${CODEX_FAST_SERVICE_TIER_ID}`,
             '-c',
             'model_reasoning_effort=xhigh'
         ],
@@ -254,7 +255,7 @@ export async function ensureMadHighProfileForSetupOrRepair(opts = {}) {
         config_path: configPath,
         profile_config_path: path.join(path.dirname(configPath), `${MAD_HIGH_PROFILE}.config.toml`),
         profile_name: MAD_HIGH_PROFILE,
-        launch_args: ['--profile', MAD_HIGH_PROFILE, '--sandbox', 'danger-full-access', '--ask-for-approval', 'never', '-c', 'service_tier=fast', '-c', 'model_reasoning_effort=xhigh'],
+        launch_args: ['--profile', MAD_HIGH_PROFILE, '--sandbox', 'danger-full-access', '--ask-for-approval', 'never', '-c', `service_tier=${CODEX_FAST_SERVICE_TIER_ID}`, '-c', 'model_reasoning_effort=xhigh'],
         sandbox_mode: 'danger-full-access',
         approval_policy: 'never',
         approvals_reviewer: AUTO_REVIEW_REVIEWER,

package/dist/core/codex/codex-cli-syntax-builder.js

@@ -1,3 +1,4 @@
+import { codexServiceTierId } from './codex-service-tier.js';
 export function buildCodexExecArgs(opts) {
     if (opts.danger && !opts.allowDanger) {
         throw new Error('codex exec danger mode requires explicit allowDanger=true');
@@ -30,7 +31,7 @@ export function buildCodexExecArgs(opts) {
         args.push('--sandbox', opts.sandbox);
     const serviceTier = normalizeCodexServiceTier(opts.serviceTier);
     if (serviceTier)
-        args.push('-c', `service_tier=${serviceTier}`);
+        args.push('-c', `service_tier=${codexServiceTierId(serviceTier)}`);
     args.push(opts.prompt);
     return args;
 }

package/dist/core/codex/codex-cli-update.js

@@ -371,8 +371,7 @@ async function operatorCodexCandidates(explicitBin, env) {
         explicitBin,
         env.SKS_CODEX_UPDATE_BIN,
         env.SKS_CODEX_BIN,
-        env.CODEX_BIN,
-        env.DCODEX_CODEX_BIN
+        env.CODEX_BIN
     ];
     for (const value of explicitValues) {
         const raw = String(value || '').trim();

package/dist/core/codex/codex-config-toml.js

@@ -26,8 +26,8 @@ export function validateCodexConfigRoundTrip(text = '') {
         legacyKeys.push('user.fast_mode');
     if (parsed.profiles !== undefined)
         legacyKeys.push('profiles');
-    if (parsed.notice?.fast_default_opt_out !== undefined)
-        legacyKeys.push('notice.fast_default_opt_out');
+    if (parsed.features?.fast_mode_ui !== undefined)
+        legacyKeys.push('features.fast_mode_ui');
     const blockers = modelProviderAuthConflicts(parsed);
     return {
         ok: blockers.length === 0,

package/dist/core/codex/codex-feature-flags.js

@@ -1,10 +1,2 @@
-export const MANAGED_CODEX_FEATURE_FLAGS = Object.freeze(['hooks', 'fast_mode', 'apps']);
-export const REMOVED_CODEX_FEATURE_FLAGS = Object.freeze([
-    'fast_mode_ui',
-    'codex_hooks',
-    'multi_agent_mode',
-    'remote_control',
-    'codex_git_commit',
-    'plugin_hooks',
-    'js_repl'
-]);
+export const REMOVED_CODEX_FEATURE_FLAGS = Object.freeze(['fast_mode_ui']);
+export const DEPRECATED_CODEX_HOOKS_ALIAS_FLAG = 'codex_hooks';

package/dist/core/codex/codex-service-tier.js

@@ -0,0 +1,4 @@
+export function codexServiceTierId(tier) {
+    return tier === 'fast' ? 'priority' : 'default';
+}
+export const CODEX_FAST_SERVICE_TIER_ID = codexServiceTierId('fast');

package/dist/core/codex-adapter.js

@@ -7,7 +7,6 @@ import { desktopBridgeLaunchBlockedProcessResult, withDesktopBridgeCliLaunchGuar
 import { prepareCodexAppServerRuntimeEnv } from './codex-control/codex-app-server-runtime-env.js';
 export async function findCodexBinary() {
     const resolved = await resolveCodexRuntime({
-        explicitPath: process.env.DCODEX_CODEX_BIN || null,
         requestedBy: 'codex-adapter'
     });
     return resolved.identity?.realpath || null;
@@ -43,7 +42,7 @@ export function buildCodexExecArgs({ root, prompt, outputFile, json = true, prof
 }
 export async function runCodexExec({ root, recoveryRoot = root, prompt, outputFile, json = true, profile = null, extraArgs = [], onStdout, onStderr, logDir = null, stdoutFile = null, stderrFile = null, maxBufferBytes = 256 * 1024, timeoutMs = null, env = process.env, codexBin = null, findCodexBinaryImpl = findCodexBinary, runProcessImpl = runProcess, prepareCodexRuntimeEnvImpl = prepareCodexAppServerRuntimeEnv }) {
     const args = buildCodexExecArgs({ root, prompt, outputFile, json, profile, extraArgs });
-    const effectiveTimeoutMs = Number(timeoutMs || process.env.SKS_CODEX_TIMEOUT_MS || process.env.DCODEX_CODEX_TIMEOUT_MS || 30 * 60 * 1000);
+    const effectiveTimeoutMs = Number(timeoutMs || process.env.SKS_CODEX_TIMEOUT_MS || 30 * 60 * 1000);
     const recoveryArgs = args.slice(1, -1);
     const runtimeEnv = await prepareCodexRuntimeEnvImpl({ env });
     const guarded = await withDesktopBridgeCliLaunchGuard({

package/dist/core/codex-app.js

@@ -15,7 +15,6 @@ export const CODEX_CHANGELOG_URL = 'https://developers.openai.com/codex/changelo
 export const CODEX_ACCESS_TOKENS_DOCS_URL = 'https://developers.openai.com/codex/enterprise/access-tokens';
 export const CODEX_CHROME_EXTENSION_SETUP_DOCS_URL = CODEX_CHROME_EXTENSION_DOC_URL;
 const REQUIRED_CODEX_APP_FEATURE_FLAGS = [
-    'codex_git_commit',
     'hooks',
     'fast_mode',
     'computer_use',
@@ -487,7 +486,7 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
     if (featureList?.checked && featureList.ok && !requiredFeatureFlagsOk) {
         const missing = missingRequiredFeatureFlags(requiredFeatureFlags);
         lines.push(`Codex App feature flag(s) disabled or missing: ${missing.join(', ')}. Commit message generation, mobile/remote-control, and app-only tool paths can fail even when CLI chat works.`);
-        lines.push('Verify with: codex features list | rg "codex_git_commit|hooks|fast_mode|computer_use|browser_use|browser_use_external|image_generation|in_app_browser|guardian_approval|tool_suggest|apps|plugins"');
+        lines.push('Verify with: codex features list | rg "hooks|fast_mode|computer_use|browser_use|browser_use_external|image_generation|in_app_browser|guardian_approval|tool_suggest|apps|plugins"');
     }
     if (defaultPlugins?.missing_enabled?.length) {
         lines.push(`Codex default plugin(s) installed but not enabled: ${defaultPlugins.missing_enabled.join(', ')}. Composer/tool UI can hide built-in surfaces even while feature flags look green.`);
@@ -530,7 +529,7 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
         lines.push('Run: sks bridge provider configure; sks bridge provider validate; sks bridge provider enable; sks bridge catalog sync; sks bridge route set-default.');
     }
     if (!gitActions?.ok) {
-        lines.push(`Codex App git commit/push actions are blocked: ${gitActions?.blockers?.join(', ') || 'git action readiness'}. The app Commit, Push, Commit and Push, and PR flows need codex_git_commit, hooks, and Codex CLI remote-control support.`);
+        lines.push(`Codex App git commit/push actions are blocked: ${gitActions?.blockers?.join(', ') || 'git action readiness'}. The app Commit, Push, Commit and Push, and PR flows need the hooks feature and Codex CLI remote-control support.`);
         lines.push('Run: sks doctor --fix; if remote-control is still blocked, update Codex CLI to the official latest stable release and restart older app-server/TUI sessions.');
     }
     else {
@@ -649,8 +648,6 @@ function missingRequiredFeatureFlags(flags = {}) {
 }
 export function codexGitActionReadiness({ requiredFeatureFlags = {}, remoteControl = {} } = {}) {
     const blockers = [];
-    if (requiredFeatureFlags.codex_git_commit !== true)
-        blockers.push('codex_git_commit');
     if (requiredFeatureFlags.hooks !== true)
         blockers.push('hooks');
     if (!remoteControl?.ok)
@@ -663,7 +660,7 @@ export function codexGitActionReadiness({ requiredFeatureFlags = {}, remoteContr
         push: ok,
         commit_push: ok,
         pull_request: ok,
-        required_flags: ['codex_git_commit', 'hooks'],
+        required_flags: ['hooks'],
         required_capabilities: ['codex_cli_remote_control']
     };
 }
@@ -839,8 +836,6 @@ async function codexFastModeConfigStatus(opts = {}) {
                 blockers.push(`${config.scope}:top_level_model_reasoning_effort`);
             }
         }
-        if (/(^|\n)\s*fast_default_opt_out\s*=\s*true\s*(?:#.*)?(?=\n|$)/.test(tomlTable(config.text, 'notice')))
-            blockers.push(`${config.scope}:fast_default_opt_out`);
     }
     const merged = configs.map((config) => config.text).join('\n');
     if (tomlTable(merged, 'user.fast_mode').trim())

package/dist/core/codex-control/codex-sdk-config-policy.js

@@ -1,5 +1,6 @@
 import { mapCodexSdkSandboxPolicy } from './codex-sdk-sandbox-policy.js';
 import { parseGptModelId } from '../subagents/model-tiers.js';
+import { codexServiceTierId } from '../codex/codex-service-tier.js';
 export function buildCodexSdkConfig(input) {
     const model = String(input.model || process.env.SKS_CODEX_MODEL || process.env.CODEX_MODEL || '').trim();
     const serviceTier = String(input.serviceTier || process.env.SKS_SERVICE_TIER || 'fast');
@@ -7,7 +8,7 @@ export function buildCodexSdkConfig(input) {
     const config = {
         model_provider: 'openai',
         forced_login_method: 'chatgpt',
-        service_tier: serviceTier === 'standard' ? 'standard' : 'fast',
+        service_tier: codexServiceTierId(serviceTier === 'standard' ? 'standard' : 'fast'),
         model_reasoning_effort: normalizeAstraSdkEffort(model, effort),
         mcp_servers: {},
         sks: {

package/dist/core/codex-lb/desktop-service.js

@@ -21,6 +21,8 @@ export const DEFAULT_DESKTOP_BRIDGE_HOST = '127.0.0.1';
 export const DEFAULT_DESKTOP_BRIDGE_PORT = 49_152;
 export const DESKTOP_BRIDGE_SETTINGS_SCHEMA = 'sks.desktop-bridge-settings.v2';
 export const DESKTOP_BRIDGE_SERVICE_SCHEMA = 'sks.desktop-bridge-service.v2';
+export const DESKTOP_BRIDGE_SETTINGS_MAX_BYTES = 256 * 1024;
+const DESKTOP_BRIDGE_SETTINGS_RECOVERY_MAX_BYTES = 2 * 1024 * 1024;
 const DEFAULT_ALLOWED_ORIGINS = ['app://codex'];
 const OPENROUTER_BASE_URL = 'https://openrouter.ai/api/v1';
 export function desktopBridgeServicePaths(home = process.env.HOME || os.homedir()) {
@@ -147,8 +149,11 @@ export async function readDesktopBridgeServiceSettings(file) {
         throw new Error('desktop_bridge_settings_not_regular_file');
     if ((stat.mode & 0o077) !== 0)
         throw new Error('desktop_bridge_settings_permissions_unsafe');
+    if (stat.size > DESKTOP_BRIDGE_SETTINGS_RECOVERY_MAX_BYTES)
+        throw new Error('desktop_bridge_settings_too_large');
     const raw = await fsp.readFile(file, 'utf8');
-    if (Buffer.byteLength(raw) > 256 * 1024)
+    const rawBytes = Buffer.byteLength(raw);
+    if (rawBytes > DESKTOP_BRIDGE_SETTINGS_RECOVERY_MAX_BYTES)
         throw new Error('desktop_bridge_settings_too_large');
     let parsed;
     try {
@@ -157,17 +162,58 @@ export async function readDesktopBridgeServiceSettings(file) {
     catch {
         throw new Error('desktop_bridge_settings_invalid_json');
     }
-    return validateDesktopBridgeServiceSettings(parsed);
+    const validated = validateDesktopBridgeServiceSettings(parsed);
+    return rawBytes <= DESKTOP_BRIDGE_SETTINGS_MAX_BYTES ? validated : sessionPinsThatFit(validated);
 }
 export async function writeDesktopBridgeServiceSettings(file, settings) {
     await withFileLock(settingsLockOptions(file), async () => {
         await writeDesktopBridgeServiceSettingsUnlocked(file, settings);
     });
 }
+function desktopBridgeSettingsDocument(settings) {
+    return {
+        schema: settings.schema,
+        listen_host: settings.listen_host,
+        listen_port: settings.listen_port,
+        provider_registry: settings.provider_registry,
+        route_policy: settings.route_policy,
+        provider_session_pins: settings.provider_session_pins,
+        client_capability_sha256: settings.client_capability_sha256,
+        allowed_origins: settings.allowed_origins,
+        connect_timeout_ms: settings.connect_timeout_ms,
+        idle_timeout_ms: settings.idle_timeout_ms,
+        official_passthrough: settings.official_passthrough,
+        auth_priority_enabled: settings.auth_priority_enabled ?? false
+    };
+}
+function desktopBridgeSettingsText(settings) {
+    return `${JSON.stringify(desktopBridgeSettingsDocument(settings), null, 2)}\n`;
+}
+export function sessionPinsThatFit(settings, maxBytes = DESKTOP_BRIDGE_SETTINGS_MAX_BYTES) {
+    if (Buffer.byteLength(desktopBridgeSettingsText(settings)) <= maxBytes)
+        return settings;
+    const pins = settings.provider_session_pins
+        .map((pin, index) => ({ pin, index }))
+        .sort((left, right) => Date.parse(right.pin.created_at) - Date.parse(left.pin.created_at) || left.index - right.index)
+        .map((row) => row.pin);
+    let lo = 0;
+    let hi = pins.length;
+    while (lo < hi) {
+        const mid = Math.ceil((lo + hi) / 2);
+        const size = Buffer.byteLength(desktopBridgeSettingsText({ ...settings, provider_session_pins: pins.slice(0, mid) }));
+        if (size <= maxBytes)
+            lo = mid;
+        else
+            hi = mid - 1;
+    }
+    const fitted = { ...settings, provider_session_pins: pins.slice(0, lo) };
+    if (Buffer.byteLength(desktopBridgeSettingsText(fitted)) > maxBytes)
+        throw new Error('desktop_bridge_settings_too_large');
+    return fitted;
+}
 async function writeDesktopBridgeServiceSettingsUnlocked(file, settings) {
-    const validated = validateDesktopBridgeServiceSettings(settings);
-    const persisted = { schema: validated.schema, listen_host: validated.listen_host, listen_port: validated.listen_port, provider_registry: validated.provider_registry, route_policy: validated.route_policy, provider_session_pins: validated.provider_session_pins, client_capability_sha256: validated.client_capability_sha256, allowed_origins: validated.allowed_origins, connect_timeout_ms: validated.connect_timeout_ms, idle_timeout_ms: validated.idle_timeout_ms, official_passthrough: validated.official_passthrough, auth_priority_enabled: validated.auth_priority_enabled ?? false };
-    await writeTextAtomic(file, `${JSON.stringify(persisted, null, 2)}\n`, { mode: 0o600 });
+    const validated = sessionPinsThatFit(validateDesktopBridgeServiceSettings(settings));
+    await writeTextAtomic(file, desktopBridgeSettingsText(validated), { mode: 0o600 });
     await fsp.chmod(file, 0o600);
 }
 async function runtimeCredentials(settings, options) {

package/dist/core/codex-native/core-skill-manifest.js

@@ -13,8 +13,8 @@ const CORE_SKILL_DEFINITIONS = [
         display_name: 'naruto',
         route: '$Naruto',
         purpose: 'run a Codex official subagent workflow with official agent threads while parent integration remains owner.',
-        discovery: 'Run $sks-naruto to delegate implementation to child subagents.',
-        when: 'Use when the user invokes $sks-naruto or $sks-work, or the selected route is Naruto: ordinary implementation work, where the parent orchestrates and children implement.',
+        discovery: 'Run $sks-naruto to split independent work across subagents.',
+        when: 'Use when the user invokes $sks-naruto or $sks-work, asks for subagents or parallel work, or the selected route is Naruto: work that splits into independent parts, where the parent orchestrates and children implement.',
         workflow: 'Run sks naruto run "<task>" [--agents N] [--max-threads N] [--json] with Codex official subagent threads only. The parent orchestrates only: decompose, assign disjoint slices, spawn, integrate, and verify. Do not implement slice work in the parent thread; the SKS PreToolUse gate denies parent-thread source edits until the first child thread starts and while children are still running, and .sneakoscope artifacts stay parent-writable. The parent owns decomposition, per-wave capacity, later root-owned waves, integration, and final verification. Automatic targets begin at 4/6/8/16 by task size: bounded, explicit parallel, large-scale, then mass mechanical or exploration fan-out. After decomposition both lanes may expand to the SKS-owned 256-child ceiling when independent useful slices and real host capacity remain positive; max_threads defaults to a 256-child frame budget cap, never a target. A measured lower Codex host cap or explicit provider/API budget remains authoritative, and multi-wave scheduling reuses returned capacity. Every child runs the newest model of the tier its work needs (fast, balanced, context, or deep); no model family is pinned. When Jev mode is on, Jev picks the tier for each new spawn and SKS seals it, except a spawn that names a managed role, which runs the tier pinned in its role file. A user role preference stays authoritative. Do not choose child models yourself. Keep the four task-class profiles and compatibility IDs; max_depth=1 blocks nested delegation. Wait for every planned thread before final. In an active Codex App Naruto mission, commit the strict parent evidence with sks naruto parent-summary --mission <id> --stdin, then return localized Markdown without exposing the JSON.',
         safety: 'Preserve user-authored content, inherit the parent permission mode, do not spawn nested subagents, do not inject the full pack or the full TriWiki context into every child, and do not fall back to another model, process runtime, custom scheduler, or worker pool. Official Codex subagent threads are the only worker runtime; stop with explicit blocker evidence when the official path is unavailable.',
         cli: 'sks naruto run "<task>" [--agents N] [--max-threads N] [--json]; sks naruto status|subagents|proof [--mission <id>] [--json]; sks naruto parent-summary --mission <id> --stdin [--json]',

package/dist/core/codex-runtime/codex-desktop-config-policy.js

@@ -5,6 +5,8 @@ import { DEFAULT_CODEX_APP_PLUGINS } from '../routes.js';
 import { ensureDir, PACKAGE_VERSION, readText, writeTextAtomic } from '../fsx.js';
 import { removeLegacyTopLevelCodexModeLocks, writeCodexConfigGuarded } from '../codex/codex-config-guard.js';
 import { cleanupCodexConfigBackups, validateCodexConfigRoundTrip } from '../codex/codex-config-toml.js';
+import { DEPRECATED_CODEX_HOOKS_ALIAS_FLAG, REMOVED_CODEX_FEATURE_FLAGS } from '../codex/codex-feature-flags.js';
+import { CODEX_FAST_SERVICE_TIER_ID } from '../codex/codex-service-tier.js';
 import { escapeRegExp } from '../text/regex.js';
 export async function ensureGlobalCodexFastModeDuringInstall(opts = {}) {
     if (process.env.SKS_SKIP_CODEX_FAST_MODE_REPAIR === '1')
@@ -59,35 +61,19 @@ function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
     next = removeTopLevelTomlKeyIfValue(next, 'default_profile', 'sks-fast-high');
     next = removeTomlTable(next, 'user.fast_mode');
     next = removeTomlTable(next, 'profiles.sks-fast-high');
-    next = removeTomlTableKey(next, 'notice', 'fast_default_opt_out');
-    for (const legacyFlag of ['codex_hooks', 'remote_control', 'fast_mode_ui', 'codex_git_commit']) {
-        next = removeTomlTableKey(next, 'features', legacyFlag, 'true');
+    next = removeTomlTableKey(next, 'features', DEPRECATED_CODEX_HOOKS_ALIAS_FLAG, 'true');
+    for (const legacyFlag of REMOVED_CODEX_FEATURE_FLAGS) {
+        next = removeTomlTableKey(next, 'features', legacyFlag);
     }
-    next = removeTomlTableKey(next, 'features', 'multi_agent');
     if (opts.forceFastMode === true) {
-        next = upsertTopLevelTomlString(next, 'service_tier', 'fast');
+        next = upsertTopLevelTomlString(next, 'service_tier', CODEX_FAST_SERVICE_TIER_ID);
     }
     else if (opts.forceFastModeOff === true) {
         next = removeTopLevelTomlKey(next, 'service_tier');
     }
     next = upsertTopLevelTomlBooleanIfAbsent(next, 'suppress_unstable_features_warning', true);
-    for (const featureLine of [
-        'hooks = true',
-        'fast_mode = true',
-        'apps = true',
-        'computer_use = true',
-        'browser_use = true',
-        'browser_use_external = true',
-        'image_generation = true',
-        'in_app_browser = true',
-        'guardian_approval = true',
-        'tool_suggest = true',
-        'plugins = true'
-    ]) {
-        next = upsertTomlTableKeyIfAbsent(next, 'features', featureLine);
-    }
     if (!hasTomlTable(next, 'features.multi_agent_v2') && !hasTomlTableKey(next, 'features', 'multi_agent_v2')) {
-        next = upsertTomlTable(next, 'features.multi_agent_v2', '[features.multi_agent_v2]\nenabled = true\nexpose_spawn_agent_model_overrides = true');
+        next = upsertTomlTable(next, 'features.multi_agent_v2', '[features.multi_agent_v2]\nenabled = true');
     }
     if (process.env.SKS_MANAGE_CODEX_APP_PLUGINS === '1') {
         for (const [name, marketplace] of DEFAULT_CODEX_APP_PLUGINS) {
@@ -146,31 +132,6 @@ function removeTomlTableKey(text, table, key, expectedValue = null) {
     const keyPattern = new RegExp(`^\\s*${escapeRegExp(key)}\\s*=${valuePattern}`);
     return lines.filter((line, index) => index <= start || index >= end || !keyPattern.test(line)).join('\n').replace(/\n{3,}/g, '\n\n');
 }
-function upsertTomlTableKey(text, table, line) {
-    const key = String(line).split('=')[0]?.trim() ?? '';
-    const lines = String(text || '').trimEnd().split('\n');
-    if (lines.length === 1 && lines[0] === '')
-        lines.length = 0;
-    const start = lines.findIndex((entry) => entry.trim() === `[${table}]`);
-    if (start === -1)
-        return [...lines, ...(lines.length ? [''] : []), `[${table}]`, line].join('\n').replace(/\n{3,}/g, '\n\n');
-    let end = lines.length;
-    for (let i = start + 1; i < lines.length; i += 1) {
-        if (/^\s*\[.+\]\s*$/.test(lines[i] || '')) {
-            end = i;
-            break;
-        }
-    }
-    const keyPattern = new RegExp(`^\\s*${escapeRegExp(key)}\\s*=`);
-    for (let i = start + 1; i < end; i += 1) {
-        if (keyPattern.test(lines[i] || '')) {
-            lines[i] = line;
-            return lines.join('\n').replace(/\n{3,}/g, '\n\n');
-        }
-    }
-    lines.splice(end, 0, line);
-    return lines.join('\n').replace(/\n{3,}/g, '\n\n');
-}
 function hasTomlTableKey(text, table, key) {
     const lines = String(text || '').split('\n');
     const start = lines.findIndex((line) => line.trim() === `[${table}]`);
@@ -185,10 +146,6 @@ function hasTomlTableKey(text, table, key) {
     }
     return false;
 }
-function upsertTomlTableKeyIfAbsent(text, table, line) {
-    const key = String(line).split('=')[0]?.trim() ?? '';
-    return hasTomlTableKey(text, table, key) ? String(text || '') : upsertTomlTableKey(text, table, line);
-}
 function upsertTopLevelTomlBooleanIfAbsent(text, key, value) {
     return hasTopLevelTomlKey(text, key) ? String(text || '') : upsertTopLevelTomlBoolean(text, key, value);
 }

package/dist/core/commands/command-utils.js

@@ -75,16 +75,6 @@ export function readBoundedIntegerFlag(args, name, fallback, min, max) {
 export function readMaxCycles(args, fallback) {
     return readBoundedIntegerFlag(args, '--max-cycles', fallback, 1, 50);
 }
-export function ambientGoalContinuation() {
-    return {
-        schema_version: 1,
-        enabled: true,
-        mode: 'codex_native_goal_only',
-        native_slash_command: '/goal',
-        non_disruptive: true,
-        rule: 'Use Codex native Goal as the only persisted goal owner. Never create SKS Goal missions, bridge artifacts, compatibility loops, or fallback goal state.'
-    };
-}
 export function knownGeneratedSkillNames() {
     return Array.from(new Set([...DOLLAR_SKILL_NAMES, ...RECOMMENDED_SKILLS]));
 }

package/dist/core/commands/research-command.js

@@ -170,8 +170,7 @@ async function researchPrepare(args) {
         stop_gate: route.stopGate,
         clarification_gate: false,
         pipeline_plan_ready: validatePipelinePlan(pipelinePlan).ok,
-        pipeline_plan_path: PIPELINE_PLAN_ARTIFACT,
-        goal_continuation: pipelinePlan.goal_continuation
+        pipeline_plan_path: PIPELINE_PLAN_ARTIFACT
     });
     await setCurrent(root, {
         mission_id: id,
@@ -195,7 +194,6 @@ async function researchPrepare(args) {
         reasoning_effort: reasoning.effort,
         reasoning_profile: reasoning.profile,
         reasoning_temporary: true,
-        goal_continuation: pipelinePlan.goal_continuation,
         pipeline_plan_ready: validatePipelinePlan(pipelinePlan).ok,
         pipeline_plan_path: PIPELINE_PLAN_ARTIFACT,
         prompt