sneakoscope 10.7.1 → 10.7.2

package/dist/core/codex-lb/desktop-controller-v3/provider-commands.js

@@ -5,6 +5,14 @@ import { configureProviderCredential, recordProviderCredentialValidation, remove
 import { configureBridgeProviderProfile, resolveBridgeProviderRegistry, setBridgeProviderEnabled } from '../provider-registry.js';
 import { commandResult, activeProviderIds, controllerEnv, controllerPaths, nowIso, persistRuntimeSettings, providerCode, quiesceRunningBridge, resolveRawCredentials, stringArray, timeoutMs } from './shared.js';
 import { desktopBridgeStatusV3, loadCore } from './status.js';
+import { refreshModelCatalog } from './catalog.js';
+async function refreshAfterProviderChange(reason, options) {
+    const core = await loadCore(options);
+    if (!core.activeCatalog.ok || !core.policy)
+        return null;
+    const { sync: _sync, ...summary } = await refreshModelCatalog(options, { reason, force: true, allowConfigWrites: true });
+    return summary;
+}
 export async function configureProvider(request, options) {
     const paths = controllerPaths(options);
     const restartDeferred = await quiesceRunningBridge(await loadCore(options), options);
@@ -34,12 +42,14 @@ export async function configureProvider(request, options) {
     if (core.activeCatalog.ok && core.policy) {
         await persistRuntimeSettings({ ...core, registry }, options, { restartService: false });
     }
+    const modelRefresh = restartDeferred ? null : await refreshAfterProviderChange('provider.configure', options);
     const status = await desktopBridgeStatusV3(options);
     const blockers = restartDeferred ? ['desktop_bridge_restart_deferred_until_provider_validation'] : [];
     return commandResult('provider.configure', true, status, {
         configuration: configured,
         restart_deferred: restartDeferred,
         recovery_action: restartDeferred ? `bridge provider validate ${request.provider_id}` : null,
+        model_refresh: modelRefresh,
     }, blockers, options);
 }
 export async function validateProvider(providerId, options) {
@@ -82,8 +92,9 @@ export async function validateProvider(providerId, options) {
             });
         }
     }
+    const modelRefresh = ok ? await refreshAfterProviderChange('provider.validate', options) : null;
     const status = await desktopBridgeStatusV3(options);
-    return commandResult('provider.validate', true, status, { provider_id: providerId, validated: ok, validation: publicValidationResult(result) }, ok ? [] : blockers, options);
+    return commandResult('provider.validate', true, status, { provider_id: providerId, validated: ok, validation: publicValidationResult(result), model_refresh: modelRefresh }, ok ? [] : blockers, options);
 }
 export async function setProviderState(providerId, enabled, operation, options) {
     const paths = controllerPaths(options);
@@ -108,8 +119,9 @@ export async function setProviderState(providerId, enabled, operation, options)
             });
         }
     }
+    const modelRefresh = await refreshAfterProviderChange(operation, options);
     const status = await desktopBridgeStatusV3(options);
-    return commandResult(operation, true, status, { provider_id: providerId, enabled }, [], options);
+    return commandResult(operation, true, status, { provider_id: providerId, enabled, model_refresh: modelRefresh }, [], options);
 }
 export async function removeCredential(providerId, options) {
     const paths = controllerPaths(options);

package/dist/core/codex-lb/desktop-controller-v3/status.js

@@ -1,4 +1,4 @@
-import { DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER, DESKTOP_BRIDGE_MANAGED_MARKER, DESKTOP_BRIDGE_MANAGED_MODEL_CATALOG_MARKER } from '../../../cli/install-helpers-codex-lb-config.js';
+import { DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER, DESKTOP_BRIDGE_MANAGED_MARKER } from '../../../cli/install-helpers-codex-lb-config.js';
 import { readActiveCombinedBridgeCatalog } from '../combined-catalog.js';
 import { desktopBridgeServiceStatus, desktopBridgeServicePaths, readDesktopBridgeServiceSettings } from '../desktop-service.js';
 import { captureCodexAuthSnapshot } from '../desktop-auth-invariant.js';
@@ -276,8 +276,7 @@ function isManagedConfig(config) {
     const top = String(config || '').split(/\n\s*\[/)[0] || '';
     return [
         DESKTOP_BRIDGE_MANAGED_MARKER,
-        DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER,
-        DESKTOP_BRIDGE_MANAGED_MODEL_CATALOG_MARKER
+        DESKTOP_BRIDGE_MANAGED_BASE_URL_MARKER
     ].every((marker) => top.split(/\r?\n/).some((line) => line.trim() === marker))
         && /^\s*model_provider\s*=\s*"openai"\s*(?:#.*)?$/m.test(top);
 }

package/dist/core/codex-lb/desktop-controller-v3.js

@@ -1,4 +1,4 @@
-import { listSelectableModels, selectExposedModels, syncCatalog } from './desktop-controller-v3/catalog.js';
+import { listSelectableModels, refreshModels, selectExposedModels, syncCatalog } from './desktop-controller-v3/catalog.js';
 import { explainRoute, ensureDesktopBridge, repairDesktopBridge, rollbackDesktopBridge, setDefaultProvider, setOfficialModelsMode, setAuthPriority, unmanageDesktopBridge } from './desktop-controller-v3/lifecycle-commands.js';
 import { configureProvider, removeCredential, setProviderState, validateProvider } from './desktop-controller-v3/provider-commands.js';
 import { listSubagentModels, openRouterOnlyStatusCommand, setOpenRouterOnly, setSubagentModels } from './desktop-controller-v3/openrouter-only-commands.js';
@@ -55,6 +55,8 @@ export async function executeDesktopBridgeCommandV3(request, options = {}) {
                 return listSelectableModels(options);
             if (request.operation === 'models.select')
                 return selectExposedModels(request.public_ids, options);
+            if (request.operation === 'models.refresh')
+                return refreshModels(request, options);
             if (request.operation === 'catalog.sync')
                 return syncCatalog(options);
             if (request.operation === 'catalog.status') {

package/dist/core/codex-lb/desktop-service.js

@@ -13,6 +13,8 @@ import { canonicalizeBridgeModelId, normalizeBridgeUpstreamModelId, sha256Stable
 import { captureCodexAuthSnapshot } from './desktop-auth-invariant.js';
 import { applyOfficialModelPassthrough, bridgeRoutePolicyPath, writeBridgeRoutingPolicy } from './provider-route-policy.js';
 import { desktopBridgeRuntimeVersion, desktopBridgeRuntimeVersionStale } from './desktop-bridge/state.js';
+import { REQUEST_COMPAT_INCLUDE_VALUE, REQUEST_COMPAT_MAX_EXTRA_INCLUDE } from './desktop-bridge/provider-request-compat.js';
+import { bridgeRouteIndexPath, combinedBridgeCatalogPath, readActiveCombinedBridgeCatalog } from './combined-catalog.js';
 import { PACKAGE_VERSION } from '../version.js';
 import { canonicalChildModelId, readOpenRouterOnlyStateSync } from '../subagents/child-model-allowlist.js';
 import { BRIDGE_OFFICIAL_ROUTE_ID } from './bridge-contracts.js';
@@ -133,7 +135,7 @@ export async function resolveDesktopBridgeActivationSettings(options = {}) {
     const merged = { ...(persisted || {}), ...(options.settings || {}) };
     const host = merged.listen_host || DEFAULT_DESKTOP_BRIDGE_HOST;
     const port = merged.listen_port ?? await (options.selectAvailablePort || selectAvailableDesktopBridgePort)(host);
-    return defaultDesktopBridgeServiceSettings({ ...merged, ...(options.providerRegistry ? { provider_registry: options.providerRegistry } : {}), ...(options.routePolicy ? { route_policy: options.routePolicy } : {}), ...(options.providerSessionPins ? { provider_session_pins: [...options.providerSessionPins] } : {}), client_capability_sha256: sha256(clientCapability), listen_host: host, listen_port: port });
+    return defaultDesktopBridgeServiceSettings({ ...merged, ...(options.providerRegistry ? { provider_registry: withPersistedRequestCompat(options.providerRegistry, persisted?.provider_registry) } : {}), ...(options.routePolicy ? { route_policy: options.routePolicy } : {}), ...(options.providerSessionPins ? { provider_session_pins: [...options.providerSessionPins] } : {}), client_capability_sha256: sha256(clientCapability), listen_host: host, listen_port: port });
 }
 export async function readDesktopBridgeServiceSettings(file) {
     let stat;
@@ -297,7 +299,8 @@ function normalizeEndpointForBinding(value) {
 export async function resolveDesktopBridgeRuntimeConfig(options = {}) {
     const home = options.home || options.env?.HOME || process.env.HOME || os.homedir();
     const paths = overridePaths(desktopBridgeServicePaths(home), options);
-    let settings = defaultDesktopBridgeServiceSettings({ ...((await readDesktopBridgeServiceSettings(paths.settings_path)) || {}), ...(options.settings || {}), ...(options.providerRegistry ? { provider_registry: options.providerRegistry } : {}), ...(options.routePolicy ? { route_policy: options.routePolicy } : {}), ...(options.providerSessionPins ? { provider_session_pins: [...options.providerSessionPins] } : {}) });
+    const persisted = await readDesktopBridgeServiceSettings(paths.settings_path);
+    let settings = defaultDesktopBridgeServiceSettings({ ...(persisted || {}), ...(options.settings || {}), ...(options.providerRegistry ? { provider_registry: withPersistedRequestCompat(options.providerRegistry, persisted?.provider_registry) } : {}), ...(options.routePolicy ? { route_policy: options.routePolicy } : {}), ...(options.providerSessionPins ? { provider_session_pins: [...options.providerSessionPins] } : {}) });
     const clientCapability = options.clientCapability
         ? validateClientCapability(options.clientCapability)
         : await readDesktopBridgeClientCapability(paths.client_capability_path);
@@ -551,12 +554,20 @@ async function autoApplyOfficialModelsAtServe(runtime, home, options) {
     runtime.config.routePolicy = converged;
     process.stdout.write(`${JSON.stringify({ schema: 'sks.desktop-bridge-log.v2', event: 'sks.desktop_bridge.official_models_auto_applied', at: new Date().toISOString(), sks_version: PACKAGE_VERSION, mode, policy_generation: converged.policy_generation, secret_fields_redacted: true })}\n`);
 }
+async function activeModelsCatalog(home) {
+    const codexHome = path.join(path.resolve(home), '.codex');
+    const active = await readActiveCombinedBridgeCatalog(combinedBridgeCatalogPath(codexHome), bridgeRouteIndexPath(codexHome)).catch(() => null);
+    if (!active?.ok || active.catalog.models.length === 0)
+        return null;
+    return { generation: active.catalog.generation, models: active.catalog.models };
+}
 export async function serveDesktopBridge(options = {}) {
     let handle = null;
     try {
         const runtime = await resolveDesktopBridgeRuntimeConfig(options);
         const serveHome = options.home || options.env?.HOME || process.env.HOME || os.homedir();
         await autoApplyOfficialModelsAtServe(runtime, serveHome, options);
+        runtime.config.modelsCatalog = await activeModelsCatalog(serveHome);
         const supervised = desktopBridgeIsSupervised();
         const skewMarkerPath = path.join(path.dirname(runtime.paths.state_path), 'desktop-bridge-skew-restart.json');
         const prepared = await preflightDesktopBridge(runtime.config);
@@ -778,11 +789,37 @@ function normalizeProviderRegistrySnapshot(value) {
     const providers = Object.fromEntries(['codex-lb', 'openrouter'].map((providerId) => {
         const provider = registry.providers[providerId];
         const sourceCatalogGeneration = provider.source_catalog_generation ?? provider.catalog_generation ?? null;
-        const { catalog_generation: _legacyCatalogGeneration, ...rest } = provider;
-        return [providerId, { ...rest, source_catalog_generation: sourceCatalogGeneration }];
+        const { catalog_generation: _legacyCatalogGeneration, request_compat: requestCompat, ...rest } = provider;
+        const normalized = { ...rest, source_catalog_generation: sourceCatalogGeneration };
+        if (requestCompat !== undefined)
+            normalized.request_compat = validateRequestCompat(requestCompat);
+        return [providerId, normalized];
     }));
     return { ...registry, providers };
 }
+function validateRequestCompat(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('desktop_bridge_settings_request_compat_invalid');
+    const row = value;
+    if (Object.keys(row).some((key) => key !== 'extra_include'))
+        throw new Error('desktop_bridge_settings_request_compat_invalid');
+    const values = row.extra_include ?? [];
+    if (!Array.isArray(values) || values.length > REQUEST_COMPAT_MAX_EXTRA_INCLUDE
+        || values.some((entry) => typeof entry !== 'string' || !REQUEST_COMPAT_INCLUDE_VALUE.test(entry))) {
+        throw new Error('desktop_bridge_settings_request_compat_invalid');
+    }
+    return { extra_include: [...new Set(values)] };
+}
+function withPersistedRequestCompat(registry, persisted) {
+    let providers = null;
+    for (const id of ['codex-lb', 'openrouter']) {
+        const compat = persisted?.providers?.[id]?.request_compat;
+        if (!compat || registry.providers[id].request_compat)
+            continue;
+        providers = { ...(providers ?? registry.providers), [id]: { ...registry.providers[id], request_compat: compat } };
+    }
+    return providers ? { ...registry, generation: sha256Stable(providers), providers } : registry;
+}
 function overridePaths(base, options) { return { settings_path: options.settingsPath || base.settings_path, state_path: options.statePath || base.state_path, client_capability_path: options.clientCapabilityPath || base.client_capability_path, launch_agent_path: options.launchAgentPath || base.launch_agent_path, stdout_log_path: options.stdoutLogPath || base.stdout_log_path, stderr_log_path: options.stderrLogPath || base.stderr_log_path }; }
 function launchDomain(uid = typeof process.getuid === 'function' ? process.getuid() : 0) { return `gui/${uid}`; }
 function launchService(uid) { return `${launchDomain(uid)}/${DESKTOP_BRIDGE_LAUNCHD_LABEL}`; }

package/dist/core/codex-lb/model-refresh-after.js

@@ -0,0 +1,16 @@
+import os from 'node:os';
+import path from 'node:path';
+import { exists } from '../fsx.js';
+import { desktopBridgeServicePaths } from './desktop-service.js';
+export async function refreshModelListAfter(reason) {
+    if (process.platform !== 'darwin')
+        return null;
+    if (process.env.NODE_TEST_CONTEXT !== undefined || process.env.SKS_TEST_ISOLATION === '1' || process.env.SKS_RELEASE_UPGRADE_SMOKE === '1')
+        return null;
+    const home = path.resolve(process.env.HOME || os.homedir());
+    if (!(await exists(desktopBridgeServicePaths(home).settings_path)))
+        return null;
+    const { executeDesktopBridgeCommandV3 } = await import('./desktop-controller-v3.js');
+    const command = await executeDesktopBridgeCommandV3({ operation: 'models.refresh', reason, force: false, allow_config_writes: true }, { home, env: process.env }).catch(() => null);
+    return command?.result?.model_refresh ?? null;
+}

package/dist/core/commands/basic-cli.js

@@ -330,6 +330,9 @@ export async function setupCommand(args = []) {
             ...[...(codexHooks?.activation?.blockers || []), ...(codexHooks?.project?.blockers || [])].map((blocker) => `codex_hooks:${blocker}`)
         ]
     };
+    const modelRefresh = result.ok ? await (await import('../codex-lb/model-refresh-after.js')).refreshModelListAfter('setup') : null;
+    if (modelRefresh)
+        result.model_refresh = modelRefresh;
     if (!result.ok)
         process.exitCode = 1;
     if (flag(args, '--json')) {
@@ -337,6 +340,8 @@ export async function setupCommand(args = []) {
         return result;
     }
     console.log(`${result.ok ? 'Setup complete' : 'Setup blocked'}: ${root}`);
+    if (typeof modelRefresh?.line === 'string')
+        console.log(modelRefresh.line);
     console.log(`Install scope: ${installScope}`);
     console.log(`Codex CLI: ${cliTools.codex.status}${cliTools.codex.version ? ` ${cliTools.codex.version}` : ''}`);
     console.log(`SKS Codex hooks: ${codexHooks?.active ? 'active for every Codex project' : installScope === 'project' ? 'this project only' : 'not active (run: sks doctor --fix)'}`);

package/dist/core/commands/menubar-command.js

@@ -31,7 +31,9 @@ export async function menubarCommand(subcommand = 'status', args = []) {
         return result;
     }
     if (action === 'install') {
-        const result = await installSksMenuBar({ root, ...(home ? { home } : {}), apply: true, launch: !flag(args, '--no-launch'), quiet: flag(args, '--json') });
+        const installed = await installSksMenuBar({ root, ...(home ? { home } : {}), apply: true, launch: !flag(args, '--no-launch'), quiet: flag(args, '--json') });
+        const modelRefresh = await (await import('../codex-lb/model-refresh-after.js')).refreshModelListAfter('menubar-install');
+        const result = modelRefresh ? { ...installed, model_refresh: modelRefresh } : installed;
         if (flag(args, '--json')) {
             printJson(result);
             if (!result.ok)
@@ -46,6 +48,8 @@ export async function menubarCommand(subcommand = 'status', args = []) {
         console.log(`SKS menu bar install: ${result.status}`);
         for (const actionLine of result.actions)
             console.log(`- ${actionLine}`);
+        if (typeof modelRefresh?.line === 'string')
+            console.log(modelRefresh.line);
         for (const warning of result.warnings)
             console.log(`warning: ${warning}`);
         for (const blocker of result.blockers)

package/dist/core/doctor/desktop-bridge-catalog-repair.js

@@ -101,10 +101,8 @@ export async function repairDoctorDesktopBridgeCatalog(input, deps = {}) {
             fix: input.fix
         });
         const status = await statusImpl({ home: bridgeHome, env: process.env });
-        const blockers = (status?.readiness?.blockers || []).map(String);
-        const stale = blockers.filter((blocker) => blocker.endsWith('_catalog_stale'));
         const reverify = { fix: input.fix, bridgeHome, restarted: restarted.restarted };
-        if (!status?.management?.managed || stale.length === 0) {
+        if (!status?.management?.managed) {
             return reverifyTransportIfDegraded({
                 ...base,
                 ok: restarted.blockers.length === 0,
@@ -114,28 +112,33 @@ export async function repairDoctorDesktopBridgeCatalog(input, deps = {}) {
             }, reverify, statusImpl, executeImpl);
         }
         const attempts = [];
-        let syncedAndVerified = false;
+        let refresh = null;
+        let stale = [];
         for (let attempt = 1; attempt <= CATALOG_REPAIR_MAX_ATTEMPTS; attempt += 1) {
-            const sync = await executeImpl({ operation: 'catalog.sync' }, { home: bridgeHome, env: process.env });
-            const commandOk = sync?.ok === true && sync?.execution?.ok === true;
+            const command = await executeImpl({
+                operation: 'models.refresh',
+                reason: input.reason || (input.fix ? 'doctor-fix' : 'doctor'),
+                force: false,
+                allow_config_writes: input.fix
+            }, { home: bridgeHome, env: process.env });
+            refresh = command?.result?.model_refresh && typeof command.result.model_refresh === 'object' ? command.result.model_refresh : null;
             const after = await statusImpl({ home: bridgeHome, env: process.env });
-            const stillStale = (after?.readiness?.blockers || [])
-                .map(String).filter((blocker) => blocker.endsWith('_catalog_stale'));
-            if (commandOk && stillStale.length === 0) {
-                syncedAndVerified = true;
+            stale = (after?.readiness?.blockers || []).map(String).filter((blocker) => blocker.endsWith('_catalog_stale'));
+            if (refresh?.ok === true && stale.length === 0)
                 break;
-            }
-            attempts.push(`catalog_sync_attempt_${attempt}:${commandOk ? `still_stale:${stillStale.join(',')}` : (sync?.execution?.blockers || ['failed']).map(String).join(',')}`);
+            attempts.push(`model_refresh_attempt_${attempt}:${refresh?.ok === true ? `still_stale:${stale.join(',')}` : (refresh?.blockers || command?.execution?.blockers || ['failed']).map(String).join(',')}`);
         }
+        const refreshed = refresh?.ok === true;
         return reverifyTransportIfDegraded({
             ...base,
-            ok: syncedAndVerified && restarted.blockers.length === 0,
-            repaired: syncedAndVerified || restarted.restarted,
-            warnings: [...restarted.warnings, ...(syncedAndVerified ? attempts : [])],
+            ok: stale.length === 0 && restarted.blockers.length === 0,
+            repaired: (refreshed && refresh?.skipped !== true) || restarted.restarted,
+            warnings: [...restarted.warnings, ...(refresh?.warnings || []).map(String), ...(stale.length === 0 ? attempts : [])],
             blockers: [
-                ...(syncedAndVerified ? [] : ['desktop_bridge_catalog_still_stale_after_repair', ...attempts]),
+                ...(stale.length === 0 ? [] : ['desktop_bridge_catalog_still_stale_after_repair', ...attempts]),
                 ...restarted.blockers
-            ]
+            ],
+            model_refresh: refresh
         }, reverify, statusImpl, executeImpl);
     }
     catch (error) {

package/dist/core/subagents/model-tiers.js

@@ -56,16 +56,32 @@ function readableRows(file) {
     }
 }
 let catalogPathMemo = null;
+const BRIDGE_BASE_URL_MARKER = '# sks-desktop-bridge-managed-base-url';
+function activeBridgeCatalogPath(codexHome) {
+    try {
+        const pointer = JSON.parse(fs.readFileSync(path.join(codexHome, 'sks', 'sks-bridge-active-generation.json'), 'utf8'));
+        const bundle = path.resolve(codexHome, 'sks', String(pointer?.bundle_directory || ''));
+        const file = path.join(bundle, String(pointer?.catalog_filename || ''));
+        return bundle.startsWith(path.join(codexHome, 'sks', '.sks-bridge-generations') + path.sep) && path.dirname(file) === bundle ? file : null;
+    }
+    catch {
+        return null;
+    }
+}
 function configuredCatalogPath(input) {
-    const configPath = path.join(codexHomePath(input), 'config.toml');
-    const key = fileKey(configPath);
+    const codexHome = codexHomePath(input);
+    const configPath = path.join(codexHome, 'config.toml');
+    const key = `${fileKey(configPath)}|${fileKey(path.join(codexHome, 'sks', 'sks-bridge-active-generation.json'))}`;
     if (catalogPathMemo?.key === key)
         return catalogPathMemo.path;
     let resolved = null;
     try {
         const stat = fs.statSync(configPath);
         if (stat.isFile() && stat.size <= 4 * 1024 * 1024) {
-            const value = readTopLevelTomlString(fs.readFileSync(configPath, 'utf8'), 'model_catalog_json')?.trim();
+            const config = fs.readFileSync(configPath, 'utf8');
+            const value = readTopLevelTomlString(config, 'model_catalog_json')?.trim();
+            if (!value && config.split(/\r?\n/).some((line) => line.trim() === BRIDGE_BASE_URL_MARKER))
+                resolved = activeBridgeCatalogPath(codexHome);
             if (value) {
                 const env = input.env || process.env;
                 const home = input.home || env.HOME || os.homedir();

package/dist/core/update/update-migration-state/desktop-bridge-catalog-repair-stage.js

@@ -17,17 +17,18 @@ export async function runDesktopBridgeCatalogRepairStage() {
     if (!(await exists(desktopBridgeServicePaths(home).settings_path))) {
         return skip('desktop_bridge_catalog_repair_no_managed_bridge');
     }
-    const repair = await repairDoctorDesktopBridgeCatalog({ fix: true }).catch((error) => ({
+    const repair = await repairDoctorDesktopBridgeCatalog({ fix: true, reason: 'update' }).catch((error) => ({
         ok: false,
         repaired: false,
         warnings: [],
         blockers: [`desktop_bridge_catalog_repair_failed:${error?.message || String(error)}`]
     }));
+    const refreshLine = typeof repair.model_refresh?.line === 'string' ? [repair.model_refresh.line] : [];
     if (repair.ok) {
         return {
             ok: true,
             status: 'ok',
-            actions: [repair.repaired ? 'desktop_bridge_catalog_repaired' : 'desktop_bridge_catalog_clean'],
+            actions: [repair.repaired ? 'desktop_bridge_catalog_repaired' : 'desktop_bridge_catalog_clean', ...refreshLine],
             blockers: [],
             warnings: repair.warnings || []
         };
@@ -35,7 +36,7 @@ export async function runDesktopBridgeCatalogRepairStage() {
     return {
         ok: true,
         status: 'ok',
-        actions: [],
+        actions: refreshLine,
         blockers: [],
         warnings: [
             ...(repair.blockers || []).map((blocker) => `desktop_bridge_catalog_repair_incomplete:${blocker}`),

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '10.7.1';
+export const PACKAGE_VERSION = '10.7.2';

package/dist/native/sks-menubar/Sources/ControlCenterWindowController.swift

@@ -33,7 +33,6 @@ final class ControlCenterWindowController: NSWindowController, NSTableViewDataSo
             .mcpServers: MCPServersViewController(processClient: processClient, operations: operations, notifications: notifications),
             .providers: ProvidersViewController(processClient: processClient, operations: operations),
             .subagentModels: SubagentModelsViewController(processClient: processClient, operations: operations),
-            .remoteCoding: RemoteCodingViewController(),
             .localDecision: LocalDecisionViewController(processClient: processClient, operations: operations),
             .imageGeneration: ImageGenerationViewController(processClient: processClient, operations: operations),
             .diagnostics: DiagnosticsViewController(processClient: processClient, operations: operations),

package/dist/native/sks-menubar/Sources/OverviewSummary.swift

@@ -134,3 +134,35 @@ enum OverviewSummary {
         return value
     }
 }
+
+/// What `sks bridge models refresh --json` reports, as SKS Center shows it.
+/// Success is the payload's own `ok == true` at both levels; a result that only
+/// carries a schema key is not one.
+enum ModelRefreshSummary {
+    struct Outcome: Equatable {
+        let ok: Bool
+        let text: String
+    }
+
+    static func outcome(fromJSONText text: String, at date: Date = Date()) -> Outcome {
+        outcome(fromJSON: jsonObject(text), at: date)
+    }
+
+    static func outcome(fromJSON object: [String: Any]?, at date: Date = Date()) -> Outcome {
+        let refresh = (object?["result"] as? [String: Any])?["model_refresh"] as? [String: Any]
+        guard object?["ok"] as? Bool == true, refresh?["ok"] as? Bool == true else {
+            return Outcome(ok: false, text: refresh?["line"] as? String ?? "Model list refresh failed. Run `sks bridge models refresh` to retry.")
+        }
+        let total = (refresh?["total"] as? NSNumber)?.intValue ?? 0
+        let formatter = DateFormatter()
+        formatter.dateFormat = "HH:mm"
+        let restart = refresh?["restart_codex_required"] as? Bool == true ? " · restart Codex to see it" : ""
+        return Outcome(ok: true, text: "Model list updated at \(formatter.string(from: date)) (\(total) models)\(restart)")
+    }
+
+    private static func jsonObject(_ text: String) -> [String: Any]? {
+        let start = text.firstIndex(of: "{") ?? text.startIndex
+        guard let data = String(text[start...]).data(using: .utf8) else { return nil }
+        return (try? JSONSerialization.jsonObject(with: data)) as? [String: Any]
+    }
+}

package/dist/native/sks-menubar/Sources/OverviewViewController.swift

@@ -6,6 +6,7 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
     private let status = NativeView.detail("Loading local SKS status…")
     private let notificationInbox = NativeView.detail("Notifications: checking authorization…")
     private let recoveryStatus = NativeView.detail("Progress recovery: no operation state loaded yet.")
+    private let modelListStatus = NativeView.detail("Model list: refreshed by Refresh, Run Doctor and updates.")
     private let healthBadge = NativeView.badge("Checking local status", color: .systemBlue)
     private let statusSpinner = NativeView.spinner(label: "Checking SKS Center status")
     private let snapshotDetails = NativeView.detail("")
@@ -36,7 +37,6 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
         updateCodexButton.setAccessibilityHelp("Update the operator Codex CLI to the preferred latest channel.")
         let buttons = NativeView.row([refreshButton, doctorButton, updateCodexButton])
         let shortcuts = NativeView.row([
-            NativeView.button("Remote Coding…", target: self, action: #selector(openRemoteCoding)),
             connectionsShortcut(),
             NativeView.button("Decisions…", target: self, action: #selector(openDecisions)),
             NativeView.button("Updates…", target: self, action: #selector(openUpdates)),
@@ -50,7 +50,7 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
         status.setAccessibilityIdentifier("sks-overview-next-action")
         let healthCard = NativeView.card(
             title: "System health", subtitle: "",
-            views: [NativeView.row([healthBadge, statusSpinner]), status, components, buttons]
+            views: [NativeView.row([healthBadge, statusSpinner]), status, modelListStatus, components, buttons]
         )
         recoveryCard = NativeView.card(
             title: "Progress, pause & recovery", subtitle: "Review the current operation before retrying.",
@@ -72,7 +72,6 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
         return button
     }
 
-    @objc private func openRemoteCoding() { openSection?("Remote Coding") }
     @objc private func openProviders() { openSection?("Providers") }
     @objc private func openDecisions() { openSection?("Decisions") }
     @objc private func openUpdates() { openSection?("Updates") }
@@ -113,7 +112,15 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
     }
 
     @objc private func refreshStatus() {
-        loadStatus(forceUpdateRefresh: true)
+        loadStatus(forceUpdateRefresh: true) { [weak self] in self?.refreshModelList() }
+    }
+
+    /// Refresh, Run Doctor and a Codex CLI update each end with a fresh model list.
+    private func refreshModelList() {
+        modelListStatus.stringValue = "Refreshing the model list…"
+        processClient.run(["bridge", "models", "refresh", "--json"], timeout: NativeView.longMutationTimeout) { [weak self] result in
+            self?.modelListStatus.stringValue = ModelRefreshSummary.outcome(fromJSONText: result.output).text
+        }
     }
 
     @objc private func updateCodexCLI() {
@@ -145,11 +152,12 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
             self.status.stringValue = ok
                 ? "Codex CLI update completed. Refreshing shared update status…"
                 : "Codex CLI update needs attention. Open Updates or Diagnostics for structured guidance."
+            if ok { self.refreshModelList() }
             self.loadStatus(forceUpdateRefresh: true)
         }
     }
 
-    private func loadStatus(forceUpdateRefresh: Bool) {
+    private func loadStatus(forceUpdateRefresh: Bool, then completion: (() -> Void)? = nil) {
         generation += 1
         let requestGeneration = generation
         refreshButton?.isEnabled = false
@@ -196,6 +204,7 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
             self.refreshButton?.isEnabled = true
             self.statusSpinner.stopAnimation(nil)
             self.renderStatus(update: update, mcp: mcp, partial: false)
+            completion?()
         }
         DispatchQueue.main.asyncAfter(deadline: .now() + 5) { [weak self] in
             guard let self = self,
@@ -232,6 +241,7 @@ final class OverviewViewController: NSViewController, ControlCenterPage {
             if result.code == 0 {
                 NativeView.setBadge(self.healthBadge, text: "Doctor completed", color: .systemGreen)
                 self.status.stringValue = "Doctor completed. No blocking issue was reported."
+                self.refreshModelList()
             } else {
                 NativeView.setBadge(self.healthBadge, text: "Doctor needs attention", color: .systemOrange)
                 self.status.stringValue = "Doctor found an issue. Open Diagnostics · \(NativeView.redactPreview(result.output))"

package/dist/native/sks-menubar/Sources/SidebarItem.swift

@@ -6,7 +6,6 @@ enum SidebarItem: String, CaseIterable {
     case overview = "Overview"
     case providers = "Providers"
     case subagentModels = "Subagent Models"
-    case remoteCoding = "Remote Coding"
     case updates = "Updates"
     case mcpServers = "MCP Servers"
     case localDecision = "Decisions"
@@ -25,7 +24,6 @@ enum SidebarItem: String, CaseIterable {
         case .mcpServers: return "server.rack"
         case .localDecision: return "cpu"
         case .imageGeneration: return "photo"
-        case .remoteCoding: return "laptopcomputer.and.iphone"
         case .diagnostics: return "stethoscope"
         case .settings: return "gearshape"
         }

package/dist/native/sks-menubar/Sources/UpdatesViewController.swift

@@ -231,6 +231,9 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
                     self.status.stringValue = "Review ready. Confirm to continue, or cancel to leave the current install unchanged."
                 }
             }
+            if kind == "update", authoritativeState == .succeeded {  // The update refreshed the model list; show what it holds now.
+                self.processClient.run(["bridge", "models", "refresh", "--json"], timeout: NativeView.mutationTimeout) { [weak self] refreshed in self?.status.stringValue = ModelRefreshSummary.outcome(fromJSONText: refreshed.output).text }
+            }
             let updateOutput = kind == "update-status" ? result.output : nil
             let approvalRequired = kind == "update-review" && result.code == 0
             let updateAvailable = updateOutput != nil && NotificationCoordinator.updateIsAvailable(in: result.output)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "10.7.1",
+  "version": "10.7.2",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",

package/dist/native/sks-menubar/Sources/RemoteCodingViewController.swift

@@ -1,49 +0,0 @@
-import Cocoa
-
-final class RemoteCodingViewController: NSViewController {
-    private static let websiteURL = URL(string: "https://paseo.sh/")!
-    private static let docsURL = URL(string: "https://paseo.sh/docs")!
-
-    override func loadView() {
-        let websiteButton = NativeView.button(
-            "Visit Paseo",
-            target: self,
-            action: #selector(openWebsite)
-        )
-        websiteButton.setAccessibilityLabel("Visit Paseo website")
-        websiteButton.setAccessibilityHelp("Open the independent Paseo website in your default browser.")
-
-        let docsButton = NativeView.button(
-            "Read Paseo Docs",
-            target: self,
-            action: #selector(openDocs)
-        )
-        docsButton.setAccessibilityLabel("Read Paseo documentation")
-        docsButton.setAccessibilityHelp("Open the official Paseo documentation in your default browser.")
-
-        let recommendation = NativeView.card(
-            title: "Paseo (recommended)",
-            subtitle: "Run Codex from your desktop, phone, web browser, or terminal.",
-            views: [
-                NativeView.row([websiteButton, docsButton]),
-                NativeView.detail("Paseo is a separate, open-source app. Follow its setup and security guidance to connect your devices.")
-            ]
-        )
-
-        view = NativeView.page([
-            NativeView.title("Remote Coding"),
-            NativeView.detail(
-                "Continue coding from another device."
-            ),
-            recommendation
-        ])
-    }
-
-    @objc private func openWebsite() {
-        NSWorkspace.shared.open(Self.websiteURL)
-    }
-
-    @objc private func openDocs() {
-        NSWorkspace.shared.open(Self.docsURL)
-    }
-}