sneakoscope 2.0.1 → 2.0.2

package/README.md

@@ -16,7 +16,7 @@ Set up this agent project with Sneakoscope Codex. Use [[mandarange/Sneakoscope-C
 
 ## Current Release
 
-SKS **2.0.1** is a Codex App Fast UI preservation patch on top of the 2.0 execution layer. Native workers still run through the Codex SDK Control Plane, UltraRouter still classifies orchestrator/worker tasks, Reliability Shield still hardens long SDK streams, and Zellij worker panes now carry provider/service-tier proof while spawning only when scheduler slot generations need them.
+SKS **2.0.2** is a P0 Codex App Fast UI and MAD Zellij worker-pane closure patch on top of the 2.0 execution layer. `sks --mad` now relies on launch-time Fast/high overrides instead of user-level Codex config rewrites, safe Fast UI repair runs through `sks doctor --fix`, provider badges read env/auth/config.toml consistently, and interactive MAD worker panes attach to the real Zellij session as scheduler slots spawn.
 
 What changed:
 
@@ -285,6 +285,7 @@ sks deps check --yes
 sks codex-app check
 sks doctor --fix
 sks fix-path
+sks update now
 ```
 
 ### Open Codex CLI With Zellij
@@ -356,7 +357,7 @@ sks --mad
 sks --mad --allow-package-install --allow-service-control --allow-network --yes
 ```
 
-This syncs existing codex-lb provider auth, creates/uses the `sks-mad-high` high-power maintenance profile, opens the MAD-SKS permission gate for that Zellij run, starts a same-mission read-only native agent swarm, and launches a Codex CLI layout whose right-side lanes read that MAD ledger. Bare `sks --mad` grants target-project file and shell scope only; add explicit `--allow-*` flags for packages, services, network, Computer Use, browser use, generated assets, file permissions, DB writes, or other high-risk scopes. MAD-SKS is not a DB-only unlock: it is explicit user authorization to widen approved target-project scopes. Catastrophic database wipe/all-row/project-management safeguards remain active, and the pipeline contract still forbids unrequested fallback implementation code.
+This syncs existing codex-lb provider auth, creates/uses the `sks-mad-high` xhigh maintenance profile, opens the MAD-SKS permission gate for that Zellij run, starts a same-mission read-only native agent swarm, and launches a Codex CLI layout whose right-side lanes read that MAD ledger. Bare `sks --mad` grants target-project file and shell scope only; add explicit `--allow-*` flags for packages, services, network, Computer Use, browser use, generated assets, file permissions, DB writes, or other high-risk scopes. MAD-SKS is not a DB-only unlock: it is explicit user authorization to widen approved target-project scopes. Catastrophic database wipe/all-row/project-management safeguards remain active, and the pipeline contract still forbids unrequested fallback implementation code.
 
 Before launching, SKS checks npm for a newer `sneakoscope`; answer `y` to update or `n` to continue. Use `--yes` to approve missing dependency installs automatically. Tune MAD swarm startup with `--mad-agents <n>`, `--mad-swarm-work-items <n>`, and `--mad-swarm-backend <backend>`; `--no-mad-swarm` keeps only the cockpit UI if you need a temporary fallback.
 
@@ -498,6 +499,8 @@ Then open Codex App and use prompt commands directly in the chat. Examples:
 
 ```text
 $Team implement the checkout fix and verify it
+$with-local-llm-on
+$with-local-llm-off
 $DFix change this label and spacing only
 $QA-LOOP dogfood localhost:3000 and fix safe issues
 $PPT create an investor deck as HTML/PDF
@@ -508,6 +511,23 @@ $Wiki refresh and validate the context pack
 $DB inspect this migration for destructive risk
 ```
 
+### Optional Local LLM Workers
+
+Local Ollama workers are off by default, so SKS stays GPT-only unless you explicitly enable them. Use the Codex App prompt commands:
+
+```text
+$with-local-llm-on
+$with-local-llm-off
+```
+
+When enabled, the local model can only help with policy-eligible simple code patch-envelope work or read-only collection. GPT/Codex still owns strategy, planning, design, review, verification, safety, and integration. Check or tune the machine-local setting from the terminal:
+
+```sh
+sks with-local-llm status --json
+sks with-local-llm on --model rafw007/qwen36-a3b-claude-coder:q4_K_M
+sks with-local-llm off
+```
+
 Generated app files include:
 
 | Path | Purpose |
@@ -568,7 +588,7 @@ SKS_HERMES=1 sks status --json
 
 Use these inside Codex App or another agent prompt. They are prompt commands, not terminal commands.
 
-Common prompts: `$Team`, `$From-Chat-IMG`, `$DFix`, `$Answer`, `$SKS`, `$QA-LOOP`, `$PPT`, `$Computer-Use`/`$CU`, `$Goal`, `$Research`, `$AutoResearch`, `$DB`, `$MAD-SKS`, `$GX`, `$Wiki`, and `$Help`.
+Common prompts: `$Team`, `$From-Chat-IMG`, `$with-local-llm-on`, `$with-local-llm-off`, `$DFix`, `$Answer`, `$SKS`, `$QA-LOOP`, `$PPT`, `$Computer-Use`/`$CU`, `$Goal`, `$Research`, `$AutoResearch`, `$DB`, `$MAD-SKS`, `$GX`, `$Wiki`, and `$Help`.
 
 ## Common Workflows
 
@@ -590,7 +610,7 @@ sks
 # or: sks --mad
 ```
 
-Use Codex App routes with `$Team`, `$DFix`, `$QA-LOOP`, `$PPT`, `$Goal`, `$Wiki`, and `$DB`. Team missions write artifacts under `.sneakoscope/missions/`; validate them with `sks validate-artifacts latest`.
+Use Codex App routes with `$Team`, `$with-local-llm-on`/`$with-local-llm-off`, `$DFix`, `$QA-LOOP`, `$PPT`, `$Goal`, `$Wiki`, and `$DB`. Team missions write artifacts under `.sneakoscope/missions/`; validate them with `sks validate-artifacts latest`.
 
 Refresh context before risky work:
 
@@ -630,11 +650,12 @@ If PATH or npm has duplicate global installs, `sks doctor --fix` keeps one globa
 
 ```sh
 sks update-check --json
+sks update now
 npm ls -g sneakoscope --depth=0
 sks doctor --fix
 ```
 
-Update prompts compare npm latest against the effective installed version from source metadata, PATH `sks --version`, and global npm package metadata. If a global update succeeded but an old shim remains earlier on PATH, `sks doctor --fix` can remove duplicate global installs and refresh the managed setup.
+Update prompts compare npm latest against the effective installed version from source metadata, PATH `sks --version`, and global npm package metadata. `sks update now` installs through npm global mode instead of mutating the current project's dependencies. If a global update succeeded but an old shim remains earlier on PATH, `sks doctor --fix` can remove duplicate global installs and refresh the managed setup.
 
 ### Zellij is missing
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "2.0.1"
+version = "2.0.2"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "2.0.1"
+version = "2.0.2"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 2.0.1"),
+        Some("--version") => println!("sks-rs 2.0.2"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/.sks-build-stamp.json

@@ -1,8 +1,8 @@
 {
   "schema": "sks.dist-build-stamp.v1",
   "package_name": "sneakoscope",
-  "package_version": "2.0.1",
-  "source_digest": "fc6581fa4e92892f1de963685540cd8754dd02015459f80ded6c7271837a0197",
-  "source_file_count": 1852,
-  "built_at_source_time": 1780513745133
+  "package_version": "2.0.2",
+  "source_digest": "b1e08c53f5899ea762b2bb7a06ea6fab73ddfccac076d17c276685f2a8e12beb",
+  "source_file_count": 1861,
+  "built_at_source_time": 1780562040816
 }

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '2.0.1';
+const FAST_PACKAGE_VERSION = '2.0.2';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--agent' && args[1] === 'worker') {

package/dist/build-manifest.json

@@ -1,16 +1,16 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "2.0.1",
-  "package_version": "2.0.1",
+  "version": "2.0.2",
+  "package_version": "2.0.2",
   "typescript": true,
   "mjs_runtime_files": 0,
-  "compiled_file_count": 929,
-  "compiled_js_count": 929,
+  "compiled_file_count": 936,
+  "compiled_js_count": 936,
   "compiled_dts_count": 0,
-  "source_digest": "fc6581fa4e92892f1de963685540cd8754dd02015459f80ded6c7271837a0197",
-  "source_file_count": 1852,
-  "source_files_hash": "92f47f9e5a2283d371d4ee267541e14ddbd9c9101e9db1ab8e46cede781f076b",
-  "source_list_hash": "92f47f9e5a2283d371d4ee267541e14ddbd9c9101e9db1ab8e46cede781f076b",
+  "source_digest": "b1e08c53f5899ea762b2bb7a06ea6fab73ddfccac076d17c276685f2a8e12beb",
+  "source_file_count": 1861,
+  "source_files_hash": "c8eda2a67acc10058477afb1eb7963595dc9ba17273dd4fd396014d8862b277f",
+  "source_list_hash": "c8eda2a67acc10058477afb1eb7963595dc9ba17273dd4fd396014d8862b277f",
   "src_mjs_runtime_files": 0,
   "dist_stamp_schema": "sks.dist-build-stamp.v1",
   "files": [
@@ -135,6 +135,7 @@
     "core/agents/agent-roster.js",
     "core/agents/agent-runner-codex-exec.js",
     "core/agents/agent-runner-fake.js",
+    "core/agents/agent-runner-ollama.js",
     "core/agents/agent-runner-process.js",
     "core/agents/agent-runner-zellij.js",
     "core/agents/agent-scheduler.js",
@@ -159,6 +160,7 @@
     "core/agents/native-cli-worker.js",
     "core/agents/native-worker-backend-router.js",
     "core/agents/no-subagent-scaling-policy.js",
+    "core/agents/ollama-worker-config.js",
     "core/agents/real-codex-parallel-proof.js",
     "core/agents/route-collaboration-ledger.js",
     "core/agents/scout-policy.js",
@@ -259,6 +261,7 @@
     "core/commands/harness-command.js",
     "core/commands/hproof-command.js",
     "core/commands/image-ux-review-command.js",
+    "core/commands/local-model-command.js",
     "core/commands/mad-sks-command.js",
     "core/commands/naruto-command.js",
     "core/commands/paths-command.js",
@@ -792,6 +795,7 @@
     "scripts/loop-blocker-check.js",
     "scripts/mad-preflight-blocks-unreadable-config-check.js",
     "scripts/mad-sks-actual-executor-blackbox.js",
+    "scripts/mad-sks-app-ui-no-mutation-check.js",
     "scripts/mad-sks-audit-proof-check.js",
     "scripts/mad-sks-db-executor-check.js",
     "scripts/mad-sks-executor-proof-graph-check.js",
@@ -806,6 +810,7 @@
     "scripts/mad-sks-service-executor-check.js",
     "scripts/mad-sks-shell-executor-check.js",
     "scripts/mad-sks-write-guard-check.js",
+    "scripts/mad-sks-zellij-default-pane-worker-check.js",
     "scripts/mad-sks-zellij-launch-check.js",
     "scripts/mcp-0-134-modernization-check.js",
     "scripts/mcp-readonly-concurrency-check.js",
@@ -839,6 +844,7 @@
     "scripts/prepublish-release-check-or-fast.js",
     "scripts/priority-full-closure-check.js",
     "scripts/provider-badge-context-check.js",
+    "scripts/provider-context-config-toml-check.js",
     "scripts/python-tools-smoke-check.js",
     "scripts/qa-actual-route-backfill-check.js",
     "scripts/qa-backfill-route-blackbox.js",
@@ -943,6 +949,7 @@
     "scripts/zellij-spawn-on-demand-layout-check.js",
     "scripts/zellij-ui-design-check.js",
     "scripts/zellij-worker-pane-manager-check.js",
+    "scripts/zellij-worker-pane-manager-single-owner-check.js",
     "scripts/zellij-worker-pane-spawn-order-check.js",
     "vendor/openai-codex/latest/hooks/permission-request.command.input.schema.json",
     "vendor/openai-codex/latest/hooks/permission-request.command.output.schema.json",

package/dist/cli/command-registry.js

@@ -80,6 +80,7 @@ export const COMMANDS = {
     run: entry('beta', 'Classify and execute a task through the SKS trust kernel', 'dist/core/commands/run-command.js', argsCommand(() => import('../core/commands/run-command.js'), 'runCommand', 'dist/core/commands/run-command.js')),
     status: entry('stable', 'Show concise active mission and trust status', 'dist/core/commands/status-command.js', argsCommand(() => import('../core/commands/status-command.js'), 'statusCommand', 'dist/core/commands/status-command.js')),
     root: entry('stable', 'Show active SKS root', 'dist/commands/root.js', directCommand(() => import('../commands/root.js'), 'dist/commands/root.js')),
+    update: entry('stable', 'Update the global SKS npm package', 'dist/core/commands/basic-cli.js', subcommand(() => import(basicModule), 'updateCommand', 'dist/core/commands/basic-cli.js', 'check')),
     'update-check': entry('stable', 'Check npm package freshness', 'dist/core/commands/basic-cli.js', basicArgs('updateCheckCommand')),
     wizard: entry('stable', 'Open setup wizard help', 'dist/core/commands/basic-cli.js', basicNoArgs('quickstartCommand')),
     usage: entry('stable', 'Show focused usage topic', 'dist/core/commands/basic-cli.js', basicArgs('usageCommand')),
@@ -117,6 +118,7 @@ export const COMMANDS = {
     dfix: entry('stable', 'Run DFix diagnose/plan/patch/verify loop', 'dist/core/commands/dfix-command.js', commandArgsCommand(() => import('../core/commands/dfix-command.js'), 'dfixCommand', 'dist/core/commands/dfix-command.js')),
     team: entry('beta', 'Create and observe Team missions', 'dist/core/commands/team-command.js', argsCommand(() => import('../core/commands/team-command.js'), 'team', 'dist/core/commands/team-command.js')),
     agent: entry('beta', 'Run native multi-session agent missions', 'dist/core/commands/agent-command.js', argsCommand(() => import('../core/commands/agent-command.js'), 'agentCommand', 'dist/core/commands/agent-command.js')),
+    'with-local-llm': entry('beta', 'Enable or inspect local Ollama worker backend', 'dist/core/commands/local-model-command.js', argsCommand(() => import('../core/commands/local-model-command.js'), 'localModelCommand', 'dist/core/commands/local-model-command.js')),
     naruto: entry('labs', 'Run $Naruto shadow-clone swarm (up to 100 parallel sessions)', 'dist/core/commands/naruto-command.js', argsCommand(() => import('../core/commands/naruto-command.js'), 'narutoCommand', 'dist/core/commands/naruto-command.js')),
     'qa-loop': entry('beta', 'Run QA loop missions', 'dist/core/commands/qa-loop-command.js', subcommand(() => import('../core/commands/qa-loop-command.js'), 'qaLoopCommand', 'dist/core/commands/qa-loop-command.js')),
     research: entry('labs', 'Run research missions', 'dist/core/commands/research-command.js', subcommand(() => import('../core/commands/research-command.js'), 'researchCommand', 'dist/core/commands/research-command.js')),

package/dist/commands/doctor.js

@@ -96,12 +96,17 @@ export async function run(_command, args = []) {
             model_provider: null
         }
     }));
-    const codexAppUi = await repairCodexAppFastUi(root, {
-        apply: flag(args, '--fix') && flag(args, '--repair-codex-app-ui'),
-        reportPath: `${root}/.sneakoscope/reports/codex-app-fast-ui-repair.json`
+    const doctorFix = flag(args, '--fix');
+    const explicitCodexAppUiRepair = flag(args, '--repair-codex-app-ui') || flag(args, '--yes');
+    const codexAppUiPlan = await repairCodexAppFastUi(root, {
+        apply: false,
+        reportPath: `${root}/.sneakoscope/reports/codex-app-fast-ui-repair-plan.json`
     }).catch((err) => ({
         schema: 'sks.codex-app-fast-ui-repair.v1',
         ok: false,
+        apply: false,
+        safe_auto_apply: false,
+        requires_confirmation: true,
         fast_selector: 'manual_action_required',
         provider_selector: 'ok',
         host_owned_config: 'diagnostic_failed',
@@ -109,6 +114,27 @@ export async function run(_command, args = []) {
         actions: [],
         blockers: [err?.message || String(err)]
     }));
+    const shouldApplyCodexAppUiRepair = doctorFix && (explicitCodexAppUiRepair ||
+        codexAppUiPlan.safe_auto_apply === true);
+    const codexAppUi = shouldApplyCodexAppUiRepair
+        ? await repairCodexAppFastUi(root, {
+            apply: true,
+            force: explicitCodexAppUiRepair,
+            reportPath: `${root}/.sneakoscope/reports/codex-app-fast-ui-repair.json`
+        }).catch((err) => ({
+            schema: 'sks.codex-app-fast-ui-repair.v1',
+            ok: false,
+            apply: true,
+            safe_auto_apply: false,
+            requires_confirmation: true,
+            fast_selector: 'manual_action_required',
+            provider_selector: 'ok',
+            host_owned_config: 'diagnostic_failed',
+            next_action: 'Review Codex App UI config manually.',
+            actions: [],
+            blockers: [err?.message || String(err)]
+        }))
+        : codexAppUiPlan;
     const zellij = await checkZellijCapability({ root, require: process.env.SKS_REQUIRE_ZELLIJ === '1' });
     const permissionProfiles = await inventoryCodexPermissionProfiles(root, { writeReport: true });
     const globalSksInstallCleanup = flag(args, '--fix') && !flag(args, '--local-only')

package/dist/core/agents/agent-command-surface.js

@@ -12,7 +12,10 @@ export function parseAgentCommandArgs(command, args = []) {
     const minimumWorkItems = Number(readOption(args, '--minimum-work-items', targetActiveSlots));
     const maxQueueExpansion = Number(readOption(args, '--max-queue-expansion', 10));
     const concurrency = Number(readOption(args, '--concurrency', Math.min(agents, 5)));
-    const backend = String(readOption(args, '--backend', hasFlag(args, '--mock') ? 'fake' : 'codex-sdk'));
+    const useOllama = hasFlag(args, '--ollama') || hasFlag(args, '--local-model');
+    const noOllama = hasFlag(args, '--no-ollama') || hasFlag(args, '--no-local-model');
+    const backendExplicit = hasOption(args, '--backend');
+    const backend = String(readOption(args, '--backend', hasFlag(args, '--mock') ? 'fake' : useOllama && !noOllama ? 'ollama' : 'codex-sdk'));
     const route = String(readOption(args, '--route', '$Agent'));
     const mock = hasFlag(args, '--mock') || backend === 'fake';
     const real = hasFlag(args, '--real');
@@ -26,6 +29,10 @@ export function parseAgentCommandArgs(command, args = []) {
     const serviceTier = normalizeServiceTier(explicitServiceTier, null) || undefined;
     const fastMode = hasFlag(args, '--no-fast') || serviceTier === 'standard' ? false : hasFlag(args, '--fast') ? true : undefined;
     const noFast = hasFlag(args, '--no-fast');
+    const ollamaModel = String(readOption(args, '--ollama-model', readOption(args, '--local-model-model', '')) || '') || null;
+    const ollamaBaseUrl = String(readOption(args, '--ollama-base-url', readOption(args, '--local-model-base-url', '')) || '') || null;
+    const zellijSessionName = String(readOption(args, '--zellij-session-name', '') || '') || null;
+    const zellijPaneWorker = hasFlag(args, '--no-zellij-pane-worker') ? false : hasFlag(args, '--zellij-pane-worker') ? true : undefined;
     const apply = hasFlag(args, '--apply');
     const dryRun = hasFlag(args, '--dry-run') || hasFlag(args, '--dryrun');
     const drain = hasFlag(args, '--drain');
@@ -33,7 +40,7 @@ export function parseAgentCommandArgs(command, args = []) {
     const graceMs = Number(readOption(args, '--grace-ms', 750));
     const killEscalation = hasFlag(args, '--kill-escalation') || !hasFlag(args, '--no-kill-escalation');
     const codexApp = hasFlag(args, '--codex-app');
-    const positionals = positionalArgs(rest, new Set(['--agents', '--target-active-slots', '--work-items', '--minimum-work-items', '--max-queue-expansion', '--concurrency', '--backend', '--route', '--mission', '--mission-id', '--agent', '--lane', '--stale-ms', '--grace-ms', '--profile', '--write-mode', '--max-write-agents', '--patch-entry-id', '--patch-entry', '--service-tier', '--intake', '--agent-root', '--artifact-dir', '--result-path', '--heartbeat-path', '--patch-envelope-path']));
+    const positionals = positionalArgs(rest, new Set(['--agents', '--target-active-slots', '--work-items', '--minimum-work-items', '--max-queue-expansion', '--concurrency', '--backend', '--route', '--mission', '--mission-id', '--agent', '--lane', '--stale-ms', '--grace-ms', '--profile', '--write-mode', '--max-write-agents', '--patch-entry-id', '--patch-entry', '--service-tier', '--zellij-session-name', '--intake', '--agent-root', '--artifact-dir', '--result-path', '--heartbeat-path', '--patch-envelope-path', '--ollama-model', '--local-model-model', '--ollama-base-url', '--local-model-base-url']));
     const missionDefault = action === 'run' || action === 'spawn' || action === 'plan' ? '' : 'latest';
     const positionalMission = action === 'run' || action === 'spawn' || action === 'plan' ? '' : (positionals[0] || '');
     const missionId = String(readOption(args, '--mission', readOption(args, '--mission-id', positionalMission || missionDefault)));
@@ -41,7 +48,7 @@ export function parseAgentCommandArgs(command, args = []) {
     const patchEntryId = String(readOption(args, '--patch-entry-id', readOption(args, '--patch-entry', '')));
     const promptPositionals = positionalMission ? positionals.slice(1) : positionals;
     const prompt = promptPositionals.join(' ').trim() || 'Native agent run';
-    return { command, action, prompt, route, agents, targetActiveSlots, desiredWorkItemCount, minimumWorkItems, maxQueueExpansion, concurrency, backend, mock, real, readonly, profile, writeMode, applyPatches, dryRunPatches, maxWriteAgents, fastMode, serviceTier, noFast, apply, dryRun, drain, staleMs, graceMs, killEscalation, json, missionId, lane, codexApp, patchEntryId };
+    return { command, action, prompt, route, agents, targetActiveSlots, desiredWorkItemCount, minimumWorkItems, maxQueueExpansion, concurrency, backend, backendExplicit, mock, real, readonly, profile, writeMode, applyPatches, dryRunPatches, maxWriteAgents, fastMode, serviceTier, noFast, ollamaEnabled: useOllama && !noOllama, noOllama, ollamaModel, ollamaBaseUrl, zellijSessionName, zellijPaneWorker, apply, dryRun, drain, staleMs, graceMs, killEscalation, json, missionId, lane, codexApp, patchEntryId };
 }
 function hasFlag(args, flag) {
     return args.includes(flag);
@@ -53,6 +60,9 @@ function readOption(args, name, fallback) {
     const prefixed = args.find((arg) => String(arg).startsWith(name + '='));
     return prefixed ? prefixed.slice(name.length + 1) : fallback;
 }
+function hasOption(args, name) {
+    return args.includes(name) || args.some((arg) => String(arg).startsWith(name + '='));
+}
 function positionalArgs(args, valueFlags) {
     const out = [];
     for (let i = 0; i < args.length; i += 1) {

package/dist/core/agents/agent-orchestrator.js

@@ -20,6 +20,8 @@ import { AgentPatchTransactionJournal } from './agent-patch-transaction-journal.
 import { normalizeAgentPatchEnvelope } from './agent-patch-schema.js';
 import { runFakeAgent } from './agent-runner-fake.js';
 import { runProcessAgent } from './agent-runner-process.js';
+import { classifyOllamaWorkerSlice, runOllamaAgent } from './agent-runner-ollama.js';
+import { resolveOllamaWorkerConfig } from './ollama-worker-config.js';
 import { validateAgentWorkerResult } from './agent-worker-pipeline.js';
 import { writeAgentCleanupReport } from './agent-cleanup.js';
 import { writeAgentTrustReport } from './agent-trust-report.js';
@@ -251,6 +253,8 @@ export async function runNativeAgentOrchestrator(opts = {}) {
         requestedAgents: Number(opts.agents || roster.agent_count || targetActiveSlots),
         targetActiveSlots,
         backend,
+        backendExplicit: opts.backendExplicit === true,
+        noOllama: opts.noOllama === true,
         route,
         fastModePolicy
     });
@@ -867,8 +871,11 @@ function buildProvidedAgentRoster(input, opts = {}) {
     };
 }
 async function runAgentByBackend(backend, agent, slice, opts) {
+    backend = await maybeSelectOllamaBackend(backend, agent, slice, opts);
     if (backend === 'process')
         return runProcessAgent(agent, slice, opts);
+    if (backend === 'ollama')
+        return runOllamaAgent(agent, slice, opts);
     if (backend === 'codex-sdk' || backend === 'zellij') {
         const ledgerRoot = path.resolve(opts.agentRoot || opts.cwd || process.cwd());
         const workerDir = path.join(ledgerRoot, 'codex-sdk-workers', String(agent.session_id || agent.id || 'agent'), String(slice?.id || 'slice'));
@@ -932,6 +939,21 @@ async function runAgentByBackend(backend, agent, slice, opts) {
     }
     return runFakeAgent(agent, slice, opts);
 }
+async function maybeSelectOllamaBackend(backend, agent, slice, opts) {
+    if (backend !== 'codex-sdk')
+        return backend;
+    if (opts.backendExplicit === true || opts.backend_explicit === true || opts.noOllama === true || opts.no_ollama === true)
+        return backend;
+    const config = await resolveOllamaWorkerConfig({
+        ollamaEnabled: opts.ollamaEnabled === true || opts.ollama_enabled === true,
+        model: opts.ollamaModel || opts.ollama_model || null,
+        baseUrl: opts.ollamaBaseUrl || opts.ollama_base_url || null
+    }).catch(() => null);
+    if (!config?.ok || config.enabled !== true)
+        return backend;
+    const policy = classifyOllamaWorkerSlice(slice, { route: opts.route, agent });
+    return policy.ok ? 'ollama' : backend;
+}
 function buildDirectSdkWorkerPrompt(slice) {
     const write = sdkWritePaths(slice, {});
     return [

package/dist/core/agents/agent-output-validator.js

@@ -33,7 +33,7 @@ export const AGENT_RESULT_RUNTIME_SCHEMA = {
         persona_id: { type: 'string' },
         task_slice_id: { type: 'string' },
         status: { enum: ['done', 'blocked', 'failed'] },
-        backend: { enum: ['fake', 'process', 'codex-sdk', 'zellij'] },
+        backend: { enum: ['fake', 'process', 'codex-sdk', 'zellij', 'ollama'] },
         summary: { type: 'string' },
         findings: { type: 'array', items: { type: 'string' } },
         proposed_changes: { type: 'array', items: { type: 'string' } },
@@ -91,6 +91,7 @@ export const AGENT_RESULT_RUNTIME_SCHEMA = {
                     worker_process_id: { type: 'number' },
                     backend_child_process_id: { type: 'number' },
                     backend_sdk_thread_id: { type: 'string' },
+                    backend_ollama_request_id: { type: 'string' },
                     fast_mode: { type: 'boolean' },
                     service_tier: { enum: ['fast', 'standard'] },
                     lease_id: { type: 'string' },

package/dist/core/agents/agent-patch-schema.js

@@ -17,6 +17,7 @@ export function normalizeAgentPatchEnvelope(input) {
         ...(hasFiniteNumber(input?.worker_process_id) ? { worker_process_id: Number(input.worker_process_id) } : {}),
         ...(hasFiniteNumber(input?.backend_child_process_id) ? { backend_child_process_id: Number(input.backend_child_process_id) } : {}),
         ...(input?.backend_sdk_thread_id ? { backend_sdk_thread_id: String(input.backend_sdk_thread_id) } : {}),
+        ...(input?.backend_ollama_request_id ? { backend_ollama_request_id: String(input.backend_ollama_request_id) } : {}),
         ...(input?.fast_mode === undefined ? {} : { fast_mode: Boolean(input.fast_mode) }),
         ...(input?.service_tier === 'fast' || input?.service_tier === 'standard' ? { service_tier: input.service_tier } : {}),
         ...(input?.lease_id ? { lease_id: String(input.lease_id) } : {}),
@@ -50,7 +51,7 @@ export function validateAgentPatchEnvelope(envelope) {
         violations.push('operations_missing');
     if (envelope.source && !['fixture', 'model_authored', 'process_generated', 'zellij_generated'].includes(envelope.source))
         violations.push('source_invalid');
-    if (envelope.source === 'model_authored' && !hasFiniteNumber(envelope.backend_child_process_id) && !envelope.backend_sdk_thread_id)
+    if (envelope.source === 'model_authored' && !hasFiniteNumber(envelope.backend_child_process_id) && !envelope.backend_sdk_thread_id && !envelope.backend_ollama_request_id)
         violations.push('model_authored_backend_proof_missing');
     if (envelope.source === 'fixture' && envelope.backend_child_process_id !== undefined)
         violations.push('fixture_backend_child_process_id_present');

package/dist/core/agents/agent-roster.js

@@ -29,7 +29,7 @@ export function systemSafeNarutoConcurrency(opts = {}) {
     const freeGb = freeBytes / (1024 * 1024 * 1024);
     const totalGb = totalBytes / (1024 * 1024 * 1024);
     const backend = String(opts.backend || 'codex-sdk');
-    const heavy = backend === 'codex-sdk' || backend === 'zellij' || backend === 'process';
+    const heavy = backend === 'codex-sdk' || backend === 'zellij' || backend === 'process' || backend === 'ollama';
     const ceiling = MAX_NARUTO_AGENT_COUNT;
     // macOS reports very low freemem while reclaimable memory is still available, so
     // budget against a total-memory-derived floor rather than the instantaneous free.