sneakoscope 2.0.1 → 2.0.4

package/README.md

@@ -16,7 +16,7 @@ Set up this agent project with Sneakoscope Codex. Use [[mandarange/Sneakoscope-C
 
 ## Current Release
 
-SKS **2.0.1** is a Codex App Fast UI preservation patch on top of the 2.0 execution layer. Native workers still run through the Codex SDK Control Plane, UltraRouter still classifies orchestrator/worker tasks, Reliability Shield still hardens long SDK streams, and Zellij worker panes now carry provider/service-tier proof while spawning only when scheduler slot generations need them.
+SKS **2.0.4** is a P0 Codex App Fast UI and MAD Zellij worker-pane closure patch on top of the 2.0 execution layer. `sks --mad` now relies on launch-time Fast/high overrides instead of user-level Codex config rewrites, safe Fast UI repair runs through `sks doctor --fix`, provider badges read env/auth/config.toml consistently, and interactive MAD worker panes attach to the real Zellij session as scheduler slots spawn.
 
 What changed:
 
@@ -285,6 +285,7 @@ sks deps check --yes
 sks codex-app check
 sks doctor --fix
 sks fix-path
+sks update now
 ```
 
 ### Open Codex CLI With Zellij
@@ -356,7 +357,7 @@ sks --mad
 sks --mad --allow-package-install --allow-service-control --allow-network --yes
 ```
 
-This syncs existing codex-lb provider auth, creates/uses the `sks-mad-high` high-power maintenance profile, opens the MAD-SKS permission gate for that Zellij run, starts a same-mission read-only native agent swarm, and launches a Codex CLI layout whose right-side lanes read that MAD ledger. Bare `sks --mad` grants target-project file and shell scope only; add explicit `--allow-*` flags for packages, services, network, Computer Use, browser use, generated assets, file permissions, DB writes, or other high-risk scopes. MAD-SKS is not a DB-only unlock: it is explicit user authorization to widen approved target-project scopes. Catastrophic database wipe/all-row/project-management safeguards remain active, and the pipeline contract still forbids unrequested fallback implementation code.
+This syncs existing codex-lb provider auth, creates/uses the `sks-mad-high` xhigh maintenance profile, opens the MAD-SKS permission gate for that Zellij run, starts a same-mission read-only native agent swarm, and launches a Codex CLI layout whose right-side lanes read that MAD ledger. Bare `sks --mad` grants target-project file and shell scope only; add explicit `--allow-*` flags for packages, services, network, Computer Use, browser use, generated assets, file permissions, DB writes, or other high-risk scopes. MAD-SKS is not a DB-only unlock: it is explicit user authorization to widen approved target-project scopes. Catastrophic database wipe/all-row/project-management safeguards remain active, and the pipeline contract still forbids unrequested fallback implementation code.
 
 Before launching, SKS checks npm for a newer `sneakoscope`; answer `y` to update or `n` to continue. Use `--yes` to approve missing dependency installs automatically. Tune MAD swarm startup with `--mad-agents <n>`, `--mad-swarm-work-items <n>`, and `--mad-swarm-backend <backend>`; `--no-mad-swarm` keeps only the cockpit UI if you need a temporary fallback.
 
@@ -498,6 +499,8 @@ Then open Codex App and use prompt commands directly in the chat. Examples:
 
 ```text
 $Team implement the checkout fix and verify it
+$with-local-llm-on
+$with-local-llm-off
 $DFix change this label and spacing only
 $QA-LOOP dogfood localhost:3000 and fix safe issues
 $PPT create an investor deck as HTML/PDF
@@ -508,6 +511,23 @@ $Wiki refresh and validate the context pack
 $DB inspect this migration for destructive risk
 ```
 
+### Optional Local LLM Workers
+
+Local Ollama workers are off by default, so SKS stays GPT-only unless you explicitly enable them. Use the Codex App prompt commands:
+
+```text
+$with-local-llm-on
+$with-local-llm-off
+```
+
+When enabled, the local model can only help with policy-eligible simple code patch-envelope work or read-only collection. GPT/Codex still owns strategy, planning, design, review, verification, safety, and integration. Check or tune the machine-local setting from the terminal:
+
+```sh
+sks with-local-llm status --json
+sks with-local-llm on --model rafw007/qwen36-a3b-claude-coder:q4_K_M
+sks with-local-llm off
+```
+
 Generated app files include:
 
 | Path | Purpose |
@@ -568,7 +588,7 @@ SKS_HERMES=1 sks status --json
 
 Use these inside Codex App or another agent prompt. They are prompt commands, not terminal commands.
 
-Common prompts: `$Team`, `$From-Chat-IMG`, `$DFix`, `$Answer`, `$SKS`, `$QA-LOOP`, `$PPT`, `$Computer-Use`/`$CU`, `$Goal`, `$Research`, `$AutoResearch`, `$DB`, `$MAD-SKS`, `$GX`, `$Wiki`, and `$Help`.
+Common prompts: `$Team`, `$From-Chat-IMG`, `$with-local-llm-on`, `$with-local-llm-off`, `$DFix`, `$Answer`, `$SKS`, `$QA-LOOP`, `$PPT`, `$Computer-Use`/`$CU`, `$Goal`, `$Research`, `$AutoResearch`, `$DB`, `$MAD-SKS`, `$GX`, `$Wiki`, and `$Help`.
 
 ## Common Workflows
 
@@ -590,7 +610,7 @@ sks
 # or: sks --mad
 ```
 
-Use Codex App routes with `$Team`, `$DFix`, `$QA-LOOP`, `$PPT`, `$Goal`, `$Wiki`, and `$DB`. Team missions write artifacts under `.sneakoscope/missions/`; validate them with `sks validate-artifacts latest`.
+Use Codex App routes with `$Team`, `$with-local-llm-on`/`$with-local-llm-off`, `$DFix`, `$QA-LOOP`, `$PPT`, `$Goal`, `$Wiki`, and `$DB`. Team missions write artifacts under `.sneakoscope/missions/`; validate them with `sks validate-artifacts latest`.
 
 Refresh context before risky work:
 
@@ -630,11 +650,12 @@ If PATH or npm has duplicate global installs, `sks doctor --fix` keeps one globa
 
 ```sh
 sks update-check --json
+sks update now
 npm ls -g sneakoscope --depth=0
 sks doctor --fix
 ```
 
-Update prompts compare npm latest against the effective installed version from source metadata, PATH `sks --version`, and global npm package metadata. If a global update succeeded but an old shim remains earlier on PATH, `sks doctor --fix` can remove duplicate global installs and refresh the managed setup.
+Update prompts compare npm latest against the effective installed version from source metadata, PATH `sks --version`, and global npm package metadata. `sks update now` installs through npm global mode instead of mutating the current project's dependencies. If a global update succeeded but an old shim remains earlier on PATH, `sks doctor --fix` can remove duplicate global installs and refresh the managed setup.
 
 ### Zellij is missing
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "2.0.1"
+version = "2.0.4"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "2.0.1"
+version = "2.0.4"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 2.0.1"),
+        Some("--version") => println!("sks-rs 2.0.4"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/.sks-build-stamp.json

@@ -1,8 +1,8 @@
 {
   "schema": "sks.dist-build-stamp.v1",
   "package_name": "sneakoscope",
-  "package_version": "2.0.1",
-  "source_digest": "fc6581fa4e92892f1de963685540cd8754dd02015459f80ded6c7271837a0197",
-  "source_file_count": 1852,
-  "built_at_source_time": 1780513745133
+  "package_version": "2.0.4",
+  "source_digest": "bd67ddf989e2e0b702453d422e2cf991e8ca397d3d4afc14fdfa06b4610452c9",
+  "source_file_count": 1879,
+  "built_at_source_time": 1780569940553
 }

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '2.0.1';
+const FAST_PACKAGE_VERSION = '2.0.4';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--agent' && args[1] === 'worker') {

package/dist/build-manifest.json

@@ -1,16 +1,16 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "2.0.1",
-  "package_version": "2.0.1",
+  "version": "2.0.4",
+  "package_version": "2.0.4",
   "typescript": true,
   "mjs_runtime_files": 0,
-  "compiled_file_count": 929,
-  "compiled_js_count": 929,
+  "compiled_file_count": 949,
+  "compiled_js_count": 949,
   "compiled_dts_count": 0,
-  "source_digest": "fc6581fa4e92892f1de963685540cd8754dd02015459f80ded6c7271837a0197",
-  "source_file_count": 1852,
-  "source_files_hash": "92f47f9e5a2283d371d4ee267541e14ddbd9c9101e9db1ab8e46cede781f076b",
-  "source_list_hash": "92f47f9e5a2283d371d4ee267541e14ddbd9c9101e9db1ab8e46cede781f076b",
+  "source_digest": "bd67ddf989e2e0b702453d422e2cf991e8ca397d3d4afc14fdfa06b4610452c9",
+  "source_file_count": 1879,
+  "source_files_hash": "c43d09b591370ad58937365d6bbfca2be0b60fcf04a43fdbb9a56d9288752814",
+  "source_list_hash": "c43d09b591370ad58937365d6bbfca2be0b60fcf04a43fdbb9a56d9288752814",
   "src_mjs_runtime_files": 0,
   "dist_stamp_schema": "sks.dist-build-stamp.v1",
   "files": [
@@ -135,6 +135,7 @@
     "core/agents/agent-roster.js",
     "core/agents/agent-runner-codex-exec.js",
     "core/agents/agent-runner-fake.js",
+    "core/agents/agent-runner-ollama.js",
     "core/agents/agent-runner-process.js",
     "core/agents/agent-runner-zellij.js",
     "core/agents/agent-scheduler.js",
@@ -159,6 +160,7 @@
     "core/agents/native-cli-worker.js",
     "core/agents/native-worker-backend-router.js",
     "core/agents/no-subagent-scaling-policy.js",
+    "core/agents/ollama-worker-config.js",
     "core/agents/real-codex-parallel-proof.js",
     "core/agents/route-collaboration-ledger.js",
     "core/agents/scout-policy.js",
@@ -210,6 +212,10 @@
     "core/codex-control/codex-sdk-sandbox-policy.js",
     "core/codex-control/codex-task-runner.js",
     "core/codex-control/codex-thread-registry.js",
+    "core/codex-control/gpt-final-arbiter.js",
+    "core/codex-control/gpt-final-context-compressor.js",
+    "core/codex-control/gpt-final-proof-pack.js",
+    "core/codex-control/gpt-final-review-schema.js",
     "core/codex-control/schemas/agent-worker-result.schema.js",
     "core/codex-exec-output-schema.js",
     "core/codex-hooks/codex-hook-actual-discovery.js",
@@ -259,6 +265,7 @@
     "core/commands/harness-command.js",
     "core/commands/hproof-command.js",
     "core/commands/image-ux-review-command.js",
+    "core/commands/local-model-command.js",
     "core/commands/mad-sks-command.js",
     "core/commands/naruto-command.js",
     "core/commands/paths-command.js",
@@ -354,6 +361,8 @@
     "core/init.js",
     "core/json-schema-validator.js",
     "core/language-preference.js",
+    "core/local-llm/local-collaboration-policy.js",
+    "core/local-llm/local-llm-config.js",
     "core/loop-blocker.js",
     "core/mad-sks/audit-ledger.js",
     "core/mad-sks/authorization-manifest.js",
@@ -395,6 +404,8 @@
     "core/pipeline.js",
     "core/pipeline/active-context.js",
     "core/pipeline/agent-stage-policy.js",
+    "core/pipeline/final-gpt-patch-stage.js",
+    "core/pipeline/final-gpt-review-stage.js",
     "core/pipeline/pipeline-plan-writer.js",
     "core/pipeline/plan-schema.js",
     "core/pipeline/prompt-context-answer.js",
@@ -760,6 +771,8 @@
     "scripts/flagship-proof-graph-v4-check.js",
     "scripts/git-precommit-fixture-check.js",
     "scripts/goal-mode-official-default-check.js",
+    "scripts/gpt-final-arbiter-check.js",
+    "scripts/gpt-final-arbiter-performance-check.js",
     "scripts/gpt-image-2-real-file-smoke.js",
     "scripts/gpt-image-2-request-validator-check.js",
     "scripts/hooks-0.134-context-parity-check.js",
@@ -789,9 +802,13 @@
     "scripts/lib/real-codex-parallel-gate.js",
     "scripts/lib/real-codex-parallel-proof-fixture.js",
     "scripts/lib/valid-png-fixture.js",
+    "scripts/local-collab-gpt-final-availability-check.js",
+    "scripts/local-collab-no-local-only-final-check.js",
+    "scripts/local-collab-policy-check.js",
     "scripts/loop-blocker-check.js",
     "scripts/mad-preflight-blocks-unreadable-config-check.js",
     "scripts/mad-sks-actual-executor-blackbox.js",
+    "scripts/mad-sks-app-ui-no-mutation-check.js",
     "scripts/mad-sks-audit-proof-check.js",
     "scripts/mad-sks-db-executor-check.js",
     "scripts/mad-sks-executor-proof-graph-check.js",
@@ -806,6 +823,7 @@
     "scripts/mad-sks-service-executor-check.js",
     "scripts/mad-sks-shell-executor-check.js",
     "scripts/mad-sks-write-guard-check.js",
+    "scripts/mad-sks-zellij-default-pane-worker-check.js",
     "scripts/mad-sks-zellij-launch-check.js",
     "scripts/mcp-0-134-modernization-check.js",
     "scripts/mcp-readonly-concurrency-check.js",
@@ -839,6 +857,7 @@
     "scripts/prepublish-release-check-or-fast.js",
     "scripts/priority-full-closure-check.js",
     "scripts/provider-badge-context-check.js",
+    "scripts/provider-context-config-toml-check.js",
     "scripts/python-tools-smoke-check.js",
     "scripts/qa-actual-route-backfill-check.js",
     "scripts/qa-backfill-route-blackbox.js",
@@ -943,6 +962,7 @@
     "scripts/zellij-spawn-on-demand-layout-check.js",
     "scripts/zellij-ui-design-check.js",
     "scripts/zellij-worker-pane-manager-check.js",
+    "scripts/zellij-worker-pane-manager-single-owner-check.js",
     "scripts/zellij-worker-pane-spawn-order-check.js",
     "vendor/openai-codex/latest/hooks/permission-request.command.input.schema.json",
     "vendor/openai-codex/latest/hooks/permission-request.command.output.schema.json",

package/dist/cli/command-registry.js

@@ -80,6 +80,7 @@ export const COMMANDS = {
     run: entry('beta', 'Classify and execute a task through the SKS trust kernel', 'dist/core/commands/run-command.js', argsCommand(() => import('../core/commands/run-command.js'), 'runCommand', 'dist/core/commands/run-command.js')),
     status: entry('stable', 'Show concise active mission and trust status', 'dist/core/commands/status-command.js', argsCommand(() => import('../core/commands/status-command.js'), 'statusCommand', 'dist/core/commands/status-command.js')),
     root: entry('stable', 'Show active SKS root', 'dist/commands/root.js', directCommand(() => import('../commands/root.js'), 'dist/commands/root.js')),
+    update: entry('stable', 'Update the global SKS npm package', 'dist/core/commands/basic-cli.js', subcommand(() => import(basicModule), 'updateCommand', 'dist/core/commands/basic-cli.js', 'check')),
     'update-check': entry('stable', 'Check npm package freshness', 'dist/core/commands/basic-cli.js', basicArgs('updateCheckCommand')),
     wizard: entry('stable', 'Open setup wizard help', 'dist/core/commands/basic-cli.js', basicNoArgs('quickstartCommand')),
     usage: entry('stable', 'Show focused usage topic', 'dist/core/commands/basic-cli.js', basicArgs('usageCommand')),
@@ -117,6 +118,7 @@ export const COMMANDS = {
     dfix: entry('stable', 'Run DFix diagnose/plan/patch/verify loop', 'dist/core/commands/dfix-command.js', commandArgsCommand(() => import('../core/commands/dfix-command.js'), 'dfixCommand', 'dist/core/commands/dfix-command.js')),
     team: entry('beta', 'Create and observe Team missions', 'dist/core/commands/team-command.js', argsCommand(() => import('../core/commands/team-command.js'), 'team', 'dist/core/commands/team-command.js')),
     agent: entry('beta', 'Run native multi-session agent missions', 'dist/core/commands/agent-command.js', argsCommand(() => import('../core/commands/agent-command.js'), 'agentCommand', 'dist/core/commands/agent-command.js')),
+    'with-local-llm': entry('beta', 'Enable or inspect local Ollama worker backend', 'dist/core/commands/local-model-command.js', argsCommand(() => import('../core/commands/local-model-command.js'), 'localModelCommand', 'dist/core/commands/local-model-command.js')),
     naruto: entry('labs', 'Run $Naruto shadow-clone swarm (up to 100 parallel sessions)', 'dist/core/commands/naruto-command.js', argsCommand(() => import('../core/commands/naruto-command.js'), 'narutoCommand', 'dist/core/commands/naruto-command.js')),
     'qa-loop': entry('beta', 'Run QA loop missions', 'dist/core/commands/qa-loop-command.js', subcommand(() => import('../core/commands/qa-loop-command.js'), 'qaLoopCommand', 'dist/core/commands/qa-loop-command.js')),
     research: entry('labs', 'Run research missions', 'dist/core/commands/research-command.js', subcommand(() => import('../core/commands/research-command.js'), 'researchCommand', 'dist/core/commands/research-command.js')),

package/dist/commands/doctor.js

@@ -96,12 +96,17 @@ export async function run(_command, args = []) {
             model_provider: null
         }
     }));
-    const codexAppUi = await repairCodexAppFastUi(root, {
-        apply: flag(args, '--fix') && flag(args, '--repair-codex-app-ui'),
-        reportPath: `${root}/.sneakoscope/reports/codex-app-fast-ui-repair.json`
+    const doctorFix = flag(args, '--fix');
+    const explicitCodexAppUiRepair = flag(args, '--repair-codex-app-ui') || flag(args, '--yes');
+    const codexAppUiPlan = await repairCodexAppFastUi(root, {
+        apply: false,
+        reportPath: `${root}/.sneakoscope/reports/codex-app-fast-ui-repair-plan.json`
     }).catch((err) => ({
         schema: 'sks.codex-app-fast-ui-repair.v1',
         ok: false,
+        apply: false,
+        safe_auto_apply: false,
+        requires_confirmation: true,
         fast_selector: 'manual_action_required',
         provider_selector: 'ok',
         host_owned_config: 'diagnostic_failed',
@@ -109,6 +114,27 @@ export async function run(_command, args = []) {
         actions: [],
         blockers: [err?.message || String(err)]
     }));
+    const shouldApplyCodexAppUiRepair = doctorFix && (explicitCodexAppUiRepair ||
+        codexAppUiPlan.safe_auto_apply === true);
+    const codexAppUi = shouldApplyCodexAppUiRepair
+        ? await repairCodexAppFastUi(root, {
+            apply: true,
+            force: explicitCodexAppUiRepair,
+            reportPath: `${root}/.sneakoscope/reports/codex-app-fast-ui-repair.json`
+        }).catch((err) => ({
+            schema: 'sks.codex-app-fast-ui-repair.v1',
+            ok: false,
+            apply: true,
+            safe_auto_apply: false,
+            requires_confirmation: true,
+            fast_selector: 'manual_action_required',
+            provider_selector: 'ok',
+            host_owned_config: 'diagnostic_failed',
+            next_action: 'Review Codex App UI config manually.',
+            actions: [],
+            blockers: [err?.message || String(err)]
+        }))
+        : codexAppUiPlan;
     const zellij = await checkZellijCapability({ root, require: process.env.SKS_REQUIRE_ZELLIJ === '1' });
     const permissionProfiles = await inventoryCodexPermissionProfiles(root, { writeReport: true });
     const globalSksInstallCleanup = flag(args, '--fix') && !flag(args, '--local-only')

package/dist/core/agents/agent-command-surface.js

@@ -12,7 +12,10 @@ export function parseAgentCommandArgs(command, args = []) {
     const minimumWorkItems = Number(readOption(args, '--minimum-work-items', targetActiveSlots));
     const maxQueueExpansion = Number(readOption(args, '--max-queue-expansion', 10));
     const concurrency = Number(readOption(args, '--concurrency', Math.min(agents, 5)));
-    const backend = String(readOption(args, '--backend', hasFlag(args, '--mock') ? 'fake' : 'codex-sdk'));
+    const useOllama = hasFlag(args, '--ollama') || hasFlag(args, '--local-model');
+    const noOllama = hasFlag(args, '--no-ollama') || hasFlag(args, '--no-local-model');
+    const backendExplicit = hasOption(args, '--backend');
+    const backend = String(readOption(args, '--backend', hasFlag(args, '--mock') ? 'fake' : useOllama && !noOllama ? 'ollama' : 'codex-sdk'));
     const route = String(readOption(args, '--route', '$Agent'));
     const mock = hasFlag(args, '--mock') || backend === 'fake';
     const real = hasFlag(args, '--real');
@@ -26,6 +29,10 @@ export function parseAgentCommandArgs(command, args = []) {
     const serviceTier = normalizeServiceTier(explicitServiceTier, null) || undefined;
     const fastMode = hasFlag(args, '--no-fast') || serviceTier === 'standard' ? false : hasFlag(args, '--fast') ? true : undefined;
     const noFast = hasFlag(args, '--no-fast');
+    const ollamaModel = String(readOption(args, '--ollama-model', readOption(args, '--local-model-model', '')) || '') || null;
+    const ollamaBaseUrl = String(readOption(args, '--ollama-base-url', readOption(args, '--local-model-base-url', '')) || '') || null;
+    const zellijSessionName = String(readOption(args, '--zellij-session-name', '') || '') || null;
+    const zellijPaneWorker = hasFlag(args, '--no-zellij-pane-worker') ? false : hasFlag(args, '--zellij-pane-worker') ? true : undefined;
     const apply = hasFlag(args, '--apply');
     const dryRun = hasFlag(args, '--dry-run') || hasFlag(args, '--dryrun');
     const drain = hasFlag(args, '--drain');
@@ -33,7 +40,7 @@ export function parseAgentCommandArgs(command, args = []) {
     const graceMs = Number(readOption(args, '--grace-ms', 750));
     const killEscalation = hasFlag(args, '--kill-escalation') || !hasFlag(args, '--no-kill-escalation');
     const codexApp = hasFlag(args, '--codex-app');
-    const positionals = positionalArgs(rest, new Set(['--agents', '--target-active-slots', '--work-items', '--minimum-work-items', '--max-queue-expansion', '--concurrency', '--backend', '--route', '--mission', '--mission-id', '--agent', '--lane', '--stale-ms', '--grace-ms', '--profile', '--write-mode', '--max-write-agents', '--patch-entry-id', '--patch-entry', '--service-tier', '--intake', '--agent-root', '--artifact-dir', '--result-path', '--heartbeat-path', '--patch-envelope-path']));
+    const positionals = positionalArgs(rest, new Set(['--agents', '--target-active-slots', '--work-items', '--minimum-work-items', '--max-queue-expansion', '--concurrency', '--backend', '--route', '--mission', '--mission-id', '--agent', '--lane', '--stale-ms', '--grace-ms', '--profile', '--write-mode', '--max-write-agents', '--patch-entry-id', '--patch-entry', '--service-tier', '--zellij-session-name', '--intake', '--agent-root', '--artifact-dir', '--result-path', '--heartbeat-path', '--patch-envelope-path', '--ollama-model', '--local-model-model', '--ollama-base-url', '--local-model-base-url']));
     const missionDefault = action === 'run' || action === 'spawn' || action === 'plan' ? '' : 'latest';
     const positionalMission = action === 'run' || action === 'spawn' || action === 'plan' ? '' : (positionals[0] || '');
     const missionId = String(readOption(args, '--mission', readOption(args, '--mission-id', positionalMission || missionDefault)));
@@ -41,7 +48,7 @@ export function parseAgentCommandArgs(command, args = []) {
     const patchEntryId = String(readOption(args, '--patch-entry-id', readOption(args, '--patch-entry', '')));
     const promptPositionals = positionalMission ? positionals.slice(1) : positionals;
     const prompt = promptPositionals.join(' ').trim() || 'Native agent run';
-    return { command, action, prompt, route, agents, targetActiveSlots, desiredWorkItemCount, minimumWorkItems, maxQueueExpansion, concurrency, backend, mock, real, readonly, profile, writeMode, applyPatches, dryRunPatches, maxWriteAgents, fastMode, serviceTier, noFast, apply, dryRun, drain, staleMs, graceMs, killEscalation, json, missionId, lane, codexApp, patchEntryId };
+    return { command, action, prompt, route, agents, targetActiveSlots, desiredWorkItemCount, minimumWorkItems, maxQueueExpansion, concurrency, backend, backendExplicit, mock, real, readonly, profile, writeMode, applyPatches, dryRunPatches, maxWriteAgents, fastMode, serviceTier, noFast, ollamaEnabled: useOllama && !noOllama, noOllama, ollamaModel, ollamaBaseUrl, zellijSessionName, zellijPaneWorker, apply, dryRun, drain, staleMs, graceMs, killEscalation, json, missionId, lane, codexApp, patchEntryId };
 }
 function hasFlag(args, flag) {
     return args.includes(flag);
@@ -53,6 +60,9 @@ function readOption(args, name, fallback) {
     const prefixed = args.find((arg) => String(arg).startsWith(name + '='));
     return prefixed ? prefixed.slice(name.length + 1) : fallback;
 }
+function hasOption(args, name) {
+    return args.includes(name) || args.some((arg) => String(arg).startsWith(name + '='));
+}
 function positionalArgs(args, valueFlags) {
     const out = [];
     for (let i = 0; i < args.length; i += 1) {

package/dist/core/agents/agent-orchestrator.js

@@ -20,6 +20,8 @@ import { AgentPatchTransactionJournal } from './agent-patch-transaction-journal.
 import { normalizeAgentPatchEnvelope } from './agent-patch-schema.js';
 import { runFakeAgent } from './agent-runner-fake.js';
 import { runProcessAgent } from './agent-runner-process.js';
+import { classifyOllamaWorkerSlice, runOllamaAgent } from './agent-runner-ollama.js';
+import { resolveOllamaWorkerConfig } from './ollama-worker-config.js';
 import { validateAgentWorkerResult } from './agent-worker-pipeline.js';
 import { writeAgentCleanupReport } from './agent-cleanup.js';
 import { writeAgentTrustReport } from './agent-trust-report.js';
@@ -47,6 +49,9 @@ import { writeNativeCliSessionProof } from './native-cli-session-proof.js';
 import { writeNoSubagentScalingPolicy } from './no-subagent-scaling-policy.js';
 import { runCodexTask } from '../codex-control/codex-control-plane.js';
 import { CODEX_AGENT_WORKER_RESULT_SCHEMA_ID, codexAgentWorkerResultSchema } from '../codex-control/schemas/agent-worker-result.schema.js';
+import { resolveLocalCollaborationPolicy, localCollaborationParticipated } from '../local-llm/local-collaboration-policy.js';
+import { runFinalGptReviewStage } from '../pipeline/final-gpt-review-stage.js';
+import { selectFinalGptPatchSource } from '../pipeline/final-gpt-patch-stage.js';
 export async function runNativeAgentOrchestrator(opts = {}) {
     const root = path.resolve(opts.root || process.cwd());
     const prompt = String(opts.prompt || 'Native agent run');
@@ -251,6 +256,8 @@ export async function runNativeAgentOrchestrator(opts = {}) {
         requestedAgents: Number(opts.agents || roster.agent_count || targetActiveSlots),
         targetActiveSlots,
         backend,
+        backendExplicit: opts.backendExplicit === true,
+        noOllama: opts.noOllama === true,
         route,
         fastModePolicy
     });
@@ -365,15 +372,51 @@ export async function runNativeAgentOrchestrator(opts = {}) {
     });
     const noSubagentScalingPolicy = await writeNoSubagentScalingPolicy(ledgerRoot, { nativeProof: nativeCliSessionProof });
     const fastModePropagation = await writeFastModePropagationProof(ledgerRoot, { policy: fastModePolicy, backend, results });
+    const localCollaborationPolicy = resolveLocalCollaborationPolicy();
+    await writeJsonAtomic(path.join(ledgerRoot, 'local-collaboration-policy.json'), localCollaborationPolicy);
+    const localParticipated = localCollaborationParticipated(results);
+    const candidatePatchEnvelopes = results.flatMap((result) => Array.isArray(result.patch_envelopes) ? result.patch_envelopes : []);
+    const gptFinalArbiter = localParticipated
+        ? await runFinalGptReviewStage({
+            schema: 'sks.gpt-final-arbiter-input.v1',
+            route,
+            mission_id: missionId,
+            local_mode: localCollaborationPolicy.mode,
+            local_outputs: results.map((result) => ({
+                worker_id: result.agent_id,
+                backend: result.backend_router_report?.selected_backend || result.backend || backend,
+                status: result.status,
+                summary: result.summary,
+                patch_envelopes: result.patch_envelopes || [],
+                proof: result.verification?.status || '',
+                blockers: result.blockers || [],
+                changed_files: result.changed_files || []
+            })),
+            candidate_diff: '',
+            candidate_patch_envelopes: candidatePatchEnvelopes,
+            verification_results: results.map((result) => result.verification || { status: result.status || 'unknown' }),
+            side_effect_report: { schema: 'sks.agent-side-effect-summary.v1', ok: true, route, mutation_owner: 'parent_agent_orchestrator' },
+            mutation_ledger: { parallel_write_policy: parallelWritePolicy, result_count: results.length },
+            rollback_plan: { verification_rollback_dag: strategyCompiled.verification_rollback_dag || null }
+        }, { cwd: root, mutationLedgerRoot: path.join(ledgerRoot, 'gpt-final-arbiter') })
+        : null;
+    const finalGptPatchStage = localParticipated
+        ? selectFinalGptPatchSource(gptFinalArbiter, candidatePatchEnvelopes)
+        : null;
+    const resultsForPatchSwarm = localParticipated && finalGptPatchStage?.ok === true && gptFinalArbiter?.result?.status === 'modified'
+        ? withFinalGptPatchEnvelopes(results, finalGptPatchStage.patch_envelopes)
+        : results;
     const patchSwarm = await runAgentPatchSwarmRuntime(root, ledgerRoot, {
         missionId,
         route,
         routeCommand,
         writeCapable,
-        results,
+        results: resultsForPatchSwarm,
         parallelWritePolicy,
         verificationRollbackDag: strategyCompiled.verification_rollback_dag,
-        dryRun: opts.dryRunPatches === true || opts.applyPatches !== true
+        dryRun: opts.dryRunPatches === true || opts.applyPatches !== true || (localParticipated && gptFinalArbiter?.ok !== true),
+        gptFinalArbiter,
+        finalGptPatchStage
     });
     const stale = await detectStaleAgentSessions(ledgerRoot);
     if (!stale.ok)
@@ -399,6 +442,8 @@ export async function runNativeAgentOrchestrator(opts = {}) {
         ...(nativeCliSessionProof.ok ? [] : nativeCliSessionProof.blockers),
         ...(noSubagentScalingPolicy.ok ? [] : noSubagentScalingPolicy.blockers),
         ...(fastModePropagation.ok ? [] : fastModePropagation.blockers),
+        ...(localParticipated && gptFinalArbiter?.ok !== true ? gptFinalArbiter?.blockers || ['gpt_final_arbiter_not_ok'] : []),
+        ...(localParticipated && finalGptPatchStage?.ok === false ? finalGptPatchStage.blockers || ['final_gpt_patch_stage_not_ok'] : []),
         ...(patchSwarm.ok ? [] : patchSwarm.blockers),
         ...(janitor.ok ? [] : janitor.blockers)
     ];
@@ -434,7 +479,10 @@ export async function runNativeAgentOrchestrator(opts = {}) {
         fastModePolicy,
         fastModePropagation,
         triwikiContext,
-        selectedCoreSkill
+        selectedCoreSkill,
+        localCollaborationPolicy,
+        gptFinalArbiter,
+        finalGptPatchStage
     });
     await writeAgentCodexCockpitArtifacts(dir, { missionId, projectHash: namespace.root_hash });
     await setCurrent(root, { mission_id: missionId, mode: 'AGENT', phase: proof.ok ? 'AGENT_NATIVE_KERNEL_DONE' : 'AGENT_NATIVE_KERNEL_BLOCKED', native_agent_backend: backend, updated_at: nowIso() });
@@ -474,10 +522,30 @@ export async function runNativeAgentOrchestrator(opts = {}) {
         no_subagent_scaling_policy: noSubagentScalingPolicy,
         fast_mode_policy: fastModePolicy,
         fast_mode_propagation: fastModePropagation,
+        local_collaboration_policy: localCollaborationPolicy,
+        gpt_final_arbiter: gptFinalArbiter,
+        final_gpt_patch_stage: finalGptPatchStage,
         patch_swarm: patchSwarm,
         proof
     };
 }
+function withFinalGptPatchEnvelopes(results, patchEnvelopes = []) {
+    const byAgent = new Map();
+    for (const envelope of patchEnvelopes) {
+        const agentId = String(envelope?.agent_id || 'gpt-final-arbiter');
+        byAgent.set(agentId, [...(byAgent.get(agentId) || []), envelope]);
+    }
+    let assigned = false;
+    const next = results.map((result) => {
+        const envelopes = byAgent.get(String(result.agent_id || '')) || [];
+        if (envelopes.length)
+            assigned = true;
+        return { ...result, patch_envelopes: envelopes };
+    });
+    if (!assigned && patchEnvelopes.length && next[0])
+        next[0] = { ...next[0], patch_envelopes: patchEnvelopes };
+    return next;
+}
 async function legacyCodexExecBlockedRun(input) {
     const blockers = ['legacy_codex_exec_runtime_removed'];
     const ledgerRoot = path.join(input.dir, 'agents');
@@ -702,7 +770,9 @@ async function runAgentPatchSwarmRuntime(root, ledgerRoot, input) {
         verification: verificationResults.results.map((result) => result.status),
         parallelWritePolicy: input.parallelWritePolicy,
         conflictRebase,
-        verificationRollbackDag: input.verificationRollbackDag
+        verificationRollbackDag: input.verificationRollbackDag,
+        gptFinalArbiter: input.gptFinalArbiter,
+        finalGptPatchStage: input.finalGptPatchStage
     };
     const initialProof = buildAgentPatchProof(proofInput);
     await writeJsonAtomic(path.join(ledgerRoot, 'agent-patch-proof.json'), initialProof);
@@ -867,8 +937,11 @@ function buildProvidedAgentRoster(input, opts = {}) {
     };
 }
 async function runAgentByBackend(backend, agent, slice, opts) {
+    backend = await maybeSelectOllamaBackend(backend, agent, slice, opts);
     if (backend === 'process')
         return runProcessAgent(agent, slice, opts);
+    if (backend === 'ollama')
+        return runOllamaAgent(agent, slice, opts);
     if (backend === 'codex-sdk' || backend === 'zellij') {
         const ledgerRoot = path.resolve(opts.agentRoot || opts.cwd || process.cwd());
         const workerDir = path.join(ledgerRoot, 'codex-sdk-workers', String(agent.session_id || agent.id || 'agent'), String(slice?.id || 'slice'));
@@ -932,6 +1005,21 @@ async function runAgentByBackend(backend, agent, slice, opts) {
     }
     return runFakeAgent(agent, slice, opts);
 }
+async function maybeSelectOllamaBackend(backend, agent, slice, opts) {
+    if (backend !== 'codex-sdk')
+        return backend;
+    if (opts.backendExplicit === true || opts.backend_explicit === true || opts.noOllama === true || opts.no_ollama === true)
+        return backend;
+    const config = await resolveOllamaWorkerConfig({
+        ollamaEnabled: opts.ollamaEnabled === true || opts.ollama_enabled === true,
+        model: opts.ollamaModel || opts.ollama_model || null,
+        baseUrl: opts.ollamaBaseUrl || opts.ollama_base_url || null
+    }).catch(() => null);
+    if (!config?.ok || config.enabled !== true)
+        return backend;
+    const policy = classifyOllamaWorkerSlice(slice, { route: opts.route, agent });
+    return policy.ok ? 'ollama' : backend;
+}
 function buildDirectSdkWorkerPrompt(slice) {
     const write = sdkWritePaths(slice, {});
     return [

package/dist/core/agents/agent-output-validator.js

@@ -33,7 +33,7 @@ export const AGENT_RESULT_RUNTIME_SCHEMA = {
         persona_id: { type: 'string' },
         task_slice_id: { type: 'string' },
         status: { enum: ['done', 'blocked', 'failed'] },
-        backend: { enum: ['fake', 'process', 'codex-sdk', 'zellij'] },
+        backend: { enum: ['fake', 'process', 'codex-sdk', 'zellij', 'ollama'] },
         summary: { type: 'string' },
         findings: { type: 'array', items: { type: 'string' } },
         proposed_changes: { type: 'array', items: { type: 'string' } },
@@ -91,6 +91,7 @@ export const AGENT_RESULT_RUNTIME_SCHEMA = {
                     worker_process_id: { type: 'number' },
                     backend_child_process_id: { type: 'number' },
                     backend_sdk_thread_id: { type: 'string' },
+                    backend_ollama_request_id: { type: 'string' },
                     fast_mode: { type: 'boolean' },
                     service_tier: { enum: ['fast', 'standard'] },
                     lease_id: { type: 'string' },

package/dist/core/agents/agent-patch-proof.js

@@ -50,6 +50,8 @@ export function buildAgentPatchProof(input = {}) {
         ...journalBlockers,
         ...rebaseBlockers,
         ...parallelGroupBlockers,
+        ...(input.gptFinalArbiter && input.gptFinalArbiter.ok !== true ? input.gptFinalArbiter.blockers || ['gpt_final_arbiter_not_ok'] : []),
+        ...(input.finalGptPatchStage && input.finalGptPatchStage.ok !== true ? input.finalGptPatchStage.blockers || ['final_gpt_patch_stage_not_ok'] : []),
         ...applyResults.flatMap((applyResult) => applyResult.ok ? [] : (applyResult.violations || ['patch_apply_failed']))
     ].map(String);
     const changedFilesByAgent = changedFilesGroupedByAgent(applyResults);
@@ -71,6 +73,9 @@ export function buildAgentPatchProof(input = {}) {
         verification_node_coverage: strictWiring.verification_node_coverage,
         rollback_node_coverage: strictWiring.rollback_node_coverage,
         parallel_patch_apply_verified: hasParallelGroup,
+        gpt_final_arbiter: input.gptFinalArbiter ? 'gpt-final-arbiter/gpt-final-arbiter.json' : null,
+        gpt_final_status: input.gptFinalArbiter?.result?.status || null,
+        final_patch_source: input.finalGptPatchStage?.final_patch_source || null,
         patch_conflict_count: Number(input.merge?.conflicts?.length || 0),
         serial_bottleneck_count: Number(input.merge?.serial_conflicts?.length || 0),
         changed_files_by_agent: changedFilesByAgent,

package/dist/core/agents/agent-patch-schema.js

@@ -17,6 +17,7 @@ export function normalizeAgentPatchEnvelope(input) {
         ...(hasFiniteNumber(input?.worker_process_id) ? { worker_process_id: Number(input.worker_process_id) } : {}),
         ...(hasFiniteNumber(input?.backend_child_process_id) ? { backend_child_process_id: Number(input.backend_child_process_id) } : {}),
         ...(input?.backend_sdk_thread_id ? { backend_sdk_thread_id: String(input.backend_sdk_thread_id) } : {}),
+        ...(input?.backend_ollama_request_id ? { backend_ollama_request_id: String(input.backend_ollama_request_id) } : {}),
         ...(input?.fast_mode === undefined ? {} : { fast_mode: Boolean(input.fast_mode) }),
         ...(input?.service_tier === 'fast' || input?.service_tier === 'standard' ? { service_tier: input.service_tier } : {}),
         ...(input?.lease_id ? { lease_id: String(input.lease_id) } : {}),
@@ -50,7 +51,7 @@ export function validateAgentPatchEnvelope(envelope) {
         violations.push('operations_missing');
     if (envelope.source && !['fixture', 'model_authored', 'process_generated', 'zellij_generated'].includes(envelope.source))
         violations.push('source_invalid');
-    if (envelope.source === 'model_authored' && !hasFiniteNumber(envelope.backend_child_process_id) && !envelope.backend_sdk_thread_id)
+    if (envelope.source === 'model_authored' && !hasFiniteNumber(envelope.backend_child_process_id) && !envelope.backend_sdk_thread_id && !envelope.backend_ollama_request_id)
         violations.push('model_authored_backend_proof_missing');
     if (envelope.source === 'fixture' && envelope.backend_child_process_id !== undefined)
         violations.push('fixture_backend_child_process_id_present');