sneakoscope 5.6.0 → 5.7.0

package/README.md

@@ -14,7 +14,7 @@
 
 Sneakoscope Codex (`sks`) is a Codex CLI and Codex App harness for people who want parallel AI coding without losing proof. It gives Codex a simple front door, a dynamic worker swarm, a local dashboard, TriWiki project memory, and release gates that separate machine evidence from LLM opinion.
 
-Current release: `5.6.0`. New in this release: a source-cited TriWiki code index/pack (`sks wiki refresh --code`) so LLMs use fewer tokens navigating a codebase, native repair for Codex Desktop's Computer Use and Browser Use features, and an agent bridge (`sks mcp-server`, `SKS_AGENT_MODE`, NDJSON `--stream`) so any agent system — not a specific one — can drive SKS's full command surface. See [docs/AGENT-BRIDGE.md](docs/AGENT-BRIDGE.md) and [CHANGELOG.md](CHANGELOG.md).
+Current release: SKS **5.7.0**. New in this release: repaired Codex App menu bar persistence and Fast Mode actions, codex-lb Fast Mode defaults pinned to the required current Codex model, legacy upgrade repair through `sks update` and `sks doctor --fix`, and a safer `npm publish --ignore-scripts` wrapper that runs the release gates before lifecycle-disabled publish. See [CHANGELOG.md](CHANGELOG.md).
 
 ## Install
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "5.6.0"
+version = "5.7.0"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "5.6.0"
+version = "5.7.0"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 5.6.0"),
+        Some("--version") => println!("sks-rs 5.7.0"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '5.6.0';
+const FAST_PACKAGE_VERSION = '5.7.0';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--agent' && args[1] === 'worker') {

package/dist/cli/command-registry.js

@@ -143,7 +143,7 @@ export const COMMANDS = {
     'mad-db': routeStateMutator(entry('beta', 'Deprecated alias for MAD-SKS SQL-plane execution; redirects to sks mad-sks sql|apply-migration', 'dist/commands/mad-db.js', directCommand(() => import('../commands/mad-db.js'), 'dist/commands/mad-db.js')), ['mad-sks-gate.json']),
     'auto-review': entry('beta', 'Manage auto-review profile', 'dist/commands/auto-review.js', directCommand(() => import('../commands/auto-review.js'), 'dist/commands/auto-review.js')),
     'dollar-commands': entry('stable', 'List Codex App dollar commands', 'dist/core/commands/basic-cli.js', basicArgs('dollarCommandsCommand')),
-    'fast-mode': entry('stable', 'Toggle SKS Fast mode default for dollar-command routes', 'dist/core/commands/fast-mode-command.js', argsCommand(() => import('../core/commands/fast-mode-command.js'), 'fastModeCommand', 'dist/core/commands/fast-mode-command.js')),
+    'fast-mode': skipMigrationGate(entry('stable', 'Toggle SKS Fast mode default for dollar-command routes', 'dist/core/commands/fast-mode-command.js', argsCommand(() => import('../core/commands/fast-mode-command.js'), 'fastModeCommand', 'dist/core/commands/fast-mode-command.js'))),
     commit: entry('stable', 'Create a simple git commit', 'dist/commands/commit.js', directCommand(() => import('../commands/commit.js'), 'dist/commands/commit.js')),
     'commit-and-push': entry('stable', 'Create a simple git commit and push', 'dist/commands/commit-and-push.js', directCommand(() => import('../commands/commit-and-push.js'), 'dist/commands/commit-and-push.js')),
     dfix: routeStateMutator(entry('stable', 'Run DFix diagnose/plan/patch/verify loop', 'dist/core/commands/dfix-command.js', commandArgsCommand(() => import('../core/commands/dfix-command.js'), 'dfixCommand', 'dist/core/commands/dfix-command.js')), ['dfix-gate.json']),

package/dist/cli/install-helpers.js

@@ -23,6 +23,7 @@ import { extractTomlTable, writeCodexConfigGuarded } from '../core/codex/codex-c
 import { cleanupCodexConfigBackups, validateCodexConfigRoundTrip } from '../core/codex/codex-config-toml.js';
 import { runPostinstallGlobalDoctorAndMarkPending } from '../core/update/update-migration-state.js';
 import { repairCodexImagegen } from '../core/doctor/imagegen-repair.js';
+import { REQUIRED_CODEX_MODEL } from '../core/codex-model-guard.js';
 const CODEX_LB_PROVIDER_NAME = 'openai';
 const CODEX_LB_PROVIDER_ENV_KEY = 'CODEX_LB_API_KEY';
 const CODEX_LB_CANONICAL_FAST_SERVICE_TIER = 'priority';
@@ -275,7 +276,7 @@ async function postinstallHarnessConflictNotice(conflictScan) {
     console.log(formatHarnessConflictReport(conflictScan, { includePrompt: false }));
     console.log('\nWhat this means: npm can finish installing the package, but `sks setup` and `sks doctor --fix` will refuse to activate SKS until the conflicting harness is removed with human approval.');
     console.log('No files were removed by postinstall.');
-    console.log('Cleanup requires a human-approved Codex App session. Recommended model: GPT-5.5, reasoning: high.');
+    console.log(`Cleanup requires a human-approved Codex App session. Recommended model: ${REQUIRED_CODEX_MODEL}, reasoning: high.`);
     if (shouldAskPostinstallQuestion()) {
         const answer = await askPostinstallQuestion('Show the cleanup prompt now? [y/N] ');
         if (/^(y|yes|예|네|응)$/i.test(answer.trim())) {
@@ -901,7 +902,7 @@ export async function checkCodexLbResponseChain(status = {}, opts = {}) {
     const fetchImpl = opts.fetch || globalThis.fetch;
     if (typeof fetchImpl !== 'function')
         return { ok: true, status: 'skipped', skipped: true, reason: 'fetch unavailable' };
-    const model = opts.model || env.SKS_CODEX_MODEL || 'gpt-5.5';
+    const model = opts.model || env.SKS_CODEX_MODEL || REQUIRED_CODEX_MODEL;
     const timeoutMs = Number(opts.timeoutMs || env.SKS_CODEX_LB_CHAIN_CHECK_TIMEOUT_MS || 8000);
     const serviceTier = opts.fastMode === true || opts.serviceTier === 'fast' || opts.serviceTier === CODEX_LB_CANONICAL_FAST_SERVICE_TIER
         ? CODEX_LB_CANONICAL_FAST_SERVICE_TIER
@@ -1890,8 +1891,9 @@ export function normalizeCodexFastModeUiConfig(text = '', opts = {}) {
     return normalizeCodexFastModeUiConfigOnce(normalizeCodexFastModeUiConfigOnce(text, opts), opts);
 }
 function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
-    // Keep model and reasoning selection out of top-level config so Codex Desktop can
-    // expose its native model/speed selectors. SKS-owned defaults live in profiles below.
+    // Keep SKS-owned model/reasoning defaults out of top-level config so Codex
+    // Desktop can expose its native selectors, but preserve a user's deliberate
+    // top-level model/service/reasoning choices across install, update, and doctor.
     let next = String(text || '');
     const misplacedDefaultProfile = tomlTableString(next, 'user.fast_mode', 'default_profile');
     next = removeLegacyTopLevelCodexModeLocks(next);
@@ -1940,7 +1942,7 @@ function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
     // they are managed as per-file `<name>.config.toml` overlays by
     // migrateSksProfilesToPerFile (src/core/auto-review.ts), which also writes the
     // sks-fast-high overlay for CLI `--profile` use.
-    next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'model = "gpt-5.5"');
+    next = upsertTomlTableKey(next, 'profiles.sks-fast-high', `model = "${REQUIRED_CODEX_MODEL}"`);
     next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'service_tier = "fast"');
     next = upsertTomlTableKey(next, 'profiles.sks-fast-high', 'approval_policy = "on-request"');
     // Do not force a sandbox from the Codex App fast profile. The App/IDE
@@ -1966,9 +1968,13 @@ function removeLegacyTopLevelCodexModeLocks(text = '') {
     const lines = String(text || '').split('\n');
     const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
     const end = firstTable === -1 ? lines.length : firstTable;
+    const topLevelModel = topLevelTomlString(text, 'model');
+    const removeSksOwnedModeLock = topLevelModel === REQUIRED_CODEX_MODEL;
     return lines.filter((line, index) => {
         if (index >= end)
             return true;
+        if (!removeSksOwnedModeLock)
+            return true;
         return !/^\s*(?:model|model_reasoning_effort)\s*=/.test(line);
     }).join('\n').replace(/^\n+/, '').replace(/\n{3,}/g, '\n\n');
 }
@@ -2142,7 +2148,7 @@ export function codexFastModeDesktopStatus(text = '') {
     const profile = validation.parsed?.profiles?.['sks-fast-high'];
     const globalOn = validation.ok
         && validation.default_profile === 'sks-fast-high'
-        && profile?.model === 'gpt-5.5'
+        && profile?.model === REQUIRED_CODEX_MODEL
         && profile?.service_tier === 'fast';
     return {
         schema: 'sks.codex-fast-mode-desktop-status.v1',
@@ -2862,7 +2868,7 @@ export async function selftestCodexLb(tmp) {
     // escape that dash emits literally and bash collapses to `"`).
     await writeTextAtomic(codexLbFakeCodex, "#!/bin/sh\nif [ \"$1\" = \"--version\" ]; then echo \"codex-cli 99.0.0\"; exit 0; fi\nif [ \"$1\" = \"login\" ] && [ \"$2\" = \"status\" ]; then echo \"logged in with browser auth\"; exit 0; fi\nif [ \"$1\" = \"login\" ] && [ \"$2\" = \"--with-api-key\" ]; then read key; mkdir -p \"$HOME/.codex\"; printf '{\"auth_mode\":\"apikey\",\"OPENAI_API_KEY\":\"%s\"}\\n' \"$key\" > \"$HOME/.codex/auth.json\"; printf '%s\\n' \"$key\" >> \"$HOME/.codex/login-calls.log\"; exit 0; fi\necho \"fake codex unsupported\" >&2\nexit 1\n");
     await fsp.chmod(codexLbFakeCodex, 0o755);
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'model = "gpt-5.5"\nmodel_reasoning_effort = "low"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[profiles.custom]\nmodel_reasoning_effort = "low"\n\n[notice]\nfast_default_opt_out = true\n\n[features]\nhooks = true\n');
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nmodel_reasoning_effort = "low"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[profiles.custom]\nmodel_reasoning_effort = "low"\n\n[notice]\nfast_default_opt_out = true\n\n[features]\nhooks = true\n`);
     const codexLbEnvForSelftest = { HOME: codexLbHome, SKS_GLOBAL_ROOT: path.join(tmp, 'codex-lb-global'), PATH: `${codexLbFakeBin}${path.delimiter}${process.env.PATH || ''}`, SKS_SKIP_CODEX_LB_LAUNCH_ENV: '1' };
     const codexLbSetup = await runProcess(process.execPath, [packagedSksEntrypoint(), 'codex-lb', 'setup', '--host', 'lb.example.test', '--api-key', 'sk-test', '--json'], {
         cwd: tmp,
@@ -2967,7 +2973,7 @@ export async function selftestCodexLb(tmp) {
         await postinstall({
             bootstrap: async () => {
                 await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"browser"}\n');
-                await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'model = "gpt-5.5"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n');
+                await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n`);
             }
         });
     }
@@ -2993,7 +2999,7 @@ export async function selftestCodexLb(tmp) {
     await writeTextAtomic(path.join(doctorProject, 'package.json'), '{"name":"codex-lb-doctor-project","version":"0.0.0"}\n');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\nexport CODEX_LB_API_KEY='sk-test'\n");
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"browser"}\n');
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'model = "gpt-5.5"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n');
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n`);
     const codexLbDoctorRepair = await runProcess(process.execPath, [packagedSksEntrypoint(), 'doctor', '--fix', '--json'], {
         cwd: doctorProject,
         env: { ...codexLbEnvForSelftest, SKS_GLOBAL_ROOT: path.join(tmp, 'codex-lb-doctor-global') },
@@ -3186,7 +3192,7 @@ export async function selftestCodexLb(tmp) {
     if (!codexLbLegacyDoctorJson.repair?.codex_lb?.ok || !codexLbLegacyDoctorJson.repair.codex_lb.legacy_auth_migrated || !codexLbLegacyDoctorEnv.includes("CODEX_LB_API_KEY='sk-legacy-doctor'") || !codexLbLegacyDoctorAuth.includes('"auth_mode":"apikey"') || !codexLbLegacyDoctorAuth.includes('sk-legacy-doctor') || !hasTopLevelCodexLbSelected(codexLbLegacyDoctorConfig) || !codexLbLegacyDoctorConfig.includes('env_key = "CODEX_LB_API_KEY"'))
         throw new Error('selftest: legacy doctor codex-lb restore');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\n");
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'model = "gpt-5.5"\nservice_tier = "fast"\n');
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\n`);
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"apikey","key":"sk-env-only"}\n');
     const codexLbLoginCallsBeforeEnvOnlyPostinstall = await codexLbLoginCallCount(codexLbHome);
     const codexLbEnvOnlyPostinstall = await runProcess(process.execPath, [packagedSksEntrypoint(), 'postinstall'], {
@@ -3204,7 +3210,7 @@ export async function selftestCodexLb(tmp) {
     if (!String(codexLbEnvOnlyPostinstall.stdout || '').includes('codex-lb auth: restored from existing Codex login cache') || !codexLbEnvOnlyPostinstallEnv.includes("CODEX_LB_API_KEY='sk-env-only'") || !codexLbEnvOnlyPostinstallConfig.includes('env_key = "CODEX_LB_API_KEY"') || !hasTopLevelCodexLbSelected(codexLbEnvOnlyPostinstallConfig) || !codexLbEnvOnlyPostinstallAuth.includes('sk-env-only') || codexLbLoginCallsAfterEnvOnlyPostinstall !== codexLbLoginCallsBeforeEnvOnlyPostinstall)
         throw new Error('selftest: env-only codex-lb postinstall restore');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\n");
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'model = "gpt-5.5"\nservice_tier = "fast"\n');
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\n`);
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"apikey","key":"sk-env-only-doctor"}\n');
     const codexLbEnvOnlyDoctorProject = tmpdir();
     await ensureDir(path.join(codexLbEnvOnlyDoctorProject, '.git'));
@@ -3334,7 +3340,7 @@ export async function selftestCodexLb(tmp) {
     }
     if (autobypassLaunch.status !== 'chain_unhealthy' || autobypassLaunch.bypass_codex_lb !== true || autobypassLaunch.chain_health?.status !== 'second_request_failed')
         throw new Error('selftest: SKS_CODEX_LB_AUTOBYPASS=1 should bypass codex-lb on hard chain failure');
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'model = "gpt-5.5"\nservice_tier = "fast"\n');
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\n`);
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\nexport CODEX_LB_API_KEY='sk-test'\n");
     const missingProviderLaunchCalls = [];
     const missingProviderLaunch = await maybePromptCodexLbSetupForLaunch([], {
@@ -3395,11 +3401,11 @@ export async function selftestCodexLb(tmp) {
         throw new Error('selftest: codex-lb setup did not preserve Codex App feature flags, default plugins, profile-scoped reasoning effort, explicit Fast profile, Codex Git commit generation, or migrate the hooks feature flag');
     if (!hasCodexUnstableFeatureWarningSuppression(codexLbConfig))
         throw new Error('selftest: codex-lb setup did not suppress Codex unstable feature warning');
-    const codexLbLaunch = `source ${path.join(tmp, '.codex', 'sks-codex-lb.env')} && codex '--model' 'gpt-5.5'`;
+    const codexLbLaunch = `source ${path.join(tmp, '.codex', 'sks-codex-lb.env')} && codex '--model' '${REQUIRED_CODEX_MODEL}'`;
     if (!codexLbLaunch.includes('sks-codex-lb.env'))
         throw new Error('selftest: Zellij launch command does not source codex-lb env file');
-    if (!codexLbLaunch.includes("'--model' 'gpt-5.5'"))
-        throw new Error('selftest: Zellij launch command without args did not force GPT-5.5');
+    if (!codexLbLaunch.includes(`'--model' '${REQUIRED_CODEX_MODEL}'`))
+        throw new Error(`selftest: Zellij launch command without args did not force ${REQUIRED_CODEX_MODEL}`);
     const madLaunchSource = await safeReadText(path.join(packageRoot(), 'src', 'core', 'commands', 'mad-sks-command.js'));
     if (!madLaunchSource.includes('const lb = await deps.maybePromptCodexLbSetupForLaunch(args)') || !madLaunchSource.includes("const launchLb = lb.status === 'present'") || !madLaunchSource.includes('codexLbImmediateLaunchOpts(cleanArgs, launchLb') || !madLaunchSource.includes('bypass_codex_lb') || !madLaunchSource.includes('model_provider="openai"') || !madLaunchSource.includes('codexLbFreshSession: true'))
         throw new Error('selftest: MAD launch does not sync codex-lb auth and fresh-session launch options');

package/dist/commands/doctor.js

@@ -41,7 +41,7 @@ import { runDoctorFixTransaction } from '../core/doctor/doctor-transaction.js';
 import { planDoctorDirtyRepair } from '../core/doctor/doctor-dirty-planner.js';
 import { doctorRepairPostcheck } from '../core/doctor/doctor-repair-postcheck.js';
 import { withSecretPreservationGuard } from '../core/config/config-migration-journal.js';
-import { writeProjectUpdateMigrationReceipt } from '../core/update/update-migration-state.js';
+import { isUpdateMigrationReceiptCurrent, projectUpdateMigrationReceiptPath, writeProjectUpdateMigrationReceipt } from '../core/update/update-migration-state.js';
 import { inspectSksMenuBarStatus, installSksMenuBar } from '../core/codex-app/sks-menubar.js';
 import { sweepSksTempDirs } from '../core/retention.js';
 import { reconcileSkills } from '../core/init/skills.js';
@@ -84,16 +84,7 @@ async function runDoctor(args = [], root, doctorFix) {
     const doctorPhaseIds = doctorPhaseIdsForProfile(doctorProfile);
     const doctorDirtyPlan = doctorFix ? planDoctorDirtyRepair(root, doctorPhaseIds) : null;
     let setupRepair = null;
-    const sksUpdate = doctorFix
-        ? {
-            schema: 'sks.update-now.v2',
-            ok: true,
-            status: 'skipped',
-            reason: 'manual_update_commands_only',
-            stages: [],
-            migration_current: true
-        }
-        : null;
+    let sksUpdate = null;
     let migrationPreFix = null;
     if (doctorFix) {
         // Snapshot config content before ANY mutation so the migration journal can
@@ -117,7 +108,7 @@ async function runDoctor(args = [], root, doctorFix) {
             // backs up + parse-validates before writing, no-op when already present.
             codex_app_fast_mode: flag(args, '--local-only')
                 ? { status: 'skipped', reason: 'local-only repair' }
-                : deepDiagnostics ? await ensureGlobalCodexFastModeDuringInstall().catch((err) => ({ status: 'failed', error: err?.message || String(err) })) : { status: 'skipped', reason: 'default_doctor_no_global_fast_mode_regeneration' }
+                : await ensureGlobalCodexFastModeDuringInstall().catch((err) => ({ status: 'failed', error: err?.message || String(err) }))
         };
     }
     const skillsReconcile = doctorFix
@@ -823,16 +814,47 @@ async function runDoctor(args = [], root, doctorFix) {
             ...(pluginPolicy?.doctor_warnings || [])
         ]
     });
-    if (doctorFix && ready.ready === true) {
-        await writeProjectUpdateMigrationReceipt({
-            root,
-            source: `doctor-${doctorProfile}`,
-            blockers: [],
-            warnings: [
-                ...(doctorNativeCapabilityRepair?.optional_warnings || []),
-                ...(doctorFixPostcheck?.optional_warnings || [])
-            ]
-        }).catch(() => undefined);
+    if (doctorFix) {
+        const readinessBlockers = Array.isArray(ready.blockers) ? ready.blockers.map(String).filter(Boolean) : [];
+        const migrationWarnings = [
+            ...(doctorNativeCapabilityRepair?.optional_warnings || []),
+            ...(doctorFixPostcheck?.optional_warnings || [])
+        ];
+        try {
+            const receiptInput = {
+                root,
+                source: `doctor-${doctorProfile}`,
+                blockers: readinessBlockers,
+                warnings: migrationWarnings
+            };
+            if (readinessBlockers.length)
+                receiptInput.status = 'blocked';
+            const receipt = await writeProjectUpdateMigrationReceipt(receiptInput);
+            sksUpdate = {
+                schema: 'sks.update-now.v2',
+                ok: receipt.status === 'current' && isUpdateMigrationReceiptCurrent(receipt),
+                status: receipt.status === 'current' ? 'repaired' : receipt.status,
+                reason: receipt.status === 'current' ? 'doctor_fix_wrote_current_project_migration_receipt' : 'doctor_fix_migration_receipt_blocked',
+                stages: receipt.legacy_migration_stages || [],
+                migration_current: isUpdateMigrationReceiptCurrent(receipt),
+                receipt_path: projectUpdateMigrationReceiptPath(root),
+                blockers: receipt.blockers || [],
+                warnings: receipt.warnings || []
+            };
+        }
+        catch (err) {
+            sksUpdate = {
+                schema: 'sks.update-now.v2',
+                ok: false,
+                status: 'blocked',
+                reason: 'doctor_fix_migration_receipt_failed',
+                stages: [],
+                migration_current: false,
+                receipt_path: projectUpdateMigrationReceiptPath(root),
+                blockers: [`migration_receipt_failed:${err?.message || String(err)}`],
+                warnings: migrationWarnings
+            };
+        }
     }
     const zellijReadiness = buildZellijReadiness(root, zellij, ready);
     const runtimeReadiness = buildRuntimeReadiness(zellijReadiness, codexNativeFeatureMatrix);