sneakoscope 6.0.1 → 6.0.3

package/README.md

@@ -25,7 +25,7 @@ sneakoscope is a proof-first Codex trust layer for bounded agent workflows, sear
 
 Sneakoscope Codex (`sks`) is a Codex CLI and Codex App harness for people who want parallel AI coding without losing proof. It gives Codex a simple front door, a dynamic worker swarm, a local dashboard, TriWiki project memory, and release gates that separate machine evidence from LLM opinion.
 
-Current release: SKS **6.0.1**. New in this release: GPT-5.6 Codex App model selection repair, Sol/Terra/Luna compatibility, removal of legacy `multi_agent_v2`/Fast-mode config stamps, renewed Codex App feature flags, safer menu bar and doctor repair paths, and release metadata prepared for `npm publish --ignore-scripts`. See [CHANGELOG.md](CHANGELOG.md).
+Current release: SKS **6.0.3**. Normal Codex sessions continue to inherit the complete Codex catalog without silent replacement. Naruto workers now use a scoped, live-catalog-verified GPT-5.6 policy: Terra `xhigh/max` for coding, Sol `max` for refactoring/planning/strategy/integration, and Luna `xhigh/max` for E2E/browser/Computer Use/GUI verification. This release also fixes menu-bar auth restarts, cross-version menu updates, status checkmarks, dashboard readiness, and stale update badges. See [CHANGELOG.md](CHANGELOG.md).
 
 ## Install
 
@@ -96,6 +96,7 @@ It shows the v5 flow: one-line install, `$Plan`, `$Work`/`$Swarm`, `sks review`,
 - Native capability repair: `sks doctor --fix` (imagegen/Computer Use/Browser Use), `.sneakoscope/reports/native-capability-readiness.json`
 - Agent bridge for any agent system: `sks mcp-server`, `sks agent-bridge setup`, `SKS_AGENT_MODE=1` — see [docs/AGENT-BRIDGE.md](docs/AGENT-BRIDGE.md)
 - Release gates: `node ./dist/scripts/release-gate-dag-runner.js --preset release --full`
+- Lifecycle-disabled npm release: run `npm run publish:verify-ignore-scripts` first, then `npm publish --ignore-scripts`; the raw publish command intentionally cannot run build or validation hooks.
 - Release readiness notes: [docs/release-readiness.md](docs/release-readiness.md) and [CHANGELOG.md](CHANGELOG.md)
 - Image generation review routes require Codex App `$imagegen`/`gpt-image-2` evidence with recorded output hashes; direct API fallback and mock fixtures do not satisfy full route gates.
 
@@ -106,6 +107,8 @@ It shows the v5 flow: one-line install, `$Plan`, `$Work`/`$Swarm`, `sks review`,
 - macOS optional: menu bar integration and `/usr/bin/open`
   - The menubar icon shows and hides itself automatically as the Codex desktop app launches/quits; set `quit_with_codex: true` in `~/.codex/sks-menubar/config.json` to have the menubar fully quit with Codex instead of just hiding (default `false`).
   - Native input dialogs (API keys, codex-lb setup) pass secrets to `sks` via `--api-key-stdin` instead of a visible Terminal window or process arguments.
+  - Auth/provider changes wait for the ChatGPT/Codex app to exit and reopen by bundle id; a failed restart is reported as a failed menu action.
+  - Update installs always rebuild the companion with the newly installed SKS package, preventing a previous-version updater from restoring a stale menu binary.
   - The menubar dropdown's `View Last Log` item opens the most recent background action's log file, so you don't need to keep a Terminal window open to see command output.
   - `sks menubar status --json` reports a `codex_sync` object with `bundle_id`, `codex_running`, and `icon_visible_expected` to show Codex-lifecycle detection state.
 - Zellij optional but recommended for terminal worker panes

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "6.0.1"
+version = "6.0.3"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "6.0.1"
+version = "6.0.3"
 edition = "2021"
 
 [dependencies]

package/dist/bin/fast-inline.js

@@ -156,58 +156,3 @@ exports.rootJsonFastInline = rootJsonFastInline;
 exports.doctorJsonFastInline = doctorJsonFastInline;
 exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
 exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;
-
-exports.rootJsonFastInline = rootJsonFastInline;
-exports.doctorJsonFastInline = doctorJsonFastInline;
-exports.narutoHelpJsonFastInline = narutoHelpJsonFastInline;
-exports.hookUserPromptSubmitPerfInline = hookUserPromptSubmitPerfInline;

package/dist/bin/sks-dispatch.js

@@ -62,25 +62,3 @@ async function runSks(args) {
 exports.runSks = runSks;
 
 exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;
-
-exports.runSks = runSks;

package/dist/cli/codex-app-command.js

@@ -1,6 +1,5 @@
 import { spawn } from 'node:child_process';
 import { codexRemoteControlStatus, formatCodexRemoteControlStatus } from '../core/codex-app.js';
-import { forceRequiredCodexModelConfigArgs } from '../core/codex-model-guard.js';
 export async function codexAppRemoteControlCommand(args = [], opts = {}) {
     const controlArgs = argsBeforeSeparator(args);
     if (controlArgs.includes('--help') || controlArgs.includes('-h')) {
@@ -25,7 +24,7 @@ export async function codexAppRemoteControlCommand(args = [], opts = {}) {
         process.exitCode = 1;
         return;
     }
-    const passthrough = forceRequiredCodexModelConfigArgs(stripSeparator(args));
+    const passthrough = stripSeparator(args).map((arg) => String(arg));
     const spawnFn = opts.spawn || spawn;
     const code = await spawnInherited(spawnFn, status.codex_cli.bin, ['remote-control', ...passthrough], {
         cwd: process.cwd(),

package/dist/cli/help-fast.js

@@ -1,8 +1,8 @@
 import { COMMAND_MANIFEST_LITE } from './command-manifest-lite.js';
-const FAST_PACKAGE_VERSION = '5.10.0';
+import { PACKAGE_VERSION } from '../core/version.js';
 export function helpFast() {
     console.log(`SKS
-SNEAKOSCOPE CODEX v${FAST_PACKAGE_VERSION}
+SNEAKOSCOPE CODEX v${PACKAGE_VERSION}
 
 3-pillar frontdoor
 

package/dist/cli/install-helpers.js

@@ -23,7 +23,6 @@ import { extractTomlTable, writeCodexConfigGuarded } from '../core/codex/codex-c
 import { cleanupCodexConfigBackups, validateCodexConfigRoundTrip } from '../core/codex/codex-config-toml.js';
 import { runPostinstallGlobalDoctorAndMarkPending } from '../core/update/update-migration-state.js';
 import { repairCodexImagegen } from '../core/doctor/imagegen-repair.js';
-import { GPT55_CODEX_MODEL, GPT56_CODEX_MODELS, REQUIRED_CODEX_MODEL } from '../core/codex-model-guard.js';
 const CODEX_LB_PROVIDER_NAME = 'openai';
 const CODEX_LB_PROVIDER_ENV_KEY = 'CODEX_LB_API_KEY';
 const CODEX_LB_CANONICAL_FAST_SERVICE_TIER = 'priority';
@@ -276,7 +275,7 @@ async function postinstallHarnessConflictNotice(conflictScan) {
     console.log(formatHarnessConflictReport(conflictScan, { includePrompt: false }));
     console.log('\nWhat this means: npm can finish installing the package, but `sks setup` and `sks doctor --fix` will refuse to activate SKS until the conflicting harness is removed with human approval.');
     console.log('No files were removed by postinstall.');
-    console.log(`Cleanup requires a human-approved Codex App session. Recommended model: ${REQUIRED_CODEX_MODEL}, reasoning: high.`);
+    console.log('Cleanup requires a human-approved Codex App session. Keep the model selected in Codex and use high reasoning effort.');
     if (shouldAskPostinstallQuestion()) {
         const answer = await askPostinstallQuestion('Show the cleanup prompt now? [y/N] ');
         if (/^(y|yes|예|네|응)$/i.test(answer.trim())) {
@@ -902,7 +901,9 @@ export async function checkCodexLbResponseChain(status = {}, opts = {}) {
     const fetchImpl = opts.fetch || globalThis.fetch;
     if (typeof fetchImpl !== 'function')
         return { ok: true, status: 'skipped', skipped: true, reason: 'fetch unavailable' };
-    const model = opts.model || env.SKS_CODEX_MODEL || REQUIRED_CODEX_MODEL;
+    const model = String(opts.model || env.SKS_CODEX_MODEL || env.CODEX_MODEL || '').trim();
+    if (!model)
+        return { ok: true, status: 'skipped', skipped: true, reason: 'model_unselected_use_explicit_model_or_codex_catalog' };
     const timeoutMs = Number(opts.timeoutMs || env.SKS_CODEX_LB_CHAIN_CHECK_TIMEOUT_MS || 8000);
     const serviceTier = opts.fastMode === true || opts.serviceTier === 'fast' || opts.serviceTier === CODEX_LB_CANONICAL_FAST_SERVICE_TIER
         ? CODEX_LB_CANONICAL_FAST_SERVICE_TIER
@@ -1396,6 +1397,30 @@ export async function releaseCodexLbAuthHold(opts = {}) {
     const authPath = opts.authPath || codexAuthPath(home);
     const backupPath = opts.backupPath || codexAuthChatgptBackupPath(home);
     const configPath = opts.configPath || codexLbConfigPath(home);
+    const currentAuthText = await readText(authPath, '');
+    const trimmedCurrent = currentAuthText.trim();
+    // Repeated "Use ChatGPT OAuth" is idempotent. If OAuth/browser auth is
+    // already active, a historical backup is unnecessary; only ensure that the
+    // codex-lb provider is no longer selected.
+    const currentAuthMode = codexAuthModeSummary(currentAuthText);
+    if (!opts.force && (currentAuthMode.mode === 'chatgpt_oauth' || currentAuthMode.mode === 'browser_marker')) {
+        let providerUnselected = false;
+        let providerError = null;
+        if (!opts.keepProvider) {
+            const unselected = await unselectCodexLbProvider({ ...opts, home, configPath });
+            if (unselected.status === 'unselected' || unselected.status === 'not_selected')
+                providerUnselected = true;
+            else if (unselected.status === 'failed')
+                providerError = unselected.error || unselected.reason || 'unselect_failed';
+        }
+        return {
+            status: providerError ? 'failed' : 'already_chatgpt',
+            auth_path: authPath,
+            backup_path: backupPath,
+            provider_unselected: providerUnselected,
+            provider_error: providerError
+        };
+    }
     const backupExists = await exists(backupPath);
     const backupText = backupExists ? await readText(backupPath, '') : '';
     if (!backupExists || !backupText.trim()) {
@@ -1415,8 +1440,6 @@ export async function releaseCodexLbAuthHold(opts = {}) {
             provider_unselected: false
         };
     }
-    const currentAuthText = await readText(authPath, '');
-    const trimmedCurrent = currentAuthText.trim();
     // If auth.json already looks like ChatGPT OAuth (user re-logged in some other way), don't
     // clobber it — but still honor the deselect request so the OAuth blob takes effect.
     if (trimmedCurrent && hasChatgptOAuthTokens(currentAuthText) && !opts.force) {
@@ -1894,10 +1917,9 @@ function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
     // `default_profile`, `[profiles.<name>]` tables, `[user.fast_mode]`, and
     // `notice.fast_default_opt_out`. The only documented fast-default mechanism is
     // the plain top-level `service_tier = "fast"`. This pass strips every legacy
-    // stamp SKS ever wrote and keeps user-authored top-level choices intact.
+    // schema stamps SKS wrote and keeps user-authored top-level choices intact.
     let next = String(text || '');
     next = removeLegacyTopLevelCodexModeLocks(next);
-    next = normalizeCodexAppDefaultModel(next);
     next = removeTopLevelTomlKeyIfValue(next, 'default_profile', 'sks-fast-high');
     next = removeTomlTable(next, 'user.fast_mode');
     next = removeTomlTable(next, 'profiles.sks-fast-high');
@@ -1910,7 +1932,9 @@ function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
         'browser_use', 'browser_use_external', 'image_generation', 'in_app_browser',
         'guardian_approval', 'tool_suggest', 'plugins'
     ]) {
-        next = removeTomlTableKey(next, 'features', legacyFlag);
+        // Earlier SKS releases wrote these flags as `true`. Remove only that
+        // managed legacy value; an explicit user `false` remains authoritative.
+        next = removeTomlTableKey(next, 'features', legacyFlag, 'true');
     }
     if (opts.forceFastMode === true) {
         next = upsertTopLevelTomlString(next, 'service_tier', 'fast');
@@ -1926,6 +1950,10 @@ function normalizeCodexFastModeUiConfigOnce(text = '', opts = {}) {
     for (const featureLine of ['hooks = true', 'multi_agent = true', 'fast_mode = true', 'apps = true']) {
         next = upsertTomlTableKeyIfAbsent(next, 'features', featureLine);
     }
+    if (process.env.SKS_ALLOW_HIGH_AGENT_CONCURRENCY !== '1') {
+        next = upsertTomlTableKey(next, 'agents', 'max_threads = 4');
+    }
+    next = removeTomlTable(next, 'features.multi_agent_v2');
     // Plugin auto-enable is OPT-IN only. Force-writing `[plugins."name@marketplace"] enabled =
     // true` for marketplace plugins the App may not have installed (different build/channel)
     // makes the App reference plugins it cannot load -> broken/blocked plugin UI. It also
@@ -1967,28 +1995,18 @@ function removeLegacyTopLevelCodexModeLocks(text = '') {
     const lines = String(text || '').split('\n');
     const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
     const end = firstTable === -1 ? lines.length : firstTable;
-    const topLevelModel = topLevelTomlString(text, 'model');
-    const removeSksOwnedModeLock = isLegacySksCodexModelStamp(topLevelModel);
     return lines.filter((line, index) => {
         if (index >= end)
             return true;
-        if (!removeSksOwnedModeLock)
+        if (!/^\s*(?:model|model_reasoning_effort)\s*=/.test(line))
             return true;
-        return !/^\s*model_reasoning_effort\s*=/.test(line);
+        return ![line, lines[index - 1] || ''].some((candidate) => {
+            const trimmed = String(candidate || '').trim();
+            const comment = trimmed.startsWith('#') ? trimmed : trimmed.includes('#') ? trimmed.slice(trimmed.indexOf('#')) : '';
+            return /(?:SKS|Sneakoscope|codex-lb|sks fast)/i.test(comment);
+        });
     }).join('\n').replace(/^\n+/, '').replace(/\n{3,}/g, '\n\n');
 }
-function normalizeCodexAppDefaultModel(text = '') {
-    const currentModel = topLevelTomlString(text, 'model');
-    if (!currentModel)
-        return upsertTopLevelTomlString(text, 'model', REQUIRED_CODEX_MODEL);
-    if (isLegacySksCodexModelStamp(currentModel))
-        return upsertTopLevelTomlString(text, 'model', REQUIRED_CODEX_MODEL);
-    return String(text || '');
-}
-function isLegacySksCodexModelStamp(value = '') {
-    const model = String(value || '').trim().toLowerCase();
-    return model === REQUIRED_CODEX_MODEL || model === GPT55_CODEX_MODEL || GPT56_CODEX_MODELS.includes(model);
-}
 function removeTopLevelTomlKeyIfValue(text = '', key = '', value = '') {
     const lines = String(text || '').split('\n');
     const firstTable = lines.findIndex((x) => /^\s*\[.+\]\s*$/.test(x));
@@ -1996,7 +2014,7 @@ function removeTopLevelTomlKeyIfValue(text = '', key = '', value = '') {
     const keyPattern = new RegExp(`^\\s*${escapeRegExp(key)}\\s*=\\s*"${escapeRegExp(value)}"\\s*(?:#.*)?$`);
     return lines.filter((line, index) => index >= end || !keyPattern.test(line)).join('\n').replace(/^\n+/, '').replace(/\n{3,}/g, '\n\n');
 }
-function removeTomlTableKey(text, table, key) {
+function removeTomlTableKey(text, table, key, expectedValue = null) {
     const lines = String(text || '').trimEnd().split('\n');
     if (lines.length === 1 && lines[0] === '')
         return '';
@@ -2014,7 +2032,10 @@ function removeTomlTableKey(text, table, key) {
             break;
         }
     }
-    const keyPattern = new RegExp(`^\\s*${key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*=`);
+    const valuePattern = expectedValue === null
+        ? ''
+        : `\\s*${escapeRegExp(String(expectedValue))}\\s*(?:#.*)?$`;
+    const keyPattern = new RegExp(`^\\s*${key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\s*=${valuePattern}`);
     return lines.filter((line, index) => index <= start || index >= end || !keyPattern.test(line)).join('\n').replace(/\n{3,}/g, '\n\n');
 }
 function upsertTomlTableKey(text, table, line) {
@@ -2168,7 +2189,15 @@ export function codexFastModeDesktopStatus(text = '') {
         service_tier: validation.service_tier ?? null,
         model: validation.model ?? null,
         legacy_keys: validation.legacy_keys,
-        validation
+        validation: {
+            ok: validation.ok,
+            blockers: validation.blockers,
+            parse_error: validation.parse_error || null,
+            service_tier: validation.service_tier ?? null,
+            model: validation.model ?? null,
+            model_reasoning_effort: validation.model_reasoning_effort ?? null,
+            legacy_keys: validation.legacy_keys
+        }
     };
 }
 function upsertTopLevelTomlBoolean(text, key, value) {
@@ -2877,8 +2906,8 @@ export async function selftestCodexLb(tmp) {
     // escape that dash emits literally and bash collapses to `"`).
     await writeTextAtomic(codexLbFakeCodex, "#!/bin/sh\nif [ \"$1\" = \"--version\" ]; then echo \"codex-cli 99.0.0\"; exit 0; fi\nif [ \"$1\" = \"login\" ] && [ \"$2\" = \"status\" ]; then echo \"logged in with browser auth\"; exit 0; fi\nif [ \"$1\" = \"login\" ] && [ \"$2\" = \"--with-api-key\" ]; then read key; mkdir -p \"$HOME/.codex\"; printf '{\"auth_mode\":\"apikey\",\"OPENAI_API_KEY\":\"%s\"}\\n' \"$key\" > \"$HOME/.codex/auth.json\"; printf '%s\\n' \"$key\" >> \"$HOME/.codex/login-calls.log\"; exit 0; fi\necho \"fake codex unsupported\" >&2\nexit 1\n");
     await fsp.chmod(codexLbFakeCodex, 0o755);
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nmodel_reasoning_effort = "low"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[profiles.custom]\nmodel_reasoning_effort = "low"\n\n[notice]\nfast_default_opt_out = true\n\n[features]\nhooks = true\n`);
-    const codexLbEnvForSelftest = { HOME: codexLbHome, SKS_GLOBAL_ROOT: path.join(tmp, 'codex-lb-global'), PATH: `${codexLbFakeBin}${path.delimiter}${process.env.PATH || ''}`, SKS_SKIP_CODEX_LB_LAUNCH_ENV: '1' };
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model_reasoning_effort = "low"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[profiles.custom]\nmodel_reasoning_effort = "low"\n\n[notice]\nfast_default_opt_out = true\n\n[features]\nhooks = true\n`);
+    const codexLbEnvForSelftest = { HOME: codexLbHome, SKS_GLOBAL_ROOT: path.join(tmp, 'codex-lb-global'), PATH: `${codexLbFakeBin}${path.delimiter}${process.env.PATH || ''}`, SKS_SKIP_CODEX_LB_LAUNCH_ENV: '1', SKS_CODEX_MODEL: 'selftest-codex-model' };
     const codexLbSetup = await runProcess(process.execPath, [packagedSksEntrypoint(), 'codex-lb', 'setup', '--host', 'lb.example.test', '--api-key', 'sk-test', '--json'], {
         cwd: tmp,
         env: codexLbEnvForSelftest,
@@ -2982,7 +3011,7 @@ export async function selftestCodexLb(tmp) {
         await postinstall({
             bootstrap: async () => {
                 await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"browser"}\n');
-                await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n`);
+                await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `service_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n`);
             }
         });
     }
@@ -3008,7 +3037,7 @@ export async function selftestCodexLb(tmp) {
     await writeTextAtomic(path.join(doctorProject, 'package.json'), '{"name":"codex-lb-doctor-project","version":"0.0.0"}\n');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\nexport CODEX_LB_API_KEY='sk-test'\n");
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"browser"}\n');
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n`);
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `service_tier = "fast"\nsuppress_unstable_features_warning = true\n\n[features]\nhooks = true\n`);
     const codexLbDoctorRepair = await runProcess(process.execPath, [packagedSksEntrypoint(), 'doctor', '--fix', '--json'], {
         cwd: doctorProject,
         env: { ...codexLbEnvForSelftest, SKS_GLOBAL_ROOT: path.join(tmp, 'codex-lb-doctor-global') },
@@ -3201,7 +3230,7 @@ export async function selftestCodexLb(tmp) {
     if (!codexLbLegacyDoctorJson.repair?.codex_lb?.ok || !codexLbLegacyDoctorJson.repair.codex_lb.legacy_auth_migrated || !codexLbLegacyDoctorEnv.includes("CODEX_LB_API_KEY='sk-legacy-doctor'") || !codexLbLegacyDoctorAuth.includes('"auth_mode":"apikey"') || !codexLbLegacyDoctorAuth.includes('sk-legacy-doctor') || !hasTopLevelCodexLbSelected(codexLbLegacyDoctorConfig) || !codexLbLegacyDoctorConfig.includes('env_key = "CODEX_LB_API_KEY"'))
         throw new Error('selftest: legacy doctor codex-lb restore');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\n");
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\n`);
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'service_tier = "fast"\n');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"apikey","key":"sk-env-only"}\n');
     const codexLbLoginCallsBeforeEnvOnlyPostinstall = await codexLbLoginCallCount(codexLbHome);
     const codexLbEnvOnlyPostinstall = await runProcess(process.execPath, [packagedSksEntrypoint(), 'postinstall'], {
@@ -3219,7 +3248,7 @@ export async function selftestCodexLb(tmp) {
     if (!String(codexLbEnvOnlyPostinstall.stdout || '').includes('codex-lb auth: restored from existing Codex login cache') || !codexLbEnvOnlyPostinstallEnv.includes("CODEX_LB_API_KEY='sk-env-only'") || !codexLbEnvOnlyPostinstallConfig.includes('env_key = "CODEX_LB_API_KEY"') || !hasTopLevelCodexLbSelected(codexLbEnvOnlyPostinstallConfig) || !codexLbEnvOnlyPostinstallAuth.includes('sk-env-only') || codexLbLoginCallsAfterEnvOnlyPostinstall !== codexLbLoginCallsBeforeEnvOnlyPostinstall)
         throw new Error('selftest: env-only codex-lb postinstall restore');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\n");
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\n`);
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'service_tier = "fast"\n');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'auth.json'), '{"auth_mode":"apikey","key":"sk-env-only-doctor"}\n');
     const codexLbEnvOnlyDoctorProject = tmpdir();
     await ensureDir(path.join(codexLbEnvOnlyDoctorProject, '.git'));
@@ -3349,7 +3378,7 @@ export async function selftestCodexLb(tmp) {
     }
     if (autobypassLaunch.status !== 'chain_unhealthy' || autobypassLaunch.bypass_codex_lb !== true || autobypassLaunch.chain_health?.status !== 'second_request_failed')
         throw new Error('selftest: SKS_CODEX_LB_AUTOBYPASS=1 should bypass codex-lb on hard chain failure');
-    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), `model = "${REQUIRED_CODEX_MODEL}"\nservice_tier = "fast"\n`);
+    await writeTextAtomic(path.join(codexLbHome, '.codex', 'config.toml'), 'service_tier = "fast"\n');
     await writeTextAtomic(path.join(codexLbHome, '.codex', 'sks-codex-lb.env'), "export CODEX_LB_BASE_URL='https://lb.example.test/backend-api/codex'\nexport CODEX_LB_API_KEY='sk-test'\n");
     const missingProviderLaunchCalls = [];
     const missingProviderLaunch = await maybePromptCodexLbSetupForLaunch([], {
@@ -3416,11 +3445,11 @@ export async function selftestCodexLb(tmp) {
         throw new Error(`selftest: codex-lb setup did not enforce the renewed feature-flag contract (documented flags present, legacy stamps stripped, user profile tables preserved)${survivingLegacy.length ? ` — surviving legacy stamps: ${survivingLegacy.join(', ')}` : ''}`);
     if (!hasCodexUnstableFeatureWarningSuppression(codexLbConfig))
         throw new Error('selftest: codex-lb setup did not suppress Codex unstable feature warning');
-    const codexLbLaunch = `source ${path.join(tmp, '.codex', 'sks-codex-lb.env')} && codex '--model' '${REQUIRED_CODEX_MODEL}'`;
+    const codexLbLaunch = `source ${path.join(tmp, '.codex', 'sks-codex-lb.env')} && codex`;
     if (!codexLbLaunch.includes('sks-codex-lb.env'))
         throw new Error('selftest: Zellij launch command does not source codex-lb env file');
-    if (!codexLbLaunch.includes(`'--model' '${REQUIRED_CODEX_MODEL}'`))
-        throw new Error(`selftest: Zellij launch command without args did not force ${REQUIRED_CODEX_MODEL}`);
+    if (codexLbLaunch.includes('--model'))
+        throw new Error('selftest: Zellij launch command without an explicit model must inherit the Codex selection');
     const madLaunchSource = await safeReadText(path.join(packageRoot(), 'src', 'core', 'commands', 'mad-sks-command.js'));
     if (!madLaunchSource.includes('const lb = await deps.maybePromptCodexLbSetupForLaunch(args)') || !madLaunchSource.includes("const launchLb = lb.status === 'present'") || !madLaunchSource.includes('codexLbImmediateLaunchOpts(cleanArgs, launchLb') || !madLaunchSource.includes('bypass_codex_lb') || !madLaunchSource.includes('model_provider="openai"') || !madLaunchSource.includes('codexLbFreshSession: true'))
         throw new Error('selftest: MAD launch does not sync codex-lb auth and fresh-session launch options');

package/dist/commands/codex-app.js

@@ -12,8 +12,11 @@ import { resolveCodexAppExecutionProfile } from '../core/codex-app/codex-app-exe
 import { repairCodexNativeManagedAssets } from '../core/codex-native/codex-native-repair-transaction.js';
 import { doctorCodexAppGlmProfile, installCodexAppGlmProfile } from '../core/codex-app/glm-profile-installer.js';
 import { promptForOpenRouterKeyHidden, writeStoredOpenRouterKey } from '../core/providers/openrouter/openrouter-secret-store.js';
+import { restartCodexApp } from '../core/codex-app/codex-app-restart.js';
 export async function run(_command, args = []) {
     const action = args[0] || 'check';
+    if (action === 'restart')
+        return printCodexAppResult(args, await restartCodexApp());
     if (action === 'remote-control' || action === 'remote')
         return codexAppRemoteControlCommand(args.slice(1));
     if (action === 'harness-matrix') {
@@ -47,15 +50,17 @@ export async function run(_command, args = []) {
         }
         const record = await writeStoredOpenRouterKey(key);
         const profile = await installCodexAppGlmProfile({ root, apply: true });
+        const restart = await restartCodexApp({ enabled: flag(args, '--restart-app') || flag(args, '--restart') });
         const result = {
             schema: 'sks.codex-app-openrouter-key.v1',
-            ok: profile.ok,
-            status: profile.ok ? 'stored' : 'stored_profile_blocked',
+            ok: Boolean(profile.ok && restart.ok),
+            status: !profile.ok ? 'stored_profile_blocked' : restart.ok ? 'stored' : 'stored_restart_blocked',
             key_preview: record.key_preview,
             raw_key_recorded: false,
             secret_store: 'sks-openrouter-secret-store',
             glm_profile: profile,
-            blockers: profile.blockers || [],
+            restart_app: restart,
+            blockers: [...(profile.blockers || []), ...(restart.blockers || [])],
             warnings: profile.warnings || []
         };
         return printCodexAppResult(args, result);

package/dist/commands/codex-lb.js

@@ -126,8 +126,10 @@ export async function run(command, args = []) {
         const host = status.base_url;
         if (!host) {
             const result = { schema: 'sks.codex-lb-set-key.v1', ok: false, status: 'not_configured' };
-            if (flag(args, '--json'))
+            if (flag(args, '--json')) {
+                process.exitCode = 1;
                 return printJson(result);
+            }
             console.error('codex-lb is not configured yet. Run: sks codex-lb setup --host <domain> --api-key-stdin');
             process.exitCode = 1;
             return;
@@ -135,21 +137,26 @@ export async function run(command, args = []) {
         const newKey = await resolveNewApiKey(args);
         if (!newKey) {
             const result = { schema: 'sks.codex-lb-set-key.v1', ok: false, status: 'missing_api_key' };
-            if (flag(args, '--json'))
+            if (flag(args, '--json')) {
+                process.exitCode = 1;
                 return printJson(result);
+            }
             console.error('No new API key provided. Run: sks codex-lb set-key --api-key-stdin   (or --api-key <key>)');
             process.exitCode = 1;
             return;
         }
         const result = await configureCodexLb({ host, apiKey: newKey, authMode: flag(args, '--preserve-auth') ? 'preserve' : 'codex-lb', forceCodexLbApiKeyAuth: !flag(args, '--preserve-auth') });
         const restart = await maybeRestartCodexAppForAuthSwitch(args, Boolean(result.ok));
-        const output = { ...result, action: 'set-key', restart_app: restart };
+        const ok = Boolean(result.ok && restart?.ok !== false);
+        const output = { ...result, ok, action: 'set-key', restart_app: restart };
+        if (!ok)
+            process.exitCode = 1;
         if (flag(args, '--json'))
             return printJson(output);
         console.log(result.ok ? `codex-lb API key updated (${result.base_url || host}).` : `codex-lb key update failed: ${result.status}${result.error ? `: ${result.error}` : ''}`);
         if (restart?.status === 'restarted')
             console.log('Codex App restarted for the new codex-lb auth mode.');
-        if (!result.ok)
+        if (!ok)
             process.exitCode = 1;
         return;
     }
@@ -157,21 +164,30 @@ export async function run(command, args = []) {
         // Switch auth mode -> codex-lb (API key). Re-selects the provider and re-syncs auth.
         const result = await repairCodexLbAuth({ forceCodexLbApiKeyAuth: true, authMode: 'codex-lb', forceFastMode: !flag(args, '--no-fast') });
         const restart = await maybeRestartCodexAppForAuthSwitch(args, Boolean(result.ok));
+        const ok = Boolean(result.ok && restart?.ok !== false);
+        const shaped = { ...result, ok, mode: 'codex-lb', restart_app: restart };
+        if (!ok)
+            process.exitCode = 1;
         if (flag(args, '--json'))
-            return printJson({ ...result, mode: 'codex-lb', restart_app: restart });
+            return printJson(shaped);
         console.log(result.ok ? 'Auth mode: codex-lb selected (API key).' : `Switch to codex-lb failed: ${result.status}${result.error ? `: ${result.error}` : ''}`);
         if (restart?.status === 'restarted')
             console.log('Codex App restarted for codex-lb auth.');
-        if (!result.ok)
+        if (!ok)
             process.exitCode = 1;
         return;
     }
     if (action === 'use-oauth' || action === 'use-chatgpt') {
         // Switch auth mode -> ChatGPT OAuth. Restores the saved OAuth login if present.
         const result = await releaseCodexLbAuthHold({ force: flag(args, '--force') });
-        const restart = await maybeRestartCodexAppForAuthSwitch(args, !['no_backup', 'auth_in_use', 'failed'].includes(result.status));
+        const authOk = !['no_backup', 'auth_in_use', 'failed'].includes(result.status);
+        const restart = await maybeRestartCodexAppForAuthSwitch(args, authOk);
+        const ok = Boolean(authOk && restart?.ok !== false);
+        const shaped = { ...result, ok, mode: 'oauth', restart_app: restart };
+        if (!ok)
+            process.exitCode = 1;
         if (flag(args, '--json'))
-            return printJson({ ...result, mode: 'oauth', restart_app: restart });
+            return printJson(shaped);
         if (result.status === 'no_backup') {
             console.log('No saved ChatGPT OAuth credentials to restore. Switch to OAuth by logging in:');
             console.log('  codex login');
@@ -210,8 +226,10 @@ export async function run(command, args = []) {
                     'Or: sks codex-lb setup --host <domain> --api-key-stdin --yes'
                 ]
             };
-            if (flag(args, '--json'))
+            if (flag(args, '--json')) {
+                process.exitCode = 1;
                 return printJson(result);
+            }
             console.error('codex-lb API key is not configured.');
             console.error('Run:');
             console.error('  sks codex-lb setup');
@@ -222,6 +240,8 @@ export async function run(command, args = []) {
         }
         if (flag(args, '--plan')) {
             const result = { schema: 'sks.codex-lb-setup-plan-result.v1', ok: plan.blockers.length === 0, plan, writes: false, expected_actions: plan.expected_actions, persistence: plan.persistence };
+            if (!result.ok)
+                process.exitCode = 1;
             if (flag(args, '--json'))
                 return printJson(result);
             process.stdout.write(renderCodexLbSetupPlan(plan));
@@ -235,8 +255,10 @@ export async function run(command, args = []) {
             const confirm = (await ask('Apply this codex-lb setup plan? [y/N] ')).trim();
             if (!/^(y|yes|예|네|응)$/i.test(confirm)) {
                 const result = { schema: 'sks.codex-lb-setup.v1', ok: false, status: 'cancelled', plan, applied_actions: [] };
-                if (flag(args, '--json'))
+                if (flag(args, '--json')) {
+                    process.exitCode = 1;
                     return printJson(result);
+                }
                 console.log('codex-lb setup cancelled.');
                 process.exitCode = 1;
                 return;
@@ -298,12 +320,15 @@ export async function run(command, args = []) {
             shaped.applied_actions = [...(shaped.applied_actions || []), { type: 'run_health_check', target: 'codex-lb response chain', ok: true }];
         if (options.health)
             shaped.chain_health = result.ok ? await checkCodexLbResponseChain(result, { force: true, root }) : null;
+        shaped.ok = Boolean(result.ok && restart?.ok !== false);
+        if (!shaped.ok)
+            process.exitCode = 1;
         if (flag(args, '--json'))
             return printJson(shaped);
         console.log(`codex-lb configured: ${result.base_url || result.status}`);
         if (shaped.persistence?.warning)
             console.log(`warning: ${shaped.persistence.warning}`);
-        if (!result.ok)
+        if (!shaped.ok)
             process.exitCode = 1;
         return;
     }
@@ -345,7 +370,7 @@ export async function run(command, args = []) {
 }
 async function maybeRestartCodexAppForAuthSwitch(args = [], enabled) {
     if (!enabled)
-        return { schema: 'sks.codex-app-restart.v1', ok: true, status: 'skipped', skipped: true, reason: 'previous_step_failed', app_name: 'Codex', blockers: [] };
+        return { schema: 'sks.codex-app-restart.v1', ok: true, status: 'skipped', skipped: true, reason: 'previous_step_failed', app_name: 'ChatGPT', bundle_id: 'com.openai.codex', blockers: [] };
     const requested = flag(args, '--restart-app') || flag(args, '--restart');
     const shouldRestart = requested || (!flag(args, '--json') && !flag(args, '--no-restart-app') && !flag(args, '--no-restart'));
     return restartCodexApp({ enabled: shouldRestart });