sneakoscope 6.2.0 → 6.4.0

package/dist/core/init.js

@@ -6,18 +6,34 @@ import { DEFAULT_DB_SAFETY_POLICY } from './db-safety.js';
 import { isHarnessSourceProject, writeHarnessGuardPolicy } from './harness-guard.js';
 import { repairSksGeneratedArtifacts } from './harness-conflicts.js';
 import { disableVersionGitHook } from './version-manager.js';
-import { OFFICIAL_SUBAGENT_REVIEW_POLICY_TEXT } from './team-review-policy.js';
-import { AWESOME_DESIGN_MD_REFERENCE, CODEX_APP_IMAGE_GENERATION_DOC_URL, CODEX_COMPUTER_USE_ONLY_POLICY, CODEX_IMAGEGEN_REQUIRED_POLICY, CODEX_WEB_VERIFICATION_POLICY, DEFAULT_CODEX_APP_PLUGINS, DESIGN_SYSTEM_SSOT, DOLLAR_COMMANDS, DOLLAR_COMMAND_ALIASES, DOLLAR_SKILL_NAMES, FROM_CHAT_IMG_CHECKLIST_ARTIFACT, FROM_CHAT_IMG_COVERAGE_ARTIFACT, FROM_CHAT_IMG_QA_LOOP_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_SESSIONS, GETDESIGN_REFERENCE, IMAGEGEN_SOCIAL_SOURCE_POLICY, OPENAI_CHATGPT_IMAGES_2_DOC_URL, OPENAI_GPT_IMAGE_2_MODEL_DOC_URL, OPENAI_IMAGE_GENERATION_DOC_URL, PPT_CONDITIONAL_SKILL_ALLOWLIST, PPT_PIPELINE_MCP_ALLOWLIST, PPT_PIPELINE_SKILL_ALLOWLIST, RECOMMENDED_DESIGN_REFERENCES, RECOMMENDED_MCP_SERVERS, RECOMMENDED_SKILLS, RESERVED_CODEX_PLUGIN_SKILL_NAMES, SOLUTION_SCOUT_SKILL_NAME, chatCaptureIntakeText, context7ConfigToml, getdesignReferencePolicyText, imageUxReviewPipelinePolicyText, leanEngineeringCompactText, outcomeRubricPolicyText, pptPipelineAllowlistPolicyText, productDesignPluginPolicyText, solutionScoutPolicyText, speedLanePolicyText, stackCurrentDocsPolicyText, triwikiContextTracking, triwikiContextTrackingText, triwikiStagePolicyText } from './routes.js';
+import { OFFICIAL_SUBAGENT_REVIEW_POLICY_TEXT } from './official-subagent-review-policy.js';
+import { AWESOME_DESIGN_MD_REFERENCE, CODEX_APP_IMAGE_GENERATION_DOC_URL, CODEX_COMPUTER_USE_ONLY_POLICY, CODEX_IMAGEGEN_REQUIRED_POLICY, CODEX_WEB_VERIFICATION_POLICY, DEFAULT_CODEX_APP_PLUGINS, DESIGN_SYSTEM_SSOT, DOLLAR_COMMANDS, DOLLAR_COMMAND_ALIASES, DOLLAR_SKILL_NAMES, FROM_CHAT_IMG_CHECKLIST_ARTIFACT, FROM_CHAT_IMG_COVERAGE_ARTIFACT, FROM_CHAT_IMG_QA_LOOP_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_ARTIFACT, FROM_CHAT_IMG_TEMP_TRIWIKI_SESSIONS, GETDESIGN_REFERENCE, IMAGEGEN_SOCIAL_SOURCE_POLICY, LEGACY_DOLLAR_SKILL_NAMES, OPENAI_CHATGPT_IMAGES_2_DOC_URL, OPENAI_GPT_IMAGE_2_MODEL_DOC_URL, OPENAI_IMAGE_GENERATION_DOC_URL, PPT_CONDITIONAL_SKILL_ALLOWLIST, PPT_PIPELINE_MCP_ALLOWLIST, PPT_PIPELINE_SKILL_ALLOWLIST, RECOMMENDED_DESIGN_REFERENCES, RECOMMENDED_MCP_SERVERS, RECOMMENDED_SKILLS, RESERVED_CODEX_PLUGIN_SKILL_NAMES, SOLUTION_SCOUT_SKILL_NAME, chatCaptureIntakeText, context7ConfigToml, getdesignReferencePolicyText, imageUxReviewPipelinePolicyText, leanEngineeringCompactText, outcomeRubricPolicyText, pptPipelineAllowlistPolicyText, prefixKnownSksDollarReferences, productDesignPluginPolicyText, sksPrefixedDollarCommand, solutionScoutPolicyText, speedLanePolicyText, stackCurrentDocsPolicyText, triwikiContextTracking, triwikiContextTrackingText, triwikiStagePolicyText } from './routes.js';
 import { SKILL_DREAM_POLICY, skillDreamPolicyText } from './skill-forge.js';
 import { CODEX_HOOK_EVENT_STATE_KEYS } from './codex-compat/codex-hook-events.js';
 import { codexCommandHookCurrentHash } from './codex-hooks/codex-hook-hash.js';
-import { buildSksCoreSkillManifest, isCoreSkillName } from './codex-native/core-skill-manifest.js';
+import { buildSksCoreSkillManifest, isCoreSkillName, legacyCoreSkillNames } from './codex-native/core-skill-manifest.js';
 import { syncCoreSkillsIntegrity } from './codex-native/core-skill-integrity.js';
-import { dbSafetyGuardSkillText, madDbSkillText } from './mad-db/mad-db-policy.js';
-import { currentGeneratedFileInventory, installCodexAgents, installGlobalSkills, installProjectSkills, installSkills, pruneStaleGeneratedFiles } from './init/skills.js';
+import { currentGeneratedFileInventory, installCodexAgents, installGlobalSkills, installProjectSkills, installSkills, pruneStaleGeneratedFiles, REMOVED_SKS_SKILL_NAMES } from './init/skills.js';
 import { backupInvalidToml, inspectOfficialSubagentToml, mergeOfficialSubagentConfig, officialSubagentConfigOwnershipProof, officialSubagentConfigWarnings, readInheritedOfficialSubagentConfigText, resolveInheritedOfficialSubagentConfigPath } from './subagents/official-subagent-config.js';
 export { installGlobalSkills, installProjectSkills, installSkills } from './init/skills.js';
 const REFLECTION_MEMORY_PATH = '.sneakoscope/memory/q2_facts/post-route-reflection.md';
+const REMOVED_SKILL_TOKENS = new Set(REMOVED_SKS_SKILL_NAMES.map((name) => name.replace(/[^a-z0-9]/g, '')));
+function removedSkillSurface(value) {
+    return REMOVED_SKILL_TOKENS.has(String(value || '').toLowerCase().replace(/^\$/, '').replace(/[^a-z0-9]/g, ''));
+}
+function currentDollarCommands() {
+    return DOLLAR_COMMANDS
+        .filter((entry) => !removedSkillSurface(entry.command))
+        .map((entry) => ({ ...entry, command: sksPrefixedDollarCommand(entry.command) }));
+}
+function currentDollarSkillNames() {
+    return DOLLAR_SKILL_NAMES.filter((name) => !removedSkillSurface(name));
+}
+function currentDollarCommandAliases() {
+    return DOLLAR_COMMAND_ALIASES
+        .filter((entry) => !removedSkillSurface(entry.canonical) && !removedSkillSurface(entry.app_skill))
+        .map((entry) => ({ ...entry, canonical: sksPrefixedDollarCommand(entry.canonical) }));
+}
 const SKS_GENERATED_GIT_PATTERNS = [
     '.sneakoscope/missions/',
     '.sneakoscope/reports/',
@@ -231,12 +247,12 @@ function isSksManagedHook(hook) {
     const command = String(hook.command || '');
     return hook.type === 'command' && /\bhook\s+(?:session-start|user-prompt-submit|pre-tool|post-tool|permission-request|pre-compact|post-compact|subagent-start|subagent-stop|stop)\b/.test(command) && /\b(?:sks|sneakoscope|sks\.js)\b/.test(command);
 }
-const AGENTS_BLOCK = "\n# Sneakoscope Codex Managed Rules\n\nThis repository uses Sneakoscope Codex.\n\n## Core Rules\n\n- Codex native `/goal` workflows are the persisted continuation surface; Ralph is removed from the user-facing SKS surface.\n- Keep runtime state bounded: raw logs go to files, prompts get tails/summaries, and `sks gc` may prune stale artifacts.\n- Codex App hooks, launch paths, and `sks doctor --fix` do not force SKS update prompts during ordinary work. Manual CLI update surfaces (`sks update-check`, `sks update check`, and `sks update now`) remain available when the operator explicitly asks for them.\n- Versioning is explicit: use `sks versioning bump` when preparing release metadata. SKS must not install Git pre-commit hooks.\n- Installed harness files are immutable to LLM edits: `.codex/*`, `.agents/skills/`, `.codex/agents/`, `.sneakoscope/*policy*.json`, `AGENTS.md`, and `node_modules/sneakoscope`. The Sneakoscope engine source repo is the only automatic exception.\n- OMX/DCodex conflicts block setup/doctor. Show `sks conflicts prompt`; cleanup requires explicit human approval.\n- Do not stop at a plan when implementation was requested. Finish, verify, or report the hard blocker.\n- Do not create unrequested fallback implementation code. If the requested path is impossible, block with evidence instead of inventing substitute behavior.\n\n## Routes\n\n- General execution/code-changing prompts default to `$Team`: native agent intake agents, TriWiki refresh/validate, read-only debate, consensus, concrete runtime task graph/inboxes, fresh executor team, minimum five-lane Team review, integration, Honest Mode.\n- `$Computer-Use` / `$CU` is the maximum-speed Codex Computer Use lane for native macOS, desktop-app, OS-settings, and non-web visual tasks only. Web, browser, localhost, website, webapp, and web-based app verification must use the Codex Chrome Extension path first and halt rapidly if the extension is not installed/enabled.\n- `$Goal` is a fast bridge/overlay for Codex native `/goal` create/pause/resume/clear persistence controls; implementation continues through the selected SKS execution route.\n- TriWiki recall must stay bounded. Use `sks wiki sweep` to record demote, soft-forget, archive, delete, promote-to-skill, and promote-to-rule candidates instead of injecting every old claim.\n- Team missions must keep schema-backed evidence current: `work-order-ledger.json`, `effort-decision.json`, `team-dashboard-state.json`, and route-specific visual/dogfood artifacts where applicable. Team completion requires at least five independent reviewer/QA validation lanes before integration or final, even when a prompt requests fewer reviewers. Use `sks validate-artifacts latest` before claiming those artifacts pass.\n- `$DFix` is Direct Fix: only tiny copy/config/docs/labels/spacing/translation/simple mechanical edits, bypassing the main pipeline, Team, TriWiki/TriFix/reflection recording, and persistent route state; it still uses a one-line DFix-specific Honest check before final. Broad implementation stays on `$Team`, while UI design specifics follow the relevant design/UI route rules. `$PPT` is the restrained, information-first HTML/PDF presentation route and must seal delivery context, audience profile, STP, decision context, and 3+ pain-point/solution/aha mappings before design/render work. It must avoid over-designed visuals, carry detail through hierarchy, spacing, alignment, thin rules, source clarity, and subtle accents, preserve editable source HTML under `source-html/`, record `ppt-parallel-report.json`, and clean PPT-only temporary build files before completion. `$Image-UX-Review` / `$UX-Review` is the imagegen/gpt-image-2 UI/UX review route: source screenshots must become generated annotated review images, those generated images must be extracted into issue ledgers, and text-only critique cannot pass the route gate. `$Answer`, `$Help`, and `$Wiki` stay lightweight.\n- For code work, surface route/guard/write scopes first, split independent worker scopes when available, and keep parent-owned integration and verification.\n- Design work reads `design.md` as the only design decision SSOT. If missing, create it through `design-system-builder` from `docs/Design-Sys-Prompt.md`; getdesign.md, getdesign-reference, and curated DESIGN.md examples from https://github.com/VoltAgent/awesome-design-md are source inputs to fuse into that SSOT or route-local style tokens, not parallel design authorities. Image/logo/raster assets use `imagegen`, which must prefer official Codex App built-in image generation via `$imagegen` / `gpt-image-2`; for newest-model image requests prompt explicitly for ChatGPT Images 2.0 / GPT Image 2.0 with `gpt-image-2`. Do not replace required raster evidence with placeholder SVG/HTML/CSS, prose-only reviews, or fabricated files.\n- Research, AutoResearch, performance, token, accuracy, SEO/GEO, or workflow-improvement claims need experiment/eval evidence. Do not claim live model accuracy without a scored dataset.\n- Treat handwritten files above 3000 lines as split-review risks. Run `sks code-structure scan` and prefer extraction before adding substantial logic.\n- Skill dreaming stays lightweight: route use records JSON counters in `.sneakoscope/skills/dream-state.json`, and full skill inventory/recommendation runs only after the configured 10-route-event threshold and cooldown. Reports are recommendation-only; deleting or merging skills needs explicit user approval.\n\n## Evidence And Context\n\n- Context7 is required for external libraries, APIs, MCPs, package managers, SDKs, and generated docs: resolve-library-id then query-docs.\n- When tech stack, framework, package, runtime, or deployment-platform versions change, use Context7 or official vendor web docs, record current syntax/security/limit guidance as high-priority TriWiki claims, then refresh and validate before coding.\n- TriWiki is the context-tracking SSOT for long-running missions, Team handoffs, and context-pressure recovery. Read `.sneakoscope/wiki/context-pack.json` before each stage, use `attention.use_first` for compact high-trust recall, hydrate `attention.hydrate_first` from source before risky or lower-trust decisions, refresh after findings or artifact changes, and validate before handoffs/final claims.\n- Source priority: current code/tests/config, decision contract, vgraph, beta, GX render/snapshot metadata, LLM Wiki coordinate index, then model knowledge only if allowed.\n- Final response before stop: summarize what was done, what changed for the user/repo, what was verified, and what remains unverified or blocked; then run Honest Mode. Say what passed and what was not verified.\n- `$From-Chat-IMG` uses forensic visual effort, not ordinary Team effort. Completion is blocked until source inventory, visual mapping, work-order coverage, scoped dogfood/QA, and post-fix verification artifacts are present and valid.\n\n## Safety\n\n- Database access is high risk. Use read-only inspection by default; live data mutation is out of scope unless a sealed contract allows local or branch-only migration files.\n- MAD and MAD-SKS widen only explicit scoped permissions; they still do not authorize unrequested fallback implementation code.\n- Task completion requires relevant tests or justification, zero unsupported critical claims, accepted visual/wiki drift, and final evidence.\n\n## Codex App\n\nUse `.codex/SNEAKOSCOPE.md`, generated `.agents/skills`, `.codex/hooks.json`, and SKS dollar commands (`$sks`, `$team`, `$computer-use`, `$cu`, `$ppt`, `$image-ux-review`, `$ux-review`, `$goal`, `$dfix`, `$qa-loop`, etc.) as the app control surface.\n";
-function agentsBlockText() {
-    return AGENTS_BLOCK
-        .replace('General execution/code-changing prompts default to `$Team`: native agent intake agents, TriWiki refresh/validate, read-only debate, consensus, concrete runtime task graph/inboxes, fresh executor team, minimum five-lane Team review, integration, Honest Mode.', 'General execution/code-changing prompts default to `$Team`, a compatibility alias for the `$Naruto` Codex official subagent workflow: parent-owned decomposition, project-scoped custom agents, disjoint write scopes, bounded query-aware TriWiki use, two independent children for non-trivial work, risk-scoped expansion to at most three automatic children, parent integration, and Honest Mode.\n- Official subagent model routing is fixed: Luna Max only for tiny short-context mechanical work; Sol High for ordinary UI/logic/backend/native implementation; Sol Max for review, debugging, planning, architecture, security, database, research, release, ambiguity, and judgment; Terra Medium for long-context analysis and direct Computer Use, Browser/Chrome, or image-generation execution. Split mixed execution and judgment when possible; otherwise Sol Max wins.')
-        .replace('Team missions must keep schema-backed evidence current: `work-order-ledger.json`, `effort-decision.json`, `team-dashboard-state.json`, and route-specific visual/dogfood artifacts where applicable. Team completion requires at least five independent reviewer/QA validation lanes before integration or final, even when a prompt requests fewer reviewers. Use `sks validate-artifacts latest` before claiming those artifacts pass.', 'New `$Team` execution redirects to the Naruto official subagent workflow and must keep `subagent-plan.json`, `subagent-events.jsonl`, `subagent-parent-summary.json`, `subagent-evidence.json`, the work-order ledger, and route-specific visual/dogfood artifacts current where applicable. New work uses one focused reviewer by default, two only for independent review domains, and at most three automatic reviewers for critical multi-domain risk. Legacy Team observe/watch commands remain read-only for old missions. Use `sks validate-artifacts latest` before claiming artifacts pass.')
-        .replace('TriWiki is the context-tracking SSOT for long-running missions, Team handoffs, and context-pressure recovery.', 'TriWiki is the context-tracking SSOT for long-running missions, official subagent handoffs, and context-pressure recovery.');
+const AGENTS_BLOCK = "\n# Sneakoscope Codex Managed Rules\n\nThis repository uses Sneakoscope Codex.\n\n## Core Rules\n\n- Codex native `/goal` workflows are the persisted continuation surface.\n- Keep runtime state bounded: raw logs go to files, prompts get tails/summaries, and `sks gc` may prune stale artifacts.\n- Codex App hooks, launch paths, and `sks doctor --fix` do not force SKS update prompts during ordinary work. Manual CLI update surfaces (`sks update-check`, `sks update check`, and `sks update now`) remain available when the operator explicitly asks for them.\n- Versioning is explicit: use `sks versioning bump` when preparing release metadata. SKS must not install Git pre-commit hooks.\n- Installed harness files are immutable to LLM edits: `.codex/*`, `.agents/skills/`, `.codex/agents/`, `.sneakoscope/*policy*.json`, `AGENTS.md`, and `node_modules/sneakoscope`. The Sneakoscope engine source repo is the only automatic exception.\n- OMX/DCodex conflicts block setup/doctor. Show `sks conflicts prompt`; cleanup requires explicit human approval.\n- Do not stop at a plan when implementation was requested. Finish, verify, or report the hard blocker.\n- Do not create unrequested fallback implementation code. If the requested path is impossible, block with evidence instead of inventing substitute behavior.\n\n## Routes\n\n- General execution/code-changing prompts default to the `$Naruto` Codex official subagent workflow: parent-owned decomposition, project-scoped custom agents, disjoint write scopes, bounded query-aware TriWiki use, one focused child by default, risk-scoped expansion to at most three automatic children, parent integration, and Honest Mode.\n- Official subagent model routing is fixed: Luna Max only for tiny short-context mechanical work; Sol High for ordinary UI/logic/backend/native implementation; Sol Max for review, debugging, planning, architecture, security, database, research, release, ambiguity, and judgment; Terra Medium for long-context analysis and direct Computer Use, Browser/Chrome, or image-generation execution. Split mixed execution and judgment when possible; otherwise Sol Max wins.\n- `$Computer-Use` / `$CU` is the maximum-speed Codex Computer Use lane for native macOS, desktop-app, OS-settings, and non-web visual tasks only. Web, browser, localhost, website, webapp, and web-based app verification must use the Codex Chrome Extension path first and halt rapidly if the extension is not installed/enabled.\n- `$Goal` is a fast bridge/overlay for Codex native `/goal` create/pause/resume/clear persistence controls; implementation continues through the selected SKS execution route.\n- TriWiki recall must stay bounded. Use `sks wiki sweep` to record demote, soft-forget, archive, delete, promote-to-skill, and promote-to-rule candidates instead of injecting every old claim.\n- Naruto missions must keep `subagent-plan.json`, `subagent-events.jsonl`, `subagent-parent-summary.json`, `subagent-evidence.json`, the work-order ledger, and route-specific visual/dogfood artifacts current where applicable. Use one focused reviewer by default, two only for independent review domains, and at most three automatic reviewers for critical multi-domain risk. Use `sks validate-artifacts latest` before claiming artifacts pass.\n- `$DFix` is Direct Fix: only tiny copy/config/docs/labels/spacing/translation/simple mechanical edits, bypassing the main pipeline, Naruto, TriWiki/TriFix/reflection recording, and persistent route state; it still uses a one-line DFix-specific Honest check before final. Broad implementation stays on `$Naruto`, while UI design specifics follow the relevant design/UI route rules. `$PPT` is the restrained, information-first HTML/PDF presentation route and must seal delivery context, audience profile, STP, decision context, and 3+ pain-point/solution/aha mappings before design/render work. It must avoid over-designed visuals, carry detail through hierarchy, spacing, alignment, thin rules, source clarity, and subtle accents, preserve editable source HTML under `source-html/`, record `ppt-parallel-report.json`, and clean PPT-only temporary build files before completion. `$Image-UX-Review` / `$UX-Review` is the imagegen/gpt-image-2 UI/UX review route: source screenshots must become generated annotated review images, those generated images must be extracted into issue ledgers, and text-only critique cannot pass the route gate. `$Answer`, `$Help`, and `$Wiki` stay lightweight.\n- For code work, surface route/guard/write scopes first, split independent worker scopes when available, and keep parent-owned integration and verification.\n- Design work reads `design.md` as the only design decision SSOT. If missing, create it through `design-system-builder` from `docs/Design-Sys-Prompt.md`; getdesign.md, getdesign-reference, and curated DESIGN.md examples from https://github.com/VoltAgent/awesome-design-md are source inputs to fuse into that SSOT or route-local style tokens, not parallel design authorities. Image/logo/raster assets use `imagegen`, which must prefer official Codex App built-in image generation via `$imagegen` / `gpt-image-2`; for newest-model image requests prompt explicitly for ChatGPT Images 2.0 / GPT Image 2.0 with `gpt-image-2`. Do not replace required raster evidence with placeholder SVG/HTML/CSS, prose-only reviews, or fabricated files.\n- Research, AutoResearch, performance, token, accuracy, SEO/GEO, or workflow-improvement claims need experiment/eval evidence. Do not claim live model accuracy without a scored dataset.\n- Treat handwritten files above 3000 lines as split-review risks. Run `sks code-structure scan` and prefer extraction before adding substantial logic.\n- Skill dreaming stays lightweight: route use records JSON counters in `.sneakoscope/skills/dream-state.json`, and full skill inventory/recommendation runs only after the configured 10-route-event threshold and cooldown. Reports are recommendation-only; deleting or merging skills needs explicit user approval.\n\n## Evidence And Context\n\n- Context7 is required for external libraries, APIs, MCPs, package managers, SDKs, and generated docs: resolve-library-id then query-docs.\n- When tech stack, framework, package, runtime, or deployment-platform versions change, use Context7 or official vendor web docs, record current syntax/security/limit guidance as high-priority TriWiki claims, then refresh and validate before coding.\n- TriWiki is the context-tracking SSOT for long-running missions, official subagent handoffs, and context-pressure recovery. Read `.sneakoscope/wiki/context-pack.json` before each stage, use `attention.use_first` for compact high-trust recall, hydrate `attention.hydrate_first` from source before risky or lower-trust decisions, refresh after findings or artifact changes, and validate before handoffs/final claims.\n- Source priority: current code/tests/config, decision contract, vgraph, beta, GX render/snapshot metadata, LLM Wiki coordinate index, then model knowledge only if allowed.\n- Final response before stop: summarize what was done, what changed for the user/repo, what was verified, and what remains unverified or blocked; then run Honest Mode. Say what passed and what was not verified.\n- `$From-Chat-IMG` uses forensic visual effort, not ordinary Naruto effort. Completion is blocked until source inventory, visual mapping, work-order coverage, scoped dogfood/QA, and post-fix verification artifacts are present and valid.\n\n## Safety\n\n- Database access is high risk. Use read-only inspection by default; live data mutation is out of scope unless a sealed contract allows local or branch-only migration files.\n- MAD-SKS widens only explicit scoped permissions; it still does not authorize unrequested fallback implementation code.\n- Task completion requires relevant tests or justification, zero unsupported critical claims, accepted visual/wiki drift, and final evidence.\n\n## Codex App\n\nUse `.codex/SNEAKOSCOPE.md`, generated `.agents/skills`, `.codex/hooks.json`, and SKS dollar commands (`$sks`, `$naruto`, `$computer-use`, `$cu`, `$ppt`, `$image-ux-review`, `$ux-review`, `$goal`, `$dfix`, `$qa-loop`, etc.) as the app control surface.\n";
+const LEGACY_NARUTO_SCALING_RULE = '- General execution/code-changing prompts default to the `$Naruto` Codex official subagent workflow: parent-owned decomposition, project-scoped custom agents, disjoint write scopes, bounded query-aware TriWiki use, one focused child by default, risk-scoped expansion to at most three automatic children, parent integration, and Honest Mode.';
+const DYNAMIC_NARUTO_SCALING_RULE = '- General execution/code-changing prompts default to the `$Naruto` Codex official subagent workflow; only Answer and genuinely tiny DFix work remain lightweight. The Sol Max parent owns decomposition and integration, starts automatic fan-out at two for bounded work, four for explicit parallel work, and six for large-scale work, and may expand to ten only when ready DAG width, disjoint ownership, verifier/tool capacity, reserved thread slots, and positive marginal usefulness all permit it. `max_threads` is a cap, never a target; duplicate slices and overlapping writes are blocked.';
+export function agentsBlockText() {
+    return prefixKnownSksDollarReferences(AGENTS_BLOCK
+        .replace(LEGACY_NARUTO_SCALING_RULE, DYNAMIC_NARUTO_SCALING_RULE), [...LEGACY_DOLLAR_SKILL_NAMES, ...legacyCoreSkillNames(), 'from-chat-img']);
 }
 export async function initProject(root, opts = {}) {
     const created = [];
@@ -295,14 +311,14 @@ export async function initProject(root, opts = {}) {
         },
         prompt_pipeline: {
             default_enabled: true,
-            dollar_commands: DOLLAR_COMMANDS.map((c) => c.command),
-            dollar_skill_names: DOLLAR_SKILL_NAMES,
-            direct_fix_command: '$DFix',
+            dollar_commands: currentDollarCommands().map((c) => c.command),
+            dollar_skill_names: currentDollarSkillNames(),
+            direct_fix_command: '$sks-dfix',
             ppt_skill_allowlist: PPT_PIPELINE_SKILL_ALLOWLIST,
             ppt_conditional_skill_allowlist: PPT_CONDITIONAL_SKILL_ALLOWLIST,
             ppt_mcp_allowlist: PPT_PIPELINE_MCP_ALLOWLIST
         },
-        recommended_skills: RECOMMENDED_SKILLS,
+        recommended_skills: RECOMMENDED_SKILLS.filter((name) => !removedSkillSurface(name)),
         recommended_mcp_servers: RECOMMENDED_MCP_SERVERS,
         design_system_ssot: DESIGN_SYSTEM_SSOT,
         recommended_design_references: RECOMMENDED_DESIGN_REFERENCES,
@@ -349,7 +365,7 @@ export async function initProject(root, opts = {}) {
                 state: 'git-common-dir/sks-version-state.json'
             }
         },
-        database_safety: 'default_safe; $MAD-SKS scoped permission profile keeps catastrophic safeguards active; first-class $MAD-DB is the explicit SQL-plane execution exception with mission-local write transport and read-back proof',
+        database_safety: 'default_safe; $MAD-SKS is the sole scoped SQL-plane execution exception and keeps mission-local write transport, catastrophic-intent binding, read-back proof, and final read-only restoration',
         gx_renderer: 'deterministic_svg_html'
     };
     await writeJsonAtomic(manifestPath, manifest);
@@ -396,9 +412,9 @@ export async function initProject(root, opts = {}) {
                 ...(policy.prompt_pipeline || {}),
                 default_enabled: true,
                 route_without_command: true,
-                dollar_commands: DOLLAR_COMMANDS.map((c) => c.command),
-                dollar_skill_names: DOLLAR_SKILL_NAMES,
-                direct_fix_command: '$DFix',
+                dollar_commands: currentDollarCommands().map((c) => c.command),
+                dollar_skill_names: currentDollarSkillNames(),
+                direct_fix_command: '$sks-dfix',
                 ppt_skill_allowlist: PPT_PIPELINE_SKILL_ALLOWLIST,
                 ppt_conditional_skill_allowlist: PPT_CONDITIONAL_SKILL_ALLOWLIST,
                 ppt_mcp_allowlist: PPT_PIPELINE_MCP_ALLOWLIST
@@ -434,7 +450,7 @@ export async function initProject(root, opts = {}) {
                 required_pack_shape: 'coordinate_index_with_voxel_overlay',
                 migration_model: 'setup_or_wiki_refresh_regenerates_required_voxel_overlay'
             },
-            recommended_skills: RECOMMENDED_SKILLS,
+            recommended_skills: RECOMMENDED_SKILLS.filter((name) => !removedSkillSurface(name)),
             recommended_mcp_servers: RECOMMENDED_MCP_SERVERS,
             design_system_ssot: DESIGN_SYSTEM_SSOT,
             recommended_design_references: RECOMMENDED_DESIGN_REFERENCES
@@ -531,9 +547,9 @@ export async function initProject(root, opts = {}) {
             prompt_pipeline: {
                 default_enabled: true,
                 route_without_command: true,
-                dollar_commands: DOLLAR_COMMANDS.map((c) => c.command),
-                dollar_skill_names: DOLLAR_SKILL_NAMES,
-                direct_fix_command: '$DFix',
+                dollar_commands: currentDollarCommands().map((c) => c.command),
+                dollar_skill_names: currentDollarSkillNames(),
+                direct_fix_command: '$sks-dfix',
                 ppt_skill_allowlist: PPT_PIPELINE_SKILL_ALLOWLIST,
                 ppt_conditional_skill_allowlist: PPT_CONDITIONAL_SKILL_ALLOWLIST,
                 ppt_mcp_allowlist: PPT_PIPELINE_MCP_ALLOWLIST
@@ -558,7 +574,7 @@ export async function initProject(root, opts = {}) {
                 cleanup_reasoning_effort: 'high',
                 human_approval_required: true
             },
-            recommended_skills: RECOMMENDED_SKILLS,
+            recommended_skills: RECOMMENDED_SKILLS.filter((name) => !removedSkillSurface(name)),
             recommended_mcp_servers: RECOMMENDED_MCP_SERVERS,
             design_system_ssot: DESIGN_SYSTEM_SSOT,
             recommended_design_references: RECOMMENDED_DESIGN_REFERENCES
@@ -830,7 +846,7 @@ export async function initProject(root, opts = {}) {
             // them relocated into the home config by the splitter, re-triggering the warning.
             {
                 table: 'auto_review',
-                text: '[auto_review]\npolicy = "In MAD-SKS launches, allow only the scoped non-MadDB high-risk surfaces approved for the active invocation and keep catastrophic DB wipe/all-row safeguards active. In first-class MAD-DB cycles, the explicit $MAD-DB or sks mad-db run|exec|apply-migration invocation is the SQL-plane approval boundary: execute requested execute_sql/apply_migration mutations with mission-local write transport, read-back proof, and final read-only restoration. Supabase project/account/billing/credential control-plane actions remain denied."'
+                text: '[auto_review]\npolicy = "In MAD-SKS launches, allow only the scoped high-risk surfaces approved for the active invocation. The explicit sks mad-sks sql|apply-migration invocation is the SQL-plane approval boundary: execute only requested SQL-plane mutations with mission-local write transport, literal catastrophic-intent binding, read-back proof, and final read-only restoration. Supabase project/account/billing/credential control-plane actions remain denied."'
             }
         ];
     }
@@ -1011,8 +1027,10 @@ export async function initProject(root, opts = {}) {
         created.push(`.codex/skills generated mirrors removed (${removedCodexSkillMirrors.length})`);
     const agentInstall = await installCodexAgents(root);
     created.push(`.codex/agents official subagent catalog (${agentInstall.installed_agents?.length || 0})`);
-    if (agentInstall.removed_legacy?.length)
-        created.push(`legacy SKS agent TOMLs removed (${agentInstall.removed_legacy.length})`);
+    if (agentInstall.retired_role_cleanup?.removed_count)
+        created.push(`retired SKS-owned agent role files removed (${agentInstall.retired_role_cleanup.removed_count})`);
+    if (agentInstall.retired_role_cleanup?.quarantined_user_collision_count)
+        created.push(`retired role-name user collisions quarantined (${agentInstall.retired_role_cleanup.quarantined_user_collision_count})`);
     if (agentInstall.manual_blockers?.length)
         created.push(`official subagent agent config manual blockers (${agentInstall.manual_blockers.length})`);
     const configInventoryOwned = codexConfigInstall.ok && (configWasFresh || configPreviouslySksOwned);
@@ -1118,7 +1136,7 @@ async function resolveGitDir(root) {
     }
     return dotGit;
 }
-function codexAppQuickReference(scope, commandPrefix) {
+export function codexAppQuickReference(scope, commandPrefix) {
     return [
         '# ㅅㅋㅅ',
         `Install scope: \`${scope}\``,
@@ -1126,8 +1144,8 @@ function codexAppQuickReference(scope, commandPrefix) {
         'Files: AGENTS.md, .codex/hooks.json, .codex/config.toml, .codex/SNEAKOSCOPE.md, .agents/skills, .codex/agents, .sneakoscope/missions.',
         `Discover: ${commandPrefix} bootstrap; ${commandPrefix} deps check; ${commandPrefix} commands; ${commandPrefix} codex-app check; ${commandPrefix} codex-app remote-control --status; npm run zellij:capability; ${commandPrefix} dollar-commands; ${commandPrefix} pipeline status; ${commandPrefix} pipeline plan.`,
         'dollar-commands:',
-        ...DOLLAR_COMMANDS.map((c) => `- \`${c.command}\`: ${c.route}`),
-        `Picker skills: ${DOLLAR_COMMAND_ALIASES.map((x) => x.app_skill).join(', ')}.`,
+        ...currentDollarCommands().map((c) => `- \`${sksPrefixedDollarCommand(c.command)}\`: ${c.route}`),
+        `Picker skills: ${currentDollarCommandAliases().map((x) => x.app_skill).join(', ')}.`,
         'Routing: Answer direct, DFix ultralight no-record, execution routes infer scope/safety/behavior/acceptance answers from prompt, TriWiki/current-code defaults, and conservative policy before sealing contracts.',
         getdesignReferencePolicyText(),
         CODEX_IMAGEGEN_REQUIRED_POLICY,
@@ -1135,14 +1153,13 @@ function codexAppQuickReference(scope, commandPrefix) {
         `Runtime root: ${commandPrefix} root shows whether SKS is using the nearest project root or the per-user global SKS runtime root; outside any project marker, runtime commands use the global root instead of writing .sneakoscope into the current random directory.`,
         `Context Tracking: TriWiki SSOT. Before each route phase read only the latest coordinate+voxel overlay pack at .sneakoscope/wiki/context-pack.json; coordinate-only legacy packs are invalid. Use attention.use_first for compact high-trust recall and hydrate attention.hydrate_first from source before risky/lower-trust decisions. During every stage hydrate low-trust claims from source/hash/RGBA anchors; after changes run ${commandPrefix} wiki refresh or pack; before handoff/final run ${commandPrefix} wiki validate .sneakoscope/wiki/context-pack.json.`,
         stackCurrentDocsPolicyText(commandPrefix),
-        `Team review: ${OFFICIAL_SUBAGENT_REVIEW_POLICY_TEXT}`,
-        `Official subagents: ${commandPrefix} naruto run "task" [--agents N] [--max-threads N] prepares bounded Codex agent threads and requires subagent-plan.json, lifecycle events, a trustworthy subagent-parent-summary.json, and correlated evidence. Legacy ${commandPrefix} team log|tail|watch|lane|status commands are read-only observation for existing Team missions and are not the default execution runtime.`,
+        `Official subagent review: ${OFFICIAL_SUBAGENT_REVIEW_POLICY_TEXT}`,
+        `Official subagents: ${commandPrefix} naruto run "task" [--agents N] [--max-threads N] prepares bounded Codex agent threads and requires subagent-plan.json, lifecycle events, a trustworthy subagent-parent-summary.json, and correlated evidence.`,
         `Runtime: open Codex App once, then run ${commandPrefix} bootstrap and ${commandPrefix} deps check. Zellij remains optional for ${commandPrefix} --mad only. Official Naruto execution uses Codex agent threads. ${commandPrefix} bootstrap --yes, ${commandPrefix} deps check --yes, and ${commandPrefix} --mad --yes can install or repair Codex CLI/Zellij on macOS/Homebrew. npm postinstall reports missing CLI tools but does not mutate Homebrew/npm globals unless SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS=1 is set. Launch paths do not run sneakoscope npm update checks; use ${commandPrefix} update-check or ${commandPrefix} update now explicitly when you want that. ${commandPrefix} doctor --fix repairs the local SKS/Codex setup without running a global SKS package update. ${commandPrefix} codex-app remote-control wraps the supported Codex CLI headless remote-control entrypoint.`,
-        'Team compatibility: existing Team observation is file-based and read-only; it does not use Zellij as an execution runtime.',
+        'Naruto execution uses official Codex agent threads and does not use Zellij as an execution runtime.',
         `Guard: generated harness files are immutable outside the engine source repo; check ${commandPrefix} guard check; conflicts use ${commandPrefix} conflicts prompt with human approval.`
     ].join('\n') + '\n';
 }
 function escapeRegExp(value) {
     return String(value).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
-//# sourceMappingURL=init.js.map