sneakoscope 6.2.0 → 6.5.1

package/README.md

@@ -1,39 +1,41 @@
 <div align="center">
 
-
-<!-- BEGIN SKS SEARCH VISIBILITY MARKETING -->
-## Search Visibility Positioning
-
-sneakoscope is a proof-first Codex trust layer for bounded agent workflows, search visibility, and evidence-backed release gates.
-
-- Source-ledger claims are kept in SKS marketing research and strategy artifacts.
-- SEO/GEO mutation plans update only package metadata and this managed README block in this release.
-- External visibility outcomes require separate measured evidence.
-<!-- END SKS SEARCH VISIBILITY MARKETING -->
-
 # Sneakoscope Codex
 
-**The proof-first workflow harness for Codex. Machine-verified completion, not vibes.**
+**Stop trusting “done.” Make Codex prove it.**
+
+Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, multi-agent workflows, release verification, and the macOS menu bar.
 
 [![npm version](https://img.shields.io/npm/v/sneakoscope?color=cb3837&logo=npm)](https://www.npmjs.com/package/sneakoscope)
 [![node](https://img.shields.io/badge/node-%3E%3D20.11-339933?logo=node.js&logoColor=white)](#requirements)
 [![license](https://img.shields.io/badge/license-MIT-blue)](#license)
 
-![SKS live dashboard preview](https://raw.githubusercontent.com/mandarange/Sneakoscope-Codex/main/docs/assets/sneakoscope-architecture-pipeline.jpg)
+![SKS architecture pipeline](https://raw.githubusercontent.com/mandarange/Sneakoscope-Codex/main/docs/assets/sneakoscope-architecture-pipeline.jpg)
 
 </div>
 
-Sneakoscope Codex (`sks`) is a Codex CLI and Codex App harness for people who want parallel AI coding without losing proof. It gives Codex a simple front door, an official subagent workflow, a local dashboard, TriWiki project memory, and release gates that separate machine evidence from LLM opinion.
+<!-- BEGIN SKS SEARCH VISIBILITY MARKETING -->
+Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
+<!-- END SKS SEARCH VISIBILITY MARKETING -->
+
+Current release: **SKS 6.5.1**, validated against the official stable **Codex CLI 0.144.5** release from July 16, 2026. It keeps the Control Center alive through self-update completion, restores SKS-hidden Chat/Pro model access in the latest Codex desktop surface, makes Fast mode independently visible and selectable from the menu bar, and stabilizes same-mission Naruto admission, deterministic proof receipts, and project-scoped MCP inheritance. The `0.145.0-alpha` line is intentionally excluded from the stable release baseline. See [CHANGELOG.md](CHANGELOG.md).
 
-Current release: SKS **6.2.0**. `$Naruto` is the SKS alias for the Codex official subagent workflow. The parent runs on GPT-5.6 Sol Max. Child routing is fixed to Luna Max for tiny short-context mechanical work, Sol High for ordinary UI/logic/backend/native implementation, Sol Max for review/debugging/planning/security and other judgment, and Terra Medium for long-context analysis plus Computer Use, Browser/Chrome, and image-generation execution. Official `SubagentStart`/`SubagentStop` events prove lifecycle only; successful completion additionally requires a structured parent summary with an explicit outcome for every thread. Preparation context alone is never completion proof. Normal non-Naruto Codex sessions continue to preserve explicit user model choices. See [CHANGELOG.md](CHANGELOG.md).
+## What 6.5.1 Fixes
+
+| Problem | 6.5.1 behavior |
+| --- | --- |
+| Control Center disappeared during an update | The new package is installed and verified without killing the active Control Center; the final receipt is synchronized before a detached menu-bar relaunch. |
+| Chat entry and Pro model access disappeared in Codex Desktop | SKS removes only provenance-marked global provider/model locks that it owns, while preserving user-owned providers, credentials, and explicit settings. |
+| Fast mode was missing from Codex Desktop and the menu bar | Desktop Fast selection is repaired without conflating it with reasoning effort, and the menu bar exposes current Fast status plus direct On/Off actions. |
+| Concurrent hosts could duplicate a Naruto mission or reinterpret its proof | One mission admits one standalone Codex parent, terminal bundles are reused immutably, proof returns a deterministic six-artifact fingerprint, and trusted project MCP configuration is inherited by the parent. |
 
-## Install
+## Install In One Command
 
 ```sh
 npx sneakoscope install --yes
 ```
 
-That one line installs/repairs the global package, runs `sks doctor --fix`, and leaves the Codex App surface ready. The plugin marketplace path is also prepared through `plugins/sks/.codex-plugin/plugin.json`.
+That installs or repairs SKS, runs `sks doctor --fix`, and prepares the Codex App integration. The plugin marketplace path is also prepared through `plugins/sks/.codex-plugin/plugin.json`.
 
 For package-managed installs:
 
@@ -42,28 +44,25 @@ npm i -g sneakoscope
 sks doctor --fix
 ```
 
-The SKS menu bar shows the installed Codex CLI version and latest known version. An `⬆` marker appears when an update is available; **Update Codex CLI Now** uses native `codex update` when the selected CLI advertises it, otherwise it verifies the installation provenance and invokes the matching official standalone-installer, npm-global, or Homebrew-cask update method. If the method cannot be verified, it fails closed instead of guessing. This is an explicit global tool mutation. **Run sks doctor --fix** performs the global-only menu repair flow without treating the user's home directory as a project.
+The SKS menu bar shows the installed Codex CLI version and latest known version. An `⬆` marker appears when an update is available; **Update Codex CLI Now** uses native `codex update` when the selected CLI advertises it, otherwise it verifies the installation provenance and invokes the matching official standalone-installer, npm-global, or Homebrew-cask update method. If the method cannot be verified, it fails closed instead of guessing. Control Center updates keep the active UI alive until the operation receipt is durable, then relaunch the companion out of process. This is an explicit global tool mutation. **Run sks doctor --fix** performs the global-only menu repair flow without treating the user's home directory as a project.
 
-**Manage MCP Servers…** opens a native macOS manager for the global `~/.codex/config.toml`. It can add remote URL or local stdio servers, enable/disable existing entries, remove entries after confirmation, and refresh the current state. Mutations are lock-protected, backed up, TOML-validated, and written with mode `0600`; configured environment values and command arguments are never rendered in the list. Changes apply to new Codex sessions. The same plumbing is available through `sks menubar mcp list|add|enable|disable|remove` for diagnostics and tests.
+**Manage MCP Servers…** opens a native macOS manager for the global `~/.codex/config.toml`. It can add remote URL or local stdio servers, enable/disable existing entries, remove entries after confirmation, and refresh the current state. Mutations are lock-protected, backed up, TOML-validated, and written with mode `0600`; configured environment values and command arguments are never rendered in the list. Changes apply to new Codex sessions. The same plumbing is available through the canonical `sks mcp config list|get|add|edit|duplicate|enable|disable|remove|test|login|logout|backups|restore` surface for diagnostics and automation.
 
 ## The Front Door
 
 | Command | What it does |
 | --- | --- |
-| `$Plan "task"` | Planning only. Writes `.sneakoscope/plans/<slug>.md`; no code edits. |
-| Explicit `$Work` | Executes the latest plan through evidence-gated SKS work. Ordinary prose containing “work” is not treated as this alias. |
-| `$Swarm "task"` | Compatibility alias for the Naruto Codex official subagent workflow. |
-| `$Team "task"` | Deprecated v5 compatibility alias. New execution redirects to `$Naruto`; legacy Team observe/watch commands remain available for old missions. |
-| `$MAD-SKS` / `sks mad-sks` | Single high-risk MAD route for scoped permission widening plus SQL-plane execution, including read-back proof and profile closure. |
-| `$MAD-DB` / `sks mad-db` | Deprecated compatibility alias. Translates to `$MAD-SKS` sql-plane commands for one release. |
-| `$Review` / `sks review --staged` | Reviews diffs with `evidence: machine` findings sorted above `evidence: llm`. |
-| `sks ui` | Opens the local live dashboard at `http://127.0.0.1:4477`. |
+| `$sks-plan "task"` | Planning only. Writes `.sneakoscope/plans/<slug>.md`; no code edits. |
+| Explicit `$sks-work` | Executes the latest plan through evidence-gated SKS work. Ordinary prose containing “work” is not treated as this alias. |
+| `$sks-naruto "task"` | Runs the Codex official subagent workflow with parent-owned integration and evidence. |
+| `$sks-mad-sks` / `sks mad-sks` | Single high-risk MAD route for scoped permission widening plus SQL-plane execution, including read-back proof and profile closure. |
+| `$sks-review` / `sks review --staged` | Reviews diffs with `evidence: machine` findings sorted above `evidence: llm`. |
 
 `sks --mad` now prioritizes the interactive ready path: independent macOS config probes run concurrently, failed read-only preflight does not repeat mutation-capable repair inspection, verified Zellij/codex-lb evidence is reused, and the remote Zellij update lookup runs after the UI is ready. Existing unreadable or malformed config still blocks safely; pass an explicit repair flag such as `--repair-config` when repair is intended.
 
-## Naruto In 6.2.0
+## Naruto Workflow
 
-`$Naruto` and `sks naruto run "task" --agents 8 --max-threads 12` use Codex official subagents. The parent is GPT-5.6 Sol Max. Tiny mechanical `worker` slices use Luna Max; ordinary UI, logic, backend, and native coding uses Sol High; review, testing, debugging, architecture, integration, security, database, research, release, and other judgment-sensitive work uses Sol Max; long-context scans and direct Computer Use, Browser/Chrome, or image-generation execution uses Terra Medium. Mixed execution/judgment work is split when possible, and unsplittable judgment defaults to Sol Max.
+`$sks-naruto` and `sks naruto run "task" --agents 8 --max-threads 12` use Codex official subagents. The parent is GPT-5.6 Sol Max. Tiny mechanical `worker` slices use Luna Max; ordinary UI, logic, backend, and native coding uses Sol High; review, testing, debugging, architecture, integration, security, database, research, release, and other judgment-sensitive work uses Sol Max; long-context scans and direct Computer Use, Browser/Chrome, or image-generation execution uses Terra Medium. Mixed execution/judgment work is split when possible, and unsplittable judgment defaults to Sol Max.
 
 Fresh SKS-owned project config uses `max_threads = 12`, `max_depth = 1`, `job_max_runtime_seconds = 1200`, and `interrupt_message = true`. `max_depth = 1` means subagents cannot spawn nested subagents. Explicit user limits are preserved, and larger requests run in waves.
 
@@ -71,9 +70,9 @@ Gates are task-profile aware: greetings and answer-only turns create no mission
 
 Every installed Codex hook runs one common Naruto decision gate. The gate records `none`, `generic_naruto`, or `route_owned`: Answer, DFix, Wiki, Computer Use, Goal, and simple Git/control turns stay lightweight; ordinary non-trivial work defaults to two independent official subagents; critical work spanning at least three risk domains may use three. Research, AutoResearch, and QA-Loop retain their own exact orchestration contracts instead of receiving a second generic fan-out. Explicit `--agents N` remains authoritative.
 
-SKS installs twenty-five narrow project custom agents, including native AppKit, toolchain, protocol, runtime-reliability, TriWiki-evidence, long-context, Computer Use, Browser/Chrome, and image-generation specialists. Delegation prompts inject at most the three roles recommended for the current goal rather than serializing the full catalog, so expanding role coverage does not serialize the full inventory into every prompt. TriWiki context is also bounded and query-aware: ordinary work receives up to four trust/hydration anchors and complex, parallel, or high-risk work receives up to six, with source hydration required before relying on lower-trust hints. In CLI Zellij mode, the right side is a live observability surface rather than a static lane reservation: one monitor plus one viewport by default (maximum three) shows official thread role/model, redacted live phase/task/file updates from exact-agent Codex 0.144.1+ rollouts, `running`, `verifying`, and trustworthy parent-verdict completion/failure states. Rollout activity is display-only and never completion proof.
+SKS installs twenty-five narrow project custom agents, including native AppKit, toolchain, protocol, runtime-reliability, TriWiki-evidence, long-context, Computer Use, Browser/Chrome, and image-generation specialists. Delegation prompts inject at most the three roles recommended for the current goal rather than serializing the full catalog, so expanding role coverage does not serialize the full inventory into every prompt. TriWiki context is also bounded and query-aware: ordinary work receives up to four trust/hydration anchors and complex, parallel, or high-risk work receives up to six, with source hydration required before relying on lower-trust hints. In CLI Zellij mode, the right side is a live observability surface rather than a static lane reservation: one monitor plus one viewport by default (maximum three) shows official thread role/model, redacted live phase/task/file updates from rollout-compatible Codex 0.144.1+ sessions while the current release baseline remains 0.144.5, plus `running`, `verifying`, and trustworthy parent-verdict completion/failure states. Rollout activity is display-only and never completion proof.
 
-`--clones` and `workers` remain one-release spelling aliases for official subagent behavior. The historical Naruto process swarm and its environment opt-in are removed; legacy backend, scheduler, pool, and model flags fail closed.
+Official subagent requests use `--agents`; removed scheduler, pool, backend, and model flags fail closed.
 
 ## Why Not Just An LLM Reviewer?
 
@@ -82,19 +81,7 @@ SKS installs twenty-five narrow project custom agents, including native AppKit,
 | Did tests/typecheck fail? | Another model may say so. | Machine check output is tagged `evidence: machine`. |
 | Are findings ranked? | Usually one blended opinion. | Machine evidence sorts before LLM findings. |
 | Can work stop? | The model decides. | Stop gates, Completion Proof, and Honest Mode decide. |
-| Can I inspect agent-thread progress? | Usually no runtime UI. | `sks ui` plus the official Codex subagent/thread surfaces. |
-
-## Dashboard
-
-`sks ui` serves a dependency-free localhost dashboard with:
-
-- mission, route, elapsed time, and gate badge
-- live official subagent thread grid with role/model badge, progress, and current task
-- run/verify/queue/done/fail counters
-- recent mission events
-- current gate checklist
-
-The dashboard binds to `127.0.0.1` only and exposes telemetry/gates/events, not config secrets.
+| Can I inspect agent-thread progress? | Usually no runtime UI. | Use the official Codex subagent/thread surfaces and SKS Zellij monitor/viewport panes. |
 
 ## Demo
 
@@ -104,7 +91,7 @@ The reproducible VHS script lives at [docs/demo.tape](docs/demo.tape).
 vhs docs/demo.tape
 ```
 
-It shows the current quickstart flow: one-line install, `$Plan`, `sks review`, `sks ui`, and an official `$Naruto` subagent run.
+It shows the current quickstart flow: one-line install, `$sks-plan`, `sks review`, `sks status --json`, and an official `$sks-naruto` subagent run.
 
 ## Proof Surfaces
 
@@ -134,6 +121,7 @@ It shows the current quickstart flow: one-line install, `$Plan`, `sks review`, `
   - `Manage MCP Servers…` provides a resizable native table and add/remove/enable/disable controls for global Codex MCP configuration. Secret environment values and command arguments are accepted through native dialogs/stdin but omitted from list output and logs.
   - `sks menubar status --json` reports a `codex_sync` object with `bundle_id`, `codex_running`, and `icon_visible_expected` to show Codex-lifecycle detection state.
   - The menu displays the installed Codex CLI version, adds an `⬆` status icon when `sks codex update-status` sees a newer release, runs the official self-updater through `Update Codex CLI Now`, and exposes `Run sks doctor --fix` as a background repair action.
+  - Fast mode has a verified status row and direct On/Off actions. Status failures render as unavailable with neither choice falsely selected.
 - If Codex shows `[No tool output found for custom tool call ...]`, SKS blocks reuse of that structurally ambiguous thread. Upgrade codex-lb (or explicitly run `sks codex-lb use-oauth`), inspect possible side effects, then continue the persisted mission in a fresh Codex task. SKS never rewrites session JSONL or fabricates a successful tool output.
 - Zellij optional but recommended for terminal worker panes
 

package/config/architecture-budgets.v1.json

@@ -0,0 +1,70 @@
+{
+  "schema": "sks.architecture-budgets.v1",
+  "scan_roots": [
+    "src",
+    "native"
+  ],
+  "source_extensions": [
+    ".mjs",
+    ".js",
+    ".ts",
+    ".swift"
+  ],
+  "split_review_lines": 3000,
+  "default_new_file_max_lines": 450,
+  "budgets": [
+    {
+      "id": "menubar-app-delegate",
+      "match": "^native/sks-menubar/(?:Sources/)?AppDelegate\\.swift$",
+      "max_lines": 250,
+      "new_file_max_lines": 250
+    },
+    {
+      "id": "menubar-swift",
+      "match": "^native/sks-menubar/.*\\.swift$",
+      "max_lines": 500,
+      "new_file_max_lines": 500
+    },
+    {
+      "id": "menubar-facade",
+      "match": "^src/core/codex-app/sks-menubar\\.ts$",
+      "max_lines": 80,
+      "new_file_max_lines": 80
+    },
+    {
+      "id": "menubar-typescript",
+      "match": "^src/core/codex-app/menubar/.*\\.ts$",
+      "max_lines": 450,
+      "new_file_max_lines": 450
+    },
+    {
+      "id": "pipeline-trust-evidence-proof",
+      "match": "^src/core/(?:pipeline|trust-kernel|evidence|proof)(?:/|\\.)",
+      "max_lines": 1200,
+      "new_file_max_lines": 450
+    },
+    {
+      "id": "command-module",
+      "match": "^src/(?:commands|core/commands)/",
+      "max_lines": 900,
+      "new_file_max_lines": 450
+    },
+    {
+      "id": "default-handwritten-source",
+      "match": ".*",
+      "max_lines": 1800,
+      "new_file_max_lines": 450
+    }
+  ],
+  "waiver_policy": {
+    "mode": "shrink-only",
+    "required_fields": [
+      "schema",
+      "file",
+      "reason",
+      "policy",
+      "baseline_lines",
+      "expires_version"
+    ]
+  }
+}

package/config/codex-releases/{rust-v0.144.1.json → rust-v0.144.5.json}

@@ -1,12 +1,12 @@
 {
   "schema": "sks.codex-release-manifest.v1",
-  "targetTag": "rust-v0.144.1",
-  "requiredCliVersion": "0.144.1",
-  "sdkVersion": "0.144.1",
-  "minimumSupportedVersion": "0.144.1",
+  "targetTag": "rust-v0.144.5",
+  "requiredCliVersion": "0.144.5",
+  "sdkVersion": "0.144.5",
+  "minimumSupportedVersion": "0.144.5",
   "protocolMode": "app-server-v2",
   "generatedSchemaSha256": "2b3f14fa2e728f77a16385ff39f3a1d85ab255c1020498a85c1c0fb24f3d2f3c",
-  "upstreamCommit": "rust-v0.144.1",
+  "upstreamCommit": "rust-v0.144.5",
   "featurePolicies": {
     "multiAgentMode": "probe",
     "indexedWebSearch": "probe",

package/config/perf-budgets.v1.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.perf-budgets.v1",
-  "_note": "budget_p50_ms/budget_p95_ms are judged against raw wall-clock time (no node-startup-baseline deduction, 20차 P0-11). Calibrated from raw measurement on a warm dev machine (2026-07-09: version/root/commands/super-search-doctor ~40-70ms, dollar-commands ~50-130ms, doctor --json fast-mode ~40ms, plan --help/status --json/commands/mad-sks --help added after P2-2/P2-5d verification ~45-167ms) with headroom for slower/CI hosts; retighten once real CI raw numbers are collected. Gate-runtime and $Swarm-overhead budgets from the 20차 P2-6 table are NOT covered here — the former needs the P3 gate consolidation (207->~30) done first, the latter needs a real-backend E2E run (P4 E2E-1) to measure against plain `codex exec`, neither of which this repo state has yet.",
+  "_note": "budget_p50_ms/budget_p95_ms are judged against raw wall-clock time (no node-startup-baseline deduction, 20차 P0-11). Calibrated from raw measurement on a warm dev machine (2026-07-09: version/root/commands/super-search-doctor ~40-70ms, dollar-commands ~50-130ms, doctor --json fast-mode ~40ms, plan --help/status --json/commands/mad-sks --help added after P2-2/P2-5d verification ~45-167ms) with headroom for slower/CI hosts; retighten once real CI raw numbers are collected. Gate-runtime overhead is not covered here and needs a separate real-backend E2E comparison against plain `codex exec`.",
   "commands": [
     { "name": "version", "argv": ["node", "./dist/bin/sks.js", "--version"], "budget_p50_ms": 100, "budget_p95_ms": 150 },
     { "name": "commands-json", "argv": ["node", "./dist/bin/sks.js", "commands", "--json"], "budget_p50_ms": 150, "budget_p95_ms": 220 },
@@ -12,5 +12,13 @@
     { "name": "status-json", "argv": ["node", "./dist/bin/sks.js", "status", "--json"], "budget_p50_ms": 220, "budget_p95_ms": 300 },
     { "name": "plan-help", "argv": ["node", "./dist/bin/sks.js", "plan", "--help"], "budget_p50_ms": 100, "budget_p95_ms": 150 },
     { "name": "mad-sks-help", "argv": ["node", "./dist/bin/sks.js", "mad-sks", "--help"], "budget_p50_ms": 100, "budget_p95_ms": 150 }
+  ],
+  "release_latency_slos": [
+    { "id": "menubar_first_state_render", "budget_p95_ms": 250, "measured_runs": 5 },
+    { "id": "control_center_open", "budget_p95_ms": 400, "measured_runs": 5 },
+    { "id": "mcp_static_list", "budget_p95_ms": 250, "measured_runs": 9 },
+    { "id": "update_cache_read", "budget_p95_ms": 50, "measured_runs": 15 },
+    { "id": "telegram_callback_ack", "budget_p95_ms": 1000, "measured_runs": 7 },
+    { "id": "ssh_worker_hello", "budget_p95_ms": 3000, "measured_runs": 5 }
   ]
 }

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "6.2.0"
+version = "6.5.1"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "6.2.0"
+version = "6.5.1"
 edition = "2021"
 
 [dependencies]

package/dist/bin/fast-inline.js

@@ -42,7 +42,6 @@ function doctorJsonFastInline() {
             layout_proof: 'unavailable',
             pane_proof: 'unavailable',
             screen_proof: 'unavailable',
-            tmux_removed_runtime: true,
             mad_ready: false,
             cli_ready: false,
             ready_for_interactive_runtime: false
@@ -83,11 +82,11 @@ async function hookUserPromptSubmitPerfInline() {
         })}\n`);
         return;
     }
-    const route = /\$Super-Search|\bsuper-search\b|site:(?:x|twitter)\.com/i.test(prompt)
-        ? '$Super-Search'
+    const route = /\$(?:sks-)?Super-Search|\bsuper-search\b|site:(?:x|twitter)\.com/i.test(prompt)
+        ? '$sks-super-search'
         : /\b(?:fix|failing|failing tests|고쳐|수정|깨져)\b/i.test(prompt)
-            ? '$Naruto'
-            : '$Answer';
+            ? '$sks-naruto'
+            : '$sks-answer';
     const contexts = [
         'SKS hook perf inline path active for bounded latency measurement.',
         `Route: ${route}`,

package/dist/bin/install.js

@@ -27,8 +27,7 @@ if (run('sks', ['doctor', '--fix', ...(autonomous ? ['--yes'] : [])]) !== 0) {
 }
 console.log(`
 SKS ready. 다음 3개만 기억하세요 (Codex 입력창에서):
-   $Plan "무엇을 만들지"     - 계획만 세움 (코드 안 건드림)
-   $Work                     - 계획을 증거 기반으로 실행
-   $Swarm "task"             - 동적 병렬 스웜 + 기계 검증 루프
-   실시간 화면: sks ui  (웹 대시보드) / zellij 세션은 자동
+   $sks-plan "무엇을 만들지" - 계획만 세움 (코드 안 건드림)
+   $sks-work                 - 계획을 증거 기반으로 실행
+   실행 상태: sks status --json / zellij 세션은 자동
 `);

package/dist/bin/sks-dispatch.js

@@ -1,10 +1,5 @@
 async function runSks(args) {
-    if (args[0] === '--agent' && args[1] === 'worker') {
-        const workerModule = '../core/agents/native-cli-' + 'worker.js';
-        const { runNativeCliWorkerFromArgs } = await import(workerModule);
-        await runNativeCliWorkerFromArgs(args.slice(2));
-    }
-    else if (args[0] === 'commands' && args.includes('--json')) {
+    if (args[0] === 'commands' && args.includes('--json')) {
         const { commandsJsonFast } = await import('../cli/commands-fast.js');
         commandsJsonFast();
     }
@@ -18,7 +13,7 @@ async function runSks(args) {
         const { rootJsonFastInline } = await import('./fast-inline.js');
         rootJsonFastInline(fs);
     }
-    else if (args[0] === 'doctor' && args.includes('--json') && !args.includes('--fix') && !args.includes('--full') && !args.includes('--capabilities')) {
+    else if (args[0] === 'doctor' && args.includes('--json') && !args.includes('--report-file') && !args.includes('--fix') && !args.includes('--full') && !args.includes('--capabilities')) {
         const { doctorJsonFastInline } = await import('./fast-inline.js');
         doctorJsonFastInline();
     }

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const { PACKAGE_VERSION } = require('../core/version.js');
+const { version: PACKAGE_VERSION } = require('../../package.json');
 const firstArg = process.argv[2];
 if (firstArg === '--version' || firstArg === '-v' || firstArg === 'version') {
     process.stdout.write(`sneakoscope ${PACKAGE_VERSION}\n`);

package/dist/cli/args.js

@@ -27,9 +27,7 @@ export function positionalArgs(args = []) {
         '--sql',
         '--command',
         '--project-ref',
-        '--agent',
         '--agents',
-        '--clones',
         '--max-threads',
         '--target-active-slots',
         '--work-items',
@@ -65,4 +63,3 @@ export function positionalArgs(args = []) {
     }
     return out;
 }
-//# sourceMappingURL=args.js.map

package/dist/cli/cli-theme.js

@@ -48,4 +48,3 @@ export function withHeartbeat(label, work, opts = {}) {
         process.stderr.write(`\r${' '.repeat(80)}\r`);
     });
 }
-//# sourceMappingURL=cli-theme.js.map

package/dist/cli/codex-app-command.js

@@ -59,4 +59,3 @@ function spawnInherited(spawnFn, command, args, opts) {
         child.on('close', (code) => resolve(code || 0));
     });
 }
-//# sourceMappingURL=codex-app-command.js.map

package/dist/cli/command-manifest-lite.js

@@ -12,16 +12,16 @@ export const COMMAND_MANIFEST_LITE = [
     { name: 'plan', summary: 'Write a planning-only SKS plan artifact without code edits', maturity: 'stable' },
     { name: 'status', summary: 'Show concise active mission and trust status', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'review', summary: 'Review a git diff with machine evidence first', maturity: 'stable', allowedDuringActiveRoute: true },
-    { name: 'ui', summary: 'Open the localhost SKS swarm dashboard', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'root', summary: 'Show active SKS root', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
-    { name: 'update', summary: 'Update the global SKS npm package', maturity: 'stable' },
+    { name: 'update', summary: 'Inspect, review, apply, or roll back the global SKS update', maturity: 'stable' },
     { name: 'uninstall', summary: 'Uninstall SKS global skills, hooks, config, menu bar, and optional project residue', maturity: 'stable', allowedDuringActiveRoute: true },
-    { name: 'update-check', summary: 'Check npm package freshness', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
+    { name: 'update-check', summary: 'Show the shared SKS, Codex CLI, and Menu Bar update status', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
+    { name: 'mcp', summary: 'Manage scoped Codex MCP configuration', maturity: 'beta' },
     { name: 'wizard', summary: 'Open setup wizard help', maturity: 'stable' },
     { name: 'usage', summary: 'Show focused usage topic', maturity: 'stable', readonly: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'quickstart', summary: 'Show quickstart flow', maturity: 'stable' },
     { name: 'setup', summary: 'Initialize SKS state', maturity: 'stable', skipMigrationGate: true },
-    { name: 'bootstrap', summary: 'Initialize SKS project files', maturity: 'stable' },
+    { name: 'bootstrap', summary: 'Initialize SKS project files', maturity: 'stable', skipMigrationGate: true },
     { name: 'init', summary: 'Initialize local control surface', maturity: 'stable' },
     { name: 'deps', summary: 'Check local dependencies', maturity: 'stable' },
     { name: 'fix-path', summary: 'Repair hook command paths', maturity: 'stable' },
@@ -35,27 +35,25 @@ export const COMMAND_MANIFEST_LITE = [
     { name: 'codex-native', summary: 'Inspect Codex Native broker and routing readiness', maturity: 'beta' },
     { name: 'codex-lb', summary: 'Inspect codex-lb status and circuit health', maturity: 'beta' },
     { name: 'menubar', summary: 'Inspect/install/restart/uninstall SKS menu bar', maturity: 'beta', allowedDuringActiveRoute: true, diagnostic: true },
+    { name: 'remote', summary: 'Inspect official Remote readiness and run the proof-aware SSH stdio worker', maturity: 'beta' },
+    { name: 'telegram', summary: 'Inspect and run the private proof-aware Telegram Hub', maturity: 'beta' },
     { name: 'hooks', summary: 'Explain and inspect Codex hooks', maturity: 'beta' },
-    { name: 'tmux', summary: 'Show removed-runtime migration notice', maturity: 'beta' },
     { name: 'zellij-lane', summary: 'Render a Zellij lane frame for SKS sessions', maturity: 'beta' },
     { name: 'zellij-slot-pane', summary: 'Render a compact Zellij worker slot pane', maturity: 'beta' },
     { name: 'zellij-monitor-pane', summary: 'Render the live Zellij MAD/Naruto monitor pane', maturity: 'beta', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'zellij-viewport-pane', summary: 'Render a dynamically bound Zellij worker viewport pane', maturity: 'beta', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'zellij-slot-column-anchor', summary: 'Render the compact SLOTS anchor pane for first-slot-down Zellij stacks', maturity: 'beta' },
     { name: 'zellij', summary: 'Inspect Zellij runtime status and explain repair (no auto-install)', maturity: 'beta', skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
-    { name: 'mad-sks', summary: 'MAD-SKS scoped permission modifier + SQL-plane execution (merged MAD-DB)', maturity: 'beta', mutatesRouteState: true },
+    { name: 'mad-sks', summary: 'MAD-SKS scoped permission modifier + SQL-plane execution', maturity: 'beta', mutatesRouteState: true },
     { name: 'glm', summary: 'Run GLM 5.2 MAD mode through OpenRouter', maturity: 'beta' },
-    { name: 'mad-db', summary: 'Deprecated alias for MAD-SKS SQL-plane execution; redirects to sks mad-sks sql|apply-migration', maturity: 'beta', mutatesRouteState: true, deprecated: true },
     { name: 'auto-review', summary: 'Manage auto-review profile', maturity: 'beta' },
     { name: 'dollar-commands', summary: 'List Codex App dollar commands', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'fast-mode', summary: 'Toggle SKS Fast mode default for dollar-command routes', maturity: 'stable', skipMigrationGate: true },
     { name: 'commit', summary: 'Create a simple git commit', maturity: 'stable' },
     { name: 'commit-and-push', summary: 'Create a simple git commit and push', maturity: 'stable' },
     { name: 'dfix', summary: 'Run DFix diagnose/plan/patch/verify loop', maturity: 'stable', mutatesRouteState: true },
-    { name: 'team', summary: 'Deprecated alias. New execution redirects to Naruto; legacy observe/watch remains.', maturity: 'beta', mutatesRouteState: true, deprecated: true },
-    { name: 'agent', summary: 'Run native multi-session agent missions', maturity: 'beta', mutatesRouteState: true },
     { name: 'with-local-llm', summary: 'Enable or inspect local Ollama worker backend', maturity: 'beta' },
-    { name: 'naruto', summary: 'Run the $Naruto Codex official subagent workflow', maturity: 'labs', mutatesRouteState: true },
+    { name: 'naruto', summary: 'Run the $sks-naruto Codex official subagent workflow', maturity: 'labs', mutatesRouteState: true },
     { name: 'stop-gate', summary: 'Check canonical stop-gate resolution for a route/mission', maturity: 'beta', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'route', summary: 'Inspect or close active route state', maturity: 'beta', skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'loop', summary: 'Dynamic Loop Runtime: plan/run/status/proof loop graphs.', maturity: 'labs', mutatesRouteState: true },
@@ -67,7 +65,6 @@ export const COMMAND_MANIFEST_LITE = [
     { name: 'computer-use', summary: 'Record native Mac/non-web Computer Use visual evidence', maturity: 'beta', mutatesRouteState: true },
     { name: 'context7', summary: 'Context7 checks and docs', maturity: 'beta' },
     { name: 'super-search', summary: 'Run Super-Search provider-independent source intelligence', maturity: 'beta' },
-    { name: 'xai', summary: 'Deprecated compatibility notice for removed xAI/Grok setup', maturity: 'beta', deprecated: true },
     { name: 'recallpulse', summary: 'RecallPulse evidence route', maturity: 'labs' },
     { name: 'pipeline', summary: 'Inspect pipeline missions', maturity: 'beta', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'guard', summary: 'Check harness guard', maturity: 'beta' },
@@ -115,14 +112,10 @@ export const COMMAND_ALIASES_LITE = {
     '--mad-sks': 'mad-sks',
     'ux-review': 'image-ux-review',
     'visual-review': 'image-ux-review',
-    'ui-ux-review': 'image-ux-review',
-    '--agent': 'agent',
-    '--naruto': 'naruto',
-    swarm: 'naruto'
+    'ui-ux-review': 'image-ux-review'
 };
 export const COMMAND_MANIFEST_BY_NAME = Object.fromEntries(COMMAND_MANIFEST_LITE.map((entry) => [entry.name, entry]));
 export const COMMAND_NAME_SET = new Set(COMMAND_MANIFEST_LITE.map((entry) => entry.name));
 export function commandManifestNames() {
     return COMMAND_MANIFEST_LITE.map((entry) => entry.name).sort();
 }
-//# sourceMappingURL=command-manifest-lite.js.map