sneakoscope 6.4.0 → 6.7.0

package/dist/core/agents/agent-effort-policy.js

@@ -71,11 +71,17 @@ export function decideOfficialSubagentModel(input = {}) {
     const role = String(persona.role || '');
     const agentId = String(input.agentId || persona.id || 'subagent');
     const routingRole = [agentId, persona.naruto_role, persona.work_kind, role].filter(Boolean).join(' ');
-    const taskClass = /(?:implementation_specialist|ui_implementer|native_app_specialist)/i.test(routingRole)
-        ? 'implementation'
-        : /(?:explorer|docs_maintainer|long_context_analyst|computer_use_operator|browser_use_operator|image_generation_operator)/i.test(routingRole)
-            ? 'context_tools'
-            : undefined;
+    const promptIsDocsExploration = /\b(?:read|scan|explore|compare|summarize|review)\b[^\n]{0,64}\b(?:docs?|documentation|manual|notes?|references?)\b/i.test(prompt);
+    const promptIsFocusedJudgment = !promptIsDocsExploration
+        && /^(?:\s*)(?:review|audit|debug(?:ger|ging)?|diagnos|investigat|plan|assess)\b|\b(?:security|database|release|production|high[- ]?risk)\b[^\n]{0,48}\b(?:review|audit|decision|plan|assessment)\b/i.test(prompt);
+    const taskClass = promptIsFocusedJudgment
+        || /(?:debugger|expert|_reviewer|research_synthesizer)/i.test(routingRole)
+        ? 'judgment'
+        : /(?:implementation_specialist|ui_implementer|native_app_specialist)/i.test(routingRole)
+            ? 'implementation'
+            : /(?:explorer|docs_maintainer|long_context_analyst|computer_use_operator|browser_use_operator|image_generation_operator)/i.test(routingRole)
+                ? 'context_tools'
+                : undefined;
     const routed = decideSubagentModel({
         title: routingRole,
         description: [prompt, persona.risk_focus, persona.write_policy].filter(Boolean).join(' '),
@@ -106,8 +112,8 @@ export function decideOfficialSubagentModel(input = {}) {
         reason: routed.reason,
         dynamic: true,
         escalation_triggers: [
-            'review, debugging, planning, architecture, integration, security, database, research, release, or ambiguity selects Sol Max',
-            'mixed tool-and-judgment work is split; an unsplittable slice selects Sol Max',
+            'focused review, debugging, planning, integration, security, database, research, release, or unresolved ambiguity selects Sol Max',
+            'incidental judgment vocabulary does not override a clearly classified implementation or context/tools slice',
             'requested model/effort profile unavailable blocks instead of silently falling back'
         ],
         downshift_triggers: [

package/dist/core/agents/agent-orchestrator.js

@@ -1158,9 +1158,6 @@ function enforceWorkerQualityProtocolForSlice(result, slice) {
     const kind = String(slice?.work_item_kind || result?.work_item_kind || '').toLowerCase();
     const text = [kind, slice?.id, slice?.title].join(' ').toLowerCase();
     const blockers = [];
-    if ((kind === 'bugfix' || /\b(fix|bug|regression|broken|failure|crash|error)\b|버그|회귀/.test(text)) && !validRegressionProof(result.regression_proof || firstEnvelopeField(result, 'regression_proof'))) {
-        blockers.push('tdd_evidence_missing');
-    }
     if ((kind === 'conflict_resolution' || /\b(repair|conflict|rebase|rollback)\b|수리|충돌/.test(text)) && !(result.repair_hypothesis || firstEnvelopeField(result, 'repair_hypothesis'))) {
         blockers.push('repair_without_hypothesis');
     }
@@ -1176,9 +1173,6 @@ function enforceWorkerQualityProtocolForSlice(result, slice) {
 function firstEnvelopeField(result, field) {
     return (Array.isArray(result?.patch_envelopes) ? result.patch_envelopes : []).find((envelope) => envelope?.[field])?.[field] || null;
 }
-function validRegressionProof(proof) {
-    return Boolean(proof && proof.failed_before === true && proof.passed_after === true && String(proof.test_file || '').trim());
-}
 function normalizePathList(values) {
     return (Array.isArray(values) ? values : []).map((file) => String(file || '').replace(/\\/g, '/').replace(/^\.\/+/, '').replace(/\/+$/, '')).filter(Boolean);
 }

package/dist/core/agents/agent-output-validator.js

@@ -62,7 +62,8 @@ export const AGENT_RESULT_RUNTIME_SCHEMA = {
             required: ['status', 'checks'],
             properties: {
                 status: { type: 'string' },
-                checks: { type: 'array', items: { type: 'string' } }
+                checks: { type: 'array', items: { type: 'string' } },
+                reason: { type: 'string', minLength: 1 }
             },
             additionalProperties: false
         },

package/dist/core/agents/agent-patch-queue-store.js

@@ -64,7 +64,6 @@ export class PersistentAgentPatchQueueStore {
             ...(impact.cochange_required?.length && !cochangeAck ? [`impact_scan_cochange_missing:${impact.cochange_required.slice(0, 5).join(',')}`] : []),
             ...((diffQuality.errors || []).map((issue) => `diff_quality:${issue}`)),
             ...(feedback.ok === false ? ['machine_feedback_failed'] : []),
-            ...(isBugfixKind(context.work_item_kind, envelope.task_slice_id) && !validRegressionProof(envelope.regression_proof || context.regression_proof) ? ['tdd_evidence_missing'] : []),
             ...(isRepairKind(context.work_item_kind, envelope.task_slice_id) && !(envelope.repair_hypothesis || context.repair_hypothesis) ? ['repair_without_hypothesis'] : [])
         ];
         return {
@@ -145,17 +144,10 @@ export class PersistentAgentPatchQueueStore {
         await appendJsonlMany(path.join(this.artifactDir, AGENT_PATCH_QUEUE_EVENTS_ARTIFACT), events.filter(Boolean));
     }
 }
-function isBugfixKind(kind, id) {
-    const text = `${String(kind || '')} ${String(id || '')}`.toLowerCase();
-    return /\b(bugfix|fix|bug|regression|broken|failure|crash|error)\b|버그|회귀/.test(text);
-}
 function isRepairKind(kind, id) {
     const text = `${String(kind || '')} ${String(id || '')}`.toLowerCase();
     return /\b(conflict_resolution|repair|conflict|rebase|rollback)\b|수리|충돌/.test(text);
 }
-function validRegressionProof(proof) {
-    return Boolean(proof && proof.failed_before === true && proof.passed_after === true && String(proof.test_file || '').trim());
-}
 function changedFilesForEnvelope(envelope) {
     const files = envelope.git_worktree?.changed_files?.length
         ? envelope.git_worktree.changed_files

package/dist/core/agents/agent-proof-evidence.js

@@ -37,8 +37,6 @@ export async function writeAgentProofEvidence(root, input) {
     const narutoConcurrencyGovernor = await readJson(path.join(root, 'naruto-concurrency-governor.json'), null);
     const narutoActivePool = await readJson(path.join(root, 'naruto-active-pool.json'), null);
     const narutoVerificationDag = await readJson(path.join(root, 'naruto-verification-dag.json'), null);
-    const narutoGptFinalPack = await readJson(path.join(root, 'naruto-gpt-final-pack.json'), null);
-    const narutoZellijDashboard = await readJson(path.join(root, 'naruto-zellij-dashboard.json'), null);
     const localParticipated = localCollaborationParticipated(input.results || []) || Number(gptFinalArbiter?.local_outputs_count || 0) > 0;
     const finalGptPatchStage = input.finalGptPatchStage || null;
     const localFinalGate = gptFinalArbiter?.final_gate || evaluateLocalCollaborationFinalGate({
@@ -224,8 +222,6 @@ export async function writeAgentProofEvidence(root, input) {
         ...(isNarutoRoute && !narutoActivePool ? ['naruto_active_pool_missing'] : []),
         ...(isNarutoRoute && narutoActivePool?.ok === false ? narutoActivePool.blockers || ['naruto_active_pool_not_ok'] : []),
         ...(isNarutoRoute && !narutoVerificationDag ? ['naruto_verification_dag_missing'] : []),
-        ...(isNarutoRoute && !narutoGptFinalPack ? ['naruto_gpt_final_pack_missing'] : []),
-        ...(isNarutoRoute && !narutoZellijDashboard ? ['naruto_zellij_dashboard_missing'] : []),
         ...changedFileLeaseBlockers
     ];
     const evidence = {
@@ -304,8 +300,6 @@ export async function writeAgentProofEvidence(root, input) {
         naruto_active_pool: narutoActivePool ? 'naruto-active-pool.json' : null,
         naruto_active_pool_refill_events: Number(narutoActivePool?.refill_events || 0),
         naruto_verification_dag: narutoVerificationDag ? 'naruto-verification-dag.json' : null,
-        naruto_gpt_final_pack: narutoGptFinalPack ? 'naruto-gpt-final-pack.json' : null,
-        naruto_zellij_dashboard: narutoZellijDashboard ? 'naruto-zellij-dashboard.json' : null,
         patch_handoff_runtime: patchHandoff ? 'agent-patch-handoff-runtime.json' : null,
         patch_queue: patchHandoff ? 'agent-patch-queue.json' : null,
         patch_queue_events: patchHandoff ? 'agent-patch-queue-events.jsonl' : null,

package/dist/core/agents/agent-worker-pipeline.js

@@ -100,17 +100,22 @@ function qualityProtocolBlockers(result) {
         return [];
     const kind = String(result.work_item_kind || result.naruto_runtime?.work_item_kind || '').toLowerCase();
     const text = [kind, result.task_slice_id].join(' ').toLowerCase();
-    const proof = result.regression_proof || result.patch_envelopes?.find((envelope) => envelope.regression_proof)?.regression_proof || null;
     const repair = result.repair_hypothesis || result.patch_envelopes?.find((envelope) => envelope.repair_hypothesis)?.repair_hypothesis || null;
     const blockers = [];
-    if ((kind === 'bugfix' || /\b(fix|bug|regression|broken|failure|crash|error)\b|버그|회귀/.test(text)) && !validRegressionProof(proof))
-        blockers.push('tdd_evidence_missing');
+    if (!validWriteVerification(result.verification))
+        blockers.push('verification_evidence_missing');
     if ((kind === 'conflict_resolution' || /\b(repair|conflict|rebase|rollback)\b|수리|충돌/.test(text)) && !repair)
         blockers.push('repair_without_hypothesis');
     return blockers;
 }
-function validRegressionProof(proof) {
-    return Boolean(proof && proof.failed_before === true && proof.passed_after === true && String(proof.test_file || '').trim());
+function validWriteVerification(verification) {
+    const status = String(verification?.status || '').trim().toLowerCase();
+    const checks = Array.isArray(verification?.checks)
+        ? verification.checks.map((check) => String(check || '').trim()).filter(Boolean)
+        : [];
+    if (status === 'passed')
+        return checks.length > 0;
+    return status === 'not_applicable' && Boolean(String(verification?.reason || '').trim());
 }
 export function agentWorkerPipelineContract() {
     return {
@@ -169,7 +174,8 @@ function isRecord(value) {
 function normalizeVerification(value) {
     return {
         status: String(value?.status || 'not_run'),
-        checks: Array.isArray(value?.checks) ? value.checks : []
+        checks: Array.isArray(value?.checks) ? value.checks : [],
+        ...(String(value?.reason || '').trim() ? { reason: String(value.reason).trim() } : {})
     };
 }
 function acceptsNoPatchReadOnlyOrNoop(value) {

package/dist/core/agents/native-cli-worker-runtime.js

@@ -401,22 +401,7 @@ class NativeCliWorkerRuntimeRecorder {
             projectRoot: input.ctx.opts.projectRoot || this.input.projectRoot || input.ctx.opts.cwd,
             rightColumnMode: 'spawn-on-first-worker',
             visiblePaneCap: this.zellijVisiblePaneCap(input.ctx.opts),
-            plannedAgentCount: this.input.targetActiveSlots,
-            dashboardSnapshot: {
-                mode: this.input.route || '$Naruto',
-                backend_counts: { [this.input.backend]: this.input.targetActiveSlots },
-                placement_counts: {
-                    'zellij-pane': 0,
-                    headless_by_design_viewport_ui: this.input.targetActiveSlots
-                },
-                active_workers: this.input.targetActiveSlots,
-                visible_panes: Number(process.env.SKS_ZELLIJ_VIEWPORTS || 1),
-                headless_workers: this.input.targetActiveSlots,
-                queue_depth: Math.max(0, this.input.requestedAgents - this.input.targetActiveSlots),
-                local_llm: { tps: 0, queue: 0 },
-                gpt_final_status: 'pending',
-                gate_progress: 'worker-spawn'
-            }
+            plannedAgentCount: this.input.targetActiveSlots
         };
         let paneRecord = await openHeadlessByDesignViewportWorker(paneInput);
         const zellijRequired = process.env.SKS_REQUIRE_ZELLIJ === '1';

package/dist/core/agents/native-worker-backend-router.js

@@ -418,7 +418,7 @@ function buildWorkerPrompt(slice) {
             ? 'Quality gates run before queue acceptance: impact-scan requires cochanged callers for exported signature changes, machine-feedback runs type/lint/related tests, diff-quality blocks dead exports, and compiled mistake rules block repeated mistakes.'
             : '',
         write.length
-            ? 'If this is a bugfix, create a regression test first and include regression_proof with failed_before true and passed_after true. For repair work, include repair_hypothesis before patching.'
+            ? 'Every write result must report verification status passed with at least one concrete check, or status not_applicable with a specific reason. For a reproducible bug or changed observable behavior, add the smallest regression check that would catch it. Do not manufacture a dedicated test when a smaller real check is sufficient. For repair work, include repair_hypothesis before patching.'
             : '',
         leanEngineeringCompactText(),
         'Required JSON fields: status, summary, findings, changed_files, patch_envelopes, verification, rollback_notes, blockers.'

package/dist/core/bench.js

@@ -343,7 +343,7 @@ export async function runLeanPolicyBench(root = process.cwd()) {
 async function fakeGptFinalScenario(candidate, leanEnabled) {
     const prompt = [
         leanEnabled ? leanEngineeringCompactText() : 'Baseline implementation context without lean policy.',
-        leanEnabled ? 'Lean review: evaluate over-build, dependency, fallback, root-cause, and validation safety.' : 'Review only catastrophic safety issues.',
+        leanEnabled ? 'Apply the Core Engineering Directive to the candidate and the available evidence.' : 'Review only catastrophic safety issues.',
         `Candidate: ${candidate}`
     ].join('\n');
     const result = await runFakeCodexSdkTask({

package/dist/core/codex/official-goal-mode.js

@@ -20,7 +20,7 @@ export async function detectOfficialGoalMode(opts = {}) {
         ok: true,
         official_goal_available: official,
         default_enabled: official,
-        mode: official ? 'official_goal_default' : 'sks_goal_fallback',
+        mode: official ? 'official_goal_default' : 'official_goal_unavailable',
         codex_help_checked: Boolean(helpText),
         codex_goal_help_checked: Boolean(goalHelpText),
         codex_features_checked: Boolean(featuresText),
@@ -28,9 +28,11 @@ export async function detectOfficialGoalMode(opts = {}) {
         codex_goals_feature_enabled: goalsFeature,
         config_goal_defaults_detected: configDefault,
         blockers: [],
-        warnings: official ? [] : ['official_goal_unavailable_using_sks_goal_fallback']
+        warnings: official ? [] : ['official_goal_unavailable_no_fallback']
     };
 }
+// Capability evidence for non-Goal routes. This records whether the active
+// Codex runtime exposes native Goal; it never creates or controls a goal.
 export async function writeOfficialGoalModeArtifact(dir, detection) {
     const artifact = path.join(dir, 'goal-mode-applied.json');
     await writeJsonAtomic(artifact, detection);

package/dist/core/codex-app/codex-app-fast-ui-repair.js

@@ -1,18 +1,16 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { ensureDir, nowIso, readText, sha256, writeJsonAtomic, writeTextAtomic } from '../fsx.js';
-import { codexHome, scanProjectLocalForbiddenKeys, snapshotCodexAppUiState } from './codex-app-ui-state-snapshot.js';
+import { codexHome, isSksOwnedGlobalUiLock, scanProjectLocalForbiddenKeys, snapshotCodexAppUiState } from './codex-app-ui-state-snapshot.js';
 import { assertCodexAppUiMutationAllowed } from './codex-app-ui-clobber-guard.js';
 import { codexProviderModelUiStatus } from '../codex-app.js';
 import { cleanupCodexConfigBackups } from '../codex/codex-config-toml.js';
 export const CODEX_APP_FAST_UI_REPAIR_SCHEMA = 'sks.codex-app-fast-ui-repair.v1';
-// `service_tier = "fast"` is the current Codex Desktop default-selection
-// contract. Removing it would silently turn Fast mode off, not restore the
-// selector. Only legacy SKS model/effort pins lock the native picker.
-const FAST_UI_TOP_LEVEL_RE = /^\s*(?:model|model_reasoning_effort)\s*=/;
-const FAST_UI_FEATURE_LINE_RE = /^\s*fast_mode\s*=/;
+// `service_tier = "fast"` and `[features].fast_mode = true` are capability
+// signals. Removing either would turn Fast off rather than restore native UI.
+// Only provenance-backed SKS global provider/model/reasoning locks are removed.
+const FAST_UI_TOP_LEVEL_RE = /^\s*(?:model_provider|model|model_reasoning_effort)\s*=/;
 const FAST_UI_LEGACY_TABLES = new Set(['user.fast_mode', 'profiles.sks-fast-high']);
-const SKS_CAUSED_RE = /(?:SKS|Sneakoscope|codex-lb|sks-mad|sks fast)/i;
 export async function repairCodexAppFastUi(root = process.cwd(), input = {}) {
     const resolvedRoot = path.resolve(root);
     const home = codexHome(input.codexHome === undefined ? {} : { codexHome: input.codexHome });
@@ -165,16 +163,12 @@ function stripProjectLocalForbiddenKeys(text) {
     });
 }
 function stripSksCausedHostOwnedLines(text) {
-    const topLevel = String(text || '').split(/\n\s*\[/)[0] || '';
-    const sksManagedTopLevel = SKS_CAUSED_RE.test(topLevel);
-    const sksManagedDocument = SKS_CAUSED_RE.test(String(text || ''));
-    const stripped = stripMatchingLines(text, (line, table, previous, next) => {
+    const sourceLines = String(text || '').split(/\r?\n/);
+    const stripped = stripMatchingLines(text, (line, table, _previous, _next, index) => {
         const isLegacyFastTable = table ? FAST_UI_LEGACY_TABLES.has(table) : false;
-        const isFastUiLine = FAST_UI_TOP_LEVEL_RE.test(line)
-            || (table === 'features' && FAST_UI_FEATURE_LINE_RE.test(line))
-            || isLegacyFastTable;
-        const sksMarked = (!table && sksManagedTopLevel) || (isLegacyFastTable && sksManagedDocument) || SKS_CAUSED_RE.test(line) || SKS_CAUSED_RE.test(previous) || SKS_CAUSED_RE.test(next);
-        return isFastUiLine && sksMarked;
+        if (isLegacyFastTable)
+            return true;
+        return !table && FAST_UI_TOP_LEVEL_RE.test(line) && isSksOwnedGlobalUiLock(sourceLines, index);
     });
     return stripped;
 }
@@ -194,7 +188,7 @@ function stripMatchingLines(text, shouldRemove) {
             continue;
         }
         const currentTable = tableMatch?.[1] || table;
-        const remove = shouldRemove(line, currentTable, lines[i - 1] || '', lines[i + 1] || '');
+        const remove = shouldRemove(line, currentTable, lines[i - 1] || '', lines[i + 1] || '', i);
         if (remove) {
             removedKeys.push(tableMatch?.[1] || line.match(/^\s*([A-Za-z0-9_.-]+)\s*=/)?.[1] || '<table-body>');
             if (tableMatch?.[1]) {

package/dist/core/codex-app/codex-app-ui-state-snapshot.js

@@ -13,6 +13,11 @@ export const PROJECT_LOCAL_FORBIDDEN_CODEX_KEYS = [
 ];
 const HOST_OWNED_KEY_RE = /^(?:model|model_reasoning_effort|openai_base_url|chatgpt_base_url|apps_mcp_product_sku|model_provider|model_providers(?:\.|$)|notify|profile|profiles(?:\.|$)|experimental_realtime_ws_base_url|otel(?:\.|$)|features\.fast_mode|service_tier|user\.fast_mode(?:\.|$))/;
 const SECRET_KEY_RE = /(?:key|token|secret|password|credential|cookie|authorization|auth|bearer|refresh|access|headers?|env)/i;
+const SKS_GLOBAL_UI_LOCK_KEYS = new Set(['model_provider', 'model', 'model_reasoning_effort']);
+const SKS_GLOBAL_UI_LOCK_CONTEXT_KEYS = new Set([
+    'service_tier', 'model_provider', 'model', 'model_reasoning_effort',
+    'approval_policy', 'sandbox_mode', 'web_search', 'notify', 'preferred_auth_method'
+]);
 export function codexHome(input) {
     return path.resolve(String(input?.codexHome || process.env.CODEX_HOME || path.join(os.homedir(), '.codex')));
 }
@@ -39,7 +44,7 @@ export async function snapshotCodexAppUiState(root = process.cwd(), input = {})
             return true;
         if (signal.key_path.startsWith('user.fast_mode') && /hidden|fixed|disabled|false/i.test(signal.value_preview))
             return true;
-        if ((signal.key_path === 'model' || signal.key_path === 'model_reasoning_effort') && signal.sks_related)
+        if (SKS_GLOBAL_UI_LOCK_KEYS.has(signal.key_path) && signal.sks_related)
             return true;
         return false;
     });
@@ -96,9 +101,6 @@ export function scanTomlSignals(text) {
     const tables = [];
     let table = null;
     const lines = text.split(/\r?\n/);
-    const firstTableIndex = lines.findIndex((line) => /^\s*\[/.test(line));
-    const topLevelLines = firstTableIndex === -1 ? lines : lines.slice(0, firstTableIndex);
-    const sksManagedTopLevel = topLevelLines.some((line) => /(?:SKS|Sneakoscope|codex-lb|sks fast)/i.test(line));
     lines.forEach((lineText, index) => {
         const tableMatch = lineText.match(/^\s*\[([^\]]+)\]\s*(?:#.*)?$/);
         if (tableMatch?.[1]) {
@@ -124,12 +126,38 @@ export function scanTomlSignals(text) {
             host_owned: HOST_OWNED_KEY_RE.test(keyPath),
             fast_ui_related: /(?:fast_mode|service_tier|model_reasoning_effort|^model$)/i.test(keyPath) || /(?:fast|priority|default)/i.test(value),
             provider_related: /(?:provider|base_url|auth|profile|openai|chatgpt|codex-lb)/i.test(lowerPath),
-            sks_related: /(?:sks|sneakoscope|codex-lb)/i.test(lineText)
-                || (table == null && sksManagedTopLevel && (key === 'model' || key === 'model_reasoning_effort'))
+            sks_related: /(?:SKS|Sneakoscope|sks-mad|sks fast)/i.test(lineText)
+                || (table == null && isSksOwnedGlobalUiLock(lines, index))
         });
     });
     return { signals, tables: [...new Set(tables)] };
 }
+export function isSksOwnedGlobalUiLock(lines, index) {
+    const current = String(lines[index] || '');
+    const key = current.match(/^\s*([A-Za-z0-9_-]+)\s*=/)?.[1] || '';
+    if (!SKS_GLOBAL_UI_LOCK_KEYS.has(key))
+        return false;
+    const inlineComment = current.includes('#') ? current.slice(current.indexOf('#')) : '';
+    if (isSksGlobalUiLockMarker(inlineComment))
+        return true;
+    const lowerBound = Math.max(0, index - 16);
+    for (let cursor = index - 1; cursor >= lowerBound; cursor -= 1) {
+        const candidate = String(lines[cursor] || '').trim();
+        if (!candidate)
+            continue;
+        if (candidate.startsWith('#'))
+            return isSksGlobalUiLockMarker(candidate);
+        if (/^\s*\[/.test(candidate))
+            return false;
+        const previousKey = candidate.match(/^([A-Za-z0-9_-]+)\s*=/)?.[1] || '';
+        if (!SKS_GLOBAL_UI_LOCK_CONTEXT_KEYS.has(previousKey))
+            return false;
+    }
+    return false;
+}
+function isSksGlobalUiLockMarker(value) {
+    return /^#\s*(?:SKS|Sneakoscope)\b.*(?:moved machine-local Codex config|forced fast UI|legacy (?:provider|model|reasoning) lock|managed (?:Codex )?(?:provider|model|reasoning)|codex-lb (?:provider|model|reasoning))/i.test(String(value || '').trim());
+}
 export function scanProjectLocalForbiddenKeys(text) {
     const { signals } = scanTomlSignals(text);
     return [...new Set(signals

package/dist/core/codex-app/menubar/constants.js

@@ -4,7 +4,6 @@ export const CONTROL_CENTER_PREFERRED_POSITION = 360;
 export const SECRET_LAUNCH_ENV_KEYS = ['CODEX_LB_API_KEY', 'OPENROUTER_API_KEY'];
 export const MENU_ITEMS = [
     'Open SKS Control Center',
-    'Open Dashboard',
     'Pending approvals',
     'Check for Updates',
     'View Last Operation',

package/dist/core/codex-app.js

@@ -600,7 +600,7 @@ export function codexAppGuidance({ appInstalled, codex, mcpList, featureList, re
         lines.push(`Browser tooling is visible via ${source}; SKS web verification still gates on the Codex Chrome Extension before proceeding.`);
     }
     if (browserUseReady && !browserUseMcpListed) {
-        lines.push('Browser Use plugin files are installed, but `codex mcp list` does not list a browser-use MCP server. Treat Browser Use as plugin-scoped, not as SKS UI verification evidence.');
+        lines.push('Browser Use plugin files are installed, but `codex mcp list` does not list a browser-use MCP server. Treat Browser Use as plugin-scoped, not as SKS browser verification evidence.');
     }
     if (!lines.length)
         lines.push('Codex App, Codex CLI, Chrome Extension, native Computer Use, Browser tooling, and image generation checks look ready. Web UI E2E uses the Chrome Extension path; native non-web visual evidence uses Computer Use; generated image evidence still requires $imagegen/gpt-image-2 output.');

package/dist/core/codex-compat/codex-release-manifest.js

@@ -3,13 +3,13 @@ import { packageRoot, readJson, readText, sha256 } from '../fsx.js';
 export const CODEX_RELEASE_MANIFEST_SCHEMA = 'sks.codex-release-manifest.v1';
 export const CURRENT_CODEX_RELEASE_MANIFEST = {
     schema: CODEX_RELEASE_MANIFEST_SCHEMA,
-    targetTag: 'rust-v0.144.1',
-    requiredCliVersion: '0.144.1',
-    sdkVersion: '0.144.1',
-    minimumSupportedVersion: '0.144.1',
+    targetTag: 'rust-v0.144.5',
+    requiredCliVersion: '0.144.5',
+    sdkVersion: '0.144.5',
+    minimumSupportedVersion: '0.144.5',
     protocolMode: 'app-server-v2',
     generatedSchemaSha256: '2b3f14fa2e728f77a16385ff39f3a1d85ab255c1020498a85c1c0fb24f3d2f3c',
-    upstreamCommit: 'rust-v0.144.1',
+    upstreamCommit: 'rust-v0.144.5',
     featurePolicies: {
         multiAgentMode: 'probe',
         indexedWebSearch: 'probe',

package/dist/core/codex-control/codex-0139-image-path-real-probe.js

@@ -48,7 +48,7 @@ export async function runCodex0139ImageReferencedPathRealProbe(input) {
     }
     const outputFile = path.join(tempDir, 'last-message.txt');
     const prompt = [
-        'This is a Codex 0.144.1 image path routing probe.',
+        'This is a Codex 0.144.5 image path routing probe.',
         `Only the image file named ${path.basename(inputB)} is intentionally referenced.`,
         `Return compact JSON {"referenced_path":"${inputB.replace(/\\/g, '\\\\')}","saw_image":true}.`,
         'Do not edit files and do not reference any other image path.'

package/dist/core/codex-control/codex-0139-web-search-probe.js

@@ -14,7 +14,7 @@ export async function runCodex0139WebSearchRealProbe(input) {
         return skippedCodex0139Probe('codex_cli_missing');
     const tempDir = path.join(input.root, '.sneakoscope', 'tmp', 'codex-0139-real-probes', `web-search-${Date.now()}`);
     await ensureDir(tempDir);
-    await writeTextAtomic(path.join(tempDir, 'README.md'), 'Temporary Codex 0.144.1 web-search real probe workspace.\n');
+    await writeTextAtomic(path.join(tempDir, 'README.md'), 'Temporary Codex 0.144.5 web-search real probe workspace.\n');
     const outputFile = path.join(tempDir, 'last-message.txt');
     const prompt = 'In code mode, use standalone web search to find the title of https://example.com. Return JSON {"used_web_search":true,"answer":"...","sources":[...]}.';
     const args = buildCodexExecArgs({ root: tempDir, prompt, outputFile, json: true, extraArgs: ['-c', 'mcp_servers={}'] });

package/dist/core/codex-control/codex-control-proof.js

@@ -18,6 +18,7 @@ export async function writeCodexControlProof(root, input) {
         zellij_pane_id: input.task.zellijPaneId || null,
         sdk_thread_id: input.result.sdkThreadId,
         sdk_run_id: input.result.sdkRunId,
+        runtime_identity: input.result.runtimeIdentity || null,
         stream_event_count: input.result.streamEventCount,
         structured_output_valid: input.result.structuredOutputValid,
         output_schema_id: input.task.outputSchemaId,

package/dist/core/codex-control/codex-fake-sdk-adapter.js

@@ -31,7 +31,7 @@ export async function runFakeCodexSdkTask(input) {
 function fakeStructuredOutput(input) {
     if (input.outputSchemaId === GPT_FINAL_ARBITER_RESULT_SCHEMA_ID) {
         const prompt = String(input.prompt || '');
-        const leanEnabled = /\b(Lean review|Lean Engineering Policy|sks\.lean-engineering-policy)\b/i.test(prompt);
+        const leanEnabled = /\b(Core Engineering Directive|sks\.lean-engineering-policy)\b/i.test(prompt);
         const unsafe = /\b(truncate|delete all|drop table|credential|delete validation|validation removed|path traversal|sql injection|secret leak)\b/i.test(prompt);
         const overbuild = leanEnabled ? classifyLeanOverbuild(prompt) : null;
         const status = unsafe ? 'rejected' : overbuild ? 'needs_more_work' : 'approved';

package/dist/core/codex-control/codex-lb-launch-recovery.js

@@ -46,9 +46,8 @@ export async function inspectCodexLbCliLaunchRecovery(input) {
         : configLayer(await readText(projectConfigPath, '').catch(() => ''), 'project');
     const overrides = cliConfigOverrides(args);
     const environmentSelectsCodexLb = env.SKS_PROVIDER === 'codex-lb' || env.SKS_USE_CODEX_LB === '1';
-    // Codex CLI options are the final operator intent. They override SKS's
-    // environment-selected default just as `-c` overrides config.toml.
-    if (cliSelectsLocalProvider(args) || (overrides.modelProvider && overrides.modelProvider !== 'codex-lb')) {
+    // Local-provider CLI options are the final operator intent.
+    if (cliSelectsLocalProvider(args)) {
         return codexLbToolOutputRecoveryNotSelected();
     }
     const loadedLayers = [userConfig, profileConfig, projectConfig];
@@ -60,6 +59,11 @@ export async function inspectCodexLbCliLaunchRecovery(input) {
     if (projectConfig.hasMachineLocalProviderConfig) {
         return projectProviderConfigBlocked();
     }
+    // Explicit model-provider overrides still win over user/profile defaults,
+    // but only after repository-local provider redirects have been rejected.
+    if (overrides.modelProvider && overrides.modelProvider !== 'codex-lb') {
+        return codexLbToolOutputRecoveryNotSelected();
+    }
     const selectedProvider = overrides.modelProvider
         ?? (environmentSelectsCodexLb ? 'codex-lb' : null)
         ?? profileConfig.modelProvider

package/dist/core/codex-control/codex-sdk-adapter.js

@@ -5,7 +5,7 @@ import { buildCodexExecutionPolicy, buildCodexSdkConfig } from './codex-sdk-conf
 import { buildCodexSdkEnv } from './codex-sdk-env-policy.js';
 import { translateCodexSdkEvent } from './codex-event-translator.js';
 import { codexTimeoutClassForRoute } from './codex-reliability-shield.js';
-import { resolveCodexRuntime } from '../codex-runtime/resolve-codex-runtime.js';
+import { resolveOfficialCodexPackageRuntime } from '../codex-runtime/resolve-codex-runtime.js';
 import { codexLbToolCatalogPath, ensureCodexLbToolCatalog, isCodexLbGpt56Model } from '../codex-lb/codex-lb-tool-catalog.js';
 export async function runRealCodexSdkTask(input, policy) {
     if (codexSdkTurnTimeoutMs(input) <= 0) {
@@ -23,16 +23,14 @@ export async function runRealCodexSdkTask(input, policy) {
             raw: { aborted: true, hard_deadline_exceeded: true }
         };
     }
+    const runtime = await resolveCodexSdkRuntime(input);
+    if (!runtime.ok || !runtime.identity) {
+        throw new Error(`Trusted Codex SDK runtime unavailable: ${runtime.blockers.join(',')}`);
+    }
     const mod = await import('@openai/codex-sdk');
     const Codex = mod.Codex || mod.default?.Codex || mod.default;
     if (typeof Codex !== 'function')
         throw new Error('Codex SDK export Codex not found');
-    const runtime = await resolveCodexRuntime({
-        explicitPath: typeof input.requestedScopeContract?.codex_bin === 'string' ? input.requestedScopeContract.codex_bin : null,
-        requestedBy: 'codex-sdk-adapter'
-    });
-    if (!runtime.identity)
-        throw new Error(`Codex runtime not found: ${runtime.blockers.join(',')}`);
     const toolCatalog = await prepareCodexLbToolCatalog(input, policy);
     if (toolCatalog.required && !toolCatalog.ok) {
         return {
@@ -160,6 +158,9 @@ export async function runRealCodexSdkTask(input, policy) {
         raw: { item_count: events.filter((event) => String(event?.type || '').startsWith('item.')).length, tool_catalog: toolCatalog }
     };
 }
+export async function resolveCodexSdkRuntime(_input) {
+    return resolveOfficialCodexPackageRuntime({ requestedBy: 'codex-sdk-adapter' });
+}
 export function codexSdkRuntimePolicies(input) {
     const env = buildCodexSdkEnv(input);
     const config = buildCodexSdkConfig(input);

package/dist/core/codex-control/codex-sdk-config-policy.js

@@ -3,6 +3,10 @@ export function buildCodexSdkConfig(input) {
     const model = String(input.model || process.env.SKS_CODEX_MODEL || process.env.CODEX_MODEL || '').trim();
     const serviceTier = String(input.serviceTier || process.env.SKS_SERVICE_TIER || 'fast');
     const config = {
+        // Internal control-plane work is always native Codex. Ambient proxy
+        // credentials are not provider-selection consent.
+        model_provider: 'openai',
+        forced_login_method: 'chatgpt',
         service_tier: serviceTier === 'standard' ? 'standard' : 'fast',
         model_reasoning_effort: String(input.modelReasoningEffort || input.reasoningEffort || process.env.SKS_CODEX_REASONING || process.env.CODEX_MODEL_REASONING_EFFORT || 'medium'),
         mcp_servers: {},
@@ -20,21 +24,6 @@ export function buildCodexSdkConfig(input) {
         config.mcp_servers = {};
         config.sks = { ...config.sks, no_mcp: true };
     }
-    const codexLbApiKey = String(process.env.CODEX_LB_API_KEY || '').trim();
-    const codexLbBaseUrl = normalizeCodexLbBaseUrl(process.env.CODEX_LB_BASE_URL);
-    if (process.env.SKS_CODEX_LB_AUTOBYPASS !== '1' && codexLbApiKey && codexLbBaseUrl) {
-        config.model_provider = 'codex-lb';
-        config.model_providers = {
-            'codex-lb': {
-                name: 'openai',
-                base_url: codexLbBaseUrl,
-                wire_api: 'responses',
-                env_key: 'CODEX_LB_API_KEY',
-                supports_websockets: true,
-                requires_openai_auth: true
-            }
-        };
-    }
     return config;
 }
 export function buildCodexExecutionPolicy(input) {
@@ -60,12 +49,3 @@ export function redactCodexSdkConfig(config) {
         return value;
     }));
 }
-function normalizeCodexLbBaseUrl(value) {
-    let host = String(value || '').trim();
-    if (!host)
-        return '';
-    if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(host))
-        host = `https://${host}`;
-    host = host.replace(/\/+$/, '');
-    return /\/backend-api\/codex$/i.test(host) ? host : `${host}/backend-api/codex`;
-}