sneakoscope 6.7.0 → 7.0.2

package/dist/native/sks-menubar/Sources/ProvidersViewController.swift

@@ -1,51 +1,121 @@
 import Cocoa
 
-final class ProvidersViewController: NSViewController {
+final class ProvidersViewController: NSViewController, ControlCenterPage {
     private let processClient: ProcessClient
+    private let operations: OperationCoordinator
     private let providerStatus = NativeView.detail("Provider status unchecked.")
     private let fastStatus = NativeView.detail("Fast Mode: checking current desktop setting…")
-    init(processClient: ProcessClient) { self.processClient = processClient; super.init(nibName: nil, bundle: nil) }
+    private var actionButtons: [NSButton] = []
+    private var busy = false
+
+    init(processClient: ProcessClient, operations: OperationCoordinator) {
+        self.processClient = processClient
+        self.operations = operations
+        super.init(nibName: nil, bundle: nil)
+    }
     required init?(coder: NSCoder) { nil }
 
     override func loadView() {
-        let credentials = NSStackView(views: [
-            NativeView.button("Set Domain and Key…", target: self, action: #selector(setDomainAndKey)),
-            NativeView.button("Replace Key…", target: self, action: #selector(replaceKey))
-        ])
+        let setDomain = NativeView.button("Set Domain and Key…", target: self, action: #selector(setDomainAndKey))
+        let replace = NativeView.button("Replace Key…", target: self, action: #selector(replaceKey))
+        let testConnection = NativeView.button("Test Connection", target: self, action: #selector(testConnection))
+        let useOAuth = NativeView.button("Use ChatGPT OAuth", target: self, action: #selector(useOAuth))
+        let useLb = NativeView.button("Use codex-lb", target: self, action: #selector(useCodexLb))
+        let fastOn = NativeView.button("Fast Mode On", target: self, action: #selector(fastOn))
+        let fastOff = NativeView.button("Fast Mode Off", target: self, action: #selector(fastOff))
+        actionButtons = [setDomain, replace, testConnection, useOAuth, useLb, fastOn, fastOff]
+        let credentials = NSStackView(views: [setDomain, replace, testConnection])
         credentials.orientation = .horizontal; credentials.spacing = 8
-        let buttons = NSStackView(views: [
-            NativeView.button("Use ChatGPT OAuth", target: self, action: #selector(useOAuth)),
-            NativeView.button("Use codex-lb", target: self, action: #selector(useCodexLb)),
-            NativeView.button("Fast Mode On", target: self, action: #selector(fastOn)),
-            NativeView.button("Fast Mode Off", target: self, action: #selector(fastOff))
-        ])
+        let buttons = NSStackView(views: [useOAuth, useLb, fastOn, fastOff])
         buttons.orientation = .horizontal; buttons.spacing = 8
         view = NativeView.stack([
             NativeView.title("Providers"),
-            NativeView.detail("Provider changes use typed SKS commands and verified Codex restarts. Credentials stay out of logs and notifications."),
+            NativeView.detail("Set Domain and Key only stores credentials. Domain may be a hostname or full https URL — SKS adds https:// and /backend-api/codex when needed. Use codex-lb activates them with a shared OpenAI routing guard so sk-clb keys never hit api.openai.com. Keys are typed/pasted in clear text here, then sent through stdin and kept out of logs."),
             credentials, providerStatus, fastStatus, buttons
         ])
         refresh()
     }
 
-    private func run(_ args: [String], title: String, completion: (() -> Void)? = nil) {
+    func refreshOnAppear() { refresh() }
+
+    private func setBusy(_ value: Bool) {
+        busy = value
+        for button in actionButtons { button.isEnabled = !value }
+    }
+
+    private func run(_ args: [String], title: String, kind: String, group: String?, timeout: TimeInterval = NativeView.mutationTimeout, completion: (() -> Void)? = nil) {
+        guard !busy else {
+            providerStatus.stringValue = "Another provider action is already running."
+            return
+        }
+        guard let snapshot = operations.begin(kind: kind, mutationGroup: group, summary: title) else {
+            providerStatus.stringValue = "Another guarded mutation is already running. Wait or open Diagnostics."
+            return
+        }
+        setBusy(true)
         providerStatus.stringValue = "\(title)…"
-        processClient.run(args) { [weak self] result in
-            self?.providerStatus.stringValue = result.code == 0 ? "\(title) complete." : "\(title) failed. See Diagnostics."
+        _ = operations.update(snapshot, state: .running, stage: "running", progress: nil, summary: title)
+        processClient.run(args, timeout: timeout) { [weak self] result in
+            guard let self = self else { return }
+            self.setBusy(false)
+            _ = self.operations.update(
+                snapshot,
+                state: result.code == 0 ? .succeeded : .failed,
+                stage: "complete",
+                progress: 1,
+                summary: result.code == 0 ? "\(title) completed" : "\(title) failed"
+            )
+            if result.code != 0 {
+                self.providerStatus.stringValue = "\(title) failed · \(NativeView.redactPreview(result.output))"
+            }
+            self.refresh()
             completion?()
         }
     }
 
     private func refresh() {
-        processClient.run(["codex-lb", "status", "--json"]) { [weak self] result in
-            self?.providerStatus.stringValue = result.code == 0 ? "Provider status loaded." : "Provider status unavailable."
+        processClient.run(["codex-lb", "status", "--json"], timeout: NativeView.statusTimeout) { [weak self] result in
+            guard let self = self else { return }
+            guard result.code == 0, let json = self.json(result.output) else {
+                if !self.busy { self.providerStatus.stringValue = "Provider status unavailable. Retry or open Diagnostics." }
+                return
+            }
+            if !self.busy { self.providerStatus.stringValue = self.describeProviderStatus(json) }
         }
         refreshFastStatus()
     }
 
+    private func describeProviderStatus(_ json: [String: Any]) -> String {
+        let configured = json["provider_configured"] as? Bool == true
+        let selected = json["selected"] as? Bool == true
+        let ok = json["ok"] as? Bool == true
+        let authMode = json["auth_mode"] as? String ?? "unknown"
+        let coherent = json["auth_routing_coherent"] as? Bool
+        let routing = json["shared_openai_routing"] as? [String: Any]
+        let routingSafe = routing?["safe"] as? Bool
+        let keyInShared = json["codex_lb_key_in_shared_auth"] as? Bool == true
+
+        if !configured {
+            return "Codex LB: not configured. Use Set Domain and Key, then Use codex-lb."
+        }
+        if routingSafe == false || (keyInShared && coherent == false) {
+            return "Codex LB: routing unsafe — shared key can hit api.openai.com. Click Use codex-lb to repair."
+        }
+        if selected && ok {
+            return "Codex LB: active (auth=\(authMode), routing guarded)."
+        }
+        if selected && !ok {
+            return "Codex LB: selected but not ready. Click Use codex-lb or Test Connection."
+        }
+        if keyInShared {
+            return "Codex LB: credentials in shared auth but provider not selected. Click Use ChatGPT OAuth or Use codex-lb."
+        }
+        return "Codex LB: credentials stored, not selected (auth=\(authMode)). Click Use codex-lb to activate."
+    }
+
     private func refreshFastStatus() {
-        fastStatus.stringValue = "Fast Mode: checking current desktop setting…"
-        processClient.run(["fast-mode", "status", "--json"]) { [weak self] result in
+        if !busy { fastStatus.stringValue = "Fast Mode: checking current desktop setting…" }
+        processClient.run(["fast-mode", "status", "--json"], timeout: NativeView.statusTimeout) { [weak self] result in
             guard let self = self else { return }
             guard result.code == 0, let json = self.json(result.output),
                   let global = json["global"] as? [String: Any], let on = global["on"] as? Bool else {
@@ -64,29 +134,97 @@ final class ProvidersViewController: NSViewController {
 
     @objc private func setDomainAndKey() {
         guard let window = view.window else { return }
-        AlertFactory.textSheet(window: window, title: "Codex LB Domain", message: "Enter a codex-lb domain or base URL.") { [weak self] host in
+        AlertFactory.textSheet(
+            window: window,
+            title: "Codex LB Domain",
+            message: "Enter a hostname or full base URL. https:// is optional — SKS adds https:// and /backend-api/codex when missing.\nExamples: lb.example.com  or  https://lb.example.com",
+            secure: false,
+            placeholder: "https://lb.example.com"
+        ) { [weak self] host in
             guard let self = self, let host = host else { return }
-            self.promptForKey(window: window, args: ["codex-lb", "setup", "--host", host, "--api-key-stdin", "--yes", "--no-default-provider", "--preserve-auth", "--no-keychain", "--no-restart-app", "--json"])
+            self.promptForKey(window: window, args: ["codex-lb", "setup", "--host", host, "--api-key-stdin", "--yes", "--no-default-provider", "--preserve-auth", "--no-keychain", "--no-restart-app", "--json"], kind: "codex-lb-setup", title: "Save Codex LB credentials")
         }
     }
 
     @objc private func replaceKey() {
         guard let window = view.window else { return }
-        promptForKey(window: window, args: ["codex-lb", "set-key", "--api-key-stdin", "--preserve-auth", "--restart-app", "--json"])
+        promptForKey(window: window, args: ["codex-lb", "set-key", "--api-key-stdin", "--preserve-auth", "--restart-app", "--json"], kind: "codex-lb-set-key", title: "Replace Codex LB API key")
     }
 
-    private func promptForKey(window: NSWindow, args: [String]) {
-        AlertFactory.textSheet(window: window, title: "Codex LB API Key", message: "Paste a new key. It is sent through stdin and never shown again.", secure: true) { [weak self] key in
+    private func promptForKey(window: NSWindow, args: [String], kind: String, title: String) {
+        AlertFactory.textSheet(
+            window: window,
+            title: "Codex LB API Key",
+            message: "Paste your Codex LB API key (usually starts with sk-clb-). It is shown here so you can verify the paste, then sent through stdin and never logged.",
+            secure: false,
+            placeholder: "sk-clb-…"
+        ) { [weak self] key in
             guard let self = self, let key = key else { return }
+            guard !self.busy else {
+                self.providerStatus.stringValue = "Another provider action is already running."
+                return
+            }
+            guard let snapshot = self.operations.begin(kind: kind, mutationGroup: "codex-config", summary: title) else {
+                self.providerStatus.stringValue = "Another guarded mutation is already running. Wait or open Diagnostics."
+                return
+            }
+            self.setBusy(true)
             self.providerStatus.stringValue = "Saving Codex LB API key…"
-            self.processClient.run(args, stdin: key + "\n") { [weak self] result in
-                self?.providerStatus.stringValue = result.code == 0 ? "Codex LB API key saved." : "Codex LB API key save failed. See Diagnostics."
+            _ = self.operations.update(snapshot, state: .running, stage: "running", progress: nil, summary: title)
+            self.processClient.run(args, stdin: key + "\n", timeout: NativeView.mutationTimeout) { [weak self] result in
+                guard let self = self else { return }
+                self.setBusy(false)
+                _ = self.operations.update(
+                    snapshot,
+                    state: result.code == 0 ? .succeeded : .failed,
+                    stage: "complete",
+                    progress: 1,
+                    summary: result.code == 0 ? "Codex LB API key saved" : "Codex LB API key save failed"
+                )
+                if result.code != 0 {
+                    self.providerStatus.stringValue = "Codex LB API key save failed · \(NativeView.redactPreview(result.output))"
+                }
+                self.refresh()
+            }
+        }
+    }
+
+    @objc private func testConnection() {
+        guard !busy else {
+            providerStatus.stringValue = "Another provider action is already running."
+            return
+        }
+        guard let snapshot = operations.begin(kind: "codex-lb-health", mutationGroup: nil, summary: "Test Codex LB connection") else {
+            providerStatus.stringValue = "Another guarded mutation is already running. Wait or open Diagnostics."
+            return
+        }
+        setBusy(true)
+        providerStatus.stringValue = "Testing Codex LB connection…"
+        _ = operations.update(snapshot, state: .running, stage: "running", progress: nil, summary: "Test Codex LB connection")
+        processClient.run(["codex-lb", "health", "--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
+            guard let self = self else { return }
+            self.setBusy(false)
+            let json = self.json(result.output)
+            let ok = result.code == 0 && (json?["ok"] as? Bool == true)
+            let status = json?["status"] as? String ?? (result.code == 0 ? "ok" : "failed")
+            _ = self.operations.update(
+                snapshot,
+                state: ok ? .succeeded : .failed,
+                stage: "complete",
+                progress: 1,
+                summary: ok ? "Codex LB connection ok" : "Codex LB connection failed"
+            )
+            if ok {
+                self.providerStatus.stringValue = "Connection test passed (\(status))."
+            } else {
+                self.providerStatus.stringValue = "Connection test failed (\(status)) · \(NativeView.redactPreview(result.output))"
             }
+            self.refresh()
         }
     }
 
-    @objc private func useOAuth() { run(["codex-lb", "use-oauth", "--restart-app", "--json"], title: "Use ChatGPT OAuth") }
-    @objc private func useCodexLb() { run(["codex-lb", "use-codex-lb", "--restart-app", "--json"], title: "Use codex-lb") }
-    @objc private func fastOn() { run(["fast-mode", "on", "--json"], title: "Fast Mode On") { [weak self] in self?.refreshFastStatus() } }
-    @objc private func fastOff() { run(["fast-mode", "off", "--json"], title: "Fast Mode Off") { [weak self] in self?.refreshFastStatus() } }
+    @objc private func useOAuth() { run(["codex-lb", "use-oauth", "--restart-app", "--json"], title: "Use ChatGPT OAuth", kind: "codex-lb-use-oauth", group: "codex-config") }
+    @objc private func useCodexLb() { run(["codex-lb", "use-codex-lb", "--restart-app", "--json"], title: "Use codex-lb", kind: "codex-lb-use-lb", group: "codex-config") }
+    @objc private func fastOn() { run(["fast-mode", "on", "--json"], title: "Fast Mode On", kind: "fast-mode-on", group: "codex-config", timeout: NativeView.statusTimeout) { [weak self] in self?.refreshFastStatus() } }
+    @objc private func fastOff() { run(["fast-mode", "off", "--json"], title: "Fast Mode Off", kind: "fast-mode-off", group: "codex-config", timeout: NativeView.statusTimeout) { [weak self] in self?.refreshFastStatus() } }
 }

package/dist/native/sks-menubar/Sources/RemoteTelegramViewController.swift

@@ -1,61 +1,96 @@
 import Cocoa
 
-final class RemoteTelegramViewController: NSViewController {
+final class RemoteTelegramViewController: NSViewController, ControlCenterPage {
     private let processClient: ProcessClient
     private let status = NativeView.detail("Remote readiness has not been checked.")
     private var generation = 0
+    private var checkButton: NSButton!
+
     init(processClient: ProcessClient) { self.processClient = processClient; super.init(nibName: nil, bundle: nil) }
     required init?(coder: NSCoder) { nil }
 
     override func loadView() {
-        let refresh = NativeView.button("Check Readiness", target: self, action: #selector(check))
+        checkButton = NativeView.button("Check Readiness", target: self, action: #selector(check))
         view = NativeView.stack([
             NativeView.title("Remote & Telegram"),
             NativeView.detail("OpenAI Remote remains the high-fidelity coding surface. Telegram is limited to proof-aware fleet status and typed approvals; arbitrary remote shell is never enabled."),
-            status, refresh
+            status, checkButton
         ])
         check()
     }
 
+    func refreshOnAppear() { check() }
+
     @objc private func check() {
         generation += 1
         let requestGeneration = generation
+        checkButton?.isEnabled = false
         status.stringValue = "Checking official Remote compatibility and Telegram Hub state…"
         var remote: [String: Any]?
         var telegram: [String: Any]?
+        var remoteFailed = false
+        var telegramFailed = false
         let group = DispatchGroup()
         group.enter()
-        processClient.run(["remote", "readiness", "--project-root", AppRuntime.projectRoot, "--json"]) { [weak self] result in
+        processClient.run(["remote", "readiness", "--project-root", AppRuntime.projectRoot, "--json"], timeout: NativeView.statusTimeout) { [weak self] result in
             remote = self?.json(result.output)
+            remoteFailed = result.code != 0 || remote == nil
             group.leave()
         }
         group.enter()
-        processClient.run(["telegram", "status", "--project-root", AppRuntime.projectRoot, "--json"]) { [weak self] result in
-            telegram = self?.json(result.output)
+        processClient.run(["telegram", "status", "--project-root", AppRuntime.projectRoot, "--json"], timeout: NativeView.statusTimeout) { [weak self] result in
+            telegram = result.code == 0 ? self?.json(result.output) : nil
+            telegramFailed = result.code != 0 || telegram == nil
             group.leave()
         }
         group.notify(queue: .main) { [weak self] in
             guard let self = self, self.generation == requestGeneration else { return }
-            self.status.stringValue = self.summary(remote: remote, telegram: telegram)
+            self.checkButton?.isEnabled = true
+            self.status.stringValue = self.summary(remote: remote, telegram: telegram, remoteFailed: remoteFailed, telegramFailed: telegramFailed)
         }
     }
 
-    private func summary(remote: [String: Any]?, telegram: [String: Any]?) -> String {
-        let host = remote?["host"] as? [String: Any]
-        let project = remote?["project"] as? [String: Any]
-        let mcp = remote?["mcp"] as? [String: Any]
-        let sks = remote?["sks"] as? [String: Any]
-        let remoteBlockers = remote?["blockers"] as? [String] ?? []
-        let remoteWarnings = remote?["warnings"] as? [String] ?? []
-        let owner = telegram?["owner"] as? [String: Any]
-        let telegramIssues = (telegram?["config_issues"] as? [String] ?? []) + (telegram?["remote_config_issues"] as? [String] ?? [])
-        let lines = [
-            "Official Remote compatibility: \(remote?["ok"] as? Bool == true ? "Ready" : "Needs attention") · Codex app \(host?["codex_app_found"] as? Bool == true ? "found" : "missing") · CLI \(host?["codex_cli_found"] as? Bool == true ? "found" : "missing")",
-            "Project: Git \(project?["git_repo"] as? Bool == true ? "ready" : "missing") · worktree \(project?["worktree"] as? Bool == true ? "yes" : "no") · dirty \(project?["dirty"] as? Bool == true ? "yes" : "no") · allowlist \(project?["allowed"] as? Bool == true ? "ready" : "blocked")",
-            "MCP: \(mcp?["effective_count"] as? Int ?? 0) effective · \(mcp?["failed_count"] as? Int ?? 0) failed · SKS proof \(sks?["proof_surfaces_ready"] as? Bool == true ? "ready" : "missing")",
-            "Telegram Hub: \(owner == nil ? "Stopped" : "Running") · \(telegram?["topic_count"] as? Int ?? 0) topics · \(telegram?["machine_count"] as? Int ?? 0) machines · \(telegram?["target_count"] as? Int ?? 0) targets",
-            "Remote blockers \(remoteBlockers.count) · warnings \(remoteWarnings.count) · Telegram issues \(telegramIssues.count)"
-        ]
+    private func summary(remote: [String: Any]?, telegram: [String: Any]?, remoteFailed: Bool, telegramFailed: Bool) -> String {
+        if remoteFailed && telegramFailed {
+            return "Remote readiness and Telegram status are unavailable. Retry Check Readiness, or open Diagnostics for the redacted log."
+        }
+        var lines: [String] = []
+        if remoteFailed || remote == nil {
+            lines.append("Official Remote compatibility: unavailable — probe failed or returned no readable JSON.")
+        } else if let remote = remote {
+            let host = remote["host"] as? [String: Any]
+            let project = remote["project"] as? [String: Any]
+            let mcp = remote["mcp"] as? [String: Any]
+            let sks = remote["sks"] as? [String: Any]
+            let remoteBlockers = remote["blockers"] as? [String] ?? []
+            let remoteWarnings = remote["warnings"] as? [String] ?? []
+            lines.append("Official Remote compatibility: \(remote["ok"] as? Bool == true ? "Ready" : "Needs attention") · Codex app \(host?["codex_app_found"] as? Bool == true ? "found" : "missing") · CLI \(host?["codex_cli_found"] as? Bool == true ? "found" : "missing")")
+            lines.append("Project: Git \(project?["git_repo"] as? Bool == true ? "ready" : "missing") · worktree \(project?["worktree"] as? Bool == true ? "yes" : "no") · dirty \(project?["dirty"] as? Bool == true ? "yes" : "no") · allowlist \(project?["allowed"] as? Bool == true ? "ready" : "blocked")")
+            lines.append("MCP: \(mcp?["effective_count"] as? Int ?? 0) effective · \(mcp?["failed_count"] as? Int ?? 0) failed · SKS proof \(sks?["proof_surfaces_ready"] as? Bool == true ? "ready" : "missing")")
+            if !remoteBlockers.isEmpty {
+                lines.append("Remote blockers: \(remoteBlockers.prefix(3).joined(separator: "; "))\(remoteBlockers.count > 3 ? "…" : "")")
+            } else if !remoteWarnings.isEmpty {
+                lines.append("Remote warnings: \(remoteWarnings.prefix(3).joined(separator: "; "))\(remoteWarnings.count > 3 ? "…" : "")")
+            } else {
+                lines.append("Remote blockers 0 · warnings 0")
+            }
+        }
+
+        if telegramFailed || telegram == nil {
+            lines.append("Telegram Hub: unavailable — status probe failed.")
+            lines.append("Remote fleet: unavailable until Telegram status succeeds.")
+        } else if let telegram = telegram {
+            let owner = telegram["owner"] as? [String: Any]
+            let configured = telegram["configured"] as? Bool
+            let hubState = owner != nil ? "Running" : configured == true ? "Stopped" : configured == false ? "Not configured" : "Unknown"
+            let telegramIssues = (telegram["config_issues"] as? [String] ?? []) + (telegram["remote_config_issues"] as? [String] ?? [])
+            lines.append("Telegram Hub: \(hubState) · \(telegram["topic_count"] as? Int ?? 0) topics · \(telegram["machine_count"] as? Int ?? 0) machines · \(telegram["target_count"] as? Int ?? 0) targets")
+            if telegramIssues.isEmpty {
+                lines.append("Telegram issues 0")
+            } else {
+                lines.append("Telegram issues \(telegramIssues.count): \(telegramIssues.prefix(2).joined(separator: "; "))\(telegramIssues.count > 2 ? "…" : "")")
+            }
+        }
         return lines.joined(separator: "\n")
     }
 

package/dist/native/sks-menubar/Sources/SettingsViewController.swift

@@ -1,6 +1,6 @@
 import Cocoa
 
-final class SettingsViewController: NSViewController {
+final class SettingsViewController: NSViewController, ControlCenterPage {
     private let notifications: NotificationCoordinator
     private let quitWithCodex = NSButton(checkboxWithTitle: "Quit SKS Menu when Codex quits (otherwise hide)", target: nil, action: nil)
     private let status = NativeView.detail("Settings use the native app configuration file.")
@@ -10,26 +10,60 @@ final class SettingsViewController: NSViewController {
     override func loadView() {
         quitWithCodex.target = self; quitWithCodex.action = #selector(save)
         quitWithCodex.state = readConfig()["quit_with_codex"] as? Bool == true ? .on : .off
+        quitWithCodex.setAccessibilityLabel("Quit SKS Menu when Codex quits")
         let authorize = NativeView.button("Enable Notifications", target: self, action: #selector(enableNotifications))
         view = NativeView.stack([
             NativeView.title("Settings"),
-            NativeView.detail("Use system typography, focus behavior, notification authorization, and explicit consequential changes."),
+            NativeView.detail("These options stay on this Mac. Notification permission and Codex lifecycle behavior never leave the machine."),
             quitWithCodex, authorize, status
         ])
+        refreshOnAppear()
     }
 
-    @objc private func enableNotifications() { notifications.requestAuthorizationFromSettings(); status.stringValue = "Notification authorization was requested from macOS." }
+    func refreshOnAppear() {
+        quitWithCodex.state = readConfig()["quit_with_codex"] as? Bool == true ? .on : .off
+        if notifications.authorizationDenied {
+            status.stringValue = "Notifications are denied in macOS Settings. Operation results still appear in Control Center."
+        } else if FileManager.default.fileExists(atPath: AppRuntime.configPath) {
+            status.stringValue = "Settings loaded from the native app configuration file."
+        } else {
+            status.stringValue = "No settings file yet. Changing an option creates one with owner-only permissions."
+        }
+    }
+
+    @objc private func enableNotifications() {
+        notifications.requestAuthorizationFromSettings()
+        status.stringValue = "Notification authorization was requested from macOS."
+    }
 
     @objc private func save() {
         var config = readConfig()
         config["schema"] = "sks.sks-menubar-config.v1"
         config["codex_bundle_id"] = AppRuntime.codexBundleId as Any
         config["quit_with_codex"] = quitWithCodex.state == .on
-        guard JSONSerialization.isValidJSONObject(config), let data = try? JSONSerialization.data(withJSONObject: config, options: [.prettyPrinted]) else { return }
+        guard JSONSerialization.isValidJSONObject(config), let data = try? JSONSerialization.data(withJSONObject: config, options: [.prettyPrinted]) else {
+            status.stringValue = "Settings could not be encoded."
+            return
+        }
         let target = URL(fileURLWithPath: AppRuntime.configPath)
-        let temporary = target.deletingLastPathComponent().appendingPathComponent(".config.\(UUID().uuidString).tmp")
-        do { try data.write(to: temporary, options: .atomic); _ = try FileManager.default.replaceItemAt(target, withItemAt: temporary); status.stringValue = "Settings saved." }
-        catch { status.stringValue = "Settings could not be saved." }
+        let directory = target.deletingLastPathComponent()
+        let temporary = directory.appendingPathComponent(".config.\(UUID().uuidString).tmp")
+        do {
+            try FileManager.default.createDirectory(at: directory, withIntermediateDirectories: true)
+            try data.write(to: temporary, options: .atomic)
+            if FileManager.default.fileExists(atPath: target.path) {
+                _ = try FileManager.default.replaceItemAt(target, withItemAt: temporary)
+            } else {
+                try FileManager.default.moveItem(at: temporary, to: target)
+            }
+            try FileManager.default.setAttributes([.posixPermissions: 0o600], ofItemAtPath: target.path)
+            status.stringValue = quitWithCodex.state == .on
+                ? "Saved. SKS Menu will quit when Codex quits."
+                : "Saved. SKS Menu will hide when Codex quits."
+        } catch {
+            try? FileManager.default.removeItem(at: temporary)
+            status.stringValue = "Settings could not be saved. Confirm \(directory.path) is writable."
+        }
     }
 
     private func readConfig() -> [String: Any] {

package/dist/native/sks-menubar/Sources/StatusItemController.swift

@@ -93,6 +93,7 @@ final class StatusItemController: NSObject, NSMenuDelegate {
     }
 
     private func refreshLocalState() {
+        hydrateFromLatestOperation()
         let update = readJson(path: FileManager.default.homeDirectoryForCurrentUser
             .appendingPathComponent(".sneakoscope-global/cache/update-status.json").path)
         let sksUpdate = ((update?["sks"] as? [String: Any])?["update_available"] as? Bool) == true
@@ -101,18 +102,45 @@ final class StatusItemController: NSObject, NSMenuDelegate {
         let signatureBroken = menuBar?["signature_ok"] as? Bool == false
         let resourcesBroken = menuBar?["resources_ok"] as? Bool == false
         let integrityBroken = signatureBroken || resourcesBroken || !FileManager.default.fileExists(atPath: AppRuntime.buildStampPath)
+        let pendingCount = operations.latestSnapshot()?.state == .waitingForConfirmation ? 1 : 0
+        pendingLine.title = "Pending approvals (\(pendingCount))"
         let icon: SKSStatusIcon
         let summary: String
         if integrityBroken { icon = .warning; summary = "Needs attention — Menu Bar integrity" }
         else if operationFailed { icon = .warning; summary = "Needs attention — last operation failed" }
-        else if actionRequired || notificationAuthorizationDenied { icon = .attention; summary = notificationAuthorizationDenied ? "Notifications require attention" : "Input or approval required" }
+        else if actionRequired || notificationAuthorizationDenied || pendingCount > 0 {
+            icon = .attention
+            summary = notificationAuthorizationDenied ? "Notifications require attention" : pendingCount > 0 ? "Input or approval required" : "Input or approval required"
+        }
         else if sksUpdate || codexUpdate { icon = .updateAvailable; summary = "Update available" }
         else if operationRunning { icon = .working; summary = "Working" }
         else { icon = .healthy; summary = "Healthy" }
-        apply(icon)
+        apply(icon, summary: summary)
         statusLine.title = "Status: \(summary)"
     }
 
+    private func hydrateFromLatestOperation() {
+        guard let latest = operations.latestSnapshot() else { return }
+        switch latest.state {
+        case .queued, .running:
+            operationRunning = true
+            operationFailed = false
+            actionRequired = false
+        case .waitingForConfirmation:
+            operationRunning = false
+            operationFailed = false
+            actionRequired = true
+        case .failed, .terminalUncertain:
+            operationRunning = false
+            operationFailed = true
+            actionRequired = false
+        case .succeeded, .cancelled:
+            operationRunning = false
+            operationFailed = false
+            actionRequired = false
+        }
+    }
+
     private func refreshExpiredUpdateStatusIfNeeded() {
         let update = readJson(path: FileManager.default.homeDirectoryForCurrentUser
             .appendingPathComponent(".sneakoscope-global/cache/update-status.json").path)
@@ -190,7 +218,7 @@ final class StatusItemController: NSObject, NSMenuDelegate {
         return expiry <= now
     }
 
-    private func apply(_ state: SKSStatusIcon) {
+    private func apply(_ state: SKSStatusIcon, summary: String) {
         let pair: (String, String)
         switch state {
         case .healthy: pair = ("SKSStatusTemplate", "checkmark.circle")
@@ -201,6 +229,9 @@ final class StatusItemController: NSObject, NSMenuDelegate {
         }
         statusItem.button?.image = AppIdentity.statusImage(resource: pair.0, symbol: pair.1)
         statusItem.button?.imagePosition = .imageOnly
+        statusItem.button?.setAccessibilityLabel("SKS status")
+        statusItem.button?.setAccessibilityValue(summary)
+        statusItem.button?.toolTip = "SKS Control Center — \(summary)"
     }
 
     private func run(_ arguments: [String], kind: String, mutationGroup: String?, summary: String, completion: (() -> Void)? = nil) {