sneakoscope 7.0.2 → 7.0.3

package/dist/native/sks-menubar/Sources/ProvidersViewController.swift

@@ -1,6 +1,17 @@
 import Cocoa
 
 final class ProvidersViewController: NSViewController, ControlCenterPage {
+    private struct CodexLbReadiness {
+        let selected: Bool
+        let providerReady: Bool
+        let authRoutingCoherent: Bool
+        let sharedOpenAiRoutingSafe: Bool
+
+        var ready: Bool {
+            selected && providerReady && authRoutingCoherent && sharedOpenAiRoutingSafe
+        }
+    }
+
     private let processClient: ProcessClient
     private let operations: OperationCoordinator
     private let providerStatus = NativeView.detail("Provider status unchecked.")
@@ -19,7 +30,7 @@ final class ProvidersViewController: NSViewController, ControlCenterPage {
         let setDomain = NativeView.button("Set Domain and Key…", target: self, action: #selector(setDomainAndKey))
         let replace = NativeView.button("Replace Key…", target: self, action: #selector(replaceKey))
         let testConnection = NativeView.button("Test Connection", target: self, action: #selector(testConnection))
-        let useOAuth = NativeView.button("Use ChatGPT OAuth", target: self, action: #selector(useOAuth))
+        let useOAuth = NativeView.button("Restore Chat / Pro (OAuth)", target: self, action: #selector(useOAuth))
         let useLb = NativeView.button("Use codex-lb", target: self, action: #selector(useCodexLb))
         let fastOn = NativeView.button("Fast Mode On", target: self, action: #selector(fastOn))
         let fastOff = NativeView.button("Fast Mode Off", target: self, action: #selector(fastOff))
@@ -30,7 +41,7 @@ final class ProvidersViewController: NSViewController, ControlCenterPage {
         buttons.orientation = .horizontal; buttons.spacing = 8
         view = NativeView.stack([
             NativeView.title("Providers"),
-            NativeView.detail("Set Domain and Key only stores credentials. Domain may be a hostname or full https URL — SKS adds https:// and /backend-api/codex when needed. Use codex-lb activates them with a shared OpenAI routing guard so sk-clb keys never hit api.openai.com. Keys are typed/pasted in clear text here, then sent through stdin and kept out of logs."),
+            NativeView.detail("Saving stores credentials only. Use codex-lb activates them with a routing guard so sk-clb keys cannot reach api.openai.com. Keys travel through stdin and stay out of logs."),
             credentials, providerStatus, fastStatus, buttons
         ])
         refresh()
@@ -86,25 +97,23 @@ final class ProvidersViewController: NSViewController, ControlCenterPage {
     }
 
     private func describeProviderStatus(_ json: [String: Any]) -> String {
-        let configured = json["provider_configured"] as? Bool == true
-        let selected = json["selected"] as? Bool == true
-        let ok = json["ok"] as? Bool == true
-        let authMode = json["auth_mode"] as? String ?? "unknown"
-        let coherent = json["auth_routing_coherent"] as? Bool
-        let routing = json["shared_openai_routing"] as? [String: Any]
-        let routingSafe = routing?["safe"] as? Bool
-        let keyInShared = json["codex_lb_key_in_shared_auth"] as? Bool == true
+        let codexLb = codexLbPayload(json)
+        let configured = codexLb["provider_configured"] as? Bool == true
+        let readiness = codexLbReadiness(codexLb)
+        let ok = codexLb["ok"] as? Bool == true
+        let authMode = codexLb["auth_mode"] as? String ?? "unknown"
+        let keyInShared = codexLb["codex_lb_key_in_shared_auth"] as? Bool == true
 
         if !configured {
             return "Codex LB: not configured. Use Set Domain and Key, then Use codex-lb."
         }
-        if routingSafe == false || (keyInShared && coherent == false) {
+        if !readiness.sharedOpenAiRoutingSafe || (keyInShared && !readiness.authRoutingCoherent) {
             return "Codex LB: routing unsafe — shared key can hit api.openai.com. Click Use codex-lb to repair."
         }
-        if selected && ok {
-            return "Codex LB: active (auth=\(authMode), routing guarded)."
+        if readiness.ready && ok {
+            return "Codex LB: active (auth=\(authMode), routing guarded). Restore Chat / Pro switches to ChatGPT OAuth."
         }
-        if selected && !ok {
+        if readiness.selected && (!readiness.providerReady || !ok) {
             return "Codex LB: selected but not ready. Click Use codex-lb or Test Connection."
         }
         if keyInShared {
@@ -113,6 +122,125 @@ final class ProvidersViewController: NSViewController, ControlCenterPage {
         return "Codex LB: credentials stored, not selected (auth=\(authMode)). Click Use codex-lb to activate."
     }
 
+    private func codexLbPayload(_ json: [String: Any]) -> [String: Any] {
+        if let codexLb = json["codex_lb"] as? [String: Any] { return codexLb }
+        return json
+    }
+
+    private func codexLbReadiness(_ codexLb: [String: Any]) -> CodexLbReadiness {
+        let sharedOpenAiRouting = codexLb["shared_openai_routing"] as? [String: Any]
+        return CodexLbReadiness(
+            selected: codexLb["selected"] as? Bool == true,
+            providerReady: codexLb["provider_ready"] as? Bool == true,
+            authRoutingCoherent: codexLb["auth_routing_coherent"] as? Bool == true,
+            sharedOpenAiRoutingSafe: sharedOpenAiRouting?["safe"] as? Bool == true
+        )
+    }
+
+    private func modelSelectionSummary(_ json: [String: Any]) -> String? {
+        guard let modelSelection = json["model_selection"] as? [String: Any] else { return nil }
+        let model = modelSelection["model"] as? String
+        let source = modelSelection["source"] as? String
+        if let model = model, !model.isEmpty, let source = source, !source.isEmpty {
+            return "model \(model) via \(source)"
+        }
+        if let model = model, !model.isEmpty { return "model \(model)" }
+        return nil
+    }
+
+    private func structuredReason(_ json: [String: Any], codexLb: [String: Any], readiness: CodexLbReadiness) -> String {
+        if codexLb["env_key_configured"] as? Bool != true { return "API key is missing" }
+        if (codexLb["base_url"] as? String)?.isEmpty != false { return "base URL is missing" }
+        if let status = json["status"] as? String,
+           ["transport_blocked", "first_request_failed", "missing_response_id", "second_request_failed", "previous_response_not_found", "tool_output_recovery_blocked"].contains(status) {
+            return status.replacingOccurrences(of: "_", with: " ")
+        }
+        if !readiness.selected { return "saved credentials are not selected" }
+        if !readiness.providerReady { return "provider configuration is not ready" }
+        if !readiness.authRoutingCoherent { return "provider and authentication routing disagree" }
+        if !readiness.sharedOpenAiRoutingSafe { return "shared OpenAI routing guard is unsafe" }
+        if let reason = json["reason"] as? String, !reason.isEmpty { return reason.replacingOccurrences(of: "_", with: " ") }
+        return "response-chain verification did not pass"
+    }
+
+    private func nextAction(status: String, codexLb: [String: Any], readiness: CodexLbReadiness) -> String {
+        let credentialsSaved = codexLb["env_key_configured"] as? Bool == true
+            && (codexLb["base_url"] as? String)?.isEmpty == false
+        if status == "not_configured" {
+            return credentialsSaved
+                ? "click Use codex-lb to activate the saved credentials"
+                : "click Set Domain and Key"
+        }
+        if status == "missing_env_key" || status == "missing_base_url" || !credentialsSaved {
+            return "click Set Domain and Key"
+        }
+        if status == "model_unselected" { return "select a Codex model, then retry" }
+        if !readiness.ready { return "click Use codex-lb; if it still fails, open Diagnostics" }
+        return "verify the domain, key, and network, then retry"
+    }
+
+    private func describeConnectionResult(_ json: [String: Any], processCode: Int32) -> (ok: Bool, message: String) {
+        let codexLb = codexLbPayload(json)
+        let readiness = codexLbReadiness(codexLb)
+        let chainOk = processCode == 0 && json["ok"] as? Bool == true
+        let status = json["status"] as? String ?? (processCode == 0 ? "unknown" : "command_failed")
+        let model = modelSelectionSummary(json).map { " · \($0)" } ?? ""
+        if chainOk {
+            if readiness.ready {
+                return (true, "Connection test passed (\(status)) · provider ready · routing safe\(model).")
+            }
+            return (true, "Connection test passed (\(status)) · saved credentials reached codex-lb\(model) · Activation required: click Use codex-lb.")
+        }
+        let reason = structuredReason(json, codexLb: codexLb, readiness: readiness)
+        let next = nextAction(status: status, codexLb: codexLb, readiness: readiness)
+        return (false, "Connection test: \(status) · Reason: \(reason) · Next: \(next)\(model).")
+    }
+
+    private func describeActivationResult(_ activation: [String: Any]?, status: [String: Any]?, activationCode: Int32, statusCode: Int32) -> (ok: Bool, message: String) {
+        let authoritative = status ?? activation ?? [:]
+        let codexLb = codexLbPayload(authoritative)
+        let readiness = codexLbReadiness(codexLb)
+        let activationOk = activationCode == 0 && activation?["ok"] as? Bool == true
+        let postRestart = activation?["post_restart"] as? [String: Any]
+        let activationStatus = postRestart?["status"] as? String
+            ?? activation?["status"] as? String
+            ?? (activationCode == 0 ? "unknown" : "command_failed")
+        let postStatusOk = status == nil ? activationOk : statusCode == 0
+        let ready = activationOk && postStatusOk && readiness.ready
+        if ready {
+            return (true, "Use codex-lb: active after restart · provider, auth, and routing ready.")
+        }
+        let reason = structuredReason(authoritative, codexLb: codexLb, readiness: readiness)
+        let next = nextAction(status: activationStatus, codexLb: codexLb, readiness: readiness)
+        return (false, "Use codex-lb: \(activationStatus) · Reason: \(reason) · Next: \(next).")
+    }
+
+    private func describeOAuthResult(_ json: [String: Any]?, processCode: Int32) -> (ok: Bool, message: String) {
+        let noSwitch = "No OAuth switch was assumed."
+        guard let json = json else {
+            return (false, "Restore Chat / Pro failed · Invalid JSON. Retry or open Diagnostics. \(noSwitch)")
+        }
+        let status = json["status"] as? String ?? (processCode == 0 ? "unknown" : "command_failed")
+        let mode = json["mode"] as? String
+        let restartRequired = json["restart_required"] as? Bool == true
+        let restartPerformed = json["restart_performed"] as? Bool == true
+        let commandOk = processCode == 0 && json["ok"] as? Bool == true
+        let ok = commandOk && mode == "oauth" && restartRequired && restartPerformed
+        if ok {
+            return (true, "Chat / Pro restored with ChatGPT OAuth · Codex App restarted · codex-lb credentials kept.")
+        }
+        if status == "no_backup" {
+            return (false, "Restore Chat / Pro failed (no_backup) · Run codex login, then retry. \(noSwitch)")
+        }
+        if status == "auth_in_use" {
+            return (false, "Restore Chat / Pro failed (auth_in_use) · Open Diagnostics; auth was not replaced. \(noSwitch)")
+        }
+        if !restartPerformed {
+            return (false, "Restore Chat / Pro failed (restart_not_performed) · Retry, then reopen Codex App. \(noSwitch)")
+        }
+        return (false, "Restore Chat / Pro failed (\(status)) · Retry or open Diagnostics. \(noSwitch)")
+    }
+
     private func refreshFastStatus() {
         if !busy { fastStatus.stringValue = "Fast Mode: checking current desktop setting…" }
         processClient.run(["fast-mode", "status", "--json"], timeout: NativeView.statusTimeout) { [weak self] result in
@@ -204,27 +332,85 @@ final class ProvidersViewController: NSViewController, ControlCenterPage {
         processClient.run(["codex-lb", "health", "--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
             guard let self = self else { return }
             self.setBusy(false)
-            let json = self.json(result.output)
-            let ok = result.code == 0 && (json?["ok"] as? Bool == true)
-            let status = json?["status"] as? String ?? (result.code == 0 ? "ok" : "failed")
+            let parsed = self.json(result.output)
+            let outcome = parsed.map { self.describeConnectionResult($0, processCode: result.code) }
+                ?? (ok: false, message: "Connection test: invalid response · Reason: health output was not structured JSON · Next: retry or open Diagnostics.")
             _ = self.operations.update(
                 snapshot,
-                state: ok ? .succeeded : .failed,
+                state: outcome.ok ? .succeeded : .failed,
                 stage: "complete",
                 progress: 1,
-                summary: ok ? "Codex LB connection ok" : "Codex LB connection failed"
+                summary: outcome.ok ? "Codex LB connection ready" : "Codex LB connection needs action"
             )
-            if ok {
-                self.providerStatus.stringValue = "Connection test passed (\(status))."
-            } else {
-                self.providerStatus.stringValue = "Connection test failed (\(status)) · \(NativeView.redactPreview(result.output))"
-            }
-            self.refresh()
+            self.providerStatus.stringValue = outcome.message
         }
     }
 
-    @objc private func useOAuth() { run(["codex-lb", "use-oauth", "--restart-app", "--json"], title: "Use ChatGPT OAuth", kind: "codex-lb-use-oauth", group: "codex-config") }
-    @objc private func useCodexLb() { run(["codex-lb", "use-codex-lb", "--restart-app", "--json"], title: "Use codex-lb", kind: "codex-lb-use-lb", group: "codex-config") }
+    @objc private func useOAuth() {
+        guard !busy else {
+            providerStatus.stringValue = "Another provider action is already running."
+            return
+        }
+        guard let snapshot = operations.begin(kind: "codex-lb-use-oauth", mutationGroup: "codex-config", summary: "Restore Chat / Pro") else {
+            providerStatus.stringValue = "Another guarded mutation is already running. Wait or open Diagnostics."
+            return
+        }
+        setBusy(true)
+        providerStatus.stringValue = "Restoring Chat / Pro with ChatGPT OAuth and restarting Codex App…"
+        _ = operations.update(snapshot, state: .running, stage: "switching", progress: nil, summary: "Restore Chat / Pro")
+        processClient.run(["codex-lb", "use-oauth", "--restart-app", "--json"], timeout: NativeView.mutationTimeout) { [weak self] result in
+            guard let self = self else { return }
+            self.setBusy(false)
+            let outcome = self.describeOAuthResult(self.json(result.output), processCode: result.code)
+            _ = self.operations.update(
+                snapshot,
+                state: outcome.ok ? .succeeded : .failed,
+                stage: "complete",
+                progress: 1,
+                summary: outcome.ok ? "Chat / Pro restored after restart" : "Chat / Pro restore needs action"
+            )
+            self.providerStatus.stringValue = outcome.message
+            self.refreshFastStatus()
+        }
+    }
+    @objc private func useCodexLb() {
+        guard !busy else {
+            providerStatus.stringValue = "Another provider action is already running."
+            return
+        }
+        guard let snapshot = operations.begin(kind: "codex-lb-use-lb", mutationGroup: "codex-config", summary: "Use codex-lb") else {
+            providerStatus.stringValue = "Another guarded mutation is already running. Wait or open Diagnostics."
+            return
+        }
+        setBusy(true)
+        providerStatus.stringValue = "Activating codex-lb and restarting Codex App…"
+        _ = operations.update(snapshot, state: .running, stage: "activating", progress: nil, summary: "Use codex-lb")
+        processClient.run(["codex-lb", "use-codex-lb", "--restart-app", "--json"], timeout: NativeView.mutationTimeout) { [weak self] activationResult in
+            guard let self = self else { return }
+            let activationJson = self.json(activationResult.output)
+            _ = self.operations.update(snapshot, state: .running, stage: "verifying", progress: nil, summary: "Verify codex-lb after restart")
+            self.providerStatus.stringValue = "Verifying codex-lb readiness after restart…"
+            self.processClient.run(["codex-lb", "status", "--json"], timeout: NativeView.statusTimeout) { [weak self] statusResult in
+                guard let self = self else { return }
+                self.setBusy(false)
+                let statusJson = self.json(statusResult.output)
+                let outcome = self.describeActivationResult(
+                    activationJson,
+                    status: statusJson,
+                    activationCode: activationResult.code,
+                    statusCode: statusResult.code
+                )
+                _ = self.operations.update(
+                    snapshot,
+                    state: outcome.ok ? .succeeded : .failed,
+                    stage: "complete",
+                    progress: 1,
+                    summary: outcome.ok ? "codex-lb active after restart" : "codex-lb activation needs action"
+                )
+                self.providerStatus.stringValue = outcome.message
+            }
+        }
+    }
     @objc private func fastOn() { run(["fast-mode", "on", "--json"], title: "Fast Mode On", kind: "fast-mode-on", group: "codex-config", timeout: NativeView.statusTimeout) { [weak self] in self?.refreshFastStatus() } }
     @objc private func fastOff() { run(["fast-mode", "off", "--json"], title: "Fast Mode Off", kind: "fast-mode-off", group: "codex-config", timeout: NativeView.statusTimeout) { [weak self] in self?.refreshFastStatus() } }
 }

package/dist/native/sks-menubar/Sources/UpdatesViewController.swift

@@ -6,13 +6,16 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
     private let operations: OperationCoordinator
     private let notifications: NotificationCoordinator
     private let status = NativeView.detail("Update status has not been checked yet.")
+    private let codexUpdateStatus = NativeView.detail("Codex CLI update has not been run yet.")
     private let stageStatus = NativeView.detail("Update stages: no update receipt recorded yet.")
     private let remediation = NativeView.detail("Remediation and rollback guidance will appear here when needed.")
     private let progress = NSProgressIndicator()
     private var receiptTimer: Timer?
     private var activeReceiptId: String?
     private var checkButton: NSButton!
+    private var codexUpdateButton: NSButton!
     private var reviewButton: NSButton!
+    private var refreshSharedSnapshotOnNextReload = false
     private var busy = false
 
     init(processClient: ProcessClient, operations: OperationCoordinator, notifications: NotificationCoordinator) {
@@ -26,13 +29,16 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
         progress.controlSize = .small
         progress.isHidden = true
         checkButton = NativeView.button("Check Now", target: self, action: #selector(checkNow))
+        codexUpdateButton = NativeView.button("Update Codex CLI", target: self, action: #selector(updateCodexCLI))
+        codexUpdateButton.setAccessibilityHelp("Update the operator Codex CLI using its verified installation method.")
         reviewButton = NativeView.button("Review and Update", target: self, action: #selector(reviewAndUpdate))
-        let buttons = NSStackView(views: [checkButton, reviewButton, progress])
+        codexUpdateStatus.setAccessibilityLabel("Codex CLI update result")
+        let buttons = NSStackView(views: [checkButton, codexUpdateButton, reviewButton, progress])
         buttons.orientation = .horizontal; buttons.spacing = 8
         view = NativeView.stack([
             NativeView.title("Updates"),
             NativeView.detail("SKS, Codex CLI, and Menu Bar status share one local snapshot. Network refresh only runs on demand or after expiry."),
-            status, stageStatus, remediation, buttons,
+            status, codexUpdateStatus, stageStatus, remediation, buttons,
             NativeView.detail("Rollback guidance and the previous Menu Bar app remain available if final verification fails. The update receipt records the exact recovery command and stage state.")
         ])
         loadCached()
@@ -49,11 +55,21 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
     private func setBusy(_ value: Bool) {
         busy = value
         checkButton?.isEnabled = !value
+        codexUpdateButton?.isEnabled = !value
         reviewButton?.isEnabled = !value
     }
 
     @objc private func checkNow() { run(["update", "status", "--refresh", "--json"], kind: "update-status", group: nil) }
 
+    @objc private func updateCodexCLI() {
+        run(["codex", "update", "--json"], kind: "codex-cli-update", group: "update") { [weak self] result in
+            guard let self = self else { return }
+            self.renderCodexUpdate(result: result)
+            self.refreshSharedSnapshotOnNextReload = true
+            self.reloadSnapshot()
+        }
+    }
+
     @objc private func reviewAndUpdate() {
         run(["update", "review", "--json"], kind: "update-review", group: nil) { [weak self] result in
             guard let self = self else { return }
@@ -99,12 +115,13 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
         _ = operations.update(operation, state: .running, stage: "running", progress: nil, summary: status.stringValue)
         if kind == "update" { startReceiptPolling(for: operation) }
         let environment = kind == "update" ? Self.controlCenterUpdateEnvironment : [:]
-        let timeout: TimeInterval? = kind == "update" ? nil : NativeView.mutationTimeout
+        let timeout: TimeInterval? = kind == "update" || kind == "codex-cli-update" ? nil : NativeView.mutationTimeout
         processClient.run(args, environment: environment, timeout: timeout) { [weak self] result in
             guard let self = self else { return }
             self.stopReceiptPolling()
             self.progress.stopAnimation(nil); self.progress.isHidden = true
             self.setBusy(false)
+            let codexUpdateSucceeded = kind == "codex-cli-update" && self.codexUpdateResultIsSuccessful(result)
             var authoritativeState: OperationState?
             var restartMenuBarAfterCompletion = false
             if kind == "update" {
@@ -129,10 +146,20 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
                     self.remediation.stringValue = "Remediation: open the last operation log and run sks update status --refresh --json before retrying or rolling back."
                 }
             } else {
-                let state: OperationState = kind == "update-review" && result.code == 0 ? .waitingForConfirmation : result.code == 0 ? .succeeded : .failed
-                _ = self.operations.update(operation, state: state, stage: state == .waitingForConfirmation ? "confirmation" : "complete", progress: 1, summary: state == .waitingForConfirmation ? "Update review is waiting for confirmation" : result.code == 0 ? "Update operation completed" : "Update operation failed")
+                let state: OperationState
+                if kind == "update-review" && result.code == 0 { state = .waitingForConfirmation }
+                else if kind == "codex-cli-update" { state = codexUpdateSucceeded ? .succeeded : .failed }
+                else { state = result.code == 0 ? .succeeded : .failed }
+                let summary = state == .waitingForConfirmation
+                    ? "Update review is waiting for confirmation"
+                    : state == .succeeded ? "Update operation completed" : "Update operation failed"
+                _ = self.operations.update(operation, state: state, stage: state == .waitingForConfirmation ? "confirmation" : "complete", progress: 1, summary: summary)
                 if result.code != 0 {
-                    self.status.stringValue = "\(kind.replacingOccurrences(of: "-", with: " ").capitalized) failed · \(NativeView.redactPreview(result.output))"
+                    self.status.stringValue = kind == "codex-cli-update"
+                        ? "Codex CLI update failed. Structured guidance is shown below."
+                        : "\(kind.replacingOccurrences(of: "-", with: " ").capitalized) failed · \(NativeView.redactPreview(result.output))"
+                } else if kind == "codex-cli-update" && !codexUpdateSucceeded {
+                    self.status.stringValue = "Codex CLI update returned an unreadable or unsuccessful result. No success state was assumed."
                 } else if state == .waitingForConfirmation {
                     self.status.stringValue = "Review ready. Confirm to continue, or cancel to leave the current install unchanged."
                 }
@@ -140,7 +167,9 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
             let updateOutput = kind == "update-status" ? result.output : nil
             let approvalRequired = kind == "update-review" && result.code == 0
             let updateAvailable = updateOutput != nil && NotificationCoordinator.updateIsAvailable(in: result.output)
-            let authoritativeFailure = kind == "update" ? authoritativeState != .succeeded : result.code != 0
+            let authoritativeFailure = kind == "update"
+                ? authoritativeState != .succeeded
+                : kind == "codex-cli-update" ? !codexUpdateSucceeded : result.code != 0
             let terminalUncertain = kind == "update" && authoritativeState == .terminalUncertain
             let notificationTitle: String
             let notificationBody: String
@@ -154,11 +183,15 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
                 notificationTitle = "SKS update outcome is uncertain"
                 notificationBody = "The authoritative update receipt could not confirm completion. Open Control Center before retrying or rolling back."
             } else if authoritativeFailure {
-                notificationTitle = "SKS update needs attention"
-                notificationBody = "The authoritative update state did not complete successfully. Open Control Center for redacted remediation."
+                notificationTitle = kind == "codex-cli-update" ? "Codex CLI update needs attention" : "SKS update needs attention"
+                notificationBody = kind == "codex-cli-update"
+                    ? "The Codex CLI update did not complete successfully. Open Control Center for structured guidance."
+                    : "The authoritative update state did not complete successfully. Open Control Center for redacted remediation."
             } else {
-                notificationTitle = "SKS update operation completed"
-                notificationBody = "The authoritative update receipt confirmed completion."
+                notificationTitle = kind == "codex-cli-update" ? "Codex CLI update completed" : "SKS update operation completed"
+                notificationBody = kind == "codex-cli-update"
+                    ? "The operator Codex CLI update completed and its shared update status is refreshing."
+                    : "The authoritative update receipt confirmed completion."
             }
             self.notifications.send(PublicNotificationEvent(
                 category: NotificationCoordinator.categoryIdentifier(updateStatusOutput: updateOutput, failed: authoritativeFailure, actionRequired: approvalRequired),
@@ -192,7 +225,57 @@ final class UpdatesViewController: NSViewController, ControlCenterPage {
     }
 
     private func reloadSnapshot() {
-        processClient.run(["update", "status", "--json"], timeout: NativeView.statusTimeout) { [weak self] result in self?.render(statusResult: result) }
+        let args = refreshSharedSnapshotOnNextReload
+            ? ["update", "status", "--refresh", "--json"]
+            : ["update", "status", "--json"]
+        refreshSharedSnapshotOnNextReload = false
+        let timeout = args.contains("--refresh") ? NativeView.mutationTimeout : NativeView.statusTimeout
+        processClient.run(args, timeout: timeout) { [weak self] result in self?.render(statusResult: result) }
+    }
+
+    private func codexUpdateResultIsSuccessful(_ result: ProcessResult) -> Bool {
+        guard result.code == 0,
+              !result.truncated,
+              let data = result.output.data(using: .utf8),
+              let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any],
+              json["schema"] as? String == "sks.codex-cli-update-result.v1" else { return false }
+        return json["ok"] as? Bool == true
+    }
+
+    private func renderCodexUpdate(result: ProcessResult) {
+        guard !result.truncated,
+              let data = result.output.data(using: .utf8),
+              let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any],
+              json["schema"] as? String == "sks.codex-cli-update-result.v1" else {
+            codexUpdateStatus.stringValue = result.code == 0
+                ? "Codex CLI update returned invalid structured output. No success state was assumed."
+                : "Codex CLI update failed without readable structured guidance. Open Diagnostics for the redacted log."
+            return
+        }
+
+        let ok = result.code == 0 && json["ok"] as? Bool == true
+        let resultStatus = (json["status"] as? String ?? "unknown").replacingOccurrences(of: "_", with: " ")
+        let method = (json["update_method"] as? String ?? "unknown").replacingOccurrences(of: "-", with: " ")
+        let before = json["before_version"] as? String
+        let after = json["after_version"] as? String
+        let blockers = json["blockers"] as? [String] ?? []
+        let guidance = json["guidance"] as? [String] ?? []
+        var lines: [String] = []
+
+        if ok {
+            let version: String
+            if let before = before, let after = after, before != after { version = "\(before) → \(after)" }
+            else { version = after ?? before ?? "version unavailable" }
+            lines.append("Codex CLI update: \(resultStatus) · \(version) · method \(method).")
+            if !guidance.isEmpty { lines.append("Follow-up: \(guidance.joined(separator: " "))") }
+        } else {
+            lines.append("Codex CLI update: \(resultStatus) · no success state was assumed.")
+            if !blockers.isEmpty { lines.append("Blockers: \(blockers.joined(separator: "; "))") }
+            lines.append(guidance.isEmpty
+                ? "Next step: open Diagnostics for the redacted log before retrying."
+                : "Next steps: \(guidance.joined(separator: " "))")
+        }
+        codexUpdateStatus.stringValue = lines.joined(separator: "\n")
     }
 
     private func render(statusResult result: ProcessResult) {

package/dist/scripts/agent-message-bus-reader-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';

package/dist/scripts/all-feature-deep-completion-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import path from 'node:path';
 import { assertGate, emitGate, requireContains, root, runSksJson } from './sks-1-12-real-execution-check-lib.js';

package/dist/scripts/appshots-thread-attachment-discovery-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import path from 'node:path';
 import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';

package/dist/scripts/architecture-guard-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';

package/dist/scripts/build-dist.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import path from 'node:path';

package/dist/scripts/build-once-runner-check.js

@@ -1,4 +1,3 @@
-// @ts-nocheck
 import { assertGate, emitGate, importDist, readText } from './sks-1-18-gate-lib.js';
 const src = readText('src/core/build/build-once-runner.ts');
 assertGate(src.includes('.sks-build-proof.json') && src.includes('build:incremental'), 'build-once runner must write dist proof and use incremental build', src.slice(0, 500));

package/dist/scripts/canonical-test-runner.js

@@ -55,8 +55,6 @@ const cleanup = async () => {
     do {
         lastError = removeScratchSync();
         if (!lastError) {
-            // A just-terminated test descendant can recreate its temp directory a
-            // moment after the first rm. Require a short no-recreation window.
             await delay(100);
             if (!fs.existsSync(scratch))
                 return null;

package/dist/scripts/certificate-sla-check.js

@@ -1,4 +1,3 @@
-// @ts-nocheck
 import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
 const graphMod = await importDist('core/triwiki/triwiki-affected-graph.js');
 const certMod = await importDist('core/triwiki/triwiki-sla-certificate.js');

package/dist/scripts/changelog-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';

package/dist/scripts/check-cli-entrypoint.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs/promises';
 import path from 'node:path';
 const root = process.cwd();

package/dist/scripts/check-command-module-budget.js

@@ -37,13 +37,6 @@ console.log('Command module budget check passed');
 function changedFileStats() {
     const out = new Map();
     const headFiles = new Set(gitLines(['ls-tree', '-r', '--name-only', 'HEAD', '--', 'src/core/commands']));
-    // One numstat process gives us enough information to reconstruct the
-    // baseline line count for every tracked command module. The old per-file
-    // `git show` loop spawned roughly sixty processes and could exceed the
-    // 15-second gate timeout when the canonical test runner was saturated.
-    // Disable rename collapsing so the current destination remains an exact
-    // path. A destination absent from HEAD is conservatively treated as new,
-    // matching the old `git show HEAD:<path>` behavior.
     for (const line of gitLines(['diff', '--no-renames', '--numstat', 'HEAD', '--', 'src/core/commands'])) {
         const [addedRaw, deletedRaw, ...pathParts] = line.split('\t');
         const relPath = normalize(pathParts.join('\t'));

package/dist/scripts/check-feature-quality.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import { buildFeatureRegistry, runtimeRoutesNotStaticContract } from '../core/feature-registry.js';
 import { FEATURE_QUALITY_LEVELS, validateFeatureFixtures } from '../core/feature-fixtures.js';
 import { packageRoot } from '../core/fsx.js';

package/dist/scripts/check-legacy-free.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs/promises';
 import path from 'node:path';
 const root = process.cwd();

package/dist/scripts/check-pipeline-runtime.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import path from 'node:path';
 const root = process.cwd();

package/dist/scripts/check-runtime-schemas.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';

package/dist/scripts/codex-0-134-runner-truth-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';

package/dist/scripts/codex-0-137-compat-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';

package/dist/scripts/codex-0138-capability-artifact-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';

package/dist/scripts/codex-0138-capability-check.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-// @ts-nocheck
 import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
 process.env.SKS_CODEX_0138_FAKE = '1';
 process.env.SKS_CODEX_VERSION_FAKE = 'codex-cli 0.138.0';