sneakoscope 7.0.3 → 7.1.0

package/README.md

@@ -6,6 +6,10 @@
 
 Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, multi-agent workflows, release verification, and the macOS menu bar.
 
+<p align="center">
+  <img src="docs/assets/sks-logo.svg" alt="Sneakoscope Codex logo" width="160" height="160" />
+</p>
+
 [![npm version](https://img.shields.io/npm/v/sneakoscope?color=cb3837&logo=npm)](https://www.npmjs.com/package/sneakoscope)
 [![node](https://img.shields.io/badge/node-%3E%3D20.11-339933?logo=node.js&logoColor=white)](#requirements)
 [![license](https://img.shields.io/badge/license-MIT-blue)](#license)
@@ -18,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current release: **SKS 7.0.3**, with the package compatibility baseline pinned to **Codex CLI 0.144.5**. It fixes codex-lb readiness, preserves provider/auth/model state across `sks update`, restores explicit Chat/Pro OAuth recovery, and adds a guarded Codex CLI updater that discovers newer stable operator releases independently. Prerelease `0.145.0-alpha` artifacts remain excluded from the pinned release contract. See [CHANGELOG.md](CHANGELOG.md).
+Current release: **SKS 7.1.0**, with the package preferred Codex channel at **CLI 0.145.0**. SKS stays version-agnostic: older hosts keep working where capabilities allow, while Menu Bar / Center induce updates to the preferred latest. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps current-version Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it. See [CHANGELOG.md](CHANGELOG.md).
 
 ## What 7.0.0 Ships
 
@@ -66,13 +70,13 @@ The SKS menu bar shows the installed Codex CLI version and latest known version.
 
 `$sks-naruto` and `sks naruto run "task" --agents 8 --max-threads 12` use Codex official subagents. Standalone and Codex App tasks that request project-host database, spreadsheet, or render tools require the non-persistent `--trusted-project` flag after the operator reviews the checkout; an App session ID scopes evidence but does not grant trust. The parent is GPT-5.6 Sol Max. Tiny mechanical `worker` slices use Luna Max; ordinary UI, logic, backend, and native coding uses Sol High; review, testing, debugging, architecture, integration, security, database, research, release, and other judgment-sensitive work uses Sol Max; long-context scans and direct Computer Use, Browser/Chrome, or image-generation execution uses Terra Medium. Mixed execution/judgment work is split when possible, and unsplittable judgment defaults to Sol Max.
 
-Fresh SKS-owned project config uses `max_threads = 12`, `max_depth = 1`, `job_max_runtime_seconds = 1200`, and `interrupt_message = true`. `max_depth = 1` means subagents cannot spawn nested subagents. Explicit user limits are preserved, and larger requests run in waves.
+Fresh SKS-owned project config enables Codex 0.145+ multi-agent V2 with `agents.max_concurrent_threads_per_session = 12`, `features.multi_agent_v2.max_concurrent_threads_per_session = 13`, `max_depth = 1`, and `interrupt_message = true`. Nested delegation remains forbidden. Explicit user limits are preserved, and larger requests run in waves.
 
 Gates are task-profile aware: greetings and answer-only turns create no mission gate; tiny work gets minimal verification; parallel work gets scoped ownership and verification; high-risk work keeps the full safety gates. `SubagentStart`/`SubagentStop` prove lifecycle only. Completion also requires `subagent-parent-summary.json` with one trustworthy structured outcome per thread, correlated with `subagent-events.jsonl` and `subagent-evidence.json`.
 
 Every installed Codex hook runs one common Naruto decision gate. The gate records `none`, `generic_naruto`, or `route_owned`: Answer, DFix, Wiki, Computer Use, Goal, and simple Git/control turns stay lightweight; ordinary non-trivial work defaults to two independent official subagents; critical work spanning at least three risk domains may use three. Research, AutoResearch, and QA-Loop retain their own exact orchestration contracts instead of receiving a second generic fan-out. Explicit `--agents N` remains authoritative.
 
-SKS installs twenty-five narrow project custom agents, including native AppKit, toolchain, protocol, runtime-reliability, TriWiki-evidence, long-context, Computer Use, Browser/Chrome, and image-generation specialists. Delegation prompts inject at most the three roles recommended for the current goal rather than serializing the full catalog, so expanding role coverage does not serialize the full inventory into every prompt. TriWiki context is also bounded and query-aware: ordinary work receives up to four trust/hydration anchors and complex, parallel, or high-risk work receives up to six, with source hydration required before relying on lower-trust hints. In CLI Zellij mode, the right side is a live observability surface rather than a static lane reservation: one monitor plus one viewport by default (maximum three) shows official thread role/model, redacted live phase/task/file updates from rollout-compatible Codex 0.144.1+ sessions while the current release baseline remains 0.144.5, plus `running`, `verifying`, and trustworthy parent-verdict completion/failure states. Rollout activity is display-only and never completion proof.
+SKS installs twenty-five narrow project custom agents, including native AppKit, toolchain, protocol, runtime-reliability, TriWiki-evidence, long-context, Computer Use, Browser/Chrome, and image-generation specialists. Delegation prompts inject at most the three roles recommended for the current goal rather than serializing the full catalog, so expanding role coverage does not serialize the full inventory into every prompt. TriWiki context is also bounded and query-aware: ordinary work receives up to four trust/hydration anchors and complex, parallel, or high-risk work receives up to six, with source hydration required before relying on lower-trust hints. In CLI Zellij mode, the right side is a live observability surface rather than a static lane reservation: one monitor plus one viewport by default (maximum three) shows official thread role/model, redacted live phase/task/file updates from rollout-compatible Codex 0.144.1+ sessions while the current release baseline remains 0.145.0, plus `running`, `verifying`, and trustworthy parent-verdict completion/failure states. Rollout activity is display-only and never completion proof.
 
 Official subagent requests use `--agents`; removed scheduler, pool, backend, and model flags fail closed.
 

package/config/codex-releases/{rust-v0.144.5.json → rust-v0.145.0.json}

@@ -1,14 +1,18 @@
 {
   "schema": "sks.codex-release-manifest.v1",
-  "targetTag": "rust-v0.144.5",
-  "requiredCliVersion": "0.144.5",
-  "sdkVersion": "0.144.5",
-  "minimumSupportedVersion": "0.144.5",
+  "targetTag": "rust-v0.145.0",
+  "requiredCliVersion": "0.145.0",
+  "preferredCliVersion": "0.145.0",
+  "sdkVersion": "0.145.0",
+  "minimumSupportedVersion": "0.133.0",
+  "narutoCapabilityFloorVersion": "0.145.0",
   "protocolMode": "app-server-v2",
-  "generatedSchemaSha256": "2b3f14fa2e728f77a16385ff39f3a1d85ab255c1020498a85c1c0fb24f3d2f3c",
-  "upstreamCommit": "rust-v0.144.5",
+  "generatedSchemaSha256": "57b4a85429300c37f2f2e5fc8662c3dbeb88d51419e25becb8501c46348e1ecf",
+  "upstreamCommit": "rust-v0.145.0",
   "featurePolicies": {
-    "multiAgentMode": "probe",
+    "multiAgentMode": "delegate",
+    "multiAgentV2": "delegate",
+    "agentsMaxConcurrentThreads": "delegate",
     "indexedWebSearch": "probe",
     "currentTimeRead": "wrap",
     "threadListSearchRead": "probe",
@@ -16,7 +20,9 @@
     "terminalSubagentErrorPropagation": "probe",
     "execMcpTransientRecovery": "probe",
     "remoteNativeEnvironment": "probe",
-    "rolloutTokenBudget": "probe"
+    "rolloutTokenBudget": "probe",
+    "mcpStartupToolTimeouts": "wrap",
+    "gpt56TerraLunaSolRouting": "delegate"
   },
   "requiredRealProbes": [
     "runtime_identity",

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "7.0.3"
+version = "7.1.0"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "7.0.3"
+version = "7.1.0"
 edition = "2021"
 
 [dependencies]

package/dist/cli/command-manifest-lite.js

@@ -16,7 +16,7 @@ export const COMMAND_MANIFEST_LITE = [
     { name: 'update', summary: 'Inspect, review, apply, or roll back the global SKS update', maturity: 'stable' },
     { name: 'uninstall', summary: 'Uninstall SKS global skills, hooks, config, menu bar, and optional project residue', maturity: 'stable', allowedDuringActiveRoute: true },
     { name: 'update-check', summary: 'Show the shared SKS, Codex CLI, and Menu Bar update status', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
-    { name: 'mcp', summary: 'Manage scoped Codex MCP configuration', maturity: 'beta' },
+    { name: 'mcp', summary: 'Manage scoped Codex MCP configuration', maturity: 'beta', skipMigrationGate: true },
     { name: 'wizard', summary: 'Open setup wizard help', maturity: 'stable' },
     { name: 'usage', summary: 'Show focused usage topic', maturity: 'stable', readonly: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'quickstart', summary: 'Show quickstart flow', maturity: 'stable' },
@@ -34,7 +34,7 @@ export const COMMAND_MANIFEST_LITE = [
     { name: 'codex-app', summary: 'Check Codex App readiness', maturity: 'beta' },
     { name: 'codex-native', summary: 'Inspect Codex Native broker and routing readiness', maturity: 'beta' },
     { name: 'codex-lb', summary: 'Inspect codex-lb status and circuit health', maturity: 'beta' },
-    { name: 'menubar', summary: 'Inspect/install/restart/uninstall SKS menu bar', maturity: 'beta', allowedDuringActiveRoute: true, diagnostic: true },
+    { name: 'menubar', summary: 'Inspect/install/restart/uninstall SKS menu bar', maturity: 'beta', skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'remote', summary: 'Inspect official Remote readiness and run the proof-aware SSH stdio worker', maturity: 'beta' },
     { name: 'telegram', summary: 'Inspect and run the private proof-aware Telegram Hub', maturity: 'beta' },
     { name: 'hooks', summary: 'Explain and inspect Codex hooks', maturity: 'beta', skipMigrationGate: true },
@@ -45,7 +45,6 @@ export const COMMAND_MANIFEST_LITE = [
     { name: 'zellij-slot-column-anchor', summary: 'Render the compact SLOTS anchor pane for first-slot-down Zellij stacks', maturity: 'beta' },
     { name: 'zellij', summary: 'Inspect Zellij runtime status and explain repair (no auto-install)', maturity: 'beta', skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'mad-sks', summary: 'MAD-SKS scoped permission modifier + SQL-plane execution', maturity: 'beta', mutatesRouteState: true },
-    { name: 'glm', summary: 'Run GLM 5.2 MAD mode through OpenRouter', maturity: 'beta' },
     { name: 'auto-review', summary: 'Manage auto-review profile', maturity: 'beta' },
     { name: 'dollar-commands', summary: 'List Codex App dollar commands', maturity: 'stable', readonly: true, skipMigrationGate: true, allowedDuringActiveRoute: true, diagnostic: true },
     { name: 'fast-mode', summary: 'Toggle SKS Fast mode default for dollar-command routes', maturity: 'stable', skipMigrationGate: true },

package/dist/cli/command-registry.js

@@ -135,7 +135,7 @@ const COMMAND_DEFINITIONS = {
         activeRoutePolicy: 'always'
     }),
     'update-check': readOnly(entry('stable', 'Show the shared SKS, Codex CLI, and Menu Bar update status', 'dist/core/commands/basic-cli.js', basicArgs('updateCheckCommand'))),
-    mcp: entry('beta', 'Manage scoped Codex MCP configuration', 'dist/core/commands/mcp-config-command.js', argsCommand(() => import('../core/commands/mcp-config-command.js'), 'mcpConfigCommand', 'dist/core/commands/mcp-config-command.js')),
+    mcp: skipMigrationGate(entry('beta', 'Manage scoped Codex MCP configuration', 'dist/core/commands/mcp-config-command.js', argsCommand(() => import('../core/commands/mcp-config-command.js'), 'mcpConfigCommand', 'dist/core/commands/mcp-config-command.js'))),
     wizard: entry('stable', 'Open setup wizard help', 'dist/core/commands/basic-cli.js', basicNoArgs('quickstartCommand')),
     usage: readOnly(entry('stable', 'Show focused usage topic', 'dist/core/commands/basic-cli.js', basicArgs('usageCommand'))),
     quickstart: entry('stable', 'Show quickstart flow', 'dist/core/commands/basic-cli.js', basicNoArgs('quickstartCommand')),
@@ -164,7 +164,6 @@ const COMMAND_DEFINITIONS = {
     'zellij-slot-column-anchor': entry('beta', 'Render the compact SLOTS anchor pane for first-slot-down Zellij stacks', 'dist/commands/zellij-slot-column-anchor.js', directCommand(() => import('../commands/zellij-slot-column-anchor.js'), 'dist/commands/zellij-slot-column-anchor.js')),
     zellij: activeRouteDiagnostic(entry('beta', 'Inspect Zellij runtime status and explain repair (no auto-install)', 'dist/commands/zellij.js', directCommand(() => import('../commands/zellij.js'), 'dist/commands/zellij.js'))),
     'mad-sks': routeStateMutator(entry('beta', 'MAD-SKS scoped permission modifier + SQL-plane execution', 'dist/commands/mad-sks.js', directCommand(() => import('../commands/mad-sks.js'), 'dist/commands/mad-sks.js')), ['mad-sks-gate.json']),
-    glm: entry('beta', 'Run GLM 5.2 MAD mode through OpenRouter', 'dist/core/commands/glm-command.js', argsCommand(() => import('../core/commands/glm-command.js'), 'glmCommand', 'dist/core/commands/glm-command.js')),
     'auto-review': entry('beta', 'Manage auto-review profile', 'dist/commands/auto-review.js', directCommand(() => import('../commands/auto-review.js'), 'dist/commands/auto-review.js')),
     'dollar-commands': entry('stable', 'List Codex App dollar commands', 'dist/core/commands/basic-cli.js', basicArgs('dollarCommandsCommand')),
     'fast-mode': skipMigrationGate(entry('stable', 'Toggle SKS Fast mode default for dollar-command routes', 'dist/core/commands/fast-mode-command.js', argsCommand(() => import('../core/commands/fast-mode-command.js'), 'fastModeCommand', 'dist/core/commands/fast-mode-command.js'))),
@@ -235,7 +234,6 @@ export const COMMANDS = applyCommandContractOverrides(COMMAND_DEFINITIONS, {
         risk: 'R1', latency: 'long', supportsJson: true, remoteAllowed: true, telegramAllowed: true,
         inputProfile: 'gates', requiredCapabilities: ['project.git', 'proof.gates']
     },
-    glm: { latency: 'long' },
     harness: { latency: 'long' },
     'image-ux-review': { latency: 'long' },
     loop: { latency: 'long' },

package/dist/cli/global-mode-router.js

@@ -17,18 +17,11 @@ const RETIRED_GLOBAL_EXECUTION_OPTION_NAMES = new Set([
     '--mad-swarm-backend',
     '--mad-swarm-prompt',
     '--tmux-smoke',
-    '--require-tmux-smoke'
+    '--require-tmux-smoke',
+    '--glm'
 ]);
 export function detectGlobalMode(args = []) {
-    if (!args.length || RESERVED_COMMANDS.has(String(args[0])))
-        return null;
-    const hasMad = args.includes('--mad');
-    const hasGlm = args.includes('--glm');
-    if (hasMad && hasGlm)
-        return { kind: 'mad-glm', args: stripGlobalModeFlags(args) };
-    if (hasGlm && !hasMad && String(args[0]).startsWith('-')) {
-        return { kind: 'glm-without-mad', args: stripGlobalModeFlags(args) };
-    }
+    void args;
     return null;
 }
 export function stripGlobalModeFlags(args) {
@@ -50,7 +43,7 @@ export function glmWithoutMadResult() {
         ok: false,
         status: 'blocked',
         mode: 'glm',
-        reason: 'glm_requires_mad',
-        hint: 'use sks --mad --glm'
+        reason: 'glm_mad_removed',
+        hint: 'use SKS Center Providers or sks codex-app use-openrouter --model <id>'
     };
 }

package/dist/cli/install-helpers-codex-lb-config.js

@@ -1,8 +1,9 @@
 import path from 'node:path';
 import os from 'node:os';
 import { ensureDir, readText } from '../core/fsx.js';
-import { GLM_CODEX_CONFIG_PROFILE_ID, GLM_CODEX_CONFIG_PROVIDER_ID, GLM_CODEX_CONFIG_REASONING_PROFILES } from '../core/providers/glm/glm-52-profile.js';
-import { GLM_52_OPENROUTER_MODEL } from '../core/providers/glm/glm-52-settings.js';
+import { GLM_CODEX_CONFIG_PROVIDER_ID, GLM_52_OPENROUTER_MODEL, OPENROUTER_AUTH_COMMAND, OPENROUTER_AUTH_REFRESH_INTERVAL_MS, OPENROUTER_AUTH_TIMEOUT_MS, openRouterAuthCommandArgs, OPENROUTER_DEFAULT_PROFILE_ID, RETIRED_GLM_DESKTOP_CONFIG_PROFILE_IDS } from '../core/codex-app/openrouter-provider.js';
+import { openRouterSecretPaths, resolveOpenRouterApiKey } from '../core/providers/openrouter/openrouter-secret-store.js';
+import { reconcileRetiredSksConfigText } from '../core/auto-review.js';
 import { removeTopLevelTomlKeyIfValue, safeWriteCodexConfigToml, upsertTopLevelTomlString, upsertTomlTable } from '../core/codex-runtime/codex-desktop-config-policy.js';
 import { codexLbConfigPath, normalizeCodexLbBaseUrl } from './install-helpers-codex-lb-shared.js';
 export function upsertCodexLbConfig(text = '', baseUrl, selectDefault = true) {
@@ -58,48 +59,50 @@ export function removeCodexLbSharedOpenAiRouting(text = '', baseUrl = '') {
         text: removeTopLevelLine(withoutValue, CODEX_LB_SHARED_OPENAI_ROUTING_MARKER)
     };
 }
-export function upsertCodexAppGlmConfig(text = '') {
+export function upsertCodexAppGlmConfig(text = '', input = {}) {
     let next = String(text || '');
+    const authEnv = { ...(input.env || process.env), ...(input.home ? { HOME: input.home } : {}) };
+    const authArgs = openRouterAuthCommandArgs(openRouterSecretPaths(authEnv).keyPath);
     const providerBlock = [
         `[model_providers.${GLM_CODEX_CONFIG_PROVIDER_ID}]`,
         'name = "OpenRouter"',
         'base_url = "https://openrouter.ai/api/v1"',
         'wire_api = "responses"',
-        'env_key = "OPENROUTER_API_KEY"',
         'requires_openai_auth = false'
     ].join('\n');
     next = upsertTomlTable(next, `model_providers.${GLM_CODEX_CONFIG_PROVIDER_ID}`, providerBlock);
-    for (const profile of GLM_CODEX_CONFIG_REASONING_PROFILES) {
-        const profileBlock = [
-            `[profiles.${profile.id}]`,
-            `model_provider = "${GLM_CODEX_CONFIG_PROVIDER_ID}"`,
-            `model = "${GLM_52_OPENROUTER_MODEL}"`,
-            `model_reasoning_effort = "${profile.reasoning_effort}"`,
-            'service_tier = "default"',
-            'approval_policy = "on-request"'
-        ].join('\n');
-        next = upsertTomlTable(next, `profiles.${profile.id}`, profileBlock);
-    }
+    const authBlock = [
+        `[model_providers.${GLM_CODEX_CONFIG_PROVIDER_ID}.auth]`,
+        `command = ${JSON.stringify(OPENROUTER_AUTH_COMMAND)}`,
+        `args = [${authArgs.map((value) => JSON.stringify(value)).join(', ')}]`,
+        `timeout_ms = ${OPENROUTER_AUTH_TIMEOUT_MS}`,
+        `refresh_interval_ms = ${OPENROUTER_AUTH_REFRESH_INTERVAL_MS}`
+    ].join('\n');
+    next = upsertTomlTable(next, `model_providers.${GLM_CODEX_CONFIG_PROVIDER_ID}.auth`, authBlock);
+    next = next.replace(new RegExp(`\\n+\\[model_providers\\.${GLM_CODEX_CONFIG_PROVIDER_ID}\\.auth\\]`), `\n\n[model_providers.${GLM_CODEX_CONFIG_PROVIDER_ID}.auth]`);
+    next = reconcileRetiredSksConfigText(next).text;
     return `${next.trim()}\n`;
 }
 export async function ensureGlobalCodexAppGlmProfile(opts = {}) {
-    if (process.env.SKS_SKIP_CODEX_GLM_PROFILE_REPAIR === '1' && opts.force !== true) {
+    const env = opts.env || process.env;
+    if (env.SKS_SKIP_CODEX_GLM_PROFILE_REPAIR === '1' && opts.force !== true) {
         return { ok: true, status: 'skipped', reason: 'SKS_SKIP_CODEX_GLM_PROFILE_REPAIR=1' };
     }
-    const home = opts.home || process.env.HOME || os.homedir();
+    const home = opts.home || env.HOME || os.homedir();
     const configPath = opts.configPath || codexLbConfigPath(home);
     try {
         await ensureDir(path.dirname(configPath));
         const current = await readText(configPath, '');
-        const next = upsertCodexAppGlmConfig(current);
-        const safeWrite = await safeWriteCodexConfigToml(configPath, current, next, 'glm-profile');
+        const next = upsertCodexAppGlmConfig(current, { home, env: opts.env });
+        const safeWrite = await safeWriteCodexConfigToml(configPath, current, next, 'openrouter-provider');
         return {
             ...safeWrite,
             status: safeWrite.status === 'written' ? 'updated' : safeWrite.status,
             provider: GLM_CODEX_CONFIG_PROVIDER_ID,
             model: GLM_52_OPENROUTER_MODEL,
-            codex_config_profile: GLM_CODEX_CONFIG_PROFILE_ID,
-            reasoning_profiles: GLM_CODEX_CONFIG_REASONING_PROFILES.map((profile) => profile.id)
+            codex_config_profile: OPENROUTER_DEFAULT_PROFILE_ID,
+            reasoning_profiles: [],
+            retired_glm_profiles: [...RETIRED_GLM_DESKTOP_CONFIG_PROFILE_IDS]
         };
     }
     catch (err) {
@@ -110,10 +113,47 @@ export async function ensureGlobalCodexAppGlmProfile(opts = {}) {
             error: err.message,
             provider: GLM_CODEX_CONFIG_PROVIDER_ID,
             model: GLM_52_OPENROUTER_MODEL,
-            codex_config_profile: GLM_CODEX_CONFIG_PROFILE_ID,
-            reasoning_profiles: GLM_CODEX_CONFIG_REASONING_PROFILES.map((profile) => profile.id)
+            codex_config_profile: OPENROUTER_DEFAULT_PROFILE_ID,
+            reasoning_profiles: [],
+            retired_glm_profiles: [...RETIRED_GLM_DESKTOP_CONFIG_PROFILE_IDS]
+        };
+    }
+}
+export async function ensureStoredOpenRouterProviderDuringInstall(opts = {}) {
+    const home = opts.home || opts.env?.HOME || process.env.HOME || os.homedir();
+    const env = { ...(opts.env || process.env), HOME: home };
+    const key = await resolveOpenRouterApiKey({ env });
+    if (!key.key) {
+        return {
+            schema: 'sks.openrouter-provider-upgrade-repair.v1',
+            ok: true,
+            status: 'skipped',
+            reason: 'openrouter_key_missing',
+            key_present: false,
+            key_source: null,
+            blockers: [],
+            warnings: key.warnings
         };
     }
+    const repair = await ensureGlobalCodexAppGlmProfile({
+        ...opts,
+        home,
+        env
+    });
+    const ok = repair?.ok !== false;
+    return {
+        schema: 'sks.openrouter-provider-upgrade-repair.v1',
+        ok,
+        status: ok ? repair?.status || 'present' : 'failed',
+        reason: ok ? 'stored_openrouter_key_provider_reconciled' : 'stored_openrouter_key_provider_repair_failed',
+        key_present: true,
+        key_source: key.source,
+        config_path: repair?.config_path || opts.configPath || codexLbConfigPath(home),
+        provider: GLM_CODEX_CONFIG_PROVIDER_ID,
+        blockers: ok ? [] : ['openrouter_provider_repair_failed'],
+        warnings: key.warnings,
+        repair
+    };
 }
 export function detectCodexLbSetupDrift(state = {}) {
     const drift = [];

package/dist/cli/install-helpers-install-support.js

@@ -18,8 +18,7 @@ import { recordCodexLbHealthEvent } from '../core/codex-lb-circuit.js';
 import { loadCodexLbEnv, writeCodexLbKeychain, codexLbMetadataPath } from '../core/codex-lb/codex-lb-env.js';
 import { codexLbToolCatalogPath, ensureCodexLbToolCatalog } from '../core/codex-lb/codex-lb-tool-catalog.js';
 import { codexLbToolOutputRecoveryNotChecked, codexLbToolOutputRecoveryNotSelected, codexLbToolOutputRecoveryOverrideAcknowledged, probeCodexLbToolOutputRecovery } from '../core/codex-lb/codex-lb-tool-output-recovery.js';
-import { GLM_CODEX_CONFIG_PROFILE_ID, GLM_CODEX_CONFIG_PROVIDER_ID, GLM_CODEX_CONFIG_REASONING_PROFILES } from '../core/providers/glm/glm-52-profile.js';
-import { GLM_52_OPENROUTER_MODEL } from '../core/providers/glm/glm-52-settings.js';
+import { GLM_CODEX_CONFIG_PROFILE_ID, GLM_CODEX_CONFIG_PROVIDER_ID, GLM_CODEX_CONFIG_REASONING_PROFILES, GLM_52_OPENROUTER_MODEL } from '../core/codex-app/openrouter-provider.js';
 import { buildCodexLbSetupPlan, codexLbPersistenceSummary, installCodexLbShellProfileSnippet, selectedCodexLbPersistenceModes } from '../core/codex-lb/codex-lb-setup.js';
 import { extractTomlTable, writeCodexConfigGuarded } from '../core/codex/codex-config-guard.js';
 import { ensureGlobalCodexFastModeDuringInstall, ensureTrailingNewline, normalizeCodexFastModeUiConfig, removeTopLevelTomlKeyIfValue, safeWriteCodexConfigToml, upsertTopLevelTomlString, upsertTomlTable } from '../core/codex-runtime/codex-desktop-config-policy.js';

package/dist/cli/install-helpers.js

@@ -18,8 +18,7 @@ import { recordCodexLbHealthEvent } from '../core/codex-lb-circuit.js';
 import { loadCodexLbEnv, writeCodexLbKeychain, codexLbMetadataPath } from '../core/codex-lb/codex-lb-env.js';
 import { codexLbToolCatalogPath, ensureCodexLbToolCatalog } from '../core/codex-lb/codex-lb-tool-catalog.js';
 import { codexLbToolOutputRecoveryNotChecked, codexLbToolOutputRecoveryNotSelected, codexLbToolOutputRecoveryOverrideAcknowledged, probeCodexLbToolOutputRecovery } from '../core/codex-lb/codex-lb-tool-output-recovery.js';
-import { GLM_CODEX_CONFIG_PROFILE_ID, GLM_CODEX_CONFIG_PROVIDER_ID, GLM_CODEX_CONFIG_REASONING_PROFILES } from '../core/providers/glm/glm-52-profile.js';
-import { GLM_52_OPENROUTER_MODEL } from '../core/providers/glm/glm-52-settings.js';
+import { GLM_CODEX_CONFIG_PROFILE_ID, GLM_CODEX_CONFIG_PROVIDER_ID, GLM_CODEX_CONFIG_REASONING_PROFILES, GLM_52_OPENROUTER_MODEL } from '../core/codex-app/openrouter-provider.js';
 import { buildCodexLbSetupPlan, codexLbPersistenceSummary, installCodexLbShellProfileSnippet, selectedCodexLbPersistenceModes } from '../core/codex-lb/codex-lb-setup.js';
 import { extractTomlTable, writeCodexConfigGuarded } from '../core/codex/codex-config-guard.js';
 import { ensureGlobalCodexFastModeDuringInstall, ensureTrailingNewline, normalizeCodexFastModeUiConfig, removeTopLevelTomlKeyIfValue, safeWriteCodexConfigToml, upsertTopLevelTomlString, upsertTomlTable } from '../core/codex-runtime/codex-desktop-config-policy.js';
@@ -28,7 +27,7 @@ import { repairCodexImagegen } from '../core/doctor/imagegen-repair.js';
 import { canAskYesNo, compareVersions, hasCodexUnstableFeatureWarningSuppression, hasDeprecatedCodexHooksFeatureFlag, hasTopLevelCodexModeLock, isProjectSetupCandidate } from './install-tool-helpers.js';
 import { checkCodexLbResponseChain } from './install-helpers-codex-lb-chain.js';
 import { CODEX_LB_CANONICAL_FAST_SERVICE_TIER, CODEX_LB_PROVIDER_ENV_KEY, CODEX_LB_PROVIDER_NAME, askPostinstallQuestion, codexAuthChatgptBackupPath, codexAuthPath, codexLbConfigPath, codexLbEnvPath, hasTopLevelCodexLbSelected, normalizeCodexLbBaseUrl, parseCodexLbEnvKey, redactSecretText } from './install-helpers-codex-lb-shared.js';
-import { appliedCodexLbPersistenceModes, captureCodexLbSetupWriteState, codexLbSharedOpenAiRoutingState, detectCodexLbSetupDrift, ensureGlobalCodexAppGlmProfile, parseCodexLbEnvBaseUrl, parseCodexSharedLoginApiKey, removeCodexLbSharedOpenAiRouting, sha256Text, shellSingleQuote, upsertCodexAppGlmConfig, upsertCodexLbConfig, upsertCodexLbSharedOpenAiRouting } from './install-helpers-codex-lb-config.js';
+import { appliedCodexLbPersistenceModes, captureCodexLbSetupWriteState, codexLbSharedOpenAiRoutingState, detectCodexLbSetupDrift, ensureGlobalCodexAppGlmProfile, ensureStoredOpenRouterProviderDuringInstall, parseCodexLbEnvBaseUrl, parseCodexSharedLoginApiKey, removeCodexLbSharedOpenAiRouting, sha256Text, shellSingleQuote, upsertCodexAppGlmConfig, upsertCodexLbConfig, upsertCodexLbSharedOpenAiRouting } from './install-helpers-codex-lb-config.js';
 import { ensureCodexImagegenDuringInstall, ensureGlobalCodexSkillsDuringInstall, ensureGlobalContext7DuringInstall, ensureGlobalGetdesignSkillDuringInstall, ensureSksCommandDuringInstall } from './install-helpers-install-support.js';
 function packagedSksEntrypoint() {
     return path.join(packageRoot(), 'dist', 'bin', 'sks.js');
@@ -90,6 +89,15 @@ export async function postinstall({ bootstrap, args = [] }) {
             console.log(`Codex App Fast mode: skipped (${fastModeRepair.reason}).`);
         else if (fastModeRepair.status === 'failed')
             console.log(`Codex App Fast mode: auto repair failed. Run \`sks setup\`. ${fastModeRepair.error || ''}`.trim());
+        const openRouterProviderRepair = await ensureStoredOpenRouterProviderDuringInstall();
+        if (openRouterProviderRepair.status === 'updated')
+            console.log('OpenRouter provider: repaired for the stored key (credentials and active model were preserved).');
+        else if (openRouterProviderRepair.status === 'present')
+            console.log('OpenRouter provider: stored-key configuration already compatible.');
+        else if (openRouterProviderRepair.status === 'skipped')
+            console.log('OpenRouter provider: no stored key; no provider configuration was added.');
+        else if (openRouterProviderRepair.status === 'failed')
+            console.log('OpenRouter provider: stored key was preserved, but provider repair failed. Run `sks doctor --fix`.');
         const imagegenRepair = await ensureCodexImagegenDuringInstall();
         if (imagegenRepair.status === 'ready')
             console.log('Codex App Image Gen: ready ($imagegen/gpt-image-2 detected).');
@@ -259,7 +267,7 @@ async function reportPostinstallCodexLbAuth(snapshot = null) {
 async function postinstallHarnessConflictNotice(conflictScan) {
     console.log('\nSneakoscope Codex package installed, but SKS setup is blocked.');
     console.log(formatHarnessConflictReport(conflictScan, { includePrompt: false }));
-    console.log('\nWhat this means: npm can finish installing the package, but `sks setup` and `sks doctor --fix` will refuse to activate SKS until the conflicting harness is removed with human approval.');
+    console.log('\nWhat this means: npm can finish installing the package. Conflicting OMX/DCodex markers must be removed explicitly with `sks conflicts cleanup --yes` before `sks setup`, `sks doctor --fix`, or `sks update` can proceed.');
     console.log('No files were removed by postinstall.');
     console.log('Cleanup requires a human-approved Codex App session. Keep the model selected in Codex and use high reasoning effort.');
     if (shouldAskPostinstallQuestion()) {
@@ -1925,7 +1933,7 @@ export { checkContext7, ensureCodexCliTool, ensureMadLaunchDependencies, ensureR
 export { codexFastModeDesktopStatus, ensureGlobalCodexFastModeDuringInstall, normalizeCodexFastModeUiConfig, safeWriteCodexConfigToml } from '../core/codex-runtime/codex-desktop-config-policy.js';
 export { checkRequiredSkills, context7GlobalMcpStatus, ensureCodexImagegenDuringInstall, ensureGlobalCodexSkillsDuringInstall, ensureProjectContext7Config, ensureSksCommandDuringInstall, globalCodexSkillsRoot, selftestSksShimRepair } from './install-helpers-install-support.js';
 export { askPostinstallQuestion, codexLbConfigPath, codexLbEnvPath, normalizeCodexLbBaseUrl } from './install-helpers-codex-lb-shared.js';
-export { ensureGlobalCodexAppGlmProfile, upsertCodexAppGlmConfig, upsertCodexLbConfig } from './install-helpers-codex-lb-config.js';
+export { ensureGlobalCodexAppGlmProfile, ensureStoredOpenRouterProviderDuringInstall, upsertCodexAppGlmConfig, upsertCodexLbConfig } from './install-helpers-codex-lb-config.js';
 export { checkCodexLbResponseChain } from './install-helpers-codex-lb-chain.js';
 export { selftestCodexLb } from './install-helpers-codex-lb-selftest.js';
 function escapeRegExp(value) {

package/dist/cli/router.js

@@ -1,5 +1,5 @@
 import { COMMAND_ALIASES_LITE, COMMAND_MANIFEST_BY_NAME, COMMAND_NAME_SET, } from './command-manifest-lite.js';
-import { detectGlobalMode, glmWithoutMadResult } from './global-mode-router.js';
+import { findRetiredGlobalExecutionArgumentErrors } from './global-mode-router.js';
 export function isCommandName(value) {
     return COMMAND_NAME_SET.has(value);
 }
@@ -36,15 +36,21 @@ export async function dispatch(args) {
     }
 }
 async function dispatchInner(argv) {
-    const globalMode = detectGlobalMode(argv);
-    if (globalMode?.kind === 'mad-glm') {
-        const mod = await import('../core/commands/glm-command.js');
-        return mod.glmCommand(globalMode.args);
-    }
-    if (globalMode?.kind === 'glm-without-mad') {
-        const result = glmWithoutMadResult();
-        console.error(`GLM mode requires MAD: ${result.hint}`);
+    const retiredGlm = findRetiredGlobalExecutionArgumentErrors(argv).filter((item) => item.includes('--glm'));
+    if (retiredGlm.length && argv.some((arg) => arg === '--glm' || String(arg).startsWith('--glm='))) {
+        const hint = 'GLM MAD CLI was removed. Use SKS Center Providers or: sks codex-app use-openrouter --model <id>';
+        console.error(hint);
         process.exitCode = 1;
+        const result = {
+            ok: false,
+            status: 'blocked',
+            mode: 'glm',
+            reason: 'glm_mad_removed',
+            hint,
+            blockers: retiredGlm
+        };
+        if (argv.includes('--json'))
+            console.log(JSON.stringify(result, null, 2));
         return result;
     }
     const { command, rawCommand, args: rest } = normalizeCommand(argv);
@@ -186,9 +192,16 @@ function printHandledCommandBlock(result) {
 }
 export function safeReadOnlySubcommand(command, args) {
     const sub = String(args[0] || '').toLowerCase();
+    const nested = String(args[1] || '').toLowerCase();
     if (command === 'naruto' && ['status', 'subagents', 'proof'].includes(sub)) {
         return !args.some((arg) => ['--fix', '--yes', '-y', '--write', '--apply', '--execute', '--force', '--real'].includes(String(arg)));
     }
+    if (command === 'mcp' && sub === 'config' && ['list', 'test', 'backups', 'show'].includes(nested)) {
+        return !args.some((arg) => ['--fix', '--yes', '-y', '--write', '--apply', '--execute', '--force', '--real'].includes(String(arg)));
+    }
+    if (command === 'remote' && ['readiness', 'status', 'show'].includes(sub)) {
+        return !args.some((arg) => ['--fix', '--yes', '-y', '--write', '--apply', '--execute', '--force', '--real'].includes(String(arg)));
+    }
     if (!['status', 'show', 'list', 'observe', 'watch', 'doctor', 'help'].includes(sub))
         return false;
     return !args.some((arg) => ['--fix', '--yes', '-y', '--write', '--apply', '--execute', '--force', '--real'].includes(String(arg)));

package/dist/commands/codex-app.js

@@ -11,8 +11,12 @@ import { buildCodexHookLifecycle } from '../core/codex-app/codex-hook-lifecycle.
 import { resolveCodexAppExecutionProfile } from '../core/codex-app/codex-app-execution-profile.js';
 import { repairCodexNativeManagedAssets } from '../core/codex-native/codex-native-repair-transaction.js';
 import { doctorCodexAppGlmProfile, installCodexAppGlmProfile } from '../core/codex-app/glm-profile-installer.js';
+import { openRouterStatus, useOpenRouter } from '../core/codex-app/openrouter-activate.js';
+import { OPENROUTER_DEFAULT_MODEL } from '../core/codex-app/openrouter-provider.js';
 import { promptForOpenRouterKeyHidden, writeStoredOpenRouterKey } from '../core/providers/openrouter/openrouter-secret-store.js';
+import { compactOpenRouterModelsResult, listOpenRouterModels, testOpenRouterConnection } from '../core/providers/openrouter/openrouter-account.js';
 import { restartCodexApp } from '../core/codex-app/codex-app-restart.js';
+import { resetRoleModelPreference, roleModelPreferencesStatus, setRoleModelPreference } from '../core/subagents/role-model-preferences.js';
 export async function run(_command, args = []) {
     const action = args[0] || 'check';
     if (action === 'restart')
@@ -36,7 +40,7 @@ export async function run(_command, args = []) {
     if (action === 'glm-profile') {
         const subcommand = args[1] || 'doctor';
         const root = await sksRoot();
-        const result = subcommand === 'install' || subcommand === 'repair'
+        const result = subcommand === 'install' || subcommand === 'repair' || subcommand === 'remove'
             ? await installCodexAppGlmProfile({ root, apply: true })
             : await doctorCodexAppGlmProfile({ root });
         return printCodexAppResult(args, result);
@@ -58,6 +62,7 @@ export async function run(_command, args = []) {
             key_preview: record.key_preview,
             raw_key_recorded: false,
             secret_store: 'sks-openrouter-secret-store',
+            selected: false,
             glm_profile: profile,
             restart_app: restart,
             blockers: [...(profile.blockers || []), ...(restart.blockers || [])],
@@ -65,6 +70,44 @@ export async function run(_command, args = []) {
         };
         return printCodexAppResult(args, result);
     }
+    if (action === 'use-openrouter' || action === 'use-or') {
+        const root = await sksRoot();
+        const model = readOption(args, '--model', OPENROUTER_DEFAULT_MODEL);
+        const result = await useOpenRouter({
+            root,
+            model,
+            restartApp: flag(args, '--restart-app') || flag(args, '--restart') || !flag(args, '--no-restart-app')
+        });
+        return printCodexAppResult(args, result);
+    }
+    if (action === 'openrouter-status') {
+        const result = await openRouterStatus({});
+        return printCodexAppResult(args, result);
+    }
+    if (action === 'openrouter-models') {
+        const models = await listOpenRouterModels({});
+        const result = flag(args, '--ids-only') ? compactOpenRouterModelsResult(models) : models;
+        return printCodexAppResult(args, result);
+    }
+    if (action === 'openrouter-test') {
+        const result = await testOpenRouterConnection({ model: readOption(args, '--model', '') });
+        return printCodexAppResult(args, result);
+    }
+    if (action === 'role-models') {
+        return printCodexAppResult(args, await roleModelPreferencesStatus());
+    }
+    if (action === 'set-role-model') {
+        const result = await setRoleModelPreference({
+            role: readOption(args, '--role', ''),
+            model: readOption(args, '--model', ''),
+            reasoning: readOption(args, '--reasoning', '')
+        });
+        return printCodexAppResult(args, result);
+    }
+    if (action === 'reset-role-model') {
+        const result = await resetRoleModelPreference({ role: readOption(args, '--role', '') });
+        return printCodexAppResult(args, result);
+    }
     if (action === 'product-design' || action === 'design-product' || action === 'ensure-product-design') {
         const checkOnly = flag(args, '--check-only') || flag(args, '--no-install');
         const status = await codexProductDesignPluginStatus({
@@ -125,7 +168,8 @@ export async function run(_command, args = []) {
             process.exitCode = 1;
         return;
     }
-    console.error('Usage: sks codex-app check|status|harness-matrix|skill-sync|agent-role-sync|init-deep|hook-lifecycle|execution-profile|glm-profile [install|doctor]|set-openrouter-key [--api-key-stdin]|product-design [--check-only]|ensure-product-design|chrome-extension|pat status|remote-control [--json]');
+    console.error('Usage: sks codex-app check|status|harness-matrix|skill-sync|agent-role-sync|init-deep|hook-lifecycle|execution-profile|set-openrouter-key [--api-key-stdin]|use-openrouter --model <id>|openrouter-status|openrouter-models [--ids-only]|openrouter-test [--model <id>]|role-models|set-role-model --role <name> --model <id> --reasoning <effort>|reset-role-model --role <name>|product-design [--check-only]|ensure-product-design|chrome-extension|pat status|remote-control [--json]');
+    console.error('Note: glm-profile is retired (strips leftover Desktop GLM profiles); use set-openrouter-key / use-openrouter.');
     process.exitCode = 1;
 }
 async function readOpenRouterKeyFromArgs(args = []) {

package/dist/commands/conflicts.js

@@ -1,16 +1,39 @@
 import { projectRoot } from '../core/fsx.js';
-import { formatHarnessConflictReport, llmHarnessCleanupPrompt, scanHarnessConflicts } from '../core/harness-conflicts.js';
+import { cleanupOtherHarnessConflicts, formatHarnessConflictReport, llmHarnessCleanupPrompt, scanHarnessConflicts } from '../core/harness-conflicts.js';
 import { flag } from '../cli/args.js';
 import { printJson } from '../cli/output.js';
 export async function run(_command, args = []) {
     const action = args[0] || 'check';
-    const scan = await scanHarnessConflicts(await projectRoot());
+    const root = await projectRoot();
+    if (action === 'cleanup') {
+        if (!flag(args, '--yes') && !flag(args, '--json')) {
+            process.exitCode = 1;
+            console.error('Refusing cleanup without --yes. Re-run: sks conflicts cleanup --yes');
+            return { ok: false, status: 'confirmation_required' };
+        }
+        const cleanup = await cleanupOtherHarnessConflicts(root);
+        if (flag(args, '--json'))
+            return printJson(cleanup);
+        console.log(cleanup.ok
+            ? `Quarantined ${cleanup.cleaned.length} OMX/DCodex conflict(s).`
+            : `Cleanup incomplete: ${cleanup.remaining.length} conflict(s) remain.`);
+        for (const row of cleanup.cleaned)
+            console.log(`- ${row.action}: ${row.path}`);
+        for (const row of cleanup.errors)
+            console.error(`- error: ${row.path}: ${row.error}`);
+        if (!cleanup.ok)
+            process.exitCode = 1;
+        return cleanup;
+    }
+    const scan = await scanHarnessConflicts(root);
     const result = { ...scan, cleanup_prompt: scan.hard_block ? llmHarnessCleanupPrompt(scan) : null };
     if (flag(args, '--json'))
         return printJson(result);
     if (action === 'prompt')
         return console.log(result.cleanup_prompt || '');
     console.log(formatHarnessConflictReport(scan));
-    if (scan.hard_block)
+    if (scan.hard_block) {
+        console.log('\nAutomatic cleanup: sks conflicts cleanup --yes');
         process.exitCode = 1;
+    }
 }