sneakoscope 7.3.0 → 7.6.0

package/dist/core/research/research-claim-synthesizer.js

@@ -1,5 +1,6 @@
 import path from 'node:path';
 import { readJson } from '../fsx.js';
+import { uniqueValues as unique } from '../text/strings.js';
 import { runCodexTask } from '../codex-control/codex-task-runner.js';
 import { THINKING_SUBAGENT_MODEL, SUBAGENT_EFFORT } from '../subagents/model-policy.js';
 import { normalizeClaimEvidenceMatrix, validateClaimEvidenceMatrix } from './claim-evidence-matrix.js';
@@ -281,9 +282,6 @@ function semanticTokens(value) {
     return unique(String(value || '').toLowerCase().normalize('NFKC').match(/[\p{L}\p{N}]{4,}/gu) || [])
         .filter((token) => !stop.has(token));
 }
-function unique(values) {
-    return [...new Set(values)];
-}
 export const researchClaimEvidenceMatrixOutputSchema = {
     type: 'object',
     additionalProperties: false,

package/dist/core/research/research-falsification-runner.js

@@ -1,5 +1,6 @@
 import path from 'node:path';
 import { nowIso, readJson } from '../fsx.js';
+import { uniqueValues as unique } from '../text/strings.js';
 import { runCodexTask } from '../codex-control/codex-task-runner.js';
 import { THINKING_SUBAGENT_MODEL, SUBAGENT_EFFORT } from '../subagents/model-policy.js';
 export async function runResearchFalsification(input) {
@@ -141,9 +142,6 @@ function buildResearchFalsificationPrompt(input) {
 function normalizeStrings(value) {
     return unique((Array.isArray(value) ? value : value == null ? [] : [value]).map((entry) => String(entry || '').trim()).filter(Boolean));
 }
-function unique(values) {
-    return [...new Set(values)];
-}
 export const researchFalsificationOutputSchema = {
     type: 'object',
     additionalProperties: false,

package/dist/core/research/research-source-evidence.js

@@ -1,6 +1,7 @@
 import fsp from 'node:fs/promises';
 import path from 'node:path';
 import { sha256 } from '../fsx.js';
+import { uniqueValues as unique } from '../text/strings.js';
 export function trustworthyVerifiedResearchSource(source) {
     return String(source?.acquisition_verdict || '') === 'verified_content'
         && /^verified_content:/i.test(String(source?.credibility || ''))
@@ -138,6 +139,3 @@ function sourceId(source) {
 function normalizedStrings(value) {
     return (Array.isArray(value) ? value : value == null ? [] : [value]).map(String).map((item) => item.trim()).filter(Boolean);
 }
-function unique(values) {
-    return [...new Set(values)];
-}

package/dist/core/responses-stream.js

@@ -37,21 +37,29 @@ export function findStreamedImageOutput(events) {
     for (const event of events) {
         const type = String(event?.type || '');
         const item = event?.item;
-        if (item && String(item.type || '') === 'image_generation_call') {
+        const partialEvent = type === 'response.image_generation_call.partial_image'
+            || type.endsWith('.image_generation_call.partial_image');
+        if (partialEvent) {
+            const partialB64 = b64Of(event?.partial_image_b64)
+                || b64Of(event?.b64_json)
+                || b64Of(event?.result)
+                || b64Of(item?.partial_image_b64)
+                || b64Of(item?.b64_json)
+                || b64Of(item?.result);
+            if (partialB64)
+                partial = { id: event?.item_id || item?.id || null, b64: partialB64, partial: true };
+            continue;
+        }
+        if (type === 'response.output_item.done' && item && String(item.type || '') === 'image_generation_call') {
             const b64 = b64Of(item.result) || b64Of(item.b64_json);
             if (b64)
                 final = { id: item.id || event?.item_id || null, b64, partial: false };
             continue;
         }
-        if (/image_generation_call/.test(type)) {
+        if (type === 'response.image_generation_call.completed' || type === 'response.image_generation_call.done') {
             const b64 = b64Of(event?.result) || b64Of(event?.b64_json);
-            if (b64) {
+            if (b64)
                 final = { id: event?.item_id || event?.id || null, b64, partial: false };
-                continue;
-            }
-            const partialB64 = b64Of(event?.partial_image_b64);
-            if (partialB64)
-                partial = { id: event?.item_id || null, b64: partialB64, partial: true };
         }
     }
     return final || partial;
@@ -86,22 +94,46 @@ export function parseResponsesSsePayload(text) {
         if (output.length) {
             if (hasImageGenerationResult(completed.response) || !streamedImage)
                 return completed.response;
+            if (streamedImage.partial) {
+                return {
+                    ...completed.response,
+                    image_output_partial_frame: true,
+                    partial_image_output_present: true
+                };
+            }
             return {
                 ...completed.response,
                 output: [...output, streamedImageItem(streamedImage)],
                 image_output_recovered_from_stream: true,
-                image_output_partial_frame: streamedImage.partial
+                image_output_partial_frame: false,
+                image_output_provenance: 'response.output_item.done'
+            };
+        }
+        if (!recovered.length) {
+            if (!streamedImage?.partial)
+                return completed.response;
+            return {
+                ...completed.response,
+                image_output_partial_frame: true,
+                partial_image_output_present: true
             };
         }
-        if (!recovered.length)
-            return completed.response;
         return {
             ...completed.response,
             output: recovered,
             output_recovered_from_stream: true,
-            ...(streamedImage
-                ? { image_output_recovered_from_stream: true, image_output_partial_frame: streamedImage.partial }
-                : {})
+            ...(streamedImage?.partial
+                ? {
+                    image_output_partial_frame: true,
+                    partial_image_output_present: true
+                }
+                : streamedImage
+                    ? {
+                        image_output_recovered_from_stream: true,
+                        image_output_partial_frame: false,
+                        image_output_provenance: 'response.output_item.done'
+                    }
+                    : {})
         };
     }
     if (recovered.length) {
@@ -110,13 +142,27 @@ export function parseResponsesSsePayload(text) {
             status: 'completed',
             output: recovered,
             output_recovered_from_stream: true,
-            ...(streamedImage
-                ? { image_output_recovered_from_stream: true, image_output_partial_frame: streamedImage.partial }
-                : {}),
+            ...(streamedImage?.partial
+                ? {
+                    image_output_partial_frame: true,
+                    partial_image_output_present: true
+                }
+                : streamedImage
+                    ? {
+                        image_output_recovered_from_stream: true,
+                        image_output_partial_frame: false,
+                        image_output_provenance: 'response.output_item.done'
+                    }
+                    : {}),
             events: eventTypes
         };
     }
-    return { object: 'response.sse', status: 'unknown', events: eventTypes };
+    return {
+        object: 'response.sse',
+        status: 'unknown',
+        ...(streamedImage?.partial ? { image_output_partial_frame: true, partial_image_output_present: true } : {}),
+        events: eventTypes
+    };
 }
 export function responsesOutputText(payload) {
     const direct = typeof payload?.output_text === 'string' ? payload.output_text : '';
@@ -134,7 +180,7 @@ export function responsesOutputText(payload) {
 function recoveredOutput(items, streamedImage) {
     const output = [...items];
     const hasImage = output.some((item) => String(item?.type || '') === 'image_generation_call' && b64Of(item?.result));
-    if (streamedImage && !hasImage)
+    if (streamedImage && !streamedImage.partial && !hasImage)
         output.push(streamedImageItem(streamedImage));
     return output;
 }

package/dist/core/routes/constants.js

@@ -9,7 +9,7 @@ export const FROM_CHAT_IMG_CHECKLIST_ARTIFACT = 'from-chat-img-checklist.md';
 export const FROM_CHAT_IMG_TEMP_TRIWIKI_ARTIFACT = 'from-chat-img-temp-triwiki.json';
 export const FROM_CHAT_IMG_QA_LOOP_ARTIFACT = 'from-chat-img-qa-loop.json';
 export const FROM_CHAT_IMG_TEMP_TRIWIKI_SESSIONS = 5;
-export const USAGE_TOPICS = 'install|setup|bootstrap|root|deps|zellij|auto-review|naruto|qa-loop|ppt|image-ux-review|computer-use|goal|fast-mode|review|research|seo-geo-optimizer|git|codex|codex-app|codex-native|hooks|features|all-features|dfix|commit|commit-and-push|design|imagegen|dollar|context7|super-search|pipeline|reasoning|guard|conflicts|versioning|eval|harness|hproof|gx|wiki|memory|wrongness|code-structure|proof-field|skill-dream|rust';
+export const USAGE_TOPICS = 'install|setup|bootstrap|root|deps|zellij|auto-review|naruto|qa-loop|ppt|image-ux-review|computer-use|goal|fast-mode|review|research|seo-geo-optimizer|git|codex|codex-app|codex-native|hooks|features|all-features|dfix|commit|commit-and-push|design|imagegen|dollar|context7|super-search|pipeline|reasoning|guard|conflicts|versioning|eval|harness|hproof|gx|wiki|memory|wrongness|code-structure|proof-field|skill-dream|rust|align';
 export const RECOMMENDED_MCP_SERVERS = [
     {
         id: 'context7',

package/dist/core/routes/design-policy.js

@@ -1,14 +1,19 @@
 import { PRODUCT_DESIGN_PLUGIN, PRODUCT_DESIGN_REQUIRED_SKILLS, productDesignPluginPolicyText } from '../product-design-plugin.js';
 import { CODEX_APP_IMAGE_GENERATION_DOC_URL, CODEX_COMPUTER_USE_ONLY_POLICY, CODEX_IMAGEGEN_REQUIRED_POLICY, CODEX_WEB_VERIFICATION_POLICY } from './evidence.js';
 export { productDesignPluginPolicyText };
+const GETDESIGN_CODEX_SKILL_REPOSITORY = 'MohtashamMurshid/getdesign';
+const GETDESIGN_CODEX_SKILL_REF = '83e9840d4a5744b5f10117ec00b855059e5abc25';
 export const GETDESIGN_REFERENCE = {
     id: 'getdesign',
     url: 'https://getdesign.md/',
     docs_url: 'https://docs.getdesign.app/',
     official_urls_url: 'https://docs.getdesign.app/resources/official-urls/',
     codex_guide_url: 'https://docs.getdesign.app/guides/use-with-codex/',
-    codex_skill: 'MohtashamMurshid/getdesign',
-    codex_skill_install: 'skills add MohtashamMurshid/getdesign',
+    codex_skill_repository: GETDESIGN_CODEX_SKILL_REPOSITORY,
+    codex_skill_ref: GETDESIGN_CODEX_SKILL_REF,
+    codex_skill: GETDESIGN_CODEX_SKILL_REPOSITORY,
+    codex_skill_install: `skills add ${GETDESIGN_CODEX_SKILL_REPOSITORY} -g -a codex -y`,
+    codex_skill_install_mode: 'manual_only',
     npm_cli: '@getdesign/cli',
     npm_sdk: '@getdesign/sdk',
     official_mcp_available: false,

package/dist/core/routes/dollar-manifest-lite.js

@@ -18,7 +18,6 @@ const DOLLAR_COMMANDS_LITE_BASE = [
     { command: '$QA-LOOP', route: 'QA loop', description: 'Dogfood UI/API as human proxy with safety gates, Codex Chrome Extension-first web UI evidence, safe fixes, rechecks, Honest Mode.' },
     { command: '$PPT', route: 'HTML/PDF presentation pipeline', description: 'Create restrained, information-first HTML/PDF presentation artifacts after delivery context, audience profile, STP, decision context, pain-point, research, design-system, and verification questions are sealed.' },
     { command: '$Image-UX-Review', route: 'image-generation UI/UX review loop', description: 'Review UI/UX through the imagegen/gpt-image-2 visual critique loop: source screenshots become generated annotated review images, those images become issue ledgers, then fixes are rechecked.' },
-    { command: '$UX-Review', route: 'image-generation UI/UX review loop', description: 'Review UI/UX through the imagegen/gpt-image-2 visual critique loop: source screenshots become generated annotated review images, those images become issue ledgers, then fixes are rechecked.' },
     { command: '$Computer-Use', route: 'native Computer Use fast lane', description: COMPUTER_USE_DESCRIPTION },
     { command: '$CU', route: 'native Computer Use fast lane', description: COMPUTER_USE_DESCRIPTION },
     { command: '$Goal', route: 'Codex native /goal control', description: 'Use Codex native Goal directly with detailed completion criteria; SKS creates no Goal mission, artifact, loop, or fallback state.' },
@@ -32,6 +31,7 @@ const DOLLAR_COMMANDS_LITE_BASE = [
     { command: '$MAD-SKS', route: 'explicit scoped permission-widening modifier plus SQL-plane execution', description: 'Explicit high-risk authorization modifier that can be combined with other $ commands to temporarily open approved target-project scopes such as files, shell, package installs, services, network, Computer Use/browser workflows, generated assets, file permissions, migrations, Supabase MCP DB writes, direct execute SQL, schema cleanup, and normal targeted DB writes for the active invocation.' },
     { command: '$GX', route: 'visual context', description: 'Deterministic GX visual context cartridges.' },
     { command: '$Wiki', route: 'TriWiki refresh and maintenance', description: 'Refresh, pack, validate, or prune TriWiki context packs from Codex App.' },
+    { command: '$Align', route: 'latest GPT-5.6 / openai/skills modernization', description: 'One-shot modernization that aligns SKS prompts, settings, and skill/command surfaces to the latest GPT-5.6 official prompting, programmatic tool calling, agents, and openai/skills guidance. Latest-version only: delete legacy compat knobs and deduplicate redundant prompt/config content.' },
     { command: '$Help', route: 'command help', description: 'Explain installed SKS commands and workflows.' }
 ];
 const DOLLAR_COMMAND_ALIASES_LITE_BASE = [
@@ -52,9 +52,6 @@ const DOLLAR_COMMAND_ALIASES_LITE_BASE = [
     { canonical: '$QA-LOOP', app_skill: '$qa-loop' },
     { canonical: '$PPT', app_skill: '$ppt' },
     { canonical: '$Image-UX-Review', app_skill: '$image-ux-review' },
-    { canonical: '$Image-UX-Review', app_skill: '$ux-review' },
-    { canonical: '$Image-UX-Review', app_skill: '$visual-review' },
-    { canonical: '$Image-UX-Review', app_skill: '$ui-ux-review' },
     { canonical: '$Computer-Use', app_skill: '$computer-use-fast' },
     { canonical: '$Computer-Use', app_skill: '$cu' },
     { canonical: '$Goal', app_skill: '$goal' },
@@ -68,6 +65,7 @@ const DOLLAR_COMMAND_ALIASES_LITE_BASE = [
     { canonical: '$MAD-SKS', app_skill: '$mad-sks' },
     { canonical: '$GX', app_skill: '$gx' },
     { canonical: '$Wiki', app_skill: '$wiki' },
+    { canonical: '$Align', app_skill: '$align' },
     { canonical: '$Help', app_skill: '$help' }
 ];
 const LEGACY_LITE_DOLLAR_NAMES = Array.from(new Set([

package/dist/core/routes/evidence.js

@@ -24,7 +24,7 @@ export const CODEX_QA_SURFACE_ROUTING_POLICY = `Codex QA surface routing follows
 export const CODEX_WEB_VERIFICATION_POLICY = CODEX_QA_SURFACE_ROUTING_POLICY;
 export const CODEX_COMPUTER_USE_ONLY_POLICY = `Codex Computer Use is a live GUI surface for supported macOS and Windows environments, invoked with @Computer or @AppName for native apps, OS settings, browser contexts that truly require GUI-level operation, and cross-app workflows. Do not replace @Browser localhost/public-page checks or @Chrome signed-in checks with Computer Use unless the surface router records a specific GUI-only/cross-app reason. If live Computer Use tools, permissions, or app access are unavailable, mark the affected native/GUI evidence blocked or unverified instead of fabricating screenshots or actions. Codex App readiness/config checks are capability evidence only, not target interaction proof.`;
 export const IMAGEGEN_SOCIAL_SOURCE_POLICY = 'Use public X/social/community reports only as prompt-quality and workflow-sentiment hints after official OpenAI/Codex docs. Social posts are not capability specs, evidence of tool availability, or proof that a generated asset was created.';
-export const CODEX_IMAGEGEN_REQUIRED_POLICY = 'Pipeline image generation, raster asset creation/editing, and generated image-review evidence must use real Codex App imagegen/$imagegen with gpt-image-2 when that evidence is required for full verification. For newest-model image requests, prompt explicitly for "ChatGPT Images 2.0 / GPT Image 2.0 with gpt-image-2" instead of relying on generic image-generation wording. Do not substitute placeholder SVG/HTML/CSS, prose-only critique, stock-like stand-ins, manually fabricated files, or missing-output ledgers for requested/generated raster assets or required generated review images. If imagegen/gpt-image-2 is unavailable or generated annotated images cannot be created/linked, record the blocker and cap any closeout at verified_partial/reference-only instead of claiming generated-image evidence or full route verification; that partial closeout requires source screenshots plus hashes, docs evidence, source Image Voxel anchors, and Honest Mode evidence. In Codex App prompts, invoke $imagegen when live image generation is needed; SKS hooks and skills can require the policy but cannot attach missing host image-generation tools to an already-started turn. Official OpenAI/Codex docs are authoritative for capabilities, surfaces, limits, and evidence rules; X/social/community reports may inform prompt style only.';
+export const CODEX_IMAGEGEN_REQUIRED_POLICY = 'Pipeline image generation, raster asset creation/editing, and generated image-review evidence must use gpt-image-2 through the user-selected Codex provider when that evidence is required for full verification: Codex App imagegen/$imagegen, or the selected and ready codex-lb Responses provider. Only completed response output or a final response.output_item.done image result qualifies; streamed partial preview frames never count as generated-image evidence. For newest-model image requests, prompt explicitly for "ChatGPT Images 2.0 / GPT Image 2.0 with gpt-image-2" instead of relying on generic image-generation wording. Do not substitute placeholder SVG/HTML/CSS, prose-only critique, stock-like stand-ins, manually fabricated files, or missing-output ledgers for requested/generated raster assets or required generated review images. If imagegen/gpt-image-2 is unavailable or generated annotated images cannot be created/linked, record the blocker and cap any closeout at verified_partial/reference-only instead of claiming generated-image evidence or full route verification; that partial closeout requires source screenshots plus hashes, docs evidence, source Image Voxel anchors, and Honest Mode evidence. In Codex App prompts, invoke $imagegen when live image generation is needed; SKS hooks and skills can require the policy but cannot attach missing host image-generation tools to an already-started turn. Official OpenAI/Codex docs are authoritative for capabilities, surfaces, limits, and evidence rules; X/social/community reports may inform prompt style only.';
 export const DEFAULT_CODEX_APP_PLUGINS = Object.freeze([
     ['browser', 'openai-bundled'],
     ['chrome', 'openai-bundled'],

package/dist/core/routes.js

@@ -258,7 +258,7 @@ export const ROUTES = [
         reasoningPolicy: 'high',
         stopGate: 'naruto-gate.json',
         coverage_required: true,
-        cliEntrypoint: 'sks naruto run "task" [--agents N] [--max-threads N] [--trusted-project] | sks naruto status|subagents|proof',
+        cliEntrypoint: 'sks naruto run "task" [--agents N] [--max-threads N] [--trusted-project] | sks naruto status|subagents|proof | sks naruto parent-summary --mission M-... --stdin',
         examples: ['$Naruto run review twelve independent packages with --agents 12', '$Work']
     },
     {
@@ -310,8 +310,7 @@ export const ROUTES = [
         route: 'image-generation UI/UX review loop',
         description: 'Review UI/UX through the imagegen/gpt-image-2 visual critique loop: source screenshots become generated annotated review images, those images become issue ledgers, then fixes are rechecked.',
         requiredSkills: ['image-ux-review', 'imagegen', 'cu', 'pipeline-runner', REFLECTION_SKILL_NAME, 'honest-mode'],
-        dollarAliases: ['$UX-Review'],
-        appSkillAliases: ['ux-review', 'visual-review', 'ui-ux-review'],
+        hiddenDollarAliases: ['$UX-Review', '$Visual-Review', '$UI-UX-Review'],
         lifecycle: ['target_and_capture_inventory', 'source_screenshots', 'gpt_image_2_annotated_review_image', 'generated_image_text_extraction', 'issue_ledger', 'optional_safe_fixes', 'changed_screen_recheck', 'post_route_reflection', 'honest_mode'],
         context7Policy: 'if_external_docs',
         reasoningPolicy: 'high',
@@ -498,6 +497,21 @@ export const ROUTES = [
         cliEntrypoint: 'sks wiki refresh|pack|validate|prune',
         examples: ['$Wiki refresh', '$Wiki prune and validate']
     },
+    {
+        id: 'Align',
+        command: '$Align',
+        mode: 'ALIGN',
+        route: 'latest GPT-5.6 / openai/skills modernization',
+        description: 'One-shot modernization that aligns SKS prompts, settings, and skill/command surfaces to the latest GPT-5.6 official prompting, programmatic tool calling, agents, and openai/skills guidance. Latest-version only: delete legacy compat knobs and deduplicate redundant prompt/config content.',
+        requiredSkills: ['align', 'pipeline-runner', 'prompt-pipeline', REFLECTION_SKILL_NAME, 'honest-mode'],
+        lifecycle: ['align_plan', 'latest_model_prompt_grammar', 'programmatic_tool_calling', 'agents_guidance', 'openai_skills_and_plugins', 'latest_only_cleanup', 'deduplicate_prompt_config', 'align_ledger', 'align_gate', 'post_route_reflection', 'honest_mode'],
+        context7Policy: 'if_external_docs',
+        reasoningPolicy: 'high',
+        stopGate: 'align-gate.json',
+        coverage_required: true,
+        cliEntrypoint: 'sks align prepare|run|status|proof',
+        examples: ['$Align modernize SKS skills to latest GPT-5.6', 'sks align prepare --json', 'sks align run "prompts and skills"']
+    },
     {
         id: 'Help',
         command: '$Help',
@@ -632,7 +646,7 @@ export const COMMAND_CATALOG = [
     { name: 'uninstall', usage: 'sks uninstall [--dry-run] [--yes] [--keep-config] [--keep-data] [--purge-projects] [--json]', description: 'Remove SKS global skills, hooks, menu bar, state, temp files, and optional project residue while preserving user-owned content by default.' },
     { name: 'deps', usage: 'sks deps check [--json] [--yes]', description: 'Check Node/npm, Codex CLI, and Zellij readiness; pass --yes to repair missing Codex CLI/Zellij tooling when supported.' },
     { name: 'codex', usage: 'sks codex compatibility|version|update-status [--refresh]|update|doctor|schema|0.144 [--json]', description: 'Check Codex CLI compatibility/version/update status, run the official `codex update`, and inspect current manifest, capability, and hook-schema evidence.' },
-    { name: 'codex-app', usage: 'sks codex-app [check|set-openrouter-key --api-key-stdin|use-openrouter --model <id>|openrouter-status|product-design|chrome-extension|pat status|remote-control]', description: 'Check Codex App install, OpenRouter provider activation, codex-lb key-entry guidance, Product Design plugin readiness, Codex Chrome Extension web verification readiness, PAT-safe status, first-party MCP/plugin readiness, and Codex CLI 0.130.0+ remote-control availability.' },
+    { name: 'codex-app', usage: 'sks codex-app [check|set-openrouter-key --api-key-stdin|use-openrouter --model <id>|openrouter-status|product-design|chrome-extension|pat status|remote-control]', description: 'Check Codex App install, OpenRouter provider activation, codex-lb key-entry guidance, Product Design plugin readiness, Codex Chrome Extension web verification readiness, PAT-safe status, first-party MCP/plugin readiness, and Codex CLI remote-control availability.' },
     { name: 'codex-native', usage: 'sks codex-native status|feature-broker|invocation-plan|init-deep [--json]', description: 'Inspect Codex Native feature broker readiness, invocation routing, pattern evidence, and managed memory setup.' },
     { name: 'hooks', usage: 'sks hooks explain|status|trust-report|replay|codex-validate|warning-check ... [--json]', description: 'Explain Codex hook events, validate vendored latest 10-event output schemas, replay fixtures, and enforce warning-zero SKS hook policies under the 0.134 compatibility matrix.' },
     { name: 'codex-lb', usage: 'sks codex-lb status|health|metrics|doctor|circuit|repair|setup ...', description: 'Configure, health-check, repair, and record circuit evidence for codex-lb provider auth without confusing ChatGPT OAuth and proxy keys.' },
@@ -642,7 +656,7 @@ export const COMMAND_CATALOG = [
     { name: 'mad-sks', usage: 'sks mad-sks plan|run|apply|sql|apply-migration|status|close|rollback-apply ... | sks --mad [--high]', description: 'Open or inspect MAD-SKS scoped permission workflows, merged SQL-plane execution, and the Zellij permission launcher.' },
     { name: 'auto-review', usage: 'sks auto-review status|enable|start [--high] | sks --Auto-review --high', description: 'Enable Codex automatic approval review and launch SKS Zellij with the auto-review profile.' },
     { name: 'dollar-commands', usage: 'sks dollar-commands [--json]', description: 'List Codex App $ commands such as $sks-dfix and $sks-naruto.' },
-    { name: 'fast-mode', usage: 'sks fast-mode on|off|status|clear [--project] [--json]', description: 'Toggle the global Codex Desktop GPT 5.5 Fast default used by $sks-fast-on/$sks-fast-off and keep project worker preference in sync; pass --project for project-local only.' },
+    { name: 'fast-mode', usage: 'sks fast-mode on|off|status|clear [--project] [--json]', description: 'Toggle the global Codex Desktop GPT-5.6 Fast default used by $sks-fast-on/$sks-fast-off and keep project worker preference in sync; pass --project for project-local only.' },
     { name: 'with-local-llm', usage: 'sks with-local-llm on|off|status|set-model [--json]', description: 'Toggle the optional local Ollama worker backend used by $sks-with-local-llm-on/$sks-with-local-llm-off and eligible simple worker slices.' },
     { name: 'commit', usage: 'sks commit [--message "msg"] [--json]', description: 'Stage current changes, summarize them, and create a simple git commit without the full SKS pipeline.' },
     { name: 'commit-and-push', usage: 'sks commit-and-push [--message "msg"] [--json]', description: 'Stage current changes, create a simple git commit, and push without the full SKS pipeline.' },
@@ -662,6 +676,7 @@ export const COMMAND_CATALOG = [
     { name: 'features', usage: 'sks features list|check|inventory [--json] [--write-docs]', description: 'Build and validate the feature registry that maps CLI commands, hidden handlers, dollar routes, app skill aliases, and skills.' },
     { name: 'all-features', usage: 'sks all-features selftest --mock [--json]', description: 'Run the mock all-features contract selftest for feature registry, proof, Voxel TriWiki, and failure-contract coverage.' },
     { name: 'aliases', usage: 'sks aliases', description: 'Show command aliases and npm binary names.' },
+    { name: 'align', usage: 'sks align prepare|run|status|proof ["scope"] [--json]', description: 'Prepare or inspect the $sks-align modernization mission that aligns SKS prompts, settings, and skills to latest GPT-5.6 / openai/skills guidance.' },
     { name: 'setup', usage: 'sks setup [--bootstrap] [--install-scope global|project] [--local-only] [--force] [--json]', description: 'Initialize SKS state, Codex App files, hooks, skills, and rules.' },
     { name: 'fix-path', usage: 'sks fix-path [--install-scope global|project] [--json]', description: 'Refresh hook commands with the resolved SKS binary path.' },
     { name: 'doctor', usage: 'sks doctor [--fix] [--local-only] [--json] [--install-scope global|project]', description: 'Check and repair SKS generated files, while blocking setup if another Codex harness is detected.' },
@@ -688,7 +703,7 @@ export const COMMAND_CATALOG = [
     { name: 'wiki', usage: 'sks wiki coords|pack|refresh|publish|rebuild-index|validate|validate-shared|wrongness ...', description: 'Build, refresh, publish shared shards, rebuild ignored indexes, validate, and attach wrongness-memory context to RGBA/trig LLM Wiki packs with attention.use_first and attention.hydrate_first for compact recall plus source hydration.' },
     { name: 'memory', usage: 'sks memory build [--json] | sks memory gc [--dry-run]', description: 'Project TriWiki context-pack memory into managed AGENTS.md blocks or run bounded memory cleanup.' },
     { name: 'hproof', usage: 'sks hproof check [mission-id|latest]', description: 'Evaluate the H-Proof done gate for a mission.' },
-    { name: 'naruto', usage: 'sks naruto run \"task\" [--agents N] [--max-threads N] [--trusted-project] [--json] | sks naruto status|subagents|proof [latest|M-...] [--json]', description: 'Run or inspect the Codex official subagent workflow with a Sol Max parent and fixed Luna Max mechanical, Sol High implementation, Sol Max judgment, and Terra Medium long-context/tool profiles, max_depth=1, and structured parent-thread completion evidence.' },
+    { name: 'naruto', usage: 'sks naruto run \"task\" [--agents N] [--max-threads N] [--trusted-project] [--json] | sks naruto status|subagents|proof [latest|M-...] [--json] | sks naruto parent-summary --mission M-... --stdin [--json]', description: 'Run or inspect the Codex official subagent workflow with a Sol Max parent and fixed Luna Max mechanical, Sol High implementation, Sol Max judgment, and Terra Medium long-context/tool profiles, max_depth=1, and structured parent-thread completion evidence.' },
     { name: 'reasoning', usage: 'sks reasoning ["prompt"] [--json]', description: 'Show SKS temporary reasoning-effort routing: medium for simple tasks, high for logic, xhigh for research.' },
     { name: 'gx', usage: 'sks gx init|render|validate|drift|snapshot [name]', description: 'Create and verify deterministic SVG/HTML visual context cartridges.' },
     { name: 'profile', usage: 'sks profile show|set <model>', description: 'Inspect or set the current SKS model profile metadata.' },
@@ -743,10 +758,15 @@ export function explicitManagedSkillNames(prompt = '') {
         const skillName = sksPrefixedSkillName(match.name);
         if (!skillName || skillName.length > 100)
             continue;
-        if (routeByDollarCommand(match.name)) {
-            if (!MANAGED_ROUTE_SKILL_NAME_SET.has(skillName) || selected.includes(skillName))
+        const matchedRoute = routeByDollarCommand(match.name);
+        if (matchedRoute) {
+            const canonicalRouteSkillName = sksPrefixedSkillName(dollarSkillName(matchedRoute.command));
+            const selectedSkillName = MANAGED_ROUTE_SKILL_NAME_SET.has(skillName)
+                ? skillName
+                : canonicalRouteSkillName;
+            if (!MANAGED_ROUTE_SKILL_NAME_SET.has(selectedSkillName) || selected.includes(selectedSkillName))
                 continue;
-            selected.push(skillName);
+            selected.push(selectedSkillName);
             continue;
         }
         if (!rawName.startsWith('sks-'))
@@ -1236,7 +1256,7 @@ export function simpleGitOnlyRouteId(prompt = '') {
 }
 export function reflectionRequiredForRoute(route) {
     const id = String(route?.id || route?.mode || route?.route || route || '').replace(/^\$/, '');
-    return /^(naruto|qaloop|qa-loop|ppt|imageuxreview|image-ux-review|research|autoresearch|seo|geo|db|database|madsks|mad-sks|gx)$/i.test(id);
+    return /^(naruto|qaloop|qa-loop|ppt|imageuxreview|image-ux-review|research|autoresearch|seo|geo|db|database|madsks|mad-sks|gx|align)$/i.test(id);
 }
 export function looksLikeCodeChangingWork(prompt = '') {
     const text = String(prompt || '');

package/dist/core/safety/command-contract/contracts.js

@@ -17,6 +17,7 @@ const ARGUMENT_PROFILES = {
             mission: boundedString(1, 160),
             agents: { type: 'integer', minimum: 1 },
             max_threads: { type: 'integer', minimum: 1 },
+            stdin: { type: 'boolean' },
             readonly: { type: 'boolean' },
             trusted_project: { type: 'boolean' },
             json: { type: 'boolean' }
@@ -34,6 +35,7 @@ const ARGUMENT_PROFILES = {
                 ...valueFlag(input, 'mission', '--mission'),
                 ...numberFlag(input, 'agents', '--agents'),
                 ...numberFlag(input, 'max_threads', '--max-threads'),
+                ...booleanFlag(input, 'stdin', '--stdin'),
                 ...booleanFlag(input, 'readonly', '--readonly'),
                 ...booleanFlag(input, 'trusted_project', '--trusted-project'),
                 ...jsonFlag(input)

package/dist/core/safety/command-contract/types.js

@@ -1 +1 @@
-export const NARUTO_ACTIONS = ['run', 'status', 'subagents', 'proof', 'help'];
+export const NARUTO_ACTIONS = ['run', 'status', 'subagents', 'proof', 'parent-summary', 'help'];

package/dist/core/search/context-graph-seeds.js

@@ -0,0 +1,205 @@
+import path from 'node:path';
+import { compareContextGraphIds } from '../triwiki/context-graph/ids.js';
+import { isWorkspaceRelativePosixPath } from '../triwiki/context-graph/paths.js';
+import { CONTEXT_GRAPH_TRAVERSAL_CAPS } from '../triwiki/context-graph/profiles.js';
+import { CONTEXT_GRAPH_RANKING_CONFIG, contextGraphSeedConfidenceScore, isExactContextGraphSeedConfidence } from '../triwiki/context-graph/query/ranking-config.js';
+import { normalizeContextGraphQuery, seedConfidenceFor } from '../triwiki/context-graph/query/seeds.js';
+const SEED_SCAN_BUDGET = 20_000;
+const GLOB_META = /[*?[\]{}!]/;
+export function contextGraphFocusPaths(patterns) {
+    const out = [];
+    for (const raw of patterns ?? []) {
+        const candidate = String(raw ?? '').trim().replace(/^\.\//, '').replace(/\/+$/, '');
+        if (!candidate || GLOB_META.test(candidate))
+            continue;
+        if (!isWorkspaceRelativePosixPath(candidate))
+            continue;
+        if (!out.includes(candidate))
+            out.push(candidate);
+    }
+    return out;
+}
+class SeedTable {
+    index;
+    config;
+    focusPaths;
+    drafts = new Map();
+    constructor(index, config, focusPaths) {
+        this.index = index;
+        this.config = config;
+        this.focusPaths = focusPaths;
+    }
+    has(nodeId) {
+        return this.drafts.has(nodeId);
+    }
+    get size() {
+        return this.drafts.size;
+    }
+    exactCount() {
+        let count = 0;
+        for (const draft of this.drafts.values()) {
+            if (isExactContextGraphSeedConfidence(draft.confidence))
+                count += 1;
+        }
+        return count;
+    }
+    add(nodeId, confidence, channel) {
+        const node = this.index.nodesById.get(nodeId);
+        if (!node)
+            return;
+        if (this.focusPaths.length > 0 && !underFocus(node.path, this.focusPaths))
+            return;
+        const score = contextGraphSeedConfidenceScore(this.config, confidence);
+        const existing = this.drafts.get(nodeId);
+        if (existing && existing.score >= score)
+            return;
+        this.drafts.set(nodeId, {
+            nodeId,
+            confidence,
+            channel,
+            score,
+            ...(node.path === undefined ? {} : { path: node.path }),
+            ...(node.locator?.line === undefined ? {} : { line: node.locator.line })
+        });
+    }
+    ranked(limit) {
+        return [...this.drafts.values()]
+            .sort((left, right) => right.score - left.score || compareContextGraphIds(left.nodeId, right.nodeId))
+            .slice(0, Math.max(0, limit));
+    }
+}
+function underFocus(nodePath, focusPaths) {
+    if (!nodePath)
+        return false;
+    return focusPaths.some((focus) => nodePath === focus || nodePath.startsWith(`${focus}/`));
+}
+function addSymbolSeeds(table, index, token, perToken) {
+    const direct = index.nodesById.get(token);
+    if (direct)
+        table.add(direct.id, seedConfidenceFor(direct.kind, 'node_id'), 'symbol');
+    for (const id of (index.nodesByLabel.get(token.toLowerCase()) ?? []).slice(0, perToken)) {
+        const node = index.nodesById.get(id);
+        if (node)
+            table.add(node.id, seedConfidenceFor(node.kind, 'label'), 'symbol');
+    }
+}
+function addExactPathSeeds(table, index, token, perToken) {
+    const candidate = token.replace(/^\.\//, '').replace(/\/+$/, '');
+    if (!candidate.includes('/') || !isWorkspaceRelativePosixPath(candidate))
+        return;
+    for (const id of (index.nodesByPath.get(candidate) ?? []).slice(0, perToken)) {
+        table.add(id, 'file_path', 'path');
+    }
+}
+function addBasenameSeeds(table, index, tokens, perToken, budget) {
+    const wanted = new Set();
+    for (const token of tokens) {
+        if (token.includes('/') || !token.includes('.'))
+            continue;
+        wanted.add(token.toLowerCase());
+    }
+    if (wanted.size === 0)
+        return;
+    let added = 0;
+    for (const key of index.nodesByPath.keys()) {
+        if (budget.scanned >= SEED_SCAN_BUDGET) {
+            budget.exhausted = true;
+            return;
+        }
+        budget.scanned += 1;
+        const base = key.slice(key.lastIndexOf('/') + 1).toLowerCase();
+        if (!wanted.has(base))
+            continue;
+        for (const id of (index.nodesByPath.get(key) ?? []).slice(0, perToken)) {
+            table.add(id, 'file_path', 'path');
+            added += 1;
+        }
+        if (added >= perToken * wanted.size)
+            return;
+    }
+}
+function addTextSeeds(table, index, lowerTokens, config, budget) {
+    const needles = lowerTokens.filter((token) => token.length >= config.lexicalMinTokenLength);
+    if (needles.length === 0)
+        return;
+    const hits = [];
+    const sweep = (keys, idsOf) => {
+        for (const key of keys) {
+            if (budget.scanned >= SEED_SCAN_BUDGET) {
+                budget.exhausted = true;
+                return false;
+            }
+            budget.scanned += 1;
+            const lower = key.toLowerCase();
+            if (!needles.some((needle) => lower.includes(needle)))
+                continue;
+            for (const id of idsOf(key))
+                hits.push(id);
+        }
+        return true;
+    };
+    if (sweep(index.nodesByLabel.keys(), (key) => index.nodesByLabel.get(key) ?? [])) {
+        sweep(index.nodesByPath.keys(), (key) => index.nodesByPath.get(key) ?? []);
+    }
+    const ordered = [...new Set(hits)].sort(compareContextGraphIds).slice(0, config.maxLexicalSeeds);
+    for (const id of ordered) {
+        if (table.has(id))
+            continue;
+        table.add(id, 'text_candidate', 'text');
+    }
+}
+function toSeed(draft) {
+    return {
+        nodeId: draft.nodeId,
+        confidence: draft.confidence,
+        origin: draft.channel === 'text' ? 'lexical' : 'exact',
+        channel: draft.channel,
+        ...(draft.path === undefined ? {} : { path: draft.path }),
+        ...(draft.line === undefined ? {} : { line: draft.line })
+    };
+}
+export function acquireContextGraphSeeds(input) {
+    const config = input.config ?? CONTEXT_GRAPH_RANKING_CONFIG;
+    const index = input.index;
+    const focusPaths = contextGraphFocusPaths(input.focusPaths);
+    const normalized = normalizeContextGraphQuery(input.query, config);
+    const table = new SeedTable(index, config, focusPaths);
+    const budget = { scanned: 0, exhausted: false };
+    const perToken = config.maxSeedsPerToken;
+    for (const focus of focusPaths) {
+        for (const id of (index.nodesByPath.get(focus) ?? []).slice(0, perToken)) {
+            table.add(id, 'file_path', 'path');
+        }
+    }
+    for (const token of normalized.tokens) {
+        addSymbolSeeds(table, index, token, perToken);
+        addExactPathSeeds(table, index, token, perToken);
+    }
+    addBasenameSeeds(table, index, normalized.tokens, perToken, budget);
+    if (table.exactCount() < config.minExactSeeds) {
+        addTextSeeds(table, index, normalized.lowerTokens, config, budget);
+    }
+    const maxSeeds = Math.max(0, input.maxSeeds ?? CONTEXT_GRAPH_TRAVERSAL_CAPS.maxSeeds);
+    const seeds = table.ranked(maxSeeds).map(toSeed);
+    const counts = { symbol: 0, path: 0, text: 0 };
+    let exactSeeds = 0;
+    for (const seed of seeds) {
+        counts[seed.channel] += 1;
+        if (isExactContextGraphSeedConfidence(seed.confidence))
+            exactSeeds += 1;
+    }
+    return {
+        seeds,
+        counts,
+        exactSeeds,
+        scannedKeys: budget.scanned,
+        scanBudgetExhausted: budget.exhausted,
+        tokens: normalized.tokens
+    };
+}
+export function workspaceRelativeSeedPath(value) {
+    const candidate = String(value ?? '').trim().replace(/\\/g, '/').replace(/^\.\//, '');
+    if (!candidate || path.posix.isAbsolute(candidate))
+        return null;
+    return isWorkspaceRelativePosixPath(candidate) ? candidate : null;
+}

package/dist/core/search/provider.js

@@ -127,9 +127,9 @@ export async function searchCapabilities(root = process.cwd()) {
             context: {
                 available: true,
                 provider: 'triwiki',
-                engine: 'triwiki+codepack',
+                engine: 'triwiki+context-graph',
                 externalBinaryRequired: false,
-                notes: [`root=${path.resolve(root)}`, 'No vector DB']
+                notes: [`root=${path.resolve(root)}`, 'No vector DB', 'A missing, stale, or corrupt graph returns context_graph_missing|context_graph_stale|context_graph_corrupt with a repair command; it never falls back to lexical search']
             }
         },
         rust: {

package/dist/core/secret-redaction.js

@@ -9,6 +9,7 @@ const SECRET_ENV_NAMES = [
     'GITHUB_PAT'
 ];
 const SECRET_PATTERNS = [
+    /-----BEGIN (?:RSA |EC |OPENSSH |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |DSA )?PRIVATE KEY-----/g,
     /\bsk-proj-[A-Za-z0-9_-]{12,}\b/g,
     /\bsk-or-v1-[A-Za-z0-9_-]{12,}\b/g,
     /\bsk-or-[A-Za-z0-9_-]{12,}\b/g,
@@ -16,6 +17,11 @@ const SECRET_PATTERNS = [
     /\bsk-clb-[A-Za-z0-9_-]{8,}\b/g,
     /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
     /\bghp_[A-Za-z0-9_]{20,}\b/g,
+    /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g,
+    /\bAIza[0-9A-Za-z_-]{30,}\b/g,
+    /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+    /\bnpm_[A-Za-z0-9]{30,}\b/g,
+    /\b(?:glpat|pypi|hf)_[A-Za-z0-9_-]{20,}\b/g,
     /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}\b/gi,
     /\bAuthorization\s*:\s*[^\r\n,}]+/gi,
     /\b(?:Cookie|Set-Cookie)\s*:\s*[^\r\n,}]+/gi,