sneakoscope 8.1.1 → 8.1.2

package/README.md

@@ -22,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-This README documents package **SKS 8.1.1** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
+This README documents package **SKS 8.1.2** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
 
 Use the official latest stable SKS and Codex CLI releases. The Codex compatibility SSOT is always the **current latest stable** host; capability probes measure what that host can actually do. Product docs do not crown a fixed `0.x.y` string as SSOT (release pins and schema directories are measured artifacts for the current package, not a permanent product version claim). Menu Bar / Center induce updates to the latest stable build. Run `sks update-check` for what is installed and read the capability report for what is supported. Install SSOT is npm `sneakoscope@latest`; PATH `sks` and Menu Bar stamped generation must match that version or gates fail. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it (Codex official multi-agent wrap-only; SKS does not reimplement a parallel runtime). Local code search is mode-separated (`sks search files|text|structure|symbol|context`); `context` is answered by the compiled TriWiki Context Graph (`context-graph.json` is exhaustive authority; `context-pack.json` and managed `AGENTS.md` are bounded projections) — see [docs/architecture/context-graph.md](docs/architecture/context-graph.md) and [docs/PRODUCT-CONTRACT.md](docs/PRODUCT-CONTRACT.md). See [CHANGELOG.md](CHANGELOG.md).
 

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "8.1.1"
+version = "8.1.2"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "8.1.1"
+version = "8.1.2"
 edition = "2021"
 
 [dependencies]

package/dist/cli/install-helpers-codex-lb-config.js

@@ -17,6 +17,25 @@ export const CODEX_LB_MODEL_CATALOG_MARKER = '# sks-codex-lb-managed-model-catal
 export const CODEX_LB_PROVIDER_SELECTION_MARKER = '# sks-codex-lb-managed-provider-selection';
 export const CODEX_LB_OAUTH_SELECTION_MARKER = '# sks-codex-lb-managed-oauth-selection';
 export const LEGACY_CODEX_LB_OPENAI_ROUTING_MARKER = '# sks-codex-lb-managed-openai-base-url';
+const SKS_SWITCHABLE_THIRD_PARTY_PROVIDER_IDS = ['openrouter', 'sks-router'];
+const SKS_THIRD_PARTY_CATALOG_BASENAMES = ['sks-openrouter-catalog.json', 'opencodex-catalog.json'];
+export function releaseSksManagedThirdPartySelection(text) {
+    let next = String(text || '');
+    const selected = topLevelTomlString(next, 'model_provider');
+    if (!selected || !SKS_SWITCHABLE_THIRD_PARTY_PROVIDER_IDS.includes(selected)) {
+        return next;
+    }
+    if (!new RegExp(`(^|\\n)\\[model_providers\\.${escapeRegExp(selected)}\\]`).test(next))
+        return next;
+    next = removeTopLevelTomlKeyIfValue(next, 'model_provider', selected);
+    const catalog = topLevelTomlString(next, 'model_catalog_json');
+    if (catalog
+        && !topLevelHasLine(next, CODEX_LB_MODEL_CATALOG_MARKER)
+        && SKS_THIRD_PARTY_CATALOG_BASENAMES.some((name) => catalog.endsWith(`/${name}`) || catalog === name)) {
+        next = removeTopLevelTomlKey(next, 'model_catalog_json');
+    }
+    return next;
+}
 export function removeCodexLbOrphanManagedMarkers(text) {
     const source = String(text || '');
     const selectedProvider = topLevelTomlString(source, 'model_provider');
@@ -42,7 +61,7 @@ export function removeCodexLbOrphanManagedMarkers(text) {
     };
 }
 export function upsertCodexLbNativeDesktopConfig(text, input) {
-    let next = removeCodexLbOrphanManagedMarkers(String(text || '')).text;
+    let next = releaseSksManagedThirdPartySelection(removeCodexLbOrphanManagedMarkers(String(text || '')).text);
     const selectedProvider = topLevelTomlString(next, 'model_provider');
     if (selectedProvider && selectedProvider !== 'openai' && selectedProvider !== 'codex-lb') {
         throw new Error('codex_lb_user_owned_model_provider_conflict');
@@ -89,7 +108,9 @@ export function upsertCodexLbCliProviderConfig(text, input) {
     if (topLevelHasLine(cleaned, LEGACY_CODEX_LB_OPENAI_ROUTING_MARKER)) {
         throw new Error('codex_lb_legacy_desktop_config_requires_migration');
     }
-    const cliBase = removeCodexLbManagedDesktopConfig(cleaned);
+    const cliBase = input.selectGlobally === true
+        ? releaseSksManagedThirdPartySelection(removeCodexLbManagedDesktopConfig(cleaned))
+        : removeCodexLbManagedDesktopConfig(cleaned);
     const claimedSelection = input.selectGlobally === true
         && topLevelTomlString(cliBase, 'model_provider') === 'codex-lb'
         && !topLevelHasLine(cliBase, CODEX_LB_PROVIDER_SELECTION_MARKER)

package/dist/cli/install-helpers.js

@@ -28,7 +28,7 @@ import { canAskYesNo, compareVersions, hasCodexUnstableFeatureWarningSuppression
 import { printCodexLbSetupWarnings } from './codex-lb-setup-warning-output.js';
 import { checkCodexLbResponseChain } from './install-helpers-codex-lb-chain.js';
 import { CODEX_LB_CANONICAL_FAST_SERVICE_TIER, CODEX_LB_PROVIDER_ENV_KEY, askPostinstallQuestion, codexAuthChatgptBackupPath, codexAuthPath, codexLbConfigPath, codexLbEnvPath, hasTopLevelCodexLbSelected, normalizeCodexLbBaseUrl, parseCodexLbEnvKey, redactSecretText } from './install-helpers-codex-lb-shared.js';
-import { CODEX_LB_DESKTOP_BRIDGE_MARKER, CODEX_LB_DESKTOP_COMPAT_MARKER, CODEX_LB_PROVIDER_SELECTION_MARKER, appliedCodexLbPersistenceModes, captureCodexLbSetupWriteState, codexLbSharedOpenAiRoutingState, detectCodexLbSetupDrift, ensureGlobalCodexAppGlmProfile, ensureStoredOpenRouterProviderDuringInstall, hardenCodexLbSetupRecoveryPath, removeCodexLbSetupRecoveryPath, removeCodexLbOrphanManagedMarkers, removeCodexLbSharedOpenAiRouting, removeCodexLbManagedDesktopConfig, restoreCodexLbSetupWriteState, sha256Text, shellSingleQuote, upsertCodexAppGlmConfig, upsertCodexLbConfig, upsertCodexLbCliProviderConfig, upsertCodexLbCompatDesktopConfig, upsertCodexLbNativeDesktopConfig, upsertCodexLbSharedOpenAiRouting, writeCodexLbSetupFileIfUnchanged } from './install-helpers-codex-lb-config.js';
+import { CODEX_LB_DESKTOP_BRIDGE_MARKER, CODEX_LB_DESKTOP_COMPAT_MARKER, CODEX_LB_PROVIDER_SELECTION_MARKER, appliedCodexLbPersistenceModes, captureCodexLbSetupWriteState, codexLbSharedOpenAiRoutingState, detectCodexLbSetupDrift, ensureGlobalCodexAppGlmProfile, ensureStoredOpenRouterProviderDuringInstall, hardenCodexLbSetupRecoveryPath, removeCodexLbSetupRecoveryPath, removeCodexLbOrphanManagedMarkers, removeCodexLbSharedOpenAiRouting, releaseSksManagedThirdPartySelection, removeCodexLbManagedDesktopConfig, restoreCodexLbSetupWriteState, sha256Text, shellSingleQuote, upsertCodexAppGlmConfig, upsertCodexLbConfig, upsertCodexLbCliProviderConfig, upsertCodexLbCompatDesktopConfig, upsertCodexLbNativeDesktopConfig, upsertCodexLbSharedOpenAiRouting, writeCodexLbSetupFileIfUnchanged } from './install-helpers-codex-lb-config.js';
 import { detectLegacyCodexLbDesktopState } from '../core/codex-lb/legacy-migration.js';
 import { ensureCodexImagegenDuringInstall, ensureGlobalCodexSkillsDuringInstall, ensureGlobalContext7DuringInstall, ensureGlobalGetdesignSkillDuringInstall, ensureSksCommandDuringInstall } from './install-helpers-install-support.js';
 import { escapeRegExp } from '../core/text/regex.js';
@@ -416,7 +416,7 @@ export async function configureCodexLbDesktopRouting(opts) {
             })
             : mode === 'desktop-dual-auth-compat'
                 ? upsertCodexLbCompatDesktopConfig(current, { remoteBaseUrl: String(opts.remoteBaseUrl) })
-                : removeCodexLbManagedDesktopConfig(current);
+                : releaseSksManagedThirdPartySelection(removeCodexLbManagedDesktopConfig(current));
     }
     catch (error) {
         return {
@@ -494,10 +494,38 @@ export async function configureCodexLbCliProvider(opts) {
     const authPath = opts.authPath || codexAuthPath(home);
     const authBefore = await captureCodexAuthSnapshot({ home, authPath });
     const current = await readText(configPath, '');
-    const next = upsertCodexLbCliProviderConfig(current, {
-        remoteBaseUrl: opts.remoteBaseUrl,
-        ...(opts.selectGlobally === undefined ? {} : { selectGlobally: opts.selectGlobally })
-    });
+    let next;
+    try {
+        next = upsertCodexLbCliProviderConfig(current, {
+            remoteBaseUrl: opts.remoteBaseUrl,
+            ...(opts.selectGlobally === undefined ? {} : { selectGlobally: opts.selectGlobally })
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            schema: 'sks.codex-lb-cli-provider.v1',
+            ok: false,
+            status: message,
+            mode: 'cli-provider',
+            identity_plane: 'unchanged',
+            routing_plane: 'cli_provider',
+            oauth_preserved: true,
+            auth_mutated: false,
+            config_path: configPath,
+            auth_path: authPath,
+            auth_before: authBefore,
+            auth_after: authBefore,
+            blockers: [message],
+            guidance: message === 'codex_lb_user_owned_model_provider_conflict'
+                ? [
+                    'config.toml has a model_provider line SKS does not manage.',
+                    'Remove or change that line yourself, then retry Use Codex LB.'
+                ]
+                : [],
+            backup_path: null
+        };
+    }
     const write = await safeWriteCodexConfigToml(configPath, current, next, 'codex-lb-cli-provider', { verifyUnchangedBeforeWrite: true });
     const authAfter = await captureCodexAuthSnapshot({ home, authPath });
     try {

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "8.1.1",
+  "package_version": "8.1.2",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '8.1.1';
+export const PACKAGE_VERSION = '8.1.2';

package/dist/native/sks-menubar/Sources/ProvidersViewController.swift

@@ -145,7 +145,7 @@ final class ProvidersViewController: NSViewController, ControlCenterPage, NSText
             makeOpenRouterCard(),
             NativeView.card(
                 title: "Advanced",
-                subtitle: "Desktop Bridge keeps ChatGPT sign-in while routing traffic. Capability matrix and apply receipts appear after you run Verify or a provider mutation.",
+                subtitle: "You rarely need this section. Desktop Bridge is only for keeping ChatGPT sign-in while routing through codex-lb (or a custom-header-only gateway) — if Use Codex LB above works, skip it.",
                 views: [
                     oauthCredentialStatus,
                     NativeView.row([openCodexSignIn]),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "8.1.1",
+  "version": "8.1.2",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",