@event4u/agent-config 8.4.0 → 8.5.0

package/src/scripts/lint_profile_overlay_set_only.ts

@@ -2,8 +2,8 @@
 /**
  * lint_profile_overlay_set_only — freeze the set-only overlay invariant.
  *
- * TypeScript twin of `src/scripts/lint_profile_overlay_set_only.py` (ADR-200,
- * Phase 4 / Wave 4b). Mirrors the Python CLI contract EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_profile_overlay_set_only.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * flag from argv at module load, four YAML surfaces + sorted *.yml ordering,
  * finding messages (incl. Python `type(x).__name__` and `{x!r}` rendering),
  * stdout/stderr split, exit codes. No behaviour changes — latent bugs

package/src/scripts/lint_readme_jargon.ts

@@ -2,8 +2,8 @@
 /**
  * CI guard for README.md above-fold jargon density.
  *
- * TypeScript twin of `src/scripts/lint_readme_jargon.py` (ADR-200, Phase 4 /
- * Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet` flag, exit
+ * Ported from the retired Python `src/scripts/lint_readme_jargon.py` (ADR-200, Phase 4 /
+ * Wave 4b). The CLI contract is pinned — `--quiet` flag, exit
  * codes (0 within budget, 1 over budget / missing), stdout/stderr split,
  * byte-identical finding messages, same noise-stripping order, same
  * whole-word watchlist matching.

package/src/scripts/lint_readme_size.ts

@@ -2,8 +2,8 @@
 /**
  * CI guard for README.md line budget.
  *
- * TypeScript twin of `src/scripts/lint_readme_size.py` (ADR-200, Phase 4 /
- * Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet` flag, exit
+ * Ported from the retired Python `src/scripts/lint_readme_size.py` (ADR-200, Phase 4 /
+ * Wave 4b). The CLI contract is pinned — `--quiet` flag, exit
  * codes (0 within budget, 1 over budget / missing), stdout/stderr split,
  * byte-identical finding messages.
  *

package/src/scripts/lint_regression.ts

@@ -2,13 +2,13 @@
 /**
  * Detect lint regressions between the current branch and a baseline.
  *
- * TypeScript twin of `src/scripts/lint_regression.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--baseline`
+ * Ported from the retired Python `src/scripts/lint_regression.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--baseline`
  * / `--format` / `--repo-root` flags, exit codes (0 clean, 1 regressions /
  * new-files, 2 bad baseline / disjoint-result guard), stdout/stderr split,
  * byte-identical report text (text / json / markdown), the same disjoint
  * sanity guard, and the same worktree-based baseline strategy. snake_case
- * kept. No behaviour changes — latent bugs replicated.
+ * kept. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Runs skill_linter --all --format json on both the baseline (via a temp
  * `git worktree`) and the working tree, then compares results to find new

package/src/scripts/lint_roadmap_ci_steps.ts

@@ -2,12 +2,12 @@
 /**
  * Hard-Gate linter for the `roadmap-ci-steps-policy` rule.
  *
- * TypeScript twin of `src/scripts/lint_roadmap_ci_steps.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_roadmap_ci_steps.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * detected by argv membership (no argparse), exit codes (0 / 1),
  * stdout/stderr split, byte-identical messages, same scan scope
  * (`agents/roadmaps/*.md`, sorted) and detection order. No behaviour
- * changes — latent bugs replicated.
+ * changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Forbids full-pipeline CI literals (`task ci`, `make test`, `npm run check`
  * etc.) inside `agents/roadmaps/*.md` checkbox steps or fenced bash blocks

package/src/scripts/lint_roadmap_complexity.ts

@@ -2,7 +2,7 @@
 /**
  * Phase 5.2 roadmap-complexity linter.
  *
- * TypeScript twin of `src/scripts/lint_roadmap_complexity.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_roadmap_complexity.py` (ADR-200,
  * Phase 4 / Wave 4b). Mirrors the CLI contract EXACTLY — `--quiet` is a
  * bare `sys.argv` membership check (computed at import, NOT argparse, so
  * there is no real `-h`/`--help`), the per-roadmap `✅`/`❌` lines, the

package/src/scripts/lint_roadmap_later_disposition.ts

@@ -2,8 +2,8 @@
 /**
  * CI guard for the `later/` roadmap disposition.
  *
- * TypeScript twin of `src/scripts/lint_roadmap_later_disposition.py` (ADR-200,
- * Python→TypeScript migration). The CLI contract is mirrored EXACTLY — the
+ * Ported from the retired Python `src/scripts/lint_roadmap_later_disposition.py` (ADR-200,
+ * Python→TypeScript migration). The CLI contract is pinned — the
  * `--json` flag, the argparse usage / error text (`-h`/`--help` → exit 0,
  * unknown arg → exit 2), the scan order (`sorted(root.rglob("*.md"))` —
  * pathlib component-wise), byte-identical human + `--json` output

package/src/scripts/lint_role_experiences.ts

@@ -2,8 +2,8 @@
 /**
  * Linter for `agents/roles/<slug>/` role experiences.
  *
- * TypeScript twin of `src/scripts/lint_role_experiences.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY —
+ * Ported from the retired Python `src/scripts/lint_role_experiences.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned —
  * `--plain-language` flag, exit codes (0 pass / roles-dir-absent,
  * 1 failures), stdout/stderr split (all output on stdout), byte-identical
  * finding messages (including Python `sorted(set)` list repr), same scan

package/src/scripts/lint_rule_interactions.ts

@@ -2,7 +2,7 @@
 /**
  * Lint docs/contracts/rule-interactions.yml.
  *
- * TypeScript twin of `src/scripts/lint_rule_interactions.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_rule_interactions.py` (ADR-200,
  * Phase 4 / Wave 4b). Mirrors the CLI contract EXACTLY — the `--quiet`
  * flag is a bare `sys.argv` membership check (NOT argparse, so there is no
  * real `-h`/`--help`), exit codes (1 on any failure, 0 clean), the

package/src/scripts/lint_rule_tiers.ts

@@ -2,7 +2,7 @@
 /**
  * Lint rule frontmatter for the `tier:` key.
  *
- * TypeScript twin of `src/scripts/lint_rule_tiers.py` (ADR-200, Phase 4 /
+ * Ported from the retired Python `src/scripts/lint_rule_tiers.py` (ADR-200, Phase 4 /
  * Wave 4b). Mirrors the Python CLI contract exactly: same scan scope, file
  * ordering, finding messages, stdout/stderr split, and exit codes.
  *

package/src/scripts/lint_showcase_sessions.ts

@@ -2,9 +2,9 @@
 /**
  * Showcase-sessions linter.
  *
- * TypeScript twin of `src/scripts/lint_showcase_sessions.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_showcase_sessions.py` (ADR-200,
  * Phase 4 / Wave 4b). Gates `docs/showcase.md` ↔ `docs/showcase/sessions/`.
- * The CLI contract is mirrored EXACTLY — no flags (argv ignored), exit
+ * The CLI contract is pinned — no flags (argv ignored), exit
  * codes (0 clean, 1 violations), stdout/stderr split, byte-identical
  * finding messages, same reference regex and the same hand-rolled
  * frontmatter parser (including the `_<key>_nested` mapping trick).

package/src/scripts/lint_skill_frontmatter_safety.ts

@@ -1,6 +1,6 @@
 // P1.4 — dangerous-frontmatter linter (road-to-security-pillar.md).
 //
-// TypeScript twin of `src/scripts/lint_skill_frontmatter_safety.py` (ADR-200 —
+// Ported from the retired Python `src/scripts/lint_skill_frontmatter_safety.py` (ADR-200 —
 // Python→TS migration). Behaviour mirrors the Python module byte-for-byte.
 //
 // Enforces the execution-safety contract from the `runtime-safety` rule at the

package/src/scripts/lint_skill_originality.ts

@@ -2,7 +2,7 @@
 /**
  * Anti-duplicate originality gate (road-to-competitive-borrow P1.1).
  *
- * TypeScript twin of `src/scripts/lint_skill_originality.py` (ADR-096). The CLI
+ * Ported from the retired Python `src/scripts/lint_skill_originality.py` (ADR-096). The CLI
  * contract is mirrored EXACTLY — the `--strict` / `--json` / `--quiet` flags
  * (argparse; `-h`/`--help` exit 0, an unrecognized arg exits 2), exit codes
  * (0 = warn-only or strict-clean, 1 = strict + same-domain violation OR no

package/src/scripts/lint_skill_tools.ts

@@ -2,14 +2,14 @@
 /**
  * Block D · D1 meta-linter for `scripts/skill_tools/*.py`.
  *
- * TypeScript twin of `src/scripts/lint_skill_tools.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--json`
+ * Ported from the retired Python `src/scripts/lint_skill_tools.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--json`
  * / `--quiet` / `--tools-dir` flags, exit codes (0 clean, 1 violations,
  * 2 usage / missing-dir), stdout split (JSON or human), byte-identical
  * violation strings, same glob + sort order, same `_SAMPLE`/`__main__`
  * detection.
  *
- * The Python original parses each tool with `ast` to find imports and
+ * the retired Python implementation parses each tool with `ast` to find imports and
  * syntax errors. We replicate the import discovery with a focused
  * Python-import line scanner (handles `import a, b.c`, `from x.y import z`,
  * relative `from . import x`). It covers the real tools and the test

package/src/scripts/lint_ticket_buildable.ts

@@ -2,7 +2,7 @@
 /**
  * Lint ticket bundles for build-readiness.
  *
- * TypeScript twin of `src/scripts/lint_ticket_buildable.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/lint_ticket_buildable.py` (ADR-200,
  * Python→TypeScript migration). The behaviour is mirrored EXACTLY — NO argparse
  * (the entry point is `lint()`, which ignores argv entirely; an unknown flag is
  * silently ignored and the lint runs), the scan order
@@ -26,7 +26,7 @@
  * Exit codes: 0 = clean, 1 = lint failures, 3 = IO/setup error. Failures print as
  * ``path:reason``.
  *
- * The Python original uses `jsonschema.Draft7Validator`; this twin hand-rolls a
+ * the retired Python implementation uses `jsonschema.Draft7Validator`; this twin hand-rolls a
  * Draft-07 validator covering exactly the keyword set the two ticket schemas use
  * (type [string | array], required, additionalProperties [false], properties,
  * patternProperties, anyOf, pattern, enum, minLength, minItems, items, minimum,

package/src/scripts/lint_topics_yaml.ts

@@ -2,11 +2,11 @@
 /**
  * Linter for `.github/topics.yml`.
  *
- * TypeScript twin of `src/scripts/lint_topics_yaml.py` (ADR-200, Phase 4 /
- * Wave 4b). Mirrors the Python CLI contract EXACTLY — same scan target,
+ * Ported from the retired Python `src/scripts/lint_topics_yaml.py` (ADR-200, Phase 4 /
+ * Wave 4b). The CLI contract is pinned — same scan target,
  * finding messages (incl. Python `repr()` rendering of offending values),
  * stdout/stderr split, exit codes, and the `--quiet` flag read directly
- * from argv at module load. No behaviour changes — latent bugs replicated.
+ * from argv at module load. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Asserts:
  *   * file exists and parses as YAML

package/src/scripts/lint_trust_coherence.ts

@@ -2,12 +2,12 @@
 /**
  * Lint trust/safety coherence across the discovery manifest.
  *
- * TypeScript twin of `src/scripts/lint_trust_coherence.py` (ADR-200,
- * Phase 4 / Wave 4b). Mirrors the Python CLI contract EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_trust_coherence.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * / `--manifest` / `--router` / `--compiled-src` flags, finding messages,
  * stdout/stderr split (errors + summary on stderr; success on stdout),
  * SystemExit-on-missing-file semantics, exit codes. No behaviour changes —
- * latent bugs replicated.
+ * historical quirks preserved (consumers pin the exact behaviour).
  *
  * Walks the discovery manifest and asserts three invariants:
  *   1. advisory/restricted packs ship a `*safety-floor*` rule;

package/src/scripts/lint_value_dashboard.ts

@@ -2,10 +2,10 @@
 /**
  * Lint `docs/value.md` for structural invariants.
  *
- * TypeScript twin of `src/scripts/lint_value_dashboard.py` (ADR-200,
- * Phase 4 / Wave 4b). The CLI contract is mirrored EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/lint_value_dashboard.py` (ADR-200,
+ * Phase 4 / Wave 4b). The CLI contract is pinned — `--quiet`
  * flag, exit codes (0 / 1), stdout/stderr split, byte-identical messages,
- * same check order. No behaviour changes — latent bugs replicated.
+ * same check order. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Output: one violation per line in non-quiet mode; one-line summary in
  * quiet mode. Exit 0 on clean, 1 on any violation.

package/src/scripts/lint_workflow_security.ts

@@ -2,15 +2,15 @@
 /**
  * WARN-ONLY GitHub Actions workflow security linter.
  *
- * TypeScript twin of `src/scripts/lint_workflow_security.py` (ADR-200,
- * Python→TypeScript migration). The CLI contract is mirrored EXACTLY —
+ * Ported from the retired Python `src/scripts/lint_workflow_security.py` (ADR-200,
+ * Python→TypeScript migration). The CLI contract is pinned —
  * argparse flags (`--strict` / `--quiet` / `--json PATH`, `-h`/`--help`
  * exit 0, unknown arg → exit 2), the scan order (`sorted(glob("*.yml"))`
  * then `sorted(glob("*.yaml"))`), byte-identical finding lines, the
  * `json.dumps(..., indent=2)` (ensure_ascii) `--json` write, the allowlist
  * cap (exit 2 over 20 entries), the stdout/stderr split, and exit codes
  * (0 advisory / 1 strict+HIGH). snake_case kept; PyYAML `on:`→boolean-True
- * key quirk replicated. No behaviour changes — latent quirks replicated.
+ * key quirk replicated. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Severity model (council-locked 2026-06-13):
  *   HIGH  — pull_request_target / workflow_run + checkout of untrusted ref;

package/src/scripts/lint_workspace_boundary.ts

@@ -2,8 +2,8 @@
 /**
  * Workspace-boundary drift check — import-edge enforcement.
  *
- * TypeScript twin of `src/scripts/lint_workspace_boundary.py` (ADR-200,
- * Python→TypeScript migration). The CLI contract is mirrored EXACTLY — the
+ * Ported from the retired Python `src/scripts/lint_workspace_boundary.py` (ADR-200,
+ * Python→TypeScript migration). The CLI contract is pinned — the
  * `--quiet` flag, the `sorted(repo.glob(WORKSPACE_GLOB))` scan order (pathlib
  * component-wise), the FORBIDDEN-pattern set (Python `re` → JS `RegExp`, all
  * ASCII so a 1:1 translation), the `# boundary-exception:` pragma skip, the

package/src/scripts/mcp_parity_smoke.ts

@@ -17,7 +17,7 @@
 // Phase 5.1 of `road-to-cloudflare-mcp-hosting.md`. Governed by
 // `docs/contracts/mcp-cloud-scope.md` §A0-cloud.
 //
-// TS twin of mcp_parity_smoke.py (ADR-200 — Python→TS migration). Mirrors the
+// TS port of the retired Python mcp_parity_smoke.py (ADR-200). Mirrors the
 // Python wire surface byte-for-byte: stdout lines, the ✅ / ❌ / ⏭️ markers, the
 // argparse usage / error text (exit 2), and the exit codes. Imports resolve to
 // the already-ported mcp_server/{catalog,prompts,resources,tools}.ts twins —

package/src/scripts/mcp_render.ts

@@ -2,7 +2,7 @@
 /**
  * MCP config renderer — one `mcp.json` → per-tool output files.
  *
- * TypeScript twin of `mcp_render.py` (Phase 8 / Wave 8g).
+ * Ported from the retired Python `mcp_render.py` (Phase 8 / Wave 8g).
  *
  * Reads `mcp.json` at repo root (`{ "servers": { <name>: { command, args,
  * env, cwd } } }`), substitutes `${env:VAR}` placeholders from the

package/src/scripts/mcp_server/catalog.ts

@@ -10,7 +10,7 @@
 // `not_implemented` envelope contract live in
 // `docs/contracts/mcp-tool-stub-envelope.md`.
 //
-// TS twin of catalog.py (py2ts Phase 8). Mirrors the full public surface:
+// TS port of the retired Python catalog.py (ADR-200). Preserves the full public surface:
 //   - NOT_IMPLEMENTED_CODE, CatalogEntry, load_catalog, load_raw,
 //     install_hint, not_implemented_envelope.
 import * as fs from 'node:fs';

package/src/scripts/mcp_server/index.ts

@@ -13,7 +13,7 @@
 // Stability: experimental. Contract: `docs/contracts/mcp-phase-1-scope.md`.
 // Promotion to beta gated on `docs/contracts/mcp-beta-criteria.md`.
 //
-// TS twin of __init__.py (py2ts Phase 8). The Python package barrel exposes
+// TS port of the retired Python __init__.py (ADR-200). The Python package barrel exposes
 // exactly two module-level names: `__version__` and `SERVER_NAME`. Mirrored
 // here as `__version__` (Python wire-surface SemVer name preserved) and
 // SERVER_NAME.

package/src/scripts/mcp_server/metadata.ts

@@ -19,7 +19,7 @@
 // Stderr is the canonical surface in Phase 6; a wire-surface lift can
 // follow once the SDK supports it.
 //
-// TS twin of metadata.py (py2ts Phase 8). Mirrors the full public surface:
+// TS port of the retired Python metadata.py (ADR-200). Preserves the full public surface:
 //   - Signature type, read_package_version, compute_skill_set_signature,
 //     boot_log_line.
 import * as crypto from 'node:crypto';

package/src/scripts/mcp_server/prompts.ts

@@ -16,7 +16,7 @@
 // are skipped and surfaced in the second tuple element of `scan_*`
 // helpers (caller decides whether to log).
 //
-// TS twin of prompts.py (py2ts Phase 8). Mirrors the full public surface:
+// TS port of the retired Python prompts.py (ADR-200). Preserves the full public surface:
 //   PHASE_1_SKILLS, PromptKind, UserTypeMatch, SkillPrompt, load_skill,
 //   load_phase_1_prompts, scan_skills, scan_commands, load_all_prompts,
 //   to_mcp_prompt_meta, PromptCache. The leading-underscore helpers

package/src/scripts/mcp_server/resources.ts

@@ -15,7 +15,7 @@
 // first H1 line (`# Title`) is used as a title-style fallback, else the
 // filename-derived stem.
 //
-// TS twin of resources.py (py2ts Phase 8). Mirrors the full public surface:
+// TS port of the retired Python resources.py (ADR-200). Preserves the full public surface:
 //   ResourceKind, MIME_MARKDOWN, Resource, scan_rules, scan_guidelines,
 //   scan_contexts, load_all_resources, to_mcp_resource_meta, ResourceCache.
 //   Imports `_project_root` + `_strip_frontmatter` from prompts.ts

package/src/scripts/mcp_server/server.ts

@@ -21,7 +21,7 @@
 // `build_server` still accepts a plain `SkillPrompt[]` so the Phase-1
 // contract tests keep passing without touching their fixtures.
 //
-// TS twin of server.py (py2ts Phase 8). The Python module builds on the
+// TS port of the retired Python server.py (ADR-200). The Python module builds on the
 // `mcp` Python SDK (`mcp.server.Server`) and registers handlers via the
 // SDK decorators; the tests poke `server.request_handlers[...]`. There is
 // no `mcp` Python SDK in the TS runtime and the npm

package/src/scripts/mcp_server/telemetry.ts

@@ -19,7 +19,7 @@
 // `record_call` helper swallows OSError + ValueError and emits a single
 // warning to stderr.
 //
-// TS twin of telemetry.py (py2ts Phase 8). Mirrors the full public surface:
+// TS port of the retired Python telemetry.py (ADR-200). Preserves the full public surface:
 //   - Outcome type, TELEMETRY_REL_DIR, TELEMETRY_FILENAME, hash_client_id,
 //     build_record, record_call.
 import * as crypto from 'node:crypto';

package/src/scripts/mcp_server/tools.ts

@@ -27,7 +27,7 @@
 // TextContent block with the JSON-serialized payload, so MCP clients
 // can render structured output.
 //
-// TS twin of tools.py (py2ts Phase 8). Mirrors the full public surface:
+// TS port of the retired Python tools.py (ADR-200). Preserves the full public surface:
 //   STDIO_TRANSPORT, BuiltinTool, ToolHandler, ALLOWLIST, to_mcp_tool_meta,
 //   CATALOG_STUBS, STUB_NAMES, REGISTRY, ToolCache, boot_log_line.
 import * as fs from 'node:fs';

package/src/scripts/mcp_telemetry_health.ts

@@ -18,7 +18,7 @@
 //   ./scripts-run src/scripts/mcp_telemetry_health --allow-missing  # CI mode
 //   ./scripts-run src/scripts/mcp_telemetry_health --json           # machine-readable
 //
-// TS twin of mcp_telemetry_health.py (py2ts). Mirrors the full public
+// TS port of the retired Python mcp_telemetry_health.py (ADR-200). Mirrors the full public
 // surface: HealthReport, resolve_log_path, evaluate, main.
 import * as fs from 'node:fs';
 import * as path from 'node:path';

package/src/scripts/mcp_telemetry_query.ts

@@ -12,7 +12,7 @@
 // invocation. stdlib-only; reads (never writes) the DB via Node's
 // built-in `node:sqlite`, imported lazily.
 //
-// TS twin of mcp_telemetry_query.py (py2ts). Mirrors the full public
+// TS port of the retired Python mcp_telemetry_query.py (ADR-200). Mirrors the full public
 // surface: ToolRow, summarise, main.
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -51,8 +51,8 @@ class FileNotFoundLikeError extends Error {}
 // Python's stdlib sqlite3 emits nothing on stderr; node:sqlite is flagged
 // experimental on node 22 and prints an `ExperimentalWarning: SQLite …` line
 // to stderr on first import (stable / silent on node >= 23). Drop only that
-// specific warning so the twin's stderr stays byte-identical to the Python
-// original across node versions. Installed once, narrowly matched.
+// specific warning so stderr stays byte-stable across node versions (tests
+// pin the exact bytes). Installed once, narrowly matched.
 let _sqliteWarningSilenced = false;
 function _silenceSqliteExperimentalWarning(): void {
     if (_sqliteWarningSilenced) return;

package/src/scripts/mcp_telemetry_store.ts

@@ -15,7 +15,7 @@
 //
 // Phase 2 K2 (`scripts/mcp_telemetry_query.ts`) reads from this store.
 //
-// TS twin of mcp_telemetry_store.py (py2ts). Mirrors the full public
+// TS port of the retired Python mcp_telemetry_store.py (ADR-200). Mirrors the full public
 // surface: IngestReport, resolve_source, resolve_db, ingest, main.
 import * as crypto from 'node:crypto';
 import * as fs from 'node:fs';
@@ -176,8 +176,8 @@ export function resolve_db(consumer_root?: string | null): string {
 // Python's stdlib sqlite3 emits nothing on stderr; node:sqlite is flagged
 // experimental on node 22 and prints an `ExperimentalWarning: SQLite …` line
 // to stderr on first import (stable / silent on node >= 23). Drop only that
-// specific warning so the twin's stderr stays byte-identical to the Python
-// original across node versions. Installed once, narrowly matched.
+// specific warning so stderr stays byte-stable across node versions (tests
+// pin the exact bytes). Installed once, narrowly matched.
 let _sqliteWarningSilenced = false;
 function _silenceSqliteExperimentalWarning(): void {
     if (_sqliteWarningSilenced) return;

package/src/scripts/measure_augment_budget.ts

@@ -3,8 +3,8 @@
  * Measure the Augment workspace-guidelines budget (Phase 1.1 of
  * road-to-augment-limit-fit).
  *
- * TypeScript twin of `src/scripts/measure_augment_budget.py` (ADR-200,
- * Phase 8 Wave 8a). Mirrors the Python CLI contract EXACTLY — flags
+ * Ported from the retired Python `src/scripts/measure_augment_budget.py` (ADR-200,
+ * Phase 8 Wave 8a). The CLI contract is pinned — flags
  * (`--json`, `--trend-append`, `--check`), exit codes (0 / 1 / 3),
  * byte-identical stdout (text summary + `json.dumps(indent=2,
  * sort_keys=True)`), and the byte-identical JSONL trend record

package/src/scripts/measure_density.ts

@@ -2,12 +2,12 @@
 /**
  * Measure structural density across the artifact corpus.
  *
- * TypeScript twin of `src/scripts/measure_density.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/measure_density.py` (ADR-200 —
  * Python→TS migration, Phase 8 / Wave 8c). Mirrors the CLI contract
  * EXACTLY: flags (`--json`, `--snapshot`), exit code 0, byte-identical
  * stdout (report or `json.dumps(sort_keys=True, indent=2)`), and the same
  * snapshot JSONL (`json.dumps(sort_keys=True)` per line). No behaviour
- * changes — latent quirks replicated.
+ * changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Phase 1.1 of `agents/roadmaps/road-to-structural-linter-reform.md`.
  *

package/src/scripts/measure_frugality_savings.ts

@@ -2,8 +2,8 @@
 /**
  * Phase 0 baseline harness for road-to-trim-frugality-canon.
  *
- * TypeScript twin of `src/scripts/measure_frugality_savings.py` (ADR-200,
- * Phase 8 Wave 8a). Mirrors the Python CLI contract EXACTLY — exit code 0,
+ * Ported from the retired Python `src/scripts/measure_frugality_savings.py` (ADR-200,
+ * Phase 8 Wave 8a). The CLI contract is pinned — exit code 0,
  * byte-identical stdout (`json.dumps(record, indent=2, ensure_ascii=False)`
  * + the `appended → …` line), and the byte-identical JSONL baseline row
  * (`json.dumps(record, ensure_ascii=False)`).
@@ -337,7 +337,7 @@ export function main(): number {
 
     const out = path.join(root, 'agents', 'runtime', 'frugality', 'baseline.jsonl');
     // with out.open("a") — does NOT mkdir parents; mirror that (will throw if
-    // the directory is missing, exactly like the Python original).
+    // the directory is missing, exactly like the retired Python implementation).
     fs.appendFileSync(out, pyJsonDumps(record, null) + '\n');
     process.stdout.write(pyJsonDumps(record, 2) + '\n');
     const rel = path.relative(root, out).split(path.sep).join('/');

package/src/scripts/measure_markitdown_lift.ts

@@ -2,7 +2,7 @@
 /**
  * Measure markitdown's token-saving lift on the bundled corpus.
  *
- * TypeScript twin of `src/scripts/measure_markitdown_lift.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/measure_markitdown_lift.py` (ADR-200 —
  * Python→TS migration, Phase 8 / Wave 8c). Mirrors the CLI contract EXACTLY:
  * flags (`--convert`, `--binary`), exit codes (0 baseline / 2 corpus missing /
  * 3 --convert without the binary on PATH), byte-identical stdout/stderr. No

package/src/scripts/measure_patterns.ts

@@ -2,7 +2,7 @@
 /**
  * Measure presence of the eight Phase-3.1 judge patterns across all skills.
  *
- * TypeScript twin of `src/scripts/measure_patterns.py` (ADR-200 — Python→TS
+ * Ported from the retired Python `src/scripts/measure_patterns.py` (ADR-200 — Python→TS
  * migration, Phase 8 / Wave 8c). Mirrors the CLI contract EXACTLY: flags
  * (`--json`, `--tier`, `--diff-baseline`), exit codes (0 / 3 when the skills
  * dir is missing), byte-identical stdout/stderr. No behaviour changes.

package/src/scripts/measure_projection_bytes.ts

@@ -2,7 +2,7 @@
 /**
  * Measure per-tool projection bytes.
  *
- * TypeScript twin of `src/scripts/measure_projection_bytes.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/measure_projection_bytes.py` (ADR-200 —
  * Python→TS migration, Phase 8 / Wave 8c). Mirrors the CLI contract EXACTLY:
  * flags (`--json`, `--regenerate`), exit codes (0 / 2 when `task` is missing
  * for --regenerate), byte-identical stdout/stderr. No behaviour changes.

package/src/scripts/measure_rule_budget.ts

@@ -2,7 +2,7 @@
 /**
  * Measure rule-bucket char counts (kernel + auto) for the rule-kernel roadmap.
  *
- * TypeScript twin of `src/scripts/measure_rule_budget.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/measure_rule_budget.py` (ADR-200 —
  * Python→TS migration, Phase 8 / Wave 8a). The CLI contract is mirrored
  * EXACTLY: same flags (`--json`, `--kernel-budget-check`,
  * `--trend-append`), same exit codes, same byte-identical stdout table /

package/src/scripts/measure_skill_reduction.ts

@@ -2,7 +2,7 @@
 /**
  * Skill-count reduction measurement — step-12 Phase 3 L74 deliverable.
  *
- * TypeScript twin of `src/scripts/measure_skill_reduction.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/measure_skill_reduction.py` (ADR-200 —
  * Python→TS migration, Phase 8 / Wave 8c). Mirrors the CLI contract EXACTLY:
  * flag (`--json`), exit codes (0 pass / 1 fail / 2 no-skills), byte-identical
  * stdout (report or `json.dumps(indent=2)`) and stderr. No behaviour changes.

package/src/scripts/memory_hash.ts

@@ -2,7 +2,7 @@
 /**
  * Content-addressed hash for a curated memory entry.
  *
- * TypeScript twin of `src/scripts/memory_hash.py` (ADR-200, Phase 7 /
+ * Ported from the retired Python `src/scripts/memory_hash.py` (ADR-200, Phase 7 /
  * dev-side memory CORE). The public API and CLI contract mirror the Python
  * original EXACTLY — same exported names (snake_case kept deliberately),
  * same canonical-JSON serialisation (sorted keys, no whitespace,

package/src/scripts/memory_lookup.ts

@@ -2,8 +2,8 @@
 /**
  * File-first memory retrieval.
  *
- * TypeScript twin of `src/scripts/memory_lookup.py` (ADR-200). The public
- * API and CLI contract mirror the Python original EXACTLY — same exported
+ * Ported from the retired Python `src/scripts/memory_lookup.py` (ADR-200). The public
+ * API and CLI contract mirror the retired Python implementation EXACTLY — same exported
  * names (snake_case kept deliberately, especially `retrieve(...)` whose
  * signature/return shape is cited by rules), same exit codes, stdout/stderr
  * split, byte-identical messages, same memory-file scan + ranking + JSON
@@ -40,7 +40,7 @@ import YAML, { parseDocument } from 'yaml';
 // timestamp into a `datetime.datetime`. The `yaml` npm parses both to JS Date
 // objects whose String()/JSON form differs, so `json.dumps(..., default=str)`
 // in the CLI would not match. This marker preserves PyYAML's str() form so
-// JSON output and as_dict() are byte-identical to the Python original.
+// JSON output and as_dict() are byte-stable — downstream consumers and checksum gates pin these bytes.
 const PYYAML_DATE_ONLY_RE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/;
 const PYYAML_TIMESTAMP_RE =
     /^(?:[0-9]{4}-[0-9]{2}-[0-9]{2}|[0-9]{4}-[0-9]{1,2}-[0-9]{1,2}(?:[Tt]|[ \t]+)[0-9]{1,2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]*)?(?:[ \t]*(?:Z|[-+][0-9]{1,2}(?::[0-9]{2})?))?)$/;
@@ -191,7 +191,7 @@ function _load_yaml(p: string): unknown {
             const raw = text.slice(node.range[0], node.range[1]);
             // Under YAML 1.1 the `yaml` lib resolves plain timestamp scalars to
             // JS Date objects. Recover PyYAML's str() form from the original
-            // source so JSON output / as_dict() match the Python original.
+            // source so JSON output / as_dict() match the retired Python implementation.
             if (node.value instanceof Date) {
                 if (PYYAML_DATE_ONLY_RE.test(raw)) {
                     (node as { value: unknown }).value = new PyTimestamp(raw);
@@ -476,10 +476,10 @@ export function _score(entry: Record<string, unknown>, keys: string[]): number {
 /**
  * Project cross-repo matches into discounted, tagged Hits.
  *
- * Lazy + guarded: the Python original imports `cross_repo_retrieve` on
+ * Lazy + guarded: the retired Python implementation imports `cross_repo_retrieve` on
  * demand and swallows any failure (script absent, no opted-in siblings) so
  * the cross-repo type degrades to zero hits rather than breaking retrieval.
- * The TypeScript twin of `cross_repo_retrieve` is unported in this phase, so
+ * The Ported from the retired Python `cross_repo_retrieve` is unported in this phase, so
  * this always degrades to zero hits — flagged as a divergence candidate.
  * Scores sit below curated/knowledge (0.85× floor, then a small per-rank
  * decrement) so cross-repo context never outranks the project's own truth.

package/src/scripts/memory_report.ts

@@ -2,7 +2,7 @@
 /**
  * One-shot memory observability report.
  *
- * TypeScript twin of `src/scripts/memory_report.py` (ADR-200, Phase 7 /
+ * Ported from the retired Python `src/scripts/memory_report.py` (ADR-200, Phase 7 /
  * dev-side memory). The public API and CLI contract mirror the Python
  * original EXACTLY — same exported names (snake_case kept deliberately),
  * same exit codes, stdout/stderr split, byte-identical messages, and

package/src/scripts/memory_signal.ts

@@ -2,7 +2,7 @@
 /**
  * Write-side helper: drop an engineering-memory signal.
  *
- * TypeScript twin of `src/scripts/memory_signal.py` (ADR-200, Phase 7 /
+ * Ported from the retired Python `src/scripts/memory_signal.py` (ADR-200, Phase 7 /
  * dev-side memory). The public API and CLI contract mirror the Python
  * original EXACTLY — same exported names (snake_case kept deliberately),
  * same exit codes, stdout/stderr split, byte-identical messages, same