@event4u/agent-config 8.4.1 → 8.5.0

package/src/scripts/check_council_config_location.ts

@@ -2,12 +2,12 @@
 /**
  * CI guard: council config lives in `.ai-council.yml`, never `.agent-settings.yml`.
  *
- * TypeScript twin of `src/scripts/check_council_config_location.py` (ADR-200).
- * The CLI contract is mirrored EXACTLY — `--quiet` flag, exit codes (0 clean,
+ * Ported from the retired Python `src/scripts/check_council_config_location.py` (ADR-200).
+ * The CLI contract is pinned — `--quiet` flag, exit codes (0 clean,
  * 1 at least one violation), byte-identical finding messages, same scan globs
  * (sorted), same fence tracking, same negation / `ai_council:` block detection,
  * and the same `<!-- council-config-allowed -->` escape pragma. No behaviour
- * changes — latent bugs replicated.
+ * changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Per ADR-104 (superseding ADR-093) the council reads a dedicated
  * `.ai-council.yml` resolved ALWAYS from the user-global location

package/src/scripts/check_council_layout.ts

@@ -2,8 +2,8 @@
 /**
  * CI guard for the `ai-council` skill's output-path convention.
  *
- * TypeScript twin of `src/scripts/check_council_layout.py` (ADR-200,
- * Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/check_council_layout.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — `--quiet`
  * flag (positional anywhere in argv), exit codes (0 clean, 1 violations),
  * stdout, byte-identical finding messages, same `agents/` scan,
  * sorted-iterdir + sorted-rglob ordering, same exemptions. No behaviour

package/src/scripts/check_council_references.ts

@@ -2,8 +2,8 @@
 /**
  * CI guard for the council clause of the `no-roadmap-references` rule.
  *
- * TypeScript twin of `src/scripts/check_council_references.py` (ADR-200,
- * Phase 4 / Wave 4a). The CLI contract is mirrored EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/check_council_references.py` (ADR-200,
+ * Phase 4 / Wave 4a). The CLI contract is pinned — `--quiet`
  * flag, exit codes (0 clean, 1 forbidden refs), stdout/stderr split,
  * byte-identical finding + footer text, same scan roots / order, and the
  * same STRUCTURAL_CARVEOUTS logic. No behaviour changes — latent bugs

package/src/scripts/check_discovery_determinism.ts

@@ -2,12 +2,12 @@
 /**
  * Determinism check — runs the discovery scanner twice and diffs the output.
  *
- * TypeScript twin of `src/scripts/check_discovery_determinism.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — no flags,
+ * Ported from the retired Python `src/scripts/check_discovery_determinism.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — no flags,
  * exit codes (0 deterministic, 1 drift), stdout/stderr split, byte-identical
  * messages, and the same `generated_at` normalization + sorted-key JSON
  * comparison. The scanner itself (`build_discovery_manifest.ts`) is run via the
- * repo-local `tsx` binary, mirroring how the Python original invoked the
+ * repo-local `tsx` binary, mirroring how the retired Python implementation invoked the
  * scanner via `sys.executable`. No behaviour changes.
  *
  * Exit codes:

package/src/scripts/check_gate_paths.ts

@@ -2,13 +2,13 @@
 /**
  * Gate path-integrity check (R2 of road-to-test-and-gate-integrity).
  *
- * TypeScript twin of `src/scripts/check_gate_paths.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/check_gate_paths.py` (ADR-200,
  * Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — no flags, exit
  * codes (0 all resolve, 1 missing / out-of-tree, 2 a gate failed to
  * import / lacks GATE_CORE_PATHS), byte-identical messages, stdout/stderr
  * split, same gate list / source-tree roots.
  *
- * The Python original read each gate's ACTUAL enforced paths via that
+ * the retired Python implementation read each gate's ACTUAL enforced paths via that
  * module's `GATE_CORE_PATHS` attribute (`importlib.import_module`) — it
  * did NOT re-declare a copy of the path strings. The gate `.py` modules are
  * gone (ADR-200); the ported `.ts` twins each export `GATE_CORE_PATHS`, so
@@ -72,7 +72,7 @@ function _is_under_source_tree(p: string): boolean {
  * missing-or-empty GATE_CORE_PATHS — surfaced as exit 2 by `main`.
  *
  * The gate `.py` modules are gone (ADR-200); the `.ts` twins each export a
- * module-level `GATE_CORE_PATHS`. The Python original read the gate's REAL
+ * module-level `GATE_CORE_PATHS`. the retired Python implementation read the gate's REAL
  * paths via `importlib` + `getattr` and never copied them — this keeps that
  * property by importing the twin and reading its exported constant. A `tsx`
  * subprocess (not an in-process dynamic `import()`) is used so this function
@@ -147,7 +147,7 @@ function collect_gate_paths(gate_modules: readonly string[]): Map<string, string
     if ((typeof proc.status === 'number' ? proc.status : 1) !== 0) {
         // tsx unavailable or crashed before producing JSON — treat as an
         // import failure (exit 2 path), matching the "a gate failed to import"
-        // semantics of the Python original.
+        // semantics of the retired Python implementation.
         const err = new Error(
             (proc.stderr ?? '').trim() || 'gate introspection failed',
         ) as Error & { kind: string };

package/src/scripts/check_iron_law_prominence.ts

@@ -3,8 +3,8 @@
  * Iron Law prominence checker — enforces that any rule file declaring an
  * "Iron Law" places it at the top of the file at H2 level.
  *
- * TypeScript twin of `src/scripts/check_iron_law_prominence.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — positional
+ * Ported from the retired Python `src/scripts/check_iron_law_prominence.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — positional
  * paths (default `.agent-src.uncondensed/rules`), `--format` / `--quiet`
  * flags, exit codes (0 clean, 1 violations, 3 internal error),
  * stdout/stderr split, byte-identical finding messages, and the same

package/src/scripts/check_kernel_rule_bundle.ts

@@ -2,13 +2,13 @@
 /**
  * check_kernel_rule_bundle — Phase 4.2 of road-to-always-budget-relief.
  *
- * TypeScript twin of `src/scripts/check_kernel_rule_bundle.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — `--base-ref`
+ * Ported from the retired Python `src/scripts/check_kernel_rule_bundle.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — `--base-ref`
  * / `--label` / `--event-path` / `--files` flags, exit codes (0 pass,
  * 1 fail, 3 internal error), stdout/stderr split, byte-identical finding
  * messages, the same git-diff invocation, base-ref candidate order, and
  * PR-label parsing from the GitHub event JSON. No behaviour changes —
- * latent bugs replicated.
+ * historical quirks preserved (consumers pin the exact behaviour).
  *
  * Fails when a single PR (or commit range) modifies more than one
  * kernel rule under `.agent-src.uncondensed/rules/`. Override via the

package/src/scripts/check_knowledge_cards.ts

@@ -2,8 +2,8 @@
 /**
  * Pointer-CI + size + multi-evidence-consistency gate for committed knowledge cards.
  *
- * TypeScript twin of `src/scripts/check_knowledge_cards.py` (ADR-200). The
- * CLI contract mirrors the Python original EXACTLY — same flags (`--dir`,
+ * Ported from the retired Python `src/scripts/check_knowledge_cards.py` (ADR-200). The
+ * CLI contract pins the historical contract exactly — same flags (`--dir`,
  * `--strict`, `--check-urls`, `--freshness-days`), same exit codes
  * (0 / 1 / 3), same stdout/stderr split, byte-identical finding strings,
  * the same `sorted(glob("*.md"))` ordering, the same frontmatter parsing,
@@ -33,7 +33,7 @@ import * as https from 'node:https';
 import * as path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-// Global-store helpers (ADR-100). The Python original imports these lazily and
+// Global-store helpers (ADR-100). the retired Python implementation imports these lazily and
 // tolerantly (try/except → None) so the project-local linter still runs if the
 // _lib package layout shifts; the TS twins always exist, so a static import is
 // byte-faithful for behaviour (the only observable effect is the --global path).
@@ -306,7 +306,7 @@ function _freshness_warnings(p: string, days: number): string[] {
     const today = _todayUtcDate();
     const age = _dateDiffDays(today, newest);
     if (age > days) {
-        // Faithful replication of the Python original (ADR-200): it calls
+        // Faithful replication of the retired Python implementation (ADR-200): it calls
         // `path.relative_to(ROOT)` when the card path is absolute. pathlib
         // raises ValueError (uncaught → process dies, exit 1) when the path is
         // NOT under ROOT — the documented latent crash for an absolute `--dir`

package/src/scripts/check_knowledge_pages.ts

@@ -5,7 +5,7 @@
  * `agents/knowledge/{sessions,concepts,procedures,decisions}/*.md`.
  *
  * Deliberately SEPARATE from `check_knowledge_cards.ts` (a byte-faithful
- * parity twin of its retired Python original — never touched here) and
+ * parity port of the retired Python implementation — never touched here) and
  * deliberately warn-only: schema-as-contract for these pages is explicitly
  * deferred (2026-07-05 council verdict) until real team usage data exists.
  * This script never fails the build; it surfaces drift for a human to act

package/src/scripts/check_md_language.ts

@@ -2,13 +2,13 @@
 /**
  * Markdown language checker — enforces language-and-tone § ".md files are ALWAYS English".
  *
- * TypeScript twin of `src/scripts/check_md_language.py` (ADR-200, Phase 4 /
- * Wave 4c). The CLI contract is mirrored EXACTLY — positional `paths`,
+ * Ported from the retired Python `src/scripts/check_md_language.py` (ADR-200, Phase 4 /
+ * Wave 4c). The CLI contract is pinned — positional `paths`,
  * `--format` / `--quiet` flags, exit codes (0 clean, 1 violations, 3
  * internal error), stdout/stderr split, byte-identical finding messages,
  * the same per-line skipping (frontmatter, fences, indented code, DE/EN
  * anchors, ignore marker), and the same umlaut + DE-word detection. No
- * behaviour changes — latent bugs replicated.
+ * behaviour changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Scans .md files for German content (umlauts, function words, quoted DE phrases)
  * in body prose, skipping fenced/inline code, DE:/EN: anchors, and ignore markers.

package/src/scripts/check_memory.ts

@@ -2,8 +2,8 @@
 /**
  * Engineering Memory validator.
  *
- * TypeScript twin of `src/scripts/check_memory.py` (ADR-200, Phase 4 /
- * Wave 4a). The CLI contract mirrors the Python original EXACTLY — same
+ * Ported from the retired Python `src/scripts/check_memory.py` (ADR-200, Phase 4 /
+ * Wave 4a). The CLI contract pins the historical contract exactly — same
  * flags (`--path`, `--format`, `--append-only`, `--base`), same exit
  * codes, same stdout/stderr split,
  * byte-identical finding messages, same scan scope and ordering. No
@@ -36,7 +36,7 @@
  *     check_memory --append-only       # CI: diff vs origin/main
  *     check_memory --append-only --base HEAD~1
  *
- * Note on YAML date typing: the Python original relies on PyYAML's
+ * Note on YAML date typing: the retired Python implementation relies on PyYAML's
  * `safe_load` converting unquoted `YYYY-MM-DD` scalars to `datetime.date`
  * (and `YYYY-MM-DD HH:MM:SS` to `datetime.datetime`). The `yaml` npm
  * package parses every scalar to a string, so this twin re-implements

package/src/scripts/check_memory_proposal.ts

@@ -2,8 +2,8 @@
 /**
  * Gate script for memory promotion (intake → curated).
  *
- * TypeScript twin of `src/scripts/check_memory_proposal.py` (ADR-200,
- * Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY — mutually
+ * Ported from the retired Python `src/scripts/check_memory_proposal.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — mutually
  * exclusive `--intake-id` / `--proposal` (one required), `--format`
  * (text|json), `--quiet`, exit codes (0 pass, 1 gate failure / not-found,
  * 2 PyYAML missing — N/A here, 3 internal), stdout/stderr split,

package/src/scripts/check_module_management_neutral.ts

@@ -2,7 +2,7 @@
 /**
  * Lint guard: `module-management` SKILL must stay framework-neutral.
  *
- * TypeScript twin of `src/scripts/check_module_management_neutral.py`
+ * Ported from the retired Python `src/scripts/check_module_management_neutral.py`
  * (ADR-200, Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — no
  * flags, exit codes (0 clean, 2 violation / missing file), byte-identical
  * messages and stdout/stderr split.

package/src/scripts/check_no_conflict_markers.ts

@@ -2,7 +2,7 @@
 /**
  * Fail the build on leftover merge/stash conflict state.
  *
- * TypeScript twin of `src/scripts/check_no_conflict_markers.py` (ADR-200). The
+ * Ported from the retired Python `src/scripts/check_no_conflict_markers.py` (ADR-200). The
  * CLI contract is mirrored EXACTLY — the `--quiet` flag (argparse, so
  * `-h`/`--help` exit 0 with a usage line, an unrecognized arg exits 2), exit
  * codes (0 = clean, 1 = conflicted index OR markers found, 2 = allowlist over

package/src/scripts/check_no_external_sources.ts

@@ -2,7 +2,7 @@
 /**
  * check_no_external_sources — block readable inspiration/harvest source names.
  *
- * TypeScript twin of `src/scripts/check_no_external_sources.py` (ADR-200). The
+ * Ported from the retired Python `src/scripts/check_no_external_sources.py` (ADR-200). The
  * CLI contract is mirrored EXACTLY — the `--json` flag, exit codes (0 = clean,
  * 1 = at least one denied token in a non-skipped tracked file, 2 = usage /
  * config error), the stdout split, byte-identical text + JSON report

package/src/scripts/check_no_local_settings_committed.ts

@@ -2,8 +2,8 @@
 /**
  * Fail if any `.agent-settings.local.yml` is tracked by git.
  *
- * TypeScript twin of `src/scripts/check_no_local_settings_committed.py`
- * (ADR-200, Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY —
+ * Ported from the retired Python `src/scripts/check_no_local_settings_committed.py`
+ * (ADR-200, Phase 4 / Wave 4c). The CLI contract is pinned —
  * no flags, exit codes (0 clean, 1 offenders), stdout, byte-identical
  * finding messages, same `git ls-files` scan and basename match. No
  * behaviour changes.

package/src/scripts/check_no_new_legacy_path.ts

@@ -2,12 +2,12 @@
 /**
  * Regression guard: no NEW `.agent-src.uncondensed/` references in `src/`.
  *
- * TypeScript twin of `src/scripts/check_no_new_legacy_path.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — `--base`
+ * Ported from the retired Python `src/scripts/check_no_new_legacy_path.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — `--base`
  * / `--stdin` flags, exit codes (0 no new references, 1 a new reference,
  * 2 internal error), stdout split, byte-identical finding messages,
  * same diff parsing, same EXEMPT set, and the same faithful-twin rule.
- * No behaviour changes — latent bugs replicated.
+ * Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * NOTE (faithful-twin rule): this guard's `.py` original is in its own
  * EXEMPT set and legitimately contains the literal `.agent-src.uncondensed`

package/src/scripts/check_no_roadmap_refs.ts

@@ -2,12 +2,12 @@
 /**
  * No-roadmap-references checker.
  *
- * TypeScript twin of `src/scripts/check_no_roadmap_refs.py` (ADR-200,
- * Phase 4 / Wave 4a). The CLI contract is mirrored EXACTLY — `--format`
+ * Ported from the retired Python `src/scripts/check_no_roadmap_refs.py` (ADR-200,
+ * Phase 4 / Wave 4a). The CLI contract is pinned — `--format`
  * / `--root` flags, exit codes (0 clean, 1 violations, 3 internal error),
  * stdout/stderr split, byte-identical finding messages, same scan trees
  * and order, same fenced-code-block skipping, same self-documenting
- * allowlist. No behaviour changes — latent bugs replicated.
+ * allowlist. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Stable artifacts (rules, skills, commands, contexts, guidelines, AGENTS.md,
  * README, copilot-instructions) must NOT cite a specific roadmap file in

package/src/scripts/check_one_off_location.ts

@@ -2,12 +2,12 @@
 /**
  * One-off script-location guard (Phase 0a.2 of road-to-rule-hardening).
  *
- * TypeScript twin of `src/scripts/check_one_off_location.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — the
+ * Ported from the retired Python `src/scripts/check_one_off_location.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — the
  * `--quiet` flag, exit codes (0 clean, 1 violation, 3 internal error),
  * stdout/stderr split, byte-identical finding messages, and the same
  * scan scope (`src/scripts/**\/_one_off_*.py`) and file ordering. No
- * behaviour changes — latent bugs replicated.
+ * behaviour changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Every `_one_off_*.py` script under `scripts/` must live inside the
  * archive folder `scripts/ai_council/one_off_archive/<YYYY-MM>/`. The

package/src/scripts/check_overlay_cascade_subdirs.ts

@@ -2,12 +2,12 @@
 /**
  * Guard: `CASCADE_ELIGIBLE_KINDS` / `USER_GLOBAL_OVERLAY_KINDS` ↔ docs.
  *
- * TypeScript twin of `src/scripts/check_overlay_cascade_subdirs.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — no flags, exit
+ * Ported from the retired Python `src/scripts/check_overlay_cascade_subdirs.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — no flags, exit
  * codes (0 clean, 1 drift, 3 internal error), stdout/stderr split,
  * byte-identical finding messages, and the same `docs/customization.md` table
  * parse. The `_lib/agents_overlay` twin supplies the two constant sets. No
- * behaviour changes — latent bugs replicated.
+ * behaviour changes — historical quirks preserved (consumers pin the exact behaviour).
  *
  * Phase 1 of road-to-portable-runtime-and-update-check (P1.6). The
  * overlay resolver in `scripts/_lib/agents_overlay` ships two

package/src/scripts/check_portability.ts

@@ -2,7 +2,7 @@
 /**
  * Portability checker for agent-config packages.
  *
- * TypeScript twin of `src/scripts/check_portability.py` (ADR-200). Mirrors the
+ * Ported from the retired Python `src/scripts/check_portability.py` (ADR-200). Mirrors the
  * Python CLI contract EXACTLY — same flags (`--format`, `--root`), same exit
  * codes (0 clean, 1 violations, 3 internal error), same stdout/stderr split,
  * same finding text, same scan scope and file-walk order. No behaviour
@@ -187,7 +187,7 @@ function _detect_project_identifiers(root: string): Set<string> {
     // 4. Directory name (parent directories of dist/agent-src/)
     const augmentDir = path.join(root, 'dist/agent-src');
     if (_exists(augmentDir)) {
-        // The Python original uses the UNRESOLVED `root` (a `pathlib.Path`):
+        // the retired Python implementation uses the UNRESOLVED `root` (a `pathlib.Path`):
         // `root.name` and `root.parent.name`. For the default `--root .` that
         // yields empty strings (Path('.').name == '' and Path('.').parent.name
         // == ''), so neither identifier is added. Replicate that exactly — do
@@ -231,7 +231,7 @@ function _build_patterns(root: string): { patterns: PatternSpec[]; detected: str
     const patterns: PatternSpec[] = [];
     const detected: string[] = [...identifiers].sort();
 
-    // Iterate in sorted order for deterministic output. The Python original
+    // Iterate in sorted order for deterministic output. the retired Python implementation
     // iterates over a `set` whose order is unspecified; on the real repo
     // `scan_all` finds zero violations so order is moot, but a controlled tree
     // with multiple identifiers could surface a per-line ordering difference.

package/src/scripts/check_public_catalog_links.ts

@@ -2,7 +2,7 @@
 /**
  * Public-catalog link checker (regression guard for road-to-pr-34-followups 1.1).
  *
- * TypeScript twin of `src/scripts/check_public_catalog_links.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/check_public_catalog_links.py` (ADR-200,
  * Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — `--quiet` flag,
  * exit codes (0 clean, 1 violations / missing catalog), byte-identical
  * messages, stdout-only output, same link regex / resolution / truncation

package/src/scripts/check_public_links.ts

@@ -2,8 +2,8 @@
 /**
  * Public-link checker for the agent-config public surface.
  *
- * TypeScript twin of `src/scripts/check_public_links.py` (ADR-200, Phase 4 /
- * Wave 4c). The CLI contract is mirrored EXACTLY — `--list` / `--json` /
+ * Ported from the retired Python `src/scripts/check_public_links.py` (ADR-200, Phase 4 /
+ * Wave 4c). The CLI contract is pinned — `--list` / `--json` /
  * `--strict` flags, exit codes (0 clean, 1 violations, 3 internal error),
  * stdout split, byte-identical finding messages, the same scan order and
  * the same `resolve()` semantics (including its latent quirks: the

package/src/scripts/check_references.ts

@@ -2,8 +2,8 @@
 /**
  * Cross-reference checker for agent-config repositories.
  *
- * TypeScript twin of `src/scripts/check_references.py` (ADR-200, Phase 4 /
- * Wave 4a). The CLI contract is mirrored EXACTLY — same `--format` /
+ * Ported from the retired Python `src/scripts/check_references.py` (ADR-200, Phase 4 /
+ * Wave 4a). The CLI contract is pinned — same `--format` /
  * `--root` flags, same exit codes (0 clean, 1 broken refs, 3 internal
  * error), same stdout/stderr split, byte-identical finding messages,
  * same scan scope and order, same example/allowlist/skip logic. No
@@ -16,7 +16,7 @@
  *
  * NOTE: the forbidden-substring detector `.agent-src.uncondensed/`
  * appears verbatim in the suggestion / resolution prefixes below — it is
- * a faithful twin of the Python original (legacy-path guard auto-exempts
+ * port of the retired Python implementation (legacy-path guard auto-exempts
  * faithful twins).
  */
 

package/src/scripts/check_release_includes_discovery.ts

@@ -2,8 +2,8 @@
 /**
  * Assert dist/discovery/discovery-manifest.json ships with the package.
  *
- * TypeScript twin of `src/scripts/check_release_includes_discovery.py`
- * (ADR-200, Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY —
+ * Ported from the retired Python `src/scripts/check_release_includes_discovery.py`
+ * (ADR-200, Phase 4 / Wave 4c). The CLI contract is pinned —
  * no flags, exit codes (0 OK, 1 die), stdout/stderr split, byte-identical
  * finding messages (paths relative to ROOT), same checks in the same order.
  * No behaviour changes.

package/src/scripts/check_release_pr_shape.ts

@@ -3,8 +3,8 @@
  * Release-PR shape checker — fail-closed gate for
  * `docs/contracts/release-pr-gating.md`.
  *
- * TypeScript twin of `src/scripts/check_release_pr_shape.py` (ADR-200,
- * Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY — mutually
+ * Ported from the retired Python `src/scripts/check_release_pr_shape.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — mutually
  * exclusive `--pr` / `--files` (one required), `--files` accepts a
  * comma-separated list or `-` (stdin, one per line), exit codes
  * (0 shape-clean, 1 out-of-shape/empty, 2 usage/env), stdout, fnmatch

package/src/scripts/check_release_published.ts

@@ -2,7 +2,7 @@
 /**
  * Release-published drift gate.
  *
- * TypeScript twin of `src/scripts/check_release_published.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/check_release_published.py` (ADR-200,
  * Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — `--strict`,
  * `--check-npm`, `--require-main` flags, exit codes (0 pass/no-op,
  * 1 drift, 3 internal error), byte-identical messages, stdout/stderr split,

package/src/scripts/check_release_trunk_sync.ts

@@ -2,12 +2,12 @@
 /**
  * Release-trunk-sync CI gate (road-to-productization P1.3).
  *
- * TypeScript twin of `src/scripts/check_release_trunk_sync.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — no flags,
+ * Ported from the retired Python `src/scripts/check_release_trunk_sync.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — no flags,
  * exit codes (0 pass/no-op, 1 main too far behind, 3 internal error),
  * stdout, byte-identical `::warning::` / `::error::` messages, the same
  * git plumbing and the same env-var override. No behaviour changes —
- * latent bugs replicated.
+ * historical quirks preserved (consumers pin the exact behaviour).
  *
  * Fails if `main` is more than one tagged release behind the current
  * release-prep branch's target version. No-ops on every other branch

package/src/scripts/check_reply_consistency.ts

@@ -2,7 +2,7 @@
 /**
  * check_reply_consistency.ts — enforce user-interaction.md Iron Laws.
  *
- * TypeScript twin of `src/scripts/check_reply_consistency.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/check_reply_consistency.py` (ADR-200,
  * Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — `--stdin` /
  * `--file` / `--scan-dir` mutually-exclusive required group, `--strict`,
  * `-v`/`--verbose`, `--quiet`; exit codes (0 ok · 2 inline tag · 3 multi-rec ·

package/src/scripts/check_roadmap_trackable.ts

@@ -2,12 +2,12 @@
 /**
  * CI guard for the `roadmap-progress-sync` rule's trackability Iron Law.
  *
- * TypeScript twin of `src/scripts/check_roadmap_trackable.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/check_roadmap_trackable.py` (ADR-200,
  * Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — `--quiet` flag,
  * exit codes (0 all trackable, 1 violation, 1 missing roadmap dir),
  * byte-identical messages, stdout/stderr split, same scan order.
  *
- * The Python original imports `CHECKBOX_RE`, `PHASE_RE`, `is_draft`,
+ * the retired Python implementation imports `CHECKBOX_RE`, `PHASE_RE`, `is_draft`,
  * `is_roadmap_candidate`, `parse_frontmatter` from
  * `.augment/scripts/update_roadmap_progress.py` (the dashboard) as the
  * single source of truth so the linter cannot drift from what the

package/src/scripts/check_role_doc_links.ts

@@ -2,8 +2,8 @@
 /**
  * Verify every skill link in role-based docs resolves to a real file.
  *
- * TypeScript twin of `src/scripts/check_role_doc_links.py` (ADR-200,
- * Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY — `--quiet`
+ * Ported from the retired Python `src/scripts/check_role_doc_links.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — `--quiet`
  * flag, exit codes (0 all resolve, 1 broken links, 2 missing role doc),
  * stdout/stderr split, byte-identical finding messages, same scan + link
  * regex + path resolution. No behaviour changes.

package/src/scripts/check_safety_floor_untouched.ts

@@ -2,12 +2,12 @@
 /**
  * Safety-floor exclusion linter (Phase 2A.0 of road-to-structural-optimization).
  *
- * TypeScript twin of `src/scripts/check_safety_floor_untouched.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — `--baseline`
+ * Ported from the retired Python `src/scripts/check_safety_floor_untouched.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — `--baseline`
  * / `--skip-if-no-baseline` flags, exit codes (0 clean/skipped, 1 floor
  * file modified, 3 internal error), stdout/stderr split, byte-identical
  * messages, the same git plumbing and the same `origin/main` → `main`
- * fallback. No behaviour changes — latent bugs replicated.
+ * fallback. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Per Q3=A locked decision (council Round 3, 2026-05-03), the four
  * safety-floor always-rules are out of scope for Phase 2A slimming:

package/src/scripts/check_skill_requires.ts

@@ -2,8 +2,8 @@
 /**
  * Skill-composition graph gate (roadmap 3.4).
  *
- * TypeScript twin of `src/scripts/check_skill_requires.py` (ADR-200,
- * Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY — no flags,
+ * Ported from the retired Python `src/scripts/check_skill_requires.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — no flags,
  * exit codes (0 clean, 1 violations), stdout, byte-identical messages
  * (including Python list-repr of sorted pack sets), same skill collection
  * (iter_artefacts SKILL.md), packs.yml closure, and sorted iteration. No

package/src/scripts/check_structural_breaking.ts

@@ -2,12 +2,12 @@
 /**
  * Structural breaking-change detector (road-to-contract-integrity F3).
  *
- * TypeScript twin of `src/scripts/check_structural_breaking.py` (ADR-200). The
+ * Ported from the retired Python `src/scripts/check_structural_breaking.py` (ADR-200). The
  * CLI contract is mirrored EXACTLY — the `--quiet` flag, exit codes (0 clean /
  * cleared, 1 break without annotation), the stdout/stderr split (the ✅ summary
  * on stdout, the ❌ block on stderr), byte-identical finding + remediation
  * messages, the same `git diff --name-status` / `git log` shell-outs, and the
- * same regex set. No behaviour changes — latent bugs replicated.
+ * same regex set. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * `release.py` infers the version bump from the commit annotation
  * (`feat!` / `BREAKING CHANGE`). This detector inspects the diff against the

package/src/scripts/check_surface_tiers.ts

@@ -2,7 +2,7 @@
 /**
  * Surface-tier boundary guard (road-to-install-contract-stability Phase 2).
  *
- * TypeScript twin of `src/scripts/check_surface_tiers.py` (ADR-200). The CLI
+ * Ported from the retired Python `src/scripts/check_surface_tiers.py` (ADR-200). The CLI
  * contract is mirrored EXACTLY — the `--skip-imports` flag + the
  * `AGENT_CONFIG_SKIP_SURFACE_TIER_CHECK` env kill-switch, exit codes (0 clean,
  * 1 violation(s), 2 argparse usage error), byte-identical finding + summary
@@ -10,7 +10,7 @@
  * same core→lab import boundary check. No behaviour changes — latent bugs
  * replicated.
  *
- * The Python original parses each `.py` under `src/scripts/` with the stdlib
+ * the retired Python implementation parses each `.py` under `src/scripts/` with the stdlib
  * `ast` module to find imports and the line numbers of imports lexically inside
  * a guarding `try/except`. This twin replicates that with a focused Python
  * import + try/except line scanner: it tracks each statement's START line (the

package/src/scripts/check_template_pin_drift.ts

@@ -2,7 +2,7 @@
 /**
  * Fail when `package.json.version` and the project-template pin drift.
  *
- * TypeScript twin of `src/scripts/check_template_pin_drift.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/check_template_pin_drift.py` (ADR-200,
  * Phase 4 / Wave 4c). CLI contract mirrored EXACTLY — `--allow-empty`
  * flag, exit codes (0 match / empty-allowed, 1 drift / missing / unreadable),
  * byte-identical messages, stdout/stderr split, same template-file

package/src/scripts/check_test_coverage_diff.ts

@@ -2,8 +2,8 @@
 /**
  * Coverage forcing-function — WARN-only (R3 of road-to-test-and-gate-integrity).
  *
- * TypeScript twin of `src/scripts/check_test_coverage_diff.py` (ADR-200,
- * Phase 4 / Wave 4c). Mirrors the Python CLI contract EXACTLY — `--base-ref`
+ * Ported from the retired Python `src/scripts/check_test_coverage_diff.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — `--base-ref`
  * flag, always exit 0 (warn-only by contract), stdout, byte-identical
  * messages, the git name-status read, the pragma scan, and the `evaluate`
  * core logic. No behaviour changes — latent matcher quirks replicated.

package/src/scripts/check_token_optimizer_freshness.ts

@@ -2,12 +2,12 @@
 /**
  * Token-Optimizer freshness validator.
  *
- * TypeScript twin of `src/scripts/check_token_optimizer_freshness.py` (ADR-200,
- * Phase 4 / Wave 4c). The CLI contract is mirrored EXACTLY — no flags,
+ * Ported from the retired Python `src/scripts/check_token_optimizer_freshness.py` (ADR-200,
+ * Phase 4 / Wave 4c). The CLI contract is pinned — no flags,
  * exit codes (0 clean, 1 drift / missing skill / unparseable), stdout/stderr
  * split, byte-identical messages, the same catalog-row parsing, the same
  * `resolve()` / `is_external()` logic and the same `_lib/agent_src`
- * resolution. No behaviour changes — latent bugs replicated.
+ * resolution. Historical quirks are preserved deliberately — tests and downstream consumers pin the exact behaviour.
  *
  * Parses the catalog table inside the token-optimizer SKILL.md, verifies
  * every cited internal asset exists, and checks the trigger keywords against