sneakoscope 0.9.13 → 0.9.14

package/src/cli/feature-commands.mjs

@@ -52,7 +52,7 @@ export async function allFeaturesCommand(sub = 'selftest', args = []) {
   }
   const root = await projectRoot();
   const registry = await buildFeatureRegistry({ root });
-  const result = buildAllFeaturesSelftest(registry, { executeFixtures: flag(args, '--execute-fixtures'), root });
+  const result = buildAllFeaturesSelftest(registry, { executeFixtures: flag(args, '--execute-fixtures'), strictArtifacts: flag(args, '--strict-artifacts'), root });
   if (flag(args, '--json')) console.log(JSON.stringify(result, null, 2));
   else {
     console.log('SKS all-features selftest');
@@ -154,9 +154,19 @@ async function hooksReplayReport(fixturePath) {
   const runtime = await evaluateHookPayload(hookName, payload, { root: tempRoot, state });
   const decision = runtime.decision || runtime.permissionDecision || (runtime.continue === true ? 'continue' : 'continue');
   const expected = await readExpectedReplay(absolute);
-  const comparable = { decision, reason: runtime.reason || 'fixture_safe' };
-  const matchesExpected = expected ? expected.decision === comparable.decision && (!expected.reason || expected.reason === comparable.reason) : null;
-  const ok = expected ? matchesExpected : decision !== 'block' && decision !== 'deny';
+  const comparable = {
+    decision,
+    permissionDecision: runtime.permissionDecision || null,
+    reason: runtime.reason || 'fixture_safe',
+    gate: runtime.gate || runtime.hookSpecificOutput?.gate || null,
+    missing: runtime.missing || runtime.hookSpecificOutput?.missing || [],
+    issues: runtime.issues || runtime.hookSpecificOutput?.issues || runtime.missing || [],
+    continue: runtime.continue,
+    secret_policy: 'redacted'
+  };
+  const match = expected ? matchHookExpected(comparable, expected) : { ok: decision !== 'block' && decision !== 'deny', failures: [] };
+  const matchesExpected = expected ? match.ok : null;
+  const ok = match.ok;
   return redactSecrets({
     schema: 'sks.hooks-replay.v1',
     ok,
@@ -164,12 +174,41 @@ async function hooksReplayReport(fixturePath) {
     hook: hookName,
     command: payload.command || payload.tool_input?.command || payload.toolInput?.command || payload.input?.command || '',
     decision,
-    reason: runtime.reason || 'fixture_safe',
+    permissionDecision: comparable.permissionDecision,
+    reason: comparable.reason,
+    gate: comparable.gate,
+    missing: comparable.missing,
+    issues: comparable.issues,
+    continue: comparable.continue,
     matches_expected: matchesExpected,
+    expected_failures: match.failures,
     secret_policy: 'redacted'
   });
 }
 
+function matchHookExpected(actual = {}, expected = {}) {
+  const failures = [];
+  if (expected.decision !== undefined && expected.decision !== actual.decision) failures.push(`decision:${actual.decision}`);
+  if (expected.permissionDecision !== undefined && expected.permissionDecision !== actual.permissionDecision) failures.push(`permissionDecision:${actual.permissionDecision}`);
+  if (expected.reason !== undefined && expected.reason !== actual.reason) failures.push('reason');
+  if (expected.reason_contains !== undefined && !String(actual.reason || '').includes(expected.reason_contains)) failures.push('reason_contains');
+  if (expected.gate !== undefined && expected.gate !== actual.gate) failures.push(`gate:${actual.gate}`);
+  if (expected.continue !== undefined && expected.continue !== actual.continue) failures.push(`continue:${actual.continue}`);
+  for (const item of expected.missing_contains || []) {
+    if (!containsValue(actual.missing, item)) failures.push(`missing_contains:${item}`);
+  }
+  for (const item of expected.issues_contains || []) {
+    if (!containsValue(actual.issues, item) && !containsValue(actual.missing, item) && !String(actual.reason || '').includes(item)) failures.push(`issues_contains:${item}`);
+  }
+  if (expected.secret_policy !== undefined && expected.secret_policy !== actual.secret_policy) failures.push(`secret_policy:${actual.secret_policy}`);
+  return { ok: failures.length === 0, failures };
+}
+
+function containsValue(values, item) {
+  const list = Array.isArray(values) ? values : [values].filter(Boolean);
+  return list.some((value) => String(value || '').includes(item));
+}
+
 function normalizeReplayHookName(event = '') {
   const normalized = String(event || '').replace(/[_\s]+/g, '-').toLowerCase();
   if (normalized.includes('pretool') || normalized.includes('pre-tool')) return 'pre-tool';

package/src/cli/install-helpers.mjs

@@ -561,7 +561,7 @@ export async function checkCodexLbResponseChain(status = {}, opts = {}) {
 
 async function recordCodexLbChainHealth(result, opts = {}) {
   if (!result || result.skipped || opts.recordCircuit === false) return result;
-  await recordCodexLbHealthEvent(packageRoot(), result).catch(() => null);
+  await recordCodexLbHealthEvent(opts.root || packageRoot(), result).catch(() => null);
   return result;
 }
 
@@ -2349,7 +2349,7 @@ export async function selftestCodexLb(tmp) {
   if (!codexLbLaunch.includes('sks-codex-lb.env')) throw new Error('selftest: tmux launch command does not source codex-lb env file');
   if (!codexLbLaunch.includes("'--model' 'gpt-5.5'")) throw new Error('selftest: tmux launch command without args did not force GPT-5.5');
   if (!codexLbLaunch.includes('SKS_TMUX_LOGO_ANIMATION') || !codexLbLaunch.includes('SNEAKOSCOPE CODEX')) throw new Error('selftest: tmux launch command does not include the animated SKS logo intro');
-  const madLaunchSource = await safeReadText(path.join(packageRoot(), 'src', 'cli', 'maintenance-commands.mjs'));
+  const madLaunchSource = await safeReadText(path.join(packageRoot(), 'src', 'core', 'commands', 'route-cli.mjs'));
   if (!madLaunchSource.includes('const lb = await deps.maybePromptCodexLbSetupForLaunch(args)') || !madLaunchSource.includes("const launchLb = lb.status === 'present'") || !madLaunchSource.includes('codexLbImmediateLaunchOpts(cleanArgs, launchLb') || !madLaunchSource.includes('bypass_codex_lb') || !madLaunchSource.includes('model_provider="openai"') || !madLaunchSource.includes('codexLbFreshSession: true')) throw new Error('selftest: MAD launch does not sync codex-lb auth and fresh-session launch options');
 
 }

package/src/cli/router.mjs

@@ -13,8 +13,8 @@ function normalizeCommand(args = []) {
 export async function dispatch(args = []) {
   const { command, args: rest } = normalizeCommand(args);
   if (!command) {
-    const legacy = await import('./legacy-main.mjs');
-    return legacy.main(args);
+    const mod = await import('../commands/tmux.mjs');
+    return mod.run('tmux', ['check']);
   }
   const entry = COMMANDS[command];
   if (!entry) {
@@ -25,6 +25,5 @@ export async function dispatch(args = []) {
   const mod = await entry.lazy();
   const runner = mod.run || mod.main || mod.default;
   if (typeof runner !== 'function') throw new Error(`Command ${command} has no run/main export`);
-  if (mod.IS_LEGACY_CLI) return runner([command, ...rest]);
   return runner(command, rest);
 }

package/src/commands/aliases.mjs

@@ -0,0 +1,2 @@
+import { aliasesCommand } from '../core/commands/basic-cli.mjs';
+export async function run() { return aliasesCommand(); }

package/src/commands/auto-review.mjs

@@ -0,0 +1,5 @@
+import { autoReviewCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'status', ...rest] = args;
+  return autoReviewCommand(sub, rest);
+}

package/src/commands/autoresearch.mjs

@@ -0,0 +1,5 @@
+import { researchCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'status', ...rest] = args;
+  return researchCommand(sub, rest);
+}

package/src/commands/bootstrap.mjs

@@ -0,0 +1,2 @@
+import { bootstrapCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) { return bootstrapCommand(args); }

package/src/commands/code-structure.mjs

@@ -0,0 +1,5 @@
+import { codeStructureCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'scan', ...rest] = args;
+  return codeStructureCommand(sub, rest);
+}

package/src/commands/codex-lb.mjs

@@ -2,7 +2,8 @@ import path from 'node:path';
 import { projectRoot } from '../core/fsx.mjs';
 import { flag, readOption } from '../cli/args.mjs';
 import { printJson } from '../cli/output.mjs';
-import { codexLbMetrics, readCodexLbCircuit, recordCodexLbHealthEvent, resetCodexLbCircuit } from '../core/codex-lb-circuit.mjs';
+import { codexLbMetrics, readCodexLbCircuit, recordCodexLbHealthEvent, resetCodexLbCircuit, codexLbProofEvidence } from '../core/codex-lb-circuit.mjs';
+import { checkCodexLbResponseChain, codexLbStatus, configureCodexLb, formatCodexLbStatusText, releaseCodexLbAuthHold, repairCodexLbAuth, unselectCodexLbProvider } from '../cli/install-helpers.mjs';
 
 export async function run(command, args = []) {
   const root = await projectRoot();
@@ -14,6 +15,57 @@ export async function run(command, args = []) {
     if (!result.ok) process.exitCode = 1;
     return;
   }
+  if (action === 'status' || action === 'check') {
+    const result = await codexLbStatus();
+    if (flag(args, '--json')) return printJson(result);
+    process.stdout.write(formatCodexLbStatusText(result));
+    return;
+  }
+  if (action === 'health' || action === 'verify-chain' || action === 'chain') {
+    const status = await codexLbStatus();
+    const result = status.ok ? await checkCodexLbResponseChain(status, { force: true, root }) : { ok: false, status: 'not_configured', codex_lb: status };
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`codex-lb response chain: ${result.ok ? 'ok' : `failed (${result.status})`}`);
+    if (!result.ok) process.exitCode = 1;
+    return;
+  }
+  if (action === 'repair' || action === 'resync' || action === 'login') {
+    const result = await repairCodexLbAuth();
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`codex-lb repair: ${result.ok ? 'ok' : result.status}`);
+    if (!result.ok) process.exitCode = 1;
+    return;
+  }
+  if (action === 'release') {
+    const result = await releaseCodexLbAuthHold({ keepProvider: flag(args, '--keep-provider'), deleteBackup: flag(args, '--delete-backup'), force: flag(args, '--force') });
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`codex-lb release: ${result.status}`);
+    if (['no_backup', 'auth_in_use', 'failed'].includes(result.status)) process.exitCode = 1;
+    return;
+  }
+  if (action === 'unselect') {
+    const result = await unselectCodexLbProvider();
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`codex-lb unselect: ${result.status}`);
+    if (result.status === 'failed') process.exitCode = 1;
+    return;
+  }
+  if (action === 'setup' || action === 'reconfigure') {
+    const host = readOption(args, '--host', readOption(args, '--domain', null));
+    const apiKey = readOption(args, '--api-key', readOption(args, '--key', null));
+    if (!host || !apiKey) {
+      const result = { ok: false, reason: 'missing_host_or_api_key' };
+      if (flag(args, '--json')) return printJson(result);
+      console.error('Usage: sks codex-lb setup|reconfigure --host <domain> --api-key <key>');
+      process.exitCode = 1;
+      return;
+    }
+    const result = await configureCodexLb({ host, apiKey });
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`codex-lb configured: ${result.base_url || result.status}`);
+    if (!result.ok) process.exitCode = 1;
+    return;
+  }
   if (action === 'doctor' && flag(args, '--deep')) {
     const result = { schema: 'sks.codex-lb-doctor.v1', deep: true, ...codexLbMetrics(await readCodexLbCircuit(root)) };
     if (flag(args, '--json')) return printJson(result);
@@ -42,6 +94,12 @@ export async function run(command, args = []) {
     console.log(`codex-lb circuit: ${circuit.state}`);
     return;
   }
-  const legacy = await import('../cli/legacy-main.mjs');
-  return legacy.main([command, ...args]);
+  if (action === 'proof-evidence') {
+    const result = await codexLbProofEvidence(root);
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`codex-lb proof evidence: ${result.status}`);
+    return;
+  }
+  console.error('Usage: sks codex-lb status|metrics|doctor --deep|health|repair|release|unselect|setup|circuit reset|circuit record-fixture|proof-evidence [--json]');
+  process.exitCode = 1;
 }

package/src/commands/commands.mjs

@@ -0,0 +1,5 @@
+import { commandsCommand } from '../core/commands/basic-cli.mjs';
+
+export async function run(_command, args = []) {
+  return commandsCommand(args);
+}

package/src/commands/commit-and-push.mjs

@@ -0,0 +1,5 @@
+import { simpleGitCommitCommand } from '../core/git-simple.mjs';
+
+export async function run(_command, args = []) {
+  return simpleGitCommitCommand(args, { push: true });
+}

package/src/commands/commit.mjs

@@ -0,0 +1,5 @@
+import { simpleGitCommitCommand } from '../core/git-simple.mjs';
+
+export async function run(_command, args = []) {
+  return simpleGitCommitCommand(args, { push: false });
+}

package/src/commands/computer-use.mjs

@@ -0,0 +1,31 @@
+import { projectRoot } from '../core/fsx.mjs';
+import { findLatestMission } from '../core/mission.mjs';
+import { flag } from '../cli/args.mjs';
+import { printJson } from '../cli/output.mjs';
+import { finalizeRouteWithProof } from '../core/proof/route-finalizer.mjs';
+
+export async function run(command, args = []) {
+  const root = await projectRoot();
+  const missionArg = args.find((arg) => !String(arg).startsWith('--')) || 'latest';
+  const missionId = missionArg === 'latest' ? await findLatestMission(root) : missionArg;
+  if (!missionId) {
+    const result = { schema: 'sks.computer-use-evidence.v1', ok: false, status: 'missing_mission' };
+    if (flag(args, '--json')) return printJson(result);
+    console.error('No mission found.');
+    process.exitCode = 1;
+    return;
+  }
+  const route = command === 'cu' ? '$CU' : '$Computer-Use';
+  const proof = await finalizeRouteWithProof(root, {
+    missionId,
+    route,
+    mock: flag(args, '--mock'),
+    requireRelation: flag(args, '--fix-claim') || flag(args, '--require-relation'),
+    artifacts: ['computer-use-evidence-ledger.json', 'screen-capture-ledger.json', 'image-voxel-ledger.json', 'visual-anchors.json'],
+    claims: [{ id: 'computer-use-evidence', status: flag(args, '--mock') ? 'verified_partial' : 'supported' }]
+  });
+  const result = { schema: 'sks.computer-use-evidence.v1', ok: proof.ok, mission_id: missionId, route, proof: proof.validation };
+  if (flag(args, '--json')) return printJson(result);
+  console.log(`Computer Use evidence: ${proof.ok ? 'ok' : 'blocked'} ${missionId}`);
+  if (!proof.ok) process.exitCode = 1;
+}

package/src/commands/conflicts.mjs

@@ -0,0 +1,13 @@
+import { projectRoot } from '../core/fsx.mjs';
+import { formatHarnessConflictReport, llmHarnessCleanupPrompt, scanHarnessConflicts } from '../core/harness-conflicts.mjs';
+import { flag } from '../cli/args.mjs';
+import { printJson } from '../cli/output.mjs';
+export async function run(_command, args = []) {
+  const action = args[0] || 'check';
+  const scan = await scanHarnessConflicts(await projectRoot());
+  const result = { ...scan, cleanup_prompt: scan.hard_block ? llmHarnessCleanupPrompt(scan) : null };
+  if (flag(args, '--json')) return printJson(result);
+  if (action === 'prompt') return console.log(result.cleanup_prompt || '');
+  console.log(formatHarnessConflictReport(scan));
+  if (scan.hard_block) process.exitCode = 1;
+}

package/src/commands/context7.mjs

@@ -0,0 +1,5 @@
+import { context7Command } from '../cli/context7-command.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'check', ...rest] = args;
+  return context7Command(sub, rest);
+}

package/src/commands/db.mjs

@@ -1,4 +1,4 @@
-import { dbCommand } from '../cli/maintenance-commands.mjs';
+import { dbCommand } from '../core/commands/route-cli.mjs';
 
 export async function run(_command, args = []) {
   const [sub = 'policy', ...rest] = args;

package/src/commands/deps.mjs

@@ -0,0 +1,5 @@
+import { depsCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'check', ...rest] = args;
+  return depsCommand(sub, rest);
+}

package/src/commands/dfix.mjs

@@ -0,0 +1,2 @@
+import { dfixCommand } from '../core/commands/basic-cli.mjs';
+export async function run() { return dfixCommand(); }

package/src/commands/doctor.mjs

@@ -8,8 +8,8 @@ import { codexLbMetrics, readCodexLbCircuit } from '../core/codex-lb-circuit.mjs
 
 export async function run(_command, args = []) {
   if (flag(args, '--fix')) {
-    const legacy = await import('../cli/legacy-main.mjs');
-    return legacy.main(['doctor', ...args]);
+    const { setupCommand } = await import('../core/commands/basic-cli.mjs');
+    await setupCommand(['--force', '--local-only']);
   }
   const root = await projectRoot();
   const codex = await getCodexInfo().catch((err) => ({ available: false, error: err.message }));

package/src/commands/dollar-commands.mjs

@@ -0,0 +1,2 @@
+import { dollarCommandsCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) { return dollarCommandsCommand(args); }

package/src/commands/eval.mjs

@@ -0,0 +1,5 @@
+import { evalCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'run', ...rest] = args;
+  return evalCommand(sub, rest);
+}

package/src/commands/fix-path.mjs

@@ -0,0 +1,2 @@
+import { fixPathCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) { return fixPathCommand(args); }

package/src/commands/gc.mjs

@@ -0,0 +1,2 @@
+import { gcCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) { return gcCommand(args); }

package/src/commands/goal.mjs

@@ -0,0 +1,5 @@
+import { goalCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub, ...rest] = args;
+  return goalCommand(sub, rest);
+}

package/src/commands/guard.mjs

@@ -0,0 +1,10 @@
+import { projectRoot } from '../core/fsx.mjs';
+import { harnessGuardStatus } from '../core/harness-guard.mjs';
+import { flag } from '../cli/args.mjs';
+import { printJson } from '../cli/output.mjs';
+export async function run(_command, args = []) {
+  const result = await harnessGuardStatus(await projectRoot());
+  if (flag(args, '--json')) return printJson(result);
+  console.log(`Harness guard: ${result.ok ? 'ok' : 'blocked'}`);
+  if (!result.ok) process.exitCode = 1;
+}

package/src/commands/gx.mjs

@@ -0,0 +1,5 @@
+import { gxCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'validate', ...rest] = args;
+  return gxCommand(sub, rest);
+}

package/src/commands/harness.mjs

@@ -0,0 +1,5 @@
+import { harnessCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'fixture', ...rest] = args;
+  return harnessCommand(sub, rest);
+}

package/src/commands/help.mjs

@@ -1,77 +1,6 @@
-import { COMMANDS } from '../cli/command-registry.mjs';
-import { flag } from '../cli/args.mjs';
-import { printJson, sksTextLogo } from '../cli/output.mjs';
-
-const FALLBACK_CATALOG = [
-  { name: 'help', usage: 'sks help [stable|beta|labs|all]', description: 'Show concise SKS help.' },
-  { name: 'version', usage: 'sks version | sks --version', description: 'Print the installed version.' },
-  { name: 'commands', usage: 'sks commands [--json]', description: 'List the command registry.' },
-  { name: 'root', usage: 'sks root [--json]', description: 'Show the active SKS root.' },
-  { name: 'doctor', usage: 'sks doctor [--json]', description: 'Check local SKS readiness.' },
-  { name: 'features', usage: 'sks features check --json', description: 'Validate feature coverage and fixtures.' },
-  { name: 'all-features', usage: 'sks all-features selftest --mock --json', description: 'Run mock feature fixture checks.' },
-  { name: 'proof', usage: 'sks proof show|validate|latest|export [--json|--md]', description: 'Inspect completion proof.' },
-  { name: 'wiki', usage: 'sks wiki image-ingest|image-validate|image-summary ...', description: 'Manage TriWiki and image voxel ledgers.' },
-  { name: 'hooks', usage: 'sks hooks explain|status|trust-report|replay ...', description: 'Inspect Codex hook policy and trust evidence.' },
-  { name: 'codex-lb', usage: 'sks codex-lb status|metrics|doctor|circuit ...', description: 'Inspect codex-lb readiness and circuit state.' },
-  { name: 'perf', usage: 'sks perf cold-start --json', description: 'Measure CLI cold-start budgets.' },
-  { name: 'team', usage: 'sks team "task"', description: 'Create and observe Team missions.' },
-  { name: 'qa-loop', usage: 'sks qa-loop prepare|run|status ...', description: 'Run QA loop missions.' },
-  { name: 'research', usage: 'sks research prepare|run|status ...', description: 'Run research missions.' },
-  { name: 'ppt', usage: 'sks ppt build|status ...', description: 'Build or inspect PPT route artifacts.' },
-  { name: 'image-ux-review', usage: 'sks image-ux-review status ...', description: 'Inspect image UX review artifacts.' },
-  { name: 'db', usage: 'sks db policy|scan|check ...', description: 'Inspect database safety policy.' },
-  { name: 'gx', usage: 'sks gx init|render|validate|drift|snapshot ...', description: 'Create and verify visual context cartridges.' },
-  { name: 'goal', usage: 'sks goal create|status|pause|resume|clear ...', description: 'Manage the Goal bridge.' }
-];
+import { commandsCommand, helpCommand } from '../core/commands/basic-cli.mjs';
 
 export async function run(command, args = []) {
-  if (command === 'commands') return commands(args);
-  const topic = args[0];
-  if (topic === 'all') return printHelp('all');
-  if (['stable', 'beta', 'labs'].includes(topic)) return printHelp(topic);
-  if (topic) return printTopic(topic);
-  return printHelp('default');
-}
-
-function commands(args = []) {
-  const commands = commandRows('all');
-  if (flag(args, '--json')) {
-    return printJson({
-      schema: 'sks.command-registry.v1',
-      aliases: ['sks', 'sneakoscope'],
-      commands
-    });
-  }
-  console.log(`${sksTextLogo()}\n\nCommands\n`);
-  const width = Math.max(...commands.map((entry) => entry.usage.length));
-  for (const entry of commands) console.log(`${entry.usage.padEnd(width)}  ${entry.description}`);
-}
-
-function printHelp(filter) {
-  const rows = commandRows(filter === 'default' ? 'stable-beta' : filter);
-  console.log(`${sksTextLogo()}\n\nUsage\n`);
-  console.log('  sks help [stable|beta|labs|all]');
-  console.log('  sks commands [--json]');
-  console.log('  sks root [--json]');
-  console.log('  sks proof show --json');
-  console.log('');
-  for (const row of rows) console.log(`  ${row.usage.padEnd(54)} ${row.description}`);
-  console.log('\nCore promises: image-based Voxel TriWiki, Codex App/codex-lb readiness, and completion proof for serious routes.');
-}
-
-function printTopic(topic) {
-  const row = commandRows('all').find((entry) => entry.name === topic);
-  if (!row) return printHelp('default');
-  console.log(`${sksTextLogo()}\n\n${row.name}\n`);
-  console.log(`Usage: ${row.usage}`);
-  console.log(row.description);
-}
-
-function commandRows(filter) {
-  const maturityByName = new Map(Object.entries(COMMANDS).map(([name, meta]) => [name, meta.maturity || 'labs']));
-  const rows = FALLBACK_CATALOG.map((entry) => ({ ...entry, maturity: maturityByName.get(entry.name) || 'labs' }));
-  if (filter === 'all') return rows;
-  if (filter === 'stable-beta') return rows.filter((row) => row.maturity === 'stable' || row.maturity === 'beta');
-  return rows.filter((row) => row.maturity === filter);
+  if (command === 'commands') return commandsCommand(args);
+  return helpCommand(args);
 }

package/src/commands/hook.mjs

@@ -0,0 +1,8 @@
+import { hookMain } from '../core/hooks-runtime.mjs';
+import { printJson } from '../cli/output.mjs';
+
+export async function run(_command, args = []) {
+  const [name = 'user-prompt-submit'] = args;
+  const result = await hookMain(name);
+  return printJson(result);
+}

package/src/commands/hproof.mjs

@@ -0,0 +1,5 @@
+import { hproofCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub = 'check', ...rest] = args;
+  return hproofCommand(sub, rest);
+}

package/src/commands/image-ux-review.mjs

@@ -0,0 +1,38 @@
+import path from 'node:path';
+import { projectRoot, readJson } from '../core/fsx.mjs';
+import { findLatestMission, loadMission } from '../core/mission.mjs';
+import { flag } from '../cli/args.mjs';
+import { printJson } from '../cli/output.mjs';
+import { writeImageUxReviewRouteArtifacts } from '../core/image-ux-review.mjs';
+import { finalizeRouteWithProof } from '../core/proof/route-finalizer.mjs';
+
+export async function run(command, args = []) {
+  const root = await projectRoot();
+  const action = args[0] || 'status';
+  const missionArg = args[1] && !String(args[1]).startsWith('--') ? args[1] : 'latest';
+  const missionId = missionArg === 'latest' ? await findLatestMission(root) : missionArg;
+  if (!missionId) {
+    const result = { schema: 'sks.image-ux-review-status.v1', ok: false, status: 'missing_mission' };
+    if (flag(args, '--json')) return printJson(result);
+    console.error('No mission found.');
+    process.exitCode = 1;
+    return;
+  }
+  const { dir, mission } = await loadMission(root, missionId);
+  const contract = await readJson(path.join(dir, 'decision-contract.json'), { prompt: mission.prompt, answers: {}, sealed_hash: null });
+  if (action === 'build' || action === 'run' || (action === 'status' && flag(args, '--mock'))) {
+    const artifacts = await writeImageUxReviewRouteArtifacts(dir, contract);
+    const route = command === 'ux-review' ? '$UX-Review' : command === 'visual-review' ? '$Visual-Review' : command === 'ui-ux-review' ? '$UI-UX-Review' : '$Image-UX-Review';
+    const proof = await finalizeRouteWithProof(root, { missionId, route, mock: flag(args, '--mock'), artifacts: Object.keys(artifacts), claims: [{ id: 'image-ux-review-fixture', status: 'verified_partial' }] });
+    const result = { schema: 'sks.image-ux-review-build.v1', ok: proof.ok, mission_id: missionId, artifacts, proof: proof.validation };
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`Image UX review: ${proof.ok ? 'ok' : 'blocked'} ${missionId}`);
+    if (!proof.ok) process.exitCode = 1;
+    return;
+  }
+  const gate = await readJson(path.join(dir, 'image-ux-review-gate.json'), null);
+  const result = { schema: 'sks.image-ux-review-status.v1', ok: true, mission_id: missionId, gate };
+  if (flag(args, '--json')) return printJson(result);
+  console.log(`Image UX Review mission: ${missionId}`);
+  console.log(`Gate: ${gate?.passed ? 'passed' : gate ? 'present' : 'missing'}`);
+}

package/src/commands/init.mjs

@@ -0,0 +1,2 @@
+import { initCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) { return initCommand(args); }

package/src/commands/mad-sks.mjs

@@ -0,0 +1,14 @@
+import { madHighCommand } from '../core/commands/route-cli.mjs';
+import { maybePromptCodexUpdateForLaunch, maybePromptCodexLbSetupForLaunch } from '../cli/install-helpers.mjs';
+import { PACKAGE_VERSION } from '../core/fsx.mjs';
+
+export async function run(_command, args = []) {
+  return madHighCommand(['--mad-sks', ...args], {
+    maybePromptSksUpdateForLaunch: async () => ({ status: 'skipped' }),
+    maybePromptCodexUpdateForLaunch,
+    ensureMadLaunchDependencies: async () => ({ ready: true, actions: [], status: {} }),
+    printDepsInstallAction: (action) => console.log(JSON.stringify(action)),
+    maybePromptCodexLbSetupForLaunch,
+    packageVersion: PACKAGE_VERSION
+  });
+}

package/src/commands/memory.mjs

@@ -0,0 +1,5 @@
+import { memoryCommand } from '../core/commands/route-cli.mjs';
+export async function run(_command, args = []) {
+  const [sub, ...rest] = args;
+  return memoryCommand(sub, rest);
+}

package/src/commands/openclaw.mjs

@@ -0,0 +1,2 @@
+import { openClawCommand } from '../cli/openclaw-command.mjs';
+export async function run(_command, args = []) { return openClawCommand(args); }

package/src/commands/perf.mjs

@@ -25,8 +25,8 @@ export async function run(_command, args = []) {
     if (!result.ok) process.exitCode = 1;
     return;
   }
-  const legacy = await import('../cli/legacy-main.mjs');
-  return legacy.main(['perf', ...args]);
+  const { perfCommand } = await import('../core/commands/route-cli.mjs');
+  return perfCommand(action, args.slice(1));
 }
 
 export function runColdStart({ root = process.cwd(), iterations = DEFAULT_COLD_START_ITERATIONS } = {}) {

package/src/commands/pipeline.mjs

@@ -0,0 +1,25 @@
+import { projectRoot, readJson } from '../core/fsx.mjs';
+import { stateFile } from '../core/mission.mjs';
+import { flag } from '../cli/args.mjs';
+import { printJson } from '../cli/output.mjs';
+import { projectGateStatus } from '../core/pipeline.mjs';
+
+export async function run(_command, args = []) {
+  const root = await projectRoot();
+  const action = args[0] || 'status';
+  const state = await readJson(stateFile(root), {});
+  if (action === 'status') {
+    const result = { schema: 'sks.pipeline-status.v1', ok: true, state };
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`Pipeline: ${state.mission_id || 'none'} ${state.route_command || state.mode || ''}`.trim());
+    return;
+  }
+  if (action === 'plan') {
+    const result = await projectGateStatus(root, state);
+    if (flag(args, '--json')) return printJson(result);
+    console.log(`Pipeline gate: ${result.ok ? 'pass' : 'blocked'}`);
+    return;
+  }
+  console.error('Usage: sks pipeline status|plan [--json]');
+  process.exitCode = 1;
+}

package/src/commands/postinstall.mjs

@@ -0,0 +1,2 @@
+import { postinstallCommand } from '../core/commands/basic-cli.mjs';
+export async function run(_command, args = []) { return postinstallCommand(args); }