sneakoscope 0.9.19 → 1.0.0

package/README.md

@@ -2,11 +2,30 @@
 
 Fast legacy-free proof-first Codex trust layer with image-based Voxel TriWiki.
 
-Sneakoscope Codex (`sks`) is a Codex CLI/App harness that makes repeatable Codex work auditable. `0.9.19` binds real Scout engine output to structured `sks.scout-result.v1` evidence, keeps `pipeline-runtime.mjs` as a small compatibility facade, and release-gates packed npm/npx/global install behavior with explicit feature quality boundaries.
+Sneakoscope Codex (`sks`) is a Codex CLI/App harness that makes repeatable Codex work auditable. `1.0.0` makes the trust layer TypeScript-first: strict typed contracts compile to `dist`, packed installs smoke every command registry entry, real black-box package checks are release-gated, and `sks run --execute` can carry safe routes through execution, proof, trust report, and status.
+
+SKS does not try to clone every other harness. It focuses on one thing: making Codex work auditable, visual-evidence-bound, safety-gated, and reproducible through Completion Proof.
 
 ![Sneakoscope Codex architecture and pipeline](https://raw.githubusercontent.com/mandarange/Sneakoscope-Codex/dev/docs/assets/sneakoscope-architecture-pipeline.jpg)
 
-## 0.9.19 Current Release
+## 1.0.0 Current Release
+
+1.0.0 strengthens the core trust loop instead of expanding route names. The new TypeScript spine covers command registry contracts, route contracts, evidence records, Completion Proof, Trust Reports, Image Voxel ledgers, Scout output, and feature fixtures. The package publishes built `dist` output, and release checks prove the packed tarball can import every registered command.
+
+Highlights:
+
+- `npm run build`, `npm run typecheck`, `npm run typecheck:contracts`, and `npm run schema:check` are release invariants.
+- `npm run package-boundary:check` and `npm run blackbox:command-import-smoke` verify the packed package, not just the source checkout.
+- `npm run blackbox:matrix` runs real pack install, npx one-shot, global shim, no-git, spaces, and Korean/Unicode path checks by default.
+- `sks run "task" --execute --json` and `sks run "task" --auto --json` execute safe routes; visual evidence gaps and destructive DB prompts block with explicit recovery.
+- `sks trust report latest --json`, `sks trust validate latest --json`, and `sks trust explain latest` expose the route trust kernel.
+- Route finalization writes mission-local `route-completion-contract.json`, `evidence-index.json`, `evidence.jsonl`, and `trust-report.json`.
+- Mock/static evidence stays `verified_partial` or lower; static contracts cannot satisfy runtime route contracts.
+- Visual route validation blocks stale image/voxel anchors.
+- `sks bench core --tier source-ci --json` writes `.sneakoscope/reports/performance/core-bench.json` and `.md` using tiered budgets.
+- `sks paths managed --json` and `sks rollback list --json` document SKS-owned project paths and explicit rollback actions.
+
+## 0.9.19 Release
 
 0.9.19 makes SKS Scout evidence parse-bound and package-install verified. Real Codex/tmux/Codex App subagent engines must write parseable scout output before consensus can use them as primary evidence. If an engine is unavailable or output cannot be parsed, SKS records a blocked or verified-partial result instead of substituting static evidence. Packed package checks now cover temp install, npx one-shot, and global shim behavior.
 
@@ -34,10 +53,19 @@ Highlights:
 
 Learn more:
 - Completion Proof: [docs/completion-proof.md](docs/completion-proof.md)
+- TypeScript architecture: [docs/typescript-architecture.md](docs/typescript-architecture.md)
+- Trust Kernel: [docs/trust-kernel.md](docs/trust-kernel.md)
+- Package boundary: [docs/package-boundary.md](docs/package-boundary.md)
+- Black-box package tests: [docs/black-box-package-tests.md](docs/black-box-package-tests.md)
+- Core dominance: [docs/core-dominance.md](docs/core-dominance.md)
+- Performance budgets: [docs/performance-budgets.md](docs/performance-budgets.md)
 - Five-Scout Pipeline: [docs/five-scout-pipeline.md](docs/five-scout-pipeline.md)
 - Image Voxel TriWiki: [docs/image-voxel-ledger.md](docs/image-voxel-ledger.md)
 - Route finalization: [docs/route-finalization.md](docs/route-finalization.md)
 - Feature fixtures: [docs/feature-fixtures.md](docs/feature-fixtures.md)
+- Managed paths: [docs/managed-paths.md](docs/managed-paths.md)
+- Rollback: [docs/rollback.md](docs/rollback.md)
+- Known gaps: [docs/known-gaps.md](docs/known-gaps.md)
 - Scout engines: [docs/scout-engines.md](docs/scout-engines.md)
 - Hermetic E2E: [docs/testing-hermetic-e2e.md](docs/testing-hermetic-e2e.md)
 - Pipeline architecture: [docs/pipeline-architecture.md](docs/pipeline-architecture.md)
@@ -51,6 +79,8 @@ Learn more:
 npm i -g sneakoscope
 sks root
 sks doctor
+sks status
+sks trust report latest
 sks codex-app check
 sks selftest --mock
 sks rust smoke --json
@@ -60,7 +90,7 @@ sks rust smoke --json
 
 1. Completion Proof for every serious route
 2. Image Voxel TriWiki anchors and relations for every visual route
-3. Codex App, codex-lb, hooks, Rust fallback parity, DB, route modularity, and generated fixtures verified by release gates
+3. Route contracts, evidence indexes, trust reports, Codex App, codex-lb, hooks, Rust fallback parity, DB, route modularity, and generated fixtures verified by release gates
 
 ## Install Options
 
@@ -542,7 +572,7 @@ npm run release:check
 npm run publish:dry
 ```
 
-`release:check` runs audit, changelog, syntax, feature-registry coverage, all-features contract selftest, selftest, size, and registry checks. Generate the human-readable registry with `sks features inventory --write-docs`. `publish:dry` runs that same gate and then performs an npm dry-run publish against the public registry.
+`release:check` runs audit, changelog, syntax, feature-registry coverage, all-features contract selftest, selftest, size, and registry checks, then writes a source digest stamp under `.sneakoscope/reports/`. Generate the human-readable registry with `sks features inventory --write-docs`. `1.0.0` is a stable release, so plain `npm publish` uses the `latest` dist-tag. npm's `prepublishOnly` verifies the fresh release stamp instead of rerunning the full gate, and `prepack` only rebuilds `dist`; publish no longer repeats the expensive release suite during packaging. `npm run publish:dry` remains the explicit dry-run helper.
 
 Version bumps are manual. Run `sks versioning bump` only when preparing release metadata; SKS will not create `.git/hooks/pre-commit` or auto-bump during ordinary commits.
 

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "0.9.19"
+version = "1.0.0"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "0.9.19"
+version = "1.0.0"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 0.9.19"),
+        Some("--version") => println!("sks-rs 1.0.0"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);
@@ -28,7 +28,7 @@ fn main() {
                 }
             }
         }
-        Some("image-hash") => {
+        Some("image-hash") | Some("image-voxel-index") => {
             let path = args.next().unwrap_or_default();
             match image_hash(&path) {
                 Ok((sha, bytes)) => println!("{{\"ok\":true,\"engine\":\"rust\",\"path\":\"{}\",\"sha256\":\"{}\",\"bytes\":{}}}", json_escape(&path), sha, bytes),
@@ -38,7 +38,7 @@ fn main() {
                 }
             }
         }
-        Some("voxel-validate") => {
+        Some("voxel-validate") | Some("image-voxel-validate-fast") => {
             let path = args.next().unwrap_or_default();
             let mut require_anchors = false;
             let mut require_relations = false;
@@ -58,7 +58,7 @@ fn main() {
                 }
             }
         }
-        Some("secret-scan") => {
+        Some("secret-scan") | Some("evidence-secret-scan") => {
             let path = args.next().unwrap_or_default();
             match std::fs::read_to_string(&path) {
                 Ok(text) => {
@@ -75,7 +75,7 @@ fn main() {
             }
         }
         _ => {
-            eprintln!("sks-rs optional accelerator. Commands: --version, compact-info, jsonl-tail, secret-scan, image-hash, voxel-validate");
+            eprintln!("sks-rs optional accelerator. Commands: --version, compact-info, jsonl-tail, secret-scan, evidence-secret-scan, image-hash, image-voxel-index, voxel-validate, image-voxel-validate-fast");
             std::process::exit(2);
         }
     }

package/dist/bin/sks.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=sks.d.ts.map

package/dist/bin/sks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sks.d.ts","sourceRoot":"","sources":["../../src/bin/sks.ts"],"names":[],"mappings":""}

package/dist/bin/sks.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+const FAST_PACKAGE_VERSION = '1.0.0';
+const args = process.argv.slice(2);
+try {
+    if (args[0] === '--version' || args[0] === '-v' || args[0] === 'version') {
+        console.log(`sneakoscope ${FAST_PACKAGE_VERSION}`);
+    }
+    else if (args[0] === 'help' || args[0] === '--help' || args[0] === '-h') {
+        if (args.length > 1) {
+            const { helpCommand } = await import('../core/commands/basic-cli.mjs');
+            await helpCommand(args.slice(1));
+        }
+        else {
+            const { helpFast } = await import('../cli/help-fast.mjs');
+            helpFast();
+        }
+    }
+    else {
+        const { main } = await import('../cli/main.mjs');
+        await main(args);
+    }
+}
+catch (err) {
+    const message = err instanceof Error && err.stack ? err.stack : String(err);
+    console.error(message);
+    process.exitCode = 1;
+}
+export {};
+//# sourceMappingURL=sks.js.map

package/dist/bin/sks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sks.js","sourceRoot":"","sources":["../../src/bin/sks.ts"],"names":[],"mappings":";AAEA,MAAM,oBAAoB,GAAG,OAAO,CAAC;AACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,IAAI,CAAC;IACH,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,eAAe,oBAAoB,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YACvE,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC1D,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAAC,OAAO,GAAY,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/build-manifest.json

@@ -0,0 +1,340 @@
+{
+  "schema": "sks.dist-build.v1",
+  "generated_at": "2026-05-18T17:04:58.072Z",
+  "files": [
+    "bin/sks.d.ts",
+    "bin/sks.d.ts.map",
+    "bin/sks.js",
+    "bin/sks.js.map",
+    "build-manifest.json",
+    "cli/args.mjs",
+    "cli/codex-app-command.mjs",
+    "cli/command-registry.d.ts",
+    "cli/command-registry.d.ts.map",
+    "cli/command-registry.js",
+    "cli/command-registry.js.map",
+    "cli/command-registry.mjs",
+    "cli/context7-command.mjs",
+    "cli/feature-commands.mjs",
+    "cli/help-fast.mjs",
+    "cli/install-helpers.mjs",
+    "cli/main.mjs",
+    "cli/openclaw-command.mjs",
+    "cli/output.mjs",
+    "cli/recallpulse-command.mjs",
+    "cli/router.mjs",
+    "commands/aliases.mjs",
+    "commands/all-features.mjs",
+    "commands/auto-review.mjs",
+    "commands/autoresearch.mjs",
+    "commands/bench.mjs",
+    "commands/bootstrap.mjs",
+    "commands/code-structure.mjs",
+    "commands/codex-app.mjs",
+    "commands/codex-lb.mjs",
+    "commands/commands.mjs",
+    "commands/commit-and-push.mjs",
+    "commands/commit.mjs",
+    "commands/computer-use.mjs",
+    "commands/conflicts.mjs",
+    "commands/context7.mjs",
+    "commands/db.mjs",
+    "commands/deps.mjs",
+    "commands/dfix.mjs",
+    "commands/doctor.mjs",
+    "commands/dollar-commands.mjs",
+    "commands/eval.mjs",
+    "commands/features.mjs",
+    "commands/fix-path.mjs",
+    "commands/gc.mjs",
+    "commands/goal.mjs",
+    "commands/guard.mjs",
+    "commands/gx.mjs",
+    "commands/harness.mjs",
+    "commands/help.mjs",
+    "commands/hook.mjs",
+    "commands/hooks.mjs",
+    "commands/hproof.mjs",
+    "commands/image-ux-review.mjs",
+    "commands/init.mjs",
+    "commands/mad-sks.mjs",
+    "commands/memory.mjs",
+    "commands/openclaw.mjs",
+    "commands/paths.mjs",
+    "commands/perf.mjs",
+    "commands/pipeline.mjs",
+    "commands/postinstall.mjs",
+    "commands/ppt.mjs",
+    "commands/profile.mjs",
+    "commands/proof-field.mjs",
+    "commands/proof.mjs",
+    "commands/qa-loop.mjs",
+    "commands/quickstart.mjs",
+    "commands/reasoning.mjs",
+    "commands/recallpulse.mjs",
+    "commands/research.mjs",
+    "commands/rollback.mjs",
+    "commands/root.mjs",
+    "commands/run.mjs",
+    "commands/rust.mjs",
+    "commands/scouts.mjs",
+    "commands/selftest.mjs",
+    "commands/setup.mjs",
+    "commands/skill-dream.mjs",
+    "commands/stats.mjs",
+    "commands/status.mjs",
+    "commands/team.mjs",
+    "commands/tmux.mjs",
+    "commands/trust.mjs",
+    "commands/update-check.mjs",
+    "commands/usage.mjs",
+    "commands/validate-artifacts.mjs",
+    "commands/version.mjs",
+    "commands/versioning.mjs",
+    "commands/wiki.mjs",
+    "core/artifact-schemas.mjs",
+    "core/auto-review.mjs",
+    "core/bench.mjs",
+    "core/code-structure.mjs",
+    "core/codex-adapter.mjs",
+    "core/codex-app.mjs",
+    "core/codex-lb-circuit.mjs",
+    "core/codex-model-guard.mjs",
+    "core/commands/autoresearch-command.mjs",
+    "core/commands/basic-cli.mjs",
+    "core/commands/bench-command.mjs",
+    "core/commands/code-structure-command.mjs",
+    "core/commands/command-utils.mjs",
+    "core/commands/computer-use-command.mjs",
+    "core/commands/db-command.mjs",
+    "core/commands/eval-command.mjs",
+    "core/commands/gc-command.mjs",
+    "core/commands/goal-command.mjs",
+    "core/commands/gx-command.mjs",
+    "core/commands/harness-command.mjs",
+    "core/commands/hproof-command.mjs",
+    "core/commands/image-ux-review-command.mjs",
+    "core/commands/mad-sks-command.mjs",
+    "core/commands/paths-command.mjs",
+    "core/commands/perf-command.mjs",
+    "core/commands/pipeline-command.mjs",
+    "core/commands/ppt-command.mjs",
+    "core/commands/profile-command.mjs",
+    "core/commands/proof-field-command.mjs",
+    "core/commands/qa-loop-command.mjs",
+    "core/commands/recallpulse-command.mjs",
+    "core/commands/research-command.mjs",
+    "core/commands/rollback-command.mjs",
+    "core/commands/run-command.mjs",
+    "core/commands/rust-command.mjs",
+    "core/commands/scouts-command.mjs",
+    "core/commands/skill-dream-command.mjs",
+    "core/commands/status-command.mjs",
+    "core/commands/team-command.mjs",
+    "core/commands/trust-command.mjs",
+    "core/commands/validate-artifacts-command.mjs",
+    "core/commands/wiki-command.mjs",
+    "core/context7-client.mjs",
+    "core/db-safety.mjs",
+    "core/decision-contract.mjs",
+    "core/decision-lattice.mjs",
+    "core/dogfood-loop.mjs",
+    "core/effort-orchestrator.mjs",
+    "core/evaluation.mjs",
+    "core/evidence/evidence-dedupe.mjs",
+    "core/evidence/evidence-freshness.mjs",
+    "core/evidence/evidence-proof-linker.mjs",
+    "core/evidence/evidence-redaction.mjs",
+    "core/evidence/evidence-router.mjs",
+    "core/evidence/evidence-schema.d.ts",
+    "core/evidence/evidence-schema.d.ts.map",
+    "core/evidence/evidence-schema.js",
+    "core/evidence/evidence-schema.js.map",
+    "core/evidence/evidence-schema.mjs",
+    "core/evidence/evidence-store.mjs",
+    "core/feature-fixture-runner.mjs",
+    "core/feature-fixtures.mjs",
+    "core/feature-registry.mjs",
+    "core/features/feature-fixtures.d.ts",
+    "core/features/feature-fixtures.d.ts.map",
+    "core/features/feature-fixtures.js",
+    "core/features/feature-fixtures.js.map",
+    "core/features/feature-registry.d.ts",
+    "core/features/feature-registry.d.ts.map",
+    "core/features/feature-registry.js",
+    "core/features/feature-registry.js.map",
+    "core/from-chat-img-forensics.mjs",
+    "core/fsx.mjs",
+    "core/git-simple.mjs",
+    "core/goal-workflow.mjs",
+    "core/gx-renderer.mjs",
+    "core/harness-conflicts.mjs",
+    "core/harness-guard.mjs",
+    "core/hooks-runtime.mjs",
+    "core/hproof.mjs",
+    "core/image-ux-review.mjs",
+    "core/init.mjs",
+    "core/language-preference.mjs",
+    "core/managed-paths.mjs",
+    "core/memory-governor.mjs",
+    "core/mission.mjs",
+    "core/mistake-memory.mjs",
+    "core/mistake-recall.mjs",
+    "core/no-question-guard.mjs",
+    "core/openclaw.mjs",
+    "core/perf-bench.mjs",
+    "core/performance-budgets.json",
+    "core/permission-gates.mjs",
+    "core/pipeline-internals/runtime-core.mjs",
+    "core/pipeline-internals/runtime-gates.mjs",
+    "core/pipeline-runtime.mjs",
+    "core/pipeline.mjs",
+    "core/pipeline/active-context.mjs",
+    "core/pipeline/pipeline-plan-writer.mjs",
+    "core/pipeline/plan-schema.mjs",
+    "core/pipeline/prompt-context-answer.mjs",
+    "core/pipeline/prompt-context-computer-use.mjs",
+    "core/pipeline/prompt-context-dfix.mjs",
+    "core/pipeline/prompt-context.mjs",
+    "core/pipeline/route-prep-db.mjs",
+    "core/pipeline/route-prep-gx.mjs",
+    "core/pipeline/route-prep-image-ux.mjs",
+    "core/pipeline/route-prep-ppt.mjs",
+    "core/pipeline/route-prep-qa.mjs",
+    "core/pipeline/route-prep-research.mjs",
+    "core/pipeline/route-prep-team.mjs",
+    "core/pipeline/route-prep.mjs",
+    "core/pipeline/scout-stage-policy.mjs",
+    "core/pipeline/stage-policy.mjs",
+    "core/pipeline/stop-gate-context7.mjs",
+    "core/pipeline/stop-gate-proof.mjs",
+    "core/pipeline/stop-gate-subagents.mjs",
+    "core/pipeline/stop-gate.mjs",
+    "core/pipeline/validation.mjs",
+    "core/ppt.mjs",
+    "core/prompt-context-builder.mjs",
+    "core/proof-field.mjs",
+    "core/proof/auto-finalize.mjs",
+    "core/proof/claim-ledger.mjs",
+    "core/proof/command-ledger.mjs",
+    "core/proof/evidence-collector.mjs",
+    "core/proof/file-change-ledger.mjs",
+    "core/proof/proof-reader.mjs",
+    "core/proof/proof-redaction.test-helper.mjs",
+    "core/proof/proof-schema.d.ts",
+    "core/proof/proof-schema.d.ts.map",
+    "core/proof/proof-schema.js",
+    "core/proof/proof-schema.js.map",
+    "core/proof/proof-schema.mjs",
+    "core/proof/proof-writer.mjs",
+    "core/proof/route-adapter.mjs",
+    "core/proof/route-finalizer-fixtures.mjs",
+    "core/proof/route-finalizer-policy.mjs",
+    "core/proof/route-finalizer.mjs",
+    "core/proof/route-proof-gate.mjs",
+    "core/proof/route-proof-policy.mjs",
+    "core/proof/selftest-proof-fixtures.mjs",
+    "core/proof/validation.d.ts",
+    "core/proof/validation.d.ts.map",
+    "core/proof/validation.js",
+    "core/proof/validation.js.map",
+    "core/proof/validation.mjs",
+    "core/qa-loop.mjs",
+    "core/questions.mjs",
+    "core/recallpulse.mjs",
+    "core/research.mjs",
+    "core/retention.mjs",
+    "core/routes.mjs",
+    "core/rust-accelerator.mjs",
+    "core/scouts/engines/codex-app-subagent-engine.mjs",
+    "core/scouts/engines/codex-exec-parallel-engine.mjs",
+    "core/scouts/engines/local-static-engine.mjs",
+    "core/scouts/engines/scout-engine-base.mjs",
+    "core/scouts/engines/scout-engine-detect.mjs",
+    "core/scouts/engines/scout-engine-policy.mjs",
+    "core/scouts/engines/sequential-fallback-engine.mjs",
+    "core/scouts/engines/tmux-lane-cleanup.mjs",
+    "core/scouts/engines/tmux-lane-engine.mjs",
+    "core/scouts/engines/tmux-lane-watcher.mjs",
+    "core/scouts/scout-artifacts.mjs",
+    "core/scouts/scout-consensus.mjs",
+    "core/scouts/scout-gate.mjs",
+    "core/scouts/scout-output-fixtures.mjs",
+    "core/scouts/scout-output-normalizer.mjs",
+    "core/scouts/scout-output-parser.mjs",
+    "core/scouts/scout-output-validator.mjs",
+    "core/scouts/scout-plan.mjs",
+    "core/scouts/scout-proof-evidence.mjs",
+    "core/scouts/scout-readonly-guard.mjs",
+    "core/scouts/scout-runner.mjs",
+    "core/scouts/scout-schema.d.ts",
+    "core/scouts/scout-schema.d.ts.map",
+    "core/scouts/scout-schema.js",
+    "core/scouts/scout-schema.js.map",
+    "core/scouts/scout-schema.mjs",
+    "core/scouts/scout-triwiki.mjs",
+    "core/secret-redaction.mjs",
+    "core/skill-forge.mjs",
+    "core/team-dag.mjs",
+    "core/team-dashboard-renderer.mjs",
+    "core/team-live.mjs",
+    "core/team-review-policy.mjs",
+    "core/tmux-ui.mjs",
+    "core/triwiki-attention.mjs",
+    "core/trust-kernel/completion-contract.d.ts",
+    "core/trust-kernel/completion-contract.d.ts.map",
+    "core/trust-kernel/completion-contract.js",
+    "core/trust-kernel/completion-contract.js.map",
+    "core/trust-kernel/completion-contract.mjs",
+    "core/trust-kernel/evidence-router.mjs",
+    "core/trust-kernel/route-contract.d.ts",
+    "core/trust-kernel/route-contract.d.ts.map",
+    "core/trust-kernel/route-contract.js",
+    "core/trust-kernel/route-contract.js.map",
+    "core/trust-kernel/route-contract.mjs",
+    "core/trust-kernel/route-state-machine.d.ts",
+    "core/trust-kernel/route-state-machine.d.ts.map",
+    "core/trust-kernel/route-state-machine.js",
+    "core/trust-kernel/route-state-machine.js.map",
+    "core/trust-kernel/route-state-machine.mjs",
+    "core/trust-kernel/trust-kernel-schema.d.ts",
+    "core/trust-kernel/trust-kernel-schema.d.ts.map",
+    "core/trust-kernel/trust-kernel-schema.js",
+    "core/trust-kernel/trust-kernel-schema.js.map",
+    "core/trust-kernel/trust-kernel-schema.mjs",
+    "core/trust-kernel/trust-report.d.ts",
+    "core/trust-kernel/trust-report.d.ts.map",
+    "core/trust-kernel/trust-report.js",
+    "core/trust-kernel/trust-report.js.map",
+    "core/trust-kernel/trust-report.mjs",
+    "core/trust-kernel/trust-status.d.ts",
+    "core/trust-kernel/trust-status.d.ts.map",
+    "core/trust-kernel/trust-status.js",
+    "core/trust-kernel/trust-status.js.map",
+    "core/trust-kernel/trust-status.mjs",
+    "core/version-manager.mjs",
+    "core/version.mjs",
+    "core/wiki-coordinate.mjs",
+    "core/wiki-image/bbox.mjs",
+    "core/wiki-image/before-after-relation.mjs",
+    "core/wiki-image/callout-parser.mjs",
+    "core/wiki-image/computer-use-evidence.mjs",
+    "core/wiki-image/computer-use-ledger.mjs",
+    "core/wiki-image/generated-review-parser.mjs",
+    "core/wiki-image/image-hash.mjs",
+    "core/wiki-image/image-relation.mjs",
+    "core/wiki-image/image-ux-evidence.mjs",
+    "core/wiki-image/image-voxel-ledger.mjs",
+    "core/wiki-image/image-voxel-schema.d.ts",
+    "core/wiki-image/image-voxel-schema.d.ts.map",
+    "core/wiki-image/image-voxel-schema.js",
+    "core/wiki-image/image-voxel-schema.js.map",
+    "core/wiki-image/image-voxel-schema.mjs",
+    "core/wiki-image/ppt-image-evidence.mjs",
+    "core/wiki-image/proof-linker.mjs",
+    "core/wiki-image/route-image-evidence.mjs",
+    "core/wiki-image/validation.mjs",
+    "core/wiki-image/visual-anchor.mjs",
+    "core/work-order-ledger.mjs"
+  ]
+}

package/dist/cli/command-registry.d.ts

@@ -0,0 +1,27 @@
+export interface CommandModule {
+    run(command: string, args: string[]): Promise<unknown> | unknown;
+}
+export interface CommandEntry {
+    maturity: 'stable' | 'beta' | 'labs';
+    summary: string;
+    lazy: () => Promise<CommandModule>;
+    packageRequiredFiles?: readonly string[];
+}
+export declare const TYPED_COMMANDS: {
+    help: CommandEntry;
+    version: CommandEntry;
+    commands: CommandEntry;
+    run: CommandEntry;
+    team: CommandEntry;
+    trust: CommandEntry;
+    proof: CommandEntry;
+    scouts: CommandEntry;
+    db: CommandEntry;
+    wiki: CommandEntry;
+    bench: CommandEntry;
+    features: CommandEntry;
+};
+export type CommandName = keyof typeof TYPED_COMMANDS;
+export declare function typedCommandNames(): CommandName[];
+export declare function assertCommandModule(value: unknown): asserts value is CommandModule;
+//# sourceMappingURL=command-registry.d.ts.map

package/dist/cli/command-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-registry.d.ts","sourceRoot":"","sources":["../../src/cli/command-registry.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAClE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACnC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAaD,eAAO,MAAM,cAAc;;;;;;;;;;;;;CAaa,CAAC;AAEzC,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,cAAc,CAAC;AAEtD,wBAAgB,iBAAiB,IAAI,WAAW,EAAE,CAEjD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAIlF"}

package/dist/cli/command-registry.js

@@ -0,0 +1,33 @@
+function contractEntry(maturity, summary, modulePath) {
+    return {
+        maturity,
+        summary,
+        packageRequiredFiles: [modulePath],
+        lazy: async () => ({
+            run: () => ({ ok: true, contract_only: true, modulePath })
+        })
+    };
+}
+export const TYPED_COMMANDS = {
+    help: contractEntry('stable', 'Show SKS help', 'dist/commands/help.mjs'),
+    version: contractEntry('stable', 'Show SKS version', 'dist/commands/version.mjs'),
+    commands: contractEntry('stable', 'List SKS commands', 'dist/core/commands/basic-cli.mjs'),
+    run: contractEntry('beta', 'Classify and execute a task through the SKS trust kernel', 'dist/core/commands/run-command.mjs'),
+    team: contractEntry('beta', 'Create and observe Team missions', 'dist/core/commands/team-command.mjs'),
+    trust: contractEntry('beta', 'Report and validate route trust kernel evidence', 'dist/core/commands/trust-command.mjs'),
+    proof: contractEntry('beta', 'Show and validate completion proof', 'dist/commands/proof.mjs'),
+    scouts: contractEntry('beta', 'Run read-only scout intake', 'dist/commands/scouts.mjs'),
+    db: contractEntry('beta', 'Inspect DB safety policy', 'dist/core/commands/db-command.mjs'),
+    wiki: contractEntry('beta', 'Manage TriWiki and image voxel ledgers', 'dist/commands/wiki.mjs'),
+    bench: contractEntry('beta', 'Run core trust-kernel benchmark budgets', 'dist/core/commands/bench-command.mjs'),
+    features: contractEntry('beta', 'Validate feature registry', 'dist/commands/features.mjs')
+};
+export function typedCommandNames() {
+    return Object.keys(TYPED_COMMANDS).sort();
+}
+export function assertCommandModule(value) {
+    if (!value || typeof value !== 'object' || typeof value.run !== 'function') {
+        throw new Error('Command module must expose run(command, args)');
+    }
+}
+//# sourceMappingURL=command-registry.js.map

package/dist/cli/command-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-registry.js","sourceRoot":"","sources":["../../src/cli/command-registry.ts"],"names":[],"mappings":"AAWA,SAAS,aAAa,CAAC,QAAkC,EAAE,OAAe,EAAE,UAAkB;IAC5F,OAAO;QACL,QAAQ;QACR,OAAO;QACP,oBAAoB,EAAE,CAAC,UAAU,CAAC;QAClC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC3D,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,wBAAwB,CAAC;IACxE,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,kBAAkB,EAAE,2BAA2B,CAAC;IACjF,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,mBAAmB,EAAE,kCAAkC,CAAC;IAC1F,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,0DAA0D,EAAE,oCAAoC,CAAC;IAC5H,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,kCAAkC,EAAE,qCAAqC,CAAC;IACtG,KAAK,EAAE,aAAa,CAAC,MAAM,EAAE,iDAAiD,EAAE,sCAAsC,CAAC;IACvH,KAAK,EAAE,aAAa,CAAC,MAAM,EAAE,oCAAoC,EAAE,yBAAyB,CAAC;IAC7F,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,4BAA4B,EAAE,0BAA0B,CAAC;IACvF,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE,0BAA0B,EAAE,mCAAmC,CAAC;IAC1F,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,wCAAwC,EAAE,wBAAwB,CAAC;IAC/F,KAAK,EAAE,aAAa,CAAC,MAAM,EAAE,yCAAyC,EAAE,sCAAsC,CAAC;IAC/G,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE,2BAA2B,EAAE,4BAA4B,CAAC;CACpD,CAAC;AAIzC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAmB,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAAgC,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}