sneakoscope 2.0.1 → 2.0.2

package/dist/scripts/doctor-fixes-codex-app-fast-ui-check.js

@@ -14,13 +14,23 @@ const repaired = await repairCodexAppFastUi(root, { codexHome, apply: true });
 const projectAfter = await fs.readFile(path.join(root, '.codex', 'config.toml'), 'utf8');
 const homeAfter = await fs.readFile(path.join(codexHome, 'config.toml'), 'utf8');
 const backups = repaired.actions.filter((action) => action.changed).map((action) => action.backup_path).filter(Boolean);
+const unsafeRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-doctor-fast-ui-unsafe-'));
+const unsafeCodexHome = path.join(unsafeRoot, 'home', '.codex');
+await fs.mkdir(path.join(unsafeRoot, '.codex'), { recursive: true });
+await fs.mkdir(unsafeCodexHome, { recursive: true });
+await fs.writeFile(path.join(unsafeCodexHome, 'config.toml'), 'service_tier = "standard"\n');
+const unsafePlan = await repairCodexAppFastUi(unsafeRoot, { codexHome: unsafeCodexHome, apply: false });
 const ok = plan.fast_selector === 'manual_action_required'
+    && plan.safe_auto_apply === true
     && repaired.fast_selector === 'repaired'
+    && repaired.safe_auto_apply === true
     && backups.length >= 2
     && !/model_provider\s*=/.test(projectAfter)
     && !/service_tier\s*=/.test(homeAfter)
-    && /fast_mode = false/.test(homeAfter);
-emit({ schema: 'sks.doctor-fixes-codex-app-fast-ui-check.v1', ok, plan, repaired, project_after: projectAfter, home_after: homeAfter, blockers: ok ? [] : ['doctor_fixes_codex_app_fast_ui_check_failed'] });
+    && /fast_mode = false/.test(homeAfter)
+    && unsafePlan.requires_confirmation === true
+    && unsafePlan.safe_auto_apply === false;
+emit({ schema: 'sks.doctor-fixes-codex-app-fast-ui-check.v1', ok, plan, repaired, unsafe_plan: unsafePlan, project_after: projectAfter, home_after: homeAfter, blockers: ok ? [] : ['doctor_fixes_codex_app_fast_ui_check_failed'] });
 function emit(report) {
     console.log(JSON.stringify(report, null, 2));
     if (!report.ok)

package/dist/scripts/mad-sks-app-ui-no-mutation-check.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import assert from 'node:assert/strict';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { madHighCommand } from '../core/commands/mad-sks-command.js';
+import { sha256 } from '../core/fsx.js';
+const original = {
+    cwd: process.cwd(),
+    home: process.env.HOME,
+    codexHome: process.env.CODEX_HOME,
+    noAttach: process.env.SKS_NO_ZELLIJ_ATTACH,
+    requireZellij: process.env.SKS_REQUIRE_ZELLIJ,
+    madSwarm: process.env.SKS_MAD_NATIVE_SWARM,
+    skipNpm: process.env.SKS_SKIP_NPM_FRESHNESS_CHECK
+};
+const tmp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-mad-ui-no-mutation-'));
+const home = path.join(tmp, 'home');
+const codexHome = path.join(home, '.codex');
+const configPath = path.join(codexHome, 'config.toml');
+try {
+    await fs.mkdir(codexHome, { recursive: true });
+    await fs.mkdir(path.join(tmp, '.sneakoscope'), { recursive: true });
+    await fs.writeFile(configPath, [
+        'service_tier = "fast"',
+        '[features]',
+        'fast_mode = true',
+        '[plugins."chrome@openai-bundled"]',
+        'enabled = false',
+        ''
+    ].join('\n'));
+    const before = await fs.readFile(configPath, 'utf8');
+    process.chdir(tmp);
+    process.env.HOME = home;
+    process.env.CODEX_HOME = codexHome;
+    process.env.SKS_NO_ZELLIJ_ATTACH = '1';
+    process.env.SKS_REQUIRE_ZELLIJ = '0';
+    process.env.SKS_MAD_NATIVE_SWARM = '0';
+    process.env.SKS_SKIP_NPM_FRESHNESS_CHECK = '1';
+    process.exitCode = 0;
+    await madHighCommand(['--no-attach', '--no-swarm'], {
+        maybePromptSksUpdateForLaunch: async () => ({ status: 'skipped' }),
+        maybePromptCodexUpdateForLaunch: async () => ({ status: 'skipped' }),
+        ensureMadLaunchDependencies: async () => ({ ready: true, actions: [] }),
+        maybePromptCodexLbSetupForLaunch: async () => ({ status: 'skipped' })
+    });
+    const after = await fs.readFile(configPath, 'utf8');
+    const entries = await fs.readdir(codexHome);
+    assert.equal(after, before);
+    assert.equal(entries.some((entry) => entry === 'sks-mad-high.config.toml'), false);
+    assert.equal(/\[profiles\.sks-mad-high\]/.test(after), false);
+    assert.equal(/enabled\s*=\s*false/.test(after), true);
+    process.exitCode = 0;
+    emit({
+        schema: 'sks.mad-sks-app-ui-no-mutation-check.v1',
+        ok: true,
+        before_hash: sha256(before),
+        after_hash: sha256(after),
+        profile_files_written: entries.filter((entry) => /sks-mad-high/.test(entry)),
+        plugin_disabled_preserved: true,
+        blockers: []
+    });
+}
+catch (err) {
+    emit({
+        schema: 'sks.mad-sks-app-ui-no-mutation-check.v1',
+        ok: false,
+        error: err?.message || String(err),
+        blockers: ['mad_sks_app_ui_no_mutation_failed']
+    });
+}
+finally {
+    process.chdir(original.cwd);
+    restoreEnv('HOME', original.home);
+    restoreEnv('CODEX_HOME', original.codexHome);
+    restoreEnv('SKS_NO_ZELLIJ_ATTACH', original.noAttach);
+    restoreEnv('SKS_REQUIRE_ZELLIJ', original.requireZellij);
+    restoreEnv('SKS_MAD_NATIVE_SWARM', original.madSwarm);
+    restoreEnv('SKS_SKIP_NPM_FRESHNESS_CHECK', original.skipNpm);
+}
+function restoreEnv(key, value) {
+    if (value == null)
+        delete process.env[key];
+    else
+        process.env[key] = value;
+}
+function emit(report) {
+    console.log(JSON.stringify(report, null, 2));
+    if (!report.ok)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=mad-sks-app-ui-no-mutation-check.js.map

package/dist/scripts/mad-sks-zellij-default-pane-worker-check.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { packageRoot } from '../core/fsx.js';
+const root = packageRoot();
+const mad = await fs.readFile(path.join(root, 'src', 'core', 'commands', 'mad-sks-command.ts'), 'utf8');
+const parser = await fs.readFile(path.join(root, 'src', 'core', 'agents', 'agent-command-surface.ts'), 'utf8');
+const swarm = await fs.readFile(path.join(root, 'src', 'core', 'agents', 'native-cli-session-swarm.ts'), 'utf8');
+const manager = await fs.readFile(path.join(root, 'src', 'core', 'zellij', 'zellij-worker-pane-manager.ts'), 'utf8');
+const commandBody = mad.slice(mad.indexOf('export async function madHighCommand'), mad.indexOf('export async function startMadNativeSwarm'));
+const launchIndex = commandBody.indexOf('launchMadZellijUi(');
+const swarmIndex = commandBody.indexOf('startMadNativeSwarm(');
+const checks = {
+    no_runtime_enable_profile: !commandBody.includes('enableMadHighProfile('),
+    read_only_launch_profile: mad.includes('buildMadHighLaunchProfileNoWrite()'),
+    preflight_fix_default_false: mad.includes('fix: allowMadRepair'),
+    zellij_session_before_swarm: launchIndex >= 0 && swarmIndex >= 0 && launchIndex < swarmIndex,
+    main_only_session: mad.includes('slotCount: 0'),
+    zellij_default_backend: /return 'zellij'/.test(mad) && mad.includes("list.includes('--json')") && mad.includes("list.includes('--no-attach')"),
+    worker_command_real_zellij: mad.includes("command.push('--real')") && mad.includes("command.push('--zellij-session-name'") && mad.includes("command.push('--zellij-pane-worker')"),
+    parser_accepts_worker_flags: parser.includes('--zellij-session-name') && parser.includes('--zellij-pane-worker') && parser.includes('--no-zellij-pane-worker'),
+    native_worker_pane_path: swarm.includes("this.input.backend === 'zellij'") && swarm.includes('ctx.opts.zellijPaneWorker !== false') && swarm.includes('openWorkerPane({'),
+    right_pane_requested: manager.includes("'--direction', 'right'")
+};
+const ok = Object.values(checks).every(Boolean);
+emit({
+    schema: 'sks.mad-sks-zellij-default-pane-worker-check.v1',
+    ok,
+    checks,
+    blockers: ok ? [] : Object.entries(checks).filter(([, passed]) => !passed).map(([name]) => name)
+});
+function emit(report) {
+    console.log(JSON.stringify(report, null, 2));
+    if (!report.ok)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=mad-sks-zellij-default-pane-worker-check.js.map

package/dist/scripts/mad-sks-zellij-launch-check.js

@@ -40,7 +40,8 @@ const nativeSwarmOk = madCommand.includes('startMadNativeSwarm(')
     && madCommand.includes("route: '$MAD-SKS'")
     && madCommand.includes("route_command: 'sks --mad native swarm'")
     && madCommand.includes("same_mission_ledger: true")
-    && madCommand.includes('slotCount: madNativeSwarm.lane_count || 1')
+    && madCommand.includes('slotCount: 0')
+    && madCommand.includes('zellijSessionName: launch.session_name')
     && madCommand.includes('mad_sks.native_swarm_started');
 const codexPaneChecks = {
     main_pane_kind: report.main_pane_kind === 'codex_interactive',

package/dist/scripts/provider-context-config-toml-check.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { resolveProviderContext } from '../core/provider/provider-context.js';
+const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-provider-context-'));
+const codexHome = path.join(root, '.codex');
+await fs.mkdir(codexHome, { recursive: true });
+const codexLbConfig = [
+    'model_provider = "codex-lb"',
+    '',
+    '[model_providers.codex-lb]',
+    'name = "OpenAI"',
+    'base_url = "https://lb.example.test"',
+    'wire_api = "responses"',
+    'env_key = "CODEX_LB_API_KEY"',
+    'requires_openai_auth = false',
+    ''
+].join('\n');
+await fs.writeFile(path.join(codexHome, 'config.toml'), codexLbConfig);
+const configOnlyLb = await resolveProviderContext({
+    root,
+    codexHome,
+    env: { HOME: root, CODEX_LB_API_KEY: 'lb-fixture' },
+    route: '$Naruto',
+    serviceTier: 'fast'
+});
+await fs.writeFile(path.join(codexHome, 'config.toml'), codexLbConfig.replace('model_provider = "codex-lb"', 'model_provider = "openai"'));
+const openaiSelected = await resolveProviderContext({
+    root,
+    codexHome,
+    env: { HOME: root, OPENAI_API_KEY: 'sk-fixture', CODEX_LB_API_KEY: 'lb-fixture' },
+    route: '$Doctor',
+    serviceTier: 'fast'
+});
+await fs.writeFile(path.join(codexHome, 'config.toml'), 'model_provider = "codex-lb"\n');
+const malformed = await resolveProviderContext({
+    root,
+    codexHome,
+    env: { HOME: root },
+    route: '$Agent',
+    serviceTier: 'standard'
+});
+const checks = {
+    config_only_codex_lb: configOnlyLb.provider === 'codex-lb' && configOnlyLb.confidence === 'high' && configOnlyLb.source === 'config',
+    config_env_key_recorded: configOnlyLb.signals.codex_lb_env_key === 'CODEX_LB_API_KEY',
+    openai_selected_with_lb_available: openaiSelected.provider === 'openai' && openaiSelected.signals.codex_lb_available === true,
+    malformed_unknown: malformed.provider === 'unknown' && malformed.warnings.includes('codex_lb_provider_config_missing_or_invalid')
+};
+const ok = Object.values(checks).every(Boolean);
+emit({
+    schema: 'sks.provider-context-config-toml-check.v1',
+    ok,
+    checks,
+    cases: { configOnlyLb, openaiSelected, malformed },
+    blockers: ok ? [] : Object.entries(checks).filter(([, passed]) => !passed).map(([name]) => name)
+});
+function emit(report) {
+    console.log(JSON.stringify(report, null, 2));
+    if (!report.ok)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=provider-context-config-toml-check.js.map

package/dist/scripts/release-gate-existence-audit.js

@@ -20,8 +20,10 @@ const required = [
     'zellij:doctor-readiness',
     'zellij:spawn-on-demand-layout',
     'zellij:worker-pane-manager',
+    'zellij:worker-pane-manager-single-owner',
     'safety:mutation-callsite-coverage',
     'mad-sks:zellij-launch',
+    'mad-sks:zellij-default-pane-worker',
     'agent:zellij-runtime',
     'agent:worker-pane-communication-contract',
     'codex:0.136-compat',
@@ -39,7 +41,9 @@ const required = [
     'codex-app:fast-ui-preservation',
     'codex-app:ui-clobber-guard',
     'doctor:fixes-codex-app-fast-ui',
+    'mad-sks:app-ui-no-mutation',
     'provider:badge-context',
+    'provider:context-config-toml',
     'codex-app:provider-badge',
     'runtime:no-mjs-scripts',
     'runtime:ts-python-boundary',

package/dist/scripts/runtime-no-mjs-scripts-check.js

@@ -4,10 +4,11 @@ import path from 'node:path';
 import { packageRoot } from '../core/fsx.js';
 const root = packageRoot();
 const scriptsDir = path.join(root, 'scripts');
-const mjs = await collectMjs(scriptsDir);
+const binDir = path.join(root, 'bin');
+const mjs = [...await collectMjs(scriptsDir), ...await collectMjs(binDir)].sort();
 const packageJson = JSON.parse(await fs.readFile(path.join(root, 'package.json'), 'utf8'));
 const scriptRefs = Object.entries(packageJson.scripts || {})
-    .filter(([, command]) => typeof command === 'string' && /(^|[\s;&|])\.\/scripts\/[^ ]+\.mjs\b/.test(command))
+    .filter(([, command]) => typeof command === 'string' && /(^|[\s;&|])\.\/(?:scripts|bin)\/[^ ]+\.mjs\b/.test(command))
     .map(([name, command]) => ({ name, command }));
 const ok = mjs.length === 0 && scriptRefs.length === 0;
 emit({

package/dist/scripts/zellij-worker-pane-manager-check.js

@@ -58,6 +58,7 @@ const spawnOrder = evaluateZellijWorkerPaneSpawnOrder([
 const syntheticRejected = !isRealZellijWorkerPaneIdSource('synthetic_layout_pending_proof')
     && !isRealZellijWorkerPaneIdSource('zellij_worker_pane_stdout_missing');
 const sourceOk = source.includes("action', 'new-pane'")
+    && source.includes("'--direction', 'right'")
     && source.includes("'--name', paneName")
     && source.includes("'--', 'sh', '-lc'")
     && source.includes('zellij_worker_new_pane_stdout')
@@ -68,6 +69,8 @@ const ok = artifact.ok
     && artifact.pane_kind === 'worker_codex_sdk'
     && artifact.provider === 'codex-lb'
     && artifact.service_tier === 'fast'
+    && artifact.direction_requested === 'right'
+    && artifact.direction_applied === 'not_applied'
     && artifact.sdk_thread_id === 'sdk-thread-7'
     && artifact.stream_event_count === 4
     && artifact.scaling_primitive === 'native_cli_process_in_zellij_worker_pane'

package/dist/scripts/zellij-worker-pane-manager-single-owner-check.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { packageRoot } from '../core/fsx.js';
+const root = packageRoot();
+const managerPath = path.join(root, 'src', 'core', 'zellij', 'zellij-worker-pane-manager.ts');
+const nativePath = path.join(root, 'src', 'core', 'agents', 'native-cli-session-swarm.ts');
+const manager = await fs.readFile(managerPath, 'utf8');
+const native = await fs.readFile(nativePath, 'utf8');
+const managerOwnsNewPane = /runZellij\(\[[\s\S]{0,500}'new-pane'/.test(manager);
+const nativeDirectNewPane = /runZellij\(\[[\s\S]{0,500}'new-pane'/.test(native);
+const nativeUsesManager = native.includes('openWorkerPane({') && native.includes('closeWorkerPane({');
+const directionRight = manager.includes("'--direction', 'right'");
+const fallbackRecorded = manager.includes("direction_applied: input.directionApplied") && manager.includes("directionApplied = 'unknown'");
+const ok = managerOwnsNewPane && !nativeDirectNewPane && nativeUsesManager && directionRight && fallbackRecorded;
+emit({
+    schema: 'sks.zellij-worker-pane-manager-single-owner-check.v1',
+    ok,
+    checks: {
+        manager_owns_new_pane: managerOwnsNewPane,
+        native_direct_new_pane_absent: !nativeDirectNewPane,
+        native_uses_manager: nativeUsesManager,
+        direction_right_requested: directionRight,
+        fallback_recorded: fallbackRecorded
+    },
+    blockers: ok ? [] : [
+        ...(!managerOwnsNewPane ? ['worker_pane_manager_new_pane_missing'] : []),
+        ...(nativeDirectNewPane ? ['native_cli_session_swarm_direct_new_pane'] : []),
+        ...(!nativeUsesManager ? ['native_cli_session_swarm_not_using_worker_pane_manager'] : []),
+        ...(!directionRight ? ['zellij_worker_right_direction_missing'] : []),
+        ...(!fallbackRecorded ? ['zellij_worker_direction_fallback_not_recorded'] : [])
+    ]
+});
+function emit(report) {
+    console.log(JSON.stringify(report, null, 2));
+    if (!report.ok)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=zellij-worker-pane-manager-single-owner-check.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -68,7 +68,9 @@
     "codex-app:fast-ui-preservation": "node ./dist/scripts/codex-app-fast-ui-preservation-check.js",
     "codex-app:ui-clobber-guard": "node ./dist/scripts/codex-app-ui-clobber-guard-check.js",
     "doctor:fixes-codex-app-fast-ui": "node ./dist/scripts/doctor-fixes-codex-app-fast-ui-check.js",
+    "mad-sks:app-ui-no-mutation": "node ./dist/scripts/mad-sks-app-ui-no-mutation-check.js",
     "provider:badge-context": "node ./dist/scripts/provider-badge-context-check.js",
+    "provider:context-config-toml": "node ./dist/scripts/provider-context-config-toml-check.js",
     "codex-app:provider-badge": "node ./dist/scripts/codex-app-provider-badge-check.js",
     "zellij:launch-command-truth": "node ./dist/scripts/zellij-launch-command-truth-check.js",
     "zellij:real-session-heartbeat": "node ./dist/scripts/zellij-real-session-heartbeat-check.js",
@@ -124,6 +126,7 @@
     "zellij:lane-renderer": "node ./dist/scripts/zellij-lane-renderer-check.js",
     "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",
     "mad-sks:zellij-launch": "node ./dist/scripts/mad-sks-zellij-launch-check.js",
+    "mad-sks:zellij-default-pane-worker": "node ./dist/scripts/mad-sks-zellij-default-pane-worker-check.js",
     "agent:zellij-runtime": "node ./dist/scripts/agent-zellij-runtime-check.js",
     "fast:codex-service-tier-proof": "node ./dist/scripts/fast-codex-service-tier-proof-check.js",
     "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",
@@ -163,7 +166,7 @@
     "test:unit": "node --test \"test/unit/**/*.test.mjs\"",
     "test:integration:mock": "node --test \"test/integration/**/*.test.mjs\"",
     "test:e2e:mock": "node --test \"test/e2e/**/*.test.mjs\"",
-    "test:blackbox": "node --test --test-force-exit --test-concurrency=1 \"test/blackbox/**/*.test.mjs\"",
+    "test:blackbox": "node --test --test-reporter spec --test-concurrency=1 \"test/blackbox/**/*.test.mjs\"",
     "blackbox:pack-install": "node ./dist/scripts/blackbox-pack-install.js",
     "blackbox:npx": "node ./dist/scripts/blackbox-npx-one-shot.js",
     "blackbox:global-shim": "node ./dist/scripts/blackbox-global-shim.js",
@@ -283,7 +286,7 @@
     "ultra-router:classification": "node ./dist/scripts/ultra-router-classification-check.js",
     "ultra-router:auto-router": "node ./dist/scripts/ultra-router-auto-router-check.js",
     "coverage": "node --experimental-test-coverage --test \"test/**/*.test.mjs\"",
-    "release:check": "npm run release:check:parallel && npm run codex-app:fast-ui-preservation && npm run codex-app:ui-clobber-guard && npm run doctor:fixes-codex-app-fast-ui && npm run provider:badge-context && npm run codex-app:provider-badge && npm run zellij:spawn-on-demand-layout && npm run zellij:worker-pane-manager && npm run agent:worker-pane-communication-contract && npm run runtime:no-mjs-scripts && npm run runtime:ts-python-boundary && npm run codex-sdk:capability && npm run codex-sdk:no-legacy-fallback && npm run codex-sdk:backend-router && npm run codex-sdk:structured-output && npm run codex-sdk:event-stream-ledger && npm run codex-sdk:thread-registry && npm run codex-sdk:sandbox-policy && npm run codex-sdk:zellij-pane-binding && npm run codex-sdk:all-pipelines && npm run codex-sdk:dfix-pipeline && npm run codex-sdk:qa-pipeline && npm run codex-sdk:research-pipeline && npm run codex-sdk:team-naruto-agent-pipeline && npm run codex-sdk:release-review-pipeline && npm run codex-sdk:ux-ppt-review-pipeline && npm run codex-sdk:core-skill-pipeline && npm run codex-control:capability && npm run codex-control:no-legacy-fallback && npm run codex-control:structured-output && npm run codex-control:event-stream-ledger && npm run codex-control:thread-registry && npm run codex-control:side-effect-scope && npm run codex-control:all-pipelines && npm run codex-control:empty-result-retry && npm run codex-control:stream-idle-watchdog && npm run codex-control:tool-call-sequence-repair && npm run codex-control:keepalive-no-cot-leak && npm run ultra-router:classification && npm run ultra-router:auto-router && npm run release:version-truth && npm run codex:0.136-compat && npm run codex:0.135-compat && npm run doctor:codex-doctor-parity && npm run codex:permission-profiles && npm run codex:legacy-profile-consumers-removed && npm run terminal:keyboard-enhancement-safety && npm run terminal:tui-output-stability && npm run codex:resume-cwd-truth && npm run mcp:tool-naming-parity && npm run responses:retry-policy-centralized && npm run runtime:no-tmux && npm run zellij:layout-valid && npm run agent:zellij-dynamic-backfill-panes && npm run agent:worker-pane-communication-contract && npm run agent:slot-pane-binding-proof && npm run zellij:worker-pane-manager && npm run zellij:spawn-on-demand-layout && npm run zellij:lane-renderer && npm run mad-sks:zellij-launch && npm run agent:zellij-runtime && npm run codex:config-eperm-fixture && npm run doctor:fix-proves-codex-read && npm run mad:preflight-blocks-unreadable-config && npm run fast:codex-service-tier-proof && npm run codex:project-config-policy-splitter && npm run test:no-orphan-dist-imports && npm run agent:patch-envelope-extraction && npm run agent:patch-queue-runtime && npm run agent:strategy-to-lease-wiring && npm run agent:patch-swarm-runtime && npm run agent:patch-transaction-journal && npm run agent:patch-conflict-rebase && npm run agent:strategy-to-patch-strict && npm run agent:patch-swarm-runtime-truth && npm run agent:rollback-command && npm run agent:patch-verification-dag && npm run agent:patch-rollback-dag && npm run agent:patch-proof-runtime && npm run agent:patch-swarm-route-blackbox && npm run team:patch-swarm-route-blackbox && npm run dfix:patch-swarm-route-blackbox && npm run appshots:thread-attachment-discovery && npm run mcp:readonly-runtime-scheduler && npm run codex:0.134-runner-truth && npm run agent:native-cli-session-swarm && npm run agent:native-cli-session-swarm-10 && npm run agent:native-cli-session-swarm-20 && npm run agent:no-subagent-scaling && npm run agent:native-cli-session-proof && npm run agent:worker-backend-router && npm run agent:codex-child-overlap && npm run agent:model-authored-patch-envelope && npm run agent:fast-mode-default && npm run agent:fast-mode-worker-propagation && npm run codex:fast-mode-profile-propagation && npm run mad-sks:fast-mode-propagation && npm run zellij:launch-command-truth && npm run zellij:real-session-heartbeat && npm run zellij:ui-design && npm run zellij:doctor-readiness && npm run legacy:upgrade-zero-break && npm run publish:packlist-performance && npm run postinstall:safe-side-effects && npm run runtime:ts-rust-boundary && npm run core-skill:card-schema && npm run core-skill:rollout-scoring && npm run core-skill:patch && npm run core-skill:heldout-validation && npm run core-skill:deployment-snapshot && npm run core-skill:no-inference-optimizer && npm run core-skill:route-runtime-integration && npm run core-skill:promotion-side-effect-ledger && npm run core-skill:legacy-promotion-api-audit && npm run safety:side-effect-zero && npm run safety:mutation-callsite-coverage && npm run safety:mutation-callsite-coverage:repo-wide && npm run side-effect:runtime-report && npm run release:gate-planner && npm run release:dynamic-performance && npm run release:provenance && npm run release:gate-budget && npm run agent:wiki-context-proof && npm run shared-memory:check && npm run wrongness:check && npm run wrongness:fixtures && npm run trust:check && npm run git-collaboration:e2e && node ./dist/scripts/release-check-stamp.js write && npm run release:readiness --silent && node ./dist/scripts/release-check-stamp.js write",
+    "release:check": "npm run release:check:parallel && npm run mad-sks:app-ui-no-mutation && npm run codex-app:fast-ui-preservation && npm run codex-app:ui-clobber-guard && npm run doctor:fixes-codex-app-fast-ui && npm run provider:badge-context && npm run provider:context-config-toml && npm run codex-app:provider-badge && npm run zellij:spawn-on-demand-layout && npm run zellij:worker-pane-manager && npm run zellij:worker-pane-manager-single-owner && npm run agent:worker-pane-communication-contract && npm run runtime:no-mjs-scripts && npm run runtime:ts-python-boundary && npm run codex-sdk:capability && npm run codex-sdk:no-legacy-fallback && npm run codex-sdk:backend-router && npm run codex-sdk:structured-output && npm run codex-sdk:event-stream-ledger && npm run codex-sdk:thread-registry && npm run codex-sdk:sandbox-policy && npm run codex-sdk:zellij-pane-binding && npm run codex-sdk:all-pipelines && npm run codex-sdk:dfix-pipeline && npm run codex-sdk:qa-pipeline && npm run codex-sdk:research-pipeline && npm run codex-sdk:team-naruto-agent-pipeline && npm run codex-sdk:release-review-pipeline && npm run codex-sdk:ux-ppt-review-pipeline && npm run codex-sdk:core-skill-pipeline && npm run codex-control:capability && npm run codex-control:no-legacy-fallback && npm run codex-control:structured-output && npm run codex-control:event-stream-ledger && npm run codex-control:thread-registry && npm run codex-control:side-effect-scope && npm run codex-control:all-pipelines && npm run codex-control:empty-result-retry && npm run codex-control:stream-idle-watchdog && npm run codex-control:tool-call-sequence-repair && npm run codex-control:keepalive-no-cot-leak && npm run ultra-router:classification && npm run ultra-router:auto-router && npm run release:version-truth && npm run codex:0.136-compat && npm run codex:0.135-compat && npm run doctor:codex-doctor-parity && npm run codex:permission-profiles && npm run codex:legacy-profile-consumers-removed && npm run terminal:keyboard-enhancement-safety && npm run terminal:tui-output-stability && npm run codex:resume-cwd-truth && npm run mcp:tool-naming-parity && npm run responses:retry-policy-centralized && npm run runtime:no-tmux && npm run zellij:layout-valid && npm run agent:zellij-dynamic-backfill-panes && npm run agent:worker-pane-communication-contract && npm run agent:slot-pane-binding-proof && npm run zellij:worker-pane-manager && npm run zellij:spawn-on-demand-layout && npm run zellij:lane-renderer && npm run mad-sks:zellij-launch && npm run mad-sks:zellij-default-pane-worker && npm run agent:zellij-runtime && npm run codex:config-eperm-fixture && npm run doctor:fix-proves-codex-read && npm run mad:preflight-blocks-unreadable-config && npm run fast:codex-service-tier-proof && npm run codex:project-config-policy-splitter && npm run test:no-orphan-dist-imports && npm run agent:patch-envelope-extraction && npm run agent:patch-queue-runtime && npm run agent:strategy-to-lease-wiring && npm run agent:patch-swarm-runtime && npm run agent:patch-transaction-journal && npm run agent:patch-conflict-rebase && npm run agent:strategy-to-patch-strict && npm run agent:patch-swarm-runtime-truth && npm run agent:rollback-command && npm run agent:patch-verification-dag && npm run agent:patch-rollback-dag && npm run agent:patch-proof-runtime && npm run agent:patch-swarm-route-blackbox && npm run team:patch-swarm-route-blackbox && npm run dfix:patch-swarm-route-blackbox && npm run appshots:thread-attachment-discovery && npm run mcp:readonly-runtime-scheduler && npm run codex:0.134-runner-truth && npm run agent:native-cli-session-swarm && npm run agent:native-cli-session-swarm-10 && npm run agent:native-cli-session-swarm-20 && npm run agent:no-subagent-scaling && npm run agent:native-cli-session-proof && npm run agent:worker-backend-router && npm run agent:codex-child-overlap && npm run agent:model-authored-patch-envelope && npm run agent:fast-mode-default && npm run agent:fast-mode-worker-propagation && npm run codex:fast-mode-profile-propagation && npm run mad-sks:fast-mode-propagation && npm run zellij:launch-command-truth && npm run zellij:real-session-heartbeat && npm run zellij:ui-design && npm run zellij:doctor-readiness && npm run legacy:upgrade-zero-break && npm run publish:packlist-performance && npm run postinstall:safe-side-effects && npm run runtime:ts-rust-boundary && npm run core-skill:card-schema && npm run core-skill:rollout-scoring && npm run core-skill:patch && npm run core-skill:heldout-validation && npm run core-skill:deployment-snapshot && npm run core-skill:no-inference-optimizer && npm run core-skill:route-runtime-integration && npm run core-skill:promotion-side-effect-ledger && npm run core-skill:legacy-promotion-api-audit && npm run safety:side-effect-zero && npm run safety:mutation-callsite-coverage && npm run safety:mutation-callsite-coverage:repo-wide && npm run side-effect:runtime-report && npm run release:gate-planner && npm run release:dynamic-performance && npm run release:provenance && npm run release:gate-budget && npm run agent:wiki-context-proof && npm run shared-memory:check && npm run wrongness:check && npm run wrongness:fixtures && npm run trust:check && npm run git-collaboration:e2e && node ./dist/scripts/release-check-stamp.js write && npm run release:readiness --silent && node ./dist/scripts/release-check-stamp.js write",
     "release:real-check": "node ./dist/scripts/release-real-check.js && npm run codex-control:real-smoke -- --require-real && npm run codex-sdk:real-smoke -- --require-real && npm run zellij:real-session-launch -- --require-real --main-only --mission M-release-real-zellij-extra --session sks-rrz-extra && npm run zellij:pane-proof -- --require-real --mission M-release-real-zellij-extra --session sks-rrz-extra --expected-lanes 0 && npm run zellij:screen-proof -- --require-real --main-only --mission M-release-real-zellij-extra && npm run zellij:real-session-cleanup -- --mission M-release-real-zellij-extra --session sks-rrz-extra && npm run agent:real-codex-in-zellij-worker-pane -- --require-real",
     "release:publish": "npm run publish:npm",
     "publish:dry": "npm run release:metadata && npm run release:version-truth && npm run publish:packlist-performance && npm run prepublish:release-check-or-fast && node ./dist/scripts/release-check-stamp.js verify && npm run release:provenance -- --publish && npm run release:dist-freshness && npm --cache /tmp/sks-npm-cache publish --dry-run --registry https://registry.npmjs.org/ --access public",
@@ -442,6 +445,7 @@
     "mad-sks:fast-mode-propagation": "node ./dist/scripts/mad-sks-fast-mode-propagation-check.js",
     "zellij:spawn-on-demand-layout": "node ./dist/scripts/zellij-spawn-on-demand-layout-check.js",
     "zellij:worker-pane-manager": "node ./dist/scripts/zellij-worker-pane-manager-check.js",
+    "zellij:worker-pane-manager-single-owner": "node ./dist/scripts/zellij-worker-pane-manager-single-owner-check.js",
     "zellij:worker-pane-spawn-order": "node ./dist/scripts/zellij-worker-pane-spawn-order-check.js",
     "agent:slot-pane-binding-proof": "node ./dist/scripts/agent-slot-pane-binding-proof-check.js",
     "agent:worker-pane-communication-contract": "node ./dist/scripts/worker-pane-communication-contract-check.js",