sneakoscope 4.0.1 → 4.0.3

package/dist/core/release/release-gate-cache-v2.js

@@ -126,6 +126,14 @@ export function readReleaseGateCacheRecord(root, gate) {
     const key = releaseGateCacheKey(root, gate);
     const proof = readReusableTriWikiProofCard({ root, subjectId: gate.id, cacheKey: key });
     if (proof.hit && proof.card) {
+        writeReleaseCacheBridgeReport(root, {
+            gate_id: gate.id,
+            cache_key: key,
+            bridge: 'triwiki-to-release-v2',
+            source: proof.path || null,
+            duration_ms: Math.max(0, Math.floor(Number(proof.card.duration_ms) || 0)),
+            disagreement: null
+        });
         return {
             ok: true,
             gate_id: gate.id,
@@ -140,6 +148,15 @@ export function readReleaseGateCacheRecord(root, gate) {
         const record = readCacheRecord(file, key);
         if (!record || record.ok !== true)
             continue;
+        writeTriWikiProofFromReleaseCacheRecord(root, gate, key, record, file);
+        writeReleaseCacheBridgeReport(root, {
+            gate_id: gate.id,
+            cache_key: key,
+            bridge: 'release-v2-to-triwiki',
+            source: file,
+            duration_ms: Math.max(0, Math.floor(Number(record.duration_ms) || 0)),
+            disagreement: null
+        });
         return {
             ok: true,
             gate_id: String(record.gate_id || gate.id),
@@ -197,6 +214,60 @@ export function writeReleaseGateCacheHit(root, gate, durationMs = 0) {
         },
         invalidation_reasons: []
     }));
+    writeReleaseCacheBridgeReport(root, {
+        gate_id: gate.id,
+        cache_key: key,
+        bridge: 'release-v2-to-triwiki',
+        source: releaseGateCacheFile(root),
+        duration_ms: record.duration_ms,
+        disagreement: null
+    });
+}
+function writeTriWikiProofFromReleaseCacheRecord(root, gate, key, record, source) {
+    const triKey = computeTriWikiCacheKey({
+        root,
+        id: gate.id,
+        inputs: gate.cache.inputs,
+        implementationFiles: ['release-gates.v2.json', `src/scripts/${gate.id.replace(/[:]/g, '-')}-check.ts`],
+        envAllowlist: ['CI', 'SKS_FAST_MODE', 'SKS_RELEASE_PRESET'],
+        fixtureVersion: 'sks-4.0.2',
+        salt: key
+    });
+    writeTriWikiProofCard(root, createTriWikiProofCard({
+        subject_type: 'gate',
+        subject_id: gate.id,
+        cache_key: key,
+        input_hash: triKey.input_hash,
+        implementation_hash: triKey.implementation_hash,
+        gate_impl_hash: triKey.implementation_hash,
+        package_lock_hash: triKey.package_lock_hash,
+        release_gates_hash: triKey.release_gates_hash,
+        env_allowlist_hash: triKey.env_allowlist_hash,
+        tool_versions: triKey.tool_versions,
+        tool_version: triKey.tool_version,
+        fixture_version: triKey.fixture_version,
+        result: 'passed',
+        reusable: true,
+        duration_ms: Math.max(0, Math.floor(Number(record.duration_ms) || 0)),
+        evidence: { command: gate.command, cache_bridge: 'release-v2-to-triwiki', source },
+        invalidation_reasons: []
+    }));
+}
+function writeReleaseCacheBridgeReport(root, row) {
+    const file = path.join(root, '.sneakoscope', 'reports', 'release-cache-bridge.json');
+    let parsed = { schema: 'sks.release-cache-bridge.v1', records: [] };
+    try {
+        const existing = JSON.parse(fs.readFileSync(file, 'utf8'));
+        if (existing.schema === parsed.schema && Array.isArray(existing.records))
+            parsed = existing;
+    }
+    catch { }
+    parsed.records = [
+        ...parsed.records.filter((item) => item.gate_id !== row.gate_id || item.cache_key !== row.cache_key || item.bridge !== row.bridge),
+        row
+    ].sort((a, b) => `${a.gate_id}:${a.bridge}`.localeCompare(`${b.gate_id}:${b.bridge}`));
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, `${JSON.stringify(parsed, null, 2)}\n`);
 }
 function readCacheRecord(file, key) {
     try {

package/dist/core/release/release-gate-dag.js

@@ -9,6 +9,8 @@ import { RELEASE_GATE_NODE_SCHEMA, validateReleaseGateManifest } from './release
 import { countReleaseGateResources, defaultReleaseGateBudget, summarizeReleaseGateBudget } from './release-gate-resource-governor.js';
 import { selectAffectedReleaseGates } from './release-gate-affected-selector.js';
 import { computeTriWikiAffectedGraph } from '../triwiki/triwiki-affected-graph.js';
+import { executeExtremeSchedule } from './extreme-parallel-scheduler.js';
+import { computeResourceClassBudget } from './resource-class-budget.js';
 import { guardedProcessKill, guardContextForRoute } from '../safety/mutation-guard.js';
 import { createRequestedScopeContract } from '../safety/requested-scope-contract.js';
 import { rmrf } from '../fsx.js';
@@ -27,12 +29,24 @@ export async function runReleaseGateDag(input) {
     const manifest = loadReleaseGateManifest(root);
     const presetGates = selectReleaseGatePreset(manifest, preset);
     const triwikiGraph = input.triwiki !== false && (preset === 'affected' || preset === 'fast' || preset === 'confidence') && input.full !== true
-        ? computeTriWikiAffectedGraph({ root, tier: preset === 'fast' ? 'affected' : 'confidence', changedSince: input.changedSince || 'auto' })
+        ? computeTriWikiAffectedGraph({ root, tier: preset === 'fast' ? 'affected' : 'confidence', changedSince: input.changedSince || 'auto', ...(input.changedFiles ? { changedFiles: input.changedFiles } : {}) })
         : null;
     const affected = (preset === 'affected' || preset === 'fast' || preset === 'confidence') && input.full !== true
-        ? selectAffectedReleaseGates(root, manifest, presetGates, { changedSince: input.changedSince || 'auto', preset })
+        ? selectAffectedReleaseGates(root, manifest, presetGates, { changedSince: input.changedSince || 'auto', ...(input.changedFiles ? { changedFiles: input.changedFiles } : {}), preset })
         : selectAffectedReleaseGates(root, manifest, presetGates, { full: true, preset });
-    const selected = affected.gates;
+    const triwikiSelectionUsed = Boolean(triwikiGraph);
+    const triwikiConservative = Boolean(triwikiGraph?.conservative_reason);
+    const triwikiSelectedIds = new Set(triwikiGraph && !triwikiConservative ? triwikiGraph.gates : presetGates.map((gate) => gate.id));
+    const selected = triwikiGraph
+        ? presetGates.filter((gate) => triwikiSelectedIds.has(gate.id))
+        : affected.gates;
+    const triwikiSkippedGates = triwikiGraph ? presetGates.filter((gate) => !selected.some((row) => row.id === gate.id)).map((gate) => gate.id) : [];
+    if (triwikiGraph) {
+        affected.selection.mode = 'affected';
+        affected.selection.selected_gate_ids = selected.map((gate) => gate.id);
+        affected.selection.skipped_gate_ids = triwikiSkippedGates;
+        affected.selection.reasons = Object.fromEntries(selected.map((gate) => [gate.id, triwikiConservative ? `triwiki_conservative:${triwikiGraph.conservative_reason}` : 'triwiki-affected']));
+    }
     const selectedIds = new Set(selected.map((gate) => gate.id));
     const affectedExternalSatisfiedDeps = affected.selection.mode === 'affected'
         ? new Set(selected.flatMap((gate) => gate.deps || []).filter((dep) => !selectedIds.has(dep)))
@@ -110,7 +124,11 @@ export async function runReleaseGateDag(input) {
             failures,
             affected_graph: affectedGraph,
             completion_certificate: completionCertificate,
-            triwiki_affected_graph: triwikiGraph
+            triwiki_affected_graph: triwikiGraph,
+            triwiki_selection_used: triwikiSelectionUsed,
+            triwiki_selected_gates: triwikiGraph ? selected.map((gate) => gate.id) : [],
+            triwiki_skipped_gates: triwikiSkippedGates,
+            triwiki_conservative_reason: triwikiGraph?.conservative_reason || null
         };
         if (!finished) {
             snapshot.in_progress = true;
@@ -128,6 +146,33 @@ export async function runReleaseGateDag(input) {
         }
         return snapshot;
     };
+    if (input.useGatePacks === true && triwikiGraph && (preset === 'affected' || preset === 'fast' || preset === 'confidence') && selected.length > 0) {
+        const packRun = await executeExtremeSchedule({
+            root,
+            graph: triwikiGraph,
+            slaMs,
+            budget: computeResourceClassBudget(),
+            useProofBank: input.useTriWikiProofBank !== false
+        });
+        for (const report of packRun.pack_reports) {
+            if (report.ok)
+                completed.set(report.pack_id, { id: report.pack_id, ok: true, exit_code: 0, signal: null, timed_out: false, duration_ms: report.critical_path_ms || 0, cached: false, stderr_tail: '' });
+            else
+                failed.set(report.pack_id, { id: report.pack_id, ok: false, exit_code: 1, signal: null, timed_out: false, duration_ms: report.critical_path_ms || 0, cached: false, stderr_tail: report.blockers.join('\n') });
+            sumGateMs += report.critical_path_ms || 0;
+        }
+        const packed = writeSummarySnapshot(true);
+        return {
+            ...packed,
+            ok: packed.ok && packRun.ok,
+            completed: packRun.pack_reports.filter((report) => report.ok).length,
+            failed: packRun.failed_pack_count,
+            executed_packs: packRun.executed_packs,
+            pack_parallelism_gain: packRun.wall_ms > 0 ? Number((packRun.sequential_ms / packRun.wall_ms).toFixed(2)) : 1,
+            triwiki_proof_bank_hits: packRun.reused_proof_count,
+            pack_proof_paths: packRun.pack_reports.flatMap((report) => report.proof_paths)
+        };
+    }
     if (input.explain) {
         writeReleaseGateJson(path.join(reportDir, 'explain.json'), { schema: RELEASE_GATE_NODE_SCHEMA, preset, budget, gates: selected.map((gate) => ({ id: gate.id, deps: gate.deps, resource: gate.resource, command: gate.command })) });
     }
@@ -211,7 +256,7 @@ export async function runReleaseGateDag(input) {
     return finalResult;
 }
 export function selectReleaseGatePreset(manifest, preset) {
-    const effectivePreset = preset === 'affected' || preset === 'fast' ? 'release' : preset;
+    const effectivePreset = preset === 'affected' || preset === 'fast' || preset === 'confidence' ? 'release' : preset;
     return manifest.gates.filter((gate) => gate.preset.includes(effectivePreset));
 }
 function buildAffectedGraph(input) {

package/dist/core/release/release-gate-node.js

@@ -7,6 +7,8 @@ export const RELEASE_GATE_RESOURCE_CLASSES = [
     'git',
     'git-worktree',
     'zellij-real',
+    'browser-real',
+    'secret-sensitive',
     'local-llm-real',
     'remote-model-real',
     'python',

package/dist/core/release/release-gate-resource-governor.js

@@ -12,6 +12,8 @@ export function defaultReleaseGateBudget() {
         python: Math.min(12, Math.max(1, cores)),
         network: 12,
         'zellij-real': 1,
+        'browser-real': 1,
+        'secret-sensitive': 1,
         'local-llm-real': Math.max(1, Number(process.env.SKS_LOCAL_LLM_MAX_PARALLEL || 1)),
         'remote-model-real': 6,
         'global-config': 1,

package/dist/core/release/resource-class-budget.js

@@ -12,6 +12,7 @@ export function computeResourceClassBudget(env = process.env) {
         network: readEnvInt(env, 'SKS_RESOURCE_NETWORK', 2),
         remote_model_real: readEnvInt(env, 'SKS_RESOURCE_REMOTE_MODEL_REAL', 1),
         zellij_real: readEnvInt(env, 'SKS_RESOURCE_ZELLIJ_REAL', 1),
+        browser_real: readEnvInt(env, 'SKS_RESOURCE_BROWSER_REAL', 1),
         secret_sensitive: readEnvInt(env, 'SKS_RESOURCE_SECRET', 1)
     };
 }

package/dist/core/results.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=results.js.map

package/dist/core/secret-redaction.js

@@ -1,6 +1,8 @@
 const SECRET_ENV_NAMES = [
     'CODEX_ACCESS_TOKEN',
     'OPENAI_API_KEY',
+    'OPENROUTER_API_KEY',
+    'SKS_OPENROUTER_API_KEY',
     'CODEX_LB_API_KEY',
     'ANTHROPIC_API_KEY',
     'GITHUB_TOKEN',
@@ -8,6 +10,8 @@ const SECRET_ENV_NAMES = [
 ];
 const SECRET_PATTERNS = [
     /\bsk-proj-[A-Za-z0-9_-]{12,}\b/g,
+    /\bsk-or-v1-[A-Za-z0-9_-]{12,}\b/g,
+    /\bsk-or-[A-Za-z0-9_-]{12,}\b/g,
     /\bsk-[A-Za-z0-9_-]{20,}\b/g,
     /\bsk-clb-[A-Za-z0-9_-]{8,}\b/g,
     /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,

package/dist/core/security/redact-secrets.js

@@ -0,0 +1,15 @@
+import { redactSecrets, redactString } from '../secret-redaction.js';
+export function redactOpenRouterKey(value) {
+    if (!value)
+        return '';
+    if (value.length <= 10)
+        return '<redacted>';
+    return `${value.slice(0, 6)}...${value.slice(-4)}`;
+}
+export function redactOpenRouterSecrets(value, env = process.env) {
+    return redactSecrets(value, env);
+}
+export function redactOpenRouterString(value, env = process.env) {
+    return redactString(String(value ?? ''), env);
+}
+//# sourceMappingURL=redact-secrets.js.map

package/dist/core/triwiki/triwiki-affected-graph.js

@@ -3,6 +3,8 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { DEFAULT_TRIWIKI_MODULE_CARDS, moduleIdsForPath } from './triwiki-module-card.js';
 import { buildTriWikiGateImpactMap } from './triwiki-gate-impact-map.js';
+import { computeTriWikiCacheKey } from './triwiki-cache-key.js';
+import { readReusableTriWikiProofCard } from './triwiki-proof-bank.js';
 export const TRIWIKI_AFFECTED_GRAPH_SCHEMA = 'sks.triwiki-affected-graph.v1';
 export function computeTriWikiAffectedGraph(input) {
     const cards = input.cards || DEFAULT_TRIWIKI_MODULE_CARDS;
@@ -33,6 +35,30 @@ export function computeTriWikiAffectedGraph(input) {
     const gatePacks = new Set();
     for (const impact of selected)
         gatePacks.add(impact.gate_pack);
+    const proofLookup = selected.map((impact) => {
+        const cacheKey = computeTriWikiCacheKey({
+            root: input.root,
+            id: impact.gate_id,
+            inputs: impact.cache_inputs,
+            implementationFiles: [`src/scripts/${scriptFileForCommand(impact.command) || ''}`].filter(Boolean),
+            envAllowlist: ['CI', 'SKS_FAST_MODE', 'SKS_RELEASE_PRESET'],
+            fixtureVersion: 'sks-4.0.2'
+        });
+        const hit = readReusableTriWikiProofCard({ root: input.root, subjectId: impact.gate_id, cacheKey: cacheKey.key });
+        return { impact, hit };
+    });
+    const reusedProofs = proofLookup
+        .filter((row) => row.hit.hit && row.hit.card && row.hit.path)
+        .map((row) => ({ gate_id: row.impact.gate_id, proof_id: row.hit.card.proof_id, path: row.hit.path }))
+        .sort((a, b) => a.gate_id.localeCompare(b.gate_id));
+    const invalidatedProofs = proofLookup
+        .filter((row) => !row.hit.hit && row.hit.invalidation_reasons.some((reason) => !['proof_dir_missing', 'proof_not_found'].includes(reason)))
+        .map((row) => ({ gate_id: row.impact.gate_id, reason: row.hit.invalidation_reasons.join('|') || 'proof_not_reusable' }))
+        .sort((a, b) => a.gate_id.localeCompare(b.gate_id));
+    const requiredNewProofs = proofLookup
+        .filter((row) => !row.hit.hit)
+        .map((row) => row.impact.gate_id)
+        .sort();
     const tier = input.tier || 'affected';
     return {
         schema: TRIWIKI_AFFECTED_GRAPH_SCHEMA,
@@ -45,9 +71,9 @@ export function computeTriWikiAffectedGraph(input) {
         release_equivalent_within_scope: tier !== 'instant',
         confidence: tier === 'release' ? 'full-release' : tier === 'instant' ? 'instant' : 'affected-release-equivalent',
         conservative_reason: conservativeReason,
-        reused_proofs: [],
-        invalidated_proofs: selected.map((impact) => impact.gate_id).sort(),
-        required_new_proofs: selected.map((impact) => impact.gate_id).sort()
+        reused_proofs: reusedProofs,
+        invalidated_proofs: invalidatedProofs,
+        required_new_proofs: requiredNewProofs
     };
 }
 function resolveChangedFiles(input) {
@@ -109,4 +135,10 @@ function parseGitStatusPathLine(line) {
 function previousPathOrConservative(root, file) {
     return fs.existsSync(path.join(root, file)) ? file : file;
 }
+function scriptFileForCommand(command) {
+    const script = command.match(/^npm run ([^ ]+)/)?.[1];
+    if (!script)
+        return null;
+    return `${script.replace(/[:]/g, '-')}${script.includes('blackbox') ? '' : '-check'}.ts`;
+}
 //# sourceMappingURL=triwiki-affected-graph.js.map

package/dist/core/triwiki/triwiki-gate-impact-map.js

@@ -72,6 +72,8 @@ export function gatePackForGate(gate, modules, cards = DEFAULT_TRIWIKI_MODULE_CA
         return 'doctor-production';
     if (gate.id.startsWith('sksd:') || gate.id.startsWith('probes:'))
         return 'startup-mcp';
+    if (gate.id.startsWith('secret:') || gate.id.includes('secret'))
+        return 'secret';
     if (gate.id.startsWith('legacy:') || gate.id.startsWith('orphan:') || gate.id.includes('zellij'))
         return 'zellij';
     const card = cards.find((candidate) => modules.includes(candidate.module_id) && candidate.gate_packs.length);

package/dist/core/triwiki/triwiki-proof-bank.js

@@ -165,8 +165,8 @@ function isLockStale(file, staleAfterMs) {
     try {
         const stat = fs.statSync(file);
         const raw = JSON.parse(fs.readFileSync(file, 'utf8'));
-        const pidAlive = typeof raw.pid === 'number' && process.kill(raw.pid, 0) !== undefined;
-        return !pidAlive || Date.now() - stat.mtimeMs > staleAfterMs;
+        const alive = typeof raw.pid === 'number' && pidAlive(raw.pid);
+        return !alive || Date.now() - stat.mtimeMs > staleAfterMs;
     }
     catch {
         try {
@@ -178,6 +178,16 @@ function isLockStale(file, staleAfterMs) {
         }
     }
 }
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        const code = typeof err === 'object' && err && 'code' in err ? String(err.code || '') : '';
+        return code === 'EPERM';
+    }
+}
 function walkJson(dir) {
     const out = [];
     const stack = [dir];

package/dist/core/triwiki/triwiki-sla-certificate.js

@@ -7,6 +7,8 @@ export function buildTriWikiSlaCertificate(input) {
     const mode = input.mode || 'plan';
     if (input.estimatedCriticalPathMs > input.slaMs)
         blockers.push('sla_estimate_exceeds_budget');
+    if (mode === 'actual' && input.actualDurationMs !== undefined && input.actualDurationMs > input.slaMs)
+        blockers.push('actual_duration_exceeds_budget');
     if (mode === 'actual' && input.actualDurationMs === undefined)
         blockers.push('actual_mode_missing_execution_stats');
     const certificate = {
@@ -18,6 +20,7 @@ export function buildTriWikiSlaCertificate(input) {
         estimated_critical_path_ms: input.estimatedCriticalPathMs,
         estimated_sequential_ms: input.estimatedSequentialMs,
         reduction_ratio: Number(reductionRatio.toFixed(4)),
+        sla_met: blockers.length === 0,
         release_equivalent_within_scope: input.graph.release_equivalent_within_scope,
         gates: input.graph.gates.length,
         gate_packs: input.graph.gate_packs,

package/dist/core/version.js

@@ -1,2 +1,2 @@
-export const PACKAGE_VERSION = '4.0.1';
+export const PACKAGE_VERSION = '4.0.3';
 //# sourceMappingURL=version.js.map

package/dist/scripts/release-4002-required-gates.js

@@ -0,0 +1,14 @@
+export const REQUIRED_4002_RELEASE_IDS = [
+    'build-once:runner-blackbox',
+    'release:triwiki-first-runner-blackbox',
+    'triwiki:proof-bank-lock-blackbox',
+    'gate-pack:v2-blackbox',
+    'scheduler:resource-claim-blackbox',
+    'doctor:dirty-semantic-blackbox',
+    'legacy:purge-final',
+    'orphan:purge-final',
+    'sks:402-five-minute-real-blackbox',
+    'sks:402-all-feature-regression'
+];
+export const REQUIRED_4002_REAL_CHECK_IDS = [];
+//# sourceMappingURL=release-4002-required-gates.js.map

package/dist/scripts/release-gate-dag-runner.js

@@ -18,7 +18,8 @@ const result = await runReleaseGateDag({
     full: args.includes('--full'),
     explain: args.includes('--explain'),
     noCache: args.includes('--no-cache'),
-    failFast: args.includes('--fail-fast')
+    failFast: args.includes('--fail-fast'),
+    useGatePacks: args.includes('--use-gate-packs')
 });
 console.log(`SKS Release DAG
   gates: ${result.total_gates} total, ${result.selected_gates} selected, ${result.cached} cached

package/dist/scripts/release-gate-existence-audit.js

@@ -39,8 +39,7 @@ const required = [
     'agent:worker-pane-communication-contract',
     'git:worktree-integration-primary',
     'git:worktree-integration-primary-runtime',
-    'codex:0.136-compat',
-    'codex:0.135-compat',
+    'codex:0.137-compat',
     'doctor:codex-doctor-parity',
     'codex:permission-profiles',
     'codex:legacy-profile-consumers-removed',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "4.0.1",
+  "version": "4.0.3",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -30,6 +30,8 @@
     "!dist/**/*.d.ts.map",
     "!dist/**/*.js.map",
     "!dist/**/*.tsbuildinfo",
+    "!dist/**/__tests__",
+    "!dist/**/*.test.js",
     "!dist/vendor/openai-codex/rust-v0.131.0",
     "!dist/scripts/*-blackbox.js",
     "!dist/scripts/*-check.js",
@@ -122,6 +124,7 @@
     "prepublish:fast-check": "node ./dist/scripts/prepublish-fast-check.js",
     "prepublish:release-check-or-fast": "node ./dist/scripts/prepublish-release-check-or-fast.js",
     "mad:preflight-blocks-unreadable-config": "node ./dist/scripts/mad-preflight-blocks-unreadable-config-check.js",
+    "codex:0.141-compat": "node ./dist/scripts/codex-0141-capability-check.js",
     "codex:0.136-compat": "node ./dist/scripts/codex-0-136-compat-check.js",
     "codex:0.136-compat:require-real": "node ./dist/scripts/codex-0-136-compat-check.js --require-real",
     "codex:0.135-compat": "node ./dist/scripts/codex-0-135-compat-check.js",
@@ -568,7 +571,7 @@
     "python-tools:smoke": "node ./dist/scripts/python-tools-smoke-check.js",
     "agent:zellij-dynamic-backfill-panes": "node ./dist/scripts/agent-zellij-dynamic-backfill-panes-check.js",
     "agent:real-codex-in-zellij-worker-pane": "node ./dist/scripts/agent-real-codex-in-zellij-worker-pane-check.js",
-    "release:check:legacy": "npm run release:check:parallel && npm run mad-sks:app-ui-no-mutation && npm run codex-app:fast-ui-preservation && npm run codex-app:ui-clobber-guard && npm run doctor:fixes-codex-app-fast-ui && npm run provider:badge-context && npm run provider:context-config-toml && npm run codex-app:provider-badge && npm run zellij:spawn-on-demand-layout && npm run zellij:worker-pane-manager && npm run zellij:worker-pane-manager-single-owner && npm run agent:worker-pane-communication-contract && npm run runtime:no-mjs-scripts && npm run runtime:ts-python-boundary && npm run codex-sdk:capability && npm run codex-sdk:no-legacy-fallback && npm run codex-sdk:backend-router && npm run codex-sdk:structured-output && npm run codex-sdk:event-stream-ledger && npm run codex-sdk:thread-registry && npm run codex-sdk:sandbox-policy && npm run codex-sdk:zellij-pane-binding && npm run codex-sdk:all-pipelines && npm run codex-sdk:dfix-pipeline && npm run codex-sdk:qa-pipeline && npm run codex-sdk:research-pipeline && npm run codex-sdk:team-naruto-agent-pipeline && npm run codex-sdk:release-review-pipeline && npm run codex-sdk:ux-ppt-review-pipeline && npm run codex-sdk:core-skill-pipeline && npm run codex-control:capability && npm run codex-control:no-legacy-fallback && npm run codex-control:structured-output && npm run codex-control:event-stream-ledger && npm run codex-control:thread-registry && npm run codex-control:side-effect-scope && npm run codex-control:all-pipelines && npm run codex-control:empty-result-retry && npm run codex-control:stream-idle-watchdog && npm run codex-control:tool-call-sequence-repair && npm run codex-control:keepalive-no-cot-leak && npm run local-collab:policy && npm run local-collab:gpt-final-arbiter && npm run local-collab:no-local-only-final && npm run local-collab:gpt-final-availability && npm run local-llm:capability && npm run local-llm:structured-output && npm run local-llm:tool-call-repair && npm run local-llm:all-pipelines && npm run local-collab:all-pipelines-final-gpt && npm run python-sdk:capability && npm run python-sdk:stream-bridge && npm run python-sdk:sandbox-policy && npm run python-sdk:all-pipelines && npm run codex:plugin-list-json && npm run codex:product-design-plugin-routing && npm run codex:product-design-auto-install && npm run codex:thread-runtime-choice && npm run codex:environment-scoped-approvals && npm run ultra-router:classification && npm run ultra-router:auto-router && npm run release:version-truth && npm run release:worktree-gates && npm run codex:0.137-compat && npm run codex:0.136-compat && npm run codex:0.135-compat && npm run doctor:codex-doctor-parity && npm run codex:permission-profiles && npm run codex:legacy-profile-consumers-removed && npm run terminal:keyboard-enhancement-safety && npm run terminal:tui-output-stability && npm run codex:resume-cwd-truth && npm run mcp:tool-naming-parity && npm run responses:retry-policy-centralized && npm run runtime:no-tmux && npm run zellij:layout-valid && npm run agent:zellij-dynamic-backfill-panes && npm run agent:worker-pane-communication-contract && npm run agent:slot-pane-binding-proof && npm run zellij:worker-pane-manager && npm run zellij:spawn-on-demand-layout && npm run zellij:lane-renderer && npm run mad-sks:zellij-launch && npm run mad-sks:zellij-default-pane-worker && npm run agent:zellij-runtime && npm run codex:config-eperm-fixture && npm run doctor:fix-proves-codex-read && npm run mad:preflight-blocks-unreadable-config && npm run fast:codex-service-tier-proof && npm run codex:project-config-policy-splitter && npm run test:no-orphan-dist-imports && npm run agent:patch-envelope-extraction && npm run agent:patch-queue-runtime && npm run agent:strategy-to-lease-wiring && npm run agent:patch-swarm-runtime && npm run agent:patch-transaction-journal && npm run agent:patch-conflict-rebase && npm run agent:strategy-to-patch-strict && npm run agent:patch-swarm-runtime-truth && npm run agent:rollback-command && npm run agent:patch-verification-dag && npm run agent:patch-rollback-dag && npm run agent:patch-proof-runtime && npm run agent:patch-swarm-route-blackbox && npm run team:patch-swarm-route-blackbox && npm run dfix:patch-swarm-route-blackbox && npm run appshots:thread-attachment-discovery && npm run mcp:readonly-runtime-scheduler && npm run naruto:work-graph && npm run naruto:readonly-routing && npm run naruto:concurrency-governor && npm run naruto:active-pool && npm run naruto:role-distribution && npm run naruto:parallel-patch-apply && npm run naruto:verification-pool && npm run naruto:zellij-massive-ui && npm run naruto:gpt-final-pack && npm run prompt:placeholder-guard && npm run codex:0.134-runner-truth && npm run agent:native-cli-session-swarm && npm run naruto:shadow-clone-swarm && npm run agent:native-cli-session-swarm-10 && npm run agent:native-cli-session-swarm-20 && npm run agent:no-subagent-scaling && npm run agent:native-cli-session-proof && npm run agent:worker-backend-router && npm run agent:codex-child-overlap && npm run agent:model-authored-patch-envelope && npm run agent:fast-mode-default && npm run agent:fast-mode-worker-propagation && npm run codex:fast-mode-profile-propagation && npm run mad-sks:fast-mode-propagation && npm run zellij:launch-command-truth && npm run zellij:real-session-heartbeat && npm run zellij:ui-design && npm run zellij:doctor-readiness && npm run legacy:upgrade-zero-break && npm run publish:packlist-performance && npm run postinstall:safe-side-effects && npm run runtime:ts-rust-boundary && npm run core-skill:card-schema && npm run core-skill:rollout-scoring && npm run core-skill:patch && npm run core-skill:heldout-validation && npm run core-skill:deployment-snapshot && npm run core-skill:no-inference-optimizer && npm run core-skill:route-runtime-integration && npm run core-skill:promotion-side-effect-ledger && npm run core-skill:legacy-promotion-api-audit && npm run core-skill:trainer-loop && npm run safety:side-effect-zero && npm run safety:mutation-callsite-coverage && npm run safety:mutation-callsite-coverage:repo-wide && npm run side-effect:runtime-report && npm run release:gate-planner && npm run release:dynamic-performance && npm run release:provenance && npm run release:gate-budget && npm run agent:wiki-context-proof && npm run shared-memory:check && npm run wrongness:check && npm run wrongness:fixtures && npm run trust:check && npm run git-collaboration:e2e && node ./dist/scripts/release-check-stamp.js write && npm run release:readiness --silent && node ./dist/scripts/release-check-stamp.js write",
+    "release:check:legacy": "npm run release:check:parallel && npm run mad-sks:app-ui-no-mutation && npm run codex-app:fast-ui-preservation && npm run codex-app:ui-clobber-guard && npm run doctor:fixes-codex-app-fast-ui && npm run provider:badge-context && npm run provider:context-config-toml && npm run codex-app:provider-badge && npm run zellij:spawn-on-demand-layout && npm run zellij:worker-pane-manager && npm run zellij:worker-pane-manager-single-owner && npm run agent:worker-pane-communication-contract && npm run runtime:no-mjs-scripts && npm run runtime:ts-python-boundary && npm run codex-sdk:capability && npm run codex-sdk:no-legacy-fallback && npm run codex-sdk:backend-router && npm run codex-sdk:structured-output && npm run codex-sdk:event-stream-ledger && npm run codex-sdk:thread-registry && npm run codex-sdk:sandbox-policy && npm run codex-sdk:zellij-pane-binding && npm run codex-sdk:all-pipelines && npm run codex-sdk:dfix-pipeline && npm run codex-sdk:qa-pipeline && npm run codex-sdk:research-pipeline && npm run codex-sdk:team-naruto-agent-pipeline && npm run codex-sdk:release-review-pipeline && npm run codex-sdk:ux-ppt-review-pipeline && npm run codex-sdk:core-skill-pipeline && npm run codex-control:capability && npm run codex-control:no-legacy-fallback && npm run codex-control:structured-output && npm run codex-control:event-stream-ledger && npm run codex-control:thread-registry && npm run codex-control:side-effect-scope && npm run codex-control:all-pipelines && npm run codex-control:empty-result-retry && npm run codex-control:stream-idle-watchdog && npm run codex-control:tool-call-sequence-repair && npm run codex-control:keepalive-no-cot-leak && npm run local-collab:policy && npm run local-collab:gpt-final-arbiter && npm run local-collab:no-local-only-final && npm run local-collab:gpt-final-availability && npm run local-llm:capability && npm run local-llm:structured-output && npm run local-llm:tool-call-repair && npm run local-llm:all-pipelines && npm run local-collab:all-pipelines-final-gpt && npm run python-sdk:capability && npm run python-sdk:stream-bridge && npm run python-sdk:sandbox-policy && npm run python-sdk:all-pipelines && npm run codex:plugin-list-json && npm run codex:product-design-plugin-routing && npm run codex:product-design-auto-install && npm run codex:thread-runtime-choice && npm run codex:environment-scoped-approvals && npm run ultra-router:classification && npm run ultra-router:auto-router && npm run release:version-truth && npm run release:worktree-gates && npm run codex:0.137-compat && npm run doctor:codex-doctor-parity && npm run codex:permission-profiles && npm run codex:legacy-profile-consumers-removed && npm run terminal:keyboard-enhancement-safety && npm run terminal:tui-output-stability && npm run codex:resume-cwd-truth && npm run mcp:tool-naming-parity && npm run responses:retry-policy-centralized && npm run runtime:no-tmux && npm run zellij:layout-valid && npm run agent:zellij-dynamic-backfill-panes && npm run agent:worker-pane-communication-contract && npm run agent:slot-pane-binding-proof && npm run zellij:worker-pane-manager && npm run zellij:spawn-on-demand-layout && npm run zellij:lane-renderer && npm run mad-sks:zellij-launch && npm run mad-sks:zellij-default-pane-worker && npm run agent:zellij-runtime && npm run codex:config-eperm-fixture && npm run doctor:fix-proves-codex-read && npm run mad:preflight-blocks-unreadable-config && npm run fast:codex-service-tier-proof && npm run codex:project-config-policy-splitter && npm run test:no-orphan-dist-imports && npm run agent:patch-envelope-extraction && npm run agent:patch-queue-runtime && npm run agent:strategy-to-lease-wiring && npm run agent:patch-swarm-runtime && npm run agent:patch-transaction-journal && npm run agent:patch-conflict-rebase && npm run agent:strategy-to-patch-strict && npm run agent:patch-swarm-runtime-truth && npm run agent:rollback-command && npm run agent:patch-verification-dag && npm run agent:patch-rollback-dag && npm run agent:patch-proof-runtime && npm run agent:patch-swarm-route-blackbox && npm run team:patch-swarm-route-blackbox && npm run dfix:patch-swarm-route-blackbox && npm run appshots:thread-attachment-discovery && npm run mcp:readonly-runtime-scheduler && npm run naruto:work-graph && npm run naruto:readonly-routing && npm run naruto:concurrency-governor && npm run naruto:active-pool && npm run naruto:role-distribution && npm run naruto:parallel-patch-apply && npm run naruto:verification-pool && npm run naruto:zellij-massive-ui && npm run naruto:gpt-final-pack && npm run prompt:placeholder-guard && npm run codex:0.134-runner-truth && npm run agent:native-cli-session-swarm && npm run naruto:shadow-clone-swarm && npm run agent:native-cli-session-swarm-10 && npm run agent:native-cli-session-swarm-20 && npm run agent:no-subagent-scaling && npm run agent:native-cli-session-proof && npm run agent:worker-backend-router && npm run agent:codex-child-overlap && npm run agent:model-authored-patch-envelope && npm run agent:fast-mode-default && npm run agent:fast-mode-worker-propagation && npm run codex:fast-mode-profile-propagation && npm run mad-sks:fast-mode-propagation && npm run zellij:launch-command-truth && npm run zellij:real-session-heartbeat && npm run zellij:ui-design && npm run zellij:doctor-readiness && npm run legacy:upgrade-zero-break && npm run publish:packlist-performance && npm run postinstall:safe-side-effects && npm run runtime:ts-rust-boundary && npm run core-skill:card-schema && npm run core-skill:rollout-scoring && npm run core-skill:patch && npm run core-skill:heldout-validation && npm run core-skill:deployment-snapshot && npm run core-skill:no-inference-optimizer && npm run core-skill:route-runtime-integration && npm run core-skill:promotion-side-effect-ledger && npm run core-skill:legacy-promotion-api-audit && npm run core-skill:trainer-loop && npm run safety:side-effect-zero && npm run safety:mutation-callsite-coverage && npm run safety:mutation-callsite-coverage:repo-wide && npm run side-effect:runtime-report && npm run release:gate-planner && npm run release:dynamic-performance && npm run release:provenance && npm run release:gate-budget && npm run agent:wiki-context-proof && npm run shared-memory:check && npm run wrongness:check && npm run wrongness:fixtures && npm run trust:check && npm run git-collaboration:e2e && node ./dist/scripts/release-check-stamp.js write && npm run release:readiness --silent && node ./dist/scripts/release-check-stamp.js write",
     "release:check:dag": "node ./dist/scripts/release-gate-dag-runner.js --preset release",
     "release:check:dag:explain": "node ./dist/scripts/release-gate-dag-runner.js --preset release --explain",
     "release:check:dag:no-cache": "node ./dist/scripts/release-gate-dag-runner.js --preset release --no-cache",
@@ -1003,7 +1006,17 @@
     "legacy:strong-inventory": "node ./dist/scripts/legacy-strong-inventory-check.js",
     "orphan:strong-detection": "node ./dist/scripts/orphan-strong-detection-check.js",
     "sks:401-five-minute-actual-blackbox": "node ./dist/scripts/sks-401-five-minute-actual-blackbox.js",
-    "sks:401-all-feature-regression": "node ./dist/scripts/sks-401-all-feature-regression-blackbox.js"
+    "sks:401-all-feature-regression": "node ./dist/scripts/sks-401-all-feature-regression-blackbox.js",
+    "build-once:runner-blackbox": "node ./dist/scripts/build-once-runner-blackbox.js",
+    "release:triwiki-first-runner-blackbox": "node ./dist/scripts/release-triwiki-first-runner-blackbox.js",
+    "triwiki:proof-bank-lock-blackbox": "node ./dist/scripts/triwiki-proof-bank-lock-blackbox.js",
+    "gate-pack:v2-blackbox": "node ./dist/scripts/gate-pack-v2-blackbox.js",
+    "scheduler:resource-claim-blackbox": "node ./dist/scripts/scheduler-resource-claim-blackbox.js",
+    "doctor:dirty-semantic-blackbox": "node ./dist/scripts/doctor-dirty-semantic-blackbox.js",
+    "legacy:purge-final": "node ./dist/scripts/legacy-purge-final-check.js",
+    "orphan:purge-final": "node ./dist/scripts/orphan-purge-final-check.js",
+    "sks:402-five-minute-real-blackbox": "node ./dist/scripts/sks-402-five-minute-real-blackbox.js",
+    "sks:402-all-feature-regression": "node ./dist/scripts/sks-402-all-feature-regression-blackbox.js"
   },
   "keywords": [
     "sneakoscope",