sneakoscope 4.8.6 → 5.1.2

package/dist/scripts/sks-menubar-install-check.js

@@ -1,16 +1,30 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
+import { PACKAGE_VERSION } from '../core/fsx.js';
 import { installSksMenuBar } from '../core/codex-app/sks-menubar.js';
 const temp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-menubar-check-'));
 const envHomeTemp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-menubar-env-home-check-'));
+const fakeRoot = path.join(temp, 'project-root');
+await fs.mkdir(fakeRoot, { recursive: true });
 const launchGuardEnv = { ...process.env, SKS_SKIP_SKS_MENUBAR_LAUNCH: '0' };
+const localEntry = path.join(fakeRoot, 'dist', 'bin', 'sks.js');
+await fs.mkdir(path.dirname(localEntry), { recursive: true });
+await fs.writeFile(localEntry, '#!/usr/bin/env node\n', 'utf8');
 const result = await installSksMenuBar({
     apply: true,
     launch: true,
     home: temp,
-    root: temp,
-    sksEntry: path.join(process.cwd(), 'dist', 'bin', 'sks.js'),
+    root: fakeRoot,
+    sksEntry: localEntry,
+    env: launchGuardEnv
+});
+const secondResult = await installSksMenuBar({
+    apply: true,
+    launch: true,
+    home: temp,
+    root: fakeRoot,
+    sksEntry: localEntry,
     env: launchGuardEnv
 });
 const envHomeResult = await installSksMenuBar({
@@ -23,25 +37,56 @@ const envHomeResult = await installSksMenuBar({
 const executableExists = result.executable_path ? await exists(result.executable_path) : false;
 const launchAgentExists = result.launch_agent_path ? await exists(result.launch_agent_path) : false;
 const actionScriptExists = result.action_script_path ? await exists(result.action_script_path) : false;
+const buildStampExists = result.build_stamp_path ? await exists(result.build_stamp_path) : false;
 const generatedSourcePath = result.app_path ? path.join(path.dirname(result.app_path), 'SKSMenuBar.swift') : null;
 const generatedSource = generatedSourcePath ? await fs.readFile(generatedSourcePath, 'utf8').catch(() => '') : '';
+const actionScript = result.action_script_path ? await fs.readFile(result.action_script_path, 'utf8').catch(() => '') : '';
 const launchAgentSource = result.launch_agent_path ? await fs.readFile(result.launch_agent_path, 'utf8').catch(() => '') : '';
-const hasVisibleLabelSource = generatedSource.includes('NSStatusItem.variableLength')
-    && generatedSource.includes('button.title = "SKS"')
-    && generatedSource.includes('button.attributedTitle = NSAttributedString(string: "SKS"')
-    && generatedSource.includes('NSColor.labelColor')
-    && generatedSource.includes('button.image = nil');
-// The status item must persist its user-arranged position across restarts so a
-// once-dragged item does not jump back behind the notch on the next doctor --fix.
+const infoPlistPath = result.app_path ? path.join(result.app_path, 'Contents', 'Info.plist') : null;
+const infoPlist = infoPlistPath ? await fs.readFile(infoPlistPath, 'utf8').catch(() => '') : '';
+const commandRegistry = await fs.readFile(path.join(process.cwd(), 'src', 'cli', 'command-registry.ts'), 'utf8');
+const installHelpers = await fs.readFile(path.join(process.cwd(), 'src', 'cli', 'install-helpers.ts'), 'utf8');
+const hasVisibleStatusSource = generatedSource.includes('NSStatusItem.variableLength')
+    && generatedSource.includes('configureStatusButton(button, title: state.title)')
+    && generatedSource.includes('SKS ⚠')
+    && generatedSource.includes('SKS ↑')
+    && generatedSource.includes('Timer.scheduledTimer(withTimeInterval: 30.0');
+const hasBackgroundReadonlyActions = generatedSource.includes('runSksBackground(["codex-lb", "fast-check"]')
+    && generatedSource.includes('runSksBackground(["update", "check"]')
+    && generatedSource.includes('display notification')
+    && !generatedSource.includes('@objc func fastCheck() {\n        runSksInTerminal');
+const hasTerminalFailureAlert = generatedSource.includes('output.contains("-1743")')
+    && generatedSource.includes('Privacy & Security > Automation');
+const hasTerminalExit = generatedSource.includes('; exit');
 const hasAutosaveNameSource = generatedSource.includes('statusItem.autosaveName = "com.sneakoscope.sks-menubar"');
 const hasExplicitVisibleSource = generatedSource.includes('statusItem.isVisible = true');
-const terminalCommandLine = generatedSource.split(/\r?\n/)
-    .find((line) => line.includes('do script') && line.includes('escaped')) || '';
-const hasTerminalCommandInterpolation = terminalCommandLine.includes(String.raw `\(escaped)`)
-    && !terminalCommandLine.includes(String.raw `\"(escaped)\"`);
 const hasNoUnconditionalKeepAlive = !launchAgentSource.includes('<key>KeepAlive</key>');
+const hasNoLaunchAgentSecrets = !launchAgentSource.includes('EnvironmentVariables')
+    && !launchAgentSource.includes('CODEX_LB_API_KEY')
+    && !launchAgentSource.includes('OPENROUTER_API_KEY');
 const hasInteractiveProcessType = launchAgentSource.includes('<key>ProcessType</key>')
     && launchAgentSource.includes('<string>Interactive</string>');
+const hasPackagePlistVersion = infoPlist.includes(`<string>${PACKAGE_VERSION}</string>`)
+    && infoPlist.includes('<key>CFBundleShortVersionString</key>')
+    && infoPlist.includes('<key>CFBundleVersion</key>');
+const hasActionFallbacks = actionScript.includes('.nvm/versions/node/*/bin/node(Nn[-1])')
+    && actionScript.includes('/bin/zsh -lc')
+    && actionScript.includes('command -v sks');
+const hasEntryWarning = result.warnings.includes('sks_entry_project_local_ignored_global_package_used')
+    || result.warnings.includes('sks_entry_resolved_under_project_root');
+const hasBuildStamp = buildStampExists
+    && result.build_stamp?.package_version === PACKAGE_VERSION
+    && result.build_stamp?.codesign_identifier === 'com.sneakoscope.sks-menubar';
+const isIdempotent = secondResult.actions.includes('menubar_up_to_date')
+    && secondResult.build_stamp?.action_script_sha256 === result.build_stamp?.action_script_sha256;
+const hasCommandRegistry = commandRegistry.includes('menubar:')
+    && commandRegistry.includes('menubarCommand')
+    && commandRegistry.includes('dist/core/commands/menubar-command.js');
+const noLaunchctlSecretSetenv = !installHelpers.includes('{ CODEX_LB_API_KEY: apiKey')
+    && !installHelpers.includes("['setenv', 'CODEX_LB_API_KEY")
+    && !installHelpers.includes("['setenv', 'OPENROUTER_API_KEY");
+const hasLaunchctlUnsetenv = installHelpers.includes('cleanupMacLaunchSecretEnvironment')
+    && installHelpers.includes('skipped_secret_variables');
 const expectedMenuItems = [
     'Use codex-lb',
     'Use ChatGPT OAuth',
@@ -59,9 +104,6 @@ const launchSkippedForTempHome = result.launch?.requested === false
 const launchSkippedForEnvHome = envHomeResult.launch?.requested === false
     && envHomeResult.launch?.method === 'skipped'
     && envHomeResult.warnings.includes('launch_skipped_non_user_home');
-// Temp-path guard: a temp-rooted install must never request a launch, even if
-// some caller forgets SKS_SKIP_SKS_MENUBAR_LAUNCH. Both fixtures live under
-// os.tmpdir(), so both results must carry the temp-install skip warning.
 const launchSkippedForTempInstall = result.launch?.requested === false
     && result.warnings.includes('launch_skipped_temp_install')
     && envHomeResult.launch?.requested === false
@@ -71,18 +113,30 @@ const preferredPositionSkippedForTempInstall = !result.actions.includes('seeded
 const ok = process.platform === 'darwin'
     ? result.ok === true
         && result.status === 'installed_launch_skipped'
+        && secondResult.ok === true
         && envHomeResult.ok === true
         && envHomeResult.status === 'installed_launch_skipped'
         && executableExists
         && launchAgentExists
         && actionScriptExists
         && hasExpectedItems
-        && hasVisibleLabelSource
+        && hasVisibleStatusSource
+        && hasBackgroundReadonlyActions
+        && hasTerminalFailureAlert
+        && hasTerminalExit
         && hasAutosaveNameSource
         && hasExplicitVisibleSource
-        && hasTerminalCommandInterpolation
         && hasNoUnconditionalKeepAlive
+        && hasNoLaunchAgentSecrets
         && hasInteractiveProcessType
+        && hasPackagePlistVersion
+        && hasActionFallbacks
+        && hasEntryWarning
+        && hasBuildStamp
+        && isIdempotent
+        && hasCommandRegistry
+        && noLaunchctlSecretSetenv
+        && hasLaunchctlUnsetenv
         && launchSkippedForTempHome
         && launchSkippedForEnvHome
         && launchSkippedForTempInstall
@@ -94,18 +148,30 @@ const report = {
     temp,
     env_home_temp: envHomeTemp,
     result,
+    second_result: secondResult,
     env_home_result: envHomeResult,
     executable_exists: executableExists,
     launch_agent_exists: launchAgentExists,
     action_script_exists: actionScriptExists,
+    build_stamp_exists: buildStampExists,
     generated_source_path: generatedSourcePath,
-    terminal_command_line: terminalCommandLine,
-    has_visible_label_source: hasVisibleLabelSource,
+    has_visible_status_source: hasVisibleStatusSource,
+    has_background_readonly_actions: hasBackgroundReadonlyActions,
+    has_terminal_failure_alert: hasTerminalFailureAlert,
+    has_terminal_exit: hasTerminalExit,
     has_autosave_name_source: hasAutosaveNameSource,
     has_explicit_visible_source: hasExplicitVisibleSource,
-    has_terminal_command_interpolation: hasTerminalCommandInterpolation,
     has_no_unconditional_keepalive: hasNoUnconditionalKeepAlive,
+    has_no_launch_agent_secrets: hasNoLaunchAgentSecrets,
     has_interactive_process_type: hasInteractiveProcessType,
+    has_package_plist_version: hasPackagePlistVersion,
+    has_action_fallbacks: hasActionFallbacks,
+    has_entry_warning: hasEntryWarning,
+    has_build_stamp: hasBuildStamp,
+    is_idempotent: isIdempotent,
+    has_command_registry: hasCommandRegistry,
+    no_launchctl_secret_setenv: noLaunchctlSecretSetenv,
+    has_launchctl_unsetenv: hasLaunchctlUnsetenv,
     launch_skipped_for_temp_home: launchSkippedForTempHome,
     launch_skipped_for_env_home: launchSkippedForEnvHome,
     launch_skipped_for_temp_install: launchSkippedForTempInstall,

package/dist/scripts/sks-uninstall-regression-check.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { assertGate, emitGate, makeTempRoot, writeText } from './sks-3-1-8-check-lib.js';
+import { uninstallCommand } from '../core/commands/uninstall-command.js';
+const home = await makeTempRoot('sks-uninstall-home-');
+const project = await makeTempRoot('sks-uninstall-project-');
+process.env.SKS_UNINSTALL_SKIP_TMP_SWEEP = '1';
+await writeText(path.join(home, '.agents', 'skills', 'answer', 'SKILL.md'), '---\nname: answer\ndescription: SKS fixture\n---\n\nSKS managed official fixture.\n');
+await writeText(path.join(home, '.agents', 'skills', 'user-global', 'SKILL.md'), '---\nname: user-global\ndescription: User global\n---\n\nUser global skill.\n');
+await writeText(path.join(home, '.codex', 'agents', 'lazycodex-executor.toml'), 'name = "lazycodex-executor"\n');
+await writeText(path.join(home, '.codex', 'hooks.json'), JSON.stringify({
+    UserPromptSubmit: [{ hooks: [{ type: 'command', command: 'sks hook user-prompt-submit' }] }],
+    Stop: [{ hooks: [{ type: 'command', command: 'custom-stop' }] }]
+}, null, 2));
+await writeText(path.join(home, '.codex', 'config.toml'), [
+    'default_profile = "sks-fast-high"',
+    'service_tier = "fast"',
+    '[profiles.sks-fast-high]',
+    'model = "gpt-5.5"',
+    '[user.fast_mode]',
+    'enabled = true',
+    '[mcp_servers.user]',
+    'url = "https://example.test"'
+].join('\n'));
+await writeText(path.join(home, '.sneakoscope', 'state.json'), '{}\n');
+await writeText(path.join(project, '.agents', 'skills', 'answer', 'SKILL.md'), '---\nname: answer\ndescription: SKS legacy fixture\n---\n\nDollar-command route generated by SKS.\n');
+await writeText(path.join(project, '.agents', 'skills', 'forge-one', 'SKILL.md'), '---\nname: forge-one\ndescription: Forge\n---\n\n<!-- BEGIN SKS FORGE SKILL project=x generator=sks@test created=now -->\n');
+await writeText(path.join(project, '.agents', 'skills', 'user-one', 'SKILL.md'), '---\nname: user-one\ndescription: User\n---\n\nUser content.\n');
+const dry = await uninstallCommand(['--dry-run', '--json', '--home', home]);
+assertGate(dry.dry_run === true, 'dry-run must not mutate', dry);
+assertGate(dry.inventory.some((item) => item.id === 'global-skills' && item.exists === true), 'inventory must include global skills', dry);
+const originalCwd = process.cwd();
+process.chdir(project);
+const applied = await uninstallCommand(['--yes', '--home', home, '--purge-projects', '--keep-data']);
+process.chdir(originalCwd);
+assertGate(applied.ok === true, 'uninstall apply must pass', applied);
+assertGate(!(await exists(path.join(home, '.agents', 'skills', 'answer'))), 'global SKS official skill must be removed');
+assertGate(await exists(path.join(home, '.agents', 'skills', 'user-global', 'SKILL.md')), 'global user-authored skill must be preserved');
+assertGate(await exists(path.join(home, '.sneakoscope')), '--keep-data must preserve ~/.sneakoscope');
+const hooks = JSON.parse(await fs.readFile(path.join(home, '.codex', 'hooks.json'), 'utf8'));
+assertGate(JSON.stringify(hooks).includes('custom-stop') && !JSON.stringify(hooks).includes('sks hook'), 'hooks-json must strip SKS entries and preserve user hooks', hooks);
+const cfg = await fs.readFile(path.join(home, '.codex', 'config.toml'), 'utf8');
+assertGate(cfg.includes('[mcp_servers.user]') && !cfg.includes('sks-fast-high') && !cfg.includes('[user.fast_mode]'), 'config strip must preserve user table and remove SKS-owned fast profile', cfg);
+assertGate(!(await exists(path.join(project, '.agents', 'skills', 'answer'))), 'project official residue must be removed');
+assertGate(await exists(path.join(project, '.agents', 'skills', 'forge-one', 'SKILL.md')), 'forge skill must be preserved');
+assertGate(await exists(path.join(project, '.agents', 'skills', 'user-one', 'SKILL.md')), 'user skill must be preserved');
+const second = await uninstallCommand(['--yes', '--home', home, '--keep-config', '--keep-data']);
+assertGate(second.ok === true, 'uninstall must be idempotent', second);
+emitGate('sks:uninstall-regression', { removed_steps: applied.removed.length, inventory: dry.inventory.length });
+async function exists(file) {
+    return fs.stat(file).then(() => true, () => false);
+}
+//# sourceMappingURL=sks-uninstall-regression-check.js.map

package/dist/scripts/uninstall-inventory-check.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import './sks-uninstall-regression-check.js';
+//# sourceMappingURL=uninstall-inventory-check.js.map

package/dist/scripts/ux-review-real-loop-fixture-check.js

@@ -1,24 +1,29 @@
 #!/usr/bin/env node
 // @ts-nocheck
 import assert from 'node:assert/strict';
+import fs from 'node:fs';
+import os from 'node:os';
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
-const root = process.cwd();
-const result = spawnSync(process.execPath, [path.join(root, 'dist/bin/sks.js'), 'image-ux-review', 'fixture', '--mock', '--json'], {
+const repoRoot = process.cwd();
+const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-ux-review-real-loop-fixture-'));
+const result = spawnSync(process.execPath, [path.join(repoRoot, 'dist/bin/sks.js'), 'image-ux-review', 'fixture', '--mock', '--json'], {
     cwd: root,
     encoding: 'utf8',
-    env: { ...process.env, SKS_SKIP_NPM_FRESHNESS_CHECK: '1', CI: 'true' },
+    env: { ...process.env, SKS_SKIP_NPM_FRESHNESS_CHECK: '1', SKS_UPDATE_MIGRATION_GATE_DISABLED: '1', CI: 'true' },
     timeout: Number(process.env.SKS_UX_REVIEW_REAL_LOOP_FIXTURE_TIMEOUT_MS || 180_000)
 });
-assert.equal(result.status, 0, JSON.stringify({
+assert.ok([0, 1].includes(result.status), JSON.stringify({
     stderr: result.stderr,
     stdout: result.stdout,
     signal: result.signal,
     error: result.error?.message || null
 }, null, 2));
 const json = JSON.parse(result.stdout);
+assert.equal(json.ok, false);
 assert.equal(json.artifacts.gate.mock_fixture_cannot_claim_real, true);
 assert.equal(json.artifacts.generated_review_ledger.real_generated_count, 0);
 assert.equal(json.artifacts.generated_review_ledger.generated_count, 1);
+assert.equal(json.proof.status, 'mock_only');
 console.log(JSON.stringify({ schema: 'sks.ux-review-real-loop-fixture.v1', ok: true, mission_id: json.mission_id }, null, 2));
 //# sourceMappingURL=ux-review-real-loop-fixture-check.js.map

package/dist/scripts/ux-review-run-wires-imagegen-check.js

@@ -3,7 +3,11 @@
 import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
 requireContains('ux-review:run-wires-imagegen', 'src/core/commands/image-ux-review-command.ts', [
     'const shouldGenerateCallouts = flag(args, \'--generate-callouts\') || flag(args, \'--fix\')',
+    'requireCodexImagegen',
     'generateGptImage2CalloutReview',
+    'evidence_class',
+    'output_sha256',
+    'imagegen_response_non_codex_api_fallback_not_full_evidence',
     'extractRealCallouts',
     'buildImageUxCalloutExtractionReport'
 ]);

package/dist/scripts/zellij-layout-valid-check.js

@@ -11,15 +11,21 @@ if (!freshness.ok)
 const layoutMod = await import(pathToFileURL(path.join(root, 'dist', 'core', 'zellij', 'zellij-layout-builder.js')).href);
 const capabilityMod = await import(pathToFileURL(path.join(root, 'dist', 'core', 'zellij', 'zellij-capability.js')).href);
 const commandMod = await import(pathToFileURL(path.join(root, 'dist', 'core', 'zellij', 'zellij-command.js')).href);
-const built = layoutMod.buildZellijLayoutKdl({ missionId: 'M-layout-check', ledgerRoot: path.join(root, '.sneakoscope', 'tmp', 'layout-check'), cwd: root, kind: 'agent', slotCount: 2 });
+process.env.SKS_ZELLIJ_VIEWPORTS = '4';
+const built = layoutMod.buildZellijLayoutKdl({ missionId: 'M-layout-check', ledgerRoot: path.join(root, '.sneakoscope', 'tmp', 'layout-check'), cwd: root, kind: 'mad', slotCount: 2, codexArgs: ['--profile', 'sks-mad-high', '-c', 'service_tier=fast'] });
 const staticValidation = layoutMod.validateZellijLayoutKdl(built.layout_kdl);
-const spawnOnDemandOk = built.initial_worker_panes === 0
+const viewportLayoutOk = built.initial_worker_panes === 0
+    && built.viewport_count === 4
+    && built.ui_architecture === 'monitor_plus_viewports'
     && built.lane_runtime_policies.length === 0
     && built.layout_kdl.includes('pane name="orchestrator"')
+    && built.layout_kdl.includes('pane size="35%" name="sks-monitor"')
     && !built.layout_kdl.includes('zellij-lane')
-    && !(built.layout_kdl.match(/pane name="slot-/g) || []).length
+    && !built.layout_kdl.includes('zellij-slot-pane')
+    && (built.layout_kdl.match(/pane name="sks-viewport-/g) || []).length === 4
     && built.lane_dispatch_policy?.mode === 'jsonl_nonblocking'
-    && built.lane_dispatch_policy?.fifo_policy === 'disabled_to_avoid_writer_blocking';
+    && built.lane_dispatch_policy?.fifo_policy === 'disabled_to_avoid_writer_blocking'
+    && built.lane_dispatch_policy?.pane_transport === 'monitor_plus_viewports';
 const narutoFanoutLayout = layoutMod.buildZellijLayoutKdl({
     missionId: 'M-layout-naruto-fanout',
     ledgerRoot: path.join(root, '.sneakoscope', 'tmp', 'layout-naruto-fanout'),
@@ -27,7 +33,7 @@ const narutoFanoutLayout = layoutMod.buildZellijLayoutKdl({
     kind: 'naruto',
     slotCount: 24
 });
-const narutoFanoutPaneCount = (narutoFanoutLayout.layout_kdl.match(/pane name="slot-/g) || []).length;
+const narutoFanoutPaneCount = (narutoFanoutLayout.layout_kdl.match(/pane name="sks-viewport-/g) || []).length;
 const kindsValidated = ['mad', 'agent', 'team', 'naruto'].map((kind) => {
     const b = layoutMod.buildZellijLayoutKdl({
         missionId: `M-layout-${kind}`,
@@ -38,8 +44,9 @@ const kindsValidated = ['mad', 'agent', 'team', 'naruto'].map((kind) => {
         codexArgs: kind === 'mad' ? ['--profile', 'sks-mad-high', '-c', 'service_tier=fast'] : []
     });
     const hasCodexPane = kind !== 'mad' || (b.main_pane_kind === 'codex_interactive' && /exec\s+'?codex'?/.test(b.layout_kdl) && b.layout_kdl.includes('sks-mad-high') && b.layout_kdl.includes('--no-alt-screen'));
-    const noLanePane = !b.layout_kdl.includes('zellij-lane') && !(b.layout_kdl.match(/pane name="slot-/g) || []).length;
-    return { kind, ok: layoutMod.validateZellijLayoutKdl(b.layout_kdl).ok && hasCodexPane && noLanePane && b.initial_worker_panes === 0, main_pane_kind: b.main_pane_kind, has_codex_pane: hasCodexPane, no_lane_pane: noLanePane };
+    const viewportPaneCount = (b.layout_kdl.match(/pane name="sks-viewport-/g) || []).length;
+    const noLanePane = !b.layout_kdl.includes('zellij-lane');
+    return { kind, ok: layoutMod.validateZellijLayoutKdl(b.layout_kdl).ok && hasCodexPane && noLanePane && viewportPaneCount === 4 && b.initial_worker_panes === 0 && b.viewport_count === 4, main_pane_kind: b.main_pane_kind, has_codex_pane: hasCodexPane, no_lane_pane: noLanePane, viewport_pane_count: viewportPaneCount };
 });
 const allKindsOk = kindsValidated.every((k) => k.ok);
 const invalidValidation = layoutMod.validateZellijLayoutKdl('layout { pane command="zellij-lane" {');
@@ -63,10 +70,10 @@ if (realRun) {
     realRun.ok = realRun.create_background.ok === true;
 }
 const ok = staticValidation.ok
-    && spawnOnDemandOk
+    && viewportLayoutOk
     && allKindsOk
     && layoutMod.validateZellijLayoutKdl(narutoFanoutLayout.layout_kdl).ok
-    && narutoFanoutPaneCount === 0
+    && narutoFanoutPaneCount === 4
     && invalidValidation.ok === false
     && capability.ok
     && (requireReal ? realRun?.ok === true : true);
@@ -74,9 +81,9 @@ emit({
     schema: 'sks.zellij-layout-valid-check.v1',
     ok,
     layout: { ...built, layout_kdl: undefined, layout_path: layoutPath },
-    spawn_on_demand_ok: spawnOnDemandOk,
+    viewport_layout_ok: viewportLayoutOk,
     kinds_validated: kindsValidated,
-    naruto_fanout_layout: { slot_count: narutoFanoutLayout.slot_count, pane_count: narutoFanoutPaneCount, initial_worker_panes: narutoFanoutLayout.initial_worker_panes },
+    naruto_fanout_layout: { viewport_count: narutoFanoutLayout.viewport_count, pane_count: narutoFanoutPaneCount, initial_worker_panes: narutoFanoutLayout.initial_worker_panes },
     static_validation: staticValidation,
     invalid_fixture: invalidValidation,
     capability,

package/dist/scripts/zellij-right-column-geometry-proof.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 // @ts-nocheck
-import os from 'node:os';
 import path from 'node:path';
 import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
-import { writeTextAtomic } from '../core/fsx.js';
+import { tmpdir, writeTextAtomic } from '../core/fsx.js';
 import { checkZellijCapability } from '../core/zellij/zellij-capability.js';
 import { runZellij } from '../core/zellij/zellij-command.js';
 const requireReal = process.argv.includes('--require-real') || process.env.SKS_REQUIRE_ZELLIJ === '1';
@@ -153,8 +152,7 @@ function buildRealGeometryLayout(cwd) {
     ].join('\n');
 }
 async function fsTempDir() {
-    const fs = await import('node:fs/promises');
-    return fs.mkdtemp(path.join(os.tmpdir(), 'sks-zellij-geometry-'));
+    return tmpdir('sks-zellij-geometry-');
 }
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));

package/dist/scripts/zellij-slot-pane-renderer-check.js

@@ -131,21 +131,21 @@ const command = renderer.buildZellijSlotPaneCommand({
 const report = {
     schema: 'sks.zellij-slot-pane-renderer-check.v1',
     line_count: lines.length,
-    max_compact_lines: 17,
-    contains_slot: /LIVE SLOT slot-003/.test(text) && /slot: slot-003 \/ gen-2/.test(text),
+    max_compact_lines: 14,
+    contains_slot: /┌─ slot-003/.test(text) && /slot-003/.test(text),
     contains_status: /coding/.test(text),
-    contains_runtime: /runtime: fast on/.test(text) && /model: gpt-5\.5/.test(text) && /provider: codex-lb/.test(text),
-    contains_files: /src\/core\/foo\.ts/.test(text) && /src\/core\/bar\.ts/.test(text),
-    contains_live_event: /event: running:/.test(text),
-    artifact_hydrates_runtime: /runtime: fast on/.test(hydrated) && /model: gpt-5\.5/.test(hydrated) && /reasoning: medium/.test(hydrated) && /auth: codex_lb_key/.test(hydrated),
-    artifact_hydrates_live_event: /tool apply_patch/.test(hydrated) && /renderer stdout tail/.test(hydrated),
+    contains_runtime: /gpt-5\.5·fast/.test(text),
+    contains_files: /src\/core\/foo\.ts/.test(text),
+    contains_live_event: /renderer updated live pane output/.test(text),
+    artifact_hydrates_runtime: /gpt-5\.5·fast/.test(hydrated),
+    artifact_hydrates_live_event: /renderer stdout tail/.test(hydrated),
     artifact_hydrates_planned_file: /zellij-slot-pane-renderer\.ts/.test(hydrated),
-    mission_stale_hydrates_artifact_fallback: /telemetry stale; worker may still be running/.test(missionHydrated) && (/renderer stdout tail/.test(missionHydrated) || /tool apply_patch/.test(missionHydrated)),
+    mission_live_telemetry_wins: /mission telemetry stale fixture/.test(missionHydrated) && /renderer stdout tail/.test(missionHydrated),
     command_uses_slot_pane: command.includes('zellij-slot-pane') && command.includes('--watch'),
     snapshot: text,
     hydrated_snapshot: hydrated,
     mission_hydrated_snapshot: missionHydrated
 };
-assertGate(lines.length <= 17 && report.contains_slot && report.contains_status && report.contains_runtime && report.contains_files && report.contains_live_event && report.artifact_hydrates_runtime && report.artifact_hydrates_live_event && report.artifact_hydrates_planned_file && report.mission_stale_hydrates_artifact_fallback && report.command_uses_slot_pane, 'compact slot pane renderer must render one live work pane per slot', report);
+assertGate(lines.length <= 14 && report.contains_slot && report.contains_status && report.contains_runtime && report.contains_files && report.contains_live_event && report.artifact_hydrates_runtime && report.artifact_hydrates_live_event && report.artifact_hydrates_planned_file && report.mission_live_telemetry_wins && report.command_uses_slot_pane, 'compact slot pane renderer must render one live work pane per slot', report);
 emitGate('zellij:compact-slot-renderer', report);
 //# sourceMappingURL=zellij-slot-pane-renderer-check.js.map

package/dist/scripts/zellij-slot-pane-stale-detection-check.js

@@ -56,19 +56,18 @@ snapshot.updated_at = new Date(Date.now() - 3500).toISOString();
 await fs.writeFile(file, `${JSON.stringify(snapshot)}\n`, 'utf8');
 const freshStatus = await renderZellijSlotPaneStatusFromArtifacts({ artifactDir, artifactRoot: root, missionId, slotId: 'slot-001', generationIndex: 1 });
 assertGate(freshStatus.telemetry_stale === false, 'slot pane status JSON must treat 3.5s-old telemetry as fresh under new 15s threshold', freshStatus);
-// Between 15s and 60s the pane shows the numeric "telemetry stale Ns" warning row.
+// Between 15s and 60s the status JSON marks staleness; the pane keeps showing live telemetry
+// merged with fresh artifact/log detail instead of replacing it with stale-only prose.
 snapshot.updated_at = new Date(Date.now() - 16000).toISOString();
 await fs.writeFile(file, `${JSON.stringify(snapshot)}\n`, 'utf8');
 const staleText = await renderZellijSlotPaneFromArtifacts({ artifactDir, artifactRoot: root, missionId, slotId: 'slot-001', generationIndex: 1 });
 const staleStatus = await renderZellijSlotPaneStatusFromArtifacts({ artifactDir, artifactRoot: root, missionId, slotId: 'slot-001', generationIndex: 1 });
-assertGate(/telemetry stale 1[0-9]\.\d+s/.test(staleText), 'slot pane must show numeric stale telemetry warning above 15s', { staleText, staleStatus });
 assertGate(staleStatus.telemetry_stale === true && staleStatus.telemetry_age_ms >= 15000, 'slot pane status JSON must expose stale telemetry above 15s', staleStatus);
 assertGate(staleText.includes('fresh worker stdout fallback') || staleText.includes('apply_patch'), 'stale slot pane must show fresh artifact/log fallback', { staleText });
-// Past 60s the pane shows the "worker may still be running" blocker line.
+// Past 60s the status JSON remains stale and the watch loop owns zombie closure.
 snapshot.updated_at = new Date(Date.now() - 61000).toISOString();
 await fs.writeFile(file, `${JSON.stringify(snapshot)}\n`, 'utf8');
 const blockedText = await renderZellijSlotPaneFromArtifacts({ artifactDir, artifactRoot: root, missionId, slotId: 'slot-001', generationIndex: 1 });
-assertGate(blockedText.includes('telemetry stale; worker may still be running'), 'slot pane must show >60s stale blocker line', { blockedText });
 assertGate(blockedText.includes('fresh worker stdout fallback') || blockedText.includes('apply_patch'), 'blocked stale slot pane must keep artifact/log fallback', { blockedText });
 emitGate('zellij:slot-pane-stale-detection', { stale_age_ms: staleStatus.telemetry_age_ms, artifact_fallback: true });
 //# sourceMappingURL=zellij-slot-pane-stale-detection-check.js.map

package/dist/scripts/zellij-slot-pane-telemetry-renderer-check.js

@@ -3,9 +3,10 @@ import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
 const pane = readText('src/core/zellij/zellij-slot-pane-renderer.ts');
 const command = readText('src/commands/zellij-slot-pane.ts');
 assertGate(pane.includes('readZellijSlotTelemetrySnapshot'), 'slot pane renderer must read telemetry snapshots');
-assertGate(pane.includes('waiting for telemetry'), 'slot pane renderer must show waiting fallback before telemetry arrives');
-assertGate(pane.includes('artifactFallbackRows') && pane.includes('renderZellijSlotPaneFromArtifactDir'), 'slot pane renderer must preserve artifact/log fallback when telemetry is stale');
+assertGate(pane.includes('mergeRenderInputWithLiveTelemetry'), 'slot pane renderer must prefer live telemetry over artifact detail');
+assertGate(pane.includes('renderInputFromArtifactDir') && pane.includes('stdoutTail'), 'slot pane renderer must preserve artifact/log fallback details');
 assertGate(pane.includes('latest_heartbeat') || pane.includes('heartbeat'), 'slot pane renderer must surface heartbeat/progress state');
 assertGate(command.includes('artifactRoot') && command.includes('--artifact-root'), 'slot pane command must pass artifact root for telemetry lookup');
+assertGate(command.includes('staleTicks') && command.includes('worker heartbeat lost >5m'), 'slot pane command must close zombie panes instead of freezing');
 emitGate('zellij:slot-pane-telemetry-renderer', { telemetry_with_artifact_fallback: true });
 //# sourceMappingURL=zellij-slot-pane-telemetry-renderer-check.js.map

package/dist/scripts/zellij-slot-telemetry-renderer-check.js

@@ -1,9 +1,11 @@
 #!/usr/bin/env node
 import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
 const pane = readText('src/core/zellij/zellij-slot-pane-renderer.ts');
+const command = readText('src/commands/zellij-slot-pane.ts');
 const anchor = readText('src/core/zellij/zellij-slot-column-anchor.ts');
-assertGate(pane.includes('readZellijSlotTelemetrySnapshot') && pane.includes('waiting for telemetry'), 'slot pane must render from telemetry snapshot with waiting fallback');
-assertGate(pane.includes('artifactFallbackRows') && pane.includes('renderZellijSlotPaneFromArtifactDir'), 'slot pane must merge telemetry with artifact/log fallback instead of stale-only output');
+assertGate(pane.includes('readZellijSlotTelemetrySnapshot') && pane.includes('mergeRenderInputWithLiveTelemetry'), 'slot pane must read telemetry first and merge it with artifact detail');
+assertGate(pane.includes('renderInputFromArtifactDir') && pane.includes('stdoutTail'), 'slot pane must preserve artifact/log fallback while live telemetry wins');
+assertGate(command.includes('staleTicks') && command.includes('worker heartbeat lost >5m'), 'slot pane watch loop must close frozen heartbeat panes');
 assertGate(anchor.includes('readZellijSlotTelemetrySnapshot') && anchor.includes('SLOTS telemetry stale'), 'slot anchor must render telemetry snapshot and stale state');
 assertGate(anchor.includes('update-notice.json') && anchor.includes('MAD-DB ACTIVE'), 'anchor must surface update notice and Mad-DB state');
 emitGate('zellij:slot-telemetry-renderer', { telemetry_with_artifact_fallback: true });

package/dist/scripts/zellij-spawn-on-demand-layout-check.js

@@ -5,16 +5,21 @@ import { packageRoot } from '../core/fsx.js';
 import { buildZellijLayoutKdl, validateZellijLayoutKdl, writeZellijLayout } from '../core/zellij/zellij-layout-builder.js';
 const root = packageRoot();
 const tmpRoot = path.join(root, '.sneakoscope', 'tmp', 'spawn-on-demand-layout-check');
+process.env.SKS_ZELLIJ_VIEWPORTS = '4';
 const built = buildZellijLayoutKdl({ missionId: 'M-spawn-on-demand-layout', ledgerRoot: tmpRoot, cwd: root, kind: 'naruto', slotCount: 24 });
 const validation = validateZellijLayoutKdl(built.layout_kdl);
 const writeBuilt = await writeZellijLayout(root, { missionId: 'M-spawn-on-demand-layout-write', ledgerRoot: tmpRoot, cwd: root, kind: 'agent', slotCount: 5 });
 const manifest = JSON.parse(await fs.readFile(path.join(tmpRoot, 'zellij-lane-runtime.json'), 'utf8'));
 const workerPaneMatches = built.layout_kdl.match(/pane name="slot-/g) || [];
+const viewportPaneMatches = built.layout_kdl.match(/pane name="sks-viewport-/g) || [];
 const laneCommandMatches = built.layout_kdl.match(/\bzellij-lane\b/g) || [];
 const ok = validation.ok
     && built.initial_worker_panes === 0
+    && built.viewport_count === 4
+    && built.ui_architecture === 'monitor_plus_viewports'
     && built.lane_runtime_policies.length === 0
     && workerPaneMatches.length === 0
+    && viewportPaneMatches.length === 4
     && laneCommandMatches.length === 0
     && manifest.lanes.length === 0
     && writeBuilt.initial_worker_panes === 0;
@@ -22,15 +27,16 @@ emit({
     schema: 'sks.zellij-spawn-on-demand-layout-check.v1',
     ok,
     initial_worker_panes: built.initial_worker_panes,
-    slot_count_request: built.slot_count,
+    viewport_count: built.viewport_count,
     lane_runtime_policy_count: built.lane_runtime_policies.length,
     worker_pane_matches: workerPaneMatches.length,
+    viewport_pane_matches: viewportPaneMatches.length,
     lane_command_matches: laneCommandMatches.length,
     monitor_pane_enabled: built.monitor_pane_enabled,
     validation,
     manifest_lane_count: manifest.lanes.length,
     layout_path: writeBuilt.layout_path,
-    blockers: ok ? [] : ['zellij_spawn_on_demand_layout_contract_failed']
+    blockers: ok ? [] : ['zellij_dynamic_viewport_layout_contract_failed']
 });
 function emit(report) {
     console.log(JSON.stringify(report, null, 2));

package/dist/scripts/zellij-viewport-binder-check.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import '../core/zellij/__tests__/zellij-viewport-binder.test.js';
+console.log(JSON.stringify({
+    schema: 'sks.zellij-viewport-binder-check.v1',
+    ok: true,
+    cases: ['pins', 'hysteresis', 'rebinding', 'idle', 'recent_failed_priority'],
+    blockers: []
+}, null, 2));
+//# sourceMappingURL=zellij-viewport-binder-check.js.map

package/docs/demo.tape

@@ -0,0 +1,28 @@
+Output docs/assets/sks-v5-demo.gif
+Set Shell "zsh"
+Set FontSize 16
+Set Width 1280
+Set Height 720
+Set TypingSpeed 20ms
+
+Type "npx sneakoscope install --yes"
+Sleep 500ms
+Enter
+Sleep 1s
+Ctrl+C
+
+Type "sks plan \"ship a proof-first review flow\""
+Enter
+Sleep 1s
+
+Type "sks review --staged"
+Enter
+Sleep 1s
+
+Type "sks ui --once"
+Enter
+Sleep 1s
+
+Type "sks naruto run \"demo no-op swarm\" --backend fake --clones 4 --work-items 4 --no-open-zellij --json"
+Enter
+Sleep 2s