sneakoscope 4.8.6 → 5.1.2

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "4.8.6",
+  "version": "5.1.2",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -14,7 +14,8 @@
   },
   "bin": {
     "sks": "dist/bin/sks.js",
-    "sneakoscope": "dist/bin/sks.js"
+    "sneakoscope": "dist/bin/sks.js",
+    "sneakoscope-install": "dist/bin/install.js"
   },
   "publishConfig": {
     "access": "public",
@@ -32,8 +33,11 @@
     "!dist/**/*.tsbuildinfo",
     "!dist/**/__tests__",
     "!dist/**/*.test.js",
+    "!dist/scripts/*blackbox*.js",
     "!dist/vendor/openai-codex/rust-v0.131.0",
     "config/codex-releases/rust-v0.142.0.json",
+    "config/bench-baseline.json",
+    "bench/tasks",
     "schemas",
     "!schemas/codex/app-server-0.142/**",
     "schemas/codex/app-server-0.142/codex_app_server_protocol.v2.schemas.json",
@@ -41,6 +45,8 @@
     "crates/sks-core/Cargo.lock",
     "crates/sks-core/Cargo.toml",
     "crates/sks-core/src",
+    "docs/demo.tape",
+    "docs/assets/sneakoscope-architecture-pipeline.jpg",
     "README.md",
     "LICENSE"
   ],
@@ -60,15 +66,31 @@
     "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",
     "release:check": "npm run release:check:affected --silent",
     "release:metadata": "node ./dist/scripts/release-metadata-check.js",
+    "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",
     "release:check:parallel": "npm run build --silent && node ./dist/scripts/release-parallel-check.js && node ./dist/scripts/release-check-stamp.js write",
+    "release:check:legacy": "npm run release:check:parallel --silent",
+    "release:dag-full-coverage": "node ./dist/scripts/release-dag-full-coverage-check.js",
+    "core-skill:route-runtime-integration": "node ./dist/scripts/core-skill-route-runtime-integration-check.js",
+    "core-skill:no-drift": "node ./dist/scripts/core-skill-no-drift-check.js",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "schema:check": "node ./dist/scripts/check-runtime-schemas.js",
     "repo-audit": "node ./dist/scripts/repo-audit.js",
+    "native-capability:postcheck": "node ./dist/scripts/native-capability-postcheck-check.js",
+    "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",
+    "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",
+    "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",
+    "skill:dedupe-blackbox": "node ./dist/scripts/project-skill-dedupe-blackbox.js",
     "postinstall": "node ./dist/bin/sks.js postinstall",
     "selftest": "node ./dist/bin/sks.js selftest --mock",
     "doctor": "node ./dist/bin/sks.js doctor",
+    "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",
+    "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",
+    "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",
+    "doctor:supabase-mcp-repair-blackbox": "node ./dist/scripts/doctor-supabase-mcp-repair-blackbox.js",
     "codex:config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --json",
     "codex:actual-config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --actual-codex --json",
+    "codex:0140-capability": "node ./dist/scripts/codex-0140-capability-check.js",
+    "codex:0140-feature-probes": "node ./dist/scripts/codex-0140-feature-probes-check.js",
     "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",
     "release:check:dynamic": "node ./dist/scripts/release-check-dynamic.js",
     "release:check:dynamic:execute": "node ./dist/scripts/release-check-dynamic-execute.js",
@@ -94,6 +116,48 @@
     "feature:check": "node ./dist/bin/sks.js features check --json",
     "feature-quality:check": "node ./dist/scripts/check-feature-quality.js --release",
     "all-features:selftest": "node ./dist/bin/sks.js all-features selftest --mock --json",
+    "doctor:imagegen-repair": "node ./dist/scripts/doctor-imagegen-repair-check.js",
+    "image-fidelity:check": "node ./dist/scripts/image-fidelity-fixture-check.js",
+    "imagegen:capability": "node ./dist/scripts/imagegen-capability-check.js",
+    "imagegen:gpt-image-2-request-validator": "node ./dist/scripts/gpt-image-2-request-validator-check.js",
+    "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",
+    "ux-review:extract-wires-real-extractor": "node ./dist/scripts/ux-review-extract-wires-real-extractor-check.js",
+    "ux-review:patch-diff-recheck": "node ./dist/scripts/ux-review-patch-diff-recheck-check.js",
+    "ux-review:imagegen-blackbox": "node ./dist/scripts/ux-review-imagegen-blackbox-check.js",
+    "ux-review:real-loop-fixture": "node ./dist/scripts/ux-review-real-loop-fixture-check.js",
+    "ppt:real-export-adapter": "node ./dist/scripts/ppt-real-export-adapter-check.js",
+    "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",
+    "ppt:reexport-rereview": "node ./dist/scripts/ppt-reexport-rereview-check.js",
+    "ppt:full-e2e-blackbox": "node ./dist/scripts/ppt-full-e2e-blackbox-check.js",
+    "ppt:full-e2e-artifact-graph": "node ./dist/scripts/ppt-full-e2e-artifact-graph-check.js",
+    "ppt:imagegen-blackbox": "node ./dist/scripts/ppt-imagegen-blackbox-check.js",
+    "ux-ppt:structured-extraction": "node ./dist/scripts/ux-ppt-structured-extraction-check.js",
+    "dfix:patch-handoff": "node ./dist/scripts/dfix-patch-handoff-check.js",
+    "dfix:verification-recommendation": "node ./dist/scripts/dfix-verification-recommendation-check.js",
+    "dfix:fast-kernel": "node ./dist/scripts/dfix-fast-kernel-check.js",
+    "dfix:blackbox-fast": "node ./dist/scripts/dfix-fast-blackbox-check.js",
+    "dfix:performance": "node ./dist/scripts/dfix-performance-check.js",
+    "dfix:parallel-write-blackbox": "node ./dist/scripts/dfix-parallel-write-blackbox.js",
+    "all-features:deep-completion": "node ./dist/scripts/all-feature-deep-completion-check.js",
+    "evidence:flagship-coverage": "node ./dist/scripts/evidence-flagship-coverage-check.js",
+    "ux-review:generate-callouts-fixture": "node ./dist/scripts/ux-review-generate-callouts-fixture-check.js",
+    "ux-review:extract-real-callouts-fixture": "node ./dist/scripts/ux-review-extract-real-callouts-fixture-check.js",
+    "ux-review:patch-handoff-fixture": "node ./dist/scripts/ux-review-patch-handoff-fixture-check.js",
+    "ux-review:recapture-recheck-fixture": "node ./dist/scripts/ux-review-recapture-recheck-fixture-check.js",
+    "ux-review:no-text-fallback": "node ./dist/scripts/ux-review-no-text-fallback-check.js",
+    "ux-review:no-fake-callouts": "node ./dist/scripts/ux-review-no-fake-callouts-check.js",
+    "ux-review:image-voxel-relations": "node ./dist/scripts/ux-review-image-voxel-relations-check.js",
+    "ppt:imagegen-review-fixture": "node ./dist/scripts/ppt-imagegen-review-fixture-check.js",
+    "ppt:slide-export-fixture": "node ./dist/scripts/ppt-slide-export-fixture-check.js",
+    "ppt:no-text-fallback": "node ./dist/scripts/ppt-no-text-fallback-check.js",
+    "ppt:no-mock-as-real": "node ./dist/scripts/ppt-no-mock-as-real-check.js",
+    "ppt:issue-extraction-fixture": "node ./dist/scripts/ppt-issue-extraction-fixture-check.js",
+    "ppt:image-voxel-relations": "node ./dist/scripts/ppt-image-voxel-relations-check.js",
+    "ppt:proof-trust-fixture": "node ./dist/scripts/ppt-proof-trust-fixture-check.js",
+    "dfix:fixture": "node ./dist/scripts/dfix-fixture-check.js",
+    "dfix:verification": "node ./dist/scripts/dfix-verification-check.js",
+    "all-features:completion": "node ./dist/bin/sks.js all-features complete --json",
+    "json-schema:recursive-check": "node ./dist/scripts/json-schema-recursive-check.js",
     "trust:check": "node ./dist/bin/sks.js trust validate latest --json || node ./dist/scripts/trust-fixture-check.js",
     "wrongness:check": "node ./dist/bin/sks.js wrongness validate project --json && node ./dist/scripts/wrongness-fixture-check.js",
     "git-hygiene:check": "node ./dist/bin/sks.js git doctor --json",
@@ -107,10 +171,12 @@
     "qa-loop:effort-escalation": "node ./dist/scripts/qa-loop-effort-escalation-check.js",
     "qa-loop:budget-policy": "node ./dist/scripts/qa-loop-budget-policy-check.js",
     "naruto:real-active-pool-runtime": "node ./dist/scripts/naruto-real-active-pool-runtime-check.js",
+    "bench": "node ./dist/scripts/coding-bench-check.js",
+    "release:check:bench": "npm run build:incremental --silent && npm run bench --silent",
     "release:check:affected": "npm run build:incremental --silent && node ./dist/scripts/release-gate-dag-runner.js --preset affected --changed-since auto --sla 5m && node ./dist/scripts/release-check-stamp.js write",
     "release:check:fast": "npm run build:incremental --silent && node ./dist/scripts/release-gate-dag-runner.js --preset fast --changed-since auto --sla 5m && node ./dist/scripts/release-check-stamp.js write",
     "release:check:confidence": "npm run build:incremental --silent && node ./dist/scripts/release-gate-dag-runner.js --preset confidence --changed-since auto --sla 5m && node ./dist/scripts/release-check-stamp.js write",
-    "release:check:full": "npm run build:clean --silent && node ./dist/scripts/release-gate-dag-runner.js --preset release --full && node ./dist/scripts/release-check-stamp.js write",
+    "release:check:full": "npm run build:clean --silent && node ./dist/scripts/release-gate-dag-runner.js --preset release --full && node ./dist/scripts/release-gate-dag-runner.js --preset bench --full && node ./dist/scripts/release-check-stamp.js write",
     "publish:prep-ignore-scripts": "npm run prepublishOnly",
     "publish:ignore-scripts": "npm run publish:prep-ignore-scripts && npm publish --ignore-scripts",
     "naruto:ssot-gate-aliases": "node ./dist/scripts/naruto-ssot-gate-aliases-check.js",
@@ -179,6 +245,7 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "@openai/codex-sdk": "0.142.0",
     "figlet": "^1.11.0",
+    "smol-toml": "^1.7.0",
     "typescript": "^5.9.3"
   },
   "devDependencies": {

package/schemas/codex/completion-proof.schema.json

@@ -3,12 +3,13 @@
   "$id": "https://sneakoscope.local/schemas/codex/completion-proof.schema.json",
   "title": "SKS Completion Proof",
   "type": "object",
-  "required": ["schema", "mission_id", "route", "status", "evidence", "claims", "unverified", "blockers"],
+  "required": ["schema", "execution_class", "mission_id", "route", "status", "evidence", "claims", "unverified", "blockers"],
   "properties": {
     "schema": { "const": "sks.completion-proof.v1" },
+    "execution_class": { "enum": ["real", "mock_fixture"] },
     "mission_id": { "type": ["string", "null"] },
     "route": { "type": ["string", "null"] },
-    "status": { "enum": ["verified", "verified_partial", "blocked", "failed", "not_verified"] },
+    "status": { "enum": ["verified", "verified_partial", "mock_only", "blocked", "failed", "not_verified"] },
     "evidence": { "type": "object" },
     "claims": { "type": "array" },
     "unverified": { "type": "array" },

package/schemas/release/release-gate-node.schema.json

@@ -18,11 +18,12 @@
             "type": "array",
             "minItems": 1,
             "items": {
-              "enum": ["cpu-light", "cpu-heavy", "io-light", "io-heavy", "git", "git-worktree", "zellij-real", "local-llm-real", "remote-model-real", "python", "network", "global-config", "publish", "fs-read"]
+              "enum": ["cpu-light", "cpu-heavy", "io-light", "io-heavy", "git", "git-worktree", "zellij-real", "browser-real", "secret-sensitive", "local-llm-real", "remote-model-real", "python", "network", "global-config", "publish", "fs-read", "fs-write", "timing-sensitive"]
             }
           },
           "side_effect": { "enum": ["hermetic", "real-env"] },
           "timeout_ms": { "type": "integer", "minimum": 1 },
+          "output_contract": { "const": "sks.gate-result.v1" },
           "cache": {
             "type": "object",
             "required": ["enabled", "inputs"],

package/dist/scripts/agent-backfill-route-blackbox.js

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { runRouteBackfillBlackbox } from './agent-route-blackbox-lib.js';
-runRouteBackfillBlackbox('$Agent', 'agent:backfill-route-blackbox');
-//# sourceMappingURL=agent-backfill-route-blackbox.js.map

package/dist/scripts/agent-dynamic-pool-route-blackbox.js

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { runRouteBackfillBlackbox } from './agent-route-blackbox-lib.js';
-runRouteBackfillBlackbox('$Agent', 'agent:dynamic-pool-route-blackbox');
-//# sourceMappingURL=agent-dynamic-pool-route-blackbox.js.map

package/dist/scripts/agent-parallel-write-blackbox.js

@@ -1,56 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
-const schemaMod = await importDist('core/agents/agent-patch-schema.js');
-const applyMod = await importDist('core/agents/agent-patch-apply-worker.js');
-const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-agent-blackbox-'));
-fs.writeFileSync(path.join(tmp, 'fixture.txt'), 'before\n');
-const envelope = schemaMod.normalizeAgentPatchEnvelope({
-    agent_id: 'blackbox-agent',
-    session_id: 'blackbox-session',
-    slot_id: 'blackbox-slot',
-    generation_index: 1,
-    lease_id: 'lease:blackbox-agent:fixture.txt',
-    operations: [{ op: 'replace', path: 'fixture.txt', search: 'before', replace: 'after' }]
-});
-const dry = await applyMod.applyAgentPatchEnvelope(tmp, envelope, { dryRun: true });
-const applied = await applyMod.applyAgentPatchEnvelope(tmp, envelope);
-const agentRun = spawnSync(process.execPath, [
-    'dist/bin/sks.js',
-    'agent',
-    'run',
-    'agent parallel write blackbox route fixture',
-    '--mock',
-    '--write-mode',
-    'parallel',
-    '--apply-patches',
-    '--dry-run-patches',
-    '--max-write-agents',
-    '1',
-    '--json'
-], { cwd: root, encoding: 'utf8', maxBuffer: 2 * 1024 * 1024 });
-const agentJson = parseJson(agentRun.stdout);
-const routePolicy = agentJson?.parallel_write_policy || null;
-const report = { schema: 'sks.agent-parallel-write-blackbox.v1', ok: dry.ok && applied.ok && agentRun.status === 0 && routePolicy?.route_level_flags_wired === true, dry, applied, route_command: { status: agentRun.status, mission_id: agentJson?.mission_id || null, route_policy: routePolicy, stderr_tail: agentRun.stderr.slice(-2000) } };
-const out = path.join(root, '.sneakoscope', 'reports', 'agent-parallel-write-blackbox.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-assertGate(dry.status === 'dry_run', 'agent parallel write blackbox dry-run status mismatch', report);
-assertGate(applied.ok === true, 'agent parallel write blackbox apply failed', report);
-assertGate(fs.readFileSync(path.join(tmp, 'fixture.txt'), 'utf8') === 'after\n', 'agent parallel write blackbox content mismatch', report);
-assertGate(routePolicy?.write_mode === 'parallel', 'Agent route must carry --write-mode parallel into native agent policy', report);
-assertGate(routePolicy?.apply_patches === true, 'Agent route must carry --apply-patches into native agent policy', report);
-emitGate('agent:parallel-write-blackbox', { changed_files: applied.changed_files.length });
-function parseJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=agent-parallel-write-blackbox.js.map

package/dist/scripts/agent-patch-swarm-route-blackbox.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { runPatchSwarmRouteBlackbox } from './agent-patch-swarm-gate-lib.js';
-await runPatchSwarmRouteBlackbox({
-    gate: 'agent:patch-swarm-route-blackbox',
-    route: '$Agent',
-    routeCommand: 'sks agent run',
-    reportName: 'agent-patch-swarm-route-blackbox'
-});
-//# sourceMappingURL=agent-patch-swarm-route-blackbox.js.map

package/dist/scripts/agent-route-blackbox-lib.js

@@ -1,132 +0,0 @@
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
-const PROMPT = 'route truth dynamic scheduler fixture';
-const ROUTE_ARGS = ['--agents', '5', '--work-items', '8', '--target-active-slots', '5', '--minimum-work-items', '5', '--max-queue-expansion', '10', '--mock', '--json'];
-export function runRouteBackfillBlackbox(route, gate) {
-    if (String(route).toLowerCase().includes('team'))
-        return runActualTeamBackfillBlackbox(gate);
-    if (String(route).toLowerCase().includes('research'))
-        return runActualResearchBackfillBlackbox(gate);
-    if (String(route).toLowerCase().includes('qa'))
-        return runActualQaBackfillBlackbox(gate);
-    return runActualAgentBackfillBlackbox(gate);
-}
-export function runActualAgentBackfillBlackbox(gate = 'agent:backfill-route-blackbox') {
-    const json = runSks(['agent', 'run', PROMPT, '--route', '$Agent', ...ROUTE_ARGS], gate);
-    validateNativeRun(json, gate, { route: '$Agent', command: 'sks agent run', kind: 'actual_agent_command' });
-    return json;
-}
-export function runActualTeamBackfillBlackbox(gate = 'team:backfill-route-blackbox') {
-    const json = runSks(['team', PROMPT, ...ROUTE_ARGS, '--no-open-zellij'], gate);
-    validateNativeRun(json.native_agent_run, gate, { route: '$Team', command: 'sks team', kind: 'actual_team_command' });
-    return json;
-}
-export function runActualResearchBackfillBlackbox(gate = 'research:backfill-route-blackbox') {
-    const prepared = runSks(['research', 'prepare', PROMPT, '--json'], `${gate}:prepare`);
-    const missionId = prepared.mission_id;
-    assertGate(Boolean(missionId), `${gate} research prepare must return mission_id`, prepared);
-    const json = runSks(['research', 'run', missionId, ...ROUTE_ARGS], gate);
-    const native = json.native_agent_run || readMissionJson(missionId, 'research-native-agent-run.json');
-    validateNativeRun(native, gate, { route: '$Research', command: 'sks research run', kind: 'actual_research_command' });
-    return json;
-}
-export function runActualQaBackfillBlackbox(gate = 'qa:backfill-route-blackbox') {
-    const prepared = runSks(['qa-loop', 'prepare', PROMPT, '--json'], `${gate}:prepare`);
-    const missionId = prepared.mission_id;
-    assertGate(Boolean(missionId), `${gate} qa prepare must return mission_id`, prepared);
-    const json = runSks(['qa-loop', 'run', missionId, ...ROUTE_ARGS], gate);
-    const native = json.native_agent_run || readMissionJson(missionId, 'qa-native-agent-run.json');
-    validateNativeRun(native, gate, { route: '$QA-LOOP', command: 'sks qa-loop run', kind: 'actual_qa_command' });
-    return json;
-}
-export function validateNativeRun(json, gate, expected = {}) {
-    assertGate(Boolean(json), `${gate} native agent run JSON missing`, {});
-    const state = json.scheduler?.state || {};
-    const proof = json.proof || {};
-    const ledgerRoot = path.join(root, json.ledger_root || '');
-    assertGate(fs.existsSync(ledgerRoot), `${gate} ledger root missing`, { ledger_root: json.ledger_root });
-    const events = readJsonl(path.join(ledgerRoot, 'agent-scheduler-events.jsonl'));
-    const backfills = events.filter((event) => event.event_type === 'backfill_event');
-    const graph = readJson(path.join(ledgerRoot, 'agent-task-graph.json'));
-    const queue = readJson(path.join(ledgerRoot, 'agent-work-queue.json'));
-    const supervisor = readJson(path.join(ledgerRoot, 'agent-zellij-lane-supervisor.json'));
-    assertGate(json.ok === true, `${gate} proof must pass`, proof);
-    assertGate(graph.schema === 'sks.agent-task-graph.v1', `${gate} task graph schema missing`, graph);
-    assertGate(graph.target_active_slots === 5 && graph.total_work_items === 8, `${gate} task graph must split active slots and work items`, graph.route_work_count_summary);
-    assertGate(queue.total_work_items === graph.total_work_items, `${gate} work queue must match task graph`, { queue: queue.total_work_items, graph: graph.total_work_items });
-    assertGate(state.target_active_slots === 5, `${gate} target active slots must be 5`, state);
-    assertGate(state.total_work_items === queue.total_work_items, `${gate} scheduler must match work queue`, { scheduler: state.total_work_items, queue: queue.total_work_items });
-    assertGate(state.max_observed_active_slots === 5, `${gate} must observe 5 active slots`, state);
-    assertGate(state.expected_backfill_count >= 2, `${gate} expected backfill count must be at least 2`, state);
-    assertGate(state.backfill_count >= state.expected_backfill_count, `${gate} backfills must satisfy expectation`, state);
-    assertGate(backfills.length >= 2, `${gate} must emit at least two backfill events`, { backfills });
-    assertGate(events.some((event) => event.event_type === 'scheduler_draining'), `${gate} must emit scheduler_draining`, {});
-    assertGate(state.pending_queue_drained === true, `${gate} queue must drain`, state);
-    assertGate(state.all_generations_closed === true, `${gate} generations must close`, state);
-    assertGate(proof.requested_work_items === 8, `${gate} proof must record requested work items`, proof);
-    assertGate(proof.actual_total_work_items === 8, `${gate} proof must record actual total work items`, proof);
-    assertGate(proof.task_graph_total_work_items === 8, `${gate} proof task graph total must be 8`, proof);
-    assertGate(proof.work_queue_total_work_items === 8, `${gate} proof work queue total must be 8`, proof);
-    assertGate(proof.scheduler_total_work_items === 8, `${gate} proof scheduler total must be 8`, proof);
-    assertGate(proof.task_graph_matches_cli_options === true, `${gate} proof must bind task graph to CLI options`, proof);
-    assertGate(proof.work_queue_matches_task_graph === true, `${gate} proof must bind work queue to task graph`, proof);
-    assertGate(proof.scheduler_matches_work_queue === true, `${gate} proof must bind scheduler to work queue`, proof);
-    assertGate(proof.generation_count >= state.total_work_items, `${gate} proof generation count must cover work items`, proof);
-    assertGate(proof.terminal_close_report_count >= proof.generation_count, `${gate} close reports must cover generations`, proof);
-    assertGate(proof.terminal_reports_match_generations === true, `${gate} proof must bind terminal reports to generations`, proof);
-    assertGate(proof.source_intelligence_generation_refs_ok === true && proof.task_graph_source_refs_ok === true && proof.work_queue_source_refs_ok === true, `${gate} source refs must propagate`, proof);
-    assertGate(proof.goal_mode_generation_refs_ok === true && proof.task_graph_goal_refs_ok === true && proof.work_queue_goal_refs_ok === true, `${gate} goal refs must propagate`, proof);
-    assertGate(proof.lane_supervisor_integrated === true && supervisor.schema === 'sks.zellij-lane-supervisor.v1', `${gate} Zellij supervisor must be integrated`, { proof, supervisor });
-    assertGate(proof.zellij_lane_no_flicker_verified === true, `${gate} Zellij no-flicker proof must pass`, proof);
-    assertGate(proof.real_route_command_used === true, `${gate} must use real route command`, proof);
-    assertGate(String(proof.route_command || '').includes(expected.command), `${gate} proof route command mismatch`, proof);
-    assertGate(proof.route_blackbox_kind === expected.kind, `${gate} proof route blackbox kind mismatch`, proof);
-    if (expected.route !== '$Agent') {
-        assertGate(!/\bagent\s+run\b/i.test(String(proof.route_command || '')), `${gate} must not use agent run stand-in`, proof);
-    }
-    emitGate(gate, {
-        route: expected.route,
-        command: proof.route_command,
-        mission_id: json.mission_id,
-        target_active_slots: state.target_active_slots,
-        total_work_items: state.total_work_items,
-        expected_backfill_count: state.expected_backfill_count,
-        backfill_count: state.backfill_count,
-        generation_count: proof.generation_count
-    });
-}
-function runSks(args, gate) {
-    const result = spawnSync(process.execPath, ['dist/bin/sks.js', ...args], {
-        cwd: root,
-        encoding: 'utf8',
-        env: { ...process.env, SKS_AGENT_DYNAMIC_BACKFILL_FIXTURE: '1' },
-        maxBuffer: 1024 * 1024 * 16
-    });
-    assertGate(result.status === 0, `${gate} route command failed`, { args, stdout: result.stdout.slice(-4000), stderr: result.stderr.slice(-4000) });
-    return parseJson(result.stdout, gate);
-}
-function parseJson(stdout, gate) {
-    try {
-        return JSON.parse(stdout);
-    }
-    catch (err) {
-        const start = stdout.indexOf('{');
-        const end = stdout.lastIndexOf('}');
-        if (start >= 0 && end > start)
-            return JSON.parse(stdout.slice(start, end + 1));
-        assertGate(false, `${gate} did not emit JSON`, { stdout: stdout.slice(-4000), error: String(err) });
-    }
-}
-function readMissionJson(missionId, rel) {
-    return readJson(path.join(root, '.sneakoscope', 'missions', missionId, rel));
-}
-function readJson(file) {
-    return JSON.parse(fs.readFileSync(file, 'utf8'));
-}
-function readJsonl(file) {
-    return fs.readFileSync(file, 'utf8').trim().split(/\n+/).filter(Boolean).map((line) => JSON.parse(line));
-}
-//# sourceMappingURL=agent-route-blackbox-lib.js.map

package/dist/scripts/blackbox-command-import-smoke.js

@@ -1,143 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { pathToFileURL } from 'node:url';
-import { currentDistFreshness } from './lib/ensure-dist-fresh.js';
-const root = process.cwd();
-const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm';
-const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-command-import-smoke-'));
-const cache = path.join(tmp, 'npm-cache');
-const consumer = path.join(tmp, 'consumer');
-const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
-const failures = [];
-const rows = [];
-fs.mkdirSync(consumer, { recursive: true });
-fs.writeFileSync(path.join(consumer, 'package.json'), `${JSON.stringify({ name: 'sks-command-smoke-consumer', private: true }, null, 2)}\n`);
-try {
-    if (process.env.SKS_ENSURE_DIST_NO_REBUILD === '1' || process.env.SKS_RELEASE_DIST_FRESHNESS_NO_REBUILD === '1') {
-        const freshness = currentDistFreshness();
-        rows.push({ label: 'dist_freshness', ok: freshness.ok, status: freshness.ok ? 0 : 1, issues: freshness.issues });
-        if (!freshness.ok)
-            failures.push(`dist_not_fresh:${freshness.issues.join(',')}`);
-    }
-    else {
-        run('build', npmBin, ['run', 'build'], { cwd: root });
-    }
-    const pack = run('npm_pack', npmBin, ['pack', '--json', '--ignore-scripts', '--pack-destination', tmp, '--registry', 'https://registry.npmjs.org/'], { cwd: root });
-    const info = pack.ok ? JSON.parse(pack.stdout || '[]')[0] : null;
-    const tarball = info ? path.join(tmp, info.filename) : null;
-    if (tarball)
-        extractPackedTarball(tarball);
-    const pkgRoot = path.join(consumer, 'node_modules', 'sneakoscope');
-    if (!fs.existsSync(pkgRoot))
-        failures.push('installed_package_missing');
-    else
-        await smokeCommands(pkgRoot);
-}
-finally {
-    if (failures.length && process.argv.includes('--keep')) {
-        // Keep temp root for debugging only when explicitly requested.
-    }
-    else if (!process.argv.includes('--keep')) {
-        fs.rmSync(tmp, { recursive: true, force: true });
-    }
-}
-const result = {
-    schema: 'sks.blackbox-command-import-smoke.v1',
-    ok: failures.length === 0,
-    temp_root: failures.length && process.argv.includes('--keep') ? tmp : null,
-    rows,
-    failures
-};
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-function run(label, cmd, args, options = {}) {
-    const result = spawnSync(cmd, args, {
-        cwd: options.cwd || root,
-        encoding: 'utf8',
-        timeout: options.timeout || 120_000,
-        env: childNpmEnv(options.env)
-    });
-    const row = {
-        label,
-        command: [cmd, ...args].join(' '),
-        status: result.status,
-        ok: result.status === 0,
-        stdout: result.stdout || '',
-        stderr_tail: String(result.stderr || '').slice(-800)
-    };
-    rows.push({ ...row, stdout: undefined });
-    if (!row.ok)
-        failures.push(`${label}:${row.stderr_tail || result.stdout}`);
-    return row;
-}
-function childNpmEnv(extra = {}) {
-    const env = { ...process.env, npm_config_cache: cache, SKS_SKIP_NPM_FRESHNESS_CHECK: '1', CI: 'true', ...extra };
-    delete env.npm_config_dry_run;
-    delete env.NPM_CONFIG_DRY_RUN;
-    return env;
-}
-function extractPackedTarball(tarball) {
-    const pkgRoot = path.join(consumer, 'node_modules', 'sneakoscope');
-    fs.mkdirSync(pkgRoot, { recursive: true });
-    const stripFlag = process.platform === 'win32' ? '--strip-components=1' : '--strip-components';
-    const args = process.platform === 'win32'
-        ? ['-xzf', tarball, '-C', pkgRoot, stripFlag]
-        : ['-xzf', tarball, '-C', pkgRoot, stripFlag, '1'];
-    const extracted = run('extract_pack_tarball', 'tar', args, { cwd: consumer });
-    if (!extracted.ok)
-        return;
-    linkRuntimeDependencies(pkgRoot);
-}
-function linkRuntimeDependencies(pkgRoot) {
-    const deps = Object.keys(pkg.dependencies || {});
-    if (!deps.length)
-        return;
-    const nodeModules = path.join(pkgRoot, 'node_modules');
-    fs.mkdirSync(nodeModules, { recursive: true });
-    for (const dep of deps) {
-        const source = path.join(root, 'node_modules', dep);
-        const target = path.join(nodeModules, dep);
-        if (!fs.existsSync(source)) {
-            failures.push(`dependency_missing:${dep}`);
-            continue;
-        }
-        fs.mkdirSync(path.dirname(target), { recursive: true });
-        try {
-            fs.symlinkSync(source, target, process.platform === 'win32' ? 'junction' : 'dir');
-            rows.push({ label: `link_dependency:${dep}`, ok: true, status: 0 });
-        }
-        catch (err) {
-            failures.push(`dependency_link_failed:${dep}:${err.message}`);
-            rows.push({ label: `link_dependency:${dep}`, ok: false, status: 1, stderr_tail: String(err.message).slice(-800) });
-        }
-    }
-}
-async function smokeCommands(pkgRoot) {
-    const registryPath = path.join(pkgRoot, 'dist', 'cli', 'command-registry.js');
-    if (!fs.existsSync(registryPath)) {
-        failures.push('dist_cli_command_registry_missing');
-        return;
-    }
-    const registry = await import(pathToFileURL(registryPath));
-    const names = registry.commandNames();
-    for (const name of names) {
-        const entry = registry.COMMANDS[name];
-        try {
-            const mod = await entry.lazy();
-            const runner = mod.run || mod.main || mod.default;
-            if (typeof runner !== 'function')
-                failures.push(`${name}:runner_missing`);
-            rows.push({ label: `lazy_import:${name}`, ok: typeof runner === 'function', status: typeof runner === 'function' ? 0 : 1 });
-        }
-        catch (err) {
-            failures.push(`${name}:${err.stack || err.message}`);
-            rows.push({ label: `lazy_import:${name}`, ok: false, status: 1, stderr_tail: String(err.stack || err.message).slice(-800) });
-        }
-    }
-}
-//# sourceMappingURL=blackbox-command-import-smoke.js.map

package/dist/scripts/blackbox-global-shim.js

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-const json = process.argv.includes('--json');
-const dryRun = process.argv.includes('--dry-run');
-const keep = process.argv.includes('--keep');
-const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm';
-const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-blackbox-global-'));
-const prefix = path.join(tmp, 'prefix');
-const cache = path.join(tmp, 'npm-cache');
-const binDir = process.platform === 'win32' ? prefix : path.join(prefix, 'bin');
-const shim = path.join(binDir, process.platform === 'win32' ? 'sks.cmd' : 'sks');
-const sneakoscopeShim = path.join(binDir, process.platform === 'win32' ? 'sneakoscope.cmd' : 'sneakoscope');
-const steps = [];
-function run(label, cmd, args, options = {}) {
-    const result = dryRun
-        ? { status: 0, signal: null, stdout: '', stderr: '' }
-        : spawnSync(cmd, args, {
-            cwd: options.cwd || root,
-            encoding: 'utf8',
-            timeout: options.timeout || 120_000,
-            env: childNpmEnv(options.env)
-        });
-    const row = {
-        label,
-        command: [cmd, ...args].join(' '),
-        cwd: options.cwd || root,
-        status: result.status,
-        ok: result.status === 0,
-        stdout_bytes: Buffer.byteLength(result.stdout || ''),
-        stderr_bytes: Buffer.byteLength(result.stderr || ''),
-        stderr_tail: String(result.stderr || '').slice(-800)
-    };
-    steps.push(row);
-    return { ...row, stdout: result.stdout || '', stderr: result.stderr || '' };
-}
-function childNpmEnv(extra = {}) {
-    const env = { ...process.env, npm_config_cache: cache, npm_config_prefix: prefix, SKS_SKIP_NPM_FRESHNESS_CHECK: '1', CI: 'true', ...extra };
-    delete env.npm_config_dry_run;
-    delete env.NPM_CONFIG_DRY_RUN;
-    return env;
-}
-let tarball = dryRun ? path.join(tmp, 'sneakoscope-0.0.0.tgz') : null;
-const pack = run('npm_pack', npmBin, ['pack', '--json', '--ignore-scripts', '--pack-destination', tmp, '--registry', 'https://registry.npmjs.org/']);
-if (pack.ok && !dryRun) {
-    const info = JSON.parse(pack.stdout)[0];
-    tarball = path.join(tmp, info.filename);
-}
-if (pack.ok)
-    run('npm_install_global_prefix', npmBin, ['install', '--global', '--prefix', prefix, '--no-audit', '--no-fund', tarball]);
-if (steps.at(-1)?.ok)
-    run('global_shim_version', shim, ['--version'], { cwd: tmp, env: pathEnv() });
-if (steps.at(-1)?.ok)
-    run('global_sneakoscope_version', sneakoscopeShim, ['--version'], { cwd: tmp, env: pathEnv() });
-if (steps.at(-1)?.ok)
-    run('global_sks_root_json', shim, ['root', '--json'], { cwd: tmp, env: pathEnv() });
-if (!keep)
-    fs.rmSync(tmp, { recursive: true, force: true });
-const result = { schema: 'sks.blackbox-global-shim.v1', ok: steps.every((step) => step.ok), dry_run: dryRun, temp_root: keep ? tmp : null, steps };
-if (json)
-    console.log(JSON.stringify(result, null, 2));
-else {
-    console.log(`Blackbox global shim: ${result.ok ? 'ok' : 'blocked'}${dryRun ? ' (dry-run)' : ''}`);
-    for (const step of steps)
-        console.log(`- ${step.ok ? 'ok' : 'blocked'} ${step.label}`);
-}
-if (!result.ok)
-    process.exitCode = 1;
-function pathEnv() {
-    return { PATH: `${binDir}${path.delimiter}${process.env.PATH || ''}` };
-}
-//# sourceMappingURL=blackbox-global-shim.js.map