sneakoscope 5.1.2 → 5.5.0

package/dist/scripts/sks-menubar-install-check.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { PACKAGE_VERSION } from '../core/fsx.js';
+import { PACKAGE_VERSION, runProcess, which } from '../core/fsx.js';
 import { installSksMenuBar } from '../core/codex-app/sks-menubar.js';
 const temp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-menubar-check-'));
 const envHomeTemp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-menubar-env-home-check-'));
@@ -44,22 +44,30 @@ const actionScript = result.action_script_path ? await fs.readFile(result.action
 const launchAgentSource = result.launch_agent_path ? await fs.readFile(result.launch_agent_path, 'utf8').catch(() => '') : '';
 const infoPlistPath = result.app_path ? path.join(result.app_path, 'Contents', 'Info.plist') : null;
 const infoPlist = infoPlistPath ? await fs.readFile(infoPlistPath, 'utf8').catch(() => '') : '';
+const swiftParse = await swiftParseSmoke(generatedSourcePath);
 const commandRegistry = await fs.readFile(path.join(process.cwd(), 'src', 'cli', 'command-registry.ts'), 'utf8');
 const installHelpers = await fs.readFile(path.join(process.cwd(), 'src', 'cli', 'install-helpers.ts'), 'utf8');
+const cltMissing = process.platform === 'darwin' && result.blockers.includes('xcode_clt_missing');
 const hasVisibleStatusSource = generatedSource.includes('NSStatusItem.variableLength')
     && generatedSource.includes('configureStatusButton(button, title: state.title)')
     && generatedSource.includes('SKS ⚠')
     && generatedSource.includes('SKS ↑')
+    && generatedSource.includes('SKS ⋯')
     && generatedSource.includes('Timer.scheduledTimer(withTimeInterval: 30.0');
 const hasBackgroundReadonlyActions = generatedSource.includes('runSksBackground(["codex-lb", "fast-check"]')
     && generatedSource.includes('runSksBackground(["update", "check"]')
     && generatedSource.includes('display notification')
-    && !generatedSource.includes('@objc func fastCheck() {\n        runSksInTerminal');
-const hasTerminalFailureAlert = generatedSource.includes('output.contains("-1743")')
-    && generatedSource.includes('Privacy & Security > Automation');
-const hasTerminalExit = generatedSource.includes('; exit');
+    && !generatedSource.includes('runSksInTerminal')
+    && !generatedSource.includes('runInTerminal');
+const hasNativeModalSource = generatedSource.includes('func promptText(title: String, message: String')
+    && generatedSource.includes('NSSecureTextField')
+    && generatedSource.includes('stdinText: key + "\\n"');
+const hasActionLogSource = generatedSource.includes('lastActionLogPath')
+    && generatedSource.includes('.posixPermissions: 0o600')
+    && generatedSource.includes('redactSecrets');
 const hasAutosaveNameSource = generatedSource.includes('statusItem.autosaveName = "com.sneakoscope.sks-menubar"');
-const hasExplicitVisibleSource = generatedSource.includes('statusItem.isVisible = true');
+const hasCodexLifecycleSource = generatedSource.includes('Codex app not detected — sync disabled')
+    || (generatedSource.includes('NSWorkspace.didLaunchApplicationNotification') && generatedSource.includes('NSWorkspace.didTerminateApplicationNotification'));
 const hasNoUnconditionalKeepAlive = !launchAgentSource.includes('<key>KeepAlive</key>');
 const hasNoLaunchAgentSecrets = !launchAgentSource.includes('EnvironmentVariables')
     && !launchAgentSource.includes('CODEX_LB_API_KEY')
@@ -69,11 +77,13 @@ const hasInteractiveProcessType = launchAgentSource.includes('<key>ProcessType</
 const hasPackagePlistVersion = infoPlist.includes(`<string>${PACKAGE_VERSION}</string>`)
     && infoPlist.includes('<key>CFBundleShortVersionString</key>')
     && infoPlist.includes('<key>CFBundleVersion</key>');
-const hasActionFallbacks = actionScript.includes('.nvm/versions/node/*/bin/node(Nn[-1])')
+const hasActionFallbacks = actionScript.includes('command -v sks')
+    && actionScript.includes('npm root -g')
+    && actionScript.includes('.nvm/versions/node/*/lib/node_modules/sneakoscope/dist/bin/sks.js')
     && actionScript.includes('/bin/zsh -lc')
-    && actionScript.includes('command -v sks');
-const hasEntryWarning = result.warnings.includes('sks_entry_project_local_ignored_global_package_used')
-    || result.warnings.includes('sks_entry_resolved_under_project_root');
+    && actionScript.includes('exit 127')
+    && actionScript.includes('display notification');
+const hasEntryWarning = result.warnings.includes('sks_entry_project_local');
 const hasBuildStamp = buildStampExists
     && result.build_stamp?.package_version === PACKAGE_VERSION
     && result.build_stamp?.codesign_identifier === 'com.sneakoscope.sks-menubar';
@@ -94,7 +104,8 @@ const expectedMenuItems = [
     'Set OpenRouter Key and GLM Profiles',
     'Fast Check',
     'SKS Version Check',
-    'Update SKS Now'
+    'Update SKS Now',
+    'View Last Log'
 ];
 const missingExpectedItems = expectedMenuItems.filter((item) => !result.menu_items.includes(item));
 const hasExpectedItems = missingExpectedItems.length === 0;
@@ -110,8 +121,9 @@ const launchSkippedForTempInstall = result.launch?.requested === false
     && envHomeResult.warnings.includes('launch_skipped_temp_install');
 const preferredPositionSkippedForTempInstall = !result.actions.includes('seeded SKS menu bar preferred position')
     && !envHomeResult.actions.includes('seeded SKS menu bar preferred position');
-const ok = process.platform === 'darwin'
-    ? result.ok === true
+const darwinOk = cltMissing
+    ? swiftParse.status === 'skipped' && swiftParse.reason === 'xcode_clt_missing'
+    : result.ok === true
         && result.status === 'installed_launch_skipped'
         && secondResult.ok === true
         && envHomeResult.ok === true
@@ -122,10 +134,10 @@ const ok = process.platform === 'darwin'
         && hasExpectedItems
         && hasVisibleStatusSource
         && hasBackgroundReadonlyActions
-        && hasTerminalFailureAlert
-        && hasTerminalExit
+        && hasNativeModalSource
+        && hasActionLogSource
         && hasAutosaveNameSource
-        && hasExplicitVisibleSource
+        && hasCodexLifecycleSource
         && hasNoUnconditionalKeepAlive
         && hasNoLaunchAgentSecrets
         && hasInteractiveProcessType
@@ -133,6 +145,7 @@ const ok = process.platform === 'darwin'
         && hasActionFallbacks
         && hasEntryWarning
         && hasBuildStamp
+        && swiftParse.ok === true
         && isIdempotent
         && hasCommandRegistry
         && noLaunchctlSecretSetenv
@@ -140,7 +153,9 @@ const ok = process.platform === 'darwin'
         && launchSkippedForTempHome
         && launchSkippedForEnvHome
         && launchSkippedForTempInstall
-        && preferredPositionSkippedForTempInstall
+        && preferredPositionSkippedForTempInstall;
+const ok = process.platform === 'darwin'
+    ? darwinOk
     : result.ok === true && result.status === 'unsupported_platform';
 const report = {
     schema: 'sks.sks-menubar-install-check.v1',
@@ -157,10 +172,10 @@ const report = {
     generated_source_path: generatedSourcePath,
     has_visible_status_source: hasVisibleStatusSource,
     has_background_readonly_actions: hasBackgroundReadonlyActions,
-    has_terminal_failure_alert: hasTerminalFailureAlert,
-    has_terminal_exit: hasTerminalExit,
+    has_native_modal_source: hasNativeModalSource,
+    has_action_log_source: hasActionLogSource,
     has_autosave_name_source: hasAutosaveNameSource,
-    has_explicit_visible_source: hasExplicitVisibleSource,
+    has_codex_lifecycle_source: hasCodexLifecycleSource,
     has_no_unconditional_keepalive: hasNoUnconditionalKeepAlive,
     has_no_launch_agent_secrets: hasNoLaunchAgentSecrets,
     has_interactive_process_type: hasInteractiveProcessType,
@@ -168,6 +183,7 @@ const report = {
     has_action_fallbacks: hasActionFallbacks,
     has_entry_warning: hasEntryWarning,
     has_build_stamp: hasBuildStamp,
+    swift_parse: swiftParse,
     is_idempotent: isIdempotent,
     has_command_registry: hasCommandRegistry,
     no_launchctl_secret_setenv: noLaunchctlSecretSetenv,
@@ -193,4 +209,25 @@ async function exists(file) {
         return false;
     }
 }
+async function swiftParseSmoke(sourcePath) {
+    if (process.platform !== 'darwin')
+        return { ok: true, status: 'skipped', reason: 'not_macos' };
+    const xcodeSelect = await which('xcode-select').catch(() => null) || '/usr/bin/xcode-select';
+    const clt = await runProcess(xcodeSelect, ['-p'], { timeoutMs: 5_000, maxOutputBytes: 8 * 1024 })
+        .catch((err) => ({ code: 1, stdout: '', stderr: err?.message || String(err) }));
+    if (clt.code !== 0)
+        return { ok: true, status: 'skipped', reason: 'xcode_clt_missing', code: clt.code, error: String(clt.stderr || clt.stdout || '').trim() };
+    if (!sourcePath)
+        return { ok: false, status: 'failed', reason: 'source_missing' };
+    const swiftc = await which('swiftc').catch(() => null) || '/usr/bin/swiftc';
+    const parsed = await runProcess(swiftc, ['-parse', sourcePath], { timeoutMs: 30_000, maxOutputBytes: 32 * 1024 })
+        .catch((err) => ({ code: 1, stdout: '', stderr: err?.message || String(err) }));
+    return {
+        ok: parsed.code === 0,
+        status: parsed.code === 0 ? 'parsed' : 'failed',
+        reason: parsed.code === 0 ? null : 'swift_parse_failed',
+        code: parsed.code,
+        error: parsed.code === 0 ? null : String(parsed.stderr || parsed.stdout || '').trim()
+    };
+}
 //# sourceMappingURL=sks-menubar-install-check.js.map

package/dist/scripts/supabase-secret-preservation-blackbox.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { assertGate, emitGate, makeTempRoot, writeText } from './sks-3-1-8-check-lib.js';
+import { captureSecretPreservationSnapshot, withSecretPreservationGuard } from '../core/config/secret-preservation.js';
+const root = await makeTempRoot('sks-supabase-blackbox-');
+const envFile = path.join(root, '.env.local');
+await writeText(envFile, 'NEXT_PUBLIC_SUPABASE_URL=https://example.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=super-secret-anon\n');
+const before = await captureSecretPreservationSnapshot({ root });
+await withSecretPreservationGuard(root, 'blackbox-preserve', async () => {
+    await fs.appendFile(envFile, 'SKS_MANAGED=true\n', 'utf8');
+});
+const after = await captureSecretPreservationSnapshot({ root });
+assertGate(JSON.stringify(before.fingerprints.map((fp) => fp.value_sha256).sort()) === JSON.stringify(after.fingerprints.map((fp) => fp.value_sha256).sort()), 'Supabase secret fingerprints must remain stable across guarded update', { before, after });
+assertGate(!JSON.stringify(after).includes('super-secret-anon'), 'reports must not include raw Supabase values', after);
+let blocked = false;
+try {
+    await withSecretPreservationGuard(root, 'blackbox-change', async () => {
+        await fs.writeFile(envFile, 'NEXT_PUBLIC_SUPABASE_URL=https://example.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=mutated-secret\n', 'utf8');
+    });
+}
+catch {
+    blocked = true;
+}
+const restored = await fs.readFile(envFile, 'utf8');
+assertGate(blocked, 'Supabase value mutation must be blocked after rollback');
+assertGate(restored.includes('super-secret-anon') && !restored.includes('mutated-secret'), 'Supabase value mutation must be rolled back');
+emitGate('secret:supabase-preservation-blackbox');
+//# sourceMappingURL=supabase-secret-preservation-blackbox.js.map

package/dist/scripts/update-preserves-supabase-keys-blackbox.js

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { assertGate, emitGate, makeTempRoot, writeText } from './sks-3-1-8-check-lib.js';
+import { withSecretPreservationGuard } from '../core/config/config-migration-journal.js';
+const root = await makeTempRoot('sks-update-supabase-');
+const envFile = path.join(root, '.env.local');
+await writeText(envFile, 'NEXT_PUBLIC_SUPABASE_URL=https://example.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=update-secret\n');
+await withSecretPreservationGuard(root, 'update-fixture', async () => {
+    await fs.appendFile(envFile, 'SKS_UPDATE_MARKER=1\n', 'utf8');
+});
+const text = await fs.readFile(envFile, 'utf8');
+assertGate(text.includes('update-secret'), 'update fixture must preserve Supabase key value in source file');
+let blocked = false;
+try {
+    await withSecretPreservationGuard(root, 'update-fixture-mutates-secret', async () => {
+        await fs.writeFile(envFile, 'NEXT_PUBLIC_SUPABASE_URL=https://example.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=mutated-update-secret\n', 'utf8');
+    });
+}
+catch {
+    blocked = true;
+}
+const restored = await fs.readFile(envFile, 'utf8');
+assertGate(blocked, 'update guard must block Supabase key value mutation');
+assertGate(restored.includes('update-secret') && !restored.includes('mutated-update-secret'), 'update guard must restore Supabase key value after mutation');
+emitGate('update:preserves-supabase-keys');
+//# sourceMappingURL=update-preserves-supabase-keys-blackbox.js.map

package/dist/scripts/zellij-slot-telemetry-runtime-check.js

@@ -19,5 +19,6 @@ for (const event of requiredEvents) {
 assertGate(swarm.includes('appendZellijSlotTelemetry'), 'session swarm must append Zellij slot telemetry');
 assertGate(worker.includes('appendZellijSlotTelemetry'), 'native worker must append Zellij slot telemetry');
 assertGate(worker.includes('startWorkerProgressTelemetry'), 'native worker must emit progress telemetry during backend runtime');
+assertGate(!/progress:\s*\{\s*done:\s*tick,\s*total:\s*0/.test(worker), 'heartbeat ticks must not be reported as progress done/total counters');
 emitGate('zellij:slot-telemetry-runtime', { lifecycle_events: requiredEvents.length, progress_pump: true });
 //# sourceMappingURL=zellij-slot-telemetry-runtime-check.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "5.1.2",
+  "version": "5.5.0",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -34,10 +34,16 @@
     "!dist/**/__tests__",
     "!dist/**/*.test.js",
     "!dist/scripts/*blackbox*.js",
+    "dist/scripts/doctor-context7-mcp-repair-blackbox.js",
+    "dist/scripts/doctor-fix-production-blackbox.js",
+    "dist/scripts/doctor-startup-config-repair-blackbox.js",
+    "dist/scripts/doctor-supabase-mcp-repair-blackbox.js",
+    "dist/scripts/project-skill-dedupe-blackbox.js",
+    "dist/scripts/supabase-secret-preservation-blackbox.js",
+    "dist/scripts/update-preserves-supabase-keys-blackbox.js",
     "!dist/vendor/openai-codex/rust-v0.131.0",
     "config/codex-releases/rust-v0.142.0.json",
     "config/bench-baseline.json",
-    "bench/tasks",
     "schemas",
     "!schemas/codex/app-server-0.142/**",
     "schemas/codex/app-server-0.142/codex_app_server_protocol.v2.schemas.json",
@@ -57,6 +63,8 @@
     "build": "npm run build:clean",
     "build:clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('.sneakoscope/cache/tsbuildinfo',{recursive:true,force:true})\" && tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
     "build:incremental": "tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
+    "test": "node --test --test-concurrency=1 dist/core/__tests__/*.test.js dist/core/proof/__tests__/*.test.js dist/core/stop-gate/__tests__/*.test.js dist/core/commands/__tests__/*.test.js dist/core/dfix/__tests__/*.test.js dist/core/ppt/__tests__/*.test.js dist/core/mad-sks/__tests__/*.test.js dist/core/codex-app/__tests__/*.test.js dist/core/doctor/__tests__/*.test.js dist/cli/__tests__/*.test.js",
+    "selftest:real": "node ./dist/bin/sks.js selftest --real --json",
     "check": "npm run release:check:affected",
     "dev:sks": "npm run build:incremental --silent && node ./dist/bin/sks.js",
     "prepublishOnly": "npm run release:check:affected",
@@ -67,6 +75,8 @@
     "release:check": "npm run release:check:affected --silent",
     "release:metadata": "node ./dist/scripts/release-metadata-check.js",
     "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",
+    "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",
+    "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",
     "release:check:parallel": "npm run build --silent && node ./dist/scripts/release-parallel-check.js && node ./dist/scripts/release-check-stamp.js write",
     "release:check:legacy": "npm run release:check:parallel --silent",
     "release:dag-full-coverage": "node ./dist/scripts/release-dag-full-coverage-check.js",
@@ -116,60 +126,6 @@
     "feature:check": "node ./dist/bin/sks.js features check --json",
     "feature-quality:check": "node ./dist/scripts/check-feature-quality.js --release",
     "all-features:selftest": "node ./dist/bin/sks.js all-features selftest --mock --json",
-    "doctor:imagegen-repair": "node ./dist/scripts/doctor-imagegen-repair-check.js",
-    "image-fidelity:check": "node ./dist/scripts/image-fidelity-fixture-check.js",
-    "imagegen:capability": "node ./dist/scripts/imagegen-capability-check.js",
-    "imagegen:gpt-image-2-request-validator": "node ./dist/scripts/gpt-image-2-request-validator-check.js",
-    "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",
-    "ux-review:extract-wires-real-extractor": "node ./dist/scripts/ux-review-extract-wires-real-extractor-check.js",
-    "ux-review:patch-diff-recheck": "node ./dist/scripts/ux-review-patch-diff-recheck-check.js",
-    "ux-review:imagegen-blackbox": "node ./dist/scripts/ux-review-imagegen-blackbox-check.js",
-    "ux-review:real-loop-fixture": "node ./dist/scripts/ux-review-real-loop-fixture-check.js",
-    "ppt:real-export-adapter": "node ./dist/scripts/ppt-real-export-adapter-check.js",
-    "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",
-    "ppt:reexport-rereview": "node ./dist/scripts/ppt-reexport-rereview-check.js",
-    "ppt:full-e2e-blackbox": "node ./dist/scripts/ppt-full-e2e-blackbox-check.js",
-    "ppt:full-e2e-artifact-graph": "node ./dist/scripts/ppt-full-e2e-artifact-graph-check.js",
-    "ppt:imagegen-blackbox": "node ./dist/scripts/ppt-imagegen-blackbox-check.js",
-    "ux-ppt:structured-extraction": "node ./dist/scripts/ux-ppt-structured-extraction-check.js",
-    "dfix:patch-handoff": "node ./dist/scripts/dfix-patch-handoff-check.js",
-    "dfix:verification-recommendation": "node ./dist/scripts/dfix-verification-recommendation-check.js",
-    "dfix:fast-kernel": "node ./dist/scripts/dfix-fast-kernel-check.js",
-    "dfix:blackbox-fast": "node ./dist/scripts/dfix-fast-blackbox-check.js",
-    "dfix:performance": "node ./dist/scripts/dfix-performance-check.js",
-    "dfix:parallel-write-blackbox": "node ./dist/scripts/dfix-parallel-write-blackbox.js",
-    "all-features:deep-completion": "node ./dist/scripts/all-feature-deep-completion-check.js",
-    "evidence:flagship-coverage": "node ./dist/scripts/evidence-flagship-coverage-check.js",
-    "ux-review:generate-callouts-fixture": "node ./dist/scripts/ux-review-generate-callouts-fixture-check.js",
-    "ux-review:extract-real-callouts-fixture": "node ./dist/scripts/ux-review-extract-real-callouts-fixture-check.js",
-    "ux-review:patch-handoff-fixture": "node ./dist/scripts/ux-review-patch-handoff-fixture-check.js",
-    "ux-review:recapture-recheck-fixture": "node ./dist/scripts/ux-review-recapture-recheck-fixture-check.js",
-    "ux-review:no-text-fallback": "node ./dist/scripts/ux-review-no-text-fallback-check.js",
-    "ux-review:no-fake-callouts": "node ./dist/scripts/ux-review-no-fake-callouts-check.js",
-    "ux-review:image-voxel-relations": "node ./dist/scripts/ux-review-image-voxel-relations-check.js",
-    "ppt:imagegen-review-fixture": "node ./dist/scripts/ppt-imagegen-review-fixture-check.js",
-    "ppt:slide-export-fixture": "node ./dist/scripts/ppt-slide-export-fixture-check.js",
-    "ppt:no-text-fallback": "node ./dist/scripts/ppt-no-text-fallback-check.js",
-    "ppt:no-mock-as-real": "node ./dist/scripts/ppt-no-mock-as-real-check.js",
-    "ppt:issue-extraction-fixture": "node ./dist/scripts/ppt-issue-extraction-fixture-check.js",
-    "ppt:image-voxel-relations": "node ./dist/scripts/ppt-image-voxel-relations-check.js",
-    "ppt:proof-trust-fixture": "node ./dist/scripts/ppt-proof-trust-fixture-check.js",
-    "dfix:fixture": "node ./dist/scripts/dfix-fixture-check.js",
-    "dfix:verification": "node ./dist/scripts/dfix-verification-check.js",
-    "all-features:completion": "node ./dist/bin/sks.js all-features complete --json",
-    "json-schema:recursive-check": "node ./dist/scripts/json-schema-recursive-check.js",
-    "trust:check": "node ./dist/bin/sks.js trust validate latest --json || node ./dist/scripts/trust-fixture-check.js",
-    "wrongness:check": "node ./dist/bin/sks.js wrongness validate project --json && node ./dist/scripts/wrongness-fixture-check.js",
-    "git-hygiene:check": "node ./dist/bin/sks.js git doctor --json",
-    "shared-memory:check": "node ./dist/bin/sks.js wiki validate-shared --json || node ./dist/scripts/shared-memory-fixture-check.js",
-    "evidence:check": "node ./dist/scripts/evidence-fixture-check.js",
-    "codex-app:handoff": "node ./dist/scripts/codex-app-handoff-check.js",
-    "qa-loop:app-handoff": "node ./dist/scripts/qa-loop-app-handoff-check.js",
-    "qa-loop:app-handoff-capability": "node ./dist/scripts/qa-loop-app-handoff-capability-check.js",
-    "qa-loop:app-handoff-cli": "node ./dist/scripts/qa-loop-app-handoff-cli-check.js",
-    "qa-loop:image-path-exposure": "node ./dist/scripts/qa-loop-image-path-exposure-check.js",
-    "qa-loop:effort-escalation": "node ./dist/scripts/qa-loop-effort-escalation-check.js",
-    "qa-loop:budget-policy": "node ./dist/scripts/qa-loop-budget-policy-check.js",
     "naruto:real-active-pool-runtime": "node ./dist/scripts/naruto-real-active-pool-runtime-check.js",
     "bench": "node ./dist/scripts/coding-bench-check.js",
     "release:check:bench": "npm run build:incremental --silent && npm run bench --silent",
@@ -179,15 +135,6 @@
     "release:check:full": "npm run build:clean --silent && node ./dist/scripts/release-gate-dag-runner.js --preset release --full && node ./dist/scripts/release-gate-dag-runner.js --preset bench --full && node ./dist/scripts/release-check-stamp.js write",
     "publish:prep-ignore-scripts": "npm run prepublishOnly",
     "publish:ignore-scripts": "npm run publish:prep-ignore-scripts && npm publish --ignore-scripts",
-    "naruto:ssot-gate-aliases": "node ./dist/scripts/naruto-ssot-gate-aliases-check.js",
-    "codex-app:handoff-launch": "node ./dist/scripts/codex-app-handoff-launch-check.js",
-    "qa-loop:app-handoff-launch": "node ./dist/scripts/qa-loop-app-handoff-launch-check.js",
-    "qa-loop:app-handoff-confirmation": "node ./dist/scripts/qa-loop-app-handoff-confirmation-check.js",
-    "qa-loop:app-handoff-status-lifecycle": "node ./dist/scripts/qa-loop-app-handoff-status-lifecycle-check.js",
-    "qa-loop:app-handoff-gate-lifecycle": "node ./dist/scripts/qa-loop-app-handoff-gate-lifecycle-check.js",
-    "qa-loop:image-path-prompt-injection": "node ./dist/scripts/qa-loop-image-path-prompt-injection-check.js",
-    "loop:integration-finalizer": "node ./dist/scripts/loop-integration-finalizer-check.js",
-    "qa-loop:execution-profile-routing": "node ./dist/scripts/qa-loop-execution-profile-routing-check.js",
     "gates:run": "node ./dist/scripts/release-gate-dag-runner.js",
     "policy:gate-audit": "node ./dist/scripts/gate-policy-audit-check.js"
   },

package/schemas/release/release-gate-node.schema.json

@@ -24,6 +24,7 @@
           "side_effect": { "enum": ["hermetic", "real-env"] },
           "timeout_ms": { "type": "integer", "minimum": 1 },
           "output_contract": { "const": "sks.gate-result.v1" },
+          "contract_note": { "type": "string", "minLength": 1 },
           "cache": {
             "type": "object",
             "required": ["enabled", "inputs"],

package/bench/tasks/t01-off-by-one/repo/package.json

@@ -1,9 +0,0 @@
-{
-  "name": "bench-t01-off-by-one",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "test": "node test.js"
-  }
-}

package/bench/tasks/t01-off-by-one/repo/src/pagination.js

@@ -1,5 +0,0 @@
-export function paginate(items, page, pageSize) {
-  const start = Math.max(0, (page - 1) * pageSize);
-  const end = Math.min(items.length - 1, start + pageSize);
-  return items.slice(start, end);
-}

package/bench/tasks/t01-off-by-one/repo/test.js

@@ -1,5 +0,0 @@
-import assert from 'node:assert/strict';
-import { paginate } from './src/pagination.js';
-
-assert.deepEqual(paginate([1, 2, 3, 4, 5], 3, 2), [5]);
-assert.deepEqual(paginate([1, 2, 3, 4], 2, 2), [3, 4]);

package/bench/tasks/t01-off-by-one/task.json

@@ -1,13 +0,0 @@
-{
-  "schema": "sks.bench-task.v1",
-  "id": "t01-off-by-one",
-  "kind": "bugfix",
-  "prompt": "pagination이 마지막 페이지 항목 1개를 누락한다. 재현 테스트를 먼저 추가하고 고쳐라.",
-  "success": {
-    "command": "npm test --silent",
-    "must_pass": true,
-    "must_contain_new_test": true,
-    "max_diff_lines": 60,
-    "forbidden_patterns": ["catch \\{\\s*\\}"]
-  }
-}

package/bench/tasks/t02-signature-cochange/repo/package.json

@@ -1,9 +0,0 @@
-{
-  "name": "bench-t02-signature-cochange",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "test": "node test.js"
-  }
-}

package/bench/tasks/t02-signature-cochange/repo/src/admin.js

@@ -1,5 +0,0 @@
-import { formatUserLabel } from './labels.js';
-
-export function adminLabel(user) {
-  return formatUserLabel(user.name);
-}

package/bench/tasks/t02-signature-cochange/repo/src/audit.js

@@ -1,5 +0,0 @@
-import { formatUserLabel } from './labels.js';
-
-export function auditLabel(user) {
-  return formatUserLabel(user.name);
-}

package/bench/tasks/t02-signature-cochange/repo/src/labels.js

@@ -1,3 +0,0 @@
-export function formatUserLabel(name) {
-  return name.trim();
-}

package/bench/tasks/t02-signature-cochange/repo/src/profile.js

@@ -1,5 +0,0 @@
-import { formatUserLabel } from './labels.js';
-
-export function profileLabel(user) {
-  return formatUserLabel(user.name);
-}

package/bench/tasks/t02-signature-cochange/repo/test.js

@@ -1,9 +0,0 @@
-import assert from 'node:assert/strict';
-import { adminLabel } from './src/admin.js';
-import { auditLabel } from './src/audit.js';
-import { profileLabel } from './src/profile.js';
-
-const user = { name: ' Mina ', role: 'admin' };
-assert.equal(adminLabel(user), 'Mina (admin)');
-assert.equal(auditLabel(user), 'Mina (admin)');
-assert.equal(profileLabel(user), 'Mina (admin)');

package/bench/tasks/t02-signature-cochange/task.json

@@ -1,12 +0,0 @@
-{
-  "schema": "sks.bench-task.v1",
-  "id": "t02-signature-cochange",
-  "kind": "feature",
-  "prompt": "formatUserLabel이 role을 받도록 시그니처를 바꾸고 참조 3곳을 함께 수정하라.",
-  "success": {
-    "command": "npm test --silent",
-    "must_pass": true,
-    "max_diff_lines": 90,
-    "forbidden_patterns": ["catch \\{\\s*\\}"]
-  }
-}

package/bench/tasks/t03-type-puzzle/repo/package.json

@@ -1,9 +0,0 @@
-{
-  "name": "bench-t03-type-puzzle",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "test": "node test.js"
-  }
-}

package/bench/tasks/t03-type-puzzle/repo/src/config.js

@@ -1,4 +0,0 @@
-export function parsePort(value, fallback = 3000) {
-  const parsed = Number(value);
-  return parsed || fallback;
-}

package/bench/tasks/t03-type-puzzle/repo/test.js

@@ -1,6 +0,0 @@
-import assert from 'node:assert/strict';
-import { parsePort } from './src/config.js';
-
-assert.equal(parsePort('0'), 0);
-assert.equal(parsePort('8080'), 8080);
-assert.equal(parsePort(''), 3000);

package/bench/tasks/t03-type-puzzle/task.json

@@ -1,13 +0,0 @@
-{
-  "schema": "sks.bench-task.v1",
-  "id": "t03-type-puzzle",
-  "kind": "bugfix",
-  "prompt": "parsePort가 숫자 0을 유효한 값으로 처리하지 못한다. 회귀 테스트를 추가하고 고쳐라.",
-  "success": {
-    "command": "npm test --silent",
-    "must_pass": true,
-    "must_contain_new_test": true,
-    "max_diff_lines": 60,
-    "forbidden_patterns": ["Number\\([^)]*\\) \\|\\|"]
-  }
-}

package/bench/tasks/t04-refactor-preserve/repo/package.json

@@ -1,9 +0,0 @@
-{
-  "name": "bench-t04-refactor-preserve",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "test": "node test.js"
-  }
-}

package/bench/tasks/t04-refactor-preserve/repo/src/cart.js

@@ -1,8 +0,0 @@
-export function totalCart(lines) {
-  let total = 0;
-  for (const line of lines) {
-    total += line.price * line.qty;
-    if (line.discount) total -= line.price * line.qty * line.discount;
-  }
-  return Math.round(total * 100) / 100;
-}

package/bench/tasks/t04-refactor-preserve/repo/test.js

@@ -1,4 +0,0 @@
-import assert from 'node:assert/strict';
-import { totalCart } from './src/cart.js';
-
-assert.equal(totalCart([{ price: 10, qty: 2 }, { price: 5, qty: 1, discount: 0.2 }]), 24);

package/bench/tasks/t04-refactor-preserve/task.json

@@ -1,12 +0,0 @@
-{
-  "schema": "sks.bench-task.v1",
-  "id": "t04-refactor-preserve",
-  "kind": "refactor",
-  "prompt": "cart total 계산을 더 읽기 쉽게 리팩터하되 동작은 보존하라.",
-  "success": {
-    "command": "npm test --silent",
-    "must_pass": true,
-    "max_diff_lines": 80,
-    "forbidden_patterns": ["TODO", "console\\.log"]
-  }
-}

package/bench/tasks/t05-performance/repo/package.json

@@ -1,9 +0,0 @@
-{
-  "name": "bench-t05-performance",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "test": "node test.js"
-  }
-}

package/bench/tasks/t05-performance/repo/src/pairs.js

@@ -1,9 +0,0 @@
-export function countPairs(values, target) {
-  let count = 0;
-  for (let i = 0; i < values.length; i += 1) {
-    for (let j = i + 1; j < values.length; j += 1) {
-      if (values[i] + values[j] === target) count += 1;
-    }
-  }
-  return count;
-}

package/bench/tasks/t05-performance/repo/test.js

@@ -1,11 +0,0 @@
-import assert from 'node:assert/strict';
-import { performance } from 'node:perf_hooks';
-import { countPairs } from './src/pairs.js';
-
-assert.equal(countPairs([1, 2, 3, 4], 5), 2);
-const values = Array.from({ length: 6000 }, (_, index) => index % 200);
-const started = performance.now();
-const count = countPairs(values, 199);
-const elapsed = performance.now() - started;
-assert.equal(count, 90000);
-assert.ok(elapsed < 250, `too slow: ${elapsed}ms`);

package/bench/tasks/t05-performance/task.json

@@ -1,12 +0,0 @@
-{
-  "schema": "sks.bench-task.v1",
-  "id": "t05-performance",
-  "kind": "bugfix",
-  "prompt": "countPairs가 큰 입력에서 시간 초과된다. 동작을 유지하면서 기준 시간 안에 들어오게 고쳐라.",
-  "success": {
-    "command": "npm test --silent",
-    "must_pass": true,
-    "max_diff_lines": 80,
-    "forbidden_patterns": ["setTimeout", "catch \\{\\s*\\}"]
-  }
-}

package/bench/tasks/t06-mistake-rule/repo/package.json

@@ -1,9 +0,0 @@
-{
-  "name": "bench-t06-mistake-rule",
-  "version": "0.0.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "test": "node test.js"
-  }
-}

package/bench/tasks/t06-mistake-rule/repo/src/loader.js

@@ -1,6 +0,0 @@
-export async function loadJson(readText) {
-  try {
-    return JSON.parse(await readText());
-  } catch (err) {}
-  return null;
-}

package/bench/tasks/t06-mistake-rule/repo/test.js

@@ -1,7 +0,0 @@
-import assert from 'node:assert/strict';
-import fs from 'node:fs/promises';
-import { loadJson } from './src/loader.js';
-
-const source = await fs.readFile(new URL('./src/loader.js', import.meta.url), 'utf8');
-assert.ok(!/catch\s*\([^)]*\)\s*\{\s*\}/.test(source), 'empty catch must be removed');
-await assert.rejects(() => loadJson(async () => '{bad json'));