sneakoscope 6.2.0 → 6.4.0

package/dist/scripts/zellij-worker-pane-manager-single-owner-check.js

@@ -4,13 +4,14 @@ import path from 'node:path';
 import { packageRoot } from '../core/fsx.js';
 const root = packageRoot();
 const managerPath = path.join(root, 'src', 'core', 'zellij', 'zellij-worker-pane-manager.ts');
-const nativePath = path.join(root, 'src', 'core', 'agents', 'native-cli-session-swarm.ts');
+const nativePath = path.join(root, 'src', 'core', 'agents', 'native-cli-worker-runtime.ts');
 const manager = await fs.readFile(managerPath, 'utf8');
 const native = await fs.readFile(nativePath, 'utf8');
 const managerOwnsNewPane = /runZellij\(\[[\s\S]{0,800}'new-pane'/.test(manager)
     || (manager.includes("'new-pane'") && manager.includes('const newPaneArgs') && manager.includes('runZellij(newPaneArgs'));
 const nativeDirectNewPane = /runZellij\(\[[\s\S]{0,500}'new-pane'/.test(native);
-const nativeUsesManager = native.includes('openWorkerPane({') && native.includes('closeWorkerPane({');
+const nativeUsesManager = (native.includes('openWorkerPane({')
+    || native.includes('openHeadlessByDesignViewportWorker(')) && native.includes('closeWorkerPane({');
 const dynamicDirection = manager.includes("'--direction', directionRequested") && manager.includes("'--near-current-pane'");
 const fallbackRecorded = manager.includes('worker_direction_applied')
     && manager.includes("directionApplied = rightColumn ? 'down' : 'unknown'")
@@ -32,8 +33,8 @@ emit({
     },
     blockers: ok ? [] : [
         ...(!managerOwnsNewPane ? ['worker_pane_manager_new_pane_missing'] : []),
-        ...(nativeDirectNewPane ? ['native_cli_session_swarm_direct_new_pane'] : []),
-        ...(!nativeUsesManager ? ['native_cli_session_swarm_not_using_worker_pane_manager'] : []),
+        ...(nativeDirectNewPane ? ['native_cli_worker_runtime_direct_new_pane'] : []),
+        ...(!nativeUsesManager ? ['native_cli_worker_runtime_not_using_worker_pane_manager'] : []),
         ...(!dynamicDirection ? ['zellij_worker_dynamic_direction_missing'] : []),
         ...(!fallbackRecorded ? ['zellij_worker_direction_fallback_not_recorded'] : []),
         ...(!slotAnchorOwned ? ['zellij_worker_slot_column_anchor_not_owned'] : [])
@@ -44,4 +45,3 @@ function emit(report) {
     if (!report.ok)
         process.exitCode = 1;
 }
-//# sourceMappingURL=zellij-worker-pane-manager-single-owner-check.js.map

package/dist/scripts/zellij-worker-pane-real-ui-blackbox.js

@@ -0,0 +1,201 @@
+#!/usr/bin/env node
+// @ts-nocheck
+import fs from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { spawn } from 'node:child_process';
+import { assertGate, emitGate, readText, root } from './sks-1-18-gate-lib.js';
+import { ensureDistFresh } from './lib/ensure-dist-fresh.js';
+const requireReal = process.env.SKS_REQUIRE_ZELLIJ === '1' || process.argv.includes('--require-real');
+const manager = readText('src/core/zellij/zellij-worker-pane-manager.ts');
+const schema = readText('src/core/agents/agent-schema.ts');
+const runtime = readText('src/core/agents/native-cli-worker-runtime.ts');
+assertGate(manager.includes('action') && manager.includes('new-pane'), 'worker pane manager must call zellij action new-pane');
+assertGate(manager.includes('list-panes') && manager.includes('dump-screen'), 'worker pane proof must reconcile real list-panes/dump-screen evidence');
+assertGate(schema.includes('AgentWorkerPlacement') && runtime.includes("placement === 'zellij-pane'"), 'worker placement must control Zellij panes independently of backend');
+if (!requireReal) {
+    emitGate('zellij:worker-pane-real-ui:blackbox', { real_required: false, proof_mode: 'source_contract' });
+    process.exit(0);
+}
+const { spawnSync } = await import('node:child_process');
+const available = spawnSync('zellij', ['--version'], { encoding: 'utf8' });
+assertGate(available.status === 0, 'SKS_REQUIRE_ZELLIJ=1 requires zellij binary', { stderr: available.stderr });
+const freshness = ensureDistFresh({ rebuild: false });
+assertGate(freshness.ok === true, 'dist must be fresh before real Zellij worker-pane blackbox', freshness);
+const zellij = await import(pathToFileURL(path.join(root, 'dist', 'core', 'zellij', 'zellij-command.js')).href);
+const workerPane = await import(pathToFileURL(path.join(root, 'dist', 'core', 'zellij', 'zellij-worker-pane-manager.js')).href);
+const missionId = `M-zellij-worker-pane-real-${Date.now()}`;
+const sessionName = `sks-worker-pane-real-${process.pid}`;
+const ledgerRoot = path.join(root, '.sneakoscope', 'missions', missionId, 'agents');
+fs.rmSync(path.join(root, '.sneakoscope', 'missions', missionId), { recursive: true, force: true });
+fs.mkdirSync(ledgerRoot, { recursive: true });
+await zellij.runZellij(['kill-session', sessionName], { cwd: root, timeoutMs: 5000, optional: true });
+const attachedClient = startAttachedZellijClient(sessionName);
+await sleep(1500);
+await zellij.runZellij(['--session', sessionName, 'action', 'send-keys', 'Esc'], { cwd: root, timeoutMs: 5000, optional: true });
+await sleep(250);
+const before = await zellij.runZellij(['--session', sessionName, 'action', 'list-panes', '--json', '--all'], { cwd: root, timeoutMs: 5000, optional: true });
+const beforeCount = parsePaneRows(before.stdout_tail).length;
+const beforeTerminalCount = parsePaneRows(before.stdout_tail).filter((row) => row && row.is_plugin !== true).length;
+const records = [];
+try {
+    for (let index = 1; index <= 3; index += 1) {
+        const slotId = `slot-${String(index).padStart(3, '0')}`;
+        const workerDir = path.join('sessions', slotId, 'gen-1', 'worker');
+        const absWorkerDir = path.join(ledgerRoot, workerDir);
+        fs.mkdirSync(absWorkerDir, { recursive: true });
+        const heartbeatRel = path.join(workerDir, 'worker-heartbeat.jsonl');
+        const resultRel = path.join(workerDir, 'worker-result.json');
+        const stdoutRel = path.join(workerDir, 'worker.stdout.log');
+        const stderrRel = path.join(workerDir, 'worker.stderr.log');
+        const heartbeatAbs = path.join(ledgerRoot, heartbeatRel);
+        const resultAbs = path.join(ledgerRoot, resultRel);
+        const backend = index === 1 ? 'codex-sdk' : index === 2 ? 'local-llm' : 'python-codex-sdk';
+        const expectedTitle = `${slotId}/gen-1 · WT:WT-${String(index).padStart(4, '0')} · branch:fixture · ${backend} · fast · codex-lb · active`;
+        const workerScript = [
+            "const fs=require('fs');",
+            `fs.appendFileSync(${JSON.stringify(heartbeatAbs)}, JSON.stringify({ok:true, slot:${JSON.stringify(slotId)}, ts:new Date().toISOString()})+'\\n');`,
+            `fs.writeFileSync(${JSON.stringify(resultAbs)}, JSON.stringify({schema:'sks.agent-result.v1', status:'done', slot:${JSON.stringify(slotId)}, heartbeat_seen:true}, null, 2)+'\\n');`,
+            "setTimeout(()=>process.exit(0), 30000);"
+        ].join('');
+        const record = await workerPane.openWorkerPane({
+            root: ledgerRoot,
+            missionId,
+            sessionName,
+            slotId,
+            generationIndex: 1,
+            sessionId: `${slotId}-gen-1`,
+            workerArtifactDir: workerDir,
+            workerCommand: `printf ${shellQuote(`\u001b]2;${expectedTitle}\u0007`)}; ${process.execPath} -e ${shellQuote(workerScript)}`,
+            resultPath: resultRel,
+            heartbeatPath: heartbeatRel,
+            patchEnvelopePath: path.join(workerDir, 'worker-patch-envelope.json'),
+            stdoutLog: stdoutRel,
+            stderrLog: stderrRel,
+            cwd: root,
+            serviceTier: 'fast',
+            backend,
+            statusLabel: 'active',
+            worktree: { id: `WT-${String(index).padStart(4, '0')}`, path: root, branch: 'fixture' }
+        });
+        records.push(record);
+    }
+    await sleep(750);
+    const listed = await zellij.runZellij(['--session', sessionName, 'action', 'list-panes', '--json', '--all'], { cwd: root, timeoutMs: 5000, optional: false });
+    const rows = parsePaneRows(listed.stdout_tail);
+    const terminalRows = rows.filter((row) => row && row.is_plugin !== true);
+    const titles = rows.map((row) => String(row.title || row.name || row.pane_name || ''));
+    const matchedTitles = records.filter((record) => titles.includes(record.pane_title)).length;
+    const commandMatchedWorkers = records.filter((record) => rows.some((row) => {
+        const command = `${row.terminal_command || ''} ${row.pane_command || ''} ${row.command || ''}`;
+        return command.includes(missionId) && command.includes(record.slot_id);
+    })).length;
+    const requestedTitleCommands = records.filter((record) => {
+        const args = Array.isArray(record.launch?.args) ? record.launch.args.map(String) : [];
+        return args.includes('--name') && args.includes(record.pane_title);
+    }).length;
+    const dump = await zellij.runZellij(['--session', sessionName, 'action', 'dump-screen'], { cwd: root, timeoutMs: 5000, optional: true });
+    const heartbeatSeen = records.filter((record) => fs.existsSync(path.join(ledgerRoot, record.heartbeat_path))).length;
+    const resultSeen = records.filter((record) => fs.existsSync(path.join(ledgerRoot, record.worker_result_path))).length;
+    const realPaneIds = records.filter((record) => workerPane.isRealZellijWorkerPaneIdSource(record.pane_id_source) && record.pane_id).length;
+    const workerKindRecords = records.filter((record) => record.pane_kind === 'worker_codex_sdk').length;
+    const workerPrimitiveRecords = records.filter((record) => record.scaling_primitive === 'native_cli_process_in_zellij_worker_pane').length;
+    const recordProofOk = records.length === 3
+        && realPaneIds === 3
+        && workerKindRecords === 3
+        && workerPrimitiveRecords === 3
+        && requestedTitleCommands === 3
+        && heartbeatSeen === 3
+        && resultSeen === 3;
+    const listPanesVisibilityOk = matchedTitles === 3
+        || commandMatchedWorkers === 3
+        || terminalRows.length >= beforeTerminalCount + 3;
+    const report = {
+        schema: 'sks.zellij-worker-pane-real-ui-blackbox.v1',
+        ok: recordProofOk && dump.ok,
+        real_required: true,
+        zellij_version: available.stdout.trim(),
+        mission_id: missionId,
+        session_name: sessionName,
+        before_pane_count: beforeCount,
+        before_terminal_pane_count: beforeTerminalCount,
+        after_pane_count: rows.length,
+        terminal_pane_count: terminalRows.length,
+        worker_pane_count: records.length,
+        real_pane_ids: realPaneIds,
+        worker_kind_records: workerKindRecords,
+        worker_primitive_records: workerPrimitiveRecords,
+        matched_titles: matchedTitles,
+        command_matched_workers: commandMatchedWorkers,
+        requested_title_commands: requestedTitleCommands,
+        heartbeat_seen: heartbeatSeen,
+        result_seen: resultSeen,
+        dump_screen_ok: dump.ok,
+        record_proof_ok: recordProofOk,
+        list_panes_visibility_ok: listPanesVisibilityOk,
+        pane_titles: records.map((record) => record.pane_title),
+        pane_id_sources: records.map((record) => record.pane_id_source),
+        proof_root: ledgerRoot,
+        blockers: []
+    };
+    if (!report.ok) {
+        report.blockers = [
+            ...(realPaneIds === 3 ? [] : ['real_worker_pane_ids_missing']),
+            ...(workerKindRecords === 3 ? [] : ['worker_pane_kind_missing']),
+            ...(workerPrimitiveRecords === 3 ? [] : ['worker_pane_scaling_primitive_missing']),
+            ...(requestedTitleCommands === 3 ? [] : ['worker_pane_title_request_missing']),
+            ...(heartbeatSeen === 3 ? [] : ['worker_heartbeat_missing']),
+            ...(resultSeen === 3 ? [] : ['worker_result_missing']),
+            ...(dump.ok ? [] : ['worker_pane_dump_screen_failed'])
+        ];
+    }
+    fs.mkdirSync(path.join(root, '.sneakoscope', 'reports'), { recursive: true });
+    fs.writeFileSync(path.join(root, '.sneakoscope', 'reports', 'zellij-worker-pane-real-ui-blackbox.json'), `${JSON.stringify(report, null, 2)}\n`);
+    emitGate('zellij:worker-pane-real-ui:blackbox', report);
+    if (!report.ok)
+        process.exitCode = 1;
+}
+finally {
+    await zellij.runZellij(['kill-session', sessionName], { cwd: root, timeoutMs: 5000, optional: true });
+    safeKill(attachedClient, 'SIGTERM');
+    await sleep(250);
+    safeKill(attachedClient, 'SIGKILL');
+}
+function parsePaneRows(text) {
+    if (!String(text || '').trim())
+        return [];
+    try {
+        const parsed = JSON.parse(String(text));
+        if (Array.isArray(parsed))
+            return parsed;
+        if (Array.isArray(parsed?.panes))
+            return parsed.panes;
+        return [];
+    }
+    catch {
+        return [];
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function shellQuote(value) {
+    return `'${String(value).replace(/'/g, `'\\''`)}'`;
+}
+function startAttachedZellijClient(sessionName) {
+    const logFile = path.join(root, '.sneakoscope', 'reports', `${sessionName}.script.log`);
+    fs.mkdirSync(path.dirname(logFile), { recursive: true });
+    return spawn('script', ['-q', logFile, 'zellij', 'attach', '--create', sessionName], {
+        cwd: root,
+        stdio: ['ignore', 'ignore', 'ignore']
+    });
+}
+function safeKill(child, signal) {
+    try {
+        if (!child.killed)
+            child.kill(signal);
+    }
+    catch {
+        // Best-effort cleanup for the disposable pseudo-terminal client.
+    }
+}

package/infra-harness-gates.json

@@ -68,7 +68,7 @@
       "cache": {
         "enabled": false,
         "inputs": [
-          "src/scripts/zellij-developer-controls.ts",
+          "src/scripts/zellij-developer-controls-check.ts",
           "src/core/zellij/**",
           "src/core/naruto/**",
           "src/core/release/**",
@@ -124,7 +124,7 @@
       "cache": {
         "enabled": false,
         "inputs": [
-          "src/scripts/zellij-dynamic-pane-lifecycle.ts",
+          "src/scripts/zellij-dynamic-pane-lifecycle-check.ts",
           "src/core/zellij/**",
           "src/core/naruto/**",
           "src/core/release/**",
@@ -564,7 +564,7 @@
           "package.json",
           "release-gates.v2.json",
           "src/core/zellij/**",
-          "src/core/agents/native-cli-session-swarm.ts",
+          "src/core/agents/native-cli-worker-runtime.ts",
           "src/scripts/zellij-right-column-headless-overflow-check.ts"
         ]
       },
@@ -589,7 +589,7 @@
       "cache": {
         "enabled": false,
         "inputs": [
-          "src/scripts/zellij-right-column-manager.ts",
+          "src/scripts/zellij-right-column-manager-check.ts",
           "src/core/zellij/**",
           "src/core/naruto/**",
           "src/core/release/**",
@@ -827,7 +827,7 @@
           "package.json",
           "release-gates.v2.json",
           "src/core/zellij/**",
-          "src/core/agents/native-cli-session-swarm.ts",
+          "src/core/agents/native-cli-worker-runtime.ts",
           "src/scripts/zellij-slot-only-ui-check.ts"
         ]
       },
@@ -909,7 +909,7 @@
           "package.json",
           "release-gates.v2.json",
           "src/core/zellij/**",
-          "src/core/agents/native-cli-session-swarm.ts",
+          "src/core/agents/native-cli-worker-runtime.ts",
           "src/scripts/zellij-slot-renderer-proof-semantics-check.ts"
         ]
       },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "6.2.0",
+  "version": "6.4.0",
   "description": "Proof-first Codex trust layer for bounded agent workflows, search visibility evidence, and release integrity gates.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -33,42 +33,23 @@
     "!dist/**/*.tsbuildinfo",
     "!dist/**/__tests__",
     "!dist/**/*.test.js",
-    "!dist/scripts/*blackbox*.js",
-    "!dist/scripts/release-readiness-report.js",
-    "!dist/scripts/readme-architecture-imagegen-official-check.js",
-    "!dist/scripts/codex-0139-feature-probes-check.js",
-    "!dist/scripts/codex-0139-marketplace-source-check.js",
-    "!dist/scripts/gpt-image-2-real-file-smoke.js",
-    "!dist/scripts/official-docs-compat-report.js",
-    "!dist/scripts/codex-0-134-official-compat-report.js",
-    "!dist/scripts/release-metadata-1-16-check.js",
-    "!dist/scripts/release-metadata-1-17-check.js",
-    "!dist/scripts/release-metadata-1-19-check.js",
-    "!dist/scripts/check-source-runtime.js",
-    "!dist/scripts/loop-*-check.js",
-    "!dist/scripts/uninstall-inventory-check.js",
-    "!dist/scripts/performance-baseline-check.js",
-    "!dist/scripts/performance-improvement-report-check.js",
-    "!dist/scripts/gate-timing-check.js",
-    "!dist/scripts/release-runner-efficiency-check.js",
-    "!dist/scripts/command-performance-scorecard-check.js",
-    "!dist/scripts/dollar-performance-scorecard-check.js",
-    "!dist/scripts/retention-long-run-smoke-check.js",
-    "!dist/scripts/ops-maturity-scorecard-check.js",
-    "!dist/scripts/naruto-real-parallelism-blackbox.js",
-    "!dist/scripts/agent-native-release-gate.js",
-    "!dist/scripts/release-parallel-check.js",
-    "dist/scripts/doctor-context7-mcp-repair-blackbox.js",
-    "dist/scripts/doctor-fix-production-blackbox.js",
-    "dist/scripts/doctor-startup-config-repair-blackbox.js",
-    "dist/scripts/doctor-supabase-mcp-repair-blackbox.js",
-    "dist/scripts/project-skill-dedupe-blackbox.js",
-    "dist/scripts/supabase-secret-preservation-blackbox.js",
-    "dist/scripts/update-preserves-supabase-keys-blackbox.js",
+    "!dist/core/telegram/mini-app.js",
+    "!dist/scripts/**",
+    "dist/scripts/core-skill-no-drift-check.js",
+    "dist/scripts/{agent-message-bus-reader-check.js,all-feature-deep-completion-check.js,appshots-thread-attachment-discovery-check.js,architecture-guard-check.js,build-dist.js,build-once-runner-check.js,canonical-test-runner.js,certificate-sla-check.js,changelog-check.js,check-architecture.js,check-cli-entrypoint.js,check-command-module-budget.js,check-feature-quality.js,check-legacy-free.js,check-pipeline-budget.js,check-pipeline-runtime.js,check-publish-tag.js,check-route-modularity.js,check-runtime-schemas.js,cli-output-consistency-check.js,codex-0-134-runner-truth-check.js,codex-0-137-compat-check.js,codex-0138-capability-artifact-check.js,codex-0138-capability-check.js,codex-0138-doctor-check.js,codex-0138-feature-probes-check.js,codex-0140-capability-check.js,codex-0140-feature-probes-check.js,codex-0144-app-server-v2-check.js,codex-0144-binary-identity-check.js,codex-0144-capability-check.js,codex-0144-core-real-probes-check.js,codex-0144-manifest-check.js,codex-0144-policy-check.js,codex-0144-thread-store-check.js,codex-agent-role-rich-content-check.js,codex-agent-role-sync-check.js,codex-agent-type-routing-check.js,codex-app-execution-profile-check.js,codex-app-fast-ui-preservation-check.js,codex-app-handoff-check.js,codex-app-handoff-launch-check.js,codex-config-load-probe.js,codex-control-all-pipelines-check.js,codex-control-event-stream-ledger-check.js,codex-control-tool-output-continuity-audit-check.js,codex-lb-fast-mode-truth-check.js,codex-lb-fast-ui-preservation-check.js,codex-lb-gpt56-fast-profile-check.js,codex-native-agent-role-content-check.js,codex-native-feature-broker-blackbox.js,codex-native-feature-broker-check.js,codex-native-harness-compat-check.js,codex-native-hook-lifecycle-proof-check.js,codex-native-runtime-e2e-fixture.js,codex-permission-profiles-check.js,codex-plugin-app-template-policy-check.js,codex-project-config-policy-splitter-check.js,codex-sdk-all-pipelines-check.js,codex-sdk-backend-router-check.js,codex-sdk-capability-check.js,codex-sdk-event-stream-ledger-check.js,codex-sdk-real-smoke-check.js,competitor-scorecard-check.js,concurrent-session-collision-check.js,context7-evidence-dedupe-check.js,core-skill-card-schema-check.js,core-skill-deployment-snapshot-check.js,core-skill-heldout-validation-check.js,core-skill-no-inference-optimizer-check.js,core-skill-patch-check.js,core-skill-route-runtime-integration-check.js,db-route-materialization-check.js,dfix-fixture-check.js,dfix-patch-handoff-check.js,dfix-verification-check.js,dfix-verification-recommendation-check.js,docs-truthfulness-check.js,doctor-codex-app-harness-check.js,doctor-context7-mcp-repair-blackbox.js,doctor-fastpath-check.js,doctor-fix-production-blackbox.js,doctor-fix-proves-codex-read-check.js,doctor-fixes-codex-app-fast-ui-check.js,doctor-idempotence-check.js,doctor-ops-semantics-check.js,doctor-startup-config-repair-blackbox.js,doctor-supabase-mcp-repair-blackbox.js,ensure-bin-executable.js,evidence-flagship-coverage-check.js,fast-codex-service-tier-proof-check.js,fixtures/fake-codex-config-loader.js,fsx-hotpath-check.js,gate-policy-audit-check.js,geo-claim-evidence-check.js,geo-cli-blackbox-check.js}",
+    "dist/scripts/{geo-crawler-policy-check.js,git-worktree-checkpoint-check.js,git-worktree-cross-rebase-check.js,git-worktree-diff-envelope-check.js,git-worktree-dirty-lock-check.js,git-worktree-dirty-main-detection-check.js,git-worktree-integration-primary-check.js,git-worktree-manifest-append-check.js,git-worktree-untracked-diff-check.js,goal-artifact-compat-check.js,harness-benchmark-check.js,high-risk-contracts-check.js,hook-latency-budget-check.js,hook-latency-quantum-check.js,image-artifact-path-contract-check.js,imagegen-real-smoke-check.js,import-graph-budget-check.js,init-deep-backup-retention-check.js,installed-package-smoke-check.js,legacy-gate-inventory-check.js,legacy-gate-purge-check.js,legacy-strong-inventory-check.js,current-surface-update-e2e-check.js,current-upgrade-matrix-check.js,lib/codex-sdk-gate-lib.js,lib/ensure-dist-fresh.js,lib/git-worktree-fixture.js,lib/valid-png-fixture.js,local-collab-all-pipelines-final-gpt-check.js,loop-directive-check-lib.js,loop-integration-finalizer-check.js,loop-worker-fixture-child.js,mad-sks-sql-plane-capability-check.js,current-command-surface-check.js,mad-sks-sql-plane-lifecycle-hook-decision-check.js,mad-sks-launch-sql-plane-boundary-check.js,mad-sks-sql-plane-result-lifecycle-check.js,mad-preflight-blocks-unreadable-config-check.js,mad-sks-app-ui-no-mutation-check.js,managed-config-merge-check.js,mcp-plugin-inventory-check.js,mcp-tool-naming-parity-check.js,model-call-concurrency-check.js,mutation-callsite-coverage-check.js,naruto-codex-e2e-check.js,naruto-worktree-coding-blackbox.js,naruto-write-e2e-check.js,native-capability-postcheck-check.js,native-capability-repair-matrix-check.js,native-image-generation-repair-check.js,official-subagent-workflow-check.js,ops-diagnostics-bundle-check.js,package-published-contract-check.js,packlist-performance-check.js,parallel-production-smoke-check.js,perf-budget-check.js,pipeline-codex-native-doctor-mad-routing-check.js,pipeline-codex-native-doctor-mad-routing-real-blackbox.js,pipeline-codex-native-image-routing-check.js,pipeline-codex-native-image-routing-real-blackbox.js,pipeline-codex-native-loop-routing-check.js,pipeline-codex-native-loop-routing-real-blackbox.js,pipeline-codex-native-qa-routing-check.js,pipeline-codex-native-qa-routing-real-blackbox.js,pipeline-codex-native-research-routing-check.js,pipeline-codex-native-research-routing-real-blackbox.js,ppt-full-e2e-blackbox-check.js,ppt-real-export-adapter-check.js,ppt-real-imagegen-smoke-check.js,ppt-real-imagegen-wiring-check.js,ppt-reexport-rereview-check.js,prepublish-fast-check.js,prepublish-release-check-or-fast.js,probe-memoization-check.js,product-design-plugin-routing-check.js,project-skill-dedupe-blackbox.js,prompt-placeholder-guard-check.js,proof-root-cause-policy-check.js,provider-badge-context-check.js,python-codex-sdk-all-pipelines-check.js,qa-loop-app-handoff-capability-check.js,qa-loop-app-handoff-check.js,qa-loop-app-handoff-cli-check.js,qa-loop-app-handoff-confirmation-check.js,qa-loop-app-handoff-gate-lifecycle-check.js,qa-loop-app-handoff-launch-check.js,qa-loop-app-handoff-status-lifecycle-check.js,qa-loop-budget-policy-check.js,qa-loop-effort-escalation-check.js,qa-loop-execution-profile-routing-check.js,qa-loop-image-path-exposure-check.js,qa-loop-image-path-prompt-injection-check.js,release-affected-selector-check.js,release-aggressive-resource-governor-check.js,release-cache-glob-hashing-check.js,release-cache-input-classifier-check.js,release-cache-neutralization-report-check.js,release-cache-version-neutral-fixture-check.js}",
+    "dist/scripts/{release-check-stamp.js,release-dag-full-coverage-check.js,release-dist-freshness-check.js,release-dynamic-presets-check.js,release-file-ownership-check.js,release-full-parallelism-blackbox.js,release-gate-batch-runner-check.js,release-gate-budget-check.js,release-gate-dag-runner-check.js,release-gate-dag-runner.js,release-gate-script-parity-check.js,release-latency-slo-check.js,release-macos-menubar-proof.js,release-main-push-guard.js,release-main-push-receipt.js,release-metadata-1-19-check.js,release-metadata-check.js,release-pack-receipt.js,release-parallel-speed-budget-check.js,release-proof-truth-check.js,release-provenance-check.js,release-real-check.js,release-runtime-truth-matrix-check.js,release-speed-summary.js,release-version-truth-check.js,research-blueprint-densifier-check.js,research-claim-builder-check.js,research-complete-package-fixture-check.js,research-execution-profile-routing-check.js,research-final-reviewer-blackbox.js,responses-retry-policy-centralized-check.js,retention-apply-smoke-check.js,retention-budget-check.js,retention-dry-run-check.js,rollback-recovery-smoke-check.js,route-intent-regression-check.js,runtime-dist-parity-check.js,runtime-no-src-mjs-check.js,runtime-current-terminal-check.js,runtime-proof-summary-check.js,runtime-script-pack-closure-check.js,runtime-ts-rust-boundary-check.js,runtime-ts-source-of-truth-check.js,scheduler-batch-dispatch-check.js,scheduler-parallel-proof-consistency-check.js,scheduler-utilization-integral-check.js,search-visibility-gate-lib.js,secret-preservation-check.js,secret-preservation-guard-check.js,seo-audit-fixture-check.js,seo-cli-blackbox-check.js,seo-geo-geo-disambiguation-check.js,seo-geo-route-identity-check.js,seo-geo-skill-rich-content-check.js,seo-marketing-truthfulness-check.js,seo-metadata-sync-check.js,seo-no-mutation-by-default-check.js,shared-memory-fixture-check.js,side-effect-runtime-report-check.js,sizecheck.js,skill-name-canonicalizer-check.js,skills-manifest-continuity-check.js,sks-1-11-gate-lib.js,sks-1-12-real-execution-check-lib.js,sks-1-18-gate-lib.js,sks-3-1-4-directive-check-lib.js,sks-3-1-5-directive-check-lib.js,sks-3-1-6-directive-check-lib.js,sks-3-1-8-check-lib.js,sks-menubar-install-check.js,sks-uninstall-regression-check.js,sksd-daemon-check.js,supabase-secret-preservation-blackbox.js,super-search-live-smoke-check.js,super-search-local-http-smoke-check.js,super-search-offline-contract-check.js,super-search-provider-interface-check.js,triwiki-cache-key-check.js,triwiki-proof-bank-blackbox.js,triwiki-proof-bank-check.js,triwiki-proof-card-check.js,trust-fixture-check.js,type-surface-codex-app-check.js,ultra-router-auto-router-check.js,uninstall-inventory-check.js,update-fastpath-check.js,update-preserves-supabase-keys-blackbox.js,upgrade-migration-matrix-check.js,ux-review-extract-wires-real-extractor-check.js,ux-review-imagegen-blackbox-check.js,ux-review-patch-diff-recheck-check.js,ux-review-real-imagegen-smoke-check.js,ux-review-run-wires-imagegen-check.js,write-build-manifest.js,wrongness-fixture-check.js,zellij-capability-check.js,zellij-dashboard-pane-check.js,zellij-dashboard-watch.js,zellij-developer-controls-check.js,zellij-doctor-readiness-check.js}",
+    "dist/scripts/{zellij-dynamic-pane-lifecycle-check.js,zellij-fake-adapter-check.js,zellij-first-slot-down-stack-check.js,zellij-first-slot-down-stack-real-check.js,zellij-homebrew-policy-check.js,zellij-initial-main-only-blackbox.js,zellij-lane-renderer-check.js,zellij-launch-command-truth-check.js,zellij-layout-valid-check.js,zellij-pane-creation-lock-metrics-check.js,zellij-pane-lock-concurrency-blackbox.js,zellij-pane-lock-does-not-block-worker-check.js,zellij-pane-lock-open-worker-integration-blackbox.js,zellij-pane-proof-check.js,zellij-qa-app-handoff-status-check.js,zellij-real-session-cleanup-check.js,zellij-real-session-launch-check.js,zellij-right-column-geometry-proof.js,zellij-right-column-headless-overflow-check.js,zellij-right-column-manager-check.js,zellij-screen-proof-check.js,zellij-self-heal-check.js,zellij-self-heal-dry-run-check.js,zellij-self-heal-status-contract-check.js,zellij-self-heal-typed-blackbox.js,zellij-slot-column-anchor-check.js,zellij-slot-column-anchor-telemetry-check.js,zellij-slot-only-ui-check.js,zellij-slot-pane-renderer-check.js,zellij-slot-pane-stale-detection-check.js,zellij-slot-pane-telemetry-renderer-check.js,zellij-slot-renderer-proof-semantics-check.js,zellij-slot-telemetry-check.js,zellij-slot-telemetry-incremental-check.js,zellij-slot-telemetry-live-flush-check.js,zellij-slot-telemetry-performance-check.js,zellij-slot-telemetry-real-blackbox.js,zellij-slot-telemetry-renderer-check.js,zellij-slot-telemetry-runtime-check.js,zellij-spawn-on-demand-layout-check.js,zellij-stacked-capability-routing-check.js,zellij-stacked-fallback-integration-blackbox.js,zellij-stacked-version-matrix-check.js,zellij-stacked-version-parser-check.js,zellij-ui-design-check.js,zellij-update-missing-self-heal-check.js,zellij-update-prompt-matrix-check.js,zellij-update-prompt-mode-check.js,zellij-update-prompt-safety-check.js,zellij-worker-pane-manager-check.js,zellij-worker-pane-manager-single-owner-check.js,zellij-worker-pane-real-ui-blackbox.js}",
+    "!dist/core/evidence/flagship-proof-graph-validator.js",
+    "!dist/core/agents/agent-ledger-schemas.js",
+    "!dist/core/agents/agent-cleanup-executor.js",
+    "!dist/core/release/npm-stage-tarball-verifier.js",
+    "!dist/core/release/npm-stage-tarball-verifier-support.js",
     "!dist/vendor/openai-codex/rust-v0.131.0",
     "config/codex-releases/rust-v0.144.1.json",
     "config/bench-baseline.json",
     "config/competitor-scorecard-baseline.json",
+    "config/architecture-budgets.v1.json",
     "config/perf-budgets.v1.json",
     "release-gates.v2.json",
     "infra-harness-gates.json",
@@ -89,12 +70,12 @@
   },
   "scripts": {
     "build": "npm run build:clean",
-    "prepack": "npm run build",
-    "build:clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('.sneakoscope/cache/tsbuildinfo',{recursive:true,force:true})\" && tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
-    "build:incremental": "tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
+    "prepack": "node ./dist/scripts/prepublish-release-check-or-fast.js --prepack-build",
+    "build:clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('.sneakoscope/cache/tsbuildinfo',{recursive:true,force:true})\" && tsc -p tsconfig.build.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
+    "build:incremental": "tsc -p tsconfig.build.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
     "release:ensure-build": "node -e \"const fs=require('fs'),cp=require('child_process'); if(!fs.existsSync('dist/scripts/release-dist-freshness-check.js')){const npm=process.platform==='win32'?'npm.cmd':'npm'; const r=cp.spawnSync(npm,['run','build:clean','--silent'],{stdio:'inherit'}); process.exit(r.status==null?1:r.status)}\" && node ./dist/scripts/release-dist-freshness-check.js",
     "test": "node ./dist/scripts/canonical-test-runner.js",
-    "prepublishOnly": "node ./dist/scripts/prepublish-release-check-or-fast.js --block-lifecycle-publish",
+    "prepublishOnly": "node ./dist/scripts/prepublish-release-check-or-fast.js",
     "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",
     "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",
     "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",
@@ -105,6 +86,11 @@
     "release:dist-freshness": "node ./dist/scripts/release-dist-freshness-check.js",
     "release:provenance": "node ./dist/scripts/release-provenance-check.js",
     "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",
+    "release:file-ownership": "node ./dist/scripts/release-file-ownership-check.js",
+    "release:macos-menubar-proof": "node ./dist/scripts/release-macos-menubar-proof.js",
+    "release:main-push-guard": "node ./dist/scripts/release-main-push-guard.js",
+    "release:main-push-receipt": "node ./dist/scripts/release-main-push-receipt.js",
+    "release:pack-receipt": "node ./dist/scripts/release-pack-receipt.js",
     "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",
     "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",
     "typecheck": "tsc -p tsconfig.json --noEmit",
@@ -121,12 +107,12 @@
     "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",
     "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",
     "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",
-    "runtime:no-tmux": "node ./dist/scripts/runtime-no-tmux-check.js",
+    "runtime:terminal-current": "node ./dist/scripts/runtime-current-terminal-check.js",
     "zellij:capability": "node ./dist/scripts/zellij-capability-check.js",
     "zellij:layout-valid": "node ./dist/scripts/zellij-layout-valid-check.js",
     "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",
     "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",
-    "migration:upgrade-safety": "node ./dist/scripts/legacy-upgrade-matrix-check.js",
+    "migration:upgrade-safety": "node ./dist/scripts/current-upgrade-matrix-check.js",
     "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",
     "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",
     "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",
@@ -142,7 +128,6 @@
     "publish-tag:check": "node ./dist/scripts/check-publish-tag.js",
     "feature:check": "node ./dist/bin/sks.js features check --json",
     "feature-quality:check": "node ./dist/scripts/check-feature-quality.js --release",
-    "naruto:sim-active-pool-runtime": "node ./dist/scripts/naruto-real-active-pool-runtime-check.js",
     "core-skill:no-drift": "node ./dist/scripts/core-skill-no-drift-check.js",
     "skill:dedupe-blackbox": "node ./dist/scripts/project-skill-dedupe-blackbox.js",
     "release:check:affected": "npm run release:ensure-build --silent && node ./dist/scripts/release-gate-dag-runner.js --preset affected --changed-since auto --sla 5m",
@@ -151,11 +136,6 @@
     "release:check:confidence": "npm run release:ensure-build --silent && node ./dist/scripts/release-gate-dag-runner.js --preset confidence --changed-since auto --sla 5m",
     "release:check:full": "node ./dist/bin/sks.js doctor --fix --yes --json --report-file .sneakoscope/reports/release-check-full-doctor.json >/dev/null && npm run build:clean --silent && npm test --silent && node ./dist/scripts/release-gate-dag-runner.js --preset release --full && node ./dist/scripts/release-real-check.js --skip-release-check && npm run release:dist-freshness --silent && node ./dist/scripts/release-check-stamp.js write --preset release --full",
     "publish:packlist-performance": "node ./dist/scripts/packlist-performance-check.js",
-    "publish:dry-run-performance": "node ./dist/scripts/npm-publish-performance-check.js",
-    "publish:dry": "npm run publish:prep-ignore-scripts && npm pack --dry-run --ignore-scripts --json",
-    "publish:verify-ignore-scripts": "npm run release:dist-freshness --silent && npm run release:version-truth --silent && npm run publish:packlist-performance --silent && node ./dist/scripts/package-published-contract-check.js && npm run publish-tag:check --silent",
-    "publish:prep-ignore-scripts": "node ./dist/scripts/release-check-stamp.js verify && npm run publish:verify-ignore-scripts --silent && node ./dist/scripts/release-registry-check.js --require-unpublished --require-publish-auth --require-pack-proof && node ./dist/scripts/release-check-stamp.js verify",
-    "publish:ignore-scripts": "npm run publish:prep-ignore-scripts && npm publish --ignore-scripts",
     "gates:run": "node ./dist/scripts/release-gate-dag-runner.js",
     "policy:gate-audit": "node ./dist/scripts/gate-policy-audit-check.js",
     "release:dag-full-coverage": "node ./dist/scripts/release-dag-full-coverage-check.js",