sneakoscope 7.1.0 → 7.3.0

package/dist/core/init.js

@@ -18,6 +18,7 @@ import { AUTHORITATIVE_SKS_SKILL_ROOT_REFERENCE } from './codex-native/sks-skill
 import { currentGeneratedFileInventory, installCodexAgents, pruneStaleGeneratedFiles, REMOVED_SKS_SKILL_NAMES } from './init/skills.js';
 import { reconcileManagedSkillInstallation } from './init/managed-skill-install.js';
 import { backupInvalidToml, inspectOfficialSubagentToml, mergeOfficialSubagentConfig, officialSubagentConfigOwnershipProof, officialSubagentConfigWarnings, readInheritedOfficialSubagentConfigText, resolveInheritedOfficialSubagentConfigPath } from './subagents/official-subagent-config.js';
+import { escapeRegExp } from './text/regex.js';
 export { installGlobalSkills, installProjectSkills, installSkills } from './init/skills.js';
 const REFLECTION_MEMORY_PATH = '.sneakoscope/memory/q2_facts/post-route-reflection.md';
 const REMOVED_SKILL_TOKENS = new Set(REMOVED_SKS_SKILL_NAMES.map((name) => name.replace(/[^a-z0-9]/g, '')));
@@ -72,7 +73,6 @@ const SKS_SKILL_MANIFEST_FILE = '.sks-generated.json';
 const GENERATED_PRUNE_POLICY = 'remove_previous_sks_generated_paths_absent_from_current_manifest';
 export const REQUIRED_GENERATED_CODEX_APP_FEATURE_FLAGS = [
     'hooks',
-    'multi_agent',
     'fast_mode',
     'apps'
 ];
@@ -283,6 +283,7 @@ const AGENTS_BLOCK = [
     '- Keep trust-boundary validation, secrets, permissions, data integrity, rollback, accessibility, and explicit user requirements intact.',
     '- Database and destructive operations are read-only by default. Live mutation, publishing, deployment, credential changes, and other irreversible external actions require explicit scoped authorization.',
     '- Never fabricate fallback implementations or success evidence. If the real requested path is unavailable, stop with evidence.',
+    '- Never run `sks doctor --fix` yourself. When repair is needed, tell the user to run it in their own terminal and wait for confirmation.',
     '- Conflicting third-party Codex harness markers are removed from the live surface only via `sks conflicts cleanup --yes`; a backup is kept under `.sneakoscope/quarantine/other-harness/`.',
     '',
     '## Codex App',
@@ -630,11 +631,11 @@ export async function initProject(root, opts = {}) {
             project_install: 'npm i -D sneakoscope && npx sks setup --install-scope project'
         };
     }
-    const MANAGED_CODEX_FEATURE_FLAGS = ['hooks', 'multi_agent', 'fast_mode', 'apps'];
+    const MANAGED_CODEX_FEATURE_FLAGS = ['hooks', 'fast_mode', 'apps'];
     const REMOVED_CODEX_FEATURE_FLAGS = [
         'remote_control', 'fast_mode_ui', 'codex_git_commit', 'computer_use', 'browser_use',
         'browser_use_external', 'image_generation', 'in_app_browser', 'guardian_approval',
-        'tool_suggest', 'plugins', 'codex_hooks'
+        'tool_suggest', 'plugins', 'codex_hooks', 'multi_agent'
     ];
     function mergeManagedCodexConfigToml(existingContent = '', opts = {}) {
         let next = String(existingContent || '').trimEnd();
@@ -1155,6 +1156,3 @@ export function codexAppQuickReference(scope, commandPrefix) {
         'Publishing, deployment, live database mutation, destructive actions, and other irreversible external effects require explicit scoped authorization.'
     ].join('\n') + '\n';
 }
-function escapeRegExp(value) {
-    return String(value).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}

package/dist/core/json/records.js

@@ -0,0 +1,9 @@
+export function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+export function asRecordOrNull(value) {
+    return isRecord(value) ? value : null;
+}
+export function asRecordOrEmpty(value) {
+    return isRecord(value) ? value : {};
+}

package/dist/core/json-schema-validator.js

@@ -1,3 +1,4 @@
+import { isRecord } from './json/records.js';
 export function validateJsonSchema(value, schema, opts = {}) {
     const issues = [];
     const unsupported = [];
@@ -207,9 +208,6 @@ function runtimeType(value) {
         return 'integer';
     return typeof value;
 }
-function isRecord(value) {
-    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
-}
 function escapePath(value) {
     return /^[A-Za-z_$][\w$]*$/.test(value) ? value : JSON.stringify(value);
 }

package/dist/core/lean-engineering-policy.js

@@ -2,6 +2,7 @@ import { createHash } from 'node:crypto';
 export const LEAN_ENGINEERING_POLICY_ID = 'sks.lean-engineering-policy.v1';
 export const LEAN_DECISION_SCHEMA = 'sks.lean-decision.v1';
 export const LEAN_CHANGE_EVIDENCE_SCHEMA = 'sks.lean-change-evidence.v1';
+export const ENGINEERING_SANITY_POLICY_ID = 'sks.engineering-sanity-policy.v1';
 export const LEAN_SOLUTION_RUNGS = Object.freeze([
     'skip',
     'reuse-existing',
@@ -17,6 +18,10 @@ const CORE_ENGINEERING_DIRECTIVE_LINES = Object.freeze([
     'Use the real project mechanism. Follow current code and specifications and use authoritative tools or data; never substitute invented mocks, guessed heuristics, remembered architectures, or unsupported fallbacks.',
     'Preserve security, permissions, data integrity, rollback, accessibility, and explicit user requirements. If the real path is unavailable, stop and report evidence.'
 ]);
+const ENGINEERING_SANITY_POLICY_LINES = Object.freeze([
+    'Continuously review changed code and its real callers for basic SOLID boundaries, N+1 or repeated I/O, unbounded render/recursion/event/retry/polling loops, and disabled checks, swallowed failures, or other verification bypasses.',
+    'For database work, inspect the existing canonical data-access path first. Preserve one owned connection/pool lifecycle with bounded acquire, release, shutdown, and reconnect behavior; require atomic transactions, rollback and error propagation, idempotency, and post-commit invariant checks for sensitive, payment, ledger, or multi-step mutations.'
+]);
 const LEAN_ENGINEERING_POLICY_CANONICAL = CORE_ENGINEERING_DIRECTIVE_LINES.join('\n');
 export const LEAN_ENGINEERING_POLICY_HASH = createHash('sha256')
     .update(LEAN_ENGINEERING_POLICY_CANONICAL)
@@ -24,6 +29,10 @@ export const LEAN_ENGINEERING_POLICY_HASH = createHash('sha256')
     .slice(0, 16);
 export const CORE_ENGINEERING_DIRECTIVE_ID = 'sks.core-engineering-directive.v1';
 export const CORE_ENGINEERING_DIRECTIVE_HASH = LEAN_ENGINEERING_POLICY_HASH;
+export const ENGINEERING_SANITY_POLICY_HASH = createHash('sha256')
+    .update(ENGINEERING_SANITY_POLICY_LINES.join('\n'))
+    .digest('hex')
+    .slice(0, 16);
 export function leanPolicyReference() {
     return {
         policy_id: LEAN_ENGINEERING_POLICY_ID,
@@ -42,6 +51,12 @@ export function coreEngineeringDirectiveText() {
 export function coreEngineeringDirectiveReferenceText() {
     return `Apply the Core Engineering Directive (${CORE_ENGINEERING_DIRECTIVE_ID}/${CORE_ENGINEERING_DIRECTIVE_HASH}) from AGENTS.md exactly; do not expand it with legacy global rules.`;
 }
+export function engineeringSanityPolicyText() {
+    return [
+        `Engineering Sanity Policy (${ENGINEERING_SANITY_POLICY_ID}/${ENGINEERING_SANITY_POLICY_HASH}):`,
+        ...ENGINEERING_SANITY_POLICY_LINES
+    ].join('\n');
+}
 export function leanEngineeringCompactText() {
     return coreEngineeringDirectiveText();
 }
@@ -157,3 +172,42 @@ function booleanValue(value, fallback) {
 function record(value) {
     return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
 }
+const MONEY_SENSITIVE_PATTERN = /(^|[\/_.-])(payment|payout|billing|invoice|charge|refund|ledger|settlement|transaction|subscription|checkout|wallet|balance|payroll)([\/_.-]|s?\.|$)/i;
+export function isMoneySensitivePath(file) {
+    return MONEY_SENSITIVE_PATTERN.test(String(file || ''));
+}
+export function isTestPath(file) {
+    const path = String(file || '');
+    return /(^|\/)(__tests__|test|tests)(\/|$)/.test(path) || /\.(test|spec)\.[cm]?[jt]sx?$/.test(path);
+}
+export const TEST_VOLUME_ABSOLUTE_FLOOR = 200;
+export const TEST_VOLUME_RATIO_LIMIT = 4;
+export function assessTestVolume(entries = []) {
+    let addedTestLines = 0;
+    let addedSourceLines = 0;
+    let moneySensitive = false;
+    for (const entry of entries) {
+        const added = Number(entry?.lines_added || 0);
+        if (!Number.isFinite(added) || added <= 0)
+            continue;
+        if (isTestPath(entry?.path))
+            addedTestLines += added;
+        else {
+            addedSourceLines += added;
+            if (isMoneySensitivePath(entry?.path))
+                moneySensitive = true;
+        }
+    }
+    const ratio = addedSourceLines > 0 ? addedTestLines / addedSourceLines : null;
+    const overBudget = !moneySensitive
+        && addedTestLines >= TEST_VOLUME_ABSOLUTE_FLOOR
+        && ratio !== null
+        && ratio >= TEST_VOLUME_RATIO_LIMIT;
+    return {
+        added_test_lines: addedTestLines,
+        added_source_lines: addedSourceLines,
+        ratio,
+        money_sensitive: moneySensitive,
+        over_budget: overBudget
+    };
+}

package/dist/core/loops/loop-continuation-enforcer.js

@@ -1,6 +1,7 @@
 import path from 'node:path';
 import { nowIso, readJson, writeJsonAtomic } from '../fsx.js';
 import { loopPlanPath } from './loop-artifacts.js';
+import { isRecord } from '../json/records.js';
 export async function evaluateLoopContinuation(input) {
     const root = path.resolve(input.root || process.cwd());
     const plan = await readJson(loopPlanPath(root, input.missionId), null);
@@ -34,6 +35,3 @@ function loopNodes(value) {
     return value.graph.nodes
         .filter((node) => isRecord(node) && typeof node.loop_id === 'string');
 }
-function isRecord(value) {
-    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
-}

package/dist/core/mad-sks/sql-plane/mcp-executor.js

@@ -1,5 +1,6 @@
 import { performance } from 'node:perf_hooks';
 import { nowIso, sha256 } from '../../fsx.js';
+import { PACKAGE_VERSION } from '../../version.js';
 export class MadSksSqlPlaneMcpExecutor {
     profile;
     opts;
@@ -14,7 +15,7 @@ export class MadSksSqlPlaneMcpExecutor {
         if (this.client)
             return;
         const { Client, StreamableHTTPClientTransport } = await loadMcpSdk();
-        this.client = new Client({ name: 'sneakoscope-mad-sks-sql-plane', version: '4.2.0' });
+        this.client = new Client({ name: 'sneakoscope-mad-sks-sql-plane', version: PACKAGE_VERSION });
         const headers = authHeaders();
         const options = headers ? { requestInit: { headers } } : {};
         this.transport = new StreamableHTTPClientTransport(new URL(this.profile.server_url), options);

package/dist/core/mad-sks/sql-plane/policy.js

@@ -177,7 +177,8 @@ description: Enforce Sneakoscope Codex database safety before using SQL, Supabas
 ---
 
 Rules:
-- Default non-MAD-SKS mode is read-only and routes writes/destructive SQL to the DB safety gate.
+- Default non-MAD-SKS mode is read-only. When a migration is required, produce exactly one mission-local manual-migration.sql with active forward SQL and a complete rollback section that remains commented out, then tell the user to apply it manually.
+- Before any DB change, inspect the existing canonical adapter/query helper, pool/client ownership and acquire/release/shutdown/reconnect behavior, N+1/repeated I/O, and transaction integrity for sensitive or multi-step mutations.
 - Supabase MCP must be read-only and project-scoped by default.
 - Live execute_sql writes are blocked unless a bound active MAD-SKS sql-plane capability v2 is present.
 - Active MAD-SKS sql-plane is the explicit exception: SQL-plane mutations requested by $MAD-SKS or sks mad-sks sql|apply-migration are allowed, including DROP, DELETE, TRUNCATE, RLS/policy changes, and execute_sql/apply_migration, and must be executed with read-back verification.

package/dist/core/managed-assets/managed-assets-manifest.js

@@ -1,7 +1,8 @@
 import { sha256 } from '../fsx.js';
+import { PACKAGE_VERSION } from '../version.js';
 import { subagentModelProfile } from '../subagents/model-policy.js';
 export const MANAGED_ASSET_SCHEMA_VERSION = 1;
-export const MANAGED_ASSET_VERSION = '7.1.0';
+export const MANAGED_ASSET_VERSION = PACKAGE_VERSION;
 export const MANAGED_ASSET_MARKER = 'SKS-MANAGED-ASSET';
 export const MANAGED_OFFICIAL_SUBAGENT_MARKER = 'SKS-MANAGED-OFFICIAL-SUBAGENT';
 export const RETIRED_MANAGED_AGENT_ROLE_TOMBSTONES = Object.freeze([
@@ -23,7 +24,7 @@ export const MANAGED_OFFICIAL_SUBAGENT_ROLES = Object.freeze([
         codexName: 'worker',
         description: 'Luna Max execution subagent only for tiny, short-context, mechanical work with an explicit done condition.',
         policy: 'luna_max_mechanical',
-        keywords: ['tiny', 'short context', 'single file', 'mechanical', 'repeatable', 'exact rename', 'format only', 'typo'],
+        keywords: ['tiny', 'short context', 'single file', 'mechanical', 'repeatable', 'exact rename', 'format only', 'typo', 'simple search', 'typing', '단순 검색', '타이핑'],
         nicknames: ['Kite', 'Moss', 'Pico', 'Reed', 'Vale', 'Wren'],
         instructions: `You are a bounded execution subagent.
 
@@ -87,7 +88,7 @@ Return a concise result, evidence, risks, and next action.`
         description: 'Terra Medium read-only codebase explorer for read-heavy scans, entry points, ownership, dependencies, and distilled evidence.',
         policy: 'terra_medium_context_tools',
         sandbox: 'read-only',
-        keywords: ['explore', 'map', 'trace', 'inventory', 'locate', 'search', 'read-only'],
+        keywords: ['explore', 'map', 'trace', 'inventory', 'locate', 'search', 'read-only', 'large search', 'repository-wide search', '대규모 검색'],
         nicknames: ['Beacon', 'Compass', 'Maple', 'Scout'],
         instructions: `You are the read-only code explorer.
 

package/dist/core/mcp-config/codex-cli-adapter.js

@@ -2,6 +2,7 @@ import fsp from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { runProcess, which } from '../fsx.js';
+import { isRecord } from '../json/records.js';
 export class CodexMcpCliAdapter {
     configuredPath;
     findExecutable;
@@ -157,9 +158,6 @@ function failedTransform(publicError) {
         public_error: publicError
     };
 }
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
 async function defaultRun(command, args, options) {
     return runProcess(command, [...args], options);
 }

package/dist/core/mcp-config/config-reader.js

@@ -3,6 +3,8 @@ import { parseCodexConfigToml } from '../codex/codex-config-toml.js';
 import { publicMcpCommand, redactMcpError, redactMcpUrl, sanitizeMcpArgs } from './redaction.js';
 import { normalizeApprovalMode } from './secret-policy.js';
 import { MCP_DEFAULT_STARTUP_TIMEOUT_SEC, MCP_DEFAULT_TOOL_TIMEOUT_SEC, MCP_SERVER_CONFIG_SCHEMA } from './types.js';
+import { isRecord } from '../json/records.js';
+export { isRecord };
 export class McpConfigReadError extends Error {
     code;
     constructor(code, cause) {
@@ -117,9 +119,6 @@ export function privateInlineEnvironment(value) {
 export function rawStringArray(value) {
     return stringArray(value);
 }
-export function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
 function parseToolApprovalModes(value) {
     if (!isRecord(value))
         return {};

package/dist/core/mcp-config/guarded-patch.js

@@ -1,3 +1,4 @@
+import { escapeRegExp } from '../text/regex.js';
 export function replaceOrAppendMcpServer(text, name, block) {
     const source = String(text || '');
     const range = serverRange(source, name);
@@ -256,4 +257,3 @@ function escapedAt(value, index) {
 function tomlString(value) { return JSON.stringify(String(value)); }
 function tomlKey(value) { return tomlString(value); }
 function tomlArray(values) { return `[${values.map(tomlString).join(', ')}]`; }
-function escapeRegExp(value) { return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'); }

package/dist/core/mcp-config/health-check.js

@@ -7,6 +7,7 @@ import { redactMcpError } from './redaction.js';
 import { normalizeMcpServerName } from './secret-policy.js';
 import { resolveMcpScope } from './scope.js';
 import { MCP_HEALTH_SCHEMA } from './types.js';
+import { PACKAGE_VERSION } from '../version.js';
 const PROTOCOL_VERSION = '2024-11-05';
 const OUTPUT_CAP = 64 * 1024;
 let activeHealthChecks = 0;
@@ -303,7 +304,7 @@ function parseHttpPayload(text) {
 function initializeRequest() {
     return {
         jsonrpc: '2.0', id: 1, method: 'initialize',
-        params: { protocolVersion: PROTOCOL_VERSION, capabilities: {}, clientInfo: { name: 'sks-mcp-health', version: '6.3.0' } }
+        params: { protocolVersion: PROTOCOL_VERSION, capabilities: {}, clientInfo: { name: 'sks-mcp-health', version: PACKAGE_VERSION } }
     };
 }
 function timeoutMs(value, fallback) {

package/dist/core/mcp-config/mutation.js

@@ -9,6 +9,7 @@ import { redactMcpError, redactMcpErrorWithSecrets } from './redaction.js';
 import { isOfficialMcpServerName, McpSecretPolicyError, normalizeApprovalMode, normalizeMcpMutationInput, normalizeMcpServerName } from './secret-policy.js';
 import { McpScopeError, resolveMcpScope } from './scope.js';
 import { MCP_MUTATION_SCHEMA } from './types.js';
+import { messageOf } from '../errors/message.js';
 export async function addMcpServer(input, scope, options = {}) {
     let normalized;
     try {
@@ -363,4 +364,3 @@ function fallbackGenerated(text, reason) {
 function generatedFailure(blockers, publicError = null) {
     return { ok: false, text: null, cliUsed: false, fallbackUsed: false, warnings: [], blockers, publicError };
 }
-function messageOf(error) { return error instanceof Error ? error.message : String(error); }

package/dist/core/mcp-config/restore.js

@@ -7,6 +7,7 @@ import { listMcpInventory } from './inventory.js';
 import { redactMcpError } from './redaction.js';
 import { McpScopeError, resolveMcpScope } from './scope.js';
 import { MCP_MUTATION_SCHEMA } from './types.js';
+import { messageOf } from '../errors/message.js';
 export async function restoreMcpBackup(backupId, scope, options = {}) {
     let ref;
     try {
@@ -103,4 +104,3 @@ function failure(scope, blockers, publicError = null) {
         public_error: publicError
     };
 }
-function messageOf(error) { return error instanceof Error ? error.message : String(error); }

package/dist/core/mcp-config/secret-policy.js

@@ -1,5 +1,6 @@
 import { MCP_APPROVAL_MODES } from './types.js';
 import { isSensitiveMcpArgumentName, looksLikeMcpSecretValue } from './redaction.js';
+import { isRecord } from '../json/records.js';
 const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const SERVER_NAME = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$/;
 const TOOL_NAME = /^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,127}$/;
@@ -191,6 +192,3 @@ function boundedString(value, max) {
     const text = value.trim();
     return text && Buffer.byteLength(text) <= max && !/[\r\n\0]/.test(text) ? text : null;
 }
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}

package/dist/core/migration/migration-transaction-journal.js

@@ -1,8 +1,8 @@
 import path from 'node:path';
 import crypto from 'node:crypto';
 import { appendJsonl, ensureDir, nowIso } from '../fsx.js';
+import { PACKAGE_VERSION } from '../version.js';
 export const MIGRATION_JOURNAL_SCHEMA = 'sks.migration-journal.v1';
-export const MIGRATION_JOURNAL_VERSION = '1.20.1';
 export function hashConfigText(text) {
     return crypto.createHash('sha256').update(String(text ?? '')).digest('hex');
 }
@@ -13,7 +13,7 @@ export function buildMigrationEvent(input) {
     const rollbackAvailable = input.rollbackAvailable ?? Boolean(input.backupPath);
     const event = {
         ts: nowIso(),
-        migration: MIGRATION_JOURNAL_VERSION,
+        migration: PACKAGE_VERSION,
         step: input.step,
         target: input.target,
         before_hash: beforeHash,
@@ -32,7 +32,7 @@ export function migrationJournalPath(root, opts = {}) {
     const base = opts.missionId
         ? path.join(root, '.sneakoscope', 'missions', opts.missionId)
         : path.join(root, '.sneakoscope', 'reports');
-    return path.join(base, `migration-${MIGRATION_JOURNAL_VERSION}-journal.jsonl`);
+    return path.join(base, 'migration-journal.jsonl');
 }
 export async function appendMigrationEvents(root, events, opts = {}) {
     const journalPath = migrationJournalPath(root, opts);

package/dist/core/naruto/naruto-concurrency-governor.js

@@ -77,10 +77,10 @@ export function decideNarutoConcurrency(input = {}) {
     };
 }
 function normalizeParallelismMode(value) {
-    const text = String(value || process.env.SKS_NARUTO_PARALLELISM || 'safe').toLowerCase();
+    const text = String(value || process.env.SKS_NARUTO_PARALLELISM || 'extreme').toLowerCase();
     if (text === 'safe' || text === 'balanced' || text === 'extreme')
         return text;
-    return 'safe';
+    return 'extreme';
 }
 function normalizePositiveInt(value, fallback) {
     const parsed = Number(value);

package/dist/core/perf/import-graph-budget.js

@@ -1,7 +1,31 @@
 import fsp from 'node:fs/promises';
 import path from 'node:path';
 import { writeJsonAtomic } from '../fsx.js';
+const NARUTO_AGENT_BRIDGE_FORBIDDEN_MODULES = [
+    forbidden('command-registry', /src\/cli\/command-registry\.ts$/),
+    forbidden('route-table', /src\/core\/routes\.ts$/),
+    forbidden('telegram', /src\/core\/(?:commands\/telegram-command\.ts|telegram(?:\/|\.ts$))/),
+    forbidden('remote', /src\/core\/(?:commands\/remote-command\.ts|remote(?:\/|\.ts$))/),
+    forbidden('menubar', /(?:^|\/)(?:menubar|sks-menubar)(?:\/|[-.])/),
+    forbidden('provider-ui', /(?:openrouter|provider-card|provider-model-ui|multi-provider)/i),
+    forbidden('image-research-route', /src\/core\/(?:wiki-image|image-ux-review|research|search-visibility)(?:\/|\.ts$)/),
+    forbidden('release-publish', /src\/core\/release\/(?:main-push|macos-menubar|npm-stage|publish|release-publish)/)
+];
 const IMPORT_BUDGETS = [
+    {
+        fastPath: 'naruto official runner',
+        files: ['src/core/subagents/official-subagent-runner.ts'],
+        traverseStaticImports: true,
+        forbidden: [],
+        forbiddenModules: NARUTO_AGENT_BRIDGE_FORBIDDEN_MODULES
+    },
+    {
+        fastPath: 'agent-bridge manifest',
+        files: ['src/core/agent-bridge/agent-manifest.ts'],
+        traverseStaticImports: true,
+        forbidden: [],
+        forbiddenModules: NARUTO_AGENT_BRIDGE_FORBIDDEN_MODULES
+    },
     {
         fastPath: '--version',
         files: ['src/bin/sks.ts'],
@@ -61,10 +85,24 @@ export async function checkImportGraphBudget(root) {
     const checked = new Set();
     const violations = [];
     for (const budget of IMPORT_BUDGETS) {
-        for (const file of budget.files) {
+        const files = budget.traverseStaticImports
+            ? await staticImportClosure(root, budget.files)
+            : budget.files;
+        for (const file of files) {
             checked.add(file);
             const text = await fsp.readFile(path.join(root, file), 'utf8').catch(() => '');
             const checkText = budget.sourceSlice ? budget.sourceSlice(file, text) : text;
+            for (const rule of budget.forbiddenModules || []) {
+                const match = file.match(rule.pattern);
+                if (!match)
+                    continue;
+                violations.push({
+                    fast_path: budget.fastPath,
+                    file,
+                    forbidden: rule.id,
+                    matched: match[0].slice(0, 160)
+                });
+            }
             for (const rule of budget.forbidden) {
                 const match = checkText.match(rule.pattern);
                 if (!match)
@@ -91,6 +129,58 @@ export async function writeImportGraphBudgetReport(root) {
     await writeJsonAtomic(path.join(root, '.sneakoscope', 'reports', 'import-graph-budget.json'), report);
     return report;
 }
+async function staticImportClosure(root, entryFiles) {
+    const visited = new Set();
+    const queue = [...entryFiles];
+    while (queue.length) {
+        const file = queue.shift();
+        if (visited.has(file))
+            continue;
+        visited.add(file);
+        const text = await fsp.readFile(path.join(root, file), 'utf8').catch(() => '');
+        for (const specifier of staticModuleSpecifiers(text)) {
+            const resolved = await resolveSourceModule(root, file, specifier);
+            if (resolved && !visited.has(resolved))
+                queue.push(resolved);
+        }
+        queue.sort();
+    }
+    return [...visited].sort();
+}
+function staticModuleSpecifiers(text) {
+    const specifiers = new Set();
+    const pattern = /(?:^|\n)\s*(?:import|export)\s+(?!type\b)(?:[^;'"]{0,2000}?\sfrom\s+)?['"]([^'"]+)['"]/g;
+    for (const match of text.matchAll(pattern)) {
+        if (match[1]?.startsWith('.'))
+            specifiers.add(match[1]);
+    }
+    return [...specifiers].sort();
+}
+async function resolveSourceModule(root, importer, specifier) {
+    const importerDir = path.dirname(path.join(root, importer));
+    const raw = path.resolve(importerDir, specifier);
+    const candidates = new Set([raw]);
+    if (/\.[cm]?js$/.test(raw)) {
+        candidates.add(raw.replace(/\.js$/, '.ts'));
+        candidates.add(raw.replace(/\.mjs$/, '.mts'));
+        candidates.add(raw.replace(/\.cjs$/, '.cts'));
+    }
+    else if (!path.extname(raw)) {
+        candidates.add(`${raw}.ts`);
+        candidates.add(`${raw}.mts`);
+        candidates.add(`${raw}.cts`);
+        candidates.add(path.join(raw, 'index.ts'));
+    }
+    for (const candidate of candidates) {
+        const stat = await fsp.stat(candidate).catch(() => null);
+        if (!stat?.isFile())
+            continue;
+        const relative = path.relative(root, candidate).split(path.sep).join('/');
+        if (!relative.startsWith('../') && !path.isAbsolute(relative))
+            return relative;
+    }
+    return null;
+}
 function forbidden(id, pattern) {
     return { id, pattern };
 }

package/dist/core/pipeline/pipeline-plan-writer.js

@@ -1 +1 @@
-export { PIPELINE_PLAN_ARTIFACT, PIPELINE_PLAN_SCHEMA_VERSION, routePrompt, buildPipelinePlan, writePipelinePlan, validatePipelinePlan } from '../pipeline-internals/runtime-core.js';
+export { PIPELINE_PLAN_ARTIFACT, PIPELINE_PLAN_SCHEMA_VERSION, routePrompt, buildPipelinePlan, writePipelinePlan, validatePipelinePlan, pipelinePlanState } from '../pipeline-internals/runtime-core.js';