sneakoscope 7.1.0 → 7.3.0

package/dist/scripts/codex-agent-role-rich-content-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective315Gate } from './sks-3-1-5-directive-check-lib.js';
-await runDirective315Gate('codex-app:agent-role-rich-content');
+import { runTypedRoutingGate } from './typed-routing-gate-lib.js';
+await runTypedRoutingGate('codex-app:agent-role-rich-content');

package/dist/scripts/codex-agent-role-sync-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective314Gate } from './sks-3-1-4-directive-check-lib.js';
-await runDirective314Gate('codex-app:agent-role-sync');
+import { runRuntimeDomainGate } from './runtime-domain-gate-lib.js';
+await runRuntimeDomainGate('codex-app:agent-role-sync');

package/dist/scripts/codex-agent-type-routing-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective315Gate } from './sks-3-1-5-directive-check-lib.js';
-await runDirective315Gate('codex-app:agent-type-routing');
+import { runTypedRoutingGate } from './typed-routing-gate-lib.js';
+await runTypedRoutingGate('codex-app:agent-type-routing');

package/dist/scripts/codex-app-execution-profile-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective314Gate } from './sks-3-1-4-directive-check-lib.js';
-await runDirective314Gate('codex-app:execution-profile');
+import { runRuntimeDomainGate } from './runtime-domain-gate-lib.js';
+await runRuntimeDomainGate('codex-app:execution-profile');

package/dist/scripts/codex-app-handoff-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 process.env.SKS_CODEX_0138_FAKE = '1';
 const mod = await importDist('core/codex-app/codex-app-handoff.js');
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-app-handoff-'));

package/dist/scripts/codex-app-handoff-launch-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 process.env.SKS_CODEX_0138_FAKE = '1';
 process.env.SKS_CODEX_APP_LAUNCH_FAKE = '1';
 const mod = await importDist('core/codex-app/codex-app-handoff.js');

package/dist/scripts/codex-control-tool-output-continuity-audit-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/codex-control/codex-reliability-shield.js');
 const audit = mod.auditToolOutputContinuity([
     { type: 'thread.started' },

package/dist/scripts/codex-lb-fast-ui-preservation-check.js

@@ -3,6 +3,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { codexLbConfigPath, codexLbEnvPath, ensureGlobalCodexFastModeDuringInstall, releaseCodexLbAuthHold, repairCodexLbAuth } from '../cli/install-helpers.js';
+import { escapeRegExp } from '../core/text/regex.js';
 const tmp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-codex-lb-fast-ui-'));
 const home = path.join(tmp, 'home');
 const codexHome = path.join(home, '.codex');
@@ -106,6 +107,3 @@ function topLevelKey(text, key) {
     const top = text.split(/\n\s*\[/)[0] || '';
     return top.match(new RegExp(`(^|\\n)\\s*${escapeRegExp(key)}\\s*=\\s*([^\\n#]+)`))?.[2]?.trim().replace(/^"|"$/g, '') || '';
 }
-function escapeRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}

package/dist/scripts/codex-native-feature-broker-blackbox.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective316Gate } from './sks-3-1-6-directive-check-lib.js';
-await runDirective316Gate('codex-native:feature-broker-blackbox');
+import { runCodexNativeGate } from './codex-native-gate-lib.js';
+await runCodexNativeGate('codex-native:feature-broker-blackbox');

package/dist/scripts/codex-native-feature-broker-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective316Gate } from './sks-3-1-6-directive-check-lib.js';
-await runDirective316Gate('codex-native:feature-broker');
+import { runCodexNativeGate } from './codex-native-gate-lib.js';
+await runCodexNativeGate('codex-native:feature-broker');

package/dist/scripts/{sks-3-1-6-directive-check-lib.js → codex-native-gate-lib.js}

@@ -38,7 +38,7 @@ const REQUIRED_SCRIPT_IDS = [
     'codex-native:feature-broker-blackbox',
     'pipeline:codex-native-e2e-blackbox'
 ];
-export async function runDirective316Gate(id) {
+export async function runCodexNativeGate(id) {
     if (id === 'brand-neutrality:rename-map')
         return brandRenameMap(id);
     if (id === 'brand-neutrality:zero-leakage')
@@ -334,12 +334,12 @@ async function initDeepMemoryScopeSafety(id) {
     emitGate(id);
 }
 async function releaseScriptsTypeSafe(id) {
-    for (const rel of ['src/scripts/release-dag-full-coverage-check.ts', 'src/scripts/sks-3-1-5-directive-check-lib.ts', 'src/scripts/sks-3-1-6-directive-check-lib.ts', 'src/scripts/sks-3-1-7-directive-check-lib.ts']) {
+    for (const rel of ['src/scripts/release-dag-full-coverage-check.ts', 'src/scripts/typed-routing-gate-lib.ts', 'src/scripts/codex-native-gate-lib.ts', 'src/scripts/release-script-lint-gate-lib.ts']) {
         const text = readText(rel);
         assertGate(!/^\s*\/\/\s*@ts-nocheck\b/m.test(text), `release helper still has ts-nocheck:${rel}`);
     }
     assertGate(readText('src/scripts/release-dag-full-coverage-check.ts').includes('interface ReleaseGate'), 'release DAG helper missing typed interfaces');
-    assertGate(readText('src/scripts/sks-3-1-6-directive-check-lib.ts').includes('interface PackageJsonShape'), '3.1.6 helper missing typed package shape');
+    assertGate(readText('src/scripts/codex-native-gate-lib.ts').includes('interface PackageJsonShape'), '3.1.6 helper missing typed package shape');
     emitGate(id);
 }
 async function noTsNoCheckReleaseScripts(id) {
@@ -347,7 +347,7 @@ async function noTsNoCheckReleaseScripts(id) {
     const checked = listFiles(path.join(root, 'src/scripts')).filter((file) => {
         const rel = path.relative(root, file).split(path.sep).join('/');
         return /^src\/scripts\/release-dag-full-coverage-check\.ts$/.test(rel)
-            || /^src\/scripts\/sks-3-1-[567]-directive-check-lib\.ts$/.test(rel)
+            || /^src\/scripts\/(?:typed-routing|codex-native|release-script-lint)-gate-lib\.ts$/.test(rel)
             || /^src\/scripts\/no-ts-nocheck-release-scripts-check\.ts$/.test(rel)
             || /^src\/scripts\/release-script-type-safety-check\.ts$/.test(rel);
     });
@@ -525,7 +525,7 @@ export function packageJson() {
 export function gateManifest() {
     return readJson('release-gates.v2.json');
 }
-export function required316ScriptIds() {
+export function requiredReleaseScriptIds() {
     return [...REQUIRED_SCRIPT_IDS];
 }
 export function checkCommand(command, args) {

package/dist/scripts/codex-native-harness-compat-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective316Gate } from './sks-3-1-6-directive-check-lib.js';
-await runDirective316Gate('codex-native:harness-compat');
+import { runCodexNativeGate } from './codex-native-gate-lib.js';
+await runCodexNativeGate('codex-native:harness-compat');

package/dist/scripts/codex-native-hook-lifecycle-proof-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective316Gate } from './sks-3-1-6-directive-check-lib.js';
-await runDirective316Gate('codex-native:hook-lifecycle-proof');
+import { runCodexNativeGate } from './codex-native-gate-lib.js';
+await runCodexNativeGate('codex-native:hook-lifecycle-proof');

package/dist/scripts/codex-plugin-app-template-policy-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 process.env.SKS_CODEX_0138_FAKE = '1';
 process.env.SKS_CODEX_PLUGIN_JSON_FAKE = '1';
 const mod = await importDist('core/codex-plugins/codex-plugin-json.js');

package/dist/scripts/codex-sdk-backend-router-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/agents/native-cli-worker.js');
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-codex-sdk-router-'));
 const old = snapshotEnv();

package/dist/scripts/codex-sdk-capability-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/codex-control/codex-sdk-capability.js');
 const capability = await mod.detectCodexSdkCapability();
 assertGate(capability.ok, 'Codex SDK capability must be available', capability);

package/dist/scripts/context7-evidence-dedupe-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/pipeline-internals/runtime-core.js');
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-context7-evidence-'));
 const missionId = 'M-context7-dedupe';

package/dist/scripts/core-skill-card-schema-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root, readJson } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root, readJson } from './gate-lib.js';
 const cardMod = await importDist('core/skills/core-skill-card.js');
 const typesMod = await importDist('core/skills/core-skill-types.js');
 const deployMod = await importDist('core/skills/core-skill-deployment.js');

package/dist/scripts/core-skill-deployment-snapshot-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const cardMod = await importDist('core/skills/core-skill-card.js');
 const deployMod = await importDist('core/skills/core-skill-deployment.js');
 const { createRequestedScopeContract } = await importDist('core/safety/requested-scope-contract.js');

package/dist/scripts/core-skill-heldout-validation-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const validationMod = await importDist('core/skills/core-skill-validation.js');
 const bufferMod = await importDist('core/skills/rejected-skill-patch-buffer.js');
 const baseInput = {

package/dist/scripts/core-skill-no-inference-optimizer-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const cardMod = await importDist('core/skills/core-skill-card.js');
 const runtimeMod = await importDist('core/skills/core-skill-runtime.js');
 const deployMod = await importDist('core/skills/core-skill-deployment.js');

package/dist/scripts/core-skill-patch-check.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root, readJson } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root, readJson } from './gate-lib.js';
 const cardMod = await importDist('core/skills/core-skill-card.js');
 const patchMod = await importDist('core/skills/core-skill-patch.js');
 const applyMod = await importDist('core/skills/core-skill-patch-apply.js');

package/dist/scripts/core-skill-route-runtime-integration-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const { createCandidateCard, routeSkillId } = await importDist('core/skills/core-skill-card.js');
 const { promoteToDeployedWithLedger } = await importDist('core/skills/core-skill-deployment.js');
 const { selectRouteSkill, skillProofRecord } = await importDist('core/skills/core-skill-runtime.js');

package/dist/scripts/current-command-surface-check.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
-import { assertGate, emitGate, importDist, readText, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, readText, root } from './gate-lib.js';
 const removed = ['team', 'mad-db', 'tmux', 'xai', 'swarm', 'agent', 'ralph', 'ui', 'glm'];
 const removedDollar = ['$Agent', '$Team', '$MAD-DB', '$Swarm', '$ShadowClone', '$Kagebunshin', '$Ralph'];
 const removedHandlers = [

package/dist/scripts/current-surface-update-e2e-check.js

@@ -80,6 +80,7 @@ try {
         path.join(home, '.agents', 'skills', 'team'),
         path.join(home, '.agents', 'skills', 'agent'),
         path.join(home, '.agents', 'skills', 'ralph'),
+        path.join(home, '.agents', 'skills', 'sks-research-discovery'),
         path.join(home, '.codex', 'skills', 'mad-db'),
         path.join(home, '.codex', 'sks-team.config.toml'),
         path.join(home, '.sneakoscope-global', '.codex', 'sks-team.config.toml'),
@@ -104,9 +105,10 @@ try {
     ]) {
         assertGate(!fs.existsSync(target), 'simulated update must remove every managed legacy unprefixed SKS skill', { target });
     }
-    for (const name of ['sks-naruto', 'sks-research-discovery', 'sks-answer', 'sks-imagegen', 'sks-qa-loop', 'sks-dfix']) {
+    for (const name of ['sks-naruto', 'sks-research', 'sks-answer', 'sks-imagegen', 'sks-qa-loop', 'sks-dfix']) {
         assertGate(fs.existsSync(path.join(home, '.agents', 'skills', name, 'SKILL.md')), 'simulated update must install the namespaced global picker skill', { name });
     }
+    assertGate(!fs.existsSync(path.join(home, '.agents', 'skills', 'sks-research-discovery')), 'simulated update must remove the duplicate namespaced research-discovery picker skill', {});
     assertGate(!fs.existsSync(path.join(project, '.agents', 'skills', 'research')), 'simulated update must remove a user-authored legacy-name collision from the active picker surface', {});
     const quarantinedLegacySkills = await findFiles(path.join(project, '.sneakoscope', 'quarantine', 'skills'), 'SKILL.md');
     assertGate(quarantinedLegacySkills.length >= 1, 'simulated update must quarantine user-authored legacy-name collisions', { quarantinedLegacySkills });
@@ -421,6 +423,7 @@ async function seedUpgradeFixture(home, project) {
     await writeManagedSkill(path.join(home, '.agents', 'skills', 'agent'), 'agent');
     await writeManagedSkill(path.join(home, '.agents', 'skills', 'ralph'), 'ralph');
     await writeManagedSkill(path.join(home, '.agents', 'skills', 'naruto'), 'naruto');
+    await writeManagedSkill(path.join(home, '.agents', 'skills', 'sks-research-discovery'), 'sks-research-discovery');
     await writeManagedSkill(path.join(home, '.codex', 'skills', 'mad-db'), 'mad-db');
     await writeManagedSkill(path.join(home, '.codex', 'skills', 'research-discovery'), 'research-discovery');
     await writeManagedSkill(path.join(globalRuntimeRoot, '.agents', 'skills', 'answer'), 'answer');

package/dist/scripts/current-upgrade-matrix-check.js

@@ -3,7 +3,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { spawnSync } from 'node:child_process';
-import { root, assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { root, assertGate, emitGate, importDist } from './gate-lib.js';
 const policy = await importDist('core/codex/codex-project-config-policy.js');
 const install = await importDist('cli/install-helpers.js');
 const journal = await importDist('core/migration/migration-transaction-journal.js');

package/dist/scripts/dfix-fixture-check.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-import { emitGate, runDfixFixture } from './sks-1-11-gate-lib.js';
+import { emitGate, runDfixFixture } from './sks-cli-gate-lib.js';
 const result = runDfixFixture();
 emitGate('dfix:fixture', { mission_id: result.mission_id, fixture_root: result.fixture_root });

package/dist/scripts/dfix-patch-handoff-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('dfix:patch-handoff', 'src/core/dfix.ts', [
     'codex_patch_handoff',
     'buildDfixCodexPatchPrompt',

package/dist/scripts/dfix-verification-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readMissionJson, runDfixFixture } from './sks-1-11-gate-lib.js';
+import { assertGate, emitGate, readMissionJson, runDfixFixture } from './sks-cli-gate-lib.js';
 const result = runDfixFixture();
 const verification = readMissionJson(result.mission_id, 'dfix-verification.json');
 const proof = readMissionJson(result.mission_id, 'completion-proof.json');

package/dist/scripts/dfix-verification-recommendation-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('dfix:verification-recommendation', 'src/core/dfix.ts', [
     'DFIX_VERIFICATION_SUGGESTION_ARTIFACT',
     'writeDfixVerificationSuggestion',

package/dist/scripts/docs-truthfulness-check.js

@@ -2,6 +2,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { RELEASE_UPGRADE_BASELINE_VERSION } from '../core/release/release-upgrade-baseline.js';
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
 const packageVersion = String(JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8')).version || '').trim();
 const files = [
@@ -17,10 +18,22 @@ const files = [
     'docs/hooks-pat.md',
     'docs/goal-to-loop-migration.md',
     'docs/known-gaps.md',
-    'docs/release-readiness.md'
+    'docs/release-readiness.md',
+    'docs/telegram-and-center.md'
 ];
 const required = {
-    'README.md': ['CHANGELOG.md', 'docs/release-readiness.md', 'gpt-image-2'],
+    'README.md': ['CHANGELOG.md', 'docs/release-readiness.md', 'gpt-image-2', 'docs/telegram-and-center.md'],
+    'docs/telegram-and-center.md': [
+        'sks menubar install',
+        'Open SKS Control Center',
+        'Remote & Telegram',
+        '--bot-token-stdin',
+        'com.sneakoscope.telegram.bot',
+        'com.sneakoscope.telegram-hub',
+        'telegram_pairing_start_not_found',
+        'telegram_hub_not_running',
+        'sks telegram hub start'
+    ],
     'CHANGELOG.md': ['1.14.0', 'DFix Extreme Speed Kernel', 'hook trust doctor', 'warning-zero'],
     'docs/computer-use-evidence.md': ['sks.computer-use-live-evidence.v1', 'probe_only', 'live_capture_blocked', 'local-only', 'Codex Chrome Extension'],
     'docs/codex-lb.md': ['durable_env_file', 'durable_keychain', 'shell_profile', 'process_only_ephemeral', 'base URL only'],
@@ -46,7 +59,7 @@ const required = {
         'proof-aware fleet control',
         'npm stage publish',
         'npm stage approve <stage-id>',
-        `6.2.0 to ${packageVersion} upgrade smoke`
+        `${RELEASE_UPGRADE_BASELINE_VERSION} to ${packageVersion} upgrade smoke`
     ]
 };
 const forbidden = [

package/dist/scripts/doctor-codex-app-harness-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective314Gate } from './sks-3-1-4-directive-check-lib.js';
-await runDirective314Gate('doctor:codex-app-harness');
+import { runRuntimeDomainGate } from './runtime-domain-gate-lib.js';
+await runRuntimeDomainGate('doctor:codex-app-harness');

package/dist/scripts/evidence-flagship-coverage-check.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { emitGate, requireContains, root } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains, root } from './real-execution-check-lib.js';
 requireContains('evidence:flagship-coverage', 'src/core/commands/image-ux-review-command.ts', [
     'visualEvidence: { image_ux_review',
     'IMAGE_UX_REVIEW_CALLOUT_EXTRACTION_REPORT_ARTIFACT'

package/dist/scripts/{sks-1-18-gate-lib.js → gate-lib.js}

@@ -44,7 +44,7 @@ export const SOURCE_INTELLIGENCE_FILES = [
     'src/core/super-search/runtime.ts',
     'src/core/codex/codex-web-search-adapter.ts'
 ];
-export const AGENT_118_FILES = [
+export const AGENT_RUNTIME_FILES = [
     'src/core/agents/scout-policy.ts',
     'src/core/agents/agent-terminal-session.ts',
     'src/core/agents/zellij-right-lane-cockpit.ts',

package/dist/scripts/gate-policy-audit-check.js

@@ -25,7 +25,10 @@ const policyCallsiteAllowlist = new Map([
     ['mkdtemp|src/core/perf/release-latency-slo.ts|runReleaseLatencySlo|mkdtemp', 'run-local latency fixture root'],
     ['mkdtemp|src/core/release/npm-stage-tarball-verifier.ts|verifyNpmStageTarball|mkdtempSync', 'private stage-review transaction root'],
     ['mkdtemp|src/core/release/release-pack-content-scanner.ts|scanTarballTextContents|mkdtempSync', 'finally-cleaned tar scan root'],
-    ['mkdtemp|src/core/release/release-pack-tarball.ts|tarUnpackedBytes|mkdtempSync', 'finally-cleaned tar inventory root']
+    ['mkdtemp|src/core/release/release-pack-tarball.ts|tarUnpackedBytes|mkdtempSync', 'finally-cleaned tar inventory root'],
+    ['mkdtemp|src/scripts/codex-native-gate-lib.ts|tempRoot|mkdtemp', 'per-gate isolated OS-temp fixture root'],
+    ['mkdtemp|src/scripts/runtime-domain-gate-lib.ts|tempRoot|mkdtemp', 'per-gate isolated OS-temp fixture root'],
+    ['mkdtemp|src/scripts/typed-routing-gate-lib.ts|tempRoot|mkdtemp', 'per-gate isolated OS-temp fixture root']
 ]);
 const policyCallsiteAllowlistHits = new Set();
 const splitReviewLineCounts = splitReviewFiles.map((file) => ({

package/dist/scripts/git-worktree-checkpoint-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 import { checkpointWorkerWorktree } from '../core/git/git-worktree-checkpoint.js';
 import { runGitCommand } from '../core/git/git-worktree-runner.js';
 const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-worktree-checkpoint-'));

package/dist/scripts/git-worktree-cross-rebase-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 import { crossRebaseIdleWorktrees } from '../core/git/git-worktree-cross-rebase.js';
 import { runGitCommand, gitOutputLine } from '../core/git/git-worktree-runner.js';
 const suiteRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-worktree-cross-rebase-'));

package/dist/scripts/git-worktree-diff-envelope-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const envelopeMod = await importDist('core/git/git-worktree-patch-envelope.js');
 const schemaMod = await importDist('core/agents/agent-patch-schema.js');
 const envelope = envelopeMod.buildGitWorktreePatchEnvelope({

package/dist/scripts/git-worktree-dirty-lock-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 import { makeGitFixture } from './lib/git-worktree-fixture.js';
 const managerMod = await importDist('core/git/git-worktree-manager.js');
 const cleanupMod = await importDist('core/git/git-worktree-cleanup.js');

package/dist/scripts/git-worktree-dirty-main-detection-check.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 import { makeGitFixture } from './lib/git-worktree-fixture.js';
 const detectionMod = await importDist('core/git/git-repo-detection.js');
 const repo = makeGitFixture('dirty-main-detection');

package/dist/scripts/git-worktree-integration-primary-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 import { makeGitFixture } from './lib/git-worktree-fixture.js';
 const managerMod = await importDist('core/git/git-worktree-manager.js');
 const diffMod = await importDist('core/git/git-worktree-diff.js');

package/dist/scripts/git-worktree-manifest-append-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 import { makeGitFixture } from './lib/git-worktree-fixture.js';
 const managerMod = await importDist('core/git/git-worktree-manager.js');
 const repo = makeGitFixture('worktree-manifest-append');

package/dist/scripts/git-worktree-untracked-diff-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 import { makeGitFixture } from './lib/git-worktree-fixture.js';
 const managerMod = await importDist('core/git/git-worktree-manager.js');
 const diffMod = await importDist('core/git/git-worktree-diff.js');

package/dist/scripts/harness-benchmark-check.js

@@ -3,7 +3,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { performance } from 'node:perf_hooks';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, root } from './gate-lib.js';
 import { COMMAND_MANIFEST_LITE } from '../cli/command-manifest-lite.js';
 import { ensureDir, nowIso, runProcess, writeJsonAtomic } from '../core/fsx.js';
 import { reviewCommand } from '../core/commands/review-command.js';

package/dist/scripts/helper-dedup-check.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
+const { analyzeHelperDuplication, DEFAULT_MAX_COPIES } = await importDist('core/quality/helper-dedup.js');
+const BASELINE = {
+    emit: 22,
+    assertGate: 12,
+    emitGate: 10,
+    sleep: 9,
+    delay: 8,
+    unique: 7,
+    readJson: 6,
+    errorCode: 5,
+    restoreEnv: 5,
+    asList: 4,
+    escapeRegex: 4,
+    exists: 4,
+    nonEmpty: 4,
+    normalizePath: 4,
+    normalizeStringList: 4,
+    parseJson: 4,
+    processIsAlive: 4,
+    read: 4,
+    readArg: 4,
+    readOption: 4,
+    rel: 4,
+    sha256: 4,
+    shellQuote: 4,
+    tail: 4,
+    walk: 4
+};
+function collect(dir, out) {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            collect(full, out);
+        else if (entry.name.endsWith('.ts')) {
+            out.push({ path: path.relative(root, full).split(path.sep).join('/'), text: fs.readFileSync(full, 'utf8') });
+        }
+    }
+    return out;
+}
+const sources = collect(path.join(root, 'src'), []);
+const report = analyzeHelperDuplication(sources, { maxCopies: DEFAULT_MAX_COPIES, baseline: BASELINE });
+const shrunk = Object.entries(BASELINE)
+    .filter(([name, allowed]) => {
+    const current = report.waived.find((group) => group.name === name)?.count ?? 0;
+    return current < allowed;
+})
+    .map(([name]) => name);
+console.log(JSON.stringify({ ...report, baseline_entries: Object.keys(BASELINE).length, shrunk }, null, 2));
+if (shrunk.length > 0) {
+    console.log(`Baseline can be tightened for: ${shrunk.join(', ')}`);
+}
+assertGate(report.ok, 'a pure helper is defined identically in more modules than the ceiling allows — export it once and import it', report);
+emitGate('quality:helper-dedup', {
+    max_copies: report.max_copies,
+    scanned_files: report.scanned_files,
+    scanned_helpers: report.scanned_helpers,
+    baselined: report.waived.length
+});

package/dist/scripts/hook-latency-budget-check.js

@@ -4,7 +4,7 @@ import fsp from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { performance } from 'node:perf_hooks';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const budgetMs = Number(process.env.SKS_HOOK_LATENCY_BUDGET_MS || 25);
 const readBudget = Number(process.env.SKS_HOOK_LATENCY_READ_BUDGET || 3);
 const root = await fsp.mkdtemp(path.join(os.tmpdir(), 'sks-hook-latency-'));

package/dist/scripts/image-artifact-path-contract-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/image/image-artifact-path-contract.js');
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-image-contract-'));
 const png = path.join(root, 'fixture.png');

package/dist/scripts/imagegen-real-smoke-check.js

@@ -5,13 +5,10 @@ import { spawnSync } from 'node:child_process';
 import { osTempPngFixtureArg } from './lib/valid-png-fixture.js';
 const enabled = process.env.SKS_TEST_REAL_IMAGEGEN === '1' || process.env.SKS_REAL_IMAGEGEN === '1';
 const reportDir = path.join(process.cwd(), '.sneakoscope', 'reports');
-const out = path.join(reportDir, 'real-imagegen-smoke-1.14.1.json');
-const stableOut = path.join(reportDir, 'real-imagegen-smoke.json');
+const out = path.join(reportDir, 'real-imagegen-smoke.json');
 fs.mkdirSync(reportDir, { recursive: true });
 function writeReport(report) {
-    const text = `${JSON.stringify(report, null, 2)}\n`;
-    fs.writeFileSync(out, text);
-    fs.writeFileSync(stableOut, text);
+    fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
 }
 function parseUxReviewJson(stdout) {
     const text = String(stdout || '').trim();

package/dist/scripts/installed-package-smoke-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const { runInstalledPackageSmoke } = await importDist('core/install/installed-package-smoke.js');
 const report = await runInstalledPackageSmoke(root, {
     ...(option('--tarball') ? { tarball: option('--tarball') } : {}),