sneakoscope 7.1.0 → 7.3.0

package/dist/scripts/legacy-gate-inventory-check.js

@@ -1,4 +1,4 @@
-import { assertGate, emitGate, readJson, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readJson, readText } from './gate-lib.js';
 const gates = (readJson('release-gates.v2.json').gates || []);
 const migration = readText('docs/sks-4-migration.md');
 const currentVersion = String(readJson('package.json').version || '');

package/dist/scripts/legacy-gate-purge-check.js

@@ -1,5 +1,5 @@
 import fs from 'node:fs';
-import { assertGate, emitGate, readText, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText, root } from './gate-lib.js';
 const registry = readText('src/cli/command-registry.ts');
 const routes = readText('src/core/routes.ts');
 const skills = readText('src/core/init/skills.ts');

package/dist/scripts/legacy-strong-inventory-check.js

@@ -1,4 +1,4 @@
-import { assertGate, emitGate, importDist, readJson, readText, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, readJson, readText, root } from './gate-lib.js';
 const impactMod = await importDist('core/triwiki/triwiki-gate-impact-map.js');
 const map = impactMod.buildTriWikiGateImpactMap(root);
 const migration = readText('docs/sks-4-migration.md');

package/dist/scripts/lib/codex-sdk-gate-lib.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { tmpdir } from '../../core/fsx.js';
-import { assertGate, emitGate, importDist, readJson, readText, root } from '../sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, readJson, readText, root } from '../gate-lib.js';
 export { assertGate, emitGate, importDist, readJson, readText, root };
 export async function readJsonFile(file) {
     return JSON.parse(await fs.readFile(file, 'utf8'));

package/dist/scripts/mad-sks-launch-sql-plane-boundary-check.js

@@ -5,7 +5,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { madHighCommand } from '../core/commands/mad-sks-command.js';
 import { checkDbOperation } from '../core/db-safety.js';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 const original = {
     cwd: process.cwd(),
     home: process.env.HOME,

package/dist/scripts/mad-sks-sql-plane-capability-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const missionMod = await importDist('core/mission.js');
 const capMod = await importDist('core/mad-sks/sql-plane/capability.js');
 const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-mad-sks-sql-plane-cap-'));

package/dist/scripts/mad-sks-sql-plane-lifecycle-hook-decision-check.js

@@ -5,7 +5,7 @@ import path from 'node:path';
 import { checkDbOperation, madSksSqlPlaneLifecycleHookFromDecision } from '../core/db-safety.js';
 import { createMadSksSqlPlaneCapability, MAD_SKS_SQL_PLANE_ACK } from '../core/mad-sks/sql-plane/capability.js';
 import { createMission } from '../core/mission.js';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-mad-sks-sql-plane-hook-decision-'));
 const mission = await createMission(root, { mode: 'mad-sks', prompt: 'hook fixture' });
 await createMadSksSqlPlaneCapability(root, { missionId: mission.id, ack: MAD_SKS_SQL_PLANE_ACK, ttlMs: 60000, projectRef: 'fixture-project-ref', status: 'active' });

package/dist/scripts/mad-sks-sql-plane-result-lifecycle-check.js

@@ -6,7 +6,7 @@ import { checkDbOperation, madSksSqlPlaneLifecycleHookFromDecision } from '../co
 import { evaluateHookPayload } from '../core/hooks-runtime.js';
 import { createMadSksSqlPlaneCapability, MAD_SKS_SQL_PLANE_ACK } from '../core/mad-sks/sql-plane/capability.js';
 import { createMission, missionDir } from '../core/mission.js';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-mad-sks-sql-plane-mcp-result-'));
 const mission = await createMission(root, { mode: 'mad-sks', prompt: 'mcp result fixture' });
 await createMadSksSqlPlaneCapability(root, { missionId: mission.id, ack: MAD_SKS_SQL_PLANE_ACK, ttlMs: 60000, projectRef: 'fixture-project-ref', status: 'active' });

package/dist/scripts/managed-config-merge-check.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs/promises';
 import path from 'node:path';
-import { assertGate, emitGate, makeTempRoot, writeText } from './sks-3-1-8-check-lib.js';
+import { assertGate, emitGate, makeTempRoot, writeText } from './skill-fixture-check-lib.js';
 import { writeManagedEnvConfig, writeManagedJsonConfig, writeManagedTomlConfig } from '../core/config/managed-config-merge.js';
 const root = await makeTempRoot('sks-managed-merge-');
 const envFile = path.join(root, '.env.local');

package/dist/scripts/mcp-plugin-inventory-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 process.env.SKS_CODEX_0138_FAKE = '1';
 process.env.SKS_CODEX_PLUGIN_JSON_FAKE = '1';
 const pluginMod = await importDist('core/codex-plugins/codex-plugin-json.js');

package/dist/scripts/model-call-concurrency-check.js

@@ -4,7 +4,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { withModelCallSlot } from '../core/codex-control/model-call-concurrency.js';
 import { writeParallelRuntimeProof } from '../core/agents/parallel-runtime-proof.js';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 const missionId = 'M-model-call-concurrency';
 const ledgerRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-model-call-'));
 await Promise.all(Array.from({ length: 8 }, (_, i) => withModelCallSlot({ root: ledgerRoot, missionId, provider: 'codex-sdk', budget: 3, slotId: `slot-${i}`, generationIndex: 1, sessionId: `s-${i}`, backend: 'codex-sdk' }, () => new Promise((resolve) => setTimeout(resolve, 80)))));

package/dist/scripts/mutation-callsite-coverage-check.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, root } from './gate-lib.js';
 const allowlistPath = path.join(root, 'safety-mutation-allowlist.json');
 const allowlist = readAllowlist();
 const allowlistHits = new Set();

package/dist/scripts/naruto-ssot-gate-aliases-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const proofPolicy = readText('src/core/proof/route-proof-policy.ts');
 const proofGate = readText('src/core/proof/route-proof-gate.ts');
 const runtimeGates = readText('src/core/pipeline-internals/runtime-gates.ts');

package/dist/scripts/naruto-ssot-pipeline-default-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const runtimeCore = readText('src/core/pipeline-internals/runtime-core.ts');
 const agentPlan = readText('src/core/agents/agent-plan.ts');
 const routes = readText('src/core/routes.ts');

package/dist/scripts/naruto-ssot-route-normalization-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const routes = await importDist('core/routes.js');
 const removedTeam = routes.routePrompt('$Team fix a release bug');
 const explicitNaruto = routes.routePrompt('$Naruto fix a release bug');

package/dist/scripts/naruto-ssot-routing-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, readText } from './gate-lib.js';
 const routes = await importDist('core/routes.js');
 const removedTeam = routes.routePrompt('$Team fix the release gate');
 const ordinaryWork = routes.routePrompt('implement a fix for the release gate');

package/dist/scripts/naruto-worktree-coding-blackbox.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 import { makeGitFixture, run } from './lib/git-worktree-fixture.js';
 const managerMod = await importDist('core/git/git-worktree-manager.js');
 const diffMod = await importDist('core/git/git-worktree-diff.js');

package/dist/scripts/native-capability-repair-matrix-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, makeTempRoot } from './sks-3-1-8-check-lib.js';
+import { assertGate, emitGate, makeTempRoot } from './skill-fixture-check-lib.js';
 import { buildNativeCapabilityRepairMatrix, NATIVE_CAPABILITY_IDS } from '../core/codex-native/native-capability-repair-matrix.js';
 const root = await makeTempRoot('sks-native-matrix-');
 const matrix = await buildNativeCapabilityRepairMatrix({ root, fixture: 'manual-required' });

package/dist/scripts/native-image-generation-repair-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, makeTempRoot } from './sks-3-1-8-check-lib.js';
+import { assertGate, emitGate, makeTempRoot } from './skill-fixture-check-lib.js';
 import { repairNativeCapabilities } from '../core/codex-native/native-capability-repair.js';
 const root = await makeTempRoot('sks-native-image-');
 const report = await repairNativeCapabilities({ root, fix: true, yes: true, capabilities: ['image_generation', 'image_followup_edit', 'saved_artifact_path_contract'], fixture: 'all-repairable' });

package/dist/scripts/official-subagent-workflow-check.js

@@ -2,17 +2,17 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, root } from './gate-lib.js';
 import { buildOfficialSubagentPrompt } from '../core/subagents/official-subagent-prompt.js';
 import { SUBAGENT_PARENT_SUMMARY_FILENAME, persistOrReuseTrustworthySubagentParentSummary, writeSubagentEvidence } from '../core/subagents/subagent-evidence.js';
-import { resolveSubagentThreadBudget } from '../core/subagents/thread-budget.js';
+import { DEFAULT_NARUTO_REQUESTED_SUBAGENTS, resolveSubagentThreadBudget } from '../core/subagents/thread-budget.js';
 import { runOfficialSubagentWorkflow } from '../core/subagents/official-subagent-runner.js';
 const counts = [4, 8, 12, 20, 100].map((requested) => resolveSubagentThreadBudget({
     requested,
     configuredMaxThreads: requested === 20 ? 12 : undefined
 }));
 const implicitCount = resolveSubagentThreadBudget();
-assertGate(implicitCount.requestedSubagents === 2, 'implicit Naruto must default to two independent children', implicitCount);
+assertGate(implicitCount.requestedSubagents === DEFAULT_NARUTO_REQUESTED_SUBAGENTS, `implicit Naruto must default to ${DEFAULT_NARUTO_REQUESTED_SUBAGENTS} independent children (automatic bounded-work fan-out)`, implicitCount);
 assertGate(counts[0]?.requestedSubagents === 4, 'requested 4 must remain 4', counts);
 assertGate(counts[1]?.requestedSubagents === 8, 'requested 8 must remain 8', counts);
 assertGate(counts[2]?.requestedSubagents === 12, 'requested 12 must remain 12', counts);

package/dist/scripts/package-published-contract-check.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import path from 'node:path';
-import { assertGate, emitGate, readJson, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readJson, root } from './gate-lib.js';
 import { readCurrentNpmPackProof } from '../core/release/npm-pack-proof.js';
 const pkg = readJson('package.json');
 const scripts = pkg.scripts || {};
@@ -8,9 +8,14 @@ const packProof = readCurrentNpmPackProof(root);
 assertGate(packProof.ok && packProof.proof, 'current npm pack proof is required for package contract check', { blockers: packProof.blockers });
 const info = packProof.proof.info;
 const files = new Set((info.files || []).map((row) => String(row.path || '').replace(/\\/g, '/')));
+const LIFECYCLE_SCRIPTS = [
+    'preinstall', 'install', 'postinstall', 'prepare',
+    'prepack', 'postpack', 'prepublish', 'prepublishOnly', 'publish', 'postpublish'
+];
+const publishedScripts = resolvePublishedScriptClosure();
 const missingTargets = [];
-for (const [name, command] of Object.entries(scripts)) {
-    for (const target of scriptTargets(String(command))) {
+for (const name of publishedScripts) {
+    for (const target of scriptTargets(String(scripts[name] || ''))) {
         const normalized = target.replace(/^\.\//, '').replace(/\\/g, '/');
         if (normalized.startsWith('dist/') && !files.has(normalized))
             missingTargets.push({ script: name, target: normalized });
@@ -18,14 +23,42 @@ for (const [name, command] of Object.entries(scripts)) {
 }
 assertGate(missingTargets.length === 0, 'published package scripts must not reference missing tarball files', {
     missingTargets: missingTargets.slice(0, 50),
-    missing_count: missingTargets.length
+    missing_count: missingTargets.length,
+    published_scripts: [...publishedScripts]
 });
 emitGate('package:published-contract', {
     files: files.size,
     script_count: Object.keys(scripts).length,
+    published_script_count: publishedScripts.size,
+    published_scripts: [...publishedScripts],
     missing_targets: 0,
     package: path.basename(info.filename || '')
 });
+function resolvePublishedScriptClosure() {
+    const seen = new Set();
+    const queue = LIFECYCLE_SCRIPTS.filter((name) => typeof scripts[name] === 'string');
+    while (queue.length) {
+        const name = queue.shift();
+        if (seen.has(name))
+            continue;
+        seen.add(name);
+        for (const next of npmRunTargets(String(scripts[name] || ''))) {
+            if (typeof scripts[next] === 'string' && !seen.has(next))
+                queue.push(next);
+        }
+    }
+    return seen;
+}
+function npmRunTargets(command) {
+    const names = [];
+    const re = /npm\s+run\s+([A-Za-z0-9:_-]+)/g;
+    let match;
+    while ((match = re.exec(command))) {
+        if (match[1])
+            names.push(match[1]);
+    }
+    return names;
+}
 function scriptTargets(command) {
     const targets = [];
     const re = /(?:node|tsx|ts-node)\s+((?:\.\/)?dist\/[^\s;&|]+\.js)/g;

package/dist/scripts/packlist-performance-check.js

@@ -5,7 +5,8 @@ import path from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { DEFAULT_MAX_PACK_BYTES, DEFAULT_MAX_UNPACKED_BYTES } from '../core/release/package-size-budget.js';
 import { npmPackAtomicTempPaths, writeNpmPackProof } from '../core/release/npm-pack-proof.js';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
+import { analyzeRuntimeScriptPackClosure } from '../core/release/runtime-script-pack-closure.js';
+import { assertGate, emitGate, root } from './gate-lib.js';
 const MAX_FILES = Number(process.env.SKS_MAX_PACK_FILES || 2100);
 const MAX_UNPACKED = Number(process.env.SKS_MAX_UNPACKED_BYTES || DEFAULT_MAX_UNPACKED_BYTES);
 const MAX_PACKED = Number(process.env.SKS_MAX_PACK_BYTES || DEFAULT_MAX_PACK_BYTES);
@@ -59,12 +60,19 @@ assertGate(atomicTempFiles.length === 0, 'npm_pack_atomic_temp_files_present', {
 const files = info.files.map((f) => f.path);
 const packProof = writeNpmPackProof(root, info, packMs);
 const runtimeManifest = JSON.parse(fs.readFileSync(path.join(root, 'runtime-required-scripts.json'), 'utf8'));
+const runtimeScriptClosure = analyzeRuntimeScriptPackClosure(root);
 const customerPayloadForbidden = [
     'dist/core/agents/agent-cleanup-executor.js',
     'dist/core/release/npm-stage-tarball-verifier.js',
     'dist/core/release/npm-stage-tarball-verifier-support.js'
 ];
 assertGate(runtimeManifest.schema === 'sks.runtime-required-scripts.v1' && Array.isArray(runtimeManifest.scripts), 'runtime required scripts manifest invalid', runtimeManifest);
+assertGate(runtimeScriptClosure.root_mode === 'manifest_ssot', 'runtime script manifest SSOT disabled', {
+    root_mode: runtimeScriptClosure.root_mode
+});
+assertGate(runtimeScriptClosure.declaration_issues.length === 0, 'runtime script closure declaration invalid', {
+    issues: runtimeScriptClosure.declaration_issues
+});
 assertGate(info.entryCount <= MAX_FILES, 'packlist_file_count_over_limit', { entryCount: info.entryCount, max_files: MAX_FILES });
 assertGate(info.unpackedSize <= MAX_UNPACKED, 'packlist_unpacked_over_limit', { unpackedSize: info.unpackedSize, max_unpacked: MAX_UNPACKED });
 assertGate(info.size <= MAX_PACKED, 'packlist_packed_over_limit', { size: info.size, max_packed: MAX_PACKED });
@@ -72,6 +80,13 @@ assertGate(files.includes('dist/bin/sks.js'), 'packlist_missing_runtime_entry',
 for (const entry of runtimeManifest.scripts) {
     assertGate(files.includes(entry.path), 'packlist_missing_runtime_required_script', { missing: entry.path, reason: entry.reason });
 }
+const packedScripts = files
+    .filter((file) => file.startsWith('dist/scripts/') && file.endsWith('.js'))
+    .sort();
+assertGate(JSON.stringify(packedScripts) === JSON.stringify(runtimeScriptClosure.closure), 'packlist_runtime_script_closure_mismatch', {
+    missing: runtimeScriptClosure.closure.filter((file) => !packedScripts.includes(file)),
+    unexpected: packedScripts.filter((file) => !runtimeScriptClosure.closure.includes(file))
+});
 assertGate(files.includes('package.json'), 'packlist_missing_runtime_entry', { missing: 'package.json' });
 assertGate(files.includes('README.md'), 'packlist_missing_runtime_entry', { missing: 'README.md' });
 assertGate(files.includes('LICENSE'), 'packlist_missing_runtime_entry', { missing: 'LICENSE' });
@@ -109,6 +124,7 @@ const report = {
     pack_file_list_sha256: packProof.file_list_digest,
     runtime_required_scripts: runtimeManifest.scripts.map((entry) => entry.path),
     runtime_required_missing: runtimeManifest.scripts.filter((entry) => !files.includes(entry.path)).map((entry) => entry.path),
+    runtime_script_closure: runtimeScriptClosure.closure,
     customer_payload_forbidden: customerPayloadForbidden,
     max_files: MAX_FILES,
     max_packed: MAX_PACKED,

package/dist/scripts/pipeline-codex-native-doctor-mad-routing-real-blackbox.js

@@ -5,6 +5,7 @@ import { pathToFileURL } from 'node:url';
 import { runProcess } from '../core/fsx.js';
 import { resolveCodexNativeInvocationPlan } from '../core/codex-native/codex-native-invocation-router.js';
 import { createCodexNativeRuntimeFixture, withFixtureEnv } from './codex-native-runtime-e2e-fixture.js';
+import { messageOf } from '../core/errors/message.js';
 export async function runCodexNativeDoctorMadRoutingRealBlackbox() {
     const fixture = await createCodexNativeRuntimeFixture({
         hook: 'unknown',
@@ -71,6 +72,3 @@ function assertGate(condition, message, detail = {}) {
 function emitGate(gate) {
     console.log(JSON.stringify({ schema: 'sks.release-gate.v1', ok: true, gate }, null, 2));
 }
-function messageOf(err) {
-    return err instanceof Error ? err.message : String(err);
-}

package/dist/scripts/ppt-real-export-adapter-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('ppt:real-export-adapter', 'src/core/ppt-review/slide-exporter.ts', [
     'soffice',
     'libreoffice',

package/dist/scripts/ppt-real-imagegen-wiring-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('ppt:real-imagegen-wiring', 'src/core/ppt-review/slide-imagegen-review.ts', [
     'generateGptImage2CalloutReview',
     'PPT_SLIDE_IMAGEGEN_REQUEST_ARTIFACT',

package/dist/scripts/ppt-reexport-rereview-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('ppt:reexport-rereview', 'src/core/commands/ppt-command.ts', [
     'attach-fixed-deck',
     'fixedDeckPath',

package/dist/scripts/prepublish-fast-check.js

@@ -3,7 +3,7 @@ import { spawnSync } from 'node:child_process';
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
-import { root } from './sks-1-18-gate-lib.js';
+import { root } from './gate-lib.js';
 const stampPath = process.env.SKS_RELEASE_STAMP_PATH || path.join(root, '.sneakoscope', 'reports', 'release-check-stamp.json');
 function sha256(value) {
     return crypto.createHash('sha256').update(value).digest('hex');

package/dist/scripts/probe-memoization-check.js

@@ -1,5 +1,5 @@
-import { assertGate, emitGate, makeTempRoot } from './sks-3-1-8-check-lib.js';
-import { importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, makeTempRoot } from './skill-fixture-check-lib.js';
+import { importDist } from './gate-lib.js';
 const tmp = await makeTempRoot('probe-memo-');
 const mod = await importDist('core/probes/probe-memoization.js');
 let calls = 0;

package/dist/scripts/prompt-placeholder-guard-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const guardMod = await importDist('core/prompt/prompt-placeholder-guard.js');
 const blocked = guardMod.checkPromptPlaceholders({
     prompt: 'Use @filename and INSERT_PATH_HERE to patch the bug',

package/dist/scripts/qa-loop-app-handoff-capability-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const command = readText('src/core/commands/qa-loop-command.ts');
 const handoff = readText('src/core/codex-app/codex-app-handoff.ts');
 assertGate(command.includes('writeCodex0138CapabilityArtifacts'), 'QA-LOOP must snapshot Codex 0.138 capability before handoff');

package/dist/scripts/qa-loop-app-handoff-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const command = readText('src/core/commands/qa-loop-command.ts');
 const core = readText('src/core/qa-loop.ts');
 assertGate(command.includes('runCodexAppHandoff') && command.includes('--app-handoff-required'), 'QA-LOOP command must wire Codex App /app handoff flags');

package/dist/scripts/qa-loop-app-handoff-cli-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const command = readText('src/core/commands/qa-loop-command.ts');
 assertGate(command.includes('[--app-handoff] [--app-handoff-required]') && command.includes('status <mission-id|latest> [--desktop]'), 'QA-LOOP help must expose app handoff run/status flags');
 assertGate(command.includes('blocked_for_desktop_review') && command.includes('desktop_app_handoff'), 'QA-LOOP CLI must emit desktop handoff status');

package/dist/scripts/qa-loop-app-handoff-confirmation-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/qa-loop/qa-loop-app-handoff-confirmation.js');
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-app-confirm-'));
 const missionDir = path.join(root, '.sneakoscope', 'missions', 'M-fixture');

package/dist/scripts/qa-loop-app-handoff-gate-lifecycle-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const qa = await importDist('core/qa-loop.js');
 const confirm = await importDist('core/qa-loop/qa-loop-app-handoff-confirmation.js');
 const root = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-app-gate-'));

package/dist/scripts/qa-loop-app-handoff-launch-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const command = readText('src/core/commands/qa-loop-command.ts');
 assertGate(command.includes('--app-handoff-launch') && command.includes('--app-handoff-artifact-only') && command.includes('launch_mode'), 'QA-LOOP must expose launch/artifact-only handoff flags and pass launch_mode');
 emitGate('qa-loop:app-handoff-launch');

package/dist/scripts/qa-loop-app-handoff-status-lifecycle-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const command = readText('src/core/commands/qa-loop-command.ts');
 assertGate(command.includes('desktop_app_confirmation') && command.includes('desktop_review_complete') && command.includes('launch:'), 'QA status --desktop must include handoff launch, confirmation, and complete lifecycle');
 emitGate('qa-loop:app-handoff-status-lifecycle');

package/dist/scripts/qa-loop-budget-policy-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/qa-loop/qa-loop-budget-policy.js');
 const policy = mod.buildQaLoopBudgetPolicy({ usage: { source: 'fake', token_usage: { total_tokens: 95 }, usage_limit_tokens: 100 } });
 assertGate(policy.near_limit === true && policy.local_llm_draft_preferred === true && policy.final_reviewer_gpt_backed === true, 'QA budget policy must reduce remote concurrency near account limit while keeping GPT final reviewer', policy);

package/dist/scripts/qa-loop-effort-escalation-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const mod = await importDist('core/qa-loop/qa-loop-budget-policy.js');
 const one = mod.selectQaLoopEscalatedEffort({ failureCount: 1, currentEffort: 'medium' });
 const two = mod.selectQaLoopEscalatedEffort({ failureCount: 2, currentEffort: 'medium' });

package/dist/scripts/qa-loop-execution-profile-routing-check.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { runDirective315Gate } from './sks-3-1-5-directive-check-lib.js';
-await runDirective315Gate('qa-loop:execution-profile-routing');
+import { runTypedRoutingGate } from './typed-routing-gate-lib.js';
+await runTypedRoutingGate('qa-loop:execution-profile-routing');

package/dist/scripts/qa-loop-image-path-exposure-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, readText } from './gate-lib.js';
 const command = readText('src/core/commands/qa-loop-command.ts');
 const core = readText('src/core/qa-loop.ts');
 assertGate(command.includes('discoverImageArtifactsInDir') && command.includes('image-artifact-path-contract.json'), 'QA-LOOP must discover image artifacts and write image path contract');

package/dist/scripts/qa-loop-image-path-prompt-injection-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const qa = await importDist('core/qa-loop.js');
 const prompt = qa.buildQaLoopPrompt({ id: 'M', mission: { prompt: 'fixture' }, contract: {}, cycle: 1, previous: '', reportFile: '2026-06-09-v2.0.19-qa-report.md', imagePathContract: { images: [{ id: 'img', model_visible_path: '/tmp/a.png', mime_type: 'image/png', width: 1, height: 1, followup_edit_hint: 'use /tmp/a.png' }], blockers: [] } });
 assertGate(prompt.includes('/tmp/a.png') && prompt.includes('mime_type') && prompt.includes('width') && prompt.includes('Use model_visible_path values'), 'QA prompt must inject image id, model-visible path, dimensions/mime, and follow-up edit hint');

package/dist/scripts/{sks-1-12-real-execution-check-lib.js → real-execution-check-lib.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { assertGate, emitGate, root, runSksJson } from './sks-1-11-gate-lib.js';
+import { assertGate, emitGate, root, runSksJson } from './sks-cli-gate-lib.js';
 export { assertGate, emitGate, root, runSksJson };
 export function read(rel) {
     return fs.readFileSync(path.join(root, rel), 'utf8');

package/dist/scripts/release-affected-selector-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const dag = await importDist('core/release/release-gate-dag.js');
 const selectorMod = await importDist('core/release/release-gate-affected-selector.js');
 const manifest = dag.loadReleaseGateManifest(root);

package/dist/scripts/release-aggressive-resource-governor-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 process.env.SKS_RELEASE_MAX_CPU_LIGHT = '7';
 process.env.SKS_RELEASE_MAX_TOTAL = '2';
 const governor = await importDist('core/release/release-gate-resource-governor.js');

package/dist/scripts/release-cache-glob-hashing-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 import { expandGlob, releaseGateCacheKey } from '../core/release/release-gate-cache-v2.js';
 delete process.env.SKS_RELEASE_GATE_CACHE_MEMOIZE;
 const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-cache-glob-'));

package/dist/scripts/release-cache-input-classifier-check.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { classifyReleaseCacheInputChange } from '../core/release/release-cache-key.js';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 const pkgA = JSON.stringify({ name: 'sneakoscope', version: '3.0.0', scripts: { test: 'node a.js' }, dependencies: { left: '1.0.0' }, files: ['dist'] }, null, 2);
 const pkgB = JSON.stringify({ name: 'sneakoscope', version: '3.0.2', scripts: { test: 'node a.js' }, dependencies: { left: '1.0.0' }, files: ['dist'] }, null, 2);
 const pkgScript = JSON.stringify({ name: 'sneakoscope', version: '3.0.2', scripts: { test: 'node b.js' }, dependencies: { left: '1.0.0' }, files: ['dist'] }, null, 2);

package/dist/scripts/release-cache-neutralization-report-check.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { spawnSync } from 'node:child_process';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, root } from './gate-lib.js';
 const result = spawnSync(process.execPath, ['dist/scripts/release-speed-summary.js'], { cwd: root, encoding: 'utf8', timeout: 30000 });
 assertGate(result.status === 0, 'release speed summary script failed', { stderr: result.stderr });
 const summary = JSON.parse(result.stdout);

package/dist/scripts/release-cache-version-neutral-fixture-check.js

@@ -3,7 +3,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { releaseGateCacheKey } from '../core/release/release-gate-cache-v2.js';
-import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate } from './gate-lib.js';
 const gate = {
     id: 'fixture:release-cache',
     command: 'node fixture.js',

package/dist/scripts/release-dynamic-presets-check.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, packageScripts, readText } from './sks-1-18-gate-lib.js';
-import { importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, packageScripts, readText } from './gate-lib.js';
+import { importDist, root } from './gate-lib.js';
 const scripts = packageScripts();
 const dagMod = await importDist('core/release/release-gate-dag.js');
 const manifest = dagMod.loadReleaseGateManifest(root);

package/dist/scripts/release-full-parallelism-blackbox.js

@@ -4,7 +4,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { performance } from 'node:perf_hooks';
 import { runReleaseGateBatch } from '../core/release/release-gate-batch-runner.js';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, root } from './gate-lib.js';
 const reportRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-release-full-'));
 const gates = Array.from({ length: 80 }, (_, i) => ({ id: `synthetic:${i + 1}`, command: `${process.execPath} -e \"setTimeout(()=>process.exit(0),1000)\"`, deps: [], resource: ['cpu-light', 'fs-read'], side_effect: 'hermetic', timeout_ms: 15000, cache: { enabled: false, inputs: [] }, isolation: { home: 'temp', codex_home: 'temp', report_dir: 'per-gate' }, preset: ['release'] }));
 const started = performance.now();

package/dist/scripts/release-gate-batch-runner-check.js

@@ -2,7 +2,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const batch = await importDist('core/release/release-gate-batch-runner.js');
 assertGate(typeof batch.runReleaseGateBatch === 'function', 'release batch runner export missing');
 assertGate(typeof batch.isReleaseGateBatchable === 'function', 'release batchable predicate export missing');

package/dist/scripts/release-gate-budget-check.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const { readGateCache } = await importDist('core/release/gate-cache.js');
 const SOFT_BUDGET_MS = Number(process.env.SKS_GATE_BUDGET_MS || 120_000);
 const HARD_CEILING_MS = Number(process.env.SKS_GATE_HARD_CEILING_MS || 600_000);