sneakoscope 7.1.0 → 7.3.0

package/dist/scripts/{sks-3-1-5-directive-check-lib.js → typed-routing-gate-lib.js}

@@ -3,7 +3,7 @@ import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist, root } from './gate-lib.js';
 const CORE_NO_TS_NOCHECK_DIRS = [
     'src/core/zellij',
     'src/core/doctor',
@@ -25,7 +25,7 @@ const TARGET_TYPED_FILES = [
     'src/core/codex-native/codex-native-interop-policy.ts',
     'src/core/loops/loop-continuation-enforcer.ts'
 ];
-export async function runDirective315Gate(id) {
+export async function runTypedRoutingGate(id) {
     if (id === 'lint:no-ts-nocheck-core')
         return noTsNoCheckCore(id);
     if (id === 'codex-app:type-safety')

package/dist/scripts/ultra-router-auto-router-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { assertGate, emitGate, importDist } from './sks-1-18-gate-lib.js';
+import { assertGate, emitGate, importDist } from './gate-lib.js';
 const router = await importDist('core/router/ultra-router.js');
 const cache = await importDist('core/router/route-cache.js');
 cache.clearRouteCache();

package/dist/scripts/ux-review-extract-wires-real-extractor-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('ux-review:extract-wires-real-extractor', 'src/core/commands/image-ux-review-command.ts', [
     'extractIssuesImageUxReview',
     'extractRealCallouts',

package/dist/scripts/ux-review-patch-diff-recheck-check.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('ux-review:patch-diff-recheck', 'src/core/image-ux-review/fix-loop.ts', [
     'changed_files',
     'recapture_required',

package/dist/scripts/ux-review-run-wires-imagegen-check.js

@@ -1,13 +1,20 @@
 #!/usr/bin/env node
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
+import { emitGate, requireContains } from './real-execution-check-lib.js';
 requireContains('ux-review:run-wires-imagegen', 'src/core/commands/image-ux-review-command.ts', [
     'const shouldGenerateCallouts = flag(args, \'--generate-callouts\') || flag(args, \'--fix\')',
     'requireCodexImagegen',
     'generateGptImage2CalloutReview',
     'evidence_class',
     'output_sha256',
-    'imagegen_response_non_codex_api_fallback_not_full_evidence',
+    'imagegenEvidenceClassBlockers',
+    'isFullImagegenOutputSource',
     'extractRealCallouts',
     'buildImageUxCalloutExtractionReport'
 ]);
+requireContains('ux-review:run-wires-imagegen', 'src/core/imagegen/imagegen-evidence.ts', [
+    '_non_codex_api_fallback_not_full_evidence',
+    '_mock_fixture_not_full_evidence',
+    'CODEX_LB_PROVIDER_IMAGEGEN_EVIDENCE_CLASS',
+    'FULL_IMAGEGEN_EVIDENCE_CLASSES'
+]);
 emitGate('ux-review:run-wires-imagegen', { command_path: 'sks ux-review run', imagegen_adapter: 'generateGptImage2CalloutReview' });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "7.1.0",
+  "version": "7.3.0",
   "description": "Proof-first Codex CLI and ChatGPT Desktop orchestration for AI coding agents, release verification, and macOS menu bar control.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -35,11 +35,9 @@
     "!dist/**/*.test.js",
     "!dist/core/telegram/mini-app.js",
     "!dist/scripts/**",
-    "dist/scripts/core-skill-no-drift-check.js",
-    "dist/scripts/{agent-message-bus-reader-check.js,all-feature-deep-completion-check.js,appshots-thread-attachment-discovery-check.js,architecture-guard-check.js,build-dist.js,build-once-runner-check.js,canonical-test-runner.js,certificate-sla-check.js,changelog-check.js,check-architecture.js,check-cli-entrypoint.js,check-command-module-budget.js,check-feature-quality.js,check-legacy-free.js,check-pipeline-budget.js,check-pipeline-runtime.js,check-publish-tag.js,check-route-modularity.js,check-runtime-schemas.js,cli-output-consistency-check.js,codex-0-134-runner-truth-check.js,codex-0-137-compat-check.js,codex-0138-capability-artifact-check.js,codex-0138-capability-check.js,codex-0138-doctor-check.js,codex-0138-feature-probes-check.js,codex-0140-capability-check.js,codex-0140-feature-probes-check.js,codex-0144-app-server-v2-check.js,codex-0144-binary-identity-check.js,codex-0144-capability-check.js,codex-0144-core-real-probes-check.js,codex-0144-manifest-check.js,codex-0144-policy-check.js,codex-0144-thread-store-check.js,codex-agent-role-rich-content-check.js,codex-agent-role-sync-check.js,codex-agent-type-routing-check.js,codex-app-execution-profile-check.js,codex-app-fast-ui-preservation-check.js,codex-app-handoff-check.js,codex-app-handoff-launch-check.js,codex-config-load-probe.js,codex-control-all-pipelines-check.js,codex-control-event-stream-ledger-check.js,codex-control-tool-output-continuity-audit-check.js,codex-lb-fast-mode-truth-check.js,codex-lb-fast-ui-preservation-check.js,codex-lb-gpt56-fast-profile-check.js,codex-native-agent-role-content-check.js,codex-native-feature-broker-blackbox.js,codex-native-feature-broker-check.js,codex-native-harness-compat-check.js,codex-native-hook-lifecycle-proof-check.js,codex-native-runtime-e2e-fixture.js,codex-permission-profiles-check.js,codex-plugin-app-template-policy-check.js,codex-project-config-policy-splitter-check.js,codex-sdk-all-pipelines-check.js,codex-sdk-backend-router-check.js,codex-sdk-capability-check.js,codex-sdk-event-stream-ledger-check.js,codex-sdk-real-smoke-check.js,competitor-scorecard-check.js,concurrent-session-collision-check.js,context7-evidence-dedupe-check.js,core-skill-card-schema-check.js,core-skill-deployment-snapshot-check.js,core-skill-heldout-validation-check.js,core-skill-no-inference-optimizer-check.js,core-skill-patch-check.js,core-skill-route-runtime-integration-check.js,db-route-materialization-check.js,dfix-fixture-check.js,dfix-patch-handoff-check.js,dfix-verification-check.js,dfix-verification-recommendation-check.js,docs-truthfulness-check.js,doctor-codex-app-harness-check.js,doctor-context7-mcp-repair-blackbox.js,doctor-fastpath-check.js,doctor-fix-production-blackbox.js,doctor-fix-proves-codex-read-check.js,doctor-fixes-codex-app-fast-ui-check.js,doctor-idempotence-check.js,doctor-ops-semantics-check.js,doctor-startup-config-repair-blackbox.js,doctor-supabase-mcp-repair-blackbox.js,ensure-bin-executable.js,evidence-flagship-coverage-check.js,fast-codex-service-tier-proof-check.js,fixtures/fake-codex-config-loader.js,fsx-hotpath-check.js,gate-policy-audit-check.js,geo-claim-evidence-check.js,geo-cli-blackbox-check.js}",
-    "dist/scripts/{geo-crawler-policy-check.js,git-worktree-checkpoint-check.js,git-worktree-cross-rebase-check.js,git-worktree-diff-envelope-check.js,git-worktree-dirty-lock-check.js,git-worktree-dirty-main-detection-check.js,git-worktree-integration-primary-check.js,git-worktree-manifest-append-check.js,git-worktree-untracked-diff-check.js,goal-artifact-compat-check.js,harness-benchmark-check.js,high-risk-contracts-check.js,hook-latency-budget-check.js,hook-latency-quantum-check.js,image-artifact-path-contract-check.js,imagegen-real-smoke-check.js,import-graph-budget-check.js,init-deep-backup-retention-check.js,installed-package-smoke-check.js,legacy-gate-inventory-check.js,legacy-gate-purge-check.js,legacy-strong-inventory-check.js,current-surface-update-e2e-check.js,current-upgrade-matrix-check.js,lib/codex-sdk-gate-lib.js,lib/ensure-dist-fresh.js,lib/git-worktree-fixture.js,lib/valid-png-fixture.js,local-collab-all-pipelines-final-gpt-check.js,loop-directive-check-lib.js,loop-integration-finalizer-check.js,loop-worker-fixture-child.js,mad-sks-sql-plane-capability-check.js,current-command-surface-check.js,mad-sks-sql-plane-lifecycle-hook-decision-check.js,mad-sks-launch-sql-plane-boundary-check.js,mad-sks-sql-plane-result-lifecycle-check.js,mad-preflight-blocks-unreadable-config-check.js,mad-sks-app-ui-no-mutation-check.js,managed-config-merge-check.js,mcp-plugin-inventory-check.js,mcp-tool-naming-parity-check.js,model-call-concurrency-check.js,mutation-callsite-coverage-check.js,naruto-codex-e2e-check.js,naruto-ssot-gate-aliases-check.js,naruto-ssot-pipeline-default-check.js,naruto-ssot-route-normalization-check.js,naruto-ssot-routing-check.js,naruto-worktree-coding-blackbox.js,naruto-write-e2e-check.js,native-capability-postcheck-check.js,native-capability-repair-matrix-check.js,native-image-generation-repair-check.js,official-subagent-workflow-check.js,ops-diagnostics-bundle-check.js,package-published-contract-check.js,packlist-performance-check.js,parallel-production-smoke-check.js,perf-budget-check.js,pipeline-codex-native-doctor-mad-routing-check.js,pipeline-codex-native-doctor-mad-routing-real-blackbox.js,pipeline-codex-native-image-routing-check.js,pipeline-codex-native-image-routing-real-blackbox.js,pipeline-codex-native-loop-routing-check.js,pipeline-codex-native-loop-routing-real-blackbox.js,pipeline-codex-native-qa-routing-check.js,pipeline-codex-native-qa-routing-real-blackbox.js,pipeline-codex-native-research-routing-check.js,pipeline-codex-native-research-routing-real-blackbox.js,ppt-full-e2e-blackbox-check.js,ppt-real-export-adapter-check.js,ppt-real-imagegen-smoke-check.js,ppt-real-imagegen-wiring-check.js,ppt-reexport-rereview-check.js,prepublish-fast-check.js,prepublish-release-check-or-fast.js,probe-memoization-check.js,product-design-plugin-routing-check.js,project-skill-dedupe-blackbox.js,prompt-placeholder-guard-check.js,proof-root-cause-policy-check.js,provider-badge-context-check.js,python-codex-sdk-all-pipelines-check.js,qa-loop-app-handoff-capability-check.js,qa-loop-app-handoff-check.js,qa-loop-app-handoff-cli-check.js,qa-loop-app-handoff-confirmation-check.js,qa-loop-app-handoff-gate-lifecycle-check.js,qa-loop-app-handoff-launch-check.js,qa-loop-app-handoff-status-lifecycle-check.js,qa-loop-budget-policy-check.js,qa-loop-effort-escalation-check.js,qa-loop-execution-profile-routing-check.js,qa-loop-image-path-exposure-check.js,qa-loop-image-path-prompt-injection-check.js,release-affected-selector-check.js,release-aggressive-resource-governor-check.js,release-cache-glob-hashing-check.js,release-cache-input-classifier-check.js,release-cache-neutralization-report-check.js,release-cache-version-neutral-fixture-check.js}",
-    "dist/scripts/{release-check-stamp.js,release-dag-full-coverage-check.js,release-dist-freshness-check.js,release-dynamic-presets-check.js,release-file-ownership-check.js,release-full-parallelism-blackbox.js,release-gate-batch-runner-check.js,release-gate-budget-check.js,release-gate-dag-runner-check.js,release-gate-dag-runner.js,release-gate-script-parity-check.js,release-latency-slo-check.js,release-macos-menubar-proof.js,release-main-push-guard.js,release-main-push-receipt.js,release-metadata-1-19-check.js,release-metadata-check.js,release-pack-receipt.js,release-parallel-speed-budget-check.js,release-proof-truth-check.js,release-provenance-check.js,release-real-check.js,release-runtime-truth-matrix-check.js,release-speed-summary.js,release-version-truth-check.js,research-blueprint-densifier-check.js,research-claim-builder-check.js,research-complete-package-fixture-check.js,research-execution-profile-routing-check.js,research-final-reviewer-blackbox.js,responses-retry-policy-centralized-check.js,retention-apply-smoke-check.js,retention-budget-check.js,retention-dry-run-check.js,rollback-recovery-smoke-check.js,route-intent-regression-check.js,runtime-dist-parity-check.js,runtime-no-src-mjs-check.js,runtime-current-terminal-check.js,runtime-proof-summary-check.js,runtime-script-pack-closure-check.js,runtime-ts-rust-boundary-check.js,runtime-ts-source-of-truth-check.js,scheduler-batch-dispatch-check.js,scheduler-parallel-proof-consistency-check.js,scheduler-utilization-integral-check.js,search-visibility-gate-lib.js,secret-preservation-check.js,secret-preservation-guard-check.js,seo-audit-fixture-check.js,seo-cli-blackbox-check.js,seo-geo-geo-disambiguation-check.js,seo-geo-route-identity-check.js,seo-geo-skill-rich-content-check.js,seo-marketing-truthfulness-check.js,seo-metadata-sync-check.js,seo-no-mutation-by-default-check.js,shared-memory-fixture-check.js,side-effect-runtime-report-check.js,sizecheck.js,skill-name-canonicalizer-check.js,skills-manifest-continuity-check.js,sks-1-11-gate-lib.js,sks-1-12-real-execution-check-lib.js,sks-1-18-gate-lib.js,sks-3-1-4-directive-check-lib.js,sks-3-1-5-directive-check-lib.js,sks-3-1-6-directive-check-lib.js,sks-3-1-8-check-lib.js,sks-menubar-install-check.js,sks-uninstall-regression-check.js,sksd-daemon-check.js,supabase-secret-preservation-blackbox.js,super-search-live-smoke-check.js,super-search-local-http-smoke-check.js,super-search-offline-contract-check.js,super-search-provider-interface-check.js,triwiki-cache-key-check.js,triwiki-proof-bank-blackbox.js,triwiki-proof-bank-check.js,triwiki-proof-card-check.js,trust-fixture-check.js,type-surface-codex-app-check.js,ultra-router-auto-router-check.js,uninstall-inventory-check.js,update-fastpath-check.js,update-preserves-supabase-keys-blackbox.js,upgrade-migration-matrix-check.js,ux-review-extract-wires-real-extractor-check.js,ux-review-imagegen-blackbox-check.js,ux-review-patch-diff-recheck-check.js,ux-review-real-imagegen-smoke-check.js,ux-review-run-wires-imagegen-check.js,write-build-manifest.js,wrongness-fixture-check.js,zellij-capability-check.js,zellij-developer-controls-check.js,zellij-doctor-readiness-check.js}",
-    "dist/scripts/{zellij-dynamic-pane-lifecycle-check.js,zellij-fake-adapter-check.js,zellij-first-slot-down-stack-check.js,zellij-first-slot-down-stack-real-check.js,zellij-homebrew-policy-check.js,zellij-initial-main-only-blackbox.js,zellij-lane-renderer-check.js,zellij-launch-command-truth-check.js,zellij-layout-valid-check.js,zellij-pane-creation-lock-metrics-check.js,zellij-pane-lock-concurrency-blackbox.js,zellij-pane-lock-does-not-block-worker-check.js,zellij-pane-lock-open-worker-integration-blackbox.js,zellij-pane-proof-check.js,zellij-qa-app-handoff-status-check.js,zellij-real-session-cleanup-check.js,zellij-real-session-launch-check.js,zellij-right-column-geometry-proof.js,zellij-right-column-headless-overflow-check.js,zellij-right-column-manager-check.js,zellij-screen-proof-check.js,zellij-self-heal-check.js,zellij-self-heal-dry-run-check.js,zellij-self-heal-status-contract-check.js,zellij-self-heal-typed-blackbox.js,zellij-slot-column-anchor-check.js,zellij-slot-column-anchor-telemetry-check.js,zellij-slot-only-ui-check.js,zellij-slot-pane-renderer-check.js,zellij-slot-pane-stale-detection-check.js,zellij-slot-pane-telemetry-renderer-check.js,zellij-slot-renderer-proof-semantics-check.js,zellij-slot-telemetry-check.js,zellij-slot-telemetry-incremental-check.js,zellij-slot-telemetry-live-flush-check.js,zellij-slot-telemetry-performance-check.js,zellij-slot-telemetry-real-blackbox.js,zellij-slot-telemetry-renderer-check.js,zellij-slot-telemetry-runtime-check.js,zellij-spawn-on-demand-layout-check.js,zellij-stacked-capability-routing-check.js,zellij-stacked-fallback-integration-blackbox.js,zellij-stacked-version-matrix-check.js,zellij-stacked-version-parser-check.js,zellij-ui-design-check.js,zellij-update-missing-self-heal-check.js,zellij-update-prompt-matrix-check.js,zellij-update-prompt-mode-check.js,zellij-update-prompt-safety-check.js,zellij-worker-pane-manager-check.js,zellij-worker-pane-manager-single-owner-check.js,zellij-worker-pane-real-ui-blackbox.js}",
+    "dist/scripts/{agent-guidance-dedup-check.js,agent-message-bus-reader-check.js,all-feature-deep-completion-check.js,appshots-thread-attachment-discovery-check.js,architecture-guard-check.js,certificate-sla-check.js,check-runtime-schemas.js,cli-output-consistency-check.js,codex-0-134-runner-truth-check.js,codex-0-137-compat-check.js,codex-0138-capability-artifact-check.js,codex-0138-capability-check.js,codex-0138-doctor-check.js,codex-0138-feature-probes-check.js,codex-0144-app-server-v2-check.js,codex-0144-binary-identity-check.js,codex-0144-capability-check.js,codex-0144-core-real-probes-check.js,codex-0144-manifest-check.js,codex-0144-policy-check.js,codex-0144-thread-store-check.js,codex-agent-role-rich-content-check.js,codex-agent-role-sync-check.js,codex-agent-type-routing-check.js,codex-app-execution-profile-check.js,codex-app-fast-ui-preservation-check.js,codex-app-handoff-check.js,codex-app-handoff-launch-check.js,codex-config-load-probe.js,codex-control-all-pipelines-check.js,codex-control-event-stream-ledger-check.js,codex-control-tool-output-continuity-audit-check.js,codex-lb-fast-mode-truth-check.js,codex-lb-fast-ui-preservation-check.js,codex-lb-gpt56-fast-profile-check.js,codex-native-agent-role-content-check.js,codex-native-feature-broker-blackbox.js,codex-native-feature-broker-check.js,codex-native-harness-compat-check.js,codex-native-hook-lifecycle-proof-check.js,codex-native-runtime-e2e-fixture.js,codex-plugin-app-template-policy-check.js,codex-sdk-all-pipelines-check.js,codex-sdk-backend-router-check.js,codex-sdk-capability-check.js,codex-sdk-event-stream-ledger-check.js,codex-sdk-real-smoke-check.js,concurrent-session-collision-check.js,context7-evidence-dedupe-check.js,core-skill-card-schema-check.js,core-skill-deployment-snapshot-check.js,core-skill-heldout-validation-check.js,core-skill-no-inference-optimizer-check.js,core-skill-patch-check.js,core-skill-route-runtime-integration-check.js,current-command-surface-check.js,current-surface-update-e2e-check.js,current-upgrade-matrix-check.js,dfix-fixture-check.js,dfix-patch-handoff-check.js,dfix-verification-check.js,dfix-verification-recommendation-check.js,docs-truthfulness-check.js,doctor-codex-app-harness-check.js,doctor-fix-proves-codex-read-check.js,doctor-fixes-codex-app-fast-ui-check.js,evidence-flagship-coverage-check.js,fast-codex-service-tier-proof-check.js,fixtures/fake-codex-config-loader.js,gate-policy-audit-check.js,geo-claim-evidence-check.js,geo-cli-blackbox-check.js,geo-crawler-policy-check.js,git-worktree-checkpoint-check.js,git-worktree-cross-rebase-check.js,git-worktree-diff-envelope-check.js,git-worktree-dirty-lock-check.js,git-worktree-dirty-main-detection-check.js,git-worktree-integration-primary-check.js,git-worktree-manifest-append-check.js,git-worktree-untracked-diff-check.js,goal-artifact-compat-check.js,harness-benchmark-check.js,helper-dedup-check.js,hook-latency-budget-check.js,image-artifact-path-contract-check.js,imagegen-real-smoke-check.js,init-deep-backup-retention-check.js,installed-package-smoke-check.js,legacy-gate-inventory-check.js,legacy-gate-purge-check.js,legacy-strong-inventory-check.js,lib/codex-sdk-gate-lib.js,lib/ensure-dist-fresh.js,lib/git-worktree-fixture.js,lib/valid-png-fixture.js,local-collab-all-pipelines-final-gpt-check.js,loop-directive-check-lib.js,loop-integration-finalizer-check.js,loop-worker-fixture-child.js,mad-preflight-blocks-unreadable-config-check.js,mad-sks-app-ui-no-mutation-check.js}",
+    "dist/scripts/{mad-sks-launch-sql-plane-boundary-check.js,mad-sks-sql-plane-capability-check.js,mad-sks-sql-plane-lifecycle-hook-decision-check.js,mad-sks-sql-plane-result-lifecycle-check.js,managed-config-merge-check.js,mcp-plugin-inventory-check.js,model-call-concurrency-check.js,mutation-callsite-coverage-check.js,naruto-ssot-gate-aliases-check.js,naruto-ssot-pipeline-default-check.js,naruto-ssot-route-normalization-check.js,naruto-ssot-routing-check.js,naruto-worktree-coding-blackbox.js,native-capability-repair-matrix-check.js,native-image-generation-repair-check.js,official-subagent-workflow-check.js,package-published-contract-check.js,packlist-performance-check.js,pipeline-codex-native-doctor-mad-routing-check.js,pipeline-codex-native-doctor-mad-routing-real-blackbox.js,pipeline-codex-native-image-routing-check.js,pipeline-codex-native-image-routing-real-blackbox.js,pipeline-codex-native-loop-routing-check.js,pipeline-codex-native-loop-routing-real-blackbox.js,pipeline-codex-native-qa-routing-check.js,pipeline-codex-native-qa-routing-real-blackbox.js,pipeline-codex-native-research-routing-check.js,pipeline-codex-native-research-routing-real-blackbox.js,ppt-full-e2e-blackbox-check.js,ppt-real-export-adapter-check.js,ppt-real-imagegen-smoke-check.js,ppt-real-imagegen-wiring-check.js,ppt-reexport-rereview-check.js,prepublish-fast-check.js,prepublish-release-check-or-fast.js,probe-memoization-check.js,product-design-plugin-routing-check.js,prompt-placeholder-guard-check.js,proof-root-cause-policy-check.js,provider-badge-context-check.js,python-codex-sdk-all-pipelines-check.js,qa-loop-app-handoff-capability-check.js,qa-loop-app-handoff-check.js,qa-loop-app-handoff-cli-check.js,qa-loop-app-handoff-confirmation-check.js,qa-loop-app-handoff-gate-lifecycle-check.js,qa-loop-app-handoff-launch-check.js,qa-loop-app-handoff-status-lifecycle-check.js,qa-loop-budget-policy-check.js,qa-loop-effort-escalation-check.js,qa-loop-execution-profile-routing-check.js,qa-loop-image-path-exposure-check.js,qa-loop-image-path-prompt-injection-check.js,release-affected-selector-check.js,release-aggressive-resource-governor-check.js,release-cache-glob-hashing-check.js,release-cache-input-classifier-check.js,release-cache-neutralization-report-check.js,release-cache-version-neutral-fixture-check.js,release-check-stamp.js,release-dynamic-presets-check.js,release-full-parallelism-blackbox.js,release-gate-batch-runner-check.js,release-gate-budget-check.js,release-gate-dag-runner-check.js,release-gate-dag-runner.js,release-latency-slo-check.js,release-metadata-check.js,release-pack-receipt.js,release-parallel-speed-budget-check.js,release-proof-truth-check.js,release-provenance-check.js,release-real-check.js,release-runtime-truth-matrix-check.js,release-speed-summary.js,research-blueprint-densifier-check.js,research-claim-builder-check.js,research-complete-package-fixture-check.js,research-execution-profile-routing-check.js,research-final-reviewer-blackbox.js,responses-retry-policy-centralized-check.js,runtime-proof-summary-check.js,runtime-script-pack-closure-check.js,scheduler-batch-dispatch-check.js,scheduler-parallel-proof-consistency-check.js,scheduler-utilization-integral-check.js,search-visibility-gate-lib.js,secret-preservation-check.js,seo-audit-fixture-check.js,seo-cli-blackbox-check.js,seo-geo-geo-disambiguation-check.js,seo-geo-route-identity-check.js,seo-geo-skill-rich-content-check.js,seo-no-mutation-by-default-check.js,shared-memory-fixture-check.js,side-effect-runtime-report-check.js,skill-name-canonicalizer-check.js,skills-manifest-continuity-check.js,sks-cli-gate-lib.js}",
+    "dist/scripts/{real-execution-check-lib.js,gate-lib.js,runtime-domain-gate-lib.js,typed-routing-gate-lib.js,codex-native-gate-lib.js,skill-fixture-check-lib.js,sks-uninstall-regression-check.js,sksd-daemon-check.js,super-search-provider-interface-check.js,triwiki-cache-key-check.js,triwiki-proof-bank-blackbox.js,triwiki-proof-bank-check.js,triwiki-proof-card-check.js,trust-fixture-check.js,type-surface-codex-app-check.js,ultra-router-auto-router-check.js,uninstall-inventory-check.js,ux-review-extract-wires-real-extractor-check.js,ux-review-imagegen-blackbox-check.js,ux-review-patch-diff-recheck-check.js,ux-review-real-imagegen-smoke-check.js,ux-review-run-wires-imagegen-check.js,wrongness-fixture-check.js,zellij-pane-proof-check.js,zellij-real-session-cleanup-check.js,zellij-real-session-launch-check.js,zellij-screen-proof-check.js}",
     "!dist/core/evidence/flagship-proof-graph-validator.js",
     "!dist/core/agents/agent-ledger-schemas.js",
     "!dist/core/agents/agent-cleanup-executor.js",
@@ -47,7 +45,6 @@
     "!dist/core/release/npm-stage-tarball-verifier-support.js",
     "!dist/vendor/openai-codex/rust-v0.131.0",
     "config/codex-releases/rust-v0.145.0.json",
-    "config/bench-baseline.json",
     "config/competitor-scorecard-baseline.json",
     "config/architecture-budgets.v1.json",
     "config/perf-budgets.v1.json",
@@ -96,6 +93,7 @@
     "schema:check": "node ./dist/scripts/check-runtime-schemas.js",
     "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",
     "postinstall": "node ./dist/bin/sks.js postinstall",
+    "postinstall:global-doctor-blackbox": "node ./dist/scripts/postinstall-global-doctor-blackbox.js",
     "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",
     "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",
     "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",

package/release-gates.v2.json

@@ -1296,6 +1296,61 @@
       ],
       "output_contract": "sks.gate-result.v1"
     },
+    {
+      "id": "agent-guidance:dedup",
+      "command": "node ./dist/scripts/agent-guidance-dedup-check.js",
+      "deps": [],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 120000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "src/core/agent-guidance/directive-registry.ts",
+          "src/core/codex-app/codex-init-deep.ts",
+          "src/scripts/agent-guidance-dedup-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "release"
+      ],
+      "output_contract": "sks.gate-result.v1"
+    },
+    {
+      "id": "quality:helper-dedup",
+      "command": "node ./dist/scripts/helper-dedup-check.js",
+      "deps": [],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 120000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "src/core/quality/helper-dedup.ts",
+          "src/scripts/helper-dedup-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "release"
+      ],
+      "output_contract": "sks.gate-result.v1"
+    },
     {
       "id": "legacy:strong-inventory",
       "command": "node ./dist/scripts/legacy-strong-inventory-check.js",
@@ -3045,11 +3100,11 @@
           "release-gates.v2.json",
           "src/commands/doctor.ts",
           "src/cli/install-helpers.ts",
-        "src/core/codex-app/**",
-        "src/core/providers/openrouter/openrouter-account.ts",
-        "src/core/providers/openrouter/openrouter-error.ts",
-        "src/core/providers/openrouter/__tests__/openrouter-account.test.ts",
-        "src/core/doctor/**",
+          "src/core/codex-app/**",
+          "src/core/providers/openrouter/openrouter-account.ts",
+          "src/core/providers/openrouter/openrouter-error.ts",
+          "src/core/providers/openrouter/__tests__/openrouter-account.test.ts",
+          "src/core/doctor/**",
           "src/core/init.ts",
           "src/core/init/**",
           "src/core/subagents/official-subagent-config.ts"
@@ -3085,16 +3140,16 @@
           "src/core/subagents/thread-budget.ts",
           "src/core/subagents/agent-catalog.ts",
           "src/core/subagents/official-subagent-prompt.ts",
-        "src/core/subagents/official-subagent-preparation.ts",
-        "src/core/subagents/role-model-preferences.ts",
-        "src/core/subagents/naruto-help-contract.ts",
+          "src/core/subagents/official-subagent-preparation.ts",
+          "src/core/subagents/role-model-preferences.ts",
+          "src/core/subagents/naruto-help-contract.ts",
           "src/core/subagents/__tests__/official-subagent-config.test.ts",
           "src/core/subagents/__tests__/model-policy.test.ts",
           "src/core/subagents/__tests__/task-profile.test.ts",
           "src/core/subagents/__tests__/thread-budget-and-plan.test.ts",
           "src/core/subagents/__tests__/agent-catalog-fanout.test.ts",
-        "src/core/subagents/__tests__/official-subagent-prompt.test.ts",
-        "src/core/subagents/__tests__/role-model-preferences.test.ts",
+          "src/core/subagents/__tests__/official-subagent-prompt.test.ts",
+          "src/core/subagents/__tests__/role-model-preferences.test.ts",
           "src/core/runtime/task-profile.ts",
           "src/core/routes.ts",
           "src/core/routes/**",
@@ -4531,7 +4586,7 @@
           "src/core/version.ts",
           "src/bin/sks.ts",
           "src/scripts/release-metadata-check.ts",
-          "src/scripts/release-metadata-1-19-check.ts"
+          "src/scripts/release-metadata-check.ts"
         ]
       },
       "isolation": {

package/runtime-required-scripts.json

@@ -1,35 +1,159 @@
 {
   "schema": "sks.runtime-required-scripts.v1",
+  "root_mode": "manifest_ssot",
   "scripts": [
     {
       "path": "dist/scripts/codex-config-load-probe.js",
-      "reason": "doctor/install runtime probes Codex config load behavior after package install"
+      "category": "installed_repair",
+      "reason": "installed doctor and repair paths probe whether Codex can load the managed project config"
     },
     {
-      "path": "dist/scripts/release-file-ownership-check.js",
-      "reason": "release integration verifies worker ownership before accepting a workstream commit"
+      "path": "dist/scripts/lib/ensure-dist-fresh.js",
+      "category": "installed_repair",
+      "reason": "postinstall and update self-verification dynamically restore the installed package build stamp"
     },
     {
-      "path": "dist/scripts/release-macos-menubar-proof.js",
-      "reason": "macOS release proof validates the native Menu Bar build and install receipts"
+      "path": "dist/scripts/release-pack-receipt.js",
+      "category": "installed_package_verification",
+      "reason": "packaged release verification creates, inspects, and compares immutable tarball receipts"
+    }
+  ],
+  "reference_source_policies": [
+    {
+      "source": "package.json#scripts",
+      "classification": "checkout_ci",
+      "reason": "npm development and release scripts execute from a source checkout and are not installed runtime entrypoints"
     },
     {
-      "path": "dist/scripts/release-main-push-guard.js",
-      "reason": "release director verifies the immutable pre-push authorization boundary"
+      "source": "release-gates.v2.json",
+      "classification": "installed_runtime",
+      "reason": "public check, gates, and release commands dispatch the packaged release gate DAG"
     },
     {
-      "path": "dist/scripts/release-main-push-receipt.js",
-      "reason": "release director records and verifies the exact main push result"
+      "source": "infra-harness-gates.json",
+      "classification": "checkout_ci",
+      "reason": "infrastructure harness gates are checkout-only verification"
     },
     {
-      "path": "dist/scripts/release-pack-receipt.js",
-      "reason": "release jobs bind, inspect, and compare the immutable local and staged tarballs"
+      "source": ".github/workflows/**",
+      "classification": "checkout_ci",
+      "reason": "GitHub Actions runs against the release checkout and staged tarball, not from an installed customer package"
+    },
+    {
+      "source": "src/core/build/build-once-runner.ts",
+      "classification": "checkout_ci",
+      "reason": "the build-once runner validates source-checkout build scripts"
+    },
+    {
+      "source": "dist/core/build/build-once-runner.js",
+      "classification": "checkout_ci",
+      "reason": "the built build-once runner remains a checkout release helper"
+    },
+    {
+      "source": "src/core/commands/check-command.ts",
+      "classification": "installed_runtime",
+      "reason": "the public check command directly dispatches proof-bank and release scripts"
+    },
+    {
+      "source": "dist/core/commands/check-command.js",
+      "classification": "installed_runtime",
+      "reason": "the built public check command directly dispatches proof-bank and release scripts"
+    },
+    {
+      "source": "src/core/commands/gates-command.ts",
+      "classification": "installed_runtime",
+      "reason": "the public gates command dispatches the packaged release DAG"
+    },
+    {
+      "source": "dist/core/commands/gates-command.js",
+      "classification": "installed_runtime",
+      "reason": "the built public gates command dispatches the packaged release DAG"
+    },
+    {
+      "source": "src/core/commands/release-command.ts",
+      "classification": "installed_runtime",
+      "reason": "the public release command directly dispatches the packaged release DAG"
+    },
+    {
+      "source": "dist/core/commands/release-command.js",
+      "classification": "installed_runtime",
+      "reason": "the built public release command directly dispatches the packaged release DAG"
+    },
+    {
+      "source": "src/core/dfix/verification-selector.ts",
+      "classification": "installed_runtime",
+      "reason": "the public DFix route selects these verification scripts when DFix source changes"
+    },
+    {
+      "source": "dist/core/dfix/verification-selector.js",
+      "classification": "installed_runtime",
+      "reason": "the built public DFix route selects these verification scripts when DFix source changes"
+    },
+    {
+      "source": "src/core/doctor/codex-0139-doctor.ts",
+      "classification": "installed_runtime",
+      "reason": "installed Doctor exposes the strict real-probe command and must not point at a missing script"
+    },
+    {
+      "source": "dist/core/doctor/codex-0139-doctor.js",
+      "classification": "installed_runtime",
+      "reason": "built installed Doctor exposes the strict real-probe command"
+    },
+    {
+      "source": "src/core/feature-fixtures.ts",
+      "classification": "test_fixture",
+      "reason": "feature fixture commands are repository selftest fixtures"
+    },
+    {
+      "source": "dist/core/feature-fixtures.js",
+      "classification": "test_fixture",
+      "reason": "built feature fixture commands are repository selftest fixtures"
+    },
+    {
+      "source": "src/core/loops/loop-worker-runtime.ts",
+      "classification": "installed_runtime",
+      "reason": "the public loop runtime launches the worker child as its execution entrypoint"
+    },
+    {
+      "source": "dist/core/loops/loop-worker-runtime.js",
+      "classification": "installed_runtime",
+      "reason": "the built public loop runtime launches the worker child as its execution entrypoint"
+    },
+    {
+      "source": "src/core/release/gate-timing.ts",
+      "classification": "installed_runtime",
+      "reason": "installed performance diagnostics execute the packaged release gate DAG"
+    },
+    {
+      "source": "dist/core/release/gate-timing.js",
+      "classification": "installed_runtime",
+      "reason": "built installed performance diagnostics execute the packaged release gate DAG"
+    },
+    {
+      "source": "src/core/release/release-stamp-proof.ts",
+      "classification": "installed_runtime",
+      "reason": "installed release verification exposes the release check-stamp entrypoint"
+    },
+    {
+      "source": "dist/core/release/release-stamp-proof.js",
+      "classification": "installed_runtime",
+      "reason": "built installed release verification exposes the release check-stamp entrypoint"
+    },
+    {
+      "source": "src/core/release/stage-publish.ts",
+      "classification": "checkout_ci",
+      "reason": "staged publish drives the repository workflow and the maintainer-local tarball verifier from a source checkout, never from an installed package"
+    },
+    {
+      "source": "dist/core/release/stage-publish.js",
+      "classification": "checkout_ci",
+      "reason": "the built staged publish driver remains a checkout-only release helper gated on this repository origin"
     }
   ],
   "dynamic_reference_policies": [
     {
       "source": "dist/core/build/build-once-runner.js",
-      "reason": "derives script paths only from package.json scripts, which are closure roots"
+      "reason": "derives script paths only from package.json scripts, which are explicitly classified as checkout-only"
     },
     {
       "source": "dist/core/release/runtime-script-pack-closure.js",
@@ -37,11 +161,11 @@
     },
     {
       "source": "dist/scripts/release-gate-script-parity-check.js",
-      "reason": "derives script paths only from release-gates.v2.json commands, which are closure roots"
+      "reason": "derives checkout-only script paths from release-gates.v2.json"
     },
     {
       "source": "dist/scripts/release-real-check.js",
-      "reason": "nodeScript call sites are literal-scanned and the release task contract is independently validated"
+      "reason": "release task dispatch is checkout-only and literal call sites are independently scanned"
     }
   ]
 }

package/config/bench-baseline.json

@@ -1,7 +0,0 @@
-{
-  "schema": "sks.coding-bench-baseline.v1",
-  "baseline_version": "5.0.0",
-  "pass_rate": 0.5,
-  "min_pass_rate": 0.5,
-  "notes": "Real model coding bench is skipped (status: not_run, ok: false) with no_backend unless SKS_RUN_CODING_BENCH_REAL=1 and a backend credential is present. A fully-skipped run can no longer report ok:true (20차 P0-5)."
-}

package/dist/core/codex-app/sks-menubar.js

@@ -1 +0,0 @@
-export * from './menubar/index.js';

package/dist/core/release/release-closure-contract.js

@@ -1,30 +0,0 @@
-export const RELEASE_CLOSURE_SCHEMA = 'sks.release-closure.v1';
-export const RELEASE_CLOSURE_MANIFEST_SCHEMA = 'sks.release-closure-manifest.v1';
-export const RELEASE_CLOSURE_AUDIT_VERSION = '6.3.0';
-export const RELEASE_630_MISSION_ID = 'M-20260715-150100-34bb';
-export const FINDING_PROOF_SCHEMA = 'sks.release-finding-proof.v1';
-export const LIFECYCLE_PROVENANCE_SCHEMA = 'sks.codex-rollout-event-proof.v1';
-export const DELETION_COUNTING_SEMANTICS = 'git_diff_deleted_files_numstat_v1';
-export const SLICE_HASH_SEMANTICS = 'utf8_lf_lines_with_terminal_lf_v1';
-export const HEAD_BINDING_MODE = 'tracked_manifest_git_blob_at_head_v1';
-export const FINDING_STATUSES = ['fixed', 'not_reproducible_with_evidence', 'accepted_risk_with_expiry', 'deferred_because_out_of_scope'];
-export const P0_FINDING_STATUSES = new Set(['fixed', 'not_reproducible_with_evidence']);
-export const FINDING_IDS = Array.from({ length: 28 }, (_, index) => `F-${String(index + 1).padStart(3, '0')}`);
-export const WORK_ORDER_IDS = Array.from({ length: 28 }, (_, index) => `WO-${String(index).padStart(3, '0')}`);
-export const P0 = new Set(['F-001', 'F-002', 'F-003', 'F-006', 'F-009', 'F-013', 'F-015', 'F-018', 'F-019', 'F-020', 'F-025', 'F-027']);
-export const P2 = new Set(['F-017', 'F-023']);
-export const WORK_ORDER_SHA256 = '601bb141c9365c541a0abf3f361c2bafbd7b5a7c80557bccb8dd1dedaa12aa11';
-export const POST_MAIN_WORK_ORDERS = new Set(['WO-002', 'WO-019', 'WO-020', 'WO-022', 'WO-023', 'WO-024', 'WO-026']);
-export const REQUIRED_ARTIFACTS = {
-    findings: { path: (version) => `.sneakoscope/release/${version}/audit/findings.json`, schema: 'sks.release-findings.v1' },
-    deletion: { path: (version) => `.sneakoscope/release/${version}/audit/overengineering-deletions.json`, schema: 'sks.release-overengineering-deletions.v1' },
-    mission: { path: (_version, mission) => `.sneakoscope/missions/${mission}/mission.json`, schema: null },
-    plan: { path: (_version, mission) => `.sneakoscope/missions/${mission}/subagent-plan.json`, schema: 'sks.subagent-plan.v1' },
-    events: { path: (_version, mission) => `.sneakoscope/missions/${mission}/subagent-events.jsonl`, schema: 'sks.subagent-event-log.v1' },
-    parent_summary: { path: (_version, mission) => `.sneakoscope/missions/${mission}/subagent-parent-summary.json`, schema: 'sks.subagent-parent-summary.v1' },
-    evidence: { path: (_version, mission) => `.sneakoscope/missions/${mission}/subagent-evidence.json`, schema: 'sks.subagent-evidence.v1' },
-    summary: { path: (_version, mission) => `.sneakoscope/missions/${mission}/naruto-summary.json`, schema: 'sks.naruto-subagent-workflow.v1' },
-    gate: { path: (_version, mission) => `.sneakoscope/missions/${mission}/naruto-gate.json`, schema: 'sks.naruto-gate.v1' },
-    ssot: { path: (_version, mission) => `.sneakoscope/missions/${mission}/ssot-guard.json`, schema: 'sks.ssot-guard.v1' },
-    ledger: { path: (_version, mission) => `.sneakoscope/missions/${mission}/work-order-ledger.json`, schema: null }
-};