sneakoscope 8.3.2 → 8.4.0

package/dist/scripts/architecture-map-check.js

@@ -0,0 +1,299 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { assertGate, emitGate, exists, importDist, readJson, readText, root } from './gate-lib.js';
+const MODES = [
+    'contract',
+    'quality',
+    'performance',
+    'regression-fixtures',
+    'legacy-closure',
+    'freshness'
+];
+const modeArg = process.argv.indexOf('--mode') >= 0 ? String(process.argv[process.argv.indexOf('--mode') + 1] || '') : '';
+assertGate(MODES.includes(modeArg), 'architecture_map_check_unknown_mode', {
+    mode: modeArg,
+    modes: [...MODES]
+});
+const mode = modeArg;
+const GATE_ID = `architecture-map:${mode}`;
+const SELF = 'src/scripts/architecture-map-check.ts';
+const POLICY_FILE = 'config/architecture-map-policy.v1.json';
+const MAP_DIR = '.sneakoscope/wiki/architecture-map';
+const SERIALIZER_TEST = 'test/architecture-map/serializer.test.mjs';
+const PROJECTION_TEST = 'dist/core/triwiki/context-graph/projections/mermaid/__tests__/mermaid-projection.test.js';
+function gitGrep(pattern, pathspecs) {
+    const result = spawnSync('git', ['grep', '-n', '-I', '-E', pattern, '--', ...pathspecs], {
+        cwd: root,
+        encoding: 'utf8'
+    });
+    if (result.status !== 0 && result.status !== 1) {
+        assertGate(false, 'architecture_map_git_grep_failed', {
+            pattern,
+            stderr: String(result.stderr || '').slice(0, 400)
+        });
+    }
+    return String(result.stdout || '')
+        .split('\n')
+        .filter(Boolean);
+}
+function walkTs(relDir) {
+    const abs = path.join(root, relDir);
+    if (!fs.existsSync(abs))
+        return [];
+    const out = [];
+    const walk = (dir) => {
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+            const file = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                if (entry.name !== '__tests__')
+                    walk(file);
+                continue;
+            }
+            if (entry.isFile() && entry.name.endsWith('.ts'))
+                out.push(file);
+        }
+    };
+    walk(abs);
+    return out;
+}
+function mermaidImportHits() {
+    const re = /(?:from\s+|import\s*\(\s*)['"]mermaid['"]/;
+    return walkTs('src/core/triwiki/context-graph/architecture')
+        .concat(walkTs('src/core/triwiki/context-graph/projections/mermaid'))
+        .filter((file) => re.test(fs.readFileSync(file, 'utf8')))
+        .map((file) => path.relative(root, file).split(path.sep).join('/'));
+}
+function runNodeTest(testRel, failCode) {
+    const absolute = path.join(root, testRel);
+    assertGate(fs.existsSync(absolute), 'architecture_map_test_missing', {
+        path: testRel,
+        hint: 'run npm run build first when targeting dist/'
+    });
+    const result = spawnSync(process.execPath, ['--test', absolute], {
+        cwd: root,
+        encoding: 'utf8',
+        env: process.env
+    });
+    assertGate(result.status === 0, failCode, {
+        path: testRel,
+        status: result.status,
+        stdout: String(result.stdout || '').slice(-1200),
+        stderr: String(result.stderr || '').slice(-1200)
+    });
+}
+function minimalSnapshot() {
+    const module = (id, modulePath) => ({
+        id,
+        kind: 'module',
+        label: modulePath,
+        trust: 0.9,
+        freshness: 'fresh',
+        risk: 'low',
+        tokenCost: 8,
+        metadata: {},
+        path: modulePath
+    });
+    return {
+        schema: 'sks.context-graph.v1',
+        schemaRevision: '1.0.0',
+        snapshotHash: 'a'.repeat(64),
+        nodes: [module('module:src/core/triwiki', 'src/core/triwiki'), module('module:src/core/errors', 'src/core/errors')],
+        edges: [
+            {
+                id: 'edge:module:src/core/triwiki->module:src/core/errors:imports',
+                from: 'module:src/core/triwiki',
+                to: 'module:src/core/errors',
+                type: 'imports',
+                confidence: 'exact',
+                provenance: { path: 'src/core/triwiki/x.ts', hash: 'abcd', extractor: 'test' },
+                observedAt: '2026-01-01T00:00:00.000Z'
+            }
+        ],
+        cycles: [],
+        extractors: [],
+        nodeCount: 2,
+        edgeCount: 1
+    };
+}
+async function loadCore() {
+    const policyMod = await importDist('core/triwiki/context-graph/architecture/policy.js');
+    const contracts = await importDist('core/triwiki/context-graph/architecture/contracts.js');
+    const mermaid = await importDist('core/triwiki/context-graph/projections/mermaid/index.js');
+    return { policyMod, contracts, mermaid };
+}
+async function runContract() {
+    const { policyMod, contracts } = await loadCore();
+    const allowlist = await importDist('core/triwiki/context-graph/optimizer/allowlist.js');
+    const align = await importDist('core/align/align-route.js');
+    const store = await importDist('core/triwiki/context-graph/store/architecture-map-store.js');
+    let policy;
+    try {
+        policy = policyMod.loadArchitectureMapPolicy(root);
+    }
+    catch (error) {
+        assertGate(false, 'architecture_map_policy_load_failed', {
+            error: error instanceof Error ? error.message : String(error)
+        });
+        throw new Error('unreachable');
+    }
+    assertGate(policy.schema === contracts.ARCHITECTURE_MAP_POLICY_SCHEMA, 'architecture_map_policy_schema_mismatch');
+    assertGate(policy.layers.length > 0, 'architecture_map_policy_empty_layers');
+    assertGate(contracts.ARCHITECTURE_MAP_POLICY_FILE === POLICY_FILE, 'architecture_map_policy_file_path_drift');
+    for (const schemaRel of [
+        'schemas/architecture-map-policy.v1.schema.json',
+        'schemas/architecture-map-manifest.v1.schema.json',
+        'schemas/architecture-baseline.v1.schema.json',
+        'schemas/architecture-review.v1.schema.json',
+        'schemas/mermaid-projection.v1.schema.json'
+    ]) {
+        assertGate(exists(schemaRel), 'architecture_map_schema_missing', { path: schemaRel });
+    }
+    const classification = allowlist.classifyContextGraphPatchTarget(POLICY_FILE);
+    assertGate(classification === 'forbidden', 'architecture_map_policy_patch_target_not_forbidden', {
+        path: POLICY_FILE,
+        classification
+    });
+    assertGate(readText('src/scripts/check-architecture.ts').includes('imports 5+ unrelated route domains'), 'architecture_map_check_architecture_missing_domain_fan_in');
+    assertGate(mermaidImportHits().length === 0, 'architecture_map_mermaid_runtime_import', {
+        hits: mermaidImportHits()
+    });
+    const pkg = readJson('package.json');
+    assertGate(!pkg.dependencies?.mermaid, 'architecture_map_mermaid_in_runtime_deps');
+    assertGate(Boolean(pkg.devDependencies?.mermaid), 'architecture_map_mermaid_devdependency_missing');
+    for (const rel of store.ARCHITECTURE_MAP_ARTIFACT_RELS) {
+        assertGate(align.ALIGN_OUTPUT_ARTIFACTS.includes(rel), 'architecture_map_align_output_list_parity', {
+            missing: rel
+        });
+    }
+    assertGate(store.ARCHITECTURE_MAP_DIR_REL === MAP_DIR, 'architecture_map_dir_drift');
+    assertGate(contracts.GLOBAL_ARCHITECTURE_MAP_VIEW_IDS.length === 7, 'architecture_map_global_view_count');
+    emitGate(GATE_ID, {
+        mode,
+        policy_file: POLICY_FILE,
+        layers: policy.layers.length,
+        patch_target: classification,
+        align_artifacts: store.ARCHITECTURE_MAP_ARTIFACT_RELS.length
+    });
+}
+async function runQuality() {
+    const { policyMod, contracts, mermaid } = await loadCore();
+    const policy = policyMod.loadArchitectureMapPolicy(root);
+    const built = mermaid.buildArchitectureMapViews(minimalSnapshot(), policy, { rootId: 'fixture' });
+    assertGate(built.views.length === contracts.GLOBAL_ARCHITECTURE_MAP_VIEW_IDS.length, 'architecture_map_quality_view_count', { observed: built.views.length });
+    assertGate(built.manifest.schema === contracts.ARCHITECTURE_MAP_MANIFEST_SCHEMA, 'architecture_map_quality_manifest_schema');
+    const absPathHits = [];
+    for (const view of built.views) {
+        assertGate(view.text.startsWith('%% GENERATED BY SKS'), 'architecture_map_quality_missing_header', {
+            viewId: view.viewId
+        });
+        assertGate(/\bflowchart (TD|LR)\b/.test(view.text), 'architecture_map_quality_missing_flowchart', {
+            viewId: view.viewId
+        });
+        if (/\/Users\/|\/home\/|C:\\\\/.test(view.text))
+            absPathHits.push(view.viewId);
+    }
+    assertGate(absPathHits.length === 0, 'architecture_map_quality_absolute_path_leak', { hits: absPathHits });
+    const runs = Math.max(1, policy.accuracyFloors.deterministicHashRuns);
+    const hashes = new Set();
+    for (let index = 0; index < runs; index += 1) {
+        hashes.add(mermaid.buildArchitectureMapViews(minimalSnapshot(), policy, { rootId: 'fixture' }).manifest.canonicalHash);
+    }
+    assertGate(hashes.size === 1, 'architecture_map_quality_nondeterministic', { hashes: [...hashes] });
+    emitGate(GATE_ID, {
+        mode,
+        views: built.views.length,
+        findings: built.findings.length,
+        deterministic_hash_runs: runs,
+        canonical_hash: built.manifest.canonicalHash
+    });
+}
+async function runPerformance() {
+    const { policyMod, mermaid } = await loadCore();
+    const policy = policyMod.loadArchitectureMapPolicy(root);
+    const snapshot = minimalSnapshot();
+    const coldStart = performance.now();
+    const first = mermaid.buildArchitectureMapViews(snapshot, policy, { rootId: 'fixture' });
+    const coldMs = performance.now() - coldStart;
+    const warmStart = performance.now();
+    const second = mermaid.buildArchitectureMapViews(snapshot, policy, { rootId: 'fixture' });
+    const warmMs = performance.now() - warmStart;
+    const totalBytes = first.views.reduce((sum, view) => sum + view.projection.byteLength, 0);
+    assertGate(coldMs <= 1500, 'architecture_map_performance_cold_over_budget', { coldMs });
+    assertGate(warmMs <= 1500, 'architecture_map_performance_warm_over_budget', { warmMs });
+    assertGate(totalBytes <= policy.globalAtlasMaxBytes, 'architecture_map_performance_bytes_over_budget', {
+        totalBytes,
+        limit: policy.globalAtlasMaxBytes
+    });
+    assertGate(first.manifest.canonicalHash === second.manifest.canonicalHash, 'architecture_map_performance_hash_drift');
+    emitGate(GATE_ID, {
+        mode,
+        cold_ms: Math.round(coldMs * 1000) / 1000,
+        warm_ms: Math.round(warmMs * 1000) / 1000,
+        total_bytes: totalBytes,
+        budget_bytes: policy.globalAtlasMaxBytes
+    });
+}
+function runRegressionFixtures() {
+    const suites = ['serializer'];
+    runNodeTest(SERIALIZER_TEST, 'architecture_map_regression_serializer_failed');
+    if (fs.existsSync(path.join(root, PROJECTION_TEST))) {
+        runNodeTest(PROJECTION_TEST, 'architecture_map_regression_projection_failed');
+        suites.push('mermaid-projection');
+    }
+    emitGate(GATE_ID, { mode, suites });
+}
+function runLegacyClosure() {
+    const excluded = [':!CHANGELOG.md', ':!docs/work-orders', ':!docs/architecture', ':!.sneakoscope', `:!${SELF}`];
+    assertGate(!exists('src/scripts/atlas-check.ts'), 'architecture_map_legacy_atlas_check_present');
+    assertGate(!exists('config/architecture-atlas.v1.json'), 'architecture_map_legacy_atlas_policy_present');
+    assertGate(!exists('src/core/architecture-atlas-review.ts'), 'architecture_map_legacy_atlas_review_present');
+    assertGate(!exists('sks.architecture.json'), 'architecture_map_legacy_root_policy_present');
+    const production = walkTs('src/core/triwiki/atlas');
+    assertGate(production.length === 0, 'architecture_map_legacy_atlas_sources_present', {
+        hits: production.slice(0, 8).map((file) => path.relative(root, file).split(path.sep).join('/'))
+    });
+    assertGate(gitGrep('"id":\\s*"atlas:', ['release-gates.v2.json']).length === 0, 'architecture_map_legacy_atlas_gate_ids_present');
+    assertGate(gitGrep("'atlas:", ['src/core/release/release-gate-contract.ts', 'src/scripts/release-metadata-check.ts'])
+        .length === 0, 'architecture_map_legacy_atlas_contract_ids_present');
+    assertGate(gitGrep('\\batlas-(build|repair|refresh)\\b', ['src', ...excluded]).length === 0, 'architecture_map_legacy_write_cli_present');
+    assertGate(gitGrep('\\.sneakoscope/wiki/architecture-atlas/', ['src', ...excluded]).length === 0, 'architecture_map_legacy_wiki_path_survives');
+    emitGate(GATE_ID, { mode, checks: ['atlas_sources', 'atlas_check', 'atlas_gates', 'write_cli', 'wiki_path'] });
+}
+async function runFreshness() {
+    const { contracts } = await loadCore();
+    const manifestRel = `${MAP_DIR}/manifest.json`;
+    assertGate(exists(manifestRel), 'architecture_map_freshness_missing', {
+        path: manifestRel,
+        next_action: 'sks align run'
+    });
+    const manifest = readJson(manifestRel);
+    assertGate(manifest.schema === contracts.ARCHITECTURE_MAP_MANIFEST_SCHEMA, 'architecture_map_freshness_schema');
+    const graphRel = '.sneakoscope/wiki/context-graph.json';
+    assertGate(exists(graphRel), 'architecture_map_freshness_graph_missing', {
+        path: graphRel,
+        next_action: 'sks align run'
+    });
+    const graph = readJson(graphRel);
+    const expected = String(graph.snapshotHash || '');
+    const observed = String(manifest.graphHash || manifest.sourceBinding?.graphHash || '');
+    assertGate(Boolean(expected) && expected === observed, 'architecture_map_freshness_stale', {
+        expected,
+        observed,
+        next_action: 'sks align run'
+    });
+    emitGate(GATE_ID, { mode, graph_hash: observed.slice(0, 16), next_action: null });
+}
+if (mode === 'contract')
+    await runContract();
+else if (mode === 'quality')
+    await runQuality();
+else if (mode === 'performance')
+    await runPerformance();
+else if (mode === 'regression-fixtures')
+    runRegressionFixtures();
+else if (mode === 'legacy-closure')
+    runLegacyClosure();
+else
+    await runFreshness();

package/dist/scripts/lib/ensure-dist-fresh.js

@@ -8,8 +8,22 @@ export const root = path.resolve(process.env.SKS_BUILD_SOURCE_ROOT
 const distRoot = path.resolve(process.env.SKS_BUILD_OUTPUT_DIR || path.join(root, 'dist'));
 export const distStampPath = path.join(distRoot, '.sks-build-stamp.json');
 export const reportStampPath = path.join(root, '.sneakoscope', 'reports', 'dist-build-stamp.json');
+const SOURCE_SNAPSHOT_CACHE = path.join(root, '.sneakoscope', 'cache', 'source-snapshot.json');
+const SOURCE_SNAPSHOT_CACHE_SCHEMA = 'sks.source-snapshot-cache.v1';
+let sourceSnapshotMemo = null;
 export function sourceSnapshot() {
     const files = releaseRelevantFiles();
+    const fingerprint = sourceFingerprint(files);
+    if (sourceSnapshotMemo?.fingerprint === fingerprint) {
+        return { digest: sourceSnapshotMemo.digest, file_count: files.length, files };
+    }
+    const cached = readJson(SOURCE_SNAPSHOT_CACHE);
+    if (cached?.schema === SOURCE_SNAPSHOT_CACHE_SCHEMA
+        && cached.fingerprint === fingerprint
+        && /^[a-f0-9]{64}$/.test(String(cached.digest || ''))) {
+        sourceSnapshotMemo = { fingerprint, digest: cached.digest };
+        return { digest: cached.digest, file_count: files.length, files };
+    }
     const hash = crypto.createHash('sha256');
     for (const file of files) {
         const full = path.join(root, file);
@@ -23,7 +37,40 @@ export function sourceSnapshot() {
         hash.update(sha256(buf));
         hash.update('\0');
     }
-    return { digest: hash.digest('hex'), file_count: files.length, files };
+    const digest = hash.digest('hex');
+    sourceSnapshotMemo = { fingerprint, digest };
+    writeSourceSnapshotCache(fingerprint, digest, files.length);
+    return { digest, file_count: files.length, files };
+}
+function sourceFingerprint(files) {
+    const hash = crypto.createHash('sha256');
+    for (const file of files) {
+        let stat = null;
+        try {
+            stat = fs.statSync(path.join(root, file));
+        }
+        catch { }
+        if (!stat?.isFile())
+            continue;
+        hash.update(`${file}\0${stat.size}\0${stat.mtimeMs}\0${stat.ino}\0`);
+    }
+    return hash.digest('hex');
+}
+function writeSourceSnapshotCache(fingerprint, digest, fileCount) {
+    try {
+        fs.mkdirSync(path.dirname(SOURCE_SNAPSHOT_CACHE), { recursive: true });
+        const temp = `${SOURCE_SNAPSHOT_CACHE}.${process.pid}.tmp`;
+        fs.writeFileSync(temp, `${JSON.stringify({
+            schema: SOURCE_SNAPSHOT_CACHE_SCHEMA,
+            fingerprint,
+            digest,
+            file_count: fileCount,
+            recorded_at: new Date().toISOString()
+        })}\n`);
+        fs.renameSync(temp, SOURCE_SNAPSHOT_CACHE);
+    }
+    catch {
+    }
 }
 export function currentDistFreshness() {
     const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));

package/dist/scripts/release-metadata-check.js

@@ -62,6 +62,8 @@ const requiredPackageScripts = [
 ];
 const requiredReleaseGates = [
     'architecture:guard',
+    'architecture-map:contract',
+    'architecture-map:legacy-closure',
     'codex:current:dependency-graph',
     'codex:current:binary-identity',
     'codex:current:policy',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "8.3.2",
+  "version": "8.4.0",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -41,7 +41,7 @@
     "dist/scripts/canonical-test-runner.js",
     "dist/scripts/desktop-bridge-transport-client.js",
     "dist/scripts/release-version-truth-check.js",
-    "dist/scripts/{agent-guidance-dedup-check.js,agent-message-bus-reader-check.js,all-feature-deep-completion-check.js,appshots-thread-attachment-discovery-check.js,architecture-guard-check.js,certificate-sla-check.js,check-runtime-schemas.js,cli-output-consistency-check.js,codex-current-app-server-v2-check.js,codex-current-binary-identity-check.js,codex-current-capability-check.js,codex-current-core-real-probes-check.js,codex-current-dependency-check.js,codex-current-policy-check.js,codex-current-thread-store-check.js,codex-agent-role-rich-content-check.js,codex-agent-role-sync-check.js,codex-agent-type-routing-check.js,codex-app-execution-profile-check.js,codex-app-fast-ui-preservation-check.js,codex-app-handoff-check.js,codex-app-handoff-launch-check.js,codex-config-load-probe.js,context-graph-check.js,codex-control-all-pipelines-check.js,codex-control-event-stream-ledger-check.js,codex-control-tool-output-continuity-audit-check.js,desktop-bridge-transport-check.js,desktop-bridge-latency-check.js,desktop-bridge-capabilities-check.js,desktop-bridge-real-evidence-check.js,codex-native-agent-role-content-check.js,codex-native-feature-broker-blackbox.js,codex-native-feature-broker-check.js,codex-native-harness-compat-check.js,codex-native-hook-lifecycle-proof-check.js,codex-native-runtime-e2e-fixture.js,codex-plugin-app-template-policy-check.js,codex-sdk-all-pipelines-check.js,codex-sdk-backend-router-check.js,codex-sdk-capability-check.js,codex-sdk-event-stream-ledger-check.js,codex-sdk-real-smoke-check.js,concurrent-session-collision-check.js,context7-evidence-dedupe-check.js,core-skill-card-schema-check.js,core-skill-deployment-snapshot-check.js,core-skill-heldout-validation-check.js,core-skill-no-inference-optimizer-check.js,core-skill-patch-check.js,core-skill-route-runtime-integration-check.js,current-command-surface-check.js,current-surface-update-e2e-check.js,current-upgrade-matrix-check.js,desktop-bridge-unification-check.js,dfix-fixture-check.js,dfix-patch-handoff-check.js,dfix-verification-check.js,dfix-verification-recommendation-check.js,docs-truthfulness-check.js,doctor-codex-app-harness-check.js,doctor-fix-proves-codex-read-check.js,doctor-fixes-codex-app-fast-ui-check.js,evidence-flagship-coverage-check.js,fast-codex-service-tier-proof-check.js,fixtures/fake-codex-config-loader.js,gate-policy-audit-check.js,geo-claim-evidence-check.js,geo-cli-blackbox-check.js,geo-crawler-policy-check.js,git-worktree-checkpoint-check.js,git-worktree-cross-rebase-check.js,git-worktree-diff-envelope-check.js,git-worktree-dirty-lock-check.js,git-worktree-dirty-main-detection-check.js,git-worktree-integration-primary-check.js,git-worktree-manifest-append-check.js,git-worktree-untracked-diff-check.js,goal-artifact-compat-check.js,harness-benchmark-check.js,helper-dedup-check.js,hook-latency-budget-check.js,image-artifact-path-contract-check.js,imagegen-real-smoke-check.js,init-deep-backup-retention-check.js,installed-package-smoke-check.js,lib/codex-sdk-gate-lib.js,lib/ensure-dist-fresh.js,lib/git-worktree-fixture.js,lib/valid-png-fixture.js,local-collab-all-pipelines-final-gpt-check.js,loop-directive-check-lib.js,loop-integration-finalizer-check.js,loop-worker-fixture-child.js,mad-preflight-blocks-unreadable-config-check.js,mad-sks-app-ui-no-mutation-check.js}",
+    "dist/scripts/{agent-guidance-dedup-check.js,agent-message-bus-reader-check.js,all-feature-deep-completion-check.js,appshots-thread-attachment-discovery-check.js,architecture-guard-check.js,architecture-map-check.js,certificate-sla-check.js,check-runtime-schemas.js,cli-output-consistency-check.js,codex-current-app-server-v2-check.js,codex-current-binary-identity-check.js,codex-current-capability-check.js,codex-current-core-real-probes-check.js,codex-current-dependency-check.js,codex-current-policy-check.js,codex-current-thread-store-check.js,codex-agent-role-rich-content-check.js,codex-agent-role-sync-check.js,codex-agent-type-routing-check.js,codex-app-execution-profile-check.js,codex-app-fast-ui-preservation-check.js,codex-app-handoff-check.js,codex-app-handoff-launch-check.js,codex-config-load-probe.js,context-graph-check.js,codex-control-all-pipelines-check.js,codex-control-event-stream-ledger-check.js,codex-control-tool-output-continuity-audit-check.js,desktop-bridge-transport-check.js,desktop-bridge-latency-check.js,desktop-bridge-capabilities-check.js,desktop-bridge-real-evidence-check.js,codex-native-agent-role-content-check.js,codex-native-feature-broker-blackbox.js,codex-native-feature-broker-check.js,codex-native-harness-compat-check.js,codex-native-hook-lifecycle-proof-check.js,codex-native-runtime-e2e-fixture.js,codex-plugin-app-template-policy-check.js,codex-sdk-all-pipelines-check.js,codex-sdk-backend-router-check.js,codex-sdk-capability-check.js,codex-sdk-event-stream-ledger-check.js,codex-sdk-real-smoke-check.js,concurrent-session-collision-check.js,context7-evidence-dedupe-check.js,core-skill-card-schema-check.js,core-skill-deployment-snapshot-check.js,core-skill-heldout-validation-check.js,core-skill-no-inference-optimizer-check.js,core-skill-patch-check.js,core-skill-route-runtime-integration-check.js,current-command-surface-check.js,current-surface-update-e2e-check.js,current-upgrade-matrix-check.js,desktop-bridge-unification-check.js,dfix-fixture-check.js,dfix-patch-handoff-check.js,dfix-verification-check.js,dfix-verification-recommendation-check.js,docs-truthfulness-check.js,doctor-codex-app-harness-check.js,doctor-fix-proves-codex-read-check.js,doctor-fixes-codex-app-fast-ui-check.js,evidence-flagship-coverage-check.js,fast-codex-service-tier-proof-check.js,fixtures/fake-codex-config-loader.js,gate-policy-audit-check.js,geo-claim-evidence-check.js,geo-cli-blackbox-check.js,geo-crawler-policy-check.js,git-worktree-checkpoint-check.js,git-worktree-cross-rebase-check.js,git-worktree-diff-envelope-check.js,git-worktree-dirty-lock-check.js,git-worktree-dirty-main-detection-check.js,git-worktree-integration-primary-check.js,git-worktree-manifest-append-check.js,git-worktree-untracked-diff-check.js,goal-artifact-compat-check.js,harness-benchmark-check.js,helper-dedup-check.js,hook-latency-budget-check.js,image-artifact-path-contract-check.js,imagegen-real-smoke-check.js,init-deep-backup-retention-check.js,installed-package-smoke-check.js,lib/codex-sdk-gate-lib.js,lib/ensure-dist-fresh.js,lib/git-worktree-fixture.js,lib/valid-png-fixture.js,local-collab-all-pipelines-final-gpt-check.js,loop-directive-check-lib.js,loop-integration-finalizer-check.js,loop-worker-fixture-child.js,mad-preflight-blocks-unreadable-config-check.js,mad-sks-app-ui-no-mutation-check.js}",
     "dist/scripts/{latest-version-guidance-check.js,mad-sks-launch-sql-plane-boundary-check.js,mad-sks-sql-plane-capability-check.js,mad-sks-sql-plane-lifecycle-hook-decision-check.js,mad-sks-sql-plane-result-lifecycle-check.js,managed-config-merge-check.js,mcp-plugin-inventory-check.js,model-call-concurrency-check.js,mutation-callsite-analysis.js,mutation-callsite-coverage-check.js,naruto-ssot-gate-aliases-check.js,naruto-ssot-pipeline-default-check.js,naruto-ssot-route-normalization-check.js,naruto-ssot-routing-check.js,naruto-worktree-coding-blackbox.js,native-capability-repair-matrix-check.js,native-image-generation-repair-check.js,official-subagent-workflow-check.js,package-published-contract-check.js,packlist-performance-check.js,pipeline-codex-native-doctor-mad-routing-check.js,pipeline-codex-native-doctor-mad-routing-real-blackbox.js,pipeline-codex-native-image-routing-check.js,pipeline-codex-native-image-routing-real-blackbox.js,pipeline-codex-native-loop-routing-check.js,pipeline-codex-native-loop-routing-real-blackbox.js,pipeline-codex-native-qa-routing-check.js,pipeline-codex-native-qa-routing-real-blackbox.js,pipeline-codex-native-research-routing-check.js,pipeline-codex-native-research-routing-real-blackbox.js,ppt-full-e2e-blackbox-check.js,ppt-real-export-adapter-check.js,ppt-real-imagegen-smoke-check.js,ppt-real-imagegen-wiring-check.js,ppt-reexport-rereview-check.js,prepublish-fast-check.js,publish-preflight.js,prepublish-release-check-or-fast.js,probe-memoization-check.js,product-design-plugin-routing-check.js,prompt-placeholder-guard-check.js,proof-root-cause-policy-check.js,provider-badge-context-check.js,python-codex-sdk-all-pipelines-check.js,qa-loop-app-handoff-capability-check.js,qa-loop-app-handoff-check.js,qa-loop-app-handoff-cli-check.js,qa-loop-app-handoff-confirmation-check.js,qa-loop-app-handoff-gate-lifecycle-check.js,qa-loop-app-handoff-launch-check.js,qa-loop-app-handoff-status-lifecycle-check.js,qa-loop-budget-policy-check.js,qa-loop-effort-escalation-check.js,qa-loop-execution-profile-routing-check.js,qa-loop-image-path-exposure-check.js,qa-loop-image-path-prompt-injection-check.js,release-affected-selector-check.js,release-aggressive-resource-governor-check.js,release-cache-glob-hashing-check.js,release-cache-input-classifier-check.js,release-cache-neutralization-report-check.js,release-cache-version-neutral-fixture-check.js,release-check-stamp.js,release-dynamic-presets-check.js,release-full-parallelism-blackbox.js,release-gate-batch-runner-check.js,release-gate-budget-check.js,release-gate-dag-runner-check.js,release-gate-dag-runner.js,release-latency-slo-check.js,release-metadata-check.js,release-pack-receipt.js,release-parallel-speed-budget-check.js,release-physical-gates-check.js,release-proof-truth-check.js,release-provenance-check.js,release-real-check.js,release-runtime-truth-matrix-check.js,release-speed-summary.js,research-blueprint-densifier-check.js,research-claim-builder-check.js,research-complete-package-fixture-check.js,research-execution-profile-routing-check.js,research-final-reviewer-blackbox.js,responses-retry-policy-centralized-check.js,runtime-proof-summary-check.js,runtime-script-pack-closure-check.js,scheduler-batch-dispatch-check.js,scheduler-parallel-proof-consistency-check.js,scheduler-utilization-integral-check.js,search-visibility-gate-lib.js,secret-preservation-check.js,seo-audit-fixture-check.js,seo-cli-blackbox-check.js,seo-geo-geo-disambiguation-check.js,seo-geo-route-identity-check.js,seo-geo-skill-rich-content-check.js,seo-no-mutation-by-default-check.js,shared-memory-fixture-check.js,side-effect-runtime-report-check.js,skill-name-canonicalizer-check.js,skill-surface-modernization-check.js,skills-manifest-continuity-check.js,sks-cli-gate-lib.js}",
     "dist/scripts/{real-execution-check-lib.js,gate-lib.js,runtime-domain-gate-lib.js,typed-routing-gate-lib.js,codex-native-gate-lib.js,skill-fixture-check-lib.js,sks-uninstall-regression-check.js,sksd-daemon-check.js,super-search-provider-interface-check.js,triwiki-cache-key-check.js,triwiki-proof-bank-blackbox.js,triwiki-proof-bank-check.js,triwiki-proof-card-check.js,trust-fixture-check.js,type-surface-codex-app-check.js,ultra-router-auto-router-check.js,uninstall-inventory-check.js,install-surface-ssot-check.js,ux-review-extract-wires-real-extractor-check.js,ux-review-imagegen-blackbox-check.js,ux-review-patch-diff-recheck-check.js,ux-review-real-imagegen-smoke-check.js,ux-review-run-wires-imagegen-check.js,wrongness-fixture-check.js}",
     "dist/scripts/check-publish-tag.js",
@@ -58,6 +58,7 @@
     "config/installed-public-surface-closure.v1.json",
     "config/competitor-scorecard-baseline.json",
     "config/architecture-budgets.v1.json",
+    "config/architecture-map-policy.v1.json",
     "config/perf-budgets.v1.json",
     "config/skills-hash-ledger.v1.json",
     "release-gates.v2.json",
@@ -204,6 +205,8 @@
     "typescript": "^5.9.3"
   },
   "devDependencies": {
-    "@types/node": "^24.0.0"
+    "@types/node": "^24.0.0",
+    "jsdom": "30.0.1",
+    "mermaid": "11.12.1"
   }
 }

package/release-gates.v2.json

@@ -67,6 +67,210 @@
       ],
       "output_contract": "sks.gate-result.v2"
     },
+    {
+      "id": "architecture-map:contract",
+      "command": "node ./dist/scripts/architecture-map-check.js --mode contract",
+      "deps": [],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 120000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "package.json",
+          "release-gates.v2.json",
+          "config/architecture-map-policy.v1.json",
+          "src/core/triwiki/context-graph/architecture/**",
+          "src/core/triwiki/context-graph/projections/mermaid/**",
+          "src/core/triwiki/context-graph/store/architecture-map-store.ts",
+          "src/scripts/architecture-map-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "release"
+      ],
+      "output_contract": "sks.gate-result.v2"
+    },
+    {
+      "id": "architecture-map:legacy-closure",
+      "command": "node ./dist/scripts/architecture-map-check.js --mode legacy-closure",
+      "deps": [
+        "architecture-map:contract"
+      ],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 120000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "package.json",
+          "release-gates.v2.json",
+          "config/architecture-map-policy.v1.json",
+          "src/core/triwiki/context-graph/architecture/**",
+          "src/core/triwiki/context-graph/projections/mermaid/**",
+          "src/core/triwiki/context-graph/store/architecture-map-store.ts",
+          "src/scripts/architecture-map-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "release"
+      ],
+      "output_contract": "sks.gate-result.v2"
+    },
+    {
+      "id": "architecture-map:quality",
+      "command": "node ./dist/scripts/architecture-map-check.js --mode quality",
+      "deps": [
+        "architecture-map:contract"
+      ],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 300000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "package.json",
+          "release-gates.v2.json",
+          "config/architecture-map-policy.v1.json",
+          "src/core/triwiki/context-graph/architecture/**",
+          "src/core/triwiki/context-graph/projections/mermaid/**",
+          "src/core/triwiki/context-graph/store/architecture-map-store.ts",
+          "src/scripts/architecture-map-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "confidence"
+      ],
+      "output_contract": "sks.gate-result.v2"
+    },
+    {
+      "id": "architecture-map:performance",
+      "command": "node ./dist/scripts/architecture-map-check.js --mode performance",
+      "deps": [
+        "architecture-map:contract"
+      ],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 300000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "package.json",
+          "release-gates.v2.json",
+          "config/architecture-map-policy.v1.json",
+          "src/core/triwiki/context-graph/architecture/**",
+          "src/core/triwiki/context-graph/projections/mermaid/**",
+          "src/core/triwiki/context-graph/store/architecture-map-store.ts",
+          "src/scripts/architecture-map-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "confidence"
+      ],
+      "output_contract": "sks.gate-result.v2"
+    },
+    {
+      "id": "architecture-map:regression-fixtures",
+      "command": "node ./dist/scripts/architecture-map-check.js --mode regression-fixtures",
+      "deps": [
+        "architecture-map:contract"
+      ],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 300000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "package.json",
+          "release-gates.v2.json",
+          "config/architecture-map-policy.v1.json",
+          "src/core/triwiki/context-graph/architecture/**",
+          "src/core/triwiki/context-graph/projections/mermaid/**",
+          "src/core/triwiki/context-graph/store/architecture-map-store.ts",
+          "src/scripts/architecture-map-check.ts",
+          "test/architecture-map/**",
+          "test/fixtures/architecture-map/**"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "confidence"
+      ],
+      "output_contract": "sks.gate-result.v2"
+    },
+    {
+      "id": "architecture-map:freshness",
+      "command": "node ./dist/scripts/architecture-map-check.js --mode freshness",
+      "deps": [
+        "architecture-map:contract"
+      ],
+      "resource": [
+        "cpu-light",
+        "fs-read"
+      ],
+      "side_effect": "hermetic",
+      "timeout_ms": 120000,
+      "cache": {
+        "enabled": true,
+        "inputs": [
+          "package.json",
+          "release-gates.v2.json",
+          "config/architecture-map-policy.v1.json",
+          "src/core/triwiki/context-graph/architecture/**",
+          "src/core/triwiki/context-graph/projections/mermaid/**",
+          "src/core/triwiki/context-graph/store/architecture-map-store.ts",
+          "src/scripts/architecture-map-check.ts"
+        ]
+      },
+      "isolation": {
+        "home": "temp",
+        "codex_home": "temp",
+        "report_dir": "per-gate"
+      },
+      "preset": [
+        "confidence"
+      ],
+      "output_contract": "sks.gate-result.v2"
+    },
     {
       "id": "agent:message-bus-reader",
       "command": "node ./dist/scripts/agent-message-bus-reader-check.js",