sneakoscope 8.3.2 → 8.6.0

package/README.md

@@ -22,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-This README documents package **SKS 8.3.2** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
+This README documents package **SKS 8.6.0** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
 
 Use the official latest stable SKS and Codex CLI releases. The Codex compatibility SSOT is always the **current latest stable** host; capability probes measure what that host can actually do. Product docs do not crown a fixed `0.x.y` string as SSOT (release pins and schema directories are measured artifacts for the current package, not a permanent product version claim). Menu Bar / Center induce updates to the latest stable build. Run `sks update-check` for what is installed and read the capability report for what is supported. Install SSOT is npm `sneakoscope@latest`; PATH `sks` and Menu Bar stamped generation must match that version or gates fail. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it (Codex official multi-agent wrap-only; SKS does not reimplement a parallel runtime). Local code search is mode-separated (`sks search files|text|structure|symbol|context`); `context` is answered by the compiled TriWiki Context Graph (`context-graph.json` is exhaustive authority; `context-pack.json` and managed `AGENTS.md` are bounded projections) — see [docs/architecture/context-graph.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/architecture/context-graph.md) and [docs/PRODUCT-CONTRACT.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PRODUCT-CONTRACT.md). See [CHANGELOG.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/CHANGELOG.md).
 

package/config/architecture-map-policy.v1.json

@@ -0,0 +1,168 @@
+{
+  "schema": "sks.architecture-map-policy.v1",
+  "version": 1,
+  "module_id_source": "context-graph module node id, as produced by src/core/triwiki/context-graph/extractors/code/modules.ts: the owning directory, capped at depth 3 under src|source|lib and depth 2 elsewhere. Entries below are exact module ids, never globs; a module not named by any layer is unconstrained.",
+  "layers": [
+    {
+      "id": "entrypoint",
+      "purpose": "Process entry. Nothing in the repository imports these modules, so argv arrives here and only leaves downward.",
+      "modules": ["src/bin"]
+    },
+    {
+      "id": "cli_surface",
+      "purpose": "Argument parsing, terminal output, the command registry and the command manifest.",
+      "modules": ["src/cli"]
+    },
+    {
+      "id": "command",
+      "purpose": "One handler per user-facing command, split across a thin dispatch root and the heavier implementations.",
+      "modules": ["src/commands", "src/core/commands"]
+    },
+    {
+      "id": "orchestration",
+      "purpose": "Route classification, pipeline plans, gate profiles and the stop gate.",
+      "modules": [
+        "src/core/pipeline",
+        "src/core/pipeline-internals",
+        "src/core/router",
+        "src/core/routes",
+        "src/core/runtime",
+        "src/core/stop-gate"
+      ]
+    },
+    {
+      "id": "release",
+      "purpose": "Release gate manifest, gate DAG, scheduling and publish contracts.",
+      "modules": ["src/core/release"]
+    },
+    {
+      "id": "knowledge",
+      "purpose": "TriWiki: the context graph, code packs, the proof bank and the wrongness ledger.",
+      "modules": ["src/core/triwiki", "src/core/triwiki-wrongness"]
+    },
+    {
+      "id": "foundation",
+      "purpose": "Domain-free primitives: error shapes, JSON records, file locks, regex helpers.",
+      "modules": ["src/core/errors", "src/core/json", "src/core/locks", "src/core/text"]
+    },
+    {
+      "id": "gate_script",
+      "purpose": "Standalone check executables invoked by npm scripts and the release DAG.",
+      "modules": ["src/scripts", "src/scripts/lib"]
+    }
+  ],
+  "boundaries": {
+    "mode": "allow-list",
+    "allow": [
+      { "from": "entrypoint", "to": ["cli_surface", "command", "orchestration"] },
+      {
+        "from": "cli_surface",
+        "to": ["command", "orchestration", "release", "knowledge", "foundation"]
+      },
+      { "from": "command", "to": ["orchestration", "release", "knowledge", "foundation"] },
+      { "from": "orchestration", "to": ["release", "knowledge", "foundation"] },
+      { "from": "release", "to": ["knowledge", "foundation"] },
+      { "from": "knowledge", "to": ["foundation"] },
+      { "from": "foundation", "to": [] },
+      {
+        "from": "gate_script",
+        "to": ["cli_surface", "command", "orchestration", "release", "knowledge", "foundation"]
+      }
+    ]
+  },
+  "thresholds": {
+    "max_diagram_nodes": 240,
+    "max_diagram_edges": 900,
+    "max_diagram_bytes": 45000,
+    "max_module_fan_out": 56,
+    "max_module_fan_in": 96
+  },
+  "profiles": {
+    "global": { "maxNodes": 240, "maxEdges": 360, "maxLabelChars": 56, "tokenBudget": 0 },
+    "planning": { "maxNodes": 48, "maxEdges": 72, "maxLabelChars": 56, "tokenBudget": 900 },
+    "implementation": { "maxNodes": 64, "maxEdges": 96, "maxLabelChars": 56, "tokenBudget": 1200 },
+    "review": { "maxNodes": 72, "maxEdges": 108, "maxLabelChars": 56, "tokenBudget": 1600 },
+    "protected": { "maxNodes": 96, "maxEdges": 144, "maxLabelChars": 56, "tokenBudget": 2400 }
+  },
+  "absoluteTokenCeiling": 3200,
+  "globalAtlasMaxBytes": 1572864,
+  "missionArtifactsMaxBytes": 358400,
+  "accuracyFloors": {
+    "changedPathAccounting": 1,
+    "projectionAccounting": 1,
+    "protectedRelationRecall": 1,
+    "eligibleExtractionSuccess": 0.995,
+    "deterministicHashRuns": 3
+  },
+  "dependencyRules": [
+    {
+      "id": "boundary-allow-list",
+      "effect": "deny",
+      "severity": "blocking",
+      "description": "Module edges that cross layers outside boundaries.allow (and outside shrink-only exceptions) are forbidden_dependency findings."
+    }
+  ],
+  "viewBudgets": {
+    "project-topology": { "maxNodes": 240, "maxEdges": 360 },
+    "module-dependency": { "maxNodes": 240, "maxEdges": 900 },
+    "public-surface": { "maxNodes": 120, "maxEdges": 180 },
+    "ssot-provenance": { "maxNodes": 96, "maxEdges": 144 },
+    "runtime-control": { "maxNodes": 120, "maxEdges": 180 },
+    "verification-coverage": { "maxNodes": 160, "maxEdges": 240 },
+    "risk-domains": { "maxNodes": 96, "maxEdges": 144 }
+  },
+  "blockingCodes": [
+    "baseline_missing",
+    "baseline_late",
+    "baseline_stale",
+    "baseline_tampered",
+    "graph_stale",
+    "map_parity_failure",
+    "unaccounted_changed_file",
+    "new_cycle",
+    "cycle_expansion",
+    "forbidden_dependency",
+    "layer_skip",
+    "ssot_collision",
+    "authority_bypass",
+    "protected_verification_gap",
+    "insufficient_graph"
+  ],
+  "exceptions": {
+    "mode": "shrink-only",
+    "entries": [
+      {
+        "id": "cli-layer-hosts-shared-surfaces",
+        "reason": "src/cli owns dispatch surface and terminal presentation toolkit; handlers reach up for formatting.",
+        "edges": [
+          "command -> cli_surface",
+          "orchestration -> cli_surface",
+          "knowledge -> cli_surface"
+        ],
+        "baseline_module_edges": 4,
+        "ceiling_module_edges": 4
+      },
+      {
+        "id": "command-layer-hosts-shared-contracts",
+        "reason": "Shared shapes hosted in the command layer rather than below it.",
+        "edges": ["knowledge -> command", "release -> command"],
+        "baseline_module_edges": 2,
+        "ceiling_module_edges": 2
+      },
+      {
+        "id": "release-knowledge-cycle",
+        "reason": "release and triwiki form a real two-module cycle; only the upward half is excepted.",
+        "edges": ["knowledge -> release"],
+        "baseline_module_edges": 1,
+        "ceiling_module_edges": 1
+      },
+      {
+        "id": "script-root-hosts-libraries",
+        "reason": "src/scripts is an entry root but some files are imported as libraries.",
+        "edges": ["cli_surface -> gate_script", "release -> gate_script"],
+        "baseline_module_edges": 2,
+        "ceiling_module_edges": 2
+      }
+    ]
+  }
+}

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "8.3.2"
+version = "8.6.0"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "8.3.2"
+version = "8.6.0"
 edition = "2021"
 
 [dependencies]

package/dist/commands/bridge.js

@@ -23,6 +23,8 @@ export function usage(command = 'bridge') {
         `       sks ${command} provider validate|enable|disable <codex-lb|openrouter> [--json]`,
         `       sks ${command} provider remove-credential <codex-lb|openrouter> --confirm [--json]`,
         `       sks ${command} catalog sync|status [--json]`,
+        `       sks ${command} models list [--json]`,
+        `       sks ${command} models select --set <public-id,...> [--json]`,
         `       sks ${command} route list [--json]`,
         `       sks ${command} route set-default <codex-lb|openrouter> [--json]`,
         `       sks ${command} route explain <model> [--json]`,
@@ -204,6 +206,22 @@ async function parseInvocation(args, io) {
             label: `Combined catalog ${action}`
         };
     }
+    if (area === 'models') {
+        if (action === 'list' && target === undefined) {
+            allowOnly(parsed, ['--json'], []);
+            return { ...base, request: { operation: 'models.list' }, label: 'Selectable bridge models' };
+        }
+        if (action === 'select') {
+            allowOnly(parsed, ['--json'], ['--set']);
+            const raw = parsed.values.get('--set') || '';
+            const publicIds = raw.split(',').map((id) => id.trim()).filter(Boolean);
+            return {
+                ...base,
+                request: { operation: 'models.select', public_ids: publicIds },
+                label: 'Select exposed bridge models'
+            };
+        }
+    }
     if (area === 'route') {
         if (action === 'list' && target === undefined) {
             allowOnly(parsed, ['--json'], []);
@@ -254,7 +272,7 @@ function parseArgs(args) {
     const booleanOptions = new Set([
         '--json', '--strict', '--require-ready', '--api-key-stdin', '--confirm'
     ]);
-    const valueOptions = new Set(['--level', '--host', '--settings']);
+    const valueOptions = new Set(['--level', '--host', '--settings', '--set']);
     for (let index = 0; index < args.length; index += 1) {
         const value = String(args[index] || '');
         if (!value.startsWith('--')) {

package/dist/commands/doctor-profile.js

@@ -43,7 +43,7 @@ export function doctorPhaseIdsForProfile(profile) {
     ];
     if (profile === 'migration')
         return required;
-    const optional = ['supabase_mcp_repair', 'native_capability_repair', 'sks_menubar'];
+    const optional = ['supabase_mcp_repair', 'native_capability_repair', 'sks_menubar', 'desktop_bridge_catalog_repair'];
     if (profile === 'full' || profile === 'capabilities')
         return ['setup', ...required, ...optional];
     return [...required, ...optional];

package/dist/commands/doctor.js

@@ -7,7 +7,7 @@ import { ui as cliUi } from '../cli/cli-theme.js';
 import { getCodexInfo } from '../core/codex-adapter.js';
 import { rustInfo } from '../core/rust-accelerator.js';
 import { codexAppIntegrationStatus } from '../core/codex-app.js';
-import { desktopBridgeStatusV3 } from '../core/codex-lb/desktop-controller-v3.js';
+import { desktopBridgeStatusV3, executeDesktopBridgeCommandV3 } from '../core/codex-lb/desktop-controller-v3.js';
 import { inspectCodexConfigReadability } from '../core/codex/codex-config-readability.js';
 import { inspectOAuthCallbackPortConflict, oauthCallbackDoctorGuidance } from '../core/codex/oauth-callback-port-diagnostic.js';
 import { inventoryCodexPermissionProfiles } from '../core/codex/codex-permission-profiles.js';
@@ -825,6 +825,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
             phases: [
                 {
                     id: 'setup',
+                    report: () => setupRepair,
                     run: async () => ({
                         id: 'setup',
                         ok: setupRepair !== null,
@@ -835,6 +836,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'codex_startup_repair',
+                    report: () => codexStartupRepair,
                     run: async () => ({
                         id: 'codex_startup_repair',
                         ok: codexStartupRepair?.ok !== false,
@@ -846,6 +848,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'startup_config_repair',
+                    report: () => startupConfigRepair,
                     run: async () => ({
                         id: 'startup_config_repair',
                         ok: startupConfigRepair?.ok === true,
@@ -856,6 +859,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'codex_config_syntax_repair',
+                    report: () => codexConfigSyntaxRepair,
                     run: async () => ({
                         id: 'codex_config_syntax_repair',
                         ok: codexConfigSyntaxRepair?.ok !== false,
@@ -867,6 +871,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'context7_repair',
+                    report: () => context7Repair,
                     run: async () => ({
                         id: 'context7_repair',
                         ok: context7Repair?.ok !== false,
@@ -878,6 +883,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'context7_mcp_repair',
+                    report: () => context7McpRepair,
                     run: async () => ({
                         id: 'context7_mcp_repair',
                         ok: context7McpRepair?.ok === true,
@@ -890,6 +896,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'supabase_mcp_repair',
+                    report: () => supabaseMcpRepair,
                     required_for_ready: false,
                     run: async () => ({
                         id: 'supabase_mcp_repair',
@@ -904,6 +911,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'hook_trust_repair',
+                    report: () => hookTrustRepair,
                     run: async () => ({
                         id: 'hook_trust_repair',
                         ok: hookTrustRepair?.ok !== false,
@@ -917,6 +925,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'sks_menubar',
+                    report: () => sksMenuBar,
                     required_for_ready: false,
                     run: async () => ({
                         id: 'sks_menubar',
@@ -961,6 +970,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'command_alias_cleanup',
+                    report: () => commandAliasCleanupBeforeReceipt,
                     run: async () => ({
                         id: 'command_alias_cleanup',
                         ok: commandAliasCleanupBeforeReceipt?.ok !== false,
@@ -972,6 +982,7 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                 },
                 {
                     id: 'native_capability_repair',
+                    report: () => doctorNativeCapabilityRepair,
                     required_for_ready: false,
                     run: async () => ({
                         id: 'native_capability_repair',
@@ -984,6 +995,38 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                         route_blockers: doctorNativeCapabilityRepair?.route_blockers || {},
                         rollback_evidence: doctorNativeCapabilityRepair?.secret_preservation_guard || 'native_capability_repair_report'
                     })
+                },
+                {
+                    id: 'desktop_bridge_catalog_repair',
+                    required_for_ready: false,
+                    run: async () => {
+                        const base = {
+                            id: 'desktop_bridge_catalog_repair',
+                            required_for_ready: false,
+                            manual_required: false,
+                            warnings: [],
+                            rollback_evidence: 'combined_catalog_previous_generation_preserved'
+                        };
+                        try {
+                            const status = await desktopBridgeStatusV3({ home: root, env: process.env });
+                            const blockers = (status?.readiness?.blockers || []).map(String);
+                            const stale = blockers.filter((blocker) => blocker.endsWith('_catalog_stale'));
+                            if (!status?.management?.managed || stale.length === 0) {
+                                return { ...base, ok: true, repaired: false, blockers: [] };
+                            }
+                            const sync = await executeDesktopBridgeCommandV3({ operation: 'catalog.sync' }, { home: root, env: process.env });
+                            const synced = sync?.ok === true && sync?.execution?.ok === true;
+                            return {
+                                ...base,
+                                ok: synced,
+                                repaired: synced,
+                                blockers: synced ? [] : (sync?.execution?.blockers || ['desktop_bridge_catalog_sync_failed']).map(String)
+                            };
+                        }
+                        catch (error) {
+                            return { ...base, ok: false, repaired: false, blockers: [String(error?.message || 'desktop_bridge_catalog_sync_failed')] };
+                        }
+                    }
                 }
             ].filter((phase) => doctorPhaseIds.includes(phase.id))
         }).catch((err) => ({
@@ -1182,6 +1225,20 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
             warnings: []
         }))
         : null;
+    const configDiskVerification = doctorFix
+        ? await (await import('../core/doctor/doctor-repair-postcheck.js')).verifyCodexConfigsOnDisk({ root })
+            .catch((err) => ({
+            schema: 'sks.doctor-config-disk-verification.v1',
+            ok: false,
+            project_config_path: '',
+            codex_home_config_path: '',
+            project_config_present: false,
+            codex_home_config_present: false,
+            multi_agent_v2_enabled: null,
+            agents_enabled: null,
+            blockers: [`config_disk_verification_failed:${err?.message || String(err)}`]
+        }))
+        : null;
     const codexAppHarnessMatrix = deepDiagnostics
         ? await buildCodexAppHarnessMatrix({ root, mode: 'read-only' }).catch((err) => ({
             schema: 'sks.codex-app-harness-matrix.v1',
@@ -1353,16 +1410,36 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         }
     }
     const runtimeReadiness = buildRuntimeReadiness(codexNativeFeatureMatrix);
-    const resultOk = ready.ready
-        && (!sksUpdate || sksUpdate.ok !== false)
-        && (!doctorFix || migrationReceiptOwnsReconcile || skillsReconcile?.convergence?.ok === true)
-        && commandAliasCleanup.ok !== false
-        && codexStartupRepair.ok !== false
-        && codexConfigSyntaxRepair?.ok !== false
-        && agentRoleConfigRepair.ok !== false
-        && openRouterProviderRepair.ok !== false
-        && (officialSubagentConfig.blockers || []).length === 0
-        && (!doctorProfileRequiresDesktopBridgeReadiness(doctorProfile) || desktopBridge.ok !== false);
+    const resultBlockers = [
+        ...(ready.ready
+            ? []
+            : (Array.isArray(ready.blockers) && ready.blockers.length
+                ? ready.blockers.map((blocker) => `readiness:${String(blocker)}`)
+                : ['readiness_not_ready'])),
+        ...(sksUpdate && sksUpdate.ok === false ? ['sks_update_blocked'] : []),
+        ...(doctorFix && !migrationReceiptOwnsReconcile && skillsReconcile?.convergence?.ok !== true
+            ? ['managed_skill_reconcile_not_converged']
+            : []),
+        ...(commandAliasCleanup.ok === false ? ['command_alias_cleanup_blocked'] : []),
+        ...(codexStartupRepair.ok === false ? ['codex_startup_repair_blocked'] : []),
+        ...(codexConfigSyntaxRepair?.ok === false ? ['codex_config_syntax_repair_blocked'] : []),
+        ...(agentRoleConfigRepair.ok === false ? ['agent_role_config_repair_blocked'] : []),
+        ...(openRouterProviderRepair.ok === false ? ['openrouter_provider_repair_blocked'] : []),
+        ...((officialSubagentConfig.blockers || [])
+            .map((blocker) => `official_subagent_config:${String(blocker)}`)),
+        ...(doctorProfileRequiresDesktopBridgeReadiness(doctorProfile) && desktopBridge.ok === false
+            ? ['desktop_bridge_not_ready']
+            : []),
+        ...(mcpTransportCollisionRepair?.ok === false ? ['mcp_transport_collision_repair_blocked'] : []),
+        ...(codexNativeRepair?.ok === false ? ['codex_native_repair_blocked'] : []),
+        ...(configDiskVerification?.blockers || [])
+            .map((blocker) => `config_disk_verification:${String(blocker)}`)
+    ];
+    const resultOk = resultBlockers.length === 0;
+    const repairOperatorActions = [
+        ...(codexStartupRepair?.config_file_repair?.operator_actions || []),
+        ...(agentRoleConfigRepair?.operator_actions || [])
+    ].map(String).filter(Boolean);
     const result = {
         schema: 'sks.doctor-status.v3',
         elapsed_ms: Date.now() - startedAtMs,
@@ -1377,11 +1454,14 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         not_counted_as_full_doctor: !deepDiagnostics,
         root,
         arg_warnings: argWarnings,
+        blockers: [...new Set(resultBlockers.map(String))],
         warnings: [...oauthCallbackPortDiagnostic.warnings, ...(desktopBridge.warnings || [])],
-        operator_actions: [
-            ...oauthCallbackOperatorActions,
-            ...(desktopBridge.ok === false ? desktopBridge.recovery_actions || [] : [])
-        ],
+        operator_actions: [...new Set([
+                ...oauthCallbackOperatorActions,
+                ...(desktopBridge.ok === false ? desktopBridge.recovery_actions || [] : []),
+                ...repairOperatorActions,
+                ...(resultOk ? [] : ['Each blocker above names a report under .sneakoscope/reports/; re-run `sks doctor --full --json` after resolving them.'])
+            ].map(String).filter(Boolean))],
         node: { ok: Number(process.versions.node.split('.')[0]) >= 20, version: process.version },
         codex,
         oauth_callback_port_diagnostic: oauthCallbackPortDiagnostic,
@@ -1406,8 +1486,9 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
         supabase_mcp_repair: supabaseMcpRepair,
         doctor_fix_transaction: doctorFixTransaction,
         doctor_fix_postcheck: doctorFixPostcheck,
+        config_disk_verification: configDiskVerification,
         postcheck: doctorFixPostcheck ? {
-            ok: doctorFixPostcheck.ok === true,
+            ok: doctorFixPostcheck.ok === true && configDiskVerification?.ok !== false,
             pending_manual: doctorFixPostcheck.pending_manual || [],
             required_blockers: doctorFixPostcheck.required_blockers || [],
             optional_warnings: doctorFixPostcheck.optional_warnings || []

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "8.3.2",
+  "package_version": "8.6.0",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/align/align-route.js

@@ -3,6 +3,7 @@ import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import path from 'node:path';
 import { nowIso, readJson, writeJsonAtomic } from '../fsx.js';
+import { ARCHITECTURE_MAP_ARTIFACT_RELS } from '../triwiki/context-graph/store/architecture-map-store.js';
 import { CODE_NAVIGATION_LIMITS } from '../triwiki/code-navigation-policy.js';
 export const ALIGN_PLAN_ARTIFACT = 'align-plan.json';
 export const ALIGN_LEDGER_ARTIFACT = 'align-ledger.json';
@@ -21,7 +22,8 @@ export const ALIGN_OUTPUT_ARTIFACTS = Object.freeze([
     '.sneakoscope/wiki/context-graph.meta.json',
     '.sneakoscope/wiki/code-navigation-manifest.json',
     '.sneakoscope/wiki/code-pack.json',
-    '.sneakoscope/wiki/context-pack.json'
+    '.sneakoscope/wiki/context-pack.json',
+    ...ARCHITECTURE_MAP_ARTIFACT_RELS
 ]);
 export function buildAlignPlan(missionId, task) {
     return {
@@ -143,7 +145,11 @@ export function evaluateAlignGate(plan, ledger, missionId, activeVerification =
         skips: (ledger?.scan.fatal_skips.length ?? 1) === 0,
         coverage: ledger?.graph.exact_file_coverage === true && ledger.graph.missing_files.length === 0 && ledger.graph.unexpected_files.length === 0,
         cas: ledger?.scan.source_cas_verified === true,
-        extractor: ledger?.graph.extractor_ids.length === 1 && ledger.graph.extractor_ids[0] === 'code',
+        extractor: Array.isArray(ledger?.graph.extractor_ids)
+            && ledger.graph.extractor_ids.length === 3
+            && ledger.graph.extractor_ids[0] === 'code'
+            && ledger.graph.extractor_ids[1] === 'topology'
+            && ledger.graph.extractor_ids[2] === 'triwiki-evidence',
         publication: ledger?.publication.staged === true && ledger.publication.transactional_directory_replaced === true,
         artifacts: ledger?.validation.artifact_hashes === true && activeVerification.artifacts,
         projection: ledger?.validation.projection === true && activeVerification.projections,