@aayambansal/squint 0.6.1 → 0.7.0

package/README.md

@@ -102,6 +102,7 @@ From source: `git clone https://github.com/aayambansal/squint.git && cd squint &
 | --- | --- | --- |
 | Claude Code | `claude` | `npm i -g @anthropic-ai/claude-code` |
 | Codex CLI | `codex` | `npm i -g @openai/codex` |
+| Codex (app-server) | `codex-app` | same binary — drives the published JSON-RPC protocol |
 | Gemini CLI | `gemini` | `npm i -g @google/gemini-cli` |
 | OpenCode | `opencode` | `npm i -g opencode-ai` |
 | Amp | `amp` | `npm i -g @sourcegraph/amp` |
@@ -149,8 +150,10 @@ squint doctor --probe             # run every engine end to end, verify auth act
 - **Editing**: a real line editor — arrows move, `alt+←/→` jump words, `ctrl+a/e/k/u/w`,
   `↑/↓` history. `ctrl+c` twice exits with a session summary.
 - **Flows**: declare user journeys as six readable lines in `.squint/flows/`; `/flows`
-  replays them headlessly and failing steps join the fix loop. `/score` snapshots quality
-  deterministically.
+  replays them headlessly and failing steps join the fix loop; `/flows suggest` drafts
+  a smoke flow per route from the live page's own headings. `/score` snapshots quality
+  deterministically. `/goal <objective>` arms a standing goal — auto-fix presses to 6
+  attempts until squint's checks come back clean.
 - **Problems**: findings from gates, the dev server, the runtime probe, a11y sweeps, and flows
   collect into a list — `/problems` shows it, `/fix` sends everything as one turn,
   `/fix <n>` targets one. The footer counts what's open.
@@ -176,7 +179,11 @@ squint doctor --probe             # run every engine end to end, verify auth act
   the injected-context bill per source, with staleness warnings.
 - **Two more doors in**: `squint mcp` serves the gates as MCP tools (any
   MCP-speaking agent calls squint's verification directly); `squint ci` runs the
-  whole loop headlessly in a pipeline — JSON report, non-zero exit on hard findings.
+  whole loop headlessly in a pipeline — JSON report, non-zero exit on hard findings,
+  and a digest-sealed receipt per run at `.squint/receipts/` tying the green claim
+  to the exact pixels it was green about.
+- **The review lane**: `/lane on` — every ask gets a second read-only reviewer in
+  fresh context over the diff alone; blind spots don't inherit.
 - **The sentinel**: gate evasion (deleted tests, added skips, suppressed
   diagnostics, weakened checks, locked-path touches) detected deterministically per
   turn and reported to you — never sent back to the engine that did it.
@@ -189,8 +196,10 @@ squint doctor --probe             # run every engine end to end, verify auth act
 - **Visual approval**: engines ask before contested changes — the request renders
   with its screenshot, `/yes` / `/no` answer it, the ledger remembers.
 - **The design ledger**: `/decide` (plus chosen variants, rollbacks, accepted
-  sandboxes) appends to a committed `.squint/design-log.jsonl`; recent decisions ride
-  into every ask so they stop getting silently undone between sessions.
+  sandboxes, approvals) appends to a committed `.squint/design-log.jsonl`; recent
+  decisions ride into every ask so they stop getting silently undone between
+  sessions. `/distill` compresses the ledger into always-on rules and proposed
+  persistent checks — accumulated taste becomes deterministic gates.
 - **`/btw <question>`** asks about the codebase read-only without touching the main
   thread's context. `.squint/locks` lists paths the engine must never touch; `/save`
   exports the transcript as markdown.
@@ -235,11 +244,12 @@ and an avoid-list tuned to that family's failure modes. Plain markdown, made to
         | stream       |    | headless screenshots    |
         +------+-------+    +-------------------------+
                |
-   claude . codex . gemini . opencode . amp . cursor . copilot . aider
+   claude . codex . codex-app . gemini . opencode . amp . cursor . copilot . aider
 ```
 
 Engines are dumb translators: build a headless invocation, parse the stream into one
-normalized event model. Claude Code, Amp, and Cursor share a single wire-protocol parser.
+normalized event model. Claude Code, Amp, and Cursor share a single wire-protocol
+parser; `codex-app` speaks the app-server JSON-RPC protocol through an embedded driver.
 All product behavior lives in the harness, so a new engine is ~80 lines.
 
 ## Repo layout

package/dist/{App-54M5DS3T.js → App-OHKGQTDL.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   App
-} from "./chunk-ZG3XQDUW.js";
-import "./chunk-3GHZOVAA.js";
-import "./chunk-5MQOJYUC.js";
+} from "./chunk-6OFUO3UT.js";
+import "./chunk-LNJ7O5O4.js";
+import "./chunk-7PKIVVRB.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-AUJJGMZG.js";

package/dist/{chunk-ZG3XQDUW.js → chunk-6OFUO3UT.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   completeCommand
-} from "./chunk-3GHZOVAA.js";
+} from "./chunk-LNJ7O5O4.js";
 import {
   Session
-} from "./chunk-5MQOJYUC.js";
+} from "./chunk-7PKIVVRB.js";
 
 // src/tui/App.tsx
 import { Box as Box3, Static, Text as Text3, useApp, useInput } from "ink";

package/dist/{chunk-5MQOJYUC.js → chunk-7PKIVVRB.js}

@@ -157,6 +157,8 @@ var Session = class {
   reviewTipShown = false;
   pendingApproval = null;
   goal = null;
+  laneEnabled = false;
+  inLane = false;
   lastPulse = null;
   lastPerf = null;
   autoReviewedThisAsk = false;
@@ -678,8 +680,49 @@ ${probe.checkFailures.slice(0, 5).join("\n")}`);
       }
     }
     this.notify({ running: false });
+    await this.maybeLaneReview(display);
     this.drainQueue();
   }
+  /**
+   * The review lane: a second read-only pass in fresh context after
+   * each real ask — the diff, not the conversation, so it can't inherit
+   * the implementer's blind spots. Findings render as critique; nothing
+   * here edits. Costs a cheap turn (fixModel when set); off by default.
+   */
+  async maybeLaneReview(display) {
+    if (!this.laneEnabled || this.inLane) return;
+    if (display.startsWith("\u26D1") || display.startsWith("\u{1F441}") || display.startsWith("\u{1F50E}") || display.startsWith("/distill")) return;
+    const checkpoint = this.checkpoints.at(-1);
+    if (!checkpoint) return;
+    let diff;
+    try {
+      const { execFileSync } = await import("child_process");
+      diff = execFileSync("git", ["diff", checkpoint.snapshot.stashHash ?? "HEAD"], {
+        cwd: this.execCwd(),
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+    } catch {
+      return;
+    }
+    if (diff.trim().length === 0) return;
+    const capped = diff.length > 2e4 ? `${diff.slice(0, 2e4)}
+[diff truncated]` : diff;
+    this.inLane = true;
+    try {
+      await this.runTurn(
+        `You are a second reviewer in fresh context. The diff below just landed for the ask "${display}". Review ONLY the diff \u2014 do not edit anything, do not run commands that modify state. Report at most 3 concrete findings ranked by severity (bugs, regressions, accessibility, design-system violations), each with file and line. If it is clean, say so in one line.
+
+\`\`\`diff
+${capped}
+\`\`\``,
+        "\u{1F50E} lane review",
+        this.opts.fixModel
+      );
+    } finally {
+      this.inLane = false;
+    }
+  }
   async submit(ask) {
     this.fixAttempts = 0;
     this.autoReviewedThisAsk = false;
@@ -967,6 +1010,18 @@ They are objective defects, not style preferences.`
         }
         break;
       }
+      case "lane": {
+        if (arg === "on") {
+          this.laneEnabled = true;
+          this.push("status", "review lane on \u2014 every ask gets a second read-only pass over its diff (fixModel when set)");
+        } else if (arg === "off") {
+          this.laneEnabled = false;
+          this.push("status", "review lane off");
+        } else {
+          this.push("status", `review lane is ${this.laneEnabled ? "on" : "off"} \u2014 /lane on|off`);
+        }
+        break;
+      }
       case "distill": {
         void (async () => {
           const { loadDecisions } = await import("./designLog-S67J7SO2.js");
@@ -1481,7 +1536,7 @@ ${sandboxFiles(this.opts.cwd).join("\n")}`);
         this.notify({ items: [], totals: { costUsd: 0, turns: 0 } });
         break;
       case "help": {
-        void import("./commands-RVCKIMNV.js").then(({ commandHelp }) => this.push("status", commandHelp()));
+        void import("./commands-OBCLYABX.js").then(({ commandHelp }) => this.push("status", commandHelp()));
         break;
       }
       case "quit":

package/dist/{chunk-3GHZOVAA.js → chunk-LNJ7O5O4.js}

@@ -29,6 +29,7 @@ var COMMANDS = [
   { name: "decide", args: "<text>", group: "session", description: "record a design decision; injected into every future ask" },
   { name: "goal", args: "[text|off]", group: "build", description: "arm a standing objective; auto-fix presses until checks are clean" },
   { name: "distill", group: "session", description: "compress the design ledger into rules.md lines and proposed checks" },
+  { name: "lane", args: "on|off", group: "verify", description: "second read-only reviewer over each turn's diff, fresh context" },
   { name: "context", group: "session", description: "what squint injects per ask, token-costed, with staleness warnings" },
   { name: "yes", args: "[note]", group: "build", description: "approve the engine's pending visual-approval request" },
   { name: "no", args: "[note]", group: "build", description: "reject the engine's pending visual-approval request" },

package/dist/{chunk-SKNZ2PJF.js → chunk-ORJPNSTE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   Session
-} from "./chunk-5MQOJYUC.js";
+} from "./chunk-7PKIVVRB.js";
 
 // src/daemon/client.ts
 import net from "net";

package/dist/cli.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   App
-} from "./chunk-ZG3XQDUW.js";
-import "./chunk-3GHZOVAA.js";
+} from "./chunk-6OFUO3UT.js";
+import "./chunk-LNJ7O5O4.js";
 import {
   connectDaemon,
   socketPath,
   startDaemon
-} from "./chunk-SKNZ2PJF.js";
-import "./chunk-5MQOJYUC.js";
+} from "./chunk-ORJPNSTE.js";
+import "./chunk-7PKIVVRB.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-AUJJGMZG.js";
@@ -194,11 +194,11 @@ function registerDaemon(program2) {
     const cwd = process.cwd();
     if (!opts.plain) {
       try {
-        const { RemoteSession } = await import("./remote-LOQ5WKAS.js");
+        const { RemoteSession } = await import("./remote-TOZNJWGE.js");
         const remote = await RemoteSession.connect(cwd);
         const config = loadConfig(defaultPaths(cwd));
         const { render: render2 } = await import("ink");
-        const { App: App2 } = await import("./App-54M5DS3T.js");
+        const { App: App2 } = await import("./App-OHKGQTDL.js");
         const React = await import("react");
         render2(
           React.createElement(App2, {
@@ -604,7 +604,7 @@ function registerQuality(program2) {
     report.ok = !failed;
     report.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      const { writeReceipt } = await import("./receipts-JEOMBMFI.js");
+      const { writeReceipt } = await import("./receipts-EFFO3NYZ.js");
       console.log(pc5.dim(`receipt \u2192 ${writeReceipt(cwd, report)}`));
     } catch {
     }
@@ -803,7 +803,7 @@ function registerTui(program2) {
 }
 
 // src/cli.tsx
-var VERSION = true ? "0.6.1" : "0.0.0-dev";
+var VERSION = true ? "0.7.0" : "0.0.0-dev";
 var program = new Command();
 program.name("squint").description("Lovable for your terminal \u2014 a frontend harness on top of Claude Code, Codex, and friends.").version(VERSION);
 registerRun(program);

package/dist/{commands-RVCKIMNV.js → commands-OBCLYABX.js}

@@ -3,7 +3,7 @@ import {
   COMMANDS,
   commandHelp,
   completeCommand
-} from "./chunk-3GHZOVAA.js";
+} from "./chunk-LNJ7O5O4.js";
 export {
   COMMANDS,
   commandHelp,

package/dist/{receipts-JEOMBMFI.js → receipts-EFFO3NYZ.js}

@@ -31,7 +31,7 @@ function buildReceipt(cwd, report) {
     }
   }
   const unsigned = {
-    version: true ? "0.6.1" : "0.0.0-dev",
+    version: true ? "0.7.0" : "0.0.0-dev",
     node: process.version,
     gitHead,
     report,

package/dist/{remote-LOQ5WKAS.js → remote-TOZNJWGE.js}

@@ -2,8 +2,8 @@
 import {
   connectDaemon,
   socketPath
-} from "./chunk-SKNZ2PJF.js";
-import "./chunk-5MQOJYUC.js";
+} from "./chunk-ORJPNSTE.js";
+import "./chunk-7PKIVVRB.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-AUJJGMZG.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aayambansal/squint",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Lovable for your terminal \u2014 a frontend harness on top of Claude Code, Codex, and other coding agents.",
   "type": "module",
   "license": "MIT",