@lcv-ideas-software/cross-review 4.0.0

package/dist/scripts/api-streaming-smoke.js

@@ -0,0 +1,78 @@
+import assert from "node:assert/strict";
+import os from "node:os";
+import path from "node:path";
+import { loadConfig } from "../src/core/config.js";
+import { PEERS } from "../src/core/types.js";
+import { resolveBestModels } from "../src/peers/model-selection.js";
+import { createAdapters } from "../src/peers/registry.js";
+process.env.CROSS_REVIEW_STUB = "0";
+process.env.CROSS_REVIEW_STREAM_TOKENS = "1";
+process.env.CROSS_REVIEW_DATA_DIR =
+    process.env.CROSS_REVIEW_DATA_DIR ||
+        path.join(os.tmpdir(), `cross-review-api-streaming-smoke-${Date.now()}`);
+const config = loadConfig();
+const missing = PEERS.filter((peer) => !config.api_keys[peer]);
+if (missing.length > 0) {
+    throw new Error(`Missing API keys for real streaming smoke: ${missing.join(", ")}. ` +
+        "Set OPENAI_API_KEY, ANTHROPIC_API_KEY, GEMINI_API_KEY and DEEPSEEK_API_KEY.");
+}
+await resolveBestModels(config);
+const adapters = createAdapters(config);
+function tokenChars(events, peer) {
+    return events
+        .filter((event) => event.type === "peer.token.delta" && event.peer === peer)
+        .reduce((total, event) => total + Number(event.data?.chars ?? 0), 0);
+}
+function usageSummary(usage) {
+    if (!usage)
+        return undefined;
+    return {
+        input_tokens: usage.input_tokens,
+        output_tokens: usage.output_tokens,
+        total_tokens: usage.total_tokens,
+        reasoning_tokens: usage.reasoning_tokens,
+    };
+}
+const prompt = [
+    "Real streaming smoke test.",
+    "Return a valid cross-review JSON decision with status READY.",
+    "Keep the summary short and do not include any secret or raw prompt text.",
+].join("\n");
+const results = [];
+for (const peer of PEERS) {
+    const events = [];
+    const result = await adapters[peer].call(prompt, {
+        session_id: `api-streaming-smoke-${peer}`,
+        round: 1,
+        task: "Verify real provider token streaming for cross-review.",
+        stream: true,
+        stream_tokens: true,
+        emit(event) {
+            events.push(event);
+        },
+    });
+    const deltaEvents = events.filter((event) => event.type === "peer.token.delta" && event.peer === peer);
+    const completedEvents = events.filter((event) => event.type === "peer.token.completed" && event.peer === peer);
+    assert.ok(deltaEvents.length > 0, `${peer} did not emit peer.token.delta events.`);
+    assert.equal(completedEvents.length, 1, `${peer} did not emit one completion event.`);
+    assert.ok(result.text.length > 0, `${peer} returned empty text.`);
+    results.push({
+        peer,
+        provider: result.provider,
+        requested_model: result.model,
+        reported_model: result.model_reported,
+        status: result.status,
+        decision_quality: result.decision_quality,
+        delta_events: deltaEvents.length,
+        streamed_chars: tokenChars(events, peer),
+        usage: usageSummary(result.usage),
+    });
+}
+console.log(JSON.stringify({
+    ok: true,
+    streaming_tokens: config.streaming.tokens,
+    streaming_text: config.streaming.include_text,
+    data_dir: config.data_dir,
+    results,
+}, null, 2));
+//# sourceMappingURL=api-streaming-smoke.js.map

package/dist/scripts/api-streaming-smoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-streaming-smoke.js","sourceRoot":"","sources":["../../scripts/api-streaming-smoke.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC;AACpC,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,GAAG,CAAC;AAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB;IAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oCAAoC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAE3E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACvB,MAAM,IAAI,KAAK,CACb,8CAA8C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAClE,6EAA6E,CAChF,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;AAExC,SAAS,UAAU,CAAC,MAAsB,EAAE,IAAY;IACtD,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;SAC3E,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG;IACb,4BAA4B;IAC5B,8DAA8D;IAC9D,0EAA0E;CAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;IACzB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;QAC/C,UAAU,EAAE,uBAAuB,IAAI,EAAE;QACzC,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,wDAAwD;QAC9D,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,IAAI;QACnB,IAAI,CAAC,KAAK;YACR,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CACpE,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,sBAAsB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CACxE,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,qCAAqC,CAAC,CAAC;IACtF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;IAElE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI;QACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,MAAM,CAAC,KAAK;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,YAAY,EAAE,WAAW,CAAC,MAAM;QAChC,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;IACE,EAAE,EAAE,IAAI;IACR,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;IACzC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;IAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,OAAO;CACR,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC"}

package/dist/scripts/runtime-default-smoke.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/scripts/runtime-default-smoke.js

@@ -0,0 +1,88 @@
+// v2.15.0 (item 3, operator directive 2026-05-04 — project_cross_review_v2_v215_backlog_candidates.md):
+// real-API smoke marker for "default model rejects parameter".
+// Opt-in: requires CROSS_REVIEW_REAL_API_SMOKE=1 plus the relevant
+// provider API keys in env. Stubs are NOT a substitute here — the whole
+// point is to exercise live provider 4xx surfaces so the docs-hint path
+// (item 5) and the per-model allowlist gate (item 6) prove themselves
+// in production conditions, not just on synthetic inputs.
+//
+// What it does:
+//  - For each peer the operator opted into via PEERS_TO_TEST env (default
+//    grok), forces the model to a known-incompatible default and asks for
+//    a tiny generation. The expected outcome is either:
+//       (a) The runtime allowlist gate (item 6) drops `reasoning.effort`
+//           silently and the call SUCCEEDS — proves item 6.
+//       (b) The provider rejects with a 400 and the failure carries
+//           `recovery_hint: "consult_docs_then_revise"` plus a docs URL —
+//           proves item 5.
+//  - Anything else is a regression and exits non-zero.
+//
+// This script never runs in CI by default. It exists to be triggered
+// after a v2.15.x ship + reload by the operator running:
+//   CROSS_REVIEW_REAL_API_SMOKE=1 \
+//     CROSS_REVIEW_GROK_MODEL=grok-4-latest \
+//     npm run runtime-default-smoke
+import process from "node:process";
+import { loadConfig } from "../src/core/config.js";
+import { GrokAdapter, modelAcceptsReasoningEffort } from "../src/peers/grok.js";
+const ENABLED = process.env.CROSS_REVIEW_REAL_API_SMOKE === "1";
+if (!ENABLED) {
+    console.log("[runtime-default-smoke] CROSS_REVIEW_REAL_API_SMOKE!=1; this script is opt-in. Skipping.");
+    process.exit(0);
+}
+const peersToTest = (process.env.PEERS_TO_TEST ?? "grok").split(",").map((p) => p.trim());
+const config = loadConfig();
+let failures = 0;
+function emit(event) {
+    // Suppress streaming token noise; surface only key lifecycle events.
+    if (event.type.startsWith("peer.token."))
+        return;
+    console.log(`[event] ${event.type} ${event.message ?? ""}`);
+}
+async function exerciseGrok() {
+    const model = config.models.grok;
+    console.log(`[runtime-default-smoke] grok model=${model}`);
+    console.log(`[runtime-default-smoke] modelAcceptsReasoningEffort(${model})=${modelAcceptsReasoningEffort(model)}`);
+    const adapter = new GrokAdapter(config);
+    const context = {
+        session_id: "00000000-0000-4000-8000-000000000000",
+        round: 0,
+        task: "runtime-default-smoke",
+        emit,
+    };
+    try {
+        const result = await adapter.generate("Reply with the single token: ok.", context);
+        console.log(`[runtime-default-smoke] grok generation ok: ${result.text.slice(0, 40)} (${result.latency_ms}ms)`);
+        if (!modelAcceptsReasoningEffort(model)) {
+            console.log("[runtime-default-smoke] PASS — non-allowlist model omitted reasoning.effort and succeeded (item 6 verified).");
+        }
+        else {
+            console.log("[runtime-default-smoke] PASS — allowlist model accepted reasoning.effort and succeeded.");
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (/reasoning\.effort/i.test(message) &&
+            /\b(?:not\s+supported|invalid|400|argument)\b/i.test(message)) {
+            console.log(`[runtime-default-smoke] FAIL — provider rejected reasoning.effort but the runtime should have gated it. Message: ${message}`);
+            failures += 1;
+        }
+        else {
+            console.log(`[runtime-default-smoke] grok call failed for an unrelated reason; not a v2.15 regression. Message: ${message}`);
+        }
+    }
+}
+for (const peer of peersToTest) {
+    if (peer === "grok") {
+        await exerciseGrok();
+    }
+    else {
+        console.log(`[runtime-default-smoke] peer=${peer} not yet wired into this script; skipping.`);
+    }
+}
+if (failures > 0) {
+    console.error(`[runtime-default-smoke] ${failures} regression(s) detected.`);
+    process.exit(1);
+}
+console.log("[runtime-default-smoke] all checks passed.");
+//# sourceMappingURL=runtime-default-smoke.js.map

package/dist/scripts/runtime-default-smoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-default-smoke.js","sourceRoot":"","sources":["../../scripts/runtime-default-smoke.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,+DAA+D;AAC/D,mEAAmE;AACnE,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,0DAA0D;AAC1D,EAAE;AACF,gBAAgB;AAChB,0EAA0E;AAC1E,0EAA0E;AAC1E,wDAAwD;AACxD,yEAAyE;AACzE,4DAA4D;AAC5D,oEAAoE;AACpE,0EAA0E;AAC1E,2BAA2B;AAC3B,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,yDAAyD;AACzD,oCAAoC;AACpC,8CAA8C;AAC9C,oCAAoC;AACpC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAGhF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAAC;AAChE,IAAI,CAAC,OAAO,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,CACT,0FAA0F,CAC3F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1F,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB,SAAS,IAAI,CAAC,KAAmB;IAC/B,qEAAqE;IACrE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CACT,uDAAuD,KAAK,KAAK,2BAA2B,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,OAAO,GAAoB;QAC/B,UAAU,EAAE,sCAAsC;QAClD,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,uBAAuB;QAC7B,IAAI;KACL,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CACT,+CAA+C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,UAAU,KAAK,CACnG,CAAC;QACF,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CACT,8GAA8G,CAC/G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,yFAAyF,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IACE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,EAC7D,CAAC;YACD,OAAO,CAAC,GAAG,CACT,oHAAoH,OAAO,EAAE,CAC9H,CAAC;YACF,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,sGAAsG,OAAO,EAAE,CAChH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;IAC/B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,4CAA4C,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;IACjB,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,0BAA0B,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC"}

package/dist/scripts/runtime-smoke.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/scripts/runtime-smoke.js

@@ -0,0 +1,148 @@
+import assert from "node:assert/strict";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { MCP_REQUEST_TIMEOUT_MS } from "../src/core/timeouts.js";
+const transport = new StdioClientTransport({
+    command: process.execPath,
+    args: ["dist/src/mcp/server.js"],
+    cwd: process.cwd(),
+    env: {
+        ...process.env,
+        CROSS_REVIEW_STUB: process.env.CROSS_REVIEW_STUB ?? "1",
+        // v2.4.0 / audit closure (P1.1): runtime smoke is a legitimate stub
+        // consumer; opt in to the double-confirmation gate.
+        CROSS_REVIEW_STUB_CONFIRMED: process.env.CROSS_REVIEW_STUB_CONFIRMED ?? "1",
+        CROSS_REVIEW_MAX_SESSION_COST_USD: process.env.CROSS_REVIEW_MAX_SESSION_COST_USD ?? "1000",
+        CROSS_REVIEW_PREFLIGHT_MAX_ROUND_COST_USD: process.env.CROSS_REVIEW_PREFLIGHT_MAX_ROUND_COST_USD ?? "1000",
+        CROSS_REVIEW_UNTIL_STOPPED_MAX_COST_USD: process.env.CROSS_REVIEW_UNTIL_STOPPED_MAX_COST_USD ?? "1000",
+        CROSS_REVIEW_OPENAI_INPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_OPENAI_INPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_OPENAI_OUTPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_OPENAI_OUTPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_ANTHROPIC_INPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_ANTHROPIC_INPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_ANTHROPIC_OUTPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_ANTHROPIC_OUTPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_GEMINI_INPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_GEMINI_INPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_GEMINI_OUTPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_GEMINI_OUTPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_DEEPSEEK_INPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_DEEPSEEK_INPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_DEEPSEEK_OUTPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_DEEPSEEK_OUTPUT_USD_PER_MILLION ?? "1000",
+        // v3.7.4 (Codex v3.7.3 parecer AUDIT-1): the public MCP path strips a
+        // caller's `peers` list (v3.3.0 `lockCallerPeerSelection`), so every
+        // round here runs the full server-configured 6-peer panel — grok and
+        // perplexity included. Without their rate cards `missingFinancialControlVars`
+        // trips and the round finalizes `outcome=max-rounds` /
+        // `financial_controls_missing` instead of actually running. Inject all
+        // six peers' cost rates so the round genuinely converges and the
+        // outcome asserts below mean something.
+        CROSS_REVIEW_GROK_INPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_GROK_INPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_GROK_OUTPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_GROK_OUTPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_PERPLEXITY_INPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_PERPLEXITY_INPUT_USD_PER_MILLION ?? "1000",
+        CROSS_REVIEW_PERPLEXITY_OUTPUT_USD_PER_MILLION: process.env.CROSS_REVIEW_PERPLEXITY_OUTPUT_USD_PER_MILLION ?? "1000",
+        // Perplexity also bills a per-1000-requests search fee; when search is
+        // enabled `missingFinancialControlVars` requires the request fee for
+        // the configured `search_context_size`. This stub smoke does not
+        // exercise paid search, so disable it — and, belt-and-suspenders in
+        // case an inherited operator env re-enables it, inject the request fee
+        // for every search_context_size so the financial preflight passes
+        // regardless.
+        CROSS_REVIEW_PERPLEXITY_DISABLE_SEARCH: process.env.CROSS_REVIEW_PERPLEXITY_DISABLE_SEARCH ?? "1",
+        CROSS_REVIEW_PERPLEXITY_REQUEST_FEE_LOW_USD_PER_1000_REQUESTS: process.env.CROSS_REVIEW_PERPLEXITY_REQUEST_FEE_LOW_USD_PER_1000_REQUESTS ?? "0",
+        CROSS_REVIEW_PERPLEXITY_REQUEST_FEE_MEDIUM_USD_PER_1000_REQUESTS: process.env.CROSS_REVIEW_PERPLEXITY_REQUEST_FEE_MEDIUM_USD_PER_1000_REQUESTS ?? "0",
+        CROSS_REVIEW_PERPLEXITY_REQUEST_FEE_HIGH_USD_PER_1000_REQUESTS: process.env.CROSS_REVIEW_PERPLEXITY_REQUEST_FEE_HIGH_USD_PER_1000_REQUESTS ?? "0",
+    },
+});
+const client = new Client({ name: "cross-review-runtime-smoke", version: "0.0.0" });
+async function callTool(name, args) {
+    const result = await client.callTool({ name, arguments: args }, undefined, {
+        timeout: MCP_REQUEST_TIMEOUT_MS,
+        maxTotalTimeout: MCP_REQUEST_TIMEOUT_MS,
+    });
+    const content = result.content ?? [];
+    const text = content[0]?.type === "text" ? (content[0].text ?? "{}") : "{}";
+    return JSON.parse(text);
+}
+async function pollUntilDone(sessionId) {
+    for (let attempt = 0; attempt < 20; attempt++) {
+        const state = (await callTool("session_poll", {
+            session_id: sessionId,
+            response_format: "json",
+        }));
+        if (state.jobs?.some((job) => job.status === "completed" || job.status === "failed" || job.status === "cancelled")) {
+            return state;
+        }
+        await new Promise((resolve) => setTimeout(resolve, 250));
+    }
+    throw new Error(`Timed out polling runtime-smoke session ${sessionId}`);
+}
+try {
+    await client.connect(transport);
+    const serverInfo = await callTool("server_info", { response_format: "json" });
+    const capabilities = await callTool("runtime_capabilities", { response_format: "json" });
+    const roundStart = (await callTool("session_start_round", {
+        task: "Runtime smoke: verify async review round.",
+        review_focus: "runtime/smoke",
+        draft: "Runtime smoke draft.",
+        peers: ["codex"],
+        response_format: "json",
+    }));
+    const roundState = await pollUntilDone(roundStart.session_id);
+    const events = await callTool("session_events", {
+        session_id: roundStart.session_id,
+        response_format: "json",
+    });
+    const report = await callTool("session_report", {
+        session_id: roundStart.session_id,
+        response_format: "json",
+    });
+    const unanimousStart = (await callTool("session_start_unanimous", {
+        task: "Runtime smoke: verify async unanimity flow.",
+        review_focus: "runtime/unanimous",
+        lead_peer: "codex",
+        peers: ["claude"],
+        max_rounds: 2,
+        response_format: "json",
+    }));
+    const unanimousState = await pollUntilDone(unanimousStart.session_id);
+    const cancelStart = (await callTool("session_start_round", {
+        task: "Runtime smoke: verify cancellation tool.",
+        draft: "FORCE_CANCEL_SLOW",
+        peers: ["codex"],
+        response_format: "json",
+    }));
+    const cancelResult = await callTool("session_cancel_job", {
+        session_id: cancelStart.session_id,
+        job_id: cancelStart.job.job_id,
+        reason: "runtime_smoke_cancel",
+        response_format: "json",
+    });
+    const cancelState = await pollUntilDone(cancelStart.session_id);
+    const metrics = await callTool("session_metrics", { response_format: "json" });
+    const recovery = await callTool("session_recover_interrupted", { response_format: "json" });
+    // v3.7.4 (Codex v3.7.3 parecer AUDIT-1): assert the durable terminal
+    // state of every async flow this smoke claims to exercise. Without these
+    // the harness printed `ok: true` even when a round was silently blocked
+    // by the financial preflight (`outcome=max-rounds`) instead of actually
+    // running. These asserts run BEFORE the `ok: true` print, so any flow
+    // that did not reach its intended terminal state fails the smoke loudly
+    // with a non-zero exit.
+    assert.equal(roundState.outcome, "converged", `runtime-smoke: review round did not converge — outcome=${String(roundState.outcome)}`);
+    assert.equal(unanimousState.outcome, "converged", `runtime-smoke: unanimity flow did not converge — outcome=${String(unanimousState.outcome)}`);
+    assert.equal(cancelState.outcome, "aborted", `runtime-smoke: cancellation flow did not abort — outcome=${String(cancelState.outcome)}`);
+    console.log(JSON.stringify({
+        ok: true,
+        serverInfo,
+        capabilities,
+        round_session_id: roundStart.session_id,
+        roundState,
+        events,
+        report,
+        unanimous_session_id: unanimousStart.session_id,
+        unanimousState,
+        cancel_session_id: cancelStart.session_id,
+        cancelResult,
+        cancelState,
+        metrics,
+        recovery,
+    }, null, 2));
+}
+finally {
+    await client.close();
+}
+//# sourceMappingURL=runtime-smoke.js.map

package/dist/scripts/runtime-smoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-smoke.js","sourceRoot":"","sources":["../../scripts/runtime-smoke.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;IACzC,OAAO,EAAE,OAAO,CAAC,QAAQ;IACzB,IAAI,EAAE,CAAC,wBAAwB,CAAC;IAChC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;IAClB,GAAG,EAAE;QACH,GAAG,OAAO,CAAC,GAAG;QACd,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG;QACvD,oEAAoE;QACpE,oDAAoD;QACpD,2BAA2B,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,GAAG;QAC3E,iCAAiC,EAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,MAAM;QAC1F,yCAAyC,EACvC,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,MAAM;QACjE,uCAAuC,EACrC,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,MAAM;QAC/D,yCAAyC,EACvC,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,MAAM;QACjE,0CAA0C,EACxC,OAAO,CAAC,GAAG,CAAC,0CAA0C,IAAI,MAAM;QAClE,4CAA4C,EAC1C,OAAO,CAAC,GAAG,CAAC,4CAA4C,IAAI,MAAM;QACpE,6CAA6C,EAC3C,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,MAAM;QACrE,yCAAyC,EACvC,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,MAAM;QACjE,0CAA0C,EACxC,OAAO,CAAC,GAAG,CAAC,0CAA0C,IAAI,MAAM;QAClE,2CAA2C,EACzC,OAAO,CAAC,GAAG,CAAC,2CAA2C,IAAI,MAAM;QACnE,4CAA4C,EAC1C,OAAO,CAAC,GAAG,CAAC,4CAA4C,IAAI,MAAM;QACpE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,8EAA8E;QAC9E,uDAAuD;QACvD,uEAAuE;QACvE,iEAAiE;QACjE,wCAAwC;QACxC,uCAAuC,EACrC,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,MAAM;QAC/D,wCAAwC,EACtC,OAAO,CAAC,GAAG,CAAC,wCAAwC,IAAI,MAAM;QAChE,6CAA6C,EAC3C,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,MAAM;QACrE,8CAA8C,EAC5C,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,MAAM;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,uEAAuE;QACvE,kEAAkE;QAClE,cAAc;QACd,sCAAsC,EACpC,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,GAAG;QAC3D,6DAA6D,EAC3D,OAAO,CAAC,GAAG,CAAC,6DAA6D,IAAI,GAAG;QAClF,gEAAgE,EAC9D,OAAO,CAAC,GAAG,CAAC,gEAAgE,IAAI,GAAG;QACrF,8DAA8D,EAC5D,OAAO,CAAC,GAAG,CAAC,8DAA8D,IAAI,GAAG;KACpF;CACF,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEpF,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAA6B;IACjE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE;QACzE,OAAO,EAAE,sBAAsB;QAC/B,eAAe,EAAE,sBAAsB;KACxC,CAAC,CAAC;IACH,MAAM,OAAO,GAAI,MAA+D,CAAC,OAAO,IAAI,EAAE,CAAC;IAC/F,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAID,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,cAAc,EAAE;YAC5C,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,MAAM;SACxB,CAAC,CAAc,CAAC;QACjB,IACE,KAAK,CAAC,IAAI,EAAE,IAAI,CACd,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CACtF,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,IAAI,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,sBAAsB,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE;QACxD,IAAI,EAAE,2CAA2C;QACjD,YAAY,EAAE,eAAe;QAC7B,KAAK,EAAE,sBAAsB;QAC7B,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,eAAe,EAAE,MAAM;KACxB,CAAC,CAA2B,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE;QAC9C,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,eAAe,EAAE,MAAM;KACxB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE;QAC9C,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,eAAe,EAAE,MAAM;KACxB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,CAAC,MAAM,QAAQ,CAAC,yBAAyB,EAAE;QAChE,IAAI,EAAE,6CAA6C;QACnD,YAAY,EAAE,mBAAmB;QACjC,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,UAAU,EAAE,CAAC;QACb,eAAe,EAAE,MAAM;KACxB,CAAC,CAA2B,CAAC;IAC9B,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE;QACzD,IAAI,EAAE,0CAA0C;QAChD,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,CAAC,OAAO,CAAC;QAChB,eAAe,EAAE,MAAM;KACxB,CAAC,CAAoD,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,oBAAoB,EAAE;QACxD,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM;QAC9B,MAAM,EAAE,sBAAsB;QAC9B,eAAe,EAAE,MAAM;KACxB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,6BAA6B,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,wBAAwB;IACxB,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,OAAO,EAClB,WAAW,EACX,0DAA0D,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CACvF,CAAC;IACF,MAAM,CAAC,KAAK,CACV,cAAc,CAAC,OAAO,EACtB,WAAW,EACX,4DAA4D,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAC7F,CAAC;IACF,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,OAAO,EACnB,SAAS,EACT,4DAA4D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAC1F,CAAC;IACF,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,EAAE,EAAE,IAAI;QACR,UAAU;QACV,YAAY;QACZ,gBAAgB,EAAE,UAAU,CAAC,UAAU;QACvC,UAAU;QACV,MAAM;QACN,MAAM;QACN,oBAAoB,EAAE,cAAc,CAAC,UAAU;QAC/C,cAAc;QACd,iBAAiB,EAAE,WAAW,CAAC,UAAU;QACzC,YAAY;QACZ,WAAW;QACX,OAAO;QACP,QAAQ;KACT,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC;QAAS,CAAC;IACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/scripts/smoke.d.ts

@@ -0,0 +1 @@
+export {};