@manukyalo/scopelock 2.1.0 → 2.2.0

package/bin/scopelock.js

@@ -13,6 +13,7 @@
  *   scopelock status                        Print manifest summary
  */
 
+const { execSync } = require('child_process');
 const manifest = require('../src/manifest');
 const context  = require('../src/context');
 const git      = require('../src/git');
@@ -54,7 +55,7 @@ switch (command) {
   }
 
   case 'check':
-    git.check();
+    git.check(args);
     break;
 
   case 'status':
@@ -72,6 +73,64 @@ switch (command) {
     break;
   }
 
+  case 'snapshot': {
+    try {
+      const ts = new Date().toISOString().replace(/[:.]/g, '-');
+      const manifestObj = manifest.getManifest();
+
+      // Exclude .scopelock.json from stash — the manifest must survive the snapshot.
+      // On Windows, stash@{0} needs to be quoted.
+      const out = execSync(
+        `git stash push --include-untracked -m "scopelock-snapshot-${ts}" -- . ":(exclude).scopelock.json"`,
+        { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }
+      );
+
+      if (out.includes('No local changes to save')) {
+        manifestObj.lastSnapshot = 'clean';
+      } else {
+        // Re-apply so the working tree is fully restored; stash stays as our savepoint.
+        execSync(`git stash apply "stash@{0}"`, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
+        manifestObj.lastSnapshot = 'dirty';
+      }
+
+      manifest.saveManifest(manifestObj);
+      console.log(`✅ Snapshot created. Run 'scopelock revert' to obliterate agent changes and restore this state.`);
+    } catch (e) {
+      console.error('Failed to create snapshot.', e.stderr || e.message);
+      process.exit(1);
+    }
+    break;
+  }
+
+  case 'revert': {
+    try {
+      const manifestObj = manifest.getManifest();
+      if (!manifestObj.lastSnapshot) {
+        console.error('❌ No snapshot found. Run `scopelock snapshot` first.');
+        process.exit(1);
+      }
+      console.log(`Obliterating agent mess...`);
+      execSync(`git reset --hard HEAD`, { stdio: ['pipe', 'pipe', 'pipe'] });
+      execSync(`git clean -fd`, { stdio: ['pipe', 'pipe', 'pipe'] });
+
+      if (manifestObj.lastSnapshot === 'dirty') {
+        const stashes = execSync('git stash list', { encoding: 'utf8' });
+        const match = stashes.match(/stash@\{(\d+)\}: .*?scopelock-snapshot/);
+        if (match) {
+          execSync(`git stash pop "stash@{${match[1]}}"`, { stdio: ['pipe', 'pipe', 'pipe'] });
+        }
+      }
+
+      manifestObj.lastSnapshot = null;
+      manifest.saveManifest(manifestObj);
+      console.log(`✅ Rollback complete. The repository has been restored.`);
+    } catch (e) {
+      console.error('Failed to revert.', e.stderr || e.message);
+      process.exit(1);
+    }
+    break;
+  }
+
   default:
     console.log(`
 scopelock — Anti-hallucination scope locking for AI coding agents.
@@ -82,7 +141,9 @@ Usage:
   scopelock unlock <file>[:<func>] <reason> Unlock (reason is mandatory)
   scopelock allow-secret <file> <reason>   Bypass Secret Sentinel for a specific file
   scopelock context [task]                 Generate AI context block for a task
-  scopelock check                          Check git diff for scope violations and secret leaks
+  scopelock snapshot                       Auto-snapshot repo state before an agent session
+  scopelock revert                         Rollback to the last snapshot
+  scopelock check [--require-tests]        Check git diff for violations and test coverage
   scopelock status                         Show manifest summary
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@manukyalo/scopelock",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Anti-hallucination scope locking for AI coding agents.",
   "main": "bin/scopelock.js",
   "bin": {

package/skills/test-coverage-gate/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: test-coverage-gate
+description: "Godmode Skill: Forces the AI agent to write or update test files whenever it modifies application logic. Run 'scopelock check --require-tests' before committing to enforce this rule."
+---
+
+## Overview
+
+This skill teaches the agent how to navigate the `scopelock` Test Coverage Gate. 
+When `--require-tests` is active, the CLI will hard-block any commit that modifies a source file (`.js`, `.ts`, `.py`, etc.) if a corresponding test file (`.test.ts`, `.spec.js`, `test/`) is not also modified in the same diff.
+
+## Agent Protocol
+
+1. **Before writing code**: If you are about to modify application logic, understand that your changes will be rejected unless you also provide test coverage.
+2. **Write the code**: Implement the requested feature or fix.
+3. **Write the test**: You *must* update the corresponding test file or create a new one. The file path must contain `.test.`, `.spec.`, or be inside a `test/` or `__tests__/` directory.
+4. **Validation**: Run `scopelock check --require-tests` to mathematically verify your diff will pass the coverage gate.
+5. **Ship**: Only after the test gate is passed are you allowed to commit or mark the task as complete.
+
+## Why this exists
+
+Agents often write code and immediately declare a task "done" without proving it works. This physical gate prevents the agent from bypassing the verification phase. No tests, no merge.

package/src/git.js

@@ -21,7 +21,8 @@ const { getChangedLines } = require('./diff');
 const { extractFunctions } = require('./parser');
 const { detectSecret }  = require('./secrets');
 
-function check() {
+function check(args = []) {
+  const requireTests = args.includes('--require-tests');
   const manifest = getManifest();
   let diffOutput;
 
@@ -47,6 +48,24 @@ function check() {
   }
 
   const violations = [];
+  
+  // ── Tier -1: Test Coverage Gate ───────────────────────────────────────────
+  if (requireTests) {
+    const hasSourceChanges = changedFiles.some(f => 
+      !f.includes('.test.') && !f.includes('.spec.') && !f.includes('/test/') && !f.includes('/__tests__/') &&
+      (f.endsWith('.js') || f.endsWith('.ts') || f.endsWith('.py') || f.endsWith('.go') || f.endsWith('.rs'))
+    );
+    const hasTestChanges = changedFiles.some(f => 
+      f.includes('.test.') || f.includes('.spec.') || f.includes('/test/') || f.includes('/__tests__/')
+    );
+    if (hasSourceChanges && !hasTestChanges) {
+      violations.push({
+        type: 'test-gate',
+        file: 'N/A',
+        message: 'TEST GATE VIOLATION: Source logic was modified, but no tests were added or updated. You must write tests to pass `--require-tests`.'
+      });
+    }
+  }
 
   for (const file of changedFiles) {
     const normalizedFile = file.replace(/\\/g, '/');

package/test/run.js

@@ -156,6 +156,30 @@ console.log('\n--- Test 14: scopelock context output ---');
 const ctx = run(`${CLI} context "update the WIP function"`);
 assert(ctx.includes('SCOPE CONTEXT'), 'context output contains header');
 
+console.log('\n--- Test 15: Test Coverage Gate (Missing Tests) ---');
+fs.writeFileSync('feature.js', 'console.log("new logic");\n');
+run('git add feature.js');
+const testGateOut = run(`${CLI} check --require-tests`, true);
+assert(testGateOut.includes('TEST GATE VIOLATION'), 'check catches missing tests when flag is used');
+
+console.log('\n--- Test 16: Test Coverage Gate (Tests Provided) ---');
+fs.writeFileSync('feature.test.js', 'console.log("test for logic");\n');
+run('git add feature.test.js');
+const testGatePass = run(`${CLI} check --require-tests`);
+assert(testGatePass.includes('passed'), 'check passes when test files accompany source files');
+
+console.log('\n--- Test 17: Rollback Snapshot Creation ---');
+run(`${CLI} snapshot`);
+const m4 = JSON.parse(fs.readFileSync('.scopelock.json', 'utf8'));
+assert(m4.lastSnapshot === 'clean' || m4.lastSnapshot === 'dirty', 'snapshot state is tracked in manifest');
+
+console.log('\n--- Test 18: Rollback Revert ---');
+fs.writeFileSync('rogue.js', 'I am a rogue agent destroying things');
+run(`${CLI} revert`);
+assert(!fs.existsSync('rogue.js'), 'revert destroys untracked rogue files');
+const m5 = JSON.parse(fs.readFileSync('.scopelock.json', 'utf8'));
+assert(m5.lastSnapshot === null, 'revert clears the snapshot marker');
+
 // ─── Done ─────────────────────────────────────────────────────────────────────
 
-console.log('\n✅  All 14 tests passed.\n');
+console.log('\n✅  All 18 tests passed.\n');