@sigmashake/ssg 0.24.2 → 0.24.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -34,8 +34,8 @@ This is precisely the category of silent misconfiguration AI agents introduce
34
34
  ## Quick Start
35
35
 
36
36
  ```bash
37
- # Install dependencies
38
- bun install
37
+ # Install the CLI
38
+ npm install -g @sigmashake/ssg
39
39
 
40
40
  # Initialize configuration
41
41
  ssg init
package/bin/ssg.cjs CHANGED
@@ -16,12 +16,15 @@ let binaryPath;
16
16
  // This is checked first so a freshly-installed platform binary always wins over
17
17
  // any stale root-level binary that may have survived from a manual build.
18
18
  let hookBinPath;
19
+ let evalServerBinPath;
19
20
  try {
20
21
  const pkgRoot = path.dirname(require.resolve(`${platformPkg}/package.json`));
21
22
  const candidate = path.join(pkgRoot, 'bin', `ssg${ext}`);
22
23
  if (fs.existsSync(candidate)) binaryPath = candidate;
23
24
  const hookCandidate = path.join(pkgRoot, 'bin', `ssg-hook-fast${ext}`);
24
25
  if (fs.existsSync(hookCandidate)) hookBinPath = hookCandidate;
26
+ const sidecarCandidate = path.join(pkgRoot, 'bin', `ssg-eval-server${ext}`);
27
+ if (fs.existsSync(sidecarCandidate)) evalServerBinPath = sidecarCandidate;
25
28
  } catch {}
26
29
 
27
30
  // 2. Check if binary was bundled in the root (dev: local npm pack or manual build)
@@ -45,6 +48,7 @@ if (!binaryPath) {
45
48
  if (binaryPath) {
46
49
  const env = { ...process.env, SSG_PUBLIC_DIR: path.resolve(__dirname, '..', 'public') };
47
50
  if (hookBinPath) env['SSG_HOOK_FAST_BIN'] = hookBinPath;
51
+ if (evalServerBinPath) env['SSG_EVAL_SERVER_BIN'] = evalServerBinPath;
48
52
  const result = spawnSync(binaryPath, process.argv.slice(2), {stdio: 'inherit', env});
49
53
  process.exit(result.status ?? 1);
50
54
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@sigmashake/ssg",
3
- "version": "0.24.2",
3
+ "version": "0.24.4",
4
4
  "description": "AI Agent Governance CLI — evaluate tool calls against rules, block dangerous operations, and surface blocked commands",
5
5
  "type": "module",
6
6
  "bin": {
@@ -13,16 +13,16 @@
13
13
  "README.md"
14
14
  ],
15
15
  "optionalDependencies": {
16
- "@sigmashake/ssg-linux-x64": "0.24.2",
17
- "@sigmashake/ssg-linux-arm64": "0.24.2",
18
- "@sigmashake/ssg-darwin-arm64": "0.24.2",
19
- "@sigmashake/ssg-darwin-x64": "0.24.2",
20
- "@sigmashake/ssg-win32-x64": "0.24.2"
16
+ "@sigmashake/ssg-linux-x64": "0.24.4",
17
+ "@sigmashake/ssg-linux-arm64": "0.24.4",
18
+ "@sigmashake/ssg-darwin-arm64": "0.24.4",
19
+ "@sigmashake/ssg-darwin-x64": "0.24.4",
20
+ "@sigmashake/ssg-win32-x64": "0.24.4"
21
21
  },
22
22
  "scripts": {
23
23
  "postinstall": "node ./bin/cleanup-globals.cjs",
24
- "dev": "bun run src/cli.ts",
25
- "dev:debug": "bun --inspect src/cli.ts serve",
24
+ "dev": "SSQA_ATTACH=${SSQA_ATTACH:-1} bun src/serve-dev.ts",
25
+ "dev:debug": "bun --inspect src/serve-dev.ts",
26
26
  "dev:debug-daemon": "bun --inspect src/cli.ts daemon",
27
27
  "build": "bun build --compile src/cli.ts --outfile ssg",
28
28
  "build:linux": "bun build --compile --target=bun-linux-x64 src/cli.ts --outfile dist/ssg-linux-x64",
@@ -39,6 +39,8 @@
39
39
  "typecheck:client": "tsc --noEmit -p tsconfig.client.json",
40
40
  "test": "bun test",
41
41
  "test:e2e": "SSG_E2E=1 bun test test/dashboard-e2e.test.ts",
42
+ "test:e2e:agents": "bun run scripts/e2e-agents.ts",
43
+ "test:e2e:session-record": "bun run scripts/record-agent-session.ts",
42
44
  "lint": "bun run src/cli.ts lint",
43
45
  "sast:check": "npx gts check src/shared/daemon-metrics.ts src/engine/config.ts src/server/store.ts src/server/handlers/core.ts src/engine/config.ts",
44
46
  "gts-lint": "gts lint",
@@ -67,11 +69,11 @@
67
69
  "build:rust": "cd native/rust && cargo build --release",
68
70
  "test:rust": "cd native/rust && cargo test",
69
71
  "build:native": "bun run build:rust && cd native && zig build -Doptimize=ReleaseFast",
70
- "build:native:linux-x64": "cd native/rust && cargo build --release --target x86_64-unknown-linux-gnu && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=x86_64-linux-gnu -Drust-target=x86_64-unknown-linux-gnu && mkdir -p zig-out/lib/linux-x64 && cp zig-out/lib/libssg_eval.so zig-out/lib/linux-x64/ && cp zig-out/bin/ssg-hook-fast zig-out/lib/linux-x64/",
71
- "build:native:linux-arm64": "cd native/rust && cargo build --release --target aarch64-unknown-linux-gnu && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=aarch64-linux-gnu -Drust-target=aarch64-unknown-linux-gnu && mkdir -p zig-out/lib/linux-arm64 && cp zig-out/lib/libssg_eval.so zig-out/lib/linux-arm64/ && cp zig-out/bin/ssg-hook-fast zig-out/lib/linux-arm64/",
72
- "build:native:darwin-arm64": "cd native/rust && cargo build --release --target aarch64-apple-darwin && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=aarch64-macos -Drust-target=aarch64-apple-darwin && mkdir -p zig-out/lib/darwin-arm64 && cp zig-out/lib/libssg_eval.dylib zig-out/lib/darwin-arm64/ && cp zig-out/bin/ssg-hook-fast zig-out/lib/darwin-arm64/",
73
- "build:native:darwin-x64": "cd native/rust && cargo build --release --target x86_64-apple-darwin && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=x86_64-macos -Drust-target=x86_64-apple-darwin && mkdir -p zig-out/lib/darwin-x64 && cp zig-out/lib/libssg_eval.dylib zig-out/lib/darwin-x64/ && cp zig-out/bin/ssg-hook-fast zig-out/lib/darwin-x64/",
74
- "build:native:windows": "cd native/rust && cargo build --release --target x86_64-pc-windows-gnu && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=x86_64-windows-gnu -Drust-target=x86_64-pc-windows-gnu && mkdir -p zig-out/lib/win32-x64 && cp zig-out/bin/ssg_eval.dll zig-out/lib/win32-x64/libssg_eval.dll",
72
+ "build:native:linux-x64": "cd native/rust && cargo build --release --target x86_64-unknown-linux-gnu && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=x86_64-linux-gnu -Drust-target=x86_64-unknown-linux-gnu --prefix zig-out/linux-x64 && mkdir -p zig-out/lib/linux-x64 && cp zig-out/linux-x64/lib/libssg_eval.so zig-out/lib/linux-x64/ && cp zig-out/linux-x64/bin/ssg-hook-fast zig-out/lib/linux-x64/ && cd rust-sidecar && cargo zigbuild --release --bin ssg-eval-server --target x86_64-unknown-linux-gnu && cd .. && cp rust-sidecar/target/x86_64-unknown-linux-gnu/release/ssg-eval-server zig-out/lib/linux-x64/",
73
+ "build:native:linux-arm64": "cd native/rust && cargo build --release --target aarch64-unknown-linux-gnu && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=aarch64-linux-gnu -Drust-target=aarch64-unknown-linux-gnu --prefix zig-out/linux-arm64 && mkdir -p zig-out/lib/linux-arm64 && cp zig-out/linux-arm64/lib/libssg_eval.so zig-out/lib/linux-arm64/ && cp zig-out/linux-arm64/bin/ssg-hook-fast zig-out/lib/linux-arm64/ && cd rust-sidecar && cargo zigbuild --release --bin ssg-eval-server --target aarch64-unknown-linux-gnu && cd .. && cp rust-sidecar/target/aarch64-unknown-linux-gnu/release/ssg-eval-server zig-out/lib/linux-arm64/",
74
+ "build:native:darwin-arm64": "cd native/rust && cargo build --release --target aarch64-apple-darwin && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=aarch64-macos -Drust-target=aarch64-apple-darwin --prefix zig-out/darwin-arm64 && mkdir -p zig-out/lib/darwin-arm64 && cp zig-out/darwin-arm64/lib/libssg_eval.dylib zig-out/lib/darwin-arm64/ && cp zig-out/darwin-arm64/bin/ssg-hook-fast zig-out/lib/darwin-arm64/ && cd rust-sidecar && cargo zigbuild --release --bin ssg-eval-server --target aarch64-apple-darwin && cd .. && cp rust-sidecar/target/aarch64-apple-darwin/release/ssg-eval-server zig-out/lib/darwin-arm64/",
75
+ "build:native:darwin-x64": "cd native/rust && cargo build --release --target x86_64-apple-darwin && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=x86_64-macos -Drust-target=x86_64-apple-darwin --prefix zig-out/darwin-x64 && mkdir -p zig-out/lib/darwin-x64 && cp zig-out/darwin-x64/lib/libssg_eval.dylib zig-out/lib/darwin-x64/ && cp zig-out/darwin-x64/bin/ssg-hook-fast zig-out/lib/darwin-x64/ && cd rust-sidecar && cargo zigbuild --release --bin ssg-eval-server --target x86_64-apple-darwin && cd .. && cp rust-sidecar/target/x86_64-apple-darwin/release/ssg-eval-server zig-out/lib/darwin-x64/",
76
+ "build:native:windows": "cd native/rust && cargo build --release --target x86_64-pc-windows-gnu && cd .. && zig build -Doptimize=ReleaseFast -Dtarget=x86_64-windows-gnu -Drust-target=x86_64-pc-windows-gnu --prefix zig-out/win32-x64 && mkdir -p zig-out/lib/win32-x64 && cp zig-out/win32-x64/bin/ssg_eval.dll zig-out/lib/win32-x64/libssg_eval.dll && cd rust-sidecar && cargo zigbuild --release --bin ssg-eval-server --target x86_64-pc-windows-gnu && cd .. && cp rust-sidecar/target/x86_64-pc-windows-gnu/release/ssg-eval-server.exe zig-out/lib/win32-x64/",
75
77
  "build:native:all": "bash ../sigmashake-dist/scripts/build-native-all.sh"
76
78
  },
77
79
  "keywords": [
@@ -90,6 +92,7 @@
90
92
  "access": "public"
91
93
  },
92
94
  "devDependencies": {
95
+ "@sigmashake/ssqa": "file:../sigmashake-ssqa",
93
96
  "@tailwindcss/vite": "4.2.2",
94
97
  "@types/node": "25.5.2",
95
98
  "@types/react": "19.2.14",