sigrank 0.15.4 → 0.16.0

package/submit.mjs

@@ -10,6 +10,7 @@
 // the display signa_rate reflects true session shape (the ranked Υ is already exact).
 
 import { snapshotHash, signPayload } from './sign.mjs'
+import { preflight } from './preflight.mjs'
 
 const WINDOW_TYPE = { '7d': '7d', '30d': '30d', '90d': '90d', all: 'all_time' }
 const WINDOW_SPAN_DAYS = { '7d': 7, '30d': 30, '90d': 90, all_time: 3650 }
@@ -99,6 +100,14 @@ export function buildPayload(windowKey, pillars, messages, identity, platform, o
       public_key: identity.public_key,
     },
   }
+
+  // Cascade Report block (Phase 1 — mode detection + badges + health).
+  // Computed locally (pure math), submitted alongside the 4 token pillars.
+  // The server stores it as-is — does NOT recompute modes.
+  // Weekly granularity is the privacy boundary — daily modes never leave the machine.
+  if (opts.report && typeof opts.report === 'object') {
+    payload.report = opts.report
+  }
   payload.agent.snapshot_hash = snapshotHash(payload)
   return payload
 }
@@ -128,6 +137,33 @@ export async function submitSignedWindow(windowKey, pillars, messages, identity,
     return fetch(url, { ...init, signal: init.signal || ctrl.signal }).finally(() => clearTimeout(timer))
   })
   const payload = buildPayload(windowKey, pillars, messages, identity, opts.platform || 'claude', opts)
+
+  // Preflight: run the same anti-gaming checks the server will run, locally.
+  // If the payload would be rejected or downgraded, warn the operator BEFORE
+  // submitting. The server always runs its own checks — this is a preview.
+  const pre = preflight(payload)
+  if (!pre.pass && !opts.skipPreflight) {
+    if (pre.wouldReject) {
+      return {
+        status: 'preflight_rejected',
+        window: WINDOW_TYPE[windowKey] || windowKey,
+        preflight: pre,
+        detail: `Submission would be REJECTED by the server: ${pre.summary}. Fix the issue or re-run with skipPreflight.`,
+      }
+    }
+    // Flags downgrade verified → flagged (not ranked). Warn but don't block
+    // unless the caller explicitly asked for strict mode.
+    if (opts.strictPreflight) {
+      return {
+        status: 'preflight_flagged',
+        window: WINDOW_TYPE[windowKey] || windowKey,
+        preflight: pre,
+        detail: `Submission would be DOWNGRADED (not ranked): ${pre.summary}. Fix the issue or re-run with skipPreflight.`,
+      }
+    }
+    // Non-strict: attach the preflight warning to the result but proceed.
+  }
+
   const signature = signPayload(payload, identity.private_key_pkcs8_b64)
 
   // Dry run: build + sign exactly as a real publish, then STOP before the POST.
@@ -140,6 +176,7 @@ export async function submitSignedWindow(windowKey, pillars, messages, identity,
       would_post: `${apiBase}/api/v1/snapshots`,
       payload,
       signature,
+      preflight: pre,
       detail: 'Nothing sent. Re-run without dry_run to publish.',
     }
   }
@@ -177,5 +214,6 @@ export async function submitSignedWindow(windowKey, pillars, messages, identity,
     snapshot_hash: payload.agent.snapshot_hash,
     reason: res.ok ? null : ack.reason || ack.status || `http_${res.status}`,
     detail: ack.detail ?? null,
+    preflight: pre,
   }
 }

package/tokenpull.mjs

@@ -164,6 +164,14 @@ export async function tokenpull({ adapter = claudeAdapter, root, now } = {}) {
 
   const windows = WINDOWS.map((w) => {
     const cutoff = w.days === Infinity ? -Infinity : nowMs - w.days * DAY_MS
+    // NULL-TIMESTAMP WINDOW ASYMMETRY: the `all` window returns true unconditionally,
+    // so records whose adapter cannot supply a timestamp (ts: null or unparseable)
+    // appear in all-time but disappear from 7d/30d/90d. This is intentional — we do
+    // not fabricate timestamps. Session-granularity adapters (goose/droid/hermes)
+    // typically have created_at/updated_at, but if those columns are absent the row
+    // is all-time-only. A file-mtime fallback was considered but rejected: mtime
+    // reflects the log file, not the session, and would misattribute old sessions
+    // to recent file-touch times.
     const inWin = msgs.filter((m) => {
       if (w.days === Infinity) return true
       const t = m.ts ? Date.parse(m.ts) : NaN
@@ -250,6 +258,8 @@ export async function tokenpullCodex({ adapter = codexAdapter, root, now, ioRati
 
   const windows = WINDOWS.map((w) => {
     const cutoff = w.days === Infinity ? -Infinity : nowMs - w.days * DAY_MS
+    // NULL-TIMESTAMP WINDOW ASYMMETRY: see tokenpull() above — same behavior.
+    // Records without a parseable ts appear in `all` only, not in 7d/30d/90d.
     const inWin = recs.filter((m) => {
       if (w.days === Infinity) return true
       const t = m.ts ? Date.parse(m.ts) : NaN
@@ -284,7 +294,9 @@ export async function tokenpullAny(platform, opts = {}) {
     let ioRatio = opts.ioRatio || 2.0
     if (!opts.ioRatio) {
       try {
-        const c = await tokenpull({ adapter: claudeAdapter })
+        // Forward root/now from opts so the Beta-ratio derivation is testable
+        // (without this, it always reads the real ~/.claude and can't be injected).
+        const c = await tokenpull({ adapter: claudeAdapter, root: opts.root, now: opts.now })
         const all = c.windows.find((w) => w.window === 'all')
         if (all && all.pillars.output > 0) ioRatio = all.pillars.input / all.pillars.output
       } catch { /* no Claude data → Alpha 2.0 */ }