sinapse-ai 9.3.0 → 9.5.0

package/.sinapse-ai/infrastructure/scripts/llm-routing/templates/deepseek-usage.cmd

@@ -1,51 +1,51 @@
-@echo off
-:: DeepSeek Usage Statistics CLI
-:: View usage tracking data per alias
-
-setlocal
-
-:: Try multiple locations for the tracker script
-:: 1. Environment variable (if set during installation)
-if defined SINAPSE_HOME (
-    set "TRACKER_SCRIPT=%SINAPSE_HOME%\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
-    if exist "%TRACKER_SCRIPT%" goto :found
-)
-
-:: 2. Common installation locations
-set "TRACKER_SCRIPT=%USERPROFILE%\sinapse-ai\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
-if exist "%TRACKER_SCRIPT%" goto :found
-
-set "TRACKER_SCRIPT=%USERPROFILE%\Workspaces\SINAPSE\SinapseAI\sinapse-ai\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
-if exist "%TRACKER_SCRIPT%" goto :found
-
-:: 3. Relative to this script (for development)
-set "TRACKER_SCRIPT=%~dp0..\usage-tracker\index.js"
-if exist "%TRACKER_SCRIPT%" goto :found
-
-:: 4. Global npm package location
-set "TRACKER_SCRIPT=%APPDATA%\npm\node_modules\@sinapse-fullstack\core\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
-if exist "%TRACKER_SCRIPT%" goto :found
-
-echo [91mERROR: Usage tracker not found![0m
-echo.
-echo Please ensure SINAPSE is installed correctly.
-echo Expected locations:
-echo   - %%SINAPSE_HOME%%\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\
-echo   - %%USERPROFILE%%\sinapse-ai\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\
-echo.
-echo Set SINAPSE_HOME environment variable: setx SINAPSE_HOME "C:\path\to\sinapse-ai"
-exit /b 1
-
-:found
-:: Check if Node.js is available
-where node >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [91mERROR: Node.js not found in PATH[0m
-    echo Please install Node.js from https://nodejs.org/
-    exit /b 1
-)
-
-:: Pass arguments to tracker
-node "%TRACKER_SCRIPT%" usage %*
-
-endlocal
+@echo off
+:: DeepSeek Usage Statistics CLI
+:: View usage tracking data per alias
+
+setlocal
+
+:: Try multiple locations for the tracker script
+:: 1. Environment variable (if set during installation)
+if defined SINAPSE_HOME (
+    set "TRACKER_SCRIPT=%SINAPSE_HOME%\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
+    if exist "%TRACKER_SCRIPT%" goto :found
+)
+
+:: 2. Common installation locations
+set "TRACKER_SCRIPT=%USERPROFILE%\sinapse-ai\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
+if exist "%TRACKER_SCRIPT%" goto :found
+
+set "TRACKER_SCRIPT=%USERPROFILE%\Workspaces\SINAPSE\SinapseAI\sinapse-ai\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
+if exist "%TRACKER_SCRIPT%" goto :found
+
+:: 3. Relative to this script (for development)
+set "TRACKER_SCRIPT=%~dp0..\usage-tracker\index.js"
+if exist "%TRACKER_SCRIPT%" goto :found
+
+:: 4. Global npm package location
+set "TRACKER_SCRIPT=%APPDATA%\npm\node_modules\@sinapse-fullstack\core\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\index.js"
+if exist "%TRACKER_SCRIPT%" goto :found
+
+echo [91mERROR: Usage tracker not found![0m
+echo.
+echo Please ensure SINAPSE is installed correctly.
+echo Expected locations:
+echo   - %%SINAPSE_HOME%%\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\
+echo   - %%USERPROFILE%%\sinapse-ai\.sinapse-ai\infrastructure\scripts\llm-routing\usage-tracker\
+echo.
+echo Set SINAPSE_HOME environment variable: setx SINAPSE_HOME "C:\path\to\sinapse-ai"
+exit /b 1
+
+:found
+:: Check if Node.js is available
+where node >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [91mERROR: Node.js not found in PATH[0m
+    echo Please install Node.js from https://nodejs.org/
+    exit /b 1
+)
+
+:: Pass arguments to tracker
+node "%TRACKER_SCRIPT%" usage %*
+
+endlocal

package/.sinapse-ai/infrastructure/scripts/pr-review-ai.js

@@ -13,7 +13,7 @@
  * Based on Auto-Claude's AI PR Reviewer architecture.
  */
 
-const { execSync } = require('child_process');
+const { execSync, execFileSync } = require('child_process');
 const fs = require('fs');
 const path = require('path');
 const EventEmitter = require('events');
@@ -577,8 +577,9 @@ Respond with a JSON object:
   async callClaude(prompt) {
     return new Promise((resolve, reject) => {
       try {
-        const result = execSync(
-          `claude --print --dangerously-skip-permissions -p "${prompt.replace(/"/g, '\\"').replace(/\n/g, '\\n').replace(/`/g, '\\`')}"`,
+        const result = execFileSync(
+          'claude',
+          ['--print', '--dangerously-skip-permissions', '-p', prompt],
           {
             encoding: 'utf8',
             maxBuffer: 10 * 1024 * 1024,
@@ -705,9 +706,10 @@ class PRReviewAI extends EventEmitter {
    */
   async fetchPRData(prNumber) {
     try {
-      // Get PR info
-      const prJson = execSync(
-        `gh pr view ${prNumber} --json title,body,author,baseRefName,headRefName,files,additions,deletions`,
+      // Get PR info (use execFileSync array form to prevent shell injection)
+      const prJson = execFileSync(
+        'gh',
+        ['pr', 'view', String(prNumber), '--json', 'title,body,author,baseRefName,headRefName,files,additions,deletions'],
         {
           cwd: this.rootPath,
           encoding: 'utf8',
@@ -716,7 +718,7 @@ class PRReviewAI extends EventEmitter {
       const pr = JSON.parse(prJson);
 
       // Get diff
-      const diff = execSync(`gh pr diff ${prNumber}`, {
+      const diff = execFileSync('gh', ['pr', 'diff', String(prNumber)], {
         cwd: this.rootPath,
         encoding: 'utf8',
         maxBuffer: 50 * 1024 * 1024,
@@ -842,16 +844,17 @@ class PRReviewAI extends EventEmitter {
     const body = this.formatReviewBody(review);
 
     try {
-      // Post as PR comment
-      execSync(`gh pr comment ${prNumber} --body "${body.replace(/"/g, '\\"')}"`, {
+      // Post as PR comment (use execFileSync array form to prevent shell injection)
+      execFileSync('gh', ['pr', 'comment', String(prNumber), '--body', body], {
         cwd: this.rootPath,
         encoding: 'utf8',
       });
 
       // If requesting changes, also submit a review
       if (review.verdict === Verdict.REQUEST_CHANGES) {
-        execSync(
-          `gh pr review ${prNumber} --request-changes --body "Please address the issues found by the automated review."`,
+        execFileSync(
+          'gh',
+          ['pr', 'review', String(prNumber), '--request-changes', '--body', 'Please address the issues found by the automated review.'],
           {
             cwd: this.rootPath,
             encoding: 'utf8',
@@ -861,7 +864,7 @@ class PRReviewAI extends EventEmitter {
         review.verdict === Verdict.APPROVE &&
         review.findings.filter((f) => f.severity === Severity.CRITICAL).length === 0
       ) {
-        execSync(`gh pr review ${prNumber} --approve --body "LGTM! Automated review passed."`, {
+        execFileSync('gh', ['pr', 'review', String(prNumber), '--approve', '--body', 'LGTM! Automated review passed.'], {
           cwd: this.rootPath,
           encoding: 'utf8',
         });
@@ -931,7 +934,7 @@ class PRReviewAI extends EventEmitter {
    * Review local changes (not yet in PR)
    */
   async reviewLocal(baseBranch = 'main') {
-    const diff = execSync(`git diff ${baseBranch}...HEAD`, {
+    const diff = execFileSync('git', ['diff', `${baseBranch}...HEAD`], {
       cwd: this.rootPath,
       encoding: 'utf8',
     });

package/.sinapse-ai/infrastructure/scripts/setup-project-infra.js

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+/**
+ * setup-project-infra.js — Apply gitflow & infrastructure templates to a project
+ *
+ * Checks which templates are missing from the target project and copies only
+ * missing ones (never overwrites). Run via: sinapse setup-infra [target-dir]
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+const C = {
+  reset: '\x1b[0m', green: '\x1b[32m', yellow: '\x1b[33m',
+  cyan: '\x1b[36m', bold: '\x1b[1m',
+};
+
+function log(color, symbol, msg) {
+  console.log(`${color}${symbol} ${msg}${C.reset}`);
+}
+
+const TEMPLATES_DIR = path.resolve(__dirname, '..', 'templates');
+
+// Mapping: template source -> project destination
+const TEMPLATE_MAP = [
+  // GitHub templates
+  { src: 'github/PULL_REQUEST_TEMPLATE.md', dest: '.github/PULL_REQUEST_TEMPLATE.md' },
+  { src: 'github/issue-templates/bug_report.md', dest: '.github/ISSUE_TEMPLATE/bug_report.md' },
+  { src: 'github/issue-templates/feature_request.md', dest: '.github/ISSUE_TEMPLATE/feature_request.md' },
+  { src: 'github/ci-template.yml', dest: '.github/workflows/ci.yml' },
+  { src: 'github/CODEOWNERS.template', dest: '.github/CODEOWNERS', transform: true },
+  // Config templates
+  { src: 'config/env.example', dest: '.env.example' },
+];
+
+function ensureDir(filePath) {
+  const dir = path.dirname(filePath);
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+}
+
+function detectProjectName(targetDir) {
+  const pkgPath = path.join(targetDir, 'package.json');
+  if (fs.existsSync(pkgPath)) {
+    try { return JSON.parse(fs.readFileSync(pkgPath, 'utf-8')).name || path.basename(targetDir); }
+    catch { /* fall through */ }
+  }
+  return path.basename(targetDir);
+}
+
+function detectMaintainer(targetDir) {
+  try {
+    const { execSync } = require('child_process');
+    const name = execSync('git config user.name', { cwd: targetDir, encoding: 'utf-8' }).trim();
+    return name.toLowerCase().replace(/\s+/g, '') || 'maintainer';
+  } catch { return 'maintainer'; }
+}
+
+function applyGitignoreAdditions(targetDir) {
+  const additions = fs.readFileSync(path.join(TEMPLATES_DIR, 'config', 'gitignore-additions.tmpl'), 'utf-8');
+  const gitignorePath = path.join(targetDir, '.gitignore');
+  const marker = '# SINAPSE Project Ignores';
+
+  if (fs.existsSync(gitignorePath)) {
+    const existing = fs.readFileSync(gitignorePath, 'utf-8');
+    if (existing.includes(marker)) {
+      log(C.yellow, '[SKIP]', '.gitignore already has SINAPSE patterns');
+      return;
+    }
+    fs.appendFileSync(gitignorePath, '\n' + additions);
+    log(C.green, '[ADD]', '.gitignore updated with SINAPSE patterns');
+  } else {
+    fs.writeFileSync(gitignorePath, additions);
+    log(C.green, '[NEW]', '.gitignore created');
+  }
+}
+
+function run(targetDir) {
+  targetDir = path.resolve(targetDir || process.cwd());
+  const projectName = detectProjectName(targetDir);
+  const maintainer = detectMaintainer(targetDir);
+
+  console.log(`\n${C.cyan}${C.bold}=== SINAPSE Project Infrastructure Setup ===${C.reset}`);
+  console.log(`Target:     ${targetDir}`);
+  console.log(`Project:    ${projectName}`);
+  console.log(`Maintainer: ${maintainer}\n`);
+
+  let added = 0, skipped = 0;
+
+  for (const entry of TEMPLATE_MAP) {
+    const destPath = path.join(targetDir, entry.dest);
+
+    if (fs.existsSync(destPath)) {
+      log(C.yellow, '[SKIP]', `${entry.dest} (already exists)`);
+      skipped++;
+      continue;
+    }
+
+    ensureDir(destPath);
+    let content = fs.readFileSync(path.join(TEMPLATES_DIR, entry.src), 'utf-8');
+
+    if (entry.transform) {
+      content = content
+        .replace(/\{\{PROJECT_NAME\}\}/g, projectName)
+        .replace(/\{\{MAINTAINER\}\}/g, maintainer);
+    }
+
+    // Replace common variables in all templates
+    content = content.replace(/\{\{PROJECT_NAME\}\}/g, projectName);
+    content = content.replace(/\{\{NODE_VERSION\}\}/g, '20');
+
+    fs.writeFileSync(destPath, content);
+    log(C.green, '[ADD]', entry.dest);
+    added++;
+  }
+
+  // Handle .gitignore separately (merge, don't overwrite)
+  applyGitignoreAdditions(targetDir);
+
+  console.log(`\n${C.cyan}${C.bold}=== Summary ===${C.reset}`);
+  console.log(`Added: ${added} | Skipped: ${skipped}`);
+  console.log(`\nRun again safely anytime — existing files are never overwritten.\n`);
+}
+
+// CLI entry
+if (require.main === module) {
+  run(process.argv[2]);
+}
+
+module.exports = { run };

package/.sinapse-ai/infrastructure/scripts/test-discovery.js

@@ -720,10 +720,15 @@ class CoverageAnalyzer {
           const match = content.match(/module\.exports\s*=\s*(\{[\s\S]*\})/);
           if (match) {
             try {
-              // eslint-disable-next-line no-eval
-              return eval('(' + match[1] + ')');
+              // Try JSON.parse first (safe — no code execution)
+              return JSON.parse(match[1]);
             } catch {
-              return {};
+              // If not valid JSON (e.g., contains JS expressions), fall back to require()
+              try {
+                return require(fullPath);
+              } catch {
+                return {};
+              }
             }
           }
         }

package/.sinapse-ai/infrastructure/scripts/validate-codex-delegation.js

@@ -5,9 +5,11 @@ const fs = require('fs');
 const path = require('path');
 const Ajv2020 = require('ajv/dist/2020');
 const {
-  buildHandoffPacket,
   loadDelegationMatrix,
 } = require(path.join(__dirname, '..', '..', '..', '.codex', 'scripts', 'resolve-codex-delegation'));
+const {
+  buildHandoffPacket,
+} = require(path.join(__dirname, '..', '..', '..', '.codex', 'scripts', 'resolve-codex-delegation-parity'));
 const {
   loadRegistry: loadCommandRegistryFile,
 } = require('./validate-codex-command-registry');