sneakoscope 1.0.9 → 1.10.0

package/README.md

@@ -4,6 +4,8 @@ Fast legacy-free proof-first Codex trust layer with image-based Voxel TriWiki.
 
 Sneakoscope Codex (`sks`) is a Codex CLI/App harness that makes repeatable Codex work auditable.
 
+SKS **1.10.0** is the Function-Only Update Check release: `sks update-check` and the pre-work update gate now share a lightweight npm freshness function that reports `route_required: false` and `pipeline_required: false`, so checking for a newer SKS package never starts Team, setup, doctor, or any execution pipeline.
+
 SKS **1.0.9** is the Official Docs Ultimate Kernel: Codex CLI `rust-v0.132.0` structured resume output is now an actual runner, `gpt-image-2` review generation uses Codex App `$imagegen` evidence or an optional OpenAI Images API fallback, Structured Outputs strict schemas are the extraction fallback, and `$UX-Review this screenshot with gpt-image-2 callouts, then fix the issues` blocks fake callouts until generated image pixels are schema-extracted, patched, recaptured, and re-reviewed.
 
 SKS **1.0.8** is the Codex 0.132 UX-Review Seal: Codex CLI `rust-v0.132.0` compatibility is explicit, `codex exec resume --output-schema` is the preferred structured-output path, and `$UX-Review this screenshot with gpt-image-2 callouts, then fix the issues` is a real visual trust loop from source screenshot fidelity to generated callout ingestion, issue ledger extraction, bounded safe fixes, recapture/re-review, Image Voxel relations, Wrongness, Completion Proof, and Trust Report gates.
@@ -29,6 +31,16 @@ SKS does not try to clone every other harness. It focuses on one thing: making C
 ![Sneakoscope Codex Trust Layer](docs/assets/sneakoscope-architecture-pipeline.jpg)
 
 
+## 1.10.0 Function-Only Update Check
+
+1.10.0 keeps the update freshness check out of the SKS mission pipeline. The shared `runSksUpdateCheck` function performs only an npm `view sneakoscope version` lookup, honors `SKS_NPM_VIEW_SNEAKOSCOPE_VERSION` for hermetic tests, and returns explicit `mode: "function"`, `route_required: false`, and `pipeline_required: false` evidence for CLI JSON output and hook-gate reuse.
+
+```bash
+sks update-check --json
+```
+
+Release checks now write `.sneakoscope/reports/official-docs-compat-1.10.0.json` plus `.sneakoscope/reports/release-readiness-1.10.0.json`.
+
 ## 1.0.9 Official Docs Ultimate Kernel
 
 1.0.9 closes the remaining policy-vs-run-path gap. Attached generated images are recorded with `callout_extraction_status: pending` and empty callouts until `codex exec resume --output-schema` or the OpenAI Structured Outputs fallback returns a schema-valid issue ledger. Real `gpt-image-2` generation records request/response artifacts, source SHA-256, high-fidelity automatic input metadata, output hashes, local-only privacy, and blockers instead of substituting prose or generic callouts.

package/crates/sks-core/Cargo.lock

@@ -76,7 +76,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "1.0.9"
+version = "1.10.0"
 dependencies = [
  "serde_json",
 ]

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "1.0.9"
+version = "1.10.0"
 edition = "2021"
 
 [dependencies]

package/crates/sks-core/src/main.rs

@@ -4,7 +4,7 @@ use std::io::{self, Read, Seek, SeekFrom};
 fn main() {
     let mut args = std::env::args().skip(1);
     match args.next().as_deref() {
-        Some("--version") => println!("sks-rs 1.0.9"),
+        Some("--version") => println!("sks-rs 1.10.0"),
         Some("compact-info") => {
             let mut input = String::new();
             let _ = io::stdin().read_to_string(&mut input);

package/dist/bin/sks.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-const FAST_PACKAGE_VERSION = '1.0.9';
+const FAST_PACKAGE_VERSION = '1.10.0';
 const args = process.argv.slice(2);
 try {
     if (args[0] === '--version' || args[0] === '-v' || args[0] === 'version') {

package/dist/build-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.dist-build.v2",
-  "version": "1.0.9",
+  "version": "1.10.0",
   "typescript": true,
   "mjs_runtime_files": 0,
   "files": [
@@ -617,6 +617,8 @@
     "core/trust-kernel/trust-report.js",
     "core/trust-kernel/trust-status.d.ts",
     "core/trust-kernel/trust-status.js",
+    "core/update-check.d.ts",
+    "core/update-check.js",
     "core/validators/completion-proof-validator.d.ts",
     "core/validators/completion-proof-validator.js",
     "core/validators/evidence-validator.d.ts",

package/dist/core/commands/basic-cli.js

@@ -3,13 +3,14 @@ import { spawnSync } from 'node:child_process';
 import { COMMANDS } from '../../cli/command-registry.js';
 import { flag } from '../../cli/args.js';
 import { printJson, sksTextLogo } from '../../cli/output.js';
-import { PACKAGE_VERSION, ensureDir, exists, nowIso, projectRoot, readJson, runProcess, sksRoot, tmpdir, writeJsonAtomic } from '../fsx.js';
+import { PACKAGE_VERSION, ensureDir, exists, nowIso, projectRoot, readJson, sksRoot, tmpdir, writeJsonAtomic } from '../fsx.js';
 import { COMMAND_CATALOG, DOLLAR_COMMAND_ALIASES, DOLLAR_COMMANDS, USAGE_TOPICS, routePrompt, routeReasoning, reasoningInstruction } from '../routes.js';
 import { initProject, normalizeInstallScope, sksCommandPrefix } from '../init.js';
 import { buildFeatureRegistry, validateFeatureRegistry } from '../feature-registry.js';
 import { hooksExplainReport } from '../../cli/feature-commands.js';
 import { writeSelftestRouteProof } from '../proof/selftest-proof-fixtures.js';
 import { createMission } from '../mission.js';
+import { formatSksUpdateCheckText, runSksUpdateCheck } from '../update-check.js';
 export async function helpCommand(args = []) {
     const topic = args[0];
     if (topic)
@@ -103,25 +104,10 @@ export function quickstartCommand() {
 For implementation work, use Codex App prompt routes such as $Team, $Goal, $QA-LOOP, $Image-UX-Review, and $Computer-Use.`);
 }
 export async function updateCheckCommand(args = []) {
-    const latest = await npmViewVersion('sneakoscope');
-    const result = {
-        package: 'sneakoscope',
-        current: PACKAGE_VERSION,
-        runtime_current: PACKAGE_VERSION,
-        latest: latest.version,
-        update_available: latest.version ? compareVersions(latest.version, PACKAGE_VERSION) > 0 : false,
-        error: latest.error || null
-    };
+    const result = await runSksUpdateCheck();
     if (flag(args, '--json'))
         return printJson(result);
-    console.log(`${sksTextLogo()}\n\nUpdate Check`);
-    console.log(`Current: ${result.current}`);
-    console.log(`Latest:  ${result.latest || 'unknown'}`);
-    console.log(`Update:  ${result.update_available ? 'available' : 'not needed'}`);
-    if (result.error)
-        console.log(`Error:   ${result.error}`);
-    if (result.update_available)
-        console.log(`Run:     npm i -g sneakoscope@${result.latest}`);
+    console.log(`${sksTextLogo()}\n\n${formatSksUpdateCheckText(result)}`);
 }
 export async function setupCommand(args = []) {
     const root = await projectRoot();
@@ -292,24 +278,6 @@ function installScopeFromArgs(args = [], fallback = 'global') {
     const index = args.indexOf('--install-scope');
     return normalizeInstallScope(index >= 0 && args[index + 1] ? args[index + 1] : fallback);
 }
-async function npmViewVersion(name) {
-    const npm = whichSync('npm');
-    if (!npm)
-        return { version: null, error: 'npm not found on PATH' };
-    const result = await runProcess(npm, ['view', name, 'version', '--silent'], { timeoutMs: 15000, maxOutputBytes: 4096 }).catch((err) => ({ code: 1, stdout: '', stderr: err.message }));
-    if (result.code !== 0)
-        return { version: null, error: (result.stderr || result.stdout || 'npm view failed').trim() };
-    return { version: String(result.stdout || '').trim().split(/\s+/).pop() || null };
-}
-function compareVersions(a, b) {
-    const pa = String(a || '').split('.').map((x) => Number.parseInt(x, 10) || 0);
-    const pb = String(b || '').split('.').map((x) => Number.parseInt(x, 10) || 0);
-    for (let i = 0; i < Math.max(pa.length, pb.length); i += 1) {
-        if ((pa[i] || 0) !== (pb[i] || 0))
-            return (pa[i] || 0) - (pb[i] || 0);
-    }
-    return 0;
-}
 function whichSync(command) {
     const result = spawnSync(process.platform === 'win32' ? 'where' : 'command', process.platform === 'win32' ? [command] : ['-v', command], {
         encoding: 'utf8',

package/dist/core/fsx.d.ts

@@ -1,4 +1,4 @@
-export declare const PACKAGE_VERSION = "1.0.9";
+export declare const PACKAGE_VERSION = "1.10.0";
 export declare const DEFAULT_PROCESS_TAIL_BYTES: number;
 export declare const DEFAULT_PROCESS_TIMEOUT_MS: number;
 export interface RunProcessOptions {

package/dist/core/fsx.js

@@ -5,7 +5,7 @@ import os from 'node:os';
 import crypto from 'node:crypto';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-export const PACKAGE_VERSION = '1.0.9';
+export const PACKAGE_VERSION = '1.10.0';
 export const DEFAULT_PROCESS_TAIL_BYTES = 256 * 1024;
 export const DEFAULT_PROCESS_TIMEOUT_MS = 30 * 60 * 1000;
 export function nowIso() {

package/dist/core/hooks-runtime.js

@@ -10,6 +10,7 @@ import { classifyToolError } from './evaluation.js';
 import { REQUIRED_CODEX_MODEL, isForbiddenCodexModel } from './codex-model-guard.js';
 import { dollarCommand, stripVisibleDecisionAnswerBlocks } from './routes.js';
 import { appendMissionStatus } from './recallpulse.js';
+import { runSksUpdateCheck } from './update-check.js';
 import { buildPermissionRequestAllow, buildPermissionRequestDeny, buildPostToolUseBlock, buildPostToolUseContinue, buildPreToolUseContinue, buildPreToolUseDeny, buildStopBlock, buildStopContinue, buildUserPromptSubmitBlock, buildUserPromptSubmitContinue } from './codex-compat/codex-hook-output-builders.js';
 const TEAM_DIGEST_MAX_EVENTS = 4;
 const TEAM_DIGEST_MESSAGE_CHARS = 180;
@@ -876,15 +877,8 @@ function sksUpdateInstallCommand(version) {
     return `npm i -g sneakoscope@${version} --registry https://registry.npmjs.org/`;
 }
 async function checkLatestVersion() {
-    if (process.env.SKS_NPM_VIEW_SNEAKOSCOPE_VERSION)
-        return { latest: process.env.SKS_NPM_VIEW_SNEAKOSCOPE_VERSION };
-    const npm = await which('npm').catch(() => null);
-    if (!npm)
-        return { error: 'npm not found' };
-    const result = await runProcess(npm, ['view', 'sneakoscope', 'version'], { timeoutMs: 3500, maxOutputBytes: 4096 });
-    if (result.code !== 0)
-        return { error: `${result.stderr || result.stdout || 'npm view failed'}`.trim() };
-    return { latest: result.stdout.trim().split(/\s+/).pop() };
+    const check = await runSksUpdateCheck({ timeoutMs: 3500 });
+    return { latest: check.latest, error: check.error || undefined };
 }
 async function detectInstalledSksVersion() {
     const override = parseVersionText(process.env.SKS_INSTALLED_SKS_VERSION || '');

package/dist/core/update-check.d.ts

@@ -0,0 +1,29 @@
+export interface SksUpdateCheckOptions {
+    packageName?: string;
+    currentVersion?: string;
+    registry?: string;
+    npmBin?: string | null;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+    maxOutputBytes?: number;
+}
+export interface SksUpdateCheckResult {
+    schema: 'sks.update-check.v2';
+    package: string;
+    current: string;
+    runtime_current: string;
+    latest: string | null;
+    update_available: boolean;
+    status: 'current' | 'available' | 'unavailable';
+    mode: 'function';
+    route_required: false;
+    pipeline_required: false;
+    command: string | null;
+    npm_bin: string | null;
+    registry: string;
+    error: string | null;
+}
+export declare function runSksUpdateCheck(options?: SksUpdateCheckOptions): Promise<SksUpdateCheckResult>;
+export declare function formatSksUpdateCheckText(result: SksUpdateCheckResult): string;
+export declare function comparePackageVersions(a: string | null | undefined, b: string | null | undefined): number;
+//# sourceMappingURL=update-check.d.ts.map

package/dist/core/update-check.js

@@ -0,0 +1,97 @@
+import { PACKAGE_VERSION, runProcess, which } from './fsx.js';
+const DEFAULT_REGISTRY = 'https://registry.npmjs.org/';
+export async function runSksUpdateCheck(options = {}) {
+    const packageName = options.packageName || 'sneakoscope';
+    const current = options.currentVersion || PACKAGE_VERSION;
+    const registry = options.registry || DEFAULT_REGISTRY;
+    const env = options.env || process.env;
+    const override = env[versionOverrideEnvName(packageName)];
+    if (override)
+        return buildResult({ packageName, current, latest: override, registry, npmBin: null });
+    const npmBin = options.npmBin === undefined ? await which('npm') : options.npmBin;
+    if (!npmBin) {
+        return buildResult({
+            packageName,
+            current,
+            latest: null,
+            registry,
+            npmBin: null,
+            error: 'npm not found on PATH'
+        });
+    }
+    const args = ['view', packageName, 'version', '--silent', '--registry', registry];
+    const result = await runProcess(npmBin, args, {
+        env,
+        timeoutMs: options.timeoutMs ?? 5000,
+        maxOutputBytes: options.maxOutputBytes ?? 4096
+    }).catch((err) => ({
+        code: 1,
+        stdout: '',
+        stderr: err instanceof Error ? err.message : String(err)
+    }));
+    if (result.code !== 0) {
+        return buildResult({
+            packageName,
+            current,
+            latest: null,
+            registry,
+            npmBin,
+            error: `${result.stderr || result.stdout || 'npm view failed'}`.trim()
+        });
+    }
+    return buildResult({
+        packageName,
+        current,
+        latest: String(result.stdout || '').trim().split(/\s+/).pop() || null,
+        registry,
+        npmBin
+    });
+}
+export function formatSksUpdateCheckText(result) {
+    const lines = [
+        'Update Check',
+        `Current: ${result.current}`,
+        `Latest:  ${result.latest || 'unknown'}`,
+        `Update:  ${result.update_available ? 'available' : 'not needed'}`
+    ];
+    if (result.error)
+        lines.push(`Error:   ${result.error}`);
+    if (result.command)
+        lines.push(`Run:     ${result.command}`);
+    lines.push('Mode:    function-only');
+    return lines.join('\n');
+}
+export function comparePackageVersions(a, b) {
+    const pa = String(a || '').split(/[.-]/).map((x) => Number.parseInt(x, 10) || 0);
+    const pb = String(b || '').split(/[.-]/).map((x) => Number.parseInt(x, 10) || 0);
+    for (let i = 0; i < Math.max(pa.length, pb.length, 3); i += 1) {
+        if ((pa[i] || 0) > (pb[i] || 0))
+            return 1;
+        if ((pa[i] || 0) < (pb[i] || 0))
+            return -1;
+    }
+    return 0;
+}
+function buildResult(input) {
+    const updateAvailable = Boolean(input.latest && comparePackageVersions(input.latest, input.current) > 0);
+    return {
+        schema: 'sks.update-check.v2',
+        package: input.packageName,
+        current: input.current,
+        runtime_current: PACKAGE_VERSION,
+        latest: input.latest,
+        update_available: updateAvailable,
+        status: input.error ? 'unavailable' : updateAvailable ? 'available' : 'current',
+        mode: 'function',
+        route_required: false,
+        pipeline_required: false,
+        command: updateAvailable ? `npm i -g ${input.packageName}@${input.latest} --registry ${input.registry}` : null,
+        npm_bin: input.npmBin,
+        registry: input.registry,
+        error: input.error || null
+    };
+}
+function versionOverrideEnvName(packageName) {
+    return `SKS_NPM_VIEW_${packageName.replace(/[^A-Za-z0-9]+/g, '_').toUpperCase()}_VERSION`;
+}
+//# sourceMappingURL=update-check.js.map

package/dist/core/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PACKAGE_VERSION = "1.0.9";
+export declare const PACKAGE_VERSION = "1.10.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/core/version.js

@@ -1,2 +1,2 @@
-export const PACKAGE_VERSION = '1.0.9';
+export const PACKAGE_VERSION = '1.10.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "1.0.9",
+  "version": "1.10.0",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",