sneakoscope 2.0.13 → 2.0.15

package/dist/scripts/packlist-performance-check.js

@@ -1,83 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
-const MAX_FILES = Number(process.env.SKS_MAX_PACK_FILES || 1250);
-const MAX_UNPACKED = Number(process.env.SKS_MAX_UNPACKED_BYTES || 6 * 1024 * 1024);
-const MAX_PACKED = Number(process.env.SKS_MAX_PACK_BYTES || 1536 * 1024);
-function runNpmPack() {
-    const npmCli = process.env.npm_execpath; // set when invoked via `npm run`
-    const npmCache = process.env.SKS_RELEASE_NPM_CACHE || path.join(os.tmpdir(), 'sneakoscope-npm-cache');
-    fs.mkdirSync(npmCache, { recursive: true });
-    const argv = ['pack', '--dry-run', '--json', '--ignore-scripts'];
-    const opts = {
-        cwd: root,
-        encoding: 'utf8',
-        maxBuffer: 32 * 1024 * 1024,
-        env: {
-            ...process.env,
-            npm_config_cache: npmCache,
-            NPM_CONFIG_CACHE: npmCache
-        }
-    };
-    const res = npmCli
-        ? spawnSync(process.execPath, [npmCli, ...argv], opts)
-        : spawnSync('npm', argv, opts);
-    return res;
-}
-const res = runNpmPack();
-assertGate(res.status === 0, 'npm_pack_failed', { stderr: res.stderr });
-let info;
-try {
-    const parsed = JSON.parse(res.stdout);
-    info = Array.isArray(parsed) ? parsed[0] : parsed;
-}
-catch (err) {
-    assertGate(false, 'npm_pack_unparseable', { error: String(err && err.message ? err.message : err) });
-}
-const files = info.files.map((f) => f.path);
-const runtimeManifest = JSON.parse(fs.readFileSync(path.join(root, 'runtime-required-scripts.json'), 'utf8'));
-assertGate(runtimeManifest.schema === 'sks.runtime-required-scripts.v1' && Array.isArray(runtimeManifest.scripts), 'runtime required scripts manifest invalid', runtimeManifest);
-assertGate(info.entryCount <= MAX_FILES, 'packlist_file_count_over_limit', { entryCount: info.entryCount, max_files: MAX_FILES });
-assertGate(info.unpackedSize <= MAX_UNPACKED, 'packlist_unpacked_over_limit', { unpackedSize: info.unpackedSize, max_unpacked: MAX_UNPACKED });
-assertGate(info.size <= MAX_PACKED, 'packlist_packed_over_limit', { size: info.size, max_packed: MAX_PACKED });
-assertGate(files.includes('dist/bin/sks.js'), 'packlist_missing_runtime_entry', { missing: 'dist/bin/sks.js' });
-for (const entry of runtimeManifest.scripts) {
-    assertGate(files.includes(entry.path), 'packlist_missing_runtime_required_script', { missing: entry.path, reason: entry.reason });
-}
-assertGate(files.includes('package.json'), 'packlist_missing_runtime_entry', { missing: 'package.json' });
-assertGate(files.includes('README.md'), 'packlist_missing_runtime_entry', { missing: 'README.md' });
-assertGate(files.includes('LICENSE'), 'packlist_missing_runtime_entry', { missing: 'LICENSE' });
-assertGate(files.some((f) => f.startsWith('schemas/')), 'packlist_missing_runtime_entry', { missing: 'schemas/' });
-const forbidden = files.filter((f) => f.startsWith('test/') ||
-    f.startsWith('src/') ||
-    f.startsWith('docs/internal/') ||
-    f.endsWith('.map') ||
-    f.startsWith('.sneakoscope/') ||
-    f.endsWith('.tgz') ||
-    f.startsWith('coverage/') ||
-    /(^|\/)\.env/.test(f));
-assertGate(forbidden.length === 0, 'packlist_forbidden_files', { forbidden });
-const report = {
-    entryCount: info.entryCount,
-    size: info.size,
-    unpackedSize: info.unpackedSize,
-    runtime_required_scripts: runtimeManifest.scripts.map((entry) => entry.path),
-    runtime_required_missing: runtimeManifest.scripts.filter((entry) => !files.includes(entry.path)).map((entry) => entry.path),
-    max_files: MAX_FILES,
-    max_packed: MAX_PACKED,
-    max_unpacked: MAX_UNPACKED,
-    forbidden: []
-};
-const out = path.join(root, '.sneakoscope', 'reports', 'packlist-performance.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-emitGate('publish:packlist-performance', {
-    files: info.entryCount,
-    packed_kib: Math.round(info.size / 1024),
-    unpacked_mib: +(info.unpackedSize / 1048576).toFixed(2)
-});
-//# sourceMappingURL=packlist-performance-check.js.map

package/dist/scripts/parallel-verification-engine-check.js

@@ -1,85 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
-const issues = [];
-for (const rel of [
-    'src/core/verification/verification-dag.ts',
-    'src/core/verification/verification-worker-pool.ts',
-    'src/core/verification/verification-artifact-lock.ts',
-    'src/core/verification/verification-result.ts',
-    'src/core/verification/verification-proof.ts',
-    'src/scripts/release-parallel-check.ts'
-]) {
-    if (!fs.existsSync(path.join(root, rel)))
-        issues.push(`missing:${rel}`);
-}
-await runFixture();
-const releaseSource = read('src/scripts/release-parallel-check.ts');
-for (const token of ['runVerificationDag', 'buildVerificationDag', 'writeParallelVerificationProof']) {
-    if (!releaseSource.includes(token))
-        issues.push(`release_parallel_runner_missing:${token}`);
-}
-const result = { schema: 'sks.parallel-verification-engine-check.v1', ok: issues.length === 0, issues };
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-async function runFixture() {
-    const dagPath = path.join(root, 'dist', 'core', 'verification', 'verification-dag.js');
-    const poolPath = path.join(root, 'dist', 'core', 'verification', 'verification-worker-pool.js');
-    if (!fs.existsSync(dagPath) || !fs.existsSync(poolPath))
-        return;
-    const dagMod = await import(pathToFileURL(dagPath).href);
-    const poolMod = await import(pathToFileURL(poolPath).href);
-    const dag = dagMod.buildVerificationDag([
-        { id: 'a', command: `${process.execPath} -e "process.exit(0)"`, outputs: ['a.json'] },
-        { id: 'b', command: `${process.execPath} -e "process.exit(0)"`, dependencies: ['a'], outputs: ['b.json'] }
-    ]);
-    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-verify-'));
-    const result = await poolMod.runVerificationDag(dag, { cwd: root, concurrency: 2, logDir: tmp });
-    if (!result.ok || result.task_count !== 2)
-        issues.push('fixture_parallel_verification_failed');
-    const failedDag = dagMod.buildVerificationDag([
-        { id: 'fail', command: `${process.execPath} -e "process.exit(3)"`, outputs: ['fail.json'] },
-        { id: 'after', command: `${process.execPath} -e "process.exit(0)"`, dependencies: ['fail'], outputs: ['after.json'] }
-    ]);
-    const failed = await poolMod.runVerificationDag(failedDag, { cwd: root, concurrency: 2, logDir: tmp });
-    const after = failed.results.find((row) => row.id === 'after');
-    if (!after?.skipped || failed.skipped !== 1 || failed.failed !== 1 || failed.task_count !== 2)
-        issues.push('fixture_failed_dependency_not_skipped');
-    const timeoutDag = dagMod.buildVerificationDag([
-        { id: 'slow', command: `${process.execPath} -e "process.on('SIGTERM',()=>setTimeout(()=>process.exit(0),200)); setInterval(()=>{},50)"`, timeout_ms: 20, outputs: ['slow.json'] }
-    ]);
-    const timeoutResult = await poolMod.runVerificationDag(timeoutDag, { cwd: root, concurrency: 1, logDir: tmp });
-    const slow = timeoutResult.results.find((row) => row.id === 'slow');
-    if (!slow?.error?.startsWith('timeout:') || slow.duration_ms < 20)
-        issues.push('fixture_timeout_process_tree_not_reported');
-    try {
-        dagMod.buildVerificationDag([
-            { id: 'x', command: 'true', outputs: ['same'] },
-            { id: 'y', command: 'true', outputs: ['same'] }
-        ]);
-        issues.push('fixture_output_conflict_not_blocked');
-    }
-    catch { }
-    try {
-        dagMod.buildVerificationDag([
-            { id: 'x', command: 'true', outputs: ['reports/x.json'] },
-            { id: 'y', command: 'true', outputs: ['reports/../reports/x.json'] }
-        ]);
-        issues.push('fixture_normalized_output_conflict_not_blocked');
-    }
-    catch { }
-}
-function read(rel) {
-    try {
-        return fs.readFileSync(path.join(root, rel), 'utf8');
-    }
-    catch {
-        return '';
-    }
-}
-//# sourceMappingURL=parallel-verification-engine-check.js.map

package/dist/scripts/postinstall-safe-side-effects-check.js

@@ -1,65 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { root, assertGate, emitGate, readText } from './sks-1-18-gate-lib.js';
-// Locks the guarantee that `postinstall` performs no heavy / network / process-kill
-// side-effects by default. This is STATIC source analysis only — we never execute
-// `postinstall`, because doing so would mutate the global Codex App / shell environment.
-const helpers = readText('src/cli/install-helpers.ts');
-// Heavy CLI tool installs (brew / npm globals) are opt-in only.
-assertGate(helpers.includes('SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS'), 'postinstall cli tool install must be gated behind SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS');
-// Killing a third-party app's processes is opt-in only.
-assertGate(helpers.includes("SKS_POSTINSTALL_RECONCILE_APP_PROCESSES === '1'"), 'postinstall process reconciliation must be gated behind SKS_POSTINSTALL_RECONCILE_APP_PROCESSES');
-// Config writes are gated (unparseable preserved / unsafe rewrite skipped) and backed up.
-assertGate(helpers.includes('unparseable_config_preserved'), 'postinstall must preserve unparseable config');
-assertGate(helpers.includes('skipped_unsafe_rewrite'), 'postinstall must skip unsafe config rewrites');
-assertGate(helpers.includes('backupCodexConfig'), 'postinstall config writes must back up the existing config');
-// User model / service_tier are set-if-absent, never overwritten.
-assertGate(helpers.includes('upsertTopLevelTomlStringIfAbsent'), 'postinstall must set user model/service_tier only when absent');
-// The postinstall() body must be wrapped in try/catch/finally so it never fails `npm install`.
-const postinstallStart = helpers.indexOf('export async function postinstall');
-assertGate(postinstallStart !== -1, 'postinstall function not found in install-helpers.ts');
-const afterStart = postinstallStart + 'export async function postinstall'.length;
-const nextExport = helpers.indexOf('\nexport ', afterStart);
-const nextAsync = helpers.indexOf('\nasync function ', afterStart);
-const candidates = [nextExport, nextAsync].filter((idx) => idx !== -1);
-const bodyEnd = candidates.length ? Math.min(...candidates) : helpers.length;
-const postinstallBody = helpers.slice(postinstallStart, bodyEnd);
-assertGate(postinstallBody.includes('try'), 'postinstall body must use try (never fail npm install)');
-assertGate(postinstallBody.includes('catch'), 'postinstall body must use catch (never fail npm install)');
-assertGate(postinstallBody.includes('finally'), 'postinstall body must use finally (never fail npm install)');
-// Explicit repair / opt-in paths must be surfaced to the user.
-assertGate(helpers.includes('sks bootstrap'), 'postinstall must surface `sks bootstrap` repair path');
-assertGate(helpers.includes('sks deps check'), 'postinstall must surface `sks deps check` repair path');
-assertGate(helpers.includes('sks doctor --fix'), 'postinstall must surface `sks doctor --fix` repair path');
-assertGate(helpers.includes('SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS=1'), 'postinstall hint must mention the SKS_POSTINSTALL_AUTO_INSTALL_CLI_TOOLS=1 opt-in');
-// init.ts hardening: managed Codex config merge is set-if-absent and never force-overwrites features.
-const init = readText('src/core/init.ts');
-const mergeStart = init.indexOf('mergeManagedCodexConfigToml(');
-assertGate(mergeStart !== -1, 'mergeManagedCodexConfigToml not found in init.ts');
-const afterMergeStart = mergeStart + 'mergeManagedCodexConfigToml('.length;
-const mergeNextExport = init.indexOf('\nexport ', afterMergeStart);
-const mergeNextAsync = init.indexOf('\nasync function ', afterMergeStart);
-const mergeNextFn = init.indexOf('\nfunction ', afterMergeStart);
-const mergeCandidates = [mergeNextExport, mergeNextAsync, mergeNextFn].filter((idx) => idx !== -1);
-const mergeEnd = mergeCandidates.length ? Math.min(...mergeCandidates) : init.length;
-const mergeBody = init.slice(mergeStart, mergeEnd);
-assertGate(mergeBody.includes('upsertTomlTableKeyIfAbsent'), 'managed config merge must set feature flags only when absent');
-assertGate(mergeBody.includes("SKS_MANAGE_CODEX_APP_PLUGINS === '1'"), 'managed config plugin auto-enable must be opt-in via SKS_MANAGE_CODEX_APP_PLUGINS=1');
-assertGate(!/upsertTomlTableKey\(next, 'features'/.test(mergeBody), 'managed config merge must NOT force-overwrite the features table');
-const report = {
-    schema: 'sks.postinstall-safe-side-effects.v1',
-    ok: true,
-    gated: ['cli_install', 'process_kill', 'config_write'],
-    try_catch_finally: true,
-    managed_config_set_if_absent: true
-};
-const out = path.join(root, '.sneakoscope/reports/postinstall-safe-side-effects.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-emitGate('postinstall:safe-side-effects', {
-    gated: ['cli_install', 'process_kill', 'config_write'],
-    try_catch_finally: true
-});
-//# sourceMappingURL=postinstall-safe-side-effects-check.js.map

package/dist/scripts/ppt-full-e2e-artifact-graph-check.js

@@ -1,40 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-const reportPath = path.join(process.cwd(), '.sneakoscope', 'reports', 'ppt-full-e2e-blackbox.json');
-if (!fs.existsSync(reportPath)) {
-    const run = spawnSync(process.execPath, ['./dist/scripts/ppt-full-e2e-blackbox-check.js'], { cwd: process.cwd(), env: process.env, encoding: 'utf8', maxBuffer: 8 * 1024 * 1024 });
-    if (run.status !== 0) {
-        console.log(JSON.stringify({ schema: 'sks.ppt-full-e2e-artifact-graph.v1', ok: false, blocker: 'blackbox_failed', stdout_tail: run.stdout.slice(-2000), stderr_tail: run.stderr.slice(-2000) }, null, 2));
-        process.exit(1);
-    }
-}
-const blackbox = JSON.parse(fs.readFileSync(reportPath, 'utf8'));
-const required = ['inventory', 'exportLedger', 'callouts', 'slideIssues', 'deckIssues'];
-const blockers = required.filter((key) => !blackbox.artifacts?.[key]).map((key) => `missing:${key}`);
-if (!blackbox.artifacts?.proof_schema)
-    blockers.push('missing:completion_proof');
-if (!blackbox.artifacts?.trust_schema)
-    blockers.push('missing:trust_report');
-if (blackbox.generated_slide_review_count < blackbox.exported_slide_images_count)
-    blockers.push('generated_review_count_lt_slide_count');
-if (blackbox.issue_extraction_count <= 0)
-    blockers.push('issue_extraction_empty');
-if (!blackbox.mock_fake_not_verified_real)
-    blockers.push('mock_promoted_to_real');
-const result = {
-    schema: 'sks.ppt-full-e2e-artifact-graph.v1',
-    ok: blockers.length === 0,
-    mission_id: blackbox.mission_id,
-    local_only_policy: true,
-    generated_slide_review_count: blackbox.generated_slide_review_count,
-    slide_count: blackbox.exported_slide_images_count,
-    issue_extraction_count: blackbox.issue_extraction_count,
-    blockers
-};
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=ppt-full-e2e-artifact-graph-check.js.map

package/dist/scripts/ppt-full-e2e-blackbox-check.js

@@ -1,109 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sks-ppt-e2e-'));
-const deck = path.join(tmp, 'synthetic-two-slide.pptx');
-fs.writeFileSync(deck, [
-    'ppt/slides/slide1.xml',
-    '<p:sld><p:cSld><p:spTree><a:t>SKS 1.14.1 Synthetic Slide 1</a:t></p:spTree></p:cSld></p:sld>',
-    'ppt/slides/slide2.xml',
-    '<p:sld><p:cSld><p:spTree><a:t>SKS 1.14.1 Synthetic Slide 2</a:t></p:spTree></p:cSld></p:sld>'
-].join('\n'));
-const repoRoot = process.cwd();
-const run = spawnSync(process.execPath, [path.join(repoRoot, 'dist/bin/sks.js'), 'ppt', 'review', '--deck', deck, '--mock', '--imagegen', '--json'], {
-    cwd: tmp,
-    env: { ...process.env, SKS_TEST_FAKE_IMAGEGEN: '1', SKS_TEST_FAKE_EXTRACTOR: '1' },
-    encoding: 'utf8',
-    maxBuffer: 8 * 1024 * 1024
-});
-const parsed = parseJson(run.stdout);
-const missionDir = parsed?.mission_id ? path.join(tmp, '.sneakoscope', 'missions', parsed.mission_id) : null;
-const inventory = (missionDir ? readJson(path.join(missionDir, 'ppt-deck-inventory.json')) : null)
-    || parsed?.artifacts?.deck_inventory
-    || parsed?.artifacts?.deckInventory
-    || null;
-const exportLedger = (missionDir ? readJson(path.join(missionDir, 'ppt-slide-export-ledger.json')) : null)
-    || parsed?.artifacts?.slide_export_ledger
-    || parsed?.artifacts?.slideExportLedger
-    || null;
-const callouts = missionDir ? readJson(path.join(missionDir, 'ppt-slide-callout-ledger.json')) : null;
-const slideIssues = missionDir ? readJson(path.join(missionDir, 'ppt-slide-issue-ledger.json')) : null;
-const deckIssues = missionDir ? readJson(path.join(missionDir, 'ppt-deck-issue-ledger.json')) : null;
-const proof = missionDir ? readJson(path.join(missionDir, 'completion-proof.json')) : null;
-const trust = missionDir ? readJson(path.join(missionDir, 'trust-report.json')) : null;
-const fakeNotReal = !JSON.stringify(callouts || {}).includes('"real_generated":true');
-const proofStatusOk = proof?.schema === 'sks.completion-proof.v1' && ['verified', 'verified_partial'].includes(String(proof?.status || ''));
-const trustStatusOk = trust?.schema === 'sks.trust-report.v1' && trust?.ok === true && !['blocked', 'failed', 'not_verified'].includes(String(trust?.status || ''));
-const ok = Boolean(parsed?.mission_id)
-    && inventory?.deck_present === true
-    && inventory?.slide_count >= 1
-    && exportLedger?.exported_slide_images_count >= 1
-    && callouts?.generated_slide_callout_images_count >= exportLedger.exported_slide_images_count
-    && Array.isArray(slideIssues?.issues)
-    && slideIssues.issues.length > 0
-    && deckIssues?.schema === 'sks.ppt-deck-issue-ledger.v1'
-    && proofStatusOk
-    && trustStatusOk
-    && fakeNotReal;
-const result = {
-    schema: 'sks.ppt-full-e2e-blackbox.v1',
-    ok,
-    process_status: run.status,
-    mission_id: parsed?.mission_id || null,
-    deck,
-    synthetic_deck: true,
-    manual_slide_images_used: false,
-    slide_count: inventory?.slide_count || 0,
-    exported_slide_images_count: exportLedger?.exported_slide_images_count || 0,
-    generated_slide_review_count: callouts?.generated_slide_callout_images_count || 0,
-    issue_extraction_count: slideIssues?.issues?.length || 0,
-    mock_fake_not_verified_real: fakeNotReal,
-    completion_proof_linked: proofStatusOk,
-    trust_report_linked: trustStatusOk,
-    wrongness_linked: true,
-    proof_status: proof?.status || null,
-    trust_ok: trust?.ok ?? null,
-    trust_status: trust?.status || null,
-    trust_blockers: trust?.blockers || [],
-    blockers: [
-        ...(!proofStatusOk ? [`completion_proof_status_${proof?.status || 'missing'}`] : []),
-        ...(!trustStatusOk ? [`trust_report_status_${trust?.status || 'missing'}`] : []),
-        ...(!fakeNotReal ? ['mock_or_fake_marked_real'] : [])
-    ],
-    artifacts: {
-        inventory,
-        exportLedger,
-        callouts,
-        slideIssues,
-        deckIssues,
-        proof_schema: proof?.schema || null,
-        proof_status: proof?.status || null,
-        trust_schema: trust?.schema || null,
-        trust_ok: trust?.ok ?? null,
-        trust_status: trust?.status || null
-    },
-    stdout_tail: run.stdout.slice(-2000),
-    stderr_tail: run.stderr.slice(-2000)
-};
-const out = path.join(repoRoot, '.sneakoscope', 'reports', 'ppt-full-e2e-blackbox.json');
-fs.mkdirSync(path.dirname(out), { recursive: true });
-fs.writeFileSync(out, `${JSON.stringify(result, null, 2)}\n`);
-console.log(JSON.stringify(result, null, 2));
-if (!ok)
-    process.exitCode = 1;
-function parseJson(text) { try {
-    return JSON.parse(text);
-}
-catch {
-    return null;
-} }
-function readJson(file) { try {
-    return JSON.parse(fs.readFileSync(file, 'utf8'));
-}
-catch {
-    return null;
-} }
-//# sourceMappingURL=ppt-full-e2e-blackbox-check.js.map

package/dist/scripts/ppt-image-voxel-relations-check.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { assertGate, emitGate, hasRelationType, runPptReview } from './sks-1-11-gate-lib.js';
-const result = runPptReview('review');
-for (const type of ['slide_callout_review_of', 'slide_issue_detected_in', 'deck_patch_attempt_for_issue', 'fixed_slide_after', 'slide_re_review_of_after', 'slide_issue_resolved_by_recheck']) {
-    assertGate(hasRelationType(result.mission_id, type), `ppt image voxel relation missing: ${type}`, { mission_id: result.mission_id });
-}
-emitGate('ppt:image-voxel-relations', { mission_id: result.mission_id });
-//# sourceMappingURL=ppt-image-voxel-relations-check.js.map

package/dist/scripts/ppt-imagegen-blackbox-check.js

@@ -1,46 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { osTempPngFixtureArg } from './lib/valid-png-fixture.js';
-const sourceImage = osTempPngFixtureArg('ppt-imagegen-blackbox-source.png');
-const run = spawnSync(process.execPath, ['./dist/bin/sks.js', 'ppt', 'review', '--manual-slide-images', sourceImage, '--json'], {
-    cwd: process.cwd(),
-    env: { ...process.env, SKS_TEST_FAKE_IMAGEGEN: '1', SKS_TEST_FAKE_EXTRACTOR: '1' },
-    encoding: 'utf8',
-    maxBuffer: 4 * 1024 * 1024
-});
-const parsed = parseJson(run.stdout);
-const missionDir = parsed?.mission_id ? path.join(process.cwd(), '.sneakoscope', 'missions', parsed.mission_id) : null;
-const callouts = missionDir ? readJson(path.join(missionDir, 'ppt-slide-callout-ledger.json')) : null;
-const slideIssues = missionDir ? readJson(path.join(missionDir, 'ppt-slide-issue-ledger.json')) : null;
-const deckIssues = missionDir ? readJson(path.join(missionDir, 'ppt-deck-issue-ledger.json')) : null;
-const proofEvidence = parsed?.proof_evidence || null;
-const ok = Boolean(parsed?.mission_id)
-    && callouts?.generated_slide_callout_images_count === 1
-    && callouts?.generated_review_images?.[0]?.mock === true
-    && Array.isArray(slideIssues?.issues)
-    && slideIssues.issues.length > 0
-    && deckIssues?.schema === 'sks.ppt-deck-issue-ledger.v1'
-    && proofEvidence?.schema === 'sks.ppt-review-proof-evidence.v1';
-console.log(JSON.stringify({ schema: 'sks.ppt-imagegen-blackbox-check.v1', ok, process_status: run.status, mission_id: parsed?.mission_id || null, gate_status: parsed?.status || null, source_image: sourceImage, generated_count: callouts?.generated_slide_callout_images_count || 0, issue_count: slideIssues?.issues?.length || 0, proof_status: proofEvidence?.status || null }, null, 2));
-if (!ok)
-    process.exitCode = 1;
-function parseJson(text) {
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return null;
-    }
-}
-function readJson(file) {
-    try {
-        return JSON.parse(fs.readFileSync(file, 'utf8'));
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=ppt-imagegen-blackbox-check.js.map

package/dist/scripts/ppt-imagegen-review-fixture-check.js

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { emitGate, runPptReview } from './sks-1-11-gate-lib.js';
-const result = runPptReview('review');
-emitGate('ppt:imagegen-review-fixture', { mission_id: result.mission_id, relations: result.proof_evidence.image_voxel_relation_count });
-//# sourceMappingURL=ppt-imagegen-review-fixture-check.js.map

package/dist/scripts/ppt-issue-extraction-fixture-check.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { assertGate, emitGate, runPptReview } from './sks-1-11-gate-lib.js';
-const result = runPptReview('extract-issues');
-assertGate(result.artifacts.slideIssues?.issues?.length > 0 && result.proof_evidence.slide_issue_extraction_status === 'valid', 'ppt issue extraction fixture invalid', result.artifacts.slideIssues);
-emitGate('ppt:issue-extraction-fixture', { mission_id: result.mission_id, issues: result.artifacts.slideIssues.issues.length });
-//# sourceMappingURL=ppt-issue-extraction-fixture-check.js.map

package/dist/scripts/ppt-no-mock-as-real-check.js

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { assertGate, emitGate, readMissionJson, runPptReview } from './sks-1-11-gate-lib.js';
-const result = runPptReview('review');
-const proof = readMissionJson(result.mission_id, 'completion-proof.json');
-assertGate(proof.status !== 'verified' && result.proof_evidence.status === 'verified_partial', 'ppt mock fixture was allowed to claim fully real evidence', { proof_status: proof.status, evidence_status: result.proof_evidence.status });
-emitGate('ppt:no-mock-as-real', { mission_id: result.mission_id, proof_status: proof.status });
-//# sourceMappingURL=ppt-no-mock-as-real-check.js.map

package/dist/scripts/ppt-no-text-fallback-check.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { assertGate, emitGate, runPptReview } from './sks-1-11-gate-lib.js';
-const result = runPptReview('callouts');
-assertGate(result.artifacts.callouts?.no_text_fallback === true, 'ppt text-only fallback was not blocked by fixture policy', result.artifacts.callouts);
-emitGate('ppt:no-text-fallback', { mission_id: result.mission_id });
-//# sourceMappingURL=ppt-no-text-fallback-check.js.map

package/dist/scripts/ppt-proof-trust-fixture-check.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { assertGate, emitGate, readMissionJson, runPptReview, runSksJson } from './sks-1-11-gate-lib.js';
-const result = runPptReview('proof');
-const proof = readMissionJson(result.mission_id, 'completion-proof.json');
-const trust = runSksJson(['trust', 'report', result.mission_id, '--json']);
-assertGate(Boolean(proof.evidence?.ppt_review), 'ppt review evidence missing from completion proof', proof.evidence);
-assertGate(JSON.stringify(trust).includes('ppt_review'), 'ppt review evidence missing from trust report', trust);
-emitGate('ppt:proof-trust-fixture', { mission_id: result.mission_id, proof_status: proof.status });
-//# sourceMappingURL=ppt-proof-trust-fixture-check.js.map

package/dist/scripts/ppt-real-export-adapter-check.js

@@ -1,13 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
-requireContains('ppt:real-export-adapter', 'src/core/ppt-review/slide-exporter.ts', [
-    'soffice',
-    'libreoffice',
-    'powerpoint_osascript',
-    'partial_export',
-    'slide_export_unavailable',
-    'manual_slide_image_attach'
-]);
-emitGate('ppt:real-export-adapter', { adapters: ['LibreOffice/soffice', 'PowerPoint/osascript', 'manual_attach'] });
-//# sourceMappingURL=ppt-real-export-adapter-check.js.map

package/dist/scripts/ppt-real-imagegen-smoke-check.js

@@ -1,42 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { spawnSync } from 'node:child_process';
-import { osTempPngFixtureArg } from './lib/valid-png-fixture.js';
-const enabled = process.env.SKS_TEST_REAL_IMAGEGEN === '1' || process.env.SKS_REAL_IMAGEGEN === '1';
-const hasKey = Boolean(process.env.OPENAI_API_KEY || process.env.SKS_CODEX_APP_IMAGEGEN === '1');
-if (!enabled || !hasKey) {
-    const result = {
-        schema: 'sks.ppt-real-imagegen-smoke.v1',
-        ok: true,
-        status: 'integration_optional',
-        reason: !enabled ? 'SKS_TEST_REAL_IMAGEGEN=1 not set' : 'OPENAI_API_KEY or Codex App imagegen capability not configured',
-        fake_adapter: false,
-        real_generated: false
-    };
-    console.log(JSON.stringify(result, null, 2));
-    process.exit(0);
-}
-const sourceImage = osTempPngFixtureArg('ppt-real-imagegen-smoke-source.png');
-const run = spawnSync(process.execPath, ['./dist/bin/sks.js', 'ppt', 'review', '--manual-slide-images', sourceImage, '--json'], {
-    cwd: process.cwd(),
-    env: process.env,
-    encoding: 'utf8',
-    timeout: Number(process.env.SKS_PPT_REAL_IMAGEGEN_SMOKE_TIMEOUT_MS || 180000),
-    maxBuffer: 8 * 1024 * 1024
-});
-const result = {
-    schema: 'sks.ppt-real-imagegen-smoke.v1',
-    ok: run.status === 0,
-    status: run.status === 0 ? 'passed' : 'blocked',
-    fake_adapter: false,
-    source_image: sourceImage,
-    real_generated: run.status === 0,
-    process_error: run.error?.message || null,
-    process_signal: run.signal || null,
-    stdout_tail: run.stdout.slice(-4000),
-    stderr_tail: run.stderr.slice(-4000)
-};
-console.log(JSON.stringify(result, null, 2));
-if (!result.ok)
-    process.exitCode = 1;
-//# sourceMappingURL=ppt-real-imagegen-smoke-check.js.map

package/dist/scripts/ppt-real-imagegen-wiring-check.js

@@ -1,16 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
-requireContains('ppt:real-imagegen-wiring', 'src/core/ppt-review/slide-imagegen-review.ts', [
-    'generateGptImage2CalloutReview',
-    'PPT_SLIDE_IMAGEGEN_REQUEST_ARTIFACT',
-    'PPT_SLIDE_IMAGEGEN_RESPONSE_ARTIFACT',
-    'extraction_pending_count',
-    'callout_extraction_status'
-]);
-requireContains('ppt:real-imagegen-wiring', 'src/core/ppt-review/index.ts', [
-    'buildSlideImagegenRequestArtifact',
-    'buildSlideImagegenResponseArtifact'
-]);
-emitGate('ppt:real-imagegen-wiring', { adapter: 'shared UX generateGptImage2CalloutReview' });
-//# sourceMappingURL=ppt-real-imagegen-wiring-check.js.map

package/dist/scripts/ppt-reexport-rereview-check.js

@@ -1,19 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { emitGate, requireContains } from './sks-1-12-real-execution-check-lib.js';
-requireContains('ppt:reexport-rereview', 'src/core/commands/ppt-command.ts', [
-    'attach-fixed-deck',
-    'fixedDeckPath',
-    'recheck'
-]);
-requireContains('ppt:reexport-rereview', 'src/core/ppt-review/index.ts', [
-    'changed_slides_rechecked',
-    'ppt_slide_recheck_missing',
-    'fixedDeckPath'
-]);
-requireContains('ppt:reexport-rereview', 'src/core/ppt-review/ppt-patch-handoff.ts', [
-    'deck_binary_edit_unavailable_manual_handoff_required',
-    're_export_required'
-]);
-emitGate('ppt:reexport-rereview', { recheck: 'fixed-deck-or-slide-evidence-required' });
-//# sourceMappingURL=ppt-reexport-rereview-check.js.map

package/dist/scripts/ppt-slide-export-fixture-check.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import { assertGate, emitGate, runPptReview } from './sks-1-11-gate-lib.js';
-const result = runPptReview('slide-export');
-assertGate(result.proof_evidence.slide_export_status === 'exported' && result.proof_evidence.exported_slide_images_count > 0, 'ppt slide export fixture missing exported images', result.proof_evidence);
-emitGate('ppt:slide-export-fixture', { mission_id: result.mission_id });
-//# sourceMappingURL=ppt-slide-export-fixture-check.js.map