sneakoscope 4.2.0 → 4.2.1

package/dist/scripts/qa-loop-surface-router-check.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+// @ts-nocheck
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { assertGate, emitGate } from './sks-1-18-gate-lib.js';
+import { buildQaContractV2 } from '../core/qa-loop/qa-contract-v2.js';
+import { evaluateQaGateV2 } from '../core/qa-loop/qa-gate-v2.js';
+import { initializeQaRuntimeArtifacts } from '../core/qa-loop/qa-runtime-artifacts.js';
+import { selectQaSurface } from '../core/qa-loop/qa-surface-router.js';
+const cases = [
+    ['localhost no auth chooses Browser', selectQaSurface({ targetUrl: 'http://localhost:3000/settings', prompt: 'test local web settings' }).selected_surface, 'codex_in_app_browser'],
+    ['public no auth chooses Browser', selectQaSurface({ targetUrl: 'https://example.com', prompt: 'public marketing page QA' }).selected_surface, 'codex_in_app_browser'],
+    ['signed-in browser state chooses Chrome', selectQaSurface({ targetUrl: 'https://example.com/app', prompt: 'verify logged-in cookie profile flow' }).selected_surface, 'codex_chrome_extension'],
+    ['extension-dependent site chooses Chrome', selectQaSurface({ targetUrl: 'https://example.com', prompt: 'browser extension dependent QA' }).selected_surface, 'codex_chrome_extension'],
+    ['native macOS GUI chooses Computer Use', selectQaSurface({ prompt: 'native macOS Settings GUI bug' }).selected_surface, 'codex_computer_use'],
+    ['native Windows GUI chooses Computer Use', selectQaSurface({ prompt: 'Windows desktop app dialog bug' }).selected_surface, 'codex_computer_use'],
+    ['structured data without UI chooses MCP', selectQaSurface({ prompt: 'Gmail data sync check', uiRequired: false, targetKind: 'structured_data' }).selected_surface, 'structured_mcp']
+];
+for (const [label, actual, expected] of cases) {
+    assertGate(actual === expected, `${label}: expected ${expected}, got ${actual}`, { actual, expected });
+}
+const contract = buildQaContractV2({
+    prompt: 'QA local settings form at http://localhost:3000',
+    answers: {
+        QA_SCOPE: 'ui_e2e_only',
+        TARGET_BASE_URL: 'http://localhost:3000',
+        LOGIN_REQUIRED: 'no',
+        MAX_QA_CYCLES: ''
+    }
+}, { missionId: 'M-router-check' });
+assertGate(contract.runtime.max_cycles === 5, 'QA contract v2 default max cycles must be 5', contract.runtime);
+assertGate(contract.mutation.source_code_patch_policy === 'enabled', 'safe local source fixes must default on unless report-only', contract.mutation);
+const tmp = await fs.mkdtemp(path.join(os.tmpdir(), 'sks-qa-router-'));
+await initializeQaRuntimeArtifacts(tmp, contract, { missionId: 'M-router-check' });
+let gate = await evaluateQaGateV2(tmp);
+assertGate(gate.passed === false, 'UI-required QA cannot pass with zero real actions', gate);
+assertGate(gate.blockers.includes('ui_required_but_real_action_count_zero'), 'zero-action blocker missing', gate);
+await fs.appendFile(path.join(tmp, 'qa-loop', 'action-ledger.jsonl'), `${JSON.stringify({ schema: 'sks.qa-loop-action.v2', status: 'completed', real: true, journey_fingerprint: 'J', kind: 'click' })}\n`);
+await fs.appendFile(path.join(tmp, 'qa-loop', 'observation-ledger.jsonl'), `${JSON.stringify({ schema: 'sks.qa-loop-observation.v2', status: 'observed', real: true, journey_fingerprint: 'J', kind: 'visual_delta' })}\n`);
+gate = await evaluateQaGateV2(tmp);
+assertGate(gate.real_action_count === 1 && gate.observation_count === 1, 'real action and observation ledgers must be counted', gate);
+emitGate('qa-loop:surface-router', {
+    matrix_cases: cases.length,
+    default_max_cycles: contract.runtime.max_cycles,
+    zero_action_blocked: true,
+    selected_surface: contract.target.kind
+});
+//# sourceMappingURL=qa-loop-surface-router-check.js.map

package/dist/scripts/release-check-dynamic-execute.js

@@ -60,7 +60,7 @@ for (const gate of plan.selected) {
         continue;
     }
     const command = `npm run ${gate.id}`;
-    if (FORBIDDEN_RECURSIVE_GATES.has(gate.id) || /npm\s+run\s+(release:check|release:real-check|release:publish|publish:npm|publish:dry|prepublishOnly)\b/.test(command)) {
+    if (FORBIDDEN_RECURSIVE_GATES.has(gate.id) || /npm\s+run\s+(release:check|release:real-check|release:publish|publish:ignore-scripts|publish:npm|publish:dry|prepublishOnly)\b/.test(command)) {
         failures.push({ id: gate.id, exit_code: null, stdout_tail: '', stderr_tail: 'forbidden_recursive_gate_spawn' });
         continue;
     }

package/dist/scripts/runtime-ts-rust-boundary-check.js

@@ -13,7 +13,7 @@ import { root, assertGate, emitGate, importDist, readText, readJson } from './sk
 assertGate(!/cargo|rustc/.test(readText('src/scripts/build-dist.ts')), 'build-dist must not invoke cargo/rustc');
 assertGate(!/cargo|rustc/.test(readText('src/scripts/clean-dist.ts')), 'clean-dist must not invoke cargo/rustc');
 const pkg = readJson('package.json');
-for (const s of ['prepack', 'prepublishOnly', 'publish:dry', 'publish:npm']) {
+for (const s of ['prepack', 'prepublishOnly', 'publish:dry', 'publish:ignore-scripts', 'publish:npm']) {
     assertGate(!String(pkg.scripts?.[s] || '').includes('cargo'), `publish_script_compiles_rust:${s}`);
 }
 // 2) The published binary is JS; no prebuilt native artifact is shipped or required.

package/dist/scripts/triwiki-affected-graph-check.js

@@ -1,10 +1,10 @@
 // @ts-nocheck
 import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
 const mod = await importDist('core/triwiki/triwiki-affected-graph.js');
-const graph = mod.computeTriWikiAffectedGraph({ root, changedFiles: ['src/core/triwiki/triwiki-proof-bank.ts'], tier: 'affected' });
+const graph = mod.computeTriWikiAffectedGraph({ root, changedFiles: ['src/core/triwiki/triwiki-proof-bank.ts'], tier: 'affected', includeProofLookup: false });
 assertGate(graph.schema === 'sks.triwiki-affected-graph.v1', 'affected graph schema mismatch', graph);
 assertGate(graph.affected_modules.includes('triwiki') && graph.gate_packs.includes('triwiki') && graph.release_equivalent_within_scope === true, 'triwiki file must select triwiki release-equivalent pack', graph);
-const full = mod.computeTriWikiAffectedGraph({ root, full: true, tier: 'release' });
+const full = mod.computeTriWikiAffectedGraph({ root, full: true, tier: 'release', includeProofLookup: false });
 assertGate(full.gates.length > graph.gates.length && full.gate_packs.length >= graph.gate_packs.length && full.conservative_reason === 'full_release_requested', 'full release graph must select the full gate surface', full);
 emitGate('triwiki:affected-graph', { gates: graph.gates.length, packs: graph.gate_packs, full_gates: full.gates.length });
 //# sourceMappingURL=triwiki-affected-graph-check.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "4.2.0",
+  "version": "4.2.1",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -323,6 +323,7 @@
     "codex-control:side-effect-scope": "node ./dist/scripts/codex-control-side-effect-scope-check.js",
     "codex-control:all-pipelines": "node ./dist/scripts/codex-control-all-pipelines-check.js",
     "codex-control:empty-result-retry": "node ./dist/scripts/codex-control-empty-result-retry-check.js",
+    "codex-control:model-capacity-fallback": "node ./dist/scripts/codex-control-model-capacity-fallback-check.js",
     "codex-control:stream-idle-watchdog": "node ./dist/scripts/codex-control-stream-idle-watchdog-check.js",
     "codex-control:tool-call-sequence-repair": "node ./dist/scripts/codex-control-tool-call-sequence-repair-check.js",
     "codex-control:keepalive-no-cot-leak": "node ./dist/scripts/codex-control-keepalive-no-cot-leak-check.js",
@@ -359,9 +360,10 @@
     "coverage": "node --experimental-test-coverage --test \"test/**/*.test.mjs\"",
     "release:check": "npm run release:check:affected",
     "release:real-check": "node ./dist/scripts/release-real-check.js",
-    "release:publish": "npm run publish:npm",
+    "release:publish": "npm run publish:ignore-scripts",
     "publish:dry": "npm run release:metadata && npm run release:version-truth && npm run publish:packlist-performance && npm run release:check:full && node ./dist/scripts/check-publish-tag.js && node ./dist/scripts/release-check-stamp.js verify && npm run release:provenance -- --publish && npm run release:dist-freshness && node ./dist/scripts/release-registry-check.js --require-unpublished && npm --cache /tmp/sks-npm-cache publish --dry-run --ignore-scripts --registry https://registry.npmjs.org/ --access public",
-    "publish:npm": "npm --cache /tmp/sks-npm-cache publish --registry https://registry.npmjs.org/ --access public",
+    "publish:ignore-scripts": "npm run prepublishOnly && npm --cache /tmp/sks-npm-cache publish --ignore-scripts --registry https://registry.npmjs.org/ --access public",
+    "publish:npm": "npm run publish:ignore-scripts",
     "publish:fast": "node -e \"console.error('publish:fast is quarantined; use publish:dry and publish:npm with the release gates.'); process.exit(1)\"",
     "prepack": "npm run build",
     "prepublishOnly": "npm run release:metadata && npm run release:version-truth && npm run release:dist-freshness && npm run publish:packlist-performance && node ./dist/scripts/prepublish-release-check-or-fast.js && node ./dist/scripts/check-publish-tag.js && node ./dist/scripts/release-check-stamp.js verify && npm run release:provenance -- --publish && node ./dist/scripts/release-registry-check.js --require-unpublished --require-publish-auth",
@@ -619,6 +621,7 @@
     "qa-loop:effort-escalation": "node ./dist/scripts/qa-loop-effort-escalation-check.js",
     "codex:account-usage": "node ./dist/scripts/codex-account-usage-check.js",
     "qa-loop:budget-policy": "node ./dist/scripts/qa-loop-budget-policy-check.js",
+    "qa-loop:surface-router": "node ./dist/scripts/qa-loop-surface-router-check.js",
     "naruto:parallel-gate-consistency": "node ./dist/scripts/naruto-parallel-gate-consistency-check.js",
     "codex:0138-doctor": "node ./dist/scripts/codex-0138-doctor-check.js",
     "doctor:codex-0138-fix": "node ./dist/scripts/doctor-codex-0138-fix-check.js",