sneakoscope 5.6.1 → 5.7.0

package/dist/scripts/sks-menubar-install-check.js

@@ -27,6 +27,46 @@ const secondResult = await installSksMenuBar({
     sksEntry: localEntry,
     env: launchGuardEnv
 });
+if (secondResult.action_script_path)
+    await fs.rm(secondResult.action_script_path, { force: true });
+const restoredScriptResult = await installSksMenuBar({
+    apply: true,
+    launch: true,
+    home: temp,
+    root: fakeRoot,
+    sksEntry: localEntry,
+    env: launchGuardEnv
+});
+if (restoredScriptResult.action_script_path) {
+    await fs.writeFile(restoredScriptResult.action_script_path, '#!/bin/zsh\necho stale-sks-menubar-action\n', 'utf8');
+}
+const staleScriptMissingEntryResult = await installSksMenuBar({
+    apply: true,
+    launch: true,
+    home: temp,
+    root: fakeRoot,
+    sksEntry: path.join(fakeRoot, 'dist', 'bin', 'missing-sks.js'),
+    env: launchGuardEnv
+});
+const recoveredStaleScriptResult = await installSksMenuBar({
+    apply: true,
+    launch: true,
+    home: temp,
+    root: fakeRoot,
+    sksEntry: localEntry,
+    env: launchGuardEnv
+});
+if (recoveredStaleScriptResult.action_script_path) {
+    await fs.chmod(recoveredStaleScriptResult.action_script_path, 0o644);
+}
+const restoredExecutableBitResult = await installSksMenuBar({
+    apply: true,
+    launch: true,
+    home: temp,
+    root: fakeRoot,
+    sksEntry: localEntry,
+    env: launchGuardEnv
+});
 const envHomeResult = await installSksMenuBar({
     apply: true,
     launch: true,
@@ -55,6 +95,9 @@ const hasVisibleStatusSource = generatedSource.includes('NSStatusItem.variableLe
     && generatedSource.includes('SKS ⋯')
     && generatedSource.includes('Timer.scheduledTimer(withTimeInterval: 30.0');
 const hasBackgroundReadonlyActions = generatedSource.includes('runSksBackground(["codex-lb", "fast-check"]')
+    && generatedSource.includes('runSksBackground(["fast-mode", "on", "--json"]')
+    && generatedSource.includes('runSksBackground(["fast-mode", "off", "--json"]')
+    && generatedSource.includes('runSksSilent(["fast-mode", "status", "--json"]')
     && generatedSource.includes('runSksBackground(["update", "check"]')
     && generatedSource.includes('display notification')
     && !generatedSource.includes('runSksInTerminal')
@@ -89,6 +132,21 @@ const hasBuildStamp = buildStampExists
     && result.build_stamp?.codesign_identifier === 'com.sneakoscope.sks-menubar';
 const isIdempotent = secondResult.actions.includes('menubar_up_to_date')
     && secondResult.build_stamp?.action_script_sha256 === result.build_stamp?.action_script_sha256;
+const restoresMissingActionScript = restoredScriptResult.actions.includes(`wrote ${secondResult.action_script_path}`)
+    && actionScriptExists
+    && restoredScriptResult.build_stamp?.action_script_sha256 === result.build_stamp?.action_script_sha256;
+const blocksStaleActionScriptReuse = staleScriptMissingEntryResult.ok === false
+    && staleScriptMissingEntryResult.blockers.includes('sks_entry_unresolved')
+    && staleScriptMissingEntryResult.warnings.includes('sks_entry_unresolved_stale_action_script_not_reused')
+    && staleScriptMissingEntryResult.target_check?.used_previous_script === false;
+const recoversStaleActionScriptWhenEntryExists = recoveredStaleScriptResult.ok === true
+    && recoveredStaleScriptResult.actions.includes(`wrote ${restoredScriptResult.action_script_path}`)
+    && recoveredStaleScriptResult.build_stamp?.action_script_sha256 === result.build_stamp?.action_script_sha256;
+const restoresExecutableBit = restoredExecutableBitResult.ok === true
+    && restoredExecutableBitResult.actions.includes('menubar_up_to_date')
+    && restoredExecutableBitResult.actions.includes('restored action script executable bit')
+    && actionScriptExists
+    && await isExecutable(result.action_script_path);
 const hasCommandRegistry = commandRegistry.includes('menubar:')
     && commandRegistry.includes('menubarCommand')
     && commandRegistry.includes('dist/core/commands/menubar-command.js');
@@ -102,6 +160,8 @@ const expectedMenuItems = [
     'Use ChatGPT OAuth',
     'Set codex-lb Domain and Key',
     'Set OpenRouter Key and GLM Profiles',
+    'Fast Mode On',
+    'Fast Mode Off',
     'Fast Check',
     'SKS Version Check',
     'Update SKS Now',
@@ -147,6 +207,10 @@ const darwinOk = cltMissing
         && hasBuildStamp
         && swiftParse.ok === true
         && isIdempotent
+        && restoresMissingActionScript
+        && blocksStaleActionScriptReuse
+        && recoversStaleActionScriptWhenEntryExists
+        && restoresExecutableBit
         && hasCommandRegistry
         && noLaunchctlSecretSetenv
         && hasLaunchctlUnsetenv
@@ -164,6 +228,10 @@ const report = {
     env_home_temp: envHomeTemp,
     result,
     second_result: secondResult,
+    restored_script_result: restoredScriptResult,
+    stale_script_missing_entry_result: staleScriptMissingEntryResult,
+    recovered_stale_script_result: recoveredStaleScriptResult,
+    restored_executable_bit_result: restoredExecutableBitResult,
     env_home_result: envHomeResult,
     executable_exists: executableExists,
     launch_agent_exists: launchAgentExists,
@@ -185,6 +253,10 @@ const report = {
     has_build_stamp: hasBuildStamp,
     swift_parse: swiftParse,
     is_idempotent: isIdempotent,
+    restores_missing_action_script: restoresMissingActionScript,
+    blocks_stale_action_script_reuse: blocksStaleActionScriptReuse,
+    recovers_stale_action_script_when_entry_exists: recoversStaleActionScriptWhenEntryExists,
+    restores_executable_bit: restoresExecutableBit,
     has_command_registry: hasCommandRegistry,
     no_launchctl_secret_setenv: noLaunchctlSecretSetenv,
     has_launchctl_unsetenv: hasLaunchctlUnsetenv,
@@ -209,6 +281,17 @@ async function exists(file) {
         return false;
     }
 }
+async function isExecutable(file) {
+    if (!file)
+        return false;
+    try {
+        await fs.access(file, fs.constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 async function swiftParseSmoke(sourcePath) {
     if (process.platform !== 'darwin')
         return { ok: true, status: 'skipped', reason: 'not_macos' };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "5.6.1",
+  "version": "5.7.0",
   "description": "Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -61,19 +61,23 @@
   },
   "scripts": {
     "build": "npm run build:clean",
+    "prepack": "npm run build",
     "build:clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('.sneakoscope/cache/tsbuildinfo',{recursive:true,force:true})\" && tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
     "build:incremental": "tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",
     "test": "node --test --test-concurrency=1 dist/core/__tests__/*.test.js dist/core/proof/__tests__/*.test.js dist/core/stop-gate/__tests__/*.test.js dist/core/commands/__tests__/*.test.js dist/core/dfix/__tests__/*.test.js dist/core/ppt/__tests__/*.test.js dist/core/mad-sks/__tests__/*.test.js dist/core/codex-app/__tests__/*.test.js dist/core/doctor/__tests__/*.test.js dist/cli/__tests__/*.test.js dist/core/triwiki/__tests__/*.test.js dist/core/naruto/__tests__/*.test.js dist/core/agent-bridge/__tests__/*.test.js",
     "selftest:real": "node ./dist/bin/sks.js selftest --real --json",
-    "check": "npm run release:check:affected",
+    "check": "npm run release:check:confidence",
     "dev:sks": "npm run build:incremental --silent && node ./dist/bin/sks.js",
-    "prepublishOnly": "npm run release:check:affected",
+    "prepublishOnly": "node ./dist/scripts/prepublish-release-check-or-fast.js && node ./dist/scripts/release-check-stamp.js verify && node ./dist/scripts/package-published-contract-check.js && node ./dist/scripts/release-registry-check.js --require-unpublished --require-publish-auth",
     "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",
     "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",
     "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",
     "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",
-    "release:check": "npm run release:check:affected --silent",
+    "release:check": "npm run release:check:affected",
     "release:metadata": "node ./dist/scripts/release-metadata-check.js",
+    "release:version-truth": "node ./dist/scripts/release-version-truth-check.js",
+    "release:dist-freshness": "node ./dist/scripts/release-dist-freshness-check.js",
+    "release:provenance": "node ./dist/scripts/release-provenance-check.js",
     "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",
     "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",
     "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",
@@ -111,6 +115,7 @@
     "zellij:layout-valid": "node ./dist/scripts/zellij-layout-valid-check.js",
     "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",
     "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",
+    "legacy:upgrade-zero-break": "node ./dist/scripts/legacy-upgrade-matrix-check.js",
     "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",
     "changelog:check": "node ./dist/scripts/changelog-check.js",
     "cli-entrypoint:check": "node ./dist/scripts/check-cli-entrypoint.js",
@@ -133,8 +138,12 @@
     "release:check:fast": "npm run build:incremental --silent && node ./dist/scripts/release-gate-dag-runner.js --preset fast --changed-since auto --sla 5m && node ./dist/scripts/release-check-stamp.js write",
     "release:check:confidence": "npm run build:incremental --silent && node ./dist/scripts/release-gate-dag-runner.js --preset confidence --changed-since auto --sla 5m && node ./dist/scripts/release-check-stamp.js write",
     "release:check:full": "npm run build:clean --silent && node ./dist/scripts/release-gate-dag-runner.js --preset release --full && node ./dist/scripts/release-gate-dag-runner.js --preset bench --full && node ./dist/scripts/release-check-stamp.js write",
-    "publish:prep-ignore-scripts": "npm run prepublishOnly",
+    "publish:packlist-performance": "node ./dist/scripts/packlist-performance-check.js",
+    "publish:dry": "npm run publish:prep-ignore-scripts && npm publish --dry-run --ignore-scripts --json",
+    "publish:prep-ignore-scripts": "npm run build:incremental --silent && npm run release:version-truth --silent && npm run publish:packlist-performance --silent && node ./dist/scripts/package-published-contract-check.js && node ./dist/scripts/release-registry-check.js --require-unpublished --require-publish-auth && npm run publish-tag:check --silent",
     "publish:ignore-scripts": "npm run publish:prep-ignore-scripts && npm publish --ignore-scripts",
+    "publish:npm": "npm run publish:ignore-scripts",
+    "release:publish": "npm run publish:ignore-scripts",
     "gates:run": "node ./dist/scripts/release-gate-dag-runner.js",
     "policy:gate-audit": "node ./dist/scripts/gate-policy-audit-check.js"
   },