sneakoscope 6.0.2 → 6.1.0

package/dist/scripts/command-performance-scorecard-check.js

@@ -1,204 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { performance } from 'node:perf_hooks';
-import { fileURLToPath } from 'node:url';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
-import { runProcess } from '../core/fsx.js';
-export const CRITICAL_COMMANDS = new Set([
-    'doctor',
-    'setup',
-    'bootstrap',
-    'update',
-    'run',
-    'naruto',
-    'super-search',
-    'seo-geo-optimizer',
-    'db',
-    'mad-sks',
-    'qa-loop',
-    'review',
-    'release',
-    'rollback',
-    'commit-and-push'
-]);
-export const COMMAND_SMOKE_MAX_AGE_MS = 60 * 60 * 1000;
-export const smokeCommands = [
-    { name: 'version', argv: ['--version'], budget_p95_ms: 120 },
-    { name: 'commands', argv: ['commands', '--json'], budget_p95_ms: 200 },
-    { name: 'root', argv: ['root', '--json'], budget_p95_ms: 150 },
-    { name: 'dollar-commands', argv: ['dollar-commands', '--json'], budget_p95_ms: 220 },
-    { name: 'super-search', argv: ['super-search', 'doctor', '--json'], budget_p95_ms: 180 },
-    { name: 'doctor', argv: ['doctor', '--json'], budget_p95_ms: 1200 },
-    { name: 'setup', budget_p95_ms: 0, kind: 'fixture', evidence: 'setup_dry_run_contract' },
-    { name: 'bootstrap', budget_p95_ms: 0, kind: 'fixture', evidence: 'bootstrap_fixture_contract' },
-    { name: 'update', budget_p95_ms: 0, kind: 'fixture', evidence: 'update_now_dry_run_contract' },
-    { name: 'run', budget_p95_ms: 0, kind: 'fixture', evidence: 'run_route_classification_fixture' },
-    { name: 'naruto', budget_p95_ms: 0, kind: 'fixture', evidence: 'naruto_route_fixture' },
-    { name: 'seo-geo-optimizer', budget_p95_ms: 0, kind: 'fixture', evidence: 'seo_geo_optimizer_fixture' },
-    { name: 'db', budget_p95_ms: 0, kind: 'blocked_negative', evidence: 'db_destructive_sql_block_contract' },
-    { name: 'mad-sks', budget_p95_ms: 0, kind: 'blocked_negative', evidence: 'mad_sks_restore_and_readback_contract' },
-    { name: 'qa-loop', budget_p95_ms: 0, kind: 'fixture', evidence: 'qa_loop_route_fixture' },
-    { name: 'review', budget_p95_ms: 0, kind: 'fixture', evidence: 'review_diff_fixture' },
-    { name: 'release', budget_p95_ms: 0, kind: 'fixture', evidence: 'release_gate_fixture' },
-    { name: 'rollback', budget_p95_ms: 0, kind: 'blocked_negative', evidence: 'rollback_apply_requires_id_contract' },
-    { name: 'commit-and-push', budget_p95_ms: 0, kind: 'blocked_negative', evidence: 'commit_and_push_remote_contract' }
-];
-if (isMainModule())
-    await main();
-export async function main() {
-    const { COMMAND_MANIFEST_LITE } = await importDist('cli/command-manifest-lite.js');
-    const timings = [];
-    for (const smoke of smokeCommands)
-        timings.push(await measure(smoke));
-    const timingByName = new Map(timings.map((row) => [row.name, row]));
-    const entries = COMMAND_MANIFEST_LITE.filter((entry) => entry.hidden !== true);
-    const rows = entries.map((entry) => scoreEntry(entry, timingByName.get(entry.name)));
-    const average = rows.reduce((sum, row) => sum + row.score, 0) / Math.max(1, rows.length);
-    const blockers = [
-        ...rows.filter((row) => row.critical && row.score === 0).map((row) => `${row.name}:critical_smoke_missing_or_failed`),
-        ...(average >= 94 ? [] : [`average_below_94:${average.toFixed(2)}`])
-    ];
-    const report = {
-        schema: 'sks.command-performance-scorecard.v1',
-        ok: blockers.length === 0,
-        generated_at: new Date().toISOString(),
-        average_score: Number(average.toFixed(2)),
-        command_count: rows.length,
-        timings,
-        rows,
-        blockers
-    };
-    const out = path.join(root, '.sneakoscope', 'reports', 'command-performance-scorecard.json');
-    fs.mkdirSync(path.dirname(out), { recursive: true });
-    fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-    assertGate(report.ok, 'command performance scorecard failed', report);
-    emitGate('command:performance-scorecard', { average_score: report.average_score, command_count: rows.length, report: '.sneakoscope/reports/command-performance-scorecard.json' });
-}
-export function scoreEntry(entry, timing, options = {}) {
-    const now = options.now ? new Date(options.now) : new Date();
-    const critical = CRITICAL_COMMANDS.has(entry.name);
-    const smokeStatus = classifySmoke(timing, now);
-    if (critical && smokeStatus !== 'pass') {
-        return { name: entry.name, maturity: entry.maturity, critical, score: 0, p95_ms: timing?.p95_ms ?? null, smoke: Boolean(timing), smoke_status: smokeStatus, evidence_tier: criticalCommandEvidenceTier(timing), summary: entry.summary };
-    }
-    const hasRunnableSurface = Boolean(timing || entry.summary || entry.readonly || entry.diagnostic || entry.skipMigrationGate || entry.mutatesRouteState);
-    const p95Ok = timing ? (timing.kind === 'blocked_negative' ? timing.blocked === true : timing.ok === true) : true;
-    const jsonContract = timing ? (timing.kind === 'blocked_negative' ? true : timing.json_contract !== false) : true;
-    const failureSummary = Boolean(entry.summary);
-    const installedReady = Array.isArray(entry.packageRequiredFiles)
-        ? entry.packageRequiredFiles.every((file) => fs.existsSync(path.join(root, file)))
-        : true;
-    const lifecyclePenalty = (entry.hidden === true || entry.deprecated === true) && !entry.deprecationReason && !entry.hiddenReason ? 25 : 0;
-    const score = (hasRunnableSurface ? 25 : 0) +
-        (p95Ok ? 25 : 0) +
-        (jsonContract ? 15 : 0) +
-        (failureSummary ? 15 : 0) +
-        (installedReady ? 20 : 0) -
-        lifecyclePenalty;
-    const cappedScore = critical ? Math.min(score, criticalCommandEvidenceMaxScore(timing)) : score;
-    return { name: entry.name, maturity: entry.maturity, critical, score: Math.max(0, cappedScore), p95_ms: timing?.p95_ms ?? null, smoke: Boolean(timing), smoke_status: smokeStatus, evidence_tier: criticalCommandEvidenceTier(timing), summary: entry.summary };
-}
-export function criticalCommandEvidenceTier(timing) {
-    if (!timing)
-        return 'metadata';
-    if (timing.kind === 'fixture')
-        return 'fixture';
-    if (timing.kind === 'blocked_negative')
-        return 'blocked_negative';
-    if (timing.kind === 'dry_run')
-        return 'dry_run';
-    return 'read_only';
-}
-export function criticalCommandEvidenceMaxScore(timing) {
-    const tier = criticalCommandEvidenceTier(timing);
-    if (tier === 'metadata')
-        return 0;
-    if (tier === 'fixture')
-        return 70;
-    if (tier === 'blocked_negative')
-        return 90;
-    return 100;
-}
-export function classifySmoke(timing, now = new Date()) {
-    if (!timing)
-        return 'missing';
-    if (isSmokeStale(timing, now))
-        return 'stale';
-    if (timing.kind === 'blocked_negative')
-        return timing.blocked === true && timing.ok !== true ? 'pass' : 'failed';
-    return timing.ok === true ? 'pass' : 'failed';
-}
-export function isSmokeStale(timing, now = new Date()) {
-    if (!timing.generated_at)
-        return false;
-    const generated = new Date(timing.generated_at).getTime();
-    return !Number.isFinite(generated) || now.getTime() - generated > COMMAND_SMOKE_MAX_AGE_MS;
-}
-export async function measure(smoke) {
-    if (smoke.kind === 'fixture') {
-        return {
-            name: smoke.name,
-            kind: 'fixture',
-            evidence: smoke.evidence,
-            generated_at: new Date().toISOString(),
-            p95_ms: 0,
-            budget_p95_ms: smoke.budget_p95_ms,
-            ok: true,
-            blocked: false,
-            exit_codes: [],
-            json_contract: true
-        };
-    }
-    if (smoke.kind === 'blocked_negative' && !smoke.argv) {
-        return {
-            name: smoke.name,
-            kind: 'blocked_negative',
-            evidence: smoke.evidence,
-            generated_at: new Date().toISOString(),
-            p95_ms: 0,
-            budget_p95_ms: smoke.budget_p95_ms,
-            ok: false,
-            blocked: true,
-            exit_codes: [],
-            json_contract: false
-        };
-    }
-    const durations = [];
-    const exitCodes = [];
-    let jsonContract = false;
-    let blocked = false;
-    for (let i = 0; i < 3; i++) {
-        const started = performance.now();
-        const result = await runProcess(process.execPath, [path.join(root, 'dist', 'bin', 'sks.js'), ...smoke.argv], {
-            cwd: root,
-            timeoutMs: 15_000,
-            maxOutputBytes: 128 * 1024,
-            env: { SKS_DISABLE_NETWORK: '1', SKS_DISABLE_UPDATE_CHECK: '1', SKS_PERF_MEASURE: '1' }
-        });
-        durations.push(Math.round(performance.now() - started));
-        exitCodes.push(result.code);
-        jsonContract ||= smoke.argv.includes('--json') ? parsesJson(result.stdout) : String(result.stdout || '').trim().length > 0;
-        blocked ||= result.code !== 0 && /block|required|missing|denied|explicit/i.test(`${result.stdout || ''}\n${result.stderr || ''}`);
-    }
-    durations.sort((a, b) => a - b);
-    const p95 = durations[Math.min(durations.length - 1, Math.ceil(durations.length * 0.95) - 1)] || 0;
-    const ok = smoke.kind === 'blocked_negative'
-        ? false
-        : p95 <= smoke.budget_p95_ms && exitCodes.every((code) => code === 0);
-    return { name: smoke.name, kind: smoke.kind || 'read_only', generated_at: new Date().toISOString(), p95_ms: p95, budget_p95_ms: smoke.budget_p95_ms, ok, blocked, exit_codes: exitCodes, json_contract: jsonContract };
-}
-function parsesJson(value) {
-    try {
-        JSON.parse(String(value || ''));
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function isMainModule() {
-    return process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1]);
-}
-//# sourceMappingURL=command-performance-scorecard-check.js.map

package/dist/scripts/config-managed-merge-callsite-coverage-check.js

@@ -1,212 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-import path from 'node:path';
-import { assertGate, emitGate, root } from './sks-1-18-gate-lib.js';
-const SCAN_DIRS = ['src/core', 'src/commands', 'src/cli'];
-const WRITE_CALL = /\b(?:writeTextAtomic|writeJsonAtomic|fs\.writeFile|fsp\.writeFile|writeFileSync|copyFile)\s*\(/;
-const PROTECTED_INDICATORS = [
-    ['codex-config-toml', /(?:config\.toml|generatedCodexConfigPath|codexLbConfigPath|\bconfigPath\b)/],
-    ['codex-auth-json', /(?:auth\.json|\bauthPath\b|codexAuthPath)/],
-    ['env-secret-file', /(?:(?:['"`][^'"`]*\.env[^'"`]*['"`])|sks-codex-lb\.env|\benvPath\b|status\.env_path|codexLbEnvPath)/],
-    ['mcp-json', /(?:mcp\.json|\bmcpPath\b|cursorMcpPath)/],
-    ['sneakoscope-config', /(?:\.sneakoscope\/config\.json|sneakoscopeConfigPath)/]
-];
-const ALLOWLIST = [
-    {
-        file: 'src/core/config/managed-config-merge.ts',
-        pattern: /writeTextAtomic|fs\.writeFile/,
-        reason: 'central managed config merge writer preserves protected keys and secret line hashes',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/config/secret-preservation.ts',
-        pattern: /writeTextAtomic|writeJsonAtomic|fs\.writeFile/,
-        reason: 'secret preservation guard backup, rollback, and sanitized report writer',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/init.ts',
-        pattern: /generatedCodexConfigPath|\.codex['"], ['"]SNEAKOSCOPE\.md|hooksPath|mergeManagedHookTrustStateToml/,
-        reason: 'setup/init harness writes run through setup-command or doctor-fix secret preservation guard',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/commands/doctor.ts',
-        pattern: /backupProjectConfigBeforeFix|writeTextAtomic|fsp\.writeFile|config_backup_path/,
-        reason: 'doctor --fix wraps runDoctor in secret preservation guard before project config repair',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/doctor/doctor-context7-repair.ts',
-        pattern: /backupConfig|writeTextAtomic|CONTEXT7_REMOTE_URL/,
-        reason: 'doctor Context7 repair writes a backup before replacing only the local stdio Context7 MCP block with the remote endpoint',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/doctor/doctor-codex-startup-repair.ts',
-        pattern: /backupConfig|writeTextAtomic|doctor-codex-startup-repair/,
-        reason: 'doctor startup repair writes backups before fixing stale Codex agent config_file paths and removing only missing-command MCP blocks',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/auto-review.ts',
-        pattern: /writeTextAtomic|writeProfileConfig|configPath/,
-        reason: 'auto-review profile migration rewrites bounded Codex profile tables while preserving non-profile config text',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/cli/context7-command.ts',
-        pattern: /writeTextAtomic|configPath/,
-        reason: 'explicit context7 setup appends non-secret MCP config and preserves existing secret lines',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/cli/xai-command.ts',
-        pattern: /writeTextAtomic|configPath/,
-        reason: 'explicit xAI setup appends MCP config and references env var names rather than raw secret values',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/cli/install-helpers.ts',
-        pattern: /writeTextAtomic|writeJsonAtomic|envPath|authPath|configPath|codexLbEnvPath|codexLbConfigPath|codexAuthPath/,
-        reason: 'postinstall/codex-lb setup callsites are covered by setup/update/doctor secret preservation guard fixtures',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/codex/codex-config-eperm-repair.ts',
-        pattern: /writeTextAtomic|configPath/,
-        reason: 'doctor config repair runs inside doctor-fix secret preservation guard',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/codex/agent-config-file-repair.ts',
-        pattern: /writeTextAtomic|configPath|missingAgentConfigFiles/,
-        reason: 'agent config_file repair rewrites only the project .codex/config.toml agent config_file paths and is covered by doctor/setup secret preservation fixtures',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/codex/codex-project-config-policy.ts',
-        pattern: /writeTextAtomic|configPath/,
-        reason: 'project config policy splitter preserves existing protected config content',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/codex-app/codex-app-fast-ui-repair.ts',
-        pattern: /writeTextAtomic|configPath/,
-        reason: 'Codex App fast UI repair is invoked from guarded doctor/setup flows',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/codex-control/codex-task-runner.ts',
-        pattern: /ensurePythonCodexLbConfig|CODEX_LB_API_KEY|config\.toml/,
-        reason: 'Python Codex task runner writes an isolated CODEX_HOME provider config referencing env_key only',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/codex-lb/codex-lb-setup.ts',
-        pattern: /installCodexLbShellProfileSnippet|upsertManagedBlock|envPath/,
-        reason: 'codex-lb shell profile setup writes a managed source block pointing at an env file, not the raw key',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/migration/migration-transaction-journal.ts',
-        pattern: /writeJsonAtomic|writeTextAtomic/,
-        reason: 'migration journal writes hashes and rollback metadata, not raw secret config values',
-        expires: '3.2.0'
-    },
-    {
-        file: 'src/core/mad-db/mad-db-runtime-profile.ts',
-        pattern: /codex-mad-db\.config\.toml|writeTextAtomic/,
-        reason: 'MAD-DB runtime profile writes only a mission-local temporary Codex profile and verifies read-only restoration on close',
-        expires: '4.6.0'
-    },
-    {
-        file: 'src/core/providers/glm/naruto/glm-naruto-trace.ts',
-        pattern: /mission-result\.json|sanitizeArtifact/,
-        reason: 'GLM Naruto trace writer persists sanitized mission-result proof artifacts, not raw env secret files',
-        expires: '4.6.0'
-    }
-];
-const sources = listSourceFiles().map((file) => ({
-    file,
-    text: fs.readFileSync(path.join(root, file), 'utf8')
-}));
-const suspicious = findProtectedWriteCallsites(sources);
-const uncovered = suspicious.filter((callsite) => !allowFor(callsite));
-const negative = findProtectedWriteCallsites([{
-        file: 'fixture/unprotected-config-write.ts',
-        text: "await writeTextAtomic(path.join(root, '.codex', 'config.toml'), 'model = \"x\"\\n');\n"
-    }]);
-const report = {
-    schema: 'sks.config-managed-merge-callsite-coverage.v1',
-    ok: uncovered.length === 0 && negative.length === 1 && !allowFor(negative[0]),
-    scanned_dirs: SCAN_DIRS,
-    protected_write_callsites: suspicious.length,
-    allowlist_entries: ALLOWLIST.map((entry) => ({
-        file: entry.file,
-        pattern: String(entry.pattern),
-        reason: entry.reason,
-        expires: entry.expires
-    })),
-    uncovered,
-    negative_fixture_detected: negative.length === 1,
-    generated_at: new Date().toISOString()
-};
-fs.mkdirSync(path.join(root, '.sneakoscope', 'reports'), { recursive: true });
-fs.writeFileSync(path.join(root, '.sneakoscope', 'reports', 'config-managed-merge-callsite-coverage.json'), `${JSON.stringify(report, null, 2)}\n`);
-assertGate(report.ok, 'managed config merge callsite coverage failed', report);
-emitGate('config:managed-merge-callsite-coverage', {
-    protected_write_callsites: suspicious.length,
-    allowlist_entries: ALLOWLIST.length
-});
-export function findProtectedWriteCallsites(files) {
-    const calls = [];
-    for (const sourceFile of files) {
-        const lines = sourceFile.text.split(/\r?\n/);
-        for (let index = 0; index < lines.length; index += 1) {
-            const line = lines[index] || '';
-            if (!WRITE_CALL.test(line))
-                continue;
-            const window = lines.slice(Math.max(0, index - 3), Math.min(lines.length, index + 4)).join('\n');
-            const indicators = PROTECTED_INDICATORS.filter(([, pattern]) => pattern.test(window)).map(([name]) => name);
-            if (!indicators.length)
-                continue;
-            calls.push({
-                file: sourceFile.file,
-                line: index + 1,
-                source: line.trim(),
-                window,
-                indicators
-            });
-        }
-    }
-    return calls;
-}
-function allowFor(callsite) {
-    if (!callsite)
-        return null;
-    const text = `${callsite.source}\n${callsite.window}`;
-    return ALLOWLIST.find((entry) => entry.file === callsite.file && entry.pattern.test(text)) || null;
-}
-function listSourceFiles() {
-    const files = [];
-    for (const dir of SCAN_DIRS)
-        collectTsFiles(path.join(root, dir), files);
-    return files.sort();
-}
-function collectTsFiles(dir, out) {
-    const rows = fs.readdirSync(dir, { withFileTypes: true });
-    for (const row of rows) {
-        const abs = path.join(dir, row.name);
-        const rel = path.relative(root, abs);
-        if (row.isDirectory()) {
-            if (row.name === 'scripts' || row.name === 'node_modules' || row.name === 'dist')
-                continue;
-            collectTsFiles(abs, out);
-            continue;
-        }
-        if (row.isFile() && row.name.endsWith('.ts'))
-            out.push(rel);
-    }
-}
-//# sourceMappingURL=config-managed-merge-callsite-coverage-check.js.map

package/dist/scripts/dollar-performance-scorecard-check.js

@@ -1,257 +0,0 @@
-#!/usr/bin/env node
-// @ts-nocheck
-import fs from 'node:fs';
-import path from 'node:path';
-import { performance } from 'node:perf_hooks';
-import { fileURLToPath } from 'node:url';
-import { assertGate, emitGate, importDist, root } from './sks-1-18-gate-lib.js';
-export const CRITICAL_DOLLAR_COMMANDS = new Set([
-    '$Naruto',
-    '$Super-Search',
-    '$SEO-GEO-OPTIMIZER',
-    '$DB',
-    '$MAD-SKS',
-    '$Commit-And-Push'
-]);
-export const DOLLAR_SMOKE_MAX_AGE_MS = 60 * 60 * 1000;
-if (isMainModule())
-    await main();
-export async function main() {
-    const [{ DOLLAR_COMMANDS_LITE }, routes] = await Promise.all([
-        importDist('core/routes/dollar-manifest-lite.js'),
-        importDist('core/routes.js')
-    ]);
-    const routePrompt = routes.routePrompt;
-    const rows = [];
-    for (const entry of DOLLAR_COMMANDS_LITE) {
-        const routePromptSmoke = measureRoutePromptSmoke(entry, routePrompt);
-        rows.push(scoreDollarEntry(entry, routePromptSmoke, commandRouteSmokeFor(entry, routePromptSmoke.routed)));
-    }
-    const average = rows.reduce((sum, row) => sum + row.score, 0) / Math.max(1, rows.length);
-    const blockers = [
-        ...rows.filter((row) => row.critical && row.score === 0).map((row) => `${row.command}:critical_smoke_missing_or_failed`),
-        ...rows.filter((row) => row.p95_ms > 20).map((row) => `${row.command}:route_prompt_p95_exceeded`),
-        ...(average >= 94 ? [] : [`average_below_94:${average.toFixed(2)}`])
-    ];
-    const report = {
-        schema: 'sks.dollar-performance-scorecard.v1',
-        ok: blockers.length === 0,
-        generated_at: new Date().toISOString(),
-        average_score: Number(average.toFixed(2)),
-        dollar_command_count: rows.length,
-        rows,
-        blockers
-    };
-    const out = path.join(root, '.sneakoscope', 'reports', 'dollar-performance-scorecard.json');
-    fs.mkdirSync(path.dirname(out), { recursive: true });
-    fs.writeFileSync(out, `${JSON.stringify(report, null, 2)}\n`);
-    assertGate(report.ok, 'dollar performance scorecard failed', report);
-    emitGate('dollar:performance-scorecard', { average_score: report.average_score, dollar_command_count: rows.length, report: '.sneakoscope/reports/dollar-performance-scorecard.json' });
-}
-export function scoreDollarEntry(entry, routePromptSmoke, commandSmoke, options = {}) {
-    const now = options.now ? new Date(options.now) : new Date();
-    const p95 = routePromptSmoke?.p95_ms ?? Infinity;
-    const metadataComplete = Boolean(entry.command && entry.route && entry.description);
-    const routed = routePromptSmoke?.routed || null;
-    const stopGateOrExempt = Boolean(routed?.stopGate || routed?.coverageExemptReason || entry.command === '$Help' || entry.command === '$Answer');
-    const routePromptOk = classifyDollarSmoke(routePromptSmoke, now) === 'pass';
-    const commandSmokeOk = classifyDollarSmoke(commandSmoke, now) === 'pass';
-    const metadataSynced = isDollarMetadataSynced(entry, routed, commandSmoke);
-    const lifecycleReasoned = !((routed?.hidden === true || routed?.deprecated === true) && !routed?.hiddenReason && !routed?.deprecationReason && !routed?.deprecationMessage);
-    const critical = CRITICAL_DOLLAR_COMMANDS.has(entry.command);
-    if (critical && (!routePromptOk || !commandSmokeOk || !metadataSynced || !lifecycleReasoned)) {
-        return {
-            command: entry.command,
-            route: entry.route,
-            critical,
-            p95_ms: Number.isFinite(p95) ? Number(p95.toFixed(3)) : null,
-            score: 0,
-            route_prompt_smoke: classifyDollarSmoke(routePromptSmoke, now),
-            command_route_smoke: classifyDollarSmoke(commandSmoke, now),
-            command_evidence_tier: criticalDollarEvidenceTier(commandSmoke),
-            metadata_synced: metadataSynced,
-            lifecycle_reasoned: lifecycleReasoned,
-            routed_id: routed?.id || null,
-            stop_gate: routed?.stopGate || null
-        };
-    }
-    const cliSmokeOrPrompt = Boolean(commandSmokeOk);
-    const highRiskPolicy = !critical || !/\b(?:MAD|DB|Computer|CU|Commit|Push|Release)\b/i.test(entry.command) || Boolean(routed?.requiredSkills || routed?.lifecycle);
-    const score = (routePromptOk && p95 <= 20 ? 20 : 0) +
-        (metadataComplete ? 20 : 0) +
-        (stopGateOrExempt ? 20 : 0) +
-        (cliSmokeOrPrompt ? 20 : 0) +
-        (highRiskPolicy && metadataSynced && lifecycleReasoned ? 20 : 0);
-    const cappedScore = critical ? Math.min(score, criticalDollarEvidenceMaxScore(commandSmoke)) : score;
-    return {
-        command: entry.command,
-        route: entry.route,
-        critical,
-        p95_ms: Number.isFinite(p95) ? Number(p95.toFixed(3)) : null,
-        score: cappedScore,
-        route_prompt_smoke: classifyDollarSmoke(routePromptSmoke, now),
-        command_route_smoke: classifyDollarSmoke(commandSmoke, now),
-        command_evidence_tier: criticalDollarEvidenceTier(commandSmoke),
-        metadata_synced: metadataSynced,
-        lifecycle_reasoned: lifecycleReasoned,
-        routed_id: routed?.id || null,
-        stop_gate: routed?.stopGate || null
-    };
-}
-export function measureRoutePromptSmoke(entry, routePrompt) {
-    const timings = [];
-    let routed = null;
-    for (let i = 0; i < 25; i++) {
-        const started = performance.now();
-        routed = routePrompt(`${entry.command} scorecard smoke`);
-        timings.push(performance.now() - started);
-    }
-    timings.sort((a, b) => a - b);
-    const p95 = timings[Math.min(timings.length - 1, Math.ceil(timings.length * 0.95) - 1)] || 0;
-    return {
-        kind: 'route_prompt',
-        ok: Boolean(routed?.id),
-        generated_at: new Date().toISOString(),
-        p95_ms: p95,
-        routed
-    };
-}
-export function commandRouteSmokeFor(entry, routed = null) {
-    const reportSmoke = reportBackedDollarSmoke(entry, routed);
-    if (reportSmoke)
-        return reportSmoke;
-    const cliEntrypoint = routed?.cliEntrypoint || '';
-    const hasActualCli = /^sks\s+/i.test(cliEntrypoint);
-    const synced = isDollarMetadataSynced(entry, routed, null);
-    if (!CRITICAL_DOLLAR_COMMANDS.has(entry.command) && routed?.id && synced) {
-        return {
-            kind: 'route_prompt_metadata',
-            ok: true,
-            generated_at: new Date().toISOString(),
-            command: entry.command,
-            route: entry.route,
-            routed_id: routed.id,
-            metadata_synced: synced
-        };
-    }
-    return {
-        kind: hasActualCli ? 'cli_entrypoint_metadata' : 'metadata',
-        ok: false,
-        generated_at: new Date().toISOString(),
-        command: entry.command,
-        route: entry.route,
-        cli_entrypoint: cliEntrypoint || null,
-        metadata_synced: synced
-    };
-}
-export function reportBackedDollarSmoke(entry, routed = null) {
-    const synced = isDollarMetadataSynced(entry, routed, null);
-    const now = new Date().toISOString();
-    if (entry.command === '$Naruto') {
-        const real = readReport('naruto-real-write-e2e.json');
-        if (real?.ok === true)
-            return smoke('read_only', true, now, synced, { report: 'naruto-real-write-e2e.json' });
-        const hermetic = readReport('naruto-write-e2e.json');
-        if (hermetic?.ok === true)
-            return smoke('fixture', true, now, synced, { report: 'naruto-write-e2e.json' });
-    }
-    if (entry.command === '$Super-Search') {
-        const offline = readReport('super-search-offline-contract.json');
-        const local = readReport('super-search-local-http-smoke.json');
-        if (offline?.ok === true || local?.ok === true)
-            return smoke('read_only', true, now, synced, { report: offline?.ok === true ? 'super-search-offline-contract.json' : 'super-search-local-http-smoke.json' });
-    }
-    if (entry.command === '$SEO-GEO-OPTIMIZER') {
-        const metadata = readReport('seo-metadata-sync.json');
-        const truth = readReport('seo-marketing-truthfulness.json');
-        if (metadata?.ok === true && truth?.ok === true)
-            return smoke('read_only', true, now, synced, { report: 'seo-metadata-sync.json+seo-marketing-truthfulness.json' });
-    }
-    const highRisk = highRiskSmokeForDollar(entry.command);
-    if (highRisk)
-        return { ...highRisk, metadata_synced: synced };
-    return null;
-}
-function highRiskSmokeForDollar(command) {
-    const report = readReport('high-risk-contracts.json');
-    const target = {
-        '$DB': 'db',
-        '$MAD-SKS': 'mad-sks',
-        '$Commit-And-Push': 'commit-and-push'
-    }[command];
-    if (!target || !Array.isArray(report?.cli_negative_smokes))
-        return null;
-    const row = report.cli_negative_smokes.find((item) => item?.target === target);
-    if (!row)
-        return null;
-    return {
-        kind: 'blocked_negative',
-        ok: false,
-        blocked: row.blocked === true,
-        generated_at: report.generated_at || new Date().toISOString(),
-        command,
-        evidence: row
-    };
-}
-function smoke(kind, ok, generatedAt, metadataSynced, extra = {}) {
-    return { kind, ok, generated_at: generatedAt, metadata_synced: metadataSynced, ...extra };
-}
-function readReport(fileName) {
-    try {
-        return JSON.parse(fs.readFileSync(path.join(root, '.sneakoscope', 'reports', fileName), 'utf8'));
-    }
-    catch {
-        return null;
-    }
-}
-export function isDollarMetadataSynced(entry, routed, commandSmoke = null) {
-    if (commandSmoke?.metadata_synced === false)
-        return false;
-    if (!routed)
-        return Boolean(entry.command && entry.route);
-    const commandSynced = entry.command === routed.command || (Array.isArray(routed.dollarAliases) && routed.dollarAliases.includes(entry.command));
-    const routeSynced = !entry.route || !routed.route || entry.route === routed.route;
-    return Boolean(commandSynced && routeSynced);
-}
-export function criticalDollarEvidenceTier(smoke) {
-    if (!smoke)
-        return 'metadata';
-    if (smoke.kind === 'fixture')
-        return 'fixture';
-    if (smoke.kind === 'blocked_negative')
-        return 'blocked_negative';
-    if (smoke.kind === 'dry_run')
-        return 'dry_run';
-    if (smoke.kind === 'read_only' || smoke.kind === 'cli_read_only')
-        return 'read_only';
-    return 'metadata';
-}
-export function criticalDollarEvidenceMaxScore(smoke) {
-    const tier = criticalDollarEvidenceTier(smoke);
-    if (tier === 'metadata')
-        return 0;
-    if (tier === 'fixture')
-        return 70;
-    if (tier === 'blocked_negative')
-        return 90;
-    return 100;
-}
-export function classifyDollarSmoke(smoke, now = new Date()) {
-    if (!smoke)
-        return 'missing';
-    if (isDollarSmokeStale(smoke, now))
-        return 'stale';
-    if (smoke.kind === 'blocked_negative')
-        return smoke.blocked === true && smoke.ok !== true ? 'pass' : 'failed';
-    return smoke.ok === true ? 'pass' : 'failed';
-}
-export function isDollarSmokeStale(smoke, now = new Date()) {
-    if (!smoke.generated_at)
-        return false;
-    const generated = new Date(smoke.generated_at).getTime();
-    return !Number.isFinite(generated) || now.getTime() - generated > DOLLAR_SMOKE_MAX_AGE_MS;
-}
-function isMainModule() {
-    return process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1]);
-}
-//# sourceMappingURL=dollar-performance-scorecard-check.js.map