sneakoscope 6.0.3 → 6.1.2

package/dist/scripts/prepublish-release-check-or-fast.js

@@ -1,17 +1,14 @@
 #!/usr/bin/env node
 // @ts-nocheck
-// Publish-time release check coordinator.
+// Publish-time release stamp verifier.
 //
-// Fast path: accept a current release-check stamp.
-// Repair path: if the stamp is missing/stale, run the authoritative full
-// `release:check:full` once, then require both the fast check and the
-// authoritative stamp verifier to pass.
-//
-// This keeps direct `npm publish` usable without weakening the publish gate:
-// stale stamp repair is the full release gate, not a synthetic stamp write.
+// The final registry operation is deliberately not a release-check runner.
+// It accepts only an authoritative full-release stamp that is already current
+// and fails closed when the stamp is missing or stale. Operators refresh proof
+// separately with `npm run release:check:full` so publish latency stays bounded
+// and a registry command cannot silently launch the entire canonical test DAG.
 import { spawnSync } from 'node:child_process';
 import process from 'node:process';
-const npmCmd = process.platform === 'win32' ? 'npm.cmd' : 'npm';
 function runFastCheck() {
     const result = spawnSync(process.execPath, ['./dist/scripts/prepublish-fast-check.js'], {
         cwd: process.cwd(),
@@ -22,10 +19,7 @@ function runFastCheck() {
         process.stdout.write(result.stdout);
     if (result.stderr)
         process.stderr.write(result.stderr);
-    return {
-        ...result,
-        report: parseLastJsonLine(result.stdout)
-    };
+    return result;
 }
 function runStampVerify() {
     const result = spawnSync(process.execPath, ['./dist/scripts/release-check-stamp.js', 'verify'], {
@@ -39,83 +33,26 @@ function runStampVerify() {
         process.stderr.write(result.stderr);
     return result;
 }
-function runReleaseCheck() {
-    const override = process.env.SKS_PREPUBLISH_RELEASE_CHECK_CMD;
-    if (override) {
-        return spawnSync(override, {
-            cwd: process.cwd(),
-            encoding: 'utf8',
-            env: process.env,
-            shell: true,
-            stdio: 'inherit'
-        });
-    }
-    return spawnSync(npmCmd, ['run', 'release:check:full'], {
-        cwd: process.cwd(),
-        encoding: 'utf8',
-        env: process.env,
-        stdio: 'inherit'
-    });
+function failClosed(status = 1) {
+    console.error('Prepublish requires a current authoritative full-release stamp.');
+    console.error('Run `npm run release:check:full` separately, then rerun the publish command.');
+    process.exit(status || 1);
 }
-function parseLastJsonLine(text = '') {
-    const lines = String(text).trim().split(/\n/).filter(Boolean).reverse();
-    for (const line of lines) {
-        try {
-            return JSON.parse(line);
-        }
-        catch {
-            // Keep looking; child processes may print non-JSON context.
-        }
-    }
-    return null;
-}
-function isStaleOrMissingStamp(report) {
-    if (!report)
-        return false;
-    if (report.reason === 'no_release_stamp')
-        return true;
-    const mismatched = Array.isArray(report.mismatched) ? report.mismatched : [];
-    return mismatched.some((name) => [
-        'package_version',
-        'package_json_sha256',
-        'package_files_list_sha256',
-        'package_files_sha256',
-        'dist_build_sha256',
-        'dist_file_count',
-        'release_gate_sha256',
-        'release_check_sha256',
-        'source_digest',
-        'source_file_count',
-        'stamp_unreadable'
-    ].includes(name));
-}
-function repairAndVerify() {
-    if (process.env.SKS_PREPUBLISH_RUN_RELEASE_CHECK_ON_STALE === '0') {
-        console.error('Prepublish release-check auto-repair disabled by SKS_PREPUBLISH_RUN_RELEASE_CHECK_ON_STALE=0.');
-        process.exit(1);
-    }
-    console.error('Prepublish release stamp is stale or missing; running full `npm run release:check:full` before publish.');
-    const releaseCheck = runReleaseCheck();
-    if (releaseCheck.status !== 0)
-        process.exit(releaseCheck.status || 1);
-    const second = runFastCheck();
-    if (second.status !== 0)
-        process.exit(second.status || 1);
-    const secondStamp = runStampVerify();
-    process.exit(secondStamp.status === 0 ? 0 : (secondStamp.status || 1));
+function blockLifecyclePublish() {
+    console.error('Lifecycle-enabled npm publish is unsupported because prepack would rebuild after authorization.');
+    console.error('Run `npm run publish:prep-ignore-scripts`, then use `npm publish --ignore-scripts` only if you are the repository maintainer performing the separate publish handoff.');
+    process.exit(2);
 }
 function main() {
-    const first = runFastCheck();
-    if (first.status === 0) {
-        const stamp = runStampVerify();
-        if (stamp.status === 0)
-            process.exit(0);
-        repairAndVerify();
-    }
-    if (!isStaleOrMissingStamp(first.report)) {
-        process.exit(first.status || 1);
+    if (process.argv.includes('--block-lifecycle-publish') || process.env.npm_lifecycle_event === 'prepublishOnly') {
+        blockLifecyclePublish();
     }
-    repairAndVerify();
+    const fast = runFastCheck();
+    if (fast.status !== 0)
+        failClosed(fast.status);
+    const stamp = runStampVerify();
+    if (stamp.status !== 0)
+        failClosed(stamp.status);
 }
 main();
 //# sourceMappingURL=prepublish-release-check-or-fast.js.map

package/dist/scripts/product-design-plugin-routing-check.js

@@ -25,7 +25,7 @@ assertGate(PRODUCT_DESIGN_PLUGIN.app_server.install_params.remoteMarketplaceName
 assertGate(PRODUCT_DESIGN_PLUGIN.app_server.read_params.pluginName === PRODUCT_DESIGN_PLUGIN.remote_plugin_id, 'plugin/read must use Product Design remote plugin id');
 assertGate(PRODUCT_DESIGN_PLUGIN.app_server.install_params.pluginName === PRODUCT_DESIGN_PLUGIN.remote_plugin_id, 'plugin/install must use Product Design remote plugin id');
 assertGate(PRODUCT_DESIGN_PLUGIN.app_server.list_params.marketplaceKinds.includes('vertical'), 'plugin/list must query vertical marketplaces');
-for (const skill of ['audit', 'design-qa', 'get-context', 'ideate', 'image-to-code', 'prototype', 'research', 'share', 'url-to-code', 'user-context']) {
+for (const skill of ['audit', 'design-qa', 'get-context', 'ideate', 'image-to-code', 'index', 'research', 'share', 'url-to-code', 'user-context']) {
     assertGate(PRODUCT_DESIGN_REQUIRED_SKILLS.includes(skill), `Product Design required skill missing: ${skill}`);
 }
 assertGate(PRODUCT_DESIGN_PIPELINE_STAGES.length >= 5, 'Product Design pipeline stage map too small');

package/dist/scripts/release-affected-selector-check.js

@@ -32,10 +32,83 @@ const schedulerScriptOnly = selectorMod.selectAffectedReleaseGates(root, manifes
 const schedulerScriptIds = new Set(schedulerScriptOnly.selection.selected_gate_ids.map(String));
 assertGate(schedulerScriptIds.has('scheduler:comprehensive'), 'scheduler script change must select scheduler gates', schedulerScriptOnly.selection);
 assertGate(![...schedulerScriptIds].some((id) => id.startsWith('research:') || id.startsWith('zellij:')), 'scheduler script change must not expand to unrelated route gates', schedulerScriptOnly.selection);
+const officialSubagentOnly = selectorMod.selectAffectedReleaseGates(root, manifest, gates, {
+    changedFiles: ['src/core/subagents/subagent-evidence.ts'],
+    preset: 'affected'
+});
+const officialSubagentIds = new Set(officialSubagentOnly.selection.selected_gate_ids.map(String));
+assertGate(officialSubagentIds.has('naruto:canonical-stop-gate'), 'official subagent source changes must select the canonical Naruto stop gate', officialSubagentOnly.selection);
+for (const changedFile of [
+    'src/core/codex-lb/codex-lb-tool-output-recovery.ts',
+    'src/core/codex/codex-cli-update.ts',
+    'src/core/codex-control/codex-reliability-shield.ts',
+    'src/core/hooks-runtime.ts',
+    'src/commands/codex.ts',
+    'src/commands/codex-lb.ts',
+    'src/commands/doctor.ts',
+    'src/core/preflight/parallel-preflight-engine.ts'
+]) {
+    const selectedForRuntime = selectorMod.selectAffectedReleaseGates(root, manifest, gates, {
+        changedFiles: [changedFile],
+        preset: 'affected'
+    });
+    const runtimeIds = new Set(selectedForRuntime.selection.selected_gate_ids.map(String));
+    assertGate(runtimeIds.has('test:codex-runtime-recovery'), `Codex runtime change must select test:codex-runtime-recovery (${changedFile})`, selectedForRuntime.selection);
+}
+const doctorOnly = selectorMod.selectAffectedReleaseGates(root, manifest, gates, {
+    changedFiles: ['src/commands/doctor.ts'],
+    preset: 'affected'
+});
+const doctorIds = new Set(doctorOnly.selection.selected_gate_ids.map(String));
+assertGate(doctorIds.has('test:menubar-doctor'), 'Doctor changes must select test:menubar-doctor', doctorOnly.selection);
+for (const changedFile of [
+    'src/cli/router.ts',
+    'src/cli/command-registry.ts',
+    'src/bin/fast-inline.ts',
+    'src/bin/sks-dispatch.ts'
+]) {
+    const selectedForCommands = selectorMod.selectAffectedReleaseGates(root, manifest, gates, {
+        changedFiles: [changedFile],
+        preset: 'affected'
+    });
+    const commandIds = new Set(selectedForCommands.selection.selected_gate_ids.map(String));
+    assertGate(commandIds.has('test:commands-regression'), `CLI implementation changes must select test:commands-regression (${changedFile})`, selectedForCommands.selection);
+}
+for (const changedFile of [
+    'src/core/runtime/task-profile.ts',
+    'src/core/routes.ts',
+    'src/core/subagents/naruto-help-contract.ts',
+    'src/core/commands/naruto-command.ts',
+    'src/bin/fast-inline.ts',
+    'test/blackbox/naruto-shadow-clone-swarm-packed.test.mjs'
+]) {
+    const selectedForPolicy = selectorMod.selectAffectedReleaseGates(root, manifest, gates, {
+        changedFiles: [changedFile],
+        preset: 'affected'
+    });
+    const policyIds = new Set(selectedForPolicy.selection.selected_gate_ids.map(String));
+    assertGate(policyIds.has('test:official-subagent-policy'), `Task-profile, route, or help changes must select test:official-subagent-policy (${changedFile})`, selectedForPolicy.selection);
+}
+for (const changedFile of [
+    'src/cli/command-manifest-lite.ts',
+    'src/cli/command-registry.ts',
+    'src/core/routes/dollar-manifest-lite.ts',
+    'src/core/feature-registry.ts',
+    'docs/feature-inventory.md',
+    'test/unit/feature-registry.test.mjs'
+]) {
+    const selectedForFeatures = selectorMod.selectAffectedReleaseGates(root, manifest, gates, {
+        changedFiles: [changedFile],
+        preset: 'affected'
+    });
+    const featureIds = new Set(selectedForFeatures.selection.selected_gate_ids.map(String));
+    assertGate(featureIds.has('all-features:deep-completion'), `Command manifest, registry, inventory, or feature-test changes must select all-features:deep-completion (${changedFile})`, selectedForFeatures.selection);
+}
 emitGate('release:affected-selector', {
     selected: ids.size,
     skipped: selected.selection.skipped_gate_ids.length,
     release_script_selected: releaseScriptIds.size,
-    scheduler_script_selected: schedulerScriptIds.size
+    scheduler_script_selected: schedulerScriptIds.size,
+    official_subagent_selected: officialSubagentIds.size
 });
 //# sourceMappingURL=release-affected-selector-check.js.map