[stack 22/40] Verification tooling producers

apps/desktop/src-tauri/tests/fixtures/surface-parity/evidence-scope-v1.json

@@ -0,0 +1 @@
+{"schema_version":"codevetter.surface-parity-fixture/v1","authority":{"rust":"authoritative_resolver","cli":"supervised_projection","native":"supervised_projection","mcp":"read_only_projection","mcp_may_execute":false},"request":{"consumer":"performance","kind":"flow","value":"coupon total"},"repository":{"files":{"vitest.config.ts":"export default {};\n","src/cart/coupon.ts":"export const couponTotal = (value: number) => value;\n","src/cart/coupon.test.ts":"import { couponTotal } from './coupon';\ntest('coupon total', () => couponTotal(2));\n"}},"expected":{"schema_version":1,"status":"ready","candidate_count":1,"first_candidate":{"id":"scope-336fa25dbb5e59fc","adapter":"vitest","target":"src/cart/coupon.test.ts","confidence_milli":950,"testing_supported":true,"performance_supported":true},"limitation_contains":"Human-language scope is a deterministic local search"},"canonical_receipt":{"schema_version":1,"plan_id":"scope:surface-parity-v1","repository_revision":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","dirty":false,"kind":"flow","original_input":"coupon total","consumer":"performance","status":"ready","candidates":[{"id":"scope-336fa25dbb5e59fc","adapter":"vitest","target":"src/cart/coupon.test.ts","name":null,"reason":"Matched the described flow through local path/content evidence (score 35)","source_paths":["src/cart/coupon.test.ts","src/cart/coupon.ts"],"confidence_milli":950,"testing_supported":true,"performance_supported":true}],"uncovered_paths":[],"limitations":["Human-language scope is a deterministic local search, not model interpretation."]}}

knip.json

@@ -34,9 +34,12 @@
     "ccusage"
   ],
   "ignoreBinaries": [
+    "actionlint",
+    "cargo-deny",
     "ditto",
     "du",
     "go",
+    "gitleaks",
     "lipo",
     "lsof",
     "netstat",

package.json

@@ -7,11 +7,22 @@
   ],
   "scripts": {
     "bench:public": "node scripts/run-public-benchmark.mjs",
+    "bench:cross-review": "node scripts/run-cross-review-benchmark.mjs",
     "bench:catch-rate": "node scripts/run-catch-rate-benchmark.mjs",
     "bench:graph-context": "node scripts/run-structural-context-evaluation.mjs",
     "bench:curation": "node scripts/report-benchmark-curation.mjs",
     "bench:1brc": "node --test benchmarks/runtime-challenges/temperature-aggregation/temperature-aggregation.test.mjs",
     "bench:1brc:campaign": "node benchmarks/runtime-challenges/temperature-aggregation/campaign.mjs",
+    "bench:native-bridge": "sh scripts/run-native-bridge-benchmark.sh",
+    "native:data-continuity": "node scripts/qualify-native-data-continuity.mjs",
+    "native:installed-upgrade:qualify": "node scripts/qualify-native-installed-upgrade.mjs",
+    "native:package:qualify": "node scripts/qualify-native-package.mjs",
+    "native:release:inspect": "node scripts/inspect-native-release-readiness.mjs",
+    "native:appcast:inspect": "node scripts/inspect-native-appcast.mjs",
+    "native:notarization:prove": "node scripts/create-native-notarization-proof.mjs",
+    "native:package:finalize": "node scripts/finalize-native-package-archives.mjs",
+    "native:review:render": "node scripts/render-native-owner-review.mjs render",
+    "native:runtime:compare": "node scripts/compare-desktop-runtime.mjs",
     "bench:readiness": "node scripts/report-benchmark-curation.mjs benchmarks/agent-prs/public-copilot-corpus.json --require-publishable",
     "bench:new-case": "node scripts/create-benchmark-case.mjs",
     "bench:curate-public": "node scripts/curate-public-agent-prs.mjs",
@@ -47,14 +58,34 @@
     "verification:ingest": "node scripts/verification-receipts/cli.mjs ingest",
     "verification:compare": "node scripts/verification-receipts/cli.mjs compare",
     "verification:mcp": "node scripts/verification-receipts/mcp.mjs",
+    "verification:dogfood": "node scripts/verification-receipts/dogfood-cli.mjs",
+    "capabilities:sync": "node scripts/sync-capability-registry.mjs",
+    "capabilities:check": "node scripts/sync-capability-registry.mjs --check",
     "test:benchmark": "node --test scripts/run-catch-rate-benchmark.test.mjs scripts/run-structural-context-evaluation.test.mjs",
+    "test:cross-review-benchmark": "node --test scripts/run-cross-review-benchmark.test.mjs",
     "test:graph-context": "node --test scripts/run-structural-context-evaluation.test.mjs",
     "test:corpus-contracts": "node --test scripts/agent-task-corpus/*.test.mjs",
     "test:context-provider-plan": "node --test scripts/agent-task-corpus/context-provider-plan.test.mjs",
     "test:retrieval": "node --test scripts/context-retrieval/*.test.mjs scripts/context-retrieval/adapters/*.test.mjs",
     "test:runtime-failure-capsule": "node --test scripts/runtime-failure-capsule/*.test.mjs",
     "test:verification-receipts": "node --test scripts/verification-receipts/*.test.mjs",
     "test:automation": "node --test scripts/emit-foundry-receipt.test.mjs",
+    "test:native-data-continuity": "node --test scripts/qualify-native-data-continuity.test.mjs",
+    "test:native-installed-upgrade": "node --test scripts/qualify-native-installed-upgrade.test.mjs",
+    "test:native-package": "node --test scripts/qualify-native-package.test.mjs",
+    "test:native-review-gallery": "node --test scripts/owner-review-gallery.test.mjs",
+    "test:native-review-render": "node --test scripts/render-native-owner-review.test.mjs",
+    "test:native-release": "node --test scripts/inspect-native-release-readiness.test.mjs",
+    "test:native-appcast": "node --test scripts/inspect-native-appcast.test.mjs",
+    "test:native-notarization": "node --test scripts/create-native-notarization-proof.test.mjs",
+    "test:native-package-finalize": "node --test scripts/finalize-native-package-archives.test.mjs",
+    "test:native-runtime-compare": "node --test scripts/compare-desktop-runtime.test.mjs",
+    "native:build:release": "node scripts/run-native-checks.mjs --release",
+    "test:native": "node scripts/run-native-checks.mjs",
+    "test:native:background": "node scripts/run-native-checks.mjs --background",
+    "test:native:ui": "node scripts/run-native-checks.mjs --ui",
+    "test:native:full": "node scripts/run-native-checks.mjs --full",
+    "test:native-runner": "node --test scripts/run-native-checks.test.mjs",
     "test:coverage": "pnpm --filter @code-reviewer/desktop test:coverage",
     "verify": "pnpm --filter @code-reviewer/desktop verify",
     "prepare": "husky || true",
@@ -68,6 +99,13 @@
     "quality:complexity": "node scripts/check-changed-complexity.mjs",
     "quality:cycles": "biome lint --only=suspicious/noImportCycles .",
     "quality:dependencies": "pnpm audit --audit-level high",
+    "quality:sarif": "node scripts/run-biome-sarif.mjs",
+    "quality:secrets": "gitleaks git --no-banner --redact=100 .",
+    "quality:secrets:staged": "gitleaks git --pre-commit --staged --no-banner --redact=100 .",
+    "quality:mutation:accounting": "pnpm --package @stryker-mutator/core@10.0.0 --package typescript@5.9.3 dlx stryker run scripts/stryker-accounting.config.mjs",
+    "quality:rust-policy": "cargo-deny --manifest-path apps/desktop/src-tauri/Cargo.toml --config apps/desktop/src-tauri/deny.toml --frozen check --hide-inclusion-graph licenses sources bans",
+    "quality:vulnerabilities": "node scripts/run-osv-offline.mjs",
+    "quality:workflows": "actionlint",
     "quality:duplication": "jscpd apps/desktop/src apps/landing-page-astro/src scripts --min-lines 8 --min-tokens 60 --mode strict --format typescript,tsx,javascript --cross-formats js-ts --ignore '**/fixtures/**,**/generated/**,**/gen/**,**/node_modules/**,**/dist/**,**/out/**,**/coverage/**' --threshold 0.81 --reporters console,threshold --no-colors --no-tips",
     "retrieval:discover": "node scripts/context-retrieval/discover-candidates.mjs --registry benchmarks/context-retrieval/candidates.json --fresh-since 2026-02-22"
   },
@@ -79,10 +117,14 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.1",
+    "@friedemannsommer/lcov-parser": "8.0.0",
+    "@size-limit/file": "13.0.3",
+    "fast-xml-parser": "5.11.1",
     "husky": "^9.1.7",
     "jscpd": "5.0.14",
     "knip": "^6.6.3",
     "lint-staged": "^16.4.0",
+    "size-limit": "13.0.3",
     "ultracite": "7.10.2"
   },
   "optionalDependencies": {
@@ -99,9 +141,11 @@
       "js-yaml": "4.3.1",
       "nanoid": "3.3.18",
       "postcss": "8.5.26",
+      "postcss-nested>postcss-selector-parser": "6.1.3",
       "sharp": "0.35.3",
       "svgo": "4.0.2",
       "tsx>esbuild": "0.28.1",
+      "tailwindcss>postcss-selector-parser": "6.1.3",
       "undici": "7.29.0",
       "wrangler>esbuild": "0.28.1",
       "ws": "8.21.3"